Function at 0x1008f8a0
Capabilities:
Check os version
Set file attributes

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10140e7c
mov eax, dword fs:[0]
push eax
sub esp, 0x228
mov eax, dword [0x10184f40]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov byte [ebp - 0x231], dl
mov edi, ecx
xor eax, eax
mov dword [ebp - 0x74], 7
mov dword [ebp - 0x78], 0
mov word [ebp - 0x88], ax
mov dword [ebp - 4], eax
mov dword [ebp - 0x8c], 7
mov dword [ebp - 0x90], eax
mov word [ebp - 0xa0], ax
sub esp, 0x18
mov byte [ebp - 4], 1
mov ecx, esp
mov dword [ecx + 0x10], eax
mov dword [ecx + 0x14], eax
mov dword [ecx + 0x14], 0xf
cmp dword [ecx + 0x14], 0x10
mov dword [ecx + 0x10], eax
jb 0x1008f92a
mov eax, dword [ecx]
jmp 0x1008f92c
mov eax, ecx
push 0x2c
push str.D072D8E8A2B2A9698A3582ABA0AEBF688E3F82FBF7F0
mov byte [eax], 0
call fcn.1006f630
lea ecx, [ebp - 0x100]
call fcn.1010cef0
mov ecx, esp
mov byte [ebp - 4], 2
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
mov dword [ecx + 0x14], 0xf
cmp dword [ecx + 0x14], 0x10
mov dword [ecx + 0x10], 0
jb 0x1008f972
mov eax, dword [ecx]
jmp 0x1008f974
mov eax, ecx
push 0x2c
push str.D072D8E8A2B2A96B8E3682ABA0AEBF688E3F82FBF7F0
mov byte [eax], 0
call fcn.1006f630
lea ecx, [ebp - 0xe8]
call fcn.1010cef0
mov ecx, esp
mov byte [ebp - 4], 3
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
mov dword [ecx + 0x14], 0xf
cmp dword [ecx + 0x14], 0x10
mov dword [ecx + 0x10], 0
jb 0x1008f9ba
mov eax, dword [ecx]
jmp 0x1008f9bc
mov eax, ecx
push 0x3e
push str.D072D8E8A2B2A92FCF7182AAABA9B376DB69C1B7A7AEB7698B3581A8A8ADB5
mov byte [eax], 0
call fcn.1006f630
lea ecx, [ebp - 0x118]
call fcn.1010cef0
add esp, 0x18
mov byte [ebp - 4], 4
lea esi, [ebp - 0x100]
cmp dword [ebp - 0xec], 0x10
lea ebx, [ebp - 0xe8]
push 0
cmovae esi, dword [ebp - 0x100]
cmp dword [ebp - 0xd4], 0x10
cmovae ebx, dword [ebp - 0xe8]
call dword [sym.imp.ole32.dll_CoInitialize]
mov ecx, edi
call fcn.1008f410
lea ecx, [ebp - 0x40]
call fcn.1008ee60
mov edx, eax
mov byte [ebp - 4], 5
cmp dword [edx + 0x14], 8
jb 0x1008fa2a
mov edx, dword [edx]
cmp word [edx], 0
jne 0x1008fa34
xor ecx, ecx
jmp 0x1008fa53
mov ecx, edx
lea eax, [ecx + 2]
mov dword [ebp - 0x230], eax
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x1008fa40
sub ecx, dword [ebp - 0x230]
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x88]
call fcn.10073cf0
mov byte [ebp - 4], 4
mov eax, dword [ebp - 0x2c]
cmp eax, 8
jb 0x1008fa79
inc eax
lea ecx, [ebp - 0x40]
push eax
push dword [ebp - 0x40]
call fcn.1006f8c0
lea ecx, [ebp - 0x40]
call fcn.1007b6c0
mov edx, eax
mov byte [ebp - 4], 6
cmp dword [edx + 0x14], 8
jb 0x1008fa8f
mov edx, dword [edx]
cmp word [edx], 0
jne 0x1008fa99
xor ecx, ecx
jmp 0x1008fab7
mov ecx, edx
lea eax, [ecx + 2]
mov dword [ebp - 0x230], eax
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x1008faa4
sub ecx, dword [ebp - 0x230]
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0xa0]
call fcn.10073cf0
mov eax, dword [ebp - 0x2c]
cmp eax, 8
jb 0x1008fad9
inc eax
lea ecx, [ebp - 0x40]
push eax
push dword [ebp - 0x40]
call fcn.1006f8c0
xor eax, eax
mov dword [ebp - 0x14], 7
mov dword [ebp - 0x18], 0
mov word [ebp - 0x28], ax
mov dword [ebp - 0xa4], 7
mov dword [ebp - 0xa8], eax
mov word [ebp - 0xb8], ax
push str.Google
push edi
mov byte [ebp - 4], 8
call fcn.1012b82d
add esp, 8
test eax, eax
je 0x1009017c
push 0x10177e00
push edi
call fcn.1012b82d
add esp, 8
test eax, eax
je 0x1009017c
push str.Edge
push edi
call fcn.1012b82d
add esp, 8
test eax, eax
je 0x100900d7
push 0x10177e1c
push edi
call fcn.1012b82d
add esp, 8
test eax, eax
je 0x100900d7
push str.Theworld
push edi
call fcn.1012b82d
add esp, 8
test eax, eax
je 0x100900c0
push 0x10177e10
push edi
call fcn.1012b82d
add esp, 8
test eax, eax
je 0x100900c0
push str.2345
push edi
call fcn.1012b82d
add esp, 8
test eax, eax
je 0x10090206
push 0x10177f5c
push edi
call fcn.1012b82d
add esp, 8
test eax, eax
je 0x10090206
push str.Maxthon
push edi
call fcn.1012b82d
add esp, 8
test eax, eax
je 0x10090206
push 0x10177f68
push edi
call fcn.1012b82d
add esp, 8
test eax, eax
je 0x10090206
push 0x10177e2c
push edi
call fcn.1012b82d
add esp, 8
test eax, eax
je 0x1009001a
push 0x10177e30
push edi
call fcn.1012b82d
add esp, 8
test eax, eax
je 0x1009001a
push str.Qqsafe
push edi
call fcn.1012b82d
add esp, 8
test eax, eax
je 0x10090010
push 0x10177fa0
push edi
call fcn.1012b82d
add esp, 8
test eax, eax
je 0x10090010
push str.Jisu
push edi
call fcn.1012b82d
add esp, 8
test eax, eax
je 0x1008ff60
push 0x10177de0
push edi
call fcn.1012b82d
add esp, 8
test eax, eax
je 0x1008ff60
push str.Liebao
push edi
call fcn.1012b82d
add esp, 8
test eax, eax
je 0x1008ff50
push 0x10177df4
push edi
call fcn.1012b82d
add esp, 8
test eax, eax
je 0x1008ff50
push 0x10177de4
push edi
call fcn.1012b82d
add esp, 8
test eax, eax
je 0x1008feb2
push 0x10177de8
push edi
call fcn.1012b82d
add esp, 8
test eax, eax
je 0x1008feb2
push str.Sogou
push edi
call fcn.1012b82d
add esp, 8
test eax, eax
je 0x1008feab
push 0x10177e28
push edi
call fcn.1012b82d
add esp, 8
test eax, eax
je 0x1008feab
push str.Opera
push edi
call fcn.1012b82d
add esp, 8
test eax, eax
je 0x1008fea4
push 0x10177e4c
push edi
call fcn.1012b82d
add esp, 8
test eax, eax
je 0x1008fea4
push str.Iqiyi
push edi
call fcn.1012b82d
add esp, 8
test eax, eax
je 0x1008fe3d
push 0x10178038
push edi
call fcn.1012b82d
add esp, 8
test eax, eax
je 0x1008fe3d
push str.360closetk
push edi
call fcn.1012b82d
add esp, 8
test eax, eax
je 0x1008fd6c
push str.N3CTK
push edi
call fcn.1012b82d
add esp, 8
test eax, eax
jne 0x10090206
call fcn.1008bad0
mov dword [ebp - 0x2c], 0xf
mov dword [ebp - 0x30], 0
mov byte [ebp - 0x40], 0
sub esp, 0x18
mov byte [ebp - 4], 0x11
mov ecx, esp
push str.E45A9FAEA8CEE73EDD
call fcn.1006f360
lea ecx, [ebp - 0x58]
call fcn.1010cef0
add esp, 0x18
lea ecx, [ebp - 0x40]
push eax
call fcn.1006f2e0
lea ecx, [ebp - 0x58]
call fcn.1006d1b0
mov dword [ebp - 0x4c], vtable.Sc_Convert.0
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 0
lea eax, [ebp - 0x40]
mov byte [ebp - 4], 0x12
push eax
lea eax, [ebp - 0x70]
push eax
lea ecx, [ebp - 0x4c]
call fcn.1007b230
push eax
lea edx, [ebp - 0xa0]
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0xd0]
call fcn.10090af0
add esp, 4
lea ecx, [ebp - 0x28]
push eax
call fcn.10073c10
lea ecx, [ebp - 0xd0]
call fcn.1006f200
lea ecx, [ebp - 0x70]
call fcn.1006f200
cmp dword [ebp - 0x14], 8
lea eax, [ebp - 0x28]
push 6
cmovae eax, dword [ebp - 0x28]
push eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
lea ecx, [ebp - 0x4c]
call fcn.1007b070
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 8
call fcn.1006d1b0
jmp 0x10090206
call fcn.1007b820
call fcn.1007be60
push 0x1017803c
lea edx, [ebp - 0xa0]
lea ecx, [ebp - 0x70]
call fcn.10079370
add esp, 4
lea ecx, [ebp - 0x28]
push eax
call fcn.10073c10
lea ecx, [ebp - 0x70]
call fcn.1006f200
cmp dword [ebp - 0x14], 8
lea eax, [ebp - 0x28]
push 6
cmovae eax, dword [ebp - 0x28]
push eax
mov dword [ebp - 0x4c], vtable.Sc_Convert.0
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 0
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
lea ecx, [ebp - 0x4c]
call fcn.1007b070
jmp 0x10090206
push str.Opera_Software
jmp 0x1008fe4c
push str.SogouExplorer
jmp 0x1008fe4c
push str.360se6
lea edx, [ebp - 0xa0]
lea ecx, [ebp - 0x70]
call fcn.10079370
add esp, 4
lea ecx, [ebp - 0x28]
push eax
call fcn.10073c10
lea ecx, [ebp - 0x70]
call fcn.1006f200
mov dword [ebp - 0x4c], vtable.Sc_Convert.0
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 0
mov byte [ebp - 4], 0x10
lea eax, [ebp - 0x28]
cmp dword [ebp - 0x14], 8
mov esi, dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
cmovae eax, dword [ebp - 0x28]
push 6
push eax
call esi
push str.360aibrowser
lea edx, [ebp - 0xa0]
lea ecx, [ebp - 0x70]
call fcn.10079370
add esp, 4
lea ecx, [ebp - 0x28]
push eax
call fcn.10073c10
lea ecx, [ebp - 0x70]
call fcn.1006f200
cmp dword [ebp - 0x14], 8
lea eax, [ebp - 0x28]
push 6
cmovae eax, dword [ebp - 0x28]
push eax
call esi
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 8
call fcn.1007b070
jmp 0x10090206
push str.liebao
lea edx, [ebp - 0x88]
jmp 0x1008fe52
mov ecx, ebx
call fcn.1007c5e0
mov ecx, ebx
call fcn.1007be90
push str.360Chrome
lea edx, [ebp - 0x88]
lea ecx, [ebp - 0x70]
call fcn.10079370
add esp, 4
lea ecx, [ebp - 0x28]
push eax
call fcn.10073c10
lea ecx, [ebp - 0x70]
call fcn.1006f200
push str.360ChromeX
lea edx, [ebp - 0x88]
lea ecx, [ebp - 0x70]
call fcn.10079370
add esp, 4
lea ecx, [ebp - 0xb8]
push eax
call fcn.10073c10
lea ecx, [ebp - 0x70]
call fcn.1006f200
cmp dword [ebp - 0x14], 8
lea eax, [ebp - 0x28]
mov esi, dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
cmovae eax, dword [ebp - 0x28]
push 6
push eax
mov dword [ebp - 0x4c], vtable.Sc_Convert.0
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 0
call esi
cmp dword [ebp - 0xa4], 8
lea eax, [ebp - 0xb8]
push 6
cmovae eax, dword [ebp - 0xb8]
push eax
call esi
lea ecx, [ebp - 0x4c]
call fcn.1007b070
jmp 0x10090206
call fcn.1008b5b0
jmp 0x10090206
mov dword [ebp - 0x4c], vtable.Sc_Convert.0
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 0
sub esp, 0x18
mov byte [ebp - 4], 0xd
mov ecx, esp
push str.E45AF8FDF6FEE336CC5AF0C9C9DFF437CF75C9EA
call fcn.1006f360
lea ecx, [ebp - 0x40]
call fcn.1010cef0
add esp, 0x18
push eax
lea eax, [ebp - 0xd0]
mov byte [ebp - 4], 0xe
push eax
lea ecx, [ebp - 0x4c]
call fcn.1007b230
mov byte [ebp - 4], 0xf
push eax
lea edx, [ebp - 0x88]
lea ecx, [ebp - 0x70]
call fcn.10090af0
add esp, 4
lea ecx, [ebp - 0x28]
push eax
call fcn.10073c10
lea ecx, [ebp - 0x70]
call fcn.1006f200
lea ecx, [ebp - 0xd0]
call fcn.1006f200
lea ecx, [ebp - 0x40]
call fcn.1006d1b0
cmp dword [ebp - 0x14], 8
lea eax, [ebp - 0x28]
push 6
cmovae eax, dword [ebp - 0x28]
push eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 8
call fcn.1007b070
jmp 0x10090206
mov ecx, esi
call fcn.1010c5a0
push str.TheWorld6
lea edx, [ebp - 0x88]
jmp 0x1008fe52
push 0x114
lea eax, [ebp - 0x22c]
push 0
push eax
call fcn.1011a970
add esp, 0xc
mov dword [ebp - 0x22c], 0x114
lea eax, [ebp - 0x22c]
push eax
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
cmp dword [ebp - 0x228], 5
jle 0x10090206
call fcn.100723f0
mov ecx, esi
call fcn.100711d0
call fcn.1008eb70
call fcn.10073190
call fcn.10073450
mov dword [ebp - 0x4c], vtable.Sc_Convert.0
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 0
sub esp, 0x18
mov byte [ebp - 4], 0xa
mov ecx, esp
push str.E45AE1F1FBEFE92BD760D8C4C4D8E23FDD5AF0CDEBF8F478FC67D8F9
call fcn.1006f360
lea ecx, [ebp - 0x40]
call fcn.1010cef0
add esp, 0x18
push eax
lea eax, [ebp - 0xd0]
mov byte [ebp - 4], 0xb
push eax
lea ecx, [ebp - 0x4c]
call fcn.1007b230
mov byte [ebp - 4], 0xc
jmp 0x10090065
call fcn.10076370
mov ecx, esi
call fcn.10076870
push str.google
lea edx, [ebp - 0x88]
lea ecx, [ebp - 0x40]
call fcn.10079370
add esp, 4
mov esi, eax
lea eax, [ebp - 0x28]
cmp eax, esi
je 0x100901d9
mov eax, dword [ebp - 0x14]
cmp eax, 8
jb 0x100901bc
inc eax
lea ecx, [ebp - 0x28]
push eax
push dword [ebp - 0x28]
call fcn.1006f8c0
xor eax, eax
mov dword [ebp - 0x14], 7
push esi
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x18], 0
mov word [ebp - 0x28], ax
call fcn.10073df0
mov byte [ebp - 4], 8
mov eax, dword [ebp - 0x2c]
cmp eax, 8
jb 0x100901f2
inc eax
lea ecx, [ebp - 0x40]
push eax
push dword [ebp - 0x40]
call fcn.1006f8c0
cmp dword [ebp - 0x14], 8
lea eax, [ebp - 0x28]
push 6
cmovae eax, dword [ebp - 0x28]
push eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
cmp byte [ebp - 0x231], 1
jne 0x10090a0a
sub esp, 0x18
mov ecx, esp
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
mov dword [ecx + 0x14], 0xf
cmp dword [ecx + 0x14], 0x10
mov dword [ecx + 0x10], 0
jb 0x1009023e
mov eax, dword [ecx]
jmp 0x10090240
mov eax, ecx
push 8
push str.08DF1A50
mov byte [eax], 0
call fcn.1006f630
lea ecx, [ebp - 0x40]
call fcn.1010cef0
add esp, 0x18
mov esi, eax
cmp esi, 0x1018d078
je 0x100902a6
mov eax, dword [0x1018d08c]
cmp eax, 0x10
jb 0x10090280
inc eax
mov ecx, 0x1018d078
push eax
push dword [0x1018d078]
call fcn.1006d640
push esi
mov ecx, 0x1018d078
mov dword [0x1018d08c], 0xf
mov dword [0x1018d088], 0
mov byte [0x1018d078], 0
call fcn.1006d5d0
mov byte [ebp - 4], 8
mov eax, dword [ebp - 0x2c]
cmp eax, 0x10
jb 0x100902bf
inc eax
lea ecx, [ebp - 0x40]
push eax
push dword [ebp - 0x40]
call fcn.1006d640
sub esp, 0x18
mov ecx, esp
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
mov dword [ecx + 0x14], 0xf
cmp dword [ecx + 0x14], 0x10
mov dword [ecx + 0x10], 0
jb 0x100902ea
mov eax, dword [ecx]
jmp 0x100902ec
mov eax, ecx
push 0xc
push str.D067C3A9AAAE
mov byte [eax], 0
call fcn.1006f630
lea ecx, [ebp - 0x40]
call fcn.1010cef0
add esp, 0x18
mov esi, eax
cmp esi, 0x1018d108
je 0x10090352
mov eax, dword [0x1018d11c]
cmp eax, 0x10
jb 0x1009032c
inc eax
mov ecx, 0x1018d108
push eax
push dword [0x1018d108]
call fcn.1006d640
push esi
mov ecx, 0x1018d108
mov dword [0x1018d11c], 0xf
mov dword [0x1018d118], 0
mov byte [0x1018d108], 0
call fcn.1006d5d0
mov byte [ebp - 4], 8
mov eax, dword [ebp - 0x2c]
cmp eax, 0x10
jb 0x1009036b
inc eax
lea ecx, [ebp - 0x40]
push eax
push dword [ebp - 0x40]
call fcn.1006d640
sub esp, 0x18
mov ecx, esp
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
mov dword [ecx + 0x14], 0xf
cmp dword [ecx + 0x14], 0x10
mov dword [ecx + 0x10], 0
jb 0x10090396
mov eax, dword [ecx]
jmp 0x10090398
mov eax, ecx
push 6
push str.8B309C
mov byte [eax], 0
call fcn.1006f630
lea ecx, [ebp - 0x40]
call fcn.1010cef0
add esp, 0x18
mov esi, eax
cmp esi, 0x1018d210
je 0x100903fe
mov eax, dword [0x1018d224]
cmp eax, 0x10
jb 0x100903d8
inc eax
mov ecx, 0x1018d210
push eax
push dword [0x1018d210]
call fcn.1006d640
push esi
mov ecx, 0x1018d210
mov dword [0x1018d224], 0xf
mov dword [0x1018d220], 0
mov byte [0x1018d210], 0
call fcn.1006d5d0
mov byte [ebp - 4], 8
mov eax, dword [ebp - 0x2c]
cmp eax, 0x10
jb 0x10090417
inc eax
lea ecx, [ebp - 0x40]
push eax
push dword [ebp - 0x40]
call fcn.1006d640
sub esp, 0x18
mov ecx, esp
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
mov dword [ecx + 0x14], 0xf
cmp dword [ecx + 0x14], 0x10
mov dword [ecx + 0x10], 0
jb 0x10090442
mov eax, dword [ecx]
jmp 0x10090444
mov eax, ecx
push 0xe
push str.8B309C225B5657
mov byte [eax], 0
call fcn.1006f630
lea ecx, [ebp - 0x40]
call fcn.1010cef0
add esp, 0x18
mov esi, eax
cmp esi, 0x1018d048
je 0x100904aa
mov eax, dword [0x1018d05c]
cmp eax, 0x10
jb 0x10090484
inc eax
mov ecx, 0x1018d048
push eax
push dword [0x1018d048]
call fcn.1006d640
push esi
mov ecx, 0x1018d048
mov dword [0x1018d05c], 0xf
mov dword [0x1018d058], 0
mov byte [0x1018d048], 0
call fcn.1006d5d0
mov byte [ebp - 4], 8
mov eax, dword [ebp - 0x2c]
cmp eax, 0x10
jb 0x100904c3
inc eax
lea ecx, [ebp - 0x40]
push eax
push dword [ebp - 0x40]
call fcn.1006d640
sub esp, 0x18
mov ecx, esp
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
mov dword [ecx + 0x14], 0xf
cmp dword [ecx + 0x14], 0x10
mov dword [ecx + 0x10], 0
jb 0x100904ee
mov eax, dword [ecx]
jmp 0x100904f0
mov eax, ecx
push 0x2c
push str.D072D8E8A2B2A9698A3582ABA0AEBF688E3F82FBF7F0
mov byte [eax], 0
call fcn.1006f630
lea ecx, [ebp - 0x40]
call fcn.1010cef0
add esp, 0x18
mov esi, eax
cmp esi, 0x1018d090
je 0x10090556
mov eax, dword [0x1018d0a4]
cmp eax, 0x10
jb 0x10090530
inc eax
mov ecx, 0x1018d090
push eax
push dword [0x1018d090]
call fcn.1006d640
push esi
mov ecx, 0x1018d090
mov dword [0x1018d0a4], 0xf
mov dword [0x1018d0a0], 0
mov byte [0x1018d090], 0
call fcn.1006d5d0
mov byte [ebp - 4], 8
mov eax, dword [ebp - 0x2c]
cmp eax, 0x10
jb 0x1009056f
inc eax
lea ecx, [ebp - 0x40]
push eax
push dword [ebp - 0x40]
call fcn.1006d640
sub esp, 0x18
mov ecx, esp
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
mov dword [ecx + 0x14], 0xf
cmp dword [ecx + 0x14], 0x10
mov dword [ecx + 0x10], 0
jb 0x1009059a
mov eax, dword [ecx]
jmp 0x1009059c
mov eax, ecx
push 0x2a
push str.D072D8E8A2B2A932DC289FA0ABA4B66E8128CFF7F5
mov byte [eax], 0
call fcn.1006f630
lea ecx, [ebp - 0x40]
call fcn.1010cef0
add esp, 0x18
mov esi, eax
cmp esi, 0x1018d1f8
je 0x10090602
mov eax, dword [0x1018d20c]
cmp eax, 0x10
jb 0x100905dc
inc eax
mov ecx, 0x1018d1f8
push eax
push dword [0x1018d1f8]
call fcn.1006d640
push esi
mov ecx, 0x1018d1f8
mov dword [0x1018d20c], 0xf
mov dword [0x1018d208], 0
mov byte [0x1018d1f8], 0
call fcn.1006d5d0
mov byte [ebp - 4], 8
mov eax, dword [ebp - 0x2c]
cmp eax, 0x10
jb 0x1009061b
inc eax
lea ecx, [ebp - 0x40]
push eax
push dword [ebp - 0x40]
call fcn.1006d640
sub esp, 0x18
mov ecx, esp
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
mov dword [ecx + 0x14], 0xf
cmp dword [ecx + 0x14], 0x10
mov dword [ecx + 0x10], 0
jb 0x10090646
mov eax, dword [ecx]
jmp 0x10090648
mov eax, ecx
push 0x2a
push str.D072D8E8A2B2A92CDA289FA0ABA4B66E8128CFF7F5
mov byte [eax], 0
call fcn.1006f630
lea ecx, [ebp - 0x40]
call fcn.1010cef0
add esp, 0x18
mov esi, eax
cmp esi, 0x1018d150
je 0x100906ae
mov eax, dword [0x1018d164]
cmp eax, 0x10
jb 0x10090688
inc eax
mov ecx, 0x1018d150
push eax
push dword [0x1018d150]
call fcn.1006d640
push esi
mov ecx, 0x1018d150
mov dword [0x1018d164], 0xf
mov dword [0x1018d160], 0
mov byte [0x1018d150], 0
call fcn.1006d5d0
mov byte [ebp - 4], 8
mov eax, dword [ebp - 0x2c]
cmp eax, 0x10
jb 0x100906c7
inc eax
lea ecx, [ebp - 0x40]
push eax
push dword [ebp - 0x40]
call fcn.1006d640
sub esp, 0x18
mov ecx, esp
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
mov dword [ecx + 0x14], 0xf
cmp dword [ecx + 0x14], 0x10
mov dword [ecx + 0x10], 0
jb 0x100906f2
mov eax, dword [ecx]
jmp 0x100906f4
mov eax, ecx
push 0x2e
push str.D072D8E8A2B2A9698E3E94B6ABA5B561883095B6FBF2EB
mov byte [eax], 0
call fcn.1006f630
lea ecx, [ebp - 0x40]
call fcn.1010cef0
add esp, 0x18
mov esi, eax
cmp esi, 0x1018d0f0
je 0x1009075a
mov eax, dword [0x1018d104]
cmp eax, 0x10
jb 0x10090734
inc eax
mov ecx, 0x1018d0f0
push eax
push dword [0x1018d0f0]
call fcn.1006d640
push esi
mov ecx, 0x1018d0f0
mov dword [0x1018d104], 0xf
mov dword [0x1018d100], 0
mov byte [0x1018d0f0], 0
call fcn.1006d5d0
mov byte [ebp - 4], 8
mov eax, dword [ebp - 0x2c]
cmp eax, 0x10
jb 0x10090773
inc eax
lea ecx, [ebp - 0x40]
push eax
push dword [ebp - 0x40]
call fcn.1006d640
sub esp, 0x18
mov ecx, esp
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
mov dword [ecx + 0x14], 0xf
cmp dword [ecx + 0x14], 0x10
mov dword [ecx + 0x10], 0
jb 0x1009079e
mov eax, dword [ecx]
jmp 0x100907a0
mov eax, ecx
push 0x2a
push str.D072D8E8A2B2A921C0289FA0ABA4B66E8128CFF7F5
mov byte [eax], 0
call fcn.1006f630
lea ecx, [ebp - 0x40]
call fcn.1010cef0
add esp, 0x18
mov esi, eax
cmp esi, 0x1018d1c8
je 0x10090806
mov eax, dword [0x1018d1dc]
cmp eax, 0x10
jb 0x100907e0
inc eax
mov ecx, 0x1018d1c8
push eax
push dword [0x1018d1c8]
call fcn.1006d640
push esi
mov ecx, 0x1018d1c8
mov dword [0x1018d1dc], 0xf
mov dword [0x1018d1d8], 0
mov byte [0x1018d1c8], 0
call fcn.1006d5d0
mov byte [ebp - 4], 8
mov eax, dword [ebp - 0x2c]
cmp eax, 0x10
jb 0x1009081f
inc eax
lea ecx, [ebp - 0x40]
push eax
push dword [ebp - 0x40]
call fcn.1006d640
sub esp, 0x18
mov esi, esp
mov ecx, esi
push 0
push 0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
call fcn.1006d290
push str.D072D8E8A2B2A92AD2289FA0ABA4B66E8128CFF7F5
mov ecx, esi
call fcn.1006f5f0
lea ecx, [ebp - 0x70]
call fcn.1010cef0
add esp, 0x18
mov ecx, 0x1018d198
push eax
call fcn.1006f2e0
lea ecx, [ebp - 0x70]
call fcn.1006d1b0
sub esp, 0x18
mov ecx, esp
push str.D072D8E8A2B2A9698A3582ABA0AEBF688E3F82FBF7F0
call fcn.1006f360
lea ecx, [ebp - 0x70]
call fcn.1010cef0
add esp, 0x18
mov ecx, 0x1018d138
push eax
call fcn.1006f2e0
lea ecx, [ebp - 0x70]
call fcn.1006d1b0
sub esp, 0x18
mov ecx, esp
push str.D072D8E8EBA7A977CF71DBB6F0FCE9698A3582FBF7F0A967CC6891A1A8A5BE608D3E95C7F0FCE907C861
call fcn.1006f360
lea ecx, [ebp - 0x70]
call fcn.1010cef0
add esp, 0x18
mov ecx, 0x1018d030
push eax
call fcn.1006f2e0
lea ecx, [ebp - 0x70]
call fcn.1006d1b0
sub esp, 0x18
mov ecx, esp
push str.D072D8E8A2B2A96B8E3682ABA0AEBF688E3F82FBF7F0
call fcn.1006f360
lea ecx, [ebp - 0x70]
call fcn.1010cef0
add esp, 0x18
mov ecx, 0x1018d0a8
push eax
call fcn.1006f2e0
lea ecx, [ebp - 0x70]
call fcn.1006d1b0
sub esp, 0x18
mov ecx, esp
push str.D072D8E8EBA7A977D067C3B6ABABB676DB69C1B7A7EEF43B856AC1BEF4EEBB368F339EADAFF9E43A8160
call fcn.1006f360
lea ecx, [ebp - 0x70]
call fcn.1010cef0
add esp, 0x18
mov ecx, 0x1018d0c0
push eax
call fcn.1006f2e0
lea ecx, [ebp - 0x70]
call fcn.1006d1b0
sub esp, 0x18
mov ecx, esp
push str.D072D8E8A2B2A939963594ABA1ADB0619665C3F5
call fcn.1006f360
lea ecx, [ebp - 0x70]
call fcn.1010cef0
add esp, 0x18
mov ecx, 0x1018d1e0
push eax
call fcn.1006f2e0
lea ecx, [ebp - 0x70]
call fcn.1006d1b0
sub esp, 0x18
mov ecx, esp
push str.D072D8E8A2B2A939963594ABA1ADB0619665C3F5
call fcn.1006f360
lea ecx, [ebp - 0x70]
call fcn.1010cef0
add esp, 0x18
mov ecx, 0x1018d168
push eax
call fcn.1006f2e0
lea ecx, [ebp - 0x70]
call fcn.1006d1b0
sub esp, 0x18
mov ecx, esp
push str.D072D8E8A2B2A93B963594ABA1ADB0619665C3F5
call fcn.1006f360
lea ecx, [ebp - 0x70]
call fcn.1010cef0
add esp, 0x18
mov ecx, 0x1018d0d8
push eax
call fcn.1006f2e0
lea ecx, [ebp - 0x70]
call fcn.1006d1b0
sub esp, 0x18
mov ecx, esp
push str.D072D8E8A2B2A92BD728DAF1E8ACB06E9665C3F5
call fcn.1006f360
lea ecx, [ebp - 0x70]
call fcn.1010cef0
add esp, 0x18
mov ecx, 0x1018d060
push eax
call fcn.1006f2e0
lea ecx, [ebp - 0x70]
call fcn.1006d1b0
sub esp, 0x18
mov ecx, esp
push str.D072D8E8A2B2A93AD1289FA0ABA4B66E8128CFF7F5
call fcn.1006f360
lea ecx, [ebp - 0x70]
call fcn.1010cef0
add esp, 0x18
mov ecx, 0x1018d180
push eax
call fcn.1006f2e0
lea ecx, [ebp - 0x70]
call fcn.1006d1b0
mov ecx, edi
call fcn.1008ef10
mov ecx, edi
call fcn.1008f290
push 0
call dword [sym.imp.ole32.dll_CoInitialize]
lea ecx, [ebp - 0xb8]
call fcn.1006f200
lea ecx, [ebp - 0x28]
call fcn.1006f200
lea ecx, [ebp - 0x118]
call fcn.1006d1b0
lea ecx, [ebp - 0xe8]
call fcn.1006d1b0
lea ecx, [ebp - 0x100]
call fcn.1006d1b0
lea ecx, [ebp - 0xa0]
call fcn.1006f200
lea ecx, [ebp - 0x88]
call fcn.1006f200
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10116580
mov esp, ebp
pop ebp
ret