Function at 0x100f0490
Capabilities:
Create process on windows

Disassembly:
sub esp, 0x1b0
mov eax, dword [0x102ac760]
xor eax, esp
mov dword [esp + 0x1ac], eax
push ebx
push ebp
push esi
mov ebx, ecx
xor ebp, ebp
push edi
lea ecx, [esp + 0x144]
mov dword [esp + 0x10], ebp
call fcn.10103730
cmp dword [ebx + 0x55b0], 0x10
jb 0x100f04cd
mov eax, dword [ebx + 0x559c]
jmp 0x100f04d3
lea eax, [ebx + 0x559c]
push ebp
push ebp
push eax
lea ecx, [esp + 0x150]
call fcn.100fc000
push str.result
lea ecx, [esp + 0x148]
call fcn.10102580
mov esi, eax
cmp esi, ebp
je 0x100f07e7
push str.third_party_su
mov ecx, esi
call fcn.10102580
cmp eax, ebp
je 0x100f05a0
mov ecx, eax
call fcn.10102170
lea ecx, [esp + 0x28]
push 0xfde9
mov dword [esp + 0x28], ecx
push eax
lea ecx, [esp + 0x2c]
call fcn.1001a120
mov edx, dword [esp + 0x24]
push edx
lea ecx, [esp + 0x12c]
call fcn.10008d10
mov eax, dword [esp + 0x24]
lea ecx, [esp + 0x28]
cmp eax, ecx
je 0x100f0555
push eax
call fcn.100b2b5c
add esp, 4
sub esp, 0x1c
mov ecx, esp
push 0xffffffffffffffff
push ebp
lea eax, [esp + 0x14c]
xor edx, edx
mov dword [ecx + 0x18], 7
mov dword [ecx + 0x14], ebp
push eax
mov word [ecx + 4], dx
call fcn.10004580
call fcn.100e2da0
mov ecx, dword [eax]
call fcn.100e2c70
cmp dword [esp + 0x140], 8
jb 0x100f05a0
mov ecx, dword [esp + 0x12c]
push ecx
call fcn.100b1e2a
add esp, 4
xor eax, eax
push str.htc_version
mov ecx, esi
mov dword [esp + 0x18], ebp
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], eax
mov dword [esp + 0x24], eax
call fcn.10102580
mov edi, eax
cmp edi, ebp
je 0x100f05e3
mov ecx, edi
call fcn.10102170
test eax, eax
je 0x100f05e3
mov ecx, edi
call fcn.10102170
push eax
call fcn.100b41c8
add esp, 4
mov dword [esp + 0x14], eax
push str.sony_version
mov ecx, esi
call fcn.10102580
mov edi, eax
cmp edi, ebp
je 0x100f0614
mov ecx, edi
call fcn.10102170
test eax, eax
je 0x100f0614
mov ecx, edi
call fcn.10102170
push eax
call fcn.100b41c8
add esp, 4
mov dword [esp + 0x18], eax
push str.root_version
mov ecx, esi
call fcn.10102580
mov edi, eax
cmp edi, ebp
je 0x100f0645
mov ecx, edi
call fcn.10102170
test eax, eax
je 0x100f0645
mov ecx, edi
call fcn.10102170
push eax
call fcn.100b41c8
add esp, 4
mov dword [esp + 0x20], eax
push str.config
mov ecx, esi
call fcn.10102580
mov edi, eax
cmp edi, ebp
je 0x100f06a9
mov ecx, edi
call fcn.10102170
test eax, eax
je 0x100f06a9
call fcn.100e2da0
mov ecx, edi
mov ebp, eax
call fcn.10102170
push eax
call fcn.100b41c8
mov ecx, dword [ebp]
add esp, 4
push eax
call fcn.100e1560
call fcn.100e2da0
mov ecx, dword [eax]
call fcn.100e10f0
mov edi, eax
call fcn.100e2da0
mov eax, dword [eax]
mov edx, dword [edi]
mov eax, dword [eax + 0x1ec]
mov edx, dword [edx + 0x5c]
push eax
mov ecx, edi
call edx
xor ebp, ebp
call fcn.100e2da0
lea ecx, [esp + 0x14]
push ecx
mov ecx, dword [eax]
call fcn.100e1140
push str.discarded
mov ecx, esi
call fcn.10102580
cmp eax, ebp
je 0x100f0741
mov ecx, eax
call fcn.10102170
push eax
lea ecx, [esp + 0x12c]
call fcn.100043e0
lea edx, [esp + 0x128]
push 0x102895a8
push edx
call fcn.10034c70
add esp, 8
test al, al
je 0x100f0735
call fcn.100e2da0
mov ecx, dword [eax]
call fcn.100e10f0
test eax, eax
je 0x100f0735
call fcn.100e2da0
mov ecx, dword [eax]
call fcn.100e10f0
mov edx, dword [eax]
mov ecx, eax
mov eax, dword [edx + 0x38]
push 0x10285b48
call eax
push ebp
push ebp
push ebp
push str.http:__www.shuame.com
push 0x1011401c
push ebp
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
lea ecx, [esp + 0x128]
call fcn.10003150
push str.updatable
mov ecx, esi
call fcn.10102580
cmp eax, ebp
je 0x100f07e7
mov ecx, eax
call fcn.10102170
push 0x102895a8
push eax
call fcn.100b47fa
add esp, 8
test eax, eax
jne 0x100f07e7
push 0x10289c28
mov ecx, esi
call fcn.10102580
cmp eax, ebp
je 0x100f07e7
mov ecx, eax
call fcn.10102170
push eax
lea ecx, [ebx + 0x10]
call fcn.100033f0
push 0x10289c34
mov ecx, esi
call fcn.10102580
cmp eax, ebp
je 0x100f07e7
mov ecx, eax
call fcn.10102170
push eax
lea ecx, [ebx + 0x55b4]
call fcn.100033f0
push str.version_code
mov ecx, esi
call fcn.10102580
cmp eax, ebp
je 0x100f07e7
mov ecx, eax
call fcn.10102170
push eax
call dword [sym.imp.SHLWAPI.dll_StrToIntA]
mov dword [ebx + 0x18], eax
call fcn.100ec980
mov ecx, dword [eax + 0x24]
cmp ecx, dword [ebx + 0x18]
jne 0x100f0840
mov dword [esp + 0x10], 9
mov edx, dword [esp + 0x10]
push edx
mov ecx, ebx
call fcn.100f0330
cmp dword [esp + 0x1a8], 0x10
mov dword [esp + method.TiXmlDocument.virtual_0], vtable.TiXmlDocument.0
jb 0x100f0818
mov eax, dword [esp + 0x194]
push eax
call fcn.100b1e2a
add esp, 4
lea ecx, [esp + 0x144]
mov dword [esp + 0x1a8], 0xf
mov dword [esp + 0x1a4], ebp
mov byte [esp + 0x194], 0
call fcn.10102330
jmp 0x100f0863
call fcn.100e2da0
mov ecx, dword [eax]
call fcn.100e10f0
test eax, eax
je 0x100f0857
mov ecx, ebx
call fcn.100f0270
lea ecx, [esp + 0x144]
call fcn.1000c280
mov ecx, dword [esp + 0x1bc]
pop edi
pop esi
pop ebp
pop ebx
xor ecx, esp
call fcn.100b2738
add esp, 0x1b0
ret