Function at 0x100402a0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100cc661
mov eax, dword fs:[0]
push eax
sub esp, 0x1a4
mov eax, dword [0x1010d03c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov ebx, edx
mov dword [ebp - 0xf8], ebx
mov esi, ecx
mov dword [ebp - 4], 0
mov dword [ebp - 0x10c], 0
mov dword [ebp - 0x104], 6
mov byte [ebp - 4], 1
xor eax, eax
mov dword [ebp - 0xc4], 0
mov dword [ebp - 0xc8], 0
mov dword [ebp - 0xc4], 7
mov dword [ebp - 0xc8], 0
mov word [ebp - 0xd8], ax
lea ecx, [ebp - 0x160]
mov byte [ebp - 4], 2
call fcn.10023f30
push 0x1010db1c
push eax
lea eax, [ebp - 0x30]
mov byte [ebp - 4], 3
push eax
call fcn.10014bb0
add esp, 0xc
mov byte [ebp - 4], 6
mov edx, dword [ebp - 0x14c]
cmp edx, 8
jb 0x10040391
mov ecx, dword [ebp - 0x160]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x10040387
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100415d8
push edx
push ecx
call fcn.1009441c
add esp, 8
xor eax, eax
mov dword [ebp - 0x150], 0
mov dword [ebp - 0x14c], 7
mov word [ebp - 0x160], ax
mov ecx, str.coral_extract.dll
mov byte [ebp - 4], 5
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x4c], 7
lea edx, [ecx + 2]
mov word [ebp - 0x60], ax
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x100403d0
sub ecx, edx
sar ecx, 1
push ecx
push str.coral_extract.dll
lea ecx, [ebp - 0x60]
call fcn.10004af0
lea ecx, [ebp - 0x130]
mov byte [ebp - 4], 0xa
call fcn.10023f30
lea ecx, [ebp - 0x60]
mov byte [ebp - 4], 0xb
push ecx
push eax
lea eax, [ebp - 0x48]
push eax
call fcn.10014bb0
add esp, 0xc
mov byte [ebp - 4], 0xe
mov edx, dword [ebp - 0x11c]
cmp edx, 8
jb 0x10040455
mov ecx, dword [ebp - 0x130]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x1004044b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100415dd
push edx
push ecx
call fcn.1009441c
add esp, 8
xor eax, eax
mov dword [ebp - 0x120], 0
mov dword [ebp - 0x11c], 7
mov word [ebp - 0x130], ax
mov byte [ebp - 4], 0x13
mov edx, dword [ebp - 0x4c]
cmp edx, 8
jb 0x100404b0
mov ecx, dword [ebp - 0x60]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x100404a6
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100415e2
push edx
push ecx
call fcn.1009441c
add esp, 8
xor eax, eax
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 7
mov word [ebp - 0x60], ax
lea eax, [ebp - 0x30]
mov byte [ebp - 4], 0x12
push eax
call fcn.1000ee20
add esp, 4
test al, al
jne 0x100405ab
lea eax, [ebp - 0x104]
push eax
lea edx, [ebp - 0x30]
lea ecx, [ebp + 8]
call fcn.1003fa30
add esp, 4
test al, al
jne 0x100405ab
mov ebx, 2
mov byte [ebp - 4], 0x17
mov edx, dword [ebp - 0x34]
cmp edx, 8
jb 0x1004053c
mov ecx, dword [ebp - 0x48]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x10040532
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100415e7
push edx
push ecx
call fcn.1009441c
add esp, 8
xor eax, eax
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x34], 7
mov word [ebp - 0x48], ax
mov byte [ebp - 4], 0x1b
mov edx, dword [ebp - 0x1c]
cmp edx, 8
jb 0x1004058e
mov ecx, dword [ebp - 0x30]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x10040584
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100415ec
push edx
push ecx
call fcn.1009441c
add esp, 8
xor eax, eax
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 7
mov word [ebp - 0x30], ax
mov byte [ebp - 4], 2
jmp 0x10040b65
lea eax, [ebp - 0x48]
push eax
call fcn.1000ee20
add esp, 4
test al, al
jne 0x10040671
mov ebx, 2
mov byte [ebp - 4], 0x1f
mov edx, dword [ebp - 0x34]
cmp edx, 8
jb 0x10040602
mov ecx, dword [ebp - 0x48]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x100405f8
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100415f1
push edx
push ecx
call fcn.1009441c
add esp, 8
xor eax, eax
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x34], 7
mov word [ebp - 0x48], ax
mov byte [ebp - 4], 0x23
mov edx, dword [ebp - 0x1c]
cmp edx, 8
jb 0x10040654
mov ecx, dword [ebp - 0x30]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x1004064a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100415f6
push edx
push ecx
call fcn.1009441c
add esp, 8
xor eax, eax
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 7
mov word [ebp - 0x30], ax
mov byte [ebp - 4], 2
jmp 0x10040b65
lea ecx, [ebp - 0x30]
call fcn.10039bd0
test al, al
jne 0x10040733
mov ebx, 3
mov byte [ebp - 4], 0x27
mov edx, dword [ebp - 0x34]
cmp edx, 8
jb 0x100406c4
mov ecx, dword [ebp - 0x48]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x100406ba
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100415fb
push edx
push ecx
call fcn.1009441c
add esp, 8
xor eax, eax
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x34], 7
mov word [ebp - 0x48], ax
mov byte [ebp - 4], 0x2b
mov edx, dword [ebp - 0x1c]
cmp edx, 8
jb 0x10040716
mov ecx, dword [ebp - 0x30]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x1004070c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10041600
push edx
push ecx
call fcn.1009441c
add esp, 8
xor eax, eax
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 7
mov word [ebp - 0x30], ax
mov byte [ebp - 4], 2
jmp 0x10040b65
mov byte [ebp - 4], 0x2f
xor eax, eax
mov dword [ebp - 0x80], 0
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x80], 0
mov dword [ebp - 0x7c], 7
mov word [ebp - 0x90], ax
mov byte [ebp - 4], 0x31
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x64], 7
mov word [ebp - 0x78], ax
lea eax, [ebp - 0x30]
mov byte [ebp - 4], 0x32
push eax
lea ecx, [ebp - 0xa8]
call fcn.10006950
mov byte [ebp - 4], 0x33
test esi, esi
je 0x10040990
lea eax, [ebp - 0x78]
push eax
lea eax, [ebp - 0xa8]
push eax
lea eax, [ebp - 0x90]
push eax
lea edx, [ebp - 0x48]
lea ecx, [ebp - 0x30]
call fcn.1003a240
add esp, 0xc
test al, al
jne 0x10040978
mov ebx, 6
mov byte [ebp - 4], 0x34
mov edx, dword [ebp - 0x94]
cmp edx, 8
jb 0x10040804
mov ecx, dword [ebp - 0xa8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x100407fa
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10041605
push edx
push ecx
call fcn.1009441c
add esp, 8
xor eax, eax
mov dword [ebp - 0x98], 0
mov dword [ebp - 0x94], 7
mov word [ebp - 0xa8], ax
mov byte [ebp - 4], 0x38
mov edx, dword [ebp - 0x64]
cmp edx, 8
jb 0x1004085f
mov ecx, dword [ebp - 0x78]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x10040855
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1004160a
push edx
push ecx
call fcn.1009441c
add esp, 8
xor eax, eax
mov dword [ebp - 0x68], 0
mov dword [ebp - 0x64], 7
mov word [ebp - 0x78], ax
mov byte [ebp - 4], 0x3c
mov edx, dword [ebp - 0x7c]
cmp edx, 8
jb 0x100408b4
mov ecx, dword [ebp - 0x90]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x100408aa
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1004160f
push edx
push ecx
call fcn.1009441c
add esp, 8
xor eax, eax
mov dword [ebp - 0x80], 0
mov dword [ebp - 0x7c], 7
mov word [ebp - 0x90], ax
mov byte [ebp - 4], 0x40
mov edx, dword [ebp - 0x34]
cmp edx, 8
jb 0x10040909
mov ecx, dword [ebp - 0x48]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x100408ff
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10041614
push edx
push ecx
call fcn.1009441c
add esp, 8
xor eax, eax
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x34], 7
mov word [ebp - 0x48], ax
mov byte [ebp - 4], 0x44
mov edx, dword [ebp - 0x1c]
cmp edx, 8
jb 0x1004095b
mov ecx, dword [ebp - 0x30]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x10040951
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10041619
push edx
push ecx
call fcn.1009441c
add esp, 8
xor eax, eax
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 7
mov word [ebp - 0x30], ax
mov byte [ebp - 4], 2
jmp 0x10040b65
lea eax, [ebp - 0x78]
push eax
lea edx, [ebp - 0xa8]
lea ecx, [ebp - 0x90]
call fcn.1003f670
add esp, 4
lea eax, [ebp - 0xd8]
push eax
push ebx
lea edx, [ebp - 0x10c]
lea ecx, [ebp - 0xa8]
call fcn.1003f6f0
add esp, 8
mov byte [ebp - 4], 0x48
mov edx, dword [ebp - 0x94]
cmp edx, 8
jb 0x100409f0
mov ecx, dword [ebp - 0xa8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x100409e6
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1004161e
push edx
push ecx
call fcn.1009441c
add esp, 8
xor eax, eax
mov dword [ebp - 0x98], 0
mov dword [ebp - 0x94], 7
mov word [ebp - 0xa8], ax
mov byte [ebp - 4], 0x4c
mov edx, dword [ebp - 0x64]
cmp edx, 8
jb 0x10040a4b
mov ecx, dword [ebp - 0x78]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x10040a41
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10041623
push edx
push ecx
call fcn.1009441c
add esp, 8
xor eax, eax
mov dword [ebp - 0x68], 0
mov dword [ebp - 0x64], 7
mov word [ebp - 0x78], ax
mov byte [ebp - 4], 0x50
mov edx, dword [ebp - 0x7c]
cmp edx, 8
jb 0x10040aa0
mov ecx, dword [ebp - 0x90]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x10040a96
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10041628
push edx
push ecx
call fcn.1009441c
add esp, 8
xor eax, eax
mov dword [ebp - 0x80], 0
mov dword [ebp - 0x7c], 7
mov word [ebp - 0x90], ax
mov byte [ebp - 4], 0x54
mov edx, dword [ebp - 0x34]
cmp edx, 8
jb 0x10040af5
mov ecx, dword [ebp - 0x48]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x10040aeb
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1004162d
push edx
push ecx
call fcn.1009441c
add esp, 8
xor eax, eax
mov dword [ebp - 0x38], 0
mov dword [ebp - 0x34], 7
mov word [ebp - 0x48], ax
mov byte [ebp - 4], 0x58
mov edx, dword [ebp - 0x1c]
cmp edx, 8
jb 0x10040b47
mov ecx, dword [ebp - 0x30]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x10040b3d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10041632
push edx
push ecx
call fcn.1009441c
add esp, 8
xor eax, eax
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x1c], 7
mov word [ebp - 0x30], ax
mov byte [ebp - 4], 2
mov ebx, dword [ebp - 0x10c]
xorps xmm0, xmm0
movlpd qword [ebp - 0x18], xmm0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0
call fcn.100358f0
mov dword [ebp - 0x18], eax
sub esp, 0x18
mov byte [ebp - 4], 0x5e
mov ecx, esp
mov dword [ebp - 0x10c], esp
mov byte [ebp - 0xf1], 0
push 0x1010db4c
call fcn.10006950
mov byte [ebp - 4], 0x5f
lea ecx, [ebp - 0x130]
mov byte [ebp - 4], 0x5e
call fcn.10025170
add esp, 0x18
mov esi, eax
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x60
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x61
push esi
push eax
lea edx, [ebp - 0xf1]
lea ecx, [ebp - 0x178]
call fcn.10036100
add esp, 8
mov byte [ebp - 4], 0x62
lea ecx, [ebp - 0x1a8]
push eax
mov dword [ebp - 0x1b0], str.uuid
call fcn.10036930
lea eax, [ebp - 0x1b0]
mov byte [ebp - 4], 0x63
push eax
lea ecx, [ebp - 0x18]
call fcn.10036dd0
push eax
add eax, 0x10
push eax
push ecx
lea eax, [ebp - 0x110]
push eax
lea ecx, [ebp - 0x18]
call fcn.10036ac0
lea ecx, [ebp - 0x1a8]
mov byte [ebp - 4], 0x65
call fcn.10031920
lea ecx, [ebp - 0x178]
mov byte [ebp - 4], 0x66
call fcn.10031920
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x60
mov edi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
push eax
call edi
mov byte [ebp - 4], 0x67
mov edx, dword [ebp - 0x11c]
cmp edx, 8
jb 0x10040c9a
mov ecx, dword [ebp - 0x130]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x10040c90
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10041637
push edx
push ecx
call fcn.1009441c
add esp, 8
xor eax, eax
mov dword [ebp - 0x120], 0
mov dword [ebp - 0x11c], 7
mov word [ebp - 0x130], ax
sub esp, 0x18
mov byte [ebp - 4], 0x5e
mov ecx, esp
mov dword [ebp - 0x10c], esp
mov byte [ebp - 0xf1], al
push 0x1010db4c
call fcn.10006950
mov byte [ebp - 4], 0x6b
lea ecx, [ebp - 0x130]
mov byte [ebp - 4], 0x5e
call fcn.10025360
add esp, 0x18
mov esi, eax
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x6c
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x6d
push esi
push eax
lea edx, [ebp - 0xf1]
lea ecx, [ebp - 0x178]
call fcn.10036100
add esp, 8
mov byte [ebp - 4], 0x6e
lea ecx, [ebp - 0x1a8]
push eax
mov dword [ebp - 0x1b0], str.uuid2
call fcn.10036930
lea eax, [ebp - 0x1b0]
mov byte [ebp - 4], 0x6f
push eax
lea ecx, [ebp - 0x18]
call fcn.10036dd0
push eax
add eax, 0x10
push eax
push ecx
lea eax, [ebp - 0x110]
push eax
lea ecx, [ebp - 0x18]
call fcn.10036ac0
lea ecx, [ebp - 0x1a8]
mov byte [ebp - 4], 0x71
call fcn.10031920
lea ecx, [ebp - 0x178]
mov byte [ebp - 4], 0x72
call fcn.10031920
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x6c
push eax
call edi
mov byte [ebp - 4], 0x73
mov edx, dword [ebp - 0x11c]
cmp edx, 8
jb 0x10040dc7
mov ecx, dword [ebp - 0x130]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x10040dbd
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1004163c
push edx
push ecx
call fcn.1009441c
add esp, 8
xor eax, eax
mov dword [ebp - 0x120], 0
mov dword [ebp - 0x11c], 7
mov word [ebp - 0x130], ax
mov byte [ebp - 4], 0x77
mov dword [ebp - 0xb0], eax
mov dword [ebp - 0xac], eax
mov dword [ebp - 0xb0], eax
mov dword [ebp - 0xac], 7
mov word [ebp - 0xc0], ax
lea eax, [ebp - 0xc0]
mov byte [ebp - 4], 0x78
push eax
call fcn.100b9c30
add esp, 4
mov byte [ebp - 0xf1], 0
lea eax, [ebp - 0x28]
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
lea eax, [ebp - 0xc0]
mov byte [ebp - 4], 0x79
push eax
lea eax, [ebp - 0x28]
push eax
lea edx, [ebp - 0xf1]
lea ecx, [ebp - 0x148]
call fcn.10035b60
add esp, 8
mov byte [ebp - 4], 0x7a
lea ecx, [ebp - 0x1a8]
push eax
mov dword [ebp - 0x1b0], str.process_info
call fcn.10036930
lea eax, [ebp - 0x1b0]
mov byte [ebp - 4], 0x7b
push eax
lea ecx, [ebp - 0x18]
call fcn.10036dd0
push eax
add eax, 0x10
push eax
push ecx
lea eax, [ebp - 0x110]
push eax
lea ecx, [ebp - 0x18]
call fcn.10036ac0
lea ecx, [ebp - 0x1a8]
mov byte [ebp - 4], 0x7d
call fcn.10031920
lea ecx, [ebp - 0x148]
mov byte [ebp - 4], 0x7e
call fcn.10031920
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x78
push eax
call edi
cmp dword [0x1010da70], 2
mov eax, dword [ebp - 0xf8]
jne 0x1004110d
test eax, eax
jne 0x1004110d
mov esi, 0x16
mov byte [ebp - 0xf1], 1
mov word [ebp - 0x118], si
mov dword [ebp - 0x110], ebx
push ecx
lea eax, [ebp - 0x118]
mov byte [ebp - 4], 0x7f
push eax
lea edx, [ebp - 0xf1]
lea ecx, [ebp - 0x138]
call fcn.100359c0
push eax
mov edx, str.jsfw01
mov byte [ebp - 4], 0x80
lea ecx, [ebp - 0x170]
call fcn.10035cd0
add esp, 0xc
push eax
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x81
call fcn.10036d00
push eax
add eax, 0x10
push eax
push ecx
lea eax, [ebp - 0xfc]
push eax
lea ecx, [ebp - 0x18]
call fcn.10036ac0
lea eax, [ebp - 0x160]
mov byte [ebp - 4], 0x85
push eax
call edi
lea eax, [ebp - 0x130]
mov byte [ebp - 4], 0x88
push eax
call edi
lea eax, [ebp - 0x118]
mov byte [ebp - 4], 0x78
push eax
call edi
mov eax, dword [ebp - 0x104]
mov byte [ebp - 0xf1], 1
mov word [ebp - 0x28], si
mov dword [ebp - 0x20], eax
push ecx
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x89
push eax
lea edx, [ebp - 0xf1]
lea ecx, [ebp - 0x138]
call fcn.100359c0
push eax
mov edx, str.jsfw02
mov byte [ebp - 4], 0x8a
lea ecx, [ebp - 0x170]
call fcn.10035cd0
add esp, 0xc
push eax
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0x8b
call fcn.10036d00
push eax
add eax, 0x10
push eax
push ecx
lea eax, [ebp - 0xfc]
push eax
lea ecx, [ebp - 0x18]
call fcn.10036ac0
lea eax, [ebp - 0x160]
mov byte [ebp - 4], 0x8f
push eax
call edi
lea eax, [ebp - 0x130]
mov byte [ebp - 4], 0x92
push eax
call edi
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x78
push eax
call edi
lea ecx, [ebp - 0x130]
mov byte [ebp - 0xf1], 0
call fcn.1003ca90
mov esi, eax
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x93
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x94
push esi
push eax
lea edx, [ebp - 0xf1]
lea ecx, [ebp - 0x178]
call fcn.10036100
add esp, 8
mov byte [ebp - 4], 0x95
lea ecx, [ebp - 0x1a8]
push eax
mov dword [ebp - 0x1b0], str.jsfw03
call fcn.10036930
lea eax, [ebp - 0x1b0]
mov byte [ebp - 4], 0x96
push eax
lea ecx, [ebp - 0x18]
call fcn.10036dd0
push eax
add eax, 0x10
push eax
push ecx
lea eax, [ebp - 0xfc]
push eax
lea ecx, [ebp - 0x18]
call fcn.10036ac0
lea ecx, [ebp - 0x1a8]
mov byte [ebp - 4], 0x98
call fcn.10031920
lea ecx, [ebp - 0x178]
mov byte [ebp - 4], 0x99
call fcn.10031920
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x93
push eax
call edi
mov byte [ebp - 4], 0x9a
mov edx, dword [ebp - 0x11c]
cmp edx, 8
jb 0x100410e7
mov ecx, dword [ebp - 0x130]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x100410dd
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10041641
push edx
push ecx
call fcn.1009441c
add esp, 8
xor eax, eax
mov dword [ebp - 0x120], 0
mov dword [ebp - 0x11c], 7
mov word [ebp - 0x130], ax
mov byte [ebp - 4], 0x78
jmp 0x10041353
cmp eax, 1
jne 0x10041227
mov esi, 0x16
mov byte [ebp - 0xf1], al
mov word [ebp - 0x28], si
mov dword [ebp - 0x20], ebx
push ecx
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x9e
push eax
lea edx, [ebp - 0xf1]
lea ecx, [ebp - 0x138]
call fcn.100359c0
push eax
mov edx, str.stj01
mov byte [ebp - 4], 0x9f
lea ecx, [ebp - 0x170]
call fcn.10035cd0
add esp, 0xc
push eax
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0xa0
call fcn.10036d00
push eax
add eax, 0x10
push eax
push ecx
lea eax, [ebp - 0xfc]
push eax
lea ecx, [ebp - 0x18]
call fcn.10036ac0
lea eax, [ebp - 0x160]
mov byte [ebp - 4], 0xa4
push eax
call edi
lea eax, [ebp - 0x130]
mov byte [ebp - 4], 0xa7
push eax
call edi
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x78
push eax
call edi
mov eax, dword [ebp - 0x104]
mov byte [ebp - 0xf1], 1
mov word [ebp - 0x118], si
mov dword [ebp - 0x110], eax
push ecx
lea eax, [ebp - 0x118]
mov byte [ebp - 4], 0xa8
push eax
lea edx, [ebp - 0xf1]
lea ecx, [ebp - 0x138]
call fcn.100359c0
push eax
mov edx, str.stj02
mov byte [ebp - 4], 0xa9
lea ecx, [ebp - 0x170]
call fcn.10035cd0
add esp, 0xc
push eax
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0xaa
call fcn.10036d00
push eax
add eax, 0x10
push eax
push ecx
lea eax, [ebp - 0xfc]
push eax
lea ecx, [ebp - 0x18]
call fcn.10036ac0
lea eax, [ebp - 0x160]
mov byte [ebp - 4], 0xae
push eax
call edi
mov byte [ebp - 4], 0xb1
jmp 0x1004133d
cmp eax, 2
jne 0x10041353
mov esi, 0x16
mov byte [ebp - 0xf1], 1
mov word [ebp - 0x28], si
mov dword [ebp - 0x20], ebx
push ecx
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0xb2
push eax
lea edx, [ebp - 0xf1]
lea ecx, [ebp - 0x138]
call fcn.100359c0
push eax
mov edx, str.butj01
mov byte [ebp - 4], 0xb3
lea ecx, [ebp - 0x170]
call fcn.10035cd0
add esp, 0xc
push eax
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0xb4
call fcn.10036d00
push eax
add eax, 0x10
push eax
push ecx
lea eax, [ebp - 0xfc]
push eax
lea ecx, [ebp - 0x18]
call fcn.10036ac0
lea eax, [ebp - 0x160]
mov byte [ebp - 4], 0xb8
push eax
call edi
lea eax, [ebp - 0x130]
mov byte [ebp - 4], 0xbb
push eax
call edi
lea eax, [ebp - 0x28]
mov byte [ebp - 4], 0x78
push eax
call edi
mov eax, dword [ebp - 0x104]
mov byte [ebp - 0xf1], 1
mov word [ebp - 0x118], si
mov dword [ebp - 0x110], eax
push ecx
lea eax, [ebp - 0x118]
mov byte [ebp - 4], 0xbc
push eax
lea edx, [ebp - 0xf1]
lea ecx, [ebp - 0x138]
call fcn.100359c0
push eax
mov edx, str.butj02
mov byte [ebp - 4], 0xbd
lea ecx, [ebp - 0x170]
call fcn.10035cd0
add esp, 0xc
push eax
lea ecx, [ebp - 0x18]
mov byte [ebp - 4], 0xbe
call fcn.10036d00
push eax
add eax, 0x10
push eax
push ecx
lea eax, [ebp - 0xfc]
push eax
lea ecx, [ebp - 0x18]
call fcn.10036ac0
lea eax, [ebp - 0x160]
mov byte [ebp - 4], 0xc2
push eax
call edi
mov byte [ebp - 4], 0xc5
lea eax, [ebp - 0x130]
push eax
call edi
lea eax, [ebp - 0x118]
mov byte [ebp - 4], 0x78
push eax
call edi
lea edx, [ebp - 0x18]
lea ecx, [ebp - 0xf0]
call fcn.100299d0
lea eax, [ebp - 0xf0]
mov byte [ebp - 4], 0xc6
push eax
lea eax, [ebp - 0x130]
push str.ACTION_POST_DATA:
push eax
call fcn.10004d00
add esp, 0xc
mov byte [ebp - 4], 0xc7
mov edx, dword [ebp - 0x11c]
cmp edx, 8
jb 0x100413c4
mov ecx, dword [ebp - 0x130]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x100413ba
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10041646
push edx
push ecx
call fcn.1009441c
add esp, 8
xor eax, eax
mov dword [ebp - 0x120], 0
mov dword [ebp - 0x11c], 7
mov word [ebp - 0x130], ax
mov byte [ebp - 4], 0xcb
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x4c], 7
mov word [ebp - 0x60], ax
lea edx, [ebp - 0x60]
mov byte [ebp - 4], 0xcc
lea ecx, [ebp - 0xf0]
call fcn.10025f50
test ebx, ebx
sete bl
mov byte [ebp - 4], 0xcd
mov edx, dword [ebp - 0x4c]
cmp edx, 8
jb 0x1004144e
mov ecx, dword [ebp - 0x60]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x10041444
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1004164b
push edx
push ecx
call fcn.1009441c
add esp, 8
xor eax, eax
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 7
mov word [ebp - 0x60], ax
mov byte [ebp - 4], 0xd1
mov edx, dword [ebp - 0xdc]
cmp edx, 8
jb 0x100414a6
mov ecx, dword [ebp - 0xf0]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x1004149c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10041650
push edx
push ecx
call fcn.1009441c
add esp, 8
xor eax, eax
mov dword [ebp - 0xe0], 0
mov dword [ebp - 0xdc], 7
mov word [ebp - 0xf0], ax
mov byte [ebp - 4], 0xd5
mov edx, dword [ebp - 0xac]
cmp edx, 8
jb 0x10041507
mov ecx, dword [ebp - 0xc0]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x100414fd
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10041655
push edx
push ecx
call fcn.1009441c
add esp, 8
xor eax, eax
mov dword [ebp - 0xb0], 0
mov dword [ebp - 0xac], 7
mov word [ebp - 0xc0], ax
mov byte [ebp - 4], 0xda
lea ecx, [ebp - 0x18]
mov eax, dword [ebp - 0x18]
push eax
push dword [eax]
lea eax, [ebp - 0xf8]
push eax
call fcn.10034f00
push 0x58
push dword [ebp - 0x18]
call fcn.1009441c
add esp, 8
mov byte [ebp - 4], 0xdb
mov edx, dword [ebp - 0xc4]
cmp edx, 8
jb 0x1004158e
mov ecx, dword [ebp - 0xd8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x10041584
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1004165a
push edx
push ecx
call fcn.1009441c
add esp, 8
xor eax, eax
mov dword [ebp - 0xc8], 0
mov dword [ebp - 0xc4], 7
mov word [ebp - 0xd8], ax
lea ecx, [ebp + 8]
mov dword [ebp - 4], 0xffffffff
call fcn.1002c800
mov al, bl
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10093f25
mov esp, ebp
pop ebp
ret
call fcn.1009ba34
call fcn.1009ba34
call fcn.1009ba34
call fcn.1009ba34
call fcn.1009ba34
call fcn.1009ba34
call fcn.1009ba34
call fcn.1009ba34
call fcn.1009ba34
call fcn.1009ba34
call fcn.1009ba34
call fcn.1009ba34
call fcn.1009ba34
call fcn.1009ba34
call fcn.1009ba34
call fcn.1009ba34
call fcn.1009ba34
call fcn.1009ba34
call fcn.1009ba34
call fcn.1009ba34
call fcn.1009ba34
call fcn.1009ba34
call fcn.1009ba34
call fcn.1009ba34
call fcn.1009ba34
call fcn.1009ba34
call fcn.1009ba34
int3