Function at 0x100cbd80
Capabilities:
Create thread
Resume thread

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x1011c83a
push eax
mov dword fs:[0], esp
mov eax, 0x1128
push ebx
call fcn.100711a0
mov eax, dword [ebx + 0xc]
mov dword [0x10154920], eax
mov eax, dword [ebx + 0x14]
mov dword [ebp - 0x20], 0
mov byte [0x10150e6a], 0
mov dword [0x10154924], eax
push esi
push edi
test eax, eax
je 0x100cbe5f
mov esi, dword [eax]
mov edi, dword [sym.imp.KERNEL32.dll_lstrcpyW]
test esi, esi
je 0x100cbe0c
lea eax, [esi + 4]
push eax
lea eax, [ebp - 0x938]
push eax
call edi
mov eax, dword [0x10154924]
mov ecx, dword [esi]
push esi
mov dword [eax], ecx
call dword [sym.imp.KERNEL32.dll_GlobalFree]
mov eax, dword [0x10154924]
test eax, eax
je 0x100cbe5f
mov esi, dword [eax]
test esi, esi
je 0x100cbe38
lea eax, [esi + 4]
push eax
lea eax, [ebp - 0x608]
push eax
call edi
mov eax, dword [0x10154924]
mov ecx, dword [esi]
push esi
mov dword [eax], ecx
call dword [sym.imp.KERNEL32.dll_GlobalFree]
mov eax, dword [0x10154924]
test eax, eax
je 0x100cbe5f
mov esi, dword [eax]
test esi, esi
je 0x100cbe5f
lea eax, [esi + 4]
push eax
lea eax, [ebp - 0x1138]
push eax
call edi
mov eax, dword [0x10154924]
mov ecx, dword [esi]
push esi
mov dword [eax], ecx
call dword [sym.imp.KERNEL32.dll_GlobalFree]
mov esi, dword [0x101548d8]
test esi, esi
je 0x100cbedd
mov eax, dword [esi]
test eax, eax
je 0x100cbe95
mov eax, dword [eax + 0x10]
cmp eax, 0xffffffff
je 0x100cbe95
push 0xffffffffffffffff
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
jne 0x100cbe8f
mov ecx, dword [esi]
test ecx, ecx
je 0x100cbe8f
call fcn.10030400
mov esi, dword [0x101548d8]
test esi, esi
je 0x100cbedd
mov edi, dword [esi]
test edi, edi
je 0x100cbed2
mov eax, dword [edi + 0x10]
cmp eax, 0xffffffff
je 0x100cbeb5
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [edi + 0x10], 0xffffffff
mov byte [edi + 8], 0
mov dword [edi + 0xc], 0
push 0x18
push dword [esi]
call fcn.1006fca3
add esp, 8
mov dword [esi], 0
push 4
push esi
call fcn.1006fca3
add esp, 8
push 0xc
xor eax, eax
mov dword [ebp - 0xac], 0
push str.last_logined
lea ecx, [ebp - 0xbc]
mov dword [ebp - 0xa8], 7
mov word [ebp - 0xbc], ax
call fcn.1001a860
push 7
xor eax, eax
mov dword [ebp - 0x94], 0
push str.UserSet
lea ecx, [ebp - 0xa4]
mov dword [ebp - 0x90], 7
mov word [ebp - 0xa4], ax
call fcn.1001a860
xor eax, eax
mov dword [ebp - 0x7c], 0
lea ecx, [ebp - 0x608]
mov dword [ebp - 0x78], 7
mov word [ebp - 0x8c], ax
lea edx, [ecx + 2]
nop dword [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x100cbf60
sub ecx, edx
lea eax, [ebp - 0x608]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x8c]
call fcn.1001a860
lea eax, [ebp - 0xbc]
push eax
lea eax, [ebp - 0xa4]
push eax
lea edx, [ebp - 0x8c]
lea ecx, [ebp - 0x294]
call fcn.100ce9e0
mov edx, dword [ebp - 0x78]
add esp, 8
cmp edx, 8
jb 0x100cbfe1
mov ecx, dword [ebp - 0x8c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x100cbfd7
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100cd16f
push edx
push ecx
call fcn.1006fca3
add esp, 8
mov edx, dword [ebp - 0x90]
xor eax, eax
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x78], 7
mov word [ebp - 0x8c], ax
cmp edx, 8
jb 0x100cc038
mov ecx, dword [ebp - 0xa4]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x100cc02e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100cd174
push edx
push ecx
call fcn.1006fca3
add esp, 8
mov edx, dword [ebp - 0xa8]
xor eax, eax
mov dword [ebp - 0x94], 0
mov dword [ebp - 0x90], 7
mov word [ebp - 0xa4], ax
cmp edx, 8
jb 0x100cc095
mov ecx, dword [ebp - 0xbc]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x100cc08b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100cd179
push edx
push ecx
call fcn.1006fca3
add esp, 8
xor eax, eax
mov dword [ebp - 0xac], 0
push 6
push str.is_vip
lea ecx, [ebp - 0x74]
mov dword [ebp - 0xa8], 7
mov word [ebp - 0xbc], ax
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x60], 7
mov word [ebp - 0x74], ax
call fcn.1001a860
push 7
xor eax, eax
mov dword [ebp - 0xdc], 0
push str.UserSet
lea ecx, [ebp - 0xec]
mov dword [ebp - 0xd8], 7
mov word [ebp - 0xec], ax
call fcn.1001a860
xor eax, eax
mov dword [ebp - 0xc4], 0
lea ecx, [ebp - 0x608]
mov dword [ebp - 0xc0], 7
mov word [ebp - 0xd4], ax
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x100cc124
sub ecx, edx
lea eax, [ebp - 0x608]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0xd4]
call fcn.1001a860
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0xec]
push eax
lea edx, [ebp - 0xd4]
lea ecx, [ebp - 0x3d8]
call fcn.100ce9e0
mov edx, dword [ebp - 0xc0]
add esp, 8
cmp edx, 8
jb 0x100cc1a5
mov ecx, dword [ebp - 0xd4]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x100cc19b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100cd17e
push edx
push ecx
call fcn.1006fca3
add esp, 8
mov edx, dword [ebp - 0xd8]
xor eax, eax
mov dword [ebp - 0xc4], 0
mov dword [ebp - 0xc0], 7
mov word [ebp - 0xd4], ax
cmp edx, 8
jb 0x100cc202
mov ecx, dword [ebp - 0xec]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x100cc1f8
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100cd183
push edx
push ecx
call fcn.1006fca3
add esp, 8
mov edx, dword [ebp - 0x60]
xor eax, eax
mov dword [ebp - 0xdc], 0
mov dword [ebp - 0xd8], 7
mov word [ebp - 0xec], ax
cmp edx, 8
jb 0x100cc259
mov ecx, dword [ebp - 0x74]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x100cc24f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100cd188
push edx
push ecx
call fcn.1006fca3
add esp, 8
xor eax, eax
mov dword [ebp - 0x64], 0
push 0x11
push str.last_logined_user
lea ecx, [ebp - 0x134]
mov dword [ebp - 0x60], 7
mov word [ebp - 0x74], ax
mov dword [ebp - 0x124], eax
mov dword [ebp - 0x120], 7
mov word [ebp - 0x134], ax
call fcn.1001a860
push 7
xor eax, eax
mov dword [ebp - 0x10c], 0
push str.UserSet
lea ecx, [ebp - 0x11c]
mov dword [ebp - 0x108], 7
mov word [ebp - 0x11c], ax
call fcn.1001a860
xor eax, eax
mov dword [ebp - 0xf4], 0
lea ecx, [ebp - 0x608]
mov dword [ebp - 0xf0], 7
mov word [ebp - 0x104], ax
lea edx, [ecx + 2]
nop dword [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x100cc2f0
sub ecx, edx
lea eax, [ebp - 0x608]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x104]
call fcn.1001a860
lea eax, [ebp - 0x134]
push eax
lea eax, [ebp - 0x11c]
push eax
lea edx, [ebp - 0x104]
lea ecx, [ebp - 0x378]
call fcn.100ce9e0
mov edx, dword [ebp - 0xf0]
add esp, 8
cmp edx, 8
jb 0x100cc374
mov ecx, dword [ebp - 0x104]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x100cc36a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100cd18d
push edx
push ecx
call fcn.1006fca3
add esp, 8
mov edx, dword [ebp - 0x108]
xor eax, eax
mov dword [ebp - 0xf4], 0
mov dword [ebp - 0xf0], 7
mov word [ebp - 0x104], ax
cmp edx, 8
jb 0x100cc3d1
mov ecx, dword [ebp - 0x11c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x100cc3c7
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100cd192
push edx
push ecx
call fcn.1006fca3
add esp, 8
mov edx, dword [ebp - 0x120]
xor eax, eax
mov dword [ebp - 0x10c], 0
mov dword [ebp - 0x108], 7
mov word [ebp - 0x11c], ax
cmp edx, 8
jb 0x100cc42e
mov ecx, dword [ebp - 0x134]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x100cc424
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100cd197
push edx
push ecx
call fcn.1006fca3
add esp, 8
mov edi, dword [ebp - 0x284]
xor eax, eax
mov dword [ebp - 0x124], 0
mov dword [ebp - 0x120], 7
mov word [ebp - 0x134], ax
test edi, edi
je 0x100cc4c1
push 1
push 0x1013379c
lea ecx, [ebp - 0x44]
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x30], 7
mov word [ebp - 0x44], ax
call fcn.1001a860
mov eax, dword [ebp - 0x34]
lea edx, [ebp - 0x44]
mov esi, dword [ebp - 0x44]
lea ecx, [ebp - 0x294]
cmp edi, eax
mov dword [ebp - 0x1f0], edi
mov dword [ebp - 0x20], 1
cmovb edi, eax
mov dword [ebp - 0x1ec], eax
cmp dword [ebp - 0x30], 8
push edi
cmovae edx, esi
cmp dword [ebp - 0x280], 8
cmovae ecx, dword [ebp - 0x294]
call fcn.100d3a80
add esp, 4
test eax, eax
je 0x100cc4c4
mov byte [ebp - 0x15], 0
jmp 0x100cc4c8
mov esi, dword [ebp - 0x44]
mov byte [ebp - 0x15], 1
test byte [ebp - 0x20], 1
je 0x100cc519
mov eax, dword [ebp - 0x30]
cmp eax, 8
jb 0x100cc505
lea ecx, [eax*2 + 2]
mov eax, esi
cmp ecx, 0x1000
jb 0x100cc4fb
mov esi, dword [esi - 4]
add ecx, 0x23
sub eax, esi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100cd19c
push ecx
push esi
call fcn.1006fca3
add esp, 8
xor eax, eax
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 7
mov word [ebp - 0x44], ax
cmp byte [ebp - 0x15], 0
je 0x100cc53b
push 0
push 0
mov byte [0x10150e69], 0
mov byte [0x10150e6a], 1
call fcn.100d1690
jmp 0x100cd13b
push 4
xor eax, eax
mov dword [ebp - 0x308], 0
push str.http
lea ecx, [ebp - 0x318]
mov dword [ebp - 0x304], 7
mov word [ebp - 0x318], ax
call fcn.1001a860
xor eax, eax
mov dword [ebp - 0x2f0], 0
sub esp, 0x18
mov dword [ebp - 0x2ec], 7
mov edx, esp
mov word [ebp - 0x300], ax
lea ecx, [ebp - 0x1138]
mov dword [ebp - 0x2e8], eax
mov dword [ebp - 0x2d4], eax
lea esi, [ecx + 2]
mov dword [ebp - 0x2d0], 7
mov dword [edx + 0x10], eax
mov dword [edx + 0x14], 7
mov word [ebp - 0x2e4], ax
mov dword [ebp - 0x2bc], eax
mov dword [ebp - 0x2b8], 7
mov word [ebp - 0x2cc], ax
mov word [edx], ax
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x100cc5d6
sub ecx, esi
lea eax, [ebp - 0x1138]
sar ecx, 1
push ecx
push eax
mov ecx, edx
call fcn.1001a860
lea ecx, [ebp - 0x318]
call fcn.100fb8c0
test al, al
jne 0x100cc618
push 0
push 0
mov byte [0x10150e6a], 1
call fcn.100d1690
jmp 0x100cd130
xor eax, eax
mov dword [ebp - 0x26c], 0
lea ecx, [ebp - 0x938]
mov dword [ebp - 0x268], 7
mov word [ebp - 0x27c], ax
lea edx, [ecx + 2]
mov dword [ebp - 0x2a0], eax
mov dword [ebp - 0x29c], 7
mov word [ebp - 0x2b0], ax
mov dword [ebp - 0x254], eax
mov dword [ebp - 0x250], 7
mov word [ebp - 0x264], ax
mov dword [ebp - 0x1b8], eax
mov dword [ebp - 0x1b4], 7
mov word [ebp - 0x1c8], ax
mov dword [ebp - 0x23c], eax
mov dword [ebp - 0x238], 7
mov word [ebp - 0x24c], ax
mov dword [ebp - 0x1a0], eax
mov dword [ebp - 0x19c], 7
mov word [ebp - 0x1b0], ax
mov dword [ebp - 0x13c], eax
mov dword [ebp - 0x138], 7
mov word [ebp - 0x14c], ax
nop dword [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x100cc6d0
sub ecx, edx
lea eax, [ebp - 0x938]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x14c]
call fcn.1001a860
lea eax, [ebp - 0x1b0]
push eax
lea eax, [ebp - 0x24c]
push eax
lea eax, [ebp - 0x1c8]
push eax
lea eax, [ebp - 0x264]
push eax
lea eax, [ebp - 0x2b0]
push eax
lea edx, [ebp - 0x27c]
lea ecx, [ebp - 0x14c]
call fcn.100cebb0
mov edx, dword [ebp - 0x138]
add esp, 0x14
cmp edx, 8
jb 0x100cc769
mov ecx, dword [ebp - 0x14c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x100cc75f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100cd1a1
push edx
push ecx
call fcn.1006fca3
add esp, 8
xor eax, eax
mov dword [ebp - 0x13c], 0
push eax
sub esp, 0x18
mov word [ebp - 0x14c], ax
mov eax, esp
mov dword [ebp - 0x138], 7
push ecx
push eax
lea ecx, [ebp - 0x318]
call fcn.100fb690
add esp, 4
lea ecx, [ebp - 0x180]
call fcn.100e93a0
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x24], 0
call fcn.1001ecb0
mov dword [ebp - 0x28], eax
lea ecx, [ebp - 0x318]
lea eax, [ebp - 0x28]
push eax
call fcn.100fb220
mov ecx, dword [ebp - 0x28]
mov eax, dword [ecx]
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x1c], ecx
cmp eax, ecx
je 0x100cc9e0
add eax, 0x10
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x20], eax
lea ecx, [eax + 0x18]
mov edx, SysReAllocString
mov dword [ebp - 0x14], ecx
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
cmp dword [ecx + 0x14], 8
mov edi, dword [ecx + 0x10]
mov dword [ebp - 0x1c], edi
jb 0x100cc814
mov ecx, dword [ecx]
mov dword [ebp - 0x14], ecx
cmp edi, 8
jae 0x100cc82e
movups xmm0, xmmword [ecx]
movups xmmword [esi], xmm0
mov dword [esi + 0x10], edi
mov dword [esi + 0x14], 7
jmp 0x100cc8f8
or edi, 7
mov dword [ebp - 0x1e8], SysStringLen
cmp edi, 0x7ffffffe
mov dword [ebp - 0x204], edi
mov dword [ebp - 0x1f4], 8
cmova edi, edx
mov dword [ebp - 0x1f8], SysStringLen
mov dword [ebp - 0x1fc], SysStringLen
mov dword [ebp - 0x200], SysStringLen
lea eax, [edi + 1]
lea ecx, [eax + eax]
cmp eax, 0x7fffffff
jbe 0x100cc884
or ecx, 0xffffffff
jmp 0x100cc88c
cmp ecx, 0x1000
jb 0x100cc8b5
lea eax, [ecx + 0x23]
cmp eax, ecx
mov ecx, 0xffffffff
cmovbe eax, ecx
push eax
call fcn.1006fcb6
add esp, 4
test eax, eax
je 0x100cd16f
lea ecx, [eax + 0x23]
and ecx, 0xffffffe0
mov dword [ecx - 4], eax
jmp 0x100cc8c8
test ecx, ecx
je 0x100cc8c6
push ecx
call fcn.1006fcb6
add esp, 4
mov ecx, eax
jmp 0x100cc8c8
xor ecx, ecx
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x298], ecx
mov dword [esi], ecx
lea eax, [eax*2 + 2]
push eax
push dword [ebp - 0x14]
push ecx
call fcn.10073590
mov eax, dword [ebp - 0x1c]
add esp, 0xc
mov dword [esi + 0x10], eax
mov edx, SysReAllocString
mov eax, dword [ebp - 0x20]
mov dword [esi + 0x14], edi
sub esp, 0x18
mov edi, esp
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 0
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
mov dword [ebp - 0x1c], ecx
jb 0x100cc91c
mov eax, dword [eax]
mov dword [ebp - 0x20], eax
cmp ecx, 8
jae 0x100cc936
movups xmm0, xmmword [eax]
movups xmmword [edi], xmm0
mov dword [edi + 0x10], ecx
mov dword [edi + 0x14], 7
jmp 0x100cc9c0
mov esi, ecx
mov dword [ebp - 0x1cc], SysStringLen
or esi, 7
mov dword [ebp - 0x1d0], 8
cmp esi, 0x7ffffffe
mov dword [ebp - 0x1e0], esi
mov dword [ebp - 0x1d4], SysStringLen
cmova esi, edx
mov dword [ebp - 0x1d8], SysStringLen
mov dword [ebp - 0x1dc], SysStringLen
lea eax, [esi + 1]
lea ecx, [eax + eax]
cmp eax, 0x7fffffff
mov eax, 0xffffffff
cmova ecx, eax
push ecx
call fcn.1001c130
mov ecx, dword [ebp - 0x1c]
add esp, 4
mov dword [ebp - 0x1e4], eax
mov dword [edi], eax
lea ecx, [ecx*2 + 2]
push ecx
push dword [ebp - 0x20]
push eax
call fcn.10073590
mov eax, dword [ebp - 0x1c]
add esp, 0xc
mov dword [edi + 0x10], eax
mov dword [edi + 0x14], esi
push 0
lea ecx, [ebp - 0x180]
call fcn.100e8ff0
lea ecx, [ebp - 0x2c]
call fcn.1001e870
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x2c]
jmp 0x100cc7d4
lea ecx, [ebp - 0x1c8]
call fcn.100d1460
sub esp, 0x18
lea eax, [ebp - 0x27c]
mov ecx, esp
push eax
call fcn.1001cdf0
sub esp, 0x18
xor eax, eax
mov ecx, esp
push 4
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
push 0x101337a0
mov word [ecx], ax
call fcn.1001a860
push 0
lea ecx, [ebp - 0x180]
call fcn.100e8ff0
sub esp, 0x18
lea eax, [ebp - 0x264]
mov ecx, esp
push eax
call fcn.1001cdf0
sub esp, 0x18
xor eax, eax
mov ecx, esp
push 7
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
push str.channel
mov word [ecx], ax
call fcn.1001a860
push 0
lea ecx, [ebp - 0x180]
call fcn.100e8ff0
sub esp, 0x18
lea eax, [ebp - 0x1c8]
mov ecx, esp
push eax
call fcn.1001cdf0
sub esp, 0x18
xor eax, eax
mov ecx, esp
push 0xa
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
push str.subchannel
mov word [ecx], ax
call fcn.1001a860
push 0
lea ecx, [ebp - 0x180]
call fcn.100e8ff0
sub esp, 0x18
lea eax, [ebp - 0x24c]
mov ecx, esp
push eax
call fcn.1001cdf0
sub esp, 0x18
xor eax, eax
mov ecx, esp
push 0xf
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
push str.softinstalltime
mov word [ecx], ax
call fcn.1001a860
push 0
lea ecx, [ebp - 0x180]
call fcn.100e8ff0
cmp dword [ebp - 0x1a0], 0
sete al
test al, al
jne 0x100ccb43
sub esp, 0x18
lea eax, [ebp - 0x1b0]
mov ecx, esp
push eax
call fcn.1001cdf0
sub esp, 0x18
xor eax, eax
mov ecx, esp
push 4
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
push 0x101335b0
mov word [ecx], ax
call fcn.1001a860
push 0
lea ecx, [ebp - 0x180]
call fcn.100e8ff0
sub esp, 0x18
mov ecx, esp
call fcn.100d4a10
sub esp, 0x18
xor eax, eax
mov ecx, esp
push 0x11
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
push str.systeminstalltime
mov word [ecx], ax
call fcn.1001a860
push 0
lea ecx, [ebp - 0x180]
call fcn.100e8ff0
xor eax, eax
mov dword [ebp - 0x338], 0
mov word [ebp - 0x348], ax
mov dword [ebp - 0x4c], eax
mov word [ebp - 0x5c], ax
lea eax, [ebp - 0x390]
push eax
mov dword [ebp - 0x334], 7
mov dword [ebp - 0x48], 7
call fcn.100db530
mov esi, eax
lea eax, [ebp - 0x5c]
cmp eax, esi
je 0x100ccbe9
mov ecx, eax
call fcn.1001a0c0
movups xmm0, xmmword [esi]
xor eax, eax
movups xmmword [ebp - 0x5c], xmm0
movq xmm0, qword [esi + 0x10]
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 7
movq qword [ebp - 0x4c], xmm0
mov word [esi], ax
lea ecx, [ebp - 0x390]
call fcn.1001a000
mov edx, str.__r_t_n
lea ecx, [ebp - 0x5c]
call fcn.100d32a0
mov edx, str.__r_t_n
lea ecx, [ebp - 0x5c]
call fcn.100d31e0
sub esp, 0x18
lea eax, [ebp - 0x5c]
mov ecx, esp
push eax
call fcn.1001cdf0
sub esp, 0x18
xor eax, eax
mov ecx, esp
push 6
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
push str.diskid
mov word [ecx], ax
call fcn.1001a860
push 0
lea ecx, [ebp - 0x180]
call fcn.100e8ff0
xor eax, eax
mov dword [ebp - 0x320], 0
lea ecx, [ebp - 0x3fc]
mov dword [ebp - 0x31c], 7
mov word [ebp - 0x330], ax
call fcn.100dd620
sub esp, 0x18
lea ecx, [ebp - 0x3fc]
push esp
call fcn.100dce00
sub esp, 0x18
xor eax, eax
mov ecx, esp
push 3
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
push 0x101336b4
mov word [ecx], ax
call fcn.1001a860
push 0
lea ecx, [ebp - 0x180]
call fcn.100e8ff0
lea ecx, [ebp - 0x730]
call fcn.100db1e0
lea ecx, [ebp - 0x730]
call fcn.100d9500
movzx esi, byte [ebp - 0x624]
sub esp, 0x18
mov ecx, esp
xor eax, eax
push 9
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
push str.osversion
mov word [ecx], ax
call fcn.1001a860
push esi
lea ecx, [ebp - 0x180]
call fcn.100e9260
xor eax, eax
cmp byte [ebp - 0x623], al
setne al
sub esp, 0x18
mov ecx, esp
inc eax
mov dword [ebp - 0x14], eax
xor eax, eax
push 5
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
push str.osbit
mov word [ecx], ax
call fcn.1001a860
push dword [ebp - 0x14]
lea ecx, [ebp - 0x180]
call fcn.100e9260
call fcn.100db340
xor ecx, ecx
test al, al
setne cl
sub esp, 0x18
mov dword [ebp - 0x14], ecx
xor eax, eax
mov ecx, esp
push 3
push 0x101336dc
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
mov word [ecx], ax
call fcn.1001a860
push dword [ebp - 0x14]
lea ecx, [ebp - 0x180]
call fcn.100e9260
call fcn.100c6530
sub esp, 0x18
mov esi, eax
mov ecx, esp
xor eax, eax
push 4
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
push str.safe
mov word [ecx], ax
call fcn.1001a860
push esi
lea ecx, [ebp - 0x180]
call fcn.100e9260
call fcn.100d45f0
sub esp, 0x18
mov esi, eax
mov ecx, esp
xor eax, eax
push 2
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
push 0x101336f0
mov word [ecx], ax
call fcn.1001a860
push esi
lea ecx, [ebp - 0x180]
call fcn.100e9260
sub esp, 0x18
lea eax, [ebp - 0x378]
mov ecx, esp
push eax
call fcn.1001cdf0
sub esp, 0x18
xor eax, eax
mov ecx, esp
push 8
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
push str.last_uid
mov word [ecx], ax
call fcn.1001a860
push 0
lea ecx, [ebp - 0x180]
call fcn.100e8ff0
xor eax, eax
mov dword [ebp - 0x20c], 0
lea ecx, [ebp - 0x608]
mov dword [ebp - 0x208], 7
mov word [ebp - 0x21c], ax
lea edx, [ecx + 2]
nop word [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x100cce60
sub ecx, edx
lea eax, [ebp - 0x608]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x21c]
call fcn.1001a860
lea edx, [ebp - 0x21c]
lea ecx, [ebp - 0x3a8]
call fcn.100e69e0
mov edx, eax
lea ecx, [ebp - 0x360]
call fcn.100e69e0
lea ecx, [ebp - 0x3a8]
call fcn.1001a000
lea ecx, [ebp - 0x21c]
call fcn.1001a000
push 0x18
xor eax, eax
mov dword [ebp - 0x224], 0
push str.Cacheuninstallunbg.png
lea ecx, [ebp - 0x234]
mov dword [ebp - 0x220], 7
mov word [ebp - 0x234], ax
call fcn.1001a860
lea eax, [ebp - 0x234]
push eax
lea edx, [ebp - 0x360]
lea ecx, [ebp - 0x198]
call fcn.100e6cb0
add esp, 4
lea ecx, [ebp - 0x234]
call fcn.1001a000
push 0x30
call fcn.1006fcb6
mov edi, eax
add esp, 4
xor eax, eax
xor ecx, ecx
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 7
mov word [edi], ax
mov dword [edi + 0x28], eax
lea eax, [ebp - 0x3c0]
mov dword [edi + 0x2c], 7
mov word [edi + 0x18], cx
lea ecx, [ebp - 0x180]
push eax
call fcn.100e8ed0
mov esi, eax
cmp edi, esi
je 0x100ccf7c
mov ecx, edi
call fcn.1001a0c0
movups xmm0, xmmword [esi]
xor eax, eax
movups xmmword [edi], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [edi + 0x10], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 7
mov word [esi], ax
lea ecx, [ebp - 0x3c0]
call fcn.1001a000
lea eax, [ebp - 0x198]
lea ecx, [edi + 0x18]
cmp ecx, eax
je 0x100ccfae
cmp dword [ebp - 0x184], 8
push dword [ebp - 0x188]
cmovae eax, dword [ebp - 0x198]
push eax
call fcn.1001a860
push 4
call fcn.1006fcb6
add esp, 4
mov esi, eax
push 0x18
call fcn.1006fcb6
add esp, 4
mov dword [0x101548d8], esi
mov dword [eax], 0
mov dword [eax + 4], 0
mov dword [eax + 0x10], 0xffffffff
mov byte [eax + 8], 0
mov dword [eax + 0x14], 0
mov dword [eax + 0xc], 0
mov dword [esi], eax
mov dword [eax], edi
mov eax, dword [esi]
mov dword [eax + 4], 0x100cd240
mov ecx, dword [esi]
test ecx, ecx
je 0x100cd05f
cmp dword [ecx + 4], 0
je 0x100cd05f
lea eax, [ecx + 0xc]
push eax
push 4
push ecx
push 0x10030370
push 0
push 0
call fcn.100a0acc
mov ecx, dword [esi]
add esp, 0x18
mov dword [ecx + 0x10], eax
mov eax, dword [esi]
cmp dword [eax + 0x10], 0
jne 0x100cd03e
mov dword [eax + 0x10], 0xffffffff
mov ecx, dword [esi]
call fcn.10030400
jmp 0x100cd05f
mov byte [eax + 8], 1
mov eax, dword [esi]
push dword [eax + 0x10]
call dword [sym.imp.KERNEL32.dll_ResumeThread]
cmp eax, 0xffffffff
jne 0x100cd05f
mov ecx, dword [esi]
call fcn.10030400
mov eax, dword [esi]
mov byte [eax + 8], 0
lea ecx, [ebp - 0x198]
call fcn.1001a000
lea ecx, [ebp - 0x360]
call fcn.1001a000
lea ecx, [ebp - 0x730]
call fcn.100db060
lea ecx, [ebp - 0x3fc]
call fcn.100dd490
lea ecx, [ebp - 0x330]
call fcn.1001a000
lea ecx, [ebp - 0x5c]
call fcn.1001a000
lea ecx, [ebp - 0x348]
call fcn.1001a000
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x28]
mov esi, dword [ebp - 0x28]
push dword [esi + 4]
call fcn.1001ecd0
mov eax, dword [ebp - 0x28]
push 0x40
mov dword [eax + 4], esi
mov eax, dword [ebp - 0x28]
mov dword [eax], esi
mov eax, dword [ebp - 0x28]
mov dword [eax + 8], esi
push dword [ebp - 0x28]
mov dword [ebp - 0x24], 0
call fcn.1001a210
add esp, 8
lea ecx, [ebp - 0x180]
call fcn.100e9300
lea ecx, [ebp - 0x1b0]
call fcn.1001a000
lea ecx, [ebp - 0x24c]
call fcn.1001a000
lea ecx, [ebp - 0x1c8]
call fcn.1001a000
lea ecx, [ebp - 0x264]
call fcn.1001a000
lea ecx, [ebp - 0x2b0]
call fcn.1001a000
lea ecx, [ebp - 0x27c]
call fcn.1001a000
lea ecx, [ebp - 0x318]
call fcn.100fbdd0
lea ecx, [ebp - 0x378]
call fcn.1001a000
lea ecx, [ebp - 0x3d8]
call fcn.1001a000
lea ecx, [ebp - 0x294]
call fcn.1001a000
mov ecx, dword [ebp - 0xc]
pop edi
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
call fcn.1007d9e8
call fcn.1007d9e8
call fcn.1007d9e8
call fcn.1007d9e8
call fcn.1007d9e8
call fcn.1007d9e8
call fcn.1007d9e8
call fcn.1007d9e8
call fcn.1007d9e8
call fcn.1007d9e8
call fcn.1007d9e8
int3