Function at 0x100c04df
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10175a55
mov eax, dword fs:[0]
push eax
sub esp, 0x60
mov eax, dword [0x101cfdb0]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
lea ecx, [ebp + 8]
mov dword [ebp - 4], 0
call fcn.1004dcd0
movzx eax, al
add eax, 0xffffff5d
cmp eax, 0x58
ja case.0x100bfc31.165
movzx eax, byte [eax + 0x100c0a80]
jmp dword [eax*4 + 0x100c09b8]
lea ecx, [ebp + 8]
call fcn.1004dcd0
movzx eax, al
cmp eax, 3
ja case.0x100bfc31.165
jmp dword [eax*4 + 0x100c0adc]
mov eax, dword [0x102710b4]
cmp dword [eax + 0x4c8], 0
je case.0x100bfc31.165
xor esi, esi
mov edi, 0xbc
nop dword [eax]
lea ecx, [ebp + 8]
call fcn.1004dcd0
lea ecx, [ebp + 8]
mov byte [ebp - 0x4d], al
call fcn.1004dcd0
lea ecx, [ebp + 8]
mov byte [ebp - 0x4e], al
call fcn.1007fce0
mov ecx, dword [0x102710b4]
lea esi, [esi + 1]
mov edx, eax
mov al, byte [ebp - 0x4d]
mov ecx, dword [ecx + 0x4c8]
mov byte [ecx + esi + 0x83], al
mov ecx, dword [0x102710b4]
mov al, byte [ebp - 0x4e]
mov ecx, dword [ecx + 0x4c8]
mov byte [ecx + esi + 0x9f], al
mov ecx, dword [0x102710b4]
mov ecx, dword [ecx + 0x4c8]
mov dword [edi + ecx], edx
add edi, 4
cmp edi, 0x12c
jl 0x100bfc70
jmp case.0x100bfc31.165
lea ecx, [ebp + 8]
call fcn.1004dcd0
movzx eax, al
sub eax, 1
je 0x100bfd04
sub eax, 1
jne case.0x100bfc31.165
lea ecx, [ebp + 8]
call fcn.100b7ea0
jmp case.0x100bfc31.165
lea ecx, [ebp + 8]
call fcn.100b84d0
jmp case.0x100bfc31.165
lea ecx, [ebp + 8]
call fcn.100bba50
jmp case.0x100bfc31.165
lea ecx, [ebp + 8]
call fcn.1004dcd0
movzx eax, al
dec eax
cmp eax, 5
ja case.0x100bfc31.165
jmp dword [eax*4 + 0x100c0aec]
lea ecx, [ebp + 8]
call fcn.100bbc60
jmp case.0x100bfc31.165
mov eax, dword [0x102710b4]
cmp dword [eax + 0x530], 0
je case.0x100bfc31.165
lea eax, [ebp - 0x44]
push str.RightClick_Exchange_successfully.
push eax
call fcn.100d5c30
lea ecx, [ebp - 0x44]
add esp, 8
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100bfd70
sub ecx, edx
mov dword [ebp - 0x54], ecx
lea esi, [ecx + 0x21]
push esi
call fcn.10117010
push esi
mov edi, eax
push 0
push edi
mov dword [ebp - 0x58], edi
call fcn.101193b0
push dword [ebp - 0x54]
lea eax, [ebp - 0x44]
push eax
lea esi, [edi + 0x20]
push esi
call fcn.10118c50
mov eax, dword [ebp - 0x54]
add esp, 0x1c
mov dword [edi + 0x14], eax
mov dword [edi + 4], esi
mov dword [edi + 0x18], 0x1f
mov ecx, dword ds:[0xf3690c]
push 0
push 0x9700
push dword [ebp - 0x58]
mov eax, dword [0x101b06ec]
call eax
push edi
call fcn.101163d0
mov ecx, dword [0x102710b4]
add esp, 4
mov ecx, dword [ecx + 0x530]
call fcn.10104980
jmp case.0x100bfc31.165
mov eax, dword [0x102710b4]
mov ecx, dword [eax + 0x520]
test ecx, ecx
je case.0x100bfc31.165
call fcn.100debe0
jmp case.0x100bfc31.165
lea ecx, [ebp + 8]
call fcn.100bc3b0
jmp case.0x100bfc31.165
lea ecx, [ebp + 8]
call fcn.100b7960
jmp case.0x100bfc31.165
lea ecx, [ebp + 8]
call fcn.1004dd60
lea ecx, [ebp + 8]
movzx esi, ax
call fcn.1004dd60
lea ecx, [ebp + 8]
movzx edi, ax
call fcn.1004dd60
movzx eax, ax
test ax, ax
je case.0x100bfc31.165
push eax
push edi
push esi
push 1
call fcn.100fde50
jmp case.0x100bfc31.165
lea ecx, [ebp + 8]
call fcn.100b72e0
jmp case.0x100bfc31.165
lea ecx, [ebp + 8]
call fcn.1007fce0
mov ecx, dword [0x102710b4]
mov dword [ecx + 0x1c4], eax
jmp case.0x100bfc31.165
lea ecx, [ebp + 8]
call fcn.100b6970
jmp case.0x100bfc31.165
lea ecx, [ebp + 8]
call fcn.100b6510
jmp case.0x100bfc31.165
lea ecx, [ebp + 8]
call fcn.1004dcd0
movzx eax, al
sub eax, 0
je 0x100bff00
sub eax, 1
je 0x100bfef3
sub eax, 1
jne case.0x100bfc31.165
mov eax, dword [0x102710b4]
mov ecx, dword [eax + 0x4f0]
test ecx, ecx
je 0x100bfedd
mov ecx, dword [ecx]
test ecx, ecx
je 0x100bfedd
push 0
call dword [0x101b07e0]
mov eax, dword [0x102710b4]
mov byte [eax + 0x3f4], 0
mov dword [eax + 0x3f8], 0
jmp case.0x100bfc31.165
lea ecx, [ebp + 8]
call fcn.100b63a0
jmp case.0x100bfc31.165
lea ecx, [ebp + 8]
call fcn.100b5e50
jmp case.0x100bfc31.165
mov eax, dword [0x102710b4]
mov ecx, dword [eax + 0x4d8]
test ecx, ecx
je case.0x100bfc31.165
lea eax, [ebp + 8]
push eax
call fcn.100ecd50
jmp case.0x100bfc31.165
mov edi, dword [0x10271090]
mov dword [ebp - 0x54], edi
test edi, edi
je case.0x100bfc31.165
mov eax, dword [edi + 8]
mov esi, dword [edi + 4]
cmp esi, eax
je 0x100bffde
mov edi, eax
nop
push esi
lea ecx, [ebp - 0x30]
call fcn.10046370
cmp dword [ebp - 0x18], 0x10
lea ecx, [ebp - 0x58]
push 0
push ecx
push 0
push 0xf003f
push 0
push 0
lea eax, [ebp - 0x2c]
cmovae eax, dword [ebp - 0x2c]
push 0
push eax
push connect
call dword [sym.imp.ADVAPI32.dll_RegCreateKeyExA]
push dword [ebp - 0x58]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
lea ecx, [ebp - 0x30]
call fcn.100432e0
mov eax, dword [ebp - 0x18]
cmp eax, 0x10
jb 0x100bffa9
inc eax
push eax
push dword [ebp - 0x2c]
call fcn.100479d0
add esp, 8
mov eax, dword [ebp - 0x30]
push 8
push eax
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0xf
mov byte [ebp - 0x2c], 0
mov dword [ebp - 0x30], 0
call fcn.100479d0
add esi, 0x1c
add esp, 8
cmp esi, edi
jne 0x100bff50
mov edi, dword [ebp - 0x54]
mov esi, dword [edi + 0x14]
mov edi, dword [edi + 0x18]
cmp esi, edi
je case.0x100bfc31.165
nop dword [eax]
push esi
lea ecx, [ebp - 0x30]
call fcn.10046370
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x2c]
cmp dword [ebp - 0x18], 0x10
cmovae ecx, dword [ebp - 0x2c]
call fcn.10043fb0
test al, al
jne 0x100c0035
cmp dword [ebp - 0x18], 0x10
lea eax, [ebp - 0x2c]
push 0
cmovae eax, dword [ebp - 0x2c]
push 0x80
push 1
push 0
push 0
push 0x40000000
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileA]
lea ecx, [ebp - 0x30]
mov byte [ebp - 4], 0
call fcn.100432e0
mov eax, dword [ebp - 0x18]
cmp eax, 0x10
jb 0x100c0056
inc eax
push eax
push dword [ebp - 0x2c]
call fcn.100479d0
add esp, 8
mov eax, dword [ebp - 0x30]
push 8
push eax
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0xf
mov byte [ebp - 0x2c], 0
mov dword [ebp - 0x30], 0
call fcn.100479d0
add esi, 0x1c
add esp, 8
cmp esi, edi
jne 0x100bfff0
jmp case.0x100bfc31.165
lea ecx, [ebp + 8]
call fcn.100bb760
jmp case.0x100bfc31.165
lea ecx, [ebp + 8]
call fcn.100b9e30
jmp case.0x100bfc31.165
lea ecx, [ebp + 8]
call fcn.1004dcd0
cmp al, 1
jne case.0x100bfc31.165
mov eax, dword [0x102710b4]
mov ecx, dword [eax + 0x480]
test ecx, ecx
je case.0x100bfc31.165
lea eax, [ebp + 8]
push eax
call fcn.10110e00
jmp case.0x100bfc31.165
lea ecx, [ebp + 8]
call fcn.100ba3c0
jmp case.0x100bfc31.165
lea ecx, [ebp + 8]
call fcn.100ba010
jmp case.0x100bfc31.165
lea ecx, [ebp + 8]
call fcn.100ba5d0
jmp case.0x100bfc31.165
mov eax, dword [0x102710b4]
cmp dword [eax + 0x474], 0
je case.0x100bfc31.165
lea eax, [ebp + 8]
push eax
call fcn.100fd9c0
jmp case.0x100bfc31.165
lea ecx, [ebp + 8]
call fcn.100bb520
jmp case.0x100bfc31.165
mov ecx, dword [0x102710b4]
lea eax, [ebp + 8]
push eax
mov ecx, dword [ecx + 0x474]
call fcn.100fcbf0
jmp case.0x100bfc31.165
lea ecx, [ebp + 8]
call fcn.1007fce0
lea ecx, [ebp + 8]
mov esi, eax
call fcn.1007fce0
mov ecx, dword [0x102710b4]
mov edi, eax
mov eax, dword [ecx + 0x47c]
mov dword [ecx + 0x1c0], esi
mov dword [ecx + 0x1c8], edi
test eax, eax
je 0x100c019f
mov dword [eax + 0x34], edi
mov ecx, dword [0x102710b4]
mov eax, dword [ecx + 0x47c]
mov dword [eax + 0x30], esi
mov ecx, dword [0x102710b4]
mov ecx, dword [ecx + 0x47c]
call fcn.1010c320
mov ecx, dword [0x102710b4]
mov eax, dword [ecx + 0x4b4]
test eax, eax
je 0x100c01bb
push 0
push 1
push esi
mov ecx, eax
call fcn.10112370
mov ecx, dword [0x102710b4]
mov ecx, dword [ecx + 0x504]
test ecx, ecx
je case.0x100bfc31.165
push edi
push esi
call fcn.10075f50
jmp case.0x100bfc31.165
mov eax, dword [0x102710b4]
mov ecx, dword [eax + 0x324]
test ecx, ecx
je case.0x100bfc31.165
lea eax, [ebp + 8]
push eax
call fcn.100dc8f0
jmp case.0x100bfc31.165
lea ecx, [ebp + 8]
call fcn.100b5930
jmp case.0x100bfc31.165
mov eax, dword [0x102710b4]
cmp dword [eax + 0x474], 0
je case.0x100bfc31.165
lea eax, [ebp + 8]
push eax
call fcn.100fca10
jmp case.0x100bfc31.165
lea ecx, [ebp + 8]
call fcn.100bada0
jmp case.0x100bfc31.165
mov byte [ebp - 4], 2
push 8
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0
call fcn.10047940
lea ecx, [ebp - 0x30]
add esp, 4
mov dword [eax + 4], 0
mov dword [ebp - 0x30], eax
mov dword [eax], ecx
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0xf
mov byte [ebp - 0x2c], 0
mov eax, ecx
mov byte [ebp - 4], 3
push eax
lea ecx, [ebp + 8]
call fcn.1007e900
cmp dword [ebp - 0x18], 0x10
lea eax, [ebp - 0x2c]
cmovae eax, dword [ebp - 0x2c]
mov ecx, eax
mov dword [ebp - 0x58], eax
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x100c02a0
sub ecx, edx
mov dword [ebp - 0x54], ecx
lea esi, [ecx + 0x21]
push esi
call fcn.10117010
push esi
mov edi, eax
push 0
push edi
mov dword [ebp - 0x48], edi
call fcn.101193b0
push dword [ebp - 0x54]
lea esi, [edi + 0x20]
push dword [ebp - 0x58]
push esi
call fcn.10118c50
mov eax, dword [ebp - 0x54]
add esp, 0x1c
mov dword [edi + 0x14], eax
mov dword [edi + 4], esi
mov dword [edi + 0x18], 0x1f
mov ecx, dword ds:[0xf3690c]
push 0
push 0xfff2ab
push dword [ebp - 0x48]
mov eax, dword [0x101b06ec]
call eax
push edi
call fcn.101163d0
add esp, 4
lea ecx, [ebp - 0x30]
call fcn.100432e0
mov eax, dword [ebp - 0x18]
cmp eax, 0x10
jb 0x100c0323
inc eax
push eax
push dword [ebp - 0x2c]
call fcn.100479d0
add esp, 8
mov eax, dword [ebp - 0x30]
push 8
push eax
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0xf
mov byte [ebp - 0x2c], 0
mov dword [ebp - 0x30], 0
call fcn.100479d0
add esp, 8
jmp case.0x100bfc31.165
mov eax, dword [0x102710b4]
cmp dword [eax + 0x474], 0
je case.0x100bfc31.165
xorps xmm0, xmm0
mov byte [ebp - 4], 4
push 8
movups xmmword [ebp - 0x68], xmm0
call fcn.10047940
lea ecx, [ebp - 0x68]
add esp, 4
mov dword [eax + 4], 0
mov dword [ebp - 0x68], eax
mov dword [eax], ecx
lea ecx, [ebp + 8]
mov byte [ebp - 4], 5
call fcn.1007fce0
mov dword [ebp - 0x54], eax
test eax, eax
je 0x100c0432
nop dword [eax]
lea ecx, [ebp + 8]
call fcn.1007fce0
lea ecx, [ebp + 8]
mov dword [ebp - 0x48], eax
call fcn.1007fce0
lea ecx, [ebp + 8]
mov edi, eax
call fcn.1007fce0
lea ecx, [ebp + 8]
mov esi, eax
call fcn.1004dcd0
mov ecx, dword [ebp - 0x48]
mov dword [ebp - 0x2c], ecx
lea ecx, [ebp + 8]
movzx eax, al
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x18], eax
call fcn.1007fce0
lea ecx, [ebp + 8]
mov dword [ebp - 0x20], eax
call fcn.1004dcd0
mov byte [ebp - 0x1c], al
mov eax, dword [ebp - 0x60]
cmp eax, dword [ebp - 0x5c]
je 0x100c041b
movups xmm0, xmmword [ebp - 0x2c]
lea ecx, [ebp - 0x68]
movups xmmword [eax], xmm0
movq xmm0, qword [ebp - 0x1c]
movq qword [eax + 0x10], xmm0
mov eax, dword [ebp - 0x60]
push eax
push eax
call fcn.10046c50
add dword [ebp - 0x60], 0x18
jmp 0x100c0428
lea ecx, [ebp - 0x2c]
push ecx
push eax
lea ecx, [ebp - 0x68]
call fcn.10078630
sub dword [ebp - 0x54], 1
jne 0x100c03a0
lea eax, [ebp - 0x68]
push eax
mov eax, dword [0x102710b4]
mov ecx, dword [eax + 0x474]
add ecx, 0x144
call fcn.10077ff0
lea ecx, [ebp - 0x68]
call fcn.100432e0
mov esi, dword [ebp - 0x64]
test esi, esi
je 0x100c0496
mov ecx, dword [ebp - 0x5c]
mov eax, 0x2aaaaaab
sub ecx, esi
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
lea eax, [eax + eax*2]
shl eax, 3
push eax
push esi
call fcn.100479d0
add esp, 8
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x5c], 0
mov eax, dword [ebp - 0x68]
push 8
push eax
mov dword [ebp - 0x68], 0
call fcn.100479d0
add esp, 8
jmp case.0x100bfc31.165
lea ecx, [ebp + 8]
call fcn.100bc770
jmp case.0x100bfc31.165
lea ecx, [ebp + 8]
call fcn.1004dd60
movzx ecx, ax
call fcn.100c87c0
jmp case.0x100bfc31.165
lea ecx, [ebp + 8]
call fcn.100bcaf0
jmp case.0x100bfc31.165
mov byte [ebp - 4], 6
push 8
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0
call fcn.10047940
lea ecx, [ebp - 0x30]
add esp, 4
mov dword [eax + 4], 0
mov dword [ebp - 0x30], eax
mov dword [eax], ecx
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0xf
mov byte [ebp - 0x2c], 0
mov eax, ecx
mov byte [ebp - 4], 7
push eax
lea ecx, [ebp + 8]
call fcn.1007e900
cmp dword [ebp - 0x18], 0x10
lea esi, [ebp - 0x2c]
mov dl, 0x75
mov dword [ebp - 0x4c], 0x10051a75
cmovae esi, dword [ebp - 0x2c]
xor ecx, ecx
mov word [ebp - 0x48], 0x1b
lea eax, [ebp - 0x4b]
xor byte [eax + ecx], dl
inc ecx
cmp ecx, 4
jae 0x100c0566
mov dl, byte [ebp - 0x4c]
jmp 0x100c0555
push 1
push 0
push 0
push esi
lea eax, [ebp - 0x4b]
mov byte [ebp - 0x47], 0
push eax
push 0
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
jmp 0x100c0306
lea ecx, [ebp + 8]
call fcn.100bccf0
jmp case.0x100bfc31.165
lea ecx, [ebp + 8]
call fcn.100bd410
jmp case.0x100bfc31.165
lea ecx, [ebp + 8]
call fcn.100bd730
jmp case.0x100bfc31.165
mov esi, dword [0x102710b4]
lea ecx, [ebp + 8]
call fcn.1004dcd0
mov ecx, dword [0x102710b4]
mov byte [esi + 0x406], al
lea eax, [ecx + 0x404]
push eax
lea eax, [ecx + 0x400]
push eax
lea ecx, [ebp + 8]
call fcn.10092a20
mov ecx, eax
call fcn.1007e860
mov eax, dword [0x102710b4]
lea ecx, [ebp + 8]
add eax, 0x408
mov byte [ebp + 0xc], 0
push eax
call fcn.1007e900
mov eax, dword [0x102710b4]
mov ecx, dword [eax + 0x4e0]
cmp byte [ecx], 0
jne 0x100c062e
mov byte [ecx], 1
mov eax, dword [0x102710b4]
mov cl, byte [eax + 0x406]
cmp cl, 1
jne 0x100c0620
mov byte [eax + 0x3fc], cl
cmp cl, 2
jne 0x100c062e
mov word [eax + 0x3fc], 0x100
cmp byte [eax + 0x406], 0
jne case.0x100bfc31.165
mov word [eax + 0x3fc], 0
mov eax, dword [eax + 0x4e0]
mov byte [eax], 0
jmp case.0x100bfc31.165
mov eax, dword [0x102710b4]
mov ecx, dword [eax + 0x500]
test ecx, ecx
je case.0x100bfc31.165
lea eax, [ebp + 8]
push eax
call fcn.10049670
jmp case.0x100bfc31.165
lea eax, [ebp + 8]
push eax
call fcn.100c4140
jmp case.0x100bfc31.165
lea eax, [ebp + 8]
push eax
call fcn.100c28a0
jmp case.0x100bfc31.165
lea eax, [ebp - 0x69]
mov dword [ebp - 0x30], 0
push 8
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x48], eax
call fcn.10047940
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x4c], eax
add esp, 4
mov dword [eax], ecx
mov dword [eax + 4], 0
mov dword [ebp - 0x30], eax
mov byte [ebp - 4], 8
push 0
push 0x101aec64
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0xf
mov byte [ebp - 0x2c], 0
call fcn.10046d30
lea eax, [ebp - 0x30]
mov byte [ebp - 4], 9
push eax
lea ecx, [ebp + 8]
call fcn.1007e900
mov edx, dword [ebp - 0x1c]
test edx, edx
je 0x100c0306
cmp dword [ebp - 0x18], 0x10
lea ecx, [ebp - 0x2c]
push 0
cmovae ecx, dword [ebp - 0x2c]
push 0x101aec64
call fcn.10064480
add esp, 8
test al, al
jne 0x100c0306
lea ecx, [ebp + 8]
call fcn.1004dcd0
lea ecx, [ebp + 8]
mov byte [ebp - 0x4e], al
call fcn.1004dcd0
sub esp, 0x1c
mov byte [ebp - 0x4d], al
lea eax, [ebp - 0x30]
mov ecx, esp
push eax
call fcn.10046370
mov ecx, dword [0x102710b4]
add ecx, 0xb0
call fcn.100d2650
test eax, eax
je 0x100c0306
mov cl, byte [ebp - 0x4e]
mov byte [eax + 0x28], cl
mov cl, byte [ebp - 0x4d]
mov byte [eax + 0x29], cl
mov byte [eax + 0x3a], 1
jmp 0x100c0306
mov ecx, 0x102a2b10
call fcn.100432e0
mov eax, dword [0x102a2b14]
lea ecx, [ebp + 8]
mov dword [0x102a2b18], eax
call fcn.1004dd60
movzx eax, ax
test ax, ax
je case.0x100bfc31.165
mov edi, eax
test edi, edi
je case.0x100bfc31.165
lea ecx, [ebp + 8]
call fcn.1004dd60
movzx ecx, ax
mov dword [ebp - 0x58], ecx
test cx, cx
je 0x100c082a
mov eax, dword [0x102a2b18]
cmp eax, dword [0x102a2b1c]
je 0x100c0820
mov word [eax], cx
lea ecx, [ebp - 0x48]
mov esi, dword [0x102a2b18]
push 3
call fcn.10112de0
mov ecx, dword [0x102a2b10]
add ecx, 4
mov eax, dword [ecx]
test eax, eax
je 0x100c080f
cmp dword [eax + 8], esi
jb 0x100c0806
ja 0x100c0806
mov dword [eax], 0
mov eax, dword [eax + 4]
mov dword [ecx], eax
jmp 0x100c080b
lea ecx, [eax + 4]
mov eax, dword [ecx]
test eax, eax
jne 0x100c07f2
lea ecx, [ebp - 0x48]
call fcn.10112e90
add dword [0x102a2b18], 2
jmp 0x100c082a
lea ecx, [ebp - 0x58]
push ecx
push eax
call fcn.100d6290
sub edi, 1
jne 0x100c07b0
jmp case.0x100bfc31.165
lea eax, [ebp + 8]
push eax
call fcn.100c2640
jmp case.0x100bfc31.165
mov ecx, dword [0x102710b4]
lea eax, [ebp + 8]
push eax
call fcn.100c1cc0
jmp case.0x100bfc31.165
mov ecx, dword [0x102710b4]
lea eax, [ebp + 8]
push eax
call fcn.100c0cb0
jmp case.0x100bfc31.165
mov eax, dword [0x102710b4]
cmp dword [eax + 0x52c], 0
je case.0x100bfc31.165
mov byte [ebp + 0xc], 0
mov byte [ebp - 4], 0xa
push 8
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0
call fcn.10047940
lea ecx, [ebp - 0x30]
add esp, 4
mov dword [eax + 4], 0
mov dword [ebp - 0x30], eax
mov dword [eax], ecx
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0xf
mov byte [ebp - 0x2c], 0
mov eax, ecx
mov byte [ebp - 4], 0xb
push eax
lea ecx, [ebp + 8]
call fcn.1007e900
mov edi, eax
mov ecx, edi
call fcn.1004dd60
movzx eax, ax
mov ecx, edi
mov dword [ebp - 0x48], eax
call fcn.1004dd60
mov ecx, edi
movzx esi, ax
call fcn.1004dd60
push ecx
movzx eax, ax
push eax
push esi
push dword [ebp - 0x48]
lea eax, [ebp - 0x30]
sub esp, 0x1c
mov ecx, esp
push eax
call fcn.10046370
mov ecx, dword [0x102710b4]
mov ecx, dword [ecx + 0x52c]
call fcn.100dce60
jmp 0x100c0306
lea ecx, [ebp + 8]
call fcn.100bdd30
jmp case.0x100bfc31.165
lea ecx, [ebp + 8]
call fcn.100be3c0
jmp case.0x100bfc31.165
lea eax, [ebp + 8]
push eax
call fcn.100c0b10
jmp case.0x100bfc31.165
lea ecx, [ebp + 8]
call fcn.100bf980
lea ecx, [ebp + 0x18]
mov dword [ebp + 8], vtable.ByteBuffer.0
call fcn.100432e0
mov ecx, dword [ebp + 0x1c]
test ecx, ecx
je 0x100c0988
mov eax, dword [ebp + 0x24]
sub eax, ecx
push eax
push ecx
call fcn.100479d0
add esp, 8
mov dword [ebp + 0x1c], 0
mov dword [ebp + 0x20], 0
mov dword [ebp + 0x24], 0
mov eax, dword [ebp + 0x18]
push 8
push eax
mov dword [ebp + 0x18], 0
call fcn.100479d0
add esp, 8
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.101163c0
mov esp, ebp
pop ebp
ret