Function at 0x10011af8
Capabilities:
Persist via run registry key
Set registry value

Disassembly:
push 0xcc
mov eax, 0x1009ae4a
call fcn.1007684e
mov edi, ecx
push str.SoftwareBaiduBaidu
lea ecx, [ebp - 0x64]
mov dword [ebp - 0xd0], edi
call fcn.1000f6ca
xor ebx, ebx
push str.InstallDir
lea ecx, [ebp - 0x48]
mov dword [ebp - 4], ebx
call fcn.1000f6ca
mov byte [ebp - 4], 1
mov eax, dword [edi + 0x10]
dec eax
push eax
push ebx
lea eax, [ebp - 0x2c]
push eax
mov ecx, edi
call fcn.10013ee3
mov esi, 0x100afb00
push esi
mov byte [ebp - 4], 2
call fcn.1005d0d1
pop ecx
push eax
push 0xffffffffffffffff
push esi
lea ecx, [ebp - 0x2c]
call fcn.1001413a
push eax
push ebx
lea eax, [ebp - 0x80]
push eax
lea ecx, [ebp - 0x2c]
call fcn.10013ee3
push eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 3
call fcn.1000fd37
push ebx
push 1
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 2
call fcn.1000f89d
lea eax, [edi + 0x18c]
mov esi, reloc.OLEAUT32.dll_SysReAllocString
push esi
push eax
lea ecx, [edi + 0x188]
mov dword [ebp - 0xc4], eax
push ecx
lea eax, [ebp - 0x48]
mov dword [ebp - 0xc8], ecx
push eax
lea edx, [ebp - 0x2c]
lea ecx, [ebp - 0x64]
call fcn.1001cb48
add esp, 0x10
lea ebx, [eax - 1]
neg ebx
sbb bl, bl
inc bl
jne 0x10011bd0
mov dword [0x100d9614], 1
push 0x44d
call fcn.1001d6bd
pop ecx
test bl, bl
je 0x10012822
mov ebx, 0x100af7c4
push ebx
call fcn.1005d0d1
pop ecx
push eax
push ebx
lea ecx, [ebp - 0x48]
call fcn.1000f93d
push 0xffffffffffffffff
lea eax, [edi + 0x8c]
push 0
push eax
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0xd4], eax
call fcn.1000f802
push esi
push dword [ebp - 0xc4]
lea eax, [ebp - 0x48]
push dword [ebp - 0xc8]
lea edx, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x64]
call fcn.1001cb48
add esp, 0x10
lea ebx, [eax - 1]
neg ebx
sbb bl, bl
inc bl
jne 0x10011c46
mov dword [0x100d9614], 1
push 0x44e
call fcn.1001d6bd
pop ecx
test bl, bl
je 0x10012822
mov ebx, 0x100afb04
push ebx
call fcn.1005d0d1
pop ecx
push eax
push ebx
lea ecx, [ebp - 0x48]
call fcn.1000f93d
mov ebx, str.2052
push ebx
call fcn.1005d0d1
pop ecx
push eax
push ebx
lea ecx, [ebp - 0x2c]
call fcn.1000f93d
push esi
push dword [ebp - 0xc4]
lea eax, [ebp - 0x48]
push dword [ebp - 0xc8]
lea edx, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x64]
call fcn.1001cb48
add esp, 0x10
lea ebx, [eax - 1]
neg ebx
sbb bl, bl
inc bl
jne 0x10011cb9
mov dword [0x100d9614], 1
push 0x44f
call fcn.1001d6bd
pop ecx
test bl, bl
je 0x10012822
push str.InstallDate
call fcn.1005d0d1
pop ecx
push eax
push str.InstallDate
lea ecx, [ebp - 0x48]
call fcn.1000f93d
push 0x100b14c8
call fcn.1005d0d1
pop ecx
push eax
push 0x100b14c8
lea ecx, [ebp - 0x2c]
call fcn.1000f93d
lea eax, [ebp - 0x64]
push esi
push eax
lea ecx, [ebp - 0x2c]
lea edx, [ebp - 0x48]
call fcn.1001ca54
cmp dword [ebp - 0x1c], 0
pop ecx
pop ecx
jne 0x10011d62
lea edi, [ebp - 0x2c]
call fcn.100118b4
push esi
push dword [ebp - 0xc4]
lea eax, [ebp - 0x48]
push dword [ebp - 0xc8]
mov edx, edi
push eax
lea ecx, [ebp - 0x64]
call fcn.1001cb48
add esp, 0x10
lea ebx, [eax - 1]
neg ebx
sbb bl, bl
inc bl
jne 0x10011d51
mov dword [0x100d9614], 1
push 0x450
call fcn.1001d6bd
mov edi, dword [ebp - 0xd0]
pop ecx
test bl, bl
je 0x10012822
push str.SupplyID
call fcn.1005d0d1
pop ecx
push eax
push str.SupplyID
lea ecx, [ebp - 0x48]
call fcn.1000f93d
push 0x100b14c8
call fcn.1005d0d1
pop ecx
push eax
push 0x100b14c8
lea ecx, [ebp - 0x2c]
call fcn.1000f93d
lea eax, [ebp - 0x64]
push esi
push eax
lea ecx, [ebp - 0x2c]
lea edx, [ebp - 0x48]
call fcn.1001ca54
pop ecx
pop ecx
push 0xffffffffffffffff
push 0
lea eax, [ebp - 0x2c]
push eax
lea ecx, [edi + 0xfc]
call fcn.1000f802
cmp dword [ebp - 0x1c], 0
jne 0x10011e09
push esi
push dword [ebp - 0xc4]
lea eax, [ebp - 0x48]
push dword [ebp - 0xc8]
lea edx, [edi + 0xa8]
push eax
lea ecx, [ebp - 0x64]
call fcn.1001cb48
add esp, 0x10
lea ebx, [eax - 1]
neg ebx
sbb bl, bl
inc bl
jne 0x10011dfe
mov dword [0x100d9614], 1
push 0x451
call fcn.1001d6bd
pop ecx
test bl, bl
je 0x10012822
push 0x100afb50
call fcn.1005d0d1
pop ecx
push eax
push 0x100afb50
lea ecx, [ebp - 0x48]
call fcn.1000f93d
push 0x100b14c8
call fcn.1005d0d1
pop ecx
push eax
push 0x100b14c8
lea ecx, [ebp - 0x2c]
call fcn.1000f93d
lea eax, [ebp - 0x64]
push esi
push eax
lea ecx, [ebp - 0x2c]
lea edx, [ebp - 0x48]
call fcn.1001ca54
cmp dword [ebp - 0x1c], 0
pop ecx
pop ecx
jne 0x10011ead
push 0xffffffffffffffff
push 0
lea eax, [edi + 0xe0]
push eax
lea ecx, [ebp - 0x2c]
call fcn.1000f802
push esi
push dword [ebp - 0xc4]
lea eax, [ebp - 0x48]
push dword [ebp - 0xc8]
lea edx, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x64]
call fcn.1001cb48
add esp, 0x10
lea ebx, [eax - 1]
neg ebx
sbb bl, bl
inc bl
jne 0x10011ea2
mov dword [0x100d9614], 1
push 0x452
call fcn.1001d6bd
pop ecx
test bl, bl
je 0x10012822
lea eax, [ebp - 0xa4]
push eax
lea ecx, [ebp - 0x2c]
call fcn.1001d187
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x80]
mov dword [esp], str.89F3CC4B_0091_49B0_81A6_188CFF582735
call fcn.1000f6ca
lea eax, [ebp - 0xc0]
push eax
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 5
call fcn.1001d187
pop ecx
xor ebx, ebx
push ebx
push 1
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 7
call fcn.1000f89d
mov ecx, dword [ebp - 0x94]
push 0x10
pop eax
and ecx, 0xf
sub eax, ecx
push 0x23
push eax
lea ecx, [ebp - 0xa4]
call fcn.10013e83
cmp dword [ebp - 0xac], 0x10
mov ecx, dword [ebp - 0xc0]
jae 0x10011f2d
lea ecx, [ebp - 0xc0]
cmp dword [ebp - 0x90], 0x10
mov edx, dword [ebp - 0xa4]
jae 0x10011f42
lea edx, [ebp - 0xa4]
push dword [ebp - 0x94]
call fcn.1001d223
pop ecx
call fcn.1001bc96
mov ecx, dword [ebp - 0x64]
neg eax
sbb eax, eax
and eax, 0x200
add eax, 0xf003f
cmp dword [ebp - 0x50], 8
jae 0x10011f6d
lea ecx, [ebp - 0x64]
lea edx, [ebp - 0xcc]
push edx
push eax
push ebx
push ecx
push esi
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExW]
cmp eax, ebx
jne 0x10011fdf
cmp dword [ebp - 0x90], 0x10
mov eax, dword [ebp - 0xa4]
jae 0x10011f97
lea eax, [ebp - 0xa4]
push dword [ebp - 0x94]
push eax
push 3
push ebx
push str.TNBin
push dword [ebp - 0xcc]
call dword [sym.imp.ADVAPI32.dll_RegSetValueExW]
mov ebx, eax
neg ebx
sbb bl, bl
inc bl
jne 0x10011fc6
mov dword [0x100d9614], 1
push 0x453
call fcn.1001d6bd
pop ecx
push dword [ebp - 0xcc]
call dword [sym.imp.ADVAPI32.dll_RegCloseKey]
jmp 0x10011fe1
xor bl, bl
push 0
push 1
lea ecx, [ebp - 0xc0]
call fcn.10013fa5
push 0
push 1
lea ecx, [ebp - 0xa4]
mov byte [ebp - 4], 2
call fcn.10013fa5
test bl, bl
je 0x10012822
mov ebx, str.channel
push ebx
call fcn.1005d0d1
pop ecx
push eax
push ebx
lea ecx, [ebp - 0x48]
call fcn.1000f93d
push 0xffffffffffffffff
push 0
lea eax, [edi + 0x118]
push eax
lea ecx, [ebp - 0x2c]
call fcn.1000f802
push esi
push dword [ebp - 0xc4]
lea eax, [ebp - 0x48]
push dword [ebp - 0xc8]
lea edx, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x64]
call fcn.1001cb48
add esp, 0x10
lea ebx, [eax - 1]
neg ebx
sbb bl, bl
inc bl
jne 0x10012068
mov dword [0x100d9614], 1
push 0x454
call fcn.1001d6bd
pop ecx
test bl, bl
je 0x10012822
mov ebx, str.BrowserSelected
push ebx
call fcn.1005d0d1
pop ecx
push eax
push ebx
lea ecx, [ebp - 0x48]
call fcn.1000f93d
push 0xffffffffffffffff
push 0
lea eax, [edi + 0x134]
push eax
lea ecx, [ebp - 0x2c]
call fcn.1000f802
push esi
push dword [ebp - 0xc4]
lea eax, [ebp - 0x48]
push dword [ebp - 0xc8]
lea edx, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x64]
call fcn.1001cb48
add esp, 0x10
lea ebx, [eax - 1]
neg ebx
sbb bl, bl
inc bl
jne 0x100120d8
mov dword [0x100d9614], 1
push 0x455
call fcn.1001d6bd
pop ecx
test bl, bl
je 0x10012822
mov ebx, 0x100afbe0
push ebx
call fcn.1005d0d1
pop ecx
push eax
push ebx
lea ecx, [ebp - 0x48]
call fcn.1000f93d
mov ebx, 0x100afbf4
push ebx
call fcn.1005d0d1
pop ecx
push eax
push ebx
lea ecx, [ebp - 0x2c]
call fcn.1000f93d
push esi
push dword [ebp - 0xc4]
lea eax, [ebp - 0x48]
push dword [ebp - 0xc8]
lea edx, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x64]
call fcn.1001cb48
add esp, 0x10
lea ebx, [eax - 1]
neg ebx
sbb bl, bl
inc bl
jne 0x1001214b
mov dword [0x100d9614], 1
push 0x456
call fcn.1001d6bd
pop ecx
test bl, bl
je 0x10012822
mov ebx, 0x100afbf8
push ebx
call fcn.1005d0d1
pop ecx
push eax
push ebx
lea ecx, [ebp - 0x64]
call fcn.1000f93d
mov ebx, str.BaiduClient
push ebx
call fcn.1005d0d1
pop ecx
push eax
push ebx
lea ecx, [ebp - 0x48]
call fcn.1000f93d
lea eax, [ebp - 0xc0]
push 0x100afc98
push eax
call fcn.10014348
push str.Baidu.exe___noclient
push eax
lea eax, [ebp - 0x80]
push eax
mov byte [ebp - 4], 8
call fcn.1001431d
add esp, 0x14
push eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 9
call fcn.1000fd37
push 0
push 1
lea ecx, [ebp - 0x80]
call fcn.1000f89d
push 0
push 1
lea ecx, [ebp - 0xc0]
mov byte [ebp - 4], 2
call fcn.1000f89d
mov edi, reloc.WS2_32.dll_accept
push edi
push dword [ebp - 0xc4]
lea eax, [ebp - 0x48]
push dword [ebp - 0xc8]
lea edx, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x64]
call fcn.1001cb48
add esp, 0x10
lea ebx, [eax - 1]
neg ebx
sbb bl, bl
inc bl
jne 0x10012216
mov dword [0x100d9614], 1
push 0x457
call fcn.1001d6bd
pop ecx
test bl, bl
je 0x10012822
mov ebx, 0x100afc9c
push ebx
call fcn.1005d0d1
pop ecx
push eax
push ebx
lea ecx, [ebp - 0x64]
call fcn.1000f93d
mov ebx, str.AutoRun
push ebx
call fcn.1005d0d1
pop ecx
push eax
push ebx
lea ecx, [ebp - 0x48]
call fcn.1000f93d
mov ebx, 0x100afcec
push ebx
call fcn.1005d0d1
pop ecx
push eax
push ebx
lea ecx, [ebp - 0x2c]
call fcn.1000f93d
push edi
push dword [ebp - 0xc4]
lea eax, [ebp - 0x48]
push dword [ebp - 0xc8]
lea edx, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x64]
call fcn.1001cb48
add esp, 0x10
lea ebx, [eax - 1]
neg ebx
sbb bl, bl
inc bl
jne 0x1001229f
mov dword [0x100d9614], 1
push 0x458
call fcn.1001d6bd
pop ecx
test bl, bl
je 0x10012822
mov ebx, 0x100afcf0
push ebx
call fcn.1005d0d1
pop ecx
push eax
push ebx
lea ecx, [ebp - 0x64]
call fcn.1000f93d
mov ebx, str.AppName
push ebx
call fcn.1005d0d1
pop ecx
push eax
push ebx
lea ecx, [ebp - 0x48]
call fcn.1000f93d
mov ebx, str.Baidu.exe
push ebx
call fcn.1005d0d1
pop ecx
push eax
push ebx
lea ecx, [ebp - 0x2c]
call fcn.1000f93d
push edi
push dword [ebp - 0xc4]
lea eax, [ebp - 0x48]
push dword [ebp - 0xc8]
lea edx, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x64]
call fcn.1001cb48
add esp, 0x10
lea ebx, [eax - 1]
neg ebx
sbb bl, bl
inc bl
jne 0x10012328
mov dword [0x100d9614], 1
push 0x459
call fcn.1001d6bd
pop ecx
test bl, bl
je 0x10012822
mov ebx, str.AppPath
push ebx
call fcn.1005d0d1
pop ecx
push eax
push ebx
lea ecx, [ebp - 0x48]
call fcn.1000f93d
mov ecx, dword [ebp - 0xd0]
mov eax, dword [ecx + 0x10]
dec eax
push eax
push 0
lea eax, [ebp - 0x80]
push eax
call fcn.10013ee3
push eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0xa
call fcn.1000fd37
push 0
push 1
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 2
call fcn.1000f89d
mov ebx, 0x100afb00
push ebx
call fcn.1005d0d1
pop ecx
push eax
push 0xffffffffffffffff
push ebx
lea ecx, [ebp - 0x2c]
call fcn.1001413a
push eax
push 0
lea eax, [ebp - 0x80]
push eax
lea ecx, [ebp - 0x2c]
call fcn.10013ee3
push eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0xb
call fcn.1000fd37
push 0
push 1
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 2
call fcn.1000f89d
push dword [ebp - 0xc4]
lea eax, [ebp - 0x2c]
push dword [ebp - 0xc8]
lea edx, [ebp - 0x48]
push eax
lea ecx, [ebp - 0x64]
call fcn.1001cc84
add esp, 0xc
lea ebx, [eax - 1]
neg ebx
sbb bl, bl
inc bl
jne 0x100123fb
mov dword [0x100d9614], 1
push 0x45a
call fcn.1001d6bd
pop ecx
test bl, bl
je 0x10012822
mov ebx, str.Policy
push ebx
call fcn.1005d0d1
pop ecx
push eax
push ebx
lea ecx, [ebp - 0x48]
call fcn.1000f93d
push 3
sub esp, 0x1c
lea eax, [ebp - 0x48]
mov ecx, esp
mov dword [ebp - 0xcc], esp
push eax
call fcn.1000f6a2
sub esp, 0x1c
lea eax, [ebp - 0x64]
mov ecx, esp
mov dword [ebp - 0xd8], esp
push eax
mov byte [ebp - 4], 0xc
call fcn.1000f6a2
mov ecx, edi
mov byte [ebp - 4], 2
call fcn.1001cdab
xor ecx, ecx
inc ecx
add esp, 0x3c
cmp eax, ecx
sete bl
test bl, bl
jne 0x10012472
mov dword [0x100d9614], ecx
push 0x45b
call fcn.1001d6bd
pop ecx
test bl, bl
je 0x10012822
mov edi, str.SoftwareMicrosoftWindowsCurrentVersionUninstall_
push edi
call fcn.1005d0d1
pop ecx
push eax
push edi
lea ecx, [ebp - 0x64]
call fcn.1000f93d
mov edi, str.DisplayName
push edi
call fcn.1005d0d1
pop ecx
push eax
push edi
lea ecx, [ebp - 0x48]
call fcn.1000f93d
mov ecx, dword [ebp - 0xd4]
push 0x2e
pop edi
push 1
push 0xffffffffffffffff
lea eax, [ebp - 0xcc]
push eax
mov dword [ebp - 0xcc], edi
call fcn.100140ae
mov ecx, dword [ebp - 0xd4]
push eax
xor ebx, ebx
push ebx
lea eax, [ebp - 0xa4]
push eax
call fcn.10013ee3
push 1
push 0xffffffffffffffff
lea eax, [ebp - 0xcc]
mov byte [ebp - 4], 0xd
push eax
lea ecx, [ebp - 0xa4]
mov dword [ebp - 0xcc], edi
call fcn.100140ae
push eax
push ebx
lea eax, [ebp - 0x80]
push eax
lea ecx, [ebp - 0xa4]
call fcn.10013ee3
push eax
lea ecx, [ebp - 0xa4]
mov byte [ebp - 4], 0xe
call fcn.1000fd37
push ebx
push 1
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0xd
call fcn.1000f89d
lea eax, [ebp - 0x80]
push 0x100afe88
push eax
lea edi, [ebp - 0xa4]
call fcn.10014348
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0xf
call fcn.1000fd37
push ebx
push 1
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0xd
call fcn.1000f89d
push esi
push dword [ebp - 0xc4]
lea eax, [ebp - 0x48]
push dword [ebp - 0xc8]
lea edx, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x64]
call fcn.1001cb48
add esp, 0x10
lea ebx, [eax - 1]
neg ebx
sbb bl, bl
inc bl
jne 0x1001259c
mov dword [0x100d9614], 1
push 0x45c
call fcn.1001d6bd
pop ecx
push 0
push 1
lea ecx, [ebp - 0xa4]
mov byte [ebp - 4], 2
call fcn.1000f89d
test bl, bl
je 0x10012822
mov edi, str.UninstallString
push edi
call fcn.1005d0d1
pop ecx
push eax
push edi
lea ecx, [ebp - 0x48]
call fcn.1000f93d
mov edi, dword [ebp - 0xd0]
lea eax, [ebp - 0x80]
push str.uninst.exe
push eax
call fcn.10014290
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x10
call fcn.1000fd37
xor edi, edi
push 0
inc edi
push edi
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 2
call fcn.1000f89d
push esi
push dword [ebp - 0xc4]
lea eax, [ebp - 0x48]
push dword [ebp - 0xc8]
lea edx, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x64]
call fcn.1001cb48
add esp, 0x10
lea ebx, [eax - 1]
neg ebx
sbb bl, bl
inc bl
jne 0x1001263d
mov dword [0x100d9614], edi
push 0x45d
call fcn.1001d6bd
pop ecx
test bl, bl
je 0x10012822
mov edi, str.DisplayIcon
push edi
call fcn.1005d0d1
pop ecx
push eax
push edi
lea ecx, [ebp - 0x48]
call fcn.1000f93d
mov edi, dword [ebp - 0xd0]
lea eax, [ebp - 0x80]
push str.Baidu.exe_0
push eax
call fcn.10014290
pop ecx
pop ecx
push eax
lea ecx, [ebp - 0x2c]
mov byte [ebp - 4], 0x11
call fcn.1000fd37
xor edi, edi
push 0
inc edi
push edi
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 2
call fcn.1000f89d
push esi
push dword [ebp - 0xc4]
lea eax, [ebp - 0x48]
push dword [ebp - 0xc8]
lea edx, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x64]
call fcn.1001cb48
add esp, 0x10
lea ebx, [eax - 1]
neg ebx
sbb bl, bl
inc bl
jne 0x100126cb
mov dword [0x100d9614], edi
push 0x45e
call fcn.1001d6bd
pop ecx
test bl, bl
je 0x10012822
mov edi, str.DisplayVersion
push edi
call fcn.1005d0d1
pop ecx
push eax
push edi
lea ecx, [ebp - 0x48]
call fcn.1000f93d
push 0xffffffffffffffff
push 0
push dword [ebp - 0xd4]
lea ecx, [ebp - 0x2c]
call fcn.1000f802
push esi
push dword [ebp - 0xc4]
lea eax, [ebp - 0x48]
push dword [ebp - 0xc8]
lea edx, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x64]
call fcn.1001cb48
add esp, 0x10
lea ebx, [eax - 1]
neg ebx
sbb bl, bl
inc bl
jne 0x1001273a
mov dword [0x100d9614], 1
push 0x45f
call fcn.1001d6bd
pop ecx
test bl, bl
je 0x10012822
mov edi, str.Publisher
push edi
call fcn.1005d0d1
pop ecx
push eax
push edi
lea ecx, [ebp - 0x48]
call fcn.1000f93d
mov edi, 0x100aff2c
push edi
call fcn.1005d0d1
pop ecx
push eax
push edi
lea ecx, [ebp - 0x2c]
call fcn.1000f93d
push esi
push dword [ebp - 0xc4]
lea eax, [ebp - 0x48]
push dword [ebp - 0xc8]
lea edx, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x64]
call fcn.1001cb48
add esp, 0x10
lea ebx, [eax - 1]
neg ebx
sbb bl, bl
inc bl
jne 0x100127ad
mov dword [0x100d9614], 1
push 0x460
call fcn.1001d6bd
pop ecx
test bl, bl
je 0x10012822
mov esi, str.2.1.0.0
push esi
call fcn.1005d0d1
pop ecx
push eax
push esi
push dword [0x100d1688]
mov ecx, 0x100d1678
push 0
call fcn.1000fe1a
test eax, eax
jle 0x10012822
xor eax, eax
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x84], eax
mov dword [ebp - 0x6c], 7
mov dword [ebp - 0x70], eax
mov word [ebp - 0x80], ax
lea esi, [ebp - 0x88]
mov byte [ebp - 4], 0x12
call fcn.10015a3b
mov byte [ebp - 4], 0x13
call fcn.1001594c
push 0
push 1
lea ecx, [ebp - 0x80]
mov bl, al
call fcn.1000f89d
push 0
push 1
lea ecx, [ebp - 0x2c]
call fcn.1000f89d
push 0
push 1
lea ecx, [ebp - 0x48]
call fcn.1000f89d
push 0
push 1
lea ecx, [ebp - 0x64]
call fcn.1000f89d
mov al, bl
call fcn.100768d1
ret