Function at 0x10015264
Capabilities:
Contain obfuscated stackstrings
Delete file
Delete registry key
Delete registry value

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1012a821
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x4a0
mov eax, dword [0x10194180]
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
xor esi, esi
mov dword [ebp - 0x1a8], esi
push 0x1006ff30
call fcn.100576b8
add esp, 4
mov dword [ebp - 0x234], eax
mov dword [ebp - 4], esi
lea eax, [ebp - 0x1a4]
push eax
push 0x202
call dword [sym.imp.WS2_32.dll_WSAStartup]
push esi
push str.softwareHuaweiSPES5.0CompositesCPMPopup
push connect
call dword [sym.imp.SHLWAPI.dll_SHDeleteValueA]
mov byte [ebp - 4], 1
call fcn.10027ae0
push 0x101360cc
lea ecx, [ebp - 0x1cc]
call fcn.10008c50
mov bl, 2
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x278]
push ecx
mov ecx, 0x101a53a8
call fcn.1000aa90
mov byte [ebp - 4], 3
mov edx, dword [eax]
push edx
push str.On_InitCore___get_loggedonUsers:__s
lea eax, [ebp - 0x1cc]
push eax
call fcn.1000d2e0
add esp, 0xc
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x278]
call fcn.10001c80
push esi
mov ecx, dword [ebp - 0x1cc]
push ecx
call fcn.10010990
add esp, 8
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x1cc]
call fcn.10001b80
mov dword [ebp - 4], 0
mov byte [ebp - 4], 5
push str.915DA9FA_62C1_4d55_A4D4_B037906518F4
lea ecx, [ebp - 0x1bc]
call fcn.100019d0
mov byte [ebp - 4], 6
lea edx, [ebp - 0x1bc]
push edx
push str.CLSID_
lea eax, [ebp - 0x23c]
push eax
call fcn.10008510
add esp, 0xc
mov dword [ebp - 0x354], eax
mov byte [ebp - 4], 7
mov eax, dword [eax]
mov dword [ebp - 0x2d4], eax
push eax
push accept
mov esi, dword [sym.imp.SHLWAPI.dll_SHDeleteKeyA]
call esi
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x23c]
call fcn.10001c80
push str.SOFTWAREMicrosoftWindowsCurrentVersionExplorerShellIconOverlayIdentifiersShell_Integration_3.0
push connect
call esi
mov ecx, dword [ebp - 0x1bc]
push ecx
push str.SoftwareMicrosoftWindowsCurrentVersionShell_ExtensionsApproved
push connect
call dword [sym.imp.SHLWAPI.dll_SHDeleteValueA]
lea edx, [ebp - 0x1c0]
push edx
call fcn.1006c6b0
add esp, 4
mov bl, 8
mov byte [ebp - 4], bl
push str._shellui.dll
lea eax, [ebp - 0x274]
push eax
lea ecx, [ebp - 0x1c0]
call fcn.100082c0
mov dword [ebp - 0x2dc], eax
mov byte [ebp - 4], 9
mov eax, dword [eax]
mov dword [ebp - 0x2e4], eax
push eax
mov esi, dword [sym.imp.KERNEL32.dll_DeleteFileA]
call esi
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x274]
call fcn.10001c80
push 0x1013781c
lea ecx, [ebp - 0x1f8]
push ecx
lea ecx, [ebp - 0x1c0]
call fcn.100082c0
mov dword [ebp - 0x2ec], eax
mov byte [ebp - 4], 0xa
mov eax, dword [eax]
mov dword [ebp - 0x300], eax
push eax
call esi
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x1f8]
call fcn.10001c80
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x1c0]
call fcn.10001c80
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x1bc]
call fcn.10001c80
xor esi, esi
mov dword [ebp - 4], esi
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x28c]
call fcn.1006cb70
mov bl, 0xd
mov byte [ebp - 4], bl
mov dword [ebp - 0x248], esi
mov dword [ebp - 0x244], str.softwareHuaweiSPES5.0CompositesCPM
mov byte [ebp - 4], 0xe
push esi
push 1
lea edx, [ebp - 0x248]
push edx
push connect
lea ecx, [ebp - 0x28c]
call fcn.1006cf60
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x248]
call fcn.10008420
push str.first_run
lea eax, [ebp - 0x238]
push eax
lea ecx, [ebp - 0x28c]
call fcn.1006d250
mov dword [ebp - 0x308], eax
mov byte [ebp - 4], 0xf
mov eax, dword [eax]
mov dword [ebp - 0x310], eax
push eax
call fcn.10057601
add esp, 4
mov dword [0x101a50a0], eax
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x238]
call fcn.10001c80
push str.first_run
lea ecx, [ebp - 0x28c]
call fcn.1006cb50
push 0x101360cc
lea ecx, [ebp - 0x1c4]
call fcn.10008c50
mov byte [ebp - 4], 0x10
mov ecx, dword [0x101a50a0]
push ecx
push str.Start_Type_is__d
lea edx, [ebp - 0x1c4]
push edx
call fcn.1000d2e0
push esi
mov eax, dword [ebp - 0x1c4]
push eax
call fcn.10010990
add esp, 0x14
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x1c4]
call fcn.10001b80
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x28c]
call fcn.1006ce30
mov dword [ebp - 4], 0
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x264]
push ecx
call fcn.1006c6b0
add esp, 4
mov byte [ebp - 4], 0x13
push 0x101366a0
lea edx, [ebp - 0x200]
push edx
mov ecx, eax
call fcn.100082c0
mov byte [ebp - 4], 0x14
push str.msxml4rc.dll
lea ecx, [ebp - 0x1ec]
push ecx
mov ecx, eax
call fcn.100082c0
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x200]
call fcn.10001c80
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x264]
call fcn.10001c80
lea edx, [ebp - 0x240]
push edx
call fcn.1006c6b0
add esp, 4
mov byte [ebp - 4], 0x18
push 0x101366a0
lea ecx, [ebp - 0x208]
push ecx
mov ecx, eax
call fcn.100082c0
mov byte [ebp - 4], 0x19
push str.shelluiex.dll
lea edx, [ebp - 0x1e8]
push edx
mov ecx, eax
call fcn.100082c0
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x208]
call fcn.10001c80
mov bl, 0x1b
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x240]
call fcn.10001c80
lea eax, [ebp - 0x1f0]
push eax
call fcn.1006c6b0
add esp, 4
mov byte [ebp - 4], 0x1d
push 0x101366a0
lea ecx, [ebp - 0x210]
push ecx
mov ecx, eax
call fcn.100082c0
mov byte [ebp - 4], 0x1e
push str.CpmTray.exe
lea edx, [ebp - 0x1e4]
push edx
mov ecx, eax
call fcn.100082c0
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x210]
call fcn.10001c80
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x1f0]
call fcn.10001c80
push 0
push 0
push 3
push 0
push 1
push accept
mov eax, dword [ebp - 0x1ec]
push eax
mov esi, dword [sym.imp.KERNEL32.dll_CreateFileA]
call esi
push 0
push 0
push 3
push 0
push 1
push accept
mov ecx, dword [ebp - 0x1e8]
push ecx
call esi
push 0
push 0
push 3
push 0
push 1
push accept
mov edx, dword [ebp - 0x1e4]
push edx
call esi
mov eax, dword [0x101a50a0]
test eax, eax
jne 0x10015618
call fcn.10019310
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x1e4]
call fcn.10001c80
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x1e8]
call fcn.10001c80
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x1ec]
call fcn.10001c80
xor edi, edi
mov dword [ebp - 4], edi
mov byte [ebp - 4], 0x23
push 0x43
call dword [sym.imp.USER32.dll_GetSystemMetrics]
mov esi, eax
mov dword [ebp - 0x358], esi
lea ecx, [ebp - 0x29c]
call fcn.1006cb70
mov bl, 0x24
mov byte [ebp - 4], bl
mov dword [ebp - 0x254], edi
mov dword [ebp - 0x250], str.SYSTEMCurrentControlSetServicesusbstor
mov byte [ebp - 4], 0x25
push edi
push edi
lea eax, [ebp - 0x254]
push eax
push connect
lea ecx, [ebp - 0x29c]
call fcn.1006cf60
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x254]
call fcn.10008420
lea ecx, [ebp - 0x29c]
cmp esi, edi
jne 0x100156ce
push 3
jmp 0x100156d0
push 4
push str.start
call fcn.1006ca60
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x29c]
call fcn.1006ce30
mov esi, 0x10
xor edi, edi
mov dword [ebp - 4], edi
mov byte [ebp - 4], 0x27
mov byte [0x10193813], 0
lea ecx, [ebp - 0x218]
push ecx
call fcn.1000cc10
add esp, 4
mov byte [ebp - 4], 0x28
push eax
mov ecx, 0x101a5908
call fcn.10007e70
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x218]
call fcn.10001c80
mov byte [ebp - 4], 0x29
lea edx, [ebp - 0x4ac]
push edx
call fcn.100eb08d
add esp, 4
mov dword [ebp - 0x2a8], eax
mov byte [ebp - 4], 0x2a
cmp dword [eax + 0x18], esi
jb 0x10015758
mov eax, dword [eax + 4]
jmp 0x1001575b
add eax, 4
push eax
mov ecx, 0x101a5310
call fcn.1000a9d0
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0x4ac]
call fcn.10001bd0
lea eax, [ebp - 0x474]
push eax
call fcn.100eb132
add esp, 4
mov dword [ebp - 0x2a0], eax
mov byte [ebp - 4], 0x2b
cmp dword [eax + 0x18], esi
jb 0x10015798
mov eax, dword [eax + 4]
jmp 0x1001579b
add eax, 4
push eax
mov ecx, 0x101a5278
call fcn.1000a9d0
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0x474]
call fcn.10001bd0
lea ecx, [ebp - 0x324]
call fcn.1006cb70
mov bl, 0x2c
mov byte [ebp - 4], bl
mov dword [ebp - 0x260], edi
mov dword [ebp - 0x25c], str.softwarePM
mov byte [ebp - 4], 0x2d
push edi
push edi
lea ecx, [ebp - 0x260]
push ecx
push connect
lea ecx, [ebp - 0x324]
call fcn.1006cf60
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x260]
call fcn.10008420
push 0x101377c4
lea ecx, [ebp - 0x324]
call fcn.1006d2f0
mov dword [ebp - 0x2b0], eax
cmp eax, 1
jne 0x100158ab
lea edx, [ebp - 0x458]
push edx
call fcn.100eb08d
add esp, 4
mov dword [ebp - 0x328], eax
mov byte [ebp - 4], 0x2e
cmp dword [eax + 0x18], esi
jb 0x10015842
mov eax, dword [eax + 4]
jmp 0x10015845
add eax, 4
push eax
mov ecx, 0x101a5278
call fcn.1000a9d0
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x458]
call fcn.10001bd0
lea eax, [ebp - 0x490]
push eax
call fcn.100eb132
add esp, 4
mov dword [ebp - 0x2b8], eax
mov byte [ebp - 4], 0x2f
cmp dword [eax + 0x18], esi
jb 0x10015881
mov eax, dword [eax + 4]
jmp 0x10015884
add eax, 4
push eax
mov ecx, 0x101a5310
call fcn.1000a9d0
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x490]
call fcn.10001bd0
push edi
push str.SN__1
call fcn.10010990
add esp, 8
lea ecx, [ebp - 0x220]
push ecx
mov ecx, 0x101a5278
call fcn.1000aa90
mov byte [ebp - 4], 0x30
push eax
push str.New_SN:
lea edx, [ebp - 0x24c]
push edx
call fcn.10008510
mov dword [ebp - 0x35c], eax
mov byte [ebp - 4], 0x31
mov eax, dword [eax]
mov dword [ebp - 0x2c0], eax
push edi
push eax
call fcn.10010990
add esp, 0x14
mov byte [ebp - 4], 0x30
lea ecx, [ebp - 0x24c]
call fcn.10001c80
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x220]
call fcn.10001c80
lea eax, [ebp - 0x228]
push eax
mov ecx, 0x101a5310
call fcn.1000aa90
mov byte [ebp - 4], 0x32
push eax
push str.Old_SN:
lea ecx, [ebp - 0x270]
push ecx
call fcn.10008510
mov dword [ebp - 0x33c], eax
mov byte [ebp - 4], 0x33
mov eax, dword [eax]
mov dword [ebp - 0x2c8], eax
push edi
push eax
call fcn.10010990
add esp, 0x14
mov byte [ebp - 4], 0x32
lea ecx, [ebp - 0x270]
call fcn.10001c80
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x228]
call fcn.10001c80
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0x324]
call fcn.1006ce30
mov dword [ebp - 4], 0x27
lea edx, [ebp - 0x37c]
push edx
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
lea eax, [ebp - 0x2f8]
push eax
lea ecx, [ebp - 0x37c]
push ecx
call dword [sym.imp.KERNEL32.dll_SystemTimeToFileTime]
push 0x101a50a8
lea edx, [ebp - 0x2f8]
push edx
call dword [sym.imp.KERNEL32.dll_LocalFileTimeToFileTime]
lea eax, [ebp - 0x37c]
push eax
push 0x101a50a8
call dword [sym.imp.KERNEL32.dll_FileTimeToSystemTime]
mov dword [ebp - 0x364], 0
push str.LogonUsersInitializer
call fcn.10018530
add esp, 4
mov edx, dword [eax]
push 0
mov ecx, eax
call dword [edx]
call fcn.10012a90
call fcn.1000e560
call fcn.10037550
call fcn.10014da0
call fcn.10035590
call fcn.10013510
call fcn.100137b0
call fcn.100128a0
call fcn.10026d60
mov bl, 0x35
mov byte [ebp - 4], bl
mov dword [ebp - 0x2d0], 0x10010df0
push 0
push 0x10010df0
lea ecx, [ebp - 0x3dc]
call fcn.1000f940
mov byte [ebp - 4], 0x36
lea eax, [ebp - 0x3dc]
push eax
mov ecx, 0x101a50b0
call fcn.10010e90
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x3dc]
call fcn.1000e2d0
mov dword [ebp - 0x36c], fcn.10022ae0
push 0
push fcn.10022ae0
lea ecx, [ebp - 0x39c]
call fcn.1000f940
mov byte [ebp - 4], 0x37
lea ecx, [ebp - 0x39c]
push ecx
mov ecx, 0x101a50b0
call fcn.10010e90
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x39c]
call fcn.1000e2d0
mov dword [ebp - 4], 0x27
mov bl, 0x39
mov byte [ebp - 4], bl
mov dword [ebp - 0x348], 0x10021990
push 0
push 0x10021990
lea ecx, [ebp - 0x3bc]
call fcn.1000f940
mov byte [ebp - 4], 0x3a
lea eax, [ebp - 0x3bc]
push eax
mov ecx, 0x101a53a8
call fcn.10010e90
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x3bc]
call fcn.1000e2d0
mov dword [ebp - 4], 0x27
mov byte [ebp - 4], 0x3c
cmp dword [0x101a50a0], 1
jne 0x10015af9
call fcn.1000bd90
mov dword [ebp - 4], 0x27
mov byte [ebp - 4], 0x40
mov esi, 1
cmp dword [0x101a50a0], esi
jne 0x10015c04
lea edx, [ebp - 0x27c]
push edx
mov ecx, 0x101a50b0
call fcn.1000aa90
mov dword [ebp - 0x2f0], eax
mov byte [ebp - 4], 0x41
mov dword [ebp - 0x1a8], esi
push str._Policies__
mov eax, dword [eax]
push eax
call fcn.1006c280
add esp, 8
test eax, eax
jne 0x10015c04
mov eax, esi
jmp 0x10015c06
xor eax, eax
mov bl, al
mov byte [ebp - 0x1cd], bl
mov dword [ebp - 4], 0x40
test byte [ebp - 0x1a8], 1
je 0x10015c30
and dword [ebp - 0x1a8], 0xfffffffe
lea ecx, [ebp - 0x27c]
call fcn.10001c80
test bl, bl
je 0x10015d96
lea ecx, [ebp - 0x1e0]
push ecx
push 0x101a50a8
call dword [sym.imp.KERNEL32.dll_FileTimeToSystemTime]
push 0x101360cc
lea ecx, [ebp - 0x1b4]
call fcn.100019d0
mov byte [ebp - 4], 0x42
push 0x101360cc
lea ecx, [ebp - 0x1c8]
call fcn.100019d0
mov byte [ebp - 4], 0x43
movzx edx, word [ebp - 0x1d4]
push edx
movzx eax, word [ebp - 0x1d6]
push eax
movzx ecx, word [ebp - 0x1d8]
push ecx
movzx edx, word [ebp - 0x1da]
push edx
movzx eax, word [ebp - 0x1de]
push eax
movzx ecx, word [ebp - 0x1e0]
push ecx
push str._d__d__d__d:_d:_d
lea edx, [ebp - 0x1b4]
push edx
call fcn.10008370
movzx eax, word [ebp - 0x1d4]
push eax
movzx ecx, word [ebp - 0x1d6]
push ecx
movzx edx, word [ebp - 0x1d8]
push edx
movzx eax, word [ebp - 0x1da]
add eax, 3
push eax
movzx ecx, word [ebp - 0x1de]
push ecx
movzx edx, word [ebp - 0x1e0]
push edx
push str._d__d__d__d:_d:_d
lea eax, [ebp - 0x1c8]
push eax
call fcn.10008370
add esp, 0x40
push 0x101360cc
lea ecx, [ebp - 0x1b0]
call fcn.100019d0
mov bl, 0x44
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x1f4]
push ecx
mov ecx, 0x101a53a8
call fcn.1000aa90
mov byte [ebp - 4], 0x45
mov ecx, dword [ebp - 0x1b4]
push ecx
mov edx, dword [ebp - 0x1c8]
push edx
push ecx
mov eax, dword [eax]
push eax
push str._Policies__Policy_type_36__mode_1__ipAddress___phoneNo___userName__s__start__s__end__s__setTime__s__level_1_____Policies_
lea ecx, [ebp - 0x1b0]
push ecx
call fcn.10008370
add esp, 0x18
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x1f4]
call fcn.10001c80
mov edx, dword [ebp - 0x1b0]
push edx
mov ecx, 0x101a50b0
call fcn.1000a9d0
mov byte [ebp - 4], 0x43
lea ecx, [ebp - 0x1b0]
call fcn.10001c80
mov byte [ebp - 4], 0x42
lea ecx, [ebp - 0x1c8]
call fcn.10001c80
mov byte [ebp - 4], 0x40
lea ecx, [ebp - 0x1b4]
call fcn.10001c80
mov dword [ebp - 4], 0x27
mov bl, 0x47
mov byte [ebp - 4], bl
push 0
sub esp, 0x20
mov ecx, esp
mov dword [ebp - 0x360], esp
push 0
push 0x1001e0d0
call fcn.1000ff60
mov byte [ebp - 4], bl
mov ecx, 0x101a5ae0
call fcn.1006fe60
mov dword [ebp - 4], 0x27
call fcn.10026d10
push str._SysDiag.cfg
lea ecx, [ebp - 0x1fc]
push ecx
call fcn.1000ec90
add esp, 8
mov dword [ebp - 0x340], eax
mov byte [ebp - 4], 0x4a
mov eax, dword [eax]
mov dword [ebp - 0x304], eax
push eax
mov ecx, dword [0x101a5924]
call fcn.10016890
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x1fc]
call fcn.10001c80
push str._SysDiag.pp
lea edx, [ebp - 0x204]
push edx
call fcn.1000ec90
add esp, 8
mov dword [ebp - 0x344], eax
mov byte [ebp - 4], 0x4b
mov eax, dword [eax]
mov dword [ebp - 0x30c], eax
push eax
mov ecx, dword [0x101a592c]
call fcn.10016890
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x204]
call fcn.10001c80
push str._SysDiag2.dat
lea eax, [ebp - 0x20c]
push eax
call fcn.1000ec90
add esp, 8
mov dword [ebp - 0x34c], eax
mov byte [ebp - 4], 0x4c
mov eax, dword [eax]
mov dword [ebp - 0x314], eax
push eax
mov ecx, dword [0x101a5934]
call fcn.10016890
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x20c]
call fcn.10001c80
push 0
sub esp, 8
mov ecx, esp
mov dword [ebp - 0x2a4], esp
push 0x101a5924
call fcn.1000df30
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x3fc]
call fcn.100108a0
mov byte [ebp - 4], 0x4e
lea ecx, [ebp - 0x3fc]
push ecx
mov ecx, 0x101a51e0
call fcn.10010e90
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x3fc]
call fcn.1000e2d0
push 0
sub esp, 8
mov ecx, esp
mov dword [ebp - 0x2ac], esp
push 0x101a5934
call fcn.1000df30
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x43c]
call fcn.100108a0
mov byte [ebp - 4], 0x50
lea edx, [ebp - 0x43c]
push edx
mov ecx, 0x101a5148
call fcn.10010e90
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x43c]
call fcn.1000e2d0
push 0
sub esp, 8
mov ecx, esp
mov dword [ebp - 0x2b4], esp
push 0x101a592c
call fcn.1000df30
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x41c]
call fcn.100108a0
mov byte [ebp - 4], 0x52
lea eax, [ebp - 0x41c]
push eax
mov ecx, 0x101a50b0
call fcn.10010e90
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x41c]
call fcn.1000e2d0
mov dword [ebp - 4], 0
mov byte [ebp - 4], 0x58
call fcn.10018fb0
push 0
push str.Register_check_ok
call fcn.10010990
add esp, 8
xor esi, esi
mov dword [ebp - 4], esi
mov byte [ebp - 4], 0x5a
lea ecx, [ebp - 0x338]
call fcn.1006cb70
mov bl, 0x5b
mov byte [ebp - 4], bl
mov dword [ebp - 0x26c], esi
mov dword [ebp - 0x268], str.softwarePM
mov byte [ebp - 4], 0x5c
push esi
push 1
lea ecx, [ebp - 0x26c]
push ecx
push connect
lea ecx, [ebp - 0x338]
call fcn.1006cf60
mov byte [ebp - 4], bl
lea ecx, [ebp - 0x26c]
call fcn.10008420
push str.7.2.3.0913
push str.Version
lea ecx, [ebp - 0x338]
call fcn.1006ca90
mov byte [ebp - 4], 0x5a
lea ecx, [ebp - 0x338]
call fcn.1006ce30
mov dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0x234]
push ecx
call fcn.100576b8
add esp, 4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
mov ecx, dword [ebp - 0x14]
call fcn.100571c6
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret