Function at 0x10009910
Capabilities:
Create process on windows
Print debug messages

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x101ee5e8
mov eax, dword fs:[0]
push eax
sub esp, 0x68
mov eax, dword [0x1028dc74]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov edi, ecx
cmp dword [ebp + 0x1c], 0
mov ecx, dword [ebp + 0x10]
mov eax, dword [ebp + 0x14]
mov esi, dword [ebp + 0x18]
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x20], 1
jne 0x10009ed6
mov ebx, dword [ebp + 0xc]
cmp ebx, 0x110
jne 0x10009998
sub esp, 8
mov dword [edi + 0x398], 1
mov ecx, edi
call fcn.1000c2c0
mov dword [esi], eax
cmp dword [edi + 0x398], 0
je 0x10009e72
mov eax, 1
jmp 0x10009ed8
cmp ebx, 0x10
je 0x10009ef6
cmp ebx, 5
jne 0x10009a24
cmp dword [edi + 0x39c], 0
mov dword [edi + 0x398], 0
je 0x10009a19
push 0xffffffffffffffff
push str.btn_max
lea ecx, [edi + 4]
call fcn.1002659c
push 0xffffffffffffffff
push str.btn_restore
lea ecx, [edi + 4]
mov dword [ebp - 0x2c], eax
call fcn.1002659c
mov esi, dword [ebp - 0x2c]
test esi, esi
je 0x10009a16
test eax, eax
je 0x10009a16
mov ecx, dword [ebp - 0x28]
cmp ecx, 2
jne 0x100099fe
push 0
push 1
mov ecx, eax
call fcn.1002948a
push 0
push 0
jmp 0x10009a0f
test ecx, ecx
jne 0x10009a16
push ecx
push ecx
mov ecx, eax
call fcn.1002948a
push 0
push 1
mov ecx, esi
call fcn.1002948a
mov esi, dword [ebp - 0x24]
mov dword [esi], 0
jmp 0x10009981
cmp ebx, 0x113
jne 0x10009a90
mov dword [edi + 0x398], 0
cmp ecx, 0x989681
jne 0x10009a19
mov eax, dword [edi + 0x760]
test eax, eax
je 0x10009a19
cmp dword [eax + 0x170], 3
jne 0x10009a19
push 0xffffffffffffffff
push str.tab_installing
lea ecx, [edi + 4]
call fcn.100112c0
test eax, eax
je 0x10009a19
mov ecx, dword [eax + 0x1cc]
mov esi, dword [eax + 0x170]
dec ecx
cmp esi, ecx
sbb ecx, ecx
lea edx, [esi + 1]
and ecx, edx
push ecx
mov ecx, eax
call fcn.1003a325
mov esi, dword [ebp - 0x24]
mov dword [esi], 0
jmp 0x10009981
cmp ebx, 0x84d
jne 0x10009b22
sub eax, 0x201
je 0x10009af1
sub eax, 3
jne 0x10009b13
push str.smenu
push str.menu_tray
lea ecx, [edi + 0x7bc]
call fcn.100406e1
lea eax, [ebp - 0x38]
push eax
call dword [sym.imp.USER32.dll_GetCursorPos]
push 0
push dword [edi + 0x244]
lea ecx, [edi + 0x7bc]
push dword [ebp - 0x34]
push dword [ebp - 0x38]
push 0
call fcn.10040e9c
cmp dword [ebp - 0x20], 0
mov dword [esi], 0
jmp 0x10009988
push dword [edi + 0x244]
call dword [sym.imp.USER32.dll_IsIconic]
test eax, eax
je 0x10009b05
push 1
jmp 0x10009b07
push 6
push dword [edi + 0x244]
call dword [sym.imp.USER32.dll_ShowWindow]
cmp dword [ebp - 0x20], 0
mov dword [esi], 0
jmp 0x10009988
cmp ebx, 0x111
jne 0x10009b50
mov eax, ecx
mov dword [edi + 0x398], 1
shr eax, 0x10
test eax, eax
jne 0x10009a19
cmp cx, 6
je 0x10009f04
jmp 0x10009a19
cmp ebx, 0x590
jne 0x10009b6f
sub esp, 8
push ecx
push ecx
mov ecx, edi
call fcn.1000d1b0
cmp dword [ebp - 0x20], 0
mov dword [esi], eax
jmp 0x10009988
cmp ebx, 0x52c
jne 0x10009bc8
mov ecx, dword [edi + 0x770]
test ecx, ecx
je 0x10009b90
call fcn.10027665
test eax, eax
je 0x10009b90
push 1
push 1
jmp 0x10009bae
mov ecx, dword [edi + 0x770]
test ecx, ecx
je 0x10009b13
call fcn.10027665
test eax, eax
jne 0x10009b13
push 1
push eax
mov ecx, dword [edi + 0x764]
call fcn.100264f6
cmp dword [ebp - 0x20], 0
mov dword [esi], 0
jmp 0x10009988
cmp ebx, 0x52e
jne 0x10009be0
mov dword [esi], 0
mov eax, 1
jmp 0x10009ed8
cmp ebx, 0x52f
jne 0x10009bfd
sub esp, 0x10
mov ecx, edi
call fcn.1000d4d0
cmp dword [ebp - 0x20], 0
mov dword [esi], eax
jmp 0x10009988
cmp ebx, 0x530
jne 0x10009ca8
cmp dword [edi + 0x760], 0
je 0x10009b13
push 0x1026a3f4
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
mov ecx, dword [edi + 0x774]
lea edx, [ebp - 0x2c]
push 0
push edx
mov eax, dword [ecx]
call dword [eax + 0x38]
lea ecx, [edi + 0x7e0]
mov dword [ebp - 4], 0
push eax
call fcn.10001590
mov dword [ebp - 4], 1
mov ecx, dword [ebp - 0x2c]
add ecx, 0xfffffff4
cmp ecx, dword [section..data]
je 0x10009c6f
or eax, 0xffffffff
lock xadd dword [ecx], eax
dec eax
test eax, eax
jg 0x10009c6f
push ecx
call fcn.1002139c
add esp, 4
push ecx
lea eax, [edi + 0x7e0]
mov dword [ebp - 4], 0xffffffff
mov ecx, esp
push eax
call fcn.10001810
mov ecx, edi
call fcn.1000daf0
mov ecx, dword [edi + 0x760]
push 3
call fcn.1003a325
cmp dword [ebp - 0x20], 0
mov dword [esi], 0
jmp 0x10009988
cmp ebx, 0x536
jne 0x10009cd4
mov ecx, dword [edi + 0x760]
test ecx, ecx
je 0x10009b13
push 0
call fcn.1003a325
cmp dword [ebp - 0x20], 0
mov dword [esi], 0
jmp 0x10009988
cmp ebx, 0x540
je 0x10009cb0
cmp ebx, 0x541
je 0x10009bd0
cmp ebx, 0x542
je 0x10009bd0
cmp ebx, 0x543
jne 0x10009d11
sub esp, 0x10
mov ecx, edi
call fcn.1000e1b0
cmp dword [ebp - 0x20], 0
mov dword [esi], eax
jmp 0x10009988
cmp ebx, 0x562
jne 0x10009d2e
sub esp, 0x10
mov ecx, edi
call fcn.1000dd90
cmp dword [ebp - 0x20], 0
mov dword [esi], eax
jmp 0x10009988
cmp ebx, 0x561
jne 0x10009d5a
mov ecx, dword [edi + 0x760]
test ecx, ecx
je 0x10009b13
push 6
call fcn.1003a325
cmp dword [ebp - 0x20], 0
mov dword [esi], 0
jmp 0x10009988
cmp ebx, 0x563
jne 0x10009e72
mov esi, dword [0x10288004]
push 0x66
call fcn.100213a1
add esp, 4
test eax, eax
je 0x10009da7
push 0x58
lea esi, [eax + 0xc]
mov dword [eax], 1
xor ecx, ecx
mov dword [eax + 4], 0x2c
push str.http:__q.url.cn_cdtfvl__typewpaqidiantrue
mov dword [eax + 8], 0x2c
push esi
mov word [eax + 0x64], cx
call fcn.101a6860
add esp, 0xc
cmp dword [esi - 8], 0
jle 0x10009e32
xorps xmm0, xmm0
mov dword [ebp - 0x6c], 0
lea eax, [ebp - 0x74]
movlpd qword [ebp - 0x60], xmm0
push eax
movlpd qword [ebp - 0x54], xmm0
movlpd qword [ebp - 0x4c], xmm0
movlpd qword [ebp - 0x44], xmm0
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x74], 0x3c
mov dword [ebp - 0x70], 0x400
mov dword [ebp - 0x68], str.open
mov dword [ebp - 0x64], esi
mov dword [ebp - 0x58], 3
call dword [sym.imp.SHELL32.dll_ShellExecuteExW]
test eax, eax
jne 0x10009e32
cmp dword [esi - 8], eax
jle 0x10009e32
mov ax, word [0x1026ab14]
movq xmm0, qword [str.open]
push 1
push 0
push 0
mov word [ebp - 0x14], ax
lea eax, [ebp - 0x1c]
push esi
push eax
push 0
movq qword [ebp - 0x1c], xmm0
call dword [sym.imp.SHELL32.dll_ShellExecuteW]
add esi, 0xfffffff4
mov dword [ebp - 4], 2
cmp esi, dword [section..data]
je 0x10009e59
or eax, 0xffffffff
lock xadd dword [esi], eax
dec eax
test eax, eax
jg 0x10009e59
push esi
call fcn.1002139c
add esp, 4
mov esi, dword [ebp - 0x24]
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x20], 0
mov dword [esi], 0
jmp 0x10009988
lea eax, [ebp - 0x20]
push eax
push dword [ebp - 0x30]
lea ecx, [edi + 0x238]
push dword [ebp - 0x28]
push ebx
call fcn.1003b3de
mov dword [esi], eax
test eax, eax
jne 0x10009ea2
lea eax, [ebx - 0x132]
cmp eax, 6
ja 0x10009ea2
mov dword [ebp - 0x20], 0
jmp 0x10009eac
cmp dword [ebp - 0x20], 0
jne 0x1000998e
mov esi, dword [edi + 0x394]
mov ecx, edi
push 0
push dword [ebp - 0x24]
push dword [ebp - 0x30]
push dword [ebp - 0x28]
push ebx
push dword [ebp + 8]
call fcn.10018b30
mov dword [edi + 0x394], esi
test eax, eax
jne 0x1000998e
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1018ea37
mov esp, ebp
pop ebp
ret 0x18
push 1
mov ecx, edi
call fcn.100098c0
call fcn.1000d020
mov ecx, edi
call fcn.1000d020
int3