Function at 0x10032eb0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100bdec1
mov eax, dword fs:[0]
push eax
sub esp, 0xbe0
mov eax, dword [0x100fb03c]
xor eax, ebp
mov dword [ebp - 0x10], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, dword [ebp + 8]
lea ecx, [ebp - 0xa4c]
xorps xmm0, xmm0
mov dword [ebp - 0xb70], esi
push esi
mov dword [ebp - 0xb68], 0
mov byte [ebp - 0xb62], 0
movups xmmword [ebp - 0xa4c], xmm0
call fcn.10017e70
xorps xmm0, xmm0
lea edi, [esi + 0x18]
push edi
lea ecx, [ebp - 0xb80]
movups xmmword [ebp - 0xb80], xmm0
call fcn.10017e70
mov eax, dword [ebp - 0xb80]
cmp eax, dword [ebp - 0xa4c]
jl 0x100343f9
jg 0x10032f74
mov eax, dword [ebp - 0xb7c]
cmp eax, dword [ebp - 0xa48]
jl 0x100343f9
jg 0x10032f74
mov eax, dword [ebp - 0xb78]
cmp eax, dword [ebp - 0xa44]
jl 0x100343f9
jg 0x10032f74
mov eax, dword [ebp - 0xb74]
cmp eax, dword [ebp - 0xa40]
jle 0x100343f9
push 0x800
lea eax, [ebp - 0xa18]
push 0
push eax
call fcn.1008ac40
lea eax, [ebp - 0xa30]
push eax
call fcn.1001cd40
add esp, 0x10
mov dword [ebp - 4], 0
cmp dword [eax + 0x14], 8
jb 0x10032fa5
mov eax, dword [eax]
push eax
lea eax, [ebp - 0xa18]
push 0x400
push eax
call fcn.1008d867
add esp, 0xc
mov dword [ebp - 4], 1
mov edx, dword [ebp - 0xa1c]
cmp edx, 8
jb 0x10033001
mov ecx, dword [ebp - 0xa30]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x10032ff7
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10034418
push edx
push ecx
call fcn.1008854e
add esp, 8
xor eax, eax
mov dword [ebp - 0xa20], 0
mov dword [ebp - 0xa1c], 7
mov word [ebp - 0xa30], ax
lea eax, [ebp - 0xa18]
mov dword [ebp - 4], 0xffffffff
push eax
call dword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
mov esi, dword [sym.imp.KERNEL32.dll_lstrcatW]
lea eax, [ebp - 0xa18]
push 0x100de148
push eax
call esi
push 0x100dafd4
lea eax, [ebp - 0xa18]
push eax
call esi
lea eax, [ebp - 0xa18]
push eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
mov dword [ebp - 0xb74], eax
test eax, eax
jne 0x1003307a
mov dword [ebp - 0xb68], 1
jmp 0x10033df1
push str.ExtractArchive
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0xbb4], eax
test eax, eax
jne 0x1003309f
mov dword [ebp - 0xb68], 2
jmp 0x10033de5
push edi
lea eax, [ebp - 0xa30]
push 0x100df278
push eax
call fcn.10004e20
add esp, 0xc
mov dword [ebp - 4], 5
mov edx, dword [ebp - 0xa1c]
cmp edx, 8
jb 0x100330fb
mov ecx, dword [ebp - 0xa30]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x100330f1
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003441d
push edx
push ecx
call fcn.1008854e
add esp, 8
xor eax, eax
mov dword [ebp - 0xa20], 0
mov dword [ebp - 0xa1c], 7
mov word [ebp - 0xa30], ax
mov esi, dword [ebp - 0xb70]
mov dword [ebp - 4], 0xffffffff
lea eax, [esi + 0x30]
push eax
lea eax, [ebp - 0xa30]
push 0x100df260
push eax
call fcn.10004e20
add esp, 0xc
mov dword [ebp - 4], 9
mov edx, dword [ebp - 0xa1c]
cmp edx, 8
jb 0x10033184
mov ecx, dword [ebp - 0xa30]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x1003317a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10034422
push edx
push ecx
call fcn.1008854e
add esp, 8
xor eax, eax
mov dword [ebp - 0xa20], 0
mov dword [ebp - 0xa1c], 7
mov word [ebp - 0xa30], ax
lea eax, [esi + 0x48]
mov dword [ebp - 4], 0xffffffff
push eax
lea eax, [ebp - 0xa30]
push str.g0R
push eax
call fcn.10004e20
add esp, 0xc
mov dword [ebp - 4], 0xd
mov edx, dword [ebp - 0xa1c]
cmp edx, 8
jb 0x10033207
mov ecx, dword [ebp - 0xa30]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x100331fd
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10034427
push edx
push ecx
call fcn.1008854e
add esp, 8
xor eax, eax
mov dword [ebp - 0xa20], 0
mov dword [ebp - 0xa1c], 7
mov word [ebp - 0xa30], ax
push 0x208
push eax
lea eax, [ebp - 0x218]
mov dword [ebp - 4], 0xffffffff
push eax
call fcn.1008ac40
add esp, 0xc
lea eax, [ebp - 0x218]
push 0x104
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
xor eax, eax
mov dword [ebp - 0xa74], 0
lea ecx, [ebp - 0x218]
mov dword [ebp - 0xa70], 0
mov dword [ebp - 0xa74], 0
lea edx, [ecx + 2]
mov dword [ebp - 0xa70], 7
mov word [ebp - 0xa84], ax
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x10033290
sub ecx, edx
lea eax, [ebp - 0x218]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0xa84]
call fcn.100049a0
lea ecx, [ebp - 0xa84]
mov dword [ebp - 4], 0x11
call fcn.10004990
mov esi, eax
cmp dword [eax + 0x14], 8
jb 0x100332ce
mov esi, dword [eax]
mov eax, dword [eax + 0x10]
mov dword [ebp - 0xa88], 0xffffffff
test eax, eax
je 0x1003331b
dec eax
mov dword [ebp - 0xa3c], eax
lea eax, [ebp - 0xa3c]
push eax
lea eax, [ebp - 0xa88]
push eax
call fcn.10004c10
add esp, 8
mov eax, dword [eax]
cmp word [esi + eax*2], 0x5c
lea eax, [esi + eax*2]
je 0x10033315
cmp eax, esi
je 0x1003331b
sub eax, 2
cmp word [eax], 0x5c
jne 0x10033308
sub eax, esi
sar eax, 1
jmp 0x1003331e
or eax, 0xffffffff
inc eax
lea ecx, [ebp - 0xa84]
push eax
push 0
lea eax, [ebp - 0xa30]
push eax
call fcn.1000bf00
mov esi, eax
lea eax, [ebp - 0xa84]
mov byte [ebp - 4], 0x12
cmp eax, esi
je 0x10033375
mov ecx, eax
call fcn.10004840
movups xmm0, xmmword [esi]
xor eax, eax
movups xmmword [ebp - 0xa84], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [ebp - 0xa74], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 7
mov word [esi], ax
mov byte [ebp - 4], 0x13
mov edx, dword [ebp - 0xa1c]
cmp edx, 8
jb 0x100333b9
mov ecx, dword [ebp - 0xa30]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x100333af
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003442c
push edx
push ecx
call fcn.1008854e
add esp, 8
xor eax, eax
mov dword [ebp - 0xa20], 0
mov dword [ebp - 0xa1c], 7
mov word [ebp - 0xa30], ax
push str.Service_
lea eax, [ebp - 0xa84]
mov byte [ebp - 4], 0x11
push eax
lea eax, [ebp - 0xa54]
push eax
call fcn.10004cf0
add esp, 0xc
mov byte [ebp - 4], 0x17
mov eax, edi
cmp dword [edi + 0x14], 8
jb 0x10033403
mov eax, dword [edi]
push dword [edi + 0x10]
lea ecx, [ebp - 0xa54]
push eax
call fcn.10004ae0
lea eax, [ebp - 0xa54]
push eax
call fcn.1000b610
lea eax, [ebp - 0xa54]
push eax
call fcn.1000ba80
lea eax, [ebp - 0xa54]
push eax
lea eax, [ebp - 0xa30]
push str.S_:
push eax
call fcn.10004e20
add esp, 0x14
mov byte [ebp - 4], 0x18
mov edx, dword [ebp - 0xa1c]
cmp edx, 8
jb 0x10033489
mov ecx, dword [ebp - 0xa30]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x1003347f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10034431
push edx
push ecx
call fcn.1008854e
add esp, 8
xor eax, eax
mov dword [ebp - 0xa20], 0
mov dword [ebp - 0xa1c], 7
mov word [ebp - 0xa30], ax
lea eax, [ebp - 0xa84]
mov byte [ebp - 4], 0x17
push eax
lea ecx, [ebp - 0xa6c]
call fcn.10008cd0
lea eax, [ebp - 0xa84]
mov byte [ebp - 4], 0x1c
push eax
lea ecx, [ebp - 0xaa0]
call fcn.10008cd0
push 0x28
push str.UpgradeTemp_tmp_download_2345Service.dat
lea ecx, [ebp - 0xa6c]
mov byte [ebp - 4], 0x1d
call fcn.10004ae0
push 0xb
push str.UpgradeTemp
lea ecx, [ebp - 0xaa0]
call fcn.10004ae0
lea eax, [ebp - 0xaa0]
push eax
call fcn.1000b610
lea eax, [ebp - 0xaa0]
push eax
call fcn.1000ba80
lea eax, [ebp - 0xaa0]
push eax
lea eax, [ebp - 0xb98]
push 0x100df31c
push eax
call fcn.10004e20
add esp, 0x14
mov byte [ebp - 4], 0x1e
mov edx, dword [ebp - 0xb84]
cmp edx, 8
jb 0x10033571
mov ecx, dword [ebp - 0xb98]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x10033567
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10034436
push edx
push ecx
call fcn.1008854e
add esp, 8
xor eax, eax
mov dword [ebp - 0xb88], 0
mov dword [ebp - 0xb84], 7
mov word [ebp - 0xb98], ax
mov byte [ebp - 4], 0x1d
lea edx, [ebp - 0xa6c]
cmp dword [ebp - 0xa58], 8
mov dword [ebp - 0xa20], eax
cmovae edx, dword [ebp - 0xa6c]
mov ecx, edx
mov dword [ebp - 0xa1c], eax
mov dword [ebp - 0xa20], eax
mov dword [ebp - 0xa1c], 7
mov word [ebp - 0xa30], ax
lea esi, [ecx + 2]
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x100335d0
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0xa30]
call fcn.100049a0
mov esi, dword [ebp - 0xb70]
lea edx, [esi + 0x30]
mov byte [ebp - 4], 0x22
cmp dword [edx + 0x14], 8
jb 0x10033601
mov edx, dword [edx]
mov ecx, edx
mov dword [ebp - 0xb88], 0
xor eax, eax
mov dword [ebp - 0xb84], 0
mov word [ebp - 0xb98], ax
mov dword [ebp - 0xb88], 0
lea eax, [ecx + 2]
mov dword [ebp - 0xb84], 7
mov dword [ebp - 0xa88], eax
nop dword [eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x10033640
sub ecx, dword [ebp - 0xa88]
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0xb98]
call fcn.100049a0
lea ecx, [ebp - 0xb60]
mov byte [ebp - 4], 0x23
call fcn.1003b530
mov byte [ebp - 4], 0x24
lea eax, [ebp - 0xb98]
cmp dword [ebp - 0xb84], 8
lea ecx, [ebp - 0xb60]
push dword [ebp - 0xb88]
cmovae eax, dword [ebp - 0xb98]
push eax
call fcn.100049a0
cmp dword [ebp - 0xa1c], 8
lea eax, [ebp - 0xa30]
push dword [ebp - 0xa20]
cmovae eax, dword [ebp - 0xa30]
lea ecx, [ebp - 0xb48]
push eax
call fcn.100049a0
lea ecx, [ebp - 0xa3c]
mov dword [ebp - 0xa3c], 0
call fcn.1003b5d0
sub esp, 0xc
mov byte [ebp - 4], 0x25
lea eax, [ebp - 0xb60]
lea ecx, [ebp - 0xa3c]
push eax
call fcn.1003b6e0
lea ecx, [ebp - 0xa3c]
mov byte [ebp - 0xb61], al
mov byte [ebp - 4], 0x24
call fcn.1003b650
lea ecx, [ebp - 0xb60]
mov byte [ebp - 4], 0x23
call fcn.100344a0
cmp byte [ebp - 0xb61], 0
sete byte [ebp - 0xb61]
mov byte [ebp - 4], 0x26
mov edx, dword [ebp - 0xb84]
cmp edx, 8
jb 0x10033763
mov ecx, dword [ebp - 0xb98]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x10033759
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003443b
push edx
push ecx
call fcn.1008854e
add esp, 8
xor eax, eax
mov dword [ebp - 0xb88], 0
mov dword [ebp - 0xb84], 7
mov word [ebp - 0xb98], ax
mov byte [ebp - 4], 0x2a
mov edx, dword [ebp - 0xa1c]
cmp edx, 8
jb 0x100337c4
mov ecx, dword [ebp - 0xa30]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x100337ba
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10034440
push edx
push ecx
call fcn.1008854e
add esp, 8
xor eax, eax
mov dword [ebp - 0xa20], 0
mov dword [ebp - 0xa1c], 7
mov word [ebp - 0xa30], ax
mov byte [ebp - 4], 0x1d
cmp byte [ebp - 0xb61], al
je 0x10033987
mov dword [ebp - 0xb68], 3
mov byte [ebp - 4], 0x2e
mov edx, dword [ebp - 0xa8c]
cmp edx, 8
jb 0x1003383f
mov ecx, dword [ebp - 0xaa0]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x10033835
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10034445
push edx
push ecx
call fcn.1008854e
add esp, 8
xor eax, eax
mov dword [ebp - 0xa90], 0
mov dword [ebp - 0xa8c], 7
mov word [ebp - 0xaa0], ax
mov byte [ebp - 4], 0x32
mov edx, dword [ebp - 0xa58]
cmp edx, 8
jb 0x100338a0
mov ecx, dword [ebp - 0xa6c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x10033896
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003444a
push edx
push ecx
call fcn.1008854e
add esp, 8
xor eax, eax
mov dword [ebp - 0xa5c], 0
mov dword [ebp - 0xa58], 7
mov word [ebp - 0xa6c], ax
mov byte [ebp - 4], 0x36
mov edx, dword [ebp - 0xa40]
cmp edx, 8
jb 0x10033901
mov ecx, dword [ebp - 0xa54]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x100338f7
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003444f
push edx
push ecx
call fcn.1008854e
add esp, 8
xor eax, eax
mov dword [ebp - 0xa44], 0
mov dword [ebp - 0xa40], 7
mov word [ebp - 0xa54], ax
mov dword [ebp - 4], 0x3a
mov edx, dword [ebp - 0xa70]
cmp edx, 8
jb 0x10033965
mov ecx, dword [ebp - 0xa84]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x1003395b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10034454
push edx
push ecx
call fcn.1008854e
add esp, 8
xor eax, eax
mov dword [ebp - 0xa74], 0
mov dword [ebp - 0xa70], 7
mov word [ebp - 0xa84], ax
jmp 0x10033dde
lea eax, [ebp - 0xa6c]
push eax
push esi
call fcn.10034630
test al, al
jne 0x10033b32
mov dword [ebp - 0xb68], 4
mov byte [ebp - 4], 0x3e
mov edx, dword [ebp - 0xa8c]
cmp edx, 8
jb 0x100339ea
mov ecx, dword [ebp - 0xaa0]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x100339e0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10034459
push edx
push ecx
call fcn.1008854e
add esp, 8
xor eax, eax
mov dword [ebp - 0xa90], 0
mov dword [ebp - 0xa8c], 7
mov word [ebp - 0xaa0], ax
mov byte [ebp - 4], 0x42
mov edx, dword [ebp - 0xa58]
cmp edx, 8
jb 0x10033a4b
mov ecx, dword [ebp - 0xa6c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x10033a41
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003445e
push edx
push ecx
call fcn.1008854e
add esp, 8
xor eax, eax
mov dword [ebp - 0xa5c], 0
mov dword [ebp - 0xa58], 7
mov word [ebp - 0xa6c], ax
mov byte [ebp - 4], 0x46
mov edx, dword [ebp - 0xa40]
cmp edx, 8
jb 0x10033aac
mov ecx, dword [ebp - 0xa54]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x10033aa2
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10034463
push edx
push ecx
call fcn.1008854e
add esp, 8
xor eax, eax
mov dword [ebp - 0xa44], 0
mov dword [ebp - 0xa40], 7
mov word [ebp - 0xa54], ax
mov dword [ebp - 4], 0x4a
mov edx, dword [ebp - 0xa70]
cmp edx, 8
jb 0x10033b10
mov ecx, dword [ebp - 0xa84]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x10033b06
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10034468
push edx
push ecx
call fcn.1008854e
add esp, 8
xor eax, eax
mov dword [ebp - 0xa74], 0
mov dword [ebp - 0xa70], 7
mov word [ebp - 0xa84], ax
jmp 0x10033dde
cmp dword [ebp - 0xa40], 8
lea ecx, [ebp - 0xa54]
push 0
cmovae ecx, dword [ebp - 0xa54]
lea eax, [ebp - 0xa6c]
cmp dword [ebp - 0xa58], 8
push 0x10032ea0
cmovae eax, dword [ebp - 0xa6c]
push 1
push 0
push ecx
push eax
call dword [ebp - 0xbb4]
add esp, 0x18
test eax, eax
jne 0x10033c3e
lea eax, [ebp - 0xa84]
push eax
lea ecx, [ebp - 0xa30]
call fcn.10008cd0
push 0xa
push str.config.ini
lea ecx, [ebp - 0xa30]
mov byte [ebp - 4], 0x4e
call fcn.10004ae0
cmp dword [ebp - 0xa1c], 8
lea eax, [ebp - 0xa30]
mov ecx, edi
cmovae eax, dword [ebp - 0xa30]
cmp dword [edi + 0x14], 8
jb 0x10033bbe
mov ecx, dword [edi]
push eax
push ecx
push str.ServiceVersion
push str.ServerLoadInfo
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStringW]
mov byte [ebp - 0xb62], 1
mov byte [ebp - 4], 0x4f
mov edx, dword [ebp - 0xa1c]
cmp edx, 8
jb 0x10033c1b
mov ecx, dword [ebp - 0xa30]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x10033c11
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003446d
push edx
push ecx
call fcn.1008854e
add esp, 8
xor eax, eax
mov dword [ebp - 0xa20], 0
mov dword [ebp - 0xa1c], 7
mov word [ebp - 0xa30], ax
mov byte [ebp - 4], 0x1d
jmp 0x10033c48
mov dword [ebp - 0xb68], 5
lea eax, [ebp - 0xaa0]
push eax
call fcn.1000b610
add esp, 4
mov byte [ebp - 4], 0x53
mov edx, dword [ebp - 0xa8c]
cmp edx, 8
jb 0x10033c9b
mov ecx, dword [ebp - 0xaa0]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x10033c91
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10034472
push edx
push ecx
call fcn.1008854e
add esp, 8
xor eax, eax
mov dword [ebp - 0xa90], 0
mov dword [ebp - 0xa8c], 7
mov word [ebp - 0xaa0], ax
mov byte [ebp - 4], 0x57
mov edx, dword [ebp - 0xa58]
cmp edx, 8
jb 0x10033cfc
mov ecx, dword [ebp - 0xa6c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x10033cf2
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10034477
push edx
push ecx
call fcn.1008854e
add esp, 8
xor eax, eax
mov dword [ebp - 0xa5c], 0
mov dword [ebp - 0xa58], 7
mov word [ebp - 0xa6c], ax
mov byte [ebp - 4], 0x5b
mov edx, dword [ebp - 0xa40]
cmp edx, 8
jb 0x10033d5d
mov ecx, dword [ebp - 0xa54]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x10033d53
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003447c
push edx
push ecx
call fcn.1008854e
add esp, 8
xor eax, eax
mov dword [ebp - 0xa44], 0
mov dword [ebp - 0xa40], 7
mov word [ebp - 0xa54], ax
mov dword [ebp - 4], 0x5f
mov edx, dword [ebp - 0xa70]
cmp edx, 8
jb 0x10033dc1
mov ecx, dword [ebp - 0xa84]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x10033db7
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10034481
push edx
push ecx
call fcn.1008854e
add esp, 8
xor eax, eax
mov dword [ebp - 0xa74], 0
mov dword [ebp - 0xa70], 7
mov word [ebp - 0xa84], ax
mov dword [ebp - 4], 0xffffffff
push dword [ebp - 0xb74]
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
xorps xmm0, xmm0
movlpd qword [ebp - 0xa38], xmm0
mov dword [ebp - 0xa38], 0
mov dword [ebp - 0xa34], 0
call fcn.1002dcb0
mov dword [ebp - 0xa38], eax
sub esp, 0x18
mov dword [ebp - 4], 0x65
mov ecx, esp
mov dword [ebp - 0xb74], esp
mov byte [ebp - 0xb61], 0
push 0x100fba34
call fcn.10008cd0
mov byte [ebp - 4], 0x66
lea ecx, [ebp - 0xa30]
mov byte [ebp - 4], 0x65
call fcn.1001e780
add esp, 0x18
mov esi, eax
lea eax, [ebp - 0xa4c]
mov byte [ebp - 4], 0x67
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
lea eax, [ebp - 0xa4c]
mov byte [ebp - 4], 0x68
push esi
push eax
lea edx, [ebp - 0xb61]
lea ecx, [ebp - 0xbb0]
call fcn.1002e580
add esp, 8
mov byte [ebp - 4], 0x69
lea ecx, [ebp - 0xab8]
push eax
mov dword [ebp - 0xac0], str.uuid
call fcn.1002ed20
lea eax, [ebp - 0xac0]
mov byte [ebp - 4], 0x6a
push eax
lea ecx, [ebp - 0xa38]
call fcn.1002f1c0
push eax
add eax, 0x10
push eax
push ecx
lea eax, [ebp - 0xb78]
push eax
lea ecx, [ebp - 0xa38]
call fcn.1002eeb0
lea ecx, [ebp - 0xab8]
mov byte [ebp - 4], 0x6c
call fcn.1002a030
lea ecx, [ebp - 0xbb0]
mov byte [ebp - 4], 0x6d
call fcn.1002a030
lea eax, [ebp - 0xa4c]
mov byte [ebp - 4], 0x67
push eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
mov byte [ebp - 4], 0x6e
mov edx, dword [ebp - 0xa1c]
cmp edx, 8
jb 0x10033f42
mov ecx, dword [ebp - 0xa30]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x10033f38
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10034486
push edx
push ecx
call fcn.1008854e
add esp, 8
xor eax, eax
mov dword [ebp - 0xa20], 0
mov dword [ebp - 0xa1c], 7
mov word [ebp - 0xa30], ax
sub esp, 0x18
mov byte [ebp - 4], 0x65
mov ecx, esp
mov dword [ebp - 0xb74], esp
mov byte [ebp - 0xb61], al
push 0x100fba34
call fcn.10008cd0
mov byte [ebp - 4], 0x72
lea ecx, [ebp - 0xb98]
mov byte [ebp - 4], 0x65
call fcn.1001e970
add esp, 0x18
mov esi, eax
lea eax, [ebp - 0xa64]
mov byte [ebp - 4], 0x73
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
lea eax, [ebp - 0xa64]
mov byte [ebp - 4], 0x74
push esi
push eax
lea edx, [ebp - 0xb61]
lea ecx, [ebp - 0xab8]
call fcn.1002e580
add esp, 8
mov byte [ebp - 4], 0x75
lea ecx, [ebp - 0xbe4]
push eax
mov dword [ebp - 0xbec], str.uuid2
call fcn.1002ed20
lea eax, [ebp - 0xbec]
mov byte [ebp - 4], 0x76
push eax
lea ecx, [ebp - 0xa38]
call fcn.1002f1c0
push eax
add eax, 0x10
push eax
push ecx
lea eax, [ebp - 0xb78]
push eax
lea ecx, [ebp - 0xa38]
call fcn.1002eeb0
lea ecx, [ebp - 0xbe4]
mov byte [ebp - 4], 0x78
call fcn.1002a030
lea ecx, [ebp - 0xab8]
mov byte [ebp - 4], 0x79
call fcn.1002a030
lea eax, [ebp - 0xa64]
mov byte [ebp - 4], 0x73
mov esi, dword [sym.imp.OLEAUT32.dll_VariantCopy]
push eax
call esi
mov byte [ebp - 4], 0x7a
mov edx, dword [ebp - 0xb84]
cmp edx, 8
jb 0x10034084
mov ecx, dword [ebp - 0xb98]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x1003407a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1003448b
push edx
push ecx
call fcn.1008854e
add esp, 8
xor eax, eax
mov dword [ebp - 0xb88], 0
mov dword [ebp - 0xb84], 7
mov word [ebp - 0xb98], ax
mov byte [ebp - 4], 0x65
mov eax, 0x16
mov word [ebp - 0xa4c], ax
mov eax, dword [ebp - 0xb68]
mov byte [ebp - 0xb61], 1
mov dword [ebp - 0xa44], eax
push ecx
lea eax, [ebp - 0xa4c]
mov byte [ebp - 4], 0x7e
push eax
lea edx, [ebp - 0xb61]
lea ecx, [ebp - 0xba0]
call fcn.1002dd70
push eax
mov edx, str.ssj01
mov byte [ebp - 4], 0x7f
lea ecx, [ebp - 0xab0]
call fcn.1002e080
add esp, 0xc
push eax
lea ecx, [ebp - 0xa38]
mov byte [ebp - 4], 0x80
call fcn.1002f0f0
push eax
add eax, 0x10
push eax
push ecx
lea eax, [ebp - 0xb78]
push eax
lea ecx, [ebp - 0xa38]
call fcn.1002eeb0
lea eax, [ebp - 0xaa0]
mov byte [ebp - 4], 0x84
push eax
call esi
lea eax, [ebp - 0xb98]
mov byte [ebp - 4], 0x87
push eax
call esi
lea eax, [ebp - 0xa4c]
mov byte [ebp - 4], 0x65
push eax
call esi
lea eax, [ebp - 0xa64]
mov byte [ebp - 0xb61], 0
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
push dword [ebp - 0xb70]
lea eax, [ebp - 0xa64]
mov byte [ebp - 4], 0x88
push eax
lea edx, [ebp - 0xb61]
lea ecx, [ebp - 0xbb0]
call fcn.10034820
add esp, 8
mov byte [ebp - 4], 0x89
lea ecx, [ebp - 0xbe4]
push eax
mov dword [ebp - 0xbec], str.oldver
call fcn.1002ed20
mov byte [ebp - 4], 0x8a
lea eax, [ebp - 0xbec]
push eax
lea ecx, [ebp - 0xa38]
call fcn.1002f1c0
push eax
add eax, 0x10
push eax
push ecx
lea eax, [ebp - 0xb78]
push eax
lea ecx, [ebp - 0xa38]
call fcn.1002eeb0
lea ecx, [ebp - 0xbe4]
mov byte [ebp - 4], 0x8c
call fcn.1002a030
lea ecx, [ebp - 0xbb0]
mov byte [ebp - 4], 0x8d
call fcn.1002a030
lea eax, [ebp - 0xa64]
mov byte [ebp - 4], 0x65
push eax
call esi
lea eax, [ebp - 0xa64]
mov byte [ebp - 0xb61], 0
push eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
lea eax, [ebp - 0xa64]
mov byte [ebp - 4], 0x8e
push edi
push eax
lea edx, [ebp - 0xb61]
lea ecx, [ebp - 0xbb0]
call fcn.10034820
add esp, 8
mov byte [ebp - 4], 0x8f
lea ecx, [ebp - 0xbe4]
push eax
mov dword [ebp - 0xbec], str.newver
call fcn.1002ed20
lea eax, [ebp - 0xbec]
mov byte [ebp - 4], 0x90
push eax
lea ecx, [ebp - 0xa38]
call fcn.1002f1c0
push eax
add eax, 0x10
push eax
push ecx
lea eax, [ebp - 0xb78]
push eax
lea ecx, [ebp - 0xa38]
call fcn.1002eeb0
lea ecx, [ebp - 0xbe4]
mov byte [ebp - 4], 0x92
call fcn.1002a030
lea ecx, [ebp - 0xbb0]
mov byte [ebp - 4], 0x93
call fcn.1002a030
lea eax, [ebp - 0xa64]
mov byte [ebp - 4], 0x65
push eax
call esi
lea edx, [ebp - 0xa38]
lea ecx, [ebp - 0xad8]
call fcn.10022db0
mov byte [ebp - 4], 0x95
mov dword [ebp - 0xa20], 0
mov dword [ebp - 0xa1c], 0
mov dword [ebp - 0xa20], 0
mov dword [ebp - 0xa1c], 7
xor eax, eax
mov word [ebp - 0xa30], ax
lea edx, [ebp - 0xa30]
mov byte [ebp - 4], 0x96
lea ecx, [ebp - 0xad8]
call fcn.1001f560
mov byte [ebp - 4], 0x97
mov edx, dword [ebp - 0xa1c]
cmp edx, 8
jb 0x1003433a
mov ecx, dword [ebp - 0xa30]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x10034330
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10034490
push edx
push ecx
call fcn.1008854e
add esp, 8
xor eax, eax
mov dword [ebp - 0xa20], 0
mov dword [ebp - 0xa1c], 7
mov word [ebp - 0xa30], ax
mov byte [ebp - 4], 0x9b
mov edx, dword [ebp - 0xac4]
cmp edx, 8
jb 0x1003439b
mov ecx, dword [ebp - 0xad8]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x10034391
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10034495
push edx
push ecx
call fcn.1008854e
add esp, 8
xor eax, eax
mov dword [ebp - 0xac8], 0
mov dword [ebp - 0xac4], 7
mov word [ebp - 0xad8], ax
mov dword [ebp - 4], 0xa0
lea ecx, [ebp - 0xa38]
mov eax, dword [ebp - 0xa38]
push eax
push dword [eax]
lea eax, [ebp - 0xb74]
push eax
call fcn.1002d2c0
push 0x58
push dword [ebp - 0xa38]
call fcn.1008854e
mov al, byte [ebp - 0xb62]
add esp, 8
mov dword [ebp - 4], 0xffffffff
jmp 0x100343fb
xor al, al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.100881a5
mov esp, ebp
pop ebp
ret 4
call fcn.1008db97
call fcn.1008db97
call fcn.1008db97
call fcn.1008db97
call fcn.1008db97
call fcn.1008db97
call fcn.1008db97
call fcn.1008db97
call fcn.1008db97
call fcn.1008db97
call fcn.1008db97
call fcn.1008db97
call fcn.1008db97
call fcn.1008db97
call fcn.1008db97
call fcn.1008db97
call fcn.1008db97
call fcn.1008db97
call fcn.1008db97
call fcn.1008db97
call fcn.1008db97
call fcn.1008db97
call fcn.1008db97
call fcn.1008db97
call fcn.1008db97
call fcn.1008db97
int3