Function at 0x100cf140
Capabilities:
Create thread
Resume thread

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x10120d6a
push eax
mov dword fs:[0], esp
mov eax, 0x1128
push ebx
call fcn.10074560
mov eax, dword [ebx + 0xc]
mov dword [0x101599d8], eax
mov eax, dword [ebx + 0x14]
mov dword [ebp - 0x20], 0
mov byte [0x10155e6a], 0
mov dword [0x101599dc], eax
push esi
push edi
test eax, eax
je 0x100cf21f
mov esi, dword [eax]
mov edi, dword [sym.imp.KERNEL32.dll_lstrcpyW]
test esi, esi
je 0x100cf1cc
lea eax, [esi + 4]
push eax
lea eax, [ebp - 0x938]
push eax
call edi
mov eax, dword [0x101599dc]
mov ecx, dword [esi]
push esi
mov dword [eax], ecx
call dword [sym.imp.KERNEL32.dll_GlobalFree]
mov eax, dword [0x101599dc]
test eax, eax
je 0x100cf21f
mov esi, dword [eax]
test esi, esi
je 0x100cf1f8
lea eax, [esi + 4]
push eax
lea eax, [ebp - 0x608]
push eax
call edi
mov eax, dword [0x101599dc]
mov ecx, dword [esi]
push esi
mov dword [eax], ecx
call dword [sym.imp.KERNEL32.dll_GlobalFree]
mov eax, dword [0x101599dc]
test eax, eax
je 0x100cf21f
mov esi, dword [eax]
test esi, esi
je 0x100cf21f
lea eax, [esi + 4]
push eax
lea eax, [ebp - 0x1138]
push eax
call edi
mov eax, dword [0x101599dc]
mov ecx, dword [esi]
push esi
mov dword [eax], ecx
call dword [sym.imp.KERNEL32.dll_GlobalFree]
mov esi, dword [0x10159990]
test esi, esi
je 0x100cf29d
mov eax, dword [esi]
test eax, eax
je 0x100cf255
mov eax, dword [eax + 0x10]
cmp eax, 0xffffffff
je 0x100cf255
push 0xffffffffffffffff
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
jne 0x100cf24f
mov ecx, dword [esi]
test ecx, ecx
je 0x100cf24f
call fcn.10030400
mov esi, dword [0x10159990]
test esi, esi
je 0x100cf29d
mov edi, dword [esi]
test edi, edi
je 0x100cf292
mov eax, dword [edi + 0x10]
cmp eax, 0xffffffff
je 0x100cf275
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [edi + 0x10], 0xffffffff
mov byte [edi + 8], 0
mov dword [edi + 0xc], 0
push 0x18
push dword [esi]
call fcn.1007306e
add esp, 8
mov dword [esi], 0
push 4
push esi
call fcn.1007306e
add esp, 8
push 0xc
xor eax, eax
mov dword [ebp - 0xac], 0
push str.last_logined
lea ecx, [ebp - 0xbc]
mov dword [ebp - 0xa8], 7
mov word [ebp - 0xbc], ax
call fcn.1001a860
push 7
xor eax, eax
mov dword [ebp - 0x94], 0
push str.UserSet
lea ecx, [ebp - 0xa4]
mov dword [ebp - 0x90], 7
mov word [ebp - 0xa4], ax
call fcn.1001a860
xor eax, eax
mov dword [ebp - 0x7c], 0
lea ecx, [ebp - 0x608]
mov dword [ebp - 0x78], 7
mov word [ebp - 0x8c], ax
lea edx, [ecx + 2]
nop dword [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x100cf320
sub ecx, edx
lea eax, [ebp - 0x608]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x8c]
call fcn.1001a860
lea eax, [ebp - 0xbc]
push eax
lea eax, [ebp - 0xa4]
push eax
lea edx, [ebp - 0x8c]
lea ecx, [ebp - 0x294]
call fcn.100d1db0
mov edx, dword [ebp - 0x78]
add esp, 8
cmp edx, 8
jb 0x100cf3a1
mov ecx, dword [ebp - 0x8c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x100cf397
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100d052f
push edx
push ecx
call fcn.1007306e
add esp, 8
mov edx, dword [ebp - 0x90]
xor eax, eax
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x78], 7
mov word [ebp - 0x8c], ax
cmp edx, 8
jb 0x100cf3f8
mov ecx, dword [ebp - 0xa4]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x100cf3ee
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100d0534
push edx
push ecx
call fcn.1007306e
add esp, 8
mov edx, dword [ebp - 0xa8]
xor eax, eax
mov dword [ebp - 0x94], 0
mov dword [ebp - 0x90], 7
mov word [ebp - 0xa4], ax
cmp edx, 8
jb 0x100cf455
mov ecx, dword [ebp - 0xbc]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x100cf44b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100d0539
push edx
push ecx
call fcn.1007306e
add esp, 8
xor eax, eax
mov dword [ebp - 0xac], 0
push 6
push str.is_vip
lea ecx, [ebp - 0x74]
mov dword [ebp - 0xa8], 7
mov word [ebp - 0xbc], ax
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x60], 7
mov word [ebp - 0x74], ax
call fcn.1001a860
push 7
xor eax, eax
mov dword [ebp - 0xdc], 0
push str.UserSet
lea ecx, [ebp - 0xec]
mov dword [ebp - 0xd8], 7
mov word [ebp - 0xec], ax
call fcn.1001a860
xor eax, eax
mov dword [ebp - 0xc4], 0
lea ecx, [ebp - 0x608]
mov dword [ebp - 0xc0], 7
mov word [ebp - 0xd4], ax
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x100cf4e4
sub ecx, edx
lea eax, [ebp - 0x608]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0xd4]
call fcn.1001a860
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0xec]
push eax
lea edx, [ebp - 0xd4]
lea ecx, [ebp - 0x3d8]
call fcn.100d1db0
mov edx, dword [ebp - 0xc0]
add esp, 8
cmp edx, 8
jb 0x100cf565
mov ecx, dword [ebp - 0xd4]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x100cf55b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100d053e
push edx
push ecx
call fcn.1007306e
add esp, 8
mov edx, dword [ebp - 0xd8]
xor eax, eax
mov dword [ebp - 0xc4], 0
mov dword [ebp - 0xc0], 7
mov word [ebp - 0xd4], ax
cmp edx, 8
jb 0x100cf5c2
mov ecx, dword [ebp - 0xec]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x100cf5b8
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100d0543
push edx
push ecx
call fcn.1007306e
add esp, 8
mov edx, dword [ebp - 0x60]
xor eax, eax
mov dword [ebp - 0xdc], 0
mov dword [ebp - 0xd8], 7
mov word [ebp - 0xec], ax
cmp edx, 8
jb 0x100cf619
mov ecx, dword [ebp - 0x74]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x100cf60f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100d0548
push edx
push ecx
call fcn.1007306e
add esp, 8
xor eax, eax
mov dword [ebp - 0x64], 0
push 0x11
push str.last_logined_user
lea ecx, [ebp - 0x134]
mov dword [ebp - 0x60], 7
mov word [ebp - 0x74], ax
mov dword [ebp - 0x124], eax
mov dword [ebp - 0x120], 7
mov word [ebp - 0x134], ax
call fcn.1001a860
push 7
xor eax, eax
mov dword [ebp - 0x10c], 0
push str.UserSet
lea ecx, [ebp - 0x11c]
mov dword [ebp - 0x108], 7
mov word [ebp - 0x11c], ax
call fcn.1001a860
xor eax, eax
mov dword [ebp - 0xf4], 0
lea ecx, [ebp - 0x608]
mov dword [ebp - 0xf0], 7
mov word [ebp - 0x104], ax
lea edx, [ecx + 2]
nop dword [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x100cf6b0
sub ecx, edx
lea eax, [ebp - 0x608]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x104]
call fcn.1001a860
lea eax, [ebp - 0x134]
push eax
lea eax, [ebp - 0x11c]
push eax
lea edx, [ebp - 0x104]
lea ecx, [ebp - 0x378]
call fcn.100d1db0
mov edx, dword [ebp - 0xf0]
add esp, 8
cmp edx, 8
jb 0x100cf734
mov ecx, dword [ebp - 0x104]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x100cf72a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100d054d
push edx
push ecx
call fcn.1007306e
add esp, 8
mov edx, dword [ebp - 0x108]
xor eax, eax
mov dword [ebp - 0xf4], 0
mov dword [ebp - 0xf0], 7
mov word [ebp - 0x104], ax
cmp edx, 8
jb 0x100cf791
mov ecx, dword [ebp - 0x11c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x100cf787
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100d0552
push edx
push ecx
call fcn.1007306e
add esp, 8
mov edx, dword [ebp - 0x120]
xor eax, eax
mov dword [ebp - 0x10c], 0
mov dword [ebp - 0x108], 7
mov word [ebp - 0x11c], ax
cmp edx, 8
jb 0x100cf7ee
mov ecx, dword [ebp - 0x134]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x100cf7e4
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100d0557
push edx
push ecx
call fcn.1007306e
add esp, 8
mov edi, dword [ebp - 0x284]
xor eax, eax
mov dword [ebp - 0x124], 0
mov dword [ebp - 0x120], 7
mov word [ebp - 0x134], ax
test edi, edi
je 0x100cf881
push 1
push 0x101377b8
lea ecx, [ebp - 0x44]
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x30], 7
mov word [ebp - 0x44], ax
call fcn.1001a860
mov eax, dword [ebp - 0x34]
lea edx, [ebp - 0x44]
mov esi, dword [ebp - 0x44]
lea ecx, [ebp - 0x294]
cmp edi, eax
mov dword [ebp - 0x1f0], edi
mov dword [ebp - 0x20], 1
cmovb edi, eax
mov dword [ebp - 0x1ec], eax
cmp dword [ebp - 0x30], 8
push edi
cmovae edx, esi
cmp dword [ebp - 0x280], 8
cmovae ecx, dword [ebp - 0x294]
call fcn.100d6e50
add esp, 4
test eax, eax
je 0x100cf884
mov byte [ebp - 0x15], 0
jmp 0x100cf888
mov esi, dword [ebp - 0x44]
mov byte [ebp - 0x15], 1
test byte [ebp - 0x20], 1
je 0x100cf8d9
mov eax, dword [ebp - 0x30]
cmp eax, 8
jb 0x100cf8c5
lea ecx, [eax*2 + 2]
mov eax, esi
cmp ecx, 0x1000
jb 0x100cf8bb
mov esi, dword [esi - 4]
add ecx, 0x23
sub eax, esi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100d055c
push ecx
push esi
call fcn.1007306e
add esp, 8
xor eax, eax
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 7
mov word [ebp - 0x44], ax
cmp byte [ebp - 0x15], 0
je 0x100cf8fb
push 0
push 0
mov byte [0x10155e69], 0
mov byte [0x10155e6a], 1
call fcn.100d4a60
jmp 0x100d04fb
push 4
xor eax, eax
mov dword [ebp - 0x308], 0
push str.http
lea ecx, [ebp - 0x318]
mov dword [ebp - 0x304], 7
mov word [ebp - 0x318], ax
call fcn.1001a860
xor eax, eax
mov dword [ebp - 0x2f0], 0
sub esp, 0x18
mov dword [ebp - 0x2ec], 7
mov edx, esp
mov word [ebp - 0x300], ax
lea ecx, [ebp - 0x1138]
mov dword [ebp - 0x2e8], eax
mov dword [ebp - 0x2d4], eax
lea esi, [ecx + 2]
mov dword [ebp - 0x2d0], 7
mov dword [edx + 0x10], eax
mov dword [edx + 0x14], 7
mov word [ebp - 0x2e4], ax
mov dword [ebp - 0x2bc], eax
mov dword [ebp - 0x2b8], 7
mov word [ebp - 0x2cc], ax
mov word [edx], ax
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x100cf996
sub ecx, esi
lea eax, [ebp - 0x1138]
sar ecx, 1
push ecx
push eax
mov ecx, edx
call fcn.1001a860
lea ecx, [ebp - 0x318]
call fcn.100ff2b0
test al, al
jne 0x100cf9d8
push 0
push 0
mov byte [0x10155e6a], 1
call fcn.100d4a60
jmp 0x100d04f0
xor eax, eax
mov dword [ebp - 0x26c], 0
lea ecx, [ebp - 0x938]
mov dword [ebp - 0x268], 7
mov word [ebp - 0x27c], ax
lea edx, [ecx + 2]
mov dword [ebp - 0x2a0], eax
mov dword [ebp - 0x29c], 7
mov word [ebp - 0x2b0], ax
mov dword [ebp - 0x254], eax
mov dword [ebp - 0x250], 7
mov word [ebp - 0x264], ax
mov dword [ebp - 0x1b8], eax
mov dword [ebp - 0x1b4], 7
mov word [ebp - 0x1c8], ax
mov dword [ebp - 0x23c], eax
mov dword [ebp - 0x238], 7
mov word [ebp - 0x24c], ax
mov dword [ebp - 0x1a0], eax
mov dword [ebp - 0x19c], 7
mov word [ebp - 0x1b0], ax
mov dword [ebp - 0x13c], eax
mov dword [ebp - 0x138], 7
mov word [ebp - 0x14c], ax
nop dword [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x100cfa90
sub ecx, edx
lea eax, [ebp - 0x938]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x14c]
call fcn.1001a860
lea eax, [ebp - 0x1b0]
push eax
lea eax, [ebp - 0x24c]
push eax
lea eax, [ebp - 0x1c8]
push eax
lea eax, [ebp - 0x264]
push eax
lea eax, [ebp - 0x2b0]
push eax
lea edx, [ebp - 0x27c]
lea ecx, [ebp - 0x14c]
call fcn.100d1f80
mov edx, dword [ebp - 0x138]
add esp, 0x14
cmp edx, 8
jb 0x100cfb29
mov ecx, dword [ebp - 0x14c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x100cfb1f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100d0561
push edx
push ecx
call fcn.1007306e
add esp, 8
xor eax, eax
mov dword [ebp - 0x13c], 0
push eax
sub esp, 0x18
mov word [ebp - 0x14c], ax
mov eax, esp
mov dword [ebp - 0x138], 7
push ecx
push eax
lea ecx, [ebp - 0x318]
call fcn.100ff080
add esp, 4
lea ecx, [ebp - 0x180]
call fcn.100ecb10
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x24], 0
call fcn.1001ecb0
mov dword [ebp - 0x28], eax
lea ecx, [ebp - 0x318]
lea eax, [ebp - 0x28]
push eax
call fcn.100fec10
mov ecx, dword [ebp - 0x28]
mov eax, dword [ecx]
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x1c], ecx
cmp eax, ecx
je 0x100cfda0
add eax, 0x10
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x20], eax
lea ecx, [eax + 0x18]
mov edx, SysReAllocString
mov dword [ebp - 0x14], ecx
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
cmp dword [ecx + 0x14], 8
mov edi, dword [ecx + 0x10]
mov dword [ebp - 0x1c], edi
jb 0x100cfbd4
mov ecx, dword [ecx]
mov dword [ebp - 0x14], ecx
cmp edi, 8
jae 0x100cfbee
movups xmm0, xmmword [ecx]
movups xmmword [esi], xmm0
mov dword [esi + 0x10], edi
mov dword [esi + 0x14], 7
jmp 0x100cfcb8
or edi, 7
mov dword [ebp - 0x1e8], SysReAllocStringLen
cmp edi, 0x7ffffffe
mov dword [ebp - 0x204], edi
mov dword [ebp - 0x1f4], 8
cmova edi, edx
mov dword [ebp - 0x1f8], SysReAllocStringLen
mov dword [ebp - 0x1fc], SysReAllocStringLen
mov dword [ebp - 0x200], SysReAllocStringLen
lea eax, [edi + 1]
lea ecx, [eax + eax]
cmp eax, 0x7fffffff
jbe 0x100cfc44
or ecx, 0xffffffff
jmp 0x100cfc4c
cmp ecx, 0x1000
jb 0x100cfc75
lea eax, [ecx + 0x23]
cmp eax, ecx
mov ecx, 0xffffffff
cmovbe eax, ecx
push eax
call fcn.10073081
add esp, 4
test eax, eax
je 0x100d052f
lea ecx, [eax + 0x23]
and ecx, 0xffffffe0
mov dword [ecx - 4], eax
jmp 0x100cfc88
test ecx, ecx
je 0x100cfc86
push ecx
call fcn.10073081
add esp, 4
mov ecx, eax
jmp 0x100cfc88
xor ecx, ecx
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x298], ecx
mov dword [esi], ecx
lea eax, [eax*2 + 2]
push eax
push dword [ebp - 0x14]
push ecx
call fcn.10076950
mov eax, dword [ebp - 0x1c]
add esp, 0xc
mov dword [esi + 0x10], eax
mov edx, SysReAllocString
mov eax, dword [ebp - 0x20]
mov dword [esi + 0x14], edi
sub esp, 0x18
mov edi, esp
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 0
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
mov dword [ebp - 0x1c], ecx
jb 0x100cfcdc
mov eax, dword [eax]
mov dword [ebp - 0x20], eax
cmp ecx, 8
jae 0x100cfcf6
movups xmm0, xmmword [eax]
movups xmmword [edi], xmm0
mov dword [edi + 0x10], ecx
mov dword [edi + 0x14], 7
jmp 0x100cfd80
mov esi, ecx
mov dword [ebp - 0x1cc], SysReAllocStringLen
or esi, 7
mov dword [ebp - 0x1d0], 8
cmp esi, 0x7ffffffe
mov dword [ebp - 0x1e0], esi
mov dword [ebp - 0x1d4], SysReAllocStringLen
cmova esi, edx
mov dword [ebp - 0x1d8], SysReAllocStringLen
mov dword [ebp - 0x1dc], SysReAllocStringLen
lea eax, [esi + 1]
lea ecx, [eax + eax]
cmp eax, 0x7fffffff
mov eax, 0xffffffff
cmova ecx, eax
push ecx
call fcn.1001c130
mov ecx, dword [ebp - 0x1c]
add esp, 4
mov dword [ebp - 0x1e4], eax
mov dword [edi], eax
lea ecx, [ecx*2 + 2]
push ecx
push dword [ebp - 0x20]
push eax
call fcn.10076950
mov eax, dword [ebp - 0x1c]
add esp, 0xc
mov dword [edi + 0x10], eax
mov dword [edi + 0x14], esi
push 0
lea ecx, [ebp - 0x180]
call fcn.100ec760
lea ecx, [ebp - 0x2c]
call fcn.1001e870
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x2c]
jmp 0x100cfb94
lea ecx, [ebp - 0x1c8]
call fcn.100d4830
sub esp, 0x18
lea eax, [ebp - 0x27c]
mov ecx, esp
push eax
call fcn.1001cdf0
sub esp, 0x18
xor eax, eax
mov ecx, esp
push 4
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
push 0x101377bc
mov word [ecx], ax
call fcn.1001a860
push 0
lea ecx, [ebp - 0x180]
call fcn.100ec760
sub esp, 0x18
lea eax, [ebp - 0x264]
mov ecx, esp
push eax
call fcn.1001cdf0
sub esp, 0x18
xor eax, eax
mov ecx, esp
push 7
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
push str.channel
mov word [ecx], ax
call fcn.1001a860
push 0
lea ecx, [ebp - 0x180]
call fcn.100ec760
sub esp, 0x18
lea eax, [ebp - 0x1c8]
mov ecx, esp
push eax
call fcn.1001cdf0
sub esp, 0x18
xor eax, eax
mov ecx, esp
push 0xa
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
push str.subchannel
mov word [ecx], ax
call fcn.1001a860
push 0
lea ecx, [ebp - 0x180]
call fcn.100ec760
sub esp, 0x18
lea eax, [ebp - 0x24c]
mov ecx, esp
push eax
call fcn.1001cdf0
sub esp, 0x18
xor eax, eax
mov ecx, esp
push 0xf
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
push str.softinstalltime
mov word [ecx], ax
call fcn.1001a860
push 0
lea ecx, [ebp - 0x180]
call fcn.100ec760
cmp dword [ebp - 0x1a0], 0
sete al
test al, al
jne 0x100cff03
sub esp, 0x18
lea eax, [ebp - 0x1b0]
mov ecx, esp
push eax
call fcn.1001cdf0
sub esp, 0x18
xor eax, eax
mov ecx, esp
push 4
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
push 0x101375d4
mov word [ecx], ax
call fcn.1001a860
push 0
lea ecx, [ebp - 0x180]
call fcn.100ec760
sub esp, 0x18
mov ecx, esp
call fcn.100d7de0
sub esp, 0x18
xor eax, eax
mov ecx, esp
push 0x11
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
push str.systeminstalltime
mov word [ecx], ax
call fcn.1001a860
push 0
lea ecx, [ebp - 0x180]
call fcn.100ec760
xor eax, eax
mov dword [ebp - 0x338], 0
mov word [ebp - 0x348], ax
mov dword [ebp - 0x4c], eax
mov word [ebp - 0x5c], ax
lea eax, [ebp - 0x390]
push eax
mov dword [ebp - 0x334], 7
mov dword [ebp - 0x48], 7
call fcn.100de9f0
mov esi, eax
lea eax, [ebp - 0x5c]
cmp eax, esi
je 0x100cffa9
mov ecx, eax
call fcn.1001a0c0
movups xmm0, xmmword [esi]
xor eax, eax
movups xmmword [ebp - 0x5c], xmm0
movq xmm0, qword [esi + 0x10]
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 7
movq qword [ebp - 0x4c], xmm0
mov word [esi], ax
lea ecx, [ebp - 0x390]
call fcn.1001a000
mov edx, str.__r_t_n
lea ecx, [ebp - 0x5c]
call fcn.100d6670
mov edx, str.__r_t_n
lea ecx, [ebp - 0x5c]
call fcn.100d65b0
sub esp, 0x18
lea eax, [ebp - 0x5c]
mov ecx, esp
push eax
call fcn.1001cdf0
sub esp, 0x18
xor eax, eax
mov ecx, esp
push 6
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
push str.diskid
mov word [ecx], ax
call fcn.1001a860
push 0
lea ecx, [ebp - 0x180]
call fcn.100ec760
xor eax, eax
mov dword [ebp - 0x320], 0
lea ecx, [ebp - 0x3fc]
mov dword [ebp - 0x31c], 7
mov word [ebp - 0x330], ax
call fcn.100e0af0
sub esp, 0x18
lea ecx, [ebp - 0x3fc]
push esp
call fcn.100e02d0
sub esp, 0x18
xor eax, eax
mov ecx, esp
push 3
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
push 0x101376d8
mov word [ecx], ax
call fcn.1001a860
push 0
lea ecx, [ebp - 0x180]
call fcn.100ec760
lea ecx, [ebp - 0x730]
call fcn.100de6a0
lea ecx, [ebp - 0x730]
call fcn.100dc8d0
movzx esi, word [ebp - 0x624]
sub esp, 0x18
mov ecx, esp
xor eax, eax
push 9
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
push str.osversion
mov word [ecx], ax
call fcn.1001a860
push esi
lea ecx, [ebp - 0x180]
call fcn.100ec9d0
xor eax, eax
cmp byte [ebp - 0x622], al
setne al
sub esp, 0x18
mov ecx, esp
inc eax
mov dword [ebp - 0x14], eax
xor eax, eax
push 5
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
push str.osbit
mov word [ecx], ax
call fcn.1001a860
push dword [ebp - 0x14]
lea ecx, [ebp - 0x180]
call fcn.100ec9d0
call fcn.100de800
xor ecx, ecx
test al, al
setne cl
sub esp, 0x18
mov dword [ebp - 0x14], ecx
xor eax, eax
mov ecx, esp
push 3
push 0x10137700
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
mov word [ecx], ax
call fcn.1001a860
push dword [ebp - 0x14]
lea ecx, [ebp - 0x180]
call fcn.100ec9d0
call fcn.100c98f0
sub esp, 0x18
mov esi, eax
mov ecx, esp
xor eax, eax
push 4
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
push str.safe
mov word [ecx], ax
call fcn.1001a860
push esi
lea ecx, [ebp - 0x180]
call fcn.100ec9d0
call fcn.100d79c0
sub esp, 0x18
mov esi, eax
mov ecx, esp
xor eax, eax
push 2
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
push 0x10137714
mov word [ecx], ax
call fcn.1001a860
push esi
lea ecx, [ebp - 0x180]
call fcn.100ec9d0
sub esp, 0x18
lea eax, [ebp - 0x378]
mov ecx, esp
push eax
call fcn.1001cdf0
sub esp, 0x18
xor eax, eax
mov ecx, esp
push 8
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
push str.last_uid
mov word [ecx], ax
call fcn.1001a860
push 0
lea ecx, [ebp - 0x180]
call fcn.100ec760
xor eax, eax
mov dword [ebp - 0x20c], 0
lea ecx, [ebp - 0x608]
mov dword [ebp - 0x208], 7
mov word [ebp - 0x21c], ax
lea edx, [ecx + 2]
nop word [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x100d0220
sub ecx, edx
lea eax, [ebp - 0x608]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x21c]
call fcn.1001a860
lea edx, [ebp - 0x21c]
lea ecx, [ebp - 0x3a8]
call fcn.100ea150
mov edx, eax
lea ecx, [ebp - 0x360]
call fcn.100ea150
lea ecx, [ebp - 0x3a8]
call fcn.1001a000
lea ecx, [ebp - 0x21c]
call fcn.1001a000
push 0x18
xor eax, eax
mov dword [ebp - 0x224], 0
push str.Cacheuninstallunbg.png
lea ecx, [ebp - 0x234]
mov dword [ebp - 0x220], 7
mov word [ebp - 0x234], ax
call fcn.1001a860
lea eax, [ebp - 0x234]
push eax
lea edx, [ebp - 0x360]
lea ecx, [ebp - 0x198]
call fcn.100ea420
add esp, 4
lea ecx, [ebp - 0x234]
call fcn.1001a000
push 0x30
call fcn.10073081
mov edi, eax
add esp, 4
xor eax, eax
xor ecx, ecx
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 7
mov word [edi], ax
mov dword [edi + 0x28], eax
lea eax, [ebp - 0x3c0]
mov dword [edi + 0x2c], 7
mov word [edi + 0x18], cx
lea ecx, [ebp - 0x180]
push eax
call fcn.100ec640
mov esi, eax
cmp edi, esi
je 0x100d033c
mov ecx, edi
call fcn.1001a0c0
movups xmm0, xmmword [esi]
xor eax, eax
movups xmmword [edi], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [edi + 0x10], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 7
mov word [esi], ax
lea ecx, [ebp - 0x3c0]
call fcn.1001a000
lea eax, [ebp - 0x198]
lea ecx, [edi + 0x18]
cmp ecx, eax
je 0x100d036e
cmp dword [ebp - 0x184], 8
push dword [ebp - 0x188]
cmovae eax, dword [ebp - 0x198]
push eax
call fcn.1001a860
push 4
call fcn.10073081
add esp, 4
mov esi, eax
push 0x18
call fcn.10073081
add esp, 4
mov dword [0x10159990], esi
mov dword [eax], 0
mov dword [eax + 4], 0
mov dword [eax + 0x10], 0xffffffff
mov byte [eax + 8], 0
mov dword [eax + 0x14], 0
mov dword [eax + 0xc], 0
mov dword [esi], eax
mov dword [eax], edi
mov eax, dword [esi]
mov dword [eax + 4], 0x100d0600
mov ecx, dword [esi]
test ecx, ecx
je 0x100d041f
cmp dword [ecx + 4], 0
je 0x100d041f
lea eax, [ecx + 0xc]
push eax
push 4
push ecx
push 0x10030370
push 0
push 0
call fcn.100a3e8c
mov ecx, dword [esi]
add esp, 0x18
mov dword [ecx + 0x10], eax
mov eax, dword [esi]
cmp dword [eax + 0x10], 0
jne 0x100d03fe
mov dword [eax + 0x10], 0xffffffff
mov ecx, dword [esi]
call fcn.10030400
jmp 0x100d041f
mov byte [eax + 8], 1
mov eax, dword [esi]
push dword [eax + 0x10]
call dword [sym.imp.KERNEL32.dll_ResumeThread]
cmp eax, 0xffffffff
jne 0x100d041f
mov ecx, dword [esi]
call fcn.10030400
mov eax, dword [esi]
mov byte [eax + 8], 0
lea ecx, [ebp - 0x198]
call fcn.1001a000
lea ecx, [ebp - 0x360]
call fcn.1001a000
lea ecx, [ebp - 0x730]
call fcn.100de520
lea ecx, [ebp - 0x3fc]
call fcn.100e0960
lea ecx, [ebp - 0x330]
call fcn.1001a000
lea ecx, [ebp - 0x5c]
call fcn.1001a000
lea ecx, [ebp - 0x348]
call fcn.1001a000
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x28]
mov esi, dword [ebp - 0x28]
push dword [esi + 4]
call fcn.1001ecd0
mov eax, dword [ebp - 0x28]
push 0x40
mov dword [eax + 4], esi
mov eax, dword [ebp - 0x28]
mov dword [eax], esi
mov eax, dword [ebp - 0x28]
mov dword [eax + 8], esi
push dword [ebp - 0x28]
mov dword [ebp - 0x24], 0
call fcn.1001a210
add esp, 8
lea ecx, [ebp - 0x180]
call fcn.100eca70
lea ecx, [ebp - 0x1b0]
call fcn.1001a000
lea ecx, [ebp - 0x24c]
call fcn.1001a000
lea ecx, [ebp - 0x1c8]
call fcn.1001a000
lea ecx, [ebp - 0x264]
call fcn.1001a000
lea ecx, [ebp - 0x2b0]
call fcn.1001a000
lea ecx, [ebp - 0x27c]
call fcn.1001a000
lea ecx, [ebp - 0x318]
call fcn.100ff7c0
lea ecx, [ebp - 0x378]
call fcn.1001a000
lea ecx, [ebp - 0x3d8]
call fcn.1001a000
lea ecx, [ebp - 0x294]
call fcn.1001a000
mov ecx, dword [ebp - 0xc]
pop edi
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
call fcn.10080da8
call fcn.10080da8
call fcn.10080da8
call fcn.10080da8
call fcn.10080da8
call fcn.10080da8
call fcn.10080da8
call fcn.10080da8
call fcn.10080da8
call fcn.10080da8
call fcn.10080da8
int3