Function at 0x10009610
Capabilities:
Download url
Get common file path
Receive data
Terminate process

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x100685b1
mov eax, dword fs:[0]
push eax
sub esp, 0x268
mov eax, dword [0x1009a1a0]
xor eax, esp
mov dword [esp + 0x260], eax
push ebx
push esi
push edi
mov eax, dword [0x1009a1a0]
xor eax, esp
push eax
lea eax, [esp + 0x278]
mov dword fs:[0], eax
mov ebx, dword [ebp + 0x10]
push 1
push 0x1c
lea eax, [esp + 0x6c]
push eax
push 0
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
push 0x104
call fcn.1004afdf
add esp, 4
mov esi, eax
push 0x104
lea eax, [esp + 0x68]
push eax
push 0x104
lea eax, [esp + 0x24]
push esi
push eax
mov dword [esp + 0x28], esi
call fcn.1004d947
add esp, 0x14
lea edi, [esi - 1]
mov al, byte [edi + 1]
lea edi, [edi + 1]
test al, al
jne 0x10009697
mov ax, word [0x10077fb0]
mov word [edi], ax
lea ecx, [esi - 1]
lea ecx, [ecx]
mov al, byte [ecx + 1]
lea ecx, [ecx + 1]
test al, al
jne 0x100096b0
mov eax, dword [str.lang_info.xml]
mov dword [ecx], eax
mov eax, dword [0x10077ff4]
mov dword [ecx + 4], eax
mov eax, dword [0x10077ff8]
mov dword [ecx + 8], eax
mov ax, word [0x10077ffc]
mov edi, esi
mov word [ecx + 0xc], ax
lea ecx, [edi + 1]
mov al, byte [edi]
inc edi
test al, al
jne 0x100096e0
sub edi, ecx
inc edi
xor ecx, ecx
mov eax, edi
mov edx, 2
mul edx
seto cl
neg ecx
or ecx, eax
push ecx
call fcn.1004afdf
add esp, 4
mov esi, eax
push edi
mov edi, dword [esp + 0x18]
push edi
push esi
call fcn.1004c272
add esp, 0xc
push str.https:__imobie_resource.com_product_config_ati_config.xml
call dword [sym.imp.WININET.dll_DeleteUrlCacheEntryW]
push 0
push 0
push esi
push str.https:__imobie_resource.com_product_config_ati_config.xml
push 0
call dword [sym.imp.urlmon.dll_URLDownloadToFileW]
push edi
lea ecx, [esp + 0x20]
call fcn.1000e4e0
mov dword [esp + 0x280], 0
mov eax, dword [esp + 0x3c]
push ecx
add eax, 8
push eax
lea ecx, [esp + 0x24]
call fcn.1000e5e0
test al, al
jne 0x10009793
mov esi, dword [esp + 0x50]
mov edx, str.could_not_load_the_test_file.Error:
mov ecx, 0x1009bfa8
call fcn.10009080
lea edx, [esi + 8]
mov ecx, eax
call fcn.10009080
mov esi, eax
push ecx
mov ecx, esi
call fcn.10009a60
mov ecx, esi
call fcn.10006fe0
push 1
call fcn.1004dde7
mov esi, dword [esp + 0x34]
test esi, esi
je 0x100097b2
jmp 0x100097a0
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x18]
test eax, eax
jne 0x100097f4
mov esi, dword [esi + 0x28]
test esi, esi
jne 0x100097a0
xor edi, edi
mov esi, dword [edi + 0x18]
test esi, esi
je 0x100097d2
jmp 0x100097c0
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x18]
test eax, eax
jne 0x100097ff
mov esi, dword [esi + 0x28]
test esi, esi
jne 0x100097c0
xor eax, eax
mov esi, dword [eax + 0x18]
test esi, esi
je 0x1000980f
jmp 0x100097e0
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x18]
test eax, eax
jne 0x10009808
mov esi, dword [esi + 0x28]
test esi, esi
jne 0x100097e0
jmp 0x1000980f
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x18]
mov edi, eax
jmp 0x100097b4
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x18]
jmp 0x100097d4
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x18]
mov esi, dword [edi + 0x18]
test esi, esi
je 0x10009828
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x18]
test eax, eax
jne 0x10009880
mov esi, dword [esi + 0x28]
test esi, esi
jne 0x10009816
xor eax, eax
mov esi, dword [eax + 0x18]
test esi, esi
je 0x10009843
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x18]
test eax, eax
jne 0x10009889
mov esi, dword [esi + 0x28]
test esi, esi
jne 0x10009831
xor esi, esi
test esi, esi
je 0x100099bf
mov edi, dword [ebp + 8]
mov eax, dword [esi + 0x18]
mov ecx, edi
mov eax, dword [eax + 0x20]
add eax, 8
jmp 0x10009860
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x10009894
test dl, dl
je 0x1000987c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x10009894
add eax, 2
add ecx, 2
test dl, dl
jne 0x10009860
xor eax, eax
jmp 0x10009899
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x18]
jmp 0x1000982a
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x18]
mov esi, eax
jmp 0x10009845
sbb eax, eax
or eax, 1
mov esi, dword [esi + 0x28]
test eax, eax
je 0x100098cc
test esi, esi
je 0x100098b6
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x18]
test eax, eax
jne 0x100098c1
mov esi, dword [esi + 0x28]
test esi, esi
jne 0x100098a4
xor esi, esi
test esi, esi
jne 0x10009850
jmp 0x100099bf
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x18]
mov esi, eax
jmp 0x100098b8
test esi, esi
je 0x100098e2
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x18]
test eax, eax
jne 0x10009940
mov esi, dword [esi + 0x28]
test esi, esi
jne 0x100098d0
xor eax, eax
mov esi, dword [eax + 0x18]
test esi, esi
je 0x10009902
jmp 0x100098f0
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x18]
test eax, eax
jne 0x10009949
mov esi, dword [esi + 0x28]
test esi, esi
jne 0x100098f0
xor esi, esi
test esi, esi
je 0x100099bf
mov edi, dword [ebp + 0xc]
nop
mov eax, dword [esi + 0x18]
mov ecx, edi
mov eax, dword [eax + 0x20]
add eax, 8
jmp 0x10009920
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x10009954
test dl, dl
je 0x1000993c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x10009954
add eax, 2
add ecx, 2
test dl, dl
jne 0x10009920
xor eax, eax
jmp 0x10009959
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x18]
jmp 0x100098e4
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x18]
mov esi, eax
jmp 0x10009904
sbb eax, eax
or eax, 1
mov esi, dword [esi + 0x28]
test eax, eax
je 0x10009989
test esi, esi
je 0x10009976
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x18]
test eax, eax
jne 0x1000997e
mov esi, dword [esi + 0x28]
test esi, esi
jne 0x10009964
xor esi, esi
test esi, esi
jne 0x10009910
jmp 0x100099bf
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x18]
mov esi, eax
jmp 0x10009978
test esi, esi
je 0x100099a6
lea ecx, [ecx]
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x18]
test eax, eax
jne 0x10009a4b
mov esi, dword [esi + 0x28]
test esi, esi
jne 0x10009990
xor eax, eax
mov eax, dword [eax + 0x18]
mov ecx, dword [eax + 0x20]
add ecx, 8
mov al, byte [ecx]
mov byte [ebx], al
lea ecx, [ecx + 1]
lea ebx, [ebx + 1]
test al, al
jne 0x100099b1
push dword [esp + 0x14]
call fcn.1004cbc3
mov eax, dword [esp + 0x54]
add esp, 4
mov dword [esp + 0x1c], vtable.TiXmlDocument.0
cmp eax, 0x1009d14c
je 0x100099e7
push eax
call fcn.1004cef5
add esp, 4
mov dword [esp + 0x1c], vtable.TiXmlNode.0
mov dword [esp + 0x280], 2
mov esi, dword [esp + 0x34]
test esi, esi
je 0x10009a11
mov ecx, esi
mov esi, dword [esi + 0x28]
mov eax, dword [ecx]
push 1
call dword [eax]
test esi, esi
jne 0x10009a02
mov eax, dword [esp + 0x3c]
cmp eax, 0x1009d14c
je 0x10009a25
push eax
call fcn.1004cef5
add esp, 4
mov ecx, dword [esp + 0x278]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x260]
xor ecx, esp
call fcn.1004b3bc
mov esp, ebp
pop ebp
ret 0xc
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 0x18]
jmp 0x100099a8