Function at 0x1000a690
Capabilities:
Hide graphical window

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10014700
mov eax, dword fs:[0]
push eax
push ecx
mov eax, 0x2b2c
call fcn.100133e0
mov eax, dword [0x1001f5e0]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov ebx, ecx
mov dword [ebp - 0x2aa8], ebx
mov eax, dword [ebp + 0xc]
mov ecx, dword [ebp + 8]
mov dword [ebp - 0x2aac], eax
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x2ab8], ebx
mov dword [ebp - 0x2a90], ecx
mov dword [ebp - 0x2ab4], eax
mov dword [ebp - 0x2ad4], eax
call fcn.10010758
mov edi, eax
lea eax, [ebp - 0x2ad8]
push eax
push 0x100
lea eax, [ebp - 0x1dc]
mov esi, dword [edi]
push eax
mov ecx, dword [esi]
call dword [0x100163b0]
mov ecx, edi
call dword [esi]
mov ecx, dword [ebx + 0x14]
lea eax, [ebp - 0x1dc]
push 0xffffffffffffffff
push 0xffffffffffffffff
push eax
push 5
call fcn.10010c1e
push dword [ebp - 0x2ab4]
mov edi, dword [ebp - 0x2a90]
mov ecx, ebx
push dword [ebp - 0x2aac]
push edi
call fcn.1000f505
test eax, eax
jne 0x1000ad2a
mov esi, dword [edi]
lea eax, [ebp - 0x2aa0]
push eax
xor ebx, ebx
push ebx
mov ecx, dword [esi + 8]
push ebx
call dword [0x100163b0]
mov ecx, edi
call dword [esi + 8]
mov eax, dword [ebp - 0x2aa0]
lea ecx, [ebp - 0x2ad0]
add eax, 2
push eax
call fcn.1000f505
mov esi, dword [edi]
lea eax, [ebp - 0x2aa0]
mov edi, dword [ebp - 0x2ac8]
push eax
push dword [ebp - 0x2acc]
mov ecx, dword [esi + 8]
push edi
mov dword [ebp - 4], ebx
call dword [0x100163b0]
mov ecx, dword [ebp - 0x2a90]
call dword [esi + 8]
lea eax, [ebp - 0x2aa0]
push eax
push ebx
push ebx
push edi
call fcn.10010758
mov ecx, eax
call fcn.1000f505
mov eax, dword [ebp - 0x2aa0]
test eax, eax
jne 0x1000a7e2
lea ecx, [ebp - 0x2ad0]
call fcn.10008b77
push 0xc
pop eax
jmp 0x1000ad2a
add eax, 2
lea ecx, [ebp - 0x2ac4]
push eax
call fcn.1000f505
lea eax, [ebp - 0x2aa0]
mov byte [ebp - 4], 1
push eax
push dword [ebp - 0x2ac0]
push dword [ebp - 0x2abc]
push edi
call fcn.10010758
mov ecx, eax
call fcn.1000f505
cmp dword [ebp - 0x2aa0], 0
ja 0x1000a826
push 0xc
pop esi
jmp 0x1000a8e3
push edi
call fcn.1000f505
pop ecx
mov byte [ebp - 0x2a99], al
mov byte [ebp - 4], 2
call fcn.10010758
mov edi, dword [ebp - 0x2aa8]
mov dword [ebp - 0x2a98], eax
mov esi, dword [eax]
lea eax, [ebp - 0x2adc]
push eax
push 0x50
lea ecx, [edi + 0x54]
push ecx
mov ecx, dword [esi]
call dword [0x100163b0]
mov ecx, dword [ebp - 0x2a98]
call dword [esi]
push 0x1388
lea eax, [ebp - 0x2a7c]
push eax
push 0xffffffffffffffff
push dword [ebp - 0x2abc]
push ebx
push 0xfde9
call dword [sym.imp.kernel32.dll_MultiByteToWideChar]
push dword [ebp - 0x2ac8]
mov dword [ebp - 0x2aa4], ebx
mov byte [ebp - 0x2a91], bl
mov byte [ebp - 0x2ab0], bl
call fcn.1000f505
pop ecx
test al, al
lea eax, [ebp - 0x2aa4]
push eax
lea eax, [ebp - 0x2ab0]
sete byte [ebp - 0x2a98]
push eax
lea eax, [ebp - 0x2a91]
push eax
push dword [ebp - 0x2abc]
push dword [ebp - 0x2a98]
push dword [ebp - 0x2aac]
call fcn.1000f505
mov esi, eax
add esp, 0x18
test esi, esi
je 0x1000a900
lea ecx, [ebp - 0x2ac4]
call fcn.10008b77
lea ecx, [ebp - 0x2ad0]
call fcn.10008b77
mov eax, esi
jmp 0x1000ad2a
cmp byte [ebp - 0x2a99], 0
je 0x1000a9f5
lea eax, [ebp - 0x2a7c]
mov ecx, edi
push eax
call fcn.1000f505
test al, al
je 0x1000ad46
mov edi, dword [ebp - 0x2a90]
lea eax, [ebp - 0x2a98]
push eax
push 0xc8
lea eax, [ebp - 0xdc]
mov esi, dword [edi]
push eax
mov ecx, dword [esi]
call dword [0x100163b0]
mov ecx, edi
call dword [esi]
push 0xc8
lea eax, [ebp - 0x36c]
push eax
push 0xffffffffffffffff
lea eax, [ebp - 0xdc]
push eax
push ebx
push 0xfde9
call dword [sym.imp.kernel32.dll_MultiByteToWideChar]
push dword [ebp - 0x2ab0]
lea eax, [ebp - 0x36c]
push edi
push dword [ebp - 0x2aa4]
push eax
lea eax, [ebp - 0x2a7c]
push 0x1388
push eax
call fcn.1000eb81
mov esi, dword [ebp - 0x2aa8]
add esp, 0x18
cmp dword [ebp - 0x2aa4], 0
mov dword [esi + 0xa8], eax
je 0x1000a9c0
push dword [ebp - 0x2aa4]
call fcn.100132ed
mov eax, dword [esi + 0xa8]
pop ecx
mov dword [ebp - 0x2aa4], ebx
test eax, eax
jne 0x1000a9e1
push 6
lea ecx, [ebp - 0x2aec]
call fcn.1000f505
push 0x1001adac
lea eax, [ebp - 0x2aec]
jmp 0x1000ad5e
mov eax, dword [esi + 0xb0]
mov edx, dword [esi + 0xac]
mov dword [ebp - 0x2a90], eax
jmp 0x1000aa36
cmp byte [ebp - 0x2a91], 1
je 0x1000aa1b
push 6
lea ecx, [ebp - 0x2af4]
call fcn.1000f505
push 0x1001adac
lea eax, [ebp - 0x2af4]
jmp 0x1000ad5e
mov esi, edi
mov edx, 0x320
mov eax, edx
mov dword [ebp - 0x2a90], edx
mov dword [esi + 0xac], edx
mov dword [esi + 0xb0], edx
mov dword [ebp - 0x2a80], eax
lea edi, [ebp - 0x2b3c]
push 0xa
xor eax, eax
mov dword [ebp - 0x2a8c], ebx
pop ecx
mov dword [ebp - 0x2a88], ebx
mov dword [ebp - 0x2a84], edx
rep stosd dword es:[edi], eax
cmp word [0x1002067c], ax
jne 0x1000aac6
mov eax, dword [0x10020680]
xorps xmm0, xmm0
mov dword [ebp - 0x2b2c], eax
lea eax, [ebp - 0x2b3c]
push eax
mov dword [ebp - 0x2b3c], 3
mov dword [ebp - 0x2b38], 0x10008ec0
mov dword [ebp - 0x2b34], ebx
mov dword [ebp - 0x2b30], ebx
movups xmmword [ebp - 0x2b28], xmm0
mov dword [ebp - 0x2b18], str.Adobe_Acrobat_FlashMPP
call fcn.1000b3fd
mov edx, dword [esi + 0xac]
movzx eax, ax
mov word [0x1002067c], ax
mov eax, dword [esi + 0xb0]
jmp 0x1000aacc
mov eax, dword [ebp - 0x2a90]
push ebx
push dword [0x10020680]
push ebx
push ebx
push eax
push edx
push ebx
push ebx
push SysReAllocStringLen
push ebx
push str.Adobe_Acrobat_FlashMPP
push ebx
call fcn.10008619
push ebx
push eax
mov dword [esi + 0xa4], eax
call dword [sym.imp.USER32.dll_ShowWindow]
push ebx
push ecx
mov eax, esp
push ebx
push ebx
push str.Flash_Player
push ecx
mov dword [eax], ebx
lea ecx, [ebp - 0x2a8c]
mov eax, esp
mov dword [eax], ecx
lea ecx, [esi + 0x18]
push dword [esi + 0xa4]
call fcn.1000f505
push dword [esi + 0x40]
lea ecx, [ebp - 0x2a90]
call fcn.1000f505
lea ecx, [ebp - 0x2a90]
call fcn.1000256f
cmp dword [ebp - 0x2a90], 0
jne 0x1000ab5d
push 0xa
lea ecx, [ebp - 0x2afc]
call fcn.1000f505
push 0x1001adac
lea eax, [ebp - 0x2afc]
jmp 0x1000ad5e
push dword [esi + 0x40]
lea ecx, [ebp - 0x2a90]
call fcn.1000f505
lea eax, [ebp - 0x2a7c]
mov byte [ebp - 4], 3
push eax
lea ecx, [ebp - 0x2a98]
call fcn.1000f505
mov edx, eax
mov eax, dword [ebp - 0x2a90]
push dword [edx]
mov byte [ebp - 4], 4
push eax
mov ecx, dword [eax]
mov esi, dword [ecx + 0x58]
mov ecx, esi
call dword [0x100163b0]
call esi
push 0xf
pop esi
push dword [ebp - 0x2a98]
xor ecx, ecx
mov byte [ebp - 4], 3
test eax, eax
cmovns esi, ecx
call dword [sym.imp.OLEAUT32.dll_SysStringLen]
lea ecx, [ebp - 0x2a90]
mov byte [ebp - 4], 2
call fcn.1000256f
test esi, esi
je 0x1000abe8
push esi
lea ecx, [ebp - 0x2b04]
call fcn.1000f505
push 0x1001adac
lea eax, [ebp - 0x2b04]
jmp 0x1000ad5e
mov edi, dword [ebp - 0x2aa8]
lea ecx, [ebp - 0x2a90]
push dword [edi + 0x40]
call fcn.1000f505
mov eax, dword [ebp - 0x2a90]
push ebx
push eax
mov byte [ebp - 4], 5
mov ecx, dword [eax]
mov esi, dword [ecx + 0x28]
mov ecx, esi
call dword [0x100163b0]
call esi
xor ecx, ecx
mov byte [ebp - 4], 2
push 0xf
test eax, eax
pop esi
cmovns esi, ecx
lea ecx, [ebp - 0x2a90]
call fcn.1000256f
test esi, esi
je 0x1000ac50
push esi
lea ecx, [ebp - 0x2b0c]
call fcn.1000f505
push 0x1001adac
lea eax, [ebp - 0x2b0c]
jmp 0x1000ad5e
push dword [edi + 0x40]
lea ecx, [ebp - 0x2a90]
call fcn.1000f505
mov eax, dword [ebp - 0x2a90]
push 2
push eax
mov byte [ebp - 4], 6
mov ecx, dword [eax]
mov esi, dword [ecx + 0x38]
mov ecx, esi
call dword [0x100163b0]
call esi
xor ecx, ecx
mov byte [ebp - 4], 2
push 0xf
test eax, eax
pop esi
cmovns esi, ecx
lea ecx, [ebp - 0x2a90]
call fcn.1000256f
test esi, esi
je 0x1000acb3
push esi
lea ecx, [ebp - 0x2b14]
call fcn.1000f505
push 0x1001adac
lea eax, [ebp - 0x2b14]
jmp 0x1000ad5e
mov esi, dword [ebp - 0x2ab4]
xor eax, eax
inc eax
jmp 0x1000aceb
mov ecx, dword [edi + 0x14]
push 0xffffffffffffffff
push 0xffffffffffffffff
push ebx
push eax
mov dword [ebp - 4], eax
call fcn.10010c1e
push ebx
push ebx
push ebx
push dword [ebp - 0x2aac]
mov ecx, esi
call dword [0x100163b0]
call esi
add esp, 0x10
lea ecx, [ebp - 0x2ac4]
call fcn.10008b77
lea ecx, [ebp - 0x2ad0]
call fcn.10008b77
xor eax, eax
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.10013070
leave
ret 0xc
push 0xa
lea ecx, [ebp - 0x2ae4]
call fcn.1000f505
push 0x1001adac
lea eax, [ebp - 0x2ae4]
push eax
call sub.VCRUNTIME140.dll__CxxThrowException
int3