Function at 0x100a85b3
Capabilities:
Query or enumerate registry key

Disassembly:
push ebp
mov ebp, esp
mov eax, 0x362c
call fcn.101f99e0
mov eax, dword [0x102519c8]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
push ebx
mov ebx, dword [ebp + 0x10]
push esi
push edi
mov dword [ebp - 0x359c], ecx
mov ecx, dword [ebp + 0xc]
push ebx
push ecx
mov dword [ebp - 0x3610], ecx
lea ecx, [ebp - 0x35d0]
push eax
mov dword [ebp - 0x35d8], eax
mov dword [ebp - 0x35d0], 0
mov dword [ebp - 0x35cc], 0
mov dword [ebp - 0x35c8], 0xffffffff
call fcn.10058810
test eax, eax
jne 0x100a94ea
push 0x410
push eax
lea eax, [ebp - 0x824]
push eax
call sub.msvcrt.dll_memset
add esp, 0xc
xor ecx, ecx
mov eax, dword [ebp - 0x35c8]
mov edx, dword [ebp - 0x35d0]
mov dword [ebp - 0x35b4], ecx
mov dword [ebp - 0x35ac], 0x208
cmp eax, 0xffffffff
je 0x100a7d2c
cmp ecx, eax
jb 0x100a7d2c
test edx, edx
je 0x100a7d2c
mov edi, ecx
sub edi, eax
call fcn.10003180
mov esi, dword [eax + 0x154]
test esi, esi
je 0x100a7cd3
push esi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
push 0x3d
call fcn.10003680
add esp, 4
test eax, eax
je 0x100a7d0b
lea ecx, [ebp - 0x35e0]
push ecx
push 0
push 0
push 0
lea ecx, [ebp - 0x35ac]
push ecx
lea ecx, [ebp - 0x824]
push ecx
mov ecx, dword [ebp - 0x35d0]
push edi
push ecx
call eax
jmp 0x100a7e77
lea eax, [ebp - 0x35e0]
push eax
push 0
push 0
push 0
lea eax, [ebp - 0x35ac]
push eax
lea eax, [ebp - 0x824]
push eax
push edi
jmp 0x100a7e6a
cmp dword [ebp - 0x35cc], 0
mov edi, 0x103
mov dword [ebp - 0x35c8], 0xffffffff
je 0x100a7de9
call fcn.10003180
mov esi, dword [eax + 0x154]
test esi, esi
je 0x100a7d5e
push esi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
push 0x3d
call fcn.10003680
add esp, 4
test eax, eax
je 0x100a7d97
lea ecx, [ebp - 0x35e0]
push ecx
push 0
push 0
push 0
lea ecx, [ebp - 0x35ac]
push ecx
lea ecx, [ebp - 0x824]
push ecx
push dword [ebp - 0x35b4]
push dword [ebp - 0x35cc]
call eax
jmp 0x100a7dc4
lea eax, [ebp - 0x35e0]
push eax
push 0
push 0
push 0
lea eax, [ebp - 0x35ac]
push eax
lea eax, [ebp - 0x824]
push eax
push dword [ebp - 0x35b4]
push dword [ebp - 0x35cc]
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExW]
mov edi, eax
test esi, esi
je 0x100a7dd1
push esi
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
cmp edi, 0x103
jne 0x100a7e84
mov ecx, dword [ebp - 0x35b4]
mov edx, dword [ebp - 0x35d0]
test edx, edx
je 0x100a7e84
mov dword [ebp - 0x35c8], ecx
mov dword [ebp - 0x35ac], 0x208
call fcn.10003180
mov esi, dword [eax + 0x154]
test esi, esi
je 0x100a7e17
push esi
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
push 0x3d
call fcn.10003680
add esp, 4
test eax, eax
je 0x100a7e4d
lea ecx, [ebp - 0x35e0]
push ecx
push 0
push 0
push 0
lea ecx, [ebp - 0x35ac]
push ecx
lea ecx, [ebp - 0x824]
push ecx
mov ecx, dword [ebp - 0x35d0]
push 0
push ecx
call eax
jmp 0x100a7e77
lea eax, [ebp - 0x35e0]
push eax
push 0
push 0
push 0
lea eax, [ebp - 0x35ac]
push eax
lea eax, [ebp - 0x824]
push eax
push 0
mov ecx, dword [ebp - 0x35d0]
push ecx
call dword [sym.imp.ADVAPI32.dll_RegEnumKeyExW]
mov edi, eax
test esi, esi
je 0x100a7e84
push esi
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
test edi, edi
jne 0x100a94ea
mov esi, dword [ebp - 0x359c]
lea ecx, [ebp - 0x824]
push ecx
lea eax, [esi + 0x2f4]
mov ecx, eax
mov dword [ebp - 0x361c], eax
call fcn.100d2aa0
test eax, eax
jne 0x100a94de
push 0x410
push eax
lea eax, [ebp - 0xc34]
push eax
call sub.msvcrt.dll_memset
push 0x410
lea eax, [ebp - 0x414]
push edi
push eax
call sub.msvcrt.dll_memset
push 0x410
lea eax, [ebp - 0x1454]
push edi
push eax
call sub.msvcrt.dll_memset
push 0x410
lea eax, [ebp - 0x1044]
push edi
push eax
call sub.msvcrt.dll_memset
push 0x410
lea eax, [ebp - 0x2084]
push edi
push eax
call sub.msvcrt.dll_memset
push 0x410
lea eax, [ebp - 0x1a6c]
push edi
push eax
call sub.msvcrt.dll_memset
add esp, 0x48
lea eax, [ebp - 0x28a4]
push 0x410
push edi
push eax
call sub.msvcrt.dll_memset
lea eax, [ebp - 0x824]
push eax
push dword [ebp - 0x3610]
lea eax, [ebp - 0xc34]
push 0x102040c0
push 0x40f
push eax
call fcn.100269c0
add esp, 0x20
mov dword [ebp - 0x3628], edi
lea eax, [ebp - 0x3628]
mov dword [ebp - 0x3624], edi
mov dword [ebp - 0x3620], edi
mov ecx, esi
mov edi, dword [ebp - 0x35d8]
push eax
lea eax, [ebp - 0xc34]
push eax
push edi
call fcn.100a7650
test eax, eax
jne 0x100a94d3
push ebx
lea eax, [ebp - 0x3594]
mov dword [ebp - 0x358c], 1
push eax
lea eax, [ebp - 0x414]
mov dword [ebp - 0x3594], 0x410
push eax
lea eax, [ebp - 0x358c]
push eax
push str.Exec
lea eax, [ebp - 0xc34]
push eax
push edi
call fcn.100585c0
mov eax, dword [ebp - 0x358c]
cmp eax, 1
je 0x100a7feb
cmp eax, 2
je 0x100a7feb
cmp eax, 7
je 0x100a7feb
xor eax, eax
mov word [ebp - 0x414], ax
push 0x10202940
lea eax, [ebp - 0x414]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x100a805b
push ebx
lea eax, [ebp - 0x3594]
mov dword [ebp - 0x358c], 1
push eax
lea eax, [ebp - 0x414]
mov dword [ebp - 0x3594], 0x410
push eax
lea eax, [ebp - 0x358c]
push eax
push str.Script
lea eax, [ebp - 0xc34]
push eax
push edi
call fcn.100585c0
mov eax, dword [ebp - 0x358c]
cmp eax, 1
je 0x100a805b
cmp eax, 2
je 0x100a805b
cmp eax, 7
je 0x100a805b
xor eax, eax
mov word [ebp - 0x414], ax
push 0x10202940
lea eax, [ebp - 0x414]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x100a811e
push 0x410
push eax
lea eax, [ebp - 0x1a6c]
mov dword [ebp - 0x358c], 1
push eax
mov dword [ebp - 0x3594], 0x410
call sub.msvcrt.dll_memset
add esp, 0xc
lea eax, [ebp - 0x3594]
push ebx
push eax
lea eax, [ebp - 0x1a6c]
push eax
lea eax, [ebp - 0x358c]
push eax
push str.BandCLSID
lea eax, [ebp - 0xc34]
push eax
push edi
call fcn.100585c0
test eax, eax
jne 0x100a811e
mov eax, dword [ebp - 0x358c]
cmp eax, 1
je 0x100a80df
cmp eax, 2
je 0x100a80df
cmp eax, 7
jne 0x100a811e
lea eax, [ebp - 0x1a6c]
push eax
lea ecx, [ebp - 0x3588]
call fcn.1009cdd0
cmp dword [ebp - 0x2954], 0
je 0x100a8113
push 0x208
lea eax, [ebp - 0x3584]
push eax
lea eax, [ebp - 0x414]
push eax
call dword [sym.imp.SHLWAPI.dll_StrCpyNW]
lea ecx, [ebp - 0x3588]
call fcn.1009d010
push 0x10202940
lea eax, [ebp - 0x414]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
jne 0x100a81e1
push 0x410
push eax
lea eax, [ebp - 0x1a6c]
mov dword [ebp - 0x358c], 1
push eax
mov dword [ebp - 0x3594], 0x410
call sub.msvcrt.dll_memset
add esp, 0xc
lea eax, [ebp - 0x3594]
push ebx
push eax
lea eax, [ebp - 0x1a6c]
push eax
lea eax, [ebp - 0x358c]
push eax
push str.ClsidExtension
lea eax, [ebp - 0xc34]
push eax
push edi
call fcn.100585c0
test eax, eax
jne 0x100a81e1
mov eax, dword [ebp - 0x358c]
cmp eax, 1
je 0x100a81a2
cmp eax, 2
je 0x100a81a2
cmp eax, 7
jne 0x100a81e1
lea eax, [ebp - 0x1a6c]
push eax
lea ecx, [ebp - 0x3588]
call fcn.1009cdd0
cmp dword [ebp - 0x2954], 0
je 0x100a81d6
push 0x208
lea eax, [ebp - 0x3584]
push eax
lea eax, [ebp - 0x414]
push eax
call dword [sym.imp.SHLWAPI.dll_StrCpyNW]
lea ecx, [ebp - 0x3588]
call fcn.1009d010
push ebx
lea eax, [ebp - 0x3594]
mov dword [ebp - 0x358c], 1
push eax
lea eax, [ebp - 0x28a4]
mov dword [ebp - 0x3594], 0x410
push eax
lea eax, [ebp - 0x358c]
push eax
push str.Icon
lea eax, [ebp - 0xc34]
push eax
push edi
call fcn.100585c0
push 0x410
lea eax, [ebp - 0x1454]
push 0
push eax
call sub.msvcrt.dll_memset
push 0x410
lea eax, [ebp - 0x1044]
push 0
push eax
call sub.msvcrt.dll_memset
add esp, 0x18
mov dword [ebp - 0x358c], 1
lea eax, [ebp - 0x3594]
mov dword [ebp - 0x3594], 0x410
push ebx
push eax
lea eax, [ebp - 0x1454]
push eax
lea eax, [ebp - 0x358c]
push eax
push str.ButtonText
lea eax, [ebp - 0xc34]
push eax
push edi
call fcn.100585c0
mov eax, dword [ebp - 0x358c]
cmp eax, 1
je 0x100a82a0
cmp eax, 2
je 0x100a82a0
cmp eax, 7
je 0x100a82a0
xor eax, eax
mov word [ebp - 0x1454], ax
push ebx
lea eax, [ebp - 0x3594]
mov dword [ebp - 0x358c], 1
push eax
lea eax, [ebp - 0x1044]
mov dword [ebp - 0x3594], 0x410
push eax
lea eax, [ebp - 0x358c]
push eax
push str.MenuText
lea eax, [ebp - 0xc34]
push eax
push edi
call fcn.100585c0
mov eax, dword [ebp - 0x358c]
cmp eax, 1
je 0x100a82fa
cmp eax, 2
je 0x100a82fa
cmp eax, 7
je 0x100a82fa
xor eax, eax
mov word [ebp - 0x1044], ax
mov edi, dword [sym.imp.KERNEL32.dll_lstrlenW]
lea eax, [ebp - 0x1044]
push eax
call edi
test eax, eax
jne 0x100a832b
lea eax, [ebp - 0x414]
push eax
call edi
test eax, eax
jne 0x100a832b
lea eax, [ebp - 0x1454]
push eax
call edi
test eax, eax
je 0x100a94d3
mov ebx, dword [sym.imp.KERNEL32.dll_lstrcmpiW]
lea eax, [ebp - 0x1044]
push 0x10202940
push eax
call ebx
test eax, eax
je 0x100a834b
lea eax, [ebp - 0x1044]
jmp 0x100a8363
push 0x10202940
lea eax, [ebp - 0x1454]
push eax
call ebx
test eax, eax
je 0x100a8376
lea eax, [ebp - 0x1454]
push 0x208
push eax
lea eax, [ebp - 0x2084]
push eax
call dword [sym.imp.SHLWAPI.dll_StrCpyNW]
push 0x410
lea eax, [ebp - 0x2494]
mov dword [ebp - 0x35bc], 2
push 0
push eax
call sub.msvcrt.dll_memset
add esp, 0xc
lea eax, [ebp - 0x824]
push 0x208
push eax
lea eax, [ebp - 0x2494]
push eax
call dword [sym.imp.SHLWAPI.dll_StrCpyNW]
push 0
push 0x10202940
push 0x10202940
push 0x10202940
lea eax, [ebp - 0x2494]
push eax
lea ebx, [esi + 0xc0]
push 0x5b
mov ecx, ebx
call fcn.1005ccb0
mov ecx, dword [esi + 0x2d8]
mov edi, eax
sub ecx, 0x10
push ecx
call fcn.10002a60
add eax, 0x10
mov dword [ebp - 0x3598], eax
mov eax, dword [esi + 0x2d4]
sub eax, 0x10
push eax
call fcn.10002a60
add eax, 0x10
add esp, 8
mov dword [ebp - 0x35a8], eax
cmp edi, 3
jg 0x100a85a0
push 0
lea eax, [ebp - 0x414]
mov ecx, ebx
push eax
push 0x10202940
push eax
push 0x10202940
push 0x5b
call fcn.1005ccb0
cmp eax, 3
je 0x100a84db
cmp edi, 3
je 0x100a8443
cmp edi, eax
jge 0x100a8445
mov edi, eax
mov eax, dword [esi + 0x2d8]
sub eax, 0x10
push eax
call fcn.10002a60
add esp, 4
lea ecx, [ebp - 0x3598]
lea esi, [eax + 0x10]
lea eax, [ebp - 0x3590]
mov dword [ebp - 0x3590], esi
push eax
call fcn.10002790
add esi, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x100a848a
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 0x359c]
mov eax, dword [ecx + 0x2d4]
sub eax, 0x10
push eax
call fcn.10002a60
add esp, 4
lea ecx, [ebp - 0x35a8]
lea esi, [eax + 0x10]
lea eax, [ebp - 0x3590]
mov dword [ebp - 0x3590], esi
push eax
call fcn.10002790
add esi, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x100a84d5
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov esi, dword [ebp - 0x359c]
push 0
push 0x10202940
lea eax, [ebp - 0x2084]
mov ecx, ebx
push eax
push 0x10202940
push 0x10202940
push 0x5b
call fcn.1005ccb0
cmp eax, 3
je 0x100a85a0
cmp edi, 3
je 0x100a850e
cmp edi, eax
jge 0x100a8510
mov edi, eax
mov eax, dword [esi + 0x2d8]
sub eax, 0x10
push eax
call fcn.10002a60
add esp, 4
lea ecx, [ebp - 0x3598]
lea esi, [eax + 0x10]
lea eax, [ebp - 0x3590]
mov dword [ebp - 0x3590], esi
push eax
call fcn.10002790
add esi, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x100a8555
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 0x359c]
mov eax, dword [ecx + 0x2d4]
sub eax, 0x10
push eax
call fcn.10002a60
add esp, 4
lea ecx, [ebp - 0x35a8]
lea esi, [eax + 0x10]
lea eax, [ebp - 0x3590]
mov dword [ebp - 0x3590], esi
push eax
call fcn.10002790
add esi, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x100a85a0
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
cmp edi, 6
ja case.0x100a85ac.3
movzx eax, byte [edi + 0x100a9518]
jmp dword [eax*4 + 0x100a950c]
mov dword [ebp - 0x35bc], 1
jmp case.0x100a85ac.3
mov dword [ebp - 0x35bc], 4
call fcn.10002d70
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 0xc]
add eax, 0x10
lea ecx, [ebp - 0x35a0]
mov dword [ebp - 0x35a0], eax
lea eax, [ebp - 0x414]
push eax
call fcn.10023e80
test al, al
jne 0x100a8622
lea ecx, [ebp - 0x414]
lea edx, [ecx + 2]
lea ecx, [ecx]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x100a8600
sub ecx, edx
lea eax, [ebp - 0x414]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x35a0]
call fcn.10003740
mov esi, dword [ebp - 0x35a0]
xor edi, edi
mov ebx, esi
movzx eax, word [esi]
test ax, ax
je 0x100a869e
mov ecx, eax
jmp 0x100a8640
push ecx
push 0x10209334
call sub.msvcrt.dll_wcschr
add esp, 8
test eax, eax
je 0x100a865a
test edi, edi
jne 0x100a865c
mov edi, ebx
jmp 0x100a865c
xor edi, edi
movzx eax, word [ebx + 2]
add ebx, 2
mov ecx, eax
test ax, ax
jne 0x100a8640
test edi, edi
je 0x100a869e
mov eax, dword [esi - 8]
sub edi, esi
sar edi, 1
mov ecx, 1
sub ecx, dword [esi - 4]
sub eax, edi
or eax, ecx
jge 0x100a8695
push edi
lea ecx, [ebp - 0x35a0]
call fcn.10003310
mov esi, dword [ebp - 0x35a0]
xor eax, eax
mov dword [esi - 0xc], edi
mov word [esi + edi*2], ax
movzx eax, word [esi]
mov ebx, esi
test ax, ax
je 0x100a8730
mov ecx, eax
mov edi, edi
push ecx
push 0x10209334
call sub.msvcrt.dll_wcschr
add esp, 8
test eax, eax
je 0x100a86d0
movzx eax, word [ebx + 2]
add ebx, 2
mov ecx, eax
test ax, ax
jne 0x100a86b0
cmp ebx, esi
je 0x100a8730
mov eax, dword [esi - 8]
sub ebx, esi
mov edx, dword [esi - 0xc]
mov ecx, 1
sub ecx, dword [esi - 4]
sub eax, edx
sar ebx, 1
or eax, ecx
jge 0x100a86fe
push edx
lea ecx, [ebp - 0x35a0]
call fcn.10003310
mov esi, dword [ebp - 0x35a0]
mov ecx, dword [esi - 0xc]
lea edx, [esi + ebx*2]
mov edi, ecx
sub edi, ebx
lea eax, [edi*2 + 2]
push eax
push edx
lea eax, [ecx*2 + 2]
push eax
push esi
call fcn.10007350
add esp, 0x10
mov dword [esi - 0xc], edi
xor eax, eax
mov word [esi + edi*2], ax
jmp 0x100a8730
mov eax, dword [esi - 0xc]
mov edi, esi
xor ebx, ebx
mov dword [ebp - 0x3590], ebx
lea eax, [edi + eax*2]
mov dword [ebp - 0x35a4], eax
cmp edi, eax
jae 0x100a8902
mov esi, eax
push 0x10205498
push edi
call sub.msvcrt.dll_wcsstr
add esp, 8
test eax, eax
je 0x100a877e
lea edi, [eax + 4]
inc ebx
push 0x10205498
push edi
call sub.msvcrt.dll_wcsstr
add esp, 8
test eax, eax
jne 0x100a8762
mov dword [ebp - 0x3590], ebx
test edi, edi
je 0x100a8798
mov ecx, edi
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x100a8787
sub ecx, edx
sar ecx, 1
jmp 0x100a879a
xor ecx, ecx
lea edi, [edi + ecx*2]
add edi, 2
cmp edi, esi
jb 0x100a8750
mov esi, dword [ebp - 0x35a0]
test ebx, ebx
jle 0x100a88fc
mov edi, dword [esi - 0xc]
mov eax, edi
sub eax, ebx
mov dword [ebp - 0x35a4], edi
mov dword [ebp - 0x35b0], eax
mov edx, eax
cmp eax, edi
jg 0x100a87cd
mov edx, edi
mov eax, dword [esi - 8]
mov ecx, 1
sub ecx, dword [esi - 4]
sub eax, edx
or eax, ecx
jge 0x100a87f0
push edx
lea ecx, [ebp - 0x35a0]
call fcn.10003310
mov esi, dword [ebp - 0x35a0]
mov ebx, esi
lea eax, [ebx + edi*2]
mov dword [ebp - 0x3608], eax
cmp ebx, eax
jae 0x100a88e5
push 0x10205498
push ebx
call sub.msvcrt.dll_wcsstr
mov edi, eax
add esp, 8
test edi, edi
je 0x100a88b3
jmp 0x100a8820
mov ebx, dword [ebp - 0x35a4]
lea ecx, [edi + 4]
mov eax, edi
sub eax, esi
sar eax, 1
sub ebx, eax
lea eax, [edi + 2]
sub ebx, 2
mov dword [ebp - 0x360c], eax
lea edx, [ebx + ebx]
test edx, edx
je 0x100a8869
test eax, eax
jne 0x100a885a
call sub.msvcrt.dll__errno
mov dword [eax], 0x16
call fcn.101e6c20
jmp 0x100a8869
test ecx, ecx
je 0x100a8848
push edx
push ecx
push eax
call sub.msvcrt.dll_memmove
add esp, 0xc
test edi, edi
jne 0x100a887f
call sub.msvcrt.dll__errno
mov dword [eax], 0x16
call fcn.101e6c20
jmp 0x100a8888
mov ax, word [0x10202944]
mov word [edi], ax
dec dword [ebp - 0x35a4]
xor eax, eax
mov word [edi + ebx*2 + 2], ax
mov ebx, dword [ebp - 0x360c]
push 0x10205498
push ebx
call sub.msvcrt.dll_wcsstr
mov edi, eax
add esp, 8
test edi, edi
jne 0x100a8820
test ebx, ebx
je 0x100a88d1
mov ecx, ebx
lea edx, [ecx + 2]
lea esp, [esp]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x100a88c0
sub ecx, edx
sar ecx, 1
jmp 0x100a88d3
xor ecx, ecx
lea ebx, [ebx + ecx*2]
add ebx, 2
cmp ebx, dword [ebp - 0x3608]
jb 0x100a8803
mov eax, dword [ebp - 0x35b0]
xor ecx, ecx
mov ebx, dword [ebp - 0x3590]
test ebx, ebx
mov dword [esi - 0xc], eax
mov word [esi + eax*2], cx
jne 0x100a8730
mov ecx, 0x10202940
mov eax, esi
lea esp, [esp]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x100a8936
test dx, dx
je 0x100a8932
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x100a8936
add eax, 4
add ecx, 4
test dx, dx
jne 0x100a8910
xor eax, eax
jmp 0x100a893b
sbb eax, eax
or eax, 1
test eax, eax
je 0x100a8a51
push esi
call fcn.1000aa00
add esp, 4
test eax, eax
jne 0x100a8a51
push 0x10202940
lea ecx, [ebp - 0x28d4]
call fcn.10020470
mov ebx, dword [ebp - 0x359c]
lea ecx, [ebp - 0x3604]
push ecx
mov ecx, ebx
mov eax, dword [ebx]
call dword [eax + 0x1c]
mov edx, dword [eax]
mov ecx, edx
xor eax, eax
mov dword [ebp - 0x293c], 1
mov dword [ebp - 0x2938], 0
mov dword [ebp - 0x2924], 0
mov dword [ebp - 0x2920], 7
lea edi, [ecx + 2]
mov word [ebp - 0x2934], ax
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x100a89b0
sub ecx, edi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x2934]
call fcn.100070c0
lea eax, [ebp - 0x28d4]
push eax
lea ecx, [ebp - 0x291c]
call fcn.10005170
mov edx, dword [ebp - 0x3604]
or eax, 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x100a89fc
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
lea ecx, [ebp - 0x28d4]
call fcn.10005250
push 0
lea eax, [ebp - 0x3590]
mov dword [ebp - 0x3590], 3
push eax
push esi
lea eax, [ebp - 0x293c]
push eax
push 0
push 0x1025adb8
call fcn.100a7350
add esp, 0x18
cmp dword [ebp - 0x3590], 4
jl 0x100a8a44
mov dword [ebp - 0x35bc], 4
lea ecx, [ebp - 0x293c]
call fcn.100a68a0
jmp 0x100a8a57
mov ebx, dword [ebp - 0x359c]
push 0x208
lea eax, [ebp - 0x1c74]
push 0
push eax
call sub.msvcrt.dll_memset
push 0x208
lea eax, [ebp - 0x165c]
push 0
push eax
call sub.msvcrt.dll_memset
add esp, 0x18
lea eax, [ebp - 0x414]
push 0x10202940
push eax
call dword [sym.imp.KERNEL32.dll_lstrcmpiW]
test eax, eax
je 0x100a8abd
push 0x104
lea eax, [ebp - 0x165c]
push eax
push 0x104
lea eax, [ebp - 0x1c74]
push eax
lea eax, [ebp - 0x414]
push eax
call fcn.10057610
add esp, 0x14
mov eax, dword [ebp - 0x3598]
mov ecx, 0x10202940
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x100a8aee
test dx, dx
je 0x100a8aea
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x100a8aee
add eax, 4
add ecx, 4
test dx, dx
jne 0x100a8ac8
xor eax, eax
jmp 0x100a8af3
sbb eax, eax
or eax, 1
test eax, eax
jne 0x100a8b82
mov esi, dword [sym.imp.KERNEL32.dll_lstrlenW]
lea eax, [ebp - 0x1454]
push eax
call esi
test eax, eax
je 0x100a8b2a
lea ecx, [ebp - 0x1454]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x100a8b17
lea eax, [ebp - 0x1454]
jmp 0x100a8b71
lea eax, [ebp - 0x1044]
push eax
call esi
test eax, eax
je 0x100a8b53
lea ecx, [ebp - 0x1044]
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x100a8b40
lea eax, [ebp - 0x1044]
jmp 0x100a8b71
lea ecx, [ebp - 0x824]
lea edx, [ecx + 2]
lea esp, [esp]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x100a8b60
lea eax, [ebp - 0x824]
sub ecx, edx
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x3598]
call fcn.10003740
mov eax, dword [ebp - 0x3598]
cmp dword [eax - 0xc], 0
je 0x100a8bce
cmp word [eax], 0x40
jne 0x100a8bce
push eax
lea eax, [ebp - 0x3600]
push eax
call fcn.100095e0
add esp, 8
lea ecx, [ebp - 0x3598]
push eax
call fcn.10002790
mov edx, dword [ebp - 0x3600]
or eax, 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x100a8bce
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
call fcn.10002d70
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 0xc]
add eax, 0x10
mov ecx, 0x1025b480
mov dword [ebp - 0x3590], eax
lea eax, [ebp - 0x414]
push 1
push eax
lea eax, [ebp - 0x35f8]
push eax
call fcn.10002ad0
push 1
mov ecx, 0x1025b480
mov esi, dword [eax]
lea eax, [ebp - 0x28a4]
push eax
lea eax, [ebp - 0x35fc]
push eax
call fcn.10002ad0
lea ecx, [ebp - 0x1a6c]
push ecx
push esi
push dword [eax]
lea eax, [ebp - 0x1044]
push eax
lea eax, [ebp - 0x1454]
push eax
lea eax, [ebp - 0x824]
push eax
push dword [ebp - 0x3598]
lea eax, [ebp - 0x3590]
push str.Type:R3Name:_sClsid:_sBText:_sMText:_sIco:_sExec:_sExecClsid:_s
push eax
call fcn.10002cb0
mov edx, dword [ebp - 0x35fc]
add esp, 0x24
add edx, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x100a8c70
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x35f8]
or eax, 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x100a8c8e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
xor eax, eax
mov dword [ebp - 0x28c4], 0
push eax
push 0x10202940
lea ecx, [ebp - 0x28d4]
mov dword [ebp - 0x28c0], 7
mov word [ebp - 0x28d4], ax
call fcn.100070c0
xor eax, eax
mov dword [ebp - 0x28f4], 0
push eax
push 0x10202940
lea ecx, [ebp - 0x2904]
mov dword [ebp - 0x28f0], 7
mov word [ebp - 0x2904], ax
call fcn.100070c0
xor eax, eax
mov dword [ebp - 0x28ac], 0
lea ecx, [ebp - 0x824]
mov dword [ebp - 0x28a8], 7
mov word [ebp - 0x28bc], ax
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x100a8d10
sub ecx, edx
lea eax, [ebp - 0x824]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x28bc]
call fcn.100070c0
mov edi, dword [ebp - 0x3590]
xor eax, eax
mov ecx, edi
mov dword [ebp - 0x28dc], 0
mov dword [ebp - 0x28d8], 7
mov word [ebp - 0x28ec], ax
lea edx, [ecx + 2]
lea ebx, [ebx]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x100a8d60
sub ecx, edx
sar ecx, 1
push ecx
push edi
lea ecx, [ebp - 0x28ec]
call fcn.100070c0
mov esi, dword [ebx + 0x304]
mov dword [ebp - 0x35b0], esi
mov ebx, dword [esi + 4]
cmp byte [ebx + 0xd], 0
jne 0x100a8dd8
cmp dword [ebp - 0x28a8], 8
lea edx, [ebp - 0x28bc]
jb 0x100a8da6
mov edx, dword [ebp - 0x28bc]
cmp dword [ebx + 0x24], 8
lea ecx, [ebx + 0x10]
jb 0x100a8db2
mov ecx, dword [ebx + 0x10]
push dword [ebp - 0x28ac]
push edx
push dword [ebx + 0x20]
push ecx
call fcn.1001fdf0
add esp, 0x10
test eax, eax
jns 0x100a8dce
mov ebx, dword [ebx + 8]
jmp 0x100a8dd2
mov esi, ebx
mov ebx, dword [ebx]
cmp byte [ebx + 0xd], 0
je 0x100a8d91
cmp esi, dword [ebp - 0x35b0]
je 0x100a8e18
cmp dword [esi + 0x24], 8
lea edx, [esi + 0x10]
jb 0x100a8dec
mov edx, dword [esi + 0x10]
cmp dword [ebp - 0x28a8], 8
lea ecx, [ebp - 0x28bc]
jb 0x100a8e01
mov ecx, dword [ebp - 0x28bc]
push dword [esi + 0x20]
push edx
push dword [ebp - 0x28ac]
push ecx
call fcn.1001fdf0
add esp, 0x10
test eax, eax
jns 0x100a8e66
mov ebx, dword [ebp - 0x359c]
lea eax, [ebp - 0x28bc]
mov dword [ebp - 0x35b0], eax
lea eax, [ebp - 0x35d1]
push eax
lea eax, [ebp - 0x35b0]
push eax
push 0x1020f4aa
lea ecx, [ebx + 0x304]
call fcn.100a4e90
push eax
add eax, 0x10
lea ecx, [ebx + 0x304]
push eax
push esi
lea eax, [ebp - 0x35f4]
push eax
call fcn.100a5940
mov esi, dword [ebp - 0x35f4]
push 0
lea eax, [ebp - 0x28ec]
push eax
lea eax, [ebp - 0x28d4]
push eax
lea eax, [ebp - 0x2904]
push eax
lea ecx, [ebp - 0x2950]
lea ebx, [esi + 0x28]
call fcn.100a6630
mov esi, eax
cmp ebx, esi
je 0x100a8ecb
mov ecx, ebx
call fcn.1000c070
mov ecx, dword [esi]
mov dword [ebx], ecx
mov ecx, dword [esi + 4]
mov dword [ebx + 4], ecx
mov eax, dword [esi + 8]
mov dword [ebx + 8], eax
mov eax, dword [esi + 0xc]
mov dword [ebx + 0xc], eax
mov eax, dword [esi + 0x10]
mov dword [ebx + 0x10], eax
mov eax, dword [esi + 0x14]
mov dword [ebx + 0x14], eax
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xf
mov byte [esi], 0
lea eax, [esi + 0x18]
lea ecx, [ebx + 0x18]
cmp ecx, eax
je 0x100a8f10
call fcn.1000c070
mov eax, dword [esi + 0x18]
mov dword [ebx + 0x18], eax
mov eax, dword [esi + 0x1c]
mov dword [ebx + 0x1c], eax
mov eax, dword [esi + 0x20]
mov dword [ebx + 0x20], eax
mov eax, dword [esi + 0x24]
mov dword [ebx + 0x24], eax
mov eax, dword [esi + 0x28]
mov dword [ebx + 0x28], eax
mov eax, dword [esi + 0x2c]
mov dword [ebx + 0x2c], eax
mov dword [esi + 0x28], 0
mov dword [esi + 0x2c], 0xf
mov byte [esi + 0x18], 0
lea eax, [esi + 0x30]
lea ecx, [ebx + 0x30]
cmp ecx, eax
je 0x100a8f55
call fcn.1000c070
mov eax, dword [esi + 0x30]
mov dword [ebx + 0x30], eax
mov eax, dword [esi + 0x34]
mov dword [ebx + 0x34], eax
mov eax, dword [esi + 0x38]
mov dword [ebx + 0x38], eax
mov eax, dword [esi + 0x3c]
mov dword [ebx + 0x3c], eax
mov eax, dword [esi + 0x40]
mov dword [ebx + 0x40], eax
mov eax, dword [esi + 0x44]
mov dword [ebx + 0x44], eax
mov dword [esi + 0x40], 0
mov dword [esi + 0x44], 0xf
mov byte [esi + 0x30], 0
mov eax, dword [esi + 0x48]
lea ecx, [ebp - 0x2950]
mov dword [ebx + 0x48], eax
call fcn.10021420
lea ecx, [ebp - 0x28ec]
call fcn.10005250
lea ecx, [ebp - 0x28bc]
call fcn.10005250
lea ecx, [ebp - 0x2904]
call fcn.10005250
lea ecx, [ebp - 0x28d4]
call fcn.10005250
call fcn.10002d70
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 0xc]
add eax, 0x10
lea ecx, [ebp - 0x35b8]
push 0x10202940
mov dword [ebp - 0x35b8], eax
call fcn.10023e80
test al, al
jne 0x100a8fcd
push 0
push 0x10202940
lea ecx, [ebp - 0x35b8]
call fcn.10003740
lea eax, [ebp - 0x3598]
push eax
lea eax, [ebp - 0x35b8]
push eax
lea eax, [ebp - 0x3614]
push 0x2749
push eax
call fcn.100053d0
add esp, 0xc
push eax
lea eax, [ebp - 0x362c]
push eax
call fcn.10007e90
add esp, 0xc
lea ecx, [ebp - 0x3598]
push eax
call fcn.10002790
mov edx, dword [ebp - 0x362c]
or eax, 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x100a9029
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x3614]
or eax, 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x100a9047
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x35b8]
or eax, 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x100a9065
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov eax, dword [ebp - 0x35a8]
mov ecx, 0x10202940
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x100a9096
test dx, dx
je 0x100a9092
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x100a9096
add eax, 4
add ecx, 4
test dx, dx
jne 0x100a9070
xor eax, eax
jmp 0x100a909b
sbb eax, eax
or eax, 1
test eax, eax
jne 0x100a90d2
lea ecx, [ebp - 0x165c]
lea edx, [ecx + 2]
jmp 0x100a90b0
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x100a90b0
sub ecx, edx
lea eax, [ebp - 0x165c]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x35a8]
call fcn.10003740
mov eax, dword [ebp - 0x35a8]
mov ecx, 0x10202940
lea ecx, [ecx]
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x100a9106
test dx, dx
je 0x100a9102
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x100a9106
add eax, 4
add ecx, 4
test dx, dx
jne 0x100a90e0
xor eax, eax
jmp 0x100a910b
sbb eax, eax
or eax, 1
test eax, eax
jne 0x100a9194
call fcn.10002d70
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 0xc]
add eax, 0x10
lea ecx, [ebp - 0x35a4]
push 0x2807
mov dword [ebp - 0x35a4], eax
call fcn.10023e80
test al, al
jne 0x100a9164
mov ecx, 0x2807
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x100a9144
sub ecx, edx
sar ecx, 1
push ecx
push 0x2807
lea ecx, [ebp - 0x35a4]
call fcn.10003740
lea eax, [ebp - 0x35a4]
push eax
lea ecx, [ebp - 0x35a8]
call fcn.10002790
mov edx, dword [ebp - 0x35a4]
or eax, 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x100a9194
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 1
push 0
push ecx
mov esi, esp
call fcn.10002d70
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 0xc]
add eax, 0x10
mov ecx, esi
push 0x10202940
mov dword [esi], eax
call fcn.10023e80
test al, al
jne 0x100a91ca
push 0
push 0x10202940
mov ecx, esi
call fcn.10003740
push 1
push 0xffffffffffffffff
push 0xffffffffffffffff
push ecx
mov esi, esp
call fcn.10002d70
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 0xc]
add eax, 0x10
mov ecx, esi
push 0x10202940
mov dword [esi], eax
call fcn.10023e80
test al, al
jne 0x100a9202
push 0
push 0x10202940
mov ecx, esi
call fcn.10003740
push ecx
mov esi, esp
call fcn.10002d70
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 0xc]
add eax, 0x10
mov ecx, esi
push 0x10202940
mov dword [esi], eax
call fcn.10023e80
test al, al
jne 0x100a9234
push 0
push 0x10202940
mov ecx, esi
call fcn.10003740
push ecx
mov esi, esp
call fcn.10002d70
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 0xc]
add eax, 0x10
mov ecx, esi
push 0x10202940
mov dword [esi], eax
call fcn.10023e80
test al, al
jne 0x100a9266
push 0
push 0x10202940
mov ecx, esi
call fcn.10003740
call fcn.10002d70
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 0xc]
add eax, 0x10
lea ecx, [ebp - 0x35c0]
push 0x10202940
mov dword [ebp - 0x35c0], eax
call fcn.10023e80
test al, al
jne 0x100a92a1
push 0
push 0x10202940
lea ecx, [ebp - 0x35c0]
call fcn.10003740
lea eax, [ebp - 0x35c0]
push eax
lea eax, [ebp - 0x3618]
push 0x2829
push eax
call fcn.100053d0
add esp, 0xc
lea ecx, [ebp - 0x3628]
mov esi, dword [eax]
mov eax, dword [ebp - 0x35bc]
push 0
push 0xffffffffffffffff
push eax
push ecx
push 0
push eax
call fcn.100dbb10
mov ecx, dword [ebp - 0x359c]
add esp, 4
push eax
push 0
push dword [ebp - 0x35a8]
push esi
mov esi, dword [ebp - 0x3598]
push esi
call fcn.100cd930
mov edx, dword [ebp - 0x3618]
mov ebx, eax
mov dword [ebp - 0x35b0], ebx
add edx, 0xfffffff0
or ecx, 0xffffffff
lock xadd dword [edx + 0xc], ecx
dec ecx
test ecx, ecx
jg 0x100a931d
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x35c0]
or eax, 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x100a933b
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov ecx, dword [ebp - 0x361c]
lea eax, [ebp - 0x824]
push eax
call fcn.100d2a40
push 0x410
lea eax, [ebp - 0xc34]
push 0
push eax
call sub.msvcrt.dll_memset
lea eax, [ebp - 0x824]
push eax
push str.MicrosoftInternet_ExplorerExtensions
push 0x102040c0
lea eax, [ebp - 0xc34]
push 0x40f
push eax
call fcn.100269c0
add esp, 0x20
call fcn.10002d70
mov ecx, eax
mov edx, dword [eax]
call dword [edx + 0xc]
add eax, 0x10
lea ecx, [ebp - 0xc34]
mov dword [ebp - 0x35ec], eax
lea edx, [ecx + 2]
mov eax, dword [ebp - 0x35d8]
mov dword [ebp - 0x35f0], eax
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x100a93b0
sub ecx, edx
lea eax, [ebp - 0xc34]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x35ec]
call fcn.10003740
mov eax, dword [ebp + 0x10]
mov dword [ebp - 0x35e8], eax
mov eax, dword [ebp - 0x359c]
mov dword [ebp - 0x35e4], ebx
mov ebx, dword [eax + 0x2ec]
cmp dword [eax + 0x2f0], ebx
je 0x100a9433
mov eax, dword [ebp - 0x35f0]
mov dword [ebx], eax
mov eax, dword [ebp - 0x35ec]
add eax, 0xfffffff0
push eax
call fcn.10002a60
add eax, 0x10
add esp, 4
mov dword [ebx + 4], eax
mov eax, dword [ebp + 0x10]
mov dword [ebx + 8], eax
mov eax, dword [ebp - 0x35b0]
mov dword [ebx + 0xc], eax
mov eax, dword [ebp - 0x359c]
add dword [eax + 0x2ec], 0x10
jmp 0x100a9446
lea ecx, [ebp - 0x35f0]
push ecx
push ebx
lea ecx, [eax + 0x2e8]
call fcn.100a35f0
mov edx, dword [ebp - 0x35ec]
or eax, 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x100a9464
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add edi, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [edi + 0xc], eax
dec eax
test eax, eax
jg 0x100a947c
mov ecx, dword [edi]
push edi
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x35a0]
or eax, 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x100a949a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov edx, dword [ebp - 0x35a8]
or eax, 0xffffffff
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x100a94b8
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
add esi, 0xfffffff0
or eax, 0xffffffff
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x100a94d0
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
mov ebx, dword [ebp + 0x10]
lea ecx, [ebp - 0x3628]
call fcn.1002a3c0
mov ecx, dword [ebp - 0x35b4]
inc ecx
jmp 0x100a7c90
lea ecx, [ebp - 0x35d0]
call fcn.10008220
mov ecx, dword [ebp - 4]
xor eax, eax
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.101f99c6
mov esp, ebp
pop ebp
ret 0xc