Function at 0x10020630
Capabilities:
Check if file exists
Delete file
Persist via run registry key

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x100ece24
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0xc48
mov eax, dword [0x1012931c]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0xc28], ecx
mov eax, dword [ebx + 8]
mov dword [ebp - 0xc20], eax
xor eax, eax
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 7
mov word [ebp - 0x5c], ax
mov dword [ebp - 4], eax
mov dword [ebp - 0x7c], eax
mov dword [ebp - 0x78], 7
mov word [ebp - 0x8c], ax
lea eax, [ebp - 0x44]
mov byte [ebp - 4], 1
push eax
call fcn.10005780
mov ecx, eax
call fcn.1003eb3e
lea eax, [ebp - 0x44]
mov byte [ebp - 4], 2
push eax
lea ecx, [ebp - 0x74]
call fcn.10001d80
lea ecx, [ebp - 0x1e0]
mov byte [ebp - 4], 3
call fcn.10043a17
mov byte [ebp - 4], 4
call fcn.10051bd3
push 0xb
push str.6789Zip.exe
lea ecx, [ebp - 0x74]
mov dword [ebp - 0xc34], eax
call fcn.10006070
push 0x100f55e0
push str.c15c76e7
push str.qN7dnSN
lea eax, [ebp - 0x194]
push 0x100f5980
push eax
call fcn.10005780
mov ecx, eax
call fcn.1003e869
mov esi, eax
lea eax, [ebp - 0x5c]
cmp eax, esi
je 0x10020754
mov ecx, eax
call fcn.10001ee0
movups xmm0, xmmword [esi]
xor eax, eax
movups xmmword [ebp - 0x5c], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [ebp - 0x4c], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 7
mov word [esi], ax
mov edx, dword [ebp - 0x180]
cmp edx, 8
jb 0x10020794
mov ecx, dword [ebp - 0x194]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x1002078a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100219d2
push edx
push ecx
call fcn.10081441
add esp, 8
push 0x100f5958
push str.7e406e91
xor eax, eax
mov dword [ebp - 0x184], 0
push str.qN7dnSN
mov word [ebp - 0x194], ax
lea eax, [ebp - 0x17c]
push 0x100f5980
push eax
mov dword [ebp - 0x180], 7
call fcn.10005780
mov ecx, eax
call fcn.1003ea72
mov esi, eax
lea eax, [ebp - 0x8c]
cmp eax, esi
je 0x10020812
mov ecx, eax
call fcn.10001ee0
movups xmm0, xmmword [esi]
xor eax, eax
movups xmmword [ebp - 0x8c], xmm0
movq xmm0, qword [esi + 0x10]
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 7
movq qword [ebp - 0x7c], xmm0
mov word [esi], ax
mov edx, dword [ebp - 0x168]
cmp edx, 8
jb 0x10020852
mov ecx, dword [ebp - 0x17c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x10020848
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100219d7
push edx
push ecx
call fcn.10081441
add esp, 8
xor eax, eax
mov dword [ebp - 0x16c], 0
mov dword [ebp - 0x168], 7
mov word [ebp - 0x17c], ax
call fcn.10045da9
test al, al
je 0x1002091e
mov eax, dword [0x1012ebd0]
test eax, eax
je 0x1002091e
cmp dword [eax + 4], 4
jl 0x1002091e
push str.1024
call fcn.10045bd3
push str.1283
mov dword [ebp - 0xc2c], eax
call fcn.10045bd3
add esp, 8
lea ecx, [ebp - 0x518]
mov esi, eax
push 0
push 0
push 0x100f5674
push 0x76
push str.CDoUnInstallLogic::DoTaskUnInstall
push 4
call fcn.10006e20
mov edi, eax
test esi, esi
mov byte [ebp - 4], 5
mov ecx, 0x100f5c08
cmovne ecx, esi
lea esi, [edi + 0x28]
push ecx
push esi
call fcn.10006220
mov ecx, dword [ebp - 0xc2c]
mov eax, 0x100f5c08
test ecx, ecx
cmovne eax, ecx
push eax
push esi
call fcn.10006220
mov ecx, dword [0x1012ebd0]
add esp, 0x10
push edi
call fcn.10007f70
lea ecx, [ebp - 0x518]
mov byte [ebp - 4], 4
call fcn.10007910
cmp dword [ebp - 0x4c], 0
jbe 0x10020a33
call fcn.10045da9
test al, al
je 0x100209fe
mov eax, dword [0x1012ebd0]
test eax, eax
je 0x100209fe
cmp dword [eax + 4], 4
jl 0x100209fe
cmp dword [ebp - 0x48], 8
lea eax, [ebp - 0x5c]
push str.1284
cmovae eax, dword [ebp - 0x5c]
mov dword [ebp - 0xc2c], eax
call fcn.10045bd3
push str.1283
mov edi, eax
call fcn.10045bd3
add esp, 8
lea ecx, [ebp - 0x618]
mov esi, eax
push 0
push 0
push 0x100f5674
push 0x7d
push str.CDoUnInstallLogic::DoTaskUnInstall
push 4
call fcn.10006e20
mov dword [ebp - 0xc30], eax
test esi, esi
mov byte [ebp - 4], 6
mov ecx, 0x100f5c08
cmovne ecx, esi
lea esi, [eax + 0x28]
push ecx
push esi
call fcn.10006220
test edi, edi
mov eax, 0x100f5c08
cmovne eax, edi
push eax
push esi
call fcn.10006220
mov ecx, dword [ebp - 0xc2c]
mov eax, 0x100f5c08
test ecx, ecx
cmovne eax, ecx
push eax
push esi
call fcn.10006220
mov ecx, dword [0x1012ebd0]
add esp, 0x18
push dword [ebp - 0xc30]
call fcn.10007f70
lea ecx, [ebp - 0x618]
mov byte [ebp - 4], 4
call fcn.10007910
lea ecx, [ebp - 0xc1b]
call fcn.10004070
cmp dword [ebp - 0x48], 8
lea eax, [ebp - 0x5c]
lea ecx, [ebp - 0xc1b]
mov byte [ebp - 4], 7
cmovae eax, dword [ebp - 0x5c]
push eax
call fcn.10055c87
lea ecx, [ebp - 0xc1b]
mov byte [ebp - 4], 4
call fcn.10003de0
cmp dword [ebp - 0x34], 0
mov edi, dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
jbe 0x10020b80
cmp dword [ebp - 0x30], 8
lea eax, [ebp - 0x44]
cmovae eax, dword [ebp - 0x44]
push eax
call edi
test eax, eax
je 0x10020b80
call fcn.10045da9
test al, al
je 0x10020afd
mov eax, dword [0x1012ebd0]
test eax, eax
je 0x10020afd
cmp dword [eax + 4], 4
jl 0x10020afd
push str.1285
call fcn.10045bd3
push str.1283
mov dword [ebp - 0xc30], eax
call fcn.10045bd3
add esp, 8
mov dword [ebp - 0xc2c], eax
lea ecx, [ebp - 0x718]
push 0
push 0
push 0x100f5674
push 0x88
push str.CDoUnInstallLogic::DoTaskUnInstall
push 4
call fcn.10006e20
mov esi, dword [0x1012ebd0]
lea ecx, [ebp - 0xc30]
push ecx
lea ecx, [ebp - 0xc2c]
mov byte [ebp - 4], 8
push ecx
mov ecx, eax
call fcn.100061f0
mov ecx, eax
call fcn.100061f0
push eax
mov ecx, esi
call fcn.10007f70
lea ecx, [ebp - 0x718]
mov byte [ebp - 4], 4
call fcn.10007910
cmp dword [ebp - 0x30], 8
lea edx, [ebp - 0x44]
cmovae edx, dword [ebp - 0x44]
sub esp, 0x18
mov esi, esp
mov ecx, edx
xor eax, eax
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 7
mov word [esi], ax
lea eax, [ecx + 2]
mov dword [ebp - 0xc24], eax
nop dword [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x10020b30
sub ecx, dword [ebp - 0xc24]
sar ecx, 1
push ecx
push edx
mov ecx, esi
call fcn.10003260
lea ecx, [ebp - 0x318]
call fcn.10059025
lea ecx, [ebp - 0x318]
mov byte [ebp - 4], 9
call fcn.10059a60
lea ecx, [ebp - 0x318]
call fcn.10059cb4
lea ecx, [ebp - 0x318]
mov byte [ebp - 4], 4
call fcn.10059112
cmp dword [ebp - 0x60], 8
lea eax, [ebp - 0x74]
cmovae eax, dword [ebp - 0x74]
push eax
call edi
test eax, eax
je 0x10020c7d
call fcn.10045da9
test al, al
je 0x10020c48
mov eax, dword [0x1012ebd0]
test eax, eax
je 0x10020c48
cmp dword [eax + 4], 4
jl 0x10020c48
push str.1286
call fcn.10045bd3
push str.1283
mov dword [ebp - 0xc24], eax
call fcn.10045bd3
add esp, 8
lea ecx, [ebp - 0x818]
mov esi, eax
push 0
push 0
push 0x100f5674
push 0x98
push str.CDoUnInstallLogic::DoTaskUnInstall
push 4
call fcn.10006e20
mov edi, eax
test esi, esi
mov byte [ebp - 4], 0xa
mov ecx, 0x100f5c08
cmovne ecx, esi
lea esi, [edi + 0x28]
push ecx
push esi
call fcn.10006220
mov ecx, dword [ebp - 0xc24]
mov eax, 0x100f5c08
test ecx, ecx
cmovne eax, ecx
push eax
push esi
call fcn.10006220
mov ecx, dword [0x1012ebd0]
add esp, 0x10
push edi
call fcn.10007f70
lea ecx, [ebp - 0x818]
mov byte [ebp - 4], 4
call fcn.10007910
lea ecx, [ebp - 0xc1a]
call fcn.10004070
cmp dword [ebp - 0x60], 8
lea eax, [ebp - 0x74]
lea ecx, [ebp - 0xc1a]
mov byte [ebp - 4], 0xb
cmovae eax, dword [ebp - 0x74]
push eax
call fcn.1003e319
lea ecx, [ebp - 0xc1a]
mov byte [ebp - 4], 4
call fcn.10003de0
call fcn.10045da9
test al, al
je 0x10020d2f
mov eax, dword [0x1012ebd0]
test eax, eax
je 0x10020d2f
cmp dword [eax + 4], 4
jl 0x10020d2f
push str.1287
call fcn.10045bd3
push str.1283
mov dword [ebp - 0xc24], eax
call fcn.10045bd3
add esp, 8
lea ecx, [ebp - 0x918]
mov esi, eax
push 0
push 0
push 0x100f5674
push 0xa1
push str.CDoUnInstallLogic::DoTaskUnInstall
push 4
call fcn.10006e20
mov edi, eax
test esi, esi
mov byte [ebp - 4], 0xc
mov ecx, 0x100f5c08
cmovne ecx, esi
lea esi, [edi + 0x28]
push ecx
push esi
call fcn.10006220
mov ecx, dword [ebp - 0xc24]
mov eax, 0x100f5c08
test ecx, ecx
cmovne eax, ecx
push eax
push esi
call fcn.10006220
mov ecx, dword [0x1012ebd0]
add esp, 0x10
push edi
call fcn.10007f70
lea ecx, [ebp - 0x918]
mov byte [ebp - 4], 4
call fcn.10007910
lea ecx, [ebp - 0xc19]
call fcn.10004070
push 0x100f6224
lea ecx, [ebp - 0xc19]
mov byte [ebp - 4], 0xd
call fcn.1003d07e
push 0x100f5980
lea ecx, [ebp - 0xc19]
call fcn.1003d07e
push 0x100f6224
lea ecx, [ebp - 0xc19]
call fcn.1003d171
xor eax, eax
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 7
mov word [ebp - 0x2c], ax
lea eax, [ebp - 0xa4]
mov byte [ebp - 4], 0xe
push eax
call fcn.1005309a
add esp, 4
push 0x42
push str.SoftwareMicrosoftWindowsCurrentVersionExplorerShell_Folders_
lea ecx, [ebp - 0xa4]
mov byte [ebp - 4], 0xf
call fcn.10006070
cmp dword [ebp - 0x90], 8
lea eax, [ebp - 0xa4]
push str.Desktop
cmovae eax, dword [ebp - 0xa4]
push eax
lea eax, [ebp - 0x104]
push SysStringLen
push eax
call fcn.1005293b
cmp dword [ebp - 0xf0], 8
lea eax, [ebp - 0x104]
push 0x100f6224
cmovae eax, dword [ebp - 0x104]
push eax
lea eax, [ebp - 0x164]
mov byte [ebp - 4], 0x10
push str._s_s.lnk
push eax
call fcn.100350d8
mov esi, eax
add esp, 0x20
lea eax, [ebp - 0x2c]
cmp eax, esi
je 0x10020e3c
mov ecx, eax
call fcn.10001ee0
movups xmm0, xmmword [esi]
xor eax, eax
movups xmmword [ebp - 0x2c], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [ebp - 0x1c], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 7
mov word [esi], ax
mov edx, dword [ebp - 0x150]
cmp edx, 8
jb 0x10020e7c
mov ecx, dword [ebp - 0x164]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x10020e72
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100219dc
push edx
push ecx
call fcn.10081441
add esp, 8
xor eax, eax
mov dword [ebp - 0x154], 0
cmp dword [ebp - 0x18], 8
mov word [ebp - 0x164], ax
lea eax, [ebp - 0x2c]
cmovae eax, dword [ebp - 0x2c]
push eax
mov dword [ebp - 0x150], 7
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x10020ec1
cmp dword [ebp - 0x18], 8
lea eax, [ebp - 0x2c]
cmovae eax, dword [ebp - 0x2c]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
call fcn.10045da9
test al, al
je 0x10020f73
mov eax, dword [0x1012ebd0]
test eax, eax
je 0x10020f73
cmp dword [eax + 4], 4
jl 0x10020f73
push str.1288
call fcn.10045bd3
push str.1283
mov dword [ebp - 0xc24], eax
call fcn.10045bd3
add esp, 8
lea ecx, [ebp - 0xa18]
mov esi, eax
push 0
push 0
push 0x100f5674
push 0xb4
push str.CDoUnInstallLogic::DoTaskUnInstall
push 4
call fcn.10006e20
mov edi, eax
test esi, esi
mov byte [ebp - 4], 0x11
mov ecx, 0x100f5c08
cmovne ecx, esi
lea esi, [edi + 0x28]
push ecx
push esi
call fcn.10006220
mov ecx, dword [ebp - 0xc24]
mov eax, 0x100f5c08
test ecx, ecx
cmovne eax, ecx
push eax
push esi
call fcn.10006220
mov ecx, dword [0x1012ebd0]
add esp, 0x10
push edi
call fcn.10007f70
lea ecx, [ebp - 0xa18]
mov byte [ebp - 4], 0x10
call fcn.10007910
call fcn.10005780
mov ecx, eax
call fcn.1003f99e
test al, al
jne 0x100210e6
lea ecx, [ebp - 0xc50]
call fcn.1005421d
lea ecx, [ebp - 0xc50]
mov byte [ebp - 4], 0x12
call fcn.10054355
lea ecx, [ebp - 0xc50]
call fcn.10054347
mov dword [ebp - 0xc40], eax
lea eax, [ebp - 0xc40]
push eax
mov dword [ebp - 0xc3c], edx
call fcn.100b64f7
push dword [eax + 0xc]
mov ecx, dword [eax + 0x10]
mov eax, dword [eax + 0x14]
inc ecx
push ecx
add eax, 0x76c
push eax
lea eax, [ebp - 0x14c]
push str._d_.2d_.2d
push eax
call fcn.1003501a
add esp, 0x18
push 0
sub esp, 0x18
mov byte [ebp - 4], 0x13
lea eax, [ebp - 0x14c]
mov ecx, esp
push eax
call fcn.10006c20
lea eax, [ebp - 0x134]
push eax
call fcn.100366d5
add esp, 0x20
cmp dword [ebp - 0x120], 8
lea eax, [ebp - 0x134]
mov byte [ebp - 4], 0x14
cmovae eax, dword [ebp - 0x134]
push eax
push str.a9056209
push str.cgsMu4O
push str.fHrkis
call fcn.10005780
mov ecx, eax
call fcn.1003ed01
cmp dword [ebp - 0x120], 8
lea eax, [ebp - 0x134]
cmovae eax, dword [ebp - 0x134]
push eax
push str.a9056209
push str.cgsMu4O
push str.NL6ghw9
call fcn.10005780
mov ecx, eax
call fcn.1003ed01
lea ecx, [ebp - 0x134]
call fcn.10001ee0
mov edx, dword [ebp - 0x138]
mov byte [ebp - 4], 0x12
cmp edx, 0x10
jb 0x100210bc
mov ecx, dword [ebp - 0x14c]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100210b2
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100219e1
push edx
push ecx
call fcn.10081441
add esp, 8
lea ecx, [ebp - 0xc50]
mov dword [ebp - 0x13c], 0
mov dword [ebp - 0x138], 0xf
mov byte [ebp - 0x14c], 0
mov byte [ebp - 4], 0x10
call fcn.10003de0
cmp dword [ebp - 0x78], 8
lea esi, [ebp - 0x8c]
mov edi, dword [ebp - 0x7c]
mov eax, 1
cmovae esi, dword [ebp - 0x8c]
mov edx, edi
cmp edi, eax
mov dword [ebp - 0xc24], 1
mov dword [ebp - 0xc54], edi
mov ecx, 0x100f5958
cmova edx, eax
test edx, edx
je 0x10021136
sub esi, ecx
mov ax, word [ecx + esi]
cmp ax, word [ecx]
jne 0x100211c9
add ecx, 2
sub edx, 1
jne 0x10021121
cmp edi, 1
jb 0x100211c9
ja 0x100211c9
push dword [ebp - 0xc34]
mov ecx, dword [ebp - 0xc28]
call fcn.10021a20
test al, al
je 0x100211c9
cmp dword [ebp - 0x30], 8
lea edx, [ebp - 0x44]
cmovae edx, dword [ebp - 0x44]
sub esp, 0x18
mov esi, esp
mov ecx, edx
xor eax, eax
mov dword [esi + 0x10], 0
lea edi, [ecx + 2]
mov dword [esi + 0x14], 7
mov word [esi], ax
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x10021182
sub ecx, edi
sar ecx, 1
push ecx
push edx
mov ecx, esi
call fcn.10003260
lea ecx, [ebp - 0x1ac]
call fcn.10018980
push dword [ebp - 0xc20]
lea ecx, [ebp - 0x1ac]
mov byte [ebp - 4], 0x15
call fcn.10019ed0
lea ecx, [ebp - 0x1ac]
mov byte [ebp - 4], 0x10
call fcn.10001ee0
call fcn.10045da9
test al, al
je 0x1002127b
mov eax, dword [0x1012ebd0]
test eax, eax
je 0x1002127b
cmp dword [eax + 4], 4
jl 0x1002127b
push str.1289
call fcn.10045bd3
push str.1283
mov dword [ebp - 0xc20], eax
call fcn.10045bd3
add esp, 8
lea ecx, [ebp - 0xb18]
mov esi, eax
push 0
push 0
push 0x100f5674
push 0xbf
push str.CDoUnInstallLogic::DoTaskUnInstall
push 4
call fcn.10006e20
mov edi, eax
test esi, esi
mov byte [ebp - 4], 0x16
mov ecx, 0x100f5c08
cmovne ecx, esi
lea esi, [edi + 0x28]
push ecx
push esi
call fcn.10006220
mov ecx, dword [ebp - 0xc20]
mov eax, 0x100f5c08
test ecx, ecx
cmovne eax, ecx
push eax
push esi
call fcn.10006220
mov ecx, dword [0x1012ebd0]
add esp, 0x10
push edi
call fcn.10007f70
lea ecx, [ebp - 0xb18]
mov byte [ebp - 4], 0x10
call fcn.10007910
push 0x100f5980
lea eax, [ebp - 0x11c]
push str.Software_s
push eax
call fcn.100350d8
add esp, 0xc
cmp dword [ebp - 0x108], 8
lea eax, [ebp - 0x11c]
mov byte [ebp - 4], 0x17
cmovae eax, dword [ebp - 0x11c]
push eax
call fcn.10005780
mov ecx, eax
call fcn.1003e7d5
sub esp, 0x18
xor eax, eax
mov ecx, esp
push eax
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
push 0x100f55e0
mov word [ecx], ax
call fcn.10003260
lea ecx, [ebp - 0x258]
call fcn.1005619d
push SysReAllocString
lea ecx, [ebp - 0x258]
mov byte [ebp - 4], 0x18
call fcn.10058bdd
push reloc.OLEAUT32.dll_SysReAllocString
lea ecx, [ebp - 0x258]
call fcn.10058bdd
lea eax, [ebp - 0xec]
push eax
call fcn.10005780
mov ecx, eax
call fcn.1003eb66
lea eax, [ebp - 0xec]
mov byte [ebp - 4], 0x19
push eax
call fcn.1003565b
add esp, 4
test eax, eax
jne 0x10021347
push 1
push 0x100f58d0
lea ecx, [ebp - 0xec]
call fcn.10006070
call fcn.10045da9
test al, al
je 0x100213f9
mov eax, dword [0x1012ebd0]
test eax, eax
je 0x100213f9
cmp dword [eax + 4], 4
jl 0x100213f9
push str.1290
call fcn.10045bd3
push str.1283
mov dword [ebp - 0xc20], eax
call fcn.10045bd3
add esp, 8
lea ecx, [ebp - 0xc18]
mov esi, eax
push 0
push 0
push 0x100f5674
push 0xd0
push str.CDoUnInstallLogic::DoTaskUnInstall
push 4
call fcn.10006e20
mov edi, eax
test esi, esi
mov byte [ebp - 4], 0x1a
mov ecx, 0x100f5c08
cmovne ecx, esi
lea esi, [edi + 0x28]
push ecx
push esi
call fcn.10006220
mov ecx, dword [ebp - 0xc20]
mov eax, 0x100f5c08
test ecx, ecx
cmovne eax, ecx
push eax
push esi
call fcn.10006220
mov ecx, dword [0x1012ebd0]
add esp, 0x10
push edi
call fcn.10007f70
lea ecx, [ebp - 0xc18]
mov byte [ebp - 4], 0x19
call fcn.10007910
lea eax, [ebp - 0xec]
push eax
lea ecx, [ebp - 0xd4]
call fcn.10001d80
push 5
push str.netca
lea ecx, [ebp - 0xd4]
mov byte [ebp - 4], 0x1b
call fcn.10006070
cmp dword [ebp - 0xc0], 8
lea eax, [ebp - 0xd4]
cmovae eax, dword [ebp - 0xd4]
push eax
call fcn.10041b35
add esp, 4
lea eax, [ebp - 0xec]
lea ecx, [ebp - 0xbc]
push eax
call fcn.10001d80
push 5
push str.scach
lea ecx, [ebp - 0xbc]
mov byte [ebp - 4], 0x1c
call fcn.10006070
cmp dword [ebp - 0xa8], 8
lea eax, [ebp - 0xbc]
cmovae eax, dword [ebp - 0xbc]
push eax
call fcn.10041b35
sub esp, 0x14
mov eax, esp
mov dword [ebp - 0xc20], esp
push dword [ebp - 0xc34]
push eax
call fcn.100354f6
sub esp, 0x10
mov byte [ebp - 4], 0x1d
mov ecx, esp
push 0x100f6fcc
call fcn.10003b20
lea ecx, [ebp - 0x1e0]
mov byte [ebp - 4], 0x1c
call fcn.10042bdf
mov esi, dword [0x1012ec08]
test esi, esi
jne 0x1002153d
push 0x1012ec0c
mov dword [ebp - 0xc20], 0x1012ec0c
call fcn.1006798d
add esp, 4
test eax, eax
je 0x100214e7
push eax
call fcn.10067d1c
add esp, 4
mov esi, dword [0x1012ec08]
mov byte [ebp - 4], 0x1e
test esi, esi
jne 0x1002151b
push 4
call fcn.10081411
mov esi, eax
add esp, 4
mov dword [ebp - 0xc28], esi
test esi, esi
je 0x10021513
mov dword [esi], vtable.HttpPostImpl.0
jmp 0x10021515
xor esi, esi
mov dword [0x1012ec08], esi
push 0x1012ec0c
mov byte [ebp - 4], 0x1f
call fcn.10067a02
add esp, 4
test eax, eax
je 0x10021539
push eax
call fcn.10067d1c
add esp, 4
mov byte [ebp - 4], 0x1c
push 0
lea eax, [ebp - 0x1e0]
mov ecx, esi
push eax
call fcn.1003fd9d
call fcn.10045da9
test al, al
je 0x10021604
mov eax, dword [0x1012ebd0]
test eax, eax
je 0x10021604
cmp dword [eax + 4], 4
jl 0x10021604
push str.1025
call fcn.10045bd3
push str.1283
mov dword [ebp - 0xc20], eax
call fcn.10045bd3
add esp, 8
lea ecx, [ebp - 0x418]
mov edi, eax
push 0
push 0
push 0x100f5674
push 0xe0
push str.CDoUnInstallLogic::DoTaskUnInstall
push 4
call fcn.10006e20
mov dword [ebp - 0xc28], eax
test edi, edi
mov byte [ebp - 4], 0x20
mov ecx, 0x100f5c08
lea esi, [eax + 0x28]
cmovne ecx, edi
push ecx
push esi
call fcn.10006220
mov eax, dword [ebp - 0xc20]
mov ecx, 0x100f5c08
test eax, eax
cmovne ecx, eax
push ecx
push esi
call fcn.10006220
mov ecx, dword [0x1012ebd0]
add esp, 0x10
push dword [ebp - 0xc28]
call fcn.10007f70
lea ecx, [ebp - 0x418]
call fcn.10007910
mov edx, dword [ebp - 0xa8]
cmp edx, 8
jb 0x10021644
mov ecx, dword [ebp - 0xbc]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x1002163a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100219e6
push edx
push ecx
call fcn.10081441
add esp, 8
mov edx, dword [ebp - 0xc0]
xor eax, eax
mov dword [ebp - 0xac], 0
mov dword [ebp - 0xa8], 7
mov word [ebp - 0xbc], ax
cmp edx, 8
jb 0x100216a1
mov ecx, dword [ebp - 0xd4]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x10021697
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100219eb
push edx
push ecx
call fcn.10081441
add esp, 8
mov edx, dword [ebp - 0xd8]
xor eax, eax
mov dword [ebp - 0xc4], 0
mov dword [ebp - 0xc0], 7
mov word [ebp - 0xd4], ax
cmp edx, 8
jb 0x100216fe
mov ecx, dword [ebp - 0xec]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x100216f4
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100219f0
push edx
push ecx
call fcn.10081441
add esp, 8
xor eax, eax
mov dword [ebp - 0xdc], 0
lea ecx, [ebp - 0x258]
mov dword [ebp - 0xd8], 7
mov word [ebp - 0xec], ax
call fcn.10056275
mov edx, dword [ebp - 0x108]
cmp edx, 8
jb 0x10021766
mov ecx, dword [ebp - 0x11c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x1002175c
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100219f5
push edx
push ecx
call fcn.10081441
add esp, 8
mov edx, dword [ebp - 0xf0]
xor eax, eax
mov dword [ebp - 0x10c], 0
mov dword [ebp - 0x108], 7
mov word [ebp - 0x11c], ax
cmp edx, 8
jb 0x100217c3
mov ecx, dword [ebp - 0x104]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x100217b9
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100219fa
push edx
push ecx
call fcn.10081441
add esp, 8
mov edx, dword [ebp - 0x90]
xor eax, eax
mov dword [ebp - 0xf4], 0
mov dword [ebp - 0xf0], 7
mov word [ebp - 0x104], ax
cmp edx, 8
jb 0x10021820
mov ecx, dword [ebp - 0xa4]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x10021816
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100219ff
push edx
push ecx
call fcn.10081441
add esp, 8
mov edx, dword [ebp - 0x18]
xor eax, eax
mov dword [ebp - 0x94], 0
mov dword [ebp - 0x90], 7
mov word [ebp - 0xa4], ax
cmp edx, 8
jb 0x10021877
mov ecx, dword [ebp - 0x2c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x1002186d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10021a04
push edx
push ecx
call fcn.10081441
add esp, 8
xor eax, eax
mov dword [ebp - 0x1c], 0
lea ecx, [ebp - 0xc19]
mov dword [ebp - 0x18], 7
mov word [ebp - 0x2c], ax
call fcn.10003de0
lea ecx, [ebp - 0x1e0]
call fcn.10042a9d
mov edx, dword [ebp - 0x60]
cmp edx, 8
jb 0x100218db
mov ecx, dword [ebp - 0x74]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x100218d1
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10021a09
push edx
push ecx
call fcn.10081441
add esp, 8
mov edx, dword [ebp - 0x30]
xor eax, eax
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x60], 7
mov word [ebp - 0x74], ax
cmp edx, 8
jb 0x10021929
mov ecx, dword [ebp - 0x44]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x1002191f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10021a0e
push edx
push ecx
call fcn.10081441
add esp, 8
mov edx, dword [ebp - 0x78]
xor eax, eax
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 7
mov word [ebp - 0x44], ax
cmp edx, 8
jb 0x1002197a
mov ecx, dword [ebp - 0x8c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x10021970
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10021a13
push edx
push ecx
call fcn.10081441
add esp, 8
mov edx, dword [ebp - 0x48]
cmp edx, 8
jb 0x100219b0
mov ecx, dword [ebp - 0x5c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x100219a6
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10021a18
push edx
push ecx
call fcn.10081441
add esp, 8
mov al, 1
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.10081454
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 4
call fcn.100ad050
call fcn.100ad050
call fcn.100ad050
call fcn.100ad050
call fcn.100ad050
call fcn.100ad050
call fcn.100ad050
call fcn.100ad050
call fcn.100ad050
call fcn.100ad050
call fcn.100ad050
call fcn.100ad050
call fcn.100ad050
call fcn.100ad050
call fcn.100ad050
int3