Function at 0x1000418a
Capabilities:
Create process on windows
Create process suspended

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x4c
mov dword [ebp - 4], 0
mov dword [ebp - 8], 0
mov dword [ebp - 0xc], 0
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x30], 0
push 0x48
call fcn.100189c5
add esp, 4
mov dword [ebp - 0x34], eax
mov ebx, eax
mov edi, eax
xor eax, eax
mov ecx, 0x12
rep stosd dword es:[edi], eax
push 0x10
call fcn.100189c5
add esp, 4
mov dword [ebp - 0x38], eax
mov ebx, eax
mov dword [ebx], 0
mov dword [ebx + 4], 0
mov dword [ebx + 8], 0
mov dword [ebx + 0xc], 0
push 0x1001e234
push dword [0x1001fcb8]
call fcn.10002b50
add esp, 8
cmp eax, 0
je 0x10004606
push 1
mov eax, 0x1001e234
mov dword [ebp - 0x3c], eax
lea eax, [ebp - 0x3c]
push eax
mov eax, 0x1001e31e
mov dword [ebp - 0x40], eax
lea eax, [ebp - 0x40]
push eax
mov eax, 0x1001e23e
mov dword [ebp - 0x44], eax
lea eax, [ebp - 0x44]
push eax
push 0x1001fcb8
call fcn.10002c58
mov dword [ebp - 0x48], eax
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x10004290
push ebx
call fcn.100189cb
add esp, 4
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x100042a0
push ebx
call fcn.100189cb
add esp, 4
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x100042b0
push ebx
call fcn.100189cb
add esp, 4
mov eax, dword [ebp - 0x48]
push eax
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x100042c4
push ebx
call fcn.100189cb
add esp, 4
pop eax
mov dword [ebp - 4], eax
push 1
mov eax, 0x1001e234
mov dword [ebp - 0x3c], eax
lea eax, [ebp - 0x3c]
push eax
mov eax, 0x1001e327
mov dword [ebp - 0x40], eax
lea eax, [ebp - 0x40]
push eax
mov eax, 0x1001e23e
mov dword [ebp - 0x44], eax
lea eax, [ebp - 0x44]
push eax
push 0x1001fcb8
call fcn.10002c58
mov dword [ebp - 0x48], eax
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x1000430b
push ebx
call fcn.100189cb
add esp, 4
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x1000431b
push ebx
call fcn.100189cb
add esp, 4
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x1000432b
push ebx
call fcn.100189cb
add esp, 4
mov eax, dword [ebp - 0x48]
push eax
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x1000433f
push ebx
call fcn.100189cb
add esp, 4
pop eax
mov dword [ebp - 8], eax
push 0x1001e234
push dword [ebp - 4]
call fcn.10002b50
add esp, 8
cmp eax, 0
jne 0x10004379
push 0x1001e234
push dword [ebp - 8]
call fcn.10002b50
add esp, 8
cmp eax, 0
jne 0x10004379
xor eax, eax
jmp 0x1000437e
mov eax, 1
test eax, eax
je 0x10004606
mov eax, str.Start_Page
mov dword [ebp - 0x3c], eax
lea eax, [ebp - 0x3c]
push eax
mov eax, str.SoftwareMicrosoftInternet_ExplorerMain
mov dword [ebp - 0x40], eax
lea eax, [ebp - 0x40]
push eax
push SysReAllocString
call fcn.10004dff
mov dword [ebp - 0x44], eax
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x100043bb
push ebx
call fcn.100189cb
add esp, 4
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x100043cb
push ebx
call fcn.100189cb
add esp, 4
mov eax, dword [ebp - 0x44]
push eax
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x100043df
push ebx
call fcn.100189cb
add esp, 4
pop eax
mov dword [ebp - 0xc], eax
mov eax, str.Start_Page
mov dword [ebp - 0x3c], eax
lea eax, [ebp - 0x3c]
push eax
mov eax, str.SoftwarePoliciesMicrosoftInternet_ExplorerMain
mov dword [ebp - 0x40], eax
lea eax, [ebp - 0x40]
push eax
push SysReAllocString
call fcn.10004dff
mov dword [ebp - 0x44], eax
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x10004418
push ebx
call fcn.100189cb
add esp, 4
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x10004428
push ebx
call fcn.100189cb
add esp, 4
mov eax, dword [ebp - 0x44]
push eax
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x1000443c
push ebx
call fcn.100189cb
add esp, 4
pop eax
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 4]
push eax
push dword [ebp - 0xc]
call fcn.10002b50
add esp, 8
cmp eax, 0
jne 0x10004474
mov eax, dword [ebp - 8]
push eax
push dword [ebp - 0x10]
call fcn.10002b50
add esp, 8
cmp eax, 0
jne 0x10004474
xor eax, eax
jmp 0x10004479
mov eax, 1
test eax, eax
je 0x10004606
push 0x1001fc90
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x7c]
mov dword [ebp - 0x3c], eax
push 1
push 0
mov dword [ebp - 0x40], 0
push 0
push dword [ebp - 0x40]
push 1
mov eax, 0x1001e21b
mov dword [ebp - 0x44], eax
lea eax, [ebp - 0x44]
push eax
push 1
push 1
mov dword [ebp - 0x48], 0
push 0
push dword [ebp - 0x48]
push 1
push SysReAllocString
push 1
push 0x19f
push 1
push 0x1c1
push 1
push 0
push 1
push 0
push 1
push 1
push 1
push 0x100053ee
push 1
mov eax, 0x1001e234
mov dword [ebp - 0x4c], eax
lea eax, [ebp - 0x4c]
push eax
push 1
push dword [ebp - 0x3c]
push 0x1001fcbc
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x200]
mov ebx, dword [ebp - 0x4c]
test ebx, ebx
je 0x1000452d
push ebx
call fcn.100189cb
add esp, 4
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x1000453d
push ebx
call fcn.100189cb
add esp, 4
cmp dword [0x1001fcc0], 1
jne 0x10004606
mov eax, dword [ebp - 4]
push eax
push dword [ebp - 0xc]
call fcn.10002b50
add esp, 8
cmp eax, 0
je 0x100045a8
lea eax, [ebp - 4]
push eax
mov eax, str.Start_Page
mov dword [ebp - 0x3c], eax
lea eax, [ebp - 0x3c]
push eax
mov eax, str.SoftwareMicrosoftInternet_ExplorerMain
mov dword [ebp - 0x40], eax
lea eax, [ebp - 0x40]
push eax
push SysReAllocString
call fcn.10004f73
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x10004598
push ebx
call fcn.100189cb
add esp, 4
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x100045a8
push ebx
call fcn.100189cb
add esp, 4
mov eax, dword [ebp - 8]
push eax
push dword [ebp - 0x10]
call fcn.10002b50
add esp, 8
cmp eax, 0
je 0x10004606
lea eax, [ebp - 8]
push eax
mov eax, str.Start_Page
mov dword [ebp - 0x3c], eax
lea eax, [ebp - 0x3c]
push eax
mov eax, str.SoftwarePoliciesMicrosoftInternet_ExplorerMain
mov dword [ebp - 0x40], eax
lea eax, [ebp - 0x40]
push eax
push SysReAllocString
call fcn.10004f73
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x100045f6
push ebx
call fcn.100189cb
add esp, 4
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x10004606
push ebx
call fcn.100189cb
add esp, 4
push 1
mov eax, 0x1001e234
mov dword [ebp - 0x3c], eax
lea eax, [ebp - 0x3c]
push eax
mov eax, 0x1001e398
mov dword [ebp - 0x40], eax
lea eax, [ebp - 0x40]
push eax
mov eax, 0x1001e23e
mov dword [ebp - 0x44], eax
lea eax, [ebp - 0x44]
push eax
push 0x1001fc80
call fcn.10002c58
mov dword [ebp - 0x48], eax
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x10004649
push ebx
call fcn.100189cb
add esp, 4
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x10004659
push ebx
call fcn.100189cb
add esp, 4
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x10004669
push ebx
call fcn.100189cb
add esp, 4
push VariantClear
push 0
mov eax, dword [ebp - 0x48]
test eax, eax
jne 0x1000467c
mov eax, 0x1001e234
push eax
push 1
mov ebx, 0x9dc
call fcn.10019e90
add esp, 0x10
mov dword [ebp - 0x4c], eax
mov ebx, dword [ebp - 0x48]
test ebx, ebx
je 0x100046a2
push ebx
call fcn.100189cb
add esp, 4
mov eax, dword [ebp - 0x4c]
mov dword [ebp - 0x14], eax
push 1
mov eax, 0x1001e234
mov dword [ebp - 0x3c], eax
lea eax, [ebp - 0x3c]
push eax
mov eax, 0x1001e3a1
mov dword [ebp - 0x40], eax
lea eax, [ebp - 0x40]
push eax
mov eax, 0x1001e23e
mov dword [ebp - 0x44], eax
lea eax, [ebp - 0x44]
push eax
push 0x1001fc80
call fcn.10002c58
mov dword [ebp - 0x48], eax
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x100046eb
push ebx
call fcn.100189cb
add esp, 4
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x100046fb
push ebx
call fcn.100189cb
add esp, 4
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x1000470b
push ebx
call fcn.100189cb
add esp, 4
mov eax, dword [ebp - 0x48]
push eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x1000471f
push ebx
call fcn.100189cb
add esp, 4
pop eax
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x14], 0
je 0x10004763
push dword [ebp - 0x18]
push 0x1001e3aa
push dword [0x1001fc68]
mov ecx, 3
call fcn.10003972
add esp, 0xc
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
push eax
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x1000475f
push ebx
call fcn.100189cb
add esp, 4
pop eax
mov dword [ebp - 0x18], eax
push 0x1001e234
push dword [ebp - 0x18]
call fcn.10002b50
add esp, 8
cmp eax, 0
jne 0x10004788
mov dword [ebp - 0x1c], 0
jmp 0x100047a0
push 0
push dword [ebp - 0x18]
push dword [ebp - 0x18]
call dword [sym.imp.KERNEL32.dll_lstrcpynA]
nop
nop
nop
nop
mov dword [ebp - 0x1c], eax
push 1
mov eax, 0x1001e234
mov dword [ebp - 0x3c], eax
lea eax, [ebp - 0x3c]
push eax
mov eax, 0x1001e3ac
mov dword [ebp - 0x40], eax
lea eax, [ebp - 0x40]
push eax
mov eax, 0x1001e23e
mov dword [ebp - 0x44], eax
lea eax, [ebp - 0x44]
push eax
push 0x1001fc80
call fcn.10002c58
mov dword [ebp - 0x48], eax
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x100047e3
push ebx
call fcn.100189cb
add esp, 4
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x100047f3
push ebx
call fcn.100189cb
add esp, 4
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x10004803
push ebx
call fcn.100189cb
add esp, 4
mov eax, dword [ebp - 0x48]
push eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x10004817
push ebx
call fcn.100189cb
add esp, 4
pop eax
mov dword [ebp - 0x20], eax
push dword [ebp - 0x20]
push 0x1001e3aa
push dword [0x1001fc68]
mov ecx, 3
call fcn.10003972
add esp, 0xc
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
push eax
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x1000484d
push ebx
call fcn.100189cb
add esp, 4
pop eax
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x14], 0
je 0x10004891
push dword [ebp - 0x20]
push 0x1001e3aa
push dword [0x1001fc68]
mov ecx, 3
call fcn.10003972
add esp, 0xc
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
push eax
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x1000488d
push ebx
call fcn.100189cb
add esp, 4
pop eax
mov dword [ebp - 0x20], eax
push 1
mov eax, 0x1001e234
mov dword [ebp - 0x3c], eax
lea eax, [ebp - 0x3c]
push eax
mov eax, 0x1001e3b5
mov dword [ebp - 0x40], eax
lea eax, [ebp - 0x40]
push eax
mov eax, 0x1001e23e
mov dword [ebp - 0x44], eax
lea eax, [ebp - 0x44]
push eax
push 0x1001fc80
call fcn.10002c58
mov dword [ebp - 0x48], eax
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x100048d4
push ebx
call fcn.100189cb
add esp, 4
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x100048e4
push ebx
call fcn.100189cb
add esp, 4
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x100048f4
push ebx
call fcn.100189cb
add esp, 4
mov eax, dword [ebp - 0x48]
push eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x10004908
push ebx
call fcn.100189cb
add esp, 4
pop eax
mov dword [ebp - 0x28], eax
push 0x1001e234
push dword [ebp - 0x28]
call fcn.10002b50
add esp, 8
cmp eax, 0
jne 0x10004931
mov dword [ebp - 0x2c], 0
jmp 0x10004979
push dword [ebp - 0x28]
push 0x1001e3be
mov ecx, 2
call fcn.10003972
add esp, 8
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x3c]
push eax
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x1000495d
push ebx
call fcn.100189cb
add esp, 4
pop eax
mov dword [ebp - 0x28], eax
push 0
push dword [ebp - 0x28]
push dword [ebp - 0x28]
call dword [sym.imp.KERNEL32.dll_lstrcpynA]
nop
nop
nop
nop
mov dword [ebp - 0x2c], eax
push 1
mov eax, 0x1001e234
mov dword [ebp - 0x3c], eax
lea eax, [ebp - 0x3c]
push eax
mov eax, 0x1001e3c0
mov dword [ebp - 0x40], eax
lea eax, [ebp - 0x40]
push eax
mov eax, 0x1001e23e
mov dword [ebp - 0x44], eax
lea eax, [ebp - 0x44]
push eax
push 0x1001fc80
call fcn.10002c58
mov dword [ebp - 0x48], eax
mov ebx, dword [ebp - 0x44]
test ebx, ebx
je 0x100049bc
push ebx
call fcn.100189cb
add esp, 4
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x100049cc
push ebx
call fcn.100189cb
add esp, 4
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x100049dc
push ebx
call fcn.100189cb
add esp, 4
mov eax, dword [ebp - 0x48]
push eax
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x100049f0
push ebx
call fcn.100189cb
add esp, 4
pop eax
mov dword [ebp - 0x30], eax
push 0x1001e234
push dword [ebp - 0x30]
call fcn.10002b50
add esp, 8
cmp eax, 0
je 0x10004aff
lea eax, [ebp - 0x24]
push eax
mov eax, str.SoftwareMicrosoftWindows_NTCurrentVersionAppCompatFlagsLayers
mov dword [ebp - 0x3c], eax
lea eax, [ebp - 0x3c]
push eax
push SysReAllocString
call fcn.10004dff
mov dword [ebp - 0x40], eax
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x10004a3a
push ebx
call fcn.100189cb
add esp, 4
mov eax, dword [ebp - 0x30]
push eax
push dword [ebp - 0x40]
call fcn.10002b50
add esp, 8
cmp eax, 0
mov eax, 0
setne al
mov dword [ebp - 0x44], eax
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x10004a67
push ebx
call fcn.100189cb
add esp, 4
cmp dword [ebp - 0x44], 0
je 0x10004aff
lea eax, [ebp - 0x30]
push eax
lea eax, [ebp - 0x24]
push eax
mov eax, str.SoftwareMicrosoftWindows_NTCurrentVersionAppCompatFlagsLayers
mov dword [ebp - 0x3c], eax
lea eax, [ebp - 0x3c]
push eax
push SysReAllocString
call fcn.10004f73
mov dword [ebp - 0x40], eax
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x10004aa2
push ebx
call fcn.100189cb
add esp, 4
cmp dword [ebp - 0x40], 0
jne 0x10004aff
push 1
mov eax, 0x1001e25f
mov dword [ebp - 0x3c], eax
lea eax, [ebp - 0x3c]
push eax
push 1
push 0x10
mov eax, 0x1001e40c
mov dword [ebp - 0x40], eax
lea eax, [ebp - 0x40]
push eax
push 0x1001fc90
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x108]
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x10004aef
push ebx
call fcn.100189cb
add esp, 4
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x10004aff
push ebx
call fcn.100189cb
add esp, 4
mov ebx, dword [ebp - 0x34]
mov dword [ebp - 0x3c], ebx
mov ebx, dword [ebp - 0x3c]
mov dword [ebx], 0x44
push dword [ebp - 0x38]
mov eax, dword [ebp - 0x34]
push eax
push 0x44
call fcn.100189c5
add esp, 4
mov edi, eax
pop ebx
push eax
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x3c], eax
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov word [edi], ax
add edi, 2
mov eax, dword [ebx]
add ebx, 4
mov word [edi], ax
add edi, 2
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
push dword [ebp - 0x1c]
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x2c]
push dword [ebp - 0x20]
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
nop
nop
nop
nop
push eax
mov ebx, dword [ebp - 0x3c]
push ebx
mov edi, dword [ebp - 0x40]
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov ax, word [ebx]
add ebx, 2
mov dword [edi], eax
add edi, 4
mov ax, word [ebx]
add ebx, 2
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
mov eax, dword [ebx]
add ebx, 4
mov dword [edi], eax
add edi, 4
call fcn.100189cb
add esp, 4
pop eax
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0
jne 0x10004d3a
push 1
mov eax, 0x1001e25f
mov dword [ebp - 0x3c], eax
lea eax, [ebp - 0x3c]
push eax
push 1
push 0x10
mov eax, 0x1001e455
mov dword [ebp - 0x40], eax
lea eax, [ebp - 0x40]
push eax
push 0x1001fc90
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x108]
mov ebx, dword [ebp - 0x40]
test ebx, ebx
je 0x10004d25
push ebx
call fcn.100189cb
add esp, 4
mov ebx, dword [ebp - 0x3c]
test ebx, ebx
je 0x10004d35
push ebx
call fcn.100189cb
add esp, 4
jmp 0x10004d53
push 1
push 1
push 0x1001fc90
mov eax, dword [esp]
mov eax, dword [eax]
mov eax, dword [eax]
call dword [eax + 0x19c]
mov ebx, dword [ebp - 4]
test ebx, ebx
je 0x10004d63
push ebx
call fcn.100189cb
add esp, 4
mov ebx, dword [ebp - 8]
test ebx, ebx
je 0x10004d73
push ebx
call fcn.100189cb
add esp, 4
mov ebx, dword [ebp - 0xc]
test ebx, ebx
je 0x10004d83
push ebx
call fcn.100189cb
add esp, 4
mov ebx, dword [ebp - 0x10]
test ebx, ebx
je 0x10004d93
push ebx
call fcn.100189cb
add esp, 4
mov ebx, dword [ebp - 0x18]
test ebx, ebx
je 0x10004da3
push ebx
call fcn.100189cb
add esp, 4
mov ebx, dword [ebp - 0x20]
test ebx, ebx
je 0x10004db3
push ebx
call fcn.100189cb
add esp, 4
mov ebx, dword [ebp - 0x24]
test ebx, ebx
je 0x10004dc3
push ebx
call fcn.100189cb
add esp, 4
mov ebx, dword [ebp - 0x28]
test ebx, ebx
je 0x10004dd3
push ebx
call fcn.100189cb
add esp, 4
mov ebx, dword [ebp - 0x30]
test ebx, ebx
je 0x10004de3
push ebx
call fcn.100189cb
add esp, 4
mov ebx, dword [ebp - 0x34]
push ebx
call fcn.100189cb
add esp, 4
mov ebx, dword [ebp - 0x38]
push ebx
call fcn.100189cb
add esp, 4
mov esp, ebp
pop ebp
ret