Function at 0x100cc490
Capabilities:
Create thread
Resume thread

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
mov eax, dword fs:[0]
push 0xffffffffffffffff
push 0x1011d38a
push eax
mov dword fs:[0], esp
mov eax, 0x1128
push ebx
call fcn.100718b0
mov eax, dword [ebx + 0xc]
mov dword [0x101558f8], eax
mov eax, dword [ebx + 0x14]
mov dword [ebp - 0x20], 0
mov byte [0x10151e6a], 0
mov dword [0x101558fc], eax
push esi
push edi
test eax, eax
je 0x100cc56f
mov esi, dword [eax]
mov edi, dword [sym.imp.KERNEL32.dll_lstrcpyW]
test esi, esi
je 0x100cc51c
lea eax, [esi + 4]
push eax
lea eax, [ebp - 0x938]
push eax
call edi
mov eax, dword [0x101558fc]
mov ecx, dword [esi]
push esi
mov dword [eax], ecx
call dword [sym.imp.KERNEL32.dll_GlobalFree]
mov eax, dword [0x101558fc]
test eax, eax
je 0x100cc56f
mov esi, dword [eax]
test esi, esi
je 0x100cc548
lea eax, [esi + 4]
push eax
lea eax, [ebp - 0x608]
push eax
call edi
mov eax, dword [0x101558fc]
mov ecx, dword [esi]
push esi
mov dword [eax], ecx
call dword [sym.imp.KERNEL32.dll_GlobalFree]
mov eax, dword [0x101558fc]
test eax, eax
je 0x100cc56f
mov esi, dword [eax]
test esi, esi
je 0x100cc56f
lea eax, [esi + 4]
push eax
lea eax, [ebp - 0x1138]
push eax
call edi
mov eax, dword [0x101558fc]
mov ecx, dword [esi]
push esi
mov dword [eax], ecx
call dword [sym.imp.KERNEL32.dll_GlobalFree]
mov esi, dword [0x101558b0]
test esi, esi
je 0x100cc5ed
mov eax, dword [esi]
test eax, eax
je 0x100cc5a5
mov eax, dword [eax + 0x10]
cmp eax, 0xffffffff
je 0x100cc5a5
push 0xffffffffffffffff
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
jne 0x100cc59f
mov ecx, dword [esi]
test ecx, ecx
je 0x100cc59f
call fcn.10030400
mov esi, dword [0x101558b0]
test esi, esi
je 0x100cc5ed
mov edi, dword [esi]
test edi, edi
je 0x100cc5e2
mov eax, dword [edi + 0x10]
cmp eax, 0xffffffff
je 0x100cc5c5
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [edi + 0x10], 0xffffffff
mov byte [edi + 8], 0
mov dword [edi + 0xc], 0
push 0x18
push dword [esi]
call fcn.100703b3
add esp, 8
mov dword [esi], 0
push 4
push esi
call fcn.100703b3
add esp, 8
push 0xc
xor eax, eax
mov dword [ebp - 0xac], 0
push str.last_logined
lea ecx, [ebp - 0xbc]
mov dword [ebp - 0xa8], 7
mov word [ebp - 0xbc], ax
call fcn.1001a860
push 7
xor eax, eax
mov dword [ebp - 0x94], 0
push str.UserSet
lea ecx, [ebp - 0xa4]
mov dword [ebp - 0x90], 7
mov word [ebp - 0xa4], ax
call fcn.1001a860
xor eax, eax
mov dword [ebp - 0x7c], 0
lea ecx, [ebp - 0x608]
mov dword [ebp - 0x78], 7
mov word [ebp - 0x8c], ax
lea edx, [ecx + 2]
nop dword [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x100cc670
sub ecx, edx
lea eax, [ebp - 0x608]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x8c]
call fcn.1001a860
lea eax, [ebp - 0xbc]
push eax
lea eax, [ebp - 0xa4]
push eax
lea edx, [ebp - 0x8c]
lea ecx, [ebp - 0x294]
call fcn.100cf0f0
mov edx, dword [ebp - 0x78]
add esp, 8
cmp edx, 8
jb 0x100cc6f1
mov ecx, dword [ebp - 0x8c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x100cc6e7
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100cd87f
push edx
push ecx
call fcn.100703b3
add esp, 8
mov edx, dword [ebp - 0x90]
xor eax, eax
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x78], 7
mov word [ebp - 0x8c], ax
cmp edx, 8
jb 0x100cc748
mov ecx, dword [ebp - 0xa4]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x100cc73e
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100cd884
push edx
push ecx
call fcn.100703b3
add esp, 8
mov edx, dword [ebp - 0xa8]
xor eax, eax
mov dword [ebp - 0x94], 0
mov dword [ebp - 0x90], 7
mov word [ebp - 0xa4], ax
cmp edx, 8
jb 0x100cc7a5
mov ecx, dword [ebp - 0xbc]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x100cc79b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100cd889
push edx
push ecx
call fcn.100703b3
add esp, 8
xor eax, eax
mov dword [ebp - 0xac], 0
push 6
push str.is_vip
lea ecx, [ebp - 0x74]
mov dword [ebp - 0xa8], 7
mov word [ebp - 0xbc], ax
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x60], 7
mov word [ebp - 0x74], ax
call fcn.1001a860
push 7
xor eax, eax
mov dword [ebp - 0xdc], 0
push str.UserSet
lea ecx, [ebp - 0xec]
mov dword [ebp - 0xd8], 7
mov word [ebp - 0xec], ax
call fcn.1001a860
xor eax, eax
mov dword [ebp - 0xc4], 0
lea ecx, [ebp - 0x608]
mov dword [ebp - 0xc0], 7
mov word [ebp - 0xd4], ax
lea edx, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x100cc834
sub ecx, edx
lea eax, [ebp - 0x608]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0xd4]
call fcn.1001a860
lea eax, [ebp - 0x74]
push eax
lea eax, [ebp - 0xec]
push eax
lea edx, [ebp - 0xd4]
lea ecx, [ebp - 0x3d8]
call fcn.100cf0f0
mov edx, dword [ebp - 0xc0]
add esp, 8
cmp edx, 8
jb 0x100cc8b5
mov ecx, dword [ebp - 0xd4]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x100cc8ab
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100cd88e
push edx
push ecx
call fcn.100703b3
add esp, 8
mov edx, dword [ebp - 0xd8]
xor eax, eax
mov dword [ebp - 0xc4], 0
mov dword [ebp - 0xc0], 7
mov word [ebp - 0xd4], ax
cmp edx, 8
jb 0x100cc912
mov ecx, dword [ebp - 0xec]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x100cc908
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100cd893
push edx
push ecx
call fcn.100703b3
add esp, 8
mov edx, dword [ebp - 0x60]
xor eax, eax
mov dword [ebp - 0xdc], 0
mov dword [ebp - 0xd8], 7
mov word [ebp - 0xec], ax
cmp edx, 8
jb 0x100cc969
mov ecx, dword [ebp - 0x74]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x100cc95f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100cd898
push edx
push ecx
call fcn.100703b3
add esp, 8
xor eax, eax
mov dword [ebp - 0x64], 0
push 0x11
push str.last_logined_user
lea ecx, [ebp - 0x134]
mov dword [ebp - 0x60], 7
mov word [ebp - 0x74], ax
mov dword [ebp - 0x124], eax
mov dword [ebp - 0x120], 7
mov word [ebp - 0x134], ax
call fcn.1001a860
push 7
xor eax, eax
mov dword [ebp - 0x10c], 0
push str.UserSet
lea ecx, [ebp - 0x11c]
mov dword [ebp - 0x108], 7
mov word [ebp - 0x11c], ax
call fcn.1001a860
xor eax, eax
mov dword [ebp - 0xf4], 0
lea ecx, [ebp - 0x608]
mov dword [ebp - 0xf0], 7
mov word [ebp - 0x104], ax
lea edx, [ecx + 2]
nop dword [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x100cca00
sub ecx, edx
lea eax, [ebp - 0x608]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x104]
call fcn.1001a860
lea eax, [ebp - 0x134]
push eax
lea eax, [ebp - 0x11c]
push eax
lea edx, [ebp - 0x104]
lea ecx, [ebp - 0x378]
call fcn.100cf0f0
mov edx, dword [ebp - 0xf0]
add esp, 8
cmp edx, 8
jb 0x100cca84
mov ecx, dword [ebp - 0x104]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x100cca7a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100cd89d
push edx
push ecx
call fcn.100703b3
add esp, 8
mov edx, dword [ebp - 0x108]
xor eax, eax
mov dword [ebp - 0xf4], 0
mov dword [ebp - 0xf0], 7
mov word [ebp - 0x104], ax
cmp edx, 8
jb 0x100ccae1
mov ecx, dword [ebp - 0x11c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x100ccad7
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100cd8a2
push edx
push ecx
call fcn.100703b3
add esp, 8
mov edx, dword [ebp - 0x120]
xor eax, eax
mov dword [ebp - 0x10c], 0
mov dword [ebp - 0x108], 7
mov word [ebp - 0x11c], ax
cmp edx, 8
jb 0x100ccb3e
mov ecx, dword [ebp - 0x134]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x100ccb34
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100cd8a7
push edx
push ecx
call fcn.100703b3
add esp, 8
mov edi, dword [ebp - 0x284]
xor eax, eax
mov dword [ebp - 0x124], 0
mov dword [ebp - 0x120], 7
mov word [ebp - 0x134], ax
test edi, edi
je 0x100ccbd1
push 1
push 0x101337a4
lea ecx, [ebp - 0x44]
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x30], 7
mov word [ebp - 0x44], ax
call fcn.1001a860
mov eax, dword [ebp - 0x34]
lea edx, [ebp - 0x44]
mov esi, dword [ebp - 0x44]
lea ecx, [ebp - 0x294]
cmp edi, eax
mov dword [ebp - 0x1f0], edi
mov dword [ebp - 0x20], 1
cmovb edi, eax
mov dword [ebp - 0x1ec], eax
cmp dword [ebp - 0x30], 8
push edi
cmovae edx, esi
cmp dword [ebp - 0x280], 8
cmovae ecx, dword [ebp - 0x294]
call fcn.100d4190
add esp, 4
test eax, eax
je 0x100ccbd4
mov byte [ebp - 0x15], 0
jmp 0x100ccbd8
mov esi, dword [ebp - 0x44]
mov byte [ebp - 0x15], 1
test byte [ebp - 0x20], 1
je 0x100ccc29
mov eax, dword [ebp - 0x30]
cmp eax, 8
jb 0x100ccc15
lea ecx, [eax*2 + 2]
mov eax, esi
cmp ecx, 0x1000
jb 0x100ccc0b
mov esi, dword [esi - 4]
add ecx, 0x23
sub eax, esi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100cd8ac
push ecx
push esi
call fcn.100703b3
add esp, 8
xor eax, eax
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 7
mov word [ebp - 0x44], ax
cmp byte [ebp - 0x15], 0
je 0x100ccc4b
push 0
push 0
mov byte [0x10151e69], 0
mov byte [0x10151e6a], 1
call fcn.100d1da0
jmp 0x100cd84b
push 4
xor eax, eax
mov dword [ebp - 0x308], 0
push str.http
lea ecx, [ebp - 0x318]
mov dword [ebp - 0x304], 7
mov word [ebp - 0x318], ax
call fcn.1001a860
xor eax, eax
mov dword [ebp - 0x2f0], 0
sub esp, 0x18
mov dword [ebp - 0x2ec], 7
mov edx, esp
mov word [ebp - 0x300], ax
lea ecx, [ebp - 0x1138]
mov dword [ebp - 0x2e8], eax
mov dword [ebp - 0x2d4], eax
lea esi, [ecx + 2]
mov dword [ebp - 0x2d0], 7
mov dword [edx + 0x10], eax
mov dword [edx + 0x14], 7
mov word [ebp - 0x2e4], ax
mov dword [ebp - 0x2bc], eax
mov dword [ebp - 0x2b8], 7
mov word [ebp - 0x2cc], ax
mov word [edx], ax
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x100ccce6
sub ecx, esi
lea eax, [ebp - 0x1138]
sar ecx, 1
push ecx
push eax
mov ecx, edx
call fcn.1001a860
lea ecx, [ebp - 0x318]
call fcn.100fc1d0
test al, al
jne 0x100ccd28
push 0
push 0
mov byte [0x10151e6a], 1
call fcn.100d1da0
jmp 0x100cd840
xor eax, eax
mov dword [ebp - 0x26c], 0
lea ecx, [ebp - 0x938]
mov dword [ebp - 0x268], 7
mov word [ebp - 0x27c], ax
lea edx, [ecx + 2]
mov dword [ebp - 0x2a0], eax
mov dword [ebp - 0x29c], 7
mov word [ebp - 0x2b0], ax
mov dword [ebp - 0x254], eax
mov dword [ebp - 0x250], 7
mov word [ebp - 0x264], ax
mov dword [ebp - 0x1b8], eax
mov dword [ebp - 0x1b4], 7
mov word [ebp - 0x1c8], ax
mov dword [ebp - 0x23c], eax
mov dword [ebp - 0x238], 7
mov word [ebp - 0x24c], ax
mov dword [ebp - 0x1a0], eax
mov dword [ebp - 0x19c], 7
mov word [ebp - 0x1b0], ax
mov dword [ebp - 0x13c], eax
mov dword [ebp - 0x138], 7
mov word [ebp - 0x14c], ax
nop dword [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x100ccde0
sub ecx, edx
lea eax, [ebp - 0x938]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x14c]
call fcn.1001a860
lea eax, [ebp - 0x1b0]
push eax
lea eax, [ebp - 0x24c]
push eax
lea eax, [ebp - 0x1c8]
push eax
lea eax, [ebp - 0x264]
push eax
lea eax, [ebp - 0x2b0]
push eax
lea edx, [ebp - 0x27c]
lea ecx, [ebp - 0x14c]
call fcn.100cf2c0
mov edx, dword [ebp - 0x138]
add esp, 0x14
cmp edx, 8
jb 0x100cce79
mov ecx, dword [ebp - 0x14c]
lea edx, [edx*2 + 2]
mov eax, ecx
cmp edx, 0x1000
jb 0x100cce6f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100cd8b1
push edx
push ecx
call fcn.100703b3
add esp, 8
xor eax, eax
mov dword [ebp - 0x13c], 0
push eax
sub esp, 0x18
mov word [ebp - 0x14c], ax
mov eax, esp
mov dword [ebp - 0x138], 7
push ecx
push eax
lea ecx, [ebp - 0x318]
call fcn.100fbfa0
add esp, 4
lea ecx, [ebp - 0x180]
call fcn.100e9be0
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x24], 0
call fcn.1001ecb0
mov dword [ebp - 0x28], eax
lea ecx, [ebp - 0x318]
lea eax, [ebp - 0x28]
push eax
call fcn.100fbb30
mov ecx, dword [ebp - 0x28]
mov eax, dword [ecx]
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x1c], ecx
cmp eax, ecx
je 0x100cd0f0
add eax, 0x10
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x20], eax
lea ecx, [eax + 0x18]
mov edx, SysReAllocString
mov dword [ebp - 0x14], ecx
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
cmp dword [ecx + 0x14], 8
mov edi, dword [ecx + 0x10]
mov dword [ebp - 0x1c], edi
jb 0x100ccf24
mov ecx, dword [ecx]
mov dword [ebp - 0x14], ecx
cmp edi, 8
jae 0x100ccf3e
movups xmm0, xmmword [ecx]
movups xmmword [esi], xmm0
mov dword [esi + 0x10], edi
mov dword [esi + 0x14], 7
jmp 0x100cd008
or edi, 7
mov dword [ebp - 0x1e8], SysReAllocString
cmp edi, 0x7ffffffe
mov dword [ebp - 0x204], edi
mov dword [ebp - 0x1f4], 8
cmova edi, edx
mov dword [ebp - 0x1f8], SysReAllocString
mov dword [ebp - 0x1fc], SysReAllocString
mov dword [ebp - 0x200], SysReAllocString
lea eax, [edi + 1]
lea ecx, [eax + eax]
cmp eax, 0x7fffffff
jbe 0x100ccf94
or ecx, 0xffffffff
jmp 0x100ccf9c
cmp ecx, 0x1000
jb 0x100ccfc5
lea eax, [ecx + 0x23]
cmp eax, ecx
mov ecx, 0xffffffff
cmovbe eax, ecx
push eax
call fcn.100703c6
add esp, 4
test eax, eax
je 0x100cd87f
lea ecx, [eax + 0x23]
and ecx, 0xffffffe0
mov dword [ecx - 4], eax
jmp 0x100ccfd8
test ecx, ecx
je 0x100ccfd6
push ecx
call fcn.100703c6
add esp, 4
mov ecx, eax
jmp 0x100ccfd8
xor ecx, ecx
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x298], ecx
mov dword [esi], ecx
lea eax, [eax*2 + 2]
push eax
push dword [ebp - 0x14]
push ecx
call fcn.10073ca0
mov eax, dword [ebp - 0x1c]
add esp, 0xc
mov dword [esi + 0x10], eax
mov edx, SysReAllocString
mov eax, dword [ebp - 0x20]
mov dword [esi + 0x14], edi
sub esp, 0x18
mov edi, esp
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 0
cmp dword [eax + 0x14], 8
mov ecx, dword [eax + 0x10]
mov dword [ebp - 0x1c], ecx
jb 0x100cd02c
mov eax, dword [eax]
mov dword [ebp - 0x20], eax
cmp ecx, 8
jae 0x100cd046
movups xmm0, xmmword [eax]
movups xmmword [edi], xmm0
mov dword [edi + 0x10], ecx
mov dword [edi + 0x14], 7
jmp 0x100cd0d0
mov esi, ecx
mov dword [ebp - 0x1cc], SysReAllocString
or esi, 7
mov dword [ebp - 0x1d0], 8
cmp esi, 0x7ffffffe
mov dword [ebp - 0x1e0], esi
mov dword [ebp - 0x1d4], SysReAllocString
cmova esi, edx
mov dword [ebp - 0x1d8], SysReAllocString
mov dword [ebp - 0x1dc], SysReAllocString
lea eax, [esi + 1]
lea ecx, [eax + eax]
cmp eax, 0x7fffffff
mov eax, 0xffffffff
cmova ecx, eax
push ecx
call fcn.1001c130
mov ecx, dword [ebp - 0x1c]
add esp, 4
mov dword [ebp - 0x1e4], eax
mov dword [edi], eax
lea ecx, [ecx*2 + 2]
push ecx
push dword [ebp - 0x20]
push eax
call fcn.10073ca0
mov eax, dword [ebp - 0x1c]
add esp, 0xc
mov dword [edi + 0x10], eax
mov dword [edi + 0x14], esi
push 0
lea ecx, [ebp - 0x180]
call fcn.100e9830
lea ecx, [ebp - 0x2c]
call fcn.1001e870
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x2c]
jmp 0x100ccee4
lea ecx, [ebp - 0x1c8]
call fcn.100d1b70
sub esp, 0x18
lea eax, [ebp - 0x27c]
mov ecx, esp
push eax
call fcn.1001cdf0
sub esp, 0x18
xor eax, eax
mov ecx, esp
push 4
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
push 0x101337a8
mov word [ecx], ax
call fcn.1001a860
push 0
lea ecx, [ebp - 0x180]
call fcn.100e9830
sub esp, 0x18
lea eax, [ebp - 0x264]
mov ecx, esp
push eax
call fcn.1001cdf0
sub esp, 0x18
xor eax, eax
mov ecx, esp
push 7
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
push str.channel
mov word [ecx], ax
call fcn.1001a860
push 0
lea ecx, [ebp - 0x180]
call fcn.100e9830
sub esp, 0x18
lea eax, [ebp - 0x1c8]
mov ecx, esp
push eax
call fcn.1001cdf0
sub esp, 0x18
xor eax, eax
mov ecx, esp
push 0xa
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
push str.subchannel
mov word [ecx], ax
call fcn.1001a860
push 0
lea ecx, [ebp - 0x180]
call fcn.100e9830
sub esp, 0x18
lea eax, [ebp - 0x24c]
mov ecx, esp
push eax
call fcn.1001cdf0
sub esp, 0x18
xor eax, eax
mov ecx, esp
push 0xf
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
push str.softinstalltime
mov word [ecx], ax
call fcn.1001a860
push 0
lea ecx, [ebp - 0x180]
call fcn.100e9830
cmp dword [ebp - 0x1a0], 0
sete al
test al, al
jne 0x100cd253
sub esp, 0x18
lea eax, [ebp - 0x1b0]
mov ecx, esp
push eax
call fcn.1001cdf0
sub esp, 0x18
xor eax, eax
mov ecx, esp
push 4
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
push 0x101335b8
mov word [ecx], ax
call fcn.1001a860
push 0
lea ecx, [ebp - 0x180]
call fcn.100e9830
sub esp, 0x18
mov ecx, esp
call fcn.100d5120
sub esp, 0x18
xor eax, eax
mov ecx, esp
push 0x11
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
push str.systeminstalltime
mov word [ecx], ax
call fcn.1001a860
push 0
lea ecx, [ebp - 0x180]
call fcn.100e9830
xor eax, eax
mov dword [ebp - 0x338], 0
mov word [ebp - 0x348], ax
mov dword [ebp - 0x4c], eax
mov word [ebp - 0x5c], ax
lea eax, [ebp - 0x390]
push eax
mov dword [ebp - 0x334], 7
mov dword [ebp - 0x48], 7
call fcn.100dbd60
mov esi, eax
lea eax, [ebp - 0x5c]
cmp eax, esi
je 0x100cd2f9
mov ecx, eax
call fcn.1001a0c0
movups xmm0, xmmword [esi]
xor eax, eax
movups xmmword [ebp - 0x5c], xmm0
movq xmm0, qword [esi + 0x10]
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 7
movq qword [ebp - 0x4c], xmm0
mov word [esi], ax
lea ecx, [ebp - 0x390]
call fcn.1001a000
mov edx, str.__r_t_n
lea ecx, [ebp - 0x5c]
call fcn.100d39b0
mov edx, str.__r_t_n
lea ecx, [ebp - 0x5c]
call fcn.100d38f0
sub esp, 0x18
lea eax, [ebp - 0x5c]
mov ecx, esp
push eax
call fcn.1001cdf0
sub esp, 0x18
xor eax, eax
mov ecx, esp
push 6
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
push str.diskid
mov word [ecx], ax
call fcn.1001a860
push 0
lea ecx, [ebp - 0x180]
call fcn.100e9830
xor eax, eax
mov dword [ebp - 0x320], 0
lea ecx, [ebp - 0x3fc]
mov dword [ebp - 0x31c], 7
mov word [ebp - 0x330], ax
call fcn.100dde60
sub esp, 0x18
lea ecx, [ebp - 0x3fc]
push esp
call fcn.100dd640
sub esp, 0x18
xor eax, eax
mov ecx, esp
push 3
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
push 0x101336bc
mov word [ecx], ax
call fcn.1001a860
push 0
lea ecx, [ebp - 0x180]
call fcn.100e9830
lea ecx, [ebp - 0x730]
call fcn.100dba10
lea ecx, [ebp - 0x730]
call fcn.100d9c40
movzx esi, word [ebp - 0x624]
sub esp, 0x18
mov ecx, esp
xor eax, eax
push 9
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
push str.osversion
mov word [ecx], ax
call fcn.1001a860
push esi
lea ecx, [ebp - 0x180]
call fcn.100e9aa0
xor eax, eax
cmp byte [ebp - 0x622], al
setne al
sub esp, 0x18
mov ecx, esp
inc eax
mov dword [ebp - 0x14], eax
xor eax, eax
push 5
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
push str.osbit
mov word [ecx], ax
call fcn.1001a860
push dword [ebp - 0x14]
lea ecx, [ebp - 0x180]
call fcn.100e9aa0
call fcn.100dbb70
xor ecx, ecx
test al, al
setne cl
sub esp, 0x18
mov dword [ebp - 0x14], ecx
xor eax, eax
mov ecx, esp
push 3
push 0x101336e4
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
mov word [ecx], ax
call fcn.1001a860
push dword [ebp - 0x14]
lea ecx, [ebp - 0x180]
call fcn.100e9aa0
call fcn.100c6c40
sub esp, 0x18
mov esi, eax
mov ecx, esp
xor eax, eax
push 4
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
push str.safe
mov word [ecx], ax
call fcn.1001a860
push esi
lea ecx, [ebp - 0x180]
call fcn.100e9aa0
call fcn.100d4d00
sub esp, 0x18
mov esi, eax
mov ecx, esp
xor eax, eax
push 2
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
push 0x101336f8
mov word [ecx], ax
call fcn.1001a860
push esi
lea ecx, [ebp - 0x180]
call fcn.100e9aa0
sub esp, 0x18
lea eax, [ebp - 0x378]
mov ecx, esp
push eax
call fcn.1001cdf0
sub esp, 0x18
xor eax, eax
mov ecx, esp
push 8
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
push str.last_uid
mov word [ecx], ax
call fcn.1001a860
push 0
lea ecx, [ebp - 0x180]
call fcn.100e9830
xor eax, eax
mov dword [ebp - 0x20c], 0
lea ecx, [ebp - 0x608]
mov dword [ebp - 0x208], 7
mov word [ebp - 0x21c], ax
lea edx, [ecx + 2]
nop word [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x100cd570
sub ecx, edx
lea eax, [ebp - 0x608]
sar ecx, 1
push ecx
push eax
lea ecx, [ebp - 0x21c]
call fcn.1001a860
lea edx, [ebp - 0x21c]
lea ecx, [ebp - 0x3a8]
call fcn.100e7220
mov edx, eax
lea ecx, [ebp - 0x360]
call fcn.100e7220
lea ecx, [ebp - 0x3a8]
call fcn.1001a000
lea ecx, [ebp - 0x21c]
call fcn.1001a000
push 0x18
xor eax, eax
mov dword [ebp - 0x224], 0
push str.Cacheuninstallunbg.png
lea ecx, [ebp - 0x234]
mov dword [ebp - 0x220], 7
mov word [ebp - 0x234], ax
call fcn.1001a860
lea eax, [ebp - 0x234]
push eax
lea edx, [ebp - 0x360]
lea ecx, [ebp - 0x198]
call fcn.100e74f0
add esp, 4
lea ecx, [ebp - 0x234]
call fcn.1001a000
push 0x30
call fcn.100703c6
mov edi, eax
add esp, 4
xor eax, eax
xor ecx, ecx
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 7
mov word [edi], ax
mov dword [edi + 0x28], eax
lea eax, [ebp - 0x3c0]
mov dword [edi + 0x2c], 7
mov word [edi + 0x18], cx
lea ecx, [ebp - 0x180]
push eax
call fcn.100e9710
mov esi, eax
cmp edi, esi
je 0x100cd68c
mov ecx, edi
call fcn.1001a0c0
movups xmm0, xmmword [esi]
xor eax, eax
movups xmmword [edi], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [edi + 0x10], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 7
mov word [esi], ax
lea ecx, [ebp - 0x3c0]
call fcn.1001a000
lea eax, [ebp - 0x198]
lea ecx, [edi + 0x18]
cmp ecx, eax
je 0x100cd6be
cmp dword [ebp - 0x184], 8
push dword [ebp - 0x188]
cmovae eax, dword [ebp - 0x198]
push eax
call fcn.1001a860
push 4
call fcn.100703c6
add esp, 4
mov esi, eax
push 0x18
call fcn.100703c6
add esp, 4
mov dword [0x101558b0], esi
mov dword [eax], 0
mov dword [eax + 4], 0
mov dword [eax + 0x10], 0xffffffff
mov byte [eax + 8], 0
mov dword [eax + 0x14], 0
mov dword [eax + 0xc], 0
mov dword [esi], eax
mov dword [eax], edi
mov eax, dword [esi]
mov dword [eax + 4], 0x100cd950
mov ecx, dword [esi]
test ecx, ecx
je 0x100cd76f
cmp dword [ecx + 4], 0
je 0x100cd76f
lea eax, [ecx + 0xc]
push eax
push 4
push ecx
push 0x10030370
push 0
push 0
call fcn.100a11dd
mov ecx, dword [esi]
add esp, 0x18
mov dword [ecx + 0x10], eax
mov eax, dword [esi]
cmp dword [eax + 0x10], 0
jne 0x100cd74e
mov dword [eax + 0x10], 0xffffffff
mov ecx, dword [esi]
call fcn.10030400
jmp 0x100cd76f
mov byte [eax + 8], 1
mov eax, dword [esi]
push dword [eax + 0x10]
call dword [sym.imp.KERNEL32.dll_ResumeThread]
cmp eax, 0xffffffff
jne 0x100cd76f
mov ecx, dword [esi]
call fcn.10030400
mov eax, dword [esi]
mov byte [eax + 8], 0
lea ecx, [ebp - 0x198]
call fcn.1001a000
lea ecx, [ebp - 0x360]
call fcn.1001a000
lea ecx, [ebp - 0x730]
call fcn.100db890
lea ecx, [ebp - 0x3fc]
call fcn.100ddcd0
lea ecx, [ebp - 0x330]
call fcn.1001a000
lea ecx, [ebp - 0x5c]
call fcn.1001a000
lea ecx, [ebp - 0x348]
call fcn.1001a000
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x28]
mov esi, dword [ebp - 0x28]
push dword [esi + 4]
call fcn.1001ecd0
mov eax, dword [ebp - 0x28]
push 0x40
mov dword [eax + 4], esi
mov eax, dword [ebp - 0x28]
mov dword [eax], esi
mov eax, dword [ebp - 0x28]
mov dword [eax + 8], esi
push dword [ebp - 0x28]
mov dword [ebp - 0x24], 0
call fcn.1001a210
add esp, 8
lea ecx, [ebp - 0x180]
call fcn.100e9b40
lea ecx, [ebp - 0x1b0]
call fcn.1001a000
lea ecx, [ebp - 0x24c]
call fcn.1001a000
lea ecx, [ebp - 0x1c8]
call fcn.1001a000
lea ecx, [ebp - 0x264]
call fcn.1001a000
lea ecx, [ebp - 0x2b0]
call fcn.1001a000
lea ecx, [ebp - 0x27c]
call fcn.1001a000
lea ecx, [ebp - 0x318]
call fcn.100fc6e0
lea ecx, [ebp - 0x378]
call fcn.1001a000
lea ecx, [ebp - 0x3d8]
call fcn.1001a000
lea ecx, [ebp - 0x294]
call fcn.1001a000
mov ecx, dword [ebp - 0xc]
pop edi
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
call fcn.1007e0fa
call fcn.1007e0fa
call fcn.1007e0fa
call fcn.1007e0fa
call fcn.1007e0fa
call fcn.1007e0fa
call fcn.1007e0fa
call fcn.1007e0fa
call fcn.1007e0fa
call fcn.1007e0fa
call fcn.1007e0fa
int3