Function at 0x104a52e
Capabilities:
Delete file

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x3dc
mov eax, dword [0x10cd598]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0xc]
push ebx
xor ebx, ebx
push esi
mov esi, dword [ebp + 8]
mov dword [ebp - 0x3ac], eax
mov eax, dword [ebp + 0x10]
push edi
mov dword [ebp - 0x348], eax
mov dword [ebp - 0x354], ebx
mov dword [ebp - 0x36c], ebx
mov dword [ebp - 0x370], ebx
cmp dword [0x10cf1f4], ebx
jne 0x104a581
mov dword [ebp - 0x310], ebx
cmp eax, ebx
jne 0x104a58b
mov dword [ebp - 0x310], 1
mov eax, dword [0x10cf204]
push 0x88
mov dword [ebp - 0x3c4], eax
lea eax, [ebp - 0x30c]
push ebx
push eax
mov dword [ebp - 0x364], ebx
mov dword [ebp - 0x32c], ebx
mov dword [ebp - 0x344], ebx
mov dword [ebp - 0x39c], ebx
mov dword [ebp - 0x328], ebx
mov dword [ebp - 0x374], ebx
mov dword [ebp - 0x358], ebx
mov dword [ebp - 0x34c], ebx
mov dword [ebp - 0x340], ebx
mov dword [ebp - 0x324], ebx
mov dword [ebp - 0x33c], ebx
mov dword [ebp - 0x350], ebx
mov dword [ebp - 0x398], ebx
mov dword [ebp - 0x330], ebx
mov dword [ebp - 0x35c], ebx
mov dword [ebp - 0x3b0], ebx
mov dword [ebp - 0x368], ebx
mov dword [ebp - 0x360], ebx
call sub.msvcrt.dll_memset
add esp, 0xc
push 7
pop ecx
xor eax, eax
lea edi, [ebp - 0x390]
rep stosd dword es:[edi], eax
or dword [ebp - 0x390], 0xffffffff
lea eax, [ebp - 0x354]
push eax
push esi
mov dword [ebp - 0x31c], ebx
call fcn.01049a70
mov esi, eax
cmp esi, ebx
je 0x104a656
push 1
push esi
push 0xe11013e
call fcn.01089403
jmp 0x104b723
lea eax, [ebp - 0x3ac]
push eax
push 0x104
lea eax, [ebp - 0x284]
push eax
push ebx
push dword [ebp - 0x3ac]
push ebx
push ebx
call fcn.0102fcf4
mov esi, eax
cmp esi, ebx
je 0x104a688
push esi
push 0xe1b013e
jmp 0x104b71e
lea eax, [ebp - 0x3d4]
push eax
lea eax, [ebp - 0x390]
push eax
push dword [ebp - 0x354]
call fcn.0109ae94
mov esi, eax
cmp esi, ebx
je 0x104a6b2
push esi
push 0xe1e013e
jmp 0x104b71e
push 0xf0000000
push 1
push 0x100aed8
push ebx
lea eax, [ebp - 0x364]
push eax
call dword [sym.imp.ADVAPI32.dll_CryptAcquireContextW]
test eax, eax
jne 0x104a6e2
call fcn.0108edc3
mov esi, eax
push esi
push 0xe28013e
jmp 0x104b71e
push dword [ebp - 0x310]
lea eax, [ebp - 0x390]
push 0x100b964
push 0x100b944
push eax
call fcn.01046b00
mov esi, eax
cmp esi, ebx
je 0x104a70f
push esi
push 0xe33013e
jmp 0x104b71e
lea eax, [ebp - 0x394]
push eax
push 0
push dword [ebp - 0x310]
mov ebx, 0x100b92c
push 1
push 1
push ebx
mov edi, 0x100b90c
push edi
lea eax, [ebp - 0x390]
push eax
call fcn.010469da
mov esi, eax
test esi, esi
je 0x104a74b
push esi
push 0xe41013e
jmp 0x104b71e
lea eax, [ebp - 0x3a4]
push eax
push 0
push dword [ebp - 0x310]
lea eax, [ebp - 0x390]
push 1
push 1
push 0x100b8ec
push edi
push eax
call fcn.010469da
mov esi, eax
test esi, esi
je 0x104a781
push esi
push 0xe4c013e
jmp 0x104b71e
and dword [ebp - 0x318], 0
mov eax, dword [ebp - 0x3a4]
dec eax
dec eax
push 0x40
pop esi
je 0x104a886
dec eax
je 0x104a7cb
mov eax, 0x100b8ec
push eax
push eax
push 0x98b
call fcn.01088aa0
push eax
push 0x100b8c4
call fcn.01099014
add esp, 0x10
mov esi, 0x8007000d
push esi
push 0xe88013e
jmp 0x104b71e
cmp dword [ebp - 0x394], 0x80
mov dword [ebp - 0x314], 0x20
je 0x104a80a
push ebx
push 0x98b
call fcn.01088aa0
push eax
push 0x100b8a8
call fcn.01099014
add esp, 0xc
mov esi, 0x8007000d
push esi
push 0xe6f013e
jmp 0x104b71e
lea eax, [ebp - 0x3d8]
push eax
push 0xe0000102
push dword [ebp - 0x310]
lea eax, [ebp - 0x390]
push 1
push 1
push 0x100b894
push edi
push eax
call fcn.010469da
test eax, eax
je 0x104a87e
push eax
push eax
push 0xe7a013e
call fcn.01089403
mov ebx, dword [ebp - 0x310]
lea eax, [ebp - 0x3c8]
push eax
lea eax, [ebp - 0x370]
push eax
push ebx
push 0x100b888
push edi
lea eax, [ebp - 0x390]
push eax
call fcn.01046cae
mov esi, eax
test esi, esi
je 0x104a91b
push esi
push 0xea9013e
jmp 0x104b71e
mov dword [ebp - 0x314], esi
jmp 0x104a842
cmp dword [ebp - 0x394], 0x28
mov dword [ebp - 0x314], 0x10
jne 0x104a8a5
mov dword [ebp - 0x318], 1
jmp 0x104a8b1
cmp dword [ebp - 0x394], esi
jne 0x104b6f9
lea eax, [ebp - 0x3b8]
push eax
push 0
push dword [ebp - 0x310]
lea eax, [ebp - 0x390]
push 1
push 1
push 0x100b87c
push edi
push eax
call fcn.010469da
mov esi, eax
test esi, esi
je 0x104a8e7
push esi
push 0xe96013e
jmp 0x104b71e
cmp dword [ebp - 0x3b8], 3
je 0x104a842
push 0x98b
call fcn.01088aa0
push eax
push 0x100b860
call fcn.01099014
pop ecx
pop ecx
mov esi, 0x8007000d
push esi
push 0xe9e013e
jmp 0x104b71e
lea eax, [ebp - 0x36c]
push eax
push 0
push ebx
push 0x100b84c
push edi
lea eax, [ebp - 0x390]
push eax
call fcn.01046a70
mov esi, eax
test esi, esi
je 0x104a948
push esi
push 0xeb2013e
jmp 0x104b71e
lea eax, [ebp - 0x3b8]
push eax
push 0
push ebx
push 1
push 1
push 0x100b838
push edi
lea eax, [ebp - 0x390]
push eax
call fcn.010469da
test eax, eax
je 0x104a977
push eax
push 0xebd013e
call fcn.010893e6
lea eax, [ebp - 0x30c]
push eax
push 0
push dword [ebp - 0x36c]
push dword [ebp - 0x3ac]
push dword [ebp - 0x364]
push dword [ebp - 0x314]
call fcn.01049595
mov esi, eax
test esi, esi
je 0x104a9ae
push esi
push 0xecd013e
jmp 0x104b71e
push dword [ebp - 0x3c8]
lea eax, [ebp - 0x30c]
push dword [ebp - 0x370]
push eax
call fcn.010463b9
mov esi, eax
test esi, esi
je 0x104a9f1
push esi
push 0xed4013e
call fcn.010893e6
cmp dword [0x10cf1f0], 2
jl 0x104b723
cmp dword [ebp - 0x314], 0x40
jne 0x104b723
cmp dword [0x10cf1f4], 0
jne 0x104aa08
test ebx, ebx
jne 0x104aa08
mov dword [0x10cf204], 1
call fcn.010460a8
cmp dword [ebp - 0x3a4], 2
je 0x104aa23
cmp dword [ebp - 0x314], 0x40
jne 0x104b1c3
lea eax, [ebp - 0x3a0]
push eax
lea eax, [ebp - 0x32c]
push eax
mov esi, 0xe0000102
push esi
lea eax, [ebp - 0x30c]
push eax
mov ebx, 0x100b820
push ebx
mov edi, 0x100b7fc
push edi
lea eax, [ebp - 0x390]
push eax
call fcn.0104a144
test eax, eax
je 0x104aa79
cmp dword [ebp - 0x314], 0x40
mov ecx, 0x100b7b8
je 0x104aa6d
mov ecx, 0x100b770
push eax
push 0xefa013e
push ecx
call fcn.01089421
push 0x1004208
call fcn.01099014
cmp dword [ebp - 0x310], 0
pop ecx
je 0x104aaa5
push 0x100ad58
call fcn.01099014
push edi
push 0x100b1e4
call fcn.01099014
add esp, 0xc
push ebx
push 0x1005a14
call fcn.01099014
cmp dword [ebp - 0x32c], 0
pop ecx
pop ecx
je 0x104aafd
push dword [ebp - 0x3a0]
push dword [ebp - 0x32c]
call fcn.01046d8f
push 0xffffffffffffffff
push dword [ebp - 0x3a0]
push dword [ebp - 0x32c]
call fcn.01045424
mov esi, eax
test esi, esi
je 0x104aaf0
push esi
push 0xf08013e
jmp 0x104b71e
push 0x1004208
call fcn.01099014
pop ecx
xor esi, esi
lea eax, [ebp - 0x39c]
push eax
lea eax, [ebp - 0x344]
push eax
push esi
lea eax, [ebp - 0x30c]
push eax
mov esi, 0x100b768
push esi
push edi
lea eax, [ebp - 0x390]
push eax
call fcn.0104a144
test eax, eax
je 0x104ab49
cmp dword [ebp - 0x314], 0x40
mov ecx, 0x100b734
je 0x104ab3d
mov ecx, 0x100b700
push eax
push 0xf1b013e
push ecx
call fcn.01089421
cmp dword [ebp - 0x310], 0
je 0x104ab61
push esi
push edi
push 0x100b6e8
call fcn.01099014
add esp, 0xc
cmp dword [ebp - 0x32c], 0
je 0x104abc6
cmp dword [ebp - 0x344], 0
je 0x104abc6
push 2
push 0x2400
push dword [ebp - 0x39c]
push dword [ebp - 0x344]
push dword [ebp - 0x3a0]
push dword [ebp - 0x32c]
push 0x100b6d8
push 0x98f
call fcn.01047e72
push eax
push dword [ebp - 0x310]
push dword [ebp - 0x348]
call fcn.010472e3
mov esi, eax
xor edi, edi
cmp esi, edi
je 0x104abc8
push esi
push 0xf32013e
jmp 0x104b71e
xor edi, edi
lea eax, [ebp - 0x3c0]
push eax
push edi
push dword [ebp - 0x310]
lea eax, [ebp - 0x390]
push 1
push 1
push 0x100b6c4
push 0x100b6a8
push eax
call fcn.010469da
mov esi, eax
cmp esi, edi
je 0x104ac01
push esi
push 0xf41013e
jmp 0x104b71e
cmp dword [ebp - 0x318], edi
je 0x104ac15
mov dword [ebp - 0x334], 0x100b684
jmp 0x104ac32
cmp dword [ebp - 0x3a4], 2
mov dword [ebp - 0x334], 0x100b650
je 0x104ac32
mov dword [ebp - 0x334], 0x100b628
cmp dword [ebp - 0x3c0], edi
jbe 0x104aeb6
mov dword [ebp - 0x320], 1
cmp dword [ebp - 0x318], edi
je 0x104ac58
mov dword [ebp - 0x338], ebx
jmp 0x104ac61
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x338], eax
cmp dword [ebp - 0x324], edi
je 0x104ac7b
push dword [ebp - 0x324]
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov dword [ebp - 0x324], edi
cmp dword [ebp - 0x328], edi
je 0x104ac95
push dword [ebp - 0x328]
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov dword [ebp - 0x328], edi
push dword [ebp - 0x320]
lea eax, [ebp - 0x2c]
push 0x100b618
push 0x26
push eax
call fcn.01032700
add esp, 0x10
lea eax, [ebp - 0x3b4]
push eax
lea eax, [ebp - 0x324]
push eax
push edi
lea eax, [ebp - 0x30c]
push eax
push dword [ebp - 0x338]
lea eax, [ebp - 0x390]
push dword [ebp - 0x334]
push eax
call fcn.0104a144
mov esi, eax
cmp esi, edi
jne 0x104aefb
push 0x1004208
call fcn.01099014
pop ecx
cmp dword [ebp - 0x310], edi
je 0x104ad04
push 0x100ad58
call fcn.01099014
pop ecx
push dword [ebp - 0x338]
push dword [ebp - 0x334]
push 0x100b6e8
call fcn.01099014
add esp, 0xc
push dword [ebp - 0x3b4]
push dword [ebp - 0x324]
call fcn.01046d8f
push 0xffffffffffffffff
push dword [ebp - 0x3b4]
push dword [ebp - 0x324]
call fcn.01045424
mov esi, eax
cmp esi, edi
jne 0x104af06
push dword [ebp - 0x320]
lea eax, [ebp - 0x50]
push 0x100b60c
push 0x24
push eax
call fcn.01032700
add esp, 0x10
lea eax, [ebp - 0x374]
push eax
lea eax, [ebp - 0x328]
push eax
push edi
lea eax, [ebp - 0x30c]
push eax
lea eax, [ebp - 0x50]
push eax
push 0x100b6a8
lea eax, [ebp - 0x390]
push eax
call fcn.0104a144
mov esi, eax
cmp esi, edi
jne 0x104af11
push 0x1004208
call fcn.01099014
pop ecx
cmp dword [ebp - 0x310], edi
je 0x104adc2
lea eax, [ebp - 0x50]
push eax
push 0x100b6a8
push 0x100b6e8
call fcn.01099014
add esp, 0xc
cmp dword [0x10cf1f4], edi
je 0x104ade0
push dword [ebp - 0x374]
push dword [ebp - 0x328]
push 0x1804
call fcn.0103c434
push 1
push 0xa400
push dword [ebp - 0x374]
push dword [ebp - 0x328]
push dword [ebp - 0x3b4]
push dword [ebp - 0x324]
push 0x100b5f8
push 0x990
call fcn.01047e72
push eax
push dword [ebp - 0x310]
push dword [ebp - 0x348]
call fcn.010472e3
mov esi, eax
cmp esi, edi
jne 0x104af1c
push dword [ebp - 0x320]
lea eax, [ebp - 0x2c]
push 0x100b618
push 0x26
push eax
call fcn.01032700
add esp, 0x10
push edi
push dword [ebp - 0x310]
lea eax, [ebp - 0x2c]
push edi
push 1
push eax
push 0x100b628
lea eax, [ebp - 0x390]
push eax
call fcn.01046bf0
mov esi, eax
cmp esi, edi
jne 0x104af27
lea eax, [ebp - 0x3dc]
push eax
push edi
push dword [ebp - 0x310]
lea eax, [ebp - 0x2c]
push 1
push 2
push eax
push 0x100b628
lea eax, [ebp - 0x390]
push eax
call fcn.010469da
mov esi, eax
cmp esi, edi
jne 0x104af32
inc dword [ebp - 0x320]
mov eax, dword [ebp - 0x320]
dec eax
cmp eax, dword [ebp - 0x3c0]
jb 0x104ac48
cmp dword [ebp - 0x318], edi
jne 0x104afa3
lea eax, [ebp - 0x3bc]
push eax
lea eax, [ebp - 0x358]
push eax
push edi
lea eax, [ebp - 0x30c]
push eax
push ebx
push 0x100b684
lea eax, [ebp - 0x390]
push eax
call fcn.0104a144
mov esi, eax
cmp esi, edi
je 0x104af3d
push esi
push 0xfc1013e
jmp 0x104b71e
push esi
push 0xf66013e
jmp 0x104b71e
push esi
push 0xf77013e
jmp 0x104b71e
push esi
push 0xf82013e
jmp 0x104b71e
push esi
push 0xf97013e
jmp 0x104b71e
push esi
push 0xfa6013e
jmp 0x104b71e
push esi
push 0xfb1013e
jmp 0x104b71e
push 0x1004208
call fcn.01099014
pop ecx
cmp dword [ebp - 0x310], edi
je 0x104af5b
push 0x100ad58
call fcn.01099014
pop ecx
push ebx
push 0x100b684
push 0x100b6e8
call fcn.01099014
add esp, 0xc
push dword [ebp - 0x3bc]
push dword [ebp - 0x358]
call fcn.01046d8f
push 0xffffffffffffffff
push dword [ebp - 0x3bc]
push dword [ebp - 0x358]
call fcn.01045424
mov esi, eax
cmp esi, edi
je 0x104afa3
push esi
push 0xfcf013e
jmp 0x104b71e
lea eax, [ebp - 0x338]
push eax
lea eax, [ebp - 0x34c]
push eax
push 0
lea eax, [ebp - 0x30c]
push eax
push ebx
mov edi, 0x1003e60
push edi
lea eax, [ebp - 0x390]
push eax
call fcn.0104a144
mov esi, eax
test esi, esi
je 0x104afde
push esi
push 0xfdd013e
jmp 0x104b71e
push 0x1004208
call fcn.01099014
cmp dword [ebp - 0x310], 0
pop ecx
je 0x104affd
push 0x100ad58
call fcn.01099014
pop ecx
push ebx
push edi
push 0x100b6e8
call fcn.01099014
add esp, 0xc
push dword [ebp - 0x338]
push dword [ebp - 0x34c]
call fcn.01046d8f
push 0xffffffffffffffff
push dword [ebp - 0x338]
push dword [ebp - 0x34c]
call fcn.01045424
mov esi, eax
test esi, esi
je 0x104b041
push esi
push 0xfeb013e
jmp 0x104b71e
push dword [ebp - 0x338]
push dword [ebp - 0x34c]
call fcn.01047404
test eax, eax
je 0x104b061
push eax
push 0xfee013e
call fcn.010893e6
cmp dword [ebp - 0x318], 0
je 0x104b12c
lea eax, [ebp - 0x334]
push eax
lea eax, [ebp - 0x340]
push eax
push 0
lea eax, [ebp - 0x30c]
push eax
push ebx
mov edi, 0x100b5e8
push edi
lea eax, [ebp - 0x390]
push eax
call fcn.0104a144
mov esi, eax
test esi, esi
je 0x104b0a9
push esi
push 0xffd013e
jmp 0x104b71e
push 0x1004208
call fcn.01099014
cmp dword [ebp - 0x310], 0
pop ecx
je 0x104b0c8
push 0x100ad58
call fcn.01099014
pop ecx
push ebx
push edi
push 0x100b6e8
call fcn.01099014
add esp, 0xc
push dword [ebp - 0x334]
push dword [ebp - 0x340]
call fcn.01046d8f
push 0xffffffffffffffff
push dword [ebp - 0x334]
push dword [ebp - 0x340]
call fcn.01045424
mov esi, eax
test esi, esi
je 0x104b10c
push esi
push 0x100b013e
jmp 0x104b71e
push dword [ebp - 0x334]
push dword [ebp - 0x340]
call fcn.01047404
test eax, eax
je 0x104b12c
push eax
push 0x100e013e
call fcn.010893e6
lea eax, [ebp - 0x360]
push eax
push 0
lea eax, [ebp - 0x30c]
push eax
mov ebx, 0x100b5cc
push ebx
mov edi, 0x100b5a4
push edi
lea eax, [ebp - 0x390]
push eax
call fcn.0104a33f
mov esi, eax
test esi, esi
je 0x104b165
push esi
push 0x101b013e
jmp 0x104b71e
push dword [ebp - 0x360]
push ebx
push edi
push 0x100ae40
call fcn.01099014
add esp, 0x10
lea eax, [ebp - 0x3d0]
push eax
push 0
lea eax, [ebp - 0x30c]
push eax
mov ebx, 0x100b590
push ebx
push edi
lea eax, [ebp - 0x390]
push eax
call fcn.0104a3bd
mov esi, eax
test esi, esi
je 0x104b1ae
push esi
push 0x102a013e
jmp 0x104b71e
push dword [ebp - 0x3d0]
push ebx
push edi
push 0x100b56c
call fcn.01099014
add esp, 0x10
cmp dword [ebp - 0x318], 0
mov esi, 0xe0000102
je 0x104b1fd
cmp dword [ebp - 0x310], 0
je 0x104b6ea
lea eax, [ebp - 0x390]
push eax
call fcn.01048d39
test eax, eax
je 0x104b6ea
push eax
push 0x1037013e
jmp 0x104b6e5
lea eax, [ebp - 0x318]
push eax
push esi
push dword [ebp - 0x310]
mov edi, 0x100b55c
push 1
push 1
push 0x100b6c4
push edi
lea eax, [ebp - 0x390]
push eax
call fcn.010469da
xor ebx, ebx
cmp eax, ebx
je 0x104b257
cmp dword [ebp - 0x314], 0x40
mov dword [ebp - 0x318], ebx
mov dword [ebp - 0x31c], esi
mov ecx, 0x100b534
je 0x104b24b
mov ecx, 0x100b50c
push eax
push 0x1052013e
push ecx
call fcn.01089421
lea eax, [ebp - 0x320]
push eax
lea eax, [ebp - 0x33c]
push eax
push esi
lea eax, [ebp - 0x30c]
push eax
mov esi, 0x100b4e4
push esi
push edi
lea eax, [ebp - 0x390]
push eax
call fcn.0104a144
cmp eax, ebx
je 0x104b2a3
cmp dword [ebp - 0x314], 0x40
mov ecx, 0x100b4a8
je 0x104b297
mov ecx, 0x100b46c
push eax
push 0x1062013e
push ecx
call fcn.01089421
push 0x1004208
call fcn.01099014
pop ecx
cmp dword [ebp - 0x310], ebx
je 0x104b2ce
push 0x100ad58
call fcn.01099014
push edi
push 0x100b1e4
call fcn.01099014
add esp, 0xc
push esi
push 0x1005a14
call fcn.01099014
pop ecx
pop ecx
cmp dword [ebp - 0x33c], ebx
je 0x104b3e7
push dword [ebp - 0x320]
push dword [ebp - 0x33c]
call fcn.01046d8f
push 0xffffffffffffffff
push dword [ebp - 0x320]
push dword [ebp - 0x33c]
call fcn.01045424
mov esi, eax
cmp esi, ebx
je 0x104b31c
push esi
push 0x1070013e
jmp 0x104b71e
lea eax, [ebp - 0x398]
push eax
lea eax, [ebp - 0x350]
push eax
push dword [ebp - 0x31c]
lea eax, [ebp - 0x30c]
push eax
mov ebx, 0x100b454
push ebx
push edi
lea eax, [ebp - 0x390]
push eax
call fcn.0104a144
mov esi, eax
test esi, esi
je 0x104b35b
push esi
push 0x107a013e
jmp 0x104b71e
cmp dword [ebp - 0x310], 0
je 0x104b373
push ebx
push edi
push 0x100b6e8
call fcn.01099014
add esp, 0xc
push 2
push 0x2400
push 1
push dword [ebp - 0x398]
push dword [ebp - 0x350]
push dword [ebp - 0x320]
push dword [ebp - 0x33c]
push 0x100b6d8
push 0x98f
call fcn.01047e72
push eax
push dword [ebp - 0x310]
push dword [ebp - 0x348]
call fcn.01047010
mov esi, eax
test esi, esi
je 0x104b3e7
cmp dword [ebp - 0x314], 0x40
mov eax, 0x100b428
je 0x104b3ce
mov eax, 0x100b3fc
push esi
push 0x1093013e
push eax
call fcn.01089421
cmp dword [ebp - 0x348], 0
jne 0x104b723
xor ebx, ebx
cmp dword [ebp - 0x310], ebx
je 0x104b404
push 0x100b6a8
push edi
push 0x100b6e8
call fcn.01099014
add esp, 0xc
lea eax, [ebp - 0x3b0]
push eax
lea eax, [ebp - 0x35c]
push eax
push dword [ebp - 0x31c]
lea eax, [ebp - 0x30c]
push eax
push 0x100b6a8
push edi
lea eax, [ebp - 0x390]
push eax
call fcn.0104a144
mov esi, eax
cmp dword [ebp - 0x318], ebx
je 0x104b44a
cmp esi, ebx
je 0x104b44a
push esi
push 0x10a9013e
jmp 0x104b71e
xor eax, eax
cmp dword [ebp - 0x318], ebx
jbe 0x104b5a9
mov ebx, 0x100b650
inc eax
push eax
push 0x100b3e8
mov dword [ebp - 0x3cc], eax
lea eax, [ebp - 0x7c]
push 0x2a
push eax
call fcn.01032700
add esp, 0x10
lea eax, [ebp - 0x3a8]
push eax
lea eax, [ebp - 0x330]
push eax
push dword [ebp - 0x31c]
lea eax, [ebp - 0x30c]
push eax
lea eax, [ebp - 0x7c]
push eax
push ebx
lea eax, [ebp - 0x390]
push eax
call fcn.0104a144
mov esi, eax
test esi, esi
jne 0x104b6bf
push 0x1004208
call fcn.01099014
pop ecx
cmp dword [ebp - 0x310], esi
je 0x104b4cc
push 0x100ad58
call fcn.01099014
pop ecx
lea eax, [ebp - 0x7c]
push eax
push ebx
push 0x100b6e8
call fcn.01099014
add esp, 0xc
push dword [ebp - 0x3a8]
push dword [ebp - 0x330]
call fcn.01046d8f
push 0xffffffffffffffff
push dword [ebp - 0x3a8]
push dword [ebp - 0x330]
call fcn.01045424
mov esi, eax
test esi, esi
jne 0x104b6c7
push 1
push 0xa400
push dword [ebp - 0x318]
push dword [ebp - 0x3b0]
push dword [ebp - 0x35c]
push dword [ebp - 0x3a8]
push dword [ebp - 0x330]
push 0x100b5f8
push 0x990
call fcn.01047e72
push eax
push dword [ebp - 0x310]
push dword [ebp - 0x348]
call fcn.01047010
mov esi, eax
test esi, esi
je 0x104b584
cmp dword [ebp - 0x314], 0x40
mov eax, 0x100b3b8
je 0x104b56b
mov eax, 0x100b388
push esi
push 0x10df013e
push eax
call fcn.01089421
cmp dword [ebp - 0x348], 0
jne 0x104b723
push dword [ebp - 0x330]
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov eax, dword [ebp - 0x3cc]
and dword [ebp - 0x330], 0
cmp eax, dword [ebp - 0x318]
jb 0x104b45d
cmp dword [ebp - 0x314], 0x40
mov ebx, 0x100b348
mov esi, 0x100b308
mov eax, ebx
je 0x104b5c0
mov eax, esi
push dword [ebp - 0x31c]
lea ecx, [ebp - 0x30c]
push ecx
push dword [ebp - 0x310]
push eax
push 0x100b2dc
push edi
lea eax, [ebp - 0x390]
push eax
call fcn.0104a436
test eax, eax
je 0x104b603
cmp dword [ebp - 0x314], 0x40
mov ecx, ebx
je 0x104b5f7
mov ecx, esi
push eax
push 0x10fa013e
push ecx
call fcn.01089421
lea eax, [ebp - 0x31c]
push eax
lea eax, [ebp - 0x368]
push eax
push dword [ebp - 0x31c]
lea eax, [ebp - 0x30c]
push eax
mov esi, 0x100b2ac
push esi
push edi
lea eax, [ebp - 0x390]
push eax
call fcn.0104a144
test eax, eax
je 0x104b654
cmp dword [ebp - 0x314], 0x40
mov ecx, 0x100b268
je 0x104b648
mov ecx, 0x100b220
push eax
push 0x110a013e
push ecx
call fcn.01089421
push 0x1004208
call fcn.01099014
cmp dword [ebp - 0x310], 0
pop ecx
je 0x104b680
push 0x100ad58
call fcn.01099014
push edi
push 0x100b1e4
call fcn.01099014
add esp, 0xc
push esi
push 0x1005a14
call fcn.01099014
mov edi, dword [ebp - 0x368]
pop ecx
pop ecx
test edi, edi
je 0x104b6ea
push dword [ebp - 0x31c]
push edi
call fcn.01046d8f
push 0xffffffffffffffff
push dword [ebp - 0x31c]
push edi
call fcn.01045424
mov esi, eax
test esi, esi
je 0x104b6cf
push esi
push 0x1118013e
jmp 0x104b71e
push esi
push 0x10bc013e
jmp 0x104b71e
push esi
push 0x10ca013e
jmp 0x104b71e
push dword [ebp - 0x31c]
push edi
call fcn.01047404
test eax, eax
je 0x104b6ea
push eax
push 0x111b013e
call fcn.010893e6
push 0x1004208
call fcn.01099014
pop ecx
xor esi, esi
jmp 0x104b723
push ebx
push ebx
push 0x98b
call fcn.01088aa0
push eax
push 0x100b1f4
call fcn.01099014
add esp, 0x10
mov esi, 0x8007000d
push esi
push 0xe62013e
call fcn.010893e6
mov ecx, 0x208
lea eax, [ebp - 0x284]
mov byte [eax], 0
inc eax
dec ecx
jne 0x104b72e
mov edi, dword [sym.imp.KERNEL32.dll_LocalFree]
cmp dword [ebp - 0x36c], ecx
je 0x104b74b
push dword [ebp - 0x36c]
call edi
xor ebx, ebx
cmp dword [ebp - 0x32c], ebx
je 0x104b75d
push dword [ebp - 0x32c]
call edi
cmp dword [ebp - 0x328], ebx
je 0x104b784
mov ecx, dword [ebp - 0x374]
mov eax, dword [ebp - 0x328]
cmp ecx, ebx
je 0x104b77c
mov byte [eax], 0
inc eax
dec ecx
jne 0x104b775
push dword [ebp - 0x328]
call edi
cmp dword [ebp - 0x344], ebx
je 0x104b7ab
mov ecx, dword [ebp - 0x39c]
mov eax, dword [ebp - 0x344]
cmp ecx, ebx
je 0x104b7a3
mov byte [eax], 0
inc eax
dec ecx
jne 0x104b79c
push dword [ebp - 0x344]
call edi
cmp dword [ebp - 0x358], ebx
je 0x104b7bb
push dword [ebp - 0x358]
call edi
cmp dword [ebp - 0x34c], ebx
je 0x104b7cb
push dword [ebp - 0x34c]
call edi
cmp dword [ebp - 0x340], ebx
je 0x104b7db
push dword [ebp - 0x340]
call edi
cmp dword [ebp - 0x324], ebx
je 0x104b7eb
push dword [ebp - 0x324]
call edi
cmp dword [ebp - 0x33c], ebx
je 0x104b7fb
push dword [ebp - 0x33c]
call edi
cmp dword [ebp - 0x350], ebx
je 0x104b822
mov ecx, dword [ebp - 0x398]
mov eax, dword [ebp - 0x350]
cmp ecx, ebx
je 0x104b81a
mov byte [eax], 0
inc eax
dec ecx
jne 0x104b813
push dword [ebp - 0x350]
call edi
cmp dword [ebp - 0x330], ebx
je 0x104b832
push dword [ebp - 0x330]
call edi
cmp dword [ebp - 0x35c], ebx
je 0x104b859
mov ecx, dword [ebp - 0x3b0]
mov eax, dword [ebp - 0x35c]
cmp ecx, ebx
je 0x104b851
mov byte [eax], 0
inc eax
dec ecx
jne 0x104b84a
push dword [ebp - 0x35c]
call edi
cmp dword [ebp - 0x368], ebx
je 0x104b869
push dword [ebp - 0x368]
call edi
cmp dword [ebp - 0x360], ebx
je 0x104b879
push dword [ebp - 0x360]
call edi
cmp dword [ebp - 0x370], ebx
je 0x104b889
push dword [ebp - 0x370]
call edi
cmp dword [ebp - 0x308], ebx
je 0x104b89d
push dword [ebp - 0x308]
call dword [sym.imp.ADVAPI32.dll_CryptDestroyKey]
lea eax, [ebp - 0x304]
push eax
call fcn.010bac30
cmp dword [ebp - 0x364], ebx
je 0x104b8be
push ebx
push dword [ebp - 0x364]
call dword [sym.imp.ADVAPI32.dll_CryptReleaseContext]
cmp dword [ebp - 0x390], 0xffffffff
je 0x104b8d3
lea eax, [ebp - 0x390]
push eax
call fcn.0109b06c
cmp dword [ebp - 0x354], ebx
je 0x104b8f7
cmp dword [0x10cf210], ebx
jne 0x104b8ef
push dword [ebp - 0x354]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push dword [ebp - 0x354]
call edi
mov eax, dword [ebp - 0x3c4]
mov ecx, dword [ebp - 4]
pop edi
mov dword [0x10cf204], eax
mov eax, esi
pop esi
xor ecx, ebp
pop ebx
call fcn.01074bd5
leave
ret 0xc