Function at 0x1000791a
Capabilities:
Contain obfuscated stackstrings
Get file attributes

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x320
push ebx
push esi
mov esi, dword [sym.imp.KERNEL32.dll_ResetEvent]
push edi
xor ebx, ebx
push ebx
call esi
test eax, eax
mov edi, dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
je 0x1000793e
push ebx
call edi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
mov byte [ebp - 0x214], 0x30
mov byte [ebp - 0x213], 0x61
mov byte [ebp - 0x212], 0x63
mov byte [ebp - 0x211], 0x34
mov byte [ebp - 0x210], 0x66
call esi
test eax, eax
je 0x1000797d
push ebx
call edi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
mov byte [ebp - 0x20f], 0x36
mov byte [ebp - 0x20e], 0x39
mov byte [ebp - 0x20d], 0x62
mov byte [ebp - 0x20c], 0x2d
mov byte [ebp - 0x20b], 0x36
mov byte [ebp - 0x20a], 0x63
mov byte [ebp - 0x209], 0x33
mov byte [ebp - 0x208], 0x66
call esi
test eax, eax
je 0x100079d1
push ebx
call edi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
mov byte [ebp - 0x207], 0x2d
mov byte [ebp - 0x206], 0x34
mov byte [ebp - 0x205], 0x30
mov byte [ebp - 0x204], 0x66
mov byte [ebp - 0x203], 0x38
mov byte [ebp - 0x202], 0x2d
mov byte [ebp - 0x201], 0x39
mov byte [ebp - 0x200], 0x34
mov byte [ebp - 0x1ff], 0x34
mov byte [ebp - 0x1fe], 0x66
mov byte [ebp - 0x1fd], 0x2d
call esi
test eax, eax
je 0x10007a3a
push ebx
call edi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
mov byte [ebp - 0x1fc], 0x39
mov byte [ebp - 0x1fb], 0x37
mov byte [ebp - 0x1fa], 0x39
mov byte [ebp - 0x1f9], 0x31
call esi
test eax, eax
je 0x10007a72
push ebx
call edi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
mov byte [ebp - 0x1f8], 0x36
mov byte [ebp - 0x1f7], 0x32
mov byte [ebp - 0x1f6], 0x61
mov byte [ebp - 0x1f5], 0x31
mov byte [ebp - 0x1f4], 0x66
mov byte [ebp - 0x1f3], 0x35
mov byte [ebp - 0x1f2], 0x65
mov byte [ebp - 0x1f1], 0x62
mov byte [ebp - 0x1f0], bl
call esi
test eax, eax
je 0x10007acc
push ebx
call edi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
lea eax, [ebp - 0x214]
push eax
push ebx
call fcn.10006828
cmp eax, ebx
pop ecx
pop ecx
mov dword [ebp - 0xc], eax
je 0x10007e08
push 0xffffffffffffffff
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push ebx
call esi
test eax, eax
je 0x10007b0b
push ebx
call edi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push dword [ebp + 8]
xor eax, eax
cmp byte [ebp + 0x10], bl
sete al
inc eax
mov dword [ebp - 0x320], eax
lea eax, [ebp - 0x318]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov eax, dword [ebp + 0xc]
push ebx
mov dword [ebp - 0x31c], eax
call esi
test eax, eax
je 0x10007b4f
push ebx
call edi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
mov byte [ebp - 0x110], 0x65
mov byte [ebp - 0x10f], 0x62
mov byte [ebp - 0x10e], 0x39
mov byte [ebp - 0x10d], 0x62
call esi
test eax, eax
je 0x10007b87
push ebx
call edi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
mov byte [ebp - 0x10c], 0x61
mov byte [ebp - 0x10b], 0x31
mov byte [ebp - 0x10a], 0x65
mov byte [ebp - 0x109], 0x30
call esi
test eax, eax
je 0x10007bbf
push ebx
call edi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
mov byte [ebp - 0x108], 0x2d
mov byte [ebp - 0x107], 0x64
call esi
test eax, eax
je 0x10007be9
push ebx
call edi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
mov byte [ebp - 0x106], 0x65
mov byte [ebp - 0x105], 0x38
mov byte [ebp - 0x104], 0x34
mov byte [ebp - 0x103], 0x2d
call esi
test eax, eax
je 0x10007c21
push ebx
call edi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
mov byte [ebp - 0x102], 0x34
mov byte [ebp - 0x101], 0x30
mov byte [ebp - 0x100], 0x31
mov byte [ebp - 0xff], 0x37
mov byte [ebp - 0xfe], 0x2d
mov byte [ebp - 0xfd], 0x62
call esi
test eax, eax
je 0x10007c67
push ebx
call edi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
mov byte [ebp - 0xfc], 0x30
mov byte [ebp - 0xfb], 0x35
mov byte [ebp - 0xfa], 0x36
mov byte [ebp - 0xf9], 0x2d
call esi
test eax, eax
je 0x10007c9f
push ebx
call edi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
mov byte [ebp - 0xf8], 0x34
mov byte [ebp - 0xf7], 0x63
mov byte [ebp - 0xf6], 0x61
mov byte [ebp - 0xf5], 0x62
mov byte [ebp - 0xf4], 0x61
mov byte [ebp - 0xf3], 0x62
call esi
test eax, eax
je 0x10007ce5
push ebx
call edi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
mov byte [ebp - 0xf2], 0x30
mov byte [ebp - 0xf1], 0x32
mov byte [ebp - 0xf0], 0x65
mov byte [ebp - 0xef], 0x37
call esi
test eax, eax
je 0x10007d1d
push ebx
call edi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
lea eax, [ebp - 0x110]
push eax
mov byte [ebp - 0xee], 0x61
mov byte [ebp - 0xed], 0x34
mov byte [ebp - 0xec], bl
call fcn.100067d2
pop ecx
push ebx
mov dword [ebp - 8], eax
call esi
test eax, eax
je 0x10007d5d
push ebx
call edi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
lea eax, [ebp - 0x320]
push eax
call fcn.100075b0
cmp dword [ebp - 8], ebx
pop ecx
mov byte [ebp - 1], al
je 0x10007dbe
push ebx
call esi
test eax, eax
je 0x10007d8e
push ebx
call edi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
cmp byte [ebp - 1], bl
je 0x10007db5
cmp byte [ebp + 0x14], bl
je 0x10007db5
push 0xffffffffffffffff
push dword [ebp - 8]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push dword [ebp - 8]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push ebx
call esi
test eax, eax
je 0x10007dc8
push ebx
call edi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push dword [ebp - 0xc]
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
push dword [ebp - 0xc]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push ebx
call esi
test eax, eax
je 0x10007df6
push ebx
call edi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
push ebx
call edi
push ebx
call esi
pop edi
pop esi
pop ebx
leave
ret