Function at 0x1000acb0
Capabilities:
Delete file
Get file size
Get graphical window text
Read file on windows
Read file via mapping
Write file on windows

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1007cb52
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
mov eax, 0x1bd0
push ebx
call fcn.100793d0
push esi
mov esi, ecx
mov dword [ebp - 0x5c], 0
cmp byte [esi + 0x48], 0
push edi
lea edi, [esi + 0x48]
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x38], edi
je 0x1000d329
cmp byte [0x1008dfd0], 0
je 0x1000d329
push 0x101
lea eax, [ebp - 0xbe0]
push 0
push eax
call fcn.10020640
mov eax, dword [esi + 8]
add esi, 8
add esp, 0xc
test eax, eax
je 0x1000ad51
push 0x100
lea ecx, [ebp - 0xbe0]
push ecx
push eax
call dword [sym.imp.USER32.dll_GetWindowTextA]
push str.Please_wait__scanning_for_plugins...
push dword [esi]
call dword [sym.imp.USER32.dll_SetWindowTextA]
push 0
push 0
call fcn.10045bdb
and eax, 0x300
push 0x300
push 0
mov dword [ebp - 0xc4], eax
call fcn.10045bdb
add esp, 0x10
push str.PVSTSCAN
push 0xa879c
push 0
push 4
push 0
push 0xffffffffffffffff
call dword [sym.imp.KERNEL32.dll_CreateFileMappingA]
mov dword [ebp - 0xc0], eax
cmp eax, 0xffffffff
je 0x1000d302
push 0xa879c
push 0
push 0
push 6
push eax
call dword [sym.imp.KERNEL32.dll_MapViewOfFile]
mov ecx, dword [ebp - 0x2c]
mov dword [ecx + 0xc], eax
test eax, eax
je 0x1000d2f6
mov edx, str.Plugin_Path
lea ecx, [ebp - 0xbc]
call fcn.10006460
mov dword [ebp - 4], 0
mov esi, 0x16c
cmp dword [ebp - 0xac], 0
jne 0x1000aed4
push 0x1000
lea eax, [ebp - 0x1be0]
push 0
push eax
call fcn.10020640
add esp, 0xc
lea eax, [ebp - 0x1be0]
push eax
call fcn.10008d00
test eax, eax
je 0x1000ae24
lea edi, [ebp - 0x1be0]
dec edi
mov al, byte [edi + 1]
lea edi, [edi + 1]
test al, al
jne 0x1000ae11
mov ax, word [0x10086c30]
mov word [edi], ax
mov eax, dword [ebp - 0x2c]
mov edx, esi
mov ecx, 0x48
cmp byte [eax + 0x16c], 0
cmove edx, ecx
add edx, eax
mov esi, edx
nop dword [eax]
mov al, byte [edx]
inc edx
test al, al
jne 0x1000ae40
lea edi, [ebp - 0x1be0]
sub edx, esi
dec edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x1000ae50
mov ecx, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
lea edx, [ebp - 0x1be0]
and ecx, 3
dec edx
rep movsb byte es:[edi], byte [esi]
nop dword [eax]
mov al, byte [edx + 1]
lea edx, [edx + 1]
test al, al
jne 0x1000ae70
mov eax, dword [str.GearVst_]
mov ecx, str.Plugin_Path
mov dword [edx], eax
mov eax, dword [0x10086eb8]
mov dword [edx + 4], eax
mov ax, word [0x10086ebc]
mov word [edx + 8], ax
lea edx, [ebp - 0x1be0]
call fcn.10006170
lea ecx, [ebp - 0x1be0]
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1000aeb0
sub ecx, edx
lea eax, [ebp - 0x1be0]
push ecx
push eax
lea ecx, [ebp - 0xbc]
call fcn.1000f950
mov edi, dword [ebp - 0x38]
mov esi, 0x16c
mov edx, str.Ladspa_Path
lea ecx, [ebp - 0xe0]
call fcn.10006460
mov byte [ebp - 4], 1
cmp dword [ebp - 0xd0], 0
jne 0x1000af3f
mov eax, dword [ebp - 0x2c]
mov ecx, 0x48
cmp byte [eax + 0x16c], 0
cmove esi, ecx
lea ecx, [ebp - 0xe0]
add esi, eax
push esi
call fcn.1000ed30
push str.GearLadspa
lea ecx, [ebp - 0xe0]
call fcn.1000ecc0
cmp dword [ebp - 0xcc], 0xf
lea edx, [ebp - 0xe0]
mov ecx, str.Ladspa_Path
cmova edx, dword [ebp - 0xe0]
call fcn.10006170
cmp dword [ebp - 0xcc], 0xf
lea ecx, [ebp - 0xe0]
mov edx, dword [ebp - 0x2c]
cmova ecx, dword [ebp - 0xe0]
sub edx, ecx
nop dword [eax + eax]
mov al, byte [ecx]
lea ecx, [ecx + 1]
mov byte [edx + ecx + 0x28f], al
test al, al
jne 0x1000af60
cmp dword [ebp - 0xac], 0
je 0x1000d2ca
mov eax, dword [ebp - 0xa8]
lea esi, [ebp - 0xbc]
mov ecx, dword [ebp - 0xbc]
cmp eax, 0xf
cmova esi, ecx
test esi, esi
je 0x1000afcc
mov dl, byte [esi]
test dl, dl
je 0x1000afcc
nop
mov ecx, 0x10086c30
mov al, 0x3b
cmp dl, al
je 0x1000afb5
mov al, byte [ecx + 1]
inc ecx
test al, al
jne 0x1000afa7
jmp 0x1000afb8
mov byte [esi], 0
mov dl, byte [esi + 1]
inc esi
test dl, dl
jne 0x1000afa0
mov eax, dword [ebp - 0xa8]
mov ecx, dword [ebp - 0xbc]
cmp eax, 0xf
lea edx, [ebp - 0xbc]
cmova edx, ecx
mov dword [ebp - 0xa4], edx
test edx, edx
je 0x1000d2ca
push 0x124
lea eax, [ebp - 0x890]
push 0
push eax
call fcn.10020640
add esp, 0xc
xor ecx, ecx
nop
mov al, byte [ecx + 0x1008dfd0]
lea ecx, [ecx + 1]
mov byte [ebp + ecx - 0x891], al
test al, al
jne 0x1000b000
lea ecx, [ebp - 0x890]
dec ecx
nop dword [eax + eax]
mov al, byte [ecx + 1]
lea ecx, [ecx + 1]
test al, al
jne 0x1000b020
mov eax, dword [str.plugins.dat]
push 0
push 0x80
mov dword [ecx], eax
mov eax, dword [0x10086c48]
push 4
push 0
mov dword [ecx + 4], eax
mov eax, dword [0x10086c4c]
push 0
mov dword [ecx + 8], eax
lea eax, [ebp - 0x890]
push 0xc0000000
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov esi, eax
mov dword [ebp - 0x20], esi
cmp esi, 0xffffffff
je 0x1000d2ca
push 0
push esi
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x58], 0
push 0
cmp eax, 8
jb 0x1000b0d1
lea eax, [ebp - 0x18]
push eax
push 4
lea eax, [ebp - 0x54]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_ReadFile]
push 0
lea eax, [ebp - 0x18]
push eax
push 4
lea eax, [ebp - 0x58]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_ReadFile]
cmp dword [ebp - 0x54], 0x50565354
jne 0x1000b0cf
cmp dword [ebp - 0x58], 0x5208
je 0x1000b121
push 0
push 0
push 0
push esi
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
push esi
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
push 0
lea eax, [ebp - 0x18]
mov dword [ebp - 0x54], 0x50565354
push eax
push 4
lea eax, [ebp - 0x54]
mov dword [ebp - 0x58], 0x5208
push eax
push esi
call dword [sym.imp.KERNEL32.dll_WriteFile]
push 0
lea eax, [ebp - 0x18]
push eax
push 4
lea eax, [ebp - 0x58]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov dword [ebp - 0x88], 8
mov ecx, dword [ebp - 0x2c]
lea ecx, [ecx + 0x28]
call fcn.10004470
mov eax, dword [ebp - 0x2c]
mov ecx, dword [eax + 0x3c8]
mov edx, dword [eax + 0x3cc]
cmp ecx, edx
je 0x1000b157
push ecx
call fcn.10010fe0
mov ecx, dword [ebp - 0x2c]
add esp, 4
mov eax, dword [ecx + 0x3c8]
mov dword [ecx + 0x3cc], eax
cmp byte [ebx + 0xc], 0
je 0x1000b77d
push 2
push 0
push 0
push esi
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
lea ecx, [ebp - 0x520]
call fcn.10001340
lea edx, [ebp - 0x520]
mov ecx, edi
sub edx, edi
mov al, byte [ecx]
lea ecx, [ecx + 1]
mov byte [edx + ecx - 1], al
test al, al
jne 0x1000b183
lea ecx, [ebp - 0x520]
dec ecx
mov al, byte [ecx + 1]
lea ecx, [ecx + 1]
test al, al
jne 0x1000b197
mov eax, dword [str.pdx.dll]
mov dword [ecx], eax
mov eax, dword [0x10086edc]
mov dword [ecx + 4], eax
mov ecx, dword [ebp - 0x2c]
push 0
call fcn.100076d0
mov dword [ebp - 0x1c], eax
test eax, eax
je 0x1000b312
lea ecx, [ebp - 0x520]
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1000b1d0
sub ecx, edx
movzx eax, cx
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x2c]
push 0
mov ecx, dword [eax + 0xc]
mov ax, word [ecx + 4]
mov word [ebp - 0x314], ax
mov eax, dword [ecx]
mov dword [ebp - 0x318], eax
lea eax, [ebp - 0x18]
push eax
push 2
lea eax, [ebp - 0x14]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_WriteFile]
push 0
lea eax, [ebp - 0x18]
push eax
movsx eax, word [ebp - 0x14]
push eax
lea eax, [ebp - 0x520]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_WriteFile]
push 0
lea eax, [ebp - 0x18]
push eax
push 4
lea eax, [ebp - 0x318]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_WriteFile]
push 0
lea eax, [ebp - 0x18]
push eax
push 2
lea eax, [ebp - 0x314]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov eax, dword [ebp - 0x2c]
mov esi, dword [eax + 0xc]
add esi, 0xc
mov ecx, esi
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1000b260
sub ecx, edx
movzx eax, cx
push 0
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x18]
push eax
push 2
lea eax, [ebp - 0x14]
push eax
push dword [ebp - 0x20]
call dword [sym.imp.KERNEL32.dll_WriteFile]
push 0
lea eax, [ebp - 0x18]
push eax
movsx eax, word [ebp - 0x14]
push eax
push esi
push dword [ebp - 0x20]
call dword [sym.imp.KERNEL32.dll_WriteFile]
push 0
lea eax, [ebp - 0x18]
add esi, 0x40
push eax
push 4
lea eax, [ebp - 0x1c]
push eax
push dword [ebp - 0x20]
call dword [sym.imp.KERNEL32.dll_WriteFile]
sub dword [ebp - 0x1c], 1
js 0x1000b30f
mov edi, dword [ebp - 0x20]
nop word [eax + eax]
movzx eax, byte [esi]
push 0
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x18]
push eax
push 2
lea eax, [ebp - 0x14]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_WriteFile]
push 0
lea eax, [ebp - 0x18]
inc esi
push eax
movsx eax, word [ebp - 0x14]
push eax
push esi
push edi
call dword [sym.imp.KERNEL32.dll_WriteFile]
movsx eax, word [ebp - 0x14]
push 0
add esi, eax
lea eax, [ebp - 0x18]
push eax
push 4
push esi
push edi
call dword [sym.imp.KERNEL32.dll_WriteFile]
add esi, 4
sub dword [ebp - 0x1c], 1
jns 0x1000b2c0
mov edi, dword [ebp - 0x38]
mov esi, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x2c]
push 1
call fcn.100076d0
mov dword [ebp - 0x1c], eax
test eax, eax
je 0x1000b46f
lea ecx, [ebp - 0x520]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1000b330
sub ecx, edx
movzx eax, cx
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x2c]
push 0
mov ecx, dword [eax + 0xc]
mov ax, word [ecx + 4]
mov word [ebp - 0x314], ax
mov eax, dword [ecx]
mov dword [ebp - 0x318], eax
lea eax, [ebp - 0x18]
push eax
push 2
lea eax, [ebp - 0x14]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_WriteFile]
push 0
lea eax, [ebp - 0x18]
push eax
movsx eax, word [ebp - 0x14]
push eax
lea eax, [ebp - 0x520]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_WriteFile]
push 0
lea eax, [ebp - 0x18]
push eax
push 4
lea eax, [ebp - 0x318]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_WriteFile]
push 0
lea eax, [ebp - 0x18]
push eax
push 2
lea eax, [ebp - 0x314]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov eax, dword [ebp - 0x2c]
mov esi, dword [eax + 0xc]
add esi, 0xc
mov ecx, esi
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1000b3c0
sub ecx, edx
movzx eax, cx
push 0
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x18]
push eax
push 2
lea eax, [ebp - 0x14]
push eax
push dword [ebp - 0x20]
call dword [sym.imp.KERNEL32.dll_WriteFile]
push 0
lea eax, [ebp - 0x18]
push eax
movsx eax, word [ebp - 0x14]
push eax
push esi
push dword [ebp - 0x20]
call dword [sym.imp.KERNEL32.dll_WriteFile]
push 0
lea eax, [ebp - 0x18]
add esi, 0x40
push eax
push 4
lea eax, [ebp - 0x1c]
push eax
push dword [ebp - 0x20]
call dword [sym.imp.KERNEL32.dll_WriteFile]
sub dword [ebp - 0x1c], 1
js 0x1000b46f
mov edi, dword [ebp - 0x20]
nop word [eax + eax]
movzx eax, byte [esi]
push 0
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x18]
push eax
push 2
lea eax, [ebp - 0x14]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_WriteFile]
push 0
lea eax, [ebp - 0x18]
inc esi
push eax
movsx eax, word [ebp - 0x14]
push eax
push esi
push edi
call dword [sym.imp.KERNEL32.dll_WriteFile]
movsx eax, word [ebp - 0x14]
push 0
add esi, eax
lea eax, [ebp - 0x18]
push eax
push 4
push esi
push edi
call dword [sym.imp.KERNEL32.dll_WriteFile]
add esi, 4
sub dword [ebp - 0x1c], 1
jns 0x1000b420
mov edi, dword [ebp - 0x38]
mov esi, dword [ebp - 0x2c]
cmp byte [esi + 0x3bc], 0
je 0x1000b76d
lea ecx, [ebp - 0x520]
sub ecx, esi
mov al, byte [edi]
lea edi, [edi + 1]
mov byte [ecx + edi - 0x49], al
test al, al
jne 0x1000b487
lea ecx, [ebp - 0x520]
dec ecx
nop dword [eax + eax]
mov al, byte [ecx + 1]
lea ecx, [ecx + 1]
test al, al
jne 0x1000b4a0
mov eax, dword [str.bin64pdx.x64.dll]
mov dword [ecx], eax
mov eax, dword [0x10086ee4]
mov dword [ecx + 4], eax
mov eax, dword [0x10086ee8]
mov dword [ecx + 8], eax
mov eax, dword [0x10086eec]
mov dword [ecx + 0xc], eax
mov ax, word [0x10086ef0]
mov word [ecx + 0x10], ax
mov ecx, esi
push 0
call fcn.10007870
mov dword [ebp - 0x1c], eax
test eax, eax
je 0x1000b81a
lea ecx, [ebp - 0x520]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1000b4f0
mov edi, dword [ebp - 0x20]
sub ecx, edx
movzx eax, cx
mov ecx, dword [esi + 0xc]
mov dword [ebp - 0x14], eax
mov eax, 0x2000
push 0
or ax, word [ecx + 4]
mov word [ebp - 0x314], ax
mov eax, dword [ecx]
mov dword [ebp - 0x318], eax
lea eax, [ebp - 0x18]
push eax
push 2
lea eax, [ebp - 0x14]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_WriteFile]
push 0
lea eax, [ebp - 0x18]
push eax
movsx eax, word [ebp - 0x14]
push eax
lea eax, [ebp - 0x520]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_WriteFile]
push 0
lea eax, [ebp - 0x18]
push eax
push 4
lea eax, [ebp - 0x318]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_WriteFile]
push 0
lea eax, [ebp - 0x18]
push eax
push 2
lea eax, [ebp - 0x314]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov esi, dword [esi + 0xc]
add esi, 0xc
mov ecx, esi
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1000b580
sub ecx, edx
movzx eax, cx
push 0
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x18]
push eax
push 2
lea eax, [ebp - 0x14]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_WriteFile]
push 0
lea eax, [ebp - 0x18]
push eax
movsx eax, word [ebp - 0x14]
push eax
push esi
push edi
call dword [sym.imp.KERNEL32.dll_WriteFile]
push 0
lea eax, [ebp - 0x18]
add esi, 0x40
push eax
push 4
lea eax, [ebp - 0x1c]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_WriteFile]
sub dword [ebp - 0x1c], 1
js 0x1000b61d
movzx eax, byte [esi]
push 0
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x18]
push eax
push 2
lea eax, [ebp - 0x14]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_WriteFile]
push 0
lea eax, [ebp - 0x18]
inc esi
push eax
movsx eax, word [ebp - 0x14]
push eax
push esi
push edi
call dword [sym.imp.KERNEL32.dll_WriteFile]
movsx eax, word [ebp - 0x14]
push 0
add esi, eax
lea eax, [ebp - 0x18]
push eax
push 4
push esi
push edi
call dword [sym.imp.KERNEL32.dll_WriteFile]
add esi, 4
sub dword [ebp - 0x1c], 1
jns 0x1000b5d1
mov esi, dword [ebp - 0x2c]
push 1
mov ecx, esi
call fcn.10007870
mov dword [ebp - 0x1c], eax
test eax, eax
je 0x1000b76d
lea ecx, [ebp - 0x520]
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1000b640
sub ecx, edx
movzx eax, cx
mov ecx, dword [esi + 0xc]
mov dword [ebp - 0x14], eax
mov eax, 0x2000
push 0
or ax, word [ecx + 4]
mov word [ebp - 0x314], ax
mov eax, dword [ecx]
mov dword [ebp - 0x318], eax
lea eax, [ebp - 0x18]
push eax
push 2
lea eax, [ebp - 0x14]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_WriteFile]
push 0
lea eax, [ebp - 0x18]
push eax
movsx eax, word [ebp - 0x14]
push eax
lea eax, [ebp - 0x520]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_WriteFile]
push 0
lea eax, [ebp - 0x18]
push eax
push 4
lea eax, [ebp - 0x318]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_WriteFile]
push 0
lea eax, [ebp - 0x18]
push eax
push 2
lea eax, [ebp - 0x314]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_WriteFile]
mov esi, dword [esi + 0xc]
add esi, 0xc
mov ecx, esi
lea edx, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1000b6d0
sub ecx, edx
movzx eax, cx
push 0
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x18]
push eax
push 2
lea eax, [ebp - 0x14]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_WriteFile]
push 0
lea eax, [ebp - 0x18]
push eax
movsx eax, word [ebp - 0x14]
push eax
push esi
push edi
call dword [sym.imp.KERNEL32.dll_WriteFile]
push 0
lea eax, [ebp - 0x18]
add esi, 0x40
push eax
push 4
lea eax, [ebp - 0x1c]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_WriteFile]
sub dword [ebp - 0x1c], 1
js 0x1000b76d
movzx eax, byte [esi]
push 0
mov dword [ebp - 0x14], eax
lea eax, [ebp - 0x18]
push eax
push 2
lea eax, [ebp - 0x14]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_WriteFile]
push 0
lea eax, [ebp - 0x18]
inc esi
push eax
movsx eax, word [ebp - 0x14]
push eax
push esi
push edi
call dword [sym.imp.KERNEL32.dll_WriteFile]
movsx eax, word [ebp - 0x14]
push 0
add esi, eax
lea eax, [ebp - 0x18]
push eax
push 4
push esi
push edi
call dword [sym.imp.KERNEL32.dll_WriteFile]
add esi, 4
sub dword [ebp - 0x1c], 1
jns 0x1000b721
mov esi, dword [ebp - 0x20]
push 0
push 0
push 8
push esi
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x30], 0
xor al, al
mov byte [ebp - 4], 2
mov byte [ebp - 0x39], al
cmp byte [ebx + 8], al
je 0x1000d2a5
push 0x21c
mov dword [ebp - 0x84], 0
mov dword [ebp - 0x80], 0
call fcn.1001dcb9
add esp, 4
mov dword [eax], eax
mov dword [eax + 4], eax
mov dword [eax + 8], eax
mov word [eax + 0xc], 0x101
mov dword [ebp - 0x84], eax
mov byte [ebp - 4], 3
push 0x1000
mov dword [ebp - 0x54], 0x50565354
mov dword [ebp - 0x58], 0x5208
call fcn.10045341
mov edi, eax
add esp, 4
mov ecx, edi
mov dword [ebp - 0x14], edi
neg ecx
mov dword [ebp - 0x34], edi
sbb ecx, ecx
neg ecx
test edi, edi
je 0x1000b822
mov eax, dword [ebp - 0x54]
mov edx, edi
mov dword [edi + ecx - 1], eax
mov eax, 8
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x30], eax
mov eax, edi
jmp 0x1000b844
mov edi, dword [ebp - 0x20]
jmp 0x1000b620
mov eax, 8
push 0x1000
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x30], eax
call fcn.10045341
mov edi, eax
add esp, 4
mov dword [ebp - 0x14], edi
mov edx, eax
mov dword [ebp - 0x34], edi
or ecx, 0xffffffff
mov dword [ebp - 0x40], 4
test eax, eax
cmovne ecx, dword [ebp - 0x40]
je 0x1000b85c
mov eax, dword [ebp - 0x58]
mov dword [ecx + edx], eax
push 0
lea eax, [ebp - 0x18]
mov dword [ebp - 0x24], 0
push eax
push 2
lea eax, [ebp - 0x24]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_ReadFile]
cmp dword [ebp - 0x18], 2
jne 0x1000d1a1
mov eax, dword [ebp - 0x2c]
add eax, 0x3c8
mov dword [ebp - 0xc8], eax
nop
mov esi, dword [ebp - 0x24]
test si, si
jle 0x1000d13f
xor eax, eax
mov dword [ebp - 0x108], 0
push 0x208
push eax
mov word [ebp - 0x104], ax
lea eax, [ebp - 0x310]
push eax
call fcn.10020640
add esp, 0xc
lea eax, [ebp - 0x18]
push 0
push eax
movsx eax, si
mov esi, dword [ebp - 0x20]
push eax
lea eax, [ebp - 0x310]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_ReadFile]
push 0
lea eax, [ebp - 0x18]
push eax
push 4
lea eax, [ebp - 0x108]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_ReadFile]
push 0
lea eax, [ebp - 0x18]
push eax
push 2
lea eax, [ebp - 0x104]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_ReadFile]
cmp dword [ebp - 0xa8], 0xf
lea esi, [ebp - 0xbc]
cmova esi, dword [ebp - 0xbc]
cmp byte [ebp - 0x310], 0
mov dword [ebp - 0x38], esi
je 0x1000b9eb
test esi, esi
je 0x1000b9eb
cmp byte [esi], 0
je 0x1000b9eb
lea eax, [ebp - 0x310]
push 0
push eax
call fcn.10043da7
add esp, 8
cmp eax, 0xffffffff
je 0x1000b9eb
lea eax, [ebp - 0x310]
push 0x10086c38
push eax
call fcn.1001f540
add esp, 8
test eax, eax
jne 0x1000ba58
mov dword [ebp - 0x44], eax
lea ecx, [esi + 1]
nop dword [eax]
mov al, byte [esi]
inc esi
test al, al
jne 0x1000b980
sub esi, ecx
je 0x1000b9eb
mov edx, dword [ebp - 0x38]
mov dword [ebp - 0x60], edx
mov ecx, edx
lea eax, [ecx + 1]
mov dword [ebp - 0x40], eax
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1000b9a0
sub ecx, dword [ebp - 0x40]
lea eax, [ebp - 0x310]
push ecx
push eax
push edx
call fcn.1005c5ae
add esp, 0xc
test eax, eax
je 0x1000ba52
mov eax, dword [ebp - 0x44]
mov edx, dword [ebp - 0x38]
inc eax
add eax, esi
add edx, eax
mov dword [ebp - 0x44], eax
mov esi, edx
mov dword [ebp - 0x60], edx
lea ecx, [esi + 1]
nop dword [eax]
mov al, byte [esi]
inc esi
test al, al
jne 0x1000b9e0
sub esi, ecx
jne 0x1000b991
mov eax, dword [ebp - 0x104]
and eax, 0x1fff
mov byte [ebp - 0x39], 1
cmp eax, 0x80
ja 0x1000cf7a
je 0x1000d066
cmp eax, 4
je 0x1000cf90
cmp eax, 8
je 0x1000cf90
cmp eax, 0x40
je 0x1000d066
mov esi, dword [ebp - 0x20]
push 0
lea eax, [ebp - 0x18]
mov dword [ebp - 0x24], 0
push eax
push 2
lea eax, [ebp - 0x24]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_ReadFile]
cmp dword [ebp - 0x18], 2
je 0x1000b890
jmp 0x1000d142
cmp dword [ebp - 0x60], 0
je 0x1000b9eb
lea eax, [ebp - 0x310]
push eax
lea eax, [ebp - 0x100]
push eax
lea ecx, [ebp - 0x84]
call fcn.100108f0
mov esi, dword [ebp - 0x1c]
add esi, 2
mov eax, esi
mov dword [ebp - 0x38], esi
cdq
and edx, 0xfff
add eax, edx
and eax, 0xfffff000
mov dword [ebp - 0x40], eax
lea ecx, [eax + 0x1000]
mov eax, dword [ebp - 0x1c]
cdq
and edx, 0xfff
add eax, edx
sar eax, 0xc
inc eax
shl eax, 0xc
cmp ecx, eax
jg 0x1000bfbb
test edi, edi
jne 0x1000bac3
push ecx
call fcn.10045341
add esp, 4
mov edi, eax
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x14], edi
mov edx, dword [ebp - 0x1c]
or ecx, 0xffffffff
test edi, edi
cmovne ecx, edx
test ecx, ecx
js 0x1000bada
mov ax, word [ebp - 0x24]
mov word [edi + ecx], ax
movsx esi, word [ebp - 0x24]
test esi, esi
jle 0x1000bb45
mov ecx, dword [ebp - 0x40]
lea eax, [edx + 2]
add eax, esi
add ecx, 0x1000
mov dword [ebp - 0x38], eax
cdq
and edx, 0xfff
add eax, edx
sar eax, 0xc
inc eax
shl eax, 0xc
cmp eax, ecx
jg 0x1000bfd2
test edi, edi
jne 0x1000bb20
push eax
call fcn.10045341
add esp, 4
mov edi, eax
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x14], edi
mov ecx, dword [ebp - 0x1c]
or eax, 0xffffffff
test edi, edi
lea ecx, [ecx + 2]
cmovne eax, ecx
test eax, eax
js 0x1000bb45
push esi
lea ecx, [ebp - 0x310]
add eax, edi
push ecx
push eax
call fcn.1001fe60
add esp, 0xc
mov ecx, dword [ebp - 0x38]
lea eax, [ecx + 4]
mov dword [ebp - 0x40], eax
cdq
and edx, 0xfff
lea esi, [edx + eax]
mov eax, ecx
cdq
and edx, 0xfff
sar esi, 0xc
add eax, edx
inc esi
sar eax, 0xc
inc eax
shl esi, 0xc
shl eax, 0xc
cmp esi, eax
jg 0x1000bfe9
test edi, edi
jne 0x1000bb8e
push esi
call fcn.10045341
add esp, 4
mov edi, eax
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x14], edi
mov edx, dword [ebp - 0x38]
or ecx, 0xffffffff
test edi, edi
cmovne ecx, edx
test ecx, ecx
js 0x1000bba6
mov eax, dword [ebp - 0x108]
mov dword [edi + ecx], eax
lea ecx, [edx + 6]
mov eax, ecx
mov dword [ebp - 0x1c], ecx
cdq
and edx, 0xfff
mov dword [ebp - 0x30], ecx
add eax, edx
sar eax, 0xc
inc eax
shl eax, 0xc
cmp eax, esi
jg 0x1000c000
test edi, edi
jne 0x1000bbde
push eax
call fcn.10045341
add esp, 4
mov edi, eax
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x14], edi
or ecx, 0xffffffff
test edi, edi
cmovne ecx, dword [ebp - 0x40]
test ecx, ecx
js 0x1000bbf6
mov ax, word [ebp - 0x104]
mov word [edi + ecx], ax
mov eax, dword [ebp - 0x104]
and eax, 0x1fff
cmp eax, 0x80
ja 0x1000c017
je 0x1000bc29
cmp eax, 4
je 0x1000c02d
cmp eax, 8
je 0x1000c02d
cmp eax, 0x40
jne 0x1000ba26
push 0x60
lea eax, [ebp - 0x768]
push 0
push eax
call fcn.10020640
add esp, 0xc
lea eax, [ebp - 0x18]
push 0
push eax
push 2
lea eax, [ebp - 0x24]
push eax
push dword [ebp - 0x20]
call dword [sym.imp.KERNEL32.dll_ReadFile]
mov esi, dword [ebp - 0x1c]
add esi, 2
mov eax, esi
mov dword [ebp - 0x40], esi
mov esi, dword [ebp - 0x1c]
cdq
and edx, 0xfff
add eax, edx
and eax, 0xfffff000
mov dword [ebp - 0x6c], eax
lea ecx, [eax + 0x1000]
mov eax, esi
cdq
and edx, 0xfff
add eax, edx
sar eax, 0xc
inc eax
shl eax, 0xc
cmp ecx, eax
jg 0x1000cf04
test edi, edi
jne 0x1000bca5
push ecx
call fcn.10045341
add esp, 4
mov edi, eax
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x14], edi
or ecx, 0xffffffff
test edi, edi
cmovne ecx, esi
test ecx, ecx
js 0x1000bcb9
mov ax, word [ebp - 0x24]
mov word [ecx + edi], ax
push 0
lea eax, [ebp - 0x18]
push eax
movsx eax, word [ebp - 0x24]
push eax
lea eax, [ebp - 0x768]
push eax
push dword [ebp - 0x20]
call dword [sym.imp.KERNEL32.dll_ReadFile]
movsx esi, word [ebp - 0x24]
test esi, esi
jle 0x1000bd42
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x6c]
add eax, 2
add eax, esi
add ecx, 0x1000
mov dword [ebp - 0x40], eax
cdq
and edx, 0xfff
add eax, edx
sar eax, 0xc
inc eax
shl eax, 0xc
cmp eax, ecx
jg 0x1000cf1b
test edi, edi
jne 0x1000bd1d
push eax
call fcn.10045341
add esp, 4
mov edi, eax
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x14], edi
mov ecx, dword [ebp - 0x1c]
or eax, 0xffffffff
test edi, edi
lea ecx, [ecx + 2]
cmovne eax, ecx
test eax, eax
js 0x1000bd42
push esi
lea ecx, [ebp - 0x768]
add eax, edi
push ecx
push eax
call fcn.1001fe60
add esp, 0xc
push 0
lea eax, [ebp - 0x18]
mov dword [ebp - 0x68], 0
push eax
push 4
lea eax, [ebp - 0x68]
push eax
push dword [ebp - 0x20]
call dword [sym.imp.KERNEL32.dll_ReadFile]
mov esi, dword [ebp - 0x40]
lea eax, [esi + 4]
mov dword [ebp - 0x1c], eax
cdq
and edx, 0xfff
lea ecx, [edx + eax]
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x30], eax
mov eax, esi
cdq
and edx, 0xfff
sar ecx, 0xc
add eax, edx
inc ecx
sar eax, 0xc
inc eax
shl ecx, 0xc
shl eax, 0xc
cmp ecx, eax
jg 0x1000cf32
test edi, edi
jne 0x1000bdad
push ecx
call fcn.10045341
add esp, 4
mov edi, eax
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x14], edi
or ecx, 0xffffffff
test edi, edi
cmovne ecx, esi
test ecx, ecx
js 0x1000bdbf
mov eax, dword [ebp - 0x68]
mov dword [ecx + edi], eax
cmp dword [ebp - 0x68], 0
jle 0x1000ba26
push 0x124
lea eax, [ebp - 0x6a8]
push 0
push eax
call fcn.10020640
mov esi, dword [ebp - 0x2c]
add esp, 0xc
cmp dword [esi + 0x3c4], 0
je 0x1000be35
test dword [ebp - 0x104], 0x2000
mov ecx, 0x10086c38
mov eax, str.pdx.x64
cmove eax, ecx
lea ecx, [ebp - 0xa0]
push eax
call fcn.10001210
or dword [ebp - 0x5c], 1
lea eax, [ebp - 0xa0]
push eax
lea ecx, [esi + 0x3c0]
mov esi, dword [ecx]
lea eax, [ebp - 0xec]
push eax
call fcn.1000e5b0
mov byte [ebp - 0x25], 1
cmp dword [eax], esi
jne 0x1000be39
mov byte [ebp - 0x25], 0
mov eax, dword [ebp - 0x5c]
test al, 1
je 0x1000be51
and eax, 0xfffffffe
lea ecx, [ebp - 0xa0]
mov dword [ebp - 0x5c], eax
call fcn.10006950
sub dword [ebp - 0x68], 1
js 0x1000ba26
nop dword [eax + eax]
mov esi, dword [ebp - 0x20]
lea eax, [ebp - 0x18]
push 0
push eax
push 2
lea eax, [ebp - 0x24]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_ReadFile]
push 0
lea eax, [ebp - 0x18]
push eax
movsx eax, word [ebp - 0x24]
push eax
lea eax, [ebp - 0x6a8]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_ReadFile]
movsx eax, word [ebp - 0x24]
push 0
mov byte [ebp + eax - 0x6a8], 0
lea eax, [ebp - 0x18]
push eax
push 4
lea eax, [ebp - 0x108]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_ReadFile]
mov ecx, dword [ebp - 0x1c]
add ecx, 2
mov eax, ecx
mov dword [ebp - 0x30], ecx
cdq
and edx, 0xfff
lea esi, [edx + eax]
mov eax, dword [ebp - 0x1c]
cdq
and edx, 0xfff
sar esi, 0xc
add eax, edx
inc esi
sar eax, 0xc
inc eax
shl esi, 0xc
shl eax, 0xc
cmp esi, eax
jg 0x1000cf49
test edi, edi
jne 0x1000befa
push esi
call fcn.10045341
add esp, 4
mov edi, eax
mov dword [ebp - 0x34], edi
or ecx, 0xffffffff
test edi, edi
cmovne ecx, dword [ebp - 0x1c]
test ecx, ecx
js 0x1000bf0f
mov ax, word [ebp - 0x24]
mov word [ecx + edi], ax
movsx eax, word [ebp - 0x24]
lea ecx, [ebp - 0x34]
push eax
lea eax, [ebp - 0x6a8]
push eax
call fcn.10008f60
mov esi, dword [ebp - 0x30]
lea edi, [esi + 4]
mov eax, edi
mov dword [ebp - 0x1c], edi
cdq
and edx, 0xfff
mov dword [ebp - 0x30], edi
lea ecx, [edx + eax]
mov eax, esi
cdq
and edx, 0xfff
sar ecx, 0xc
add eax, edx
inc ecx
sar eax, 0xc
inc eax
shl ecx, 0xc
shl eax, 0xc
cmp ecx, eax
jg 0x1000cf60
mov edi, dword [ebp - 0x34]
test edi, edi
jne 0x1000bf71
push ecx
call fcn.10045341
add esp, 4
mov edi, eax
mov dword [ebp - 0x34], edi
or ecx, 0xffffffff
test edi, edi
cmovne ecx, esi
test ecx, ecx
js 0x1000bf86
mov eax, dword [ebp - 0x108]
mov dword [ecx + edi], eax
cmp byte [ebp - 0x25], 0
jne 0x1000bfa9
mov ecx, dword [ebp - 0x2c]
lea eax, [ebp - 0x768]
push eax
lea eax, [ebp - 0x6a8]
push eax
lea eax, [ebp - 0x310]
push eax
call fcn.10007dd0
sub dword [ebp - 0x68], 1
jns 0x1000be60
mov dword [ebp - 0x14], edi
jmp 0x1000ba26
test edi, edi
je 0x1000bab2
push ecx
push edi
call fcn.10045336
add esp, 8
jmp 0x1000babb
test edi, edi
je 0x1000bb0f
push eax
push edi
call fcn.10045336
add esp, 8
jmp 0x1000bb18
test edi, edi
je 0x1000bb7d
push esi
push edi
call fcn.10045336
add esp, 8
jmp 0x1000bb86
test edi, edi
je 0x1000bbcd
push eax
push edi
call fcn.10045336
add esp, 8
jmp 0x1000bbd6
cmp eax, 0x100
je 0x1000bc29
cmp eax, 0x400
jne 0x1000ba26
xor eax, eax
push 0x208
push eax
mov word [ebp - 0xbe4], ax
lea eax, [ebp - 0xdf0]
push eax
call fcn.10020640
add esp, 0xc
mov dword [ebp - 0xbe8], 0
xor ecx, ecx
nop word [eax + eax]
mov al, byte [ebp + ecx - 0x310]
mov byte [ebp + ecx - 0xdf0], al
inc ecx
test al, al
jne 0x1000c060
lea eax, [ebp - 0xdf0]
push 0
push eax
call fcn.10043da7
add esp, 8
cmp eax, 0xffffffff
je 0x1000ce37
push 0x130
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x4c], 0
call fcn.1001dcb9
add esp, 4
mov dword [eax], eax
mov dword [eax + 4], eax
mov dword [ebp - 0x50], eax
mov esi, dword [ebp - 0x2c]
lea eax, [ebp - 0xbe8]
push ecx
push 0
push eax
mov byte [ebp - 4], 4
lea eax, [ebp - 0xdf0]
cmp byte [esi + 0x3bc], 0
mov ecx, esi
push eax
je 0x1000c11c
call fcn.10007bf0
mov ecx, 0x4000
mov word [ebp - 0xbe4], ax
cmp ax, cx
je 0x1000c0ee
test ax, ax
jne 0x1000c13b
push ecx
push 0
lea eax, [ebp - 0xbe8]
mov ecx, esi
push eax
lea eax, [ebp - 0xdf0]
push eax
call fcn.10007a10
mov ecx, 0x4000
cmp ax, cx
je 0x1000c132
test ax, ax
je 0x1000c132
or eax, 0x2000
jmp 0x1000c134
call fcn.10007bf0
mov ecx, 0x4000
mov word [ebp - 0xbe4], ax
cmp ax, cx
jne 0x1000c13b
xor eax, eax
mov word [ebp - 0xbe4], ax
mov eax, dword [ebp - 0xbe4]
and eax, 0x1fff
cmp eax, 4
je 0x1000c15b
cmp eax, 8
je 0x1000c15b
cmp eax, 0x400
jne 0x1000c251
mov eax, dword [esi + 0xc]
mov esi, dword [eax + 8]
add eax, 0x4c
mov dword [ebp - 0x44], eax
test esi, esi
jle 0x1000c251
push 0x124
lea eax, [ebp - 0x6a8]
push 0
push eax
call fcn.10020640
lea eax, [esi - 1]
mov dword [ebp - 0x584], 0
add esp, 0xc
mov dword [ebp - 0x38], eax
test eax, eax
js 0x1000c251
nop dword [eax]
mov edi, dword [ebp - 0x44]
mov al, byte [edi]
test al, al
je 0x1000c24e
movsx esi, al
inc edi
push esi
lea eax, [ebp - 0x6a8]
push edi
push eax
call fcn.10043a80
add edi, esi
mov byte [ebp + esi - 0x6a8], 0
add esp, 0xc
mov eax, dword [edi]
add edi, 4
cmp dword [ebp - 0x4c], 0xd79435
mov dword [ebp - 0x584], eax
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x44], edi
mov dword [ebp - 0x40], eax
je 0x1000d33e
lea eax, [ebp - 0x50]
mov dword [ebp - 0xe8], eax
mov byte [ebp - 4], 5
push 0x130
mov dword [ebp - 0xe4], 0
call fcn.1001dcb9
mov edx, eax
lea esi, [ebp - 0x6a8]
mov ecx, 0x4a
add esp, 4
lea edi, [edx + 8]
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [ebp - 0x40]
mov byte [ebp - 4], 4
inc dword [ebp - 0x4c]
sub dword [ebp - 0x38], 1
mov eax, dword [ecx + 4]
mov dword [edx], ecx
mov dword [edx + 4], eax
mov dword [ecx + 4], edx
mov dword [ebp - 0xe4], 0
mov dword [eax], edx
jns 0x1000c1a0
mov edi, dword [ebp - 0x14]
lea eax, [ebp - 0x310]
mov byte [ebp - 0x25], 0
push eax
lea ecx, [ebp - 0xa0]
call fcn.1000ee30
mov edx, dword [ebp - 0xc8]
mov byte [ebp - 4], 6
mov eax, dword [edx + 4]
cmp eax, dword [edx + 8]
je 0x1000c2a2
movups xmm0, xmmword [ebp - 0xa0]
mov ecx, 0xf
mov byte [ebp - 0xa0], 0
movups xmmword [eax], xmm0
movq xmm0, qword [ebp - 0x90]
movq qword [eax + 0x10], xmm0
add dword [edx + 4], 0x18
jmp 0x1000c2b7
lea ecx, [ebp - 0xa0]
push ecx
push eax
mov ecx, edx
call fcn.10013680
mov ecx, dword [ebp - 0x8c]
mov byte [ebp - 4], 4
cmp ecx, 0xf
jbe 0x1000c2ef
mov edx, dword [ebp - 0xa0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1000c2e5
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000d348
push ecx
push edx
call fcn.1001d914
add esp, 8
push 0x60
lea eax, [ebp - 0x708]
push 0
push eax
call fcn.10020640
add esp, 0xc
lea eax, [ebp - 0x18]
push 0
push eax
push 2
lea eax, [ebp - 0x24]
push eax
push dword [ebp - 0x20]
call dword [sym.imp.KERNEL32.dll_ReadFile]
mov esi, dword [ebp - 0x1c]
add esi, 2
mov eax, esi
mov dword [ebp - 0x60], esi
cdq
and edx, 0xfff
add eax, edx
and eax, 0xfffff000
mov dword [ebp - 0x40], eax
lea ecx, [eax + 0x1000]
mov eax, dword [ebp - 0x1c]
cdq
and edx, 0xfff
add eax, edx
sar eax, 0xc
inc eax
shl eax, 0xc
cmp ecx, eax
jg 0x1000c742
test edi, edi
jne 0x1000c369
push ecx
call fcn.10045341
add esp, 4
mov edi, eax
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x14], edi
or ecx, 0xffffffff
test edi, edi
cmovne ecx, dword [ebp - 0x1c]
test ecx, ecx
js 0x1000c37e
mov ax, word [ebp - 0x24]
mov word [ecx + edi], ax
push 0
lea eax, [ebp - 0x18]
push eax
movsx eax, word [ebp - 0x24]
push eax
lea eax, [ebp - 0x708]
push eax
push dword [ebp - 0x20]
call dword [sym.imp.KERNEL32.dll_ReadFile]
movsx esi, word [ebp - 0x24]
test esi, esi
jle 0x1000c407
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x40]
add eax, 2
add eax, esi
add ecx, 0x1000
mov dword [ebp - 0x60], eax
cdq
and edx, 0xfff
add eax, edx
sar eax, 0xc
inc eax
shl eax, 0xc
cmp eax, ecx
jg 0x1000c759
test edi, edi
jne 0x1000c3e2
push eax
call fcn.10045341
add esp, 4
mov edi, eax
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x14], edi
mov ecx, dword [ebp - 0x1c]
or eax, 0xffffffff
test edi, edi
lea ecx, [ecx + 2]
cmovne eax, ecx
test eax, eax
js 0x1000c407
push esi
lea ecx, [ebp - 0x708]
add eax, edi
push ecx
push eax
call fcn.1001fe60
add esp, 0xc
push 0
lea eax, [ebp - 0x18]
mov dword [ebp - 0x64], 0
push eax
push 4
lea eax, [ebp - 0x64]
push eax
push dword [ebp - 0x20]
call dword [sym.imp.KERNEL32.dll_ReadFile]
mov esi, dword [ebp - 0x60]
add esi, 4
mov eax, esi
mov dword [ebp - 0x1c], esi
cdq
and edx, 0xfff
mov dword [ebp - 0x30], esi
lea ecx, [edx + eax]
mov eax, dword [ebp - 0x60]
cdq
and edx, 0xfff
sar ecx, 0xc
add eax, edx
inc ecx
sar eax, 0xc
inc eax
shl ecx, 0xc
shl eax, 0xc
cmp ecx, eax
jg 0x1000c770
test edi, edi
jne 0x1000c472
push ecx
call fcn.10045341
add esp, 4
mov edi, eax
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x14], edi
or ecx, 0xffffffff
test edi, edi
cmovne ecx, dword [ebp - 0x60]
test ecx, ecx
js 0x1000c485
mov eax, dword [ebp - 0x64]
mov dword [edi + ecx], eax
lea eax, [ebp - 0x708]
push eax
lea eax, [ebp - 0x310]
push eax
lea ecx, [ebp - 0x4a8]
call fcn.100016a0
mov byte [ebp - 4], 7
cmp dword [ebp - 0x64], 0
mov dword [ebp - 0x70], 0
jle 0x1000c9bf
push pe_nt_image_headers32
lea eax, [ebp - 0x9b0]
push 0
push eax
call fcn.10020640
add esp, 0xc
lea eax, [ebp - 0x6a0]
push pe_nt_image_headers32
push 0
push eax
call fcn.10020640
add esp, 0xc
lea eax, [ebp - 0x6a0]
push eax
lea eax, [ebp - 0x9b0]
push eax
push 0
lea eax, [ebp - 0x310]
push 0
push eax
call fcn.100449a1
lea edx, [ebp - 0x6a0]
add esp, 0x14
mov esi, edx
mov al, byte [edx]
inc edx
test al, al
jne 0x1000c508
lea edi, [ebp - 0x9b0]
sub edx, esi
dec edi
mov al, byte [edi + 1]
inc edi
test al, al
jne 0x1000c518
mov ecx, edx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov esi, dword [ebp - 0x2c]
cmp dword [esi + 0x3c4], 0
je 0x1000c5fb
xorps xmm0, xmm0
mov dword [ebp - 0x90], 0
movups xmmword [ebp - 0xa0], xmm0
mov dword [ebp - 0x8c], 0xf
mov byte [ebp - 0xa0], al
lea ecx, [ebp - 0x9b0]
mov byte [ebp - 4], 8
lea edx, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1000c570
sub ecx, edx
lea eax, [ebp - 0x9b0]
push ecx
push eax
lea ecx, [ebp - 0xa0]
call fcn.1000f950
or dword [ebp - 0x5c], 2
lea ecx, [ebp - 0xa0]
push ecx
lea eax, [esi + 0x3c0]
mov byte [ebp - 4], 7
mov esi, dword [eax]
lea ecx, [ebp - 0xf8]
push ecx
mov ecx, eax
call fcn.10013840
mov edi, dword [ebp - 0xf0]
cmp byte [edi + 0xd], 0
jne 0x1000c5ea
cmp dword [edi + 0x22], 0xf
lea ecx, [edi + 0xe]
jbe 0x1000c5c8
mov ecx, dword [ecx]
cmp dword [ebp - 0x8c], 0xf
lea eax, [ebp - 0xa0]
push ecx
cmova eax, dword [ebp - 0xa0]
push eax
call fcn.100439a6
add esp, 8
test eax, eax
jns 0x1000c5f3
mov eax, dword [ebp - 0x2c]
mov edi, dword [eax + 0x3c0]
mov byte [ebp - 0x25], 1
cmp edi, esi
jne 0x1000c5ff
mov byte [ebp - 0x25], 0
mov eax, dword [ebp - 0x5c]
test al, 2
je 0x1000c646
mov ecx, dword [ebp - 0x8c]
and eax, 0xfffffffd
mov dword [ebp - 0x5c], eax
cmp ecx, 0xf
jbe 0x1000c646
mov edx, dword [ebp - 0xa0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1000c63c
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x1000d348
push ecx
push edx
call fcn.1001d914
add esp, 8
sub dword [ebp - 0x64], 1
js 0x1000c9bc
mov esi, dword [ebp - 0x20]
lea eax, [ebp - 0x18]
mov edi, dword [sym.imp.KERNEL32.dll_ReadFile]
push 0
push eax
push 2
lea eax, [ebp - 0x24]
push eax
push esi
call edi
push 0
lea eax, [ebp - 0x18]
push eax
movsx eax, word [ebp - 0x24]
push eax
lea eax, [ebp - 0x310]
push eax
push esi
call edi
movsx eax, word [ebp - 0x24]
push 0
mov byte [ebp + eax - 0x310], 0
lea eax, [ebp - 0x18]
push eax
push 4
lea eax, [ebp - 0x108]
push eax
push esi
call edi
push 0
lea eax, [ebp - 0x18]
push eax
push 2
lea eax, [ebp - 0x104]
push eax
push esi
call edi
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x44], eax
mov esi, dword [eax]
cmp esi, eax
je 0x1000c72c
nop dword [eax]
push 0x124
lea eax, [ebp - 0xad8]
push 0
push eax
lea edi, [esi + 8]
call fcn.10020640
add esp, 0xc
xor eax, eax
nop dword [eax + eax]
mov cl, byte [ebp + eax - 0x310]
lea eax, [eax + 1]
mov byte [ebp + eax - 0xad9], cl
test cl, cl
jne 0x1000c6e0
mov eax, dword [ebp - 0x108]
mov dword [ebp - 0x9b4], eax
lea eax, [ebp - 0xad8]
push eax
push edi
call fcn.100439a6
add esp, 8
test eax, eax
jne 0x1000c723
mov eax, dword [edi + 0x124]
cmp eax, dword [ebp - 0x9b4]
je 0x1000c787
mov eax, dword [esi]
mov esi, eax
cmp eax, dword [ebp - 0x44]
jne 0x1000c6c0
mov edi, dword [ebp - 0x14]
mov byte [ebp - 0x39], 1
sub dword [ebp - 0x64], 1
jns 0x1000c650
jmp 0x1000c9bf
test edi, edi
je 0x1000c358
push ecx
push edi
call fcn.10045336
add esp, 8
jmp 0x1000c361
test edi, edi
je 0x1000c3d1
push eax
push edi
call fcn.10045336
add esp, 8
jmp 0x1000c3da
test edi, edi
je 0x1000c461
push ecx
push edi
call fcn.10045336
add esp, 8
jmp 0x1000c46a
mov ecx, dword [esi + 4]
mov eax, dword [esi]
push 0x130
push esi
mov dword [ecx], eax
mov ecx, dword [esi]
mov eax, dword [esi + 4]
mov dword [ecx + 4], eax
dec dword [ebp - 0x4c]
call fcn.1001d914
mov edi, dword [ebp - 0x1c]
add esp, 8
lea eax, [edi + 2]
cdq
and edx, 0xfff
add eax, edx
and eax, 0xfffff000
mov dword [ebp - 0x40], eax
lea ecx, [eax + 0x1000]
mov eax, edi
cdq
and edx, 0xfff
add eax, edx
lea edx, [edi + 2]
sar eax, 0xc
inc eax
mov dword [ebp - 0x48], edx
shl eax, 0xc
cmp ecx, eax
jg 0x1000c95d
mov edi, dword [ebp - 0x14]
test edi, edi
jne 0x1000c7fc
push ecx
call fcn.10045341
add esp, 4
mov edi, eax
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x14], edi
mov edx, dword [ebp - 0x1c]
or ecx, 0xffffffff
test edi, edi
cmovne ecx, edx
test ecx, ecx
js 0x1000c813
mov ax, word [ebp - 0x24]
mov word [edi + ecx], ax
movsx esi, word [ebp - 0x24]
test esi, esi
jle 0x1000c87e
mov ecx, dword [ebp - 0x40]
lea eax, [edx + 2]
add eax, esi
add ecx, 0x1000
mov dword [ebp - 0x48], eax
cdq
and edx, 0xfff
add eax, edx
sar eax, 0xc
inc eax
shl eax, 0xc
cmp eax, ecx
jg 0x1000c977
test edi, edi
jne 0x1000c859
push eax
call fcn.10045341
add esp, 4
mov edi, eax
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x14], edi
mov ecx, dword [ebp - 0x1c]
or eax, 0xffffffff
test edi, edi
lea ecx, [ecx + 2]
cmovne eax, ecx
test eax, eax
js 0x1000c87e
push esi
lea ecx, [ebp - 0x310]
add eax, edi
push ecx
push eax
call fcn.1001fe60
add esp, 0xc
mov ecx, dword [ebp - 0x48]
lea eax, [ecx + 4]
cdq
and edx, 0xfff
lea esi, [edx + eax]
mov eax, ecx
cdq
and edx, 0xfff
sar esi, 0xc
add eax, edx
inc esi
sar eax, 0xc
inc eax
shl esi, 0xc
shl eax, 0xc
cmp esi, eax
jg 0x1000c98e
test edi, edi
jne 0x1000c8c4
push esi
call fcn.10045341
add esp, 4
mov edi, eax
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x14], edi
mov edx, dword [ebp - 0x48]
or ecx, 0xffffffff
test edi, edi
cmovne ecx, edx
test ecx, ecx
js 0x1000c8dc
mov eax, dword [ebp - 0x108]
mov dword [edi + ecx], eax
lea ecx, [edx + 6]
mov eax, ecx
mov dword [ebp - 0x1c], ecx
cdq
and edx, 0xfff
mov dword [ebp - 0x30], ecx
add eax, edx
sar eax, 0xc
inc eax
shl eax, 0xc
cmp eax, esi
jg 0x1000c9a5
test edi, edi
jne 0x1000c914
push eax
call fcn.10045341
add esp, 4
mov edi, eax
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x14], edi
mov eax, dword [ebp - 0x48]
or ecx, 0xffffffff
test edi, edi
lea eax, [eax + 4]
cmovne ecx, eax
test ecx, ecx
js 0x1000c931
mov ax, word [ebp - 0x104]
mov word [edi + ecx], ax
cmp byte [ebp - 0x25], 0
jne 0x1000c955
push dword [ebp - 0x108]
lea eax, [ebp - 0x310]
push dword [ebp - 0x104]
lea ecx, [ebp - 0x4a8]
push eax
call fcn.100017e0
inc dword [ebp - 0x70]
jmp 0x1000c733
mov eax, dword [ebp - 0x14]
test eax, eax
je 0x1000c7eb
push ecx
push eax
call fcn.10045336
add esp, 8
jmp 0x1000c7f4
test edi, edi
je 0x1000c848
push eax
push edi
call fcn.10045336
add esp, 8
jmp 0x1000c851
test edi, edi
je 0x1000c8b3
push esi
push edi
call fcn.10045336
add esp, 8
jmp 0x1000c8bc
test edi, edi
je 0x1000c903
push eax
push edi
call fcn.10045336
add esp, 8
jmp 0x1000c90c
mov edi, dword [ebp - 0x14]
cmp dword [ebp - 0x4c], 0
je 0x1000cca7
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x44], eax
mov esi, dword [eax]
cmp esi, eax
je 0x1000cca7
nop dword [eax]
lea eax, [esi + 0x12c]
mov dword [ebp - 0x40], eax
mov eax, dword [eax]
mov dword [ebp - 0x38], eax
lea eax, [ebp - 0xdf0]
push str.vst3shell.x64.dll
push eax
call fcn.1001f540
add esp, 8
test eax, eax
je 0x1000ca13
mov eax, 0x2008
mov dword [ebp - 0x14], eax
jmp 0x1000cac2
lea eax, [ebp - 0xdf0]
push str.vsti3shell.x64.dll
push eax
call fcn.1001f540
add esp, 8
test eax, eax
je 0x1000ca37
mov dword [ebp - 0x14], 0x2004
jmp 0x1000cac2
lea eax, [ebp - 0xdf0]
push str.vst3shell.dll
push eax
call fcn.1001f540
add esp, 8
test eax, eax
je 0x1000ca58
mov dword [ebp - 0x14], 8
jmp 0x1000cac2
lea eax, [ebp - 0xdf0]
push str.vsti3shell.dll
push eax
call fcn.1001f540
add esp, 8
test eax, eax
je 0x1000ca79
mov dword [ebp - 0x14], 4
jmp 0x1000cac2
test dword [ebp - 0xbe4], 0x2000
lea eax, [ebp - 0xbe8]
push ecx
push dword [ebp - 0x38]
mov ecx, dword [ebp - 0x2c]
push eax
lea eax, [ebp - 0xdf0]
push eax
je 0x1000caa9
call fcn.10007a10
mov ecx, 0x2000
or ax, cx
jmp 0x1000caae
call fcn.10007bf0
movzx eax, ax
mov ecx, 0x4000
mov dword [ebp - 0x14], eax
cmp ax, cx
je 0x1000cc97
lea ecx, [esi + 8]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x1000cac8
sub ecx, edx
movzx eax, cx
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x1c]
add eax, 2
mov dword [ebp - 0x38], eax
cdq
and edx, 0xfff
add eax, edx
sar eax, 0xc
mov dword [ebp - 0x6c], eax
lea ecx, [eax + 1]
mov eax, dword [ebp - 0x1c]
cdq
and edx, 0xfff
shl ecx, 0xc
add eax, edx
mov edx, dword [ebp - 0x38]
sar eax, 0xc
inc eax
mov dword [ebp - 0x48], edx
shl eax, 0xc
cmp ecx, eax
jg 0x1000cddb
test edi, edi
jne 0x1000cb2b
push ecx
call fcn.10045341
add esp, 4
mov edx, dword [ebp - 0x38]
mov edi, eax
mov dword [ebp - 0x34], edi
or ecx, 0xffffffff
test edi, edi
cmovne ecx, dword [ebp - 0x1c]
test ecx, ecx
js 0x1000cb40
mov ax, word [ebp - 0x24]
mov word [edi + ecx], ax
movsx eax, word [ebp - 0x24]
lea ecx, [esi + 8]
mov dword [ebp - 0x1c], eax
test ecx, ecx
je 0x1000cba7
test eax, eax
jle 0x1000cba7
mov ecx, dword [ebp - 0x6c]
add eax, edx
mov dword [ebp - 0x48], eax
inc ecx
cdq
and edx, 0xfff
shl ecx, 0xc
add eax, edx
sar eax, 0xc
inc eax
shl eax, 0xc
cmp eax, ecx
jg 0x1000cdf2
test edi, edi
jne 0x1000cb88
push eax
call fcn.10045341
add esp, 4
mov edi, eax
mov dword [ebp - 0x34], edi
or eax, 0xffffffff
test edi, edi
cmovne eax, dword [ebp - 0x38]
test eax, eax
js 0x1000cba7
push dword [ebp - 0x1c]
lea ecx, [esi + 8]
add eax, edi
push ecx
push eax
call fcn.1001fe60
add esp, 0xc
cmp dword [ebp - 0x40], 0
je 0x1000cc13
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x38], eax
lea ecx, [eax + 4]
mov eax, ecx
mov dword [ebp - 0x48], ecx
cdq
and edx, 0xfff
add eax, edx
sar eax, 0xc
inc eax
shl eax, 0xc
mov dword [ebp - 0x6c], eax
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x6c]
cdq
and edx, 0xfff
add eax, edx
sar eax, 0xc
inc eax
shl eax, 0xc
cmp ecx, eax
jg 0x1000ce09
test edi, edi
jne 0x1000cbfe
push ecx
call fcn.10045341
add esp, 4
mov edi, eax
mov dword [ebp - 0x34], edi
or ecx, 0xffffffff
test edi, edi
cmovne ecx, dword [ebp - 0x38]
test ecx, ecx
js 0x1000cc13
mov eax, dword [ebp - 0x40]
mov eax, dword [eax]
mov dword [edi + ecx], eax
mov eax, dword [ebp - 0x48]
add eax, 2
mov dword [ebp - 0x1c], eax
cdq
and edx, 0xfff
lea ecx, [edx + eax]
mov eax, dword [ebp - 0x48]
cdq
and edx, 0xfff
sar ecx, 0xc
add eax, edx
inc ecx
mov edx, dword [ebp - 0x1c]
sar eax, 0xc
inc eax
shl ecx, 0xc
shl eax, 0xc
mov dword [ebp - 0x30], edx
cmp ecx, eax
jg 0x1000ce20
test edi, edi
jne 0x1000cc60
push ecx
call fcn.10045341
add esp, 4
mov edi, eax
mov dword [ebp - 0x34], edi
mov ecx, dword [ebp - 0x14]
or eax, 0xffffffff
test edi, edi
cmovne eax, dword [ebp - 0x48]
test eax, eax
js 0x1000cc74
mov word [edi + eax], cx
cmp byte [ebp - 0x25], 0
mov byte [ebp - 0x39], 1
jne 0x1000cc94
push dword [esi + 0x12c]
lea eax, [esi + 8]
push ecx
push eax
lea ecx, [ebp - 0x4a8]
call fcn.100017e0
inc dword [ebp - 0x70]
mov eax, dword [esi]
mov esi, eax
cmp eax, dword [ebp - 0x44]
jne 0x1000c9e0
mov dword [ebp - 0x14], edi
test edi, edi
je 0x1000ccb4
mov ecx, dword [ebp - 0x60]
mov eax, dword [ebp - 0x70]
mov dword [ecx + edi], eax
mov eax, dword [ebp - 0x320]
mov ecx, dword [ebp - 0x324]
sub eax, ecx
sar eax, 3
imul eax, eax, 0xc4ec4ec5
test eax, eax
jle 0x1000cd53
xor esi, esi
mov edi, esi
nop word [eax + eax]
movzx eax, word [esi + ecx + 0x60]
lea edx, [esi + ecx]
mov word [ebp - 0x104], ax
xor ecx, ecx
mov eax, dword [edx + 0x64]
mov dword [ebp - 0x108], eax
movzx eax, word [edx + 0x60]
mov word [ebp - 0x104], ax
mov al, byte [ebp + ecx - 0x448]
lea ecx, [ecx + 1]
mov byte [ebp + ecx - 0x311], al
test al, al
jne 0x1000cd05
mov ecx, dword [ebp - 0x2c]
lea eax, [ebp - 0x4a8]
push eax
push edx
lea eax, [ebp - 0x310]
push eax
call fcn.10007dd0
mov eax, dword [ebp - 0x320]
inc edi
mov ecx, dword [ebp - 0x324]
add esi, 0x68
sub eax, ecx
sar eax, 3
imul eax, eax, 0xc4ec4ec5
cmp edi, eax
jl 0x1000cce0
mov edi, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x50]
mov eax, dword [ecx + 4]
mov dword [eax], 0
mov eax, dword [ecx]
test eax, eax
je 0x1000cd7b
mov esi, dword [eax]
push 0x130
push eax
call fcn.1001d914
add esp, 8
mov eax, esi
test esi, esi
jne 0x1000cd65
mov eax, dword [ebp - 0x50]
lea ecx, [ebp - 0x4a8]
mov dword [eax], eax
mov eax, dword [ebp - 0x50]
mov dword [eax + 4], eax
mov dword [ebp - 0x4c], 0
call fcn.10001720
mov byte [ebp - 4], 3
mov ecx, dword [ebp - 0x50]
mov eax, dword [ecx + 4]
mov dword [eax], 0
mov eax, dword [ecx]
test eax, eax
je 0x1000cdc6
nop
mov esi, dword [eax]
push 0x130
push eax
call fcn.1001d914
add esp, 8
mov eax, esi
test esi, esi
jne 0x1000cdb0
push 0x130
push dword [ebp - 0x50]
call fcn.1001d914
add esp, 8
jmp 0x1000ba26
test edi, edi
je 0x1000cb1a
push ecx
push edi
call fcn.10045336
add esp, 8
jmp 0x1000cb23
test edi, edi
je 0x1000cb7a
push eax
push edi
call fcn.10045336
add esp, 8
jmp 0x1000cb83
test edi, edi
je 0x1000cbf0
push ecx
push edi
call fcn.10045336
add esp, 8
jmp 0x1000cbf9
test edi, edi
je 0x1000cc52
push ecx
push edi
call fcn.10045336
add esp, 8
jmp 0x1000cc5b
push 0x60
lea eax, [ebp - 0x580]
mov byte [ebp - 0x39], 1
push 0
push eax
call fcn.10020640
mov esi, dword [ebp - 0x20]
lea eax, [ebp - 0x18]
add esp, 0xc
push 0
push eax
push 2
lea eax, [ebp - 0x24]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_ReadFile]
push 0
lea eax, [ebp - 0x18]
push eax
movsx eax, word [ebp - 0x24]
push eax
lea eax, [ebp - 0x580]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_ReadFile]
push 0
lea eax, [ebp - 0x18]
mov dword [ebp - 0x74], 0
push eax
push 4
lea eax, [ebp - 0x74]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_ReadFile]
sub dword [ebp - 0x74], 1
js 0x1000ba29
push 0
lea eax, [ebp - 0x18]
push eax
push 2
lea eax, [ebp - 0x24]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_ReadFile]
push 0
lea eax, [ebp - 0x18]
push eax
movsx eax, word [ebp - 0x24]
push eax
lea eax, [ebp - 0x310]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_ReadFile]
push 0
lea eax, [ebp - 0x18]
push eax
push 4
lea eax, [ebp - 0x108]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_ReadFile]
push 0
lea eax, [ebp - 0x18]
push eax
push 2
lea eax, [ebp - 0x104]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_ReadFile]
sub dword [ebp - 0x74], 1
jns 0x1000cea1
jmp 0x1000ba29
test edi, edi
je 0x1000bc94
push ecx
push edi
call fcn.10045336
add esp, 8
jmp 0x1000bc9d
test edi, edi
je 0x1000bd0c
push eax
push edi
call fcn.10045336
add esp, 8
jmp 0x1000bd15
test edi, edi
je 0x1000bd9c
push ecx
push edi
call fcn.10045336
add esp, 8
jmp 0x1000bda5
test edi, edi
je 0x1000beec
push esi
push edi
call fcn.10045336
add esp, 8
jmp 0x1000bef5
mov eax, dword [ebp - 0x34]
test eax, eax
je 0x1000bf63
push ecx
push eax
call fcn.10045336
add esp, 8
jmp 0x1000bf6c
cmp eax, 0x100
je 0x1000d066
cmp eax, 0x400
jne 0x1000ba26
push 0x60
lea eax, [ebp - 0x580]
push 0
push eax
call fcn.10020640
mov esi, dword [ebp - 0x20]
lea eax, [ebp - 0x18]
add esp, 0xc
push 0
push eax
push 2
lea eax, [ebp - 0x24]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_ReadFile]
push 0
lea eax, [ebp - 0x18]
push eax
movsx eax, word [ebp - 0x24]
push eax
lea eax, [ebp - 0x580]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_ReadFile]
push 0
lea eax, [ebp - 0x18]
mov dword [ebp - 0x78], 0
push eax
push 4
lea eax, [ebp - 0x78]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_ReadFile]
mov eax, dword [ebp - 0x78]
test eax, eax
jle 0x1000ba29
sub eax, 1
mov dword [ebp - 0x78], eax
js 0x1000ba29
push 0
lea eax, [ebp - 0x18]
push eax
push 2
lea eax, [ebp - 0x24]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_ReadFile]
push 0
lea eax, [ebp - 0x18]
push eax
movsx eax, word [ebp - 0x24]
push eax
lea eax, [ebp - 0x310]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_ReadFile]
push 0
lea eax, [ebp - 0x18]
push eax
push 4
lea eax, [ebp - 0x108]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_ReadFile]
push 0
lea eax, [ebp - 0x18]
push eax
push 2
lea eax, [ebp - 0x104]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_ReadFile]
sub dword [ebp - 0x78], 1
jns 0x1000d003
jmp 0x1000ba29
push 0x60
lea eax, [ebp - 0x580]
push 0
push eax
call fcn.10020640
mov esi, dword [ebp - 0x20]
lea eax, [ebp - 0x18]
add esp, 0xc
push 0
push eax
push 2
lea eax, [ebp - 0x24]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_ReadFile]
push 0
lea eax, [ebp - 0x18]
push eax
movsx eax, word [ebp - 0x24]
push eax
lea eax, [ebp - 0x580]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_ReadFile]
push 0
lea eax, [ebp - 0x18]
mov dword [ebp - 0x7c], 0
push eax
push 4
lea eax, [ebp - 0x7c]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_ReadFile]
mov esi, dword [ebp - 0x7c]
test esi, esi
jle 0x1000ba26
push 0x124
lea eax, [ebp - 0x6a8]
push 0
push eax
call fcn.10020640
add esp, 0xc
sub esi, 1
mov dword [ebp - 0x7c], esi
js 0x1000ba26
mov esi, dword [ebp - 0x20]
push 0
lea eax, [ebp - 0x18]
push eax
push 2
lea eax, [ebp - 0x24]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_ReadFile]
push 0
lea eax, [ebp - 0x18]
push eax
movsx eax, word [ebp - 0x24]
push eax
lea eax, [ebp - 0x6a8]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_ReadFile]
push 0
lea eax, [ebp - 0x18]
push eax
push 4
lea eax, [ebp - 0x108]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_ReadFile]
sub dword [ebp - 0x7c], 1
jns 0x1000d0f2
jmp 0x1000ba29
mov esi, dword [ebp - 0x20]
cmp byte [ebp - 0x39], 0
je 0x1000d1a1
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
lea eax, [ebp - 0x890]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
push 0
push 0x80
push 4
push 0
push 0
push 0xc0000000
lea eax, [ebp - 0x890]
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov esi, eax
mov dword [ebp - 0x20], eax
cmp esi, 0xffffffff
je 0x1000d29a
push 0
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x1c]
push edi
push esi
call dword [sym.imp.KERNEL32.dll_WriteFile]
push esi
call dword [sym.imp.KERNEL32.dll_FlushFileBuffers]
push 2
push 0
push 0
push esi
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov edx, dword [ebp - 0xa4]
mov esi, edx
mov dword [ebp - 0x40], 0
lea ecx, [esi + 1]
mov al, byte [esi]
inc esi
test al, al
jne 0x1000d1c0
sub esi, ecx
je 0x1000d234
mov ecx, dword [ebp - 0x2c]
mov edi, edx
lea eax, [ecx + 0x3c0]
mov dword [ebp - 0x44], eax
jmp 0x1000d1e3
mov ecx, dword [ebp - 0x2c]
push 0
push eax
lea eax, [ebp - 0x84]
push eax
push dword [ebp - 0x20]
push edi
push edi
call fcn.10008330
mov ecx, dword [ebp - 0x2c]
lea eax, [ebp - 0x84]
push 1
push dword [ebp - 0x44]
push eax
push dword [ebp - 0x20]
push edi
push edi
call fcn.10008330
mov eax, dword [ebp - 0x40]
mov edi, dword [ebp - 0xa4]
inc eax
add eax, esi
add edi, eax
mov dword [ebp - 0x40], eax
mov esi, edi
lea ecx, [esi + 1]
mov al, byte [esi]
inc esi
test al, al
jne 0x1000d226
mov eax, dword [ebp - 0x44]
sub esi, ecx
jne 0x1000d1e0
mov edi, dword [ebp - 0x84]
mov esi, dword [edi + 4]
cmp byte [esi + 0xd], 0
jne 0x1000d26c
push dword [esi + 8]
lea eax, [ebp - 0x84]
push eax
mov ecx, eax
call fcn.10010b10
mov eax, esi
mov esi, dword [esi]
push 0x21c
push eax
call fcn.1001d914
add esp, 8
cmp byte [esi + 0xd], 0
je 0x1000d243
mov esi, dword [ebp - 0x20]
push 2
push 0
push 0
mov dword [edi + 4], edi
mov dword [edi], edi
mov dword [edi + 8], edi
push esi
mov dword [ebp - 0x80], 0
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
push 0
push esi
call dword [sym.imp.KERNEL32.dll_GetFileSize]
mov dword [ebp - 0x88], eax
lea ecx, [ebp - 0x84]
call fcn.1000dc50
lea ecx, [ebp - 0x34]
call fcn.10008f30
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [ebp - 0x88], 8
jae 0x1000d2ca
lea eax, [ebp - 0x890]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
mov edi, dword [ebp - 0x2c]
push dword [edi + 0xc]
call dword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
lea ecx, [ebp - 0xe0]
mov dword [edi + 0xc], 0
call fcn.1000ed90
lea ecx, [ebp - 0xbc]
call fcn.1000ed90
lea esi, [edi + 8]
push dword [ebp - 0xc0]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0x300
push dword [ebp - 0xc4]
call fcn.10045bdb
mov eax, dword [esi]
add esp, 8
test eax, eax
je 0x1000d329
lea ecx, [ebp - 0xbe0]
push ecx
push eax
call dword [sym.imp.USER32.dll_SetWindowTextA]
mov ecx, dword [ebp - 0xc]
pop edi
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 8
push str.list_too_long
call fcn.1001d86e
call fcn.10046430
int3