Function at 0x501100
Capabilities:
Check if file exists

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x6e89e6
mov eax, dword fs:[0]
push eax
push ecx
push ebx
sub esp, 0x1e8
mov eax, dword [0x82d084]
xor eax, ebp
mov dword [ebp - 0x1c], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov eax, ecx
mov dword [ebp - 0x1d4], eax
mov ecx, dword [ebx + 8]
mov esi, dword [ebx + 0xc]
mov dword [ebp - 0x1dc], eax
mov eax, dword [ebx + 0x10]
mov dword [ebp - 0x1e8], eax
mov eax, dword [ebx + 0x14]
mov dword [ebp - 0x1ec], ecx
mov dword [ebp - 0x1e0], esi
mov dword [ebp - 0x1d8], eax
mov dword [ebp - 0x1c4], 0
call fcn.005d3890
test al, al
je 0x5023c8
mov ecx, esi
call fcn.005d3bc0
test al, al
je 0x5023c8
xor edi, edi
xorps xmm0, xmm0
mov dword [ebp - 4], edi
movq qword [ebp - 0x40], xmm0
mov dword [ebp - 0x38], edi
mov dword [ebp - 0x1a4], edi
mov dword [ebp - 0x40], edi
mov dword [ebp - 0x3c], edi
mov dword [ebp - 0x38], edi
mov byte [ebp - 4], 1
lea esi, [edi + 1]
mov byte [ebp - 0x16e], 0
nop word [eax + eax]
push 0xb0
lea eax, [ebp - 0x168]
mov dword [ebp - 0x1e4], 0
push 0
push eax
call fcn.0068e800
add esp, 4
lea ecx, [ebp - 0x168]
call fcn.00482110
push esi
inc esi
mov byte [ebp - 4], 2
lea ecx, [ebp - 0x158]
mov dword [ebp - 0x1a8], esi
call fcn.0050a340
xor eax, eax
mov dword [ebp - 0x78], 0
mov dword [ebp - 0x74], 7
mov word [ebp - 0x88], ax
lea eax, [ebp - 0x58]
mov byte [ebp - 4], 3
push eax
lea ecx, [ebp - 0x150]
call fcn.004fb800
or dword [ebp - 0x1c4], 1
mov byte [ebp - 4], 4
lea edx, [ebp - 0x58]
cmp dword [ebp - 0x44], 8
mov dword [ebp - 0x1b0], 0
cmovae edx, dword [ebp - 0x58]
xor eax, eax
mov ecx, edx
mov dword [ebp - 0x1ac], 7
mov word [ebp - 0x1c0], ax
lea esi, [ecx + 2]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x501274
sub ecx, esi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x1c0]
call fcn.0042fe00
lea eax, [ebp - 0x88]
mov byte [ebp - 4], 5
push eax
lea eax, [ebp - 0x1c0]
push eax
push dword [ebp - 0x1ec]
call fcn.00509490
lea ecx, [ebp - 0x1c0]
call fcn.0042fd70
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 3
call fcn.0042fd70
cmp dword [ebp - 0x74], 8
lea ecx, [ebp - 0x16c]
push ecx
push 0
lea eax, [ebp - 0x88]
mov dword [ebp - 0x16c], 0
cmovae eax, dword [ebp - 0x88]
push 1
push eax
call dword [sym.imp.ADVAPI32.dll_CredReadW]
test eax, eax
jne 0x501692
call dword [sym.imp.KERNEL32.DLL_GetLastError]
mov ecx, dword [ebp - 0x1e0]
mov edx, 2
push 0
push eax
call fcn.005002a0
add esp, 8
mov eax, 8
cmp dword [ebp - 0x1a8], 2
cmovle edi, eax
push 0x854764
mov dword [ebp - 0x1a4], edi
call fcn.0067f606
add esp, 4
test eax, eax
jne 0x5023ed
push eax
push 0x761dc7
lea ecx, [ebp - 0x188]
mov dword [ebp - 0x178], eax
mov dword [ebp - 0x174], 0xf
mov byte [ebp - 0x188], al
call fcn.00430160
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x34]
push 0
push 0x761dc7
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x20], 0xf
mov byte [ebp - 0x34], 0
call fcn.00430160
mov eax, dword [ebp - 0x1d4]
mov byte [ebp - 4], 7
mov dword [ebp - 0x190], 0
mov dword [ebp - 0x18c], 0xf
mov edx, dword [eax + 4]
mov ecx, edx
mov byte [ebp - 0x1a0], 0
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x5013b8
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0x1a0]
call fcn.00430160
lea eax, [ebp - 0x188]
mov byte [ebp - 4], 8
push eax
lea edx, [ebp - 0x34]
lea ecx, [ebp - 0x1a0]
call fcn.005f8830
add esp, 4
mov byte [ebp - 4], 7
mov edx, dword [ebp - 0x18c]
test eax, eax
setne byte [ebp - 0x16d]
cmp edx, 0x10
jb 0x501431
mov ecx, dword [ebp - 0x1a0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x501427
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x5023f3
push edx
push ecx
call fcn.0067bc93
add esp, 8
mov byte [ebp - 4], 6
mov edx, dword [ebp - 0x20]
mov dword [ebp - 0x190], 0
mov dword [ebp - 0x18c], 0xf
mov byte [ebp - 0x1a0], 0
cmp edx, 0x10
jb 0x501484
mov ecx, dword [ebp - 0x34]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x50147a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x5023f3
push edx
push ecx
call fcn.0067bc93
add esp, 8
mov byte [ebp - 4], 3
mov edx, dword [ebp - 0x174]
cmp edx, 0x10
jb 0x5014c2
mov ecx, dword [ebp - 0x188]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x5014b8
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x5023f3
push edx
push ecx
call fcn.0067bc93
add esp, 8
cmp byte [ebp - 0x16d], 0
je 0x501678
push 0
push 0x761dc7
lea ecx, [ebp - 0x188]
mov dword [ebp - 0x178], 0
mov dword [ebp - 0x174], 0xf
mov byte [ebp - 0x188], 0
call fcn.00430160
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x34]
push 0
push 0x761dc7
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x20], 0xf
mov byte [ebp - 0x34], 0
call fcn.00430160
mov eax, dword [ebp - 0x1d4]
mov byte [ebp - 4], 0xa
mov dword [ebp - 0x190], 0
mov dword [ebp - 0x18c], 0xf
mov edx, dword [eax + 4]
mov ecx, edx
mov byte [ebp - 0x1a0], 0
lea esi, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x501550
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0x1a0]
call fcn.00430160
lea eax, [ebp - 0x188]
mov byte [ebp - 4], 0xb
push eax
lea edx, [ebp - 0x34]
lea ecx, [ebp - 0x1a0]
call fcn.005f8830
mov edi, eax
add esp, 4
mov esi, dword [edi]
call dword [sym.imp.KERNEL32.DLL_GetLastError]
push eax
push str.GetFromUserStorage
push str._s_error__lu_data_not_found_in_storage.
push 0x761dc7
push edi
call dword [esi + 0x24]
mov byte [ebp - 4], 0xa
add esp, 0x14
mov edx, dword [ebp - 0x18c]
cmp edx, 0x10
jb 0x5015e1
mov ecx, dword [ebp - 0x1a0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x5015d7
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x5023f8
push edx
push ecx
call fcn.0067bc93
add esp, 8
mov byte [ebp - 4], 9
mov edx, dword [ebp - 0x20]
mov dword [ebp - 0x190], 0
mov dword [ebp - 0x18c], 0xf
mov byte [ebp - 0x1a0], 0
cmp edx, 0x10
jb 0x501634
mov ecx, dword [ebp - 0x34]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x50162a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x5023f8
push edx
push ecx
call fcn.0067bc93
add esp, 8
mov byte [ebp - 4], 3
mov edx, dword [ebp - 0x174]
cmp edx, 0x10
jb 0x501672
mov ecx, dword [ebp - 0x188]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x501668
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x5023f8
push edx
push ecx
call fcn.0067bc93
add esp, 8
mov edi, dword [ebp - 0x1a4]
push 0x854764
call fcn.0067f62b
add esp, 4
test eax, eax
jne 0x5023fd
jmp 0x501a01
mov edi, dword [ebp - 0x16c]
test edi, edi
jne 0x501a95
mov esi, dword [ebp - 0x1a8]
cmp esi, 2
jg 0x502200
push 0x854764
call fcn.0067f606
add esp, 4
test eax, eax
jne 0x502403
push eax
push 0x761dc7
lea ecx, [ebp - 0x188]
mov dword [ebp - 0x178], eax
mov dword [ebp - 0x174], 0xf
mov byte [ebp - 0x188], al
call fcn.00430160
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x34]
push edi
push 0x761dc7
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x20], 0xf
mov byte [ebp - 0x34], 0
call fcn.00430160
mov edi, dword [ebp - 0x1d4]
mov byte [ebp - 4], 0xd
mov dword [ebp - 0x190], 0
mov dword [ebp - 0x18c], 0xf
mov edx, dword [edi + 4]
mov ecx, edx
mov byte [ebp - 0x1a0], 0
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x501738
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0x1a0]
call fcn.00430160
lea eax, [ebp - 0x188]
mov byte [ebp - 4], 0xe
push eax
lea edx, [ebp - 0x34]
lea ecx, [ebp - 0x1a0]
call fcn.005f8830
add esp, 4
mov byte [ebp - 4], 0xd
mov edx, dword [ebp - 0x18c]
test eax, eax
setne byte [ebp - 0x16d]
cmp edx, 0x10
jb 0x5017b1
mov ecx, dword [ebp - 0x1a0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x5017a7
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x502409
push edx
push ecx
call fcn.0067bc93
add esp, 8
mov byte [ebp - 4], 0xc
mov edx, dword [ebp - 0x20]
mov dword [ebp - 0x190], 0
mov dword [ebp - 0x18c], 0xf
mov byte [ebp - 0x1a0], 0
cmp edx, 0x10
jb 0x501804
mov ecx, dword [ebp - 0x34]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x5017fa
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x502409
push edx
push ecx
call fcn.0067bc93
add esp, 8
mov byte [ebp - 4], 3
mov edx, dword [ebp - 0x174]
cmp edx, 0x10
jb 0x501842
mov ecx, dword [ebp - 0x188]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x501838
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x502409
push edx
push ecx
call fcn.0067bc93
add esp, 8
cmp byte [ebp - 0x16d], 0
je 0x5019e1
push 0
push 0x761dc7
lea ecx, [ebp - 0x188]
mov dword [ebp - 0x178], 0
mov dword [ebp - 0x174], 0xf
mov byte [ebp - 0x188], 0
call fcn.00430160
mov byte [ebp - 4], 0xf
lea ecx, [ebp - 0x34]
push 0
push 0x761dc7
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x20], 0xf
mov byte [ebp - 0x34], 0
call fcn.00430160
mov byte [ebp - 4], 0x10
mov edx, dword [edi + 4]
mov ecx, edx
mov dword [ebp - 0x190], 0
mov dword [ebp - 0x18c], 0xf
mov byte [ebp - 0x1a0], 0
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x5018c8
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0x1a0]
call fcn.00430160
lea eax, [ebp - 0x188]
mov byte [ebp - 4], 0x11
push eax
lea edx, [ebp - 0x34]
lea ecx, [ebp - 0x1a0]
call fcn.005f8830
add esp, 4
mov ecx, dword [eax]
push str.GetFromUserStorage
push str._s_error_reading_storage.
push 0x761dc7
push eax
call dword [ecx + 0x1c]
mov byte [ebp - 4], 0x10
add esp, 0x10
mov edx, dword [ebp - 0x18c]
cmp edx, 0x10
jb 0x501950
mov ecx, dword [ebp - 0x1a0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x501946
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x50240e
push edx
push ecx
call fcn.0067bc93
add esp, 8
mov byte [ebp - 4], 0xf
mov edx, dword [ebp - 0x20]
mov dword [ebp - 0x190], 0
mov dword [ebp - 0x18c], 0xf
mov byte [ebp - 0x1a0], 0
cmp edx, 0x10
jb 0x5019a3
mov ecx, dword [ebp - 0x34]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x501999
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x50240e
push edx
push ecx
call fcn.0067bc93
add esp, 8
mov byte [ebp - 4], 3
mov edx, dword [ebp - 0x174]
cmp edx, 0x10
jb 0x5019e1
mov ecx, dword [ebp - 0x188]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x5019d7
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x50240e
push edx
push ecx
call fcn.0067bc93
add esp, 8
push 0x854764
call fcn.0067f62b
add esp, 4
test eax, eax
jne 0x502413
mov edi, 1
mov dword [ebp - 0x1a4], edi
mov esi, dword [ebp - 0x1a8]
lea ecx, [ebp - 0x88]
call fcn.0042fd70
lea ecx, [ebp - 0x168]
mov byte [ebp - 4], 1
call fcn.0047f420
mov eax, 0x4c4
cmp word [ebp - 0x1e4], ax
jge 0x5011d0
mov ecx, dword [ebp - 0x1e8]
mov eax, ecx
mov dword [ecx + 0x10], 0
cmp dword [ecx + 0x14], 8
jb 0x501a4a
mov eax, dword [ecx]
xor ecx, ecx
mov word [eax], cx
mov esi, dword [ebp - 0x40]
mov edi, dword [ebp - 0x3c]
cmp esi, edi
je 0x50220b
push esi
lea ecx, [ebp - 0x58]
call fcn.0042fc50
mov ecx, dword [ebp - 0x1e8]
lea eax, [ebp - 0x58]
mov byte [ebp - 4], 0x21
cmp dword [ebp - 0x44], 8
push dword [ebp - 0x48]
cmovae eax, dword [ebp - 0x58]
push eax
call fcn.0042ff20
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 1
call fcn.0042fd70
add esi, 0x18
jmp 0x501a55
mov esi, dword [edi + 0x30]
mov edx, esi
lea ecx, [edx + 2]
nop dword [eax]
mov ax, word [edx]
add edx, 2
test ax, ax
jne 0x501aa0
mov eax, dword [ebp - 0x1e0]
sub edx, ecx
sar edx, 1
mov ecx, eax
cmp dword [eax + 0x14], 8
jb 0x501abf
mov ecx, dword [eax]
push edx
mov edx, dword [eax + 0x10]
push esi
call fcn.00438980
add esp, 8
test eax, eax
je 0x501b12
mov eax, dword [ebp - 0x3c]
mov esi, dword [ebp - 0x40]
mov dword [ebp - 0x1a4], 8
cmp esi, eax
je 0x501afd
mov edi, eax
mov ecx, esi
call fcn.0042fd70
add esi, 0x18
cmp esi, edi
jne 0x501ae6
mov esi, dword [ebp - 0x40]
mov edi, dword [ebp - 0x16c]
push edi
mov dword [ebp - 0x3c], esi
call dword [sym.imp.ADVAPI32.dll_CredFree]
mov edi, dword [ebp - 0x1a4]
jmp 0x501a01
cmp dword [ebp - 0x1d8], 0
je 0x50218b
cmp byte [ebp - 0x16e], 0
jne 0x50218b
cmp dword [edi + 0x24], 0
je 0x501cae
xor esi, esi
nop dword [eax + eax]
cmp esi, dword [edi + 0x24]
jae 0x501cae
mov eax, dword [edi + 0x28]
mov ecx, esi
add ecx, ecx
mov dword [ebp - 0x178], 0
mov dword [ebp - 0x174], 7
mov edx, dword [eax + ecx*8]
mov dword [ebp - 0x1cc], edx
mov edx, dword [eax + ecx*8 + 0xc]
mov ecx, edx
xor eax, eax
mov word [ebp - 0x188], ax
lea edi, [ecx + 2]
nop
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x501b80
sub ecx, edi
sar ecx, 1
push ecx
push edx
lea ecx, [ebp - 0x188]
call fcn.0042fe00
mov byte [ebp - 4], 0x12
xor eax, eax
mov edi, dword [ebp - 0x1cc]
mov ecx, edi
mov dword [ebp - 0x190], 0
mov dword [ebp - 0x18c], 7
mov word [ebp - 0x1a0], ax
lea edx, [ecx + 2]
nop dword [eax + eax]
mov ax, word [ecx]
add ecx, 2
test ax, ax
jne 0x501bd0
sub ecx, edx
sar ecx, 1
push ecx
push edi
lea ecx, [ebp - 0x1a0]
call fcn.0042fe00
movups xmm0, xmmword [ebp - 0x1a0]
xor eax, eax
mov word [ebp - 0x1a0], ax
movups xmmword [ebp - 0xb8], xmm0
movq xmm0, qword [ebp - 0x190]
movq qword [ebp - 0xa8], xmm0
movups xmm0, xmmword [ebp - 0x188]
mov dword [ebp - 0x190], 0
mov dword [ebp - 0x18c], 7
movups xmmword [ebp - 0xa0], xmm0
mov word [ebp - 0x188], ax
movq xmm0, qword [ebp - 0x178]
movq qword [ebp - 0x90], xmm0
mov dword [ebp - 0x178], eax
mov dword [ebp - 0x174], 7
mov ecx, dword [ebp - 0x1d8]
lea eax, [ebp - 0xb8]
push eax
mov byte [ebp - 4], 0x14
call fcn.0050a1a0
lea ecx, [ebp - 0xa0]
call fcn.0042fd70
lea ecx, [ebp - 0xb8]
call fcn.0042fd70
lea ecx, [ebp - 0x1a0]
call fcn.0042fd70
lea ecx, [ebp - 0x188]
mov byte [ebp - 4], 3
call fcn.0042fd70
mov edi, dword [ebp - 0x16c]
inc esi
jmp 0x501b40
xorps xmm0, xmm0
lea ecx, [edi + 0x10]
lea edx, [ebp - 0x1d0]
movlpd qword [ebp - 0x1d0], xmm0
call fcn.00521180
test eax, eax
je 0x501cda
mov dword [ebp - 0x1a4], 1
jmp 0x50217e
push 0x854764
call fcn.0067f606
add esp, 4
test eax, eax
jne 0x502419
push eax
push 0x761dc7
lea ecx, [ebp - 0x1c0]
mov dword [ebp - 0x1b0], eax
mov dword [ebp - 0x1ac], 0xf
mov byte [ebp - 0x1c0], al
call fcn.00430160
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x1a0]
push 0
push 0x761dc7
mov dword [ebp - 0x190], 0
mov dword [ebp - 0x18c], 0xf
mov byte [ebp - 0x1a0], 0
call fcn.00430160
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x188]
push 9
push str.AdobeTime
mov dword [ebp - 0x178], 0
mov dword [ebp - 0x174], 0xf
mov byte [ebp - 0x188], 0
call fcn.00430160
lea eax, [ebp - 0x1c0]
mov byte [ebp - 4], 0x17
push eax
lea edx, [ebp - 0x1a0]
lea ecx, [ebp - 0x188]
call fcn.005f8830
add esp, 4
mov byte [ebp - 4], 0x16
mov edx, dword [ebp - 0x174]
test eax, eax
setne byte [ebp - 0x16d]
cmp edx, 0x10
jb 0x501dde
mov ecx, dword [ebp - 0x188]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x501dd4
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x50241f
push edx
push ecx
call fcn.0067bc93
add esp, 8
mov byte [ebp - 4], 0x15
mov edx, dword [ebp - 0x18c]
mov dword [ebp - 0x178], 0
mov dword [ebp - 0x174], 0xf
mov byte [ebp - 0x188], 0
cmp edx, 0x10
jb 0x501e37
mov ecx, dword [ebp - 0x1a0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x501e2d
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x50241f
push edx
push ecx
call fcn.0067bc93
add esp, 8
mov byte [ebp - 4], 3
mov edx, dword [ebp - 0x1ac]
cmp edx, 0x10
jb 0x501e75
mov ecx, dword [ebp - 0x1c0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x501e6b
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x50241f
push edx
push ecx
call fcn.0067bc93
add esp, 8
cmp byte [ebp - 0x16d], 0
je 0x502081
push 0
push 0x761dc7
lea ecx, [ebp - 0x1a0]
mov dword [ebp - 0x190], 0
mov dword [ebp - 0x18c], 0xf
mov byte [ebp - 0x1a0], 0
call fcn.00430160
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x1c0]
push 0
push 0x761dc7
mov dword [ebp - 0x1b0], 0
mov dword [ebp - 0x1ac], 0xf
mov byte [ebp - 0x1c0], 0
call fcn.00430160
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x188]
push 9
push str.AdobeTime
mov dword [ebp - 0x178], 0
mov dword [ebp - 0x174], 0xf
mov byte [ebp - 0x188], 0
call fcn.00430160
lea eax, [ebp - 0x1a0]
mov byte [ebp - 4], 0x1a
push eax
lea edx, [ebp - 0x1c0]
lea ecx, [ebp - 0x188]
call fcn.005f8830
add esp, 4
lea edx, [ebp - 0x1d0]
lea ecx, [ebp - 0x58]
mov esi, eax
call fcn.005a0290
mov ecx, eax
mov byte [ebp - 4], 0x1b
cmp dword [ecx + 0x14], 0x10
jb 0x501f4e
mov ecx, dword [ecx]
mov eax, dword [esi]
push ecx
push str.GetFromUserStorage
push str._s_Credential_Modification_Time:__s
push esi
call dword [eax + 0xc]
mov byte [ebp - 4], 0x1a
add esp, 0x10
mov edx, dword [ebp - 0x44]
cmp edx, 0x10
jb 0x501f9a
mov ecx, dword [ebp - 0x58]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x501f90
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x502424
push edx
push ecx
call fcn.0067bc93
add esp, 8
mov byte [ebp - 4], 0x19
mov edx, dword [ebp - 0x174]
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 0xf
mov byte [ebp - 0x58], 0
cmp edx, 0x10
jb 0x501fea
mov ecx, dword [ebp - 0x188]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x501fe0
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x502424
push edx
push ecx
call fcn.0067bc93
add esp, 8
mov byte [ebp - 4], 0x18
mov edx, dword [ebp - 0x1ac]
mov dword [ebp - 0x178], 0
mov dword [ebp - 0x174], 0xf
mov byte [ebp - 0x188], 0
cmp edx, 0x10
jb 0x502043
mov ecx, dword [ebp - 0x1c0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x502039
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x502424
push edx
push ecx
call fcn.0067bc93
add esp, 8
mov byte [ebp - 4], 3
mov edx, dword [ebp - 0x18c]
cmp edx, 0x10
jb 0x502081
mov ecx, dword [ebp - 0x1a0]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x502077
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x502424
push edx
push ecx
call fcn.0067bc93
add esp, 8
push 0x854764
call fcn.0067f62b
add esp, 4
test eax, eax
jne 0x502429
mov eax, dword [ebp - 0x1d0]
lea edx, [ebp - 0x1f8]
mov dword [ebp - 0x1f8], eax
lea ecx, [ebp - 0xa0]
mov eax, dword [ebp - 0x1cc]
mov dword [ebp - 0x1f4], eax
call fcn.005a0090
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x188]
push 9
xor eax, eax
mov dword [ebp - 0x178], 0
push 0x75b398
mov dword [ebp - 0x174], 7
mov word [ebp - 0x188], ax
call fcn.0042fe00
movups xmm0, xmmword [ebp - 0x188]
xor eax, eax
mov word [ebp - 0x188], ax
movups xmmword [ebp - 0x70], xmm0
movq xmm0, qword [ebp - 0x178]
movq qword [ebp - 0x60], xmm0
mov dword [ebp - 0x178], 0
mov dword [ebp - 0x174], 7
lea eax, [ebp - 0xa0]
mov byte [ebp - 4], 0x1e
push eax
lea ecx, [ebp - 0x58]
call fcn.0042fc50
or dword [ebp - 0x1c4], 2
mov ecx, dword [ebp - 0x1d8]
lea eax, [ebp - 0x70]
push eax
mov byte [ebp - 4], 0x1f
call fcn.0050a1a0
lea ecx, [ebp - 0x58]
call fcn.0042fd70
lea ecx, [ebp - 0x70]
call fcn.0042fd70
lea ecx, [ebp - 0x188]
call fcn.0042fd70
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], 3
call fcn.0042fd70
mov edi, dword [ebp - 0x16c]
mov byte [ebp - 0x16e], 1
mov eax, dword [edi + 0x18]
xor ecx, ecx
shr eax, 1
push eax
push dword [edi + 0x1c]
mov word [ebp - 0x34], cx
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x20], 7
call fcn.0042fe00
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x34]
mov eax, dword [ebp - 0x3c]
push ecx
cmp eax, dword [ebp - 0x38]
je 0x5021cd
mov ecx, eax
call fcn.0042fc50
add dword [ebp - 0x3c], 0x18
jmp 0x5021d6
push eax
lea ecx, [ebp - 0x40]
call fcn.00449a40
movzx eax, word [ebp - 0x24]
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x1e4], eax
call fcn.0042fd70
mov edi, dword [ebp - 0x16c]
push edi
call dword [sym.imp.ADVAPI32.dll_CredFree]
mov edi, dword [ebp - 0x1a4]
jmp 0x501a01
mov edi, dword [ebp - 0x1a4]
jmp 0x501a07
lea ecx, [ebp - 0x40]
call fcn.00448080
mov eax, dword [ebp - 0x1a4]
jmp 0x5023cd
mov eax, 5
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x1c]
xor ecx, ebp
call fcn.0067ba01
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret 0x14
push eax
call fcn.0067f8f8
call fcn.00691015
call fcn.00691015
push eax
call fcn.0067f8f8
push eax
call fcn.0067f8f8
call fcn.00691015
call fcn.00691015
push eax
call fcn.0067f8f8
push eax
call fcn.0067f8f8
call fcn.00691015
call fcn.00691015
push eax
call fcn.0067f8f8
int3