Function at 0x102f1ca
Capabilities:
Delete file

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x368
mov eax, dword [0x1079e94]
or dword [ebp - 0x2ec], 0xffffffff
mov edx, dword [ebp + 8]
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0xc]
push ebx
xor ebx, ebx
cmp dword [0x107b258], ebx
mov dword [ebp - 0x360], eax
mov eax, dword [ebp + 0x10]
push esi
push edi
mov dword [ebp - 0x330], eax
mov dword [ebp - 0x338], ebx
mov dword [ebp - 0x34c], ebx
mov dword [ebp - 0x350], ebx
jne 0x102f222
cmp eax, ebx
mov dword [ebp - 0x2e8], ebx
jne 0x102f22c
mov dword [ebp - 0x2e8], 1
mov eax, dword [0x107b268]
push 0x22
mov dword [ebp - 0x364], eax
pop ecx
xor eax, eax
lea edi, [ebp - 0x2e4]
rep stosd dword es:[edi], eax
lea eax, [ebp - 0x338]
push eax
push edx
mov dword [ebp - 0x358], ebx
mov dword [ebp - 0x314], ebx
mov dword [ebp - 0x324], ebx
mov dword [ebp - 0x310], ebx
mov dword [ebp - 0x340], ebx
mov dword [ebp - 0x32c], ebx
mov dword [ebp - 0x334], ebx
mov dword [ebp - 0x30c], ebx
mov dword [ebp - 0x31c], ebx
mov dword [ebp - 0x348], ebx
mov dword [ebp - 0x318], ebx
mov dword [ebp - 0x344], ebx
mov dword [ebp - 0x354], ebx
mov dword [ebp - 0x35c], ebx
mov dword [ebp - 0x320], ebx
call fcn.0102b645
mov esi, eax
cmp esi, ebx
je 0x102f2c3
push 1
push esi
push 0xde7013e
call fcn.0105362d
jmp 0x103038c
lea eax, [ebp - 0x360]
push eax
push 0x104
lea eax, [ebp - 0x25c]
push eax
push ebx
push dword [ebp - 0x360]
push ebx
push ebx
call fcn.01019fba
mov esi, eax
cmp esi, ebx
je 0x102f2f5
push esi
push 0xdf1013e
jmp 0x1030387
lea eax, [ebp - 0x368]
push eax
lea eax, [ebp - 0x2ec]
push eax
push dword [ebp - 0x338]
call fcn.01065f4e
mov esi, eax
cmp esi, ebx
je 0x102f31f
push esi
push 0xdf4013e
jmp 0x1030387
push 0xf0000000
push 1
push 0x10080b0
push ebx
lea eax, [ebp - 0x358]
push eax
call dword [sym.imp.ADVAPI32.dll_CryptAcquireContextW]
test eax, eax
jne 0x102f34f
call fcn.0106d6ff
mov esi, eax
push esi
push 0xdfe013e
jmp 0x1030387
push dword [ebp - 0x2e8]
push 0x1008acc
push 0x1008aac
push dword [ebp - 0x2ec]
call fcn.0102c102
mov esi, eax
cmp esi, ebx
je 0x102f37b
push esi
push 0xe09013e
jmp 0x1030387
lea eax, [ebp - 0x2fc]
push eax
push 0
push dword [ebp - 0x2e8]
mov ebx, 0x1008a94
push 1
push 1
push ebx
mov edi, 0x1008a74
push edi
push dword [ebp - 0x2ec]
call fcn.0102bfe2
mov esi, eax
test esi, esi
je 0x102f3b6
push esi
push 0xe17013e
jmp 0x1030387
lea eax, [ebp - 0x300]
push eax
push 0
push dword [ebp - 0x2e8]
push 1
push 1
push 0x1008a54
push edi
push dword [ebp - 0x2ec]
call fcn.0102bfe2
mov esi, eax
test esi, esi
je 0x102f3eb
push esi
push 0xe22013e
jmp 0x1030387
and dword [ebp - 0x2f8], 0
mov eax, dword [ebp - 0x300]
dec eax
dec eax
push 0x40
pop esi
je 0x102f4ef
dec eax
je 0x102f435
mov eax, 0x1008a54
push eax
push eax
push 0x98b
call fcn.01052a94
push eax
push 0x1008a2c
call fcn.0105b329
add esp, 0x10
mov esi, 0x8007000d
push esi
push 0xe5e013e
jmp 0x1030387
cmp dword [ebp - 0x2fc], 0x80
mov dword [ebp - 0x2f4], 0x20
je 0x102f474
push ebx
push 0x98b
call fcn.01052a94
push eax
push 0x1008a10
call fcn.0105b329
add esp, 0xc
mov esi, 0x8007000d
push esi
push 0xe45013e
jmp 0x1030387
lea eax, [ebp - 0x33c]
push eax
push 0xe0000102
push dword [ebp - 0x2e8]
push 1
push 1
push 0x10089fc
push edi
push dword [ebp - 0x2ec]
call fcn.0102bfe2
test eax, eax
je 0x102f4ad
push eax
push eax
push 0xe50013e
call fcn.0105362d
jmp 0x102f4b3
mov dword [ebp - 0x2f4], esi
xor ebx, ebx
lea eax, [ebp - 0x33c]
push eax
lea eax, [ebp - 0x350]
push eax
push dword [ebp - 0x2e8]
push 0x10089f0
push edi
push dword [ebp - 0x2ec]
call fcn.0102c3a4
mov esi, eax
cmp esi, ebx
je 0x102f584
push esi
push 0xe7f013e
jmp 0x1030387
cmp dword [ebp - 0x2fc], 0x28
mov dword [ebp - 0x2f4], 0x10
jne 0x102f50e
mov dword [ebp - 0x2f8], 1
jmp 0x102f51a
cmp dword [ebp - 0x2fc], esi
jne 0x1030362
lea eax, [ebp - 0x328]
push eax
xor ebx, ebx
push ebx
push dword [ebp - 0x2e8]
push 1
push 1
push 0x10089e4
push edi
push dword [ebp - 0x2ec]
call fcn.0102bfe2
mov esi, eax
cmp esi, ebx
je 0x102f550
push esi
push 0xe6c013e
jmp 0x1030387
cmp dword [ebp - 0x328], 3
je 0x102f4b5
push 0x98b
call fcn.01052a94
push eax
push 0x10089c8
call fcn.0105b329
pop ecx
pop ecx
mov esi, 0x8007000d
push esi
push 0xe74013e
jmp 0x1030387
lea eax, [ebp - 0x34c]
push eax
push ebx
push dword [ebp - 0x2e8]
push 0x10089b4
push edi
push dword [ebp - 0x2ec]
call fcn.0102c075
mov esi, eax
cmp esi, ebx
je 0x102f5b4
push esi
push 0xe88013e
jmp 0x1030387
lea eax, [ebp - 0x328]
push eax
push ebx
push dword [ebp - 0x2e8]
push 1
push 1
push 0x10089a0
push edi
push dword [ebp - 0x2ec]
call fcn.0102bfe2
cmp eax, ebx
je 0x102f5e6
push eax
push 0xe93013e
call fcn.01053610
lea eax, [ebp - 0x2e4]
push eax
push ebx
push ebx
push ebx
push dword [ebp - 0x34c]
push dword [ebp - 0x360]
push dword [ebp - 0x358]
push dword [ebp - 0x2fc]
push dword [ebp - 0x2f4]
call fcn.0102ecf0
mov esi, eax
cmp esi, ebx
je 0x102f624
push esi
push 0xea6013e
jmp 0x1030387
push dword [ebp - 0x33c]
lea eax, [ebp - 0x2e4]
push dword [ebp - 0x350]
push eax
call fcn.0102b17a
mov esi, eax
cmp esi, ebx
je 0x102f667
push esi
push 0xead013e
call fcn.01053610
cmp dword [0x107b254], 2
jl 0x103038c
cmp dword [ebp - 0x2f4], 0x40
jne 0x103038c
cmp dword [0x107b258], ebx
jne 0x102f681
cmp dword [ebp - 0x2e8], ebx
jne 0x102f681
mov dword [0x107b268], 1
call fcn.0102ae45
cmp dword [ebp - 0x300], 2
je 0x102f69c
cmp dword [ebp - 0x2f4], 0x40
jne 0x102fe39
lea eax, [ebp - 0x304]
push eax
lea eax, [ebp - 0x314]
push eax
mov esi, 0xe0000102
push esi
lea eax, [ebp - 0x2e4]
push eax
mov ebx, 0x1008988
push ebx
mov edi, 0x1008964
push edi
push dword [ebp - 0x2ec]
call fcn.0102bddb
test eax, eax
je 0x102f6f1
cmp dword [ebp - 0x2f4], 0x40
mov ecx, 0x1008920
je 0x102f6e5
mov ecx, 0x10088d8
push eax
push 0xed3013e
push ecx
call fcn.0105364b
push 0x1003410
call fcn.0105b329
cmp dword [ebp - 0x2e8], 0
pop ecx
je 0x102f71d
push 0x1007eb8
call fcn.0105b329
push edi
push 0x1008140
call fcn.0105b329
add esp, 0xc
push ebx
push 0x10047c0
call fcn.0105b329
cmp dword [ebp - 0x314], 0
pop ecx
pop ecx
je 0x102f775
push dword [ebp - 0x304]
push dword [ebp - 0x314]
call fcn.0102c481
push 0xffffffffffffffff
push dword [ebp - 0x304]
push dword [ebp - 0x314]
call fcn.0102aa93
mov esi, eax
test esi, esi
je 0x102f768
push esi
push 0xee1013e
jmp 0x1030387
push 0x1003410
call fcn.0105b329
pop ecx
xor esi, esi
lea eax, [ebp - 0x33c]
push eax
lea eax, [ebp - 0x324]
push eax
push esi
lea eax, [ebp - 0x2e4]
push eax
mov esi, 0x10088d0
push esi
push edi
push dword [ebp - 0x2ec]
call fcn.0102bddb
test eax, eax
je 0x102f7c0
cmp dword [ebp - 0x2f4], 0x40
mov ecx, 0x100889c
je 0x102f7b4
mov ecx, 0x1008868
push eax
push 0xef4013e
push ecx
call fcn.0105364b
cmp dword [ebp - 0x2e8], 0
je 0x102f7d8
push esi
push edi
push 0x1008850
call fcn.0105b329
add esp, 0xc
cmp dword [ebp - 0x314], 0
je 0x102f83b
cmp dword [ebp - 0x324], 0
je 0x102f83b
push 2
push 0x2400
push dword [ebp - 0x33c]
push dword [ebp - 0x324]
push dword [ebp - 0x304]
push dword [ebp - 0x314]
push 0x1008840
push 0x98f
call fcn.0102d532
push eax
push dword [ebp - 0x2e8]
push dword [ebp - 0x330]
call fcn.0102c9cb
mov esi, eax
test esi, esi
je 0x102f83b
push esi
push 0xf0b013e
jmp 0x1030387
lea eax, [ebp - 0x308]
push eax
push 0
push dword [ebp - 0x2e8]
push 1
push 1
push 0x100882c
push 0x1008810
push dword [ebp - 0x2ec]
call fcn.0102bfe2
mov esi, eax
test esi, esi
je 0x102f874
push esi
push 0xf1a013e
jmp 0x1030387
cmp dword [ebp - 0x2f8], 0
mov edi, 0x10087ec
je 0x102f88a
mov dword [ebp - 0x304], edi
jmp 0x102f8a7
cmp dword [ebp - 0x300], 2
mov dword [ebp - 0x304], 0x10087b8
je 0x102f8a7
mov dword [ebp - 0x304], 0x1008790
cmp dword [ebp - 0x308], 0
jbe 0x102fb28
mov edi, dword [sym.imp.USER32.dll_wsprintfW]
mov dword [ebp - 0x2fc], 1
xor esi, esi
cmp dword [ebp - 0x2f8], esi
je 0x102f8d6
mov dword [ebp - 0x300], ebx
jmp 0x102f8df
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x300], eax
cmp dword [ebp - 0x30c], esi
je 0x102f8f9
push dword [ebp - 0x30c]
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov dword [ebp - 0x30c], esi
cmp dword [ebp - 0x310], esi
je 0x102f913
push dword [ebp - 0x310]
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov dword [ebp - 0x310], esi
push dword [ebp - 0x2fc]
lea eax, [ebp - 0x2c]
push 0x1008780
push eax
call edi
add esp, 0xc
lea eax, [ebp - 0x2f0]
push eax
lea eax, [ebp - 0x30c]
push eax
push 0
lea eax, [ebp - 0x2e4]
push eax
push dword [ebp - 0x300]
push dword [ebp - 0x304]
push dword [ebp - 0x2ec]
call fcn.0102bddb
mov esi, eax
test esi, esi
jne 0x102fb6a
push 0x1003410
call fcn.0105b329
cmp dword [ebp - 0x2e8], esi
pop ecx
je 0x102f97d
push 0x1007eb8
call fcn.0105b329
pop ecx
push dword [ebp - 0x300]
push dword [ebp - 0x304]
push 0x1008850
call fcn.0105b329
add esp, 0xc
push dword [ebp - 0x2f0]
push dword [ebp - 0x30c]
call fcn.0102c481
push 0xffffffffffffffff
push dword [ebp - 0x2f0]
push dword [ebp - 0x30c]
call fcn.0102aa93
mov esi, eax
test esi, esi
jne 0x102fb75
push dword [ebp - 0x2fc]
lea eax, [ebp - 0x54]
push 0x1008774
push eax
call edi
add esp, 0xc
lea eax, [ebp - 0x328]
push eax
lea eax, [ebp - 0x310]
push eax
push esi
lea eax, [ebp - 0x2e4]
push eax
lea eax, [ebp - 0x54]
push eax
push 0x1008810
push dword [ebp - 0x2ec]
call fcn.0102bddb
mov esi, eax
test esi, esi
jne 0x102fb80
push 0x1003410
call fcn.0105b329
cmp dword [ebp - 0x2e8], esi
pop ecx
je 0x102fa35
lea eax, [ebp - 0x54]
push eax
push 0x1008810
push 0x1008850
call fcn.0105b329
add esp, 0xc
cmp dword [0x107b258], 0
je 0x102fa54
push dword [ebp - 0x328]
push dword [ebp - 0x310]
push 0x1804
call fcn.01024ccd
push 1
push 0xa400
push dword [ebp - 0x328]
push dword [ebp - 0x310]
push dword [ebp - 0x2f0]
push dword [ebp - 0x30c]
push 0x1008760
push 0x990
call fcn.0102d532
push eax
push dword [ebp - 0x2e8]
push dword [ebp - 0x330]
call fcn.0102c9cb
mov esi, eax
test esi, esi
jne 0x102fb8b
push dword [ebp - 0x2fc]
lea eax, [ebp - 0x2c]
push 0x1008780
push eax
call edi
add esp, 0xc
push esi
push dword [ebp - 0x2e8]
lea eax, [ebp - 0x2c]
push esi
push 1
push eax
push 0x1008790
push dword [ebp - 0x2ec]
call fcn.0102c1ef
mov esi, eax
test esi, esi
jne 0x102fb96
lea eax, [ebp - 0x300]
push eax
push esi
push dword [ebp - 0x2e8]
lea eax, [ebp - 0x2c]
push 1
push 2
push eax
push 0x1008790
push dword [ebp - 0x2ec]
call fcn.0102bfe2
mov esi, eax
test esi, esi
jne 0x102fba1
inc dword [ebp - 0x2fc]
mov eax, dword [ebp - 0x2fc]
dec eax
cmp eax, dword [ebp - 0x308]
jb 0x102f8c4
mov edi, 0x10087ec
cmp dword [ebp - 0x2f8], 0
jne 0x102fc0f
lea eax, [ebp - 0x308]
push eax
lea eax, [ebp - 0x340]
push eax
push 0
lea eax, [ebp - 0x2e4]
push eax
push ebx
push edi
push dword [ebp - 0x2ec]
call fcn.0102bddb
mov esi, eax
test esi, esi
je 0x102fbac
push esi
push 0xf9a013e
jmp 0x1030387
push esi
push 0xf3f013e
jmp 0x1030387
push esi
push 0xf50013e
jmp 0x1030387
push esi
push 0xf5b013e
jmp 0x1030387
push esi
push 0xf70013e
jmp 0x1030387
push esi
push 0xf7f013e
jmp 0x1030387
push esi
push 0xf8a013e
jmp 0x1030387
push 0x1003410
call fcn.0105b329
cmp dword [ebp - 0x2e8], 0
pop ecx
je 0x102fbcb
push 0x1007eb8
call fcn.0105b329
pop ecx
push ebx
push edi
push 0x1008850
call fcn.0105b329
add esp, 0xc
push dword [ebp - 0x308]
push dword [ebp - 0x340]
call fcn.0102c481
push 0xffffffffffffffff
push dword [ebp - 0x308]
push dword [ebp - 0x340]
call fcn.0102aa93
mov esi, eax
test esi, esi
je 0x102fc0f
push esi
push 0xfa8013e
jmp 0x1030387
lea eax, [ebp - 0x2f0]
push eax
lea eax, [ebp - 0x32c]
push eax
push 0
lea eax, [ebp - 0x2e4]
push eax
push ebx
mov edi, 0x1003220
push edi
push dword [ebp - 0x2ec]
call fcn.0102bddb
mov esi, eax
test esi, esi
je 0x102fc49
push esi
push 0xfb6013e
jmp 0x1030387
push 0x1003410
call fcn.0105b329
cmp dword [ebp - 0x2e8], 0
pop ecx
je 0x102fc68
push 0x1007eb8
call fcn.0105b329
pop ecx
push ebx
push edi
push 0x1008850
call fcn.0105b329
add esp, 0xc
push dword [ebp - 0x2f0]
push dword [ebp - 0x32c]
call fcn.0102c481
push 0xffffffffffffffff
push dword [ebp - 0x2f0]
push dword [ebp - 0x32c]
call fcn.0102aa93
mov esi, eax
test esi, esi
je 0x102fcac
push esi
push 0xfc4013e
jmp 0x1030387
push dword [ebp - 0x2f0]
push dword [ebp - 0x32c]
call fcn.0102caeb
test eax, eax
je 0x102fccc
push eax
push 0xfc7013e
call fcn.01053610
cmp dword [ebp - 0x2f8], 0
je 0x102fd96
lea eax, [ebp - 0x2f0]
push eax
lea eax, [ebp - 0x334]
push eax
push 0
lea eax, [ebp - 0x2e4]
push eax
push ebx
mov edi, 0x1008750
push edi
push dword [ebp - 0x2ec]
call fcn.0102bddb
mov esi, eax
test esi, esi
je 0x102fd13
push esi
push 0xfd6013e
jmp 0x1030387
push 0x1003410
call fcn.0105b329
cmp dword [ebp - 0x2e8], 0
pop ecx
je 0x102fd32
push 0x1007eb8
call fcn.0105b329
pop ecx
push ebx
push edi
push 0x1008850
call fcn.0105b329
add esp, 0xc
push dword [ebp - 0x2f0]
push dword [ebp - 0x334]
call fcn.0102c481
push 0xffffffffffffffff
push dword [ebp - 0x2f0]
push dword [ebp - 0x334]
call fcn.0102aa93
mov esi, eax
test esi, esi
je 0x102fd76
push esi
push 0xfe4013e
jmp 0x1030387
push dword [ebp - 0x2f0]
push dword [ebp - 0x334]
call fcn.0102caeb
test eax, eax
je 0x102fd96
push eax
push 0xfe7013e
call fcn.01053610
lea eax, [ebp - 0x35c]
push eax
push 0
push dword [ebp - 0x2e8]
lea eax, [ebp - 0x2e4]
push eax
mov ebx, 0x1008734
push ebx
mov edi, 0x100870c
push edi
push dword [ebp - 0x2ec]
call fcn.0102c2ad
mov esi, eax
test esi, esi
je 0x102fdd4
push esi
push 0xff5013e
jmp 0x1030387
push dword [ebp - 0x35c]
push ebx
push edi
push 0x1008014
call fcn.0105b329
add esp, 0x10
lea eax, [ebp - 0x308]
push eax
push 0
push dword [ebp - 0x2e8]
lea eax, [ebp - 0x2e4]
push eax
mov ebx, 0x10086f8
push ebx
push edi
push dword [ebp - 0x2ec]
call fcn.0102c32b
mov esi, eax
test esi, esi
je 0x102fe22
push esi
push 0x1005013e
jmp 0x1030387
push dword [ebp - 0x308]
push ebx
push edi
push 0x10086d4
call fcn.0105b329
add esp, 0x10
xor ebx, ebx
cmp dword [ebp - 0x2f8], ebx
mov esi, 0xe0000102
je 0x102fe70
cmp dword [ebp - 0x2e8], ebx
je 0x1030353
push dword [ebp - 0x2ec]
call fcn.0102d988
cmp eax, ebx
je 0x1030353
push eax
push 0x1012013e
jmp 0x103034e
lea eax, [ebp - 0x2f8]
push eax
push esi
push dword [ebp - 0x2e8]
mov edi, 0x10086c4
push 1
push 1
push 0x100882c
push edi
push dword [ebp - 0x2ec]
call fcn.0102bfe2
cmp eax, ebx
je 0x102fec7
cmp dword [ebp - 0x2f4], 0x40
mov dword [ebp - 0x2f8], ebx
mov dword [ebp - 0x320], esi
mov ecx, 0x100869c
je 0x102febb
mov ecx, 0x1008674
push eax
push 0x102d013e
push ecx
call fcn.0105364b
lea eax, [ebp - 0x2f0]
push eax
lea eax, [ebp - 0x31c]
push eax
push esi
lea eax, [ebp - 0x2e4]
push eax
mov esi, 0x100864c
push esi
push edi
push dword [ebp - 0x2ec]
call fcn.0102bddb
cmp eax, ebx
je 0x102ff12
cmp dword [ebp - 0x2f4], 0x40
mov ecx, 0x1008610
je 0x102ff06
mov ecx, 0x10085d4
push eax
push 0x103d013e
push ecx
call fcn.0105364b
push 0x1003410
call fcn.0105b329
cmp dword [ebp - 0x2e8], ebx
pop ecx
je 0x102ff3d
push 0x1007eb8
call fcn.0105b329
push edi
push 0x1008140
call fcn.0105b329
add esp, 0xc
push esi
push 0x10047c0
call fcn.0105b329
cmp dword [ebp - 0x31c], ebx
pop ecx
pop ecx
je 0x1030055
push dword [ebp - 0x2f0]
push dword [ebp - 0x31c]
call fcn.0102c481
push 0xffffffffffffffff
push dword [ebp - 0x2f0]
push dword [ebp - 0x31c]
call fcn.0102aa93
mov esi, eax
cmp esi, ebx
je 0x102ff8b
push esi
push 0x104b013e
jmp 0x1030387
lea eax, [ebp - 0x308]
push eax
lea eax, [ebp - 0x348]
push eax
push dword [ebp - 0x320]
lea eax, [ebp - 0x2e4]
push eax
mov ebx, 0x10085bc
push ebx
push edi
push dword [ebp - 0x2ec]
call fcn.0102bddb
mov esi, eax
test esi, esi
je 0x102ffc9
push esi
push 0x1055013e
jmp 0x1030387
cmp dword [ebp - 0x2e8], 0
je 0x102ffe1
push ebx
push edi
push 0x1008850
call fcn.0105b329
add esp, 0xc
push 2
push 0x2400
push 1
push dword [ebp - 0x308]
push dword [ebp - 0x348]
push dword [ebp - 0x2f0]
push dword [ebp - 0x31c]
push 0x1008840
push 0x98f
call fcn.0102d532
push eax
push dword [ebp - 0x2e8]
push dword [ebp - 0x330]
call fcn.0102c6f2
mov esi, eax
test esi, esi
je 0x1030055
cmp dword [ebp - 0x2f4], 0x40
mov eax, 0x1008590
je 0x103003c
mov eax, 0x1008564
push esi
push 0x106e013e
push eax
call fcn.0105364b
cmp dword [ebp - 0x330], 0
jne 0x103038c
xor ebx, ebx
cmp dword [ebp - 0x2e8], ebx
je 0x1030072
push 0x1008810
push edi
push 0x1008850
call fcn.0105b329
add esp, 0xc
lea eax, [ebp - 0x300]
push eax
lea eax, [ebp - 0x344]
push eax
push dword [ebp - 0x320]
lea eax, [ebp - 0x2e4]
push eax
push 0x1008810
push edi
push dword [ebp - 0x2ec]
call fcn.0102bddb
cmp dword [ebp - 0x2f8], ebx
mov esi, eax
je 0x10300b7
cmp esi, ebx
je 0x10300b7
push esi
push 0x1084013e
jmp 0x1030387
xor eax, eax
cmp dword [ebp - 0x2f8], ebx
jbe 0x1030214
mov ebx, 0x10087b8
inc eax
push eax
mov dword [ebp - 0x304], eax
lea eax, [ebp - 0x30]
push 0x1008550
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
lea eax, [ebp - 0x2f0]
push eax
lea eax, [ebp - 0x318]
push eax
push dword [ebp - 0x320]
lea eax, [ebp - 0x2e4]
push eax
lea eax, [ebp - 0x30]
push eax
push ebx
push dword [ebp - 0x2ec]
call fcn.0102bddb
mov esi, eax
test esi, esi
jne 0x1030328
push 0x1003410
call fcn.0105b329
cmp dword [ebp - 0x2e8], esi
pop ecx
je 0x1030137
push 0x1007eb8
call fcn.0105b329
pop ecx
lea eax, [ebp - 0x30]
push eax
push ebx
push 0x1008850
call fcn.0105b329
add esp, 0xc
push dword [ebp - 0x2f0]
push dword [ebp - 0x318]
call fcn.0102c481
push 0xffffffffffffffff
push dword [ebp - 0x2f0]
push dword [ebp - 0x318]
call fcn.0102aa93
mov esi, eax
test esi, esi
jne 0x1030330
push 1
push 0xa400
push dword [ebp - 0x2f8]
push dword [ebp - 0x300]
push dword [ebp - 0x344]
push dword [ebp - 0x2f0]
push dword [ebp - 0x318]
push 0x1008760
push 0x990
call fcn.0102d532
push eax
push dword [ebp - 0x2e8]
push dword [ebp - 0x330]
call fcn.0102c6f2
mov esi, eax
test esi, esi
je 0x10301ef
cmp dword [ebp - 0x2f4], 0x40
mov eax, 0x1008520
je 0x10301d6
mov eax, 0x10084f0
push esi
push 0x10ba013e
push eax
call fcn.0105364b
cmp dword [ebp - 0x330], 0
jne 0x103038c
push dword [ebp - 0x318]
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov eax, dword [ebp - 0x304]
and dword [ebp - 0x318], 0
cmp eax, dword [ebp - 0x2f8]
jb 0x10300ca
cmp dword [ebp - 0x2f4], 0x40
mov ebx, 0x10084b0
mov esi, 0x1008470
mov eax, ebx
je 0x103022b
mov eax, esi
push dword [ebp - 0x320]
lea ecx, [ebp - 0x2e4]
push ecx
push dword [ebp - 0x2e8]
push eax
push 0x1008444
push edi
push dword [ebp - 0x2ec]
call fcn.0102d54f
test eax, eax
je 0x103026d
cmp dword [ebp - 0x2f4], 0x40
mov ecx, ebx
je 0x1030261
mov ecx, esi
push eax
push 0x10d5013e
push ecx
call fcn.0105364b
lea eax, [ebp - 0x2f0]
push eax
lea eax, [ebp - 0x354]
push eax
push dword [ebp - 0x320]
lea eax, [ebp - 0x2e4]
push eax
mov esi, 0x1008414
push esi
push edi
push dword [ebp - 0x2ec]
call fcn.0102bddb
test eax, eax
je 0x10302bd
cmp dword [ebp - 0x2f4], 0x40
mov ecx, 0x10083d0
je 0x10302b1
mov ecx, 0x1008388
push eax
push 0x10e5013e
push ecx
call fcn.0105364b
push 0x1003410
call fcn.0105b329
cmp dword [ebp - 0x2e8], 0
pop ecx
je 0x10302e9
push 0x1007eb8
call fcn.0105b329
push edi
push 0x1008140
call fcn.0105b329
add esp, 0xc
push esi
push 0x10047c0
call fcn.0105b329
mov edi, dword [ebp - 0x354]
test edi, edi
pop ecx
pop ecx
je 0x1030353
push dword [ebp - 0x2f0]
push edi
call fcn.0102c481
push 0xffffffffffffffff
push dword [ebp - 0x2f0]
push edi
call fcn.0102aa93
mov esi, eax
test esi, esi
je 0x1030338
push esi
push 0x10f3013e
jmp 0x1030387
push esi
push 0x1097013e
jmp 0x1030387
push esi
push 0x10a5013e
jmp 0x1030387
push dword [ebp - 0x2f0]
push edi
call fcn.0102caeb
test eax, eax
je 0x1030353
push eax
push 0x10f6013e
call fcn.01053610
push 0x1003410
call fcn.0105b329
pop ecx
xor esi, esi
jmp 0x103038c
push ebx
push ebx
push 0x98b
call fcn.01052a94
push eax
push 0x1008358
call fcn.0105b329
add esp, 0x10
mov esi, 0x8007000d
push esi
push 0xe38013e
call fcn.01053610
lea eax, [ebp - 0x25c]
mov ecx, 0x208
mov byte [eax], 0
inc eax
dec ecx
jne 0x1030397
mov edi, dword [sym.imp.KERNEL32.dll_LocalFree]
xor ebx, ebx
cmp dword [ebp - 0x34c], ebx
je 0x10303b6
push dword [ebp - 0x34c]
call edi
cmp dword [ebp - 0x314], ebx
je 0x10303c6
push dword [ebp - 0x314]
call edi
cmp dword [ebp - 0x310], ebx
je 0x10303ed
mov ecx, dword [ebp - 0x328]
cmp ecx, ebx
mov eax, dword [ebp - 0x310]
je 0x10303e5
mov byte [eax], 0
inc eax
dec ecx
jne 0x10303de
push dword [ebp - 0x310]
call edi
cmp dword [ebp - 0x324], ebx
je 0x1030414
mov ecx, dword [ebp - 0x33c]
cmp ecx, ebx
mov eax, dword [ebp - 0x324]
je 0x103040c
mov byte [eax], 0
inc eax
dec ecx
jne 0x1030405
push dword [ebp - 0x324]
call edi
cmp dword [ebp - 0x340], ebx
je 0x1030424
push dword [ebp - 0x340]
call edi
cmp dword [ebp - 0x32c], ebx
je 0x1030434
push dword [ebp - 0x32c]
call edi
cmp dword [ebp - 0x334], ebx
je 0x1030444
push dword [ebp - 0x334]
call edi
cmp dword [ebp - 0x30c], ebx
je 0x1030454
push dword [ebp - 0x30c]
call edi
cmp dword [ebp - 0x31c], ebx
je 0x1030464
push dword [ebp - 0x31c]
call edi
cmp dword [ebp - 0x348], ebx
je 0x103048b
mov ecx, dword [ebp - 0x308]
cmp ecx, ebx
mov eax, dword [ebp - 0x348]
je 0x1030483
mov byte [eax], 0
inc eax
dec ecx
jne 0x103047c
push dword [ebp - 0x348]
call edi
cmp dword [ebp - 0x318], ebx
je 0x103049b
push dword [ebp - 0x318]
call edi
cmp dword [ebp - 0x344], ebx
je 0x10304c2
mov ecx, dword [ebp - 0x300]
cmp ecx, ebx
mov eax, dword [ebp - 0x344]
je 0x10304ba
mov byte [eax], 0
inc eax
dec ecx
jne 0x10304b3
push dword [ebp - 0x344]
call edi
cmp dword [ebp - 0x354], ebx
je 0x10304d2
push dword [ebp - 0x354]
call edi
cmp dword [ebp - 0x35c], ebx
je 0x10304e2
push dword [ebp - 0x35c]
call edi
cmp dword [ebp - 0x350], ebx
je 0x10304f2
push dword [ebp - 0x350]
call edi
cmp dword [ebp - 0x2e0], ebx
je 0x1030506
push dword [ebp - 0x2e0]
call dword [sym.imp.ADVAPI32.dll_CryptDestroyKey]
lea eax, [ebp - 0x2dc]
push eax
call fcn.010704a0
cmp dword [ebp - 0x358], ebx
je 0x1030527
push ebx
push dword [ebp - 0x358]
call dword [sym.imp.ADVAPI32.dll_CryptReleaseContext]
cmp dword [ebp - 0x2ec], 0xffffffff
je 0x103053b
push dword [ebp - 0x2ec]
call fcn.01066105
cmp dword [ebp - 0x338], ebx
je 0x103055f
cmp dword [0x107b274], ebx
jne 0x1030557
push dword [ebp - 0x338]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push dword [ebp - 0x338]
call edi
mov eax, dword [ebp - 0x364]
mov ecx, dword [ebp - 4]
pop edi
mov dword [0x107b268], eax
mov eax, esi
pop esi
pop ebx
call fcn.0104b509
leave
ret 0xc