Function at 0x100081b0
Capabilities:
Delete file
Get file attributes
Move file
Read file on windows
Resolve function by parsing pe exports
Set file attributes

Disassembly:
mov eax, 0x2280
call fcn.10033810
push ebx
mov ebx, dword [esp + 0x2288]
push ebp
mov ebp, dword [esp + 0x2290]
push esi
xor esi, esi
push edi
mov dword [ebp + 0xaf6a], esi
or edi, 0xffffffff
mov dword [ebp + 0x4e7c], esi
push ebp
mov dword [ebp + 8], edi
push ebx
mov dword [ebp + 0x4e90], esi
call fcn.10007520
mov eax, dword [ebp]
add esp, 8
cmp eax, esi
jne 0x1000a556
mov eax, dword [ebx + 4]
dec eax
cmp eax, 6
ja case.default.0x10008204
jmp dword [eax*4 + 0x1000a564]
mov dword [ebp + 0xaf4e], 3
jmp case.default.0x10008204
mov dword [ebp + 0xaf4e], esi
jmp case.default.0x10008204
mov dword [ebp + 0xaf4e], 2
jmp case.default.0x10008204
mov dword [ebp + 0xaf4e], 1
lea eax, [ebp + 0x15e4]
push eax
call fcn.1000e010
add esp, 4
cmp eax, esi
mov dword [ebp + 0x4e7c], eax
jne 0x10008273
push ebp
push esi
push 0x67
call fcn.1000cb20
add esp, 8
push eax
push 4
call fcn.10007220
mov eax, dword [ebp]
add esp, 0xc
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x2280
ret
cmp dword [ebx + 0x38], esi
je 0x1000827e
inc dword [ebp + 0x4e50]
cmp dword [ebx + 0x3c], esi
je 0x10008289
inc dword [ebp + 0x4e50]
cmp dword [ebx + 0x2c], esi
je 0x10008294
mov dword [ebp + 0x4e6c], esi
push ebp
call fcn.1000e470
add esp, 4
cmp eax, esi
je 0x100082c0
mov ecx, dword [ebp + 0x4e7c]
push ebp
push ecx
push eax
call fcn.10007220
mov eax, dword [ebp]
add esp, 0xc
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x2280
ret
mov eax, dword [ebx + 0x28]
cmp eax, 0x13
mov dword [ebp + 0x4e54], eax
jle 0x100082d8
mov dword [ebp + 0x4e54], 0x13
cmp dword [ebp + 0x4e54], esi
jge 0x100082e6
mov dword [ebp + 0x4e54], esi
cmp dword [ebp + 0x8be], esi
je 0x10008300
cmp dword [ebp + 0x4e54], esi
jne 0x10008300
mov dword [ebp + 0x4e54], 1
mov eax, dword [ebp + 0x4e54]
cmp eax, esi
jne 0x10008312
mov dword [ebp + 0x4e48], esi
jmp 0x10008332
cmp eax, 9
jg 0x1000831f
mov dword [ebp + 0x4e48], edi
jmp 0x10008332
add eax, 0xfffffff6
mov dword [ebp + 0x4e54], eax
mov dword [ebp + 0x4e48], 9
mov eax, dword [ebx + 0x8c]
mov edi, dword [sym.imp.KERNEL32.dll_lstrlenA]
cmp eax, esi
je 0x1000841d
mov edx, dword [ebx + 0x90]
push edx
call edi
cmp eax, 0x41
jle 0x1000835f
mov eax, dword [ebx + 0x90]
push eax
call edi
jmp 0x10008364
mov eax, 0x41
mov dword [ebp + 0xc988], eax
mov ecx, dword [ebx + 0x90]
cmp ecx, esi
je 0x1000852e
cmp eax, 0x200
ja 0x1000852e
cmp eax, esi
jbe 0x1000852e
inc eax
push eax
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
mov edi, eax
add esp, 4
cmp edi, esi
mov dword [ebp + 0x4e74], edi
jne 0x100083c9
push ebp
push esi
push 0x8f
call fcn.1000cb20
add esp, 8
push eax
push 4
call fcn.10007220
mov eax, dword [ebp]
add esp, 0xc
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x2280
ret
mov ecx, dword [ebp + 0xc988]
xor eax, eax
inc ecx
mov edx, ecx
shr ecx, 2
rep stosd dword es:[edi], eax
mov ecx, edx
and ecx, 3
rep stosb byte es:[edi], al
mov eax, dword [ebx + 0x90]
mov ecx, dword [ebp + 0x4e74]
push eax
push ecx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov ecx, dword [ebp + 0xc988]
mov esi, dword [ebp + 0x4e74]
inc ecx
lea edi, [ebp + 0xbda]
mov edx, ecx
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov edi, dword [sym.imp.KERNEL32.dll_lstrlenA]
xor esi, esi
cmp dword [ebx + 0x4c], esi
je 0x10008428
mov dword [ebp + 0x4e44], esi
mov eax, dword [ebx + 0x24]
cmp eax, esi
mov eax, 1
je 0x1000843a
mov dword [ebp + 0x4e3c], eax
cmp dword [ebx + 0x48], esi
je 0x10008445
mov dword [ebp + 0x4e90], eax
cmp dword [ebx + 0x50], esi
je 0x10008450
inc dword [ebp + 0x4e58]
cmp dword [ebx + 0x54], esi
je 0x10008477
cmp dword [ebx + 0x58], esi
je 0x10008477
mov dword [ebp + 0xaf52], eax
mov eax, dword [ebx + 0x58]
push eax
mov dword [ebp + 0x4ea0], eax
call edi
mov dword [ebp + 0x4e9c], eax
mov eax, 1
test byte [ebx + 0x20], 1
je 0x10008483
mov dword [ebp + 0x4e4c], eax
cmp dword [ebx + 0x64], esi
je 0x1000848e
mov dword [ebp + 0xaf56], eax
cmp dword [ebx + 0x78], esi
je 0x10008499
mov dword [ebp + 0x4e68], esi
cmp dword [ebx + 0xbc], esi
je 0x100084a7
mov dword [ebp + 0x4eb0], eax
mov dword [ebp + 0x4eb4], esi
mov dword [ebp + 0x4eb8], esi
mov eax, dword [ebx + 0xc0]
cmp eax, esi
je 0x10008576
cmp dword [eax], 0
je 0x10008576
mov ecx, dword [ebp + 0x4eb4]
cmp dword [eax + ecx*4], 0
je 0x100084f1
mov edx, dword [ebp + 0x4eb4]
inc edx
mov dword [ebp + 0x4eb4], edx
mov eax, edx
mov edx, dword [ebx + 0xc0]
cmp dword [edx + eax*4], 0
jne 0x100084d6
mov eax, dword [ebp + 0x4eb4]
shl eax, 2
push eax
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
mov dword [ebp + 0x4eb8], eax
test eax, eax
je 0x10008556
mov ecx, dword [ebp + 0x4eb4]
mov esi, dword [ebx + 0xc0]
shl ecx, 2
mov edx, ecx
mov edi, eax
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
jmp 0x10008576
push ebp
push esi
push 0x8f
call fcn.1000cb20
add esp, 8
push eax
push 0x10
call fcn.10007220
mov eax, dword [ebp]
add esp, 0xc
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x2280
ret
mov eax, dword [ebp + 0x4e7c]
push ebp
push eax
push 4
call fcn.10007220
mov eax, dword [ebp]
add esp, 0xc
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x2280
ret
mov eax, dword [ebx + 0x7c]
test eax, eax
je 0x10008587
mov dword [ebp + 0x4e60], 1
mov eax, dword [ebx + 0x40]
test eax, eax
je 0x10008598
mov dword [ebp + 0x4e64], 1
mov eax, dword [ebx + 0x5c]
test eax, eax
je 0x1000869f
mov eax, dword [ebx + 0x60]
test eax, eax
je 0x1000869f
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
cmp eax, 6
je 0x100085e3
push ebp
push 0
push 0x94
call fcn.1000cb20
add esp, 8
push eax
push 0x10
call fcn.10007220
mov eax, dword [ebp]
add esp, 0xc
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x2280
ret
mov ecx, dword [ebx + 0x60]
mov edi, dword [sym.imp.KERNEL32.dll_lstrcpyA]
lea edx, [esp + 0x24]
push ecx
push edx
call edi
lea eax, [esp + 0x24]
mov byte [esp + 0x26], 0
push eax
call sub.api_ms_win_crt_convert_l1_1_0.dll_atoi
mov ecx, dword [ebx + 0x60]
add esp, 4
add ecx, 2
lea edx, [esp + 0x24]
push ecx
push edx
mov esi, eax
call edi
lea eax, [esp + 0x24]
mov byte [esp + 0x26], 0
push eax
call sub.api_ms_win_crt_convert_l1_1_0.dll_atoi
mov ecx, dword [ebx + 0x60]
add esp, 4
add ecx, 4
lea edx, [esp + 0x24]
push ecx
push edx
mov dword [esp + 0x28], eax
call edi
lea eax, [esp + 0x24]
mov byte [esp + 0x26], 0
push eax
call sub.api_ms_win_crt_convert_l1_1_0.dll_atoi
add esp, 4
cmp esi, 1
jl 0x100085ba
cmp esi, 0xc
jg 0x100085ba
mov ecx, dword [esp + 0x20]
cmp ecx, 1
jl 0x100085ba
cmp ecx, 0x1f
jg 0x100085ba
push 0
push 0
push 0
push ecx
xor ecx, ecx
cmp eax, 0x50
setge cl
dec ecx
push esi
and ecx, 0x64
add ecx, 0x76c
add ecx, eax
push ecx
call fcn.1000d5b0
add esp, 0x18
mov dword [ebp + 0xaf5a], eax
mov eax, dword [ebx + 0x44]
test eax, eax
je 0x100086b0
mov dword [ebp + 0x4e40], 1
mov eax, dword [ebx + 0x48]
test eax, eax
jne 0x10008733
test byte [ebp + 0x4ee1], 0x80
jne 0x10008733
mov eax, dword [ebx + 0x30]
test eax, eax
je 0x10008733
mov eax, dword [ebx + 0x34]
test eax, eax
je 0x10008733
mov dword [ebp + 0xaf5e], 1
mov edx, dword [ebx + 0x34]
lea esi, [ebp + 0x1de4]
push edx
push esi
call fcn.10006b30
add esp, 8
push esi
call dword [sym.imp.KERNEL32.dll_lstrlenA]
inc eax
push eax
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
mov dword [ebp + 0x4e78], eax
test eax, eax
jne 0x1000872b
push ebp
push eax
push 0x67
call fcn.1000cb20
add esp, 8
push eax
push 4
call fcn.10007220
mov eax, dword [ebp]
add esp, 0xc
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x2280
ret
push esi
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov eax, dword [ebx + 0x80]
test eax, eax
je 0x1000874d
mov eax, dword [ebx + 0x84]
test eax, eax
je 0x1000874d
mov dword [ebp + 0x4e70], eax
xor edi, edi
push edi
push edi
push edi
push 0x2bc
call fcn.1000cb20
add esp, 8
push eax
call fcn.10002ed0
mov eax, dword [ebx + 0xc]
add esp, 0xc
cmp eax, edi
mov dword [esp + 0x18], edi
mov dword [esp + 0x1c], edi
je 0x1000899d
mov ebx, eax
mov esi, ebx
mov al, byte [ebx]
mov dword [esp + 0x14], esi
test al, al
je 0x100088ae
cmp al, 0x22
jne 0x10008796
xor dword [esp + 0x18], 1
cmp dword [esp + 0x18], edi
jne 0x1000889b
cmp al, 0x20
jne 0x1000889b
mov eax, ebx
sub eax, esi
cmp eax, 0xfff
jb 0x100087b8
mov eax, 0xfff
mov esi, dword [esp + 0x14]
mov ecx, eax
mov edx, ecx
lea edi, [esp + 0x1290]
shr ecx, 2
rep movsd dword es:[edi], dword [esi]
mov ecx, edx
and ecx, 3
rep movsb byte es:[edi], byte [esi]
mov byte [esp + eax + 0x1290], 0
lea eax, [esp + 0x1290]
lea ecx, [esp + 0x250]
push eax
push ecx
call fcn.10006b30
mov eax, dword [ebp + 0x8ba]
add esp, 8
test eax, eax
je 0x10008828
mov eax, dword [esp + 0x1c]
test eax, eax
jne 0x10008828
lea edx, [esp + 0x250]
push ebp
push edx
call fcn.100080a0
add esp, 8
test eax, eax
jne 0x10008901
mov dword [esp + 0x1c], 1
jmp 0x1000888c
mov eax, dword [ebp + 0xaf4e]
cmp eax, 1
je 0x1000884d
cmp eax, 2
je 0x1000884d
cmp eax, 3
je 0x1000884d
lea eax, [esp + 0x250]
push ebp
push eax
call fcn.1000d3a0
jmp 0x1000885b
lea ecx, [esp + 0x250]
push ebp
push ecx
call fcn.10007bc0
add esp, 8
test eax, eax
je 0x1000888c
cmp eax, 0xffffffff
push ebp
jne 0x1000891e
lea edx, [esp + 0x254]
push edx
push 0
push 0x84
call fcn.1000cb20
add esp, 8
push eax
call fcn.10007490
add esp, 0xc
push ebx
call dword [sym.imp.USER32.dll_CharNextA]
mov dword [esp + 0x14], eax
mov esi, eax
xor edi, edi
push ebx
call dword [sym.imp.USER32.dll_CharNextA]
mov ebx, eax
mov al, byte [ebx]
test al, al
jne 0x1000878d
lea eax, [esp + 0x250]
push esi
push eax
call fcn.10006b30
mov eax, dword [ebp + 0x8ba]
add esp, 8
cmp eax, edi
je 0x1000893a
cmp dword [esp + 0x1c], edi
jne 0x1000893a
lea ecx, [esp + 0x250]
push ebp
push ecx
call fcn.100080a0
add esp, 8
cmp eax, edi
je 0x1000899d
push ebp
push esi
push eax
call fcn.10007220
mov eax, dword [ebp]
add esp, 0xc
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x2280
ret
mov ecx, dword [esp + 0x14]
push ebp
push ecx
push eax
call fcn.10007220
mov eax, dword [ebp]
add esp, 0xc
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x2280
ret
mov edx, dword [esp + 0x18]
push edx
push eax
call fcn.10007220
mov eax, dword [ebp]
add esp, 0xc
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x2280
ret
mov eax, dword [ebp + 0xaf4e]
cmp eax, 1
je 0x1000895f
cmp eax, 2
je 0x1000895f
cmp eax, 3
je 0x1000895f
lea edx, [esp + 0x250]
push ebp
push edx
call fcn.1000d3a0
jmp 0x1000896d
lea eax, [esp + 0x250]
push ebp
push eax
call fcn.10007bc0
add esp, 8
cmp eax, edi
je 0x1000899d
cmp eax, 0xffffffff
push ebp
jne 0x100088e9
lea ecx, [esp + 0x254]
push ecx
push edi
push 0x84
call fcn.1000cb20
add esp, 8
push eax
call fcn.10007490
add esp, 0xc
mov eax, dword [ebp + 0xaf4e]
cmp eax, 2
je 0x100089ad
cmp eax, 3
jne 0x100089ec
mov esi, dword [ebp + 0x4e94]
cmp esi, edi
je 0x100089ec
cmp dword [ebp + 0x4ed4], edi
je 0x100089ce
mov edx, dword [esi + 0x54]
push ebp
push edx
call fcn.1000d040
add esp, 8
jmp 0x100089d3
mov eax, 1
push ebp
mov word [esi + 0x58], ax
call fcn.10003050
add esp, 4
cmp eax, 1
je 0x100089ec
mov esi, dword [esi + 0x64]
cmp esi, edi
jne 0x100089b7
push ebp
call fcn.10003050
add esp, 4
cmp eax, 1
push ebp
jne 0x10008a1a
mov eax, dword [ebp + 0x4e7c]
push eax
push 9
call fcn.10007220
mov eax, dword [ebp]
add esp, 0xc
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x2280
ret
call fcn.1000cf10
mov esi, eax
add esp, 4
cmp esi, edi
je 0x10008a83
cmp esi, 9
jne 0x10008a4c
mov ecx, dword [ebp + 0x4e7c]
push ebp
push ecx
push eax
call fcn.10007220
mov eax, dword [ebp]
add esp, 0xc
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x2280
ret
cmp esi, 0x10
push ebp
push edi
jne 0x10008a79
push 0x95
call fcn.1000cb20
add esp, 8
push eax
push 0x10
call fcn.10007220
mov eax, dword [ebp]
add esp, 0xc
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x2280
ret
push 0x96
jmp 0x1000a4ed
cmp dword [ebp + 0x4e98], edi
je 0x10008a9a
mov edx, dword [ebp + 0x4ea4]
push edx
call sub.api_ms_win_crt_heap_l1_1_0.dll_free
add esp, 4
cmp dword [ebp + 0x4e70], edi
jne 0x10008aca
push ebp
push edi
push 0x97
call fcn.1000cb20
add esp, 8
push eax
push 0x10
call fcn.10007220
mov eax, dword [ebp]
add esp, 0xc
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x2280
ret
cmp dword [ebp + 0x4e54], 9
jne 0x10008ad9
mov dword [ebp + 0x4e70], edi
mov eax, dword [ebp + 0xaf4e]
cmp eax, edi
jne 0x10008b33
cmp dword [ebp + 0x4e48], edi
je 0x10008b0b
cmp dword [ebp + 0x4e40], edi
jne 0x10008b0b
cmp dword [ebp + 0x4e3c], edi
jne 0x10008b0b
cmp dword [ebp + 0x4e74], edi
jne 0x10008b0b
cmp dword [ebp + 0xaf52], edi
je 0x10008b33
push ebp
push edi
push 0x98
call fcn.1000cb20
add esp, 8
push eax
push 0x10
call fcn.10007220
mov eax, dword [ebp]
add esp, 0xc
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x2280
ret
cmp dword [ebp + 0x4e98], edi
jne 0x10008b67
cmp eax, 1
jne 0x10008b48
cmp dword [ebp + 0x4e90], edi
je 0x10008b67
push ebp
push edi
push 0x87
call fcn.1000cb20
add esp, 8
push eax
mov eax, dword [ebp + 0x4e7c]
push eax
call fcn.10007490
add esp, 0xc
cmp dword [ebp + 0x4e78], edi
jne 0x10008c00
mov ecx, dword [ebp + 0x4e7c]
push 0x2f
push ecx
call fcn.1000b410
mov esi, eax
cmp esi, edi
jne 0x10008baf
mov edx, dword [ebp + 0x4e7c]
push 0x5c
push edx
call fcn.1000b410
mov esi, eax
cmp esi, edi
jne 0x10008baf
mov eax, dword [ebp + 0x4e7c]
push 0x3a
push eax
call fcn.1000b410
mov esi, eax
cmp esi, edi
je 0x10008c00
cmp byte [esi], 0x3a
jne 0x10008bbd
push esi
call dword [sym.imp.USER32.dll_CharNextA]
mov esi, eax
mov edx, dword [ebp + 0x4e7c]
mov ecx, esi
sub ecx, edx
inc ecx
push ecx
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
cmp eax, edi
mov dword [ebp + 0x4e78], eax
jne 0x10008be4
push ebp
push edi
push 0x67
jmp 0x1000900d
movsx ebx, byte [esi]
mov byte [esi], 0
mov edx, dword [ebp + 0x4e7c]
mov eax, dword [ebp + 0x4e78]
push edx
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov byte [esi], bl
mov esi, dword [ebp + 0x4e94]
xor ebx, ebx
cmp esi, edi
je 0x10008c82
push ebp
call fcn.10003050
add esp, 4
test eax, eax
jne 0x10008c82
cmp word [esi + 0x58], di
je 0x10008c7b
cmp dword [ebp + 0xaf4e], edi
je 0x10008c7a
mov ecx, dword [esi + 0x44]
push ebp
push edi
push edi
push ecx
call fcn.1000d610
add esp, 0x10
cmp eax, edi
je 0x10008c57
cmp eax, dword [ebp + 0xaf5a]
jb 0x10008c57
mov ecx, dword [ebp + 0xaf4e]
cmp ecx, 2
je 0x10008c52
cmp ecx, 3
jne 0x10008c7a
cmp eax, dword [esi + 8]
ja 0x10008c7a
cmp eax, edi
mov word [esi + 0x58], di
je 0x10008c72
cmp eax, dword [ebp + 0xaf5a]
jb 0x10008c72
mov eax, 1
mov word [esi + 0x5a], ax
jmp 0x10008c7b
xor eax, eax
mov word [esi + 0x5a], ax
jmp 0x10008c7b
inc ebx
mov esi, dword [esi + 0x64]
cmp esi, edi
jne 0x10008c0c
push ebp
call fcn.10003050
add esp, 4
cmp eax, 1
jne 0x10008cb0
mov edx, dword [ebp + 0x4e7c]
push ebp
push edx
push 9
call fcn.10007220
mov eax, dword [ebp]
add esp, 0xc
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x2280
ret
mov esi, dword [ebp + 0x4ec4]
cmp esi, edi
je 0x10008cf8
push ebp
call fcn.10003050
add esp, 4
test eax, eax
jne 0x10008cf8
mov eax, dword [ebp + 0xaf4e]
cmp eax, edi
je 0x10008ce8
cmp eax, 3
je 0x10008ce8
mov eax, dword [esi + 8]
mov ecx, dword [ebp + 0xaf5a]
cmp eax, ecx
jb 0x10008ce8
mov esi, dword [esi + 0x14]
jmp 0x10008cf4
push ebp
push esi
call fcn.1000ccf0
add esp, 8
mov esi, eax
cmp esi, edi
jne 0x10008cba
push ebp
call fcn.10003050
add esp, 4
cmp eax, 1
jne 0x10008d26
mov ecx, dword [ebp + 0x4e7c]
push ebp
push ecx
push 9
call fcn.10007220
mov eax, dword [ebp]
add esp, 0xc
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x2280
ret
cmp ebx, edi
jne 0x10008da7
cmp dword [ebp + 0x4ec4], edi
jne 0x10008da7
mov ecx, dword [ebp + 0x4e94]
cmp ecx, edi
je 0x10008d54
cmp dword [ebp + 0xaf56], edi
jne 0x10008da7
cmp dword [ebp + 0x4e50], edi
jne 0x10008da7
cmp dword [ebp + 0xaf52], edi
jne 0x10008da7
mov eax, dword [ebp + 0xaf4e]
cmp eax, 2
je 0x10008da0
cmp eax, 3
je 0x10008da0
cmp ecx, edi
jne 0x10008d80
cmp dword [ebp + 0xaf56], edi
jne 0x10008fac
cmp dword [ebp + 0x4e50], edi
jne 0x10008fac
mov eax, dword [ebp + 0x4e7c]
push ebp
push eax
push 0xc
call fcn.10007220
mov eax, dword [ebp]
add esp, 0xc
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x2280
ret
push ebp
push edi
jmp 0x1000a54b
cmp dword [ebp + 0x4e90], edi
je 0x10008dd2
cmp ebx, edi
jne 0x10008dd2
mov ecx, dword [ebp + 0x4e80]
mov eax, dword [ebp + 0x4e84]
or ecx, eax
jne 0x10008dcb
cmp dword [ebp + 0x4e94], edi
je 0x10008dd2
mov eax, 1
jmp 0x10008dd4
xor eax, eax
mov dword [ebp + 0x4e90], eax
mov eax, dword [ebp + 0xaf5e]
cmp eax, edi
je 0x10008e05
cmp dword [ebp + 0x4e94], edi
jne 0x10008e05
mov edx, dword [ebp + 0x4e80]
mov eax, dword [ebp + 0x4e84]
or edx, eax
jne 0x10008e05
mov dword [esp + 0x20], edi
jmp 0x10008e8a
mov eax, dword [ebp + 0x4e7c]
push edi
push 0x80
push 4
push edi
push edi
push 0xc0000000
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileA]
cmp eax, 0xffffffff
jne 0x10008e46
mov ecx, dword [ebp + 0x4e7c]
push ebp
push ecx
push 0xf
call fcn.10007220
mov eax, dword [ebp]
add esp, 0xc
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x2280
ret
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov edx, dword [ebp + 0x4e7c]
push edx
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
and eax, 0xffff
mov dword [esp + 0x20], eax
mov eax, dword [ebp + 0x4e94]
cmp eax, edi
jne 0x10008e8a
mov eax, dword [ebp + 0x4e80]
mov ecx, dword [ebp + 0x4e84]
or eax, ecx
jne 0x10008e8a
mov ecx, dword [ebp + 0x4e7c]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
cmp dword [ebp + 0x4e50], edi
je 0x10008e9e
mov dword [ebp + 0x4e80], edi
mov dword [ebp + 0x4e84], edi
xor ebx, ebx
or edi, 0xffffffff
mov dword [ebp + 0x4ea8], ebx
mov dword [ebp + 0x4eac], ebx
mov eax, dword [ebp + 0x4e90]
mov dword [esp + 0x14], edi
cmp eax, ebx
je 0x10008f7e
push ebx
push 0x80
push 3
mov dword [ebp + 0x9e], ebx
mov edx, dword [ebp + 0x4e7c]
push ebx
push ebx
push 0xc0000000
push edx
call dword [sym.imp.KERNEL32.dll_CreateFileA]
cmp eax, 0xffffffff
mov dword [esp + 0x10], eax
jne 0x10008f0c
mov eax, dword [ebp + 0x4e7c]
push ebp
push eax
push 0xd
call fcn.10007220
mov eax, dword [ebp]
add esp, 0xc
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x2280
ret
mov ecx, dword [ebp + 0x4e7c]
push 0
mov dword [ebp + 0xaf6a], ecx
mov dword [ebp + 8], eax
mov ebx, dword [ebp + 0x4e8c]
mov esi, dword [ebp + 0x4e88]
mov edx, ebx
mov ecx, esi
push edx
push ecx
push eax
call fcn.1000ddf0
add esp, 0x10
cmp eax, esi
jne 0x10008f40
cmp edx, ebx
je 0x10008f6b
mov edx, dword [ebp + 0x4e7c]
push ebp
push edx
push 2
call fcn.10007220
mov eax, dword [esp + 0x1c]
add esp, 0xc
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp]
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x2280
ret
mov dword [ebp + 0x4ea8], esi
mov dword [ebp + 0x4eac], ebx
xor ebx, ebx
jmp 0x100091af
test byte [ebp + 0x4ee1], 0x80
je 0x10008fec
mov ecx, dword [ebp + 0x4e7c]
push ebx
push 0x80
push 2
push ebx
push ebx
push 0xc0000000
push ecx
call dword [sym.imp.KERNEL32.dll_CreateFileA]
cmp eax, 0xffffffff
mov dword [esp + 0x10], eax
jne 0x10008fcc
mov edx, dword [ebp + 0x4e7c]
push ebp
push edx
push 0xd
call fcn.10007220
mov eax, dword [ebp]
add esp, 0xc
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x2280
ret
mov ecx, dword [ebp + 0x4e7c]
mov dword [ebp + 0xaf6a], ecx
mov dword [ebp + 8], eax
mov dword [ebp + 0x4ea8], ebx
mov dword [ebp + 0x4eac], ebx
jmp 0x100091af
mov edx, dword [ebp + 0x4e7c]
push ebp
push edx
call fcn.1000d9d0
add esp, 8
cmp eax, ebx
mov dword [ebp + 0xaf6a], eax
jne 0x1000902e
push ebp
push ebx
push 0x9a
call fcn.1000cb20
add esp, 8
push eax
push 4
call fcn.10007220
mov eax, dword [ebp]
add esp, 0xc
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x2280
ret
push eax
call fcn.1000dc20
add esp, 4
test eax, eax
je 0x1000904b
pop edi
pop esi
pop ebp
mov eax, 0xf
pop ebx
add esp, 0x2280
ret
mov eax, dword [ebp + 0xaf6a]
mov esi, dword [sym.imp.KERNEL32.dll_CreateFileA]
push ebx
push 0x80
push 2
push ebx
push ebx
push 0xc0000000
push eax
call esi
cmp eax, 0xffffffff
mov dword [esp + 0x10], eax
mov dword [ebp + 8], eax
jne 0x10009095
mov ecx, dword [ebp + 0xaf6a]
push ebp
push ecx
push 0xa
call fcn.10007220
mov eax, dword [ebp]
add esp, 0xc
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x2280
ret
cmp dword [ebp + 0x4e94], ebx
jne 0x100090ad
mov edx, dword [ebp + 0x4e80]
mov ecx, dword [ebp + 0x4e84]
or edx, ecx
je 0x1000910d
mov eax, dword [ebp + 0x4e7c]
push ebx
push 0x80
push 3
push ebx
push ebx
push closesocket
push eax
call esi
mov edi, eax
mov eax, dword [esp + 0x10]
cmp edi, 0xffffffff
mov dword [esp + 0x14], edi
jne 0x1000910d
cmp eax, 0xffffffff
je 0x100090ed
cmp dword [ebp + 8], eax
je 0x100090ed
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [esp + 0x10], 0xffffffff
mov ecx, dword [ebp + 0x4e7c]
push ebp
push ecx
push 0xd
call fcn.10007220
mov eax, dword [ebp]
add esp, 0xc
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x2280
ret
mov ecx, dword [ebp + 0x4e80]
mov edx, dword [ebp + 0x4e84]
mov esi, ecx
or esi, edx
je 0x10009197
push ebp
push edx
push ecx
push eax
push edi
call fcn.1000dac0
mov esi, eax
add esp, 0x14
cmp esi, ebx
je 0x10009197
push edi
mov edi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call edi
mov eax, dword [esp + 0x10]
cmp eax, 0xffffffff
je 0x10009154
cmp dword [ebp + 8], eax
je 0x10009154
push eax
call edi
mov dword [esp + 0x10], 0xffffffff
cmp esi, 0xa
jne 0x10009178
mov eax, dword [ebp + 0xaf6a]
push ebp
push eax
push esi
call fcn.10007220
mov eax, dword [ebp]
add esp, 0xc
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x2280
ret
mov eax, dword [ebp + 0x4e7c]
push ebp
push eax
push esi
call fcn.10007220
mov eax, dword [ebp]
add esp, 0xc
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x2280
ret
mov edx, dword [ebp + 0x4e80]
mov dword [ebp + 0x4ea8], edx
mov eax, dword [ebp + 0x4e84]
mov dword [ebp + 0x4eac], eax
test byte [ebp + 0x4ee1], 0x80
push 0x2000
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
cmp eax, ebx
mov dword [ebp + 0xaf66], eax
jne 0x10009216
cmp edi, 0xffffffff
je 0x100091d9
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [esp + 0x10]
cmp eax, 0xffffffff
je 0x100091f6
cmp dword [ebp + 8], eax
je 0x100091f6
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [esp + 0x10], 0xffffffff
mov ecx, dword [ebp + 0xaf6a]
push ebp
push ecx
push 4
call fcn.10007220
mov eax, dword [ebp]
add esp, 0xc
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x2280
ret
mov dword [ebp + 0x4edc], ebx
mov eax, dword [ebp + 0x4e94]
cmp eax, ebx
mov dword [esp + 0x1c], ebx
je 0x1000923d
cmp word [eax + 0x58], bx
je 0x10009236
inc dword [ebp + 0x4edc]
mov eax, dword [eax + 0x64]
cmp eax, ebx
jne 0x1000922a
mov edx, dword [ebp + 0x4ecc]
mov esi, dword [ebp + 0x4edc]
add esi, edx
mov dword [ebp + 0x4edc], esi
mov ecx, dword [ebp + 0x4eb0]
cmp ecx, ebx
mov eax, esi
jne 0x1000928c
cmp eax, 0xffff
jb 0x1000928c
push ebp
push ebx
push 0x108
call fcn.1000cb20
add esp, 8
push eax
push 8
call fcn.10007220
mov eax, dword [ebp]
add esp, 0xc
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x2280
ret
mov dword [ebp + 0x4f0e], ebx
mov ax, word [ebp + 0x4ee0]
mov dword [ebp + 0x4f06], ebx
mov dword [ebp + 0x4f0a], ebx
test ah, 0x80
je 0x100094b9
test ah, 0x10
je 0x100094b9
mov esi, dword [ebp + 0x4ec4]
cmp esi, ebx
je 0x100094b9
mov eax, dword [ebp + 0x4e74]
mov word [ebp + 0x4f44], bx
cmp eax, ebx
je 0x100092df
mov word [ebp + 0x4f44], 1
cmp esi, ebx
mov dword [ebp + 0x4f4c], ebx
mov word [ebp + 0x4f98], 1
mov dword [ebp + 0x4f70], ebx
mov dword [ebp + 0x4fa4], ebx
je 0x100094b9
mov edi, dword [sym.imp.KERNEL32.dll_lstrlenA]
mov eax, dword [ebp + 0x926]
test eax, eax
je 0x100093f2
mov eax, dword [esi + 4]
mov ebx, dword [sym.imp.KERNEL32.dll_lstrcpyA]
lea ecx, [esp + 0x3c]
push eax
push ecx
call ebx
mov edx, dword [esi]
lea eax, [esp + 0x14c]
push edx
push eax
call ebx
mov ecx, dword [esi + 8]
mov eax, dword [ebp + 0x92a]
mov ebx, dword [esi + 0xc]
xor edx, edx
mov dx, word [esi + 8]
push eax
shr ecx, 0x10
mov dword [esp + 0x144], ecx
lea ecx, [esp + 0x40]
push ecx
mov dword [esp + 0x14c], edx
mov dword [esp + 0x150], ebx
call dword [ebp + 0x926]
mov edx, dword [esi + 4]
push edx
call edi
mov edx, eax
lea eax, [esp + 0x3c]
push eax
mov dword [esp + 0x1c], edx
call edi
mov ecx, dword [esp + 0x18]
cmp eax, ecx
jle 0x100093af
mov edx, dword [esi + 4]
push edx
call sub.api_ms_win_crt_heap_l1_1_0.dll_free
mov edi, dword [sym.imp.KERNEL32.dll_lstrlenA]
add esp, 4
lea eax, [esp + 0x3c]
push eax
call edi
add eax, 2
push eax
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
add esp, 4
mov dword [esi + 4], eax
jmp 0x100093b5
mov edi, dword [sym.imp.KERNEL32.dll_lstrlenA]
mov edx, dword [esi + 4]
lea ecx, [esp + 0x3c]
push ecx
push edx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov eax, dword [esp + 0x144]
mov ecx, dword [esp + 0x140]
and eax, 0xffff
mov edx, ebx
shl ecx, 0x10
add eax, ecx
mov dword [esi + 8], eax
mov eax, dword [esp + 0x148]
xor edx, eax
and edx, 0x27
xor edx, ebx
mov dword [esi + 0xc], edx
mov eax, dword [ebp + 0x91e]
test eax, eax
je 0x10009409
lea ebx, [ebp + 0x4f40]
mov word [ebx], 0x2d
jmp 0x10009434
mov eax, dword [ebp + 0x4e4c]
test eax, eax
je 0x1000941a
mov eax, 0x14
jmp 0x1000942b
mov edx, dword [ebp + 0x4e48]
xor eax, eax
cmp edx, 9
sete al
add eax, 0x14
lea ebx, [ebp + 0x4f40]
mov word [ebx], ax
mov eax, dword [esi + 4]
push eax
mov dword [ebp + 0x4f94], eax
call edi
mov dword [ebp + 0x4f60], eax
xor eax, eax
mov dword [ebp + 0x4f64], eax
mov dword [ebp + 0x4f68], eax
mov dword [ebp + 0x4f6c], eax
lea eax, [esp + 0x10]
push ebp
push eax
push ebx
call fcn.10010380
mov ebx, eax
add esp, 0xc
test ebx, ebx
jne 0x10009564
mov ecx, dword [ebp + 0x4f6c]
mov ebx, dword [ebp + 0x4f68]
mov edx, dword [ebp + 0x4f60]
add ecx, ebx
lea eax, [ecx + edx + 0x2e]
mov edx, dword [ebp + 0x4f06]
add edx, eax
mov dword [ebp + 0x4f06], edx
mov ecx, dword [ebp + 0x4f0a]
adc ecx, 0
mov dword [ebp + 0x4f0a], ecx
mov esi, dword [esi + 0x14]
test esi, esi
jne 0x10009308
mov edi, dword [esp + 0x14]
xor ebx, ebx
mov eax, dword [ebp + 0x4f06]
mov esi, dword [ebp + 0x4ea8]
mov edx, dword [ebp + 0x4ee2]
mov ecx, dword [ebp + 0x4f0a]
add esi, eax
mov dword [ebp + 0x4eee], edx
mov dword [ebp + 0x4ea8], esi
mov edx, dword [ebp + 0x4eac]
adc edx, ecx
mov dword [ebp + 0x4fa8], ebx
mov dword [ebp + 0x4eac], edx
test byte [ebp + 0x4ee1], 0x80
je 0x100095bd
mov edx, dword [ebp + 0x4ea8]
mov eax, dword [ebp + 0x4eac]
or edx, eax
jne 0x100095bd
lea eax, [esp + 0x10]
push ebp
push eax
call fcn.100102b0
mov esi, eax
add esp, 8
cmp esi, ebx
je 0x100095a0
mov eax, dword [esp + 0x10]
cmp eax, 0xffffffff
je 0x10009545
cmp dword [ebp + 8], eax
je 0x10009545
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [esp + 0x10], 0xffffffff
mov ecx, dword [ebp + 0x4e7c]
push ebp
push ecx
push esi
call fcn.10007220
mov eax, dword [ebp]
add esp, 0xc
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x2280
ret
mov eax, dword [esp + 0x10]
cmp eax, 0xffffffff
je 0x10009581
cmp dword [ebp + 8], eax
je 0x10009581
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [esp + 0x10], 0xffffffff
mov ecx, dword [ebp + 0x4e7c]
push ebp
push ecx
push ebx
call fcn.10007220
mov eax, dword [ebp]
add esp, 0xc
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x2280
ret
mov ecx, dword [ebp + 0x4ea8]
add ecx, 4
mov dword [ebp + 0x4ea8], ecx
mov eax, dword [ebp + 0x4eac]
adc eax, ebx
mov dword [ebp + 0x4eac], eax
lea eax, [ebp + 0x4e94]
mov ebx, eax
mov dword [esp + 0x18], ebx
mov esi, dword [ebx]
test esi, esi
je 0x1000978d
mov eax, dword [ebp + 0x8ba]
mov dword [ebp + 0x8c2], 0
test eax, eax
je 0x100095fe
mov edx, dword [esi + 0x44]
mov eax, dword [ebp + 0x8da]
cmp edx, eax
jne 0x100095fe
mov dword [ebp + 0x8c2], 1
cmp word [esi + 0x58], 0
jne 0x10009643
mov eax, dword [ebp + 0x8c2]
test eax, eax
jne 0x10009643
mov eax, dword [ebp + 0x4e90]
test eax, eax
jne 0x10009637
mov edi, dword [esp + 0x14]
lea eax, [esp + 0x10]
push ebp
push eax
push edi
push esi
call fcn.10004730
mov ebx, eax
add esp, 0x10
test ebx, ebx
jne 0x10009878
lea ebx, [esi + 0x64]
mov dword [esp + 0x18], ebx
jmp 0x10009775
mov eax, dword [ebp + 0xaf4e]
test eax, eax
je 0x100096d6
lea ecx, [esp + 0x10]
push ebp
push ecx
push esi
call fcn.10004990
mov edi, eax
add esp, 0xc
test edi, edi
je 0x100096ca
cmp edi, 0x12
jne 0x100098e3
mov edx, dword [esi + 0x44]
lea ebx, [ebp + 0xbf7a]
push edx
push ebx
mov dword [esp + 0x24], 1
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push ebx
call fcn.10006500
add esp, 4
push ebp
push ebx
push 0
push 0x88
call fcn.1000cb20
add esp, 8
push eax
call fcn.10007490
mov ecx, dword [esp + 0x20]
lea eax, [esp + 0x1c]
push ebp
push eax
push ecx
push esi
call fcn.10004730
mov edi, eax
add esp, 0x1c
test edi, edi
jne 0x10009964
mov word [esi + 0x58], ax
lea ebx, [esi + 0x64]
mov dword [esp + 0x18], ebx
jmp 0x10009775
mov edx, dword [esi + 0x54]
push edx
push 2
push 0x2c0
call fcn.1000cb20
add esp, 8
push eax
lea eax, [esp + 0xa58]
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
lea ecx, [esp + 0xa5c]
push ecx
call fcn.10004250
mov edx, dword [esi + 0x44]
mov edi, dword [esi + 0x64]
push edx
call sub.api_ms_win_crt_heap_l1_1_0.dll_free
mov eax, dword [esi + 0x54]
push eax
call sub.api_ms_win_crt_heap_l1_1_0.dll_free
mov eax, dword [esi + 0x24]
add esp, 0x18
test eax, eax
je 0x10009730
mov ecx, dword [esi + 0x48]
push ecx
call sub.api_ms_win_crt_heap_l1_1_0.dll_free
add esp, 4
mov eax, dword [esi + 0x28]
test eax, eax
je 0x1000974a
mov eax, dword [esi + 0x4c]
mov ecx, dword [esi + 0x48]
cmp eax, ecx
je 0x1000974a
push eax
call sub.api_ms_win_crt_heap_l1_1_0.dll_free
add esp, 4
mov eax, dword [esi + 0x2c]
test eax, eax
je 0x1000975d
mov edx, dword [esi + 0x50]
push edx
call sub.api_ms_win_crt_heap_l1_1_0.dll_free
add esp, 4
push esi
call sub.api_ms_win_crt_heap_l1_1_0.dll_free
mov dword [ebx], edi
mov eax, dword [ebp + 0x4e98]
add esp, 4
dec eax
mov dword [ebp + 0x4e98], eax
mov dword [ebp + 0x8c2], 0
mov esi, dword [ebx]
test esi, esi
jne 0x100095d3
mov edi, dword [esp + 0x14]
mov ebx, dword [ebp + 0x4ec4]
mov dword [ebp + 0x4fa8], 1
test ebx, ebx
je 0x10009b34
push 0x68
call sub.api_ms_win_crt_heap_l1_1_0.dll_malloc
mov esi, eax
add esp, 4
test esi, esi
je 0x100099ec
mov ecx, 0x1a
xor eax, eax
mov edi, esi
rep stosd dword es:[edi], eax
mov eax, dword [ebx]
mov dword [esi + 0x44], eax
mov ecx, dword [ebx + 4]
xor eax, eax
mov dword [ebx], eax
mov dword [esi + 0x54], ecx
mov edx, dword [ebx + 0xc]
mov dword [ebx + 4], eax
mov dword [ebp + 0x4fb0], edx
mov ecx, dword [ebx + 8]
mov dword [ebp + 0x4fac], ecx
mov ecx, 1
mov word [esi + 0x58], cx
mov edx, dword [ebp + 0x8ba]
cmp edx, eax
mov dword [ebp + 0x8c2], eax
je 0x10009814
mov edx, dword [esi + 0x44]
mov eax, dword [ebp + 0x8da]
cmp edx, eax
jne 0x10009814
mov dword [ebp + 0x8c2], ecx
lea eax, [esp + 0x10]
push ebp
push eax
push esi
call fcn.10004990
mov edi, eax
add esp, 0xc
test edi, edi
je 0x10009832
cmp edi, 0x12
jne 0x10009a4c
cmp edi, 0x12
mov dword [ebp + 0x8c2], 0
je 0x10009adc
mov ecx, dword [esp + 0x18]
push ebp
push ebx
mov dword [ecx], esi
mov edi, dword [ebp + 0x4e98]
add esi, 0x64
inc edi
mov dword [esp + 0x20], esi
mov dword [ebp + 0x4e98], edi
call fcn.1000ccf0
mov ebx, eax
add esp, 8
test ebx, ebx
jne 0x100097a5
jmp 0x10009b30
mov eax, dword [esi + 0x54]
push eax
push 0
push 0x9f
call fcn.1000cb20
add esp, 8
lea esi, [ebp + 0x463c]
push eax
push str._s__s
push esi
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0x10
cmp edi, 0xffffffff
je 0x100098ad
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [esp + 0x10]
cmp eax, 0xffffffff
je 0x100098ca
cmp dword [ebp + 8], eax
je 0x100098ca
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [esp + 0x10], 0xffffffff
push ebp
push esi
push ebx
call fcn.10007220
mov eax, dword [ebp]
add esp, 0xc
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x2280
ret
mov ecx, dword [esi + 0x44]
lea ebx, [ebp + 0x463c]
push ecx
push 0
push 0x9e
call fcn.1000cb20
add esp, 8
push eax
push str._s__s
push ebx
call dword [sym.imp.USER32.dll_wsprintfA]
push ebx
call fcn.10006500
mov eax, dword [esp + 0x28]
add esp, 0x14
cmp eax, 0xffffffff
je 0x10009924
mov edx, eax
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [esp + 0x10]
cmp eax, 0xffffffff
je 0x10009941
cmp dword [ebp + 8], eax
je 0x10009941
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [esp + 0x10], 0xffffffff
push ebp
push ebx
push edi
call fcn.10007220
mov eax, dword [ebp]
push ebp
push eax
call fcn.10007070
mov eax, dword [ebp]
add esp, 0x14
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x2280
ret
mov ecx, dword [esi + 0x44]
lea ebx, [ebp + 0xbf7a]
push ecx
push ebx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push ebx
call fcn.10006500
add esp, 4
lea esi, [ebp + 0x463c]
push ebx
push 0
push 0x9f
call fcn.1000cb20
add esp, 8
push eax
push str._s__s
push esi
call dword [sym.imp.USER32.dll_wsprintfA]
mov eax, dword [esp + 0x24]
add esp, 0x10
cmp eax, 0xffffffff
je 0x100099b6
mov edx, eax
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [esp + 0x10]
cmp eax, 0xffffffff
je 0x100099d3
cmp dword [ebp + 8], eax
je 0x100099d3
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [esp + 0x10], 0xffffffff
push ebp
push esi
push edi
call fcn.10007220
mov eax, dword [ebp]
add esp, 0xc
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x2280
ret
mov eax, dword [esp + 0x14]
cmp eax, 0xffffffff
je 0x100099fc
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [esp + 0x10]
cmp eax, 0xffffffff
je 0x10009a19
cmp dword [ebp + 8], eax
je 0x10009a19
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [esp + 0x10], 0xffffffff
push ebp
push 0
push 0x9b
call fcn.1000cb20
add esp, 8
push eax
push 4
call fcn.10007220
mov edx, dword [ebp]
push ebp
push edx
call fcn.10007070
mov eax, dword [ebp]
add esp, 0x14
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x2280
ret
mov eax, dword [esp + 0x14]
cmp eax, 0xffffffff
je 0x10009a5c
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [esi + 0x44]
lea ebx, [ebp + 0xbf7a]
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push ebx
call fcn.10006500
add esp, 4
lea esi, [ebp + 0x463c]
push ebx
push 0
push 0x9e
call fcn.1000cb20
add esp, 8
push eax
push str._s__s
push esi
call dword [sym.imp.USER32.dll_wsprintfA]
mov eax, dword [esp + 0x20]
add esp, 0x10
cmp eax, 0xffffffff
je 0x10009ab9
cmp dword [ebp + 8], eax
je 0x10009ab9
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [esp + 0x10], 0xffffffff
push ebp
push esi
push edi
call fcn.10007220
mov ecx, dword [ebp]
push ebp
push ecx
call fcn.10007070
mov eax, dword [ebp]
add esp, 0x14
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x2280
ret
mov edx, dword [esi + 0x44]
lea ebx, [ebp + 0xbf7a]
push edx
push ebx
mov dword [esp + 0x24], 1
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push ebx
call fcn.10006500
add esp, 4
push ebp
push ebx
push 0
push 0x89
call fcn.1000cb20
add esp, 8
push eax
call fcn.10007490
mov eax, dword [esi + 0x44]
push eax
call sub.api_ms_win_crt_heap_l1_1_0.dll_free
mov ecx, dword [esi + 0x54]
push ecx
call sub.api_ms_win_crt_heap_l1_1_0.dll_free
push esi
call sub.api_ms_win_crt_heap_l1_1_0.dll_free
add esp, 0x18
mov edi, dword [esp + 0x14]
mov eax, dword [ebp + 0x4e74]
test eax, eax
je 0x10009b51
push eax
call sub.api_ms_win_crt_heap_l1_1_0.dll_free
add esp, 4
mov dword [ebp + 0x4e74], 0
cmp dword [ebp], 0
je 0x10009b8a
cmp edi, 0xffffffff
je 0x10009b63
push edi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [esp + 0x10]
cmp eax, 0xffffffff
je 0x10009b80
cmp dword [ebp + 8], eax
je 0x10009b80
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [esp + 0x10], 0xffffffff
mov edx, dword [ebp]
push ebp
push edx
jmp 0x1000a54b
mov ax, word [ebp + 0x4ee0]
mov dword [ebp + 0x8ae], 1
test ah, 0x80
je 0x1000a0f4
test ah, 0x10
je 0x1000a0f4
mov eax, dword [ebp + 0x4e94]
test eax, eax
je 0x1000a0f4
mov eax, dword [ebp + 0x4ee2]
mov ecx, dword [ebp + 0x4eee]
cmp eax, ecx
je 0x10009bd5
mov dword [ebp + 0x4ef2], 0
mov edx, dword [ebp + 0x4ea0]
mov eax, dword [ebp + 0x4e9c]
lea ecx, [esp + 0x10]
push ebp
push ecx
mov ecx, dword [ebp + 0x4f0a]
push edx
mov edx, dword [ebp + 0x4f06]
xor edi, edi
push eax
mov eax, dword [ebp + 0x4edc]
push edi
push edi
push ecx
push edx
push edi
push eax
call fcn.10010b20
mov esi, eax
add esp, 0x28
cmp esi, edi
je 0x10009c4d
mov eax, dword [esp + 0x10]
cmp eax, 0xffffffff
je 0x10009c2e
cmp dword [ebp + 8], eax
je 0x10009c2e
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [esp + 0x10], 0xffffffff
mov ecx, dword [ebp + 0xaf6a]
push ebp
push ecx
push esi
call fcn.10007220
mov eax, dword [ebp]
add esp, 0xc
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x2280
ret
mov eax, dword [ebp + 0xa2]
or ebx, 0xffffffff
cmp eax, ebx
je 0x10009ca5
lea edx, [esp + 0x10]
push ebp
push edx
call fcn.1000c760
mov esi, eax
add esp, 8
cmp esi, edi
je 0x10009ca5
mov eax, dword [esp + 0x10]
cmp eax, ebx
je 0x10009c86
cmp dword [ebp + 8], eax
je 0x10009c86
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [esp + 0x10], ebx
lea eax, [ebp + 0xa6]
push ebp
push eax
push esi
call fcn.10007220
mov eax, dword [ebp]
add esp, 0xc
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x2280
ret
mov esi, 0x4000
test word [ebp + 0x4ee0], si
je 0x10009cd7
mov eax, dword [ebp + 0xa2]
cmp eax, ebx
je 0x10009cca
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp + 0xa2], ebx
lea ecx, [ebp + 0xa6]
push ecx
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
mov dword [ebp + 0x4f0e], 1
mov eax, dword [esp + 0x10]
cmp eax, ebx
je 0x10009cfc
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
test eax, eax
je 0x1000a005
mov dword [esp + 0x10], ebx
mov dword [ebp + 8], ebx
test word [ebp + 0x4ee0], si
je 0x10009d0e
mov dword [ebp + 0x4ee2], edi
cmp dword [ebp + 0x4ee2], edi
je 0x10009d48
mov edx, dword [ebp + 0x4e7c]
push ebp
push edx
call fcn.1000b950
add esp, 4
push eax
call fcn.10015eb0
push ebp
push 0x10044ccc
push edi
push ebx
push 1
push edi
call fcn.1000c200
add esp, 0x20
cmp eax, 1
jne 0x10008d06
mov dword [ebp + 0x4ea8], edi
mov dword [ebp + 0x4eac], edi
test word [ebp + 0x4ee0], si
mov dword [ebp + 0x4efe], edi
mov dword [ebp + 0x8b2], 0x200000
mov dword [ebp + 0x4ee2], edi
mov dword [ebp + 0x4f02], edi
mov dword [ebp + 0x8b6], edi
je 0x10009db1
lea eax, [ebp + 0xa6]
push 0x2e
push eax
call fcn.1000b410
cmp eax, edi
je 0x1000a025
inc eax
push 0x100429d8
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
test word [ebp + 0x4ee0], si
lea eax, [ebp + 0xa6]
jne 0x10009db7
mov eax, dword [ebp + 0x4e7c]
push edi
push 0x80
push 3
push edi
push edi
push 0xc0000000
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileA]
cmp eax, ebx
mov dword [esp + 0x10], eax
je 0x10009f1f
lea ecx, [esp + 0x30]
push edi
lea esi, [ebp + 0x4f12]
push ecx
push 0x2e
push esi
push eax
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x10009edc
cmp dword [esp + 0x30], 0x2e
jne 0x10009edc
cmp dword [esi], 0x2014b50
jne 0x10009edc
mov ax, word [ebp + 0x4f2e]
cmp ax, di
je 0x10009edc
mov ecx, dword [esp + 0x10]
lea edx, [esp + 0x30]
movsx eax, ax
push edi
lea esi, [ebp + 0x463c]
push edx
push eax
push esi
push ecx
xor ebx, ebx
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
je 0x10009e44
mov ebx, dword [esp + 0x30]
movsx edx, word [ebp + 0x4f2e]
mov byte [edx + ebp + 0x463c], 0
mov eax, dword [ebp + 0x91a]
cmp eax, edi
jne 0x10009e6e
mov eax, dword [ebp + 0x4e94]
mov eax, dword [eax + 0x54]
push eax
push eax
call dword [sym.imp.USER32.dll_CharToOemA]
movsx ecx, word [ebp + 0x4f2e]
cmp ebx, ecx
jne 0x10009e92
mov edx, dword [ebp + 0x4e94]
mov eax, dword [edx + 0x54]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_lstrcmpA]
test eax, eax
je 0x10009f4e
mov ecx, dword [esp + 0x10]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
test byte [ebp + 0x4ee1], 0x40
mov dword [esp + 0x10], 0xffffffff
push ebp
jne 0x1000a077
push 0x10044ccc
push edi
push edi
push 1
push 0xa
call fcn.1000c200
add esp, 0x18
cmp eax, 1
jne 0x10008c90
mov esi, 0x4000
or ebx, 0xffffffff
jmp 0x10009ce1
mov edx, dword [esp + 0x10]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
test byte [ebp + 0x4ee1], 0x40
mov dword [esp + 0x10], ebx
push ebp
jne 0x1000a096
push 0x10044ccc
push edi
push edi
push 1
push 0xa
call fcn.1000c200
add esp, 0x18
cmp eax, 1
jne 0x10008d06
mov esi, 0x4000
jmp 0x10009ce1
test word [ebp + 0x4ee0], si
push ebp
jne 0x1000a0b5
push 0x10044ccc
push edi
push edi
push 1
push 0xa
call fcn.1000c200
add esp, 0x18
cmp eax, 1
jne 0x1000a0d4
jmp 0x10009ce1
mov eax, dword [esp + 0x10]
push edi
push edi
push edi
push eax
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
mov esi, dword [ebp + 0x4e94]
cmp esi, edi
je 0x10009fb6
lea ecx, [esp + 0x10]
push ebp
push ecx
push esi
call fcn.10010380
mov ebx, eax
add esp, 0xc
cmp ebx, edi
jne 0x1000a045
mov edx, dword [esi + 0x60]
mov eax, dword [esi + 0x2c]
mov ebx, dword [esi + 0x28]
add edx, eax
mov eax, dword [esi + 0x20]
add edx, ebx
lea ecx, [edx + eax + 0x2e]
mov edx, dword [ebp + 0x4ea8]
add edx, ecx
mov dword [ebp + 0x4ea8], edx
mov ecx, dword [ebp + 0x4eac]
adc ecx, edi
mov dword [ebp + 0x4eac], ecx
mov esi, dword [esi + 0x64]
cmp esi, edi
jne 0x10009f66
test byte [ebp + 0x4ee1], 0x40
je 0x10009ff1
lea edx, [ebp + 0xa6]
lea eax, [esp + 0xa50]
push edx
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov edx, dword [ebp + 0x4ee2]
lea ecx, [esp + 0xa50]
push ebp
push ecx
inc edx
push edi
push edx
push edi
push 0xe
call fcn.1000c200
add esp, 0x18
or ebx, 0xffffffff
mov dword [ebp + 0x4f0e], 0
xor edi, edi
jmp 0x1000a321
mov eax, dword [ebp + 0x4e7c]
push ebp
push eax
push 0x11
call fcn.10007220
mov eax, dword [ebp]
add esp, 0xc
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x2280
ret
lea ecx, [ebp + 0xa6]
push ebp
push ecx
push 0x11
call fcn.10007220
mov eax, dword [ebp]
add esp, 0xc
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x2280
ret
mov edx, dword [esp + 0x10]
push edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp + 0x4e7c]
push ebp
push eax
push ebx
mov dword [esp + 0x1c], 0xffffffff
call fcn.10007220
mov eax, dword [ebp]
add esp, 0xc
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x2280
ret
lea ecx, [ebp + 0xa6]
push ecx
push 9
call fcn.10007220
mov eax, dword [ebp]
add esp, 0xc
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x2280
ret
lea eax, [ebp + 0xa6]
push eax
push 9
call fcn.10007220
mov eax, dword [ebp]
add esp, 0xc
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x2280
ret
lea edx, [ebp + 0xa6]
push edx
push 9
call fcn.10007220
mov eax, dword [ebp]
add esp, 0xc
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x2280
ret
mov eax, dword [ebp + 0x4e7c]
push ebp
push eax
push 9
call fcn.10007220
mov eax, dword [ebp]
add esp, 0xc
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x2280
ret
mov esi, dword [ebp + 0x4e94]
mov edx, dword [ebp + 0x4ea8]
mov eax, dword [ebp + 0x4eac]
xor edi, edi
xor ebx, ebx
cmp esi, edi
mov dword [esp + 0x34], edx
mov dword [esp + 0x38], eax
mov dword [esp + 0x28], edi
je 0x1000a184
lea ecx, [esp + 0x10]
push ebp
push ecx
push esi
call fcn.10010380
add esp, 0xc
mov dword [esp + 0x18], eax
test eax, eax
jne 0x1000a237
mov edx, dword [esi + 0x60]
mov eax, dword [esi + 0x2c]
mov ecx, dword [esi + 0x28]
add edx, eax
mov eax, dword [esi + 0x20]
add edx, ecx
lea ecx, [edx + eax + 0x2e]
mov eax, dword [ebp + 0x4ea8]
add eax, ecx
mov dword [ebp + 0x4ea8], eax
mov edx, dword [ebp + 0x4eac]
adc edx, 0
mov dword [ebp + 0x4eac], edx
mov edx, dword [esi + 0x18]
mov eax, dword [esi + 0x1c]
mov esi, dword [esi + 0x64]
add edi, edx
mov edx, dword [esp + 0x28]
adc edx, eax
inc ebx
test esi, esi
mov dword [esp + 0x28], edx
jne 0x1000a11a
test ebx, ebx
jne 0x1000a1a2
push ebp
push 0x10044ccc
push 0
push 0x8a
call fcn.1000cb20
add esp, 8
push eax
call fcn.10007490
add esp, 0xc
mov eax, dword [ebp + 0x4ea8]
mov edx, dword [esp + 0x34]
mov ecx, dword [ebp + 0x4eac]
mov esi, dword [esp + 0x38]
lea edi, [esp + 0x10]
push ebp
push edi
mov edi, dword [ebp + 0x4ea0]
push edi
mov edi, dword [ebp + 0x4e9c]
sub eax, edx
push edi
sbb ecx, esi
push esi
push edx
push ecx
push eax
mov eax, ebx
cdq
push edx
push eax
call fcn.10010b20
mov esi, eax
xor edi, edi
add esp, 0x28
cmp esi, edi
je 0x1000a287
mov eax, dword [esp + 0x14]
cmp eax, 0xffffffff
je 0x1000a1fb
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [esp + 0x10]
cmp eax, 0xffffffff
je 0x1000a218
cmp dword [ebp + 8], eax
je 0x1000a218
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [esp + 0x10], 0xffffffff
mov eax, dword [ebp + 0xaf6a]
push ebp
push eax
push esi
call fcn.10007220
mov eax, dword [ebp]
add esp, 0xc
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x2280
ret
mov eax, dword [esp + 0x14]
cmp eax, 0xffffffff
je 0x1000a247
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [esp + 0x10]
cmp eax, 0xffffffff
je 0x1000a264
cmp dword [ebp + 8], eax
je 0x1000a264
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [esp + 0x10], 0xffffffff
mov ecx, dword [ebp + 0xaf6a]
mov edx, dword [esp + 0x18]
push ebp
push ecx
push edx
call fcn.10007220
mov eax, dword [ebp]
add esp, 0xc
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x2280
ret
mov eax, dword [ebp + 0xa2]
or ebx, 0xffffffff
cmp eax, ebx
je 0x1000a2ee
lea ecx, [esp + 0x10]
push ebp
push ecx
call fcn.1000c760
mov esi, eax
add esp, 8
cmp esi, edi
je 0x1000a2ee
mov eax, dword [esp + 0x14]
cmp eax, ebx
je 0x1000a2b7
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [esp + 0x10]
cmp eax, ebx
je 0x1000a2cf
cmp dword [ebp + 8], eax
je 0x1000a2cf
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [esp + 0x10], ebx
lea edx, [ebp + 0xa6]
push ebp
push edx
push esi
call fcn.10007220
mov eax, dword [ebp]
add esp, 0xc
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x2280
ret
test byte [ebp + 0x4ee1], 0x40
je 0x1000a321
mov eax, dword [ebp + 0xa2]
cmp eax, ebx
je 0x1000a30e
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp + 0xa2], ebx
lea eax, [ebp + 0xa6]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
dec dword [ebp + 0x4ee2]
mov eax, dword [esp + 0x10]
mov dword [ebp + 8], ebx
cmp eax, ebx
je 0x1000a377
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
push eax
call esi
test eax, eax
jne 0x1000a37d
mov eax, dword [esp + 0x14]
cmp eax, ebx
je 0x1000a344
push eax
call esi
mov edx, dword [ebp + 0x4e90]
mov ecx, dword [ebp + 0xaf6a]
neg edx
sbb edx, edx
push ebp
and edx, 4
push ecx
add edx, 0xa
mov dword [esp + 0x18], ebx
push edx
call fcn.10007220
mov eax, dword [ebp]
add esp, 0xc
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x2280
ret
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [esp + 0x14]
cmp eax, ebx
je 0x1000a388
push eax
call esi
push ebp
call fcn.100124a0
add esp, 4
test byte [ebp + 0x4ee1], 0x40
jne 0x1000a3b0
mov eax, dword [esp + 0x20]
cmp eax, edi
je 0x1000a3b0
push eax
mov eax, dword [ebp + 0x4e7c]
push eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
mov ax, word [ebp + 0x4ee0]
test ah, 0x80
je 0x1000a476
test ah, 0x40
je 0x1000a44e
mov eax, dword [ebp + 0x4e7c]
cmp eax, edi
je 0x1000a44e
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
lea esi, [ebp + 0xa6]
push 0x2e
push esi
call fcn.1000b410
cmp eax, edi
je 0x1000a40f
mov ecx, dword [ebp + 0x8aa]
inc eax
cmp ecx, 0x64
push ecx
jge 0x1000a400
push str.z_02d
jmp 0x1000a405
push 0x100429c8
push eax
call dword [sym.imp.USER32.dll_wsprintfA]
add esp, 0xc
mov ecx, dword [ebp + 0x4e7c]
push ecx
push esi
call dword [sym.imp.KERNEL32.dll_MoveFileA]
mov edx, dword [ebp + 0x4e7c]
lea eax, [esp + 0xa50]
push edx
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
mov edx, dword [ebp + 0x8aa]
lea ecx, [esp + 0xa50]
push ebp
push ecx
push edi
push edx
push edi
push 0xe
call fcn.1000c200
add esp, 0x18
mov eax, dword [ebp + 0xaf6a]
push eax
call sub.api_ms_win_crt_heap_l1_1_0.dll_free
mov ecx, dword [ebp + 0xaf6a]
mov eax, dword [ebp + 0x4e7c]
add esp, 4
cmp ecx, eax
jne 0x1000a532
jmp 0x1000a52c
cmp dword [ebp + 0x4e90], edi
jne 0x1000a538
mov edx, dword [ebp + 0xaf6a]
mov eax, dword [ebp + 0x4e7c]
push ebp
push edx
push eax
call fcn.1000d8c0
mov esi, eax
add esp, 0xc
cmp esi, edi
je 0x1000a50d
mov ecx, dword [ebp + 0xaf6a]
push ebp
push ecx
push edi
push 0x8b
call fcn.1000cb20
add esp, 8
push eax
call fcn.10007490
mov edx, dword [ebp + 0xaf6a]
push edx
call sub.api_ms_win_crt_heap_l1_1_0.dll_free
mov eax, dword [ebp + 0xaf6a]
mov ecx, dword [ebp + 0x4e7c]
add esp, 0x10
cmp eax, ecx
jne 0x1000a4e0
mov dword [ebp + 0x4e7c], edi
push ebp
push edi
mov dword [ebp + 0xaf6a], edi
push 0x9c
call fcn.1000cb20
add esp, 8
push eax
push esi
call fcn.10007220
mov eax, dword [ebp]
add esp, 0xc
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x2280
ret
mov ecx, dword [ebp + 0xaf6a]
push ecx
call sub.api_ms_win_crt_heap_l1_1_0.dll_free
mov edx, dword [ebp + 0xaf6a]
mov eax, dword [ebp + 0x4e7c]
add esp, 4
cmp edx, eax
jne 0x1000a532
mov dword [ebp + 0x4e7c], edi
mov dword [ebp + 0xaf6a], edi
mov eax, dword [esp + 0x1c]
push ebp
neg eax
sbb eax, eax
mov dword [ebp + 0xaf6a], edi
and eax, 0x12
push eax
call fcn.10007070
mov eax, dword [ebp]
add esp, 8
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x2280
ret