Function at 0x101b161e
Capabilities:
Delete file
Get common file path
Resolve function by parsing pe exports

Disassembly:
sub esp, 0x548
mov eax, dword [0x1023904c]
xor eax, esp
mov dword [esp + 0x544], eax
mov eax, dword [esp + 0x54c]
push ebx
push ebp
push edi
xor edi, edi
mov dword [esp + 0x94], eax
lea eax, [esp + 0xc8]
push eax
mov ebx, ecx
push 0x104
mov dword [esp + 0x3c], ebx
mov dword [esp + 0x30], edi
mov dword [esp + 0x74], edi
mov dword [esp + 0x28], edi
mov dword [esp + 0x84], edi
mov dword [esp + 0x14], edi
mov dword [esp + 0x48], edi
mov dword [esp + 0x50], edi
mov dword [esp + 0x1c], edi
mov dword [esp + 0x4c], edi
or ebp, 0xffffffff
mov dword [esp + 0x54], edi
mov dword [esp + 0x68], edi
mov dword [esp + 0x70], edi
mov dword [esp + 0x64], edi
mov dword [esp + 0x2c], edi
mov dword [esp + 0x24], edi
mov dword [esp + 0x20], edi
mov dword [esp + 0x34], edi
call dword [sym.imp.kernel32.dll_GetTempPathA]
test eax, eax
jne 0x101b16b6
mov eax, 0x80028ca3
jmp 0x101b2848
push esi
mov esi, dword [sym.imp.kernel32.dll_GetTempFileNameA]
lea eax, [esp + 0x1d0]
push eax
push edi
push 0x101b2864
lea eax, [esp + 0xd8]
push eax
call esi
test eax, eax
jne 0x101b171a
push 0x1014d524
lea eax, [esp + 0xd0]
push 0x104
push eax
call dword [sym.imp.msvcr100.dll_strcpy_s]
add esp, 0xc
lea eax, [esp + 0x1d0]
push eax
push edi
push 0x101b2864
lea eax, [esp + 0xd8]
push eax
call esi
test eax, eax
jne 0x101b171a
mov eax, 0x80028ca3
jmp 0x101b2847
push 0x104
lea eax, [esp + 0x350]
push eax
push 0xffffffffffffffff
lea eax, [esp + 0x1dc]
push eax
push edi
push edi
call dword [sym.imp.kernel32.dll_MultiByteToWideChar]
lea eax, [esp + 0x24]
push eax
lea eax, [esp + 0x350]
push eax
xor eax, eax
inc eax
push eax
call dword [0x1023d744]
mov edi, eax
test edi, edi
js 0x101b282d
mov eax, dword [esp + 0x24]
mov ecx, dword [eax]
lea edx, [esp + 0x2c]
push edx
push 0x1001ed40
push eax
call dword [ecx]
mov eax, dword [esp + 0x24]
mov ecx, dword [eax]
lea edx, [esp + 0x90]
push edx
push 0x101b2894
push eax
call dword [ecx]
push 3
pop eax
lea edx, [esp + 0xac]
push edx
mov word [esp + 0xb0], ax
mov eax, dword [esp + 0x94]
push 0x10053510
mov dword [esp + 0xbc], 0x412
mov ecx, dword [eax]
push eax
call dword [ecx + 0x38]
mov eax, dword [esp + 0x90]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [0x10239100]
test eax, eax
jne 0x101b17dd
call fcn.1015692e
mov edi, eax
test edi, edi
js 0x101b282d
mov eax, dword [0x10239100]
mov ecx, eax
mov eax, dword [ecx]
push ecx
mov dword [esp + 0x48], ecx
call dword [eax + 4]
mov eax, dword [esp + 0x24]
mov ecx, dword [eax]
push 0
push eax
call dword [ecx + 0x28]
mov edi, eax
test edi, edi
js 0x101b282d
mov eax, dword [ebx]
lea ecx, [esp + 0x60]
push ecx
lea ecx, [esp + 0xa0]
push ecx
lea ecx, [esp + 0x74]
push ecx
lea ecx, [esp + 0x70]
push ecx
push 0xffffffffffffffff
push ebx
call dword [eax + 0x24]
mov edi, eax
test edi, edi
js 0x101b282d
cmp dword [esp + 0x64], 0
je 0x101b1847
mov eax, dword [esp + 0x24]
push dword [esp + 0x64]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x10]
mov edi, eax
test edi, edi
js 0x101b282d
cmp dword [esp + 0x6c], 0
je 0x101b1866
mov eax, dword [esp + 0x24]
push dword [esp + 0x6c]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x1c]
mov edi, eax
test edi, edi
js 0x101b282d
mov eax, dword [esp + 0x24]
push dword [esp + 0x9c]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x24]
mov edi, eax
test edi, edi
js 0x101b282d
cmp dword [esp + 0x60], 0
je 0x101b18a0
mov eax, dword [esp + 0x24]
push dword [esp + 0x60]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x20]
mov edi, eax
test edi, edi
js 0x101b282d
movzx eax, word [ebx + 0x186]
movzx ecx, word [ebx + 0x184]
mov edx, dword [esp + 0x24]
mov esi, dword [edx]
push eax
push ecx
push edx
call dword [esi + 0x14]
mov edi, eax
test edi, edi
js 0x101b2825
mov eax, dword [esp + 0x24]
lea esi, [ebx + 0x174]
lea edi, [esp + 0xbc]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea edx, [esp + 0xbc]
push edx
movsd dword es:[edi], dword [esi]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x18]
mov edi, eax
test edi, edi
js 0x101b2825
mov ecx, dword [ebx + 0xa8]
movzx eax, word [ebx + 0x16c]
mov edx, dword [esp + 0x24]
mov esi, dword [edx]
and ecx, 8
shr ecx, 2
or ecx, eax
push ecx
push edx
call dword [esi + 0x2c]
mov edi, eax
test edi, edi
js 0x101b2825
mov eax, dword [ebx]
push ebx
call dword [eax + 0xc]
xor esi, esi
mov dword [esp + 0x34], eax
test eax, eax
je 0x101b19a2
mov ecx, dword [ebx]
lea eax, [esp + 0x10]
push eax
push esi
push ebx
call dword [ecx + 0x10]
mov edi, eax
test edi, edi
js 0x101b19ba
mov eax, dword [esp + 0x10]
mov ecx, dword [eax + 0x14]
push 0
push 0
call fcn.1004715e
mov edi, eax
test edi, edi
js 0x101b19ba
mov ecx, dword [esp + 0x10]
call fcn.1000b090
mov ecx, dword [esp + 0x10]
cmp eax, 8
jne 0x101b198a
mov edx, dword [ecx + 0x14]
mov al, byte [edx + 0xc4]
and al, 6
cmp al, 2
jne 0x101b198a
mov eax, dword [edx + 0x210]
cmp eax, 0xffffffff
je 0x101b198a
cmp ebp, 0xffffffff
je 0x101b1988
cmp eax, ebp
jbe 0x101b198a
mov ebp, eax
test ecx, ecx
je 0x101b1999
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
and dword [esp + 0x10], 0
mov eax, dword [esp + 0x34]
inc esi
cmp esi, eax
jb 0x101b192b
inc eax
push eax
call fcn.1001ce9c
mov dword [esp + 0x7c], eax
test eax, eax
jne 0x101b1b01
mov edi, 0x8007000e
mov ebp, dword [esp + 0x34]
mov ecx, dword [esp + 0x30]
test ecx, ecx
je 0x101b19d1
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
and dword [esp + 0x30], 0
xor esi, esi
test ebp, ebp
je 0x101b1a13
mov eax, dword [ebx + 0xcc]
movzx ecx, si
imul ecx, ecx, 0x4c
mov eax, dword [ecx + eax + 4]
mov ecx, dword [eax + 0x14]
call fcn.1001b87e
mov dword [esp + 0x14], eax
mov ecx, dword [eax + 0xec]
test ecx, ecx
je 0x101b1a0e
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov eax, dword [esp + 0x14]
and dword [eax + 0xec], 0
inc esi
cmp esi, ebp
jb 0x101b19d7
push dword [esp + 0x64]
mov esi, dword [sym.imp.OLEAUT32.dll_SysStringLen]
call esi
push dword [esp + 0x6c]
call esi
push dword [esp + 0x60]
call esi
xor ebx, ebx
push ebx
call esi
mov ecx, dword [esp + 0x48]
test ecx, ecx
je 0x101b1a42
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov dword [esp + 0x48], ebx
mov ecx, dword [esp + 0x18]
test ecx, ecx
je 0x101b1a54
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov dword [esp + 0x18], ebx
mov ecx, dword [esp + 0x4c]
test ecx, ecx
je 0x101b1a66
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov dword [esp + 0x4c], ebx
mov ecx, dword [esp + 0x10]
test ecx, ecx
je 0x101b1a78
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov dword [esp + 0x10], ebx
mov ecx, dword [esp + 0x44]
test ecx, ecx
je 0x101b1a86
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov ecx, dword [esp + 0x2c]
test ecx, ecx
je 0x101b1a98
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov dword [esp + 0x2c], ebx
mov ecx, dword [esp + 0x24]
test ecx, ecx
je 0x101b1aaa
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov dword [esp + 0x24], ebx
test edi, edi
js 0x101b2845
cmp dword [esp + 0x80], ebx
je 0x101b2836
mov ebx, dword [esp + 0x98]
mov eax, dword [ebx]
push 0x101b2868
push 0x101b2874
xor ecx, ecx
inc ecx
push ecx
push 2
push ebx
call dword [eax + 0x2c]
mov ecx, dword [ebx]
xor edx, edx
inc edx
push edx
lea edx, [esp + 0x350]
push edx
push eax
push ebx
call dword [ecx + 0x10]
test eax, eax
jne 0x101b2845
mov edi, 0x8003001d
jmp 0x101b2845
xor esi, esi
cmp ebp, 0xffffffff
je 0x101b1c8a
mov eax, dword [ebx]
xor edi, edi
push ebx
mov dword [esp + 0x40], edi
call dword [eax + 0xc]
xor ebx, ebx
mov dword [esp + 0x34], eax
test eax, eax
je 0x101b1c7d
cmp esi, ebp
ja 0x101b1c79
mov ecx, dword [esp + 0x38]
mov eax, dword [ecx]
lea edx, [esp + 0x10]
push edx
push ebx
push ecx
call dword [eax + 0x10]
mov edi, eax
test edi, edi
js 0x101b2813
mov edx, dword [esp + 0x10]
mov ecx, dword [edx + 0x14]
cmp dword [ecx + 0x210], esi
jne 0x101b1c5f
mov al, byte [ecx + 0xc4]
and al, 6
cmp al, 2
jne 0x101b1c5f
mov eax, dword [esp + 0x7c]
cmp byte [ebx + eax], 0
jne 0x101b1c5f
lea eax, [esp + 0x14]
push eax
call fcn.1001c9e1
mov edi, eax
test edi, edi
js 0x101b2813
mov eax, dword [esp + 0x38]
test dword [eax + 0xa4], 0x10000
je 0x101b1bbd
mov ecx, eax
call fcn.101aeff8
test eax, eax
je 0x101b1bbd
mov eax, dword [esp + 0x10]
mov ecx, dword [eax + 0x14]
cmp dword [ecx + 0xd0], 2
jg 0x101b1bbd
call fcn.1006058a
mov ecx, dword [esp + 0x14]
xor eax, eax
inc eax
push eax
push dword [esp + 0x48]
push dword [esp + 0x34]
call fcn.10202f43
mov edi, eax
test edi, edi
js 0x101b2813
mov eax, dword [esp + 0x7c]
xor ecx, ecx
inc ecx
mov byte [ebx + eax], cl
mov eax, dword [esp + 0x14]
mov eax, dword [eax + 0xec]
mov ecx, dword [eax]
lea edx, [esp + 0x54]
push edx
lea edx, [esp + 0x74]
push edx
push eax
call dword [ecx + 0x48]
mov edi, eax
test edi, edi
js 0x101b2813
mov eax, dword [esp + 0x70]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [esp + 0x10]
mov ecx, dword [eax + 0x14]
mov eax, dword [esp + 0x54]
mov dword [ecx + 0x210], eax
mov edx, dword [esp + 0x10]
mov eax, dword [edx + 0x14]
movzx ecx, word [eax + 0x1bc]
mov eax, dword [esp + 0x54]
inc eax
add eax, ecx
mov dword [esp + 0x50], eax
xor eax, eax
inc eax
mov edi, eax
mov dword [esp + 0x80], eax
mov eax, dword [esp + 0x38]
inc esi
test byte [eax + 0xa8], 0x40
mov dword [esp + 0x3c], edi
jne 0x101b1c63
inc esi
jmp 0x101b1c63
mov edi, dword [esp + 0x3c]
mov eax, dword [edx]
push edx
inc ebx
call dword [eax + 8]
and dword [esp + 0x10], 0
cmp ebx, dword [esp + 0x34]
jb 0x101b1b26
test edi, edi
jne 0x101b1c7e
inc esi
mov ebx, dword [esp + 0x38]
cmp esi, ebp
jbe 0x101b1b03
mov eax, dword [ebx]
push ebx
call dword [eax + 0xc]
mov ebp, eax
xor esi, esi
mov dword [esp + 0x34], ebp
test ebp, ebp
je 0x101b1d8f
mov eax, dword [ebx]
lea ecx, [esp + 0x10]
push ecx
push esi
push ebx
call dword [eax + 0x10]
mov edi, eax
test edi, edi
js 0x101b2813
mov ecx, dword [esp + 0x10]
call fcn.1000b090
mov edx, dword [esp + 0x10]
cmp eax, 8
jne 0x101b1d77
mov ecx, dword [edx + 0x14]
mov al, byte [ecx + 0xc4]
and al, 6
cmp al, 2
jne 0x101b1d77
cmp dword [ecx + 0x210], 0xffffffff
jne 0x101b1d77
lea eax, [esp + 0x14]
push eax
call fcn.1001c9e1
mov edi, eax
test edi, edi
js 0x101b2813
mov ecx, dword [esp + 0x14]
xor eax, eax
inc eax
push eax
push dword [esp + 0x48]
push dword [esp + 0x34]
call fcn.10202f43
mov edi, eax
test edi, edi
js 0x101b2813
xor eax, eax
inc eax
lea edx, [esp + 0x54]
push edx
mov dword [esp + 0x84], eax
mov eax, dword [esp + 0x18]
mov eax, dword [eax + 0xec]
mov ecx, dword [eax]
lea edx, [esp + 0x74]
push edx
push eax
call dword [ecx + 0x48]
mov edi, eax
test edi, edi
js 0x101b2813
mov eax, dword [esp + 0x70]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [esp + 0x10]
mov ecx, dword [eax + 0x14]
mov eax, dword [esp + 0x54]
mov dword [ecx + 0x210], eax
mov eax, dword [esp + 0x54]
mov edx, dword [esp + 0x10]
add eax, 2
mov dword [esp + 0x50], eax
test edx, edx
je 0x101b1d86
mov eax, dword [edx]
push edx
call dword [eax + 8]
and dword [esp + 0x10], 0
inc esi
cmp esi, ebp
jb 0x101b1ca0
mov eax, dword [esp + 0x50]
xor esi, esi
mov dword [esp + 0x40], eax
test ebp, ebp
je 0x101b1e37
mov eax, dword [ebx]
lea ecx, [esp + 0x10]
push ecx
push esi
push ebx
call dword [eax + 0x10]
mov edi, eax
test edi, edi
js 0x101b2813
mov ecx, dword [esp + 0x10]
call fcn.1000b090
cmp eax, 8
jne 0x101b1e1b
mov edx, dword [esp + 0x10]
mov ecx, dword [edx + 0x14]
mov al, byte [ecx + 0xc4]
and al, 6
cmp al, 2
jne 0x101b1e1f
call fcn.10060562
test eax, eax
je 0x101b1e1b
mov eax, dword [esp + 0x10]
lea ecx, [esp + 0x14]
push ecx
mov ecx, dword [eax + 0x14]
call fcn.1001c9e1
mov edi, eax
test edi, edi
js 0x101b2813
push dword [esp + 0x44]
mov ecx, dword [esp + 0x18]
push dword [esp + 0x30]
call fcn.102046ad
mov edi, eax
test edi, edi
js 0x101b2813
inc dword [esp + 0x40]
mov edx, dword [esp + 0x10]
test edx, edx
je 0x101b1e2e
mov eax, dword [edx]
push edx
call dword [eax + 8]
and dword [esp + 0x10], 0
inc esi
cmp esi, ebp
jb 0x101b1da1
mov esi, dword [esp + 0x34]
xor ebp, ebp
test esi, esi
je 0x101b1f87
mov eax, dword [ebx]
lea ecx, [esp + 0x10]
push ecx
push ebp
push ebx
call dword [eax + 0x10]
mov edi, eax
test edi, edi
js 0x101b2813
mov ecx, dword [esp + 0x10]
call fcn.1000b090
cmp eax, 8
jne 0x101b1f67
mov edx, dword [esp + 0x10]
mov ecx, dword [edx + 0x14]
mov al, byte [ecx + 0xc4]
and al, 6
cmp al, 2
jne 0x101b1f6f
call fcn.1001b87e
mov ebx, dword [eax + 0x40]
jmp 0x101b1ee5
cmp ebx, dword [eax + 0xc]
jbe 0x101b1e97
xor esi, esi
jmp 0x101b1e9c
mov esi, dword [eax + 8]
add esi, ebx
xor eax, eax
inc eax
cmp word [esi + 0x12], ax
jne 0x101b1ee2
test byte [esi + 1], 0x10
je 0x101b1ee2
mov eax, dword [esp + 0x10]
lea ecx, [esp + 0x14]
push ecx
mov ecx, dword [eax + 0x14]
call fcn.1001c9e1
mov edi, eax
test edi, edi
js 0x101b2813
push dword [esp + 0x44]
mov ecx, dword [esp + 0x18]
push ebx
push dword [esp + 0x34]
call fcn.10204ba8
mov edi, eax
test edi, edi
js 0x101b2813
mov ebx, dword [esi + 4]
mov eax, dword [esp + 0x10]
mov ecx, dword [eax + 0x14]
call fcn.1001b87e
cmp ebx, 0xffffffff
jne 0x101b1e8e
mov ebx, dword [eax + 0x40]
cmp ebx, 0xffffffff
je 0x101b1f63
mov eax, dword [esp + 0x10]
mov ecx, dword [eax + 0x14]
call fcn.1001b87e
cmp ebx, dword [eax + 0xc]
jbe 0x101b1f13
xor esi, esi
jmp 0x101b1f18
mov esi, dword [eax + 8]
add esi, ebx
xor eax, eax
inc eax
cmp word [esi + 0x12], ax
jne 0x101b1f5e
test byte [esi + 1], 0x10
jne 0x101b1f5e
mov eax, dword [esp + 0x10]
lea ecx, [esp + 0x14]
push ecx
mov ecx, dword [eax + 0x14]
call fcn.1001c9e1
mov edi, eax
test edi, edi
js 0x101b2813
push dword [esp + 0x44]
mov ecx, dword [esp + 0x18]
push ebx
push dword [esp + 0x34]
call fcn.102053aa
mov edi, eax
test edi, edi
js 0x101b2813
mov ebx, dword [esi + 4]
jmp 0x101b1ef9
mov ebx, dword [esp + 0x38]
mov edx, dword [esp + 0x10]
mov esi, dword [esp + 0x34]
test edx, edx
je 0x101b1f7e
mov eax, dword [edx]
push edx
call dword [eax + 8]
and dword [esp + 0x10], 0
inc ebp
cmp ebp, esi
jb 0x101b1e45
mov ebp, dword [esp + 0x34]
xor ecx, ecx
mov dword [esp + 0x8c], ecx
test ebp, ebp
je 0x101b2807
mov eax, dword [ebx]
lea edx, [esp + 0x10]
push edx
push ecx
push ebx
call dword [eax + 0x10]
mov edi, eax
test edi, edi
js 0x101b2813
mov eax, dword [esp + 0x10]
mov ecx, dword [eax + 0x14]
call fcn.1001b87e
mov dword [esp + 0x14], eax
mov ecx, dword [eax + 0xec]
test ecx, ecx
je 0x101b27c5
mov eax, dword [ecx]
lea edx, [esp + 0x48]
push edx
push 0x101b2884
push ecx
call dword [eax]
mov ecx, dword [esp + 0x10]
mov eax, dword [ecx + 0x14]
movzx eax, word [eax + 0xc4]
shr eax, 1
and eax, 3
push eax
push dword [esp + 0x4c]
push ecx
mov ecx, dword [esp + 0x20]
call fcn.10203608
mov edi, eax
test edi, edi
js 0x101b2813
mov eax, dword [esp + 0x48]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x64]
mov edi, eax
test edi, edi
js 0x101b2813
mov ecx, dword [esp + 0x48]
test ecx, ecx
je 0x101b2032
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
and dword [esp + 0x48], 0
mov ecx, dword [esp + 0x10]
mov eax, dword [ecx + 0x14]
mov al, byte [eax + 0xc4]
and al, 6
cmp al, 2
jne 0x101b25fd
mov eax, dword [ecx + 0x14]
mov eax, dword [eax + 0x210]
mov ecx, dword [esp + 0x2c]
mov edx, dword [ecx]
lea esi, [esp + 0x4c]
push esi
inc eax
push eax
push ecx
call dword [edx + 0x10]
mov edi, eax
test edi, edi
js 0x101b2813
mov eax, dword [esp + 0x4c]
mov ecx, dword [eax]
lea edx, [esp + 0x18]
push edx
push 0x101b2884
push eax
call dword [ecx]
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [ecx]
lea esi, [esp + 0x58]
push esi
push dword [eax + 0xec]
xor ebp, ebp
push ecx
mov dword [esp + 0x48], ebp
call dword [edx + 0x20]
mov edi, eax
test edi, edi
js 0x101b2813
push dword [esp + 0x58]
mov eax, dword [esp + 0x1c]
mov ecx, dword [eax]
push ebp
push eax
call dword [ecx + 0x28]
mov edi, eax
test edi, edi
js 0x101b2813
mov eax, dword [esp + 0x18]
mov ecx, dword [eax]
push 1
push ebp
push eax
call dword [ecx + 0x2c]
mov edi, eax
test edi, edi
js 0x101b2813
mov eax, dword [esp + 0x10]
lea ecx, [esp + 0x74]
push ecx
mov ecx, dword [eax + 0x14]
call fcn.1002fb66
mov edi, eax
test edi, edi
js 0x101b2813
mov ecx, dword [esp + 0x74]
lea eax, [esp + 0x5c]
push eax
call fcn.1005f59a
mov edi, eax
test edi, edi
js 0x101b2813
xor eax, eax
inc eax
push eax
push ebp
lea eax, [esp + 0x2dc]
push eax
mov eax, dword [esp + 0x68]
shl eax, 2
push eax
push ebp
push 0x78
lea ecx, [esp + 0xd4]
call fcn.1015692e
mov ecx, dword [esp + 0xc0]
mov dword [esp + 0x94], ecx
test ecx, ecx
je 0x101b27f4
mov eax, dword [esp + 0x5c]
shl eax, 2
push eax
push ebp
push ecx
call sub.msvcr100.dll_memset
mov eax, dword [esp + 0x1c]
mov eax, dword [eax + 0x14]
mov esi, dword [eax + 0xec]
add esp, 0xc
test esi, esi
je 0x101b235d
mov eax, dword [esi]
and dword [esp + 0x68], ebp
lea ecx, [esp + 0xa8]
push ecx
push esi
call dword [eax + 0xc]
mov edi, eax
test edi, edi
js 0x101b2251
mov ecx, dword [esp + 0xa8]
mov eax, dword [esi]
movzx ebp, word [ecx + 0x30]
push ecx
push esi
call dword [eax + 0x4c]
xor ebx, ebx
test ebp, ebp
je 0x101b2355
mov eax, dword [esi]
lea ecx, [esp + 0xa4]
push ecx
push ebx
push esi
call dword [eax + 0x24]
test byte [esp + 0xa4], 1
jne 0x101b234c
mov eax, dword [esi]
lea ecx, [esp + 0x88]
push ecx
push ebx
push esi
call dword [eax + 0x20]
mov edi, eax
test edi, edi
js 0x101b2251
mov eax, dword [esi]
lea ecx, [esp + 0x68]
push ecx
push dword [esp + 0x8c]
push esi
call dword [eax + 0x38]
mov edi, eax
test edi, edi
js 0x101b2251
lea eax, [esp + 0x84]
push eax
lea eax, [esp + 0x20]
push eax
push dword [esp + 0x70]
push dword [esp + 0x1c]
call fcn.101b3071
mov ecx, dword [esp + 0x68]
mov edi, eax
test ecx, ecx
je 0x101b221e
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
and dword [esp + 0x68], 0
test edi, edi
jns 0x101b2262
mov eax, dword [esp + 0x38]
test dword [eax + 0xa4], 0x40000
je 0x101b223e
cmp edi, 0x800adeb6
je 0x101b234c
mov ecx, dword [esp + 0x1c]
test ecx, ecx
je 0x101b2251
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
and dword [esp + 0x1c], 0
lea ecx, [esp + 0xbc]
call fcn.1000cead
jmp 0x101b2813
mov eax, dword [esp + 0x1c]
mov ecx, dword [eax]
inc dword [esp + 0x3c]
lea edx, [esp + 0x30]
push edx
push 0x1001b89c
push eax
call dword [ecx]
test eax, eax
js 0x101b22cc
mov ecx, dword [esp + 0x30]
mov eax, dword [esp + 0x38]
cmp dword [ecx + 0x5c], eax
jne 0x101b22bd
mov edx, dword [esp + 0x1c]
test edx, edx
je 0x101b22a1
mov eax, dword [edx]
push edx
call dword [eax + 8]
and dword [esp + 0x1c], 0
mov ecx, dword [esp + 0x30]
mov ecx, dword [ecx + 0x14]
call fcn.1001b87e
mov ecx, dword [eax + 0xec]
mov dword [esp + 0x1c], ecx
mov eax, dword [ecx]
push ecx
call dword [eax + 4]
mov ecx, dword [esp + 0x30]
test ecx, ecx
je 0x101b22cc
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
and dword [esp + 0x30], 0
mov eax, dword [esp + 0x18]
mov ecx, dword [eax]
lea edx, [esp + 0x88]
push edx
push dword [esp + 0x20]
push eax
call dword [ecx + 0x20]
mov ecx, dword [esp + 0x1c]
mov edi, eax
test ecx, ecx
je 0x101b22f7
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
and dword [esp + 0x1c], 0
test edi, edi
js 0x101b2251
push dword [esp + 0x88]
mov eax, dword [esp + 0x1c]
push dword [esp + 0x40]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x28]
mov edi, eax
test edi, edi
js 0x101b2251
mov eax, dword [esp + 0x18]
mov ecx, dword [eax]
push 0
push dword [esp + 0x40]
push eax
call dword [ecx + 0x2c]
mov edi, eax
test edi, edi
js 0x101b2251
mov eax, dword [esp + 0x84]
mov ecx, dword [esp + 0x94]
xor edx, edx
inc edx
mov dword [ecx + eax*4], edx
inc ebx
cmp ebx, ebp
jb 0x101b21a5
mov ebx, dword [esp + 0x38]
mov ebp, dword [esp + 0x3c]
xor esi, esi
mov dword [esp + 0x84], esi
cmp dword [esp + 0x5c], esi
jbe 0x101b24d2
mov ecx, dword [esp + 0x74]
lea eax, [esp + 0xa0]
push eax
push esi
call fcn.1005f567
mov edi, eax
test edi, edi
js 0x101b2251
cmp dword [esp + 0xa0], 0
je 0x101b24c0
mov ecx, dword [esp + 0x74]
lea eax, [esp + 0x78]
push eax
push esi
call fcn.101c782f
mov edi, eax
test edi, edi
js 0x101b2251
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x78]
cmp ecx, dword [eax + 0xc]
jbe 0x101b23c4
xor eax, eax
jmp 0x101b23c9
mov eax, dword [eax + 8]
add eax, ecx
test byte [eax + 0x10], 0x10
je 0x101b24c0
mov eax, dword [esp + 0x94]
cmp dword [eax + esi*4], 0
jne 0x101b24c0
mov ecx, dword [esp + 0x74]
lea eax, [esp + 0x1c]
push eax
push esi
call fcn.10060005
mov edi, eax
test edi, edi
js 0x101b2251
mov eax, dword [esp + 0x1c]
mov ecx, dword [eax]
lea edx, [esp + 0x30]
push edx
push 0x1001b89c
push eax
inc ebp
call dword [ecx]
test eax, eax
js 0x101b2460
mov ecx, dword [esp + 0x30]
cmp dword [ecx + 0x5c], ebx
jne 0x101b2451
mov edx, dword [esp + 0x1c]
test edx, edx
je 0x101b2435
mov eax, dword [edx]
push edx
call dword [eax + 8]
and dword [esp + 0x1c], 0
mov ecx, dword [esp + 0x30]
mov ecx, dword [ecx + 0x14]
call fcn.1001b87e
mov ecx, dword [eax + 0xec]
mov dword [esp + 0x1c], ecx
mov eax, dword [ecx]
push ecx
call dword [eax + 4]
mov ecx, dword [esp + 0x30]
test ecx, ecx
je 0x101b2460
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
and dword [esp + 0x30], 0
mov eax, dword [esp + 0x18]
mov ecx, dword [eax]
lea edx, [esp + 0x58]
push edx
push dword [esp + 0x20]
push eax
call dword [ecx + 0x20]
mov ecx, dword [esp + 0x1c]
mov edi, eax
test ecx, ecx
je 0x101b2488
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
and dword [esp + 0x1c], 0
test edi, edi
js 0x101b2251
push dword [esp + 0x58]
mov eax, dword [esp + 0x1c]
mov ecx, dword [eax]
push ebp
push eax
call dword [ecx + 0x28]
mov edi, eax
test edi, edi
js 0x101b2251
mov eax, dword [esp + 0x18]
mov ecx, dword [eax]
push 0
push ebp
push eax
call dword [ecx + 0x2c]
mov edi, eax
test edi, edi
js 0x101b2251
inc esi
mov dword [esp + 0x84], esi
cmp esi, dword [esp + 0x5c]
jb 0x101b2370
mov eax, dword [esp + 0x10]
mov ecx, dword [eax + 0x14]
call fcn.10060562
test eax, eax
je 0x101b25af
mov eax, dword [esp + 0x2c]
mov ebx, dword [esp + 0x50]
mov ecx, dword [eax]
lea edx, [esp + 0x28]
push edx
push ebx
push eax
call dword [ecx + 0x10]
mov edi, eax
inc ebx
mov dword [esp + 0x50], ebx
test edi, edi
js 0x101b2251
mov eax, dword [esp + 0x28]
mov ecx, dword [eax]
lea edx, [esp + 0x20]
push edx
push 0x101b2884
push eax
call dword [ecx]
push dword [esp + 0x20]
mov ecx, dword [esp + 0x18]
push dword [esp + 0x14]
call fcn.10204876
mov edi, eax
test edi, edi
js 0x101b2581
mov eax, dword [esp + 0x20]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x64]
mov edi, eax
test edi, edi
js 0x101b2581
mov eax, dword [esp + 0x18]
mov ecx, dword [eax]
lea edx, [esp + 0x58]
push edx
push dword [esp + 0x2c]
inc ebp
push eax
call dword [ecx + 0x20]
mov edi, eax
test edi, edi
js 0x101b2581
push dword [esp + 0x58]
mov eax, dword [esp + 0x1c]
mov ecx, dword [eax]
push ebp
push eax
call dword [ecx + 0x28]
mov edi, eax
test edi, edi
js 0x101b2581
mov eax, dword [esp + 0x18]
mov ecx, dword [eax]
push 3
push ebp
push eax
call dword [ecx + 0x2c]
mov edi, eax
mov ecx, dword [esp + 0x20]
test ecx, ecx
je 0x101b2594
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
and dword [esp + 0x20], 0
mov ecx, dword [esp + 0x28]
test ecx, ecx
je 0x101b25a7
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
and dword [esp + 0x28], 0
test edi, edi
js 0x101b2251
mov eax, dword [esp + 0x18]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x64]
mov edi, eax
test edi, edi
js 0x101b2251
mov ecx, dword [esp + 0x18]
test ecx, ecx
je 0x101b25d6
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
and dword [esp + 0x18], 0
mov ecx, dword [esp + 0x4c]
test ecx, ecx
je 0x101b25e9
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
and dword [esp + 0x4c], 0
lea ecx, [esp + 0xbc]
call fcn.1000cead
mov ecx, dword [esp + 0x10]
mov ebp, dword [esp + 0x34]
call fcn.1000b090
cmp eax, 8
jne 0x101b26ee
mov ecx, dword [esp + 0x10]
mov edx, dword [ecx + 0x14]
mov al, byte [edx + 0xc4]
and al, 6
cmp al, 2
jne 0x101b26f2
mov ecx, edx
call fcn.1001b87e
mov ebx, dword [eax + 0x40]
jmp 0x101b26e5
mov eax, dword [esp + 0x10]
mov ecx, dword [eax + 0x14]
call fcn.1001b87e
cmp ebx, dword [eax + 0xc]
jbe 0x101b2646
xor esi, esi
jmp 0x101b264b
mov esi, dword [eax + 8]
add esi, ebx
xor eax, eax
inc eax
cmp word [esi + 0x12], ax
jne 0x101b26e2
test byte [esi + 1], 0x10
je 0x101b26e2
mov eax, dword [esp + 0x2c]
mov ecx, dword [eax]
lea edx, [esp + 0x28]
push edx
push dword [esp + 0x44]
push eax
call dword [ecx + 0x10]
inc dword [esp + 0x40]
mov edi, eax
test edi, edi
js 0x101b2813
mov eax, dword [esp + 0x28]
mov ecx, dword [eax]
lea edx, [esp + 0x20]
push edx
push 0x101b2884
push eax
call dword [ecx]
push dword [esp + 0x20]
mov ecx, dword [esp + 0x18]
push ebx
push dword [esp + 0x18]
call fcn.10204bba
mov eax, dword [esp + 0x20]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x64]
mov edi, eax
test edi, edi
js 0x101b2813
mov ecx, dword [esp + 0x20]
test ecx, ecx
je 0x101b26cf
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
and dword [esp + 0x20], 0
mov ecx, dword [esp + 0x28]
test ecx, ecx
je 0x101b26e2
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
and dword [esp + 0x28], 0
mov ebx, dword [esi + 4]
cmp ebx, 0xffffffff
jne 0x101b2631
mov ecx, dword [esp + 0x10]
call fcn.1000b090
cmp eax, 8
jne 0x101b27c5
mov edx, dword [esp + 0x10]
mov ecx, dword [edx + 0x14]
mov al, byte [ecx + 0xc4]
and al, 6
cmp al, 2
jne 0x101b27c9
call fcn.1001b87e
mov ebx, dword [eax + 0x40]
jmp 0x101b27bc
mov eax, dword [esp + 0x10]
mov ecx, dword [eax + 0x14]
call fcn.1001b87e
cmp ebx, dword [eax + 0xc]
jbe 0x101b2739
xor esi, esi
jmp 0x101b273e
mov esi, dword [eax + 8]
add esi, ebx
xor eax, eax
inc eax
cmp word [esi + 0x12], ax
jne 0x101b27b9
test byte [esi + 1], 0x10
jne 0x101b27b9
mov eax, dword [esp + 0x2c]
mov ecx, dword [eax]
lea edx, [esp + 0x28]
push edx
push dword [esp + 0x44]
push eax
call dword [ecx + 0x10]
inc dword [esp + 0x40]
mov edi, eax
test edi, edi
js 0x101b2813
mov eax, dword [esp + 0x28]
mov ecx, dword [eax]
lea edx, [esp + 0x20]
push edx
push 0x101b2884
push eax
call dword [ecx]
push dword [esp + 0x20]
mov ecx, dword [esp + 0x18]
push ebx
push dword [esp + 0x18]
call fcn.102053bc
mov ecx, dword [esp + 0x20]
test ecx, ecx
je 0x101b27a6
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
and dword [esp + 0x20], 0
mov ecx, dword [esp + 0x28]
test ecx, ecx
je 0x101b27b9
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
and dword [esp + 0x28], 0
mov ebx, dword [esi + 4]
cmp ebx, 0xffffffff
jne 0x101b2724
mov edx, dword [esp + 0x10]
test edx, edx
je 0x101b27d8
mov eax, dword [edx]
push edx
call dword [eax + 8]
and dword [esp + 0x10], 0
mov ecx, dword [esp + 0x8c]
inc ecx
mov dword [esp + 0x8c], ecx
cmp ecx, ebp
jae 0x101b2807
mov ebx, dword [esp + 0x38]
jmp 0x101b1f9c
lea ecx, [esp + 0xbc]
call fcn.1000cead
mov eax, 0x8007000e
jmp 0x101b2847
mov eax, dword [esp + 0x24]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x30]
mov edi, eax
push dword [esp + 0x7c]
call fcn.1000ac28
mov ebx, dword [esp + 0x38]
jmp 0x101b19ba
mov eax, dword [ebx]
push 0
push ebx
call dword [eax + 0x30]
mov ebp, dword [esp + 0x78]
jmp 0x101b19be
lea eax, [esp + 0x1d0]
push eax
call dword [sym.imp.msvcr100.dll_remove]
pop ecx
mov eax, edi
pop esi
mov ecx, dword [esp + 0x550]
pop edi
pop ebp
pop ebx
xor ecx, esp
call fcn.10001e57
add esp, 0x548
ret 4