Function at 0x1000b2f0
Capabilities:
Check if file exists
Get common file path
Get file attributes

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0xa4
mov eax, dword [ebp + 8]
mov dword [ebp - 0x20], eax
mov eax, esp
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x10], 0xffffffff
lea eax, [ebp - 0x18]
mov dword [ebp - 0x14], 0x1004ef70
mov ecx, dword fs:[0]
mov dword [ebp - 0x18], ecx
mov dword fs:[0], eax
mov esi, dword [ebp - 0x20]
push eax
mov eax, esp
mov ecx, eax
mov dword [ebp - 0x60], ecx
sub esp, 0x1c
mov edx, esp
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x5c], ecx
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x28], ecx
mov edi, ecx
mov dword [ebp - 0x58], edi
push eax
mov edi, esp
mov dword [ebp - 0x54], edi
sub esp, 0x104
mov edi, esp
mov dword [ebp - 0x50], edi
push eax
mov edi, esp
mov dword [ebp - 0x4c], edi
sub esp, 0x18
mov edi, esp
mov dword [ebp - 0x48], edi
sub esp, 0x18
mov edi, esp
mov dword [ebp - 0x44], edi
sub esp, 0x18
mov edi, esp
mov dword [ebp - 0x40], edi
sub esp, 0x18
mov edi, esp
mov dword [ebp - 0x3c], edi
push eax
mov edi, esp
mov dword [ebp - 0x38], edi
sub esp, 0x208
mov edi, esp
mov dword [ebp - 0x34], edi
push eax
mov edi, esp
mov dword [ebp - 0x30], edi
sub esp, 0x208
mov edi, esp
mov dword [ebp - 0x2c], edi
mov dword [eax], esi
movups xmm0, xmmword [0x10226061]
movups xmmword [edx + 0xb], xmm0
movups xmm0, xmmword [str.C:UsersPublicDownloads_]
movups xmmword [edx], xmm0
mov esi, dword [eax]
sub esp, 4
mov eax, esp
mov dword [eax], edx
call fcn.10005f80
mov edx, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x10], 0
sub esp, 0xc
mov eax, esp
mov dword [eax + 8], esi
mov dword [eax + 4], edx
mov dword [eax], ecx
call fcn.1000c0a0
add esp, 0xc
jmp 0x1000b3f5
mov ecx, dword [ebp - 0x58]
call fcn.100061b0
mov ecx, dword [ebp - 0x5c]
call fcn.10008340
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
cmp eax, 0xffffffff
jne 0x1000b428
mov eax, dword [ebp - 0x54]
mov dword [eax], 1
jmp 0x1000bd5b
mov eax, dword [ebp - 0x50]
xor ecx, ecx
sub esp, 0x14
mov dword [esp], 0
mov dword [esp + 4], 0
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], eax
call dword [sym.imp.SHELL32.dll_SHGetFolderPathA]
mov ecx, eax
mov eax, dword [ebp - 0x4c]
mov dword [eax], ecx
cmp dword [eax], 0
jl 0x1000bd52
mov ecx, dword [0x1027a774]
mov edx, dword [0x1027a778]
mov eax, ecx
xor eax, 0xffffffff
mov esi, edx
xor esi, 0xffffffff
or eax, esi
xor eax, 0xffffffff
or ecx, edx
xor ecx, 0xffffffff
or eax, ecx
xor eax, 0xffffffff
xor ecx, ecx
sub ecx, eax
add ecx, 0x78cd63eb
xor eax, eax
sub eax, ecx
add eax, 0x182fce27
add eax, 1
sub eax, 0x5488da9c
cmp eax, 0x332999ac
je 0x1000be8e
mov ecx, dword [ebp - 0x60]
mov eax, dword [0x1027a77c]
mov esi, dword [0x1027a780]
xor edx, edx
sub edx, eax
xor eax, eax
sub eax, esi
add edx, eax
xor eax, eax
sub eax, edx
mov esi, 0x738aa1b3
xor edx, edx
div esi
sub eax, 0xa6ed90fe
add eax, 0x7c347f35
sub eax, 0x159283ca
sub eax, 0x7c347f35
mov ecx, dword [ecx]
mov dword [ebp - 0x64], ecx
cmp eax, 0xb5150416
jae 0x1000be8e
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x50]
mov dword [ebp - 0x10], 1
sub esp, 4
mov eax, esp
mov dword [eax], edx
call fcn.10005f80
jmp 0x1000b51b
mov eax, dword [0x1027a78c]
xor eax, dword [0x1027a790]
or eax, 0x6cdb8f15
sub eax, 0x6a323f6d
add eax, 0xf84bcf3f
cmp eax, 0x201396ee
jae 0x1000be93
mov ecx, dword [ebp - 0x40]
mov edx, dword [ebp - 0x3c]
mov dword [ebp - 0x10], 3
sub esp, 0xc
mov eax, esp
mov dword [eax + 4], edx
mov dword [eax], ecx
mov dword [eax + 8], 0x10258c24
call fcn.1000c240
add esp, 0xc
jmp 0x1000b56b
mov ecx, dword [0x1027a794]
mov eax, dword [0x1027a798]
xor ecx, 0xffffffff
xor eax, 0xffffffff
or ecx, eax
mov edx, ecx
xor edx, 0xffffffff
mov eax, ecx
and eax, 0x118529d8
and edx, 0xee7ad627
or eax, edx
xor eax, 0x5a9c65c8
or ecx, 0xb4e6b3ef
xor ecx, 0xffffffff
or eax, ecx
and eax, 0x3cc14912
sub eax, 0x6ddf3e0e
cmp eax, 0x11379341
jb 0x1000be98
mov ecx, dword [ebp - 0x44]
mov edx, dword [ebp - 0x40]
mov esi, dword [ebp - 0x64]
mov dword [ebp - 0x10], 4
sub esp, 0xc
mov eax, esp
mov dword [eax + 8], esi
mov dword [eax + 4], edx
mov dword [eax], ecx
call fcn.1000c0a0
add esp, 0xc
jmp 0x1000b5e1
mov ecx, dword [0x1027a7a4]
mov edx, dword [0x1027a7a8]
mov eax, ecx
xor eax, 0xffffffff
mov esi, edx
xor esi, 0xffffffff
or eax, esi
xor ecx, 0xffffffff
xor edx, 0xffffffff
or ecx, edx
and eax, ecx
xor eax, 0xffffffff
add eax, 0xd06c214
sub eax, 0x3e256073
sub eax, 0xca583588
cmp eax, 0xda2351c
je 0x1000be9d
mov ecx, dword [ebp - 0x48]
mov edx, dword [ebp - 0x44]
mov dword [ebp - 0x10], 5
sub esp, 0xc
mov eax, esp
mov dword [eax + 4], edx
mov dword [eax], ecx
mov dword [eax + 8], str..lnk
call fcn.1000c240
add esp, 0xc
jmp 0x1000b64b
mov ecx, dword [ebp - 0x44]
mov eax, dword [0x1027a7bc]
mov esi, dword [0x1027a7c0]
mov edx, eax
and edx, esi
shl edx, 1
add eax, esi
sub eax, edx
mov esi, eax
xor esi, 0xffffffff
and esi, 0x5b9f86c3
mov edx, eax
and edx, 0xa460793c
imul edx, esi
mov esi, eax
and esi, 0x5b9f86c3
or eax, 0x5b9f86c3
imul eax, esi
add eax, edx
mov esi, eax
xor esi, 0xffffffff
and esi, 0xa94026c7
mov edx, eax
and edx, 0x56bfd938
imul edx, esi
mov esi, eax
and esi, 0xa94026c7
or eax, 0xa94026c7
imul eax, esi
add eax, edx
mov edx, eax
and edx, 0xb2af7227
mov esi, eax
xor esi, 0x4d508dd8
add eax, esi
sub eax, edx
mov dword [ebp - 0x6c], eax
call fcn.100061b0
mov ecx, dword [ebp - 0x40]
call fcn.100061b0
mov ecx, dword [ebp - 0x3c]
call fcn.100061b0
mov ecx, dword [ebp - 0x48]
call fcn.10008340
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
mov ecx, eax
mov eax, dword [ebp - 0x6c]
cmp ecx, 0xffffffff
setne cl
mov byte [ebp - 0x65], cl
cmp eax, 0x5e5f2032
je 0x1000bea2
mov al, byte [ebp - 0x65]
test al, 1
jne 0x1000b71c
jmp 0x1000b784
mov eax, dword [0x1027a7c4]
xor edx, edx
div dword [0x1027a7c8]
mov ecx, eax
mov edx, ecx
and edx, 0xf4df536d
mov eax, ecx
or eax, 0xf4df536d
xor eax, 0xffffffff
imul eax, edx
mov edx, ecx
and edx, 0xb20ac92
or ecx, 0xb20ac92
imul ecx, edx
add ecx, eax
sub ecx, 0x2137fbcf
mov eax, ecx
xor eax, 0xffffffff
xor ecx, 0xffffffff
or eax, ecx
and eax, 0x79a3db57
xor eax, 0xffffffff
cmp eax, 0x49f9ffe8
jb 0x1000bed3
mov eax, dword [ebp - 0x54]
mov dword [eax], 1
jmp 0x1000bc8c
xor eax, eax
sub esp, 4
mov dword [esp], 0
call dword [sym.imp.ole32.dll_CoInitialize]
mov eax, dword [ebp - 0x38]
sub esp, 4
mov dword [esp], eax
call fcn.1000c410
add esp, 4
mov dword [ebp - 0x70], eax
mov eax, dword [ebp - 0x70]
mov ecx, dword [0x1027a7dc]
mov edx, dword [0x1027a7e0]
xor edx, 0xffffffff
add ecx, edx
add ecx, 1
imul ecx, ecx, 0xac936034
sub ecx, 0x85b1035b
xor edx, edx
sub edx, ecx
add edx, 0x19a56b2c
xor ecx, ecx
sub ecx, edx
mov dword [ebp - 0x78], ecx
lea edx, [0x10228598]
xor ecx, ecx
lea ecx, [0x10226194]
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], 0
mov dword [esp + 8], 1
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
call dword [sym.imp.ole32.dll_CoCreateInstance]
mov ecx, dword [ebp - 0x4c]
mov edx, eax
mov eax, dword [ebp - 0x78]
mov dword [ecx], edx
cmp dword [ecx], 0
setge cl
mov byte [ebp - 0x71], cl
cmp eax, 0xbc1523b2
jbe 0x1000bee1
mov al, byte [ebp - 0x71]
test al, 1
jne 0x1000b83e
jmp 0x1000bc7d
mov ecx, dword [ebp - 0x5c]
mov eax, dword [0x1027a7ec]
add eax, dword [0x1027a7f0]
mov esi, eax
xor esi, 0xffffffff
and esi, 0x2490b5c
mov edx, eax
and edx, 0xfdb6f4a3
imul edx, esi
mov esi, eax
and esi, 0x2490b5c
or eax, 0x2490b5c
imul eax, esi
add eax, edx
xor eax, 0xc4efab61
mov edx, eax
xor edx, 0x533bb9e3
and eax, 0xacc4461c
shl eax, 1
sub eax, edx
mov dword [ebp - 0x84], eax
call fcn.10008340
mov ecx, eax
mov eax, dword [ebp - 0x34]
xor edx, edx
sub esp, 0x18
mov dword [esp], 0
mov dword [esp + 4], 0
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 0xffffffff
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], 0x104
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov ecx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x84]
mov ecx, dword [ecx]
mov dword [ebp - 0x80], ecx
mov ecx, dword [ecx]
mov ecx, dword [ecx + 0x50]
mov dword [ebp - 0x7c], ecx
cmp eax, 0xd18a7be0
jbe 0x1000bf22
mov eax, dword [ebp - 0x7c]
mov edx, dword [ebp - 0x80]
mov esi, dword [ebp - 0x34]
mov dword [ebp - 0x10], 2
sub esp, 8
mov ecx, esp
mov dword [ecx + 4], esi
mov dword [ecx], edx
call eax
jmp 0x1000b90e
jmp 0x1000b913
mov ecx, dword [ebp - 0x38]
mov eax, dword [0x1027a7fc]
mov edx, dword [0x1027a800]
sub eax, 0x92679eb0
add eax, edx
add eax, 0x92679eb0
xor eax, 0x63f60b4e
mov edx, eax
xor edx, 0x334efe1e
xor edx, 0xffffffff
or eax, 0x334efe1e
and eax, edx
mov edx, eax
and edx, 0xb183404b
mov esi, eax
xor esi, 0x4e7cbfb4
add eax, esi
sub eax, edx
mov ecx, dword [ecx]
mov dword [ebp - 0x88], ecx
cmp eax, 0x23a39749
jb 0x1000b913
mov ecx, dword [ebp - 0x30]
sub esp, 4
mov eax, esp
mov dword [eax], ecx
call fcn.1000c560
mov edx, dword [ebp - 0x88]
add esp, 4
mov esi, eax
mov eax, dword [edx]
mov eax, dword [eax]
mov dword [ebp - 0x10], 2
sub esp, 0xc
mov ecx, esp
mov dword [ecx + 8], esi
mov dword [ecx], edx
mov dword [ecx + 4], 0x102261a4
call eax
mov dword [ebp - 0x8c], eax
jmp 0x1000b9ae
mov eax, dword [ebp - 0x4c]
mov ecx, dword [ebp - 0x8c]
mov dword [eax], ecx
cmp dword [eax], 0
jl 0x1000bb95
mov ecx, dword [ebp - 0x48]
mov esi, dword [0x1027a80c]
mov edx, dword [0x1027a810]
mov eax, edx
xor eax, 0xffffffff
xor edx, 0xffffffff
or eax, edx
xor eax, 0xffffffff
or esi, eax
mov edx, esi
xor edx, 0xffffffff
mov eax, edx
and eax, 0xa9490a62
and esi, 0x56b6f59d
or eax, esi
xor eax, 0xea7bc22e
or edx, 0xbccd37b3
xor edx, 0xffffffff
or eax, edx
mov edx, eax
xor edx, 0x40dfde08
and eax, 0xbf2021f7
shl eax, 1
sub eax, edx
xor eax, 0x1a452141
mov dword [ebp - 0x98], eax
call fcn.10008340
mov ecx, eax
mov eax, dword [ebp - 0x2c]
xor edx, edx
sub esp, 0x18
mov dword [esp], 0
mov dword [esp + 4], 0
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 0xffffffff
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], 0x104
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x98]
mov ecx, dword [ecx]
mov dword [ebp - 0x94], ecx
mov ecx, dword [ecx]
mov ecx, dword [ecx + 0x18]
mov dword [ebp - 0x90], ecx
cmp eax, 0xf1fcf976
jae 0x1000bf66
mov eax, dword [ebp - 0x90]
mov edx, dword [ebp - 0x94]
mov esi, dword [ebp - 0x2c]
mov dword [ebp - 0x10], 2
sub esp, 0xc
mov ecx, esp
mov dword [ecx + 4], esi
mov dword [ecx], edx
mov dword [ecx + 8], 1
call eax
jmp 0x1000bab1
mov eax, dword [0x1027a814]
xor edx, edx
div dword [0x1027a818]
mov ecx, eax
mov eax, ecx
xor eax, 0xffffffff
or eax, 0x9625b70d
or ecx, 0x69da48f2
and eax, ecx
sub eax, 0x9d2ddf42
sub eax, 0xac0e9120
add eax, 0x9d2ddf42
sub eax, 0xe75719b5
cmp eax, 0xe91ddc3d
je 0x1000bfaa
mov ecx, dword [ebp - 0x30]
mov eax, dword [0x1027a81c]
and eax, dword [0x1027a820]
add eax, 0x64ea12e0
xor eax, 0xffffffff
or eax, 0x745eb140
xor eax, 0xffffffff
sub eax, 0x34f900d5
mov ecx, dword [ecx]
mov dword [ebp - 0xa0], ecx
mov ecx, dword [ecx]
mov ecx, dword [ecx + 8]
mov dword [ebp - 0x9c], ecx
cmp eax, 0x2545fbb5
jbe 0x1000bfaa
mov eax, dword [ebp - 0x9c]
mov edx, dword [ebp - 0xa0]
mov dword [ebp - 0x10], 2
sub esp, 4
mov ecx, esp
mov dword [ecx], edx
call eax
jmp 0x1000bb53
mov eax, dword [0x1027a82c]
mov ecx, dword [0x1027a830]
xor ecx, 0xffffffff
add eax, ecx
add eax, 1
xor eax, 0xc07fd321
mov ecx, eax
and ecx, 0xe86c1873
mov edx, eax
xor edx, 0x1793e78c
add eax, edx
sub eax, ecx
imul eax, eax, 0x9e4ebb7a
cmp eax, 0x4908b47c
jbe 0x1000bfaf
jmp 0x1000bb95
mov ebx, dword [0x1027a834]
mov edi, dword [0x1027a838]
mov ecx, ebx
xor ecx, 0xffffffff
mov edx, edi
xor edx, 0xffffffff
mov eax, ecx
and eax, 0x9d5c6aaa
and ebx, 0x62a39555
mov esi, edx
and esi, 0x9d5c6aaa
and edi, 0x62a39555
or eax, ebx
or esi, edi
xor eax, esi
or ecx, edx
xor ecx, 0xffffffff
or eax, ecx
add eax, 0x1a7a2b79
imul eax, eax, 0xffdb6d0c
add eax, 0xedf2ef0a
cmp eax, 0x8d600737
jbe 0x1000bfb4
mov ecx, dword [ebp - 0x38]
mov eax, dword [0x1027a83c]
mov esi, dword [0x1027a840]
xor edx, edx
sub edx, eax
xor eax, eax
sub eax, esi
add edx, eax
xor eax, eax
sub eax, edx
sub eax, 0xbf220111
imul esi, eax, 0x689806a0
mov edx, esi
xor edx, 0xffffffff
mov eax, edx
and eax, 0x95b812b4
and esi, 0x6a47ed4b
or eax, esi
xor eax, 0xa2e1d715
or edx, 0xc8a63a5e
xor edx, 0xffffffff
or eax, edx
mov ecx, dword [ecx]
mov dword [ebp - 0xa8], ecx
mov ecx, dword [ecx]
mov ecx, dword [ecx + 8]
mov dword [ebp - 0xa4], ecx
cmp eax, 0xfc9cd66b
ja 0x1000bfb4
mov eax, dword [ebp - 0xa4]
mov edx, dword [ebp - 0xa8]
mov dword [ebp - 0x10], 2
sub esp, 4
mov ecx, esp
mov dword [ecx], edx
call eax
jmp 0x1000bc78
jmp 0x1000bc7d
call dword [sym.imp.ole32.dll_CoUninitialize]
mov eax, dword [ebp - 0x54]
mov dword [eax], 0
mov ecx, dword [ebp - 0x48]
mov eax, dword [0x1027a84c]
mov edx, dword [0x1027a850]
xor edx, 0xffffffff
sub edx, 0xffffffff
sub eax, edx
mov edx, eax
xor edx, 0x9657dc39
xor edx, 0xffffffff
and edx, 0x9657dc39
shl edx, 1
sub edx, 0x9657dc39
sub eax, edx
add eax, 0xf15ed5b0
and eax, 0x7dd032cc
mov dword [ebp - 0xb0], eax
call fcn.100061b0
mov ecx, dword [ebp - 0x54]
mov eax, dword [ebp - 0xb0]
mov ecx, dword [ecx]
mov dword [ebp - 0xac], ecx
cmp eax, 0x614e6338
jb 0x1000bc8c
mov eax, dword [ebp - 0xac]
cmp eax, 0
jne 0x1000bd5b
mov edx, dword [0x1027a85c]
and edx, dword [0x1027a860]
mov eax, edx
xor eax, 0xffffffff
mov ecx, eax
and ecx, 0x135a43e2
and edx, 0xeca5bc1d
or ecx, edx
xor ecx, 0xcc69e21a
or eax, 0x20cc5e07
xor eax, 0xffffffff
or ecx, eax
mov eax, ecx
and eax, 0x42eca4d7
or ecx, 0x42eca4d7
add eax, ecx
add eax, 0xc1f7a97c
cmp eax, 0x26444e38
je 0x1000bfb9
jmp 0x1000bd52
mov eax, dword [ebp - 0x54]
mov dword [eax], 0
mov eax, dword [0x1027a864]
add eax, dword [0x1027a868]
and eax, 0xec2cf2cd
mov edx, eax
and edx, 0xfa4b1de2
mov ecx, eax
or ecx, 0xfa4b1de2
xor ecx, 0xffffffff
imul ecx, edx
mov edx, eax
and edx, 0x5b4e21d
or eax, 0x5b4e21d
imul eax, edx
add eax, ecx
imul eax, eax, 0x8668a2c7
cmp eax, 0xc2b3f9b3
je 0x1000bfbe
mov ecx, dword [ebp - 0x5c]
call fcn.100061b0
mov eax, dword [ebp - 0x54]
cmp dword [eax], 1
ja 0x1000be34
mov eax, dword [0x1027a874]
xor edx, edx
div dword [0x1027a878]
mov ecx, eax
mov eax, ecx
xor eax, 0xffffffff
and eax, 0x72907864
and ecx, 0x8d6f879b
or eax, ecx
sub eax, 0x40d574b
add eax, 0xe7b4210e
cmp eax, 0x6d3340a0
je 0x1000bfcb
mov eax, dword [0x1027a87c]
mov edx, dword [0x1027a880]
mov ecx, eax
add ecx, 1
xor eax, 0xffffffff
or eax, edx
add eax, ecx
or eax, 0x88c0e64f
imul eax, eax, 0xf71023de
add eax, 0x28cfc1af
add eax, 1
cmp eax, 0xefb86a85
jae 0x1000bfcb
mov eax, dword [ebp - 0x18]
mov dword fs:[0], eax
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov eax, dword [0x1027a884]
or eax, dword [0x1027a888]
mov ecx, eax
xor ecx, 0xffffffff
and ecx, 0x9a1153b
and eax, 0xf65eeac4
sub eax, ecx
or eax, 0x3c6eee9
sub eax, 0xa5911854
cmp eax, 0x2aa3d81e
jb 0x1000bfd0
mov eax, dword [0x1027a88c]
sub eax, dword [0x1027a890]
imul eax, eax, 0xfca34aa2
imul eax, eax, 0x5b47a04c
imul eax, eax, 0x881e914f
cmp eax, 0xb3abea62
ja 0x1000be66
jmp 0x1000b4b4
jmp 0x1000b51b
jmp 0x1000b5b7
jmp 0x1000b620
mov ecx, dword [ebp - 0x44]
call fcn.100061b0
mov ecx, dword [ebp - 0x40]
call fcn.100061b0
mov ecx, dword [ebp - 0x3c]
call fcn.100061b0
mov ecx, dword [ebp - 0x48]
call fcn.10008340
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
jmp 0x1000b64b
mov eax, dword [ebp - 0x54]
mov dword [eax], 1
jmp 0x1000b776
mov eax, dword [ebp - 0x70]
lea edx, [0x10228598]
xor ecx, ecx
lea ecx, [0x10226194]
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], 0
mov dword [esp + 8], 1
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
call dword [sym.imp.ole32.dll_CoCreateInstance]
mov ecx, eax
mov eax, dword [ebp - 0x4c]
mov dword [eax], ecx
jmp 0x1000b7aa
mov ecx, dword [ebp - 0x5c]
call fcn.10008340
mov ecx, eax
mov eax, dword [ebp - 0x34]
xor edx, edx
sub esp, 0x18
mov dword [esp], 0
mov dword [esp + 4], 0
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 0xffffffff
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], 0x104
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
jmp 0x1000b83e
mov ecx, dword [ebp - 0x48]
call fcn.10008340
mov ecx, eax
mov eax, dword [ebp - 0x2c]
xor edx, edx
sub esp, 0x18
mov dword [esp], 0
mov dword [esp + 4], 0
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 0xffffffff
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], 0x104
call dword [sym.imp.KERNEL32.dll_MultiByteToWideChar]
jmp 0x1000b9c2
jmp 0x1000baf1
jmp 0x1000bb53
jmp 0x1000bbee
jmp 0x1000bcfd
mov ecx, dword [ebp - 0x5c]
call fcn.100061b0
jmp 0x1000bda4
jmp 0x1000bdee
jmp 0x1000be66