Function at 0x1001fa90
Capabilities:
Check for time delay via gettickcount
Delete file

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10029515
mov eax, dword fs:[0]
push eax
sub esp, 0x5d4
mov eax, dword [0x10032118]
xor eax, ebp
mov dword [ebp - 0x10], eax
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x278], eax
call fcn.1001eb90
push 0
push 0
push 1
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov ecx, dword [0x100345e0]
mov dword [ecx + 0x44], eax
call fcn.1001eb90
mov edx, dword [0x100345e0]
mov dword [edx + 4], 1
call fcn.1001eb90
push 0x1002d664
lea ecx, [ebp - 0x274]
call fcn.10003d90
mov dword [ebp - 4], 0
call fcn.1001eb90
push str.BDLogicUtils_url
lea ecx, [ebp - 0x2c]
call fcn.10003d90
mov byte [ebp - 4], 1
call fcn.1001eb90
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x47c], esp
lea eax, [ebp - 0x2c]
push eax
call fcn.10003dd0
mov dword [ebp - 0x554], eax
mov ecx, dword [ebp - 0x554]
mov dword [ebp - 0x558], ecx
mov byte [ebp - 4], 2
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x480], esp
lea edx, [ebp - 0x274]
push edx
call fcn.10003dd0
mov dword [ebp - 0x55c], eax
mov eax, dword [0x100345e0]
add eax, 0x40
push eax
mov byte [ebp - 4], 1
mov ecx, dword [0x100345e0]
call fcn.10022c80
push 0xffffffffffffffff
mov ecx, dword [0x100345e0]
mov edx, dword [ecx + 0x44]
push edx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
call fcn.1001eb90
mov eax, dword [0x100345e0]
cmp dword [eax + 0x48], 0
je 0x1001fd50
mov ecx, dword [0x100345e0]
mov edx, dword [ecx + 0x44]
push edx
call dword [sym.imp.KERNEL32.dll_ResetEvent]
call fcn.1001eb90
mov eax, dword [0x100345e0]
mov dword [eax + 4], 2
call fcn.1001eb90
push str.BDMReport.dll
lea ecx, [ebp - 0x274]
call fcn.10003e50
call fcn.1001eb90
push str.BDMReport_url
lea ecx, [ebp - 0x2c]
call fcn.10003e50
call fcn.1001eb90
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x484], esp
lea edx, [ebp - 0x2c]
push edx
call fcn.10003dd0
mov dword [ebp - 0x560], eax
mov eax, dword [ebp - 0x560]
mov dword [ebp - 0x564], eax
mov byte [ebp - 4], 3
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x488], esp
lea edx, [ebp - 0x274]
push edx
call fcn.10003dd0
mov dword [ebp - 0x568], eax
mov eax, dword [0x100345e0]
add eax, 0x40
push eax
mov byte [ebp - 4], 1
mov ecx, dword [0x100345e0]
call fcn.10022c80
call fcn.1001eb90
push 0xffffffffffffffff
mov ecx, dword [0x100345e0]
mov edx, dword [ecx + 0x44]
push edx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
call fcn.1001eb90
mov eax, dword [0x100345e0]
cmp dword [eax + 0x48], 0
je 0x1001fd50
mov ecx, dword [0x100345e0]
mov edx, dword [ecx + 0x44]
push edx
call dword [sym.imp.KERNEL32.dll_ResetEvent]
call fcn.1001eb90
mov eax, dword [0x100345e0]
mov dword [eax + 4], 3
call fcn.1001eb90
push str.BDMNet.dll
lea ecx, [ebp - 0x274]
call fcn.10003e50
call fcn.1001eb90
push str.BDMNet_url
lea ecx, [ebp - 0x2c]
call fcn.10003e50
call fcn.1001eb90
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x48c], esp
lea edx, [ebp - 0x2c]
push edx
call fcn.10003dd0
mov dword [ebp - 0x56c], eax
mov eax, dword [ebp - 0x56c]
mov dword [ebp - 0x570], eax
mov byte [ebp - 4], 4
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x490], esp
lea edx, [ebp - 0x274]
push edx
call fcn.10003dd0
mov dword [ebp - 0x574], eax
mov eax, dword [0x100345e0]
add eax, 0x40
push eax
mov byte [ebp - 4], 1
mov ecx, dword [0x100345e0]
call fcn.10022c80
call fcn.1001eb90
push 0xffffffffffffffff
mov ecx, dword [0x100345e0]
mov edx, dword [ecx + 0x44]
push edx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
call fcn.1001eb90
mov eax, dword [0x100345e0]
cmp dword [eax + 0x48], 0
je 0x10020791
lea ecx, [ebp - 0x294]
call fcn.10003d60
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x294]
push ecx
call fcn.100263a0
add esp, 4
test eax, eax
je 0x10020035
push str.version
lea ecx, [ebp - 0x2f0]
call fcn.10003d90
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x2d4]
call fcn.10005b90
mov byte [ebp - 4], 7
mov edx, dword [0x100345e0]
add edx, 0x40
push ecx
mov ecx, esp
mov dword [ebp - 0x494], esp
push edx
call fcn.10005290
mov dword [ebp - 0x578], eax
mov eax, dword [ebp - 0x578]
mov dword [ebp - 0x57c], eax
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x2d4]
push ecx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x498], esp
lea edx, [ebp - 0x2f0]
push edx
call fcn.10003dd0
mov dword [ebp - 0x580], eax
mov byte [ebp - 4], 7
mov ecx, dword [0x100345e0]
call fcn.10022880
lea ecx, [ebp - 0x2d4]
call fcn.10005bb0
movzx eax, al
test eax, eax
jne 0x10020017
lea ecx, [ebp - 0x2d4]
call fcn.100057e0
push eax
lea ecx, [ebp - 0x30c]
call fcn.10003d90
mov byte [ebp - 4], 9
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x49c], esp
lea edx, [ebp - 0x30c]
push edx
call fcn.10003dd0
mov dword [ebp - 0x584], eax
mov eax, dword [ebp - 0x584]
mov dword [ebp - 0x588], eax
mov byte [ebp - 4], 0xa
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x4a0], esp
lea edx, [ebp - 0x294]
push edx
call fcn.10003dd0
mov dword [ebp - 0x58c], eax
mov byte [ebp - 4], 9
call fcn.1001eda0
add esp, 0x38
mov dword [ebp - 0x590], eax
cmp dword [ebp - 0x590], 0xffffffff
jle 0x10020008
lea ecx, [ebp - 0x344]
call fcn.10003d60
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x328]
call fcn.10003d60
mov byte [ebp - 4], 0xc
lea eax, [ebp - 0x344]
push eax
call fcn.100262c0
add esp, 4
test eax, eax
je 0x1001ffea
push 0x1002d74c
lea ecx, [ebp - 0x344]
push ecx
lea edx, [ebp - 0x4bc]
push edx
call fcn.10006b60
add esp, 0xc
mov dword [ebp - 0x594], eax
mov eax, dword [ebp - 0x594]
mov dword [ebp - 0x598], eax
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x294]
push ecx
mov edx, dword [ebp - 0x598]
push edx
lea eax, [ebp - 0x4d8]
push eax
call fcn.10006bf0
add esp, 0xc
mov dword [ebp - 0x59c], eax
mov ecx, dword [ebp - 0x59c]
mov dword [ebp - 0x5a0], ecx
mov byte [ebp - 4], 0xe
push str.BaiduAnTray.exe
mov edx, dword [ebp - 0x5a0]
push edx
lea eax, [ebp - 0x4f4]
push eax
call fcn.10006b60
add esp, 0xc
mov dword [ebp - 0x5a4], eax
mov ecx, dword [ebp - 0x5a4]
mov dword [ebp - 0x5a8], ecx
mov byte [ebp - 4], 0xf
mov edx, dword [ebp - 0x5a8]
push edx
lea ecx, [ebp - 0x328]
call fcn.10003e30
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x4f4]
call fcn.10003e10
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0x4d8]
call fcn.10003e10
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x4bc]
call fcn.10003e10
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x4f8], esp
lea eax, [ebp - 0x328]
push eax
call fcn.10003dd0
mov dword [ebp - 0x5ac], eax
call fcn.10025fc0
add esp, 0x1c
mov dword [ebp - 0x5b0], eax
cmp dword [ebp - 0x5b0], 0
je 0x1001ffea
mov dword [0x10033784], 0
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x328]
call fcn.10003e10
mov byte [ebp - 4], 9
lea ecx, [ebp - 0x344]
call fcn.10003e10
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x30c]
call fcn.10003e10
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x2d4]
call fcn.10005bd0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x2f0]
call fcn.10003e10
cmp dword [0x10033784], 0
jne 0x100203ab
push 0x1002d750
lea ecx, [ebp - 0x36c]
call fcn.10003d90
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x348]
call fcn.10005b90
mov byte [ebp - 4], 0x11
mov dword [ebp - 0x350], 1
mov dword [ebp - 0x34c], 1
mov ecx, dword [0x100345e0]
add ecx, 0x40
push ecx
mov edx, esp
mov dword [ebp - 0x4fc], esp
push ecx
mov ecx, edx
call fcn.10005290
mov dword [ebp - 0x5b4], eax
mov eax, dword [ebp - 0x5b4]
mov dword [ebp - 0x5b8], eax
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x348]
push ecx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x500], esp
lea edx, [ebp - 0x36c]
push edx
call fcn.10003dd0
mov dword [ebp - 0x5bc], eax
mov byte [ebp - 4], 0x11
mov ecx, dword [0x100345e0]
call fcn.10022880
lea ecx, [ebp - 0x348]
call fcn.10005bb0
movzx eax, al
test eax, eax
jne 0x10020377
lea ecx, [ebp - 0x348]
call fcn.100057e0
push eax
lea ecx, [ebp - 0x38c]
call fcn.10003d90
mov byte [ebp - 4], 0x13
push str.FixSvcReg:
lea ecx, [ebp - 0x3c4]
call fcn.10003d90
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x3a8]
call fcn.10003d60
mov byte [ebp - 4], 0x15
push 0
lea ecx, [ebp - 0x3c4]
call fcn.10004010
push eax
lea ecx, [ebp - 0x38c]
call fcn.100068a0
mov dword [ebp - 0x370], eax
mov ecx, dword [ebp - 0x370]
cmp ecx, dword [0x1002edcc]
je 0x1002022d
lea ecx, [ebp - 0x3c4]
call fcn.10002fe0
add eax, dword [ebp - 0x370]
mov dword [ebp - 0x370], eax
mov edx, dword [ebp - 0x370]
push edx
push 0x3b
lea ecx, [ebp - 0x38c]
call fcn.100068d0
mov dword [ebp - 0x3c8], eax
mov eax, dword [ebp - 0x3c8]
cmp eax, dword [0x1002edcc]
je 0x1002022d
mov ecx, dword [ebp - 0x3c8]
sub ecx, dword [ebp - 0x370]
push ecx
mov edx, dword [ebp - 0x370]
push edx
lea eax, [ebp - 0x51c]
push eax
lea ecx, [ebp - 0x38c]
call fcn.10006910
mov dword [ebp - 0x5c0], eax
mov ecx, dword [ebp - 0x5c0]
mov dword [ebp - 0x5c4], ecx
mov byte [ebp - 4], 0x16
mov edx, dword [ebp - 0x5c4]
push edx
lea ecx, [ebp - 0x3a8]
call fcn.10003e30
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x51c]
call fcn.10003e10
lea ecx, [ebp - 0x3a8]
call fcn.10006880
movzx eax, al
test eax, eax
jne 0x1002022d
lea ecx, [ebp - 0x3a8]
call fcn.10004010
push eax
call fcn.1000cd52
add esp, 4
mov dword [ebp - 0x350], eax
push str.FixSvcItem:
lea ecx, [ebp - 0x3c4]
call fcn.10003e50
push 0x1002d79c
lea ecx, [ebp - 0x3a8]
call fcn.10003e50
push 0
lea ecx, [ebp - 0x3c4]
call fcn.10004010
push eax
lea ecx, [ebp - 0x38c]
call fcn.100068a0
mov dword [ebp - 0x370], eax
mov ecx, dword [ebp - 0x370]
cmp ecx, dword [0x1002edcc]
je 0x1002034a
lea ecx, [ebp - 0x3c4]
call fcn.10002fe0
add eax, dword [ebp - 0x370]
mov dword [ebp - 0x370], eax
mov edx, dword [ebp - 0x370]
push edx
push 0x3b
lea ecx, [ebp - 0x38c]
call fcn.100068d0
mov dword [ebp - 0x3c8], eax
mov eax, dword [ebp - 0x3c8]
cmp eax, dword [0x1002edcc]
je 0x1002034a
mov ecx, dword [ebp - 0x3c8]
sub ecx, dword [ebp - 0x370]
push ecx
mov edx, dword [ebp - 0x370]
push edx
lea eax, [ebp - 0x538]
push eax
lea ecx, [ebp - 0x38c]
call fcn.10006910
mov dword [ebp - 0x5c8], eax
mov ecx, dword [ebp - 0x5c8]
mov dword [ebp - 0x5cc], ecx
mov byte [ebp - 4], 0x17
mov edx, dword [ebp - 0x5cc]
push edx
lea ecx, [ebp - 0x3a8]
call fcn.10003e30
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x538]
call fcn.10003e10
lea ecx, [ebp - 0x3a8]
call fcn.10006880
movzx eax, al
test eax, eax
jne 0x1002034a
lea ecx, [ebp - 0x3a8]
call fcn.10004010
push eax
call fcn.1000cd52
add esp, 4
mov dword [ebp - 0x34c], eax
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0x3a8]
call fcn.10003e10
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x3c4]
call fcn.10003e10
mov byte [ebp - 4], 0x11
lea ecx, [ebp - 0x38c]
call fcn.10003e10
mov ecx, dword [ebp - 0x34c]
push ecx
mov edx, dword [ebp - 0x350]
push edx
call fcn.1001f8a0
add esp, 8
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x348]
call fcn.10005bd0
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x36c]
call fcn.10003e10
push 0x1002d7a0
lea ecx, [ebp - 0x2d0]
call fcn.10005bf0
mov byte [ebp - 4], 0x18
lea eax, [ebp - 0x2d0]
push eax
call fcn.10026110
add esp, 4
mov dword [0x10034648], 3
mov dword [0x1003464c], 0x16
mov dword [0x10034650], 1
push 0x1002d7a4
lea ecx, [ebp - 0x2d0]
push ecx
call fcn.100073b0
add esp, 8
movzx edx, al
neg edx
sbb edx, edx
add edx, 1
mov dword [0x10034654], edx
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [0x100345e4]
xor edx, edx
mov ecx, 0x3e8
div ecx
mov dword [0x10034658], eax
push 0x10034610
mov ecx, 0x1003465c
call fcn.10003e30
lea ecx, [ebp - 0x2d0]
call fcn.10006840
push eax
mov ecx, 0x10034678
call fcn.10003e50
push 0x1002d7a8
mov ecx, 0x10034694
call fcn.10003e50
lea ecx, [ebp - 0x2cc]
call fcn.10003d60
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x2b0]
call fcn.10003d60
mov byte [ebp - 4], 0x1a
lea edx, [ebp - 0x2cc]
push edx
call fcn.100262c0
add esp, 4
test eax, eax
je 0x10020642
lea eax, [ebp - 0x2b0]
push eax
call fcn.100263a0
add esp, 4
test eax, eax
je 0x10020642
lea ecx, [ebp - 0x400]
call fcn.10003d60
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x400]
push ecx
call fcn.10026950
add esp, 4
lea edx, [ebp - 0x400]
push edx
lea ecx, [ebp - 0x438]
call fcn.10003dd0
mov byte [ebp - 4], 0x1c
push 0x1002d7ac
lea ecx, [ebp - 0x438]
call fcn.10003e90
lea eax, [ebp - 0x400]
push eax
lea ecx, [ebp - 0x3e4]
call fcn.10003dd0
mov byte [ebp - 4], 0x1d
push str.BaiduAn.exe
lea ecx, [ebp - 0x3e4]
call fcn.10003e90
lea ecx, [ebp - 0x400]
push ecx
lea ecx, [ebp - 0x41c]
call fcn.10003dd0
mov byte [ebp - 4], 0x1e
push 0x1002d7ec
lea ecx, [ebp - 0x41c]
call fcn.10003e90
lea ecx, [ebp - 0x41c]
call fcn.10004010
push eax
call fcn.10027120
add esp, 4
cmp eax, 1
jne 0x10020606
push str.BaiduAnSvc.exe
call fcn.10025c80
add esp, 4
movzx edx, al
test edx, edx
je 0x1002059b
lea ecx, [ebp - 0x438]
call fcn.10004010
push eax
call fcn.10027120
add esp, 4
test eax, eax
je 0x1002059b
lea ecx, [ebp - 0x3e4]
call fcn.10004010
push eax
call fcn.10027120
add esp, 4
test eax, eax
jne 0x10020606
lea ecx, [ebp - 0x43c]
call fcn.10005b90
mov byte [ebp - 4], 0x1f
lea eax, [ebp - 0x43c]
push eax
call fcn.10026110
add esp, 4
lea ecx, [ebp - 0x43c]
call fcn.10006840
push eax
mov ecx, 0x10034694
call fcn.10003e50
push 0x1002d82c
push 0x10034694
call fcn.10007460
add esp, 8
movzx ecx, al
test ecx, ecx
je 0x100205f7
push 0x1002d830
mov ecx, 0x10034694
call fcn.10003e50
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x43c]
call fcn.10005bd0
mov byte [ebp - 4], 0x1d
lea ecx, [ebp - 0x41c]
call fcn.10003e10
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0x3e4]
call fcn.10003e10
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x438]
call fcn.10003e10
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x400]
call fcn.10003e10
mov ecx, 0x10034648
call fcn.10027990
test eax, eax
je 0x10020755
cmp dword [0x10033784], 0
jne 0x10020667
mov dword [0x10034650], 0xb
mov ecx, 0x10034648
call fcn.100275f0
cmp dword [0x10033784], 0
jne 0x10020755
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
cmp dword [0x100345e0], 0
je 0x100206f6
mov ecx, dword [0x100345e0]
call fcn.10022130
call fcn.1001eb90
mov edx, dword [0x100345e0]
mov dword [ebp - 0x540], edx
mov eax, dword [ebp - 0x540]
mov dword [ebp - 0x53c], eax
cmp dword [ebp - 0x53c], 0
je 0x100206d8
push 1
mov ecx, dword [ebp - 0x53c]
call fcn.100072f0
mov dword [ebp - 0x5d0], eax
jmp 0x100206e2
mov dword [ebp - 0x5d0], 0
call fcn.1001eb90
mov dword [0x100345e0], 0
call fcn.1001eb90
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x2b0]
call fcn.10003e10
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x2cc]
call fcn.10003e10
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x2d0]
call fcn.10005bd0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x294]
call fcn.10003e10
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x2c]
call fcn.10003e10
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x274]
call fcn.10003e10
jmp 0x10020ce2
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x2b0]
call fcn.10003e10
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x2cc]
call fcn.10003e10
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x2d0]
call fcn.10005bd0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x294]
call fcn.10003e10
mov byte [ebp - 0x31], 0
mov dword [ebp - 0x440], 0
jmp 0x100207b0
mov ecx, dword [ebp - 0x440]
add ecx, 1
mov dword [ebp - 0x440], ecx
cmp dword [ebp - 0x440], 2
jge 0x100208e8
mov edx, dword [0x100345e0]
mov eax, dword [edx + 0x44]
push eax
call dword [sym.imp.KERNEL32.dll_ResetEvent]
call fcn.1001eb90
mov ecx, dword [0x100345e0]
mov dword [ecx + 4], 4
call fcn.1001eb90
push 0x1002d834
lea ecx, [ebp - 0x274]
call fcn.10003e50
call fcn.1001eb90
lea ecx, [ebp - 0x45c]
call fcn.10003d60
mov byte [ebp - 4], 0x20
call fcn.1001eb90
lea edx, [ebp - 0x45c]
push edx
call fcn.100261e0
add esp, 4
call fcn.1001eb90
lea eax, [ebp - 0x45c]
push eax
lea ecx, [ebp - 0x274]
call fcn.10003e70
call fcn.1001eb90
push 0x1002d838
lea ecx, [ebp - 0x274]
call fcn.10003e90
call fcn.1001eb90
lea ecx, [ebp - 0x274]
push ecx
mov ecx, dword [0x100345e0]
add ecx, 0x64
call fcn.10003e30
call fcn.1001eb90
lea edx, [ebp - 0x2c]
push edx
lea eax, [ebp - 0x274]
push eax
mov ecx, dword [0x100345e0]
call fcn.10023090
call fcn.1001eb90
push 0xffffffffffffffff
mov ecx, dword [0x100345e0]
mov edx, dword [ecx + 0x44]
push edx
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
call fcn.1001eb90
mov eax, dword [0x100345e0]
cmp dword [eax + 0x4c], 0
jne 0x100208bf
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x45c]
call fcn.10003e10
jmp 0x100207a1
mov byte [ebp - 0x31], 1
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x45c]
call fcn.10003e10
jmp 0x100208e8
movzx ecx, byte [ebp - 0x31]
test ecx, ecx
jne 0x10020964
mov dword [0x10034650], 2
mov dword [0x10034654], 1
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [0x100345e4]
xor edx, edx
mov ecx, 0x3e8
div ecx
mov dword [0x10034658], eax
mov ecx, 0x10034648
call fcn.10027990
test eax, eax
je 0x10020936
mov ecx, 0x10034648
call fcn.100275f0
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x2c]
call fcn.10003e10
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x274]
call fcn.10003e10
jmp 0x10020ce2
mov edx, dword [0x100345e0]
add edx, 8
push edx
lea ecx, [ebp - 0x258]
call fcn.10003dd0
mov byte [ebp - 4], 0x21
call fcn.1001eb90
lea eax, [ebp - 0x274]
push eax
lea ecx, [ebp - 0x258]
call fcn.10003e70
call fcn.1001eb90
mov word [ebp - 0x23c], 0
push 0x1fe
push 0
lea ecx, [ebp - 0x23a]
push ecx
call fcn.1000c950
add esp, 0xc
call fcn.1001eb90
lea edx, [ebp - 0x23c]
push edx
lea ecx, [ebp - 0x258]
call fcn.10004010
push eax
call fcn.100287a0
add esp, 8
call fcn.1001eb90
lea ecx, [ebp - 0x38]
call fcn.10005b90
mov byte [ebp - 4], 0x22
call fcn.1001eb90
lea eax, [ebp - 0x23c]
push eax
push 0x1002d844
lea ecx, [ebp - 0x38]
push ecx
call fcn.100057b0
add esp, 0xc
call fcn.1001eb90
push 0x1002d84c
lea ecx, [ebp - 0x2c]
call fcn.10003e50
call fcn.1001eb90
lea ecx, [ebp - 0x30]
call fcn.10005b90
mov byte [ebp - 4], 0x23
call fcn.1001eb90
mov edx, dword [0x100345e0]
add edx, 0x40
push ecx
mov ecx, esp
mov dword [ebp - 0x544], esp
push edx
call fcn.10005290
mov dword [ebp - 0x5d4], eax
mov eax, dword [ebp - 0x5d4]
mov dword [ebp - 0x5d8], eax
mov byte [ebp - 4], 0x24
lea ecx, [ebp - 0x30]
push ecx
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x548], esp
lea edx, [ebp - 0x2c]
push edx
call fcn.10003dd0
mov dword [ebp - 0x5dc], eax
mov byte [ebp - 4], 0x23
mov ecx, dword [0x100345e0]
call fcn.10022880
call fcn.1001eb90
lea ecx, [ebp - 0x38]
call fcn.10007340
push eax
lea ecx, [ebp - 0x30]
call fcn.10007340
push eax
call fcn.10007390
add esp, 8
movzx eax, al
test eax, eax
jne 0x10020acb
push 0x1002d854
lea ecx, [ebp - 0x30]
push ecx
call fcn.100073b0
add esp, 8
movzx edx, al
test edx, edx
je 0x10020b77
mov eax, dword [0x100345e0]
mov dword [eax + 0x58], 0x64
call fcn.1001eb90
mov ecx, dword [0x100345e0]
mov dword [ecx + 0x58], 0x64
mov dword [0x10034650], 2
mov dword [0x10034654], 0
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [0x100345e4]
xor edx, edx
mov ecx, 0x3e8
div ecx
mov dword [0x10034658], eax
mov ecx, 0x10034648
call fcn.10027990
test eax, eax
je 0x10020b2f
mov ecx, 0x10034648
call fcn.100275f0
lea ecx, [ebp - 0x38]
call fcn.10006840
push eax
lea ecx, [ebp - 0x478]
call fcn.10003d90
mov byte [ebp - 4], 0x25
lea ecx, [ebp - 0x478]
call fcn.10004010
push eax
mov ecx, dword [0x100345e0]
call fcn.100231d0
call fcn.1001eb90
mov byte [ebp - 4], 0x23
lea ecx, [ebp - 0x478]
call fcn.10003e10
jmp 0x10020c29
lea ecx, [ebp - 0x258]
call fcn.10004010
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
call fcn.1001eb90
mov dword [0x10034650], 2
mov dword [0x10034654], 2
call dword [sym.imp.KERNEL32.dll_GetTickCount]
sub eax, dword [0x100345e4]
xor edx, edx
mov ecx, 0x3e8
div ecx
mov dword [0x10034658], eax
mov ecx, 0x10034648
call fcn.10027990
test eax, eax
je 0x10020bd4
mov ecx, 0x10034648
call fcn.100275f0
push 0x3e8
call dword [sym.imp.KERNEL32.dll_Sleep]
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x30]
call fcn.10005bd0
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x38]
call fcn.10005bd0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x258]
call fcn.10003e10
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x2c]
call fcn.10003e10
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x274]
call fcn.10003e10
jmp 0x10020ce2
cmp dword [0x100345e0], 0
je 0x10020c96
mov ecx, dword [0x100345e0]
call fcn.10022130
call fcn.1001eb90
mov edx, dword [0x100345e0]
mov dword [ebp - 0x550], edx
mov eax, dword [ebp - 0x550]
mov dword [ebp - 0x54c], eax
cmp dword [ebp - 0x54c], 0
je 0x10020c78
push 1
mov ecx, dword [ebp - 0x54c]
call fcn.100072f0
mov dword [ebp - 0x5e0], eax
jmp 0x10020c82
mov dword [ebp - 0x5e0], 0
call fcn.1001eb90
mov dword [0x100345e0], 0
call fcn.1001eb90
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x30]
call fcn.10005bd0
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x38]
call fcn.10005bd0
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x258]
call fcn.10003e10
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x2c]
call fcn.10003e10
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x274]
call fcn.10003e10
jmp 0x10020ce2
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1000c2ef
mov esp, ebp
pop ebp
ret