Function at 0x10043550
Capabilities:
Check if file exists
Check os version
Get file attributes
Get hostname

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x10087d87
mov eax, dword fs:[0]
push eax
push ecx
mov eax, 0x10d4
call fcn.100790e0
mov eax, dword [0x100a5c90]
xor eax, esp
mov dword [esp + 0x10d0], eax
push ebx
push esi
push edi
mov eax, dword [0x100a5c90]
xor eax, esp
push eax
lea eax, [esp + 0x10e8]
mov dword fs:[0], eax
mov eax, dword [ebp + 0x14]
mov ebx, dword [ebp + 8]
mov edx, dword [ebp + 0x1c]
mov edi, dword [ebp + 0xc]
mov esi, dword [ebp + 0x10]
mov dword [esp + 0x2c], eax
mov eax, dword [ebp + 0x20]
mov dword [esp + 0x1c], ecx
mov ecx, dword [ebp + 0x18]
mov dword [esp + 0x30], eax
xor eax, eax
push ebx
mov dword [esp + 0x2c], ebx
mov dword [esp + 0x24], edi
mov dword [esp + 0x40], esi
mov dword [esp + 0x38], ecx
mov dword [esp + 0x28], edx
mov dword [esp + 0x44], eax
mov dword [esp + 0x1c], eax
mov dword [esp + 0x14], eax
mov dword [esp + 0x50], 1
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
je 0x100435f6
shr eax, 4
not eax
and eax, 1
jne 0x10043618
mov ecx, dword [esp + 0x30]
mov edx, dword [esp + 0x24]
mov eax, dword [esp + 0x34]
push ecx
mov ecx, dword [esp + 0x30]
push edx
push eax
push ecx
push esi
push edi
push ebx
call dword [0x100ac6c4]
jmp 0x10044842
sub esp, 0x1c
mov esi, esp
xor edx, edx
mov dword [esi + 0x14], 7
mov dword [esi + 0x10], 0
mov eax, ebx
mov word [esi], dx
mov dword [esp + 0x64], esp
lea edx, [eax + 2]
lea esp, [esp]
mov cx, word [eax]
add eax, 2
test cx, cx
jne 0x10043640
sub eax, edx
sar eax, 1
push eax
mov eax, ebx
call fcn.10003a30
mov eax, dword [esp + 0x38]
add eax, 0x9e4
push eax
call fcn.10050360
test eax, eax
je 0x10043690
mov ecx, dword [esp + 0x30]
mov edx, dword [esp + 0x24]
mov eax, dword [esp + 0x34]
push ecx
mov ecx, dword [esp + 0x30]
push edx
mov edx, dword [esp + 0x44]
push eax
push ecx
push edx
push edi
push ebx
call dword [0x100ac6c4]
jmp 0x10044842
push ebx
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
mov dword [esp + 0x48], eax
test al, 0x10
je 0x100436c5
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x34]
push eax
mov eax, dword [esp + 0x30]
push ecx
mov ecx, dword [esp + 0x44]
push edx
push eax
push ecx
push edi
push ebx
call dword [0x100ac6c4]
jmp 0x10044842
lea edx, [esp + 0x1cc]
push edx
call fcn.10034300
xor esi, esi
mov ecx, ebx
lea edx, [esp + 0x1cc]
mov dword [esp + 0x10f0], esi
call fcn.10034cf0
xor eax, eax
lea edi, [esi + 1]
mov edi, edi
mov cl, byte [esp + eax + 0x1e8]
cmp cl, byte [eax + 0x10091754]
jne 0x10043730
add eax, edi
cmp eax, 9
jl 0x100436f0
cmp word [esp + 0x1f8], 0xb
mov dword [esp + 0x10], edi
ja 0x10043730
push ebx
push 0x10096a3c
mov ecx, 0x100aa2d0
call fcn.10005890
add esp, 8
mov dword [esp + 0x10], esi
mov dword [esp + 0x4c], esi
call fcn.10001080
test eax, eax
je 0x100438ba
call fcn.10001170
call fcn.100130b0
test eax, eax
je 0x10043789
cmp dword [esp + 0x10], esi
je 0x100437b4
call fcn.100534e0
push eax
call fcn.10053ce0
test eax, eax
jne 0x10043789
cmp dword [0x100aa294], esi
jne 0x10043789
push 0x1034
push 0x10095ec0
push 0x10095ec8
push esi
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp eax, 6
jne 0x10043802
mov dword [0x100aa294], edi
cmp dword [esp + 0x10], esi
je 0x100437b4
call fcn.10001170
lea ecx, [eax + 0x194]
mov esi, str.runtimelocalserver
call fcn.10005d20
test al, al
je 0x100437b4
call fcn.1005cdb0
mov esi, eax
call fcn.1005ce50
call fcn.10001170
lea ecx, [eax + 0x194]
mov esi, str.runtimelocalserver
call fcn.10005d20
test al, al
je 0x100438ba
push ebx
mov eax, str..mdb
call fcn.100263b0
add esp, 4
test eax, eax
je 0x1004381e
cmp dword [esp + 0x10], 0
jne 0x1004381e
call fcn.1005cdb0
mov esi, eax
call fcn.1005ceb0
test eax, eax
jne 0x10043802
mov dword [0x100aa298], edi
jmp 0x1004382e
push 5
call dword [sym.imp.KERNEL32.dll_SetLastError]
lea esi, [esp + 0x1cc]
call fcn.10034420
or eax, 0xffffffff
jmp 0x10044842
cmp dword [0x100aa298], 0
je 0x1004382e
cmp dword [esp + 0x10], 0
jne 0x10043802
mov dword [0x100aa290], 0
call fcn.1005cdb0
mov esi, eax
call fcn.1005ceb0
test eax, eax
je 0x10043866
push ebx
mov eax, str..dbf
call fcn.100263b0
add esp, 4
test eax, eax
je 0x10043866
push 0x100a70b4
mov eax, ebx
call fcn.10003740
cmp dword [0x100a711c], 8
mov eax, dword [0x100a7108]
jae 0x10043879
mov eax, 0x100a7108
mov ecx, ebx
jmp 0x10043880
mov dx, word [eax]
cmp dx, word [ecx]
jne 0x100438a6
test dx, dx
je 0x100438a2
mov dx, word [eax + 2]
cmp dx, word [ecx + 2]
jne 0x100438a6
add eax, 4
add ecx, 4
test dx, dx
jne 0x10043880
xor eax, eax
jmp 0x100438ab
sbb eax, eax
sbb eax, 0xffffffff
test eax, eax
jne 0x100438ba
mov eax, edi
mov dword [esp + 0x18], eax
mov dword [0x100aa290], eax
call fcn.10001080
mov esi, dword [esp + 0x10]
test eax, eax
je 0x1004391d
test esi, esi
je 0x1004391d
call fcn.10001170
mov ecx, eax
call fcn.10012c00
test eax, eax
je 0x1004391d
push ebx
mov eax, str..docx
call fcn.100263b0
add esp, 4
test eax, eax
jne 0x10043802
push ebx
mov eax, str..doc
call fcn.100263b0
add esp, 4
test eax, eax
jne 0x10043802
push ebx
mov eax, str..pdf
call fcn.100263b0
add esp, 4
test eax, eax
jne 0x10043802
call fcn.10001080
test eax, eax
je 0x1004393b
test esi, esi
je 0x1004393b
mov edx, dword [esp + 0x1c]
cmp dword [edx + 0x1038], 0
jne 0x10043802
call fcn.10001080
test eax, eax
je 0x10043978
call fcn.1004ad80
test eax, eax
je 0x10043978
cmp dword [0x100aa274], 0
jne 0x1004396e
test esi, esi
je 0x10043978
push 0
push 0x100925ac
push 0x10096a9c
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
test esi, esi
je 0x10043978
mov dword [0x100aa274], edi
call fcn.10001080
test eax, eax
je 0x100439cb
call fcn.10001170
call fcn.10011f80
test eax, eax
je 0x100439cb
test esi, esi
je 0x100439cb
call fcn.1003cf10
test eax, eax
jne 0x100439cb
push 5
call dword [sym.imp.KERNEL32.dll_SetLastError]
push ebx
push str.Esri__s
mov esi, 0x100aa2d0
call fcn.10005ac0
add esp, 8
lea esi, [esp + 0x1cc]
call fcn.10034420
or eax, 0xffffffff
jmp 0x10044842
lea edi, [esp + 0x98]
call fcn.1000e690
mov ecx, eax
mov byte [esp + 0x10f0], 1
mov eax, dword [ecx + 0x10]
push str.B0ZE_U1LP_8C78_I01Q_H02P
mov edi, 0x18
call fcn.10004240
test eax, eax
sete byte [esp + 0x17]
mov byte [esp + 0x10f0], 0
cmp dword [esp + 0xac], 8
jb 0x10043a1c
mov eax, dword [esp + 0x98]
push eax
call fcn.10066b10
add esp, 4
xor esi, esi
cmp byte [esp + 0x17], 0
je 0x10043a50
cmp dword [esp + 0x10], esi
je 0x10043a50
cmp word [esp + 0x1f8], 0xe
je 0x10043a50
push str._Y_m
mov ecx, 0x100aa2d0
call fcn.10005970
add esp, 4
mov dword [esp + 0x10], esi
mov dword [esp + 0x4c], esi
call fcn.10001080
test eax, eax
je 0x10043af7
call fcn.10001170
mov ecx, eax
call fcn.10013260
test eax, eax
jne 0x10043a99
call fcn.10001170
call fcn.10012c80
test eax, eax
jne 0x10043a99
call fcn.10001170
mov ecx, eax
call fcn.10013290
test eax, eax
jne 0x10043a99
call fcn.10001170
call fcn.10012c30
test eax, eax
je 0x10043af7
cmp dword [esp + 0x10], esi
je 0x10043af7
mov ecx, dword [esp + 0x1c]
mov eax, dword [ecx + 0x1034]
cmp dword [eax + 0x1c], esi
jle 0x10043ae8
cmp dword [0x100aa278], esi
jne 0x10043af7
cmp dword [eax + 0x20], esi
je 0x10043802
push 0x1031
push 0x10095ec0
push 0x10096b14
push esi
mov dword [eax + 0x20], esi
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp eax, 1
jne 0x10043802
mov dword [0x100aa27c], eax
jmp 0x10043af7
push 0x100a70d0
mov eax, 0x1008da28
call fcn.10003740
call fcn.10001080
test eax, eax
je 0x10043c81
call fcn.10001170
mov ecx, eax
call fcn.10013260
test eax, eax
jne 0x10043b28
call fcn.10001170
mov ecx, eax
call fcn.10013290
test eax, eax
je 0x10043c81
cmp dword [esp + 0x10], esi
je 0x100443f7
xor edx, edx
push 0x208
push edx
lea eax, [esp + 0xcce]
push eax
mov word [esp + 0xcd0], dx
call fcn.1006b580
add esp, 0xc
mov eax, 0x10093c0c
lea ecx, [esp + 0x7c]
call fcn.10003630
push 0x104
lea ecx, [esp + 0xcc8]
push ecx
push 0
mov byte [esp + 0x10fc], 2
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea edx, [esp + 0xcc4]
push edx
lea eax, [esp + 0x64]
push eax
call fcn.1004aeb0
mov edi, eax
lea esi, [esp + 0x7c]
mov byte [esp + 0x10f0], 3
call fcn.10006fb0
lea esi, [esp + 0x60]
mov byte [esp + 0x10f0], 2
call fcn.10003670
cmp dword [esp + 0x8c], 0
jbe 0x10043bfb
push 1
lea ecx, [esp + 0x80]
push ecx
xor ebx, ebx
lea esi, [esp + 0x68]
call fcn.100253e0
mov byte [esp + 0x10f0], 4
mov ecx, 0x10096b48
mov edi, eax
mov dword [esp + 0x40], 1
call fcn.1000a8a0
mov ebx, dword [esp + 0x28]
mov byte [esp + 0x17], 1
test al, al
jne 0x10043c00
mov byte [esp + 0x17], 0
mov dword [esp + 0x10f0], 2
test byte [esp + 0x40], 1
je 0x10043c1b
lea esi, [esp + 0x60]
call fcn.10003670
cmp byte [esp + 0x17], 0
je 0x10043c6e
cmp dword [0x100aa278], 0
jne 0x10043c6e
push 0x2004
push 0x10095ec0
push 0x10096b4c
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
cmp eax, 6
je 0x10043c64
lea esi, [esp + 0x7c]
call fcn.10003670
lea esi, [esp + 0x1cc]
call fcn.10034420
or eax, 0xffffffff
jmp 0x10044842
mov dword [0x100aa278], 1
lea esi, [esp + 0x7c]
mov byte [esp + 0x10f0], 0
call fcn.10003670
xor esi, esi
cmp dword [esp + 0x10], esi
je 0x100443f7
call fcn.100103e0
test al, al
je 0x10044297
cmp dword [0x100aa270], esi
je 0x10044297
call fcn.100534e0
push eax
call fcn.10053ce0
test eax, eax
jne 0x10044297
sub esp, 0x1c
mov eax, ebx
mov ecx, esp
mov dword [esp + 0x60], esp
call fcn.100036d0
lea esi, [esp + 0x108]
call fcn.10020f30
add esp, 0x1c
mov edx, dword [esp + 0x208]
mov edi, 0xf
xor esi, esi
mov dword [esp + 0x50], edx
mov dword [esp + 0xc8], edi
mov dword [esp + 0xc4], esi
mov byte [esp + 0xb4], 0
mov byte [esp + 0x10f0], 6
xor eax, eax
cmp dword [0x100aa2c4], esi
mov dword [esp + 0x40], 1
setne al
mov dword [esp + 0x44], eax
call fcn.10010300
test al, al
je 0x10043d2a
mov dword [esp + 0x40], esi
mov dword [esp + 0x90], edi
mov dword [esp + 0x8c], esi
mov byte [esp + 0x7c], 0
mov eax, 0x10093c0c
lea ecx, [esp + 0x98]
mov byte [esp + 0x10f0], 7
call fcn.10003630
mov eax, 0x10093c0c
lea ecx, [esp + 0x108]
mov byte [esp + 0x10f0], 8
call fcn.10003630
lea ecx, [esp + 0x1cc]
mov byte [esp + 0x10f0], 9
call fcn.10034b10
test eax, eax
jne 0x10043d8e
mov eax, 0x10096b7c
jmp 0x10043e09
push 0x208
lea edx, [esp + 0xcc8]
push 0
push edx
call fcn.1006b580
mov edi, dword [esp + 0x5c]
add esp, 0xc
lea eax, [esp + 0xcc4]
push eax
call fcn.1000cdc0
test eax, eax
je 0x10043e04
sub esp, 0x1c
lea eax, [esp + 0xce0]
mov ecx, esp
mov dword [esp + 0x54], esp
call fcn.100036d0
lea esi, [esp + 0x7c]
call fcn.10020f30
add esp, 0x1c
mov edi, eax
lea esi, [esp + 0xb4]
mov byte [esp + 0x10f0], 0xa
call fcn.10006fb0
lea esi, [esp + 0x60]
mov byte [esp + 0x10f0], 9
call fcn.10003670
jmp 0x10043e16
mov eax, 0x10096b88
lea ecx, [esp + 0xb4]
push ecx
call fcn.100068d0
xor edx, edx
push 0x206
push edx
lea eax, [esp + 0xede]
push eax
mov word [esp + 0xee0], dx
call fcn.1006b580
add esp, 0xc
lea ecx, [esp + 0x58]
push ecx
lea edx, [esp + 0xed8]
push edx
mov dword [esp + 0x60], 0x104
call dword [sym.imp.KERNEL32.dll_GetComputerNameW]
sub esp, 0x1c
lea eax, [esp + 0xef0]
mov ecx, esp
mov dword [esp + 0x54], esp
call fcn.100036d0
lea esi, [esp + 0x7c]
call fcn.10020f30
add esp, 0x1c
mov edi, eax
lea esi, [esp + 0x7c]
mov byte [esp + 0x10f0], 0xb
call fcn.10006fb0
lea esi, [esp + 0x60]
mov byte [esp + 0x10f0], 9
call fcn.10003670
push ebx
mov eax, str..gdb
call fcn.100263b0
add esp, 4
test eax, eax
je 0x10043f5a
xor eax, eax
mov dword [esp + 0xe4], 7
mov dword [esp + 0xe0], 0
mov word [esp + 0xd0], ax
mov eax, ebx
lea ecx, [esp + 0x60]
mov byte [esp + 0x10f0], 0xc
call fcn.100036d0
lea ecx, [esp + 0xd0]
push ecx
lea ebx, [esp + 0x64]
mov byte [esp + 0x10f4], 0xd
call fcn.1001f720
add esp, 4
mov ecx, ebx
mov byte [esp + 0x10f0], 0xc
call fcn.10003710
sub esp, 0x1c
lea ecx, [esp + 0xec]
mov esi, esp
mov dword [esp + 0x54], esp
call fcn.100036a0
lea esi, [esp + 0x7c]
call fcn.10020f30
add esp, 0x1c
mov edi, eax
lea esi, [esp + 0xec]
mov byte [esp + 0x10f0], 0xe
call fcn.10006fb0
lea esi, [esp + 0x60]
call fcn.10003670
lea ecx, [esp + 0xd0]
call fcn.10003710
mov ebx, dword [esp + 0x28]
lea eax, [esp + 0x3fc]
call fcn.10044870
push 5
sub esp, 0x1c
mov byte [esp + 0x1110], 0xf
mov eax, ebx
mov ecx, esp
mov dword [esp + 0x58], esp
call fcn.100036d0
call fcn.1005a170
test eax, eax
je 0x10044031
mov edi, dword [esp + 0x108]
mov eax, 0x10
cmp dword [esp + 0x11c], eax
jae 0x10043fa9
lea edi, [esp + 0x108]
mov esi, dword [esp + 0x7c]
cmp dword [esp + 0x90], eax
jae 0x10043fba
lea esi, [esp + 0x7c]
mov edx, dword [esp + 0x98]
cmp dword [esp + 0xac], eax
jae 0x10043fd1
lea edx, [esp + 0x98]
mov ecx, dword [esp + 0xb4]
cmp dword [esp + 0xc8], eax
jae 0x10043fe8
lea ecx, [esp + 0xb4]
cmp dword [esp + 0x100], eax
mov eax, dword [esp + 0xec]
jae 0x10043fff
lea eax, [esp + 0xec]
push edi
push esi
push edx
mov edx, dword [esp + 0x4c]
push edx
mov edx, dword [esp + 0x54]
push edx
push ecx
mov ecx, dword [esp + 0x68]
push ecx
push eax
push 1
call dword [0x100aa270]
test eax, eax
jne 0x10044031
push 0x10096ba0
mov ecx, 0x100aa2d0
call fcn.10005890
add esp, 4
call fcn.100104c0
test al, al
je 0x10044248
mov eax, str.pencT
lea ecx, [esp + 0xd0]
call fcn.100036d0
sub esp, 0x1c
mov byte [esp + 0x110c], 0x10
lea eax, [esp + 0xd0]
mov esi, esp
mov dword [esp + 0x54], esp
call fcn.10009ba0
lea esi, [esp + 0x15c]
call fcn.10020fd0
mov edi, eax
mov byte [esp + 0x110c], 0x11
lea eax, [esp + 0x98]
mov esi, esp
mov dword [esp + 0x54], esp
call fcn.10009ba0
lea esi, [esp + 0x178]
call fcn.10020fd0
add esp, 0x1c
lea ecx, [esp + 0x178]
mov byte [esp + 0x10f0], 0x12
call fcn.1004b710
push eax
mov eax, 0x10096be4
lea ecx, [esp + 0x198]
mov byte [esp + 0x10f4], 0x13
call fcn.10010b50
add esp, 4
push eax
mov eax, ebx
lea ecx, [esp + 0x128]
mov byte [esp + 0x10f4], 0x14
call fcn.10010b50
add esp, 4
push eax
mov eax, 0x10096bd4
lea ecx, [esp + 0x1b4]
mov byte [esp + 0x10f4], 0x15
call fcn.10010b50
add esp, 4
mov ecx, eax
mov eax, edi
lea ebx, [esp + 0x60]
mov byte [esp + 0x10f0], 0x16
call fcn.10005c90
lea ecx, [esp + 0x1b0]
call fcn.10003710
lea ecx, [esp + 0x124]
call fcn.10003710
lea ecx, [esp + 0x194]
call fcn.10003710
lea ecx, [esp + 0x178]
call fcn.10003710
mov ecx, esi
call fcn.10003710
mov bl, 0x1d
lea ecx, [esp + 0x140]
mov byte [esp + 0x10f0], bl
call fcn.10003710
mov eax, dword [esp + 0x28]
push 0x12c
sub esp, 0x1c
mov ecx, esp
mov dword [esp + 0x58], esp
call fcn.100036d0
call fcn.1005a170
test eax, eax
je 0x1004422f
sub esp, 0x1c
lea ecx, [esp + 0x7c]
mov esi, esp
mov dword [esp + 0x54], esp
call fcn.100036a0
sub esp, 0x1c
mov byte [esp + 0x1128], 0x1e
lea ecx, [esp + 0x108]
mov esi, esp
mov dword [esp + 0x7c], esp
call fcn.100036a0
sub esp, 0x1c
mov byte [esp + 0x1144], 0x1f
mov edi, esp
mov dword [esp + 0xa4], esp
call fcn.100108a0
sub esp, 0x1c
mov byte [esp + 0x1160], 0x20
mov edi, esp
mov dword [esp + 0xb0], esp
call fcn.100107a0
sub esp, 0x1c
mov byte [esp + 0x117c], 0x21
mov edi, esp
mov dword [esp + 0xe8], esp
call fcn.100106a0
sub esp, 0x1c
mov edi, esp
mov byte [esp + 0x1198], 0x22
mov dword [esp + 0xfc], esp
call fcn.100105a0
mov byte [esp + 0x1198], bl
call fcn.10059800
lea ecx, [esp + 0x60]
call fcn.10003710
lea ecx, [esp + 0xd0]
call fcn.10003710
mov ebx, dword [esp + 0x28]
lea esi, [esp + 0x3fc]
call fcn.100448d0
lea esi, [esp + 0x108]
call fcn.10003670
lea esi, [esp + 0x98]
call fcn.10003670
lea esi, [esp + 0x7c]
call fcn.10003670
lea esi, [esp + 0xb4]
call fcn.10003670
lea esi, [esp + 0xec]
mov byte [esp + 0x10f0], 0
call fcn.10003670
xor esi, esi
call fcn.100534e0
push eax
call fcn.10053ce0
test eax, eax
jne 0x10044372
call fcn.10010300
test al, al
je 0x10044372
xor edi, edi
call fcn.10001170
call fcn.10011f80
test eax, eax
je 0x10044302
push ebx
mov eax, str.DocumentsArcGISDefault
call fcn.100263b0
add esp, 4
test eax, eax
jne 0x100442fd
push ebx
mov eax, str.AppDataLocalTemp_
call fcn.100263b0
add esp, 4
test eax, eax
je 0x10044302
push ebx
mov eax, str..tmp
call fcn.100263b0
add esp, 4
test eax, eax
je 0x10044302
mov edi, 1
cmp dword [0x100aa2c4], esi
je 0x10044372
cmp edi, esi
jne 0x10044372
cmp dword [0x100aa2a0], esi
jne 0x10044333
push 0x30
push 0x100925ac
push 0x10096c64
push esi
mov dword [0x100aa2a0], 1
call dword [sym.imp.USER32.dll_MessageBoxW]
push ebx
push 0x10096c80
mov ecx, 0x100aa2d0
call fcn.100057b0
mov edx, dword [esp + 0x38]
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x3c]
add esp, 8
push edx
mov edx, dword [esp + 0x30]
push eax
mov eax, dword [esp + 0x44]
push ecx
mov ecx, dword [esp + 0x2c]
push edx
push eax
push ecx
push ebx
call dword [0x100ac6c4]
mov edi, eax
jmp 0x10044834
lea ecx, [esp + 0x1cc]
call fcn.10034b10
test eax, eax
jne 0x100443a7
mov edx, dword [esp + 0x208]
push edx
push ebx
push 0x10096ca8
mov ecx, 0x100aa2d0
call fcn.10005890
add esp, 0xc
mov dword [esp + 0x10], esi
mov dword [esp + 0x4c], esi
jmp 0x100443f7
lea ecx, [esp + 0x1cc]
call fcn.10034920
test al, al
jne 0x100443f7
push ebx
push 0x10096cd0
mov ecx, 0x100aa2d0
call fcn.10005890
add esp, 8
mov dword [esp + 0x10], esi
mov dword [esp + 0x4c], esi
cmp dword [0x100aa29c], esi
jne 0x100443f7
push 0x30
push 0x10095ec0
push 0x10096cf0
push esi
mov dword [0x100aa29c], 1
call dword [sym.imp.USER32.dll_MessageBoxW]
test byte [esp + 0x48], 1
je 0x10044430
cmp dword [esp + 0x10], esi
jne 0x10044436
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x34]
push eax
mov eax, dword [esp + 0x30]
push ecx
mov ecx, dword [esp + 0x44]
push edx
mov edx, dword [esp + 0x2c]
push eax
push ecx
push edx
push ebx
call dword [0x100ac6c4]
mov edi, eax
jmp 0x10044834
cmp dword [esp + 0x10], esi
je 0x100444b0
mov esi, dword [esp + 0x1c]
add esi, 0x850
call fcn.1004ca40
test eax, eax
jne 0x100444a5
lea esp, [esp]
mov cl, byte [esp + eax + 0x1e8]
cmp cl, byte [eax + 0x10091754]
jne 0x100444a5
inc eax
cmp eax, 9
jl 0x10044450
mov esi, dword [esp + 0x28]
lea eax, [esp + 0x1cc]
mov ecx, esi
call fcn.1002ba60
test eax, eax
je 0x100444a5
sub esp, 0x1c
mov eax, esi
mov ecx, esp
mov dword [esp + 0x70], esp
call fcn.100036d0
mov edx, dword [esp + 0x38]
add edx, 0x8dc
push edx
call fcn.1004de20
test eax, eax
jne 0x100444a5
push esi
call fcn.1002bad0
cmp dword [esp + 0x10], 0
mov ebx, dword [esp + 0x28]
jne 0x100444ce
cmp dword [esp + 0x4c], 0
je 0x100444ce
mov edi, dword [esp + 0x1c]
mov esi, ebx
call fcn.1002b180
test eax, eax
je 0x100444ce
mov dword [esp + 0x18], 1
xor edi, edi
call fcn.1004b980
mov esi, 0x4000000
test eax, eax
je 0x10044518
test dword [esp + 0x24], esi
je 0x1004451e
call fcn.10001170
mov ecx, eax
call fcn.10013290
test eax, eax
jne 0x10044504
call fcn.10001170
mov ecx, eax
call fcn.10013260
test eax, eax
je 0x10044518
push 0x10096d14
mov ecx, 0x100aa2d0
call fcn.10005670
add esp, 4
jmp 0x1004451e
test dword [esp + 0x24], esi
jne 0x10044564
cmp dword [esp + 0x18], edi
je 0x10044568
cmp dword [esp + 0x20], 0x80000000
jne 0x10044537
call fcn.1000ea50
test al, al
je 0x10044564
sub esp, 0x1c
mov eax, ebx
mov ecx, esp
mov dword [esp + 0x70], esp
call fcn.100036d0
mov eax, dword [esp + 0x38]
add eax, 0x8dc
push eax
call fcn.1004de20
cmp eax, edi
jne 0x10044564
push ebx
call fcn.1002b7a0
test eax, eax
je 0x10044568
mov dword [esp + 0x18], edi
cmp dword [esp + 0x10], edi
jne 0x10044676
cmp dword [esp + 0x18], edi
je 0x1004468f
call fcn.1004b980
test eax, eax
je 0x1004459f
push ebx
push 0x10096d30
mov ecx, 0x100aa2d0
call fcn.10005890
add esp, 8
push 6
jmp 0x10043804
call fcn.10001080
test eax, eax
je 0x10044676
call fcn.10001170
mov ecx, eax
call fcn.10013260
test eax, eax
jne 0x100445cc
call fcn.10001170
mov ecx, eax
call fcn.10013290
test eax, eax
je 0x100445f9
mov edi, dword [esp + 0x1c]
mov esi, ebx
call fcn.1002b1b0
test eax, eax
je 0x100445f9
push ebx
mov eax, str..tmp
call fcn.100263b0
add esp, 4
test eax, eax
jne 0x100445f9
push 0x100a70b4
mov eax, ebx
call fcn.10003740
cmp dword [0x100aa290], 0
je 0x1004464a
call fcn.10001170
lea ecx, [eax + 0x194]
mov esi, str.runtimelocalserver
call fcn.10005d20
test al, al
je 0x1004464a
lea esi, [esp + 0x4a4]
call fcn.1002fd90
push 0
mov ecx, esi
mov byte [esp + 0x10f4], 0x23
call fcn.10032bd0
push 0
push ebx
mov ecx, esi
call fcn.100300c0
mov byte [esp + 0x10f0], 0
mov ecx, dword [esp + 0x30]
mov edx, dword [esp + 0x24]
mov eax, dword [esp + 0x34]
push ecx
mov ecx, dword [esp + 0x30]
push edx
mov edx, dword [esp + 0x44]
push eax
mov eax, dword [esp + 0x2c]
push ecx
push edx
push eax
push ebx
call dword [0x100ac6c4]
mov edi, eax
jmp 0x10044834
cmp dword [esp + 0x18], edi
je 0x1004468f
call fcn.100534e0
push eax
call fcn.10053ce0
test eax, eax
je 0x1004468f
mov dword [esp + 0x18], edi
lea ecx, [esp + 0x1cc]
call fcn.10034ee0
test eax, eax
je 0x100446b1
cmp dword [0x100aa27c], edi
je 0x100446b1
mov dword [0x100aa278], 1
cmp dword [esp + 0x18], edi
je 0x100446ef
lea esi, [esp + 0x4a4]
call fcn.1002fd90
push edi
mov ecx, esi
mov byte [esp + 0x10f4], 0x24
call fcn.10032bd0
push edi
push ebx
mov ecx, esi
call fcn.100300c0
xor ecx, ecx
cmp eax, edi
setne cl
mov byte [esp + 0x10f0], 0
mov dword [esp + 0x10], ecx
mov edx, dword [esp + 0x30]
mov esi, dword [esp + 0x24]
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x2c]
push edx
mov edx, dword [esp + 0x40]
push esi
push eax
mov eax, dword [esp + 0x2c]
push ecx
push edx
push eax
push ebx
call dword [0x100ac6c4]
mov edi, eax
mov dword [esp + 0x20], edi
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp dword [esp + 0x10], 0
mov dword [esp + 0x44], eax
je 0x10044829
cmp edi, 0xffffffff
je 0x10044829
and esi, 0x40000000
mov dword [esp + 0x48], esi
je 0x10044754
mov ecx, ebx
lea edx, [esp + 0x1cc]
call fcn.10034cf0
jmp 0x10044764
mov edi, dword [esp + 0x20]
lea ecx, [esp + 0x1cc]
call fcn.10034de0
mov ecx, dword [esp + 0x20]
push 1
push 0
push 0x200
push ecx
call dword [0x100ac6e4]
sub esp, 0x1c
mov eax, ebx
mov ecx, esp
mov dword [esp + 0x70], esp
call fcn.100036d0
mov edi, dword [esp + 0x38]
add edi, 0x840
lea ecx, [esp + 0xb4]
call fcn.1005ab80
mov byte [esp + 0x10f0], 0x25
call fcn.10001170
mov ecx, eax
call fcn.10013260
test eax, eax
jne 0x100447c6
call fcn.10001170
mov ecx, eax
call fcn.10013290
test eax, eax
je 0x100447e1
mov edi, dword [esp + 0x1c]
mov esi, ebx
call fcn.1002b1b0
test eax, eax
je 0x100447e1
push 0x100a70b4
mov eax, ebx
call fcn.10003740
cmp dword [esp + 0xac], 8
mov edx, dword [esp + 0x98]
jae 0x100447f9
lea edx, [esp + 0x98]
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x20]
push eax
mov eax, dword [esp + 0x20]
push ecx
add eax, 0x850
push eax
lea ecx, [esp + 0x1d8]
call fcn.1004bc00
lea ecx, [esp + 0x98]
call fcn.10003710
mov edi, dword [esp + 0x20]
mov ecx, dword [esp + 0x44]
push ecx
call dword [sym.imp.KERNEL32.dll_SetLastError]
lea esi, [esp + 0x1cc]
call fcn.10034420
mov eax, edi
mov ecx, dword [esp + 0x10e8]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x10d0]
xor ecx, esp
call fcn.10066b1b
mov esp, ebp
pop ebp
ret 0x1c