Function at 0x10148aa8
Capabilities:
Delete file
Query environment variable

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0xdc
mov eax, dword [0x101dc354]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0xc]
push ebx
push esi
push edi
push 0x1005e000
xor ebx, ebx
mov dword [ebp - 0xd8], ecx
push ebx
push ebx
push 0x4000000
mov dword [ebp - 0xdc], eax
call fcn.100ab973
add esp, 0x10
mov esi, 0x1002f398
push 0x1005dfc4
sub esp, 0x10
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.100ea948
mov eax, ebx
mov dword [ebp - 0xbc], ebx
add esp, 0x10
mov dword [ebp - 0x90], eax
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x84], eax
mov dword [ebp - 8], ebx
mov dword [ebp - 0xc], ebx
call fcn.10142dd3
mov edi, dword [ebp - 0xd8]
lea ecx, [ebp - 0x94]
mov dword [ebp - 0x88], ebx
mov dword [ebp - 0x80], ebx
mov dword [ebp - 0xa8], ebx
push dword [edi + 0x30]
mov dword [ebp - 0xa4], ebx
mov dword [ebp - 0xac], ebx
mov dword [ebp - 0xa0], ebx
mov dword [ebp - 0x7c], ebx
call fcn.1011f4fb
push dword [edi + 0x30]
lea ecx, [ebp - 0x78]
call fcn.1011f4b1
mov ecx, dword [edi + 0x30]
mov dword [ebp - 0xb8], ebx
mov dword [ebp - 0xb4], ebx
mov dword [ebp - 0xd4], ebx
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x98], ebx
call fcn.100b3e5c
test eax, eax
je 0x10148bb9
mov eax, dword [edi + 0x30]
test byte [eax + 0x4c], 0x20
jne 0x10148bb9
push ebx
push ebx
push 0x1005e04c
call dword [sym.imp.api_ms_win_core_processenvironment_l1_1_0.dll_GetEnvironmentVariableW]
mov dword [ebp - 0xd0], 1
test eax, eax
jne 0x10148bbf
mov dword [ebp - 0xd0], ebx
mov eax, dword [edi + 0x30]
test byte [eax + 0x4c], 0x80
jne 0x10148bd4
test dword [eax + 0x4c], 0x200
mov dword [ebp - 0x10], ebx
je 0x10148bdb
mov dword [ebp - 0x10], 1
push ebx
push 0x10
mov ecx, edi
mov dword [ebp - 0x9c], ebx
mov dword [ebp - 0xcc], ebx
mov dword [ebp - 0xc8], ebx
mov dword [ebp - 0xc4], ebx
mov dword [ebp - 0xc0], ebx
call fcn.1014fc57
mov ebx, eax
test ebx, ebx
jns 0x10148c1b
push 0x1005d090
push 1
push ebx
push 0x4000000
jmp 0x10149ca9
mov ecx, dword [edi + 0x30]
sub esp, 0xc
xor edx, edx
call fcn.100e671e
mov ebx, dword [edi + 0xc]
test ebx, ebx
je 0x10148c59
mov eax, dword [ebx]
mov ecx, edi
push 1
mov esi, dword [eax + 0x10]
call fcn.101484d7
push eax
push 0x32
mov ecx, esi
call dword [0x101e07c0]
mov ecx, ebx
call esi
mov ebx, eax
test ebx, ebx
jns 0x10148c59
push 0x100208e8
jmp 0x10148c0e
xor ebx, ebx
cmp dword [edi + 0x40], ebx
je 0x10148c6e
mov ecx, dword [edi + 0x30]
sub esp, 0xc
push 9
pop edx
call fcn.100e671e
mov eax, dword [edi + 0x30]
mov esi, 0x4000000
test byte [eax + 0x48], 0x40
je 0x10148ca4
push dword [eax + 0x30]
push 0x1005e020
push ebx
push ebx
push esi
call fcn.100ab973
mov ecx, dword [edi + 0x30]
add esp, 8
mov dword [ebp - 0x88], 1
push 5
pop edx
call fcn.100e671e
cmp dword [edi + 0x130], ebx
jne 0x10148d01
lea eax, [ebp - 0xb0]
mov dword [ebp - 0xb0], ebx
push eax
mov ecx, edi
call fcn.1014a344
mov ebx, eax
test ebx, ebx
jns 0x10148cd4
push 0x1005e0d8
push 1
push ebx
push esi
jmp 0x10149ca9
cmp dword [ebp - 0xb0], 0
je 0x10148cff
push 0x1005e080
push 0
push 0
push esi
call fcn.100ab973
xor eax, eax
add esp, 0x10
inc eax
mov esi, eax
mov dword [edi + 0x28], eax
mov dword [ebp - 0x80], esi
jmp 0x10149cb4
xor ebx, ebx
mov edx, dword [edi + 0x3c]
lea eax, [ebp - 0xbc]
push eax
lea eax, [ebp - 0x84]
xor ecx, ecx
cmp dword [edi + 0x1e0], ebx
push eax
push dword [edi + 0x34]
setne cl
push dword [edi + 0x30]
push 4
call fcn.1011da0e
mov ebx, eax
test ebx, ebx
jns 0x10148d4f
push 0x1005e140
push 1
push ebx
push esi
call fcn.100ab973
mov esi, dword [ebp - 0x84]
mov dword [ebp - 0x90], esi
jmp 0x10149cae
mov ecx, dword [edi + 0x30]
call fcn.10121cf2
mov ebx, eax
test ebx, ebx
jns 0x10148d64
push 0x1005dd94
jmp 0x10148d35
mov ecx, dword [edi + 0x30]
xor eax, eax
inc eax
mov edx, eax
mov dword [ebp - 0xac], eax
call fcn.101090e1
mov ebx, eax
test ebx, ebx
jns 0x10148d9c
push 0x1005e114
push 1
push ebx
push esi
call fcn.100ab973
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x90], eax
jmp 0x10149cae
push 0
xor edx, edx
xor ecx, ecx
call fcn.10108c91
mov esi, dword [ebp - 0x84]
mov dword [ebp - 0xb0], eax
lea eax, [ebp - 0x88]
push eax
lea eax, [ebp - 0x40]
mov dword [ebp - 0x90], esi
push eax
push esi
push ecx
mov ecx, edi
call fcn.1014d39e
mov ebx, eax
test ebx, ebx
jns 0x10148ddd
push 0x1005e19c
jmp 0x10148c0e
mov eax, dword [edi + 0x30]
xor ecx, ecx
cmp dword [eax + 0x264], ecx
jne 0x10148e23
push 0x1005e170
push ecx
push ecx
push 0x4000000
call fcn.100ab973
add esp, 0x10
lea eax, [ebp - 0x88]
mov ecx, edi
push eax
lea eax, [ebp - 0x40]
push eax
push esi
call fcn.1014d66f
mov ebx, eax
test ebx, ebx
jns 0x10148e21
push 0x1005e238
jmp 0x10148c0e
xor ecx, ecx
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x84], eax
cmp dword [edi + 0x2c], ecx
je 0x10148e5d
test al, 1
je 0x10148e5d
push 0x1005e1b8
push ecx
push ecx
push 0x4000000
call fcn.100ab973
mov eax, dword [ebp - 0x88]
add esp, 0x10
and eax, 0xfffffffe
xor ecx, ecx
mov dword [ebp - 0x84], eax
push ecx
xor edx, edx
xor ecx, ecx
call fcn.10108c91
cmp dword [edi + 0x2c], 0
mov dword [ebp - 0xa0], eax
jne 0x10148e96
test eax, eax
je 0x10148e7e
sub esp, 0xc
push 6
jmp 0x10148e8d
mov eax, dword [ebp - 0x84]
test al, 1
je 0x10148e9c
sub esp, 0xc
push 4
mov ecx, dword [edi + 0x30]
pop edx
call fcn.100e671e
mov eax, dword [ebp - 0x84]
and eax, 1
mov dword [ebp - 0x88], eax
je 0x10148f0d
cmp dword [edi + 0x2c], 0
jne 0x10148f0d
mov ecx, edi
call fcn.1014ff4b
mov dword [edi + 0x28], eax
test eax, eax
je 0x10148f0d
push 0x1005e2f8
push 0
push 0
push 0x4000000
call fcn.100ab973
add esp, 0x10
xor esi, esi
xor ecx, ecx
inc esi
inc ecx
mov dword [ebp - 0x80], esi
call fcn.100e64a4
push 0x1005e260
push 0
push 0
push 0x4000000
call fcn.100ab973
mov ecx, dword [edi + 0x30]
add esp, 0x10
xor edx, edx
inc edx
call fcn.100e681d
mov ecx, dword [edi + 0x30]
call fcn.100f7df0
jmp 0x10149cb4
cmp dword [ebp - 0x34], 0
je 0x10148f44
mov ecx, dword [edi + 0x30]
mov edx, 0x1002b610
call fcn.100fe758
mov ecx, dword [edi + 0x30]
call fcn.100f7df0
mov ecx, dword [edi + 0x30]
push 0
push 2
pop edx
call fcn.100fc050
mov ecx, dword [edi + 0x30]
mov edx, 0xffff
push 0
call fcn.100fc050
mov ecx, dword [edi + 0x30]
call fcn.100b3e5c
test eax, eax
je 0x101491c3
cmp dword [edi + 0x1c], 0
jne 0x10148fbc
cmp dword [edi + 0x40], 0
je 0x10148f6f
mov ebx, 0x800f0806
push 0x1005e390
jmp 0x10148c0e
lea eax, [ebp - 0x7c]
mov ecx, esi
push eax
mov eax, dword [edi + 0x30]
push 0x10062c9c
mov edx, dword [eax + 0x4c]
and edx, 0x20
or edx, 0x10
call fcn.10116de1
mov ebx, eax
test ebx, ebx
jns 0x10148f9b
push 0x1005e348
jmp 0x10148c0e
mov ecx, dword [ebp - 0x7c]
test ecx, ecx
je 0x10148fbc
mov eax, dword [ecx]
push ecx
mov esi, dword [eax + 8]
mov ecx, esi
call dword [0x101e07c0]
call esi
and dword [ebp - 0x7c], 0
mov esi, dword [ebp - 0x90]
mov ecx, dword [edi + 0x1d8]
mov eax, ecx
mov edx, dword [edi + 0x1dc]
or eax, edx
jne 0x1014901d
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x20]
push eax
lea ecx, [ebp - 0x94]
call fcn.1011fb81
cmp dword [edi + 0x2c], 0
jne 0x10149100
mov eax, dword [edi + 0x30]
mov edx, dword [eax + 0x4c]
and edx, 0x20
cmp dword [edi + 0x1c], 0
jne 0x10148ffd
or edx, 0x10
lea eax, [ebp - 0x7c]
mov ecx, esi
push eax
push 0x10062c9c
call fcn.10116de1
mov ebx, eax
test ebx, ebx
jns 0x1014905a
push 0x1005e3b0
jmp 0x10148c0e
mov eax, dword [edi + 0x1d0]
mov dword [ebp - 0x20], eax
mov eax, dword [edi + 0x1d4]
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x18]
push 0
push eax
lea eax, [ebp - 0x20]
mov dword [ebp - 0x18], ecx
push eax
lea ecx, [ebp - 0x94]
mov dword [ebp - 0x14], edx
call fcn.101205b6
mov ebx, eax
test ebx, ebx
jns 0x10148fe1
push 0x1005e3d8
jmp 0x10148c0e
push dword [ebp - 0x7c]
lea ecx, [ebp - 0x78]
call fcn.1011fc5c
mov ebx, eax
test ebx, ebx
jns 0x10149075
push 0x1005e41c
jmp 0x10148c0e
lea eax, [ebp - 0x18]
push eax
lea eax, [ebp - 0x20]
push eax
lea ecx, [ebp - 0x78]
call fcn.10120203
mov ebx, eax
test ebx, ebx
jns 0x10149095
push 0x1005e3f8
jmp 0x10148c0e
mov ecx, dword [ebp - 0x7c]
test ecx, ecx
je 0x101490b0
mov eax, dword [ecx]
push ecx
mov esi, dword [eax + 8]
mov ecx, esi
call dword [0x101e07c0]
call esi
and dword [ebp - 0x7c], 0
lea ecx, [ebp - 0x78]
call fcn.1011feab
test eax, eax
je 0x10149100
lea eax, [ebp - 0x18]
push eax
push 0
push 0
lea ecx, [ebp - 0x94]
call fcn.101205b6
mov ebx, eax
test ebx, ebx
jns 0x101490df
push 0x1005e470
jmp 0x10148c0e
lea eax, [ebp - 0xb8]
push eax
push 0
lea ecx, [ebp - 0x78]
call fcn.1011f73c
mov ebx, eax
test ebx, ebx
jns 0x10149100
push 0x1005e440
jmp 0x10148c0e
cmp dword [ebp - 0xa0], 0
je 0x1014916d
mov ecx, dword [edi + 0x30]
call fcn.10109a83
mov ebx, eax
test ebx, ebx
jns 0x10149121
push 0x1005e4d0
jmp 0x10148c0e
push 0
push dword [edi + 0x30]
xor esi, esi
lea ecx, [ebp - 0xcc]
inc esi
push 0
mov dword [ebp - 0xa4], esi
call fcn.1010aca0
mov ebx, eax
test ebx, ebx
jns 0x10149155
mov ecx, dword [edi + 0x30]
call fcn.10150cfe
push 0x1005e498
push esi
jmp 0x10149ca3
push 0x1005e538
push 0
push 0
push 0x4000000
call fcn.100ab973
add esp, 0x10
jmp 0x10149170
xor esi, esi
inc esi
cmp dword [edi + 0x2c], 0
jne 0x101491c3
lea ecx, [ebp - 0x78]
call fcn.1011feab
test eax, eax
jne 0x101491c3
lea eax, [ebp - 0x18]
push eax
push 0
push 0
lea ecx, [ebp - 0x94]
call fcn.101205b6
mov ebx, eax
test ebx, ebx
jns 0x101491a6
push 0x1005e470
push esi
jmp 0x10148c10
lea eax, [ebp - 0xb4]
push eax
push esi
lea ecx, [ebp - 0x78]
call fcn.1011f73c
mov ebx, eax
test ebx, ebx
jns 0x101491c3
push 0x1005e440
jmp 0x101491a0
mov ecx, dword [edi + 0x30]
xor esi, esi
call fcn.100b3e5c
test eax, eax
je 0x101491db
cmp dword [edi + 0x1c], esi
jne 0x101491db
mov esi, 0x400
mov ecx, dword [edi + 0x30]
test byte [ecx + 0x4c], 0x20
je 0x101491ea
or esi, 0x1000
call fcn.100b3e5c
test eax, eax
jne 0x10149208
cmp dword [edi + 0x40], eax
jne 0x101495bb
cmp dword [ebp - 0x88], eax
jne 0x101495bb
cmp dword [ebp - 0x34], 0
jne 0x10149260
push 0x1005e4f8
push 0
push 0
push 0x4000000
call fcn.100ab973
mov esi, dword [ebp - 0x98]
add esp, 0x10
mov ecx, dword [edi + 0x30]
and dword [ebp - 0xac], 0
call fcn.10121ef7
mov ebx, eax
test ebx, ebx
jns 0x101495c1
push 0x1005df48
push 0
push 0
push 0x4000000
call fcn.100ab973
add esp, 0x10
xor ebx, ebx
jmp 0x101495c1
mov ecx, dword [edi + 0x30]
call fcn.100b3e5c
mov edx, dword [edi + 0x30]
test eax, eax
je 0x101493b0
xor ecx, ecx
call fcn.1010622d
test eax, eax
jns 0x10149293
push 0x1005e5e4
push 1
push eax
push 0x4000000
call fcn.100ab973
add esp, 0x10
mov edx, dword [ebp - 0x90]
lea eax, [ebp - 8]
mov ecx, dword [edi + 0x30]
or esi, 0x60
push eax
push 1
push esi
call fcn.10116f1c
mov ebx, eax
mov eax, dword [ebp - 8]
mov esi, eax
movzx eax, ax
and esi, 0xffff0000
mov dword [ebp - 8], eax
cmp dword [ebp - 0xd0], 0
mov ecx, eax
mov dword [ebp - 0xc], esi
jne 0x1014935f
cmp dword [ebp - 0x10], 0
je 0x1014935f
mov eax, 0x80073713
cmp ebx, eax
jne 0x1014935f
push 0x1005e568
push 1
push eax
xor ebx, ebx
push 0x2000000
mov dword [ebp - 0x10], ebx
call fcn.100ab973
mov ecx, dword [edi + 0x3c]
add esp, 0x10
mov eax, dword [ecx]
mov esi, dword [eax + 0x30]
lea eax, [ebp - 0x10]
push eax
push ebx
push ebx
push 2
push ecx
mov ecx, esi
call dword [0x101e07c0]
call esi
test eax, eax
jns 0x10149331
push 0x1005e648
push 1
push eax
push 0x4000000
call fcn.100ab973
add esp, 0x10
mov ecx, dword [edi + 0x30]
call fcn.100e3350
test eax, eax
jns 0x10149352
push 0x1005e610
push 1
push eax
push 0x4000000
call fcn.100ab973
add esp, 0x10
xor ecx, ecx
mov dword [ebp - 0xc], ebx
mov dword [ebp - 8], 1
inc ecx
test ebx, ebx
js 0x1014939a
mov eax, dword [ebp - 0x18]
or eax, dword [ebp - 0x14]
je 0x1014937f
cmp ecx, 1
je 0x10149375
cmp ecx, 0xd
jne 0x1014937f
mov dword [ebp - 0xd4], 1
cmp ecx, 6
jne 0x10149390
push 0x1005e6c0
push 1
jmp 0x10149c9e
cmp ecx, 8
je 0x1014939a
cmp ecx, 0xe
jne 0x101493a2
mov ecx, dword [edi + 0x30]
call fcn.10150cfe
mov esi, dword [ebp - 0x98]
push 3
pop ecx
jmp 0x10149568
mov ebx, dword [ebp - 0xa0]
mov ecx, ebx
neg ecx
sbb ecx, ecx
and ecx, 0xffec
add ecx, 0x14
call fcn.100e6582
test ebx, ebx
je 0x1014945c
mov ecx, dword [edi + 0x30]
call fcn.10109a83
mov ebx, eax
test ebx, ebx
js 0x10149117
mov eax, dword [edi + 0x2c]
lea ecx, [ebp - 0xcc]
neg eax
mov dword [ebp - 0xa4], 1
push 0
push dword [edi + 0x30]
sbb eax, eax
and eax, 0xfffffff9
add eax, 7
push eax
mov dword [ebp - 0x9c], eax
call fcn.1010aca0
mov ebx, eax
test ebx, ebx
jns 0x10149424
push 0x1005e678
push 1
jmp 0x10149ca3
mov eax, dword [0x101dca54]
mov dword [ebp - 0x98], eax
test eax, eax
jne 0x1014943a
push 0x1005e768
jmp 0x1014943f
push 0x1005e720
push 0
push 0
push 0x4000000
call fcn.100ab973
mov eax, dword [ebp - 0x9c]
add esp, 0x10
mov dword [ebp - 0x9c], eax
mov edx, dword [ebp - 0x90]
lea eax, [ebp - 8]
mov ecx, dword [edi + 0x30]
push eax
push 1
push 0x66
call fcn.10116f1c
mov ebx, eax
mov eax, dword [ebp - 8]
mov esi, eax
movzx eax, ax
and esi, 0xffff0000
mov dword [ebp - 8], eax
cmp dword [ebp - 0xa0], 0
mov dword [ebp - 0xc], esi
je 0x1014955f
test ebx, ebx
js 0x101494ad
cmp eax, 6
je 0x101494ad
cmp eax, 7
je 0x101494ad
cmp eax, 3
je 0x101494ad
cmp eax, 4
jne 0x101494f9
push 0x1005e7d0
push 0
push 0
push 0x4000000
call fcn.100ab973
add esp, 0x10
lea ecx, [ebp - 0xcc]
push 1
push dword [edi + 0x30]
push dword [ebp - 0x9c]
call fcn.1010aca0
test eax, eax
jns 0x101494f2
push 0x1005e798
push 1
push eax
push 0x2000000
call fcn.100ab973
add esp, 0x10
and dword [ebp - 0xa4], 0
test byte [ebp - 0x9c], 2
je 0x10149529
push dword [edi + 0x30]
lea ecx, [ebp - 0xcc]
call fcn.1010b047
test eax, eax
jns 0x10149529
push 0x1005e854
push 1
push eax
push 0x4000000
call fcn.100ab973
add esp, 0x10
mov esi, dword [ebp - 0x98]
test esi, esi
jne 0x1014953a
mov eax, dword [0x101dca54]
mov esi, eax
mov ecx, dword [edi + 0x30]
xor edx, edx
call fcn.10108baa
test eax, eax
jns 0x10149565
push 0x1005e824
push 1
push eax
push 0x4000000
call fcn.100ab973
add esp, 0x10
jmp 0x10149565
mov esi, dword [ebp - 0x98]
or ecx, 0xffffffff
mov edx, dword [edi + 0x30]
call fcn.100e6582
test ebx, ebx
jns 0x1014922a
mov ecx, dword [edi + 0x30]
call fcn.100b3e5c
test eax, eax
jne 0x101495b1
mov eax, 0x80092004
cmp ebx, eax
jne 0x101495b1
push 0x1005e8b4
push 1
push eax
push 0x4000000
call fcn.100ab973
mov ecx, dword [edi + 0x30]
add esp, 0x10
mov edx, 0x10049348
push 1
call fcn.100fe52e
push 0x1005e878
jmp 0x1014941d
mov esi, dword [ebp - 0x98]
mov eax, dword [ebp - 8]
cmp eax, 6
je 0x10149bc8
cmp eax, 8
je 0x10149bc8
cmp eax, 7
je 0x10149bc8
mov ecx, dword [edi + 0x30]
call fcn.100b3e5c
test eax, eax
je 0x10149759
mov ecx, dword [edi + 0x30]
mov byte [ebp - 0x89], 0
call fcn.1012b12d
test al, al
je 0x1014960d
mov eax, dword [edi + 0x30]
test byte [eax + 0x48], 0x40
mov al, 1
jne 0x10149613
mov al, byte [ebp - 0x89]
cmp dword [ebp - 8], 1
jne 0x1014970a
test al, al
jne 0x1014970a
push 0x1005eb48
push 0
push 0
push 0x4000000
call fcn.100ab973
mov esi, dword [edi + 0x40]
add esp, 0x10
mov dword [ebp - 0x80], esi
test esi, esi
mov dword [ebp - 0xa8], 1
mov esi, 0x4000000
je 0x1014966c
push 0x1005ead0
push 0
push 0
push esi
call fcn.100ab973
mov eax, dword [edi + 0x40]
add esp, 0x10
mov dword [ebp - 0x80], eax
mov ecx, dword [edi + 0x30]
lea eax, [ebp - 0x88]
and dword [ebp - 0x88], 0
and dword [ebp - 0xc], 0
push eax
call fcn.101291ff
test eax, eax
jns 0x10149691
push 0x1004a4d0
jmp 0x101496ad
mov edx, dword [ebp - 0x88]
lea ecx, [ebp - 0xc]
push 0x1002ac38
call fcn.100a9500
test eax, eax
jns 0x101496bb
push 0x1005ebb4
push 1
push eax
push esi
call fcn.100ab973
add esp, 0x10
jmp 0x101496f5
mov esi, dword [ebp - 0xc]
mov ecx, esi
call fcn.100b7fb2
test eax, eax
je 0x101496f5
mov ecx, esi
call fcn.100ee831
push esi
test eax, eax
jns 0x101496df
push 0x1005eb8c
push 1
push eax
jmp 0x101496e8
push 0x1005ec50
push 0
push 0
push 0x4000000
call fcn.100ab973
add esp, 0x14
lea ecx, [ebp - 0xc]
call fcn.100b61be
lea ecx, [ebp - 0x88]
call fcn.100b61be
jmp 0x10149720
cmp dword [edi + 0x40], 0
jne 0x1014971a
cmp dword [ebp - 0x34], 0
jne 0x1014971a
xor eax, eax
jmp 0x1014971d
xor eax, eax
inc eax
mov dword [ebp - 0x80], eax
cmp dword [edi + 0x1e0], 0
jne 0x10149a9d
mov ecx, dword [edi + 0x30]
cmp dword [ecx + 0x270], 0
jne 0x10149a9d
call fcn.100e68e3
push 0x1005ebd8
push 1
push eax
push 0x4000000
call fcn.100ab973
jmp 0x10149a9a
cmp dword [edi + 0x40], 0
jne 0x10149860
cmp dword [ebp - 0x88], 0
jne 0x10149860
cmp dword [ebp - 8], 3
je 0x10149860
cmp dword [ebp - 8], 4
je 0x10149860
test dword [ebp - 0xc], 0x10000
mov dword [ebp - 0xa8], 1
je 0x101497d3
push 0x1005f0a0
push 0
push 0
mov esi, 0x4000000
push esi
call fcn.100ab973
mov ecx, dword [edi + 0x30]
add esp, 0x10
cmp dword [ecx + 0x1f4], 0
jne 0x101497c7
mov dword [ecx + 0x1f4], 9
mov ecx, dword [edi + 0x30]
call fcn.100e68e3
push 0x1005eff8
jmp 0x1014981f
test esi, esi
je 0x10149844
push 0x1005f050
push 0
push 0
mov esi, 0x4000000
push esi
call fcn.100ab973
mov ecx, dword [edi + 0x30]
add esp, 0x10
cmp dword [ecx + 0x1f4], 0
jne 0x10149807
mov dword [ecx + 0x1f4], 0xb
mov ecx, dword [edi + 0x30]
sub esp, 0xc
push 0x10
pop edx
call fcn.100e671e
mov ecx, dword [edi + 0x30]
call fcn.100e68e3
push 0x1005f148
push 1
push eax
push esi
call fcn.100ab973
xor ecx, ecx
add esp, 0x10
inc ecx
call fcn.100e64a4
mov ecx, dword [edi + 0x30]
xor edx, edx
inc edx
call fcn.100e681d
xor eax, eax
inc eax
mov dword [ebp - 0x80], eax
test byte [ebp - 0x84], 2
je 0x10149a9d
mov dword [edi + 0x128], 1
jmp 0x10149a9d
mov ecx, edi
call fcn.1014ff4b
cmp dword [ebp - 0x88], 0
mov esi, eax
je 0x1014988d
test esi, esi
je 0x10149885
xor ecx, ecx
inc ecx
call fcn.100e64a4
mov eax, 0x1005e260
jmp 0x1014988a
mov eax, 0x1005ed40
push eax
jmp 0x101498b6
test esi, esi
je 0x101498b1
push 0x1005ec80
push 0
push 0
push 0x4000000
call fcn.100ab973
add esp, 0x10
xor ecx, ecx
inc ecx
call fcn.100e64a4
jmp 0x101498c7
push 0x1005ee00
push 0
push 0
push 0x4000000
call fcn.100ab973
add esp, 0x10
xor eax, eax
cmp dword [edi + 0x1c], eax
je 0x10149a84
test esi, esi
jne 0x10149a6a
mov ecx, dword [edi + 0x30]
call fcn.10109a83
mov ebx, eax
test ebx, ebx
js 0x10149117
cmp dword [ebp - 0x34], esi
jne 0x1014990d
push 0x1005edc4
push esi
push esi
push 0x4000000
call fcn.100ab973
mov esi, dword [ebp - 0xa0]
add esp, 0x10
jmp 0x10149969
mov edx, dword [edi + 0x30]
push 0x14
pop ecx
call fcn.100e6582
mov esi, dword [ebp - 0xa0]
xor eax, eax
mov edx, dword [edi + 0x30]
cmp eax, esi
sbb ecx, ecx
inc ecx
call fcn.1010622d
test eax, eax
jns 0x10149946
push 0x1005e5e4
push 1
push eax
push 0x4000000
call fcn.100ab973
add esp, 0x10
mov edx, dword [ebp - 0x90]
lea eax, [ebp - 8]
mov ecx, dword [edi + 0x30]
push eax
push 1
push 0x2f
call fcn.10116f1c
mov edx, dword [edi + 0x30]
or ecx, 0xffffffff
mov ebx, eax
call fcn.100e6582
test ebx, ebx
jns 0x101499f2
cmp dword [ebp - 0xb0], 0
jne 0x1014999e
mov edx, dword [edi + 0x30]
xor ecx, ecx
inc ecx
call fcn.1010622d
test eax, eax
jns 0x1014999e
push 0x1005e5e4
push 1
push eax
push 0x4000000
call fcn.100ab973
add esp, 0x10
push 0x1005eeb0
push 0
push 0
push 0x4000000
call fcn.100ab973
mov ecx, dword [edi + 0x30]
add esp, 0x10
call fcn.1010a1d0
test eax, eax
jns 0x101499d5
push 0x1005ee7c
push 1
push eax
push 0x4000000
call fcn.100ab973
add esp, 0x10
push dword [ebp - 8]
push 0x1005ef50
push 1
push ebx
push 0x2000000
call fcn.100ab973
add esp, 0x14
jmp 0x10149cb1
mov ecx, dword [edi + 0x30]
mov dword [ebp - 0xac], 1
call fcn.10121ef7
mov ebx, eax
test ebx, ebx
jns 0x10149a22
push 0x1005df48
push 0
push 0
push 0x4000000
call fcn.100ab973
add esp, 0x10
xor ebx, ebx
xor ecx, ecx
test esi, esi
sete cl
xor edx, edx
call fcn.100e6582
push 0x1005eef8
push 0
push 0
mov esi, 0x4000000
push esi
call fcn.100ab973
mov ecx, dword [edi + 0x30]
add esp, 0x10
call fcn.100e68e3
push 0x1005eff8
push 1
push eax
push esi
call fcn.100ab973
add esp, 0x10
xor ecx, ecx
inc ecx
call fcn.100e64a4
jmp 0x10149a71
mov dword [edi + 0x28], 1
mov ecx, dword [edi + 0x30]
xor edx, edx
inc edx
call fcn.100e681d
xor eax, eax
inc eax
mov dword [ebp - 0x80], eax
jmp 0x10149aa0
push 0x1005efa0
push eax
push eax
push 0x4000000
call fcn.100ab973
mov ebx, 0x800f0806
add esp, 0x10
mov eax, dword [ebp - 0x80]
test ebx, ebx
jne 0x10149ac6
cmp dword [edi + 0x40], ebx
je 0x10149ac6
test eax, eax
jne 0x10149ac6
cmp dword [ebp - 0x34], eax
je 0x10149ac6
push 0x1005f0f0
mov edx, 0xb4f
mov ecx, 0x100228f8
call fcn.100e970f
mov esi, dword [ebp - 0x90]
test esi, esi
je 0x10149ae7
mov eax, dword [esi]
push esi
mov esi, dword [eax + 8]
mov ecx, esi
call dword [0x101e07c0]
call esi
and dword [ebp - 0x90], 0
test byte [ebp - 0x84], 4
jne 0x10149afc
mov eax, dword [edi + 0x30]
cmp dword [eax + 0x278], 0
je 0x10149b60
mov ecx, dword [edi + 0x30]
test dword [ecx + 0x4c], 0x400
jne 0x10149b60
call fcn.100b3e5c
test eax, eax
jne 0x10149b1d
mov eax, dword [edi + 0x30]
cmp dword [eax + 0x278], 0
je 0x10149b60
cmp dword [edi + 0x1e0], 0
jne 0x10149b60
mov ecx, dword [edi + 0x30]
test dword [ecx + 0x4c], 0x20000
jne 0x10149b60
push 0
push 0
push 0
push 0
push 0
push 0
push 0
xor edx, edx
call fcn.100f88d4
test eax, eax
jns 0x10149b60
push 0x1005f1c8
push 1
push eax
push 0x4000000
call fcn.100ab973
add esp, 0x10
cmp dword [edi + 0x68], 0
je 0x10149cb1
mov ecx, dword [edi + 0x30]
test byte [ecx + 0x4c], 0x80
je 0x10149cb1
cmp dword [edi + 0x2c], 0
jne 0x10149cb1
and dword [ebp - 0xc], 0
lea edx, [ebp - 0xc]
mov ecx, dword [ecx + 0x268]
call fcn.101ce59a
mov esi, eax
test esi, esi
jns 0x10149bb0
push 0x1005f1a8
push 1
push esi
push 0x4000000
call fcn.100ab973
add esp, 0x10
test esi, esi
jne 0x10149bbb
push dword [ebp - 0xc]
call dword [sym.imp.api_ms_win_core_file_l1_1_0.dll_DeleteFileW]
lea ecx, [ebp - 0xc]
call fcn.100b61be
jmp 0x10149cb1
test dword [ebp - 0xc], 0x10000
je 0x10149bf7
push 0x1005e928
mov esi, 0x4000000
push 0
push 0
push esi
call fcn.100ab973
xor ebx, ebx
add esp, 0x10
inc ebx
mov ecx, ebx
call fcn.100e64a4
mov eax, dword [ebp - 8]
jmp 0x10149c0a
test esi, esi
mov esi, 0x4000000
je 0x10149c07
push 0x1005e8e0
jmp 0x10149bdb
xor ebx, ebx
inc ebx
cmp eax, 7
jne 0x10149c3b
mov ecx, dword [edi + 0x30]
call fcn.100e68e3
push 0x1005e9e0
push ebx
push eax
push esi
call fcn.100ab973
add esp, 0x10
mov ecx, ebx
call fcn.100e64a4
push 0x1005e970
push ebx
mov ebx, 0x80070bc9
jmp 0x10149ca3
mov edx, dword [ebp - 0xbc]
lea eax, [ebp - 0x10]
xor ecx, ecx
push ecx
push ecx
push eax
mov dword [ebp - 0x10], ecx
push ecx
mov ecx, dword [edi + 0x3c]
call fcn.100f792c
push 0x1005ea94
push ebx
push eax
push esi
call fcn.100ab973
mov ecx, dword [edi + 0x30]
add esp, 0x10
call fcn.10106402
mov edx, dword [edi + 0x30]
mov ecx, ebx
call fcn.1010622d
test eax, eax
jns 0x10149c8b
push 0x1002ab40
push ebx
push eax
push esi
call fcn.100ab973
add esp, 0x10
cmp dword [ebp - 8], 6
jne 0x10149c98
push 0x1005e6c0
jmp 0x10149c9d
push 0x1005ea30
push ebx
mov ebx, 0x800f0922
push ebx
push 0x2000000
call fcn.100ab973
add esp, 0x10
mov esi, dword [ebp - 0x80]
cmp dword [edi + 0x28], 0
jne 0x10149ef9
test ebx, ebx
jns 0x10149cf5
cmp dword [ebp - 0xb4], 0
jne 0x10149cd4
cmp dword [ebp - 0xb8], 0
je 0x10149cf5
push ecx
lea ecx, [ebp - 0x94]
call fcn.101206bb
push 0x1005f23c
push 1
push ebx
push 0x4000000
call fcn.100ab973
add esp, 0x10
mov ecx, dword [edi + 0x30]
xor edx, edx
inc edx
call fcn.10108baa
test eax, eax
jns 0x10149d19
push 0x1005f208
push 1
push eax
push 0x4000000
call fcn.100ab973
add esp, 0x10
test ebx, ebx
jns 0x10149dd4
cmp dword [ebp - 0xb4], 0
je 0x10149d77
lea eax, [ebp - 0x20]
push eax
push 0
push 0
lea ecx, [ebp - 0x94]
call fcn.101205b6
push 0x1005e470
push 1
push ebx
push 0x4000000
call fcn.100ab973
add esp, 0x10
lea ecx, [ebp - 0x78]
push 0
push 3
call fcn.1011f73c
test eax, eax
jns 0x10149d77
push 0x1005f284
push 1
push eax
push 0x4000000
call fcn.100ab973
add esp, 0x10
cmp dword [ebp - 0xa4], 0
je 0x10149dd4
mov eax, dword [ebp - 0x9c]
lea ecx, [ebp - 0xcc]
push 1
push dword [edi + 0x30]
and eax, 0xfffffffd
push eax
call fcn.1010aca0
test eax, eax
jns 0x10149db3
push 0x1005f25c
push 1
push eax
push 0x2000000
call fcn.100ab973
add esp, 0x10
mov ecx, dword [edi + 0x30]
call fcn.1010a1d0
test eax, eax
jns 0x10149dd4
push 0x1005ee7c
push 1
push eax
push 0x4000000
call fcn.100ab973
add esp, 0x10
cmp dword [ebp - 0xa8], 0
je 0x10149e0c
cmp dword [ebp - 0xa0], 0
je 0x10149e0c
mov ecx, dword [edi + 0x30]
xor edx, edx
call fcn.10108baa
mov edi, 0x4000000
test eax, eax
jns 0x10149e11
push 0x1005e824
push 1
push eax
push edi
call fcn.100ab973
add esp, 0x10
jmp 0x10149e11
mov edi, 0x4000000
lea ecx, [ebp - 0xcc]
call fcn.10108328
call fcn.1010a213
test ebx, ebx
jns 0x10149e73
cmp dword [ebp - 0xb8], 0
je 0x10149e73
lea eax, [ebp - 0x20]
push eax
push 0
push 0
lea ecx, [ebp - 0x94]
call fcn.101205b6
push 0x1005e470
push 1
push ebx
push edi
call fcn.100ab973
add esp, 0x10
lea ecx, [ebp - 0x78]
push 0
push 2
call fcn.1011f73c
test eax, eax
jns 0x10149e73
push 0x1005f2e8
push 1
push eax
push edi
call fcn.100ab973
add esp, 0x10
cmp dword [ebp - 0xd4], 0
je 0x10149ea4
push 0
push 0
lea eax, [ebp - 0x18]
push eax
lea ecx, [ebp - 0x94]
call fcn.101205b6
test ebx, ebx
jns 0x10149ea8
push 0x1005f2c0
push 1
push ebx
push edi
call fcn.100ab973
add esp, 0x10
test ebx, ebx
js 0x10149eb1
cmp dword [ebp - 0xa8], 0
je 0x10149eee
lea ecx, [ebp - 0x94]
call fcn.1011f535
test eax, eax
jns 0x10149ed1
push 0x1004e21c
push 1
push eax
push edi
call fcn.100ab973
add esp, 0x10
lea ecx, [ebp - 0x78]
call fcn.1011f654
test eax, eax
jns 0x10149eee
push 0x1005f348
push 1
push eax
push edi
call fcn.100ab973
add esp, 0x10
push esi
push ebx
lea eax, [ebp - 0x40]
push eax
call fcn.10144f0b
push 0x1005f320
push 0
push 0
push 0x4000000
call fcn.100ab973
add esp, 0x10
mov esi, 0x1002f228
push 0x1005f3b0
sub esp, 0x10
mov edi, esp
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
call fcn.100ea948
add esp, 0x14
call fcn.101214cc
cmp dword [ebp - 0xac], 0
je 0x10149f58
mov ecx, dword [ebp - 0xd8]
cmp dword [ecx + 0x30], 0
jne 0x10149f58
push 0x10020554
mov edx, 0x126
mov ecx, 0x10020948
call fcn.100e970f
mov ecx, dword [ebp - 0xdc]
mov eax, dword [ebp - 0x80]
mov dword [ecx], eax
mov eax, dword [ebp - 0xbc]
test eax, eax
je 0x10149f77
add eax, 0xfffffffc
push eax
call fcn.100b84f9
pop ecx
mov ecx, dword [ebp - 0x7c]
test ecx, ecx
je 0x10149f8e
mov eax, dword [ecx]
push ecx
mov esi, dword [eax + 8]
mov ecx, esi
call dword [0x101e07c0]
call esi
mov ecx, dword [ebp - 0x90]
test ecx, ecx
je 0x10149fa8
mov eax, dword [ecx]
push ecx
mov esi, dword [eax + 8]
mov ecx, esi
call dword [0x101e07c0]
call esi
lea ecx, [ebp - 0xcc]
call fcn.10108328
cmp dword [ebp - 0xc8], 0
je 0x10149fc8
push dword [ebp - 0xc8]
call dword [sym.imp.api_ms_win_core_libraryloader_l1_1_0.dll_FreeLibrary]
lea ecx, [ebp - 0x78]
call fcn.100e098f
lea ecx, [ebp - 0x94]
call fcn.100e09c0
lea ecx, [ebp - 0x40]
call fcn.10142e81
mov ecx, dword [ebp - 4]
mov eax, ebx
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.100b88c0
leave
ret 8