Function at 0x104acdc
Capabilities:
Delete file

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x3dc
mov eax, dword [0x10d0620]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0xc]
push ebx
xor ebx, ebx
push esi
mov esi, dword [ebp + 8]
mov dword [ebp - 0x3ac], eax
mov eax, dword [ebp + 0x10]
push edi
mov dword [ebp - 0x348], eax
mov dword [ebp - 0x354], ebx
mov dword [ebp - 0x36c], ebx
mov dword [ebp - 0x370], ebx
cmp dword [0x10d2284], ebx
jne 0x104ad2f
mov dword [ebp - 0x310], ebx
cmp eax, ebx
jne 0x104ad39
mov dword [ebp - 0x310], 1
mov eax, dword [0x10d2294]
push 0x88
mov dword [ebp - 0x3c4], eax
lea eax, [ebp - 0x30c]
push ebx
push eax
mov dword [ebp - 0x364], ebx
mov dword [ebp - 0x32c], ebx
mov dword [ebp - 0x344], ebx
mov dword [ebp - 0x39c], ebx
mov dword [ebp - 0x328], ebx
mov dword [ebp - 0x374], ebx
mov dword [ebp - 0x358], ebx
mov dword [ebp - 0x34c], ebx
mov dword [ebp - 0x340], ebx
mov dword [ebp - 0x324], ebx
mov dword [ebp - 0x33c], ebx
mov dword [ebp - 0x350], ebx
mov dword [ebp - 0x398], ebx
mov dword [ebp - 0x330], ebx
mov dword [ebp - 0x35c], ebx
mov dword [ebp - 0x3b0], ebx
mov dword [ebp - 0x368], ebx
mov dword [ebp - 0x360], ebx
call sub.msvcrt.dll_memset
add esp, 0xc
push 7
pop ecx
xor eax, eax
lea edi, [ebp - 0x390]
rep stosd dword es:[edi], eax
or dword [ebp - 0x390], 0xffffffff
lea eax, [ebp - 0x354]
push eax
push esi
mov dword [ebp - 0x31c], ebx
call fcn.0104a21d
mov esi, eax
cmp esi, ebx
je 0x104ae04
push 1
push esi
push 0xe14013e
call fcn.0108c577
jmp 0x104bed1
lea eax, [ebp - 0x3ac]
push eax
push 0x104
lea eax, [ebp - 0x284]
push eax
push ebx
push dword [ebp - 0x3ac]
push ebx
push ebx
call fcn.0103040c
mov esi, eax
cmp esi, ebx
je 0x104ae36
push esi
push 0xe1e013e
jmp 0x104becc
lea eax, [ebp - 0x3d4]
push eax
lea eax, [ebp - 0x390]
push eax
push dword [ebp - 0x354]
call fcn.0109e04f
mov esi, eax
cmp esi, ebx
je 0x104ae60
push esi
push 0xe21013e
jmp 0x104becc
push 0xf0000000
push 1
push 0x100afd8
push ebx
lea eax, [ebp - 0x364]
push eax
call dword [sym.imp.ADVAPI32.dll_CryptAcquireContextW]
test eax, eax
jne 0x104ae90
call fcn.01091f43
mov esi, eax
push esi
push 0xe2b013e
jmp 0x104becc
push dword [ebp - 0x310]
lea eax, [ebp - 0x390]
push 0x100ba64
push 0x100ba44
push eax
call fcn.010472a4
mov esi, eax
cmp esi, ebx
je 0x104aebd
push esi
push 0xe36013e
jmp 0x104becc
lea eax, [ebp - 0x394]
push eax
push 0
push dword [ebp - 0x310]
mov ebx, 0x100ba2c
push 1
push 1
push ebx
mov edi, 0x100ba0c
push edi
lea eax, [ebp - 0x390]
push eax
call fcn.0104717e
mov esi, eax
test esi, esi
je 0x104aef9
push esi
push 0xe44013e
jmp 0x104becc
lea eax, [ebp - 0x3a4]
push eax
push 0
push dword [ebp - 0x310]
lea eax, [ebp - 0x390]
push 1
push 1
push 0x100b9ec
push edi
push eax
call fcn.0104717e
mov esi, eax
test esi, esi
je 0x104af2f
push esi
push 0xe4f013e
jmp 0x104becc
and dword [ebp - 0x318], 0
mov eax, dword [ebp - 0x3a4]
dec eax
dec eax
push 0x40
pop esi
je 0x104b034
dec eax
je 0x104af79
mov eax, 0x100b9ec
push eax
push eax
push 0x98b
call fcn.0108bc14
push eax
push 0x100b9c4
call fcn.0109c1a8
add esp, 0x10
mov esi, 0x8007000d
push esi
push 0xe8b013e
jmp 0x104becc
cmp dword [ebp - 0x394], 0x80
mov dword [ebp - 0x314], 0x20
je 0x104afb8
push ebx
push 0x98b
call fcn.0108bc14
push eax
push 0x100b9a8
call fcn.0109c1a8
add esp, 0xc
mov esi, 0x8007000d
push esi
push 0xe72013e
jmp 0x104becc
lea eax, [ebp - 0x3d8]
push eax
push 0xe0000102
push dword [ebp - 0x310]
lea eax, [ebp - 0x390]
push 1
push 1
push 0x100b994
push edi
push eax
call fcn.0104717e
test eax, eax
je 0x104b02c
push eax
push eax
push 0xe7d013e
call fcn.0108c577
mov ebx, dword [ebp - 0x310]
lea eax, [ebp - 0x3c8]
push eax
lea eax, [ebp - 0x370]
push eax
push ebx
push 0x100b988
push edi
lea eax, [ebp - 0x390]
push eax
call fcn.01047452
mov esi, eax
test esi, esi
je 0x104b0c9
push esi
push 0xeac013e
jmp 0x104becc
mov dword [ebp - 0x314], esi
jmp 0x104aff0
cmp dword [ebp - 0x394], 0x28
mov dword [ebp - 0x314], 0x10
jne 0x104b053
mov dword [ebp - 0x318], 1
jmp 0x104b05f
cmp dword [ebp - 0x394], esi
jne 0x104bea7
lea eax, [ebp - 0x3b8]
push eax
push 0
push dword [ebp - 0x310]
lea eax, [ebp - 0x390]
push 1
push 1
push 0x100b97c
push edi
push eax
call fcn.0104717e
mov esi, eax
test esi, esi
je 0x104b095
push esi
push 0xe99013e
jmp 0x104becc
cmp dword [ebp - 0x3b8], 3
je 0x104aff0
push 0x98b
call fcn.0108bc14
push eax
push 0x100b960
call fcn.0109c1a8
pop ecx
pop ecx
mov esi, 0x8007000d
push esi
push 0xea1013e
jmp 0x104becc
lea eax, [ebp - 0x36c]
push eax
push 0
push ebx
push 0x100b94c
push edi
lea eax, [ebp - 0x390]
push eax
call fcn.01047214
mov esi, eax
test esi, esi
je 0x104b0f6
push esi
push 0xeb5013e
jmp 0x104becc
lea eax, [ebp - 0x3b8]
push eax
push 0
push ebx
push 1
push 1
push 0x100b938
push edi
lea eax, [ebp - 0x390]
push eax
call fcn.0104717e
test eax, eax
je 0x104b125
push eax
push 0xec0013e
call fcn.0108c55a
lea eax, [ebp - 0x30c]
push eax
push 0
push dword [ebp - 0x36c]
push dword [ebp - 0x3ac]
push dword [ebp - 0x364]
push dword [ebp - 0x314]
call fcn.01049d42
mov esi, eax
test esi, esi
je 0x104b15c
push esi
push 0xed0013e
jmp 0x104becc
push dword [ebp - 0x3c8]
lea eax, [ebp - 0x30c]
push dword [ebp - 0x370]
push eax
call fcn.01046b5d
mov esi, eax
test esi, esi
je 0x104b19f
push esi
push 0xed7013e
call fcn.0108c55a
cmp dword [0x10d2280], 2
jl 0x104bed1
cmp dword [ebp - 0x314], 0x40
jne 0x104bed1
cmp dword [0x10d2284], 0
jne 0x104b1b6
test ebx, ebx
jne 0x104b1b6
mov dword [0x10d2294], 1
call fcn.0104684c
cmp dword [ebp - 0x3a4], 2
je 0x104b1d1
cmp dword [ebp - 0x314], 0x40
jne 0x104b971
lea eax, [ebp - 0x3a0]
push eax
lea eax, [ebp - 0x32c]
push eax
mov esi, 0xe0000102
push esi
lea eax, [ebp - 0x30c]
push eax
mov ebx, 0x100b920
push ebx
mov edi, 0x100b8fc
push edi
lea eax, [ebp - 0x390]
push eax
call fcn.0104a8f1
test eax, eax
je 0x104b227
cmp dword [ebp - 0x314], 0x40
mov ecx, 0x100b8b8
je 0x104b21b
mov ecx, 0x100b870
push eax
push 0xefd013e
push ecx
call fcn.0108c595
push 0x1004310
call fcn.0109c1a8
cmp dword [ebp - 0x310], 0
pop ecx
je 0x104b253
push 0x100ae58
call fcn.0109c1a8
push edi
push 0x100b2e4
call fcn.0109c1a8
add esp, 0xc
push ebx
push 0x1005b1c
call fcn.0109c1a8
cmp dword [ebp - 0x32c], 0
pop ecx
pop ecx
je 0x104b2ab
push dword [ebp - 0x3a0]
push dword [ebp - 0x32c]
call fcn.01047533
push 0xffffffffffffffff
push dword [ebp - 0x3a0]
push dword [ebp - 0x32c]
call fcn.01045bc4
mov esi, eax
test esi, esi
je 0x104b29e
push esi
push 0xf0b013e
jmp 0x104becc
push 0x1004310
call fcn.0109c1a8
pop ecx
xor esi, esi
lea eax, [ebp - 0x39c]
push eax
lea eax, [ebp - 0x344]
push eax
push esi
lea eax, [ebp - 0x30c]
push eax
mov esi, 0x100b868
push esi
push edi
lea eax, [ebp - 0x390]
push eax
call fcn.0104a8f1
test eax, eax
je 0x104b2f7
cmp dword [ebp - 0x314], 0x40
mov ecx, 0x100b834
je 0x104b2eb
mov ecx, 0x100b800
push eax
push 0xf1e013e
push ecx
call fcn.0108c595
cmp dword [ebp - 0x310], 0
je 0x104b30f
push esi
push edi
push 0x100b7e8
call fcn.0109c1a8
add esp, 0xc
cmp dword [ebp - 0x32c], 0
je 0x104b374
cmp dword [ebp - 0x344], 0
je 0x104b374
push 2
push 0x2400
push dword [ebp - 0x39c]
push dword [ebp - 0x344]
push dword [ebp - 0x3a0]
push dword [ebp - 0x32c]
push 0x100b7d8
push 0x98f
call fcn.0104861f
push eax
push dword [ebp - 0x310]
push dword [ebp - 0x348]
call fcn.01047a87
mov esi, eax
xor edi, edi
cmp esi, edi
je 0x104b376
push esi
push 0xf35013e
jmp 0x104becc
xor edi, edi
lea eax, [ebp - 0x3c0]
push eax
push edi
push dword [ebp - 0x310]
lea eax, [ebp - 0x390]
push 1
push 1
push 0x100b7c4
push 0x100b7a8
push eax
call fcn.0104717e
mov esi, eax
cmp esi, edi
je 0x104b3af
push esi
push 0xf44013e
jmp 0x104becc
cmp dword [ebp - 0x318], edi
je 0x104b3c3
mov dword [ebp - 0x334], 0x100b784
jmp 0x104b3e0
cmp dword [ebp - 0x3a4], 2
mov dword [ebp - 0x334], 0x100b750
je 0x104b3e0
mov dword [ebp - 0x334], 0x100b728
cmp dword [ebp - 0x3c0], edi
jbe 0x104b664
mov dword [ebp - 0x320], 1
cmp dword [ebp - 0x318], edi
je 0x104b406
mov dword [ebp - 0x338], ebx
jmp 0x104b40f
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x338], eax
cmp dword [ebp - 0x324], edi
je 0x104b429
push dword [ebp - 0x324]
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov dword [ebp - 0x324], edi
cmp dword [ebp - 0x328], edi
je 0x104b443
push dword [ebp - 0x328]
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov dword [ebp - 0x328], edi
push dword [ebp - 0x320]
lea eax, [ebp - 0x2c]
push 0x100b718
push 0x26
push eax
call fcn.01032ea3
add esp, 0x10
lea eax, [ebp - 0x3b4]
push eax
lea eax, [ebp - 0x324]
push eax
push edi
lea eax, [ebp - 0x30c]
push eax
push dword [ebp - 0x338]
lea eax, [ebp - 0x390]
push dword [ebp - 0x334]
push eax
call fcn.0104a8f1
mov esi, eax
cmp esi, edi
jne 0x104b6a9
push 0x1004310
call fcn.0109c1a8
pop ecx
cmp dword [ebp - 0x310], edi
je 0x104b4b2
push 0x100ae58
call fcn.0109c1a8
pop ecx
push dword [ebp - 0x338]
push dword [ebp - 0x334]
push 0x100b7e8
call fcn.0109c1a8
add esp, 0xc
push dword [ebp - 0x3b4]
push dword [ebp - 0x324]
call fcn.01047533
push 0xffffffffffffffff
push dword [ebp - 0x3b4]
push dword [ebp - 0x324]
call fcn.01045bc4
mov esi, eax
cmp esi, edi
jne 0x104b6b4
push dword [ebp - 0x320]
lea eax, [ebp - 0x50]
push 0x100b70c
push 0x24
push eax
call fcn.01032ea3
add esp, 0x10
lea eax, [ebp - 0x374]
push eax
lea eax, [ebp - 0x328]
push eax
push edi
lea eax, [ebp - 0x30c]
push eax
lea eax, [ebp - 0x50]
push eax
push 0x100b7a8
lea eax, [ebp - 0x390]
push eax
call fcn.0104a8f1
mov esi, eax
cmp esi, edi
jne 0x104b6bf
push 0x1004310
call fcn.0109c1a8
pop ecx
cmp dword [ebp - 0x310], edi
je 0x104b570
lea eax, [ebp - 0x50]
push eax
push 0x100b7a8
push 0x100b7e8
call fcn.0109c1a8
add esp, 0xc
cmp dword [0x10d2284], edi
je 0x104b58e
push dword [ebp - 0x374]
push dword [ebp - 0x328]
push 0x1804
call fcn.0103cbc3
push 1
push 0xa400
push dword [ebp - 0x374]
push dword [ebp - 0x328]
push dword [ebp - 0x3b4]
push dword [ebp - 0x324]
push 0x100b6f8
push 0x990
call fcn.0104861f
push eax
push dword [ebp - 0x310]
push dword [ebp - 0x348]
call fcn.01047a87
mov esi, eax
cmp esi, edi
jne 0x104b6ca
push dword [ebp - 0x320]
lea eax, [ebp - 0x2c]
push 0x100b718
push 0x26
push eax
call fcn.01032ea3
add esp, 0x10
push edi
push dword [ebp - 0x310]
lea eax, [ebp - 0x2c]
push edi
push 1
push eax
push 0x100b728
lea eax, [ebp - 0x390]
push eax
call fcn.01047394
mov esi, eax
cmp esi, edi
jne 0x104b6d5
lea eax, [ebp - 0x3dc]
push eax
push edi
push dword [ebp - 0x310]
lea eax, [ebp - 0x2c]
push 1
push 2
push eax
push 0x100b728
lea eax, [ebp - 0x390]
push eax
call fcn.0104717e
mov esi, eax
cmp esi, edi
jne 0x104b6e0
inc dword [ebp - 0x320]
mov eax, dword [ebp - 0x320]
dec eax
cmp eax, dword [ebp - 0x3c0]
jb 0x104b3f6
cmp dword [ebp - 0x318], edi
jne 0x104b751
lea eax, [ebp - 0x3bc]
push eax
lea eax, [ebp - 0x358]
push eax
push edi
lea eax, [ebp - 0x30c]
push eax
push ebx
push 0x100b784
lea eax, [ebp - 0x390]
push eax
call fcn.0104a8f1
mov esi, eax
cmp esi, edi
je 0x104b6eb
push esi
push 0xfc4013e
jmp 0x104becc
push esi
push 0xf69013e
jmp 0x104becc
push esi
push 0xf7a013e
jmp 0x104becc
push esi
push 0xf85013e
jmp 0x104becc
push esi
push 0xf9a013e
jmp 0x104becc
push esi
push 0xfa9013e
jmp 0x104becc
push esi
push 0xfb4013e
jmp 0x104becc
push 0x1004310
call fcn.0109c1a8
pop ecx
cmp dword [ebp - 0x310], edi
je 0x104b709
push 0x100ae58
call fcn.0109c1a8
pop ecx
push ebx
push 0x100b784
push 0x100b7e8
call fcn.0109c1a8
add esp, 0xc
push dword [ebp - 0x3bc]
push dword [ebp - 0x358]
call fcn.01047533
push 0xffffffffffffffff
push dword [ebp - 0x3bc]
push dword [ebp - 0x358]
call fcn.01045bc4
mov esi, eax
cmp esi, edi
je 0x104b751
push esi
push 0xfd2013e
jmp 0x104becc
lea eax, [ebp - 0x338]
push eax
lea eax, [ebp - 0x34c]
push eax
push 0
lea eax, [ebp - 0x30c]
push eax
push ebx
mov edi, 0x1003ee8
push edi
lea eax, [ebp - 0x390]
push eax
call fcn.0104a8f1
mov esi, eax
test esi, esi
je 0x104b78c
push esi
push 0xfe0013e
jmp 0x104becc
push 0x1004310
call fcn.0109c1a8
cmp dword [ebp - 0x310], 0
pop ecx
je 0x104b7ab
push 0x100ae58
call fcn.0109c1a8
pop ecx
push ebx
push edi
push 0x100b7e8
call fcn.0109c1a8
add esp, 0xc
push dword [ebp - 0x338]
push dword [ebp - 0x34c]
call fcn.01047533
push 0xffffffffffffffff
push dword [ebp - 0x338]
push dword [ebp - 0x34c]
call fcn.01045bc4
mov esi, eax
test esi, esi
je 0x104b7ef
push esi
push 0xfee013e
jmp 0x104becc
push dword [ebp - 0x338]
push dword [ebp - 0x34c]
call fcn.01047ba8
test eax, eax
je 0x104b80f
push eax
push 0xff1013e
call fcn.0108c55a
cmp dword [ebp - 0x318], 0
je 0x104b8da
lea eax, [ebp - 0x334]
push eax
lea eax, [ebp - 0x340]
push eax
push 0
lea eax, [ebp - 0x30c]
push eax
push ebx
mov edi, 0x100b6e8
push edi
lea eax, [ebp - 0x390]
push eax
call fcn.0104a8f1
mov esi, eax
test esi, esi
je 0x104b857
push esi
push 0x1000013e
jmp 0x104becc
push 0x1004310
call fcn.0109c1a8
cmp dword [ebp - 0x310], 0
pop ecx
je 0x104b876
push 0x100ae58
call fcn.0109c1a8
pop ecx
push ebx
push edi
push 0x100b7e8
call fcn.0109c1a8
add esp, 0xc
push dword [ebp - 0x334]
push dword [ebp - 0x340]
call fcn.01047533
push 0xffffffffffffffff
push dword [ebp - 0x334]
push dword [ebp - 0x340]
call fcn.01045bc4
mov esi, eax
test esi, esi
je 0x104b8ba
push esi
push 0x100e013e
jmp 0x104becc
push dword [ebp - 0x334]
push dword [ebp - 0x340]
call fcn.01047ba8
test eax, eax
je 0x104b8da
push eax
push 0x1011013e
call fcn.0108c55a
lea eax, [ebp - 0x360]
push eax
push 0
lea eax, [ebp - 0x30c]
push eax
mov ebx, 0x100b6cc
push ebx
mov edi, 0x100b6a4
push edi
lea eax, [ebp - 0x390]
push eax
call fcn.0104aaec
mov esi, eax
test esi, esi
je 0x104b913
push esi
push 0x101e013e
jmp 0x104becc
push dword [ebp - 0x360]
push ebx
push edi
push 0x100af40
call fcn.0109c1a8
add esp, 0x10
lea eax, [ebp - 0x3d0]
push eax
push 0
lea eax, [ebp - 0x30c]
push eax
mov ebx, 0x100b690
push ebx
push edi
lea eax, [ebp - 0x390]
push eax
call fcn.0104ab6a
mov esi, eax
test esi, esi
je 0x104b95c
push esi
push 0x102d013e
jmp 0x104becc
push dword [ebp - 0x3d0]
push ebx
push edi
push 0x100b66c
call fcn.0109c1a8
add esp, 0x10
cmp dword [ebp - 0x318], 0
mov esi, 0xe0000102
je 0x104b9ab
cmp dword [ebp - 0x310], 0
je 0x104be98
lea eax, [ebp - 0x390]
push eax
call fcn.010494e6
test eax, eax
je 0x104be98
push eax
push 0x103a013e
jmp 0x104be93
lea eax, [ebp - 0x318]
push eax
push esi
push dword [ebp - 0x310]
mov edi, 0x100b65c
push 1
push 1
push 0x100b7c4
push edi
lea eax, [ebp - 0x390]
push eax
call fcn.0104717e
xor ebx, ebx
cmp eax, ebx
je 0x104ba05
cmp dword [ebp - 0x314], 0x40
mov dword [ebp - 0x318], ebx
mov dword [ebp - 0x31c], esi
mov ecx, 0x100b634
je 0x104b9f9
mov ecx, 0x100b60c
push eax
push 0x1055013e
push ecx
call fcn.0108c595
lea eax, [ebp - 0x320]
push eax
lea eax, [ebp - 0x33c]
push eax
push esi
lea eax, [ebp - 0x30c]
push eax
mov esi, 0x100b5e4
push esi
push edi
lea eax, [ebp - 0x390]
push eax
call fcn.0104a8f1
cmp eax, ebx
je 0x104ba51
cmp dword [ebp - 0x314], 0x40
mov ecx, 0x100b5a8
je 0x104ba45
mov ecx, 0x100b56c
push eax
push 0x1065013e
push ecx
call fcn.0108c595
push 0x1004310
call fcn.0109c1a8
pop ecx
cmp dword [ebp - 0x310], ebx
je 0x104ba7c
push 0x100ae58
call fcn.0109c1a8
push edi
push 0x100b2e4
call fcn.0109c1a8
add esp, 0xc
push esi
push 0x1005b1c
call fcn.0109c1a8
pop ecx
pop ecx
cmp dword [ebp - 0x33c], ebx
je 0x104bb95
push dword [ebp - 0x320]
push dword [ebp - 0x33c]
call fcn.01047533
push 0xffffffffffffffff
push dword [ebp - 0x320]
push dword [ebp - 0x33c]
call fcn.01045bc4
mov esi, eax
cmp esi, ebx
je 0x104baca
push esi
push 0x1073013e
jmp 0x104becc
lea eax, [ebp - 0x398]
push eax
lea eax, [ebp - 0x350]
push eax
push dword [ebp - 0x31c]
lea eax, [ebp - 0x30c]
push eax
mov ebx, 0x100b554
push ebx
push edi
lea eax, [ebp - 0x390]
push eax
call fcn.0104a8f1
mov esi, eax
test esi, esi
je 0x104bb09
push esi
push 0x107d013e
jmp 0x104becc
cmp dword [ebp - 0x310], 0
je 0x104bb21
push ebx
push edi
push 0x100b7e8
call fcn.0109c1a8
add esp, 0xc
push 2
push 0x2400
push 1
push dword [ebp - 0x398]
push dword [ebp - 0x350]
push dword [ebp - 0x320]
push dword [ebp - 0x33c]
push 0x100b7d8
push 0x98f
call fcn.0104861f
push eax
push dword [ebp - 0x310]
push dword [ebp - 0x348]
call fcn.010477b4
mov esi, eax
test esi, esi
je 0x104bb95
cmp dword [ebp - 0x314], 0x40
mov eax, 0x100b528
je 0x104bb7c
mov eax, 0x100b4fc
push esi
push 0x1096013e
push eax
call fcn.0108c595
cmp dword [ebp - 0x348], 0
jne 0x104bed1
xor ebx, ebx
cmp dword [ebp - 0x310], ebx
je 0x104bbb2
push 0x100b7a8
push edi
push 0x100b7e8
call fcn.0109c1a8
add esp, 0xc
lea eax, [ebp - 0x3b0]
push eax
lea eax, [ebp - 0x35c]
push eax
push dword [ebp - 0x31c]
lea eax, [ebp - 0x30c]
push eax
push 0x100b7a8
push edi
lea eax, [ebp - 0x390]
push eax
call fcn.0104a8f1
mov esi, eax
cmp dword [ebp - 0x318], ebx
je 0x104bbf8
cmp esi, ebx
je 0x104bbf8
push esi
push 0x10ac013e
jmp 0x104becc
xor eax, eax
cmp dword [ebp - 0x318], ebx
jbe 0x104bd57
mov ebx, 0x100b750
inc eax
push eax
push 0x100b4e8
mov dword [ebp - 0x3cc], eax
lea eax, [ebp - 0x7c]
push 0x2a
push eax
call fcn.01032ea3
add esp, 0x10
lea eax, [ebp - 0x3a8]
push eax
lea eax, [ebp - 0x330]
push eax
push dword [ebp - 0x31c]
lea eax, [ebp - 0x30c]
push eax
lea eax, [ebp - 0x7c]
push eax
push ebx
lea eax, [ebp - 0x390]
push eax
call fcn.0104a8f1
mov esi, eax
test esi, esi
jne 0x104be6d
push 0x1004310
call fcn.0109c1a8
pop ecx
cmp dword [ebp - 0x310], esi
je 0x104bc7a
push 0x100ae58
call fcn.0109c1a8
pop ecx
lea eax, [ebp - 0x7c]
push eax
push ebx
push 0x100b7e8
call fcn.0109c1a8
add esp, 0xc
push dword [ebp - 0x3a8]
push dword [ebp - 0x330]
call fcn.01047533
push 0xffffffffffffffff
push dword [ebp - 0x3a8]
push dword [ebp - 0x330]
call fcn.01045bc4
mov esi, eax
test esi, esi
jne 0x104be75
push 1
push 0xa400
push dword [ebp - 0x318]
push dword [ebp - 0x3b0]
push dword [ebp - 0x35c]
push dword [ebp - 0x3a8]
push dword [ebp - 0x330]
push 0x100b6f8
push 0x990
call fcn.0104861f
push eax
push dword [ebp - 0x310]
push dword [ebp - 0x348]
call fcn.010477b4
mov esi, eax
test esi, esi
je 0x104bd32
cmp dword [ebp - 0x314], 0x40
mov eax, 0x100b4b8
je 0x104bd19
mov eax, 0x100b488
push esi
push 0x10e2013e
push eax
call fcn.0108c595
cmp dword [ebp - 0x348], 0
jne 0x104bed1
push dword [ebp - 0x330]
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov eax, dword [ebp - 0x3cc]
and dword [ebp - 0x330], 0
cmp eax, dword [ebp - 0x318]
jb 0x104bc0b
cmp dword [ebp - 0x314], 0x40
mov ebx, 0x100b448
mov esi, 0x100b408
mov eax, ebx
je 0x104bd6e
mov eax, esi
push dword [ebp - 0x31c]
lea ecx, [ebp - 0x30c]
push ecx
push dword [ebp - 0x310]
push eax
push 0x100b3dc
push edi
lea eax, [ebp - 0x390]
push eax
call fcn.0104abe3
test eax, eax
je 0x104bdb1
cmp dword [ebp - 0x314], 0x40
mov ecx, ebx
je 0x104bda5
mov ecx, esi
push eax
push 0x10fd013e
push ecx
call fcn.0108c595
lea eax, [ebp - 0x31c]
push eax
lea eax, [ebp - 0x368]
push eax
push dword [ebp - 0x31c]
lea eax, [ebp - 0x30c]
push eax
mov esi, 0x100b3ac
push esi
push edi
lea eax, [ebp - 0x390]
push eax
call fcn.0104a8f1
test eax, eax
je 0x104be02
cmp dword [ebp - 0x314], 0x40
mov ecx, 0x100b368
je 0x104bdf6
mov ecx, 0x100b320
push eax
push 0x110d013e
push ecx
call fcn.0108c595
push 0x1004310
call fcn.0109c1a8
cmp dword [ebp - 0x310], 0
pop ecx
je 0x104be2e
push 0x100ae58
call fcn.0109c1a8
push edi
push 0x100b2e4
call fcn.0109c1a8
add esp, 0xc
push esi
push 0x1005b1c
call fcn.0109c1a8
mov edi, dword [ebp - 0x368]
pop ecx
pop ecx
test edi, edi
je 0x104be98
push dword [ebp - 0x31c]
push edi
call fcn.01047533
push 0xffffffffffffffff
push dword [ebp - 0x31c]
push edi
call fcn.01045bc4
mov esi, eax
test esi, esi
je 0x104be7d
push esi
push 0x111b013e
jmp 0x104becc
push esi
push 0x10bf013e
jmp 0x104becc
push esi
push 0x10cd013e
jmp 0x104becc
push dword [ebp - 0x31c]
push edi
call fcn.01047ba8
test eax, eax
je 0x104be98
push eax
push 0x111e013e
call fcn.0108c55a
push 0x1004310
call fcn.0109c1a8
pop ecx
xor esi, esi
jmp 0x104bed1
push ebx
push ebx
push 0x98b
call fcn.0108bc14
push eax
push 0x100b2f4
call fcn.0109c1a8
add esp, 0x10
mov esi, 0x8007000d
push esi
push 0xe65013e
call fcn.0108c55a
mov ecx, 0x208
lea eax, [ebp - 0x284]
mov byte [eax], 0
inc eax
dec ecx
jne 0x104bedc
mov edi, dword [sym.imp.KERNEL32.dll_LocalFree]
cmp dword [ebp - 0x36c], ecx
je 0x104bef9
push dword [ebp - 0x36c]
call edi
xor ebx, ebx
cmp dword [ebp - 0x32c], ebx
je 0x104bf0b
push dword [ebp - 0x32c]
call edi
cmp dword [ebp - 0x328], ebx
je 0x104bf32
mov ecx, dword [ebp - 0x374]
mov eax, dword [ebp - 0x328]
cmp ecx, ebx
je 0x104bf2a
mov byte [eax], 0
inc eax
dec ecx
jne 0x104bf23
push dword [ebp - 0x328]
call edi
cmp dword [ebp - 0x344], ebx
je 0x104bf59
mov ecx, dword [ebp - 0x39c]
mov eax, dword [ebp - 0x344]
cmp ecx, ebx
je 0x104bf51
mov byte [eax], 0
inc eax
dec ecx
jne 0x104bf4a
push dword [ebp - 0x344]
call edi
cmp dword [ebp - 0x358], ebx
je 0x104bf69
push dword [ebp - 0x358]
call edi
cmp dword [ebp - 0x34c], ebx
je 0x104bf79
push dword [ebp - 0x34c]
call edi
cmp dword [ebp - 0x340], ebx
je 0x104bf89
push dword [ebp - 0x340]
call edi
cmp dword [ebp - 0x324], ebx
je 0x104bf99
push dword [ebp - 0x324]
call edi
cmp dword [ebp - 0x33c], ebx
je 0x104bfa9
push dword [ebp - 0x33c]
call edi
cmp dword [ebp - 0x350], ebx
je 0x104bfd0
mov ecx, dword [ebp - 0x398]
mov eax, dword [ebp - 0x350]
cmp ecx, ebx
je 0x104bfc8
mov byte [eax], 0
inc eax
dec ecx
jne 0x104bfc1
push dword [ebp - 0x350]
call edi
cmp dword [ebp - 0x330], ebx
je 0x104bfe0
push dword [ebp - 0x330]
call edi
cmp dword [ebp - 0x35c], ebx
je 0x104c007
mov ecx, dword [ebp - 0x3b0]
mov eax, dword [ebp - 0x35c]
cmp ecx, ebx
je 0x104bfff
mov byte [eax], 0
inc eax
dec ecx
jne 0x104bff8
push dword [ebp - 0x35c]
call edi
cmp dword [ebp - 0x368], ebx
je 0x104c017
push dword [ebp - 0x368]
call edi
cmp dword [ebp - 0x360], ebx
je 0x104c027
push dword [ebp - 0x360]
call edi
cmp dword [ebp - 0x370], ebx
je 0x104c037
push dword [ebp - 0x370]
call edi
cmp dword [ebp - 0x308], ebx
je 0x104c04b
push dword [ebp - 0x308]
call dword [sym.imp.ADVAPI32.dll_CryptDestroyKey]
lea eax, [ebp - 0x304]
push eax
call fcn.010bddd0
cmp dword [ebp - 0x364], ebx
je 0x104c06c
push ebx
push dword [ebp - 0x364]
call dword [sym.imp.ADVAPI32.dll_CryptReleaseContext]
cmp dword [ebp - 0x390], 0xffffffff
je 0x104c081
lea eax, [ebp - 0x390]
push eax
call fcn.0109e227
cmp dword [ebp - 0x354], ebx
je 0x104c0a5
cmp dword [0x10d22a0], ebx
jne 0x104c09d
push dword [ebp - 0x354]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push dword [ebp - 0x354]
call edi
mov eax, dword [ebp - 0x3c4]
mov ecx, dword [ebp - 4]
pop edi
mov dword [0x10d2294], eax
mov eax, esi
pop esi
xor ecx, ebp
pop ebx
call fcn.01077dc7
leave
ret 0xc