Function at 0x1006fda0
Capabilities:
Check if file exists
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1018583f
mov eax, dword fs:[0]
push eax
sub esp, 0x268
mov eax, dword [0x101dd594]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
call fcn.1001b540
mov ecx, eax
test ecx, ecx
je 0x10070da3
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x258], eax
xorps xmm0, xmm0
mov dword [ebp - 0x234], 0
movq qword [ebp - 0x23c], xmm0
mov dword [ebp - 4], 0
mov dword [ebp - 0x23c], 0
mov dword [ebp - 0x238], 0
mov dword [ebp - 0x234], 0
lea eax, [ebp - 0x258]
mov byte [ebp - 4], 1
push eax
call fcn.1006fb90
mov edi, dword [ebp - 0x258]
add esp, 4
push edi
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
or ebx, 0xffffffff
test eax, eax
jne 0x1006fe53
xor esi, esi
jmp 0x10070d5e
xorps xmm0, xmm0
mov dword [ebp - 0x228], 0
movq qword [ebp - 0x230], xmm0
mov dword [ebp - 0x230], 0
mov dword [ebp - 0x22c], 0
mov dword [ebp - 0x228], 0
movq qword [ebp - 0x224], xmm0
mov dword [ebp - 0x21c], 0
mov dword [ebp - 0x224], 0
mov dword [ebp - 0x220], 0
mov dword [ebp - 0x21c], 0
mov byte [ebp - 4], 3
call fcn.1001b540
mov ecx, eax
test ecx, ecx
je 0x10070dad
mov eax, dword [ecx]
call dword [eax + 0xc]
add eax, 0x10
mov dword [ebp - 0x254], eax
lea ecx, [ebp - 0x230]
mov byte [ebp - 4], 4
call fcn.10073ae0
lea ecx, [ebp - 0x224]
call fcn.10073ae0
lea ecx, [ebp - 0x24d]
call fcn.10069410
push eax
lea eax, [ebp - 0x258]
push eax
lea eax, [ebp - 0x24c]
push eax
call fcn.1001cb20
add esp, 0xc
push eax
lea ecx, [ebp - 0x254]
mov byte [ebp - 4], 5
call fcn.1001c9f0
mov edx, dword [ebp - 0x24c]
mov eax, ebx
mov byte [ebp - 4], 4
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1006ff44
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0
push 0xffffffffffffffff
push 0xfde9
push dword [ebp - 0x254]
lea eax, [ebp - 0x270]
push eax
call fcn.10073720
cmp dword [eax + 0x14], 0x10
mov byte [ebp - 4], 6
jb 0x1006ff6b
mov eax, dword [eax]
lea ecx, [ebp - 0x230]
push ecx
push 0x10193cf0
push eax
call fcn.1003d0f0
mov edx, dword [ebp - 0x25c]
add esp, 0xc
mov byte [ebp - 4], 4
cmp edx, 0x10
jb 0x1006ffbe
mov ecx, dword [ebp - 0x270]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1006ffb4
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10070db7
push edx
push ecx
call fcn.10127e1e
add esp, 8
push ecx
mov ecx, esp
push 0x10193fcc
call fcn.10016670
push 0
lea eax, [ebp - 0x224]
push eax
lea eax, [ebp - 0x230]
push eax
call fcn.1006cc20
add esp, 0x10
lea ecx, [ebp - 0x23c]
push dword [ebp - 0x24c]
push dword [ebp - 0x220]
push dword [ebp - 0x224]
push dword [ebp - 0x238]
call fcn.10066bf0
lea ecx, [ebp - 0x230]
call fcn.10073ae0
lea ecx, [ebp - 0x224]
call fcn.10073ae0
lea ecx, [ebp - 0x24d]
call fcn.1006a290
push eax
lea eax, [ebp - 0x258]
push eax
lea eax, [ebp - 0x24c]
push eax
call fcn.1001cb20
add esp, 0xc
push eax
lea ecx, [ebp - 0x254]
mov byte [ebp - 4], 7
call fcn.1001c9f0
mov edx, dword [ebp - 0x24c]
mov eax, ebx
mov byte [ebp - 4], 4
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1007006f
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0
push 0xffffffffffffffff
push 0xfde9
push dword [ebp - 0x254]
lea eax, [ebp - 0x270]
push eax
call fcn.10073720
cmp dword [eax + 0x14], 0x10
mov byte [ebp - 4], 8
jb 0x10070096
mov eax, dword [eax]
lea ecx, [ebp - 0x230]
push ecx
push 0x10193cf0
push eax
call fcn.1003d0f0
mov edx, dword [ebp - 0x25c]
add esp, 0xc
mov byte [ebp - 4], 4
cmp edx, 0x10
jb 0x100700e9
mov ecx, dword [ebp - 0x270]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100700df
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10070dbc
push edx
push ecx
call fcn.10127e1e
add esp, 8
push ecx
mov ecx, esp
push 0x10193fcc
call fcn.10016670
push 0
lea eax, [ebp - 0x224]
push eax
lea eax, [ebp - 0x230]
push eax
call fcn.1006cc20
add esp, 0x10
lea ecx, [ebp - 0x23c]
push dword [ebp - 0x24c]
push dword [ebp - 0x220]
push dword [ebp - 0x224]
push dword [ebp - 0x238]
call fcn.10066bf0
lea ecx, [ebp - 0x230]
call fcn.10073ae0
lea ecx, [ebp - 0x224]
call fcn.10073ae0
lea ecx, [ebp - 0x24d]
call fcn.10069f10
push eax
lea eax, [ebp - 0x258]
push eax
lea eax, [ebp - 0x24c]
push eax
call fcn.1001cb20
add esp, 0xc
push eax
lea ecx, [ebp - 0x254]
mov byte [ebp - 4], 9
call fcn.1001c9f0
mov edx, dword [ebp - 0x24c]
mov eax, ebx
mov byte [ebp - 4], 4
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1007019a
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0
push 0xffffffffffffffff
push 0xfde9
push dword [ebp - 0x254]
lea eax, [ebp - 0x270]
push eax
call fcn.10073720
cmp dword [eax + 0x14], 0x10
mov byte [ebp - 4], 0xa
jb 0x100701c1
mov eax, dword [eax]
lea ecx, [ebp - 0x230]
push ecx
push 0x10193cf0
push eax
call fcn.1003d0f0
mov edx, dword [ebp - 0x25c]
add esp, 0xc
mov byte [ebp - 4], 4
cmp edx, 0x10
jb 0x10070214
mov ecx, dword [ebp - 0x270]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1007020a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10070dc1
push edx
push ecx
call fcn.10127e1e
add esp, 8
push ecx
mov ecx, esp
push 0x10193fcc
call fcn.10016670
push 0
lea eax, [ebp - 0x224]
push eax
lea eax, [ebp - 0x230]
push eax
call fcn.1006cc20
add esp, 0x10
lea ecx, [ebp - 0x23c]
push dword [ebp - 0x24c]
push dword [ebp - 0x220]
push dword [ebp - 0x224]
push dword [ebp - 0x238]
call fcn.10066bf0
lea ecx, [ebp - 0x230]
call fcn.10073ae0
lea ecx, [ebp - 0x224]
call fcn.10073ae0
lea ecx, [ebp - 0x24d]
call fcn.10068db0
push eax
lea eax, [ebp - 0x258]
push eax
lea eax, [ebp - 0x24c]
push eax
call fcn.1001cb20
add esp, 0xc
push eax
lea ecx, [ebp - 0x254]
mov byte [ebp - 4], 0xb
call fcn.1001c9f0
mov edx, dword [ebp - 0x24c]
mov eax, ebx
mov byte [ebp - 4], 4
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x100702c5
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0
push 0xffffffffffffffff
push 0xfde9
push dword [ebp - 0x254]
lea eax, [ebp - 0x270]
push eax
call fcn.10073720
cmp dword [eax + 0x14], 0x10
mov byte [ebp - 4], 0xc
jb 0x100702ec
mov eax, dword [eax]
lea ecx, [ebp - 0x230]
push ecx
push 0x10193cf0
push eax
call fcn.1003d0f0
mov edx, dword [ebp - 0x25c]
add esp, 0xc
mov byte [ebp - 4], 4
cmp edx, 0x10
jb 0x1007033f
mov ecx, dword [ebp - 0x270]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10070335
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10070dc6
push edx
push ecx
call fcn.10127e1e
add esp, 8
push ecx
mov ecx, esp
push 0x10193fcc
call fcn.10016670
push 0
lea eax, [ebp - 0x224]
push eax
lea eax, [ebp - 0x230]
push eax
call fcn.1006cc20
add esp, 0x10
lea ecx, [ebp - 0x23c]
push dword [ebp - 0x24c]
push dword [ebp - 0x220]
push dword [ebp - 0x224]
push dword [ebp - 0x238]
call fcn.10066bf0
lea ecx, [ebp - 0x230]
call fcn.10073ae0
lea ecx, [ebp - 0x224]
call fcn.10073ae0
push 0
push 0x1a
lea eax, [ebp - 0x218]
push eax
push 0
call dword [sym.imp.SHELL32.dll_SHGetSpecialFolderPathW]
lea eax, [ebp - 0x218]
mov dword [ebp - 0x274], 0
push eax
lea ecx, [ebp - 0x274]
call fcn.10016670
lea ecx, [ebp - 0x24d]
mov byte [ebp - 4], 0xd
call fcn.1006b290
push eax
lea eax, [ebp - 0x274]
push eax
lea eax, [ebp - 0x24c]
push eax
call fcn.1001cb20
add esp, 0xc
push eax
lea ecx, [ebp - 0x254]
mov byte [ebp - 4], 0xe
call fcn.1001c9f0
mov edx, dword [ebp - 0x24c]
mov eax, ebx
mov byte [ebp - 4], 0xd
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x10070423
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0
push 0xffffffffffffffff
push 0xfde9
push dword [ebp - 0x254]
lea eax, [ebp - 0x270]
push eax
call fcn.10073720
cmp dword [eax + 0x14], 0x10
mov byte [ebp - 4], 0xf
jb 0x1007044a
mov eax, dword [eax]
lea ecx, [ebp - 0x230]
push ecx
push 0x10193cf0
push eax
call fcn.1003d0f0
mov edx, dword [ebp - 0x25c]
add esp, 0xc
mov byte [ebp - 4], 0xd
cmp edx, 0x10
jb 0x1007049d
mov ecx, dword [ebp - 0x270]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10070493
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10070dcb
push edx
push ecx
call fcn.10127e1e
add esp, 8
push ecx
mov ecx, esp
push 0x10193fcc
call fcn.10016670
push 0
lea eax, [ebp - 0x224]
push eax
lea eax, [ebp - 0x230]
push eax
call fcn.1006cc20
add esp, 0x10
lea ecx, [ebp - 0x23c]
push dword [ebp - 0x24c]
push dword [ebp - 0x220]
push dword [ebp - 0x224]
push dword [ebp - 0x238]
call fcn.10066bf0
lea ecx, [ebp - 0x230]
call fcn.10073ae0
lea ecx, [ebp - 0x224]
call fcn.10073ae0
lea ecx, [ebp - 0x24d]
call fcn.1006a470
push eax
lea eax, [ebp - 0x258]
push eax
lea eax, [ebp - 0x24c]
push eax
call fcn.1001cb20
add esp, 0xc
push eax
lea ecx, [ebp - 0x254]
mov byte [ebp - 4], 0x10
call fcn.1001c9f0
mov edx, dword [ebp - 0x24c]
mov eax, ebx
mov byte [ebp - 4], 0xd
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x1007054e
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0
push 0xffffffffffffffff
push 0xfde9
push dword [ebp - 0x254]
lea eax, [ebp - 0x270]
push eax
call fcn.10073720
cmp dword [eax + 0x14], 0x10
mov byte [ebp - 4], 0x11
jb 0x10070575
mov eax, dword [eax]
lea ecx, [ebp - 0x230]
push ecx
push 0x10193cf0
push eax
call fcn.1003d0f0
mov edx, dword [ebp - 0x25c]
add esp, 0xc
mov byte [ebp - 4], 0xd
cmp edx, 0x10
jb 0x100705c8
mov ecx, dword [ebp - 0x270]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100705be
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10070dd0
push edx
push ecx
call fcn.10127e1e
add esp, 8
push ecx
mov ecx, esp
push 0x10193fcc
call fcn.10016670
push 0
lea eax, [ebp - 0x224]
push eax
lea eax, [ebp - 0x230]
push eax
call fcn.1006cc20
add esp, 0x10
lea ecx, [ebp - 0x23c]
push dword [ebp - 0x24c]
push dword [ebp - 0x220]
push dword [ebp - 0x224]
push dword [ebp - 0x238]
call fcn.10066bf0
lea ecx, [ebp - 0x230]
call fcn.10073ae0
lea ecx, [ebp - 0x224]
call fcn.10073ae0
lea ecx, [ebp - 0x24d]
call fcn.1006a800
push eax
lea eax, [ebp - 0x258]
push eax
lea eax, [ebp - 0x24c]
push eax
call fcn.1001cb20
add esp, 0xc
push eax
lea ecx, [ebp - 0x254]
mov byte [ebp - 4], 0x12
call fcn.1001c9f0
mov edx, dword [ebp - 0x24c]
mov eax, ebx
mov byte [ebp - 4], 0xd
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x10070679
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0
push 0xffffffffffffffff
push 0xfde9
push dword [ebp - 0x254]
lea eax, [ebp - 0x270]
push eax
call fcn.10073720
cmp dword [eax + 0x14], 0x10
mov byte [ebp - 4], 0x13
jb 0x100706a0
mov eax, dword [eax]
lea ecx, [ebp - 0x230]
push ecx
push 0x10193cf0
push eax
call fcn.1003d0f0
mov edx, dword [ebp - 0x25c]
add esp, 0xc
mov byte [ebp - 4], 0xd
cmp edx, 0x10
jb 0x100706f3
mov ecx, dword [ebp - 0x270]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x100706e9
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10070dd5
push edx
push ecx
call fcn.10127e1e
add esp, 8
push ecx
mov ecx, esp
push 0x10193fcc
call fcn.10016670
push 0
lea eax, [ebp - 0x224]
push eax
lea eax, [ebp - 0x230]
push eax
call fcn.1006cc20
add esp, 0x10
lea ecx, [ebp - 0x23c]
push dword [ebp - 0x24c]
push dword [ebp - 0x220]
push dword [ebp - 0x224]
push dword [ebp - 0x238]
call fcn.10066bf0
lea ecx, [ebp - 0x230]
call fcn.10073ae0
lea ecx, [ebp - 0x224]
call fcn.10073ae0
lea ecx, [ebp - 0x24d]
call fcn.1006a710
push eax
lea eax, [ebp - 0x258]
push eax
lea eax, [ebp - 0x24c]
push eax
call fcn.1001cb20
add esp, 0xc
push eax
lea ecx, [ebp - 0x254]
mov byte [ebp - 4], 0x14
call fcn.1001c9f0
mov edx, dword [ebp - 0x24c]
mov eax, ebx
mov byte [ebp - 4], 0xd
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x100707a4
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0
push 0xffffffffffffffff
push 0xfde9
push dword [ebp - 0x254]
lea eax, [ebp - 0x270]
push eax
call fcn.10073720
cmp dword [eax + 0x14], 0x10
mov byte [ebp - 4], 0x15
jb 0x100707cb
mov eax, dword [eax]
lea ecx, [ebp - 0x230]
push ecx
push 0x10193cf0
push eax
call fcn.1003d0f0
mov edx, dword [ebp - 0x25c]
add esp, 0xc
mov byte [ebp - 4], 0xd
cmp edx, 0x10
jb 0x1007081e
mov ecx, dword [ebp - 0x270]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10070814
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10070dda
push edx
push ecx
call fcn.10127e1e
add esp, 8
push ecx
mov ecx, esp
push 0x10193fcc
call fcn.10016670
push 0
lea eax, [ebp - 0x224]
push eax
lea eax, [ebp - 0x230]
push eax
call fcn.1006cc20
add esp, 0x10
lea ecx, [ebp - 0x23c]
push dword [ebp - 0x24c]
push dword [ebp - 0x220]
push dword [ebp - 0x224]
push dword [ebp - 0x238]
call fcn.10066bf0
lea ecx, [ebp - 0x230]
call fcn.10073ae0
lea ecx, [ebp - 0x224]
call fcn.10073ae0
lea ecx, [ebp - 0x24d]
call fcn.1006c070
push eax
lea eax, [ebp - 0x258]
push eax
lea eax, [ebp - 0x24c]
push eax
call fcn.1001cb20
add esp, 0xc
push eax
lea ecx, [ebp - 0x254]
mov byte [ebp - 4], 0x16
call fcn.1001c9f0
mov edx, dword [ebp - 0x24c]
mov eax, ebx
mov byte [ebp - 4], 0xd
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x100708cf
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0
push 0xffffffffffffffff
push 0xfde9
push dword [ebp - 0x254]
lea eax, [ebp - 0x270]
push eax
call fcn.10073720
cmp dword [eax + 0x14], 0x10
mov byte [ebp - 4], 0x17
jb 0x100708f6
mov eax, dword [eax]
lea ecx, [ebp - 0x230]
push ecx
push 0x10193cf0
push eax
call fcn.1003d0f0
mov edx, dword [ebp - 0x25c]
add esp, 0xc
mov byte [ebp - 4], 0xd
cmp edx, 0x10
jb 0x10070949
mov ecx, dword [ebp - 0x270]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x1007093f
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10070ddf
push edx
push ecx
call fcn.10127e1e
add esp, 8
push ecx
mov ecx, esp
push 0x10193fcc
call fcn.10016670
push 0
lea eax, [ebp - 0x224]
push eax
lea eax, [ebp - 0x230]
push eax
call fcn.1006cc20
add esp, 0x10
lea ecx, [ebp - 0x23c]
push dword [ebp - 0x24c]
push dword [ebp - 0x220]
push dword [ebp - 0x224]
push dword [ebp - 0x238]
call fcn.10066bf0
lea ecx, [ebp - 0x230]
call fcn.10073ae0
lea ecx, [ebp - 0x224]
call fcn.10073ae0
lea ecx, [ebp - 0x24d]
call fcn.10069130
push eax
lea eax, [ebp - 0x258]
push eax
lea eax, [ebp - 0x24c]
push eax
call fcn.1001cb20
add esp, 0xc
push eax
lea ecx, [ebp - 0x254]
mov byte [ebp - 4], 0x18
call fcn.1001c9f0
mov edx, dword [ebp - 0x24c]
mov eax, ebx
mov byte [ebp - 4], 0xd
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x100709fa
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
push 0
push 0xffffffffffffffff
push 0xfde9
push dword [ebp - 0x254]
lea eax, [ebp - 0x270]
push eax
call fcn.10073720
cmp dword [eax + 0x14], 0x10
mov byte [ebp - 4], 0x19
jb 0x10070a21
mov eax, dword [eax]
lea ecx, [ebp - 0x230]
push ecx
push 0x10193cf0
push eax
call fcn.1003d0f0
mov edx, dword [ebp - 0x25c]
add esp, 0xc
mov byte [ebp - 4], 0xd
cmp edx, 0x10
jb 0x10070a74
mov ecx, dword [ebp - 0x270]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10070a6a
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10070de4
push edx
push ecx
call fcn.10127e1e
add esp, 8
push ecx
mov ecx, esp
push 0x10193fcc
call fcn.10016670
push 0
lea eax, [ebp - 0x224]
push eax
lea eax, [ebp - 0x230]
push eax
call fcn.1006cc20
add esp, 0x10
lea ecx, [ebp - 0x23c]
push dword [ebp - 0x24c]
push dword [ebp - 0x220]
push dword [ebp - 0x224]
push dword [ebp - 0x238]
call fcn.10066bf0
lea ecx, [ebp - 0x230]
call fcn.10073ae0
lea ecx, [ebp - 0x224]
call fcn.10073ae0
lea ecx, [ebp - 0x24d]
call fcn.10069220
push eax
lea eax, [ebp - 0x258]
push eax
lea eax, [ebp - 0x24c]
push eax
call fcn.1001cb20
add esp, 0xc
push eax
lea ecx, [ebp - 0x254]
mov byte [ebp - 4], 0x1a
call fcn.1001c9f0
mov edx, dword [ebp - 0x24c]
mov eax, ebx
mov byte [ebp - 4], 0xd
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x10070b25
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov esi, dword [ebp - 0x254]
lea eax, [ebp - 0x270]
push 0
push 0xffffffffffffffff
push 0xfde9
push esi
push eax
call fcn.10073720
cmp dword [eax + 0x14], 0x10
mov byte [ebp - 4], 0x1b
jb 0x10070b4d
mov eax, dword [eax]
lea ecx, [ebp - 0x230]
push ecx
push 0x10193cf0
push eax
call fcn.1003d0f0
mov edx, dword [ebp - 0x25c]
add esp, 0xc
mov byte [ebp - 4], 0xd
cmp edx, 0x10
jb 0x10070ba0
mov ecx, dword [ebp - 0x270]
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x10070b96
mov ecx, dword [ecx - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10070de9
push edx
push ecx
call fcn.10127e1e
add esp, 8
push ecx
mov ecx, esp
push 0x10193fcc
call fcn.10016670
push 0
lea eax, [ebp - 0x224]
push eax
lea eax, [ebp - 0x230]
push eax
call fcn.1006cc20
add esp, 0x10
lea ecx, [ebp - 0x23c]
push dword [ebp - 0x24c]
push dword [ebp - 0x220]
push dword [ebp - 0x224]
push dword [ebp - 0x238]
call fcn.10066bf0
xor ecx, ecx
mov dword [ebp - 0x240], 0
xorps xmm0, xmm0
mov dword [ebp - 0x240], ecx
movq qword [ebp - 0x248], xmm0
mov dword [ebp - 0x248], ecx
mov dword [ebp - 0x244], ecx
mov eax, dword [ebp - 0x238]
sub eax, dword [ebp - 0x23c]
sar eax, 2
mov byte [ebp - 4], 0x1c
mov dword [ebp - 0x24c], ecx
test eax, eax
je 0x10070cfb
xor ebx, ebx
xor edi, edi
xor esi, esi
lea eax, [ebp - 0x248]
push eax
push ebx
push ecx
call fcn.1001a9c0
mov eax, dword [ebp - 0x248]
add esp, 0xc
mov dword [ebp - 0x244], eax
mov ebx, 0x10193fcc
lea eax, [ebp - 0x248]
push eax
mov eax, dword [ebp - 0x23c]
sub esp, 0x18
mov eax, dword [eax + esi*4]
test eax, eax
mov dword [ebp - 0x24c], esp
cmovne ebx, eax
push ebx
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov ecx, dword [ebp - 0x24c]
xor edx, edx
push eax
push ebx
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 7
mov word [ecx], dx
call fcn.1001ba50
call fcn.10073b60
mov ebx, dword [ebp - 0x244]
mov eax, 0x2aaaaaab
mov ecx, ebx
inc esi
sub ecx, dword [ebp - 0x248]
add esp, 0x1c
imul ecx
mov ecx, dword [ebp - 0x248]
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
add edi, eax
mov eax, dword [ebp - 0x238]
sub eax, dword [ebp - 0x23c]
sar eax, 2
cmp esi, eax
jb 0x10070c38
mov esi, dword [ebp - 0x254]
or ebx, 0xffffffff
mov dword [ebp - 0x24c], edi
mov edi, dword [ebp - 0x258]
lea ecx, [ebp - 0x248]
call fcn.10067120
mov edx, dword [ebp - 0x274]
mov eax, ebx
mov byte [ebp - 4], 4
add edx, 0xfffffff0
lock xadd dword [edx + 0xc], eax
dec eax
test eax, eax
jg 0x10070d27
mov ecx, dword [edx]
push edx
mov eax, dword [ecx]
call dword [eax + 4]
mov byte [ebp - 4], 3
add esi, 0xfffffff0
mov eax, ebx
lock xadd dword [esi + 0xc], eax
dec eax
test eax, eax
jg 0x10070d42
mov ecx, dword [esi]
push esi
mov eax, dword [ecx]
call dword [eax + 4]
lea ecx, [ebp - 0x224]
call fcn.100229e0
lea ecx, [ebp - 0x230]
call fcn.100229e0
mov esi, dword [ebp - 0x24c]
lea ecx, [ebp - 0x23c]
call fcn.100229e0
mov dword [ebp - 4], 0xffffffff
add edi, 0xfffffff0
lock xadd dword [edi + 0xc], ebx
dec ebx
test ebx, ebx
jg 0x10070d85
mov ecx, dword [edi]
push edi
mov edx, dword [ecx]
call dword [edx + 4]
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10128191
mov esp, ebp
pop ebp
ret
push 0x80004005
call fcn.10017a40
push 0x80004005
call fcn.10017a40
call fcn.10153963
call fcn.10153963
call fcn.10153963
call fcn.10153963
call fcn.10153963
call fcn.10153963
call fcn.10153963
call fcn.10153963
call fcn.10153963
call fcn.10153963
call fcn.10153963
int3