Function at 0x100deff0
Capabilities:
Delete file
Write file on windows

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x101c4c0c
mov eax, dword fs:[0]
push eax
sub esp, 0x57c
mov eax, dword [0x10224008]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, dword [ebp + 8]
mov ebx, dword [ebp + 0xc]
mov ecx, dword [ebp + 0x10]
mov dword [ebp - 0x168], eax
cmp dword [eax + 0x10], 0
mov dword [ebp - 0x1a0], ebx
mov dword [ebp - 0x16c], ecx
je 0x100dff31
mov edi, dword [ebx]
mov edx, dword [ebx + 4]
cmp edi, edx
je 0x100dff31
sub edx, edi
mov eax, 0x4ec4ec4f
imul edx
xor ecx, ecx
sar edx, 5
mov esi, edx
shr esi, 0x1f
add esi, edx
je 0x100dff31
lea eax, [edi + 0x64]
nop
cmp byte [eax], 0
jne 0x100df082
inc ecx
add eax, 0x68
cmp ecx, esi
jb 0x100df070
jmp 0x100dff31
mov esi, dword [ebp - 0x168]
lea eax, [ebp - 0x60]
push esi
push eax
call fcn.100e0660
mov dword [ebp - 4], 0
xorps xmm0, xmm0
movlpd qword [ebp - 0x24], xmm0
mov dword [ebp - 0x24], 0
mov word [ebp - 0x20], 0
mov byte [ebp - 4], 1
lea eax, [ebp - 0x60]
push eax
lea ecx, [ebp - 0x24]
call fcn.100ac990
xorps xmm0, xmm0
lea eax, [ebp - 0x24]
movlpd qword [ebp - 0x38], xmm0
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x24]
mov byte [ebp - 0x34], 0
test eax, eax
jne 0x100df0db
xor al, al
jmp 0x100df0f9
push 0xffffffffffffffff
push eax
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
je 0x100df0f3
cmp eax, 0x80
je 0x100df0f3
xor al, al
jmp 0x100df0f9
mov byte [ebp - 0x20], 1
mov al, 1
mov byte [ebp - 0x151], al
mov byte [ebp - 0x34], al
mov byte [ebp - 4], 2
xorps xmm0, xmm0
movq qword [ebp - 0x1c], xmm0
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0
mov byte [ebp - 4], 3
lea eax, [ebp - 0x152]
push eax
lea eax, [ebp - 0x1c]
mov byte [ebp - 0x152], 0
push eax
push esi
call fcn.100e0010
test al, al
jne 0x100df163
cmp byte [ebp - 0x152], al
je 0x100df163
cmp dword [esi + 0x14], 8
mov eax, esi
jb 0x100df15c
mov eax, dword [esi]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ecx, dword [ebx + 4]
xor al, al
mov edi, dword [ebx]
sub ecx, edi
mov byte [ebp - 0x152], al
mov eax, 0x4ec4ec4f
imul ecx
mov dword [ebp - 0x164], 0
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x100df9d2
xor ecx, ecx
mov dword [ebp - 0x160], ecx
nop dword [eax + eax]
cmp byte [ecx + edi + 0x64], 0
lea esi, [ecx + edi]
je 0x100df5ec
mov edi, dword [ebp - 0x1c]
xor ecx, ecx
mov dword [ebp - 0x158], ecx
mov eax, 0x4ec4ec4f
mov ecx, dword [ebp - 0x18]
xor ebx, ebx
sub ecx, edi
imul ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x100df23d
xor eax, eax
mov dword [ebp - 0x15c], eax
nop dword [eax + eax]
add edi, eax
mov ecx, esi
cmp dword [esi + 0x14], 8
jb 0x100df1ec
mov ecx, dword [esi]
cmp dword [edi + 0x14], 8
mov eax, edi
jb 0x100df1f6
mov eax, dword [edi]
push ecx
push eax
call dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll__wcsicmp]
add esp, 8
test eax, eax
je 0x100df23b
mov ecx, dword [ebp - 0x18]
mov eax, 0x4ec4ec4f
mov edi, dword [ebp - 0x1c]
sub ecx, edi
add dword [ebp - 0x15c], 0x68
inc dword [ebp - 0x158]
imul ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp dword [ebp - 0x158], eax
mov eax, dword [ebp - 0x15c]
jb 0x100df1e0
jmp 0x100df23d
mov ebx, edi
test ebx, ebx
jne 0x100df3b4
xor eax, eax
mov dword [ebp - 0xb8], ebx
mov dword [ebp - 0xb4], ebx
mov dword [ebp - 0xb8], ebx
mov dword [ebp - 0xb4], 7
mov word [ebp - 0xc8], ax
mov byte [ebp - 4], 4
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0x9c], eax
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0x9c], 7
mov word [ebp - 0xb0], ax
mov byte [ebp - 4], 5
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x84], eax
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x84], 7
mov word [ebp - 0x98], ax
mov byte [ebp - 4], 6
xorps xmm0, xmm0
movlpd qword [ebp - 0x80], xmm0
movlpd qword [ebp - 0x78], xmm0
movlpd qword [ebp - 0x70], xmm0
mov dword [ebp - 0x68], eax
mov byte [ebp - 0x64], al
mov byte [ebp - 4], 7
lea eax, [ebp - 0xc8]
mov edi, dword [ebp - 0x18]
push eax
cmp dword [ebp - 0x14], edi
je 0x100df35d
mov ecx, edi
mov dword [ebp - 0x170], edi
call fcn.10006ac0
mov byte [ebp - 4], 8
lea eax, [ebp - 0xb0]
push eax
lea ecx, [edi + 0x18]
call fcn.10006ac0
mov byte [ebp - 4], 9
lea eax, [ebp - 0x98]
push eax
lea ecx, [edi + 0x30]
call fcn.10006ac0
mov byte [ebp - 4], 0xa
mov eax, dword [ebp - 0x80]
mov dword [edi + 0x48], eax
mov eax, dword [ebp - 0x7c]
mov dword [edi + 0x4c], eax
mov eax, dword [ebp - 0x78]
mov dword [edi + 0x50], eax
mov eax, dword [ebp - 0x74]
mov dword [edi + 0x54], eax
mov eax, dword [ebp - 0x70]
mov dword [edi + 0x58], eax
mov eax, dword [ebp - 0x6c]
mov dword [edi + 0x5c], eax
mov eax, dword [ebp - 0x68]
mov dword [edi + 0x60], eax
mov al, byte [ebp - 0x64]
mov byte [edi + 0x64], al
mov byte [ebp - 4], 7
mov edx, dword [ebp - 0x18]
add edx, 0x68
mov dword [ebp - 0x18], edx
jmp 0x100df369
push edi
lea ecx, [ebp - 0x1c]
call fcn.100e1dd0
mov edx, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x1c]
mov eax, 0x4ec4ec4f
sub edx, ecx
imul edx
lea ebx, [ecx - 0x68]
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
imul eax, eax, 0x68
add ebx, eax
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0x98]
call fcn.10005540
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0xb0]
call fcn.10005540
mov byte [ebp - 4], 3
lea ecx, [ebp - 0xc8]
call fcn.10005540
push ebx
lea ecx, [ebp - 0x130]
call fcn.10006ac0
mov byte [ebp - 4], 0xe
lea edi, [ebx + 0x18]
push edi
lea ecx, [ebp - 0x118]
call fcn.10006ac0
mov byte [ebp - 4], 0xf
lea eax, [ebx + 0x30]
push eax
lea ecx, [ebp - 0x100]
call fcn.10006ac0
mov byte [ebp - 4], 0x10
mov eax, dword [ebx + 0x48]
mov dword [ebp - 0xe8], eax
mov dword [ebp - 0x158], eax
mov eax, dword [ebx + 0x4c]
mov dword [ebp - 0xe4], eax
mov dword [ebp - 0x178], eax
mov eax, dword [ebx + 0x50]
mov dword [ebp - 0xe0], eax
mov dword [ebp - 0x180], eax
mov eax, dword [ebx + 0x54]
mov dword [ebp - 0xdc], eax
mov dword [ebp - 0x188], eax
mov eax, dword [ebx + 0x58]
mov dword [ebp - 0xd8], eax
mov dword [ebp - 0x190], eax
mov eax, dword [ebx + 0x5c]
mov dword [ebp - 0xd4], eax
mov dword [ebp - 0x198], eax
mov eax, dword [ebx + 0x60]
mov dword [ebp - 0xd0], eax
mov dword [ebp - 0x170], eax
mov al, byte [ebx + 0x64]
mov byte [ebp - 0xcc], al
mov byte [ebp - 4], 0x11
cmp ebx, esi
je 0x100df479
cmp dword [esi + 0x14], 8
mov eax, esi
jb 0x100df46e
mov eax, dword [esi]
push dword [esi + 0x10]
mov ecx, ebx
push eax
call fcn.100055f0
lea eax, [esi + 0x18]
cmp edi, eax
je 0x100df495
cmp dword [eax + 0x14], 8
mov ecx, eax
jb 0x100df48a
mov ecx, dword [eax]
push dword [eax + 0x10]
push ecx
mov ecx, edi
call fcn.100055f0
lea eax, [esi + 0x30]
lea ecx, [ebx + 0x30]
cmp ecx, eax
je 0x100df4b2
cmp dword [eax + 0x14], 8
mov edx, eax
jb 0x100df4a9
mov edx, dword [eax]
push dword [eax + 0x10]
push edx
call fcn.100055f0
mov eax, dword [esi + 0x48]
lea edx, [ebp - 0x130]
mov ecx, dword [esi + 0x4c]
mov dword [ebx + 0x4c], ecx
mov dword [ebx + 0x48], eax
mov dword [ebp - 0x15c], eax
mov eax, dword [esi + 0x50]
mov dword [ebp - 0x174], ecx
mov ecx, dword [esi + 0x54]
mov dword [ebx + 0x54], ecx
mov dword [ebx + 0x50], eax
mov dword [ebp - 0x17c], eax
mov eax, dword [esi + 0x58]
mov dword [ebp - 0x184], ecx
mov ecx, dword [esi + 0x5c]
mov dword [ebx + 0x5c], ecx
mov dword [ebp - 0x18c], eax
mov dword [ebx + 0x58], eax
mov eax, dword [esi + 0x60]
mov dword [ebp - 0x19c], eax
mov dword [ebx + 0x60], eax
mov al, byte [esi + 0x64]
mov dword [ebp - 0x194], ecx
mov ecx, ebx
mov byte [ebx + 0x64], al
call fcn.10068fe0
test al, al
jne 0x100df5a6
lea edx, [ebp - 0x118]
mov ecx, edi
call fcn.10068fe0
test al, al
jne 0x100df5a6
mov eax, dword [ebp - 0x15c]
cmp eax, dword [ebp - 0x158]
jne 0x100df5a6
mov eax, dword [ebp - 0x174]
cmp eax, dword [ebp - 0x178]
jne 0x100df5a6
mov eax, dword [ebp - 0x17c]
cmp eax, dword [ebp - 0x180]
jne 0x100df5a6
mov eax, dword [ebp - 0x184]
cmp eax, dword [ebp - 0x188]
jne 0x100df5a6
mov eax, dword [ebp - 0x18c]
cmp eax, dword [ebp - 0x190]
jne 0x100df5a6
mov eax, dword [ebp - 0x194]
cmp eax, dword [ebp - 0x198]
jne 0x100df5a6
lea edx, [ebp - 0x100]
lea ecx, [ebx + 0x30]
call fcn.10068fe0
test al, al
jne 0x100df5a6
mov eax, dword [ebp - 0x19c]
cmp eax, dword [ebp - 0x170]
je 0x100df5b1
mov byte [ebp - 0x152], 1
mov byte [ebx + 0x64], 1
mov byte [ebp - 4], 0x13
lea ecx, [ebp - 0x100]
call fcn.10005540
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x118]
call fcn.10005540
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x130]
call fcn.10005540
mov ebx, dword [ebp - 0x1a0]
mov ecx, dword [ebp - 0x160]
mov edi, dword [ebx]
mov esi, dword [ebp - 0x164]
add ecx, 0x68
mov dword [ebp - 0x160], ecx
mov eax, 0x4ec4ec4f
mov ecx, dword [ebx + 4]
inc esi
sub ecx, edi
mov dword [ebp - 0x164], esi
imul ecx
mov ecx, dword [ebp - 0x160]
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp esi, eax
jb 0x100df1a0
cmp byte [ebp - 0x152], 0
je 0x100df9d2
mov eax, dword [ebp - 0x1c]
cmp eax, dword [ebp - 0x18]
je 0x100df9d2
xorps xmm0, xmm0
mov dword [ebp - 0x28], 0
movq qword [ebp - 0x30], xmm0
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 0
mov byte [ebp - 4], 0x15
mov eax, 0x4ec4ec4f
mov edi, dword [ebp - 0x18]
mov ecx, edi
mov esi, dword [ebp - 0x1c]
sub ecx, esi
imul ecx
mov ecx, dword [ebp - 0x28]
mov eax, 0x10624dd3
sub ecx, dword [ebp - 0x30]
sar edx, 5
mov ebx, edx
shr ebx, 0x1f
add ebx, edx
imul ecx
sar edx, 6
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp ebx, eax
jbe 0x100df6b8
cmp ebx, 0x418937
ja 0x100dff51
push ebx
lea ecx, [ebp - 0x30]
call fcn.100e1120
mov edi, dword [ebp - 0x18]
mov esi, dword [ebp - 0x1c]
mov ecx, edi
mov dword [ebp - 0x158], 0
sub ecx, esi
mov eax, 0x4ec4ec4f
imul ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x100df960
xor ecx, ecx
mov dword [ebp - 0x160], ecx
mov eax, dword [ecx + esi + 0x60]
lea ebx, [ecx + esi]
cmp eax, 1
je 0x100df6ff
cmp eax, 2
je 0x100df6ff
cmp eax, 3
jne 0x100df927
push 0x280
xorps xmm0, xmm0
mov dword [ebp - 0x588], 0
lea eax, [ebp - 0x584]
movlpd qword [ebp - 0x1bc], xmm0
push 0
push eax
movlpd qword [ebp - 0x1b4], xmm0
movlpd qword [ebp - 0x1ac], xmm0
mov dword [ebp - 0x1a4], 0
call sub.VCRUNTIME140.dll_memset
push 0x100
lea eax, [ebp - 0x304]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
push 0x48
lea eax, [ebp - 0x204]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov eax, dword [ebp - 0x2c]
add esp, 0x24
cmp dword [ebp - 0x28], eax
je 0x100df78c
mov ecx, 0xfa
lea esi, [ebp - 0x588]
mov edi, eax
rep movsd dword es:[edi], dword [esi]
mov edx, dword [ebp - 0x2c]
add edx, 0x3e8
mov dword [ebp - 0x2c], edx
jmp 0x100df79f
lea ecx, [ebp - 0x588]
push ecx
push eax
lea ecx, [ebp - 0x30]
call fcn.100e1af0
mov edx, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x30]
mov eax, 0x10624dd3
sub edx, ecx
imul edx
lea esi, [ecx - 0x3e8]
sar edx, 6
mov eax, edx
shr eax, 0x1f
add eax, edx
imul eax, eax, 0x3e8
add esi, eax
push 0x280
push 0
lea edi, [esi + 4]
mov dword [esi], 0x23ab45db
push edi
call sub.VCRUNTIME140.dll_memset
push 0x100
lea eax, [esi + 0x284]
push 0
push eax
mov dword [ebp - 0x164], eax
call sub.VCRUNTIME140.dll_memset
push 0x48
lea eax, [esi + 0x384]
push 0
push eax
mov dword [ebp - 0x15c], eax
call sub.VCRUNTIME140.dll_memset
add esp, 0x24
cmp dword [ebx + 0x10], 0x13f
ja 0x100df838
cmp dword [ebx + 0x14], 8
mov ecx, ebx
jb 0x100df81e
mov ecx, dword [ebx]
sub edi, ecx
movzx eax, word [ecx]
lea ecx, [ecx + 2]
mov word [edi + ecx - 2], ax
test ax, ax
jne 0x100df820
mov edi, dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
jmp 0x100df854
cmp dword [ebx + 0x14], 8
mov eax, ebx
jb 0x100df842
mov eax, dword [ebx]
push 0x13e
push eax
push edi
mov edi, dword [sym.imp.api_ms_win_crt_string_l1_1_0.dll_wcsncpy]
call edi
add esp, 0xc
cmp dword [ebx + 0x28], 0x7f
ja 0x100df882
cmp dword [ebx + 0x2c], 8
lea ecx, [ebx + 0x18]
jb 0x100df865
mov ecx, dword [ecx]
mov edx, dword [ebp - 0x164]
sub edx, ecx
nop dword [eax]
movzx eax, word [ecx]
lea ecx, [ecx + 2]
mov word [edx + ecx - 2], ax
test ax, ax
jne 0x100df870
jmp 0x100df89b
cmp dword [ebx + 0x2c], 8
lea eax, [ebx + 0x18]
jb 0x100df88d
mov eax, dword [eax]
push 0x7e
push eax
push dword [ebp - 0x164]
call edi
add esp, 0xc
cmp dword [ebx + 0x40], 0x23
lea eax, [ebx + 0x30]
ja 0x100df8c6
cmp dword [eax + 0x14], 8
jb 0x100df8ac
mov eax, dword [eax]
mov edx, dword [ebp - 0x15c]
sub edx, eax
movzx ecx, word [eax]
lea eax, [eax + 2]
mov word [edx + eax - 2], cx
test cx, cx
jne 0x100df8b4
jmp 0x100df8dc
cmp dword [eax + 0x14], 8
jb 0x100df8ce
mov eax, dword [eax]
push 0x23
push eax
push dword [ebp - 0x15c]
call edi
add esp, 0xc
mov eax, dword [ebx + 0x48]
mov ecx, dword [ebp - 0x160]
mov dword [esi + 0x3cc], eax
mov eax, dword [ebx + 0x4c]
mov dword [esi + 0x3d0], eax
mov eax, dword [ebx + 0x50]
mov dword [esi + 0x3d4], eax
mov eax, dword [ebx + 0x54]
mov dword [esi + 0x3d8], eax
mov eax, dword [ebx + 0x58]
mov dword [esi + 0x3dc], eax
mov eax, dword [ebx + 0x5c]
mov dword [esi + 0x3e0], eax
mov eax, dword [ebx + 0x60]
mov dword [esi + 0x3e4], eax
mov edi, dword [ebp - 0x18]
mov esi, dword [ebp - 0x1c]
mov ebx, dword [ebp - 0x158]
add ecx, 0x68
mov dword [ebp - 0x160], ecx
mov eax, 0x4ec4ec4f
mov ecx, edi
inc ebx
sub ecx, esi
mov dword [ebp - 0x158], ebx
imul ecx
mov ecx, dword [ebp - 0x160]
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp ebx, eax
jb 0x100df6e5
mov eax, dword [ebp - 0x30]
cmp eax, dword [ebp - 0x2c]
jne 0x100dfa31
mov byte [ebp - 4], 3
mov esi, dword [ebp - 0x30]
test esi, esi
je 0x100df9d2
mov ecx, dword [ebp - 0x28]
mov eax, 0x10624dd3
sub ecx, esi
imul ecx
sar edx, 6
mov eax, edx
shr eax, 0x1f
add eax, edx
imul ecx, eax, 0x3e8
mov eax, esi
cmp ecx, 0x1000
jb 0x100df9b3
mov esi, dword [esi - 4]
add ecx, 0x23
sub eax, esi
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100df9b3
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push esi
call fcn.1019e7f9
add esp, 8
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 0
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x1c]
test ecx, ecx
je 0x100dfedd
mov edx, dword [ebp - 0x18]
push ecx
call fcn.100e2050
mov ecx, dword [ebp - 0x14]
mov eax, 0x4ec4ec4f
mov esi, dword [ebp - 0x1c]
add esp, 4
sub ecx, esi
imul ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
imul ecx, eax, 0x68
mov eax, esi
cmp ecx, 0x1000
jb 0x100dfebe
mov esi, dword [esi - 4]
add ecx, 0x23
sub eax, esi
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100dfebe
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
lea ecx, [ebp - 0x44]
call fcn.1007a960
call fcn.1007f3b0
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x150]
call fcn.1019b0b0
mov ecx, dword [ebp - 0x2c]
mov eax, 0x10624dd3
mov esi, dword [ebp - 0x30]
sub ecx, esi
imul ecx
lea ecx, [ebp - 0x44]
sar edx, 6
mov eax, edx
shr eax, 0x1f
add eax, edx
imul eax, eax, 0x3e8
push ecx
lea ecx, [ebp - 0x150]
push eax
push esi
call fcn.1019b140
test al, al
jne 0x100dfae1
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x44]
call fcn.1007f330
mov byte [ebp - 4], 3
mov esi, dword [ebp - 0x30]
test esi, esi
je 0x100df9d2
mov ecx, dword [ebp - 0x28]
mov eax, 0x10624dd3
sub ecx, esi
imul ecx
sar edx, 6
mov eax, edx
shr eax, 0x1f
add eax, edx
imul ecx, eax, 0x3e8
mov eax, esi
cmp ecx, 0x1000
jb 0x100df9b3
mov esi, dword [esi - 4]
add ecx, 0x23
sub eax, esi
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x100df9b3
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
lea ecx, [ebp - 0x44]
call fcn.1007fa60
mov edx, eax
call fcn.1007fa50
mov ecx, dword [edx]
cmp ecx, dword [eax]
je 0x100dfa82
mov ebx, dword [ebp - 0x168]
mov ecx, ebx
cmp dword [ebx + 0x14], 8
jb 0x100dfb06
mov ecx, dword [ebx]
sub esp, 8
mov edx, 0x40000000
push 4
sub esp, 8
call fcn.100b47d0
mov esi, eax
add esp, 0x14
cmp esi, 0xffffffff
je 0x100dfb26
test esi, esi
jne 0x100dfb88
push ecx
push 0x101e3b24
mov ecx, ebx
call fcn.100b3780
cmp eax, 0xffffffff
je 0x100dfb88
push eax
push 0
lea eax, [ebp - 0x148]
mov ecx, ebx
push eax
call fcn.1002ab80
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x148]
call fcn.100b2e70
cmp dword [ebx + 0x14], 8
jb 0x100dfb60
mov ebx, dword [ebx]
sub esp, 8
mov edx, 0x40000000
mov ecx, ebx
push 4
sub esp, 8
call fcn.100b47d0
add esp, 0x14
mov esi, eax
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x148]
call fcn.10005540
cmp esi, 0xffffffff
je 0x100dfa82
test esi, esi
je 0x100dfa82
push 0
push 0
push 0
push esi
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
lea ecx, [ebp - 0x44]
mov dword [ebp - 0x48], 0
call fcn.1007fa70
push 0
mov edx, dword [eax]
lea eax, [ebp - 0x48]
push eax
call fcn.1007f320
push eax
push edx
push esi
call dword [sym.imp.KERNEL32.dll_WriteFile]
push esi
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
mov edi, dword [sym.imp.KERNEL32.dll_CloseHandle]
push esi
call edi
lea ecx, [ebp - 0x44]
call fcn.1007f320
cmp dword [ebp - 0x48], eax
jne 0x100dfda8
mov edx, dword [ebp - 0x16c]
lea eax, [ebp - 0x1c]
cmp edx, eax
je 0x100dfc1b
mov ecx, dword [edx]
mov eax, dword [ebp - 0x1c]
mov dword [edx], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x1c], ecx
mov ecx, dword [edx + 4]
mov dword [edx + 4], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x18], ecx
mov ecx, dword [edx + 8]
mov dword [edx + 8], eax
mov dword [ebp - 0x14], ecx
mov ecx, dword [edx + 4]
mov eax, 0x4ec4ec4f
mov esi, dword [edx]
xor ebx, ebx
sub ecx, esi
imul ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x100dfc71
xor edi, edi
nop dword [eax]
mov eax, dword [ebp - 0x16c]
lea edi, [edi + 0x68]
mov byte [edi + esi - 4], 0
inc ebx
mov ecx, dword [eax + 4]
mov esi, dword [eax]
sub ecx, esi
mov eax, 0x4ec4ec4f
imul ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp ebx, eax
jb 0x100dfc40
mov edi, dword [sym.imp.KERNEL32.dll_CloseHandle]
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x44]
call fcn.1007f330
mov byte [ebp - 4], 3
mov esi, dword [ebp - 0x30]
test esi, esi
je 0x100dfce1
mov ecx, dword [ebp - 0x28]
mov eax, 0x10624dd3
sub ecx, esi
imul ecx
sar edx, 6
mov eax, edx
shr eax, 0x1f
add eax, edx
imul ecx, eax, 0x3e8
mov eax, esi
cmp ecx, 0x1000
jb 0x100dfcc2
mov esi, dword [esi - 4]
add ecx, 0x23
sub eax, esi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100dfadb
push ecx
push esi
call fcn.1019e7f9
add esp, 8
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 0
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x1c]
test ecx, ecx
je 0x100dfd51
mov edx, dword [ebp - 0x18]
push ecx
call fcn.100e2050
mov ecx, dword [ebp - 0x14]
mov eax, 0x4ec4ec4f
mov esi, dword [ebp - 0x1c]
add esp, 4
sub ecx, esi
imul ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
imul ecx, eax, 0x68
mov eax, esi
cmp ecx, 0x1000
jb 0x100dfd32
mov esi, dword [esi - 4]
add ecx, 0x23
sub eax, esi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100dfadb
push ecx
push esi
call fcn.1019e7f9
add esp, 8
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0
mov byte [ebp - 4], 1
cmp byte [ebp - 0x151], 0
je 0x100dfd70
mov eax, dword [ebp - 0x24]
test eax, eax
je 0x100dfd6c
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov byte [ebp - 0x20], 0
mov dword [ebp - 0x38], 0
mov byte [ebp - 4], 0
mov eax, dword [ebp - 0x24]
test eax, eax
je 0x100dfd8c
push eax
call edi
mov dword [ebp - 0x24], 0
mov word [ebp - 0x20], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x60]
call fcn.10005540
mov al, 1
jmp 0x100dff33
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x44]
call fcn.1007f330
mov byte [ebp - 4], 3
mov esi, dword [ebp - 0x30]
test esi, esi
je 0x100dfe18
mov ecx, dword [ebp - 0x28]
mov eax, 0x10624dd3
sub ecx, esi
imul ecx
sar edx, 6
mov eax, edx
shr eax, 0x1f
add eax, edx
imul ecx, eax, 0x3e8
mov eax, esi
cmp ecx, 0x1000
jb 0x100dfdf9
mov esi, dword [esi - 4]
add ecx, 0x23
sub eax, esi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100dfadb
push ecx
push esi
call fcn.1019e7f9
add esp, 8
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x28], 0
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x1c]
test ecx, ecx
je 0x100dfe88
mov edx, dword [ebp - 0x18]
push ecx
call fcn.100e2050
mov ecx, dword [ebp - 0x14]
mov eax, 0x4ec4ec4f
mov esi, dword [ebp - 0x1c]
add esp, 4
sub ecx, esi
imul ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
imul ecx, eax, 0x68
mov eax, esi
cmp ecx, 0x1000
jb 0x100dfe69
mov esi, dword [esi - 4]
add ecx, 0x23
sub eax, esi
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x100dfadb
push ecx
push esi
call fcn.1019e7f9
add esp, 8
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0
mov byte [ebp - 4], 1
cmp byte [ebp - 0x151], 0
je 0x100dfea7
mov eax, dword [ebp - 0x24]
test eax, eax
je 0x100dfea3
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov byte [ebp - 0x20], 0
mov dword [ebp - 0x38], 0
mov byte [ebp - 4], 0
mov eax, dword [ebp - 0x24]
test eax, eax
je 0x100dff1c
push eax
call edi
jmp 0x100dff15
push ecx
push esi
call fcn.1019e7f9
add esp, 8
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x14], 0
mov byte [ebp - 4], 1
cmp byte [ebp - 0x151], 0
je 0x100dfefc
mov eax, dword [ebp - 0x24]
test eax, eax
je 0x100dfef8
push eax
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
mov byte [ebp - 0x20], 0
mov dword [ebp - 0x38], 0
mov byte [ebp - 4], 0
mov eax, dword [ebp - 0x24]
test eax, eax
je 0x100dff1c
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x24], 0
mov word [ebp - 0x20], 0
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x60]
call fcn.10005540
xor al, al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.1019e7b8
mov esp, ebp
pop ebp
ret 0xc
call fcn.100e0fd0
int3