Function at 0x100c68d4
Capabilities:
Create process on windows
Delete file

Disassembly:
push ebp
sub esp, 0x6c
lea ebp, [esp - 4]
mov eax, dword [0x1019c8c8]
xor eax, ebp
mov dword [ebp + 0x6c], eax
push 0xc0
mov eax, 0x101482f1
call fcn.101018b2
push dword [ebp + 0x78]
xor ebx, ebx
lea ecx, [ebp + 0x14]
mov dword [ebp - 0x18], ebx
call fcn.100f73a8
mov dword [ebp - 4], ebx
mov dword [ebp + 0x30], ebx
mov dword [ebp + 0x48], ebx
lea eax, [ebp + 0x30]
push eax
push ebx
lea ecx, [ebp + 0x14]
mov byte [ebp - 4], 2
call fcn.100f65c0
cmp eax, ebx
mov eax, dword [ebp + 0x30]
jl 0x100c743f
cmp eax, ebx
je 0x100c743f
mov ecx, dword [0x1019a028]
mov dword [ebp + 0x5c], ecx
mov dword [ebp + 0x2c], ebx
lea ecx, [ebp + 0x48]
push ecx
push eax
lea ecx, [ebp + 0x14]
mov byte [ebp - 4], 4
call fcn.100f65c0
cmp eax, ebx
jl 0x100c69ee
cmp dword [ebp + 0x48], ebx
je 0x100c69ee
push dword [ebp + 0x48]
lea eax, [ebp + 0x10]
push eax
lea ecx, [ebp + 0x14]
call fcn.100f6fe7
push eax
lea ecx, [ebp + 0x5c]
mov byte [ebp - 4], 5
call fcn.10005459
lea ecx, [ebp + 0x10]
call fcn.100015d9
push 0x10162f08
push dword [ebp + 0x5c]
call fcn.10002de4
test eax, eax
pop ecx
pop ecx
je 0x100c69d8
mov dword [ebp + 0x64], ebx
lea eax, [ebp + 0x64]
push eax
push dword [ebp + 0x48]
lea ecx, [ebp + 0x14]
mov byte [ebp - 4], 6
call fcn.100f6646
mov esi, eax
mov eax, dword [ebp + 0x64]
cmp dword [ebp + 0x48], eax
je 0x100c69c4
push eax
lea eax, [ebp + 0x48]
push eax
call fcn.1000299a
mov eax, dword [ebp + 0x64]
cmp eax, ebx
mov byte [ebp - 4], 4
je 0x100c69d2
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
cmp esi, ebx
jge 0x100c6957
jmp 0x100c69ee
cmp dword [ebp + 0x48], ebx
je 0x100c69ee
push dword [ebp + 0x48]
lea eax, [ebp + 0x2c]
push eax
call fcn.1000299a
cmp dword [ebp + 0x2c], ebx
jne 0x100c6a2a
lea ecx, [ebp + 0x5c]
call fcn.100015d9
mov eax, dword [ebp + 0x48]
cmp eax, ebx
mov byte [ebp - 4], 1
je 0x100c6a07
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp + 0x30]
cmp eax, ebx
mov byte [ebp - 4], bl
je 0x100c6a17
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x14]
call fcn.100f68a7
mov eax, ebx
jmp 0x100c746e
mov dword [ebp + 0x60], ebx
mov byte [ebp - 4], 7
cmp dword [ebp + 0x60], ebx
je 0x100c6a73
mov dword [ebp + 0x64], ebx
lea eax, [ebp + 0x64]
push eax
push dword [ebp + 0x60]
lea ecx, [ebp + 0x14]
mov byte [ebp - 4], 8
call fcn.100f6646
mov esi, eax
mov eax, dword [ebp + 0x64]
cmp dword [ebp + 0x60], eax
je 0x100c6a63
push eax
lea eax, [ebp + 0x60]
push eax
call fcn.1000299a
mov eax, dword [ebp + 0x64]
cmp eax, ebx
mov byte [ebp - 4], 7
je 0x100c6a84
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
jmp 0x100c6a84
lea eax, [ebp + 0x60]
push eax
push dword [ebp + 0x2c]
lea ecx, [ebp + 0x14]
call fcn.100f65c0
mov esi, eax
cmp esi, ebx
mov ecx, dword [ebp + 0x60]
jl 0x100c73ea
cmp ecx, ebx
je 0x100c73ea
mov eax, dword [0x1019a028]
mov dword [ebp + 0x3c], eax
mov dword [ebp + 0x50], eax
mov dword [ebp + 0x58], eax
mov dword [ebp + 0x4c], eax
mov dword [ebp + 0x34], eax
fld qword [0x10162f00]
fstp qword [ebp - 0x88]
mov dword [ebp + 8], ebx
mov dword [ebp + 0x24], 0xffff
mov dword [ebp + 0x68], eax
mov dword [ebp + 0x44], eax
push ecx
lea eax, [ebp - 0x70]
push eax
lea ecx, [ebp + 0x14]
mov byte [ebp - 4], 0xf
call fcn.100f6fe7
push eax
lea ecx, [ebp + 0x3c]
mov byte [ebp - 4], 0x10
call fcn.10005459
lea ecx, [ebp - 0x70]
mov byte [ebp - 4], 0xf
call fcn.100015d9
push 0x10162e68
push dword [ebp + 0x3c]
call fcn.10101e50
test eax, eax
pop ecx
pop ecx
jne 0x100c6b0b
mov dword [ebp + 8], 1
push 0x101564b4
push dword [ebp + 0x60]
lea eax, [ebp - 0x78]
push eax
lea ecx, [ebp + 0x14]
call fcn.100f6db4
push eax
lea ecx, [ebp + 0x50]
mov byte [ebp - 4], 0x11
call fcn.10005459
lea ecx, [ebp - 0x78]
mov byte [ebp - 4], 0xf
call fcn.100015d9
push 0x10162e48
push dword [ebp + 0x60]
lea eax, [ebp - 0x80]
push eax
lea ecx, [ebp + 0x14]
call fcn.100f6db4
push eax
lea ecx, [ebp + 0x58]
mov byte [ebp - 4], 0x12
call fcn.10005459
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0xf
call fcn.100015d9
push str.path
push dword [ebp + 0x60]
lea eax, [ebp + 0x40]
push eax
lea ecx, [ebp + 0x14]
call fcn.100f6db4
lea eax, [ebp - 0x68]
push eax
mov byte [ebp - 4], 0x13
call fcn.100deb14
pop ecx
lea ecx, [ebp + 0x40]
push ecx
push eax
lea eax, [ebp - 0x6c]
push eax
mov byte [ebp - 4], 0x14
call fcn.1000c751
push eax
lea ecx, [ebp + 0x68]
mov byte [ebp - 4], 0x15
call fcn.10005459
lea ecx, [ebp - 0x6c]
call fcn.100015d9
lea ecx, [ebp - 0x68]
mov byte [ebp - 4], 0x13
call fcn.100015d9
push str.param
push dword [ebp + 0x60]
lea eax, [ebp - 0x48]
push eax
lea ecx, [ebp + 0x14]
call fcn.100f6db4
push eax
lea ecx, [ebp + 0x44]
mov byte [ebp - 4], 0x16
call fcn.10005459
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x13
call fcn.100015d9
push 0x1015e85c
push dword [ebp + 0x60]
lea eax, [ebp - 0x3c]
push eax
lea ecx, [ebp + 0x14]
call fcn.100f6db4
mov byte [ebp - 4], 0x17
push eax
lea ecx, [ebp + 0x4c]
call fcn.10005459
lea ecx, [ebp - 0x3c]
mov byte [ebp - 4], 0x13
call fcn.100015d9
push 0x101567dc
push dword [ebp + 0x60]
lea eax, [ebp - 0x50]
push eax
lea ecx, [ebp + 0x14]
call fcn.100f6db4
push eax
lea ecx, [ebp + 0x5c]
mov byte [ebp - 4], 0x18
call fcn.10005459
lea ecx, [ebp - 0x50]
mov byte [ebp - 4], 0x13
call fcn.100015d9
mov eax, dword [ebp + 0x5c]
cmp dword [eax - 8], ebx
jne 0x100c6c52
mov dword [ebp + 4], 1
jmp 0x100c6c5c
push eax
call fcn.10101418
pop ecx
mov dword [ebp + 4], eax
push str.win_v
push dword [ebp + 0x60]
lea eax, [ebp - 0x7c]
push eax
lea ecx, [ebp + 0x14]
call fcn.100f6db4
push eax
lea ecx, [ebp + 0x5c]
mov byte [ebp - 4], 0x19
call fcn.10005459
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0x13
call fcn.100015d9
mov eax, dword [ebp + 0x5c]
cmp dword [eax - 8], ebx
jne 0x100c6c96
mov dword [ebp - 0x10], ebx
jmp 0x100c6ca0
push eax
call fcn.10101418
pop ecx
mov dword [ebp - 0x10], eax
push str.win_v_max
push dword [ebp + 0x60]
lea eax, [ebp - 0x58]
push eax
lea ecx, [ebp + 0x14]
call fcn.100f6db4
push eax
lea ecx, [ebp + 0x5c]
mov byte [ebp - 4], 0x1a
call fcn.10005459
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 0x13
call fcn.100015d9
mov eax, dword [ebp + 0x5c]
cmp dword [eax - 8], ebx
je 0x100c6cdf
push eax
call fcn.10101418
pop ecx
mov dword [ebp + 0x24], eax
push str.ie_v
push dword [ebp + 0x60]
lea eax, [ebp - 0x74]
push eax
lea ecx, [ebp + 0x14]
call fcn.100f6db4
push eax
lea ecx, [ebp + 0x5c]
mov byte [ebp - 4], 0x1b
call fcn.10005459
lea ecx, [ebp - 0x74]
mov byte [ebp - 4], 0x13
call fcn.100015d9
mov eax, dword [ebp + 0x5c]
cmp dword [eax - 8], ebx
jne 0x100c6d18
fldz
jmp 0x100c6d56
push ebx
lea ecx, [ebp + 0x5c]
call fcn.10001a82
mov edi, eax
cmp edi, ebx
je 0x100c6d36
push edi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
inc eax
cmp eax, 0x3fffffff
jle 0x100c6d3a
xor eax, eax
jmp 0x100c6d4f
lea esi, [eax + eax]
mov eax, esi
call fcn.10102de0
mov eax, esp
push ebx
push esi
push edi
push eax
call fcn.1000c619
push eax
call fcn.10105dc9
pop ecx
push str.ie_v_max
fstp qword [ebp - 0x60]
push dword [ebp + 0x60]
lea eax, [ebp - 0x64]
push eax
lea ecx, [ebp + 0x14]
call fcn.100f6db4
push eax
lea ecx, [ebp + 0x5c]
mov byte [ebp - 4], 0x1c
call fcn.10005459
lea ecx, [ebp - 0x64]
mov byte [ebp - 4], 0x13
call fcn.100015d9
mov eax, dword [ebp + 0x5c]
cmp dword [eax - 8], ebx
je 0x100c6dd2
push ebx
lea ecx, [ebp + 0x5c]
call fcn.10001a82
mov edi, eax
cmp edi, ebx
je 0x100c6dac
push edi
call dword [sym.imp.KERNEL32.dll_lstrlenW]
inc eax
cmp eax, 0x3fffffff
jle 0x100c6db0
xor eax, eax
jmp 0x100c6dc5
lea esi, [eax + eax]
mov eax, esi
call fcn.10102de0
mov eax, esp
push ebx
push esi
push edi
push eax
call fcn.1000c619
push eax
call fcn.10105dc9
fstp qword [ebp - 0x88]
pop ecx
mov eax, dword [ebp + 0x4c]
cmp dword [eax - 8], 1
mov dword [ebp + 0xc], ebx
jle 0x100c6eb7
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x20], ebx
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x1c]
push eax
push ebx
lea ecx, [ebp + 0x4c]
mov byte [ebp - 4], 0x1d
mov dword [ebp - 0x1c], 0x3a
mov dword [ebp - 0x14], ebx
call fcn.10001a82
push eax
jmp 0x100c6e38
push eax
lea ecx, [ebp - 0x40]
call fcn.1000587e
push eax
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x1e
call fcn.1001e3c9
lea ecx, [ebp - 0x40]
mov byte [ebp - 4], 0x1d
call fcn.100015d9
lea eax, [ebp - 0x14]
push eax
lea eax, [ebp - 0x1c]
push eax
push ebx
call fcn.1010457e
add esp, 0xc
cmp eax, ebx
jne 0x100c6e0d
cmp dword [ebp - 0x24], ebx
je 0x100c6e9c
mov eax, dword [0x1019a028]
mov dword [ebp + 0x64], eax
lea eax, [ebp + 0x64]
push eax
mov ecx, 0x1019e718
mov byte [ebp - 4], 0x1f
call fcn.10036494
xor edi, edi
cmp dword [ebp - 0x24], ebx
jle 0x100c6e94
mov esi, dword [ebp + 0x64]
push edi
lea ecx, [ebp - 0x28]
call fcn.1001be44
mov eax, dword [eax]
push esi
push eax
call fcn.10101e50
test eax, eax
pop ecx
pop ecx
je 0x100c6e8d
inc edi
cmp edi, dword [ebp - 0x24]
jl 0x100c6e6a
jmp 0x100c6e94
mov dword [ebp + 0xc], 1
lea ecx, [ebp + 0x64]
call fcn.100015d9
lea ecx, [ebp - 0x28]
mov byte [ebp - 4], 0x13
call fcn.1001c3eb
cmp dword [ebp + 0xc], ebx
je 0x100c6eb7
xor eax, eax
cmp dword [ebp + 4], ebx
sete al
jmp 0x100c6eba
mov eax, dword [ebp + 4]
cmp eax, ebx
jne 0x100c6f07
lea ecx, [ebp + 0x40]
call fcn.100015d9
lea ecx, [ebp + 0x44]
call fcn.100015d9
lea ecx, [ebp + 0x68]
call fcn.100015d9
lea ecx, [ebp + 0x34]
call fcn.100015d9
lea ecx, [ebp + 0x4c]
call fcn.100015d9
lea ecx, [ebp + 0x58]
call fcn.100015d9
lea ecx, [ebp + 0x50]
call fcn.100015d9
lea ecx, [ebp + 0x3c]
mov byte [ebp - 4], 7
call fcn.100015d9
jmp 0x100c6a31
push 0x2f
lea ecx, [ebp + 0x50]
call fcn.1001dab5
mov ecx, dword [ebp + 0x50]
mov ecx, dword [ecx - 8]
sub ecx, eax
dec ecx
push ecx
lea eax, [ebp + 0x54]
push eax
lea ecx, [ebp + 0x50]
call fcn.1000e753
push 0x2e
lea ecx, [ebp + 0x54]
mov byte [ebp - 4], 0x20
call fcn.1001dab5
cmp eax, 0xffffffff
je 0x100c7281
push eax
lea eax, [ebp - 0x44]
push eax
lea ecx, [ebp + 0x54]
call fcn.1000e702
push eax
lea ecx, [ebp + 0x68]
mov byte [ebp - 4], 0x21
call fcn.1000be54
lea ecx, [ebp - 0x44]
mov byte [ebp - 4], 0x20
call fcn.100015d9
cmp dword [ebp + 8], ebx
lea ecx, [ebp + 0x68]
je 0x100c6f73
push str..dll
jmp 0x100c6f78
push 0x1015c73c
call fcn.1001c185
cmp dword [ebp - 0x10], ebx
je 0x100c6f90
call fcn.100dc84e
cmp dword [ebp - 0x10], eax
jg 0x100c7281
call fcn.100dc84e
cmp dword [ebp + 0x24], eax
jl 0x100c7281
fld qword [ebp - 0x60]
fcomp qword [0x1015b778]
fnstsw ax
test ah, 0x44
jnp 0x100c6fc1
call fcn.100dce86
fcomp qword [ebp - 0x60]
fnstsw ax
test ah, 1
jne 0x100c7281
call fcn.100dce86
fcomp qword [ebp - 0x88]
fnstsw ax
test ah, 0x41
je 0x100c7281
mov eax, dword [0x1019a028]
mov dword [ebp + 0x64], eax
mov esi, dword [ebp + 0x54]
push 0x104
push 0x105
lea ecx, [ebp + 0x64]
mov byte [ebp - 4], 0x22
call fcn.10001a82
push eax
push esi
mov esi, 0x1019ee20
push str.SoftwareBaiduBaiduToolbarRO
mov ecx, esi
call fcn.100101c4
push eax
call fcn.100dfbef
add esp, 0x14
push 0xffffffffffffffff
lea ecx, [ebp + 0x64]
call fcn.10001c5b
mov eax, dword [ebp + 0x64]
cmp dword [eax - 8], ebx
je 0x100c7039
push dword [ebp + 0x58]
push eax
call fcn.10002de4
test eax, eax
pop ecx
pop ecx
je 0x100c7279
cmp dword [ebp + 0x7c], ebx
jne 0x100c728e
lea eax, [ebp - 0x4c]
push eax
call fcn.100dfb58
pop ecx
lea ecx, [ebp + 0x54]
push ecx
push eax
lea eax, [ebp + 0x38]
push eax
mov byte [ebp - 4], 0x23
call fcn.1000c751
lea ecx, [ebp - 0x4c]
mov byte [ebp - 4], 0x25
call fcn.100015d9
push dword [ebp + 0x38]
mov edi, dword [sym.imp.KERNEL32.dll_DeleteFileW]
call edi
push dword [ebp + 0x50]
call dword [sym.imp.WININET.dll_DeleteUrlCacheEntryW]
push 1
push 0x4e20
push ecx
lea eax, [ebp + 0x38]
mov ecx, esp
mov dword [ebp + 0x24], esp
push eax
call fcn.1000584b
push ecx
lea eax, [ebp + 0x50]
mov ecx, esp
mov dword [ebp + 0xc], esp
push eax
mov byte [ebp - 4], 0x26
call fcn.1000584b
mov byte [ebp - 4], 0x25
call fcn.100dbabe
add esp, 0x10
cmp eax, ebx
je 0x100c732d
push dword [ebp + 0x58]
call fcn.10101418
pop ecx
push dword [ebp + 0x38]
lea ecx, [ebp + 0x10]
mov dword [ebp + 0x24], eax
call fcn.10018da3
mov eax, dword [eax]
cmp eax, ebx
mov byte [ebp - 4], 0x27
je 0x100c70e0
mov eax, dword [eax]
jmp 0x100c70e2
xor eax, eax
push eax
call fcn.100da707
cmp dword [ebp + 0x24], eax
pop ecx
mov ecx, dword [ebp + 0x10]
setne byte [ebp + 0x2b]
cmp ecx, ebx
mov byte [ebp - 4], 0x25
je 0x100c7103
call fcn.10019dbb
mov dword [ebp + 0x10], ebx
cmp byte [ebp + 0x2b], bl
jne 0x100c732d
push dword [ebp + 0x68]
call fcn.100dd2fb
test eax, eax
pop ecx
je 0x100c7126
push dword [ebp + 0x68]
call edi
test eax, eax
je 0x100c726c
lea eax, [ebp - 0x54]
push eax
call fcn.100deb14
pop ecx
lea ecx, [ebp + 0x40]
push ecx
push eax
lea eax, [ebp]
push eax
mov byte [ebp - 4], 0x28
call fcn.1000c751
lea ecx, [ebp - 0x54]
mov byte [ebp - 4], 0x2a
call fcn.100015d9
push dword [ebp]
push dword [ebp + 0x38]
call fcn.100ddc2f
test eax, eax
pop ecx
pop ecx
je 0x100c73d8
xor edi, edi
inc edi
cmp dword [ebp + 8], ebx
mov dword [ebp - 0x18], edi
jne 0x100c722f
push 0x44
pop esi
push esi
lea eax, [ebp - 0xcc]
push ebx
push eax
call fcn.101027c0
xor eax, eax
lea edi, [ebp - 0x38]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
add esp, 0xc
mov dword [ebp - 0xcc], esi
stosd dword es:[edi], eax
call fcn.100dc9e9
test eax, eax
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0xcc]
push eax
push ebx
push ebx
push ebx
push ebx
push ebx
push ebx
lea ecx, [ebp + 0x44]
push ebx
je 0x100c71cb
call fcn.10001a82
push eax
push ebx
lea ecx, [ebp + 0x68]
call fcn.10001a82
push eax
call dword [sym.imp.KERNEL32.dll_CreateProcessW]
jmp 0x100c71db
call fcn.10001a82
push eax
push dword [ebp + 0x68]
push ebx
call dword [sym.imp.ADVAPI32.dll_CreateProcessAsUserW]
test eax, eax
je 0x100c7221
push 0xffffffffffffffff
push dword [ebp - 0x38]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push dword [ebp - 0x34]
mov edi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call edi
push dword [ebp - 0x38]
call edi
push dword [ebp + 0x58]
mov ecx, 0x1019ee20
push dword [ebp + 0x54]
push str.SoftwareBaiduBaiduToolbarRO
call fcn.100101c4
push eax
call fcn.100dfc9c
add esp, 0x10
push dword [ebp + 0x68]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push 1
push dword [ebp + 0x68]
call fcn.100ddaef
pop ecx
pop ecx
jmp 0x100c725e
push edi
push dword [ebp + 0x68]
call fcn.100da694
pop ecx
pop ecx
push dword [ebp + 0x58]
mov ecx, esi
push dword [ebp + 0x54]
push str.SoftwareBaiduBaiduToolbarRO
call fcn.100101c4
push eax
call fcn.100dfc9c
push edi
push dword [ebp + 0x68]
call fcn.100ddaef
add esp, 0x18
lea ecx, [ebp]
call fcn.100015d9
mov edi, dword [sym.imp.KERNEL32.dll_DeleteFileW]
push dword [ebp + 0x38]
call edi
lea ecx, [ebp + 0x38]
call fcn.100015d9
lea ecx, [ebp + 0x64]
call fcn.100015d9
lea ecx, [ebp + 0x54]
call fcn.100015d9
jmp 0x100c6ebe
lea ecx, [ebp + 0x64]
call fcn.100015d9
lea ecx, [ebp + 0x54]
call fcn.100015d9
lea ecx, [ebp + 0x40]
call fcn.100015d9
lea ecx, [ebp + 0x44]
call fcn.100015d9
lea ecx, [ebp + 0x68]
call fcn.100015d9
lea ecx, [ebp + 0x34]
call fcn.100015d9
lea ecx, [ebp + 0x4c]
call fcn.100015d9
lea ecx, [ebp + 0x58]
call fcn.100015d9
lea ecx, [ebp + 0x50]
call fcn.100015d9
lea ecx, [ebp + 0x3c]
call fcn.100015d9
mov eax, dword [ebp + 0x60]
cmp eax, ebx
mov byte [ebp - 4], 4
je 0x100c72ef
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp + 0x2c]
mov ecx, dword [eax]
push eax
mov byte [ebp - 4], 3
call dword [ecx + 8]
lea ecx, [ebp + 0x5c]
call fcn.100015d9
mov eax, dword [ebp + 0x48]
cmp eax, ebx
mov byte [ebp - 4], 1
je 0x100c7315
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp + 0x30]
cmp eax, ebx
mov byte [ebp - 4], bl
je 0x100c7325
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push 5
pop ebx
jmp 0x100c6a17
push dword [ebp + 0x38]
call edi
lea ecx, [ebp + 0x38]
call fcn.100015d9
lea ecx, [ebp + 0x64]
call fcn.100015d9
lea ecx, [ebp + 0x54]
call fcn.100015d9
lea ecx, [ebp + 0x40]
call fcn.100015d9
lea ecx, [ebp + 0x44]
call fcn.100015d9
lea ecx, [ebp + 0x68]
call fcn.100015d9
lea ecx, [ebp + 0x34]
call fcn.100015d9
lea ecx, [ebp + 0x4c]
call fcn.100015d9
lea ecx, [ebp + 0x58]
call fcn.100015d9
lea ecx, [ebp + 0x50]
call fcn.100015d9
lea ecx, [ebp + 0x3c]
call fcn.100015d9
mov eax, dword [ebp + 0x60]
cmp eax, ebx
mov byte [ebp - 4], 4
je 0x100c739b
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp + 0x2c]
mov ecx, dword [eax]
push eax
mov byte [ebp - 4], 3
call dword [ecx + 8]
lea ecx, [ebp + 0x5c]
call fcn.100015d9
mov eax, dword [ebp + 0x48]
cmp eax, ebx
mov byte [ebp - 4], 1
je 0x100c73c1
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp + 0x30]
cmp eax, ebx
mov byte [ebp - 4], bl
je 0x100c73d1
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push 2
jmp 0x100c7327
push dword [ebp + 0x38]
call edi
lea ecx, [ebp]
call fcn.100015d9
jmp 0x100c7332
cmp ecx, ebx
mov byte [ebp - 4], 4
je 0x100c73f8
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov eax, dword [ebp + 0x2c]
mov ecx, dword [eax]
push eax
mov byte [ebp - 4], 3
call dword [ecx + 8]
lea ecx, [ebp + 0x5c]
call fcn.100015d9
mov eax, dword [ebp + 0x48]
cmp eax, ebx
mov byte [ebp - 4], 1
je 0x100c741e
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp + 0x30]
cmp eax, ebx
mov byte [ebp - 4], bl
je 0x100c742e
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x14]
call fcn.100f68a7
mov eax, dword [ebp - 0x18]
jmp 0x100c746e
mov ecx, dword [ebp + 0x48]
cmp ecx, ebx
mov byte [ebp - 4], 1
je 0x100c7453
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov eax, dword [ebp + 0x30]
cmp eax, ebx
mov byte [ebp - 4], bl
je 0x100c7460
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp + 0x14]
call fcn.100f68a7
xor eax, eax
lea esp, [ebp - 0xdc]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp + 0x6c]
xor ecx, ebp
call fcn.101018a3
add ebp, 0x70
leave
ret 8