Function at 0x101cd4d
Capabilities:
Delete file

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
mov eax, 0x1af8
call fcn.01024e00
mov eax, dword [0x1036f44]
push ebx
push esi
push edi
mov edi, ecx
mov esi, dword [edi + 8]
xor ebx, ebx
mov dword [ebp - 4], eax
mov eax, dword [edi + 0x14]
push eax
mov dword [ebp - 0xa04], edi
mov dword [ebp - 0xa90], ebx
mov dword [ebp - 0xa8c], ebx
mov dword [ebp - 0xa88], 0xa
mov dword [ebp - 0xa84], ebx
mov dword [ebp - 0xa94], 0x1001770
mov byte [ebp - 0x9f6], bl
mov byte [ebp - 0x9f5], bl
call fcn.0101b8c2
push eax
push esi
call fcn.01018bbd
push 0x1001648
lea ecx, [ebp - 0x494]
call fcn.01006bd5
mov esi, dword [sym.imp.ole32.dll_CoCreateInstance]
lea eax, [ebp - 0xa44]
push eax
push 0x1002934
push 1
push ebx
push 0x10028a4
mov dword [ebp - 0xa44], ebx
call esi
cmp eax, ebx
mov dword [ebp - 0x9f4], eax
jl 0x101dfed
lea eax, [ebp - 0xa38]
push eax
push 0x1002478
push 1
push ebx
push 0x1002408
mov dword [ebp - 0xa38], ebx
call esi
cmp eax, ebx
mov dword [ebp - 0x9f4], eax
jl 0x101dfcd
mov eax, dword [ebp - 0xa38]
lea edx, [ebp - 0xa24]
push edx
push 0x1002418
mov dword [ebp - 0xa24], ebx
mov ecx, dword [eax]
push eax
call dword [ecx]
cmp eax, ebx
mov dword [ebp - 0x9f4], eax
jl 0x101dfbd
lea edx, [ebp - 0xa48]
push edx
lea eax, [edi + 0xc]
mov ecx, dword [eax]
push 0x10029f4
push eax
mov dword [ebp - 0xa48], ebx
call dword [ecx]
cmp eax, ebx
mov dword [ebp - 0x9f4], eax
jl 0x101dfad
push dword [edi + 0x3c]
lea ecx, [ebp - 0xac8]
call fcn.0101cd05
mov eax, dword [edi + 0x14c]
mov ecx, dword [edi + 0x3c]
push eax
push ecx
mov byte [ebp - 0xa11], bl
mov byte [ebp - 0x9fd], bl
mov dword [ebp - 0xa40], ebx
call fcn.01015dbb
cmp dword [edi + 0x14], ebx
mov dword [ebp - 0xab4], eax
mov dword [ebp - 0xa28], ebx
jle 0x101df7a
cmp byte [ebp - 0x9f6], bl
jne 0x101df7a
cmp byte [ebp - 0x9f5], bl
jne 0x101df7a
mov esi, dword [ebp - 0xa28]
mov eax, dword [edi + 0x20]
shl esi, 2
mov eax, dword [esi + eax]
mov ecx, edi
mov byte [ebp - 0x9fd], bl
mov dword [ebp - 0xa1c], esi
mov dword [edi + 0x2a4], eax
call fcn.01018fdf
test eax, eax
jne 0x101df69
mov eax, dword [ebp - 0xa44]
lea edx, [ebp - 0xa10]
push edx
mov edx, dword [edi + 0x20]
push 0x10029d4
mov dword [ebp - 0xa10], ebx
push dword [esi + edx]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x14]
cmp eax, ebx
mov dword [ebp - 0x9f4], eax
jl 0x101df5d
push dword [ebp - 0xa10]
lea edx, [edi + 0x258]
mov byte [ebp - 0xa20], bl
mov dword [ebp - 0xa0c], edx
call fcn.010194e9
mov eax, dword [ebp - 0xa10]
lea edx, [ebp - 0xa4c]
push edx
mov dword [ebp - 0xa4c], ebx
mov ecx, dword [eax]
push eax
call dword [ecx + 0x30]
test eax, eax
jl 0x101cfc4
push 0xc10
lea ecx, [ebp - 0x1690]
mov dword [ebp - 0x9fc], ebx
call fcn.0102634f
lea eax, [ebp - 0x9fc]
push eax
lea eax, [ebp - 0x1690]
push eax
push dword [ebp - 0xa4c]
call fcn.010265ea
lea ecx, [ebp - 0x1690]
mov byte [ebp - 0x9f7], al
call fcn.01006235
cmp byte [ebp - 0x9f7], bl
je 0x101cfc4
test byte [ebp - 0x9fc], 1
je 0x101cfc4
mov byte [ebp - 0xa20], 1
lea ecx, [ebp - 0x6b4]
mov dword [ebp - 0xa3c], ebx
mov dword [ebp - 0x9f4], ebx
mov dword [ebp - 0xa2c], ebx
mov dword [ebp - 0x9fc], ebx
mov dword [ebp - 0xa18], ebx
mov dword [ebp - 0xa08], ebx
mov dword [ebp - 0xa68], ebx
call fcn.01007096
mov ebx, dword [ebp - 0xa10]
lea eax, [ebp - 0x6b4]
push eax
lea eax, [ebp - 0xa18]
push eax
lea eax, [ebp - 0x9fc]
push eax
lea eax, [ebp - 0xa98]
push eax
lea eax, [ebp - 0x54]
push eax
lea eax, [ebp - 0xa08]
push eax
lea eax, [ebp - 0xa2c]
push eax
lea eax, [ebp - 0x9f4]
push eax
lea eax, [ebp - 0xa3c]
push eax
lea eax, [ebp - 0xa68]
call fcn.0101be36
test eax, eax
jl 0x101d0a0
lea eax, [ebp - 0x6b4]
push eax
push dword [ebp - 0xa68]
mov ebx, dword [edi + 8]
push dword [ebp - 0xa18]
lea eax, [ebp - 0x54]
push dword [ebp - 0x9fc]
push dword [ebp - 0xa98]
push eax
push dword [ebp - 0xa08]
mov eax, dword [edi + 0x20]
push dword [ebp - 0xa2c]
push dword [ebp - 0x9f4]
push dword [ebp - 0xa3c]
push dword [esi + eax]
push dword [ebp - 0xa28]
call fcn.0101a6a7
push eax
push ebx
call fcn.01018bbd
mov esi, dword [ebp - 0xa0c]
push 4
mov ebx, 0x10028b4
pop ecx
mov edi, ebx
xor eax, eax
repe cmpsd dword [esi], dword es:[edi]
mov dword [ebp - 0xa2c], 2
je 0x101d165
cmp byte [ebp - 0xa20], al
je 0x101d165
mov eax, dword [ebp - 0xa24]
mov ecx, dword [eax]
push 0x100
push dword [ebp - 0xa10]
push eax
call dword [ecx + 0xc]
test eax, eax
jl 0x101d165
mov eax, dword [ebp - 0xa24]
mov ecx, dword [eax]
lea edx, [ebp - 0xa6c]
push edx
push eax
call dword [ecx + 0x10]
test eax, eax
jl 0x101d165
and dword [ebp - 0xa08], 0
cmp dword [ebp - 0xa6c], 0
jle 0x101d165
mov eax, dword [ebp - 0xa24]
mov esi, ebx
lea edi, [ebp - 0x44]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea edx, [ebp - 0x44]
push edx
push dword [ebp - 0xa08]
movsd dword es:[edi], dword [esi]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x14]
test eax, eax
jl 0x101d151
mov edi, dword [ebp - 0xa0c]
push 4
pop ecx
lea esi, [ebp - 0x44]
xor eax, eax
repe cmpsd dword [esi], dword es:[edi]
jne 0x101d151
mov dword [ebp - 0xa2c], 0x100
inc dword [ebp - 0xa08]
mov eax, dword [ebp - 0xa08]
cmp eax, dword [ebp - 0xa6c]
jl 0x101d112
push dword [ebp - 0xa2c]
mov eax, dword [ebp - 0xa24]
push dword [ebp - 0xa10]
mov ecx, dword [eax]
push eax
call dword [ecx + 0xc]
test eax, eax
mov dword [ebp - 0x9f4], eax
jl 0x101de9c
mov eax, dword [ebp - 0xa24]
mov esi, ebx
lea edi, [ebp - 0x24]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea edx, [ebp - 0x24]
push edx
movsd dword es:[edi], dword [esi]
mov ecx, dword [eax]
push eax
call dword [ecx + 0x20]
test eax, eax
mov dword [ebp - 0x9f4], eax
jl 0x101de9c
mov edi, dword [ebp - 0xa0c]
push 4
pop ecx
mov esi, ebx
xor eax, eax
repe cmpsd dword [esi], dword es:[edi]
jne 0x101d1d9
lea esi, [ebp - 0x24]
lea edi, [ebp - 0x34]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea esi, [ebp - 0x24]
lea edi, [ebp - 0x14]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
jmp 0x101d200
mov esi, dword [ebp - 0xa0c]
mov ebx, dword [ebp - 0xa24]
lea edi, [ebp - 0x14]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea eax, [ebp - 0x34]
movsd dword es:[edi], dword [esi]
push eax
push dword [ebp - 0xa0c]
movsd dword es:[edi], dword [esi]
call fcn.01018f5d
mov ebx, 0x10028b4
mov eax, dword [ebp - 0xa04]
mov ecx, dword [eax + 0x34]
mov edx, dword [ebp - 0xa1c]
xor eax, eax
cmp dword [edx + ecx], eax
je 0x101d260
push 4
pop ecx
mov edi, ebx
lea esi, [ebp - 0x14]
xor edx, edx
repe cmpsd dword [esi], dword es:[edi]
je 0x101d260
cmp dword [ebp - 0x9fc], eax
je 0x101d260
cmp dword [ebp - 0xa18], eax
je 0x101d260
push dword [ebp - 0xa18]
lea eax, [ebp - 0x14]
push dword [ebp - 0x9fc]
push eax
call fcn.01026c05
test al, al
jne 0x101d260
mov eax, dword [ebp - 0xa04]
mov eax, dword [eax + 0x34]
mov ecx, dword [ebp - 0xa1c]
and dword [ecx + eax], 0
xor eax, eax
mov dword [ebp - 0xa08], eax
mov dword [ebp - 0xa7c], eax
mov dword [ebp - 0xa78], eax
mov dword [ebp - 0xa74], 0xa
mov dword [ebp - 0xa70], eax
mov dword [ebp - 0xa80], 0x1001770
mov ebx, dword [ebp - 0xa04]
mov ecx, ebx
call fcn.01018fdf
test eax, eax
jne 0x101de62
lea eax, [ebp - 0xa64]
push eax
push dword [ebp - 0xa10]
xor esi, esi
mov dword [ebp - 0xa64], 0x1001de4
mov dword [ebp - 0xa60], esi
mov dword [ebp - 0xa5c], esi
mov dword [ebp - 0xa58], 0xa
mov dword [ebp - 0xa54], esi
call fcn.0101cbc7
cmp eax, esi
mov dword [ebp - 0x9f4], eax
jl 0x101dc20
mov eax, dword [ebp - 0xa54]
lea edi, [eax + 0x114]
lea esi, [ebp - 0x34]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov ecx, dword [ebp - 0xa2c]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
lea edi, [eax + 0x124]
lea esi, [ebp - 0x14]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
mov dword [eax + 0x138], ecx
sub esp, 0x110
lea eax, [ebx + 0x38]
mov ecx, esp
push eax
call fcn.01006c15
call fcn.0100863b
cmp dword [ebx + 0x14], 1
jne 0x101d340
cmp byte [ebp - 0xa20], 0
jne 0x101d340
mov bl, 1
jmp 0x101d342
xor bl, bl
push dword [0x1037438]
lea ecx, [ebp - 0xcf8]
push 0x7c
call fcn.01007053
mov eax, dword [eax + 4]
mov ecx, dword [ebp - 0xa04]
mov esi, dword [ecx + 0x14c]
mov edi, dword [ecx + 0x3c]
lea edx, [ebp - 0xab4]
push edx
push ebx
push eax
push esi
push edi
lea eax, [ebp - 0xa64]
push eax
call fcn.0101c295
mov ebx, 0x1001644
lea ecx, [ebp - 0xcf8]
mov dword [ebp - 0x9f4], eax
mov dword [ebp - 0xcf8], ebx
call fcn.010047d1
xor eax, eax
cmp dword [ebp - 0x9f4], eax
jl 0x101dbf5
cmp dword [ebp - 0xa60], eax
mov dword [ebp - 0xa0c], eax
jle 0x101dc2c
mov eax, dword [ebp - 0xa0c]
mov ecx, dword [ebp - 0xa54]
imul eax, eax, 0x13c
lea esi, [eax + ecx]
lea eax, [ebp - 0x164]
push eax
mov ecx, esi
mov dword [ebp - 0xa18], esi
call fcn.0101a859
push 0
lea eax, [ebp - 0x274]
push eax
call fcn.01027fa6
lea ecx, [ebp - 0x164]
call fcn.01005f1a
test eax, eax
je 0x101db68
lea ecx, [ebp - 0x274]
call fcn.01005f1a
test eax, eax
je 0x101db68
mov eax, dword [ebp - 0xa04]
mov edi, dword [eax + 8]
mov eax, dword [eax + 0x20]
lea ecx, [ebp - 0x164]
push ecx
mov ecx, dword [ebp - 0xa1c]
push dword [ecx + eax]
push dword [ebp - 0xa28]
call fcn.0101b970
push eax
push edi
call fcn.01018bbd
and dword [ebp - 0x9fc], 0
cmp dword [esi + 0x138], 0x100
mov esi, dword [esi]
mov eax, dword [esi]
lea ecx, [ebp - 0x9fc]
push ecx
push esi
jne 0x101d499
call dword [eax + 0x30]
test eax, eax
jl 0x101d4d1
push 0xc18
lea ecx, [ebp - 0x17a8]
call fcn.0102634f
push 2
push 0
lea eax, [ebp - 0x17a8]
push eax
push dword [ebp - 0x9fc]
call fcn.0102644c
lea ecx, [ebp - 0x17a8]
jmp 0x101d4cc
call dword [eax + 0x30]
test eax, eax
jl 0x101d4d1
push 0xc18
lea ecx, [ebp - 0x19dc]
call fcn.0102634f
push 2
push 1
lea eax, [ebp - 0x19dc]
push eax
push dword [ebp - 0x9fc]
call fcn.0102644c
lea ecx, [ebp - 0x19dc]
call fcn.01006235
mov eax, dword [ebp - 0x9fc]
test eax, eax
je 0x101d4e1
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push 0
push dword [ebp - 0xa10]
call fcn.01027ab4
mov esi, dword [ebp - 0xa18]
mov eax, dword [esi + 0x138]
mov edi, dword [ebp - 0xa38]
mov dword [ebp - 0xa3c], eax
lea eax, [ebp - 0x274]
push eax
lea eax, [ebp - 0x1468]
push eax
mov dword [ebp - 0xa34], edi
call fcn.010078cc
mov eax, dword [eax + 4]
mov dword [ebp - 0x9fc], eax
mov eax, dword [ebp - 0xa04]
mov eax, dword [eax + 8]
mov dword [ebp - 0x9f4], eax
mov eax, dword [esi]
mov dword [ebp - 0xa9c], eax
lea eax, [ebp - 0xad8]
push eax
mov ecx, esi
call fcn.01019374
push dword [ebp - 0xa3c]
mov ecx, dword [edi]
push dword [ebp - 0xa48]
mov esi, eax
push dword [ebp - 0x9fc]
sub esp, 0x10
mov edi, esp
movsd dword es:[edi], dword [esi]
push 5
push dword [ebp - 0x9f4]
movsd dword es:[edi], dword [esi]
push dword [ebp - 0xa9c]
movsd dword es:[edi], dword [esi]
push dword [ebp - 0xa34]
movsd dword es:[edi], dword [esi]
call dword [ecx + 0xc]
lea ecx, [ebp - 0x1468]
mov dword [ebp - 0x9f4], eax
mov dword [ebp - 0x1468], ebx
call fcn.010047d1
mov ecx, dword [ebp - 0xa04]
call fcn.01018fdf
test eax, eax
jne 0x101d701
cmp dword [ebp - 0xa08], eax
je 0x101d5c5
cmp dword [ebp - 0x9f4], 0x80210003
je 0x101d726
cmp dword [ebp - 0x9f4], 0x80210009
je 0x101d726
cmp dword [ebp - 0x9f4], 0
jge 0x101d6ca
cmp byte [ebp - 0xa20], 0
mov byte [ebp - 0xa50], 0
je 0x101d61a
mov eax, dword [ebp - 0xa18]
cmp dword [eax + 0x138], 0x100
jne 0x101d61a
mov eax, dword [ebp - 0x270]
call fcn.0101908e
test al, al
je 0x101d61a
mov byte [ebp - 0xa50], 1
cmp byte [ebp - 0xa11], 0
je 0x101d666
cmp byte [ebp - 0xa20], 0
je 0x101d6c3
cmp byte [ebp - 0xa50], 0
jne 0x101d645
mov dword [ebp - 0x9f4], 0x80210003
jmp 0x101d6c3
cmp dword [ebp - 0x9f4], 0x80210002
je 0x101d65d
cmp dword [ebp - 0x9f4], 0x80210004
jne 0x101d6c3
and dword [ebp - 0x9f4], 0
jmp 0x101d6c3
mov ecx, dword [ebp - 0xa04]
cmp dword [ecx + 0x14], 1
jne 0x101d67f
cmp byte [ebp - 0xa20], 0
jne 0x101d67f
xor dl, dl
jmp 0x101d681
mov dl, 1
mov eax, dword [ebp - 0xa18]
mov eax, dword [eax + 0x138]
mov ecx, dword [ecx + 8]
cmp eax, 0x100
sete al
push eax
push dword [ebp - 0xa50]
lea eax, [ebp - 0x9f4]
push dword [ebp - 0xa20]
push edx
push eax
push dword [ebp - 0xa10]
push ecx
call fcn.0101af69
cmp eax, 2
je 0x101d71f
cmp eax, 5
jne 0x101d6eb
mov byte [ebp - 0x9fd], 1
xor al, al
cmp dword [ebp - 0x9f4], 1
jne 0x101d6dc
mov byte [ebp - 0x9f6], 1
test al, al
je 0x101d726
mov esi, dword [ebp - 0xa18]
jmp 0x101d445
cmp eax, 0x12
jne 0x101d6f9
mov byte [ebp - 0xa11], 1
jmp 0x101d6ca
cmp eax, 4
sete al
jmp 0x101d6cc
lea esi, [ebp - 0xa64]
mov dword [ebp - 0x9f4], 1
mov byte [ebp - 0x9f6], 1
call fcn.0101aaf5
jmp 0x101d726
mov byte [ebp - 0x9f6], 1
mov ecx, dword [ebp - 0xa18]
call fcn.01018c0f
cmp dword [ebp - 0x9f4], 0
jne 0x101d8c0
cmp dword [ebp - 0xa0c], 0
jne 0x101d855
mov esi, dword [ebp - 0xa04]
mov eax, dword [esi + 0x34]
mov edi, dword [ebp - 0xa1c]
cmp dword [edi + eax], 0
je 0x101d7db
lea eax, [ebp - 0x164]
push eax
lea eax, [ebp - 0x1358]
push eax
call fcn.010078cc
mov eax, dword [eax + 4]
mov dword [ebp - 0xa34], eax
lea eax, [ebp - 0x274]
push eax
lea eax, [ebp - 0xf18]
push eax
call fcn.010078cc
mov eax, dword [eax + 4]
lea ecx, [ebp - 0x14]
push ecx
mov ecx, dword [esi + 0x34]
push dword [edi + ecx]
lea ecx, [esi + 0x274]
push dword [ebp - 0xa34]
push eax
call fcn.01025a41
lea ecx, [ebp - 0xf18]
mov dword [ebp - 0x9f4], eax
mov dword [ebp - 0xf18], ebx
call fcn.010047d1
mov dword [ebp - 0x1358], ebx
lea ecx, [ebp - 0x1358]
call fcn.010047d1
jmp 0x101d86c
push 4
pop ecx
lea edi, [ebp - 0x14]
lea esi, [ebp - 0x34]
xor eax, eax
repe cmpsd dword [esi], dword es:[edi]
je 0x101d855
lea eax, [ebp - 0x164]
push eax
lea eax, [ebp - 0x1248]
push eax
call fcn.010078cc
mov esi, dword [eax + 4]
lea eax, [ebp - 0x274]
push eax
lea eax, [ebp - 0x1578]
push eax
call fcn.010078cc
mov eax, dword [eax + 4]
lea ecx, [ebp - 0x14]
push ecx
mov ecx, dword [ebp - 0xa04]
push esi
push eax
add ecx, 0x274
call fcn.01025954
lea ecx, [ebp - 0x1578]
mov dword [ebp - 0x9f4], eax
mov dword [ebp - 0x1578], ebx
call fcn.010047d1
mov dword [ebp - 0x1248], ebx
lea ecx, [ebp - 0x1248]
jmp 0x101d7d1
push dword [ebp - 0x160]
push dword [ebp - 0x270]
call fcn.01026b80
mov dword [ebp - 0x9f4], eax
cmp dword [ebp - 0x9f4], 0
jge 0x101d8c0
cmp dword [ebp - 0x9f4], 0x80070070
mov byte [ebp - 0x9f5], 1
je 0x101d8aa
push dword [ebp - 0x160]
lea eax, [ebp - 0x494]
push dword [0x1037438]
push 0x9d
push eax
call fcn.010070db
add esp, 0x10
jmp 0x101d8c0
push dword [0x1037438]
lea ecx, [ebp - 0x494]
push 0xa7
call fcn.01006aa0
mov esi, dword [ebp - 0xa04]
mov ecx, esi
mov byte [ebp - 0x9f7], 0
call fcn.01018fdf
test eax, eax
jne 0x101dbb5
xor edi, edi
cmp dword [ebp - 0xa0c], edi
jne 0x101da18
mov eax, dword [ebp - 0xa54]
cmp dword [eax + 0x138], 2
jne 0x101da18
cmp dword [ebp - 0x9f4], edi
jne 0x101db14
cmp byte [ebp - 0xa20], 0
je 0x101d91e
cmp dword [ebp - 0xa08], edi
je 0x101da24
push 1
push dword [ebp - 0x160]
lea ecx, [ebp - 0xac8]
call fcn.0101cabc
cmp eax, 0xffffffff
je 0x101da24
push eax
lea eax, [ebp - 0x7c4]
push eax
lea ecx, [ebp - 0xac8]
call fcn.0101ad94
lea ecx, [ebp - 0x7c4]
call fcn.01005f1a
test eax, eax
je 0x101da07
lea ecx, [ebp - 0x8d4]
call fcn.01007096
push dword [0x1037438]
lea eax, [ebp - 0x8d4]
push 0xcc
push eax
call fcn.010070db
add esp, 0xc
push 0x13
pop edi
cmp dword [ebp - 0xa40], edi
je 0x101d9f4
cmp dword [ebp - 0xa40], 0x14
je 0x101d9cf
mov eax, dword [esi + 8]
push 0x440
lea ecx, [ebp - 0x8d4]
push ecx
push eax
call fcn.0101aa6b
cmp eax, edi
jne 0x101d9ba
mov dword [ebp - 0xa40], edi
jmp 0x101d9f4
push 0x14
pop ecx
cmp eax, ecx
jne 0x101d9ca
push 7
mov dword [ebp - 0xa40], ecx
pop eax
cmp eax, 7
jne 0x101d9f4
push dword [ebp - 0x160]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea eax, [ebp - 0x7c4]
push eax
lea ecx, [ebp - 0x164]
call fcn.01006b02
mov byte [ebp - 0x9f7], 1
lea ecx, [ebp - 0x8d4]
mov dword [ebp - 0x8d4], ebx
call fcn.010047d1
xor edi, edi
lea ecx, [ebp - 0x7c4]
mov dword [ebp - 0x7c4], ebx
call fcn.010047d1
cmp dword [ebp - 0x9f4], edi
jne 0x101db14
lea ecx, [ebp - 0x5a4]
call fcn.01007096
lea eax, [ebp - 0x5a4]
push eax
push dword [ebp - 0x160]
push dword [ebp - 0xa10]
call fcn.01027d5f
test eax, eax
jl 0x101da97
lea ecx, [ebp - 0x5a4]
call fcn.01005f1a
test eax, eax
je 0x101da97
mov eax, dword [esi + 0x20]
mov ecx, dword [ebp - 0xa1c]
push edi
push dword [ecx + eax]
lea eax, [ebp - 0x5a4]
push edi
push eax
lea ecx, [ebp - 0x18c4]
call fcn.0101a8b7
push eax
lea ecx, [ebp - 0xa80]
call fcn.01007e62
lea ecx, [ebp - 0x18c0]
mov dword [ebp - 0x18c0], ebx
call fcn.010047d1
cmp byte [esi + 0x288], 0
je 0x101dab1
push dword [ebp - 0x160]
push dword [ebp - 0xa10]
call fcn.01027443
cmp dword [ebp - 0xa0c], edi
mov ecx, dword [ebp - 0xa1c]
sete al
cmp byte [ebp - 0x9f7], 0
push eax
mov eax, dword [esi + 0x20]
push dword [ecx + eax]
sete al
lea ecx, [ebp - 0x1af8]
push eax
lea eax, [ebp - 0x164]
push eax
call fcn.0101a8b7
push eax
lea ecx, [ebp - 0xa80]
call fcn.01007e62
lea ecx, [ebp - 0x1af4]
mov dword [ebp - 0x1af4], ebx
call fcn.010047d1
lea ecx, [ebp - 0x5a4]
mov dword [ebp - 0x5a4], ebx
call fcn.010047d1
jmp 0x101db20
push dword [ebp - 0x160]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push dword [ebp - 0x270]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
cmp dword [ebp - 0x9f4], 0x80210003
je 0x101db79
push dword [ebp - 0x9f4]
mov ecx, dword [ebp - 0xa1c]
mov edi, dword [esi + 8]
lea eax, [ebp - 0x164]
push eax
mov eax, dword [esi + 0x20]
push dword [ecx + eax]
push dword [ebp - 0xa28]
call fcn.0101baa5
push eax
push edi
call fcn.01018bbd
jmp 0x101db79
mov byte [ebp - 0x9f5], 1
mov dword [ebp - 0x9f4], 0x8007000e
lea ecx, [ebp - 0x274]
mov dword [ebp - 0x274], ebx
call fcn.010047d1
lea ecx, [ebp - 0x164]
mov dword [ebp - 0x164], ebx
call fcn.010047d1
inc dword [ebp - 0xa0c]
mov eax, dword [ebp - 0xa0c]
cmp eax, dword [ebp - 0xa60]
jl 0x101d3ba
jmp 0x101dc2c
lea esi, [ebp - 0xa64]
mov dword [ebp - 0x9f4], 1
mov byte [ebp - 0x9f6], 1
call fcn.0101aaf5
lea ecx, [ebp - 0x274]
mov dword [ebp - 0x274], ebx
call fcn.010047d1
lea ecx, [ebp - 0x164]
mov dword [ebp - 0x164], ebx
call fcn.010047d1
jmp 0x101dc2c
cmp dword [ebp - 0x9f4], 0x80070005
mov byte [ebp - 0x9f5], 1
jne 0x101dc2c
push dword [0x1037438]
lea ecx, [ebp - 0x494]
push 0xdc
call fcn.01006aa0
jmp 0x101dc2c
mov byte [ebp - 0x9f5], 1
mov ebx, 0x1001644
cmp dword [ebp - 0xa08], 0
mov byte [ebp - 0x9f7], 0
je 0x101de16
cmp dword [ebp - 0x9f4], 0x80210003
jne 0x101de16
push 4
pop ecx
lea edi, [ebp - 0x14]
mov esi, 0x1002b74
xor eax, eax
repe cmpsd dword [esi], dword es:[edi]
jne 0x101de0d
cmp dword [ebp - 0xa2c], 2
jne 0x101de0d
xor esi, esi
lea eax, [ebp - 0xab0]
mov edi, 0x100195c
push eax
lea ecx, [ebp - 0xa80]
mov dword [ebp - 0xab0], edi
mov dword [ebp - 0xaac], esi
mov dword [ebp - 0xaa8], esi
mov dword [ebp - 0xaa4], 0xa
mov dword [ebp - 0xaa0], esi
call fcn.0101c888
test eax, eax
jl 0x101ddfc
cmp dword [ebp - 0xaac], esi
je 0x101ddfc
push esi
lea eax, [ebp - 0x1028]
push eax
call fcn.01027fa6
push eax
lea eax, [ebp - 0x384]
push eax
call fcn.010078cc
lea ecx, [ebp - 0x1028]
mov dword [ebp - 0x1028], ebx
call fcn.010047d1
lea ecx, [ebp - 0x384]
call fcn.01005f1a
test eax, eax
je 0x101ddeb
mov ecx, dword [ebp - 0xa04]
push 0x1002b74
lea eax, [ebp - 0x384]
push eax
lea eax, [ebp - 0xab0]
push eax
add ecx, 0x274
call fcn.01026150
test eax, eax
jl 0x101ddeb
mov esi, dword [ebp - 0xa70]
push esi
lea ecx, [ebp - 0x9f0]
call fcn.0101a876
lea eax, [ebp - 0x384]
push eax
lea eax, [ebp - 0x1138]
mov byte [esi], 0
mov esi, dword [esi + 8]
push eax
call fcn.01007ea4
mov eax, dword [eax + 4]
push esi
push eax
call fcn.01026b80
test eax, eax
lea ecx, [ebp - 0x1138]
setge byte [ebp - 0xa2d]
mov dword [ebp - 0x1138], ebx
call fcn.010047d1
cmp byte [ebp - 0xa2d], 0
je 0x101ddad
lea ecx, [ebp - 0xa80]
call fcn.010107d8
lea ecx, [ebp - 0xa80]
call fcn.01007e3c
lea eax, [ebp - 0x9f0]
push eax
lea ecx, [ebp - 0xa80]
call fcn.01007e62
jmp 0x101ddda
lea eax, [ebp - 0x384]
push eax
lea eax, [ebp - 0xe08]
push eax
call fcn.01007ea4
push dword [eax + 4]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea ecx, [ebp - 0xe08]
mov dword [ebp - 0xe08], ebx
call fcn.010047d1
lea ecx, [ebp - 0x9ec]
mov dword [ebp - 0x9ec], ebx
call fcn.010047d1
lea ecx, [ebp - 0x384]
mov dword [ebp - 0x384], ebx
call fcn.010047d1
lea ecx, [ebp - 0xab0]
mov dword [ebp - 0xab0], edi
call fcn.0100eb93
and dword [ebp - 0x9f4], 0
jmp 0x101de3e
cmp dword [ebp - 0x9f4], 0
jne 0x101de3e
cmp byte [ebp - 0xa20], 0
je 0x101de38
cmp dword [ebp - 0xa2c], 2
jne 0x101de38
mov byte [ebp - 0x9f7], 1
inc dword [ebp - 0xa08]
lea ecx, [ebp - 0xa64]
mov dword [ebp - 0xa64], 0x1001de4
call fcn.0101b480
cmp byte [ebp - 0x9f7], 0
jne 0x101d28e
jmp 0x101de73
mov dword [ebp - 0x9f4], 1
mov byte [ebp - 0x9f6], 1
lea eax, [ebp - 0xa80]
push eax
lea ecx, [ebp - 0xa94]
call fcn.0101c786
lea ecx, [ebp - 0xa80]
mov dword [ebp - 0xa80], 0x1001720
call fcn.01007e3c
jmp 0x101dea3
mov byte [ebp - 0x9f5], 1
lea ecx, [ebp - 0x6b4]
mov dword [ebp - 0x6b4], 0x1001644
call fcn.010047d1
mov eax, dword [ebp - 0xa4c]
test eax, eax
je 0x101dec8
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov edi, dword [ebp - 0xa04]
mov esi, dword [ebp - 0xa1c]
xor ebx, ebx
cmp dword [ebp - 0x9f4], ebx
jge 0x101df36
push 0x1001648
lea ecx, [ebp - 0xbe8]
call fcn.01006bd5
mov eax, dword [edi + 8]
push dword [ebp - 0x9f4]
mov dword [ebp - 0xa34], eax
lea eax, [ebp - 0xbe8]
push eax
mov eax, dword [edi + 0x20]
push dword [esi + eax]
push dword [ebp - 0xa28]
call fcn.0101baa5
push eax
push dword [ebp - 0xa34]
call fcn.01018bbd
lea ecx, [ebp - 0xbe8]
mov dword [ebp - 0xbe8], 0x1001644
call fcn.010047d1
mov eax, dword [ebp - 0xa10]
cmp eax, ebx
je 0x101df46
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
inc dword [ebp - 0xa28]
mov eax, dword [ebp - 0xa28]
cmp eax, dword [edi + 0x14]
jl 0x101ceb8
jmp 0x101df7a
mov byte [ebp - 0x9f5], 1
jmp 0x101ded6
mov dword [ebp - 0x9f4], 1
mov byte [ebp - 0x9f6], 1
cmp dword [ebp - 0x9f4], ebx
jge 0x101df98
cmp byte [ebp - 0x9fd], bl
je 0x101df98
cmp dword [ebp - 0xa90], ebx
je 0x101df98
mov dword [ebp - 0x9f4], ebx
lea ecx, [ebp - 0xac8]
mov dword [ebp - 0xac8], 0x1001ddc
call fcn.0101abf1
mov eax, dword [ebp - 0xa48]
cmp eax, ebx
je 0x101dfbd
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0xa24]
cmp eax, ebx
je 0x101dfcd
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
mov eax, dword [ebp - 0xa38]
cmp eax, ebx
je 0x101dfdd
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
cmp dword [ebp - 0x9f4], ebx
jl 0x101dfed
cmp byte [ebp - 0x9f6], bl
je 0x101dff8
lea ecx, [ebp - 0xa94]
call fcn.010107d8
cmp dword [ebp - 0x9f4], ebx
jl 0x101e008
push dword [edi + 0x3c]
call fcn.0101901f
mov edi, dword [edi + 8]
lea eax, [ebp - 0xa94]
push eax
lea eax, [ebp - 0x494]
push eax
push dword [ebp - 0x9f4]
call fcn.0101bb2e
push eax
push edi
call fcn.01018bbd
mov eax, dword [ebp - 0xa44]
cmp eax, ebx
je 0x101e03b
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
lea ecx, [ebp - 0x494]
mov dword [ebp - 0x494], 0x1001644
call fcn.010047d1
lea ecx, [ebp - 0xa94]
mov dword [ebp - 0xa94], 0x1001720
call fcn.01007e3c
mov ecx, dword [ebp - 4]
xor eax, eax
call fcn.01024a32
pop edi
pop esi
pop ebx
leave
ret