Function at 0x10b4cdb
Capabilities:
Create thread
Set file attributes

Disassembly:
push 0x21c
mov eax, 0x11b375b
call fcn.010b13ca
mov eax, dword [ebp + 8]
mov dword [ebp - 0x6c], eax
mov eax, dword [ebp + 0x10]
mov esi, ecx
mov dword [ebp - 0x4c], eax
xor ebx, ebx
mov dword [ebp - 4], ebx
xor eax, eax
lea edi, [ebp - 0x59]
stosb byte es:[edi], al
lea edi, [ebp - 0x51]
stosb byte es:[edi], al
mov dword [ebp - 0x30], ebx
lea edi, [ebp - 0x5b]
stosb byte es:[edi], al
lea edi, [ebp - 0x5e]
stosb byte es:[edi], al
mov dword [ebp - 0x20], ebx
lea edi, [ebp - 0x4f]
stosb byte es:[edi], al
lea edi, [ebp - 0x5d]
stosb byte es:[edi], al
mov dword [ebp - 0x40], ebx
lea edi, [ebp - 0x53]
stosb byte es:[edi], al
lea edi, [ebp - 0x4e]
stosb byte es:[edi], al
mov dword [ebp - 0x44], ebx
lea edi, [ebp - 0x45]
stosb byte es:[edi], al
lea edi, [ebp - 0x50]
stosb byte es:[edi], al
mov dword [ebp - 0x38], ebx
lea edi, [ebp - 0x55]
stosb byte es:[edi], al
lea edi, [ebp - 0x52]
stosb byte es:[edi], al
mov dword [ebp - 0x3c], ebx
lea edi, [ebp - 0x54]
stosb byte es:[edi], al
lea edi, [ebp - 0x46]
stosb byte es:[edi], al
mov dword [ebp - 0x2c], ebx
lea edi, [ebp - 0x47]
stosb byte es:[edi], al
lea edi, [ebp - 0x56]
stosb byte es:[edi], al
mov dword [ebp - 0x1c], ebx
lea edi, [ebp - 0x48]
stosb byte es:[edi], al
lea edi, [ebp - 0x58]
stosb byte es:[edi], al
mov dword [ebp - 0x28], ebx
lea edi, [ebp - 0x4d]
stosb byte es:[edi], al
lea edi, [ebp - 0x5a]
stosb byte es:[edi], al
mov dword [ebp - 0x14], ebx
lea edi, [ebp - 0x5c]
stosb byte es:[edi], al
lea edi, [ebp - 0x57]
stosb byte es:[edi], al
mov dword [ebp - 0x34], ebx
lea eax, [ebp - 0x30]
mov byte [ebp - 4], 0xe
push eax
call fcn.0113ec0f
cmp dword [esi + 0x28], 8
jb 0x10b4d90
mov ecx, dword [esi + 0x14]
jmp 0x10b4d93
lea ecx, [esi + 0x14]
push eax
push 0x101ecfc
push ebx
push ebx
push ebx
push ebx
push 0x1012
push ecx
call dword [sym.imp.ole32.dll_StgCreateStorageEx]
mov edi, eax
cmp edi, ebx
jge 0x10b4e13
push 0x1009898
lea ecx, [ebp - 0xdc]
call fcn.01038fe3
lea eax, [ebp - 0xdc]
push eax
lea ecx, [ebp - 0x1f0]
mov byte [ebp - 4], 0xf
call fcn.01157ca5
mov ecx, eax
mov byte [ebp - 4], 0x10
call fcn.01157b75
push eax
push edi
push 0x2b6
push 0x1002b6a
push 0x1002b5c
push fcn.011569b2
lea eax, [ebp - 0x1b8]
push eax
call fcn.01035074
push 0x11c9264
lea eax, [ebp - 0x1b8]
push eax
call sub.msvcrt.dll__CxxThrowException
cmp dword [esi + 0x28], 8
jb 0x10b4e1e
mov eax, dword [esi + 0x14]
jmp 0x10b4e21
lea eax, [esi + 0x14]
push 2
push eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
lea eax, [ebp - 0x3c]
push eax
push 0x1005048
push ecx
lea eax, [ebp - 0x30]
mov ecx, esp
mov dword [ebp - 0x18], esp
push eax
call fcn.010eed1e
call fcn.010b4860
lea eax, [ebp - 0x20]
push eax
push 0x1009880
push ecx
lea eax, [ebp - 0x30]
mov ecx, esp
mov dword [ebp - 0x18], esp
push eax
call fcn.010eed1e
call fcn.010b4909
lea eax, [ebp - 0x2c]
push eax
push 0x1009870
push ecx
lea eax, [ebp - 0x20]
mov ecx, esp
mov dword [ebp - 0x18], esp
push eax
call fcn.010eed1e
call fcn.010b4860
lea eax, [ebp - 0x1c]
push eax
push 0x1009854
push ecx
lea eax, [ebp - 0x20]
mov ecx, esp
mov dword [ebp - 0x18], esp
push eax
call fcn.010eed1e
call fcn.010b4860
lea eax, [ebp - 0x40]
push eax
push 0x1009838
push ecx
lea eax, [ebp - 0x20]
mov ecx, esp
mov dword [ebp - 0x18], esp
push eax
call fcn.010eed1e
call fcn.010b4909
lea eax, [ebp - 0x28]
push eax
mov edi, 0x100981c
push edi
push ecx
lea eax, [ebp - 0x40]
mov ecx, esp
mov dword [ebp - 0x18], esp
push eax
call fcn.010eed1e
call fcn.010b4860
lea eax, [ebp - 0x44]
push eax
push 0x1009800
push ecx
lea eax, [ebp - 0x20]
mov ecx, esp
mov dword [ebp - 0x18], esp
push eax
call fcn.010eed1e
call fcn.010b4909
lea eax, [ebp - 0x38]
push eax
push 0x10097e4
push ecx
mov ecx, esp
mov dword [ebp - 0x18], esp
lea eax, [ebp - 0x44]
push eax
call fcn.010eed1e
call fcn.010b4909
lea eax, [ebp - 0x14]
push eax
push 0x10097d0
push ecx
lea eax, [ebp - 0x38]
mov ecx, esp
mov dword [ebp - 0x18], esp
push eax
call fcn.010eed1e
call fcn.010b4860
lea eax, [ebp - 0x34]
push eax
push 0x1009790
push ecx
lea eax, [ebp - 0x38]
mov ecx, esp
mov dword [ebp - 0x18], esp
push eax
call fcn.010eed1e
call fcn.010b4860
mov ecx, dword [esi + 8]
push ecx
lea eax, [ebp - 0x64]
push eax
lea eax, [esi + 0x48]
push eax
push dword [ebp + 0xc]
mov dword [ebp - 0x64], ebx
call fcn.01158edb
push edx
push eax
push ecx
lea eax, [ebp - 0x3c]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.010eed1e
mov ecx, dword [ebp - 0x6c]
mov eax, dword [ecx]
lea edx, [ebp - 0x88]
push edx
call dword [eax]
lea ecx, [esi + 0x4c]
push eax
mov byte [ebp - 4], 0x11
call fcn.010683ac
lea eax, [ebp - 0x88]
push eax
mov byte [ebp - 4], 0xe
call fcn.01076e36
push ebx
push ebx
push esi
push 0x10b43e9
push ebx
mov byte [esi + 0x48], bl
push ebx
mov byte [esi + 0x49], bl
call dword [sym.imp.KERNEL32.dll_CreateThread]
mov dword [ebp - 0x24], ebx
cmp eax, ebx
je 0x10b4fc0
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
mov byte [ebp - 4], 0x12
cmp eax, ebx
jne 0x10b5046
push 0x1009764
lea ecx, [ebp - 0xa4]
call fcn.01038fe3
lea eax, [ebp - 0xa4]
push eax
lea ecx, [ebp - 0x228]
mov byte [ebp - 4], 0x13
call fcn.01157ca5
mov edi, eax
mov byte [ebp - 4], 0x14
call dword [sym.imp.KERNEL32.dll_GetLastError]
cmp eax, ebx
jle 0x10b500b
and eax, 0xffff
or eax, 0x80070000
mov ecx, edi
mov esi, eax
call fcn.01157b75
push eax
push esi
push 0x2e7
push 0x1002b6a
push 0x1002b5c
push fcn.011569b2
lea eax, [ebp - 0x158]
push eax
call fcn.01035074
push 0x11c9264
lea eax, [ebp - 0x158]
jmp 0x10b4e0d
mov dword [ebp - 0x68], eax
jmp 0x10b5076
mov ecx, dword [ebp - 0x4c]
call fcn.010b2d1e
test eax, eax
jne 0x10b505b
mov byte [esi + 0x48], 1
push ebx
push dword [ebp - 0x24]
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
test eax, eax
je 0x10b508e
push dword [ebp - 0x64]
mov ecx, dword [ebp - 0x4c]
push 5
call fcn.010b2c2e
push ebx
push 0x4ff
push 0xffffffffffffffff
lea eax, [ebp - 0x68]
push eax
push 1
call dword [sym.imp.USER32.dll_MsgWaitForMultipleObjectsEx]
test eax, eax
jne 0x10b504b
lea eax, [esi + 0x4c]
push eax
call fcn.0112b68a
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x80], eax
lea eax, [ebp - 0x80]
push eax
mov dword [ebp - 0x24], ebx
call fcn.010735fa
cmp byte [esi + 0x48], bl
je 0x10b517f
xor esi, esi
inc esi
lea eax, [ebp - 0x24]
push eax
call fcn.010735fa
lea eax, [ebp - 0x34]
push eax
mov byte [ebp - 4], 0xd
call fcn.010e7ead
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 4], 0xc
call fcn.010e7ead
lea eax, [ebp - 0x28]
push eax
mov byte [ebp - 4], 0xb
call fcn.010e7ead
lea eax, [ebp - 0x1c]
push eax
mov byte [ebp - 4], 0xa
call fcn.010e7ead
lea eax, [ebp - 0x2c]
push eax
mov byte [ebp - 4], 9
call fcn.010e7ead
lea eax, [ebp - 0x3c]
push eax
mov byte [ebp - 4], 8
call fcn.010e7ead
lea eax, [ebp - 0x38]
push eax
mov byte [ebp - 4], 7
call fcn.010e7ead
lea eax, [ebp - 0x44]
push eax
mov byte [ebp - 4], 6
call fcn.010e7ead
lea eax, [ebp - 0x40]
push eax
mov byte [ebp - 4], 5
call fcn.010e7ead
lea eax, [ebp - 0x20]
push eax
mov byte [ebp - 4], 4
call fcn.010e7ead
lea eax, [ebp - 0x30]
push eax
mov byte [ebp - 4], 3
call fcn.010e7ead
xor edi, edi
push ebx
inc edi
push edi
lea ecx, [ebp + 0x14]
call fcn.010362ea
push ebx
push edi
lea ecx, [ebp + 0x30]
call fcn.010362ea
push ebx
push edi
lea ecx, [ebp + 0x4c]
call fcn.010362ea
push ebx
push edi
lea ecx, [ebp + 0x68]
call fcn.010362ea
mov eax, esi
jmp 0x10b5594
mov al, byte [esi + 0x49]
test al, al
je 0x10b518e
push 2
pop esi
jmp 0x10b50b5
push 0x1009724
push ecx
lea eax, [ebp - 0x2c]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.010eed1e
call fcn.010b49b2
push 3
pop esi
push 1
push ecx
lea eax, [ebp - 0x2c]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.010eed1e
call fcn.010b465d
push ebx
push ecx
lea eax, [ebp - 0x2c]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.010eed1e
call fcn.010b465d
dec esi
jne 0x10b51aa
push 8
push ecx
lea eax, [ebp - 0x1c]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.010eed1e
call fcn.010b46ff
push 1
push ecx
lea eax, [ebp - 0x1c]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.010eed1e
call fcn.010b46ff
push 4
push edi
call fcn.010b422b
push 4
push 0x1005048
mov esi, eax
call fcn.010b422b
lea eax, [esi + eax + 0x14]
push eax
push ecx
lea eax, [ebp - 0x1c]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.010eed1e
call fcn.010b46ff
xor esi, esi
inc esi
push esi
push ecx
lea eax, [ebp - 0x1c]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.010eed1e
call fcn.010b46ff
push ebx
push ecx
lea eax, [ebp - 0x1c]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.010eed1e
call fcn.010b46ff
push 0x1005048
push ecx
lea eax, [ebp - 0x1c]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.010eed1e
call fcn.010b49b2
push edi
push ecx
lea eax, [ebp - 0x1c]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.010eed1e
call fcn.010b49b2
push 8
push ecx
lea eax, [ebp - 0x28]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.010eed1e
call fcn.010b46ff
push esi
push ecx
lea eax, [ebp - 0x28]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.010eed1e
call fcn.010b46ff
push 0x10097e4
push ecx
lea eax, [ebp - 0x28]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.010eed1e
call fcn.010b49b2
push 0x1009720
lea eax, [ebp + 0x30]
push eax
lea eax, [ebp - 0xc0]
push eax
call fcn.0105788c
lea ecx, [ebp + 0x14]
push ecx
push eax
lea eax, [ebp - 0xf8]
push eax
mov byte [ebp - 4], 0x15
call fcn.01057750
add esp, 0x18
push 0xffffffffffffffff
push ebx
push eax
lea ecx, [ebp + 0x14]
mov byte [ebp - 4], 0x16
call fcn.010375c8
push ebx
push esi
lea ecx, [ebp - 0xf8]
call fcn.010362ea
push ebx
push esi
lea ecx, [ebp - 0xc0]
mov byte [ebp - 4], 0x12
call fcn.010362ea
push 2
push dword [ebp + 0x28]
call fcn.010b4017
inc eax
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x78], ebx
mov dword [ebp - 0x74], ebx
mov dword [ebp - 0x70], ebx
push ebx
push eax
lea ecx, [ebp - 0x7c]
mov byte [ebp - 4], 0x17
call fcn.0103f619
cmp dword [ebp + 0x2c], 8
mov eax, dword [ebp + 0x18]
jae 0x10b535e
lea eax, [ebp + 0x18]
push 2
lea ecx, [ebp - 0x18]
push ecx
push dword [ebp - 0x78]
push dword [ebp + 0x28]
push eax
call fcn.010b4099
mov eax, dword [ebp - 0x78]
lea edi, [eax + 1]
mov cl, byte [eax]
inc eax
cmp cl, bl
jne 0x10b5376
sub eax, edi
mov edi, eax
push 4
push edi
call fcn.010b420a
lea eax, [eax + edi + 8]
push eax
push ecx
lea eax, [ebp - 0x34]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.010eed1e
call fcn.010b46ff
push dword [ebp - 0x78]
lea eax, [ebp - 0x34]
push ecx
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.010eed1e
call fcn.010b4a43
cmp dword [ebp + 0x80], 8
mov eax, dword [ebp + 0x6c]
jae 0x10b53c8
lea eax, [ebp + 0x6c]
push eax
push ecx
lea eax, [ebp - 0x34]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.010eed1e
call fcn.010b4ace
mov edi, 0x10096d0
mov eax, edi
lea edx, [eax + 2]
mov cx, word [eax]
inc eax
inc eax
cmp cx, bx
jne 0x10b53e7
sub eax, edx
sar eax, 1
lea eax, [eax + eax + 0xc]
push eax
push ecx
lea eax, [ebp - 0x14]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.010eed1e
call fcn.010b46ff
push esi
push ecx
lea eax, [ebp - 0x14]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.010eed1e
call fcn.010b46ff
push edi
push ecx
lea eax, [ebp - 0x14]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.010eed1e
call fcn.010b49b2
push 0x1009690
push ecx
lea eax, [ebp - 0x14]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.010eed1e
call fcn.010b49b2
push 3
pop edi
push esi
push ecx
lea eax, [ebp - 0x14]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.010eed1e
call fcn.010b465d
push ebx
push ecx
lea eax, [ebp - 0x14]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.010eed1e
call fcn.010b465d
dec edi
jne 0x10b5454
push 4
push ecx
lea eax, [ebp - 0x14]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.010eed1e
call fcn.010b46ff
cmp dword [ebp + 0x64], 8
mov eax, dword [ebp + 0x50]
jae 0x10b54a3
lea eax, [ebp + 0x50]
push eax
push ecx
lea eax, [ebp - 0x14]
mov ecx, esp
mov dword [ebp - 0x10], esp
push eax
call fcn.010eed1e
call fcn.010b4ace
mov eax, dword [ebp - 0x30]
mov ecx, dword [eax]
push ebx
push eax
call dword [ecx + 0x24]
mov ecx, dword [ebp - 0x4c]
call fcn.010b2aa8
lea ecx, [ebp - 0x7c]
call fcn.0112c1e2
lea eax, [ebp - 0x24]
push eax
call fcn.010735fa
lea eax, [ebp - 0x34]
push eax
mov byte [ebp - 4], 0xd
call fcn.010e7ead
lea eax, [ebp - 0x14]
push eax
mov byte [ebp - 4], 0xc
call fcn.010e7ead
lea eax, [ebp - 0x28]
push eax
mov byte [ebp - 4], 0xb
call fcn.010e7ead
lea eax, [ebp - 0x1c]
push eax
mov byte [ebp - 4], 0xa
call fcn.010e7ead
lea eax, [ebp - 0x2c]
push eax
mov byte [ebp - 4], 9
call fcn.010e7ead
lea eax, [ebp - 0x3c]
push eax
mov byte [ebp - 4], 8
call fcn.010e7ead
lea eax, [ebp - 0x38]
push eax
mov byte [ebp - 4], 7
call fcn.010e7ead
lea eax, [ebp - 0x44]
push eax
mov byte [ebp - 4], 6
call fcn.010e7ead
lea eax, [ebp - 0x40]
push eax
mov byte [ebp - 4], 5
call fcn.010e7ead
lea eax, [ebp - 0x20]
push eax
mov byte [ebp - 4], 4
call fcn.010e7ead
lea eax, [ebp - 0x30]
push eax
mov byte [ebp - 4], 3
call fcn.010e7ead
push ebx
push esi
lea ecx, [ebp + 0x14]
call fcn.010362ea
push ebx
push esi
lea ecx, [ebp + 0x30]
call fcn.010362ea
push ebx
push esi
lea ecx, [ebp + 0x4c]
call fcn.010362ea
push ebx
push esi
lea ecx, [ebp + 0x68]
call fcn.010362ea
xor eax, eax
call fcn.010b14b6
ret 0x7c