Function at 0x104ac1d
Capabilities:
Delete file

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x3dc
mov eax, dword [0x10d0640]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0xc]
push ebx
xor ebx, ebx
push esi
mov esi, dword [ebp + 8]
mov dword [ebp - 0x3ac], eax
mov eax, dword [ebp + 0x10]
push edi
mov dword [ebp - 0x348], eax
mov dword [ebp - 0x354], ebx
mov dword [ebp - 0x36c], ebx
mov dword [ebp - 0x370], ebx
cmp dword [0x10d22a4], ebx
jne 0x104ac70
mov dword [ebp - 0x310], ebx
cmp eax, ebx
jne 0x104ac7a
mov dword [ebp - 0x310], 1
mov eax, dword [0x10d22b4]
push 0x88
mov dword [ebp - 0x3c4], eax
lea eax, [ebp - 0x30c]
push ebx
push eax
mov dword [ebp - 0x364], ebx
mov dword [ebp - 0x32c], ebx
mov dword [ebp - 0x344], ebx
mov dword [ebp - 0x39c], ebx
mov dword [ebp - 0x328], ebx
mov dword [ebp - 0x374], ebx
mov dword [ebp - 0x358], ebx
mov dword [ebp - 0x34c], ebx
mov dword [ebp - 0x340], ebx
mov dword [ebp - 0x324], ebx
mov dword [ebp - 0x33c], ebx
mov dword [ebp - 0x350], ebx
mov dword [ebp - 0x398], ebx
mov dword [ebp - 0x330], ebx
mov dword [ebp - 0x35c], ebx
mov dword [ebp - 0x3b0], ebx
mov dword [ebp - 0x368], ebx
mov dword [ebp - 0x360], ebx
call sub.msvcrt.dll_memset
add esp, 0xc
push 7
pop ecx
xor eax, eax
lea edi, [ebp - 0x390]
rep stosd dword es:[edi], eax
or dword [ebp - 0x390], 0xffffffff
lea eax, [ebp - 0x354]
push eax
push esi
mov dword [ebp - 0x31c], ebx
call fcn.0104a15e
mov esi, eax
cmp esi, ebx
je 0x104ad45
push 1
push esi
push 0xe14013e
call fcn.0108c520
jmp 0x104be12
lea eax, [ebp - 0x3ac]
push eax
push 0x104
lea eax, [ebp - 0x284]
push eax
push ebx
push dword [ebp - 0x3ac]
push ebx
push ebx
call fcn.0103037b
mov esi, eax
cmp esi, ebx
je 0x104ad77
push esi
push 0xe1e013e
jmp 0x104be0d
lea eax, [ebp - 0x3d4]
push eax
lea eax, [ebp - 0x390]
push eax
push dword [ebp - 0x354]
call fcn.0109e043
mov esi, eax
cmp esi, ebx
je 0x104ada1
push esi
push 0xe21013e
jmp 0x104be0d
push 0xf0000000
push 1
push 0x100afc0
push ebx
lea eax, [ebp - 0x364]
push eax
call dword [sym.imp.ADVAPI32.dll_CryptAcquireContextW]
test eax, eax
jne 0x104add1
call fcn.01091f1e
mov esi, eax
push esi
push 0xe2b013e
jmp 0x104be0d
push dword [ebp - 0x310]
lea eax, [ebp - 0x390]
push 0x100ba4c
push 0x100ba2c
push eax
call fcn.010471e5
mov esi, eax
cmp esi, ebx
je 0x104adfe
push esi
push 0xe36013e
jmp 0x104be0d
lea eax, [ebp - 0x394]
push eax
push 0
push dword [ebp - 0x310]
mov ebx, 0x100ba14
push 1
push 1
push ebx
mov edi, 0x100b9f4
push edi
lea eax, [ebp - 0x390]
push eax
call fcn.010470bf
mov esi, eax
test esi, esi
je 0x104ae3a
push esi
push 0xe44013e
jmp 0x104be0d
lea eax, [ebp - 0x3a4]
push eax
push 0
push dword [ebp - 0x310]
lea eax, [ebp - 0x390]
push 1
push 1
push 0x100b9d4
push edi
push eax
call fcn.010470bf
mov esi, eax
test esi, esi
je 0x104ae70
push esi
push 0xe4f013e
jmp 0x104be0d
and dword [ebp - 0x318], 0
mov eax, dword [ebp - 0x3a4]
dec eax
dec eax
push 0x40
pop esi
je 0x104af75
dec eax
je 0x104aeba
mov eax, 0x100b9d4
push eax
push eax
push 0x98b
call fcn.0108bbbd
push eax
push 0x100b9ac
call fcn.0109c1c3
add esp, 0x10
mov esi, 0x8007000d
push esi
push 0xe8b013e
jmp 0x104be0d
cmp dword [ebp - 0x394], 0x80
mov dword [ebp - 0x314], 0x20
je 0x104aef9
push ebx
push 0x98b
call fcn.0108bbbd
push eax
push 0x100b990
call fcn.0109c1c3
add esp, 0xc
mov esi, 0x8007000d
push esi
push 0xe72013e
jmp 0x104be0d
lea eax, [ebp - 0x3d8]
push eax
push 0xe0000102
push dword [ebp - 0x310]
lea eax, [ebp - 0x390]
push 1
push 1
push 0x100b97c
push edi
push eax
call fcn.010470bf
test eax, eax
je 0x104af6d
push eax
push eax
push 0xe7d013e
call fcn.0108c520
mov ebx, dword [ebp - 0x310]
lea eax, [ebp - 0x3c8]
push eax
lea eax, [ebp - 0x370]
push eax
push ebx
push 0x100b970
push edi
lea eax, [ebp - 0x390]
push eax
call fcn.01047393
mov esi, eax
test esi, esi
je 0x104b00a
push esi
push 0xeac013e
jmp 0x104be0d
mov dword [ebp - 0x314], esi
jmp 0x104af31
cmp dword [ebp - 0x394], 0x28
mov dword [ebp - 0x314], 0x10
jne 0x104af94
mov dword [ebp - 0x318], 1
jmp 0x104afa0
cmp dword [ebp - 0x394], esi
jne 0x104bde8
lea eax, [ebp - 0x3b8]
push eax
push 0
push dword [ebp - 0x310]
lea eax, [ebp - 0x390]
push 1
push 1
push 0x100b964
push edi
push eax
call fcn.010470bf
mov esi, eax
test esi, esi
je 0x104afd6
push esi
push 0xe99013e
jmp 0x104be0d
cmp dword [ebp - 0x3b8], 3
je 0x104af31
push 0x98b
call fcn.0108bbbd
push eax
push 0x100b948
call fcn.0109c1c3
pop ecx
pop ecx
mov esi, 0x8007000d
push esi
push 0xea1013e
jmp 0x104be0d
lea eax, [ebp - 0x36c]
push eax
push 0
push ebx
push 0x100b934
push edi
lea eax, [ebp - 0x390]
push eax
call fcn.01047155
mov esi, eax
test esi, esi
je 0x104b037
push esi
push 0xeb5013e
jmp 0x104be0d
lea eax, [ebp - 0x3b8]
push eax
push 0
push ebx
push 1
push 1
push 0x100b920
push edi
lea eax, [ebp - 0x390]
push eax
call fcn.010470bf
test eax, eax
je 0x104b066
push eax
push 0xec0013e
call fcn.0108c503
lea eax, [ebp - 0x30c]
push eax
push 0
push dword [ebp - 0x36c]
push dword [ebp - 0x3ac]
push dword [ebp - 0x364]
push dword [ebp - 0x314]
call fcn.01049c83
mov esi, eax
test esi, esi
je 0x104b09d
push esi
push 0xed0013e
jmp 0x104be0d
push dword [ebp - 0x3c8]
lea eax, [ebp - 0x30c]
push dword [ebp - 0x370]
push eax
call fcn.01046a9e
mov esi, eax
test esi, esi
je 0x104b0e0
push esi
push 0xed7013e
call fcn.0108c503
cmp dword [0x10d22a0], 2
jl 0x104be12
cmp dword [ebp - 0x314], 0x40
jne 0x104be12
cmp dword [0x10d22a4], 0
jne 0x104b0f7
test ebx, ebx
jne 0x104b0f7
mov dword [0x10d22b4], 1
call fcn.0104678d
cmp dword [ebp - 0x3a4], 2
je 0x104b112
cmp dword [ebp - 0x314], 0x40
jne 0x104b8b2
lea eax, [ebp - 0x3a0]
push eax
lea eax, [ebp - 0x32c]
push eax
mov esi, 0xe0000102
push esi
lea eax, [ebp - 0x30c]
push eax
mov ebx, 0x100b908
push ebx
mov edi, 0x100b8e4
push edi
lea eax, [ebp - 0x390]
push eax
call fcn.0104a832
test eax, eax
je 0x104b168
cmp dword [ebp - 0x314], 0x40
mov ecx, 0x100b8a0
je 0x104b15c
mov ecx, 0x100b858
push eax
push 0xefd013e
push ecx
call fcn.0108c53e
push 0x10042f8
call fcn.0109c1c3
cmp dword [ebp - 0x310], 0
pop ecx
je 0x104b194
push 0x100ae40
call fcn.0109c1c3
push edi
push 0x100b2cc
call fcn.0109c1c3
add esp, 0xc
push ebx
push 0x1005b04
call fcn.0109c1c3
cmp dword [ebp - 0x32c], 0
pop ecx
pop ecx
je 0x104b1ec
push dword [ebp - 0x3a0]
push dword [ebp - 0x32c]
call fcn.01047474
push 0xffffffffffffffff
push dword [ebp - 0x3a0]
push dword [ebp - 0x32c]
call fcn.01045b05
mov esi, eax
test esi, esi
je 0x104b1df
push esi
push 0xf0b013e
jmp 0x104be0d
push 0x10042f8
call fcn.0109c1c3
pop ecx
xor esi, esi
lea eax, [ebp - 0x39c]
push eax
lea eax, [ebp - 0x344]
push eax
push esi
lea eax, [ebp - 0x30c]
push eax
mov esi, 0x100b850
push esi
push edi
lea eax, [ebp - 0x390]
push eax
call fcn.0104a832
test eax, eax
je 0x104b238
cmp dword [ebp - 0x314], 0x40
mov ecx, 0x100b81c
je 0x104b22c
mov ecx, 0x100b7e8
push eax
push 0xf1e013e
push ecx
call fcn.0108c53e
cmp dword [ebp - 0x310], 0
je 0x104b250
push esi
push edi
push 0x100b7d0
call fcn.0109c1c3
add esp, 0xc
cmp dword [ebp - 0x32c], 0
je 0x104b2b5
cmp dword [ebp - 0x344], 0
je 0x104b2b5
push 2
push 0x2400
push dword [ebp - 0x39c]
push dword [ebp - 0x344]
push dword [ebp - 0x3a0]
push dword [ebp - 0x32c]
push 0x100b7c0
push 0x98f
call fcn.01048560
push eax
push dword [ebp - 0x310]
push dword [ebp - 0x348]
call fcn.010479c8
mov esi, eax
xor edi, edi
cmp esi, edi
je 0x104b2b7
push esi
push 0xf35013e
jmp 0x104be0d
xor edi, edi
lea eax, [ebp - 0x3c0]
push eax
push edi
push dword [ebp - 0x310]
lea eax, [ebp - 0x390]
push 1
push 1
push 0x100b7ac
push 0x100b790
push eax
call fcn.010470bf
mov esi, eax
cmp esi, edi
je 0x104b2f0
push esi
push 0xf44013e
jmp 0x104be0d
cmp dword [ebp - 0x318], edi
je 0x104b304
mov dword [ebp - 0x334], 0x100b76c
jmp 0x104b321
cmp dword [ebp - 0x3a4], 2
mov dword [ebp - 0x334], 0x100b738
je 0x104b321
mov dword [ebp - 0x334], 0x100b710
cmp dword [ebp - 0x3c0], edi
jbe 0x104b5a5
mov dword [ebp - 0x320], 1
cmp dword [ebp - 0x318], edi
je 0x104b347
mov dword [ebp - 0x338], ebx
jmp 0x104b350
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x338], eax
cmp dword [ebp - 0x324], edi
je 0x104b36a
push dword [ebp - 0x324]
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov dword [ebp - 0x324], edi
cmp dword [ebp - 0x328], edi
je 0x104b384
push dword [ebp - 0x328]
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov dword [ebp - 0x328], edi
push dword [ebp - 0x320]
lea eax, [ebp - 0x2c]
push 0x100b700
push 0x26
push eax
call fcn.01032d94
add esp, 0x10
lea eax, [ebp - 0x3b4]
push eax
lea eax, [ebp - 0x324]
push eax
push edi
lea eax, [ebp - 0x30c]
push eax
push dword [ebp - 0x338]
lea eax, [ebp - 0x390]
push dword [ebp - 0x334]
push eax
call fcn.0104a832
mov esi, eax
cmp esi, edi
jne 0x104b5ea
push 0x10042f8
call fcn.0109c1c3
pop ecx
cmp dword [ebp - 0x310], edi
je 0x104b3f3
push 0x100ae40
call fcn.0109c1c3
pop ecx
push dword [ebp - 0x338]
push dword [ebp - 0x334]
push 0x100b7d0
call fcn.0109c1c3
add esp, 0xc
push dword [ebp - 0x3b4]
push dword [ebp - 0x324]
call fcn.01047474
push 0xffffffffffffffff
push dword [ebp - 0x3b4]
push dword [ebp - 0x324]
call fcn.01045b05
mov esi, eax
cmp esi, edi
jne 0x104b5f5
push dword [ebp - 0x320]
lea eax, [ebp - 0x50]
push 0x100b6f4
push 0x24
push eax
call fcn.01032d94
add esp, 0x10
lea eax, [ebp - 0x374]
push eax
lea eax, [ebp - 0x328]
push eax
push edi
lea eax, [ebp - 0x30c]
push eax
lea eax, [ebp - 0x50]
push eax
push 0x100b790
lea eax, [ebp - 0x390]
push eax
call fcn.0104a832
mov esi, eax
cmp esi, edi
jne 0x104b600
push 0x10042f8
call fcn.0109c1c3
pop ecx
cmp dword [ebp - 0x310], edi
je 0x104b4b1
lea eax, [ebp - 0x50]
push eax
push 0x100b790
push 0x100b7d0
call fcn.0109c1c3
add esp, 0xc
cmp dword [0x10d22a4], edi
je 0x104b4cf
push dword [ebp - 0x374]
push dword [ebp - 0x328]
push 0x1804
call fcn.0103cac1
push 1
push 0xa400
push dword [ebp - 0x374]
push dword [ebp - 0x328]
push dword [ebp - 0x3b4]
push dword [ebp - 0x324]
push 0x100b6e0
push 0x990
call fcn.01048560
push eax
push dword [ebp - 0x310]
push dword [ebp - 0x348]
call fcn.010479c8
mov esi, eax
cmp esi, edi
jne 0x104b60b
push dword [ebp - 0x320]
lea eax, [ebp - 0x2c]
push 0x100b700
push 0x26
push eax
call fcn.01032d94
add esp, 0x10
push edi
push dword [ebp - 0x310]
lea eax, [ebp - 0x2c]
push edi
push 1
push eax
push 0x100b710
lea eax, [ebp - 0x390]
push eax
call fcn.010472d5
mov esi, eax
cmp esi, edi
jne 0x104b616
lea eax, [ebp - 0x3dc]
push eax
push edi
push dword [ebp - 0x310]
lea eax, [ebp - 0x2c]
push 1
push 2
push eax
push 0x100b710
lea eax, [ebp - 0x390]
push eax
call fcn.010470bf
mov esi, eax
cmp esi, edi
jne 0x104b621
inc dword [ebp - 0x320]
mov eax, dword [ebp - 0x320]
dec eax
cmp eax, dword [ebp - 0x3c0]
jb 0x104b337
cmp dword [ebp - 0x318], edi
jne 0x104b692
lea eax, [ebp - 0x3bc]
push eax
lea eax, [ebp - 0x358]
push eax
push edi
lea eax, [ebp - 0x30c]
push eax
push ebx
push 0x100b76c
lea eax, [ebp - 0x390]
push eax
call fcn.0104a832
mov esi, eax
cmp esi, edi
je 0x104b62c
push esi
push 0xfc4013e
jmp 0x104be0d
push esi
push 0xf69013e
jmp 0x104be0d
push esi
push 0xf7a013e
jmp 0x104be0d
push esi
push 0xf85013e
jmp 0x104be0d
push esi
push 0xf9a013e
jmp 0x104be0d
push esi
push 0xfa9013e
jmp 0x104be0d
push esi
push 0xfb4013e
jmp 0x104be0d
push 0x10042f8
call fcn.0109c1c3
pop ecx
cmp dword [ebp - 0x310], edi
je 0x104b64a
push 0x100ae40
call fcn.0109c1c3
pop ecx
push ebx
push 0x100b76c
push 0x100b7d0
call fcn.0109c1c3
add esp, 0xc
push dword [ebp - 0x3bc]
push dword [ebp - 0x358]
call fcn.01047474
push 0xffffffffffffffff
push dword [ebp - 0x3bc]
push dword [ebp - 0x358]
call fcn.01045b05
mov esi, eax
cmp esi, edi
je 0x104b692
push esi
push 0xfd2013e
jmp 0x104be0d
lea eax, [ebp - 0x338]
push eax
lea eax, [ebp - 0x34c]
push eax
push 0
lea eax, [ebp - 0x30c]
push eax
push ebx
mov edi, 0x1003ed0
push edi
lea eax, [ebp - 0x390]
push eax
call fcn.0104a832
mov esi, eax
test esi, esi
je 0x104b6cd
push esi
push 0xfe0013e
jmp 0x104be0d
push 0x10042f8
call fcn.0109c1c3
cmp dword [ebp - 0x310], 0
pop ecx
je 0x104b6ec
push 0x100ae40
call fcn.0109c1c3
pop ecx
push ebx
push edi
push 0x100b7d0
call fcn.0109c1c3
add esp, 0xc
push dword [ebp - 0x338]
push dword [ebp - 0x34c]
call fcn.01047474
push 0xffffffffffffffff
push dword [ebp - 0x338]
push dword [ebp - 0x34c]
call fcn.01045b05
mov esi, eax
test esi, esi
je 0x104b730
push esi
push 0xfee013e
jmp 0x104be0d
push dword [ebp - 0x338]
push dword [ebp - 0x34c]
call fcn.01047ae9
test eax, eax
je 0x104b750
push eax
push 0xff1013e
call fcn.0108c503
cmp dword [ebp - 0x318], 0
je 0x104b81b
lea eax, [ebp - 0x334]
push eax
lea eax, [ebp - 0x340]
push eax
push 0
lea eax, [ebp - 0x30c]
push eax
push ebx
mov edi, 0x100b6d0
push edi
lea eax, [ebp - 0x390]
push eax
call fcn.0104a832
mov esi, eax
test esi, esi
je 0x104b798
push esi
push 0x1000013e
jmp 0x104be0d
push 0x10042f8
call fcn.0109c1c3
cmp dword [ebp - 0x310], 0
pop ecx
je 0x104b7b7
push 0x100ae40
call fcn.0109c1c3
pop ecx
push ebx
push edi
push 0x100b7d0
call fcn.0109c1c3
add esp, 0xc
push dword [ebp - 0x334]
push dword [ebp - 0x340]
call fcn.01047474
push 0xffffffffffffffff
push dword [ebp - 0x334]
push dword [ebp - 0x340]
call fcn.01045b05
mov esi, eax
test esi, esi
je 0x104b7fb
push esi
push 0x100e013e
jmp 0x104be0d
push dword [ebp - 0x334]
push dword [ebp - 0x340]
call fcn.01047ae9
test eax, eax
je 0x104b81b
push eax
push 0x1011013e
call fcn.0108c503
lea eax, [ebp - 0x360]
push eax
push 0
lea eax, [ebp - 0x30c]
push eax
mov ebx, 0x100b6b4
push ebx
mov edi, 0x100b68c
push edi
lea eax, [ebp - 0x390]
push eax
call fcn.0104aa2d
mov esi, eax
test esi, esi
je 0x104b854
push esi
push 0x101e013e
jmp 0x104be0d
push dword [ebp - 0x360]
push ebx
push edi
push 0x100af28
call fcn.0109c1c3
add esp, 0x10
lea eax, [ebp - 0x3d0]
push eax
push 0
lea eax, [ebp - 0x30c]
push eax
mov ebx, 0x100b678
push ebx
push edi
lea eax, [ebp - 0x390]
push eax
call fcn.0104aaab
mov esi, eax
test esi, esi
je 0x104b89d
push esi
push 0x102d013e
jmp 0x104be0d
push dword [ebp - 0x3d0]
push ebx
push edi
push 0x100b654
call fcn.0109c1c3
add esp, 0x10
cmp dword [ebp - 0x318], 0
mov esi, 0xe0000102
je 0x104b8ec
cmp dword [ebp - 0x310], 0
je 0x104bdd9
lea eax, [ebp - 0x390]
push eax
call fcn.01049427
test eax, eax
je 0x104bdd9
push eax
push 0x103a013e
jmp 0x104bdd4
lea eax, [ebp - 0x318]
push eax
push esi
push dword [ebp - 0x310]
mov edi, 0x100b644
push 1
push 1
push 0x100b7ac
push edi
lea eax, [ebp - 0x390]
push eax
call fcn.010470bf
xor ebx, ebx
cmp eax, ebx
je 0x104b946
cmp dword [ebp - 0x314], 0x40
mov dword [ebp - 0x318], ebx
mov dword [ebp - 0x31c], esi
mov ecx, 0x100b61c
je 0x104b93a
mov ecx, 0x100b5f4
push eax
push 0x1055013e
push ecx
call fcn.0108c53e
lea eax, [ebp - 0x320]
push eax
lea eax, [ebp - 0x33c]
push eax
push esi
lea eax, [ebp - 0x30c]
push eax
mov esi, 0x100b5cc
push esi
push edi
lea eax, [ebp - 0x390]
push eax
call fcn.0104a832
cmp eax, ebx
je 0x104b992
cmp dword [ebp - 0x314], 0x40
mov ecx, 0x100b590
je 0x104b986
mov ecx, 0x100b554
push eax
push 0x1065013e
push ecx
call fcn.0108c53e
push 0x10042f8
call fcn.0109c1c3
pop ecx
cmp dword [ebp - 0x310], ebx
je 0x104b9bd
push 0x100ae40
call fcn.0109c1c3
push edi
push 0x100b2cc
call fcn.0109c1c3
add esp, 0xc
push esi
push 0x1005b04
call fcn.0109c1c3
pop ecx
pop ecx
cmp dword [ebp - 0x33c], ebx
je 0x104bad6
push dword [ebp - 0x320]
push dword [ebp - 0x33c]
call fcn.01047474
push 0xffffffffffffffff
push dword [ebp - 0x320]
push dword [ebp - 0x33c]
call fcn.01045b05
mov esi, eax
cmp esi, ebx
je 0x104ba0b
push esi
push 0x1073013e
jmp 0x104be0d
lea eax, [ebp - 0x398]
push eax
lea eax, [ebp - 0x350]
push eax
push dword [ebp - 0x31c]
lea eax, [ebp - 0x30c]
push eax
mov ebx, 0x100b53c
push ebx
push edi
lea eax, [ebp - 0x390]
push eax
call fcn.0104a832
mov esi, eax
test esi, esi
je 0x104ba4a
push esi
push 0x107d013e
jmp 0x104be0d
cmp dword [ebp - 0x310], 0
je 0x104ba62
push ebx
push edi
push 0x100b7d0
call fcn.0109c1c3
add esp, 0xc
push 2
push 0x2400
push 1
push dword [ebp - 0x398]
push dword [ebp - 0x350]
push dword [ebp - 0x320]
push dword [ebp - 0x33c]
push 0x100b7c0
push 0x98f
call fcn.01048560
push eax
push dword [ebp - 0x310]
push dword [ebp - 0x348]
call fcn.010476f5
mov esi, eax
test esi, esi
je 0x104bad6
cmp dword [ebp - 0x314], 0x40
mov eax, 0x100b510
je 0x104babd
mov eax, 0x100b4e4
push esi
push 0x1096013e
push eax
call fcn.0108c53e
cmp dword [ebp - 0x348], 0
jne 0x104be12
xor ebx, ebx
cmp dword [ebp - 0x310], ebx
je 0x104baf3
push 0x100b790
push edi
push 0x100b7d0
call fcn.0109c1c3
add esp, 0xc
lea eax, [ebp - 0x3b0]
push eax
lea eax, [ebp - 0x35c]
push eax
push dword [ebp - 0x31c]
lea eax, [ebp - 0x30c]
push eax
push 0x100b790
push edi
lea eax, [ebp - 0x390]
push eax
call fcn.0104a832
mov esi, eax
cmp dword [ebp - 0x318], ebx
je 0x104bb39
cmp esi, ebx
je 0x104bb39
push esi
push 0x10ac013e
jmp 0x104be0d
xor eax, eax
cmp dword [ebp - 0x318], ebx
jbe 0x104bc98
mov ebx, 0x100b738
inc eax
push eax
push 0x100b4d0
mov dword [ebp - 0x3cc], eax
lea eax, [ebp - 0x7c]
push 0x2a
push eax
call fcn.01032d94
add esp, 0x10
lea eax, [ebp - 0x3a8]
push eax
lea eax, [ebp - 0x330]
push eax
push dword [ebp - 0x31c]
lea eax, [ebp - 0x30c]
push eax
lea eax, [ebp - 0x7c]
push eax
push ebx
lea eax, [ebp - 0x390]
push eax
call fcn.0104a832
mov esi, eax
test esi, esi
jne 0x104bdae
push 0x10042f8
call fcn.0109c1c3
pop ecx
cmp dword [ebp - 0x310], esi
je 0x104bbbb
push 0x100ae40
call fcn.0109c1c3
pop ecx
lea eax, [ebp - 0x7c]
push eax
push ebx
push 0x100b7d0
call fcn.0109c1c3
add esp, 0xc
push dword [ebp - 0x3a8]
push dword [ebp - 0x330]
call fcn.01047474
push 0xffffffffffffffff
push dword [ebp - 0x3a8]
push dword [ebp - 0x330]
call fcn.01045b05
mov esi, eax
test esi, esi
jne 0x104bdb6
push 1
push 0xa400
push dword [ebp - 0x318]
push dword [ebp - 0x3b0]
push dword [ebp - 0x35c]
push dword [ebp - 0x3a8]
push dword [ebp - 0x330]
push 0x100b6e0
push 0x990
call fcn.01048560
push eax
push dword [ebp - 0x310]
push dword [ebp - 0x348]
call fcn.010476f5
mov esi, eax
test esi, esi
je 0x104bc73
cmp dword [ebp - 0x314], 0x40
mov eax, 0x100b4a0
je 0x104bc5a
mov eax, 0x100b470
push esi
push 0x10e2013e
push eax
call fcn.0108c53e
cmp dword [ebp - 0x348], 0
jne 0x104be12
push dword [ebp - 0x330]
call dword [sym.imp.KERNEL32.dll_LocalFree]
mov eax, dword [ebp - 0x3cc]
and dword [ebp - 0x330], 0
cmp eax, dword [ebp - 0x318]
jb 0x104bb4c
cmp dword [ebp - 0x314], 0x40
mov ebx, 0x100b430
mov esi, 0x100b3f0
mov eax, ebx
je 0x104bcaf
mov eax, esi
push dword [ebp - 0x31c]
lea ecx, [ebp - 0x30c]
push ecx
push dword [ebp - 0x310]
push eax
push 0x100b3c4
push edi
lea eax, [ebp - 0x390]
push eax
call fcn.0104ab24
test eax, eax
je 0x104bcf2
cmp dword [ebp - 0x314], 0x40
mov ecx, ebx
je 0x104bce6
mov ecx, esi
push eax
push 0x10fd013e
push ecx
call fcn.0108c53e
lea eax, [ebp - 0x31c]
push eax
lea eax, [ebp - 0x368]
push eax
push dword [ebp - 0x31c]
lea eax, [ebp - 0x30c]
push eax
mov esi, 0x100b394
push esi
push edi
lea eax, [ebp - 0x390]
push eax
call fcn.0104a832
test eax, eax
je 0x104bd43
cmp dword [ebp - 0x314], 0x40
mov ecx, 0x100b350
je 0x104bd37
mov ecx, 0x100b308
push eax
push 0x110d013e
push ecx
call fcn.0108c53e
push 0x10042f8
call fcn.0109c1c3
cmp dword [ebp - 0x310], 0
pop ecx
je 0x104bd6f
push 0x100ae40
call fcn.0109c1c3
push edi
push 0x100b2cc
call fcn.0109c1c3
add esp, 0xc
push esi
push 0x1005b04
call fcn.0109c1c3
mov edi, dword [ebp - 0x368]
pop ecx
pop ecx
test edi, edi
je 0x104bdd9
push dword [ebp - 0x31c]
push edi
call fcn.01047474
push 0xffffffffffffffff
push dword [ebp - 0x31c]
push edi
call fcn.01045b05
mov esi, eax
test esi, esi
je 0x104bdbe
push esi
push 0x111b013e
jmp 0x104be0d
push esi
push 0x10bf013e
jmp 0x104be0d
push esi
push 0x10cd013e
jmp 0x104be0d
push dword [ebp - 0x31c]
push edi
call fcn.01047ae9
test eax, eax
je 0x104bdd9
push eax
push 0x111e013e
call fcn.0108c503
push 0x10042f8
call fcn.0109c1c3
pop ecx
xor esi, esi
jmp 0x104be12
push ebx
push ebx
push 0x98b
call fcn.0108bbbd
push eax
push 0x100b2dc
call fcn.0109c1c3
add esp, 0x10
mov esi, 0x8007000d
push esi
push 0xe65013e
call fcn.0108c503
mov ecx, 0x208
lea eax, [ebp - 0x284]
mov byte [eax], 0
inc eax
dec ecx
jne 0x104be1d
mov edi, dword [sym.imp.KERNEL32.dll_LocalFree]
cmp dword [ebp - 0x36c], ecx
je 0x104be3a
push dword [ebp - 0x36c]
call edi
xor ebx, ebx
cmp dword [ebp - 0x32c], ebx
je 0x104be4c
push dword [ebp - 0x32c]
call edi
cmp dword [ebp - 0x328], ebx
je 0x104be73
mov ecx, dword [ebp - 0x374]
mov eax, dword [ebp - 0x328]
cmp ecx, ebx
je 0x104be6b
mov byte [eax], 0
inc eax
dec ecx
jne 0x104be64
push dword [ebp - 0x328]
call edi
cmp dword [ebp - 0x344], ebx
je 0x104be9a
mov ecx, dword [ebp - 0x39c]
mov eax, dword [ebp - 0x344]
cmp ecx, ebx
je 0x104be92
mov byte [eax], 0
inc eax
dec ecx
jne 0x104be8b
push dword [ebp - 0x344]
call edi
cmp dword [ebp - 0x358], ebx
je 0x104beaa
push dword [ebp - 0x358]
call edi
cmp dword [ebp - 0x34c], ebx
je 0x104beba
push dword [ebp - 0x34c]
call edi
cmp dword [ebp - 0x340], ebx
je 0x104beca
push dword [ebp - 0x340]
call edi
cmp dword [ebp - 0x324], ebx
je 0x104beda
push dword [ebp - 0x324]
call edi
cmp dword [ebp - 0x33c], ebx
je 0x104beea
push dword [ebp - 0x33c]
call edi
cmp dword [ebp - 0x350], ebx
je 0x104bf11
mov ecx, dword [ebp - 0x398]
mov eax, dword [ebp - 0x350]
cmp ecx, ebx
je 0x104bf09
mov byte [eax], 0
inc eax
dec ecx
jne 0x104bf02
push dword [ebp - 0x350]
call edi
cmp dword [ebp - 0x330], ebx
je 0x104bf21
push dword [ebp - 0x330]
call edi
cmp dword [ebp - 0x35c], ebx
je 0x104bf48
mov ecx, dword [ebp - 0x3b0]
mov eax, dword [ebp - 0x35c]
cmp ecx, ebx
je 0x104bf40
mov byte [eax], 0
inc eax
dec ecx
jne 0x104bf39
push dword [ebp - 0x35c]
call edi
cmp dword [ebp - 0x368], ebx
je 0x104bf58
push dword [ebp - 0x368]
call edi
cmp dword [ebp - 0x360], ebx
je 0x104bf68
push dword [ebp - 0x360]
call edi
cmp dword [ebp - 0x370], ebx
je 0x104bf78
push dword [ebp - 0x370]
call edi
cmp dword [ebp - 0x308], ebx
je 0x104bf8c
push dword [ebp - 0x308]
call dword [sym.imp.ADVAPI32.dll_CryptDestroyKey]
lea eax, [ebp - 0x304]
push eax
call fcn.010bde20
cmp dword [ebp - 0x364], ebx
je 0x104bfad
push ebx
push dword [ebp - 0x364]
call dword [sym.imp.ADVAPI32.dll_CryptReleaseContext]
cmp dword [ebp - 0x390], 0xffffffff
je 0x104bfc2
lea eax, [ebp - 0x390]
push eax
call fcn.0109e21b
cmp dword [ebp - 0x354], ebx
je 0x104bfe6
cmp dword [0x10d22c0], ebx
jne 0x104bfde
push dword [ebp - 0x354]
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push dword [ebp - 0x354]
call edi
mov eax, dword [ebp - 0x3c4]
mov ecx, dword [ebp - 4]
pop edi
mov dword [0x10d22b4], eax
mov eax, esi
pop esi
xor ecx, ebp
pop ebx
call fcn.01077d0b
leave
ret 0xc