Function at 0x103d10d
Capabilities:
Copy file
Delete file
Set file attributes
Write file on windows

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x760
mov eax, dword [0x1099a38]
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
mov dword [ebp - 0x734], eax
mov eax, dword [ebp + 0xc]
push ebx
push esi
mov esi, dword [ebp + 0x18]
mov dword [ebp - 0x74c], eax
mov eax, dword [ebp + 0x20]
push edi
mov edi, dword [ebp + 0x14]
mov dword [ebp - 0x744], eax
mov eax, dword [ebp + 0x24]
push 4
mov dword [ebp - 0x738], eax
mov eax, dword [ebp + 0x28]
push 0x1000
mov dword [ebp - 0x740], eax
xor eax, eax
push 0x100000
mov ebx, 0x1010724
push eax
mov dword [ebp - 0x72c], ebx
mov dword [ebp - 0x73c], eax
mov dword [ebp - 0x724], eax
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
test eax, eax
mov dword [ebp - 0x730], eax
jne 0x103d19d
push 0x10106f0
call fcn.01071aad
xor eax, eax
jmp 0x103e4a3
cmp dword [0x10bf54c], 1
jne 0x103d1c5
push 0x100d9dc
push 0x10106c8
call fcn.0107230a
test eax, eax
mov dword [ebp - 0x72c], eax
jne 0x103d1c5
mov dword [ebp - 0x72c], ebx
cmp dword [0x109a030], 0
push dword [0x10bf788]
push esi
push dword [0x10bd5e4]
je 0x103d207
push dword [ebp - 0x72c]
push dword [ebp - 0x744]
push dword [ebp + 0x1c]
push esi
mov esi, dword [sym.imp.msvcrt.dll_sprintf]
push edi
push dword [ebp + 0x10]
push 0x1010510
push dword [ebp - 0x730]
call esi
add esp, 0x2c
jmp 0x103d22b
push dword [ebp - 0x744]
push dword [ebp + 0x1c]
push esi
mov esi, dword [sym.imp.msvcrt.dll_sprintf]
push edi
push dword [ebp + 0x10]
push 0x1010370
push dword [ebp - 0x730]
call esi
add esp, 0x28
mov edi, eax
add edi, dword [ebp - 0x730]
cmp dword [ebp - 0x72c], ebx
je 0x103d248
push dword [ebp - 0x72c]
call dword [sym.imp.msvcrt.dll_free]
pop ecx
lea eax, [ebp - 0x75c]
push eax
push 0
push 0x1010350
push dword [ebp - 0x734]
call dword [sym.imp.UPDSPAPI.dll_UpdSpFindFirstLineA]
mov ebx, 0x104
jmp 0x103d2cc
push 0
push ebx
lea eax, [ebp - 0x518]
push eax
push 1
lea eax, [ebp - 0x75c]
push eax
call dword [sym.imp.UPDSPAPI.dll_UpdSpGetStringFieldA]
push 0
mov dword [ebp - 0x744], eax
push ebx
lea eax, [ebp - 0x61c]
push eax
push 2
lea eax, [ebp - 0x75c]
push eax
call dword [sym.imp.UPDSPAPI.dll_UpdSpGetStringFieldA]
mov ecx, dword [ebp - 0x744]
test ecx, eax
je 0x103d2be
lea eax, [ebp - 0x61c]
push eax
lea eax, [ebp - 0x518]
push eax
call fcn.01032879
lea eax, [ebp - 0x75c]
push eax
push eax
call dword [sym.imp.UPDSPAPI.dll_UpdSpFindNextLine]
test eax, eax
mov dword [ebp - 0x744], eax
jne 0x103d269
mov eax, dword [ebp - 0x738]
jmp 0x103d353
mov eax, dword [ebp - 0x730]
add eax, 0xff000
cmp edi, eax
jae 0x103d35d
mov eax, dword [ebp - 0x728]
push 0x100fc6c
push dword [eax + 8]
call dword [sym.imp.msvcrt.dll_strstr]
test eax, eax
pop ecx
pop ecx
je 0x103d34a
mov eax, dword [ebp - 0x728]
mov dword [ebp - 0x72c], eax
mov eax, dword [ebp - 0x72c]
push dword [eax + 0xc]
push 0x1010340
push edi
call esi
add edi, eax
mov eax, dword [ebp - 0x72c]
mov eax, dword [eax]
add esp, 0xc
test eax, eax
mov dword [ebp - 0x72c], eax
je 0x103d34a
mov eax, dword [ebp - 0x730]
add eax, 0xff000
cmp edi, eax
jb 0x103d313
mov eax, dword [ebp - 0x728]
mov eax, dword [eax + 4]
test eax, eax
mov dword [ebp - 0x728], eax
jne 0x103d2de
push 0x1010328
push edi
call esi
add edi, eax
mov eax, dword [0x10f549c]
test eax, eax
pop ecx
pop ecx
je 0x103d384
lea edx, [eax + 1]
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x103d375
sub eax, edx
mov dword [ebp - 0x724], eax
mov eax, dword [ebp - 0x738]
jmp 0x103d4f2
mov eax, dword [ebp - 0x730]
add eax, 0xff000
cmp edi, eax
jae 0x103d500
mov eax, dword [ebp - 0x728]
push dword [eax + 8]
push 0x101031c
push edi
call esi
add esp, 0xc
add edi, eax
mov eax, dword [ebp - 0x728]
mov eax, dword [eax + 8]
lea ecx, [ebp - 0x20c]
mov dl, byte [eax]
inc eax
mov byte [ecx], dl
inc ecx
test dl, dl
jne 0x103d3c7
lea eax, [ebp - 0x20c]
push 0x100fc6c
push eax
call dword [sym.imp.msvcrt.dll_strstr]
test eax, eax
pop ecx
pop ecx
jne 0x103d429
lea eax, [ebp - 0x20c]
push 0x1010304
push eax
call dword [sym.imp.msvcrt.dll_strstr]
test eax, eax
pop ecx
pop ecx
jne 0x103d429
lea eax, [ebp - 0x20c]
push 0x100fcb4
push eax
call dword [sym.imp.msvcrt.dll_strstr]
test eax, eax
pop ecx
pop ecx
jne 0x103d429
push eax
lea eax, [ebp - 0x20c]
push eax
call dword [sym.imp.msvcrt.dll_strchr]
pop ecx
pop ecx
cmp dword [ebp - 0x724], 0
mov byte [eax], 0
je 0x103d48c
push dword [ebp - 0x724]
lea eax, [ebp - 0x20c]
push dword [0x10f549c]
push eax
call dword [sym.imp.msvcrt.dll__strnicmp]
add esp, 0xc
test eax, eax
jne 0x103d48c
mov eax, dword [ebp - 0x724]
lea eax, [ebp + eax - 0x20c]
cmp byte [eax], 0x5c
jne 0x103d468
inc eax
cmp byte [eax], 0
je 0x103d480
push eax
push 0x100a5
push 0x10102f8
push edi
call esi
add esp, 0x10
jmp 0x103d4e7
push 0x100a5
push 0x10102f0
jmp 0x103d4e1
push 0xa
lea eax, [ebp - 0x20c]
push 0x100fc8c
push eax
call dword [sym.imp.msvcrt.dll__strnicmp]
add esp, 0xc
test eax, eax
jne 0x103d4d5
cmp byte [ebp - 0x202], 0x5c
lea eax, [ebp - 0x202]
jne 0x103d4bc
lea eax, [ebp - 0x201]
cmp byte [eax], 0
je 0x103d4c9
push eax
push 0x10102e4
jmp 0x103d4e1
push 0x10102dc
push edi
call esi
pop ecx
pop ecx
jmp 0x103d4e7
lea eax, [ebp - 0x20c]
push eax
push 0x10102d0
push edi
call esi
add esp, 0xc
add edi, eax
mov eax, dword [ebp - 0x728]
mov eax, dword [eax + 4]
test eax, eax
mov dword [ebp - 0x728], eax
jne 0x103d38f
push 0x10102b8
push edi
call esi
pop ecx
add edi, eax
mov eax, dword [ebp - 0x738]
pop ecx
jmp 0x103d576
mov eax, dword [ebp - 0x730]
add eax, 0xff000
cmp edi, eax
jae 0x103d580
mov eax, dword [ebp - 0x728]
push 0x100fc6c
push dword [eax + 8]
call dword [sym.imp.msvcrt.dll_strstr]
test eax, eax
pop ecx
pop ecx
je 0x103d56d
mov eax, dword [ebp - 0x728]
push 0x10102ac
push dword [eax + 8]
call dword [sym.imp.msvcrt.dll_strstr]
test eax, eax
pop ecx
pop ecx
jne 0x103d56d
mov eax, dword [ebp - 0x728]
push dword [eax + 8]
push 0x1010294
push edi
call esi
add esp, 0xc
add edi, eax
mov eax, dword [ebp - 0x728]
mov eax, dword [eax + 4]
test eax, eax
mov dword [ebp - 0x728], eax
jne 0x103d514
push 0x1010290
push edi
call esi
and dword [ebp - 0x72c], 0
add edi, eax
mov eax, dword [ebp - 0x738]
test eax, eax
pop ecx
pop ecx
mov dword [ebp - 0x728], eax
je 0x103d614
mov eax, dword [ebp - 0x730]
add eax, 0xff000
cmp edi, eax
jae 0x103d5ff
mov eax, dword [ebp - 0x728]
push 0x100fcb4
push dword [eax + 8]
call dword [sym.imp.msvcrt.dll_strstr]
test eax, eax
pop ecx
pop ecx
je 0x103d5ec
mov eax, dword [ebp - 0x728]
push dword [eax + 8]
push 0x1010278
push edi
call esi
add esp, 0xc
add edi, eax
mov dword [ebp - 0x72c], 1
mov eax, dword [ebp - 0x728]
mov eax, dword [eax + 4]
test eax, eax
mov dword [ebp - 0x728], eax
jne 0x103d5a3
cmp dword [ebp - 0x72c], 0
je 0x103d614
push 0x1010290
push edi
call esi
pop ecx
pop ecx
add edi, eax
push 0x101025c
push edi
call esi
and dword [ebp - 0x72c], 0
add edi, eax
mov eax, dword [ebp - 0x738]
test eax, eax
pop ecx
pop ecx
mov dword [ebp - 0x724], edi
mov dword [ebp - 0x728], eax
je 0x103d6ba
mov eax, dword [ebp - 0x730]
add eax, 0xff000
cmp edi, eax
jae 0x103d69f
mov eax, dword [ebp - 0x728]
push 0x1010304
push dword [eax + 8]
call dword [sym.imp.msvcrt.dll_strstr]
test eax, eax
pop ecx
pop ecx
je 0x103d68c
mov eax, dword [ebp - 0x728]
push dword [eax + 8]
push 0x1010294
push edi
call esi
add esp, 0xc
add edi, eax
mov dword [ebp - 0x724], edi
mov dword [ebp - 0x72c], 1
mov eax, dword [ebp - 0x728]
mov eax, dword [eax + 4]
test eax, eax
mov dword [ebp - 0x728], eax
jne 0x103d63d
cmp dword [ebp - 0x72c], 0
je 0x103d6ba
push 0x1010290
push edi
call esi
pop ecx
add edi, eax
pop ecx
mov dword [ebp - 0x724], edi
mov eax, dword [ebp - 0x738]
mov edi, 0x1010250
jmp 0x103d777
mov eax, dword [ebp - 0x730]
add eax, 0xff000
cmp dword [ebp - 0x724], eax
jae 0x103d785
mov eax, dword [ebp - 0x728]
push dword [eax + 8]
push edi
push dword [ebp - 0x724]
call esi
add esp, 0xc
add dword [ebp - 0x724], eax
mov eax, dword [ebp - 0x728]
mov dword [ebp - 0x72c], eax
mov eax, dword [ebp - 0x72c]
test byte [eax + 0x11], 2
push dword [eax + 0xc]
je 0x103d71e
push 0x1010240
jmp 0x103d723
push 0x1010234
push dword [ebp - 0x724]
call esi
add dword [ebp - 0x724], eax
mov eax, dword [ebp - 0x72c]
mov eax, dword [eax]
add esp, 0xc
test eax, eax
mov dword [ebp - 0x72c], eax
je 0x103d759
mov eax, dword [ebp - 0x730]
add eax, 0xff000
cmp dword [ebp - 0x724], eax
jb 0x103d708
push 0x1010290
push dword [ebp - 0x724]
call esi
add dword [ebp - 0x724], eax
mov eax, dword [ebp - 0x728]
mov eax, dword [eax + 4]
pop ecx
pop ecx
test eax, eax
mov dword [ebp - 0x728], eax
jne 0x103d6ca
mov eax, dword [ebp - 0x740]
and dword [ebp - 0x72c], 0
test eax, eax
mov dword [ebp - 0x728], eax
je 0x103d869
mov ecx, dword [ebp - 0x730]
add ecx, 0xff000
cmp dword [ebp - 0x724], ecx
jae 0x103d84b
xor ecx, ecx
cmp dword [eax + 0x20], ecx
je 0x103d83b
cmp dword [eax + 0x24], ecx
jne 0x103d83b
cmp dword [eax + 0x10], ecx
jne 0x103d83b
cmp dword [ebp - 0x72c], ecx
jne 0x103d7f6
push 0x101021c
push dword [ebp - 0x724]
mov dword [ebp - 0x72c], 1
call esi
add dword [ebp - 0x724], eax
mov eax, dword [ebp - 0x728]
pop ecx
pop ecx
mov ecx, dword [eax + 0xc]
test ecx, ecx
jne 0x103d802
mov ecx, 0x1009220
mov eax, dword [eax + 8]
test eax, eax
mov edx, eax
jne 0x103d810
mov edx, 0x1009220
mov eax, dword [ebp - 0x728]
push dword [eax + 0x14]
add eax, 0x28
push ecx
push edx
push eax
push 0x1010204
push dword [ebp - 0x724]
call esi
add esp, 0x18
add dword [ebp - 0x724], eax
mov eax, dword [ebp - 0x728]
mov eax, dword [eax]
test eax, eax
mov dword [ebp - 0x728], eax
jne 0x103d7a0
cmp dword [ebp - 0x72c], 0
je 0x103d869
push 0x1010290
push dword [ebp - 0x724]
call esi
add dword [ebp - 0x724], eax
pop ecx
pop ecx
mov eax, dword [ebp - 0x740]
and dword [ebp - 0x72c], 0
test eax, eax
mov dword [ebp - 0x728], eax
je 0x103d927
mov ecx, dword [ebp - 0x730]
add ecx, 0xff000
cmp dword [ebp - 0x724], ecx
jae 0x103d909
xor ecx, ecx
cmp dword [eax + 0x20], ecx
jne 0x103d8f9
cmp dword [eax + 0x24], ecx
jne 0x103d8f9
cmp dword [eax + 0x10], ecx
jne 0x103d8f9
cmp dword [ebp - 0x72c], ecx
jne 0x103d8d0
push 0x10101ec
push dword [ebp - 0x724]
mov dword [ebp - 0x72c], 1
call esi
add dword [ebp - 0x724], eax
pop ecx
pop ecx
mov eax, dword [ebp - 0x728]
push dword [eax + 8]
add eax, 0x28
push eax
push 0x10101dc
push dword [ebp - 0x724]
call esi
add esp, 0x10
add dword [ebp - 0x724], eax
mov eax, dword [ebp - 0x728]
mov eax, dword [eax]
test eax, eax
mov dword [ebp - 0x728], eax
jne 0x103d884
cmp dword [ebp - 0x72c], 0
je 0x103d927
push 0x1010290
push dword [ebp - 0x724]
call esi
add dword [ebp - 0x724], eax
pop ecx
pop ecx
and dword [ebp - 0x72c], 0
mov eax, dword [ebp - 0x740]
jmp 0x103dab5
mov ecx, dword [ebp - 0x730]
add ecx, 0xff000
cmp dword [ebp - 0x724], ecx
jae 0x103dac3
xor ecx, ecx
cmp dword [eax + 0x20], ecx
je 0x103dab3
cmp dword [eax + 0x24], ecx
jne 0x103dab3
cmp dword [eax + 0x10], ecx
je 0x103dab3
cmp dword [ebp - 0x72c], ecx
jne 0x103d99b
push 0x10101c0
push dword [ebp - 0x724]
mov dword [ebp - 0x72c], 1
call esi
add dword [ebp - 0x724], eax
mov eax, dword [ebp - 0x728]
pop ecx
pop ecx
mov ecx, dword [ebp - 0x724]
mov dword [ebp - 0x748], ecx
mov ecx, dword [eax + 0xc]
test ecx, ecx
jne 0x103d9b3
mov ecx, 0x1009220
mov eax, dword [eax + 8]
test eax, eax
mov edx, eax
jne 0x103d9c1
mov edx, 0x1009220
mov eax, dword [ebp - 0x728]
push dword [eax + 0x18]
add eax, 0x28
push dword [eax - 0xc]
push dword [eax - 0x18]
push ecx
push edx
push eax
push 0x10101a4
push dword [ebp - 0x724]
call esi
add dword [ebp - 0x724], eax
mov eax, dword [ebp - 0x728]
and dword [ebp - 0x738], 0
add esp, 0x20
cmp dword [eax + 0x18], 0
jbe 0x103da98
mov eax, dword [ebp - 0x724]
inc dword [ebp - 0x724]
mov byte [eax], 0x2c
mov eax, dword [ebp - 0x724]
sub eax, dword [ebp - 0x748]
cmp eax, 0x4b
jle 0x103da53
push 0x10101a0
push dword [ebp - 0x724]
call esi
add dword [ebp - 0x724], eax
mov eax, dword [ebp - 0x724]
push 0x100ab68
push eax
mov dword [ebp - 0x748], eax
call esi
add esp, 0x10
add dword [ebp - 0x724], eax
mov eax, dword [ebp - 0x728]
mov eax, dword [eax + 0x14]
mov ecx, dword [ebp - 0x738]
movzx eax, byte [ecx + eax]
push eax
push 0x1010198
push dword [ebp - 0x724]
call esi
add dword [ebp - 0x724], eax
mov eax, dword [ebp - 0x728]
add esp, 0xc
inc dword [ebp - 0x738]
mov ecx, dword [ebp - 0x738]
cmp ecx, dword [eax + 0x18]
jb 0x103da03
push 0x1010190
push dword [ebp - 0x724]
call esi
add dword [ebp - 0x724], eax
mov eax, dword [ebp - 0x728]
pop ecx
pop ecx
mov eax, dword [eax]
test eax, eax
mov dword [ebp - 0x728], eax
jne 0x103d939
mov eax, dword [ebp - 0x740]
and dword [ebp - 0x72c], 0
test eax, eax
mov dword [ebp - 0x728], eax
je 0x103db84
mov ecx, dword [ebp - 0x730]
add ecx, 0xff000
cmp dword [ebp - 0x724], ecx
jae 0x103db66
xor ecx, ecx
cmp dword [eax + 0x20], ecx
jne 0x103db56
cmp dword [eax + 0x24], ecx
jne 0x103db56
cmp dword [eax + 0x10], ecx
je 0x103db56
cmp dword [ebp - 0x72c], ecx
jne 0x103db2a
push 0x1010178
push dword [ebp - 0x724]
mov dword [ebp - 0x72c], 1
call esi
add dword [ebp - 0x724], eax
pop ecx
pop ecx
mov eax, dword [ebp - 0x728]
push dword [eax + 0x10]
add eax, 0x28
push dword [eax - 0x20]
push eax
push 0x1010164
push dword [ebp - 0x724]
call esi
add esp, 0x14
add dword [ebp - 0x724], eax
mov eax, dword [ebp - 0x728]
mov eax, dword [eax]
test eax, eax
mov dword [ebp - 0x728], eax
jne 0x103dade
cmp dword [ebp - 0x72c], 0
je 0x103db84
push 0x1010290
push dword [ebp - 0x724]
call esi
add dword [ebp - 0x724], eax
pop ecx
pop ecx
push dword [ebp - 0x734]
call fcn.01077d9b
test eax, eax
mov dword [ebp - 0x748], eax
je 0x103dc0c
push 0x1010148
push dword [ebp - 0x724]
call esi
add dword [ebp - 0x724], eax
mov eax, dword [ebp - 0x748]
pop ecx
pop ecx
mov dword [ebp - 0x740], eax
mov eax, dword [ebp - 0x740]
add eax, 8
push eax
push 0x1010234
push dword [ebp - 0x724]
call esi
add dword [ebp - 0x724], eax
mov eax, dword [ebp - 0x740]
mov eax, dword [eax]
add esp, 0xc
test eax, eax
mov dword [ebp - 0x740], eax
jne 0x103dbba
push 0x1010290
push dword [ebp - 0x724]
call esi
add dword [ebp - 0x724], eax
pop ecx
pop ecx
push dword [ebp - 0x748]
call fcn.010715de
mov eax, dword [0x109a084]
cmp eax, 4
jne 0x103dc38
push 0x101013c
call fcn.01042a48
mov dword [ebp - 0x73c], eax
push ebx
lea eax, [ebp - 0x310]
push eax
push 0x1010138
jmp 0x103dd1c
cmp eax, 8
jne 0x103dc5f
push 0x101012c
call fcn.01042a48
mov dword [ebp - 0x73c], eax
push ebx
lea eax, [ebp - 0x310]
push eax
push 0x1010128
jmp 0x103dd1c
cmp eax, 0x10
jne 0x103dc86
push 0x101011c
call fcn.01042a48
mov dword [ebp - 0x73c], eax
push ebx
lea eax, [ebp - 0x310]
push eax
push 0x1010118
jmp 0x103dd1c
cmp eax, 0xa0
jne 0x103dcac
push 0x101010c
call fcn.01042a48
mov dword [ebp - 0x73c], eax
push ebx
lea eax, [ebp - 0x310]
push eax
push 0x1010108
jmp 0x103dd1c
cmp eax, 0x40
jne 0x103dcd0
push 0x10100fc
call fcn.01042a48
mov dword [ebp - 0x73c], eax
push ebx
lea eax, [ebp - 0x310]
push eax
push 0x10100f8
jmp 0x103dd1c
cmp eax, 0x20
jne 0x103dcf4
push 0x10100ec
call fcn.01042a48
mov dword [ebp - 0x73c], eax
push ebx
lea eax, [ebp - 0x310]
push eax
push 0x10100e8
jmp 0x103dd1c
cmp eax, 0xc0
jne 0x103ddf4
push 0x10100dc
call fcn.01042a48
mov dword [ebp - 0x73c], eax
push ebx
lea eax, [ebp - 0x310]
push eax
push 0x10100d8
push 0x10c6040
call fcn.01070fc9
cmp dword [ebp - 0x73c], 0
je 0x103ddf4
push dword [ebp - 0x73c]
call fcn.01042b90
mov eax, dword [ebp - 0x73c]
cmp dword [eax + 0x18], 2
jne 0x103dd59
push ebx
lea eax, [ebp - 0x310]
push eax
push 0x10100d0
jmp 0x103dd72
mov eax, dword [ebp - 0x73c]
cmp dword [eax + 0x1c], 2
jne 0x103dd7e
push ebx
lea eax, [ebp - 0x310]
push eax
push 0x10100c8
lea eax, [ebp - 0x310]
push eax
call fcn.01070fc9
mov eax, dword [ebp - 0x73c]
cmp dword [eax + 0x18], 2
je 0x103dd90
cmp dword [eax + 0x1c], 2
jne 0x103ddf4
push 0xfffa
push 0x1106960
push 0x10100bc
push 0x10f54c0
call fcn.01070fc9
push 0xfffa
push 0x10f6960
push 0x10100b0
push 0x10f54c0
call fcn.01070fc9
push 0
push 0x10f6960
push 0x1106960
call dword [sym.imp.KERNEL32.dll_CopyFileA]
test eax, eax
je 0x103ddf4
push 0x1106960
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
push 0x1106960
lea eax, [ebp - 0x310]
push eax
call fcn.0103a535
push 0x1010090
push edi
push dword [ebp - 0x724]
call esi
add dword [ebp - 0x724], eax
mov eax, dword [ebp - 0x730]
add esp, 0xc
push 0x1010090
add eax, 0xff000
push eax
lea eax, [ebp - 0x724]
push eax
push dword [ebp - 0x734]
call fcn.010303e8
push ebx
lea eax, [ebp - 0x108]
push eax
push 0x1010090
call fcn.01074e2b
lea eax, [ebp - 0x108]
push eax
push edi
push dword [ebp - 0x724]
call esi
add dword [ebp - 0x724], eax
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
mov eax, dword [ebp - 0x730]
add eax, 0xff000
push eax
lea eax, [ebp - 0x724]
push eax
push dword [ebp - 0x734]
call fcn.010303e8
push 0x101006c
push edi
push dword [ebp - 0x724]
call esi
add dword [ebp - 0x724], eax
mov eax, dword [ebp - 0x730]
add esp, 0xc
push 0x101006c
add eax, 0xff000
push eax
lea eax, [ebp - 0x724]
push eax
push dword [ebp - 0x734]
call fcn.010303e8
push ebx
lea eax, [ebp - 0x108]
push eax
push 0x101006c
call fcn.01074e2b
lea eax, [ebp - 0x108]
push eax
push edi
push dword [ebp - 0x724]
call esi
add dword [ebp - 0x724], eax
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
mov eax, dword [ebp - 0x730]
add eax, 0xff000
push eax
lea eax, [ebp - 0x724]
push eax
push dword [ebp - 0x734]
call fcn.010303e8
push 0x101004c
push edi
push dword [ebp - 0x724]
call esi
add dword [ebp - 0x724], eax
mov eax, dword [ebp - 0x730]
add esp, 0xc
add eax, 0xff000
push 0x101004c
push eax
lea eax, [ebp - 0x724]
push eax
push dword [ebp - 0x734]
call fcn.010303e8
push ebx
lea eax, [ebp - 0x108]
push eax
push 0x101004c
call fcn.01074e2b
lea eax, [ebp - 0x108]
push eax
push edi
push dword [ebp - 0x724]
call esi
add dword [ebp - 0x724], eax
add esp, 0xc
lea eax, [ebp - 0x108]
push eax
mov eax, dword [ebp - 0x730]
add eax, 0xff000
push eax
lea eax, [ebp - 0x724]
push eax
push dword [ebp - 0x734]
call fcn.010303e8
push 0x100be3c
push edi
push dword [ebp - 0x724]
call esi
add dword [ebp - 0x724], eax
mov eax, dword [ebp - 0x730]
add esp, 0xc
push 0x1010028
add eax, 0xff000
push eax
lea eax, [ebp - 0x724]
push eax
push dword [ebp - 0x734]
call fcn.010303e8
push ebx
lea eax, [ebp - 0x108]
push eax
push 0x100be3c
call fcn.01074e2b
lea eax, [ebp - 0x108]
push eax
push edi
push dword [ebp - 0x724]
call esi
add dword [ebp - 0x724], eax
add esp, 0xc
push ebx
lea eax, [ebp - 0x108]
push eax
push 0x1010028
call fcn.01074e2b
lea eax, [ebp - 0x108]
push eax
mov eax, dword [ebp - 0x730]
add eax, 0xff000
push eax
lea eax, [ebp - 0x724]
push eax
push dword [ebp - 0x734]
call fcn.010303e8
push 0x10097f8
push 0x101001c
push dword [ebp - 0x724]
call esi
add dword [ebp - 0x724], eax
mov eax, dword [ebp - 0x730]
add esp, 0xc
push 0x10097f8
add eax, 0xff000
push eax
lea eax, [ebp - 0x724]
push eax
push dword [ebp - 0x734]
call fcn.010303e8
push 0x100fff0
push edi
push dword [ebp - 0x724]
call esi
add dword [ebp - 0x724], eax
mov eax, dword [ebp - 0x730]
add esp, 0xc
push 0x100ffb8
add eax, 0xff000
push eax
lea eax, [ebp - 0x724]
push eax
push dword [ebp - 0x734]
call fcn.010303e8
push ebx
lea eax, [ebp - 0x108]
push eax
push 0x100fff0
call fcn.01074e2b
lea eax, [ebp - 0x108]
push eax
push edi
push dword [ebp - 0x724]
call esi
add dword [ebp - 0x724], eax
add esp, 0xc
push ebx
lea eax, [ebp - 0x108]
push eax
push 0x100ffb8
call fcn.01074e2b
lea eax, [ebp - 0x108]
push eax
mov eax, dword [ebp - 0x730]
add eax, 0xff000
push eax
lea eax, [ebp - 0x724]
push eax
push dword [ebp - 0x734]
call fcn.010303e8
cmp dword [ebp - 0x73c], 0
je 0x103e168
mov eax, dword [ebp - 0x73c]
cmp dword [eax + 0x18], 2
je 0x103e123
cmp dword [eax + 0x1c], 2
jne 0x103e168
mov edi, 0xfffa
push edi
push 0x1106960
push 0x10100bc
push 0x10f54c0
call fcn.01070fc9
push edi
mov edi, 0x10f6960
push edi
push 0x10100b0
push 0x10f54c0
call fcn.01070fc9
push 0
push 0x1106960
push edi
call dword [sym.imp.KERNEL32.dll_CopyFileA]
push edi
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
mov edi, dword [ebp - 0x730]
push 0x100ffa4
add edi, 0xff000
push edi
lea eax, [ebp - 0x724]
push eax
push dword [ebp - 0x734]
call fcn.0103014d
push edi
lea eax, [ebp - 0x724]
push eax
xor edi, edi
push edi
push edi
push edi
push edi
push dword [0x109ab70]
push 4
push dword [ebp - 0x734]
call fcn.0103bf75
cmp eax, edi
je 0x103e1be
push eax
push 0x100ff38
call fcn.01071ad5
pop ecx
pop ecx
call fcn.010721ad
mov edi, eax
shr edi, 8
mov dword [ebp - 0x738], 1
cmp dword [ebp - 0x738], edi
jle 0x103e224
push dword [ebp - 0x738]
lea eax, [ebp - 0x720]
push 0x100ff1c
push 0x100cf80
push 0x103
push eax
call dword [sym.imp.msvcrt.dll__snprintf]
add esp, 0x14
lea eax, [ebp - 0x720]
push eax
mov eax, dword [ebp - 0x730]
add eax, 0xff000
push eax
lea eax, [ebp - 0x724]
push eax
push dword [ebp - 0x734]
call fcn.0103014d
inc dword [ebp - 0x738]
cmp dword [ebp - 0x738], 6
jl 0x103e1d2
lea eax, [ebp - 0x75c]
push eax
push 0
push 0x100ff08
push dword [ebp - 0x734]
call dword [sym.imp.UPDSPAPI.dll_UpdSpFindFirstLineA]
test eax, eax
mov edi, dword [ebp - 0x724]
je 0x103e2d2
push 0x100fefc
push edi
call esi
pop ecx
pop ecx
add edi, eax
xor eax, eax
push eax
push 0xfff8
push 0x1106961
push eax
push eax
push dword [ebp - 0x734]
lea eax, [ebp - 0x75c]
push eax
mov byte [0x1106960], 0x22
call dword [sym.imp.UPDSPAPI.dll_UpdSpGetLineTextA]
test eax, eax
je 0x103e2c0
mov eax, 0x1106960
lea ecx, [eax + 1]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x103e298
push 0x1106960
sub eax, ecx
push 0x1009b28
push edi
mov byte [eax + 0x1106960], 0x22
mov byte [eax + 0x1106961], dl
call esi
add esp, 0xc
add edi, eax
lea eax, [ebp - 0x75c]
push eax
push eax
call dword [sym.imp.UPDSPAPI.dll_UpdSpFindNextLine]
test eax, eax
jne 0x103e263
push 0
push ebx
lea eax, [ebp - 0x414]
push eax
push 0x100fee0
push 0x100fed0
push dword [ebp - 0x734]
push 0
call dword [sym.imp.UPDSPAPI.dll_UpdSpGetLineTextA]
test eax, eax
jne 0x103e2fe
mov byte [ebp - 0x414], al
mov eax, dword [0x109ab58]
xor ebx, ebx
cmp eax, ebx
mov dword [ebp - 0x748], eax
jne 0x103e319
mov dword [ebp - 0x748], 0x1009220
cmp dword [0x109a030], ebx
mov dword [ebp - 0x740], 0x100fec8
jne 0x103e335
mov dword [ebp - 0x740], 0x100fec0
xor eax, eax
cmp dword [0x10bf570], ebx
setne al
push eax
push dword [0x109abbc]
lea eax, [ebp - 0x414]
push dword [0x109ab98]
push dword [0x10bf564]
push eax
call fcn.01070f95
push eax
push dword [ebp - 0x748]
push 0x10bf23e
push 0x10bf035
push dword [ebp - 0x740]
push 0x100fd70
push edi
call esi
add esp, 0x2c
add edi, eax
cmp dword [0x10bf570], ebx
je 0x103e3c2
mov ebx, dword [0x10bd0e8]
push 0x100fd5c
push 0x101001c
push edi
call esi
jmp 0x103e3ad
push dword [ebx]
push 0x100fd54
push edi
call esi
mov ebx, dword [ebx + 4]
add esp, 0xc
add edi, eax
test ebx, ebx
jne 0x103e3a0
push 0x1010290
push edi
call esi
pop ecx
pop ecx
add edi, eax
mov eax, dword [ebp - 0x730]
add eax, 0xff000
cmp edi, eax
jae 0x103e478
push 0x80
push dword [ebp - 0x74c]
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
push ebx
push 0x80000080
push 2
push ebx
push 1
push 0x40000000
push dword [ebp - 0x74c]
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov esi, eax
cmp esi, 0xffffffff
je 0x103e461
sub edi, dword [ebp - 0x730]
push ebx
lea eax, [ebp - 0x760]
push eax
push edi
push dword [ebp - 0x730]
push esi
call dword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x103e437
mov dword [ebp - 0x744], 1
xor edi, edi
jmp 0x103e44c
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
push edi
push 0x100fd24
call fcn.01071ac0
pop ecx
pop ecx
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push dword [ebp - 0x74c]
push ebx
call fcn.01034d42
jmp 0x103e47b
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edi, eax
push edi
push 0x100fcf4
call fcn.01071ac0
pop ecx
pop ecx
jmp 0x103e47b
push 0x7a
pop edi
push 0x10bf580
call fcn.0103cb39
push 0x8000
push ebx
push dword [ebp - 0x730]
call dword [sym.imp.KERNEL32.dll_VirtualFree]
push edi
call fcn.01037f35
mov eax, dword [ebp - 0x744]
mov ecx, dword [ebp - 4]
pop edi
pop esi
pop ebx
call fcn.0106bc50
leave
ret 0x24