Function at 0x10019dd0
Capabilities:
Create directory
Create thread
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10039c68
mov eax, dword fs:[0]
push eax
sub esp, 0x38
mov eax, dword [section..data]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
xor bl, bl
call fcn.10019910
test al, al
je 0x1001aa7c
mov ecx, dword [0x10049810]
cmp byte [ecx + 0x20c], bl
je 0x1001aa7c
mov eax, dword [0x10049814]
cmp byte [eax + 0x64], bl
je 0x1001aa7c
mov byte [0x10049818], bl
cmp byte [ecx + 0x20d], 1
jne 0x10019e44
mov ecx, 0x100493b4
call fcn.10021060
jmp 0x10019eaa
push 0x100493b4
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
mov ecx, 0x100493b4
add ecx, 0xfffffffe
lea esp, [esp]
mov ax, word [ecx + 2]
lea ecx, [ecx + 2]
test ax, ax
jne 0x10019e60
mov eax, dword [str.bSyaeDump_]
mov dword [ecx], eax
mov eax, dword [0x100422c4]
mov dword [ecx + 4], eax
mov eax, dword [0x100422c8]
mov dword [ecx + 8], eax
mov eax, dword [0x100422cc]
mov dword [ecx + 0xc], eax
mov eax, dword [0x100422d0]
mov dword [ecx + 0x10], eax
mov ax, word [0x100422d4]
push 0
push 0x100493b4
mov word [ecx + 0x14], ax
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
push 0x1004931c
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
mov byte [0x100492f1], 1
call fcn.1001bf50
mov byte [0x100492f1], 0
call fcn.1001c080
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 1
push eax
push str.acecore.dll
lea ecx, [ebp - 0x40]
call fcn.1001faf0
mov ecx, eax
mov dword [ebp - 4], 0
movzx eax, byte [0x10049c32]
push eax
push ecx
push ecx
lea eax, [ebp - 0x1c]
mov ecx, 0x1004930c
push eax
call fcn.1001fd90
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x2c], 0x10
jb 0x10019f1e
push dword [ebp - 0x40]
call fcn.100273ee
add esp, 4
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 1
push eax
push str.acees.dll
lea ecx, [ebp - 0x40]
call fcn.1001faf0
mov ecx, eax
mov dword [ebp - 4], 1
movzx eax, byte [0x10049c32]
push eax
push ecx
push ecx
lea eax, [ebp - 0x1c]
mov ecx, 0x1004930c
push eax
call fcn.1001fd90
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x2c], 0x10
jb 0x10019f6f
push dword [ebp - 0x40]
call fcn.100273ee
add esp, 4
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 1
push eax
push str.acewstr.dll
lea ecx, [ebp - 0x40]
call fcn.1001faf0
mov ecx, eax
mov dword [ebp - 4], 2
movzx eax, byte [0x10049c32]
push eax
push ecx
push ecx
lea eax, [ebp - 0x1c]
mov ecx, 0x1004930c
push eax
call fcn.1001fd90
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x2c], 0x10
jb 0x10019fc0
push dword [ebp - 0x40]
call fcn.100273ee
add esp, 4
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 1
push eax
push str.imetip.dll
lea ecx, [ebp - 0x40]
call fcn.1001faf0
mov ecx, eax
mov dword [ebp - 4], 3
movzx eax, byte [0x10049c32]
push eax
push ecx
push ecx
lea eax, [ebp - 0x1c]
mov ecx, 0x1004930c
push eax
call fcn.1001fd90
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x2c], 0x10
jb 0x1001a011
push dword [ebp - 0x40]
call fcn.100273ee
add esp, 4
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 1
push eax
push str.imjkapi.dll
lea ecx, [ebp - 0x40]
call fcn.1001faf0
mov ecx, eax
mov dword [ebp - 4], 4
movzx eax, byte [0x10049c32]
push eax
push ecx
push ecx
lea eax, [ebp - 0x1c]
mov ecx, 0x1004930c
push eax
call fcn.1001fd90
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x2c], 0x10
jb 0x1001a062
push dword [ebp - 0x40]
call fcn.100273ee
add esp, 4
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 1
push eax
push str.imkrapi.dll
lea ecx, [ebp - 0x40]
call fcn.1001faf0
mov ecx, eax
mov dword [ebp - 4], 5
movzx eax, byte [0x10049c32]
push eax
push ecx
push ecx
lea eax, [ebp - 0x1c]
mov ecx, 0x1004930c
push eax
call fcn.1001fd90
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x2c], 0x10
jb 0x1001a0b3
push dword [ebp - 0x40]
call fcn.100273ee
add esp, 4
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 1
push eax
push str.imkrtip.dll
lea ecx, [ebp - 0x40]
call fcn.1001faf0
mov ecx, eax
mov dword [ebp - 4], 6
movzx eax, byte [0x10049c32]
push eax
push ecx
push ecx
lea eax, [ebp - 0x1c]
mov ecx, 0x1004930c
push eax
call fcn.1001fd90
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x2c], 0x10
jb 0x1001a104
push dword [ebp - 0x40]
call fcn.100273ee
add esp, 4
push 7
push str.mso.dll
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x2c], 0xf
mov dword [ebp - 0x30], 0
mov byte [ebp - 0x40], 0
call fcn.10002100
mov byte [ebp - 0x28], 1
mov dword [ebp - 4], 7
movzx eax, byte [0x10049c32]
push eax
lea eax, [ebp - 0x40]
push eax
push ecx
lea eax, [ebp - 0x1c]
mov ecx, 0x1004930c
push eax
call fcn.1001fd90
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x2c], 0x10
jb 0x1001a163
push dword [ebp - 0x40]
call fcn.100273ee
add esp, 4
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 1
push eax
push str.msointl.dll
lea ecx, [ebp - 0x40]
call fcn.1001faf0
mov ecx, eax
mov dword [ebp - 4], 8
movzx eax, byte [0x10049c32]
push eax
push ecx
push ecx
lea eax, [ebp - 0x1c]
mov ecx, 0x1004930c
push eax
call fcn.1001fd90
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x2c], 0x10
jb 0x1001a1b4
push dword [ebp - 0x40]
call fcn.100273ee
add esp, 4
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 1
push eax
push str.msonsext.dll
lea ecx, [ebp - 0x40]
call fcn.1001faf0
mov ecx, eax
mov dword [ebp - 4], 9
movzx eax, byte [0x10049c32]
push eax
push ecx
push ecx
lea eax, [ebp - 0x1c]
mov ecx, 0x1004930c
push eax
call fcn.1001fd90
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x2c], 0x10
jb 0x1001a205
push dword [ebp - 0x40]
call fcn.100273ee
add esp, 4
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 1
push eax
push str.msores.dll
lea ecx, [ebp - 0x40]
call fcn.1001faf0
mov ecx, eax
mov dword [ebp - 4], 0xa
movzx eax, byte [0x10049c32]
push eax
push ecx
push ecx
lea eax, [ebp - 0x1c]
mov ecx, 0x1004930c
push eax
call fcn.1001fd90
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x2c], 0x10
jb 0x1001a256
push dword [ebp - 0x40]
call fcn.100273ee
add esp, 4
push 0xd
push str.sqlcese40.dll
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x2c], 0xf
mov dword [ebp - 0x30], 0
mov byte [ebp - 0x40], 0
call fcn.10002100
mov byte [ebp - 0x28], 1
mov dword [ebp - 4], 0xb
movzx eax, byte [0x10049c32]
push eax
lea eax, [ebp - 0x40]
push eax
push ecx
lea eax, [ebp - 0x1c]
mov ecx, 0x1004930c
push eax
call fcn.1001fd90
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x2c], 0x10
jb 0x1001a2b5
push dword [ebp - 0x40]
call fcn.100273ee
add esp, 4
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 1
push eax
push str.winmm.dll
lea ecx, [ebp - 0x40]
call fcn.1001faf0
mov ecx, eax
mov dword [ebp - 4], 0xc
movzx eax, byte [0x10049c32]
push eax
push ecx
push ecx
lea eax, [ebp - 0x1c]
mov ecx, 0x1004930c
push eax
call fcn.1001fd90
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x2c], 0x10
jb 0x1001a306
push dword [ebp - 0x40]
call fcn.100273ee
add esp, 4
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 1
push eax
push str.msmpeg2adec.dll
lea ecx, [ebp - 0x40]
call fcn.1001faf0
mov ecx, eax
mov dword [ebp - 4], 0xd
movzx eax, byte [0x10049c32]
push eax
push ecx
push ecx
lea eax, [ebp - 0x1c]
mov ecx, 0x1004930c
push eax
call fcn.1001fd90
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x2c], 0x10
jb 0x1001a357
push dword [ebp - 0x40]
call fcn.100273ee
add esp, 4
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 1
push eax
push str.msmpeg2vdec.dll
lea ecx, [ebp - 0x40]
call fcn.1001faf0
mov ecx, eax
mov dword [ebp - 4], 0xe
movzx eax, byte [0x10049c32]
push eax
push ecx
push ecx
lea eax, [ebp - 0x1c]
mov ecx, 0x1004930c
push eax
call fcn.1001fd90
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x2c], 0x10
jb 0x1001a3a8
push dword [ebp - 0x40]
call fcn.100273ee
add esp, 4
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 1
push eax
push str.mfc80u.dll
lea ecx, [ebp - 0x40]
call fcn.1001faf0
mov ecx, eax
mov dword [ebp - 4], 0xf
movzx eax, byte [0x10049c32]
push eax
push ecx
push ecx
lea eax, [ebp - 0x1c]
mov ecx, 0x1004930c
push eax
call fcn.1001fd90
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x2c], 0x10
jb 0x1001a3f9
push dword [ebp - 0x40]
call fcn.100273ee
add esp, 4
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 1
push eax
push str.mfc80kor.dll
lea ecx, [ebp - 0x40]
call fcn.1001faf0
mov ecx, eax
mov dword [ebp - 4], 0x10
movzx eax, byte [0x10049c32]
push eax
push ecx
push ecx
lea eax, [ebp - 0x1c]
mov ecx, 0x1004930c
push eax
call fcn.1001fd90
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x2c], 0x10
jb 0x1001a44a
push dword [ebp - 0x40]
call fcn.100273ee
add esp, 4
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 1
push eax
push str.mfc90u.dll
lea ecx, [ebp - 0x40]
call fcn.1001faf0
mov ecx, eax
mov dword [ebp - 4], 0x11
movzx eax, byte [0x10049c32]
push eax
push ecx
push ecx
lea eax, [ebp - 0x1c]
mov ecx, 0x1004930c
push eax
call fcn.1001fd90
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x2c], 0x10
jb 0x1001a49b
push dword [ebp - 0x40]
call fcn.100273ee
add esp, 4
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 1
push eax
push str.gdi32.dll
lea ecx, [ebp - 0x40]
call fcn.1001faf0
mov edx, eax
mov dword [ebp - 4], 0x12
movzx eax, byte [0x10049c32]
push eax
push edx
push ecx
lea eax, [ebp - 0x1c]
mov ecx, 0x1004930c
push eax
call fcn.1001fd90
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x2c], 0x10
jb 0x1001a4ec
push dword [ebp - 0x40]
call fcn.100273ee
add esp, 4
push 0x1c
xor eax, eax
mov dword [ebp - 0x2c], 7
push str.Hnc.Foundation.Interface.dll
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x30], 0
mov word [ebp - 0x40], ax
call fcn.1001f020
mov byte [ebp - 0x28], 1
mov dword [ebp - 4], 0x13
movzx eax, byte [0x10049c32]
push eax
lea eax, [ebp - 0x40]
push eax
push ecx
lea eax, [ebp - 0x1c]
mov ecx, 0x1004933c
push eax
call fcn.1001ffa0
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x2c], 8
jb 0x1001a54d
push dword [ebp - 0x40]
call fcn.100273ee
add esp, 4
push 0x15
xor eax, eax
mov dword [ebp - 0x2c], 7
push str.Hnc.Foundation.UI.dll
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x30], 0
mov word [ebp - 0x40], ax
call fcn.1001f020
mov byte [ebp - 0x28], 1
mov dword [ebp - 4], 0x14
movzx eax, byte [0x10049c32]
push eax
lea eax, [ebp - 0x40]
push eax
push ecx
lea eax, [ebp - 0x1c]
mov ecx, 0x1004933c
push eax
call fcn.1001ffa0
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x2c], 8
jb 0x1001a5ae
push dword [ebp - 0x40]
call fcn.100273ee
add esp, 4
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 1
push eax
push str.Hnc.Office.UI.dll
lea ecx, [ebp - 0x40]
call fcn.1001fb50
mov ecx, eax
mov dword [ebp - 4], 0x15
movzx eax, byte [0x10049c32]
push eax
push ecx
push ecx
lea eax, [ebp - 0x1c]
mov ecx, 0x1004933c
push eax
call fcn.1001ffa0
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x2c], 8
jb 0x1001a5ff
push dword [ebp - 0x40]
call fcn.100273ee
add esp, 4
push 0xd
xor eax, eax
mov dword [ebp - 0x2c], 7
push str.Hnc.OAuth.dll
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x30], 0
mov word [ebp - 0x40], ax
call fcn.1001f020
mov byte [ebp - 0x28], 1
mov dword [ebp - 4], 0x16
movzx eax, byte [0x10049c32]
push eax
lea eax, [ebp - 0x40]
push eax
push ecx
lea eax, [ebp - 0x1c]
mov ecx, 0x1004933c
push eax
call fcn.1001ffa0
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x2c], 8
jb 0x1001a660
push dword [ebp - 0x40]
call fcn.100273ee
add esp, 4
push 0x12
xor eax, eax
mov dword [ebp - 0x2c], 7
push str.HncLogUploader.exe
lea ecx, [ebp - 0x40]
mov dword [ebp - 0x30], 0
mov word [ebp - 0x40], ax
call fcn.1001f020
mov byte [ebp - 0x28], 1
mov dword [ebp - 4], 0x17
movzx eax, byte [0x10049c32]
push eax
lea eax, [ebp - 0x40]
push eax
push ecx
lea eax, [ebp - 0x1c]
mov ecx, 0x1004933c
push eax
call fcn.1001ffa0
mov dword [ebp - 4], 0xffffffff
cmp dword [ebp - 0x2c], 8
jb 0x1001a6c1
push dword [ebp - 0x40]
call fcn.100273ee
add esp, 4
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 1
push eax
push ecx
lea ecx, [ebp - 0x40]
call fcn.1001fbb0
mov ecx, eax
mov dword [ebp - 4], 0x18
movzx eax, byte [0x10049c32]
push eax
push ecx
push ecx
lea eax, [ebp - 0x24]
mov ecx, 0x1004933c
push eax
call fcn.1001ffa0
lea ecx, [ebp - 0x40]
mov dword [ebp - 4], 0xffffffff
call fcn.1001aab0
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 1
push eax
push str.HncFoundation.dll
lea ecx, [ebp - 0x40]
call fcn.1001fb50
mov ecx, eax
mov dword [ebp - 4], 0x19
movzx eax, byte [0x10049c32]
push eax
push ecx
push ecx
lea eax, [ebp - 0x24]
mov ecx, 0x1004933c
push eax
call fcn.1001ffa0
lea ecx, [ebp - 0x40]
mov dword [ebp - 4], 0xffffffff
call fcn.1001aab0
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 1
push eax
push str.HncOfficeModule.dll
lea ecx, [ebp - 0x40]
call fcn.1001fb50
mov ecx, eax
mov dword [ebp - 4], 0x1a
movzx eax, byte [0x10049c32]
push eax
push ecx
push ecx
lea eax, [ebp - 0x24]
mov ecx, 0x1004933c
push eax
call fcn.1001ffa0
lea ecx, [ebp - 0x40]
mov dword [ebp - 4], 0xffffffff
call fcn.1001aab0
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 1
push eax
push str.HncFilterFoundation.dll
lea ecx, [ebp - 0x40]
call fcn.1001fb50
mov ecx, eax
mov dword [ebp - 4], 0x1b
movzx eax, byte [0x10049c32]
push eax
push ecx
push ecx
lea eax, [ebp - 0x24]
mov ecx, 0x1004933c
push eax
call fcn.1001ffa0
lea ecx, [ebp - 0x40]
mov dword [ebp - 4], 0xffffffff
call fcn.1001aab0
mov dword [ebp - 0x14], 1
lea eax, [ebp - 0x14]
push eax
push str.HncOfficeFoundation.dll
lea ecx, [ebp - 0x40]
call fcn.1001fb50
mov ecx, eax
mov dword [ebp - 4], 0x1c
movzx eax, byte [0x10049c32]
push eax
push ecx
push ecx
lea eax, [ebp - 0x24]
mov ecx, 0x1004933c
push eax
call fcn.1001ffa0
lea ecx, [ebp - 0x40]
mov dword [ebp - 4], 0xffffffff
call fcn.1001aab0
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 1
push eax
push str.HncOfficeEngine.dll
lea ecx, [ebp - 0x40]
call fcn.1001fb50
mov ecx, eax
mov dword [ebp - 4], 0x1d
movzx eax, byte [0x10049c32]
push eax
push ecx
push ecx
lea eax, [ebp - 0x24]
mov ecx, 0x1004933c
push eax
call fcn.1001ffa0
lea ecx, [ebp - 0x40]
mov dword [ebp - 4], 0xffffffff
call fcn.1001aab0
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 1
push eax
push ecx
lea ecx, [ebp - 0x40]
call fcn.1001fbf0
mov ecx, eax
mov dword [ebp - 4], 0x1e
movzx eax, byte [0x10049c32]
push eax
push ecx
push ecx
lea eax, [ebp - 0x24]
mov ecx, 0x1004933c
push eax
call fcn.1001ffa0
lea ecx, [ebp - 0x40]
mov dword [ebp - 4], 0xffffffff
call fcn.1001aab0
lea eax, [ebp - 0x14]
mov dword [ebp - 0x14], 1
push eax
push ecx
lea ecx, [ebp - 0x40]
call fcn.1001fc30
mov edx, eax
mov dword [ebp - 4], 0x1f
movzx eax, byte [0x10049c32]
push eax
push edx
push ecx
lea eax, [ebp - 0x24]
mov ecx, 0x1004933c
push eax
call fcn.1001ffa0
lea ecx, [ebp - 0x40]
mov dword [ebp - 4], 0xffffffff
call fcn.1001aab0
mov dword [ebp - 0x14], 1
lea eax, [ebp - 0x14]
push eax
push str.nt0_dll.dll
lea ecx, [ebp - 0x40]
call fcn.1001faf0
mov ecx, eax
mov dword [ebp - 4], 0x20
movzx eax, byte [0x10049c32]
push eax
push ecx
push ecx
lea eax, [ebp - 0x24]
mov ecx, 0x10049334
push eax
call fcn.1001fd90
lea ecx, [ebp - 0x40]
mov dword [ebp - 4], 0xffffffff
call fcn.10001fa0
call fcn.1001aaf0
call fcn.1001b990
call fcn.1001beb0
mov eax, dword [0x10049814]
cmp byte [eax + 0x6a], 1
jne 0x1001a9f3
mov eax, dword [0x10049810]
cmp byte [eax + 0x20d], 1
jne 0x1001a997
push 0x800
call fcn.100271fa
add esp, 4
mov esi, eax
mov dword [0x100484ac], esi
push 0x800
push 0
push esi
call fcn.1002aea0
add esp, 0xc
test esi, esi
je 0x1001a9f3
lea eax, [ebp - 0x14]
jmp 0x1001a9b0
push 0x100493b0
call fcn.10021600
add esp, 4
mov dword [0x100484ac], eax
test eax, eax
je 0x1001a9cd
lea eax, [ebp - 0x20]
push eax
push 0
push 0
push 0x1001c1a0
push 0
push 0
call fcn.10027981
add esp, 0x18
mov dword [0x100484b4], eax
jmp 0x1001a9f3
push 0x10042270
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
test eax, eax
je 0x1001a9e6
mov eax, dword [eax + 0x32]
mov dword [0x100484ac], eax
jmp 0x1001a9eb
mov eax, dword [0x100484ac]
test eax, eax
je 0x1001aa7c
mov eax, dword [0x10049814]
test byte [eax + 0x6b], 1
je 0x1001aa03
call fcn.10025990
mov eax, dword [0x10049814]
test byte [eax + 0x6c], 1
je 0x1001aa13
call fcn.100259c0
mov eax, dword [0x10049814]
cmp byte [eax + 0x65], 1
jne 0x1001aa39
push dword [0x100492ec]
push dword [0x100492e8]
push ecx
mov ecx, 0x1004935c
call fcn.10022cb0
test eax, eax
je 0x1001aa7c
mov eax, dword [0x10049810]
cmp byte [eax + 0x20d], 1
jne 0x1001aa65
lea eax, [ebp - 0x18]
push eax
push 0
push 0
push 0x1001c860
push 0
push 0
call fcn.10027981
add esp, 0x18
mov dword [0x100484a0], eax
mov byte [0x100492f1], 1
mov bl, 1
mov byte [0x10049818], 1
push str._bSyae_____Protect__n
jmp 0x1001aa81
push str._bSyae______Protect__n
call fcn.10002420
mov al, bl
add esp, 4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10026980
mov esp, ebp
pop ebp
ret