Function at 0x10a6007
Capabilities:
Get file size

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0x6d8
mov eax, dword [0x111127c]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 8]
mov ecx, dword [ebp + 0x24]
and dword [ebp - 0x14c], 0
mov dword [ebp - 0x164], eax
mov eax, dword [ebp + 0xc]
push ebx
mov ebx, dword [ebp + 0x20]
mov dword [ebp - 0x174], eax
mov eax, dword [ebp + 0x10]
push esi
mov esi, dword [ebp + 0x1c]
push edi
mov edi, dword [ebp + 0x18]
mov dword [ebp - 0x178], eax
mov eax, dword [ebp + 0x14]
mov dword [ebp - 0x16c], edi
mov dword [ebp - 0x1a4], esi
mov dword [ebp - 0x1ac], ebx
mov dword [ebp - 0x130], ecx
mov dword [ebp - 0x198], eax
mov byte [ebp - 0x194], 0
mov eax, dword [0x111124c]
cmp eax, 0x111124c
je 0x10a60a2
test byte [eax + 0x1c], 4
je 0x10a60a2
cmp byte [eax + 0x19], 4
jb 0x10a60a2
push 0x100ab40
push 0x16f
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.010189d0
mov ecx, dword [ebp - 0x130]
xor eax, eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
xor eax, eax
mov dword [esi], eax
mov dword [esi + 4], eax
mov esi, 0x80
mov dword [ebx], eax
mov dword [ebx + 4], eax
push esi
push eax
mov dword [ecx], eax
lea eax, [ebp - 0x2d8]
push eax
call sub.msvcrt.dll_memset
push 0x280
lea eax, [ebp - 0x5d8]
push 0
push eax
call sub.msvcrt.dll_memset
push esi
lea eax, [ebp - 0x358]
push 0
push eax
call sub.msvcrt.dll_memset
add esp, 0x24
mov eax, dword [0x111124c]
cmp eax, 0x111124c
je 0x10a6127
test byte [eax + 0x1c], 4
je 0x10a6127
cmp byte [eax + 0x19], 4
jb 0x10a6127
push dword [ebp - 0x164]
push 0x100ab40
push 0x170
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.01019680
xor edi, edi
lea ebx, [ebp - 0x5c8]
push 0x20000
push 0
call dword [sym.imp.KERNEL32.dll_LocalAlloc]
mov esi, eax
mov dword [ebp + edi*4 - 0x258], esi
test esi, esi
je 0x10a61e8
push esi
call fcn.0109cd2b
mov dword [ebp + edi*4 - 0x2d8], eax
xor eax, eax
push eax
push eax
push 1
push eax
call dword [sym.imp.KERNEL32.dll_CreateEventW]
mov dword [ebx], eax
test eax, eax
je 0x10a6240
xor esi, esi
mov dword [ebp + edi*4 - 0x358], esi
inc edi
add ebx, 0x14
cmp edi, 0x20
jb 0x10a612f
push 0x118
lea eax, [ebp - 0x12c]
push esi
push eax
mov dword [ebp - 0x154], esi
mov dword [ebp - 0x150], esi
call sub.msvcrt.dll_memset
mov edi, dword [ebp - 0x130]
add esp, 0xc
push edi
lea ecx, [ebp - 0x198]
call fcn.0109bc58
mov ebx, eax
cmp ebx, esi
je 0x10a6290
lea edi, [ebp - 0x5c8]
push dword [edi]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push dword [ebp + esi*4 - 0x258]
call dword [sym.imp.KERNEL32.dll_LocalFree]
inc esi
add edi, 0x14
cmp esi, 0x20
jb 0x10a61c6
mov esi, ebx
jmp 0x10a6222
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, dword [ebp - 0x130]
xor esi, esi
mov dword [ecx], eax
test edi, edi
jbe 0x10a621f
lea ebx, [ebp - 0x5c8]
push dword [ebx]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push dword [ebp + esi*4 - 0x258]
call dword [sym.imp.KERNEL32.dll_LocalFree]
inc esi
add ebx, 0x14
cmp esi, edi
jb 0x10a6202
push 3
pop esi
lea ecx, [ebp - 0x198]
call fcn.0109bc92
mov ecx, dword [ebp - 4]
pop edi
mov eax, esi
pop esi
xor ecx, ebp
pop ebx
call fcn.0106f5f8
leave
ret 0x20
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, dword [ebp - 0x130]
push esi
mov esi, dword [sym.imp.KERNEL32.dll_LocalFree]
mov dword [ecx], eax
call esi
xor ebx, ebx
test edi, edi
jbe 0x10a628c
lea eax, [ebp - 0x5c8]
mov dword [ebp - 0x160], eax
mov eax, dword [ebp - 0x160]
push dword [eax]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push dword [ebp + ebx*4 - 0x258]
call esi
add dword [ebp - 0x160], 0x14
inc ebx
cmp ebx, edi
jb 0x10a6269
push 8
jmp 0x10a6221
push edi
push esi
lea eax, [ebp - 0x19c]
push eax
lea eax, [ebp - 0x1a0]
push eax
lea eax, [ebp - 0x1b8]
push eax
lea eax, [ebp - 0x190]
push eax
lea eax, [ebp - 0x131]
push eax
lea eax, [ebp - 0x138]
push eax
push dword [ebp - 0x164]
lea ecx, [ebp - 0x12c]
call fcn.010b3ae9
mov dword [ebp - 0x148], eax
mov ebx, 0x10000
cmp eax, esi
je 0x10a67b9
mov eax, dword [0x111124c]
cmp eax, 0x111124c
je 0x10a631b
test byte [eax + 0x1c], 4
je 0x10a631b
cmp byte [eax + 0x19], 4
jb 0x10a631b
push dword [edi]
push dword [ebp - 0x148]
push dword [ebp - 0x164]
push 0x100ab40
push 0x171
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.0109b90b
push esi
push 0x60000080
push 3
push esi
push 1
push 0x80000000
push dword [ebp - 0x164]
mov byte [ebp - 0x131], 1
mov byte [ebp - 0x132], 1
call dword [sym.imp.KERNEL32.dll_CreateFileW]
mov dword [ebp - 0x138], eax
cmp eax, 0xffffffff
jne 0x10a63c6
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ebx, edi
mov dword [ebx], eax
xor edi, edi
lea esi, [ebp - 0x5c8]
push dword [esi]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push dword [ebp + edi*4 - 0x258]
call dword [sym.imp.KERNEL32.dll_LocalFree]
inc edi
add esi, 0x14
cmp edi, 0x20
jb 0x10a6362
mov eax, dword [0x111124c]
cmp eax, 0x111124c
je 0x10a628c
test byte [eax + 0x1c], 4
je 0x10a628c
cmp byte [eax + 0x19], 2
jb 0x10a628c
push dword [ebx]
push dword [ebp - 0x164]
push 0x100ab40
push 0x172
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.010196ed
jmp 0x10a628c
lea ecx, [ebp - 0x184]
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_GetFileSizeEx]
test eax, eax
jne 0x10a6417
call dword [sym.imp.KERNEL32.dll_GetLastError]
push dword [ebp - 0x138]
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, edi
mov dword [ecx], eax
call esi
xor ebx, ebx
lea edi, [ebp - 0x5c8]
push dword [edi]
call esi
push dword [ebp + ebx*4 - 0x258]
call dword [sym.imp.KERNEL32.dll_LocalFree]
inc ebx
add edi, 0x14
cmp ebx, 0x20
jb 0x10a63f8
jmp 0x10a628c
mov eax, dword [ebp - 0x184]
mov ecx, dword [ebp - 0x180]
mov dword [ebp - 0x144], eax
or eax, ecx
mov dword [ebp - 0x140], ecx
jne 0x10a646e
push dword [ebp - 0x138]
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call esi
xor ebx, ebx
lea edi, [ebp - 0x5c8]
push dword [edi]
call esi
push dword [ebp + ebx*4 - 0x258]
call dword [sym.imp.KERNEL32.dll_LocalFree]
inc ebx
add edi, 0x14
cmp ebx, 0x20
jb 0x10a6449
mov esi, dword [ebp - 0x148]
jmp 0x10a6222
mov edi, dword [sym.imp.KERNEL32.dll_LocalAlloc]
push 0x20000
push esi
call edi
mov dword [ebp - 0x168], eax
cmp eax, esi
jne 0x10a64c9
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, dword [ebp - 0x130]
push dword [ebp - 0x138]
mov esi, dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ecx], eax
call esi
xor ebx, ebx
lea edi, [ebp - 0x5c8]
push dword [edi]
call esi
push dword [ebp + ebx*4 - 0x258]
call dword [sym.imp.KERNEL32.dll_LocalFree]
inc ebx
add edi, 0x14
cmp ebx, 0x20
jb 0x10a64aa
jmp 0x10a621f
push ebx
push esi
call edi
mov dword [ebp - 0x170], eax
cmp eax, esi
jne 0x10a6538
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, dword [ebp - 0x130]
push dword [ebp - 0x168]
mov esi, dword [sym.imp.KERNEL32.dll_LocalFree]
mov dword [ecx], eax
call esi
push dword [ebp - 0x138]
mov edi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call edi
and dword [ebp - 0x130], 0
lea ebx, [ebp - 0x5c8]
push dword [ebx]
call edi
mov eax, dword [ebp - 0x130]
push dword [ebp + eax*4 - 0x258]
call esi
inc dword [ebp - 0x130]
add ebx, 0x14
cmp dword [ebp - 0x130], 0x20
jb 0x10a650e
jmp 0x10a621f
cmp dword [ebp - 0x140], esi
mov dword [ebp - 0x1b0], esi
mov dword [ebp - 0x5d0], esi
mov dword [ebp - 0x5cc], esi
mov dword [ebp - 0x158], ebx
jg 0x10a656e
jl 0x10a6562
cmp dword [ebp - 0x144], ebx
jae 0x10a656e
mov eax, dword [ebp - 0x144]
mov dword [ebp - 0x158], eax
lea eax, [ebp - 0x5d8]
push eax
push dword [ebp - 0x158]
push dword [ebp - 0x2d8]
push dword [ebp - 0x138]
call fcn.010a02a2
push 1
lea eax, [ebp - 0x14c]
push eax
lea eax, [ebp - 0x5d8]
push eax
push dword [ebp - 0x138]
call dword [sym.imp.KERNEL32.dll_GetOverlappedResult]
test eax, eax
jne 0x10a6617
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, dword [ebp - 0x130]
push dword [ebp - 0x170]
mov esi, dword [sym.imp.KERNEL32.dll_LocalFree]
mov dword [ecx], eax
call esi
push dword [ebp - 0x168]
call esi
push dword [ebp - 0x138]
mov edi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call edi
and dword [ebp - 0x130], 0
lea ebx, [ebp - 0x5c8]
push dword [ebx]
call edi
mov eax, dword [ebp - 0x130]
push dword [ebp + eax*4 - 0x258]
call esi
inc dword [ebp - 0x130]
add ebx, 0x14
cmp dword [ebp - 0x130], 0x20
jb 0x10a65eb
push 4
jmp 0x10a6221
mov ecx, dword [ebp - 0x14c]
cmp ecx, dword [ebp - 0x158]
je 0x10a66c4
mov eax, dword [0x111124c]
cmp eax, 0x111124c
je 0x10a665d
test byte [eax + 0x1c], 4
je 0x10a665d
cmp byte [eax + 0x19], 2
jb 0x10a665d
push dword [ebp - 0x158]
push ecx
push 0x100ab40
push 0x173
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.0109ba57
mov eax, dword [ebp - 0x130]
push dword [ebp - 0x170]
mov esi, dword [sym.imp.KERNEL32.dll_LocalFree]
mov dword [eax], 0x45d
call esi
push dword [ebp - 0x168]
call esi
push dword [ebp - 0x138]
mov edi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call edi
and dword [ebp - 0x130], 0
lea ebx, [ebp - 0x5c8]
push dword [ebx]
call edi
mov eax, dword [ebp - 0x130]
push dword [ebp + eax*4 - 0x258]
call esi
inc dword [ebp - 0x130]
add ebx, 0x14
cmp dword [ebp - 0x130], 0x20
jb 0x10a669a
jmp 0x10a6610
push 0x10
push 0x100ab20
push dword [ebp - 0x2d8]
call dword [sym.imp.ntdll.dll_RtlCompareMemory]
cmp eax, 0x10
je 0x10a6737
push dword [ebp - 0x170]
mov esi, dword [sym.imp.KERNEL32.dll_LocalFree]
call esi
push dword [ebp - 0x168]
call esi
push dword [ebp - 0x138]
mov edi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call edi
and dword [ebp - 0x130], 0
lea ebx, [ebp - 0x5c8]
push dword [ebx]
call edi
mov eax, dword [ebp - 0x130]
push dword [ebp + eax*4 - 0x258]
call esi
inc dword [ebp - 0x130]
add ebx, 0x14
cmp dword [ebp - 0x130], 0x20
jb 0x10a670d
jmp 0x10a6463
push 0x10aa76a
push esi
call fcn.010b6870
mov dword [ebp - 0x188], eax
cmp eax, esi
jne 0x10a67ef
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, dword [ebp - 0x130]
push dword [ebp - 0x170]
mov esi, dword [sym.imp.KERNEL32.dll_LocalFree]
mov dword [ecx], eax
call esi
push dword [ebp - 0x168]
call esi
push dword [ebp - 0x138]
mov edi, dword [sym.imp.KERNEL32.dll_CloseHandle]
call edi
and dword [ebp - 0x130], 0
lea ebx, [ebp - 0x5c8]
push dword [ebx]
call edi
mov eax, dword [ebp - 0x130]
push dword [ebp + eax*4 - 0x258]
call esi
inc dword [ebp - 0x130]
add ebx, 0x14
cmp dword [ebp - 0x130], 0x20
jb 0x10a678f
jmp 0x10a621f
cmp byte [ebp - 0x131], 0
mov byte [ebp - 0x132], 0
je 0x10a67d6
lea ecx, [ebp - 0x12c]
call fcn.010ab3f5
jmp 0x10a67e3
mov eax, dword [ebp - 0x19c]
mov ecx, 0x200000
mul ecx
mov dword [ebp - 0x140], edx
mov dword [ebp - 0x144], eax
mov eax, dword [0x111124c]
mov edi, 0x111124c
cmp eax, edi
je 0x10a6864
test byte [eax + 0x1c], 4
je 0x10a6833
cmp byte [eax + 0x19], 4
jb 0x10a6833
movzx ecx, byte [ebp - 0x131]
push ecx
movzx ecx, byte [ebp - 0x132]
push ecx
push 0x100ab40
push 0x174
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.0109ba57
mov eax, dword [0x111124c]
cmp eax, edi
je 0x10a6864
test byte [eax + 0x1c], 4
je 0x10a6864
cmp byte [eax + 0x19], 4
jb 0x10a6864
push dword [ebp - 0x140]
push dword [ebp - 0x144]
push 0x100ab40
push 0x175
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.01019531
lea ecx, [ebp - 0x198]
call fcn.0109bc92
push dword [ebp - 0x140]
push dword [ebp - 0x144]
push esi
push esi
push dword [ebp - 0x178]
call dword [ebp - 0x174]
test al, al
jne 0x10a68c7
mov dword [ebp - 0x148], 1
mov eax, dword [0x111124c]
cmp eax, edi
je 0x10a6d9c
test byte [eax + 0x1c], 4
je 0x10a6d9c
cmp byte [eax + 0x19], 2
jb 0x10a6d9c
push 0x100ab40
push 0x176
jmp 0x10a6ebb
lea eax, [ebp - 0x1c8]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemTime]
mov esi, dword [0x111124c]
mov byte [ebp - 0x13a], 0
and dword [ebp - 0x15c], 0
lea eax, [ebp - 0x6d8]
mov byte [ebp - 0x139], 1
mov dword [ebp - 0x160], eax
lea edi, [ebp - 0x5cc]
mov ebx, dword [ebp - 0x15c]
cmp dword [ebp + ebx - 0x358], 0
je 0x10a6ae6
push 1
lea eax, [ebp - 0x14c]
push eax
lea eax, [edi - 0xc]
push eax
push dword [ebp - 0x138]
call dword [sym.imp.KERNEL32.dll_GetOverlappedResult]
test eax, eax
je 0x10a6e66
cmp byte [ebp - 0x132], 0
je 0x10a69ce
mov edx, dword [edi - 4]
mov eax, dword [ebp - 0x14c]
mov esi, dword [edi]
xor ecx, ecx
add eax, edx
adc ecx, esi
mov dword [ebp - 0x184], edx
mov dword [ebp - 0x180], esi
cmp eax, dword [ebp - 0x144]
jne 0x10a6977
mov byte [ebp - 0x17c], 1
cmp ecx, dword [ebp - 0x140]
je 0x10a697e
mov byte [ebp - 0x17c], 0
push dword [ebp - 0x130]
lea eax, [ebp - 0x1b0]
push eax
push dword [ebp - 0x170]
push dword [ebp - 0x168]
push dword [ebp - 0x188]
push dword [ebp - 0x17c]
push dword [ebp - 0x14c]
push dword [ebp + ebx - 0x2d8]
push dword [ebp - 0x16c]
call fcn.010a5ded
mov dword [ebp - 0x148], eax
test eax, eax
jne 0x10a6d9c
jmp 0x10a6ad2
mov ebx, dword [ebp - 0x160]
mov eax, dword [ebx + 4]
cmp eax, dword [ebp - 0x18c]
jl 0x10a69ff
jg 0x10a69eb
mov eax, dword [ebx]
cmp eax, dword [ebp - 0x190]
jb 0x10a69ff
push 0x100afc4
push 0x1ff9
push 0x100abf0
call fcn.0107b4be
mov ecx, dword [ebp - 0x14c]
xor eax, eax
add ecx, dword [ebx]
adc eax, dword [ebx + 4]
cmp eax, dword [ebp - 0x18c]
jl 0x10a6a28
mov eax, dword [ebp - 0x190]
jg 0x10a6a20
cmp ecx, eax
jbe 0x10a6a28
sub eax, dword [ebx]
mov dword [ebp - 0x14c], eax
mov eax, dword [0x111124c]
cmp eax, 0x111124c
je 0x10a6a60
test byte [eax + 0x1c], 4
je 0x10a6a60
cmp byte [eax + 0x19], 5
jb 0x10a6a60
push dword [edi - 4]
push dword [edi]
push dword [ebp - 0x14c]
push 0x100ab40
push 0x177
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.0109bb0b
lea eax, [ebp - 0x14]
push eax
push dword [ebp - 0x14c]
mov eax, dword [ebp - 0x15c]
push dword [ebp + eax - 0x2d8]
push dword [ebp - 0x16c]
call fcn.010a01c9
mov esi, dword [0x111124c]
cmp esi, 0x111124c
je 0x10a6ad8
test byte [esi + 0x1c], 4
je 0x10a6ad8
cmp byte [esi + 0x19], 5
jb 0x10a6ad8
push dword [ebp - 8]
mov eax, dword [ebx]
push dword [ebp - 0xc]
mov edx, dword [ebx + 4]
push dword [ebp - 0x10]
mov cl, 0x20
push dword [ebp - 0x14]
push dword [ebp - 0x14c]
push dword [ebx]
call fcn.01103310
push eax
push 0x100ab40
push 0x178
push dword [esi + 0x14]
push dword [esi + 0x10]
call fcn.0109b887
mov esi, dword [0x111124c]
mov eax, dword [ebp - 0x15c]
and dword [ebp + eax - 0x358], 0
cmp byte [ebp - 0x13a], 0
jne 0x10a6cff
cmp byte [ebp - 0x132], 0
je 0x10a6bed
mov ebx, dword [ebp - 0x154]
cmp ebx, dword [ebp - 0x144]
jne 0x10a6b5d
mov eax, dword [ebp - 0x150]
cmp eax, dword [ebp - 0x140]
jne 0x10a6b5d
cmp esi, 0x111124c
je 0x10a6b51
test byte [esi + 0x1c], 4
je 0x10a6b51
cmp byte [esi + 0x19], 4
jb 0x10a6b51
push dword [ebp - 0x164]
push 0x100ab40
push 0x179
push dword [esi + 0x14]
push dword [esi + 0x10]
call fcn.01019680
mov esi, dword [0x111124c]
mov byte [ebp - 0x13a], 1
jmp 0x10a6cff
mov eax, dword [ebp - 0x150]
mov edx, 0x10000
mov ecx, ebx
add ecx, edx
mov dword [ebp - 0x180], eax
mov dword [edi], eax
adc eax, 0
cmp eax, dword [ebp - 0x140]
mov dword [ebp - 0x184], ebx
mov dword [edi - 4], ebx
mov dword [ebp - 0x158], edx
jl 0x10a6ba6
jg 0x10a6b98
cmp ecx, dword [ebp - 0x144]
jbe 0x10a6ba6
mov edx, dword [ebp - 0x144]
sub edx, ebx
mov dword [ebp - 0x158], edx
mov esi, dword [ebp - 0x15c]
lea eax, [edi - 0xc]
push eax
push edx
push dword [ebp + esi - 0x2d8]
push dword [ebp - 0x138]
call fcn.010a02a2
add ebx, dword [ebp - 0x158]
mov dword [ebp + esi - 0x358], 1
adc dword [ebp - 0x150], 0
mov byte [ebp - 0x139], 0
mov dword [ebp - 0x154], ebx
jmp 0x10a6ca8
mov esi, dword [ebp - 0x15c]
push 0
lea eax, [edi - 0xc]
push eax
lea eax, [ebp - 0x17c]
push eax
lea eax, [ebp - 0x1a8]
push eax
lea eax, [ebp - 0x158]
push eax
push dword [ebp - 0x160]
lea ecx, [ebp - 0x12c]
push dword [ebp + esi - 0x2d8]
call fcn.010ae205
test al, al
jne 0x10a6c65
mov esi, dword [0x111124c]
cmp esi, 0x111124c
je 0x10a6b51
test byte [esi + 0x1c], 4
je 0x10a6b51
cmp byte [esi + 0x19], 4
jb 0x10a6b51
push dword [ebp - 0x164]
push 0x100ab40
push 0x17a
jmp 0x10a6b40
cmp byte [ebp - 0x131], 0
mov dword [ebp + esi - 0x358], 1
mov byte [ebp - 0x139], 0
je 0x10a6c8d
lea ecx, [ebp - 0x12c]
call fcn.010ab486
jmp 0x10a6c9a
mov eax, dword [ebp - 0x1a8]
mov ecx, 0x200000
mul ecx
mov dword [ebp - 0x154], eax
mov ebx, eax
mov dword [ebp - 0x150], edx
lea eax, [ebp - 0x1d8]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemTime]
mov ax, word [ebp - 0x1cc]
cmp ax, word [ebp - 0x1bc]
je 0x10a6cf9
push dword [ebp - 0x140]
push dword [ebp - 0x144]
push dword [ebp - 0x150]
push ebx
push dword [ebp - 0x178]
call dword [ebp - 0x174]
test al, al
je 0x10a6e83
lea eax, [ebp - 0x1c8]
push eax
call dword [sym.imp.KERNEL32.dll_GetSystemTime]
mov esi, dword [0x111124c]
add dword [ebp - 0x15c], 4
add dword [ebp - 0x160], 8
add edi, 0x14
cmp dword [ebp - 0x15c], 0x80
jb 0x10a6901
cmp byte [ebp - 0x139], 0
je 0x10a68e1
mov ecx, dword [ebp - 0x140]
mov eax, dword [ebp - 0x144]
push ecx
push eax
push ecx
push eax
push dword [ebp - 0x178]
mov dword [ebp - 0x154], eax
mov dword [ebp - 0x150], ecx
call dword [ebp - 0x174]
cmp dword [ebp - 0x148], 0
jne 0x10a6d9c
mov eax, dword [0x111124c]
cmp eax, 0x111124c
je 0x10a6d9c
test byte [eax + 0x1c], 4
je 0x10a6d9c
cmp byte [eax + 0x19], 4
jb 0x10a6d9c
mov ecx, dword [ebp - 0x16c]
push dword [ecx + 0xc]
push dword [ecx + 8]
push dword [ecx + 4]
push dword [ecx]
push 0x100ab40
push 0x17c
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.0107bd73
cmp dword [ebp - 0x148], 0
mov eax, dword [ebp - 0x1a4]
mov ecx, dword [ebp - 0x154]
mov dword [eax], ecx
mov ecx, dword [ebp - 0x150]
mov dword [eax + 4], ecx
mov eax, dword [ebp - 0x1ac]
mov ecx, dword [ebp - 0x144]
mov dword [eax], ecx
mov ecx, dword [ebp - 0x140]
mov dword [eax + 4], ecx
je 0x10a6df0
push 0x20
lea eax, [ebp - 0x358]
push eax
lea eax, [ebp - 0x5d8]
push eax
push 0xffffffffffffffff
push dword [ebp - 0x138]
call fcn.0109bec8
mov edi, dword [sym.imp.KERNEL32.dll_CloseHandle]
mov esi, dword [sym.imp.KERNEL32.dll_LocalFree]
lea eax, [ebp - 0x5c8]
xor ebx, ebx
mov dword [ebp - 0x16c], eax
mov eax, dword [ebp - 0x16c]
push dword [eax]
call edi
push dword [ebp + ebx*4 - 0x258]
call esi
add dword [ebp - 0x16c], 0x14
inc ebx
cmp ebx, 0x20
jb 0x10a6e0a
cmp byte [ebp - 0x132], 0
je 0x10a6ecb
push 0x10aa783
push 0
push dword [ebp - 0x188]
call fcn.010b6880
push dword [ebp - 0x170]
call esi
push dword [ebp - 0x168]
call esi
push dword [ebp - 0x138]
call edi
jmp 0x10a6eef
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, dword [ebp - 0x130]
mov dword [ecx], eax
mov dword [ebp - 0x148], 4
jmp 0x10a6d9c
mov dword [ebp - 0x148], 1
mov eax, dword [0x111124c]
cmp eax, 0x111124c
je 0x10a6d9c
test byte [eax + 0x1c], 4
je 0x10a6d9c
cmp byte [eax + 0x19], 2
jb 0x10a6d9c
push 0x100ab40
push 0x17b
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.010189d0
jmp 0x10a6d9c
cmp byte [ebp - 0x131], 0
je 0x10a6edc
push dword [ebp - 0x1b4]
call esi
push dword [ebp - 0x1a0]
call esi
lea ecx, [ebp - 0x12c]
call fcn.010aa918
mov eax, dword [0x111124c]
cmp eax, 0x111124c
je 0x10a6463
test byte [eax + 0x1c], 4
je 0x10a6463
cmp byte [eax + 0x19], 4
jb 0x10a6463
push 0x100ab40
push 0x17d
push dword [eax + 0x14]
push dword [eax + 0x10]
call fcn.010189d0
jmp 0x10a6463