Function at 0x1003ece0
Capabilities:
Check if file exists
Copy file
Get common file path

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10095c09
mov eax, dword fs:[0]
push eax
mov eax, 0x1ce4
call fcn.1007e4b0
mov eax, dword [0x100b0380]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x1c48], 0
push 4
call fcn.10079b72
add esp, 4
mov dword [ebp - 0x570], eax
push 4
call fcn.10079b72
add esp, 4
mov dword [ebp - 0xba4], eax
mov eax, dword [ebp - 0x570]
mov dword [ebp - 0x224], eax
mov ecx, dword [ebp - 0x570]
mov dword [ebp - 0x788], ecx
mov edx, dword [ebp - 0x570]
mov dword [ebp - 0xbac], edx
mov eax, dword [ebp - 0x570]
mov dword [ebp - 0xdc0], eax
mov ecx, dword [ebp - 0x570]
mov dword [ebp - 0x220], ecx
mov edx, dword [ebp - 0x570]
mov dword [ebp - 0x784], edx
mov eax, dword [ebp - 0x570]
mov dword [ebp - 0xba8], eax
call fcn.10079c4e
cdq
mov ecx, 0x65
idiv ecx
add edx, 2
mov eax, dword [ebp - 0x570]
mov dword [eax], edx
call fcn.10079c4e
cdq
mov ecx, 0x65
idiv ecx
add edx, 0x200
mov eax, dword [ebp - 0xba4]
mov dword [eax], edx
mov ecx, 0x53
mov word [ebp - 0x56c], cx
xor edx, edx
mov word [ebp - 0x56a], dx
push 0x13c
push 0
lea eax, [ebp - 0x568]
push eax
call fcn.1007dcf0
add esp, 0xc
xor ecx, ecx
mov word [ebp - 0x21c], cx
push 0x206
push 0
lea edx, [ebp - 0x21a]
push edx
call fcn.1007dcf0
add esp, 0xc
xor eax, eax
mov word [ebp - 0x77c], ax
push 0x206
push 0
lea ecx, [ebp - 0x77a]
push ecx
call fcn.1007dcf0
add esp, 0xc
lea edx, [ebp - 0x21c]
push edx
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
mov esi, 0x10
lea edi, [ebp - 0x77c]
call fcn.100484d0
lea eax, [ebp - 0x77c]
push eax
lea ecx, [ebp - 0x21c]
push ecx
push str._s_s.exe
lea edx, [ebp - 0x21c]
push edx
mov ecx, 0x104
call fcn.10018220
add esp, 0x10
push 1
lea eax, [ebp - 0x21c]
push eax
push 0x100dbb28
call dword [sym.imp.KERNEL32.dll_CopyFileW]
test eax, eax
je 0x1003eeb3
push 0x104
push 0
push 0x100dbb28
call fcn.1007dcf0
add esp, 0xc
lea ecx, [ebp - 0x21c]
push ecx
push 0x100dbb28
call dword [sym.imp.SHLWAPI.dll_StrCpyW]
lea edx, [ebp - 0x574]
push edx
call fcn.1001a210
mov dword [ebp - 4], 0
lea eax, [ebp - 0x1c1c]
push eax
mov ecx, 0x100dbb28
call fcn.10013050
mov dword [ebp - 0x1ca4], eax
mov ecx, dword [ebp - 0x1ca4]
mov dword [ebp - 0x1ca8], ecx
mov byte [ebp - 4], 1
mov edx, dword [ebp - 0x1ca8]
push edx
lea ecx, [ebp - 0x574]
call fcn.1004c650
add esp, 4
mov dword [ebp - 0x1c18], eax
mov byte [ebp - 4], 0
lea ecx, [ebp - 0x1c1c]
call fcn.10013100
cmp dword [ebp - 0x1c18], 0
je 0x1003ef4b
push 0x104
push 0
push 0x100dbb28
call fcn.1007dcf0
add esp, 0xc
lea eax, [ebp - 0x574]
call fcn.10013470
push eax
push 0x100dbb28
call dword [sym.imp.SHLWAPI.dll_StrCpyW]
mov dword [ebp - 0xba0], 1
xor eax, eax
mov word [ebp - 0xfd4], ax
push 0x208
push 0
lea ecx, [ebp - 0xfd2]
push ecx
call fcn.1007dcf0
add esp, 0xc
mov edx, dword [0x100a1aec]
mov dword [ebp - 0x42c], edx
mov eax, dword [0x100a1af0]
mov dword [ebp - 0x428], eax
push 0x200
push 0
lea ecx, [ebp - 0x424]
push ecx
call fcn.1007dcf0
add esp, 0xc
lea edx, [ebp - 0xfd4]
push edx
push 0
push 0
push 0x26
push 0
mov eax, 0x100e3ab4
call fcn.10057660
test eax, eax
jl 0x1003f02f
push 0x8c
mov ecx, 0x7da7e958
mov eax, 0xb6cee79a
mov edi, 3
lea esi, [ebp - 0x1c28]
call fcn.10057130
mov dword [ebp - 0x1cac], eax
mov eax, dword [ebp - 0x1cac]
mov dword [ebp - 0x1cb0], eax
mov byte [ebp - 4], 2
mov ecx, dword [ebp - 0x1c48]
or ecx, 1
mov dword [ebp - 0x1c48], ecx
mov eax, dword [ebp - 0x1cb0]
call fcn.10057100
push eax
lea edx, [ebp - 0xfd4]
push edx
mov eax, 0x100e3aa0
call fcn.100577b0
test eax, eax
je 0x1003f02f
mov dword [ebp - 0x1cb4], 1
jmp 0x1003f039
mov dword [ebp - 0x1cb4], 0
mov al, byte [ebp - 0x1cb4]
mov byte [ebp - 0x1c1d], al
mov dword [ebp - 4], 0
mov ecx, dword [ebp - 0x1c48]
and ecx, 1
je 0x1003f069
and dword [ebp - 0x1c48], 0xfffffffe
lea esi, [ebp - 0x1c28]
call fcn.10057150
movzx edx, byte [ebp - 0x1c1d]
test edx, edx
je 0x1003f25f
cmp dword [ebp - 0xba0], 0
jne 0x1003f25f
lea eax, [ebp - 0xfd4]
push eax
call dword [sym.imp.SHLWAPI.dll_PathIsDirectoryW]
test eax, eax
jne 0x1003f0e9
xor ecx, ecx
mov word [ebp - 0x13e4], cx
push 0x206
push 0
lea edx, [ebp - 0x13e2]
push edx
call fcn.1007dcf0
add esp, 0xc
lea eax, [ebp - 0xfd4]
push eax
lea ecx, [ebp - 0x13e4]
push ecx
call dword [sym.imp.SHLWAPI.dll_StrCpyW]
lea edx, [ebp - 0x13e4]
push edx
call dword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
push 0x100a1950
lea ecx, [ebp - 0x13e4]
call fcn.1004a3b0
add esp, 4
push 0x9f
mov ecx, 0xc8372bb4
mov eax, 0xdc1688c4
mov edi, 7
lea esi, [ebp - 0x1c30]
call fcn.10057130
mov dword [ebp - 0x1cb8], eax
mov eax, dword [ebp - 0x1cb8]
mov dword [ebp - 0x1cbc], eax
mov byte [ebp - 4], 3
mov eax, dword [ebp - 0x1cbc]
call fcn.10057100
push eax
lea ecx, [ebp - 0xfd4]
push ecx
mov eax, 0x100e3aa0
call fcn.100577b0
mov byte [ebp - 4], 0
lea esi, [ebp - 0x1c30]
call fcn.10057150
xor edx, edx
mov word [ebp - 0x11dc], dx
push 0x206
push 0
lea eax, [ebp - 0x11da]
push eax
call fcn.1007dcf0
add esp, 0xc
mov esi, 2
lea edi, [ebp - 0x11dc]
call fcn.100484d0
lea ecx, [ebp - 0x11dc]
push ecx
lea edx, [ebp - 0xfd4]
push edx
call dword [sym.imp.SHLWAPI.dll_StrCatW]
lea eax, [ebp - 0xfd4]
push eax
lea ecx, [ebp - 0x42c]
push ecx
call dword [sym.imp.SHLWAPI.dll_StrCatW]
lea edx, [ebp - 0xfd4]
push edx
call dword [sym.imp.SHLWAPI.dll_PathIsDirectoryW]
test eax, eax
jne 0x1003f250
xor eax, eax
mov word [ebp - 0x15ec], ax
push 0x206
push 0
lea ecx, [ebp - 0x15ea]
push ecx
call fcn.1007dcf0
add esp, 0xc
lea edx, [ebp - 0xfd4]
push edx
lea eax, [ebp - 0x15ec]
push eax
call dword [sym.imp.SHLWAPI.dll_StrCpyW]
lea ecx, [ebp - 0x15ec]
push ecx
call dword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
xor edx, edx
mov word [ebp - 0x17f4], dx
push 0x206
push 0
lea eax, [ebp - 0x17f2]
push eax
call fcn.1007dcf0
add esp, 0xc
push str.360Safe
lea ecx, [ebp - 0x17f4]
push ecx
call dword [sym.imp.SHLWAPI.dll_StrCpyW]
lea edx, [ebp - 0x11dc]
push edx
lea eax, [ebp - 0x17f4]
push eax
call dword [sym.imp.SHLWAPI.dll_StrCatW]
lea ecx, [ebp - 0x17f4]
push ecx
lea ecx, [ebp - 0x15ec]
call fcn.1004a3b0
add esp, 4
lea edx, [ebp - 0xfd4]
push edx
call fcn.1003d540
add esp, 4
push 0x40
call fcn.10079b72
add esp, 4
mov dword [ebp - 0x224], eax
mov eax, dword [ebp - 0x224]
mov dword [ebp - 0x788], eax
mov dword [ebp - 0xbac], 0
mov dword [ebp - 0xdc0], 0
mov dword [ebp - 0x220], 0
mov dword [ebp - 0x784], 0
cmp dword [ebp - 0x220], 0xa
jae 0x1003f2e1
call fcn.10079c4e
cdq
mov ecx, 0xb
idiv ecx
mov eax, dword [ebp - 0x788]
mov dword [eax], edx
mov ecx, dword [ebp - 0x788]
add ecx, 4
mov dword [ebp - 0x788], ecx
mov edx, dword [ebp - 0x220]
add edx, 1
mov dword [ebp - 0x220], edx
jmp 0x1003f2a3
mov dword [ebp - 0xdc0], 1
jmp 0x1003f2fc
mov eax, dword [ebp - 0xdc0]
add eax, 1
mov dword [ebp - 0xdc0], eax
mov eax, dword [ebp - 0x220]
sub eax, 1
cmp dword [ebp - 0xdc0], eax
jg 0x1004009f
mov dword [ebp - 0xbac], 0
jmp 0x1003f5b0
mov eax, dword [ebp - 0xbac]
add eax, 1
mov dword [ebp - 0xbac], eax
mov eax, dword [ebp - 0xba4]
cmp dword [eax], 0x101
jge 0x1003f5b0
mov edx, edx
mov eax, dword [ebp - 0x224]
push eax
call fcn.10079c70
add esp, 4
mov ecx, dword [ebp + 0x10]
and ecx, 2
je 0x1003f4f6
mov edx, dword [ebp + 0x14]
mov dword [ebp - 0x1cc0], edx
lea eax, [ebp - 0xdbc]
mov dword [ebp - 0x1cc4], eax
mov ecx, dword [ebp - 0x1cc4]
mov dword [ebp - 0x1cc8], ecx
mov edx, dword [ebp - 0x1cc0]
mov ax, word [edx]
mov word [ebp - 0x1cca], ax
mov ecx, dword [ebp - 0x1cc4]
mov dx, word [ebp - 0x1cca]
mov word [ecx], dx
mov eax, dword [ebp - 0x1cc0]
add eax, 2
mov dword [ebp - 0x1cc0], eax
mov ecx, dword [ebp - 0x1cc4]
add ecx, 2
mov dword [ebp - 0x1cc4], ecx
cmp word [ebp - 0x1cca], 0
jne 0x1003f37f
lea edx, [ebp - 0xdbc]
mov dword [ebp - 0x1cd0], edx
mov eax, dword [ebp - 0x1cd0]
add eax, 2
mov dword [ebp - 0x1cd4], eax
mov ecx, dword [ebp - 0x1cd0]
mov dx, word [ecx]
mov word [ebp - 0x1cd6], dx
add dword [ebp - 0x1cd0], 2
cmp word [ebp - 0x1cd6], 0
jne 0x1003f3e2
mov eax, dword [ebp - 0x1cd0]
sub eax, dword [ebp - 0x1cd4]
sar eax, 1
mov dword [ebp - 0x1cdc], eax
mov ecx, dword [ebp - 0x1cdc]
mov dword [ebp - 0x17f8], ecx
mov dword [ebp - 0x17fc], 0
jmp 0x1003f43e
mov edx, dword [ebp - 0x17fc]
add edx, 1
mov dword [ebp - 0x17fc], edx
mov eax, dword [ebp - 0x17fc]
cmp eax, dword [ebp - 0x17f8]
jge 0x1003f474
mov ecx, dword [ebp - 0x17fc]
movzx edx, word [ebp + ecx*2 - 0xdbc]
cmp edx, 0x2f
jne 0x1003f472
mov eax, 0x40
mov ecx, dword [ebp - 0x17fc]
mov word [ebp + ecx*2 - 0xdbc], ax
jmp 0x1003f42f
push 0xf1
mov ecx, 0xc149a92
mov eax, 0x7e0544f5
mov edi, 0x2d
lea esi, [ebp - 0x1c38]
call fcn.10057130
mov dword [ebp - 0x1ce0], eax
mov edx, dword [ebp - 0x1ce0]
mov dword [ebp - 0x1ce4], edx
mov byte [ebp - 4], 4
lea eax, [ebp - 0xdbc]
push eax
mov ecx, dword [ebp + 0xc]
push ecx
push 0x100dbf38
push 0x100dbd30
lea edx, [ebp - 0x56c]
push edx
mov eax, dword [ebp - 0x1ce4]
call fcn.10057100
push eax
lea eax, [ebp - 0xb9c]
push eax
mov ecx, 0x104
call fcn.10018220
add esp, 0x1c
mov byte [ebp - 4], 0
lea esi, [ebp - 0x1c38]
call fcn.10057150
jmp 0x1003f56c
push 0x25
mov ecx, 0xfd3f1b1a
mov eax, 0xf69a8509
mov edi, 0x20
lea esi, [ebp - 0x1c40]
call fcn.10057130
mov dword [ebp - 0x1ce8], eax
mov ecx, dword [ebp - 0x1ce8]
mov dword [ebp - 0x1cec], ecx
mov byte [ebp - 4], 5
mov edx, dword [ebp + 0xc]
push edx
push 0x100dbf38
push 0x100dbd30
lea eax, [ebp - 0x56c]
push eax
mov eax, dword [ebp - 0x1cec]
call fcn.10057100
push eax
lea ecx, [ebp - 0xb9c]
push ecx
mov ecx, 0x104
call fcn.10018220
add esp, 0x18
mov byte [ebp - 4], 0
lea esi, [ebp - 0x1c40]
call fcn.10057150
cmp dword [ebp - 0xba0], 0
jne 0x1003f59b
push 0x1009f734
lea edx, [ebp - 0xb9c]
push edx
call dword [sym.imp.SHLWAPI.dll_StrCatW]
lea eax, [ebp - 0x42c]
push eax
lea ecx, [ebp - 0xb9c]
push ecx
call dword [sym.imp.SHLWAPI.dll_StrCatW]
mov eax, eax
push edx
mov edx, dword [ebp - 0xba4]
cmp dword [edx], 0x100
jne 0x1003f69b
mov eax, dword [ebp - 0x220]
sub eax, 1
sub eax, dword [ebp - 0xdc0]
cmp dword [ebp - 0xbac], eax
jg 0x1004009a
mov eax, dword [ebp - 0xbac]
mov ecx, dword [ebp - 0x224]
mov edx, dword [ebp - 0xbac]
mov esi, dword [ebp - 0x224]
mov eax, dword [ecx + eax*4]
cmp eax, dword [esi + edx*4 + 4]
jle 0x10040037
mov eax, dword [ebp - 0xbac]
mov ecx, dword [ebp - 0xba4]
cmp dword [ecx], 0x100
jge 0x1003f645
pop fs
mov ds, cx
mov es, cx
mov ecx, dword fs:[0x40]
mov esp, dword [ecx + 4]
push 0x23
push edx
pushfd
push 2
add edx, 8
popfd
or byte [esp + 1], 2
push 0x1b
push dword ds:[0xffdf0304]
push 0
push ebp
push ebx
push esi
push edi
mov ebx, dword fs:[0x1c]
push 0x3b
mov esi, dword [ebx + 0x124]
push dword [ebx]
mov ecx, dword [ebp - 0x224]
mov edx, dword [ecx + eax*4]
mov dword [ebp - 0x784], edx
mov eax, dword [ebp - 0xbac]
mov ecx, dword [ebp - 0x224]
mov edx, dword [ebp - 0xbac]
mov esi, dword [ebp - 0x224]
mov edx, dword [esi + edx*4 + 4]
mov dword [ecx + eax*4], edx
mov eax, dword [ebp - 0xbac]
mov ecx, dword [ebp - 0x224]
mov edx, dword [ebp - 0x784]
mov dword [ecx + eax*4 + 4], edx
mov eax, dword [ebp - 0xba4]
cmp dword [eax], 0x100
jge 0x10040037
pop edx
lea edx, [ebp - 0xb9c]
push edx
mov ecx, 0x104
mov edx, dword [ebp + 0x18]
call fcn.10014050
mov dword [ebp - 0xbb4], 0
mov dword [0x100db770], 1
mov dword [ebp - 0xbb0], 0
mov dword [ebp - 0x780], 0
cmp dword [ebp - 0xbb0], 0
je 0x1003f6f0
mov dword [ebp - 0xbb4], 1
jmp 0x10040028
mov eax, dword [0x100db91c]
and eax, 0xf
cmp eax, 2
jbe 0x1003faba
push 0x11f
xor edx, edx
mov eax, dword [ebp + 8]
mov esi, dword [ebp + 0xc]
call fcn.1002d4f0
add esp, 4
push str._ZwQuneryAttributesFile
push 0x1009e95c
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x224], eax
push 0x50
call fcn.10079b72
add esp, 4
mov dword [ebp - 0x788], eax
push 0x50
call fcn.10079b72
add esp, 4
mov dword [ebp - 0xbac], eax
push ebx
mov ebx, dword [ebp - 0x224]
cmp ebx, 0
je 0x1003f7dc
add ebx, 8
mov dword [ebp - 0xdc0], ebx
imul ebx, dword [ebp - 0xdc0]
mov ebx, dword [ebp - 0x788]
push ebx
mov ebx, dword [ebp - 0xbac]
push ebx
mov ebx, dword [ebp - 0x224]
call ebx
push 0x1003f7dc
ret
mov ebx, dword [ebp - 0x788]
cmp ebx, 0x80000000
jne 0x1003fa8c
pop ebx
mov ecx, dword [ebp - 0x788]
push ecx
call fcn.10079c70
add esp, 4
mov edx, dword [ebp - 0xbac]
push edx
call fcn.10079c70
add esp, 4
call fcn.10025c60
test eax, eax
je 0x1003f939
lea eax, [ebp - 0xb9c]
push eax
push 0x100dbb28
mov ecx, dword [ebp + 0xc]
push ecx
mov edx, dword [ebp + 8]
push edx
call fcn.1004eb20
mov dword [ebp - 0xbb4], eax
cmp dword [ebp - 0xbb4], 0
je 0x1003f934
mov dword [ebp - 0x780], 1
push 0x120
xor edx, edx
mov eax, dword [ebp + 8]
mov esi, dword [ebp + 0xc]
call fcn.1002d4f0
add esp, 4
push 0x100df298
call dword [sym.imp.SHLWAPI.dll_PathFileExistsW]
test eax, eax
je 0x1003f934
xor eax, eax
mov word [ebp - 0x1a04], ax
push 0x206
push 0
lea ecx, [ebp - 0x1a02]
push ecx
call fcn.1007dcf0
add esp, 0xc
mov esi, 8
lea edi, [ebp - 0x1a04]
call fcn.100484d0
xor edx, edx
mov word [ebp - 0x1c0c], dx
push 0x206
push 0
lea eax, [ebp - 0x1c0a]
push eax
call fcn.1007dcf0
add esp, 0xc
push 0x100dbb28
lea ecx, [ebp - 0x1c0c]
push ecx
call dword [sym.imp.SHLWAPI.dll_StrCpyW]
lea edx, [ebp - 0x1c0c]
push edx
call dword [sym.imp.SHLWAPI.dll_PathRemoveFileSpecW]
lea eax, [ebp - 0x1a04]
push eax
lea ecx, [ebp - 0x1c0c]
push ecx
call dword [sym.imp.SHLWAPI.dll_PathAppendW]
lea edx, [ebp - 0x1c0c]
push edx
push 0x100dbb28
call fcn.1007b9d8
add esp, 8
push 1
push 0x100dbb28
push 0x100df298
call dword [sym.imp.KERNEL32.dll_CopyFileW]
push 4
push 0
lea eax, [ebp - 0x1c0c]
push eax
mov eax, 0x100e39a8
call fcn.10057630
jmp 0x1003fa79
push 0x127
xor edx, edx
mov eax, dword [ebp + 8]
mov esi, dword [ebp + 0xc]
call fcn.1002d4f0
add esp, 4
mov ecx, dword [ebp + 0xc]
push ecx
lea edx, [ebp - 0xb9c]
push edx
push 0x100dbb28
push str.open
push 0
xor edi, edi
call fcn.1000dc10
add esp, 0x14
mov dword [ebp - 0xbb4], eax
cmp dword [ebp - 0xbb4], 0
je 0x1003f99f
mov dword [ebp - 0x780], 2
push 0x128
xor edx, edx
mov eax, dword [ebp + 8]
mov esi, dword [ebp + 0xc]
call fcn.1002d4f0
add esp, 4
jmp 0x1003f9b4
push 0x129
xor edx, edx
mov eax, dword [ebp + 8]
mov esi, dword [ebp + 0xc]
call fcn.1002d4f0
add esp, 4
cmp dword [ebp - 0xbb4], 0
jne 0x1003fa79
push 0x121
xor edx, edx
mov eax, dword [ebp + 8]
mov esi, dword [ebp + 0xc]
call fcn.1002d4f0
add esp, 4
push 0x14a
xor edx, edx
mov eax, dword [ebp + 8]
mov esi, dword [ebp + 0xc]
call fcn.1002d4f0
add esp, 4
lea eax, [ebp - 0xb9c]
push eax
push 0x100dbb28
push str.open
push 0
mov eax, 0xf
xor ecx, ecx
call fcn.10041a70
mov dword [ebp - 0x1c10], eax
cmp dword [ebp - 0x1c10], 0x20
jbe 0x1003fa2f
mov dword [ebp - 0x780], 4
mov dword [ebp - 0xbb4], 1
jmp 0x1003fa64
cmp dword [ebp - 0x1c10], 5
jne 0x1003fa4f
push 0x14c
xor edx, edx
mov eax, dword [ebp + 8]
mov esi, dword [ebp + 0xc]
call fcn.1002d4f0
add esp, 4
jmp 0x1003fa64
push 0x14d
xor edx, edx
mov eax, dword [ebp + 8]
mov esi, dword [ebp + 0xc]
call fcn.1002d4f0
add esp, 4
push 0x14b
xor edx, edx
mov eax, dword [ebp + 8]
mov esi, dword [ebp + 0xc]
call fcn.1002d4f0
add esp, 4
push edx
mov edx, edx
xor edx, edx
mov edx, dword [ebp - 0x570]
cmp dword [edx], 0x200
jne 0x1003fab4
mov ebx, 0x1003f7ee
push ebx
ret
pop edx
jmp 0x10040028
cmp dword [0x100db91c], 1
jne 0x1003fdc9
push 0x127
xor edx, edx
mov eax, dword [ebp + 8]
mov esi, dword [ebp + 0xc]
call fcn.1002d4f0
add esp, 4
push 0x28
call fcn.10079b72
add esp, 4
mov dword [ebp - 0x224], eax
mov dword [ebp - 0x788], 0
mov dword [ebp - 0xbac], 9
mov dword [ebp - 0xdc0], 0
mov dword [ebp - 0x784], 0
mov dword [ebp - 0xba8], 9
cmp dword [ebp - 0xdc0], 0xa
jge 0x1003fb5d
mov eax, dword [ebp - 0xdc0]
mov ecx, dword [ebp - 0xdc0]
lea edx, [ecx + eax*2]
mov eax, 0x1e
sub eax, edx
mov ecx, dword [ebp - 0xdc0]
mov edx, dword [ebp - 0x224]
mov dword [edx + ecx*4], eax
mov eax, dword [ebp - 0xdc0]
add eax, 1
mov dword [ebp - 0xdc0], eax
jmp 0x1003fb1e
mov eax, dword [ebp - 0x784]
add eax, dword [ebp - 0xba8]
cdq
sub eax, edx
sar eax, 1
mov ecx, dword [ebp - 0x224]
mov edx, dword [ecx + eax*4]
mov dword [ebp - 0x220], edx
mov edx, 0x1003fc74
mov eax, edx
push eax
ret
push 0x123
xor edx, edx
mov eax, dword [ebp + 8]
mov esi, dword [ebp + 0xc]
call fcn.1002d4f0
add esp, 4
push 0x10
call fcn.10079b72
add esp, 4
mov dword [ebp - 0x224], eax
mov dword [ebp - 0x788], 0x10
mov dword [ebp - 0xbac], 0
mov dword [ebp - 0x220], 0
mov ecx, dword [ebp - 0x224]
mov dword [ebp - 0x784], ecx
mov eax, dword [ebp - 0x224]
mov dword [ebp - 0x784], eax
cmp dword [ebp - 0x220], 0x10
jae 0x1003fe55
mov eax, dword [ebp - 0x220]
imul eax, eax, 0x11
mov ecx, dword [ebp - 0x224]
add ecx, dword [ebp - 0x220]
mov byte [ecx], al
mov eax, dword [ebp - 0x220]
add eax, 1
mov dword [ebp - 0x220], eax
jmp 0x1003fe24
mov eax, dword [ebp - 0x788]
cmp eax, 0
je 0x1003ffa8
sub eax, 1
mov dword [ebp - 0x788], eax
mov dword [ebp - 0x220], 0x80
jmp 0x1003fedc
mov eax, dword [ebp - 0x220]
shr eax, 1
mov dword [ebp - 0x220], eax
mov eax, dword [ebp - 0x570]
cmp dword [eax], 0x200
jle 0x1003fedc
pop ebx
mov edx, dword [ebp - 0x224]
push edx
call fcn.10079c70
add esp, 4
lea eax, [ebp - 0xb9c]
push eax
push 0x100dbb28
push str.open
push 0
mov eax, 0xf
xor ecx, ecx
call fcn.10041a70
mov dword [ebp - 0x1c14], eax
push edx
mov edx, 0x1003ffbc
cmp dword [edx], 0x100
jne 0x1003ffbc
cmp dword [ebp - 0x220], 0
je 0x1003ff94
mov eax, dword [ebp - 0xba4]
cmp dword [eax], 0x100
jge 0x1003ff41
mov es, cx
mov ecx, dword fs:[0x40]
mov esp, dword [ecx + 4]
push 0x23
push edx
pushfd
push 2
add edx, 8
popfd
or byte [esp + 1], 2
push 0x1b
push dword ds:[0xffdf0304]
push 0
push ebp
push ebx
push esi
push edi
mov ebx, dword fs:[0x1c]
push 0x3b
mov esi, dword [ebx + 0x124]
push dword [ebx]
mov dword [ebx], 0xffffffff
mov ebp, dword [esi + 0x18]
push 1
sub esp, 0x48
mov eax, dword [ebp - 0xbac]
shl eax, 1
mov dword [ebp - 0xbac], eax
mov eax, dword [ebp - 0xbac]
and eax, 0x10000
je 0x1003ff6d
mov eax, dword [ebp - 0xbac]
xor eax, 0x11021
mov dword [ebp - 0xbac], eax
mov eax, dword [ebp - 0x784]
movzx ecx, byte [eax]
and ecx, dword [ebp - 0x220]
je 0x1003ff8f
mov eax, dword [ebp - 0xbac]
xor eax, 0x1021
mov dword [ebp - 0xbac], eax
jmp 0x1003fe79
mov eax, dword [ebp - 0x784]
add eax, 1
mov dword [ebp - 0x784], eax
jmp 0x1003fe55
mov eax, dword [ebp - 0xbac]
mov dword [ebp - 0xdc0], eax
mov ebx, 0x1003fe95
push ebx
push ebx
ret
pop edx
mov edi, edi
cmp dword [ebp - 0x1c14], 0x20
jbe 0x1003ffde
mov dword [ebp - 0x780], 3
mov dword [ebp - 0xbb4], 1
jmp 0x10040013
cmp dword [ebp - 0x1c14], 5
jne 0x1003fffe
push 0x122
xor edx, edx
mov eax, dword [ebp + 8]
mov esi, dword [ebp + 0xc]
call fcn.1002d4f0
add esp, 4
jmp 0x10040013
push 0x11e
xor edx, edx
mov eax, dword [ebp + 8]
mov esi, dword [ebp + 0xc]
call fcn.1002d4f0
add esp, 4
push 0x124
xor edx, edx
mov eax, dword [ebp + 8]
mov esi, dword [ebp + 0xc]
call fcn.1002d4f0
add esp, 4
push eax
mov eax, dword [ebp - 0x570]
cmp dword [eax], 0x200
jne 0x100400b3
mov eax, dword [ebp - 0xba4]
cmp dword [eax], 0x100
jge 0x10040095
inc dword fs:[0x638]
mov esi, edx
mov ebx, dword [edi + 0xc]
sub esp, 0x48
sub ebp, 0x29c
mov byte [esi + 0x140], 1
cmp ebp, esp
and dword [ebp + 0x2c], 0
test byte [esi + 0x2c], 0xff
mov dword [esi + 0x134], ebp
mov ebx, dword [ebp + 0x60]
mov edi, dword [ebp + 0x68]
mov dword [ebp + 0xc], edx
xor ecx, ecx
mov cl, byte [eax + ebx]
mov edi, dword [edi]
mov ebx, dword [edi + eax*4]
sub esp, ecx
call edi
cmp ebp, esp
pop ecx
pop edx
pop eax
ret 8
jmp 0x1003f320
jmp 0x1003f2ed
mov eax, eax
mov eax, dword [ebp - 0x570]
cmp dword [eax], 0x200
jle 0x1003f341
push eax
xor eax, eax
pop eax
pop eax
cmp dword [ebp - 0xbb4], 1
jne 0x100400d1
mov eax, 0x100dbb28
call fcn.10039360
mov dword [ebp - 0xbb4], eax
cmp dword [ebp - 0xbb4], 0
jne case.default.0x10040115
cmp dword [ebp - 0x780], 0
je case.default.0x10040115
mov ecx, dword [ebp - 0x780]
mov dword [ebp - 0x1cf0], ecx
mov edx, dword [ebp - 0x1cf0]
sub edx, 1
mov dword [ebp - 0x1cf0], edx
cmp dword [ebp - 0x1cf0], 3
ja case.default.0x10040115
mov eax, dword [ebp - 0x1cf0]
jmp dword [eax*4 + 0x100401d4]
push 0x142
xor edx, edx
mov eax, dword [ebp + 8]
mov esi, dword [ebp + 0xc]
call fcn.1002d4f0
add esp, 4
jmp case.default.0x10040115
push 0x143
xor edx, edx
mov eax, dword [ebp + 8]
mov esi, dword [ebp + 0xc]
call fcn.1002d4f0
add esp, 4
jmp case.default.0x10040115
push 0x144
xor edx, edx
mov eax, dword [ebp + 8]
mov esi, dword [ebp + 0xc]
call fcn.1002d4f0
add esp, 4
jmp case.default.0x10040115
push 0x145
xor edx, edx
mov eax, dword [ebp + 8]
mov esi, dword [ebp + 0xc]
call fcn.1002d4f0
add esp, 4
mov ecx, dword [ebp - 0x570]
push ecx
call fcn.10079c70
add esp, 4
mov edx, dword [ebp - 0xba4]
push edx
call fcn.10079c70
add esp, 4
mov eax, dword [ebp - 0xbb4]
mov dword [ebp - 0x1c44], eax
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x574]
call fcn.10013100
mov eax, dword [ebp - 0x1c44]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.10079a05
mov esp, ebp
pop ebp
ret