Function at 0x3000bb5c
Capabilities:
Create directory

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xe0
mov eax, dword [0x30004298]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0xc]
push ebx
push esi
push edi
push eax
push dword [ebp + 8]
lea ecx, [ebp - 0xe0]
mov dword [ebp - 0x90], eax
xor ebx, ebx
xor edi, edi
call fcn.30006e5b
mov dword [ebp - 0xb8], ebx
mov dword [ebp - 0xbc], ebx
mov dword [ebp - 0x8c], ebx
mov dword [ebp - 0x80], ebx
mov dword [ebp - 0x50], ebx
mov dword [ebp - 0x88], ebx
mov dword [ebp - 0x54], ebx
mov dword [ebp - 0x64], ebx
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0x78], ebx
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x94], ebx
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 0xb0], ebx
mov dword [ebp - 0x6c], ebx
mov dword [ebp - 0x74], ebx
mov dword [ebp - 0x7c], ebx
mov dword [ebp - 0xb4], ebx
mov byte [ebp - 0x3e], bl
mov dword [ebp - 0x68], ebx
mov dword [ebp - 0x84], ebx
mov dword [ebp - 0x60], ebx
mov dword [ebp - 0xa8], ebx
mov dword [ebp - 0xac], ebx
call fcn.300074c7
push ebx
push 0xc
push 0x300110a0
lea ecx, [ebp - 0xe0]
call fcn.30007dbf
test al, al
mov esi, dword [sym.imp.MSO.dll_Ordinal_3057]
jne 0x3000bc2b
push dword [ebp - 0xc0]
mov ecx, 0x300115a8
call fcn.30006cfa
jmp 0x3000c51a
push 0x3000174c
lea ecx, [ebp - 0xe0]
call fcn.30008110
test eax, eax
jle 0x3000bcb5
push 0x3000174c
lea ecx, [ebp - 0xe0]
mov dword [ebp - 0x38], ebx
call fcn.30009cda
push eax
lea ecx, [ebp - 0x38]
call fcn.30005f6e
mov edi, eax
cmp edi, ebx
jge 0x3000bc6b
push dword [ebp - 0x38]
call esi
jmp 0x3000c67a
lea eax, [ebp - 0xac]
push eax
push dword [ebp - 0x38]
call fcn.300081dd
mov edi, eax
cmp edi, ebx
jl 0x3000bc61
cmp dword [ebp - 0xac], 0xffffffff
jne 0x3000bcb0
push 0x3000174c
push dword [ebp - 0x38]
push 0x30003f88
push 0x300115a8
call fcn.30006d4e
add esp, 0x10
push dword [ebp - 0x38]
mov edi, 0x80004005
jmp 0x3000c3ee
push dword [ebp - 0x38]
call esi
push 0x30001744
lea ecx, [ebp - 0xe0]
call fcn.30008110
test eax, eax
jg 0x3000cb22
push 0x30001748
lea ecx, [ebp - 0xe0]
call fcn.30008110
test eax, eax
jg 0x3000cb22
push 0x30001738
lea ecx, [ebp - 0xe0]
call fcn.30008110
test eax, eax
jg 0x3000cb22
cmp dword [ebp - 0xcc], ebx
jne 0x3000bd11
cmp dword [ebp - 0xc8], ebx
je 0x3000cb22
lea eax, [ebp - 0xbc]
push eax
lea eax, [ebp - 0xb8]
push eax
mov eax, dword [ebp - 0x90]
push dword [eax]
call fcn.30006063
mov edi, eax
cmp edi, ebx
jl 0x3000c682
cmp dword [ebp - 0xc8], ebx
setg al
cmp al, bl
jne 0x3000bd59
push 0x30003f40
push 0x300115a8
call fcn.30006d4e
pop ecx
pop ecx
jmp 0x3000c51a
xor eax, eax
cmp dword [ebp - 0xc8], ebx
jle 0x3000bd6f
mov ecx, dword [ebp - 0xd8]
cmp ecx, ebx
je 0x3000bd6f
mov eax, dword [ecx]
lea ecx, [ebp - 0x50]
push ecx
lea ecx, [ebp - 0x8c]
push ecx
push eax
call fcn.30006063
mov edi, eax
cmp edi, ebx
jl 0x3000c682
mov edi, 0x30003f30
push edi
push dword [ebp - 0x50]
call fcn.30006430
test al, al
jne 0x3000bdaf
push edi
lea ecx, [ebp - 0x50]
call fcn.30005f6e
mov edi, eax
cmp edi, ebx
jl 0x3000c682
push dword [ebp - 0x8c]
lea ecx, [ebp - 0x88]
call fcn.30006a47
mov edi, eax
cmp edi, ebx
jl 0x3000c682
push dword [ebp - 0x50]
lea ecx, [ebp - 0x88]
call fcn.30006a47
mov edi, eax
cmp edi, ebx
jl 0x3000c682
push dword [ebp - 0x88]
call fcn.30005ccb
test al, al
jne 0x3000be01
push dword [ebp - 0x88]
push 0x30003ee0
jmp 0x3000c0ad
lea eax, [ebp - 0x54]
push eax
push 0x30003ecc
call fcn.300085c9
mov edi, eax
cmp edi, ebx
jl 0x3000c682
push 0x30001770
lea ecx, [ebp - 0xe0]
call fcn.30009cda
push eax
lea ecx, [ebp - 0x48]
call fcn.30005f6e
mov edi, eax
cmp edi, ebx
jl 0x3000c682
push 0x30001760
lea ecx, [ebp - 0xe0]
call fcn.30009cda
push eax
lea ecx, [ebp - 0x5c]
call fcn.30005f6e
mov edi, eax
cmp edi, ebx
jl 0x3000c682
push 0x3000175c
lea ecx, [ebp - 0xe0]
call fcn.30009cda
push eax
lea ecx, [ebp - 0x6c]
call fcn.30005f6e
mov edi, eax
cmp edi, ebx
jl 0x3000c682
push 0x30001768
lea ecx, [ebp - 0xe0]
call fcn.30009cda
push eax
lea ecx, [ebp - 0x74]
call fcn.30005f6e
mov edi, eax
cmp edi, ebx
jl 0x3000c682
push 0x30001764
lea ecx, [ebp - 0xe0]
call fcn.30009cda
push eax
lea ecx, [ebp - 0x7c]
call fcn.30005f6e
mov edi, eax
cmp edi, ebx
jl 0x3000c682
push 0x30001758
lea ecx, [ebp - 0xe0]
call fcn.30009cda
push eax
lea ecx, [ebp - 0x64]
call fcn.30005f6e
mov edi, eax
cmp edi, ebx
jl 0x3000c682
push 0x30001730
lea ecx, [ebp - 0xe0]
call fcn.30008110
test eax, eax
push 0x3000172c
lea ecx, [ebp - 0xe0]
setg byte [ebp - 0x3d]
call fcn.30008110
push dword [ebp - 0x5c]
test eax, eax
setg byte [ebp - 0x90]
call dword [sym.imp.MSO.dll_Ordinal_3061]
test eax, eax
jbe 0x3000bfea
lea eax, [ebp - 0xa4]
push eax
push dword [ebp - 0x5c]
mov dword [ebp - 0xa4], ebx
mov dword [ebp - 0xa0], ebx
mov dword [ebp - 0x9c], ebx
mov dword [ebp - 0x98], ebx
call fcn.30006933
mov edi, eax
cmp edi, ebx
jl 0x3000bfc8
mov eax, 0x270f
cmp dword [ebp - 0xa4], eax
ja 0x3000bfc8
cmp dword [ebp - 0xa0], eax
ja 0x3000bfc8
cmp dword [ebp - 0x9c], eax
ja 0x3000bfc8
cmp dword [ebp - 0x98], eax
ja 0x3000bfc8
push dword [ebp - 0x98]
lea eax, [ebp - 0x2c]
push dword [ebp - 0x9c]
push dword [ebp - 0xa0]
push dword [ebp - 0xa4]
push 0x30003eb4
push 0x14
push eax
call fcn.30007d65
add esp, 0x1c
push dword [ebp - 0x5c]
call esi
lea eax, [ebp - 0x2c]
push eax
lea ecx, [ebp - 0x5c]
mov dword [ebp - 0x5c], ebx
call fcn.30005f6e
mov edi, eax
cmp edi, ebx
jl 0x3000c682
jmp 0x3000bff2
push dword [ebp - 0x5c]
push 0x30003e68
push 0x300115a8
call fcn.30006d4e
add esp, 0xc
cmp edi, ebx
jl 0x3000c682
jmp 0x3000c51a
push dword [ebp - 0x5c]
call esi
mov dword [ebp - 0x5c], ebx
push dword [ebp - 0x6c]
call dword [sym.imp.MSO.dll_Ordinal_3061]
test eax, eax
jbe 0x3000c052
lea ecx, [ebp - 0x6c]
call fcn.30005e99
mov edi, eax
cmp edi, ebx
jl 0x3000c682
push 0x30003e60
lea ecx, [ebp - 0x6c]
call fcn.30007c0b
test al, al
jne 0x3000c052
push 0x30003e58
lea ecx, [ebp - 0x6c]
call fcn.30007c0b
test al, al
jne 0x3000c052
push 0x3000175c
push dword [ebp - 0x6c]
push 0x30003f88
push 0x300115a8
call fcn.30006d4e
add esp, 0x10
jmp 0x3000c51a
push dword [ebp - 0x74]
mov edi, dword [sym.imp.MSO.dll_Ordinal_3061]
call edi
push dword [ebp - 0x7c]
test eax, eax
seta byte [ebp - 0x49]
call edi
push dword [ebp - 0x48]
test eax, eax
seta byte [ebp - 0x55]
call edi
test eax, eax
seta byte [ebp - 0x70]
cmp byte [ebp - 0x49], bl
je 0x3000c094
push dword [ebp - 0x74]
call fcn.30005d11
test al, al
jne 0x3000c094
push dword [ebp - 0x74]
push 0x30003df8
jmp 0x3000c0ad
cmp byte [ebp - 0x55], bl
je 0x3000c0bf
push dword [ebp - 0x7c]
call fcn.30005d11
test al, al
jne 0x3000c0bf
push dword [ebp - 0x7c]
push 0x30003d90
push 0x300115a8
call fcn.30006d4e
add esp, 0xc
jmp 0x3000c51a
cmp byte [ebp - 0x70], bl
jne 0x3000c178
push 0x30001314
lea ecx, [ebp - 0x48]
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x30], ebx
call fcn.30005f6e
mov edi, eax
cmp edi, ebx
jge 0x3000c0ee
push dword [ebp - 0x30]
call esi
push dword [ebp - 0x34]
jmp 0x3000bc64
cmp byte [ebp - 0x55], bl
je 0x3000c231
lea eax, [ebp - 0x34]
push eax
push dword [ebp - 0x7c]
call fcn.30005fae
mov edi, eax
cmp edi, ebx
jl 0x3000c0e1
push dword [ebp - 0x34]
call fcn.30006a07
mov edi, eax
cmp edi, ebx
jl 0x3000c0e1
push dword [ebp - 0x34]
lea ecx, [ebp - 0x48]
call fcn.30006a47
mov edi, eax
cmp edi, ebx
jl 0x3000c0e1
push 0x30003d88
lea ecx, [ebp - 0x48]
call fcn.30005f6e
mov edi, eax
cmp edi, ebx
jl 0x3000c0e1
cmp byte [ebp - 0x49], bl
lea eax, [ebp - 0x30]
push eax
je 0x3000c154
push dword [ebp - 0x74]
call fcn.30005fae
mov edi, eax
cmp edi, ebx
jge 0x3000c159
jmp 0x3000c0e1
call fcn.30006394
push dword [ebp - 0x30]
lea ecx, [ebp - 0x48]
call fcn.30006a47
mov edi, eax
cmp edi, ebx
jl 0x3000c0e1
push dword [ebp - 0x30]
call esi
push dword [ebp - 0x34]
call esi
lea eax, [ebp - 0xb4]
push eax
lea eax, [ebp - 0x68]
push eax
push dword [ebp - 0x48]
call fcn.30006572
mov edi, eax
cmp edi, ebx
jl 0x3000cab7
push dword [ebp - 0x68]
call dword [sym.imp.MSO.dll_Ordinal_3061]
cmp eax, 0xff
ja 0x3000cab7
push dword [ebp - 0x68]
call esi
push dword [ebp - 0x48]
lea ecx, [ebp - 0x68]
mov dword [ebp - 0x68], ebx
call fcn.30006a47
mov edi, eax
cmp edi, ebx
jl 0x3000c682
push dword [ebp - 0x64]
call dword [sym.imp.MSO.dll_Ordinal_3061]
test eax, eax
ja 0x3000c349
push ebx
lea eax, [ebp - 0x78]
push eax
push dword [ebp - 0x50]
call fcn.300064b1
mov edi, eax
cmp edi, ebx
jl 0x3000c682
push dword [ebp - 0x8c]
lea ecx, [ebp - 0x80]
call fcn.30006a47
mov edi, eax
cmp edi, ebx
jl 0x3000c682
push dword [ebp - 0x78]
lea ecx, [ebp - 0x44]
call fcn.30006a47
mov edi, eax
cmp edi, ebx
jl 0x3000c682
cmp byte [ebp - 0x3d], bl
lea ecx, [ebp - 0x44]
je 0x3000c32c
push 0x30003d7c
jmp 0x3000c335
cmp byte [ebp - 0x49], bl
je 0x3000c29b
lea eax, [ebp - 0x30]
push eax
push dword [ebp - 0x74]
call fcn.30005fae
push dword [ebp - 0x30]
mov edi, eax
cmp edi, ebx
jl 0x3000c0e4
call fcn.30006a07
push dword [ebp - 0x30]
mov edi, eax
cmp edi, ebx
jl 0x3000c0e4
lea ecx, [ebp - 0x48]
call fcn.30006a47
mov edi, eax
cmp edi, ebx
jl 0x3000c0e1
push 0x30003d88
lea ecx, [ebp - 0x48]
call fcn.30005f6e
mov edi, eax
cmp edi, ebx
jl 0x3000c0e1
lea eax, [ebp - 0x34]
push eax
call fcn.30006394
push dword [ebp - 0x34]
jmp 0x3000c15c
push ebx
lea eax, [ebp - 0x3c]
push eax
push dword [ebp - 0x50]
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x38], ebx
call fcn.300064b1
mov edi, eax
cmp edi, ebx
jge 0x3000c2c3
push dword [ebp - 0x38]
call esi
push dword [ebp - 0x3c]
call esi
jmp 0x3000c0e1
lea eax, [ebp - 0x38]
push eax
push dword [ebp - 0x3c]
call fcn.30005fae
push dword [ebp - 0x38]
mov edi, eax
cmp edi, ebx
jl 0x3000c2b7
call fcn.30006a07
push dword [ebp - 0x38]
mov edi, eax
cmp edi, ebx
jl 0x3000c2b7
lea ecx, [ebp - 0x48]
call fcn.30006a47
mov edi, eax
cmp edi, ebx
jl 0x3000c2b4
push 0x30003d88
lea ecx, [ebp - 0x48]
call fcn.30005f6e
mov edi, eax
cmp edi, ebx
jl 0x3000c2b4
lea eax, [ebp - 0x34]
push eax
call fcn.30006394
push dword [ebp - 0x34]
lea ecx, [ebp - 0x48]
call fcn.30006a47
push dword [ebp - 0x38]
mov edi, eax
call esi
push dword [ebp - 0x3c]
call esi
jmp 0x3000c166
mov byte [ebp - 0x3e], 1
push 0x30003d74
call fcn.30005f6e
mov edi, eax
cmp edi, ebx
jl 0x3000c682
jmp 0x3000c45b
mov eax, dword [ebp - 0x64]
push eax
lea ecx, [ebp - 0x3c]
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x64], ebx
call fcn.30005de4
lea eax, [ebp - 0x44]
push eax
lea eax, [ebp - 0x80]
push eax
push dword [ebp - 0x3c]
call fcn.30006063
mov edi, eax
cmp edi, ebx
jge 0x3000c381
push dword [ebp - 0x38]
call esi
push dword [ebp - 0x3c]
jmp 0x3000bc64
lea eax, [ebp - 0x38]
push eax
lea eax, [ebp - 0x78]
push eax
push dword [ebp - 0x44]
call fcn.300064b1
mov edi, eax
cmp edi, ebx
jl 0x3000c374
push 0x30003d7c
lea ecx, [ebp - 0x38]
call fcn.30007c0b
test al, al
je 0x3000c3b1
mov byte [ebp - 0x3d], 1
jmp 0x3000c447
push 0x30003d74
lea ecx, [ebp - 0x38]
call fcn.30007c0b
test al, al
je 0x3000c3f5
cmp byte [ebp - 0x3d], bl
je 0x3000c443
push 0x30001730
push dword [ebp - 0x38]
push 0x30003ce8
push 0x300115a8
call fcn.30006d4e
add esp, 0x10
push dword [ebp - 0x38]
mov edi, 0x80004005
call esi
push dword [ebp - 0x3c]
call esi
jmp 0x3000c682
push dword [ebp - 0x78]
call esi
push dword [ebp - 0x44]
lea ecx, [ebp - 0x78]
mov dword [ebp - 0x78], ebx
call fcn.30006a47
mov edi, eax
cmp edi, ebx
jl 0x3000c374
cmp byte [ebp - 0x3d], bl
lea ecx, [ebp - 0x44]
je 0x3000c42f
push 0x30003d7c
call fcn.30005f6e
mov edi, eax
cmp edi, ebx
jge 0x3000c447
jmp 0x3000c374
push 0x30003d74
call fcn.30005f6e
mov edi, eax
cmp edi, ebx
jl 0x3000c374
mov byte [ebp - 0x3e], 1
push ebx
push dword [ebp - 0x80]
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
push dword [ebp - 0x38]
call esi
push dword [ebp - 0x3c]
call esi
cmp byte [ebp - 0x3d], bl
je 0x3000c588
lea eax, [ebp - 0x84]
push eax
push 0x30003ccc
call fcn.300082e0
mov edi, eax
cmp edi, ebx
jl 0x3000c524
push dword [ebp - 0x84]
call dword [sym.imp.MSO.dll_Ordinal_3061]
test eax, eax
jbe 0x3000c524
push 0x30003c9c
lea eax, [ebp - 0x9c]
push eax
push dword [ebp - 0x84]
call fcn.30006ee6
mov edi, eax
cmp edi, ebx
jl 0x3000c682
cmp dword [ebp - 0x9c], 0x70000
je 0x3000c588
cmp dword [ebp - 0x9c], 0x7000a
je 0x3000c588
cmp dword [ebp - 0x9c], 0x80000
je 0x3000c588
cmp edi, ebx
jne 0x3000c67c
mov eax, dword [ebp - 0x98]
movzx ecx, ax
push ecx
shr eax, 0x10
push eax
mov eax, dword [ebp - 0x9c]
movzx ecx, ax
push ecx
shr eax, 0x10
push eax
push 0x30003c00
push 0x300115a8
call fcn.30006d4e
add esp, 0x18
mov edi, 0x80004005
jmp 0x3000c682
push 0x30003b10
push 0x300115a8
call fcn.30006d4e
pop ecx
pop ecx
push edi
call fcn.30007850
push 0x30003ac0
push 0x30001d3c
call dword [sym.imp.MSVCR80.dll_wprintf]
pop ecx
pop ecx
push dword [ebp - 0x44]
mov byte [ebp - 0x3d], bl
mov byte [ebp - 0x3e], 1
call esi
push dword [ebp - 0x78]
lea ecx, [ebp - 0x44]
mov dword [ebp - 0x44], ebx
call fcn.30006a47
mov edi, eax
cmp edi, ebx
jl 0x3000c682
push 0x30003d74
lea ecx, [ebp - 0x44]
call fcn.30005f6e
mov edi, eax
cmp edi, ebx
jl 0x3000c682
push dword [ebp - 0x80]
lea ecx, [ebp - 0x64]
call fcn.30006a47
mov edi, eax
cmp edi, ebx
jl 0x3000c682
push dword [ebp - 0x44]
lea ecx, [ebp - 0x64]
call fcn.30006a47
mov edi, eax
cmp edi, ebx
jl 0x3000c682
push 0x30003aa4
lea ecx, [ebp - 0xa8]
call fcn.30005f6e
mov edi, eax
cmp edi, ebx
jl 0x3000c682
push ebx
call dword [sym.imp.ole32.dll_CoInitialize]
mov edi, eax
cmp edi, ebx
jl 0x3000c682
push ebx
call esi
lea eax, [ebp - 0x94]
push eax
push dword [ebp - 0x6c]
lea eax, [ebp - 0xb0]
push eax
push dword [ebp - 0x5c]
mov dword [ebp - 0x94], ebx
push dword [ebp - 0x70]
push dword [ebp - 0x68]
push dword [ebp - 0x50]
push dword [ebp - 0x54]
push dword [ebp - 0x50]
push dword [ebp - 0x8c]
call fcn.3000ba45
mov edi, eax
cmp edi, ebx
jl 0x3000c674
push dword [ebp - 0x94]
call dword [sym.imp.MSO.dll_Ordinal_3061]
test eax, eax
jbe 0x3000c639
lea eax, [ebp - 0x94]
push eax
lea ecx, [ebp - 0x68]
call fcn.30008f7d
cmp byte [ebp - 0x3d], bl
je 0x3000c95a
push dword [ebp - 0x54]
lea ecx, [ebp - 0x34]
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x70], 0x300012e8
call fcn.30006a47
mov edi, eax
cmp edi, ebx
jge 0x3000c692
push ebx
call esi
push ebx
call esi
push dword [ebp - 0x34]
call esi
push ebx
call esi
call dword [sym.imp.ole32.dll_CoUninitialize]
cmp edi, ebx
jge 0x3000cb2c
push edi
call fcn.30007850
push 0x30003a70
jmp 0x3000cb31
push 0x30003a58
lea ecx, [ebp - 0x34]
call fcn.30005f6e
mov edi, eax
cmp edi, ebx
jl 0x3000c666
push dword [ebp - 0x34]
mov eax, dword [ebp - 0xac]
push dword [eax*4 + str.twuvxyz]
push 0x30003a48
push ebx
call fcn.300070ec
mov edi, eax
cmp edi, ebx
jl 0x3000c666
push dword [ebp - 0xac]
push dword [ebp - 0x98]
push dword [ebp - 0x9c]
push dword [ebp - 0x68]
push dword [ebp - 0xb0]
push dword [ebp - 0x7c]
push dword [ebp - 0x74]
push dword [ebp - 0xa8]
push dword [ebp - 0x54]
push dword [ebp - 0x50]
call fcn.30008bff
mov edi, eax
cmp edi, ebx
jl 0x3000c666
push dword [ebp - 0x84]
call dword [sym.imp.MSO.dll_Ordinal_3061]
test eax, eax
ja 0x3000c71c
mov edi, 0x80004005
jmp 0x3000c666
push 0x30003a44
lea ecx, [ebp - 0x60]
call fcn.30005f6e
mov edi, eax
cmp edi, ebx
jl 0x3000c666
push dword [ebp - 0x84]
lea ecx, [ebp - 0x60]
call fcn.30006a47
mov edi, eax
cmp edi, ebx
jl 0x3000c666
push 0x30003a44
lea ecx, [ebp - 0x60]
call fcn.30005f6e
mov edi, eax
cmp edi, ebx
jl 0x3000c666
push 0x30003a3c
lea ecx, [ebp - 0x60]
call fcn.30005f6e
mov edi, eax
cmp edi, ebx
jl 0x3000c666
push dword [ebp - 0x54]
lea ecx, [ebp - 0x60]
call fcn.30006a47
mov edi, eax
cmp edi, ebx
jl 0x3000c666
push dword [ebp - 0xa8]
lea ecx, [ebp - 0x60]
call fcn.30006a47
mov edi, eax
cmp edi, ebx
jl 0x3000c666
push 0x30003a18
lea ecx, [ebp - 0x60]
call fcn.30005f6e
mov edi, eax
cmp edi, ebx
jl 0x3000c666
push 0x300039f8
lea ecx, [ebp - 0x60]
call fcn.30005f6e
mov edi, eax
cmp edi, ebx
jl 0x3000c666
mov eax, dword [ebp - 0x9c]
sub eax, 0x70000
je 0x3000c7ff
sub eax, 0xa
je 0x3000c7f6
sub eax, 0xfff6
jne 0x3000c806
mov dword [ebp - 0x70], 0x300039ec
jmp 0x3000c806
mov dword [ebp - 0x70], 0x300039d8
jmp 0x3000c806
mov dword [ebp - 0x70], 0x300039cc
mov eax, dword [ebp - 0x98]
movzx ecx, ax
push ecx
shr eax, 0x10
push eax
mov eax, dword [ebp - 0x9c]
movzx ecx, ax
push ecx
shr eax, 0x10
push eax
push dword [ebp - 0x70]
push 0x30003940
call dword [sym.imp.MSVCR80.dll_wprintf]
add esp, 0x18
push dword [ebp - 0x54]
lea ecx, [ebp - 0x30]
call fcn.30006a47
mov edi, eax
cmp edi, ebx
jge 0x3000c84f
push ebx
call esi
push dword [ebp - 0x30]
jmp 0x3000c66a
push 0x30003924
lea ecx, [ebp - 0x30]
call fcn.30005f6e
mov edi, eax
cmp edi, ebx
jl 0x3000c844
push dword [ebp - 0x30]
push 0x7d
push 0x300024b0
push ebx
call fcn.300070ec
mov edi, eax
cmp edi, ebx
jl 0x3000c844
push dword [ebp - 0x54]
lea ecx, [ebp - 0x38]
call fcn.30006a47
mov edi, eax
cmp edi, ebx
jge 0x3000c89e
push ebx
call esi
push dword [ebp - 0x30]
call esi
push dword [ebp - 0x34]
call esi
push dword [ebp - 0x38]
jmp 0x3000c672
push 0x30003900
lea ecx, [ebp - 0x38]
call fcn.30005f6e
mov edi, eax
cmp edi, ebx
jl 0x3000c889
push 0x300038d0
lea ecx, [ebp - 0x3c]
call fcn.30005f6e
mov edi, eax
cmp edi, ebx
jge 0x3000c8c9
push dword [ebp - 0x3c]
jmp 0x3000c88a
push dword [ebp - 0x30]
lea ecx, [ebp - 0x3c]
call fcn.30006a47
mov edi, eax
cmp edi, ebx
jl 0x3000c8c4
push 0x300038c8
lea ecx, [ebp - 0x3c]
call fcn.30005f6e
mov edi, eax
cmp edi, ebx
jl 0x3000c8c4
push dword [ebp - 0x38]
lea ecx, [ebp - 0x3c]
call fcn.30006a47
mov edi, eax
cmp edi, ebx
jl 0x3000c8c4
push 0x30003a44
lea ecx, [ebp - 0x3c]
call fcn.30005f6e
mov edi, eax
cmp edi, ebx
jl 0x3000c8c4
push dword [ebp - 0x60]
push ebx
call fcn.30007019
test eax, eax
jl 0x3000c988
push dword [ebp - 0x3c]
push ebx
call fcn.30007019
test eax, eax
jl 0x3000c988
push dword [ebp - 0x90]
push dword [ebp - 0x64]
push dword [ebp - 0x38]
call fcn.3000744f
push dword [ebp - 0x3c]
mov edi, eax
call esi
push dword [ebp - 0x30]
call esi
push dword [ebp - 0x34]
call esi
push dword [ebp - 0x38]
call esi
cmp edi, ebx
jl 0x3000c674
cmp byte [ebp - 0x3e], bl
je 0x3000ca91
push dword [ebp - 0x80]
lea ecx, [ebp - 0x30]
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x30], ebx
call fcn.30006a47
mov edi, eax
cmp edi, ebx
jge 0x3000c9a3
push dword [ebp - 0x30]
call esi
push ebx
jmp 0x3000c66f
push 0x30003848
push 0x300115a8
call fcn.30006d4e
pop ecx
pop ecx
mov edi, 0x80004005
jmp 0x3000c8c4
push dword [ebp - 0x50]
lea ecx, [ebp - 0x30]
call fcn.30006a47
mov edi, eax
cmp edi, ebx
jl 0x3000c97d
cmp byte [ebp - 0x90], bl
jne 0x3000c9d6
push dword [ebp - 0x30]
call fcn.30005ccb
test al, al
je 0x3000c9d6
push dword [ebp - 0x30]
call fcn.3000855d
mov edi, eax
cmp edi, ebx
jl 0x3000c97d
push 0x3000381c
call dword [sym.imp.MSVCR80.dll_wprintf]
pop ecx
push 4
push dword [ebp - 0x44]
push dword [ebp - 0x54]
push dword [ebp - 0x50]
call fcn.30008ec5
mov edi, eax
cmp edi, ebx
jl 0x3000c97d
push dword [ebp - 0x54]
lea ecx, [ebp - 0x38]
call fcn.30006a47
mov edi, eax
cmp edi, ebx
jge 0x3000ca14
push dword [ebp - 0x30]
call esi
push ebx
jmp 0x3000c894
push dword [ebp - 0x44]
lea ecx, [ebp - 0x38]
call fcn.30006a47
mov edi, eax
cmp edi, ebx
jl 0x3000ca09
push dword [ebp - 0x54]
lea ecx, [ebp - 0x3c]
call fcn.30006a47
mov edi, eax
cmp edi, ebx
jge 0x3000ca43
push dword [ebp - 0x30]
call esi
push dword [ebp - 0x3c]
jmp 0x3000c894
push dword [ebp - 0x50]
lea ecx, [ebp - 0x3c]
call fcn.30006a47
mov edi, eax
cmp edi, ebx
jl 0x3000ca36
push dword [ebp - 0x90]
push dword [ebp - 0x64]
push dword [ebp - 0x38]
call fcn.3000744f
mov edi, eax
cmp edi, ebx
jl 0x3000ca36
push 1
push dword [ebp - 0x30]
push dword [ebp - 0x3c]
call fcn.3000744f
push dword [ebp - 0x30]
mov edi, eax
call esi
push dword [ebp - 0x3c]
call esi
push dword [ebp - 0x38]
call esi
cmp edi, ebx
jl 0x3000c674
cmp byte [ebp - 0x3d], bl
mov eax, 0x30003814
jne 0x3000caa0
mov eax, 0x30003804
push dword [ebp - 0x64]
push eax
push 0x300037d4
call dword [sym.imp.MSVCR80.dll_wprintf]
add esp, 0xc
jmp 0x3000c674
cmp edi, 0x80004005
je 0x3000cace
cmp edi, ebx
je 0x3000cace
push edi
mov ecx, 0x300115a8
call fcn.30006dd8
push dword [ebp - 0x68]
call dword [sym.imp.MSO.dll_Ordinal_3061]
cmp eax, 0xff
jbe 0x3000caf2
push 0x300036e0
mov ecx, 0x300115a8
mov edi, 0x80004005
call fcn.30006cfa
cmp byte [ebp - 0x70], bl
mov eax, 0x300036d4
je 0x3000cb01
mov eax, 0x300036c0
push dword [ebp - 0xb4]
push dword [ebp - 0x48]
push eax
push 0x30003690
push 0x300115a8
call fcn.30006d4e
add esp, 0x14
jmp 0x3000c67a
call fcn.30008662
jmp 0x3000c67a
push 0x30003674
call dword [sym.imp.MSVCR80.dll_wprintf]
pop ecx
push dword [ebp - 0xa8]
call esi
push dword [ebp - 0x60]
call esi
push dword [ebp - 0x84]
call esi
push dword [ebp - 0x68]
call esi
push dword [ebp - 0xb4]
call esi
push dword [ebp - 0x7c]
call esi
push dword [ebp - 0x74]
call esi
push dword [ebp - 0x6c]
call esi
push dword [ebp - 0xb0]
call esi
push dword [ebp - 0x5c]
call esi
push dword [ebp - 0x94]
call esi
push dword [ebp - 0x48]
call esi
push dword [ebp - 0x78]
call esi
push dword [ebp - 0x44]
call esi
push dword [ebp - 0x64]
call esi
push dword [ebp - 0x54]
call esi
push dword [ebp - 0x88]
call esi
push dword [ebp - 0x50]
call esi
push dword [ebp - 0x80]
call esi
push dword [ebp - 0x8c]
call esi
push dword [ebp - 0xbc]
call esi
push dword [ebp - 0xb8]
call esi
lea ecx, [ebp - 0xe0]
call fcn.30006ea8
mov ecx, dword [ebp - 4]
xor eax, eax
cmp edi, ebx
pop edi
setl al
pop esi
xor ecx, ebp
pop ebx
call fcn.3000e693
leave
ret 8