Function at 0x10004f50
Capabilities:
Check if file exists
Contain obfuscated stackstrings
Create directory
Delete directory
Delete file
Get file attributes
Move file
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x101a4f1e
mov eax, dword fs:[0]
push eax
sub esp, 0x1dc
mov eax, dword [0x10216040]
xor eax, ebp
mov dword [ebp - 0x14], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x11c], ecx
xor eax, eax
mov dword [ebp - 0xbc], eax
mov dword [ebp - 0xb8], eax
mov dword [ebp - 4], eax
lea edi, [ebp - 0xd6]
mov byte [ebp - 4], 1
xorps xmm0, xmm0
mov dword [ebp - 0x58], eax
lea eax, [ebp - 0xd8]
movq qword [ebp - 0x60], xmm0
mov word [ebp - 0xd8], 0x5453
mov dword [ebp - 0x1ac], 0
mov dword [ebp - 0x1a8], 0
mov dword [ebp - 0x1a4], 0
sub edi, eax
je 0x10005016
cmp edi, 0x7fffffff
ja 0x10006e0f
push edi
lea ecx, [ebp - 0x1ac]
call fcn.10002a90
mov esi, dword [ebp - 0x1ac]
lea eax, [ebp - 0xd8]
push edi
push eax
push esi
call fcn.1017c530
lea eax, [esi + edi]
add esp, 0xc
mov dword [ebp - 0x1a8], eax
mov byte [ebp - 4], 2
lea eax, [ebp - 0x94]
lea edi, [ebp - 0x92]
mov word [ebp - 0x94], 0x4447
mov dword [ebp - 0x1a0], 0
mov dword [ebp - 0x19c], 0
mov dword [ebp - 0x198], 0
sub edi, eax
je 0x10005090
cmp edi, 0x7fffffff
ja 0x10006e14
push edi
lea ecx, [ebp - 0x1a0]
call fcn.10002a90
mov esi, dword [ebp - 0x1a0]
push edi
lea edi, [ebp - 0x94]
push edi
push esi
call fcn.1017c530
sub esi, edi
lea eax, [ebp - 0x92]
add esp, 0xc
add esi, eax
mov dword [ebp - 0x19c], esi
mov byte [ebp - 4], 3
lea eax, [ebp - 0xdc]
lea edi, [ebp - 0xda]
mov word [ebp - 0xdc], 0x5047
mov dword [ebp - 0x194], 0
mov dword [ebp - 0x190], 0
mov dword [ebp - 0x18c], 0
sub edi, eax
je 0x10005103
cmp edi, 0x7fffffff
ja 0x10006e19
push edi
lea ecx, [ebp - 0x194]
call fcn.10002a90
mov esi, dword [ebp - 0x194]
lea eax, [ebp - 0xdc]
push edi
push eax
push esi
call fcn.1017c530
lea eax, [edi + esi]
add esp, 0xc
mov dword [ebp - 0x190], eax
mov byte [ebp - 4], 4
lea eax, [ebp - 0xec]
lea edi, [ebp - 0xe9]
mov word [ebp - 0xec], 0x5055
mov byte [ebp - 0xea], 0x46
mov dword [ebp - 0x188], 0
mov dword [ebp - 0x184], 0
mov dword [ebp - 0x180], 0
sub edi, eax
je 0x1000517d
cmp edi, 0x7fffffff
ja 0x10006e1e
push edi
lea ecx, [ebp - 0x188]
call fcn.10002a90
mov esi, dword [ebp - 0x188]
lea eax, [ebp - 0xec]
push edi
push eax
push esi
call fcn.1017c530
lea eax, [esi + edi]
add esp, 0xc
mov dword [ebp - 0x184], eax
mov byte [ebp - 4], 5
lea eax, [ebp - 0xf0]
lea edi, [ebp - 0xed]
mov word [ebp - 0xf0], 0x5552
mov byte [ebp - 0xee], 0x46
mov dword [ebp - 0x17c], 0
mov dword [ebp - 0x178], 0
mov dword [ebp - 0x174], 0
sub edi, eax
je 0x100051f7
cmp edi, 0x7fffffff
ja 0x10006e23
push edi
lea ecx, [ebp - 0x17c]
call fcn.10002a90
mov esi, dword [ebp - 0x17c]
lea eax, [ebp - 0xf0]
push edi
push eax
push esi
call fcn.1017c530
lea eax, [esi + edi]
add esp, 0xc
mov dword [ebp - 0x178], eax
mov byte [ebp - 4], 6
lea eax, [ebp - 0xf4]
lea edi, [ebp - 0xf1]
mov word [ebp - 0xf4], 0x4453
mov byte [ebp - 0xf2], 0x46
mov dword [ebp - 0x170], 0
mov dword [ebp - 0x16c], 0
mov dword [ebp - 0x168], 0
sub edi, eax
je 0x10005271
cmp edi, 0x7fffffff
ja 0x10006e28
push edi
lea ecx, [ebp - 0x170]
call fcn.10002a90
mov esi, dword [ebp - 0x170]
lea eax, [ebp - 0xf4]
push edi
push eax
push esi
call fcn.1017c530
lea eax, [edi + esi]
add esp, 0xc
mov dword [ebp - 0x16c], eax
mov byte [ebp - 4], 7
lea eax, [ebp - 0xf8]
lea edi, [ebp - 0xf5]
mov word [ebp - 0xf8], 0x4544
mov byte [ebp - 0xf6], 0x4c
mov dword [ebp - 0x164], 0
mov dword [ebp - 0x160], 0
mov dword [ebp - 0x15c], 0
sub edi, eax
je 0x100052eb
cmp edi, 0x7fffffff
ja 0x10006e2d
push edi
lea ecx, [ebp - 0x164]
call fcn.10002a90
mov esi, dword [ebp - 0x164]
lea eax, [ebp - 0xf8]
push edi
push eax
push esi
call fcn.1017c530
lea eax, [edi + esi]
add esp, 0xc
mov dword [ebp - 0x160], eax
mov byte [ebp - 4], 8
lea eax, [ebp - 0xe0]
lea edi, [ebp - 0xde]
mov word [ebp - 0xe0], 0x5845
mov dword [ebp - 0x158], 0
mov dword [ebp - 0x154], 0
mov dword [ebp - 0x150], 0
sub edi, eax
je 0x1000535e
cmp edi, 0x7fffffff
ja 0x10006e32
push edi
lea ecx, [ebp - 0x158]
call fcn.10002a90
mov esi, dword [ebp - 0x158]
lea eax, [ebp - 0xe0]
push edi
push eax
push esi
call fcn.1017c530
lea eax, [esi + edi]
add esp, 0xc
mov dword [ebp - 0x154], eax
mov byte [ebp - 4], 9
lea eax, [ebp - 0xe4]
lea edi, [ebp - 0xe1]
mov word [ebp - 0xe4], 0x4443
mov byte [ebp - 0xe2], 0x49
mov dword [ebp - 0x14c], 0
mov dword [ebp - 0x148], 0
mov dword [ebp - 0x144], 0
sub edi, eax
je 0x100053d8
cmp edi, 0x7fffffff
ja 0x10006e37
push edi
lea ecx, [ebp - 0x14c]
call fcn.10002a90
mov esi, dword [ebp - 0x14c]
lea eax, [ebp - 0xe4]
push edi
push eax
push esi
call fcn.1017c530
lea eax, [esi + edi]
add esp, 0xc
mov dword [ebp - 0x148], eax
mov byte [ebp - 4], 0xa
lea eax, [ebp - 0xe8]
lea edi, [ebp - 0xe5]
mov word [ebp - 0xe8], 0x4444
mov byte [ebp - 0xe6], 0x49
mov dword [ebp - 0x140], 0
mov dword [ebp - 0x13c], 0
mov dword [ebp - 0x138], 0
sub edi, eax
je 0x10005452
cmp edi, 0x7fffffff
ja 0x10006e3c
push edi
lea ecx, [ebp - 0x140]
call fcn.10002a90
mov esi, dword [ebp - 0x140]
lea eax, [ebp - 0xe8]
push edi
push eax
push esi
call fcn.1017c530
lea eax, [edi + esi]
add esp, 0xc
mov dword [ebp - 0x13c], eax
mov byte [ebp - 4], 0xb
lea eax, [ebp - 0x3c]
lea edi, [ebp - 0x39]
mov word [ebp - 0x3c], 0x4652
mov byte [ebp - 0x3a], 0x49
mov dword [ebp - 0x134], 0
mov dword [ebp - 0x130], 0
mov dword [ebp - 0x12c], 0
sub edi, eax
je 0x100054bd
cmp edi, 0x7fffffff
ja 0x10006e41
push edi
lea ecx, [ebp - 0x134]
call fcn.10002a90
mov esi, dword [ebp - 0x134]
lea eax, [ebp - 0x3c]
push edi
push eax
push esi
call fcn.1017c530
lea eax, [esi + edi]
add esp, 0xc
mov dword [ebp - 0x130], eax
mov byte [ebp - 4], 0xc
lea eax, [ebp - 0xb8]
lea edi, [ebp - 0xb5]
mov word [ebp - 0xb8], 0x4452
mov byte [ebp - 0xb6], 0x49
mov dword [ebp - 0x128], 0
mov dword [ebp - 0x124], 0
mov dword [ebp - 0x120], 0
sub edi, eax
je 0x10005537
cmp edi, 0x7fffffff
ja 0x10006e46
push edi
lea ecx, [ebp - 0x128]
call fcn.10002a90
mov esi, dword [ebp - 0x128]
lea eax, [ebp - 0xb8]
push edi
push eax
push esi
call fcn.1017c530
lea eax, [esi + edi]
add esp, 0xc
mov dword [ebp - 0x124], eax
mov byte [ebp - 4], 0xd
lea eax, [ebp - 0x1b0]
push eax
lea edx, [ebp - 0x1ac]
mov dword [ebp - 0x60], 0
lea ecx, [ebp - 0x11c]
mov dword [ebp - 0x114], edx
lea eax, [ebp - 0x114]
mov dword [ebp - 0x1b0], ecx
push eax
sub ecx, edx
mov dword [ebp - 0x5c], 0
mov eax, 0x2aaaaaab
mov dword [ebp - 0x58], 0
imul ecx
lea ecx, [ebp - 0x60]
sar edx, 1
mov eax, edx
shr eax, 0x1f
add eax, edx
push eax
call fcn.1000bbb0
push fcn.10002b90
push 0xc
push 0xc
lea eax, [ebp - 0x1ac]
mov byte [ebp - 4], 0xf
push eax
call fcn.10178a3e
push 0x40
xorps xmm0, xmm0
mov dword [ebp - 0x80], 0
push str.ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789_
lea ecx, [ebp - 0x90]
mov dword [ebp - 0x7c], 0
movups xmmword [ebp - 0x90], xmm0
call fcn.1000d570
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x54]
mov eax, dword [ebp + 8]
mov eax, dword [eax + 4]
add eax, 4
push eax
call fcn.1000d690
mov byte [ebp - 4], 0x11
lea eax, [ebp - 0xd4]
push dword [ebp - 0x60]
push eax
call fcn.10029f40
mov edx, eax
cmp dword [eax + 0x14], 0xf
jbe 0x10005607
mov edx, dword [eax]
push dword [eax + 0x10]
cmp dword [ebp - 0x40], 0xf
lea ecx, [ebp - 0x54]
push edx
cmova ecx, dword [ebp - 0x54]
mov edx, dword [ebp - 0x44]
call fcn.1000c560
mov ecx, dword [ebp - 0xc0]
add esp, 8
mov byte [ebp - 0x93], al
cmp ecx, 0xf
jbe 0x10005667
mov edx, dword [ebp - 0xd4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10005657
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10006e4b
push ecx
push edx
call fcn.10178716
mov al, byte [ebp - 0x93]
add esp, 8
test al, al
je 0x10005670
call fcn.10006ed0
mov eax, dword [ebp - 0x60]
add eax, 0xc
push eax
lea eax, [ebp - 0xd4]
push eax
call fcn.10029f40
mov edx, eax
cmp dword [eax + 0x14], 0xf
jbe 0x1000568d
mov edx, dword [eax]
push dword [eax + 0x10]
cmp dword [ebp - 0x40], 0xf
lea ecx, [ebp - 0x54]
push edx
cmova ecx, dword [ebp - 0x54]
mov edx, dword [ebp - 0x44]
call fcn.1000c560
mov ecx, dword [ebp - 0xc0]
add esp, 8
mov byte [ebp - 0x93], al
cmp ecx, 0xf
jbe 0x100056ed
mov edx, dword [ebp - 0xd4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100056dd
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10006e50
push ecx
push edx
call fcn.10178716
mov al, byte [ebp - 0x93]
add esp, 8
test al, al
je 0x100056f6
call fcn.10006ed0
mov eax, dword [ebp - 0x60]
add eax, 0x18
push eax
lea eax, [ebp - 0xd4]
push eax
call fcn.10029f40
mov edx, eax
cmp dword [eax + 0x14], 0xf
jbe 0x10005713
mov edx, dword [eax]
push dword [eax + 0x10]
cmp dword [ebp - 0x40], 0xf
lea ecx, [ebp - 0x54]
push edx
cmova ecx, dword [ebp - 0x54]
mov edx, dword [ebp - 0x44]
call fcn.1000c560
mov ecx, dword [ebp - 0xc0]
add esp, 8
mov byte [ebp - 0x93], al
cmp ecx, 0xf
jbe 0x10005773
mov edx, dword [ebp - 0xd4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10005763
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10006e55
push ecx
push edx
call fcn.10178716
mov al, byte [ebp - 0x93]
add esp, 8
test al, al
je 0x10005788
mov eax, dword [ebp + 8]
mov eax, dword [eax + 4]
add eax, 0xac
push eax
call fcn.10007590
mov eax, dword [ebp - 0x60]
add eax, 0x24
push eax
lea eax, [ebp - 0xd4]
push eax
call fcn.10029f40
mov edx, eax
cmp dword [eax + 0x14], 0xf
jbe 0x100057a5
mov edx, dword [eax]
push dword [eax + 0x10]
cmp dword [ebp - 0x40], 0xf
lea ecx, [ebp - 0x54]
push edx
cmova ecx, dword [ebp - 0x54]
mov edx, dword [ebp - 0x44]
call fcn.1000c560
mov ecx, dword [ebp - 0xc0]
add esp, 8
mov byte [ebp - 0x93], al
cmp ecx, 0xf
jbe 0x10005805
mov edx, dword [ebp - 0xd4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100057f5
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10006e5a
push ecx
push edx
call fcn.10178716
mov al, byte [ebp - 0x93]
add esp, 8
test al, al
je 0x10005c68
mov byte [ebp - 4], 0x12
lea ecx, [ebp - 0x78]
mov eax, dword [ebp + 8]
mov eax, dword [eax + 4]
add eax, 0x1c
push eax
call fcn.1000d690
mov byte [ebp - 4], 0x13
lea eax, [ebp - 0x78]
cmp dword [ebp - 0x64], 0xf
cmova eax, dword [ebp - 0x78]
push eax
call dword [sym.imp.KERNEL32.dll_GetFileAttributesA]
cmp eax, 0xffffffff
je 0x1000598a
test al, 0x10
jne 0x1000598a
lea edx, [ebp - 0x78]
lea ecx, [ebp - 0x110]
call fcn.100117a0
mov ecx, eax
call fcn.10003c40
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
lea ecx, [ebp - 0x110]
mov esi, eax
call fcn.10003c50
test esi, esi
jne 0x10005963
lea ecx, [ebp - 0xb4]
mov dword [ebp - 0x30], esi
push ecx
lea eax, [ebp - 0x96]
mov dword [ebp - 0xb4], 0x6f727245
push eax
xorps xmm0, xmm0
mov dword [ebp - 0xb0], 0x70552072
push ecx
lea ecx, [ebp - 0x38]
movq qword [ebp - 0x38], xmm0
mov dword [ebp - 0xac], 0x64616f6c
mov dword [ebp - 0xa8], 0x20676e6f
mov dword [ebp - 0xa4], 0x656c6966
mov dword [ebp - 0xa0], 0x43202c20
mov dword [ebp - 0x9c], 0x2065646f
mov word [ebp - 0x98], 0x203a
call fcn.10003600
mov byte [ebp - 4], 0x14
mov edi, dword [sym.imp.KERNEL32.dll_GetLastError]
call edi
mov edx, eax
lea ecx, [ebp - 0x2c]
call fcn.10002f20
mov esi, eax
lea eax, [ebp - 0x38]
mov byte [ebp - 4], 0x15
push eax
lea eax, [ebp - 0xd4]
push eax
call fcn.10029f40
push esi
mov edx, eax
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x110]
call fcn.1000b890
add esp, 4
push eax
mov byte [ebp - 4], 0x17
call fcn.10009410
lea ecx, [ebp - 0x110]
call fcn.10002ed0
lea ecx, [ebp - 0xd4]
call fcn.10002ed0
lea ecx, [ebp - 0x2c]
call fcn.10002ed0
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0x13
call fcn.10002b90
jmp 0x10005969
mov edi, dword [sym.imp.KERNEL32.dll_GetLastError]
lea ecx, [ebp - 0x118]
mov dword [ebp - 0x118], 0x1f4
mov dword [ebp - 0x114], 0
call fcn.10003670
jmp 0x10005990
mov edi, dword [sym.imp.KERNEL32.dll_GetLastError]
mov eax, dword [ebp + 8]
lea ecx, [ebp - 0x78]
mov edx, dword [eax + 4]
add edx, 0xdc
call fcn.10013520
mov dword [ebp - 0x30], 0
xorps xmm0, xmm0
movq qword [ebp - 0x38], xmm0
test al, al
jne 0x10005a84
lea ecx, [ebp - 0xb4]
mov dword [ebp - 0xb4], 0x6f727245
push ecx
lea eax, [ebp - 0x96]
mov dword [ebp - 0xb0], 0x70552072
push eax
push ecx
lea ecx, [ebp - 0x38]
mov dword [ebp - 0xac], 0x64616f6c
mov dword [ebp - 0xa8], 0x20676e6f
mov dword [ebp - 0xa4], 0x656c6966
mov dword [ebp - 0xa0], 0x43202c20
mov dword [ebp - 0x9c], 0x2065646f
mov word [ebp - 0x98], 0x203a
call fcn.10003600
mov byte [ebp - 4], 0x18
call edi
mov edx, eax
lea ecx, [ebp - 0x2c]
call fcn.10002f20
mov esi, eax
lea eax, [ebp - 0x38]
mov byte [ebp - 4], 0x19
push eax
lea eax, [ebp - 0xd4]
push eax
call fcn.10029f40
push esi
mov edx, eax
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x110]
call fcn.1000b890
add esp, 4
push eax
mov byte [ebp - 4], 0x1b
call fcn.10009410
lea ecx, [ebp - 0x110]
call fcn.10002ed0
lea ecx, [ebp - 0xd4]
call fcn.10002ed0
lea ecx, [ebp - 0x2c]
jmp 0x10005b1a
lea ecx, [ebp - 0x28]
mov dword [ebp - 0x28], 0x63637553
push ecx
lea eax, [ebp - 0x16]
mov dword [ebp - 0x24], 0x46737365
push eax
push ecx
lea ecx, [ebp - 0x38]
mov dword [ebp - 0x20], 0x55206c75
mov dword [ebp - 0x1c], 0x616f6c70
mov word [ebp - 0x18], 0x2064
call fcn.10003600
lea edx, [ebp - 0x78]
mov byte [ebp - 4], 0x1c
lea ecx, [ebp - 0xb0]
call fcn.10013150
mov esi, eax
lea eax, [ebp - 0x38]
mov byte [ebp - 4], 0x1d
push eax
lea eax, [ebp - 0xd4]
push eax
call fcn.10029f40
push esi
mov edx, eax
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x110]
call fcn.1000b890
add esp, 4
push eax
mov byte [ebp - 4], 0x1f
call fcn.10009410
lea ecx, [ebp - 0x110]
call fcn.10002ed0
lea ecx, [ebp - 0xd4]
call fcn.10002ed0
lea ecx, [ebp - 0xb0]
call fcn.10002ed0
lea ecx, [ebp - 0x38]
call fcn.10002b90
mov byte [ebp - 4], 0x12
mov ecx, dword [ebp - 0x64]
cmp ecx, 0xf
jbe 0x10005b5f
mov edx, dword [ebp - 0x78]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10005b55
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10006e5f
push ecx
push edx
call fcn.10178716
add esp, 8
mov dword [ebp - 4], 0x11
jmp 0x10005c6e
lea ecx, [ebp - 0x60]
call fcn.1000a950
mov esi, dword [ebp + 0xc]
test esi, esi
je 0x10005c44
or edi, 0xffffffff
mov eax, edi
lock xadd dword [esi + 4], eax
jne 0x10005c44
mov eax, dword [esi]
mov ecx, esi
call dword [eax]
lock xadd dword [esi + 8], edi
dec edi
jne 0x10005c44
mov eax, dword [esi]
mov ecx, esi
call dword [eax + 4]
mov eax, dword [ebp - 0x11c]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.101786e5
mov esp, ebp
pop ebp
ret 8
mov edi, dword [sym.imp.KERNEL32.dll_GetLastError]
mov eax, dword [ebp - 0x60]
add eax, 0x30
push eax
lea eax, [ebp - 0xd4]
push eax
call fcn.10029f40
mov edx, eax
cmp dword [eax + 0x14], 0xf
jbe 0x10005c8b
mov edx, dword [eax]
push dword [eax + 0x10]
cmp dword [ebp - 0x40], 0xf
lea ecx, [ebp - 0x54]
push edx
cmova ecx, dword [ebp - 0x54]
mov edx, dword [ebp - 0x44]
call fcn.1000c560
mov ecx, dword [ebp - 0xc0]
add esp, 8
mov byte [ebp - 0x93], al
cmp ecx, 0xf
jbe 0x10005ceb
mov edx, dword [ebp - 0xd4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10005cdb
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10006e64
push ecx
push edx
call fcn.10178716
mov al, byte [ebp - 0x93]
add esp, 8
test al, al
je 0x10005cfe
mov eax, dword [ebp + 8]
mov eax, dword [eax + 4]
add eax, 0x64
push eax
call fcn.10008fb0
mov eax, dword [ebp - 0x60]
add eax, 0x3c
push eax
lea eax, [ebp - 0xd4]
push eax
call fcn.10029f40
mov edx, eax
cmp dword [eax + 0x14], 0xf
jbe 0x10005d1b
mov edx, dword [eax]
push dword [eax + 0x10]
cmp dword [ebp - 0x40], 0xf
lea ecx, [ebp - 0x54]
push edx
cmova ecx, dword [ebp - 0x54]
mov edx, dword [ebp - 0x44]
call fcn.1000c560
mov ecx, dword [ebp - 0xc0]
add esp, 8
mov byte [ebp - 0x93], al
cmp ecx, 0xf
jbe 0x10005d7b
mov edx, dword [ebp - 0xd4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10005d6b
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10006e69
push ecx
push edx
call fcn.10178716
mov al, byte [ebp - 0x93]
add esp, 8
test al, al
je 0x10005d92
mov eax, dword [ebp + 8]
mov ecx, dword [eax + 4]
lea eax, [ecx + 0x64]
push eax
lea eax, [ecx + 0x34]
push eax
call fcn.100085e0
mov eax, dword [ebp - 0x60]
add eax, 0x48
push eax
lea eax, [ebp - 0xd4]
push eax
call fcn.10029f40
mov edx, eax
cmp dword [eax + 0x14], 0xf
jbe 0x10005daf
mov edx, dword [eax]
push dword [eax + 0x10]
cmp dword [ebp - 0x40], 0xf
lea ecx, [ebp - 0x54]
push edx
cmova ecx, dword [ebp - 0x54]
mov edx, dword [ebp - 0x44]
call fcn.1000c560
mov ecx, dword [ebp - 0xc0]
add esp, 8
mov byte [ebp - 0x93], al
cmp ecx, 0xf
jbe 0x10005e0f
mov edx, dword [ebp - 0xd4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10005dff
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10006e6e
push ecx
push edx
call fcn.10178716
mov al, byte [ebp - 0x93]
add esp, 8
test al, al
je 0x10006027
mov edx, dword [ebp + 8]
lea ecx, [ebp - 0xd4]
mov edx, dword [edx + 4]
add edx, 0x34
call fcn.100117a0
cmp dword [eax + 0x14], 7
jbe 0x10005e33
mov eax, dword [eax]
push eax
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
mov ecx, dword [ebp - 0xc0]
mov esi, eax
cmp ecx, 7
jbe 0x10005e7c
mov edx, dword [ebp - 0xd4]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x10005e72
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10006e73
push ecx
push edx
call fcn.10178716
add esp, 8
test esi, esi
jne 0x10006027
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x30], esi
push ecx
lea eax, [ebp - 0x16]
mov dword [ebp - 0x2c], 0x656c6544
push eax
xorps xmm0, xmm0
mov dword [ebp - 0x28], 0x69466574
push ecx
lea ecx, [ebp - 0x38]
movq qword [ebp - 0x38], xmm0
mov dword [ebp - 0x24], 0x4520656c
mov dword [ebp - 0x20], 0x726f7272
mov dword [ebp - 0x1c], 0x646f4320
mov word [ebp - 0x18], 0x2065
call fcn.10003600
mov byte [ebp - 4], 0x25
call edi
mov edx, eax
lea ecx, [ebp - 0x110]
call fcn.10002f20
mov esi, eax
lea eax, [ebp - 0x38]
mov byte [ebp - 4], 0x26
push eax
lea eax, [ebp - 0xd4]
push eax
call fcn.10029f40
push esi
mov edx, eax
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x78]
call fcn.1000b890
add esp, 4
push eax
mov byte [ebp - 4], 0x28
call fcn.10009410
mov byte [ebp - 4], 0x27
mov ecx, dword [ebp - 0x64]
cmp ecx, 0xf
jbe 0x10005f46
mov edx, dword [ebp - 0x78]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10005f3c
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10006e78
push ecx
push edx
call fcn.10178716
add esp, 8
mov byte [ebp - 4], 0x26
mov ecx, dword [ebp - 0xc0]
mov dword [ebp - 0x68], 0
mov dword [ebp - 0x64], 0xf
mov byte [ebp - 0x78], 0
cmp ecx, 0xf
jbe 0x10005f96
mov edx, dword [ebp - 0xd4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10005f8c
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10006e78
push ecx
push edx
call fcn.10178716
add esp, 8
mov byte [ebp - 4], 0x25
mov ecx, dword [ebp - 0xfc]
mov dword [ebp - 0xc4], 0
mov dword [ebp - 0xc0], 0xf
mov byte [ebp - 0xd4], 0
cmp ecx, 0xf
jbe 0x10005fef
mov edx, dword [ebp - 0x110]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10005fe5
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10006e78
push ecx
push edx
call fcn.10178716
add esp, 8
mov byte [ebp - 4], 0x11
mov ecx, dword [ebp - 0x38]
test ecx, ecx
je 0x10006027
mov edx, dword [ebp - 0x30]
mov eax, ecx
sub edx, ecx
cmp edx, 0x1000
jb 0x1000601d
mov ecx, dword [eax - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10006e7d
push edx
push ecx
call fcn.10178716
add esp, 8
mov eax, dword [ebp - 0x60]
add eax, 0x54
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.10029f40
mov edx, eax
cmp dword [eax + 0x14], 0xf
jbe 0x10006044
mov edx, dword [eax]
push dword [eax + 0x10]
cmp dword [ebp - 0x40], 0xf
lea ecx, [ebp - 0x54]
push edx
cmova ecx, dword [ebp - 0x54]
mov edx, dword [ebp - 0x44]
call fcn.1000c560
mov ecx, dword [ebp - 0xfc]
add esp, 8
mov byte [ebp - 0x93], al
cmp ecx, 0xf
jbe 0x100060a4
mov edx, dword [ebp - 0x110]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10006094
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10006e82
push ecx
push edx
call fcn.10178716
mov al, byte [ebp - 0x93]
add esp, 8
test al, al
je 0x100063bd
mov eax, dword [ebp + 8]
mov eax, dword [eax + 4]
lea ecx, [eax + 0x34]
call fcn.10011020
test al, al
jne 0x100063bd
xor edi, edi
mov dword [ebp - 0x30], 0
xor eax, eax
mov dword [ebp - 0xb4], 0x63657845
xorps xmm0, xmm0
mov dword [ebp - 0xb0], 0x20657475
lea ecx, [ebp - 0xb4]
movq qword [ebp - 0x38], xmm0
lea esi, [ebp - 0x99]
mov dword [ebp - 0xac], 0x656c6966
mov dword [ebp - 0xa8], 0x72726520
mov dword [ebp - 0xa4], 0x4320726f
mov dword [ebp - 0xa0], 0x2065646f
mov word [ebp - 0x9c], 0x203a
mov byte [ebp - 0x9a], 0x20
mov dword [ebp - 0xe8], edi
mov dword [ebp - 0x38], edi
mov dword [ebp - 0x34], edi
mov dword [ebp - 0xe4], eax
mov dword [ebp - 0x30], eax
sub esi, ecx
je 0x10006184
cmp esi, 0x7fffffff
ja 0x10006e87
push esi
lea ecx, [ebp - 0x38]
call fcn.10002a90
mov edi, dword [ebp - 0x38]
lea eax, [ebp - 0xb4]
push esi
push eax
push edi
mov dword [ebp - 0xe8], edi
call fcn.1017c530
lea eax, [edi + esi]
add esp, 0xc
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0xe4], eax
mov byte [ebp - 4], 0x29
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, eax
lea esi, [ebp - 0x17]
mov dword [ebp - 0xbc], ecx
nop dword [eax]
mov eax, 0xcccccccd
dec esi
mul ecx
shr edx, 3
mov al, dl
mov cl, dl
shl al, 2
add cl, al
mov eax, dword [ebp - 0xbc]
add cl, cl
sub al, cl
mov ecx, edx
add al, 0x30
mov byte [esi], al
mov eax, edx
mov dword [ebp - 0xbc], eax
test eax, eax
jne 0x100061a0
push ecx
lea eax, [ebp - 0x17]
push eax
push esi
lea ecx, [ebp - 0x78]
call fcn.10002dc0
mov byte [ebp - 4], 0x2b
lea esi, [ebp - 0x1c8]
xorps xmm0, xmm0
mov dword [ebp - 0x1b8], 0
mov eax, 7
mov dword [ebp - 0x1b4], 0xf
movups xmmword [ebp - 0x1c8], xmm0
mov byte [ebp - 0x1c8], 0
mov dword [ebp - 0xbc], eax
mov dword [ebp - 0xb8], eax
nop
cmp edi, dword [ebp - 0x34]
je 0x1000626c
mov al, byte [edi]
mov ecx, dword [esi + 0x10]
mov edx, dword [esi + 0x14]
mov byte [ebp - 0x3c], al
cmp ecx, edx
jae 0x10006251
lea eax, [ecx + 1]
mov dword [esi + 0x10], eax
mov eax, esi
cmp edx, 0xf
jbe 0x10006243
mov eax, dword [esi]
add eax, ecx
mov cl, byte [ebp - 0x3c]
inc edi
mov byte [eax + 1], 0
mov byte [eax], cl
jmp 0x10006220
push dword [ebp - 0x3c]
mov byte [ebp - 0x114], 0
push dword [ebp - 0x114]
push ecx
mov ecx, esi
call fcn.100151e0
inc edi
jmp 0x10006220
lea eax, [ebp - 0x78]
push eax
lea eax, [ebp - 0x1c8]
push eax
push dword [ebp - 0x11c]
lea ecx, [ebp - 0xd4]
call fcn.1000bf30
mov esi, dword [ebp - 0xbc]
or esi, 8
mov dword [ebp - 0xb8], esi
lea eax, [ebp - 0xd4]
mov byte [ebp - 4], 0x2c
push eax
call fcn.10009410
mov byte [ebp - 4], 0x2b
mov ecx, dword [ebp - 0xc0]
cmp ecx, 0xf
jbe 0x100062e5
mov edx, dword [ebp - 0xd4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100062db
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10006e8c
push ecx
push edx
call fcn.10178716
add esp, 8
and esi, 0xfffffffb
mov byte [ebp - 4], 0x2a
mov ecx, dword [ebp - 0x1b4]
mov dword [ebp - 0xbc], esi
cmp ecx, 0xf
jbe 0x1000632c
mov edx, dword [ebp - 0x1c8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10006322
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10006e8c
push ecx
push edx
call fcn.10178716
add esp, 8
mov byte [ebp - 4], 0x29
mov ecx, dword [ebp - 0x64]
mov dword [ebp - 0x1b8], 0
mov dword [ebp - 0x1b4], 0xf
mov byte [ebp - 0x1c8], 0
cmp ecx, 0xf
jbe 0x1000637f
mov edx, dword [ebp - 0x78]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10006375
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10006e8c
push ecx
push edx
call fcn.10178716
add esp, 8
mov byte [ebp - 4], 0x11
mov ecx, dword [ebp - 0xe8]
test ecx, ecx
je 0x100063bd
mov edx, dword [ebp - 0xe4]
mov eax, ecx
sub edx, ecx
cmp edx, 0x1000
jb 0x100063b3
mov ecx, dword [eax - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10006ec3
push edx
push ecx
call fcn.10178716
add esp, 8
mov eax, dword [ebp - 0x60]
add eax, 0x60
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.10029f40
mov edx, eax
cmp dword [eax + 0x14], 0xf
jbe 0x100063da
mov edx, dword [eax]
push dword [eax + 0x10]
cmp dword [ebp - 0x40], 0xf
lea ecx, [ebp - 0x54]
push edx
cmova ecx, dword [ebp - 0x54]
mov edx, dword [ebp - 0x44]
call fcn.1000c560
mov ecx, dword [ebp - 0xfc]
add esp, 8
mov byte [ebp - 0x93], al
cmp ecx, 0xf
jbe 0x1000643a
mov edx, dword [ebp - 0x110]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x1000642a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10006e91
push ecx
push edx
call fcn.10178716
mov al, byte [ebp - 0x93]
add esp, 8
test al, al
je 0x10006759
mov edx, dword [ebp + 8]
lea ecx, [ebp - 0x110]
mov edx, dword [edx + 4]
add edx, 0x7c
call fcn.100117a0
cmp dword [eax + 0x14], 7
jbe 0x1000645e
mov eax, dword [eax]
push 0
push eax
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
mov ecx, dword [ebp - 0xfc]
mov esi, eax
cmp ecx, 7
jbe 0x100064a9
mov edx, dword [ebp - 0x110]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x1000649f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10006e96
push ecx
push edx
call fcn.10178716
add esp, 8
test esi, esi
jne 0x10006759
mov dword [ebp - 0x30], esi
lea eax, [ebp - 0xb4]
xor edi, edi
mov dword [ebp - 0xb4], 0x61657243
xorps xmm0, xmm0
mov dword [ebp - 0xb0], 0x46206574
lea esi, [ebp - 0x96]
movq qword [ebp - 0x38], xmm0
mov dword [ebp - 0xac], 0x65646c6f
mov dword [ebp - 0xa8], 0x72452072
mov dword [ebp - 0xa4], 0x20726f72
mov dword [ebp - 0xa0], 0x6f727245
mov dword [ebp - 0x9c], 0x3a202072
mov word [ebp - 0x98], 0x2020
mov dword [ebp - 0x38], edi
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x30], edi
sub esi, eax
je 0x10006555
cmp esi, 0x7fffffff
ja 0x10006e9b
push esi
lea ecx, [ebp - 0x38]
call fcn.10002a90
mov edi, dword [ebp - 0x38]
lea eax, [ebp - 0xb4]
push esi
push eax
push edi
call fcn.1017c530
lea eax, [esi + edi]
add esp, 0xc
mov dword [ebp - 0x34], eax
mov byte [ebp - 4], 0x2d
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov ecx, eax
lea esi, [ebp - 0x17]
mov dword [ebp - 0xb8], ecx
nop word [eax + eax]
mov eax, 0xcccccccd
dec esi
mul ecx
shr edx, 3
mov al, dl
mov cl, dl
shl al, 2
add cl, al
mov eax, dword [ebp - 0xb8]
add cl, cl
sub al, cl
mov ecx, edx
add al, 0x30
mov byte [esi], al
mov eax, edx
mov dword [ebp - 0xb8], eax
test eax, eax
jne 0x10006570
push ecx
lea eax, [ebp - 0x17]
push eax
push esi
lea ecx, [ebp - 0x78]
call fcn.10002dc0
mov eax, dword [ebp - 0xbc]
or eax, 0x30
mov byte [ebp - 4], 0x2f
lea esi, [ebp - 0x1e0]
xorps xmm0, xmm0
mov dword [ebp - 0x1d0], 0
or eax, 0x40
mov dword [ebp - 0x1cc], 0xf
movups xmmword [ebp - 0x1e0], xmm0
mov byte [ebp - 0x1e0], 0
mov dword [ebp - 0xbc], eax
mov dword [ebp - 0xb8], eax
cmp edi, dword [ebp - 0x34]
je 0x10006641
mov al, byte [edi]
mov ecx, dword [esi + 0x10]
mov edx, dword [esi + 0x14]
mov byte [ebp - 0x3c], al
cmp ecx, edx
jae 0x10006626
lea eax, [ecx + 1]
mov dword [esi + 0x10], eax
mov eax, esi
cmp edx, 0xf
jbe 0x10006618
mov eax, dword [esi]
add eax, ecx
mov cl, byte [ebp - 0x3c]
inc edi
mov byte [eax + 1], 0
mov byte [eax], cl
jmp 0x100065f5
push dword [ebp - 0x3c]
mov byte [ebp - 0x114], 0
push dword [ebp - 0x114]
push ecx
mov ecx, esi
call fcn.100151e0
inc edi
jmp 0x100065f5
lea eax, [ebp - 0x78]
push eax
lea eax, [ebp - 0x1e0]
push eax
push dword [ebp - 0x11c]
lea ecx, [ebp - 0xd4]
call fcn.1000bf30
mov eax, dword [ebp - 0xbc]
or eax, 0x80
mov dword [ebp - 0xb8], eax
lea eax, [ebp - 0xd4]
mov byte [ebp - 4], 0x30
push eax
call fcn.10009410
mov byte [ebp - 4], 0x2f
mov ecx, dword [ebp - 0xc0]
cmp ecx, 0xf
jbe 0x100066bc
mov edx, dword [ebp - 0xd4]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100066b2
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10006ea0
push ecx
push edx
call fcn.10178716
add esp, 8
mov byte [ebp - 4], 0x2e
mov ecx, dword [ebp - 0x1cc]
cmp ecx, 0xf
jbe 0x100066fa
mov edx, dword [ebp - 0x1e0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100066f0
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10006ea0
push ecx
push edx
call fcn.10178716
add esp, 8
mov byte [ebp - 4], 0x2d
mov ecx, dword [ebp - 0x64]
mov dword [ebp - 0x1d0], 0
mov dword [ebp - 0x1cc], 0xf
mov byte [ebp - 0x1e0], 0
cmp ecx, 0xf
jbe 0x1000674d
mov edx, dword [ebp - 0x78]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10006743
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10006ea0
push ecx
push edx
call fcn.10178716
add esp, 8
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0x11
call fcn.10002b90
mov eax, dword [ebp - 0x60]
add eax, 0x6c
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.10029f40
mov edx, eax
cmp dword [eax + 0x14], 0xf
jbe 0x10006776
mov edx, dword [eax]
push dword [eax + 0x10]
cmp dword [ebp - 0x40], 0xf
lea ecx, [ebp - 0x54]
push edx
cmova ecx, dword [ebp - 0x54]
mov edx, dword [ebp - 0x44]
call fcn.1000c560
mov ecx, dword [ebp - 0xfc]
add esp, 8
mov byte [ebp - 0x93], al
cmp ecx, 0xf
jbe 0x100067d6
mov edx, dword [ebp - 0x110]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x100067c6
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10006ea5
push ecx
push edx
call fcn.10178716
mov al, byte [ebp - 0x93]
add esp, 8
test al, al
je 0x10006909
mov eax, dword [ebp + 8]
lea ecx, [ebp - 0x110]
mov edx, dword [eax + 4]
add edx, 0x7c
call fcn.100117a0
cmp dword [eax + 0x14], 7
jbe 0x100067fa
mov eax, dword [eax]
push eax
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
mov ecx, dword [ebp - 0xfc]
mov esi, eax
cmp ecx, 7
jbe 0x10006843
mov edx, dword [ebp - 0x110]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x10006839
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10006eaa
push ecx
push edx
call fcn.10178716
add esp, 8
test esi, esi
jne 0x10006909
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x30], esi
push ecx
lea eax, [ebp - 0x16]
mov dword [ebp - 0x2c], 0x656c6544
push eax
xorps xmm0, xmm0
mov dword [ebp - 0x28], 0x46206574
push ecx
lea ecx, [ebp - 0x38]
movq qword [ebp - 0x38], xmm0
mov dword [ebp - 0x24], 0x65646c6f
mov dword [ebp - 0x20], 0x72452072
mov dword [ebp - 0x1c], 0x20726f72
mov word [ebp - 0x18], 0x203a
call fcn.10003600
mov byte [ebp - 4], 0x31
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea ecx, [ebp - 0xd4]
call fcn.10002f20
mov esi, eax
lea eax, [ebp - 0x38]
mov byte [ebp - 4], 0x32
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.10029f40
push esi
mov edx, eax
mov byte [ebp - 4], 0x33
lea ecx, [ebp - 0xb0]
call fcn.1000b890
add esp, 4
push eax
mov byte [ebp - 4], 0x34
call fcn.10009410
lea ecx, [ebp - 0xb0]
call fcn.10002ed0
lea ecx, [ebp - 0x110]
call fcn.10002ed0
lea ecx, [ebp - 0xd4]
call fcn.10002ed0
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0x11
call fcn.10002b90
mov eax, dword [ebp - 0x60]
add eax, 0x78
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.10029f40
mov edx, eax
cmp dword [eax + 0x14], 0xf
jbe 0x10006926
mov edx, dword [eax]
push dword [eax + 0x10]
cmp dword [ebp - 0x40], 0xf
lea ecx, [ebp - 0x54]
push edx
cmova ecx, dword [ebp - 0x54]
mov edx, dword [ebp - 0x44]
call fcn.1000c560
mov ecx, dword [ebp - 0xfc]
add esp, 8
mov byte [ebp - 0x93], al
cmp ecx, 0xf
jbe 0x10006986
mov edx, dword [ebp - 0x110]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10006976
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10006eaf
push ecx
push edx
call fcn.10178716
mov al, byte [ebp - 0x93]
add esp, 8
test al, al
je 0x10006b48
mov eax, dword [ebp + 8]
lea ecx, [ebp - 0x110]
mov edx, dword [eax + 4]
add edx, 0x94
call fcn.100117a0
mov esi, eax
mov byte [ebp - 4], 0x35
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 4]
lea ecx, [ebp - 0xd4]
add edx, 0x34
call fcn.100117a0
cmp dword [esi + 0x14], 7
jbe 0x100069c7
mov esi, dword [esi]
cmp dword [eax + 0x14], 7
jbe 0x100069cf
mov eax, dword [eax]
mov edi, dword [sym.imp.KERNEL32.dll_MoveFileW]
push esi
push eax
call edi
mov ecx, dword [ebp - 0xc0]
mov esi, eax
cmp ecx, 7
jbe 0x10006a1b
mov edx, dword [ebp - 0xd4]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x10006a11
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10006eb4
push ecx
push edx
call fcn.10178716
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x11
mov ecx, dword [ebp - 0xfc]
mov dword [ebp - 0xc4], 0
mov dword [ebp - 0xc0], 7
mov word [ebp - 0xd4], ax
cmp ecx, 7
jbe 0x10006a7c
mov edx, dword [ebp - 0x110]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x10006a72
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10006eb4
push ecx
push edx
call fcn.10178716
add esp, 8
test esi, esi
jne 0x10006b4e
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x30], esi
push ecx
lea eax, [ebp - 0x15]
mov dword [ebp - 0x2c], 0x616e6552
push eax
xorps xmm0, xmm0
mov dword [ebp - 0x28], 0x4f20656d
push ecx
lea ecx, [ebp - 0x38]
movq qword [ebp - 0x38], xmm0
mov dword [ebp - 0x24], 0x63656a62
mov dword [ebp - 0x20], 0x45202074
mov dword [ebp - 0x1c], 0x726f7272
mov word [ebp - 0x18], 0x3a20
mov byte [ebp - 0x16], 0x20
call fcn.10003600
mov byte [ebp - 4], 0x36
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea ecx, [ebp - 0xd4]
call fcn.10002f20
mov esi, eax
lea eax, [ebp - 0x38]
mov byte [ebp - 4], 0x37
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.10029f40
push esi
mov edx, eax
mov byte [ebp - 4], 0x38
lea ecx, [ebp - 0xb0]
call fcn.1000b890
add esp, 4
push eax
mov byte [ebp - 4], 0x39
call fcn.10009410
lea ecx, [ebp - 0xb0]
call fcn.10002ed0
lea ecx, [ebp - 0x110]
call fcn.10002ed0
lea ecx, [ebp - 0xd4]
call fcn.10002ed0
lea ecx, [ebp - 0x38]
mov byte [ebp - 4], 0x11
call fcn.10002b90
jmp 0x10006b4e
mov edi, dword [sym.imp.KERNEL32.dll_MoveFileW]
mov eax, dword [ebp - 0x60]
add eax, 0x84
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.10029f40
mov edx, eax
cmp dword [eax + 0x14], 0xf
jbe 0x10006b6d
mov edx, dword [eax]
push dword [eax + 0x10]
cmp dword [ebp - 0x40], 0xf
lea ecx, [ebp - 0x54]
push edx
cmova ecx, dword [ebp - 0x54]
mov edx, dword [ebp - 0x44]
call fcn.1000c560
mov ecx, dword [ebp - 0xfc]
add esp, 8
mov byte [ebp - 0x93], al
cmp ecx, 0xf
jbe 0x10006bcd
mov edx, dword [ebp - 0x110]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10006bbd
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10006eb9
push ecx
push edx
call fcn.10178716
mov al, byte [ebp - 0x93]
add esp, 8
test al, al
je 0x10006d83
mov eax, dword [ebp + 8]
lea ecx, [ebp - 0x110]
mov edx, dword [eax + 4]
add edx, 0x94
call fcn.100117a0
mov esi, eax
mov byte [ebp - 4], 0x3a
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 4]
lea ecx, [ebp - 0xd4]
add edx, 0x34
call fcn.100117a0
cmp dword [esi + 0x14], 7
jbe 0x10006c0e
mov esi, dword [esi]
cmp dword [eax + 0x14], 7
jbe 0x10006c16
mov eax, dword [eax]
push esi
push eax
call edi
mov ecx, dword [ebp - 0xc0]
mov esi, eax
cmp ecx, 7
jbe 0x10006c5c
mov edx, dword [ebp - 0xd4]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x10006c52
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10006ebe
push ecx
push edx
call fcn.10178716
add esp, 8
xor eax, eax
mov byte [ebp - 4], 0x11
mov ecx, dword [ebp - 0xfc]
mov dword [ebp - 0xc4], 0
mov dword [ebp - 0xc0], 7
mov word [ebp - 0xd4], ax
cmp ecx, 7
jbe 0x10006cbd
mov edx, dword [ebp - 0x110]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x10006cb3
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10006ebe
push ecx
push edx
call fcn.10178716
add esp, 8
test esi, esi
jne 0x10006d83
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x30], esi
push ecx
lea eax, [ebp - 0x15]
mov dword [ebp - 0x2c], 0x616e6552
push eax
xorps xmm0, xmm0
mov dword [ebp - 0x28], 0x4f20656d
push ecx
lea ecx, [ebp - 0x38]
movq qword [ebp - 0x38], xmm0
mov dword [ebp - 0x24], 0x63656a62
mov dword [ebp - 0x20], 0x45202074
mov dword [ebp - 0x1c], 0x726f7272
mov word [ebp - 0x18], 0x3a20
mov byte [ebp - 0x16], 0x20
call fcn.10003600
mov byte [ebp - 4], 0x3b
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea ecx, [ebp - 0xd4]
call fcn.10002f20
mov esi, eax
lea eax, [ebp - 0x38]
mov byte [ebp - 4], 0x3c
push eax
lea eax, [ebp - 0x110]
push eax
call fcn.10029f40
push esi
mov edx, eax
mov byte [ebp - 4], 0x3d
lea ecx, [ebp - 0xb0]
call fcn.1000b890
add esp, 4
push eax
mov byte [ebp - 4], 0x3e
call fcn.10009410
lea ecx, [ebp - 0xb0]
call fcn.10002ed0
lea ecx, [ebp - 0x110]
call fcn.10002ed0
lea ecx, [ebp - 0xd4]
call fcn.10002ed0
lea ecx, [ebp - 0x38]
call fcn.10002b90
mov ecx, dword [ebp - 0x40]
cmp ecx, 0xf
jbe 0x10006db7
mov edx, dword [ebp - 0x54]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10006dad
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10006ec3
push ecx
push edx
call fcn.10178716
add esp, 8
mov ecx, dword [ebp - 0x7c]
mov dword [ebp - 0x44], 0
mov dword [ebp - 0x40], 0xf
mov byte [ebp - 0x54], 0
cmp ecx, 0xf
jbe 0x10005c14
mov edx, dword [ebp - 0x90]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x10006dfa
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x10006ec3
push ecx
push edx
call fcn.10178716
add esp, 8
jmp 0x10005c14
call fcn.10002a80
call fcn.10002a80
call fcn.10002a80
call fcn.10002a80
call fcn.10002a80
call fcn.10002a80
call fcn.10002a80
call fcn.10002a80
call fcn.10002a80
call fcn.10002a80
call fcn.10002a80
call fcn.10002a80
call fcn.1018001f
call fcn.1018001f
call fcn.1018001f
call fcn.1018001f
call fcn.1018001f
call fcn.1018001f
call fcn.1018001f
call fcn.1018001f
call fcn.1018001f
call fcn.1018001f
call fcn.1018001f
call fcn.1018001f
call fcn.10002a80
call fcn.1018001f
call fcn.1018001f
call fcn.1018001f
call fcn.10002a80
call fcn.1018001f
call fcn.1018001f
call fcn.1018001f
call fcn.1018001f
call fcn.1018001f
call fcn.1018001f
call fcn.1018001f
call fcn.1018001f
int3