Function at 0x10003a40
Capabilities:
Create directory
Get common file path
Set file attributes

Disassembly:
push ebp
mov ebp, esp
and esp, 0xfffffff8
push 0xffffffffffffffff
push 0x10015438
mov eax, dword fs:[0]
push eax
sub esp, 0x2c8
mov eax, dword [0x1001d080]
xor eax, esp
mov dword [esp + 0x2c0], eax
push ebx
push esi
push edi
mov eax, dword [0x1001d080]
xor eax, esp
push eax
lea eax, [esp + 0x2d8]
mov dword fs:[0], eax
xor ebx, ebx
push 0x103
lea eax, [esp + 0x1c9]
push ebx
push eax
mov byte [esp + 0x1d0], bl
call fcn.1000da00
add esp, 0xc
lea ecx, [esp + 0x1c4]
push ecx
push 0x104
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryA]
cmp byte [esp + eax + 0x1c3], 0x5c
lea eax, [esp + eax + 0x1c3]
jne 0x10003ac5
mov byte [eax], bl
lea eax, [esp + 0x1c4]
mov dword [esp + 0x44], 0xf
mov dword [esp + 0x40], ebx
mov byte [esp + 0x30], bl
lea edx, [eax + 1]
nop
mov cl, byte [eax]
inc eax
test cl, cl
jne 0x10003ae0
sub eax, edx
mov edi, eax
lea eax, [esp + 0x1c4]
lea esi, [esp + 0x30]
call fcn.10001750
mov edx, esi
push edx
mov eax, str.Skin
lea esi, [esp + 0x50]
mov dword [esp + 0x2e4], ebx
call fcn.10005e70
add esp, 4
mov byte [esp + 0x2e0], 2
cmp dword [esp + 0x44], 0x10
jb 0x10003b32
mov eax, dword [esp + 0x30]
push eax
call fcn.10008c37
add esp, 4
mov ebx, dword [sym.imp.KERNEL32.dll_FindFirstFileA]
jmp 0x10003b40
cmp dword [esp + 0x60], 0x10
mov edi, dword [esp + 0x4c]
jae 0x10003b4f
lea edi, [esp + 0x4c]
xor esi, esi
push 0x13c
lea ecx, [esp + 0x8c]
push esi
push ecx
mov dword [esp + 0x90], esi
call fcn.1000da00
add esp, 0xc
lea edx, [esp + 0x84]
push edx
push edi
call ebx
cmp eax, 0xffffffff
je 0x10003b8d
test byte [esp + 0x84], 0x10
je 0x10003b8d
mov esi, 1
push eax
call dword [sym.imp.KERNEL32.dll_FindClose]
xor edi, edi
cmp esi, edi
jne 0x10003bbb
cmp dword [esp + 0x60], 0x10
mov eax, dword [esp + 0x4c]
jae 0x10003ba9
lea eax, [esp + 0x4c]
push edi
push eax
call dword [sym.imp.KERNEL32.dll_CreateDirectoryA]
push 1
call dword [sym.imp.KERNEL32.dll_Sleep]
jmp 0x10003b40
mov dword [esp + 0x28], 0xf
mov dword [esp + 0x24], edi
mov byte [esp + 0x14], 0
push str.0000.bmp
lea eax, [esp + 0x50]
push eax
lea ecx, [esp + 0x38]
push ecx
mov byte [esp + 0x2ec], 3
call fcn.10005f00
add esp, 0xc
mov esi, eax
lea edx, [esp + 0x14]
mov ebx, 0x10
cmp edx, esi
je 0x10003c54
cmp dword [esp + 0x28], ebx
jb 0x10003c0d
mov eax, dword [esp + 0x14]
push eax
call fcn.10008c37
add esp, 4
mov dword [esp + 0x28], 0xf
mov dword [esp + 0x24], edi
mov byte [esp + 0x14], 0
cmp dword [esi + 0x14], ebx
jae 0x10003c38
mov eax, dword [esi + 0x10]
inc eax
push eax
lea ecx, [esp + 0x18]
push esi
push ecx
call fcn.10008e50
add esp, 0xc
jmp 0x10003c40
mov edx, dword [esi]
mov dword [esp + 0x14], edx
mov dword [esi], edi
mov eax, dword [esi + 0x10]
mov dword [esp + 0x24], eax
mov ecx, dword [esi + 0x14]
mov dword [esp + 0x28], ecx
mov dword [esi + 0x10], edi
mov dword [esi + 0x14], edi
mov byte [esp + 0x2e0], 3
cmp dword [esp + 0x44], ebx
jb 0x10003c6f
mov edx, dword [esp + 0x30]
push edx
call fcn.10008c37
add esp, 4
mov eax, dword [esp + 0x14]
cmp dword [esp + 0x28], ebx
jae 0x10003c7d
lea eax, [esp + 0x14]
push eax
push 0x97
call fcn.10001820
mov eax, dword [esp + 0x1c]
add esp, 8
cmp dword [esp + 0x28], ebx
jae 0x10003c99
lea eax, [esp + 0x14]
push 0x80
push eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
push str.1_1.bmp
lea eax, [esp + 0x50]
push eax
lea ecx, [esp + 0x38]
push ecx
call fcn.10005f00
add esp, 0xc
mov esi, eax
lea edx, [esp + 0x14]
cmp edx, esi
je 0x10003d20
cmp dword [esp + 0x28], ebx
jb 0x10003cd9
mov eax, dword [esp + 0x14]
push eax
call fcn.10008c37
add esp, 4
mov dword [esp + 0x28], 0xf
mov dword [esp + 0x24], edi
mov byte [esp + 0x14], 0
cmp dword [esi + 0x14], ebx
jae 0x10003d04
mov eax, dword [esi + 0x10]
inc eax
push eax
lea ecx, [esp + 0x18]
push esi
push ecx
call fcn.10008e50
add esp, 0xc
jmp 0x10003d0c
mov edx, dword [esi]
mov dword [esp + 0x14], edx
mov dword [esi], edi
mov eax, dword [esi + 0x10]
mov dword [esp + 0x24], eax
mov ecx, dword [esi + 0x14]
mov dword [esp + 0x28], ecx
mov dword [esi + 0x10], edi
mov dword [esi + 0x14], edi
mov byte [esp + 0x2e0], 3
cmp dword [esp + 0x44], ebx
jb 0x10003d3b
mov edx, dword [esp + 0x30]
push edx
call fcn.10008c37
add esp, 4
mov eax, dword [esp + 0x14]
cmp dword [esp + 0x28], ebx
jae 0x10003d49
lea eax, [esp + 0x14]
push eax
push 0x97
call fcn.10001820
mov eax, dword [esp + 0x1c]
add esp, 8
cmp dword [esp + 0x28], ebx
jae 0x10003d65
lea eax, [esp + 0x14]
push 0x80
push eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
push str.1_2.bmp
lea eax, [esp + 0x50]
push eax
lea ecx, [esp + 0x38]
push ecx
call fcn.10005f00
add esp, 0xc
mov esi, eax
lea edx, [esp + 0x14]
cmp edx, esi
je 0x10003dec
cmp dword [esp + 0x28], ebx
jb 0x10003da5
mov eax, dword [esp + 0x14]
push eax
call fcn.10008c37
add esp, 4
mov dword [esp + 0x28], 0xf
mov dword [esp + 0x24], edi
mov byte [esp + 0x14], 0
cmp dword [esi + 0x14], ebx
jae 0x10003dd0
mov eax, dword [esi + 0x10]
inc eax
push eax
lea ecx, [esp + 0x18]
push esi
push ecx
call fcn.10008e50
add esp, 0xc
jmp 0x10003dd8
mov edx, dword [esi]
mov dword [esp + 0x14], edx
mov dword [esi], edi
mov eax, dword [esi + 0x10]
mov dword [esp + 0x24], eax
mov ecx, dword [esi + 0x14]
mov dword [esp + 0x28], ecx
mov dword [esi + 0x10], edi
mov dword [esi + 0x14], edi
mov byte [esp + 0x2e0], 3
cmp dword [esp + 0x44], ebx
jb 0x10003e07
mov edx, dword [esp + 0x30]
push edx
call fcn.10008c37
add esp, 4
mov eax, dword [esp + 0x14]
cmp dword [esp + 0x28], ebx
jae 0x10003e15
lea eax, [esp + 0x14]
push eax
push 0x98
call fcn.10001820
mov eax, dword [esp + 0x1c]
add esp, 8
cmp dword [esp + 0x28], ebx
jae 0x10003e31
lea eax, [esp + 0x14]
push 0x80
push eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
push str.2_1.bmp
lea eax, [esp + 0x50]
push eax
lea ecx, [esp + 0x38]
push ecx
call fcn.10005f00
add esp, 0xc
mov esi, eax
lea edx, [esp + 0x14]
cmp edx, esi
je 0x10003eb8
cmp dword [esp + 0x28], ebx
jb 0x10003e71
mov eax, dword [esp + 0x14]
push eax
call fcn.10008c37
add esp, 4
mov dword [esp + 0x28], 0xf
mov dword [esp + 0x24], edi
mov byte [esp + 0x14], 0
cmp dword [esi + 0x14], ebx
jae 0x10003e9c
mov eax, dword [esi + 0x10]
inc eax
push eax
lea ecx, [esp + 0x18]
push esi
push ecx
call fcn.10008e50
add esp, 0xc
jmp 0x10003ea4
mov edx, dword [esi]
mov dword [esp + 0x14], edx
mov dword [esi], edi
mov eax, dword [esi + 0x10]
mov dword [esp + 0x24], eax
mov ecx, dword [esi + 0x14]
mov dword [esp + 0x28], ecx
mov dword [esi + 0x10], edi
mov dword [esi + 0x14], edi
mov byte [esp + 0x2e0], 3
cmp dword [esp + 0x44], ebx
jb 0x10003ed3
mov edx, dword [esp + 0x30]
push edx
call fcn.10008c37
add esp, 4
mov eax, dword [esp + 0x14]
cmp dword [esp + 0x28], ebx
jae 0x10003ee1
lea eax, [esp + 0x14]
push eax
push 0x99
call fcn.10001820
mov eax, dword [esp + 0x1c]
add esp, 8
cmp dword [esp + 0x28], ebx
jae 0x10003efd
lea eax, [esp + 0x14]
push 0x80
push eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
push str.2_2.bmp
lea eax, [esp + 0x50]
push eax
lea ecx, [esp + 0x38]
push ecx
call fcn.10005f00
add esp, 0xc
mov esi, eax
lea edx, [esp + 0x14]
cmp edx, esi
je 0x10003f84
cmp dword [esp + 0x28], ebx
jb 0x10003f3d
mov eax, dword [esp + 0x14]
push eax
call fcn.10008c37
add esp, 4
mov dword [esp + 0x28], 0xf
mov dword [esp + 0x24], edi
mov byte [esp + 0x14], 0
cmp dword [esi + 0x14], ebx
jae 0x10003f68
mov eax, dword [esi + 0x10]
inc eax
push eax
lea ecx, [esp + 0x18]
push esi
push ecx
call fcn.10008e50
add esp, 0xc
jmp 0x10003f70
mov edx, dword [esi]
mov dword [esp + 0x14], edx
mov dword [esi], edi
mov eax, dword [esi + 0x10]
mov dword [esp + 0x24], eax
mov ecx, dword [esi + 0x14]
mov dword [esp + 0x28], ecx
mov dword [esi + 0x10], edi
mov dword [esi + 0x14], edi
mov byte [esp + 0x2e0], 3
cmp dword [esp + 0x44], ebx
jb 0x10003f9f
mov edx, dword [esp + 0x30]
push edx
call fcn.10008c37
add esp, 4
mov eax, dword [esp + 0x14]
cmp dword [esp + 0x28], ebx
jae 0x10003fad
lea eax, [esp + 0x14]
push eax
push 0x9a
call fcn.10001820
mov eax, dword [esp + 0x1c]
add esp, 8
cmp dword [esp + 0x28], ebx
jae 0x10003fc9
lea eax, [esp + 0x14]
push 0x80
push eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
push str.3_1.bmp
lea eax, [esp + 0x50]
push eax
lea ecx, [esp + 0x38]
push ecx
call fcn.10005f00
add esp, 0xc
mov esi, eax
lea edx, [esp + 0x14]
cmp edx, esi
je 0x10004050
cmp dword [esp + 0x28], ebx
jb 0x10004009
mov eax, dword [esp + 0x14]
push eax
call fcn.10008c37
add esp, 4
mov dword [esp + 0x28], 0xf
mov dword [esp + 0x24], edi
mov byte [esp + 0x14], 0
cmp dword [esi + 0x14], ebx
jae 0x10004034
mov eax, dword [esi + 0x10]
inc eax
push eax
lea ecx, [esp + 0x18]
push esi
push ecx
call fcn.10008e50
add esp, 0xc
jmp 0x1000403c
mov edx, dword [esi]
mov dword [esp + 0x14], edx
mov dword [esi], edi
mov eax, dword [esi + 0x10]
mov dword [esp + 0x24], eax
mov ecx, dword [esi + 0x14]
mov dword [esp + 0x28], ecx
mov dword [esi + 0x10], edi
mov dword [esi + 0x14], edi
mov byte [esp + 0x2e0], 3
cmp dword [esp + 0x44], ebx
jb 0x1000406b
mov edx, dword [esp + 0x30]
push edx
call fcn.10008c37
add esp, 4
mov eax, dword [esp + 0x14]
cmp dword [esp + 0x28], ebx
jae 0x10004079
lea eax, [esp + 0x14]
push eax
push 0x9b
call fcn.10001820
mov eax, dword [esp + 0x1c]
add esp, 8
cmp dword [esp + 0x28], ebx
jae 0x10004095
lea eax, [esp + 0x14]
push 0x80
push eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
push str.3_2.bmp
lea eax, [esp + 0x50]
push eax
lea ecx, [esp + 0x38]
push ecx
call fcn.10005f00
add esp, 0xc
mov esi, eax
lea edx, [esp + 0x14]
cmp edx, esi
je 0x1000411c
cmp dword [esp + 0x28], ebx
jb 0x100040d5
mov eax, dword [esp + 0x14]
push eax
call fcn.10008c37
add esp, 4
mov dword [esp + 0x28], 0xf
mov dword [esp + 0x24], edi
mov byte [esp + 0x14], 0
cmp dword [esi + 0x14], ebx
jae 0x10004100
mov eax, dword [esi + 0x10]
inc eax
push eax
lea ecx, [esp + 0x18]
push esi
push ecx
call fcn.10008e50
add esp, 0xc
jmp 0x10004108
mov edx, dword [esi]
mov dword [esp + 0x14], edx
mov dword [esi], edi
mov eax, dword [esi + 0x10]
mov dword [esp + 0x24], eax
mov ecx, dword [esi + 0x14]
mov dword [esp + 0x28], ecx
mov dword [esi + 0x10], edi
mov dword [esi + 0x14], edi
mov byte [esp + 0x2e0], 3
cmp dword [esp + 0x44], ebx
jb 0x10004137
mov edx, dword [esp + 0x30]
push edx
call fcn.10008c37
add esp, 4
mov eax, dword [esp + 0x14]
cmp dword [esp + 0x28], ebx
jae 0x10004145
lea eax, [esp + 0x14]
push eax
push 0x9c
call fcn.10001820
mov eax, dword [esp + 0x1c]
add esp, 8
cmp dword [esp + 0x28], ebx
jae 0x10004161
lea eax, [esp + 0x14]
push 0x80
push eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
push str.4_1.bmp
lea eax, [esp + 0x50]
push eax
lea ecx, [esp + 0x38]
push ecx
call fcn.10005f00
add esp, 0xc
mov esi, eax
lea edx, [esp + 0x14]
cmp edx, esi
je 0x100041e8
cmp dword [esp + 0x28], ebx
jb 0x100041a1
mov eax, dword [esp + 0x14]
push eax
call fcn.10008c37
add esp, 4
mov dword [esp + 0x28], 0xf
mov dword [esp + 0x24], edi
mov byte [esp + 0x14], 0
cmp dword [esi + 0x14], ebx
jae 0x100041cc
mov eax, dword [esi + 0x10]
inc eax
push eax
lea ecx, [esp + 0x18]
push esi
push ecx
call fcn.10008e50
add esp, 0xc
jmp 0x100041d4
mov edx, dword [esi]
mov dword [esp + 0x14], edx
mov dword [esi], edi
mov eax, dword [esi + 0x10]
mov dword [esp + 0x24], eax
mov ecx, dword [esi + 0x14]
mov dword [esp + 0x28], ecx
mov dword [esi + 0x10], edi
mov dword [esi + 0x14], edi
mov byte [esp + 0x2e0], 3
cmp dword [esp + 0x44], ebx
jb 0x10004203
mov edx, dword [esp + 0x30]
push edx
call fcn.10008c37
add esp, 4
mov eax, dword [esp + 0x14]
cmp dword [esp + 0x28], ebx
jae 0x10004211
lea eax, [esp + 0x14]
push eax
push 0x9d
call fcn.10001820
mov eax, dword [esp + 0x1c]
add esp, 8
cmp dword [esp + 0x28], ebx
jae 0x1000422d
lea eax, [esp + 0x14]
push 0x80
push eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
push str.4_2.bmp
lea eax, [esp + 0x50]
push eax
lea ecx, [esp + 0x38]
push ecx
call fcn.10005f00
add esp, 0xc
mov esi, eax
lea edx, [esp + 0x14]
cmp edx, esi
je 0x100042b4
cmp dword [esp + 0x28], ebx
jb 0x1000426d
mov eax, dword [esp + 0x14]
push eax
call fcn.10008c37
add esp, 4
mov dword [esp + 0x28], 0xf
mov dword [esp + 0x24], edi
mov byte [esp + 0x14], 0
cmp dword [esi + 0x14], ebx
jae 0x10004298
mov eax, dword [esi + 0x10]
inc eax
push eax
lea ecx, [esp + 0x18]
push esi
push ecx
call fcn.10008e50
add esp, 0xc
jmp 0x100042a0
mov edx, dword [esi]
mov dword [esp + 0x14], edx
mov dword [esi], edi
mov eax, dword [esi + 0x10]
mov dword [esp + 0x24], eax
mov ecx, dword [esi + 0x14]
mov dword [esp + 0x28], ecx
mov dword [esi + 0x10], edi
mov dword [esi + 0x14], edi
mov byte [esp + 0x2e0], 3
cmp dword [esp + 0x44], ebx
jb 0x100042cf
mov edx, dword [esp + 0x30]
push edx
call fcn.10008c37
add esp, 4
mov eax, dword [esp + 0x14]
cmp dword [esp + 0x28], ebx
jae 0x100042dd
lea eax, [esp + 0x14]
push eax
push 0x9e
call fcn.10001820
mov eax, dword [esp + 0x1c]
add esp, 8
cmp dword [esp + 0x28], ebx
jae 0x100042f9
lea eax, [esp + 0x14]
push 0x80
push eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
push str.5_1.bmp
lea eax, [esp + 0x50]
push eax
lea ecx, [esp + 0x38]
push ecx
call fcn.10005f00
add esp, 0xc
mov esi, eax
lea edx, [esp + 0x14]
cmp edx, esi
je 0x10004380
cmp dword [esp + 0x28], ebx
jb 0x10004339
mov eax, dword [esp + 0x14]
push eax
call fcn.10008c37
add esp, 4
mov dword [esp + 0x28], 0xf
mov dword [esp + 0x24], edi
mov byte [esp + 0x14], 0
cmp dword [esi + 0x14], ebx
jae 0x10004364
mov eax, dword [esi + 0x10]
inc eax
push eax
lea ecx, [esp + 0x18]
push esi
push ecx
call fcn.10008e50
add esp, 0xc
jmp 0x1000436c
mov edx, dword [esi]
mov dword [esp + 0x14], edx
mov dword [esi], edi
mov eax, dword [esi + 0x10]
mov dword [esp + 0x24], eax
mov ecx, dword [esi + 0x14]
mov dword [esp + 0x28], ecx
mov dword [esi + 0x10], edi
mov dword [esi + 0x14], edi
mov byte [esp + 0x2e0], 3
cmp dword [esp + 0x44], ebx
jb 0x1000439b
mov edx, dword [esp + 0x30]
push edx
call fcn.10008c37
add esp, 4
mov eax, dword [esp + 0x14]
cmp dword [esp + 0x28], ebx
jae 0x100043a9
lea eax, [esp + 0x14]
push eax
push 0x9f
call fcn.10001820
mov eax, dword [esp + 0x1c]
add esp, 8
cmp dword [esp + 0x28], ebx
jae 0x100043c5
lea eax, [esp + 0x14]
push 0x80
push eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
push str.5_2.bmp
lea eax, [esp + 0x50]
push eax
lea ecx, [esp + 0x38]
push ecx
call fcn.10005f00
add esp, 0xc
mov esi, eax
lea edx, [esp + 0x14]
cmp edx, esi
je 0x1000444c
cmp dword [esp + 0x28], ebx
jb 0x10004405
mov eax, dword [esp + 0x14]
push eax
call fcn.10008c37
add esp, 4
mov dword [esp + 0x28], 0xf
mov dword [esp + 0x24], edi
mov byte [esp + 0x14], 0
cmp dword [esi + 0x14], ebx
jae 0x10004430
mov eax, dword [esi + 0x10]
inc eax
push eax
lea ecx, [esp + 0x18]
push esi
push ecx
call fcn.10008e50
add esp, 0xc
jmp 0x10004438
mov edx, dword [esi]
mov dword [esp + 0x14], edx
mov dword [esi], edi
mov eax, dword [esi + 0x10]
mov dword [esp + 0x24], eax
mov ecx, dword [esi + 0x14]
mov dword [esp + 0x28], ecx
mov dword [esi + 0x10], edi
mov dword [esi + 0x14], edi
mov byte [esp + 0x2e0], 3
cmp dword [esp + 0x44], ebx
jb 0x10004467
mov edx, dword [esp + 0x30]
push edx
call fcn.10008c37
add esp, 4
mov eax, dword [esp + 0x14]
cmp dword [esp + 0x28], ebx
jae 0x10004475
lea eax, [esp + 0x14]
push eax
push 0xa0
call fcn.10001820
mov eax, dword [esp + 0x1c]
add esp, 8
cmp dword [esp + 0x28], ebx
jae 0x10004491
lea eax, [esp + 0x14]
push 0x80
push eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
push str.6_1.bmp
lea eax, [esp + 0x50]
push eax
lea ecx, [esp + 0x38]
push ecx
call fcn.10005f00
add esp, 0xc
mov esi, eax
lea edx, [esp + 0x14]
cmp edx, esi
je 0x10004518
cmp dword [esp + 0x28], ebx
jb 0x100044d1
mov eax, dword [esp + 0x14]
push eax
call fcn.10008c37
add esp, 4
mov dword [esp + 0x28], 0xf
mov dword [esp + 0x24], edi
mov byte [esp + 0x14], 0
cmp dword [esi + 0x14], ebx
jae 0x100044fc
mov eax, dword [esi + 0x10]
inc eax
push eax
lea ecx, [esp + 0x18]
push esi
push ecx
call fcn.10008e50
add esp, 0xc
jmp 0x10004504
mov edx, dword [esi]
mov dword [esp + 0x14], edx
mov dword [esi], edi
mov eax, dword [esi + 0x10]
mov dword [esp + 0x24], eax
mov ecx, dword [esi + 0x14]
mov dword [esp + 0x28], ecx
mov dword [esi + 0x10], edi
mov dword [esi + 0x14], edi
mov byte [esp + 0x2e0], 3
cmp dword [esp + 0x44], ebx
jb 0x10004533
mov edx, dword [esp + 0x30]
push edx
call fcn.10008c37
add esp, 4
mov eax, dword [esp + 0x14]
cmp dword [esp + 0x28], ebx
jae 0x10004541
lea eax, [esp + 0x14]
push eax
push 0xa1
call fcn.10001820
mov eax, dword [esp + 0x1c]
add esp, 8
cmp dword [esp + 0x28], ebx
jae 0x1000455d
lea eax, [esp + 0x14]
push 0x80
push eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
push str.6_2.bmp
lea eax, [esp + 0x50]
push eax
lea ecx, [esp + 0x38]
push ecx
call fcn.10005f00
add esp, 0xc
mov esi, eax
lea edx, [esp + 0x14]
cmp edx, esi
je 0x100045e4
cmp dword [esp + 0x28], ebx
jb 0x1000459d
mov eax, dword [esp + 0x14]
push eax
call fcn.10008c37
add esp, 4
mov dword [esp + 0x28], 0xf
mov dword [esp + 0x24], edi
mov byte [esp + 0x14], 0
cmp dword [esi + 0x14], ebx
jae 0x100045c8
mov eax, dword [esi + 0x10]
inc eax
push eax
lea ecx, [esp + 0x18]
push esi
push ecx
call fcn.10008e50
add esp, 0xc
jmp 0x100045d0
mov edx, dword [esi]
mov dword [esp + 0x14], edx
mov dword [esi], edi
mov eax, dword [esi + 0x10]
mov dword [esp + 0x24], eax
mov ecx, dword [esi + 0x14]
mov dword [esp + 0x28], ecx
mov dword [esi + 0x10], edi
mov dword [esi + 0x14], edi
mov byte [esp + 0x2e0], 3
cmp dword [esp + 0x44], ebx
jb 0x100045ff
mov edx, dword [esp + 0x30]
push edx
call fcn.10008c37
add esp, 4
mov eax, dword [esp + 0x14]
cmp dword [esp + 0x28], ebx
jae 0x1000460d
lea eax, [esp + 0x14]
push eax
push 0xa2
call fcn.10001820
mov eax, dword [esp + 0x1c]
add esp, 8
cmp dword [esp + 0x28], ebx
jae 0x10004629
lea eax, [esp + 0x14]
push 0x80
push eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
push str.7_1.bmp
lea eax, [esp + 0x50]
push eax
lea ecx, [esp + 0x38]
push ecx
call fcn.10005f00
add esp, 0xc
mov esi, eax
lea edx, [esp + 0x14]
cmp edx, esi
je 0x100046b0
cmp dword [esp + 0x28], ebx
jb 0x10004669
mov eax, dword [esp + 0x14]
push eax
call fcn.10008c37
add esp, 4
mov dword [esp + 0x28], 0xf
mov dword [esp + 0x24], edi
mov byte [esp + 0x14], 0
cmp dword [esi + 0x14], ebx
jae 0x10004694
mov eax, dword [esi + 0x10]
inc eax
push eax
lea ecx, [esp + 0x18]
push esi
push ecx
call fcn.10008e50
add esp, 0xc
jmp 0x1000469c
mov edx, dword [esi]
mov dword [esp + 0x14], edx
mov dword [esi], edi
mov eax, dword [esi + 0x10]
mov dword [esp + 0x24], eax
mov ecx, dword [esi + 0x14]
mov dword [esp + 0x28], ecx
mov dword [esi + 0x10], edi
mov dword [esi + 0x14], edi
mov byte [esp + 0x2e0], 3
cmp dword [esp + 0x44], ebx
jb 0x100046cb
mov edx, dword [esp + 0x30]
push edx
call fcn.10008c37
add esp, 4
mov eax, dword [esp + 0x14]
cmp dword [esp + 0x28], ebx
jae 0x100046d9
lea eax, [esp + 0x14]
push eax
push 0xa3
call fcn.10001820
mov eax, dword [esp + 0x1c]
add esp, 8
cmp dword [esp + 0x28], ebx
jae 0x100046f5
lea eax, [esp + 0x14]
push 0x80
push eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
push str.7_2.bmp
lea eax, [esp + 0x50]
push eax
lea ecx, [esp + 0x38]
push ecx
call fcn.10005f00
add esp, 0xc
mov esi, eax
lea edx, [esp + 0x14]
cmp edx, esi
je 0x1000477c
cmp dword [esp + 0x28], ebx
jb 0x10004735
mov eax, dword [esp + 0x14]
push eax
call fcn.10008c37
add esp, 4
mov dword [esp + 0x28], 0xf
mov dword [esp + 0x24], edi
mov byte [esp + 0x14], 0
cmp dword [esi + 0x14], ebx
jae 0x10004760
mov eax, dword [esi + 0x10]
inc eax
push eax
lea ecx, [esp + 0x18]
push esi
push ecx
call fcn.10008e50
add esp, 0xc
jmp 0x10004768
mov edx, dword [esi]
mov dword [esp + 0x14], edx
mov dword [esi], edi
mov eax, dword [esi + 0x10]
mov dword [esp + 0x24], eax
mov ecx, dword [esi + 0x14]
mov dword [esp + 0x28], ecx
mov dword [esi + 0x10], edi
mov dword [esi + 0x14], edi
mov byte [esp + 0x2e0], 3
cmp dword [esp + 0x44], ebx
jb 0x10004797
mov edx, dword [esp + 0x30]
push edx
call fcn.10008c37
add esp, 4
mov eax, dword [esp + 0x14]
cmp dword [esp + 0x28], ebx
jae 0x100047a5
lea eax, [esp + 0x14]
push eax
push 0xa4
call fcn.10001820
mov eax, dword [esp + 0x1c]
add esp, 8
cmp dword [esp + 0x28], ebx
jae 0x100047c1
lea eax, [esp + 0x14]
push 0x80
push eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
push str.8_1.bmp
lea eax, [esp + 0x50]
push eax
lea ecx, [esp + 0x38]
push ecx
call fcn.10005f00
add esp, 0xc
mov esi, eax
lea edx, [esp + 0x14]
cmp edx, esi
je 0x10004848
cmp dword [esp + 0x28], ebx
jb 0x10004801
mov eax, dword [esp + 0x14]
push eax
call fcn.10008c37
add esp, 4
mov dword [esp + 0x28], 0xf
mov dword [esp + 0x24], edi
mov byte [esp + 0x14], 0
cmp dword [esi + 0x14], ebx
jae 0x1000482c
mov eax, dword [esi + 0x10]
inc eax
push eax
lea ecx, [esp + 0x18]
push esi
push ecx
call fcn.10008e50
add esp, 0xc
jmp 0x10004834
mov edx, dword [esi]
mov dword [esp + 0x14], edx
mov dword [esi], edi
mov eax, dword [esi + 0x10]
mov dword [esp + 0x24], eax
mov ecx, dword [esi + 0x14]
mov dword [esp + 0x28], ecx
mov dword [esi + 0x10], edi
mov dword [esi + 0x14], edi
mov byte [esp + 0x2e0], 3
cmp dword [esp + 0x44], ebx
jb 0x10004863
mov edx, dword [esp + 0x30]
push edx
call fcn.10008c37
add esp, 4
mov eax, dword [esp + 0x14]
cmp dword [esp + 0x28], ebx
jae 0x10004871
lea eax, [esp + 0x14]
push eax
push 0xa5
call fcn.10001820
mov eax, dword [esp + 0x1c]
add esp, 8
cmp dword [esp + 0x28], ebx
jae 0x1000488d
lea eax, [esp + 0x14]
push 0x80
push eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
push str.8_2.bmp
lea eax, [esp + 0x50]
push eax
lea ecx, [esp + 0x38]
push ecx
call fcn.10005f00
add esp, 0xc
mov esi, eax
lea edx, [esp + 0x14]
cmp edx, esi
je 0x10004914
cmp dword [esp + 0x28], ebx
jb 0x100048cd
mov eax, dword [esp + 0x14]
push eax
call fcn.10008c37
add esp, 4
mov dword [esp + 0x28], 0xf
mov dword [esp + 0x24], edi
mov byte [esp + 0x14], 0
cmp dword [esi + 0x14], ebx
jae 0x100048f8
mov eax, dword [esi + 0x10]
inc eax
push eax
lea ecx, [esp + 0x18]
push esi
push ecx
call fcn.10008e50
add esp, 0xc
jmp 0x10004900
mov edx, dword [esi]
mov dword [esp + 0x14], edx
mov dword [esi], edi
mov eax, dword [esi + 0x10]
mov dword [esp + 0x24], eax
mov ecx, dword [esi + 0x14]
mov dword [esp + 0x28], ecx
mov dword [esi + 0x10], edi
mov dword [esi + 0x14], edi
mov byte [esp + 0x2e0], 3
cmp dword [esp + 0x44], ebx
jb 0x1000492f
mov edx, dword [esp + 0x30]
push edx
call fcn.10008c37
add esp, 4
mov eax, dword [esp + 0x14]
cmp dword [esp + 0x28], ebx
jae 0x1000493d
lea eax, [esp + 0x14]
push eax
push 0xa6
call fcn.10001820
mov eax, dword [esp + 0x1c]
add esp, 8
cmp dword [esp + 0x28], ebx
jae 0x10004959
lea eax, [esp + 0x14]
push 0x80
push eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
push str.9_1.bmp
lea eax, [esp + 0x50]
push eax
lea ecx, [esp + 0x38]
push ecx
call fcn.10005f00
add esp, 0xc
mov esi, eax
lea edx, [esp + 0x14]
cmp edx, esi
je 0x100049e0
cmp dword [esp + 0x28], ebx
jb 0x10004999
mov eax, dword [esp + 0x14]
push eax
call fcn.10008c37
add esp, 4
mov dword [esp + 0x28], 0xf
mov dword [esp + 0x24], edi
mov byte [esp + 0x14], 0
cmp dword [esi + 0x14], ebx
jae 0x100049c4
mov eax, dword [esi + 0x10]
inc eax
push eax
lea ecx, [esp + 0x18]
push esi
push ecx
call fcn.10008e50
add esp, 0xc
jmp 0x100049cc
mov edx, dword [esi]
mov dword [esp + 0x14], edx
mov dword [esi], edi
mov eax, dword [esi + 0x10]
mov dword [esp + 0x24], eax
mov ecx, dword [esi + 0x14]
mov dword [esp + 0x28], ecx
mov dword [esi + 0x10], edi
mov dword [esi + 0x14], edi
mov byte [esp + 0x2e0], 3
cmp dword [esp + 0x44], ebx
jb 0x100049fb
mov edx, dword [esp + 0x30]
push edx
call fcn.10008c37
add esp, 4
mov eax, dword [esp + 0x14]
cmp dword [esp + 0x28], ebx
jae 0x10004a09
lea eax, [esp + 0x14]
push eax
push 0xa7
call fcn.10001820
mov eax, dword [esp + 0x1c]
add esp, 8
cmp dword [esp + 0x28], ebx
jae 0x10004a25
lea eax, [esp + 0x14]
push 0x80
push eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
push str.9_2.bmp
lea eax, [esp + 0x50]
push eax
lea ecx, [esp + 0x38]
push ecx
call fcn.10005f00
add esp, 0xc
mov edi, eax
lea esi, [esp + 0x14]
mov byte [esp + 0x2e0], 0x16
call fcn.10002100
mov ebx, 0x10
mov byte [esp + 0x2e0], 3
cmp dword [esp + 0x44], ebx
jb 0x10004a7b
mov edx, dword [esp + 0x30]
push edx
call fcn.10008c37
add esp, 4
mov eax, dword [esp + 0x14]
cmp dword [esp + 0x28], ebx
jae 0x10004a89
lea eax, [esp + 0x14]
push eax
push 0xa8
call fcn.10001820
mov eax, dword [esp + 0x1c]
add esp, 8
cmp dword [esp + 0x28], ebx
jae 0x10004aa5
lea eax, [esp + 0x14]
push 0x80
push eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
push str.10_1.bmp
lea eax, [esp + 0x50]
push eax
lea ecx, [esp + 0x38]
push ecx
call fcn.10005f00
add esp, 0xc
mov edi, eax
lea esi, [esp + 0x14]
mov byte [esp + 0x2e0], 0x17
call fcn.10002100
mov byte [esp + 0x2e0], 3
cmp dword [esp + 0x44], ebx
jb 0x10004af6
mov edx, dword [esp + 0x30]
push edx
call fcn.10008c37
add esp, 4
mov eax, dword [esp + 0x14]
cmp dword [esp + 0x28], ebx
jae 0x10004b04
lea eax, [esp + 0x14]
push eax
push 0xa9
call fcn.10001820
mov eax, dword [esp + 0x1c]
add esp, 8
cmp dword [esp + 0x28], ebx
jae 0x10004b20
lea eax, [esp + 0x14]
push 0x80
push eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
push str.10_2.bmp
lea eax, [esp + 0x50]
push eax
lea ecx, [esp + 0x70]
push ecx
call fcn.10005f00
add esp, 0xc
mov edi, eax
lea esi, [esp + 0x14]
mov byte [esp + 0x2e0], 0x18
call fcn.10002100
cmp dword [esp + 0x7c], ebx
jb 0x10004b69
mov edx, dword [esp + 0x68]
push edx
call fcn.10008c37
add esp, 4
mov eax, dword [esp + 0x14]
cmp dword [esp + 0x28], ebx
jae 0x10004b77
lea eax, [esp + 0x14]
push eax
push 0xaa
call fcn.10001820
mov eax, dword [esp + 0x1c]
add esp, 8
cmp dword [esp + 0x28], ebx
jae 0x10004b93
lea eax, [esp + 0x14]
push 0x80
push eax
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
cmp dword [esp + 0x28], ebx
jb 0x10004bb2
mov eax, dword [esp + 0x14]
push eax
call fcn.10008c37
add esp, 4
mov dword [esp + 0x28], 0xf
mov dword [esp + 0x24], 0
mov byte [esp + 0x14], 0
cmp dword [esp + 0x60], ebx
jb 0x10004bda
mov ecx, dword [esp + 0x4c]
push ecx
call fcn.10008c37
add esp, 4
mov eax, 1
mov ecx, dword [esp + 0x2d8]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [esp + 0x2c0]
xor ecx, esp
call fcn.10008c28
mov esp, ebp
pop ebp
ret