Function at 0x10001ae5
Capabilities:
Create directory
Identify system language via api

Disassembly:
mov eax, 0x10060c8b
call fcn.100605f8
sub esp, 0x2c0
push ebx
mov dword [ebp - 0x20], 0xc75b57fd
xor ebx, ebx
mov dword [ebp - 0x34], 0x4ec7e318
push esi
mov dword [ebp - 0x30], 0xffffffff
push edi
mov dword [ebp - 0x38], 0x17f9
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x100], edx
mov dword [ebp - 0x8c], ecx
mov dword [ebp - 0x1f4], ebx
mov dword [ebp - 0x20], ebx
jmp 0x10001bc8
mov dword [ebp - 0x24], 0x9cc25fa5
lea ecx, [ebp - 0x190]
push 2
call fcn.100034db
push 2
pop edx
mov dword [ebp - 0x18], edx
mov dword [ebp - 0x1c], ebx
jmp 0x10001b60
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x54], 0xdf29855e
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 1
jl 0x10001b52
mov dword [ebp - 0x1c], ebx
jmp 0x10001b7e
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x190]
mov dword [eax + ecx*4], 0xd92426f3
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edx
jl 0x10001b6b
mov eax, dword [ebp - 0x190]
xor ecx, ecx
cmp dword [eax], ebx
setne cl
cmp ecx, dword [ebp - 0x24]
jg 0x10001b9f
cmp dword [ebp - 0x34], ebx
je 0x10001b9f
xor eax, eax
inc eax
jmp 0x10001ba1
mov eax, ebx
cmp dword [ebp - 0x24], eax
jge 0x10001baf
cmp dword [ebp - 0x30], ebx
jne 0x10001baf
mov ecx, ebx
jmp 0x10001bb2
xor ecx, ecx
inc ecx
mov eax, dword [ebp - 0x20]
sub eax, ecx
lea ecx, [ebp - 0x190]
mov dword [ebp - 0x18], eax
call fcn.1000355e
dec dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0xfffffffe
je 0x10001b33
mov dword [ebp - 0x2c], 0xba33
lea ecx, [ebp - 0xf8]
mov dword [ebp - 0x1c], ebx
push 3
call fcn.100034db
mov dword [ebp - 4], ebx
push 3
mov dword [ebp - 0x20], 0xfdadf860
mov dword [ebp - 0x18], ebx
pop edx
jmp 0x10001c0e
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0xf8]
mov dword [eax + ecx*4], 0xb2f14481
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x10001bfb
mov eax, dword [ebp - 0x2c]
imul eax, dword [ebp - 0x2c]
imul eax, eax, 0xbf0b
test eax, eax
je 0x10001ce1
mov dword [ebp - 0x24], 0xfffffff7
lea ecx, [ebp - 0x120]
mov dword [ebp - 0x30], ebx
push 4
call fcn.100034db
mov dword [ebp - 0x34], 8
mov dword [ebp - 0x18], ebx
jmp 0x10001c5e
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x120]
mov dword [eax + ecx*4], 0xae4f9dbc
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x10001c4b
mov dword [ebp - 0x1c], 0x452a26f
mov ecx, 0xfffa
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], 0xfffc
mov eax, dword [ebp - 0x24]
cmp ecx, eax
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0xf8]
sbb ecx, ecx
sub edx, dword [ebp - 0x24]
inc ecx
neg edx
mov dword [eax], ecx
sbb edx, edx
mov eax, dword [ebp - 0x30]
xor ecx, ecx
inc edx
cmp edx, eax
mov eax, dword [ebp - 0x2c]
setge cl
xor edx, edx
cmp ecx, eax
setle dl
xor ecx, ecx
cmp edx, 0xfffffffb
setl cl
sub ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x120]
mov dword [eax], ecx
lea ecx, [ebp - 0x120]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x120]
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x34], eax
call fcn.1000355e
jmp 0x10001d10
mov dword [ebp - 0x1c], 0xffffffeb
jmp 0x10001d0a
mov dword [ebp - 0x20], ebx
jmp 0x10001d02
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0xf8]
mov dword [eax + ecx*4], 0xd976d993
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edx
jl 0x10001cef
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xb
je 0x10001cea
mov eax, dword [ebp - 0x20]
xor ecx, ecx
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
mov esi, dword [ebp - 0xf8]
mov eax, dword [esi + 4]
cmp eax, dword [esi]
mov eax, dword [ebp - 0x2c]
setg cl
xor edx, edx
test ecx, ecx
sets dl
xor ecx, ecx
cmp eax, edx
setle cl
or dword [ebp - 4], 0xffffffff
mov dword [esi + 4], ecx
lea ecx, [ebp - 0xf8]
call fcn.1000355e
push 0x61
pop eax
mov dword [ebp - 0x70], 0x3d06c004
mov dword [ebp - 0x6c], 0x2b011b00
mov dword [ebp - 0x68], 0xd2040005
mov dword [ebp - 0x64], 0x330830f
mov word [ebp - 0x60], 0x20e
mov byte [ebp - 0x5e], 0xd
mov word [ebp - 0x14c], ax
mov dword [ebp - 0x2c], 0x7b51
cmp dword [ebp - 0x2c], 0x7eba
jle 0x10001dcd
mov edi, ebx
mov dword [ebp - 0x30], ebx
mov esi, ebx
mov eax, edi
mov edi, 0x5c1b
cdq
idiv esi
mov ebx, edx
mov eax, ebx
mov ecx, 0x1007be38
cdq
push edx
push eax
call fcn.10003364
dec ebx
dec edi
jne 0x10001d9f
mov edi, dword [ebp - 0x30]
inc esi
cmp esi, 0xe99
jl 0x10001d93
inc edi
mov dword [ebp - 0x30], edi
push 0
pop ebx
cmp edi, 0x4216
jl 0x10001d91
mov dword [ebp - 0x1c], 9
mov dword [ebp - 0x24], 0x13a3dbc5
mov dword [ebp - 0x1c], ebx
jmp 0x10001e80
mov dword [ebp - 0x20], 2
mov dword [ebp - 0x30], 0xfffffffa
mov dword [ebp - 0x34], 0xffffffff
mov dword [ebp - 0x20], ebx
jmp 0x10001e70
mov dword [ebp - 0x18], ebx
jmp 0x10001e0f
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x268], ebx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x10001e02
mov ecx, dword [ebp - 0x20]
mov eax, 0xffff
imul ecx, dword [ebp - 0x20]
sub eax, ecx
jne 0x10001e2e
cmp dword [ebp - 0x1c], ebx
jne 0x10001e2e
mov ecx, ebx
jmp 0x10001e31
xor ecx, ecx
inc ecx
xor eax, eax
cmp ecx, 7
setg al
xor edx, edx
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x24]
cmp ecx, eax
mov eax, dword [ebp - 0x264]
setl dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x1c]
setle cl
mov dword [ebp - 0x34], ecx
xor ecx, ecx
cmp dword [ebp - 0x34], eax
setg cl
mov dword [ebp - 0x34], ecx
dec dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0xffffffe4
jl 0x10001dfd
mov dword [ebp - 0x24], 0xffffffff
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xfffffff7
jne 0x10001de3
mov dword [ebp - 4], 1
cmp dword [ebp - 0x2c], 0x7b3e
jge 0x10001ea9
mov edx, str.jraa_speuqpcc_uyual_vdmvrjh_xeys_iyztvl_keovnkxrr_bdsleqlo_gxrzvgu_fbptws_ssmibl
mov ecx, 0x1007be38
call fcn.100055b2
or dword [ebp - 4], 0xffffffff
push 2
pop esi
mov ecx, ebx
cmp esi, 0xa
jne 0x10001ee8
movzx eax, byte [ebp - 0x66]
lea ecx, [eax + 1]
lea esi, [eax + 9]
jmp 0x10001fe4
movzx edx, byte [ebp + esi - 0x6f]
mov eax, esi
sub eax, ecx
push 4
movzx eax, byte [ebp + eax - 0x72]
movzx ecx, word [ebp + eax*2 - 0x154]
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
movzx eax, byte [ebp + esi - 0x70]
add ecx, edx
mov word [ebp + eax*2 - 0x154], cx
lea ecx, [ebp - 0x160]
mov dword [ebp - 0x20], 0x5d6c05ba
mov dword [ebp - 0x24], 0x48c66f5a
call fcn.100034db
mov dword [ebp - 0x38], 0xf4039ee4
mov dword [ebp - 0x1c], ebx
jmp 0x10001f4a
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x78], 0xffffffff
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x10001f3c
mov dword [ebp - 0x1c], ebx
jmp 0x10001f68
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x160]
mov dword [eax + ecx*4], 0xa9bca7b5
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
jl 0x10001f55
mov dword [ebp - 0x20], 0x16
jmp 0x10001f86
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x74], eax
dec dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0xd
jne 0x10001f77
cmp dword [ebp - 0x74], ebx
jne 0x10001fa0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], ebx
jne 0x10001fa0
mov ecx, ebx
jmp 0x10001fa3
xor ecx, ecx
inc ecx
mov eax, dword [ebp - 0x74]
sub eax, 0xab19
add eax, ecx
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x78]
mov eax, dword [ebp - 0x74]
mov eax, dword [ebp - 0x160]
mov ecx, dword [ebp - 0x74]
sub ecx, dword [eax + 4]
neg ecx
sbb ecx, ecx
add ecx, 0xfbf21220
mov dword [ebp - 0x74], ecx
lea ecx, [ebp - 0x160]
call fcn.1000355e
mov ecx, ebx
add esi, 2
cmp esi, 0x13
jb 0x10001eb2
push 2
lea ecx, [ebp - 0x16c]
call fcn.100034db
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x38], 0xd37a5b7d
mov dword [ebp - 0x18], ebx
jmp 0x1000201f
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x16c]
mov dword [eax + ecx*4], 0xd4e06482
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x1000200c
mov eax, dword [ebp - 0x16c]
mov dword [eax], ebx
mov dword [ebp - 0x18], 0xfffffff2
jmp 0x1000203f
mov dword [ebp - 0x30], ebx
dec dword [ebp - 0x30]
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xfffffff5
jl 0x10002036
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x16c]
call fcn.1000355e
xor eax, eax
lea ecx, [ebp - 0x114]
push 1
mov word [ebp - 0x146], ax
call fcn.100034db
mov dword [ebp - 4], 4
lea eax, [ebp - 0x22c]
push dword [ebp - 0x54]
xorps xmm0, xmm0
mov dword [ebp - 0xb0], ebx
push eax
lea eax, [ebp - 0x23c]
mov dword [ebp - 0xac], ebx
push eax
push ebx
lea ecx, [ebp - 0xb0]
mov dword [ebp - 0xa8], ebx
movdqu xmmword [ebp - 0x23c], xmm0
call fcn.10005cfc
mov dword [ebp - 0x24], 0x59785734
mov dword [ebp - 0x30], 0x55f1bb13
mov dword [ebp - 0x34], 0xfffffff7
mov dword [ebp - 0x18], ebx
jmp 0x100020d8
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x114]
mov dword [eax + ecx*4], 0xfffffffb
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 1
jl 0x100020c5
mov byte [ebp - 0x25], bl
cmp byte [ebp - 0x25], 0
je 0x100020f0
push ebx
push ebx
push ebx
call dword [sym.imp.OLEAUT32.dll_SysStringByteLen]
mov eax, dword [ebp - 0xb0]
mov eax, dword [eax]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x114]
mov ecx, dword [ebp - 0x24]
mov edx, dword [eax]
sub ecx, edx
neg ecx
sbb ecx, ecx
xor eax, eax
inc ecx
cmp ecx, edx
mov ecx, 0xb14151c8
setl al
sub eax, 0xfffe
cmp eax, 0xfffffffa
sbb eax, eax
neg eax
sub eax, 0xfdbd0176
neg eax
sbb eax, eax
inc eax
cmp ecx, eax
sbb eax, eax
neg eax
cmp eax, 0xe0b2
jle 0x1000213f
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0xb0]
xor ecx, ecx
mov eax, dword [eax]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x114]
cmp dword [eax], ebx
setg cl
mov dword [ebp - 0x34], ecx
lea ecx, [ebp - 0xb0]
call fcn.1000355e
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x114]
call fcn.1000355e
xor eax, eax
mov dword [ebp - 0x1ac], 7
mov word [ebp - 0x1c0], ax
lea ecx, [ebp - 0x1c0]
lea eax, [ebp - 0x154]
mov dword [ebp - 0x1b0], ebx
push eax
call fcn.10003954
mov dword [ebp - 4], 5
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x30], 0xfffffffc
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x30], 0x5a77
cmp dword [ebp - 0x30], 0x5d36
jle 0x10002216
push ebx
push 0xe92
call dword [sym.imp.USER32.dll_TranslateMDISysAccel]
mov edi, ebx
mov esi, ebx
mov dword [ebp - 0x34], ebx
mov eax, esi
mov ecx, 0x1007be38
cdq
idiv ebx
and edx, edi
mov eax, edx
cdq
push edx
push eax
call fcn.10003364
inc ebx
cmp ebx, 0x205
jl 0x100021d9
inc esi
push 0
pop ebx
cmp esi, 0x50f
jl 0x100021d6
inc edi
cmp edi, 0x471
jl 0x100021d4
push ebx
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_RegSetKeySecurity]
mov dword [ebp - 0x18], 0xfffffffb
mov byte [ebp - 4], 6
cmp dword [ebp - 0x30], 0x5787
jge 0x10002257
mov edx, str.jfwxd_yhll_pzawntw_hsbgfpdcg_xjsq_cxfc_jzshhaxou_ixxpdef_qggo_csa_gcpkubn_wqscazwf_nhqpy_aqefl
mov ecx, 0x1007be38
call fcn.100055b2
jmp 0x10002257
mov dword [ebp - 4], 5
mov dword [ebp - 0x30], 0xb8e9646b
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x34], 1
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
sub eax, dword [ebp - 0x24]
neg eax
sbb eax, eax
xor edx, edx
inc eax
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x18], 0xcc8e
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x30]
cmp eax, ecx
setg dl
xor eax, eax
cmp edx, 0x37d45db3
setne al
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
add eax, dword [ebp - 0x24]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x34], eax
mov byte [ebp - 0x25], bl
cmp byte [ebp - 0x25], 0
je 0x100022c7
push ebx
call dword [sym.imp.ADVAPI32.dll_CloseServiceHandle]
push dword [ebp - 0x100]
xor eax, eax
lea edi, [ebp - 0x154]
stosd dword es:[edi], eax
lea ecx, [ebp - 0x20c]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
call fcn.10003479
push 2
lea ecx, [ebp - 0x184]
mov byte [ebp - 4], 8
call fcn.100034db
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x38], 0xd37a5b7d
mov dword [ebp - 0x18], ebx
jmp 0x10002317
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x184]
mov dword [eax + ecx*4], 0xd4e06482
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x10002304
mov eax, dword [ebp - 0x184]
mov dword [eax], ebx
mov dword [ebp - 0x18], 0xfffffff2
jmp 0x10002337
mov dword [ebp - 0x30], ebx
dec dword [ebp - 0x30]
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xfffffff5
jl 0x1000232e
lea ecx, [ebp - 0x184]
mov byte [ebp - 4], 8
call fcn.1000355e
mov dword [ebp - 0x34], 0x43b7
mov dword [ebp - 0x20], 0xd8da8e97
mov dword [ebp - 0x30], 1
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x20], ebx
jmp 0x1000237e
mov byte [ebp - 0x25], bl
cmp byte [ebp - 0x25], 0
jne 0x100023e0
dec dword [ebp - 0x20]
cmp dword [ebp - 0x20], 0xffffffeb
jle 0x10002372
push dword [ebp - 0x54]
movdqa xmm0, xmmword [0x1006f080]
lea eax, [ebp - 0x23c]
push eax
lea eax, [ebp - 0x24c]
mov dword [ebp - 0x24], 0xcf4a4163
push eax
push ebx
lea ecx, [ebp - 0xc8]
mov dword [ebp - 0xc8], ebx
movdqu xmmword [ebp - 0x24c], xmm0
mov dword [ebp - 0xc4], ebx
mov dword [ebp - 0xc0], ebx
call fcn.10005cfc
mov dword [ebp - 0x30], 8
push 3
mov dword [ebp - 0x34], 0x8be
mov dword [ebp - 0x2c], ebx
pop ecx
jmp 0x100023fc
push 0x1230
call dword [sym.imp.KERNEL32.dll_ExitThread]
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0xbc], 1
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], ecx
jl 0x100023eb
mov dword [ebp - 0x2c], ebx
jmp 0x10002417
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0xa4], 0xdcad2086
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 2
jl 0x10002406
mov dword [ebp - 0x2c], ebx
jmp 0x10002433
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x12c], 0x9b950315
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], ecx
jl 0x10002422
dec dword [ebp - 0xb4]
mov eax, dword [ebp - 0xb4]
sub eax, dword [ebp - 0xa0]
mov dword [ebp - 0xa0], eax
mov eax, dword [ebp - 0x124]
mov eax, dword [ebp - 0x124]
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0xc8]
mov eax, dword [ebp - 0xa4]
mov dword [ecx + 8], eax
mov eax, dword [ebp - 0xb8]
mov eax, dword [ebp - 0x24]
imul eax, dword [ecx + 8]
test eax, eax
jne 0x1000248e
mov eax, dword [ebp - 0xc8]
cmp dword [eax + 4], ebx
jne 0x1000248e
mov edx, ebx
jmp 0x10002491
xor edx, edx
inc edx
mov esi, dword [ebp - 0x12c]
xor ecx, ecx
mov dword [ebp - 0xa0], esi
mov eax, dword [ebp - 0xb4]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x24]
cmp edx, eax
setne cl
add ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0xb4]
mov eax, dword [ebp - 0x34]
imul edx, esi
sub edx, ecx
lea ecx, [ebp - 0xc8]
neg edx
sbb edx, edx
inc edx
add eax, edx
mov dword [ebp - 0x128], eax
call fcn.1000355e
push 0x5c
pop eax
push 2
mov byte [ebp - 0x40], bl
mov ecx, ebx
mov word [ebp - 0x3f], 0x116
mov byte [ebp - 0x3d], 0xb0
mov word [ebp - 0x4c], ax
pop esi
cmp esi, 2
jne 0x100024fb
push esi
pop ecx
jmp 0x10002524
movzx edx, byte [ebp + esi - 0x3f]
mov eax, esi
sub eax, ecx
movzx eax, byte [ebp + eax - 0x42]
movzx ecx, word [ebp + eax*2 - 0x4c]
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
movzx eax, byte [ebp + esi - 0x40]
add ecx, edx
mov word [ebp + eax*2 - 0x4c], cx
mov ecx, ebx
add esi, 2
cmp esi, 4
jb 0x100024f2
xor eax, eax
lea ecx, [ebp - 0x1f0]
mov word [ebp - 0x4a], ax
mov dword [ebp - 0x20], 0x68206240
mov dword [ebp - 0x38], ebx
push 4
call fcn.100034db
mov byte [ebp - 4], 0xa
lea eax, [ebp - 0x21c]
push dword [ebp - 0x54]
movdqa xmm0, xmmword [0x1006f0d0]
lea ecx, [ebp - 0xe0]
push eax
lea eax, [ebp - 0x22c]
mov dword [ebp - 0xe0], ebx
push eax
push ebx
movdqu xmmword [ebp - 0x22c], xmm0
mov dword [ebp - 0xdc], ebx
mov dword [ebp - 0xd8], ebx
call fcn.10005cfc
mov byte [ebp - 4], 0xb
mov dword [ebp - 0x18], ebx
jmp 0x100025a8
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1f0]
mov dword [eax + ecx*4], 0xfffffffe
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x10002595
mov byte [ebp - 0x25], bl
cmp byte [ebp - 0x25], 0
je 0x100025c4
push ebx
push ebx
push 0xc80
call dword [sym.imp.ADVAPI32.dll_CopySid]
mov dword [ebp - 0x20], 0xfffffff7
cmp dword [ebp - 0x20], 1
jge 0x1000262a
mov esi, dword [ebp - 0xe0]
mov dword [ebp - 0x38], 0xe00f
lea ecx, [ebp - 0x1a8]
mov dword [ebp - 0x38], 0x7e307b5c
mov dword [ebp - 0x38], 0xa147b80b
push 2
call fcn.100034db
mov dword [ebp - 0x18], ebx
jmp 0x1000260d
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1a8]
mov dword [eax + ecx*4], ebx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x100025fe
inc dword [esi + 0xc]
lea ecx, [ebp - 0x1a8]
call fcn.1000355e
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 1
jl 0x100025d7
lea ecx, [ebp - 0xe0]
call fcn.1000355e
lea ecx, [ebp - 0x1f0]
mov byte [ebp - 4], 8
call fcn.1000355e
xor eax, eax
mov dword [ebp - 0x130], 7
mov word [ebp - 0x144], ax
lea ecx, [ebp - 0x144]
lea eax, [ebp - 0x4c]
mov dword [ebp - 0x134], ebx
push eax
call fcn.10003954
mov byte [ebp - 4], 0xc
xor edx, edx
mov dword [ebp - 0x20], 0x60477862
inc edx
mov dword [ebp - 0x2c], 0xf9c77509
mov dword [ebp - 0x1c], 0xe2ff5ff7
mov dword [ebp - 0x18], ebx
jmp 0x10002697
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x3c], edx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x1000268d
mov dword [ebp - 0x20], ebx
cmp dword [ebp - 0x20], 7
jle 0x10002768
mov dword [ebp - 0x1c], 4
lea ecx, [ebp - 0x1e4]
push 3
call fcn.100034db
mov dword [ebp - 0x18], ebx
jmp 0x100026d5
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1e4]
mov dword [eax + ecx*4], 1
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x100026c2
mov dword [ebp - 0x1c], ebx
cmp dword [ebp - 0x1c], ebx
jl 0x1000274d
mov eax, dword [ebp - 0x1c]
xor edx, edx
mov eax, dword [ebp + eax*4 - 0x3c]
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp + eax*4 - 0x3c]
mov eax, dword [ebp - 0x1c]
cmp ecx, eax
mov eax, dword [ebp - 0x1c]
setg dl
xor ecx, ecx
cmp eax, edx
setle cl
xor edx, edx
imul eax, ecx, 0x4ad3
cmp eax, 0xba20
mov eax, dword [ebp - 0x3c]
setge dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x1c]
setle cl
xor edx, edx
cmp ecx, 0x5ed9a924
setl dl
mov dword [ebp + eax*4 - 0x3c], edx
xor edx, edx
inc dword [ebp - 0x2c]
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp + eax*4 - 0x3c]
mov eax, dword [ebp - 0x2c]
cmp eax, ecx
setne dl
mov dword [ebp - 0x3c], edx
dec dword [ebp - 0x1c]
jns 0x100026e3
lea ecx, [ebp - 0x1e4]
call fcn.1000355e
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 7
jg 0x100026a9
xor edx, edx
inc edx
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x3c], eax
test eax, eax
jne 0x10002775
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x2c]
xor ecx, ecx
cmp eax, edx
setl cl
mov dword [ebp - 0x20], ecx
cmp dword [ebp - 0x20], 3
je 0x1000278f
mov esi, ebx
cmp dword [ebp - 0x2c], ebx
je 0x10002791
mov esi, edx
mov eax, dword [ebp - 0x2c]
xor ecx, ecx
cmp esi, eax
setle cl
cmp ecx, 0x6d9e96b
jge 0x100027a8
cmp dword [ebp - 0x2c], ebx
je 0x100027b2
cmp dword [ebp - 0x3c], ebx
je 0x100027b2
cmp dword [ebp - 0x2c], ebx
jne 0x100027b4
mov edx, ebx
mov dword [ebp - 0x1c], edx
cmp dword [ebp - 0x1c], ebx
je 0x100028d5
mov dword [ebp - 0x34], 0xf1939efd
mov dword [ebp - 0x18], ebx
jmp 0x100027dd
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x108], 0xc6f7
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x100027cc
mov dword [ebp - 0x1c], ebx
jmp 0x100028c9
mov dword [ebp - 0x18], 0x4416da84
mov dword [ebp - 0x24], 0xfffffffd
mov dword [ebp - 0x38], ebx
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
inc dword [ebp - 0x104]
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x18]
neg ecx
sbb ecx, ecx
xor edx, edx
neg ecx
sub ecx, eax
mov eax, dword [ebp - 0x18]
cmp ecx, eax
mov eax, dword [ebp - 0x18]
setg dl
xor ecx, ecx
cmp edx, eax
setne cl
cmp ecx, dword [ebp - 0x3c]
jge 0x10002873
push 2
lea ecx, [ebp - 0x19c]
call fcn.100034db
mov dword [ebp - 0x24], ebx
jmp 0x10002854
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x19c]
or dword [eax + ecx*4], 0xffffffff
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 2
jl 0x10002844
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x19c]
mov dword [eax + 4], ecx
lea ecx, [ebp - 0x19c]
call fcn.1000355e
jmp 0x100028c6
mov dword [ebp - 0x30], 0xd3351f4a
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x108]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp - 0x1c]
sub edx, eax
sub edx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x24]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setl cl
xor eax, eax
imul ecx, dword [ebp - 0x20]
cmp ecx, 0x94b
mov ecx, 0xcabd119e
setle al
dec eax
cmp ecx, eax
sbb eax, eax
inc eax
mov dword [ebp - 0x3c], eax
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xfffffff1
jge 0x100027eb
jmp 0x100028e5
mov byte [ebp - 0x25], bl
cmp byte [ebp - 0x25], 0
je 0x100028e5
push ebx
call dword [sym.imp.USER32.dll_CharUpperW]
mov dword [ebp - 0x4c], ebx
mov eax, 0x2d5e48d3
mov dword [ebp - 0x9c], eax
mov dword [ebp - 0x98], eax
mov dword [ebp - 0x94], eax
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x34], 0x35ae
cmp dword [ebp - 0x34], 0x38fc
jle 0x1000295c
push ebx
call dword [sym.imp.COMDLG32.dll_GetOpenFileNameW]
mov edi, ebx
mov esi, ebx
mov dword [ebp - 0x38], ebx
mov ecx, ebx
mov eax, esi
shl eax, cl
mov ecx, 0x1007be38
and eax, edi
cdq
push edx
push eax
call fcn.10003364
inc ebx
cmp ebx, 0x23d5
jl 0x10002923
inc esi
push 0
pop ebx
cmp esi, 0x19f4
jl 0x10002920
inc edi
cmp edi, 0x2b35
jl 0x1000291e
call dword [sym.imp.KERNEL32.dll_GetUserDefaultLangID]
mov byte [ebp - 4], 0xd
cmp dword [ebp - 0x34], 0x34a7
jge 0x10002996
mov edx, str.pjvhwgyhq_swbrrwk_eai_bhk_yvumsd_vhsaym
mov ecx, 0x1007be38
call fcn.100055b2
jmp 0x10002996
mov dword [ebp - 4], 0xc
mov dword [ebp - 0x24], ebx
jmp 0x100029b0
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x5c], 4
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 2
jl 0x100029a2
mov dword [ebp - 0x9c], ebx
cmp dword [ebp - 0x9c], 0xffffffe4
jle 0x10002ca2
push 2
lea ecx, [ebp - 0xd4]
call fcn.100034db
mov byte [ebp - 4], 0xf
mov dword [ebp - 0x24], ebx
jmp 0x100029f2
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0xd4]
mov dword [eax + ecx*4], 0xfffffffa
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 2
jl 0x100029df
mov eax, dword [ebp - 0xd4]
add eax, 4
mov dword [eax], 1
cmp dword [eax], ebx
jl 0x10002c02
mov dword [ebp - 0x1c], 0x7a9a9718
mov dword [ebp - 0x34], 0x8acdd1f6
mov dword [ebp - 0x1c], ebx
cmp dword [ebp - 0x1c], 1
jg 0x10002bf2
mov dword [ebp - 0x30], 0x70ea
cmp dword [ebp - 0x30], 0x7150
jle 0x10002a8a
mov edi, ebx
mov esi, ebx
mov eax, edi
mov ecx, ebx
cdq
idiv esi
mov dword [ebp - 0x34], ecx
mov eax, edx
mov dword [ebp - 0x38], eax
cdq
idiv ecx
mov ecx, 0x1007be38
mov eax, edx
cdq
push edx
push eax
call fcn.10003364
mov ecx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x38]
inc ecx
mov dword [ebp - 0x34], ecx
cmp ecx, 0x559c
jl 0x10002a4d
inc esi
cmp esi, 0x5f5e
jl 0x10002a3e
inc edi
cmp edi, 0x1619
jl 0x10002a3c
push ebx
call dword [sym.imp.GDI32.dll_CreateFontIndirectA]
push 4
lea ecx, [ebp - 0x178]
call fcn.100034db
mov byte [ebp - 4], 0x11
cmp dword [ebp - 0x30], 0x6d7c
jge 0x10002ad1
mov edx, str.qudpyv_xggwt_gtkd_fmweevkr_lfmdr_kmeett_vvubf
mov ecx, 0x1007be38
call fcn.100055b2
jmp 0x10002ad1
mov dword [ebp - 4], 0x10
mov dword [ebp - 0x34], 1
mov dword [ebp - 0x2c], ebx
jmp 0x10002af5
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x274], 0xffffffff
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 3
jl 0x10002ae4
mov dword [ebp - 0x2c], ebx
jmp 0x10002b13
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x178]
mov dword [eax + ecx*4], 0x1efae07d
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 4
jl 0x10002b00
mov dword [ebp - 0x2c], ebx
jmp 0x10002b2f
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0xfc], 0xfb95c1f4
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 1
jl 0x10002b1e
mov edi, dword [ebp - 0xd4]
mov ecx, 0xffff6423
mov eax, dword [edi + 4]
mov eax, dword [ebp + eax*4 - 0x5c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x5c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x5c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov esi, dword [edi + 4]
mov edx, dword [ebp + esi*4 - 0x5c]
mov eax, dword [ebp - 0x58]
sub ecx, eax
xor eax, eax
add edx, ecx
cmp edx, esi
setle al
xor edx, edx
cmp eax, esi
mov eax, dword [ebp - 0x1c]
setge dl
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0x5c]
cmp eax, edx
setg cl
mov dword [ebp - 0x26c], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x90]
mov eax, dword [ebp - 0x178]
mov dword [eax + 8], ebx
mov eax, dword [ebp - 0x1c]
mov edx, dword [ebp + eax*4 - 0x5c]
mov eax, dword [ebp - 0x90]
test eax, eax
sets cl
add edx, ecx
lea ecx, [ebp - 0x178]
mov dword [ebp - 0x34], edx
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x5c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [edi + 4]
mov eax, dword [ebp + eax*4 - 0x5c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0xfc]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x34], eax
mov byte [ebp - 4], 0xf
call fcn.1000355e
inc dword [ebp - 0x1c]
jmp 0x10002a20
mov eax, dword [ebp - 0xd4]
add eax, 4
dec dword [eax]
jmp 0x10002a07
mov byte [ebp - 0x25], bl
mov dword [ebp - 0x34], 0x57b2
cmp dword [ebp - 0x34], 0x5a81
jle 0x10002c5f
mov edi, ebx
mov esi, ebx
mov eax, edi
lea ecx, [ebp - 0x298]
cdq
idiv esi
mov eax, edx
cdq
push edx
push eax
call fcn.10001a94
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10002c38
mov eax, dword [eax]
push eax
call fcn.1004840f
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x298]
call fcn.10003868
inc esi
cmp esi, 0x27ce
jl 0x10002c19
inc edi
cmp edi, 0x53a2
jl 0x10002c17
cmp byte [ebp - 0x25], 0
je 0x10002c71
push ebx
push 0x80
call dword [sym.imp.USER32.dll_FlashWindow]
cmp dword [ebp - 0x34], 0x552e
jge 0x10002c85
push str.ehvhldo_ihp_shxy_vjykduw
call fcn.1004840f
pop ecx
lea ecx, [ebp - 0xd4]
mov dword [ebp - 4], 0xc
call fcn.1000355e
dec dword [ebp - 0x9c]
jmp 0x100029bc
push 0x5f
pop eax
push 2
mov byte [ebp - 0x48], bl
mov ecx, ebx
mov dword [ebp - 0x47], 0xbe680217
mov word [ebp - 0x50], ax
pop esi
cmp esi, 2
jne 0x10002cc4
push 3
pop ecx
push ecx
pop esi
jmp 0x10002ced
movzx edx, byte [ebp + esi - 0x47]
mov eax, esi
sub eax, ecx
movzx eax, byte [ebp + eax - 0x4a]
movzx ecx, word [ebp + eax*2 - 0x50]
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
movzx eax, byte [ebp + esi - 0x48]
add ecx, edx
mov word [ebp + eax*2 - 0x50], cx
mov ecx, ebx
add esi, 2
cmp esi, 5
jb 0x10002cb8
xor eax, eax
mov word [ebp - 0x4e], ax
mov dword [ebp - 0x18], 0xc75b57fd
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], 0xa
jne 0x10002e38
mov dword [ebp - 0x24], 0x82bd7b1c
mov dword [ebp - 0x1c], ebx
jmp 0x10002d29
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x7c], 0x49dfcf09
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 1
jl 0x10002d1b
mov dword [ebp - 0x1c], ebx
jmp 0x10002d45
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x280], 0xfffffff7
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x10002d34
mov dword [ebp - 0x1c], 0x60d8
cmp dword [ebp - 0x1c], 0x6300
jle 0x10002dd2
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x34], 0x17f4
mov esi, dword [ebp - 0x24]
mov edi, ebx
mov eax, esi
lea ecx, [ebp - 0x2b0]
cdq
idiv edi
mov eax, edx
cdq
push edx
push eax
call fcn.10001a94
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10002d94
mov eax, dword [eax]
push eax
call fcn.1004840f
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x2b0]
call fcn.10003868
inc edi
cmp edi, 0x7095
jl 0x10002d75
mov esi, dword [ebp - 0x30]
add dword [ebp - 0x24], esi
dec dword [ebp - 0x34]
jne 0x10002d70
inc esi
mov dword [ebp - 0x30], esi
cmp esi, 0x57e
jl 0x10002d66
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SystemTimeToTzSpecificLocalTime]
mov dword [ebp - 0x24], 0xffffffe8
jmp 0x10002e0f
mov dword [ebp - 0x20], 0xffffffff
mov dword [ebp - 0x20], ebx
cmp dword [ebp - 0x20], ebx
jl 0x10002e06
mov eax, dword [ebp - 0x20]
cmp dword [ebp + eax*4 - 0x7c], ebx
jne 0x10002e06
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp + eax*4 - 0x7c]
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x7c], ecx
dec dword [ebp - 0x20]
jns 0x10002dea
mov eax, dword [ebp - 0x278]
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0x10
jg 0x10002ddb
cmp dword [ebp - 0x1c], 0x5d98
jge 0x10002e29
push str.wcsj_abqoshi_aseue_aslt_wvxgnhq_oyyamur_wlof_lzrlraivo_qrvniwd_sxufifwq_lol_exc_ixfnzezn
call fcn.1004840f
pop ecx
mov dword [ebp - 4], 0xc
inc dword [ebp - 0x18]
jmp 0x10002d05
xor eax, eax
mov dword [ebp - 0x1c4], 7
mov word [ebp - 0x1d8], ax
lea ecx, [ebp - 0x1d8]
lea eax, [ebp - 0x50]
mov dword [ebp - 0x1c8], ebx
push eax
call fcn.10003954
mov byte [ebp - 4], 0x17
mov dword [ebp - 0x50], ebx
push dword [ebp - 0x134]
cmp dword [ebp - 0x130], 8
lea eax, [ebp - 0x144]
push ebx
cmovae eax, dword [ebp - 0x144]
lea ecx, [ebp - 0x20c]
push eax
call fcn.10003cd0
cmp eax, 0xffffffff
je 0x10002ead
push 0xffffffffffffffff
push ebx
lea ecx, [ebp - 0x1d8]
push ecx
push 1
push eax
lea ecx, [ebp - 0x20c]
call fcn.100039dc
jmp 0x10002e67
push dword [ebp - 0x54]
movdqa xmm0, xmmword [0x1006f0c0]
lea eax, [ebp - 0x20c]
push eax
lea eax, [ebp - 0x21c]
mov dword [ebp - 0x24], 3
push eax
push ebx
lea ecx, [ebp - 0x88]
mov dword [ebp - 0x88], ebx
movdqu xmmword [ebp - 0x21c], xmm0
mov dword [ebp - 0x84], ebx
mov dword [ebp - 0x80], ebx
call fcn.10005cfc
mov byte [ebp - 4], 0x18
mov dword [ebp - 0x24], 0xffffffe6
cmp dword [ebp - 0x24], 0x12
je 0x10003098
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x20], 0xfffffffb
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x88]
mov dword [eax + 0xc], ecx
mov dword [ebp - 0x20], 3
cmp dword [ebp - 0x20], ebx
jl 0x10003042
mov eax, dword [ebp - 0x20]
lea ecx, [ebp - 0xec]
push dword [ebp - 0x54]
movdqa xmm0, xmmword [0x1006f0b0]
lea eax, [ebp - 0x24c]
push eax
lea eax, [ebp - 0x25c]
mov dword [ebp - 0xec], ebx
push eax
push ebx
movdqu xmmword [ebp - 0x25c], xmm0
mov dword [ebp - 0xe8], ebx
mov dword [ebp - 0xe4], ebx
call fcn.10005cfc
mov byte [ebp - 4], 0x19
mov esi, dword [ebp - 0xec]
mov dword [esi + 0xc], 3
cmp dword [esi + 0xc], ebx
jl 0x10003014
mov dword [ebp - 0x34], 0xc9cd49fc
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x88]
mov eax, dword [eax + ecx*4]
mov dword [ebp - 0x34], eax
mov edx, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x88]
mov eax, dword [esi + 0xc]
mov eax, dword [ecx + eax*4]
sub eax, dword [ecx + edx*4]
mov edx, dword [ebp - 0x34]
mov ecx, dword [esi + 0xc]
add edx, eax
mov eax, dword [ebp - 0x88]
mov dword [eax + ecx*4], edx
mov byte [ebp - 0x25], bl
mov dword [ebp - 0x34], 0x1168
cmp dword [ebp - 0x34], 0x129d
jg 0x1000304a
cmp byte [ebp - 0x25], 0
je 0x10002ff1
push 0x14e6
push ebx
push ebx
push 0x136f
push ebx
push 0x13fd
call dword [sym.imp.GDI32.dll_CreateDIBitmap]
cmp dword [ebp - 0x34], 0xe4f
jge 0x10003005
push str.msel_uvttimj_luubi_ueyzz_ifurnwsmy_zll_szaijjxtd_gxzjutbk_rmor_adtmvvy
call fcn.1004840f
pop ecx
mov dword [ebp - 4], 0x19
dec dword [esi + 0xc]
jmp 0x10002f7e
mov byte [ebp - 0x25], bl
cmp byte [ebp - 0x25], 0
je 0x1000302b
push ebx
push ebx
push 0x1f90
push ebx
call dword [sym.imp.KERNEL32.dll_GetFullPathNameW]
lea ecx, [ebp - 0xec]
mov byte [ebp - 4], 0x18
call fcn.1000355e
dec dword [ebp - 0x20]
jmp 0x10002f22
inc dword [ebp - 0x24]
jmp 0x10002efb
mov esi, ebx
mov edi, ebx
mov ecx, edi
mov eax, esi
sar eax, cl
lea ecx, [ebp - 0x2c8]
cdq
push edx
push eax
call fcn.10001a94
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x1000306c
mov eax, dword [eax]
push eax
call fcn.1004840f
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x2c8]
call fcn.10003868
inc edi
cmp edi, 0x5de9
jl 0x1000304e
inc esi
cmp esi, 0x342e
jl 0x1000304c
jmp 0x100023e0
lea ecx, [ebp - 0x88]
mov byte [ebp - 4], 0x17
call fcn.1000355e
mov ecx, dword [ebp - 0x8c]
lea eax, [ebp - 0x20c]
push eax
lea edx, [ebp - 0x1c0]
call fcn.10005789
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x1d8]
call fcn.10003d73
push ebx
push 1
lea ecx, [ebp - 0x144]
call fcn.10003d73
push ebx
push 1
lea ecx, [ebp - 0x20c]
call fcn.10003d73
push ebx
push 1
lea ecx, [ebp - 0x1c0]
call fcn.10003d73
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x8c]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret