Function at 0x100169f0
Capabilities:
Contain obfuscated stackstrings
Delete directory
Encode data using base64

Disassembly:
push ebp
mov ebp, esp
and esp, 0xffffffc0
sub esp, 0xf4
push ebx
lea ecx, [eax + 0xdf9]
push esi
push edi
mov esi, eax
mov dword [esp + 0xac], ecx
cmp eax, ecx
ja case.0x10017f0a.31544
mov ebx, dword [esp + 0x8c]
mov edi, dword [ebp + 8]
mov edx, dword [esp + 0x7c]
cmp esi, 0x1757
ja 0x1001724a
je 0x10017234
cmp esi, 0x156d
ja 0x10016f10
je 0x10016e5b
cmp esi, 0x1478
ja 0x10016db2
je 0x10016d5e
cmp esi, 0x13e5
ja 0x10016c0f
je 0x10016ad5
cmp esi, 0x281
je 0x10016a9d
cmp esi, 0x13b4
jne case.0x10017f0a.31398
mov eax, dword [esp + 0xac]
mov ecx, dword [esp + 0xac]
mov dword [esp + 0xa0], eax
mov dword [esp + 0x98], ecx
jmp case.0x10017f0a.31398
mov eax, dword [ebp + 0x18]
fld qword [eax]
mov eax, dword [ebp + 0x14]
mov ecx, dword [ebp + 0x10]
mov edx, dword [ebp + 0xc]
sub esp, 0x20
fstp qword [esp + 0x18]
fld qword [eax]
fstp qword [esp + 0x10]
fld qword [ecx]
fstp qword [esp + 8]
fld qword [edx]
fstp qword [esp]
push str.test_quadto__g__g___g__g__n
call fcn.10028604
add esp, 0x24
jmp case.0x10017f0a.31398
push 0x10b1bef8
lea ecx, [esp + 0x7a]
push ecx
lea edx, [esp + 0x40]
xor eax, eax
push edx
mov dword [esp + 0x44], 0x40003
mov dword [esp + 0x48], 0x60005
mov dword [esp + 0x4c], 0x80007
mov dword [esp + 0x50], 0xa0009
mov dword [esp + 0x54], 0xd000b
mov dword [esp + 0x58], 0x11000f
mov dword [esp + 0x5c], 0x170013
mov dword [esp + 0x60], 0x1f001b
mov dword [esp + 0x64], 0x2b0023
mov dword [esp + 0x68], 0x3b0033
mov dword [esp + 0x6c], 0x530043
mov dword [esp + 0x70], 0x730063
mov dword [esp + 0x74], 0xa30083
mov dword [esp + 0x78], 0xe300c3
mov dword [esp + 0x7c], 0x102
mov word [esp + 0x80], ax
call fcn.100272a0
add esp, 0xc
push 0x10b1beb8
lea ecx, [esp + 0x7a]
push ecx
lea edx, [esp + 0x40]
mov eax, 0x44
push edx
mov dword [esp + 0x44], 0x100010
mov dword [esp + 0x48], 0x100010
mov dword [esp + 0x4c], 0x100010
mov dword [esp + 0x50], 0x100010
mov dword [esp + 0x54], 0x110011
mov dword [esp + 0x58], 0x110011
mov dword [esp + 0x5c], 0x120012
mov dword [esp + 0x60], 0x120012
mov dword [esp + 0x64], 0x130013
mov dword [esp + 0x68], 0x130013
mov dword [esp + 0x6c], 0x140014
mov dword [esp + 0x70], 0x140014
mov dword [esp + 0x74], 0x150015
mov dword [esp + 0x78], 0x150015
mov dword [esp + 0x7c], 0x4e0010
mov word [esp + 0x80], ax
call fcn.100272a0
add esp, 0xc
jmp case.0x10017f0a.31398
mov eax, esi
sub eax, 0x1416
je 0x10016cc4
sub eax, 0x31
jne case.0x10017f0a.31398
push 0x10b1be78
lea edx, [esp + 0x7c]
push edx
lea eax, [esp + 0x40]
push eax
mov dword [esp + 0x44], 0x100010
mov dword [esp + 0x48], 0x100010
mov dword [esp + 0x4c], 0x110011
mov dword [esp + 0x50], 0x120012
mov dword [esp + 0x54], 0x130013
mov dword [esp + 0x58], 0x140014
mov dword [esp + 0x5c], 0x150015
mov dword [esp + 0x60], 0x160016
mov dword [esp + 0x64], 0x170017
mov dword [esp + 0x68], 0x180018
mov dword [esp + 0x6c], 0x190019
mov dword [esp + 0x70], 0x1a001a
mov dword [esp + 0x74], 0x1b001b
mov dword [esp + 0x78], 0x1c001c
mov dword [esp + 0x7c], 0x1d001d
mov dword [esp + 0x80], 0x400040
call fcn.100272a0
add esp, 0xc
jmp case.0x10017f0a.31398
xor ecx, ecx
push 0x10b1be38
lea eax, [esp + 0x7c]
mov dword [esp + 0x78], ecx
push eax
lea ecx, [esp + 0x40]
push ecx
mov dword [esp + 0x44], 0x20001
mov dword [esp + 0x48], 0x40003
mov dword [esp + 0x4c], 0x70005
mov dword [esp + 0x50], 0xd0009
mov dword [esp + 0x54], 0x190011
mov dword [esp + 0x58], 0x310021
mov dword [esp + 0x5c], 0x610041
mov dword [esp + 0x60], 0xc10081
mov dword [esp + 0x64], 0x1810101
mov dword [esp + 0x68], 0x3010201
mov dword [esp + 0x6c], 0x6010401
mov dword [esp + 0x70], 0xc010801
mov dword [esp + 0x74], 0x18011001
mov dword [esp + 0x78], 0x30012001
mov dword [esp + 0x7c], 0x60014001
call fcn.100272a0
add esp, 0xc
jmp case.0x10017f0a.31398
xor edx, edx
mov ax, dx
movzx ecx, ax
mov eax, ecx
shl ecx, 0x10
or eax, ecx
mov dword [esp + 0xc0], eax
mov dword [esp + 0xc4], eax
mov dword [esp + 0xc8], eax
mov dword [esp + 0xcc], eax
mov dword [esp + 0xd0], eax
mov dword [esp + 0xd4], eax
mov dword [esp + 0xd8], eax
mov dword [esp + 0xdc], eax
mov dword [esp + 0x20], 0x10
jmp case.0x10017f0a.31398
lea eax, [esi - 0x14a9]
cmp eax, 0x93
ja case.0x10017f0a.31398
movzx eax, byte [eax + 0x1001813c]
jmp dword [eax*4 + 0x10018128]
mov eax, 0xf
jmp 0x10016de0
cmp word [esp + eax*2 + 0xc0], 0
jne 0x10016e4d
dec eax
cmp eax, 1
jae 0x10016de0
mov dword [esp + 0x30], eax
jmp case.0x10017f0a.31398
mov eax, dword [esp + 0x30]
cmp edx, eax
jbe case.0x10017f0a.31398
mov dword [esp + 0x7c], eax
jmp case.0x10017f0a.31398
mov ecx, dword [ebp + 0x10]
mov ecx, dword [ecx]
xor edx, edx
mov dword [esp + 0x78], edx
test ecx, ecx
je 0x10016e3f
mov esi, esi
mov eax, dword [ebp + 0xc]
movzx eax, word [eax + edx*2]
inc word [esp + eax*2 + 0xc0]
lea eax, [esp + eax*2 + 0xc0]
inc edx
cmp edx, ecx
jb 0x10016e20
mov dword [esp + 0x78], edx
mov ecx, dword [ebp + 0x18]
mov edx, dword [ecx]
mov dword [esp + 0x7c], edx
jmp case.0x10017f0a.31398
mov dword [esp + 0x30], eax
mov esi, 0x150b
jmp case.0x10017f0a.31398
cmp dword [esp + 0x30], 0
jne 0x10016ed8
xor ecx, ecx
cmp ecx, 0xa2
ja case.0x10016e77.1
movzx eax, byte [ecx + 0x100181f0]
jmp dword [eax*4 + 0x100181d0]
xor eax, eax
mov word [esp + 0x1e], ax
jmp case.0x10016e77.1
mov byte [esp + 0x1c], 0x40
jmp case.0x10016e77.1
mov dword [esp + 0x18], 0
jmp case.0x10016e77.1
mov edi, dword [ebp + 0x14]
mov edi, dword [edi]
mov eax, dword [esp + 0x1c]
mov dword [edi], eax
mov edi, dword [ebp + 0x14]
add dword [edi], 4
mov edi, dword [edi]
mov dword [edi], eax
mov edi, dword [ebp + 0x14]
add dword [edi], 4
mov edi, dword [ebp + 8]
jmp case.0x10016e77.1
mov eax, dword [ebp + 0x18]
mov dword [eax], 1
jmp case.0x10016e77.1
mov byte [esp + 0x1d], 1
add ecx, 0x1b
lea eax, [ecx + 0x36b1]
cmp eax, 0x3753
jbe 0x10016e68
mov ecx, dword [esp + 0x30]
mov eax, 1
mov dword [esp + 0x88], eax
cmp ecx, eax
jbe case.0x10017f0a.31398
cmp word [esp + eax*2 + 0xc0], 0
jne 0x1001701a
inc eax
cmp eax, ecx
jb 0x10016ef0
mov dword [esp + 0x88], eax
jmp case.0x10017f0a.31398
cmp esi, 0x1662
ja 0x100170c7
je 0x10017046
lea eax, [esi - 0x159e]
cmp eax, 0x93
ja case.0x10017f0a.31398
movzx ecx, byte [eax + 0x100182a8]
jmp dword [ecx*4 + 0x10018294]
mov dword [esp + 0x24], 1
jmp case.0x10017f0a.31398
mov dword [esp + 0x20], 1
mov ecx, dword [esp + 0x20]
lea ebx, [ebx]
mov edx, 0x4619
mov eax, edx
sub eax, 0x4619
je 0x10016fc1
sub eax, 0x13
je 0x10016fb0
sub eax, 0x13
jne 0x10016fc5
cmp dword [esp + 0x24], eax
jge 0x10016fc5
mov ecx, 0x5d9e
mov eax, ecx
sub eax, 0x5d9e
je 0x10016f97
sub eax, 0x49
je case.0x10017f0a.31544
jmp 0x10016f9f
mov dword [esp + 0x18], 0xffffffff
add ecx, 0x49
cmp ecx, 0x5de7
jbe 0x10016f83
mov ecx, dword [esp + 0x20]
jmp 0x10016fc5
movzx eax, word [esp + ecx*2 + 0xc0]
sub dword [esp + 0x24], eax
mov edi, dword [ebp + 8]
jmp 0x10016fc5
shl dword [esp + 0x24], 1
add edx, 0x13
cmp edx, 0x463f
jbe 0x10016f65
inc ecx
mov dword [esp + 0x20], ecx
cmp ecx, 0xf
jbe 0x10016f60
cmp dword [esp + 0x24], 0
jle case.0x10017f0a.31398
cmp dword [edi], 0
je 0x10016ff5
cmp dword [esp + 0x30], 1
je case.0x10017f0a.31398
mov eax, 0x35b1
cmp eax, eax
je 0x10017fe5
add eax, 0x36
cmp eax, 0x35b1
jbe 0x10016ffc
jmp case.0x10017f0a.31398
mov eax, dword [esp + 0x88]
jmp 0x10017021
mov dword [esp + 0x88], eax
mov esi, 0x159e
cmp edx, eax
jae case.0x10017f0a.31398
mov dword [esp + 0x7c], eax
jmp case.0x10017f0a.31398
xor ecx, ecx
mov word [esp + 0xe2], cx
jmp case.0x10017f0a.31398
mov ecx, 1
jmp 0x10017050
mov dx, word [esp + ecx*2 + 0xe0]
add dx, word [esp + ecx*2 + 0xc0]
inc ecx
mov word [esp + ecx*2 + 0xe0], dx
cmp ecx, 0xf
jb 0x10017050
mov dword [esp + 0x20], ecx
mov eax, dword [ebp + 0x10]
xor ecx, ecx
mov dword [esp + 0x78], ecx
cmp dword [eax], ecx
jbe case.0x10017f0a.31398
mov edx, dword [ebp + 0xc]
cmp word [edx + ecx*2], 0
je 0x100170b6
movzx edx, word [edx + ecx*2]
movzx eax, word [esp + edx*2 + 0xe0]
mov edx, dword [ebp + 0x1c]
mov word [edx + eax*2], cx
mov edx, dword [ebp + 0xc]
movzx eax, word [edx + ecx*2]
inc word [esp + eax*2 + 0xe0]
lea eax, [esp + eax*2 + 0xe0]
mov eax, dword [ebp + 0x10]
inc ecx
cmp ecx, dword [eax]
jb 0x10017086
mov dword [esp + 0x78], ecx
jmp case.0x10017f0a.31398
lea eax, [esi - 0x1693]
cmp eax, 0x93
ja case.0x10017f0a.31398
movzx ecx, byte [eax + 0x10018350]
jmp dword [ecx*4 + 0x1001833c]
mov edx, dword [esp + 0x88]
mov dword [esp + 0x78], 0
mov dword [esp + 0x20], edx
jmp case.0x10017f0a.31398
mov eax, dword [ebp + 0x14]
mov ecx, dword [eax]
mov dword [esp + 0x90], ecx
jmp case.0x10017f0a.31398
mov dword [esp + 0x28], 0
jmp case.0x10017f0a.31398
mov eax, dword [edi]
sub eax, 0
je 0x10017166
dec eax
je 0x100171ac
mov ecx, 0x5998
mov esi, 0x10b1be78
mov edx, 0x10b1be38
lea esp, [esp]
mov eax, ecx
sub eax, 0x5998
je 0x1001720d
sub eax, 0x18
jne 0x1001721b
mov dword [esp + 0xa4], 0xffffffff
jmp 0x1001721b
mov edx, dword [ebp + 0x1c]
mov ecx, 0x7396
mov esi, esi
mov eax, ecx
sub eax, 0x7396
je 0x10017193
sub eax, 0x62
jne 0x100171a1
mov dword [esp + 0xa4], 0x13
mov esi, 0x1693
jmp case.0x10017f0a.31398
mov dword [esp + 0x98], edx
mov dword [esp + 0xa0], edx
add ecx, 0x62
cmp ecx, 0x73f8
jbe 0x10017170
mov ecx, 0x4d8
mov eax, ecx
sub eax, 0x4d8
je 0x100171ec
sub eax, 0x5a
je 0x100171d9
sub eax, 0x5a
jne 0x100171fd
mov dword [esp + 0xa4], 0x100
mov esi, 0x1693
jmp case.0x10017f0a.31398
mov eax, 0x10b1beb8
sub eax, 0x202
mov dword [esp + 0x98], eax
jmp 0x100171fd
mov eax, 0x10b1bef8
sub eax, 0x202
mov dword [esp + 0xa0], eax
add ecx, 0x5a
cmp ecx, 0x58c
jbe 0x100171b1
jmp 0x1001712a
mov dword [esp + 0xa0], edx
mov dword [esp + 0x98], esi
add ecx, 0x18
cmp ecx, 0x59b0
jbe 0x10017140
mov esi, 0x1693
jmp case.0x10017f0a.31398
mov ebx, edx
mov dword [esp + 0x8c], ebx
mov dword [esp + 0x2c], 0
jmp case.0x10017f0a.31398
cmp esi, 0x583e
ja 0x10017862
je 0x10017851
cmp esi, 0x187d
ja 0x100177e0
je 0x100177d6
lea eax, [esi - 0x1788]
cmp eax, 0xc4
ja case.0x10017f0a.31398
movzx eax, byte [eax + 0x100183fc]
jmp dword [eax*4 + 0x100183e4]
mov esi, dword [esp + 0x34]
mov edx, dword [esp + 0x28]
mov ecx, dword [ebp + 0x1c]
mov eax, dword [esp + 0x78]
lea edi, [ecx + eax*2]
mov dword [esp + 0xa8], 0x4ac5
mov dword [esp + 0xb4], edi
mov eax, dword [esp + 0xa8]
cmp eax, 0x4b67
ja 0x1001743f
je 0x10017411
sub eax, 0x4ac5
je 0x10017364
sub eax, 0x36
je 0x1001733c
sub eax, 0x36
jne 0x1001762c
mov ecx, dword [esp + 0x94]
mov dword [esp + 0x88], ecx
mov eax, 0x1bd6
cmp eax, eax
jne 0x10017323
mov ecx, dword [esp + 0x2c]
sub dword [esp + 0x94], esi
mov esi, dword [esp + 0x1c]
shr edx, cl
mov ecx, dword [esp + 0x90]
add edx, dword [esp + 0x94]
mov dword [ecx + edx*4], esi
mov esi, dword [esp + 0x34]
mov edx, dword [esp + 0x28]
add eax, 0xd
cmp eax, 0x1bd6
jbe 0x100172f7
cmp dword [esp + 0x94], 0
jne 0x100172f0
jmp 0x1001762c
mov ecx, dword [esp + 0x20]
sub ecx, dword [esp + 0x2c]
mov esi, 1
shl esi, cl
mov eax, 1
mov ecx, ebx
shl eax, cl
mov dword [esp + 0x34], esi
mov dword [esp + 0x94], eax
jmp 0x1001762c
mov al, byte [esp + 0x20]
sub al, byte [esp + 0x2c]
movzx ecx, word [edi]
mov byte [esp + 0x1d], al
mov eax, ecx
cmp eax, dword [esp + 0xa4]
jge 0x100173a0
mov eax, 0x76d0
cmp eax, eax
jne 0x10017391
mov byte [esp + 0x1c], 0
mov word [esp + 0x1e], cx
add eax, 0x17
cmp eax, 0x76d0
jbe 0x10017385
jmp 0x1001762c
jle 0x100173ed
mov eax, 0x5bd8
cmp eax, eax
jne 0x100173dd
movzx ecx, word [edi]
mov edx, dword [esp + 0x98]
mov edi, dword [esp + 0xb4]
mov esi, dword [esp + 0x34]
add ecx, ecx
mov dl, byte [ecx + edx]
mov byte [esp + 0x1c], dl
mov edx, dword [esp + 0xa0]
mov cx, word [ecx + edx]
mov edx, dword [esp + 0x28]
mov word [esp + 0x1e], cx
add eax, 0x51
cmp eax, 0x5bd8
jbe 0x100173a9
jmp 0x1001762c
mov eax, 0x35c9
cmp eax, eax
jne 0x10017402
xor ecx, ecx
mov byte [esp + 0x1c], 0x60
mov word [esp + 0x1e], cx
add eax, 0x42
cmp eax, 0x35c9
jbe 0x100173f4
jmp 0x1001762c
mov ecx, dword [esp + 0x20]
dec ecx
mov esi, 1
shl esi, cl
mov dword [esp + 0x34], esi
test esi, edx
je 0x1001762c
lea esp, [esp]
shr esi, 1
test esi, edx
jne 0x10017430
mov dword [esp + 0x34], esi
jmp 0x1001762c
sub eax, 0x4b9d
je 0x10017697
sub eax, 0x36
je 0x1001764d
sub eax, 0x36
jne 0x1001762c
mov ecx, dword [esp + 0x7c]
cmp dword [esp + 0x20], ecx
jbe 0x1001762c
mov esi, dword [esp + 0xb8]
and esi, dword [esp + 0x28]
cmp esi, dword [esp + 0x9c]
je 0x10017624
mov edi, 0x2cba
jmp 0x10017490
lea eax, [edi - 0x2cba]
cmp eax, 0x84
ja case.0x100174a8.11451
movzx ecx, byte [eax + 0x100184e4]
jmp dword [ecx*4 + 0x100184c4]
mov ebx, dword [esp + 0x20]
sub ebx, dword [esp + 0x2c]
mov dword [esp + 0x8c], ebx
jmp case.0x100174a8.11451
mov eax, 1
mov ecx, ebx
shl eax, cl
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x2c]
add eax, ebx
cmp eax, dword [esp + 0x30]
jae case.0x100174a8.11451
mov ecx, 0x31dc
lea edx, [esp + eax*2 + 0xc0]
lea esp, [esp]
mov eax, ecx
sub eax, 0x31dc
je 0x10017516
sub eax, 0x33
je 0x10017509
sub eax, 0x33
jne 0x1001752e
shl dword [esp + 0x24], 1
jmp 0x1001752e
inc ebx
mov dword [esp + 0x8c], ebx
add edx, 2
jmp 0x1001752e
movzx ebx, word [edx]
mov eax, dword [esp + 0x24]
sub eax, ebx
mov ebx, dword [esp + 0x8c]
mov dword [esp + 0x24], eax
test eax, eax
jle case.0x100174a8.11516
add ecx, 0x33
cmp ecx, 0x3242
jbe 0x100174f0
mov eax, dword [esp + 0x2c]
add eax, ebx
cmp eax, dword [esp + 0x30]
jb 0x100174e0
jmp case.0x100174a8.11451
mov ecx, dword [ebp + 8]
mov eax, dword [ecx]
cmp eax, 1
jne 0x10017561
cmp dword [esp + 0x80], 0x354
jae 0x10017573
cmp eax, 2
jne 0x1001758a
cmp dword [esp + 0x80], 0x250
jb 0x1001758a
mov eax, 0x6cfc
cmp eax, eax
je 0x10017f4c
add eax, 0x41
cmp eax, 0x6cfc
jbe 0x1001757a
mov dword [esp + 0x9c], esi
jmp case.0x100174a8.11451
mov edx, 1
mov ecx, ebx
shl edx, cl
mov edi, 0x2cfc
add dword [esp + 0x80], edx
jmp case.0x100174a8.11451
mov eax, dword [ebp + 0x14]
mov eax, dword [eax]
mov ecx, dword [esp + 0x90]
mov edx, dword [esp + 0x9c]
sub ecx, eax
sar ecx, 2
mov word [eax + edx*4 + 2], cx
jmp case.0x100174a8.11451
mov ecx, dword [ebp + 0x14]
mov edx, dword [ecx]
mov eax, dword [esp + 0x9c]
mov byte [edx + eax*4], bl
mov ecx, dword [ecx]
mov dl, byte [esp + 0x7c]
mov byte [ecx + eax*4 + 1], dl
jmp case.0x100174a8.11451
cmp dword [esp + 0x2c], 0
jne 0x100175f6
mov edx, dword [esp + 0x7c]
mov dword [esp + 0x2c], edx
mov ecx, dword [esp + 0x90]
mov edx, dword [esp + 0x88]
lea eax, [ecx + edx*4]
mov dword [esp + 0x90], eax
add edi, 0x16
cmp edi, 0x2d3e
jbe 0x10017490
mov edi, dword [esp + 0xb4]
mov edx, dword [esp + 0x28]
mov esi, dword [esp + 0x34]
mov eax, dword [esp + 0xa8]
add eax, 0x36
mov dword [esp + 0xa8], eax
cmp eax, 0x4c09
jbe 0x100172b1
jmp 0x10017295
mov eax, dword [esp + 0x20]
lea eax, [esp + eax*2 + 0xc0]
mov ecx, 0xffff
add word [eax], cx
jne 0x1001762c
mov ecx, dword [esp + 0x20]
mov eax, 0x6e54
cmp eax, eax
jne 0x1001768b
cmp ecx, dword [esp + 0x30]
je case.0x10017286.6171
movzx edx, word [edi]
mov ecx, dword [ebp + 0xc]
movzx ecx, word [ecx + edx*2]
mov esi, dword [esp + 0x34]
mov edx, dword [esp + 0x28]
mov dword [esp + 0x20], ecx
add eax, 0x57
cmp eax, 0x6e54
jbe 0x1001766d
jmp 0x1001762c
test esi, esi
je 0x100176cc
mov eax, 0x334d
cmp eax, eax
jne 0x100176ab
lea ecx, [esi - 1]
and edx, ecx
add edx, esi
add eax, 0x10
cmp eax, 0x334d
jbe 0x100176a2
inc dword [esp + 0x78]
add edi, 2
mov dword [esp + 0x28], edx
mov dword [esp + 0xb4], edi
jmp 0x1001762c
inc dword [esp + 0x78]
xor edx, edx
add edi, 2
mov dword [esp + 0x28], edx
mov dword [esp + 0xb4], edi
jmp 0x1001762c
mov edi, dword [ebp + 8]
mov esi, 0x181b
jmp case.0x10017f0a.31398
mov ecx, dword [esp + 0x80]
mov eax, dword [edi]
lea edx, [ecx - 1]
mov dword [esp + 0xb8], edx
cmp eax, 1
jne 0x10017712
cmp ecx, 0x354
jae 0x10017727
cmp eax, 2
jne case.0x10017f0a.31398
cmp ecx, 0x250
jb case.0x10017f0a.31398
mov eax, 0x5b9
cmp eax, eax
je 0x10017f4c
add eax, 0x61
cmp eax, 0x5b9
jbe 0x1001772e
jmp case.0x10017f0a.31398
cmp dword [esp + 0x28], 0
je 0x1001779e
mov ecx, 0x5ecb
mov eax, ecx
sub eax, 0x5ecb
je 0x1001777f
sub eax, 0x4a
je 0x10017776
sub eax, 0x4a
jne 0x10017793
mov eax, dword [esp + 0x28]
mov edx, dword [esp + 0x1c]
mov edi, dword [esp + 0x90]
mov dword [edi + eax*4], edx
jmp 0x10017790
xor eax, eax
mov word [esp + 0x1e], ax
jmp 0x10017793
mov dl, byte [esp + 0x20]
sub dl, byte [esp + 0x2c]
mov byte [esp + 0x1c], 0x40
mov byte [esp + 0x1d], dl
mov edi, dword [ebp + 8]
add ecx, 0x4a
cmp ecx, 0x5f5f
jbe 0x1001774f
mov eax, dword [esp + 0x80]
lea ecx, [eax*4]
mov eax, dword [ebp + 0x14]
add dword [eax], ecx
jmp case.0x10017f0a.31398
mov eax, 1
mov ecx, edx
shl eax, cl
mov dword [esp + 0x9c], 0xffffffff
mov dword [esp + 0x80], eax
jmp case.0x10017f0a.31398
mov eax, dword [ebp + 0x18]
mov dword [eax], edx
jmp case.0x10017f0a.31398
cmp esi, 0x1910
ja 0x10017819
je case.0x10017f0a.31544
mov eax, esi
sub eax, 0x18ae
je 0x10017809
sub eax, 0x31
jne case.0x10017f0a.31398
mov dword [esp + 0x18], eax
jmp case.0x10017f0a.31398
push str.___
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryA]
jmp case.0x10017f0a.31398
cmp esi, 0x580d
jne case.0x10017f0a.31398
mov eax, dword [edi]
test eax, eax
je 0x10017835
cmp dword [eax + 0x1c], 0
jne case.0x10017f0a.31398
mov eax, 0x7ee5
cmp eax, eax
je 0x10017fef
add eax, 0x37
cmp eax, 0x7ee5
jbe 0x1001783c
jmp case.0x10017f0a.31398
mov ecx, dword [edi]
mov edx, dword [ecx + 0x1c]
mov dword [esp + 0xbc], edx
jmp case.0x10017f0a.31398
cmp esi, 0x7a74
ja 0x10017ef2
je 0x10017eaa
cmp esi, 0x72dd
ja 0x10017e99
je 0x100178f6
mov eax, esi
sub eax, 0x586f
je 0x10017899
sub eax, 0x31
je case.0x10017f0a.31544
jmp case.0x10017f0a.31398
mov ecx, dword [esp + 0xbc]
mov eax, dword [ecx]
cmp eax, 0xf
jne 0x100178be
mov eax, dword [ecx + 0x40]
mov ecx, dword [ecx + 0x1bc4]
shl ecx, 0x10
add ecx, eax
mov dword [esp + 0x18], ecx
jmp case.0x10017f0a.31398
cmp eax, 0x18
jne 0x100178e0
mov eax, dword [ecx + 0x1bc8]
sub eax, dword [ecx + 0x40]
mov ecx, dword [ecx + 0x1bc4]
shl ecx, 0x10
add ecx, eax
mov dword [esp + 0x18], ecx
jmp case.0x10017f0a.31398
mov ecx, dword [ecx + 0x1bc4]
xor eax, eax
shl ecx, 0x10
add ecx, eax
mov dword [esp + 0x18], ecx
jmp case.0x10017f0a.31398
cmp edi, 0x123
ja 0x10017a84
je 0x10017c81
lea eax, [edi - 1]
cmp eax, 0xeb
ja case.0x10017a9a.305
movzx eax, byte [eax + 0x100185e0]
jmp dword [eax*4 + 0x1001856c]
mov ecx, 0x241d
lea esp, [esp]
mov eax, ecx
sub eax, 0x241d
je 0x10017944
sub eax, 0x57
je case.0x10017f0a.31544
jmp 0x10017952
mov edx, fcn.1000b590
test edx, edx
setne al
mov byte [esp + 0x18], al
add ecx, 0x57
cmp ecx, 0x2474
jbe 0x10017930
mov ecx, 0x18ed
mov eax, ecx
sub eax, 0x18ed
je 0x10017976
sub eax, 0x14
je case.0x10017f0a.31544
jmp 0x10017984
mov edx, fcn.10005720
test edx, edx
setne al
mov byte [esp + 0x18], al
add ecx, 0x14
cmp ecx, 0x1901
jbe 0x10017962
mov eax, 0x2743
cmp eax, eax
je 0x10017ffb
add eax, 5
cmp eax, 0x2743
jbe 0x10017996
mov eax, 0x2afa
cmp eax, eax
je 0x10018014
add eax, 0x2e
cmp eax, 0x2afa
jbe 0x100179ad
mov ecx, 0x713d
mov eax, ecx
sub eax, 0x713d
je 0x100179d6
sub eax, 0x45
je case.0x10017f0a.31544
jmp 0x100179e4
mov edx, fcn.1000c8b0
test edx, edx
setne al
mov byte [esp + 0x18], al
add ecx, 0x45
cmp ecx, 0x7182
jbe 0x100179c2
mov ecx, 0x2e3e
mov eax, ecx
sub eax, 0x2e3e
je 0x10017a08
sub eax, 0x55
je case.0x10017f0a.31544
jmp 0x10017a16
mov edx, fcn.10007c10
test edx, edx
setne al
mov byte [esp + 0x18], al
add ecx, 0x55
cmp ecx, 0x2e93
jbe 0x100179f4
mov ecx, 0x25e2
mov eax, ecx
sub eax, 0x25e2
je 0x10017a3a
sub eax, 0x4e
je case.0x10017f0a.31544
jmp 0x10017a48
mov edx, fcn.10005ec0
test edx, edx
setne al
mov byte [esp + 0x18], al
add ecx, 0x4e
cmp ecx, 0x2630
jbe 0x10017a26
mov eax, 0xb2
cmp eax, eax
je 0x1001802d
add eax, 0x35
cmp eax, 0xb2
jbe 0x10017a5a
mov ecx, 0x5678
nop
mov eax, ecx
sub eax, 0x5678
je 0x10017aa1
sub eax, 0x19
je case.0x10017f0a.31544
jmp 0x10017aaf
lea eax, [edi - 0x130]
cmp eax, 0x1c
ja case.0x10017a9a.305
movzx ecx, byte [eax + 0x100186e0]
jmp dword [ecx*4 + 0x100186cc]
mov edx, fcn.1000c400
test edx, edx
setne al
mov byte [esp + 0x18], al
add ecx, 0x19
cmp ecx, 0x5691
jbe 0x10017a70
mov ecx, 0x4583
nop
mov eax, ecx
sub eax, 0x4583
je 0x10017ad4
sub eax, 0x29
je case.0x10017f0a.31544
jmp 0x10017ae2
mov edx, fcn.10005720
test edx, edx
setne al
mov byte [esp + 0x18], al
add ecx, 0x29
cmp ecx, 0x45ac
jbe 0x10017ac0
mov ecx, 0x5a67
mov eax, ecx
sub eax, 0x5a67
je 0x10017b06
sub eax, 0x3d
je case.0x10017f0a.31544
jmp 0x10017b14
mov edx, 0x1000abe0
test edx, edx
setne al
mov byte [esp + 0x18], al
add ecx, 0x3d
cmp ecx, 0x5aa4
jbe 0x10017af2
mov ecx, 0x3edc
mov eax, ecx
sub eax, 0x3edc
je 0x10017b38
sub eax, 0x1e
je case.0x10017f0a.31544
jmp 0x10017b46
mov edx, fcn.10005730
test edx, edx
setne al
mov byte [esp + 0x18], al
add ecx, 0x1e
cmp ecx, 0x3efa
jbe 0x10017b24
mov ecx, 0x5621
mov eax, ecx
sub eax, 0x5621
je 0x10017b6a
sub eax, 0x57
je case.0x10017f0a.31544
jmp 0x10017b78
mov edx, 0x1000a1c0
test edx, edx
setne al
mov byte [esp + 0x18], al
add ecx, 0x57
cmp ecx, 0x5678
jbe 0x10017b56
mov ecx, 0x7c95
jmp 0x10017b90
mov eax, ecx
sub eax, 0x7c95
je 0x10017ba4
sub eax, 0x4b
je case.0x10017f0a.31544
jmp 0x10017bb2
mov edx, fcn.100092a0
test edx, edx
setne al
mov byte [esp + 0x18], al
add ecx, 0x4b
cmp ecx, 0x7ce0
jbe 0x10017b90
mov ecx, 0x1ce6
mov eax, ecx
sub eax, 0x1ce6
je 0x10017bd6
sub eax, 0x1b
je case.0x10017f0a.31544
jmp 0x10017be4
mov edx, fcn.10008350
test edx, edx
setne al
mov byte [esp + 0x18], al
add ecx, 0x1b
cmp ecx, 0x1d01
jbe 0x10017bc2
mov eax, 0x312a
cmp eax, eax
je 0x10018046
add eax, 0x13
cmp eax, 0x312a
jbe 0x10017bf6
mov eax, 0x413e
cmp eax, eax
je 0x1001805f
add eax, 0x2f
cmp eax, 0x413e
jbe 0x10017c0d
mov ecx, 0x4a54
mov eax, ecx
sub eax, 0x4a54
je 0x10017c36
sub eax, 0x3f
je case.0x10017f0a.31544
jmp 0x10017c44
mov edx, fcn.10007fa0
test edx, edx
setne al
mov byte [esp + 0x18], al
add ecx, 0x3f
cmp ecx, 0x4a93
jbe 0x10017c22
mov ecx, 0x33a0
mov eax, ecx
sub eax, 0x33a0
je 0x10017c68
sub eax, 0x35
je case.0x10017f0a.31544
jmp 0x10017c76
mov edx, fcn.10005730
test edx, edx
setne al
mov byte [esp + 0x18], al
add ecx, 0x35
cmp ecx, 0x33d5
jbe 0x10017c54
mov eax, 0x4f72
cmp eax, eax
je 0x10018078
add eax, 0x51
cmp eax, 0x4f72
jbe 0x10017c88
mov eax, 0x38f4
cmp eax, eax
je 0x10018091
add eax, 0x49
cmp eax, 0x38f4
jbe 0x10017c9f
mov eax, 0x2eb3
cmp eax, eax
je 0x100180aa
add eax, 0x44
cmp eax, 0x2eb3
jbe 0x10017cb6
mov eax, 0x2d80
cmp eax, eax
je 0x100180c3
add eax, 0x4a
cmp eax, 0x2d80
jbe 0x10017ccd
mov ecx, 0x47
mov eax, ecx
sub eax, 0x47
je 0x10017cf4
sub eax, 0x44
je case.0x10017f0a.31544
jmp 0x10017d02
mov edx, fcn.10005990
test edx, edx
setne al
mov byte [esp + 0x18], al
add ecx, 0x44
cmp ecx, 0x8b
jbe 0x10017ce2
mov ecx, 0x1452
mov eax, ecx
sub eax, 0x1452
je 0x10017d26
sub eax, 0x34
je case.0x10017f0a.31544
jmp 0x10017d34
mov edx, fcn.10007e00
test edx, edx
setne al
mov byte [esp + 0x18], al
add ecx, 0x34
cmp ecx, 0x1486
jbe 0x10017d12
mov eax, 0x23f
cmp eax, eax
je 0x100180dc
add eax, 0xa
cmp eax, 0x23f
jbe 0x10017d46
mov ecx, 0x1f45
jmp 0x10017d60
mov eax, ecx
sub eax, 0x1f45
je 0x10017d74
sub eax, 0x5c
je case.0x10017f0a.31544
jmp 0x10017d82
mov edx, fcn.10005730
test edx, edx
setne al
mov byte [esp + 0x18], al
add ecx, 0x5c
cmp ecx, 0x1fa1
jbe 0x10017d60
mov ecx, 0x28bb
mov eax, ecx
sub eax, 0x28bb
je 0x10017da6
sub eax, 0x4e
je case.0x10017f0a.31544
jmp 0x10017db4
mov edx, fcn.10005730
test edx, edx
setne al
mov byte [esp + 0x18], al
add ecx, 0x4e
cmp ecx, 0x2909
jbe 0x10017d92
mov eax, 0x58d5
cmp eax, eax
je 0x100180f5
add eax, 0x16
cmp eax, 0x58d5
jbe 0x10017dc6
mov ecx, 0x1753
jmp 0x10017de0
mov eax, ecx
sub eax, 0x1753
je 0x10017df4
sub eax, 0x1d
je case.0x10017f0a.31544
jmp 0x10017e02
mov edx, fcn.10005b20
test edx, edx
setne al
mov byte [esp + 0x18], al
add ecx, 0x1d
cmp ecx, 0x1770
jbe 0x10017de0
mov eax, 0x383a
cmp eax, eax
je 0x1001810e
add eax, 0x3d
cmp eax, 0x383a
jbe 0x10017e14
mov ecx, 0x7f53
lea esp, [esp]
mov eax, ecx
sub eax, 0x7f53
je 0x10017e44
sub eax, 5
je case.0x10017f0a.31544
jmp 0x10017e52
mov edx, fcn.10005730
test edx, edx
setne al
mov byte [esp + 0x18], al
add ecx, 5
cmp ecx, 0x7f58
jbe 0x10017e30
mov ecx, 0x5150
mov eax, ecx
sub eax, 0x5150
je 0x10017e76
sub eax, 0x18
je case.0x10017f0a.31544
jmp 0x10017e84
mov edx, fcn.1000c460
test edx, edx
setne al
mov byte [esp + 0x18], al
add ecx, 0x18
cmp ecx, 0x5168
jbe 0x10017e62
mov byte [esp + 0x18], 1
jmp case.0x10017f0a.31398
cmp esi, 0x730e
je case.0x10017f0a.31544
jmp case.0x10017f0a.31398
mov al, byte [edi + 0x10]
xor ecx, ecx
mov dword [esp + 0x84], ecx
cmp al, 0x7a
je 0x10017ed7
lea ebx, [ebx]
cmp al, 0x7d
je 0x10017ed0
inc ecx
lea edx, [ecx + ecx*2]
mov al, byte [edi + edx*8 + 0x10]
cmp al, 0x7a
jne 0x10017ec0
mov dword [esp + 0x84], ecx
lea eax, [ecx + ecx*2]
cmp byte [edi + eax*8 + 0x10], 0x7d
jne case.0x10017f0a.31398
inc ecx
mov dword [esp + 0x84], ecx
jmp case.0x10017f0a.31398
lea eax, [esi - 0x7aa5]
cmp eax, 0x93
ja case.0x10017f0a.31398
movzx ecx, byte [eax + 0x10018714]
jmp dword [ecx*4 + 0x10018700]
mov edx, dword [esp + 0x84]
push edx
mov ecx, edi
call fcn.10022b00
add esp, 4
mov dword [esp + 0xb0], eax
jmp case.0x10017f0a.31398
cmp dword [esp + 0xb0], 0
je 0x10017f8b
mov edi, 0x5b14
mov eax, edi
sub eax, 0x5b14
je 0x10017f58
sub eax, 0x54
jne 0x10017f80
mov eax, 1
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp + 0xc]
mov ecx, dword [esp + 0x84]
mov edx, dword [esp + 0xb0]
push eax
push ecx
push edx
call fcn.1001a070
mov eax, dword [esp + 0xbc]
add esp, 0xc
call fcn.10019f30
add edi, 0x54
cmp edi, 0x5b68
jbe 0x10017f3e
mov edi, dword [ebp + 8]
mov dword [esp + 0x18], 0
jmp case.0x10017f0a.31398
cmp dword [esp + 0x84], 0
jg case.0x10017f0a.31398
mov ecx, 0x36eb
mov eax, ecx
sub eax, 0x36eb
je 0x10017fb7
sub eax, 0x2b
je case.0x10017f0a.31544
jmp 0x10017fbf
mov dword [esp + 0x18], 0
add ecx, 0x2b
cmp ecx, 0x3716
jbe 0x10017fa7
add esi, 0x31
cmp esi, dword [esp + 0xac]
jbe 0x10016a20
mov eax, dword [esp + 0x18]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
or eax, 0xffffffff
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, 0xffff0000
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov ebx, fcn.10005720
test ebx, ebx
setne cl
mov byte [esp + 0x18], cl
mov eax, dword [esp + 0x18]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov edx, fcn.10005cd0
test edx, edx
setne al
mov byte [esp + 0x18], al
mov eax, dword [esp + 0x18]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov ecx, fcn.1000c260
test ecx, ecx
setne dl
mov byte [esp + 0x18], dl
mov eax, dword [esp + 0x18]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov ebx, fcn.10027380
test ebx, ebx
setne cl
mov byte [esp + 0x18], cl
mov eax, dword [esp + 0x18]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov edx, fcn.10006200
test edx, edx
setne al
mov byte [esp + 0x18], al
mov eax, dword [esp + 0x18]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov ecx, fcn.10009340
test ecx, ecx
setne dl
mov byte [esp + 0x18], dl
mov eax, dword [esp + 0x18]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov edi, fcn.10006620
test edi, edi
setne cl
mov byte [esp + 0x18], cl
mov eax, dword [esp + 0x18]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov edx, 0x1000ca10
test edx, edx
setne al
mov byte [esp + 0x18], al
mov eax, dword [esp + 0x18]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov ecx, fcn.10005730
test ecx, ecx
setne dl
mov byte [esp + 0x18], dl
mov eax, dword [esp + 0x18]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov ebx, 0x10008000
test ebx, ebx
setne cl
mov byte [esp + 0x18], cl
mov eax, dword [esp + 0x18]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov edx, fcn.10006a40
test edx, edx
setne al
mov byte [esp + 0x18], al
mov eax, dword [esp + 0x18]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov ecx, fcn.100080e0
test ecx, ecx
pop edi
setne dl
mov byte [esp + 0x14], dl
mov eax, dword [esp + 0x14]
pop esi
pop ebx
mov esp, ebp
pop ebp
ret