Function at 0x1001d907
Capabilities:
Delete file
Delete registry key
Get common file path
Get disk size
Query environment variable
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x29c
push ebx
push esi
mov dword [ebp - 8], 6
xor ebx, ebx
push edi
mov edi, 0x2c5b641b
mov dword [ebp - 0x8c], ecx
mov dword [ebp - 0x24], edi
xor esi, esi
mov dword [ebp - 0x28], ebx
inc esi
mov dword [ebp - 0x30], 0xffff
mov dword [ebp - 0x2c], 0xa8b742d6
mov dword [ebp - 0x1c], 0x4fc7bc07
mov dword [ebp - 8], esi
mov dword [ebp - 8], 0xffffffea
cmp dword [ebp - 8], 0x13
push 3
mov dword [ebp - 0xa0], edx
pop ecx
je 0x1001db31
push 0xfffffffffffffff7
pop edi
mov dword [ebp - 0x14], 0xffffffff
xor edx, edx
mov dword [ebp - 0x20], 0x173bf38c
mov dword [ebp - 0x2c], edi
mov dword [ebp - 0x34], 0xffffffff
mov dword [ebp - 0x28], 0x14ba09a1
mov eax, dword [ebp - 0x14]
cmp eax, 0x19570a50
setle dl
xor ecx, ecx
add edx, dword [ebp - 8]
mov eax, dword [ebp - 0x20]
cmp eax, edx
setg cl
cmp dword [ebp - 0x14], ecx
jne 0x1001da68
push 2
pop ecx
mov dword [ebp - 0x10c], ecx
mov dword [ebp - 0x108], ecx
mov dword [ebp - 0x104], ecx
mov dword [ebp - 0x100], ecx
mov dword [ebp - 0x10], 0x4d2fc5c3
mov eax, dword [ebp - 0x104]
cmp dword [ebp - 8], ebx
jne 0x1001d9ff
inc dword [ebp - 0x28]
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 0x20]
add edx, 9
neg edx
push 2
sbb edx, edx
xor ecx, ecx
inc edx
neg edx
cmp edx, eax
setne cl
imul eax, ecx, 0x6232
pop ecx
cmp eax, dword [ebp - 0x34]
jge 0x1001d9ff
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
imul eax, dword [ebp - 0x104]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x10], ebx
jne 0x1001da1a
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 8]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x30]
cmp eax, ecx
mov eax, dword [ebp - 0x24]
sbb ecx, ecx
xor edx, edx
neg ecx
cmp eax, ecx
mov eax, dword [ebp - 0x30]
setne dl
xor ecx, ecx
cmp edx, eax
setl cl
xor eax, eax
cmp ecx, 0xb0f4
setl al
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x2c], ebx
cmp dword [ebp - 0x24], ebx
jne 0x1001db29
jmp 0x1001db1c
mov dword [ebp - 4], ebx
jmp 0x1001da7e
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x12c], 0xfffffff8
inc dword [ebp - 4]
cmp dword [ebp - 4], 2
jl 0x1001da6d
push 3
mov dword [ebp - 4], ebx
pop ecx
jmp 0x1001da9d
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x23c], 0xffffffff
inc dword [ebp - 4]
cmp dword [ebp - 4], ecx
jl 0x1001da8c
mov dword [ebp - 0x30], ebx
jmp 0x1001db17
mov dword [ebp - 0x14], 0x44bf8e16
mov dword [ebp - 0x28], 0xffffffff
mov dword [ebp - 0x24], esi
cmp dword [ebp - 0x24], ebx
jl 0x1001db14
mov eax, dword [ebp - 0x30]
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0x12c]
cmp eax, 0x447f
mov eax, dword [ebp - 0x20]
sete cl
add ecx, eax
mov eax, dword [ebp - 0x30]
cmp edi, ecx
sbb edx, edx
mov dword [ebp + eax*4 - 0x12c], ecx
neg edx
mov eax, dword [ebp - 0x234]
xor ecx, ecx
cmp edx, eax
setge cl
xor edx, edx
mov dword [ebp - 0x14], ecx
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x1c]
cmp ecx, eax
setl dl
add edx, dword [ebp - 0x28]
neg edx
sbb edx, edx
neg edx
mov dword [ebp - 0x28], edx
dec dword [ebp - 0x24]
jns 0x1001dabd
inc dword [ebp - 0x30]
cmp dword [ebp - 0x30], esi
jle 0x1001daa7
inc dword [ebp - 8]
cmp dword [ebp - 8], 0x13
jne 0x1001d965
push 3
mov edi, 0x2c5b641b
pop ecx
mov dword [ebp - 0x30], 0x8905154
mov dword [ebp - 8], ebx
mov dword [ebp - 0x18], 0xfffffffa
mov dword [ebp - 0x24], 0xf068cd54
mov dword [ebp - 0x14], 0x93876a47
mov dword [ebp - 4], esi
mov dword [ebp - 0x20], 5
mov dword [ebp - 0x10], ebx
jmp 0x1001db70
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x1d4], 0x7b04800f
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 4
jl 0x1001db5f
cmp dword [ebp - 8], ebx
je 0x1001db8a
mov dword [ebp - 0x18], esi
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 8]
mov dword [ebp - 0x1cc], eax
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x1cc]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 8]
mov dword [ebp - 4], ebx
cmp dword [ebp - 4], ebx
je 0x1001dc01
mov dword [ebp - 0x24], ebx
jmp 0x1001dbd8
mov dword [ebp - 0x14], 7
mov byte [ebp - 9], bl
cmp byte [ebp - 9], bl
je 0x1001dbd2
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceW]
inc dword [ebp - 0x14]
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0x29
jle 0x1001dbb8
mov dword [ebp - 4], ebx
jmp 0x1001dbf6
mov byte [ebp - 9], bl
cmp byte [ebp - 9], bl
je 0x1001dbf3
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_FindFirstFileA]
dec dword [ebp - 4]
cmp dword [ebp - 4], 0xffffffe9
jne 0x1001dbe3
jmp 0x1001dc9a
mov dword [ebp - 0x28], 0x8629342b
mov dword [ebp - 8], 0xffffffe9
jmp 0x1001dc90
mov dword [ebp - 0x2c], 0xfffffffb
mov dword [ebp - 0x10], ebx
jmp 0x1001dc2e
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x260], 0xb7203fca
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ecx
jl 0x1001dc1d
mov dword [ebp - 0x18], ebx
jmp 0x1001dc88
mov dword [ebp - 0x14], ebx
mov eax, dword [ebp - 0x18]
mov dword [ebp - 4], esi
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x2c]
neg ecx
push 3
sbb ecx, ecx
xor edx, edx
neg ecx
mov dword [ebp - 0x260], ecx
mov eax, dword [ebp - 0x14]
cmp ecx, eax
mov eax, dword [ebp - 0x14]
setne dl
xor ecx, ecx
cmp edx, eax
mov edx, dword [ebp - 0x28]
setge cl
sub edx, ecx
add edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x18]
pop ecx
mov dword [ebp + eax*4 - 0x1d4], edx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jle 0x1001dc38
inc dword [ebp - 8]
cmp dword [ebp - 8], 0x21
jge 0x1001dc11
mov dword [ebp - 8], 6
mov dword [ebp - 4], edi
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x24], 0xffff
mov dword [ebp - 4], ebx
mov dword [ebp - 0x20], 0x86d6dbc1
mov dword [ebp - 0x10], ebx
jmp 0x1001dccb
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x58], 0x5568
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jl 0x1001dcbd
mov dword [ebp - 4], ebx
cmp dword [ebp - 4], ebx
jl 0x1001de32
or eax, 0xffffffff
mov dword [ebp - 0x9c], eax
mov dword [ebp - 0x98], eax
mov dword [ebp - 0x94], eax
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x14], 9
mov dword [ebp - 0x1c], 0x85e13cd4
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x9c], ebx
cmp dword [ebp - 0x9c], ebx
jl 0x1001de22
mov dword [ebp - 8], 0x88d0d3f7
mov dword [ebp - 0x28], 0xcbae
mov dword [ebp - 0x2c], 0x62a4b15
mov dword [ebp - 0x34], 0xda5659cd
mov dword [ebp - 8], ebx
cmp dword [ebp - 8], ebx
jl 0x1001ddc2
mov dword [ebp - 0x20], 0x45625132
mov dword [ebp - 0x20], ebx
cmp dword [ebp - 0x20], ebx
jl 0x1001dd7c
mov dword [ebp - 0x10], ebx
jmp 0x1001dd60
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x70], esi
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], esi
jl 0x1001dd56
inc dword [ebp - 0x70]
mov byte [ebp - 9], bl
cmp byte [ebp - 9], 0
je 0x1001dd77
call dword [sym.imp.KERNEL32.dll_GetACP]
dec dword [ebp - 0x20]
jns 0x1001dd51
mov eax, dword [ebp - 4]
xor ebx, ebx
add eax, dword [ebp - 4]
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x58]
mov eax, dword [ebp - 0x20]
cmp eax, ecx
mov eax, dword [ebp - 4]
setl bl
xor edx, edx
push 0
mov esi, dword [ebp + eax*4 - 0x58]
imul esi, dword [ebp - 8]
mov eax, dword [ebp - 8]
cmp ebx, eax
mov eax, dword [ebp - 0x28]
setge dl
xor ecx, ecx
cmp edx, eax
pop ebx
setge cl
sub esi, ecx
inc esi
mov dword [ebp - 0x2c], esi
dec dword [ebp - 8]
push 1
pop esi
jns 0x1001dd42
mov eax, dword [ebp - 4]
xor edx, edx
mov eax, dword [ebp + eax*4 - 0x58]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0x58]
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x14]
cmp eax, ecx
mov eax, dword [ebp - 0x28]
setge dl
xor ecx, ecx
cmp eax, edx
mov eax, dword [ebp - 0x58]
setge cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x58]
setne dl
xor ecx, ecx
imul eax, edx
cmp eax, 0xaec
setl cl
mov dword [ebp - 0x14], ecx
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x2c], eax
dec dword [ebp - 0x9c]
jns 0x1001dd1a
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0x58]
dec dword [ebp - 4]
jns 0x1001dcdc
mov dword [ebp - 0x2c], 0xa8b742d6
mov dword [ebp - 0x18], 0xeaa32b1c
mov dword [ebp - 0x1c], ebx
push 0xfffffffffffffff7
mov dword [ebp - 0x20], 9
pop eax
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x28], 0xfffffff9
push 2
mov dword [ebp - 0x3c], 0x71da
mov dword [ebp - 0x10], ebx
pop edi
jmp 0x1001de74
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x54], 0xfffffff6
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edi
jl 0x1001de66
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], esi
jg 0x1001e119
mov edi, 0x99c4
mov dword [ebp - 8], 0x8f69f7fd
mov dword [ebp - 4], ebx
mov dword [ebp - 0x10], 0x8d46758e
mov dword [ebp - 0x124], edi
mov dword [ebp - 0x120], edi
mov dword [ebp - 0x11c], edi
mov dword [ebp - 0x118], edi
mov dword [ebp - 8], esi
cmp dword [ebp - 8], ebx
jl 0x1001dff8
push 3
pop edi
mov dword [ebp - 0x2c], 0xa9a26275
mov dword [ebp - 0x10], ebx
jmp 0x1001dedf
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x1f4], 0x11e69d08
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 4
jl 0x1001dece
mov eax, dword [ebp - 8]
xor edx, edx
mov eax, dword [ebp + eax*4 - 0x54]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x54]
mov eax, dword [ebp - 8]
mov ecx, dword [ebp + eax*4 - 0x54]
mov eax, dword [ebp - 0x54]
cmp ecx, eax
mov eax, dword [ebp - 0x54]
setge dl
xor ecx, ecx
add eax, edx
cmp eax, 0x2065
setg cl
cmp edi, ecx
sbb eax, eax
xor ecx, ecx
neg eax
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x54]
mov eax, dword [ebp - 8]
mov eax, dword [ebp + eax*4 - 0x54]
cmp eax, 0xc280563a
sete cl
lea eax, [ecx - 0x2c2e8b5a]
mov dword [ebp - 0x1e8], eax
cmp eax, dword [ebp - 4]
jg 0x1001df52
mov ecx, esi
cmp dword [ebp - 8], ebx
jne 0x1001df54
mov ecx, ebx
mov eax, dword [ebp - 8]
mov eax, dword [ebp + eax*4 - 0x54]
imul eax, ecx
test eax, eax
je 0x1001df6c
mov eax, esi
cmp dword [ebp - 0x1f0], ebx
jne 0x1001df6e
mov eax, ebx
mov dword [ebp - 0x1c], eax
xor ecx, ecx
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 8]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x54]
test eax, eax
mov eax, dword [ebp - 0x10]
setns cl
xor edx, edx
cmp eax, ecx
mov eax, dword [ebp - 8]
setge dl
sub edx, dword [ebp + eax*4 - 0x54]
mov eax, dword [ebp - 8]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
mov eax, dword [ebp + eax*4 - 0x54]
cmp eax, 0xfffffff7
setne cl
add edx, ecx
neg edx
sbb edx, edx
neg edx
sub edx, dword [ebp - 4]
mov dword [ebp - 4], edx
xor edx, edx
mov ecx, dword [ebp - 4]
mov eax, dword [ebp - 0x18]
cmp ecx, eax
setne dl
xor ecx, ecx
add edx, dword [ebp - 0x18]
mov dword [ebp - 0x2c], edx
mov eax, dword [ebp - 4]
cmp eax, 0xfffffffc
setl cl
sub ecx, 0x5e4b438f
neg ecx
sbb ecx, ecx
inc ecx
mov dword [ebp - 0x20], ecx
dec dword [ebp - 8]
jns 0x1001dec2
mov edi, 0x99c4
cmp dword [ebp - 0x1c], ebx
jne 0x1001e002
cmp dword [ebp - 8], ebx
je 0x1001e005
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x18]
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0x54]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 0x11c]
mov eax, dword [ebp - 0x10]
imul edx, eax
mov eax, dword [ebp - 0x10]
cmp edx, eax
setne cl
xor edx, edx
mov dword [ebp - 0x1c], ecx
mov ecx, dword [ebp - 0x11c]
mov eax, dword [ebp - 0x1c]
add ecx, eax
mov eax, dword [ebp - 0x50]
cmp ecx, eax
mov eax, dword [ebp - 0x18]
setg dl
sub edx, eax
je 0x1001e04e
mov eax, esi
cmp dword [ebp - 0x54], ebx
jne 0x1001e050
mov eax, ebx
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 8]
cmp dword [ebp - 0x28], eax
jle 0x1001e062
mov eax, ebx
cmp dword [ebp - 0x54], ebx
je 0x1001e064
mov eax, esi
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x18]
cmp dword [ebp + eax*4 - 0x54], ebx
jne 0x1001e075
cmp dword [ebp - 0x18], ebx
je 0x1001e077
mov ebx, esi
mov ecx, dword [ebp - 8]
neg ebx
mov eax, dword [ebp - 0x18]
neg ebx
push 0
sbb ebx, ebx
xor edx, edx
neg ebx
imul ecx, ebx
cmp ecx, eax
mov eax, dword [ebp - 4]
setl dl
xor ebx, ebx
cmp edx, eax
mov eax, dword [ebp - 0x18]
setg bl
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0x54]
cmp ebx, eax
mov eax, dword [ebp - 0x20]
setge cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x18]
pop ebx
setl dl
add edx, dword [ebp + eax*4 - 0x54]
sub edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
mov eax, dword [ebp - 0x18]
setle cl
xor edx, edx
mov eax, dword [ebp + eax*4 - 0x54]
cmp ecx, eax
mov eax, dword [ebp - 8]
setl dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x18]
setne cl
cmp ecx, 0xfffa
sbb ecx, ecx
xor edx, edx
inc ecx
cmp ecx, eax
mov eax, dword [ebp - 0x18]
setg dl
imul edx, dword [ebp + eax*4 - 0x54]
mov eax, dword [ebp - 0x18]
add edx, dword [ebp + eax*4 - 0x54]
mov dword [ebp - 8], edx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jle 0x1001de8a
push 2
pop edi
mov dword [ebp - 0x38], 0x4fc7bc07
mov eax, 0x13dce9d0
mov dword [ebp - 8], esi
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x7c], eax
mov dword [ebp - 0x78], eax
mov dword [ebp - 0x74], eax
mov dword [ebp - 8], ebx
jmp 0x1001e240
push 5
pop eax
mov dword [ebp - 4], 0xfffffff6
mov dword [ebp - 0x18], eax
push 3
pop eax
mov dword [ebp - 4], eax
cmp dword [ebp - 4], ebx
jl 0x1001e228
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0x80]
cmp eax, dword [ebp - 4]
jle 0x1001e16f
mov eax, dword [ebp - 4]
cmp dword [ebp + eax*4 - 0x80], ebx
jne 0x1001e16f
mov esi, ebx
mov eax, dword [ebp - 8]
cmp dword [ebp - 4], ebx
jne 0x1001e180
cmp dword [ebp - 8], ebx
jne 0x1001e180
mov edx, ebx
jmp 0x1001e183
xor edx, edx
inc edx
mov eax, dword [ebp - 4]
mov ecx, dword [ebp + eax*4 - 0x80]
lea eax, [edx - 0x37b75a88]
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 4]
setle dl
sub edx, dword [ebp + eax*4 - 0x80]
xor eax, eax
sub edx, dword [ebp - 0x7c]
cmp esi, edx
setle al
xor esi, esi
mov dword [ebp - 0x18], eax
inc esi
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], 0xffffffe2
jg 0x1001e21f
mov dword [ebp - 0x1c], ebx
jmp 0x1001e1ca
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x60], 8
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], esi
jl 0x1001e1bc
mov dword [ebp - 0x60], ebx
cmp dword [ebp - 0x60], 0x13
jle 0x1001e21a
push 3
pop edx
mov dword [ebp - 0x10], 0xfffffffa
mov dword [ebp - 0x10], ebx
jmp 0x1001e20c
mov dword [ebp - 0x20], 0x695cd1d2
mov dword [ebp - 0x20], edx
cmp dword [ebp - 0x20], ebx
jl 0x1001e209
mov eax, dword [ebp - 4]
mov ecx, dword [ebp + eax*4 - 0x80]
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x80], ecx
dec dword [ebp - 0x20]
jns 0x1001e1f6
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], edx
jle 0x1001e1e7
inc dword [ebp - 0x60]
cmp dword [ebp - 0x60], 0x13
jg 0x1001e1db
dec dword [ebp - 0x18]
jmp 0x1001e1b1
dec dword [ebp - 4]
jns 0x1001e158
mov byte [ebp - 9], bl
cmp byte [ebp - 9], 0
je 0x1001e23d
push 0x293
push ebx
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
inc dword [ebp - 8]
cmp dword [ebp - 8], 0x12
jge 0x1001e13c
mov dword [ebp - 8], esi
mov dword [ebp - 8], 0xffffffea
jmp 0x1001e6e2
mov dword [ebp - 0x10], 0xf94f378
mov dword [ebp - 0x20], 0xffff
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x14], 0xfffffffb
mov dword [ebp - 0x2c], 0xffffffff
mov byte [ebp - 9], bl
cmp byte [ebp - 9], 0
je 0x1001e28e
push 0x1d73
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
mov eax, dword [ebp - 0x10]
imul eax, dword [ebp - 0x20], 0xfffd
add eax, dword [ebp - 0x20]
je 0x1001e2a4
mov ecx, esi
cmp dword [ebp - 0x20], ebx
jne 0x1001e2a6
mov ecx, ebx
mov eax, dword [ebp - 0x10]
neg ecx
neg ecx
sbb ecx, ecx
neg ecx
sub ecx, eax
inc ecx
cmp dword [ebp - 0x10], ecx
jge 0x1001e2bc
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x14], esi
mov eax, dword [ebp - 0x14]
push 0xfffffffffffffff7
pop ecx
cmp ecx, eax
sbb eax, eax
xor edx, edx
neg eax
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x10]
cmp ecx, eax
setl dl
add edx, dword [ebp - 0x10]
mov dword [ebp - 0x2c], edx
mov dword [ebp - 0x28], 0xffffffff
mov dword [ebp - 0x20], 0x173bf38c
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x3c], 0x2349124c
mov dword [ebp - 0x3c], esi
mov dword [ebp - 0x1c], 0xb
jmp 0x1001e31a
mov dword [ebp - 0x2c], 0xba5cd23e
cmp dword [ebp - 0x2c], ebx
jne 0x1001e320
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0x35
jge 0x1001e30b
push 0xfffffffffffffff7
pop eax
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x18], 0xffffffff
mov dword [ebp - 4], esi
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x1c], ebx
jmp 0x1001e346
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x6c], 0x9b55bb2c
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edi
jl 0x1001e338
mov dword [ebp - 4], ebx
cmp dword [ebp - 4], esi
jg 0x1001e3ca
mov dword [ebp - 0x14], esi
xor ecx, ecx
push 7
pop eax
mov dword [ebp - 0x174], eax
mov dword [ebp - 0x170], eax
mov dword [ebp - 0x16c], eax
mov dword [ebp - 0x168], eax
mov eax, dword [ebp - 4]
mov eax, dword [ebp + eax*4 - 0x6c]
test eax, eax
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 0x34]
setne cl
mov dword [ebp - 0x14], ecx
xor edx, edx
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 0x6c]
mov eax, dword [ebp - 4]
mov ecx, dword [ebp + eax*4 - 0x6c]
mov eax, dword [ebp - 0x34]
cmp ecx, eax
mov eax, dword [ebp - 0x68]
setl dl
xor ebx, ebx
cmp edx, eax
mov eax, dword [ebp - 4]
setge bl
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0x6c]
cmp ebx, eax
sete cl
mov dword [ebp - 0x168], ecx
inc dword [ebp - 4]
cmp dword [ebp - 4], esi
jle 0x1001e353
xor ebx, ebx
mov dword [ebp - 0x34], 0x14ba09a1
xor edx, edx
mov eax, dword [ebp - 0x28]
cmp eax, 0x19570a50
setle dl
xor ecx, ecx
add edx, dword [ebp - 8]
mov eax, dword [ebp - 0x20]
cmp eax, edx
setg cl
cmp dword [ebp - 0x28], ecx
jne 0x1001e627
mov dword [ebp - 4], esi
mov dword [ebp - 0x14], 0xfffffffe
mov dword [ebp - 0x1c], ebx
jmp 0x1001e410
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x29c], esi
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
jl 0x1001e403
mov dword [ebp - 4], ebx
cmp dword [ebp - 4], 0x1a
jge 0x1001e4ab
push 3
pop ecx
mov dword [ebp - 0x10], ebx
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x1c], ebx
jmp 0x1001e442
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x200], 0xffffffff
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ecx
jl 0x1001e431
cmp dword [ebp - 0x1f8], ebx
jne 0x1001e4ab
mov dword [ebp - 0x10], 0xc
cmp dword [ebp - 0x10], 0xffffffef
jne 0x1001e49e
mov dword [ebp - 0x1c], 0x328f6c74
mov dword [ebp - 0x1c], 0xfffffff4
jmp 0x1001e48c
mov byte [ebp - 9], bl
cmp byte [ebp - 9], 0
je 0x1001e484
push ebx
push ebx
push 0x1be7
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_RegOpenKeyExA]
cmp dword [ebp - 0x2c], ebx
jne 0x1001e492
dec dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 0xffffffe6
jle 0x1001e46c
dec dword [ebp - 0x10]
cmp dword [ebp - 0x10], 0xffffffef
je 0x1001e45c
push 3
pop ecx
inc dword [ebp - 4]
cmp dword [ebp - 4], 0x1a
jl 0x1001e426
dec dword [ebp - 0x14]
mov dword [ebp - 0x13c], edi
mov dword [ebp - 0x138], edi
mov dword [ebp - 0x134], edi
mov dword [ebp - 0x130], edi
mov dword [ebp - 0x1c], 0x70bb
push 3
mov dword [ebp - 0x14], 0x8cf5a8
mov dword [ebp - 4], ebx
pop ecx
jmp 0x1001e4e9
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0xdc], esi
inc dword [ebp - 4]
cmp dword [ebp - 4], ecx
jl 0x1001e4dc
mov dword [ebp - 4], ebx
jmp 0x1001e500
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x218], esi
inc dword [ebp - 4]
cmp dword [ebp - 4], ecx
jl 0x1001e4f3
cmp dword [ebp - 0x1c], ebx
je 0x1001e50d
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
mov eax, dword [ebp - 0x1c]
cmp eax, 0xffffffff
setle cl
mov dword [ebp - 0x14], ecx
cmp dword [ebp - 0x14], ebx
je 0x1001e545
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0xd4]
mov eax, dword [ebp - 0xd4]
mov eax, dword [ebp - 0xd4]
mov eax, esi
cmp dword [ebp - 0xd8], esi
jne 0x1001e547
mov eax, ebx
mov dword [ebp - 0x214], eax
mov dword [ebp - 0x1c], 0x4d2fc5c3
mov dword [ebp - 0x3c], 0xfffffff6
mov byte [ebp - 9], bl
cmp byte [ebp - 9], 0
je 0x1001e56d
push ebx
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_LookupPrivilegeValueW]
mov byte [ebp - 9], bl
cmp byte [ebp - 9], 0
jne 0x1001e6f1
mov eax, dword [ebp - 0x134]
cmp dword [ebp - 8], ebx
jne 0x1001e5ad
inc dword [ebp - 0x34]
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 0x20]
add edx, 9
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
neg edx
cmp edx, eax
setne cl
imul eax, ecx, 0x6232
cmp eax, dword [ebp - 0x18]
jge 0x1001e5ad
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
imul eax, dword [ebp - 0x134]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x1c], ebx
jne 0x1001e5c8
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 8]
mov dword [ebp - 4], eax
mov eax, dword [ebp - 0x28]
add eax, dword [ebp - 0x24]
cmp eax, edi
mov eax, dword [ebp - 4]
sbb ecx, ecx
xor edx, edx
neg ecx
cmp eax, ecx
mov eax, dword [ebp - 0x24]
setne dl
xor ecx, ecx
cmp edx, eax
setl cl
xor eax, eax
cmp ecx, 0xb0f4
setl al
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x2c], ebx
cmp dword [ebp - 4], ebx
je 0x1001e6df
mov dword [ebp - 8], 0x960f57a7
mov dword [ebp - 0x38], 0x60813c27
mov dword [ebp - 0x1c], ebx
jmp 0x1001e70a
mov dword [ebp - 4], ebx
jmp 0x1001e63d
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0xfc], 0xfffffff8
inc dword [ebp - 4]
cmp dword [ebp - 4], edi
jl 0x1001e62c
push 3
mov dword [ebp - 4], ebx
pop ecx
jmp 0x1001e65b
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x26c], 0xffffffff
inc dword [ebp - 4]
cmp dword [ebp - 4], ecx
jl 0x1001e64a
mov dword [ebp - 0x24], ebx
jmp 0x1001e6da
mov dword [ebp - 0x14], 0x44bf8e16
mov dword [ebp - 0x28], 0xffffffff
mov dword [ebp - 4], esi
cmp dword [ebp - 4], ebx
jl 0x1001e6d7
push 0xfffffffffffffff7
pop ebx
mov eax, dword [ebp - 0x24]
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0xfc]
cmp eax, 0x447f
mov eax, dword [ebp - 0x20]
sete cl
add ecx, eax
mov eax, dword [ebp - 0x24]
cmp ebx, ecx
sbb edx, edx
mov dword [ebp + eax*4 - 0xfc], ecx
neg edx
mov eax, dword [ebp - 0x264]
xor ecx, ecx
cmp edx, eax
setge cl
xor edx, edx
mov dword [ebp - 0x14], ecx
mov ecx, dword [ebp - 0x14]
mov eax, dword [ebp - 0x38]
cmp ecx, eax
setl dl
add edx, dword [ebp - 0x28]
neg edx
sbb edx, edx
neg edx
mov dword [ebp - 0x28], edx
dec dword [ebp - 4]
jns 0x1001e67e
xor ebx, ebx
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], esi
jle 0x1001e665
inc dword [ebp - 8]
cmp dword [ebp - 8], 0x13
jne 0x1001e259
jmp 0x1001e611
push 0xd42
call dword [sym.imp.KERNEL32.dll_ExitThread]
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x4c], 0x862f
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], esi
jl 0x1001e6fc
mov dword [ebp - 8], ebx
mov edi, 0xebfb2c41
cmp dword [ebp - 8], ebx
jl 0x1001e859
mov dword [ebp - 0x38], 0x5ed9a924
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x2c], 0xffffffff
mov eax, dword [ebp - 8]
mov ecx, dword [ebp + eax*4 - 0x4c]
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x4c], ecx
mov eax, dword [ebp - 8]
mov eax, dword [ebp + eax*4 - 0x4c]
cmp eax, dword [ebp - 0x38]
jne 0x1001e772
mov dword [ebp - 0x14], 0xffffffff
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 8]
mov eax, dword [ebp + eax*4 - 0x4c]
cmp dword [ebp - 0x14], ebx
je 0x1001e768
mov eax, esi
cmp dword [ebp - 8], ebx
jne 0x1001e76a
mov eax, ebx
mov dword [ebp - 0x14], eax
jmp 0x1001e850
push 4
pop ecx
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x28], 0xac3d6c1d
mov dword [ebp - 0x20], 0x402be2ff
mov dword [ebp - 4], ebx
jmp 0x1001e798
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x17c], ecx
inc dword [ebp - 4]
cmp dword [ebp - 4], 2
jl 0x1001e78b
push 3
mov dword [ebp - 4], ebx
pop ecx
jmp 0x1001e7b3
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x278], ebx
inc dword [ebp - 4]
cmp dword [ebp - 4], ecx
jl 0x1001e7a6
mov eax, dword [ebp - 8]
cmp dword [ebp + eax*4 - 0x4c], ebx
je 0x1001e7c8
mov edx, esi
cmp dword [ebp - 0x4c], ebx
jne 0x1001e7ca
mov edx, ebx
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
cmp edi, eax
mov dword [ebp - 0x178], eax
sbb eax, eax
xor ecx, ecx
inc eax
cmp eax, edx
mov eax, dword [ebp - 8]
setne cl
xor edx, edx
cmp ecx, eax
setle dl
xor eax, eax
cmp edx, 0x4df7b146
mov dword [ebp - 0x278], edx
sete al
sub eax, 0xd38d
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 8]
mov eax, dword [ebp + eax*4 - 0x4c]
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jne 0x1001e829
mov eax, dword [ebp - 8]
mov eax, dword [ebp + eax*4 - 0x4c]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 8]
mov eax, dword [ebp + eax*4 - 0x4c]
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 0x2c]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setg cl
neg ecx
mov dword [ebp - 0x28], ecx
dec dword [ebp - 8]
jns 0x1001e720
mov dword [ebp - 8], 0xfffffffa
mov dword [ebp - 0x18], 0xffffffff
mov dword [ebp - 0x10], 0xcd4431fa
push 0xfffffffffffffffc
mov dword [ebp - 0x24], 0x9c4ddb84
pop eax
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x20], 0xffffffff
cmp dword [ebp - 8], ebx
je 0x1001e89d
mov eax, dword [ebp - 8]
mov edx, esi
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 8]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 8]
jmp 0x1001e89f
mov edx, ebx
mov eax, dword [ebp - 8]
xor ecx, ecx
cmp edx, eax
push 3
setl cl
pop eax
sub eax, ecx
xor ecx, ecx
cmp eax, 0x3061ece3
setg cl
cmp ecx, esi
sbb eax, eax
neg eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x24], ebx
je 0x1001e8fd
cmp dword [ebp - 0x10], ebx
je 0x1001e8fd
mov ecx, dword [ebp - 0x18]
xor edx, edx
mov eax, dword [ebp - 8]
cmp ecx, eax
setl dl
cmp edx, dword [ebp - 0x24]
jge 0x1001e8e4
mov eax, esi
cmp dword [ebp - 0x18], ebx
jne 0x1001e8e6
mov eax, ebx
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x10]
cmp dword [ebp - 0x24], eax
jle 0x1001e8fd
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 0x10]
mov eax, esi
cmp dword [ebp - 8], ebx
jne 0x1001e90f
mov eax, ebx
mov edi, dword [sym.imp.KERNEL32.dll_GetDateFormatW]
mov ecx, 0xf7673ed1
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
cmp ecx, eax
sbb eax, eax
neg eax
cmp eax, dword [ebp - 8]
jne 0x1001e94d
mov byte [ebp - 9], bl
cmp byte [ebp - 9], 0
je 0x1001eb37
push 0x209a
push ebx
push ebx
push ebx
push 0x936
push ebx
call edi
jmp 0x1001eb37
mov dword [ebp - 4], 0xae22781
mov ecx, esi
mov dword [ebp - 8], 0x4bab92a1
mov dword [ebp - 0x2c], 0x8797
cmp dword [ebp - 0x18], ebx
jne 0x1001e96b
mov ecx, ebx
mov eax, dword [ebp - 4]
imul eax, ecx
neg eax
sbb eax, eax
neg eax
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 8]
cmp dword [ebp - 4], ebx
jne 0x1001e98c
mov eax, ebx
cmp dword [ebp - 8], ebx
je 0x1001e98e
mov eax, esi
neg eax
je 0x1001e9b1
mov byte [ebp - 9], bl
cmp byte [ebp - 9], 0
je 0x1001eb37
push ebx
push 0x738
push ebx
call dword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x1001eb37
mov dword [ebp - 0x1c], 0xc717898a
xor edx, edx
mov dword [ebp - 0x28], esi
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x18]
cmp ecx, eax
mov eax, dword [ebp - 0x18]
setge dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x20]
setge cl
xor edx, edx
cmp ecx, eax
setle dl
sub edx, dword [ebp - 0x20]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
add edx, dword [ebp - 0x18]
mov eax, dword [ebp - 8]
cmp edx, eax
setge cl
xor edx, edx
cmp ecx, 0xfffffffd
setg dl
xor eax, eax
cmp edx, 9
setne al
cmp eax, dword [ebp - 4]
jg 0x1001eaa5
mov dword [ebp - 0x14], 0x8bb1b5b3
xor edx, edx
mov dword [ebp - 0x10], 0x71ce904c
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 4]
cmp ecx, eax
setle dl
mov dword [ebp - 8], edx
cmp dword [ebp - 8], ebx
je 0x1001ea40
mov ecx, esi
cmp dword [ebp - 4], ebx
jne 0x1001ea42
mov ecx, ebx
mov eax, dword [ebp - 0x14]
imul eax, dword [ebp - 0x14]
imul eax, ecx
mov dword [ebp - 4], eax
cmp dword [ebp - 0x1c], ebx
jne 0x1001ea6a
mov eax, dword [ebp - 0x10]
xor ecx, ecx
imul eax, dword [ebp - 0x1c]
cmp eax, 9
setl cl
cmp ecx, 0xffffffff
jle 0x1001ea6a
mov esi, ebx
mov ecx, dword [ebp - 0x10]
xor edx, edx
imul ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x18]
cmp eax, ecx
mov eax, dword [ebp - 4]
setge dl
xor ecx, ecx
cmp esi, eax
setg cl
sub edx, ecx
cmp edx, dword [ebp - 0x10]
jg 0x1001ea98
cmp dword [ebp - 0x10], ebx
je 0x1001ea98
xor esi, esi
inc esi
mov eax, esi
jmp 0x1001ea9d
xor esi, esi
mov eax, ebx
inc esi
mov dword [ebp - 0x28], eax
jmp 0x1001eb37
mov dword [ebp - 0x38], 0x5446388d
mov byte [ebp - 9], bl
cmp byte [ebp - 9], 0
je 0x1001eabd
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetExitCodeThread]
mov eax, dword [ebp - 8]
xor ecx, ecx
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 8]
imul edx, dword [ebp - 8]
push 0xfffffffffffffffc
imul edx, dword [ebp - 0x20]
mov eax, dword [ebp - 8]
cmp edx, eax
setl cl
mov dword [ebp - 8], ecx
mov eax, dword [ebp - 0x20]
pop ecx
cmp ecx, eax
sbb eax, eax
neg eax
imul eax, eax, 0xcc56
cmp eax, dword [ebp - 0x24]
jne 0x1001eaf8
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp - 0x38]
mov eax, dword [ebp - 4]
neg edx
sbb edx, edx
xor ecx, ecx
neg edx
cmp eax, edx
mov eax, dword [ebp - 0x28]
setg cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 4]
setge dl
xor ecx, ecx
cmp edx, eax
mov edx, dword [ebp - 4]
setne cl
sub edx, ecx
xor ecx, ecx
sub edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x24]
cmp edx, eax
setg cl
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0x5c], 0xfff9
mov dword [ebp - 8], 0x960f57a7
mov dword [ebp - 0x38], 0x60813c27
mov dword [ebp - 0x1c], ebx
jmp 0x1001eb5f
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x40], 0x862f
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], esi
jl 0x1001eb51
mov dword [ebp - 8], ebx
cmp dword [ebp - 8], ebx
jl 0x1001ecb4
mov edi, 0xebfb2c41
mov dword [ebp - 0x38], 0x5ed9a924
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x2c], 0xffffffff
mov eax, dword [ebp - 8]
mov ecx, dword [ebp + eax*4 - 0x40]
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x40], ecx
mov eax, dword [ebp - 8]
mov eax, dword [ebp + eax*4 - 0x40]
cmp eax, dword [ebp - 0x38]
jne 0x1001ebc7
mov dword [ebp - 0x14], 0xffffffff
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 8]
mov eax, dword [ebp + eax*4 - 0x40]
cmp dword [ebp - 0x14], ebx
je 0x1001ebbd
mov eax, esi
cmp dword [ebp - 8], ebx
jne 0x1001ebbf
mov eax, ebx
mov dword [ebp - 0x14], eax
jmp 0x1001eca5
push 4
pop ecx
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x28], 0xac3d6c1d
mov dword [ebp - 0x20], 0x402be2ff
mov dword [ebp - 4], ebx
jmp 0x1001ebed
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x1a4], ecx
inc dword [ebp - 4]
cmp dword [ebp - 4], 2
jl 0x1001ebe0
push 3
mov dword [ebp - 4], ebx
pop ecx
jmp 0x1001ec08
mov eax, dword [ebp - 4]
mov dword [ebp + eax*4 - 0x230], ebx
inc dword [ebp - 4]
cmp dword [ebp - 4], ecx
jl 0x1001ebfb
mov eax, dword [ebp - 8]
cmp dword [ebp + eax*4 - 0x40], ebx
je 0x1001ec1d
mov edx, esi
cmp dword [ebp - 0x40], ebx
jne 0x1001ec1f
mov edx, ebx
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
cmp edi, eax
mov dword [ebp - 0x1a0], eax
sbb eax, eax
xor ecx, ecx
inc eax
cmp eax, edx
mov eax, dword [ebp - 8]
setne cl
xor edx, edx
cmp ecx, eax
setle dl
xor eax, eax
cmp edx, 0x4df7b146
mov dword [ebp - 0x230], edx
sete al
sub eax, 0xd38d
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 8]
mov eax, dword [ebp + eax*4 - 0x40]
mov eax, dword [ebp - 0x14]
cmp dword [ebp - 0x14], ebx
jne 0x1001ec7e
mov eax, dword [ebp - 8]
mov eax, dword [ebp + eax*4 - 0x40]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 8]
mov eax, dword [ebp + eax*4 - 0x40]
mov edx, dword [ebp - 8]
mov eax, dword [ebp - 0x2c]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setg cl
neg ecx
mov dword [ebp - 0x28], ecx
dec dword [ebp - 8]
jns 0x1001eb75
mov edi, dword [sym.imp.KERNEL32.dll_GetDateFormatW]
push 3
pop eax
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x10], 0x57a7c203
mov dword [ebp - 0x1c], ebx
jmp 0x1001ecd7
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x184], 0x62fd41e5
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x1001ecc6
mov byte [ebp - 9], bl
cmp byte [ebp - 9], 0
je 0x1001eced
push ebx
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
mov dword [ebp - 0x10], ebx
jmp 0x1001ed03
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x184], 0x70ade21
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], 2
jl 0x1001ecf2
mov dword [ebp - 8], 0xfffffffa
mov dword [ebp - 0x18], 0xffffffff
mov dword [ebp - 0x10], 0xcd4431fa
push 0xfffffffffffffffc
mov dword [ebp - 0x24], 0x9c4ddb84
pop eax
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x20], 0xffffffff
cmp dword [ebp - 8], ebx
je 0x1001ed4d
mov eax, dword [ebp - 8]
mov edx, esi
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 8]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 8]
jmp 0x1001ed4f
mov edx, ebx
mov eax, dword [ebp - 8]
xor ecx, ecx
cmp edx, eax
push 3
setl cl
pop eax
sub eax, ecx
xor ecx, ecx
cmp eax, 0x3061ece3
setg cl
cmp ecx, esi
sbb eax, eax
neg eax
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x24], ebx
je 0x1001edad
cmp dword [ebp - 0x10], ebx
je 0x1001edad
mov ecx, dword [ebp - 0x18]
xor edx, edx
mov eax, dword [ebp - 8]
cmp ecx, eax
setl dl
cmp edx, dword [ebp - 0x24]
jge 0x1001ed94
mov eax, esi
cmp dword [ebp - 0x18], ebx
jne 0x1001ed96
mov eax, ebx
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x10]
cmp dword [ebp - 0x24], eax
jle 0x1001edad
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 0x10]
mov eax, esi
cmp dword [ebp - 8], ebx
jne 0x1001edbf
mov eax, ebx
mov dword [ebp - 0x10], eax
mov ecx, 0xf7673ed1
mov eax, dword [ebp - 0x10]
cmp ecx, eax
sbb eax, eax
neg eax
cmp eax, dword [ebp - 8]
jne 0x1001edf7
mov byte [ebp - 9], bl
cmp byte [ebp - 9], 0
je 0x1001efe1
push 0x209a
push ebx
push ebx
push ebx
push 0x936
push ebx
call edi
jmp 0x1001efe1
mov dword [ebp - 8], 0xae22781
mov ecx, esi
mov dword [ebp - 4], 0x4bab92a1
mov dword [ebp - 0x2c], 0x8797
cmp dword [ebp - 0x18], ebx
jne 0x1001ee15
mov ecx, ebx
mov eax, dword [ebp - 8]
imul eax, ecx
neg eax
sbb eax, eax
neg eax
mov dword [ebp - 8], eax
mov eax, dword [ebp - 8]
mov eax, dword [ebp - 4]
cmp dword [ebp - 8], ebx
jne 0x1001ee36
mov eax, ebx
cmp dword [ebp - 4], ebx
je 0x1001ee38
mov eax, esi
neg eax
je 0x1001ee5b
mov byte [ebp - 9], bl
cmp byte [ebp - 9], 0
je 0x1001efe1
push ebx
push 0x738
push ebx
call dword [sym.imp.KERNEL32.dll_HeapFree]
jmp 0x1001efe1
mov dword [ebp - 0x1c], 0xc717898a
xor edx, edx
mov dword [ebp - 0x28], esi
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x18]
cmp ecx, eax
mov eax, dword [ebp - 0x18]
setge dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x20]
setge cl
xor edx, edx
cmp ecx, eax
setle dl
sub edx, dword [ebp - 0x20]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
add edx, dword [ebp - 0x18]
mov eax, dword [ebp - 4]
cmp edx, eax
setge cl
xor edx, edx
cmp ecx, 0xfffffffd
setg dl
xor eax, eax
cmp edx, 9
setne al
cmp eax, dword [ebp - 8]
jg 0x1001ef4f
mov dword [ebp - 0x14], 0x8bb1b5b3
xor edx, edx
mov dword [ebp - 0x10], 0x71ce904c
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x1c]
mov eax, dword [ebp - 8]
cmp ecx, eax
setle dl
mov dword [ebp - 4], edx
cmp dword [ebp - 4], ebx
je 0x1001eeea
mov ecx, esi
cmp dword [ebp - 8], ebx
jne 0x1001eeec
mov ecx, ebx
mov eax, dword [ebp - 0x14]
imul eax, dword [ebp - 0x14]
imul eax, ecx
mov dword [ebp - 8], eax
cmp dword [ebp - 0x1c], ebx
jne 0x1001ef14
mov eax, dword [ebp - 0x10]
xor ecx, ecx
imul eax, dword [ebp - 0x1c]
cmp eax, 9
setl cl
cmp ecx, 0xffffffff
jle 0x1001ef14
mov esi, ebx
mov ecx, dword [ebp - 0x10]
xor edx, edx
imul ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x18]
cmp eax, ecx
mov eax, dword [ebp - 8]
setge dl
xor ecx, ecx
cmp esi, eax
setg cl
sub edx, ecx
cmp edx, dword [ebp - 0x10]
jg 0x1001ef42
cmp dword [ebp - 0x10], ebx
je 0x1001ef42
xor esi, esi
inc esi
mov eax, esi
jmp 0x1001ef47
xor esi, esi
mov eax, ebx
inc esi
mov dword [ebp - 0x28], eax
jmp 0x1001efe1
mov dword [ebp - 0x38], 0x5446388d
mov byte [ebp - 9], bl
cmp byte [ebp - 9], 0
je 0x1001ef67
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetExitCodeThread]
mov eax, dword [ebp - 4]
xor ecx, ecx
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 4]
imul edx, dword [ebp - 4]
push 0xfffffffffffffffc
imul edx, dword [ebp - 0x20]
mov eax, dword [ebp - 4]
cmp edx, eax
setl cl
mov dword [ebp - 4], ecx
mov eax, dword [ebp - 0x20]
pop ecx
cmp ecx, eax
sbb eax, eax
neg eax
imul eax, eax, 0xcc56
cmp eax, dword [ebp - 0x24]
jne 0x1001efa2
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x24]
mov edx, dword [ebp - 0x38]
mov eax, dword [ebp - 8]
neg edx
sbb edx, edx
xor ecx, ecx
neg edx
cmp eax, edx
mov eax, dword [ebp - 0x28]
setg cl
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 8]
setge dl
xor ecx, ecx
cmp edx, eax
mov edx, dword [ebp - 8]
setne cl
sub edx, ecx
xor ecx, ecx
sub edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x24]
cmp edx, eax
setg cl
mov dword [ebp - 0x28], ecx
mov dword [ebp - 4], 0x82eac453
push 0xfffffffffffffff7
mov dword [ebp - 0x10], 0x37b30477
pop eax
mov dword [ebp - 0x20], 0x3a72
mov dword [ebp - 0x24], eax
push 7
mov dword [ebp - 0x14], 0xfffffff8
pop edx
mov dword [ebp - 0x14], edx
mov dword [ebp - 0x28], 0xe11771b7
mov dword [ebp - 0x34], 2
push 3
mov dword [ebp - 0x38], esi
mov dword [ebp - 0x1c], ebx
pop edi
jmp 0x1001f033
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x254], 0x70055833
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], edi
jl 0x1001f022
cmp dword [ebp - 4], ebx
jne 0x1001f083
mov dword [ebp - 0x10], esi
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 4]
cmp dword [ebp - 0x10], ebx
je 0x1001f04e
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 4]
xor ecx, ecx
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x24]
cmp eax, 0x9e8
setl cl
mov dword [ebp - 0x14], ecx
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], edx
je 0x1001f08f
cmp dword [ebp - 0x10], ebx
je 0x1001f08f
cmp dword [ebp - 0x10], ebx
je 0x1001f08f
mov eax, esi
cmp dword [ebp - 0x14], ebx
jne 0x1001f091
mov eax, ebx
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], ebx
jne 0x1001f0a0
mov eax, ebx
cmp dword [ebp - 0x28], ebx
je 0x1001f0a2
mov eax, esi
mov edx, dword [ebp - 0x20]
xor ecx, ecx
imul edx, eax
mov eax, dword [ebp - 4]
cmp edx, eax
setne cl
cmp ecx, dword [ebp - 4]
jge 0x1001f0ba
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x254], 4
cmp dword [ebp - 4], 0xfffffffe
sbb edx, edx
neg edx
sub edx, dword [ebp - 4]
mov eax, dword [ebp - 0x24]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
setne cl
mov dword [ebp - 4], ecx
mov eax, dword [ebp - 4]
mov dword [ebp - 0x38], eax
mov eax, 0x2a103abe
mov dword [ebp - 0x3c], 0xcf455dbf
mov dword [ebp - 0x34], 0xfe387fb0
mov dword [ebp - 4], 0xec2db221
mov dword [ebp - 0x24], 0x14768c0a
mov dword [ebp - 0x18], 0xcd509978
mov dword [ebp - 0x14], 0xea2a3b3f
mov dword [ebp - 0x20], 0xfffffffd
mov dword [ebp - 0x28], 0xffffffff
mov dword [ebp - 0x154], eax
mov dword [ebp - 0x150], eax
mov dword [ebp - 0x14c], eax
mov dword [ebp - 0x148], eax
mov dword [ebp - 0x10], 6
mov dword [ebp - 8], ebx
jmp 0x1001f156
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x44], 0xd42374b1
inc dword [ebp - 8]
cmp dword [ebp - 8], esi
jl 0x1001f148
mov dword [ebp - 8], ebx
cmp dword [ebp - 8], edi
jge 0x1001f178
push 0xfffffffffffffff7
pop ecx
mov eax, dword [ebp - 8]
mov dword [ebp + eax*4 - 0x248], ecx
inc dword [ebp - 8]
cmp dword [ebp - 8], edi
jl 0x1001f166
inc dword [ebp - 0x20]
xor ecx, ecx
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x34]
sub edx, 0x5674
cmp eax, edx
setl cl
mov dword [ebp - 0x28], ecx
mov eax, dword [ebp - 0x44]
imul eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x20]
sub eax, 0xfffe
neg eax
sbb eax, eax
xor edx, edx
inc eax
add ecx, eax
mov eax, dword [ebp - 0x44]
cmp ecx, eax
mov eax, dword [ebp - 0x18]
setl dl
xor ebx, ebx
cmp edx, 0xfffffffa
setg bl
xor ecx, ecx
cmp eax, ebx
setge cl
xor ebx, ebx
mov dword [ebp - 0x44], ecx
test ecx, ecx
jne 0x1001f1d3
mov eax, ebx
cmp dword [ebp - 0x44], ebx
je 0x1001f1d5
mov eax, esi
mov dword [ebp - 0x14], eax
xor ecx, ecx
mov eax, dword [ebp - 0x14]
cmp eax, 0xd47c
mov esi, dword [sym.imp.USER32.dll_GetDC]
setl cl
mov edi, dword [sym.imp.USER32.dll_GetDesktopWindow]
mov dword [ebp - 0x24], ecx
xor edx, edx
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 4]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x34]
add eax, 0x3e8a
add ecx, eax
mov eax, dword [ebp - 0x34]
cmp ecx, eax
setg dl
mov dword [ebp - 4], edx
cmp dword [ebp - 4], ebx
je 0x1001f36c
mov dword [ebp - 8], 0xffffffff
mov dword [ebp - 0x2c], 0xfffffffe
mov dword [ebp - 0x38], 0xc1c926a5
mov dword [ebp - 0x1c], ebx
jmp 0x1001f257
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x18c], 0xfffe
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x1001f246
mov dword [ebp - 0x18], ebx
jmp 0x1001f313
mov dword [ebp - 0x1c], 0x3c25
mov dword [ebp - 4], ebx
jmp 0x1001f302
mov eax, dword [ebp - 0x18]
cmp dword [ebp + eax*4 - 0x44], ebx
jne 0x1001f2e7
mov eax, dword [ebp - 4]
cmp dword [ebp + eax*4 - 0x44], ebx
jne 0x1001f2e7
cmp dword [ebp - 8], ebx
je 0x1001f298
cmp dword [ebp - 0x14], ebx
je 0x1001f298
cmp dword [ebp - 0x1c], ebx
je 0x1001f298
xor ebx, ebx
inc ebx
mov ecx, dword [ebp - 0x1c]
add ecx, 0xffffc861
add ecx, ebx
neg ecx
sbb ecx, ecx
xor ebx, ebx
inc ecx
sub ecx, dword [ebp - 8]
mov eax, dword [ebp - 0x188]
add ecx, eax
mov eax, dword [ebp - 0x44]
cmp ecx, eax
mov eax, dword [ebp - 4]
setne bl
xor edx, edx
mov eax, dword [ebp + eax*4 - 0x44]
cmp ebx, eax
mov eax, dword [ebp - 0x24]
setne dl
xor ecx, ecx
cmp eax, edx
mov eax, dword [ebp - 4]
setle cl
xor ebx, ebx
mov dword [ebp + eax*4 - 0x44], ecx
cmp dword [ebp - 8], ebx
jne 0x1001f2e7
mov eax, ebx
jmp 0x1001f2ea
xor eax, eax
inc eax
mov edx, dword [ebp - 0x34]
xor ecx, ecx
add edx, eax
mov eax, dword [ebp - 0x244]
cmp edx, eax
setge cl
mov dword [ebp - 0x2c], ecx
inc dword [ebp - 4]
cmp dword [ebp - 4], ebx
jle 0x1001f274
cmp dword [ebp - 0x1c], ebx
jne 0x1001f31c
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
jle 0x1001f265
mov eax, dword [ebp - 0x150]
push 5
pop ecx
cmp ecx, eax
sbb eax, eax
inc eax
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x150]
mov eax, dword [ebp - 8]
mov edx, dword [ebp - 0x28]
sub edx, dword [ebp - 0x20]
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
imul edx, dword [ebp - 0x14]
mov eax, dword [ebp - 8]
cmp edx, eax
mov eax, dword [ebp - 0x38]
setle cl
xor edx, edx
cmp ecx, 1
setle dl
xor ecx, ecx
cmp edx, eax
setg cl
mov dword [ebp - 0x2c], ecx
jmp 0x1001f3f4
mov dword [ebp - 0x2c], 0xffffffff
mov dword [ebp - 0x10], ebx
jmp 0x1001f3ef
mov dword [ebp - 0x38], 1
mov dword [ebp - 0x24], ebx
cmp dword [ebp - 0x24], ebx
jl 0x1001f3a3
mov byte [ebp - 9], bl
cmp byte [ebp - 9], 0
je 0x1001f39b
push ebx
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceW]
inc dword [ebp - 0x2c]
dec dword [ebp - 0x24]
jns 0x1001f387
mov byte [ebp - 9], bl
cmp byte [ebp - 9], 0
je 0x1001f3ec
push 0x1a2d
push 0x1c1c
push ebx
push ebx
push 0x20ce
push 0x1ad
push 0x1853
push 0x1e02
push 0x525
push 0x506
push 0x80
push 0xbe0
call edi
push eax
call esi
push eax
call dword [sym.imp.GDI32.dll_StretchDIBits]
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ebx
jle 0x1001f378
push 0xfffffffffffffff7
pop eax
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x24], 0x2364
mov dword [ebp - 0x14], 0xf7a7
mov dword [ebp - 0x28], 0xa8358bd4
push 3
mov dword [ebp - 0x2c], 0x2ee72c34
mov dword [ebp - 0x18], ebx
pop ecx
jmp 0x1001f42f
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1bc], 0xfffffff6
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x1001f41e
push 2
mov dword [ebp - 0x18], ebx
pop ecx
jmp 0x1001f449
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xe4], ebx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x1001f43c
mov dword [ebp - 0x18], ebx
jmp 0x1001f464
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x88], 0xffffffff
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x1001f453
mov dword [ebp - 0x18], ebx
jmp 0x1001f47b
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1c4], ebx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x1001f46e
cmp dword [ebp - 0x24], ebx
je 0x1001f50b
mov eax, dword [ebp - 0x24]
xor ecx, ecx
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x1b4]
mov eax, dword [ebp - 0xe0]
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x88]
mov dword [ebp - 0x2c], eax
mov edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x88]
sub edx, 0x4adc
cmp edx, eax
mov eax, dword [ebp - 0x1b4]
setl cl
xor edx, edx
add ecx, 0xfffffff7
cmp ecx, eax
mov eax, dword [ebp - 0xe0]
sete dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x88]
setne cl
xor edx, edx
cmp ecx, eax
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x88]
setl dl
imul ecx, edx
inc dword [ebp - 0x14]
cmp ecx, eax
jge 0x1001f50b
xor eax, eax
inc eax
jmp 0x1001f50d
mov eax, ebx
mov dword [ebp - 0x1c4], eax
push 2
mov dword [ebp - 0x10], 0x57a7c203
mov dword [ebp - 0x20], ebx
pop ecx
jmp 0x1001f533
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x1b0], 0x62fd41e5
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ecx
jl 0x1001f522
mov byte [ebp - 9], bl
cmp byte [ebp - 9], 0
je 0x1001f54b
push ebx
call dword [sym.imp.KERNEL32.dll_DeleteFileA]
push 2
pop ecx
mov dword [ebp - 0x10], ebx
jmp 0x1001f561
mov eax, dword [ebp - 0x10]
mov dword [ebp + eax*4 - 0x1b0], 0x70ade21
inc dword [ebp - 0x10]
cmp dword [ebp - 0x10], ecx
jl 0x1001f550
mov dword [ebp - 4], 0x82eac453
push 0xfffffffffffffff7
mov dword [ebp - 0x34], 0x37b30477
pop eax
mov dword [ebp - 0x14], 0x3a72
mov dword [ebp - 0x10], eax
push 7
mov dword [ebp - 0x2c], 0xfffffff8
pop edx
mov dword [ebp - 0x28], edx
mov dword [ebp - 0x1c], 0xe11771b7
mov dword [ebp - 0x20], ecx
push 3
mov dword [ebp - 0x38], 1
mov dword [ebp - 0x20], ebx
pop ecx
jmp 0x1001f5b8
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x20c], 0x70055833
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ecx
jl 0x1001f5a7
cmp dword [ebp - 4], ebx
jne 0x1001f60c