Function at 0x10003cb8
Capabilities:
Create directory
Get common file path
Get disk information

Disassembly:
mov eax, 0x100527fa
call fcn.10052218
sub esp, 0x210
mov dword [ebp - 0x28], 7
push ebx
xor ebx, ebx
mov dword [ebp - 0xbc], edx
mov dword [ebp - 0x30], ebx
xor edx, edx
mov dword [ebp - 0x2c], 0xa6edad94
inc edx
mov dword [ebp - 0x34], 6
mov dword [ebp - 0x3c], 0xfffffff8
mov dword [ebp - 0x1c], 0xfffffffa
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x3c], 0x98b9
push esi
mov dword [ebp - 0x38], edx
push edi
mov dword [ebp - 0x24], 0xcc321a07
mov dword [ebp - 0x10], esp
mov dword [ebp - 0xa4], ecx
mov dword [ebp - 0x138], ebx
mov dword [ebp - 0x18], ebx
jmp 0x10003d35
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xe0], 0xfffffffa
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x10003d24
mov dword [ebp - 0x18], ebx
jmp 0x10003d51
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x128], 0xc842f88d
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x10003d40
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x128]
inc dword [ebp - 0x24]
mov ecx, dword [ebp - 0xdc]
mov eax, dword [ebp - 0x38]
sub ecx, eax
mov eax, dword [ebp - 0x30]
imul eax, ecx
xor ecx, ecx
cmp eax, 0xa9a1
setne cl
sub ecx, 0xb29d
neg ecx
sbb ecx, ecx
add ecx, 0xfffffffb
cmp edx, ecx
sbb ecx, ecx
inc ecx
imul ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x3c]
neg ecx
sbb ecx, ecx
neg ecx
sub ecx, eax
mov eax, 0xb5c74600
imul ecx, dword [ebp - 0x28]
cmp eax, ecx
sbb eax, eax
neg eax
cmp eax, 0x439fcb6e
je 0x10003dbf
mov eax, edx
cmp dword [ebp - 0x128], ebx
jne 0x10003dc1
mov eax, ebx
cmp dword [ebp - 0xdc], eax
jne 0x10003dd0
mov eax, edx
cmp dword [ebp - 0x2c], ebx
jne 0x10003dd2
mov eax, ebx
xor ecx, ecx
cmp eax, edx
mov eax, dword [ebp - 0x1c]
setle cl
add eax, 0xc64e
add eax, ecx
je 0x10003de8
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
sub eax, 0xfffffff6
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x3c], 0xffffffff
mov dword [ebp - 0x24], 0xb5ca9869
mov dword [ebp - 0x24], edx
mov dword [ebp - 0x30], 0xfe6d39c7
mov dword [ebp - 0x24], 0xdbd0176d
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x38], 0x8573
mov dword [ebp - 0x30], 0x9cd17cd9
mov dword [ebp - 0x2c], ebx
jmp 0x10003e38
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0xd8], edx
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 3
jl 0x10003e2b
mov dword [ebp - 0xd8], edx
xor edx, edx
mov eax, dword [ebp - 0xd8]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x28]
dec dword [ebp - 0x28]
mov ecx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x24]
lea eax, [eax + ecx*2]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x24]
cmp eax, 0x4042
mov eax, dword [ebp - 0xd8]
setle dl
xor ecx, ecx
cmp edx, eax
setge cl
mov dword [ebp - 0x24], ecx
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], ebx
je 0x10003e90
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x38]
mov ecx, 0x2e96
sub ecx, eax
xor edx, edx
mov eax, dword [ebp - 0xd4]
cmp ecx, 0x7279
setge dl
xor ecx, ecx
cmp eax, edx
setge cl
mov dword [ebp - 0x30], ecx
mov dword [ebp - 0x24], 0xfffffff8
mov dword [ebp - 0x24], 0xa2b8ea2c
mov dword [ebp - 0x18], ebx
jmp 0x10003ed6
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x64], 0xfffffffb
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x10003ec8
mov dword [ebp - 0x18], ebx
jmp 0x10003ef2
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1ac], 0xffffffff
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x10003ee1
mov eax, dword [ebp - 0x64]
xor edx, edx
cmp eax, 0x1720348f
mov eax, dword [ebp - 0x64]
setne dl
xor ecx, ecx
cmp edx, eax
setle cl
xor edx, edx
mov dword [ebp - 0x24], ecx
mov ecx, dword [ebp - 0x64]
mov eax, dword [ebp - 0x24]
cmp eax, ecx
mov eax, dword [ebp - 0x60]
setg dl
xor ecx, ecx
cmp edx, eax
setg cl
cmp dword [ebp - 0x64], ecx
jne 0x10003f37
cmp dword [ebp - 0x60], ebx
jne 0x10003f37
mov eax, ebx
jmp 0x10003f3a
xor eax, eax
inc eax
xor edx, edx
cmp eax, 0x5d9b4e94
mov eax, dword [ebp - 0x60]
sete dl
sub edx, 0xffff
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
cmp edx, eax
mov eax, dword [ebp - 0x60]
setge cl
sub ecx, eax
mov eax, dword [ebp - 0x60]
sub eax, ecx
neg eax
sbb eax, eax
xor edx, edx
inc eax
cmp eax, 0x6038
mov eax, dword [ebp - 0x60]
setge dl
xor ecx, ecx
cmp edx, eax
setne cl
xor edx, edx
mov dword [ebp - 0x24], ecx
mov ecx, dword [ebp - 0x60]
mov eax, dword [ebp - 0x24]
cmp eax, ecx
setle dl
mov dword [ebp - 0x1ac], edx
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x88], 0x3006d801
mov dword [ebp - 0x84], 0x5d191304
mov dword [ebp - 0x80], 0x21b0024
mov dword [ebp - 0x7c], 0x50e0428
mov word [ebp - 0x78], 0x30d
mov byte [ebp - 0x76], 0xe
mov dword [ebp - 0x28], 0xe48d327c
mov dword [ebp - 0x38], 0xdb505206
mov dword [ebp - 0x24], 0x471b
cmp dword [ebp - 0x24], 0x47e0
jle 0x10004015
mov esi, ebx
mov edi, ebx
mov eax, edi
mov ecx, 0x1006a318
and eax, esi
cdq
push edx
push eax
call fcn.10001c75
inc edi
cmp edi, 0x6719
jl 0x10003fe6
inc esi
cmp esi, 0x4f0a
jl 0x10003fe4
push 0xf10
push ebx
call dword [sym.imp.KERNEL32.dll_GetSystemDirectoryA]
mov dword [ebp - 4], ebx
cmp dword [ebp - 0x24], 0x4695
jge 0x1000404e
mov edx, str.jmfifram_ezetokzx_jqssj_jau_cnkyqz
mov ecx, 0x1006a318
call fcn.10003644
jmp 0x1000404e
or dword [ebp - 4], 0xffffffff
xor ecx, ecx
mov dword [ebp - 0x18], 0xffffffff
inc ecx
mov dword [ebp - 0x1c], ebx
jmp 0x10004072
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x8c], 5
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ecx
jl 0x10004061
mov dword [ebp - 0x1c], ebx
jmp 0x1000408d
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0xb4], 0x2e6e7f73
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x1000407c
mov dword [ebp - 0x28], 0x2881
cmp dword [ebp - 0x28], 0x2aaf
jle 0x100040e0
mov edi, ebx
mov esi, ebx
mov eax, ebx
mov dword [ebp - 0x24], ebx
lea ecx, [eax + esi]
mov eax, edi
sar eax, cl
mov ecx, 0x1006a318
cdq
push edx
push eax
call fcn.10001c75
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
cmp eax, 0x541c
jl 0x100040ac
inc esi
cmp esi, 0x676a
jl 0x100040a7
inc edi
cmp edi, 0xc4c
jl 0x100040a5
mov dword [ebp - 0x1c], ebx
jmp 0x100040f6
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x1c0], 0xdade
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jl 0x100040e5
mov dword [ebp - 4], 2
cmp dword [ebp - 0x28], 0x2710
jge 0x10004139
mov edx, str.adtbeusf_iyj_wgutckpxw_rjyguoll_oixaaxv
mov ecx, 0x1006a318
call fcn.10003644
jmp 0x10004139
or dword [ebp - 4], 0xffffffff
xor edx, edx
inc edx
inc dword [ebp - 0x18]
mov dword [ebp - 0x28], 0xfffffffd
jmp 0x10004257
mov dword [ebp - 0x2c], 0xfd07
mov dword [ebp - 0x18], ebx
jmp 0x100041e9
mov dword [ebp - 0x38], 3
jmp 0x100041e0
mov dword [ebp - 0x1c], 0xfffffff8
mov dword [ebp - 0x30], ebx
dec dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ebx
jmp 0x100041d7
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0xb4]
cmp dword [ebp - 0x2c], ebx
jne 0x100041a0
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp + eax*4 - 0xb4]
mov eax, dword [ebp - 0x1c]
sub ecx, dword [ebp + eax*4 - 0xb4]
mov eax, ebx
je 0x100041a2
mov eax, edx
mov dword [ebp - 0x8c], eax
add eax, 9
je 0x100041bb
mov eax, dword [ebp - 0x1c]
mov esi, edx
cmp dword [ebp + eax*4 - 0xb4], ebx
jne 0x100041bd
mov esi, ebx
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0xb4]
cmp eax, esi
setl cl
mov dword [ebp - 0x30], ecx
mov eax, dword [ebp - 0x2c]
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 2
jle 0x10004179
dec dword [ebp - 0x38]
cmp dword [ebp - 0x38], 0xffffffef
jne 0x10004167
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0x15
jge 0x1000415e
mov dword [ebp - 0x2c], edx
jmp 0x1000424e
mov dword [ebp - 0x24], 0x3988
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x30], edx
mov dword [ebp - 0x18], ebx
jmp 0x1000421b
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x8c], 0x63832542
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
jle 0x1000420a
mov eax, dword [ebp - 0xac]
cmp eax, dword [ebp - 0x24]
jg 0x10004246
mov eax, dword [ebp - 0x8c]
xor ecx, ecx
cmp eax, edx
mov eax, dword [ebp - 0x24]
setle cl
add eax, ecx
cmp eax, 0xe5ff1fc5
mov eax, ebx
jae 0x10004248
mov eax, edx
mov dword [ebp - 0x30], eax
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 0x1e
jg 0x100041f8
dec dword [ebp - 0x28]
cmp dword [ebp - 0x28], 0xffffffed
jge 0x1000414f
push 0x6c
pop eax
mov word [ebp - 0xee], ax
mov dword [ebp - 0x38], 0xfffffffc
mov dword [ebp - 0x28], ebx
jmp 0x10004288
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x204], 0xdc7555b7
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 3
jl 0x10004277
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x1000429f
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_FileTimeToSystemTime]
mov dword [ebp - 0x38], 0xfffffff3
jmp 0x100042ee
mov dword [ebp - 0x34], 0x72fd
mov dword [ebp - 0x34], 0xfffffff8
mov dword [ebp - 0x34], 0xfffffffb
mov dword [ebp - 0x28], ebx
jmp 0x100042cf
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x190], ebx
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 4
jl 0x100042c2
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x100042e5
push ebx
call dword [sym.imp.KERNEL32.dll_RtlCaptureContext]
inc dword [ebp - 0x188]
inc dword [ebp - 0x38]
cmp dword [ebp - 0x38], 0xfffffffb
jg 0x100042a8
push 2
mov edi, ebx
pop esi
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x2c], esi
cmp esi, 0x13
jae 0x100047fa
mov dword [ebp - 0x38], 0xd5e48d32
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x10004325
push 0x20fc
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_OpenSCManagerW]
mov dword [ebp - 0x38], 6
cmp dword [ebp - 0x38], 0xfffffff9
je 0x10004387
mov esi, dword [sym.imp.USER32.dll_GetDC]
mov edi, dword [sym.imp.USER32.dll_GetDesktopWindow]
mov dword [ebp - 0x28], 0x665683c8
mov dword [ebp - 0x28], ebx
jmp 0x10004372
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x1000436f
push 0xa26
push ebx
push 0x940
push 0x1107
call edi
push eax
call esi
push eax
call dword [sym.imp.GDI32.dll_ExtFloodFill]
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], 0x16
jge 0x1000434a
dec dword [ebp - 0x38]
cmp dword [ebp - 0x38], 0xfffffff9
jne 0x1000433e
mov esi, dword [ebp - 0x2c]
mov edi, dword [ebp - 0x24]
movzx eax, byte [ebp - 0x88]
lea eax, [eax*2 + 2]
cmp esi, eax
jne 0x100046ec
movzx edi, byte [ebp + esi - 0x88]
xor edx, edx
inc edi
inc edx
mov dword [ebp - 0x38], edx
mov dword [ebp - 0x18], 0xb064bae0
mov dword [ebp - 0x40], 0x2657
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x34], edi
mov dword [ebp - 0x28], ebx
jmp 0x100043d3
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x58], 0x2ba75a59
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], edx
jl 0x100043c5
mov dword [ebp - 0x38], ebx
cmp dword [ebp - 0x38], edx
jg 0x1000458d
mov dword [ebp - 0x1c], 0xdc7555b7
mov dword [ebp - 0x28], ebx
jmp 0x100043fe
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x70], 0x57e8b72f
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], edx
jl 0x100043f0
mov dword [ebp - 0x1c], ebx
jmp 0x10004455
mov dword [ebp - 0x28], 0xf8b8ae50
mov dword [ebp - 0x30], 0xb641b44a
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp + eax*4 - 0x70]
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x70], ecx
mov dword [ebp - 0x28], 0x34b6
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x70]
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x30], edx
jle 0x1000444d
mov eax, ebx
cmp dword [ebp - 0x70], ebx
je 0x1000444f
mov eax, edx
mov dword [ebp - 0x18], eax
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ebx
jle 0x10004408
mov dword [ebp - 0x1c], ebx
cmp dword [ebp - 0x1c], ebx
jg 0x10004585
mov dword [ebp - 0x28], 6
mov dword [ebp - 0x3c], 0xeb4983ca
mov dword [ebp - 0x30], 0x14e
cmp dword [ebp - 0x30], 0x4b6
jle 0x100044d5
mov esi, ebx
mov dword [ebp - 0x28], ebx
mov edi, esi
mov esi, 0x2cff
mov eax, edi
lea ecx, [ebp - 0x1f8]
cdq
push edx
push eax
call fcn.10003c04
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x100044aa
mov eax, dword [eax]
push eax
call fcn.1003a280
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x1f8]
call fcn.10002056
dec edi
dec esi
jne 0x10004490
mov esi, dword [ebp - 0x28]
inc esi
mov dword [ebp - 0x28], esi
cmp esi, 0x3873
jl 0x10004489
xor edx, edx
inc edx
mov eax, dword [ebp - 0x1c]
cmp dword [ebp + eax*4 - 0x58], ebx
je 0x10004552
mov eax, dword [ebp - 0x40]
cmp edx, eax
sbb eax, eax
neg eax
sub eax, 7
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x28]
cmp eax, dword [ebp - 0x1c]
je 0x100044fc
mov esi, edx
cmp dword [ebp - 0x70], ebx
jne 0x100044fe
mov esi, ebx
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x58]
mov ecx, dword [ebp - 0x18]
sub ecx, eax
mov eax, dword [ebp - 0x1c]
neg ecx
sbb ecx, ecx
xor edx, edx
inc ecx
cmp ecx, esi
setne dl
sub edx, 0xe630971c
neg edx
sbb edx, edx
inc edx
cmp edx, dword [ebp + eax*4 - 0x58]
jl 0x10004537
mov eax, dword [ebp - 0x1c]
cmp dword [ebp + eax*4 - 0x58], ebx
jne 0x10004537
mov ecx, ebx
jmp 0x1000453a
xor ecx, ecx
inc ecx
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x58], ecx
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x58]
cmp eax, dword [ebp - 0x3c]
jge 0x10004552
xor ecx, ecx
inc ecx
jmp 0x10004554
mov ecx, ebx
xor eax, eax
cmp ecx, 0x4a6e8f59
setne al
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x30], 0x91
jge 0x10004576
push str.kbfqky_rcfixn_ibiffi_hnon_huzzxvyey_wlxm_fqeeyd_suztfkgw_mvmrku_ftvdr_cycp_hwqr_wumlhq_nnocknwn
call fcn.1003a280
pop ecx
or dword [ebp - 4], 0xffffffff
xor edx, edx
inc dword [ebp - 0x1c]
inc edx
jmp 0x1000445d
inc dword [ebp - 0x38]
jmp 0x100043db
mov esi, dword [ebp - 0x2c]
movzx eax, byte [ebp + esi - 0x88]
dec esi
add esi, eax
mov dword [ebp - 0x30], 0x1c11
cmp dword [ebp - 0x30], 0x1d62
mov dword [ebp - 0x2c], esi
mov dword [ebp - 0x40], esi
jle 0x100045db
mov esi, ebx
mov edi, ebx
mov eax, edi
mov ecx, 0x1006a318
or eax, esi
cdq
push edx
push eax
call fcn.10001c75
inc edi
cmp edi, 0x1759
jl 0x100045b5
inc esi
cmp esi, 0x411c
jl 0x100045b3
mov esi, dword [ebp - 0x2c]
mov dword [ebp - 0x18], 0x164c
mov dword [ebp - 4], 6
cmp dword [ebp - 0x30], 0x18b9
jge 0x10004601
mov edx, str.ovvk_cntgbqiy_phtq_lgkmj_mqicb_rzlkq_clpwoxply_ngouackql_drf_tuhloscif_iug_yqzfzvxp_rvkvoawqf
mov ecx, 0x1006a318
call fcn.10003644
mov edi, dword [ebp - 0x24]
or dword [ebp - 4], 0xffffffff
xor ecx, ecx
mov dword [ebp - 0x2c], 0x9f196e6c
inc ecx
mov dword [ebp - 0x34], 8
mov dword [ebp - 0x11c], ebx
mov dword [ebp - 0x118], ebx
mov dword [ebp - 0x114], ebx
mov dword [ebp - 0x110], ebx
cmp dword [ebp - 0x18], ebx
je 0x1000469e
mov eax, dword [ebp - 0x18]
sub eax, 0xfffe
cmp eax, 0x191b
jg 0x10004647
mov ecx, ebx
mov eax, dword [ebp - 0x18]
xor edx, edx
cmp ecx, eax
mov eax, dword [ebp - 0x18]
setle dl
xor ecx, ecx
cmp edx, eax
setl cl
cmp ecx, dword [ebp - 0x18]
jg 0x10004694
cmp dword [ebp - 0x18], ebx
je 0x10004694
xor eax, eax
inc eax
jmp 0x10004696
mov eax, ebx
cmp eax, dword [ebp - 0x18]
je 0x1000469e
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x18]
neg ecx
sbb ecx, ecx
xor eax, eax
neg ecx
cmp ecx, 0xdfb
setne al
xor ecx, ecx
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x2c]
cmp eax, 3
setle cl
mov dword [ebp - 0x34], ecx
mov dword [ebp - 0x2c], ebx
jmp 0x100046e1
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x100046de
push ebx
push 0x168b
push ebx
call dword [sym.imp.ADVAPI32.dll_ControlService]
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 3
jle 0x100046c8
jmp 0x100047f2
mov dword [ebp - 0x18], 0xffffffff
mov dword [ebp - 0x18], 0xfffffffe
jmp 0x10004714
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x10004711
push 0xeb4
push ebx
call dword [sym.imp.KERNEL32.dll_WinExec]
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0x10
je 0x100046fc
mov dword [ebp - 0x18], ebx
jmp 0x100047ad
xor ecx, ecx
mov dword [ebp - 0x24], 0xffffffff
mov dword [ebp - 0x28], ebx
inc ecx
jmp 0x10004742
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0xb8], 0x250e6da5
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], ecx
jl 0x10004731
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x10004760
push ebx
push ebx
push 0x25f5
push ebx
push ecx
push ebx
call dword [sym.imp.ADVAPI32.dll_AdjustTokenPrivileges]
mov dword [ebp - 0x24], ebx
cmp dword [ebp - 0x24], ebx
jl 0x100047aa
mov dword [ebp - 0x2c], 0xc9e53e58
mov dword [ebp - 0x2c], ebx
jmp 0x100047a0
mov dword [ebp - 0x34], 0xfffffffa
or ecx, 0xffffffff
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp + eax*4 - 0xb8]
sub ecx, eax
mov dword [ebp - 0x34], ecx
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x1000479d
push ebx
call dword [sym.imp.KERNEL32.dll_GetDriveTypeW]
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], ebx
jle 0x10004774
dec dword [ebp - 0x24]
jns 0x10004768
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xfffffff3
je 0x10004722
movzx edx, byte [ebp + esi - 0x87]
mov eax, esi
sub eax, edi
mov edi, ebx
mov dword [ebp - 0x24], edi
movzx eax, byte [ebp + eax - 0x8a]
movzx ecx, word [ebp + eax*2 - 0xf0]
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
movzx eax, byte [ebp + esi - 0x88]
add ecx, edx
mov word [ebp + eax*2 - 0xf0], cx
add esi, 2
jmp 0x100042fc
xor eax, eax
mov dword [ebp - 0x154], 7
mov word [ebp - 0xe2], ax
lea ecx, [ebp - 0x168]
mov word [ebp - 0x168], ax
lea eax, [ebp - 0xf0]
push eax
mov dword [ebp - 0x158], ebx
call fcn.100055e3
mov dword [ebp - 4], 8
xor ecx, ecx
mov dword [ebp - 0x18], 0xac204e2d
inc ecx
mov dword [ebp - 0x24], ebx
jmp 0x1000484f
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x10c], ebx
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ecx
jl 0x10004842
mov dword [ebp - 0x18], ebx
jmp 0x10004866
mov dword [ebp - 0x30], 0xca0029bf
dec dword [ebp - 0x30]
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xfffffff7
jg 0x10004859
mov dword [ebp - 0x18], ebx
jmp 0x10004896
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x10004893
push 0x1b7c
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetROP2]
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
jle 0x10004871
push dword [ebp - 0xbc]
xor eax, eax
lea edi, [ebp - 0xf0]
stosd dword es:[edi], eax
lea ecx, [ebp - 0x180]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
call fcn.100054d9
mov byte [ebp - 4], 9
mov dword [ebp - 0x24], 0xffffffff
mov dword [ebp - 0x3c], 0xb0121307
mov dword [ebp - 0x34], 0x1f65
cmp dword [ebp - 0x34], 0x6d1
jge 0x10004979
lea eax, [ebp - 0xa0]
push eax
push 0x1005aac4
call fcn.1003a1b2
xor edx, edx
inc edx
pop ecx
pop ecx
mov dword [ebp - 0x30], edx
cmp dword [ebp - 0xa0], edx
jl 0x1000497c
mov ecx, edx
call fcn.10003c55
mov esi, eax
mov dword [ebp - 0x40], esi
lea eax, [ebp - 0xa8]
push eax
push 0x1005aac4
call fcn.1003a1b2
pop ecx
pop ecx
xor edx, edx
mov ecx, esi
mov esi, dword [ebp - 0xa8]
inc edx
mov edi, ebx
cmp ecx, esi
jge 0x10004953
lea eax, [ecx + edi]
add edi, ecx
sub esi, eax
inc edx
mov ecx, edx
mov dword [ebp - 0x34], edx
call fcn.10003c55
mov ecx, eax
lea edx, [ecx + edi]
cmp edx, esi
mov edx, dword [ebp - 0x34]
jl 0x1000492f
mov dword [ebp - 0xa8], esi
mov ecx, esi
call fcn.10003c6d
push eax
push 0x1005ac78
call fcn.1003a280
mov eax, dword [ebp - 0x30]
mov esi, dword [ebp - 0x40]
inc eax
pop ecx
pop ecx
mov dword [ebp - 0x30], eax
cmp eax, dword [ebp - 0xa0]
jle 0x1000490b
xor edx, edx
inc edx
mov dword [ebp - 0x34], 0xe4c7ba3f
mov dword [ebp - 0x34], 0x6bd29a2a
mov dword [ebp - 0x34], ebx
mov dword [ebp - 0x34], 0xffffffff
mov dword [ebp - 0x34], 0x7504ed09
mov dword [ebp - 0x34], 0xedda
mov dword [ebp - 0x34], 0xf529
mov dword [ebp - 0x30], 0xb3d385e1
mov dword [ebp - 0x18], ebx
jmp 0x100049c3
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x44], 0xd3f7bf4
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x100049b5
mov dword [ebp - 0x18], ebx
jmp 0x100049de
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1c8], 0xa1c3d076
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x100049cd
mov eax, dword [ebp - 0x44]
mov ecx, 0xaec39e39
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x44]
sub ecx, eax
je 0x10004a08
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x44]
mov eax, dword [ebp - 0x44]
cmp dword [ebp - 0x3c], 0x2a3
jle 0x10004a1e
mov eax, edx
cmp dword [ebp - 0x3c], ebx
jne 0x10004a20
mov eax, ebx
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x34], ebx
inc dword [ebp - 0x30]
mov dword [ebp - 0x50], 0x73027800
mov byte [ebp - 0x4c], 0xd3
mov dword [ebp - 0x9c], 0xffffffff
mov dword [ebp - 0x98], 0xffffffff
mov dword [ebp - 0x94], 0xffffffff
mov dword [ebp - 0x90], 0xffffffff
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x34], 0xfffffff7
mov dword [ebp - 0x30], edx
mov dword [ebp - 0x18], ebx
push 3
pop ecx
cmp dword [ebp - 0x18], ecx
jg 0x10004c00
mov dword [ebp - 0x2c], 0x60b0ceaf
mov dword [ebp - 0x24], ebx
jmp 0x10004a94
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x1b8], ecx
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ecx
jl 0x10004a87
mov dword [ebp - 0x3c], 0x383a
cmp dword [ebp - 0x3c], 0x3bf7
jle 0x10004b1b
push ebx
push ebx
call dword [sym.imp.USER32.dll_GetMonitorInfoW]
mov eax, ebx
mov dword [ebp - 0x24], ebx
mov esi, ebx
mov dword [ebp - 0x30], ebx
cdq
mov edi, ebx
idiv esi
mov esi, edx
mov ecx, edi
mov eax, esi
sar eax, cl
lea ecx, [ebp - 0x21c]
cdq
push edx
push eax
call fcn.10003c04
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10004ae0
mov eax, dword [eax]
push eax
call fcn.1003a280
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x21c]
call fcn.10002056
inc edi
cmp edi, 0x2100
jl 0x10004ac2
mov esi, dword [ebp - 0x30]
mov eax, dword [ebp - 0x24]
inc esi
mov dword [ebp - 0x30], esi
cmp esi, 0x795c
jl 0x10004abb
inc eax
mov dword [ebp - 0x24], eax
cmp eax, 0x17d5
jl 0x10004ab6
mov dword [ebp - 0x2c], ebx
jmp 0x10004b31
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x9c], 5
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 4
jl 0x10004b20
cmp dword [ebp - 0x3c], 0x36eb
jge 0x10004b4b
push str.ajzvloiq_ovomj_cqhdgdd_mnonriua_cjdyfqim_ezrdysk_roy_naxgbbc_ezdvo_gcalumm_rsxbjetl_qvxxcvmqo_zyztauk_gllb
call fcn.1003a280
pop ecx
mov dword [ebp - 4], 9
xor edx, edx
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x9c]
mov ecx, dword [ebp - 0x9c]
sub ecx, eax
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x30], 1
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x90]
cmp ecx, eax
mov ecx, dword [ebp - 0x98]
mov eax, dword [ebp - 0x18]
setge dl
add ecx, edx
xor edx, edx
mov eax, dword [ebp + eax*4 - 0x9c]
cmp ecx, eax
mov eax, dword [ebp - 0x18]
setle dl
xor ebx, ebx
mov eax, dword [ebp + eax*4 - 0x9c]
cmp edx, eax
mov eax, dword [ebp - 0x18]
setle bl
xor edx, edx
imul ebx, dword [ebp + eax*4 - 0x9c]
mov eax, dword [ebp - 0x18]
sub ebx, dword [ebp + eax*4 - 0x9c]
mov ecx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x18]
cmp eax, ecx
mov eax, dword [ebp - 0x2c]
setle dl
xor ecx, ecx
cmp eax, edx
setge cl
cmp ecx, ebx
jle 0x10004bed
mov eax, dword [ebp - 0x18]
xor ebx, ebx
cmp dword [ebp + eax*4 - 0x9c], ebx
je 0x10004bef
mov eax, ebx
jmp 0x10004bf2
xor ebx, ebx
xor eax, eax
inc eax
mov dword [ebp - 0x1b4], eax
inc dword [ebp - 0x18]
jmp 0x10004a6f
mov dl, byte [ebp - 0x4f]
movzx esi, byte [ebp - 0x50]
mov al, dl
or al, 0x24
and dl, 0x24
movzx ecx, al
add esi, esi
movzx eax, dl
sub cx, ax
push 2
mov word [ebp + esi - 0x74], cx
mov ecx, ebx
pop edi
add esi, edi
cmp edi, esi
jne 0x10004c36
movzx eax, byte [ebp + edi - 0x50]
dec edi
add edi, eax
lea ecx, [eax + 1]
jmp 0x10004c5f
movzx edx, byte [ebp + edi - 0x4f]
mov eax, edi
sub eax, ecx
movzx eax, byte [ebp + eax - 0x52]
movzx ecx, word [ebp + eax*2 - 0x74]
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
movzx eax, byte [ebp + edi - 0x50]
add ecx, edx
mov word [ebp + eax*2 - 0x74], cx
mov ecx, ebx
add edi, 2
cmp edi, 5
jb 0x10004c25
xor eax, eax
mov dword [ebp - 0xf8], ebx
push 7
mov word [ebp - 0x72], ax
lea ecx, [ebp - 0x108]
pop edi
mov word [ebp - 0x108], ax
lea eax, [ebp - 0x74]
push eax
mov dword [ebp - 0xf4], edi
call fcn.100055e3
mov byte [ebp - 4], 0xc
xor edx, edx
mov dword [ebp - 0x74], ebx
inc edx
mov dword [ebp - 0x2c], edx
mov dword [ebp - 0x28], 0xb064bae0
mov dword [ebp - 0x40], 0x2657
mov dword [ebp - 0x24], ebx
jmp 0x10004cc0
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x54], 0x2ba75a59
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], edx
jl 0x10004cb2
mov dword [ebp - 0x2c], ebx
jmp 0x10004df6
mov dword [ebp - 0x1c], 0xdc7555b7
mov dword [ebp - 0x24], ebx
jmp 0x10004ce7
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x6c], 0x57e8b72f
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], edx
jl 0x10004cd9
mov dword [ebp - 0x1c], ebx
jmp 0x10004d3e
mov dword [ebp - 0x30], 0xf8b8ae50
mov dword [ebp - 0x34], 0xb641b44a
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp + eax*4 - 0x6c]
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x6c], ecx
mov dword [ebp - 0x30], 0x34b6
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x6c]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x28]
cmp dword [ebp - 0x34], edx
jle 0x10004d36
mov eax, ebx
cmp dword [ebp - 0x6c], ebx
je 0x10004d38
mov eax, edx
mov dword [ebp - 0x28], eax
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ebx
jle 0x10004cf1
mov dword [ebp - 0x1c], ebx
jmp 0x10004dea
mov dword [ebp - 0x30], 6
mov dword [ebp - 0x3c], 0xeb4983ca
mov eax, dword [ebp - 0x1c]
cmp dword [ebp + eax*4 - 0x54], ebx
je 0x10004dd7
mov eax, dword [ebp - 0x40]
cmp edx, eax
sbb eax, eax
neg eax
sub eax, edi
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x30]
cmp eax, dword [ebp - 0x1c]
je 0x10004d7f
mov esi, edx
cmp dword [ebp - 0x6c], ebx
jne 0x10004d81
mov esi, ebx
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x54]
mov ecx, dword [ebp - 0x28]
sub ecx, eax
mov eax, dword [ebp - 0x1c]
neg ecx
sbb ecx, ecx
xor edx, edx
inc ecx
cmp ecx, esi
setne dl
sub edx, 0xe630971c
neg edx
sbb edx, edx
inc edx
cmp edx, dword [ebp + eax*4 - 0x54]
jl 0x10004dbd
mov eax, dword [ebp - 0x1c]
cmp dword [ebp + eax*4 - 0x54], ebx
jne 0x10004dbd
xor edx, edx
mov ecx, ebx
inc edx
jmp 0x10004dc2
xor edx, edx
inc edx
mov ecx, edx
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x54], ecx
mov ecx, edx
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp + eax*4 - 0x54]
cmp eax, dword [ebp - 0x3c]
jl 0x10004dd9
mov ecx, ebx
xor eax, eax
cmp ecx, 0x4a6e8f59
setne al
mov dword [ebp - 0x3c], eax
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], ebx
jle 0x10004d4b
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], edx
jle 0x10004ccd
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x18], ebx
jmp 0x10004e18
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x134], 0xcff0
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x10004e07
mov dword [ebp - 0x18], ebx
jmp 0x10004e34
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1e0], 0xfc3eee2f
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x10004e23
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], 2
jg 0x10004ecf
mov dword [ebp - 0x24], 0xfffffffe
mov dword [ebp - 0x1c], ebx
jmp 0x10004e64
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x1d4], 0xfffffffc
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 3
jl 0x10004e53
mov dword [ebp - 0x1c], ebx
jmp 0x10004e80
mov eax, dword [ebp - 0x1c]
mov dword [ebp + eax*4 - 0x1a0], 0x4087
inc dword [ebp - 0x1c]
cmp dword [ebp - 0x1c], 4
jl 0x10004e6f
dec dword [ebp - 0x198]
mov dword [ebp - 0x24], 2
cmp dword [ebp - 0x24], ebx
jl 0x10004ebf
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x10004ea9
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
mov byte [ebp - 0x1d], bl
cmp byte [ebp - 0x1d], 0
je 0x10004eba
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_RegUnLoadKeyW]
dec dword [ebp - 0x24]
jns 0x10004e98
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jle 0x10004e47
xor edx, edx
inc edx
mov dword [ebp - 0x18], ebx
jmp 0x10004f1d
mov dword [ebp - 0xcc], ebx
mov dword [ebp - 0xc8], ebx
mov dword [ebp - 0xc4], ebx
mov dword [ebp - 0xc0], ebx
mov dword [ebp - 0xc0], 2
cmp dword [ebp - 0xc0], ebx
jl 0x10004f1a
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp + eax*4 - 0x134]
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x134], ecx
dec dword [ebp - 0xc0]
jns 0x10004efe
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jle 0x10004ed4
push 0x5f
pop eax
push 2
mov word [ebp - 0x5c], 0xad00
mov ecx, ebx
mov byte [ebp - 0x5a], dl
mov byte [ebp - 0x59], 0x5c
mov word [ebp - 0x68], ax
pop esi
cmp esi, 2
jne 0x10004f45
push esi
pop ecx
jmp 0x10004f6e
movzx edx, byte [ebp + esi - 0x5b]
mov eax, esi
sub eax, ecx
movzx eax, byte [ebp + eax - 0x5e]
movzx ecx, word [ebp + eax*2 - 0x68]
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
movzx eax, byte [ebp + esi - 0x5c]
add ecx, edx
mov word [ebp + eax*2 - 0x68], cx
mov ecx, ebx
add esi, 2
cmp esi, 4
jb 0x10004f3c
xor eax, eax
mov dword [ebp - 0x13c], edi
mov word [ebp - 0x66], ax
lea ecx, [ebp - 0x150]
mov word [ebp - 0x150], ax
lea eax, [ebp - 0x68]
push eax
mov dword [ebp - 0x140], ebx
call fcn.100055e3
mov byte [ebp - 4], 0xd
xor ecx, ecx
mov dword [ebp - 0x68], ebx
mov dword [ebp - 0x1c], ebx
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x2c], 1
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x34], 0x1ff3c8d
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x18]
cmp eax, 0xffffe2f6
setle cl
xor edx, edx
mov dword [ebp - 0x1c], ecx
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x1c]
cmp eax, ecx
mov eax, dword [ebp - 0x18]
setge dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x18]
setne cl
xor edx, edx
cmp ecx, eax
setle dl
xor ecx, ecx
imul edx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
cmp edx, eax
setl cl
sub ecx, 0x25e4
cmp ecx, dword [ebp - 0x18]
jne 0x1000501f
cmp dword [ebp - 0x18], ebx
je 0x1000501f
xor eax, eax
inc eax
jmp 0x10005021
mov eax, ebx
mov dword [ebp - 0x2c], eax
xor edx, edx
mov ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x18]
cmp ecx, eax
setg dl
imul edx, dword [ebp - 0x18]
cmp edx, 0x5043c4ab
jg 0x10005040
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
inc ecx
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0x28], ebx
cmp dword [ebp - 0x28], 0x19
jle 0x100051a0
mov dword [ebp - 0x3c], 0x75ca
cmp dword [ebp - 0x3c], 0x767f
jle 0x1000508d
mov esi, ebx
mov edi, ebx
mov dword [ebp - 0x30], 0x1477
mov eax, edi
mov ecx, 0x1006a318
cdq
push edx
push eax
call fcn.10001c75
add edi, esi
dec dword [ebp - 0x30]
jne 0x1000506e
inc esi
cmp esi, 0x30ea
jl 0x10005065
mov byte [ebp - 4], 0xe
cmp dword [ebp - 0x3c], 0x759f
jge 0x100050c7
mov edx, str.kjio_zepz_uunemweez_ndvfmqzi_mhxdbnr_iby_seuwxahuc_aqhqz
mov ecx, 0x1006a318
call fcn.10003644
jmp 0x100050c7
mov dword [ebp - 4], 0xd
xor ecx, ecx
mov dword [ebp - 0x34], 0xece9e619
mov edx, 0xffff
inc ecx
mov dword [ebp - 0x24], ebx
jmp 0x100050ec
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x48], ebx
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ecx
jl 0x100050e2
mov dword [ebp - 0x2c], ebx
cmp dword [ebp - 0x2c], ebx
jl 0x10005192
mov dword [ebp - 0x30], 0xf1b6398c
mov dword [ebp - 0x40], 0xfffffff8
mov dword [ebp - 0x1c], ebx
cmp dword [ebp - 0x1c], ebx
jl 0x10005184
mov dword [ebp - 0x34], 0x69233c9e
mov eax, dword [ebp - 0x1c]
cmp dword [ebp + eax*4 - 0x48], ebx
je 0x10005175
dec dword [ebp - 0x2c]
mov edx, 0xffff
jns 0x100050fd
mov eax, dword [ebp - 0x48]
mov dword [ebp - 0x34], eax
inc dword [ebp - 0x28]
jmp 0x10005049
push dword [ebp - 0xf8]
cmp dword [ebp - 0xf4], 8
lea eax, [ebp - 0x108]
push ebx
cmovae eax, dword [ebp - 0x108]
lea ecx, [ebp - 0x180]
push eax
call fcn.1000595f
cmp eax, 0xffffffff
je 0x100051e6
push 0xffffffffffffffff
push ebx
lea ecx, [ebp - 0x150]
push ecx
push 1
push eax
lea ecx, [ebp - 0x180]
call fcn.1000566b
jmp 0x100051a0
mov ecx, dword [ebp - 0xa4]
lea eax, [ebp - 0x180]
push eax
lea edx, [ebp - 0x168]
call fcn.10005cab
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x150]
call fcn.10005a02
push ebx
push 1
lea ecx, [ebp - 0x108]
call fcn.10005a02
push ebx
push 1
lea ecx, [ebp - 0x180]
call fcn.10005a02
push ebx
push 1
lea ecx, [ebp - 0x168]
call fcn.10005a02
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 0xa4]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret