Function at 0x100095ed
Capabilities:
Get disk information
Get file size

Disassembly:
mov eax, 0x10050412
call fcn.1004fab8
sub esp, 0x1f0
mov dword [ebp - 0x18], 0xde19d29b
mov dword [ebp - 0x30], 0xfffffffd
mov dword [ebp - 0x30], 0xc9ed9ba0
push ebx
mov dword [ebp - 0x94], edx
xor ebx, ebx
xor edx, edx
mov dword [ebp - 0x74], ecx
inc edx
mov dword [ebp - 0x11c], ebx
mov dword [ebp - 0x30], edx
mov dword [ebp - 0x30], 0xffffffff
mov dword [ebp - 0xa4], edx
mov dword [ebp - 0xa0], edx
mov dword [ebp - 0x9c], edx
push esi
mov dword [ebp - 0x98], edx
push edi
mov dword [ebp - 0x20], 0xf9034e10
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x24], ebx
jmp 0x1000966b
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0xc4], 0x6482
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 2
jl 0x1000965a
mov dword [ebp - 0x24], ebx
jmp 0x10009683
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x1e0], edx
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 3
jl 0x10009676
mov dword [ebp - 0x18], ebx
jmp 0x100096a5
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp + eax*4 - 0xc4]
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xc4], ecx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jle 0x1000968e
inc dword [ebp - 0x20]
mov dword [ebp - 0x28], 0x87013dce
mov dword [ebp - 0x30], 0xe5c8a52b
mov dword [ebp - 0x18], 0xedb7758b
mov dword [ebp - 0x34], 3
mov dword [ebp - 0x18], 0x68c8
cmp dword [ebp - 0x18], 0x6c3a
jle 0x1000972a
mov esi, ebx
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x34], esi
mov dword [ebp - 0x20], 0x7788
mov edi, ebx
lea eax, [esi + edi]
mov ecx, 0x10067998
cdq
push edx
push eax
call fcn.100032d3
inc edi
cmp edi, 0x4b51
jl 0x100096ea
dec esi
dec dword [ebp - 0x20]
jne 0x100096e8
mov esi, dword [ebp - 0x2c]
inc esi
mov dword [ebp - 0x2c], esi
cmp esi, 0x543d
jl 0x100096de
push ebx
push 0x121e
push 0x1eb0
push ebx
call dword [sym.imp.GDI32.dll_GetPaletteEntries]
mov dword [ebp - 0x2c], ebx
jmp 0x10009740
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x84], 0x73ff
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 3
jl 0x1000972f
mov dword [ebp - 4], ebx
cmp dword [ebp - 0x18], 0x6887
jge 0x10009761
mov edx, str.opgvo_hduaesxny_mabqsqtp_qzveh_qwcegr_wvwhdwnj
mov ecx, 0x10067998
call fcn.100056ca
or dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x28]
xor ecx, ecx
mov eax, dword [ebp - 0x28]
cmp eax, 0x304b
setge cl
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0x38], 0x6b94
cmp dword [ebp - 0x38], 0x6f6d
jle 0x100097e4
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x18], 0x2989
mov esi, dword [ebp - 0x20]
mov edi, ebx
mov ecx, ebx
mov dword [ebp - 0x2c], ebx
mov eax, edi
cdq
idiv ecx
mov ecx, 0x10067998
and edx, esi
mov eax, edx
cdq
push edx
push eax
call fcn.100032d3
mov ecx, dword [ebp - 0x2c]
inc ecx
mov dword [ebp - 0x2c], ecx
cmp ecx, 0x64f1
jl 0x1000979f
inc edi
cmp edi, 0x6b6
jl 0x1000979a
mov esi, dword [ebp - 0x24]
add dword [ebp - 0x20], esi
dec dword [ebp - 0x18]
jne 0x10009795
inc esi
mov dword [ebp - 0x24], esi
cmp esi, 0x23e
jl 0x1000978b
mov dword [ebp - 0x28], 2
cmp dword [ebp - 0x28], ebx
jl 0x10009904
mov dword [ebp - 0x20], 0xbc25
mov dword [ebp - 0x34], 0xf89f
mov dword [ebp - 0x20], 0x36572186
mov dword [ebp - 0x20], 0x7f47
mov eax, dword [ebp - 0x28]
cmp dword [ebp + eax*4 - 0x84], ebx
je 0x100098af
mov eax, dword [ebp - 0x28]
xor ecx, ecx
mov eax, dword [ebp - 0x30]
cmp eax, 0x5a9cea44
setge cl
xor ebx, ebx
mov dword [ebp - 0x18], ecx
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp + eax*4 - 0x84]
mov eax, dword [ebp - 0x7c]
cmp ecx, eax
mov eax, dword [ebp - 0x18]
sete bl
xor ecx, ecx
cmp eax, 0xfffffff6
mov eax, 0x9dc86695
setle cl
cmp eax, ecx
sbb eax, eax
xor edx, edx
inc eax
cmp ebx, eax
mov eax, dword [ebp - 0x28]
setge dl
xor ecx, ecx
neg edx
cmp edx, eax
setle cl
xor ebx, ebx
sub ecx, dword [ebp - 0x28]
imul eax, ecx, 0xcb44
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x20], ebx
je 0x10009885
mov eax, dword [ebp - 0x34]
xor ecx, ecx
inc ecx
jmp 0x100098b1
mov ecx, ebx
mov eax, 0x677b
sub eax, ecx
xor ecx, ecx
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x28]
cmp eax, 0xffffffff
setg cl
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x18], 2
cmp dword [ebp - 0x18], ebx
jl 0x100098fb
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp + eax*4 - 0x84]
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x84], ecx
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x84]
mov dword [ebp - 0x34], eax
dec dword [ebp - 0x18]
jns 0x100098d5
dec dword [ebp - 0x28]
jns 0x100097f4
mov dword [ebp - 4], 2
cmp dword [ebp - 0x38], 0x696f
jge 0x10009923
mov edx, str.rvlyb_fpolubkm_qnpqdkd_iwngvmi_fdjes_pkbdyc_hrnvccfp_qapvutow_dfgcbj_besrqiul_pqc
mov ecx, 0x10067998
call fcn.100056ca
or dword [ebp - 4], 0xffffffff
mov dword [ebp - 0x60], 0x2b00b405
mov dword [ebp - 0x5c], 0xd012604
mov dword [ebp - 0x58], 0x33060302
mov dword [ebp - 0x54], 0x3e99802
mov byte [ebp - 0x50], 0x3e
mov dword [ebp - 0x2c], ebx
jmp 0x1000997f
mov eax, dword [ebp - 0x2c]
mov dword [ebp + eax*4 - 0x1a4], 0x261f9c28
inc dword [ebp - 0x2c]
cmp dword [ebp - 0x2c], 2
jl 0x1000996e
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x10009995
push ebx
call dword [sym.imp.COMDLG32.dll_FindTextW]
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x100099a6
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_GetFileSize]
push 0x6c
pop eax
push 2
pop esi
mov edi, ebx
mov word [ebp - 0xb2], ax
mov ecx, esi
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x2c], ecx
cmp ecx, 0x11
jae 0x10009e19
movzx eax, byte [ebp - 0x60]
xor edx, edx
lea eax, [eax*2 + 2]
cmp ecx, eax
jne 0x10009ca2
mov dword [ebp - 0x28], 0xffffffff
mov dword [ebp - 0x24], 0x6e58d020
mov dword [ebp - 0x30], esi
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
cmp ecx, eax
mov eax, dword [ebp - 0x28]
setg dl
xor ecx, ecx
cmp eax, edx
setle cl
xor edx, edx
mov dword [ebp - 0x24], ecx
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x28]
cmp eax, ecx
setge dl
sub edx, dword [ebp - 0x30]
je 0x10009be3
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x24], ebx
jmp 0x10009a36
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x3c], 0x135e1f6f
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 1
jl 0x10009a28
push 3
mov dword [ebp - 0x24], ebx
pop ecx
jmp 0x10009a55
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x158], 0xffffffff
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ecx
jl 0x10009a44
cmp dword [ebp - 0x3c], ebx
je 0x10009a70
mov dword [ebp - 0x38], ebx
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x24], eax
dec dword [ebp - 0x38]
jmp 0x10009c00
mov dword [ebp - 0x34], 0x2dd8
mov dword [ebp - 0x18], ebx
jmp 0x10009a8d
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x118], 0xde769035
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x10009a7c
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x18], ebx
jl 0x10009c00
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x20], 0xef57a557
mov dword [ebp - 0x28], ebx
jmp 0x10009b03
mov eax, dword [ebp - 0x18]
xor ecx, ecx
mov edx, dword [ebp + eax*4 - 0x3c]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp + eax*4 - 0x3c]
cmp edx, eax
setne cl
cmp ecx, dword [ebp - 0x3c]
je 0x10009ad0
cmp dword [ebp - 0x38], ebx
jne 0x10009ad0
mov ecx, ebx
jmp 0x10009ad3
xor ecx, ecx
inc ecx
mov eax, dword [ebp - 0x18]
mov edx, dword [ebp + eax*4 - 0x3c]
xor eax, eax
cmp ecx, 0x8699
setg al
xor ecx, ecx
cmp eax, edx
setle cl
add ecx, 0x9dc8
mov dword [ebp - 0x154], ecx
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ebx
jle 0x10009aad
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], ebx
mov dword [ebp - 0x24], ebx
jle 0x10009afb
cmp dword [ebp - 0x24], ebx
jl 0x10009bd8
mov edi, 0x4f6f4846
mov dword [ebp - 0x20], ebx
jmp 0x10009b2f
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0xfc], 0xa3d58e56
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], esi
jl 0x10009b1e
mov ecx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x18]
neg ecx
sbb ecx, ecx
neg ecx
mov eax, dword [ebp + eax*4 - 0x3c]
imul eax, ecx
test eax, eax
je 0x10009b55
cmp dword [ebp - 0x38], ebx
je 0x10009b55
xor edx, edx
inc edx
jmp 0x10009b57
mov edx, ebx
mov eax, dword [ebp - 0x18]
xor ecx, ecx
mov eax, dword [ebp + eax*4 - 0x3c]
cmp edx, eax
mov eax, dword [ebp - 0x28]
sete cl
xor edx, edx
cmp ecx, 0x3c8a
setge dl
xor ecx, ecx
cmp edx, eax
setge cl
mov dword [ebp - 0x20], ecx
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x114], eax
mov eax, dword [ebp - 0x18]
cmp dword [ebp + eax*4 - 0x3c], ebx
jne 0x10009ba0
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x154], eax
test eax, eax
jne 0x10009ba0
mov ecx, ebx
jmp 0x10009ba3
xor ecx, ecx
inc ecx
mov dword [ebp - 0xfc], edi
mov eax, dword [ebp - 0x18]
mov edx, dword [ebp + eax*4 - 0x3c]
mov eax, edi
sub eax, ecx
xor ecx, ecx
sub eax, dword [ebp - 0x28]
add edx, eax
mov eax, dword [ebp - 0x114]
cmp eax, edx
setg cl
add ecx, 0xc461
mov dword [ebp - 0x20], ecx
dec dword [ebp - 0x24]
jns 0x10009b19
dec dword [ebp - 0x18]
jns 0x10009a9e
jmp 0x10009c00
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x10009bf9
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
mov dword [ebp - 0x28], 1
mov ecx, dword [ebp - 0x2c]
movzx eax, byte [ebp + ecx - 0x60]
dec ecx
add ecx, eax
mov dword [ebp - 0x20], 0xbe8e56f9
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x20], ebx
lea edi, [eax + 1]
mov dword [ebp - 0x24], edi
jmp 0x10009c31
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x19c], 0x26bdde0b
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], esi
jl 0x10009c20
mov dword [ebp - 0x20], 1
cmp dword [ebp - 0x20], ebx
jl 0x10009c82
mov edi, dword [sym.imp.USER32.dll_GetDesktopWindow]
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x10009c7a
push 0x17a
push 0x339
push 0x715
push 0x687
push 0x12e7
call edi
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_PatBlt]
dec dword [ebp - 0x20]
jns 0x10009c48
mov edi, dword [ebp - 0x24]
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x10009e0f
push ebx
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetWindowTextA]
jmp 0x10009e0f
mov dword [ebp - 0x18], 0xde19d29b
inc edx
mov dword [ebp - 0x30], 0xfffffffd
mov dword [ebp - 0x30], 0xc9ed9ba0
mov dword [ebp - 0x30], edx
mov dword [ebp - 0x30], 0xffffffff
mov dword [ebp - 0xa4], edx
mov dword [ebp - 0xa0], edx
mov dword [ebp - 0x9c], edx
mov dword [ebp - 0x98], edx
mov dword [ebp - 0x34], 0xf9034e10
mov dword [ebp - 0x18], ebx
jmp 0x10009cf7
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xac], 0x6482
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x10009ce6
mov dword [ebp - 0x18], ebx
jmp 0x10009d0e
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x1b0], edx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x10009d01
mov dword [ebp - 0x18], ebx
jmp 0x10009d30
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp + eax*4 - 0xac]
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xac], ecx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jle 0x10009d19
mov dword [ebp - 0x38], 0x3bd
cmp dword [ebp - 0x38], 0x43c
jle 0x10009d98
mov ecx, ebx
mov dword [ebp - 0x20], ebx
mov edi, ebx
mov eax, edi
xor eax, ecx
lea ecx, [ebp - 0x1d4]
cdq
push edx
push eax
call fcn.10001a55
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10009d68
mov eax, dword [eax]
push eax
call fcn.100379e3
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x1d4]
call fcn.1000384d
mov ecx, dword [ebp - 0x20]
inc edi
cmp edi, 0x6ccc
jl 0x10009d4c
inc ecx
mov dword [ebp - 0x20], ecx
cmp ecx, 0x55b3
jl 0x10009d4a
mov edi, dword [ebp - 0x24]
inc dword [ebp - 0x34]
cmp dword [ebp - 0x38], 0x2fe
jge 0x10009daf
push str.cvxdeezz_mdcefy_dgyakhi_crys_datrjpqoq_pru_azuoxz_hstrfh_lvixpnjth_ptozofrxb_irarabjl_ieoo_titlukaze
call fcn.100379e3
pop ecx
or dword [ebp - 4], 0xffffffff
mov eax, dword [ebp - 0x2c]
movzx edx, byte [ebp + eax - 0x5f]
sub eax, edi
movzx eax, byte [ebp + eax - 0x62]
movzx ecx, word [ebp + eax*2 - 0xbc]
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
mov eax, dword [ebp - 0x2c]
add ecx, edx
movzx eax, byte [ebp + eax - 0x60]
mov word [ebp + eax*2 - 0xbc], cx
mov dword [ebp - 0x30], 0x3b4e1a36
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x10009dfb
push ebx
call dword [sym.imp.GDI32.dll_CreateBrushIndirect]
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x10009e0a
call dword [sym.imp.KERNEL32.dll_GetUserDefaultLCID]
mov edi, ebx
mov dword [ebp - 0x24], ebx
mov ecx, dword [ebp - 0x2c]
add ecx, esi
jmp 0x100099ba
mov dword [ebp - 0x2c], 4
mov dword [ebp - 0x30], 0xfffffffb
mov dword [ebp - 0x24], 0xfffffffa
mov dword [ebp - 0x38], 0x569c
cmp dword [ebp - 0x38], 0x5781
jle 0x10009ea4
mov edx, ebx
mov dword [ebp - 0x20], ebx
mov edi, ebx
mov ecx, ebx
mov dword [ebp - 0x34], ebx
mov eax, edi
sar eax, cl
lea ecx, [ebp - 0x1f8]
or eax, edx
cdq
push edx
push eax
call fcn.10001a55
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10009e68
mov eax, dword [eax]
push eax
call fcn.100379e3
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x1f8]
call fcn.1000384d
mov ecx, dword [ebp - 0x34]
mov edx, dword [ebp - 0x20]
inc ecx
mov dword [ebp - 0x34], ecx
cmp ecx, 0x1e51
jl 0x10009e4a
inc edi
cmp edi, 0x233b
jl 0x10009e45
inc edx
mov dword [ebp - 0x20], edx
cmp edx, 0x7652
jl 0x10009e43
mov dword [ebp - 0x28], ebx
jmp 0x10009eb7
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x68], 3
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], esi
jl 0x10009ea9
cmp dword [ebp - 0x38], 0x551d
jge 0x10009ed0
push str.pcqjcnx_mjlrj_caijpoyxz_lmlhqmj_edyndeoh_pktqsku_fyv_dgktry
call fcn.100379e3
pop ecx
or dword [ebp - 4], 0xffffffff
xor ecx, ecx
mov dword [ebp - 0x28], ebx
inc ecx
jmp 0x10009eed
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x88], 0x275dd361
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], ecx
jl 0x10009edc
mov dword [ebp - 0x28], ebx
jmp 0x10009f05
mov eax, dword [ebp - 0x28]
mov dword [ebp + eax*4 - 0x78], 0xede5c489
inc dword [ebp - 0x28]
cmp dword [ebp - 0x28], ecx
jl 0x10009ef7
push 0xfffffffffffffff7
mov dword [ebp - 0x64], 0x15
pop edi
cmp dword [ebp - 0x64], 0xffffffe4
jge 0x10009fed
mov dword [ebp - 0x18], 0xfffc
xor edx, edx
mov dword [ebp - 0x20], 0x963f6d1d
mov dword [ebp - 0x20], 0xc8c74c3e
mov ecx, dword [ebp - 0x64]
mov eax, dword [ebp - 0x64]
cmp ecx, eax
mov ecx, dword [ebp - 0x18]
setne dl
add ecx, edx
xor edx, edx
imul ecx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x18]
cmp ecx, eax
mov eax, dword [ebp - 0x18]
setge dl
xor ecx, ecx
cmp edx, eax
setne cl
cmp ecx, 0x18ebdb8
jle 0x10009f6a
cmp dword [ebp - 0x2c], ebx
jne 0x10009f78
cmp dword [ebp - 0x64], ebx
jne 0x10009f78
cmp dword [ebp - 0x18], ebx
jne 0x10009f78
mov ecx, ebx
jmp 0x10009f7b
xor ecx, ecx
inc ecx
mov eax, dword [ebp - 0x2c]
sub ecx, eax
mov dword [ebp - 0x30], ecx
jne 0x10009f88
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x64]
mov eax, dword [ebp - 0x18]
cmp dword [ebp - 0x18], ebx
jne 0x10009fa2
cmp dword [ebp - 0x24], ebx
jne 0x10009fa2
mov eax, ebx
jmp 0x10009fa5
xor eax, eax
inc eax
mov ecx, 0xfff8
cmp ecx, eax
mov ecx, 0xa0b8
sbb eax, eax
neg eax
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
sub eax, edi
neg eax
sbb eax, eax
inc eax
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x78], eax
mov eax, dword [ebp - 0x78]
sub ecx, eax
mov dword [ebp - 0x20], ecx
dec dword [ebp - 0x64]
jmp 0x10009f14
xor eax, eax
mov dword [ebp - 0x120], 7
mov word [ebp - 0xae], ax
lea ecx, [ebp - 0x134]
mov word [ebp - 0x134], ax
lea eax, [ebp - 0xbc]
push eax
mov dword [ebp - 0x124], ebx
call fcn.10008836
mov dword [ebp - 4], 8
mov dword [ebp - 0xf4], edi
mov dword [ebp - 0xf0], edi
mov dword [ebp - 0xec], edi
mov dword [ebp - 0xe8], edi
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x20], ebx
jmp 0x1000a057
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x194], 4
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], esi
jl 0x1000a046
mov dword [ebp - 0x2c], 3
cmp dword [ebp - 0x2c], ebx
jl 0x1000a131
mov dword [ebp - 0x20], 0x6b950ba1
mov dword [ebp - 0x20], ebx
cmp dword [ebp - 0x20], 3
jg 0x1000a129
mov eax, dword [ebp - 0x20]
cmp dword [ebp + eax*4 - 0xf4], ebx
jne 0x1000a129
mov dword [ebp - 0x38], 0x3cd7
cmp dword [ebp - 0x38], 0x3e78
jle 0x1000a0cd
mov edi, ebx
mov eax, ebx
mov dword [ebp - 0x34], ebx
add eax, edi
mov ecx, 0x10067998
cdq
push edx
push eax
call fcn.100032d3
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
cmp eax, 0x76f
jl 0x1000a0a7
inc edi
cmp edi, 0x64e6
jl 0x1000a0a2
mov byte [ebp - 0x19], bl
mov byte [ebp - 4], 9
cmp dword [ebp - 0x38], 0x3bb2
jge 0x1000a10d
mov edx, str.xvnptfay_acrtle_tpzr_jokzxlp_snbmetu_lgsxjj_gyujl_kgqbnkyee_ycjdc_vixurffu_ftfokwdpc
mov ecx, 0x10067998
call fcn.100056ca
jmp 0x1000a10d
mov dword [ebp - 4], 8
cmp byte [ebp - 0x19], 0
je 0x1000a121
push ebx
call dword [sym.imp.KERNEL32.dll_SuspendThread]
inc dword [ebp - 0x20]
jmp 0x1000a076
dec dword [ebp - 0x2c]
jmp 0x1000a063
xor eax, eax
lea edi, [ebp - 0xbc]
stosd dword es:[edi], eax
xor edx, edx
inc edx
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
mov dword [ebp - 0x30], edx
mov dword [ebp - 0x30], 0xce53d8da
mov dword [ebp - 0x18], edx
mov dword [ebp - 0x20], ebx
jmp 0x1000a163
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0xcc], 0xde0b4074
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], esi
jl 0x1000a152
inc dword [ebp - 0x18]
mov dword [ebp - 0x18], ebx
jmp 0x1000a187
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp + eax*4 - 0xcc]
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0xcc], ecx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jle 0x1000a170
push dword [ebp - 0x94]
lea ecx, [ebp - 0x170]
call fcn.100033e8
mov byte [ebp - 4], 0xb
mov dword [ebp - 0x18], 0x256915a
mov dword [ebp - 0x20], ebx
jmp 0x1000a1ba
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x1bc], esi
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
jl 0x1000a1ad
mov dword [ebp - 0x18], esi
cmp dword [ebp - 0x18], ebx
jl 0x1000a1e3
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x1000a1de
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_SetFocus]
dec dword [ebp - 0x18]
jns 0x1000a1c8
mov dword [ebp - 0x18], ebx
jmp 0x1000a1fa
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x1000a1f7
call dword [sym.imp.USER32.dll_DestroyCaret]
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jle 0x1000a1e8
push 0x5c
pop eax
push 7
mov dword [ebp - 0x4c], 0x9d046600
mov ecx, ebx
mov word [ebp - 0x48], 0xcb72
mov byte [ebp - 0x46], 0xec
mov word [ebp - 0x44], ax
pop edi
cmp esi, 2
jne 0x1000a228
push 5
pop ecx
push ecx
pop esi
jmp 0x1000a24f
movzx edx, byte [ebp + esi - 0x4b]
mov eax, esi
sub eax, ecx
movzx eax, byte [ebp + eax - 0x4e]
movzx eax, word [ebp + eax*2 - 0x44]
mov ecx, eax
and eax, edx
or ecx, edx
sub ecx, eax
movzx eax, byte [ebp + esi - 0x4c]
mov word [ebp + eax*2 - 0x44], cx
mov ecx, ebx
add esi, 2
cmp esi, edi
jb 0x1000a21c
xor eax, eax
mov dword [ebp - 0xd0], edi
mov word [ebp - 0x42], ax
lea ecx, [ebp - 0xe4]
mov word [ebp - 0xe4], ax
lea eax, [ebp - 0x44]
push eax
mov dword [ebp - 0xd4], ebx
call fcn.10008836
mov byte [ebp - 4], 0xc
mov dword [ebp - 0x24], 9
mov dword [ebp - 0x30], 0x29b8
mov dword [ebp - 0x24], 0xffffffec
jmp 0x1000a2bf
mov dword [ebp - 0x30], 0x69ae
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x1000a2b6
push 0x24d8
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_QueryDosDeviceW]
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x30], eax
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0x10
jle 0x1000a299
mov dword [ebp - 0x24], ebx
jmp 0x1000a315
mov dword [ebp - 0x30], 0x76c51653
mov dword [ebp - 0x20], ebx
jmp 0x1000a2e7
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x10c], 0xa7084bc9
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 4
jl 0x1000a2d6
mov dword [ebp - 0x104], 1
cmp dword [ebp - 0x30], ebx
jne 0x1000a30b
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x108]
mov eax, dword [ebp - 0x104]
mov dword [ebp - 0x30], 0xf928d9ba
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 0x1d
jle 0x1000a2ca
mov dword [ebp - 0x44], ebx
push 3
pop esi
mov dword [ebp - 0x30], esi
mov dword [ebp - 0x30], 0x1cb6
mov dword [ebp - 0x30], 0xccae
mov dword [ebp - 0x30], 0xffffffff
mov dword [ebp - 0x20], 0xffffffff
mov dword [ebp - 0x18], ebx
jmp 0x1000a34f
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x40], ebx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 1
jl 0x1000a345
mov dword [ebp - 0x18], ebx
jmp 0x1000a36b
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x18c], 0x45fe46c2
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x1000a35a
mov eax, dword [ebp - 0x40]
imul ecx, eax, 0xf390
mov eax, dword [ebp - 0x20]
dec dword [ebp - 0x20]
cmp eax, ecx
jne 0x1000a389
xor eax, eax
inc eax
jmp 0x1000a38b
mov eax, ebx
mov ecx, dword [ebp - 0x30]
xor edx, edx
add ecx, eax
mov eax, dword [ebp - 0x40]
imul ecx, eax
mov eax, dword [ebp - 0x40]
cmp ecx, eax
sete dl
mov dword [ebp - 0x184], edx
mov eax, dword [ebp - 0x40]
sub eax, dword [ebp - 0x40]
neg eax
sbb eax, eax
inc eax
sub eax, edx
jne 0x1000a3be
cmp dword [ebp - 0x40], ebx
jne 0x1000a3be
mov eax, ebx
jmp 0x1000a3c1
xor eax, eax
inc eax
mov ecx, 0xffff
cmp ecx, eax
mov eax, dword [ebp - 0x40]
sbb edx, edx
xor ecx, ecx
neg edx
cmp edx, eax
setne cl
mov dword [ebp - 0x30], ecx
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x1000a3fb
push 0x1db1
call dword [sym.imp.USER32.dll_GetDesktopWindow]
push eax
call dword [sym.imp.USER32.dll_GetDC]
push eax
call dword [sym.imp.GDI32.dll_SetTextAlign]
push 0x5f
pop eax
mov word [ebp - 0x70], ax
xor eax, eax
mov word [ebp - 0x6c], 0xcc00
mov word [ebp - 0x6e], ax
mov dword [ebp - 0x18], 1
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], al
je 0x1000a423
call dword [sym.imp.USER32.dll_GetDoubleClickTime]
mov dword [ebp - 0x18], edi
cmp dword [ebp - 0x18], 0xffffffef
jne 0x1000a47d
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x20], ebx
jmp 0x1000a445
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x17c], 0xffffffff
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], esi
jl 0x1000a434
mov ecx, dword [ebp - 0x18]
xor edx, edx
mov eax, dword [ebp - 0x18]
cmp ecx, eax
mov eax, dword [ebp - 0x174]
setne dl
xor ebx, ebx
cmp eax, edx
mov eax, dword [ebp - 0x18]
push 0
setle bl
xor ecx, ecx
cmp ebx, eax
pop ebx
setge cl
mov dword [ebp - 0x30], ecx
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xffffffef
je 0x1000a42c
xor eax, eax
mov dword [ebp - 0x138], edi
mov word [ebp - 0x14c], ax
lea ecx, [ebp - 0x14c]
lea eax, [ebp - 0x70]
mov dword [ebp - 0x13c], ebx
push eax
call fcn.10008836
mov byte [ebp - 4], 0xd
mov dword [ebp - 0x70], ebx
push dword [ebp - 0xd4]
cmp dword [ebp - 0xd0], 8
lea eax, [ebp - 0xe4]
push ebx
cmovae eax, dword [ebp - 0xe4]
lea ecx, [ebp - 0x170]
push eax
call fcn.1000abff
cmp eax, 0xffffffff
je 0x1000a4ee
push 0xffffffffffffffff
push ebx
lea ecx, [ebp - 0x14c]
push ecx
push 1
push eax
lea ecx, [ebp - 0x170]
call fcn.1000a90b
jmp 0x1000a4a8
mov dword [ebp - 0x24], 0x838a1f94
mov dword [ebp - 0x18], 0x9ac70c30
mov dword [ebp - 0x2c], 0xd76270e7
mov dword [ebp - 0x20], ebx
jmp 0x1000a519
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x90], 0xab6d
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 2
jl 0x1000a508
mov eax, dword [ebp - 0x24]
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x18], ebx
jne 0x1000a5a1
mov eax, dword [ebp - 0x18]
xor ecx, ecx
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x90]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
test eax, eax
setle cl
xor eax, eax
cmp ecx, 0xfffffffa
setne al
xor ecx, ecx
add eax, 9
mov dword [ebp - 0x2c], eax
mov edx, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x90]
neg edx
cmp edx, eax
setg cl
mov dword [ebp - 0x18], ecx
cmp dword [ebp - 0x18], ebx
je 0x1000a573
cmp dword [ebp - 0x2c], ebx
jne 0x1000a5a1
mov dword [ebp - 0x34], 0xfffffff6
xor edx, edx
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x2c]
cmp eax, ecx
setle dl
mov dword [ebp - 0x2c], edx
jmp 0x1000a5db
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x1000a5db
push ebx
push 0x19ff
push 0x1d44
push 0x1b71
push 0x26fa
push 0x210d
push 0x244a
push 0x1271
push 0x1429
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_AllocateAndInitializeSid]
mov ecx, dword [ebp - 0x74]
lea eax, [ebp - 0x170]
push eax
lea edx, [ebp - 0x134]
call fcn.1000aca2
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x14c]
call fcn.100039bf
push ebx
push 1
lea ecx, [ebp - 0xe4]
call fcn.100039bf
push ebx
push 1
lea ecx, [ebp - 0x170]
call fcn.100039bf
push ebx
push 1
lea ecx, [ebp - 0x134]
call fcn.100039bf
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x74]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret