Function at 0x100090b0
Capabilities:
Terminate process

Disassembly:
push 0xffffffffffffffff
push 0x1003776b
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x80c
mov eax, dword [0x1004a0f0]
push ebx
push ebp
push esi
mov esi, ecx
mov dword [esp + 0x814], eax
mov eax, dword [esi + 0x78]
mov ecx, dword [eax]
push edi
push ecx
call fcn.1000f5b0
push 0x400
lea edx, [esp + 0x20]
push edx
push 0x17
call fcn.1000f520
add esp, 0x10
lea eax, [esp + 0x18]
push eax
lea ecx, [esi + 0x80c]
call fcn.1002fc8d
push 0x400
lea ecx, [esp + 0x1c]
push ecx
push 0x18
call fcn.1000f520
add esp, 0xc
lea edx, [esp + 0x18]
push edx
lea ecx, [esi + 0x85c]
call fcn.1002fc8d
push 0x400
lea eax, [esp + 0x1c]
push eax
push 0x19
call fcn.1000f520
add esp, 0xc
lea ecx, [esp + 0x18]
push ecx
lea ecx, [esi + 0x8ac]
call fcn.1002fc8d
push 0x400
lea edx, [esp + 0x1c]
push edx
push 0x1a
call fcn.1000f520
add esp, 0xc
lea eax, [esp + 0x18]
push eax
lea ecx, [esi + 0x8fc]
call fcn.1002fc8d
mov ecx, dword [esi + 0xf8]
mov edi, dword [sym.imp.USER32.dll_SendMessageA]
push 0
push 0
push 0xf1
push ecx
call edi
mov edx, dword [esi + 0x148]
push 0
push 0
push 0xf1
push edx
call edi
mov eax, dword [esi + 0x198]
push 0
push 0
push 0xf1
push eax
call edi
mov ecx, dword [esi + 0x1e8]
push 0
push 0
push 0xf1
push ecx
call edi
mov edx, dword [esi + 0x238]
push 0
push 0
push 0xf1
push edx
call edi
mov eax, dword [esi + 0x288]
push 0
push 0
push 0xf1
push eax
call edi
mov ecx, dword [esi + 0x2d8]
push 0
push 0
push 0xf1
push ecx
call edi
mov edx, dword [esi + 0x328]
push 0
push 0
push 0xf1
push edx
call edi
mov eax, dword [esi + 0x378]
push 0
push 0
push 0xf1
push eax
call edi
mov ecx, dword [esi + 0x3c8]
push 0
push 0
push 0xf1
push ecx
call edi
mov edx, dword [esi + 0x788]
push 0
push 0
push 0xf1
push edx
call edi
mov eax, dword [esi + 0x418]
push 0
push 0
push 0xf1
push eax
call edi
mov ecx, dword [esi + 0x4b8]
push 0
push 0
push 0xf1
push ecx
call edi
mov edx, dword [esi + 0x468]
push 0
push 0
push 0xf1
push edx
call edi
mov eax, dword [esi + 0x5f8]
push 0
push 0
push 0xf1
push eax
call edi
mov ecx, dword [esi + 0x508]
push 0
push 0
push 0xf1
push ecx
call edi
mov edx, dword [esi + 0x648]
push 0
push 0
push 0xf1
push edx
call edi
mov eax, dword [esi + 0x5a8]
push 0
push 0
push 0xf1
push eax
call edi
push 0
push 0
mov ecx, dword [esi + 0x558]
push 0xf1
push ecx
call edi
mov edx, dword [esi + 0x698]
push 0
push 0
push 0xf1
push edx
call edi
mov eax, dword [esi + 0x6e8]
push 0
push 0
push 0xf1
push eax
call edi
mov ecx, dword [esi + 0x738]
push 0
push 0
push 0xf1
push ecx
call edi
mov edx, dword [esi + 0x7d8]
push 0
push 0
push 0xf1
push edx
call edi
mov eax, dword [esi + 0x78]
mov eax, dword [eax]
dec eax
cmp eax, 0x17
ja case.default.0x1000932b
jmp dword [eax*4 + 0x1000958c]
lea ecx, [esi + 0xdc]
jmp 0x100093fa
lea ecx, [esi + 0x12c]
jmp 0x100093fa
lea ecx, [esi + 0x17c]
jmp 0x100093fa
lea ecx, [esi + 0x1cc]
jmp 0x100093fa
lea ecx, [esi + 0x21c]
jmp 0x100093fa
lea ecx, [esi + 0x26c]
jmp 0x100093fa
lea ecx, [esi + 0x2bc]
jmp 0x100093fa
lea ecx, [esi + 0x30c]
jmp 0x100093fa
lea ecx, [esi + 0x35c]
jmp 0x100093fa
lea ecx, [esi + 0x3ac]
jmp 0x100093fa
lea ecx, [esi + 0x76c]
jmp 0x100093fa
lea ecx, [esi + 0x3fc]
jmp 0x100093fa
lea ecx, [esi + 0x49c]
jmp 0x100093fa
lea ecx, [esi + 0x44c]
jmp 0x100093fa
lea ecx, [esi + 0x5dc]
jmp 0x100093fa
lea ecx, [esi + 0x4ec]
jmp 0x100093fa
lea ecx, [esi + 0x62c]
jmp 0x100093fa
lea ecx, [esi + 0x58c]
jmp 0x100093fa
lea ecx, [esi + 0x53c]
jmp 0x100093fa
lea ecx, [esi + 0x67c]
jmp 0x100093fa
lea ecx, [esi + 0x6cc]
jmp 0x100093fa
lea ecx, [esi + 0x71c]
jmp 0x100093fa
lea ecx, [esi + 0x7bc]
push 1
call fcn.10001190
mov ecx, dword [esi + 0x78]
mov edx, dword [ecx]
push edx
push 0x1004b198
call fcn.100064f0
add esp, 8
push 0x1004b198
mov ecx, esi
call fcn.1002fc8d
call fcn.10030335
mov edx, dword [eax]
mov ecx, eax
call dword [edx + 0xc]
add eax, 0x10
mov dword [esp + 0x10], eax
lea eax, [esp + 0x418]
push eax
mov dword [esp + 0x828], 0
call fcn.1000f400
add esp, 4
push 8
push 0x10039d78
lea ecx, [esp + 0x18]
call fcn.10001ed0
lea eax, [esp + 0x418]
lea ecx, [eax + 1]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x10009468
sub eax, ecx
push eax
lea ecx, [esp + 0x41c]
push ecx
lea ecx, [esp + 0x18]
call fcn.10003dd0
push 0xc
push str._AutoRun.bmp
lea ecx, [esp + 0x18]
call fcn.10003dd0
mov ebx, dword [esp + 0x10]
push ecx
add ebx, 0xfffffff0
mov dword [esp + 0x18], esp
mov ebp, esp
push ebx
call fcn.10001450
add eax, 0x10
add esp, 4
mov ecx, 0x1004b9f8
mov dword [ebp], eax
call fcn.100026c0
test eax, eax
je 0x1000951c
mov edx, dword [0x1004ba34]
mov eax, dword [esi + 0xa8]
push edx
push 0
push 0x172
push eax
call edi
mov dword [esp + 0x824], 0xffffffff
lea eax, [ebx + 0xc]
or ecx, 0xffffffff
lock xadd dword [eax], ecx
dec ecx
test ecx, ecx
jg 0x100094f7
mov ecx, dword [ebx]
mov edx, dword [ecx]
push ebx
call dword [edx + 4]
mov ecx, dword [esp + 0x81c]
mov dword fs:[0], ecx
mov ecx, dword [esp + 0x818]
call fcn.1001b3e9
pop edi
pop esi
pop ebp
pop ebx
add esp, 0x818
ret
push 0x13
push 0x10039d54
lea ecx, [esp + 0x18]
call fcn.10001ed0
mov ebx, dword [esp + 0x10]
push ecx
add ebx, 0xfffffff0
mov dword [esp + 0x18], esp
mov ebp, esp
push ebx
call fcn.10001450
add eax, 0x10
add esp, 4
mov ecx, 0x1004b9f8
mov dword [ebp], eax
call fcn.100026c0
test eax, eax
je 0x10009571
mov ecx, dword [0x1004ba34]
mov edx, dword [esi + 0xa8]
push ecx
push 0
push 0x172
push edx
jmp 0x100094d3
push 1
call fcn.1000f440
add esp, 4
cmp eax, 0xffffffff
jne 0x100094d5
push 0
call fcn.1001bf24
nop
xor dl, byte [ebx - 0x6cc2f000]
add byte [eax], dl
dec eax
xchg ebx, eax
add byte [eax], dl
push ebx
xchg ebx, eax
add byte [eax], dl
pop esi
xchg ebx, eax
add byte [eax], dl
imul edx, dword [ebx - 0x6c8bf000], 0x937c1000
add byte [eax], dl
test byte [ebx - 0x6c73f000], dl
add byte [eax], dl
pushfd
xchg ebx, eax
add byte [eax], dl
movsb byte es:[edi], byte [esi]
xchg ebx, eax
add byte [eax], dl
lodsb al, byte [esi]
xchg ebx, eax
add byte [eax], dl
mov ah, 0x93
add byte [eax], dl
mov esp, 0xc4100093
xchg ebx, eax
add byte [eax], dl
int3