Function at 0x100243bb
Capabilities:
Get disk information
Log keystrokes via polling
Parse credit card information

Disassembly:
push ebp
lea ebp, [esp - 0x6c]
sub esp, 0x160
push ebx
push esi
push edi
push 0x100e3d7c
mov dword [ebp + 0x3c], ecx
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov ecx, dword [ebp + 0x78]
and dword [ebp + 0x10], 0
mov eax, ecx
and eax, 0x10000
mov dword [ebp - 0x5c], eax
mov eax, ecx
and eax, 0x20000
mov esi, ecx
mov dword [ebp - 0x48], eax
movzx eax, cl
xor ecx, ecx
and esi, 0x40000
test eax, eax
sete cl
mov dword [ebp - 0x10], esi
mov dword [ebp - 0x14], ecx
xor ecx, ecx
cmp eax, 1
sete cl
xor edx, edx
cmp eax, 2
sete dl
cmp dword [ebp - 0x14], 0
mov dword [ebp + 8], ecx
mov dword [ebp - 8], edx
jne 0x1002442e
test ecx, ecx
mov byte [ebp + 0x36], 0
je 0x10024432
mov byte [ebp + 0x36], 1
mov eax, dword [ebp + 0x74]
add eax, 0xfffffffe
mov dword [ebp - 0x44], eax
mov dword [ebp], eax
push 1
lea eax, [ebp + 0x74]
push eax
push 0x100cb4a8
call fcn.10048195
add esp, 0xc
cmp dword [ebp - 0x14], 0
push 0x24
pop edx
push 0x23
pop ebx
movzx eax, al
push 0x7c
mov dword [ebp - 0x3c], eax
mov dword [ebp + 0xc], 0x100001
mov dword [ebp + 0x14], 0x100002
mov dword [ebp + 0x2c], 0x100003
pop edi
jne 0x10024492
cmp dword [ebp + 8], 0
je 0x10024489
mov dword [ebp + 0xc], edi
mov dword [ebp + 0x2c], edx
jmp 0x10024498
cmp dword [ebp - 8], 0
je 0x1002449b
mov dword [ebp + 0x10], edi
mov dword [ebp + 0xc], edx
mov dword [ebp + 0x2c], edi
mov dword [ebp + 0x14], ebx
mov eax, dword [ebp + 0x74]
mov cx, word [eax]
cmp cx, 0x2a
mov byte [ebp + 0x47], 0
jne 0x100244b6
mov ecx, dword [ebp + 0xc]
push 0x2a
pop esi
mov dword [ebp - 0x10], esi
jmp 0x100244c8
cmp cx, dx
je 0x100244c5
cmp cx, bx
je 0x100244c5
cmp cx, di
jne 0x100244d3
movzx ecx, cx
inc eax
inc eax
mov dword [ebp + 0x10], ecx
mov byte [ebp + 0x47], cl
mov dword [ebp + 0x74], eax
cmp word [eax], 0x5b
mov edi, eax
sete byte [ebp + 0x57]
cmp byte [ebp + 0x57], 0
mov dword [ebp + 0x50], edi
je 0x10024545
push eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
lea ecx, [edi + eax*2 - 2]
jmp 0x100244f9
and word [ecx], 0
dec ecx
dec ecx
mov ax, word [ecx]
call fcn.10002df6
test al, al
jne 0x100244f3
cmp word [ecx], 0x5d
jne 0x1002450f
and word [ecx], 0
push 2
pop edx
add edi, edx
xor ecx, ecx
jmp 0x1002453a
mov eax, ecx
call fcn.10002df6
test al, al
jne 0x10024538
cmp cx, 0x5b
je 0x1002452f
cmp cx, 0x28
jne 0x10024545
mov eax, dword [ebp]
add dword [ebp], edx
mov word [eax], cx
add edi, edx
mov cx, word [edi]
test cx, cx
mov dword [ebp + 0x50], edi
jne 0x10024518
mov eax, dword [ebp + 0x3c]
cmp byte [eax + 0x92], 0
jne 0x1002455d
cmp byte [eax + 9], 0
jne 0x1002455d
and dword [ebp - 0xc], 0
jmp 0x10024564
mov dword [ebp - 0xc], 1
push 1
lea eax, [ebp + 0x74]
push eax
push 0x100cb4a8
xor ebx, ebx
mov dword [ebp + 0x20], esi
mov dword [ebp + 0x74], edi
call fcn.10048195
mov edi, dword [ebp + 0x74]
movzx eax, al
mov dword [ebp - 0x38], eax
mov eax, dword [ebp + 0x10]
add esp, 0xc
cmp byte [ebp + 0x57], bl
mov dword [ebp + 0x48], ebx
mov dword [ebp + 0x4c], ebx
mov dword [ebp + 0x60], ebx
mov dword [ebp + 0x64], ebx
mov dword [ebp + 0x38], edi
mov dword [ebp + 0x5c], ebx
mov dword [ebp + 0x58], ebx
mov dword [ebp + 0x30], ebx
mov dword [ebp + 4], ebx
mov byte [ebp + 0x7b], bl
mov dword [ebp + 0x18], eax
je 0x100248b8
mov esi, dword [ebp + 8]
mov edx, edi
xor eax, eax
mov ax, word [edx]
mov byte [ebp + 0x6b], bl
xor bl, bl
cmp ax, 0x22
mov dword [ebp + 0x50], edx
mov dword [ebp + 0x28], edx
je 0x100245ef
cmp ax, 0x27
je 0x100245ef
test ax, ax
je 0x10024625
push eax
call fcn.10045b88
add esp, 4
test al, al
jne 0x100245ea
xor esi, esi
lea eax, [edx + 2]
jmp 0x10024622
xor eax, eax
mov ax, word [edx + 2]
push eax
call fcn.10045b88
add esp, 4
test al, al
jne 0x10024604
xor esi, esi
push 0xc1
lea eax, [ebp + 0x28]
push 0
push eax
call fcn.1001a65a
mov edx, eax
add esp, 0xc
mov byte [ebp + 0x6b], 1
mov bl, 1
mov dword [ebp + 0x50], edx
mov dword [ebp + 0x38], eax
lea ecx, [ebp + 0x38]
call fcn.1000f804
mov edi, dword [ebp + 0x38]
xor ecx, ecx
jmp 0x100246c7
mov eax, ecx
call fcn.10002df6
test al, al
je 0x1002465c
cmp bl, 1
jg 0x100246d3
lea ecx, [ebp + 0x38]
inc bl
call fcn.1000f804
mov edi, dword [ebp + 0x38]
dec edi
dec edi
jmp 0x100246c2
cmp cx, 0x3e
je 0x1002475c
cmp cx, 0x3c
je 0x1002475c
cmp cx, 0x3d
je 0x1002475c
cmp cx, 0x21
je 0x1002475c
test esi, esi
je 0x100246be
cmp dword [ebp + 8], 0
je 0x100246be
cmp cx, 0x26
je 0x100246a0
cmp cx, 0x7c
je 0x100246a0
cmp cx, 0x40
jne 0x100246be
mov ax, word [edi + 2]
call fcn.10002df6
test al, al
je 0x100246be
mov ax, word [edi - 2]
call fcn.10002df6
test al, al
jne 0x1002473f
test bl, bl
jg 0x100246d3
inc edi
inc edi
mov dword [ebp + 0x38], edi
mov cx, word [edi]
test cx, cx
jne 0x10024637
cmp byte [ebp + 0x6b], 0
jne 0x100248a7
mov ecx, dword [ebp + 0x10]
test ecx, ecx
mov eax, dword [ebp + 0x74]
mov ax, word [eax]
jne 0x10024799
movzx eax, ax
cmp dword [ebp + 0x2c], eax
je 0x100247c8
cmp dword [ebp + 0x14], eax
je 0x100247c8
push 0xc1
lea eax, [ebp + 0x28]
push 0
push eax
call fcn.1001a65a
mov edx, eax
add esp, 0xc
mov dword [ebp + 0x50], edx
cmp byte [ebp + 0x7b], 0
je 0x100248a7
sub edx, edi
sar edx, 1
push edx
push edi
lea ecx, [ebp + 4]
call fcn.10046247
mov eax, dword [ebp + 4]
and word [edi], 0
jmp 0x10024917
lea eax, [edi + 2]
mov cx, word [eax]
cmp cx, word [edi]
jne 0x10024756
and word [edi], 0
mov edi, eax
mov byte [ebp + 0x7b], 5
jmp 0x10024760
mov byte [ebp + 0x7b], 3
jmp 0x10024760
mov byte [ebp + 0x7b], 1
cmp byte [ebp + 0x7b], 1
lea ecx, [edi + 2]
mov dword [ebp + 0x28], ecx
jne 0x100246dd
mov ax, word [ecx]
cmp ax, 0x3e
je 0x1002478f
cmp ax, 0x3c
je 0x1002478f
cmp ax, 0x3d
je 0x1002478f
cmp ax, 0x21
jne 0x100246dd
inc ecx
inc ecx
mov dword [ebp + 0x28], ecx
jmp 0x100246dd
cmp dword [ebp + 0x2c], ecx
je 0x100247a7
cmp dword [ebp + 0x14], ecx
je 0x100247a7
xor ecx, ecx
jmp 0x100247aa
xor ecx, ecx
inc ecx
cmp ax, 0x27
je 0x100247bb
cmp ax, 0x2a
je 0x100247bb
xor eax, eax
inc eax
jmp 0x100247bd
xor eax, eax
test ecx, eax
je 0x10024703
mov eax, dword [ebp + 0x10]
test eax, eax
je 0x10024703
mov eax, dword [ebp + 0x28]
lea ecx, [ebp + 0x50]
mov dword [ebp + 0x50], eax
call fcn.1000f804
mov edx, dword [ebp + 0x50]
xor ebx, ebx
cmp word [edx], 0x40
jne 0x10024896
xor eax, eax
lea ecx, [edx + 2]
mov ax, word [ecx]
push eax
call fcn.10045b88
add esp, 4
test al, al
je 0x10024896
mov edx, ecx
jmp 0x10024893
cmp cx, 0x25
jne 0x10024850
inc ebx
cmp ebx, 2
jle 0x10024823
cmp dword [ebp - 0xc], 0
je 0x10024703
inc edx
inc edx
xor eax, eax
jmp 0x10024841
test ax, ax
je 0x1002471b
call fcn.10002df6
test al, al
jne 0x1002471b
inc edx
inc edx
mov ax, word [edx]
cmp ax, 0x25
mov dword [ebp + 0x50], edx
jne 0x10024829
inc ebx
jmp 0x10024891
mov eax, ecx
call fcn.10002df6
test al, al
jne 0x1002471b
cmp cx, 0x29
je 0x1002471b
cmp cx, 0x5d
je 0x1002471b
cmp cx, 0x26
je 0x1002471b
cmp cx, 0x7c
je 0x1002471b
cmp cx, 0x40
je 0x1002471b
inc edx
inc edx
mov dword [ebp + 0x50], edx
mov cx, word [edx]
test cx, cx
jne 0x1002480d
jmp 0x1002471b
cmp word [edx], 0
je 0x1002491a
and word [edx], 0
inc edx
inc edx
mov dword [ebp + 0x50], edx
jmp 0x1002491a
cmp dword [ebp + 8], ebx
je 0x100248fa
cmp word [edi], 0x22
jne 0x100248fa
add edi, 2
mov ax, word [edi]
cmp ax, bx
je 0x1002491a
inc edi
inc edi
cmp ax, 0x22
je 0x100248fa
mov ax, word [edi]
cmp ax, bx
jne 0x100248ce
jmp 0x100248fa
cmp ax, 0x3e
je 0x10024904
cmp ax, 0x3c
je 0x10024904
cmp ax, 0x3d
je 0x10024904
cmp ax, 0x21
je 0x10024904
inc edi
inc edi
mov ax, word [edi]
cmp ax, bx
jne 0x100248e0
jmp 0x1002491a
push edi
lea ecx, [ebp + 4]
mov byte [ebp + 0x7b], 1
call fcn.100502c8
mov eax, dword [ebp + 4]
mov word [edi], bx
mov dword [ebp + 0x5c], eax
mov eax, dword [ebp + 0x74]
push 0x2a
pop ecx
cmp word [eax], cx
jne 0x1002494a
cmp byte [ebp + 0x57], 0
je 0x1002494a
mov edx, dword [ebp + 0xc]
xor esi, esi
cmp edx, dword [ebp + 0x10]
jne 0x1002493a
cmp dword [ebp - 0x10], esi
je 0x1002494c
mov edx, dword [ebp + 0xc]
inc eax
inc eax
mov dword [ebp + 0x18], edx
mov dword [ebp + 0x20], ecx
mov dword [ebp + 0x74], eax
jmp 0x1002494c
xor esi, esi
cmp dword [ebp - 0xc], esi
jne 0x100249ed
cmp dword [ebp + 0x20], esi
jne 0x100249f2
push 1
push esi
lea ecx, [ebp + 0x58]
push ecx
mov ecx, dword [ebp + 0x3c]
push eax
call fcn.10058f7c
mov eax, dword [ebp + 0x58]
push esi
push esi
lea ecx, [ebp + 0x58]
push ecx
mov ecx, dword [ebp + 0x3c]
push eax
mov dword [ebp - 0x4c], eax
mov dword [ebp + 0x58], esi
call fcn.10057b62
cmp dword [ebp + 0x5c], esi
je 0x100249e0
mov ecx, dword [ebp + 0x3c]
push 1
xor edi, edi
push edi
lea eax, [ebp + 0x30]
push eax
push dword [ebp + 0x5c]
call fcn.10058f7c
mov eax, dword [ebp + 0x30]
push edi
push edi
lea ecx, [ebp + 0x30]
push ecx
mov ecx, dword [ebp + 0x3c]
push eax
mov dword [ebp - 0x40], eax
mov dword [ebp + 0x30], edi
call fcn.10057b62
push dword [ebp + 0x58]
call dword [sym.imp.KERNEL32.dll_lstrlenW]
push dword [ebp + 0x30]
lea ecx, [ebp + 0x58]
mov esi, eax
call fcn.1004618f
mov eax, dword [ebp + 0x58]
lea eax, [eax + esi*2]
lea ecx, [ebp - 0x40]
mov dword [ebp + 0x5c], eax
call fcn.1003f96c
xor esi, esi
lea ecx, [ebp - 0x4c]
call fcn.1003f96c
jmp 0x10024b2a
cmp dword [ebp + 0x20], esi
je 0x10024a30
mov ecx, dword [ebp + 0x3c]
cmp byte [ecx + 9], 0
jne 0x10024a0f
cmp word [eax], 0x26
je 0x10024a0f
lea ecx, [ebp + 0x58]
push ecx
push eax
call fcn.1004faae
pop ecx
pop ecx
jmp 0x10024a40
push 0xffffffffffffffff
push esi
push eax
call fcn.100152b4
cmp eax, esi
je 0x10024a20
mov eax, dword [eax]
jmp 0x10024a25
mov eax, 0x100c6a64
push eax
lea ecx, [ebp + 0x58]
call fcn.100502c8
jmp 0x10024a40
push 1
push esi
lea ecx, [ebp + 0x58]
push ecx
mov ecx, dword [ebp + 0x3c]
push eax
call fcn.10058f7c
cmp dword [ebp + 0x5c], esi
je 0x10024b2a
push dword [ebp + 0x58]
call dword [sym.imp.KERNEL32.dll_lstrlenW]
xor esi, esi
cmp dword [ebp + 0x20], esi
mov ebx, eax
je 0x10024b02
mov eax, dword [ebp + 0x5c]
mov dword [ebp + 0x20], 0x100c6a64
mov dword [ebp + 0x28], esi
mov cx, word [eax]
cmp cx, 0x3e
je 0x10024a87
cmp cx, 0x3c
je 0x10024a87
cmp cx, 0x3d
je 0x10024a87
cmp cx, 0x21
jne 0x10024a8b
inc eax
inc eax
jmp 0x10024a6c
mov ecx, dword [ebp + 0x3c]
mov edi, eax
sub edi, dword [ebp + 0x5c]
sar edi, 1
cmp byte [ecx + 9], 0
jne 0x10024aa1
cmp word [eax], 0x26
jne 0x10024ab2
lea edx, [ebp + 0x28]
push edx
push eax
call fcn.1001ceac
cmp eax, esi
je 0x10024ab2
mov dword [ebp + 0x20], eax
push dword [ebp + 0x20]
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov esi, eax
lea eax, [esi + edi]
add eax, ebx
push eax
lea ecx, [ebp + 0x58]
call fcn.10046168
test edi, edi
je 0x10024ae2
mov eax, dword [ebp + 0x58]
push edi
push dword [ebp + 0x5c]
lea eax, [eax + ebx*2]
push eax
call fcn.10005b3b
add esp, 0xc
mov eax, dword [ebp + 0x58]
inc esi
push esi
push dword [ebp + 0x20]
add edi, ebx
lea eax, [eax + edi*2]
push eax
call fcn.10005b3b
add esp, 0xc
lea ecx, [ebp + 0x28]
call fcn.1003f96c
jmp 0x10024b1f
mov ecx, dword [ebp + 0x3c]
push 1
push esi
lea eax, [ebp + 0x30]
push eax
push dword [ebp + 0x5c]
call fcn.10058f7c
push dword [ebp + 0x30]
lea ecx, [ebp + 0x58]
call fcn.1004618f
mov eax, dword [ebp + 0x58]
lea eax, [eax + ebx*2]
mov dword [ebp + 0x5c], eax
xor esi, esi
mov eax, dword [ebp + 0x58]
push eax
mov dword [ebp + 0x74], eax
call fcn.10010e64
mov ebx, dword [sym.imp.KERNEL32.dll_lstrlenW]
pop ecx
push dword [ebp + 0x74]
call ebx
mov edx, dword [ebp + 0x74]
mov edi, dword [ebp + 0x5c]
cmp edi, esi
lea eax, [edx + eax*2]
mov dword [ebp + 0x28], eax
mov dword [ebp + 0x20], edx
mov dword [ebp + 0x38], edi
jne 0x10024b64
push edx
call ebx
mov edx, dword [ebp + 0x74]
lea edi, [edx + eax*2]
mov dword [ebp + 0x38], edi
cmp edi, esi
mov ecx, edx
je 0x10024b81
mov ax, word [edx]
jmp 0x10024b78
cmp ecx, edi
jae 0x10024b81
inc ecx
inc ecx
mov ax, word [ecx]
call fcn.10002df6
test al, al
je 0x10024b6f
mov bl, byte [ebp + 0x7b]
sub ecx, edx
sar ecx, 1
test bl, bl
mov dword [ebp + 0x5c], ecx
jne 0x10024bcd
cmp dword [ebp - 8], 0
jne 0x10024bcd
xor ecx, ecx
mov cx, word [edx]
cmp cx, 0x3a
je 0x10024bcd
mov eax, dword [ebp + 0x18]
cmp dword [ebp + 0x14], eax
je 0x10024bad
cmp dword [ebp + 0x2c], eax
jne 0x10024bbe
mov eax, ecx
call fcn.10014a5c
test al, al
jne 0x10024bcd
cmp cx, 0x2d
je 0x10024bcd
cmp dword [ebp + 8], 0
je 0x1002503e
jmp 0x10025419
mov dword [ebp + 0x40], edi
cmp word [edx], 0x3a
jne 0x10024bde
test bl, bl
jne 0x10024bde
or dword [ebp + 0x18], 0xffffffff
cmp bl, 1
jne 0x10024bfe
lea eax, [edi + 2]
mov cx, word [eax]
cmp cx, 0x3d
je 0x10024bfb
cmp word [edi], 0x3c
jne 0x10024c02
cmp cx, 0x3e
jne 0x10024c02
mov dword [ebp + 0x40], eax
test bl, bl
je 0x10024c06
add dword [ebp + 0x40], 2
lea ecx, [ebp + 0x40]
call fcn.1000f804
cmp byte [ebp + 0x36], 0
mov ebx, dword [ebp + 0x40]
je 0x10024cc4
cmp word [ebx], 0x3f
jne 0x10024cc4
inc ebx
inc ebx
lea ecx, [ebp + 0x7c]
mov byte [ebp + 0x56], 1
mov dword [ebp + 0x40], ebx
call fcn.1000f804
mov edi, dword [ebp + 0xc]
cmp dword [ebp + 0x18], edi
je 0x10024c59
movzx eax, word [edx]
cmp edi, eax
je 0x10024c4f
cmp dword [ebp + 0x14], eax
je 0x10024c4f
cmp dword [ebp + 0x2c], eax
jne 0x10024c59
inc edx
mov esi, eax
inc edx
mov dword [ebp + 0x18], esi
mov dword [ebp + 0x74], edx
cmp dword [ebp - 8], 0
je 0x10024c91
cmp byte [ebp + 0x47], 0
jne 0x10024c91
mov eax, dword [ebp + 0x2c]
cmp dword [ebp + 0x18], eax
je 0x10024c91
lea ecx, [ebp + 0x74]
call fcn.1000f804
mov edx, dword [ebp + 0x74]
mov ax, word [edx]
cmp ax, 0x30
jb 0x10024c87
cmp ax, 0x39
jbe 0x10024c91
cmp ax, 0x2e
je 0x10024c91
and dword [ebp + 0x18], 0
cmp dword [ebp - 0x14], 0
jne 0x10024ca3
test esi, esi
jne 0x10024ca3
cmp word [edx], 0x27
mov eax, edi
je 0x10024ca6
mov eax, dword [ebp + 0x18]
cmp edi, eax
jne 0x10024d58
lea ecx, [ebp + 0x78]
mov dword [ebp + 0x78], edx
call fcn.1000f804
mov ecx, dword [ebp + 0x38]
mov edi, dword [ebp + 0x78]
add ecx, 0xfffffffe
jmp 0x10024cdb
mov byte [ebp + 0x56], 0
jmp 0x10024c36
mov ax, word [ecx]
call fcn.10002df6
test al, al
je 0x10024cdf
dec ecx
dec ecx
cmp ecx, edi
jae 0x10024ccd
sub ecx, edi
inc ecx
inc ecx
sar ecx, 1
mov esi, ecx
lea ecx, [ebp + 0x78]
mov dword [ebp + 0x78], ebx
call fcn.1000f804
mov ecx, dword [ebp + 0x28]
mov edx, dword [ebp + 0x78]
add ecx, 0xfffffffe
jmp 0x10024d0b
mov ax, word [ecx]
call fcn.10002df6
test al, al
je 0x10024d0f
dec ecx
dec ecx
cmp ecx, edx
jae 0x10024cfd
sub ecx, edx
inc ecx
inc ecx
sar ecx, 1
mov ebx, ecx
cmp esi, ebx
mov eax, esi
jle 0x10024d1f
mov eax, ebx
test eax, eax
jle 0x10024d3e
cmp dword [ebp - 0x5c], 0
push eax
push edx
push edi
je 0x10024d34
call dword [sym.imp.SHLWAPI.dll_StrCmpNW]
jmp 0x10024d3a
call dword [sym.imp.SHLWAPI.dll_StrCmpNIW]
test eax, eax
jne 0x10024d42
sub esi, ebx
mov eax, esi
cdq
xor ecx, ecx
mov edi, eax
mov dword [ebp + 0x48], edi
mov dword [ebp + 0x4c], edx
mov dword [ebp + 0x60], ecx
mov dword [ebp + 0x64], ecx
jmp 0x1002518e
cmp dword [ebp + 0x2c], eax
jne 0x10024e07
fldz
lea eax, [ebp + 0x24]
fstp qword [ebp + 0x24]
push eax
lea eax, [ebp + 0x74]
fldz
push eax
fstp qword [ebp + 0x1c]
call fcn.10053937
lea eax, [ebp + 0x1c]
push eax
lea eax, [ebp + 0x40]
push eax
call fcn.10053937
fld qword [ebp + 0x24]
add esp, 0x10
call fcn.100b4728
fld qword [ebp + 0x1c]
mov edi, eax
mov dword [ebp + 0x48], edi
mov dword [ebp + 0x4c], edx
call fcn.100b4728
cmp byte [ebp + 0x7b], 1
mov ecx, eax
mov dword [ebp + 0x60], ecx
mov dword [ebp + 0x64], edx
jg 0x1002518e
fild qword [ebp + 0x48]
fld qword [ebp + 0x24]
fucompp
fnstsw ax
test ah, 0x44
jp 0x10024dd4
fild qword [ebp + 0x60]
fld qword [ebp + 0x1c]
fucompp
fnstsw ax
test ah, 0x44
jnp 0x1002518e
fld qword [ebp + 0x24]
fcomp qword [ebp + 0x1c]
fnstsw ax
test ah, 0x41
jne 0x10024de9
xor eax, eax
inc eax
jmp 0x10024d42
fld qword [ebp + 0x1c]
fld qword [ebp + 0x24]
fucompp
fnstsw ax
test ah, 0x44
jp 0x10024dff
xor eax, eax
jmp 0x10024d42
or eax, 0xffffffff
jmp 0x10024d42
cmp dword [ebp + 0x14], eax
jne 0x10024e2e
lea eax, [ebp + 0x48]
push eax
lea eax, [ebp + 0x74]
push eax
call fcn.1005381f
lea eax, [ebp + 0x60]
push eax
lea eax, [ebp + 0x40]
push eax
call fcn.1005381f
add esp, 0x10
jmp 0x10025188
push 3
pop edi
cmp dword [ebp + 0x5c], edi
jl 0x1002540f
lea ecx, [ebp + 0x40]
mov byte [ebp + 0x6b], 0
mov byte [ebp + 0x37], 1
call fcn.1000f804
mov eax, dword [ebp + 0x40]
cmp word [eax], 0x23
jne 0x10024e5c
inc eax
inc eax
mov dword [ebp + 0x40], eax
mov byte [ebp + 0x6b], 1
mov bl, byte [ebp + 8]
fldz
fstp qword [ebp - 0x1c]
mov byte [ebp + 0x7b], 0
cmp word [eax], 0x2a
jne 0x10024e77
inc eax
inc eax
mov dword [ebp + 0x40], eax
mov byte [ebp + 0x37], 0
mov dword [ebp - 4], eax
lea eax, [ebp - 0x1c]
push eax
lea eax, [ebp - 4]
push eax
call fcn.1004bf86
mov dword [ebp + 0x28], eax
mov eax, dword [ebp + 0x40]
mov dword [ebp - 4], eax
lea eax, [ebp + 0x60]
push eax
lea eax, [ebp - 4]
push eax
call fcn.1004bbf7
mov eax, dword [ebp - 4]
add esp, 0x10
cmp word [eax], 0x2e
jne 0x10024eb7
fld qword [ebp - 0x1c]
call fcn.100b4728
mov dword [ebp + 0x60], eax
mov dword [ebp + 0x64], edx
cmp dword [ebp + 0x5c], edi
jl 0x10024ff7
cmp dword [ebp + 0x5c], 5
jg 0x10024ff7
mov esi, dword [ebp + 0x20]
push edi
push 0x100cb4a0
push esi
call dword [sym.imp.SHLWAPI.dll_StrCmpNIW]
test eax, eax
jne 0x10024ffa
cmp dword [ebp + 0x5c], edi
je 0x10024f1c
mov ax, word [esi + 6]
xor ecx, ecx
mov cx, word [esi + 8]
mov edx, 0xffdf
and eax, edx
and ecx, edx
cmp dword [ebp + 0x5c], 4
jne 0x10024f22
cmp ax, 0x41
jne 0x10024f0a
xor bl, bl
jmp 0x10024f1c
cmp ax, 0x42
je 0x10024f4c
cmp ax, 0x55
jne 0x10025010
mov bl, 1
mov byte [ebp + 0x7b], 1
jmp 0x10024f4c
cmp dword [ebp + 0x5c], 5
jne 0x10024ffa
cmp ax, 0x42
jne 0x10025010
cmp cx, 0x55
jne 0x10024f40
mov bl, 1
jmp 0x10024f4c
cmp cx, 0x41
jne 0x10025010
xor bl, bl
movsx eax, bl
push eax
call fcn.10015433
cmp byte [ebp + 0x7b], 0
mov edi, eax
mov eax, edx
pop ecx
mov dword [ebp + 0x48], edi
mov dword [ebp + 0x4c], eax
mov ecx, edi
je 0x10024f78
add ecx, 0xfffff
adc eax, 0
shrd ecx, eax, 0x14
shr eax, 0x14
cmp byte [ebp + 0x56], 0
jne 0x100255e0
xor esi, esi
cmp dword [ebp + 0x28], esi
jle 0x10025648
cmp byte [ebp + 0x7b], 0
je 0x1002518b
mov dword [ebp - 0x20], eax
and dword [ebp - 0x20], 0x80000000
and eax, 0x7fffffff
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x64], ecx
fild qword [ebp - 0x64]
mov dword [ebp - 0x24], esi
fild qword [ebp - 0x24]
fchs
faddp st(1)
fcom qword [ebp - 0x1c]
fnstsw ax
test ah, 0x41
jne 0x10024fca
xor eax, eax
fstp st(0)
inc eax
jmp 0x10024fe1
fld qword [ebp - 0x1c]
fld st(1)
fucompp
fnstsw ax
fstp st(0)
test ah, 0x44
jp 0x10024fde
xor eax, eax
jmp 0x10024fe1
or eax, 0xffffffff
cdq
mov edi, eax
xor ecx, ecx
mov dword [ebp + 0x48], edi
mov dword [ebp + 0x4c], edx
mov dword [ebp + 0x60], ecx
mov dword [ebp + 0x64], esi
jmp 0x1002518e
mov esi, dword [ebp + 0x20]
cmp dword [ebp + 0x5c], edi
jne 0x10025010
push edi
push 0x100cb498
push esi
call dword [sym.imp.SHLWAPI.dll_StrCmpNIW]
test eax, eax
je 0x1002508c
mov edx, dword [ebp + 0x74]
cmp word [edx], 0x3a
jne 0x100251ad
mov ax, word [edx + 2]
cmp ax, 0x65
jne 0x10025032
add edx, 4
mov dword [ebp + 0x74], edx
jmp 0x10025419
cmp ax, 0x70
jne 0x1002507c
add edx, 4
mov dword [ebp + 0x74], edx
push 0x3f
lea eax, [ebp + 0x78]
push 0x2a
push eax
mov dword [ebp + 0x78], edx
call fcn.1003ff40
mov eax, dword [ebp + 0x78]
mov ax, word [eax]
neg ax
sbb eax, eax
xor ecx, ecx
push ecx
push ecx
push ecx
and eax, 0x101
push eax
push dword [ebp + 0x74]
call fcn.10018574
add esp, 0x20
mov esi, eax
neg esi
sbb esi, esi
neg esi
jmp 0x10025521
cmp ax, 0x6b
jne 0x100251ad
add edx, 4
mov dword [ebp + 0x74], edx
mov edx, dword [ebp + 0x40]
xor eax, eax
mov ax, word [edx]
push eax
call fcn.10045b88
add esp, 4
test al, al
je 0x100250c2
xor ecx, ecx
mov cx, word [edx + 2]
push ecx
call fcn.10045b88
add esp, 4
test al, al
jne 0x100250be
or cx, 0x20
cmp cx, 0x78
jne 0x100250c2
mov byte [ebp + 0x6b], 2
xor esi, esi
cmp byte [ebp + 0x6b], 0
jne 0x100250da
push esi
push edx
call fcn.1001843a
cdq
pop ecx
pop ecx
mov dword [ebp + 0x60], eax
mov dword [ebp + 0x64], edx
cmp dword [ebp + 0x64], esi
jl 0x10025648
jg 0x100250ee
cmp dword [ebp + 0x60], esi
jbe 0x10025648
cmp dword [ebp + 0x64], esi
jl 0x10025110
jg 0x100250fb
cmp dword [ebp + 0x60], 0x61
jb 0x10025110
cmp dword [ebp + 0x64], esi
jg 0x10025110
jl 0x10025108
cmp dword [ebp + 0x60], 0x7a
ja 0x10025110
add dword [ebp + 0x60], 0xffffffe0
adc dword [ebp + 0x64], 0xffffffff
push dword [ebp + 0x60]
call dword [sym.imp.USER32.dll_GetAsyncKeyState]
mov cx, ax
and cx, 0x8000
neg cx
mov word [ebp - 0xb2], si
sbb ecx, ecx
and ecx, dword [ebp + 0x60]
cmp ecx, 0x41
mov eax, ecx
cdq
mov dword [ebp + 0x48], eax
mov dword [ebp + 0x4c], edx
mov word [ebp - 0xb4], cx
jl 0x1002514a
cmp ecx, 0x5a
jle 0x1002516a
cmp ecx, 0x30
jl 0x10025154
cmp ecx, 0x39
jle 0x1002516a
push ecx
lea eax, [ebp - 0xb4]
push str.0x_lX
push eax
call dword [sym.imp.USER32.dll_wsprintfW]
add esp, 0xc
cmp byte [ebp + 0x56], 0
mov ecx, dword [ebp + 0x3c]
lea eax, [ebp - 0xb4]
push eax
jne 0x100255e7
push str.PressKey
call fcn.100457c2
mov edi, dword [ebp + 0x48]
mov ecx, dword [ebp + 0x60]
mov esi, dword [ebp + 0x38]
mov dx, word [esi]
test dx, dx
jne 0x100252ec
xor esi, esi
or edi, dword [ebp + 0x4c]
je 0x10025521
jmp 0x1002530a
mov edx, dword [ebp + 0x20]
mov cx, word [edx]
xor ebx, ebx
xor eax, eax
lea edi, [ebp - 0x50]
mov word [ebp - 0x58], cx
mov word [ebp - 0x56], 0x3a
mov word [ebp - 0x54], 0x5c
mov word [ebp - 0x52], bx
xor esi, esi
cmp cx, 0x5c
stosd dword es:[edi], eax
lea eax, [ebp - 0x58]
jne 0x100251f2
mov eax, edx
mov edx, dword [ebp + 0x38]
cmp edx, ebx
je 0x100251f2
xor ecx, ecx
mov cx, word [edx]
cmp cx, bx
je 0x100251f2
mov esi, ecx
mov word [edx], bx
movsx ecx, byte [ebp + 8]
push ebx
push ecx
push eax
call fcn.10010ec0
add esp, 0xc
cmp si, bx
je 0x1002520c
mov ecx, dword [ebp + 0x38]
mov word [ecx], si
cmp byte [ebp + 0x56], 0
jne 0x100255f3
cmp dword [ebp + 0x28], ebx
jle 0x10025607
cmp byte [ebp + 0x37], 0
je 0x100252af
mov ecx, eax
shrd ecx, edx, 0x14
shr edx, 0x14
mov dword [ebp - 0x30], edx
mov esi, 0x7fffffff
and edx, esi
mov dword [ebp - 0x6c], ecx
mov dword [ebp - 0x68], edx
mov edx, dword [ebp - 4]
mov ecx, 0x80000000
and dword [ebp - 0x30], ecx
fild qword [ebp - 0x6c]
cmp word [edx], 0x2e
mov dword [ebp - 0x34], ebx
fild qword [ebp - 0x34]
fchs
faddp st(1)
jne 0x1002528a
and eax, 0xfffff
mov dword [ebp - 0x74], eax
xor eax, eax
mov dword [ebp - 0x28], eax
and eax, esi
and dword [ebp - 0x28], ecx
mov dword [ebp - 0x70], eax
fild qword [ebp - 0x74]
mov dword [ebp - 0x2c], ebx
fild qword [ebp - 0x2c]
fchs
faddp st(1)
fmul qword [0x100cb470]
faddp st(1)
fcom qword [ebp - 0x1c]
fnstsw ax
test ah, 0x41
jne 0x1002529b
fstp st(0)
xor eax, eax
inc eax
jmp 0x100252d6
fld qword [ebp - 0x1c]
fld st(1)
fucompp
fnstsw ax
fstp st(0)
test ah, 0x44
jp 0x100252d3
xor eax, eax
jmp 0x100252d6
cmp dword [ebp + 0x64], ebx
jg 0x100252bb
jl 0x10025296
cmp dword [ebp + 0x60], ebx
jb 0x10025296
cmp edx, dword [ebp + 0x64]
jb 0x100252c9
ja 0x10025296
cmp eax, dword [ebp + 0x60]
jbe 0x100252cc
jmp 0x10025296
cmp eax, dword [ebp + 0x60]
jne 0x100252d3
cmp edx, dword [ebp + 0x64]
je 0x100252ab
or eax, 0xffffffff
cdq
mov edi, eax
xor ecx, ecx
mov dword [ebp + 0x48], edi
mov dword [ebp + 0x4c], edx
mov dword [ebp + 0x60], ecx
mov dword [ebp + 0x64], ebx
jmp 0x1002518e
push 0x3d
pop ebx
cmp dx, bx
jne 0x10025310
cmp edi, ecx
jne 0x100253e7
mov eax, dword [ebp + 0x64]
cmp dword [ebp + 0x4c], eax
jne 0x100253e7
xor esi, esi
inc esi
jmp 0x10025521
cmp dx, 0x3e
jne 0x10025334
cmp word [esi + 2], bx
jne 0x10025334
mov eax, dword [ebp + 0x64]
cmp dword [ebp + 0x4c], eax
jl 0x100253e7
jg 0x10025308
cmp edi, ecx
jb 0x100253e7
jmp 0x10025308
cmp dx, 0x3c
jne 0x1002536d
mov ax, word [esi + 2]
cmp ax, bx
jne 0x1002535b
mov eax, dword [ebp + 0x64]
cmp dword [ebp + 0x4c], eax
jg 0x100253e7
jl 0x10025308
cmp edi, ecx
ja 0x100253e7
jmp 0x10025308
cmp ax, 0x3e
jne 0x1002536d
cmp edi, ecx
jne 0x10025308
mov eax, dword [ebp + 0x64]
cmp dword [ebp + 0x4c], eax
jmp 0x100253e1
cmp dx, 0x21
jne 0x10025388
mov ax, word [esi + 2]
cmp ax, bx
je 0x10025361
cmp ax, 0x3e
je 0x10025343
cmp ax, 0x3c
je 0x1002531c
cmp dx, 0x3e
jne 0x100253a5
mov eax, dword [ebp + 0x64]
cmp dword [ebp + 0x4c], eax
jl 0x100253e7
jg 0x10025308
cmp edi, ecx
jbe 0x100253e7
jmp 0x10025308
cmp dx, 0x3c
jne 0x100253c2
mov eax, dword [ebp + 0x64]
cmp dword [ebp + 0x4c], eax
jg 0x100253e7
jl 0x10025308
cmp edi, ecx
jae 0x100253e7
jmp 0x10025308
cmp dx, 0x26
jne 0x100253cf
or edi, dword [ebp + 0x4c]
je 0x100253e7
jmp 0x100253de
cmp dx, 0x7c
jne 0x100253ee
or edi, dword [ebp + 0x4c]
jne 0x10025308
or ecx, dword [ebp + 0x64]
jne 0x10025308
xor esi, esi
jmp 0x10025521
cmp dx, 0x40
jne 0x10025648
xor eax, eax
or edi, dword [ebp + 0x4c]
je 0x10025400
inc eax
xor esi, esi
or ecx, dword [ebp + 0x64]
je 0x10025408
inc esi
xor esi, eax
jmp 0x10025521
cmp dword [ebp - 8], 0
je 0x10025648
push edx
call fcn.100132bf
pop ecx
push eax
mov dword [ebp + 0x74], eax
call dword [sym.imp.KERNEL32.dll_lstrlenW]
mov ecx, dword [ebp + 0x74]
xor ebx, ebx
mov bx, word [ecx]
mov edi, eax
mov dword [ebp + 0x78], 0xfffffff8
and ebx, 0xffdf
cmp bx, 0x41
jb 0x1002549f
cmp bx, 0x5a
ja 0x1002549f
cmp word [ecx + 2], 0x3a
jne 0x1002549f
cmp word [ecx + 4], 0
je 0x10025472
cmp bx, 0x42
ja 0x1002549f
push ebx
call fcn.100b3696
neg eax
sbb eax, eax
inc eax
pop ecx
mov dword [ebp + 0x78], eax
je 0x1002549c
call dword [sym.imp.KERNEL32.dll_GetLogicalDrives]
xor ecx, ecx
mov cl, bl
sub cl, 0x41
mov esi, eax
shr esi, cl
and esi, 1
je 0x10025521
mov ecx, dword [ebp + 0x74]
cmp word [ecx + 4], 0
je 0x10025521
jmp 0x1002549f
mov ecx, dword [ebp + 0x74]
test edi, edi
jle 0x100254bb
xor eax, eax
mov ax, word [ecx + edi*2 - 2]
push eax
call fcn.1000f87b
add esp, 4
test al, al
je 0x100254bb
mov bl, 1
jmp 0x100254db
xor bl, bl
jmp 0x100254e1
xor eax, eax
lea edx, [ecx + edi*2]
mov ax, word [edx]
push eax
call fcn.1000f87b
add esp, 4
test al, al
je 0x100254de
and word [edx], 0
mov ecx, dword [ebp + 0x74]
dec edi
jns 0x100254bf
xor edi, edi
inc edi
xor esi, esi
cmp edi, esi
je 0x10025521
cmp dword [ebp - 0x48], esi
je 0x10025510
mov ax, word [ecx]
cmp ax, si
je 0x10025510
cmp word [ecx + 2], 0x3a
jne 0x10025510
cmp dword [ebp + 0x78], esi
jg 0x10025521
jge 0x10025510
push eax
call fcn.100b3696
test eax, eax
pop ecx
je 0x10025521
mov ecx, dword [ebp + 0x74]
movsx eax, bl
or eax, 0x10
push eax
push ecx
call fcn.100b38d0
pop ecx
pop ecx
mov esi, eax
xor eax, eax
cmp dword [ebp - 0x38], eax
je 0x1002552f
test esi, esi
sete al
jmp 0x10025534
test esi, esi
setne al
mov edx, dword [ebp]
push 2
lea ecx, [eax + 0x30]
pop edi
mov word [edx], cx
add edx, edi
cmp byte [ebp + 0x57], 0
mov dword [ebp], edx
je 0x10025637
mov esi, dword [ebp + 0x50]
mov cx, word [esi]
test cx, cx
je 0x1002560c
cmp cx, 0x5b
je 0x100255a2
cmp cx, 0x5d
je 0x100255a2
cmp cx, 0x28
je 0x100255a2
cmp cx, 0x29
je 0x100255a2
cmp cx, 0x26
je 0x100255a2
cmp cx, 0x7c
jne 0x1002558f
mov ax, word [esi + 2]
call fcn.10002df6
test al, al
jne 0x100255a2
cmp cx, 0x40
je 0x100255a2
mov eax, ecx
call fcn.10002df6
test al, al
je 0x100255b7
jmp 0x100255aa
mov word [edx], cx
add edx, edi
mov dword [ebp], edx
add esi, edi
mov cx, word [esi]
test cx, cx
mov dword [ebp + 0x50], esi
jne 0x1002555e
cmp word [esi], 0
je 0x1002560c
lea ecx, [ebp + 4]
call fcn.1003f96c
lea ecx, [ebp + 0x30]
call fcn.1003f96c
lea ecx, [ebp + 0x58]
call fcn.1003f96c
mov esi, dword [ebp - 0x10]
mov edi, dword [ebp + 0x50]
jmp 0x10024564
push dword [ebp + 0x3c]
push eax
push ecx
jmp 0x100255f8
push dword [ebp + 0x7c]
call fcn.100457c2
xor esi, esi
jmp 0x1002564d
push dword [ebp + 0x3c]
push edx
push eax
push dword [ebp + 0x7c]
call fcn.10012fe8
add esp, 0x10
mov esi, eax
jmp 0x1002564d
or esi, 0xffffffff
jmp 0x1002564d
mov eax, dword [ebp - 0x44]
mov word [eax - 6], 0x23
mov word [eax - 4], 0x26
lea ecx, [ebp - 0xf4]
add eax, 0xfffffffe
push ecx
mov ecx, dword [ebp + 0x3c]
mov word [eax], 0x3d
and word [edx], 0
push eax
call fcn.10092120
cmp dword [ebp - 0x3c], 0
je 0x10025603
xor ecx, ecx
test eax, eax
sete cl
mov eax, ecx
jmp 0x10025603
mov esi, 0x80070057
lea ecx, [ebp + 4]
call fcn.1003f96c
lea ecx, [ebp + 0x30]
call fcn.1003f96c
lea ecx, [ebp + 0x58]
call fcn.1003f96c
push 0x100e3d7c
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
pop edi
mov eax, esi
pop esi
pop ebx
add ebp, 0x6c
leave
ret 0xc