Function at 0x10013600
Capabilities:
Check for time delay via gettickcount
Set file attributes
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x208
push ebx
push esi
push edi
mov dword [ebp - 0x174], 0
mov dword [ebp - 0x178], 0xffffffff
mov dword [ebp - 0x19c], 0
mov dword [ebp - 0x1a4], 0
mov dword [ebp - 0x1a0], 0
mov dword [ebp - 0x1a8], 0
cmp dword [ebp + 8], 0
jne 0x1001367c
mov eax, dword [ebp + 8]
push eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.CreateDiskEx._1.__08X.__08X.
push 0x100273cc
push 1
call fcn.1000eed0
add esp, 0x14
mov dword [ebp - 0x180], 0x57
jmp 0x10014854
mov ecx, dword [ebp + 8]
cmp dword [ecx + 4], 0
je 0x10013690
mov edx, dword [ebp + 8]
cmp dword [edx], 0x3dac
jae 0x100136d0
mov eax, dword [ebp + 8]
mov ecx, dword [eax]
push ecx
mov edx, dword [ebp + 8]
mov eax, dword [edx + 4]
push eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.CreateDiskEx._2.__08X.__08X.__08X.
push 0x100273cc
push 1
call fcn.1000eed0
add esp, 0x18
mov ecx, dword [ebp + 8]
mov dword [ecx], 0x3dac
mov dword [ebp - 0x180], 0xea
jmp 0x1001484f
cmp dword [ebp + 0xc], 0
je 0x100136ee
cmp dword [ebp + 0x10], 0
je 0x100136ee
cmp dword [ebp + 0x14], 0
je 0x100136ee
cmp dword [ebp + 0x1c], 0
je 0x100136ee
cmp dword [ebp + 0x24], 0
jne 0x1001372c
mov edx, dword [ebp + 0x24]
push edx
mov eax, dword [ebp + 0x1c]
push eax
mov ecx, dword [ebp + 0x14]
push ecx
mov edx, dword [ebp + 0x10]
push edx
mov eax, dword [ebp + 0xc]
push eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.CreateDiskEx._3.__08X.__08X.__08X.__08X.__08X.__08X.
push 0x100273cc
push 1
call fcn.1000eed0
add esp, 0x24
mov dword [ebp - 0x180], 0x57
jmp 0x1001484a
mov ecx, dword [ebp + 0xc]
push ecx
call fcn.10013530
add esp, 4
test eax, eax
je 0x1001376a
mov edx, dword [ebp + 0xc]
push edx
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.CreateDiskEx._4.__08X.__s.
push 0x100273cc
push 1
call fcn.1000eed0
add esp, 0x14
mov dword [ebp - 0x180], 0xb7
jmp 0x10014845
mov eax, dword [ebp + 8]
mov dword [eax], 0x3dac
mov dword [ebp - 0x190], 0
mov dword [ebp - 0x18c], 0
mov ecx, dword [ebp + 0x1c]
mov dword [ebp - 0x190], ecx
push 0
push 0x100000
mov edx, dword [ebp - 0x18c]
push edx
mov eax, dword [ebp - 0x190]
push eax
call fcn.1001f180
mov dword [ebp - 0x190], eax
mov dword [ebp - 0x18c], edx
mov ecx, dword [ebp + 8]
mov edx, dword [ecx + 4]
mov dword [ebp - 0x1a8], edx
push 0x3dac
push 0
mov eax, dword [ebp - 0x1a8]
push eax
call fcn.1001ea50
add esp, 0xc
call fcn.1001d450
mov ecx, dword [ebp - 0x1a8]
mov dword [ecx], eax
push 0x40
mov edx, dword [ebp + 0x10]
push edx
mov eax, dword [ebp - 0x1a8]
add eax, 4
push eax
call fcn.1001e4a0
add esp, 0xc
push 0x40
mov ecx, dword [ebp + 0x14]
push ecx
mov edx, dword [ebp - 0x1a8]
add edx, 0x44
push edx
call fcn.1001e4a0
add esp, 0xc
mov eax, dword [ebp + 0xc]
push eax
mov ecx, dword [ebp - 0x1a8]
add ecx, 0x84
push ecx
call fcn.1001e290
add esp, 8
push str.PDRJNDL
mov edx, dword [ebp - 0x1a8]
add edx, 0x184
push edx
call fcn.1001e290
add esp, 8
mov eax, dword [ebp - 0x1a8]
mov ecx, dword [ebp + 0x18]
mov dword [eax + 0x198], ecx
mov edx, dword [ebp - 0x1a8]
mov eax, dword [ebp - 0x190]
mov dword [edx + 0x19c], eax
mov ecx, dword [ebp - 0x1a8]
mov edx, dword [ebp - 0x18c]
mov dword [ecx + 0x1a0], edx
mov eax, dword [ebp - 0x1a8]
mov dword [eax + 0x1a4], 0x10000
mov ecx, dword [ebp + 0x20]
and ecx, 8
test ecx, ecx
je 0x100138a9
mov dword [ebp - 0x190], 0x19000
mov dword [ebp - 0x18c], 0
mov edx, dword [ebp + 0x20]
and edx, 4
neg edx
sbb edx, edx
and edx, 0x40
mov eax, dword [ebp - 0x1a8]
mov dword [eax + 0x1ac], edx
mov ecx, dword [ebp - 0x1a8]
mov edx, dword [ecx + 0x1a4]
push edx
call fcn.1001ef81
add esp, 4
mov dword [ebp - 0x174], eax
cmp dword [ebp - 0x174], 0
jne 0x1001391d
mov eax, dword [ebp - 0x1a8]
mov ecx, dword [eax + 0x1a4]
push ecx
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.CreateDiskEx._5.__08X.__08X.
push 0x100273cc
push 1
call fcn.1000eed0
add esp, 0x14
mov dword [ebp - 0x180], 8
jmp 0x10014840
cmp dword [0x10038c5c], 0
je 0x10013961
lea edx, [ebp - 0x1a4]
push edx
mov eax, dword [ebp - 0x1a8]
mov ecx, dword [eax + 0x1ac]
push ecx
mov edx, dword [ebp - 0x1a8]
add edx, 0x44
push edx
mov eax, dword [ebp - 0x1a8]
add eax, 4
push eax
mov ecx, dword [0x100316e0]
push ecx
call fcn.1000b760
add esp, 0x14
test eax, eax
je 0x100139a9
cmp dword [0x10038c5c], 0
jne 0x100139ee
lea edx, [ebp - 0x19c]
push edx
mov eax, dword [ebp - 0x1a8]
mov ecx, dword [eax + 0x1ac]
push ecx
mov edx, dword [ebp - 0x1a8]
add edx, 0x44
push edx
mov eax, dword [ebp - 0x1a8]
add eax, 4
push eax
mov ecx, dword [0x100316e0]
push ecx
call fcn.1000b5f0
add esp, 0x14
test eax, eax
jne 0x100139ee
mov edx, dword [ebp - 0x1a8]
add edx, 0x44
push edx
mov eax, dword [ebp - 0x1a8]
add eax, 4
push eax
mov ecx, dword [0x100316e0]
push ecx
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.CreateDiskEx._6.__08X.__08X.__08X.__08X.
push 0x100273cc
push 1
call fcn.1000eed0
add esp, 0x1c
mov dword [ebp - 0x180], 0x7d1
jmp 0x1001483b
push 0
mov edx, dword [ebp - 0x1a8]
add edx, 0x84
push edx
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
push 0
push 0x80
push 2
push 0
push 0
push 0x40000000
mov eax, dword [ebp - 0x1a8]
add eax, 0x84
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x178], eax
cmp dword [ebp - 0x178], 0xffffffff
jne 0x10013a7c
mov ecx, dword [ebp - 0x1a8]
add ecx, 0x44
push ecx
mov edx, dword [ebp - 0x1a8]
add edx, 4
push edx
mov eax, dword [0x100316e0]
push eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.CreateDiskEx._7.__08X.__08X.__08X.__08X.
push 0x100273cc
push 1
call fcn.1000eed0
add esp, 0x1c
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x180], eax
jmp 0x10014836
mov ecx, dword [ebp - 0x1a8]
mov edx, dword [ecx + 0x1a4]
xor eax, eax
push eax
push edx
mov ecx, dword [ebp - 0x18c]
push ecx
mov edx, dword [ebp - 0x190]
push edx
call fcn.1001e9b0
mov dword [ebp - 0x190], eax
mov dword [ebp - 0x18c], edx
mov eax, dword [ebp - 0x190]
or eax, dword [ebp - 0x18c]
test eax, eax
je 0x10013afa
mov ecx, dword [ebp - 0x1a8]
mov edx, dword [ecx + 0x1a4]
xor eax, eax
push eax
push edx
mov ecx, dword [ebp - 0x18c]
push ecx
mov edx, dword [ebp - 0x190]
push edx
call fcn.100201b0
mov dword [ebp - 0x1b8], eax
mov dword [ebp - 0x1b4], edx
mov eax, dword [ebp - 0x1b8]
or eax, dword [ebp - 0x1b4]
test eax, eax
je 0x10013b18
mov ecx, dword [ebp - 0x190]
add ecx, 1
mov edx, dword [ebp - 0x18c]
adc edx, 0
mov dword [ebp - 0x190], ecx
mov dword [ebp - 0x18c], edx
mov eax, dword [ebp - 0x190]
mov dword [ebp - 0x198], eax
mov ecx, dword [ebp - 0x18c]
mov dword [ebp - 0x194], ecx
mov dword [ebp - 0x184], 0x64
mov edx, dword [ebp - 0x1a8]
mov eax, dword [edx + 0x1a4]
push eax
push 0
mov ecx, dword [ebp - 0x174]
push ecx
call fcn.1001ea50
add esp, 0xc
cmp dword [0x10038c5c], 0
je 0x10013b96
mov edx, dword [ebp - 0x1a8]
mov eax, dword [edx + 0x1a4]
push eax
mov ecx, dword [ebp - 0x174]
push ecx
mov edx, dword [ebp - 0x1a0]
push edx
mov eax, dword [ebp - 0x1a4]
push eax
mov ecx, dword [0x100316e0]
push ecx
call fcn.1000bbe0
add esp, 0x14
test eax, eax
je 0x10013bcc
cmp dword [0x10038c5c], 0
jne 0x10013c18
mov edx, dword [ebp - 0x1a8]
mov eax, dword [edx + 0x1a4]
push eax
mov ecx, dword [ebp - 0x174]
push ecx
mov edx, dword [ebp - 0x19c]
push edx
mov eax, dword [0x100316e0]
push eax
call fcn.1000bae0
add esp, 0x10
test eax, eax
jne 0x10013c18
mov ecx, dword [ebp - 0x1a8]
mov edx, dword [ecx + 0x1a4]
push edx
mov eax, dword [ebp - 0x174]
push eax
mov ecx, dword [ebp - 0x19c]
push ecx
mov edx, dword [0x100316e0]
push edx
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.CreateDiskEx._8.__08X.__08X.__08X.__08X.__08X.
push 0x100273cc
push 1
call fcn.1000eed0
add esp, 0x20
mov dword [ebp - 0x180], 0x1770
jmp 0x10014831
mov dword [ebp - 0x17c], 0
push 0
lea eax, [ebp - 0x17c]
push eax
mov ecx, dword [ebp - 0x1a8]
mov edx, dword [ecx + 0x1a4]
push edx
mov eax, dword [ebp - 0x174]
push eax
mov ecx, dword [ebp - 0x178]
push ecx
call dword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x10013c64
mov edx, dword [ebp - 0x1a8]
mov eax, dword [ebp - 0x17c]
cmp eax, dword [edx + 0x1a4]
je 0x10013cb2
mov ecx, dword [ebp - 0x17c]
push ecx
mov edx, dword [ebp - 0x1a8]
mov eax, dword [edx + 0x1a4]
push eax
mov ecx, dword [ebp - 0x174]
push ecx
mov edx, dword [ebp - 0x178]
push edx
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.CreateDiskEx._9.__08X.__08X.__08X.__08X.__08X.
push 0x100273cc
push 1
call fcn.1000eed0
add esp, 0x20
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x180], eax
jmp 0x1001482c
mov eax, dword [ebp - 0x190]
sub eax, 1
mov ecx, dword [ebp - 0x18c]
sbb ecx, 0
mov dword [ebp - 0x190], eax
mov dword [ebp - 0x18c], ecx
mov edx, dword [ebp + 0x20]
and edx, 0x10
test edx, edx
je 0x10013dd3
mov eax, dword [ebp - 0x1a8]
mov ecx, dword [eax + 0x19c]
mov dword [ebp - 0x190], ecx
mov edx, dword [ebp - 0x1a8]
mov eax, dword [edx + 0x1a0]
mov dword [ebp - 0x18c], eax
push 0
push 0x100000
mov ecx, dword [ebp - 0x18c]
push ecx
mov edx, dword [ebp - 0x190]
push edx
call fcn.1001e9b0
mov dword [ebp - 0x190], eax
mov dword [ebp - 0x18c], edx
mov eax, dword [ebp - 0x190]
mov dword [ebp - 0x198], eax
mov ecx, dword [ebp - 0x18c]
mov dword [ebp - 0x194], ecx
mov edx, dword [ebp - 0x198]
add edx, 1
mov eax, dword [ebp - 0x194]
adc eax, 0
mov dword [ebp - 0x198], edx
mov dword [ebp - 0x194], eax
push 0x100000
mov ecx, dword [ebp - 0x174]
push ecx
call fcn.1001fe76
add esp, 8
mov dword [ebp - 0x174], eax
cmp dword [ebp - 0x174], 0
jne 0x10013db8
mov edx, dword [ebp - 0x1a8]
mov eax, dword [edx + 0x1a4]
push eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.CreateDiskEx._5.__08X.__08X.
push 0x100273cc
push 1
call fcn.1000eed0
add esp, 0x14
mov dword [ebp - 0x180], 8
jmp 0x10014827
push 0x100000
push 0
mov ecx, dword [ebp - 0x174]
push ecx
call fcn.1001ea50
add esp, 0xc
jmp 0x100140b8
lea edx, [ebp - 0x15c]
push edx
call fcn.1001d470
add esp, 4
push 0x10
mov eax, dword [ebp + 0x24]
push eax
lea ecx, [ebp - 0x15c]
push ecx
call fcn.1001d4f0
add esp, 0xc
call dword [sym.imp.USER32.dll_GetActiveWindow]
mov dword [ebp - 0x17c], eax
push 4
lea edx, [ebp - 0x17c]
push edx
lea eax, [ebp - 0x15c]
push eax
call fcn.1001d4f0
add esp, 0xc
call dword [sym.imp.USER32.dll_GetCapture]
mov dword [ebp - 0x17c], eax
push 4
lea ecx, [ebp - 0x17c]
push ecx
lea edx, [ebp - 0x15c]
push edx
call fcn.1001d4f0
add esp, 0xc
call dword [sym.imp.USER32.dll_GetClipboardOwner]
mov dword [ebp - 0x17c], eax
push 4
lea eax, [ebp - 0x17c]
push eax
lea ecx, [ebp - 0x15c]
push ecx
call fcn.1001d4f0
add esp, 0xc
call dword [sym.imp.USER32.dll_GetClipboardViewer]
mov dword [ebp - 0x17c], eax
push 4
lea edx, [ebp - 0x17c]
push edx
lea eax, [ebp - 0x15c]
push eax
call fcn.1001d4f0
add esp, 0xc
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov dword [ebp - 0x17c], eax
push 4
lea ecx, [ebp - 0x17c]
push ecx
lea edx, [ebp - 0x15c]
push edx
call fcn.1001d4f0
add esp, 0xc
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x17c], eax
push 4
lea eax, [ebp - 0x17c]
push eax
lea ecx, [ebp - 0x15c]
push ecx
call fcn.1001d4f0
add esp, 0xc
call dword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov dword [ebp - 0x17c], eax
push 4
lea edx, [ebp - 0x17c]
push edx
lea eax, [ebp - 0x15c]
push eax
call fcn.1001d4f0
add esp, 0xc
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov dword [ebp - 0x17c], eax
push 4
lea ecx, [ebp - 0x17c]
push ecx
lea edx, [ebp - 0x15c]
push edx
call fcn.1001d4f0
add esp, 0xc
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x17c], eax
push 4
lea eax, [ebp - 0x17c]
push eax
lea ecx, [ebp - 0x15c]
push ecx
call fcn.1001d4f0
add esp, 0xc
call dword [sym.imp.KERNEL32.dll_GetTickCount]
mov dword [ebp - 0x17c], eax
push 4
lea edx, [ebp - 0x17c]
push edx
lea eax, [ebp - 0x15c]
push eax
call fcn.1001d4f0
add esp, 0xc
call dword [sym.imp.USER32.dll_GetDesktopWindow]
mov dword [ebp - 0x17c], eax
push 4
lea ecx, [ebp - 0x17c]
push ecx
lea edx, [ebp - 0x15c]
push edx
call fcn.1001d4f0
add esp, 0xc
call dword [sym.imp.USER32.dll_GetFocus]
mov dword [ebp - 0x17c], eax
push 4
lea eax, [ebp - 0x17c]
push eax
lea ecx, [ebp - 0x15c]
push ecx
call fcn.1001d4f0
add esp, 0xc
call dword [sym.imp.USER32.dll_GetMessagePos]
mov dword [ebp - 0x17c], eax
push 4
lea edx, [ebp - 0x17c]
push edx
lea eax, [ebp - 0x15c]
push eax
call fcn.1001d4f0
add esp, 0xc
call dword [sym.imp.USER32.dll_GetMessageTime]
mov dword [ebp - 0x17c], eax
push 4
lea ecx, [ebp - 0x17c]
push ecx
lea edx, [ebp - 0x15c]
push edx
call fcn.1001d4f0
add esp, 0xc
call dword [sym.imp.USER32.dll_GetOpenClipboardWindow]
mov dword [ebp - 0x17c], eax
push 4
lea eax, [ebp - 0x17c]
push eax
lea ecx, [ebp - 0x15c]
push ecx
call fcn.1001d4f0
add esp, 0xc
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
mov dword [ebp - 0x17c], eax
push 4
lea edx, [ebp - 0x17c]
push edx
lea eax, [ebp - 0x15c]
push eax
call fcn.1001d4f0
add esp, 0xc
call dword [sym.imp.USER32.dll_GetProcessWindowStation]
mov dword [ebp - 0x17c], eax
push 4
lea ecx, [ebp - 0x17c]
push ecx
lea edx, [ebp - 0x15c]
push edx
call fcn.1001d4f0
add esp, 0xc
push 0xbf
call dword [sym.imp.USER32.dll_GetQueueStatus]
mov dword [ebp - 0x17c], eax
push 4
lea eax, [ebp - 0x17c]
push eax
lea ecx, [ebp - 0x15c]
push ecx
call fcn.1001d4f0
add esp, 0xc
lea edx, [ebp - 0x170]
push edx
lea eax, [ebp - 0x15c]
push eax
call fcn.1001d8d0
add esp, 8
mov ecx, dword [ebp - 0x170]
push ecx
call fcn.1001fe47
add esp, 4
lea edx, [ebp - 0x15c]
push edx
call fcn.1001d470
add esp, 4
mov eax, dword [ebp + 0x20]
and eax, 0x10
test eax, eax
je 0x10014397
mov ecx, dword [ebp - 0x178]
push ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
test eax, eax
jne 0x1001410a
mov edx, dword [ebp - 0x178]
push edx
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.CreateDiskEx._10.__08X.__08X.
push 0x100273cc
push 1
call fcn.1000eed0
add esp, 0x14
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x180], eax
jmp 0x10014822
push 0
push 0x80
push 3
push 0
push 1
push 0x40000000
mov eax, dword [ebp - 0x1a8]
add eax, 0x84
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov dword [ebp - 0x178], eax
cmp dword [ebp - 0x178], 0xffffffff
jne 0x10014176
mov ecx, dword [ebp - 0x1a8]
add ecx, 0x84
push ecx
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.CreateDiskEx._11.__08X.__s.
push 0x100273cc
push 1
call fcn.1000eed0
add esp, 0x14
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x180], eax
jmp 0x1001481d
push 0
push 0xa
mov edx, dword [ebp - 0x18c]
push edx
mov eax, dword [ebp - 0x190]
push eax
call fcn.100201b0
mov dword [ebp - 0x1c0], eax
mov dword [ebp - 0x1bc], edx
mov ecx, dword [ebp - 0x1c0]
or ecx, dword [ebp - 0x1bc]
test ecx, ecx
jne 0x100142b5
mov dword [ebp - 0x1b0], 0
mov dword [ebp - 0x1ac], 0
push 2
lea edx, [ebp - 0x1ac]
push edx
mov eax, dword [ebp - 0x1b0]
push eax
mov ecx, dword [ebp - 0x178]
push ecx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
cmp eax, 0xffffffff
jne 0x10014226
mov edx, dword [ebp - 0x1ac]
push edx
mov eax, dword [ebp - 0x1b0]
push eax
mov ecx, dword [ebp - 0x178]
push ecx
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.CreateDiskEx._12.__08X.__08X.__08X.__08X.
push 0x100273cc
push 1
call fcn.1000eed0
add esp, 0x1c
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x180], eax
xor eax, eax
jmp 0x10014859
mov dword [ebp - 0x17c], 0
push 0
lea edx, [ebp - 0x17c]
push edx
push 0x100000
mov eax, dword [ebp - 0x174]
push eax
mov ecx, dword [ebp - 0x178]
push ecx
call dword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x10014262
cmp dword [ebp - 0x17c], 0x100000
je 0x100142b0
mov edx, dword [ebp - 0x17c]
push edx
mov eax, dword [ebp - 0x1a8]
mov ecx, dword [eax + 0x1a4]
push ecx
mov edx, dword [ebp - 0x174]
push edx
mov eax, dword [ebp - 0x178]
push eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.CreateDiskEx._15.__08X.__08X.__08X.__08X.__08X.
push 0x100273cc
push 1
call fcn.1000eed0
add esp, 0x20
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x180], eax
jmp 0x10014818
jmp 0x10014392
mov ecx, dword [ebp - 0x198]
sub ecx, dword [ebp - 0x190]
mov edx, dword [ebp - 0x194]
sbb edx, dword [ebp - 0x18c]
push 0
push 0x100000
push edx
push ecx
call fcn.1001f180
mov dword [ebp - 0x1b0], eax
mov dword [ebp - 0x1ac], edx
push 0
lea eax, [ebp - 0x1ac]
push eax
mov ecx, dword [ebp - 0x1b0]
push ecx
mov edx, dword [ebp - 0x178]
push edx
call dword [sym.imp.KERNEL32.dll_SetFilePointer]
cmp eax, 0xffffffff
jne 0x1001434c
mov eax, dword [ebp - 0x1ac]
push eax
mov ecx, dword [ebp - 0x1b0]
push ecx
mov edx, dword [ebp - 0x178]
push edx
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.CreateDiskEx._12.__08X.__08X.__08X.__08X.
push 0x100273cc
push 1
call fcn.1000eed0
add esp, 0x1c
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x180], eax
xor eax, eax
jmp 0x10014859
mov eax, dword [ebp - 0x178]
push eax
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
test eax, eax
jne 0x10014392
mov ecx, dword [ebp - 0x178]
push ecx
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.CreateDiskEx._13.__08X.__08X.
push 0x100273cc
push 1
call fcn.1000eed0
add esp, 0x14
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x180], eax
xor eax, eax
jmp 0x10014859
jmp 0x100145b3
push 0
push 0x32
mov edx, dword [ebp - 0x18c]
push edx
mov eax, dword [ebp - 0x190]
push eax
call fcn.100201b0
mov dword [ebp - 0x1c8], eax
mov dword [ebp - 0x1c4], edx
mov ecx, dword [ebp - 0x1c8]
or ecx, dword [ebp - 0x1c4]
test ecx, ecx
jne 0x10014407
push 0x14
lea edx, [ebp - 0x170]
push edx
lea eax, [ebp - 0x15c]
push eax
call fcn.1001d4f0
add esp, 0xc
lea ecx, [ebp - 0x170]
push ecx
lea edx, [ebp - 0x15c]
push edx
call fcn.1001d8d0
add esp, 8
mov eax, dword [ebp - 0x170]
push eax
call fcn.1001fe47
add esp, 4
mov dword [ebp - 0x17c], 0
jmp 0x10014422
mov ecx, dword [ebp - 0x17c]
add ecx, 1
mov dword [ebp - 0x17c], ecx
mov edx, dword [ebp - 0x1a8]
mov eax, dword [ebp - 0x17c]
cmp eax, dword [edx + 0x1a4]
jae 0x10014459
call fcn.1001fe54
and eax, 0x800000ff
jns 0x10014449
dec eax
or eax, 0xffffff00
inc eax
mov ecx, dword [ebp - 0x174]
add ecx, dword [ebp - 0x17c]
mov byte [ecx], al
jmp 0x10014413
cmp dword [0x10038c5c], 0
je 0x10014497
mov edx, dword [ebp - 0x1a8]
mov eax, dword [edx + 0x1a4]
push eax
mov ecx, dword [ebp - 0x174]
push ecx
mov edx, dword [ebp - 0x1a0]
push edx
mov eax, dword [ebp - 0x1a4]
push eax
mov ecx, dword [0x100316e0]
push ecx
call fcn.1000bbe0
add esp, 0x14
test eax, eax
je 0x100144cd
cmp dword [0x10038c5c], 0
jne 0x10014519
mov edx, dword [ebp - 0x1a8]
mov eax, dword [edx + 0x1a4]
push eax
mov ecx, dword [ebp - 0x174]
push ecx
mov edx, dword [ebp - 0x19c]
push edx
mov eax, dword [0x100316e0]
push eax
call fcn.1000bae0
add esp, 0x10
test eax, eax
jne 0x10014519
mov ecx, dword [ebp - 0x1a8]
mov edx, dword [ecx + 0x1a4]
push edx
mov eax, dword [ebp - 0x174]
push eax
mov ecx, dword [ebp - 0x19c]
push ecx
mov edx, dword [0x100316e0]
push edx
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.CreateDiskEx._14.__08X.__08X.__08X.__08X.__08X.
push 0x100273cc
push 1
call fcn.1000eed0
add esp, 0x20
mov dword [ebp - 0x180], 0x1770
jmp 0x10014813
mov dword [ebp - 0x17c], 0
push 0
lea eax, [ebp - 0x17c]
push eax
mov ecx, dword [ebp - 0x1a8]
mov edx, dword [ecx + 0x1a4]
push edx
mov eax, dword [ebp - 0x174]
push eax
mov ecx, dword [ebp - 0x178]
push ecx
call dword [sym.imp.KERNEL32.dll_WriteFile]
test eax, eax
je 0x10014565
mov edx, dword [ebp - 0x1a8]
mov eax, dword [ebp - 0x17c]
cmp eax, dword [edx + 0x1a4]
je 0x100145b3
mov ecx, dword [ebp - 0x17c]
push ecx
mov edx, dword [ebp - 0x1a8]
mov eax, dword [edx + 0x1a4]
push eax
mov ecx, dword [ebp - 0x174]
push ecx
mov edx, dword [ebp - 0x178]
push edx
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.CreateDiskEx._15.__08X.__08X.__08X.__08X.__08X.
push 0x100273cc
push 1
call fcn.1000eed0
add esp, 0x20
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x180], eax
jmp 0x1001480e
cmp dword [ebp + 0x28], 0
je 0x10014661
mov eax, dword [ebp - 0x190]
sub eax, 1
mov ecx, dword [ebp - 0x18c]
sbb ecx, 0
push ecx
push eax
mov edx, dword [ebp - 0x194]
push edx
mov eax, dword [ebp - 0x198]
push eax
call fcn.10013580
add esp, 0x10
mov ecx, dword [ebp - 0x184]
sub ecx, eax
mov dword [ebp - 0x17c], ecx
cmp dword [ebp - 0x17c], 0
jle 0x10014661
mov edx, dword [ebp - 0x184]
sub edx, dword [ebp - 0x17c]
mov dword [ebp - 0x184], edx
mov eax, dword [ebp - 0x17c]
mov ecx, dword [ebp - 0x17c]
sub ecx, 1
mov dword [ebp - 0x17c], ecx
test eax, eax
je 0x10014661
push 1
call dword [ebp + 0x28]
add esp, 4
test eax, eax
jne 0x1001465f
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push str.CreateDiskEx._16.__08X.
push 0x100273cc
push 1
call fcn.1000eed0
add esp, 0x10
mov dword [ebp - 0x180], 0x3e3
jmp 0x10014809
jmp 0x10014610
mov edx, dword [ebp - 0x190]
sub edx, 1
mov eax, dword [ebp - 0x18c]
sbb eax, 0
mov dword [ebp - 0x190], edx
mov dword [ebp - 0x18c], eax
mov ecx, dword [ebp - 0x190]
or ecx, dword [ebp - 0x18c]
test ecx, ecx
jne 0x100140b8
mov edx, dword [ebp - 0x1a8]
mov eax, dword [edx + 0x1a8]
or ah, 2
mov ecx, dword [ebp - 0x1a8]
mov dword [ecx + 0x1a8], eax
mov edx, dword [ebp - 0x1a8]
mov eax, dword [edx + 0x1a8]
or al, 0x40
mov ecx, dword [ebp - 0x1a8]
mov dword [ecx + 0x1a8], eax
mov edx, dword [ebp - 0x1a8]
mov eax, dword [edx + 0x1a8]
or al, 0x80
mov ecx, dword [ebp - 0x1a8]
mov dword [ecx + 0x1a8], eax
mov edx, dword [ebp - 0x1a8]
mov dword [edx + 0x1a4], 0x200
mov dword [ebp - 0x188], 1
jmp 0x10014804
cmp dword [ebp + 0x28], 0
je 0x1001470f
push 0
call dword [ebp + 0x28]
add esp, 4
mov dword [ebp - 0x188], 0
cmp dword [ebp - 0x19c], 0
jne 0x10014732
mov eax, dword [ebp - 0x1a4]
or eax, dword [ebp - 0x1a0]
test eax, eax
je 0x1001476f
cmp dword [0x10038c5c], 0
je 0x10014759
mov ecx, dword [ebp - 0x1a0]
push ecx
mov edx, dword [ebp - 0x1a4]
push edx
mov eax, dword [0x100316e0]
push eax
call fcn.1000b9e0
add esp, 0xc
jmp 0x1001476f
mov ecx, dword [ebp - 0x19c]
push ecx
mov edx, dword [0x100316e0]
push edx
call fcn.1000b8f0
add esp, 8
cmp dword [ebp - 0x178], 0xffffffff
je 0x10014785
mov eax, dword [ebp - 0x178]
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
cmp dword [ebp - 0x174], 0
je 0x1001479d
mov ecx, dword [ebp - 0x174]
push ecx
call fcn.1001ee98
add esp, 4
cmp dword [ebp - 0x188], 0
jne 0x100147da
cmp dword [ebp - 0x1a8], 0
je 0x100147d8
push 0
mov edx, dword [ebp - 0x1a8]
add edx, 0x84
push edx
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
mov eax, dword [ebp - 0x1a8]
add eax, 0x84
push eax
call fcn.1001ea18
add esp, 4
jmp 0x100147ef
push 0x27
mov ecx, dword [ebp - 0x1a8]
add ecx, 0x84
push ecx
call dword [sym.imp.KERNEL32.dll_SetFileAttributesA]
mov edx, dword [ebp - 0x180]
push edx
call dword [sym.imp.KERNEL32.dll_SetLastError]
mov eax, dword [ebp - 0x188]
jmp 0x10014859
jmp 0x10014719
jmp 0x10014701
jmp 0x10014701
jmp 0x10014701
jmp 0x10014701
jmp 0x10014701
jmp 0x10014701
jmp 0x10014701
jmp 0x10014701
jmp 0x10014701
jmp 0x10014701
jmp 0x10014701
jmp 0x10014701
jmp 0x10014701
jmp 0x10014701
jmp 0x10014701
jmp 0x10014701
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret 0x24