Function at 0x1001d56c
Capabilities:
Get disk information
Resolve function by parsing pe exports

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x260
mov eax, dword [0x100c51b8]
xor eax, esp
mov dword [esp + 0x25c], eax
lea eax, [esp + 0x244]
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x30]
lea ebx, [esp + 0x6e]
mov byte [ebx - 2], 1
mov byte [ebx - 1], 0xf
mov byte [ebx], 0x42
mov al, 0x4b
mov byte [ebx + 1], al
mov cl, 0x40
mov byte [ebx + 2], cl
mov byte [ebx + 3], cl
mov byte [ebx + 4], 0x50
mov cl, 0x5b
mov byte [ebx + 5], cl
mov byte [ebx + 6], al
mov byte [ebx + 7], cl
mov byte [ebx + 8], 0x6c
mov byte [ebx + 9], 0x68
mov al, 0x69
mov byte [ebx + 0xa], al
mov byte [ebx + 0xb], 0x79
mov byte [ebx + 0xc], 0x73
mov byte [ebx + 0xd], 0x6a
mov byte [ebx + 0xe], 0x5c
mov cl, 0x6f
mov byte [ebx + 0xf], cl
mov byte [ebx + 0x10], cl
mov byte [ebx + 0x11], 0x76
mov byte [ebx + 0x12], 0x71
mov cl, 0x6b
mov byte [ebx + 0x13], cl
mov byte [ebx + 0x14], al
mov al, 0x55
mov byte [ebx + 0x15], al
mov byte [ebx + 0x16], 0x62
mov byte [ebx + 0x17], 0x7c
mov byte [ebx + 0x18], al
mov byte [ebx + 0x19], 0x63
mov byte [ebx + 0x1a], 0x48
mov byte [ebx + 0x1b], 0x6d
mov byte [ebx + 0x1c], cl
mov byte [ebx + 0x1d], cl
mov byte [ebx + 0x1e], 0x37
lea eax, [esp + 0x8d]
lea ecx, [esp + 0x8f]
mov dword [esp + 0x22c], ecx
mov edx, 0xfa1d3e3
mov ecx, 0x986dbd7f
cmp edx, 0x986dbd7f
je 0x1001d65d
cmp edx, 0xfa1d3e3
jne 0x1001d638
mov byte [eax], 0
inc eax
cmp eax, dword [esp + 0x22c]
mov edx, 0xfa1d3e3
cmove edx, ecx
jmp 0x1001d638
lea eax, [esp + 0x6c]
mov dword [esp + 0x214], eax
mov eax, dword [esp + 0x214]
mov al, byte [eax]
mov byte [esp + 0x1e4], al
mov edx, 0x400e09d2
lea ebp, [esp + 0x1fc]
cmp edx, 0x400e09d1
jg 0x1001d6f9
cmp edx, 0x8a98f23d
je 0x1001d733
cmp edx, 0x996bb5ff
je 0x1001d756
cmp edx, 0xe8f26211
jne 0x1001d684
mov edx, dword [esp + 0x1fc]
mov al, byte [esp + edx + 0x6e]
mov ecx, ebp
mov ebp, dword [esp + 0x1fc]
mov dl, byte [esp + 0x6d]
movzx edi, dl
lea esi, [ebp + 1]
mov edx, 0xfe
sub edx, ebp
mov ebp, ecx
and edx, edi
not edi
and edi, esi
or edx, edi
xor dl, al
xor dl, 0x1f
mov eax, dword [esp + 0x1fc]
mov byte [esp + eax + 0x6e], dl
inc dword [esp + 0x1fc]
mov edx, 0x5b69db0b
jmp 0x1001d684
cmp edx, 0x7f428b5c
je 0x1001d79d
cmp edx, 0x5b69db0b
je 0x1001d781
cmp edx, 0x400e09d2
jne 0x1001d684
test byte [esp + 0x1e4], 1
mov edx, 0x8a98f23d
mov eax, 0x7f428b5c
cmove edx, eax
jmp 0x1001d684
mov dword [esp + 0x22c], ebp
mov edx, dword [esp + 0x22c]
mov dword [esp + 0x1fc], 0
mov edx, 0x5b69db0b
jmp 0x1001d684
mov edx, dword [esp + 0x22c]
mov byte [esp + 0x8d], 0
mov byte [esp + 0x8e], 0
mov edx, dword [esp + 0x214]
mov byte [edx], 0
mov edx, 0x7f428b5c
jmp 0x1001d684
mov edx, dword [esp + 0x1fc]
cmp edx, 0x1f
mov edx, 0x996bb5ff
mov eax, 0xe8f26211
cmovb edx, eax
jmp 0x1001d684
xor eax, eax
lea esi, [esp + 0x244]
mov dword [esi], eax
mov dword [esi + 0x10], eax
mov dword [esi + 0x14], 0xf
mov byte [esi], 0
push ebx
call fcn.1009ee80
add esp, 4
mov ecx, esi
push eax
push ebx
call fcn.10007b00
lea eax, [esp + 0x22c]
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0x34]
lea eax, [esp + 0x87]
mov byte [eax - 0x1b], 1
mov byte [eax - 0x1a], 0xf
mov cl, 0x44
mov byte [eax - 0x19], cl
mov dl, 0x5b
mov byte [eax - 0x18], dl
mov byte [eax - 0x17], 0x53
mov byte [eax - 0x16], 0x46
mov byte [eax - 0x15], cl
mov ch, 0x51
mov byte [eax - 0x14], ch
mov dh, 0x43
mov byte [eax - 0x13], dh
mov byte [eax - 0x12], dl
mov byte [eax - 0x11], dh
mov byte [eax - 0x10], 0x59
mov byte [eax - 0xf], cl
mov cl, 0x55
mov byte [eax - 0xe], cl
mov byte [eax - 0xd], 0x54
mov byte [eax - 0xc], dl
mov byte [eax - 0xb], cl
mov byte [eax - 0xa], 0x4f
mov byte [eax - 9], 0x42
mov byte [eax - 8], 0x4a
mov byte [eax - 7], ch
mov byte [eax - 6], ch
mov byte [eax - 5], 0x57
mov byte [eax - 4], 0x41
mov byte [eax - 3], cl
mov byte [eax - 2], dl
mov byte [eax - 1], 0x5c
lea ecx, [esp + 0x89]
mov dword [esp + 0x214], ecx
mov edx, 0xc35a1bd
mov ecx, 0x91c3b17
cmp edx, 0x91c3b17
je 0x1001d881
cmp edx, 0xc35a1bd
jne 0x1001d85c
mov byte [eax], 0
inc eax
cmp eax, dword [esp + 0x214]
mov edx, 0xc35a1bd
cmove edx, ecx
jmp 0x1001d85c
lea eax, [esp + 0x6c]
mov dword [esp + 0x1fc], eax
mov eax, dword [esp + 0x1fc]
mov al, byte [eax]
mov byte [esp + 0x1cc], al
mov edx, 0xb3495898
mov esi, 0xfc739729
mov ecx, 0x314eacc3
cmp edx, 0xa321daa
jg 0x1001d8d0
cmp edx, 0xb3495898
je 0x1001d914
cmp edx, 0xf5021cb4
je 0x1001d926
cmp edx, 0xfc739729
jne 0x1001d8ab
jmp 0x1001d9a2
cmp edx, 0xa321dab
je 0x1001d93d
cmp edx, 0x314eacc3
je 0x1001d967
cmp edx, 0x62a216bf
jne 0x1001d8ab
mov edx, dword [esp + 0x214]
mov byte [esp + 0x87], 0
mov byte [esp + 0x88], 0
mov edx, dword [esp + 0x1fc]
mov byte [edx], 0
mov edx, 0xfc739729
jmp 0x1001d8ab
test byte [esp + 0x1cc], 1
mov edx, 0xa321dab
cmove edx, esi
jmp 0x1001d8ab
mov edx, dword [esp + 0x1e4]
cmp edx, 0x19
mov edx, 0x62a216bf
cmovb edx, ecx
jmp 0x1001d8ab
lea eax, [esp + 0x1e4]
mov dword [esp + 0x214], eax
mov edx, dword [esp + 0x214]
mov dword [esp + 0x1e4], 0
mov edx, 0xf5021cb4
jmp 0x1001d8ab
mov edx, dword [esp + 0x1e4]
mov al, byte [esp + edx + 0x6e]
mov edx, dword [esp + 0x1e4]
mov ah, byte [esp + 0x6d]
inc dl
xor dl, ah
xor dl, al
xor dl, 0x19
mov eax, dword [esp + 0x1e4]
mov byte [esp + eax + 0x6e], dl
inc dword [esp + 0x1e4]
mov edx, 0xf5021cb4
jmp 0x1001d8ab
xor eax, eax
lea esi, [esp + 0x22c]
mov dword [esi], eax
mov dword [esi + 0x10], eax
mov dword [esi + 0x14], 0xf
mov byte [esi], 0
push ebx
call fcn.1009ee80
add esp, 4
mov ecx, esi
push eax
push ebx
call fcn.10007b00
lea eax, [esp + 0x214]
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0x38]
lea eax, [esp + 0x86]
mov byte [eax - 0x1a], 1
mov byte [eax - 0x19], 0xf
mov byte [eax - 0x18], 0x45
mov cl, 0x4c
mov byte [eax - 0x17], cl
mov dl, 0x47
mov byte [eax - 0x16], dl
mov byte [eax - 0x15], dl
mov byte [eax - 0x14], 0x57
mov dl, 0x5c
mov byte [eax - 0x13], dl
mov byte [eax - 0x12], cl
mov byte [eax - 0x11], dl
mov byte [eax - 0x10], 0x6b
mov byte [eax - 0xf], 0x6f
mov cl, 0x6e
mov byte [eax - 0xe], cl
mov byte [eax - 0xd], 0x7e
mov byte [eax - 0xc], 0x74
mov byte [eax - 0xb], 0x6d
mov byte [eax - 0xa], 0x5b
mov dl, 0x68
mov byte [eax - 9], dl
mov byte [eax - 8], dl
mov byte [eax - 7], 0x71
mov byte [eax - 6], 0x76
mov byte [eax - 5], 0x6c
mov byte [eax - 4], cl
mov byte [eax - 3], 0x52
mov byte [eax - 2], 0x65
mov byte [eax - 1], 0x7b
lea ecx, [esp + 0x88]
mov dword [esp + 0x1fc], ecx
mov edx, 0xd4b1d3b5
mov ecx, 0x78095cf3
cmp edx, 0x78095cf3
je 0x1001da87
cmp edx, 0xd4b1d3b5
jne 0x1001da62
mov byte [eax], 0
inc eax
cmp eax, dword [esp + 0x1fc]
mov edx, 0xd4b1d3b5
cmove edx, ecx
jmp 0x1001da62
lea eax, [esp + 0x6c]
mov dword [esp + 0x1e4], eax
mov eax, dword [esp + 0x1e4]
mov al, byte [eax]
mov byte [esp + 0x1b4], al
mov edx, 0x7c51e096
lea esi, [esp + 0x1cc]
mov edi, 0xd8dcbe92
mov ecx, 0xac8a0ad
cmp edx, 0xe01327e7
jg 0x1001db14
cmp edx, 0x99d2ee54
je 0x1001db45
cmp edx, 0xbef4be7e
je 0x1001db68
cmp edx, 0xd8dcbe92
jne 0x1001dab8
mov edx, dword [esp + 0x1cc]
mov al, byte [esp + edx + 0x6e]
mov edx, dword [esp + 0x1cc]
mov ah, byte [esp + 0x6d]
inc dl
xor dl, ah
xor dl, al
xor dl, 0x18
mov eax, dword [esp + 0x1cc]
mov byte [esp + eax + 0x6e], dl
inc dword [esp + 0x1cc]
mov edx, 0xbef4be7e
jmp 0x1001dab8
cmp edx, 0xe01327e8
je 0x1001db7f
cmp edx, 0xac8a0ad
je 0x1001dbaa
cmp edx, 0x7c51e096
jne 0x1001dab8
test byte [esp + 0x1b4], 1
mov edx, 0x99d2ee54
cmove edx, ecx
jmp 0x1001dab8
mov dword [esp + 0x1fc], esi
mov edx, dword [esp + 0x1fc]
mov dword [esp + 0x1cc], 0
mov edx, 0xbef4be7e
jmp 0x1001dab8
mov edx, dword [esp + 0x1cc]
cmp edx, 0x18
mov edx, 0xe01327e8
cmovb edx, edi
jmp 0x1001dab8
mov edx, dword [esp + 0x1fc]
mov byte [esp + 0x86], 0
mov byte [esp + 0x87], 0
mov edx, dword [esp + 0x1e4]
mov byte [edx], 0
mov edx, 0xac8a0ad
jmp 0x1001dab8
xor eax, eax
lea esi, [esp + 0x214]
mov dword [esi], eax
mov dword [esi + 0x10], eax
mov dword [esi + 0x14], 0xf
mov byte [esi], 0
push ebx
call fcn.1009ee80
add esp, 4
mov ecx, esi
push eax
push ebx
call fcn.10007b00
mov dword [esp + 0x3c], ebp
mov eax, dword [esp + 0x3c]
lea eax, [esp + 0x78]
mov byte [eax - 0xc], 1
mov byte [eax - 0xb], 0xf
mov byte [eax - 0xa], 0x57
mov byte [eax - 9], 0x5e
mov cl, 0x55
mov byte [eax - 8], cl
mov byte [eax - 7], cl
mov byte [eax - 6], 0x45
mov byte [eax - 5], 0x4e
mov byte [eax - 4], 0x6c
mov byte [eax - 3], 0x5b
mov byte [eax - 2], 0x63
mov byte [eax - 1], 0x7c
lea ecx, [esp + 0x7a]
mov dword [esp + 0x1e4], ecx
mov edx, 0xa27cde09
mov ecx, 0x6802f8c5
cmp edx, 0x6802f8c5
je 0x1001dc4a
cmp edx, 0xa27cde09
jne 0x1001dc25
mov byte [eax], 0
inc eax
cmp eax, dword [esp + 0x1e4]
mov edx, 0xa27cde09
cmove edx, ecx
jmp 0x1001dc25
lea eax, [esp + 0x6c]
mov dword [esp + 0x1cc], eax
mov eax, dword [esp + 0x1cc]
mov al, byte [eax]
mov byte [esp + 0x19c], al
mov edx, 0x74883158
mov ecx, 0x8ab6da14
cmp edx, 0x34182f35
jg 0x1001dcb5
cmp edx, 0x8ab6da14
je 0x1001dd75
cmp edx, 0xcba199d8
je 0x1001dce3
cmp edx, 0xee10452a
jne 0x1001dc6f
mov edx, dword [esp + 0x1e4]
mov byte [esp + 0x78], 0
mov byte [esp + 0x79], 0
mov edx, dword [esp + 0x1cc]
mov byte [edx], 0
mov edx, 0x8ab6da14
jmp 0x1001dc6f
cmp edx, 0x34182f36
je 0x1001dd0d
cmp edx, 0x41efb541
je 0x1001dd59
cmp edx, 0x74883158
jne 0x1001dc6f
test byte [esp + 0x19c], 1
mov edx, 0xcba199d8
cmove edx, ecx
jmp 0x1001dc6f
lea eax, [esp + 0x1b4]
mov dword [esp + 0x1e4], eax
mov edx, dword [esp + 0x1e4]
mov dword [esp + 0x1b4], 0
mov edx, 0x41efb541
jmp 0x1001dc6f
mov edx, dword [esp + 0x1b4]
mov al, byte [esp + edx + 0x6e]
mov esi, dword [esp + 0x1b4]
mov dl, byte [esp + 0x6d]
movzx edi, dl
lea ebp, [esi + 1]
mov edx, 0xfe
sub edx, esi
and edx, edi
not edi
and edi, ebp
or edx, edi
xor dl, al
xor dl, 0xa
mov eax, dword [esp + 0x1b4]
mov byte [esp + eax + 0x6e], dl
inc dword [esp + 0x1b4]
mov edx, 0x41efb541
jmp 0x1001dc6f
mov edx, dword [esp + 0x1b4]
cmp edx, 0xa
mov edx, 0xee10452a
mov eax, 0x34182f36
cmovb edx, eax
jmp 0x1001dc6f
xor eax, eax
lea esi, [esp + 0x1fc]
mov dword [esi], eax
mov dword [esi + 0x10], eax
mov dword [esi + 0x14], 0xf
mov byte [esi], 0
push ebx
call fcn.1009ee80
add esp, 4
mov ecx, esi
push eax
push ebx
call fcn.10007b00
lea eax, [esp + 0x1e4]
mov dword [esp + 0x40], eax
mov eax, dword [esp + 0x40]
lea eax, [esp + 0x73]
mov byte [eax - 7], 1
mov byte [eax - 6], 0xf
mov byte [eax - 5], 0x4a
mov byte [eax - 4], 0x6c
mov byte [eax - 3], 0x64
mov byte [eax - 2], 0x67
mov byte [eax - 1], 0x61
lea ecx, [esp + 0x75]
mov dword [esp + 0x1cc], ecx
mov edx, 0x985bcf2f
mov ecx, 0xbfff234c
cmp edx, 0xbfff234c
je 0x1001de08
cmp edx, 0x985bcf2f
jne 0x1001dde3
mov byte [eax], 0
inc eax
cmp eax, dword [esp + 0x1cc]
mov edx, 0x985bcf2f
cmove edx, ecx
jmp 0x1001dde3
lea eax, [esp + 0x6c]
mov dword [esp + 0x1b4], eax
mov eax, dword [esp + 0x1b4]
mov al, byte [eax]
mov byte [esp + 0x184], al
mov edx, 0x5e90eda4
mov esi, 0x224419a4
mov ecx, 0x921f82da
cmp edx, 0x54771bfb
jg 0x1001de8e
cmp edx, 0x921f82da
je 0x1001df21
cmp edx, 0xaa079460
je 0x1001debb
cmp edx, 0x224419a4
jne 0x1001de32
mov edx, dword [esp + 0x19c]
mov al, byte [esp + edx + 0x6e]
mov edx, dword [esp + 0x19c]
mov ah, byte [esp + 0x6d]
inc dl
xor dl, ah
xor dl, al
xor dl, 5
mov eax, dword [esp + 0x19c]
mov byte [esp + eax + 0x6e], dl
inc dword [esp + 0x19c]
mov edx, 0x54771bfc
jmp 0x1001de32
cmp edx, 0x54771bfc
je 0x1001dee5
cmp edx, 0x5908957e
je 0x1001defc
cmp edx, 0x5e90eda4
jne 0x1001de32
test byte [esp + 0x184], 1
mov edx, 0xaa079460
cmove edx, ecx
jmp 0x1001de32
lea eax, [esp + 0x19c]
mov dword [esp + 0x1cc], eax
mov edx, dword [esp + 0x1cc]
mov dword [esp + 0x19c], 0
mov edx, 0x54771bfc
jmp 0x1001de32
mov edx, dword [esp + 0x19c]
cmp edx, 5
mov edx, 0x5908957e
cmovb edx, esi
jmp 0x1001de32
mov edx, dword [esp + 0x1cc]
mov byte [esp + 0x73], 0
mov byte [esp + 0x74], 0
mov edx, dword [esp + 0x1b4]
mov byte [edx], 0
mov edx, 0x921f82da
jmp 0x1001de32
xor eax, eax
lea esi, [esp + 0x1e4]
mov dword [esi], eax
mov dword [esi + 0x10], eax
mov dword [esi + 0x14], 0xf
mov byte [esi], 0
push ebx
call fcn.1009ee80
add esp, 4
mov ecx, esi
push eax
push ebx
call fcn.10007b00
lea eax, [esp + 0x1cc]
mov dword [esp + 0x44], eax
mov eax, dword [esp + 0x44]
lea eax, [esp + 0x78]
mov byte [eax - 0xc], 1
mov byte [eax - 0xb], 0xf
mov byte [eax - 0xa], 0x57
mov cl, 0x72
mov byte [eax - 9], cl
mov byte [eax - 8], 0x76
mov byte [eax - 7], 0x64
mov byte [eax - 6], cl
mov byte [eax - 5], 0x4f
mov byte [eax - 4], 0x6d
mov byte [eax - 3], 0x6a
mov byte [eax - 2], 0x65
mov byte [eax - 1], 0x61
lea ecx, [esp + 0x7a]
mov dword [esp + 0x1b4], ecx
mov edx, 0xa27cde09
mov ecx, 0x6802f8c5
cmp edx, 0x6802f8c5
je 0x1001dfc8
cmp edx, 0xa27cde09
jne 0x1001dfa3
mov byte [eax], 0
inc eax
cmp eax, dword [esp + 0x1b4]
mov edx, 0xa27cde09
cmove edx, ecx
jmp 0x1001dfa3
lea eax, [esp + 0x6c]
mov dword [esp + 0x19c], eax
mov eax, dword [esp + 0x19c]
mov al, byte [eax]
mov byte [esp + 0x68], al
mov edx, 0x74883158
mov ecx, 0x8ab6da14
cmp edx, 0x34182f35
jg 0x1001e030
cmp edx, 0x8ab6da14
je 0x1001e0ed
cmp edx, 0xcba199d8
je 0x1001e05b
cmp edx, 0xee10452a
jne 0x1001dfea
mov edx, dword [esp + 0x1b4]
mov byte [esp + 0x78], 0
mov byte [esp + 0x79], 0
mov edx, dword [esp + 0x19c]
mov byte [edx], 0
mov edx, 0x8ab6da14
jmp 0x1001dfea
cmp edx, 0x34182f36
je 0x1001e085
cmp edx, 0x41efb541
je 0x1001e0d1
cmp edx, 0x74883158
jne 0x1001dfea
test byte [esp + 0x68], 1
mov edx, 0xcba199d8
cmove edx, ecx
jmp 0x1001dfea
lea eax, [esp + 0x184]
mov dword [esp + 0x1b4], eax
mov edx, dword [esp + 0x1b4]
mov dword [esp + 0x184], 0
mov edx, 0x41efb541
jmp 0x1001dfea
mov edx, dword [esp + 0x184]
mov al, byte [esp + edx + 0x6e]
mov edi, dword [esp + 0x184]
mov dl, byte [esp + 0x6d]
movzx ebp, dl
lea esi, [edi + 1]
mov edx, 0xfe
sub edx, edi
and edx, ebp
not ebp
and ebp, esi
or edx, ebp
xor dl, al
xor dl, 0xa
mov eax, dword [esp + 0x184]
mov byte [esp + eax + 0x6e], dl
inc dword [esp + 0x184]
mov edx, 0x41efb541
jmp 0x1001dfea
mov edx, dword [esp + 0x184]
cmp edx, 0xa
mov edx, 0xee10452a
mov eax, 0x34182f36
cmovb edx, eax
jmp 0x1001dfea
xor eax, eax
lea esi, [esp + 0x1cc]
mov dword [esi], eax
mov dword [esi + 0x10], eax
mov dword [esi + 0x14], 0xf
mov byte [esi], 0
push ebx
call fcn.1009ee80
add esp, 4
mov ecx, esi
push eax
push ebx
call fcn.10007b00
lea eax, [esp + 0x1b4]
mov dword [esp + 0x48], eax
mov eax, dword [esp + 0x48]
lea eax, [esp + 0x78]
mov byte [eax - 0xc], 1
mov byte [eax - 0xb], 0xf
mov byte [eax - 0xa], 0x77
mov cl, 0x72
mov byte [eax - 9], cl
mov byte [eax - 8], 0x76
mov byte [eax - 7], 0x64
mov byte [eax - 6], cl
mov byte [eax - 5], 0x62
mov byte [eax - 4], 0x66
mov byte [eax - 3], 0x60
mov byte [eax - 2], 0x65
mov byte [eax - 1], 0x61
lea ecx, [esp + 0x7a]
mov dword [esp + 0x19c], ecx
mov edx, 0xa27cde09
mov ecx, 0x6802f8c5
cmp edx, 0x6802f8c5
je 0x1001e194
cmp edx, 0xa27cde09
jne 0x1001e16f
mov byte [eax], 0
inc eax
cmp eax, dword [esp + 0x19c]
mov edx, 0xa27cde09
cmove edx, ecx
jmp 0x1001e16f
lea eax, [esp + 0x6c]
mov dword [esp + 0x184], eax
mov eax, dword [esp + 0x184]
mov al, byte [eax]
mov byte [esp + 0x64], al
mov esi, 0x74883158
mov edx, 0x8ab6da14
cmp esi, 0x34182f35
jg 0x1001e1fc
cmp esi, 0x8ab6da14
je 0x1001e29f
cmp esi, 0xcba199d8
je 0x1001e223
cmp esi, 0xee10452a
jne 0x1001e1b6
mov eax, dword [esp + 0x19c]
mov byte [esp + 0x78], 0
mov byte [esp + 0x79], 0
mov eax, dword [esp + 0x184]
mov byte [eax], 0
mov esi, 0x8ab6da14
jmp 0x1001e1b6
cmp esi, 0x34182f36
je 0x1001e247
cmp esi, 0x41efb541
je 0x1001e286
cmp esi, 0x74883158
jne 0x1001e1b6
test byte [esp + 0x64], 1
mov esi, 0xcba199d8
cmove esi, edx
jmp 0x1001e1b6
lea eax, [esp + 0x68]
mov dword [esp + 0x19c], eax
mov eax, dword [esp + 0x19c]
mov dword [esp + 0x68], 0
mov esi, 0x41efb541
jmp 0x1001e1b6
mov eax, dword [esp + 0x68]
mov cl, byte [esp + eax + 0x6e]
mov esi, dword [esp + 0x68]
mov al, byte [esp + 0x6d]
movzx ebp, al
lea edi, [esi + 1]
mov eax, 0xfe
sub eax, esi
and eax, ebp
not ebp
and ebp, edi
or eax, ebp
xor al, cl
xor al, 0xa
mov ecx, dword [esp + 0x68]
mov byte [esp + ecx + 0x6e], al
inc dword [esp + 0x68]
mov esi, 0x41efb541
jmp 0x1001e1b6
mov eax, dword [esp + 0x68]
cmp eax, 0xa
mov esi, 0xee10452a
mov eax, 0x34182f36
cmovb esi, eax
jmp 0x1001e1b6
xor eax, eax
lea esi, [esp + 0x1b4]
mov dword [esi], eax
mov dword [esi + 0x10], eax
mov dword [esi + 0x14], 0xf
mov byte [esi], 0
push ebx
call fcn.1009ee80
add esp, 4
mov ecx, esi
push eax
push ebx
call fcn.10007b00
lea eax, [esp + 0x19c]
mov dword [esp + 0x4c], eax
mov eax, dword [esp + 0x4c]
lea eax, [esp + 0x78]
mov byte [eax - 0xc], 1
mov byte [eax - 0xb], 0xf
mov byte [eax - 0xa], 0x57
mov byte [eax - 9], 0x72
mov byte [eax - 8], 0x76
mov cl, 0x71
mov byte [eax - 7], cl
mov byte [eax - 6], 0x65
mov byte [eax - 5], cl
mov byte [eax - 4], 0x4f
mov byte [eax - 3], 0x62
mov byte [eax - 2], 0x68
mov byte [eax - 1], 0x6a
lea ecx, [esp + 0x7a]
mov dword [esp + 0x184], ecx
mov edx, 0xa27cde09
mov ecx, 0x6802f8c5
cmp edx, 0x6802f8c5
je 0x1001e346
cmp edx, 0xa27cde09
jne 0x1001e321
mov byte [eax], 0
inc eax
cmp eax, dword [esp + 0x184]
mov edx, 0xa27cde09
cmove edx, ecx
jmp 0x1001e321
lea eax, [esp + 0x6c]
mov dword [esp + 0x68], eax
mov eax, dword [esp + 0x68]
mov al, byte [eax]
mov byte [esp + 0x60], al
mov esi, 0x74883158
mov edx, 0x8ab6da14
cmp esi, 0x34182f35
jg 0x1001e3a5
cmp esi, 0x8ab6da14
je 0x1001e448
cmp esi, 0xcba199d8
je 0x1001e3cc
cmp esi, 0xee10452a
jne 0x1001e362
mov eax, dword [esp + 0x184]
mov byte [esp + 0x78], 0
mov byte [esp + 0x79], 0
mov eax, dword [esp + 0x68]
mov byte [eax], 0
mov esi, 0x8ab6da14
jmp 0x1001e362
cmp esi, 0x34182f36
je 0x1001e3f0
cmp esi, 0x41efb541
je 0x1001e42f
cmp esi, 0x74883158
jne 0x1001e362
test byte [esp + 0x60], 1
mov esi, 0xcba199d8
cmove esi, edx
jmp 0x1001e362
lea eax, [esp + 0x64]
mov dword [esp + 0x184], eax
mov eax, dword [esp + 0x184]
mov dword [esp + 0x64], 0
mov esi, 0x41efb541
jmp 0x1001e362
mov eax, dword [esp + 0x64]
mov cl, byte [esp + eax + 0x6e]
mov esi, dword [esp + 0x64]
mov al, byte [esp + 0x6d]
movzx edi, al
lea ebp, [esi + 1]
mov eax, 0xfe
sub eax, esi
and eax, edi
not edi
and edi, ebp
or eax, edi
xor al, cl
xor al, 0xa
mov ecx, dword [esp + 0x64]
mov byte [esp + ecx + 0x6e], al
inc dword [esp + 0x64]
mov esi, 0x41efb541
jmp 0x1001e362
mov eax, dword [esp + 0x64]
cmp eax, 0xa
mov esi, 0xee10452a
mov eax, 0x34182f36
cmovb esi, eax
jmp 0x1001e362
xor eax, eax
lea esi, [esp + 0x19c]
mov dword [esi], eax
mov dword [esi + 0x10], eax
mov dword [esi + 0x14], 0xf
mov byte [esi], 0
push ebx
call fcn.1009ee80
add esp, 4
mov ecx, esi
push eax
push ebx
call fcn.10007b00
lea eax, [esp + 0x184]
mov dword [esp + 0x50], eax
mov eax, dword [esp + 0x50]
lea eax, [esp + 0x76]
mov byte [eax - 0xa], 1
mov byte [eax - 9], 0xf
mov byte [eax - 8], 0x62
mov byte [eax - 7], 0x6c
mov byte [eax - 6], 0x77
mov byte [eax - 5], 0x68
mov byte [eax - 4], 0x6e
mov byte [eax - 3], 0x64
mov byte [eax - 2], 0x73
mov byte [eax - 1], 0x7c
lea ecx, [esp + 0x78]
mov dword [esp + 0x68], ecx
mov edx, 0xd17954dc
mov ecx, 0x782f955c
cmp edx, 0x782f955c
je 0x1001e4e1
cmp edx, 0xd17954dc
jne 0x1001e4bf
mov byte [eax], 0
inc eax
cmp eax, dword [esp + 0x68]
mov edx, 0xd17954dc
cmove edx, ecx
jmp 0x1001e4bf
lea eax, [esp + 0x6c]
mov dword [esp + 0x64], eax
mov eax, dword [esp + 0x64]
mov al, byte [eax]
mov byte [esp + 0x18], al
mov esi, 0xb0b058ef
lea edi, [esp + 0x60]
mov ebp, 0x1123f6ab
mov edx, 0x77fec8c5
cmp esi, 0x1123f6aa
jg 0x1001e546
cmp esi, 0xae2187c1
je 0x1001e58c
cmp esi, 0xb0b058ef
je 0x1001e5a6
cmp esi, 0xd4a3f2d2
jne 0x1001e506
mov eax, dword [esp + 0x68]
mov byte [esp + 0x76], 0
mov byte [esp + 0x77], 0
mov eax, dword [esp + 0x64]
mov byte [eax], 0
mov esi, 0x1123f6ab
jmp 0x1001e506
cmp esi, 0x1123f6ab
je 0x1001e5cc
cmp esi, 0x1175956e
je 0x1001e5b8
cmp esi, 0x77fec8c5
jne 0x1001e506
mov eax, dword [esp + 0x60]
mov cl, byte [esp + eax + 0x6e]
mov eax, dword [esp + 0x60]
mov ch, byte [esp + 0x6d]
inc al
xor al, ch
xor al, cl
xor al, 8
mov ecx, dword [esp + 0x60]
mov byte [esp + ecx + 0x6e], al
inc dword [esp + 0x60]
mov esi, 0x1175956e
jmp 0x1001e506
mov dword [esp + 0x68], edi
mov eax, dword [esp + 0x68]
mov dword [esp + 0x60], 0
mov esi, 0x1175956e
jmp 0x1001e506
test byte [esp + 0x18], 1
mov esi, 0xae2187c1
cmove esi, ebp
jmp 0x1001e506
mov eax, dword [esp + 0x60]
cmp eax, 8
mov esi, 0xd4a3f2d2
cmovb esi, edx
jmp 0x1001e506
xor esi, esi
mov dword [esp + 0x184], esi
mov dword [esp + 0x194], esi
mov dword [esp + 0x198], 0xf
mov byte [esp + 0x184], 0
push ebx
call fcn.1009ee80
add esp, 4
lea ecx, [esp + 0x184]
push eax
push ebx
call fcn.10007b00
lea ecx, [esp + 0x6c]
mov dword [esp + 0x54], ecx
mov eax, dword [esp + 0x54]
mov dword [esp], ecx
mov ecx, dword [esp]
mov dword [ecx], esi
mov dword [ecx + 0x10], esi
mov dword [ecx + 0x14], esi
lea eax, [esp + 0x244]
push eax
call fcn.10007eb6
mov eax, dword [esp]
lea ecx, [eax + 0x18]
mov dword [eax + 0x18], esi
mov dword [eax + 0x28], esi
mov dword [eax + 0x2c], esi
lea eax, [esp + 0x1e4]
push eax
call fcn.10007eb6
mov eax, dword [esp]
mov dword [eax + 0x30], esi
mov eax, dword [esp]
xor edi, edi
inc edi
mov dword [eax + 0x34], edi
mov ebx, dword [esp]
lea ecx, [ebx + 0x38]
mov dword [ebx + 0x38], esi
mov dword [ebx + 0x48], esi
mov dword [ebx + 0x4c], esi
lea eax, [esp + 0x22c]
push eax
call fcn.10007eb6
lea ecx, [ebx + 0x50]
mov dword [ebx + 0x50], esi
mov dword [ebx + 0x60], esi
mov dword [ebx + 0x64], esi
lea eax, [esp + 0x1cc]
push eax
call fcn.10007eb6
mov dword [ebx + 0x68], esi
mov dword [ebx + 0x6c], 2
lea ecx, [ebx + 0x70]
mov dword [ebx + 0x70], esi
mov dword [ebx + 0x80], esi
mov dword [ebx + 0x84], esi
lea ebp, [esp + 0x214]
push ebp
call fcn.10007eb6
lea ecx, [ebx + 0x88]
mov dword [ebx + 0x88], esi
mov dword [ebx + 0x98], esi
mov dword [ebx + 0x9c], esi
lea eax, [esp + 0x184]
push eax
call fcn.10007eb6
mov dword [ebx + 0xa0], edi
mov dword [ebx + 0xa4], 3
lea ecx, [ebx + 0xa8]
mov dword [ebx + 0xa8], esi
mov dword [ebx + 0xb8], esi
mov dword [ebx + 0xbc], esi
lea eax, [esp + 0x1fc]
push eax
call fcn.10007eb6
lea ecx, [ebx + 0xc0]
mov dword [ebx + 0xc0], esi
mov dword [ebx + 0xd0], esi
mov dword [ebx + 0xd4], esi
lea eax, [esp + 0x19c]
push eax
call fcn.10007eb6
mov dword [ebx + 0xd8], esi
mov dword [ebx + 0xdc], 4
lea ecx, [ebx + 0xe0]
mov dword [ebx + 0xe0], esi
mov dword [ebx + 0xf0], esi
mov dword [ebx + 0xf4], esi
push ebp
call fcn.10007eb6
lea ecx, [ebx + 0xf8]
mov dword [ebx + 0xf8], esi
mov dword [ebx + 0x108], esi
mov dword [ebx + 0x10c], esi
lea eax, [esp + 0x1b4]
push eax
call fcn.10007eb6
mov dword [ebx + 0x110], esi
mov dword [ebx + 0x114], 5
mov ecx, 0x43856d66
cmp ecx, 0xd69381a8
jg 0x1001e7e0
cmp ecx, 0x968a0be3
jle 0x1001e834
cmp ecx, 0xbb7f4480
jg 0x1001e89d
cmp ecx, 0x968a0be4
je 0x1001e8ea
cmp ecx, 0x9d5d1db8
jne 0x1001e79d
mov ecx, 0xe278a4ef
mov dword [esp + 0xc], 0
jmp 0x1001e79d
cmp ecx, 0x35e20238
jle 0x1001e878
cmp ecx, 0x677b22f0
jg 0x1001e8cf
cmp ecx, 0x35e20239
je 0x1001e940
cmp ecx, 0x43856d66
jne 0x1001e79d
mov eax, dword [esp + 0x20]
mov dword [esp + 0x18], eax
mov dword [esp + 0x60], esi
mov eax, dword [esp + 0x60]
mov ecx, 0x91682d41
cmp eax, 5
jl 0x1001e79d
mov ecx, 0xbcaaa8cb
jmp 0x1001e79d
cmp ecx, 0x893be69a
je 0x1001e921
cmp ecx, 0x91682d41
je 0x1001e96a
cmp ecx, 0x95662f4c
jne 0x1001e79d
mov eax, dword [esp + 0x5c]
mov edx, dword [esp + 0x1c]
mov ecx, 0xd69381a9
cmp eax, dword [edx + 0x30]
je 0x1001e79d
mov ecx, 0xbb7f4481
jmp 0x1001e79d
cmp ecx, 0xd69381a9
je 0x1001e9ca
cmp ecx, 0xe278a4ef
je 0x1001e9e2
cmp ecx, 0x2d3b79
je 0x1001e90a
jmp 0x1001e79d
cmp ecx, 0xbb7f4481
je 0x1001e9fe
cmp ecx, 0xbcaaa8cb
jne 0x1001e79d
mov ecx, 0x893be69a
mov dword [esp + 0x10], 2
mov eax, dword [esp + 0x18]
mov dword [esp + 0x14], eax
jmp 0x1001e79d
cmp ecx, 0x6cc58dda
jne 0x1001ea12
mov ecx, 0x968a0be4
mov ebp, 4
jmp 0x1001ea05
mov eax, dword [esp + 8]
mov dword [esp + 0x64], eax
mov eax, dword [esp + 0x24]
mov eax, dword [esp + 0x64]
mov dword [esp + 0x14], eax
mov dword [esp + 0x10], ebp
test ebp, 0xfffffffb
jne 0x1001e921
mov esi, dword [esp + 0x60]
inc esi
mov eax, dword [esp + 0x64]
mov dword [esp + 0x20], eax
mov ecx, 0x43856d66
jmp 0x1001e79d
cmp dword [esp + 0x10], 2
mov ecx, 0xe278a4ef
mov eax, 0x9d5d1db8
cmove ecx, eax
mov eax, dword [esp + 0x14]
mov dword [esp + 0xc], eax
jmp 0x1001e79d
lea ebx, [edi - 0x38]
add edi, 0xffffffe0
mov ecx, edi
call fcn.100087f0
mov ecx, ebx
call fcn.100087f0
mov ecx, 0x677b22f1
cmp ebx, dword [esp]
je 0x1001e963
mov ecx, 0x35e20239
mov edi, ebx
jmp 0x1001e79d
lea eax, [esp + 0x5c]
mov dword [esp + 0x24], eax
mov eax, dword [esp + 0x24]
mov dword [esp + 0x5c], 0xffffffff
imul eax, dword [esp + 0x60], 0x38
add eax, esp
add eax, 0x6c
mov dword [esp + 0x1c], eax
mov ecx, dword [esp + 0x1c]
add ecx, 0x18
call fcn.10007bca
mov ebx, eax
mov ecx, dword [esp + 0x1c]
call fcn.10007bca
push 4
push dword [esp + 0x28]
push ebx
push eax
call fcn.1005b834
add esp, 0x10
mov ecx, 0x95662f4c
test eax, eax
je 0x1001e79d
mov ecx, 0x6cc58dda
jmp 0x1001e79d
mov eax, dword [esp + 0x1c]
mov eax, dword [eax + 0x34]
mov dword [esp + 8], eax
mov ecx, 0x968a0be4
xor ebp, ebp
inc ebp
jmp 0x1001e79d
mov eax, dword [esp + 0xc]
mov dword [esp + 0x68], eax
mov edi, dword [esp]
mov eax, 0x118
add edi, eax
mov ecx, 0x35e20239
jmp 0x1001e79d
mov ecx, 0x968a0be4
xor ebp, ebp
mov eax, dword [esp + 0x18]
mov dword [esp + 8], eax
jmp 0x1001e79d
cmp ecx, 0x677b22f1
jne 0x1001e79d
mov eax, dword [esp + 0x54]
lea ecx, [esp + 0x184]
call fcn.100087f0
mov eax, dword [esp + 0x50]
lea ecx, [esp + 0x19c]
call fcn.100087f0
mov eax, dword [esp + 0x4c]
lea ecx, [esp + 0x1b4]
call fcn.100087f0
mov eax, dword [esp + 0x48]
lea ecx, [esp + 0x1cc]
call fcn.100087f0
mov eax, dword [esp + 0x44]
lea ecx, [esp + 0x1e4]
call fcn.100087f0
mov eax, dword [esp + 0x40]
lea ecx, [esp + 0x1fc]
call fcn.100087f0
mov eax, dword [esp + 0x3c]
lea ecx, [esp + 0x214]
call fcn.100087f0
mov eax, dword [esp + 0x38]
lea ecx, [esp + 0x22c]
call fcn.100087f0
mov eax, dword [esp + 0x34]
lea ecx, [esp + 0x244]
call fcn.100087f0
mov eax, dword [esp + 0x30]
mov eax, dword [esp + 0x68]
mov dword [esp + 0x28], eax
mov eax, 0x71d9503b
mov ebp, 0x104
cmp eax, 0xf0645732
jg 0x1001edd0
cmp eax, 0xa6352cd0
je 0x1001ee28
cmp eax, 0xac646cf6
je 0x1001ee00
cmp eax, 0xcc849e61
jne 0x1001eac4
mov dword [esp + 0x58], esi
lea eax, [esp + 0x1e4]
mov dword [esp + 0x1fc], eax
mov eax, dword [esp + 0x1fc]
mov eax, dword [esp + 0x1fc]
mov byte [eax + 2], 0
mov word [eax], 0x3a43
mov bl, 0x43
mov ecx, 0x22fb3000
mov dword [esp + 0x10], 0
cmp ecx, 0xeb075317
jg 0x1001eb5f
cmp ecx, 0xb7ef7a44
jg 0x1001ebc2
cmp ecx, 0x89cd8e39
je 0x1001ec91
cmp ecx, 0x89e0c51b
je 0x1001eca5
cmp ecx, 0xae5d3996
jne 0x1001eb24
xor esi, esi
jmp 0x1001ed32
cmp ecx, 0x22fb2fff
jle 0x1001ec0e
cmp ecx, 0x4d0f0264
je 0x1001ecca
cmp ecx, 0x2f6e962c
je 0x1001ed1c
cmp ecx, 0x22fb3000
jne 0x1001eb24
mov eax, dword [esp + 0x10]
mov byte [esp + 0x19c], al
mov byte [esp + 0x1b4], bl
mov al, byte [esp + 0x1b4]
mov ecx, 0x4d0f0264
cmp al, 0x5b
jl 0x1001ebb2
mov ecx, 0xd5e65d
mov al, byte [esp + 0x19c]
mov byte [esp + 0xc], al
jmp 0x1001eb24
cmp ecx, 0xb7ef7a45
je 0x1001ed2d
cmp ecx, 0xd54c20a3
je 0x1001ed43
cmp ecx, 0xe1c7fefa
jne 0x1001eb24
push str.Harddisk
push dword [esp + 0x248]
call fcn.1008c160
add esp, 8
test eax, eax
mov ecx, 0x2f6e962c
mov eax, 0xae5d3996
cmove ecx, eax
jmp 0x1001eb24
cmp ecx, 0xeb075318
je 0x1001ed6e
cmp ecx, 0xb673f4
jne 0x1001ed8c
mov byte [esp + 7], bh
mov byte [esp + 0x20], bl
mov ebx, esi
mov esi, edi
lea edi, [esp + 0x6c]
mov dword [esp + 0x22c], edi
mov eax, dword [esp + 0x22c]
push ebp
push 0
push dword [esp + 0x234]
call fcn.1008c000
add esp, 0xc
mov dword [esp + 0x244], edi
push ebp
push dword [esp + 0x248]
push dword [esp + 0x21c]
call dword [sym.imp.KERNEL32.dll_QueryDosDeviceA]
mov ecx, 0xb7ef7a45
test eax, eax
je 0x1001ec80
mov ecx, 0xe1c7fefa
mov edi, esi
mov esi, ebx
mov bl, byte [esp + 0x20]
mov bh, byte [esp + 7]
jmp 0x1001eb24
xor edi, edi
mov ecx, 0xd54c20a3
mov al, byte [esp + 0x14]
mov byte [esp + 8], al
jmp 0x1001eb24
mov eax, dword [esp + 0x22c]
test esi, esi
mov ecx, 0xd54c20a3
mov eax, 0x89cd8e39
cmove ecx, eax
mov byte [esp + 0x14], bh
mov byte [esp + 8], bh
mov edi, esi
jmp 0x1001eb24
lea eax, [esp + 0x1e4]
mov dword [esp + 0x214], eax
mov eax, dword [esp + 0x214]
mov cl, byte [esp + 0x1b4]
mov byte [eax], cl
push dword [esp + 0x214]
call dword [sym.imp.KERNEL32.dll_GetDriveTypeA]
and eax, 0xfffffffe
add eax, 0xfffffffe
mov ecx, 0xb673f4
test eax, 0xfffffffc
je 0x1001ed0c
mov ecx, 0x89cd8e39
mov al, byte [esp + 0x19c]
mov byte [esp + 0x14], al
jmp 0x1001eb24
mov esi, 2
mov bh, 1
mov ecx, 0x89e0c51b
jmp 0x1001eb24
mov esi, 4
mov ecx, 0x89e0c51b
mov bh, byte [esp + 0x19c]
jmp 0x1001eb24
mov al, byte [esp + 8]
mov byte [esp + 0x1cc], al
cmp edi, 2
mov ecx, 0xeb075318
mov eax, 0xd5e65d
cmove ecx, eax
mov al, byte [esp + 0x1cc]
mov byte [esp + 0xc], al
jmp 0x1001eb24
mov bl, byte [esp + 0x1b4]
inc bl
mov al, byte [esp + 0x1cc]
mov dword [esp + 0x10], eax
mov ecx, 0x22fb3000
jmp 0x1001eb24
cmp ecx, 0xd5e65d
jne 0x1001eb24
test byte [esp + 0xc], 1
mov eax, 0
mov ecx, 0xb
cmove eax, ecx
mov ecx, dword [esp + 0x1fc]
mov dword [esp + 0x2c], eax
cmp dword [esp + 0x2c], 0
mov eax, 0x5f3f4948
mov ecx, 0xf0645733
cmove eax, ecx
mov esi, dword [esp + 0x58]
jmp 0x1001eac4
cmp eax, 0xf0645733
je 0x1001ee0e
cmp eax, 0x5f3f4948
je 0x1001ee1a
cmp eax, 0x71d9503b
jne 0x1001eac4
cmp dword [esp + 0x28], 0
mov eax, 0xac646cf6
mov ecx, 0xcc849e61
cmove eax, ecx
jmp 0x1001eac4
mov eax, 0xa6352cd0
mov esi, dword [esp + 0x28]
jmp 0x1001eac4
mov eax, 0xa6352cd0
xor esi, esi
jmp 0x1001eac4
mov eax, 0xa6352cd0
mov esi, dword [esp + 0x2c]
jmp 0x1001eac4
mov ecx, dword [esp + 0x25c]
xor ecx, esp
call fcn.100879aa
mov eax, esi
add esp, 0x260
pop esi
pop edi
pop ebx
pop ebp
ret