Function at 0x10033fb4
Capabilities:
Get disk information

Disassembly:
mov eax, 0x1005f0b6
call fcn.1005d884
sub esp, 0x248
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
xor ebx, ebx
mov dword [ebp - 0x78], ecx
lea ecx, [ebp - 0xc4]
push 3
mov dword [ebp - 0x34], edx
mov dword [ebp - 0x15c], ebx
call fcn.1000f845
mov dword [ebp - 0x18], 0x9dada439
mov dword [ebp - 0x28], ebx
mov dword [ebp - 0x18], ebx
jmp 0x10034007
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0xc4]
mov dword [eax + ecx*4], 0x8bbc
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x10033ff4
mov dword [ebp - 0x18], 2
cmp dword [ebp - 0x18], ebx
jl 0x1003404b
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], bl
je 0x1003402b
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_RaiseException]
mov esi, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0xc4]
mov edx, dword [ebp - 0xc4]
mov eax, dword [eax + ecx*4]
mov dword [edx + esi*4], eax
mov dword [ebp - 0x28], eax
dec dword [ebp - 0x18]
jns 0x10034019
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], bl
je 0x1003408d
push ebx
push 0x387
push 0x221b
push ebx
push 0x11f
push 0x13a2
push 0x43f
push 0xe69
push 0x2439
push 0xb2f
push 0x1951
push 0x14a6
call dword [sym.imp.GDI32.dll_MaskBlt]
lea ecx, [ebp - 0xc4]
call fcn.1000f91b
mov dword [ebp - 0x18], 0xc05baf43
cmp dword [ebp - 0x18], ebx
je 0x100341d1
mov dword [ebp - 0x30], 0x1b5b
cmp dword [ebp - 0x30], 0x1d07
jle 0x100340ff
mov esi, ebx
mov edi, ebx
mov eax, edi
lea ecx, [ebp - 0x208]
and eax, esi
cdq
push edx
push eax
call fcn.10001a9f
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x100340d8
mov eax, dword [eax]
push eax
call fcn.10045b49
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x208]
call fcn.100101ce
inc edi
cmp edi, 0x75de
jl 0x100340bc
inc esi
cmp esi, 0x4407
jl 0x100340ba
mov byte [ebp - 0x19], bl
cmp dword [ebp - 0x30], 0x1885
jge 0x10034116
push str.smxxckpsu_jgctmbpu_zzkc_zcywx_canok_wyjfdngon_des_iiokdfrgn_momzlct_kvdsb_zcmhbtv_gffnxqg
call fcn.10045b49
pop ecx
or dword [ebp - 4], 0xffffffff
cmp byte [ebp - 0x19], bl
je 0x1003412b
push ebx
push 0x23c8
call dword [sym.imp.KERNEL32.dll_IsDBCSLeadByteEx]
mov dword [ebp - 0x18], 3
cmp dword [ebp - 0x18], 0xffffffe9
je 0x100341f1
mov dword [ebp - 0x20], 0x4ecd
cmp dword [ebp - 0x20], 0x51c6
jle 0x100341ac
mov esi, ebx
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x28], esi
mov dword [ebp - 0x30], 0xcd9
mov edi, ebx
mov eax, esi
lea ecx, [ebp - 0x238]
and eax, edi
cdq
push edx
push eax
call fcn.10001a9f
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10034179
mov eax, dword [eax]
push eax
call fcn.10045b49
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x238]
call fcn.100101ce
inc edi
cmp edi, 0x4a5f
jl 0x1003415d
dec esi
dec dword [ebp - 0x30]
jne 0x1003415b
mov esi, dword [ebp - 0x2c]
inc esi
mov dword [ebp - 0x2c], esi
cmp esi, 0x45fd
jl 0x10034151
cmp dword [ebp - 0x18], ebx
jne 0x100341f1
cmp dword [ebp - 0x20], 0x4e93
jge 0x100341c5
push str.aeziqdss_pqmpqf_tri_ajnx_utpqyqso_zvjvpdrc_bfvt_mwdxmp_agzwokk_qzxhxnq_lvnrei
call fcn.10045b49
pop ecx
or dword [ebp - 4], 0xffffffff
dec dword [ebp - 0x18]
jmp 0x10034132
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], bl
je 0x100341f1
push ebx
push 0xf74
push ebx
push ebx
push 0x1e26
push 0x306
call dword [sym.imp.USER32.dll_ToAsciiEx]
push 0x6c
pop eax
push 2
pop edi
push edi
mov dword [ebp - 0x6c], 0x30066605
mov dword [ebp - 0x68], 0xe023d04
mov dword [ebp - 0x64], 0x2b012800
mov dword [ebp - 0x60], 0x13e48c04
mov word [ebp - 0x5c], 0x3a3
mov byte [ebp - 0x5a], 0xe
mov word [ebp - 0xee], ax
mov dword [ebp - 0x2c], ebx
pop esi
cmp edi, 0xc
jne 0x1003428f
push dword [ebp - 0x38]
movdqa xmm0, xmmword [0x1006c6d0]
lea eax, [ebp - 0x1d0]
push eax
lea eax, [ebp - 0x1e0]
mov dword [ebp - 0xb8], ebx
push eax
push ebx
lea ecx, [ebp - 0xb8]
mov dword [ebp - 0xb4], ebx
movdqu xmmword [ebp - 0x1e0], xmm0
mov dword [ebp - 0xb0], ebx
call fcn.10013216
mov eax, dword [ebp - 0xb8]
lea ecx, [ebp - 0xb8]
mov dword [eax], ebx
call fcn.1000f91b
push 0xf
mov dword [ebp - 0x2c], 5
pop edi
jmp 0x1003437a
mov dword [ebp - 0x18], 0xb9f9b319
mov dword [ebp - 0x18], 0x18
jmp 0x100342ba
mov dword [ebp - 0x28], 0xf506
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], bl
je 0x100342b4
call dword [sym.imp.KERNEL32.dll_GetLogicalDrives]
mov eax, dword [ebp - 0x28]
dec dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0xfffffff6
jne 0x1003429f
movzx edx, byte [ebp + edi - 0x6b]
mov eax, edi
sub eax, dword [ebp - 0x2c]
movzx eax, byte [ebp + eax - 0x6e]
movzx ecx, word [ebp + eax*2 - 0xf8]
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
movzx eax, byte [ebp + edi - 0x6c]
add ecx, edx
xor edx, edx
inc edx
mov word [ebp + eax*2 - 0xf8], cx
mov dword [ebp - 0x28], edx
mov dword [ebp - 0x20], 0x1d21f1eb
mov dword [ebp - 0x38], 5
mov dword [ebp - 0x30], 0xc70a
mov dword [ebp - 0x2c], 0x9b4af7bd
mov dword [ebp - 0x18], ebx
jmp 0x10034323
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x4c], 0xffffffff
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], edx
jl 0x10034315
mov dword [ebp - 0x4c], edx
xor ecx, ecx
mov dword [ebp - 0x30], ebx
mov eax, dword [ebp - 0x28]
cmp eax, edx
setl cl
xor edx, edx
mov dword [ebp - 0x2c], ecx
mov ecx, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x2c]
cmp eax, ecx
mov eax, dword [ebp - 0x20]
setl dl
imul eax, edx
cmp eax, dword [ebp - 0x30]
jle 0x1003435d
cmp dword [ebp - 0x2c], ebx
je 0x1003435d
xor edx, edx
inc edx
jmp 0x1003435f
mov edx, ebx
mov eax, dword [ebp - 0x4c]
xor ecx, ecx
sub eax, 8
mov dword [ebp - 0x2c], ebx
cmp eax, edx
setge cl
xor eax, eax
cmp ecx, 1
setle al
mov dword [ebp - 0x4c], eax
add edi, esi
cmp edi, 0x13
jb 0x10034229
push 1
lea ecx, [ebp - 0x140]
call fcn.1000f845
push 4
pop edi
mov dword [ebp - 4], edi
lea ecx, [ebp - 0xdc]
mov dword [ebp - 0x38], 0xa57b5bf2
mov dword [ebp - 0x2c], 0x47c4d145
mov dword [ebp - 0x30], 0xce4a6f44
push esi
call fcn.1000f845
xor edx, edx
inc edx
mov dword [ebp - 0x38], edx
mov dword [ebp - 0x24], ebx
jmp 0x100343d3
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x140]
mov dword [eax + ecx*4], edx
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], edx
jl 0x100343c4
mov dword [ebp - 0x24], ebx
jmp 0x100343ea
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0xac], edx
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], edx
jl 0x100343dd
mov dword [ebp - 0x24], ebx
jmp 0x10034403
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0xdc]
mov dword [eax + ecx*4], ebx
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], esi
jl 0x100343f4
mov dword [ebp - 0x24], ebx
jmp 0x1003441e
mov eax, dword [ebp - 0x24]
mov dword [ebp + eax*4 - 0x88], 0xffffffff
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], edx
jl 0x1003440d
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0xdc]
mov eax, dword [eax]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x140]
mov eax, dword [eax]
mov dword [ebp - 0xac], eax
dec dword [ebp - 0x88]
mov ecx, dword [ebp - 0xdc]
imul eax, dword [ecx], 0xffff
mov dword [ecx + 4], eax
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x1003446e
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SetCommState]
lea ecx, [ebp - 0xdc]
call fcn.1000f91b
or dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x140]
call fcn.1000f91b
xor eax, eax
lea ecx, [ebp - 0xe8]
mov word [ebp - 0xea], ax
mov dword [ebp - 0x24], edi
push 1
call fcn.1000f845
mov dword [ebp - 4], 5
xor edx, edx
inc edx
mov dword [ebp - 0x28], edx
mov dword [ebp - 0x30], 0x668451f1
mov dword [ebp - 0x38], 6
mov dword [ebp - 0x18], 0xd7c3
mov dword [ebp - 0x2c], 0x25ab
cmp dword [ebp - 0x2c], 0x284f
jle 0x10034526
mov edi, ebx
mov eax, ebx
mov dword [ebp - 0x30], ebx
add eax, edi
lea ecx, [ebp - 0x220]
cdq
push edx
push eax
call fcn.10001a9f
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x100344f4
mov eax, dword [eax]
push eax
call fcn.10045b49
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x220]
call fcn.100101ce
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp eax, 0x4751
jl 0x100344da
inc edi
cmp edi, 0x68fe
jl 0x100344d5
xor edx, edx
push 4
inc edx
pop edi
mov dword [ebp - 0x20], ebx
jmp 0x1003453e
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0xe8]
mov dword [eax + ecx*4], 0x5e790e86
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edx
jl 0x1003452b
cmp dword [ebp - 0x2c], 0x228b
jge 0x1003455a
push str.qozwqrg_qdta_apfsftzb_wyidcoi_jpcxuqbe_ploedqg_nzgwhw_kpfmaxexm_tuci_vmobt
call fcn.10045b49
xor edx, edx
pop ecx
inc edx
mov dword [ebp - 0x20], ebx
jmp 0x1003456c
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0xa8], edx
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edx
jl 0x1003455f
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0xe8]
mov dword [eax], ecx
lea ecx, [ebp - 0xe8]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0xe8]
mov eax, dword [eax]
mov dword [ebp - 0x30], eax
inc dword [ebp - 0x18]
or dword [ebp - 4], 0xffffffff
call fcn.1000f91b
xor eax, eax
mov dword [ebp - 0x168], 7
mov word [ebp - 0x17c], ax
lea ecx, [ebp - 0x17c]
lea eax, [ebp - 0xf8]
mov dword [ebp - 0x16c], ebx
push eax
call fcn.10025738
mov dword [ebp - 4], 8
mov dword [ebp - 0x18], 0x4dd03248
mov dword [ebp - 0x38], 0x249a
mov dword [ebp - 0x28], edi
mov dword [ebp - 0x38], 0x266d210e
mov dword [ebp - 0x30], 0xfffffff7
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x28]
neg eax
sbb eax, eax
neg eax
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x18], ebx
jmp 0x10034627
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x10034624
push 0x79
call dword [sym.imp.USER32.dll_GetSysColorBrush]
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 0x18
jge 0x10034613
push dword [ebp - 0x34]
xor eax, eax
lea edi, [ebp - 0xf8]
stosd dword es:[edi], eax
lea ecx, [ebp - 0x1c0]
stosd dword es:[edi], eax
stosd dword es:[edi], eax
stosd dword es:[edi], eax
call fcn.1000f66b
push 1
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 9
call fcn.1000f845
mov byte [ebp - 4], 0xa
xor edx, edx
mov dword [ebp - 0x2c], 0xdd5d0881
inc edx
mov dword [ebp - 0x34], 0xfffffffa
mov dword [ebp - 0x38], 0x93b76f05
mov dword [ebp - 0x20], ebx
jmp 0x10034684
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0x3c], 0x841b
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edx
jl 0x10034676
mov dword [ebp - 0x20], ebx
jmp 0x1003469e
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x58]
mov dword [eax + ecx*4], 0xa32b1cec
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], edx
jl 0x1003468e
mov eax, dword [ebp - 0x58]
xor edi, edi
inc edi
mov dword [eax], ebx
mov dword [ebp - 0x30], ebx
lea ecx, [ebp - 0x14c]
push esi
call fcn.1000f845
mov dword [ebp - 0x18], ebx
jmp 0x100346d2
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x14c]
mov dword [eax + ecx*4], 0x264f7d9f
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], esi
jl 0x100346bf
mov eax, dword [ebp - 0x58]
xor ecx, ecx
mov eax, dword [eax]
mov eax, dword [ebp + eax*4 - 0x3c]
test eax, eax
setne cl
mov dword [ebp - 0x28], ecx
cmp dword [ebp - 0x3c], ebx
jne 0x10034738
mov dword [ebp - 0x2c], 0xcf7d1649
xor ecx, ecx
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x58]
mov esi, dword [eax]
mov eax, dword [ebp + esi*4 - 0x3c]
cmp esi, eax
mov eax, dword [ebp + esi*4 - 0x3c]
setl cl
xor edx, edx
cmp ecx, edi
setle dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x58]
setne cl
mov dword [ebp - 0x34], ecx
xor ecx, ecx
mov eax, dword [eax]
mov eax, dword [ebp + eax*4 - 0x3c]
cmp dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x3c]
setle cl
add eax, ecx
mov ecx, ebx
je 0x1003473a
mov ecx, edi
mov eax, dword [ebp - 0x58]
neg ecx
add ecx, ecx
neg ecx
mov eax, dword [eax]
sbb ecx, ecx
inc ecx
xor edx, edx
cmp ecx, eax
setle dl
sub edx, eax
neg edx
sbb edx, edx
xor ecx, ecx
inc edx
sub edx, dword [ebp + eax*4 - 0x3c]
mov eax, dword [ebp - 0x58]
mov eax, dword [eax]
mov eax, dword [ebp + eax*4 - 0x3c]
cmp edx, eax
mov edx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x58]
setg cl
imul edx, ecx
mov eax, dword [eax]
neg edx
mov eax, dword [ebp + eax*4 - 0x3c]
sbb edx, edx
xor ecx, ecx
neg edx
cmp edx, eax
mov eax, dword [ebp - 0x58]
setl cl
xor edx, edx
mov dword [ebp - 0x34], ecx
mov esi, dword [eax]
mov eax, 0xfff6
sub eax, esi
mov ecx, dword [ebp + esi*4 - 0x3c]
cmp eax, ecx
mov eax, dword [ebp + esi*4 - 0x3c]
setl dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x58]
setne cl
mov dword [ebp - 0x34], ecx
xor ecx, ecx
mov eax, dword [eax]
cmp dword [ebp - 0x34], eax
setge cl
add ecx, 0x32e0
imul ecx, dword [ebp - 0x28]
sub ecx, dword [ebp + eax*4 - 0x3c]
cmp ecx, dword [ebp - 0x3c]
jle 0x10034852
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x30], ebx
inc dword [ebp - 0x30]
je 0x100347f3
mov eax, dword [ebp - 0x18]
xor ecx, ecx
cmp eax, 0x275f
mov edx, edi
mov eax, dword [ebp - 0x58]
setle cl
cmp ecx, dword [eax]
jg 0x100347f5
mov edx, ebx
mov eax, dword [ebp - 0x3c]
xor ecx, ecx
mov eax, dword [ebp - 0x58]
mov eax, dword [eax]
mov eax, dword [ebp + eax*4 - 0x3c]
cmp edx, eax
setl cl
lea eax, [ecx - 0x38e074f0]
mov ecx, dword [ebp - 0x18]
add ecx, eax
mov dword [ebp - 0x30], ecx
cmp dword [ebp - 0x30], 0xfffe
mov eax, dword [ebp - 0x18]
sbb ecx, ecx
xor edx, edx
inc ecx
cmp ecx, eax
mov eax, dword [ebp - 0x18]
setge dl
xor ecx, ecx
cmp eax, edx
mov eax, dword [ebp - 0x14c]
setg cl
mov dword [eax + 4], ecx
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x1003486c
push ebx
push ebx
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_SignalObjectAndWait]
jmp 0x1003486c
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x1003486c
push 0xdcf
push 0x203e
push ebx
call dword [sym.imp.GDI32.dll_PtInRegion]
lea ecx, [ebp - 0x14c]
mov dword [ebp - 0x2c], edi
call fcn.1000f91b
mov eax, dword [ebp - 0x58]
push 2
pop esi
dec dword [eax]
jns 0x100346ab
lea ecx, [ebp - 0x58]
mov byte [ebp - 4], 9
call fcn.1000f91b
mov dword [ebp - 0x20], 0x4205
cmp dword [ebp - 0x20], 0x4350
jle 0x100348eb
mov dword [ebp - 0x18], ebx
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x30], 0x6b99
mov esi, dword [ebp - 0x2c]
mov dword [ebp - 0x34], ebx
mov eax, esi
mov ecx, 0x10079a18
and eax, ebx
cdq
push edx
push eax
call fcn.1000f556
inc ebx
cmp ebx, 0x3e40
jl 0x100348b7
mov esi, dword [ebp - 0x18]
add dword [ebp - 0x2c], esi
dec dword [ebp - 0x30]
push 0
pop ebx
jne 0x100348b1
inc esi
mov dword [ebp - 0x18], esi
cmp esi, 0x4efd
jl 0x100348a7
mov dword [ebp - 0x34], 0xa75c19c5
mov byte [ebp - 4], 0xb
cmp dword [ebp - 0x20], 0x3fae
jge 0x1003492f
mov edx, str.yyskzl_rocvdneo_adjn_rdfqzivp_htmi_tlpqrvlsn_ifb_jap
mov ecx, 0x10079a18
call fcn.10012762
jmp 0x1003492f
mov dword [ebp - 4], 9
mov dword [ebp - 0x18], ebx
jmp 0x1003494c
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x190], 2
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x1003493b
mov dword [ebp - 0x18c], 0x1124f01c
mov dword [ebp - 0x34], 0x1124f01c
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x10034972
call dword [sym.imp.KERNEL32.dll_GetUserDefaultLCID]
push 0x5c
pop eax
push 2
mov byte [ebp - 0x44], bl
mov ecx, ebx
mov dword [ebp - 0x43], 0x35c70332
mov byte [ebp - 0x3f], 0xc1
mov word [ebp - 0x48], ax
pop esi
cmp esi, 2
jne 0x10034998
push 4
pop ecx
push ecx
pop esi
jmp 0x100349c1
movzx edx, byte [ebp + esi - 0x43]
mov eax, esi
sub eax, ecx
movzx eax, byte [ebp + eax - 0x46]
movzx ecx, word [ebp + eax*2 - 0x48]
mov eax, ecx
and eax, edx
add eax, eax
sub ecx, eax
movzx eax, byte [ebp + esi - 0x44]
add ecx, edx
mov word [ebp + eax*2 - 0x48], cx
mov ecx, ebx
add esi, 2
cmp esi, 6
jb 0x1003498c
xor eax, eax
mov dword [ebp - 0xfc], 7
mov word [ebp - 0x46], ax
lea ecx, [ebp - 0x110]
mov word [ebp - 0x110], ax
lea eax, [ebp - 0x48]
push eax
mov dword [ebp - 0x100], ebx
call fcn.10025738
mov byte [ebp - 4], 0xd
lea eax, [ebp - 0x1e0]
push dword [ebp - 0xa8]
movdqa xmm0, xmmword [0x1006c720]
lea ecx, [ebp - 0x84]
push eax
lea eax, [ebp - 0x1f0]
mov dword [ebp - 0x84], ebx
push eax
push ebx
movdqu xmmword [ebp - 0x1f0], xmm0
mov dword [ebp - 0x80], ebx
mov dword [ebp - 0x7c], ebx
call fcn.10013216
mov dword [ebp - 0x24], 0xffffffff
mov dword [ebp - 0x30], 0xfffffffc
mov dword [ebp - 0x24], ebx
jmp 0x10034b71
mov dword [ebp - 0x20], 0x7c8a6b95
mov dword [ebp - 0x18], 0x9329bfae
mov dword [ebp - 0x34], 8
mov dword [ebp - 0x20], ebx
jmp 0x10034b64
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
cmp dword [ebp - 0x20], ebx
jne 0x10034a7c
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x20]
mov esi, ebx
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x20], ebx
je 0x10034a97
mov esi, edi
mov edx, dword [ebp - 0x24]
xor ecx, ecx
mov eax, dword [ebp - 0x18]
cmp esi, eax
mov eax, dword [ebp - 0x84]
setle cl
imul ecx, dword [eax + edx*4]
imul eax, ecx, 0xffffabb1
test eax, eax
je 0x10034ad2
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x10034b53
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_FileTimeToSystemTime]
jmp 0x10034b53
mov dword [ebp - 0x2c], 0x316d
mov dword [ebp - 0x18], ebx
jmp 0x10034b4d
mov dword [ebp - 0x34], 0xfffffff6
mov dword [ebp - 0x28], 0xad5889e5
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x34]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x24]
cmp dword [ebp - 0x2c], ebx
je 0x10034b15
mov ecx, dword [ebp - 0x24]
mov eax, dword [ebp - 0x84]
cmp dword [eax + ecx*4], ebx
je 0x10034b15
mov ecx, edi
cmp dword [ebp - 0x24], ebx
jne 0x10034b17
mov ecx, ebx
mov eax, dword [ebp - 0x30]
sub ecx, eax
jne 0x10034b21
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x18]
mov edx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x84]
mov ecx, dword [eax]
mov dword [eax + edx*4], ecx
mov dword [ebp - 0x34], ecx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jle 0x10034ade
mov edx, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x84]
mov eax, dword [ecx]
mov dword [ecx + edx*4], eax
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 3
jle 0x10034a68
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], 3
jle 0x10034a4b
lea ecx, [ebp - 0x84]
call fcn.1000f91b
mov dword [ebp - 0x48], ebx
lea ecx, [ebp - 0x158]
mov dword [ebp - 0x24], ebx
mov dword [ebp - 0x38], 0xee1c9741
push edi
call fcn.1000f845
mov byte [ebp - 4], 0xe
mov dword [ebp - 0x20], ebx
jmp 0x10034bb9
mov eax, dword [ebp - 0x20]
mov dword [ebp + eax*4 - 0xa4], 0x48261f9c
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 1
jl 0x10034ba8
mov dword [ebp - 0x20], ebx
jmp 0x10034bd3
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x158]
mov dword [eax + ecx*4], ebx
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 1
jl 0x10034bc4
mov byte [ebp - 0x19], bl
cmp byte [ebp - 0x19], 0
je 0x10034bea
push ebx
push ebx
call dword [sym.imp.ADVAPI32.dll_EqualSid]
mov dword [ebp - 0x24], ebx
jmp 0x10034c8d
mov dword [ebp - 0x20], 1
lea ecx, [ebp - 0x188]
mov dword [ebp - 0x38], 0x4dc9ed9b
push 3
call fcn.1000f845
mov byte [ebp - 4], 0xf
mov dword [ebp - 0x18], ebx
jmp 0x10034c29
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x188]
mov dword [eax + ecx*4], 0xc2285faa
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x10034c16
mov dword [ebp - 0x20], ebx
jmp 0x10034c76
push 3
lea ecx, [ebp - 0x128]
call fcn.1000f845
mov dword [ebp - 0x18], ebx
jmp 0x10034c59
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x128]
mov dword [eax + ecx*4], 0x3fe662db
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 3
jl 0x10034c46
mov eax, dword [ebp - 0x128]
lea ecx, [ebp - 0x128]
inc dword [eax + 8]
call fcn.1000f91b
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ebx
jle 0x10034c34
lea ecx, [ebp - 0x188]
mov byte [ebp - 4], 0xe
call fcn.1000f91b
inc dword [ebp - 0x24]
cmp dword [ebp - 0x24], ebx
jle 0x10034bf2
lea ecx, [ebp - 0x158]
mov byte [ebp - 4], 0xd
call fcn.1000f91b
push 4
lea ecx, [ebp - 0xa0]
call fcn.1000f845
push 2
lea ecx, [ebp - 0x134]
mov byte [ebp - 4], 0x10
call fcn.1000f845
mov dword [ebp - 0x20], 0xa9c21324
mov dword [ebp - 0x20], ebx
jmp 0x10034ce2
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0xa0]
mov dword [eax + ecx*4], 0xfffffff6
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 4
jl 0x10034ccf
mov dword [ebp - 0x20], ebx
jmp 0x10034d00
mov ecx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x134]
mov dword [eax + ecx*4], 0x568b
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], 2
jl 0x10034ced
mov edx, dword [ebp - 0xa0]
mov esi, 0xffff
mov eax, dword [ebp - 0x134]
mov ecx, dword [edx + 8]
mov dword [eax], ecx
mov eax, dword [edx + 8]
add eax, ecx
cmp esi, eax
mov eax, 0xa7275995
sbb ecx, ecx
inc ecx
sub eax, ecx
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x20]
inc eax
je 0x10034d4c
mov eax, dword [ebp - 0xa0]
cmp dword [eax + 4], ebx
je 0x10034d4c
mov dword [ebp - 0x28], esi
dec dword [ebp - 0x28]
jmp 0x10034de9
mov dword [ebp - 0x30], 0x2b79dc86
xor ecx, ecx
mov dword [ebp - 0x34], 0x9a984365
inc ecx
mov dword [ebp - 0x28], 0xfc24489
mov dword [ebp - 0x20], ebx
jmp 0x10034de4
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x2c], ecx
cmp dword [ebp - 0x2c], ebx
jl 0x10034dcb
mov dword [ebp - 0x24], 0xa83a0f0f
mov dword [ebp - 0x24], ebx
jmp 0x10034dc1
mov dword [ebp - 0x18], 0xffffffff
xor ecx, ecx
mov edx, dword [ebp - 0x24]
mov eax, dword [ebp - 0xa0]
cmp dword [eax + edx*4 + 4], 0xfffffffa
setle cl
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x18], ebx
jmp 0x10034db5
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0xa0]
mov dword [eax + ecx*4], 5
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x10034da2
inc dword [ebp - 0x24]
xor ecx, ecx
inc ecx
cmp dword [ebp - 0x24], ecx
jle 0x10034d80
dec dword [ebp - 0x2c]
jns 0x10034d74
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x34]
imul eax, dword [ebp - 0x30]
mov dword [ebp - 0x28], eax
inc dword [ebp - 0x20]
cmp dword [ebp - 0x20], ecx
jle 0x10034d69
lea ecx, [ebp - 0x134]
call fcn.1000f91b
lea ecx, [ebp - 0xa0]
mov byte [ebp - 4], 0xd
call fcn.1000f91b
push 0x5f
pop eax
mov word [ebp - 0x74], ax
lea ecx, [ebp - 0x1a8]
xor eax, eax
mov byte [ebp - 0x70], bl
mov word [ebp - 0x72], ax
mov word [ebp - 0x1a8], ax
lea eax, [ebp - 0x74]
push eax
mov byte [ebp - 0x6f], 0xc4
mov dword [ebp - 0x194], 7
mov dword [ebp - 0x198], ebx
call fcn.10025738
mov byte [ebp - 4], 0x11
mov dword [ebp - 0x74], ebx
mov dword [ebp - 0x28], 0x1d38
cmp dword [ebp - 0x28], 0x1e80
jle 0x10034e82
push ebx
call dword [sym.imp.KERNEL32.dll_SetCommBreak]
mov esi, ebx
mov edi, ebx
mov eax, edi
mov ecx, 0x10079a18
and eax, esi
cdq
push edx
push eax
call fcn.1000f556
inc edi
cmp edi, 0x2f2
jl 0x10034e5f
inc esi
cmp esi, 0x5fa3
jl 0x10034e5d
mov byte [ebp - 4], 0x12
cmp dword [ebp - 0x28], 0x1d1d
jge 0x10034ebc
mov edx, str.dubt_ljltqneh_jxeqi_fyyl_nnceodrc_atxivel_uhi_mazueb_byh_zra
mov ecx, 0x10079a18
call fcn.10012762
jmp 0x10034ebc
mov dword [ebp - 4], 0x11
lea eax, [ebp - 0x1c0]
push dword [ebp - 0xa4]
movdqa xmm0, xmmword [0x1006c710]
lea ecx, [ebp - 0x94]
push eax
lea eax, [ebp - 0x1d0]
mov dword [ebp - 0x94], ebx
push eax
push ebx
movdqu xmmword [ebp - 0x1d0], xmm0
mov dword [ebp - 0x90], ebx
mov dword [ebp - 0x8c], ebx
call fcn.10013216
mov byte [ebp - 4], 0x14
lea ecx, [ebp - 0xd0]
mov dword [ebp - 0x20], 0x90c4d8e5
push 2
call fcn.1000f845
mov byte [ebp - 4], 0x15
mov dword [ebp - 0x38], 0xffffffff
mov dword [ebp - 0x38], 0xffffffff
mov dword [ebp - 0x18], ebx
jmp 0x10034f47
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0xd0]
mov dword [eax + ecx*4], 0xfffffff6
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 2
jl 0x10034f34
mov dword [ebp - 0x24], 0x6561
cmp dword [ebp - 0x24], 0x66de
mov dword [ebp - 0x38], str.lvwnx_kywjk_gffvio_lgqjx_svycpfabe_lkeg_zunfj_wpyaazo_njqt_laslgl_ftetzmivh_gnqby_otri_ysdknt
jle 0x10035007
mov dword [ebp - 0x30], ebx
mov edi, ebx
mov dword [ebp - 0x2c], ebx
mov esi, ebx
mov dword [ebp - 0x28], ebx
mov eax, edi
mov dword [ebp - 0x34], ebx
mov ecx, esi
mov edi, ebx
mov esi, dword [ebp - 0x30]
shl eax, cl
mov dword [ebp - 0x18], eax
mov ecx, edi
sar eax, cl
lea ecx, [ebp - 0x250]
or eax, esi
cdq
push edx
push eax
call fcn.10001a9f
pop ecx
pop ecx
cmp dword [eax + 0x14], 0x10
jb 0x10034fa4
mov eax, dword [eax]
push eax
call fcn.10045b49
pop ecx
push ebx
push 1
lea ecx, [ebp - 0x250]
call fcn.100101ce
mov eax, dword [ebp - 0x18]
inc edi
cmp edi, 0x32e4
jl 0x10034f86
mov esi, dword [ebp - 0x28]
mov edi, dword [ebp - 0x2c]
inc esi
mov dword [ebp - 0x28], esi
cmp esi, 0x3310
jl 0x10034f75
inc edi
mov dword [ebp - 0x2c], edi
cmp edi, 0x42c8
jl 0x10034f70
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
cmp eax, 0x7883
jl 0x10034f6b
push ebx
push 0x17d6
push ebx
push 0x484
call dword [sym.imp.GDI32.dll_GetTextExtentPoint32W]
mov dword [ebp - 0x20], 3
cmp dword [ebp - 0x20], ebx
jl 0x100351b9
mov dword [ebp - 0x30], 0x7b09f595
mov dword [ebp - 0x28], 4
mov dword [ebp - 0x28], 0x64087a91
mov dword [ebp - 0x28], 0x7304677
mov dword [ebp - 0x28], 0x32a2
cmp dword [ebp - 0x28], 0x357b
jle 0x1003506a
mov esi, ebx
mov edi, ebx
mov eax, edi
mov ecx, 0x10079a18
or eax, esi
cdq
push edx
push eax
call fcn.1000f556
inc edi
cmp edi, 0x8012
jl 0x10035047
inc esi
cmp esi, 0x6e6d
jl 0x10035045
mov dword [ebp - 0x34], 0xfffffff8
mov byte [ebp - 4], 0x16
cmp dword [ebp - 0x28], 0x30dc
jge 0x100350ab
mov edx, str.olkklr_upbrtmro_bjfpvfk_hnfhs_fqcdww_uwlwynzf_cffg_vxtny_btpupv_trup_aafrwlvt_naat_xvn_vxkfg
mov ecx, 0x10079a18
call fcn.10012762
jmp 0x100350ab
push 4
lea ecx, [ebp - 0x11c]
mov dword [ebp - 4], 0x15
call fcn.1000f845
mov dword [ebp - 0x2c], ebx
mov dword [ebp - 0x18], ebx
jmp 0x100350da
mov ecx, dword [ebp - 0x18]
mov eax, dword [ebp - 0x11c]
mov dword [eax + ecx*4], 0x9314e764
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], 4
jl 0x100350c7
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x2c]
dec dword [ebp - 0x2c]
test eax, eax
jne 0x100350f6
cmp dword [ebp - 0x2c], ebx
jne 0x100350f6
mov eax, ebx
jmp 0x100350f9
xor eax, eax
inc eax
mov dword [ebp - 0x30], 4
mov dword [ebp - 0x28], eax
mov ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 0x20]
mov esi, dword [ebp - 0x28]
imul esi, dword [ebp - 0x30]
mov eax, dword [ebp - 0x94]
add esi, dword [eax + ecx*4]
imul esi, dword [eax + edx*4]
xor edx, edx
mov eax, dword [ebp - 0xd0]
cmp esi, dword [eax]
mov eax, dword [ebp - 0x20]
setge dl
xor ecx, ecx
cmp edx, eax
mov eax, dword [ebp - 0x94]
setle cl
xor edx, edx
cmp ecx, 0xffff
setne dl
xor ecx, ecx
cmp edx, dword [eax + 8]
mov eax, dword [ebp - 0x11c]
setl cl
xor edx, edx
imul ecx, dword [eax + 8]
mov dword [ebp - 0x28], ecx
mov esi, dword [ebp - 0x20]
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x94]
mov edi, dword [ebp - 0xd0]
cmp eax, dword [ecx]
setl dl
xor eax, eax
cmp dword [ecx + esi*4], edx
setl al
xor ecx, ecx
imul eax, dword [edi + 4]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x34]
cmp dword [ebp - 0x28], eax
setg cl
mov dword [ebp - 0x28], ecx
xor ecx, ecx
mov eax, dword [ebp - 0x28]
cmp eax, dword [edi + 4]
setle cl
sub ecx, 0xfffffffb
neg ecx
sbb ecx, ecx
inc ecx
mov dword [edi + 4], ecx
lea ecx, [ebp - 0x11c]
call fcn.1000f91b
dec dword [ebp - 0x20]
jmp 0x1003500e
cmp dword [ebp - 0x24], 0x61b9
jge 0x100351cb
push dword [ebp - 0x38]
call fcn.10045b49
pop ecx
lea ecx, [ebp - 0xd0]
mov dword [ebp - 4], 0x15
call fcn.1000f91b
lea ecx, [ebp - 0x94]
mov byte [ebp - 4], 0x11
call fcn.1000f91b
push dword [ebp - 0x100]
cmp dword [ebp - 0xfc], 8
lea eax, [ebp - 0x110]
push ebx
cmovae eax, dword [ebp - 0x110]
lea ecx, [ebp - 0x1c0]
push eax
call fcn.100355f9
cmp eax, 0xffffffff
je 0x10035232
push 0xffffffffffffffff
push ebx
lea ecx, [ebp - 0x1a8]
push ecx
push 1
push eax
lea ecx, [ebp - 0x1c0]
call fcn.10012e4e
jmp 0x100351ec
push 2
mov dword [ebp - 0x38], 0xa75c19c5
mov dword [ebp - 0x18], ebx
pop ecx
jmp 0x1003524e
mov eax, dword [ebp - 0x18]
mov dword [ebp + eax*4 - 0x164], ecx
inc dword [ebp - 0x18]
cmp dword [ebp - 0x18], ecx
jl 0x10035241
mov dword [ebp - 0x28], 0x319a
cmp dword [ebp - 0x28], 0x3531
jle 0x100352ab
push ebx
push ebx
call dword [sym.imp.KERNEL32.dll_FileTimeToLocalFileTime]
mov esi, ebx
mov edi, ebx
mov ecx, edi
mov eax, esi
shl eax, cl
mov ecx, 0x10079a18
cdq
push edx
push eax
call fcn.1000f556
inc edi
cmp edi, 0x156d
jl 0x1003526f
inc esi
cmp esi, 0x7a9b
jl 0x1003526d
push 0x1cc2
push 0x616
push ebx
push 0x24b
push ebx
call dword [sym.imp.USER32.dll_GetMenuStringW]
mov dword [ebp - 0x160], 0x1124f01c
mov dword [ebp - 0x38], 0x1124f01c
mov byte [ebp - 4], 0x1a
cmp dword [ebp - 0x28], 0x2f1f
jge 0x100352f6
mov edx, str.yrb_wngbt_vrepzut_clpvxdmi_jln_stwoan_chodnesjn
mov ecx, 0x10079a18
call fcn.10012762
jmp 0x100352f6
mov dword [ebp - 4], 0x11
mov dword [ebp - 0x2c], 0x3c48
cmp dword [ebp - 0x2c], 0x3ca6
jle 0x10035372
mov esi, ebx
mov dword [ebp - 0x30], ebx
mov edi, ebx
mov ecx, ebx
mov dword [ebp - 0x28], ebx
mov eax, edi
mov dword [ebp - 0x38], ebx
cdq
idiv ecx
mov eax, esi
mov esi, ebx
mov ecx, edx
shl eax, cl
mov dword [ebp - 0x34], eax
mov ebx, eax
mov eax, esi
mov ecx, 0x10079a18
and eax, ebx
cdq
push edx
push eax
call fcn.1000f556
inc esi
cmp esi, 0x5020
jl 0x1003532e
mov ecx, dword [ebp - 0x28]
mov esi, dword [ebp - 0x30]
inc ecx
mov dword [ebp - 0x28], ecx
push 0
pop ebx
cmp ecx, 0xf03
jl 0x10035319
inc edi
cmp edi, 0x5fc4
jl 0x10035314
inc esi
mov dword [ebp - 0x30], esi
cmp esi, 0x89
jl 0x10035312
mov byte [ebp - 0x19], bl
mov byte [ebp - 4], 0x1c
cmp dword [ebp - 0x2c], 0x3a4d
jge 0x100353af
mov edx, str.arfixlq_uoyxqgzg_nmmr_ullnnf
mov ecx, 0x10079a18
call fcn.10012762
jmp 0x100353af
mov dword [ebp - 4], 0x11
cmp byte [ebp - 0x19], 0
je 0x100353c2
call dword [sym.imp.KERNEL32.dll_GetUserDefaultLCID]
mov ecx, dword [ebp - 0x78]
lea eax, [ebp - 0x1c0]
push eax
lea edx, [ebp - 0x17c]
call fcn.1003569c
pop ecx
xor esi, esi
lea ecx, [ebp - 0x1a8]
push ebx
inc esi
push esi
call fcn.100103a2
push ebx
push esi
lea ecx, [ebp - 0x110]
call fcn.100103a2
push ebx
push esi
lea ecx, [ebp - 0x1c0]
call fcn.100103a2
push ebx
push esi
lea ecx, [ebp - 0x17c]
call fcn.100103a2
mov ecx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x78]
pop edi
pop esi
mov dword fs:[0], ecx
pop ebx
mov esp, ebp
pop ebp
ret