Function at 0x1000eeb0
Capabilities:
Enumerate files on windows
Extract resource via kernel32 functions
Get disk information
Get file size
Set console window title
Terminate process

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x8c
mov dword [ebp - 0x38], 0x1161
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x28], 0x1233
mov eax, dword [ebp - 0x30]
add eax, dword [ebp - 0x28]
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp - 0x28]
add ecx, dword [ebp - 0x30]
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x24], 0x2076
mov edx, dword [ebp - 0x24]
sub edx, dword [ebp - 0x38]
mov dword [ebp - 0x24], edx
mov dword [ebp - 0x34], 0
mov eax, dword [ebp - 0x34]
add eax, 0x111a
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x14], 0x7ad
mov ecx, dword [ebp - 0x14]
add ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x40], 0
mov edx, dword [ebp - 0x34]
sub edx, dword [ebp - 0x14]
mov dword [ebp - 0x34], edx
mov eax, dword [ebp - 0x24]
sub eax, 0x1df2
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x18], 0x1b88
mov ecx, dword [ebp - 0x18]
sub ecx, dword [ebp - 0x24]
mov dword [ebp - 0x18], ecx
mov edx, dword [ebp - 0x2c]
sub edx, dword [ebp - 0x28]
mov dword [ebp - 0x2c], edx
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x18]
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x28]
sub ecx, 0x2351
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0x44], 0
jmp 0x1000ef74
mov edx, dword [ebp - 0x44]
add edx, 1
mov dword [ebp - 0x44], edx
cmp dword [ebp - 0x44], 0x63
jge 0x1000ef85
mov eax, dword [ebp - 0x28]
sub eax, 5
mov dword [ebp - 0x28], eax
jmp 0x1000ef6b
mov ecx, dword [ebp - 0x18]
add ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], ecx
mov edx, dword [ebp - 0x28]
add edx, dword [ebp - 0x40]
mov dword [ebp - 0x28], edx
mov eax, dword [ebp - 0x14]
sub eax, 0xb09
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x34]
sub ecx, dword [ebp - 0x24]
mov dword [ebp - 0x34], ecx
mov edx, dword [ebp - 0x2c]
and edx, 0x80000001
jns 0x1000efbb
dec edx
or edx, 0xfffffffe
inc edx
test edx, edx
je 0x1000efd2
cmp dword [ebp - 0x2c], 0
jle 0x1000efd2
mov eax, dword [ebp - 0x2c]
sub eax, 0x1293
mov dword [ebp - 0x2c], eax
jmp 0x1000efde
mov ecx, dword [ebp - 0x2c]
add ecx, 0x1293
mov dword [ebp - 0x2c], ecx
mov edx, dword [ebp - 0x38]
add edx, 0x2087
mov dword [ebp - 0x38], edx
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x30]
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x18]
sub ecx, dword [ebp - 0x30]
mov dword [ebp - 0x18], ecx
mov edx, dword [ebp - 0x30]
sub edx, 0x9f2
mov dword [ebp - 0x30], edx
mov eax, dword [ebp - 0x14]
add eax, 0x108c
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x30]
sub ecx, dword [ebp - 0x24]
mov dword [ebp - 0x30], ecx
mov edx, dword [ebp - 0x2c]
add edx, dword [ebp - 0x38]
mov dword [ebp - 0x2c], edx
mov eax, dword [ebp - 0x30]
sub eax, dword [ebp - 0x18]
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp - 0x18]
and ecx, 0x80000003
jns 0x1000f03e
dec ecx
or ecx, 0xfffffffc
inc ecx
test ecx, ecx
je 0x1000f04e
mov edx, dword [ebp - 0x18]
sub edx, 0x1903
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x24]
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x26ef
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0x24]
add edx, 0xc1e
mov dword [ebp - 0x24], edx
mov eax, dword [ebp - 0x38]
add eax, 0x311
mov dword [ebp - 0x38], eax
mov ecx, dword [ebp - 0x2c]
add ecx, dword [ebp - 0x34]
mov dword [ebp - 0x2c], ecx
mov edx, dword [ebp - 0x18]
sub edx, 0x1916
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x30]
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x2c]
add ecx, 0x1e2d
mov dword [ebp - 0x2c], ecx
mov edx, dword [ebp - 0x14]
sub edx, dword [ebp - 0x18]
mov dword [ebp - 0x14], edx
mov dword [ebp - 0x48], 0
jmp 0x1000f0bf
mov eax, dword [ebp - 0x48]
add eax, 1
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0x41
jge 0x1000f0d0
mov ecx, dword [ebp - 0x2c]
sub ecx, 1
mov dword [ebp - 0x2c], ecx
jmp 0x1000f0b6
mov edx, dword [ebp - 0x30]
add edx, 0xf91
mov dword [ebp - 0x30], edx
mov eax, dword [ebp - 0x34]
sub eax, dword [ebp - 0x18]
mov dword [ebp - 0x34], eax
mov ecx, dword [ebp - 0x28]
sub ecx, 0x1ffb
mov dword [ebp - 0x28], ecx
mov edx, dword [ebp - 0x28]
sub edx, 0x266c
mov dword [ebp - 0x28], edx
mov eax, dword [ebp - 0x38]
add eax, dword [ebp - 0x14]
mov dword [ebp - 0x38], eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x1536
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0x38]
add edx, 0xd5e
mov dword [ebp - 0x38], edx
mov eax, dword [ebp - 0x14]
sub eax, 0x16ce
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x24]
add ecx, 0x6a0
mov dword [ebp - 0x24], ecx
mov edx, dword [ebp - 0x34]
add edx, 0x2469
mov dword [ebp - 0x34], edx
mov eax, dword [ebp - 0x34]
add eax, dword [ebp - 0x24]
mov dword [ebp - 0x34], eax
mov ecx, dword [ebp - 0x18]
sub ecx, dword [ebp - 0x40]
mov dword [ebp - 0x18], ecx
mov edx, dword [ebp - 0x38]
add edx, dword [ebp - 0x2c]
mov dword [ebp - 0x38], edx
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x28]
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x38]
sub ecx, 0x661
mov dword [ebp - 0x38], ecx
mov edx, dword [ebp - 0x34]
sub edx, dword [ebp - 0x14]
mov dword [ebp - 0x34], edx
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x18]
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x18]
sub ecx, dword [ebp - 0x40]
mov dword [ebp - 0x18], ecx
mov edx, dword [ebp - 0x24]
sub edx, dword [ebp - 0x28]
mov dword [ebp - 0x24], edx
mov eax, dword [ebp - 0x28]
sub eax, 0xb9
mov dword [ebp - 0x28], eax
mov ecx, dword [ebp - 0x24]
add ecx, dword [ebp - 0x18]
mov dword [ebp - 0x24], ecx
mov edx, dword [ebp - 0x28]
add edx, dword [ebp - 0x30]
mov dword [ebp - 0x28], edx
mov eax, dword [ebp - 0x2c]
cdq
mov ecx, 3
idiv ecx
test edx, edx
je 0x1000f1cc
mov edx, dword [ebp - 0x2c]
add edx, 1
mov dword [ebp - 0x2c], edx
jmp 0x1000f1b2
mov eax, dword [ebp - 0x30]
sub eax, 0x2579
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp - 0x34]
sub ecx, 0x1ef2
mov dword [ebp - 0x34], ecx
mov edx, dword [ebp - 0x30]
add edx, dword [ebp - 0x2c]
mov dword [ebp - 0x30], edx
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x38]
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x28]
sub ecx, 0x259e
mov dword [ebp - 0x28], ecx
mov edx, dword [ebp - 0x24]
and edx, 0x80000003
jns 0x1000f211
dec edx
or edx, 0xfffffffc
inc edx
test edx, edx
je 0x1000f228
cmp dword [ebp - 0x24], 0
jle 0x1000f228
mov eax, dword [ebp - 0x24]
add eax, 0x23d8
mov dword [ebp - 0x24], eax
jmp 0x1000f234
mov ecx, dword [ebp - 0x24]
sub ecx, 0x23d8
mov dword [ebp - 0x24], ecx
mov edx, dword [ebp - 0x2c]
sub edx, dword [ebp - 0x40]
mov dword [ebp - 0x2c], edx
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x24]
mov dword [ebp - 0x28], eax
mov ecx, dword [ebp - 0x30]
add ecx, dword [ebp - 0x24]
mov dword [ebp - 0x30], ecx
mov edx, dword [ebp - 0x30]
sub edx, 0x19d8
mov dword [ebp - 0x30], edx
mov eax, dword [ebp - 0x28]
sub eax, 0x2451
mov dword [ebp - 0x28], eax
mov ecx, dword [ebp - 0x28]
add ecx, dword [ebp - 0x28]
mov dword [ebp - 0x28], ecx
mov edx, dword [ebp - 0x2c]
add edx, 0x2586
mov dword [ebp - 0x2c], edx
mov eax, dword [ebp - 0x24]
sub eax, 0x2249
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x18]
and ecx, 0x80000003
jns 0x1000f296
dec ecx
or ecx, 0xfffffffc
inc ecx
test ecx, ecx
je 0x1000f2a8
mov edx, dword [ebp - 0x18]
sub edx, 0x1ee0
mov dword [ebp - 0x18], edx
jmp 0x1000f2b3
mov eax, dword [ebp - 0x18]
add eax, 0x1ee0
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x2c]
sub ecx, dword [ebp - 0x28]
mov dword [ebp - 0x2c], ecx
mov edx, dword [ebp - 0x28]
add edx, dword [ebp - 0x24]
mov dword [ebp - 0x28], edx
mov eax, dword [ebp - 0x2c]
add eax, 0x263c
mov dword [ebp - 0x2c], eax
mov ecx, dword [ebp - 0x30]
sub ecx, 0x5fc
mov dword [ebp - 0x30], ecx
mov edx, dword [ebp - 0x38]
add edx, 0x9fa
mov dword [ebp - 0x38], edx
mov eax, dword [ebp - 0x14]
add eax, 0x159d
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x14]
add ecx, dword [ebp - 0x38]
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0x18]
add edx, 0x1dfd
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x18]
add eax, 0xff0
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x34]
sub ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x34], ecx
mov edx, dword [ebp - 0x18]
add edx, dword [ebp - 0x34]
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x18]
sub eax, 0x101e
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x18]
sub ecx, 0xa77
mov dword [ebp - 0x18], ecx
mov edx, dword [ebp - 0x14]
and edx, 0x80000001
jns 0x1000f34c
dec edx
or edx, 0xfffffffe
inc edx
test edx, edx
je 0x1000f35d
mov eax, dword [ebp - 0x14]
sub eax, 0x124b
mov dword [ebp - 0x14], eax
jmp 0x1000f369
mov ecx, dword [ebp - 0x14]
add ecx, 0x124b
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0x2c]
sub edx, dword [ebp - 0x24]
mov dword [ebp - 0x2c], edx
mov eax, dword [ebp - 0x2c]
add eax, dword [ebp - 0x34]
mov dword [ebp - 0x2c], eax
mov ecx, dword [ebp - 0x24]
sub ecx, 0x1848
mov dword [ebp - 0x24], ecx
mov edx, dword [ebp - 0x38]
sub edx, 0x2151
mov dword [ebp - 0x38], edx
mov eax, dword [ebp - 0x30]
and eax, 0x80000003
jns 0x1000f3a2
dec eax
or eax, 0xfffffffc
inc eax
test eax, eax
je 0x1000f3b4
mov ecx, dword [ebp - 0x30]
add ecx, 0x187e
mov dword [ebp - 0x30], ecx
jmp 0x1000f3c0
mov edx, dword [ebp - 0x30]
sub edx, 0x187e
mov dword [ebp - 0x30], edx
mov eax, dword [ebp - 0x14]
sub eax, 0x14db
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x24]
add ecx, 0x1255
mov dword [ebp - 0x24], ecx
mov edx, dword [ebp - 0x38]
sub edx, 0x1692
mov dword [ebp - 0x38], edx
mov eax, dword [ebp - 0x2c]
add eax, 0x3d1
mov dword [ebp - 0x2c], eax
mov ecx, dword [ebp - 0x38]
sub ecx, 0x2004
mov dword [ebp - 0x38], ecx
mov edx, dword [ebp - 0x2c]
add edx, 0x1e78
mov dword [ebp - 0x2c], edx
mov eax, dword [ebp - 0x34]
add eax, 0xd63
mov dword [ebp - 0x34], eax
mov ecx, dword [ebp - 0x18]
add ecx, 0x68b
mov dword [ebp - 0x18], ecx
mov edx, dword [ebp - 0x38]
add edx, dword [ebp - 0x24]
mov dword [ebp - 0x38], edx
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x24]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x4c], 0
jmp 0x1000f441
mov ecx, dword [ebp - 0x4c]
add ecx, 1
mov dword [ebp - 0x4c], ecx
cmp dword [ebp - 0x4c], 0x33
jge 0x1000f452
mov edx, dword [ebp - 0x24]
sub edx, 6
mov dword [ebp - 0x24], edx
jmp 0x1000f438
mov eax, dword [ebp - 0x14]
sub eax, 0x1d02
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x1399
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0x18]
add edx, dword [ebp - 0x34]
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x24]
sub eax, 0x13c0
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x14]
add ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0x28]
sub edx, 0x4ea
mov dword [ebp - 0x28], edx
mov eax, dword [ebp - 0x14]
add eax, 0x2584
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x28]
and ecx, 0x80000001
jns 0x1000f4ad
dec ecx
or ecx, 0xfffffffe
inc ecx
test ecx, ecx
je 0x1000f4c3
cmp dword [ebp - 0x28], 0
jle 0x1000f4c3
mov edx, dword [ebp - 0x28]
add edx, 0x112e
mov dword [ebp - 0x28], edx
mov eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0x14]
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x38]
add ecx, 0x94e
mov dword [ebp - 0x38], ecx
mov edx, dword [ebp - 0x14]
sub edx, dword [ebp - 0x30]
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 0x14]
sub eax, 0x115f
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x34]
add ecx, 0x26d4
mov dword [ebp - 0x34], ecx
mov edx, dword [ebp - 0x34]
add edx, dword [ebp - 0x38]
mov dword [ebp - 0x34], edx
mov eax, dword [ebp - 0x14]
add eax, 0x2419
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x50], 0
jmp 0x1000f51e
mov ecx, dword [ebp - 0x50]
add ecx, 1
mov dword [ebp - 0x50], ecx
cmp dword [ebp - 0x50], 0x23
jge 0x1000f52f
mov edx, dword [ebp - 0x18]
add edx, 3
mov dword [ebp - 0x18], edx
jmp 0x1000f515
mov eax, dword [ebp - 0x38]
sub eax, 0x107b
mov dword [ebp - 0x38], eax
mov ecx, dword [ebp - 0x2c]
sub ecx, dword [ebp - 0x14]
mov dword [ebp - 0x2c], ecx
mov edx, dword [ebp - 0x18]
sub edx, dword [ebp - 0x34]
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0x14]
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x18]
sub ecx, dword [ebp - 0x40]
mov dword [ebp - 0x18], ecx
mov edx, dword [ebp - 0x28]
add edx, 0x1750
mov dword [ebp - 0x28], edx
mov eax, dword [ebp - 0x24]
add eax, 0x16b
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x30]
sub ecx, dword [ebp - 0x18]
mov dword [ebp - 0x30], ecx
mov edx, dword [ebp - 0x18]
add edx, dword [ebp - 0x14]
mov dword [ebp - 0x18], edx
mov dword [ebp - 0x54], 0
jmp 0x1000f599
mov eax, dword [ebp - 0x54]
add eax, 1
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x54], 0x60
jge 0x1000f5aa
mov ecx, dword [ebp - 0x14]
sub ecx, 8
mov dword [ebp - 0x14], ecx
jmp 0x1000f590
mov edx, dword [ebp - 0x30]
add edx, 0x13a
mov dword [ebp - 0x30], edx
mov eax, dword [ebp - 0x14]
add eax, 0x10c4
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x28]
sub ecx, 0x8ae
mov dword [ebp - 0x28], ecx
mov edx, dword [ebp - 0x28]
add edx, dword [ebp - 0x40]
mov dword [ebp - 0x28], edx
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x24]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x40]
cdq
mov ecx, 3
idiv ecx
test edx, edx
je 0x1000f5f9
mov edx, dword [ebp - 0x40]
add edx, 1
mov dword [ebp - 0x40], edx
jmp 0x1000f5df
mov eax, dword [ebp - 0x30]
sub eax, dword [ebp - 0x34]
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp - 0x18]
sub ecx, dword [ebp - 0x34]
mov dword [ebp - 0x18], ecx
mov edx, dword [ebp - 0x34]
add edx, 0xd87
mov dword [ebp - 0x34], edx
mov eax, dword [ebp - 0x34]
sub eax, dword [ebp - 0x2c]
mov dword [ebp - 0x34], eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x1ca8
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0x24]
add edx, dword [ebp - 0x14]
mov dword [ebp - 0x24], edx
cmp dword [ebp + 0xc], 1
jne 0x1001017e
mov byte [0x100d4f50], 1
push 0x1a1
push 0x1000afb0
lea eax, [ebp - 0x7c]
push eax
call fcn.10011320
add esp, 0xc
mov ecx, dword [eax + 4]
push ecx
mov edx, dword [eax]
push edx
call fcn.100115d0
add esp, 8
mov eax, dword [0x100d4f40]
xor ecx, ecx
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x68], ecx
cmp dword [ebp - 0x6c], 0xa08ca74f
jne 0x1000f7b6
cmp dword [ebp - 0x68], 0
jne 0x1000f7b6
call dword [sym.imp.KERNEL32.dll_FreeConsole]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetNamedPipeClientSessionId]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetProfileIntW]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_HeapCompact]
xor edx, edx
lock inc dword [edx]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_ConvertThreadToFiberEx]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetProcessWorkingSetSize]
push 0
call dword [sym.imp.KERNEL32.dll_SetThreadExecutionState]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_OpenSemaphoreW]
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FindFirstFileExW]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetMailslotInfo]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SleepConditionVariableSRW]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetFileSizeEx]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateHardLinkW]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_TrySubmitThreadpoolCallback]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_QueryProcessCycleTime]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SystemTimeToTzSpecificLocalTime]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetFileShortNameW]
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_ContinueDebugEvent]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetAppContainerNamedObjectPath]
push 0
call dword [sym.imp.KERNEL32.dll_GlobalAddAtomW]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WaitForThreadpoolTimerCallbacks]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSectionWhenCallbackReturns]
push 0
call dword [sym.imp.KERNEL32.dll_SetUserGeoID]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_BeginUpdateResourceW]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetDefaultCommConfigW]
push 0x1f8
push 0x100090b0
lea eax, [ebp - 0x84]
push eax
call fcn.10011320
add esp, 0xc
mov ecx, dword [eax + 4]
push ecx
mov edx, dword [eax]
push edx
call fcn.100115d0
add esp, 8
mov eax, dword [0x100d4f40]
xor ecx, ecx
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x70], ecx
cmp dword [ebp - 0x74], 0xaa2eec0b
jne 0x1000f924
cmp dword [ebp - 0x70], 0
jne 0x1000f924
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetProfileIntW]
push 0
call dword [sym.imp.KERNEL32.dll_RemoveSecureMemoryCacheCallback]
push 0
call dword [sym.imp.KERNEL32.dll_FlushConsoleInputBuffer]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SizeofResource]
call dword [sym.imp.KERNEL32.dll_GetSystemDEPPolicy]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_InitializeSynchronizationBarrier]
push 0
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetCommState]
push 0
call dword [sym.imp.KERNEL32.dll_DeleteVolumeMountPointW]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetCompressedFileSizeTransactedW]
push 0
call dword [sym.imp.KERNEL32.dll_GetDriveTypeW]
push 0
call dword [sym.imp.KERNEL32.dll_DisableThreadLibraryCalls]
push 0
call dword [sym.imp.KERNEL32.dll_SetConsoleTitleW]
push 0
call dword [sym.imp.KERNEL32.dll_UnregisterWait]
push 0
call dword [sym.imp.KERNEL32.dll_InterlockedFlushSList]
push 0
call dword [sym.imp.KERNEL32.dll_LockResource]
push 0x100de5bc
push 0
call dword [sym.imp.KERNEL32.dll_SetThreadDescription]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetEventWhenCallbackReturns]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetThreadpoolWait]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_BackupRead]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetNumaNodeProcessorMask]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_OfferVirtualMemory]
push 0
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_AddVectoredExceptionHandler]
push 0
call dword [sym.imp.KERNEL32.dll_SetUserGeoID]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetCommState]
push 0
push 0
push 0x100de5e0
call dword [sym.imp.KERNEL32.dll_OpenFile]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetCommProperties]
push 0x28c
push 0x1000a650
lea edx, [ebp - 0x8c]
push edx
call fcn.10011320
add esp, 0xc
mov ecx, dword [eax + 4]
push ecx
mov edx, dword [eax]
push edx
call fcn.100115d0
add esp, 8
mov dword [ebp - 0x10], 0x1547
mov dword [ebp - 4], 0x2676
mov eax, dword [ebp - 0x10]
add eax, dword [ebp - 4]
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x3c], 0
mov ecx, dword [ebp - 4]
sub ecx, 0x268c
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 4]
sub edx, 0x10c1
mov dword [ebp - 4], edx
mov dword [ebp - 8], 0
mov eax, dword [ebp - 4]
add eax, dword [ebp - 8]
mov dword [ebp - 4], eax
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0xc], 0x18a7
mov ecx, dword [ebp - 0xc]
add ecx, dword [ebp - 0x10]
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 4]
sub edx, dword [ebp - 4]
mov dword [ebp - 4], edx
mov eax, dword [ebp - 8]
sub eax, 0x2576
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 0xc]
add ecx, 0x1477
mov dword [ebp - 0xc], ecx
mov dword [ebp - 0x20], 0x1927
mov edx, dword [ebp - 0x20]
add edx, dword [ebp - 0x1c]
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 0x10]
sub eax, 0x22fb
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x1c]
sub ecx, dword [ebp - 4]
mov dword [ebp - 0x1c], ecx
mov edx, dword [ebp - 8]
add edx, dword [ebp - 8]
mov dword [ebp - 8], edx
mov eax, dword [ebp - 4]
add eax, 0x2360
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 0xc]
add ecx, dword [ebp - 0x10]
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 0xc]
sub edx, 0x2464
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 0x20]
sub eax, dword [ebp - 4]
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0xc]
sub ecx, dword [ebp - 0xc]
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 0xc]
add edx, dword [ebp - 0x1c]
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 0x20]
sub eax, 0x1375
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x10]
sub ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 4]
sub edx, dword [ebp - 0x1c]
mov dword [ebp - 4], edx
mov eax, dword [ebp - 0x10]
add eax, 0x171b
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x1c]
sub ecx, dword [ebp - 0x3c]
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x58], 0
jmp 0x1000fa74
mov edx, dword [ebp - 0x58]
add edx, 1
mov dword [ebp - 0x58], edx
cmp dword [ebp - 0x58], 0x14
jge 0x1000fa85
mov eax, dword [ebp - 8]
sub eax, 1
mov dword [ebp - 8], eax
jmp 0x1000fa6b
mov ecx, dword [ebp - 0x10]
add ecx, dword [ebp - 0x3c]
mov dword [ebp - 0x10], ecx
mov eax, dword [ebp - 0x10]
cdq
mov ecx, 3
idiv ecx
test edx, edx
je 0x1000faa8
mov edx, dword [ebp - 0x10]
add edx, 1
mov dword [ebp - 0x10], edx
jmp 0x1000fa8e
mov eax, dword [ebp - 8]
add eax, 0x2cc
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 4]
mov dword [ebp - 0x1c], ecx
mov edx, dword [ebp - 0x20]
sub edx, 0x49b
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 4]
add eax, dword [ebp - 0x20]
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 0x10]
add ecx, 0x696
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0xc]
add edx, 0x1418
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 0x10]
sub eax, dword [ebp - 0x10]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0xc]
sub ecx, 0x9f6
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x20]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 4]
sub eax, 0x1002
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 0x1c]
sub ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
mov edx, dword [ebp - 8]
add edx, 0x166a
mov dword [ebp - 8], edx
mov eax, dword [ebp - 8]
add eax, 0x8c0
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 4]
sub ecx, 0x68b
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 8]
sub edx, 0x1573
mov dword [ebp - 8], edx
mov eax, dword [ebp - 0xc]
sub eax, dword [ebp - 4]
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 8]
sub ecx, dword [ebp - 0x10]
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 4]
sub edx, 0x2395
mov dword [ebp - 4], edx
mov eax, dword [ebp - 8]
add eax, dword [ebp - 0xc]
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 0xc]
sub ecx, dword [ebp - 0xc]
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 0x10]
sub edx, 0x1378
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 0x20]
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0xc]
add ecx, 0x2a1
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 4]
add edx, dword [ebp - 0x20]
mov dword [ebp - 4], edx
mov eax, dword [ebp - 0x10]
sub eax, 0xe1a
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0xc]
sub ecx, dword [ebp - 8]
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 4]
sub edx, dword [ebp - 0x10]
mov dword [ebp - 4], edx
mov eax, dword [ebp - 0x10]
add eax, 0x26ea
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
sub ecx, 0xd43
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x1c]
add edx, 0x5bd
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0xc]
sub eax, 0x1b53
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0x1c]
sub ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
mov edx, dword [ebp - 0x1c]
add edx, 0x228d
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 8]
sub eax, 0x185a
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 0x3c]
and ecx, 0x80000001
jns 0x1000fc1f
dec ecx
or ecx, 0xfffffffe
inc ecx
test ecx, ecx
je 0x1000fc2e
mov edx, dword [ebp - 0x3c]
add edx, 1
mov dword [ebp - 0x3c], edx
jmp 0x1000fc0f
mov eax, dword [ebp - 4]
add eax, dword [ebp - 0x20]
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 0xc]
sub ecx, dword [ebp - 0xc]
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 0x20]
add edx, 0x240d
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 8]
cdq
mov ecx, 3
idiv ecx
test edx, edx
je 0x1000fc69
mov edx, dword [ebp - 8]
add edx, 0x1201
mov dword [ebp - 8], edx
jmp 0x1000fc74
mov eax, dword [ebp - 8]
sub eax, 0x1201
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 4]
sub ecx, 0x17a9
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 0x20]
sub edx, 0xf25
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 0x1c]
sub eax, 0xc7d
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x5c], 0
jmp 0x1000fca9
mov ecx, dword [ebp - 0x5c]
add ecx, 1
mov dword [ebp - 0x5c], ecx
cmp dword [ebp - 0x5c], 0x57
jge 0x1000fcba
mov edx, dword [ebp - 0xc]
sub edx, 5
mov dword [ebp - 0xc], edx
jmp 0x1000fca0
mov eax, dword [ebp - 0xc]
add eax, dword [ebp - 0xc]
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 8]
add ecx, 0x1afd
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 8]
add edx, dword [ebp - 0x3c]
mov dword [ebp - 8], edx
mov eax, dword [ebp - 8]
add eax, dword [ebp - 0x20]
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 4]
add ecx, dword [ebp - 8]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 4]
sub edx, 0xefe
mov dword [ebp - 4], edx
mov eax, dword [ebp - 0x10]
add eax, dword [ebp - 4]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 4]
add ecx, dword [ebp - 4]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 0xc]
sub edx, dword [ebp - 0x1c]
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 4]
add eax, 0x5a7
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 0x3c]
and ecx, 0x80000001
jns 0x1000fd2c
dec ecx
or ecx, 0xfffffffe
inc ecx
test ecx, ecx
je 0x1000fd3b
mov edx, dword [ebp - 0x3c]
add edx, 1
mov dword [ebp - 0x3c], edx
jmp 0x1000fd1c
mov eax, dword [ebp - 4]
add eax, dword [ebp - 0x20]
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 0x2348
mov dword [ebp - 0x1c], ecx
mov edx, dword [ebp - 0x1c]
add edx, 0x11e0
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0xc]
sub eax, dword [ebp - 0x1c]
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0x10]
sub ecx, dword [ebp - 0xc]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 8]
add edx, 0xdb4
mov dword [ebp - 8], edx
mov eax, dword [ebp - 8]
cdq
mov ecx, 3
idiv ecx
test edx, edx
je 0x1000fd94
mov edx, dword [ebp - 8]
add edx, 1
mov dword [ebp - 8], edx
jmp 0x1000fd7a
mov eax, dword [ebp - 0x20]
sub eax, 0x1059
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x10]
sub ecx, dword [ebp - 0x3c]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 8]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x20]
add eax, 0x18eb
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 8]
add ecx, 0x1027
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 0xc]
add edx, dword [ebp - 0x10]
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 0x1c]
add eax, 0x29c
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x20]
add ecx, dword [ebp - 0xc]
mov dword [ebp - 0x20], ecx
mov eax, dword [ebp - 8]
cdq
mov ecx, 3
idiv ecx
test edx, edx
je 0x1000fe06
cmp dword [ebp - 8], 0
jle 0x1000fe06
mov edx, dword [ebp - 8]
sub edx, 0x1cf1
mov dword [ebp - 8], edx
mov eax, dword [ebp - 4]
add eax, dword [ebp - 0x10]
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 0xc]
sub ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 0x20]
sub edx, dword [ebp - 8]
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 0x10]
sub eax, 0x3e
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
sub ecx, dword [ebp - 4]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x20]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 4]
add eax, 0x129f
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 0xc]
add ecx, 0x1152
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 8]
sub edx, dword [ebp - 8]
mov dword [ebp - 8], edx
mov eax, dword [ebp - 4]
sub eax, 0x978
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 0x20]
sub ecx, 0x26e3
mov dword [ebp - 0x20], ecx
mov eax, dword [ebp - 8]
cdq
mov ecx, 3
idiv ecx
test edx, edx
je 0x1000fe8d
mov edx, dword [ebp - 8]
add edx, 1
mov dword [ebp - 8], edx
jmp 0x1000fe73
mov eax, dword [ebp - 8]
add eax, dword [ebp - 0x20]
mov dword [ebp - 8], eax
mov dword [ebp - 0x60], 0
jmp 0x1000fea8
mov ecx, dword [ebp - 0x60]
add ecx, 1
mov dword [ebp - 0x60], ecx
cmp dword [ebp - 0x60], 0x10
jge 0x1000feb9
mov edx, dword [ebp - 0x1c]
sub edx, 6
mov dword [ebp - 0x1c], edx
jmp 0x1000fe9f
mov eax, dword [ebp - 8]
add eax, dword [ebp - 4]
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 0x10]
add ecx, 0x248d
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 4]
add edx, dword [ebp - 0x10]
mov dword [ebp - 4], edx
mov eax, dword [ebp - 0x20]
add eax, 0x2183
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 4]
add ecx, 0xfab
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 8]
add edx, 0x504
mov dword [ebp - 8], edx
mov eax, dword [ebp - 0x1c]
add eax, 0x1de8
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 4]
add ecx, dword [ebp - 0x10]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 0x20]
sub edx, dword [ebp - 4]
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 0xc]
add eax, dword [ebp - 0x3c]
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0x20]
sub ecx, dword [ebp - 0xc]
mov dword [ebp - 0x20], ecx
mov edx, dword [ebp - 0x20]
add edx, 0x852
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 0xc]
sub eax, 0xbf0
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0x20]
sub ecx, dword [ebp - 0x20]
mov dword [ebp - 0x20], ecx
mov edx, dword [ebp - 8]
add edx, dword [ebp - 0x1c]
mov dword [ebp - 8], edx
mov eax, dword [ebp - 4]
sub eax, dword [ebp - 0x10]
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 0x1c]
and ecx, 0x80000001
jns 0x1000ff6b
dec ecx
or ecx, 0xfffffffe
inc ecx
test ecx, ecx
je 0x1000ff7a
mov edx, dword [ebp - 0x1c]
add edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x1000ff5b
mov eax, dword [ebp - 0x10]
add eax, dword [ebp - 0x20]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 4]
add ecx, dword [ebp - 4]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 8]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0xc]
add eax, 0xd7f
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0x10]
add ecx, 0x239d
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 4]
add edx, dword [ebp - 0x1c]
mov dword [ebp - 4], edx
mov eax, dword [ebp - 4]
add eax, 0x25cf
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 0x1c]
sub ecx, dword [ebp - 0x3c]
mov dword [ebp - 0x1c], ecx
mov edx, dword [ebp - 4]
sub edx, dword [ebp - 0x10]
mov dword [ebp - 4], edx
mov eax, dword [ebp - 0x10]
add eax, dword [ebp - 0x1c]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0xc]
sub ecx, 0x1114
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 0xc]
add edx, dword [ebp - 0x1c]
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 4]
add eax, 0xff4
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 0xc]
sub ecx, dword [ebp - 4]
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 8]
sub edx, 0xe5c
mov dword [ebp - 8], edx
mov dword [ebp - 0x64], 0
jmp 0x10010022
mov eax, dword [ebp - 0x64]
add eax, 1
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0x4f
jge 0x10010033
mov ecx, dword [ebp - 4]
sub ecx, 9
mov dword [ebp - 4], ecx
jmp 0x10010019
mov edx, dword [ebp - 8]
sub edx, 0x10a3
mov dword [ebp - 8], edx
mov eax, dword [ebp - 0x10]
sub eax, 0x1e0a
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x20]
add ecx, 0x21c3
mov dword [ebp - 0x20], ecx
mov edx, dword [ebp - 0x20]
sub edx, dword [ebp - 0xc]
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 0x1c]
sub eax, 0x25f4
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 4]
add ecx, dword [ebp - 8]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 0xc]
sub edx, 0x2466
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 0x10]
sub eax, dword [ebp - 0x3c]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 4]
sub ecx, 0x1ea1
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 0xc]
sub edx, dword [ebp - 0x20]
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 0x20]
sub eax, 0x221f
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x10]
add ecx, 0xdfa
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x10]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0xc]
sub eax, 0xf30
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 4]
sub ecx, 0x22b
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 0xc]
add edx, dword [ebp - 8]
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 0x1c]
add eax, 0x801
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x10]
add ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
add edx, dword [ebp - 8]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 8]
and eax, 0x80000001
jns 0x10010109
dec eax
or eax, 0xfffffffe
inc eax
test eax, eax
je 0x10010118
mov ecx, dword [ebp - 8]
add ecx, 1
mov dword [ebp - 8], ecx
jmp 0x100100fa
mov edx, dword [ebp - 0xc]
sub edx, 0x1590
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 4]
and eax, 0x80000001
jns 0x10010133
dec eax
or eax, 0xfffffffe
inc eax
test eax, eax
je 0x10010142
mov ecx, dword [ebp - 4]
add ecx, 1
mov dword [ebp - 4], ecx
jmp 0x10010124
mov edx, dword [ebp - 4]
sub edx, dword [ebp - 0x3c]
mov dword [ebp - 4], edx
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 4]
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 4]
sub ecx, 0x25ef
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 0x1c]
add edx, 0x192
mov dword [ebp - 0x1c], edx
movzx eax, byte [0x100d4f50]
test eax, eax
je 0x10010179
jmp 0x1001017e
jmp 0x1000f635
mov eax, 1
mov esp, ebp
pop ebp
ret 0xc