Function at 0x10007280
Capabilities:
Check for debugger via api
Check os version
Connect pipe
Create directory
Create pipe
Delete file
Extract resource via kernel32 functions
Get hostname
Get system information on windows
Manipulate console buffer
Read .ini file
Read pipe
Set console window title
Set current directory
Write pipe

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1e4
mov dword [ebp - 0xb0], 0x10
mov eax, dword [0x10060674]
mov dword [ebp - 0xb8], eax
cmp dword [ebp + 8], 0
je 0x10007527
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_OpenFileById]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetTimeZoneInformationForYear]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_RtlUnwind]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FatalAppExitW]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_Wow64GetThreadContext]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateNamedPipeW]
push 0
call dword [sym.imp.KERNEL32.dll_CloseThreadpoolCleanupGroup]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_QueryInformationJobObject]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_QueryMemoryResourceNotification]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_ClosePrivateNamespace]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_TextOutW]
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_CreateRoundRectRgn]
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_CombineTransform]
mov ecx, dword [ebp - 0xd0]
mov dword [ebp - 0xa4], ecx
push 0
mov edx, dword [ebp - 0xa4]
push edx
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_ScrollConsoleScreenBufferW]
push 0
push 0
push 0x1006a404
push 0
push 0x1006a440
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FindNLSString]
push 0
push 0
call dword [sym.imp.GDI32.dll_RectInRegion]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateTapePartition]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetFileInformationByHandle]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_ChangeTimerQueueTimer]
push 0
push 0
call dword [sym.imp.GDI32.dll_SetEnhMetaFileBits]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetThreadIdealProcessorEx]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_EnumTimeFormatsW]
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_LineTo]
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
mov eax, dword [ebp - 0xe4]
mov ecx, dword [ebp - 0xe0]
mov dword [ebp - 0xc4], eax
mov dword [ebp - 0xc0], ecx
push 0
push 0
mov edx, dword [ebp - 0xc0]
push edx
mov eax, dword [ebp - 0xc4]
push eax
push 0
call dword [sym.imp.KERNEL32.dll_SetFilePointerEx]
push 0
call dword [sym.imp.KERNEL32.dll_TryEnterCriticalSection]
push 0
call dword [sym.imp.KERNEL32.dll_DisableThreadProfiling]
push 0
call dword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
push 0
push 0
push 0x1006a47c
push 0
push 0x1006a4b8
push 0
call dword [sym.imp.KERNEL32.dll_FindStringOrdinal]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThreadpoolWait]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSectionWhenCallbackReturns]
push 0
call dword [sym.imp.KERNEL32.dll_SetSearchPathMode]
push 0
call dword [sym.imp.GDI32.dll_CancelDC]
push 0
call dword [sym.imp.KERNEL32.dll_SetLocalTime]
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_PeekNamedPipe]
push 0
push 0
call dword [sym.imp.GDI32.dll_GetTextMetricsW]
push 0
call dword [sym.imp.KERNEL32.dll_FindVolumeClose]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_Arc]
push 0
push 0
push 0x1006a4dc
push 0
push 0
push 0x1006a514
call dword [sym.imp.KERNEL32.dll_GetTimeFormatEx]
push 0
call dword [sym.imp.KERNEL32.dll_GetActiveProcessorCount]
push 0
call dword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileSectionW]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetFileInformationByHandleEx]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateBoundaryDescriptorW]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_VirtualFree]
jmp 0x1000753a
mov ecx, 4
imul edx, ecx, 0x37
mov eax, dword [0x10060684]
mov ecx, dword [eax + edx]
mov dword [ebp + 8], ecx
mov dword [ebp - 0x60], 0
jmp 0x1000754c
mov edx, dword [ebp - 0x60]
add edx, 1
mov dword [ebp - 0x60], edx
cmp dword [ebp - 0x60], 0x100
jge 0x10007ba3
mov eax, dword [ebp - 0x60]
mov cl, byte [ebp - 0x60]
mov byte [ebp + eax - 0x1e4], cl
mov dword [ebp - 0x28], 0x159a
mov dword [ebp - 0x20], 0x21e8
mov edx, dword [ebp - 0x28]
add edx, dword [ebp - 0x20]
mov dword [ebp - 0x28], edx
mov dword [ebp - 0x40], 0
mov eax, dword [ebp - 0x20]
add eax, 0x1943
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x24], 0x221b
mov ecx, dword [ebp - 0x24]
sub ecx, dword [ebp - 0x18]
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x30], 0
mov edx, dword [ebp - 0x28]
sub edx, dword [ebp - 0x30]
mov dword [ebp - 0x28], edx
mov eax, dword [ebp - 0x18]
add eax, 0x875
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x2c], 0
mov ecx, dword [ebp - 0x28]
add ecx, dword [ebp - 0x24]
mov dword [ebp - 0x28], ecx
mov edx, dword [ebp - 0x30]
sub edx, dword [ebp - 0x2c]
mov dword [ebp - 0x30], edx
mov eax, dword [ebp - 0x40]
sub eax, dword [ebp - 0x18]
mov dword [ebp - 0x40], eax
mov ecx, dword [ebp - 0x20]
sub ecx, dword [ebp - 0x28]
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x6c], 0
jmp 0x10007605
mov edx, dword [ebp - 0x6c]
add edx, 1
mov dword [ebp - 0x6c], edx
cmp dword [ebp - 0x6c], 0x40
jge 0x10007616
mov eax, dword [ebp - 0x54]
sub eax, 1
mov dword [ebp - 0x54], eax
jmp 0x100075fc
mov ecx, dword [ebp - 0x24]
add ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x24], ecx
mov edx, dword [ebp - 0x2c]
sub edx, dword [ebp - 0x40]
mov dword [ebp - 0x2c], edx
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x2c]
mov dword [ebp - 0x28], eax
mov ecx, dword [ebp - 0x30]
add ecx, 0x2239
mov dword [ebp - 0x30], ecx
mov eax, dword [ebp - 0x18]
cdq
mov ecx, 3
idiv ecx
test edx, edx
je 0x10007657
mov edx, dword [ebp - 0x18]
add edx, 1
mov dword [ebp - 0x18], edx
jmp 0x1000763d
mov eax, dword [ebp - 0x18]
sub eax, 0xa17
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x24]
add ecx, dword [ebp - 0x20]
mov dword [ebp - 0x24], ecx
mov edx, dword [ebp - 0x30]
sub edx, dword [ebp - 0x18]
mov dword [ebp - 0x30], edx
mov eax, dword [ebp - 0x20]
sub eax, dword [ebp - 0x40]
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x18]
sub ecx, 0x26b5
mov dword [ebp - 0x18], ecx
mov edx, dword [ebp - 0x30]
sub edx, dword [ebp - 0x18]
mov dword [ebp - 0x30], edx
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x24]
mov dword [ebp - 0x28], eax
mov ecx, dword [ebp - 0x2c]
add ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x2c], ecx
mov edx, dword [ebp - 0x20]
add edx, dword [ebp - 0x24]
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x20]
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x28]
add ecx, 0x9ec
mov dword [ebp - 0x28], ecx
mov edx, dword [ebp - 0x28]
add edx, dword [ebp - 0x28]
mov dword [ebp - 0x28], edx
mov eax, dword [ebp - 0x2c]
add eax, 0x35c
mov dword [ebp - 0x2c], eax
mov ecx, dword [ebp - 0x30]
sub ecx, 0x1835
mov dword [ebp - 0x30], ecx
mov edx, dword [ebp - 0x40]
add edx, 0x186c
mov dword [ebp - 0x40], edx
mov eax, dword [ebp - 0x30]
sub eax, 0xdb0
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp - 0x18]
add ecx, 0x1957
mov dword [ebp - 0x18], ecx
mov edx, dword [ebp - 0x2c]
sub edx, 0xa6d
mov dword [ebp - 0x2c], edx
mov dword [ebp - 0x70], 0
jmp 0x10007723
mov eax, dword [ebp - 0x70]
add eax, 1
mov dword [ebp - 0x70], eax
cmp dword [ebp - 0x70], 0x31
jge 0x10007734
mov ecx, dword [ebp - 0x30]
sub ecx, 3
mov dword [ebp - 0x30], ecx
jmp 0x1000771a
mov edx, dword [ebp - 0x28]
add edx, dword [ebp - 0x54]
mov dword [ebp - 0x28], edx
mov eax, dword [ebp - 0x24]
sub eax, 0xe58
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x2c]
add ecx, dword [ebp - 0x40]
mov dword [ebp - 0x2c], ecx
mov edx, dword [ebp - 0x18]
add edx, 0x395
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0x24]
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x24]
sub ecx, dword [ebp - 0x40]
mov dword [ebp - 0x24], ecx
mov edx, dword [ebp - 0x2c]
sub edx, 0x19e
mov dword [ebp - 0x2c], edx
mov dword [ebp - 0x74], 0
jmp 0x1000778d
mov eax, dword [ebp - 0x74]
add eax, 1
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x74], 0x52
jge 0x1000779e
mov ecx, dword [ebp - 0x40]
sub ecx, 3
mov dword [ebp - 0x40], ecx
jmp 0x10007784
mov edx, dword [ebp - 0x28]
add edx, 0x24ac
mov dword [ebp - 0x28], edx
mov eax, dword [ebp - 0x28]
sub eax, 0x20ba
mov dword [ebp - 0x28], eax
mov ecx, dword [ebp - 0x28]
add ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x28], ecx
mov edx, dword [ebp - 0x24]
sub edx, dword [ebp - 0x18]
mov dword [ebp - 0x24], edx
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 0x2c]
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x28]
sub ecx, 0xd34
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0x78], 0
jmp 0x100077ee
mov edx, dword [ebp - 0x78]
add edx, 1
mov dword [ebp - 0x78], edx
cmp dword [ebp - 0x78], 0x31
jge 0x100077ff
mov eax, dword [ebp - 0x54]
sub eax, 3
mov dword [ebp - 0x54], eax
jmp 0x100077e5
mov ecx, dword [ebp - 0x40]
add ecx, 0x12b5
mov dword [ebp - 0x40], ecx
mov edx, dword [ebp - 0x18]
sub edx, dword [ebp - 0x30]
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 0x18]
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x24]
add ecx, 0xfb1
mov dword [ebp - 0x24], ecx
mov edx, dword [ebp - 0x30]
sub edx, 0x19a9
mov dword [ebp - 0x30], edx
mov eax, dword [ebp - 0x30]
sub eax, 0x10fb
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp - 0x24]
add ecx, dword [ebp - 0x30]
mov dword [ebp - 0x24], ecx
mov edx, dword [ebp - 0x30]
add edx, 0x24e0
mov dword [ebp - 0x30], edx
mov eax, dword [ebp - 0x30]
sub eax, dword [ebp - 0x54]
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp - 0x18]
sub ecx, dword [ebp - 0x24]
mov dword [ebp - 0x18], ecx
mov edx, dword [ebp - 0x20]
add edx, dword [ebp - 0x24]
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 0x24]
add eax, 0x382
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x28]
sub ecx, 0x1cea
mov dword [ebp - 0x28], ecx
mov edx, dword [ebp - 0x2c]
sub edx, dword [ebp - 0x20]
mov dword [ebp - 0x2c], edx
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x24]
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x24]
add ecx, 0x26b0
mov dword [ebp - 0x24], ecx
mov edx, dword [ebp - 0x2c]
add edx, dword [ebp - 0x20]
mov dword [ebp - 0x2c], edx
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x18]
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x7c], 0
jmp 0x100078c9
mov ecx, dword [ebp - 0x7c]
add ecx, 1
mov dword [ebp - 0x7c], ecx
cmp dword [ebp - 0x7c], 0x53
jge 0x100078da
mov edx, dword [ebp - 0x40]
sub edx, 1
mov dword [ebp - 0x40], edx
jmp 0x100078c0
mov eax, dword [ebp - 0x20]
sub eax, dword [ebp - 0x24]
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x30]
sub ecx, 0x14ac
mov dword [ebp - 0x30], ecx
mov edx, dword [ebp - 0x28]
sub edx, dword [ebp - 0x40]
mov dword [ebp - 0x28], edx
mov eax, dword [ebp - 0x18]
sub eax, 0x378
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x30]
sub ecx, 0x1be0
mov dword [ebp - 0x30], ecx
mov edx, dword [ebp - 0x18]
sub edx, 0xf56
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x30]
sub eax, 0xb69
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp - 0x20]
add ecx, 0x1616
mov dword [ebp - 0x20], ecx
mov edx, dword [ebp - 0x20]
add edx, 0x8a3
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 0x40]
add eax, dword [ebp - 0x18]
mov dword [ebp - 0x40], eax
mov ecx, dword [ebp - 0x2c]
add ecx, 0xe5f
mov dword [ebp - 0x2c], ecx
mov edx, dword [ebp - 0x2c]
and edx, 0x80000001
jns 0x10007963
dec edx
or edx, 0xfffffffe
inc edx
test edx, edx
je 0x10007972
mov eax, dword [ebp - 0x2c]
add eax, 1
mov dword [ebp - 0x2c], eax
jmp 0x10007953
mov ecx, dword [ebp - 0x24]
add ecx, dword [ebp - 0x40]
mov dword [ebp - 0x24], ecx
mov edx, dword [ebp - 0x2c]
add edx, 0x3d5
mov dword [ebp - 0x2c], edx
mov eax, dword [ebp - 0x24]
and eax, 0x80000001
jns 0x10007996
dec eax
or eax, 0xfffffffe
inc eax
test eax, eax
je 0x100079a5
mov ecx, dword [ebp - 0x24]
add ecx, 1
mov dword [ebp - 0x24], ecx
jmp 0x10007987
mov edx, dword [ebp - 0x40]
add edx, dword [ebp - 0x54]
mov dword [ebp - 0x40], edx
mov eax, dword [ebp - 0x2c]
sub eax, 0x1e12
mov dword [ebp - 0x2c], eax
mov ecx, dword [ebp - 0x28]
add ecx, dword [ebp - 0x40]
mov dword [ebp - 0x28], ecx
mov edx, dword [ebp - 0x28]
add edx, 0x2645
mov dword [ebp - 0x28], edx
mov eax, dword [ebp - 0x28]
sub eax, 0x18e9
mov dword [ebp - 0x28], eax
mov ecx, dword [ebp - 0x18]
and ecx, 0x80000003
jns 0x100079e9
dec ecx
or ecx, 0xfffffffc
inc ecx
test ecx, ecx
je 0x100079fb
mov edx, dword [ebp - 0x18]
add edx, 0x1ef1
mov dword [ebp - 0x18], edx
jmp 0x10007a06
mov eax, dword [ebp - 0x18]
sub eax, 0x1ef1
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x20]
sub ecx, 0x17c7
mov dword [ebp - 0x20], ecx
mov edx, dword [ebp - 0x24]
add edx, dword [ebp - 0x2c]
mov dword [ebp - 0x24], edx
mov eax, dword [ebp - 0x20]
add eax, 0x71
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x30]
sub ecx, dword [ebp - 0x40]
mov dword [ebp - 0x30], ecx
mov edx, dword [ebp - 0x18]
sub edx, 0x22f9
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0x28]
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x2c]
add ecx, 0xc17
mov dword [ebp - 0x2c], ecx
mov eax, dword [ebp - 0x24]
cdq
mov ecx, 3
idiv ecx
test edx, edx
je 0x10007a68
mov edx, dword [ebp - 0x24]
add edx, 1
mov dword [ebp - 0x24], edx
jmp 0x10007a4e
mov eax, dword [ebp - 0x2c]
add eax, 0xc6a
mov dword [ebp - 0x2c], eax
mov ecx, dword [ebp - 0x30]
add ecx, dword [ebp - 0x40]
mov dword [ebp - 0x30], ecx
mov edx, dword [ebp - 0x2c]
add edx, 0x1c7f
mov dword [ebp - 0x2c], edx
mov eax, dword [ebp - 0x2c]
sub eax, dword [ebp - 0x28]
mov dword [ebp - 0x2c], eax
mov ecx, dword [ebp - 0x28]
sub ecx, 0x36c
mov dword [ebp - 0x28], ecx
mov edx, dword [ebp - 0x30]
add edx, dword [ebp - 0x40]
mov dword [ebp - 0x30], edx
mov eax, dword [ebp - 0x40]
sub eax, 0x441
mov dword [ebp - 0x40], eax
mov ecx, dword [ebp - 0x20]
and ecx, 0x80000001
jns 0x10007ac1
dec ecx
or ecx, 0xfffffffe
inc ecx
test ecx, ecx
je 0x10007ad0
mov edx, dword [ebp - 0x20]
add edx, 1
mov dword [ebp - 0x20], edx
jmp 0x10007ab1
mov eax, dword [ebp - 0x20]
sub eax, dword [ebp - 0x20]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x18]
cdq
mov ecx, 3
idiv ecx
test edx, edx
je 0x10007af3
mov edx, dword [ebp - 0x18]
add edx, 1
mov dword [ebp - 0x18], edx
jmp 0x10007ad9
mov eax, dword [ebp - 0x28]
add eax, 0x1a4b
mov dword [ebp - 0x28], eax
mov ecx, dword [ebp - 0x18]
sub ecx, dword [ebp - 0x30]
mov dword [ebp - 0x18], ecx
mov edx, dword [ebp - 0x20]
sub edx, 0x132
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 0x2c]
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x20]
add ecx, dword [ebp - 0x18]
mov dword [ebp - 0x20], ecx
mov edx, dword [ebp - 0x40]
add edx, dword [ebp - 0x20]
mov dword [ebp - 0x40], edx
mov eax, dword [ebp - 0x24]
sub eax, 0x450
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x18]
sub ecx, 0xb56
mov dword [ebp - 0x18], ecx
mov edx, dword [ebp - 0x20]
add edx, dword [ebp - 0x20]
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 0x2c]
sub eax, dword [ebp - 0x20]
mov dword [ebp - 0x2c], eax
mov ecx, dword [ebp - 0x18]
sub ecx, 0x20f0
mov dword [ebp - 0x18], ecx
mov edx, dword [ebp - 0x40]
sub edx, dword [ebp - 0x24]
mov dword [ebp - 0x40], edx
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x40]
mov dword [ebp - 0x28], eax
mov ecx, dword [ebp - 0x2c]
sub ecx, 0x2517
mov dword [ebp - 0x2c], ecx
mov edx, dword [ebp - 0x24]
sub edx, dword [ebp - 0x54]
mov dword [ebp - 0x24], edx
mov eax, dword [ebp - 0x18]
add eax, 0x21bc
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x20]
sub ecx, dword [ebp - 0x28]
mov dword [ebp - 0x20], ecx
jmp 0x10007543
mov edx, 4
shl edx, 5
mov eax, dword [0x10060668]
mov ecx, dword [eax + edx]
mov dword [ebp + 0xc], ecx
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x5c], 0
jmp 0x10007bcf
mov edx, dword [ebp - 0x5c]
add edx, 1
mov dword [ebp - 0x5c], edx
cmp dword [ebp - 0x5c], 0x100
jge 0x100087fa
mov eax, dword [0x1003fb04]
xor ecx, ecx
mov dword [ebp - 0xcc], eax
mov dword [ebp - 0xc8], ecx
cmp dword [ebp - 0xcc], 0x9de60c75
jne 0x10007e08
cmp dword [ebp - 0xc8], 0
jne 0x10007e08
push 0
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_GetTextExtentExPointW]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetProcessShutdownParameters]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FlsSetValue]
push 0
call dword [sym.imp.KERNEL32.dll_SetCommBreak]
call dword [sym.imp.KERNEL32.dll_CreateThreadpoolCleanupGroup]
push 0
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_GetPaletteEntries]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CallNamedPipeW]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_InitOnceBeginInitialize]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileStructW]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_MapViewOfFileExNuma]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_UnlockFile]
push 0
call dword [sym.imp.KERNEL32.dll_CloseThreadpoolIo]
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_LineDDA]
push 0
call dword [sym.imp.KERNEL32.dll_LocalSize]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateDirectoryTransactedW]
push 0
call dword [sym.imp.KERNEL32.dll_UnregisterWait]
push 0
call dword [sym.imp.GDI32.dll_CreateCompatibleDC]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_InitOnceBeginInitialize]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CheckRemoteDebuggerPresent]
push 0
call dword [sym.imp.KERNEL32.dll_SetCommBreak]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SleepConditionVariableSRW]
push 0
call dword [sym.imp.GDI32.dll_AddFontResourceW]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetPriorityClass]
push 0
call dword [sym.imp.KERNEL32.dll_DebugSetProcessKillOnExit]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetTapeParameters]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WriteConsoleW]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_InterlockedPushListSListEx]
mov edx, dword [ebp - 0xd4]
mov dword [ebp - 0xa8], edx
mov eax, dword [ebp - 0xd8]
mov dword [ebp - 0xac], eax
push 0
mov ecx, dword [ebp - 0xa8]
push ecx
mov edx, dword [ebp - 0xac]
push edx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WriteConsoleOutputW]
push 0
push 0
call dword [sym.imp.GDI32.dll_GetWorldTransform]
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_GetEnhMetaFileDescriptionW]
call dword [sym.imp.KERNEL32.dll_GetLastError]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
push 0
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push 0
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_CreateEllipticRgn]
push 0
call dword [sym.imp.KERNEL32.dll_IsBadCodePtr]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetComputerNameW]
push 0
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push 0
call dword [sym.imp.KERNEL32.dll_LocalLock]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetApplicationRecoveryCallback]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetProfileStringW]
mov eax, dword [ebp - 0x5c]
movzx ecx, byte [ebp + eax - 0x1e4]
add ecx, dword [ebp - 0x58]
mov eax, dword [ebp - 0x5c]
cdq
idiv dword [ebp - 0xb0]
mov eax, dword [ebp + 0xc]
movzx edx, byte [eax + edx]
add ecx, edx
and ecx, 0x800000ff
jns 0x10007e39
dec ecx
or ecx, 0xffffff00
inc ecx
mov dword [ebp - 0x58], ecx
mov dword [ebp - 4], 0x7a1
mov dword [ebp - 0xc], 0x24f9
mov eax, dword [ebp - 4]
add eax, dword [ebp - 0xc]
mov dword [ebp - 4], eax
mov dword [ebp - 0x48], 0x14ee
mov ecx, dword [ebp - 0xc]
add ecx, dword [ebp - 0x48]
mov dword [ebp - 0xc], ecx
mov dword [ebp - 0x10], 0x1610
mov edx, dword [ebp - 0xc]
add edx, 0x4ef
mov dword [ebp - 0xc], edx
mov dword [ebp - 8], 0
mov dword [ebp - 0x14], 0xa14
mov eax, dword [ebp - 4]
add eax, dword [ebp - 0x48]
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
add ecx, dword [ebp - 0x14]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 0x10]
sub edx, dword [ebp - 8]
mov dword [ebp - 0x10], edx
mov dword [ebp - 0x80], 0
jmp 0x10007eb1
mov eax, dword [ebp - 0x80]
add eax, 1
mov dword [ebp - 0x80], eax
cmp dword [ebp - 0x80], 0x51
jge 0x10007ec2
mov ecx, dword [ebp - 8]
sub ecx, 6
mov dword [ebp - 8], ecx
jmp 0x10007ea8
mov edx, dword [ebp - 0xc]
add edx, 0x8b1
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 0x10]
sub eax, 0x902
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x84], 0
jmp 0x10007ef4
mov ecx, dword [ebp - 0x84]
add ecx, 1
mov dword [ebp - 0x84], ecx
cmp dword [ebp - 0x84], 0x60
jge 0x10007f08
mov edx, dword [ebp - 0x14]
add edx, 5
mov dword [ebp - 0x14], edx
jmp 0x10007ee5
mov eax, dword [ebp - 0x10]
sub eax, dword [ebp - 0xc]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0xc]
sub ecx, 0x656
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 0x14]
add edx, 0x1965
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 8]
add eax, 0xe8d
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 4]
add ecx, 0x1bdb
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 4]
add edx, 0x2234
mov dword [ebp - 4], edx
mov dword [ebp - 0x88], 0
jmp 0x10007f67
mov eax, dword [ebp - 0x88]
add eax, 1
mov dword [ebp - 0x88], eax
cmp dword [ebp - 0x88], 0x44
jge 0x10007f7b
mov ecx, dword [ebp - 0xc]
sub ecx, 9
mov dword [ebp - 0xc], ecx
jmp 0x10007f58
mov edx, dword [ebp - 0x10]
add edx, dword [ebp - 4]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
add eax, dword [ebp - 0x48]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
add ecx, 0x17f9
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x14]
add edx, 0x1d50
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 0xc]
add eax, dword [ebp - 4]
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0x48]
and ecx, 0x80000001
jns 0x10007fbe
dec ecx
or ecx, 0xfffffffe
inc ecx
test ecx, ecx
je 0x10007fd0
mov edx, dword [ebp - 0x48]
add edx, 0x6b2
mov dword [ebp - 0x48], edx
jmp 0x10007fdb
mov eax, dword [ebp - 0x48]
sub eax, 0x6b2
mov dword [ebp - 0x48], eax
mov ecx, dword [ebp - 0x14]
add ecx, dword [ebp - 8]
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 4]
sub edx, dword [ebp - 4]
mov dword [ebp - 4], edx
mov eax, dword [ebp - 0x10]
add eax, dword [ebp - 0xc]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0xc]
add ecx, dword [ebp - 0x14]
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 4]
sub edx, dword [ebp - 0xc]
mov dword [ebp - 4], edx
mov dword [ebp - 0x8c], 0
jmp 0x10008023
mov eax, dword [ebp - 0x8c]
add eax, 1
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 0xd
jge 0x10008037
mov ecx, dword [ebp - 8]
sub ecx, 6
mov dword [ebp - 8], ecx
jmp 0x10008014
mov edx, dword [ebp - 4]
sub edx, dword [ebp - 0x14]
mov dword [ebp - 4], edx
mov eax, dword [ebp - 0xc]
add eax, dword [ebp - 8]
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
cdq
mov ecx, 3
idiv ecx
test edx, edx
je 0x10008063
mov edx, dword [ebp - 0xc]
add edx, 1
mov dword [ebp - 0xc], edx
jmp 0x10008049
mov eax, dword [ebp - 4]
sub eax, dword [ebp - 0x48]
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 0x14]
sub ecx, dword [ebp - 8]
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0x10]
sub edx, 0xff5
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 4]
add eax, 0x13e8
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
add ecx, 0xa9e
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 0xc]
add edx, 0x235f
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 0x14]
add eax, 0x9f
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x10]
add ecx, dword [ebp - 4]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 8]
sub edx, dword [ebp - 0x48]
mov dword [ebp - 8], edx
mov eax, dword [ebp - 0xc]
add eax, 0xd49
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0xc]
add ecx, dword [ebp - 0x10]
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 0xc]
sub edx, dword [ebp - 0x14]
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 8]
and eax, 0x80000001
jns 0x100080ed
dec eax
or eax, 0xfffffffe
inc eax
test eax, eax
je 0x100080fd
mov ecx, dword [ebp - 8]
add ecx, 0x1d67
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 0x10]
add edx, dword [ebp - 4]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0xc]
add eax, dword [ebp - 0x48]
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 4]
sub ecx, 0xaeb
mov dword [ebp - 4], ecx
mov eax, dword [ebp - 4]
cdq
mov ecx, 3
idiv ecx
test edx, edx
je 0x10008135
mov edx, dword [ebp - 4]
add edx, 1
mov dword [ebp - 4], edx
jmp 0x1000811b
mov eax, dword [ebp - 0xc]
sub eax, dword [ebp - 0xc]
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0xc]
sub ecx, dword [ebp - 0x10]
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 8]
add edx, dword [ebp - 8]
mov dword [ebp - 8], edx
mov eax, dword [ebp - 0xc]
sub eax, dword [ebp - 0x14]
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 4]
sub ecx, 0x164e
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 8]
add edx, 0xeb2
mov dword [ebp - 8], edx
mov eax, dword [ebp - 0xc]
sub eax, dword [ebp - 4]
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0x10]
add ecx, 0x2e5
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
sub edx, dword [ebp - 0x48]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
sub eax, dword [ebp - 0x10]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x14]
add ecx, dword [ebp - 0x14]
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0xc]
sub edx, dword [ebp - 0xc]
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 4]
add eax, dword [ebp - 0x14]
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
sub ecx, dword [ebp - 8]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 0x10]
add edx, 0x152d
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0xc]
sub eax, dword [ebp - 8]
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 4]
sub ecx, dword [ebp - 0x10]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 4]
sub edx, dword [ebp - 4]
mov dword [ebp - 4], edx
mov eax, dword [ebp - 0x14]
cdq
mov ecx, 3
idiv ecx
test edx, edx
je 0x10008200
mov edx, dword [ebp - 0x14]
sub edx, 0x2172
mov dword [ebp - 0x14], edx
jmp 0x1000820b
mov eax, dword [ebp - 0x14]
add eax, 0x2172
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 8]
add ecx, dword [ebp - 0x10]
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 0x14]
sub edx, 0x53c
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 8]
sub eax, 0x387
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 0x10]
add ecx, dword [ebp - 0x10]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 4]
add edx, 0x5ab
mov dword [ebp - 4], edx
mov eax, dword [ebp - 0x10]
sub eax, dword [ebp - 4]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 4]
add ecx, 0x1b88
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 4]
add edx, dword [ebp - 0x48]
mov dword [ebp - 4], edx
mov eax, dword [ebp - 0x14]
sub eax, 0xef7
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x14]
add ecx, 0xba
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 8]
add edx, 0x1c93
mov dword [ebp - 8], edx
mov eax, dword [ebp - 0x10]
add eax, 0x2643
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x14]
sub ecx, 0x26d9
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 4]
sub edx, 0x1df2
mov dword [ebp - 4], edx
mov eax, dword [ebp - 0xc]
sub eax, 0x16a1
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0xc]
sub ecx, dword [ebp - 0x10]
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 0x14]
add edx, 0x21e6
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 8]
sub eax, 0x3ec
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 0x14]
sub ecx, 0x1a83
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0x10]
add edx, 0x24e2
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x14]
sub eax, 0x11e3
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 4]
add ecx, dword [ebp - 4]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 0xc]
add edx, dword [ebp - 8]
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 0xc]
add eax, 0x1e4
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 8]
sub ecx, dword [ebp - 4]
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 8]
sub edx, 0x121f
mov dword [ebp - 8], edx
mov eax, dword [ebp - 0xc]
add eax, dword [ebp - 0x10]
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 8]
sub ecx, 0x11f5
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 8]
sub edx, dword [ebp - 4]
mov dword [ebp - 8], edx
mov eax, dword [ebp - 0xc]
add eax, 0xf6e
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0x10]
add ecx, 0x526
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0xc]
add edx, 0x255
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 0x10]
add eax, 0x204e
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 4]
add ecx, dword [ebp - 4]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 0x10]
sub edx, 0x3eb
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 4]
add eax, 0x22ca
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 0x14]
sub ecx, 0xb26
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0x10]
sub edx, 0x1704
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0xc]
add eax, dword [ebp - 0xc]
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0x14]
add ecx, dword [ebp - 4]
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0x14]
add edx, 0x818
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 4]
sub eax, 0x2609
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 0x14]
sub ecx, 0x12da
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0x14]
sub edx, 0x1b23
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 4]
add eax, dword [ebp - 0xc]
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 0xc]
sub ecx, 0x1c
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 8]
sub edx, dword [ebp - 0x10]
mov dword [ebp - 8], edx
mov eax, dword [ebp - 4]
sub eax, dword [ebp - 0x14]
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 8]
add ecx, dword [ebp - 0xc]
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 8]
sub edx, dword [ebp - 0x48]
mov dword [ebp - 8], edx
mov eax, dword [ebp - 0x14]
add eax, 0x234a
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 8]
add ecx, 0x2ce
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 0x10]
add edx, 0xb27
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x48]
and eax, 0x80000001
jns 0x10008451
dec eax
or eax, 0xfffffffe
inc eax
test eax, eax
je 0x10008460
mov ecx, dword [ebp - 0x48]
add ecx, 1
mov dword [ebp - 0x48], ecx
jmp 0x10008442
mov edx, dword [ebp - 4]
add edx, 0x24ac
mov dword [ebp - 4], edx
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x48]
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x14]
sub ecx, dword [ebp - 4]
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0x10]
and edx, 0x80000001
jns 0x1000848e
dec edx
or edx, 0xfffffffe
inc edx
test edx, edx
je 0x1000849d
mov eax, dword [ebp - 0x10]
sub eax, 0x10f9
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 8]
sub ecx, 0x806
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 4]
sub edx, dword [ebp - 0x48]
mov dword [ebp - 4], edx
mov eax, dword [ebp - 8]
add eax, 0x1684
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 0xc]
add ecx, 0xf3d
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 0x10]
add edx, dword [ebp - 0x48]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 8]
add eax, dword [ebp - 8]
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 0xc]
sub ecx, 0x2417
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 4]
add edx, 0x2565
mov dword [ebp - 4], edx
mov eax, dword [ebp - 4]
add eax, 0x209f
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 0xc]
add ecx, dword [ebp - 0x48]
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 0x10]
add edx, dword [ebp - 0x14]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
sub eax, dword [ebp - 0x10]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 4]
cdq
mov ecx, 3
idiv ecx
test edx, edx
je 0x10008533
mov edx, dword [ebp - 4]
add edx, 1
mov dword [ebp - 4], edx
jmp 0x10008519
mov eax, dword [ebp - 8]
sub eax, 0x24f9
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 8]
sub ecx, 0x5fc
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 0x10]
sub edx, dword [ebp - 0x48]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
sub eax, dword [ebp - 8]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 4]
sub ecx, dword [ebp - 0x48]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 8]
add edx, dword [ebp - 0x14]
mov dword [ebp - 8], edx
mov eax, dword [ebp - 8]
add eax, dword [ebp - 8]
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 8]
sub ecx, 0xcf7
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 4]
add edx, 0x25ca
mov dword [ebp - 4], edx
mov eax, dword [ebp - 0xc]
sub eax, 0xbb1
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0x10]
sub ecx, 0x1912
mov dword [ebp - 0x10], ecx
mov eax, dword [ebp - 4]
cdq
mov ecx, 3
idiv ecx
test edx, edx
je 0x100085c0
mov edx, dword [ebp - 4]
add edx, 1
mov dword [ebp - 4], edx
jmp 0x100085a6
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0xc]
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 4]
add ecx, dword [ebp - 4]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 8]
add edx, dword [ebp - 8]
mov dword [ebp - 8], edx
mov eax, dword [ebp - 8]
sub eax, 0x1bd
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 4]
add ecx, 0x12b3
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 8]
add edx, 0xe5
mov dword [ebp - 8], edx
mov eax, dword [ebp - 8]
and eax, 0x80000003
jns 0x1000860d
dec eax
or eax, 0xfffffffc
inc eax
test eax, eax
je 0x10008625
cmp dword [ebp - 8], 0
jle 0x10008625
mov ecx, dword [ebp - 8]
add ecx, 0x23d
mov dword [ebp - 8], ecx
jmp 0x10008631
mov edx, dword [ebp - 8]
sub edx, 0x23d
mov dword [ebp - 8], edx
mov eax, dword [ebp - 0x10]
sub eax, dword [ebp - 0xc]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x1f89
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0xc]
add edx, dword [ebp - 0x14]
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 0xc]
add eax, 0x2466
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 8]
sub ecx, 0x1285
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 0xc]
add edx, 0xb08
mov dword [ebp - 0xc], edx
mov dword [ebp - 0x90], 0
jmp 0x1000868d
mov eax, dword [ebp - 0x90]
add eax, 1
mov dword [ebp - 0x90], eax
cmp dword [ebp - 0x90], 0x58
jge 0x100086a1
mov ecx, dword [ebp - 0x14]
sub ecx, 9
mov dword [ebp - 0x14], ecx
jmp 0x1000867e
mov edx, dword [ebp - 8]
add edx, 0x1817
mov dword [ebp - 8], edx
mov eax, dword [ebp - 4]
sub eax, 0x1c1f
mov dword [ebp - 4], eax
mov dword [ebp - 0x94], 0
jmp 0x100086d3
mov ecx, dword [ebp - 0x94]
add ecx, 1
mov dword [ebp - 0x94], ecx
cmp dword [ebp - 0x94], 0xa
jge 0x100086e7
mov edx, dword [ebp - 0x14]
sub edx, 8
mov dword [ebp - 0x14], edx
jmp 0x100086c4
mov eax, dword [ebp - 0xc]
sub eax, 0x1dc7
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 8]
sub ecx, dword [ebp - 0x14]
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 4]
sub edx, dword [ebp - 0xc]
mov dword [ebp - 4], edx
mov dword [ebp - 0x98], 0
jmp 0x1000871f
mov eax, dword [ebp - 0x98]
add eax, 1
mov dword [ebp - 0x98], eax
cmp dword [ebp - 0x98], 0xb
jge 0x10008733
mov ecx, dword [ebp - 0x10]
sub ecx, 5
mov dword [ebp - 0x10], ecx
jmp 0x10008710
mov edx, dword [ebp - 8]
add edx, 0x1bc9
mov dword [ebp - 8], edx
mov eax, dword [ebp - 0xc]
sub eax, 0x370
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 4]
add ecx, dword [ebp - 0x14]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 0x14]
add edx, dword [ebp - 0xc]
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 0xc]
add eax, 0x453
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 8]
sub ecx, dword [ebp - 0xc]
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 0xc]
sub edx, dword [ebp - 0x14]
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 0x14]
sub eax, 0x1837
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 4]
sub ecx, dword [ebp - 4]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 8]
sub edx, dword [ebp - 0x48]
mov dword [ebp - 8], edx
mov eax, dword [ebp - 8]
add eax, 0x17cb
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 4]
sub ecx, dword [ebp - 0x10]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 0x10]
add edx, 0x1075
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 8]
cdq
mov ecx, 3
idiv ecx
test edx, edx
je 0x100087d3
mov edx, dword [ebp - 8]
sub edx, 0x22ee
mov dword [ebp - 8], edx
jmp 0x100087de
mov eax, dword [ebp - 8]
add eax, 0x22ee
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 0x58]
push ecx
mov edx, dword [ebp - 0x5c]
push edx
lea eax, [ebp - 0x1e4]
push eax
call fcn.10006aa0
add esp, 0xc
jmp 0x10007bc6
mov dword [ebp - 0x64], 0
cmp dword [0x1003fb04], 0x773b8e62
jne 0x10008a4c
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GlobalReAlloc]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetThreadContext]
push 0
call dword [sym.imp.GDI32.dll_GetDCBrushColor]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CommConfigDialogW]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FindNextStreamW]
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_GetBitmapBits]
push 0
call dword [sym.imp.KERNEL32.dll_GetConsoleHistoryInfo]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_LCIDToLocaleName]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_AddScopedPolicyIDAce]
push 0
call dword [sym.imp.KERNEL32.dll_PowerCreateRequest]
push 0
push 0
call dword [sym.imp.GDI32.dll_SetBkColor]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_QueryThreadpoolStackInformation]
push 0
call dword [sym.imp.KERNEL32.dll_AddSecureMemoryCacheCallback]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_lstrcmpW]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_EraseTape]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_SetDIBitsToDevice]
push 0
call dword [sym.imp.KERNEL32.dll_DisconnectNamedPipe]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_AddResourceAttributeAce]
push 0
push 0
call dword [sym.imp.GDI32.dll_SetROP2]
push 0
call dword [sym.imp.KERNEL32.dll_SetCurrentDirectoryW]
push 0
call dword [sym.imp.KERNEL32.dll_LocalLock]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FreeLibraryWhenCallbackReturns]
push 0
call dword [sym.imp.KERNEL32.dll_CancelWaitableTimer]
push 0
push 0
call dword [sym.imp.GDI32.dll_RestoreDC]
push 0
call dword [sym.imp.GDI32.dll_GetMapMode]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetThreadPreferredUILanguages]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetConsoleAliasesW]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_StretchDIBits]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_HeapSize]
push 0
call dword [sym.imp.KERNEL32.dll_SetThreadStackGuarantee]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_InitOnceExecuteOnce]
push 0
call dword [sym.imp.KERNEL32.dll_PulseEvent]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_EnumSystemLocalesEx]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetFileIoOverlappedRange]
push 0
call dword [sym.imp.GDI32.dll_GetTextAlign]
push 0
call dword [sym.imp.GDI32.dll_DeleteDC]
push 0
call dword [sym.imp.KERNEL32.dll_LocalLock]
push 0
call dword [sym.imp.KERNEL32.dll_SetConsoleTitleW]
push 0
call dword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
mov ecx, dword [ebp - 0xdc]
mov dword [ebp - 0xb4], ecx
push 0
mov edx, dword [ebp - 0xb4]
push edx
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WriteConsoleOutputAttribute]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SizeofResource]
push 0
call dword [sym.imp.KERNEL32.dll_CloseThreadpoolWait]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_AllocateUserPhysicalPages]
push 0
call dword [sym.imp.KERNEL32.dll_LockResource]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetProcessAffinityMask]
push 0
call dword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
push 0
push 0
call dword [sym.imp.GDI32.dll_ResetDCW]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_VirtualFreeEx]
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x68], 0
jmp 0x10008a65
mov eax, dword [ebp - 0x68]
add eax, 1
mov dword [ebp - 0x68], eax
mov ecx, dword [ebp - 0x68]
cmp ecx, dword [ebp - 0xb8]
jge 0x100091af
mov edx, dword [ebp - 0x64]
add edx, 1
and edx, 0x800000ff
jns 0x10008a8a
dec edx
or edx, 0xffffff00
inc edx
mov dword [ebp - 0x64], edx
mov dword [ebp - 0x4c], 0x13a1
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x38], 0x204e
mov eax, dword [ebp - 0x4c]
sub eax, dword [ebp - 0x38]
mov dword [ebp - 0x4c], eax
mov dword [ebp - 0x50], 0
mov dword [ebp - 0x34], 0x63d
mov dword [ebp - 0x1c], 0x12cb
mov ecx, dword [ebp - 0x38]
sub ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x38], ecx
mov dword [ebp - 0x44], 0x4a6
mov edx, dword [ebp - 0x44]
add edx, dword [ebp - 0x38]
mov dword [ebp - 0x44], edx
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x4c]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x38]
add ecx, dword [ebp - 0x4c]
mov dword [ebp - 0x38], ecx
mov edx, dword [ebp - 0x38]
add edx, dword [ebp - 0x34]
mov dword [ebp - 0x38], edx
mov eax, dword [ebp - 0x1c]
sub eax, 0x146a
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x44]
add ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x44], ecx
mov edx, dword [ebp - 0x34]
add edx, dword [ebp - 0x3c]
mov dword [ebp - 0x34], edx
mov eax, dword [ebp - 0x4c]
sub eax, dword [ebp - 0x34]
mov dword [ebp - 0x4c], eax
mov ecx, dword [ebp - 0x34]
add ecx, 0x15e8
mov dword [ebp - 0x34], ecx
mov edx, dword [ebp - 0x3c]
sub edx, 0x17e7
mov dword [ebp - 0x3c], edx
mov eax, dword [ebp - 0x38]
add eax, dword [ebp - 0x4c]
mov dword [ebp - 0x38], eax
mov ecx, dword [ebp - 0x3c]
sub ecx, dword [ebp - 0x50]
mov dword [ebp - 0x3c], ecx
mov edx, dword [ebp - 0x38]
add edx, dword [ebp - 0x38]
mov dword [ebp - 0x38], edx
mov eax, dword [ebp - 0x1c]
and eax, 0x80000001
jns 0x10008b5c
dec eax
or eax, 0xfffffffe
inc eax
test eax, eax
je 0x10008b74
cmp dword [ebp - 0x1c], 0
jle 0x10008b74
mov ecx, dword [ebp - 0x1c]
add ecx, 0x20b
mov dword [ebp - 0x1c], ecx
jmp 0x10008b80
mov edx, dword [ebp - 0x1c]
sub edx, 0x20b
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x3c]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x4c]
add ecx, dword [ebp - 0x50]
mov dword [ebp - 0x4c], ecx
mov edx, dword [ebp - 0x3c]
and edx, 0x80000001
jns 0x10008ba2
dec edx
or edx, 0xfffffffe
inc edx
test edx, edx
je 0x10008bb1
mov eax, dword [ebp - 0x3c]
add eax, 0x2328
mov dword [ebp - 0x3c], eax
mov ecx, dword [ebp - 0x4c]
sub ecx, dword [ebp - 0x34]
mov dword [ebp - 0x4c], ecx
mov edx, dword [ebp - 0x34]
add edx, dword [ebp - 0x1c]
mov dword [ebp - 0x34], edx
mov dword [ebp - 0x9c], 0
jmp 0x10008bde
mov eax, dword [ebp - 0x9c]
add eax, 1
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 0x4e
jge 0x10008bf2
mov ecx, dword [ebp - 0x38]
sub ecx, 1
mov dword [ebp - 0x38], ecx
jmp 0x10008bcf
mov edx, dword [ebp - 0x4c]
sub edx, 0x14ea
mov dword [ebp - 0x4c], edx
mov eax, dword [ebp - 0x1c]
sub eax, 0x1129
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x34]
add ecx, 0x832
mov dword [ebp - 0x34], ecx
mov eax, dword [ebp - 0x34]
cdq
mov ecx, 3
idiv ecx
test edx, edx
je 0x10008c2f
mov edx, dword [ebp - 0x34]
add edx, 1
mov dword [ebp - 0x34], edx
jmp 0x10008c15
mov eax, dword [ebp - 0x44]
add eax, 0x7a2
mov dword [ebp - 0x44], eax
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x34]
mov dword [ebp - 0x1c], ecx
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x38]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x38]
add eax, 0x4fa
mov dword [ebp - 0x38], eax
mov ecx, dword [ebp - 0x1c]
sub ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
mov edx, dword [ebp - 0x44]
sub edx, 0x1631
mov dword [ebp - 0x44], edx
mov eax, dword [ebp - 0x44]
add eax, dword [ebp - 0x50]
mov dword [ebp - 0x44], eax
mov ecx, dword [ebp - 0x38]
sub ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x38], ecx
mov edx, dword [ebp - 0x44]
sub edx, dword [ebp - 0x1c]
mov dword [ebp - 0x44], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x50]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x34]
add ecx, 0x18d2
mov dword [ebp - 0x34], ecx
mov edx, dword [ebp - 0x38]
sub edx, 0xfe0
mov dword [ebp - 0x38], edx
mov dword [ebp - 0xa0], 0
jmp 0x10008cc3
mov eax, dword [ebp - 0xa0]
add eax, 1
mov dword [ebp - 0xa0], eax
cmp dword [ebp - 0xa0], 0x4f
jge 0x10008cd7
mov ecx, dword [ebp - 0x34]
add ecx, 4
mov dword [ebp - 0x34], ecx
jmp 0x10008cb4
mov edx, dword [ebp - 0x3c]
add edx, dword [ebp - 0x3c]
mov dword [ebp - 0x3c], edx
mov eax, dword [ebp - 0x1c]
and eax, 0x80000003
jns 0x10008cef
dec eax
or eax, 0xfffffffc
inc eax
test eax, eax
je 0x10008d05
cmp dword [ebp - 0x1c], 0
jle 0x10008d05
mov ecx, dword [ebp - 0x1c]
add ecx, 0x1b69
mov dword [ebp - 0x1c], ecx
mov edx, dword [ebp - 0x1c]
add edx, 0x14c3
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x3c]
add eax, dword [ebp - 0x34]
mov dword [ebp - 0x3c], eax
mov ecx, dword [ebp - 0x44]
add ecx, dword [ebp - 0x4c]
mov dword [ebp - 0x44], ecx
mov edx, dword [ebp - 0x34]
sub edx, 0x746
mov dword [ebp - 0x34], edx
mov eax, dword [ebp - 0x3c]
sub eax, dword [ebp - 0x44]
mov dword [ebp - 0x3c], eax
mov ecx, dword [ebp - 0x44]
sub ecx, dword [ebp - 0x3c]
mov dword [ebp - 0x44], ecx
mov edx, dword [ebp - 0x3c]
sub edx, dword [ebp - 0x34]
mov dword [ebp - 0x3c], edx
mov eax, dword [ebp - 0x38]
sub eax, dword [ebp - 0x50]
mov dword [ebp - 0x38], eax
mov ecx, dword [ebp - 0x44]
sub ecx, dword [ebp - 0x44]
mov dword [ebp - 0x44], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 3
idiv ecx
test edx, edx
je 0x10008d76
mov edx, dword [ebp - 0x1c]
add edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x10008d5c
mov eax, dword [ebp - 0x4c]
add eax, 0x1638
mov dword [ebp - 0x4c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x44]
mov dword [ebp - 0x1c], ecx
mov edx, dword [ebp - 0x1c]
add edx, 0x1055
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x38]
cdq
mov ecx, 3
idiv ecx
test edx, edx
je 0x10008db0
mov edx, dword [ebp - 0x38]
add edx, 1
mov dword [ebp - 0x38], edx
jmp 0x10008d96
mov eax, dword [ebp - 0x3c]
sub eax, 0x1a5a
mov dword [ebp - 0x3c], eax
mov ecx, dword [ebp - 0x44]
add ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x44], ecx
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x44]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x3c]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x34]
and ecx, 0x80000001
jns 0x10008de6
dec ecx
or ecx, 0xfffffffe
inc ecx
test ecx, ecx
je 0x10008df5
mov edx, dword [ebp - 0x34]
add edx, 1
mov dword [ebp - 0x34], edx
jmp 0x10008dd6
mov eax, dword [ebp - 0x34]
add eax, dword [ebp - 0x4c]
mov dword [ebp - 0x34], eax
mov ecx, dword [ebp - 0x3c]
sub ecx, 0x23f0
mov dword [ebp - 0x3c], ecx
mov edx, dword [ebp - 0x38]
add edx, dword [ebp - 0x50]
mov dword [ebp - 0x38], edx
mov eax, dword [ebp - 0x4c]
add eax, dword [ebp - 0x50]
mov dword [ebp - 0x4c], eax
mov ecx, dword [ebp - 0x38]
sub ecx, 0xb25
mov dword [ebp - 0x38], ecx
mov edx, dword [ebp - 0x4c]
add edx, dword [ebp - 0x1c]
mov dword [ebp - 0x4c], edx
mov eax, dword [ebp - 0x34]
sub eax, dword [ebp - 0x34]
mov dword [ebp - 0x34], eax
mov ecx, dword [ebp - 0x1c]
sub ecx, dword [ebp - 0x44]
mov dword [ebp - 0x1c], ecx
mov edx, dword [ebp - 0x34]
sub edx, dword [ebp - 0x3c]
mov dword [ebp - 0x34], edx
mov eax, dword [ebp - 0x50]
and eax, 0x80000001
jns 0x10008e5b
dec eax
or eax, 0xfffffffe
inc eax
test eax, eax
je 0x10008e6a
mov ecx, dword [ebp - 0x50]
add ecx, 1
mov dword [ebp - 0x50], ecx
jmp 0x10008e4c
mov edx, dword [ebp - 0x38]
add edx, 0x1284
mov dword [ebp - 0x38], edx
mov eax, dword [ebp - 0x34]
sub eax, dword [ebp - 0x34]
mov dword [ebp - 0x34], eax
mov ecx, dword [ebp - 0x4c]
add ecx, dword [ebp - 0x44]
mov dword [ebp - 0x4c], ecx
mov edx, dword [ebp - 0x44]
sub edx, dword [ebp - 0x3c]
mov dword [ebp - 0x44], edx
mov eax, dword [ebp - 0x3c]
sub eax, dword [ebp - 0x44]
mov dword [ebp - 0x3c], eax
mov ecx, dword [ebp - 0x38]
add ecx, 0xcbc
mov dword [ebp - 0x38], ecx
mov edx, dword [ebp - 0x34]
add edx, 0xf8
mov dword [ebp - 0x34], edx
mov eax, dword [ebp - 0x3c]
add eax, 0xab2
mov dword [ebp - 0x3c], eax
mov ecx, dword [ebp - 0x3c]
sub ecx, 0x649
mov dword [ebp - 0x3c], ecx
mov edx, dword [ebp - 0x38]
add edx, dword [ebp - 0x38]
mov dword [ebp - 0x38], edx
mov eax, dword [ebp - 0x64]
movzx ecx, byte [ebp + eax - 0x1e4]
add ecx, dword [ebp - 0x58]
and ecx, 0x800000ff
jns 0x10008ef0
dec ecx
or ecx, 0xffffff00
inc ecx
mov dword [ebp - 0x58], ecx
cmp dword [0x1003fb04], 0x679d8338
jne 0x10009148
push 0
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessorNumberEx]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_VirtualFree]
push 0
push 0x1006a550
push 0
call dword [sym.imp.KERNEL32.dll_IsValidNLSVersion]
push 0
call dword [sym.imp.KERNEL32.dll_SetUserGeoID]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetSystemFileCacheSize]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetComputerNameExW]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_ResetWriteWatch]
push 0
push 0
call dword [sym.imp.GDI32.dll_SetStretchBltMode]
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_LineTo]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetSystemTimeAdjustment]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_Rectangle]
push 0
call dword [sym.imp.KERNEL32.dll_GetConsoleSelectionInfo]
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_CombineTransform]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetProcessPreferredUILanguages]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetProductInfo]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SignalObjectAndWait]
push 0
call dword [sym.imp.KERNEL32.dll_FindNextChangeNotification]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetConsoleScreenBufferInfo]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_DiscardVirtualMemory]
push 0
push 0
call dword [sym.imp.GDI32.dll_GetRgnBox]
push 0
call dword [sym.imp.KERNEL32.dll_GetThreadId]
push 0
call dword [sym.imp.KERNEL32.dll_GetMemoryErrorHandlingCapabilities]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateSymbolicLinkW]
push 0
call dword [sym.imp.KERNEL32.dll_LocalFree]
call dword [sym.imp.KERNEL32.dll_GetUserDefaultLCID]
push 0
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetNamedPipeServerProcessId]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GlobalReAlloc]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetNLSVersion]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetPriorityClass]
push 0
call dword [sym.imp.KERNEL32.dll_DeleteProcThreadAttributeList]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_EnumEnhMetaFile]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetThreadTimes]
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_PolyBezier]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_MulDiv]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetFileAttributesTransactedW]
push 0
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_SetPaletteEntries]
push 0
push 0
call dword [sym.imp.GDI32.dll_SetMetaFileBitsEx]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetNamedPipeInfo]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetProductInfo]
push 0
call dword [sym.imp.KERNEL32.dll_GetMemoryErrorHandlingCapabilities]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_ReadDirectoryChangesW]
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_GetPixel]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FreeLibraryWhenCallbackReturns]
push 0
call dword [sym.imp.GDI32.dll_GetBkColor]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileSectionW]
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_ArcTo]
mov edx, dword [ebp - 0x58]
push edx
mov eax, dword [ebp - 0x64]
push eax
lea ecx, [ebp - 0x1e4]
push ecx
call fcn.10006aa0
add esp, 0xc
mov edx, dword [ebp - 0x64]
movzx eax, byte [ebp + edx - 0x1e4]
mov ecx, dword [ebp - 0x58]
movzx edx, byte [ebp + ecx - 0x1e4]
add eax, edx
and eax, 0x800000ff
jns 0x10009185
dec eax
or eax, 0xffffff00
inc eax
movzx eax, byte [ebp + eax - 0x1e4]
mov dword [ebp - 0xbc], eax
mov ecx, dword [ebp + 8]
add ecx, dword [ebp - 0x68]
movzx edx, byte [ecx]
xor edx, dword [ebp - 0xbc]
mov eax, dword [ebp + 8]
add eax, dword [ebp - 0x68]
mov byte [eax], dl
jmp 0x10008a5c
mov esp, ebp
pop ebp
ret