Function at 0x10012740
Capabilities:
Accept command line arguments
Enumerate files on windows
Query environment variable
Read pipe
Set console window title
Write pipe

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xb0
mov dword [ebp - 0x88], 0x83ad971a
push 0x280
push 0x10012060
lea eax, [ebp - 0x98]
push eax
call fcn.10018790
add esp, 0xc
mov ecx, dword [eax + 4]
push ecx
mov edx, dword [eax]
push edx
call fcn.100187b0
add esp, 8
cmp dword [ebp + 0xc], 1
jne 0x1001352e
movzx eax, byte [0x100f0a94]
test eax, eax
jne 0x1001352e
lea ecx, [ebp - 0x90]
push ecx
call fcn.10019400
add esp, 4
mov dword [ebp - 0x6c], eax
mov edx, dword [ebp - 0x6c]
push edx
mov ecx, 0x100f1694
call fcn.100140d0
lea ecx, [ebp - 0x90]
call fcn.10014110
mov eax, dword [0x1008eafc]
xor ecx, ecx
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x70], ecx
cmp dword [ebp - 0x74], 0xdf8bc47f
jne 0x1001292c
cmp dword [ebp - 0x70], 0
jne 0x1001292c
push 0
push 0
call dword [sym.imp.KERNEL32.dll_AddIntegrityLabelToBoundaryDescriptor]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CheckTokenMembershipEx]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_ReleaseMutexWhenCallbackReturns]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetupComm]
push 0
call dword [sym.imp.KERNEL32.dll_ApplicationRecoveryFinished]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_AddVectoredContinueHandler]
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjectsEx]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_EnumResourceTypesExW]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_VirtualProtectEx]
push 0
push 0x100fbb78
call dword [sym.imp.KERNEL32.dll_RegisterApplicationRestart]
call dword [sym.imp.KERNEL32.dll_GetMaximumProcessorGroupCount]
push 0
push 0
push 0x100fbbb0
push 0x100fbbe8
push 0
call dword [sym.imp.KERNEL32.dll_NotifyUILanguageChange]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_TransactNamedPipe]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetConsoleCursorInfo]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SystemTimeToTzSpecificLocalTime]
push 0
call dword [sym.imp.KERNEL32.dll_SetThreadUILanguage]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThreadpoolWork]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WriteProfileSectionW]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_TransmitCommChar]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetProcessWorkingSetSizeEx]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateMutexExW]
push 0
call dword [sym.imp.KERNEL32.dll_GetFileType]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetNumaNodeProcessorMask]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_IsDBCSLeadByteEx]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WaitCommEvent]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetNumaProcessorNode]
call fcn.10003520
movzx edx, al
test edx, edx
jne 0x10012960
push 0x28a
push 0x1000f1a0
lea eax, [ebp - 0xa0]
push eax
call fcn.10018790
add esp, 0xc
mov ecx, dword [eax + 4]
push ecx
mov edx, dword [eax]
push edx
call fcn.100187b0
add esp, 8
mov eax, dword [0x1008eafc]
xor ecx, ecx
mov dword [ebp - 0x7c], eax
mov dword [ebp - 0x78], ecx
cmp dword [ebp - 0x7c], 0xda20ac3e
jne 0x10012a8a
cmp dword [ebp - 0x78], 0
jne 0x10012a8a
push 0
push 0
call dword [sym.imp.KERNEL32.dll_DiscardVirtualMemory]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetTapeParameters]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetThreadPreferredUILanguages]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetStdHandle]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_EnumResourceLanguagesW]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_VirtualProtect]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FindFirstFileW]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetNumaProcessorNodeEx]
push 0
call dword [sym.imp.KERNEL32.dll_GetStdHandle]
push 0
call dword [sym.imp.KERNEL32.dll_LocalHandle]
push 0
call dword [sym.imp.KERNEL32.dll_FreeResource]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CheckTokenMembershipEx]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_TransactNamedPipe]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetHandleInformation]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetProcessIoCounters]
push 0
call dword [sym.imp.KERNEL32.dll_PulseEvent]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetInformationJobObject]
push 0
call dword [sym.imp.KERNEL32.dll_InterlockedPopEntrySList]
xor edx, edx
xor ecx, ecx
xor eax, eax
lock cmpxchg dword [ecx], edx
call dword [sym.imp.KERNEL32.dll_IsThreadAFiber]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_LocalReAlloc]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetCommModemStatus]
push 0
call dword [sym.imp.KERNEL32.dll_SetErrorMode]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_EnumSystemLanguageGroupsW]
push 0x24c
push fcn.10003520
lea edx, [ebp - 0xa8]
push edx
call fcn.10018790
add esp, 0xc
mov ecx, dword [eax + 4]
push ecx
mov edx, dword [eax]
push edx
call fcn.100194b0
add esp, 8
mov eax, dword [0x1008eafc]
xor ecx, ecx
mov dword [ebp - 0x84], eax
mov dword [ebp - 0x80], ecx
cmp dword [ebp - 0x84], 0x95398c4e
jne 0x10012b72
cmp dword [ebp - 0x80], 0
jne 0x10012b72
push 0
call dword [sym.imp.KERNEL32.dll_GetProcessId]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
call dword [sym.imp.KERNEL32.dll_GetEnvironmentStringsW]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetSystemRegistryQuota]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FileTimeToSystemTime]
call dword [sym.imp.KERNEL32.dll_GetConsoleOutputCP]
push 0
call dword [sym.imp.KERNEL32.dll_GetSystemTime]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetDefaultCommConfigW]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WriteConsoleW]
call dword [sym.imp.KERNEL32.dll_GetOEMCP]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetNumaProximityNode]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_LocalFileTimeToFileTime]
push 0
call dword [sym.imp.KERNEL32.dll_InterlockedFlushSList]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FindFirstVolumeW]
push 0
call dword [sym.imp.KERNEL32.dll_SetConsoleTitleW]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetFileIoOverlappedRange]
mov byte [0x100f0a94], 1
mov dword [ebp - 0x10], 0x1aca
mov dword [ebp - 4], 0
mov dword [ebp - 0x14], 0x1376
mov edx, dword [ebp - 4]
add edx, 0x237
mov dword [ebp - 4], edx
mov dword [ebp - 0x28], 0
mov dword [ebp - 0x30], 0
jmp 0x10012bb3
mov eax, dword [ebp - 0x30]
add eax, 1
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0x1d
jge 0x10012bc4
mov ecx, dword [ebp - 0x28]
sub ecx, 8
mov dword [ebp - 0x28], ecx
jmp 0x10012baa
mov edx, dword [ebp - 0x14]
add edx, 0x344
mov dword [ebp - 0x14], edx
mov dword [ebp - 0xc], 0
mov eax, dword [ebp - 0xc]
cdq
mov ecx, 3
idiv ecx
test edx, edx
je 0x10012bf1
mov edx, dword [ebp - 0xc]
add edx, 1
mov dword [ebp - 0xc], edx
jmp 0x10012bd7
mov eax, dword [ebp - 4]
add eax, dword [ebp - 4]
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
add ecx, 0x1e8f
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 0x10]
sub edx, dword [ebp - 4]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0xc]
add eax, dword [ebp - 0x14]
mov dword [ebp - 0xc], eax
mov dword [ebp - 8], 0
mov ecx, dword [ebp - 0x14]
add ecx, 0x18ee
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0x14]
sub edx, 0xfac
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 8]
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0xc]
sub ecx, 0x1b94
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 0xc]
add edx, 0xb37
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 0xc]
add eax, dword [ebp - 0x10]
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 4]
add ecx, 0x1831
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 8]
add edx, dword [ebp - 0x28]
mov dword [ebp - 8], edx
mov eax, dword [ebp - 0x14]
sub eax, 0x138d
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 4]
sub ecx, dword [ebp - 4]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 0x10]
add edx, 0x1484
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 8]
add eax, dword [ebp - 0x10]
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 0xc]
add ecx, 0xc7
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 4]
sub edx, dword [ebp - 4]
mov dword [ebp - 4], edx
mov dword [ebp - 0x34], 0
jmp 0x10012cc6
mov eax, dword [ebp - 0x34]
add eax, 1
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0x17
jge 0x10012cd7
mov ecx, dword [ebp - 8]
sub ecx, 2
mov dword [ebp - 8], ecx
jmp 0x10012cbd
mov edx, dword [ebp - 8]
add edx, 0x6b3
mov dword [ebp - 8], edx
mov eax, dword [ebp - 8]
add eax, 0x26f7
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 8]
sub ecx, dword [ebp - 0xc]
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 4]
add edx, 0x2118
mov dword [ebp - 4], edx
mov eax, dword [ebp - 0xc]
add eax, 0xe7b
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 4]
cdq
mov ecx, 3
idiv ecx
test edx, edx
je 0x10012d28
mov edx, dword [ebp - 4]
add edx, 1
mov dword [ebp - 4], edx
jmp 0x10012d0e
mov eax, dword [ebp - 4]
add eax, dword [ebp - 8]
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 0x14]
sub ecx, dword [ebp - 0xc]
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0x10]
add edx, 0x758
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 8]
sub eax, dword [ebp - 0x14]
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 0xc]
add ecx, dword [ebp - 8]
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 0x14]
sub edx, 0xeff
mov dword [ebp - 0x14], edx
mov dword [ebp - 0x38], 0
jmp 0x10012d76
mov eax, dword [ebp - 0x38]
add eax, 1
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0x42
jge 0x10012d87
mov ecx, dword [ebp - 0x28]
sub ecx, 1
mov dword [ebp - 0x28], ecx
jmp 0x10012d6d
mov edx, dword [ebp - 8]
sub edx, 0x1377
mov dword [ebp - 8], edx
mov eax, dword [ebp - 0xc]
add eax, dword [ebp - 0x10]
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x40
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0x14]
sub edx, 0x324
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 0x14]
add eax, 0x1996
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x10]
sub ecx, 0x206c
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
and edx, 0x80000001
jns 0x10012dd8
dec edx
or edx, 0xfffffffe
inc edx
test edx, edx
je 0x10012def
cmp dword [ebp - 0x10], 0
jle 0x10012def
mov eax, dword [ebp - 0x10]
add eax, 0x184c
mov dword [ebp - 0x10], eax
jmp 0x10012dfb
mov ecx, dword [ebp - 0x10]
sub ecx, 0x184c
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0xc]
sub edx, 0x21c2
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 0xc]
add eax, 0x894
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 4]
add ecx, dword [ebp - 8]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 4]
add edx, 0x1dbd
mov dword [ebp - 4], edx
mov eax, dword [ebp - 4]
add eax, dword [ebp - 8]
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 8]
add ecx, 0x1ec
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 0x14]
add edx, dword [ebp - 0x28]
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 4]
add eax, dword [ebp - 0xc]
mov dword [ebp - 4], eax
mov dword [ebp - 0x3c], 0
jmp 0x10012e60
mov ecx, dword [ebp - 0x3c]
add ecx, 1
mov dword [ebp - 0x3c], ecx
cmp dword [ebp - 0x3c], 0x58
jge 0x10012e71
mov edx, dword [ebp - 0x28]
add edx, 7
mov dword [ebp - 0x28], edx
jmp 0x10012e57
mov eax, dword [ebp - 4]
add eax, 0x2336
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 0xc]
and ecx, 0x80000001
jns 0x10012e8c
dec ecx
or ecx, 0xfffffffe
inc ecx
test ecx, ecx
je 0x10012ea2
cmp dword [ebp - 0xc], 0
jle 0x10012ea2
mov edx, dword [ebp - 0xc]
add edx, 0x1f49
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 0x10]
add eax, dword [ebp - 8]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 8]
add ecx, dword [ebp - 4]
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 8]
sub edx, dword [ebp - 0x10]
mov dword [ebp - 8], edx
mov eax, dword [ebp - 8]
add eax, dword [ebp - 0x14]
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 0xc]
add ecx, 0x214b
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 8]
add edx, 0x17a8
mov dword [ebp - 8], edx
mov eax, dword [ebp - 0x10]
add eax, dword [ebp - 0x10]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
sub ecx, dword [ebp - 0x10]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
add edx, 0x1168
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0xc]
add eax, dword [ebp - 0x14]
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0x14]
add ecx, dword [ebp - 0x10]
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 8]
sub edx, dword [ebp - 0x28]
mov dword [ebp - 8], edx
mov eax, dword [ebp - 4]
add eax, 0xd94
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 0x10]
add ecx, 0x7c7
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
sub edx, 0x224
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 4]
sub eax, 0x616
mov dword [ebp - 4], eax
mov dword [ebp - 0x40], 0
jmp 0x10012f57
mov ecx, dword [ebp - 0x40]
add ecx, 1
mov dword [ebp - 0x40], ecx
cmp dword [ebp - 0x40], 0x52
jge 0x10012f68
mov edx, dword [ebp - 0xc]
sub edx, 3
mov dword [ebp - 0xc], edx
jmp 0x10012f4e
mov eax, dword [ebp - 0x10]
add eax, dword [ebp - 0x14]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 8]
sub ecx, 0xc69
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 4]
add edx, 0x560
mov dword [ebp - 4], edx
mov eax, dword [ebp - 0x10]
sub eax, dword [ebp - 0xc]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
add ecx, 0x1c2e
mov dword [ebp - 0x10], ecx
mov dword [ebp - 0x44], 0
jmp 0x10012fb0
mov edx, dword [ebp - 0x44]
add edx, 1
mov dword [ebp - 0x44], edx
cmp dword [ebp - 0x44], 0x2d
jge 0x10012fc1
mov eax, dword [ebp - 0x28]
sub eax, 2
mov dword [ebp - 0x28], eax
jmp 0x10012fa7
mov ecx, dword [ebp - 4]
sub ecx, dword [ebp - 0x10]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 8]
sub edx, dword [ebp - 8]
mov dword [ebp - 8], edx
mov eax, dword [ebp - 0x10]
sub eax, 0x22e8
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0xc]
sub ecx, dword [ebp - 0x28]
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 0x10]
sub edx, 0x211e
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0xc]
sub eax, 0xdab
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0x10]
add ecx, 0x232f
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
sub edx, 0x189
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
add eax, 0x634
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0xc]
sub ecx, 0x1d6d
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 8]
sub edx, dword [ebp - 0x14]
mov dword [ebp - 8], edx
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 4]
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x10]
sub ecx, dword [ebp - 0x28]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0xc]
add edx, 0x1fd6
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 8]
add eax, dword [ebp - 0xc]
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 4]
sub ecx, 0x16e1
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 0xc]
add edx, 0x1365
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 0x10]
add eax, 0x1f44
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x28]
cdq
mov ecx, 3
idiv ecx
test edx, edx
je 0x1001309a
mov edx, dword [ebp - 0x28]
add edx, 1
mov dword [ebp - 0x28], edx
jmp 0x10013080
mov eax, dword [ebp - 4]
add eax, 0xf0c
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
add ecx, 0xa70
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 4]
add edx, dword [ebp - 0x10]
mov dword [ebp - 4], edx
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x14]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
cdq
mov ecx, 3
idiv ecx
test edx, edx
je 0x100130dd
mov edx, dword [ebp - 0x14]
add edx, 1
mov dword [ebp - 0x14], edx
jmp 0x100130c3
mov eax, dword [ebp - 0xc]
sub eax, dword [ebp - 4]
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 4]
add ecx, 0x105b
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 4]
sub edx, dword [ebp - 0x14]
mov dword [ebp - 4], edx
mov eax, dword [ebp - 4]
add eax, dword [ebp - 0xc]
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 0x10]
sub ecx, dword [ebp - 0xc]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x14]
add edx, dword [ebp - 0x10]
mov dword [ebp - 0x14], edx
mov dword [ebp - 0x48], 0
jmp 0x10013128
mov eax, dword [ebp - 0x48]
add eax, 1
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0x4d
jge 0x10013139
mov ecx, dword [ebp - 0x14]
sub ecx, 7
mov dword [ebp - 0x14], ecx
jmp 0x1001311f
mov edx, dword [ebp - 0x10]
sub edx, dword [ebp - 4]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 8]
cdq
mov ecx, 3
idiv ecx
test edx, edx
je 0x1001315f
mov edx, dword [ebp - 8]
sub edx, 0xa70
mov dword [ebp - 8], edx
jmp 0x1001316a
mov eax, dword [ebp - 8]
add eax, 0xa70
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 4]
sub ecx, 0x293
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 4]
add edx, dword [ebp - 0x28]
mov dword [ebp - 4], edx
mov eax, dword [ebp - 8]
add eax, 0xb9b
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 0x10]
add ecx, 0x111a
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 8]
sub edx, dword [ebp - 0xc]
mov dword [ebp - 8], edx
mov eax, dword [ebp - 0x10]
add eax, dword [ebp - 4]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 8]
sub ecx, dword [ebp - 4]
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 0xc]
add edx, dword [ebp - 0x14]
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 0xc]
sub eax, 0x1f76
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 8]
add ecx, 0x1e9e
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 4]
sub edx, dword [ebp - 0x28]
mov dword [ebp - 4], edx
mov dword [ebp - 0x4c], 0
jmp 0x100131ec
mov eax, dword [ebp - 0x4c]
add eax, 1
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0x34
jge 0x100131fd
mov ecx, dword [ebp - 0x14]
sub ecx, 6
mov dword [ebp - 0x14], ecx
jmp 0x100131e3
mov edx, dword [ebp - 0xc]
sub edx, 0x518
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 0xc]
add eax, 0xae8
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0x14]
add ecx, dword [ebp - 8]
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0xc]
sub edx, 0x1d6e
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 4]
sub eax, dword [ebp - 8]
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 8]
sub ecx, dword [ebp - 0x10]
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 4]
sub edx, 0x15f5
mov dword [ebp - 4], edx
mov eax, dword [ebp - 0x14]
sub eax, 0x22fc
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 8]
sub ecx, dword [ebp - 4]
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 0x14]
sub edx, 0x1b33
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 8]
add eax, dword [ebp - 8]
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 4]
add ecx, 0x247d
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 8]
add edx, 0x18e2
mov dword [ebp - 8], edx
mov eax, dword [ebp - 0x14]
sub eax, 0x6e5
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x14]
add ecx, dword [ebp - 0x28]
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 4]
sub edx, 0x1bca
mov dword [ebp - 4], edx
mov eax, dword [ebp - 8]
add eax, dword [ebp - 8]
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 4]
add ecx, dword [ebp - 8]
mov dword [ebp - 4], ecx
mov eax, dword [ebp - 4]
cdq
mov ecx, 3
idiv ecx
test edx, edx
je 0x100132d4
mov edx, dword [ebp - 4]
add edx, 1
mov dword [ebp - 4], edx
jmp 0x100132ba
mov eax, dword [ebp - 8]
add eax, 0x168
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 0xc]
add ecx, 0x237b
mov dword [ebp - 0xc], ecx
mov dword [ebp - 0x50], 0
jmp 0x100132fd
mov edx, dword [ebp - 0x50]
add edx, 1
mov dword [ebp - 0x50], edx
cmp dword [ebp - 0x50], 0xa
jge 0x1001330e
mov eax, dword [ebp - 0xc]
add eax, 9
mov dword [ebp - 0xc], eax
jmp 0x100132f4
mov ecx, dword [ebp - 0x14]
add ecx, dword [ebp - 0x28]
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 4]
add edx, 0xe61
mov dword [ebp - 4], edx
mov eax, dword [ebp - 0xc]
add eax, dword [ebp - 0x28]
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0xc]
sub ecx, dword [ebp - 4]
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 0x10]
sub edx, 0x124f
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 8]
add eax, dword [ebp - 0xc]
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 0xc]
sub ecx, dword [ebp - 8]
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 4]
sub edx, dword [ebp - 0x10]
mov dword [ebp - 4], edx
mov eax, dword [ebp - 0x10]
add eax, dword [ebp - 8]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 8]
add ecx, 0x94d
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 0x10]
add edx, 0x1fa9
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
sub eax, 0x16b0
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x14]
add ecx, dword [ebp - 0x14]
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 8]
and edx, 0x80000003
jns 0x100133a1
dec edx
or edx, 0xfffffffc
inc edx
test edx, edx
je 0x100133b8
cmp dword [ebp - 8], 0
jle 0x100133b8
mov eax, dword [ebp - 8]
add eax, 0xa37
mov dword [ebp - 8], eax
jmp 0x100133c4
mov ecx, dword [ebp - 8]
sub ecx, 0xa37
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 0x10]
add edx, 0x18fc
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0xc]
sub eax, dword [ebp - 0xc]
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 4]
add ecx, 0x36d
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 0x14]
sub edx, dword [ebp - 8]
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x28]
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x54], 0
jmp 0x10013409
mov ecx, dword [ebp - 0x54]
add ecx, 1
mov dword [ebp - 0x54], ecx
cmp dword [ebp - 0x54], 0x59
jge 0x1001341a
mov edx, dword [ebp - 8]
add edx, 8
mov dword [ebp - 8], edx
jmp 0x10013400
mov eax, dword [ebp - 4]
sub eax, dword [ebp - 0xc]
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
sub ecx, dword [ebp - 4]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 0x14]
add edx, 0xc2a
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 4]
sub eax, 0x135f
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 0xc]
and ecx, 0x80000001
jns 0x10013453
dec ecx
or ecx, 0xfffffffe
inc ecx
test ecx, ecx
je 0x10013462
mov edx, dword [ebp - 0xc]
add edx, 1
mov dword [ebp - 0xc], edx
jmp 0x10013443
mov eax, dword [ebp - 0xc]
add eax, dword [ebp - 0x28]
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0x10]
add ecx, dword [ebp - 0x14]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
sub edx, dword [ebp - 0x28]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 4]
sub eax, 0x1a60
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 0x14]
add ecx, dword [ebp - 0x10]
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0xc]
sub edx, 0xe2e
mov dword [ebp - 0xc], edx
mov dword [ebp - 0x58], 0
jmp 0x100134af
mov eax, dword [ebp - 0x58]
add eax, 1
mov dword [ebp - 0x58], eax
cmp dword [ebp - 0x58], 0x4b
jge 0x100134c0
mov ecx, dword [ebp - 8]
add ecx, 2
mov dword [ebp - 8], ecx
jmp 0x100134a6
mov edx, dword [ebp - 4]
add edx, 0x1f95
mov dword [ebp - 4], edx
push 0x1e8
push 0x1000fa60
lea eax, [ebp - 0xb0]
push eax
call fcn.10018790
add esp, 0xc
mov ecx, dword [eax + 4]
push ecx
mov edx, dword [eax]
push edx
call fcn.100187b0
add esp, 8
cmp dword [0x1008eafc], 0x6a4476aa
jne 0x10013518
push 0x100fbc1c
mov ecx, 0x100f1694
call fcn.10018770
mov ecx, eax
call fcn.10003320
jmp 0x1001352e
push 0x100fbc30
mov ecx, 0x100f1694
call fcn.10018770
mov ecx, eax
call fcn.10003320
mov dword [ebp - 0x18], 0x17c3
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x24], 0xc9d
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 0x24]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x2c], 0
mov ecx, dword [ebp - 0x18]
sub ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x1c], 0
mov edx, dword [ebp - 0x18]
sub edx, dword [ebp - 0x20]
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x24]
sub eax, 0x6fc
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x20]
add ecx, 0x202f
mov dword [ebp - 0x20], ecx
mov edx, dword [ebp - 0x20]
sub edx, dword [ebp - 0x18]
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 0x24]
add eax, dword [ebp - 0x24]
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x5c], 0
jmp 0x100135a7
mov ecx, dword [ebp - 0x5c]
add ecx, 1
mov dword [ebp - 0x5c], ecx
cmp dword [ebp - 0x5c], 0x20
jge 0x100135b8
mov edx, dword [ebp - 0x18]
add edx, 3
mov dword [ebp - 0x18], edx
jmp 0x1001359e
mov eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0x1c]
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 0x1802
mov dword [ebp - 0x1c], ecx
mov edx, dword [ebp - 0x24]
sub edx, dword [ebp - 0x20]
mov dword [ebp - 0x24], edx
mov eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0x24]
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 0x245d
mov dword [ebp - 0x1c], ecx
mov edx, dword [ebp - 0x1c]
add edx, 0x1d7c
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x2c]
and eax, 0x80000001
jns 0x10013606
dec eax
or eax, 0xfffffffe
inc eax
test eax, eax
je 0x10013615
mov ecx, dword [ebp - 0x2c]
add ecx, 1
mov dword [ebp - 0x2c], ecx
jmp 0x100135f7
mov edx, dword [ebp - 0x1c]
add edx, 0x729
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
sub eax, 0xfec
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x18]
sub ecx, dword [ebp - 0x18]
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x60], 0
jmp 0x10013647
mov edx, dword [ebp - 0x60]
add edx, 1
mov dword [ebp - 0x60], edx
cmp dword [ebp - 0x60], 0x58
jge 0x10013658
mov eax, dword [ebp - 0x18]
add eax, 4
mov dword [ebp - 0x18], eax
jmp 0x1001363e
mov ecx, dword [ebp - 0x18]
sub ecx, dword [ebp - 0x20]
mov dword [ebp - 0x18], ecx
mov edx, dword [ebp - 0x20]
sub edx, 0x1ef5
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x18]
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x24]
sub ecx, 0x1bc7
mov dword [ebp - 0x24], ecx
mov edx, dword [ebp - 0x20]
add edx, 0x1351
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 0x18]
sub eax, 0x12ff
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x1c]
and ecx, 0x80000001
jns 0x100136a9
dec ecx
or ecx, 0xfffffffe
inc ecx
test ecx, ecx
je 0x100136b8
mov edx, dword [ebp - 0x1c]
add edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x10013699
mov eax, dword [ebp - 0x20]
add eax, 0x268
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x24]
sub ecx, dword [ebp - 0x24]
mov dword [ebp - 0x24], ecx
mov edx, dword [ebp - 0x24]
sub edx, 0x247b
mov dword [ebp - 0x24], edx
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x24]
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x1c]
sub ecx, dword [ebp - 0x18]
mov dword [ebp - 0x1c], ecx
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0x2c]
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x20]
add ecx, 0x1c84
mov dword [ebp - 0x20], ecx
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x24]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x20]
cdq
mov ecx, 3
idiv ecx
test edx, edx
je 0x10013734
cmp dword [ebp - 0x20], 0
jle 0x10013734
mov edx, dword [ebp - 0x20]
sub edx, 0x1452
mov dword [ebp - 0x20], edx
jmp 0x1001373f
mov eax, dword [ebp - 0x20]
add eax, 0x1452
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x20]
add ecx, 0x1bf8
mov dword [ebp - 0x20], ecx
mov edx, dword [ebp - 0x18]
add edx, 0x2360
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x20]
sub eax, dword [ebp - 0x2c]
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x18]
sub ecx, 0x1389
mov dword [ebp - 0x18], ecx
mov eax, dword [ebp - 0x18]
cdq
mov ecx, 3
idiv ecx
test edx, edx
je 0x10013786
mov edx, dword [ebp - 0x18]
add edx, 1
mov dword [ebp - 0x18], edx
jmp 0x1001376c
mov eax, dword [ebp - 0x24]
add eax, dword [ebp - 0x2c]
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x24]
add ecx, 0x583
mov dword [ebp - 0x24], ecx
mov edx, dword [ebp - 0x1c]
sub edx, 0xbe8
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x18]
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x18]
add ecx, 0x21eb
mov dword [ebp - 0x18], ecx
mov edx, dword [ebp - 0x18]
add edx, dword [ebp - 0x18]
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x1c]
sub eax, 0x3af
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
sub ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x1c], ecx
mov edx, dword [ebp - 0x24]
sub edx, dword [ebp - 0x1c]
mov dword [ebp - 0x24], edx
mov eax, dword [ebp - 0x1c]
add eax, 0x25ee
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x24]
sub ecx, 0x1a1a
mov dword [ebp - 0x24], ecx
mov edx, dword [ebp - 0x20]
sub edx, 0xc8a
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 0x1c]
add eax, 0x1aed
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x64], 0
jmp 0x10013822
mov ecx, dword [ebp - 0x64]
add ecx, 1
mov dword [ebp - 0x64], ecx
cmp dword [ebp - 0x64], 0x39
jge 0x10013833
mov edx, dword [ebp - 0x20]
sub edx, 6
mov dword [ebp - 0x20], edx
jmp 0x10013819
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x2c]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x20]
add ecx, 0x1564
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x68], 0
jmp 0x1001385a
mov edx, dword [ebp - 0x68]
add edx, 1
mov dword [ebp - 0x68], edx
cmp dword [ebp - 0x68], 0x18
jge 0x1001386b
mov eax, dword [ebp - 0x1c]
add eax, 7
mov dword [ebp - 0x1c], eax
jmp 0x10013851
mov eax, 1
mov esp, ebp
pop ebp
ret 0xc