Function at 0x1007f24
Capabilities:
Manipulate console buffer
Parse credit card information
Parse pe header

Disassembly:
mov edi, edi
push ebp
mov ebp, esp
sub esp, 0xe0
push ebx
push esi
mov esi, dword [ebp + 0xc]
xor ebx, ebx
push edi
mov dword [ebp - 0xc], ebx
mov dword [esi + 0xa4], 1
mov dword [esi + 0x90], ebx
call fcn.01006687
call fcn.01007a06
cmp dword [ebp + 0x10], ebx
mov eax, dword [ebp + 0x14]
mov edi, dword [ebp + 8]
mov dword [ebp - 4], ebx
mov dword [ebp + 0xc], eax
jbe 0x1009839
mov edx, dword [0x102aa64]
xor ebx, ebx
mov ecx, edx
inc ebx
and ecx, ebx
jne 0x1008015
test dl, 2
jne 0x1008015
mov eax, dword [ebp + 0xc]
cmp byte [eax], 0x81
jb 0x1008015
mov edi, dword [ebp + 8]
call fcn.01006b6c
mov ax, word [esi + 0x14]
sub ax, word [0x1010724]
mov word [ebp - 0x10], ax
mov ax, word [esi + 0x10]
sub ax, word [0x1010720]
inc dword [esi + 0x14]
mov word [ebp - 0xe], ax
push dword [ebp - 0x10]
push dword [edi + 0x7b8]
call dword [sym.imp.KERNEL32.dll_SetConsoleCursorPosition]
push 0
lea eax, [ebp - 0x18]
push eax
push ebx
push dword [ebp + 0xc]
push dword [edi + 0x7b8]
call dword [sym.imp.KERNEL32.dll_WriteConsoleA]
lea eax, [ebp - 0x18]
push eax
push dword [ebp - 0x10]
xor eax, eax
mov ax, word [edi + 0x7c8]
push ebx
push eax
push dword [edi + 0x7b8]
call dword [sym.imp.KERNEL32.dll_FillConsoleOutputAttribute]
cmp dword [0x101074c], 0
je case.default.0x1008023
mov dword [0x1025cb4], ebx
jmp case.default.0x1008023
mov eax, dword [esi + 0x78]
push 7
pop ebx
cmp eax, ebx
ja case.default.0x1008023
jmp dword [eax*4 + 0x10098b4]
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
cmp eax, 0x11
jg 0x10082ad
je case.default.0x1008023
cmp eax, 9
jg 0x100818a
je 0x1008088
sub eax, 0
je case.default.0x1008023
sub eax, 5
je case.default.0x1008023
dec eax
dec eax
je 0x100807b
dec eax
jne 0x1008313
mov eax, dword [esi + 0x14]
test eax, eax
jbe 0x1008277
dec eax
mov dword [esi + 0x14], eax
jmp 0x1008277
push 0xffffffffffffffff
call dword [sym.imp.USER32.dll_MessageBeep]
jmp case.default.0x1008023
mov dx, word [0x1025cac]
test dx, dx
mov ecx, dword [esi + 0x14]
je 0x10080d3
movzx edx, dx
xor eax, eax
test edx, edx
jle 0x10080c2
mov edi, dword [eax*4 + 0x102b4a0]
cmp edi, ecx
jbe 0x10080b0
cmp edi, 0xffffffff
jne 0x10080c2
inc eax
cmp eax, edx
jl 0x10080a0
jmp 0x10080c2
cmp dword [eax*4 + 0x102b4a0], 0xffffffff
jne 0x10080c6
inc eax
cmp eax, edx
jl 0x10080b7
cmp eax, edx
jge 0x10080d3
mov eax, dword [eax*4 + 0x102b4a0]
jmp 0x10080dc
lea eax, [ecx + 8]
mov edx, eax
and edx, ebx
sub eax, edx
mov dword [esi + 0x14], eax
test byte [0x1010740], 8
je 0x1008156
cmp dword [esi + 0x1b4], 0
jne 0x100810c
mov dword [esi + 0x1b8], eax
mov eax, dword [esi + 0x10]
mov dword [esi + 0x1bc], eax
mov eax, dword [esi + 0xa0]
mov dword [esi + 0x1c0], eax
mov edx, dword [esi + 0x14]
mov edi, dword [esi + 0x1b4]
sub edx, ecx
mov ecx, edx
mov ebx, ecx
shr ecx, 2
lea edi, [esi + edi + 0xb4]
mov eax, 0x20202020
rep stosd dword es:[edi], eax
mov ecx, ebx
and ecx, 3
rep stosb byte es:[edi], al
add dword [esi + 0x1b4], edx
cmp dword [esi + 0x1b4], 0x100
jb 0x100814d
mov edi, dword [ebp + 8]
call fcn.01006b6c
test byte [0x1010740], 8
jne 0x100815e
mov edi, dword [ebp + 8]
call fcn.01006b6c
mov eax, dword [esi + 0x14]
cmp eax, dword [0x1010714]
jb case.default.0x1008023
test byte [0x1010740], 8
je 0x100817e
mov edi, dword [ebp + 8]
call fcn.01006b6c
and dword [esi + 0x14], 0
push dword [ebp + 8]
jmp 0x1008d11
cmp eax, 0xa
jl 0x1008313
cmp eax, 0xc
jle 0x1008284
cmp eax, 0xd
je 0x100826c
cmp eax, 0xe
je 0x10081fc
cmp eax, 0xf
jne 0x1008313
xor ecx, ecx
mov dword [esi + 0x88], ecx
mov al, byte [0x102aa64]
test al, 1
je 0x10081e4
test al, 2
je 0x10081e4
test byte [esi + 0x95], 0x10
je 0x10081dd
push dword [esi + 0x210]
push ecx
jmp 0x100881e
push 0x100f230
jmp 0x10081d7
movsx eax, byte [esi + 0x84]
jmp 0x1008237
mov dword [esi + 0x80], 0x100f630
jmp case.default.0x1008023
mov dword [esi + 0x88], 1
mov al, byte [0x102aa64]
test al, 1
je 0x1008230
test al, 2
je 0x1008230
test byte [esi + 0x95], 0x10
je 0x1008229
push dword [esi + 0x214]
push 0
jmp 0x100881e
push 0x100f2b0
jmp 0x1008222
movsx eax, byte [esi + 0x85]
sub eax, 0x30
je 0x100825d
dec eax
je 0x100824e
dec eax
je 0x100825d
sub eax, 0xf
je 0x10081ed
dec eax
jne case.default.0x1008023
mov dword [esi + 0x80], 0x100f430
jmp case.default.0x1008023
mov dword [esi + 0x80], 0x100f730
jmp case.default.0x1008023
and dword [esi + 0x14], 0
and dword [esi + 0xac], 0
mov edi, dword [ebp + 8]
call fcn.01006b6c
jmp case.default.0x1008023
lea eax, [esi + 0xac]
xor ecx, ecx
cmp dword [eax], ecx
je 0x1008298
mov dword [esi + 0xb0], ecx
jmp 0x10082a6
lea eax, [esi + 0xb0]
cmp dword [eax], ecx
je 0x1008d08
mov dword [eax], ecx
jmp case.default.0x1008023
cmp eax, 0x7e
jg 0x10083be
je 0x100830d
sub eax, 0x13
je case.default.0x1008023
sub eax, 5
je case.default.0x1008023
dec eax
dec eax
je 0x10082dd
dec eax
jne 0x1008313
mov dword [esi + 0x78], 1
jmp case.default.0x1008023
test ecx, ecx
je case.default.0x1008023
test dl, 2
je case.default.0x1008023
test byte [esi + 0x208], 0x40
je case.default.0x1008023
test byte [0x1010764], 1
je case.default.0x1008023
jmp 0x1009595
inc dword [esi + 0x90]
mov eax, dword [esi + 0x14]
cmp eax, dword [0x1010714]
jb 0x1008348
mov edi, dword [ebp + 8]
and dword [esi + 0x14], 0
call fcn.01006b6c
push edi
call fcn.010068c3
xor eax, eax
inc eax
test byte [esi + 0x94], 4
mov dword [esi + 0xb0], eax
jne 0x1008348
mov dword [esi + 0xac], eax
cmp dword [esi + 0xac], 0
jne case.default.0x1008023
and dword [esi + 0xb0], 0
cmp dword [esi + 0x1b4], 0
jne 0x1008383
mov eax, dword [esi + 0x14]
mov dword [esi + 0x1b8], eax
mov eax, dword [esi + 0x10]
mov dword [esi + 0x1bc], eax
mov eax, dword [esi + 0xa0]
mov dword [esi + 0x1c0], eax
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
mov ecx, dword [esi + 0x80]
movzx eax, byte [ecx + eax]
push eax
call fcn.01007c6a
test eax, eax
je 0x10083a5
mov edi, dword [ebp + 8]
call fcn.01006b6c
mov al, byte [0x102aa64]
test al, 1
je 0x10083b6
test al, 2
jne case.default.0x1008023
inc dword [esi + 0x14]
jmp case.default.0x1008023
sub eax, 0x7f
je case.default.0x1008023
sub eax, 0xf
je 0x100841a
dec eax
jne 0x1008313
test ecx, ecx
je case.default.0x1008023
test dl, 2
je case.default.0x1008023
test byte [esi + 0x95], 0x10
je 0x1008313
test byte [esi + 0x20c], 0x40
jne 0x1008313
test byte [esi + 0x208], 0x35
je 0x1008313
lea edx, [esi + 0x21c]
push dword [edx]
push 0
jmp 0x1008b24
test ecx, ecx
je 0x1008313
test dl, 2
je 0x1008313
test byte [esi + 0x95], 0x10
je 0x1008313
test byte [esi + 0x20c], 0x40
jne 0x1008313
test byte [esi + 0x208], 0x35
je 0x1008313
lea edx, [esi + 0x218]
push dword [edx]
push 0
jmp 0x1008b8d
xor edi, edi
cmp dword [esi + 0x1b4], edi
je 0x1008475
mov edi, dword [ebp + 8]
call fcn.01006b6c
xor edi, edi
mov edx, dword [ebp + 0xc]
mov al, byte [edx]
cmp al, 0x5b
je 0x1008485
cmp al, 0x23
je 0x1008485
mov dword [esi + 0x78], edi
movzx eax, byte [edx]
cmp eax, 0x63
jg 0x1008bc0
je 0x1008bac
cmp eax, 0x43
jg 0x1008794
je 0x1008778
cmp eax, 0x37
jg 0x100862a
je 0x100858c
sub eax, 0x23
je 0x1008580
dec eax
je 0x1008540
dec eax
je case.default.0x1008023
sub eax, 3
je 0x10084f9
dec eax
je 0x10084e5
sub eax, 8
je case.default.0x1008023
dec eax
je case.default.0x1008023
jmp 0x1008bf9
inc dword [ebp - 4]
inc edx
mov al, byte [edx]
mov dword [ebp + 0xc], edx
mov byte [esi + 0x85], al
jmp case.default.0x1008023
mov al, byte [0x102aa64]
test al, 1
je 0x100852c
test al, 2
je 0x100852c
test byte [esi + 0x95], 0x10
je case.default.0x1008023
test byte [esi + 0x208], 0x21
je case.default.0x1008023
mov dword [esi + 0x78], 5
jmp case.default.0x1008023
inc dword [ebp - 4]
inc edx
mov al, byte [edx]
mov dword [ebp + 0xc], edx
mov byte [esi + 0x84], al
jmp case.default.0x1008023
test byte [0x102aa64], 1
je case.default.0x1008023
test byte [0x102aa64], 2
je case.default.0x1008023
test byte [esi + 0x95], 0x10
je case.default.0x1008023
test byte [esi + 0x208], 0x21
je case.default.0x1008023
mov dword [esi + 0x78], 6
jmp case.default.0x1008023
mov dword [esi + 0x78], 3
jmp case.default.0x1008023
push 0x102b640
push dword [0x102b458]
call dword [sym.imp.KERNEL32.dll_GetConsoleScreenBufferInfo]
mov eax, dword [esi + 0x14]
mov dword [esi + 0x1fc], eax
mov eax, dword [esi + 0x10]
mov dword [esi + 0x200], eax
mov eax, dword [esi + 0x98]
mov dword [esi + 0x204], eax
mov eax, dword [esi + 0x80]
mov dword [esi + 0x1f8], eax
mov eax, dword [esi + 0x88]
mov dword [esi + 0x1f4], eax
mov al, byte [esi + 0x84]
mov byte [esi + 0x1f0], al
mov al, byte [esi + 0x85]
mov byte [esi + 0x1f1], al
mov eax, dword [esi + 0x68]
xor ecx, ecx
cmp eax, edi
mov dword [esi + 0x9c], 1
mov dword [esi + 0x1ec], eax
jl case.default.0x1008023
lea eax, [esi + 0x1c4]
mov edx, dword [eax - 0x184]
mov dword [eax], edx
inc ecx
movzx edx, cx
add eax, 4
cmp edx, dword [esi + 0x1ec]
jle 0x100860e
jmp case.default.0x1008023
sub eax, 0x38
je 0x10086a2
sub eax, 4
je 0x1008692
dec eax
je 0x1008686
dec eax
je 0x100867a
sub eax, 3
je 0x1008660
dec eax
jne 0x1008bf9
cmp dword [esi], 2
jne case.default.0x1008023
mov dword [esi + 0x18], 1
call fcn.01006d11
jmp case.default.0x1008023
cmp dword [esi], 2
jne case.default.0x1008023
mov dword [esi + 0x18], 1
call fcn.01006cc2
jmp case.default.0x1008023
or dword [esi + 0x94], 2
jmp case.default.0x1008023
and dword [esi + 0x94], 0xfffffffd
jmp case.default.0x1008023
cmp dword [esi], 2
jne case.default.0x1008023
mov dword [esi], edi
jmp case.default.0x1008023
mov eax, dword [esi + 0x1f8]
cmp eax, edi
je 0x10086d6
mov dword [esi + 0x80], eax
mov eax, dword [esi + 0x1f4]
mov dword [esi + 0x88], eax
mov al, byte [esi + 0x1f0]
mov byte [esi + 0x84], al
mov al, byte [esi + 0x1f1]
mov byte [esi + 0x85], al
mov eax, dword [esi + 0x1ec]
xor edi, edi
cmp eax, dword [esi + 0x68]
je 0x10086e4
inc edi
xor edx, edx
test eax, eax
jl 0x100870b
lea ecx, [esi + 0x40]
test edi, edi
jne 0x100870f
mov ebx, dword [ecx + 0x184]
cmp ebx, dword [ecx]
je 0x10086fc
inc edi
inc edx
movzx ebx, dx
add ecx, 4
cmp ebx, dword [esi + 0x1ec]
jle 0x10086ed
test edi, edi
je 0x1008720
lea ecx, [esi + 0x1c4]
push ecx
push eax
push esi
push dword [ebp + 8]
call fcn.0100741d
push 0x102b64a
xor edi, edi
inc edi
push edi
push dword [0x102b458]
call dword [sym.imp.KERNEL32.dll_SetConsoleWindowInfo]
xor eax, eax
cmp dword [esi + 0x9c], eax
jne 0x1008755
cmp dword [esi + 0x98], eax
mov dword [esi + 0x14], edi
je 0x100874d
mov eax, dword [esi + 0x70]
mov dword [esi + 0x10], eax
jmp case.default.0x1008023
mov eax, dword [esi + 0x1fc]
mov dword [esi + 0x14], eax
mov eax, dword [esi + 0x200]
mov dword [esi + 0x10], eax
mov eax, dword [esi + 0x204]
mov dword [esi + 0x98], eax
jmp case.default.0x1008023
cmp dword [esi], 2
jne case.default.0x1008023
mov dword [esi + 0x18], 1
mov eax, esi
call fcn.01006d62
jmp case.default.0x1008023
cmp eax, 0x4b
jg 0x1008956
je 0x1008916
sub eax, 0x44
je 0x1008901
dec eax
je 0x10088f9
dec eax
je 0x10088c3
dec eax
je 0x1008894
dec eax
je 0x10087f2
dec eax
je 0x10087dc
dec eax
jne 0x1008bf9
cmp dword [esi], 2
jne case.default.0x1008023
jmp 0x1008c08
cmp dword [esi], 2
jne case.default.0x1008023
push dword [ebp + 8]
call fcn.01006770
jmp case.default.0x1008023
mov al, byte [0x102aa64]
test al, 1
je 0x1008829
test al, 2
je 0x1008829
test byte [esi + 0x95], 0x10
je 0x1008829
test byte [esi + 0x208], 8
je 0x1008829
and dword [esi + 0x20c], 0xffffffbf
push 0x100f030
push edi
push esi
call fcn.010075fd
jmp case.default.0x1008023
cmp dword [esi], 2
jne 0x1008869
lea eax, [ebp - 0x98]
push eax
push dword [0x102b458]
call dword [sym.imp.KERNEL32.dll_GetConsoleScreenBufferInfo]
test eax, eax
jne 0x1008853
mov word [ebp - 0x8c], di
mov word [ebp - 0x8e], di
movsx eax, word [ebp - 0x8c]
mov dword [esi + 0x10], eax
movsx eax, word [ebp - 0x8e]
jmp 0x1008d27
cmp word [0x1025cac], 0x64
jae case.default.0x1008023
movzx eax, word [0x1025cac]
mov ecx, dword [esi + 0x14]
inc word [0x1025cac]
mov dword [eax*4 + 0x102b4a0], ecx
jmp case.default.0x1008023
cmp dword [esi], 2
jne case.default.0x1008023
and byte [esi + 0x95], 0xfb
mov al, byte [0x102aa64]
test al, 1
je 0x100824e
test al, 2
je 0x100824e
push 0x100f230
jmp 0x100881d
cmp dword [esi], 2
jne case.default.0x1008023
or byte [esi + 0x95], 4
mov al, byte [0x102aa64]
test al, 1
je 0x10088ea
test al, 2
je 0x10088ea
push 0x100f2b0
jmp 0x100881d
mov dword [esi + 0x80], 0x100f530
jmp case.default.0x1008023
mov dword [esi + 0x14], edi
jmp 0x1008182
cmp dword [esi], 2
jne 0x1008182
mov dword [esi + 0x18], 1
jmp 0x1008d5c
mov al, byte [0x102aa64]
test al, 1
je 0x1008946
test al, 2
je 0x1008946
test byte [esi + 0x95], 0x10
je 0x1008946
test byte [esi + 0x208], 8
je 0x1008946
or dword [esi + 0x20c], 0x40
push 0x100f0b0
jmp 0x100881d
cmp dword [esi], 2
jne case.default.0x1008023
push 0
jmp 0x1008e0b
sub eax, 0x4d
je 0x10087e5
dec eax
je 0x1008b43
dec eax
je 0x1008ada
sub eax, 0xa
je 0x1008a3f
dec eax
je 0x100899e
dec eax
jne 0x1008bf9
or dword [esi + 0x18], 0xffffffff
or dword [esi + 0x1c], 0xffffffff
or dword [esi + 0x7c], 0xffffffff
mov dword [esi + 0x78], 2
mov dword [esi + 0x6c], edi
mov dword [ebp - 0xc], edi
jmp case.default.0x1008023
cmp dword [esi], 2
je 0x1008a1c
mov al, byte [0x102aa64]
test al, 1
je 0x10089ee
test al, 2
je 0x10089ee
test byte [esi + 0x95], 0x10
je 0x10089ee
mov byte [0x1024ca1], 0x5b
mov byte [0x1024ca2], 0x3f
mov byte [0x1024ca3], 0x31
mov byte [0x1024ca4], 0x38
mov byte [0x1024ca5], 0x3b
mov byte [0x1024ca6], 0x32
mov byte [0x1024ca7], 0x63
push 8
jmp 0x1008a2c
mov byte [0x1024ca1], 0x5b
mov byte [0x1024ca2], 0x3f
mov byte [0x1024ca3], 0x31
mov byte [0x1024ca4], 0x3b
mov byte [0x1024ca5], 0x30
mov byte [0x1024ca6], 0x63
mov eax, ebx
jmp 0x1008a2d
mov byte [0x1024ca1], 0x2f
mov byte [0x1024ca2], 0x5a
push 3
pop eax
push eax
mov byte [0x1024ca0], 0x1b
push 0x1024ca0
jmp 0x10096f7
cmp dword [esi], 2
jne case.default.0x1008023
mov eax, dword [ebp - 4]
add eax, 3
cmp eax, dword [ebp + 0x10]
ja 0x1008ac3
mov al, byte [edx + 1]
cmp al, 0x1f
jbe 0x1008a62
movzx edi, al
sub edi, 0x20
jmp 0x1008a64
xor edi, edi
mov eax, dword [esi + 0x10]
cmp edi, eax
je 0x1008a71
push eax
call fcn.010063c1
mov dword [esi + 0x10], edi
mov edi, dword [ebp + 0xc]
add edi, 2
mov al, byte [edi]
cmp al, 0x1f
jbe 0x1008a88
movzx eax, al
sub eax, 0x20
jmp 0x1008a8a
xor eax, eax
mov dword [esi + 0x14], eax
lea eax, [ebp - 0x68]
push eax
push dword [0x102b458]
call dword [sym.imp.KERNEL32.dll_GetConsoleScreenBufferInfo]
test eax, eax
jne 0x1008aa9
and word [ebp - 0x5c], ax
and word [ebp - 0x5e], ax
movsx eax, word [ebp - 0x5c]
add dword [esi + 0x10], eax
movsx eax, word [ebp - 0x5e]
add dword [esi + 0x14], eax
add dword [ebp - 4], 2
mov dword [ebp + 0xc], edi
jmp case.default.0x1008023
or dword [esi + 0x18], 0xffffffff
or dword [esi + 0x1c], 0xffffffff
mov dword [esi + 0x78], 4
mov dword [esi + 0x6c], edi
jmp case.default.0x1008023
test byte [0x102aa64], 1
je case.default.0x1008023
test byte [0x102aa64], 2
je case.default.0x1008023
test byte [esi + 0x95], 0x10
je case.default.0x1008023
test byte [esi + 0x20c], 0x40
jne case.default.0x1008023
test byte [esi + 0x208], 0x35
je case.default.0x1008023
lea edx, [esi + 0x21c]
push dword [edx]
push edi
push esi
call fcn.01007637
push dword [edx]
push 0x80
push esi
call fcn.01007637
or dword [esi + 0x20c], 2
jmp case.default.0x1008023
test byte [0x102aa64], 1
je case.default.0x1008023
test byte [0x102aa64], 2
je case.default.0x1008023
test byte [esi + 0x95], 0x10
je case.default.0x1008023
test byte [esi + 0x20c], 0x40
jne case.default.0x1008023
test byte [esi + 0x208], 0x35
je case.default.0x1008023
lea edx, [esi + 0x218]
push dword [edx]
push edi
push esi
call fcn.01007637
push dword [edx]
push 0x80
push esi
call fcn.01007637
or dword [esi + 0x20c], 1
jmp case.default.0x1008023
mov edi, dword [ebp + 8]
call fcn.01006b6c
push esi
push edi
call fcn.01007e76
jmp case.default.0x1008023
cmp eax, 0x7e
jne 0x1008bf9
test byte [0x102aa64], 1
je case.default.0x1008023
test byte [0x102aa64], 2
je case.default.0x1008023
test byte [esi + 0x95], 0x10
je 0x1008bf9
push dword [esi + 0x214]
push 0x80
push esi
call fcn.010075fd
cmp byte [edx], 0xc
jne case.default.0x1008023
mov dword [esi + 0x10], edi
mov dword [esi + 0x14], edi
push edi
jmp 0x1008e1d
mov ecx, dword [ebp + 0xc]
mov al, byte [ecx]
cmp al, 0x30
jb 0x1008c1b
cmp al, 0x39
jbe 0x1008c49
cmp al, 0x3f
je 0x1008c49
cmp al, 0x3b
je 0x1008c49
xor edi, edi
cmp dword [esi + 0x7c], 0xffffffff
jne 0x1008c2e
mov dword [esi + 0x7c], edi
mov eax, dword [esi + 0x6c]
mov edx, dword [esi + 0x7c]
mov dword [esi + eax*4 + 0x18], edx
inc dword [esi + 0x6c]
mov eax, dword [esi + 0x6c]
cmp eax, 0xa
jae 0x1008c4b
mov dword [esi + eax*4 + 0x18], edi
jmp 0x1008c4b
xor edi, edi
movzx eax, byte [ecx]
cmp eax, 0x58
jg 0x1008f51
je case.default.0x1008023
cmp eax, 0x45
jg 0x1008ddf
je case.default.0x1008023
cmp eax, 0x3f
jg 0x1008d3b
je 0x1008d2f
cmp eax, 8
je 0x1008d1b
cmp eax, 0xa
je 0x1008ce7
cmp eax, 0x2f
jle 0x100981f
cmp eax, 0x39
jle 0x1008ccb
cmp eax, 0x3b
je 0x1008ca4
cmp eax, 0x3d
jmp 0x1008f89
mov eax, dword [esi + 0x6c]
cmp eax, 9
jae case.default.0x1008023
mov ecx, dword [esi + 0x7c]
mov dword [esi + eax*4 + 0x18], ecx
inc dword [esi + 0x6c]
mov eax, dword [esi + 0x6c]
or dword [esi + eax*4 + 0x18], 0xffffffff
or dword [esi + 0x7c], 0xffffffff
jmp case.default.0x1008023
mov ecx, dword [esi + 0x7c]
cmp ecx, 0xffffffff
jne 0x1008cd8
add eax, 0xffffffd0
jmp 0x1008cdf
lea ecx, [ecx + ecx*4]
lea eax, [eax + ecx*2 - 0x30]
mov dword [esi + 0x7c], eax
jmp case.default.0x1008023
lea eax, [esi + 0xac]
cmp dword [eax], edi
je 0x1008cfe
mov dword [esi + 0xb0], edi
mov dword [eax], edi
jmp case.default.0x1008023
lea eax, [esi + 0xb0]
cmp dword [eax], edi
jne 0x1008cf7
mov edi, dword [ebp + 8]
call fcn.01006b6c
push edi
call fcn.010068c3
jmp case.default.0x1008023
mov eax, dword [esi + 0x14]
cmp eax, edi
jbe case.default.0x1008023
dec eax
mov dword [esi + 0x14], eax
jmp case.default.0x1008023
mov dword [ebp - 0xc], 1
jmp case.default.0x1008023
sub eax, 0x40
je 0x1008d68
dec eax
je 0x1008670
dec eax
je 0x1008656
dec eax
je 0x1008788
dec eax
jne 0x100981f
mov eax, esi
call fcn.01006d90
jmp case.default.0x1008023
cmp dword [esi + 0x18], edi
jne 0x1008d74
mov dword [esi + 0x18], 1
mov edx, dword [esi + 0x14]
mov eax, dword [0x1010714]
sub eax, edx
cmp dword [esi + 0x18], eax
jbe 0x1008d86
mov dword [esi + 0x18], eax
mov ecx, dword [esi + 0x18]
add ecx, edx
mov edx, dword [0x1010714]
mov eax, edx
sub eax, ecx
je 0x1008f07
mov ax, word [esi + 0x10]
mov bx, word [esi + 0x14]
mov word [ebp - 0x28], cx
mov word [ebp - 0x26], ax
mov word [ebp - 0x2a], ax
mov word [ebp - 0x2e], ax
mov eax, dword [ebp + 8]
mov cx, word [eax + 0x7c8]
mov word [eax + 0x7d8], cx
lea ecx, [eax + 0x7d6]
push ecx
push dword [ebp - 0x28]
mov word [ebp - 0x30], bx
mov word [ebp - 0x2c], dx
push edi
lea ecx, [ebp - 0x30]
jmp 0x1008efa
cmp eax, 0x4c
jg 0x1008e5d
je 0x1008e2b
sub eax, 0x46
je case.default.0x1008023
dec eax
je case.default.0x1008023
dec eax
je 0x1009255
dec eax
dec eax
je 0x1008e1a
dec eax
jne 0x100981f
push dword [esi + 0x18]
mov ebx, dword [ebp + 8]
mov edi, esi
call fcn.01006fa2
jmp case.default.0x1008023
push dword [esi + 0x18]
push esi
push dword [ebp + 8]
call fcn.01006dc3
jmp case.default.0x1008023
cmp dword [esi + 0x18], edi
jne 0x1008e37
mov dword [esi + 0x18], 1
xor edi, edi
cmp dword [esi + 0x18], edi
jbe 0x1008e54
mov ecx, dword [esi + 0x10]
mov eax, dword [ebp + 8]
mov edx, esi
call fcn.01006706
inc edi
movzx eax, di
cmp eax, dword [esi + 0x18]
jb 0x1008e3e
and dword [esi + 0x78], 0
jmp case.default.0x1008023
sub eax, 0x4d
je 0x1008f20
sub eax, 3
je 0x1008e79
sub eax, 3
je case.default.0x1008023
jmp 0x1008f88
cmp dword [esi + 0x18], edi
jne 0x1008e85
mov dword [esi + 0x18], 1
mov ecx, dword [esi + 0x14]
mov eax, dword [0x1010714]
sub eax, ecx
cmp dword [esi + 0x18], eax
jbe 0x1008e97
mov dword [esi + 0x18], eax
mov edx, dword [0x1010714]
mov eax, edx
sub eax, ecx
dec eax
je 0x1008f07
mov ax, word [esi + 0x10]
mov cx, word [esi + 0x14]
mov word [ebp - 0x20], cx
mov word [ebp - 0x1e], ax
mov ecx, dword [ebp - 0x20]
mov dword [ebp - 0x38], ecx
mov word [ebp - 0x1a], ax
mov word [ebp - 0x1c], dx
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x34], ecx
mov cx, word [esi + 0x14]
sub cx, word [esi + 0x18]
mov word [ebp - 0x22], ax
mov eax, dword [ebp + 8]
mov word [ebp - 0x24], cx
mov cx, word [eax + 0x7c8]
mov word [eax + 0x7d8], cx
lea ecx, [eax + 0x7d6]
push ecx
push dword [ebp - 0x24]
lea ecx, [ebp - 0x38]
push ecx
lea ecx, [ebp - 0x20]
push ecx
push dword [eax + 0x7b8]
call dword [sym.imp.KERNEL32.dll_ScrollConsoleScreenBufferW]
cmp dword [0x101074c], edi
je 0x100981f
push dword [esi + 0x10]
call fcn.010063c1
jmp 0x100981f
cmp dword [esi + 0x18], edi
jne 0x1008f2c
mov dword [esi + 0x18], 1
xor edi, edi
cmp dword [esi + 0x18], edi
jbe 0x1008e54
mov edx, dword [esi + 0x10]
mov eax, dword [ebp + 8]
push esi
call fcn.010067d6
inc edi
movzx eax, di
cmp eax, dword [esi + 0x18]
jb 0x1008f37
jmp 0x1008e54
cmp eax, 0x6c
jg 0x10094db
je 0x1009310
cmp eax, 0x65
jg 0x1008fcb
je 0x1008656
sub eax, 0x5a
je case.default.0x1008023
sub eax, 6
je case.default.0x1008023
dec eax
je 0x1008788
dec eax
dec eax
je 0x1008f94
dec eax
je case.default.0x1008023
jmp 0x100981f
mov byte [0x1024ca0], 0x1b
mov byte [0x1024ca1], 0x5b
mov byte [0x1024ca2], 0x3f
mov byte [0x1024ca3], 0x31
mov byte [0x1024ca4], 0x3b
mov byte [0x1024ca5], 0x30
mov byte [0x1024ca6], 0x63
push ebx
jmp 0x1009629
sub eax, 0x66
je 0x1009255
dec eax
je 0x10091e6
dec eax
je 0x1008fe4
dec eax
jmp 0x100981f
cmp dword [esi + 0x6c], edi
mov dword [ebp - 8], edi
jbe 0x1008e54
lea ebx, [esi + 0x18]
mov eax, dword [ebx]
xor edi, edi
inc edi
cmp dword [ebp - 0xc], edi
jne 0x10091a9
dec eax
je 0x100915d
dec eax
je 0x100912b
dec eax
je 0x1009065
dec eax
dec eax
je 0x1009041
dec eax
je 0x100902c
dec eax
jne 0x10091cf
or dword [esi + 0x94], 4
jmp 0x10091cf
mov eax, dword [esi + 0x70]
and dword [esi + 0x14], 0
mov dword [esi + 0x98], edi
mov dword [esi + 0x10], eax
jmp 0x10091cf
lea ecx, [esi + 0x94]
mov eax, dword [ecx]
test al, al
js 0x10091cf
push dword [ebp + 8]
or eax, 0x80
mov dword [ecx], eax
call fcn.010069e4
jmp 0x10091cf
or dword [esi + 0x94], 0x40
push 0x102b640
push dword [0x102b458]
call dword [sym.imp.KERNEL32.dll_GetConsoleScreenBufferInfo]
mov ax, word [0x102b642]
push dword [0x102b458]
mov edi, 0x84
mov word [0x102b64e], 0x83
mov word [ebp + 0x14], di
mov word [ebp + 0x16], ax
call dword [sym.imp.KERNEL32.dll_GetLargestConsoleWindowSize]
cmp ax, 0x83
jge 0x10090b8
sub eax, dword [0x102b64a]
dec eax
mov word [0x102b64e], ax
cmp word [0x102b640], di
jg 0x10090e5
push dword [ebp + 0x14]
push dword [0x102b458]
call dword [sym.imp.KERNEL32.dll_SetConsoleScreenBufferSize]
push 0x102b64a
push 1
push dword [0x102b458]
call dword [sym.imp.KERNEL32.dll_SetConsoleWindowInfo]
jmp 0x1009107
push 0x102b64a
push 1
push dword [0x102b458]
call dword [sym.imp.KERNEL32.dll_SetConsoleWindowInfo]
push dword [ebp + 0x14]
push dword [0x102b458]
call dword [sym.imp.KERNEL32.dll_SetConsoleScreenBufferSize]
push 2
push esi
push dword [ebp + 8]
mov dword [0x1010714], edi
mov word [0x102b460], di
mov word [0x102b640], di
call fcn.01006dc3
jmp 0x10091cf
and dword [esi], 0
and byte [esi + 0x95], 0xfb
mov al, byte [0x102aa64]
test al, 1
je 0x1009151
test al, 2
je 0x1009151
push 0x100f230
push 0
push esi
call fcn.010075fd
jmp 0x10091cf
mov dword [esi + 0x80], 0x100f430
jmp 0x10091cf
lea eax, [ebp - 0xb0]
push eax
push dword [0x102b458]
call dword [sym.imp.KERNEL32.dll_GetConsoleScreenBufferInfo]
test eax, eax
jne 0x1009182
and word [0x102b64c], ax
and word [0x102b650], ax
test byte [0x102aa64], 1
movsx ecx, word [ebp - 0xa4]
movsx edx, word [ebp - 0xa0]
mov eax, esi
jne 0x100919c
inc edx
call fcn.0100702e
or dword [esi + 0x94], edi
jmp 0x10091cf
dec eax
dec eax
je 0x10091c8
dec eax
dec eax
je 0x10091bf
sub eax, 0x10
jne 0x10091cf
or byte [esi + 0x95], 1
jmp 0x10091cf
or byte [esi + 0x95], 2
jmp 0x10091cf
or byte [esi + 0x95], 8
inc dword [ebp - 8]
mov eax, dword [ebp - 8]
add ebx, 4
cmp eax, dword [esi + 0x6c]
jb 0x1008ff3
jmp 0x1008e54
mov eax, dword [esi + 0x18]
cmp eax, 3
jne 0x10091fa
mov word [0x1025cac], di
jmp 0x1008e54
cmp eax, edi
jne 0x1008e54
cmp word [0x1025cac], 0
je 0x1008e54
movzx edi, word [0x1025cac]
xor eax, eax
test edi, edi
jle 0x1008e54
mov edx, dword [esi + 0x14]
mov ecx, dword [eax*4 + 0x102b4a0]
cmp ecx, edx
jb 0x1009234
cmp ecx, 0xffffffff
jne 0x100923e
inc eax
cmp eax, edi
jl 0x1009224
jmp 0x1008e54
lea eax, [eax*4 + 0x102b4a0]
cmp dword [eax], edx
jne 0x1008e54
or dword [eax], 0xffffffff
jmp 0x1008e54
cmp dword [esi + 0x18], edi
jne 0x1009261
mov dword [esi + 0x18], 1
cmp dword [esi + 0x1c], edi
jne 0x100926d
mov dword [esi + 0x1c], 1
lea eax, [ebp - 0x50]
push eax
push dword [0x102b458]
call dword [sym.imp.KERNEL32.dll_GetConsoleScreenBufferInfo]
test eax, eax
jne 0x1009289
mov word [ebp - 0x44], di
mov word [ebp - 0x46], di
movsx eax, word [ebp - 0x44]
mov ecx, dword [esi + 0x18]
lea edi, [eax + ecx - 1]
movsx eax, word [ebp - 0x46]
mov ecx, dword [esi + 0x1c]
lea eax, [eax + ecx - 1]
mov dword [esi + 0x14], eax
mov ax, word [ebp - 0x42]
cmp word [esi + 0x14], ax
jl 0x10092b2
movsx eax, ax
mov dword [esi + 0x14], eax
cmp di, word [ebp - 0x40]
jl 0x10092bc
movsx edi, word [ebp - 0x40]
xor ebx, ebx
cmp dword [0x101074c], ebx
je 0x10092d3
mov eax, dword [esi + 0x10]
cmp edi, eax
je 0x10092d3
push eax
call fcn.010063c1
mov ecx, dword [esi + 0x98]
cmp ecx, 1
mov dword [esi + 0x10], edi
jne 0x10092fc
mov eax, dword [esi + 0x70]
cmp edi, eax
jae 0x10092eb
mov dword [esi + 0x10], eax
cmp ecx, 1
jne 0x10092fc
mov eax, dword [esi + 0x74]
cmp dword [esi + 0x10], eax
jb 0x10092fc
dec eax
mov dword [esi + 0x10], eax
mov dword [esi + 0x78], ebx
mov dword [esi + 0xac], ebx
mov dword [esi + 0xb0], ebx
jmp case.default.0x1008023
cmp dword [esi + 0x6c], edi
mov dword [ebp - 8], edi
jbe 0x1008e54
lea ebx, [esi + 0x18]
cmp dword [ebp - 0xc], 1
mov eax, dword [ebx]
jne 0x100949a
dec eax
je 0x100945d
dec eax
je 0x100944e
dec eax
je 0x100938d
dec eax
dec eax
je 0x1009369
dec eax
je 0x1009356
dec eax
jne 0x10094c4
and dword [esi + 0x94], 0xfffffffb
jmp 0x10094c4
xor eax, eax
mov dword [esi + 0x98], eax
mov dword [esi + 0x10], eax
mov dword [esi + 0x14], eax
jmp 0x10094c4
lea ecx, [esi + 0x94]
mov eax, dword [ecx]
test al, al
jns 0x10094c4
push dword [ebp + 8]
and eax, 0xffffff7f
mov dword [ecx], eax
call fcn.01006a98
jmp 0x10094c4
and dword [esi + 0x94], 0xffffffbf
push 0x102b640
push dword [0x102b458]
call dword [sym.imp.KERNEL32.dll_GetConsoleScreenBufferInfo]
push dword [0x102b458]
mov word [0x102b64e], 0x4f
call dword [sym.imp.KERNEL32.dll_GetLargestConsoleWindowSize]
cmp ax, 0x4f
jge 0x10093cd
sub eax, dword [0x102b64a]
dec eax
mov word [0x102b64e], ax
mov ax, word [0x102b642]
push 0x50
pop edi
cmp word [0x102b640], di
mov word [ebp + 0x14], di
mov word [ebp + 0x16], ax
jg 0x100940b
push dword [ebp + 0x14]
push dword [0x102b458]
call dword [sym.imp.KERNEL32.dll_SetConsoleScreenBufferSize]
push 0x102b64a
push 1
push dword [0x102b458]
call dword [sym.imp.KERNEL32.dll_SetConsoleWindowInfo]
jmp 0x100942d
push 0x102b64a
push 1
push dword [0x102b458]
call dword [sym.imp.KERNEL32.dll_SetConsoleWindowInfo]
push dword [ebp + 0x14]
push dword [0x102b458]
call dword [sym.imp.KERNEL32.dll_SetConsoleScreenBufferSize]
push 2
push esi
push dword [ebp + 8]
mov dword [0x1010714], edi
mov word [0x102b460], di
mov word [0x102b640], di
call fcn.01006dc3
jmp 0x10094c4
and byte [esi + 0x95], 0xfb
mov dword [esi], 2
jmp 0x10094c4
lea eax, [ebp - 0xc8]
push eax
push dword [0x102b458]
call dword [sym.imp.KERNEL32.dll_GetConsoleScreenBufferInfo]
test eax, eax
jne 0x100947b
and word [0x102b642], ax
movsx eax, word [ebp - 0xc6]
and dword [esi + 0x70], 0
cmp eax, dword [0x1010710]
ja 0x1009491
mov dword [esi + 0x74], eax
and dword [esi + 0x94], 0xfffffffe
jmp 0x10094c4
cmp eax, 2
je 0x10094bd
jbe 0x10094c4
cmp eax, 4
jbe 0x10094b4
cmp eax, 0x14
jne 0x10094c4
and byte [esi + 0x95], 0xfe
jmp 0x10094c4
and byte [esi + 0x95], 0xfd
jmp 0x10094c4
and byte [esi + 0x95], 0xf7
inc dword [ebp - 8]
mov eax, dword [ebp - 8]
add ebx, 4
cmp eax, dword [esi + 0x6c]
jb 0x100931f
jmp 0x1008e54
cmp eax, 0x73
jg 0x1009652
je 0x100963b
sub eax, 0x6d
je 0x1009670
dec eax
je 0x100959d
dec eax
dec eax
je case.default.0x1008023
dec eax
je 0x100981f
dec eax
jne 0x100981f
cmp dword [esi + 0x6c], 2
jb 0x100951b
cmp dword [esi + 0x1c], edi
jne 0x1009523
mov eax, dword [0x1010710]
mov dword [esi + 0x1c], eax
cmp dword [esi + 0x18], edi
jne 0x100952f
mov dword [esi + 0x18], 1
lea eax, [ebp - 0xe0]
push eax
push dword [0x102b458]
call dword [sym.imp.KERNEL32.dll_GetConsoleScreenBufferInfo]
test eax, eax
jne 0x100954d
mov word [0x102b64c], di
mov edi, dword [esi + 0x18]
xor ebx, ebx
cmp edi, ebx
jbe 0x1009595
mov ecx, dword [esi + 0x1c]
cmp edi, ecx
jae 0x1009595
cmp ecx, dword [0x1010710]
ja 0x1009595
movsx eax, word [ebp - 0xd4]
lea edx, [eax + ecx]
lea ecx, [eax + edi]
mov eax, esi
call fcn.0100702e
cmp dword [esi + 0x98], 1
mov dword [esi + 0x14], ebx
jne 0x100958a
mov eax, dword [esi + 0x70]
jmp 0x100958c
xor eax, eax
mov dword [esi + 0x10], eax
mov dword [esi + 0xac], ebx
mov dword [esi + 0x78], ebx
jmp case.default.0x1008023
mov byte [0x1024ca0], 0
mov eax, dword [esi + 0x18]
cmp eax, 5
jne 0x10095c6
push 3
mov byte [0x1024ca0], 0x1b
mov byte [0x1024ca1], 0x5b
mov byte [0x1024ca2], 0x63
pop eax
jmp 0x1009628
cmp eax, 6
jne 0x100981f
lea eax, [ebp - 0x80]
push eax
push dword [0x102b458]
call dword [sym.imp.KERNEL32.dll_GetConsoleScreenBufferInfo]
test eax, eax
jne 0x10095eb
mov word [ebp - 0x74], di
mov word [ebp - 0x76], di
movsx eax, word [ebp - 0x76]
mov ecx, dword [esi + 0x14]
sub ecx, eax
movsx eax, word [ebp - 0x74]
inc ecx
push ecx
mov ecx, dword [esi + 0x10]
sub ecx, eax
inc ecx
push ecx
push 0x1b
push 0x1001db0
push 0xfff
push 0x1024ca0
call dword [sym.imp.msvcrt.dll__snprintf]
add esp, 0x18
cmp byte [0x1024ca0], 0
je 0x100981f
push eax
push 0x1024ca0
push dword [ebp + 8]
call fcn.01004662
jmp 0x100981f
mov eax, dword [esi + 0x14]
mov dword [esi + 0x1fc], eax
mov eax, dword [esi + 0x10]
mov dword [esi + 0x200], eax
jmp 0x100981f
sub eax, 0x75
je 0x1009704
sub eax, 3
je 0x10096a0
dec eax
je case.default.0x1008023
sub eax, 4
jne 0x100981f
xor ecx, ecx
cmp dword [esi + 0x6c], edi
jbe 0x100968b
lea eax, [esi + 0x40]
mov edx, dword [eax - 0x28]
mov dword [eax], edx
mov dword [esi + 0x68], ecx
inc ecx
add eax, 4
cmp ecx, dword [esi + 0x6c]
jb 0x100967a
lea eax, [esi + 0x40]
push eax
push dword [esi + 0x68]
push esi
push dword [ebp + 8]
call fcn.0100741d
jmp 0x100981f
cmp dword [esi + 0x18], edi
push 0xfff
push 0x1001d98
mov edi, 0x1024ca0
push edi
je 0x10096cc
call dword [sym.imp.msvcrt.dll_strncpy]
mov eax, edi
add esp, 0xc
lea ecx, [eax + 1]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x10096c3
jmp 0x10096e6
call dword [sym.imp.msvcrt.dll_strncpy]
mov eax, edi
add esp, 0xc
lea ecx, [eax + 1]
mov dl, byte [eax]
inc eax
test dl, dl
jne 0x10096da
mov edi, 0x1024ca0
sub eax, ecx
cmp byte [0x1024ca0], 0
je case.default.0x1008023
push eax
push edi
push dword [ebp + 8]
call fcn.01004662
jmp case.default.0x1008023
mov eax, dword [esi + 0x1fc]
mov dword [esi + 0x14], eax
mov eax, dword [esi + 0x200]
mov dword [esi + 0x10], eax
mov dword [esi + 0xac], edi
jmp 0x100981f
mov eax, dword [ebp + 0xc]
cmp byte [eax], 0x38
jne 0x1008e54
push esi
push dword [ebp + 8]
call fcn.01006f44
jmp 0x1008e54
mov eax, dword [ebp + 0xc]
mov al, byte [eax]
cmp al, 0x20
jb 0x1008e54
mov ecx, dword [esi + 0x6c]
movzx eax, al
sub eax, 0x20
mov dword [esi + ecx*4 + 0x18], eax
inc dword [esi + 0x6c]
cmp dword [esi + 0x6c], 2
jne case.default.0x1008023
mov eax, dword [esi + 0x18]
and dword [esi + 0x78], 0
and dword [esi + 0xac], 0
mov dword [esi + 0x10], eax
mov eax, dword [esi + 0x1c]
mov dword [esi + 0x14], eax
jmp case.default.0x1008023
test ecx, ecx
je case.default.0x1008023
test dl, 2
je case.default.0x1008023
mov eax, dword [ebp + 0xc]
mov al, byte [eax]
cmp al, 0x42
je 0x10097a4
cmp al, 0x4a
je 0x10097a4
cmp al, 0x48
jne 0x1008e54
and dword [esi + 0x20c], 0xffffffbf
push 0x100f030
push 0
push esi
call fcn.010075fd
jmp 0x1008e54
test ecx, ecx
je case.default.0x1008023
test dl, 2
je case.default.0x1008023
mov eax, dword [ebp + 0xc]
mov al, byte [eax]
cmp al, 0x40
je 0x10097d7
cmp al, 0x42
jne 0x1008e54
or dword [esi + 0x20c], 0x40
push 0x100f0b0
jmp 0x10097b0
xor edi, edi
cmp ecx, edi
je case.default.0x1008023
test dl, 2
je case.default.0x1008023
mov eax, dword [ebp + 0xc]
movzx eax, byte [eax]
sub eax, 0x70
je 0x100980c
dec eax
jne 0x100981f
and dword [esi + 0x20c], 0xffffffbf
push 0x100f030
jmp 0x1009818
or dword [esi + 0x20c], 0x40
push 0x100f0b0
push edi
push esi
call fcn.010075fd
mov dword [esi + 0x78], edi
inc dword [ebp - 4]
mov eax, dword [ebp - 4]
inc dword [ebp + 0xc]
cmp eax, dword [ebp + 0x10]
jb 0x1007f69
mov edi, dword [ebp + 8]
xor ebx, ebx
call fcn.01006b6c
test byte [0x102aa64], 4
je 0x1009856
test byte [0x1010741], 0xff
je 0x1009856
push esi
call fcn.010079ac
mov ax, word [esi + 0x14]
movzx edx, word [0x1025cb0]
mov word [ebp - 0x18], ax
mov ax, word [esi + 0x10]
movsx ecx, ax
cmp edx, ecx
mov word [ebp - 0x16], ax
je 0x1009893
test byte [0x102aa64], 4
mov word [0x1025cb0], ax
je 0x1009893
mov eax, dword [ebp - 0x16]
inc eax
push eax
push dword [edi + 0x7b8]
call fcn.010075c5
push dword [ebp - 0x18]
push dword [edi + 0x7b8]
call dword [sym.imp.KERNEL32.dll_SetConsoleCursorPosition]
mov dword [esi + 0xa4], ebx
call fcn.0100664d
pop edi
pop esi
pop ebx
leave
ret 0x10