Function at 0x1000ca00
Capabilities:
Copy file
Identify system language via api
Manipulate console buffer
Read .ini file
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xa0
mov dword [ebp - 0x94], ecx
movsx eax, byte [ebp + 8]
cmp eax, 0x41
jl 0x1000ca2d
movsx ecx, byte [ebp + 8]
cmp ecx, 0x5a
jg 0x1000ca2d
movsx eax, byte [ebp + 8]
sub eax, 0x41
jmp 0x1000e154
mov edx, dword [0x100fb724]
xor eax, eax
mov dword [ebp - 0x90], edx
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x90], 0xf7bc1c24
jne 0x1000cc72
cmp dword [ebp - 0x8c], 0
jne 0x1000cc72
push 0
push 0
call dword [sym.imp.KERNEL32.dll_EnumSystemLocalesW]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetConsoleScreenBufferInfo]
push 0
call dword [sym.imp.GDI32.dll_CreateBitmapIndirect]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_Rectangle]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetNamedPipeHandleStateW]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_OpenEventW]
push 0
push 0
push 0
push 0
push 0x10106d98
push 0
push 0x10106dd0
call dword [sym.imp.KERNEL32.dll_GetCalendarInfoEx]
push 0
call dword [sym.imp.KERNEL32.dll_GetLargestConsoleWindowSize]
mov dword [ebp - 0x98], eax
push 0
push 0
call dword [sym.imp.KERNEL32.dll_LocalAlloc]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_ExcludeClipRect]
mov ecx, dword [ebp - 0x9c]
mov dword [ebp - 0x84], ecx
push 0
mov edx, dword [ebp - 0x84]
push edx
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WriteConsoleOutputAttribute]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateIoCompletionPort]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_HeapSetInformation]
push 0
push 0
call dword [sym.imp.GDI32.dll_GetCurrentPositionEx]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileSectionW]
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateFileMappingW]
push 0
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_SetPaletteEntries]
call dword [sym.imp.KERNEL32.dll_GetSystemDefaultUILanguage]
push 0
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_PlayMetaFileRecord]
push 0
call dword [sym.imp.GDI32.dll_GetLayout]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CopyFileW]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CopyFileTransactedW]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetLongPathNameW]
push 0
call dword [sym.imp.GDI32.dll_GetMapMode]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetMailslotInfo]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_lstrcatW]
push 0
call dword [sym.imp.GDI32.dll_CreateFontIndirectExW]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_PeekConsoleInputW]
push 0
call dword [sym.imp.KERNEL32.dll_FreeEnvironmentStringsW]
mov eax, dword [ebp - 0xa0]
mov dword [ebp - 0x88], eax
mov ecx, dword [ebp - 0x88]
push ecx
push 0
call dword [sym.imp.KERNEL32.dll_SetConsoleCursorPosition]
push 0
call dword [sym.imp.KERNEL32.dll_GetConsoleAliasesLengthW]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FlushInstructionCache]
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_DPtoLP]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetPriorityClass]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_EnumTimeFormatsW]
push 0
call dword [sym.imp.GDI32.dll_GetTextCharacterExtra]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStructW]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WriteFileEx]
push 0
call dword [sym.imp.KERNEL32.dll_GetActiveProcessorCount]
movsx edx, byte [ebp + 8]
cmp edx, 0x61
jl 0x1000cc90
movsx eax, byte [ebp + 8]
cmp eax, 0x7a
jg 0x1000cc90
movsx eax, byte [ebp + 8]
sub eax, 0x47
jmp 0x1000e154
movsx ecx, byte [ebp + 8]
cmp ecx, 0x30
jl 0x1000ccae
movsx edx, byte [ebp + 8]
cmp edx, 0x39
jg 0x1000ccae
movsx eax, byte [ebp + 8]
add eax, 4
jmp 0x1000e154
mov dword [ebp - 0xc], 0x176e
mov dword [ebp - 4], 0
mov eax, dword [ebp - 4]
sub eax, 0x6f1
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
sub ecx, dword [ebp - 0xc]
mov dword [ebp - 4], ecx
mov dword [ebp - 0x28], 0
mov dword [ebp - 8], 0x34a
mov edx, dword [ebp - 4]
sub edx, 0x1e2d
mov dword [ebp - 4], edx
mov eax, dword [ebp - 0xc]
sub eax, dword [ebp - 8]
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 4]
sub ecx, dword [ebp - 0x28]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 8]
add edx, dword [ebp - 0x28]
mov dword [ebp - 8], edx
mov eax, dword [ebp - 4]
add eax, dword [ebp - 0x28]
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 8]
sub ecx, 0x107
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 8]
and edx, 0x80000001
jns 0x1000cd2a
dec edx
or edx, 0xfffffffe
inc edx
test edx, edx
je 0x1000cd39
mov eax, dword [ebp - 8]
add eax, 1
mov dword [ebp - 8], eax
jmp 0x1000cd1a
mov ecx, dword [ebp - 0xc]
add ecx, dword [ebp - 0x28]
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 4]
add edx, 0x1a15
mov dword [ebp - 4], edx
mov eax, dword [ebp - 4]
sub eax, 0x17c9
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 0xc]
sub ecx, 0x1f5e
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 4]
add edx, 0xc8
mov dword [ebp - 4], edx
mov eax, dword [ebp - 0xc]
add eax, 0x2244
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 8]
add ecx, dword [ebp - 0x28]
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 4]
sub edx, 0xd50
mov dword [ebp - 4], edx
mov eax, dword [ebp - 8]
add eax, 0x10cb
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 0xc]
add ecx, dword [ebp - 8]
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 0xc]
add edx, 0xbbe
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 4]
add eax, 0x20d
mov dword [ebp - 4], eax
mov dword [ebp - 0x30], 0
jmp 0x1000cdce
mov ecx, dword [ebp - 0x30]
add ecx, 1
mov dword [ebp - 0x30], ecx
cmp dword [ebp - 0x30], 0x37
jge 0x1000cddf
mov edx, dword [ebp - 8]
add edx, 6
mov dword [ebp - 8], edx
jmp 0x1000cdc5
mov eax, dword [ebp - 0xc]
sub eax, 0x1fee
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 8]
add ecx, dword [ebp - 4]
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 4]
add edx, 0x44e
mov dword [ebp - 4], edx
mov eax, dword [ebp - 4]
sub eax, dword [ebp - 4]
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
add ecx, dword [ebp - 0x28]
mov dword [ebp - 4], ecx
mov dword [ebp - 0x34], 0
jmp 0x1000ce23
mov edx, dword [ebp - 0x34]
add edx, 1
mov dword [ebp - 0x34], edx
cmp dword [ebp - 0x34], 0x24
jge 0x1000ce34
mov eax, dword [ebp - 0xc]
add eax, 7
mov dword [ebp - 0xc], eax
jmp 0x1000ce1a
mov ecx, dword [ebp - 4]
add ecx, dword [ebp - 0xc]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 8]
add edx, 0x9d9
mov dword [ebp - 8], edx
mov eax, dword [ebp - 4]
sub eax, 0x239f
mov dword [ebp - 4], eax
mov dword [ebp - 0x38], 0
jmp 0x1000ce66
mov ecx, dword [ebp - 0x38]
add ecx, 1
mov dword [ebp - 0x38], ecx
cmp dword [ebp - 0x38], 0xc
jge 0x1000ce77
mov edx, dword [ebp - 4]
sub edx, 3
mov dword [ebp - 4], edx
jmp 0x1000ce5d
mov eax, dword [ebp - 0xc]
sub eax, 0x1ed8
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0xc]
sub ecx, 0xe5a
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 0xc]
add edx, 0x263c
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 4]
add eax, dword [ebp - 0xc]
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 8]
add ecx, dword [ebp - 0xc]
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 4]
add edx, dword [ebp - 4]
mov dword [ebp - 4], edx
mov eax, dword [ebp - 8]
and eax, 0x80000001
jns 0x1000cec4
dec eax
or eax, 0xfffffffe
inc eax
test eax, eax
je 0x1000ced3
mov ecx, dword [ebp - 8]
add ecx, 1
mov dword [ebp - 8], ecx
jmp 0x1000ceb5
mov edx, dword [ebp - 8]
add edx, 0x1d23
mov dword [ebp - 8], edx
mov eax, dword [ebp - 0xc]
add eax, 0xc85
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 8]
add ecx, dword [ebp - 0x28]
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 4]
add edx, 0x16f3
mov dword [ebp - 4], edx
mov eax, dword [ebp - 0xc]
add eax, 0x57b
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 8]
sub ecx, dword [ebp - 8]
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 8]
add edx, dword [ebp - 0x28]
mov dword [ebp - 8], edx
mov eax, dword [ebp - 4]
sub eax, 0x18b6
mov dword [ebp - 4], eax
mov eax, dword [ebp - 8]
cdq
mov ecx, 3
idiv ecx
test edx, edx
je 0x1000cf41
mov edx, dword [ebp - 8]
add edx, 1
mov dword [ebp - 8], edx
jmp 0x1000cf27
mov eax, dword [ebp - 4]
add eax, 0xb0a
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
add ecx, dword [ebp - 0x28]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 8]
sub edx, 0x1501
mov dword [ebp - 8], edx
mov eax, dword [ebp - 0xc]
sub eax, 0xfe7
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0xc]
add ecx, 0x26cb
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 4]
and edx, 0x80000001
jns 0x1000cf88
dec edx
or edx, 0xfffffffe
inc edx
test edx, edx
je 0x1000cf99
mov eax, dword [ebp - 4]
add eax, 0xec7
mov dword [ebp - 4], eax
jmp 0x1000cfa5
mov ecx, dword [ebp - 4]
sub ecx, 0xec7
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 4]
sub edx, dword [ebp - 4]
mov dword [ebp - 4], edx
mov eax, dword [ebp - 0xc]
add eax, dword [ebp - 0xc]
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 8]
and ecx, 0x80000001
jns 0x1000cfc7
dec ecx
or ecx, 0xfffffffe
inc ecx
test ecx, ecx
je 0x1000cfd6
mov edx, dword [ebp - 8]
add edx, 1
mov dword [ebp - 8], edx
jmp 0x1000cfb7
mov eax, dword [ebp - 4]
sub eax, dword [ebp - 4]
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 8]
add ecx, 0x1780
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 4]
sub edx, dword [ebp - 0x28]
mov dword [ebp - 4], edx
mov eax, dword [ebp - 8]
add eax, dword [ebp - 0x28]
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 0xc]
sub ecx, dword [ebp - 0x28]
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 8]
sub edx, dword [ebp - 8]
mov dword [ebp - 8], edx
mov dword [ebp - 0x3c], 0
jmp 0x1000d021
mov eax, dword [ebp - 0x3c]
add eax, 1
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0x30
jge 0x1000d032
mov ecx, dword [ebp - 4]
add ecx, 9
mov dword [ebp - 4], ecx
jmp 0x1000d018
mov edx, dword [ebp - 0xc]
add edx, dword [ebp - 4]
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 8]
add eax, 0x1b18
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 0xc]
add ecx, dword [ebp - 8]
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 8]
add edx, dword [ebp - 0xc]
mov dword [ebp - 8], edx
mov eax, dword [ebp - 0xc]
add eax, dword [ebp - 4]
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0xc]
add ecx, 0x319
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 0xc]
sub edx, 0x14b3
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 8]
sub eax, dword [ebp - 4]
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 4]
add ecx, dword [ebp - 0x28]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 0xc]
add edx, dword [ebp - 8]
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 4]
sub eax, 0xff4
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 8]
add ecx, dword [ebp - 0xc]
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 4]
and edx, 0x80000003
jns 0x1000d0b8
dec edx
or edx, 0xfffffffc
inc edx
test edx, edx
je 0x1000d0cd
cmp dword [ebp - 4], 0
jle 0x1000d0cd
mov eax, dword [ebp - 4]
add eax, 0x155b
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 8]
add ecx, dword [ebp - 4]
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 8]
sub edx, dword [ebp - 0xc]
mov dword [ebp - 8], edx
mov eax, dword [ebp - 8]
cdq
mov ecx, 3
idiv ecx
test edx, edx
je 0x1000d0f9
mov edx, dword [ebp - 8]
add edx, 1
mov dword [ebp - 8], edx
jmp 0x1000d0df
mov eax, dword [ebp - 0xc]
add eax, dword [ebp - 0xc]
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 4]
add ecx, dword [ebp - 4]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 0xc]
add edx, dword [ebp - 0xc]
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 8]
sub eax, dword [ebp - 4]
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 0xc]
sub ecx, dword [ebp - 8]
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 8]
add edx, dword [ebp - 0xc]
mov dword [ebp - 8], edx
mov eax, dword [ebp - 4]
add eax, dword [ebp - 8]
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 8]
add ecx, dword [ebp - 4]
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 4]
sub edx, 0xe72
mov dword [ebp - 4], edx
mov eax, dword [ebp - 0xc]
add eax, 0xbcb
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 8]
add ecx, 0x16ff
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 8]
add edx, dword [ebp - 8]
mov dword [ebp - 8], edx
mov eax, dword [ebp - 4]
add eax, 0xa76
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
add ecx, 0x1644
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 8]
sub edx, 0xb09
mov dword [ebp - 8], edx
mov eax, dword [ebp - 4]
sub eax, 0x42d
mov dword [ebp - 4], eax
mov dword [ebp - 0x40], 0
jmp 0x1000d1ad
mov ecx, dword [ebp - 0x40]
add ecx, 1
mov dword [ebp - 0x40], ecx
cmp dword [ebp - 0x40], 0x5c
jge 0x1000d1be
mov edx, dword [ebp - 4]
sub edx, 9
mov dword [ebp - 4], edx
jmp 0x1000d1a4
mov eax, dword [ebp - 0xc]
add eax, dword [ebp - 8]
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 4]
sub ecx, dword [ebp - 0x28]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 4]
add edx, 0x2050
mov dword [ebp - 4], edx
mov eax, dword [ebp - 0xc]
add eax, dword [ebp - 0xc]
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0xc]
add ecx, dword [ebp - 4]
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 0xc]
sub edx, 0x1315
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 4]
sub eax, 0x1e8d
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
add ecx, dword [ebp - 8]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 4]
add edx, 0x996
mov dword [ebp - 4], edx
mov eax, dword [ebp - 4]
add eax, dword [ebp - 4]
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 0xc]
add ecx, 0x23e2
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 4]
add edx, dword [ebp - 4]
mov dword [ebp - 4], edx
mov eax, dword [ebp - 8]
sub eax, 0x143d
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 8]
add ecx, 0x141a
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 0xc]
add edx, dword [ebp - 4]
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 8]
add eax, 0xe43
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 0xc]
sub ecx, 0x1dbb
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 4]
sub edx, dword [ebp - 0xc]
mov dword [ebp - 4], edx
mov eax, dword [ebp - 4]
add eax, dword [ebp - 0x28]
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 8]
sub ecx, 0x10f3
mov dword [ebp - 8], ecx
mov eax, dword [ebp - 4]
cdq
mov ecx, 3
idiv ecx
test edx, edx
je 0x1000d2a8
mov edx, dword [ebp - 4]
sub edx, 0x731
mov dword [ebp - 4], edx
mov eax, dword [ebp - 8]
add eax, 0x8cc
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 8]
add ecx, dword [ebp - 0x28]
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 8]
add edx, 0x1da9
mov dword [ebp - 8], edx
mov eax, dword [ebp - 0xc]
add eax, dword [ebp - 4]
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 8]
add ecx, dword [ebp - 8]
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 8]
sub edx, 0x2074
mov dword [ebp - 8], edx
mov eax, dword [ebp - 0xc]
cdq
mov ecx, 3
idiv ecx
test edx, edx
je 0x1000d300
mov edx, dword [ebp - 0xc]
add edx, 1
mov dword [ebp - 0xc], edx
jmp 0x1000d2e6
mov eax, dword [ebp - 4]
sub eax, dword [ebp - 8]
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 0xc]
sub ecx, 0x228
mov dword [ebp - 0xc], ecx
mov eax, dword [ebp - 8]
cdq
mov ecx, 3
idiv ecx
test edx, edx
je 0x1000d32f
mov edx, dword [ebp - 8]
add edx, 1
mov dword [ebp - 8], edx
jmp 0x1000d315
mov eax, dword [ebp - 4]
sub eax, 0x697
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 8]
sub ecx, 0x9aa
mov dword [ebp - 8], ecx
mov dword [ebp - 0x44], 0
jmp 0x1000d358
mov edx, dword [ebp - 0x44]
add edx, 1
mov dword [ebp - 0x44], edx
cmp dword [ebp - 0x44], 0x39
jge 0x1000d369
mov eax, dword [ebp - 0xc]
sub eax, 7
mov dword [ebp - 0xc], eax
jmp 0x1000d34f
mov ecx, dword [ebp - 8]
sub ecx, dword [ebp - 4]
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 4]
sub edx, 0x1fb4
mov dword [ebp - 4], edx
mov eax, dword [ebp - 8]
add eax, 0xba6
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 0xc]
add ecx, 0x222a
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 0xc]
add edx, 0x427
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 4]
add eax, 0x25f3
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 8]
sub ecx, 0x5dd
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 8]
add edx, dword [ebp - 0x28]
mov dword [ebp - 8], edx
mov eax, dword [ebp - 4]
add eax, dword [ebp - 4]
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 8]
sub ecx, 0xe21
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 0xc]
sub edx, 0x120e
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 4]
sub eax, 0x1b90
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 8]
sub ecx, dword [ebp - 0xc]
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 0xc]
sub edx, dword [ebp - 0xc]
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 0xc]
add eax, dword [ebp - 0xc]
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0xc]
add ecx, 0x2131
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 8]
add edx, 0x216b
mov dword [ebp - 8], edx
mov eax, dword [ebp - 0xc]
sub eax, 0x57
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0x28]
cdq
mov ecx, 3
idiv ecx
test edx, edx
je 0x1000d443
mov edx, dword [ebp - 0x28]
add edx, 1
mov dword [ebp - 0x28], edx
jmp 0x1000d429
mov eax, dword [ebp - 4]
add eax, dword [ebp - 0xc]
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
sub ecx, dword [ebp - 8]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 0xc]
sub edx, 0x1e61
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 8]
add eax, dword [ebp - 8]
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 0xc]
add ecx, 0x1dcc
mov dword [ebp - 0xc], ecx
mov dword [ebp - 0x48], 0
jmp 0x1000d488
mov edx, dword [ebp - 0x48]
add edx, 1
mov dword [ebp - 0x48], edx
cmp dword [ebp - 0x48], 0x3b
jge 0x1000d499
mov eax, dword [ebp - 0x28]
sub eax, 6
mov dword [ebp - 0x28], eax
jmp 0x1000d47f
mov ecx, dword [ebp - 4]
add ecx, 0x9cc
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 8]
add edx, dword [ebp - 0xc]
mov dword [ebp - 8], edx
mov eax, dword [ebp - 4]
add eax, 0x3e1
mov dword [ebp - 4], eax
mov eax, dword [ebp - 8]
cdq
mov ecx, 3
idiv ecx
test edx, edx
je 0x1000d4d3
mov edx, dword [ebp - 8]
add edx, 1
mov dword [ebp - 8], edx
jmp 0x1000d4b9
mov eax, dword [ebp - 4]
sub eax, dword [ebp - 4]
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 0x28]
and ecx, 0x80000003
jns 0x1000d4ec
dec ecx
or ecx, 0xfffffffc
inc ecx
test ecx, ecx
je 0x1000d504
cmp dword [ebp - 0x28], 0
jle 0x1000d504
mov edx, dword [ebp - 0x28]
add edx, 0x23d4
mov dword [ebp - 0x28], edx
jmp 0x1000d50f
mov eax, dword [ebp - 0x28]
sub eax, 0x23d4
mov dword [ebp - 0x28], eax
mov ecx, dword [ebp - 0xc]
add ecx, 0x40a
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 0xc]
add edx, dword [ebp - 4]
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 4]
sub eax, dword [ebp - 0x28]
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 0xc]
add ecx, dword [ebp - 4]
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 8]
add edx, dword [ebp - 0x28]
mov dword [ebp - 8], edx
mov eax, dword [ebp - 4]
add eax, dword [ebp - 4]
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
sub ecx, 0x1f4d
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 8]
add edx, 0x182
mov dword [ebp - 8], edx
mov eax, dword [ebp - 4]
sub eax, dword [ebp - 4]
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
sub ecx, dword [ebp - 8]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 8]
sub edx, dword [ebp - 8]
mov dword [ebp - 8], edx
mov eax, dword [ebp - 8]
add eax, 0x15e
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 0xc]
sub ecx, 0x1b52
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 4]
add edx, 0x1983
mov dword [ebp - 4], edx
mov eax, dword [ebp - 8]
sub eax, 0x140b
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 8]
sub ecx, dword [ebp - 0xc]
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 4]
add edx, dword [ebp - 4]
mov dword [ebp - 4], edx
mov eax, dword [ebp - 0xc]
add eax, 0x1a7d
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 4]
add ecx, 0x135b
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 8]
sub edx, dword [ebp - 0xc]
mov dword [ebp - 8], edx
mov eax, dword [ebp - 8]
add eax, 0x1b0f
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 8]
sub ecx, dword [ebp - 0x28]
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 0xc]
sub edx, dword [ebp - 0x28]
mov dword [ebp - 0xc], edx
movsx eax, byte [ebp + 8]
cmp eax, 0x2b
jne 0x1000d608
mov al, 0x3e
jmp 0x1000e154
mov dword [ebp - 0x18], 0x2008
mov dword [ebp - 0x1c], 0x8cd
mov ecx, dword [ebp - 0x18]
sub ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x20], 0x416
mov dword [ebp - 0x2c], 0
mov edx, dword [ebp - 0x20]
sub edx, dword [ebp - 0x24]
mov dword [ebp - 0x20], edx
mov dword [ebp - 0x10], 0
mov eax, dword [ebp - 0x24]
add eax, 0x23d
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x14], 0x1074
mov ecx, dword [ebp - 0x14]
add ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0x24]
sub edx, 0x2342
mov dword [ebp - 0x24], edx
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x18]
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x1c]
sub ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x1c], ecx
mov edx, dword [ebp - 0x18]
sub edx, 0x2fc
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x10]
sub eax, 0x2005
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x18]
add ecx, 0x2704
mov dword [ebp - 0x18], ecx
mov edx, dword [ebp - 0x20]
add edx, dword [ebp - 0x10]
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x1aed
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0x18]
and edx, 0x80000001
jns 0x1000d6ce
dec edx
or edx, 0xfffffffe
inc edx
test edx, edx
je 0x1000d6e5
cmp dword [ebp - 0x18], 0
jle 0x1000d6e5
mov eax, dword [ebp - 0x18]
add eax, 0x602
mov dword [ebp - 0x18], eax
jmp 0x1000d6f1
mov ecx, dword [ebp - 0x18]
sub ecx, 0x602
mov dword [ebp - 0x18], ecx
mov edx, dword [ebp - 0x14]
sub edx, 0xb75
mov dword [ebp - 0x14], edx
mov dword [ebp - 0x4c], 0
jmp 0x1000d70f
mov eax, dword [ebp - 0x4c]
add eax, 1
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0x15
jge 0x1000d720
mov ecx, dword [ebp - 0x1c]
add ecx, 6
mov dword [ebp - 0x1c], ecx
jmp 0x1000d706
mov edx, dword [ebp - 0x20]
add edx, dword [ebp - 0x10]
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 0x10]
add eax, 0x2c6
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x50], 0
jmp 0x1000d746
mov ecx, dword [ebp - 0x50]
add ecx, 1
mov dword [ebp - 0x50], ecx
cmp dword [ebp - 0x50], 0x2c
jge 0x1000d757
mov edx, dword [ebp - 0x10]
add edx, 3
mov dword [ebp - 0x10], edx
jmp 0x1000d73d
mov eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0x1c]
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x10]
add ecx, 0x7f0
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x1c]
sub edx, 0x14ed
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x24]
sub eax, 0x155b
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x14]
add ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0x14]
add edx, 0x163d
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x2c]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x18]
add ecx, 0x2381
mov dword [ebp - 0x18], ecx
mov edx, dword [ebp - 0x24]
sub edx, 0x1fb
mov dword [ebp - 0x24], edx
mov eax, dword [ebp - 0x18]
and eax, 0x80000003
jns 0x1000d7c8
dec eax
or eax, 0xfffffffc
inc eax
test eax, eax
je 0x1000d7da
mov ecx, dword [ebp - 0x18]
add ecx, 0xda5
mov dword [ebp - 0x18], ecx
jmp 0x1000d7e6
mov edx, dword [ebp - 0x18]
sub edx, 0xda5
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x10]
add eax, dword [ebp - 0x1c]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x18]
sub ecx, dword [ebp - 0x20]
mov dword [ebp - 0x18], ecx
mov edx, dword [ebp - 0x2c]
and edx, 0x80000001
jns 0x1000d808
dec edx
or edx, 0xfffffffe
inc edx
test edx, edx
je 0x1000d819
mov eax, dword [ebp - 0x2c]
sub eax, 0x207f
mov dword [ebp - 0x2c], eax
jmp 0x1000d825
mov ecx, dword [ebp - 0x2c]
add ecx, 0x207f
mov dword [ebp - 0x2c], ecx
mov edx, dword [ebp - 0x1c]
sub edx, 0x157b
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 0x20]
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x10]
add ecx, dword [ebp - 0x14]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
sub edx, 0x1293
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 0x14]
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x20]
add ecx, 0xbe3
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x54], 0
jmp 0x1000d876
mov edx, dword [ebp - 0x54]
add edx, 1
mov dword [ebp - 0x54], edx
cmp dword [ebp - 0x54], 0x50
jge 0x1000d887
mov eax, dword [ebp - 0x20]
sub eax, 1
mov dword [ebp - 0x20], eax
jmp 0x1000d86d
mov ecx, dword [ebp - 0x14]
add ecx, 0x13dd
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0x24]
sub edx, 0x17b3
mov dword [ebp - 0x24], edx
mov eax, dword [ebp - 0x20]
sub eax, 0x50f
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x14]
sub ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0x24]
add edx, dword [ebp - 0x24]
mov dword [ebp - 0x24], edx
mov eax, dword [ebp - 0x10]
sub eax, dword [ebp - 0x20]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x20]
sub ecx, dword [ebp - 0x18]
mov dword [ebp - 0x20], ecx
mov edx, dword [ebp - 0x14]
add edx, dword [ebp - 0x20]
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 0x10]
and eax, 0x80000003
jns 0x1000d8e6
dec eax
or eax, 0xfffffffc
inc eax
test eax, eax
je 0x1000d8f8
mov ecx, dword [ebp - 0x10]
add ecx, 0x6bb
mov dword [ebp - 0x10], ecx
jmp 0x1000d904
mov edx, dword [ebp - 0x10]
sub edx, 0x6bb
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x24]
add eax, dword [ebp - 0x1c]
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x14]
and ecx, 0x80000001
jns 0x1000d91d
dec ecx
or ecx, 0xfffffffe
inc ecx
test ecx, ecx
je 0x1000d92c
mov edx, dword [ebp - 0x14]
add edx, 1
mov dword [ebp - 0x14], edx
jmp 0x1000d90d
mov eax, dword [ebp - 0x10]
add eax, 0x2414
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x14]
add ecx, dword [ebp - 0x20]
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0x18]
add edx, 0x1829
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x10]
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x24]
sub ecx, 0x638
mov dword [ebp - 0x24], ecx
mov edx, dword [ebp - 0x18]
add edx, dword [ebp - 0x2c]
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x18]
add eax, 0x17b2
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x10]
add ecx, dword [ebp - 0x24]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x24]
sub edx, dword [ebp - 0x20]
mov dword [ebp - 0x24], edx
mov eax, dword [ebp - 0x10]
sub eax, 0x647
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
add ecx, 0x212c
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x14]
add edx, dword [ebp - 0x14]
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 0x18]
add eax, 0x1bf4
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x58], 0
jmp 0x1000d9c4
mov ecx, dword [ebp - 0x58]
add ecx, 1
mov dword [ebp - 0x58], ecx
cmp dword [ebp - 0x58], 0x1b
jge 0x1000d9d5
mov edx, dword [ebp - 0x2c]
sub edx, 9
mov dword [ebp - 0x2c], edx
jmp 0x1000d9bb
mov eax, dword [ebp - 0x18]
add eax, 0x749
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x14]
sub ecx, dword [ebp - 0x24]
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0x10]
add edx, 0x20fb
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x10]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x10]
sub ecx, 0x19b
mov dword [ebp - 0x10], ecx
mov dword [ebp - 0x5c], 0
jmp 0x1000da1c
mov edx, dword [ebp - 0x5c]
add edx, 1
mov dword [ebp - 0x5c], edx
cmp dword [ebp - 0x5c], 0x35
jge 0x1000da2d
mov eax, dword [ebp - 0x10]
sub eax, 4
mov dword [ebp - 0x10], eax
jmp 0x1000da13
mov ecx, dword [ebp - 0x14]
sub ecx, 0x2518
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x60], 0
jmp 0x1000da4b
mov edx, dword [ebp - 0x60]
add edx, 1
mov dword [ebp - 0x60], edx
cmp dword [ebp - 0x60], 0x34
jge 0x1000da5c
mov eax, dword [ebp - 0x1c]
sub eax, 3
mov dword [ebp - 0x1c], eax
jmp 0x1000da42
mov ecx, dword [ebp - 0x18]
sub ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x18], ecx
mov edx, dword [ebp - 0x24]
add edx, dword [ebp - 0x1c]
mov dword [ebp - 0x24], edx
mov eax, dword [ebp - 0x20]
add eax, 0x1e2
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x10]
sub ecx, dword [ebp - 0x10]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x18]
add edx, 0x1bc4
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x1c]
add eax, 0x1156
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x10]
sub ecx, 0x2119
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x18]
sub edx, 0x98b
mov dword [ebp - 0x18], edx
mov dword [ebp - 0x64], 0
jmp 0x1000dac3
mov eax, dword [ebp - 0x64]
add eax, 1
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0x62
jge 0x1000dad4
mov ecx, dword [ebp - 0x14]
sub ecx, 6
mov dword [ebp - 0x14], ecx
jmp 0x1000daba
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x24]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x18]
sub eax, 0x1830
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x1c]
sub ecx, dword [ebp - 0x18]
mov dword [ebp - 0x1c], ecx
mov edx, dword [ebp - 0x14]
sub edx, dword [ebp - 0x10]
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 0x18]
add eax, 0x1919
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x20]
add ecx, 0x213e
mov dword [ebp - 0x20], ecx
mov edx, dword [ebp - 0x24]
add edx, 0x10e
mov dword [ebp - 0x24], edx
mov eax, dword [ebp - 0x18]
add eax, dword [ebp - 0x14]
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x1c]
sub ecx, 0x2c5
mov dword [ebp - 0x1c], ecx
mov edx, dword [ebp - 0x20]
sub edx, dword [ebp - 0x10]
mov dword [ebp - 0x20], edx
mov dword [ebp - 0x68], 0
jmp 0x1000db4d
mov eax, dword [ebp - 0x68]
add eax, 1
mov dword [ebp - 0x68], eax
cmp dword [ebp - 0x68], 0x27
jge 0x1000db5e
mov ecx, dword [ebp - 0x20]
add ecx, 7
mov dword [ebp - 0x20], ecx
jmp 0x1000db44
mov edx, dword [ebp - 0x14]
sub edx, dword [ebp - 0x2c]
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 0x14]
add eax, 0xd76
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x20]
add ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x20], ecx
mov edx, dword [ebp - 0x20]
add edx, dword [ebp - 0x2c]
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 0x10]
add eax, dword [ebp - 0x20]
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x6c], 0
jmp 0x1000db9f
mov ecx, dword [ebp - 0x6c]
add ecx, 1
mov dword [ebp - 0x6c], ecx
cmp dword [ebp - 0x6c], 0x4d
jge 0x1000dbb0
mov edx, dword [ebp - 0x1c]
sub edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x1000db96
mov eax, dword [ebp - 0x24]
add eax, 0x15
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x18]
add ecx, dword [ebp - 0x20]
mov dword [ebp - 0x18], ecx
mov edx, dword [ebp - 0x1c]
add edx, 0x1458
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x24]
add eax, dword [ebp - 0x24]
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x18]
add ecx, dword [ebp - 0x20]
mov dword [ebp - 0x18], ecx
mov edx, dword [ebp - 0x18]
sub edx, 0xfb5
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x20]
sub eax, dword [ebp - 0x2c]
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x14]
and ecx, 0x80000001
jns 0x1000dc05
dec ecx
or ecx, 0xfffffffe
inc ecx
test ecx, ecx
je 0x1000dc14
mov edx, dword [ebp - 0x14]
add edx, 1
mov dword [ebp - 0x14], edx
jmp 0x1000dbf5
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x24]
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x20]
sub ecx, 0xa6c
mov dword [ebp - 0x20], ecx
mov edx, dword [ebp - 0x18]
add edx, 0x1fc0
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x24]
add eax, 0x1fa7
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x10]
sub ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
add edx, dword [ebp - 0x14]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x24]
sub eax, 0x2074
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x1c]
sub ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x1c], ecx
mov edx, dword [ebp - 0x1c]
add edx, 0xa38
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x10]
sub eax, 0x427
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x20]
sub ecx, 0x2f4
mov dword [ebp - 0x20], ecx
mov edx, dword [ebp - 0x14]
sub edx, dword [ebp - 0x2c]
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 0x18]
sub eax, 0x1cec
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x24]
add ecx, 0x1bd8
mov dword [ebp - 0x24], ecx
mov edx, dword [ebp - 0x20]
sub edx, 0x1e16
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 0x10]
sub eax, 0x476
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
add ecx, 0xdce
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
add edx, dword [ebp - 0x10]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
add eax, dword [ebp - 0x18]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 0x1f42
mov dword [ebp - 0x1c], ecx
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x2c]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x14]
and eax, 0x80000001
jns 0x1000dd02
dec eax
or eax, 0xfffffffe
inc eax
test eax, eax
je 0x1000dd14
mov ecx, dword [ebp - 0x14]
sub ecx, 0x1986
mov dword [ebp - 0x14], ecx
jmp 0x1000dd20
mov edx, dword [ebp - 0x14]
add edx, 0x1986
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 0x18]
sub eax, 0x26b1
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x24]
add ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x24], ecx
mov edx, dword [ebp - 0x1c]
sub edx, 0xca3
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x2c]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
sub ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x1c], ecx
mov edx, dword [ebp - 0x14]
sub edx, dword [ebp - 0x2c]
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 0x18]
add eax, 0xdda
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x70], 0
jmp 0x1000dd78
mov ecx, dword [ebp - 0x70]
add ecx, 1
mov dword [ebp - 0x70], ecx
cmp dword [ebp - 0x70], 0x62
jge 0x1000dd89
mov edx, dword [ebp - 0x24]
sub edx, 2
mov dword [ebp - 0x24], edx
jmp 0x1000dd6f
mov eax, dword [ebp - 0x24]
add eax, 0x29c
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x20]
add ecx, 0xfba
mov dword [ebp - 0x20], ecx
mov edx, dword [ebp - 0x14]
add edx, 0x1ad8
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 0x10]
sub eax, dword [ebp - 0x20]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x14]
add ecx, dword [ebp - 0x24]
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0x14]
add edx, dword [ebp - 0x10]
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 0x24]
add eax, 0x458
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x18]
sub ecx, dword [ebp - 0x14]
mov dword [ebp - 0x18], ecx
mov edx, dword [ebp - 0x14]
sub edx, 0x2a
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x20]
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x20]
add ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x74], 0
jmp 0x1000de08
mov edx, dword [ebp - 0x74]
add edx, 1
mov dword [ebp - 0x74], edx
cmp dword [ebp - 0x74], 0x23
jge 0x1000de19
mov eax, dword [ebp - 0x14]
sub eax, 6
mov dword [ebp - 0x14], eax
jmp 0x1000ddff
mov ecx, dword [ebp - 0x14]
sub ecx, 0x17f1
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0x18]
sub edx, dword [ebp - 0x18]
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x10]
sub eax, 0xf24
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
add ecx, 0x2363
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x20]
add edx, dword [ebp - 0x14]
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 0x24]
add eax, 0x1e28
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x14]
add ecx, dword [ebp - 0x18]
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0x1c]
add edx, 0x2193
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x20]
and eax, 0x80000003
jns 0x1000de7d
dec eax
or eax, 0xfffffffc
inc eax
test eax, eax
je 0x1000de8d
mov ecx, dword [ebp - 0x20]
sub ecx, 0x1975
mov dword [ebp - 0x20], ecx
mov edx, dword [ebp - 0x1c]
sub edx, 0x1c03
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x20]
add eax, 0xac6
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x18]
add ecx, dword [ebp - 0x20]
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x78], 0
jmp 0x1000debf
mov edx, dword [ebp - 0x78]
add edx, 1
mov dword [ebp - 0x78], edx
cmp dword [ebp - 0x78], 0x24
jge 0x1000ded0
mov eax, dword [ebp - 0x2c]
add eax, 6
mov dword [ebp - 0x2c], eax
jmp 0x1000deb6
mov ecx, dword [ebp - 0x20]
add ecx, 0x22c3
mov dword [ebp - 0x20], ecx
mov edx, dword [ebp - 0x24]
add edx, dword [ebp - 0x2c]
mov dword [ebp - 0x24], edx
mov eax, dword [ebp - 0x18]
add eax, dword [ebp - 0x14]
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x10]
add ecx, dword [ebp - 0x24]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x24]
add edx, 0x1b99
mov dword [ebp - 0x24], edx
mov eax, dword [ebp - 0x1c]
sub eax, 0x4d1
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x24]
add ecx, dword [ebp - 0x14]
mov dword [ebp - 0x24], ecx
mov edx, dword [ebp - 0x14]
add edx, dword [ebp - 0x18]
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 0x20]
add eax, 0xe4
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x20]
sub ecx, 0x2419
mov dword [ebp - 0x20], ecx
mov edx, dword [ebp - 0x1c]
sub edx, 0x9c7
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x10]
add eax, dword [ebp - 0x24]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 0x12dc
mov dword [ebp - 0x1c], ecx
mov edx, dword [ebp - 0x10]
add edx, 0x1445
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x10]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x7c], 0
jmp 0x1000df7f
mov ecx, dword [ebp - 0x7c]
add ecx, 1
mov dword [ebp - 0x7c], ecx
cmp dword [ebp - 0x7c], 0x27
jge 0x1000df90
mov edx, dword [ebp - 0x24]
add edx, 9
mov dword [ebp - 0x24], edx
jmp 0x1000df76
mov eax, dword [ebp - 0x10]
sub eax, 0x410
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x21e5
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0x14]
sub edx, 0x1859
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 0x24]
add eax, dword [ebp - 0x20]
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x1c]
sub ecx, 0x1065
mov dword [ebp - 0x1c], ecx
mov edx, dword [ebp - 0x1c]
add edx, 0xe6b
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x24]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x24]
sub ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x24], ecx
mov edx, dword [ebp - 0x10]
sub edx, 0xaa0
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0x10]
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x10]
add ecx, 0x7f7
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x14]
sub edx, 0x1e1d
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 0x20]
add eax, 0x472
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x10]
add ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x20]
add edx, 0x25f7
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 0x18]
and eax, 0x80000001
jns 0x1000e042
dec eax
or eax, 0xfffffffe
inc eax
test eax, eax
je 0x1000e05a
cmp dword [ebp - 0x18], 0
jle 0x1000e05a
mov ecx, dword [ebp - 0x18]
sub ecx, 0x350
mov dword [ebp - 0x18], ecx
jmp 0x1000e066
mov edx, dword [ebp - 0x18]
add edx, 0x350
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x20]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x20]
add ecx, 0x1033
mov dword [ebp - 0x20], ecx
mov edx, dword [ebp - 0x24]
and edx, 0x80000001
jns 0x1000e08b
dec edx
or edx, 0xfffffffe
inc edx
test edx, edx
je 0x1000e0a0
cmp dword [ebp - 0x24], 0
jle 0x1000e0a0
mov eax, dword [ebp - 0x24]
sub eax, 0x534
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x10]
add ecx, dword [ebp - 0x18]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x20]
add edx, 0x1269
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x10]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
mov edx, dword [ebp - 0x18]
add edx, dword [ebp - 0x2c]
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x1c]
add eax, 0x177c
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x10]
add ecx, 0x11ec
mov dword [ebp - 0x10], ecx
mov dword [ebp - 0x80], 0
jmp 0x1000e0f9
mov edx, dword [ebp - 0x80]
add edx, 1
mov dword [ebp - 0x80], edx
cmp dword [ebp - 0x80], 0x60
jge 0x1000e10a
mov eax, dword [ebp - 0x14]
sub eax, 3
mov dword [ebp - 0x14], eax
jmp 0x1000e0f0
mov ecx, dword [ebp - 0x14]
add ecx, 0x167a
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0x1c]
add edx, 0x17a2
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x20]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x24]
cdq
mov ecx, 3
idiv ecx
test edx, edx
je 0x1000e145
mov edx, dword [ebp - 0x24]
add edx, 1
mov dword [ebp - 0x24], edx
jmp 0x1000e12b
movsx eax, byte [ebp + 8]
cmp eax, 0x2f
jne 0x1000e152
mov al, 0x3f
jmp 0x1000e154
xor al, al
mov esp, ebp
pop ebp
ret 4