Function at 0x10007e70
Capabilities:
Accept command line arguments
Create directory
Create pipe
Enumerate files on windows
Enumerate gui resources
Extract resource via kernel32 functions
Get disk information
Get file attributes
Manipulate console buffer
Move file
Print debug messages
Read pipe
Terminate process
Write pipe

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x1d4
push esi
push edi
mov dword [ebp - 0xc4], 0x10
mov eax, dword [0x100612f4]
mov dword [ebp - 0xc8], eax
cmp dword [ebp + 8], 0
je 0x1000806f
push 0
call dword [sym.imp.KERNEL32.dll_GetMaximumProcessorCount]
push 0
push 0
call dword [sym.imp.GDI32.dll_GetRasterizerCaps]
call dword [sym.imp.KERNEL32.dll_GetActiveProcessorGroupCount]
push 0
call dword [sym.imp.KERNEL32.dll_DeleteCriticalSection]
call dword [sym.imp.KERNEL32.dll_GetCommandLineW]
push 0x1006b420
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateFileMappingFromApp]
push 0
push 0
call dword [sym.imp.GDI32.dll_GetDCOrgEx]
push 0
call dword [sym.imp.KERNEL32.dll_GlobalUnlock]
push 0
call dword [sym.imp.KERNEL32.dll_FlsGetValue]
push 0
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
push 0
call dword [sym.imp.GDI32.dll_SetMiterLimit]
push 0
push 0
call dword [sym.imp.GDI32.dll_SetStretchBltMode]
push 0
call dword [sym.imp.KERNEL32.dll_AddAtomW]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_EnumResourceLanguagesExW]
push 0
call dword [sym.imp.KERNEL32.dll_ResetEvent]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetAppContainerNamedObjectPath]
push 0
call dword [sym.imp.KERNEL32.dll_GetConsoleDisplayMode]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetCommMask]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSectionEx]
push 0
call dword [sym.imp.KERNEL32.dll_CloseThreadpool]
mov ecx, dword [ebp - 0xd0]
mov dword [ebp - 0xbc], ecx
mov edx, dword [ebp - 0xd4]
mov dword [ebp - 0xc0], edx
push 0
mov eax, dword [ebp - 0xbc]
push eax
mov ecx, dword [ebp - 0xc0]
push ecx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WriteConsoleOutputW]
push 0
push 0
call dword [sym.imp.GDI32.dll_StartDocW]
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_SetTextJustification]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GlobalAlloc]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateSymbolicLinkW]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_TransactNamedPipe]
push 0
call dword [sym.imp.KERNEL32.dll_DeleteFiber]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_QueryProtectedPolicy]
call dword [sym.imp.KERNEL32.dll_GetVersion]
push 0
call dword [sym.imp.GDI32.dll_GdiSetBatchLimit]
call dword [sym.imp.KERNEL32.dll_GetConsoleCP]
push 0
call dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetProcessTimes]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetNumberOfConsoleInputEvents]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_StretchDIBits]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateDirectoryW]
push 0
push 0
push 0
push 0
push 0x1006b450
call dword [sym.imp.KERNEL32.dll_FindFirstFileNameTransactedW]
jmp 0x10008086
mov edx, 4
imul eax, edx, 0x9d
mov ecx, dword [0x10061304]
mov edx, dword [ecx + eax]
mov dword [ebp + 8], edx
mov dword [ebp - 0x78], 0
jmp 0x10008098
mov eax, dword [ebp - 0x78]
add eax, 1
mov dword [ebp - 0x78], eax
cmp dword [ebp - 0x78], 0x100
jge 0x100084d5
mov ecx, dword [ebp - 0x78]
mov dl, byte [ebp - 0x78]
mov byte [ebp + ecx - 0x1d4], dl
mov dword [ebp - 4], 0x2483
mov dword [ebp - 0x5c], 0x1e50
mov eax, dword [ebp - 4]
add eax, dword [ebp - 0x5c]
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
sub ecx, dword [ebp - 4]
mov dword [ebp - 4], ecx
mov dword [ebp - 0x84], 0
jmp 0x100080ed
mov edx, dword [ebp - 0x84]
add edx, 1
mov dword [ebp - 0x84], edx
cmp dword [ebp - 0x84], 0x17
jge 0x10008101
mov eax, dword [ebp - 4]
add eax, 9
mov dword [ebp - 4], eax
jmp 0x100080de
mov dword [ebp - 8], 0x2107
mov ecx, dword [ebp - 8]
sub ecx, dword [ebp - 8]
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 8]
add edx, 0x1347
mov dword [ebp - 8], edx
mov eax, dword [ebp - 8]
add eax, dword [ebp - 8]
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 8]
add ecx, dword [ebp - 8]
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 8]
sub edx, dword [ebp - 8]
mov dword [ebp - 8], edx
mov eax, dword [ebp - 8]
add eax, dword [ebp - 8]
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 8]
add ecx, 0x1d41
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 4]
sub edx, 0x1a66
mov dword [ebp - 4], edx
mov eax, dword [ebp - 8]
sub eax, dword [ebp - 8]
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 4]
add ecx, 0xa0f
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 8]
add edx, 0xb3d
mov dword [ebp - 8], edx
mov eax, dword [ebp - 8]
add eax, 0x1a8d
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 4]
sub ecx, 0x21f7
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 8]
sub edx, 0xa29
mov dword [ebp - 8], edx
mov eax, dword [ebp - 4]
add eax, 0x193b
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 8]
sub ecx, 0x784
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 8]
add edx, dword [ebp - 0x5c]
mov dword [ebp - 8], edx
mov eax, dword [ebp - 4]
add eax, dword [ebp - 4]
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
add ecx, 0x2328
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 8]
add edx, 0x1026
mov dword [ebp - 8], edx
mov eax, dword [ebp - 8]
sub eax, dword [ebp - 4]
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 8]
sub ecx, 0x495
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 4]
sub edx, 0x1145
mov dword [ebp - 4], edx
mov eax, dword [ebp - 4]
add eax, 0x103e
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 8]
sub ecx, dword [ebp - 0x5c]
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 4]
sub edx, 0x1733
mov dword [ebp - 4], edx
mov eax, dword [ebp - 4]
add eax, dword [ebp - 0x5c]
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
sub ecx, dword [ebp - 4]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 4]
add edx, dword [ebp - 4]
mov dword [ebp - 4], edx
mov eax, dword [ebp - 8]
add eax, 0xac
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 4]
add ecx, 0x23fd
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 8]
sub edx, dword [ebp - 0x5c]
mov dword [ebp - 8], edx
mov eax, dword [ebp - 4]
add eax, 0xbff
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 8]
sub ecx, dword [ebp - 4]
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 8]
add edx, 0x16a2
mov dword [ebp - 8], edx
mov eax, dword [ebp - 8]
sub eax, 0x129f
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 8]
add ecx, 0x26fb
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 4]
sub edx, dword [ebp - 8]
mov dword [ebp - 4], edx
mov eax, dword [ebp - 8]
sub eax, dword [ebp - 4]
mov dword [ebp - 8], eax
mov dword [ebp - 0x88], 0
jmp 0x100082be
mov ecx, dword [ebp - 0x88]
add ecx, 1
mov dword [ebp - 0x88], ecx
cmp dword [ebp - 0x88], 0x31
jge 0x100082d2
mov edx, dword [ebp - 0x5c]
add edx, 7
mov dword [ebp - 0x5c], edx
jmp 0x100082af
mov eax, dword [ebp - 4]
sub eax, 0xd4f
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 8]
sub ecx, dword [ebp - 0x5c]
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 4]
sub edx, 0x269c
mov dword [ebp - 4], edx
mov eax, dword [ebp - 8]
add eax, dword [ebp - 4]
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 8]
add ecx, dword [ebp - 4]
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 4]
sub edx, 0x11b9
mov dword [ebp - 4], edx
mov eax, dword [ebp - 0x5c]
and eax, 0x80000001
jns 0x1000831f
dec eax
or eax, 0xfffffffe
inc eax
test eax, eax
je 0x10008335
cmp dword [ebp - 0x5c], 0
jle 0x10008335
mov ecx, dword [ebp - 0x5c]
sub ecx, 0xe01
mov dword [ebp - 0x5c], ecx
mov edx, dword [ebp - 4]
add edx, dword [ebp - 0x5c]
mov dword [ebp - 4], edx
mov eax, dword [ebp - 4]
sub eax, dword [ebp - 4]
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 8]
sub ecx, 0x15dc
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 4]
sub edx, 0x2d0
mov dword [ebp - 4], edx
mov eax, dword [ebp - 8]
cdq
mov ecx, 3
idiv ecx
test edx, edx
je 0x1000837d
cmp dword [ebp - 8], 0
jle 0x1000837d
mov edx, dword [ebp - 8]
sub edx, 0x7f
mov dword [ebp - 8], edx
mov eax, dword [ebp - 8]
sub eax, dword [ebp - 4]
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 8]
add ecx, dword [ebp - 4]
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 4]
add edx, 0x22eb
mov dword [ebp - 4], edx
mov eax, dword [ebp - 4]
add eax, 0x160e
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
add ecx, 0x1749
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 4]
add edx, 0xf86
mov dword [ebp - 4], edx
mov eax, dword [ebp - 4]
add eax, dword [ebp - 0x5c]
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
add ecx, dword [ebp - 8]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 4]
sub edx, dword [ebp - 4]
mov dword [ebp - 4], edx
mov eax, dword [ebp - 4]
sub eax, 0x966
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 8]
sub ecx, dword [ebp - 8]
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 8]
add edx, dword [ebp - 4]
mov dword [ebp - 8], edx
mov eax, dword [ebp - 8]
sub eax, dword [ebp - 0x5c]
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 8]
add ecx, dword [ebp - 0x5c]
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 8]
add edx, dword [ebp - 4]
mov dword [ebp - 8], edx
mov eax, dword [ebp - 8]
sub eax, dword [ebp - 4]
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 4]
sub ecx, dword [ebp - 0x5c]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 4]
add edx, dword [ebp - 0x5c]
mov dword [ebp - 4], edx
mov eax, dword [ebp - 8]
sub eax, dword [ebp - 4]
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 4]
add ecx, dword [ebp - 8]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 4]
sub edx, 0xe59
mov dword [ebp - 4], edx
mov eax, dword [ebp - 4]
add eax, 0x1312
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
add ecx, dword [ebp - 8]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 4]
sub edx, 0x917
mov dword [ebp - 4], edx
mov eax, dword [ebp - 8]
add eax, dword [ebp - 4]
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 4]
add ecx, dword [ebp - 0x5c]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 8]
sub edx, 0x264f
mov dword [ebp - 8], edx
mov eax, dword [ebp - 8]
add eax, 0x1b4c
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 4]
add ecx, dword [ebp - 0x5c]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 8]
add edx, dword [ebp - 0x5c]
mov dword [ebp - 8], edx
mov eax, dword [ebp - 8]
sub eax, 0x1b32
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 4]
add ecx, dword [ebp - 0x5c]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 4]
add edx, 0x963
mov dword [ebp - 4], edx
mov eax, dword [ebp - 4]
sub eax, 0x294
mov dword [ebp - 4], eax
jmp 0x1000808f
mov ecx, 4
imul edx, ecx, 0x2b
mov eax, dword [0x100612e8]
mov ecx, dword [eax + edx]
mov dword [ebp + 0xc], ecx
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x74], 0
jmp 0x10008501
mov edx, dword [ebp - 0x74]
add edx, 1
mov dword [ebp - 0x74], edx
cmp dword [ebp - 0x74], 0x100
jge 0x10008f47
cmp dword [0x10040b04], 0x6e70187a
jne 0x10008698
push 0
push 0x1006b470
call dword [sym.imp.KERNEL32.dll_RegisterApplicationRestart]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_IsBadReadPtr]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_QueryIdleProcessorCycleTime]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetVolumeLabelW]
push 0
call dword [sym.imp.KERNEL32.dll_OutputDebugStringW]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FindNextFileW]
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessorNumber]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push 0
push 0
call dword [sym.imp.GDI32.dll_SelectClipPath]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_Wow64GetThreadContext]
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_CreateRoundRectRgn]
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_GetEnhMetaFilePaletteEntries]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_InterlockedPushListSListEx]
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_LCMapStringW]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CheckTokenMembershipEx]
push 0
call dword [sym.imp.GDI32.dll_EndPage]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_IntersectClipRect]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetHandleInformation]
push 0
push 0
call dword [sym.imp.GDI32.dll_SetEnhMetaFileBits]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetNamedPipeClientProcessId]
push 0
call dword [sym.imp.KERNEL32.dll_SetUserGeoID]
push 0
call dword [sym.imp.KERNEL32.dll_GlobalDeleteAtom]
push 0
call dword [sym.imp.KERNEL32.dll_InitializeSRWLock]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetThreadIOPendingFlag]
call dword [sym.imp.KERNEL32.dll_CreateThreadpoolCleanupGroup]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_Wow64SetThreadContext]
push 0
call dword [sym.imp.KERNEL32.dll_GetSystemTimeAsFileTime]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_ReOpenFile]
push 0
push 0
push 0
push 0
push 0
push 0x1006b49c
push 0
push 0x1006b4c8
push 0
push 0x1006b500
call dword [sym.imp.KERNEL32.dll_FindNLSStringEx]
push 0
call dword [sym.imp.KERNEL32.dll_StartThreadpoolIo]
xor eax, eax
xor edx, edx
xor esi, esi
xor edi, edi
xor ecx, ecx
push ebx
mov ebx, edi
lock cmpxchg8b qword [esi]
mov edi, ebx
pop ebx
push 0
call dword [sym.imp.KERNEL32.dll_GetDriveTypeW]
mov eax, dword [ebp - 0x74]
movzx ecx, byte [ebp + eax - 0x1d4]
add ecx, dword [ebp - 0x70]
mov eax, dword [ebp - 0x74]
cdq
idiv dword [ebp - 0xc4]
mov eax, dword [ebp + 0xc]
movzx edx, byte [eax + edx]
add ecx, edx
and ecx, 0x800000ff
jns 0x100086c9
dec ecx
or ecx, 0xffffff00
inc ecx
mov dword [ebp - 0x70], ecx
mov dword [ebp - 0x24], 0x1834
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x64], 0x216c
mov dword [ebp - 0x48], 0
mov dword [ebp - 0x44], 0x534
mov eax, dword [ebp - 0x44]
add eax, dword [ebp - 0x48]
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x40], 0x26c4
mov dword [ebp - 0x50], 0x10d3
mov ecx, dword [ebp - 0x24]
sub ecx, 0x283
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x3c], 0xa21
mov dword [ebp - 0x38], 0x26af
mov edx, dword [ebp - 0x3c]
sub edx, dword [ebp - 0x38]
mov dword [ebp - 0x3c], edx
mov eax, dword [ebp - 0x54]
sub eax, dword [ebp - 0x24]
mov dword [ebp - 0x54], eax
mov dword [ebp - 0x4c], 0x1b74
mov ecx, dword [ebp - 0x4c]
sub ecx, dword [ebp - 0x4c]
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x58], 0x54d
mov dword [ebp - 0x34], 0x20b3
mov edx, dword [ebp - 0x34]
sub edx, dword [ebp - 0x6c]
mov dword [ebp - 0x34], edx
mov eax, dword [ebp - 0x50]
add eax, 0x8fa
mov dword [ebp - 0x50], eax
mov ecx, dword [ebp - 0x40]
sub ecx, dword [ebp - 0x44]
mov dword [ebp - 0x40], ecx
mov edx, dword [ebp - 0x34]
sub edx, dword [ebp - 0x6c]
mov dword [ebp - 0x34], edx
mov eax, dword [ebp - 0x34]
add eax, 0x1f13
mov dword [ebp - 0x34], eax
mov ecx, dword [ebp - 0x34]
sub ecx, 0x43a
mov dword [ebp - 0x34], ecx
mov edx, dword [ebp - 0x24]
add edx, dword [ebp - 0x3c]
mov dword [ebp - 0x24], edx
mov eax, dword [ebp - 0x3c]
add eax, dword [ebp - 0x24]
mov dword [ebp - 0x3c], eax
mov ecx, dword [ebp - 0x50]
add ecx, dword [ebp - 0x58]
mov dword [ebp - 0x50], ecx
mov edx, dword [ebp - 0x34]
sub edx, dword [ebp - 0x40]
mov dword [ebp - 0x34], edx
mov eax, dword [ebp - 0x48]
add eax, 0x2287
mov dword [ebp - 0x48], eax
mov ecx, dword [ebp - 0x44]
sub ecx, 0xde9
mov dword [ebp - 0x44], ecx
mov edx, dword [ebp - 0x40]
sub edx, dword [ebp - 0x58]
mov dword [ebp - 0x40], edx
mov eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0x3c]
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x48]
add ecx, dword [ebp - 0x34]
mov dword [ebp - 0x48], ecx
mov edx, dword [ebp - 0x4c]
add edx, dword [ebp - 0x38]
mov dword [ebp - 0x4c], edx
mov eax, dword [ebp - 0x4c]
sub eax, dword [ebp - 0x50]
mov dword [ebp - 0x4c], eax
mov ecx, dword [ebp - 0x60]
sub ecx, dword [ebp - 0x54]
mov dword [ebp - 0x60], ecx
mov edx, dword [ebp - 0x48]
sub edx, 0x114
mov dword [ebp - 0x48], edx
mov eax, dword [ebp - 0x38]
sub eax, 0x1ed3
mov dword [ebp - 0x38], eax
mov ecx, dword [ebp - 0x44]
sub ecx, dword [ebp - 0x48]
mov dword [ebp - 0x44], ecx
mov edx, dword [ebp - 0x3c]
add edx, 0x189e
mov dword [ebp - 0x3c], edx
mov eax, dword [ebp - 0x48]
add eax, dword [ebp - 0x6c]
mov dword [ebp - 0x48], eax
mov ecx, dword [ebp - 0x38]
add ecx, 0x51c
mov dword [ebp - 0x38], ecx
mov edx, dword [ebp - 0x50]
add edx, 0x1978
mov dword [ebp - 0x50], edx
mov dword [ebp - 0x8c], 0
jmp 0x10008874
mov eax, dword [ebp - 0x8c]
add eax, 1
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x8c], 0x24
jge 0x10008888
mov ecx, dword [ebp - 0x4c]
sub ecx, 9
mov dword [ebp - 0x4c], ecx
jmp 0x10008865
mov edx, dword [ebp - 0x40]
sub edx, dword [ebp - 0x44]
mov dword [ebp - 0x40], edx
mov eax, dword [ebp - 0x40]
add eax, dword [ebp - 0x3c]
mov dword [ebp - 0x40], eax
mov ecx, dword [ebp - 0x4c]
sub ecx, dword [ebp - 0x24]
mov dword [ebp - 0x4c], ecx
mov edx, dword [ebp - 0x44]
sub edx, dword [ebp - 0x50]
mov dword [ebp - 0x44], edx
mov eax, dword [ebp - 0x58]
sub eax, 0x2c
mov dword [ebp - 0x58], eax
mov ecx, dword [ebp - 0x3c]
add ecx, 0x10a0
mov dword [ebp - 0x3c], ecx
mov edx, dword [ebp - 0x54]
sub edx, dword [ebp - 0x6c]
mov dword [ebp - 0x54], edx
mov eax, dword [ebp - 0x58]
sub eax, dword [ebp - 0x3c]
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x90], 0
jmp 0x100088ee
mov ecx, dword [ebp - 0x90]
add ecx, 1
mov dword [ebp - 0x90], ecx
cmp dword [ebp - 0x90], 0xd
jge 0x10008902
mov edx, dword [ebp - 0x64]
sub edx, 6
mov dword [ebp - 0x64], edx
jmp 0x100088df
mov eax, dword [ebp - 0x24]
add eax, 0x16d8
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x54]
add ecx, dword [ebp - 0x48]
mov dword [ebp - 0x54], ecx
mov edx, dword [ebp - 0x44]
add edx, 0x1a02
mov dword [ebp - 0x44], edx
mov eax, dword [ebp - 0x58]
add eax, dword [ebp - 0x54]
mov dword [ebp - 0x58], eax
mov ecx, dword [ebp - 0x38]
sub ecx, dword [ebp - 0x40]
mov dword [ebp - 0x38], ecx
mov edx, dword [ebp - 0x60]
add edx, 0x22db
mov dword [ebp - 0x60], edx
mov eax, dword [ebp - 0x40]
add eax, dword [ebp - 0x24]
mov dword [ebp - 0x40], eax
mov ecx, dword [ebp - 0x58]
sub ecx, dword [ebp - 0x6c]
mov dword [ebp - 0x58], ecx
mov edx, dword [ebp - 0x24]
and edx, 0x80000003
jns 0x10008962
dec edx
or edx, 0xfffffffc
inc edx
test edx, edx
je 0x10008979
cmp dword [ebp - 0x24], 0
jle 0x10008979
mov eax, dword [ebp - 0x24]
sub eax, 0x3f1
mov dword [ebp - 0x24], eax
jmp 0x10008985
mov ecx, dword [ebp - 0x24]
add ecx, 0x3f1
mov dword [ebp - 0x24], ecx
mov edx, dword [ebp - 0x4c]
add edx, 0x961
mov dword [ebp - 0x4c], edx
mov eax, dword [ebp - 0x34]
add eax, dword [ebp - 0x3c]
mov dword [ebp - 0x34], eax
mov ecx, dword [ebp - 0x24]
sub ecx, 0xbe1
mov dword [ebp - 0x24], ecx
mov edx, dword [ebp - 0x24]
add edx, 0x8a
mov dword [ebp - 0x24], edx
mov eax, dword [ebp - 0x40]
sub eax, dword [ebp - 0x38]
mov dword [ebp - 0x40], eax
mov ecx, dword [ebp - 0x44]
add ecx, 0x1d29
mov dword [ebp - 0x44], ecx
mov edx, dword [ebp - 0x24]
sub edx, 0xc19
mov dword [ebp - 0x24], edx
mov eax, dword [ebp - 0x34]
add eax, dword [ebp - 0x48]
mov dword [ebp - 0x34], eax
mov ecx, dword [ebp - 0x50]
sub ecx, 0x2104
mov dword [ebp - 0x50], ecx
mov edx, dword [ebp - 0x50]
sub edx, 0x19bf
mov dword [ebp - 0x50], edx
mov eax, dword [ebp - 0x6c]
and eax, 0x80000001
jns 0x10008a03
dec eax
or eax, 0xfffffffe
inc eax
test eax, eax
je 0x10008a12
mov ecx, dword [ebp - 0x6c]
add ecx, 1
mov dword [ebp - 0x6c], ecx
jmp 0x100089f4
mov edx, dword [ebp - 0x48]
sub edx, dword [ebp - 0x60]
mov dword [ebp - 0x48], edx
mov eax, dword [ebp - 0x38]
sub eax, 0x2111
mov dword [ebp - 0x38], eax
mov ecx, dword [ebp - 0x64]
add ecx, 0xdf
mov dword [ebp - 0x64], ecx
mov edx, dword [ebp - 0x50]
add edx, 0x170c
mov dword [ebp - 0x50], edx
mov eax, dword [ebp - 0x24]
add eax, 0x502
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x48]
add ecx, dword [ebp - 0x34]
mov dword [ebp - 0x48], ecx
mov edx, dword [ebp - 0x4c]
sub edx, 0x1ba6
mov dword [ebp - 0x4c], edx
mov eax, dword [ebp - 0x54]
sub eax, 0x1244
mov dword [ebp - 0x54], eax
mov ecx, dword [ebp - 0x38]
add ecx, dword [ebp - 0x6c]
mov dword [ebp - 0x38], ecx
mov edx, dword [ebp - 0x4c]
add edx, 0x2213
mov dword [ebp - 0x4c], edx
mov eax, dword [ebp - 0x50]
sub eax, dword [ebp - 0x24]
mov dword [ebp - 0x50], eax
mov ecx, dword [ebp - 0x54]
sub ecx, 0x1cca
mov dword [ebp - 0x54], ecx
mov edx, dword [ebp - 0x38]
add edx, dword [ebp - 0x58]
mov dword [ebp - 0x38], edx
mov eax, dword [ebp - 0x38]
sub eax, 0x1b6b
mov dword [ebp - 0x38], eax
mov ecx, dword [ebp - 0x64]
and ecx, 0x80000003
jns 0x10008ab7
dec ecx
or ecx, 0xfffffffc
inc ecx
test ecx, ecx
je 0x10008ac9
mov edx, dword [ebp - 0x64]
sub edx, 0x21be
mov dword [ebp - 0x64], edx
jmp 0x10008ad4
mov eax, dword [ebp - 0x64]
add eax, 0x21be
mov dword [ebp - 0x64], eax
mov ecx, dword [ebp - 0x54]
add ecx, dword [ebp - 0x50]
mov dword [ebp - 0x54], ecx
mov edx, dword [ebp - 0x34]
add edx, 0x491
mov dword [ebp - 0x34], edx
mov eax, dword [ebp - 0x38]
add eax, 0x182b
mov dword [ebp - 0x38], eax
mov ecx, dword [ebp - 0x40]
add ecx, dword [ebp - 0x60]
mov dword [ebp - 0x40], ecx
mov edx, dword [ebp - 0x4c]
sub edx, 0x1db9
mov dword [ebp - 0x4c], edx
mov dword [ebp - 0x94], 0
jmp 0x10008b24
mov eax, dword [ebp - 0x94]
add eax, 1
mov dword [ebp - 0x94], eax
cmp dword [ebp - 0x94], 0x3c
jge 0x10008b38
mov ecx, dword [ebp - 0x6c]
add ecx, 7
mov dword [ebp - 0x6c], ecx
jmp 0x10008b15
mov edx, dword [ebp - 0x54]
add edx, dword [ebp - 0x3c]
mov dword [ebp - 0x54], edx
mov eax, dword [ebp - 0x44]
add eax, dword [ebp - 0x44]
mov dword [ebp - 0x44], eax
mov ecx, dword [ebp - 0x48]
sub ecx, dword [ebp - 0x34]
mov dword [ebp - 0x48], ecx
mov edx, dword [ebp - 0x3c]
add edx, dword [ebp - 0x54]
mov dword [ebp - 0x3c], edx
mov eax, dword [ebp - 0x40]
add eax, dword [ebp - 0x48]
mov dword [ebp - 0x40], eax
mov ecx, dword [ebp - 0x38]
sub ecx, dword [ebp - 0x64]
mov dword [ebp - 0x38], ecx
mov edx, dword [ebp - 0x48]
sub edx, 0x44d
mov dword [ebp - 0x48], edx
mov eax, dword [ebp - 0x64]
add eax, 0x71b
mov dword [ebp - 0x64], eax
mov ecx, dword [ebp - 0x34]
sub ecx, 0xedc
mov dword [ebp - 0x34], ecx
mov edx, dword [ebp - 0x44]
sub edx, 0x7c7
mov dword [ebp - 0x44], edx
mov eax, dword [ebp - 0x40]
add eax, dword [ebp - 0x64]
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x98], 0
jmp 0x10008bc1
mov ecx, dword [ebp - 0x98]
add ecx, 1
mov dword [ebp - 0x98], ecx
cmp dword [ebp - 0x98], 0x62
jge 0x10008bd5
mov edx, dword [ebp - 0x60]
add edx, 8
mov dword [ebp - 0x60], edx
jmp 0x10008bb2
mov eax, dword [ebp - 0x60]
sub eax, dword [ebp - 0x48]
mov dword [ebp - 0x60], eax
mov ecx, dword [ebp - 0x44]
sub ecx, dword [ebp - 0x40]
mov dword [ebp - 0x44], ecx
mov edx, dword [ebp - 0x40]
sub edx, 0x195c
mov dword [ebp - 0x40], edx
mov dword [ebp - 0x9c], 0
jmp 0x10008c0e
mov eax, dword [ebp - 0x9c]
add eax, 1
mov dword [ebp - 0x9c], eax
cmp dword [ebp - 0x9c], 0x45
jge 0x10008c22
mov ecx, dword [ebp - 0x44]
sub ecx, 5
mov dword [ebp - 0x44], ecx
jmp 0x10008bff
mov edx, dword [ebp - 0x64]
sub edx, 0xc9f
mov dword [ebp - 0x64], edx
mov eax, dword [ebp - 0x4c]
add eax, dword [ebp - 0x44]
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x3c]
cdq
mov ecx, 3
idiv ecx
test edx, edx
je 0x10008c52
mov edx, dword [ebp - 0x3c]
add edx, 0x12d6
mov dword [ebp - 0x3c], edx
mov eax, dword [ebp - 0x54]
add eax, 0xc2
mov dword [ebp - 0x54], eax
mov dword [ebp - 0xa0], 0
jmp 0x10008c78
mov ecx, dword [ebp - 0xa0]
add ecx, 1
mov dword [ebp - 0xa0], ecx
cmp dword [ebp - 0xa0], 0x2f
jge 0x10008c8c
mov edx, dword [ebp - 0x54]
add edx, 2
mov dword [ebp - 0x54], edx
jmp 0x10008c69
mov eax, dword [ebp - 0x54]
sub eax, dword [ebp - 0x34]
mov dword [ebp - 0x54], eax
mov ecx, dword [ebp - 0x38]
sub ecx, 0x1849
mov dword [ebp - 0x38], ecx
mov edx, dword [ebp - 0x24]
add edx, dword [ebp - 0x44]
mov dword [ebp - 0x24], edx
mov eax, dword [ebp - 0x58]
add eax, dword [ebp - 0x50]
mov dword [ebp - 0x58], eax
mov ecx, dword [ebp - 0x34]
add ecx, 0x1e79
mov dword [ebp - 0x34], ecx
mov edx, dword [ebp - 0x44]
add edx, dword [ebp - 0x64]
mov dword [ebp - 0x44], edx
mov eax, dword [ebp - 0x60]
sub eax, 0x1dd0
mov dword [ebp - 0x60], eax
mov ecx, dword [ebp - 0x3c]
add ecx, dword [ebp - 0x48]
mov dword [ebp - 0x3c], ecx
mov edx, dword [ebp - 0x54]
add edx, dword [ebp - 0x40]
mov dword [ebp - 0x54], edx
mov eax, dword [ebp - 0x38]
add eax, 0x216f
mov dword [ebp - 0x38], eax
mov ecx, dword [ebp - 0x3c]
add ecx, 0x262d
mov dword [ebp - 0x3c], ecx
mov edx, dword [ebp - 0x58]
sub edx, 0x20f5
mov dword [ebp - 0x58], edx
mov eax, dword [ebp - 0x34]
add eax, dword [ebp - 0x24]
mov dword [ebp - 0x34], eax
mov ecx, dword [ebp - 0x38]
add ecx, 0xc9b
mov dword [ebp - 0x38], ecx
mov edx, dword [ebp - 0x3c]
add edx, 0x1a0
mov dword [ebp - 0x3c], edx
mov eax, dword [ebp - 0x60]
add eax, dword [ebp - 0x24]
mov dword [ebp - 0x60], eax
mov ecx, dword [ebp - 0x40]
and ecx, 0x80000001
jns 0x10008d42
dec ecx
or ecx, 0xfffffffe
inc ecx
test ecx, ecx
je 0x10008d52
mov edx, dword [ebp - 0x40]
add edx, 0x204e
mov dword [ebp - 0x40], edx
mov eax, dword [ebp - 0x64]
sub eax, 0x917
mov dword [ebp - 0x64], eax
mov ecx, dword [ebp - 0x48]
sub ecx, dword [ebp - 0x6c]
mov dword [ebp - 0x48], ecx
mov edx, dword [ebp - 0x24]
add edx, 0x1fc1
mov dword [ebp - 0x24], edx
mov eax, dword [ebp - 0x64]
add eax, dword [ebp - 0x58]
mov dword [ebp - 0x64], eax
mov ecx, dword [ebp - 0x24]
sub ecx, 0x1cd3
mov dword [ebp - 0x24], ecx
mov edx, dword [ebp - 0x60]
sub edx, 0x194c
mov dword [ebp - 0x60], edx
mov eax, dword [ebp - 0x34]
add eax, dword [ebp - 0x50]
mov dword [ebp - 0x34], eax
mov ecx, dword [ebp - 0x38]
add ecx, dword [ebp - 0x34]
mov dword [ebp - 0x38], ecx
mov edx, dword [ebp - 0x60]
sub edx, 0xf60
mov dword [ebp - 0x60], edx
mov eax, dword [ebp - 0x50]
add eax, dword [ebp - 0x60]
mov dword [ebp - 0x50], eax
mov ecx, dword [ebp - 0x24]
sub ecx, 0x3bd
mov dword [ebp - 0x24], ecx
mov edx, dword [ebp - 0x60]
add edx, dword [ebp - 0x58]
mov dword [ebp - 0x60], edx
mov eax, dword [ebp - 0x4c]
sub eax, 0xe8a
mov dword [ebp - 0x4c], eax
mov ecx, dword [ebp - 0x40]
add ecx, 0xb8f
mov dword [ebp - 0x40], ecx
mov edx, dword [ebp - 0x38]
sub edx, 0x1940
mov dword [ebp - 0x38], edx
mov eax, dword [ebp - 0x24]
sub eax, 0x205
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x58]
add ecx, dword [ebp - 0x34]
mov dword [ebp - 0x58], ecx
mov edx, dword [ebp - 0x38]
add edx, dword [ebp - 0x24]
mov dword [ebp - 0x38], edx
mov eax, dword [ebp - 0x44]
add eax, dword [ebp - 0x58]
mov dword [ebp - 0x44], eax
mov ecx, dword [ebp - 0x34]
add ecx, 0x1b22
mov dword [ebp - 0x34], ecx
mov edx, dword [ebp - 0x48]
add edx, 0x1526
mov dword [ebp - 0x48], edx
mov eax, dword [ebp - 0x38]
sub eax, 0x1b2f
mov dword [ebp - 0x38], eax
mov ecx, dword [ebp - 0x3c]
sub ecx, 0x54f
mov dword [ebp - 0x3c], ecx
mov edx, dword [ebp - 0x24]
sub edx, dword [ebp - 0x4c]
mov dword [ebp - 0x24], edx
mov eax, dword [ebp - 0x24]
add eax, 0xde4
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x3c]
add ecx, dword [ebp - 0x34]
mov dword [ebp - 0x3c], ecx
mov edx, dword [ebp - 0x50]
and edx, 0x80000001
jns 0x10008e74
dec edx
or edx, 0xfffffffe
inc edx
test edx, edx
je 0x10008e83
mov eax, dword [ebp - 0x50]
add eax, 1
mov dword [ebp - 0x50], eax
jmp 0x10008e64
mov ecx, dword [ebp - 0x40]
add ecx, dword [ebp - 0x4c]
mov dword [ebp - 0x40], ecx
mov edx, dword [ebp - 0x4c]
add edx, dword [ebp - 0x3c]
mov dword [ebp - 0x4c], edx
mov eax, dword [ebp - 0x48]
add eax, 0x6c5
mov dword [ebp - 0x48], eax
mov ecx, dword [ebp - 0x50]
add ecx, 0xa22
mov dword [ebp - 0x50], ecx
mov edx, dword [ebp - 0x34]
sub edx, dword [ebp - 0x38]
mov dword [ebp - 0x34], edx
mov eax, dword [ebp - 0x4c]
sub eax, dword [ebp - 0x24]
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x58]
cdq
mov ecx, 3
idiv ecx
test edx, edx
je 0x10008ed8
mov edx, dword [ebp - 0x58]
add edx, 1
mov dword [ebp - 0x58], edx
jmp 0x10008ebe
mov eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0x64]
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x34]
add ecx, 0x18d0
mov dword [ebp - 0x34], ecx
mov edx, dword [ebp - 0x44]
sub edx, dword [ebp - 0x38]
mov dword [ebp - 0x44], edx
mov eax, dword [ebp - 0x58]
add eax, 0x176f
mov dword [ebp - 0x58], eax
mov ecx, dword [ebp - 0x50]
sub ecx, 0x2034
mov dword [ebp - 0x50], ecx
mov edx, dword [ebp - 0x48]
sub edx, dword [ebp - 0x54]
mov dword [ebp - 0x48], edx
mov eax, dword [ebp - 0x3c]
add eax, dword [ebp - 0x3c]
mov dword [ebp - 0x3c], eax
mov ecx, dword [ebp - 0x54]
add ecx, 0x1af
mov dword [ebp - 0x54], ecx
mov edx, dword [ebp - 0x70]
push edx
mov eax, dword [ebp - 0x74]
push eax
lea ecx, [ebp - 0x1d4]
push ecx
call fcn.10007410
add esp, 0xc
jmp 0x100084f8
mov dword [ebp - 0x7c], 0
cmp dword [0x10040b04], 0x2c6ae718
jne 0x10009191
push 0
push 0
call dword [sym.imp.GDI32.dll_GetClipBox]
push 0
call dword [sym.imp.KERNEL32.dll_WakeAllConditionVariable]
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleHandleW]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetNamedPipeClientSessionId]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetStringTypeExW]
push 0
call dword [sym.imp.KERNEL32.dll_FreeLibrary]
push 0
push 0
call dword [sym.imp.GDI32.dll_RestoreDC]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_TerminateJobObject]
call dword [sym.imp.KERNEL32.dll_GetConsoleWindow]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_QueryProcessCycleTime]
call dword [sym.imp.GDI32.dll_GdiGetBatchLimit]
push 0
call dword [sym.imp.KERNEL32.dll_RemoveVectoredExceptionHandler]
push 0
call dword [sym.imp.GDI32.dll_WidenPath]
xor edx, edx
xor ecx, ecx
xor eax, eax
lock cmpxchg dword [ecx], edx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_TerminateProcess]
push 0
call dword [sym.imp.KERNEL32.dll_SetUnhandledExceptionFilter]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_MoveFileWithProgressW]
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_ScaleViewportExtEx]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FlsSetValue]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_MoveFileW]
push 0
call dword [sym.imp.KERNEL32.dll_AcquireSRWLockExclusive]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetThreadIOPendingFlag]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_StretchBlt]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_AddVectoredExceptionHandler]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetApplicationRestartSettings]
push 0
call dword [sym.imp.KERNEL32.dll_GetFileAttributesW]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_StretchDIBits]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_LocalReAlloc]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetFileCompletionNotificationModes]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_LoadResource]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_QueryMemoryResourceNotification]
push 0
call dword [sym.imp.KERNEL32.dll_GlobalFlags]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_AddScopedPolicyIDAce]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetConsoleMode]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetSystemTimeAdjustment]
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_DosDateTimeToFileTime]
push 0
call dword [sym.imp.KERNEL32.dll_GetTimeZoneInformation]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetUserDefaultLocaleName]
push 0
push 0
call dword [sym.imp.GDI32.dll_GetDCOrgEx]
xor edx, edx
xor eax, eax
lock xadd dword [eax], edx
push 0
call dword [sym.imp.GDI32.dll_DeleteMetaFile]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_EnumUILanguagesW]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_EnumSystemLocalesEx]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CancelIoEx]
push 0
push 0
call dword [sym.imp.GDI32.dll_PaintRgn]
push 0
call dword [sym.imp.KERNEL32.dll_TryAcquireSRWLockShared]
push 0
call dword [sym.imp.KERNEL32.dll_GlobalFree]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetLongPathNameTransactedW]
push 0
call dword [sym.imp.KERNEL32.dll_GetStartupInfoW]
push 0
push 0
push 0
push 0
push 0x1006b53c
call dword [sym.imp.KERNEL32.dll_FindFirstStreamTransactedW]
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x80], 0
jmp 0x100091aa
mov ecx, dword [ebp - 0x80]
add ecx, 1
mov dword [ebp - 0x80], ecx
mov edx, dword [ebp - 0x80]
cmp edx, dword [ebp - 0xc8]
jge 0x10009e08
mov eax, dword [ebp - 0x7c]
add eax, 1
and eax, 0x800000ff
jns 0x100091cd
dec eax
or eax, 0xffffff00
inc eax
mov dword [ebp - 0x7c], eax
mov dword [ebp - 0x18], 0x2451
mov dword [ebp - 0x2c], 0
mov dword [ebp - 0x14], 0x9b7
mov ecx, dword [ebp - 0x14]
sub ecx, dword [ebp - 0x18]
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x10], 0
mov edx, dword [ebp - 0x10]
sub edx, 0x253f
mov dword [ebp - 0x10], edx
mov dword [ebp - 0x68], 0x2347
mov eax, dword [ebp - 0x10]
add eax, dword [ebp - 0x68]
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x28], 0x16c8
mov dword [ebp - 0xc], 0x119b
mov ecx, dword [ebp - 0x2c]
sub ecx, dword [ebp - 0xc]
mov dword [ebp - 0x2c], ecx
mov edx, dword [ebp - 0x14]
sub edx, 0x13e8
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 0x10]
sub eax, 0x11f8
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x30], 0xdd0
mov ecx, dword [ebp - 0x30]
add ecx, dword [ebp - 0x20]
mov dword [ebp - 0x30], ecx
mov edx, dword [ebp - 0x20]
sub edx, dword [ebp - 0x28]
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 0x30]
add eax, 0x195e
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp - 0xc]
add ecx, dword [ebp - 0xc]
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 0xc]
add edx, dword [ebp - 0x20]
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 0x30]
sub eax, 0x11f5
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp - 0xc]
sub ecx, 0x119e
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 0xc]
add edx, dword [ebp - 0xc]
mov dword [ebp - 0xc], edx
mov dword [ebp - 0xa4], 0
jmp 0x100092b7
mov eax, dword [ebp - 0xa4]
add eax, 1
mov dword [ebp - 0xa4], eax
cmp dword [ebp - 0xa4], 0x2f
jge 0x100092cb
mov ecx, dword [ebp - 0x18]
sub ecx, 8
mov dword [ebp - 0x18], ecx
jmp 0x100092a8
mov edx, dword [ebp - 0x10]
add edx, dword [ebp - 0xc]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x14]
sub eax, 0x1264
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0xc]
sub ecx, dword [ebp - 0x2c]
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 0x2c]
sub edx, dword [ebp - 0x10]
mov dword [ebp - 0x2c], edx
mov eax, dword [ebp - 0x18]
add eax, 0x22c2
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x18]
sub ecx, dword [ebp - 0x68]
mov dword [ebp - 0x18], ecx
mov edx, dword [ebp - 0x18]
add edx, 0x252
mov dword [ebp - 0x18], edx
mov dword [ebp - 0x1c], 0x8a1
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x68]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x10]
sub ecx, dword [ebp - 0x14]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x18]
add edx, 0x2d4
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x10]
add eax, dword [ebp - 0x2c]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x20]
sub ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x20], ecx
mov edx, dword [ebp - 0x30]
add edx, dword [ebp - 0x28]
mov dword [ebp - 0x30], edx
mov eax, dword [ebp - 0x10]
add eax, dword [ebp - 0x1c]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x30]
sub ecx, dword [ebp - 0x14]
mov dword [ebp - 0x30], ecx
mov edx, dword [ebp - 0xc]
add edx, 0x108
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 0xc]
sub eax, 0xa54
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0x18]
add ecx, 0x1e5e
mov dword [ebp - 0x18], ecx
mov edx, dword [ebp - 0x10]
sub edx, 0x2dd
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
cdq
mov ecx, 3
idiv ecx
test edx, edx
je 0x100093ac
mov edx, dword [ebp - 0x10]
add edx, 1
mov dword [ebp - 0x10], edx
jmp 0x10009392
mov eax, dword [ebp - 0x18]
add eax, dword [ebp - 0x14]
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x14]
add ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0x2c]
sub edx, 0x1f07
mov dword [ebp - 0x2c], edx
mov eax, dword [ebp - 0x28]
add eax, dword [ebp - 0x14]
mov dword [ebp - 0x28], eax
mov ecx, dword [ebp - 0x30]
sub ecx, 0x133e
mov dword [ebp - 0x30], ecx
mov edx, dword [ebp - 0x10]
sub edx, 0x5e7
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x2c]
add eax, 0x217d
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0xa8], 0
jmp 0x10009411
mov ecx, dword [ebp - 0xa8]
add ecx, 1
mov dword [ebp - 0xa8], ecx
cmp dword [ebp - 0xa8], 0x1d
jge 0x10009425
mov edx, dword [ebp - 0x20]
add edx, 9
mov dword [ebp - 0x20], edx
jmp 0x10009402
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x18]
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0xc]
add ecx, dword [ebp - 0xc]
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 0x10]
add edx, dword [ebp - 0x18]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0xc]
add eax, dword [ebp - 0x14]
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0x20]
and ecx, 0x80000001
jns 0x10009459
dec ecx
or ecx, 0xfffffffe
inc ecx
test ecx, ecx
je 0x10009468
mov edx, dword [ebp - 0x20]
add edx, 1
mov dword [ebp - 0x20], edx
jmp 0x10009449
mov eax, dword [ebp - 0x1c]
sub eax, 0x56d
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 0x2384
mov dword [ebp - 0x1c], ecx
mov edx, dword [ebp - 0x2c]
sub edx, dword [ebp - 0x10]
mov dword [ebp - 0x2c], edx
mov dword [ebp - 0xac], 0
jmp 0x100094a3
mov eax, dword [ebp - 0xac]
add eax, 1
mov dword [ebp - 0xac], eax
cmp dword [ebp - 0xac], 0x24
jge 0x100094b7
mov ecx, dword [ebp - 0x68]
sub ecx, 1
mov dword [ebp - 0x68], ecx
jmp 0x10009494
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x68]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x28]
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x20]
add ecx, 0x5e
mov dword [ebp - 0x20], ecx
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0xc]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x14]
add eax, 0x84e
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x10]
add ecx, dword [ebp - 0x30]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0xc]
add edx, dword [ebp - 0x14]
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 0xc]
add eax, dword [ebp - 0x14]
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0x68]
and ecx, 0x80000001
jns 0x10009511
dec ecx
or ecx, 0xfffffffe
inc ecx
test ecx, ecx
je 0x10009521
mov edx, dword [ebp - 0x68]
sub edx, 0x229e
mov dword [ebp - 0x68], edx
mov eax, dword [ebp - 0x18]
add eax, 0xfe2
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x20]
add ecx, 0x55f
mov dword [ebp - 0x20], ecx
mov edx, dword [ebp - 0x14]
sub edx, dword [ebp - 0x1c]
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 0x30]
sub eax, dword [ebp - 0x1c]
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 0x8df
mov dword [ebp - 0x1c], ecx
mov edx, dword [ebp - 0x30]
add edx, 0xc5b
mov dword [ebp - 0x30], edx
mov eax, dword [ebp - 0x28]
cdq
mov ecx, 3
idiv ecx
test edx, edx
je 0x1000957c
mov edx, dword [ebp - 0x28]
add edx, 1
mov dword [ebp - 0x28], edx
jmp 0x10009562
mov eax, dword [ebp - 0x18]
add eax, 0x363
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x2c]
sub ecx, dword [ebp - 0x68]
mov dword [ebp - 0x2c], ecx
mov edx, dword [ebp - 0x14]
sub edx, 0x26e1
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 0x1c]
and eax, 0x80000001
jns 0x100095ab
dec eax
or eax, 0xfffffffe
inc eax
test eax, eax
je 0x100095c3
cmp dword [ebp - 0x1c], 0
jle 0x100095c3
mov ecx, dword [ebp - 0x1c]
sub ecx, 0x1f3f
mov dword [ebp - 0x1c], ecx
jmp 0x100095cf
mov edx, dword [ebp - 0x1c]
add edx, 0x1f3f
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x2c]
sub eax, dword [ebp - 0xc]
mov dword [ebp - 0x2c], eax
mov ecx, dword [ebp - 0x1c]
sub ecx, dword [ebp - 0x14]
mov dword [ebp - 0x1c], ecx
mov edx, dword [ebp - 0xc]
sub edx, dword [ebp - 0x2c]
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 0x1c]
sub eax, 0x1bcb
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0xc]
add ecx, dword [ebp - 0xc]
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 0x14]
add edx, dword [ebp - 0x2c]
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 0x20]
add eax, 0x1577
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x20]
add ecx, 0x199c
mov dword [ebp - 0x20], ecx
mov edx, dword [ebp - 0x20]
sub edx, dword [ebp - 0x28]
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 0x30]
add eax, dword [ebp - 0x18]
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp - 0x18]
add ecx, 0x802
mov dword [ebp - 0x18], ecx
mov edx, dword [ebp - 0xc]
sub edx, dword [ebp - 0x10]
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 0x18]
cdq
mov ecx, 3
idiv ecx
test edx, edx
je 0x10009668
cmp dword [ebp - 0x18], 0
jle 0x10009668
mov edx, dword [ebp - 0x18]
sub edx, 0x2065
mov dword [ebp - 0x18], edx
jmp 0x10009673
mov eax, dword [ebp - 0x18]
add eax, 0x2065
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x28]
add ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x28], ecx
mov edx, dword [ebp - 0x20]
sub edx, dword [ebp - 0x2c]
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 0x28]
add eax, 0x1533
mov dword [ebp - 0x28], eax
mov ecx, dword [ebp - 0x14]
sub ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0x2c]
sub edx, 0x1809
mov dword [ebp - 0x2c], edx
mov eax, dword [ebp - 0x10]
sub eax, dword [ebp - 0x28]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
sub ecx, dword [ebp - 0x30]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x18]
add edx, 0x623
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x20]
sub eax, dword [ebp - 0xc]
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 0x110
mov dword [ebp - 0x1c], ecx
mov edx, dword [ebp - 0x20]
add edx, 0xe4a
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 0x10]
sub eax, 0x1ef0
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x14]
add ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0x10]
add edx, 0x874
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x28]
sub eax, 0x56d
mov dword [ebp - 0x28], eax
mov ecx, dword [ebp - 0xc]
sub ecx, dword [ebp - 0x28]
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 0x14]
sub edx, dword [ebp - 0x14]
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 0x18]
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0xc]
sub ecx, 0x187a
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 0x1c]
add edx, 0x1abe
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x68]
mov dword [ebp - 0x28], eax
mov ecx, dword [ebp - 0x10]
sub ecx, 0x72b
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x14]
add edx, 0x23eb
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 0x2c]
sub eax, dword [ebp - 0x2c]
mov dword [ebp - 0x2c], eax
mov ecx, dword [ebp - 0x20]
add ecx, dword [ebp - 0x10]
mov dword [ebp - 0x20], ecx
mov edx, dword [ebp - 0x28]
and edx, 0x80000001
jns 0x10009785
dec edx
or edx, 0xfffffffe
inc edx
test edx, edx
je 0x10009794
mov eax, dword [ebp - 0x28]
add eax, 1
mov dword [ebp - 0x28], eax
jmp 0x10009775
mov ecx, dword [ebp - 0x2c]
add ecx, dword [ebp - 0x28]
mov dword [ebp - 0x2c], ecx
mov edx, dword [ebp - 0x18]
sub edx, dword [ebp - 0x18]
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0xc]
sub eax, 0x131a
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x246c
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0x14]
sub edx, 0x1f4
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 0xc]
add eax, dword [ebp - 0x10]
mov dword [ebp - 0xc], eax
mov dword [ebp - 0xb0], 0
jmp 0x100097ed
mov ecx, dword [ebp - 0xb0]
add ecx, 1
mov dword [ebp - 0xb0], ecx
cmp dword [ebp - 0xb0], 0x5a
jge 0x10009801
mov edx, dword [ebp - 0x18]
add edx, 7
mov dword [ebp - 0x18], edx
jmp 0x100097de
mov eax, dword [ebp - 0x20]
sub eax, dword [ebp - 0x18]
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x1c]
sub ecx, dword [ebp - 0x14]
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x30]
cdq
mov ecx, 3
idiv ecx
test edx, edx
je 0x1000982d
mov edx, dword [ebp - 0x30]
add edx, 1
mov dword [ebp - 0x30], edx
jmp 0x10009813
mov eax, dword [ebp - 0x10]
sub eax, dword [ebp - 0x68]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x18]
add ecx, 0x16c2
mov dword [ebp - 0x18], ecx
mov edx, dword [ebp - 0x14]
add edx, 0x12f2
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 0x14]
add eax, 0xaf7
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0xc]
add ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x10]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x1c]
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x20]
add ecx, dword [ebp - 0x30]
mov dword [ebp - 0x20], ecx
mov eax, dword [ebp - 0x2c]
cdq
mov ecx, 3
idiv ecx
test edx, edx
je 0x100098a0
cmp dword [ebp - 0x2c], 0
jle 0x100098a0
mov edx, dword [ebp - 0x2c]
sub edx, 0x1f0c
mov dword [ebp - 0x2c], edx
jmp 0x100098ab
mov eax, dword [ebp - 0x2c]
add eax, 0x1f0c
mov dword [ebp - 0x2c], eax
mov ecx, dword [ebp - 0x30]
sub ecx, 0x2196
mov dword [ebp - 0x30], ecx
mov edx, dword [ebp - 0x2c]
add edx, dword [ebp - 0x10]
mov dword [ebp - 0x2c], edx
mov eax, dword [ebp - 0x1c]
sub eax, 0x609
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x28]
add ecx, dword [ebp - 0x30]
mov dword [ebp - 0x28], ecx
mov edx, dword [ebp - 0x10]
sub edx, dword [ebp - 0x14]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x20]
and eax, 0x80000001
jns 0x100098ec
dec eax
or eax, 0xfffffffe
inc eax
test eax, eax
je 0x100098fb
mov ecx, dword [ebp - 0x20]
add ecx, 1
mov dword [ebp - 0x20], ecx
jmp 0x100098dd
mov edx, dword [ebp - 0x14]
sub edx, 0x1aeb
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 0xc]
add eax, 0x5fc
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x28]
mov dword [ebp - 0x1c], ecx
mov edx, dword [ebp - 0x14]
sub edx, 0x2007
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 0xc]
and eax, 0x80000001
jns 0x10009936
dec eax
or eax, 0xfffffffe
inc eax
test eax, eax
je 0x10009945
mov ecx, dword [ebp - 0xc]
add ecx, 1
mov dword [ebp - 0xc], ecx
jmp 0x10009927
mov edx, dword [ebp - 0x28]
sub edx, dword [ebp - 0x14]
mov dword [ebp - 0x28], edx
mov eax, dword [ebp - 0x18]
add eax, dword [ebp - 0x68]
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x14]
sub ecx, dword [ebp - 0x10]
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0x10]
add edx, dword [ebp - 0x68]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x30]
sub eax, dword [ebp - 0x20]
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp - 0x30]
sub ecx, dword [ebp - 0xc]
mov dword [ebp - 0x30], ecx
mov edx, dword [ebp - 0x2c]
sub edx, 0x212e
mov dword [ebp - 0x2c], edx
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 0x2c]
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x10]
sub ecx, 0x21ea
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x18]
add edx, dword [ebp - 0x28]
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x28]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x28]
add ecx, 0x136a
mov dword [ebp - 0x28], ecx
mov edx, dword [ebp - 0x2c]
add edx, 0xc42
mov dword [ebp - 0x2c], edx
mov eax, dword [ebp - 0x18]
add eax, 0x19d2
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0xc]
add ecx, dword [ebp - 0x2c]
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 0x28]
sub edx, 0x2549
mov dword [ebp - 0x28], edx
mov eax, dword [ebp - 0x28]
add eax, dword [ebp - 0x14]
mov dword [ebp - 0x28], eax
mov ecx, dword [ebp - 0x28]
add ecx, dword [ebp - 0x30]
mov dword [ebp - 0x28], ecx
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x10]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x30]
sub eax, 0x250f
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp - 0x20]
sub ecx, dword [ebp - 0x30]
mov dword [ebp - 0x20], ecx
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x10]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x30]
add eax, dword [ebp - 0x20]
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp - 0x30]
sub ecx, dword [ebp - 0xc]
mov dword [ebp - 0x30], ecx
mov edx, dword [ebp - 0xc]
sub edx, 0x1cce
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x18]
mov dword [ebp - 0x28], eax
mov ecx, dword [ebp - 0x14]
sub ecx, dword [ebp - 0x14]
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0x28]
add edx, dword [ebp - 0x1c]
mov dword [ebp - 0x28], edx
mov eax, dword [ebp - 0x1c]
add eax, 0x1ec8
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x10]
add ecx, 0x1b6c
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0xc]
sub edx, dword [ebp - 0x68]
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x18]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0xb4], 0
jmp 0x10009a9b
mov ecx, dword [ebp - 0xb4]
add ecx, 1
mov dword [ebp - 0xb4], ecx
cmp dword [ebp - 0xb4], 0x52
jge 0x10009aaf
mov edx, dword [ebp - 0x68]
add edx, 1
mov dword [ebp - 0x68], edx
jmp 0x10009a8c
mov eax, dword [ebp - 0x20]
sub eax, dword [ebp - 0x10]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0xb8], 0
jmp 0x10009ad3
mov ecx, dword [ebp - 0xb8]
add ecx, 1
mov dword [ebp - 0xb8], ecx
cmp dword [ebp - 0xb8], 0x1e
jge 0x10009ae7
mov edx, dword [ebp - 0x1c]
sub edx, 9
mov dword [ebp - 0x1c], edx
jmp 0x10009ac4
mov eax, dword [ebp - 0x30]
sub eax, 0x14d3
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp - 0x10]
add ecx, 0x2184
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0xc]
add edx, 0xf9d
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 0x30]
sub eax, 0x1b72
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp - 0x2c]
sub ecx, 0x68e
mov dword [ebp - 0x2c], ecx
mov edx, dword [ebp - 0x20]
sub edx, dword [ebp - 0x14]
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 0x28]
cdq
mov ecx, 3
idiv ecx
test edx, edx
je 0x10009b44
mov edx, dword [ebp - 0x28]
add edx, 1
mov dword [ebp - 0x28], edx
jmp 0x10009b2a
mov eax, dword [ebp - 0x10]
sub eax, dword [ebp - 0x14]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x30]
add ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x30], ecx
mov edx, dword [ebp - 0x28]
sub edx, 0x1aef
mov dword [ebp - 0x28], edx
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 0x10]
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x7c]
movzx edx, byte [ebp + ecx - 0x1d4]
add edx, dword [ebp - 0x70]
and edx, 0x800000ff
jns 0x10009b89
dec edx
or edx, 0xffffff00
inc edx
mov dword [ebp - 0x70], edx
cmp dword [0x10040b04], 0x2ffdcb73
jne 0x10009d9f
push 0
call dword [sym.imp.KERNEL32.dll_SetConsoleActiveScreenBuffer]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetThreadAffinityMask]
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_ScaleWindowExtEx]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_MapUserPhysicalPagesScatter]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetCriticalSectionSpinCount]
push 0
push 0x1006b564
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_IsNLSDefinedString]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateNamedPipeW]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FindFirstFileTransactedW]
push 0x1006b590
push 0
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreatePrivateNamespaceW]
push 0
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_GetCharWidthW]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_HeapSetInformation]
push 0
call dword [sym.imp.KERNEL32.dll_SetErrorMode]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetCurrentConsoleFontEx]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_EnumResourceTypesW]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FileTimeToSystemTime]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_Ellipse]
push 0
call dword [sym.imp.KERNEL32.dll_SetComputerNameW]
push 0
push 0
call dword [sym.imp.GDI32.dll_SetPolyFillMode]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_LocalAlloc]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WaitForThreadpoolTimerCallbacks]
push 0
push 0x1006b5a8
call dword [sym.imp.KERNEL32.dll_LocaleNameToLCID]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetNamedPipeClientComputerNameW]
push 0
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
push 0
call dword [sym.imp.GDI32.dll_GetLayout]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_LCIDToLocaleName]
push 0
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_SetWindowOrgEx]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetNamedPipeInfo]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetThreadIdealProcessor]
push 0
call dword [sym.imp.GDI32.dll_GetDCPenColor]
push 0
call dword [sym.imp.KERNEL32.dll_InitializeSRWLock]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetCPInfoExW]
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_FillRgn]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_GetTextExtentExPointW]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetThreadPreferredUILanguages]
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_SelectPalette]
push 0
call dword [sym.imp.KERNEL32.dll_SetThreadUILanguage]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetCommProperties]
push 0
call dword [sym.imp.KERNEL32.dll_DisableThreadProfiling]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_GetCharWidthI]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetFullPathNameW]
mov eax, dword [ebp - 0x70]
push eax
mov ecx, dword [ebp - 0x7c]
push ecx
lea edx, [ebp - 0x1d4]
push edx
call fcn.10007410
add esp, 0xc
mov eax, dword [ebp - 0x7c]
movzx ecx, byte [ebp + eax - 0x1d4]
mov edx, dword [ebp - 0x70]
movzx eax, byte [ebp + edx - 0x1d4]
add ecx, eax
and ecx, 0x800000ff
jns 0x10009dde
dec ecx
or ecx, 0xffffff00
inc ecx
movzx ecx, byte [ebp + ecx - 0x1d4]
mov dword [ebp - 0xcc], ecx
mov edx, dword [ebp + 8]
add edx, dword [ebp - 0x80]
movzx eax, byte [edx]
xor eax, dword [ebp - 0xcc]
mov ecx, dword [ebp + 8]
add ecx, dword [ebp - 0x80]
mov byte [ecx], al
jmp 0x100091a1
pop edi
pop esi
mov esp, ebp
pop ebp
ret