Function at 0x10006e40
Capabilities:
Clear file content
Enumerate disk volumes
Get common file path
Get geographical location
Get hostname
Query environment variable
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x4c
mov dword [ebp - 0x4c], ecx
movsx eax, byte [ebp + 8]
cmp eax, 0x41
jl 0x10006e67
movsx ecx, byte [ebp + 8]
cmp ecx, 0x5a
jg 0x10006e67
movsx eax, byte [ebp + 8]
sub eax, 0x41
jmp 0x10007ea8
cmp dword [0x10065b44], 0x565e85c1
jne 0x100070d5
push 0
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_GetPaletteEntries]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetComputerNameExW]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_TerminateJobObject]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_TransmitCommChar]
push 0
call dword [sym.imp.KERNEL32.dll_GetLocalTime]
push 0
call dword [sym.imp.KERNEL32.dll_FindCloseChangeNotification]
push 0
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessorNumberEx]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_StretchBlt]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_Wow64SetThreadContext]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_ExcludeClipRect]
push 0
call dword [sym.imp.KERNEL32.dll_DeleteTimerQueue]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FindFirstChangeNotificationW]
push 0
call dword [sym.imp.KERNEL32.dll_GetSystemTimeAsFileTime]
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_FillRgn]
push 0
call dword [sym.imp.KERNEL32.dll_SetEndOfFile]
push 0
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_AnimatePalette]
push 0
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_SetViewportExtEx]
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_SelectPalette]
push 0
push 0
push 0
push 0x100c6120
call dword [sym.imp.KERNEL32.dll_FindFirstFileNameW]
push 0
call dword [sym.imp.GDI32.dll_RealizePalette]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FindNextVolumeW]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WaitForThreadpoolTimerCallbacks]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CommConfigDialogW]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetProtectedPolicy]
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_OffsetClipRgn]
push 0
call dword [sym.imp.KERNEL32.dll_DeleteTimerQueue]
push 0
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_FloodFill]
call dword [sym.imp.KERNEL32.dll_GetEnvironmentStringsW]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FreeLibraryAndExitThread]
movsx edx, byte [ebp + 8]
cmp edx, 0x61
jl 0x100070f3
movsx eax, byte [ebp + 8]
cmp eax, 0x7a
jg 0x100070f3
movsx eax, byte [ebp + 8]
sub eax, 0x47
jmp 0x10007ea8
movsx ecx, byte [ebp + 8]
cmp ecx, 0x30
jl 0x10007111
movsx edx, byte [ebp + 8]
cmp edx, 0x39
jg 0x10007111
movsx eax, byte [ebp + 8]
add eax, 4
jmp 0x10007ea8
mov dword [ebp - 4], 0x1b5c
mov eax, dword [ebp - 4]
add eax, dword [ebp - 4]
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
sub ecx, dword [ebp - 4]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 4]
add edx, dword [ebp - 4]
mov dword [ebp - 4], edx
mov dword [ebp - 0x1c], 0x634
mov eax, dword [ebp - 4]
sub eax, dword [ebp - 0x1c]
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
add ecx, 0x477
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 4]
add edx, 0x45c
mov dword [ebp - 4], edx
mov eax, dword [ebp - 4]
sub eax, dword [ebp - 0x1c]
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
sub ecx, 0x1b6f
mov dword [ebp - 4], ecx
mov dword [ebp - 0x24], 0
jmp 0x10007182
mov edx, dword [ebp - 0x24]
add edx, 1
mov dword [ebp - 0x24], edx
cmp dword [ebp - 0x24], 0x36
jge 0x10007193
mov eax, dword [ebp - 4]
add eax, 7
mov dword [ebp - 4], eax
jmp 0x10007179
mov ecx, dword [ebp - 4]
sub ecx, dword [ebp - 0x1c]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 4]
add edx, 0x10c9
mov dword [ebp - 4], edx
mov eax, dword [ebp - 4]
add eax, 0x1a9a
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
add ecx, dword [ebp - 4]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 4]
sub edx, dword [ebp - 4]
mov dword [ebp - 4], edx
mov eax, dword [ebp - 4]
add eax, 0x19bb
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
sub ecx, 0x5f4
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 4]
sub edx, dword [ebp - 0x1c]
mov dword [ebp - 4], edx
mov eax, dword [ebp - 0x1c]
and eax, 0x80000001
jns 0x100071f4
dec eax
or eax, 0xfffffffe
inc eax
test eax, eax
je 0x10007203
mov ecx, dword [ebp - 0x1c]
add ecx, 1
mov dword [ebp - 0x1c], ecx
jmp 0x100071e5
mov edx, dword [ebp - 4]
add edx, 0x7e2
mov dword [ebp - 4], edx
mov eax, dword [ebp - 4]
add eax, dword [ebp - 0x1c]
mov dword [ebp - 4], eax
mov dword [ebp - 0x28], 0
jmp 0x1000722a
mov ecx, dword [ebp - 0x28]
add ecx, 1
mov dword [ebp - 0x28], ecx
cmp dword [ebp - 0x28], 0x16
jge 0x1000723b
mov edx, dword [ebp - 0x1c]
add edx, 5
mov dword [ebp - 0x1c], edx
jmp 0x10007221
mov eax, dword [ebp - 4]
add eax, 0x2a5
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
add ecx, 0x1609
mov dword [ebp - 4], ecx
mov dword [ebp - 0x2c], 0
jmp 0x10007264
mov edx, dword [ebp - 0x2c]
add edx, 1
mov dword [ebp - 0x2c], edx
cmp dword [ebp - 0x2c], 0x47
jge 0x10007275
mov eax, dword [ebp - 4]
add eax, 6
mov dword [ebp - 4], eax
jmp 0x1000725b
mov ecx, dword [ebp - 4]
sub ecx, dword [ebp - 4]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 4]
add edx, dword [ebp - 0x1c]
mov dword [ebp - 4], edx
mov eax, dword [ebp - 4]
add eax, dword [ebp - 0x1c]
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
add ecx, dword [ebp - 0x1c]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 4]
sub edx, dword [ebp - 4]
mov dword [ebp - 4], edx
mov dword [ebp - 0x30], 0
jmp 0x100072b4
mov eax, dword [ebp - 0x30]
add eax, 1
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0x1f
jge 0x100072c5
mov ecx, dword [ebp - 4]
sub ecx, 6
mov dword [ebp - 4], ecx
jmp 0x100072ab
mov edx, dword [ebp - 4]
add edx, 0x1bff
mov dword [ebp - 4], edx
mov eax, dword [ebp - 4]
add eax, 0x310
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
sub ecx, dword [ebp - 4]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 4]
sub edx, dword [ebp - 0x1c]
mov dword [ebp - 4], edx
mov eax, dword [ebp - 4]
add eax, dword [ebp - 0x1c]
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
sub ecx, 0x10af
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 4]
add edx, dword [ebp - 0x1c]
mov dword [ebp - 4], edx
mov eax, dword [ebp - 4]
add eax, 0x215c
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
sub ecx, 0x1486
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 4]
sub edx, dword [ebp - 0x1c]
mov dword [ebp - 4], edx
mov eax, dword [ebp - 4]
sub eax, dword [ebp - 0x1c]
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
sub ecx, dword [ebp - 0x1c]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 4]
sub edx, dword [ebp - 4]
mov dword [ebp - 4], edx
mov eax, dword [ebp - 4]
sub eax, dword [ebp - 4]
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
sub ecx, 0x1c4
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 4]
sub edx, 0xf5e
mov dword [ebp - 4], edx
mov dword [ebp - 0x34], 0
jmp 0x1000737a
mov eax, dword [ebp - 0x34]
add eax, 1
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0x34
jge 0x1000738b
mov ecx, dword [ebp - 0x1c]
sub ecx, 7
mov dword [ebp - 0x1c], ecx
jmp 0x10007371
mov edx, dword [ebp - 4]
sub edx, 0x506
mov dword [ebp - 4], edx
mov eax, dword [ebp - 4]
add eax, 0xc31
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
sub ecx, dword [ebp - 4]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 4]
and edx, 0x80000001
jns 0x100073bb
dec edx
or edx, 0xfffffffe
inc edx
test edx, edx
je 0x100073ca
mov eax, dword [ebp - 4]
add eax, 1
mov dword [ebp - 4], eax
jmp 0x100073ab
mov ecx, dword [ebp - 4]
add ecx, 0xf0d
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 4]
add edx, dword [ebp - 0x1c]
mov dword [ebp - 4], edx
mov eax, dword [ebp - 4]
sub eax, dword [ebp - 4]
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
sub ecx, 0x1516
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 4]
add edx, 0x23f8
mov dword [ebp - 4], edx
mov eax, dword [ebp - 4]
sub eax, 0x123b
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
add ecx, 0x12f1
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 4]
add edx, dword [ebp - 4]
mov dword [ebp - 4], edx
mov eax, dword [ebp - 4]
sub eax, dword [ebp - 0x1c]
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
add ecx, 0x2d
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 4]
add edx, dword [ebp - 0x1c]
mov dword [ebp - 4], edx
mov eax, dword [ebp - 4]
sub eax, 0xba4
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
add ecx, 0x11cc
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 4]
sub edx, dword [ebp - 4]
mov dword [ebp - 4], edx
mov eax, dword [ebp - 4]
sub eax, 0x940
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
sub ecx, 0x887
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 4]
sub edx, dword [ebp - 4]
mov dword [ebp - 4], edx
mov eax, dword [ebp - 4]
add eax, 0x207f
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
and ecx, 0x80000001
jns 0x10007496
dec ecx
or ecx, 0xfffffffe
inc ecx
test ecx, ecx
je 0x100074ac
cmp dword [ebp - 4], 0
jle 0x100074ac
mov edx, dword [ebp - 4]
add edx, 0x87e
mov dword [ebp - 4], edx
mov eax, dword [ebp - 4]
add eax, 0x709
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
add ecx, dword [ebp - 0x1c]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 4]
add edx, 0x239c
mov dword [ebp - 4], edx
mov eax, dword [ebp - 4]
add eax, dword [ebp - 4]
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
add ecx, 0x900
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 4]
add edx, dword [ebp - 4]
mov dword [ebp - 4], edx
mov eax, dword [ebp - 4]
add eax, dword [ebp - 4]
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
sub ecx, 0x1285
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 4]
sub edx, 0xbe1
mov dword [ebp - 4], edx
mov eax, dword [ebp - 4]
sub eax, dword [ebp - 0x1c]
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
add ecx, 0x115d
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 4]
sub edx, 0x107a
mov dword [ebp - 4], edx
mov eax, dword [ebp - 4]
sub eax, dword [ebp - 4]
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
sub ecx, 0x11c6
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 4]
add edx, 0x1d0e
mov dword [ebp - 4], edx
mov eax, dword [ebp - 4]
add eax, 0x21f8
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
add ecx, 0x1ea7
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 4]
sub edx, 0x1ba3
mov dword [ebp - 4], edx
mov eax, dword [ebp - 4]
add eax, dword [ebp - 4]
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
sub ecx, 0x1bcf
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 4]
add edx, dword [ebp - 0x1c]
mov dword [ebp - 4], edx
mov eax, dword [ebp - 4]
add eax, 0xa79
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
sub ecx, 0x1e56
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 4]
sub edx, 0x87a
mov dword [ebp - 4], edx
mov eax, dword [ebp - 4]
sub eax, dword [ebp - 4]
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
add ecx, 0x1123
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 4]
sub edx, dword [ebp - 4]
mov dword [ebp - 4], edx
mov eax, dword [ebp - 4]
add eax, 0xd1d
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 0x1c]
and ecx, 0x80000003
jns 0x100075ea
dec ecx
or ecx, 0xfffffffc
inc ecx
test ecx, ecx
je 0x100075f7
mov edx, dword [ebp - 0x1c]
sub edx, 0x72
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 4]
sub eax, 0xb9e
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
add ecx, 0x1743
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 4]
add edx, dword [ebp - 0x1c]
mov dword [ebp - 4], edx
mov eax, dword [ebp - 4]
sub eax, dword [ebp - 4]
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
sub ecx, dword [ebp - 0x1c]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 4]
add edx, 0x1998
mov dword [ebp - 4], edx
mov eax, dword [ebp - 4]
sub eax, 0x3f
mov dword [ebp - 4], eax
movsx ecx, byte [ebp + 8]
cmp ecx, 0x2b
jne 0x1000764e
mov al, 0x3e
jmp 0x10007ea8
mov dword [ebp - 0xc], 0x10f5
mov dword [ebp - 0x18], 0
mov edx, dword [ebp - 0xc]
sub edx, 0xf3f
mov dword [ebp - 0xc], edx
mov dword [ebp - 0x10], 0x6d1
mov dword [ebp - 0x20], 0x1f88
mov eax, dword [ebp - 0x10]
sub eax, dword [ebp - 0x20]
mov dword [ebp - 0x10], eax
mov dword [ebp - 8], 0x22f1
mov ecx, dword [ebp - 8]
sub ecx, dword [ebp - 0x18]
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 0xc]
sub edx, 0x17b2
mov dword [ebp - 0xc], edx
mov dword [ebp - 0x38], 0
jmp 0x100076ad
mov eax, dword [ebp - 0x38]
add eax, 1
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0x49
jge 0x100076be
mov ecx, dword [ebp - 0xc]
add ecx, 8
mov dword [ebp - 0xc], ecx
jmp 0x100076a4
mov dword [ebp - 0x14], 0x1475
mov edx, dword [ebp - 0x10]
add edx, dword [ebp - 0x14]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
add eax, 0x17c4
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0xc]
sub ecx, 0x1326
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 8]
add edx, 0x1636
mov dword [ebp - 8], edx
mov eax, dword [ebp - 0x20]
and eax, 0x80000001
jns 0x10007700
dec eax
or eax, 0xfffffffe
inc eax
test eax, eax
je 0x1000770f
mov ecx, dword [ebp - 0x20]
add ecx, 1
mov dword [ebp - 0x20], ecx
jmp 0x100076f1
mov edx, dword [ebp - 8]
sub edx, 0x1fd7
mov dword [ebp - 8], edx
mov eax, dword [ebp - 0x10]
add eax, dword [ebp - 0x18]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0xc]
sub ecx, dword [ebp - 0xc]
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 0x18]
sub edx, 0x177c
mov dword [ebp - 0x18], edx
mov dword [ebp - 0x3c], 0
jmp 0x1000774b
mov eax, dword [ebp - 0x3c]
add eax, 1
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x3c], 0x4d
jge 0x1000775c
mov ecx, dword [ebp - 0x14]
add ecx, 3
mov dword [ebp - 0x14], ecx
jmp 0x10007742
mov edx, dword [ebp - 8]
sub edx, dword [ebp - 0x14]
mov dword [ebp - 8], edx
mov eax, dword [ebp - 0xc]
sub eax, 0xac2
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0x10]
sub ecx, 0x180c
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
sub edx, dword [ebp - 0x18]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x14]
add eax, 0x72a
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 8]
and ecx, 0x80000001
jns 0x100077a0
dec ecx
or ecx, 0xfffffffe
inc ecx
test ecx, ecx
je 0x100077af
mov edx, dword [ebp - 8]
add edx, 1
mov dword [ebp - 8], edx
jmp 0x10007790
mov eax, dword [ebp - 8]
add eax, 0x1328
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 0x18]
sub ecx, dword [ebp - 0x20]
mov dword [ebp - 0x18], ecx
mov edx, dword [ebp - 0x18]
and edx, 0x80000001
jns 0x100077d3
dec edx
or edx, 0xfffffffe
inc edx
test edx, edx
je 0x100077ea
cmp dword [ebp - 0x18], 0
jle 0x100077ea
mov eax, dword [ebp - 0x18]
sub eax, 0x11c
mov dword [ebp - 0x18], eax
jmp 0x100077f6
mov ecx, dword [ebp - 0x18]
add ecx, 0x11c
mov dword [ebp - 0x18], ecx
mov edx, dword [ebp - 0x18]
add edx, 0x1971
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0xc]
add eax, 0x826
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 8]
add ecx, 0x1aa
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 0xc]
add edx, 0x145c
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 0x20]
and eax, 0x80000001
jns 0x10007834
dec eax
or eax, 0xfffffffe
inc eax
test eax, eax
je 0x10007843
mov ecx, dword [ebp - 0x20]
add ecx, 1
mov dword [ebp - 0x20], ecx
jmp 0x10007825
mov edx, dword [ebp - 8]
add edx, dword [ebp - 0x18]
mov dword [ebp - 8], edx
mov eax, dword [ebp - 0x14]
sub eax, 0xb89
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 8]
and ecx, 0x80000001
jns 0x10007867
dec ecx
or ecx, 0xfffffffe
inc ecx
test ecx, ecx
je 0x10007876
mov edx, dword [ebp - 8]
add edx, 1
mov dword [ebp - 8], edx
jmp 0x10007857
mov eax, dword [ebp - 0x14]
add eax, 0x1b68
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x10]
add ecx, dword [ebp - 0x10]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
sub edx, dword [ebp - 0x10]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x18]
sub eax, 0x5b0
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0xc]
sub ecx, 0x1591
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 0x10]
sub edx, dword [ebp - 0x14]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x18]
sub eax, 0x1fe
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 8]
add ecx, 0x1e02
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 0x10]
sub edx, dword [ebp - 0x10]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 8]
sub eax, 0x57d
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 0x18]
add ecx, dword [ebp - 0x10]
mov dword [ebp - 0x18], ecx
mov edx, dword [ebp - 0x14]
add edx, dword [ebp - 0xc]
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 0x14]
add eax, 0x149a
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 8]
sub ecx, 0xe7
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 8]
sub edx, 0x2620
mov dword [ebp - 8], edx
mov eax, dword [ebp - 0xc]
sub eax, 0x408
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0x14]
sub ecx, 0xbd3
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0xc]
add edx, dword [ebp - 0x14]
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 0xc]
sub eax, 0xdd8
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0xc]
add ecx, 0xcb8
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 0x14]
sub edx, 0x23b9
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 0x10]
sub eax, 0x590
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 8]
sub ecx, 0x62b
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 0x18]
sub edx, 0x466
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x14]
sub eax, 0x2706
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x10]
sub ecx, dword [ebp - 8]
mov dword [ebp - 0x10], ecx
mov dword [ebp - 0x40], 0
jmp 0x1000799f
mov edx, dword [ebp - 0x40]
add edx, 1
mov dword [ebp - 0x40], edx
cmp dword [ebp - 0x40], 0xa
jge 0x100079b0
mov eax, dword [ebp - 0x10]
add eax, 3
mov dword [ebp - 0x10], eax
jmp 0x10007996
mov ecx, dword [ebp - 0x10]
sub ecx, 0x19d0
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 8]
sub edx, 0x1ef2
mov dword [ebp - 8], edx
mov eax, dword [ebp - 0xc]
add eax, 0x755
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 8]
add ecx, 0x78d
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 8]
and edx, 0x80000001
jns 0x100079ef
dec edx
or edx, 0xfffffffe
inc edx
test edx, edx
je 0x10007a06
cmp dword [ebp - 8], 0
jle 0x10007a06
mov eax, dword [ebp - 8]
add eax, 0x1551
mov dword [ebp - 8], eax
jmp 0x10007a12
mov ecx, dword [ebp - 8]
sub ecx, 0x1551
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 8]
add edx, 0x105c
mov dword [ebp - 8], edx
mov eax, dword [ebp - 8]
sub eax, 0x23f8
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 0x18]
add ecx, 0x23b6
mov dword [ebp - 0x18], ecx
mov edx, dword [ebp - 0x14]
sub edx, 0x2289
mov dword [ebp - 0x14], edx
mov dword [ebp - 0x44], 0
jmp 0x10007a53
mov eax, dword [ebp - 0x44]
add eax, 1
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0x53
jge 0x10007a64
mov ecx, dword [ebp - 0x14]
add ecx, 9
mov dword [ebp - 0x14], ecx
jmp 0x10007a4a
mov edx, dword [ebp - 0x10]
sub edx, dword [ebp - 0x18]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
add eax, dword [ebp - 0x14]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x18]
add ecx, dword [ebp - 0xc]
mov dword [ebp - 0x18], ecx
mov edx, dword [ebp - 8]
sub edx, 0x1bf7
mov dword [ebp - 8], edx
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x18]
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x1b9d
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0x18]
sub edx, dword [ebp - 0x14]
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 8]
add eax, 0x2493
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 0x14]
sub ecx, dword [ebp - 0x18]
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0x20]
and edx, 0x80000001
jns 0x10007acd
dec edx
or edx, 0xfffffffe
inc edx
test edx, edx
je 0x10007adc
mov eax, dword [ebp - 0x20]
add eax, 1
mov dword [ebp - 0x20], eax
jmp 0x10007abd
mov ecx, dword [ebp - 0xc]
sub ecx, dword [ebp - 8]
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 0x18]
sub edx, 0x34e
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 8]
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x10]
and ecx, 0x80000001
jns 0x10007b0a
dec ecx
or ecx, 0xfffffffe
inc ecx
test ecx, ecx
je 0x10007b19
mov edx, dword [ebp - 0x10]
add edx, 1
mov dword [ebp - 0x10], edx
jmp 0x10007afa
mov eax, dword [ebp - 0x10]
sub eax, 0xe39
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x18]
add ecx, 0xb8b
mov dword [ebp - 0x18], ecx
mov edx, dword [ebp - 0x18]
sub edx, dword [ebp - 0x20]
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x14]
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 8]
add ecx, 0x12eb
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 0xc]
add edx, dword [ebp - 0xc]
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 0x10]
add eax, 0x22f9
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
sub ecx, dword [ebp - 8]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 8]
sub edx, dword [ebp - 8]
mov dword [ebp - 8], edx
mov eax, dword [ebp - 0xc]
sub eax, dword [ebp - 0xc]
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0x10]
sub ecx, 0x24fe
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x18]
add edx, 0x79c
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0xc]
sub eax, 0x22b5
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 8]
sub ecx, dword [ebp - 0xc]
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 0xc]
add edx, 0x816
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 0x10]
sub eax, 0x14ff
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x18]
add ecx, 0x958
mov dword [ebp - 0x18], ecx
mov edx, dword [ebp - 0x14]
add edx, dword [ebp - 8]
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 0xc]
sub eax, dword [ebp - 0x18]
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0x10]
add ecx, 0xc72
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x14]
and edx, 0x80000001
jns 0x10007bfa
dec edx
or edx, 0xfffffffe
inc edx
test edx, edx
je 0x10007c09
mov eax, dword [ebp - 0x14]
add eax, 1
mov dword [ebp - 0x14], eax
jmp 0x10007bea
mov ecx, dword [ebp - 8]
add ecx, dword [ebp - 0x10]
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 0x18]
add edx, dword [ebp - 0x14]
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x14]
add eax, 0x63b
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x14]
sub ecx, dword [ebp - 0x14]
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 8]
add edx, dword [ebp - 8]
mov dword [ebp - 8], edx
mov eax, dword [ebp - 0x10]
add eax, dword [ebp - 0x10]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x18]
sub ecx, 0xea2
mov dword [ebp - 0x18], ecx
mov edx, dword [ebp - 8]
add edx, 0xfb8
mov dword [ebp - 8], edx
mov eax, dword [ebp - 0x10]
add eax, 0x12c0
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0xc]
sub ecx, 0x227d
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 0xc]
sub edx, 0x1a5
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 0x18]
sub eax, 0x21fa
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0xc]
add ecx, dword [ebp - 0x10]
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 0x10]
add edx, 0x268d
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0xc]
sub eax, dword [ebp - 0xc]
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0xc]
sub ecx, dword [ebp - 0x10]
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 0x18]
add edx, dword [ebp - 0x10]
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x18]
add eax, 0x25ef
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x14]
sub ecx, dword [ebp - 0x14]
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0x18]
add edx, dword [ebp - 0x20]
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x10]
sub eax, dword [ebp - 8]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x14]
add ecx, dword [ebp - 0x18]
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 8]
sub edx, dword [ebp - 0x14]
mov dword [ebp - 8], edx
mov eax, dword [ebp - 8]
sub eax, dword [ebp - 0x20]
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 0x10]
sub ecx, 0x2193
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 8]
add edx, 0x14bd
mov dword [ebp - 8], edx
mov eax, dword [ebp - 0xc]
add eax, dword [ebp - 0x14]
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 8]
sub ecx, dword [ebp - 0xc]
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 0xc]
sub edx, dword [ebp - 8]
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 8]
add eax, 0x21dc
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x2419
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0xc]
sub edx, 0x2662
mov dword [ebp - 0xc], edx
mov dword [ebp - 0x48], 0
jmp 0x10007d60
mov eax, dword [ebp - 0x48]
add eax, 1
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x48], 0x2f
jge 0x10007d71
mov ecx, dword [ebp - 8]
add ecx, 3
mov dword [ebp - 8], ecx
jmp 0x10007d57
mov edx, dword [ebp - 0xc]
add edx, dword [ebp - 0x20]
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 0xc]
sub eax, dword [ebp - 0x20]
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0xc]
sub ecx, dword [ebp - 0x20]
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 0xc]
add edx, 0x20fc
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 0xc]
add eax, dword [ebp - 0x14]
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0xc]
add ecx, 0x1400
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 0xc]
add edx, dword [ebp - 8]
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 0xc]
sub eax, dword [ebp - 0x14]
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0x10]
add ecx, 0x135e
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0xc]
sub edx, 0x23ef
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 8]
add eax, dword [ebp - 0x18]
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 0x14]
and ecx, 0x80000001
jns 0x10007df0
dec ecx
or ecx, 0xfffffffe
inc ecx
test ecx, ecx
je 0x10007dff
mov edx, dword [ebp - 0x14]
add edx, 1
mov dword [ebp - 0x14], edx
jmp 0x10007de0
mov eax, dword [ebp - 0x14]
add eax, 0x1703
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x18]
add ecx, dword [ebp - 0x20]
mov dword [ebp - 0x18], ecx
mov edx, dword [ebp - 0x14]
sub edx, dword [ebp - 0x20]
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 8]
sub eax, dword [ebp - 8]
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 0x20]
and ecx, 0x80000001
jns 0x10007e35
dec ecx
or ecx, 0xfffffffe
inc ecx
test ecx, ecx
je 0x10007e44
mov edx, dword [ebp - 0x20]
add edx, 1
mov dword [ebp - 0x20], edx
jmp 0x10007e25
mov eax, dword [ebp - 0xc]
sub eax, dword [ebp - 0x10]
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 8]
add ecx, 0x21e9
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 8]
add edx, dword [ebp - 8]
mov dword [ebp - 8], edx
mov eax, dword [ebp - 0x10]
add eax, 0x14d
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x18]
add ecx, dword [ebp - 8]
mov dword [ebp - 0x18], ecx
mov edx, dword [ebp - 0x10]
add edx, 0x21f2
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 8]
add eax, 0x248c
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 0x14]
sub ecx, 0x1b15
mov dword [ebp - 0x14], ecx
movsx edx, byte [ebp + 8]
cmp edx, 0x2f
jne 0x10007ea6
mov al, 0x3f
jmp 0x10007ea8
xor al, al
mov esp, ebp
pop ebp
ret 4