Function at 0x1000c4f0
Capabilities:
Check os version
Create pipe
Get disk information
Read pipe
Write file on windows
Write pipe

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x78
mov dword [ebp - 0x70], ecx
movsx eax, byte [ebp + 8]
cmp eax, 0x41
jl 0x1000c517
movsx ecx, byte [ebp + 8]
cmp ecx, 0x5a
jg 0x1000c517
movsx eax, byte [ebp + 8]
sub eax, 0x41
jmp 0x1000d81e
mov edx, dword [0x1011d35c]
xor eax, eax
mov dword [ebp - 0x78], edx
mov dword [ebp - 0x74], eax
cmp dword [ebp - 0x78], 0xac3ad167
jne 0x1000c6f4
cmp dword [ebp - 0x74], 0
jne 0x1000c6f4
push 0
push 0
call dword [sym.imp.KERNEL32.dll_QueryThreadpoolStackInformation]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_MapViewOfFileExNuma]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WriteFile]
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_CreatePolygonRgn]
call dword [sym.imp.KERNEL32.dll_GetLogicalDrives]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_QueryMemoryResourceNotification]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_TrySubmitThreadpoolCallback]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_LocalReAlloc]
push 0
call dword [sym.imp.KERNEL32.dll_SetThreadUILanguage]
push 0
call dword [sym.imp.KERNEL32.dll_GlobalFindAtomW]
push 0
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_SetPixelV]
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_FillRgn]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetShortPathNameW]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_VirtualUnlock]
call dword [sym.imp.KERNEL32.dll_GetCurrentThread]
xor ecx, ecx
lock dec dword [ecx]
push 0
push 0
push str.z5CEtbmb7TR3QNqS4XS6U3M8kRB
push 0
call dword [sym.imp.KERNEL32.dll_EnumTimeFormatsEx]
push 0
call dword [sym.imp.KERNEL32.dll_FindVolumeMountPointClose]
call dword [sym.imp.KERNEL32.dll_CreateTimerQueue]
push 0
call dword [sym.imp.GDI32.dll_CreatePatternBrush]
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetFileBandwidthReservation]
push 0
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_EnumMetaFile]
push 0
push str.JxAMF72bPa834n8K68kSVila4eXu
call dword [sym.imp.KERNEL32.dll_LoadModule]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_TransactNamedPipe]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetNumaAvailableMemoryNode]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_EnumTimeFormatsW]
call dword [sym.imp.KERNEL32.dll_FlushProcessWriteBuffers]
push 0
call dword [sym.imp.KERNEL32.dll_GetVersionExW]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateNamedPipeW]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_Beep]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_EnumCalendarInfoExW]
push 0
call dword [sym.imp.KERNEL32.dll_InitAtomTable]
push 0
call dword [sym.imp.GDI32.dll_CloseMetaFile]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetConsoleCursorInfo]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GenerateConsoleCtrlEvent]
push 0
call dword [sym.imp.KERNEL32.dll_GetNumberOfConsoleMouseButtons]
push 0
push 0
call dword [sym.imp.GDI32.dll_GetMiterLimit]
push 0
push 0
push 0
push 0
push str.6Re4B9cn7Gl6YMbr55y
call dword [sym.imp.KERNEL32.dll_FindFirstStreamTransactedW]
push 0
call dword [sym.imp.KERNEL32.dll_QueryPerformanceFrequency]
movsx edx, byte [ebp + 8]
cmp edx, 0x61
jl 0x1000c712
movsx eax, byte [ebp + 8]
cmp eax, 0x7a
jg 0x1000c712
movsx eax, byte [ebp + 8]
sub eax, 0x47
jmp 0x1000d81e
movsx ecx, byte [ebp + 8]
cmp ecx, 0x30
jl 0x1000c730
movsx edx, byte [ebp + 8]
cmp edx, 0x39
jg 0x1000c730
movsx eax, byte [ebp + 8]
add eax, 4
jmp 0x1000d81e
mov dword [ebp - 0xc], 0x111
mov dword [ebp - 0x14], 0x32c
mov dword [ebp - 0x20], 0
mov eax, dword [ebp - 0x20]
sub eax, 0x494
mov dword [ebp - 0x20], eax
mov dword [ebp - 8], 0
mov eax, dword [ebp - 8]
cdq
mov ecx, 3
idiv ecx
test edx, edx
je 0x1000c778
cmp dword [ebp - 8], 0
jle 0x1000c778
mov edx, dword [ebp - 8]
add edx, 0xb4b
mov dword [ebp - 8], edx
mov eax, dword [ebp - 8]
add eax, 0x23a
mov dword [ebp - 8], eax
mov dword [ebp - 4], 0x1c02
mov ecx, dword [ebp - 4]
sub ecx, dword [ebp - 0x20]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 0x14]
add edx, dword [ebp - 0x14]
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 0x20]
sub eax, 0x1f5d
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x1c], 0
mov ecx, dword [ebp - 8]
sub ecx, dword [ebp - 0x1c]
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 4]
add edx, 0x2565
mov dword [ebp - 4], edx
mov dword [ebp - 0x40], 0
mov eax, dword [ebp - 0x40]
and eax, 0x80000001
jns 0x1000c7d9
dec eax
or eax, 0xfffffffe
inc eax
test eax, eax
je 0x1000c7e8
mov ecx, dword [ebp - 0x40]
add ecx, 1
mov dword [ebp - 0x40], ecx
jmp 0x1000c7ca
mov edx, dword [ebp - 4]
add edx, 0x254
mov dword [ebp - 4], edx
mov eax, dword [ebp - 0xc]
and eax, 0x80000001
jns 0x1000c803
dec eax
or eax, 0xfffffffe
inc eax
test eax, eax
je 0x1000c812
mov ecx, dword [ebp - 0xc]
add ecx, 1
mov dword [ebp - 0xc], ecx
jmp 0x1000c7f4
mov edx, dword [ebp - 8]
add edx, dword [ebp - 0x20]
mov dword [ebp - 8], edx
mov eax, dword [ebp - 8]
sub eax, 0xef1
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 4]
sub ecx, 0x7f0
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 4]
add edx, 0x1ac1
mov dword [ebp - 4], edx
mov eax, dword [ebp - 0x20]
sub eax, dword [ebp - 0x20]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x14]
cdq
mov ecx, 3
idiv ecx
test edx, edx
je 0x1000c861
mov edx, dword [ebp - 0x14]
add edx, 1
mov dword [ebp - 0x14], edx
jmp 0x1000c847
mov eax, dword [ebp - 0xc]
add eax, 0x15f7
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0x14]
sub ecx, 0x209a
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 4]
and edx, 0x80000001
jns 0x1000c888
dec edx
or edx, 0xfffffffe
inc edx
test edx, edx
je 0x1000c89d
cmp dword [ebp - 4], 0
jle 0x1000c89d
mov eax, dword [ebp - 4]
sub eax, 0xe92
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 0x20]
add ecx, 0x163a
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x34], 0
mov edx, dword [ebp - 4]
add edx, 0x1032
mov dword [ebp - 4], edx
mov eax, dword [ebp - 0x20]
add eax, 0x18ed
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x14]
add ecx, 0xb32
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 8]
sub edx, dword [ebp - 0xc]
mov dword [ebp - 8], edx
mov eax, dword [ebp - 4]
add eax, 0x220c
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 0xc]
sub ecx, 0x2271
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 4]
sub edx, 0x15be
mov dword [ebp - 4], edx
mov eax, dword [ebp - 4]
add eax, 0x15dc
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 8]
add ecx, dword [ebp - 4]
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 0x20]
and edx, 0x80000001
jns 0x1000c923
dec edx
or edx, 0xfffffffe
inc edx
test edx, edx
je 0x1000c932
mov eax, dword [ebp - 0x20]
add eax, 1
mov dword [ebp - 0x20], eax
jmp 0x1000c913
mov ecx, dword [ebp - 0x34]
sub ecx, dword [ebp - 0x14]
mov dword [ebp - 0x34], ecx
mov edx, dword [ebp - 0x34]
sub edx, dword [ebp - 0xc]
mov dword [ebp - 0x34], edx
mov eax, dword [ebp - 4]
add eax, dword [ebp - 0x14]
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 0x1c]
sub ecx, dword [ebp - 4]
mov dword [ebp - 0x1c], ecx
mov edx, dword [ebp - 8]
add edx, dword [ebp - 8]
mov dword [ebp - 8], edx
mov eax, dword [ebp - 0x34]
add eax, 0x357
mov dword [ebp - 0x34], eax
mov ecx, dword [ebp - 8]
add ecx, 0x14f4
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 4]
sub edx, dword [ebp - 0x40]
mov dword [ebp - 4], edx
mov eax, dword [ebp - 0x1c]
sub eax, 0x496
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 8]
sub ecx, 0xa28
mov dword [ebp - 8], ecx
mov dword [ebp - 0x44], 0
jmp 0x1000c9a8
mov edx, dword [ebp - 0x44]
add edx, 1
mov dword [ebp - 0x44], edx
cmp dword [ebp - 0x44], 0x55
jge 0x1000c9b9
mov eax, dword [ebp - 0x20]
add eax, 1
mov dword [ebp - 0x20], eax
jmp 0x1000c99f
mov ecx, dword [ebp - 0xc]
sub ecx, 0x1bf8
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 4]
sub edx, 0x1259
mov dword [ebp - 4], edx
mov eax, dword [ebp - 0x1c]
add eax, 0x181a
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x34]
add ecx, 0x5ed
mov dword [ebp - 0x34], ecx
mov edx, dword [ebp - 0x14]
add edx, 0xb69
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 0xc]
and eax, 0x80000003
jns 0x1000ca03
dec eax
or eax, 0xfffffffc
inc eax
test eax, eax
je 0x1000ca1b
cmp dword [ebp - 0xc], 0
jle 0x1000ca1b
mov ecx, dword [ebp - 0xc]
add ecx, 0x239e
mov dword [ebp - 0xc], ecx
jmp 0x1000ca27
mov edx, dword [ebp - 0xc]
sub edx, 0x239e
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 8]
add eax, 0x16b6
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 4]
add ecx, 0xf08
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 8]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 4]
add eax, 0x371
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 0x34]
add ecx, 0x3e3
mov dword [ebp - 0x34], ecx
mov edx, dword [ebp - 0x34]
add edx, dword [ebp - 4]
mov dword [ebp - 0x34], edx
mov eax, dword [ebp - 0x20]
sub eax, 0x1ae6
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x1c]
sub ecx, dword [ebp - 0x20]
mov dword [ebp - 0x1c], ecx
mov edx, dword [ebp - 4]
sub edx, 0x21e0
mov dword [ebp - 4], edx
mov eax, dword [ebp - 0x34]
sub eax, 0x2289
mov dword [ebp - 0x34], eax
mov ecx, dword [ebp - 0x34]
sub ecx, dword [ebp - 4]
mov dword [ebp - 0x34], ecx
mov edx, dword [ebp - 8]
sub edx, dword [ebp - 0x1c]
mov dword [ebp - 8], edx
mov eax, dword [ebp - 0x20]
add eax, 0xa29
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x40]
and ecx, 0x80000001
jns 0x1000cabf
dec ecx
or ecx, 0xfffffffe
inc ecx
test ecx, ecx
je 0x1000cace
mov edx, dword [ebp - 0x40]
add edx, 1
mov dword [ebp - 0x40], edx
jmp 0x1000caaf
mov eax, dword [ebp - 4]
add eax, 0x366
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 0x14]
add ecx, dword [ebp - 0x40]
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0x14]
sub edx, 0x17d9
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 8]
add eax, dword [ebp - 0xc]
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 0x14]
add ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0xc]
add edx, dword [ebp - 0x14]
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 0x34]
sub eax, dword [ebp - 0x20]
mov dword [ebp - 0x34], eax
mov ecx, dword [ebp - 0x1c]
sub ecx, dword [ebp - 0x34]
mov dword [ebp - 0x1c], ecx
mov edx, dword [ebp - 8]
add edx, 0x1a70
mov dword [ebp - 8], edx
mov eax, dword [ebp - 0x20]
sub eax, 0x1a00
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0xc]
sub ecx, dword [ebp - 8]
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 0xc]
and edx, 0x80000001
jns 0x1000cb4b
dec edx
or edx, 0xfffffffe
inc edx
test edx, edx
je 0x1000cb5a
mov eax, dword [ebp - 0xc]
add eax, 1
mov dword [ebp - 0xc], eax
jmp 0x1000cb3b
mov ecx, dword [ebp - 8]
add ecx, 0x184e
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 8]
add edx, 0x19f7
mov dword [ebp - 8], edx
mov eax, dword [ebp - 0x34]
add eax, 0x1d32
mov dword [ebp - 0x34], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 0xf79
mov dword [ebp - 0x1c], ecx
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x14]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0xc]
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 0x2669
mov dword [ebp - 0x1c], ecx
mov edx, dword [ebp - 0x14]
and edx, 0x80000001
jns 0x1000cbb7
dec edx
or edx, 0xfffffffe
inc edx
test edx, edx
je 0x1000cbc6
mov eax, dword [ebp - 0x14]
add eax, 1
mov dword [ebp - 0x14], eax
jmp 0x1000cba7
mov ecx, dword [ebp - 0x1c]
sub ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
mov edx, dword [ebp - 0x1c]
add edx, 0x133c
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x14]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 4]
add ecx, 0x1cde
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 0xc]
sub edx, 0x1332
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 8]
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x14]
sub ecx, dword [ebp - 4]
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x48], 0
jmp 0x1000cc20
mov edx, dword [ebp - 0x48]
add edx, 1
mov dword [ebp - 0x48], edx
cmp dword [ebp - 0x48], 0x52
jge 0x1000cc31
mov eax, dword [ebp - 0x34]
sub eax, 7
mov dword [ebp - 0x34], eax
jmp 0x1000cc17
mov ecx, dword [ebp - 0x1c]
sub ecx, 0x711
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0xc]
cdq
mov ecx, 3
idiv ecx
test edx, edx
je 0x1000cc57
mov edx, dword [ebp - 0xc]
add edx, 1
mov dword [ebp - 0xc], edx
jmp 0x1000cc3d
mov eax, dword [ebp - 0x1c]
add eax, 0x20a8
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x20]
add ecx, dword [ebp - 0x20]
mov dword [ebp - 0x20], ecx
mov edx, dword [ebp - 0x14]
add edx, dword [ebp - 0x34]
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0xc]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0xc]
add ecx, 0xd78
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 0x20]
sub edx, dword [ebp - 0x20]
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 0x34]
sub eax, dword [ebp - 0x1c]
mov dword [ebp - 0x34], eax
mov ecx, dword [ebp - 8]
add ecx, 0x587
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x20]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x34]
add eax, 0x12d4
mov dword [ebp - 0x34], eax
mov ecx, dword [ebp - 8]
add ecx, dword [ebp - 0x40]
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 4]
add edx, dword [ebp - 0x20]
mov dword [ebp - 4], edx
mov eax, dword [ebp - 0x1c]
sub eax, 0x22a7
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0xc]
add ecx, 0x6db
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 8]
add edx, 0x1e99
mov dword [ebp - 8], edx
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0xc]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 8]
add ecx, 0x1180
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 0xc]
add edx, 0x99b
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 0x34]
sub eax, 0xb35
mov dword [ebp - 0x34], eax
mov ecx, dword [ebp - 0xc]
add ecx, 0xa4f
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 0xc]
add edx, 0x1fa6
mov dword [ebp - 0xc], edx
mov dword [ebp - 0x4c], 0
jmp 0x1000cd46
mov eax, dword [ebp - 0x4c]
add eax, 1
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x4c], 0x29
jge 0x1000cd57
mov ecx, dword [ebp - 0x1c]
add ecx, 7
mov dword [ebp - 0x1c], ecx
jmp 0x1000cd3d
mov edx, dword [ebp - 0xc]
sub edx, 0x2582
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 4]
sub eax, 0xc5f
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x1c0d
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 8]
sub edx, 0x7a9
mov dword [ebp - 8], edx
mov eax, dword [ebp - 0x1c]
sub eax, 0x154f
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x20]
add ecx, 0x1e63
mov dword [ebp - 0x20], ecx
mov edx, dword [ebp - 8]
add edx, 0x2187
mov dword [ebp - 8], edx
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 4]
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x42e
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 8]
add edx, 0x22d7
mov dword [ebp - 8], edx
mov eax, dword [ebp - 0x20]
add eax, 0x19d3
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x34]
sub ecx, dword [ebp - 8]
mov dword [ebp - 0x34], ecx
mov edx, dword [ebp - 0x20]
sub edx, dword [ebp - 4]
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 0xc]
sub eax, 0x1e64
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0x14]
sub ecx, dword [ebp - 8]
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0xc]
sub edx, dword [ebp - 0x34]
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 0xc]
sub eax, dword [ebp - 0x34]
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0xc]
sub ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 4]
add edx, dword [ebp - 0x14]
mov dword [ebp - 4], edx
mov eax, dword [ebp - 0x20]
add eax, 0x9a4
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x1bd6
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0xc]
sub edx, 0x1598
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 8]
add eax, dword [ebp - 0xc]
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 4]
add ecx, dword [ebp - 4]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x40]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 4]
sub eax, 0x1c89
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 0x34]
add ecx, dword [ebp - 8]
mov dword [ebp - 0x34], ecx
mov edx, dword [ebp - 8]
add edx, 0x2484
mov dword [ebp - 8], edx
mov eax, dword [ebp - 0xc]
add eax, dword [ebp - 4]
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 4]
sub ecx, 0x25eb
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 4]
sub edx, dword [ebp - 4]
mov dword [ebp - 4], edx
mov eax, dword [ebp - 4]
add eax, dword [ebp - 0x40]
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 8]
sub ecx, 0x23e4
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 0x1c]
add edx, 0x63d
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x20]
and eax, 0x80000001
jns 0x1000cecb
dec eax
or eax, 0xfffffffe
inc eax
test eax, eax
je 0x1000ceda
mov ecx, dword [ebp - 0x20]
add ecx, 1
mov dword [ebp - 0x20], ecx
jmp 0x1000cebc
mov edx, dword [ebp - 8]
add edx, dword [ebp - 0x40]
mov dword [ebp - 8], edx
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 0x14]
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 4]
and ecx, 0x80000001
jns 0x1000cefc
dec ecx
or ecx, 0xfffffffe
inc ecx
test ecx, ecx
je 0x1000cf0b
mov edx, dword [ebp - 4]
add edx, 1
mov dword [ebp - 4], edx
jmp 0x1000ceec
mov eax, dword [ebp - 0x34]
sub eax, 0xf09
mov dword [ebp - 0x34], eax
mov ecx, dword [ebp - 4]
add ecx, 0x206a
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 0x20]
sub edx, dword [ebp - 8]
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 4]
sub eax, 0x1e46
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 0x34]
sub ecx, dword [ebp - 0x20]
mov dword [ebp - 0x34], ecx
mov edx, dword [ebp - 0x20]
add edx, 0x2416
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 0x34]
add eax, dword [ebp - 0x1c]
mov dword [ebp - 0x34], eax
mov ecx, dword [ebp - 8]
sub ecx, 0x230a
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 8]
sub edx, 0x65f
mov dword [ebp - 8], edx
mov eax, dword [ebp - 0xc]
add eax, 0x117f
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 0xa08
mov dword [ebp - 0x1c], ecx
mov edx, dword [ebp - 4]
sub edx, dword [ebp - 0x14]
mov dword [ebp - 4], edx
mov eax, dword [ebp - 4]
add eax, dword [ebp - 0x14]
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 0x14]
add ecx, 0xe74
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 8]
sub edx, dword [ebp - 0x34]
mov dword [ebp - 8], edx
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x14]
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 0xa4b
mov dword [ebp - 0x1c], ecx
mov edx, dword [ebp - 0x20]
add edx, dword [ebp - 4]
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x34]
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 4]
sub ecx, dword [ebp - 0x40]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 0xc]
add edx, dword [ebp - 8]
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0xc]
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 8]
add ecx, 0x254
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 0x1c]
add edx, 0x2323
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x14]
and eax, 0x80000001
jns 0x1000d013
dec eax
or eax, 0xfffffffe
inc eax
test eax, eax
je 0x1000d02b
cmp dword [ebp - 0x14], 0
jle 0x1000d02b
mov ecx, dword [ebp - 0x14]
sub ecx, 0x26e2
mov dword [ebp - 0x14], ecx
jmp 0x1000d037
mov edx, dword [ebp - 0x14]
add edx, 0x26e2
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 8]
sub eax, dword [ebp - 8]
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x20]
mov dword [ebp - 0x1c], ecx
mov edx, dword [ebp - 0xc]
sub edx, dword [ebp - 4]
mov dword [ebp - 0xc], edx
movsx eax, byte [ebp + 8]
cmp eax, 0x2b
jne 0x1000d062
mov al, 0x3e
jmp 0x1000d81e
mov dword [ebp - 0x28], 0x18b8
mov dword [ebp - 0x30], 0x2216
mov dword [ebp - 0x2c], 0
mov ecx, dword [ebp - 0x28]
add ecx, 0x210e
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0x10], 0
mov edx, dword [ebp - 0x2c]
add edx, 0x10af
mov dword [ebp - 0x2c], edx
mov dword [ebp - 0x38], 0
mov eax, dword [ebp - 0x28]
sub eax, 0xf1a
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x18], 0x75
mov dword [ebp - 0x24], 0x14af
mov ecx, dword [ebp - 0x18]
add ecx, dword [ebp - 0x24]
mov dword [ebp - 0x18], ecx
mov edx, dword [ebp - 0x2c]
add edx, dword [ebp - 0x24]
mov dword [ebp - 0x2c], edx
mov eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0x18]
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x24]
sub ecx, 0x24b1
mov dword [ebp - 0x24], ecx
mov edx, dword [ebp - 0x10]
add edx, dword [ebp - 0x10]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x30]
sub eax, dword [ebp - 0x10]
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp - 0x2c]
sub ecx, dword [ebp - 0x10]
mov dword [ebp - 0x2c], ecx
mov edx, dword [ebp - 0x18]
sub edx, 0x23df
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x2c]
sub eax, 0x1682
mov dword [ebp - 0x2c], eax
mov ecx, dword [ebp - 0x18]
add ecx, 0x1322
mov dword [ebp - 0x18], ecx
mov edx, dword [ebp - 0x30]
sub edx, dword [ebp - 0x3c]
mov dword [ebp - 0x30], edx
mov eax, dword [ebp - 0x30]
add eax, 0x19c6
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp - 0x24]
add ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x24], ecx
mov edx, dword [ebp - 0x24]
sub edx, dword [ebp - 0x10]
mov dword [ebp - 0x24], edx
mov eax, dword [ebp - 0x10]
sub eax, 0xbcc
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x18]
add ecx, 0x14d8
mov dword [ebp - 0x18], ecx
mov edx, dword [ebp - 0x18]
sub edx, dword [ebp - 0x3c]
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x10]
add eax, 0x2445
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x18]
add ecx, dword [ebp - 0x10]
mov dword [ebp - 0x18], ecx
mov edx, dword [ebp - 0x18]
add edx, 0x2cc
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x38]
sub eax, 0x1298
mov dword [ebp - 0x38], eax
mov ecx, dword [ebp - 0x18]
add ecx, dword [ebp - 0x3c]
mov dword [ebp - 0x18], ecx
mov edx, dword [ebp - 0x18]
add edx, 0x18d7
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x30]
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x50], 0
jmp 0x1000d1c3
mov ecx, dword [ebp - 0x50]
add ecx, 1
mov dword [ebp - 0x50], ecx
cmp dword [ebp - 0x50], 0x1c
jge 0x1000d1d4
mov edx, dword [ebp - 0x28]
add edx, 1
mov dword [ebp - 0x28], edx
jmp 0x1000d1ba
mov eax, dword [ebp - 0x24]
add eax, dword [ebp - 0x30]
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x28]
add ecx, dword [ebp - 0x24]
mov dword [ebp - 0x28], ecx
mov edx, dword [ebp - 0x28]
add edx, dword [ebp - 0x38]
mov dword [ebp - 0x28], edx
mov eax, dword [ebp - 0x30]
sub eax, 0x1e21
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp - 0x10]
sub ecx, dword [ebp - 0x28]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x38]
add edx, 0x23d8
mov dword [ebp - 0x38], edx
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x2c]
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x10]
add ecx, 0x1bfa
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x18]
sub edx, dword [ebp - 0x2c]
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x30]
sub eax, 0x2193
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp - 0x38]
sub ecx, dword [ebp - 0x38]
mov dword [ebp - 0x38], ecx
mov edx, dword [ebp - 0x28]
sub edx, dword [ebp - 0x28]
mov dword [ebp - 0x28], edx
mov eax, dword [ebp - 0x10]
sub eax, 0x210e
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
sub ecx, dword [ebp - 0x30]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x18]
sub edx, 0xc63
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x24]
cdq
mov ecx, 3
idiv ecx
test edx, edx
je 0x1000d28d
cmp dword [ebp - 0x24], 0
jle 0x1000d28d
mov edx, dword [ebp - 0x24]
add edx, 0x663
mov dword [ebp - 0x24], edx
jmp 0x1000d298
mov eax, dword [ebp - 0x24]
sub eax, 0x663
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x10]
add ecx, dword [ebp - 0x28]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x18]
sub edx, 0x1edc
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x18]
sub eax, 0x43a
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x24]
sub ecx, dword [ebp - 0x18]
mov dword [ebp - 0x24], ecx
mov edx, dword [ebp - 0x10]
add edx, 0x16ae
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
sub eax, dword [ebp - 0x18]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x28]
sub ecx, 0x1b69
mov dword [ebp - 0x28], ecx
mov edx, dword [ebp - 0x30]
add edx, dword [ebp - 0x18]
mov dword [ebp - 0x30], edx
mov eax, dword [ebp - 0x38]
add eax, dword [ebp - 0x10]
mov dword [ebp - 0x38], eax
mov ecx, dword [ebp - 0x10]
and ecx, 0x80000001
jns 0x1000d304
dec ecx
or ecx, 0xfffffffe
inc ecx
test ecx, ecx
je 0x1000d314
mov edx, dword [ebp - 0x10]
sub edx, 0x262
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
sub eax, dword [ebp - 0x30]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x38]
sub ecx, 0x355
mov dword [ebp - 0x38], ecx
mov edx, dword [ebp - 0x24]
add edx, 0x1373
mov dword [ebp - 0x24], edx
mov eax, dword [ebp - 0x28]
add eax, 0x1c5b
mov dword [ebp - 0x28], eax
mov ecx, dword [ebp - 0x10]
sub ecx, dword [ebp - 0x10]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x38]
sub edx, 0xa36
mov dword [ebp - 0x38], edx
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x10]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x24]
cdq
mov ecx, 3
idiv ecx
test edx, edx
je 0x1000d381
cmp dword [ebp - 0x24], 0
jle 0x1000d381
mov edx, dword [ebp - 0x24]
sub edx, 0x130a
mov dword [ebp - 0x24], edx
jmp 0x1000d38c
mov eax, dword [ebp - 0x24]
add eax, 0x130a
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x28]
add ecx, dword [ebp - 0x3c]
mov dword [ebp - 0x28], ecx
mov edx, dword [ebp - 0x28]
add edx, dword [ebp - 0x2c]
mov dword [ebp - 0x28], edx
mov eax, dword [ebp - 0x18]
add eax, dword [ebp - 0x30]
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x18]
add ecx, dword [ebp - 0x30]
mov dword [ebp - 0x18], ecx
mov edx, dword [ebp - 0x30]
sub edx, 0x635
mov dword [ebp - 0x30], edx
mov eax, dword [ebp - 0x38]
sub eax, dword [ebp - 0x3c]
mov dword [ebp - 0x38], eax
mov ecx, dword [ebp - 0x2c]
add ecx, 0x1e23
mov dword [ebp - 0x2c], ecx
mov eax, dword [ebp - 0x2c]
cdq
mov ecx, 3
idiv ecx
test edx, edx
je 0x1000d3ee
mov edx, dword [ebp - 0x2c]
sub edx, 0xe7a
mov dword [ebp - 0x2c], edx
jmp 0x1000d3f9
mov eax, dword [ebp - 0x2c]
add eax, 0xe7a
mov dword [ebp - 0x2c], eax
mov ecx, dword [ebp - 0x30]
sub ecx, 0x1358
mov dword [ebp - 0x30], ecx
mov edx, dword [ebp - 0x2c]
add edx, dword [ebp - 0x10]
mov dword [ebp - 0x2c], edx
mov eax, dword [ebp - 0x30]
cdq
mov ecx, 3
idiv ecx
test edx, edx
je 0x1000d428
mov edx, dword [ebp - 0x30]
add edx, 1
mov dword [ebp - 0x30], edx
jmp 0x1000d40e
mov eax, dword [ebp - 0x10]
sub eax, 0x4b6
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x2c]
sub ecx, 0x55a
mov dword [ebp - 0x2c], ecx
mov eax, dword [ebp - 0x10]
cdq
mov ecx, 3
idiv ecx
test edx, edx
je 0x1000d459
mov edx, dword [ebp - 0x10]
add edx, 1
mov dword [ebp - 0x10], edx
jmp 0x1000d43f
mov eax, dword [ebp - 0x2c]
add eax, dword [ebp - 0x30]
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x54], 0
jmp 0x1000d474
mov ecx, dword [ebp - 0x54]
add ecx, 1
mov dword [ebp - 0x54], ecx
cmp dword [ebp - 0x54], 0x4c
jge 0x1000d485
mov edx, dword [ebp - 0x10]
sub edx, 5
mov dword [ebp - 0x10], edx
jmp 0x1000d46b
mov eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0x24]
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x2c]
sub ecx, 0x88c
mov dword [ebp - 0x2c], ecx
mov edx, dword [ebp - 0x30]
sub edx, dword [ebp - 0x24]
mov dword [ebp - 0x30], edx
mov eax, dword [ebp - 0x10]
sub eax, dword [ebp - 0x10]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x28]
sub ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x28], ecx
mov edx, dword [ebp - 0x10]
add edx, dword [ebp - 0x28]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
and eax, 0x80000001
jns 0x1000d4cd
dec eax
or eax, 0xfffffffe
inc eax
test eax, eax
je 0x1000d4dc
mov ecx, dword [ebp - 0x10]
add ecx, 1
mov dword [ebp - 0x10], ecx
jmp 0x1000d4be
mov edx, dword [ebp - 0x28]
sub edx, dword [ebp - 0x38]
mov dword [ebp - 0x28], edx
mov eax, dword [ebp - 0x2c]
sub eax, 0x522
mov dword [ebp - 0x2c], eax
mov ecx, dword [ebp - 0x38]
add ecx, 0x1f25
mov dword [ebp - 0x38], ecx
mov eax, dword [ebp - 0x18]
cdq
mov ecx, 3
idiv ecx
test edx, edx
je 0x1000d519
mov edx, dword [ebp - 0x18]
add edx, 0x870
mov dword [ebp - 0x18], edx
jmp 0x1000d524
mov eax, dword [ebp - 0x18]
sub eax, 0x870
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x18]
sub ecx, dword [ebp - 0x30]
mov dword [ebp - 0x18], ecx
mov edx, dword [ebp - 0x28]
sub edx, 0x1066
mov dword [ebp - 0x28], edx
mov eax, dword [ebp - 0x2c]
add eax, dword [ebp - 0x3c]
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x58], 0
jmp 0x1000d554
mov ecx, dword [ebp - 0x58]
add ecx, 1
mov dword [ebp - 0x58], ecx
cmp dword [ebp - 0x58], 0xa
jge 0x1000d565
mov edx, dword [ebp - 0x28]
add edx, 7
mov dword [ebp - 0x28], edx
jmp 0x1000d54b
mov eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0x38]
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x28]
sub ecx, dword [ebp - 0x10]
mov dword [ebp - 0x28], ecx
mov edx, dword [ebp - 0x30]
sub edx, dword [ebp - 0x3c]
mov dword [ebp - 0x30], edx
mov eax, dword [ebp - 0x38]
add eax, dword [ebp - 0x3c]
mov dword [ebp - 0x38], eax
mov ecx, dword [ebp - 0x18]
add ecx, 0xc77
mov dword [ebp - 0x18], ecx
mov edx, dword [ebp - 0x2c]
sub edx, 0x9e5
mov dword [ebp - 0x2c], edx
mov eax, dword [ebp - 0x28]
add eax, 0x1582
mov dword [ebp - 0x28], eax
mov ecx, dword [ebp - 0x2c]
sub ecx, 0x1cac
mov dword [ebp - 0x2c], ecx
mov edx, dword [ebp - 0x24]
sub edx, 0x46a
mov dword [ebp - 0x24], edx
mov eax, dword [ebp - 0x38]
sub eax, 0x24ee
mov dword [ebp - 0x38], eax
mov ecx, dword [ebp - 0x30]
sub ecx, 0xadb
mov dword [ebp - 0x30], ecx
mov edx, dword [ebp - 0x18]
add edx, dword [ebp - 0x3c]
mov dword [ebp - 0x18], edx
mov dword [ebp - 0x5c], 0
jmp 0x1000d5f6
mov eax, dword [ebp - 0x5c]
add eax, 1
mov dword [ebp - 0x5c], eax
cmp dword [ebp - 0x5c], 0x49
jge 0x1000d607
mov ecx, dword [ebp - 0x30]
add ecx, 8
mov dword [ebp - 0x30], ecx
jmp 0x1000d5ed
mov edx, dword [ebp - 0x24]
sub edx, dword [ebp - 0x18]
mov dword [ebp - 0x24], edx
mov eax, dword [ebp - 0x38]
sub eax, 0x1df9
mov dword [ebp - 0x38], eax
mov ecx, dword [ebp - 0x24]
sub ecx, dword [ebp - 0x38]
mov dword [ebp - 0x24], ecx
mov edx, dword [ebp - 0x30]
add edx, 0x1b4b
mov dword [ebp - 0x30], edx
mov eax, dword [ebp - 0x18]
add eax, 0x2615
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x38]
add ecx, 0x24f9
mov dword [ebp - 0x38], ecx
mov edx, dword [ebp - 0x28]
sub edx, dword [ebp - 0x24]
mov dword [ebp - 0x28], edx
mov eax, dword [ebp - 0x10]
cdq
mov ecx, 3
idiv ecx
test edx, edx
je 0x1000d66e
cmp dword [ebp - 0x10], 0
jle 0x1000d66e
mov edx, dword [ebp - 0x10]
sub edx, 0x69
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x18]
add eax, dword [ebp - 0x18]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x60], 0
jmp 0x1000d689
mov ecx, dword [ebp - 0x60]
add ecx, 1
mov dword [ebp - 0x60], ecx
cmp dword [ebp - 0x60], 0x20
jge 0x1000d69a
mov edx, dword [ebp - 0x3c]
sub edx, 4
mov dword [ebp - 0x3c], edx
jmp 0x1000d680
mov eax, dword [ebp - 0x24]
add eax, 0x1e17
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x30]
add ecx, dword [ebp - 0x30]
mov dword [ebp - 0x30], ecx
mov edx, dword [ebp - 0x30]
and edx, 0x80000001
jns 0x1000d6be
dec edx
or edx, 0xfffffffe
inc edx
test edx, edx
je 0x1000d6cd
mov eax, dword [ebp - 0x30]
add eax, 1
mov dword [ebp - 0x30], eax
jmp 0x1000d6ae
mov ecx, dword [ebp - 0x28]
add ecx, dword [ebp - 0x3c]
mov dword [ebp - 0x28], ecx
mov edx, dword [ebp - 0x24]
sub edx, 0x1849
mov dword [ebp - 0x24], edx
mov eax, dword [ebp - 0x24]
add eax, 0x202
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x28]
sub ecx, 0xba6
mov dword [ebp - 0x28], ecx
mov edx, dword [ebp - 0x2c]
sub edx, dword [ebp - 0x2c]
mov dword [ebp - 0x2c], edx
mov eax, dword [ebp - 0x10]
add eax, dword [ebp - 0x28]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x24]
sub ecx, 0xc59
mov dword [ebp - 0x24], ecx
mov edx, dword [ebp - 0x28]
add edx, dword [ebp - 0x2c]
mov dword [ebp - 0x28], edx
mov eax, dword [ebp - 0x18]
add eax, dword [ebp - 0x30]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x64], 0
jmp 0x1000d73b
mov ecx, dword [ebp - 0x64]
add ecx, 1
mov dword [ebp - 0x64], ecx
cmp dword [ebp - 0x64], 0x24
jge 0x1000d74c
mov edx, dword [ebp - 0x18]
sub edx, 2
mov dword [ebp - 0x18], edx
jmp 0x1000d732
mov eax, dword [ebp - 0x10]
add eax, dword [ebp - 0x38]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x24]
sub ecx, 0x1ce0
mov dword [ebp - 0x24], ecx
mov edx, dword [ebp - 0x2c]
add edx, dword [ebp - 0x24]
mov dword [ebp - 0x2c], edx
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x38]
mov dword [ebp - 0x28], eax
mov ecx, dword [ebp - 0x18]
add ecx, dword [ebp - 0x10]
mov dword [ebp - 0x18], ecx
mov edx, dword [ebp - 0x2c]
add edx, dword [ebp - 0x24]
mov dword [ebp - 0x2c], edx
mov eax, dword [ebp - 0x24]
sub eax, 0xc90
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x28]
add ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x28], ecx
mov edx, dword [ebp - 0x18]
sub edx, dword [ebp - 0x2c]
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x3c]
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x68], 0
jmp 0x1000d7bd
mov ecx, dword [ebp - 0x68]
add ecx, 1
mov dword [ebp - 0x68], ecx
cmp dword [ebp - 0x68], 0xa
jge 0x1000d7ce
mov edx, dword [ebp - 0x38]
add edx, 6
mov dword [ebp - 0x38], edx
jmp 0x1000d7b4
mov eax, dword [ebp - 0x30]
sub eax, dword [ebp - 0x3c]
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp - 0x38]
sub ecx, 0xb45
mov dword [ebp - 0x38], ecx
mov edx, dword [ebp - 0x2c]
add edx, dword [ebp - 0x30]
mov dword [ebp - 0x2c], edx
mov dword [ebp - 0x6c], 0
jmp 0x1000d7fe
mov eax, dword [ebp - 0x6c]
add eax, 1
mov dword [ebp - 0x6c], eax
cmp dword [ebp - 0x6c], 0x5c
jge 0x1000d80f
mov ecx, dword [ebp - 0x10]
add ecx, 4
mov dword [ebp - 0x10], ecx
jmp 0x1000d7f5
movsx edx, byte [ebp + 8]
cmp edx, 0x2f
jne 0x1000d81c
mov al, 0x3f
jmp 0x1000d81e
xor al, al
mov esp, ebp
pop ebp
ret 4