Function at 0x1000b9a0
Capabilities:
Delete file
Get common file path
Get disk size
Get uefi variable
Identify system language via api
Query environment variable

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x64
mov dword [ebp - 0x5c], ecx
movsx eax, byte [ebp + 8]
cmp eax, 0x41
jl 0x1000b9c7
movsx ecx, byte [ebp + 8]
cmp ecx, 0x5a
jg 0x1000b9c7
movsx eax, byte [ebp + 8]
sub eax, 0x41
jmp 0x1000caeb
mov edx, dword [0x101137a4]
xor eax, eax
mov dword [ebp - 0x64], edx
mov dword [ebp - 0x60], eax
cmp dword [ebp - 0x64], 0xe2e4d665
jne 0x1000bc51
cmp dword [ebp - 0x60], 0
jne 0x1000bc51
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetFileValidData]
push 0
call dword [sym.imp.KERNEL32.dll_LoadLibraryW]
push 0
push 0
call dword [sym.imp.GDI32.dll_GetRasterizerCaps]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_TransmitCommChar]
push 0
call dword [sym.imp.KERNEL32.dll_InitializeSListHead]
push 0
push 0
call dword [sym.imp.GDI32.dll_SetTextAlign]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetFirmwareEnvironmentVariableW]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjectsEx]
push 0
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_GetSystemPaletteEntries]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetFileTime]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_PurgeComm]
call dword [sym.imp.KERNEL32.dll_GetConsoleAliasExesLengthW]
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FindFirstFileExW]
push 0
push 0
push str.KZZGqX32uT6KEHajnIqkM1Z7fM5uL
push 0
push 0
push str.4v5xwFoW2Y9qQ4vgYh6ZAA
call dword [sym.imp.KERNEL32.dll_GetTimeFormatEx]
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetCurrencyFormatW]
push 0
push 0
push 0
push 0
push str.dQ8a4LF8Py14ADPuFz
call dword [sym.imp.KERNEL32.dll_FindFirstFileNameTransactedW]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_BackupWrite]
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_PolyBezier]
call dword [sym.imp.KERNEL32.dll_GetThreadErrorMode]
push 0
call dword [sym.imp.KERNEL32.dll_LocalFree]
push 0
call dword [sym.imp.KERNEL32.dll_QueryPerformanceCounter]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_FrameRgn]
push 0
push 0
call dword [sym.imp.GDI32.dll_GetTextMetricsW]
push 0
call dword [sym.imp.KERNEL32.dll_LocalFree]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateIoCompletionPort]
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessorNumber]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetNamedPipeClientProcessId]
push 0
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_GetDIBColorTable]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceW]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetWindowsDirectoryW]
push 0
call dword [sym.imp.KERNEL32.dll_SetThreadStackGuarantee]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_ExpandEnvironmentStringsW]
push 0
call dword [sym.imp.KERNEL32.dll_RemoveDllDirectory]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetApplicationRecoveryCallback]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_Wow64GetThreadSelectorEntry]
call dword [sym.imp.KERNEL32.dll_GetUserDefaultLangID]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetThreadDescription]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetHandleInformation]
push 0
call dword [sym.imp.GDI32.dll_PathToRegion]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_QueueUserWorkItem]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetCommConfig]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_Chord]
push 0
push 0
call dword [sym.imp.GDI32.dll_CreateDIBPatternBrushPt]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetThreadSelectorEntry]
push 0
call dword [sym.imp.KERNEL32.dll_DeleteFileW]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CancelIoEx]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_AssignProcessToJobObject]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FoldStringW]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_Pie]
movsx ecx, byte [ebp + 8]
cmp ecx, 0x61
jl 0x1000bc6f
movsx edx, byte [ebp + 8]
cmp edx, 0x7a
jg 0x1000bc6f
movsx eax, byte [ebp + 8]
sub eax, 0x47
jmp 0x1000caeb
movsx eax, byte [ebp + 8]
cmp eax, 0x30
jl 0x1000bc8d
movsx ecx, byte [ebp + 8]
cmp ecx, 0x39
jg 0x1000bc8d
movsx eax, byte [ebp + 8]
add eax, 4
jmp 0x1000caeb
mov dword [ebp - 0x30], 0x1f5
mov dword [ebp - 0x18], 0
mov dword [ebp - 0x20], 0x5c5
mov dword [ebp - 0x10], 0x482
mov edx, dword [ebp - 0x20]
add edx, dword [ebp - 0x10]
mov dword [ebp - 0x20], edx
mov dword [ebp - 0x3c], 0
mov dword [ebp - 0x14], 0x1b62
mov dword [ebp - 0x2c], 0x310
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x2c]
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x34], 0
mov dword [ebp - 0x28], 0x1cb2
mov dword [ebp - 0x44], 0
mov dword [ebp - 0x38], 0x1bb
mov dword [ebp - 0x48], 0x1a84
mov ecx, dword [ebp - 0x38]
add ecx, dword [ebp - 0x48]
mov dword [ebp - 0x38], ecx
mov edx, dword [ebp - 0x38]
sub edx, 0x6ac
mov dword [ebp - 0x38], edx
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 0x10]
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x34]
sub ecx, dword [ebp - 0x30]
mov dword [ebp - 0x34], ecx
mov edx, dword [ebp - 0x28]
sub edx, 0x8de
mov dword [ebp - 0x28], edx
mov eax, dword [ebp - 0x10]
sub eax, dword [ebp - 0x10]
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x40], 0
mov ecx, dword [ebp - 0x18]
add ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x18], ecx
mov edx, dword [ebp - 0x3c]
sub edx, dword [ebp - 0x18]
mov dword [ebp - 0x3c], edx
mov eax, dword [ebp - 0x34]
sub eax, dword [ebp - 0x3c]
mov dword [ebp - 0x34], eax
mov ecx, dword [ebp - 0x20]
and ecx, 0x80000001
jns 0x1000bd61
dec ecx
or ecx, 0xfffffffe
inc ecx
test ecx, ecx
je 0x1000bd70
mov edx, dword [ebp - 0x20]
add edx, 1
mov dword [ebp - 0x20], edx
jmp 0x1000bd51
mov eax, dword [ebp - 0x18]
add eax, 0x123a
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x10]
sub ecx, 0x484
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x18]
sub edx, 0x26c8
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x28]
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x24], 0x40
mov ecx, dword [ebp - 0x24]
add ecx, dword [ebp - 0x24]
mov dword [ebp - 0x24], ecx
mov edx, dword [ebp - 0x20]
add edx, 0x191e
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 0x10]
add eax, dword [ebp - 0x40]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
add ecx, 0x14ea
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x3c]
add edx, dword [ebp - 0x18]
mov dword [ebp - 0x3c], edx
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x30]
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x10]
add ecx, 0x17e3
mov dword [ebp - 0x10], ecx
mov dword [ebp - 0x4c], 0
jmp 0x1000bdfd
mov edx, dword [ebp - 0x4c]
add edx, 1
mov dword [ebp - 0x4c], edx
cmp dword [ebp - 0x4c], 0x36
jge 0x1000be0e
mov eax, dword [ebp - 0x30]
sub eax, 9
mov dword [ebp - 0x30], eax
jmp 0x1000bdf4
mov ecx, dword [ebp - 0x24]
add ecx, dword [ebp - 0x24]
mov dword [ebp - 0x24], ecx
mov edx, dword [ebp - 0x24]
add edx, 0x83c
mov dword [ebp - 0x24], edx
mov eax, dword [ebp - 0x10]
sub eax, dword [ebp - 0x40]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
add ecx, 0xd61
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x40]
sub edx, dword [ebp - 0x10]
mov dword [ebp - 0x40], edx
mov eax, dword [ebp - 0x18]
add eax, 0xd69
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x14]
sub ecx, dword [ebp - 0x28]
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0x20]
sub edx, 0x888
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 0x24]
sub eax, 0x2611
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x24]
sub ecx, 0x2451
mov dword [ebp - 0x24], ecx
mov edx, dword [ebp - 0x30]
add edx, dword [ebp - 0x10]
mov dword [ebp - 0x30], edx
mov eax, dword [ebp - 0x28]
sub eax, dword [ebp - 0x38]
mov dword [ebp - 0x28], eax
mov ecx, dword [ebp - 0x28]
and ecx, 0x80000001
jns 0x1000be9a
dec ecx
or ecx, 0xfffffffe
inc ecx
test ecx, ecx
je 0x1000bea9
mov edx, dword [ebp - 0x28]
add edx, 1
mov dword [ebp - 0x28], edx
jmp 0x1000be8a
mov eax, dword [ebp - 0x10]
sub eax, 0x24a0
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x34]
sub ecx, dword [ebp - 0x30]
mov dword [ebp - 0x34], ecx
mov edx, dword [ebp - 0x44]
sub edx, 0x80f
mov dword [ebp - 0x44], edx
mov eax, dword [ebp - 0x14]
sub eax, 0x8fc
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x24]
sub ecx, dword [ebp - 0x10]
mov dword [ebp - 0x24], ecx
mov edx, dword [ebp - 0x38]
sub edx, dword [ebp - 0x2c]
mov dword [ebp - 0x38], edx
mov eax, dword [ebp - 0x18]
add eax, dword [ebp - 0x40]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x50], 0
jmp 0x1000bf01
mov ecx, dword [ebp - 0x50]
add ecx, 1
mov dword [ebp - 0x50], ecx
cmp dword [ebp - 0x50], 0x47
jge 0x1000bf12
mov edx, dword [ebp - 0x20]
add edx, 8
mov dword [ebp - 0x20], edx
jmp 0x1000bef8
mov eax, dword [ebp - 0x44]
add eax, dword [ebp - 0x40]
mov dword [ebp - 0x44], eax
mov ecx, dword [ebp - 0x38]
add ecx, 0x12d
mov dword [ebp - 0x38], ecx
mov edx, dword [ebp - 0x18]
sub edx, dword [ebp - 0x20]
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x30]
sub eax, dword [ebp - 0x2c]
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp - 0x14]
and ecx, 0x80000003
jns 0x1000bf49
dec ecx
or ecx, 0xfffffffc
inc ecx
test ecx, ecx
je 0x1000bf61
cmp dword [ebp - 0x14], 0
jle 0x1000bf61
mov edx, dword [ebp - 0x14]
add edx, 0x14e1
mov dword [ebp - 0x14], edx
jmp 0x1000bf6c
mov eax, dword [ebp - 0x14]
sub eax, 0x14e1
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x30]
sub ecx, dword [ebp - 0x48]
mov dword [ebp - 0x30], ecx
mov edx, dword [ebp - 0x34]
add edx, dword [ebp - 0x10]
mov dword [ebp - 0x34], edx
mov eax, dword [ebp - 0x20]
add eax, 0x1ac2
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x10]
add ecx, dword [ebp - 0x10]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x40]
add edx, dword [ebp - 0x3c]
mov dword [ebp - 0x40], edx
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x3c]
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x20]
sub ecx, dword [ebp - 0x10]
mov dword [ebp - 0x20], ecx
mov edx, dword [ebp - 0x28]
add edx, 0xaeb
mov dword [ebp - 0x28], edx
mov eax, dword [ebp - 0x2c]
sub eax, dword [ebp - 0x20]
mov dword [ebp - 0x2c], eax
mov ecx, dword [ebp - 0x28]
sub ecx, dword [ebp - 0x30]
mov dword [ebp - 0x28], ecx
mov edx, dword [ebp - 0x28]
add edx, 0x22ea
mov dword [ebp - 0x28], edx
mov eax, dword [ebp - 0x38]
sub eax, dword [ebp - 0x30]
mov dword [ebp - 0x38], eax
mov ecx, dword [ebp - 0x18]
and ecx, 0x80000001
jns 0x1000bff0
dec ecx
or ecx, 0xfffffffe
inc ecx
test ecx, ecx
je 0x1000bfff
mov edx, dword [ebp - 0x18]
add edx, 1
mov dword [ebp - 0x18], edx
jmp 0x1000bfe0
mov eax, dword [ebp - 0x34]
add eax, 0x71f
mov dword [ebp - 0x34], eax
mov ecx, dword [ebp - 0x14]
sub ecx, dword [ebp - 0x14]
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0x14]
sub edx, 0x1428
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 0x30]
sub eax, dword [ebp - 0x28]
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp - 0x14]
sub ecx, 0xcf5
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0x2c]
sub edx, 0x2021
mov dword [ebp - 0x2c], edx
mov eax, dword [ebp - 0x18]
add eax, 0x1bc8
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x2c]
add ecx, 0x24de
mov dword [ebp - 0x2c], ecx
mov edx, dword [ebp - 0x2c]
sub edx, dword [ebp - 0x14]
mov dword [ebp - 0x2c], edx
mov eax, dword [ebp - 0x14]
add eax, 0xbb8
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x44]
add ecx, 0x1567
mov dword [ebp - 0x44], ecx
mov edx, dword [ebp - 0x34]
add edx, dword [ebp - 0x24]
mov dword [ebp - 0x34], edx
mov eax, dword [ebp - 0x2c]
sub eax, 0x1740
mov dword [ebp - 0x2c], eax
mov ecx, dword [ebp - 0x28]
sub ecx, dword [ebp - 0x20]
mov dword [ebp - 0x28], ecx
mov edx, dword [ebp - 0x24]
sub edx, dword [ebp - 0x48]
mov dword [ebp - 0x24], edx
mov eax, dword [ebp - 0x38]
add eax, 0xa0c
mov dword [ebp - 0x38], eax
mov ecx, dword [ebp - 0x2c]
sub ecx, 0x161e
mov dword [ebp - 0x2c], ecx
mov edx, dword [ebp - 0x24]
add edx, dword [ebp - 0x14]
mov dword [ebp - 0x24], edx
mov eax, dword [ebp - 0x38]
add eax, dword [ebp - 0x18]
mov dword [ebp - 0x38], eax
mov ecx, dword [ebp - 0x18]
sub ecx, dword [ebp - 0x34]
mov dword [ebp - 0x18], ecx
mov edx, dword [ebp - 0x3c]
and edx, 0x80000001
jns 0x1000c0df
dec edx
or edx, 0xfffffffe
inc edx
test edx, edx
je 0x1000c0ee
mov eax, dword [ebp - 0x3c]
add eax, 1
mov dword [ebp - 0x3c], eax
jmp 0x1000c0cf
mov ecx, dword [ebp - 0x24]
sub ecx, dword [ebp - 0x44]
mov dword [ebp - 0x24], ecx
mov edx, dword [ebp - 0x20]
sub edx, 0x1454
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x24]
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x2c]
add ecx, 0xc0c
mov dword [ebp - 0x2c], ecx
mov edx, dword [ebp - 0x34]
sub edx, dword [ebp - 0x44]
mov dword [ebp - 0x34], edx
mov eax, dword [ebp - 0x30]
add eax, dword [ebp - 0x48]
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp - 0x34]
sub ecx, dword [ebp - 0x18]
mov dword [ebp - 0x34], ecx
movsx edx, byte [ebp + 8]
cmp edx, 0x2b
jne 0x1000c143
mov al, 0x3e
jmp 0x1000caeb
mov dword [ebp - 0xc], 0x1529
mov dword [ebp - 8], 0x12ee
mov eax, dword [ebp - 0xc]
sub eax, dword [ebp - 8]
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x1c], 0
mov ecx, dword [ebp - 0xc]
sub ecx, 0x7d1
mov dword [ebp - 0xc], ecx
mov dword [ebp - 4], 0
mov edx, dword [ebp - 0xc]
sub edx, 0x1ffd
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 8]
add eax, 0x88d
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 0xc]
sub ecx, 0xc7f
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 0xc]
and edx, 0x80000001
jns 0x1000c1a7
dec edx
or edx, 0xfffffffe
inc edx
test edx, edx
je 0x1000c1be
cmp dword [ebp - 0xc], 0
jle 0x1000c1be
mov eax, dword [ebp - 0xc]
sub eax, 0x367
mov dword [ebp - 0xc], eax
jmp 0x1000c1ca
mov ecx, dword [ebp - 0xc]
add ecx, 0x367
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 0xc]
add edx, 0x2588
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 8]
add eax, dword [ebp - 0xc]
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 0xc]
sub ecx, dword [ebp - 8]
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 4]
sub edx, dword [ebp - 8]
mov dword [ebp - 4], edx
mov eax, dword [ebp - 8]
add eax, dword [ebp - 0x1c]
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 4]
add ecx, 0xb0c
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 0xc]
sub edx, dword [ebp - 0x1c]
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 8]
add eax, 0x191
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 4]
sub ecx, 0x2329
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 8]
and edx, 0x80000003
jns 0x1000c236
dec edx
or edx, 0xfffffffc
inc edx
test edx, edx
je 0x1000c24d
cmp dword [ebp - 8], 0
jle 0x1000c24d
mov eax, dword [ebp - 8]
sub eax, 0x18fd
mov dword [ebp - 8], eax
jmp 0x1000c259
mov ecx, dword [ebp - 8]
add ecx, 0x18fd
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 8]
add edx, 0x259e
mov dword [ebp - 8], edx
mov eax, dword [ebp - 4]
add eax, dword [ebp - 4]
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 8]
sub ecx, dword [ebp - 0x1c]
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 0xc]
add edx, 0x1e5
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 0xc]
add eax, 0xcf2
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0xc]
add ecx, dword [ebp - 0xc]
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 4]
add edx, dword [ebp - 4]
mov dword [ebp - 4], edx
mov eax, dword [ebp - 0xc]
add eax, 0xc2a
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0xc]
add ecx, dword [ebp - 8]
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 4]
add edx, 0x1b62
mov dword [ebp - 4], edx
mov eax, dword [ebp - 0xc]
sub eax, 0xa5a
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 4]
add ecx, dword [ebp - 0xc]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 8]
add edx, 0xf74
mov dword [ebp - 8], edx
mov eax, dword [ebp - 8]
sub eax, 0x1d2b
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 0xc]
sub ecx, dword [ebp - 8]
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 8]
add edx, 0x2295
mov dword [ebp - 8], edx
mov eax, dword [ebp - 0xc]
add eax, dword [ebp - 0x1c]
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0xc]
add ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 8]
add edx, dword [ebp - 8]
mov dword [ebp - 8], edx
mov eax, dword [ebp - 0xc]
add eax, dword [ebp - 0xc]
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 8]
cdq
mov ecx, 3
idiv ecx
test edx, edx
je 0x1000c33e
mov edx, dword [ebp - 8]
add edx, 1
mov dword [ebp - 8], edx
jmp 0x1000c324
mov eax, dword [ebp - 0xc]
sub eax, dword [ebp - 0x1c]
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 8]
add ecx, 0x271
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 8]
sub edx, 0x11e6
mov dword [ebp - 8], edx
mov eax, dword [ebp - 8]
add eax, 0x2549
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 4]
sub ecx, 0xb02
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 4]
sub edx, dword [ebp - 4]
mov dword [ebp - 4], edx
mov eax, dword [ebp - 4]
sub eax, 0x1b29
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 8]
sub ecx, 0x234e
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 0xc]
add edx, dword [ebp - 0x1c]
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 8]
add eax, 0x12f3
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 4]
add ecx, 0x7d8
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 4]
add edx, dword [ebp - 0x1c]
mov dword [ebp - 4], edx
mov eax, dword [ebp - 0xc]
add eax, dword [ebp - 4]
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 8]
sub ecx, dword [ebp - 8]
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 0xc]
add edx, dword [ebp - 0x1c]
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 4]
add eax, 0x147c
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
add ecx, 0x149c
mov dword [ebp - 4], ecx
mov eax, dword [ebp - 4]
cdq
mov ecx, 3
idiv ecx
test edx, edx
je 0x1000c40b
mov edx, dword [ebp - 4]
add edx, 1
mov dword [ebp - 4], edx
jmp 0x1000c3f1
mov eax, dword [ebp - 0xc]
add eax, 0x131
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 4]
sub ecx, 0x20
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 4]
add edx, 0x1acc
mov dword [ebp - 4], edx
mov eax, dword [ebp - 0xc]
add eax, dword [ebp - 8]
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 4]
cdq
mov ecx, 3
idiv ecx
test edx, edx
je 0x1000c44e
mov edx, dword [ebp - 4]
add edx, 1
mov dword [ebp - 4], edx
jmp 0x1000c434
mov eax, dword [ebp - 0xc]
add eax, 0x62
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 8]
sub ecx, 0x19d2
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 8]
add edx, 0x1c97
mov dword [ebp - 8], edx
mov eax, dword [ebp - 8]
add eax, dword [ebp - 0x1c]
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 4]
add ecx, dword [ebp - 8]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 8]
sub edx, dword [ebp - 0xc]
mov dword [ebp - 8], edx
mov eax, dword [ebp - 0xc]
add eax, dword [ebp - 0xc]
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 8]
add ecx, 0x1b4a
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 4]
sub edx, dword [ebp - 0xc]
mov dword [ebp - 4], edx
mov eax, dword [ebp - 0xc]
sub eax, dword [ebp - 0xc]
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x54], 0
jmp 0x1000c4c3
mov ecx, dword [ebp - 0x54]
add ecx, 1
mov dword [ebp - 0x54], ecx
cmp dword [ebp - 0x54], 0x22
jge 0x1000c4d4
mov edx, dword [ebp - 8]
add edx, 9
mov dword [ebp - 8], edx
jmp 0x1000c4ba
mov eax, dword [ebp - 0xc]
sub eax, dword [ebp - 0x1c]
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 8]
add ecx, 0x971
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 4]
add edx, dword [ebp - 0xc]
mov dword [ebp - 4], edx
mov eax, dword [ebp - 8]
sub eax, dword [ebp - 4]
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 4]
sub ecx, 0x1a38
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 0xc]
add edx, 0xe86
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 4]
add eax, dword [ebp - 0x1c]
mov dword [ebp - 4], eax
mov eax, dword [ebp - 4]
cdq
mov ecx, 3
idiv ecx
test edx, edx
je 0x1000c536
mov edx, dword [ebp - 4]
add edx, 1
mov dword [ebp - 4], edx
jmp 0x1000c51c
mov eax, dword [ebp - 4]
add eax, dword [ebp - 0x1c]
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
sub ecx, 0x360
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 4]
add edx, 0x644
mov dword [ebp - 4], edx
mov eax, dword [ebp - 8]
add eax, 0x97f
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 8]
add ecx, 0x1a20
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 4]
add edx, 0x266
mov dword [ebp - 4], edx
mov eax, dword [ebp - 0xc]
add eax, 0x808
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0xc]
cdq
mov ecx, 3
idiv ecx
test edx, edx
je 0x1000c5a6
cmp dword [ebp - 0xc], 0
jle 0x1000c5a6
mov edx, dword [ebp - 0xc]
sub edx, 0x2261
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 4]
add eax, dword [ebp - 4]
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 0xc]
sub ecx, dword [ebp - 4]
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 4]
add edx, 0x156e
mov dword [ebp - 4], edx
mov eax, dword [ebp - 8]
add eax, dword [ebp - 0x1c]
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 4]
add ecx, dword [ebp - 8]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 8]
add edx, dword [ebp - 0xc]
mov dword [ebp - 8], edx
mov eax, dword [ebp - 4]
sub eax, dword [ebp - 4]
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 0xc]
sub ecx, 0xff8
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 0xc]
add edx, 0x466
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 0xc]
sub eax, dword [ebp - 4]
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 4]
add ecx, 0x23f3
mov dword [ebp - 4], ecx
mov eax, dword [ebp - 4]
cdq
mov ecx, 3
idiv ecx
test edx, edx
je 0x1000c62f
mov edx, dword [ebp - 4]
add edx, 1
mov dword [ebp - 4], edx
jmp 0x1000c615
mov eax, dword [ebp - 4]
sub eax, 0xf88
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
add ecx, 0x2136
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 8]
and edx, 0x80000001
jns 0x1000c656
dec edx
or edx, 0xfffffffe
inc edx
test edx, edx
je 0x1000c665
mov eax, dword [ebp - 8]
add eax, 1
mov dword [ebp - 8], eax
jmp 0x1000c646
mov ecx, dword [ebp - 0xc]
sub ecx, dword [ebp - 4]
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 0xc]
add edx, 0x26c
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 0xc]
add eax, dword [ebp - 0xc]
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 4]
sub ecx, dword [ebp - 0xc]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 8]
sub edx, dword [ebp - 0x1c]
mov dword [ebp - 8], edx
mov eax, dword [ebp - 4]
add eax, 0x12af
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 0xc]
sub ecx, dword [ebp - 8]
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 4]
add edx, dword [ebp - 0xc]
mov dword [ebp - 4], edx
mov eax, dword [ebp - 0xc]
sub eax, dword [ebp - 4]
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0xc]
sub ecx, 0x200a
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 0xc]
sub edx, 0x193f
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 4]
sub eax, dword [ebp - 4]
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
sub ecx, 0x1932
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 8]
add edx, 0x1845
mov dword [ebp - 8], edx
mov eax, dword [ebp - 0xc]
sub eax, dword [ebp - 4]
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 4]
add ecx, dword [ebp - 4]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 4]
add edx, 0x9b1
mov dword [ebp - 4], edx
mov eax, dword [ebp - 4]
add eax, 0x1ef9
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
sub ecx, dword [ebp - 0x1c]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 4]
add edx, dword [ebp - 8]
mov dword [ebp - 4], edx
mov eax, dword [ebp - 0xc]
sub eax, dword [ebp - 8]
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0xc]
sub ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 4]
sub edx, 0x1852
mov dword [ebp - 4], edx
mov eax, dword [ebp - 8]
add eax, 0x95d
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 4]
sub ecx, dword [ebp - 8]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 0xc]
sub edx, dword [ebp - 4]
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 4]
cdq
mov ecx, 3
idiv ecx
test edx, edx
je 0x1000c784
mov edx, dword [ebp - 4]
add edx, 1
mov dword [ebp - 4], edx
jmp 0x1000c76a
mov eax, dword [ebp - 8]
add eax, dword [ebp - 4]
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 4]
sub ecx, dword [ebp - 0xc]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 8]
sub edx, 0x53d
mov dword [ebp - 8], edx
mov eax, dword [ebp - 4]
add eax, 0x3a5
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 8]
and ecx, 0x80000001
jns 0x1000c7bd
dec ecx
or ecx, 0xfffffffe
inc ecx
test ecx, ecx
je 0x1000c7cc
mov edx, dword [ebp - 8]
add edx, 1
mov dword [ebp - 8], edx
jmp 0x1000c7ad
mov eax, dword [ebp - 8]
add eax, 0x216e
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 0xc]
sub ecx, 0x1cc6
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 8]
add edx, 0x25d8
mov dword [ebp - 8], edx
mov eax, dword [ebp - 8]
add eax, 0xaaa
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 8]
sub ecx, 0x59f
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 8]
add edx, 0x138d
mov dword [ebp - 8], edx
mov eax, dword [ebp - 8]
sub eax, 0x822
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 0xc]
add ecx, 0x123b
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 8]
sub edx, 0x16b4
mov dword [ebp - 8], edx
mov eax, dword [ebp - 0xc]
add eax, 0x267f
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0xc]
add ecx, dword [ebp - 8]
mov dword [ebp - 0xc], ecx
mov eax, dword [ebp - 8]
cdq
mov ecx, 3
idiv ecx
test edx, edx
je 0x1000c86a
cmp dword [ebp - 8], 0
jle 0x1000c86a
mov edx, dword [ebp - 8]
sub edx, 0x1cce
mov dword [ebp - 8], edx
mov eax, dword [ebp - 0xc]
sub eax, dword [ebp - 8]
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 8]
sub ecx, 0x1dc3
mov dword [ebp - 8], ecx
mov dword [ebp - 0x58], 0
jmp 0x1000c891
mov edx, dword [ebp - 0x58]
add edx, 1
mov dword [ebp - 0x58], edx
cmp dword [ebp - 0x58], 0x5d
jge 0x1000c8a2
mov eax, dword [ebp - 0x1c]
sub eax, 1
mov dword [ebp - 0x1c], eax
jmp 0x1000c888
mov ecx, dword [ebp - 4]
add ecx, 0x350
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 0xc]
add edx, 0x696
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 4]
add eax, dword [ebp - 0xc]
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 8]
sub ecx, dword [ebp - 0xc]
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 4]
add edx, dword [ebp - 4]
mov dword [ebp - 4], edx
mov eax, dword [ebp - 8]
add eax, 0x2429
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 8]
add ecx, 0x904
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 8]
add edx, 0x187e
mov dword [ebp - 8], edx
mov eax, dword [ebp - 8]
sub eax, 0x98c
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 0xc]
sub ecx, 0x24d0
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 8]
add edx, dword [ebp - 0x1c]
mov dword [ebp - 8], edx
mov eax, dword [ebp - 4]
sub eax, dword [ebp - 8]
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 0xc]
sub ecx, 0x1fe6
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 4]
sub edx, 0x14f2
mov dword [ebp - 4], edx
mov eax, dword [ebp - 0xc]
sub eax, 0x1ac5
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 4]
sub ecx, dword [ebp - 0xc]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 8]
sub edx, 0x6d2
mov dword [ebp - 8], edx
mov eax, dword [ebp - 8]
sub eax, dword [ebp - 4]
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 8]
sub ecx, 0x1b39
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 4]
sub edx, dword [ebp - 0x1c]
mov dword [ebp - 4], edx
mov eax, dword [ebp - 0xc]
and eax, 0x80000001
jns 0x1000c986
dec eax
or eax, 0xfffffffe
inc eax
test eax, eax
je 0x1000c995
mov ecx, dword [ebp - 0xc]
add ecx, 1
mov dword [ebp - 0xc], ecx
jmp 0x1000c977
mov edx, dword [ebp - 8]
sub edx, dword [ebp - 4]
mov dword [ebp - 8], edx
mov eax, dword [ebp - 4]
cdq
mov ecx, 3
idiv ecx
test edx, edx
je 0x1000c9c1
cmp dword [ebp - 4], 0
jle 0x1000c9c1
mov edx, dword [ebp - 4]
sub edx, 0x96b
mov dword [ebp - 4], edx
jmp 0x1000c9cc
mov eax, dword [ebp - 4]
add eax, 0x96b
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 8]
add ecx, 0x224e
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 8]
sub edx, 0x77c
mov dword [ebp - 8], edx
mov eax, dword [ebp - 8]
and eax, 0x80000001
jns 0x1000c9f3
dec eax
or eax, 0xfffffffe
inc eax
test eax, eax
je 0x1000ca09
cmp dword [ebp - 8], 0
jle 0x1000ca09
mov ecx, dword [ebp - 8]
sub ecx, 0x749
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 4]
sub edx, dword [ebp - 8]
mov dword [ebp - 4], edx
mov eax, dword [ebp - 4]
sub eax, dword [ebp - 0xc]
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
add ecx, 0x633
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 8]
sub edx, 0x25f4
mov dword [ebp - 8], edx
mov eax, dword [ebp - 4]
add eax, dword [ebp - 0xc]
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 0xc]
add ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 8]
sub edx, dword [ebp - 4]
mov dword [ebp - 8], edx
mov eax, dword [ebp - 4]
add eax, dword [ebp - 0x1c]
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 4]
sub ecx, 0x1f6f
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 4]
sub edx, dword [ebp - 0x1c]
mov dword [ebp - 4], edx
mov eax, dword [ebp - 8]
sub eax, dword [ebp - 8]
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 8]
sub ecx, dword [ebp - 0xc]
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 4]
sub edx, dword [ebp - 0x1c]
mov dword [ebp - 4], edx
mov eax, dword [ebp - 8]
add eax, dword [ebp - 0xc]
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 4]
add ecx, 0xfcf
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 8]
sub edx, dword [ebp - 4]
mov dword [ebp - 8], edx
mov eax, dword [ebp - 4]
sub eax, 0x10af
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 8]
add ecx, dword [ebp - 4]
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 4]
sub edx, 0x7fe
mov dword [ebp - 4], edx
mov eax, dword [ebp - 0xc]
add eax, 0xa50
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0xc]
add ecx, 0x251d
mov dword [ebp - 0xc], ecx
movsx edx, byte [ebp + 8]
cmp edx, 0x2f
jne 0x1000cae9
mov al, 0x3f
jmp 0x1000caeb
xor al, al
mov esp, ebp
pop ebp
ret 4