Function at 0x10005f50
Capabilities:
Check for unexpected memory writes
Connect pipe
Enumerate gui resources
Extract resource via kernel32 functions
Get common file path
Get disk size
Get file size
Get hostname
Get memory capacity
Get system information on windows
Identify system language via api
Read file on windows
Read pipe
Set file attributes
Terminate thread
Write file on windows
Write pipe

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1003ed5d
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x47c
push esi
push edi
call fcn.10003720
push 0x1006b118
lea ecx, [ebp - 0x78]
call fcn.1000e0e0
mov dword [ebp - 4], 0
lea eax, [ebp - 0x78]
push eax
call fcn.10005e30
add esp, 4
mov dword [ebp - 0x4c], eax
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0x78]
call fcn.1000e010
cmp dword [0x10040b04], 0x7825249
jne 0x1000623a
push 0
push 0
call dword [sym.imp.GDI32.dll_SetBkMode]
push 0
call dword [sym.imp.KERNEL32.dll_Wow64SuspendThread]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetCommState]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetApplicationRecoveryCallback]
push 0
call dword [sym.imp.KERNEL32.dll_SetThreadLocale]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SizeofResource]
push 0
call dword [sym.imp.KERNEL32.dll_LocalHandle]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CallNamedPipeW]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetNamedPipeHandleStateW]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetProcessDEPPolicy]
push 0
push 0
call dword [sym.imp.GDI32.dll_SetLayout]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_OpenSemaphoreW]
call dword [sym.imp.KERNEL32.dll_FreeConsole]
call dword [sym.imp.KERNEL32.dll_CreateThreadpoolCleanupGroup]
call dword [sym.imp.KERNEL32.dll_IsSystemResumeAutomatic]
push 0
call dword [sym.imp.KERNEL32.dll_CloseThreadpoolIo]
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_GetBoundsRect]
push 0
call dword [sym.imp.KERNEL32.dll_PulseEvent]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_ReadFile]
push 0
call dword [sym.imp.KERNEL32.dll_ReleaseMutex]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_DeviceIoControl]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetConsoleCursorInfo]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetProcessWorkingSetSizeEx]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_Chord]
push 0
call dword [sym.imp.KERNEL32.dll_IsProcessorFeaturePresent]
push 0
call dword [sym.imp.KERNEL32.dll_RemoveSecureMemoryCacheCallback]
push 0
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_GetCharABCWidthsW]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_DiscardVirtualMemory]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetUILanguageInfo]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetTapeParameters]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_LocalAlloc]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetNamedPipeServerProcessId]
mov ecx, dword [ebp - 0x58]
mov dword [ebp - 0x48], ecx
push 0
mov edx, dword [ebp - 0x48]
push edx
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_ScrollConsoleScreenBufferW]
push 0x1006b12c
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_DrawEscape]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_ExtFloodFill]
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_Polyline]
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
push ecx
xorps xmm0, xmm0
movss dword [esp], xmm0
push 0
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_AngleArc]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetCommConfig]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FindNextVolumeMountPointW]
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetWriteWatch]
push 0
call dword [sym.imp.KERNEL32.dll_GetSystemInfo]
push 0
push 0
push 0x1006b14c
push 0
push 0x1006b184
push 0
call dword [sym.imp.KERNEL32.dll_FindStringOrdinal]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WriteFileEx]
push 0
call dword [sym.imp.KERNEL32.dll_SetConsoleCP]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_PlgBlt]
push 0
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_CreateDCW]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetVolumeMountPointW]
lea eax, [ebp - 0x280]
push eax
push 0x104
call dword [sym.imp.KERNEL32.dll_GetTempPathW]
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x44], 0
jbe 0x1000628c
cmp dword [ebp - 0x44], 0x104
jae 0x1000628c
lea ecx, [ebp - 0x488]
push ecx
push 0
push 0x1006b1b8
lea edx, [ebp - 0x280]
push edx
call dword [sym.imp.KERNEL32.dll_GetTempFileNameW]
test eax, eax
je 0x1000628c
lea eax, [ebp - 0x488]
push eax
call fcn.1000b9d0
add esp, 4
push 0xd2cf871c
push 0x58e4f25b
push 0x2e71bd34
call fcn.10005660
add esp, 0xc
cmp dword [0x10040b04], 0x19f3becd
jne 0x1000645d
push 0
call dword [sym.imp.KERNEL32.dll_SetLocalTime]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetHandleInformation]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetNumaNodeProcessorMaskEx]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetShortPathNameW]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_TerminateThread]
push 0
push 0
push 0x1006b1c4
push 0
call dword [sym.imp.KERNEL32.dll_EnumDateFormatsExEx]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetCommState]
push 0
push 0
call dword [sym.imp.GDI32.dll_GetWorldTransform]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FatalAppExitW]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WaitForDebugEvent]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_VirtualUnlock]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetAppContainerNamedObjectPath]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetConsoleCtrlHandler]
push 0
push 0x1006b1e8
call dword [sym.imp.KERNEL32.dll_LocaleNameToLCID]
push 0
push 0
call dword [sym.imp.GDI32.dll_GetMetaRgn]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateFiber]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_QueryIdleProcessorCycleTimeEx]
push 0
call dword [sym.imp.GDI32.dll_GetMetaFileW]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WaitForThreadpoolIoCallbacks]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_OpenJobObjectW]
push 0
call dword [sym.imp.KERNEL32.dll_FreeResource]
push 0
push 0
push 0
push 0x1006b224
push 0
push 0x1006b250
call dword [sym.imp.KERNEL32.dll_GetCurrencyFormatEx]
push 0
call dword [sym.imp.GDI32.dll_FlattenPath]
push 0
call dword [sym.imp.GDI32.dll_CreateMetaFileW]
push 0
call dword [sym.imp.GDI32.dll_UpdateColors]
push 0
call dword [sym.imp.KERNEL32.dll_InitializeSRWLock]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WriteFile]
push 0
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_GetCharWidthW]
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_TranslateCharsetInfo]
push 0
call dword [sym.imp.KERNEL32.dll_GetDynamicTimeZoneInformation]
push 0
call dword [sym.imp.KERNEL32.dll_SetLastError]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateBoundaryDescriptorW]
push 0
call dword [sym.imp.KERNEL32.dll_GetSystemPowerStatus]
call dword [sym.imp.KERNEL32.dll_GetConsoleCP]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_RtlUnwind]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetConsoleAliasW]
push 0
push 0
push 0
call dword [sym.imp.GDI32.dll_CreatePolygonRgn]
call dword [sym.imp.KERNEL32.dll_GetTickCount64]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetProcessorSystemCycleTime]
mov ecx, dword [ebp - 0x4c]
push ecx
call fcn.100052f0
add esp, 4
mov dword [ebp - 0x5c], eax
mov edx, 4
imul eax, edx, 0x9d
mov ecx, dword [0x10061304]
mov edx, dword [ecx + eax]
add edx, 4
mov eax, 4
imul ecx, eax, 0x9d
mov eax, dword [0x10061304]
mov dword [eax + ecx], edx
cmp dword [0x10040b04], 0x69a62bbc
jne 0x1000668c
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_DeleteTimerQueueTimer]
push 0
call dword [sym.imp.KERNEL32.dll_RtlCaptureContext]
xor ecx, ecx
lock dec dword [ecx]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WaitForThreadpoolIoCallbacks]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FileTimeToSystemTime]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_EnumResourceTypesW]
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetTempFileNameW]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetFileInformationByHandleEx]
call dword [sym.imp.KERNEL32.dll_GetThreadUILanguage]
push 0
call dword [sym.imp.KERNEL32.dll_SetSearchPathMode]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_ReadFileEx]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetComputerNameExW]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FindNextStreamW]
push 0
call dword [sym.imp.KERNEL32.dll_CloseThreadpoolTimer]
push 0
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateFileMappingNumaW]
push 0
push 0
push 0x1006b274
push 0
push 0x1006b294
call dword [sym.imp.KERNEL32.dll_CompareStringOrdinal]
call dword [sym.imp.KERNEL32.dll_GetMaximumProcessorGroupCount]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetFileAttributesW]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_EnterSynchronizationBarrier]
call dword [sym.imp.KERNEL32.dll_IsDebuggerPresent]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_QueueUserWorkItem]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetFinalPathNameByHandleW]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_HeapSize]
push 0
call dword [sym.imp.KERNEL32.dll_SetSystemTime]
call dword [sym.imp.KERNEL32.dll_SwitchToThread]
push 0
push 0
push 0x1006b2c0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetDurationFormat]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GlobalGetAtomNameW]
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_LockFileEx]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateWaitableTimerW]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SizeofResource]
push 0
call dword [sym.imp.KERNEL32.dll_SetEvent]
push 0
call dword [sym.imp.KERNEL32.dll_GlobalMemoryStatusEx]
call dword [sym.imp.KERNEL32.dll_GetConsoleWindow]
call dword [sym.imp.KERNEL32.dll_ConvertFiberToThread]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_WaitForMultipleObjects]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetProcessShutdownParameters]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetDiskFreeSpaceExW]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_LocalFileTimeToFileTime]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryW]
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetWriteWatch]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetApplicationRecoveryCallback]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetCommConfig]
push 0
call fcn.10005070
add esp, 4
mov dword [ebp - 0x14], 0x755
mov dword [ebp - 0x18], 0x423
mov edx, dword [ebp - 0x14]
add edx, dword [ebp - 0x18]
mov dword [ebp - 0x14], edx
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x10], 0x761
mov dword [ebp - 0x1c], 0
mov eax, dword [ebp - 0x14]
sub eax, 0x474
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x24], 0
mov ecx, dword [ebp - 0x18]
sub ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x18], ecx
mov eax, dword [ebp - 0x24]
cdq
mov ecx, 3
idiv ecx
test edx, edx
je 0x100066f7
mov edx, dword [ebp - 0x24]
add edx, 1
mov dword [ebp - 0x24], edx
jmp 0x100066dd
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x1c]
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x20]
sub ecx, 0xead
mov dword [ebp - 0x20], ecx
mov edx, dword [ebp - 0x1c]
sub edx, 0x1772
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x10]
sub eax, dword [ebp - 0x20]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
sub ecx, 0x26cf
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x14]
sub edx, 0x806
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x10]
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x10]
sub ecx, 0xaf6
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x1c]
sub edx, 0x1e62
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x10]
sub eax, 0x102a
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x18]
sub ecx, 0x1f54
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x28], 0
jmp 0x10006783
mov edx, dword [ebp - 0x28]
add edx, 1
mov dword [ebp - 0x28], edx
cmp dword [ebp - 0x28], 0x38
jge 0x10006794
mov eax, dword [ebp - 0x20]
add eax, 3
mov dword [ebp - 0x20], eax
jmp 0x1000677a
mov ecx, dword [ebp - 0x14]
sub ecx, 0x1a6
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0x14]
and edx, 0x80000001
jns 0x100067b0
dec edx
or edx, 0xfffffffe
inc edx
test edx, edx
je 0x100067c7
cmp dword [ebp - 0x14], 0
jle 0x100067c7
mov eax, dword [ebp - 0x14]
sub eax, 0x1351
mov dword [ebp - 0x14], eax
jmp 0x100067d3
mov ecx, dword [ebp - 0x14]
add ecx, 0x1351
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0x18]
sub edx, 0x498
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x20]
sub eax, 0x1a0e
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 0x623
mov dword [ebp - 0x1c], ecx
mov eax, dword [ebp - 0x18]
cdq
mov ecx, 3
idiv ecx
test edx, edx
je 0x10006810
mov edx, dword [ebp - 0x18]
add edx, 1
mov dword [ebp - 0x18], edx
jmp 0x100067f6
mov eax, dword [ebp - 0x1c]
add eax, 0x1a8a
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x10]
add ecx, dword [ebp - 0x10]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x24]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x18]
add eax, dword [ebp - 0x14]
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x18]
sub ecx, dword [ebp - 0x10]
mov dword [ebp - 0x18], ecx
mov edx, dword [ebp - 0x20]
sub edx, dword [ebp - 0x24]
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 0x10]
sub eax, 0xcdf
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x18]
sub ecx, 0x234f
mov dword [ebp - 0x18], ecx
mov eax, dword [ebp - 0x10]
cdq
mov ecx, 3
idiv ecx
test edx, edx
je 0x10006879
mov edx, dword [ebp - 0x10]
add edx, 1
mov dword [ebp - 0x10], edx
jmp 0x1000685f
mov eax, dword [ebp - 0x20]
add eax, 0x1a4a
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x18]
sub ecx, dword [ebp - 0x20]
mov dword [ebp - 0x18], ecx
mov edx, dword [ebp - 0x10]
add edx, dword [ebp - 0x20]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x18]
sub eax, 0x240b
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x20]
cdq
mov ecx, 3
idiv ecx
test edx, edx
je 0x100068bb
mov edx, dword [ebp - 0x20]
add edx, 1
mov dword [ebp - 0x20], edx
jmp 0x100068a1
mov eax, dword [ebp - 0x1c]
sub eax, 0x1886
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x14]
sub ecx, 0x1be2
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0x14]
add edx, dword [ebp - 0x20]
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 0x10]
sub eax, 0x239c
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
add ecx, 0x18
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x14]
sub edx, dword [ebp - 0x20]
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x10]
and ecx, 0x80000001
jns 0x10006911
dec ecx
or ecx, 0xfffffffe
inc ecx
test ecx, ecx
je 0x10006920
mov edx, dword [ebp - 0x10]
add edx, 1
mov dword [ebp - 0x10], edx
jmp 0x10006901
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x1c]
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x20]
add ecx, 0x10e1
mov dword [ebp - 0x20], ecx
mov edx, dword [ebp - 0x1c]
sub edx, 0x966
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x18]
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x14]
and ecx, 0x80000003
jns 0x1000695a
dec ecx
or ecx, 0xfffffffc
inc ecx
test ecx, ecx
je 0x1000696c
mov edx, dword [ebp - 0x14]
add edx, 0x188e
mov dword [ebp - 0x14], edx
jmp 0x10006977
mov eax, dword [ebp - 0x14]
sub eax, 0x188e
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x18]
add ecx, 0x272
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x2c], 0
jmp 0x10006995
mov edx, dword [ebp - 0x2c]
add edx, 1
mov dword [ebp - 0x2c], edx
cmp dword [ebp - 0x2c], 0x43
jge 0x100069a6
mov eax, dword [ebp - 0x20]
sub eax, 6
mov dword [ebp - 0x20], eax
jmp 0x1000698c
mov ecx, dword [ebp - 0x14]
sub ecx, 0x1ee1
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0x14]
sub edx, dword [ebp - 0x1c]
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 0x10]
sub eax, dword [ebp - 0x14]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x14]
sub ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0x1c]
sub edx, 0x18b8
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x14]
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x18]
add ecx, dword [ebp - 0x18]
mov dword [ebp - 0x18], ecx
mov edx, dword [ebp - 0x20]
sub edx, dword [ebp - 0x10]
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 0x1c]
add eax, 0x1653
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x20]
sub ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x20], ecx
mov eax, dword [ebp - 0x18]
cdq
mov ecx, 3
idiv ecx
test edx, edx
je 0x10006a22
mov edx, dword [ebp - 0x18]
add edx, 1
mov dword [ebp - 0x18], edx
jmp 0x10006a08
mov eax, dword [ebp - 0x20]
add eax, 0x1b16
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x18]
mov dword [ebp - 0x1c], ecx
mov edx, dword [ebp - 0x20]
add edx, dword [ebp - 0x10]
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 0x20]
sub eax, 0x1627
mov dword [ebp - 0x20], eax
mov dword [ebp - 0x30], 0
jmp 0x10006a5c
mov ecx, dword [ebp - 0x30]
add ecx, 1
mov dword [ebp - 0x30], ecx
cmp dword [ebp - 0x30], 0x23
jge 0x10006a6d
mov edx, dword [ebp - 0x24]
add edx, 5
mov dword [ebp - 0x24], edx
jmp 0x10006a53
mov eax, dword [ebp - 0x1c]
sub eax, 0x21f
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x10]
add ecx, dword [ebp - 0x14]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x10]
sub eax, 0x13c2
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x14]
sub ecx, 0x143c
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0x18]
sub edx, 0xfac
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x18]
add eax, 0x2335
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x1c]
sub ecx, 0x661
mov dword [ebp - 0x1c], ecx
mov edx, dword [ebp - 0x10]
sub edx, 0x15f
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x18]
add eax, 0x18eb
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x14]
add ecx, 0x2578
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0x20]
sub edx, 0x8e8
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 0x10]
sub eax, dword [ebp - 0x10]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x18]
add ecx, 0x1c33
mov dword [ebp - 0x18], ecx
mov edx, dword [ebp - 0x1c]
sub edx, 0x2024
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x14]
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x10]
add ecx, dword [ebp - 0x10]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x18]
add edx, dword [ebp - 0x1c]
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 0x1c]
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x14]
sub ecx, dword [ebp - 0x10]
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0x14]
add edx, 0x1886
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 0x10]
add eax, 0x1398
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
add ecx, 0x3e8
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x1c]
add edx, 0xf32
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x10]
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x18]
sub ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x18], ecx
mov eax, dword [ebp - 0x1c]
cdq
mov ecx, 3
idiv ecx
test edx, edx
je 0x10006b9c
mov edx, dword [ebp - 0x1c]
add edx, 1
mov dword [ebp - 0x1c], edx
jmp 0x10006b82
mov eax, dword [ebp - 0x10]
sub eax, dword [ebp - 0x1c]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x20]
sub ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x20], ecx
mov edx, dword [ebp - 0x14]
sub edx, dword [ebp - 0x20]
mov dword [ebp - 0x14], edx
mov dword [ebp - 0x34], 0
jmp 0x10006bc9
mov eax, dword [ebp - 0x34]
add eax, 1
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x34], 0x3f
jge 0x10006bda
mov ecx, dword [ebp - 0x24]
sub ecx, 2
mov dword [ebp - 0x24], ecx
jmp 0x10006bc0
mov edx, dword [ebp - 0x10]
sub edx, 0x14d2
mov dword [ebp - 0x10], edx
mov dword [ebp - 0x38], 0
jmp 0x10006bf8
mov eax, dword [ebp - 0x38]
add eax, 1
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x38], 0x27
jge 0x10006c09
mov ecx, dword [ebp - 0x24]
add ecx, 1
mov dword [ebp - 0x24], ecx
jmp 0x10006bef
mov edx, dword [ebp - 0x14]
sub edx, dword [ebp - 0x20]
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 0x10]
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x1c]
sub ecx, 0x1672
mov dword [ebp - 0x1c], ecx
mov edx, dword [ebp - 0x18]
sub edx, 0x910
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x10]
sub eax, 0x10f9
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x14]
sub ecx, 0xe1a
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0x10]
add edx, 0x1c9a
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
sub eax, 0xa64
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x10]
add ecx, 0x184c
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x18]
sub edx, 0xd7
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x14]
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x10]
add ecx, 0x1dd8
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x18]
add edx, dword [ebp - 0x1c]
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x18]
add eax, dword [ebp - 0x1c]
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x14]
sub ecx, dword [ebp - 0x18]
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0x10]
sub edx, dword [ebp - 0x1c]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x18]
sub eax, 0x1109
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x10]
sub ecx, 0x16d5
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x18]
sub edx, 0x1934
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x10]
sub eax, 0x1ae
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x18]
mov dword [ebp - 0x1c], ecx
mov edx, dword [ebp - 0x10]
sub edx, dword [ebp - 0x14]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x14]
add eax, 0xd8a
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x18]
add ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x18], ecx
mov edx, dword [ebp - 0x14]
add edx, 0xd06
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 0x20]
add eax, 0xb73
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x1c]
sub ecx, dword [ebp - 0x18]
mov dword [ebp - 0x1c], ecx
mov edx, dword [ebp - 0x1c]
sub edx, 0x1414
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x10]
add eax, dword [ebp - 0x20]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x20]
add ecx, 0x24c9
mov dword [ebp - 0x20], ecx
mov edx, dword [ebp - 0x18]
add edx, dword [ebp - 0x24]
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x20]
add eax, 0x186d
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x10]
add ecx, dword [ebp - 0x20]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x10]
sub edx, dword [ebp - 0x24]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
sub eax, dword [ebp - 0x24]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x14]
sub ecx, dword [ebp - 0x24]
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x14]
sub eax, 0x1bae
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x18]
sub ecx, 0xfb4
mov dword [ebp - 0x18], ecx
mov eax, dword [ebp - 0x20]
cdq
mov ecx, 3
idiv ecx
test edx, edx
je 0x10006db9
mov edx, dword [ebp - 0x20]
add edx, 1
mov dword [ebp - 0x20], edx
jmp 0x10006d9f
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x14]
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x10]
sub ecx, dword [ebp - 0x18]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x20]
add edx, dword [ebp - 0x18]
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 0x1c]
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x18]
add ecx, dword [ebp - 0x24]
mov dword [ebp - 0x18], ecx
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x20]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x20]
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x10]
add ecx, 0x3fb
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x24]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x10]
add eax, 0x23a9
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x18]
sub ecx, dword [ebp - 0x24]
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x3c], 0
jmp 0x10006e33
mov edx, dword [ebp - 0x3c]
add edx, 1
mov dword [ebp - 0x3c], edx
cmp dword [ebp - 0x3c], 0x1f
jge 0x10006e44
mov eax, dword [ebp - 0x10]
add eax, 2
mov dword [ebp - 0x10], eax
jmp 0x10006e2a
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x14]
mov dword [ebp - 0x1c], ecx
mov edx, dword [ebp - 0x20]
add edx, 0x120e
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 0x18]
sub eax, 0x589
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x40], 0
jmp 0x10006e76
mov ecx, dword [ebp - 0x40]
add ecx, 1
mov dword [ebp - 0x40], ecx
cmp dword [ebp - 0x40], 0x43
jge 0x10006e87
mov edx, dword [ebp - 0x20]
add edx, 6
mov dword [ebp - 0x20], edx
jmp 0x10006e6d
mov eax, dword [ebp - 0x20]
sub eax, dword [ebp - 0x18]
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x20]
add ecx, 0x1b88
mov dword [ebp - 0x20], ecx
mov edx, dword [ebp - 0x20]
add edx, 0x1001
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 0x20]
sub eax, 0x1b8
mov dword [ebp - 0x20], eax
push 0
push 0
call fcn.10007e70
add esp, 8
mov ecx, 4
imul edx, ecx, 0x9d
mov eax, dword [0x10061304]
mov ecx, dword [eax + edx]
mov dword [ebp - 0x50], ecx
call dword [ebp - 0x50]
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetNumberFormatW]
call dword [sym.imp.KERNEL32.dll_GetTickCount]
xor eax, eax
xor edx, edx
xor esi, esi
xor edi, edi
xor ecx, ecx
push ebx
mov ebx, edi
lock cmpxchg8b qword [esi]
mov edi, ebx
pop ebx
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetFileSize]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_OfferVirtualMemory]
xor edx, edx
xor eax, eax
xchg dword [eax], edx
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov ecx, dword [ebp - 0x60]
mov dword [ebp - 0x54], ecx
push 0
mov edx, dword [ebp - 0x54]
push edx
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_ReadConsoleOutputAttribute]
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_LCMapStringW]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThreadpoolWait]
push 0
call dword [sym.imp.KERNEL32.dll_HeapDestroy]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetCurrentDirectoryW]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_LCIDToLocaleName]
push 0
push 0
push 0x1006b2f0
push 0
push 0x1006b328
push 0
call dword [sym.imp.KERNEL32.dll_EnumCalendarInfoExEx]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_BeginUpdateResourceW]
push 0
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetFileBandwidthReservation]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetTempFileNameW]
call dword [sym.imp.KERNEL32.dll_GetSystemDEPPolicy]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetVolumeLabelW]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetProcessHeaps]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetInformationJobObject]
push 0
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_FoldStringW]
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateWaitableTimerW]
push 0
call dword [sym.imp.KERNEL32.dll_AcquireSRWLockExclusive]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_ConnectNamedPipe]
push 0
call dword [sym.imp.KERNEL32.dll_LockResource]
push 0
call dword [sym.imp.KERNEL32.dll_GetActiveProcessorCount]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetFileSize]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_lstrcpyW]
push 0
call dword [sym.imp.KERNEL32.dll_SetConsoleOutputCP]
push 0
push 0
push 0x1006b364
call dword [sym.imp.KERNEL32.dll_ResolveLocaleName]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetThreadContext]
push 0
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_InitializeProcThreadAttributeList]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_EnterSynchronizationBarrier]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_DeleteTimerQueueEx]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_IsDBCSLeadByteEx]
push 0
call dword [sym.imp.KERNEL32.dll_RtlCaptureContext]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_SetThreadErrorMode]
push 0
push 0
call dword [sym.imp.KERNEL32.dll_GetThreadDescription]
call dword [sym.imp.KERNEL32.dll_GetSystemDefaultUILanguage]
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
mov esp, ebp
pop ebp
ret