Function at 0x10234b4f
Capabilities:
Read file on windows

Disassembly:
call fcn.102359b8
push ecx
push eax
mov eax, 0x3faf4c96
shr eax, 2
push edi
push ebx
mov ebx, 0x7dfa7e5c
shl ebx, 6
add ebx, 0x816068ff
push ebx
sub dword [esp], 0x1fda8c01
pop edi
add edi, 0x1fda8c01
pop ebx
add eax, edi
pop edi
dec eax
sub eax, 0xffffffff
add eax, 0xf0142cdc
mov ecx, eax
mov eax, dword [esp]
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
push 0x9fed3b1
mov dword [esp], ecx
xor dword [esp], 0x7ebd9334
pop dword [ebp - 0x410]
xor dword [ebp - 0x410], 0x7ebd9334
mov ecx, dword [esp]
add esp, 4
push dword [ebp - 0x410]
push eax
push ebx
mov dword [esp], 0x3bf3118e
mov eax, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
add dword [esp + 4], 0x573f3cb2
add dword [esp + 4], eax
sub dword [esp + 4], 0x573f3cb2
pop eax
pop eax
sub esp, 4
mov dword [esp], ecx
push esi
mov esi, 0x3bf3118e
mov ecx, esi
pop esi
sub eax, ecx
push dword [esp]
pop ecx
add esp, 4
push ecx
push 0xa75d9ea
mov dword [esp], edi
mov dword [esp], eax
mov ecx, dword [esp]
add esp, 4
push ebx
mov ebx, 0x7eacb892
sub ebx, 0x7f7bc16e
xor ebx, 0x73b79ab6
shr ebx, 8
push edi
mov edi, 0x3878a517
add edi, 0x3f869ddc
and ebx, edi
pop edi
sub ebx, 0x8c066d
add ebx, 0x1fefd35e
add ebx, 0x7bfb8200
add ebx, ebp
sub ebx, 0x7bfb8200
sub ebx, 0x1fefd35e
mov dword [ebx], ecx
pop ebx
push dword [esp]
pop ecx
add esp, 4
push 0x87f74ae
mov dword [esp], eax
push 0x40a8ddcc
mov dword [esp], edx
push ebx
push 0xfffffbf4
pop ebx
push ecx
mov ecx, ebx
mov edx, ecx
pop ecx
pop ebx
mov eax, edx
pop edx
add eax, ebp
mov ecx, dword [eax]
push dword [esp]
mov eax, dword [esp]
add esp, 4
push ebx
push esp
pop ebx
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
sub esp, 4
mov dword [esp], ebp
mov dword [esp], eax
mov eax, esp
add eax, 4
sub eax, 4
xchg dword [esp], eax
pop esp
mov dword [esp], edx
mov dword [esp], eax
mov eax, 0xfffffbf8
push 0x6db9c63e
mov dword [esp], edx
mov edx, 0x56e98765
add eax, edx
pop edx
add eax, ebp
push edx
mov edx, 0x75fe12fc
sub edx, 0x51fdee1a
shr edx, 3
add edx, 0x526982c9
sub eax, edx
mov edx, dword [esp]
add esp, 4
mov dword [eax], ecx
mov eax, dword [esp]
add esp, 4
push 0
lea edx, [ebp - 0x40c]
push esi
mov dword [esp], edi
mov dword [esp], 0x5dd73096
push esi
push edi
mov edi, 0x6fefcd55
and edi, 0x5fe63845
or edi, 0x4b9f6cf7
and edi, 0x75f9856c
inc edi
and edi, 0x6ffb0c08
add edi, 0xf92664b2
mov esi, edi
pop edi
sub dword [esp + 4], esi
mov esi, dword [esp]
add esp, 4
push ecx
mov ecx, 0x5fdfb6cd
and dword [esp + 4], ecx
pop ecx
push edi
mov edi, 0xd3c59f6
add dword [esp + 4], 0x7d5b5d00
sub dword [esp + 4], edi
push eax
mov eax, 0x7d5b5d00
sub dword [esp + 8], eax
pop eax
mov edi, dword [esp]
add esp, 4
mov dword [esp], edx
lea eax, [ebp - 0x408]
push ebx
mov dword [esp], 0x4c25e1a2
mov dword [esp], edi
mov edi, esp
push esi
mov esi, 4
sub edi, 0x6ffb991c
add edi, esi
add edi, 0x6ffb991c
mov esi, dword [esp]
push ebp
mov ebp, esp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
pop esp
push edx
mov edx, 0x1fbaad5c
neg edx
neg edx
push ebp
mov ebp, 0x74bf1c47
and ebp, 0x5fdfb4c5
inc ebp
shl ebp, 3
shl ebp, 1
sub ebp, 0xcdfd307b
and edx, ebp
mov ebp, dword [esp]
add esp, 4
sub edx, 0x1bb00140
sub edi, edx
pop edx
xor edi, dword [esp]
xor dword [esp], edi
xor edi, dword [esp]
pop esp
mov dword [esp], eax
push 0
mov ecx, dword [0x10057d50]
sub esp, 4
mov dword [esp], edx
push 0x2b0d1f00
mov dword [esp], esp
add dword [esp], 4
push dword [esp]
pop edx
push edi
mov edi, esp
add edi, 4
add edi, 4
xchg dword [esp], edi
pop esp
add edx, 4
push edi
mov dword [esp], esi
mov esi, 4
sub edx, esi
pop esi
xchg dword [esp], edx
mov esp, dword [esp]
mov dword [esp], edx
mov dword [esp], ecx
call dword [0x10058188]
push 0x3ae3edf4
mov dword [esp], ebp
push esp
pop ebp
add ebp, 4
push edi
mov edi, 4
sub ebp, 0x5bb33542
sub ebp, edi
add ebp, 0x5bb33542
mov edi, dword [esp]
add esp, 4
xchg dword [esp], ebp
pop esp
mov dword [esp], edx
mov edx, 0xfffffbe8
add edx, ebp
push eax
pop dword [edx]
mov edx, dword [esp]
push ebx
push esp
pop ebx
add ebx, 4
add ebx, 4
xchg dword [esp], ebx
pop esp
cmp dword [ebp - 0x418], 0
jne 0x10234e57
xor eax, eax
jmp loc.100098de
cmp dword [ebp - 0x408], 0xffffffff
jne 0x10234eb3
push esi
mov dword [esp], 0x7fffc941
dec dword [esp]
add dword [esp], 0xffffffff
neg dword [esp]
neg dword [esp]
sub dword [esp], 0x5cfa04f2
add dword [esp], 0xdcfa3bb4
push dword [esp]
push dword [esp]
mov eax, dword [esp]
push ebp
push esp
pop ebp
add ebp, 4
add ebp, 4
xchg dword [esp], ebp
mov esp, dword [esp]
add esp, 4
add esp, 4
jmp loc.100098de
push str.zxrq
push 0
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateEventA]
push edx
push 0x1b635c5
mov dword [esp], esp
add dword [esp], 4
mov edx, dword [esp]
add esp, 4
add edx, 4
sub edx, 4
xor edx, dword [esp]
xor dword [esp], edx
xor edx, dword [esp]
mov esp, dword [esp]
mov dword [esp], edi
mov dword [esp], ecx
mov dword [esp], ebx
mov dword [esp], eax
pop dword [ebp - 0x414]
cmp dword [ebp - 0x414], 0
jne 0x10234f18
xor eax, eax
jmp loc.100098de
push ebx
mov ebx, 0xfffffbdc
add ebx, ebp
push eax
mov eax, 0xd4f1083
and eax, 0x7df7972d
inc eax
push 0
add dword [esp], 0x3ff31c01
sub dword [esp], eax
sub dword [esp], 0x3ff31c01
mov eax, dword [esp]
add esp, 4
or eax, 0x4dbe2fdc
add eax, 0x779b2510
sub eax, 0x775a150e
push eax
pop dword [ebx]
pop eax
push dword [esp]
mov ebx, dword [esp]
add esp, 4
push 0x7e33cf2
mov dword [esp], esi
push esp
pop esi
add esi, 4
add esi, 4
xchg dword [esp], esi
pop esp
push esi
push edx
mov dword [esp], 0x7fdeaa60
pop esi
not esi
xor esi, 0x7bcf6ac2
push edi
push 0x29fc7a94
pop edi
sub esi, edi
pop edi
push ecx
mov ecx, 0x71f628b1
sub esi, ecx
pop ecx
xchg esi, eax
sub eax, 0xffffffff
xchg esi, eax
push ebp
mov ebp, 0x6feff517
shl ebp, 5
or ebp, 0x3b17bf00
dec ebp
not ebp
shr ebp, 8
push eax
mov eax, 0x7f0e996c
xor eax, 0x20f50535
xor ebp, eax
pop eax
sub esi, ebp
pop ebp
push eax
mov eax, esi
mov dword [ebp - 0x420], eax
mov eax, dword [esp]
add esp, 4
pop esi
push dword [ebp - 0x414]
push edi
push esi
mov esi, 0x6fb6b178
inc esi
inc esi
xor esi, 0x5f7f5442
xor esi, 0x7ffdbc92
xor esi, 0x4de7129a
sub esi, 0xbb175d30
mov edi, esi
pop esi
add dword [esp + 4], 0x6f73319f
add dword [esp + 4], edi
sub dword [esp + 4], 0x6f73319f
mov edi, dword [esp]
add esp, 4
push dword [esp]
pop edx
push eax
mov eax, esp
add eax, 4
push edx
push ebp
mov ebp, 0x6bf8e332
mov edx, 0x6bf8e336
sub edx, ebp
pop ebp
add eax, edx
pop edx
xor eax, dword [esp]
xor dword [esp], eax
xor eax, dword [esp]
mov esp, dword [esp]
sub edx, 0x47bbee00
push ecx
push edx
push esi
mov esi, 0x7f6b644e
sub dword [esp + 4], esi
mov esi, dword [esp]
add esp, 4
pop ecx
add ecx, 0x7f6b644e
push ebx
mov dword [esp], 0x3b212b50
mov dword [esp], ebx
mov ebx, 0xfffffbe4
sub ebx, 0x5f989aad
add ebx, 0x3f6f9bb4
add ebx, ebp
sub ebx, 0x3f6f9bb4
add ebx, 0x5f989aad
push edx
mov edx, 0
add edx, ebx
mov dword [edx], ecx
pop edx
pop ebx
mov ecx, dword [esp]
push ecx
mov ecx, esp
add ecx, 4
add ecx, 4
xchg dword [esp], ecx
pop esp
cmp dword [ebp - 0x40c], 0
je 0x102358ef
push 0
lea eax, [ebp - 0x410]
push ecx
mov ecx, esp
add ecx, 4
push edi
mov edi, 4
push esi
push edx
push 0x7b2708d0
pop edx
or edx, 0x675c2e1b
push ebx
mov ebx, 0x7bf578e8
and edx, ebx
pop ebx
xor edx, 0x31d61ee7
push eax
mov eax, 0x37bf4c37
shl eax, 1
or eax, 0x37fd8908
push ebp
mov ebp, 0x6d5d6e01
xor eax, ebp
pop ebp
xor eax, 0x61953eb5
not eax
xor eax, 0xbddeed9a
add edx, eax
pop eax
mov esi, edx
mov edx, dword [esp]
add esp, 4
add ecx, esi
pop esi
sub ecx, edi
sub ecx, 0x7bba11ee
pop edi
xchg dword [esp], ecx
pop esp
mov dword [esp], eax
push ebx
sub esp, 4
mov dword [esp], eax
mov eax, 0x7efd67ed
xor eax, 0x76763b20
sub eax, 0x7ccf04e3
shr eax, 3
shr eax, 6
sub eax, 0x45e233
mov ebx, eax
pop eax
push edx
push edi
mov edi, 0x7ffb989d
mov edx, edi
pop edi
neg edx
push edi
mov edi, 0x637a06e7
shl edi, 5
not edi
neg edi
inc edi
add edi, 0xe9704237
add edx, edi
pop edi
neg edx
sub edx, 0x57d72826
push eax
mov eax, 0x71ff32f1
or edx, eax
pop eax
sub edx, 0x84058f83
sub ebx, edx
pop edx
add ebx, ebp
push 0x36b119c1
mov dword [esp], edx
mov edx, 0x5fb68788
sub edx, 0x473f9be1
or edx, 0x155dc4f1
dec edx
not edx
inc edx
add edx, 0x9979d472
add ebx, edx
mov edx, dword [esp]
add esp, 4
mov ecx, dword [ebx]
pop ebx
sub esp, 4
mov dword [esp], esi
mov esi, esp
push 0x3f627b09
mov dword [esp], ebp
mov ebp, 0x4371a125
dec ebp
not ebp
and ebp, 0x5e3d9635
shr ebp, 8
shl ebp, 8
push edi
mov edi, 0x1c0c1604
xor ebp, edi
pop edi
add esi, 0x7fa4f3a7
push edx
mov edx, 0x37a70dbc
xor edx, 0x7ee73844
neg edx
sub edx, 0x56c08dad
sub esi, edx
pop edx
add esi, ebp
add esi, 0x5fff3c5b
sub esi, 0x7fa4f3a7
pop ebp
push 0x5773eb39
mov dword [esp], edi
mov edi, 4
sub esi, edi
pop edi
xchg dword [esp], esi
pop esp
mov dword [esp], eax
mov dword [esp], ecx
lea edx, [ebp - 0x404]
push esi
mov esi, esp
add esi, 4
sub esi, 4
xor esi, dword [esp]
xor dword [esp], esi
xor esi, dword [esp]
pop esp
mov dword [esp], edi
mov dword [esp], 0x3fff0a05
xor dword [esp], 0x5dd7c4c2
push 0xefa51ea
mov dword [esp], esi
mov esi, 0x130d6a20
sub dword [esp + 4], 0x5f3bb23c
add dword [esp + 4], 0x3fef456d
add dword [esp + 4], esi
sub dword [esp + 4], 0x3fef456d
add dword [esp + 4], 0x5f3bb23c
mov esi, dword [esp]
add esp, 4
mov dword [esp], eax
mov dword [esp], edx
mov eax, dword [0x10057d50]
push 0x2d286958
mov dword [esp], ebp
mov dword [esp], 0x7bfb7a14
push ebx
push edi
mov edi, 0x5ffd6233
inc edi
xor edi, 0x48ca9234
mov ebx, edi
pop edi
or ebx, 0x7e9f13d5
sub ebx, 0x4fdf23e9
dec ebx
and ebx, 0x775fdbe7
not ebx
push eax
push esi
push 0x7e3ccb93
pop esi
dec esi
or esi, 0x7f8a785a
add esi, 0x71a5a2ed
mov eax, esi
pop esi
add ebx, 0x77e160b2
add ebx, eax
sub ebx, 0x77e160b2
pop eax
add dword [esp + 4], ebx
pop ebx
mov dword [esp], edx
mov dword [esp], ebp
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_ReadFile]
push edx
mov edx, esp
add edx, 4
sub esp, 4
mov dword [esp], ecx
mov ecx, 4
add edx, 0x3ff15a79
sub edx, ecx
sub edx, 0x3ff15a79
mov ecx, dword [esp]
push edx
mov edx, esp
push ebx
mov ebx, 4
add edx, ebx
pop ebx
add edx, 4
xor edx, dword [esp]
xor dword [esp], edx
xor edx, dword [esp]
pop esp
push edx
push dword [esp + 4]
pop edx
pop dword [esp]
mov esp, dword [esp]
mov dword [esp], eax
pop dword [ebp - 0x418]
cmp dword [ebp - 0x418], 0
jne 0x1023542e
push dword [ebp - 0x414]
push dword [esp]
pop ecx
push edi
mov dword [esp], eax
mov dword [esp], 0x5a7cdaac
mov dword [esp], edi
mov dword [esp], esi
push 0x102b25d6
mov dword [esp], esp
add dword [esp], 4
mov esi, dword [esp]
add esp, 4
add esi, 4
add esi, 4
xchg dword [esp], esi
mov esp, dword [esp]
sub esp, 4
mov dword [esp], ebx
mov dword [esp], 0x6ff4265a
and dword [esp], 0x7fb27c48
shr dword [esp], 8
push edx
mov edx, 0x7bf5bea8
sub dword [esp + 4], edx
pop edx
add dword [esp], 0x7dff4532
xor dword [esp], edx
xor edx, dword [esp]
xor dword [esp], edx
xor edx, edi
xor edi, edx
xor edx, edi
xchg edi, eax
not eax
xchg edi, eax
xchg edx, edi
xor dword [esp], edx
xor edx, dword [esp]
xor dword [esp], edx
inc dword [esp]
xor dword [esp], 0xbb1fd152
mov dword [esp], ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
xor eax, eax
jmp loc.100098de
push dword [ebp - 0x408]
xor dword [esp], 0x6af9a152
push dword [esp]
pop edx
push edx
push esp
pop edx
add edx, 4
push edi
mov edi, 0x7ff3dcbe
add edi, 0x7d7fa96c
neg edi
sub edi, 0x7efae5a
sub edi, 0x767383b1
shl edi, 1
push esi
mov esi, 0x8528f92
sub edi, esi
pop esi
sub edx, 0x7f7fbe49
add edx, edi
push ebx
mov ebx, 0x7f7fbe49
add edx, ebx
pop ebx
pop edi
xchg dword [esp], edx
mov esp, dword [esp]
push edi
mov edi, 0x77ffe647
add edi, 0x79fbc1b1
xor edi, 0x59fea99b
shr edi, 6
xor edi, 0x7bff8a36
add edi, 0x67f7bebb
push ecx
mov ecx, 0x765dbb78
sub edi, ecx
pop ecx
xor edx, edi
pop edi
push eax
mov eax, esp
add eax, 4
sub eax, 4
xchg dword [esp], eax
pop esp
mov dword [esp], edi
push esp
pop edi
push ebx
mov ebx, 4
add edi, ebx
mov ebx, dword [esp]
add esp, 4
push ebp
mov ebp, 4
sub edi, 0x5def13f3
sub edi, ebp
add edi, 0x5def13f3
pop ebp
sub esp, 4
mov dword [esp], edi
push dword [esp + 4]
pop edi
pop dword [esp]
mov esp, dword [esp]
mov dword [esp], edx
lea eax, [ebp - 0x404]
push edx
mov edx, esp
add edx, 4
sub edx, 4
xchg dword [esp], edx
pop esp
mov dword [esp], edx
push esi
mov dword [esp], 0x174ae2fa
push esp
pop dword [esp]
add dword [esp], 4
pop edx
add edx, 4
push esi
mov dword [esp], 0x1c1d0c2
mov dword [esp], ecx
mov ecx, 4
sub edx, ecx
mov ecx, dword [esp]
add esp, 4
xchg dword [esp], edx
pop esp
mov dword [esp], eax
call fcn.100085c0
push ebp
mov dword [esp], 0x677d4107
neg dword [esp]
neg dword [esp]
add dword [esp], 0x7b4b2247
neg dword [esp]
inc dword [esp]
xor dword [esp], 0x50f575d6
not dword [esp]
add dword [esp], 0x6f9f8378
shr dword [esp], 3
or dword [esp], 0x4fe687fa
push ecx
mov ecx, 0xf3e9b8a3
add dword [esp + 4], 0x773f6d33
sub dword [esp + 4], ecx
sub dword [esp + 4], 0x773f6d33
pop ecx
mov dword [esp], edi
mov dword [esp], ebp
push esp
pop ebp
add ebp, 4
push ecx
mov ecx, 8
sub ebp, 0x7fff3c86
sub ebp, 0x3edcd42c
add ebp, ecx
add ebp, 0x3edcd42c
add ebp, 0x7fff3c86
pop ecx
xchg dword [esp], ebp
pop esp
cmp dword [0x100580b4], 1
jne 0x102356cf
mov dword [0x100580b4], 0
push dword [ebp - 0x414]
push 0x593be2d8
mov dword [esp], ecx
mov ecx, 0x74df11ca
add dword [esp + 4], ecx
mov ecx, dword [esp]
push 0x60079da0
mov dword [esp], eax
mov eax, esp
push edx
mov edx, 4
add eax, 0x6eef6d30
add eax, edx
sub eax, 0x6eef6d30
pop edx
add eax, 4
xchg dword [esp], eax
mov esp, dword [esp]
pop ecx
push 0x79f880c9
mov dword [esp], ebx
mov ebx, 0x74df11ca
sub ecx, 0x77ff62e7
sub ecx, ebx
add ecx, 0x77ff62e7
pop ebx
push edx
mov edx, esp
push ecx
push eax
push 0x23bf9400
pop eax
add eax, 0x48b302b3
push esi
mov esi, 0x5fff2aaa
sub esi, 0x7b7d7ade
dec esi
shr esi, 3
sub esi, 0x3dddee2c
sub esi, 0x6fff8817
sub esi, 0x6359eea1
xor eax, esi
pop esi
push eax
pop ecx
pop eax
and ecx, 0x7fdf41e2
not ecx
and ecx, 0x5efff83d
and ecx, 0x53fd019a
push eax
mov eax, 0xef0affec
add ecx, eax
pop eax
add edx, ecx
pop ecx
push ebx
mov dword [esp], esi
mov esi, 4
sub edx, esi
pop esi
xor edx, dword [esp]
xor dword [esp], edx
xor edx, dword [esp]
pop esp
mov dword [esp], edx
mov dword [esp], ecx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
xor eax, eax
jmp loc.100098de
push 0
lea edx, [ebp - 0x40c]
push eax
mov eax, esp
add eax, 4
sub eax, 4
xchg dword [esp], eax
pop esp
mov dword [esp], eax
mov dword [esp], 0x15e8d6cd
mov dword [esp], edi
mov dword [esp], edx
mov dword [esp], 0x7fb7c84b
add dword [esp], 0xab35d824
mov dword [esp], edi
mov dword [esp], edx
mov dword [esp], eax
mov dword [esp], edx
lea eax, [ebp - 0x408]
push 0x737c169d
mov dword [esp], eax
mov eax, esp
sub esp, 4
mov dword [esp], ecx
mov ecx, 4
add eax, ecx
mov ecx, dword [esp]
push ebx
mov ebx, esp
add ebx, 4
add ebx, 4
xor ebx, dword [esp]
xor dword [esp], ebx
xor ebx, dword [esp]
pop esp
push ecx
push esi
mov esi, 0x39ff6cf1
mov ecx, 0x39ff6cf5
xor ecx, esi
pop esi
sub eax, ecx
mov ecx, dword [esp]
add esp, 4
xchg dword [esp], eax
pop esp
mov dword [esp], ecx
mov dword [esp], eax
push 0
mov ecx, dword [0x10057d50]
push ebp
sub esp, 4
mov dword [esp], esp
add dword [esp], 4
pop ebp
add ebp, 4
push eax
push ecx
mov ecx, 0x7fd61ce4
push edx
mov edx, 0x7eee15e3
add edx, 0x13bcd3d
mov eax, edx
pop edx
add eax, 0x25af6f16
add eax, ecx
push edi
mov edi, 0x70ff228e
add edi, 0x2ef4a551
xor edi, 0xba5ca8c9
sub eax, edi
pop edi
pop ecx
add ebp, 0x7da55485
sub ebp, eax
push esi
mov esi, 0x36df935b
dec esi
sub esi, 0xb93a3ed5
sub ebp, esi
pop esi
pop eax
xchg dword [esp], ebp
pop esp
mov dword [esp], ecx
call dword [0x10058188]
push 0x24ff7e3c
mov dword [esp], ebx
mov dword [esp], eax
push ecx
push ecx
mov dword [esp], esi
push edx
push 0x7ff4877c
pop edx
add edx, 0xdeb8f814
push edx
pop esi
pop edx
xor esi, 0x72d71aa3
push esi
mov dword [esp], eax
mov eax, 0x4ffff300
xor esi, eax
pop eax
not esi
sub esi, 0x1e9abff9
mov ecx, esi
pop esi
xor dword [esp + 4], ecx
mov ecx, dword [esp]
add esp, 4
pop dword [ebp - 0x418]
push edx
mov edx, 0xfffffbe8
add edx, ebp
xor dword [edx], 0x7ddfa9d3
pop edx
cmp dword [ebp - 0x418], 0
jne 0x102358ea
push dword [ebp - 0x414]
push dword [esp]
pop edx
sub esp, 4
mov dword [esp], ecx
mov ecx, esp
push 0x662391ca
mov dword [esp], eax
mov eax, 4
sub ecx, 0x3fdcef09
sub ecx, 0x749f4fd3
add ecx, eax
add ecx, 0x749f4fd3
add ecx, 0x3fdcef09
mov eax, dword [esp]
add esp, 4
add ecx, 4
xor ecx, dword [esp]
xor dword [esp], ecx
xor ecx, dword [esp]
mov esp, dword [esp]
push eax
mov eax, esp
add eax, 4
sub eax, 4
xchg dword [esp], eax
pop esp
mov dword [esp], ebp
mov dword [esp], ebx
mov dword [esp], 0x3fffb018
add dword [esp], 0xffffffff
not dword [esp]
push ecx
mov dword [esp], eax
mov eax, 0xab0a24f8
xor dword [esp + 4], eax
push dword [esp]
pop eax
add esp, 4
mov dword [esp], edx
call dword [sym.imp.KERNEL32.dll_CloseHandle]
xor eax, eax
jmp loc.100098de
jmp 0x102350b9
push ebx
mov ebx, 0x7fef5581
xor ebx, 0x7fde0961
inc ebx
sub ebx, 0xffffffff
dec ebx
push ecx
mov ecx, 0x7bfb4d89
dec ecx
add ecx, 1
and ecx, 0x7d25056f
sub ecx, 0x78e25b3a
xor ecx, 0xfc93a
sub ebx, ecx
pop ecx
push ebp
mov dword [esp], eax
mov eax, 0x7ff24600
shr eax, 5
sub eax, 1
sub eax, 0x88d02219
add ebx, eax
pop eax
add ebx, ebp
sub esp, 4
mov dword [esp], ebp
mov ebp, 0x776e55bf
not ebp
not ebp
shr ebp, 1
sub ebp, 0xc087bac9
sub ebx, ebp
pop ebp
mov eax, dword [ebx]
mov ebx, dword [esp]
add esp, 4
push eax
push ecx
mov ecx, 0x7fd6fae5
mov dword [esp + 4], ecx
mov ecx, dword [esp]
push 0x5fee890f
mov dword [esp], eax
mov eax, esp
push edx
mov edx, 4
add eax, edx
mov edx, dword [esp]
add esp, 4
add eax, 4
xchg dword [esp], eax
pop esp
push edi
push 0x3fff8817
mov edi, dword [esp]
add esp, 4
or dword [esp + 4], edi
pop edi
sub dword [esp], 0x190a4035
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
jmp loc.100098d9