Function at 0x100b6140
Capabilities:
Create process on windows

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x48
mov al, byte [ebp + 0xc]
mov byte [ebp - 0x29], al
mov eax, dword [ebp + 8]
mov dword [ebp - 0x28], eax
mov eax, dword [0x10215a28]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov eax, dword [0x10213a74]
xor edx, edx
div dword [0x10213a78]
and eax, 0x11685242
add eax, 0x19e1a66f
and eax, 0xb075fc46
add eax, 0xd232d3ce
and eax, 0x7bcce5cd
mov ecx, eax
and ecx, 0xf0437133
shl ecx, 1
add eax, 0xf0437133
sub eax, ecx
mov esi, 0xffffffff
xor esi, 0xea421155
mov edx, eax
and edx, esi
mov ecx, eax
or ecx, esi
xor ecx, 0xffffffff
imul ecx, edx
mov edx, eax
and edx, 0xea421155
or eax, 0xea421155
imul eax, edx
add eax, ecx
mov ecx, eax
and ecx, 0x8725f5eb
xor ecx, 0xffffffff
add eax, 0x8725f5eb
add eax, 1
add eax, ecx
mov ecx, 0xe549e8bd
xor edx, edx
div ecx
sub eax, 0x1a002a09
sub eax, 0x9c4d385
add eax, 0x1a002a09
mov ecx, 0xffffffff
xor ecx, 0x766ee10
add eax, ecx
add eax, 1
xor ecx, ecx
sub ecx, 0xffa757cb
sub eax, ecx
sub eax, 0x8287642
mov ecx, eax
and ecx, 0xcb8cbfc4
shl ecx, 1
xor eax, 0xcb8cbfc4
add eax, ecx
mov ecx, 0x6a381c94
xor edx, edx
div ecx
mov ecx, eax
and ecx, 0x3a2c8bb5
xor ecx, 0x6b4a9ec4
xor ecx, 0x7180ccb5
mov eax, ecx
xor eax, 0xffffffff
and eax, 0x4929496b
mov edx, 0xffffffff
xor edx, 0x4929496b
and ecx, edx
or eax, ecx
or eax, 0x9b60d250
mov ecx, eax
xor ecx, 0xffffffff
and ecx, 0x746047c4
mov edx, 0xffffffff
xor edx, 0x746047c4
and eax, edx
sub eax, ecx
sub eax, 0x253532a
sub eax, 0x271002f
add eax, 0x253532a
sub eax, 0x24eafbb2
add eax, 0xb032ecf0
mov esi, 0xffffffff
xor esi, 0x19d64f0f
mov edx, eax
and edx, esi
mov ecx, eax
or ecx, esi
xor ecx, 0xffffffff
imul ecx, edx
mov edx, eax
and edx, 0x19d64f0f
or eax, 0x19d64f0f
imul eax, edx
add eax, ecx
mov ecx, eax
xor ecx, 0xffffffff
and ecx, 0xabb5ad3e
mov edx, 0xffffffff
xor edx, 0xabb5ad3e
and eax, edx
sub eax, ecx
mov ecx, eax
add ecx, 1
xor eax, 0xffffffff
or eax, 0x80f60f98
add eax, ecx
mov edx, eax
xor edx, 0xffffffff
and edx, 0x9587c2ed
mov esi, 0xffffffff
xor esi, 0x9587c2ed
mov ecx, eax
and ecx, esi
imul ecx, edx
mov edx, eax
and edx, 0x9587c2ed
or eax, 0x9587c2ed
imul eax, edx
add eax, ecx
mov ecx, eax
xor ecx, 0xffffffff
and ecx, 0x505f05b2
mov edx, 0xffffffff
xor edx, 0x505f05b2
and eax, edx
or ecx, eax
mov edx, 0xffffffff
xor edx, 0xb71502bc
mov eax, ecx
and eax, edx
mov edx, ecx
xor edx, 0xb71502bc
add ecx, edx
sub ecx, eax
mov eax, ecx
xor eax, 0xffffffff
and eax, 0xe0e315ef
mov edx, 0xffffffff
xor edx, 0xe0e315ef
and ecx, edx
sub ecx, eax
xor ecx, 0x8f33f313
or ecx, 0xbed2b1e6
xor ecx, 0xdadbcf2a
mov eax, ecx
xor eax, 0xffffffff
mov edx, 0xffffffff
xor edx, 0xe778f8bb
or eax, edx
xor ecx, 0xffffffff
mov edx, 0xffffffff
xor edx, 0xe778f8bb
or ecx, edx
xor eax, 0xffffffff
xor ecx, 0xffffffff
or eax, ecx
mov edx, 0xffffffff
xor edx, 0xbf8c1b53
mov ecx, eax
xor ecx, edx
and ecx, eax
sub ecx, 0xc08bee7b
add ecx, 0x813e83ad
mov eax, ecx
xor eax, 0xffffffff
mov dword [ebp - 0x24], eax
mov esi, 0xffffffff
xor esi, 0x93b38683
mov edx, 0xffffffff
xor edx, 0x72310dd1
and eax, 0x72310dd1
and ecx, edx
mov edi, esi
and edi, 0x72310dd1
mov ebx, edx
and ebx, 0x93b38683
or eax, ecx
mov ecx, dword [ebp - 0x24]
or edi, ebx
xor eax, edi
or ecx, esi
xor ecx, 0xffffffff
or edx, 0x72310dd1
and ecx, edx
or eax, ecx
and eax, eax
xor eax, 0xffffffff
mov ecx, 0xffffffff
xor ecx, 0xffa825a9
mov edx, 0xffffffff
xor edx, 0xffa825a9
or ecx, edx
xor eax, 0xffffffff
xor ecx, 0xffffffff
or eax, ecx
xor ecx, ecx
sub ecx, eax
xor eax, eax
sub eax, 0xf691dd86
add ecx, eax
xor eax, eax
sub eax, ecx
imul eax, eax, 0x905c9af0
mov ecx, eax
add ecx, 1
xor eax, 0xffffffff
or eax, 0xc039c17a
add eax, ecx
and eax, 0xca03122f
sub eax, 0x1cd1c074
mov ecx, eax
add ecx, 1
xor eax, 0xffffffff
or eax, 0x94d658b9
add eax, ecx
mov esi, 0xffffffff
xor esi, 0x958fb092
mov edx, eax
and edx, esi
mov ecx, eax
or ecx, esi
xor ecx, 0xffffffff
imul ecx, edx
mov edx, eax
and edx, 0x958fb092
or eax, 0x958fb092
imul eax, edx
add eax, ecx
mov ecx, eax
and ecx, 0x4d8d85f5
xor ecx, 0xffffffff
add eax, 0x4d8d85f5
add eax, 1
add eax, ecx
xor eax, 0x33ea4e2c
mov edx, 0xffffffff
xor edx, 0x8526442d
mov ecx, eax
and ecx, edx
mov edx, eax
xor edx, 0x8526442d
add eax, edx
sub eax, ecx
mov ecx, 0x5d9e080a
xor edx, edx
div ecx
mov ecx, eax
mov edx, ecx
xor edx, 0xffffffff
and edx, 0x4ce011bd
mov esi, 0xffffffff
xor esi, 0x4ce011bd
mov eax, ecx
and eax, esi
imul eax, edx
mov edx, ecx
and edx, 0x4ce011bd
or ecx, 0x4ce011bd
imul ecx, edx
add ecx, eax
mov eax, ecx
or eax, 0x5b24740d
xor eax, 0xffffffff
xor ecx, 0xffffffff
mov edx, 0xffffffff
xor edx, 0x5b24740d
and ecx, edx
xor eax, 0xffffffff
xor ecx, 0xffffffff
and eax, ecx
imul eax, eax, 0x41bb5186
sub eax, 0xc9de2195
xor eax, 0xb4c741c
add eax, 0xc5877930
add eax, 0xe6fc0210
sub eax, 0xc5877930
add eax, 0xd3e7c2a
imul eax, eax, 0xd484bb5a
mov dword [ebp - 0x14], 0xba6d7747
lea ecx, [ebp - 0x14]
mov dword [ebp - 0x18], ecx
mov esi, 0xffffffff
xor esi, 0x7c49f816
mov edx, eax
and edx, esi
mov ecx, eax
or ecx, esi
xor ecx, 0xffffffff
imul ecx, edx
mov edx, eax
and edx, 0x7c49f816
or eax, 0x7c49f816
imul eax, edx
add eax, ecx
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x30], eax
sub eax, 0x8414e44d
je 0x100b677b
jmp 0x100b65a7
mov eax, dword [ebp - 0x30]
sub eax, 0x8c77dd13
je 0x100b7480
jmp 0x100b65ba
mov eax, dword [ebp - 0x30]
sub eax, 0xa3fe532d
je 0x100b6b76
jmp 0x100b65cd
mov eax, dword [ebp - 0x30]
sub eax, 0xb4d27faf
je 0x100b6bc7
jmp 0x100b65e0
mov eax, dword [ebp - 0x30]
sub eax, 0xba6d7747
je 0x100b6728
jmp 0x100b65f3
mov eax, dword [ebp - 0x30]
sub eax, 0xd2b95669
je 0x100b6c8b
jmp 0x100b6606
mov eax, dword [ebp - 0x30]
sub eax, 0xea500495
je 0x100b7444
jmp 0x100b6619
mov eax, dword [ebp - 0x30]
sub eax, 0xf288b3cb
je 0x100b7cbe
jmp 0x100b662c
mov eax, dword [ebp - 0x30]
sub eax, 0x14f77b98
je 0x100b7cd3
jmp 0x100b663f
mov eax, dword [ebp - 0x30]
sub eax, 0x1a88fc1b
je 0x100b78d6
jmp 0x100b6652
mov eax, dword [ebp - 0x30]
sub eax, 0x20c2cb51
je 0x100b676d
jmp 0x100b6665
mov eax, dword [ebp - 0x30]
sub eax, 0x291e198a
je 0x100b6bb9
jmp 0x100b6678
mov eax, dword [ebp - 0x30]
sub eax, 0x2b76005f
je 0x100b6c7d
jmp 0x100b668b
mov eax, dword [ebp - 0x30]
sub eax, 0x38ad669a
je 0x100b7d08
jmp 0x100b669e
mov eax, dword [ebp - 0x30]
sub eax, 0x3f25af8a
je 0x100b6cb2
jmp 0x100b66b1
mov eax, dword [ebp - 0x30]
sub eax, 0x4050df6d
je 0x100b70c5
jmp 0x100b66c4
mov eax, dword [ebp - 0x30]
sub eax, 0x4b87e368
je 0x100b7ce1
jmp 0x100b66d7
mov eax, dword [ebp - 0x30]
sub eax, 0x556d5fac
je 0x100b745a
jmp 0x100b66ea
mov eax, dword [ebp - 0x30]
sub eax, 0x64076590
je 0x100b6748
jmp 0x100b66fd
mov eax, dword [ebp - 0x30]
sub eax, 0x6463d578
je 0x100b7cfa
jmp 0x100b6710
mov eax, dword [ebp - 0x30]
sub eax, 0x6a20d341
je 0x100b7436
jmp 0x100b6723
jmp 0x100b7d22
mov eax, dword [ebp - 0x1c]
mov esi, dword [ebp - 0x20]
mov ecx, 0x64076590
mov edx, 0x14f77b98
cmp esi, 0x2195b11a
cmovb ecx, edx
mov dword [eax], ecx
jmp 0x100b7d22
mov eax, dword [ebp - 0x1c]
xor esi, esi
push eax
mov ecx, esp
mov dword [ebp - 0x34], ecx
mov ecx, 0x20c2cb51
mov edx, 0x64076590
cmp esi, 0x33e434f3
cmove ecx, edx
mov dword [eax], ecx
jmp 0x100b7d22
mov eax, dword [ebp - 0x1c]
mov dword [eax], 0x8414e44d
jmp 0x100b7d22
mov eax, dword [0x10213a84]
or eax, dword [0x10213a88]
sub eax, 0x5df917bd
sub eax, 0xb226a072
add eax, 0x5df917bd
xor eax, 0xffffffff
mov edx, 0xffffffff
xor edx, 0xf6606c25
mov ecx, 0xffffffff
xor ecx, 0x6bc21ba7
or eax, edx
or ecx, 0x6bc21ba7
xor eax, 0xffffffff
and eax, ecx
mov edx, eax
xor edx, 0xffffffff
and edx, 0x67ebe996
mov esi, 0xffffffff
xor esi, 0x67ebe996
mov ecx, eax
and ecx, esi
imul ecx, edx
mov edx, eax
and edx, 0x67ebe996
or eax, 0x67ebe996
imul eax, edx
add eax, ecx
mov ecx, 0xda76c2b9
xor edx, edx
div ecx
imul eax, eax, 0xfe8d5f0a
xor eax, 0x5ee4977d
add eax, 0xc95c77b5
sub eax, 0x2a0ebd24
sub eax, 0xc358c644
mov esi, 0xffffffff
xor esi, 0x14fca7b
mov edx, eax
and edx, esi
mov ecx, eax
or ecx, esi
xor ecx, 0xffffffff
imul ecx, edx
mov edx, eax
and edx, 0x14fca7b
or eax, 0x14fca7b
imul eax, edx
add eax, ecx
mov ecx, 0xdcebd9e6
xor edx, edx
div ecx
mov edx, eax
xor edx, 0xffffffff
and edx, 0x23568fd6
mov esi, 0xffffffff
xor esi, 0x23568fd6
mov ecx, eax
and ecx, esi
imul ecx, edx
mov edx, eax
and edx, 0x23568fd6
or eax, 0x23568fd6
imul eax, edx
add eax, ecx
mov edx, 0xffffffff
xor edx, 0x4cbedfd7
mov ecx, eax
xor ecx, edx
and ecx, eax
add ecx, 0x8dd2fda4
mov eax, ecx
xor eax, 0xffffffff
xor ecx, 0xffffffff
or eax, ecx
mov ecx, 0xffffffff
xor ecx, 0xa1ab24b9
mov edx, 0xffffffff
xor edx, 0xa1ab24b9
or ecx, edx
and eax, ecx
xor eax, 0xffffffff
sub eax, 0x46f58197
or eax, 0x9959b743
mov ecx, 0x6d11e613
xor edx, edx
div ecx
mov ecx, eax
xor eax, eax
sub eax, ecx
xor ecx, ecx
sub ecx, 0x52921fee
add eax, ecx
xor esi, esi
sub esi, eax
mov eax, esi
xor eax, 0xffffffff
and eax, 0x5df38977
mov edx, 0xffffffff
xor edx, 0x5df38977
and esi, edx
mov ecx, 0xffffffff
xor ecx, 0x1e2c9792
and ecx, 0x5df38977
and edx, 0x1e2c9792
or eax, esi
or ecx, edx
xor eax, ecx
add eax, 0x6d8f2239
mov ecx, 0x5a3b39a9
xor edx, edx
div ecx
mov esi, eax
and esi, 0xc80f97f0
or eax, 0xc80f97f0
add esi, eax
mov eax, esi
xor eax, 0xffffffff
and eax, 0x956892da
mov edx, 0xffffffff
xor edx, 0x956892da
and esi, edx
mov ecx, 0xffffffff
xor ecx, 0xd629ba51
and ecx, 0x956892da
and edx, 0xd629ba51
or eax, esi
or ecx, edx
xor eax, ecx
and eax, 0xc3d12093
add eax, 0xac4602f1
sub eax, 0xbe80f692
imul esi, eax, 0x93873bd8
mov eax, esi
xor eax, 0xffffffff
and eax, 0x69a1dc9c
mov edx, 0xffffffff
xor edx, 0x69a1dc9c
and esi, edx
mov ecx, 0xffffffff
xor ecx, 0xf96e8fd7
and ecx, 0x69a1dc9c
and edx, 0xf96e8fd7
or eax, esi
or ecx, edx
xor eax, ecx
mov ecx, 0xef40122e
xor edx, edx
div ecx
mov ecx, eax
xor eax, eax
sub eax, 0xe10cb948
sub ecx, eax
mov eax, ecx
xor eax, 0xffffffff
xor ecx, 0xffffffff
or eax, ecx
mov ecx, 0x43901ab2
and ecx, 0x43901ab2
xor ecx, 0xffffffff
xor eax, 0xffffffff
xor ecx, 0xffffffff
or eax, ecx
mov ecx, 0xfd9967f2
xor edx, edx
div ecx
mov ecx, eax
or ecx, 0xa64c3995
add ecx, 0x4fb05d36
sub ecx, 0xbd0dde75
mov eax, ecx
and eax, 0xb711bd91
xor eax, 0xffffffff
and ecx, 0xb711bd91
xor ecx, 0xffffffff
and eax, ecx
xor eax, 0xffffffff
mov ecx, 0x36125a6b
xor edx, edx
div ecx
mov ecx, 0x44811adf
xor edx, edx
div ecx
mov edx, eax
xor edx, 0xffffffff
and edx, 0x1fc48686
mov esi, 0xffffffff
xor esi, 0x1fc48686
mov ecx, eax
and ecx, esi
imul ecx, edx
mov edx, eax
and edx, 0x1fc48686
or eax, 0x1fc48686
imul eax, edx
add eax, ecx
mov ecx, eax
and ecx, 0x99d51ff1
shl ecx, 1
add eax, 0x99d51ff1
sub eax, ecx
and eax, 0xb651800
mov ecx, 0xcad26f90
xor edx, edx
div ecx
xor ecx, ecx
sub ecx, 0x5f7ed11e
add eax, ecx
mov edx, eax
xor edx, 0xffffffff
and edx, 0x559b5464
mov esi, 0xffffffff
xor esi, 0x559b5464
mov ecx, eax
and ecx, esi
imul ecx, edx
mov edx, eax
and edx, 0x559b5464
or eax, 0x559b5464
imul eax, edx
add eax, ecx
xor eax, 0x97ac6b1e
and eax, 0x9bc09da6
xor eax, 0x42602e4d
mov ecx, 0x2fef8b9d
xor edx, edx
div ecx
mov ecx, eax
mov eax, dword [ebp - 0x1c]
mov edx, ecx
add edx, 1
xor ecx, 0xffffffff
or ecx, 0x73e69098
add ecx, edx
mov edx, ecx
xor edx, 0xffffffff
and edx, 0x4b1dca15
mov esi, 0xffffffff
xor esi, 0x4b1dca15
and ecx, esi
sub ecx, edx
mov esi, 0xffffffff
xor esi, 0xdbcaeff9
mov edx, ecx
xor edx, esi
and edx, ecx
and edx, 0x59f4c72a
mov ecx, edx
and ecx, 0x664436f9
xor edx, 0x664436f9
or ecx, edx
sub ecx, 0xbacb3f09
add ecx, 0x18b0738
imul esi, ecx, 0x50e97cf5
xor esi, 0x2b29dfdf
xor esi, 0xffffffff
mov edx, 0xffffffff
xor edx, 0x9f7c74
mov ecx, 0xffffffff
xor ecx, 0x8f4181c6
or esi, edx
or ecx, 0x8f4181c6
xor esi, 0xffffffff
and esi, ecx
xor ecx, ecx
sub ecx, 0x22643668
add esi, ecx
mov ecx, 0xa3fe532d
mov edx, 0x4b87e368
cmp esi, 0x3e7f8acd
cmovb ecx, edx
mov dword [eax], ecx
jmp 0x100b7d22
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x34]
mov dl, byte [ebp - 0x29]
mov esi, 0xf2a7495b
push eax
mov edi, esp
mov dword [ebp - 0x40], edi
sub esp, 0x44
mov edi, esp
mov dword [ebp - 0x3c], edi
sub esp, 0x10
mov edi, esp
mov dword [ebp - 0x38], edi
and dl, 1
mov byte [ecx], dl
mov ecx, 0x4b87e368
mov edx, 0x291e198a
cmp esi, 0xfea3d2b5
cmovbe ecx, edx
mov dword [eax], ecx
jmp 0x100b7d22
mov eax, dword [ebp - 0x1c]
mov dword [eax], 0xb4d27faf
jmp 0x100b7d22
mov eax, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x40]
mov edx, dword [ebp - 0x28]
mov dword [ecx], edx
xor ecx, ecx
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x44
call fcn.101bfb50
mov edx, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ebp - 0x38]
add esp, 0xc
mov dword [ecx], 0x44
mov dword [ecx + 0x2c], 1
mov word [ecx + 0x30], 0
mov edx, dword [edx]
xor esi, esi
sub esp, 0x28
mov dword [esp], 0
mov dword [esp + 4], edx
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x1c], 0
mov dword [esp + 0x20], ecx
mov dword [esp + 0x24], eax
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
mov ecx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x1c]
mov bl, byte [ecx]
mov ecx, 0xea500495
mov edx, 0x2b76005f
test bl, 1
cmovne ecx, edx
mov dword [eax], ecx
jmp 0x100b7d22
mov eax, dword [ebp - 0x1c]
mov dword [eax], 0xd2b95669
jmp 0x100b7d22
mov eax, dword [ebp - 0x38]
mov eax, dword [eax]
sub esp, 8
mov dword [esp], eax
mov dword [esp + 4], 0xffffffff
call dword [sym.imp.KERNEL32.dll_WaitForSingleObject]
mov eax, dword [ebp - 0x1c]
mov dword [eax], 0x3f25af8a
jmp 0x100b7d22
mov eax, dword [0x10213a94]
xor edx, edx
div dword [0x10213a98]
add eax, 0xff1656f0
add eax, 0x6d1912b1
sub eax, 0xff1656f0
mov esi, 0xffffffff
xor esi, 0xba058bd7
mov edx, eax
and edx, esi
mov ecx, eax
or ecx, esi
xor ecx, 0xffffffff
imul ecx, edx
mov edx, eax
and edx, 0xba058bd7
or eax, 0xba058bd7
imul eax, edx
add eax, ecx
add eax, 0xd482e9fd
sub eax, 0xbb97a1
sub eax, 0xd482e9fd
sub eax, 0x5561d3f8
add eax, 0x736a63f3
add eax, 0x5561d3f8
mov ecx, 0xffffffff
xor ecx, 0xdcb4caff
add eax, ecx
add eax, 1
mov ecx, 0x1926f808
xor edx, edx
div ecx
mov ecx, 0x8b38a98a
xor edx, edx
div ecx
mov ecx, 0x9545ff08
xor edx, edx
div ecx
sub eax, 0xbf3035e5
add eax, 0x82f0a85a
xor eax, 0x6e85ea80
mov ecx, eax
add ecx, 1
xor eax, 0xffffffff
or eax, 0x4fd2079e
add eax, ecx
mov edx, eax
xor edx, 0xffffffff
and edx, 0xeeb0d201
mov esi, 0xffffffff
xor esi, 0xeeb0d201
mov ecx, eax
and ecx, esi
imul ecx, edx
mov edx, eax
and edx, 0xeeb0d201
or eax, 0xeeb0d201
imul eax, edx
add eax, ecx
mov ecx, eax
and ecx, 0x84aef5ee
xor ecx, 0xffffffff
add eax, 0x84aef5ee
add eax, 1
add eax, ecx
mov ecx, 0x8fd8810f
xor edx, edx
div ecx
mov esi, eax
xor esi, 0xffffffff
xor eax, 0xffffffff
and esi, eax
mov eax, 0xffffffff
xor eax, 0xc4fa0289
mov ecx, 0xffffffff
xor ecx, 0xc4fa0289
and eax, ecx
or esi, eax
xor esi, 0xffffffff
mov eax, esi
xor eax, 0xffffffff
and eax, 0x88c4acf7
mov edx, 0xffffffff
xor edx, 0x88c4acf7
and esi, edx
mov ecx, 0xffffffff
xor ecx, 0x1e22f250
and ecx, 0x88c4acf7
and edx, 0x1e22f250
or eax, esi
or ecx, edx
xor eax, ecx
add eax, 0xdb425f41
mov edx, eax
xor edx, 0xffffffff
and edx, 0x763bce33
mov esi, 0xffffffff
xor esi, 0x763bce33
mov ecx, eax
and ecx, esi
imul ecx, edx
mov edx, eax
and edx, 0x763bce33
or eax, 0x763bce33
imul eax, edx
add eax, ecx
imul esi, eax, 0x646bfac6
mov eax, esi
xor eax, 0x4fff6fe6
xor eax, 0xffffffff
and eax, 0x4fff6fe6
shl eax, 1
sub eax, 0x4fff6fe6
sub esi, eax
mov eax, esi
xor eax, 0xffffffff
and eax, 0xaaad4766
mov edx, 0xffffffff
xor edx, 0xaaad4766
and esi, edx
mov ecx, 0xffffffff
xor ecx, 0x6cb738da
and ecx, 0xaaad4766
and edx, 0x6cb738da
or eax, esi
or ecx, edx
xor eax, ecx
add eax, 0x411ba43d
sub eax, 0xc123af7a
sub eax, 0x411ba43d
or eax, 0xd1db187
sub eax, 0x692d3296
sub eax, 0x93d17a99
add eax, 0x692d3296
and eax, 0x76709cd3
mov ecx, 0xffffffff
xor ecx, 0x67fa48a9
add eax, ecx
add eax, 1
mov ecx, eax
and ecx, 0xc7ecfacf
xor ecx, 0xffffffff
add eax, 0xc7ecfacf
add eax, 1
add eax, ecx
or eax, 0xeeb44d3a
and eax, 0x1769d766
sub eax, 0xbc838144
xor eax, 0xffffffff
mov edx, 0xffffffff
xor edx, 0x6020765
mov ecx, 0xffffffff
xor ecx, 0x2a0cfd50
or eax, edx
or ecx, 0x2a0cfd50
xor eax, 0xffffffff
and eax, ecx
add eax, 0xe2ccfd0b
and eax, 0x4934f60b
add eax, 0x27da92ef
sub eax, 0x2a7a3ccd
or eax, eax
xor eax, 0xffffffff
mov ecx, 0xe46b0795
or ecx, 0xe46b0795
xor ecx, 0xffffffff
or eax, ecx
xor eax, 0xffffffff
sub eax, 0x58a3c329
mov ecx, 0x299138b9
xor edx, edx
div ecx
imul eax, eax, 0xf64e171c
mov ecx, 0xced2b7bf
xor edx, edx
div ecx
or eax, 0x3aef5009
xor eax, 0x9df68c63
sub eax, 0x9f2f2e6d
mov ecx, eax
xor ecx, 0x61c61192
mov edx, 0xffffffff
xor edx, 0x61c61192
and eax, edx
shl eax, 1
sub eax, ecx
mov ecx, 0xc4d8d07f
xor edx, edx
div ecx
mov ecx, eax
add ecx, 1
xor eax, 0xffffffff
or eax, 0x99a6e3e1
add eax, ecx
add eax, 0x945a6c03
mov esi, 0xffffffff
xor esi, 0x7cf9101c
mov edx, eax
and edx, esi
mov ecx, eax
or ecx, esi
xor ecx, 0xffffffff
imul ecx, edx
mov edx, eax
and edx, 0x7cf9101c
or eax, 0x7cf9101c
imul eax, edx
add eax, ecx
or eax, 0x59a9d04f
mov edx, 0xffffffff
xor edx, 0xe4e9022
mov ecx, eax
xor ecx, edx
and ecx, eax
xor eax, eax
sub eax, 0x2d8f9293
sub ecx, eax
mov eax, ecx
xor eax, 0xffffffff
mov dword [ebp - 0x44], eax
mov esi, 0xffffffff
xor esi, 0x17837602
mov edx, 0xffffffff
xor edx, 0xa55c4f08
and eax, 0xa55c4f08
and ecx, edx
mov edi, esi
and edi, 0xa55c4f08
mov ebx, edx
and ebx, 0x17837602
or eax, ecx
mov ecx, dword [ebp - 0x44]
or edi, ebx
xor eax, edi
or ecx, esi
xor ecx, 0xffffffff
or edx, 0xa55c4f08
and ecx, edx
or eax, ecx
mov ecx, 0xffffffff
xor ecx, 0xf7925c1d
add eax, ecx
add eax, 1
mov ecx, eax
xor ecx, 0x29adac88
mov edx, 0xffffffff
xor edx, 0x29adac88
and eax, edx
shl eax, 1
sub eax, ecx
xor eax, 0x27e65a21
mov ecx, 0x71953e0c
xor edx, edx
div ecx
mov esi, eax
mov eax, dword [ebp - 0x1c]
or esi, 0x47a7f5c7
or esi, 0x37886f23
mov edi, 0xffffffff
xor edi, 0x86f48849
mov edx, esi
and edx, edi
mov ecx, esi
or ecx, edi
xor ecx, 0xffffffff
imul ecx, edx
mov edx, esi
and edx, 0x86f48849
or esi, 0x86f48849
imul esi, edx
add esi, ecx
mov ecx, 0x6463d578
mov edx, 0x4050df6d
cmp esi, 0x492cde5c
cmovae ecx, edx
mov dword [eax], ecx
jmp 0x100b7d22
mov eax, dword [0x10213a9c]
mov edx, dword [0x10213aa0]
xor ecx, ecx
sub ecx, edx
add eax, ecx
add eax, 0x89cd90c4
sub eax, 0xfcdd47a8
mov ecx, 0x6c736978
xor edx, edx
div ecx
mov ecx, eax
xor ecx, 0xcadcb13b
mov edx, 0xffffffff
xor edx, 0xcadcb13b
and eax, edx
shl eax, 1
sub eax, ecx
add eax, 0xdb7e17d9
add eax, 0xc3e5eaa0
sub eax, 0xdb7e17d9
mov edx, 0xffffffff
xor edx, 0xd40bbc4e
mov ecx, eax
and ecx, edx
mov edx, eax
xor edx, 0xd40bbc4e
add eax, edx
sub eax, ecx
mov ecx, eax
and ecx, 0xc96aa882
or eax, 0xc96aa882
add ecx, eax
mov eax, ecx
and eax, 0xf0b70dd2
or ecx, 0xf0b70dd2
add eax, ecx
mov ecx, 0x3d5929ad
xor edx, edx
div ecx
mov ecx, eax
mov eax, ecx
xor eax, 0xffffffff
xor ecx, 0xffffffff
and eax, ecx
mov ecx, 0xffffffff
xor ecx, 0xebb3766c
mov edx, 0xffffffff
xor edx, 0xebb3766c
and ecx, edx
or eax, ecx
xor eax, 0xffffffff
mov ecx, eax
and ecx, 0x65b395f6
shl ecx, 1
add eax, 0x65b395f6
sub eax, ecx
mov ecx, 0x1d08a263
xor edx, edx
div ecx
mov ecx, eax
mov eax, ecx
xor eax, 0xffffffff
mov edx, 0xffffffff
xor edx, 0x52d0d4fa
or eax, edx
and ecx, 0x52d0d4fa
xor ecx, 0xffffffff
and eax, ecx
xor eax, 0xffffffff
and eax, 0x418b7ac6
xor ecx, ecx
sub ecx, 0x80328aad
add eax, ecx
or eax, 0xb8008557
mov ecx, 0x716b668d
xor edx, edx
div ecx
mov ecx, eax
xor ecx, 0x50474292
add ecx, 0xced52cc7
add ecx, 0xe75663bf
sub ecx, 0xced52cc7
mov eax, ecx
and eax, 0x999a99a6
shl eax, 1
xor ecx, 0x999a99a6
add ecx, eax
sub ecx, 0x217b87ba
mov eax, ecx
xor eax, 0xffffffff
mov edx, ecx
xor edx, 0xffffffff
or eax, edx
and eax, 0xb5d0f261
xor eax, 0xffffffff
mov edx, 0xffffffff
xor edx, 0xb5d0f261
mov esi, 0xffffffff
xor esi, 0xb5d0f261
or edx, esi
and ecx, edx
xor ecx, 0xffffffff
and eax, ecx
xor eax, 0xffffffff
sub eax, 0xbc2c961e
mov ecx, 0x23e8610f
xor edx, edx
div ecx
imul ecx, eax, 0x7bdc7144
or ecx, 0x4fabb383
mov eax, ecx
xor eax, 0x5e2154de
xor eax, 0xffffffff
and eax, 0x5e2154de
shl eax, 1
sub eax, 0x5e2154de
sub ecx, eax
xor eax, eax
sub eax, ecx
xor ecx, ecx
sub ecx, 0xcf94cd2d
add eax, ecx
xor ecx, ecx
sub ecx, eax
mov eax, ecx
and eax, 0x1df97e19
xor eax, 0xffffffff
add ecx, 0x1df97e19
add ecx, 1
add ecx, eax
add ecx, 0x289f6643
mov eax, ecx
and eax, 0x4027c036
shl eax, 1
add ecx, 0x4027c036
sub ecx, eax
xor ecx, 0x6bcad8ca
add ecx, 0xcb2a0a48
or ecx, 0x77468bf5
or ecx, 0xfc9f2386
mov eax, ecx
xor eax, 0xffffffff
mov edx, 0xffffffff
xor edx, 0xb590fc93
and eax, edx
or ecx, 0xb590fc93
xor ecx, 0xffffffff
xor eax, 0xffffffff
xor ecx, 0xffffffff
and eax, ecx
xor ecx, ecx
sub ecx, eax
xor eax, eax
sub eax, 0x85387c13
add ecx, eax
xor eax, eax
sub eax, ecx
add eax, 0x4c2cfdc8
mov ecx, 0xec943587
xor edx, edx
div ecx
mov ecx, eax
mov eax, ecx
xor eax, 0x38d269eb
mov edx, 0xffffffff
xor edx, 0x38d269eb
and ecx, edx
shl ecx, 1
sub ecx, eax
mov eax, ecx
and eax, 0x8ed31f82
xor eax, 0xffffffff
xor ecx, 0xffffffff
mov edx, 0xffffffff
xor edx, 0x8ed31f82
or ecx, edx
xor eax, 0xffffffff
xor ecx, 0xffffffff
or eax, ecx
or eax, 0x5704a479
sub eax, 0x635794d1
imul esi, eax, 0x64c405b1
add esi, 0x8b329ff1
xor esi, 0xb353b65
mov eax, esi
xor eax, 0xffffffff
and eax, 0xd10d0831
mov edx, 0xffffffff
xor edx, 0xd10d0831
and esi, edx
mov ecx, 0xffffffff
xor ecx, 0xc0dc6d8
and ecx, 0xd10d0831
and edx, 0xc0dc6d8
or eax, esi
or ecx, edx
xor eax, ecx
mov ecx, eax
and ecx, 0xa757849
shl ecx, 1
xor eax, 0xa757849
add eax, ecx
mov ecx, eax
add ecx, 1
xor eax, 0xffffffff
or eax, 0x28d16dc2
add eax, ecx
and eax, 0x39128049
xor ecx, ecx
sub ecx, eax
xor eax, eax
sub eax, 0x194f3162
add ecx, eax
xor eax, eax
sub eax, ecx
xor eax, 0xc868e2ea
mov ecx, 0x84f89420
xor edx, edx
div ecx
mov esi, eax
mov eax, dword [ebp - 0x1c]
and esi, 0x9a394e6
xor esi, 0xb0c3e7a9
or esi, 0xb7597dd
mov ecx, esi
and ecx, 0x549c9bca
xor ecx, 0xffffffff
add esi, 0x549c9bca
add esi, 1
add esi, ecx
sub esi, 0x815146a8
xor esi, 0x2412ac11
and esi, 0x147b0710
mov ecx, 0x6a20d341
mov edx, 0x4050df6d
cmp esi, 0x92db1b1a
cmova ecx, edx
mov dword [eax], ecx
jmp 0x100b7d22
mov eax, dword [ebp - 0x1c]
mov dword [eax], 0xea500495
jmp 0x100b7d22
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x38]
mov ecx, dword [ecx]
mov dword [ebp - 0x48], ecx
mov dword [eax], 0x556d5fac
jmp 0x100b7d22
mov eax, dword [ebp - 0x48]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x1c]
add ecx, 4
mov dword [ebp - 0x4c], ecx
mov dword [eax], 0x8c77dd13
jmp 0x100b7d22
mov ecx, dword [0x10213aa4]
imul ecx, dword [0x10213aa8]
mov eax, ecx
or eax, 0xa04bc03a
xor eax, 0xffffffff
or ecx, 0xa04bc03a
xor ecx, 0xffffffff
xor eax, 0xffffffff
xor ecx, 0xffffffff
and eax, ecx
mov ecx, eax
xor ecx, 0xffffffff
and ecx, 0xc7584a98
mov edx, 0xffffffff
xor edx, 0xc7584a98
and eax, edx
sub eax, ecx
sub eax, 0xee960757
mov ecx, 0x2ecf24d3
xor edx, edx
div ecx
mov ecx, 0xd27721d9
xor edx, edx
div ecx
mov ecx, eax
mov eax, 0xffffffff
xor eax, 0x7125e3e9
add ecx, eax
add ecx, 1
xor eax, eax
sub eax, 0x6661028c
sub ecx, eax
mov edx, 0xffffffff
xor edx, 0x86480458
mov eax, ecx
xor eax, edx
and eax, ecx
xor eax, 0x4124ad21
and eax, 0xa7715061
imul eax, eax, 0x49569944
xor eax, 0xf7b22d67
add eax, 0x5e8a7e6b
mov ecx, 0x93f777a9
xor edx, edx
div ecx
mov ecx, 0x4331a79f
xor edx, edx
div ecx
sub eax, 0xc675e32
add eax, 0x41b411ad
add eax, 0xc675e32
and eax, eax
xor eax, 0xffffffff
mov ecx, 0x772271b9
and ecx, 0x772271b9
xor ecx, 0xffffffff
xor eax, 0xffffffff
xor ecx, 0xffffffff
or eax, ecx
add eax, 0x9dcf9121
mov ecx, eax
add ecx, 1
xor eax, 0xffffffff
or eax, 0x46894b18
add eax, ecx
imul esi, eax, 0x6e2d6ae7
xor esi, 0xffffffff
mov ecx, 0xffffffff
xor ecx, 0xa6d834e5
mov eax, 0xffffffff
xor eax, 0x53c45e9c
or esi, ecx
or eax, 0x53c45e9c
xor esi, 0xffffffff
and esi, eax
mov eax, 0xffffffff
xor eax, 0x57fb6669
xor ecx, ecx
sub ecx, 1
sub eax, ecx
sub esi, eax
mov ecx, esi
xor ecx, 0xffffffff
and ecx, 0xcc78da1d
mov edx, 0xffffffff
xor edx, 0xcc78da1d
and esi, edx
mov eax, 0xffffffff
xor eax, 0xa8b8a783
and eax, 0xcc78da1d
and edx, 0xa8b8a783
or ecx, esi
or eax, edx
xor ecx, eax
mov edx, 0xffffffff
xor edx, 0x5ed9c05a
mov eax, ecx
and eax, edx
mov edx, ecx
xor edx, 0x5ed9c05a
add ecx, edx
sub ecx, eax
mov eax, ecx
xor eax, 0xffffffff
xor ecx, 0xffffffff
and eax, ecx
mov ecx, 0x7fc1693a
or ecx, 0x7fc1693a
xor ecx, 0xffffffff
xor eax, 0xffffffff
xor ecx, 0xffffffff
and eax, ecx
xor eax, 0xffffffff
mov edx, 0xffffffff
xor edx, 0xdaebb03b
mov ecx, 0xffffffff
xor ecx, 0xd57c312d
or eax, edx
or ecx, 0xd57c312d
xor eax, 0xffffffff
and eax, ecx
imul esi, eax, 0x7f423be2
mov eax, esi
xor eax, 0xffffffff
and eax, 0x1995e0a6
mov edx, 0xffffffff
xor edx, 0x1995e0a6
and esi, edx
mov ecx, 0xffffffff
xor ecx, 0x8c49c3cc
and ecx, 0x1995e0a6
and edx, 0x8c49c3cc
or eax, esi
or ecx, edx
xor eax, ecx
mov ecx, eax
and ecx, 0xf6f82f29
xor ecx, 0xffffffff
add eax, 0xf6f82f29
add eax, 1
add eax, ecx
mov ecx, 0xfb61cd81
xor edx, edx
div ecx
add eax, 0x65179a46
add eax, 0x81b4ee3
sub eax, 0x65179a46
mov ecx, 0xd9d17cf8
xor edx, edx
div ecx
mov ecx, eax
xor ecx, 0xffffffff
mov edx, 0xffffffff
xor edx, 0x98878679
and ecx, edx
or eax, 0x98878679
xor eax, 0xffffffff
xor ecx, 0xffffffff
xor eax, 0xffffffff
and ecx, eax
and ecx, 0x24dbe5df
mov eax, ecx
xor eax, 0xffffffff
mov edx, 0xffffffff
xor edx, 0xaef8d134
and eax, edx
xor ecx, 0xffffffff
mov edx, 0xffffffff
xor edx, 0xaef8d134
and ecx, edx
xor eax, 0xffffffff
xor ecx, 0xffffffff
and eax, ecx
mov ecx, eax
xor ecx, 0xffffffff
mov edx, 0xffffffff
xor edx, 0xfb53203f
and ecx, edx
or eax, 0xfb53203f
xor eax, 0xffffffff
or ecx, eax
xor ecx, 0xffffffff
mov eax, ecx
xor eax, 0xffffffff
and eax, 0x71a0d0fc
mov edx, 0xffffffff
xor edx, 0x71a0d0fc
and ecx, edx
or eax, ecx
mov ecx, 0xffffffff
xor ecx, 0xc00519d6
xor edx, edx
sub edx, 1
sub ecx, edx
sub eax, ecx
mov ecx, eax
xor ecx, 0xffffffff
mov edx, eax
xor edx, 0xffffffff
and ecx, edx
mov edx, 0xffffffff
xor edx, 0x6b37be5e
mov esi, 0xffffffff
xor esi, 0x6b37be5e
and edx, esi
xor ecx, 0xffffffff
xor edx, 0xffffffff
and ecx, edx
or eax, 0x6b37be5e
xor eax, 0xffffffff
or ecx, eax
xor ecx, 0xffffffff
mov eax, ecx
and eax, 0xa67b5d11
or ecx, 0xa67b5d11
add eax, ecx
mov ecx, 0xe610a95
xor edx, edx
div ecx
or eax, 0xa5b995d3
mov esi, 0xffffffff
xor esi, 0x2173c132
mov edx, eax
and edx, esi
mov ecx, eax
or ecx, esi
xor ecx, 0xffffffff
imul ecx, edx
mov edx, eax
and edx, 0x2173c132
or eax, 0x2173c132
imul eax, edx
add eax, ecx
mov ecx, eax
add ecx, 1
xor eax, 0xffffffff
or eax, 0xc4f1336c
add eax, ecx
sub eax, 0xc63a2ba1
add eax, 0xa06f9167
mov ecx, 0x7358f2a8
xor edx, edx
div ecx
mov ecx, eax
mov eax, ecx
xor eax, 0xe4a0c32d
mov edx, 0xffffffff
xor edx, 0xe4a0c32d
and ecx, edx
shl ecx, 1
sub ecx, eax
sub ecx, 0x9f1a5d0f
mov eax, ecx
or eax, eax
xor eax, 0xffffffff
mov edx, 0xffffffff
xor edx, 0x58f7b5bf
mov esi, 0xffffffff
xor esi, 0x58f7b5bf
and edx, esi
xor eax, 0xffffffff
xor edx, 0xffffffff
and eax, edx
or ecx, 0x58f7b5bf
xor ecx, 0xffffffff
xor eax, 0xffffffff
xor ecx, 0xffffffff
and eax, ecx
or eax, 0xf18f2c36
sub eax, 0xf3713fcb
imul eax, eax, 0xe7189d82
add eax, 0x1ed440da
xor eax, 0xb96c62d
sub eax, 0x5faeb7ee
xor eax, 0xffffffff
mov edx, 0xffffffff
xor edx, 0x1d10495d
mov ecx, 0xffffffff
xor ecx, 0x91b25f50
or eax, edx
or ecx, 0x91b25f50
xor eax, 0xffffffff
and eax, ecx
mov ecx, eax
add ecx, 1
xor eax, 0xffffffff
or eax, 0xe9fa792a
add eax, ecx
mov ecx, 0x64ae60be
xor edx, edx
div ecx
mov ecx, eax
mov eax, dword [ebp - 0x1c]
mov edx, 0xffffffff
xor edx, 0x80e81184
mov esi, ecx
xor esi, edx
and esi, ecx
mov ecx, 0x38ad669a
mov edx, 0x1a88fc1b
cmp esi, 0x47c3676d
cmovb ecx, edx
mov dword [eax], ecx
jmp 0x100b7d22
mov ecx, dword [0x10213aac]
mov edx, dword [0x10213ab0]
xor eax, eax
sub eax, edx
add ecx, eax
and ecx, 0x8e234bc6
mov eax, ecx
xor eax, 0xb8f2e91d
mov edx, 0xffffffff
xor edx, 0xb8f2e91d
and ecx, edx
shl ecx, 1
sub ecx, eax
mov eax, ecx
xor eax, 0xffffffff
mov edx, ecx
xor edx, 0xffffffff
and eax, edx
mov edx, 0xffffffff
xor edx, 0x718dbdd5
mov esi, 0xffffffff
xor esi, 0x718dbdd5
and edx, esi
xor eax, 0xffffffff
xor edx, 0xffffffff
and eax, edx
or ecx, 0x718dbdd5
xor ecx, 0xffffffff
xor eax, 0xffffffff
xor ecx, 0xffffffff
and eax, ecx
mov ecx, eax
and ecx, ecx
xor ecx, 0xffffffff
and ecx, 0x495936e2
xor ecx, 0xffffffff
mov edx, 0x495936e2
and edx, 0x495936e2
xor edx, 0xffffffff
and eax, edx
xor eax, 0xffffffff
xor ecx, 0xffffffff
xor eax, 0xffffffff
or ecx, eax
xor eax, eax
sub eax, 0x9bb35f45
add ecx, eax
mov edx, ecx
xor edx, 0xffffffff
and edx, 0x8220530f
mov esi, 0xffffffff
xor esi, 0x8220530f
mov eax, ecx
and eax, esi
imul eax, edx
mov edx, ecx
and edx, 0x8220530f
or ecx, 0x8220530f
imul ecx, edx
add ecx, eax
xor ecx, 0x6d0141ee
and ecx, 0xe12bca17
add ecx, 0x25ee0672
mov edx, 0xffffffff
xor edx, 0xbdb27a24
mov eax, ecx
xor eax, edx
and eax, ecx
imul eax, eax, 0x3f40d688
xor eax, 0x6304d6b
imul eax, eax, 0xe2e623bb
imul eax, eax, 0x1bc67c6a
mov ecx, 0xaf00371
xor edx, edx
div ecx
sub eax, 0x107fdd69
add eax, 0x55e2b2b5
add eax, 0x107fdd69
mov ecx, 0x4bd1cfee
xor edx, edx
div ecx
mov ecx, eax
and ecx, 0xabcbd231
xor ecx, 0xffffffff
add eax, 0xabcbd231
add eax, 1
add eax, ecx
or eax, 0xe8a59bfc
mov ecx, 0xffffffff
xor ecx, 0xc25a5878
xor edx, edx
sub edx, 1
sub ecx, edx
sub eax, ecx
imul eax, eax, 0xddb55aae
mov ecx, 0xe5034c69
xor edx, edx
div ecx
mov ecx, 0xffffffff
xor ecx, 0xd49bbb36
add eax, ecx
add eax, 1
mov ecx, 0x2d8c42bc
xor edx, edx
div ecx
xor eax, 0xbfffc809
mov ecx, 0x1b73e45
xor edx, edx
div ecx
mov ecx, eax
mov eax, ecx
xor eax, 0xb9c5db0f
mov edx, 0xffffffff
xor edx, 0xb9c5db0f
and ecx, edx
shl ecx, 1
sub ecx, eax
xor ecx, 0x5ced7705
mov eax, ecx
xor eax, 0xffffffff
mov dword [ebp - 0x54], eax
mov esi, 0xffffffff
xor esi, 0x1d82f3df
mov edx, 0xffffffff
xor edx, 0x66aaeece
and eax, 0x66aaeece
and ecx, edx
mov edi, esi
and edi, 0x66aaeece
mov ebx, edx
and ebx, 0x1d82f3df
or eax, ecx
mov ecx, dword [ebp - 0x54]
or edi, ebx
xor eax, edi
or ecx, esi
xor ecx, 0xffffffff
or edx, 0x66aaeece
and ecx, edx
or eax, ecx
or eax, 0x2324f95
add eax, 0xb0cdf9ff
xor eax, 0xabe6762e
sub eax, 0xdc61ca3d
sub eax, 0x19f3a858
add eax, 0xdc61ca3d
add eax, 0x1ffeb879
or eax, 0x24447dc9
mov ecx, 0x4fab2d3f
xor edx, edx
div ecx
mov ecx, eax
and ecx, 0x12f64cc2
or eax, 0x12f64cc2
add ecx, eax
mov esi, 0xffffffff
xor esi, 0x499a21e2
mov edx, ecx
and edx, esi
mov eax, ecx
or eax, esi
xor eax, 0xffffffff
imul eax, edx
mov edx, ecx
and edx, 0x499a21e2
or ecx, 0x499a21e2
imul ecx, edx
add ecx, eax
mov eax, ecx
and eax, 0x617f347b
or ecx, 0x617f347b
add eax, ecx
sub eax, 0x51eae815
mov ecx, 0x9c6bb0fa
xor edx, edx
div ecx
mov ecx, eax
sub ecx, 0xcf1053a9
mov eax, ecx
xor eax, 0xffffffff
and eax, 0x8616320c
mov edx, 0xffffffff
xor edx, 0x8616320c
and ecx, edx
or eax, ecx
mov ecx, eax
xor ecx, 0xc3137e6a
xor ecx, 0xffffffff
or eax, 0xc3137e6a
and eax, ecx
mov ecx, eax
xor ecx, 0xffffffff
and ecx, 0x233334fe
mov edx, 0xffffffff
xor edx, 0x233334fe
and eax, edx
or ecx, eax
mov eax, ecx
xor eax, 0xffffffff
xor ecx, 0xffffffff
or eax, ecx
mov ecx, 0xffffffff
xor ecx, 0x15bf4871
mov edx, 0xffffffff
xor edx, 0x15bf4871
or ecx, edx
and eax, ecx
xor eax, 0xffffffff
mov esi, 0xffffffff
xor esi, 0xfda02c74
mov edx, eax
and edx, esi
mov ecx, eax
or ecx, esi
xor ecx, 0xffffffff
imul ecx, edx
mov edx, eax
and edx, 0xfda02c74
or eax, 0xfda02c74
imul eax, edx
add eax, ecx
and eax, 0x2c202531
and eax, 0x79928f7c
mov edx, 0xffffffff
xor edx, 0xcfdad4d8
mov ecx, eax
xor ecx, edx
and ecx, eax
mov edx, 0xffffffff
xor edx, 0x727c4500
mov eax, ecx
xor eax, edx
and eax, ecx
mov ecx, 0x32ae66cf
xor edx, edx
div ecx
mov ecx, eax
mov eax, dword [ebp - 0x4c]
and ecx, 0xe3693dbc
xor edx, edx
sub edx, ecx
xor ecx, ecx
sub ecx, 0x3d4989b5
add edx, ecx
xor ecx, ecx
sub ecx, edx
sub ecx, 0x741d53bb
or ecx, 0x5400f9a1
sub ecx, 0x60cb6eee
mov esi, ecx
and esi, 0x6e7d891e
xor ecx, 0x6e7d891e
or esi, ecx
mov ecx, esi
and ecx, 0xa3ca5fbd
shl ecx, 1
xor esi, 0xa3ca5fbd
add esi, ecx
and esi, 0x1f6fe705
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [ebp - 0x38]
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ecx + 8]
mov dword [ebp - 0x50], ecx
mov ecx, 0xf288b3cb
mov edx, 0x38ad669a
cmp esi, 0x74417a4f
cmova ecx, edx
mov dword [eax], ecx
jmp 0x100b7d22
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.101bc25a
mov eax, dword [ebp - 0x50]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov eax, dword [ebp - 0x1c]
mov dword [eax], 0x64076590
jmp 0x100b7d22
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x34]
mov dl, byte [ebp - 0x29]
and dl, 1
mov byte [ecx], dl
mov dword [eax], 0xa3fe532d
jmp 0x100b7d22
mov eax, dword [ebp - 0x1c]
mov dword [eax], 0x4050df6d
jmp 0x100b7d22
mov eax, dword [ebp - 0x4c]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x1c]
mov dword [eax], 0x1a88fc1b
jmp 0x100b6591