Function at 0x1000cc5f
Capabilities:
Get session information

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x8c
mov eax, dword [0x10098dfc]
mov ecx, dword [0x10098e00]
lea edx, [eax + 1]
imul edx, eax
not edx
or edx, 0xfffffffe
cmp edx, 0xffffffff
sete byte [ebp - 0x45]
cmp ecx, 0xa
setl byte [ebp - 0x46]
mov eax, 0xb1de2e55
cmp eax, 0x895b8fa
jle 0x1000cd42
cmp eax, 0x442b533e
jle 0x1000cdb0
cmp eax, 0x60542358
jle 0x1000cec1
cmp eax, 0x708c2a02
jg 0x1000d077
cmp eax, 0x65e227d1
jg 0x1000d485
cmp eax, 0x60aeea70
jle 0x1000d956
cmp eax, 0x6460b2b4
jg 0x1000e2ec
cmp eax, 0x60aeea71
je 0x1000eb3c
cmp eax, 0x619ea5db
jne 0x1000cc94
mov ecx, dword [0x10098dfc]
lea eax, [ecx + 1]
imul eax, ecx
test al, 1
sete ch
cmp dword [0x10098e00], 0xa
setl cl
setge dh
mov dl, cl
or cl, ch
and ch, dh
and dl, al
or dl, ch
xor dh, al
xor cl, 1
or cl, dh
mov eax, ecx
xor al, dl
test al, 1
mov esi, 0x99e5e833
mov eax, 0x8930efd3
cmovne esi, eax
test cl, 1
mov eax, 0x99e5e833
jmp 0x1000fe6f
cmp eax, 0xbe8b0ae8
jle 0x1000ce59
cmp eax, 0xdc8722fc
jle 0x1000cf1c
cmp eax, 0xfa4af03a
jg 0x1000d10a
cmp eax, 0xe726e8bc
jg 0x1000d4bb
cmp eax, 0xdf964ca6
jle 0x1000d981
cmp eax, 0xe1a95086
jg 0x1000e30c
cmp eax, 0xdf964ca7
je 0x1000eb46
cmp eax, 0xe018a3d5
jne 0x1000cc94
cmp byte [ebp - 0x4a], 0
mov eax, 0x2ad21dd8
mov ecx, 0x9bc026da
cmovne eax, ecx
jmp 0x1000cc94
cmp eax, 0x1fdf770a
jg 0x1000cfa9
cmp eax, 0x12a2512f
jle 0x1000d19c
cmp eax, 0x18201f5b
jg 0x1000d4f9
cmp eax, 0x16e7d39d
jle 0x1000d9ac
cmp eax, 0x17ae588d
jg 0x1000e387
cmp eax, 0x16e7d39e
je 0x1000eb50
cmp eax, 0x170e40d8
jne 0x1000cc94
mov ecx, dword [0x10098dfc]
lea eax, [ecx + 1]
imul eax, ecx
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0xcdde92a
and eax, 0xf32216d5
or eax, edx
xor eax, 0xcdde92b
or eax, ecx
cmp eax, 0xffffffff
sete al
cmp dword [0x10098e00], 0xa
setl cl
xor al, cl
mov edx, eax
xor dl, 1
and cl, dl
xor dl, cl
mov edx, 0x6eac3bab
mov esi, 0xabcd4cdc
cmovne edx, esi
test al, al
mov eax, edx
mov esi, 0x6eac3bab
jmp 0x1000fece
cmp eax, 0x99ee3886
jg 0x1000cff5
cmp eax, 0x8e8b9d34
jle 0x1000d1f7
cmp eax, 0x91b680e7
jg 0x1000d538
cmp eax, 0x90818b54
jle 0x1000da20
cmp eax, 0x9151e7f4
jg 0x1000e3b5
cmp eax, 0x90818b55
je 0x1000ebc2
cmp eax, 0x90862f9a
jne 0x1000cc94
mov eax, dword [ebp - 0x88]
cmp eax, 0xffffffff
mov eax, 0x35742ff7
mov ecx, 0xa0f975f7
cmove eax, ecx
jmp 0x1000cc94
cmp eax, 0x55637b9e
jle 0x1000d238
cmp eax, 0x5bdc3bd6
jg 0x1000d569
cmp eax, 0x57e25d6c
jle 0x1000da83
cmp eax, 0x5a2bd283
jg 0x1000e3e0
cmp eax, 0x57e25d6d
je 0x1000ec48
cmp eax, 0x58da95fa
jne 0x1000cc94
cmp dword [ebp - 0x94], 0
mov eax, 0xffbb6dc5
mov ecx, 0xcfdaf5cc
cmove eax, ecx
jmp 0x1000cc94
cmp eax, 0xcfdaf5cb
jle 0x1000d308
cmp eax, 0xd67c9791
jg 0x1000d59f
cmp eax, 0xd3fef431
jle 0x1000daae
cmp eax, 0xd5e2abb1
jg 0x1000e471
cmp eax, 0xd3fef432
je 0x1000ec52
cmp eax, 0xd473f383
jne 0x1000cc94
mov ecx, dword [0x10098dfc]
lea eax, [ecx + 1]
imul eax, ecx
test al, 1
sete cl
cmp dword [0x10098e00], 0xa
setge dl
setl ch
xor ch, cl
or dl, al
mov cl, dl
xor cl, ch
test dl, 1
mov eax, 0xd67c9792
mov edx, 0xd1738201
cmovne eax, edx
test ch, ch
cmove eax, edx
test cl, 1
mov ecx, 0xd67c9792
cmove eax, ecx
jmp 0x1000cc94
cmp eax, 0x364ed072
jle 0x1000d3a6
cmp eax, 0x3ca1901d
jg 0x1000d5d5
cmp eax, 0x371b1fdc
jle 0x1000dae1
cmp eax, 0x3b126b29
jg 0x1000e4d2
cmp eax, 0x371b1fdd
je 0x1000ec5c
cmp eax, 0x39da1b0a
jne 0x1000cc94
mov eax, 0xe03dbe1
jmp 0x1000cc94
cmp eax, 0xad57c123
jle 0x1000d426
cmp eax, 0xb7c4032d
jg 0x1000d690
cmp eax, 0xb089aef6
jle 0x1000db22
cmp eax, 0xb38f42a5
jg 0x1000e4f2
cmp eax, 0xb089aef7
je 0x1000ecbf
cmp eax, 0xb1de2e55
jne 0x1000cc94
mov al, byte [ebp - 0x45]
mov cl, byte [ebp - 0x46]
mov edx, eax
xor dl, 1
and dl, cl
xor cl, 1
mov ch, al
xor ch, cl
and ch, al
and cl, al
or cl, dl
mov al, ch
xor al, cl
test al, 1
mov edx, 0xeb6ba8cd
mov esi, 0x5009555e
cmovne edx, esi
test cl, 1
mov eax, edx
cmovne eax, esi
test ch, 1
cmove eax, edx
jmp 0x1000cc94
cmp eax, 0x7abb5611
jg 0x1000d6c6
cmp eax, 0x74f83ef2
jle 0x1000db4d
cmp eax, 0x7847e542
jg 0x1000e568
cmp eax, 0x74f83ef3
je 0x1000ed28
cmp eax, 0x76ab8a9c
jne 0x1000cc94
mov ecx, dword [0x10098dfc]
lea eax, [ecx + 1]
imul eax, ecx
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0xfffffffe
and eax, 1
or eax, edx
not eax
or eax, ecx
xor eax, 0xffffffff
setne al
sete cl
cmp dword [0x10098e00], 0xa
setge dl
xor cl, dl
or al, dl
mov edx, ecx
xor dl, al
test al, al
mov eax, 0x7dd1993a
mov esi, 0x12a0c696
cmovne eax, esi
test cl, cl
cmovne eax, esi
test dl, dl
mov ecx, 0x7dd1993a
cmovne eax, ecx
jmp 0x1000cc94
cmp eax, 0xc73e4f
jg 0x1000d717
cmp eax, 0xfd797c3f
jle 0x1000db83
cmp eax, 0xff34e365
jg 0x1000e588
cmp eax, 0xfd797c40
je 0x1000ed8a
cmp eax, 0xfe887dbc
jne 0x1000cc94
mov ecx, dword [0x10098dfc]
lea eax, [ecx + 1]
imul eax, ecx
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0x89fec60a
and eax, 0x760139f5
or eax, edx
xor eax, 0x89fec60b
or eax, ecx
cmp eax, 0xffffffff
setne al
cmp dword [0x10098e00], 0xa
setge cl
mov edx, ecx
or dl, al
xor cl, al
mov eax, edx
xor al, cl
mov esi, 0x3d147623
mov eax, 0x68bb7a1
cmovne esi, eax
test cl, cl
mov eax, esi
mov ecx, 0x3d147623
jmp 0x1000ef75
cmp eax, 0xd46139d
jle 0x1000d74d
cmp eax, 0xed882b0
jle 0x1000dbb6
cmp eax, 0x11893d5a
jg 0x1000e5ab
cmp eax, 0xed882b1
je 0x1000ed97
cmp eax, 0xf5346ae
jne 0x1000cc94
mov eax, dword [ebp - 0x44]
mov dword [eax], 0
mov eax, dword [ebp - 0x10]
push 4
push dword [ebp - 0x10]
call dword [sym.imp.NTDLL.dll_RtlZeroMemory]
mov eax, dword [ebp - 0x28]
mov eax, 0x5342f770
jmp 0x1000cc94
cmp eax, 0x86be0340
jle 0x1000d7db
cmp eax, 0x897f7d3b
jle 0x1000dbe1
cmp eax, 0x8a4007d8
jg 0x1000e5df
cmp eax, 0x897f7d3c
je 0x1000ede3
cmp eax, 0x8a121f70
jne 0x1000cc94
mov eax, 0xcca9ea4d
jmp 0x1000cc94
cmp eax, 0x4bff705c
jle 0x1000d860
cmp eax, 0x51406813
jle 0x1000dc0c
cmp eax, 0x53d0337d
jg 0x1000e5ff
cmp eax, 0x51406814
je 0x1000ee55
cmp eax, 0x5342f770
jne 0x1000cc94
mov eax, dword [ebp - 0x44]
mov dword [eax], 0
mov eax, dword [ebp - 0x10]
push 4
push dword [ebp - 0x10]
call dword [sym.imp.NTDLL.dll_RtlZeroMemory]
mov eax, dword [ebp - 0x28]
mov ecx, dword [0x10098dfc]
lea edx, [ecx + 1]
imul edx, ecx
mov ecx, edx
not ecx
and edx, 0x32605da2
mov esi, ecx
and esi, 0xcd9fa25d
or esi, edx
mov eax, dword [eax]
xor esi, 0xcd9fa25c
and ecx, 0xfffffffe
or ecx, esi
xor ecx, 0x4b9a1381
xor ecx, 0xb465ec7e
sete cl
setne dl
cmp dword [0x10098e00], 0xa
setge ch
setl dh
and ch, cl
mov cl, dh
xor cl, dl
and cl, dh
and dh, dl
or dh, ch
mov dl, dh
xor dl, cl
test dh, dh
mov esi, 0xf5346ae
mov edi, 0xbe8b0ae9
cmovne esi, edi
mov dword [ebp - 0x70], eax
test cl, cl
mov eax, 0xf5346ae
cmove esi, eax
test dl, dl
jmp 0x1000fa4b
cmp eax, 0xc4f440b7
jle 0x1000d896
cmp eax, 0xcac21341
jle 0x1000dcb0
cmp eax, 0xccde6ded
jg 0x1000e65b
cmp eax, 0xcac21342
je 0x1000ee68
cmp eax, 0xcca9ea4d
jne 0x1000cc94
mov eax, dword [0x10098dfc]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
not eax
and ecx, 0x6206d68
mov edx, eax
and edx, 0xf9df9297
or edx, ecx
xor edx, 0xf9df9296
and eax, 0xfffffffe
or eax, edx
xor eax, 0x4f1533d5
cmp eax, 0xb0eacc2a
sete al
cmp dword [0x10098e00], 0xa
setl cl
xor al, cl
mov edx, eax
xor dl, 1
and cl, dl
xor dl, cl
test al, al
mov eax, 0x97234c1b
mov esi, 0xb92df52f
cmovne eax, esi
test cl, cl
mov ecx, 0x97234c1b
jmp 0x100101fb
cmp eax, 0x28b6baf1
jle 0x1000d8cc
cmp eax, 0x2d267895
jle 0x1000dce4
cmp eax, 0x2f2e57ae
jg 0x1000e6da
cmp eax, 0x2d267896
je 0x1000ee7d
cmp eax, 0x2f2db1c8
jne 0x1000cc94
mov ecx, dword [0x10098dfc]
lea eax, [ecx + 1]
imul eax, ecx
test al, 1
sete cl
cmp dword [0x10098e00], 0xa
setge dl
setl ch
mov dh, ch
xor dh, al
and dh, ch
and dl, cl
and ch, al
or ch, dl
mov al, ch
xor al, dh
test ch, ch
mov ecx, 0x9189a5e6
mov esi, 0x442b533f
cmovne ecx, esi
test dh, dh
mov edx, 0x9189a5e6
jmp 0x1000f81c
cmp eax, 0xa1eb086d
jle 0x1000d902
cmp eax, 0xa8f5fb13
jle 0x1000dd0f
cmp eax, 0xabcd4cdb
jg 0x1000e722
cmp eax, 0xa8f5fb14
je 0x1000eed9
cmp eax, 0xa9ebd152
jne 0x1000cc94
mov eax, dword [ebp - 0x34]
xor ecx, ecx
mov dword [eax], ecx
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x38]
mov dword [eax], ecx
push dword [ebp - 0x38]
push dword [ebp - 0x34]
push 1
push ecx
push ecx
call sub.WTSAPI32.dll_WTSEnumerateSessionsW
mov eax, 0x46d27592
jmp 0x1000cc94
cmp eax, 0x695a5854
jle 0x1000dd8e
cmp eax, 0x6eac3baa
jg 0x1000e745
cmp eax, 0x695a5855
je 0x1000eee3
cmp eax, 0x6b12842d
jne 0x1000cc94
mov eax, 0x607c8065
jmp 0x1000cc94
cmp eax, 0xeb6ba8cc
jle 0x1000ddfb
cmp eax, 0xf2c98cd6
jg 0x1000e7b3
cmp eax, 0xeb6ba8cd
je 0x1000eef5
cmp eax, 0xf1b0c7fc
jne 0x1000cc94
mov eax, dword [ebp - 0x34]
mov eax, dword [eax]
mov dword [ebp - 0x64], eax
mov eax, 0x905c40e0
jmp 0x1000cc94
cmp eax, 0x1be8a1ef
jle 0x1000de40
cmp eax, 0x1eb66355
jg 0x1000e80e
cmp eax, 0x1be8a1f0
je 0x1000eeff
cmp eax, 0x1e99bd4a
jne 0x1000cc94
mov eax, dword [ebp - 0x3c]
mov dword [eax], 5
mov eax, 0x9d3723e6
jmp 0x1000cc94
cmp eax, 0x98d7020e
jle 0x1000ded1
cmp eax, 0x99c76fca
jg 0x1000e82e
cmp eax, 0x98d7020f
je 0x1000ef09
cmp eax, 0x99bec9df
je 0x1000d977
jmp 0x1000cc94
cmp eax, 0x5e4f080a
jle 0x1000deff
cmp eax, 0x5f7f03ae
jg 0x1000e84e
cmp eax, 0x5e4f080b
je 0x1000ef1f
cmp eax, 0x5f742dd5
jne 0x1000cc94
mov eax, 0xe1a95087
jmp 0x1000cc94
cmp eax, 0xd88b8293
jle 0x1000df65
cmp eax, 0xda15103a
jg 0x1000e8de
cmp eax, 0xd88b8294
je 0x1000ef7d
cmp eax, 0xd8aa6e51
jne 0x1000cc94
mov eax, 0xb71fc38
jmp 0x1000cc94
cmp eax, 0x3d453151
jle 0x1000dff6
cmp eax, 0x40dc1d10
jg 0x1000e958
cmp eax, 0x3d453152
je 0x1000ef93
cmp eax, 0x409cc102
jne 0x1000cc94
push eax
mov eax, esp
mov dword [ebp - 0x40], eax
push eax
mov eax, esp
mov dword [ebp - 0x54], eax
push eax
mov eax, esp
mov dword [ebp - 0x18], eax
push eax
mov eax, esp
mov dword [ebp - 0x28], eax
push eax
mov eax, esp
mov dword [ebp - 0x44], eax
push eax
mov eax, esp
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x58]
mov ecx, dword [ebp + 8]
mov dword [eax], ecx
mov ecx, dword [0x10098dfc]
lea eax, [ecx + 1]
imul eax, ecx
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0xf683cd00
and eax, 0x97c32ff
or eax, edx
xor eax, 0xf683cd01
or eax, ecx
xor eax, 0xffffffff
sete al
setne cl
cmp dword [0x10098e00], 0xa
setl dl
setge ch
and al, ch
or ch, cl
and dl, cl
or dl, al
mov al, ch
xor al, dl
mov esi, 0x436d007e
mov eax, 0x695a5855
cmovne esi, eax
test dl, dl
mov eax, esi
mov edx, 0x436d007e
jmp 0x1000fb9e
cmp eax, 0xb92df52e
jle 0x1000e06f
cmp eax, 0xbd4a19f0
jg 0x1000e978
cmp eax, 0xb92df52f
je 0x1000eff6
cmp eax, 0xbc78cb2a
jne 0x1000cc94
mov eax, 0x15f6839c
jmp 0x1000cc94
cmp eax, 0x7dd19939
jle 0x1000e0a7
cmp eax, 0x7f400dc4
jg 0x1000ea00
cmp eax, 0x7dd1993a
je 0x1000f06e
cmp eax, 0x7ecf3acc
jne 0x1000cc94
mov eax, dword [ebp - 0x80]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x1c]
mov dword [ecx], eax
mov eax, dword [ebp - 0x18]
push dword [eax]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x44]
mov eax, 0x5fdb0b63
jmp 0x1000cc94
cmp eax, 0x51bbddb
jle 0x1000e0dd
cmp eax, 0x68bb7a0
jg 0x1000ea7e
cmp eax, 0x51bbddc
je 0x1000f0cd
cmp eax, 0x5b8b288
jne 0x1000cc94
mov eax, 0xff34e366
jmp 0x1000cc94
cmp eax, 0xb64e233
jg 0x1000e14c
cmp eax, 0xafa4bc9
jg 0x1000eab2
cmp eax, 0x895b8fb
je 0x1000f0ea
cmp eax, 0xa18f328
jne 0x1000cc94
mov eax, dword [ebp - 0x28]
mov ecx, dword [0x10098dfc]
lea eax, [ecx + 1]
imul eax, ecx
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0xfffffffe
and eax, 1
or eax, edx
xor ecx, eax
test ecx, eax
sete dl
setne ah
cmp dword [0x10098e00], 0xa
setge al
setl cl
and ah, cl
and al, dl
or al, ah
mov ah, cl
xor ah, dl
or cl, dl
xor cl, 1
or cl, ah
mov edx, ecx
xor dl, al
mov edx, 0x807140c3
mov esi, 0x67ce2804
cmovne edx, esi
test cl, cl
mov ecx, 0x807140c3
jmp 0x1000ffc5
cmp eax, 0x83f6e819
jg 0x1000e177
cmp eax, 0x807140c3
je 0x1000f0f7
cmp eax, 0x80d8e216
je 0x1000f147
cmp eax, 0x8377abea
jne 0x1000cc94
mov eax, dword [ebp - 0x74]
mov ecx, dword [ebp - 0x78]
mov dword [ecx], eax
mov ecx, dword [0x10098dfc]
lea eax, [ecx + 1]
imul eax, ecx
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0xfffffffe
and eax, 1
or eax, edx
xor ecx, eax
test ecx, eax
sete al
cmp dword [0x10098e00], 0xa
setl cl
xor al, cl
mov edx, eax
xor dl, 1
and cl, dl
xor dl, cl
mov edx, 0xd65786ed
mov esi, 0xfd3f366d
cmovne edx, esi
test al, al
mov eax, edx
mov esi, 0xd65786ed
jmp 0x1000fece
cmp eax, 0x48373b6f
jg 0x1000e1f6
cmp eax, 0x442b533f
je 0x1000f1af
cmp eax, 0x46d27592
je 0x1000f208
cmp eax, 0x48113683
jne 0x1000cc94
mov eax, 0x91b680e8
jmp 0x1000cc94
cmp eax, 0xc34a5550
jg 0x1000e221
cmp eax, 0xbe8b0ae9
je 0x1000f298
cmp eax, 0xc0228693
je 0x1000f2a2
cmp eax, 0xc0dbba6d
jne 0x1000cc94
mov eax, 0x7abb5612
jmp 0x1000cc94
cmp eax, 0x271875bd
jg 0x1000e24c
cmp eax, 0x1fdf770b
je 0x1000f2ee
cmp eax, 0x21f9ebec
je 0x1000f35e
cmp eax, 0x26233ee0
jne 0x1000cc94
mov eax, 0x28b6baf2
jmp 0x1000cc94
cmp eax, 0x9c337fa7
jg 0x1000e277
cmp eax, 0x99ee3887
je 0x1000f3b9
cmp eax, 0x9b896e57
je 0x1000e302
cmp eax, 0x9bc026da
jne 0x1000cc94
mov eax, dword [ebp - 0x14]
mov eax, dword [eax]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x20]
mov dword [ecx], eax
mov eax, dword [ebp - 0x2c]
mov dword [eax], 1
mov eax, dword [ebp - 0x3c]
mov dword [eax], 5
mov eax, 0xd81ba22a
jmp 0x1000cc94
cmp eax, 0x60542359
je 0x1000f411
cmp eax, 0x606e1d31
je 0x1000f476
cmp eax, 0x607c8065
jne 0x1000cc94
mov eax, 0x3ca1901e
jmp 0x1000cc94
cmp eax, 0xdc8722fd
je 0x1000f483
cmp eax, 0xddab0ec1
je 0x1000f499
cmp eax, 0xdec5af54
jne 0x1000cc94
mov eax, 0x18201f5c
jmp 0x1000cc94
cmp eax, 0x12a25130
je 0x1000f508
cmp eax, 0x13ad4421
je 0x1000f524
cmp eax, 0x15f6839c
jne 0x1000cc94
mov ecx, dword [0x10098dfc]
lea eax, [ecx + 1]
imul eax, ecx
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0xfffffffe
and eax, 1
or eax, edx
not eax
or eax, ecx
cmp eax, 0xffffffff
sete cl
cmp dword [0x10098e00], 0xa
setl dl
xor cl, dl
mov ch, cl
not ch
mov eax, 0xbc78cb2a
mov esi, 0xe3846c6
cmovne eax, esi
test ch, dl
mov edx, 0xbc78cb2a
cmove eax, edx
cmovne eax, esi
jmp 0x1000fac5
cmp eax, 0x8e8b9d35
je 0x1000f52e
cmp eax, 0x8e8c74d4
je 0x1000f542
cmp eax, 0x905c40e0
jne 0x1000cc94
mov ecx, dword [0x10098dfc]
lea eax, [ecx - 1]
imul eax, ecx
and eax, 1
sete cl
cmp dword [0x10098e00], 0xa
setl dl
setge ch
or ch, al
xor dl, cl
mov al, ch
xor al, dl
mov esi, 0xbe0f53cd
mov eax, 0x367529dc
cmovne esi, eax
test dl, dl
mov eax, esi
mov edx, 0xbe0f53cd
jmp 0x1000fb9e
cmp eax, 0x55637b9f
je 0x1000f54c
cmp eax, 0x55cf83eb
je 0x1000f556
cmp eax, 0x57dc2dce
jne 0x1000cc94
mov eax, 0xa18f328
jmp 0x1000cc94
cmp eax, 0xcfdaf5cc
je 0x1000f56c
cmp eax, 0xd1738201
je 0x1000f5c5
cmp eax, 0xd3a402ac
jne 0x1000cc94
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x6c]
mov dword [eax], ecx
mov eax, 0xaf49b103
jmp 0x1000cc94
cmp eax, 0x364ed073
je 0x1000f5cf
cmp eax, 0x367529dc
je 0x1000f5d9
cmp eax, 0x368194da
jne 0x1000cc94
mov eax, dword [ebp - 0x18]
mov dword [eax], 0
mov eax, dword [ebp - 0x20]
push dword [ebp - 0x18]
push dword [eax]
call sub.WTSAPI32.dll_WTSQueryUserToken
mov eax, 0x897f7d3c
jmp 0x1000cc94
cmp eax, 0xad57c124
je 0x1000f5ee
cmp eax, 0xaf49b103
je 0x1000f601
cmp eax, 0xb05f9d8d
jne 0x1000cc94
mov eax, 0xcfdaf5cc
jmp 0x1000cc94
cmp eax, 0x708c2a03
je 0x1000f655
cmp eax, 0x73e15cee
je 0x1000f65f
cmp eax, 0x74c6c3f1
jne 0x1000cc94
mov eax, dword [ebp - 0x20]
mov eax, dword [eax]
mov dword [ebp - 0x88], eax
mov eax, 0x90862f9a
jmp 0x1000cc94
cmp eax, 0xfa4af03b
je 0x1000f6ce
cmp eax, 0xfd08152e
je 0x1000f721
cmp eax, 0xfd3f366d
jne 0x1000cc94
mov eax, dword [ebp - 0x74]
mov ecx, dword [ebp - 0x78]
mov dword [ecx], eax
mov eax, 0x8377abea
jmp 0x1000cc94
cmp eax, 0xd46139e
je 0x1000f764
cmp eax, 0xe03dbe1
je 0x1000f7bb
cmp eax, 0xe3846c6
jne 0x1000cc94
mov eax, 0x3b126b2a
jmp 0x1000cc94
cmp eax, 0x86be0341
je 0x1000f7ce
cmp eax, 0x87830e81
je 0x1000ea9e
cmp eax, 0x8930efd3
jne 0x1000cc94
mov eax, 0x619ea5db
jmp 0x1000cc94
cmp eax, 0x4bff705d
je 0x1000f7d8
cmp eax, 0x4ce4fd93
je 0x1000f82b
cmp eax, 0x5009555e
jne 0x1000cc94
push eax
mov eax, esp
mov dword [ebp - 0x58], eax
push eax
mov eax, esp
mov dword [ebp - 0x1c], eax
push eax
mov eax, esp
mov dword [ebp - 0x2c], eax
push eax
mov eax, esp
mov dword [ebp - 0x20], eax
push eax
mov eax, esp
mov dword [ebp - 0x30], eax
push eax
mov eax, esp
mov dword [ebp - 0x3c], eax
push eax
mov eax, esp
mov dword [ebp - 0x34], eax
push eax
mov eax, esp
mov dword [ebp - 0x38], eax
push eax
mov eax, esp
mov dword [ebp - 0x14], eax
push eax
mov ecx, esp
mov edx, dword [0x10098dfc]
lea eax, [edx + 1]
imul eax, edx
test al, 1
sete dl
cmp dword [0x10098e00], 0xa
setge dh
setl bl
and dh, dl
mov dl, bl
xor dl, al
and dl, bl
and bl, al
or bl, dh
mov eax, edx
xor al, bl
mov esi, 0xeb6ba8cd
mov edi, 0x7a11894a
cmovne esi, edi
test bl, bl
mov eax, esi
cmovne eax, edi
mov dword [ebp - 0x24], ecx
jmp 0x100101fe
cmp eax, 0xc4f440b8
je 0x1000f88f
cmp eax, 0xc8a4c80f
je 0x1000f8d4
cmp eax, 0xca0126d2
jne 0x1000cc94
mov eax, dword [ebp - 0x3c]
mov dword [eax], 2
mov eax, 0x60542359
jmp 0x1000cc94
cmp eax, 0x28b6baf2
je 0x1000f8ea
cmp eax, 0x2ad21dd8
je 0x1000f900
cmp eax, 0x2adef15c
jne 0x1000cc94
mov eax, 0xfa4af03b
jmp 0x1000cc94
cmp eax, 0xa1eb086e
je 0x1000f917
cmp eax, 0xa476bc68
je 0x1000f929
cmp eax, 0xa7c488b6
jne 0x1000cc94
mov ecx, dword [0x10098dfc]
lea eax, [ecx + 1]
imul eax, ecx
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0xfffffffe
and eax, 1
or eax, edx
xor ecx, eax
test ecx, eax
sete dl
setne ah
cmp dword [0x10098e00], 0xa
setge cl
setl al
and ah, al
and cl, dl
or cl, ah
mov ah, al
xor ah, dl
or al, dl
xor al, 1
or al, ah
mov edx, eax
xor dl, cl
mov edx, 0x5bcac0e0
mov esi, 0x271875be
cmovne edx, esi
test al, al
mov eax, 0x5bcac0e0
jmp 0x1000f290
cmp eax, 0x65e227d2
je 0x1000f93d
cmp eax, 0x67ce2804
je 0x1000f99a
cmp eax, 0x686c1c69
jne 0x1000cc94
mov ecx, dword [0x10098dfc]
lea eax, [ecx + 0x5b38c497]
imul eax, ecx
test al, 1
sete cl
cmp dword [0x10098e00], 0xa
setl dl
setge ch
or ch, al
xor dl, cl
mov al, ch
xor al, dl
test al, 1
mov eax, 0x48a9b436
mov esi, 0x57e25d6d
cmovne eax, esi
test dl, dl
mov edx, eax
mov esi, 0x48a9b436
cmovne edx, esi
test ch, 1
jmp 0x1000f354
cmp eax, 0xe726e8bd
je 0x1000f9a4
cmp eax, 0xea638521
je 0x1000f9ed
cmp eax, 0xeb26874c
jne 0x1000cc94
mov eax, dword [ebp - 0x18]
push dword [ebp - 0x28]
xor ecx, ecx
inc ecx
push ecx
push ecx
push 0
push 0x2000000
push dword [eax]
call dword [sym.imp.ADVAPI32.dll_DuplicateTokenEx]
mov eax, 0xb7c4032e
jmp 0x1000cc94
cmp eax, 0x18201f5c
je 0x1000fa55
cmp eax, 0x1a0f9c76
je 0x1000ea9e
cmp eax, 0x1aefb440
jne 0x1000cc94
mov eax, dword [0x10098dfc]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
not eax
and ecx, 0x2171070f
mov edx, eax
and edx, 0xde8ef8f0
or edx, ecx
xor edx, 0xde8ef8f1
and eax, 0xfffffffe
or eax, edx
xor eax, 0xe77a76dc
cmp eax, 0x18858923
setne al
cmp dword [0x10098e00], 0xa
setge cl
mov edx, ecx
or dl, al
xor cl, al
mov eax, edx
xor al, cl
test cl, cl
mov ecx, 0x364ed073
mov esi, 0xb68cea72
cmovne ecx, esi
test dl, dl
mov edx, 0x364ed073
cmovne ecx, edx
test al, al
cmove ecx, esi
mov eax, ecx
jmp 0x1000cc94
cmp eax, 0x91b680e8
je 0x1000facf
cmp eax, 0x95c18ba7
je 0x1000fb36
cmp eax, 0x97234c1b
jne 0x1000cc94
mov eax, dword [ebp - 0x30]
mov eax, 0xb92df52f
jmp 0x1000cc94
cmp eax, 0x5bdc3bd7
je 0x1000fbab
cmp eax, 0x5c2b9f44
je 0x1000fc18
cmp eax, 0x5ddf75f8
jne 0x1000cc94
mov eax, dword [0x10098dfc]
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
setne al
cmp dword [0x10098e00], 0xa
setge cl
mov edx, ecx
or dl, al
xor cl, al
mov ch, cl
xor ch, dl
test cl, cl
mov eax, 0xa9ebd152
mov esi, 0x46d27592
cmovne eax, esi
test dl, dl
mov edx, 0xa9ebd152
jmp 0x1000f2e1
cmp eax, 0xd67c9792
je 0x1000eaa8
cmp eax, 0xd81ba22a
je 0x1000fc33
cmp eax, 0xd836aaa8
jne 0x1000cc94
mov ecx, dword [0x10098dfc]
lea eax, [ecx + 1]
imul eax, ecx
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0x8cb1a1a4
and eax, 0x734e5e5b
or eax, edx
xor eax, 0x734e5e5a
xor ecx, eax
test ecx, eax
sete dl
setne ah
cmp dword [0x10098e00], 0xa
setge ch
setl cl
mov al, ch
xor ch, ah
and ah, cl
and al, dl
or al, ah
or cl, dl
xor cl, 1
or cl, ch
mov edx, ecx
xor dl, al
test cl, cl
mov ecx, 0xfa4af03b
mov esi, 0x2adef15c
cmovne ecx, esi
test al, al
cmove ecx, esi
test dl, dl
mov eax, 0xfa4af03b
jmp 0x100100d7
cmp eax, 0x3ca1901e
je 0x1000fc82
cmp eax, 0x3cd4914f
je 0x1000fce8
cmp eax, 0x3d147623
jne 0x1000cc94
cmp dword [ebp - 0x68], 0
setne byte [ebp - 0x4b]
mov ecx, dword [0x10098dfc]
lea eax, [ecx + 1]
imul eax, ecx
test al, 1
sete dl
cmp dword [0x10098e00], 0xa
setl ch
setge cl
and dl, cl
or cl, al
and ch, al
or ch, dl
mov eax, ecx
xor al, ch
test al, 1
mov edx, 0xb7fb0661
mov eax, 0x68bb7a1
cmovne edx, eax
test ch, ch
mov eax, edx
mov esi, 0xb7fb0661
cmovne eax, esi
test cl, 1
cmovne eax, edx
jmp 0x1000cc94
cmp eax, 0xb7c4032e
je 0x1000fd5a
cmp eax, 0xb7fb0661
je 0x1000fdc3
cmp eax, 0xb81c49b2
jne 0x1000cc94
mov eax, dword [ebp - 0x84]
cmp eax, 0x78
setl byte [ebp - 0x47]
mov eax, 0x9c337fa8
jmp 0x1000cc94
cmp eax, 0x7abb5612
je 0x1000fdd9
cmp eax, 0x7b93e1fc
je 0x1000fe32
cmp eax, 0x7d240cbc
jne 0x1000cc94
mov eax, dword [ebp - 0x40]
mov eax, dword [eax]
mov dword [ebp - 0x90], eax
mov eax, 0x5c2b9f44
jmp 0x1000cc94
cmp eax, 0xc73e50
je 0x1000fe77
cmp eax, 0xc78ed9
je 0x1000f8f6
cmp eax, 0x2b7b346
jne 0x1000cc94
cmp dword [ebp - 0x60], 0
sete byte [ebp - 0x4a]
mov ecx, dword [0x10098dfc]
lea eax, [ecx - 1]
imul eax, ecx
and al, 1
cmp dword [0x10098e00], 0xa
setge cl
setl dl
xor dl, al
or cl, al
mov ch, dl
xor ch, cl
test cl, cl
mov eax, 0xe018a3d5
mov esi, 0x606e1d31
cmovne eax, esi
test dl, dl
cmovne eax, esi
test ch, ch
mov ecx, 0xe018a3d5
cmovne eax, ecx
jmp 0x1000cc94
cmp eax, 0xb64e234
je 0x1000fedb
cmp eax, 0xb71fc38
je 0x1000ff52
cmp eax, 0xc47cd4e
jne 0x1000cc94
mov eax, 0xa7c488b6
jmp 0x1000cc94
cmp eax, 0x83f6e81a
je 0x1000ffd4
cmp eax, 0x85243e83
je 0x10010048
cmp eax, 0x85744763
jne 0x1000cc94
mov ecx, dword [0x10098dfc]
lea eax, [ecx + 1]
imul eax, ecx
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0x60a76426
and eax, 0x9f589bd9
or eax, edx
xor eax, 0x9f589bd8
xor ecx, eax
test ecx, eax
sete al
setne cl
cmp dword [0x10098e00], 0xa
setl dl
setge ch
or ch, cl
xor dl, al
mov cl, ch
xor cl, dl
test dl, dl
mov eax, 0x8e8b9d35
mov edx, 0x95c18ba7
cmovne eax, edx
test ch, ch
mov esi, 0x8e8b9d35
jmp 0x1000fece
cmp eax, 0x48373b70
je 0x1001005d
cmp eax, 0x48a9b436
je 0x10010067
cmp eax, 0x48c506df
jne 0x1000cc94
mov eax, 0x7f7d6899
jmp 0x1000cc94
cmp eax, 0xc34a5551
je 0x100100e1
cmp eax, 0xc353f64d
je 0x100100f7
cmp eax, 0xc42a87fe
jne 0x1000cc94
mov eax, 0xf1b0c7fc
jmp 0x1000cc94
cmp eax, 0x271875be
je 0x10010104
cmp eax, 0x28269f58
je 0x10010111
cmp eax, 0x28808352
jne 0x1000cc94
mov eax, 0xea638521
jmp 0x1000cc94
cmp eax, 0x9c337fa8
je 0x1001011b
cmp eax, 0x9d3723e6
je 0x10010199
cmp eax, 0xa0f975f7
jne 0x1000cc94
mov eax, dword [ebp - 0x34]
mov ecx, dword [0x10098dfc]
lea eax, [ecx + 1]
imul eax, ecx
test al, 1
sete dl
cmp dword [0x10098e00], 0xa
setl cl
setge ch
and dl, ch
and cl, al
or cl, dl
or ch, al
mov dl, ch
xor dl, cl
test ch, 1
mov eax, 0x5bdc3bd7
mov esi, 0x8e8c74d4
cmovne eax, esi
test cl, cl
cmove eax, esi
not dl
test dl, 1
mov ecx, 0x5bdc3bd7
cmovne eax, ecx
jmp 0x1000cc94
cmp eax, 0x6460b2b5
je 0x10010208
cmp eax, 0x6596b187
jne 0x1000cc94
mov eax, 0x371b1fdd
jmp 0x1000cc94
cmp eax, 0xe1a95087
je 0x10010212
cmp eax, 0xe3626181
jne 0x1000cc94
mov eax, dword [ebp - 0x38]
mov ecx, dword [0x10098dfc]
lea eax, [ecx + 1]
imul eax, ecx
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0x4a0817ff
and eax, 0xb5f7e800
or eax, edx
xor eax, 0x4a0817fe
or eax, ecx
xor eax, 0xffffffff
sete al
setne dl
cmp dword [0x10098e00], 0xa
setge ah
setl ch
mov cl, ch
xor cl, dl
and cl, ch
and ah, al
and ch, dl
or ch, ah
mov eax, ecx
xor al, ch
mov edx, 0xbc78cb2a
mov esi, 0x15f6839c
cmovne edx, esi
test ch, ch
mov eax, edx
jmp 0x1000fece
cmp eax, 0x17ae588e
je 0x10010257
cmp eax, 0x17d450b1
jne 0x1000cc94
mov eax, dword [ebp - 0x24]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x38]
cmp eax, dword [ecx]
setl byte [ebp - 0x49]
mov eax, 0x21f9ebec
jmp 0x1000cc94
cmp eax, 0x9151e7f5
je 0x10010288
cmp eax, 0x9189a5e6
jne 0x1000cc94
push 0x1f4
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, 0x442b533f
jmp 0x1000cc94
cmp eax, 0x5a2bd284
je 0x100102a0
cmp eax, 0x5bcac0e0
jne 0x1000cc94
mov ecx, dword [ebp - 0x24]
mov eax, dword [0x10098dfc]
lea edx, [eax + 1]
imul edx, eax
mov eax, edx
not eax
and edx, 0x3d2f57dc
mov esi, eax
and esi, 0xc2d0a823
or esi, edx
mov ecx, dword [ecx]
xor esi, 0xc2d0a822
and eax, 0xfffffffe
or eax, esi
xor eax, 0xe4ec3c6c
xor eax, 0x1b13c393
sete al
setne ah
cmp dword [0x10098e00], 0xa
setge dh
setl bl
mov dl, bl
xor dl, ah
and dl, bl
and dh, al
and bl, ah
or bl, dh
mov eax, edx
xor al, bl
mov esi, 0x271875be
mov edi, 0x26233ee0
cmovne esi, edi
test bl, bl
mov eax, esi
cmovne eax, edi
mov dword [ebp - 0x8c], ecx
jmp 0x100101fe
cmp eax, 0xd5e2abb2
je 0x100102aa
cmp eax, 0xd65786ed
jne 0x1000cc94
mov ecx, dword [0x10098dfc]
lea eax, [ecx + 1]
imul eax, ecx
test al, 1
sete cl
cmp dword [0x10098e00], 0xa
setl dl
setge ch
and cl, ch
and dl, al
or dl, cl
or ch, al
mov al, ch
xor al, dl
test ch, 1
mov ecx, 0xc4f440b8
mov esi, 0x7847e543
cmovne ecx, esi
test dl, dl
cmove ecx, esi
test al, 1
mov eax, 0xc4f440b8
jmp 0x100100d7
cmp eax, 0x3b126b2a
je 0x100102c0
cmp eax, 0x3b4af902
jne 0x1000cc94
mov eax, 0x686c1c69
jmp 0x1000cc94
cmp eax, 0xb38f42a6
je 0x10010327
cmp eax, 0xb68cea72
jne 0x1000cc94
mov ecx, dword [0x10098dfc]
lea eax, [ecx + 1]
imul eax, ecx
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0xfffffffe
and eax, 1
or eax, edx
xor ecx, eax
test ecx, eax
setne cl
sete dl
cmp dword [0x10098e00], 0xa
setl al
setge ah
and dl, ah
and al, cl
or al, dl
or ah, cl
mov cl, ah
xor cl, al
mov ecx, 0xb05f9d8d
mov edx, 0x364ed073
cmovne ecx, edx
test ah, ah
mov edx, 0xb05f9d8d
cmovne edx, ecx
test al, al
cmove edx, ecx
mov eax, edx
jmp 0x1000cc94
cmp eax, 0x7847e543
je 0x1001036a
cmp eax, 0x7a11894a
jne 0x1000cc94
mov eax, 0x5e4f080b
jmp 0x1000cc94
cmp eax, 0xff34e366
je 0x10010374
cmp eax, 0xffbb6dc5
jne 0x1000cc94
mov eax, dword [ebp - 0x18]
mov eax, 0x1fdf770b
jmp 0x1000cc94
cmp eax, 0x11893d5b
je 0x100103ce
cmp eax, 0x12a0c696
jne 0x1000cc94
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x5c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov dword [eax], 0
mov eax, 0x7dd1993a
jmp 0x1000cc94
cmp eax, 0x8a4007d9
je 0x1000eaa8
cmp eax, 0x8d0e7ec5
jne 0x1000cc94
mov eax, 0x5f7f03af
jmp 0x1000cc94
cmp eax, 0x53d0337e
je 0x100103e4
cmp eax, 0x546062ee
jne 0x1000cc94
mov ecx, dword [0x10098dfc]
lea eax, [ecx + 1]
imul eax, ecx
test al, 1
sete dl
cmp dword [0x10098e00], 0xa
setl cl
setge ch
and dl, ch
and cl, al
or cl, dl
or ch, al
mov al, ch
xor al, cl
test al, 1
mov edx, 0x1a0f9c76
mov eax, 0x1f468f21
cmovne edx, eax
test ch, 1
mov eax, 0x1a0f9c76
jmp 0x1000f290
cmp eax, 0xccde6dee
je 0x100103ee
cmp eax, 0xce6328f5
jne 0x1000cc94
mov eax, dword [0x10098dfc]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
not eax
and ecx, 0xac0ffcbe
mov edx, eax
and edx, 0x53f00341
or edx, ecx
xor edx, 0x53f00340
and eax, 0xfffffffe
or eax, edx
xor eax, 0x84680dca
cmp eax, 0x7b97f235
sete al
cmp dword [0x10098e00], 0xa
setl cl
mov edx, ecx
xor dl, al
or cl, al
xor cl, 1
or cl, dl
mov eax, ecx
xor al, dl
mov esi, 0x619ea5db
mov eax, 0x8930efd3
cmovne esi, eax
test cl, cl
mov eax, 0x619ea5db
jmp 0x1000fe6f
cmp eax, 0x2f2e57af
je 0x10010456
cmp eax, 0x35742ff7
jne 0x1000cc94
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x40]
xor ecx, ecx
mov dword [eax], ecx
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0x54]
mov dword [eax], ecx
mov eax, dword [ebp - 0x20]
push dword [ebp - 0x54]
push dword [ebp - 0x40]
push 8
push dword [eax]
push ecx
call sub.WTSAPI32.dll_WTSQuerySessionInformationW
mov dword [ebp - 0x68], eax
mov eax, 0xfe887dbc
jmp 0x1000cc94
cmp eax, 0xabcd4cdc
je 0x100104cf
cmp eax, 0xaca7e100
jne 0x1000cc94
mov eax, dword [ebp - 0x1c]
mov eax, 0xb0ddafc
jmp 0x1000cc94
cmp eax, 0x6eac3bab
je 0x100104d9
cmp eax, 0x700449fc
jne 0x1000cc94
mov ecx, dword [0x10098dfc]
lea eax, [ecx + 1]
imul eax, ecx
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0xfffffffe
and eax, 1
or eax, edx
xor ecx, eax
test ecx, eax
sete al
setne cl
cmp dword [0x10098e00], 0xa
setl dl
setge ch
and al, ch
or ch, cl
and dl, cl
or dl, al
mov cl, dl
xor cl, ch
test dl, dl
mov eax, 0x1eb66356
mov esi, 0x7b93e1fc
cmovne eax, esi
test ch, ch
mov edx, 0x1eb66356
jmp 0x1000efe9
cmp eax, 0xf2c98cd7
je 0x10010544
cmp eax, 0xf9c94964
jne 0x1000cc94
mov eax, dword [0x10098dfc]
lea ecx, [eax - 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
setne al
cmp dword [0x10098e00], 0xa
setge cl
mov edx, ecx
or dl, al
xor cl, al
mov eax, edx
xor al, cl
mov esi, 0xd473f383
mov eax, 0xd1738201
cmovne esi, eax
test cl, cl
mov eax, esi
mov ecx, 0xd473f383
jmp 0x1000ef75
cmp eax, 0x1eb66356
je 0x10010551
cmp eax, 0x1f468f21
jne 0x1000cc94
mov eax, 0x546062ee
jmp 0x1000cc94
cmp eax, 0x99c76fcb
je 0x1001055e
cmp eax, 0x99e5e833
jne 0x1000cc94
mov eax, 0x85744763
jmp 0x1000cc94
cmp eax, 0x5f7f03af
je 0x10010568
cmp eax, 0x5fdb0b63
jne 0x1000cc94
mov eax, dword [ebp - 0x80]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x1c]
mov dword [ecx], eax
mov eax, dword [ebp - 0x18]
push dword [eax]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, dword [ebp - 0x10]
mov eax, dword [ebp - 0x44]
mov eax, dword [0x10098dfc]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
not eax
and ecx, 0xfae3ebfe
mov edx, eax
and edx, 0x51c1401
or edx, ecx
xor edx, 0x51c1400
and eax, 0xfffffffe
or eax, edx
cmp eax, 0xffffffff
setne al
cmp dword [0x10098e00], 0xa
setge cl
mov edx, ecx
or dl, al
xor cl, al
mov eax, edx
xor al, cl
mov eax, 0x57dc2dce
mov esi, 0x7ecf3acc
cmovne eax, esi
test cl, cl
mov ecx, eax
mov esi, 0x57dc2dce
jmp 0x1000f719
cmp eax, 0xda15103b
je 0x100105c6
cmp eax, 0xdae93a13
jne 0x1000cc94
mov ecx, dword [0x10098dfc]
lea eax, [ecx + 1]
imul eax, ecx
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0xd070d346
and eax, 0x2f8f2cb9
or eax, edx
xor eax, 0x2f8f2cb8
xor ecx, eax
test ecx, eax
setne al
cmp dword [0x10098e00], 0xa
setge cl
mov edx, ecx
or dl, al
xor cl, al
mov eax, edx
xor al, cl
mov eax, 0x83f6e81a
mov esi, 0x12a25130
cmovne eax, esi
test cl, cl
mov ecx, eax
mov esi, 0x83f6e81a
cmovne ecx, esi
test dl, dl
cmovne ecx, eax
mov eax, ecx
jmp 0x1000cc94
cmp eax, 0x40dc1d11
je 0x100105d0
cmp eax, 0x436d007e
jne 0x1000cc94
mov eax, 0x17ae588e
jmp 0x1000cc94
cmp eax, 0xbd4a19f1
je 0x10010622
cmp eax, 0xbe0f53cd
jne 0x1000cc94
push dword [ebp - 0x64]
call sub.WTSAPI32.dll_WTSFreeMemory
mov eax, dword [ebp - 0x14]
mov ecx, dword [0x10098dfc]
lea eax, [ecx + 1]
imul eax, ecx
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0xfac918d
and eax, 0xf0536e72
or eax, edx
xor eax, 0xfac918c
or eax, ecx
xor eax, 0xffffffff
sete al
setne cl
cmp dword [0x10098e00], 0xa
setge dl
setl ah
mov ch, ah
xor ch, cl
and ch, ah
and dl, al
and ah, cl
or ah, dl
mov cl, ch
xor cl, ah
test ah, ah
mov eax, 0x367529dc
mov edx, 0xd3fef432
cmovne eax, edx
test ch, ch
mov esi, 0x367529dc
jmp 0x1001031a
cmp eax, 0x7f400dc5
je 0x10010635
cmp eax, 0x7f7d6899
jne 0x1000cc94
mov ecx, dword [ebp - 0x1c]
mov edx, dword [0x10098dfc]
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
not edx
mov esi, edx
and esi, 0x61972cc3
and eax, 0x9e68d33c
or eax, esi
mov ecx, dword [ecx]
xor eax, 0x9e68d33d
xor edx, eax
test edx, eax
sete al
cmp dword [0x10098e00], 0xa
mov dword [ebp - 0x98], ecx
setl cl
mov edx, ecx
xor dl, al
or cl, al
xor cl, 1
or cl, dl
mov eax, ecx
xor al, dl
mov eax, 0x1be8a1f0
mov esi, 0xed882b1
cmovne eax, esi
test cl, cl
mov ecx, 0x1be8a1f0
jmp 0x1001003e
cmp eax, 0x68bb7a1
je 0x10010684
cmp eax, 0x82e6bbd
jne 0x1000cc94
mov eax, 0xb089aef7
jmp 0x1000cc94
mov eax, 0xc353f64d
jmp 0x1000cc94
mov eax, 0xa476bc68
jmp 0x1000cc94
cmp eax, 0xb0ddafc
jne 0x10010691
mov eax, dword [ebp - 0x1c]
mov eax, dword [0x10098dfc]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
not eax
and ecx, 0x5946aac4
mov edx, eax
and edx, 0xa6b9553b
or edx, ecx
xor edx, 0xa6b9553a
and eax, 0xfffffffe
or eax, edx
xor eax, 0x1395ebc5
xor eax, 0xec6a143a
sete al
setne cl
cmp dword [0x10098e00], 0xa
setge dl
setl ah
mov ch, ah
xor ch, cl
and ch, ah
and dl, al
and ah, cl
or ah, dl
mov al, ah
xor al, ch
test ah, ah
mov edx, 0xaca7e100
mov esi, 0x48c506df
cmovne edx, esi
test ch, ch
mov ecx, 0xaca7e100
cmove edx, ecx
test al, al
cmovne edx, esi
mov eax, edx
jmp 0x1000cc94
mov eax, 0x895b8fb
jmp 0x1000cc94
mov eax, 0x8a4007d9
jmp 0x1000cc94
mov eax, dword [0x10098dfc]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
not eax
and ecx, 0xff676f16
mov edx, eax
and edx, 0x9890e9
or edx, ecx
xor edx, 0x9890e8
and eax, 0xfffffffe
or eax, edx
xor eax, 0x1a44fd
xor eax, 0xffe5bb02
sete al
setne cl
cmp dword [0x10098e00], 0xa
setge dl
setl ah
mov ch, ah
xor ch, cl
and ch, ah
and dl, al
and ah, cl
or ah, dl
mov al, ch
xor al, ah
test ah, ah
mov edx, 0x7ecf3acc
mov esi, 0x5fdb0b63
cmovne edx, esi
test ch, ch
mov ecx, 0x7ecf3acc
jmp 0x100104c0
push dword [ebp - 0x44]
push 4
push dword [ebp - 0x10]
push 0x13
push dword [ebp - 0x70]
call dword [sym.imp.ADVAPI32.dll_GetTokenInformation]
test eax, eax
sete byte [ebp - 0x4f]
mov ecx, dword [0x10098dfc]
lea eax, [ecx + 1]
imul eax, ecx
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0x6c4e3b43
and eax, 0x93b1c4bc
or eax, edx
xor eax, 0x6c4e3b42
or eax, ecx
xor eax, 0xffffffff
sete al
setne cl
cmp dword [0x10098e00], 0xa
setl dl
xor cl, dl
mov ah, al
xor ah, dl
xor cl, 1
or dl, al
xor dl, 1
or dl, cl
mov al, dl
xor al, ah
test dl, dl
mov ecx, 0x55cf83eb
mov edx, 0x51bbddc
cmovne ecx, edx
test ah, ah
cmove ecx, edx
test al, al
mov eax, 0x55cf83eb
jmp 0x100100d7
mov eax, 0x48a9b436
jmp 0x1000cc94
mov eax, 0xe3626181
jmp 0x1000cc94
mov ecx, dword [0x10098dfc]
lea eax, [ecx + 1]
imul eax, ecx
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0xb91e3bd7
and eax, 0x46e1c428
or eax, edx
xor eax, 0xb91e3bd6
or eax, ecx
xor eax, 0xffffffff
sete al
setne cl
cmp dword [0x10098e00], 0xa
setl dl
setge ah
and al, ah
or ah, cl
and dl, cl
or dl, al
mov al, ah
xor al, dl
mov ecx, 0xb71fc38
mov esi, 0x40dc1d11
cmovne ecx, esi
test dl, dl
mov edx, ecx
mov esi, 0xb71fc38
jmp 0x1000ff43
mov eax, dword [0x10098dfc]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
not eax
and ecx, 0x694f896d
mov edx, eax
and edx, 0x96b07692
or edx, ecx
xor edx, 0x96b07693
and eax, 0xfffffffe
or eax, edx
xor eax, 0xffffffff
sete dl
setne ah
cmp dword [0x10098e00], 0xa
setl al
xor ah, al
mov ecx, eax
xor cl, dl
xor ah, 1
or al, dl
xor al, 1
or al, ah
mov edx, eax
xor dl, cl
mov edx, 0x98d7020f
mov esi, 0x82e6bbd
cmovne edx, esi
test al, al
mov eax, 0x98d7020f
jmp 0x1000f290
mov eax, dword [ebp - 0x14]
mov ecx, dword [0x10098dfc]
lea edx, [ecx + 1]
imul edx, ecx
mov esi, edx
not esi
mov ecx, esi
and ecx, 0xfffffffe
and edx, 1
or edx, ecx
mov ecx, dword [eax]
xor esi, edx
test esi, edx
sete al
setne dl
cmp dword [0x10098e00], 0xa
setl ah
setge dh
or dh, dl
xor ah, al
mov dl, ah
xor dl, dh
test ah, ah
mov eax, 0xfd797c40
mov esi, 0xddab0ec1
cmovne eax, esi
mov ecx, dword [ecx + 8]
test dh, dh
mov edi, 0xfd797c40
cmovne eax, edi
mov dword [ebp - 0x60], ecx
jmp 0x100101fe
mov eax, dword [ebp - 0x14]
mov eax, 0x74f83ef3
jmp 0x1000cc94
mov ecx, dword [0x10098dfc]
lea eax, [ecx + 1]
imul eax, ecx
test al, 1
sete cl
cmp dword [0x10098e00], 0xa
setl dl
setge ch
or ch, al
xor dl, cl
mov eax, edx
xor al, ch
test dl, dl
mov edx, 0xaca7e100
mov esi, 0xb0ddafc
cmovne edx, esi
test ch, 1
mov ecx, 0xaca7e100
cmovne edx, ecx
test al, 1
cmove edx, esi
mov eax, edx
jmp 0x1000cc94
mov eax, dword [ebp - 0x18]
mov dword [eax], 0
mov eax, dword [ebp - 0x20]
push dword [ebp - 0x18]
push dword [eax]
call sub.WTSAPI32.dll_WTSQueryUserToken
mov edx, dword [0x10098dfc]
lea ecx, [edx + 1]
imul ecx, edx
mov edx, ecx
not edx
mov esi, edx
and esi, 0xfffffffe
and ecx, 1
or ecx, esi
xor edx, ecx
test edx, ecx
sete cl
cmp dword [0x10098e00], 0xa
setl dl
xor cl, dl
mov ch, cl
mov esi, 0x368194da
mov edi, 0xc8a4c80f
cmovne esi, edi
not ch
test ch, dl
cmovne esi, edi
test cl, cl
mov ebx, esi
cmovne ebx, edi
test ch, dl
cmove ebx, esi
test eax, eax
setne byte [ebp - 0x4d]
mov eax, ebx
jmp 0x1000cc94
mov eax, dword [ebp - 0x2c]
mov dword [eax], 1
mov eax, 0xce6328f5
jmp 0x1000cc94
mov eax, dword [ebp - 0x14]
mov eax, dword [ebp - 0x34]
mov eax, dword [eax]
mov dword [ebp - 0x5c], eax
mov eax, 0x76ab8a9c
jmp 0x1000cc94
mov ecx, dword [0x10098dfc]
lea eax, [ecx + 1]
imul eax, ecx
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0x7494ac18
and eax, 0x8b6b53e7
or eax, edx
xor eax, 0x7494ac19
or eax, ecx
cmp eax, 0xffffffff
sete al
cmp dword [0x10098e00], 0xa
setl cl
xor al, cl
mov edx, eax
xor dl, 1
and cl, dl
xor dl, cl
mov edx, 0x90818b55
mov esi, 0x51bbddc
cmovne edx, esi
test al, al
mov eax, edx
mov esi, 0x90818b55
jmp 0x1000fece
mov eax, 0xc0dbba6d
jmp 0x1000cc94
mov eax, dword [ebp - 0x58]
mov ecx, dword [ebp + 8]
mov dword [eax], ecx
mov eax, 0x409cc102
jmp 0x1000cc94
mov eax, 0x5009555e
jmp 0x1000cc94
mov eax, 0xdae93a13
jmp 0x1000cc94
cmp byte [ebp - 0x47], 0
mov eax, 0xbd4a19f1
mov ecx, 0x74c6c3f1
cmovne eax, ecx
jmp 0x1000cc94
mov ecx, dword [0x10098dfc]
lea eax, [ecx + 1]
imul eax, ecx
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0x39d06df3
and eax, 0xc62f920c
or eax, edx
xor eax, 0x39d06df2
or eax, ecx
cmp eax, 0xffffffff
setne al
cmp dword [0x10098e00], 0xa
setge cl
mov edx, ecx
or dl, al
xor cl, al
mov eax, edx
xor al, cl
mov esi, 0x409cc102
mov eax, 0x695a5855
cmovne esi, eax
test cl, cl
mov eax, esi
mov ecx, 0x409cc102
cmovne eax, ecx
jmp 0x1000f46c
mov eax, dword [ebp - 0x28]
mov eax, dword [ebp - 0x28]
mov dword [eax], 0
mov eax, 0x99ee3887
jmp 0x1000cc94
mov ecx, dword [0x10098dfc]
lea eax, [ecx + 1]
imul eax, ecx
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0xfffffffe
and eax, 1
or eax, edx
not eax
or eax, ecx
xor eax, 0xffffffff
sete al
setne cl
cmp dword [0x10098e00], 0xa
setl dl
setge ch
and al, ch
or ch, cl
and dl, cl
or dl, al
mov cl, dl
xor cl, ch
test dl, dl
mov eax, 0x86be0341
mov esi, 0xf9c94964
cmovne eax, esi
test ch, ch
mov edx, 0x86be0341
cmovne eax, edx
test cl, cl
cmove eax, esi
jmp 0x1000cc94
mov eax, dword [0x10098dfc]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
not eax
and ecx, 0xe0bdba69
mov edx, eax
and edx, 0x1f424596
or edx, ecx
xor edx, 0x1f424597
and eax, 0xfffffffe
or eax, edx
xor eax, 0x46fb0c81
cmp eax, 0xb904f37e
sete cl
cmp dword [0x10098e00], 0xa
setl dl
xor cl, dl
mov ch, cl
not ch
mov eax, 0x97234c1b
mov esi, 0x99c76fcb
cmovne eax, esi
test ch, dl
mov ebx, 0x97234c1b
cmove eax, ebx
test cl, cl
cmovne eax, esi
test ch, dl
mov ecx, dword [ebp - 0x30]
mov ecx, dword [ecx]
mov dword [ebp - 0x84], ecx
cmovne eax, esi
jmp 0x1000cc94
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x5c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x24]
mov dword [eax], 0
mov ecx, dword [0x10098dfc]
lea eax, [ecx + 1]
imul eax, ecx
test al, 1
sete cl
cmp dword [0x10098e00], 0xa
setge dl
setl ch
xor ch, cl
or dl, al
mov cl, dl
xor cl, ch
test dl, 1
mov eax, 0xc78ed9
mov edx, 0x12a0c696
cmovne eax, edx
test ch, ch
cmove eax, edx
test cl, 1
mov ecx, 0xc78ed9
cmove eax, ecx
jmp 0x1000cc94
push dword [ebp - 0x44]
push 4
push dword [ebp - 0x10]
push 0x13
push dword [ebp - 0x70]
call dword [sym.imp.ADVAPI32.dll_GetTokenInformation]
mov eax, 0x90818b55
jmp 0x1000cc94
mov eax, dword [ebp - 0x18]
mov eax, 0x1aefb440
jmp 0x1000cc94
mov ecx, dword [0x10098dfc]
lea eax, [ecx - 1]
imul eax, ecx
and eax, 1
sete cl
cmp dword [0x10098e00], 0xa
setge dl
setl ch
mov dh, cl
xor dh, ch
xor dl, al
or ch, cl
xor ch, 1
or ch, dl
mov al, ch
xor al, dh
test ch, ch
mov ecx, 0x3b4af902
mov esi, 0x67ce2804
cmovne ecx, esi
test dh, dh
cmove ecx, esi
test al, al
mov eax, 0x3b4af902
jmp 0x100100d7
mov eax, dword [0x10098dfc]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
not eax
and ecx, 0x19ac3cde
mov edx, eax
and edx, 0xe653c321
or edx, ecx
xor edx, 0xe653c320
and eax, 0xfffffffe
or eax, edx
cmp eax, 0xffffffff
setne al
cmp dword [0x10098e00], 0xa
setge cl
setl dl
xor dl, al
or cl, al
mov ch, dl
xor ch, cl
test cl, cl
mov eax, 0x60542359
mov esi, 0xca0126d2
cmovne eax, esi
test dl, dl
cmovne eax, esi
test ch, ch
mov ecx, 0x60542359
cmovne eax, ecx
jmp 0x1000cc94
push 0x1f4
call dword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, dword [0x10098dfc]
lea eax, [ecx + 1]
imul eax, ecx
test al, 1
sete dl
cmp dword [0x10098e00], 0xa
setge ch
setl dh
mov cl, dh
xor cl, al
and cl, dh
and ch, dl
and dh, al
or dh, ch
mov eax, ecx
xor al, dh
mov eax, 0x9189a5e6
mov esi, 0x13ad4421
cmovne eax, esi
test dh, dh
mov edx, eax
cmovne edx, esi
test cl, cl
cmove edx, eax
mov eax, edx
jmp 0x1000cc94
mov eax, dword [ebp - 0x34]
xor ecx, ecx
mov dword [eax], ecx
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x38]
mov dword [eax], ecx
push dword [ebp - 0x38]
push dword [ebp - 0x34]
push 1
push ecx
push ecx
call sub.WTSAPI32.dll_WTSEnumerateSessionsW
test eax, eax
setne byte [ebp - 0x48]
mov ecx, dword [0x10098dfc]
lea eax, [ecx + 1]
imul eax, ecx
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0x24147d64
and eax, 0xdbeb829b
or eax, edx
xor eax, 0x24147d65
or eax, ecx
xor eax, 0xffffffff
sete dl
setne ah
cmp dword [0x10098e00], 0xa
setge cl
setl al
and ah, al
and cl, dl
or cl, ah
mov ah, al
xor ah, dl
or al, dl
xor al, 1
or al, ah
mov edx, eax
xor dl, cl
mov edx, 0xe726e8bd
mov esi, 0xa9ebd152
cmovne edx, esi
test al, al
mov eax, 0xe726e8bd
cmovne eax, edx
jmp 0x1000fed1
mov eax, 0x2d267896
jmp 0x1000cc94
mov ecx, dword [0x10098dfc]
lea eax, [ecx + 1]
imul eax, ecx
not al
or al, 0xfe
cmp al, 0xff
setne al
cmp dword [0x10098e00], 0xa
setge cl
mov edx, ecx
or dl, al
xor cl, al
mov ch, dl
xor ch, cl
test cl, cl
mov eax, 0x53d0337e
mov esi, 0xdf964ca7
cmovne eax, esi
test dl, dl
mov edx, 0x53d0337e
cmovne eax, edx
test ch, ch
cmove eax, esi
jmp 0x1000cc94
mov ecx, dword [0x10098dfc]
lea eax, [ecx + 1]
imul eax, ecx
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0xc94cd5ee
and eax, 0x36b32a11
or eax, edx
xor eax, 0xc94cd5ef
or eax, ecx
xor eax, 0xffffffff
setne cl
sete al
cmp dword [0x10098e00], 0xa
setl dl
setge ah
or dl, al
xor al, ah
xor cl, ah
xor dl, 1
or dl, cl
mov ecx, eax
xor cl, dl
test dl, dl
mov edx, 0x897f7d3c
mov esi, 0x368194da
cmovne edx, esi
test al, al
cmovne edx, esi
test cl, cl
mov eax, 0x897f7d3c
cmovne edx, eax
mov eax, edx
jmp 0x1000cc94
mov ecx, dword [0x10098dfc]
lea eax, [ecx + 1]
imul eax, ecx
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0xfffffffe
and eax, 1
or eax, edx
not eax
or eax, ecx
xor eax, 0xffffffff
sete al
setne cl
cmp dword [0x10098e00], 0xa
setl dl
setge ch
and al, ch
or ch, cl
and dl, cl
or dl, al
mov al, ch
xor al, dl
mov esi, 0xe1a95087
mov eax, 0x5f742dd5
cmovne esi, eax
test dl, dl
mov eax, esi
mov edx, 0xe1a95087
jmp 0x1000fb9e
mov ecx, dword [0x10098dfc]
lea eax, [ecx + 1]
imul eax, ecx
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0xfffffffe
and eax, 1
or eax, edx
xor ecx, eax
test ecx, eax
sete al
setne cl
cmp dword [0x10098e00], 0xa
setl dl
setge ah
and al, ah
or ah, cl
and dl, cl
or dl, al
mov al, ah
xor al, dl
test dl, dl
mov ecx, 0xeb26874c
mov edx, 0xb7c4032e
cmovne ecx, edx
test ah, ah
mov esi, 0xeb26874c
jmp 0x1000f7b3
mov eax, dword [ebp - 0x3c]
mov dword [eax], 2
mov ecx, dword [0x10098dfc]
lea eax, [ecx + 1]
imul eax, ecx
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0x252ab3fe
and eax, 0xdad54c01
or eax, edx
xor eax, 0xdad54c00
xor ecx, eax
test ecx, eax
setne al
cmp dword [0x10098e00], 0xa
setge cl
setl dl
xor dl, al
or cl, al
mov eax, edx
xor al, cl
mov esi, 0xca0126d2
mov eax, 0x6b12842d
cmovne esi, eax
test cl, cl
cmovne eax, esi
test dl, dl
cmovne eax, esi
jmp 0x1000cc94
mov eax, dword [ebp - 0x60]
mov eax, 0x2b7b346
jmp 0x1000cc94
cmp byte [ebp - 0x4c], 0
mov eax, 0xd836aaa8
mov ecx, 0x80d8e216
cmovne eax, ecx
jmp 0x1000cc94
mov eax, dword [0x10098dfc]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
not eax
and ecx, 0x4e854ba6
mov edx, eax
and edx, 0xb17ab459
or edx, ecx
xor edx, 0xb17ab458
and eax, 0xfffffffe
or eax, edx
xor eax, 0xffffffff
setne al
sete cl
cmp dword [0x10098e00], 0xa
setl dl
setge ah
and cl, ah
and dl, al
or dl, cl
or ah, al
mov cl, ah
xor cl, dl
test ah, ah
mov eax, 0x5b8b288
mov esi, 0x1eb66356
cmovne eax, esi
test dl, dl
cmove eax, esi
test cl, cl
mov ecx, 0x5b8b288
cmove eax, ecx
jmp 0x1000cc94
mov eax, dword [ebp - 0x3c]
mov dword [eax], 1
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x1c]
mov eax, 0x83f6e81a
jmp 0x1000cc94
mov eax, 0xc73e50
jmp 0x1000cc94
mov eax, dword [ebp - 0x40]
push dword [eax]
call sub.WTSAPI32.dll_WTSFreeMemory
mov eax, 0x95c18ba7
jmp 0x1000cc94
mov eax, 0x5bdc3bd7
jmp 0x1000cc94
mov eax, 0x85243e83
jmp 0x1000cc94
cmp byte [ebp - 0x4f], 0
mov eax, 0xa1eb086e
mov ecx, 0x9151e7f5
cmovne eax, ecx
jmp 0x1000cc94
mov ecx, dword [0x10098dfc]
lea eax, [ecx + 1]
imul eax, ecx
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0xfffffffe
and eax, 1
or eax, edx
xor ecx, eax
test ecx, eax
sete al
cmp dword [0x10098e00], 0xa
setl cl
xor al, cl
mov edx, eax
mov esi, 0xed882b1
mov ebx, 0x7f7d6899
cmovne esi, ebx
not dl
test dl, cl
mov edi, 0xed882b1
cmove esi, edi
test al, al
cmovne esi, ebx
test dl, cl
cmovne esi, ebx
mov eax, esi
jmp 0x1000cc94
mov eax, 0xd473f383
jmp 0x1000cc94
mov eax, 0xb68cea72
jmp 0x1000cc94
push dword [ebp - 0x64]
call sub.WTSAPI32.dll_WTSFreeMemory
mov eax, dword [ebp - 0x14]
mov eax, 0xbe0f53cd
jmp 0x1000cc94
push dword [ebp - 0x7c]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov eax, 0x2f2e57af
jmp 0x1000cc94
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x6c]
mov dword [eax], ecx
mov eax, dword [0x10098dfc]
lea ecx, [eax - 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
sete al
cmp dword [0x10098e00], 0xa
setl cl
xor al, cl
mov edx, eax
not dl
mov esi, 0xd3a402ac
mov ebx, 0x8a121f70
cmovne esi, ebx
test dl, cl
mov ecx, 0xd3a402ac
cmove esi, ecx
cmovne esi, ebx
test al, al
cmovne esi, ebx
mov eax, esi
jmp 0x1000cc94
mov eax, 0xfd08152e
jmp 0x1000cc94
mov eax, dword [0x10098dfc]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
not eax
and ecx, 0xe6edd64a
mov edx, eax
and edx, 0x191229b5
or edx, ecx
xor edx, 0x191229b4
and eax, 0xfffffffe
or eax, edx
cmp eax, 0xffffffff
setne cl
cmp dword [0x10098e00], 0xa
setge al
mov edx, eax
inc dl
and dl, cl
mov ch, cl
inc ch
and ch, al
or ch, dl
or al, cl
mov cl, al
xor cl, ch
mov edx, 0xb38f42a6
mov esi, 0x48373b70
cmovne edx, esi
test al, al
mov eax, 0xb38f42a6
cmovne eax, edx
test ch, ch
cmove eax, edx
jmp 0x1000cc94
mov ecx, dword [0x10098dfc]
lea eax, [ecx + 1]
imul eax, ecx
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0xfffffffe
and eax, 1
or eax, edx
xor ecx, eax
test ecx, eax
setne al
cmp dword [0x10098e00], 0xa
setge cl
mov edx, ecx
or dl, al
xor cl, al
mov eax, edx
xor al, cl
mov eax, 0x2f2db1c8
mov esi, 0x2adef15c
cmovne eax, esi
test cl, cl
mov ecx, eax
mov esi, 0x2f2db1c8
cmovne ecx, esi
jmp 0x1001044a
mov eax, dword [0x10098dfc]
lea ecx, [eax - 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
setne al
cmp dword [0x10098e00], 0xa
setge cl
mov edx, eax
xor dl, cl
or cl, al
mov eax, ecx
xor al, dl
mov esi, 0xc47cd4e
mov eax, 0x708c2a03
cmovne esi, eax
test cl, cl
mov eax, 0xc47cd4e
jmp 0x1000fe6f
mov ecx, dword [0x10098dfc]
lea eax, [ecx + 1]
imul eax, ecx
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0xfffffffe
and eax, 1
or eax, edx
xor ecx, eax
test ecx, eax
sete al
setne cl
cmp dword [0x10098e00], 0xa
setl dl
setge ah
or ah, cl
xor dl, al
mov al, dl
xor al, ah
test dl, dl
mov ecx, 0xad57c124
mov edx, 0x2f2e57af
cmovne ecx, edx
test ah, ah
mov esi, 0xad57c124
cmovne ecx, esi
jmp 0x1000ffc8
mov eax, dword [ebp - 0x30]
mov eax, dword [eax]
inc eax
mov dword [ebp - 0x6c], eax
mov eax, 0x65e227d2
jmp 0x1000cc94
mov eax, 0x3d453152
jmp 0x1000cc94
mov ecx, dword [0x10098dfc]
lea eax, [ecx + 1]
imul eax, ecx
test al, 1
sete cl
cmp dword [0x10098e00], 0xa
setge dl
setl ch
mov dh, ch
xor dh, al
and dh, ch
and dl, cl
and ch, al
or ch, dl
mov al, ch
xor al, dh
test ch, ch
mov ecx, 0x8d0e7ec5
mov esi, 0x5f7f03af
cmovne ecx, esi
test dh, dh
mov edx, 0x8d0e7ec5
cmove ecx, edx
test al, al
cmovne ecx, esi
mov eax, ecx
jmp 0x1000cc94
mov eax, dword [0x10098dfc]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
not eax
and ecx, 0x7e132b8d
mov edx, eax
and edx, 0x81ecd472
or edx, ecx
xor edx, 0x81ecd473
and eax, 0xfffffffe
or eax, edx
xor eax, 0x8f88f1b6
cmp eax, 0x70770e49
setne al
cmp dword [0x10098e00], 0xa
setge cl
mov edx, eax
xor dl, cl
or cl, al
mov eax, ecx
xor al, dl
mov eax, 0x8377abea
mov esi, 0xfd3f366d
cmovne eax, esi
test cl, cl
mov ecx, 0x8377abea
jmp 0x1001003e
mov ecx, dword [0x10098dfc]
lea eax, [ecx + 1]
imul eax, ecx
and al, 1
cmp dword [0x10098e00], 0xa
setge cl
mov edx, ecx
xor dl, al
or al, cl
mov ecx, eax
xor cl, dl
test al, al
mov eax, 0x9b896e57
mov esi, 0x7847e543
cmovne eax, esi
test dl, dl
cmove eax, esi
test cl, cl
mov ecx, 0x9b896e57
cmove eax, ecx
jmp 0x1000cc94
cmp byte [ebp - 0x4d], 0
mov eax, 0x895b8fb
mov ecx, 0xd88b8294
cmovne eax, ecx
jmp 0x1000cc94
mov eax, dword [ebp - 0x8c]
inc eax
mov ecx, dword [ebp - 0x24]
mov dword [ecx], eax
mov eax, 0x17d450b1
jmp 0x1000cc94
mov eax, dword [ebp - 0x14]
mov eax, dword [eax]
add eax, 0xc
mov ecx, dword [ebp - 0x14]
mov dword [ecx], eax
mov eax, 0x7f400dc5
jmp 0x1000cc94
mov eax, dword [ebp - 0x28]
mov eax, dword [eax]
mov dword [ebp - 0x7c], eax
mov eax, 0xd46139e
jmp 0x1000cc94
mov eax, dword [ebp - 0x2c]
cmp dword [eax], 0
setne byte [ebp - 0x4c]
mov eax, 0xdc8722fd
jmp 0x1000cc94
mov ecx, dword [0x10098dfc]
lea eax, [ecx + 1]
imul eax, ecx
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0xfffffffe
and eax, 1
or eax, edx
xor ecx, eax
test ecx, eax
setne al
sete cl
cmp dword [0x10098e00], 0xa
setl dl
setge ah
and cl, ah
and dl, al
or dl, cl
or ah, al
mov al, ah
xor al, dl
test ah, ah
mov ecx, 0xaf49b103
mov esi, 0xd3a402ac
cmovne ecx, esi
test dl, dl
cmove ecx, esi
test al, al
mov eax, 0xaf49b103
jmp 0x100100d7
mov eax, 0x807140c3
jmp 0x1000cc94
mov ecx, dword [0x10098dfc]
lea eax, [ecx + 1]
imul eax, ecx
test al, 1
sete cl
cmp dword [0x10098e00], 0xa
setge dl
xor cl, dl
or al, dl
mov edx, ecx
xor dl, al
test al, 1
mov eax, 0x18201f5c
mov esi, 0xdec5af54
cmovne eax, esi
test cl, cl
cmovne eax, esi
not dl
test dl, 1
mov ecx, 0x18201f5c
cmove eax, ecx
jmp 0x1000cc94
mov eax, dword [0x10098dfc]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
not eax
and ecx, 0xa22e3000
mov edx, eax
and edx, 0x5dd1cfff
or edx, ecx
xor edx, 0x5dd1cffe
and eax, 0xfffffffe
or eax, edx
cmp eax, 0xffffffff
sete al
cmp dword [0x10098e00], 0xa
setl cl
xor al, cl
mov edx, eax
mov esi, 0x28808352
mov edi, 0x39da1b0a
cmovne esi, edi
not dl
test dl, cl
mov ebx, 0x28808352
cmove esi, ebx
test al, al
cmovne esi, edi
test dl, cl
cmovne esi, edi
mov eax, esi
jmp 0x1000cc94
mov eax, dword [0x10098dfc]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
not eax
and ecx, 0x6be9b845
mov edx, eax
and edx, 0x941647ba
or edx, ecx
xor edx, 0x941647bb
and eax, 0xfffffffe
or eax, edx
xor eax, 0xb7ec4814
xor eax, 0x4813b7eb
sete al
setne cl
cmp dword [0x10098e00], 0xa
setge dl
setl ah
mov ch, ah
xor ch, cl
and ch, ah
and dl, al
and ah, cl
or ah, dl
mov cl, ch
xor cl, ah
test ah, ah
mov eax, 0xdec5af54
mov esi, 0xc34a5551
cmovne eax, esi
test ch, ch
mov edx, 0xdec5af54
cmove eax, edx
test cl, cl
cmovne eax, esi
jmp 0x1000cc94
mov eax, dword [0x10098dfc]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
not eax
and ecx, 0x513acd6
mov edx, eax
and edx, 0xfaec5329
or edx, ecx
xor edx, 0xfaec5328
and eax, 0xfffffffe
or eax, edx
xor eax, 0xffffffff
sete al
setne cl
cmp dword [0x10098e00], 0xa
setl dl
setge ch
and al, ch
or ch, cl
and dl, cl
or dl, al
mov cl, dl
xor cl, ch
test dl, dl
mov eax, 0x48113683
mov edx, 0x170e40d8
cmovne eax, edx
test ch, ch
mov esi, 0x48113683
jmp 0x1000fece
mov eax, dword [ebp - 0x40]
push dword [eax]
call sub.WTSAPI32.dll_WTSFreeMemory
mov ecx, dword [0x10098dfc]
lea eax, [ecx + 1]
imul eax, ecx
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0x9728561b
and eax, 0x68d7a9e4
or eax, edx
xor eax, 0x9728561a
or eax, ecx
xor eax, 0xffffffff
sete al
setne cl
cmp dword [0x10098e00], 0xa
setl dl
setge ch
and al, ch
or ch, cl
and dl, cl
or dl, al
mov al, ch
xor al, dl
mov esi, 0xa8f5fb14
mov eax, 0x8e8b9d35
cmovne esi, eax
test dl, dl
mov eax, esi
mov edx, 0xa8f5fb14
cmovne eax, edx
test ch, ch
cmovne eax, esi
jmp 0x1000cc94
mov ecx, dword [0x10098dfc]
lea eax, [ecx + 1]
imul eax, ecx
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0xdbc51379
and eax, 0x243aec86
or eax, edx
xor eax, 0xdbc51378
or eax, ecx
cmp eax, 0xffffffff
sete al
cmp dword [0x10098e00], 0xa
setl cl
setge dl
xor dl, al
mov ah, cl
xor ah, al
or cl, al
xor cl, 1
or cl, ah
mov ch, dl
xor ch, cl
test cl, cl
mov eax, 0x28269f58
mov esi, 0x8e8c74d4
cmovne eax, esi
test dl, dl
cmovne eax, esi
test ch, ch
mov ecx, 0x28269f58
cmovne eax, ecx
jmp 0x1000cc94
mov eax, dword [ebp - 0x90]
cmp dword [eax], 0
mov eax, 0x85744763
mov ecx, 0x51406814
cmove eax, ecx
jmp 0x1000cc94
mov ecx, dword [0x10098dfc]
lea eax, [ecx - 1]
imul eax, ecx
test al, 1
sete cl
cmp dword [0x10098e00], 0xa
setl dl
setge ch
and cl, ch
or ch, al
and dl, al
or dl, cl
mov cl, dl
xor cl, ch
test dl, dl
mov eax, 0x1f468f21
mov edx, 0x546062ee
cmovne eax, edx
test ch, 1
mov esi, 0x1f468f21
cmovne eax, esi
test cl, 1
cmove eax, edx
jmp 0x1000cc94
mov eax, dword [ebp - 0x30]
mov ecx, dword [0x10098dfc]
lea eax, [ecx + 1]
imul eax, ecx
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0xb0169932
and eax, 0x4fe966cd
or eax, edx
xor eax, 0xb0169933
or eax, ecx
xor eax, 0xffffffff
sete al
setne cl
cmp dword [0x10098e00], 0xa
setl dl
setge ah
and al, ah
or ah, cl
and dl, cl
or dl, al
mov al, ah
xor al, dl
mov ecx, 0xccde6dee
mov esi, 0x6460b2b5
cmovne ecx, esi
test dl, dl
mov edx, ecx
mov esi, 0xccde6dee
jmp 0x1000ff43
mov eax, dword [0x10098dfc]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
not eax
and ecx, 0xf9a72c61
mov edx, eax
and edx, 0x658d39e
or edx, ecx
xor edx, 0x658d39f
and eax, 0xfffffffe
or eax, edx
xor eax, 0xdcfd7fbb
cmp eax, 0x23028044
sete al
cmp dword [0x10098e00], 0xa
setl cl
xor al, cl
mov edx, eax
mov esi, 0xf2c98cd7
mov edi, 0xd8aa6e51
cmovne esi, edi
not dl
test dl, cl
mov ebx, 0xf2c98cd7
cmove esi, ebx
test al, al
cmovne esi, edi
test dl, cl
mov eax, dword [ebp - 0x10]
cmovne esi, edi
mov eax, esi
jmp 0x1000cc94
mov eax, dword [ebp - 0x18]
push dword [ebp - 0x28]
xor ecx, ecx
inc ecx
push ecx
push ecx
push 0
push 0x2000000
push dword [eax]
call dword [sym.imp.ADVAPI32.dll_DuplicateTokenEx]
test eax, eax
setne byte [ebp - 0x4e]
mov ecx, dword [0x10098dfc]
lea eax, [ecx + 1]
imul eax, ecx
test al, 1
sete cl
cmp dword [0x10098e00], 0xa
setge dl
xor cl, dl
or al, dl
mov edx, ecx
xor dl, al
test al, 1
mov eax, 0xd5e2abb2
mov esi, 0xeb26874c
cmovne eax, esi
not dl
test cl, cl
cmovne eax, esi
test dl, 1
mov ecx, 0xd5e2abb2
cmove eax, ecx
jmp 0x1000cc94
cmp byte [ebp - 0x4b], 0
mov eax, 0x7abb5612
mov ecx, 0x7d240cbc
cmovne eax, ecx
jmp 0x1000cc94
mov eax, dword [ebp - 0x54]
mov eax, dword [ebp - 0x40]
mov ecx, dword [0x10098dfc]
lea eax, [ecx - 0x44271265]
imul eax, ecx
test al, 1
sete cl
cmp dword [0x10098e00], 0xa
setge dl
mov ch, dl
inc ch
and ch, al
and cl, dl
or cl, ch
or dl, al
mov eax, edx
xor al, cl
test al, 1
mov esi, 0xc0228693
mov eax, 0x53d0337e
cmovne esi, eax
test dl, 1
mov eax, 0xc0228693
cmovne eax, esi
test cl, 1
cmove eax, esi
jmp 0x1000cc94
mov ecx, dword [0x10098dfc]
lea eax, [ecx - 1]
imul eax, ecx
not al
or al, 0xfe
cmp al, 0xff
setne al
cmp dword [0x10098e00], 0xa
setge cl
mov edx, ecx
xor dl, al
or cl, al
mov eax, edx
xor al, cl
mov esi, 0x74f83ef3
mov eax, 0xfd797c40
cmovne esi, eax
test cl, cl
mov eax, 0x74f83ef3
cmovne eax, esi
jmp 0x100101fe
mov ecx, dword [0x10098dfc]
lea eax, [ecx + 1]
imul eax, ecx
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0x5980f311
and eax, 0xa67f0cee
or eax, edx
xor eax, 0x5980f310
or eax, ecx
cmp eax, 0xffffffff
sete al
cmp dword [0x10098e00], 0xa
setl cl
xor al, cl
mov edx, eax
xor dl, 1
and cl, dl
xor dl, cl
mov edx, 0xea638521
mov esi, 0x28808352
cmovne edx, esi
test al, al
mov eax, edx
mov esi, 0xea638521
cmovne eax, esi
test cl, cl
cmove eax, edx
jmp 0x1000cc94
mov eax, dword [ebp - 0x44]
mov eax, dword [0x10098dfc]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
not eax
and ecx, 0xce118e63
mov edx, eax
and edx, 0x31ee719c
or edx, ecx
xor edx, 0x31ee719d
and eax, 0xfffffffe
or eax, edx
xor eax, 0xdba2c0d9
xor eax, 0x245d3f26
sete al
setne cl
cmp dword [0x10098e00], 0xa
setl dl
setge ah
or ah, cl
xor dl, al
mov al, ah
xor al, dl
mov ecx, 0x5342f770
mov esi, 0xf5346ae
cmovne ecx, esi
test dl, dl
mov edx, ecx
mov esi, 0x5342f770
cmovne edx, esi
test ah, ah
cmovne edx, ecx
mov eax, edx
jmp 0x1000cc94
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x80], eax
mov eax, dword [0x10098dfc]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
not eax
and ecx, 0xe74d3d87
mov edx, eax
and edx, 0x18b2c278
or edx, ecx
xor edx, 0x18b2c279
and eax, 0xfffffffe
or eax, edx
xor eax, 0xffffffff
sete dl
setne al
cmp dword [0x10098e00], 0xa
setge ah
setl cl
mov ch, al
and ch, cl
inc al
and al, ah
or al, ch
mov ah, cl
xor ah, dl
or cl, dl
xor cl, 1
or cl, ah
mov edx, ecx
xor dl, al
mov edx, 0x5a2bd284
mov esi, 0x40dc1d11
cmovne edx, esi
test cl, cl
mov ecx, 0x5a2bd284
cmovne ecx, edx
test al, al
cmove ecx, edx
mov eax, ecx
jmp 0x1000cc94
mov eax, dword [ebp - 0x3c]
mov dword [eax], 1
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x1c]
mov eax, dword [0x10098dfc]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
not eax
and ecx, 0xd98873fa
mov edx, eax
and edx, 0x26778c05
or edx, ecx
xor edx, 0x26778c04
and eax, 0xfffffffe
or eax, edx
cmp eax, 0xffffffff
setne al
cmp dword [0x10098e00], 0xa
setge cl
mov edx, ecx
xor dl, al
or cl, al
mov eax, ecx
xor al, dl
mov eax, 0xafa4bca
mov esi, 0x12a25130
cmovne eax, esi
test cl, cl
mov ecx, 0xafa4bca
cmovne ecx, eax
test dl, dl
jmp 0x100100d7
mov eax, dword [ebp - 0x2c]
mov eax, dword [eax]
mov dword [ebp - 0x94], eax
mov eax, 0x58da95fa
jmp 0x1000cc94
mov eax, 0xb38f42a6
jmp 0x1000cc94
mov eax, dword [0x10098dfc]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
not eax
and ecx, 0x9d5d283c
mov edx, eax
and edx, 0x62a2d7c3
or edx, ecx
xor edx, 0x62a2d7c2
and eax, 0xfffffffe
or eax, edx
xor eax, 0xffffffff
sete dl
setne ah
cmp dword [0x10098e00], 0xa
setge al
setl cl
and ah, cl
and al, dl
or al, ah
mov ah, cl
xor ah, dl
or cl, dl
xor cl, 1
or cl, ah
mov edx, ecx
xor dl, al
test cl, cl
mov ecx, 0x60aeea71
mov esi, 0x57e25d6d
cmovne ecx, esi
test al, al
cmove ecx, esi
test dl, dl
mov eax, 0x60aeea71
cmove ecx, eax
mov eax, ecx
jmp 0x1000cc94
cmp byte [ebp - 0x48], 0
mov eax, 0xe3626181
mov ecx, 0xcac21342
cmovne eax, ecx
jmp 0x1000cc94
mov eax, dword [ebp - 0x24]
mov eax, 0xc42a87fe
jmp 0x1000cc94
mov eax, dword [ebp - 0x24]
mov eax, 0x5bcac0e0
jmp 0x1000cc94
mov eax, 0x5ddf75f8
jmp 0x1000cc94
mov eax, dword [0x10098dfc]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
not eax
and ecx, 0x8708da2a
mov edx, eax
and edx, 0x78f725d5
or edx, ecx
xor edx, 0x78f725d4
and eax, 0xfffffffe
or eax, edx
xor eax, 0x4aeaabc5
xor eax, 0xb515543a
sete dl
setne ah
cmp dword [0x10098e00], 0xa
setge cl
setl al
and ah, al
and cl, dl
or cl, ah
mov ah, al
xor ah, dl
or al, dl
xor al, 1
or al, ah
mov edx, eax
xor dl, cl
test al, al
mov eax, 0xb089aef7
mov esi, 0x82e6bbd
cmovne eax, esi
test cl, cl
cmove eax, esi
test dl, dl
mov ecx, 0xb089aef7
cmove eax, ecx
jmp 0x1000cc94
mov eax, dword [0x10098dfc]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
not eax
and ecx, 0x45c53d72
mov edx, eax
and edx, 0xba3ac28d
or edx, ecx
xor edx, 0xba3ac28c
and eax, 0xfffffffe
or eax, edx
xor eax, 0x9637afc
cmp eax, 0xf69c8503
sete al
cmp dword [0x10098e00], 0xa
setl cl
xor al, cl
mov edx, eax
xor dl, 1
and cl, dl
xor dl, cl
test al, al
mov eax, 0x48113683
mov esi, 0x91b680e8
cmovne eax, esi
test cl, cl
mov ecx, 0x48113683
cmove eax, ecx
test dl, dl
cmove eax, esi
jmp 0x1000cc94
mov eax, 0xccde6dee
jmp 0x1000cc94
mov ecx, dword [0x10098dfc]
lea eax, [ecx - 1]
imul eax, ecx
and al, 1
cmp dword [0x10098e00], 0xa
setge cl
mov edx, ecx
xor dl, al
or al, cl
mov ecx, edx
xor cl, al
test al, al
mov eax, 0x73e15cee
mov esi, 0x5f742dd5
cmovne eax, esi
test dl, dl
cmove eax, esi
test cl, cl
mov ecx, 0x73e15cee
cmove eax, ecx
jmp 0x1000cc94
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
xor edx, edx
mov dword [eax], edx
mov eax, dword [ebp - 0x2c]
mov eax, dword [ebp - 0x2c]
mov dword [eax], edx
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x58]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x20]
mov dword [ecx], eax
mov eax, dword [ebp - 0x30]
mov eax, dword [ebp - 0x30]
mov dword [eax], edx
mov eax, 0xcca9ea4d
jmp 0x1000cc94
mov eax, dword [ebp - 0x28]
mov eax, dword [eax]
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x10]
mov dword [ebp - 0x78], eax
mov eax, 0x4bff705d
jmp 0x1000cc94
mov eax, 0x16e7d39e
jmp 0x1000cc94
cmp byte [ebp - 0x4e], 0
mov eax, 0xa18f328
mov ecx, 0xb64e234
cmovne eax, ecx
jmp 0x1000cc94
mov eax, dword [ebp - 0x34]
mov ecx, dword [0x10098dfc]
lea eax, [ecx + 1]
imul eax, ecx
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0xfffffffe
and eax, 1
or eax, edx
xor ecx, eax
test ecx, eax
sete al
setne cl
cmp dword [0x10098e00], 0xa
setge dl
setl ah
mov ch, ah
xor ch, cl
and ch, ah
and dl, al
and ah, cl
or ah, dl
mov cl, ah
xor cl, ch
test ah, ah
mov eax, 0x86be0341
mov edx, 0x3d453152
cmovne eax, edx
test ch, ch
mov esi, 0x86be0341
cmove eax, esi
test cl, cl
cmovne eax, edx
jmp 0x1000cc94
mov ecx, dword [0x10098dfc]
lea eax, [ecx + 1]
imul eax, ecx
and al, 1
cmp dword [0x10098e00], 0xa
setge cl
mov edx, ecx
xor dl, al
or al, cl
mov ecx, eax
xor cl, dl
mov ecx, 0x11893d5b
mov esi, 0x48373b70
cmovne ecx, esi
test al, al
mov eax, 0x11893d5b
cmovne eax, ecx
test dl, dl
cmove eax, ecx
jmp 0x1000cc94
mov eax, 0xc4f440b8
jmp 0x1000cc94
mov ecx, dword [0x10098dfc]
lea eax, [ecx + 1]
imul eax, ecx
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0xfffffffe
and eax, 1
or eax, edx
not eax
or eax, ecx
cmp eax, 0xffffffff
sete cl
cmp dword [0x10098e00], 0xa
setl dl
xor cl, dl
mov ch, cl
mov eax, 0x606e1d31
mov esi, 0x2b7b346
cmovne eax, esi
not ch
test ch, dl
mov edi, 0x606e1d31
cmove eax, edi
test cl, cl
cmovne eax, esi
test ch, dl
cmovne eax, esi
jmp 0x1000cc94
cmp byte [ebp - 0x49], 0
mov eax, 0x1e99bd4a
mov ecx, 0x700449fc
cmovne eax, ecx
jmp 0x1000cc94
mov eax, 0xc0228693
jmp 0x1000cc94
mov eax, dword [0x10098dfc]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
not eax
and ecx, 0xaa1976b0
mov edx, eax
and edx, 0x55e6894f
or edx, ecx
xor edx, 0x55e6894e
and eax, 0xfffffffe
or eax, edx
cmp eax, 0xffffffff
setne al
cmp dword [0x10098e00], 0xa
setge cl
setl dl
xor dl, al
or cl, al
mov eax, edx
xor al, cl
mov eax, 0x6460b2b5
mov esi, 0xda15103b
cmovne eax, esi
test cl, cl
mov ecx, 0xda15103b
cmovne ecx, eax
test dl, dl
cmovne ecx, eax
mov eax, ecx
jmp 0x1000cc94
push dword [ebp - 0x7c]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov ecx, dword [0x10098dfc]
lea eax, [ecx + 1]
imul eax, ecx
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0xdfe6642a
and eax, 0x20199bd5
or eax, edx
xor eax, 0x20199bd4
xor ecx, eax
test ecx, eax
sete al
setne cl
cmp dword [0x10098e00], 0xa
setge dl
setl ah
mov ch, ah
xor ch, cl
and ch, ah
and dl, al
and ah, cl
or ah, dl
mov al, ch
xor al, ah
test ah, ah
mov edx, 0xad57c124
mov esi, 0x6596b187
cmovne edx, esi
test ch, ch
mov ecx, 0xad57c124
cmove edx, ecx
test al, al
cmovne edx, esi
mov eax, edx
jmp 0x1000cc94
mov eax, 0x6eac3bab
jmp 0x1000cc94
mov ecx, dword [0x10098dfc]
lea eax, [ecx + 1]
imul eax, ecx
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0xfffffffe
and eax, 1
or eax, edx
not eax
or eax, ecx
xor eax, 0xffffffff
setne cl
sete dl
cmp dword [0x10098e00], 0xa
setl al
setge ah
and ah, dl
and cl, al
or cl, ah
mov ah, al
xor ah, dl
or al, dl
xor al, 1
or al, ah
mov edx, eax
xor dl, cl
test al, al
mov eax, 0x87830e81
mov esi, 0xabcd4cdc
cmovne eax, esi
test cl, cl
cmove eax, esi
test dl, dl
mov ecx, 0x87830e81
cmove eax, ecx
jmp 0x1000cc94
mov eax, dword [ebp - 0x10]
mov eax, 0x3cd4914f
jmp 0x1000cc94
mov eax, dword [ebp - 0x14]
mov eax, 0x7b93e1fc
jmp 0x1000cc94
mov eax, 0xb81c49b2
jmp 0x1000cc94
mov ecx, dword [0x10098dfc]
lea eax, [ecx + 1]
imul eax, ecx
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0x3605907d
and eax, 0xc9fa6f82
or eax, edx
xor eax, 0xc9fa6f83
xor ecx, eax
test ecx, eax
sete al
cmp dword [0x10098e00], 0xa
setl cl
xor al, cl
mov edx, eax
mov esi, 0x8d0e7ec5
mov edi, 0x4ce4fd93
cmovne esi, edi
not dl
test dl, cl
cmovne esi, edi
test al, al
mov eax, esi
cmovne eax, edi
test dl, cl
cmove eax, esi
jmp 0x1000cc94
mov eax, 0x55637b9f
jmp 0x1000cc94
mov eax, dword [0x10098dfc]
lea ecx, [eax + 1]
imul ecx, eax
test cl, 1
sete dl
cmp dword [0x10098e00], 0xa
setl ah
setge al
and dl, al
or al, cl
and ah, cl
or ah, dl
mov ecx, eax
xor cl, ah
test cl, 1
mov ecx, 0x3cd4914f
mov edx, 0xf2c98cd7
cmovne ecx, edx
test ah, ah
mov edx, ecx
mov esi, 0x3cd4914f
cmovne edx, esi
test al, 1
cmovne edx, ecx
mov eax, edx
jmp 0x1000cc94
mov eax, dword [ebp - 0x3c]
mov dword [eax], 2
mov eax, 0x99bec9df
jmp 0x1000cc94
mov ecx, dword [0x10098dfc]
lea eax, [ecx - 1]
imul eax, ecx
test al, 1
sete cl
cmp dword [0x10098e00], 0xa
setge dl
setl ch
and ch, al
and cl, dl
or cl, ch
or dl, al
mov ch, dl
xor ch, cl
test dl, 1
mov eax, 0xfd08152e
mov edx, 0x708c2a03
cmovne eax, edx
test cl, cl
cmove eax, edx
test ch, 1
mov ecx, 0xfd08152e
cmove eax, ecx
jmp 0x1000cc94
mov eax, dword [ebp - 0x68]
mov eax, 0x3d147623
jmp 0x1000cc94
cmp eax, 0xafa4bca
jne 0x1000cc94
mov eax, dword [ebp - 0x98]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret