Function at 0x10075871
Capabilities:
Enumerate processes via ntquerysysteminformation
Get system information on windows

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x7c
mov eax, dword [0x10099184]
lea edx, [eax - 1]
imul edx, eax
test dl, 1
mov eax, dword [0x10099188]
sete byte [ebp - 0x29]
cmp eax, 0xa
setl byte [ebp - 0x2a]
mov dword [ebp - 0x48], ecx
mov eax, 0xeb59d7ac
cmp eax, 0x6c0511
jle 0x10075905
cmp eax, 0x35083c8f
jle 0x100759d6
cmp eax, 0x5e52d470
jg 0x10075aca
cmp eax, 0x4efc33fc
jg 0x10075cbc
cmp eax, 0x4177bb21
jg 0x100760df
cmp eax, 0x3bfad745
jg 0x10076760
cmp eax, 0x35083c90
je 0x1007714d
cmp eax, 0x39f3917e
je 0x10077157
cmp eax, 0x3b84703c
jne 0x100758a0
mov eax, dword [ebp - 0x20]
mov eax, 0x7769f4f
jmp 0x100758a0
cmp eax, 0xca993296
jg 0x10075a3b
cmp eax, 0x9ee1c781
jle 0x10075b61
cmp eax, 0xb24ed6df
jg 0x10075d19
cmp eax, 0xa715ad67
jg 0x10076118
cmp eax, 0xa3af6688
jg 0x100767dc
cmp eax, 0x9ee1c782
je 0x100771c3
cmp eax, 0x9f9899d0
je 0x100771cd
cmp eax, 0xa39d70e4
jne 0x100758a0
cmp dword [ebp - 0x44], 0
setne byte [ebp - 0x31]
mov ecx, dword [0x10099184]
lea eax, [ecx + 1]
imul eax, ecx
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0x6c951d8d
and eax, 0x936ae272
or eax, edx
xor eax, 0x6c951d8c
or eax, ecx
xor eax, 0xffffffff
sete al
setne cl
cmp dword [0x10099188], 0xa
setge dl
setl ah
mov ch, ah
xor ch, cl
and ch, ah
and dl, al
and ah, cl
or ah, dl
mov al, ah
xor al, ch
test ah, ah
mov edx, 0x2984bfdb
mov edi, 0x64523623
cmovne edx, edi
test ch, ch
mov ecx, 0x2984bfdb
cmove edx, ecx
test al, al
cmovne edx, edi
mov eax, edx
jmp 0x100758a0
cmp eax, 0x1e8e75db
jle 0x10075c0d
cmp eax, 0x28025cbb
jg 0x10075d95
cmp eax, 0x22d6fec5
jg 0x10076198
cmp eax, 0x20075f4d
jg 0x10076807
cmp eax, 0x1e8e75dc
je 0x100771e3
cmp eax, 0x1ef78372
je 0x10077143
cmp eax, 0x1f24b784
jne 0x100758a0
mov eax, dword [ebp - 0x80]
cmp eax, 4
mov eax, 0x3bfad746
mov ecx, 0x3b84703c
cmove eax, ecx
jmp 0x100758a0
cmp eax, 0xea4e799e
jle 0x10075c70
cmp eax, 0xf5845056
jg 0x10075e3a
cmp eax, 0xee89a196
jg 0x10076226
cmp eax, 0xeb5dc896
jg 0x10076879
cmp eax, 0xea4e799f
je 0x10077139
cmp eax, 0xeab69446
je 0x100771ed
cmp eax, 0xeb59d7ac
jne 0x100758a0
mov al, byte [ebp - 0x29]
mov dl, byte [ebp - 0x2a]
mov ecx, eax
xor cl, 1
mov ah, dl
xor ah, 1
and dl, cl
or cl, ah
and ah, al
or ah, dl
mov edx, ecx
xor dl, ah
test ah, 1
mov eax, 0xeb5dc897
mov edi, 0x10ee492f
cmovne eax, edi
test cl, 1
mov ecx, 0xeb5dc897
cmovne eax, ecx
test dl, 1
cmove eax, edi
jmp 0x100758a0
cmp eax, 0x72cc376d
jle 0x10075ec8
cmp eax, 0x782074e0
jg 0x10076265
cmp eax, 0x77502513
jg 0x100768a4
cmp eax, 0x72cc376e
je 0x100771f7
cmp eax, 0x74b8ffea
je 0x1007727a
cmp eax, 0x76d1b05e
jne 0x100758a0
mov ecx, dword [0x10099184]
lea eax, [ecx - 1]
imul eax, ecx
not al
or al, 0xfe
cmp al, 0xff
setne al
cmp dword [0x10099188], 0xa
setge cl
setl dl
and dl, al
mov ch, al
inc ch
and ch, cl
or ch, dl
or cl, al
mov edx, ecx
xor dl, ch
test cl, cl
mov eax, 0xf5845057
mov edi, 0xb543102b
cmovne eax, edi
test ch, ch
cmove eax, edi
test dl, dl
mov ecx, 0xf5845057
cmove eax, ecx
jmp 0x100758a0
cmp eax, 0x8dff58e4
jle 0x10075f14
cmp eax, 0x950f7dc3
jg 0x1007629b
cmp eax, 0x92bdfe0b
jg 0x10076925
cmp eax, 0x8dff58e5
je 0x10077287
cmp eax, 0x8f0e0aa9
je 0x100772ab
cmp eax, 0x9114e2b2
jne 0x100758a0
mov ecx, dword [0x10099184]
lea eax, [ecx + 1]
imul eax, ecx
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0x84714f0e
and eax, 0x7b8eb0f1
or eax, edx
xor eax, 0x84714f0f
or eax, ecx
xor eax, 0xffffffff
sete al
setne cl
cmp dword [0x10099188], 0xa
setge dl
setl ah
mov ch, ah
xor ch, cl
and ch, ah
and dl, al
and ah, cl
or ah, dl
mov cl, ch
xor cl, ah
test ah, ah
mov eax, 0xeb5dc897
mov edx, 0x9964861
cmovne eax, edx
test ch, ch
mov edi, 0xeb5dc897
cmove eax, edi
jmp 0x10077e88
cmp eax, 0xc9edcba
jle 0x10075f9d
cmp eax, 0x118a7b70
jg 0x10076329
cmp eax, 0x106b42cd
jg 0x100769a4
cmp eax, 0xc9edcbb
je 0x100772c2
cmp eax, 0xfc19c92
je 0x1007731f
cmp eax, 0x10090aaa
jne 0x100758a0
mov eax, dword [ebp - 0x10]
mov eax, dword [eax]
mov dword [eax + 4], 0x80
mov eax, dword [ebp - 0x10]
mov eax, dword [eax]
add eax, 4
mov dword [ebp - 0x74], eax
mov eax, 0x571051ed
jmp 0x100758a0
cmp eax, 0xdca844e9
jle 0x1007603a
cmp eax, 0xe5502157
jg 0x1007636f
cmp eax, 0xe3895c32
jg 0x100769cf
cmp eax, 0xdca844ea
je 0x10077329
cmp eax, 0xdedabfc5
je 0x10077336
cmp eax, 0xe2331859
jne 0x100758a0
mov eax, 0x234fd75f
jmp 0x100758a0
cmp eax, 0x54732330
jg 0x100763ca
cmp eax, 0x51067284
jg 0x100769fa
cmp eax, 0x4efc33fd
je 0x10077340
cmp eax, 0x4f1e1df6
je 0x1007735d
cmp eax, 0x4fd77c43
jne 0x100758a0
mov eax, dword [ebp - 0x28]
push dword [ebp - 0x1c]
push dword [ebp - 0x60]
push dword [eax]
push 5
call sub.NTDLL.dll_NtQuerySystemInformation
test eax, eax
mov eax, 0x790ab263
mov ecx, 0xef5d5b77
cmovns eax, ecx
jmp 0x100758a0
cmp eax, 0xbb05de24
jg 0x10076452
cmp eax, 0xb543102a
jg 0x10076a25
cmp eax, 0xb24ed6e0
je 0x100773c6
cmp eax, 0xb43aa37d
je 0x100773d0
cmp eax, 0xb4e1e227
jne 0x100758a0
mov eax, dword [0x10099184]
lea ecx, [eax + 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
setne al
cmp dword [0x10099188], 0xa
setge cl
mov edx, ecx
or dl, al
xor cl, al
mov eax, edx
xor al, cl
mov edi, 0x661fe46f
mov eax, 0xdca844ea
cmovne edi, eax
test cl, cl
mov eax, edi
mov ecx, 0x661fe46f
jmp 0x100786d8
cmp eax, 0x2c9e7f9d
jg 0x100764f0
cmp eax, 0x298d4e75
jg 0x10076aae
cmp eax, 0x28025cbc
je 0x100773f1
cmp eax, 0x2867ea6f
je 0x10077454
cmp eax, 0x2984bfdb
jne 0x100758a0
mov eax, dword [0x10099184]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
not eax
and ecx, 0x2281c6b8
mov edx, eax
and edx, 0xdd7e3947
or edx, ecx
xor edx, 0xdd7e3946
and eax, 0xfffffffe
or eax, edx
xor eax, 0x6a943dd9
xor eax, 0x956bc226
sete al
setne cl
cmp dword [0x10099188], 0xa
setl dl
setge ah
and al, ah
or ah, cl
and dl, cl
or dl, al
mov al, dl
xor al, ah
test dl, dl
mov ecx, 0x20075f4e
mov edx, 0x782074e1
cmovne ecx, edx
test ah, ah
mov esi, 0x20075f4e
jmp 0x100773be
cmp eax, 0xfad6b91f
jg 0x10076582
cmp eax, 0xf9b0af08
jg 0x10076b3e
cmp eax, 0xf5845057
je 0x1007745e
cmp eax, 0xf64946e6
je 0x100774e6
cmp eax, 0xf6de8e44
jne 0x100758a0
mov eax, dword [ebp - 0x14]
mov dword [eax], 4
mov ecx, dword [0x10099184]
lea eax, [ecx + 1]
imul eax, ecx
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0xfffffffe
and eax, 1
or eax, edx
xor ecx, eax
test ecx, eax
setne al
cmp dword [0x10099188], 0xa
setge cl
mov edx, ecx
xor dl, al
or cl, al
mov eax, ecx
xor al, dl
mov edi, 0x94098eee
mov eax, 0x26517633
cmovne edi, eax
test cl, cl
mov eax, 0x94098eee
jmp 0x100775e6
cmp eax, 0x65c0ce03
jle 0x100765bb
cmp eax, 0x6ba0e841
jg 0x10076bbc
cmp eax, 0x65c0ce04
je 0x10077535
cmp eax, 0x661fe46f
je 0x10077586
cmp eax, 0x6b889e17
jne 0x100758a0
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x88]
mov dword [eax], ecx
mov eax, 0xf229a763
jmp 0x100758a0
cmp eax, 0x882c5d4d
jle 0x1007660e
cmp eax, 0x8b92d881
jg 0x10076bf0
cmp eax, 0x882c5d4e
je 0x100775ee
cmp eax, 0x88d9e757
je 0x10077604
cmp eax, 0x8adf69f7
jne 0x100758a0
mov ecx, dword [0x10099184]
lea eax, [ecx + 1]
imul eax, ecx
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0xfffffffe
and eax, 1
or eax, edx
xor ecx, eax
test ecx, eax
sete al
cmp dword [0x10099188], 0xa
setl cl
xor al, cl
mov edx, eax
not dl
mov edi, 0xc6df3d03
mov ebx, 0x21a9074d
cmovne edi, ebx
test dl, cl
mov ecx, 0xc6df3d03
cmove edi, ecx
cmovne edi, ebx
test al, al
jmp 0x100778ff
cmp eax, 0x7769f4e
jle 0x10076687
cmp eax, 0x9964860
jg 0x10076c1b
cmp eax, 0x7769f4f
je 0x10077619
cmp eax, 0x7ac7a0d
je 0x10077662
cmp eax, 0x7bd8507
jne 0x100758a0
mov eax, dword [0x10099184]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
not eax
and ecx, 0xd32773a
mov edx, eax
and edx, 0xf2cd88c5
or edx, ecx
xor edx, 0xf2cd88c4
and eax, 0xfffffffe
or eax, edx
xor eax, 0xd128442c
cmp eax, 0x2ed7bbd3
setne al
cmp dword [0x10099188], 0xa
setge cl
mov edx, ecx
or dl, al
xor cl, al
mov eax, edx
xor al, cl
mov eax, 0xe9a74a1b
mov edi, 0x9c9215f6
cmovne eax, edi
test cl, cl
mov ecx, eax
mov esi, 0xe9a74a1b
jmp 0x10077317
cmp eax, 0xd75b30f5
jle 0x10076721
cmp eax, 0xda04827e
jg 0x10076c4e
cmp eax, 0xd75b30f6
je 0x10077689
cmp eax, 0xd80e2b47
je 0x100776d8
cmp eax, 0xd95891da
jne 0x100758a0
mov eax, dword [0x10099184]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
not eax
and ecx, 0xcd08b3cc
mov edx, eax
and edx, 0x32f74c33
or edx, ecx
xor edx, 0x32f74c32
and eax, 0xfffffffe
or eax, edx
cmp eax, 0xffffffff
sete al
cmp dword [0x10099188], 0xa
setl dl
xor al, dl
mov dh, al
not dh
mov ecx, 0x248e3589
mov edi, 0x1e8e75dc
cmovne ecx, edi
test dh, dl
cmovne ecx, edi
test al, al
mov eax, ecx
cmovne eax, edi
test dh, dl
mov edx, dword [ebp - 0x20]
mov edx, dword [edx]
mov dword [ebp - 0x84], edx
cmove eax, ecx
jmp 0x100758a0
cmp eax, 0x48299b51
jg 0x10076c79
cmp eax, 0x4177bb22
je 0x10077731
cmp eax, 0x4454702a
je 0x10077139
cmp eax, 0x446c04e1
jne 0x100758a0
mov eax, dword [ebp - 0x14]
mov eax, 0xf355a16d
jmp 0x100758a0
cmp eax, 0xb189839f
jg 0x10076d11
cmp eax, 0xa715ad68
je 0x1007773b
cmp eax, 0xa83f12bc
je 0x1007779e
cmp eax, 0xa9155291
jne 0x100758a0
mov ecx, dword [0x10099184]
lea eax, [ecx + 1]
imul eax, ecx
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0xfffffffe
and eax, 1
or eax, edx
xor ecx, eax
test ecx, eax
sete al
cmp dword [0x10099188], 0xa
setl cl
xor al, cl
mov edx, eax
mov edi, 0xc9edcbb
mov ebx, 0x51479d03
cmovne edi, ebx
not dl
test dl, cl
cmovne edi, ebx
test al, al
mov eax, edi
cmovne eax, ebx
test dl, cl
cmove eax, edi
jmp 0x100758a0
cmp eax, 0x248e3588
jg 0x10076d48
cmp eax, 0x22d6fec6
je 0x10077806
cmp eax, 0x234fd75f
je 0x10077879
cmp eax, 0x2475c46e
jne 0x100758a0
mov ecx, dword [0x10099184]
lea eax, [ecx + 1]
imul eax, ecx
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0x46631d11
and eax, 0xb99ce2ee
or eax, edx
xor eax, 0x46631d10
or eax, ecx
xor eax, 0xffffffff
setne al
sete cl
cmp dword [0x10099188], 0xa
setge dl
setl ah
xor ah, cl
or dl, al
mov al, dl
xor al, ah
mov ecx, 0x51067285
mov edi, 0x99a418d3
cmovne ecx, edi
test dl, dl
mov edx, 0x51067285
cmovne edx, ecx
test ah, ah
jmp 0x10076d07
cmp eax, 0xf229a762
jg 0x10076d7f
cmp eax, 0xee89a197
je 0x10077886
cmp eax, 0xef5d5b77
je 0x10077898
cmp eax, 0xefe755d1
jne 0x100758a0
mov eax, dword [ebp - 0x14]
mov dword [eax], 4
mov eax, 0xf64946e6
jmp 0x100758a0
cmp eax, 0x7abd5a31
jg 0x10076de2
cmp eax, 0x782074e1
je 0x100778aa
cmp eax, 0x790ab263
je 0x10077909
cmp eax, 0x793109f9
jne 0x100758a0
mov eax, 0x5f384343
jmp 0x100758a0
cmp eax, 0x99a418d2
jg 0x10076e0d
cmp eax, 0x950f7dc4
je 0x1007791b
cmp eax, 0x96199d7f
je 0x10077dbb
cmp eax, 0x97ab5d1f
jne 0x100758a0
mov ecx, dword [0x10099184]
lea eax, [ecx + 1]
imul eax, ecx
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0x4a105898
and eax, 0xb5efa767
or eax, edx
xor eax, 0xb5efa766
xor ecx, eax
test ecx, eax
sete al
setne cl
cmp dword [0x10099188], 0xa
setl dl
setge ch
and al, ch
or ch, cl
and dl, cl
or dl, al
mov cl, dl
xor cl, ch
test dl, dl
mov eax, 0xd6eea992
mov edx, 0x14f87030
cmovne eax, edx
test ch, ch
mov edi, 0xd6eea992
jmp 0x100774de
cmp eax, 0x14f8702f
jg 0x10076e38
cmp eax, 0x118a7b71
je 0x10077987
cmp eax, 0x118e7136
je 0x100779ef
cmp eax, 0x146532d0
jne 0x100758a0
push 0x8000
push 0
push dword [ebp - 0x58]
call dword [sym.imp.KERNEL32.dll_VirtualFree]
mov eax, 0xd80e2b47
jmp 0x100758a0
cmp eax, 0xe9a74a1a
jg 0x10076ed7
cmp eax, 0xe5502158
je 0x100779f9
cmp eax, 0xe592ba41
je 0x10077a03
cmp eax, 0xe596a73d
jne 0x100758a0
push 4
push 0x1000
push dword [ebp - 0x5c]
push 0
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov ecx, dword [ebp - 0x28]
mov dword [ecx], eax
mov eax, dword [ebp - 0x28]
cmp dword [eax], 0
mov eax, 0x9abc1d15
mov ecx, 0x74b8ffea
cmove eax, ecx
jmp 0x100758a0
cmp eax, 0x571051ec
jg 0x10076f1c
cmp eax, 0x54732331
je 0x10077a10
cmp eax, 0x552c32ae
je 0x10077a1a
cmp eax, 0x569b0ab5
jne 0x100758a0
mov ecx, dword [0x10099184]
lea eax, [ecx + 1]
imul eax, ecx
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0x999bb4d5
and eax, 0x66644b2a
or eax, edx
xor eax, 0x999bb4d4
or eax, ecx
cmp eax, 0xffffffff
sete al
cmp dword [0x10099188], 0xa
setl cl
xor al, cl
mov edx, eax
xor dl, 1
and cl, dl
xor dl, cl
mov edx, 0xf6de8e44
mov edi, 0x26517633
cmovne edx, edi
test al, al
mov eax, edx
mov esi, 0xf6de8e44
jmp 0x10077e2b
cmp eax, 0xc5c365fc
jg 0x10076f52
cmp eax, 0xbb05de25
je 0x10077a7f
cmp eax, 0xbce28282
je 0x10077a92
cmp eax, 0xc24cfa29
jne 0x100758a0
mov eax, dword [0x10099184]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
not eax
and ecx, 0x31f2982e
mov edx, eax
and edx, 0xce0d67d1
or edx, ecx
xor edx, 0xce0d67d0
and eax, 0xfffffffe
or eax, edx
xor eax, 0x36108ef3
xor eax, 0xc9ef710c
sete al
setne cl
cmp dword [0x10099188], 0xa
setl dl
setge ch
or ch, cl
xor dl, al
mov cl, dl
xor cl, ch
test dl, dl
mov eax, 0xee717fc3
mov edi, 0x8825f8dd
cmovne eax, edi
test ch, ch
mov edx, 0xee717fc3
cmovne eax, edx
test cl, cl
cmove eax, edi
jmp 0x100758a0
cmp eax, 0x322fd0f9
jg 0x10076f7d
cmp eax, 0x2c9e7f9e
je 0x10077a9c
cmp eax, 0x2e469709
je 0x10077aa9
cmp eax, 0x2e76b1c7
jne 0x100758a0
mov eax, dword [0x10099184]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
not eax
and ecx, 0x270c4cf6
mov edx, eax
and edx, 0xd8f3b309
or edx, ecx
xor edx, 0xd8f3b308
and eax, 0xfffffffe
or eax, edx
xor eax, 0x439f865e
xor eax, 0xbc6079a1
sete cl
setne dl
cmp dword [0x10099188], 0xa
setge ah
setl ch
mov al, ch
xor al, dl
and al, ch
and ah, cl
and ch, dl
or ch, ah
mov cl, al
xor cl, ch
mov edx, 0x446c04e1
mov esi, 0xf355a16d
jmp 0x100773b7
cmp eax, 0xfbdb38df
jg 0x10076fb1
cmp eax, 0xfad6b920
je 0x10077ab3
cmp eax, 0xfb38fb7b
je 0x10077abd
cmp eax, 0xfb9c51a9
jne 0x100758a0
mov eax, dword [ebp - 0x1c]
mov eax, 0xededf010
jmp 0x100758a0
cmp eax, 0x5f5f689a
jg 0x10077038
cmp eax, 0x5e52d471
je 0x10077aca
cmp eax, 0x5f384343
je 0x10077ad4
cmp eax, 0x5f59df84
jne 0x100758a0
mov eax, dword [ebp - 0x38]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x10]
mov ecx, dword [ecx]
mov ecx, dword [ecx]
mov edx, dword [ebp - 0x10]
mov edx, dword [edx]
mov edi, dword [edx + 8]
lea ebx, [edi + 1]
mov dword [edx + 8], ebx
mov dword [ecx + edi*4], eax
mov eax, 0x35083c90
jmp 0x100758a0
cmp eax, 0x85d82fc7
jle 0x10077064
cmp eax, 0x85d82fc8
je 0x10077b40
cmp eax, 0x87e7cee8
je 0x10077b5e
cmp eax, 0x8825f8dd
jne 0x100758a0
mov eax, dword [0x10099184]
lea ecx, [eax - 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
setne al
cmp dword [0x10099188], 0xa
setge cl
mov edx, ecx
or dl, al
xor cl, al
mov ch, dl
xor ch, cl
test cl, cl
mov eax, 0xee717fc3
mov edi, 0xfbdb38e0
cmovne eax, edi
test dl, dl
mov edx, 0xee717fc3
cmovne eax, edx
test ch, ch
cmove eax, edi
jmp 0x100758a0
cmp eax, 0x23cd325
jle 0x10077087
cmp eax, 0x23cd326
je 0x10077b68
cmp eax, 0x6dcf077
je 0x10077bc5
cmp eax, 0x740d18c
jne 0x100758a0
mov eax, dword [ebp - 0x20]
mov eax, dword [eax]
mov dword [ebp - 0x3c], eax
mov ecx, dword [ebp - 0x18]
mov edx, dword [0x10099184]
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
not edx
mov edi, edx
and edi, 0xfffffffe
and eax, 1
or eax, edi
not eax
or eax, edx
xor eax, 0xffffffff
sete al
setne dl
cmp dword [0x10099188], 0xa
setl ah
setge dh
and al, dh
or dh, dl
and ah, dl
or ah, al
mov dl, ah
xor dl, dh
test ah, ah
mov eax, 0x3c6ba3cc
mov esi, 0x7f6ad518
cmovne eax, esi
mov ecx, dword [ecx]
test dh, dh
mov edi, 0x3c6ba3cc
cmovne eax, edi
mov dword [ebp - 0x40], ecx
jmp 0x1007744a
cmp eax, 0xd0f7cb0c
jle 0x10077119
cmp eax, 0xd0f7cb0d
je 0x10077bdb
cmp eax, 0xd1ce0dff
je 0x10077beb
cmp eax, 0xd6eea992
jne 0x100758a0
mov eax, dword [ebp - 0x14]
mov dword [eax], 0
mov eax, 0x14f87030
jmp 0x100758a0
cmp eax, 0x3bfad746
je 0x10077c59
cmp eax, 0x3c6ba3cc
je 0x10077c63
cmp eax, 0x3f37a04f
jne 0x100758a0
mov ecx, dword [0x10099184]
lea eax, [ecx + 1]
imul eax, ecx
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0x6817be3a
and eax, 0x97e841c5
or eax, edx
xor eax, 0x6817be3b
or eax, ecx
xor eax, 0xffffffff
sete cl
setne dl
cmp dword [0x10099188], 0xa
setge ah
setl ch
mov al, ch
xor al, dl
and al, ch
and ah, cl
and ch, dl
or ch, ah
mov cl, al
xor cl, ch
mov edx, 0x2e469709
mov esi, 0x7abd5a32
jmp 0x100773b7
cmp eax, 0xa3af6689
je 0x10077c73
cmp eax, 0xa4fd44ce
je 0x10077c7d
cmp eax, 0xa712f048
jne 0x100758a0
mov eax, 0x60774dab
jmp 0x100758a0
cmp eax, 0x20075f4e
je 0x10077ccd
cmp eax, 0x21680e12
je 0x10077cda
cmp eax, 0x21a9074d
jne 0x100758a0
mov ecx, dword [0x10099184]
mov eax, ecx
not eax
imul eax, ecx
and eax, 1
sete cl
cmp dword [0x10099188], 0xa
setl dl
setge ch
and cl, ch
or ch, al
and dl, al
or dl, cl
mov eax, edx
xor al, ch
test dl, dl
mov edx, 0xc6df3d03
mov esi, 0xb18983a0
cmovne edx, esi
test ch, ch
mov ecx, 0xc6df3d03
cmovne edx, ecx
test al, al
cmove edx, esi
mov eax, edx
jmp 0x100758a0
cmp eax, 0xeb5dc897
je 0x10077d42
cmp eax, 0xededf010
je 0x10077d4c
cmp eax, 0xee717fc3
jne 0x100758a0
mov eax, 0x8825f8dd
jmp 0x100758a0
cmp eax, 0x77502514
je 0x10077da5
cmp eax, 0x77e7b133
je 0x10077daf
cmp eax, 0x780b1fe3
jne 0x100758a0
mov ecx, dword [0x10099184]
lea eax, [ecx + 1]
imul eax, ecx
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0x50b51bb
and eax, 0xfaf4ae44
or eax, edx
xor eax, 0xfaf4ae45
xor ecx, eax
test ecx, eax
setne al
sete dl
cmp dword [0x10099188], 0xa
setl cl
setge ah
and dl, ah
and cl, al
or cl, dl
or ah, al
mov al, ah
xor al, cl
mov edx, 0xededf010
mov edi, 0xfb9c51a9
cmovne edx, edi
test ah, ah
mov eax, 0xededf010
jmp 0x10077871
cmp eax, 0x92bdfe0c
je 0x10077dc5
cmp eax, 0x94098eee
je 0x10077dd2
cmp eax, 0x9432a2cb
jne 0x100758a0
mov ecx, dword [0x10099184]
lea eax, [ecx + 1]
imul eax, ecx
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0xb099b0ad
and eax, 0x4f664f52
or eax, edx
xor eax, 0xb099b0ac
or eax, ecx
cmp eax, 0xffffffff
setne al
cmp dword [0x10099188], 0xa
setge cl
mov edx, ecx
or dl, al
xor cl, al
mov eax, edx
xor al, cl
mov eax, 0x65c0ce04
mov edi, 0x522ae63a
cmovne eax, edi
test cl, cl
mov ecx, eax
mov edi, 0x65c0ce04
cmovne ecx, edi
jmp 0x1007832c
cmp eax, 0x106b42ce
je 0x10077ddc
cmp eax, 0x10ee492f
je 0x10077e38
cmp eax, 0x11465f15
jne 0x100758a0
mov eax, 0x39f3917e
jmp 0x100758a0
cmp eax, 0xe3895c33
je 0x10077e92
cmp eax, 0xe4111073
je 0x10077eab
cmp eax, 0xe4185ce7
jne 0x100758a0
mov eax, 0xa39d70e4
jmp 0x100758a0
cmp eax, 0x51067285
je 0x10077f19
cmp eax, 0x51479d03
je 0x10077f23
cmp eax, 0x522ae63a
jne 0x100758a0
mov eax, 0x65c0ce04
jmp 0x100758a0
cmp eax, 0xb543102b
je 0x10077f8e
cmp eax, 0xb8cf90ee
je 0x10077fb4
cmp eax, 0xb8ecc300
jne 0x100758a0
mov eax, dword [0x10099184]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
not eax
and ecx, 0xa4fb5f8b
mov edx, eax
and edx, 0x5b04a074
or edx, ecx
xor edx, 0x5b04a075
and eax, 0xfffffffe
or eax, edx
cmp eax, 0xffffffff
setne al
cmp dword [0x10099188], 0xa
setge cl
setl dl
xor dl, al
or cl, al
mov ch, dl
xor ch, cl
test cl, cl
mov eax, 0x1a28f9fd
mov edi, 0xc79da6c
cmovne eax, edi
test dl, dl
cmovne eax, edi
test ch, ch
mov ecx, 0x1a28f9fd
cmovne eax, ecx
jmp 0x100758a0
cmp eax, 0x298d4e76
je 0x10078024
cmp eax, 0x2a9f49b4
je 0x1007802e
cmp eax, 0x2c2a22c8
jne 0x100758a0
mov ecx, dword [0x10099184]
lea eax, [ecx + 1]
imul eax, ecx
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0xe0ee488c
and eax, 0x1f11b773
or eax, edx
xor eax, 0xe0ee488d
or eax, ecx
xor eax, 0xffffffff
sete cl
setne al
cmp dword [0x10099188], 0xa
setl dl
xor al, dl
mov ah, dl
xor ah, cl
or dl, cl
xor dl, 1
or dl, ah
mov ecx, eax
xor cl, dl
test dl, dl
mov edx, 0xfad6b920
mov edi, 0x9ee1c782
cmovne edx, edi
test al, al
cmovne edx, edi
test cl, cl
mov eax, 0xfad6b920
cmovne edx, eax
mov eax, edx
jmp 0x100758a0
cmp eax, 0xf9b0af09
je 0x10078038
cmp eax, 0xf9cdb528
je 0x10076be6
cmp eax, 0xfa2d4c9e
jne 0x100758a0
mov eax, dword [ebp - 0x28]
mov ecx, dword [0x10099184]
lea eax, [ecx + 1]
imul eax, ecx
test al, 1
sete ch
cmp dword [0x10099188], 0xa
setl cl
setge dh
mov bl, ch
and bl, dh
mov dl, cl
and dl, al
xor dh, al
or cl, ch
or dl, bl
xor cl, 1
or cl, dh
mov ch, cl
xor ch, dl
test cl, 1
mov eax, 0x950f7dc4
mov edi, 0x92bdfe0c
cmovne eax, edi
test dl, dl
cmove eax, edi
test ch, 1
mov ecx, 0x950f7dc4
cmove eax, ecx
jmp 0x100758a0
cmp eax, 0x6ba0e842
je 0x10078054
cmp eax, 0x6d671be1
je 0x100780ca
cmp eax, 0x70bff529
jne 0x100758a0
mov eax, dword [ebp - 0x14]
mov dword [eax], 0
mov eax, 0x88d9e757
jmp 0x100758a0
cmp eax, 0x8b92d882
je 0x100780e0
cmp eax, 0x8cb3a56d
je 0x100780f6
cmp eax, 0x8d9eee64
jne 0x100758a0
mov eax, 0x70bff529
jmp 0x100758a0
cmp eax, 0x9964861
je 0x10078167
cmp eax, 0xc3d554a
je 0x10078171
cmp eax, 0xc79da6c
jne 0x100758a0
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x48]
mov dword [eax], ecx
mov eax, 0x1a28f9fd
jmp 0x100758a0
cmp eax, 0xda04827f
je 0x10078196
cmp eax, 0xdaef1f71
je 0x100781fa
cmp eax, 0xdb0568b4
jne 0x100758a0
mov eax, 0x6dcf077
jmp 0x100758a0
cmp eax, 0x48299b52
je 0x10078265
cmp eax, 0x49c5c5a0
je 0x1007827d
cmp eax, 0x4d22da88
jne 0x100758a0
mov eax, dword [ebp - 0x10]
mov eax, dword [eax]
shl dword [eax + 4], 1
mov eax, dword [ebp - 0x24]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x10]
mov ecx, dword [ecx]
mov dword [ecx], eax
mov ecx, dword [0x10099184]
lea eax, [ecx + 1]
imul eax, ecx
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0xfffffffe
and eax, 1
or eax, edx
not eax
or eax, ecx
xor eax, 0xffffffff
setne cl
sete dl
cmp dword [0x10099188], 0xa
setl al
setge ah
and dl, ah
and al, cl
or al, dl
or ah, cl
mov cl, ah
xor cl, al
mov ecx, 0xb24ed6e0
mov edx, 0x85d82fc8
cmovne ecx, edx
test ah, ah
mov edx, 0xb24ed6e0
cmovne edx, ecx
test al, al
cmove edx, ecx
mov eax, edx
jmp 0x100758a0
cmp eax, 0xb18983a0
je 0x100782df
cmp eax, 0xb1d1067d
je 0x10078338
cmp eax, 0xb206b5b3
jne 0x100758a0
cmp dword [ebp - 0x70], 0
mov eax, 0x5cf061f1
mov ecx, 0x10090aaa
cmove eax, ecx
jmp 0x100758a0
cmp eax, 0x248e3589
je 0x100783ac
cmp eax, 0x26517633
je 0x100783b9
cmp eax, 0x269c995b
jne 0x100758a0
cmp byte [ebp - 0x2b], 0
mov eax, 0x348e806a
mov ecx, 0x780b1fe3
cmovne eax, ecx
jmp 0x100758a0
cmp eax, 0xf229a763
je 0x100783cc
cmp eax, 0xf355a16d
je 0x100783e0
cmp eax, 0xf4b84ea5
jne 0x100758a0
mov ecx, dword [0x10099184]
lea eax, [ecx - 1]
imul eax, ecx
not al
or al, 0xfe
cmp al, 0xff
setne al
cmp dword [0x10099188], 0xa
setge cl
mov edx, ecx
xor dl, al
or cl, al
mov eax, ecx
xor al, dl
mov edi, 0xa715ad68
mov eax, 0xeab69446
cmovne edi, eax
test cl, cl
mov eax, 0xa715ad68
jmp 0x100775e6
cmp eax, 0x7abd5a32
je 0x1007843d
cmp eax, 0x7d6d46fd
je 0x100784a2
cmp eax, 0x7f6ad518
jne 0x100758a0
mov eax, 0x106b42ce
jmp 0x100758a0
cmp eax, 0x99a418d3
je 0x100784b6
cmp eax, 0x9abc1d15
je 0x100784c0
cmp eax, 0x9c9215f6
jne 0x100758a0
mov eax, 0xe9a74a1b
jmp 0x100758a0
cmp eax, 0x14f87030
je 0x1007850b
cmp eax, 0x18813478
je 0x1007857c
cmp eax, 0x1a28f9fd
jne 0x100758a0
push eax
mov eax, esp
mov dword [ebp - 0x14], eax
push eax
mov eax, esp
mov dword [ebp - 0x28], eax
push eax
mov eax, esp
mov dword [ebp - 0x18], eax
push eax
mov eax, esp
mov dword [ebp - 0x20], eax
push eax
mov eax, esp
mov dword [ebp - 0x38], eax
push eax
mov eax, esp
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x48]
mov dword [eax], ecx
mov eax, dword [0x10099184]
lea ecx, [eax + 0x1c4ecece]
not ecx
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
setne al
cmp dword [0x10099188], 0xa
setge cl
mov edx, ecx
xor dl, al
or cl, al
mov ch, dl
xor ch, cl
test cl, cl
mov eax, 0xdedabfc5
mov edi, 0xc79da6c
cmovne eax, edi
test dl, dl
cmove eax, edi
test ch, ch
mov ecx, 0xdedabfc5
cmove eax, ecx
jmp 0x100758a0
cmp eax, 0xe9a74a1b
je 0x10078586
cmp eax, 0xe9fe9852
je 0x100785fa
cmp eax, 0xea2322ec
jne 0x100758a0
mov eax, dword [ebp - 0x38]
mov eax, dword [ebp - 0x18]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x20]
mov ecx, dword [ecx]
shl ecx, 6
mov eax, dword [eax + ecx + 0xdc]
mov dword [ebp - 0x6c], eax
mov eax, 0x7ac7a0d
jmp 0x100758a0
cmp eax, 0x571051ed
je 0x10078604
cmp eax, 0x59634ab1
je 0x10077143
cmp eax, 0x5cf061f1
jne 0x100758a0
mov eax, dword [ebp - 0x10]
mov eax, dword [eax]
mov eax, dword [eax + 8]
mov dword [ebp - 0x78], eax
mov eax, 0x4efc33fd
jmp 0x100758a0
cmp eax, 0xc5c365fd
je 0x1007863c
cmp eax, 0xc6df3d03
je 0x1007865a
cmp eax, 0xc85b550e
jne 0x100758a0
mov eax, 0xc24cfa29
jmp 0x100758a0
cmp eax, 0x322fd0fa
je 0x10078664
cmp eax, 0x32eed26d
je 0x10078682
cmp eax, 0x348e806a
jne 0x100758a0
mov eax, dword [ebp - 0x14]
mov dword [eax], 0
mov eax, 0x3f37a04f
jmp 0x100758a0
cmp eax, 0xfbdb38e0
je 0x10078698
cmp eax, 0xfbf14648
je 0x100786e5
cmp eax, 0xff958e1c
jne 0x100758a0
push eax
mov eax, esp
mov dword [ebp - 0x10], eax
push eax
mov ecx, esp
mov edx, dword [0x10099184]
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
not edx
mov ebx, edx
and ebx, 0xfffffffe
and eax, 1
or eax, ebx
xor edx, eax
test edx, eax
sete al
setne ah
cmp dword [0x10099188], 0xa
setge dh
setl bl
mov dl, bl
xor dl, ah
and dl, bl
and dh, al
and bl, ah
or bl, dh
mov eax, edx
xor al, bl
mov edi, 0xa3af6689
mov esi, 0x9114e2b2
cmovne edi, esi
test bl, bl
mov eax, edi
cmovne eax, esi
mov dword [ebp - 0x1c], ecx
jmp 0x1007881b
cmp eax, 0x60774dab
je 0x10078757
cmp eax, 0x64523623
jne 0x10078839
cmp byte [ebp - 0x31], 0
mov eax, 0x9432a2cb
mov ecx, 0xf9b0af09
cmovne eax, ecx
jmp 0x100758a0
cmp eax, 0x82d143b8
je 0x100787b2
cmp eax, 0x84af813e
jne 0x100758a0
mov eax, dword [ebp - 0x18]
mov eax, 0x6ba0e842
jmp 0x100758a0
cmp eax, 0x6c0512
je 0x10078825
cmp eax, 0x1861b8a
jne 0x100758a0
mov eax, dword [0x10099184]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
not eax
and ecx, 0xc8259118
mov edx, eax
and edx, 0x37da6ee7
or edx, ecx
xor edx, 0x37da6ee6
and eax, 0xfffffffe
or eax, edx
xor eax, 0x70c0ebf8
xor eax, 0x8f3f1407
sete al
setne cl
cmp dword [0x10099188], 0xa
setge dl
setl ah
mov ch, ah
xor ch, cl
and ch, ah
and dl, al
and ah, cl
or ah, dl
mov al, ah
xor al, ch
test ah, ah
mov edx, 0x2984bfdb
mov esi, 0xa39d70e4
cmovne edx, esi
test ch, ch
mov ecx, 0x2984bfdb
cmove edx, ecx
test al, al
cmovne edx, esi
mov eax, edx
jmp 0x100758a0
cmp eax, 0xca993297
je 0x1007882f
cmp eax, 0xcc0a8656
jne 0x100758a0
mov eax, 0x4454702a
jmp 0x100758a0
mov eax, 0x2c9e7f9e
jmp 0x100758a0
mov eax, 0x5f59df84
jmp 0x100758a0
mov eax, 0x97ab5d1f
jmp 0x100758a0
mov eax, dword [ebp - 0x1c]
mov ecx, dword [0x10099184]
lea eax, [ecx + 1]
imul eax, ecx
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0xc10baa26
and eax, 0x3ef455d9
or eax, edx
xor eax, 0x3ef455d8
xor ecx, eax
test ecx, eax
sete al
cmp dword [0x10099188], 0xa
setl cl
setge dl
xor dl, al
mov ah, cl
xor ah, al
or cl, al
xor cl, 1
or cl, ah
mov eax, edx
xor al, cl
test cl, cl
mov ecx, 0x8cb3a56d
mov edi, 0xe5502158
cmovne ecx, edi
test dl, dl
cmovne ecx, edi
test al, al
mov eax, 0x8cb3a56d
jmp 0x1007832e
mov eax, 0x2c2a22c8
jmp 0x100758a0
cmp byte [ebp - 0x2e], 0
mov eax, 0x234fd75f
mov ecx, 0x322fd0fa
cmovne eax, ecx
jmp 0x100758a0
mov eax, 0x77e7b133
jmp 0x100758a0
mov eax, 0xa715ad68
jmp 0x100758a0
mov eax, dword [ebp - 0x10]
mov eax, dword [eax]
shl dword [eax + 4], 1
mov eax, dword [ebp - 0x24]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x10]
mov ecx, dword [ecx]
mov dword [ecx], eax
mov eax, dword [0x10099184]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
not eax
and ecx, 0xe9afadd5
mov edx, eax
and edx, 0x1650522a
or edx, ecx
xor edx, 0x1650522b
and eax, 0xfffffffe
or eax, edx
xor eax, 0xffffffff
sete al
setne cl
cmp dword [0x10099188], 0xa
setl dl
setge ch
and al, ch
or ch, cl
and dl, cl
or dl, al
mov cl, dl
xor cl, ch
test dl, dl
mov eax, 0xc5c365fd
mov esi, 0xda04827f
cmovne eax, esi
test ch, ch
mov edx, 0xc5c365fd
cmovne eax, edx
test cl, cl
cmove eax, esi
jmp 0x100758a0
mov eax, dword [ebp - 0x28]
mov eax, 0xfbf14648
jmp 0x100758a0
mov eax, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x1c]
mov dword [eax], 0
mov eax, dword [ebp - 0x10]
cmp dword [eax], 0
mov eax, 0xb43aa37d
mov ecx, 0x28025cbc
cmove eax, ecx
jmp 0x100758a0
mov eax, dword [ebp - 0x18]
mov eax, dword [ebp - 0x28]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x18]
mov dword [ecx], eax
mov eax, 0x87e7cee8
jmp 0x100758a0
mov ecx, dword [0x10099184]
lea eax, [ecx + 1]
imul eax, ecx
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0x1bfae8ab
and eax, 0xe4051754
or eax, edx
xor eax, 0xe4051755
xor ecx, eax
test ecx, eax
setne al
cmp dword [0x10099188], 0xa
setge cl
mov edx, ecx
or dl, al
xor cl, al
mov eax, edx
xor al, cl
mov eax, 0x4d22da88
mov esi, 0x85d82fc8
cmovne eax, esi
test cl, cl
mov ecx, eax
mov esi, 0x4d22da88
cmovne ecx, esi
jmp 0x1007832c
mov eax, 0x39f3917e
jmp 0x100758a0
mov eax, dword [ebp - 0x4c]
mov eax, 0x661fe46f
jmp 0x100758a0
mov eax, 0x8dff58e5
jmp 0x100758a0
mov eax, dword [ebp - 0x10]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x78]
cmp ecx, dword [eax + 4]
mov eax, 0xc3d554a
mov ecx, 0x1ef78372
cmovb eax, ecx
jmp 0x100758a0
mov eax, dword [0x10099184]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
not eax
and ecx, 0x137e6e3f
mov edx, eax
and edx, 0xec8191c0
or edx, ecx
xor edx, 0xec8191c1
and eax, 0xfffffffe
or eax, edx
xor eax, 0xffffffff
sete cl
setne dl
cmp dword [0x10099188], 0xa
setge ah
setl ch
mov al, ch
xor al, dl
and al, ch
and ah, cl
and ch, dl
or ch, ah
mov cl, al
xor cl, ch
mov edx, 0xd0f7cb0d
mov esi, 0xb8cf90ee
cmovne edx, esi
test ch, ch
mov ecx, edx
cmovne ecx, esi
jmp 0x100783a0
mov eax, 0x51479d03
jmp 0x100758a0
push dword [ebp - 0x1c]
xor eax, eax
push eax
push eax
push 5
call sub.NTDLL.dll_NtQuerySystemInformation
cmp eax, 0xc0000004
sete byte [ebp - 0x2b]
mov eax, 0x269c995b
jmp 0x100758a0
mov ecx, dword [0x10099184]
lea eax, [ecx + 1]
imul eax, ecx
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0x5d52529d
and eax, 0xa2adad62
or eax, edx
xor eax, 0xa2adad63
xor ecx, eax
test ecx, eax
sete al
cmp dword [0x10099188], 0xa
setl cl
xor al, cl
mov edx, eax
xor dl, 1
and cl, dl
xor dl, cl
test al, al
mov eax, 0xbb05de25
mov esi, 0x21680e12
cmovne eax, esi
test cl, cl
mov ecx, 0xbb05de25
cmove eax, ecx
test dl, dl
cmove eax, esi
jmp 0x100758a0
mov eax, 0x22d6fec6
jmp 0x100758a0
push dword [ebp - 0x50]
push dword [ebp - 0x54]
push 0
push dword [0x100990bc]
call dword [sym.imp.KERNEL32.dll_HeapReAlloc]
mov ecx, dword [ebp - 0x24]
mov dword [ecx], eax
mov eax, dword [ebp - 0x24]
cmp dword [eax], 0
sete byte [ebp - 0x30]
mov ecx, dword [0x10099184]
lea eax, [ecx + 1]
imul eax, ecx
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0x6dc8a30d
and eax, 0x92375cf2
or eax, edx
xor eax, 0x6dc8a30c
or eax, ecx
xor eax, 0xffffffff
sete al
setne dl
cmp dword [0x10099188], 0xa
setge ah
setl ch
mov cl, ch
xor cl, dl
and cl, ch
and ah, al
and ch, dl
or ch, ah
mov eax, ecx
xor al, ch
mov edx, 0xb543102b
mov edi, 0x6d671be1
cmovne edx, edi
test ch, ch
mov eax, edx
cmovne eax, edi
jmp 0x10077e2e
mov ecx, dword [0x10099184]
lea eax, [ecx + 1]
imul eax, ecx
test al, 1
sete cl
cmp dword [0x10099188], 0xa
setge dl
setl ch
and ch, al
and cl, dl
or cl, ch
or dl, al
mov ch, dl
xor ch, cl
test dl, 1
mov eax, 0x60774dab
mov edx, 0xa712f048
cmovne eax, edx
test cl, cl
cmove eax, edx
test ch, 1
mov ecx, 0x60774dab
cmove eax, ecx
jmp 0x100758a0
mov ecx, dword [0x10099184]
lea eax, [ecx + 1]
imul eax, ecx
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0xfffffffe
and eax, 1
or eax, edx
not eax
or eax, ecx
cmp eax, 0xffffffff
setne al
cmp dword [0x10099188], 0xa
setge cl
mov edx, ecx
xor dl, al
or cl, al
mov eax, ecx
xor al, dl
mov eax, 0x7bd8507
mov edi, 0x522ae63a
cmovne eax, edi
test cl, cl
mov ecx, 0x7bd8507
jmp 0x10078436
cmp dword [ebp - 0x4c], 0
setne byte [ebp - 0x2d]
mov ecx, dword [0x10099184]
lea eax, [ecx + 1]
imul eax, ecx
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0xd717e72b
and eax, 0x28e818d4
or eax, edx
xor eax, 0x28e818d5
xor ecx, eax
test ecx, eax
sete al
cmp dword [0x10099188], 0xa
setl cl
mov edx, ecx
xor dl, al
or cl, al
xor cl, 1
or cl, dl
mov eax, ecx
xor al, dl
mov edi, 0x8b92d882
mov eax, 0xdca844ea
cmovne edi, eax
test cl, cl
mov eax, 0x8b92d882
cmovne eax, edi
jmp 0x1007881b
cmp byte [ebp - 0x2f], 0
mov eax, 0x3b84703c
mov ecx, 0xea2322ec
cmovne eax, ecx
jmp 0x100758a0
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x14]
mov eax, dword [eax]
mov dword [ebp - 0x7c], eax
mov eax, 0xdb0568b4
jmp 0x100758a0
mov ecx, dword [0x10099184]
lea eax, [ecx + 1]
imul eax, ecx
test al, 1
sete dl
cmp dword [0x10099188], 0xa
setl cl
setge ch
and dl, ch
and cl, al
or cl, dl
or ch, al
mov al, ch
xor al, cl
test al, 1
mov eax, 0xa83f12bc
mov edx, 0x6c0512
cmovne eax, edx
test ch, 1
mov edx, 0xa83f12bc
cmovne edx, eax
jmp 0x1007772a
mov eax, dword [ebp - 0x6c]
mov ecx, dword [ebp - 0x38]
mov dword [ecx], eax
mov eax, dword [ebp - 0x38]
mov edi, dword [eax]
call dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
cmp edi, eax
mov eax, 0x7d6d46fd
mov ecx, 0x97ab5d1f
cmove eax, ecx
jmp 0x100758a0
mov ecx, dword [0x10099184]
lea eax, [ecx + 1]
imul eax, ecx
test al, 1
sete cl
cmp dword [0x10099188], 0xa
setl dl
setge ch
and cl, ch
or ch, al
and dl, al
or dl, cl
mov cl, ch
xor cl, dl
test dl, dl
mov eax, 0x18813478
mov edx, 0x569b0ab5
cmovne eax, edx
test ch, 1
mov edi, 0x18813478
cmovne eax, edi
test cl, 1
cmove eax, edx
jmp 0x100758a0
push 0x8000
push 0
push dword [ebp - 0x58]
call dword [sym.imp.KERNEL32.dll_VirtualFree]
mov ecx, dword [0x10099184]
lea eax, [ecx + 1]
imul eax, ecx
test al, 1
sete dl
cmp dword [0x10099188], 0xa
setge ch
setl dh
mov cl, dh
xor cl, al
and cl, dh
and ch, dl
and dh, al
or dh, ch
mov eax, ecx
xor al, dh
mov eax, 0x146532d0
mov edi, 0x77502514
cmovne eax, edi
test dh, dh
mov edx, eax
cmovne edx, edi
test cl, cl
jmp 0x1007815d
mov eax, 0x4fd77c43
jmp 0x100758a0
mov ecx, dword [0x10099184]
lea eax, [ecx + 1]
imul eax, ecx
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0xfffffffe
and eax, 1
or eax, edx
not eax
or eax, ecx
xor eax, 0xffffffff
sete cl
setne al
cmp dword [0x10099188], 0xa
setge dl
setl ah
and ah, al
and cl, dl
or cl, ah
or dl, al
mov ch, dl
xor ch, cl
test dl, dl
mov eax, 0xe9fe9852
mov edx, 0xeab69446
cmovne eax, edx
test cl, cl
cmove eax, edx
test ch, ch
mov ecx, 0xe9fe9852
cmove eax, ecx
jmp 0x100758a0
mov eax, dword [0x10099184]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
not eax
and ecx, 0x6e18cf1d
mov edx, eax
and edx, 0x91e730e2
or edx, ecx
xor edx, 0x91e730e3
and eax, 0xfffffffe
or eax, edx
xor eax, 0xffffffff
setne al
sete cl
cmp dword [0x10099188], 0xa
setge dl
xor cl, dl
or al, dl
mov edx, ecx
xor dl, al
test al, al
mov eax, 0x5e52d471
mov edi, 0x6c0512
cmovne eax, edi
test cl, cl
cmovne eax, edi
test dl, dl
mov ecx, 0x5e52d471
cmovne eax, ecx
jmp 0x100758a0
mov eax, dword [0x10099184]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
not eax
and ecx, 0x274df33f
mov edx, eax
and edx, 0xd8b20cc0
or edx, ecx
xor edx, 0xd8b20cc1
and eax, 0xfffffffe
or eax, edx
xor eax, 0xddf49367
xor eax, 0x220b6c98
sete dl
setne ah
cmp dword [0x10099188], 0xa
setl al
xor ah, al
mov ecx, edx
xor cl, al
xor ah, 1
or al, dl
xor al, 1
or al, ah
mov edx, eax
xor dl, cl
mov edx, 0xc24cfa29
mov edi, 0xc85b550e
cmovne edx, edi
test al, al
mov eax, 0xc24cfa29
cmovne eax, edx
jmp 0x10077e2e
mov eax, dword [ebp - 0x18]
mov eax, 0xb1d1067d
jmp 0x100758a0
mov eax, dword [ebp - 0x14]
mov eax, dword [eax]
mov dword [ebp - 0x80], eax
mov eax, 0x1f24b784
jmp 0x100758a0
mov eax, dword [ebp - 0x1c]
mov eax, dword [eax]
mov dword [ebp - 0x4c], eax
mov eax, 0xb4e1e227
jmp 0x100758a0
mov ecx, dword [0x10099184]
lea eax, [ecx + 1]
imul eax, ecx
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0xfffffffe
and eax, 1
or eax, edx
not eax
or eax, ecx
cmp eax, 0xffffffff
sete al
cmp dword [0x10099188], 0xa
setl cl
xor al, cl
mov edx, eax
mov edi, 0x20075f4e
mov ebx, 0xe4185ce7
cmovne edi, ebx
not dl
test dl, cl
mov esi, 0x20075f4e
cmove edi, esi
test al, al
cmovne edi, ebx
test dl, cl
mov eax, dword [ebp - 0x44]
cmovne edi, ebx
mov eax, edi
jmp 0x100758a0
mov eax, dword [ebp - 0x28]
mov eax, dword [eax]
mov dword [ebp - 0x58], eax
mov eax, 0x8adf69f7
jmp 0x100758a0
mov ecx, dword [ebp - 0x1c]
mov edx, dword [0x10099184]
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
not edx
mov edi, edx
and edi, 0x2f7e8d16
and eax, 0xd08172e9
or eax, edi
xor eax, 0x2f7e8d17
or eax, edx
cmp eax, 0xffffffff
setne al
cmp dword [0x10099188], 0xa
setge dl
setl dh
xor dh, al
or dl, al
mov bl, dh
xor bl, dl
test dl, dl
mov eax, 0xbce28282
mov edi, 0x92bdfe0c
cmovne eax, edi
mov ecx, dword [ecx]
test dh, dh
cmovne eax, edi
mov dword [ebp - 0x5c], ecx
test bl, bl
mov ecx, 0xbce28282
cmovne eax, ecx
jmp 0x100758a0
mov ecx, dword [0x10099184]
lea eax, [ecx + 1]
imul eax, ecx
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0xfffffffe
and eax, 1
or eax, edx
xor ecx, eax
test ecx, eax
sete dl
setne ah
cmp dword [0x10099188], 0xa
setge cl
setl al
and ah, al
and cl, dl
or cl, ah
mov ah, al
xor ah, dl
or al, dl
xor al, 1
or al, ah
mov edx, eax
xor dl, cl
test al, al
mov eax, 0xd95891da
mov edi, 0x248e3589
cmovne eax, edi
test cl, cl
cmove eax, edi
test dl, dl
mov ecx, 0xd95891da
cmove eax, ecx
jmp 0x100758a0
mov eax, 0x552c32ae
jmp 0x100758a0
mov eax, 0x8cb3a56d
jmp 0x100758a0
mov eax, dword [ebp - 0x1c]
mov eax, 0x82d143b8
jmp 0x100758a0
mov eax, 0x1ef78372
jmp 0x100758a0
mov ecx, dword [0x10099184]
lea eax, [ecx + 1]
imul eax, ecx
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0x8ad49e32
and eax, 0x752b61cd
or eax, edx
xor eax, 0x752b61cc
xor ecx, eax
test ecx, eax
sete al
setne cl
cmp dword [0x10099188], 0xa
setl dl
setge ah
and al, ah
or ah, cl
and dl, cl
or dl, al
mov al, ah
xor al, dl
mov ecx, 0x2e76b1c7
mov edi, 0xfb38fb7b
cmovne ecx, edi
test dl, dl
mov edx, ecx
mov esi, 0x2e76b1c7
cmovne edx, esi
jmp 0x100785ee
mov eax, dword [ebp - 0x14]
mov dword [eax], 1
mov eax, 0x21680e12
jmp 0x100758a0
mov eax, 0xe596a73d
jmp 0x100758a0
mov eax, dword [ebp - 0x38]
mov eax, 0xee89a197
jmp 0x100758a0
mov eax, 0x7abd5a32
jmp 0x100758a0
mov eax, 0x790ab263
jmp 0x100758a0
mov eax, dword [ebp - 0x14]
mov eax, 0x2e76b1c7
jmp 0x100758a0
mov eax, 0xe4111073
jmp 0x100758a0
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x3c]
cmp ecx, dword [eax + 4]
setb byte [ebp - 0x2f]
mov eax, dword [0x10099184]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
not eax
and ecx, 0x4eddfba
mov edx, eax
and edx, 0xfb122045
or edx, ecx
xor edx, 0xfb122044
and eax, 0xfffffffe
or eax, edx
cmp eax, 0xffffffff
setne al
cmp dword [0x10099188], 0xa
setge cl
mov edx, ecx
or dl, al
xor cl, al
mov eax, edx
xor al, cl
mov edi, 0x882c5d4e
mov eax, 0x4f1e1df6
cmovne edi, eax
test cl, cl
mov eax, edi
mov ecx, 0x882c5d4e
jmp 0x100786d8
mov eax, dword [ebp - 0x10]
mov eax, dword [eax]
shl dword [eax + 4], 1
mov eax, dword [ebp - 0x24]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x10]
mov ecx, dword [ecx]
mov dword [ecx], eax
mov eax, 0x4d22da88
jmp 0x100758a0
mov eax, 0xf229a763
jmp 0x100758a0
mov ecx, dword [0x10099184]
lea eax, [ecx + 1]
imul eax, ecx
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0xfffffffe
and eax, 1
or eax, edx
xor ecx, eax
test ecx, eax
setne al
sete cl
cmp dword [0x10099188], 0xa
setl dl
setge ah
and cl, ah
and dl, al
or dl, cl
or ah, al
mov al, ah
xor al, dl
test ah, ah
mov ecx, 0xd1ce0dff
mov edi, 0xca993297
cmovne ecx, edi
test dl, dl
cmove ecx, edi
test al, al
mov eax, 0xd1ce0dff
jmp 0x10078498
cmp dword [ebp - 0x7c], 0
mov eax, 0x2c9e7f9e
mov ecx, 0x54732331
cmove eax, ecx
jmp 0x100758a0
mov eax, dword [ebp - 0x40]
mov eax, dword [ebp - 0x3c]
mov eax, 0xb8cf90ee
jmp 0x100758a0
mov eax, dword [0x10099184]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
not eax
and ecx, 0x91086e20
mov edx, eax
and edx, 0x6ef791df
or edx, ecx
xor edx, 0x6ef791de
and eax, 0xfffffffe
or eax, edx
xor eax, 0xd0f9619a
xor eax, 0x2f069e65
sete al
setne cl
cmp dword [0x10099188], 0xa
setl dl
setge ah
and al, ah
or ah, cl
and dl, cl
or dl, al
mov al, ah
xor al, dl
mov ecx, 0x1861b8a
mov edi, 0xca993297
cmovne ecx, edi
test dl, dl
mov edx, ecx
mov edi, 0x1861b8a
jmp 0x100785eb
mov eax, 0x118a7b71
jmp 0x100758a0
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x18]
mov eax, 0x740d18c
jmp 0x100758a0
mov eax, 0xff958e1c
jmp 0x100758a0
mov ecx, dword [0x10099184]
lea eax, [ecx + 1]
imul eax, ecx
test al, 1
sete cl
cmp dword [0x10099188], 0xa
setl dl
setge ch
and cl, ch
or ch, al
and dl, al
or dl, cl
mov al, ch
xor al, dl
test dl, dl
mov edx, 0xfb38fb7b
mov edi, 0x2a9f49b4
cmovne edx, edi
test ch, 1
mov ecx, 0xfb38fb7b
cmovne edx, ecx
test al, 1
cmove edx, edi
mov eax, edx
jmp 0x100758a0
mov eax, dword [ebp - 0x44]
mov eax, 0x782074e1
jmp 0x100758a0
mov eax, dword [ebp - 0x14]
mov dword [eax], 1
mov ecx, dword [0x10099184]
lea eax, [ecx + 1]
imul eax, ecx
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0xfffffffe
and eax, 1
or eax, edx
xor ecx, eax
test ecx, eax
sete al
setne cl
cmp dword [0x10099188], 0xa
setge dl
setl ah
mov ch, ah
xor ch, cl
and ch, ah
and dl, al
and ah, cl
or ah, dl
mov cl, ch
xor cl, ah
test ah, ah
mov eax, 0xbb05de25
mov edx, 0xf4b84ea5
cmovne eax, edx
test ch, ch
mov esi, 0xbb05de25
cmove eax, esi
jmp 0x10077e88
mov eax, 0x10ee492f
jmp 0x100758a0
mov eax, dword [ebp - 0x1c]
cmp dword [eax], 0
setne byte [ebp - 0x2c]
mov ecx, dword [0x10099184]
lea eax, [ecx + 1]
imul eax, ecx
test al, 1
sete cl
cmp dword [0x10099188], 0xa
setge dl
setl ch
and ch, al
and cl, dl
or cl, ch
or dl, al
mov ch, dl
xor ch, cl
test dl, 1
mov eax, 0x2867ea6f
mov edx, 0xfb9c51a9
cmovne eax, edx
test cl, cl
cmove eax, edx
test ch, 1
mov ecx, 0x2867ea6f
cmove eax, ecx
jmp 0x100758a0
mov eax, 0x74b8ffea
jmp 0x100758a0
mov eax, dword [ebp - 0x84]
inc eax
mov ecx, dword [ebp - 0x20]
mov dword [ecx], eax
mov eax, 0x49c5c5a0
jmp 0x100758a0
mov eax, dword [ebp - 0x1c]
mov eax, 0x950f7dc4
jmp 0x100758a0
mov eax, 0xf9cdb528
jmp 0x100758a0
mov ecx, dword [0x10099184]
lea eax, [ecx + 1]
imul eax, ecx
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0xfffffffe
and eax, 1
or eax, edx
not eax
or eax, ecx
cmp eax, 0xffffffff
sete al
cmp dword [0x10099188], 0xa
setl cl
xor al, cl
mov edx, eax
xor dl, 1
and cl, dl
xor dl, cl
mov edx, 0x5f384343
mov esi, 0x4f1e1df6
cmovne edx, esi
test al, al
mov eax, edx
mov esi, 0x5f384343
cmovne eax, esi
test cl, cl
cmove eax, edx
jmp 0x100758a0
mov ecx, dword [0x10099184]
lea eax, [ecx + 1]
imul eax, ecx
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0xfffffffe
and eax, 1
or eax, edx
not eax
or eax, ecx
xor eax, 0xffffffff
setne al
sete cl
cmp dword [0x10099188], 0xa
setge dl
xor cl, dl
or al, dl
mov edx, ecx
xor dl, al
mov edx, 0xa3af6689
mov esi, 0xff958e1c
cmovne edx, esi
test al, al
mov eax, 0xff958e1c
cmovne eax, edx
test cl, cl
cmovne eax, edx
jmp 0x100758a0
mov eax, dword [ebp - 0x20]
mov eax, dword [ebp - 0x20]
xor ecx, ecx
mov dword [eax], ecx
mov eax, dword [ebp - 0x20]
mov dword [eax], ecx
mov eax, 0x96199d7f
jmp 0x100758a0
mov eax, dword [0x10099184]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
not eax
and ecx, 0xeb96ea20
mov edx, eax
and edx, 0x146915df
or edx, ecx
xor edx, 0x146915de
and eax, 0xfffffffe
or eax, edx
xor eax, 0xffffffff
sete dl
setne ah
cmp dword [0x10099188], 0xa
setge ch
setl cl
mov al, ch
xor ch, ah
and ah, cl
and al, dl
or al, ah
or cl, dl
xor cl, 1
or cl, ch
mov edx, ecx
xor dl, al
mov edx, 0x6ba0e842
mov edi, 0x84af813e
cmovne edx, edi
test cl, cl
mov ecx, 0x6ba0e842
jmp 0x1007839d
mov eax, 0x348e806a
jmp 0x100758a0
mov ecx, dword [0x10099184]
lea eax, [ecx + 1]
imul eax, ecx
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0xfffffffe
and eax, 1
or eax, edx
not eax
or eax, ecx
xor eax, 0xffffffff
sete dl
setne ah
cmp dword [0x10099188], 0xa
setge ch
setl al
mov cl, ch
xor ch, ah
and ah, al
and cl, dl
or cl, ah
or al, dl
xor al, 1
or al, ch
mov edx, eax
xor dl, cl
test al, al
mov eax, 0x72cc376e
mov esi, 0xc5c365fd
cmovne eax, esi
test cl, cl
cmove eax, esi
test dl, dl
mov ecx, 0x72cc376e
cmove eax, ecx
jmp 0x100758a0
push dword [ebp - 0x50]
push dword [ebp - 0x54]
push 0
push dword [0x100990bc]
call dword [sym.imp.KERNEL32.dll_HeapReAlloc]
mov ecx, dword [ebp - 0x24]
mov dword [ecx], eax
mov eax, dword [ebp - 0x24]
mov eax, 0xf5845057
jmp 0x100758a0
mov eax, dword [0x10099184]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
not eax
and ecx, 0x84ebe97
mov edx, eax
and edx, 0xf7b14168
or edx, ecx
xor edx, 0xf7b14169
and eax, 0xfffffffe
or eax, edx
xor eax, 0x10f1e961
cmp eax, 0xef0e169e
sete al
cmp dword [0x10099188], 0xa
setl cl
xor al, cl
mov edx, eax
not dl
mov edi, 0xd0f7cb0d
mov ebx, 0x793109f9
cmovne edi, ebx
test dl, cl
cmovne edi, ebx
test al, al
mov eax, edi
cmovne eax, ebx
test dl, cl
mov ecx, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x3c]
cmove eax, edi
jmp 0x100758a0
mov eax, 0x23cd326
jmp 0x100758a0
mov eax, 0x5f5f689b
jmp 0x100758a0
mov eax, dword [ebp - 0x18]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x18]
mov ecx, dword [ecx]
add eax, dword [ecx]
mov dword [ebp - 0x88], eax
mov eax, 0x6b889e17
jmp 0x100758a0
mov ecx, dword [ebp - 0x18]
mov eax, dword [0x10099184]
lea edx, [eax + 1]
imul edx, eax
mov eax, edx
not eax
and edx, 0xb206a75e
mov edi, eax
and edi, 0x4df958a1
or edi, edx
mov ecx, dword [ecx]
mov ecx, dword [ecx]
xor edi, 0x4df958a0
and eax, 0xfffffffe
or eax, edi
xor eax, 0x809f3bcf
xor eax, 0x7f60c430
setne dl
sete ah
cmp dword [0x10099188], 0xa
mov dword [ebp - 0x44], ecx
setl al
setge cl
and ah, cl
and al, dl
or al, ah
or cl, dl
mov edx, ecx
xor dl, al
mov edx, 0x298d4e76
mov edi, 0x84af813e
cmovne edx, edi
test cl, cl
mov ecx, 0x298d4e76
jmp 0x1007839d
cmp byte [ebp - 0x30], 0
mov eax, 0xa9155291
mov ecx, 0xdaef1f71
cmovne eax, ecx
jmp 0x100758a0
cmp byte [ebp - 0x2d], 0
mov eax, 0x790ab263
mov ecx, 0x8f0e0aa9
cmovne eax, ecx
jmp 0x100758a0
mov eax, dword [0x10099184]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
not eax
and ecx, 0xaea67f48
mov edx, eax
and edx, 0x515980b7
or edx, ecx
xor edx, 0x515980b6
and eax, 0xfffffffe
or eax, edx
xor eax, 0xffffffff
sete al
setne cl
cmp dword [0x10099188], 0xa
setge dl
setl ah
and ah, cl
and al, dl
or al, ah
or dl, cl
mov ecx, edx
xor cl, al
test dl, dl
mov edx, 0x118e7136
mov edi, 0xe5502158
cmovne edx, edi
test al, al
cmove edx, edi
test cl, cl
mov eax, 0x118e7136
cmove edx, eax
mov eax, edx
jmp 0x100758a0
mov eax, 0xb8ecc300
jmp 0x100758a0
mov eax, dword [ebp - 0x24]
mov eax, dword [ebp - 0x10]
mov eax, dword [eax]
mov eax, dword [eax + 4]
shl eax, 3
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x10]
mov eax, dword [eax]
mov eax, dword [eax]
mov dword [ebp - 0x54], eax
mov eax, 0x76d1b05e
jmp 0x100758a0
mov ecx, dword [0x10099184]
lea eax, [ecx + 1]
imul eax, ecx
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0x69d3e23c
and eax, 0x962c1dc3
or eax, edx
xor eax, 0x69d3e23d
or eax, ecx
xor eax, 0xffffffff
setne al
sete cl
cmp dword [0x10099188], 0xa
setge dl
xor cl, dl
or al, dl
mov edx, ecx
xor dl, al
test al, al
mov eax, 0x8d9eee64
mov edi, 0xc9edcbb
cmovne eax, edi
test cl, cl
cmovne eax, edi
test dl, dl
mov ecx, 0x8d9eee64
cmovne eax, ecx
jmp 0x100758a0
mov ecx, dword [0x10099184]
lea eax, [ecx + 1]
imul eax, ecx
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0xfffffffe
and eax, 1
or eax, edx
not eax
or eax, ecx
xor eax, 0xffffffff
setne cl
sete dl
cmp dword [0x10099188], 0xa
setl al
setge ah
and ah, dl
and cl, al
or cl, ah
mov ah, al
xor ah, dl
or al, dl
xor al, 1
or al, ah
mov edx, eax
xor dl, cl
test al, al
mov eax, 0xd75b30f6
mov edi, 0x18813478
cmovne eax, edi
test cl, cl
cmove eax, edi
test dl, dl
mov ecx, 0xd75b30f6
cmove eax, ecx
jmp 0x100758a0
mov eax, dword [ebp - 0x64]
cmp eax, dword [ebp - 0x68]
mov eax, 0xe4111073
mov ecx, 0xe3895c33
cmove eax, ecx
jmp 0x100758a0
mov ecx, dword [0x10099184]
lea eax, [ecx + 1]
imul eax, ecx
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0xfb1751c0
and eax, 0x4e8ae3f
or eax, edx
xor eax, 0x4e8ae3e
xor ecx, eax
test ecx, eax
setne al
cmp dword [0x10099188], 0xa
setge cl
mov edx, ecx
xor dl, al
or cl, al
mov ch, cl
xor ch, dl
test cl, cl
mov eax, 0x740d18c
mov esi, 0x3c6ba3cc
cmovne eax, esi
test dl, dl
cmove eax, esi
test ch, ch
mov ecx, 0x740d18c
cmove eax, ecx
jmp 0x100758a0
mov ecx, dword [0x10099184]
lea eax, [ecx + 1]
imul eax, ecx
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0xfffffffe
and eax, 1
or eax, edx
xor ecx, eax
test ecx, eax
setne al
cmp dword [0x10099188], 0xa
setge cl
setl dl
xor dl, al
or cl, al
mov eax, edx
xor al, cl
mov eax, 0x146532d0
mov edi, 0xd80e2b47
cmovne eax, edi
test cl, cl
mov ecx, 0xd80e2b47
cmovne ecx, eax
test dl, dl
cmovne ecx, eax
mov eax, ecx
jmp 0x100758a0
mov ecx, dword [0x10099184]
lea eax, [ecx + 1]
imul eax, ecx
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0x5813a140
and eax, 0xa7ec5ebf
or eax, edx
xor eax, 0x5813a141
or eax, ecx
xor eax, 0xffffffff
sete dl
setne ah
cmp dword [0x10099188], 0xa
setge ch
setl cl
mov al, ch
xor ch, ah
and ah, cl
and al, dl
or al, ah
or cl, dl
xor cl, 1
or cl, ch
mov edx, ecx
xor dl, al
mov edx, 0x2c2a22c8
mov edi, 0x9ee1c782
cmovne edx, edi
test cl, cl
mov ecx, 0x2c2a22c8
cmovne ecx, edx
test al, al
cmove ecx, edx
mov eax, ecx
jmp 0x100758a0
mov eax, dword [ebp - 0x20]
mov eax, 0xd95891da
jmp 0x100758a0
mov eax, dword [ebp - 0x14]
mov dword [eax], 4
mov eax, 0xf6de8e44
jmp 0x100758a0
mov eax, dword [ebp - 0x18]
cmp dword [eax], 0
setne byte [ebp - 0x2e]
mov eax, 0x9f9899d0
jmp 0x100758a0
mov eax, dword [ebp - 0x14]
mov ecx, dword [0x10099184]
lea eax, [ecx + 1]
imul eax, ecx
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0xb3354f5e
and eax, 0x4ccab0a1
or eax, edx
xor eax, 0x4ccab0a0
xor ecx, eax
test ecx, eax
setne al
cmp dword [0x10099188], 0xa
setge cl
mov edx, eax
xor dl, cl
or cl, al
mov eax, edx
xor al, cl
mov eax, 0xa4fd44ce
mov edi, 0x446c04e1
cmovne eax, edi
test cl, cl
mov ecx, 0xa4fd44ce
cmovne ecx, eax
test dl, dl
jmp 0x10078498
mov ecx, dword [0x10099184]
lea eax, [ecx + 1]
imul eax, ecx
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0xafdc6107
and eax, 0x50239ef8
or eax, edx
xor eax, 0xafdc6106
or eax, ecx
cmp eax, 0xffffffff
setne al
cmp dword [0x10099188], 0xa
setge cl
mov edx, eax
xor dl, cl
or cl, al
mov eax, ecx
xor al, dl
test cl, cl
mov ecx, 0x11465f15
mov esi, 0x2e469709
cmovne ecx, esi
test dl, dl
cmove ecx, esi
test al, al
mov eax, 0x11465f15
cmove ecx, eax
mov eax, ecx
jmp 0x100758a0
mov eax, dword [ebp - 0x10]
mov eax, dword [eax]
mov eax, dword [eax]
mov dword [ebp - 0x70], eax
mov eax, 0xb206b5b3
jmp 0x100758a0
mov eax, 0x2475c46e
jmp 0x100758a0
mov ecx, dword [0x10099184]
lea eax, [ecx + 1]
imul eax, ecx
test al, 1
sete cl
cmp dword [0x10099188], 0xa
setl dl
setge ch
or ch, al
xor dl, cl
mov cl, ch
xor cl, dl
test dl, dl
mov eax, 0xe592ba41
mov edi, 0x82d143b8
cmovne eax, edi
test ch, 1
mov edx, 0xe592ba41
cmovne eax, edx
test cl, 1
cmove eax, edi
jmp 0x100758a0
mov eax, dword [ebp - 0x14]
mov dword [eax], 0
mov eax, dword [0x10099184]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
not eax
and ecx, 0x1234e175
mov edx, eax
and edx, 0xedcb1e8a
or edx, ecx
xor edx, 0xedcb1e8b
and eax, 0xfffffffe
or eax, edx
cmp eax, 0xffffffff
setne al
cmp dword [0x10099188], 0xa
setge cl
setl dl
xor dl, al
or cl, al
mov ch, dl
xor ch, cl
test cl, cl
mov eax, 0xcc0a8656
mov edi, 0xd6eea992
cmovne eax, edi
test dl, dl
cmovne eax, edi
test ch, ch
mov ecx, 0xcc0a8656
cmovne eax, ecx
jmp 0x100758a0
mov eax, 0xd75b30f6
jmp 0x100758a0
mov eax, dword [0x10099184]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
not eax
and ecx, 0xdffa6456
mov edx, eax
and edx, 0x20059ba9
or edx, ecx
xor edx, 0x20059ba8
and eax, 0xfffffffe
or eax, edx
xor eax, 0xed290ca4
xor eax, 0x12d6f35b
sete al
setne cl
cmp dword [0x10099188], 0xa
setl dl
setge ah
or ah, cl
xor dl, al
mov al, ah
xor al, dl
mov ecx, 0xe2331859
mov edi, 0x9c9215f6
cmovne ecx, edi
test dl, dl
mov edx, ecx
mov edi, 0xe2331859
cmovne edx, edi
test ah, ah
cmovne edx, ecx
mov eax, edx
jmp 0x100758a0
mov eax, 0xfc19c92
jmp 0x100758a0
mov eax, dword [ebp - 0x74]
mov eax, dword [eax]
shl eax, 2
push eax
push 0
push dword [0x100990bc]
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
mov ecx, dword [ebp - 0x10]
mov ecx, dword [ecx]
mov dword [ecx], eax
mov eax, dword [ebp - 0x10]
mov eax, dword [eax]
cmp dword [eax], 0
mov eax, 0x59634ab1
mov ecx, 0xefe755d1
cmove eax, ecx
jmp 0x100758a0
mov eax, dword [ebp - 0x10]
mov eax, dword [eax]
shl dword [eax + 4], 1
mov eax, dword [ebp - 0x24]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x10]
mov ecx, dword [ecx]
mov dword [ecx], eax
mov eax, 0x72cc376e
jmp 0x100758a0
mov eax, 0x21a9074d
jmp 0x100758a0
mov eax, dword [ebp - 0x18]
mov eax, dword [eax]
mov eax, dword [eax + 0x44]
mov dword [ebp - 0x64], eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x68], eax
mov eax, 0x48299b52
jmp 0x100758a0
cmp byte [ebp - 0x2c], 0
mov eax, 0x348e806a
mov ecx, 0xfa2d4c9e
cmovne eax, ecx
jmp 0x100758a0
mov eax, dword [0x10099184]
lea ecx, [eax - 1]
imul ecx, eax
not ecx
or ecx, 0xfffffffe
cmp ecx, 0xffffffff
setne al
cmp dword [0x10099188], 0xa
setge cl
mov edx, ecx
or dl, al
xor cl, al
mov eax, edx
xor al, cl
mov edi, 0x32eed26d
mov eax, 0xc85b550e
cmovne edi, eax
test cl, cl
mov eax, edi
mov ecx, 0x32eed26d
cmovne eax, ecx
test dl, dl
cmovne eax, edi
jmp 0x100758a0
mov eax, dword [0x10099184]
lea ecx, [eax + 1]
imul ecx, eax
mov eax, ecx
not eax
and ecx, 0x92021ffa
mov edx, eax
and edx, 0x6dfde005
or edx, ecx
xor edx, 0x6dfde004
and eax, 0xfffffffe
or eax, edx
xor eax, 0x844a4480
cmp eax, 0x7bb5bb7f
setne al
cmp dword [0x10099188], 0xa
setge cl
setl dl
and dl, al
mov ah, al
inc ah
and ah, cl
or ah, dl
or cl, al
mov al, cl
xor al, ah
mov edx, 0x2475c46e
mov edi, 0x99a418d3
cmovne edx, edi
test cl, cl
mov ecx, 0x2475c46e
cmovne ecx, edx
test ah, ah
jmp 0x100783a2
mov ecx, dword [0x10099184]
lea eax, [ecx + 1]
imul eax, ecx
mov ecx, eax
not ecx
mov edx, ecx
and edx, 0xfffffffe
and eax, 1
or eax, edx
not eax
or eax, ecx
cmp eax, 0xffffffff
setne al
cmp dword [0x10099188], 0xa
setge cl
mov edx, ecx
or dl, al
xor cl, al
mov ch, dl
xor ch, cl
test cl, cl
mov eax, 0xa712f048
mov esi, 0xea4e799f
cmovne eax, esi
test dl, dl
mov edx, 0xa712f048
cmovne eax, edx
test ch, ch
cmove eax, esi
jmp 0x100758a0
mov ecx, dword [ebp - 0x1c]
mov edx, dword [0x10099184]
lea eax, [edx + 1]
imul eax, edx
mov edx, eax
not edx
mov edi, edx
and edi, 0x776f477
and eax, 0xf8890b88
or eax, edi
xor eax, 0x776f476
or eax, edx
xor eax, 0xffffffff
sete al
setne dl
cmp dword [0x10099188], 0xa
setl ah
setge dh
and al, dh
or dh, dl
and ah, dl
or ah, al
mov dl, dh
xor dl, ah
test ah, ah
mov eax, 0xe592ba41
mov edi, 0x4177bb22
cmovne eax, edi
mov ecx, dword [ecx]
test dh, dh
mov ebx, 0xe592ba41
cmovne eax, ebx
mov dword [ebp - 0x60], ecx
test dl, dl
cmove eax, edi
jmp 0x100758a0
mov eax, 0xa83f12bc
jmp 0x100758a0
mov eax, 0xd1ce0dff
jmp 0x100758a0
cmp eax, 0x5f5f689b
jne 0x100758a0
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret