Function at 0x100bbc96
Capabilities:
Allocate or change rwx memory
Encode data using xor
Encrypt data using salsa20 or chacha

Disassembly:
push edi
pushfd
push ebp
mov ebp, esp
sub esp, 0x154
mov dword [ebp - 0x150], eax
lea eax, [ebp + 4]
mov dword [ebp - 0x148], ecx
sub eax, 4
mov ecx, 0xfffffff
mov dword [ebp - 0x154], edx
mov dword [ebp - 0x14c], ebx
mov dword [ebp - 0x140], esi
mov dword [ebp - 0x144], edi
mov dword [ebp - 0xdc], eax
lea esi, [eax + 0xc]
mov eax, dword [esi]
mov ebx, dword [eax]
mov dword [ebp - 0x78], eax
mov eax, dword [eax + 4]
and eax, ecx
and ebx, ecx
mov ecx, dword [0x1007b9bc]
xor edx, edx
mov dword [ebp - 0x74], ecx
lea ecx, [ecx + eax - 1]
mov eax, ecx
div dword [ebp - 0x74]
mov eax, dword [0x1007b9bc]
mov dword [ebp - 0xd0], esi
mov edi, 0x10000000
add ebx, edi
mov dword [ebp - 0xd4], ebx
sub ecx, edx
mov dword [ebp - 0x7c], ecx
mov eax, dword [0x10012044]
mov dword [ebp - 0x80], eax
mov eax, dword [0x1007b9bc]
mov eax, dword [0x10012044]
test eax, eax
je 0x100bbdc9
and dword [ebp - 0x70], 0
mov eax, dword [0x10012044]
dec eax
lea ecx, [eax + 1]
mov dword [ebp - 0x58], ecx
xor eax, eax
test ecx, ecx
je 0x100bbd72
mov edx, dword [0x1012ee38]
shr dword [ebp - 0x58], 0x10
imul edx, edx, 0x343fd
add edx, 0x269ec3
mov dword [0x1012ee38], edx
shr edx, 0x10
shl eax, 0x10
or eax, edx
cmp dword [ebp - 0x58], 0
jne 0x100bbd48
xor edx, edx
div ecx
cmp dword [ebp - 0x80], 0
mov dword [ebp - 0x58], edx
jbe 0x100bbdbb
mov ecx, 0xffffc390
mov eax, 0x3c6f
lea edx, [edx*4 + 0x1012ee90]
inc dword [ebp - 0x70]
lock cmpxchg dword [edx], ecx
cmp eax, 0x3c6f
je 0x100bbfa9
mov ecx, dword [0x10012044]
mov eax, dword [ebp - 0x58]
inc eax
xor edx, edx
div ecx
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x58], edx
cmp eax, dword [ebp - 0x80]
jb 0x100bbd7f
and dword [ebp - 0x60], 0
cmp dword [ebp - 0x60], 0
jne 0x100bbe4f
call dword [sym.imp.kernel32.dll_GetLastError]
and dword [ebp - 0x58], 0
mov dword [ebp - 0x74], eax
inc dword [ebp - 0x58]
push 0x40
push 0x1000
push dword [ebp - 0x7c]
push 0
call dword [sym.imp.kernel32.dll_VirtualAlloc]
test eax, eax
jne 0x100bbfc0
push eax
call dword [sym.imp.kernel32.dll_Sleep]
cmp dword [ebp - 0x58], 0x11
jb 0x100bbdd6
and dword [ebp - 0x60], 0
mov eax, dword [ebp - 0x60]
cmp dword [0x1011fbc8], eax
ja 0x100bbe13
test al, 3
je 0x100bbe2b
test eax, eax
je 0x100bbe27
push 0x8000
push 0
push dword [ebp - 0x60]
call dword [sym.imp.kernel32.dll_VirtualFree]
and dword [ebp - 0x60], 0
push dword [ebp - 0x74]
call dword [sym.imp.kernel32.dll_SetLastError]
cmp dword [ebp - 0x60], 0
je 0x100bbd18
mov eax, dword [ebp - 0x60]
mov ecx, dword [ebp - 0x7c]
test ecx, ecx
je 0x100bbe4f
mov byte [eax], 0
inc eax
dec ecx
jne 0x100bbe48
mov eax, 0xcbe655ea
add dword [esi], 8
mov eax, dword [ebp - 0x78]
mov esi, dword [eax + 4]
and esi, 0xfffffff
lea eax, [esi + ebx]
mov dword [ebp - 0x74], eax
mov eax, dword [0x1007b9bc]
mov dword [ebp - 0x84], ebx
sub eax, esi
sub dword [ebp - 0x84], edi
lea ecx, [eax + 1]
mov edx, ecx
xor eax, eax
test ecx, ecx
mov dword [ebp - 0x78], esi
je 0x100bbeb1
mov ebx, dword [0x1012ee38]
imul ebx, ebx, 0x343fd
add ebx, 0x269ec3
mov dword [0x1012ee38], ebx
shr ebx, 0x10
shl eax, 0x10
shr edx, 0x10
or eax, ebx
test edx, edx
jne 0x100bbe8a
xor edx, edx
div ecx
mov eax, dword [ebp - 0x60]
lea ebx, [edx + eax]
push ebx
push esi
push dword [ebp - 0x84]
mov dword [ebp - 0x70], ebx
mov eax, 0x158d13f8
mov eax, dword [ebp - 0x74]
mov ecx, dword [eax]
mov eax, dword [eax + 4]
mov dword [ebp - 0xe0], eax
mov eax, dword [ebp - 0xd4]
add esp, 0xc
test esi, esi
mov dword [ebp - 0x80], ebx
mov dword [ebp - 0xe4], ecx
mov ebx, 0xfffff000
mov byte [ebp - 0x59], 0
mov dword [ebp - 0xcc], esi
mov dword [ebp - 0x7c], eax
je 0x100bc60f
lea eax, [ebp - 0xe4]
push eax
mov eax, 0x8716e951
mov eax, 0xfffffff
mov edx, dword [0x1001256c]
mov esi, dword [ebp - 0xe0]
and dword [ebp - 0x68], 0
and dword [ebp - 0x64], 0
pop ecx
and esi, eax
mov ecx, dword [ebp - 0xe4]
mov dword [ebp - 0x6c], esi
and ecx, eax
mov eax, edi
add ecx, edi
sub eax, edx
mov dword [ebp - 0x60], ecx
mov dword [ebp - 0xfc], eax
jne 0x100bbfc8
xor ebx, ebx
test esi, esi
jbe 0x100bc21a
mov ecx, 0x8dedd457
mov edi, 0x72122ba9
mov esi, 0x7fffffff
mov edx, ecx
mov eax, dword [ebp - 0x60]
movzx eax, byte [eax + ebx]
sub eax, edi
add dword [ebp - 0x68], eax
add eax, dword [ebp - 0x64]
mul edx
add eax, edx
mov edx, ecx
mul edx
lea edx, [eax + edx*2 - 0x7fffffff]
sar eax, 0x1f
and eax, esi
sub edx, eax
mov eax, edx
sar eax, 0x1f
and eax, esi
add eax, edx
mov edx, ecx
mul edx
add eax, edx
add dword [ebp - 0x68], eax
inc ebx
mov dword [ebp - 0x64], eax
cmp ebx, dword [ebp - 0x6c]
jb 0x100bbf62
jmp 0x100bc21a
mov eax, dword [0x1007b9bc]
imul eax, dword [ebp - 0x58]
lea eax, [eax + section..data]
mov dword [ebp - 0x60], eax
jmp 0x100bbdbf
mov dword [ebp - 0x60], eax
jmp 0x100bbe04
lea eax, [esi + ecx]
mov edx, dword [0x1000003c]
mov dword [ebp - 0xc8], eax
lea edx, [edx + 0x100000a0]
mov eax, dword [edx]
sub ecx, edi
add eax, edi
mov edi, ecx
mov edx, dword [edx + 4]
mov dword [ebp - 0x6c], edx
mov edx, ecx
add ecx, esi
mov esi, ecx
and esi, ebx
sub ecx, esi
and edi, ebx
mov dword [ebp - 0xf4], ecx
mov ebx, eax
mov ecx, dword [ebp - 0x6c]
mov dword [ebp - 0xf8], esi
add ecx, eax
mov dword [ebp - 0xf0], ecx
sub edx, edi
cmp eax, ecx
je 0x100bc021
cmp dword [ebx], edi
jae 0x100bc021
add ebx, dword [ebx + 4]
cmp ebx, ecx
jne 0x100bc016
xor eax, eax
cmp ebx, ecx
je 0x100bc04c
cmp dword [ebx], edi
jne 0x100bc04c
mov ecx, dword [ebx + 4]
sub ecx, 8
shr ecx, 1
je 0x100bc04c
lea esi, [ebx + 8]
movzx edi, word [esi]
and edi, 0xfff
cmp edi, edx
jae 0x100bc04c
inc eax
inc esi
inc esi
cmp eax, ecx
jne 0x100bc038
mov esi, 0x7fffffff
mov ecx, 0x8dedd457
mov edi, 0x72122ba9
jmp 0x100bc063
mov eax, dword [ebp - 0xe8]
cmp ebx, dword [ebp - 0xf0]
je 0x100bc1c2
mov edx, dword [ebp - 0xf8]
cmp dword [ebx], edx
ja 0x100bc1c2
mov edx, dword [ebx + 4]
add edx, 0xfffffff8
shr edx, 1
cmp eax, edx
jne 0x100bc0aa
add ebx, dword [ebx + 4]
cmp ebx, dword [ebp - 0xf0]
je 0x100bc1c2
mov eax, dword [ebp - 0xf8]
cmp dword [ebx], eax
ja 0x100bc1c2
xor eax, eax
jmp 0x100bc07d
mov edx, dword [ebp - 0xf8]
cmp dword [ebx], edx
jne 0x100bc0cb
movzx edx, word [ebx + eax*2 + 8]
and edx, 0xfff
cmp edx, dword [ebp - 0xf4]
jae 0x100bc1c2
mov edx, eax
inc eax
mov dword [ebp - 0xe8], eax
mov eax, 0xf000
test word [ebx + edx*2 + 8], ax
je 0x100bc05d
movzx eax, word [ebx + edx*2 + 8]
mov edx, dword [ebx]
and dword [ebp - 0x58], 0
and eax, 0xfff
lea eax, [eax + edx + 0x10000000]
mov dword [ebp - 0x6c], eax
sub eax, dword [ebp - 0x60]
mov dword [ebp - 0xd8], eax
je 0x100bc156
mov edx, dword [ebp - 0x60]
mov eax, dword [ebp - 0x58]
movzx eax, byte [eax + edx]
mov edx, ecx
sub eax, edi
add dword [ebp - 0x68], eax
add eax, dword [ebp - 0x64]
mul edx
add eax, edx
mov edx, ecx
mul edx
lea edx, [eax + edx*2 - 0x7fffffff]
sar eax, 0x1f
and eax, esi
sub edx, eax
mov eax, edx
sar eax, 0x1f
and eax, esi
add eax, edx
mov edx, ecx
mul edx
add eax, edx
add dword [ebp - 0x68], eax
inc dword [ebp - 0x58]
mov dword [ebp - 0x64], eax
mov eax, dword [ebp - 0x58]
cmp eax, dword [ebp - 0xd8]
jb 0x100bc109
mov eax, dword [ebp - 0x6c]
mov eax, dword [eax]
sub eax, dword [ebp - 0xfc]
and dword [ebp - 0x58], 0
mov dword [ebp - 0xd8], eax
mov eax, dword [ebp - 0x58]
mov edx, ecx
movzx eax, byte [ebp + eax - 0xd8]
sub eax, edi
add dword [ebp - 0x68], eax
add eax, dword [ebp - 0x64]
mul edx
add eax, edx
mov edx, ecx
mul edx
lea edx, [eax + edx*2 - 0x7fffffff]
sar eax, 0x1f
and eax, esi
sub edx, eax
mov eax, edx
sar eax, 0x1f
and eax, esi
add eax, edx
mov edx, ecx
mul edx
add eax, edx
add dword [ebp - 0x68], eax
inc dword [ebp - 0x58]
cmp dword [ebp - 0x58], 4
mov dword [ebp - 0x64], eax
jb 0x100bc16b
mov eax, dword [ebp - 0x6c]
add eax, 4
mov dword [ebp - 0x60], eax
jmp 0x100bc05d
xor ebx, ebx
mov eax, dword [ebp - 0xc8]
sub eax, dword [ebp - 0x60]
mov dword [ebp - 0xc8], eax
je 0x100bc21a
mov eax, dword [ebp - 0x60]
mov edx, ecx
movzx eax, byte [eax + ebx]
sub eax, edi
add dword [ebp - 0x68], eax
add eax, dword [ebp - 0x64]
mul edx
add eax, edx
mov edx, ecx
mul edx
lea edx, [eax + edx*2 - 0x7fffffff]
sar eax, 0x1f
and eax, esi
sub edx, eax
mov eax, edx
sar eax, 0x1f
and eax, esi
add eax, edx
mov edx, ecx
mul edx
add eax, edx
add dword [ebp - 0x68], eax
inc ebx
mov dword [ebp - 0x64], eax
cmp ebx, dword [ebp - 0xc8]
jb 0x100bc1d5
xor edi, edi
xor eax, eax
mov ecx, eax
and ecx, 7
mov cl, byte [ebp + ecx - 0x68]
mov byte [ebp + eax - 0x54], cl
inc eax
cmp eax, 0x10
jb 0x100bc21e
mov eax, 0xc965cad5
mov esi, dword [ebp - 0x48]
mov eax, dword [ebp - 0x54]
mov ecx, dword [ebp - 0x50]
mov edx, dword [ebp - 0x4c]
mov dword [ebp - 0x138], eax
mov dword [ebp - 0x110], eax
mov eax, dword [0x10120760]
mov dword [ebp - 0x134], ecx
mov dword [ebp - 0x10c], ecx
mov ecx, dword [eax]
mov dword [ebp - 0x13c], ecx
mov ecx, dword [eax + 4]
mov dword [ebp - 0x128], ecx
mov ecx, dword [eax + 8]
mov eax, dword [eax + 0xc]
mov dword [ebp - 0x100], eax
mov eax, dword [ebp - 0x70]
mov dword [ebp - 0x114], ecx
lea ecx, [ebp - 0x44]
sub eax, ecx
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0xd4]
sub eax, dword [ebp - 0x70]
mov dword [ebp - 0x130], edx
mov dword [ebp - 0x12c], esi
mov dword [ebp - 0x108], edx
mov dword [ebp - 0x104], esi
mov dword [ebp - 0x124], edi
mov dword [ebp - 0x120], edi
mov dword [ebp - 0x11c], edi
mov dword [ebp - 0x118], edi
mov dword [ebp - 0xc8], eax
push 0x10
pop ecx
lea edi, [ebp - 0xc4]
lea esi, [ebp - 0x13c]
rep movsd dword es:[edi], dword [esi]
mov ecx, dword [ebp - 0xa4]
mov eax, dword [ebp - 0xb4]
mov esi, dword [ebp - 0xc4]
mov edx, dword [ebp - 0x94]
mov dword [ebp - 0x6c], 2
mov ebx, dword [ebp - 0xc0]
lea edi, [edx + esi]
rol edi, 7
xor eax, edi
lea edi, [esi + eax]
rol edi, 9
xor ecx, edi
lea edi, [ecx + eax]
rol edi, 0xd
xor edx, edi
lea edi, [ecx + edx]
ror edi, 0xe
xor esi, edi
mov edi, dword [ebp - 0xb0]
add ebx, edi
rol ebx, 7
xor dword [ebp - 0xa0], ebx
mov ebx, dword [ebp - 0xa0]
add edi, ebx
rol edi, 9
xor dword [ebp - 0x90], edi
mov edi, ebx
mov ebx, dword [ebp - 0x90]
add ebx, edi
mov edi, dword [ebp - 0x90]
rol ebx, 0xd
xor dword [ebp - 0xc0], ebx
mov ebx, dword [ebp - 0xc0]
add edi, ebx
ror edi, 0xe
mov ebx, dword [ebp - 0x9c]
xor dword [ebp - 0xb0], edi
mov edi, dword [ebp - 0xac]
add edi, ebx
rol edi, 7
xor dword [ebp - 0x8c], edi
mov edi, ebx
mov ebx, dword [ebp - 0x8c]
add edi, ebx
rol edi, 9
xor dword [ebp - 0xbc], edi
mov edi, ebx
mov ebx, dword [ebp - 0xbc]
add ebx, edi
rol ebx, 0xd
mov edi, dword [ebp - 0xbc]
xor dword [ebp - 0xac], ebx
mov ebx, dword [ebp - 0xac]
add edi, ebx
mov ebx, dword [ebp - 0x88]
ror edi, 0xe
xor dword [ebp - 0x9c], edi
mov edi, dword [ebp - 0x98]
add edi, ebx
rol edi, 7
xor dword [ebp - 0xb8], edi
mov edi, ebx
mov ebx, dword [ebp - 0xb8]
add edi, ebx
rol edi, 9
xor dword [ebp - 0xa8], edi
mov edi, ebx
mov ebx, dword [ebp - 0xa8]
add ebx, edi
rol ebx, 0xd
mov edi, dword [ebp - 0xa8]
xor dword [ebp - 0x98], ebx
mov ebx, dword [ebp - 0x98]
add edi, ebx
ror edi, 0xe
xor dword [ebp - 0x88], edi
mov edi, dword [ebp - 0xb8]
add edi, esi
rol edi, 7
xor dword [ebp - 0xc0], edi
mov edi, dword [ebp - 0xc0]
add edi, esi
rol edi, 9
xor dword [ebp - 0xbc], edi
mov ebx, dword [ebp - 0xbc]
mov edi, dword [ebp - 0xc0]
add ebx, edi
rol ebx, 0xd
mov edi, dword [ebp - 0xbc]
xor dword [ebp - 0xb8], ebx
mov ebx, dword [ebp - 0xb8]
add ebx, edi
mov edi, dword [ebp - 0xb0]
add edi, eax
ror ebx, 0xe
xor esi, ebx
rol edi, 7
xor dword [ebp - 0xac], edi
mov edi, dword [ebp - 0xb0]
mov ebx, dword [ebp - 0xac]
add ebx, edi
mov edi, dword [ebp - 0xac]
rol ebx, 9
xor dword [ebp - 0xa8], ebx
mov ebx, dword [ebp - 0xa8]
add ebx, edi
mov edi, dword [ebp - 0xa8]
rol ebx, 0xd
xor eax, ebx
mov ebx, dword [ebp - 0xa0]
add edi, eax
ror edi, 0xe
xor dword [ebp - 0xb0], edi
mov edi, dword [ebp - 0x9c]
add edi, ebx
rol edi, 7
xor dword [ebp - 0x98], edi
mov edi, dword [ebp - 0x9c]
mov ebx, dword [ebp - 0x98]
add ebx, edi
mov edi, dword [ebp - 0x98]
rol ebx, 9
xor ecx, ebx
mov ebx, dword [ebp - 0x8c]
add edi, ecx
rol edi, 0xd
xor dword [ebp - 0xa0], edi
mov edi, dword [ebp - 0xa0]
add edi, ecx
ror edi, 0xe
xor dword [ebp - 0x9c], edi
mov edi, dword [ebp - 0x88]
add edi, ebx
rol edi, 7
xor edx, edi
mov edi, dword [ebp - 0x88]
add edi, edx
rol edi, 9
xor dword [ebp - 0x90], edi
mov edi, dword [ebp - 0x90]
add edi, edx
rol edi, 0xd
xor dword [ebp - 0x8c], edi
mov ebx, dword [ebp - 0x8c]
mov edi, dword [ebp - 0x90]
add ebx, edi
ror ebx, 0xe
xor dword [ebp - 0x88], ebx
dec dword [ebp - 0x6c]
jne 0x100bc2fc
mov dword [ebp - 0x94], edx
push 0x40
xor edx, edx
mov dword [ebp - 0xb4], eax
xor eax, eax
mov dword [ebp - 0xa4], ecx
mov dword [ebp - 0xc4], esi
pop ebx
mov ecx, dword [ebp + eax - 0x13c]
add dword [ebp + eax - 0xc4], ecx
add eax, 4
cmp eax, ebx
jl 0x100bc56e
lea edi, [ebp - 0x44]
inc dword [ebp - 0x11c]
push 0x10
pop ecx
lea esi, [ebp - 0xc4]
rep movsd dword es:[edi], dword [esi]
cmp dword [ebp - 0xcc], ebx
jbe 0x100bc5d5
mov eax, dword [ebp - 0xc8]
mov esi, dword [ebp - 0x58]
lea edi, [esi + eax]
lea ecx, [ebp + edx - 0x44]
mov al, byte [ecx + edi]
xor al, byte [ecx]
xor byte [ebp - 0x59], al
inc edx
mov byte [ecx + esi], al
cmp edx, ebx
jb 0x100bc5ab
sub dword [ebp - 0xcc], ebx
add dword [ebp - 0x80], ebx
add esi, ebx
add dword [ebp - 0x7c], ebx
mov dword [ebp - 0x58], esi
jmp 0x100bc2cc
cmp dword [ebp - 0xcc], edx
jbe 0x100bc602
mov esi, dword [ebp - 0x7c]
mov edi, dword [ebp - 0x80]
lea eax, [ebp - 0x44]
sub esi, eax
sub edi, eax
lea ecx, [ebp + edx - 0x44]
mov al, byte [ecx + esi]
xor al, byte [ecx]
xor byte [ebp - 0x59], al
inc edx
mov byte [ecx + edi], al
cmp edx, dword [ebp - 0xcc]
jb 0x100bc5ea
mov esi, dword [ebp - 0x78]
mov ebx, 0xfffff000
mov edi, 0x10000000
mov eax, dword [ebp - 0x74]
mov al, byte [eax + 8]
xor al, byte [ebp - 0x59]
je 0x100bc6b0
call fcn.1004ad05
mov edx, 0xffff
mov edi, dword [ebp - 0xd0]
and edi, 0xfffffffc
mov esi, eax
and esi, ebx
mov eax, dword [ebp - 0xdc]
mov dword [eax + 8], 0x100f1b6e
lea ecx, [edi + 0xfff]
and ecx, ebx
xor eax, eax
mov ebx, dword [0x1012ee38]
imul ebx, ebx, 0x343fd
add ebx, 0x269ec3
mov dword [0x1012ee38], ebx
shr ebx, 0x10
shl eax, 0x10
shr edx, 0x10
or eax, ebx
test edx, edx
jne 0x100bc64c
mov ebx, 0xffff
div ebx
mov dword [ebp - 0x154], esi
inc edx
mov dword [ebp - 0x148], edx
mov dword [ebp - 0xd0], 0
mov eax, edi
cmp edi, ecx
jae 0x100bc6a6
mov edx, dword [ebp - 0xd0]
mov dword [eax], edx
add eax, 4
cmp eax, ecx
jb 0x100bc697
mov eax, 0x100f1b6e
jmp 0x100bc78c
mov ecx, dword [0x1001256c]
mov eax, dword [ebp - 0xd4]
sub eax, dword [ebp - 0x70]
mov dword [ebp - 0x78], eax
sub edi, ecx
mov dword [ebp - 0x74], edi
jne 0x100bc6d1
test eax, eax
je 0x100bc77f
mov ecx, dword [0x10103928]
mov edi, dword [ebp - 0x70]
sub edi, dword [ebp - 0xd4]
mov eax, dword [ebp - 0x84]
add eax, esi
mov dword [ebp - 0xd0], eax
xor esi, esi
dec ecx
js 0x100bc71e
lea eax, [esi + ecx]
cdq
sub eax, edx
sar eax, 1
mov edx, dword [eax*4 + 0x1010392c]
and edx, 0xfffffff
cmp dword [ebp - 0x84], edx
jae 0x100bc715
lea ecx, [eax - 1]
jmp 0x100bc71a
jbe 0x100bc722
lea esi, [eax + 1]
cmp ecx, esi
jge 0x100bc6f3
mov ebx, esi
jmp 0x100bc777
mov ebx, eax
jmp 0x100bc777
mov eax, dword [ebx*4 + 0x1010392c]
mov ecx, eax
and ecx, 0xfffffff
cmp ecx, dword [ebp - 0xd0]
jae 0x100bc77f
lea esi, [ecx + edi + 0x10000000]
mov ecx, eax
shl ecx, 2
sar ecx, 0x1e
sar eax, 0x1e
and ecx, 3
and eax, 3
xor edx, edx
dec ecx
je 0x100bc76a
dec ecx
je 0x100bc765
dec ecx
jne 0x100bc770
mov edx, dword [ebp - 0x74]
jmp 0x100bc770
mov edx, dword [ebp - 0x78]
jmp 0x100bc770
mov edx, dword [ebp - 0x74]
sub edx, dword [ebp - 0x78]
dec eax
dec eax
jne 0x100bc776
add dword [esi], edx
inc ebx
cmp ebx, dword [0x10103928]
jb 0x100bc726
mov eax, dword [0x1007b9bc]
mov eax, 0x8dc66dc8
mov eax, dword [ebp - 0x70]
mov ecx, dword [ebp - 0xdc]
mov dword [ecx + 8], eax
mov ebx, dword [ebp - 0x14c]
mov edx, dword [ebp - 0x154]
mov esi, dword [ebp - 0x140]
mov ecx, dword [ebp - 0x148]
mov edi, dword [ebp - 0x144]
mov eax, dword [ebp - 0x150]
mov esp, ebp
pop ebp
popfd
ret