Function at 0x100510e0
Capabilities:
Create pipe
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
push esi
sub esp, 0x28
mov eax, dword [0x100bf198]
xor eax, ebp
mov dword [ebp - 8], eax
mov eax, dword [0x100be9f4]
xor eax, dword [0x100be9f8]
or eax, 0x53af2906
and eax, 0x1b2c6c93
xor eax, 0x7d9a0ec7
xor eax, 0x5d0c0da0
mov ecx, 0xc9d1d1aa
xor edx, edx
div ecx
imul eax, eax, 0x1311c39f
sub eax, 0x4b87fe20
imul eax, eax, 0x1cf13ea9
and eax, 0xa1fb099a
imul eax, eax, 0xb02984e8
mov ecx, 0x566756b9
xor edx, edx
div ecx
or eax, 0x60f1b36d
xor eax, 0x72d22dd9
mov ecx, 0x37f247aa
xor edx, edx
div ecx
add eax, 0x3643bf75
mov ecx, 0x6ec9f1cf
xor edx, edx
div ecx
and eax, 0xecfa0bb
or eax, 0xa028253b
xor eax, 0xde7df687
mov ecx, 0x335206a0
xor edx, edx
div ecx
sub eax, 0xe6a4fd84
imul eax, eax, 0xc06175d0
or eax, 0x34baa008
sub eax, 0x66ae97c1
sub eax, 0x70e0275e
sub eax, 0x1d286a4e
mov ecx, 0x38a4c41b
xor edx, edx
div ecx
sub eax, 0xc7f6b4c3
xor eax, 0x5ec7a5e0
or eax, 0xa8170270
or eax, 0xa14e10c7
or eax, 0xe8cf750c
imul eax, eax, 0xe84837b8
mov ecx, 0x34f226c4
xor edx, edx
div ecx
or eax, 0x6faa8dde
add eax, 0x412a9165
imul eax, eax, 0x8939207e
mov ecx, 0x9317f07a
xor edx, edx
div ecx
mov ecx, 0xe73502a4
xor edx, edx
div ecx
mov ecx, 0xc55ac20b
xor edx, edx
div ecx
add eax, 0x9cf6da92
and eax, 0x6c2c5244
add eax, 0x5e7a6ae5
xor eax, 0x37e65d0c
and eax, 0xa3c284ab
imul eax, eax, 0xf3a886c9
add eax, 0x1499c9b5
mov ecx, 0x81281e5c
xor edx, edx
div ecx
sub eax, 0x7455403d
xor eax, 0xfccce8c
imul eax, eax, 0xc842406d
or eax, 0x309f5efd
mov ecx, 0x433392f1
xor edx, edx
div ecx
or eax, 0xf20959c
and eax, 0x42e5249e
and eax, 0xa155b919
add eax, 0x75b54421
sub eax, 0xc9cd8e24
xor eax, 0xdc2dddcd
add eax, 0xa5fedae6
and eax, 0x644b7574
xor eax, 0x3c2aa503
imul eax, eax, 0x9a3242f6
xor eax, 0xbaf69b6c
add eax, 0x3cbea167
imul eax, eax, 0x80b6ed8f
xor eax, 0xa9b5782c
or eax, 0xc9219fb9
imul eax, eax, 0x996a7cab
xor eax, 0x40bf438b
imul eax, eax, 0xfa0a6bce
or eax, 0x52502eff
cmp eax, 0x190a5821
je 0x10052647
mov eax, dword [0x100be9fc]
add eax, dword [0x100bea00]
mov ecx, 0xaf948775
xor edx, edx
div ecx
and eax, 0xe82d85f4
mov ecx, 0xf9cc111f
xor edx, edx
div ecx
and eax, 0xf276dcd8
mov ecx, 0x736c25ef
xor edx, edx
div ecx
mov ecx, 0x510a0d8d
xor edx, edx
div ecx
and eax, 0x791695d9
and eax, 0xb88e86b2
imul eax, eax, 0xea97759b
mov ecx, 0x31b063b9
xor edx, edx
div ecx
xor eax, 0x2230cc8f
add eax, 0x101ef3cc
and eax, 0x833e98e6
xor eax, 0x1a1d42b7
xor eax, 0x71245592
add eax, 0x2e256d4e
add eax, 0x7a01cb03
imul eax, eax, 0xa1d1962e
sub eax, 0x143e3bd8
xor eax, 0x78abd1a5
add eax, 0xa8e47199
xor eax, 0xd5518639
add eax, 0x55c13b7d
and eax, 0xcad01726
xor eax, 0x356d0541
add eax, 0x408606a5
add eax, 0xe5732f03
mov ecx, 0x58ef670e
xor edx, edx
div ecx
xor eax, 0x98366b75
xor eax, 0xd8b15288
or eax, 0x81552572
imul eax, eax, 0xfd7a418b
and eax, 0x71ac9a55
xor eax, 0x8f17c38d
and eax, 0x5022a647
sub eax, 0xcf47cf95
xor eax, 0xf98467fc
add eax, 0x6b4586f8
imul eax, eax, 0x1dd8fa83
xor eax, 0xfd0378f3
mov ecx, 0x48933b83
xor edx, edx
div ecx
xor eax, 0x3f67dde3
mov ecx, 0xbaddba8b
xor edx, edx
div ecx
and eax, 0x54d28b32
or eax, 0x377596e8
and eax, 0x98265ea0
sub eax, 0xe8be29e4
or eax, 0x53a9d19c
and eax, 0xc8c2b2d4
imul eax, eax, 0x23133cda
imul eax, eax, 0x67f8775f
sub eax, 0x452064c9
or eax, 0xe5918790
or eax, 0x41046979
and eax, 0xf22e24cd
and eax, 0x9235b9b8
mov ecx, 0x2c7b7e67
xor edx, edx
div ecx
or eax, 0x61a2dc2b
mov ecx, 0xba173078
xor edx, edx
div ecx
xor eax, 0xe12cf5d
sub eax, 0x878a7d1d
mov ecx, 0xbac0b4d2
xor edx, edx
div ecx
xor eax, 0xc2b98674
sub eax, 0xe63cfff8
add eax, 0x9201e590
mov ecx, 0x60182c6
xor edx, edx
div ecx
or eax, 0x201fe7dd
imul eax, eax, 0xb3ec933f
or eax, 0xddbac3a2
mov ecx, 0xcec5bfa1
xor edx, edx
div ecx
mov ecx, 0x44ae3e34
xor edx, edx
div ecx
imul eax, eax, 0x4a92fe0f
cmp dword [0x100bfd4c], 0
sete cl
mov byte [ebp - 9], cl
cmp eax, 0x3fafcf83
ja 0x10052647
mov al, byte [ebp - 9]
test al, 1
jne 0x10051486
jmp 0x100516f6
mov al, byte [0x100bd270]
xor al, 0xc0
mov byte [0x100bd290], al
mov al, byte [0x100bd271]
xor al, 0x85
mov byte [0x100bd292], al
mov al, byte [0x100bd272]
xor al, 0x45
mov byte [0x100bd293], al
mov al, byte [0x100bd273]
xor al, 0xa8
mov byte [0x100bd294], al
mov al, byte [0x100bd274]
xor al, 0x17
mov byte [0x100bd295], al
mov al, byte [0x100bd275]
xor al, 0xa7
mov byte [0x100bd296], al
mov al, byte [0x100bd276]
xor al, 0xf2
mov byte [0x100bd297], al
mov al, byte [0x100bd277]
xor al, 0xfe
mov byte [0x100bd298], al
mov al, byte [0x100bd278]
xor al, 0xda
mov byte [0x100bd299], al
mov al, byte [str.7_Xz1d]
xor al, 0x1d
mov byte [0x100bd29a], al
mov al, byte [0x100bd27a]
xor al, 0x44
mov byte [0x100bd29b], al
mov al, byte [0x100bd27b]
xor al, 0x51
mov byte [0x100bd29c], al
mov al, byte [0x100bd27c]
xor al, 0x2b
mov byte [0x100bd29d], al
mov al, byte [0x100bd27d]
xor al, 0x48
mov byte [0x100bd29e], al
mov al, byte [0x100bd27e]
xor al, 3
mov byte [0x100bd29f], al
mov al, byte [0x100bd27f]
xor al, 0x55
mov byte [0x100bd2a0], al
mov al, byte [0x100bd280]
xor al, 0xf1
mov byte [0x100bd2a1], al
mov al, byte [0x100bd281]
xor al, 0xb7
mov byte [0x100bd2a2], al
mov al, byte [0x100bd282]
xor al, 0xa9
mov byte [0x100bd2a3], al
mov al, byte [0x100bd283]
xor al, 0x30
mov byte [0x100bd2a4], al
mov al, byte [0x100bd284]
xor al, 0xaa
mov byte [0x100bd2a5], al
mov al, byte [0x100bd285]
xor al, 0x29
mov byte [0x100bd2a6], al
mov al, byte [0x100bd286]
xor al, 0xca
mov byte [0x100bd2a7], al
mov al, byte [0x100bd287]
xor al, 0x73
mov byte [0x100bd2a9], al
mov al, byte [0x100bd288]
xor al, 0x73
mov byte [0x100bd2aa], al
mov al, byte [0x100bd289]
xor al, 0x5a
mov byte [0x100bd2ab], al
mov al, byte [0x100bd230]
xor al, 0x42
mov byte [0x100bd250], al
mov al, byte [0x100bd231]
xor al, 0x70
mov byte [0x100bd251], al
mov al, byte [0x100bd232]
xor al, 0x76
mov byte [0x100bd252], al
mov al, byte [0x100bd233]
xor al, 0xef
mov byte [str.VDO], al
mov al, byte [0x100bd234]
xor al, 0x44
mov byte [0x100bd254], al
mov al, byte [0x100bd235]
xor al, 0xb6
mov byte [0x100bd255], al
mov al, byte [0x100bd236]
xor al, 0xf1
mov byte [0x100bd256], al
mov al, byte [0x100bd237]
xor al, 0xab
mov byte [0x100bd257], al
mov al, byte [0x100bd238]
xor al, 0x3d
mov byte [0x100bd258], al
mov al, byte [0x100bd239]
xor al, 0xe2
mov byte [0x100bd259], al
mov al, byte [0x100bd23a]
xor al, 0x6d
mov byte [str.H_os], al
mov al, byte [0x100bd23b]
xor al, 0xbf
mov byte [0x100bd25b], al
mov al, byte [0x100bd23c]
xor al, 0x2e
mov byte [0x100bd25c], al
mov al, byte [0x100bd23d]
xor al, 0x53
mov byte [0x100bd25e], al
mov al, byte [0x100bd23e]
xor al, 0x69
mov byte [0x100bd25f], al
mov al, byte [0x100bd23f]
xor al, 0xfb
mov byte [0x100bd260], al
mov al, byte [0x100bd240]
xor al, 0x68
mov byte [0x100bd261], al
mov al, byte [0x100bd241]
xor al, 0x4e
mov byte [0x100bd262], al
mov al, byte [0x100bd242]
xor al, 0xa
mov byte [0x100bd263], al
mov al, byte [0x100bd243]
xor al, 0xcf
mov byte [0x100bd264], al
mov al, byte [0x100bd244]
xor al, 0x43
mov byte [0x100bd265], al
mov al, byte [0x100bd245]
xor al, 0xaf
mov byte [0x100bd267], al
mov al, byte [0x100bd246]
xor al, 0xb1
mov byte [0x100bd268], al
mov al, byte [0x100bd247]
xor al, 0xdf
mov byte [0x100bd269], al
mov al, byte [0x100bd248]
xor al, 0x90
mov byte [0x100bd26a], al
mov al, byte [0x100bd249]
xor al, 0xc7
mov byte [0x100bd26b], al
mov dword [0x100bfd4c], 1
push eax
mov eax, esp
mov dword [ebp - 0x20], eax
push eax
mov eax, esp
mov dword [ebp - 0x1c], eax
push eax
mov eax, esp
mov dword [ebp - 0x10], eax
sub esp, 0x1c
mov ecx, esp
mov dword [ebp - 0x18], ecx
sub esp, 0x1c
mov eax, esp
mov dword [ebp - 0x14], eax
lea eax, [0x100bd250]
sub esp, 0xc
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0x1c
call fcn.10069e50
mov ecx, dword [ebp - 0x14]
add esp, 0xc
lea eax, [0x100bd290]
sub esp, 0xc
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 0x1c
call fcn.10069e50
mov dword [esp], 0xc
mov dword [esp + 4], 0x1a
mov dword [esp + 8], 0x2e
call fcn.10032900
add esp, 0xc
mov eax, dword [ebp - 0x14]
xor ecx, ecx
sub esp, 0x20
mov dword [esp], eax
mov dword [esp + 4], 3
mov dword [esp + 8], 0
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x1c], 0
call dword [sym.imp.KERNEL32.dll_CreateNamedPipeA]
mov ecx, eax
mov eax, dword [ebp - 0x10]
mov dword [eax], ecx
mov eax, dword [eax]
mov ecx, 0xffffffff
cmp eax, ecx
jne 0x10051b54
mov eax, dword [0x100bea04]
add eax, dword [0x100bea08]
and eax, 0x143c1d3e
imul eax, eax, 0xa4b77a8f
sub eax, 0x2b65ca48
or eax, 0xc44d0260
mov ecx, 0x57baa6ec
xor edx, edx
div ecx
mov ecx, 0x7e77534c
xor edx, edx
div ecx
xor eax, 0x8af3c96e
or eax, 0x73b49ecf
or eax, 0x7591973b
mov ecx, 0xd641d00d
xor edx, edx
div ecx
add eax, 0x3c19cb6a
or eax, 0xa565e063
sub eax, 0xa7f4a2af
and eax, 0x6767767f
sub eax, 0x8e2a7e6
sub eax, 0x11a8b21a
mov ecx, 0xb9f988bf
xor edx, edx
div ecx
or eax, 0xedefb3f7
or eax, 0x3ee6fb78
and eax, 0x4336cad2
mov ecx, 0x6f055dcd
xor edx, edx
div ecx
and eax, 0x18fb8261
mov ecx, 0x55d94452
xor edx, edx
div ecx
sub eax, 0x1bd4e38
add eax, 0xbbebe07a
xor eax, 0xef3cb2b4
sub eax, 0xb47ccc77
xor eax, 0x6da30f86
or eax, 0x54419999
mov ecx, 0x865bbf19
xor edx, edx
div ecx
xor eax, 0xc3ae75bc
mov ecx, 0x11069ce5
xor edx, edx
div ecx
and eax, 0x9f304c68
and eax, 0x5021f2c0
imul eax, eax, 0x1b4a8f6a
sub eax, 0x1618bd1c
sub eax, 0x770b81b6
sub eax, 0xb98a6b59
or eax, 0xab24a697
or eax, 0x1391089a
mov ecx, 0xefb38a2c
xor edx, edx
div ecx
xor eax, 0x4d143f5f
and eax, 0x9ead257a
imul eax, eax, 0xe4555ad
and eax, 0xced73dad
and eax, 0x171954b6
xor eax, 0xd7eaf1f2
add eax, 0xc29ff051
or eax, 0x1bddc0a1
and eax, 0xa042064f
sub eax, 0x493eed39
add eax, 0x6eaadd42
mov ecx, 0xb763b1a0
xor edx, edx
div ecx
sub eax, 0x62a89173
xor eax, 0xa41f394a
and eax, 0xca45152c
mov ecx, 0x58a9e72d
xor edx, edx
div ecx
add eax, 0x6a58876f
add eax, 0x8cbd4376
add eax, 0xc88ca79b
imul eax, eax, 0x91f69b37
and eax, 0x715d4548
add eax, 0xdbd07
sub eax, 0x2f99b5f3
or eax, 0xc99a1ed1
imul eax, eax, 0xb323085e
and eax, 0xf7af7c9d
add eax, 0xc9482c0b
sub eax, 0xd2c3b63
mov ecx, 0x89f1370a
xor edx, edx
div ecx
imul eax, eax, 0x55c23f28
and eax, 0xe5bc9f33
cmp eax, 0x222da7dc
jb 0x10052651
mov ecx, dword [ebp - 0x20]
mov eax, dword [0x100bea0c]
sub eax, dword [0x100bea10]
imul eax, eax, 0x6dcd006b
xor eax, 0xc0a4e954
or eax, 0xeb920da3
imul eax, eax, 0x1f8fdb0d
imul eax, eax, 0x59a96e8f
xor eax, 0xeac0e601
mov esi, 0x6be11509
xor edx, edx
div esi
and eax, 0x3fc8fbb0
add eax, 0xa6d0f72b
add eax, 0x6e81925e
imul eax, eax, 0x94d76322
sub eax, 0x5d66ae90
and eax, 0x2de3ab19
or eax, 0x1f6ea484
xor eax, 0x1d862834
mov esi, 0x67a4008f
xor edx, edx
div esi
imul eax, eax, 0xa79b9c22
mov esi, 0x489b9218
xor edx, edx
div esi
xor eax, 0x6eeed949
xor eax, 0x2743e21b
sub eax, 0xc6a49fde
mov esi, 0xf1d0c771
xor edx, edx
div esi
xor eax, 0x8a62c8e
or eax, 0xd2bf6656
add eax, 0x2f90a9ec
sub eax, 0xa6cb3d7d
mov esi, 0x577e7815
xor edx, edx
div esi
and eax, 0x42c6651d
or eax, 0xc9882c1b
xor eax, 0x1faf48b4
add eax, 0xccf1aa3f
imul eax, eax, 0x10388c7
mov esi, 0x4bd1049d
xor edx, edx
div esi
and eax, 0x937a008f
add eax, 0x2fdce6a0
mov esi, 0x81e2f3c2
xor edx, edx
div esi
add eax, 0x5cc4af09
sub eax, 0x8498ba25
add eax, 0x80a9e2bf
or eax, 0x453ae4fb
add eax, 0x5969da5e
xor eax, 0x76d78d68
imul eax, eax, 0x301c225d
or eax, 0x405f6660
add eax, 0xdd5881c0
mov esi, 0x546f0f1
xor edx, edx
div esi
imul eax, eax, 0x681599d3
and eax, 0x338b2875
sub eax, 0x9f89415
imul eax, eax, 0xf9c2250d
mov esi, 0x752f6c6f
xor edx, edx
div esi
add eax, 0x33e097f9
or eax, 0x8ea47ec9
imul eax, eax, 0x543c4614
or eax, 0xe08ad58d
and eax, 0xdcc3a95a
or eax, 0xe22696c2
and eax, 0xb750b212
add eax, 0x944731b6
imul eax, eax, 0xcb74b737
xor eax, 0xa8e1928f
or eax, 0x81a673cd
and eax, 0x33c63097
imul eax, eax, 0xfe2b296c
add eax, 0xff4aa42
add eax, 0xea932fc2
mov esi, 0xa21d4bd3
xor edx, edx
div esi
and eax, 0xaf44fc40
sub eax, 0xb9e4c080
xor eax, 0x5cb4433
and eax, 0x8068728
xor eax, 0x611342f9
mov dword [ecx], 1
cmp eax, 0xeb0d582a
jae 0x10051994
jmp 0x100522c1
mov eax, dword [0x100bea14]
xor edx, edx
div dword [0x100bea18]
add eax, 0x29326461
mov ecx, 0xec358f4f
xor edx, edx
div ecx
or eax, 0xfdded368
xor eax, 0x697c7fe9
sub eax, 0xe2ad64f6
mov ecx, 0x33253cbc
xor edx, edx
div ecx
add eax, 0xd900d357
mov ecx, 0xdd1bba26
xor edx, edx
div ecx
or eax, 0xb8a0f180
add eax, 0xde0d3e08
or eax, 0x65f4893b
mov ecx, 0xd2c077e
xor edx, edx
div ecx
xor eax, 0xf8e111ff
and eax, 0x3fc44310
xor eax, 0x9ef203ae
mov ecx, 0x243144e9
xor edx, edx
div ecx
or eax, 0x26f8eb35
imul eax, eax, 0xf11d349b
xor eax, 0x2c297f9a
xor eax, 0x26b392cf
sub eax, 0xbb596c0a
and eax, 0x9daf1c72
imul eax, eax, 0xde2df778
add eax, 0x14dc75f0
or eax, 0x8e1baf70
add eax, 0xb7321698
mov ecx, 0xc9734190
xor edx, edx
div ecx
and eax, 0x9ed2ae0f
imul eax, eax, 0x1edc2b53
imul eax, eax, 0x658e6059
mov ecx, 0xd6a5a346
xor edx, edx
div ecx
and eax, 0xc60544b8
xor eax, 0xf7085617
imul eax, eax, 0x94dbc084
and eax, 0xa2b8fd2b
sub eax, 0xc6dfe02a
mov ecx, 0xcd2d112c
xor edx, edx
div ecx
xor eax, 0x46fd0e4b
and eax, 0xc46a7866
add eax, 0x45605cb9
and eax, 0x699d591
add eax, 0x4bebebf6
and eax, 0x10586c6c
sub eax, 0xe9aba8cd
imul eax, eax, 0xcfceaed6
add eax, 0x62d7e5f5
xor eax, 0x496e2577
or eax, 0x14422613
or eax, 0xf2639b1e
xor eax, 0x3b8891b0
or eax, 0x52ba9e53
or eax, 0x4136e013
add eax, 0x65907c1f
imul eax, eax, 0x3cd0534c
imul eax, eax, 0x15d61bf5
mov ecx, 0xa88e3ebc
xor edx, edx
div ecx
sub eax, 0xf401395b
sub eax, 0x35e87001
and eax, 0xfa5cc2f1
xor eax, 0xc292fdaa
imul eax, eax, 0xc3bade51
imul eax, eax, 0x1010db69
and eax, 0x2adea536
xor eax, 0x5e9f6ea1
add eax, 0x82f7e0af
and eax, 0xb15eaedd
or eax, 0xdeb64e64
or eax, 0x9b75f1da
mov ecx, 0xdd6a42e5
xor edx, edx
div ecx
add eax, 0x1e46970a
imul eax, eax, 0x5bed2ba8
mov ecx, 0x477f68ba
xor edx, edx
div ecx
cmp eax, 0xfe8b5778
jae 0x1005265f
mov eax, dword [0x100bea1c]
xor eax, dword [0x100bea20]
add eax, 0x9cc3f879
and eax, 0x6eb3e6a6
add eax, 0x7b475e74
sub eax, 0x4d4ddab7
and eax, 0xe5c9c5ac
add eax, 0xc96750b8
xor eax, 0xd6c0e5dd
or eax, 0x2def67aa
mov ecx, 0xc5d26e91
xor edx, edx
div ecx
imul eax, eax, 0x23aace1c
or eax, 0xe5430173
and eax, 0x7328c81d
and eax, 0x1deab92d
and eax, 0xfdbf3682
mov ecx, 0xcdd47e69
xor edx, edx
div ecx
mov ecx, 0x638ddac9
xor edx, edx
div ecx
mov ecx, 0x5e1e5792
xor edx, edx
div ecx
xor eax, 0x1969f5f5
and eax, 0xe16caa47
imul eax, eax, 0x6a94c60
or eax, 0xf559635b
imul eax, eax, 0x448cb4f0
sub eax, 0xa9d9e863
imul eax, eax, 0x34205d0d
imul eax, eax, 0x651a0fbe
add eax, 0xbdd7b723
or eax, 0x5ac9fd7f
and eax, 0x4ea5458
add eax, 0x66ec4aec
sub eax, 0x1faa60eb
mov ecx, 0x64468173
xor edx, edx
div ecx
add eax, 0x47d833c
add eax, 0x86e63c81
or eax, 0xa1a8ae4f
imul eax, eax, 0xc7d0c2a7
mov ecx, 0xe3cc6c7
xor edx, edx
div ecx
or eax, 0x689084fa
imul eax, eax, 0x5879e7f9
or eax, 0x434226b2
imul eax, eax, 0xd1fabdcb
imul eax, eax, 0x87dc6676
xor eax, 0xbd8361d5
add eax, 0xa3080041
mov ecx, 0x3f6a570d
xor edx, edx
div ecx
or eax, 0xf59122f7
or eax, 0x34086cfc
and eax, 0xa5a4b841
and eax, 0x9892e938
imul eax, eax, 0x91de5f43
xor eax, 0xfd165849
add eax, 0x99311274
or eax, 0x8a1c7975
imul eax, eax, 0xb8cb23bd
add eax, 0x30a728b8
or eax, 0xa91d6b06
xor eax, 0x1c4ec2ed
xor eax, 0xdc0c8cfb
and eax, 0x7e34f192
add eax, 0x481abeae
xor eax, 0x65c8f840
and eax, 0x916273d8
mov ecx, 0x92be88f3
xor edx, edx
div ecx
mov ecx, eax
mov eax, dword [ebp - 0x10]
imul ecx, ecx, 0x50826af4
imul ecx, ecx, 0x9e84ae49
or ecx, 0x790ee0bc
or ecx, 0x95eeb448
and ecx, 0xd6770062
add ecx, 0x2d91d886
and ecx, 0x76764a0b
add ecx, 0xc627f2a3
sub ecx, 0xd06d0956
and ecx, 0x31a44f1f
mov dword [ebp - 0x28], ecx
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov dword [esp], 0x1f4
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [ebp - 0x18]
xor ecx, ecx
sub esp, 0x20
mov dword [esp], eax
mov dword [esp + 4], 3
mov dword [esp + 8], 0
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x1c], 0
call dword [sym.imp.KERNEL32.dll_CreateNamedPipeA]
mov ecx, dword [ebp - 0x1c]
mov edx, eax
mov eax, dword [ebp - 0x28]
mov dword [ecx], edx
mov ecx, dword [ecx]
mov edx, 0xffffffff
cmp ecx, edx
setne cl
mov byte [ebp - 0x21], cl
cmp eax, 0x2779c906
jb 0x1005265f
mov al, byte [ebp - 0x21]
test al, 1
jne 0x10051f56
jmp 0x10051f64
mov eax, dword [ebp - 0x20]
mov dword [eax], 1
jmp 0x100522c1
mov eax, dword [0x100bea24]
xor eax, dword [0x100bea28]
add eax, 0x51e70ac8
sub eax, 0xb58ce61
xor eax, 0x703f04c9
imul eax, eax, 0xfc43e52a
xor eax, 0xe95162d1
sub eax, 0x7f818efa
mov ecx, 0x7de26bf5
xor edx, edx
div ecx
add eax, 0x1d45c277
or eax, 0xf8e959cd
add eax, 0x1cb0ba4f
sub eax, 0xa6c1731d
sub eax, 0xfc488dd1
or eax, 0x237c5cc3
and eax, 0x9d50c708
sub eax, 0x6fe5c058
xor eax, 0x881adb90
add eax, 0xdd6ca79b
add eax, 0xed7be63d
and eax, 0x69d34b52
or eax, 0x7d1b4d44
or eax, 0xfb69c740
mov ecx, 0xf22e94b8
xor edx, edx
div ecx
add eax, 0x5bd54d8f
mov ecx, 0x5eb75702
xor edx, edx
div ecx
and eax, 0x4231cc85
imul eax, eax, 0x3e75b0d6
or eax, 0xef72ecfc
add eax, 0xf9b5796a
and eax, 0x3da28f7c
add eax, 0xb8c4c8fd
mov ecx, 0xd8a5a6e9
xor edx, edx
div ecx
and eax, 0x1b33f69f
or eax, 0x3eb01341
or eax, 0x4b85ecd
add eax, 0xc7a3b8ed
imul eax, eax, 0x20ae8d3e
mov ecx, 0xddde119
xor edx, edx
div ecx
imul eax, eax, 0xd0f7f64e
or eax, 0x2dc6023d
add eax, 0xe384d1b9
or eax, 0xdaeeacb
add eax, 0xae7bae2d
and eax, 0xd2a68c17
and eax, 0x9ed4f63c
or eax, 0x3f67089b
imul eax, eax, 0xdbf9534
and eax, 0x36e891be
mov ecx, 0xeaf52714
xor edx, edx
div ecx
or eax, 0x33944289
add eax, 0x5b60dd6c
add eax, 0x8658e050
or eax, 0x196bc993
add eax, 0xa21f7e15
or eax, 0x1e06e18b
xor eax, 0x7758e4b3
or eax, 0x62435ebe
xor eax, 0xd94d4af
imul eax, eax, 0x69b6c060
xor eax, 0x3d3548c
add eax, 0xcc449cc4
mov ecx, 0xe8c293a3
xor edx, edx
div ecx
xor eax, 0xac82f63e
add eax, 0x1ca08ad0
mov ecx, 0xf503fb20
xor edx, edx
div ecx
xor eax, 0x735bc2f0
add eax, 0x197c80f0
and eax, 0x4a734a1b
and eax, 0x72243abb
sub eax, 0xc02c6a24
mov ecx, 0x625a96eb
xor edx, edx
div ecx
xor eax, 0xe4938c6a
sub eax, 0x8777d6d2
cmp eax, 0xe957d8d6
ja 0x100526d5
mov ecx, dword [ebp - 0x20]
mov eax, dword [str._r5_f_]
xor edx, edx
div dword [0x100bea30]
add eax, 0x68edce28
sub eax, 0x2e4efd19
add eax, 0x91bc505f
add eax, 0xa87bac5d
sub eax, 0xf826047
add eax, 0xa319f350
sub eax, 0x9d263880
or eax, 0xf5e01967
xor eax, 0x43be3d3c
and eax, 0xf091c477
mov esi, 0x600cb945
xor edx, edx
div esi
imul eax, eax, 0x84e07d6e
mov esi, 0x3f5fd64c
xor edx, edx
div esi
xor eax, 0xda7702a9
add eax, 0x52a3a7d9
mov esi, 0x2f15bb98
xor edx, edx
div esi
add eax, 0xa57971bc
and eax, 0x3c6ea0c0
mov esi, 0x5b22ebe9
xor edx, edx
div esi
or eax, 0x471e7e47
xor eax, 0xdbdb2715
and eax, 0xe10d9fae
sub eax, 0x7b85913b
and eax, 0x51a49954
or eax, 0x55114b4d
imul eax, eax, 0x3ca505bf
xor eax, 0x2c504b29
xor eax, 0xc5a1e85a
or eax, 0x663b2ddc
and eax, 0x59e6da8e
mov esi, 0x2844aa78
xor edx, edx
div esi
xor eax, 0x664d2fb4
mov esi, 0x18778ea8
xor edx, edx
div esi
xor eax, 0x39d4885f
or eax, 0x2a5ad238
and eax, 0xfa19e5cb
imul eax, eax, 0x89ba7def
or eax, 0x5af4980a
xor eax, 0x78ff49de
sub eax, 0xc9e08710
xor eax, 0xa6d511b8
or eax, 0x90204e01
and eax, 0x55dfd3b3
and eax, 0xc8d5f156
imul eax, eax, 0x61116380
imul eax, eax, 0xf2550146
xor eax, 0x87b57652
sub eax, 0xe18f952f
and eax, 0xeb522188
and eax, 0x9e9a45ad
and eax, 0x9b7e0a54
add eax, 0x48f5e552
mov esi, 0x2e39a96e
xor edx, edx
div esi
sub eax, 0x8b812434
and eax, 0xc780c4f5
imul eax, eax, 0x2a0b9993
imul eax, eax, 0xc8013db9
or eax, 0x688f7e50
add eax, 0xafc554c8
add eax, 0x6a1ed9fd
xor eax, 0xe55bf0fd
or eax, 0x116c6d50
sub eax, 0xdf99a0b3
or eax, 0x30a4f20c
or eax, 0xd6060d07
sub eax, 0x8b8e9697
add eax, 0xfac30fdd
sub eax, 0x7e3edbac
mov esi, 0x61c11cfd
xor edx, edx
div esi
sub eax, 0x3734e900
and eax, 0x4315fd46
xor eax, 0x21bda69e
mov dword [ecx], 0
cmp eax, 0xf4e55532
je 0x100526d5
jmp 0x100522c1
mov eax, dword [0x100bea34]
add eax, dword [0x100bea38]
add eax, 0x1178b520
mov ecx, 0x751436bb
xor edx, edx
div ecx
mov ecx, 0x9a397984
xor edx, edx
div ecx
or eax, 0xd30ea1c6
and eax, 0xb1bae965
sub eax, 0x579280ac
and eax, 0xb986d8bf
add eax, 0x78919fa4
and eax, 0xb7284d37
mov ecx, 0xd9c9180e
xor edx, edx
div ecx
imul eax, eax, 0xdf1c7d1
sub eax, 0xe76e94d7
mov ecx, 0x52b3bfff
xor edx, edx
div ecx
and eax, 0x191bff6
mov ecx, 0xffb91942
xor edx, edx
div ecx
or eax, 0xf7d3b530
or eax, 0x94f4ffe2
add eax, 0x72b1483e
or eax, 0x1d30cb08
add eax, 0x2038b05c
imul eax, eax, 0x2f42f3ef
or eax, 0x71e76ae5
imul eax, eax, 0x8b53c9d1
add eax, 0x7958cc96
add eax, 0x83629927
add eax, 0x35ae0b0e
sub eax, 0xd5146826
xor eax, 0x35dd27a9
or eax, 0xafa9d6ba
xor eax, 0x4397943
and eax, 0x4846d4e8
add eax, 0x7dbf0d2
sub eax, 0x39b7b45d
or eax, 0xf941aa3
and eax, 0x26465f59
add eax, 0xbc154c54
or eax, 0xc5dd37e7
or eax, 0xf1084ce7
and eax, 0x6a19ce62
mov ecx, 0xdd5cd4a5
xor edx, edx
div ecx
or eax, 0x640ab89c
sub eax, 0xd91af63d
sub eax, 0x16c62063
mov ecx, 0xaaa70a0e
xor edx, edx
div ecx
sub eax, 0x6f83031
mov ecx, 0xe28b5b4
xor edx, edx
div ecx
imul eax, eax, 0x1acf3b56
mov ecx, 0xdeba9bf1
xor edx, edx
div ecx
and eax, 0xa4e35eb4
sub eax, 0xffc5951c
add eax, 0x733528f3
xor eax, 0x427383db
or eax, 0x5625deae
xor eax, 0xdc1caddb
mov ecx, 0xd5c4a6ee
xor edx, edx
div ecx
and eax, 0x90a46ab
imul eax, eax, 0x27008729
or eax, 0x85fc63f4
imul eax, eax, 0xbae5f037
add eax, 0x5d1d2213
add eax, 0x58221fb7
or eax, 0x7f1bd1f3
sub eax, 0xc7d11d41
sub eax, 0x380fd828
add eax, 0xc232236c
xor eax, 0xd14a456f
imul eax, eax, 0x9fd05c0e
add eax, 0x2c953df6
or eax, 0xcaa4b464
sub eax, 0x56a7656b
sub eax, 0x95df1868
imul eax, eax, 0xe3c45c28
cmp eax, 0x44d628d2
je 0x100526e3
mov ecx, dword [ebp - 0x20]
mov eax, dword [0x100bea3c]
xor edx, edx
div dword [0x100bea40]
mov esi, 0xd669d12c
xor edx, edx
div esi
add eax, 0x1f31fcc9
add eax, 0xa024972d
and eax, 0xac003cc0
sub eax, 0xe9dc36fc
imul eax, eax, 0x79fa6a56
imul eax, eax, 0x593afb72
add eax, 0x179eebf9
or eax, 0x70416bbd
imul eax, eax, 0x707edd6e
and eax, 0x1c2dd62f
and eax, 0x7852fdd6
mov esi, 0x4483979c
xor edx, edx
div esi
sub eax, 0x79174c7d
xor eax, 0x41642f75
add eax, 0x6e8dd7e
add eax, 0x3d62805c
add eax, 0x838656a7
add eax, 0xc8456a0
sub eax, 0xf6d77550
xor eax, 0xbbd9deb7
imul eax, eax, 0x2e4a6c6e
mov esi, 0x902fa7c3
xor edx, edx
div esi
or eax, 0xce3efaa7
xor eax, 0x75d45b41
imul eax, eax, 0x68273ce8
imul eax, eax, 0x58ce9387
imul eax, eax, 0x17d1432e
imul eax, eax, 0x8f8b196d
or eax, 0x54ac670b
xor eax, 0xaa8ccc0b
xor eax, 0x3299e13b
xor eax, 0xc323d20b
or eax, 0xbfbc28be
and eax, 0xa0cb6ca0
and eax, 0x4d6a1302
add eax, 0xcbfa7733
or eax, 0x17c9e6b1
or eax, 0xf0ad1ea8
mov esi, 0x46f9f540
xor edx, edx
div esi
imul eax, eax, 0x868d9d4c
mov esi, 0xf57c5db
xor edx, edx
div esi
or eax, 0xa5295040
mov esi, 0x969bc33b
xor edx, edx
div esi
mov esi, 0x52fb4ac0
xor edx, edx
div esi
add eax, 0x1c90b35f
xor eax, 0x13d4598c
imul eax, eax, 0xc42c9364
xor eax, 0xcb183971
sub eax, 0x4f980a4c
sub eax, 0xf9a888e7
and eax, 0x49412387
imul eax, eax, 0x2506a017
mov esi, 0xb5fd90d6
xor edx, edx
div esi
xor eax, 0x123713a7
or eax, 0x48764d33
imul eax, eax, 0x40e82165
xor eax, 0xf8351d5c
mov esi, 0x1e79c82a
xor edx, edx
div esi
or eax, 0x36691267
sub eax, 0x1faf42d4
mov esi, 0x98795305
xor edx, edx
div esi
or eax, 0x2c48a1cc
sub eax, 0x20f91316
xor eax, 0xccc09813
sub eax, 0x82ff2a48
add eax, 0x2fc87864
imul eax, eax, 0x2c87f169
mov esi, 0x53b2ca10
xor edx, edx
div esi
add eax, 0x2dabc986
mov esi, 0x23474c99
xor edx, edx
div esi
and eax, 0xc523b4a2
mov ecx, dword [ecx]
mov dword [ebp - 0x2c], ecx
cmp eax, 0xe4d1d662
je 0x1005246f
mov ecx, dword [ebp - 8]
xor ecx, ebp
call fcn.10066f8f
mov eax, dword [ebp - 0x2c]
lea esp, [ebp - 4]
pop esi
pop ebp
ret
mov eax, dword [0x100bfd4c]
jmp 0x100512ab
mov eax, dword [ebp - 0x20]
mov dword [eax], 1
jmp 0x10051994
mov eax, dword [ebp - 0x10]
mov eax, dword [eax]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
sub esp, 4
mov dword [esp], 0x1f4
call dword [sym.imp.KERNEL32.dll_Sleep]
mov eax, dword [ebp - 0x18]
xor ecx, ecx
sub esp, 0x20
mov dword [esp], eax
mov dword [esp + 4], 3
mov dword [esp + 8], 0
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x1c], 0
call dword [sym.imp.KERNEL32.dll_CreateNamedPipeA]
mov ecx, eax
mov eax, dword [ebp - 0x1c]
mov dword [eax], ecx
jmp 0x10051d0b
mov eax, dword [ebp - 0x20]
mov dword [eax], 0
jmp 0x1005210c
jmp 0x1005246f