Function at 0x6b6000
Capabilities:
Allocate thread local storage
Contain obfuscated stackstrings
Parse pe header

Disassembly:
push 0xa70
push 0
push 0x639a98
call fcn.004016e0
add esp, 0xc
push 0
call sub.KERNEL32.dll_GetModuleHandleW
mov dword [0x639a9c], eax
push 0
push 0x1000
push 0
call sub.KERNEL32.dll_HeapCreate
mov dword [0x639a98], eax
mov eax, 0x637297
mov dword [0x639abc], eax
call fcn.004016b5
call fcn.00415aa0
call fcn.00415678
call fcn.00415380
call fcn.00413c80
call fcn.0041391a
call fcn.004137b0
call fcn.00412ec2
call fcn.00412564
call fcn.00411fa7
call fcn.004112c0
call fcn.00410de5
call fcn.004103b7
call fcn.0040ff20
call fcn.0040f91b
call fcn.0040f430
call fcn.0040e7bf
call fcn.0040e590
call fcn.0040ca9e
call fcn.0040c4ef
call fcn.00409ada
call fcn.004061f3
call fcn.00405f8a
call fcn.00405b88
call fcn.004059e4
call fcn.0040519c
call fcn.0040498a
call fcn.0040462c
call fcn.004024bb
call fcn.00401c75
call fcn.00401974
push 0x63a470
push 0
push 0xd
push 4
push 8
call fcn.00410ca1
push 0x63a478
push 0
push 0xd
push 0x20
push 8
call fcn.00410ca1
mov eax, 0x200
push eax
lea eax, [0x63a480]
push eax
xor eax, eax
push eax
push 7
push 0x10
call fcn.0040ff40
call fcn.004058ba
call fcn.00410908
mov eax, 0x200
push eax
lea eax, [0x63a504]
push eax
push 0x53d9c8
push 7
push 0x14
call fcn.0040ff40
push 0xf
call sub.USER32.dll_GetSysColor
mov ebx, eax
or ebx, 0xff000000
push ebx
lea ebp, [0x639adc]
pop dword [ebp]
push 0x10
call sub.USER32.dll_GetSysColor
mov ebx, eax
or ebx, 0xff000000
push ebx
lea ebp, [0x639adc]
pop dword [ebp + 0x10]
push 0xf
call sub.USER32.dll_GetSysColor
mov ebx, eax
or ebx, 0xff000000
push ebx
lea ebp, [0x639adc]
pop dword [ebp + 4]
push 0x12
call sub.USER32.dll_GetSysColor
mov ebx, eax
or ebx, 0xff000000
push ebx
lea ebp, [0x639adc]
pop dword [ebp + 0x14]
mov dword [ebp + 8], 0xff101010
mov dword [ebp + 0xc], 0xff101010
push 6
call fcn.0041006a
push eax
pop dword [ebp + 0x18]
push 5
call fcn.0041006a
push eax
pop dword [ebp + 0x1c]
mov dword [ebp + 0x20], 4
push 3
call fcn.0041006a
push eax
pop dword [ebp + 0x24]
push 0x10
call fcn.0041006a
push eax
pop dword [ebp + 0x30]
push 0xd
call fcn.0041006a
push eax
pop dword [ebp + 0x28]
push 0xa
call fcn.0041006a
push eax
pop dword [ebp + 0x2c]
push 5
call fcn.0041006a
push eax
pop dword [ebp + 0x34]
push 0xc
call fcn.0041006a
push eax
pop dword [ebp + 0x38]
push 0x12
call fcn.0041008e
push eax
pop dword [ebp + 0x3c]
push 3
call fcn.0041006a
push eax
pop dword [ebp + 0x40]
mov dword [ebp + 0x4c], 0xffffffff
mov dword [ebp + 0x50], 0x3f866666
mov dword [ebp + 0x44], 0
mov dword [ebp + 0x48], 0x2710
mov dword [ebp + 0x54], 0x96
mov dword [ebp + 0x58], 0x20
mov dword [ebp + 0x5c], 0xffffffff
mov dword [ebp + 0x60], 1
mov dword [ebp + 0x64], 1
mov dword [ebp + 0x68], 1
mov dword [ebp + 0x6c], 1
call fcn.0040199d
push eax
pop dword [ebp + 0x78]
push 0
lea eax, [0x6d0792]
push eax
call fcn.00401b62
lea ebp, [0x639ca0]
mov dword [ebp], 0xd20beec4
mov word [ebp + 4], 0x5ca8
mov word [ebp + 6], 0x4905
mov byte [ebp + 8], 0xae
mov byte [ebp + 9], 0x3b
mov byte [ebp + 0xa], 0xbf
mov byte [ebp + 0xb], 0x25
mov byte [ebp + 0xc], 0x1e
mov byte [ebp + 0xd], 0xa0
mov byte [ebp + 0xe], 0x9b
mov byte [ebp + 0xf], 0x53
lea ebp, [0x63a0a0]
mov dword [ebp], 0xac0837c
mov word [ebp + 4], 0xbbf8
mov word [ebp + 6], 0x452a
mov byte [ebp + 8], 0x85
mov byte [ebp + 9], 0xd
mov byte [ebp + 0xa], 0x79
mov byte [ebp + 0xb], 0xd0
mov byte [ebp + 0xc], 0x8e
mov byte [ebp + 0xd], 0x66
mov byte [ebp + 0xe], 0x7c
mov byte [ebp + 0xf], 0xa7
lea ebp, [0x639f70]
mov dword [ebp], 0x4d9f7874
mov word [ebp + 4], 0x4e0c
mov word [ebp + 6], 0x4904
mov byte [ebp + 8], 0x96
mov byte [ebp + 9], 0x7b
mov byte [ebp + 0xa], 0x40
mov byte [ebp + 0xb], 0xb0
mov byte [ebp + 0xc], 0xd2
mov byte [ebp + 0xd], 0xc
mov byte [ebp + 0xe], 0x3e
mov byte [ebp + 0xf], 0x4b
lea ebp, [0x63a100]
mov dword [ebp], 0x82a74aeb
mov word [ebp + 4], 0xaeb4
mov word [ebp + 6], 0x465c
mov byte [ebp + 8], 0xa0
mov byte [ebp + 9], 0x14
mov byte [ebp + 0xa], 0xd0
mov byte [ebp + 0xb], 0x97
mov byte [ebp + 0xc], 0xee
mov byte [ebp + 0xd], 0x34
mov byte [ebp + 0xe], 0x6d
mov byte [ebp + 0xf], 0x63
lea ebp, [0x63a0c0]
mov dword [ebp], 0x76fc4e2d
mov word [ebp + 4], 0xd6ad
mov word [ebp + 6], 0x4519
mov byte [ebp + 8], 0xa6
mov byte [ebp + 9], 0x63
mov byte [ebp + 0xa], 0x37
mov byte [ebp + 0xb], 0xbd
mov byte [ebp + 0xc], 0x56
mov byte [ebp + 0xd], 6
mov byte [ebp + 0xe], 0x81
mov byte [ebp + 0xf], 0x85
lea ebp, [0x639c70]
mov dword [ebp], 0x43668bf8
mov word [ebp + 4], 0xc14e
mov word [ebp + 6], 0x49b2
mov byte [ebp + 8], 0x97
mov byte [ebp + 9], 0xc9
mov byte [ebp + 0xa], 0x74
mov byte [ebp + 0xb], 0x77
mov byte [ebp + 0xc], 0x84
mov byte [ebp + 0xd], 0xd7
mov byte [ebp + 0xe], 0x84
mov byte [ebp + 0xf], 0xb7
lea ebp, [0x63a050]
mov dword [ebp], 0xf214138
mov word [ebp + 4], 0xb1d3
mov word [ebp + 6], 0x4a90
mov byte [ebp + 8], 0xbb
mov byte [ebp + 9], 0xa9
mov byte [ebp + 0xa], 0x27
mov byte [ebp + 0xb], 0xcb
mov byte [ebp + 0xc], 0xc0
mov byte [ebp + 0xd], 0xc5
mov byte [ebp + 0xe], 0x38
mov byte [ebp + 0xf], 0x9a
lea ebp, [0x639e20]
mov dword [ebp], 0x4bfefb45
mov word [ebp + 4], 0x347d
mov word [ebp + 6], 0x4006
mov byte [ebp + 8], 0xa5
mov byte [ebp + 9], 0xbe
mov byte [ebp + 0xa], 0xac
mov byte [ebp + 0xb], 0xc
mov byte [ebp + 0xc], 0xb0
mov byte [ebp + 0xd], 0x56
mov byte [ebp + 0xe], 0x71
mov byte [ebp + 0xf], 0x92
lea ebp, [0x63a32c]
mov dword [ebp], 0x289a9a43
mov word [ebp + 4], 0xbe44
mov word [ebp + 6], 0x4057
mov byte [ebp + 8], 0xa4
mov byte [ebp + 9], 0x1b
mov byte [ebp + 0xa], 0x58
mov byte [ebp + 0xb], 0x7a
mov byte [ebp + 0xc], 0x76
mov byte [ebp + 0xd], 0xd7
mov byte [ebp + 0xe], 0xe7
mov byte [ebp + 0xf], 0xf9
lea ebp, [0x63a25c]
mov dword [ebp], 0xb7534046
mov word [ebp + 4], 0x3ecb
mov word [ebp + 6], 0x4c18
mov byte [ebp + 8], 0xbe
mov byte [ebp + 9], 0x4e
mov byte [ebp + 0xa], 0x64
mov byte [ebp + 0xb], 0xcd
mov byte [ebp + 0xc], 0x4c
mov byte [ebp + 0xd], 0xb7
mov byte [ebp + 0xe], 0xd6
mov byte [ebp + 0xf], 0xac
lea ebp, [0x639e50]
mov dword [ebp], 0x6f0cd92b
mov word [ebp + 4], 0x2e97
mov word [ebp + 6], 0x45d1
mov byte [ebp + 8], 0x88
mov byte [ebp + 9], 0xff
mov byte [ebp + 0xa], 0xb0
mov byte [ebp + 0xb], 0xd1
mov byte [ebp + 0xc], 0x86
mov byte [ebp + 0xd], 0xb8
mov byte [ebp + 0xe], 0xde
mov byte [ebp + 0xf], 0xdd
lea ebp, [0x63a0d0]
mov dword [ebp], 0xfd228cb7
mov word [ebp + 4], 0xae11
mov word [ebp + 6], 0x4ae3
mov byte [ebp + 8], 0x86
mov byte [ebp + 9], 0x4c
mov byte [ebp + 0xa], 0x16
mov byte [ebp + 0xb], 0xf3
mov byte [ebp + 0xc], 0x91
mov byte [ebp + 0xd], 0xa
mov byte [ebp + 0xe], 0xb8
mov byte [ebp + 0xf], 0xfe
lea ebp, [0x639db0]
mov dword [ebp], 0xb4bfcc3a
mov word [ebp + 4], 0xdb2c
mov word [ebp + 6], 0x424c
mov byte [ebp + 8], 0xb0
mov byte [ebp + 9], 0x29
mov byte [ebp + 0xa], 0x7f
mov byte [ebp + 0xb], 0xe9
mov byte [ebp + 0xc], 0x9a
mov byte [ebp + 0xd], 0x87
mov byte [ebp + 0xe], 0xc6
mov byte [ebp + 0xf], 0x41
lea ebp, [0x639fc0]
mov dword [ebp], 0xb97d20bb
mov word [ebp + 4], 0xf46a
mov word [ebp + 6], 0x4c97
mov byte [ebp + 8], 0xba
mov byte [ebp + 9], 0x10
mov byte [ebp + 0xa], 0x5e
mov byte [ebp + 0xb], 0x36
mov byte [ebp + 0xc], 8
mov byte [ebp + 0xd], 0x43
mov byte [ebp + 0xe], 8
mov byte [ebp + 0xf], 0x54
lea ebp, [0x639c30]
mov dword [ebp], 0xa77f5d77
mov word [ebp + 4], 0x2e2b
mov word [ebp + 6], 0x44c3
mov byte [ebp + 8], 0xa6
mov byte [ebp + 9], 0xa2
mov byte [ebp + 0xa], 0xab
mov byte [ebp + 0xb], 0xa6
mov byte [ebp + 0xc], 1
mov byte [ebp + 0xd], 5
mov byte [ebp + 0xe], 0x4a
mov byte [ebp + 0xf], 0x51
lea ebp, [0x639d60]
mov dword [ebp], 0x625b53c3
mov word [ebp + 4], 0xab48
mov word [ebp + 6], 0x4ec1
mov byte [ebp + 8], 0xba
mov byte [ebp + 9], 0x1f
mov byte [ebp + 0xa], 0xa1
mov byte [ebp + 0xb], 0xef
mov byte [ebp + 0xc], 0x41
mov byte [ebp + 0xd], 0x46
mov byte [ebp + 0xe], 0xfc
mov byte [ebp + 0xf], 0x19
lea ebp, [0x63a130]
mov dword [ebp], 0xae50c081
mov word [ebp + 4], 0xebd2
mov word [ebp + 6], 0x438a
mov byte [ebp + 8], 0x86
mov byte [ebp + 9], 0x55
mov byte [ebp + 0xa], 0x8a
mov byte [ebp + 0xb], 9
mov byte [ebp + 0xc], 0x2e
mov byte [ebp + 0xd], 0x34
mov byte [ebp + 0xe], 0x98
mov byte [ebp + 0xf], 0x7a
lea ebp, [0x63a020]
mov dword [ebp], 0x8983036c
mov word [ebp + 4], 0x27c0
mov word [ebp + 6], 0x404b
mov byte [ebp + 8], 0x8f
mov byte [ebp + 9], 8
mov byte [ebp + 0xa], 0x10
mov byte [ebp + 0xb], 0x2d
mov byte [ebp + 0xc], 0x10
mov byte [ebp + 0xd], 0xdc
mov byte [ebp + 0xe], 0xfd
mov byte [ebp + 0xf], 0x74
lea ebp, [0x639d40]
mov dword [ebp], 0xfdd39ad0
mov word [ebp + 4], 0x238f
mov word [ebp + 6], 0x46af
mov byte [ebp + 8], 0xad
mov byte [ebp + 9], 0xb4
mov byte [ebp + 0xa], 0x6c
mov byte [ebp + 0xb], 0x85
mov byte [ebp + 0xc], 0x48
mov byte [ebp + 0xd], 3
mov byte [ebp + 0xe], 0x69
mov byte [ebp + 0xf], 0xc7
lea ebp, [0x63a41c]
mov dword [ebp], 0x1777f761
mov word [ebp + 4], 0x68ad
mov word [ebp + 6], 0x4d8a
mov byte [ebp + 8], 0x87
mov byte [ebp + 9], 0xbd
mov byte [ebp + 0xa], 0x30
mov byte [ebp + 0xb], 0xb7
mov byte [ebp + 0xc], 0x59
mov byte [ebp + 0xd], 0xfa
mov byte [ebp + 0xe], 0x33
mov byte [ebp + 0xf], 0xdd
lea ebp, [0x639e10]
mov dword [ebp], 0xc5abbf53
mov word [ebp + 4], 0xe17f
mov word [ebp + 6], 0x4121
mov byte [ebp + 8], 0x89
mov byte [ebp + 9], 0
mov byte [ebp + 0xa], 0x86
mov byte [ebp + 0xb], 0x62
mov byte [ebp + 0xc], 0x6f
mov byte [ebp + 0xd], 0xc2
mov byte [ebp + 0xe], 0xc9
mov byte [ebp + 0xf], 0x73
lea ebp, [0x639fe0]
mov dword [ebp], 0x9274bd8d
mov word [ebp + 4], 0xcfd1
mov word [ebp + 6], 0x41c3
mov byte [ebp + 8], 0xb3
mov byte [ebp + 9], 0x5e
mov byte [ebp + 0xa], 0xb1
mov byte [ebp + 0xb], 0x3f
mov byte [ebp + 0xc], 0x55
mov byte [ebp + 0xd], 0xa7
mov byte [ebp + 0xe], 0x58
mov byte [ebp + 0xf], 0xf4
lea ebp, [0x639f10]
mov dword [ebp], 0xa63293e8
mov word [ebp + 4], 0x664e
mov word [ebp + 6], 0x48db
mov byte [ebp + 8], 0xa0
mov byte [ebp + 9], 0x79
mov byte [ebp + 0xa], 0xdf
mov byte [ebp + 0xb], 0x75
mov byte [ebp + 0xc], 0x9e
mov byte [ebp + 0xd], 5
mov byte [ebp + 0xe], 9
mov byte [ebp + 0xf], 0xf7
lea ebp, [0x639d20]
mov dword [ebp], 0x82a5ea35
mov word [ebp + 4], 0xd9cd
mov word [ebp + 6], 0x47c5
mov byte [ebp + 8], 0x96
mov byte [ebp + 9], 0x29
mov byte [ebp + 0xa], 0xe1
mov byte [ebp + 0xb], 0x5d
mov byte [ebp + 0xc], 0x2f
mov byte [ebp + 0xd], 0x71
mov byte [ebp + 0xe], 0x4e
mov byte [ebp + 0xf], 0x6e
lea ebp, [0x63a120]
mov dword [ebp], 0x139d44e
mov word [ebp + 4], 0x6afe
mov word [ebp + 6], 0x49f2
mov byte [ebp + 8], 0x86
mov byte [ebp + 9], 0x90
mov byte [ebp + 0xa], 0x3d
mov byte [ebp + 0xb], 0xaf
mov byte [ebp + 0xc], 0xca
mov byte [ebp + 0xd], 0xe6
mov byte [ebp + 0xe], 0xff
mov byte [ebp + 0xf], 0xb8
lea ebp, [0x639e80]
mov dword [ebp], 0xa4115719
mov word [ebp + 4], 0xd62e
mov word [ebp + 6], 0x491d
mov byte [ebp + 8], 0xaa
mov byte [ebp + 9], 0x7c
mov byte [ebp + 0xa], 0xe7
mov byte [ebp + 0xb], 0x4b
mov byte [ebp + 0xc], 0x8b
mov byte [ebp + 0xd], 0xe3
mov byte [ebp + 0xe], 0xb0
mov byte [ebp + 0xf], 0x67
lea ebp, [0x63a2cc]
mov dword [ebp], 0xc4aa340d
mov word [ebp + 4], 0xf20f
mov word [ebp + 6], 0x4863
mov byte [ebp + 8], 0xaf
mov byte [ebp + 9], 0xef
mov byte [ebp + 0xa], 0xf8
mov byte [ebp + 0xb], 0x7e
mov byte [ebp + 0xc], 0xf2
mov byte [ebp + 0xd], 0xe6
mov byte [ebp + 0xe], 0xba
mov byte [ebp + 0xf], 0x25
lea ebp, [0x63a090]
mov dword [ebp], 0x62ab5d82
mov word [ebp + 4], 0xfdc1
mov word [ebp + 6], 0x4dc3
mov byte [ebp + 8], 0xa9
mov byte [ebp + 9], 0xdd
mov byte [ebp + 0xa], 7
mov byte [ebp + 0xb], 0xd
mov byte [ebp + 0xc], 0x1d
mov byte [ebp + 0xd], 0x49
mov byte [ebp + 0xe], 0x5d
mov byte [ebp + 0xf], 0x97
lea ebp, [0x63a040]
mov dword [ebp], 0xb94237e7
mov word [ebp + 4], 0x57ac
mov word [ebp + 6], 0x4347
mov byte [ebp + 8], 0x91
mov byte [ebp + 9], 0x51
mov byte [ebp + 0xa], 0xb0
mov byte [ebp + 0xb], 0x8c
mov byte [ebp + 0xc], 0x6c
mov byte [ebp + 0xd], 0x32
mov byte [ebp + 0xe], 0xd1
mov byte [ebp + 0xf], 0xf7
lea ebp, [0x63a3dc]
mov dword [ebp], 0xed4824af
mov word [ebp + 4], 0xdce4
mov word [ebp + 6], 0x45a8
mov byte [ebp + 8], 0x81
mov byte [ebp + 9], 0xe2
mov byte [ebp + 0xa], 0xfc
mov byte [ebp + 0xb], 0x79
mov byte [ebp + 0xc], 0x65
mov byte [ebp + 0xd], 8
mov byte [ebp + 0xe], 0x36
mov byte [ebp + 0xf], 0x34
lea ebp, [0x63a030]
mov dword [ebp], 0x3eb685db
mov word [ebp + 4], 0x65f9
mov word [ebp + 6], 0x4cf6
mov byte [ebp + 8], 0xa0
mov byte [ebp + 9], 0x3a
mov byte [ebp + 0xa], 0xe3
mov byte [ebp + 0xb], 0xef
mov byte [ebp + 0xc], 0x65
mov byte [ebp + 0xd], 0x72
mov byte [ebp + 0xe], 0x9f
mov byte [ebp + 0xf], 0x3d
lea ebp, [0x639ec0]
mov dword [ebp], 0xf1b32785
mov word [ebp + 4], 0x6fba
mov word [ebp + 6], 0x4fcf
mov byte [ebp + 8], 0x9d
mov byte [ebp + 9], 0x55
mov byte [ebp + 0xa], 0x7b
mov byte [ebp + 0xb], 0x8e
mov byte [ebp + 0xc], 0x7f
mov byte [ebp + 0xd], 0x15
mov byte [ebp + 0xe], 0x70
mov byte [ebp + 0xf], 0x91
lea ebp, [0x63a0b0]
mov dword [ebp], 0xa520a1a4
mov word [ebp + 4], 0x1780
mov word [ebp + 6], 0x4ff6
mov byte [ebp + 8], 0xbd
mov byte [ebp + 9], 0x18
mov byte [ebp + 0xa], 0x16
mov byte [ebp + 0xb], 0x73
mov byte [ebp + 0xc], 0x43
mov byte [ebp + 0xd], 0xc5
mov byte [ebp + 0xe], 0xaf
mov byte [ebp + 0xf], 0x16
lea ebp, [0x63a070]
mov dword [ebp], 0x352481e8
mov word [ebp + 4], 0x33be
mov word [ebp + 6], 0x4251
mov byte [ebp + 8], 0xba
mov byte [ebp + 9], 0x85
mov byte [ebp + 0xa], 0x60
mov byte [ebp + 0xb], 7
mov byte [ebp + 0xc], 0xca
mov byte [ebp + 0xd], 0xed
mov byte [ebp + 0xe], 0xcf
mov byte [ebp + 0xf], 0x9d
lea ebp, [0x63a000]
mov dword [ebp], 0x2b0f765d
mov word [ebp + 4], 0xc0e9
mov word [ebp + 6], 0x4171
mov byte [ebp + 8], 0x90
mov byte [ebp + 9], 0x8e
mov byte [ebp + 0xa], 8
mov byte [ebp + 0xb], 0xa6
mov byte [ebp + 0xc], 0x11
mov byte [ebp + 0xd], 0xb8
mov byte [ebp + 0xe], 0x4f
mov byte [ebp + 0xf], 0xf6
lea ebp, [0x63a010]
mov dword [ebp], 0xd9dc8a3b
mov word [ebp + 4], 0xb784
mov word [ebp + 6], 0x432e
mov byte [ebp + 8], 0xa7
mov byte [ebp + 9], 0x81
mov byte [ebp + 0xa], 0x5a
mov byte [ebp + 0xb], 0x11
mov byte [ebp + 0xc], 0x30
mov byte [ebp + 0xd], 0xa7
mov byte [ebp + 0xe], 0x59
mov byte [ebp + 0xf], 0x63
lea ebp, [0x63a080]
mov dword [ebp], 0x1ac14e77
mov word [ebp + 4], 0x2e7
mov word [ebp + 6], 0x4e5d
mov byte [ebp + 8], 0xb7
mov byte [ebp + 9], 0x44
mov byte [ebp + 0xa], 0x2e
mov byte [ebp + 0xb], 0xb1
mov byte [ebp + 0xc], 0xae
mov byte [ebp + 0xd], 0x51
mov byte [ebp + 0xe], 0x98
mov byte [ebp + 0xf], 0xb7
lea ebp, [0x639df0]
mov dword [ebp], 0xd65231b0
mov word [ebp + 4], 0xb2f1
mov word [ebp + 6], 0x4857
mov byte [ebp + 8], 0xa4
mov byte [ebp + 9], 0xce
mov byte [ebp + 0xa], 0xa8
mov byte [ebp + 0xb], 0xe7
mov byte [ebp + 0xc], 0xc6
mov byte [ebp + 0xd], 0xea
mov byte [ebp + 0xe], 0x7d
mov byte [ebp + 0xf], 0x27
lea ebp, [0x639fb0]
mov dword [ebp], 0xf38bf404
mov word [ebp + 4], 0x1d43
mov word [ebp + 6], 0x42f2
mov byte [ebp + 8], 0x93
mov byte [ebp + 9], 5
mov byte [ebp + 0xa], 0x67
mov byte [ebp + 0xb], 0xde
mov byte [ebp + 0xc], 0xb
mov byte [ebp + 0xd], 0x28
mov byte [ebp + 0xe], 0xfc
mov byte [ebp + 0xf], 0x23
lea ebp, [0x639bf0]
mov dword [ebp], 0x5e6c858f
mov word [ebp + 4], 0xe22
mov word [ebp + 6], 0x4760
mov byte [ebp + 8], 0x9a
mov byte [ebp + 9], 0xfe
mov byte [ebp + 0xa], 0xea
mov byte [ebp + 0xb], 0x33
mov byte [ebp + 0xc], 0x17
mov byte [ebp + 0xd], 0xb6
mov byte [ebp + 0xe], 0x71
mov byte [ebp + 0xf], 0x73
lea ebp, [0x639f80]
mov dword [ebp], 0x33e28130
mov word [ebp + 4], 0x4e1e
mov word [ebp + 6], 0x4676
mov byte [ebp + 8], 0x83
mov byte [ebp + 9], 0x5a
mov byte [ebp + 0xa], 0x98
mov byte [ebp + 0xb], 0x39
mov byte [ebp + 0xc], 0x5c
mov byte [ebp + 0xd], 0x3b
mov byte [ebp + 0xe], 0xc3
mov byte [ebp + 0xf], 0xbb
lea ebp, [0x63a1c0]
mov dword [ebp], 0x7c5a40ef
mov word [ebp + 4], 0xa0fb
mov word [ebp + 6], 0x4bfc
mov byte [ebp + 8], 0x87
mov byte [ebp + 9], 0x4a
mov byte [ebp + 0xa], 0xc0
mov byte [ebp + 0xb], 0xf2
mov byte [ebp + 0xc], 0xe0
mov byte [ebp + 0xd], 0xb9
mov byte [ebp + 0xe], 0xfa
mov byte [ebp + 0xf], 0x8e
lea ebp, [0x63a2dc]
mov dword [ebp], 0xde974d24
mov word [ebp + 4], 0xd9c6
mov word [ebp + 6], 0x4d3e
mov byte [ebp + 8], 0xbf
mov byte [ebp + 9], 0x91
mov byte [ebp + 0xa], 0xf4
mov byte [ebp + 0xb], 0x45
mov byte [ebp + 0xc], 0x51
mov byte [ebp + 0xd], 0x20
mov byte [ebp + 0xe], 0xb9
mov byte [ebp + 0xf], 0x17
lea ebp, [0x63a0e0]
mov dword [ebp], 0x6d809377
mov word [ebp + 4], 0x6af0
mov word [ebp + 6], 0x444b
mov byte [ebp + 8], 0x89
mov byte [ebp + 9], 0x57
mov byte [ebp + 0xa], 0xa3
mov byte [ebp + 0xb], 0x77
mov byte [ebp + 0xc], 0x3f
mov byte [ebp + 0xd], 2
mov byte [ebp + 0xe], 0x20
mov byte [ebp + 0xf], 0xe
lea ebp, [0x63a1b0]
mov dword [ebp], 0x6365d5a7
mov word [ebp + 4], 0xf0d
mov word [ebp + 6], 0x45e5
mov byte [ebp + 8], 0x87
mov byte [ebp + 9], 0xf6
mov byte [ebp + 0xa], 0xd
mov byte [ebp + 0xb], 0xa5
mov byte [ebp + 0xc], 0x6b
mov byte [ebp + 0xd], 0x6a
mov byte [ebp + 0xe], 0x4f
mov byte [ebp + 0xf], 0x7d
lea ebp, [0x63a28c]
mov dword [ebp], 0x905e63b6
mov word [ebp + 4], 0xc1bf
mov word [ebp + 6], 0x494e
mov byte [ebp + 8], 0xb2
mov byte [ebp + 9], 0x9c
mov byte [ebp + 0xa], 0x65
mov byte [ebp + 0xb], 0xb7
mov byte [ebp + 0xc], 0x32
mov byte [ebp + 0xd], 0xd3
mov byte [ebp + 0xe], 0xd2
mov byte [ebp + 0xf], 0x1a
lea ebp, [0x63a1e0]
mov dword [ebp], 0xf7f1ed05
mov word [ebp + 4], 0x9f6d
mov word [ebp + 6], 0x47a2
mov byte [ebp + 8], 0xaa
mov byte [ebp + 9], 0xae
mov byte [ebp + 0xa], 0x29
mov byte [ebp + 0xb], 0xd3
mov byte [ebp + 0xc], 0x17
mov byte [ebp + 0xd], 0xc6
mov byte [ebp + 0xe], 0xf0
mov byte [ebp + 0xf], 0x66
lea ebp, [0x639d30]
mov dword [ebp], 0x5cd7aee2
mov word [ebp + 4], 0x2219
mov word [ebp + 6], 0x4a67
mov byte [ebp + 8], 0xb8
mov byte [ebp + 9], 0x5d
mov byte [ebp + 0xa], 0x6c
mov byte [ebp + 0xb], 0x9c
mov byte [ebp + 0xc], 0xe1
mov byte [ebp + 0xd], 0x56
mov byte [ebp + 0xe], 0x60
mov byte [ebp + 0xf], 0xcb
lea ebp, [0x639be0]
mov dword [ebp], 0xbcbd3057
mov word [ebp + 4], 0xca5c
mov word [ebp + 6], 0x4622
mov byte [ebp + 8], 0xb4
mov byte [ebp + 9], 0x2d
mov byte [ebp + 0xa], 0xbc
mov byte [ebp + 0xb], 0x56
mov byte [ebp + 0xc], 0xdb
mov byte [ebp + 0xd], 0xa
mov byte [ebp + 0xe], 0xe5
mov byte [ebp + 0xf], 0x16
lea ebp, [0x639cf0]
mov dword [ebp], 0x724ef170
mov word [ebp + 4], 0xa42d
mov word [ebp + 6], 0x4fef
mov byte [ebp + 8], 0x9f
mov byte [ebp + 9], 0x26
mov byte [ebp + 0xa], 0xb6
mov byte [ebp + 0xb], 0xe
mov byte [ebp + 0xc], 0x84
mov byte [ebp + 0xd], 0x6f
mov byte [ebp + 0xe], 0xba
mov byte [ebp + 0xf], 0x4f
lea ebp, [0x639eb0]
mov dword [ebp], 0xd0384e7d
mov word [ebp + 4], 0xbac3
mov word [ebp + 6], 0x4797
mov byte [ebp + 8], 0x8f
mov byte [ebp + 9], 0x14
mov byte [ebp + 0xa], 0xcb
mov byte [ebp + 0xb], 0xa2
mov byte [ebp + 0xc], 0x29
mov byte [ebp + 0xd], 0xb3
mov byte [ebp + 0xe], 0x92
mov byte [ebp + 0xf], 0xb5
lea ebp, [0x63a160]
mov dword [ebp], 0x4bd8d571
mov word [ebp + 4], 0x6d19
mov word [ebp + 6], 0x48d3
mov byte [ebp + 8], 0xbe
mov byte [ebp + 9], 0x97
mov byte [ebp + 0xa], 0x42
mov byte [ebp + 0xb], 0x22
mov byte [ebp + 0xc], 0x20
mov byte [ebp + 0xd], 8
mov byte [ebp + 0xe], 0xe
mov byte [ebp + 0xf], 0x43
lea ebp, [0x639cb0]
mov dword [ebp], 0x18989b1d
mov word [ebp + 4], 0x99b5
mov word [ebp + 6], 0x455b
mov byte [ebp + 8], 0x84
mov byte [ebp + 9], 0x1c
mov byte [ebp + 0xa], 0xab
mov byte [ebp + 0xb], 0x7c
mov byte [ebp + 0xc], 0x74
mov byte [ebp + 0xd], 0xe4
mov byte [ebp + 0xe], 0xdd
mov byte [ebp + 0xf], 0xfc
lea ebp, [0x639e70]
mov dword [ebp], 0xc870044b
mov word [ebp + 4], 0xf49e
mov word [ebp + 6], 0x4126
mov byte [ebp + 8], 0xa9
mov byte [ebp + 9], 0xc3
mov byte [ebp + 0xa], 0xb5
mov byte [ebp + 0xb], 0x2a
mov byte [ebp + 0xc], 0x1f
mov byte [ebp + 0xd], 0xf4
mov byte [ebp + 0xe], 0x11
mov byte [ebp + 0xf], 0xe8
lea ebp, [0x639d90]
mov dword [ebp], 0xb6ebfb86
mov word [ebp + 4], 0x6907
mov word [ebp + 6], 0x413c
mov byte [ebp + 8], 0x9a
mov byte [ebp + 9], 0xf7
mov byte [ebp + 0xa], 0x4f
mov byte [ebp + 0xb], 0xc2
mov byte [ebp + 0xc], 0xab
mov byte [ebp + 0xd], 0xf0
mov byte [ebp + 0xe], 0x7c
mov byte [ebp + 0xf], 0xc5
lea ebp, [0x639ce0]
mov dword [ebp], 0x3214fab5
mov word [ebp + 4], 0x9757
mov word [ebp + 6], 0x4298
mov byte [ebp + 8], 0xbb
mov byte [ebp + 9], 0x61
mov byte [ebp + 0xa], 0x92
mov byte [ebp + 0xb], 0xa9
mov byte [ebp + 0xc], 0xde
mov byte [ebp + 0xd], 0xaa
mov byte [ebp + 0xe], 0x44
mov byte [ebp + 0xf], 0xff
lea ebp, [0x639c50]
mov dword [ebp], 0x2400183a
mov word [ebp + 4], 0x6185
mov word [ebp + 6], 0x49fb
mov byte [ebp + 8], 0xa2
mov byte [ebp + 9], 0xd8
mov byte [ebp + 0xa], 0x4a
mov byte [ebp + 0xb], 0x39
mov byte [ebp + 0xc], 0x2a
mov byte [ebp + 0xd], 0x60
mov byte [ebp + 0xe], 0x2b
mov byte [ebp + 0xf], 0xa3
lea ebp, [0x639c20]
mov dword [ebp], 0xe555ab60
mov word [ebp + 4], 0x153b
mov word [ebp + 6], 0x4d17
mov byte [ebp + 8], 0x9f
mov byte [ebp + 9], 4
mov byte [ebp + 0xa], 0xa5
mov byte [ebp + 0xb], 0xfe
mov byte [ebp + 0xc], 0x99
mov byte [ebp + 0xd], 0xfc
mov byte [ebp + 0xe], 0x15
mov byte [ebp + 0xf], 0xec
lea ebp, [0x639e40]
mov dword [ebp], 0x8ad10c31
mov word [ebp + 4], 0x2adb
mov word [ebp + 6], 0x4296
mov byte [ebp + 8], 0xa8
mov byte [ebp + 9], 0xf7
mov byte [ebp + 0xa], 0xe4
mov byte [ebp + 0xb], 0x70
mov byte [ebp + 0xc], 0x12
mov byte [ebp + 0xd], 0x32
mov byte [ebp + 0xe], 0xc9
mov byte [ebp + 0xf], 0x72
lea ebp, [0x639d70]
mov dword [ebp], 0x2a00375e
mov word [ebp + 4], 0x224c
mov word [ebp + 6], 0x49de
mov byte [ebp + 8], 0xb8
mov byte [ebp + 9], 0xd1
mov byte [ebp + 0xa], 0x44
mov byte [ebp + 0xb], 0xd
mov byte [ebp + 0xc], 0xf7
mov byte [ebp + 0xd], 0xef
mov byte [ebp + 0xe], 0x3d
mov byte [ebp + 0xf], 0xdc
lea ebp, [0x63a1f0]
mov dword [ebp], 0xc1bae2d0
mov word [ebp + 4], 0x10df
mov word [ebp + 6], 0x4334
mov byte [ebp + 8], 0xbe
mov byte [ebp + 9], 0xdd
mov byte [ebp + 0xa], 0x7a
mov byte [ebp + 0xb], 0xa2
mov byte [ebp + 0xc], 0xb
mov byte [ebp + 0xd], 0x22
mov byte [ebp + 0xe], 0x7a
mov byte [ebp + 0xf], 0x9d
lea ebp, [0x63a3fc]
mov dword [ebp], 0x9e52ab10
mov word [ebp + 4], 0xf80d
mov word [ebp + 6], 0x49df
mov byte [ebp + 8], 0xac
mov byte [ebp + 9], 0xb8
mov byte [ebp + 0xa], 0x43
mov byte [ebp + 0xb], 0x30
mov byte [ebp + 0xc], 0xf5
mov byte [ebp + 0xd], 0x68
mov byte [ebp + 0xe], pe_nt_image_headers32
mov byte [ebp + 0xf], 0x55
lea ebp, [0x63a37c]
mov dword [ebp], 0x762d272
mov word [ebp + 4], 0xc50a
mov word [ebp + 6], 0x4bb0
mov byte [ebp + 8], 0xa3
mov byte [ebp + 9], 0x82
mov byte [ebp + 0xa], 0x69
mov byte [ebp + 0xb], 0x7d
mov byte [ebp + 0xc], 0xcd
mov byte [ebp + 0xd], 0x72
mov byte [ebp + 0xe], 0x9b
mov byte [ebp + 0xf], 0x80
lea ebp, [0x639dd0]
mov dword [ebp], 0xde92c1c7
mov word [ebp + 4], 0x837f
mov word [ebp + 6], 0x4f69
mov byte [ebp + 8], 0xa3
mov byte [ebp + 9], 0xbb
mov byte [ebp + 0xa], 0x86
mov byte [ebp + 0xb], 0xe6
mov byte [ebp + 0xc], 0x31
mov byte [ebp + 0xd], 0x20
mov byte [ebp + 0xe], 0x4a
mov byte [ebp + 0xf], 0x23
lea ebp, [0x63a38c]
mov dword [ebp], 0x15ca69b3
mov word [ebp + 4], 0x30ee
mov word [ebp + 6], 0x49c1
mov byte [ebp + 8], 0xac
mov byte [ebp + 9], 0xe1
mov byte [ebp + 0xa], 0x6b
mov byte [ebp + 0xb], 0x5e
mov byte [ebp + 0xc], 0xc3
mov byte [ebp + 0xd], 0x72
mov byte [ebp + 0xe], 0xaf
mov byte [ebp + 0xf], 0xb5
lea ebp, [0x63a23c]
mov dword [ebp], 0xb250c668
mov word [ebp + 4], 0xf57d
mov word [ebp + 6], 0x4ee1
mov byte [ebp + 8], 0xa6
mov byte [ebp + 9], 0x3c
mov byte [ebp + 0xa], 0x29
mov byte [ebp + 0xb], 0xe
mov byte [ebp + 0xc], 0xe7
mov byte [ebp + 0xd], 0xd1
mov byte [ebp + 0xe], 0xaa
mov byte [ebp + 0xf], 0x1f
lea ebp, [0x639f00]
mov dword [ebp], 0xc4900540
mov word [ebp + 4], 0x2379
mov word [ebp + 6], 0x4c75
mov byte [ebp + 8], 0x84
mov byte [ebp + 9], 0x4b
mov byte [ebp + 0xa], 0x64
mov byte [ebp + 0xb], 0xe6
mov byte [ebp + 0xc], 0xfa
mov byte [ebp + 0xd], 0xf8
mov byte [ebp + 0xe], 0x71
mov byte [ebp + 0xf], 0x6b
lea ebp, [0x639ed0]
mov dword [ebp], 0x859ead94
mov word [ebp + 4], 0x2e85
mov word [ebp + 6], 0x48ad
mov byte [ebp + 8], 0xa7
mov byte [ebp + 9], 0x1a
mov byte [ebp + 0xa], 9
mov byte [ebp + 0xb], 0x69
mov byte [ebp + 0xc], 0xcb
mov byte [ebp + 0xd], 0x56
mov byte [ebp + 0xe], 0xa6
mov byte [ebp + 0xf], 0xcd
lea ebp, [0x63a190]
mov dword [ebp], 0x69d2cf90
mov word [ebp + 4], 0xfc33
mov word [ebp + 6], 0x4fb7
mov byte [ebp + 8], 0x9a
mov byte [ebp + 9], 0xc
mov byte [ebp + 0xa], 0xeb
mov byte [ebp + 0xb], 0xb0
mov byte [ebp + 0xc], 0xf0
mov byte [ebp + 0xd], 0xfc
mov byte [ebp + 0xe], 0xb4
mov byte [ebp + 0xf], 0x3c
lea ebp, [0x63a150]
mov dword [ebp], 0xdfdf76a2
mov word [ebp + 4], 0xc82a
mov word [ebp + 6], 0x4d63
mov byte [ebp + 8], 0x90
mov byte [ebp + 9], 0x6a
mov byte [ebp + 0xa], 0x56
mov byte [ebp + 0xb], 0x44
mov byte [ebp + 0xc], 0xac
mov byte [ebp + 0xd], 0x45
mov byte [ebp + 0xe], 0x73
mov byte [ebp + 0xf], 0x85
lea ebp, [0x639fa0]
mov dword [ebp], 0xdf7266ac
mov word [ebp + 4], 0x9274
mov word [ebp + 6], 0x4867
mov byte [ebp + 8], 0x8d
mov byte [ebp + 9], 0x55
mov byte [ebp + 0xa], 0x3b
mov byte [ebp + 0xb], 0xd6
mov byte [ebp + 0xc], 0x61
mov byte [ebp + 0xd], 0xde
mov byte [ebp + 0xe], 0x87
mov byte [ebp + 0xf], 0x2d
lea ebp, [0x63a3bc]
mov dword [ebp], 0xa305ce99
mov word [ebp + 4], 0xf527
mov word [ebp + 6], 0x492b
mov byte [ebp + 8], 0x8b
mov byte [ebp + 9], 0x1a
mov byte [ebp + 0xa], 0x7e
mov byte [ebp + 0xb], 0x76
mov byte [ebp + 0xc], 0xfa
mov byte [ebp + 0xd], 0x98
mov byte [ebp + 0xe], 0xd6
mov byte [ebp + 0xf], 0xe4
lea ebp, [0x639ea0]
mov dword [ebp], 0xde61d971
mov word [ebp + 4], 0x5ebc
mov word [ebp + 6], 0x4f02
mov byte [ebp + 8], 0xa3
mov byte [ebp + 9], 0xa9
mov byte [ebp + 0xa], 0x6c
mov byte [ebp + 0xb], 0x82
mov byte [ebp + 0xc], 0x89
mov byte [ebp + 0xd], 0x5e
mov byte [ebp + 0xe], 0x5c
mov byte [ebp + 0xf], 4
lea ebp, [0x639e00]
mov dword [ebp], 0x374de290
mov word [ebp + 4], 0x123f
mov word [ebp + 6], 0x4565
mov byte [ebp + 8], 0x91
mov byte [ebp + 9], 0x64
mov byte [ebp + 0xa], 0x39
mov byte [ebp + 0xb], 0xc4
mov byte [ebp + 0xc], 0x92
mov byte [ebp + 0xd], 0x5e
mov byte [ebp + 0xe], 0x46
mov byte [ebp + 0xf], 0x7b
lea ebp, [0x639bd0]
mov dword [ebp], 0x3d644c9b
mov word [ebp + 4], 0x1fb8
mov word [ebp + 6], 0x4f30
mov byte [ebp + 8], 0x9b
mov byte [ebp + 9], 0x45
mov byte [ebp + 0xa], 0xf6
mov byte [ebp + 0xb], 0x70
mov byte [ebp + 0xc], 0x23
mov byte [ebp + 0xd], 0x5f
mov byte [ebp + 0xe], 0x79
mov byte [ebp + 0xf], 0xc0
lea ebp, [0x63a42c]
mov dword [ebp], 0x7d1d3a04
mov word [ebp + 4], 0xdebb
mov word [ebp + 6], 0x4115
mov byte [ebp + 8], 0x95
mov byte [ebp + 9], 0xcf
mov byte [ebp + 0xa], 0x2f
mov byte [ebp + 0xb], 0x29
mov byte [ebp + 0xc], 0xda
mov byte [ebp + 0xd], 0x29
mov byte [ebp + 0xe], 0x20
mov byte [ebp + 0xf], 0xda
lea ebp, [0x639f40]
mov dword [ebp], 0x52a4f021
mov word [ebp + 4], 0x7b75
mov word [ebp + 6], 0x48a9
mov byte [ebp + 8], 0x9f
mov byte [ebp + 9], 0x6b
mov byte [ebp + 0xa], 0x4b
mov byte [ebp + 0xb], 0x87
mov byte [ebp + 0xc], 0xa2
mov byte [ebp + 0xd], 0x10
mov byte [ebp + 0xe], 0xbc
mov byte [ebp + 0xf], 0x8f
lea ebp, [0x639b70]
mov dword [ebp], 0x56784854
mov word [ebp + 4], 0xc6cb
mov word [ebp + 6], 0x462b
mov byte [ebp + 8], 0x81
mov byte [ebp + 9], 0x69
mov byte [ebp + 0xa], 0x88
mov byte [ebp + 0xb], 0xe3
mov byte [ebp + 0xc], 0x50
mov byte [ebp + 0xd], 0xac
mov byte [ebp + 0xe], 0xb8
mov byte [ebp + 0xf], 0x82
lea ebp, [0x639c60]
mov dword [ebp], 0xa75d362e
mov word [ebp + 4], 0x50fc
mov word [ebp + 6], 0x4fb7
mov byte [ebp + 8], 0xac
mov byte [ebp + 9], 0x2c
mov byte [ebp + 0xa], 0xa8
mov byte [ebp + 0xb], 0xbe
mov byte [ebp + 0xc], 0xaa
mov byte [ebp + 0xd], 0x31
mov byte [ebp + 0xe], 0x44
mov byte [ebp + 0xf], 0x93
lea ebp, [0x639da0]
mov dword [ebp], 0x7b396e54
mov word [ebp + 4], 0x9ec5
mov word [ebp + 6], 0x4300
mov byte [ebp + 8], 0xbe
mov byte [ebp + 9], 0xa
mov byte [ebp + 0xa], 0x24
mov byte [ebp + 0xb], 0x82
mov byte [ebp + 0xc], 0xeb
mov byte [ebp + 0xd], 0xae
mov byte [ebp + 0xe], 0x1a
mov byte [ebp + 0xf], 0x26
lea ebp, [0x63a40c]
mov dword [ebp], 0xdebf2536
mov word [ebp + 4], 0xe1a8
mov word [ebp + 6], 0x4c59
mov byte [ebp + 8], 0xb6
mov byte [ebp + 9], 0xa2
mov byte [ebp + 0xa], 0x41
mov byte [ebp + 0xb], 0x45
mov byte [ebp + 0xc], 0x86
mov byte [ebp + 0xd], 0x47
mov byte [ebp + 0xe], 0x6a
mov byte [ebp + 0xf], 0xea
lea ebp, [0x639d50]
mov dword [ebp], 0x54fae61
mov word [ebp + 4], 0x4dd8
mov word [ebp + 6], 0x4787
mov byte [ebp + 8], 0x80
mov byte [ebp + 9], 0xb6
mov byte [ebp + 0xa], 9
mov byte [ebp + 0xb], 2
mov byte [ebp + 0xc], 0x20
mov byte [ebp + 0xd], 0xc4
mov byte [ebp + 0xe], 0xb7
mov byte [ebp + 0xf], 0
lea ebp, [0x63a060]
mov dword [ebp], 0x4c5c32ff
mov word [ebp + 4], 0xbb9d
mov word [ebp + 6], 0x43b0
mov byte [ebp + 8], 0xb5
mov byte [ebp + 9], 0xb4
mov byte [ebp + 0xa], 0x2d
mov byte [ebp + 0xb], 0x72
mov byte [ebp + 0xc], 0xe5
mov byte [ebp + 0xd], 0x4e
mov byte [ebp + 0xe], 0xaa
mov byte [ebp + 0xf], 0xa4
lea ebp, [0x63a3ac]
mov dword [ebp], 0xcac52c1a
mov word [ebp + 4], 0xb53d
mov word [ebp + 6], 0x4edc
mov byte [ebp + 8], 0x92
mov byte [ebp + 9], 0xd7
mov byte [ebp + 0xa], 0x6b
mov byte [ebp + 0xb], 0x2e
mov byte [ebp + 0xc], 0x8a
mov byte [ebp + 0xd], 0xc1
mov byte [ebp + 0xe], 0x94
mov byte [ebp + 0xf], 0x34
lea ebp, [0x63a31c]
mov dword [ebp], 0x98ec0e18
mov word [ebp + 4], 0x2098
mov word [ebp + 6], 0x4d44
mov byte [ebp + 8], 0x86
mov byte [ebp + 9], 0x44
mov byte [ebp + 0xa], 0x66
mov byte [ebp + 0xb], 0x97
mov byte [ebp + 0xc], 0x93
mov byte [ebp + 0xd], 0x15
mov byte [ebp + 0xe], 0xa2
mov byte [ebp + 0xf], 0x81
lea ebp, [0x63a140]
mov dword [ebp], 0xee32e446
mov word [ebp + 4], 0x31ca
mov word [ebp + 6], 0x4aba
mov byte [ebp + 8], 0x81
mov byte [ebp + 9], 0x4f
mov byte [ebp + 0xa], 0xa5
mov byte [ebp + 0xb], 0xeb
mov byte [ebp + 0xc], 0xd2
mov byte [ebp + 0xd], 0xfd
mov byte [ebp + 0xe], 0x6d
mov byte [ebp + 0xf], 0x5e
lea ebp, [0x639f90]
mov dword [ebp], 0xbfb9d5e0
mov word [ebp + 4], 0xc6a9
mov word [ebp + 6], 0x404c
mov byte [ebp + 8], 0xb2
mov byte [ebp + 9], 0xb2
mov byte [ebp + 0xa], 0xae
mov byte [ebp + 0xb], 0x6d
mov byte [ebp + 0xc], 0xb6
mov byte [ebp + 0xd], 0xaf
mov byte [ebp + 0xe], 0x49
mov byte [ebp + 0xf], 0x68
lea ebp, [0x63a36c]
mov dword [ebp], 0xf3ce0f7c
mov word [ebp + 4], 0x4901
mov word [ebp + 6], 0x4acc
mov byte [ebp + 8], 0x86
mov byte [ebp + 9], 0x48
mov byte [ebp + 0xa], 0xd5
mov byte [ebp + 0xb], 0xd4
mov byte [ebp + 0xc], 0x4b
mov byte [ebp + 0xd], 4
mov byte [ebp + 0xe], 0xef
mov byte [ebp + 0xf], 0x8f
lea ebp, [0x63a1d0]
mov dword [ebp], 0xa302545d
mov word [ebp + 4], 0xdeff
mov word [ebp + 6], 0x464b
mov byte [ebp + 8], 0xab
mov byte [ebp + 9], 0xe8
mov byte [ebp + 0xa], 0x61
mov byte [ebp + 0xb], 0xc8
mov byte [ebp + 0xc], 0x64
mov byte [ebp + 0xd], 0x8d
mov byte [ebp + 0xe], 0x93
mov byte [ebp + 0xf], 0x9b
lea ebp, [0x639fd0]
mov dword [ebp], 0x190337d1
mov word [ebp + 4], 0xb8ca
mov word [ebp + 6], 0x4121
mov byte [ebp + 8], 0xa6
mov byte [ebp + 9], 0x39
mov byte [ebp + 0xa], 0x6d
mov byte [ebp + 0xb], 0x47
mov byte [ebp + 0xc], 0x2d
mov byte [ebp + 0xd], 0x16
mov byte [ebp + 0xe], 0x97
mov byte [ebp + 0xf], 0x2a
lea ebp, [0x63a170]
mov dword [ebp], 0x2c36c0aa
mov word [ebp + 4], 0x5812
mov word [ebp + 6], 0x4b87
mov byte [ebp + 8], 0xbf
mov byte [ebp + 9], 0xd0
mov byte [ebp + 0xa], 0x4c
mov byte [ebp + 0xb], 0xd0
mov byte [ebp + 0xc], 0xdf
mov byte [ebp + 0xd], 0xb1
mov byte [ebp + 0xe], 0x9b
mov byte [ebp + 0xf], 0x39
lea ebp, [0x63a2ac]
mov dword [ebp], 0x7b0db17d
mov word [ebp + 4], 0x9cd2
mov word [ebp + 6], 0x4a93
mov byte [ebp + 8], 0x97
mov byte [ebp + 9], 0x33
mov byte [ebp + 0xa], 0x46
mov byte [ebp + 0xb], 0xcc
mov byte [ebp + 0xc], 0x89
mov byte [ebp + 0xd], 2
mov byte [ebp + 0xe], 0x2e
mov byte [ebp + 0xf], 0x7c
lea ebp, [0x639c40]
mov dword [ebp], 0x2112ab0a
mov word [ebp + 4], 0xc86a
mov word [ebp + 6], 0x4ffe
mov byte [ebp + 8], 0xa3
mov byte [ebp + 9], 0x68
mov byte [ebp + 0xa], 0xd
mov byte [ebp + 0xb], 0xe9
mov byte [ebp + 0xc], 0x6e
mov byte [ebp + 0xd], 0x47
mov byte [ebp + 0xe], 1
mov byte [ebp + 0xf], 0x2e
lea ebp, [0x63a180]
mov dword [ebp], 0xa990ae9f
mov word [ebp + 4], 0xa03b
mov word [ebp + 6], 0x4e80
mov byte [ebp + 8], 0x94
mov byte [ebp + 9], 0xbc
mov byte [ebp + 0xa], 0x99
mov byte [ebp + 0xb], 0x12
mov byte [ebp + 0xc], 0xd7
mov byte [ebp + 0xd], 0x50
mov byte [ebp + 0xe], 0x41
mov byte [ebp + 0xf], 4
lea ebp, [0x639de0]
mov dword [ebp], 0x491e922f
mov word [ebp + 4], 0x5643
mov word [ebp + 6], 0x4af4
mov byte [ebp + 8], 0xa7
mov byte [ebp + 9], 0xeb
mov byte [ebp + 0xa], 0x4e
mov byte [ebp + 0xb], 0x7a
mov byte [ebp + 0xc], 0x13
mov byte [ebp + 0xd], 0x8d
mov byte [ebp + 0xe], 0x81
mov byte [ebp + 0xf], 0x74
lea ebp, [0x63a44c]
mov dword [ebp], 0x1a6fdba2
mov word [ebp + 4], 0xf42d
mov word [ebp + 6], 0x4358
mov byte [ebp + 8], 0xa7
mov byte [ebp + 9], 0x98
mov byte [ebp + 0xa], 0xb7
mov byte [ebp + 0xb], 0x4d
mov byte [ebp + 0xc], 0x74
mov byte [ebp + 0xd], 0x59
mov byte [ebp + 0xe], 0x26
mov byte [ebp + 0xf], 0xc5
lea ebp, [0x639e90]
mov dword [ebp], 0x52528a6b
mov word [ebp + 4], 0xb9e3
mov word [ebp + 6], 0x4add
mov byte [ebp + 8], 0xb6
mov byte [ebp + 9], 0xd
mov byte [ebp + 0xa], 0x58
mov byte [ebp + 0xb], 0x8c
mov byte [ebp + 0xc], 0x2d
mov byte [ebp + 0xd], 0xba
mov byte [ebp + 0xe], 0x84
mov byte [ebp + 0xf], 0x2d
lea ebp, [0x63a43c]
mov dword [ebp], 0x9b74b6a3
mov word [ebp + 4], 0xdfd
mov word [ebp + 6], 0x4f11
mov byte [ebp + 8], 0x9e
mov byte [ebp + 9], pe_nt_image_headers32
mov byte [ebp + 0xa], 0x5f
mov byte [ebp + 0xb], pe_nt_image_headers32
mov byte [ebp + 0xc], 0
mov byte [ebp + 0xd], 0xf2
mov byte [ebp + 0xe], 0xe7
mov byte [ebp + 0xf], 0x72
lea ebp, [0x639cd0]
mov dword [ebp], 0x5ce4a5e9
mov word [ebp + 4], 0xe4eb
mov word [ebp + 6], 0x479d
mov byte [ebp + 8], 0xb8
mov byte [ebp + 9], 0x9f
mov byte [ebp + 0xa], 0x13
mov byte [ebp + 0xb], 0xc
mov byte [ebp + 0xc], 2
mov byte [ebp + 0xd], 0x88
mov byte [ebp + 0xe], 0x61
mov byte [ebp + 0xf], 0x55
lea ebp, [0x639cc0]
mov dword [ebp], 0x1b3ea5dc
mov word [ebp + 4], 0xb587
mov word [ebp + 6], 0x4786
mov byte [ebp + 8], 0xb4
mov byte [ebp + 9], 0xef
mov byte [ebp + 0xa], 0xbd
mov byte [ebp + 0xb], 0x1d
mov byte [ebp + 0xc], 0xc3
mov byte [ebp + 0xd], 0x32
mov byte [ebp + 0xe], 0xae
mov byte [ebp + 0xf], 0xae
lea ebp, [0x63a33c]
mov dword [ebp], 0x48daf80b
mov word [ebp + 4], 0xe6cf
mov word [ebp + 6], 0x4f4e
mov byte [ebp + 8], 0xb8
mov byte [ebp + 9], 0
mov byte [ebp + 0xa], 0xe
mov byte [ebp + 0xb], 0x69
mov byte [ebp + 0xc], 0xd8
mov byte [ebp + 0xd], 0x4e
mov byte [ebp + 0xe], 0xe3
mov byte [ebp + 0xf], 0x84
lea ebp, [0x63a35c]
mov dword [ebp], 0x9e3995ab
mov word [ebp + 4], 0x1f9c
mov word [ebp + 6], 0x4f13
mov byte [ebp + 8], 0xb8
mov byte [ebp + 9], 0x27
mov byte [ebp + 0xa], 0x48
mov byte [ebp + 0xb], 0xb2
mov byte [ebp + 0xc], 0x4b
mov byte [ebp + 0xd], 0x6c
mov byte [ebp + 0xe], 0x71
mov byte [ebp + 0xf], 0x74
lea ebp, [0x639d00]
mov dword [ebp], 0xbcb5256f
mov word [ebp + 4], 0x79f6
mov word [ebp + 6], 0x4cee
mov byte [ebp + 8], 0xb7
mov byte [ebp + 9], 0x25
mov byte [ebp + 0xa], 0xdc
mov byte [ebp + 0xb], 0x34
mov byte [ebp + 0xc], 0xe4
mov byte [ebp + 0xd], 2
mov byte [ebp + 0xe], 0xfd
mov byte [ebp + 0xf], 0x46
lea ebp, [0x63a30c]
mov dword [ebp], 0x8ca0b1
mov word [ebp + 4], 0x55b4
mov word [ebp + 6], 0x4c56
mov byte [ebp + 8], 0xb8
mov byte [ebp + 9], 0xa8
mov byte [ebp + 0xa], 0x4d
mov byte [ebp + 0xb], 0xe4
mov byte [ebp + 0xc], 0xb2
mov byte [ebp + 0xd], 0x99
mov byte [ebp + 0xe], 0xd3
mov byte [ebp + 0xf], 0xbe
lea ebp, [0x63a2bc]
mov dword [ebp], 0x482af6c
mov word [ebp + 4], 0x8f1
mov word [ebp + 6], 0x4c34
mov byte [ebp + 8], 0x8c
mov byte [ebp + 9], 0x90
mov byte [ebp + 0xa], 0xe1
mov byte [ebp + 0xb], 0x7e
mov byte [ebp + 0xc], 0xc9
mov byte [ebp + 0xd], 0x8b
mov byte [ebp + 0xe], 0x1e
mov byte [ebp + 0xf], 0x17
lea ebp, [0x63a2ec]
mov dword [ebp], 0x1e87508d
mov word [ebp + 4], 0x89c2
mov word [ebp + 6], 0x42f0
mov byte [ebp + 8], 0x8a
mov byte [ebp + 9], 0x7e
mov byte [ebp + 0xa], 0x64
mov byte [ebp + 0xb], 0x5a
mov byte [ebp + 0xc], 0xf
mov byte [ebp + 0xd], 0x50
mov byte [ebp + 0xe], 0xca
mov byte [ebp + 0xf], 0x58
lea ebp, [0x63a3cc]
mov dword [ebp], 0xf26305ef
mov word [ebp + 4], 0x6948
mov word [ebp + 6], 0x40b9
mov byte [ebp + 8], 0xb2
mov byte [ebp + 9], 0x55
mov byte [ebp + 0xa], 0x81
mov byte [ebp + 0xb], 0x45
mov byte [ebp + 0xc], 0x3d
mov byte [ebp + 0xd], 9
mov byte [ebp + 0xe], 0xc7
mov byte [ebp + 0xf], 0x85
lea ebp, [0x639c80]
mov dword [ebp], 0xa440879f
mov word [ebp + 4], 0x87a0
mov word [ebp + 6], 0x4f7d
mov byte [ebp + 8], 0xb7
mov byte [ebp + 9], 0
mov byte [ebp + 0xa], 2
mov byte [ebp + 0xb], 7
mov byte [ebp + 0xc], 0xb9
mov byte [ebp + 0xd], 0x66
mov byte [ebp + 0xe], 0x19
mov byte [ebp + 0xf], 0x4a
lea ebp, [0x63a29c]
mov dword [ebp], 0xa3918781
mov word [ebp + 4], 0xe5f2
mov word [ebp + 6], 0x4890
mov byte [ebp + 8], 0xb3
mov byte [ebp + 9], 0xd9
mov byte [ebp + 0xa], 0xa7
mov byte [ebp + 0xb], 0xe5
mov byte [ebp + 0xc], 0x43
mov byte [ebp + 0xd], 0x32
mov byte [ebp + 0xe], 0x32
mov byte [ebp + 0xf], 0x8c
lea ebp, [0x639c10]
mov dword [ebp], 0xbcfc5a
mov word [ebp + 4], 0xed94
mov word [ebp + 6], 0x4e48
mov byte [ebp + 8], 0x96
mov byte [ebp + 9], 0xa1
mov byte [ebp + 0xa], 0x3f
mov byte [ebp + 0xb], 0x62
mov byte [ebp + 0xc], 0x17
mov byte [ebp + 0xd], 0xf2
mov byte [ebp + 0xe], 0x19
mov byte [ebp + 0xf], 0x90
lea ebp, [0x639f60]
mov dword [ebp], 0xaaa8d5a5
mov word [ebp + 4], 0xf1d6
mov word [ebp + 6], 0x4259
mov byte [ebp + 8], 0xba
mov byte [ebp + 9], 0xa8
mov byte [ebp + 0xa], pe_nt_image_headers32
mov byte [ebp + 0xb], 0xe7
mov byte [ebp + 0xc], 0xef
mov byte [ebp + 0xd], 0x60
mov byte [ebp + 0xe], 0x83
mov byte [ebp + 0xf], 0x5e
lea ebp, [0x639e60]
mov dword [ebp], 0xb7bede81
mov word [ebp + 4], 0xdf94
mov word [ebp + 6], 0x4682
mov byte [ebp + 8], 0xa7
mov byte [ebp + 9], 0xd8
mov byte [ebp + 0xa], 0x57
mov byte [ebp + 0xb], 0xa5
mov byte [ebp + 0xc], 0x26
mov byte [ebp + 0xd], 0x20
mov byte [ebp + 0xe], 0xb8
mov byte [ebp + 0xf], 0x6f
lea ebp, [0x63a24c]
mov dword [ebp], 0xab5fb87b
mov word [ebp + 4], 0x7ce2
mov word [ebp + 6], 0x4f83
mov byte [ebp + 8], 0x91
mov byte [ebp + 9], 0x5d
mov byte [ebp + 0xa], 0x55
mov byte [ebp + 0xb], 8
mov byte [ebp + 0xc], 0x46
mov byte [ebp + 0xd], 0xc9
mov byte [ebp + 0xe], 0x53
mov byte [ebp + 0xf], 0x7b
lea ebp, [0x639f50]
mov dword [ebp], 0xa52bba46
mov word [ebp + 4], 0xe9e1
mov word [ebp + 6], 0x435f
mov byte [ebp + 8], 0xb3
mov byte [ebp + 9], 0xd9
mov byte [ebp + 0xa], 0x28
mov byte [ebp + 0xb], 0xda
mov byte [ebp + 0xc], 0xa6
mov byte [ebp + 0xd], 0x48
mov byte [ebp + 0xe], 0xc0
mov byte [ebp + 0xf], 0xf6
lea ebp, [0x639e30]
mov dword [ebp], 0xa52bba46
mov word [ebp + 4], 0xe9e1
mov word [ebp + 6], 0x435f
mov byte [ebp + 8], 0xb3
mov byte [ebp + 9], 0xd9
mov byte [ebp + 0xa], 0x28
mov byte [ebp + 0xb], 0xda
mov byte [ebp + 0xc], 0xa6
mov byte [ebp + 0xd], 0x48
mov byte [ebp + 0xe], 0xc0
mov byte [ebp + 0xf], 0xf6
lea ebp, [0x639d10]
mov dword [ebp], 0x24d89e24
mov word [ebp + 4], 0x2f19
mov word [ebp + 6], 0x4534
mov byte [ebp + 8], 0x9d
mov byte [ebp + 9], 0xde
mov byte [ebp + 0xa], 0x6a
mov byte [ebp + 0xb], 0x66
mov byte [ebp + 0xc], 0x71
mov byte [ebp + 0xd], 0xfb
mov byte [ebp + 0xe], 0xb8
mov byte [ebp + 0xf], 0xfe
lea ebp, [0x639b90]
mov dword [ebp], 0x339719b5
mov word [ebp + 4], 0x8c47
mov word [ebp + 6], 0x4894
mov byte [ebp + 8], 0x94
mov byte [ebp + 9], 0xc2
mov byte [ebp + 0xa], 0xd8
mov byte [ebp + 0xb], 0xf7
mov byte [ebp + 0xc], 0x7a
mov byte [ebp + 0xd], 0xdd
mov byte [ebp + 0xe], 0x44
mov byte [ebp + 0xf], 0xa6
lea ebp, [0x639f30]
mov dword [ebp], 0xc3f2459e
mov word [ebp + 4], 0x80d6
mov word [ebp + 6], 0x45dc
mov byte [ebp + 8], 0xbf
mov byte [ebp + 9], 0xef
mov byte [ebp + 0xa], 0x1f
mov byte [ebp + 0xb], 0x76
mov byte [ebp + 0xc], 0x9f
mov byte [ebp + 0xd], 0x2b
mov byte [ebp + 0xe], 0xe7
mov byte [ebp + 0xf], 0x30
lea ebp, [0x639dc0]
mov dword [ebp], 0x767e6811
mov word [ebp + 4], 0x49cb
mov word [ebp + 6], 0x4273
mov byte [ebp + 8], 0x87
mov byte [ebp + 9], 0xc2
mov byte [ebp + 0xa], 0x20
mov byte [ebp + 0xb], 0xf3
mov byte [ebp + 0xc], 0x55
mov byte [ebp + 0xd], 0xe1
mov byte [ebp + 0xe], 8
mov byte [ebp + 0xf], 0x5b
lea ebp, [0x639c00]
mov dword [ebp], 0xd4c3db6
mov word [ebp + 4], 0x3a3
mov word [ebp + 6], 0x462f
mov byte [ebp + 8], 0xa0
mov byte [ebp + 9], 0xe6
mov byte [ebp + 0xa], 8
mov byte [ebp + 0xb], 0x92
mov byte [ebp + 0xc], 0x4c
mov byte [ebp + 0xd], 0x41
mov byte [ebp + 0xe], 0xb5
mov byte [ebp + 0xf], 0xd4
lea ebp, [0x63a3ec]
mov dword [ebp], 0x7e636bfe
mov word [ebp + 4], 0xdfa9
mov word [ebp + 6], 0x4d5e
mov byte [ebp + 8], 0xb4
mov byte [ebp + 9], 0x56
mov byte [ebp + 0xa], 0xd7
mov byte [ebp + 0xb], 0xb3
mov byte [ebp + 0xc], 0x98
mov byte [ebp + 0xd], 0x51
mov byte [ebp + 0xe], 0xd8
mov byte [ebp + 0xf], 0xa9
lea ebp, [0x639ba0]
mov dword [ebp], 0x2b20df75
mov word [ebp + 4], 0x1eda
mov word [ebp + 6], 0x4039
mov byte [ebp + 8], 0x80
mov byte [ebp + 9], 0x97
mov byte [ebp + 0xa], 0x38
mov byte [ebp + 0xb], 0x79
mov byte [ebp + 0xc], 0x82
mov byte [ebp + 0xd], 0x27
mov byte [ebp + 0xe], 0xd5
mov byte [ebp + 0xf], 0xb7
lea ebp, [0x639f20]
mov dword [ebp], 0x3b193882
mov word [ebp + 4], 0xd3ad
mov word [ebp + 6], 0x4eab
mov byte [ebp + 8], 0x96
mov byte [ebp + 9], 0x5a
mov byte [ebp + 0xa], 0x69
mov byte [ebp + 0xb], 0x82
mov byte [ebp + 0xc], 0x9d
mov byte [ebp + 0xd], 0x1f
mov byte [ebp + 0xe], 0xb5
mov byte [ebp + 0xf], 0x9f
lea ebp, [0x639ef0]
mov dword [ebp], 0xe25b5812
mov word [ebp + 4], 0xbe88
mov word [ebp + 6], 0x4bd9
mov byte [ebp + 8], 0x94
mov byte [ebp + 9], 0xb0
mov byte [ebp + 0xa], 0x29
mov byte [ebp + 0xb], 0x23
mov byte [ebp + 0xc], 0x34
mov byte [ebp + 0xd], 0x77
mov byte [ebp + 0xe], 0xb6
mov byte [ebp + 0xf], 0xc3
lea ebp, [0x63a39c]
mov dword [ebp], 0x12d4c69e
mov word [ebp + 4], 0x24ad
mov word [ebp + 6], 0x4923
mov byte [ebp + 8], 0xbe
mov byte [ebp + 9], 0x19
mov byte [ebp + 0xa], 0x31
mov byte [ebp + 0xb], 0x32
mov byte [ebp + 0xc], 0x1c
mov byte [ebp + 0xd], 0x43
mov byte [ebp + 0xe], 0xa7
mov byte [ebp + 0xf], 0x67
lea ebp, [0x63a110]
mov dword [ebp], 0x1c2ac1dc
mov word [ebp + 4], 0x4358
mov word [ebp + 6], 0x4b6c
mov byte [ebp + 8], 0x97
mov byte [ebp + 9], 0x33
mov byte [ebp + 0xa], 0xaf
mov byte [ebp + 0xb], 0x21
mov byte [ebp + 0xc], 0x15
mov byte [ebp + 0xd], 0x65
mov byte [ebp + 0xe], 0x76
mov byte [ebp + 0xf], 0xf0
lea ebp, [0x639ee0]
mov dword [ebp], 0xdbe8e08e
mov word [ebp + 4], 0x3053
mov word [ebp + 6], 0x4bbc
mov byte [ebp + 8], 0xb1
mov byte [ebp + 9], 0x83
mov byte [ebp + 0xa], 0x2a
mov byte [ebp + 0xb], 0x7b
mov byte [ebp + 0xc], 0x2b
mov byte [ebp + 0xd], 0x19
mov byte [ebp + 0xe], 0x1e
mov byte [ebp + 0xf], 0x59
lea ebp, [0x639c90]
mov dword [ebp], 0x31c0dd25
mov word [ebp + 4], 0x9439
mov word [ebp + 6], 0x4f12
mov byte [ebp + 8], 0xbf
mov byte [ebp + 9], 0x41
mov byte [ebp + 0xa], 0x7f
mov byte [ebp + 0xb], 0xf4
mov byte [ebp + 0xc], 0xed
mov byte [ebp + 0xd], 0xa3
mov byte [ebp + 0xe], 0x87
mov byte [ebp + 0xf], 0x22
lea ebp, [0x639b80]
mov dword [ebp], 0xedc0fe71
mov word [ebp + 4], 0x98d8
mov word [ebp + 6], 0x4f4a
mov byte [ebp + 8], 0xb9
mov byte [ebp + 9], 0x20
mov byte [ebp + 0xa], 0xc8
mov byte [ebp + 0xb], 0xdc
mov byte [ebp + 0xc], 0x13
mov byte [ebp + 0xd], 0x3c
mov byte [ebp + 0xe], 0xb1
mov byte [ebp + 0xf], 0x65
lea ebp, [0x63a27c]
mov dword [ebp], 0xf42ee2d3
mov word [ebp + 4], 0x909f
mov word [ebp + 6], 0x4907
mov byte [ebp + 8], 0x88
mov byte [ebp + 9], 0x71
mov byte [ebp + 0xa], 0x4c
mov byte [ebp + 0xb], 0x22
mov byte [ebp + 0xc], 0xfc
mov byte [ebp + 0xd], 0xb
mov byte [ebp + 0xe], 0xf7
mov byte [ebp + 0xf], 0x56
lea ebp, [0x63a2fc]
mov dword [ebp], 0xddd015d
mov word [ebp + 4], 0xb06c
mov word [ebp + 6], 0x45d5
mov byte [ebp + 8], 0x8c
mov byte [ebp + 9], 0x4c
mov byte [ebp + 0xa], 0xf5
mov byte [ebp + 0xb], 0x97
mov byte [ebp + 0xc], 0x13
mov byte [ebp + 0xd], 0x85
mov byte [ebp + 0xe], 0x46
mov byte [ebp + 0xf], 0x39
lea ebp, [0x63a1a0]
mov dword [ebp], 0x35286a68
mov word [ebp + 4], 0x3c57
mov word [ebp + 6], 0x41a1
mov byte [ebp + 8], 0xbb
mov byte [ebp + 9], 0xb1
mov byte [ebp + 0xa], 0xe
mov byte [ebp + 0xb], 0xae
mov byte [ebp + 0xc], 0x73
mov byte [ebp + 0xd], 0xd7
mov byte [ebp + 0xe], 0x6c
mov byte [ebp + 0xf], 0x95
lea ebp, [0x639bc0]
mov dword [ebp], 0xa0c69a99
mov word [ebp + 4], 0x21c8
mov word [ebp + 6], 0x4671
mov byte [ebp + 8], 0x87
mov byte [ebp + 9], 3
mov byte [ebp + 0xa], 0x79
mov byte [ebp + 0xb], 0x34
mov byte [ebp + 0xc], 0x16
mov byte [ebp + 0xd], 0x2f
mov byte [ebp + 0xe], 0xcf
mov byte [ebp + 0xf], 0x1d
lea ebp, [0x63a34c]
mov dword [ebp], 0x7d83ee9b
mov word [ebp + 4], 0x2244
mov word [ebp + 6], 0x4e70
mov byte [ebp + 8], 0xb1
mov byte [ebp + 9], 0xf5
mov byte [ebp + 0xa], 0x53
mov byte [ebp + 0xb], 0x93
mov byte [ebp + 0xc], 4
mov byte [ebp + 0xd], 0x2a
mov byte [ebp + 0xe], 0xf1
mov byte [ebp + 0xf], 0xe4
lea ebp, [0x63a0f0]
mov dword [ebp], 0x2f8b40c2
mov word [ebp + 4], 0x83ed
mov word [ebp + 6], 0x48ee
mov byte [ebp + 8], 0xb3
mov byte [ebp + 9], 0x83
mov byte [ebp + 0xa], 0xa1
mov byte [ebp + 0xb], 0xf1
mov byte [ebp + 0xc], 0x57
mov byte [ebp + 0xd], 0xec
mov byte [ebp + 0xe], 0x6f
mov byte [ebp + 0xf], 0x9a
lea ebp, [0x639ff0]
mov dword [ebp], 0x7ad67899
mov word [ebp + 4], 0x66af
mov word [ebp + 6], 0x43ba
mov byte [ebp + 8], 0x91
mov byte [ebp + 9], 0x56
mov byte [ebp + 0xa], 0x6a
mov byte [ebp + 0xb], 0xad
mov byte [ebp + 0xc], 0x42
mov byte [ebp + 0xd], 0xe6
mov byte [ebp + 0xe], 0xc5
mov byte [ebp + 0xf], 0x96
lea ebp, [0x63a22c]
mov dword [ebp], 0x3db40b20
mov word [ebp + 4], 0x2a30
mov word [ebp + 6], 0x4dbe
mov byte [ebp + 8], 0x91
mov byte [ebp + 9], 0x7e
mov byte [ebp + 0xa], 0x77
mov byte [ebp + 0xb], 0x1d
mov byte [ebp + 0xc], 0xd2
mov byte [ebp + 0xd], 0x1d
mov byte [ebp + 0xe], 0xd0
mov byte [ebp + 0xf], 0x99
lea ebp, [0x639bb0]
mov dword [ebp], 0xb2c5e279
mov word [ebp + 4], 0x7add
mov word [ebp + 6], 0x439f
mov byte [ebp + 8], 0xb2
mov byte [ebp + 9], 0x8c
mov byte [ebp + 0xa], 0xc4
mov byte [ebp + 0xb], 0x1f
mov byte [ebp + 0xc], 0xe1
mov byte [ebp + 0xd], 0xbb
mov byte [ebp + 0xe], 0xf6
mov byte [ebp + 0xf], 0x72
lea ebp, [0x639d80]
mov dword [ebp], 0x7be16610
mov word [ebp + 4], 0x1f7f
mov word [ebp + 6], 0x44ac
mov byte [ebp + 8], 0xbf
mov byte [ebp + 9], 0xf0
mov byte [ebp + 0xa], 0x83
mov byte [ebp + 0xb], 0xe1
mov byte [ebp + 0xc], 0x5f
mov byte [ebp + 0xd], 0x2f
mov byte [ebp + 0xe], 0xfc
mov byte [ebp + 0xf], 0xa1
lea ebp, [0x639b60]
mov dword [ebp], 0x7cfbefbc
mov word [ebp + 4], 0xde1f
mov word [ebp + 6], 0x45aa
mov byte [ebp + 8], 0xb8
mov byte [ebp + 9], 0x43
mov byte [ebp + 0xa], 0xa5
mov byte [ebp + 0xb], 0x42
mov byte [ebp + 0xc], 0xac
mov byte [ebp + 0xd], 0x53
mov byte [ebp + 0xe], 0x6c
mov byte [ebp + 0xf], 0xc9
lea ebp, [0x63a26c]
mov dword [ebp], 0x559d40a3
mov word [ebp + 4], 0xa036
mov word [ebp + 6], 0x40fa
mov byte [ebp + 8], 0xaf
mov byte [ebp + 9], 0x61
mov byte [ebp + 0xa], 0x84
mov byte [ebp + 0xb], 0xcb
mov byte [ebp + 0xc], 0x43
mov byte [ebp + 0xd], 0xa
mov byte [ebp + 0xe], 0x4d
mov byte [ebp + 0xf], 0x34
push 0x53d544
push 0x328
call fcn.00415250
mov dword [0x639ab8], eax
push 0x53d9fc
push 0xfc
call fcn.00415250
mov dword [0x639ad4], eax
push 0
push 0x14
call fcn.00415250
mov dword [0x639ad8], eax
mov ebp, dword [0x639ad4]
mov dword [ebp], 0
mov ebp, dword [0x639ad4]
mov dword [ebp + 4], 0
mov ebp, dword [0x639ad4]
mov dword [ebp + 8], 0
push edx
call fcn.00415b10
pop edx
push eax
push edx
call fcn.00415b10
pop edx
push eax
call fcn.0040f112
push edx
call fcn.00415b10
pop edx
push eax
push edx
call fcn.00415b10
pop edx
push eax
push 0x41
push 0x5a
call fcn.00405d80
push eax
call fcn.00413ca0
pop eax
push edx
call fcn.00415b10
pop edx
push eax
push edx
call fcn.00415b10
pop edx
push eax
push 0x41
push 0x5a
call fcn.00405d80
push eax
call fcn.00413ca0
pop eax
push edx
call fcn.00415b10
pop edx
push eax
push edx
call fcn.00415b10
pop edx
push eax
push 0x41
push 0x5a
call fcn.00405d80
push eax
call fcn.00413ca0
pop eax
push edx
call fcn.00415b10
pop edx
push eax
push edx
call fcn.00415b10
pop edx
push eax
push 0x64
push 0x3e7
call fcn.00405d80
cdq
push edx
push eax
call fcn.00414a10
pop eax
mov edx, 0x5224e8
push edx
call fcn.00415a20
push edx
call fcn.00415b10
pop edx
push eax
push edx
call fcn.00415b10
pop edx
push eax
push 0x41
push 0x5a
call fcn.00405d80
push eax
call fcn.00413ca0
pop eax
push edx
call fcn.00415b10
pop edx
push eax
push edx
call fcn.00415b10
pop edx
push eax
push 0x41
push 0x5a
call fcn.00405d80
push eax
call fcn.00413ca0
pop eax
push edx
call fcn.00415b10
pop edx
push eax
push edx
call fcn.00415b10
pop edx
push eax
push 0x41
push 0x5a
call fcn.00405d80
push eax
call fcn.00413ca0
pop eax
mov ebp, dword [0x639ad4]
lea eax, [ebp + 0x10]
push eax
call fcn.00415900
mov ebp, dword [0x639ad4]
mov dword [ebp + 0xac], 0
mov ebp, dword [0x639ad4]
mov dword [ebp + 0x8c], 1
mov ebp, dword [0x639ad4]
mov dword [ebp + 0x9c], 1
push edx
call fcn.00415b10
pop edx
push eax
push edx
call fcn.00415b10
pop edx
push eax
mov eax, str.ProgramW6432
push eax
call fcn.00404920
mov edx, str.MuMuVMMVbox
push edx
call fcn.00415a20
mov ebp, dword [0x639ad4]
lea eax, [ebp + 0xb8]
push eax
call fcn.00415900
push edx
call fcn.00415b10
pop edx
push eax
push edx
call fcn.00415b10
pop edx
push eax
mov eax, str.ProgramW6432
push eax
call fcn.00404920
mov edx, str.NemuVbox
push edx
call fcn.00415a20
mov ebp, dword [0x639ad4]
lea eax, [ebp + 0xbc]
push eax
call fcn.00415900
push edx
call fcn.00415b10
pop edx
push eax
push edx
call fcn.00415b10
pop edx
push eax
mov eax, 0x527ea0
push eax
call fcn.00404920
mov edx, str.NemuVbox
push edx
call fcn.00415a20
mov ebp, dword [0x639ad4]
lea eax, [ebp + 0xc0]
push eax
call fcn.00415900
push edx
call fcn.00415b10
pop edx
push eax
push edx
call fcn.00415b10
pop edx
push eax
push 0x3e8
push 0x270f
call fcn.00405d80
cdq
push edx
push eax
call fcn.00414a10
push edx
call fcn.00415b10
pop edx
push eax
push edx
call fcn.00415b10
pop edx
push eax
push 0x3e8
push 0x270f
call fcn.00405d80
cdq
push edx
push eax
call fcn.00414a10
pop eax
push edx
call fcn.00415b10
pop edx
push eax
push edx
call fcn.00415b10
pop edx
push eax
push 0x2710
push 0x1869f
call fcn.00405d80
cdq
push edx
push eax
call fcn.00414a10
pop eax
mov ebp, dword [0x639ad4]
lea eax, [ebp + 0xb4]
push eax
call fcn.00415900
push edx
call fcn.00415b10
pop edx
push eax
push edx
call fcn.00415b10
pop edx
push eax
call fcn.0040ef93
mov edx, str.NeMu_MuMu_p9.bin
push edx
call fcn.00415a20
mov ebp, dword [0x639ad4]
lea eax, [ebp + 0xe4]
push eax
call fcn.00415900
push edx
call fcn.00415b10
pop edx
push eax
push edx
call fcn.00415b10
pop edx
push eax
call fcn.0040ef93
mov edx, str.NeMu_MuMu_p10.bin
push edx
call fcn.00415a20
mov ebp, dword [0x639ad4]
lea eax, [ebp + 0xe8]
push eax
call fcn.00415900
push edx
call fcn.00415b10
pop edx
push eax
push edx
call fcn.00415b10
pop edx
push eax
call fcn.0040ef93
mov edx, str.NeMu_MuMu_p3.bin
push edx
call fcn.00415a20
mov ebp, dword [0x639ad4]
lea eax, [ebp + 0xdc]
push eax
call fcn.00415900
push edx
call fcn.00415b10
pop edx
push eax
push edx
call fcn.00415b10
pop edx
push eax
call fcn.0040ef93
mov edx, str.NeMu_MuMu_p4.bin
push edx
call fcn.00415a20
mov ebp, dword [0x639ad4]
lea eax, [ebp + 0xe0]
push eax
call fcn.00415900
push edx
call fcn.00415b10
pop edx
push eax
push edx
call fcn.00415b10
pop edx
push eax
call fcn.0040ef93
mov edx, str.NeMu_MuMu_p5.bin
push edx
call fcn.00415a20
mov ebp, dword [0x639ad4]
lea eax, [ebp + 0xd0]
push eax
call fcn.00415900
push edx
call fcn.00415b10
pop edx
push eax
push edx
call fcn.00415b10
pop edx
push eax
call fcn.0040ef93
mov edx, str.NeMu_MuMu_p6.bin
push edx
call fcn.00415a20
mov ebp, dword [0x639ad4]
lea eax, [ebp + 0xd4]
push eax
call fcn.00415900
push edx
call fcn.00415b10
pop edx
push eax
push edx
call fcn.00415b10
pop edx
push eax
call fcn.0040ef93
mov edx, str.NeMu_MuMu_p7.bin
push edx
call fcn.00415a20
mov ebp, dword [0x639ad4]
lea eax, [ebp + 0xd8]
push eax
call fcn.00415900
push edx
call fcn.00415b10
pop edx
push eax
push edx
call fcn.00415b10
pop edx
push eax
call fcn.0040ef93
mov edx, str.NeMu_MuMu_p8.bin
push edx
call fcn.00415a20
mov ebp, dword [0x639ad4]
lea eax, [ebp + 0xc4]
push eax
call fcn.00415900
push edx
call fcn.00415b10
pop edx
push eax
push edx
call fcn.00415b10
pop edx
push eax
call fcn.0040ef93
mov edx, str.NeMu_MuMu_p1.bin
push edx
call fcn.00415a20
mov ebp, dword [0x639ad4]
lea eax, [ebp + 0xc8]
push eax
call fcn.00415900
push edx
call fcn.00415b10
pop edx
push eax
push edx
call fcn.00415b10
pop edx
push eax
call fcn.0040ef93
mov edx, str.NeMu_MuMu_p2.bin
push edx
call fcn.00415a20
mov ebp, dword [0x639ad4]
lea eax, [ebp + 0xcc]
push eax
call fcn.00415900
push 0
push 0x18
call fcn.00415250
mov dword [0x639ac0], eax
push 0x53d96c
push 0x30
call fcn.00415250
mov dword [0x639ad0], eax
push 0x53d8e8
push 0x60
call fcn.00415250
mov dword [0x639acc], eax
call fcn.00406ef0
call fcn.00406876
mov eax, str.H:LAM_GIA_LAPNeMu_MuMuPlayerPBCac_icons_bg_668x454.png
push eax
call fcn.0040ee2c
push edx
push eax
pop ebx
pop edi
cmp edi, 0
jg 0x6b879f
jl 0x6b879b
cmp ebx, 0
ja 0x6b879f
xor eax, eax
jmp 0x6b87a4
mov eax, 1
or eax, eax
je 0x6b87b8
mov ebp, 0x60c89c
push ebp
push 0x70
call fcn.00411bfc
push 0x10
push 0xc
mov eax, str.Arial
push eax
push 1
call fcn.004156c5
push 0x10
push 0xe
mov eax, str.Arial
push eax
push 2
call fcn.004156c5
push 0x10
push 0x10
mov eax, str.Arial
push eax
push 3
call fcn.004156c5
push 0x110
push 0x10
mov eax, str.Arial
push eax
push 4
call fcn.004156c5
push 0x10
push 0x12
mov eax, str.Arial
push eax
push 5
call fcn.004156c5
push 0x110
push 0x14
mov eax, str.Arial
push eax
push 6
call fcn.004156c5
push 0x10
push 0xc
mov eax, str.Tahoma
push eax
push 0
call fcn.004156c5
push edx
call fcn.00415b10
pop edx
push eax
push edx
call fcn.00415b10
pop edx
push eax
push edx
call fcn.00415b10
pop edx
push eax
call fcn.0040ef93
mov edx, str.NeMu_MuMu.res
push edx
call fcn.00415a20
call fcn.004011f2
add dword [esp], edx
call fcn.0040ee2c
call fcn.00401220
push edx
push eax
pop ebx
pop edi
cmp edi, 0
jl 0x6b88bc
jg 0x6b88b8
cmp ebx, 0
jb 0x6b88bc
xor eax, eax
jmp 0x6b88c1
mov eax, 1
or eax, eax
je 0x6b88e0
push 0x10
mov eax, 0x536eb6
push eax
mov eax, 0x53a87e
push eax
call fcn.0040469c
jmp 0x6b93b5
push edx
call fcn.00415b10
pop edx
push eax
push edx
call fcn.00415b10
pop edx
push eax
push edx
call fcn.00415b10
pop edx
push eax
call fcn.0040ef93
mov edx, str.NeMu_MuMu.res
push edx
call fcn.00415a20
call fcn.004011f2
add dword [esp], edx
call fcn.0040ee2c
call fcn.00401220
push edx
push eax
pop ebx
pop edi
cmp edi, 0
jg 0x6b892e
jl 0x6b892a
cmp ebx, 0
ja 0x6b892e
xor eax, eax
jmp 0x6b8933
mov eax, 1
or eax, eax
je 0x6b92af
push 0x521028
mov eax, str.NeMu_MuMu.res
push eax
push 0x6d
call fcn.006dfc13
and eax, eax
je 0x6b9294
mov eax, str.ap_dung_thiet_lap_32.png
push eax
push 0
push 0x6d
call fcn.006dfae9
mov eax, str.ap_dung_thiet_lap_64.png
push eax
push 1
push 0x6d
call fcn.006dfae9
mov eax, str.bg_668x454.png
push eax
push 0x70
push 0x6d
call fcn.006dfae9
mov eax, str.cau_hinh_hien_thi_32.png
push eax
push 2
push 0x6d
call fcn.006dfae9
mov eax, str.cau_hinh_hien_thi_64.png
push eax
push 3
push 0x6d
call fcn.006dfae9
mov eax, str.cau_hinh_hien_thi_128.png
push eax
push 4
push 0x6d
call fcn.006dfae9
mov eax, str.cau_hinh_khac_32.png
push eax
push 5
push 0x6d
call fcn.006dfae9
mov eax, str.cau_hinh_khac_64.png
push eax
push 6
push 0x6d
call fcn.006dfae9
mov eax, str.cau_hinh_khac_128.png
push eax
push 7
push 0x6d
call fcn.006dfae9
mov eax, str.China_32.png
push eax
push 8
push 0x6d
call fcn.006dfae9
mov eax, str.China_64.png
push eax
push 9
push 0x6d
call fcn.006dfae9
mov eax, str.clone_32.png
push eax
push 0xa
push 0x6d
call fcn.006dfae9
mov eax, str.clone_64.png
push eax
push 0xb
push 0x6d
call fcn.006dfae9
mov eax, 0x52d91c
push eax
push 0xc
push 0x6d
call fcn.006dfae9
mov eax, str.dang_cai_dat_64.png
push eax
push 0xd
push 0x6d
call fcn.006dfae9
mov eax, 0x535bdc
push eax
push 0xe
push 0x6d
call fcn.006dfae9
mov eax, str.dang_nang_cap_32.png
push eax
push 0xf
push 0x6d
call fcn.006dfae9
mov eax, str.dang_nang_cap_64.png
push eax
push 0x10
push 0x6d
call fcn.006dfae9
mov eax, str.dang_nang_cap_128.png
push eax
push 0x11
push 0x6d
call fcn.006dfae9
mov eax, str.device_info_32.png
push eax
push 0x12
push 0x6d
call fcn.006dfae9
mov eax, str.device_info_64.png
push eax
push 0x13
push 0x6d
call fcn.006dfae9
mov eax, str.device_info_128.png
push eax
push 0x14
push 0x6d
call fcn.006dfae9
mov eax, str.dong_y_32.png
push eax
push 0x15
push 0x6d
call fcn.006dfae9
mov eax, str.dong_y_64.png
push eax
push 0x16
push 0x6d
call fcn.006dfae9
mov eax, str.England_32.png
push eax
push 0x17
push 0x6d
call fcn.006dfae9
mov eax, str.England_64.png
push eax
push 0x18
push 0x6d
call fcn.006dfae9
mov eax, str.Expert_32.png
push eax
push 0x19
push 0x6d
call fcn.006dfae9
mov eax, str.Expert_64.png
push eax
push 0x1a
push 0x6d
call fcn.006dfae9
mov eax, str.Expert_128.png
push eax
push 0x1b
push 0x6d
call fcn.006dfae9
mov eax, str.External_Disk_32.png
push eax
push 0x1c
push 0x6d
call fcn.006dfae9
mov eax, str.External_Disk_64.png
push eax
push 0x1d
push 0x6d
call fcn.006dfae9
mov eax, 0x535364
push eax
push 0x1e
push 0x6d
call fcn.006dfae9
mov eax, str.Facebook_64.png
push eax
push 0x1f
push 0x6d
call fcn.006dfae9
mov eax, str.fps_32.png
push eax
push 0x20
push 0x6d
call fcn.006dfae9
mov eax, str.fps_64.png
push eax
push 0x21
push 0x6d
call fcn.006dfae9
mov eax, str.fps_128.png
push eax
push 0x22
push 0x6d
call fcn.006dfae9
mov eax, str.hieu_suat_32.png
push eax
push 0x23
push 0x6d
call fcn.006dfae9
mov eax, str.hieu_suat_64.png
push eax
push 0x24
push 0x6d
call fcn.006dfae9
mov eax, str.hieu_suat_128.png
push eax
push 0x25
push 0x6d
call fcn.006dfae9
mov eax, str.install_32.png
push eax
push 0x26
push 0x6d
call fcn.006dfae9
mov eax, str.install_64.png
push eax
push 0x27
push 0x6d
call fcn.006dfae9
mov eax, str.kieu_man_hinh_32.png
push eax
push 0x28
push 0x6d
call fcn.006dfae9
mov eax, 0x53c7d0
push eax
push 0x29
push 0x6d
call fcn.006dfae9
mov eax, str.kieu_man_hinh_128.png
push eax
push 0x2a
push 0x6d
call fcn.006dfae9
mov eax, str.Left_Arrow_32.png
push eax
push 0x2b
push 0x6d
call fcn.006dfae9
mov eax, str.Left_Arrow_64.png
push eax
push 0x2c
push 0x6d
call fcn.006dfae9
mov eax, str.Left_Arrow1_32.png
push eax
push 0x2d
push 0x6d
call fcn.006dfae9
mov eax, str.Left_Arrow1_64.png
push eax
push 0x2e
push 0x6d
call fcn.006dfae9
mov eax, str.left_banner_640.png
push eax
push 0x2f
push 0x6d
call fcn.006dfae9
mov eax, str.logo_256.png
push eax
push 0x30
push 0x6d
call fcn.006dfae9
mov eax, str.Messenger_32.png
push eax
push 0x31
push 0x6d
call fcn.006dfae9
mov eax, str.Messenger_64.png
push eax
push 0x32
push 0x6d
call fcn.006dfae9
mov eax, str.mobile_network_32.png
push eax
push 0x33
push 0x6d
call fcn.006dfae9
mov eax, 0x531638
push eax
push 0x34
push 0x6d
call fcn.006dfae9
mov eax, str.mobile_network_128.png
push eax
push 0x35
push 0x6d
call fcn.006dfae9
mov eax, 0x52791c
push eax
push 0x36
push 0x6d
call fcn.006dfae9
mov eax, str.pause_64.png
push eax
push 0x37
push 0x6d
call fcn.006dfae9
mov eax, 0x532d60
push eax
push 0x38
push 0x6d
call fcn.006dfae9
mov eax, str.Play_64.png
push eax
push 0x39
push 0x6d
call fcn.006dfae9
mov eax, str.Play1_32.png
push eax
push 0x3a
push 0x6d
call fcn.006dfae9
mov eax, str.Play1_64.png
push eax
push 0x3b
push 0x6d
call fcn.006dfae9
mov eax, str.Play2_32.png
push eax
push 0x3c
push 0x6d
call fcn.006dfae9
mov eax, str.Play2_64.png
push eax
push 0x3d
push 0x6d
call fcn.006dfae9
mov eax, str.Pro_User_32.png
push eax
push 0x3e
push 0x6d
call fcn.006dfae9
mov eax, str.Pro_User_64.png
push eax
push 0x3f
push 0x6d
call fcn.006dfae9
mov eax, str.Pro_User_128.png
push eax
push 0x40
push 0x6d
call fcn.006dfae9
mov eax, str.ProFile_32.png
push eax
push 0x41
push 0x6d
call fcn.006dfae9
mov eax, 0x524590
push eax
push 0x42
push 0x6d
call fcn.006dfae9
mov eax, str.remove_32.png
push eax
push 0x43
push 0x6d
call fcn.006dfae9
mov eax, str.remove_64.png
push eax
push 0x44
push 0x6d
call fcn.006dfae9
mov eax, str.reset_32.png
push eax
push 0x45
push 0x6d
call fcn.006dfae9
mov eax, str.reset_64.png
push eax
push 0x46
push 0x6d
call fcn.006dfae9
mov eax, str.running_app_32.png
push eax
push 0x47
push 0x6d
call fcn.006dfae9
mov eax, str.running_app_64.png
push eax
push 0x48
push 0x6d
call fcn.006dfae9
mov eax, 0x52538c
push eax
push 0x49
push 0x6d
call fcn.006dfae9
mov eax, 0x5317b4
push eax
push 0x4a
push 0x6d
call fcn.006dfae9
mov eax, str.shared_disk_32.png
push eax
push 0x4b
push 0x6d
call fcn.006dfae9
mov eax, str.shared_disk_64.png
push eax
push 0x4c
push 0x6d
call fcn.006dfae9
mov eax, str.Shutdown_32.png
push eax
push 0x4d
push 0x6d
call fcn.006dfae9
mov eax, str.Shutdown_64.png
push eax
push 0x4e
push 0x6d
call fcn.006dfae9
mov eax, str.sieu_nhe_32.png
push eax
push 0x4f
push 0x6d
call fcn.006dfae9
mov eax, str.sieu_nhe_64.png
push eax
push 0x50
push 0x6d
call fcn.006dfae9
mov eax, str.sieu_nhe_128.png
push eax
push 0x51
push 0x6d
call fcn.006dfae9
mov eax, str.telegram_32.png
push eax
push 0x52
push 0x6d
call fcn.006dfae9
mov eax, str.telegram_64.png
push eax
push 0x53
push 0x6d
call fcn.006dfae9
mov eax, str.telegram_128.png
push eax
push 0x54
push 0x6d
call fcn.006dfae9
mov eax, str.thong_tin_32.png
push eax
push 0x55
push 0x6d
call fcn.006dfae9
mov eax, str.thong_tin_64.png
push eax
push 0x56
push 0x6d
call fcn.006dfae9
mov eax, 0x538f50
push eax
push 0x57
push 0x6d
call fcn.006dfae9
mov eax, str.tuy_chon_khac_32.png
push eax
push 0x58
push 0x6d
call fcn.006dfae9
mov eax, str.tuy_chon_khac_64.png
push eax
push 0x59
push 0x6d
call fcn.006dfae9
mov eax, str.Vietnam_32.png
push eax
push 0x5a
push 0x6d
call fcn.006dfae9
mov eax, str.Vietnam_64.png
push eax
push 0x5b
push 0x6d
call fcn.006dfae9
mov eax, str.vpn_32.png
push eax
push 0x5c
push 0x6d
call fcn.006dfae9
mov eax, str.vpn_64.png
push eax
push 0x5d
push 0x6d
call fcn.006dfae9
mov eax, str.vpn_128.png
push eax
push 0x5e
push 0x6d
call fcn.006dfae9
mov eax, str.youtube_32.png
push eax
push 0x5f
push 0x6d
call fcn.006dfae9
mov eax, str.youtube_64.png
push eax
push 0x60
push 0x6d
call fcn.006dfae9
mov eax, str.youtube_128.png
push eax
push 0x61
push 0x6d
call fcn.006dfae9
mov eax, str.zalo_32.png
push eax
push 0x62
push 0x6d
call fcn.006dfae9
mov eax, str.zalo_48.png
push eax
push 0x63
push 0x6d
call fcn.006dfae9
mov eax, str.zalo_64.png
push eax
push 0x64
push 0x6d
call fcn.006dfae9
mov eax, str.zalo_128.png
push eax
push 0x65
push 0x6d
call fcn.006dfae9
mov eax, str.canh_bao_32.png
push eax
push 0x66
push 0x6d
call fcn.006dfae9
mov eax, str.canh_bao_64.png
push eax
push 0x67
push 0x6d
call fcn.006dfae9
mov eax, str.stop_32.png
push eax
push 0x68
push 0x6d
call fcn.006dfae9
mov eax, str.stop_64.png
push eax
push 0x69
push 0x6d
call fcn.006dfae9
mov eax, str.level_up_128.png
push eax
push 0x6a
push 0x6d
call fcn.006dfae9
mov eax, str.level_up_32.png
push eax
push 0x6b
push 0x6d
call fcn.006dfae9
mov eax, str.level_up_64.png
push eax
push 0x6c
push 0x6d
call fcn.006dfae9
mov eax, str.logo_256.png
push eax
push 0x6e
push 0x6d
call fcn.006dfae9
mov eax, str.left_banner_640.png
push eax
push 0x6f
push 0x6d
call fcn.006dfae9
push 0x6d
call fcn.006e047e
jmp 0x6b92af
push 0x10
mov eax, 0x538366
push eax
mov eax, 0x53a87e
push eax
call fcn.0040469c
jmp 0x6b93b5
call fcn.006d564d
mov eax, str.Advapi32.dll
push eax
push 0xffffffff
call fcn.0040600b
mov dword [0x639ab0], eax
cmp dword [0x639ab0], 0
je 0x6b9340
mov eax, str.RegDeleteKeyExW
push eax
push dword [0x639ab0]
call fcn.00405fb1
mov dword [0x639ab4], eax
mov eax, str.RegSetValueExW
push eax
push dword [0x639ab0]
call fcn.00405fb1
mov dword [0x639aa4], eax
mov eax, str.RegDeleteTreeW
push eax
push dword [0x639ab0]
call fcn.00405fb1
mov dword [0x639aac], eax
mov eax, str.RegEnumKeyExW
push eax
push dword [0x639ab0]
call fcn.00405fb1
mov dword [0x639aa0], eax
mov eax, str.RegCopyTreeW
push eax
push dword [0x639ab0]
call fcn.00405fb1
mov dword [0x639aa8], eax
mov eax, str.MuMuPlayerGlobal_12.0
push eax
push 1
push 0
call sub.KERNEL32.dll_CreateMutexW
mov ebx, eax
and ebx, ebx
je 0x6b9368
call sub.KERNEL32.dll_GetLastError
mov ebx, eax
and ebx, ebx
jne 0x6b9368
jmp 0x6b936f
mov eax, 1
jmp 0x6b9371
xor eax, eax
and eax, eax
je 0x6b9388
mov eax, 0x531f7a
push eax
mov eax, str.NeMu_MuMu__CuuMay.win
push eax
call fcn.004046b2
jmp 0x6b93b5
call fcn.006efd1f
mov ebp, dword [0x639ad4]
mov ebx, dword [ebp + 8]
xor ebx, 1
and ebx, ebx
je 0x6b93a2
call fcn.006b945c
mov ebp, dword [0x639ad4]
mov ebx, dword [ebp + 8]
cmp ebx, 1
jne 0x6b93b5
call fcn.006c45bf
push 0
call 0x6b93d4
call fcn.00415ad0
push dword [0x639a98]
call sub.KERNEL32.dll_HeapDestroy
call sub.KERNEL32.dll_ExitProcess
call fcn.0040195d
call fcn.00401c81
call fcn.00402887
call fcn.0040288c
call fcn.004028bd
call fcn.004028db
call fcn.00405088
call fcn.004059f8
call fcn.00405b7c
call fcn.00405bf0
call fcn.00405f7e
call fcn.004061e7
call fcn.00409b7e
call sub.ole32.dll_OleUninitialize
call fcn.0040ca7b
call fcn.0040e7e6
call fcn.0040ef83
call fcn.0040f420
call fcn.0040f9f0
call fcn.00410426
call fcn.00411f9b
call fcn.00412ee8
call fcn.004064e0
call fcn.0041566c
call fcn.004158ed
call fcn.004028e0
call fcn.00415370
ret