Function at 0x10004477
Capabilities:
Encode data using xor
Hash data with crc32
Read file on windows

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x1000765b
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
mov eax, 0x3290
push ebx
call fcn.10007610
push esi
push edi
mov dword [ebp - 0x1c], edx
mov dword [ebp - 0x3c], ecx
call fcn.10001fc0
test al, al
jne 0x100025aa
push str.mycrypto::load_libcrypto___failed_n
call fcn.10005b90
add esp, 4
or eax, 0xffffffff
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
push 0x1400
lea eax, [ebp - 0x32a0]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
movzx eax, word [0x10008378]
xorps xmm0, xmm0
movq qword [ebp - 0xab], xmm0
movq xmm0, qword [str.8917F02B02]
mov word [ebp - 0x7e0], ax
mov al, byte [0x1000837a]
movq qword [ebp - 0x7e8], xmm0
movq xmm0, qword [str.8917F02B12]
mov byte [ebp - 0x7de], al
movzx eax, word [0x10008384]
movq qword [ebp - 0x7dc], xmm0
movq xmm0, qword [str.8917F02B72]
mov word [ebp - 0x7d4], ax
mov al, byte [0x10008386]
mov dword [ebp - 0x20], 0
mov dword [ebp - 0x898], 0
mov dword [ebp - 0x894], 0x1fff
mov dword [ebp - 0x890], 0x2000
mov dword [ebp - 0x88c], 0x3fff
mov dword [ebp - 0x888], 0x4000
mov dword [ebp - 0x884], 0x5fff
mov dword [ebp - 0x880], 0x6000
mov dword [ebp - 0x87c], 0x7fff
mov dword [ebp - 0x878], 0x8000
mov dword [ebp - 0x874], 0x9fff
mov dword [ebp - 0x870], 0xa000
mov dword [ebp - 0x86c], 0xbfff
mov dword [ebp - 0x868], 0xc000
mov dword [ebp - 0x864], 0xdfff
mov dword [ebp - 0x860], 0xe000
mov dword [ebp - 0x85c], 0xffff
mov dword [ebp - 0x858], 0x10000
mov dword [ebp - 0x854], 0x17fff
mov dword [ebp - 0x850], 0x18000
mov dword [ebp - 0x84c], 0x1ffff
mov dword [ebp - 0x848], 0x20000
mov dword [ebp - 0x844], 0x27fff
mov dword [ebp - 0x840], 0x28000
mov dword [ebp - 0x83c], 0x2ffff
mov dword [ebp - 0x838], 0x30000
mov dword [ebp - 0x834], 0x37fff
mov dword [ebp - 0x830], 0x38000
mov dword [ebp - 0x82c], 0x3ffff
mov dword [ebp - 0x828], 0x40000
mov dword [ebp - 0x824], 0x47fff
mov dword [ebp - 0x820], 0x48000
mov dword [ebp - 0x81c], 0x4ffff
mov dword [ebp - 0x818], 0x50000
mov dword [ebp - 0x814], 0x57fff
mov dword [ebp - 0x810], 0x58000
mov dword [ebp - 0x80c], 0x5ffff
mov dword [ebp - 0x808], 0x60000
mov dword [ebp - 0x804], 0x67fff
mov dword [ebp - 0x800], 0x68000
mov dword [ebp - 0x7fc], 0x6ffff
mov dword [ebp - 0x7f8], 0x70000
mov dword [ebp - 0x7f4], 0x77fff
mov dword [ebp - 0x7f0], 0x78000
mov dword [ebp - 0x7ec], 0x7ffff
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x4c], 0x71efc066
mov dword [ebp - 0x48], 0xd12f075b
mov dword [ebp - 0x44], 0xb5ced4a5
mov dword [ebp - 0x40], 0x24fb71ad
mov dword [ebp - 0x5c], 0xc36c3343
mov dword [ebp - 0x58], 0xe4e95104
mov dword [ebp - 0x54], 0x13b2410b
mov dword [ebp - 0x50], 0x32607617
mov byte [ebp - 0xac], 0
mov dword [ebp - 0xa3], 0
mov word [ebp - 0x9f], 0
mov byte [ebp - 0x9d], 0
mov byte [ebp - 0x7dd], 1
mov byte [ebp - 0x7d2], al
mov byte [ebp - 0x7d1], 1
movq qword [ebp - 0x7d0], xmm0
movzx eax, word [0x10008390]
mov word [ebp - 0x7c8], ax
mov al, byte [0x10008392]
mov byte [ebp - 0x7c6], al
movzx eax, word [0x1000839c]
mov word [ebp - 0x7bc], ax
mov al, byte [0x1000839e]
mov byte [ebp - 0x7ba], al
movzx eax, word [0x100083a8]
mov word [ebp - 0x7b0], ax
mov al, byte [0x100083aa]
mov byte [ebp - 0x7ae], al
movzx eax, word [0x100083b4]
mov word [ebp - 0x7a4], ax
mov al, byte [0x100083b6]
movq xmm0, qword [str.8917F02B82]
mov byte [ebp - 0x7a2], al
movzx eax, word [0x100083c0]
mov word [ebp - 0x798], ax
mov al, byte [0x100083c2]
mov byte [ebp - 0x796], al
movzx eax, word [0x100083cc]
mov word [ebp - 0x78c], ax
mov al, byte [0x100083ce]
mov byte [ebp - 0x78a], al
movzx eax, word [0x100083d8]
mov word [ebp - 0x780], ax
mov al, byte [0x100083da]
movq qword [ebp - 0x7c4], xmm0
movq xmm0, qword [str.8917F02D82]
mov byte [ebp - 0x77e], al
movzx eax, word [0x100083e4]
movq qword [ebp - 0x7b8], xmm0
movq xmm0, qword [str.8917F02D83]
mov word [ebp - 0x774], ax
mov al, byte [0x100083e6]
movq qword [ebp - 0x7ac], xmm0
movq xmm0, qword [str.8917F02D92]
mov byte [ebp - 0x772], al
movzx eax, word [0x100083f0]
movq qword [ebp - 0x7a0], xmm0
movq xmm0, qword [str.8917F02E40]
mov word [ebp - 0x768], ax
mov al, byte [0x100083f2]
movq qword [ebp - 0x794], xmm0
movq xmm0, qword [str.8917F06390]
mov byte [ebp - 0x766], al
movzx eax, word [0x100083fc]
movq qword [ebp - 0x788], xmm0
movq xmm0, qword [str.8917F06410]
mov word [ebp - 0x75c], ax
mov al, byte [0x100083fe]
movq qword [ebp - 0x77c], xmm0
movq xmm0, qword [str.8917F06500]
mov byte [ebp - 0x75a], al
movzx eax, word [0x10008408]
movq qword [ebp - 0x770], xmm0
movq xmm0, qword [str.8917F06551]
mov word [ebp - 0x750], ax
mov al, byte [0x1000840a]
movq qword [ebp - 0x764], xmm0
movq xmm0, qword [str.8917F0A022]
mov byte [ebp - 0x74e], al
movzx eax, word [0x10008414]
movq qword [ebp - 0x758], xmm0
movq xmm0, qword [str.8917F0A032]
mov word [ebp - 0x744], ax
mov al, byte [0x10008416]
mov byte [ebp - 0x7c5], 1
mov byte [ebp - 0x7b9], 1
mov byte [ebp - 0x7ad], 1
mov byte [ebp - 0x7a1], 1
mov byte [ebp - 0x795], 1
mov byte [ebp - 0x789], 1
mov byte [ebp - 0x77d], 1
mov byte [ebp - 0x771], 1
mov byte [ebp - 0x765], 1
mov byte [ebp - 0x759], 1
mov byte [ebp - 0x74d], 1
movq qword [ebp - 0x74c], xmm0
mov byte [ebp - 0x742], al
movzx eax, word [0x10008420]
mov word [ebp - 0x738], ax
mov al, byte [0x10008422]
mov byte [ebp - 0x736], al
movzx eax, word [0x1000842c]
mov word [ebp - 0x72c], ax
mov al, byte [0x1000842e]
mov byte [ebp - 0x72a], al
movzx eax, word [0x10008438]
mov word [ebp - 0x720], ax
mov al, byte [0x1000843a]
movq xmm0, qword [str.8917F0A053]
mov byte [ebp - 0x71e], al
movzx eax, word [0x10008444]
mov word [ebp - 0x714], ax
mov al, byte [0x10008446]
mov byte [ebp - 0x712], al
movzx eax, word [0x10008450]
mov word [ebp - 0x708], ax
mov al, byte [0x10008452]
mov byte [ebp - 0x706], al
movzx eax, word [0x1000845c]
mov word [ebp - 0x6fc], ax
mov al, byte [0x1000845e]
movq qword [ebp - 0x740], xmm0
movq xmm0, qword [str.8917F0A062]
mov byte [ebp - 0x6fa], al
movzx eax, word [0x10008468]
movq qword [ebp - 0x734], xmm0
movq xmm0, qword [str.8917F0A063]
mov word [ebp - 0x6f0], ax
mov al, byte [0x1000846a]
movq qword [ebp - 0x728], xmm0
movq xmm0, qword [str.8917F0A072]
mov byte [ebp - 0x6ee], al
movzx eax, word [0x10008474]
movq qword [ebp - 0x71c], xmm0
movq xmm0, qword [str.8917F0A073]
mov word [ebp - 0x6e4], ax
mov al, byte [0x10008476]
movq qword [ebp - 0x710], xmm0
movq xmm0, qword [str.8917F26111]
mov byte [ebp - 0x6e2], al
movzx eax, word [0x10008480]
movq qword [ebp - 0x704], xmm0
movq xmm0, qword [str.8917F26112]
mov word [ebp - 0x6d8], ax
mov al, byte [0x10008482]
movq qword [ebp - 0x6f8], xmm0
movq xmm0, qword [str.8917F26121]
mov byte [ebp - 0x6d6], al
movzx eax, word [0x1000848c]
movq qword [ebp - 0x6ec], xmm0
movq xmm0, qword [str.8917F26301]
mov word [ebp - 0x6cc], ax
mov al, byte [0x1000848e]
movq qword [ebp - 0x6e0], xmm0
movq xmm0, qword [str.8917F26331]
mov byte [ebp - 0x6ca], al
movzx eax, word [0x10008498]
movq qword [ebp - 0x6d4], xmm0
movq xmm0, qword [str.8917FF4201]
mov word [ebp - 0x6c0], ax
mov al, byte [0x1000849a]
movq qword [ebp - 0x6c8], xmm0
movq xmm0, qword [str.8917FF4210]
mov byte [ebp - 0x6be], al
movzx eax, word [0x100084a4]
mov byte [ebp - 0x741], 1
mov byte [ebp - 0x735], 1
mov byte [ebp - 0x729], 1
mov byte [ebp - 0x71d], 1
mov byte [ebp - 0x711], 1
mov byte [ebp - 0x705], 1
mov byte [ebp - 0x6f9], 1
mov byte [ebp - 0x6ed], 1
mov byte [ebp - 0x6e1], 1
mov byte [ebp - 0x6d5], 1
mov byte [ebp - 0x6c9], 1
mov byte [ebp - 0x6bd], 1
movq qword [ebp - 0x6bc], xmm0
mov word [ebp - 0x6b4], ax
mov al, byte [0x100084a6]
mov byte [ebp - 0x6b2], al
movzx eax, word [0x100084b0]
mov word [ebp - 0x6a8], ax
mov al, byte [0x100084b2]
mov byte [ebp - 0x6a6], al
movzx eax, word [0x100084bc]
mov word [ebp - 0x69c], ax
mov al, byte [0x100084be]
mov byte [ebp - 0x69a], al
movzx eax, word [0x100084c8]
mov word [ebp - 0x690], ax
mov al, byte [0x100084ca]
movq xmm0, qword [str.8917FF4220]
mov byte [ebp - 0x68e], al
movzx eax, word [0x100084d4]
mov word [ebp - 0x684], ax
mov al, byte [0x100084d6]
mov byte [ebp - 0x682], al
movzx eax, word [0x100084e0]
mov word [ebp - 0x678], ax
mov al, byte [0x100084e2]
mov byte [ebp - 0x676], al
movzx eax, word [0x100084ec]
mov word [ebp - 0x66c], ax
mov al, byte [0x100084ee]
movq qword [ebp - 0x6b0], xmm0
movq xmm0, qword [str.8917FF4280]
mov byte [ebp - 0x66a], al
movzx eax, word [0x100084f8]
movq qword [ebp - 0x6a4], xmm0
movq xmm0, qword [str.8917FF4320]
mov word [ebp - 0x660], ax
mov al, byte [0x100084fa]
movq qword [ebp - 0x698], xmm0
movq xmm0, qword [str.8917FF4330]
mov byte [ebp - 0x65e], al
movzx eax, word [0x10008504]
movq qword [ebp - 0x68c], xmm0
movq xmm0, qword [str.8917FF4370]
mov word [ebp - 0x654], ax
mov al, byte [0x10008506]
movq qword [ebp - 0x680], xmm0
movq xmm0, qword [str.8917FF4560]
mov byte [ebp - 0x652], al
movzx eax, word [0x10008510]
movq qword [ebp - 0x674], xmm0
movq xmm0, qword [str.8917FF4570]
mov word [ebp - 0x648], ax
mov al, byte [0x10008512]
movq qword [ebp - 0x668], xmm0
movq xmm0, qword [str.8917FF4650]
mov byte [ebp - 0x646], al
movzx eax, word [0x1000851c]
movq qword [ebp - 0x65c], xmm0
movq xmm0, qword [str.8917F06070]
mov word [ebp - 0x63c], ax
mov al, byte [0x1000851e]
movq qword [ebp - 0x650], xmm0
movq xmm0, qword [str.8917F06071]
mov byte [ebp - 0x63a], al
movzx eax, word [0x10008528]
movq qword [ebp - 0x644], xmm0
movq xmm0, qword [str.8917F06230]
mov word [ebp - 0x630], ax
mov al, byte [0x1000852a]
mov byte [ebp - 0x6b1], 1
mov byte [ebp - 0x6a5], 1
mov byte [ebp - 0x699], 1
mov byte [ebp - 0x68d], 1
mov byte [ebp - 0x681], 1
mov byte [ebp - 0x675], 1
mov byte [ebp - 0x669], 1
mov byte [ebp - 0x65d], 1
mov byte [ebp - 0x651], 1
mov byte [ebp - 0x645], 2
mov byte [ebp - 0x639], 2
movq qword [ebp - 0x638], xmm0
mov byte [ebp - 0x62e], al
mov byte [ebp - 0x62d], 2
movzx eax, word [0x10008534]
mov word [ebp - 0x624], ax
mov al, byte [0x10008536]
mov byte [ebp - 0x622], al
movzx eax, word [0x10008540]
mov word [ebp - 0x618], ax
mov al, byte [0x10008542]
mov byte [ebp - 0x616], al
movzx eax, word [0x1000854c]
mov word [ebp - 0x60c], ax
mov al, byte [0x1000854e]
movq xmm0, qword [str.8917F06231]
mov byte [ebp - 0x60a], al
movzx eax, word [0x10008558]
mov word [ebp - 0x600], ax
mov al, byte [0x1000855a]
mov byte [ebp - 0x5fe], al
movzx eax, word [0x10008564]
mov word [ebp - 0x5f4], ax
mov al, byte [0x10008566]
mov byte [ebp - 0x5f2], al
movzx eax, word [0x10008570]
mov word [ebp - 0x5e8], ax
mov al, byte [0x10008572]
movq qword [ebp - 0x62c], xmm0
movq xmm0, qword [str.8917F06451]
mov byte [ebp - 0x5e6], al
movzx eax, word [0x1000857c]
movq qword [ebp - 0x620], xmm0
movq xmm0, qword [str.8917F06470]
mov word [ebp - 0x5dc], ax
mov al, byte [0x1000857e]
movq qword [ebp - 0x614], xmm0
movq xmm0, qword [str.8917F06520]
mov byte [ebp - 0x5da], al
movzx eax, word [0x10008588]
movq qword [ebp - 0x608], xmm0
movq xmm0, qword [str.8917F06530]
mov word [ebp - 0x5d0], ax
mov al, byte [0x1000858a]
movq qword [ebp - 0x5fc], xmm0
movq xmm0, qword [str.8917F06570]
mov byte [ebp - 0x5ce], al
movzx eax, word [0x10008594]
movq qword [ebp - 0x5f0], xmm0
movq xmm0, qword [str.8917F06571]
mov word [ebp - 0x5c4], ax
mov al, byte [0x10008596]
movq qword [ebp - 0x5e4], xmm0
movq xmm0, qword [str.8917F06580]
mov byte [ebp - 0x5c2], al
movzx eax, word [0x100085a0]
movq qword [ebp - 0x5d8], xmm0
movq xmm0, qword [str.8917F06590]
mov word [ebp - 0x5b8], ax
mov al, byte [0x100085a2]
movq qword [ebp - 0x5cc], xmm0
movq xmm0, qword [str.8917F06670]
mov byte [ebp - 0x5b6], al
movzx eax, word [0x100085ac]
movq qword [ebp - 0x5c0], xmm0
movq xmm0, qword [str.8917F12200]
mov word [ebp - 0x5ac], ax
mov al, byte [0x100085ae]
movq qword [ebp - 0x5b4], xmm0
movq xmm0, qword [str.8917F12232]
mov byte [ebp - 0x5aa], al
movzx eax, word [0x100085b8]
mov byte [ebp - 0x621], 2
mov byte [ebp - 0x615], 2
mov byte [ebp - 0x609], 2
mov byte [ebp - 0x5fd], 2
mov byte [ebp - 0x5f1], 2
mov byte [ebp - 0x5e5], 2
mov byte [ebp - 0x5d9], 2
mov byte [ebp - 0x5cd], 2
mov byte [ebp - 0x5c1], 2
mov byte [ebp - 0x5b5], 2
mov byte [ebp - 0x5a9], 2
movq qword [ebp - 0x5a8], xmm0
mov word [ebp - 0x5a0], ax
mov al, byte [0x100085ba]
mov byte [ebp - 0x59e], al
movzx eax, word [0x100085c4]
mov word [ebp - 0x594], ax
mov al, byte [0x100085c6]
mov byte [ebp - 0x592], al
movzx eax, word [0x100085d0]
mov word [ebp - 0x588], ax
mov al, byte [0x100085d2]
mov byte [ebp - 0x586], al
movzx eax, word [0x100085dc]
mov word [ebp - 0x57c], ax
mov al, byte [0x100085de]
movq xmm0, qword [str.8917F12262]
mov byte [ebp - 0x57a], al
movzx eax, word [0x100085e8]
mov word [ebp - 0x570], ax
mov al, byte [0x100085ea]
mov byte [ebp - 0x56e], al
movzx eax, word [0x100085f4]
mov word [ebp - 0x564], ax
mov al, byte [0x100085f6]
mov byte [ebp - 0x562], al
movzx eax, word [0x10008600]
mov word [ebp - 0x558], ax
mov al, byte [0x10008602]
movq qword [ebp - 0x59c], xmm0
movq xmm0, qword [str.8917F12271]
mov byte [ebp - 0x556], al
movzx eax, word [0x1000860c]
movq qword [ebp - 0x590], xmm0
movq xmm0, qword [str.8917F12281]
mov word [ebp - 0x54c], ax
mov al, byte [0x1000860e]
movq qword [ebp - 0x584], xmm0
movq xmm0, qword [str.8917F12282]
mov byte [ebp - 0x54a], al
movzx eax, word [0x10008618]
movq qword [ebp - 0x578], xmm0
movq xmm0, qword [str.8917F12290]
mov word [ebp - 0x540], ax
mov al, byte [0x1000861a]
movq qword [ebp - 0x56c], xmm0
movq xmm0, qword [str.8917F12322]
mov byte [ebp - 0x53e], al
movzx eax, word [0x10008624]
movq qword [ebp - 0x560], xmm0
movq xmm0, qword [str.8917F12441]
mov word [ebp - 0x534], ax
mov al, byte [0x10008626]
movq qword [ebp - 0x554], xmm0
movq xmm0, qword [str.8917F12471]
mov byte [ebp - 0x532], al
movzx eax, word [0x10008630]
movq qword [ebp - 0x548], xmm0
movq xmm0, qword [str.8917F12510]
mov word [ebp - 0x528], ax
mov al, byte [0x10008632]
movq qword [ebp - 0x53c], xmm0
movq xmm0, qword [str.8917F12511]
mov byte [ebp - 0x526], al
movzx eax, word [0x1000863c]
movq qword [ebp - 0x530], xmm0
movq xmm0, qword [str.8917F12520]
mov word [ebp - 0x51c], ax
mov al, byte [0x1000863e]
movq qword [ebp - 0x524], xmm0
movq xmm0, qword [str.8917F33251]
mov byte [ebp - 0x59d], 2
mov byte [ebp - 0x591], 2
mov byte [ebp - 0x585], 2
mov byte [ebp - 0x579], 2
mov byte [ebp - 0x56d], 2
mov byte [ebp - 0x561], 2
mov byte [ebp - 0x555], 2
mov byte [ebp - 0x549], 2
mov byte [ebp - 0x53d], 2
mov byte [ebp - 0x531], 2
mov byte [ebp - 0x525], 2
mov byte [ebp - 0x51a], al
mov byte [ebp - 0x519], 2
movzx eax, word [0x10008648]
mov word [ebp - 0x510], ax
mov al, byte [0x1000864a]
mov byte [ebp - 0x50e], al
movzx eax, word [0x10008654]
mov word [ebp - 0x504], ax
mov al, byte [0x10008656]
mov byte [ebp - 0x502], al
movzx eax, word [0x10008660]
mov word [ebp - 0x4f8], ax
mov al, byte [0x10008662]
mov byte [ebp - 0x4f6], al
movzx eax, word [0x1000866c]
mov word [ebp - 0x4ec], ax
mov al, byte [0x1000866e]
mov byte [ebp - 0x4ea], al
movzx eax, word [0x10008678]
mov word [ebp - 0x4e0], ax
mov al, byte [0x1000867a]
mov byte [ebp - 0x4de], al
movzx eax, word [0x10008684]
mov word [ebp - 0x4d4], ax
mov al, byte [0x10008686]
mov byte [ebp - 0x4d2], al
movzx eax, word [0x10008690]
movq qword [ebp - 0x518], xmm0
movq xmm0, qword [str.8917F33252]
mov word [ebp - 0x4c8], ax
mov al, byte [0x10008692]
movq qword [ebp - 0x50c], xmm0
movq xmm0, qword [str.8917F33261]
mov byte [ebp - 0x4c6], al
movzx eax, word [0x1000869c]
movq qword [ebp - 0x500], xmm0
movq xmm0, qword [str.8917F33271]
mov word [ebp - 0x4bc], ax
mov al, byte [0x1000869e]
movq qword [ebp - 0x4f4], xmm0
movq xmm0, qword [str.8917F33281]
mov byte [ebp - 0x4ba], al
movzx eax, word [0x100086a8]
movq qword [ebp - 0x4e8], xmm0
movq xmm0, qword [str.8917F33291]
mov word [ebp - 0x4b0], ax
mov al, byte [0x100086aa]
movq qword [ebp - 0x4dc], xmm0
movq xmm0, qword [str.8917F33341]
mov byte [ebp - 0x4ae], al
movzx eax, word [0x100086b4]
movq qword [ebp - 0x4d0], xmm0
movq xmm0, qword [str.8917F33371]
mov word [ebp - 0x4a4], ax
mov al, byte [0x100086b6]
movq qword [ebp - 0x4c4], xmm0
movq xmm0, qword [str.8917F33382]
mov byte [ebp - 0x4a2], al
movzx eax, word [0x100086c0]
movq qword [ebp - 0x4b8], xmm0
movq xmm0, qword [str.8917F33393]
mov word [ebp - 0x498], ax
mov al, byte [0x100086c2]
movq qword [ebp - 0x4ac], xmm0
movq xmm0, qword [str.8917F33403]
mov byte [ebp - 0x496], al
movzx eax, word [0x100086cc]
movq qword [ebp - 0x4a0], xmm0
movq xmm0, qword [str.8917F33443]
mov word [ebp - 0x48c], ax
mov al, byte [0x100086ce]
mov byte [ebp - 0x50d], 2
mov byte [ebp - 0x501], 2
mov byte [ebp - 0x4f5], 2
mov byte [ebp - 0x4e9], 2
mov byte [ebp - 0x4dd], 2
mov byte [ebp - 0x4d1], 2
mov byte [ebp - 0x4c5], 2
mov byte [ebp - 0x4b9], 2
mov byte [ebp - 0x4ad], 2
mov byte [ebp - 0x4a1], 2
mov byte [ebp - 0x495], 2
movq qword [ebp - 0x494], xmm0
mov byte [ebp - 0x48a], al
movzx eax, word [0x100086d8]
mov word [ebp - 0x480], ax
mov al, byte [0x100086da]
mov byte [ebp - 0x47e], al
movzx eax, word [0x100086e4]
mov word [ebp - 0x474], ax
mov al, byte [0x100086e6]
mov byte [ebp - 0x472], al
movzx eax, word [0x100086f0]
movq xmm0, qword [str.8917F33453]
mov word [ebp - 0x468], ax
mov al, byte [0x100086f2]
mov byte [ebp - 0x466], al
movzx eax, word [0x100086fc]
mov word [ebp - 0x45c], ax
mov al, byte [0x100086fe]
mov byte [ebp - 0x45a], al
movzx eax, word [0x10008708]
mov word [ebp - 0x450], ax
mov al, byte [0x1000870a]
mov byte [ebp - 0x44e], al
movzx eax, word [0x10008714]
movq qword [ebp - 0x488], xmm0
movq xmm0, qword [str.8917F33470]
mov word [ebp - 0x444], ax
mov al, byte [0x10008716]
movq qword [ebp - 0x47c], xmm0
movq xmm0, qword [str.8917F33512]
mov byte [ebp - 0x442], al
movzx eax, word [0x10008720]
movq qword [ebp - 0x470], xmm0
movq xmm0, qword [str.8917F33523]
mov word [ebp - 0x438], ax
mov al, byte [0x10008722]
movq qword [ebp - 0x464], xmm0
movq xmm0, qword [str.8917F33533]
mov byte [ebp - 0x436], al
movzx eax, word [0x1000872c]
movq qword [ebp - 0x458], xmm0
movq xmm0, qword [str.8917F33553]
mov word [ebp - 0x42c], ax
mov al, byte [0x1000872e]
movq qword [ebp - 0x44c], xmm0
movq xmm0, qword [str.8917F33580]
mov byte [ebp - 0x42a], al
movzx eax, word [0x10008738]
movq qword [ebp - 0x440], xmm0
movq xmm0, qword [str.8917F33600]
mov word [ebp - 0x420], ax
mov al, byte [0x1000873a]
movq qword [ebp - 0x434], xmm0
movq xmm0, qword [str.8917F33613]
mov byte [ebp - 0x41e], al
movzx eax, word [0x10008744]
movq qword [ebp - 0x428], xmm0
movq xmm0, qword [str.8917F33690]
mov word [ebp - 0x414], ax
mov al, byte [0x10008746]
movq qword [ebp - 0x41c], xmm0
movq xmm0, qword [str.8917F33700]
mov byte [ebp - 0x412], al
movzx eax, word [0x10008750]
movq qword [ebp - 0x410], xmm0
movq xmm0, qword [str.8917F33710]
mov word [ebp - 0x408], ax
mov al, byte [0x10008752]
mov byte [ebp - 0x489], 2
mov byte [ebp - 0x47d], 2
mov byte [ebp - 0x471], 2
mov byte [ebp - 0x465], 2
mov byte [ebp - 0x459], 2
mov byte [ebp - 0x44d], 2
mov byte [ebp - 0x441], 2
mov byte [ebp - 0x435], 2
mov byte [ebp - 0x429], 2
mov byte [ebp - 0x41d], 2
mov byte [ebp - 0x411], 2
mov byte [ebp - 0x406], al
mov byte [ebp - 0x405], 2
movq qword [ebp - 0x404], xmm0
movzx eax, word [0x1000875c]
mov word [ebp - 0x3fc], ax
mov al, byte [0x1000875e]
mov byte [ebp - 0x3fa], al
movzx eax, word [0x10008768]
mov word [ebp - 0x3f0], ax
mov al, byte [0x1000876a]
mov byte [ebp - 0x3ee], al
movzx eax, word [0x10008774]
mov word [ebp - 0x3e4], ax
mov al, byte [0x10008776]
mov byte [ebp - 0x3e2], al
movzx eax, word [0x10008780]
mov word [ebp - 0x3d8], ax
mov al, byte [0x10008782]
movq xmm0, qword [str.8917F33760]
mov byte [ebp - 0x3d6], al
movzx eax, word [0x1000878c]
mov word [ebp - 0x3cc], ax
mov al, byte [0x1000878e]
mov byte [ebp - 0x3ca], al
movzx eax, word [0x10008798]
mov word [ebp - 0x3c0], ax
mov al, byte [0x1000879a]
mov byte [ebp - 0x3be], al
movzx eax, word [0x100087a4]
mov word [ebp - 0x3b4], ax
mov al, byte [0x100087a6]
movq qword [ebp - 0x3f8], xmm0
movq xmm0, qword [str.8917F33770]
mov byte [ebp - 0x3b2], al
movzx eax, word [0x100087b0]
movq qword [ebp - 0x3ec], xmm0
movq xmm0, qword [str.8917F33780]
mov word [ebp - 0x3a8], ax
mov al, byte [0x100087b2]
movq qword [ebp - 0x3e0], xmm0
movq xmm0, qword [str.8917F33810]
mov byte [ebp - 0x3a6], al
movzx eax, word [0x100087bc]
movq qword [ebp - 0x3d4], xmm0
movq xmm0, qword [str.8917F33860]
mov word [ebp - 0x39c], ax
mov al, byte [0x100087be]
movq qword [ebp - 0x3c8], xmm0
movq xmm0, qword [str.8917F33870]
mov byte [ebp - 0x39a], al
movzx eax, word [0x100087c8]
movq qword [ebp - 0x3bc], xmm0
movq xmm0, qword [str.8917F33880]
mov word [ebp - 0x390], ax
mov al, byte [0x100087ca]
movq qword [ebp - 0x3b0], xmm0
movq xmm0, qword [str.8917F33A20]
mov byte [ebp - 0x38e], al
movzx eax, word [0x100087d4]
movq qword [ebp - 0x3a4], xmm0
movq xmm0, qword [str.8917F33A30]
mov word [ebp - 0x384], ax
mov al, byte [0x100087d6]
movq qword [ebp - 0x398], xmm0
movq xmm0, qword [str.8917F33A80]
mov byte [ebp - 0x382], al
movzx eax, word [0x100087e0]
movq qword [ebp - 0x38c], xmm0
movq xmm0, qword [str.8917F34040]
mov word [ebp - 0x378], ax
mov al, byte [0x100087e2]
mov byte [ebp - 0x3f9], 2
mov byte [ebp - 0x3ed], 2
mov byte [ebp - 0x3e1], 2
mov byte [ebp - 0x3d5], 2
mov byte [ebp - 0x3c9], 2
mov byte [ebp - 0x3bd], 2
mov byte [ebp - 0x3b1], 2
mov byte [ebp - 0x3a5], 2
mov byte [ebp - 0x399], 2
mov byte [ebp - 0x38d], 2
mov byte [ebp - 0x381], 2
movq qword [ebp - 0x380], xmm0
mov byte [ebp - 0x376], al
movzx eax, word [0x100087ec]
mov word [ebp - 0x36c], ax
mov al, byte [0x100087ee]
mov byte [ebp - 0x36a], al
movzx eax, word [0x100087f8]
mov word [ebp - 0x360], ax
mov al, byte [0x100087fa]
mov byte [ebp - 0x35e], al
movzx eax, word [0x10008804]
mov word [ebp - 0x354], ax
mov al, byte [0x10008806]
movq xmm0, qword [str.8917F42082]
mov byte [ebp - 0x352], al
movzx eax, word [0x10008810]
mov word [ebp - 0x348], ax
mov al, byte [0x10008812]
mov byte [ebp - 0x346], al
movzx eax, word [0x1000881c]
mov word [ebp - 0x33c], ax
mov al, byte [0x1000881e]
mov byte [ebp - 0x33a], al
movzx eax, word [0x10008828]
mov word [ebp - 0x330], ax
mov al, byte [0x1000882a]
movq qword [ebp - 0x374], xmm0
movq xmm0, qword [str.8917F42092]
mov byte [ebp - 0x32e], al
movzx eax, word [0x10008834]
movq qword [ebp - 0x368], xmm0
movq xmm0, qword [str.8917F42312]
mov word [ebp - 0x324], ax
mov al, byte [0x10008836]
movq qword [ebp - 0x35c], xmm0
movq xmm0, qword [str.8917F42322]
mov byte [ebp - 0x322], al
movzx eax, word [0x10008840]
movq qword [ebp - 0x350], xmm0
movq xmm0, qword [str.8917F42332]
mov word [ebp - 0x318], ax
mov al, byte [0x10008842]
movq qword [ebp - 0x344], xmm0
movq xmm0, qword [str.8917F42342]
mov byte [ebp - 0x316], al
movzx eax, word [0x1000884c]
movq qword [ebp - 0x338], xmm0
movq xmm0, qword [str.8917F42352]
mov word [ebp - 0x30c], ax
mov al, byte [0x1000884e]
movq qword [ebp - 0x32c], xmm0
movq xmm0, qword [str.8917F42362]
mov byte [ebp - 0x30a], al
movzx eax, word [0x10008858]
movq qword [ebp - 0x320], xmm0
movq xmm0, qword [str.8917F42631]
mov word [ebp - 0x300], ax
mov al, byte [0x1000885a]
movq qword [ebp - 0x314], xmm0
movq xmm0, qword [str.8917F42641]
mov byte [ebp - 0x2fe], al
movzx eax, word [0x10008864]
movq qword [ebp - 0x308], xmm0
movq xmm0, qword [str.8917F42643]
mov word [ebp - 0x2f4], ax
mov al, byte [0x10008866]
movq qword [ebp - 0x2fc], xmm0
movq xmm0, qword [str.8917F42670]
mov byte [ebp - 0x2f2], al
movzx eax, word [0x10008870]
mov byte [ebp - 0x375], 2
mov byte [ebp - 0x369], 2
mov byte [ebp - 0x35d], 2
mov byte [ebp - 0x351], 2
mov byte [ebp - 0x345], 2
mov byte [ebp - 0x339], 2
mov byte [ebp - 0x32d], 2
mov byte [ebp - 0x321], 2
mov byte [ebp - 0x315], 2
mov byte [ebp - 0x309], 2
mov byte [ebp - 0x2fd], 2
mov byte [ebp - 0x2f1], 2
movq qword [ebp - 0x2f0], xmm0
mov word [ebp - 0x2e8], ax
mov al, byte [0x10008872]
mov byte [ebp - 0x2e6], al
movzx eax, word [0x1000887c]
mov word [ebp - 0x2dc], ax
mov al, byte [0x1000887e]
mov byte [ebp - 0x2da], al
movzx eax, word [0x10008888]
mov word [ebp - 0x2d0], ax
mov al, byte [0x1000888a]
mov byte [ebp - 0x2ce], al
movzx eax, word [0x10008894]
mov word [ebp - 0x2c4], ax
mov al, byte [0x10008896]
movq xmm0, qword [str.8917F42672]
mov byte [ebp - 0x2c2], al
movzx eax, word [0x100088a0]
mov word [ebp - 0x2b8], ax
mov al, byte [0x100088a2]
mov byte [ebp - 0x2b6], al
movzx eax, word [0x100088ac]
mov word [ebp - 0x2ac], ax
mov al, byte [0x100088ae]
mov byte [ebp - 0x2aa], al
movzx eax, word [0x100088b8]
mov word [ebp - 0x2a0], ax
mov al, byte [0x100088ba]
movq qword [ebp - 0x2e4], xmm0
movq xmm0, qword [str.8917F42680]
mov byte [ebp - 0x29e], al
movzx eax, word [0x100088c4]
movq qword [ebp - 0x2d8], xmm0
movq xmm0, qword [str.8917F42682]
mov word [ebp - 0x294], ax
mov al, byte [0x100088c6]
movq qword [ebp - 0x2cc], xmm0
movq xmm0, qword [str.8917F42690]
mov byte [ebp - 0x292], al
movzx eax, word [0x100088d0]
movq qword [ebp - 0x2c0], xmm0
movq xmm0, qword [str.8917F42700]
mov word [ebp - 0x288], ax
mov al, byte [0x100088d2]
movq qword [ebp - 0x2b4], xmm0
movq xmm0, qword [str.8917F42701]
mov byte [ebp - 0x286], al
movzx eax, word [0x100088dc]
movq qword [ebp - 0x2a8], xmm0
movq xmm0, qword [str.8917F42702]
mov word [ebp - 0x27c], ax
mov al, byte [0x100088de]
movq qword [ebp - 0x29c], xmm0
movq xmm0, qword [str.8917F42720]
mov byte [ebp - 0x27a], al
movzx eax, word [0x100088e8]
movq qword [ebp - 0x290], xmm0
movq xmm0, qword [str.8917F42722]
mov word [ebp - 0x270], ax
mov al, byte [0x100088ea]
movq qword [ebp - 0x284], xmm0
movq xmm0, qword [str.8917F42730]
mov byte [ebp - 0x26e], al
movzx eax, word [0x100088f4]
movq qword [ebp - 0x278], xmm0
movq xmm0, qword [str.8917F47432]
mov word [ebp - 0x264], ax
mov al, byte [0x100088f6]
mov byte [ebp - 0x2e5], 2
mov byte [ebp - 0x2d9], 2
mov byte [ebp - 0x2cd], 2
mov byte [ebp - 0x2c1], 2
mov byte [ebp - 0x2b5], 2
mov byte [ebp - 0x2a9], 2
mov byte [ebp - 0x29d], 2
mov byte [ebp - 0x291], 2
mov byte [ebp - 0x285], 2
mov byte [ebp - 0x279], 2
mov byte [ebp - 0x26d], 2
movq qword [ebp - 0x26c], xmm0
mov byte [ebp - 0x262], al
mov byte [ebp - 0x261], 2
movzx eax, word [0x10008900]
mov word [ebp - 0x258], ax
mov al, byte [0x10008902]
mov byte [ebp - 0x256], al
movzx eax, word [0x1000890c]
mov word [ebp - 0x24c], ax
mov al, byte [0x1000890e]
mov byte [ebp - 0x24a], al
movzx eax, word [0x10008918]
mov word [ebp - 0x240], ax
mov al, byte [0x1000891a]
movq xmm0, qword [str.8917F47442]
mov byte [ebp - 0x23e], al
movzx eax, word [0x10008924]
mov word [ebp - 0x234], ax
mov al, byte [0x10008926]
mov byte [ebp - 0x232], al
movzx eax, word [0x10008930]
mov word [ebp - 0x228], ax
mov al, byte [0x10008932]
mov byte [ebp - 0x226], al
movzx eax, word [0x1000893c]
mov word [ebp - 0x21c], ax
mov al, byte [0x1000893e]
movq qword [ebp - 0x260], xmm0
movq xmm0, qword [str.8917F47451]
mov byte [ebp - 0x21a], al
movzx eax, word [0x10008948]
movq qword [ebp - 0x254], xmm0
movq xmm0, qword [str.8917F47461]
mov word [ebp - 0x210], ax
mov al, byte [0x1000894a]
movq qword [ebp - 0x248], xmm0
movq xmm0, qword [str.8917F47631]
mov byte [ebp - 0x20e], al
movzx eax, word [0x10008954]
movq qword [ebp - 0x23c], xmm0
movq xmm0, qword [str.8917F47632]
mov word [ebp - 0x204], ax
mov al, byte [0x10008956]
movq qword [ebp - 0x230], xmm0
movq xmm0, qword [str.8917F47660]
mov byte [ebp - 0x202], al
movzx eax, word [0x10008960]
movq qword [ebp - 0x224], xmm0
movq xmm0, qword [str.8917F48460]
mov word [ebp - 0x1f8], ax
mov al, byte [0x10008962]
movq qword [ebp - 0x218], xmm0
movq xmm0, qword [str.8917F48500]
mov byte [ebp - 0x1f6], al
movzx eax, word [0x1000896c]
movq qword [ebp - 0x20c], xmm0
movq xmm0, qword [str.8917F48510]
mov word [ebp - 0x1ec], ax
mov al, byte [0x1000896e]
movq qword [ebp - 0x200], xmm0
movq xmm0, qword [str.8917F48641]
mov byte [ebp - 0x1ea], al
movzx eax, word [0x10008978]
movq qword [ebp - 0x1f4], xmm0
movq xmm0, qword [str.8917F50121]
mov word [ebp - 0x1e0], ax
mov al, byte [0x1000897a]
movq qword [ebp - 0x1e8], xmm0
movq xmm0, qword [str.8917F50122]
mov byte [ebp - 0x1de], al
movzx eax, word [0x10008984]
mov byte [ebp - 0x255], 2
mov byte [ebp - 0x249], 2
mov byte [ebp - 0x23d], 2
mov byte [ebp - 0x231], 2
mov byte [ebp - 0x225], 2
mov byte [ebp - 0x219], 2
mov byte [ebp - 0x20d], 2
mov byte [ebp - 0x201], 2
mov byte [ebp - 0x1f5], 2
mov byte [ebp - 0x1e9], 2
mov byte [ebp - 0x1dd], 2
movq qword [ebp - 0x1dc], xmm0
mov word [ebp - 0x1d4], ax
mov al, byte [0x10008986]
mov byte [ebp - 0x1d2], al
movzx eax, word [0x10008990]
mov word [ebp - 0x1c8], ax
mov al, byte [0x10008992]
mov byte [ebp - 0x1c6], al
movzx eax, word [0x1000899c]
mov word [ebp - 0x1bc], ax
mov al, byte [0x1000899e]
mov byte [ebp - 0x1ba], al
movzx eax, word [0x100089a8]
mov word [ebp - 0x1b0], ax
mov al, byte [0x100089aa]
movq xmm0, qword [str.8917F50141]
mov byte [ebp - 0x1ae], al
movzx eax, word [0x100089b4]
mov word [ebp - 0x1a4], ax
mov al, byte [0x100089b6]
mov byte [ebp - 0x1a2], al
movzx eax, word [0x100089c0]
mov word [ebp - 0x198], ax
mov al, byte [0x100089c2]
mov byte [ebp - 0x196], al
movzx eax, word [0x100089cc]
mov word [ebp - 0x18c], ax
mov al, byte [0x100089ce]
movq qword [ebp - 0x1d0], xmm0
movq xmm0, qword [str.8917F50191]
mov byte [ebp - 0x18a], al
movzx eax, word [0x100089d8]
movq qword [ebp - 0x1c4], xmm0
movq xmm0, qword [str.8917F50192]
mov word [ebp - 0x180], ax
mov al, byte [0x100089da]
movq qword [ebp - 0x1b8], xmm0
movq xmm0, qword [str.8917F50214]
mov byte [ebp - 0x17e], al
movzx eax, word [0x100089e4]
movq qword [ebp - 0x1ac], xmm0
movq xmm0, qword [str.8917F53532]
mov word [ebp - 0x174], ax
mov al, byte [0x100089e6]
movq qword [ebp - 0x1a0], xmm0
movq xmm0, qword [str.8917F53533]
mov byte [ebp - 0x172], al
movzx eax, word [0x100089f0]
movq qword [ebp - 0x194], xmm0
movq xmm0, qword [str.8917F76191]
mov word [ebp - 0x168], ax
mov al, byte [0x100089f2]
movq qword [ebp - 0x188], xmm0
movq xmm0, qword [str.8917F76221]
mov byte [ebp - 0x166], al
movzx eax, word [0x100089fc]
movq qword [ebp - 0x17c], xmm0
movq xmm0, qword [str.8917F76261]
mov word [ebp - 0x15c], ax
mov al, byte [0x100089fe]
movq qword [ebp - 0x170], xmm0
movq xmm0, qword [str.8917F76291]
mov byte [ebp - 0x15a], al
movzx eax, word [0x10008a08]
movq qword [ebp - 0x164], xmm0
movq xmm0, qword [str.8917F76470]
mov word [ebp - 0x150], ax
mov al, byte [0x10008a0a]
movq qword [ebp - 0x158], xmm0
movq xmm0, qword [str.8917F76471]
mov byte [ebp - 0x1d1], 2
mov byte [ebp - 0x1c5], 2
mov byte [ebp - 0x1b9], 2
mov byte [ebp - 0x1ad], 2
mov byte [ebp - 0x1a1], 2
mov byte [ebp - 0x195], 2
mov byte [ebp - 0x189], 2
mov byte [ebp - 0x17d], 2
mov byte [ebp - 0x171], 2
mov byte [ebp - 0x165], 2
mov byte [ebp - 0x159], 2
mov byte [ebp - 0x14e], al
mov byte [ebp - 0x14d], 2
movzx eax, word [0x10008a14]
lea esi, [ebx + 0xc]
mov word [ebp - 0x144], ax
sub esp, 0xc4
mov al, byte [0x10008a16]
mov ecx, 0x34
mov byte [ebp - 0x142], al
mov edi, esp
movzx eax, word [0x10008a20]
mov word [ebp - 0x138], ax
mov al, byte [0x10008a22]
movq qword [ebp - 0x14c], xmm0
movq xmm0, qword [str.8917F76500]
mov byte [ebp - 0x136], al
movzx eax, word [0x10008a2c]
movq qword [ebp - 0x140], xmm0
movq xmm0, qword [str.8917F33673]
mov word [ebp - 0x12c], ax
mov al, byte [0x10008a2e]
movq qword [ebp - 0x134], xmm0
movq xmm0, qword [str.8917F33E40]
mov byte [ebp - 0x12a], al
movzx eax, word [0x10008a38]
movq qword [ebp - 0x128], xmm0
xorps xmm0, xmm0
mov word [ebp - 0x120], ax
mov al, byte [0x10008a3a]
mov dword [ebx + 0x34], 0x788
mov dword [ebx + 0xc4], 0x780
rep movsd dword es:[edi], dword [esi]
mov byte [ebp - 0x141], 2
mov byte [ebp - 0x135], 2
mov byte [ebp - 0x129], 2
mov byte [ebp - 0x11e], al
mov byte [ebp - 0x11d], 2
mov dword [ebp - 0x94], 0x21363c44
mov dword [ebp - 0x90], 0x485e5b65
mov dword [ebp - 0x8c], 0xaca376b8
mov dword [ebp - 0x88], 0x57ac4c1a
mov byte [ebp - 0xb8], 0
movq qword [ebp - 0xb7], xmm0
mov word [ebp - 0xaf], 0
mov byte [ebp - 0x70], 0
movq qword [ebp - 0x6f], xmm0
mov word [ebp - 0x67], 0
call fcn.10001980
mov esi, eax
add esp, 0xd0
test esi, esi
jne 0x10005abe
mov eax, dword [sym.imp.KERNEL32.dll_Sleep]
push 0x1388
call eax
lea edx, [ebp - 0x20]
lea ecx, [ebp - 0x32a0]
call fcn.10002490
push esi
push 0x10008a4d
test eax, eax
jne 0x10004ce3
push 5
mov byte [ebp - 0x3299], al
call dword [ebp - 0x1c]
movzx eax, word [ebp - 0x20]
lea ecx, [ebp - 0x329e]
add esp, 0xc
mov dword [ebp - 0x14], eax
mov edx, eax
call fcn.10001e70
lea edx, [ebp - 0x329e]
lea ecx, [ebp - 0x14]
call fcn.10001ec0
mov esi, dword [ebp - 0x14]
lea edi, [esi + 7]
push edi
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
add esp, 4
mov dword [ebp - 0x14], eax
push str.89170_
push 0x10008250
push 7
push eax
call fcn.10001f00
lea eax, [ebp - 0x329e]
push eax
push 0x10008250
lea eax, [esi + 1]
push eax
mov eax, dword [ebp - 0x14]
sub eax, esi
dec eax
add eax, edi
push eax
call fcn.10001f00
mov esi, dword [ebp - 0x14]
push 0x3ef
push esi
push 0x190
mov byte [esi + edi - 1], 0
call dword [ebp - 0x1c]
add esp, 0x2c
push esi
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov edi, dword [sym.imp.KERNEL32.dll_Sleep]
add esp, 4
push 0x64
call edi
lea edx, [ebp - 0x20]
lea ecx, [ebp - 0x32a0]
call fcn.100023e0
test eax, eax
jne 0x1000451a
movq xmm0, qword [ebp - 0x329d]
mov ax, word [ebp - 0x3295]
push 0
push 0x10008a4d
push 0xa
movq qword [ebp - 0xb8], xmm0
mov word [ebp - 0xb0], ax
call dword [ebp - 0x1c]
movzx eax, word [ebp - 0x20]
lea edx, [ebp - 0x329d]
add esp, 0xc
mov dword [ebp - 0x14], eax
lea ecx, [ebp - 0x14]
call fcn.10001ec0
mov esi, dword [ebp - 0x14]
lea edi, [esi + 1]
push edi
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
add esp, 4
mov dword [ebp - 0x14], eax
lea ecx, [ebp - 0x329d]
sub eax, esi
dec eax
add eax, edi
push ecx
push 0x10008250
push edi
push eax
call fcn.10001f00
mov esi, dword [ebp - 0x14]
push 0x460
push esi
push 0x190
mov byte [esi + edi - 1], 0
call dword [ebp - 0x1c]
add esp, 0x1c
push esi
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov edi, dword [sym.imp.KERNEL32.dll_Sleep]
add esp, 4
mov esi, dword [ebp - 0x1c]
jmp 0x10004531
mov esi, dword [ebp - 0x1c]
push 0x460
push str._failed
push 0x190
call esi
add esp, 0xc
lea eax, [ebp - 0xb8]
push eax
mov eax, dword [ebp - 0x3c]
add eax, 0x18
push eax
lea eax, [ebp - 0xe4]
push eax
call dword [sym.imp.data_access.dll_data_8917f]
add esp, 0xc
mov dword [ebp - 4], 0
mov eax, dword [ebp - 0xd4]
mov dword [ebp - 0x24], eax
test eax, eax
jne 0x1000466d
mov ecx, dword [ebp - 0x3c]
call fcn.10001cf0
test eax, eax
je 0x10004655
mov eax, dword [ebp - 0x3c]
add eax, 0x418
mov dword [ebp - 0x60], 0
push 0x100081d4
push eax
lea eax, [ebp - 0x60]
push eax
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fopen_s]
mov eax, dword [ebp - 0x60]
add esp, 0xc
test eax, eax
je 0x1000461e
push 2
push 0
push eax
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fseek]
add esp, 0xc
push dword [ebp - 0x60]
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_ftell]
add esp, 4
mov dword [ebp - 0x24], eax
push dword [ebp - 0x60]
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_rewind]
add esp, 4
push dword [ebp - 0x24]
call fcn.100067e2
add esp, 4
mov dword [ebp - 0x38], eax
push dword [ebp - 0x60]
push dword [ebp - 0x24]
push 1
push eax
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fread]
push dword [ebp - 0x60]
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
add esp, 0x14
mov dword [ebp - 0x60], 0
cmp dword [ebp - 0x24], 0x80000
je 0x100046b2
sub esp, 8
lea ecx, [ebp - 0xe4]
mov esi, 0x102
call fcn.10005ae0
jmp 0x10005a02
push 0
push 0x10008a4d
push 0
call esi
add esp, 0xc
push 0x403
push str._failed.
push 0x190
call esi
add esp, 4
lea ecx, [ebp - 0xe4]
mov esi, 0x100
call fcn.10005ae0
jmp 0x10005abe
sub esp, 8
lea ecx, [ebp - 0xe4]
mov esi, 0x101
call fcn.10005ae0
jmp 0x10005abe
push eax
call fcn.100067e2
mov ecx, dword [ebp - 0x24]
add esp, 4
xor edx, edx
mov dword [ebp - 0x38], eax
test ecx, ecx
jle 0x100046b5
mov esi, eax
nop dword [eax]
nop dword [eax + eax]
cmp dword [ebp - 0xd0], 0x10
lea eax, [ebp - 0xe4]
cmovae eax, dword [ebp - 0xe4]
mov al, byte [edx + eax]
mov byte [edx + esi], al
inc edx
cmp edx, ecx
jl 0x10004690
mov esi, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x38]
test eax, eax
je 0x1000472c
movq xmm0, qword [eax + 0x7ff1c]
lea ecx, [ebp - 0x70]
mov ax, word [eax + 0x7ff24]
mov word [ebp - 0x68], ax
lea eax, [ebp - 0xb8]
movq qword [ebp - 0x70], xmm0
nop word [eax + eax]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x10004700
test dl, dl
je 0x100046fc
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x10004700
add eax, 2
add ecx, 2
test dl, dl
jne 0x100046e0
xor eax, eax
jmp 0x10004705
sbb eax, eax
or eax, 1
test eax, eax
je 0x1000472c
push 0
push 0x10008a4d
push 0x23
call esi
add esp, 4
lea ecx, [ebp - 0xe4]
mov esi, 0x461
call fcn.10005ae0
jmp 0x10005a02
lea eax, [ebp - 0x7dd]
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x30], eax
nop dword [eax]
lea edx, [eax - 0xb]
mov esi, 7
lea ecx, [ebp - 0xb8]
nop
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x10004786
add ecx, 4
add edx, 4
sub esi, 4
jae 0x10004750
mov ax, word [ecx]
cmp ax, word [edx]
jne 0x10004786
mov al, byte [ecx + 2]
cmp al, byte [edx + 2]
mov eax, dword [ebp - 0x30]
jne 0x10004789
mov cl, byte [eax]
cmp cl, 1
je 0x100047a0
cmp cl, 2
jne 0x10004789
movups xmm0, xmmword [ebp - 0x5c]
jmp 0x100047a4
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x14]
add eax, 0xc
inc ecx
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x14], ecx
cmp ecx, 0x91
jb 0x10004740
jmp 0x100047ab
movups xmm0, xmmword [ebp - 0x4c]
movups xmmword [ebp - 0xac], xmm0
cmp byte [ebp - 0xac], 0
jne 0x1000485b
mov eax, dword [ebp - 0xac]
shr eax, 8
test al, al
jne 0x1000485b
mov ecx, dword [ebp - 0x38]
test ecx, ecx
je 0x10004606
cmp dword [ebp - 0x24], 0x80000
jne 0x10004606
lea edx, [ecx + 0x3820]
mov dword [ebp - 0x14], 0xc
lea eax, [ebp - 0x4c]
mov esi, edx
mov dword [ebp - 0x20], eax
mov edi, dword [ebp - 0x20]
mov eax, dword [esi]
cmp eax, dword [edi]
mov edi, dword [sym.imp.KERNEL32.dll_Sleep]
jne 0x10004814
add dword [ebp - 0x20], 4
add esi, 4
sub dword [ebp - 0x14], 4
jae 0x100047f6
jmp 0x10004850
add ecx, 0x3d14
mov dword [ebp - 0x14], 0xc
lea eax, [ebp - 0x4c]
mov esi, ecx
mov dword [ebp - 0x20], eax
nop dword [eax]
mov edi, dword [ebp - 0x20]
mov eax, dword [esi]
cmp eax, dword [edi]
mov edi, dword [sym.imp.KERNEL32.dll_Sleep]
jne 0x100049c4
add dword [ebp - 0x20], 4
add esi, 4
sub dword [ebp - 0x14], 4
jae 0x10004830
movups xmm0, xmmword [ebp - 0x4c]
movups xmmword [ebp - 0xac], xmm0
mov dword [ebp - 0x80], 0
mov dword [ebp - 0x20], 1
nop dword [eax]
xorps xmm0, xmm0
xor esi, esi
movups xmmword [ebp - 0xcc], xmm0
nop dword [eax]
call dword [sym.imp.api_ms_win_crt_utility_l1_1_0.dll_rand]
mov byte [ebp + esi - 0xcc], al
inc esi
cmp esi, 0x10
jl 0x10004880
push 0x1400
lea eax, [ebp - 0x32a0]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
push 0x14
call edi
push 0x1400
lea eax, [ebp - 0x1ea0]
mov word [ebp - 0x100], 0x327
xorps xmm0, xmm0
push 0
push eax
movups xmmword [ebp - 0xfe], xmm0
call sub.VCRUNTIME140.dll_memset
movups xmm0, xmmword [ebp - 0xcc]
add esp, 0xc
mov dword [ebp - 0x14], 0
lea eax, [ebp - 0x14]
mov edx, 0x12
lea ecx, [ebp - 0x100]
movups xmmword [ebp - 0xfe], xmm0
push 0x7530
push 0
push eax
lea eax, [ebp - 0x1ea0]
push eax
call fcn.10001b70
mov esi, eax
add esp, 0x10
test esi, esi
jne 0x10004cbe
movzx ecx, byte [ebp - 0x100]
mov dl, byte [ebp - 0x1ea0]
add ecx, 0x40
movzx eax, dl
cmp eax, ecx
jne 0x10004cae
movzx eax, word [ebp - 0x14]
push eax
lea eax, [ebp - 0x1ea0]
push eax
lea eax, [ebp - 0x32a0]
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
push esi
mov esi, dword [ebp - 0x1c]
push 0x10008a4d
push 0xf
call esi
add esp, 0xc
push 0x426
push 0x1000825c
push 0x190
call esi
mov eax, dword [ebp - 0x20]
add esp, 0xc
mov dword [ebp - 0x5c], 0x1cfc2bf2
xorps xmm0, xmm0
mov dword [ebp - 0x58], 0x85aa84dd
mov dword [ebp - 0x54], 0x7dbef1ed
mov dword [ebp - 0x50], 0x15de3def
mov dword [ebp - 0x4c], 0x87f409f4
mov dword [ebp - 0x48], 0xe8ab8c56
mov dword [ebp - 0x44], 0xdb4d86c9
mov dword [ebp - 0x40], 0x8bb93719
movups xmmword [ebp - 0x100], xmm0
cmp eax, 1
jne 0x10004a25
movups xmm0, xmmword [ebp - 0x5c]
jmp 0x10004a2e
lea esi, [ebp - 0x5c]
mov dword [ebp - 0x14], 0xc
nop
mov eax, dword [edx]
cmp eax, dword [esi]
jne 0x100049eb
add edx, 4
add esi, 4
sub dword [ebp - 0x14], 4
jae 0x100049d0
movups xmm0, xmmword [ebp - 0x5c]
jmp 0x10004854
lea edx, [ebp - 0x5c]
mov esi, 0xc
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x10004a0d
add ecx, 4
add edx, 4
sub esi, 4
jae 0x100049f3
movups xmm0, xmmword [ebp - 0x5c]
jmp 0x10004854
sub esp, 8
lea ecx, [ebp - 0xe4]
mov esi, 0x4b7
call fcn.10005ae0
jmp 0x10005a02
cmp eax, 2
jne 0x10004a35
movups xmm0, xmmword [ebp - 0x4c]
movups xmmword [ebp - 0x100], xmm0
xorps xmm0, xmm0
mov byte [ebp - 0x74], 0
push 0x30
movq qword [ebp - 0x73], xmm0
mov dword [ebp - 0x6b], 0
mov word [ebp - 0x67], 0
mov byte [ebp - 0x65], 0
call fcn.100067f0
movups xmm0, xmmword [ebp - 0x100]
lea ecx, [ebp - 0x74]
mov edx, eax
push ecx
movups xmmword [eax], xmm0
push ecx
movups xmm0, xmmword [ebp - 0xcc]
movups xmmword [eax + 0x10], xmm0
movups xmm0, xmmword [ebp - 0x329e]
movups xmmword [eax + 0x20], xmm0
call fcn.100015a0
add esp, 0xc
mov esi, eax
push 0x3fb
test esi, esi
jne 0x10004cc3
push 0x1000825c
push 0x190
call dword [ebp - 0x1c]
add esp, 0xc
lea eax, [ebp - 0x32a0]
push 0x1400
push esi
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
push 0x14
call edi
push 0x1400
lea eax, [ebp - 0x1ea0]
mov word [ebp - 0xcc], 0x427
xorps xmm0, xmm0
push esi
push eax
movups xmmword [ebp - 0xca], xmm0
call sub.VCRUNTIME140.dll_memset
movups xmm0, xmmword [ebp - 0x74]
add esp, 0xc
mov dword [ebp - 0x14], esi
lea eax, [ebp - 0x14]
lea edx, [esi + 0x12]
lea ecx, [ebp - 0xcc]
push 0x7530
push esi
push eax
lea eax, [ebp - 0x1ea0]
push eax
movups xmmword [ebp - 0xca], xmm0
call fcn.10001b70
mov esi, eax
add esp, 0x10
test esi, esi
jne 0x10004b45
movzx ecx, byte [ebp - 0xcc]
mov dl, byte [ebp - 0x1ea0]
add ecx, 0x40
movzx eax, dl
cmp eax, ecx
je 0x10004b60
cmp dl, 0x7f
mov esi, 3
mov eax, 0x491
cmove esi, eax
mov eax, dword [ebp - 0x20]
cmp eax, 2
je 0x10004ca7
inc eax
mov dword [ebp - 0x20], eax
cmp eax, 3
jb 0x10004870
jmp 0x10004b7b
movzx eax, word [ebp - 0x14]
push eax
lea eax, [ebp - 0x1ea0]
push eax
lea eax, [ebp - 0x32a0]
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov esi, dword [ebp - 0x1c]
push 0
push 0x10008a4d
push 0x14
call esi
add esp, 0xc
push 0x427
push 0x1000825c
push 0x190
call esi
add esp, 0xc
push 0x32
call edi
push 0x7530
push 0
lea eax, [ebp - 0x2c]
mov word [ebp - 0x34], 0x210
push eax
lea eax, [ebp - 0x1ea0]
mov edx, 2
push eax
lea ecx, [ebp - 0x34]
call fcn.10001b70
add esp, 0x10
test eax, eax
jne 0x10004c81
movzx ecx, byte [ebp - 0x34]
movzx eax, byte [ebp - 0x1ea0]
add ecx, 0x40
cmp eax, ecx
jne 0x10004c81
push 0
push 0x10008a4d
push 0x19
call esi
add esp, 0xc
push 0x3ee
push 0x1000825c
push 0x190
call esi
add esp, 0xc
mov word [ebp - 0x18], 0x321
lea eax, [ebp - 0x1ea0]
push 0x1400
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov dword [ebp - 0x14], 0
lea eax, [ebp - 0x14]
mov edx, 2
lea ecx, [ebp - 0x18]
push 0x7530
push 0
push eax
lea eax, [ebp - 0x1ea0]
push eax
call fcn.10001b70
add esp, 0x10
test eax, eax
jne 0x10004c67
movzx ecx, byte [ebp - 0x18]
movzx eax, byte [ebp - 0x1ea0]
add ecx, 0x40
cmp eax, ecx
je 0x10004c95
sub esp, 8
mov dword [ebp - 4], 0xffffffff
lea ecx, [ebp - 0xe4]
call fcn.10005ae0
jmp 0x10004db1
push 0x3ee
push str._failed
push 0x190
call esi
add esp, 0xc
mov eax, dword [ebp - 0x80]
inc eax
mov dword [ebp - 0x80], eax
cmp eax, 2
jl 0x10004862
jmp 0x10004c67
push 0x427
jmp 0x10004cc3
cmp dl, 0x7f
mov esi, 3
mov eax, 0x491
cmove esi, eax
push 0x426
push str._failed
push 0x190
call dword [ebp - 0x1c]
add esp, 4
lea ecx, [ebp - 0xe4]
call fcn.10005ae0
jmp 0x10005a02
mov esi, dword [ebp - 0x1c]
push 0x14
call esi
add esp, 0xc
push 0x3ef
push str._failed
push 0x190
call esi
mov edi, dword [ebp - 0x3c]
add esp, 0xc
mov ecx, edi
call fcn.10001cf0
test eax, eax
je 0x10005ab9
push 0x100081d4
lea eax, [edi + 0x418]
mov dword [ebp - 0x30], 0
push eax
lea eax, [ebp - 0x30]
push eax
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fopen_s]
mov eax, dword [ebp - 0x30]
add esp, 0xc
test eax, eax
je 0x10005a90
push 2
push 0
push eax
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fseek]
add esp, 0xc
push dword [ebp - 0x30]
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_ftell]
add esp, 4
mov esi, eax
mov dword [ebp - 0x24], esi
push dword [ebp - 0x30]
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_rewind]
add esp, 4
push esi
call fcn.100067e2
add esp, 4
mov dword [ebp - 0x38], eax
push dword [ebp - 0x30]
push esi
push 1
push eax
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fread]
push dword [ebp - 0x30]
call dword [sym.imp.api_ms_win_crt_stdio_l1_1_0.dll_fclose]
add esp, 0x14
mov dword [ebp - 0x30], 0
cmp esi, 0x80000
je 0x10004da7
mov esi, 0x102
jmp 0x10005a02
cmp dword [ebp - 0x38], 0
je 0x10005a89
sub esp, 0xd0
mov dword [ebx + 0x34], 9
mov dword [ebx + 0xc4], 8
lea esi, [ebx + 0xc]
mov ecx, 0x34
mov edi, esp
rep movsd dword es:[edi], dword [esi]
call fcn.10001980
mov esi, eax
add esp, 0xd0
test esi, esi
jne 0x10005a02
mov edi, dword [sym.imp.KERNEL32.dll_Sleep]
push 0x3e8
call edi
push 0x7530
push 3
lea eax, [ebp - 0x2c]
mov word [ebp - 0x28], 0x1ff
push eax
lea eax, [ebp - 0x1ea0]
mov byte [ebp - 0x26], 0
push eax
lea edx, [esi + 3]
lea ecx, [ebp - 0x28]
call fcn.10001b70
add esp, 0x10
push 0x28
call edi
push 0x7530
push 3
lea eax, [ebp - 0x2c]
mov word [ebp - 0x28], 0x1ff
push eax
lea eax, [ebp - 0x1ea0]
mov byte [ebp - 0x26], 0
push eax
lea edx, [esi + 3]
lea ecx, [ebp - 0x28]
call fcn.10001b70
add esp, 0x10
push 0x28
call edi
push 0x7530
push 3
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x6c], 0x72001ff
push eax
lea eax, [ebp - 0x1ea0]
mov dword [ebp - 0x68], 0x90008
push eax
lea edx, [esi + 8]
lea ecx, [ebp - 0x6c]
call fcn.10001b70
add esp, 0x10
push 0x28
call edi
push 0x7530
push 3
lea eax, [ebp - 0x2c]
mov dword [ebp - 0x20], 0x101ff
push eax
lea eax, [ebp - 0x1ea0]
push eax
lea edx, [esi + 4]
lea ecx, [ebp - 0x20]
call fcn.10001b70
add esp, 0x10
push 0x28
call edi
push 0x1400
lea eax, [ebp - 0x32a0]
push esi
push eax
call sub.VCRUNTIME140.dll_memset
mov eax, dword [ebp - 0x38]
lea edx, [esi + 6]
add esp, 0xc
mov word [ebp - 0x7c], 0x1ff
lea ecx, [ebp - 0x7c]
mov eax, dword [eax + 0x7ff18]
push 0x7530
mov dword [ebp - 0x7a], eax
lea eax, [ebp - 0x18]
push 3
push eax
lea eax, [ebp - 0x1ea0]
push eax
call fcn.10001b70
mov esi, eax
add esp, 0x10
test esi, esi
je 0x10004f27
mov edi, dword [ebp - 0x1c]
push 0x465
push str._failed
push 0x190
call edi
add esp, 0xc
push 0x468
push 0x10008a4d
push 0xc8
jmp 0x100059fd
movzx eax, word [ebp - 0x18]
push eax
lea eax, [ebp - 0x1ea0]
push eax
lea eax, [ebp - 0x32a0]
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
mov dword [ebp - 0x14], 0
push 0
push 0x10008a4d
push 0x1e
call dword [ebp - 0x1c]
add esp, 0xc
push 0x465
push 0x1000825c
push 0x190
call dword [ebp - 0x1c]
add esp, 0xc
cmp word [ebp - 0x18], 0xf
jae 0x10004f8e
push 0x460
push str._failed
push 0x190
call dword [ebp - 0x1c]
mov esi, dword [ebp - 0x14]
jmp 0x100059ff
push 0xb
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
add esp, 4
mov esi, eax
lea eax, [ebp - 0x329b]
push eax
push 0x10008250
push 0xb
push esi
call fcn.10001f00
push 0x460
push esi
push 0x190
mov byte [esi + 0xa], 0
call dword [ebp - 0x1c]
add esp, 0x1c
push esi
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
add esp, 4
push 0x14
call edi
push 0x7530
push 3
lea eax, [ebp - 0x2c]
mov word [ebp - 0x28], 0x1ff
push eax
lea eax, [ebp - 0x1ea0]
mov byte [ebp - 0x26], 0x3c
push eax
mov edx, 3
lea ecx, [ebp - 0x28]
call fcn.10001b70
add esp, 0x10
push 0x32
call edi
mov esi, dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
push 9
call esi
mov ecx, eax
xorps xmm0, xmm0
add esp, 4
mov edx, 9
movq qword [ecx], xmm0
mov byte [ecx + 8], 0
mov word [ecx], 0x1ff
mov byte [ecx + 2], 0x37
mov eax, dword [ebp - 0x94]
mov dword [ecx + 3], eax
movzx eax, word [ebp - 0x90]
push 0x7530
mov word [ecx + 7], ax
lea eax, [ebp - 0x2c]
push 3
push eax
lea eax, [ebp - 0x1ea0]
push eax
call fcn.10001b70
add esp, 0x10
push 0x64
call edi
push 9
call esi
mov ecx, eax
add esp, 4
xorps xmm0, xmm0
mov edx, 9
movq qword [ecx], xmm0
mov byte [ecx + 8], 0
mov word [ecx], 0x1ff
mov byte [ecx + 2], 0x38
mov eax, dword [ebp - 0x8e]
mov dword [ecx + 3], eax
movzx eax, word [ebp - 0x8a]
push 0x7530
mov word [ecx + 7], ax
lea eax, [ebp - 0x2c]
push 3
push eax
lea eax, [ebp - 0x1ea0]
push eax
call fcn.10001b70
add esp, 0x10
push 0x64
call edi
push 7
call esi
mov ecx, eax
add esp, 4
xor eax, eax
mov edx, 7
mov dword [ecx], eax
mov word [ecx + 4], ax
mov byte [ecx + 6], al
mov word [ecx], 0x1ff
mov byte [ecx + 2], 0x39
mov eax, dword [ebp - 0x88]
push 0x7530
mov dword [ecx + 3], eax
lea eax, [ebp - 0x2c]
push 3
push eax
lea eax, [ebp - 0x1ea0]
push eax
call fcn.10001b70
push 0x200
call esi
add esp, 0x14
mov esi, eax
lea eax, [ebp - 0xac]
push esi
push pe_nt_image_headers32
push eax
call dword [0x1000a41c]
add esp, 0xc
lea eax, [ebp - 0xcc]
xorps xmm0, xmm0
movups xmmword [ebp - 0xcc], xmm0
push 1
push eax
push esi
push 0x10
lea eax, [ebp - 0x118]
push eax
lea eax, [ebp - 0x94]
push eax
call dword [0x1000a418]
push esi
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov esi, dword [ebp - 0x1c]
add esp, 0x1c
push 0x3fb
push 0x1000825c
push 0x190
call esi
add esp, 0xc
push 0x32
call edi
push 9
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov ecx, eax
xorps xmm0, xmm0
add esp, 4
mov edx, 9
movq qword [ecx], xmm0
mov byte [ecx + 8], 0
mov word [ecx], 0x1ff
mov byte [ecx + 2], 0x3a
mov eax, dword [ebp - 0x118]
mov dword [ecx + 3], eax
movzx eax, word [ebp - 0x114]
push 0x7530
mov word [ecx + 7], ax
lea eax, [ebp - 0x2c]
push 3
push eax
lea eax, [ebp - 0x1ea0]
push eax
call fcn.10001b70
add esp, 0x10
push 0x64
call edi
push 9
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov ecx, eax
xorps xmm0, xmm0
add esp, 4
mov edx, 9
movq qword [ecx], xmm0
mov byte [ecx + 8], 0
mov word [ecx], 0x1ff
mov byte [ecx + 2], 0x3b
mov eax, dword [ebp - 0x112]
mov dword [ecx + 3], eax
movzx eax, word [ebp - 0x10e]
push 0x7530
mov word [ecx + 7], ax
lea eax, [ebp - 0x2c]
push 3
push eax
lea eax, [ebp - 0x1ea0]
push eax
call fcn.10001b70
add esp, 0x10
push 0x64
call edi
push 7
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov ecx, eax
add esp, 4
xor eax, eax
mov edx, 7
mov dword [ecx], eax
mov word [ecx + 4], ax
mov byte [ecx + 6], al
mov word [ecx], 0x1ff
mov byte [ecx + 2], 0x3c
mov eax, dword [ebp - 0x10c]
push 0x7530
mov dword [ecx + 3], eax
lea eax, [ebp - 0x2c]
push 3
push eax
lea eax, [ebp - 0x1ea0]
push eax
call fcn.10001b70
push 0x1400
lea eax, [ebp - 0x32a0]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0x1c
mov word [ebp - 0x28], 0x1ff
lea eax, [ebp - 0x18]
mov byte [ebp - 0x26], 0x76
mov edx, 3
lea ecx, [ebp - 0x28]
push 0x7530
push 3
push eax
lea eax, [ebp - 0x1ea0]
push eax
call fcn.10001b70
add esp, 0x10
test eax, eax
jne 0x100052d4
movzx eax, word [ebp - 0x18]
push eax
lea eax, [ebp - 0x1ea0]
push eax
lea eax, [ebp - 0x32a0]
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
push 0
push 0x10008a4d
push 0x23
call esi
add esp, 0xc
push 0x466
push 0x1000825c
jmp 0x100052de
push 0x466
push str._failed
push 0x190
call esi
movzx ecx, byte [ebp - 0x329b]
add esp, 0xc
movzx eax, byte [ebp - 0x329a]
shl ecx, 8
add ecx, eax
movzx eax, byte [ebp - 0x3299]
shl ecx, 8
add ecx, eax
mov eax, dword [ebp - 0x24]
add eax, 0x100
mov dword [ebp - 0x3c], ecx
push eax
push 1
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_calloc]
push dword [ebp - 0x24]
mov dword [ebp - 0x64], eax
push dword [ebp - 0x38]
push eax
call sub.VCRUNTIME140.dll_memcpy
mov edx, dword [ebp - 0x24]
add esp, 0x14
mov eax, dword [ebp - 0x64]
xor ecx, ecx
test edx, edx
jle 0x10005378
nop dword [eax]
cmp byte [eax + ecx], 1
jne 0x10005369
cmp byte [eax + ecx + 1], 6
jne 0x10005369
cmp byte [eax + ecx + 2], 0x4f
jne 0x10005369
cmp byte [eax + ecx + 3], 0xff
jne 0x10005369
cmp byte [eax + ecx + 4], 0xea
jne 0x10005369
cmp byte [eax + ecx + 0xa], 0xe0
je 0x10005370
inc ecx
cmp ecx, edx
jl 0x10005340
jmp 0x10005378
mov dword [eax + ecx + 6], 0x52015201
xor ecx, ecx
test edx, edx
jle 0x100053c7
nop
cmp byte [eax + ecx], 1
jne 0x100053b0
cmp byte [eax + ecx + 1], 6
jne 0x100053b0
cmp byte [eax + ecx + 2], 0x4f
jne 0x100053b0
cmp byte [eax + ecx + 3], 0xff
jne 0x100053b0
cmp byte [eax + ecx + 4], 0xba
jne 0x100053b0
cmp byte [eax + ecx + 6], 0xbf
jne 0x100053b0
cmp byte [eax + ecx + 0xc], 0xbf
je 0x100053b7
inc ecx
cmp ecx, edx
jl 0x10005380
jmp 0x100053c7
mov dword [eax + ecx + 6], 0x52015201
mov dword [eax + ecx + 0xc], 0x52015201
mov ecx, dword [ebp - 0x3c]
cmp ecx, 0x18000
jne 0x10005444
or edx, 0xffffffff
lea edi, [eax + 0x18101]
mov esi, 0x19f9f
movzx ecx, byte [edi - 1]
lea edi, [edi + 4]
movzx eax, dl
xor ecx, eax
shr edx, 8
movzx eax, byte [edi - 4]
xor edx, dword [ecx*4 + 0x10008a50]
movzx ecx, dl
xor ecx, eax
shr edx, 8
xor edx, dword [ecx*4 + 0x10008a50]
movzx ecx, byte [edi - 3]
movzx eax, dl
xor ecx, eax
shr edx, 8
xor edx, dword [ecx*4 + 0x10008a50]
movzx ecx, byte [edi - 2]
movzx eax, dl
xor ecx, eax
shr edx, 8
xor edx, dword [ecx*4 + 0x10008a50]
sub esi, 1
jne 0x100053e0
mov eax, dword [ebp - 0x64]
not edx
mov dword [eax + 0x7ff7c], edx
jmp 0x100054f8
cmp ecx, 0xc000
je 0x10005478
push 0x469
push 0x10008a4d
push 0xc8
call esi
add esp, 0xc
mov eax, 0x10b
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
or edx, 0xffffffff
lea edi, [eax + 0xc101]
mov esi, 0x172fc
movzx ecx, byte [edi - 1]
lea edi, [edi + 5]
movzx eax, dl
xor ecx, eax
shr edx, 8
movzx eax, byte [edi - 5]
xor edx, dword [ecx*4 + 0x10008a50]
movzx ecx, dl
xor ecx, eax
shr edx, 8
xor edx, dword [ecx*4 + 0x10008a50]
movzx ecx, byte [edi - 4]
movzx eax, dl
xor ecx, eax
shr edx, 8
xor edx, dword [ecx*4 + 0x10008a50]
movzx ecx, byte [edi - 3]
movzx eax, dl
xor ecx, eax
shr edx, 8
xor edx, dword [ecx*4 + 0x10008a50]
movzx ecx, byte [edi - 2]
movzx eax, dl
xor ecx, eax
shr edx, 8
xor edx, dword [ecx*4 + 0x10008a50]
sub esi, 1
jne 0x10005486
mov eax, dword [ebp - 0x64]
not edx
mov dword [eax + 0x7ffec], edx
mov edx, dword [ebp - 0x24]
lea ecx, [ebp - 0xac]
mov esi, dword [ebp - 0x1c]
mov edi, dword [sym.imp.KERNEL32.dll_Sleep]
push ecx
lea ecx, [ebp - 0x118]
push ecx
lea ecx, [ebp - 0x94]
push ecx
push dword [ebp - 0x3c]
mov ecx, eax
call fcn.10002270
push 0x467
push 0x10008a4d
push 0xc8
call esi
add esp, 0x1c
xor dl, dl
xor eax, eax
mov dword [ebp - 0x14], eax
nop
mov esi, dword [ebp + eax*8 - 0x898]
mov eax, dword [ebp + eax*8 - 0x894]
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x80], eax
cmp esi, dword [ebp - 0x3c]
jb 0x10005809
xor ecx, ecx
movzx eax, dl
cmp esi, dword [ebp - 0x3c]
push 0x7530
cmovne ecx, eax
mov dword [ebp - 0x6c], 0x2601ff
mov al, cl
mov byte [ebp - 0x67], 0
inc al
mov dword [ebp - 0x84], 0
cmp esi, dword [ebp - 0x3c]
movzx edx, al
movzx eax, cl
lea ecx, [ebp - 0x6c]
cmovbe edx, eax
lea eax, [ebp - 0x84]
push 3
push eax
lea eax, [ebp - 0x1ea0]
mov dword [ebp - 0x108], edx
mov byte [ebp - 0x68], dl
mov byte [ebp - 0x66], dl
mov edx, 7
push eax
call fcn.10001b70
add esp, 0x10
xor esi, esi
push 0x64
call edi
push 0x1400
lea eax, [ebp - 0x32a0]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov word [ebp - 0x98], 0x1ff
lea eax, [ebp - 0x18]
mov byte [ebp - 0x96], 0x50
mov edx, 3
lea ecx, [ebp - 0x98]
push 0x7530
push 3
push eax
lea eax, [ebp - 0x1ea0]
push eax
call fcn.10001b70
add esp, 0x10
test eax, eax
jne 0x10005637
movzx eax, word [ebp - 0x18]
push eax
lea eax, [ebp - 0x1ea0]
push eax
lea eax, [ebp - 0x32a0]
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
cmp byte [ebp - 0x329b], 0
je 0x1000563d
inc esi
cmp esi, 0x10
jl 0x100055c0
cmp esi, 0x10
mov esi, dword [ebp - 0x20]
je 0x10005a2c
xor eax, eax
sub dword [ebp - 0x80], esi
mov dword [ebp - 0x84], eax
je 0x100057cc
nop word [eax + eax]
push 0x14
call edi
push 0x7530
push 3
lea eax, [ebp - 0x2c]
mov word [ebp - 0x9c], 0x1ff
push eax
lea eax, [ebp - 0x1ea0]
mov byte [ebp - 0x9a], 0x41
push eax
mov edx, 3
lea ecx, [ebp - 0x9c]
call fcn.10001b70
add esp, 0x10
push 0x14
call edi
mov ecx, dword [ebp - 0x20]
mov edx, 6
mov eax, ecx
mov byte [ebp - 0x78], cl
shr eax, 8
mov byte [ebp - 0x79], al
mov eax, ecx
shr eax, 0x10
lea ecx, [ebp - 0x7c]
push 0x7530
mov byte [ebp - 0x7a], al
lea eax, [ebp - 0x104]
push 3
push eax
lea eax, [ebp - 0x1ea0]
mov word [ebp - 0x7c], 0x1ff
push eax
mov byte [ebp - 0x77], 0x7f
call fcn.10001b70
add esp, 0x10
push 0x14
call edi
push 0x200
lea eax, [ebp - 0xa9e]
mov word [ebp - 0xaa0], 0x1ff
push 0
push eax
call sub.VCRUNTIME140.dll_memset
mov esi, dword [ebp - 0x20]
lea eax, [ebp - 0x28]
add esi, dword [ebp - 0x64]
lea edi, [ebp - 0xa9e]
add esp, 0xc
mov ecx, pe_nt_image_headers32
rep movsd dword es:[edi], dword [esi]
mov edx, 0x202
lea ecx, [ebp - 0xaa0]
push 0x7530
push 3
push eax
lea eax, [ebp - 0x1ea0]
push eax
call fcn.10001b70
add dword [ebp - 0x84], 0x200
add esp, 0x10
add dword [ebp - 0x20], 0x200
xor esi, esi
mov edi, dword [sym.imp.KERNEL32.dll_Sleep]
push 0x14
call edi
push 0x7530
push 3
lea eax, [ebp - 0x34]
mov word [ebp - 0x24], 0x1ff
push eax
lea eax, [ebp - 0x1ea0]
mov byte [ebp - 0x22], 0x50
push eax
mov edx, 3
lea ecx, [ebp - 0x24]
call fcn.10001b70
add esp, 0x10
test eax, eax
jne 0x100057ae
movzx eax, word [ebp - 0x34]
push eax
lea eax, [ebp - 0x1ea0]
push eax
lea eax, [ebp - 0x32a0]
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
cmp byte [ebp - 0x329b], 0
je 0x100057b4
inc esi
cmp esi, 0x10
jl 0x10005756
cmp esi, 0x10
je 0x10005a2c
mov eax, dword [ebp - 0x84]
cmp eax, dword [ebp - 0x80]
jb 0x10005660
movd xmm0, dword [ebp - 0x14]
cvtdq2pd xmm0, xmm0
mov esi, dword [ebp - 0x1c]
push 0
push 0x10008a4d
divsd xmm0, qword [0x10008e70]
mulsd xmm0, qword [0x10008e88]
addsd xmm0, qword [0x10008e78]
cvttsd2si eax, xmm0
push eax
call esi
mov edx, dword [ebp - 0x108]
add esp, 0xc
jmp 0x1000580c
mov esi, dword [ebp - 0x1c]
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
cmp eax, 0x16
jl 0x10005540
push 0
push 0x10008a4d
push 0x5a
call esi
add esp, 0xc
push 0x467
push 0x1000825c
push 0x190
call esi
add esp, 0xc
mov word [ebp - 0x24], 0x1ff
lea eax, [ebp - 0x28]
mov byte [ebp - 0x22], 0x47
mov edx, 3
lea ecx, [ebp - 0x24]
push 0x7530
push 3
push eax
lea eax, [ebp - 0x1ea0]
push eax
call fcn.10001b70
add esp, 0x10
xor esi, esi
nop dword [eax]
push 0x14
call edi
push 0x1400
lea eax, [ebp - 0x32a0]
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
mov word [ebp - 0x24], 0x1ff
lea eax, [ebp - 0x18]
mov byte [ebp - 0x22], 0x50
mov edx, 3
lea ecx, [ebp - 0x24]
push 0x7530
push 3
push eax
lea eax, [ebp - 0x1ea0]
push eax
call fcn.10001b70
add esp, 0x10
test eax, eax
jne 0x100058de
movzx eax, word [ebp - 0x18]
push eax
lea eax, [ebp - 0x1ea0]
push eax
lea eax, [ebp - 0x32a0]
push eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0xc
cmp byte [ebp - 0x329b], 0
je 0x100058e7
inc esi
cmp esi, 0x80
jl 0x10005870
cmp esi, 0x80
je 0x10005a41
sub esp, 0xd0
mov dword [ebx + 0xc4], 0x720
mov ecx, 0x34
lea esi, [ebx + 0xc]
mov edi, esp
rep movsd dword es:[edi], dword [esi]
call fcn.10001980
mov esi, eax
add esp, 0xd0
test esi, esi
jne 0x10005a02
push 0x7530
push 3
lea eax, [ebp - 0x28]
mov word [ebp - 0x24], 0x1ff
push eax
lea eax, [ebp - 0x1ea0]
mov byte [ebp - 0x22], pe_nt_image_headers32
push eax
lea edx, [esi + 3]
lea ecx, [ebp - 0x24]
call fcn.10001b70
add esp, 0x10
mov esi, eax
cmp byte [ebx + 8], 0
jne 0x10005a02
sub esp, 0xd0
mov dword [ebx + 0x34], 0x788
mov dword [ebx + 0xc4], 0x780
lea esi, [ebx + 0xc]
mov ecx, 0x34
mov edi, esp
rep movsd dword es:[edi], dword [esi]
call fcn.10001980
mov esi, eax
add esp, 0xd0
test esi, esi
jne 0x10005a02
mov eax, dword [sym.imp.KERNEL32.dll_Sleep]
push 0x2710
call eax
push 0x7530
push esi
lea eax, [ebp - 0x28]
mov word [ebp - 0x18], 0xb114
push eax
lea eax, [ebp - 0x1ea0]
push eax
lea edx, [esi + 2]
lea ecx, [ebp - 0x18]
call fcn.10001b70
mov esi, eax
add esp, 0x10
test esi, esi
jne 0x10005a72
movzx ecx, byte [ebp - 0x18]
mov dl, byte [ebp - 0x1ea0]
add ecx, 0x40
movzx eax, dl
cmp eax, ecx
jne 0x10005a59
mov edi, dword [ebp - 0x1c]
push 0
push 0x10008a4d
push 0x64
call edi
add esp, 0xc
push 0x41d
push 0x1000825c
push 0x190
call edi
add esp, 0xc
mov eax, dword [ebp - 0x38]
test eax, eax
je 0x10005a12
push eax
call fcn.100067eb
add esp, 4
mov eax, dword [ebp - 0x64]
test eax, eax
je 0x10005abe
push eax
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
add esp, 4
jmp 0x10005abe
push 0x467
push str._failed
push 0x190
call dword [ebp - 0x1c]
add esp, 0xc
mov eax, 0x10c
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
cmp dl, 0x7f
jne 0x10005a65
mov esi, 0x491
jmp 0x10005a72
mov esi, 3
test esi, esi
je 0x100059dd
push 0x41d
push str._failed
push 0x190
call dword [ebp - 0x1c]
jmp 0x100059ff
mov esi, 0x102
jmp 0x10005abe
push 0
push 0x10008a4d
push 0
call esi
add esp, 0xc
push 0x403
push str._failed.
push 0x190
call esi
add esp, 0xc
mov esi, 0x100
jmp 0x10005abe
mov esi, 0x101
mov ecx, dword [ebp - 0xc]
mov eax, esi
pop edi
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret