Function at 0x418c20
Capabilities:
Manually build aes constants

Disassembly:
jmp 0x41a499
push ebp
push esp
pop ebp
sub esp, 0x18
push ebx
push esi
push edi
mov ecx, dword [ebp + 0xc]
movzx edx, byte [ecx]
mov eax, dword [ebp + 8]
movzx esi, byte [ecx + 1]
shl edx, 8
or edx, esi
movzx esi, byte [ecx + 2]
shl edx, 8
or edx, esi
movzx esi, byte [ecx + 3]
shl edx, 8
or edx, esi
xor edx, dword [eax + 0x100]
movzx esi, byte [ecx + 5]
mov dword [ebp + 0xc], edx
movzx edx, byte [ecx + 4]
movzx ebx, byte [ecx + 0xc]
shl edx, 8
or edx, esi
movzx esi, byte [ecx + 6]
shl edx, 8
or edx, esi
movzx esi, byte [ecx + 7]
shl edx, 8
or edx, esi
movzx esi, byte [ecx + 8]
shl esi, 8
movzx edi, byte [ecx + 9]
or esi, edi
movzx edi, byte [ecx + 0xa]
shl esi, 8
or esi, edi
movzx edi, byte [ecx + 0xb]
shl esi, 8
or esi, edi
xor esi, dword [eax + 0x108]
shl ebx, 8
mov dword [ebp - 0x10], esi
movzx esi, byte [ecx + 0xd]
or ebx, esi
movzx esi, byte [ecx + 0xe]
movzx ecx, byte [ecx + 0xf]
xor edx, dword [eax + 0x104]
shl ebx, 8
or ebx, esi
shl ebx, 8
or ebx, ecx
xor ebx, dword [eax + 0x10c]
mov ecx, ebx
shr ecx, 0x10
movzx ecx, cl
mov esi, dword [ecx*4 + 0x47d800]
mov ecx, dword [ebp + 0xc]
mov dword [ebp - 8], ebx
mov ebx, dword [ebp - 0x10]
shr ebx, 8
shr ecx, 0x18
movzx edi, bl
xor esi, dword [edi*4 + 0x47c7c0]
mov ebx, dword [ebp - 8]
xor esi, dword [ecx*4 + 0x47dc00]
movzx ecx, dl
xor esi, dword [ecx*4 + 0x47c3c0]
mov ecx, ebx
xor esi, dword [eax + 0x110]
shr ecx, 8
movzx ecx, cl
mov dword [ebp - 0xc], esi
mov esi, dword [ecx*4 + 0x47c7c0]
mov ecx, dword [ebp + 0xc]
shr ecx, 0x10
mov edi, edx
shr edi, 0x18
xor esi, dword [edi*4 + 0x47dc00]
movzx ecx, cl
mov ecx, dword [ecx*4 + 0x47d800]
mov dword [ebp - 8], esi
xor dword [ebp - 8], ecx
movzx ecx, byte [ebp - 0x10]
mov esi, dword [ebp - 8]
xor esi, dword [ecx*4 + 0x47c3c0]
mov ecx, dword [ebp - 0x10]
xor esi, dword [eax + 0x114]
shr ecx, 0x18
mov dword [ebp - 0x14], edx
shr edx, 0x10
mov dword [ebp - 8], esi
mov esi, dword [ecx*4 + 0x47dc00]
mov ecx, dword [ebp + 0xc]
movzx edi, dl
xor esi, dword [edi*4 + 0x47d800]
shr ecx, 8
mov edx, dword [ebp - 0x14]
movzx ecx, cl
xor esi, dword [ecx*4 + 0x47c7c0]
shr edx, 8
movzx ecx, bl
xor esi, dword [ecx*4 + 0x47c3c0]
mov ecx, dword [ebp - 0x10]
xor esi, dword [eax + 0x118]
shr ecx, 0x10
movzx edx, dl
movzx ecx, cl
mov edi, dword [ebp - 0xc]
shr ebx, 0x18
mov ebx, dword [ebx*4 + 0x47dc00]
xor ebx, dword [ecx*4 + 0x47d800]
movzx ecx, byte [ebp + 0xc]
xor ebx, dword [edx*4 + 0x47c7c0]
mov dword [ebp - 4], esi
xor ebx, dword [ecx*4 + 0x47c3c0]
xor ebx, dword [eax + 0x11c]
push ebx
pop edx
shr edx, 0x10
movzx ecx, dl
mov edx, esi
mov esi, dword [ecx*4 + 0x47d800]
shr edx, 8
movzx edx, dl
xor esi, dword [edx*4 + 0x47c7c0]
cmp dword [eax + 0x154], ecx
push edi
pop ecx
shr ecx, 0x18
cmp ecx, 0x134d30cf
xor esi, dword [ecx*4 + 0x47dc00]
cmp eax, edi
cmp dword [eax + 0x140], esp
mov ecx, dword [ebp - 8]
test esp, eax
movzx edx, cl
test ecx, eax
xor esi, dword [edx*4 + 0x47c3c0]
cmp dword [eax + 0x108], esi
mov edx, ebx
nop
xor esi, dword [eax + 0x120]
add dword [ebp + 0xc], 1
cmp ebx, edi
mov dword [ebp + 0xc], ebx
sete byte [ebp + 0xc]
sub dword [ebp + 0xc], 0xffffffff
mov dword [ebp + 0xc], esp
cmp ebx, 0x9ed29220
mov dword [ebp + 0xc], edi
sete byte [ebp + 0xc]
sub dword [ebp + 0xc], 0xffffffff
mov dword [ebp + 0xc], esi
cmp dword [eax + 0x108], 0x40
mov dword [ebp + 0xc], ebp
setne byte [ebp + 0xc]
mov dword [ebp + 0xc], edx
xor dword [ebp + 0xc], esp
add dword [ebp + 0xc], 1
and dword [ebp + 0xc], 0xfffffe73
mov dword [ebp + 0xc], esi
nop
add dword [ebp + 0xc], 0x27f5
inc dword [ebp + 0xc]
cmp esi, esp
mov dword [ebp + 0xc], 0xc52e153b
sub dword [ebp + 0xc], 0xc52e1518
and dword [ebp + 0xc], 0xe0f832e5
add dword [ebp + 0xc], eax
cmp dword [ebp - 0x10], ecx
mov byte [ebp + 0xc], 5
sub dword [ebp + 0xc], 0xffffffff
add byte [ebp + 0xc], bl
cmp ecx, 0x6dbc0c4c
mov dword [ebp + 0xc], ebx
test cl, bl
add dword [ebp + 0xc], esp
cmp dword [ebp - 0xc], 0xffffffc5
mov dword [ebp + 0xc], eax
shl dword [ebp + 0xc], 0x19
add dword [ebp + 0xc], esi
and dword [ebp + 0xc], 0x183c
mov dword [ebp + 0xc], 0xffff92a5
add dword [ebp + 0xc], 0x6d5d
and dword [ebp + 0xc], 0xffffffff
add dword [ebp + 0xc], 1
nop
xor byte [ebp + 0xc], al
or dword [ebp + 0xc], ebp
mov byte [ebp + 0xc], 0xf9
and word [ebp + 0xc], sp
or dword [ebp + 0xc], 0xffffffff
mov dword [ebp + 0xc], 0x9f674ac0
sub dword [ebp + 0xc], 0x9f66cb01
shl dword [ebp + 0xc], 1
cmp edx, 0x71ea9a80
mov dword [ebp + 0xc], eax
add byte [ebp + 0xc], dl
sub dword [ebp + 0xc], 0xffffffff
and dword [ebp + 0xc], edi
mov dword [ebp + 0xc], esp
and dword [ebp + 0xc], 6
add dword [ebp + 0xc], esp
cmp dword [eax + 0x110], ecx
mov dword [ebp + 0xc], eax
and word [ebp + 0xc], 4
add dword [ebp + 0xc], edx
cmp ebx, ecx
mov dword [ebp + 0xc], ebp
and dword [ebp + 0xc], 0xfffffffb
sub dword [ebp + 0xc], 0xe
inc dword [ebp + 0xc]
cmp dword [eax + 0x120], 0xfffffffa
mov dword [ebp + 0xc], eax
add dword [ebp + 0xc], eax
add dword [ebp + 0xc], 1
cmp ecx, edi
mov dword [ebp + 0xc], ebp
and word [ebp + 0xc], ax
or dword [ebp + 0xc], ebp
mov dword [ebp + 0xc], esp
shl dword [ebp + 0xc], 0x6e
add dword [ebp + 0xc], ecx
test edx, ebp
and word [ebp + 0xc], 0xfffb
or dword [ebp + 0xc], esi
mov dword [ebp + 0xc], ebp
nop
and dword [ebp + 0xc], 0xfffffffc
mov dword [ebp + 0xc], 0x8d5c1c76
sub dword [ebp + 0xc], 0x8d5c1c61
or dword [ebp + 0xc], ebp
cmp edx, edx
mov dword [ebp + 0xc], esi
or dword [ebp + 0xc], ecx
and dword [ebp + 0xc], 0xffffba50
mov dword [ebp + 0xc], eax
or dword [ebp + 0xc], esi
cmp al, 0x92
mov dword [ebp + 0xc], 0x9ba4
add dword [ebp + 0xc], 0xffffd98a
shr dword [ebp + 0xc], 5
and dword [ebp + 0xc], 0xffffdc54
mov dword [ebp + 0xc], ebx
or dword [ebp + 0xc], ebx
cmp eax, 0x15
mov dword [ebp + 0xc], 0xffffe3cf
sub dword [ebp + 0xc], 7
and dword [ebp + 0xc], 0xffff910e
or dword [ebp + 0xc], edx
test eax, edx
mov dword [ebp + 0xc], 0xffffffa0
add dword [ebp + 0xc], 0xfffffffc
add dword [ebp + 0xc], 0xffffffff
test edx, ebx
shr edx, 8
mov dword [ebp + 0xc], eax
and dword [ebp + 0xc], 0xffffae8b
mov dword [ebp + 0xc], eax
test ebp, ebp
sete byte [ebp + 0xc]
nop
sub dword [ebp + 0xc], ebp
test esi, eax
cmp edi, ebp
mov dword [ebp + 0xc], ecx
sete byte [ebp + 0xc]
test esp, ebp
add dword [ebp + 0xc], 1
mov dword [ebp + 0xc], edx
cmp al, 3
mov dword [ebp + 0xc], esp
sete byte [ebp + 0xc]
sub dword [ebp + 0xc], 0xffffffff
mov dword [ebp + 0xc], 0x6092
add dword [ebp + 0xc], 0x15bc
cmp esp, edx
mov dword [ebp + 0xc], eax
setne byte [ebp + 0xc]
mov dword [ebp + 0xc], esi
add dword [ebp + 0xc], edi
and dword [ebp + 0xc], 0x7dfc
mov dword [ebp + 0xc], 0x828d3a3b
add dword [ebp + 0xc], 0xffffff8a
add dword [ebp + 0xc], 0x7149706d
dec dword [ebp + 0xc]
or byte [ebp + 0xc], 0xf8
mov dword [ebp + 0xc], esi
add dword [ebp + 0xc], edx
and dword [ebp + 0xc], ebp
cmp ebp, eax
mov dword [ebp + 0xc], esi
xor byte [ebp + 0xc], al
add dword [ebp + 0xc], 1
cmp dword [eax + 0x118], ebx
mov dword [ebp + 0xc], esi
cmp ecx, 0x171ff5c
add dword [ebp + 0xc], esp
cmp dword [eax + 0x180], esp
mov dword [ebp + 0xc], edi
or dword [ebp + 0xc], eax
xor byte [ebp + 0xc], bl
sub dword [ebp + 0xc], 1
add dword [ebp + 0xc], 1
cmp ebp, edx
mov dword [ebp + 0xc], 0xffffd9d1
sub dword [ebp + 0xc], 0x60
xor dword [ebp + 0xc], eax
add dword [ebp + 0xc], 0xffffffff
jmp 0x41a947
add dword [ebp + 0xc], 0x66a4f905
add dword [ebp + 0xc], 0x124
test ecx, edi
and dword [ebp + 0xc], 0
sete byte [ebp + 0xc]
sub dword [ebp + 0xc], 0xffffffff
mov dword [ebp + 0xc], esi
and dword [ebp + 0xc], 0x68
or dword [ebp + 0xc], ecx
cmp ebx, 0x9c390d18
mov word [ebp + 0xc], reloc.wtsapi32.dll_WTSSetSessionInformationW
adc dword [ebp + 0xc], 0
nop
cmp dword [eax + 0x10c], 0xff565886
mov dword [ebp + 0xc], eax
sete byte [ebp + 0xc]
movzx edx, dl
test esi, edi
mov word [ebp + 0xc], bp
sub dword [ebp + 0xc], 0xffffffff
add dword [ebp + 0xc], eax
mov dword [ebp + 0xc], ecx
add dword [ebp + 0xc], 1
test ecx, esi
xor byte [ebp + 0xc], al
mov dword [ebp + 0xc], eax
add dword [ebp + 0xc], 1
nop
mov dword [ebp + 0xc], ecx
cmp ecx, esi
add dword [ebp + 0xc], edi
and dword [ebp + 0xc], 0xffffc671
mov dword [ebp + 0xc], 0
sub dword [ebp + 0xc], 4
or dword [ebp + 0xc], esp
xor dword [ebp + 0xc], ecx
or dword [ebp + 0xc], eax
mov dword [ebp + 0xc], ecx
add dword [ebp + 0xc], 1
and dword [ebp + 0xc], eax
or dword [ebp + 0xc], esp
mov dword [ebp + 0xc], edx
add dword [ebp + 0xc], 1
sub dword [ebp + 0xc], 1
cmp dword [eax + 0x14c], 0
mov dword [ebp + 0xc], ebx
and dword [ebp + 0xc], 0xffffc04e
or dword [ebp + 0xc], edx
shl dword [ebp + 0xc], 7
and dword [ebp + 0xc], 3
add dword [ebp + 0xc], 1
cmp dword [eax + 0x14c], eax
cmp ecx, esp
sete byte [ebp + 0xc]
mov dword [ebp + 0xc], ebx
setne byte [ebp + 0xc]
and dword [ebp + 0xc], 0xffffef17
mov dword [ebp + 0xc], esi
mov esi, ecx
mov ecx, dword [edx*4 + 0x47c7c0]
shr esi, 0x18
xor ecx, dword [esi*4 + 0x47dc00]
test edx, ecx
mov edx, edi
lea edi, [edi*8 + 0x52]
shr edi, 0xf9
test edi, eax
mov edi, dword [eax + 0x150]
and edi, 0xe2b7cef
cmp byte [eax + 0x148], 0xff
push esp
pop edi
add edi, 0xffffffff
sub edi, 2
shl edi, 0xe3
xor di, dx
and edi, 0xffff91a9
test dword [eax + 0x13c], eax
mov edi, dword [ebp - 8]
xor edi, ebx
shr edi, 0
sub edi, 0x44ceaa71
add edi, 0x44cf2268
mov edi, dword [eax + 0x118]
lea edi, [ebp + edi*8 - 0x3f615e86]
shl edi, 0x74
add edi, 1
mov edi, eax
imul edi, esp
shl edi, 0x56
add edi, ecx
and edi, 0xfffffffb
add edi, 0xffff99a7
add edi, 0xfffffffa
mov edi, dword [eax + 0x184]
xor edi, ebx
shl edi, 0xfa
dec edi
sub edi, 0x64ffa404
mov edi, dword [eax + 0x10c]
shl edi, 7
shr edi, 0xab
mov edi, ebp
lea edi, [esi + edi*8 + 0x2d394ffa]
add edi, dword [eax + 0x164]
mov edi, dword [eax + 0x13c]
add edi, 0xa2150350
add edi, 0x5deafd01
and edi, 0xffffffe0
shr edi, 0x54
lea edi, [esi + esi - 4]
shl edi, 6
mov edi, dword [eax + 0x174]
add edi, 0xfffffff9
add edi, 2
mov edi, ecx
cmp edi, ecx
or edi, ebx
neg edi
mov edi, dword [eax + 0x114]
dec edi
add edi, 0xffffffff
lea edi, [edi*8 + 3]
shr edi, 0xfa
mov edi, dword [ebp + 0x10]
sub edi, edi
mov edi, dword [eax + 0x100]
shr edx, 0x10
neg edi
shl edi, 0xff
add edi, 0xffffd5ec
dec edi
mov edi, dword [eax + 0x11c]
lea edi, [eax*8]
mov edi, esp
sub edi, 0x48b1
sub edi, 0xffffb730
inc edi
sub edi, 0x7b578772
sub edi, 0x84a8784e
cmp edx, dword [eax + 0x160]
lea edi, [edi + ebp*2 - 0x2b540ceb]
push eax
pop edi
movzx edi, word [eax + reloc.wtsapi32.dll_WTSSetSessionInformationW]
imul edi, dword [eax + 0x100]
xor edi, esi
xor edi, edi
sbb edi, edx
not edi
and edi, ecx
add edi, 0x91
add edi, 0xffffffbc
mov di, word [eax + reloc.wtsapi32.dll_WTSSetSessionInformationW]
lea edi, [edx - 0x2d2c]
adc edi, 0xffffe65a
add edi, 0xffffffff
mov edi, dword [eax + 0x148]
lea edi, [esi - 6]
adc edi, 0xed6b468e
not edi
add edi, 0x24
add edi, 0xffffffb5
lea edi, [edi + ebx*2 - 0x61d]
push edi
pop edi
sub edi, 0x4b01159f
sub edi, 0xb4feea61
xor edi, ecx
mov edi, dword [eax + 0x140]
cmp edi, 0xfffffffc
push ebp
pop edi
sub edi, ebp
shl edi, 0
xor edi, ebp
sub edi, 0x3accdd72
sub edi, 0xc53322ea
adc edi, 0x52
mov edi, dword [ebp - 8]
shl edi, 0x29
lea edi, [esp + esi*8]
imul edi, esi, 8
add edi, ebp
xor edi, esp
sub edi, 0xffffdca9
sub edi, 6
movzx edx, dl
mov edi, dword [eax + 0x140]
dec edi
add edi, 0xffffd687
mov edi, ecx
lea edi, [esp + ecx*2 + 0x10]
shl edi, 0xa3
xor edi, eax
lea edi, [ebx + ebp*4 - 0xf5e]
test edx, edi
shr edi, cl
mov di, ax
shr edi, 1
xor edi, ecx
imul edi, dword [ebp - 0xc]
shr edi, cl
xor edi, edi
mov edi, ebx
adc edi, 0x5d88
sub edi, 0xa4109566
add edi, 0xea62956
push ebp
pop edi
cmp dword [eax + 0x104], edi
mov edi, edx
shr edi, 0x68
xor edi, ebp
mov edi, esp
shr edi, 0x33
and edi, ebp
mov edi, dword [eax + 0x13c]
xor edi, ecx
lea edi, [esp + esi*4 - 0x21]
push esi
pop edi
or edx, edx
lea edi, [eax + eax]
mov edi, dword [eax + 0x140]
add edi, 0x3fb16782
dec edi
shl edi, 0x70
mov edi, dword [esi*4 + 0x47dc00]
add edi, esi
lea edi, [eax + esi*2 - 0x4ed17cb7]
mov edi, dword [eax + 0x13c]
add edi, 0x750baa26
sub edi, 0x750b91d3
neg edi
movzx edi, byte [eax + 0x110]
sub edi, 0x2d6478d3
sub edi, 0xd29b872d
add edi, 1
mov edi, dword [ebp - 8]
cmp edi, 0x20a8
mov edi, eax
xor edi, eax
lea edi, [ebp + esi*8 + 0x7a30ce09]
mov edi, 0x41e2
add edi, 0xffffbe18
shr edi, cl
and edi, 0x52ad
xor ecx, dword [edx*4 + 0x47d800]
add edi, 1
push edx
pop edi
add edi, 0x9bf671d1
adc edi, ebx
dec edi
nop
sbb edi, edi
and edi, esi
inc edi
xor edi, ecx
and edi, 0x1154
push esi
pop edi
xor edi, eax
mov edi, dword [eax + 0x11c]
imul edi, dword [eax + 0x114]
mov edi, dword [eax + 0x128]
lea edi, [esp + ecx*4 + 0x7579]
movsx edi, word [eax + reloc.wtsapi32.dll_WTSSetSessionInformationW]
inc edi
add edi, ebx
cmp dword [ebp - 8], edx
mov edi, dword [eax + 0x11c]
lea edi, [7]
sar edi, 0
shr edi, 0xb5
nop
nop
shl edi, 0x4f
mov di, cx
add edi, 1
push eax
pop edi
lea edi, [esi + ecx*4]
add edi, esp
sub edi, 0xfffff638
xor edi, ebp
cmp byte [eax + 0x154], 0x2e
mov edi, dword [eax + 0x124]
lea edi, [eax + eax*2 - 0x6da3]
mov edi, ebp
shl edi, 0x2d
or edi, esp
sub edi, dword [eax + 0x164]
test eax, ebx
cmp dword [eax + 0x154], esi
mov edi, eax
sbb edi, esp
neg edi
dec edi
sub edi, 0x6ce2095a
cmp dword [ebp - 0x18], 0xfffffff9
lea edi, [eax + eax]
mov edx, dword [ebp - 4]
sbb edi, ebx
sub edi, 0x824da832
sbb edi, edi
push ecx
pop edi
adc edi, ebx
nop
shl edi, 0xaf
cmp eax, esi
mov edi, dword [ebp - 8]
add edi, 0xef15a9ce
shl edi, 0xfa
add edi, 0xffff93fc
mov edi, dword [eax + 0x164]
neg edi
sbb edi, ecx
not edi
and edi, esp
add edi, 6
push esp
pop edi
sar edi, 0x61
and edi, 0xffffffdc
movzx edi, byte [eax + 0x17c]
inc edi
cmp word [eax + reloc.wtsapi32.dll_WTSSetSessionInformationW], di
mov edi, dword [eax + 0x134]
xor edi, ebx
inc edi
shr edi, cl
dec edi
cmp byte [eax + 0x110], 0x68
mov edi, dword [eax + 0x17c]
lea edi, [edi + ebx*8]
adc edi, eax
add edi, 0x7259
mov edi, dword [eax + 0x100]
lea edi, [esi + esi + 0x1075]
sbb edi, eax
not edi
and edi, 2
xor edi, ebp
mov edi, dword [eax + 0x180]
lea edi, [ecx + 0x6501b2e7]
imul edi, ecx
sar edi, 0
mov edi, dword [eax + 0x17c]
imul edi, ebx, 0x58cefced
shl edi, 0
or edi, 0x59
test edx, ebx
nop
add edi, edi
lea edi, [ebp + ebx*2 - 0x5f267dd5]
mov edi, dword [eax + 0x134]
xor edi, esi
shl edi, cl
add edi, 0xffffffa1
movzx esi, dl
mov edi, dword [eax + 0x130]
cmp dword [eax + 0x148], esi
lea edi, [ecx]
push esi
pop edi
and edi, 0x700a
lea edi, [edx + ecx*2 - 1]
shl edi, 0x71
add edi, 0xffffffff
cmp edx, dword [eax + 0x148]
mov edi, dword [eax + 0x114]
shr edi, 0xe0
xor edi, esi
inc edi
mov edi, dword [eax + 0x178]
shl edi, 0
xor edi, ebp
cmp dword [eax + 0x134], edi
mov edi, dword [eax + 0x140]
xchg edi, edi
shl edi, 0xfd
mov edi, dword [ebp + 0xc]
add edi, edi
mov edi, dword [eax + 0x148]
adc edi, ebp
movzx edi, al
add edi, ebx
mov edi, 0xffffd0fa
shl edi, 0x7b
movzx edi, word [eax + reloc.wtsapi32.dll_WTSSetSessionInformationW]
add edi, eax
inc edi
mov edi, dword [eax + 0x120]
add edi, edi
dec edi
mov edi, dword [eax + 0x164]
sar edi, 0x56
and di, 0
mov edi, dword [ebp + 0xc]
lea edi, [edx - 0x3f]
sar edi, 2
shr edi, cl
mov edi, dword [eax + 0x150]
and edi, 0x2263
shl edi, 0xfa
shr edi, 0x2e
add edi, 0x119f4f62
movzx edi, byte [eax + 0x158]
test ebx, edi
mov edi, dword [eax + 0x100]
shl edi, 0xa1
sub edi, dword [eax + 0x144]
neg edi
sbb edi, esi
and edi, 0xffffff90
or edi, 0x6d
inc edi
mov edi, dword [eax + 0x124]
lea edi, [esp + ebx*2 - 0x10b0]
shr edi, 0x73
mov edi, dword [eax + 0x144]
movzx edi, word [eax + reloc.wtsapi32.dll_WTSSetSessionInformationW]
add edi, edx
inc edi
cmp dword [esi*4 + 0x47c3c0], 0x7c
mov edi, dword [eax + 0x110]
adc edi, esi
add edi, edi
mov edi, dword [ebp - 4]
sub edi, 0x5d
inc edi
xor ecx, dword [esi*4 + 0x47c3c0]
push esp
pop edi
inc edi
sub edi, edi
mov edi, edi
adc edi, 0x46db
dec edi
mov edi, dword [eax + 0x124]
sub edi, dword [eax + 0x14c]
sar edi, 0xfc
not edi
inc edi
and edi, 0x5978
mov edi, dword [eax + 0x174]
inc edi
xor edi, esi
inc edi
mov edi, dword [ebp - 8]
shr edi, cl
lea edi, [esp + ebp*4]
sub edi, 0xfffffffa
mov edi, dword [eax + 0x17c]
test dword [ebp + 8], 0x4e6f
inc edi
mov edi, ebx
add edi, edx
lea edi, [edi + edx*2 - 0x3a]
xor edi, esi
cmp edx, dword [eax + 0x10c]
mov edi, dword [ebp + 0xc]
sbb edi, ecx
lea edi, [esp + edx*8 - 7]
sbb edi, ebp
mov edi, ebp
shr edi, 1
neg edi
and edi, 0xffffe5f4
add edi, 0xdf161a9
mov edi, esi
shr edi, 0
xor edi, esp
inc edi
test dword [eax + 0x150], 0xdd9949e
shr edx, 0x18
sub edi, 0xfffff803
mov edi, esi
sub edi, eax
shl edi, cl
xor edi, eax
add edi, 7
lea edi, [ebp + edx*2 - 0x1f]
push ecx
pop edi
movzx edi, word [ebp - 0x18]
xor edi, ebx
add edi, ebx
push ebx
pop edi
movzx edi, al
xor edi, ebp
lea edi, [eax + edi*2 - 3]
mov edi, dword [eax + 0x154]
add edi, 0x1e1
lea edi, [ecx + esi*4 + 0x1120]
shl edi, 5
add edi, edi
lea edi, [eax + eax]
mov edi, eax
shr edi, 5
lea edi, [edx*8 - 6]
shl edi, 6
add edi, 0xffffff92
lea edi, [ebp + edi*8]
mov edi, dword [ebp - 8]
xor edi, ebx
movzx edi, word [eax + reloc.wtsapi32.dll_WTSSetSessionInformationW]
mov edi, dword [eax + 0x164]
xor edi, ebx
inc edi
test edi, edx
mov edi, dword [eax + 0x148]
shr edi, 0x5b
xor ecx, dword [eax + 0x124]
inc edi
mov edi, dword [eax + 0x128]
add edi, 0x48ad2f23
adc edi, ecx
test eax, esi
add edi, 0x4a
mov edi, esp
lea edi, [edi + ebp*8 + 0x7c62eb42]
push ebp
pop edi
adc edi, 0x5614
dec edi
neg edi
sbb edi, esp
not edi
and edi, 0x5c
add edi, ebx
cmp esp, esp
push esp
pop edi
lea edi, [ebx + eax*8]
sub edi, 0x1b
sbb edi, esi
xor edi, ebx
inc edi
add edi, esi
cmp dword [ebp - 0x18], 0x4f
mov edi, dword [eax + 0x130]
lea edi, [edx + 0x1e4aee0c]
nop
push 0x66
nop
pop edi
sub edi, dword [eax + 0x134]
or edi, esi
lea edi, [esi + eax*4 - 3]
mov edi, ebx
shl edi, 0xb8
xor edi, ecx
add edi, 0xf22de258
adc edi, 0x75
test edi, edi
sbb edi, edi
mov esi, dword [edx*4 + 0x47dc00]
mov edx, dword [ebp - 0xc]
mov dword [ebp - 0x18], ecx
movzx edi, word [ebp + 0x10]
imul ecx, edi
sbb edi, ecx
nop
push 0x41
nop
pop edi
imul ecx, dword [ebp - 0x14]
shl edi, cl
mov ecx, dword [ebp - 8]
or edi, 0
xor ecx, edx
push ebx
pop ecx
imul edi, ebp, 0xffffbf1c
shl edi, 0xa0
mov ecx, dword [eax + 0x100]
add ecx, edx
sub edi, esp
xor edi, edx
mov edi, dword [ebp - 0x18]
add di, 0xfffb
imul ecx, dword [eax + 0x168]
lea ecx, [edi + eax*2 - 0x3292]
xor ecx, esp
inc edi
push ecx
pop edi
imul ecx, esp
mov edi, ebp
lea ecx, [edx + edx*8 + 0x37fcb438]
mov edi, dword [eax + 0x110]
xor ecx, ecx
push esi
pop edi
shl edi, 2
xor edi, ebx
add edi, 2
mov ecx, dword [eax + 0x17c]
lea ecx, [eax + esi*2 - 7]
add ecx, 6
cmp dword [eax + 0x118], esp
lea edi, [eax + ebp*4 - 0x7d]
mov ecx, dword [ebp - 8]
sub edi, 0
imul edi, edi
sar edi, 0x88
mov edi, dword [ebp - 0x10]
neg edi
sub edi, eax
shr edi, 0xfc
pushfd
xor edi, edi
popfd
nop
or edi, 0xffffffd0
sub edi, 0xfffffff9
cmp byte [eax + 0x118], 0xfe
mov edi, dword [eax + 0x184]
movzx edi, byte [eax + 0x124]
imul edi, esp
sar edi, 0x48
shl edi, 5
xor edi, edx
add edi, 0
lea edi, [esi + ebp*8 + 0x4eb2]
mov edi, dword [ebp - 0x14]
shr ecx, 0x10
shr edx, 8
mov edi, dword [eax + 0x100]
neg edi
movzx edi, cl
mov ecx, dword [eax + 0x174]
shl ecx, cl
xor esi, dword [edi*4 + 0x47d800]
shr ecx, 0xab
push ebx
pop ecx
movzx edx, dl
mov ecx, ecx
shr ecx, 5
xor esi, dword [edx*4 + 0x47c7c0]
mov ecx, ebx
shl ecx, 0xd0
movzx edx, bl
shr ecx, 0x57
mov ecx, dword [eax + 0x10c]
xor esi, dword [edx*4 + 0x47c3c0]
xor esi, dword [eax + 0x128]
mov ecx, dword [eax + 0x16c]
shl ecx, 0xfe
shr ebx, 0x18
test edx, ebx
setge cl
mov dword [ebp - 0x10], esi
mov ebx, dword [ebx*4 + 0x47dc00]
imul ecx, edi
mov edx, dword [ebp - 4]
shr ecx, 0xff
shr edx, 0x10
mov ecx, dword [eax + 0x140]
neg ecx
movzx edx, dl
push ebp
pop ecx
lea ecx, [eax + ebp*2]
xor ebx, dword [edx*4 + 0x47d800]
seta cl
mov edx, dword [ebp - 8]
shl ecx, 0xac
mov ecx, dword [eax + 0x168]
shr edx, 8
push ecx
pop ecx
lea ecx, [edi + ecx*4 + 0x241b96a5]
movzx edx, dl
mov ecx, ebp
add ecx, eax
xor ebx, dword [edx*4 + 0x47c7c0]
movsx ecx, bl
movzx edx, byte [ebp - 0xc]
inc ecx
mov ecx, dword [eax + 0x14c]
xor ebx, dword [edx*4 + 0x47c3c0]
cmp esi, edx
lea ecx, [esi + esi*8 + 5]
push esi
pop ecx
sub esi, 0x7e59
inc esi
xor ebx, dword [eax + 0x12c]
mov esi, esp
xor esi, eax
shr ecx, 8
sub esi, 0x1e34
inc esi
mov edx, ebx
xor esi, ebx
shr edx, 0x10
mov esi, dword [eax + 0x16c]
lea esi, [ebp - 0x8f0]
movzx edx, dl
test esp, ebp
lea esi, [ebp*4 + 0x1036]
mov esi, dword [edx*4 + 0x47d800]
mov edx, dword [ebp + 0xc]
shr edx, 0x18
movzx edi, cl
inc ecx
mov ecx, edi
xor esi, dword [edi*4 + 0x47c7c0]
cmp dword [eax + 0x104], ecx
sete cl
mov ecx, dword [ebp - 0x18]
xor esi, dword [edx*4 + 0x47dc00]
movzx edx, cl
xor esi, dword [edx*4 + 0x47c3c0]
cmp edx, 0xffffffef
push ebx
pop edx
xor esi, dword [eax + 0x130]
mov dword [ebp - 0xc], eax
and dword [ebp - 0xc], 7
shr edx, 8
mov dword [ebp - 0xc], esi
xor byte [ebp - 0xc], cl
movzx edx, dl
test ecx, esp
setne byte [ebp - 0xc]
mov dword [ebp - 0xc], esi
not esi
add esi, 0x40
mov esi, dword [edx*4 + 0x47c7c0]
mov edx, dword [ebp + 0xc]
shr edx, 0x10
test bl, 0x2c
mov edi, ecx
movzx edx, dl
cmp dword [eax + 0x148], esp
mov edx, dword [edx*4 + 0x47d800]
shr edi, 0x18
nop
xor esi, dword [edi*4 + 0x47dc00]
cmp dword [eax + 0x110], 0x761b
sete byte [ebp - 0x14]
mov dword [ebp - 0x14], ecx
mov dword [ebp - 8], esi
sbb esi, dword [eax + 0x144]
or esi, edx
xor dword [ebp - 8], edx
shr edx, 0x11
mov edx, dword [eax + 0x178]
movzx edx, byte [ebp - 0x10]
xor esi, esp
inc esi
mov esi, dword [ebp - 8]
xor esi, dword [edx*4 + 0x47c3c0]
cmp edx, esp
mov edx, dword [ebp - 0x10]
xor esi, dword [eax + 0x134]
mov dword [ebp - 8], ebx
and dword [ebp - 8], 0x6922a203
shr edx, 0x18
shr ecx, 0x10
and dword [ebp - 8], 0
dec dword [ebp - 8]
mov dword [ebp - 8], esi
add esi, 0xffffeef8
lea esi, [esi + esi*2 - 0x2213c853]
mov esi, dword [edx*4 + 0x47dc00]
nop
mov edx, dword [ebp + 0xc]
movzx edi, cl
mov ecx, ebp
shr cl, 2
xor esi, dword [edi*4 + 0x47d800]
cmp dword [ebp + 0x10], esp
lea ecx, [esi*4]
mov ecx, dword [ebp - 0x14]
shr edx, 8
movzx edx, dl
xor esi, dword [edx*4 + 0x47c7c0]
movzx edx, bl
test dword [eax + 0x180], 0xfffffffb
xor esi, dword [edx*4 + 0x47c3c0]
cmp dword [eax + 0x14c], edi
mov edx, dword [ebp - 0x10]
xor esi, dword [eax + 0x138]
shr ebx, 0x18
test ecx, esp
mov ebx, dword [ebx*4 + 0x47dc00]
nop
shr edx, 0x10
shr ecx, 8
movzx edx, dl
xor ebx, dword [edx*4 + 0x47d800]
movzx edx, byte [ebp + 0xc]
movzx ecx, cl
xor ebx, dword [ecx*4 + 0x47c7c0]
cmp ebx, eax
sete byte [ebp - 4]
mov dword [ebp - 4], esi
xor ebx, dword [edx*4 + 0x47c3c0]
xor ebx, dword [eax + 0x13c]
test esi, eax
mov ecx, ebx
shr ecx, 0x10
movzx edx, cl
xor ecx, eax
sub ecx, 0x1a
mov ecx, esi
imul esi, dword [eax + 0x150]
and esi, 0x47
mov esi, dword [edx*4 + 0x47d800]
shr ecx, 8
movzx ecx, cl
xor esi, dword [ecx*4 + 0x47c7c0]
test esi, esp
mov edi, dword [ebp - 0xc]
mov ecx, dword [ebp - 8]
push edi
pop edx
shr edx, 0x18
xor esi, dword [edx*4 + 0x47dc00]
test eax, ebx
nop
movzx edx, cl
xor esi, dword [edx*4 + 0x47c3c0]
cmp dword [eax + 0x13c], 0x29
mov edx, ebx
xor esi, dword [eax + 0x140]
mov dword [ebp + 0xc], 0xffffffc9
and dword [ebp + 0xc], 2
shr edx, 8
mov dword [ebp + 0xc], 4
or dword [ebp + 0xc], edx
movzx edx, dl
and dword [ebp + 0xc], 0x3a7929e4
cmp edi, eax
mov dword [ebp + 0xc], esi
adc esi, ebx
mov esi, ecx
mov ecx, dword [edx*4 + 0x47c7c0]
shr esi, 0x18
xor ecx, dword [esi*4 + 0x47dc00]
cmp dword [eax + 0x140], 5
mov edx, edi
inc edi
add edi, 0xffffffff
mov edi, dword [eax + 0x17c]
adc edi, 1
inc edi
mov edi, dword [eax + 0x150]
lea edi, [0xfffffffd]
add edi, 0
mov edi, dword [eax + 0x140]
adc edi, eax
add edi, 0xfffffff9
mov edi, dword [eax + 0x134]
sbb edi, esi
xor edi, ebx
cmp edx, edx
push eax
pop edi
sub edi, edi
cmp eax, 0x2c
sbb edi, esp
add edi, 0xfffffffc
dec edi
inc edi
add edi, 0xeb738e44
cmp dword [eax + 0x14c], 0xfffffffc
mov edi, dword [eax + 0x108]
lea edi, [esp + edx*4]
sub edi, 0xf2f010b
sbb edi, eax
neg edi
dec edi
sub edi, 0xfffffff9
cmp ebx, edx
neg edi
lea edi, [edi + ecx*8 + 2]
add edi, edx
sub edi, 0x58
inc edi
mov edi, dword [eax + 0x130]
cmp ecx, esi
mov edi, dword [eax + 0x108]
lea edi, [edx + edi*2]
sub edi, 0xcf4fb7d6
inc edi
add edi, 0xffffff84
cmp dword [eax + 0x10c], ebx
mov edi, dword [eax + 0x178]
sbb edi, eax
and edi, esp
add edi, esi
push eax
pop edi
lea edi, [esi*4]
mov edi, dword [ebp - 0x10]
imul edi, eax, 0xffff9faf
add edi, 3
mov edi, dword [eax + 0x148]
lea edi, [1]
sar edi, 6
shr edi, 0x50
lea edi, [0x1ff3]
sub edi, 0xfffffff7
sbb edi, ebx
xor edi, eax
test edi, esp
lea edi, [edi + 0xd989fd4]
mov edi, dword [eax + 0x160]
shl edi, 0xc6
shr edi, 0x7f
add edi, 0x53c4
mov edi, dword [eax + 0x114]
movzx edi, word [ebp + 0x10]
mov edi, edi
xor edi, ebx
cmp ecx, 0xfffffffa
push esp
pop edi
sub edi, 0xffffff9e
push eax
pop edi
add edi, ebp
adc edi, 0x5628
mov edi, dword [eax + 0x100]
add edi, ebx
lea edi, [0x3fcd]
dec edi
sar edi, 0x71
shr edx, 0x10
sub edi, 0x181d6017
sbb edi, ebx
push esi
pop edi
cmp ebp, ebp
sub edi, eax
xor edi, eax
shr edi, 0xc
mov edi, dword [eax + 0x140]
movzx edx, dl
shl edi, 5
add edi, 0x2d9c420e
or edi, 0xffffff99
lea edi, [3]
inc edi
mov edi, dword [ebp + 0xc]
lea edi, [ecx - 0x7dbc0a02]
sub edi, 6
inc edi
cmp dword [eax + 0x12c], edx
mov edi, esi
inc edi
add edi, 0
movsx edi, bl
mov edi, dword [eax + 0x160]
imul edi, ebx
shl edi, 0x74
mov edi, dword [ebp + 8]
dec edi
cmp dword [eax + 0x138], ebp
push edx
pop edx
push 0x16
pop edi
lea edi, [ecx - 0x6cb9]
sub edi, 0x1e5d
mov edi, dword [ebp - 0xc]
sbb edi, ebx
mov edi, dword [eax + 0x174]
inc edi
cmp dword [eax + 0x120], edi
nop
nop
shl edi, 0x59
xor edi, eax
shr edi, 0x3c
movzx edi, word [eax + reloc.wtsapi32.dll_WTSSetSessionInformationW]
add edi, 0xffffffcc
xor edi, esp
cmp dword [ebp - 0x14], 0xfffffff6
add edi, 0xfffffffa
mov edi, 0xffffff91
lea edi, [ebx + esi*8 + 0x652b]
mov edi, dword [eax + 0x134]
adc edi, ebp
mov edi, dword [eax + 0x10c]
add edi, dword [eax + 0x140]
test byte [eax + 0x114], 0x4c
lea edi, [0xfffffffb]
sub edi, 1
add edi, 0x25
cmp dword [ebp - 8], eax
lea edi, [edx + ebx*8 - 0x75e8]
mov edi, dword [ebp - 0xc]
cmp ebp, 0xfffffffb
lea edi, [ecx + ecx]
mov edi, eax
sub edi, 1
lea edi, [ecx + ecx*4 + 1]
sub edi, 0xfffffffd
mov edi, dword [eax + 0x15c]
adc edi, ebx
add edi, 7
lea edi, [edi + ecx*2]
push esp
pop edi
lea edi, [esi + edi*8]
shl edi, 0xa8
neg edi
adc edi, eax
add edi, eax
push ebx
pop edi
lea edi, [ebx + ebx]
add edi, esi
sub edi, ebp
test ebx, ebp
cmp dword [eax + 0x158], ecx
mov edi, dword [eax + 0x104]
lea edi, [ebx + esi*8 + 0x34]
shl edi, 0x6c
add edi, 0x10
mov edi, 0
call fcn.00418c31
sbb edi, esp
push edx
pop edi
neg edi
sbb edi, ecx
lea edi, [esp]
sub edi, 0xa
inc edi
test ebx, esp
lea edi, [ebp + edi*2]
mov edi, dword [ebp - 0x14]
sub edi, 0xfffffffd
add edi, 0xffffff8e
lea edi, [edi*8 - 0x7276]
add edi, 0xe566ce11
push ebp
pop edi
xor edi, edi
sub edi, 0xe07329ba
sbb edi, ebp
mov edi, dword [eax + 0x130]
shl edi, 0x70
add edi, esi
lea edi, [esp + ecx*2 - 0x1899]
mov edi, dword [eax + 0x168]
xor edi, ebx
inc edi
cmp dword [edx*4 + 0x47dc00], ecx
lea edi, [esp + edi*4]
add edi, 0
mov di, word [eax + reloc.wtsapi32.dll_WTSSetSessionInformationW]
add edi, 0xfffffffa
imul edi, ecx
sar edi, 0x20
mov edi, dword [ebp - 0x10]
sub edi, eax
imul edi, esi, 0xffffffdc
sar edi, 0xc3
shl edi, 0xa3
lea edi, [edi + 0x5bb045b4]
xor edi, esp
mov edi, dword [eax + 0x118]
inc edi
shl edi, 1
or edi, 0x4a6f
nop
sub edi, edi
neg edi
inc edi
add edi, dword [eax + 0x168]
test ecx, ebp
lea edi, [esi + ebp*8 - 0x73ebaec5]
mov edi, dword [eax + 0x174]
inc edi
lea edi, [ecx + esi*8 + 0x6ffa22ba]
adc edi, ebx
push edx
pop edi
add edi, ecx
shl edi, 0xa4
mov edi, ebp
shr edi, 4
xchg edi, edi
not edi
and edi, 0x7d1c
movsx edi, cl
mov edi, dword [eax + 0x148]
movsx edi, bl
dec edi
inc edi
cmp dword [eax + 0x130], 0xfffffffa
push ecx
pop edi
nop
lea edi, [esp - 0x4861]
mov edi, dword [eax + 0x158]
add edi, 0xfdae07ab
mov edi, dword [ebp + 0xc]
xor edi, esp
inc edi
sub edi, ebx
neg edi
sbb edi, esp
imul edi, dword [ebp - 0x18]
sub edi, 0xffffc091
mov edi, dword [eax + 0x148]
sar edi, 4
not edi
and edi, 0xffffffed
lea edi, [esp + edx*8]
mov edi, ebp
lea edi, [esp + ebx*4 - 0x11]
imul edi, edi
push edx
pop edi
shl edi, 0xe8
xor edi, eax
add edi, 0x3cec86df
xor edi, ebx
sub edi, 0xffffc88c
neg edi
add edi, 0
sub edi, edi
sub edi, dword [eax + 0x138]
sbb edi, ecx
add edi, edi
xor di, cx
sub edi, 0xffffff91
add edi, 0x78
adc edi, 0xffffffe3
sub edi, 0xfffffeb8
mov edi, edi
sub edi, dword [eax + 0x110]
shl edi, 0x33
push esp
pop edi
or edi, 0x347befea
cmp esi, 0xfffffffa
mov edi, dword [eax + 0x160]
sub edi, 0x2b
sar edi, 4
and edi, 6
add edi, eax
lea edi, [0x358a]
push esi
pop edi
xor edi, ebp
shr edi, 1
push edx
pop edi
movzx edi, word [eax + reloc.wtsapi32.dll_WTSSetSessionInformationW]
add edi, eax
mov edi, dword [eax + 0x134]
inc edi
shl edi, 3
xor edi, esi
add edi, 0
lea edi, [eax + ebp*4 - 0x30af]
push eax
pop edi
adc edi, edi
inc edi
push esp
pop edi
add edi, 0xfb010cf8
lea edi, [ecx + ecx*4 - 0x5ad9efab]
mov edi, dword [eax + 0x170]
adc edi, esp
add edi, 0x564f0926
lea edi, [ecx + ebx*2]
mov edi, dword [eax + 0x15c]
imul edi, ecx
shl edi, 0xfe
mov edi, dword [ebp - 0xc]
shr edi, cl
add edi, ebp
and edi, edi
add edi, 0xce2b07c2
mov edi, dword [eax + 0x100]
and edi, 0
add edi, 0x5a2a2709
lea edi, [ebx + eax*8 - 0xaec]
mov edi, ebp
add edi, 0x1f
lea edi, [0x1c538bfc]
inc edi
push esi
pop edi
sub edi, 0x19f5
or edi, 0xffffffff
xor edi, esp
mov edi, ebx
adc edi, 0xd24e9a0d
not edi
movsx edi, cl
xor ecx, dword [eax + 0x164]
mov edi, dword [edx*4 + 0x47dc00]
nop
shl edi, 0x3d
sub edi, 0xb1357bae
movzx edi, word [ebp - 4]
add edi, 6
cmp dword [ebp - 8], esi
lea edi, [eax + 3]
sar edi, 0xfd
shr edi, cl
xor edi, edx
inc edi
lea edi, [ecx + eax*2 + 9]
push edx
pop edi
inc edi
add edi, 0x72
lea edi, [eax + ebp*4]
mov edi, dword [eax + 0x138]
shr edi, 0x90
add edi, 0xffffdf25
lea edi, [esp + eax*8 - 0x36ab]
mov edi, dword [eax + 0x15c]
adc edi, 0xffffaaa7
nop
cmp dword [eax + 0x124], 0xffffffe9
mov edi, dword [ebp - 0x18]
lea edi, [ebp]
adc edi, esi
add edi, ebx
push ecx
pop edi
lea edi, [ecx + eax*8 - 0x2700]
adc edi, 0x4f
add edi, edi
mov edi, dword [ebp - 0x18]
inc edi
shl edi, 0x2a
add edi, 0x1bbe70e2
xor edi, ebp
add edi, 0xf08d8f6e
mov edi, dword [eax + 0x160]
sbb edi, dword [ebp - 0x14]
imul edi, esi
push edx
pop edi
lea edi, [edi + 0x29b4]
push eax
pop edi
shl edi, 0xd6
add edi, 0xffffff94
mov di, si
xor edi, 0x28
inc edi
cmp dword [ebp - 0x14], 0x2b2
push ebp
pop edi
lea edi, [0xfffffffb]
jmp 0x41bbe4
shl edi, 0xda
or edi, ebp
xor edi, ebx
push esp
pop edi
or edi, esi
mov edi, dword [eax + 0x17c]
inc edi
test esi, ebp
push eax
pop eax
xor edi, ebx
movzx edi, word [eax + reloc.wtsapi32.dll_WTSSetSessionInformationW]
inc edi
xor edi, edx
or edi, dword [eax + 0x130]
lea edi, [esp + 0x43538230]
mov edi, esi
shl edi, 0xbc
xor edi, eax
push ebx
pop edi
and edi, 0xffff9bfd
shr edi, 1
xor edi, ebx
shl edi, 4
add edi, ebp
mov edi, dword [eax + 0x104]
lea edi, [esi + ebp*8 + 0x5ea2]
adc edi, edi
not edi
add edi, 0x1450
lea edi, [edx + eax*4]
mov di, bp
lea edi, [eax + ebx*8 - 0x7026f129]
shr edi, 0x1a
and edi, 0xffffffe3
lea edi, [eax + ebp*4 + 0x43d93ddb]
shl edi, 0x9d
or edi, eax
mov edi, dword [eax + 0x114]
inc edi
xor edi, ecx
mov edi, dword [ebp - 0xc]
inc edi
shr edi, 0x33
inc edi
add edi, 0x141c4519
push ebx
pop edi
cmp cl, 2
mov edi, ecx
add edi, esp
lea edi, [esi + ebx*8]
sbb edi, ecx
neg edi
mov esi, dword [edx*4 + 0x47dc00]
mov edx, dword [ebp - 0xc]
mov dword [ebp - 0x14], ecx
xor ecx, dword [eax + 0x128]
mov ecx, dword [eax + 0x180]
or edi, ebx
sub edi, edi
test edi, edi
mov ecx, dword [ebp - 8]
lea edi, [ebp + edi*8 - 0xb]
movzx edi, byte [eax + 0x140]
shl edi, cl
shr edi, 3
test dl, dl
add edi, dword [eax + 0x114]
mov edi, dword [eax + 0x14c]
xor edi, edi
lea edi, [edi + ebp*4 - 0x1c19183b]
mov edi, dword [ebp + 8]
sbb edi, esi
imul edi, dword [eax + 0x15c]
mov edi, dword [eax + 0x128]
lea edi, [eax + eax*8 - 0x19b5]
sub edi, 5
mov edi, dword [eax + 0x170]
xor edi, ebx
add edi, 0x2c
lea edi, [eax + ebx*2]
adc edi, ecx
mov edi, ebp
xor edi, ebx
mov edi, dword [eax + 0x118]
add edi, 0x9f910524
push ebp
pop edi
and edi, esp
shr ecx, 0x10
shr edx, 8
mov edi, dword [ebp + 0xc]
lea edi, [esi + 0x4b]
and edi, 0x2a757946
mov edi, edx
adc edi, esi
add edi, 0xfffffff4
lea edi, [edx*4 - 0x23]
mov edi, 0xfffffff9
sub edi, eax
neg edi
sbb edi, ecx
and edi, 0xffffff8e
mov edi, dword [eax + 0x14c]
add edi, 0x7a184dce
lea edi, [edx + 4]
shl edi, 6
mov edi, dword [eax + 0x140]
sub edi, dword [eax + 0x118]
mov edi, eax
lea edi, [eax*4 + 0x243a5aa6]
add edi, ebx
mov edi, dword [eax + 0x118]
movzx edi, cl
shl ecx, 0x25
not ecx
add ecx, 0x25db295f
inc ecx
sub ecx, esi
and ecx, 0x745da42c
test eax, ebx
lea ecx, [ebp + ebp*4 - 0x1460]
setne cl
mov ecx, dword [eax + 0x158]
lea ecx, [esi + esi*8 + 0x5f9a]
mov ecx, ebx
shl ecx, 0x82
test esi, ecx
add cl, dl
mov ecx, eax
lea ecx, [ebp + esi*4 - 0x59]
xor esi, dword [edi*4 + 0x47d800]
inc ecx
sub ecx, 0xfffffffe
test ecx, eax
lea ecx, [ebx + ecx*2 + 2]
setne cl
push ebp
pop ecx
neg ecx
cmp dword [eax + 0x148], ecx
movzx ecx, word [eax + reloc.wtsapi32.dll_WTSSetSessionInformationW]
add ecx, 0xfffffffa
adc ecx, eax
inc ecx
mov ecx, dword [ebp - 0x18]
inc ecx
xor ecx, eax
mov ecx, dword [eax + 0x120]
and ecx, 0xffffffd4
shr ecx, 0x9c
xor ecx, edx
cmp dword [eax + 0x10c], 2
mov ecx, dword [eax + 0x108]
lea ecx, [ecx + eax*4 + 3]
add ecx, 0x6c
movzx edx, dl
test esi, edi
setg cl
mov ecx, dword [eax + 0x11c]
sub ecx, 0x1f40e41
add ecx, 0xffffa848
lea ecx, [edi*8 - 0x20f3]
sar ecx, 0xe4
shr ecx, 0x15
add ecx, ebx
lea ecx, [ebx + esi*8 + 0x539d]
mov ecx, eax
sub ecx, 0xc6b9d3d6
neg ecx
add ecx, 0
mov ecx, ecx
xor ecx, esp
movzx ecx, word [eax + reloc.wtsapi32.dll_WTSSetSessionInformationW]
add ecx, 0x28d67749
lea ecx, [esi + edx*8]
mov ecx, dword [ebp - 0x18]
inc ecx
mov ecx, 0xffffffac
shr ecx, 0xb7
and ecx, 0xffffff8d
shr ecx, 5
xor esi, dword [edx*4 + 0x47c7c0]
cmp ebp, edx
and ecx, ecx
sete cl
shr ecx, 0xf9
and ecx, 0x73f3960
mov ecx, dword [eax + 0x178]
sub ecx, 2
mov ecx, dword [eax + 0x14c]
add ecx, 0x12bb
imul ecx, dword [eax + 0x148]
not ecx
test esp, ebx
mov ecx, 0x498
shl ecx, 3
lea ecx, [esi + esi*2 - 0x21]
xor ecx, edx
inc ecx
mov ecx, esi
neg ecx
movzx edx, bl
mov ecx, dword [eax + 0x164]
shl ecx, 0x20
xor ecx, dword [eax + 0x178]
dec ecx
mov ecx, dword [eax + 0x184]
cmp dword [ebp - 0xc], edx
lea ecx, [ecx + edi*2]
adc ecx, 0xffff8ae0
mov ecx, esi
xor ecx, esi
pushal
popal
inc ecx
and ecx, ebp
cmp edx, ebp
mov ecx, dword [eax + 0x16c]
adc ecx, 0xffffffe2
mov ecx, dword [eax + 0x17c]
add ecx, 7
xor ecx, esi
cmp esp, esi
mov ecx, esi
lea ecx, [edx - 0x5bf1a5ab]
mov ecx, dword [eax + 0x100]
adc ecx, edi
mov ecx, dword [eax + 0x118]
cmp dword [ebp - 8], 0x6e
xor esi, dword [edx*4 + 0x47c3c0]
xor esi, dword [eax + 0x168]
inc ecx
cmp dword [eax + 0x180], 0xffffff8a
mov byte [ebp - 0x10], al
shr ecx, 0x9d
mov ecx, ebx
lea ecx, [ebx*4 + 0xaa4]
add ecx, 0x31f88a56
xor ecx, esp
sub ecx, 0x528d
inc dword [ebp - 0x10]
cmp dword [eax + 0x12c], ecx
mov ecx, dword [ebp + 8]
lea ecx, [esp - 0x22884e51]
movzx ecx, word [eax + reloc.wtsapi32.dll_WTSSetSessionInformationW]
shl ecx, 0x98
sub cl, dl
sbb ecx, esp
mov dword [ebp - 0x10], esi
imul ecx, dword [eax + 0x17c]
neg ecx
shl ecx, 0x85
shr ecx, cl
xor ecx, esi
add ecx, 5
mov ecx, dword [eax + 0x118]
setne cl
movzx ecx, word [eax + reloc.wtsapi32.dll_WTSSetSessionInformationW]
inc ecx
mov ecx, dword [eax + 0x160]
xor ecx, ebx
mov ecx, 0xb3b2bad0
and ecx, 0xffffffc8
add ecx, 0xffffe026
lea ecx, [ebp + ebp - 0x40d7b731]
sub ecx, 0x6b1f
mov edx, dword [ebp - 4]
setne cl
dec ecx
and ecx, 0xffffff82
shl ecx, cl
mov ecx, dword [eax + 0x100]
shr ecx, 6
test al, dl
push edx
pop ecx
lea ecx, [eax + edx*2 - 0x379c]
sbb ecx, esp
add ecx, 0xffff8b1c
adc ecx, esi
imul ecx, edi, 0x18d13b73
setl cl
shr edx, 0x10
mov ecx, dword [eax + 0x154]
lea ecx, [ebp + ebx*4 - 0x5398]
and ecx, 0x6109
pushal
popal
shr ecx, 0x50
add ecx, dword [ebp + 0xc]
lea ecx, [edi + 0x25]
shr ecx, 0
push esp
pop ecx
adc ecx, esi
mov ecx, dword [eax + 0x120]
add ecx, 0x71
push ebx
pop ecx
shl ecx, 0x79
lea ecx, [ebp + ebp - 0x23f9]
shr ecx, 0x61
and ecx, 0xffffffc2
xor cl, byte [eax + 0x12c]
mov ecx, dword [eax + 0x130]
inc ecx
shr ecx, 0x7a
lea ecx, [ebp + ebx*4 + 0x5239]
sub ecx, 0xffff890f
push edx
pop ecx
shl ecx, 0xfb
add ecx, 0x79
movzx edx, dl
push edx
pop ecx
sbb ecx, ecx
imul ecx, eax, 6
sar ecx, 0xff
shr ebx, 0x18
neg ecx
sbb ecx, dword [eax + 0x144]
mov ecx, esi
add ecx, ebp
and ecx, 0xfffffffc
sub ecx, 0xf83ae39e
sub ecx, ecx
inc ecx
mov ecx, dword [edx*4 + 0x47d800]
sub ecx, 0x236a0210
mov ecx, dword [edx*4 + 0x47d800]
add ecx, 0x4e
and ecx, 0x73d0
mov ecx, dword [eax + 0x164]
movzx ecx, byte [edi*4 + 0x47d800]
dec ecx
add ecx, 0x7943
lea ecx, [ecx + ecx*8 - 0x47]
seta cl
mov ebx, dword [ebx*4 + 0x47dc00]
and ecx, 0x89f97d04
mov ecx, dword [ebp - 0x10]
add ecx, esi
lea ecx, [eax*4 - 0x13]
test edx, esp
mov ecx, dword [eax + 0x14c]
xor ecx, ebx
mov ecx, dword [ebp - 0x14]
lea ecx, [0xfffffff0]
add ecx, dword [eax + 0x160]
mov ecx, dword [eax + 0x164]
movzx ecx, byte [eax + 0x130]
mov ecx, dword [eax + 0x170]
add ecx, dword [eax + 0x154]
and ecx, esi
add ecx, 1
cmp edx, dword [eax + 0x144]
mov ecx, dword [eax + 0x154]
lea ecx, [eax + ebp*8 + 0x6c]
mov ecx, ebp
call fcn.0041ba9b
shr ecx, 0xfe
and ecx, edi
add ecx, 0x1a42
sub ecx, 0x1a47
lea ecx, [edx + ebx*2 - 5]
mov ecx, dword [eax + 0x130]
and ecx, 0x32
shl ecx, 0x6c
shr ecx, 3
mov ecx, edi
shr ecx, 0xb4
xor ebx, dword [edx*4 + 0x47c7c0]
cmp dword [ebp - 0x10], esp
sete cl
push ebx
pop ecx
add ecx, 1
push eax
pop ecx
xor ecx, ebx
mov ecx, 0x69bdce19
add ecx, 0xb2fb07ea
lea ecx, [edx - 7]
shr ecx, cl
imul ecx, dword [ebp + 0xc]
mov ecx, dword [eax + 0x10c]
add ecx, 0x4e
add ecx, 0xfffffffa
neg ecx
mov ecx, dword [eax + 0x114]
sbb ecx, esp
add ecx, 0xffffffff
cmp dword [eax + 0x148], esp
mov ecx, ecx
lea ecx, [eax - 0x5a72]
movzx ecx, word [eax + reloc.wtsapi32.dll_WTSSetSessionInformationW]
shl ecx, 0xfe
mov ecx, dword [eax + 0x17c]
and ecx, ebp
shr ecx, 0x88
mov ecx, ebx
xor ecx, esi
movzx edx, byte [ebp - 0xc]
mov ecx, dword [ebp - 0xc]
sub ecx, 0xffffffff
sub ecx, 8
sub ecx, 0xfffffffd
mov ecx, dword [ebp - 8]
movzx ecx, byte [eax + 0x150]
xor ecx, dword [eax + 0x164]
shr ecx, cl
xor ecx, esi
add ecx, 1
sete cl
not ecx
neg ecx
sbb ecx, eax
and ecx, 0xd61fad
test ecx, esp
and ecx, 0x24
mov ecx, dword [eax + 0x150]
xor ecx, ecx
adc ecx, 0
shr ecx, 0x34
push edx
pop ecx
sar ecx, 0xc2
and ecx, 0xc753f05a
shr ecx, 0
movzx ecx, byte [eax + 0x120]
xor ebx, dword [edx*4 + 0x47c3c0]
mov ecx, dword [eax + 0x120]
xor ecx, edi
add ecx, 1
mov ecx, dword [eax + 0x150]
or ecx, 0xfffffff4
xor ecx, esi
add ecx, dword [eax + 0x140]
lea ecx, [ebx*8 + 6]
mov ecx, eax
cmp edx, ecx
setne cl
mov ecx, dword [ebp - 0x10]
movzx ecx, byte [eax + 0x16c]
push ebp
pop ecx
imul ecx, edi, 0x5230f55d
mov ecx, dword [eax + 0x124]
xor cx, cx
lea ecx, [ebp + edi*2 - 0x1a939924]
sub ecx, 0x36ef
inc ecx
sub ecx, 0xffffffff
test edx, ebx
mov ecx, dword [eax + 0x114]
lea ecx, [ebx + edx*4 - 0x7965a98a]
sub ecx, 0xffffca62
sub ecx, 0x359b
cmp bl, byte [edx*4 + 0x47c3c0]
mov ecx, esi
shr esi, cl
mov esi, dword [eax + 0x118]
and esi, 0xffffff96
xor esi, eax
and esi, 0xffffffe8
or esi, esi
mov esi, dword [eax + 0x17c]
and esi, 0x17
shr esi, 0xcf
mov esi, dword [ebp - 4]
add esi, 1
and esi, 0xfffffffc
mov esi, dword [eax + 0x178]
or esi, esp
mov esi, dword [eax + 0x130]
xor ebx, dword [eax + 0x16c]
mov esi, esi
add esi, 0xffffff86
dec esi
push ebx
pop esi
cmp esi, esi
mov esi, 0x7aa8dcac
sub esi, 0x7aa8dcfc
shr esi, 0xb1
lea esi, [esi*8 - 1]
not esi
jmp 0x41c612
add esi, ebp
mov esi, dword [eax + 0x13c]
xor esi, ecx
mov esi, dword [eax + 0x148]
sub esi, 0xffffffff
cmp dword [eax + 0x104], esp
mov esi, dword [eax + 0x160]
lea esi, [ecx - 5]
movzx esi, si
xor esi, esp
add esi, esp
lea esi, [0xffffffcd]
sub esi, 0xffffaa10
sub esi, 4
mov esi, dword [eax + 0x144]
movzx esi, word [eax + reloc.wtsapi32.dll_WTSSetSessionInformationW]
mov esi, 0x1443
sub esi, 0xffffffcc
imul esi, esi
shl esi, 0
mov esi, dword [eax + 0x180]
shr ecx, 8
imul esi, edx, 0x4203
mov esi, 0xffffffc6
add esi, 0xb941a6ef
add esi, 9
xor esi, ebx
add esi, 1
add esi, eax
sub esi, 0x355c
sub esi, 0x72
shl esi, 6
add esi, 0x705b56fa
add esi, 0xffffca3e
test ebp, edx
lea esi, [eax + 0x550e52cd]
push ebx
pop edx
sar esi, 0
and esi, edi
add esi, eax
lea esi, [0xd2319b4d]
sub esi, 0x7c
add esi, 0xffffabc5
mov esi, dword [eax + 0x150]
adc esi, 0
and si, 4
shr esi, 0x1e
push esi
pop esi
xor esi, ecx
add esi, 0xfe8f71a9
add esi, 0x1708ea8
lea esi, [eax + edx*8 + 0x7b]
mov esi, dword [eax + 0x134]
add esi, 0xdb18fce0
sub esi, 0xdb18fcde
mov esi, dword [eax + 0x17c]
or esi, ebx
xor esi, edi
sub esi, 0xffffffff
mov esi, dword [eax + 0x10c]
and esi, 0xffffffef
mov esi, dword [ebp + 8]
add esi, 0xffffd31f
sub esi, 0x5c
mov esi, dword [eax + 0x148]
sub esi, 0xffffffff
shr edx, 0x10
lea esi, [esi + esi + 0x4b]
push edx
pop esi
add esi, 0xb2b356d3
add esi, 0x4d4ca904
push edx
pop esi
cmp esp, edi
sbb esi, ebx
add esi, 1
xor esi, ecx
nop
nop
lea esi, [esi + eax*2]
sub esi, 0xb4c88797
dec esi
sub esi, edi
mov esi, dword [eax + 0x148]
cmp esi, esi
add esi, dword [ebp + 0x10]
nop
nop
sub esi, 0xfffffffa
add esi, 0xffffffc5
lea esi, [edx + edi*8 + 0x46]
sub esi, ecx
sbb esi, esi
add esi, esi
lea esi, [ebx + edx*2 - 0x6f]
adc esi, 0x5fd6
mov esi, dword [eax + 0x170]
xor esi, esi
push esp
pop esi
movzx edx, dl
add esi, 0x5c69b7a2
sub esi, 4
mov esi, dword [eax + 0x104]
cmp esi, esi
mov esi, dword [eax + 0x134]
adc esi, 0xa35f4a17
mov esi, dword [eax + 0x128]
add esi, 1
add esi, 0xffffffff
add esi, 1
add esi, ebp
lea esi, [esp + edx*4 + 0x2c]
mov esi, ebp
cmp edx, esi
mov esi, dword [edx*4 + 0x47d800]
shr esi, 0x83
xor esi, eax
and esi, 0xdfb3f767
shr esi, 0xf9
mov si, word [eax + reloc.wtsapi32.dll_WTSSetSessionInformationW]
lea esi, [esi + eax*4]
add esi, 0xfffffb63
add esi, 1
mov esi, ebx
cmp esi, ebx
mov esi, dword [ebp + 0xc]
or esi, edi
lea esi, [esi*4 + 0x27e7]
sbb esi, esi
adc esi, 0xffffaa51
mov esi, dword [edx*4 + 0x47d800]
mov edx, dword [ebp + 0xc]
test bp, cx
shr edx, 0x18
test ebp, ebp
movzx edi, cl
sete cl
xor esi, dword [edi*4 + 0x47c7c0]
add ecx, 5
sub ecx, 0x40932f21
add ecx, 1
push edx
pop ecx
cmp ecx, edx
lea ecx, [esp - 0x43d135a3]
mov ecx, esp
sub cl, dl
test eax, edi
mov ecx, ecx
cmp ecx, esi
lea ecx, [esi + ebx*8 - 2]
sub ecx, 0xfffffffa
add ecx, 0x54df
mov ecx, esi
xor ecx, esp
mov cx, cx
shr ecx, 0xda
mov ecx, dword [edi*4 + 0x47c7c0]
inc ecx
sub ecx, 0xfffffffb
lea ecx, [edx + edx - 0x2501188e]
push ebx
pop ecx
sub ecx, eax
imul ecx, dword [eax + 0x110]
sar ecx, 0x9f
shl ecx, 0x38
xor ecx, edi
mov ecx, dword [ebp - 0x14]
xor esi, dword [edx*4 + 0x47dc00]
nop
test eax, 0xffffcbca
movzx edx, cl
xor esi, dword [edx*4 + 0x47c3c0]
test dword [eax + 0x14c], eax
cmp ax, 0xffdd
test dl, al
cmp esi, ebx
push ebx
pop edx
test esp, edx
xor esi, dword [eax + 0x170]
mov dword [ebp - 0xc], eax
xor byte [ebp - 0xc], dl
cmp dword [eax + 0x144], ecx
cmp dword [ebp + 8], 0xfffffff5
setne byte [ebp - 0xc]
mov dword [ebp - 0xc], esi
and dword [ebp - 0xc], 0xffff8834
mov dword [ebp - 0xc], 0x14
sub dword [ebp - 0xc], 0x11
or dword [ebp - 0xc], esi
mov dword [ebp - 0xc], ebx
add byte [ebp - 0xc], cl
shl dword [ebp - 0xc], 0
mov dword [ebp - 0xc], 0xf435d77c
add dword [ebp - 0xc], 0x7e31
add dword [ebp - 0xc], edx
and dword [ebp - 0xc], 0
add dword [ebp - 0xc], esp
mov dword [ebp - 0xc], eax
cmp dword [eax + 0x134], 0xffffd2f8
shr edx, 8
and dword [ebp - 0xc], 0x33
mov dword [ebp - 0xc], ebx
test eax, esp
mov dword [ebp - 0xc], 7
setne byte [ebp - 0xc]
mov dword [ebp - 0xc], edx
add byte [ebp - 0xc], dl
mov dword [ebp - 0xc], 0
adc dword [ebp - 0xc], 0xbfee449c
add dword [ebp - 0xc], ebx
cmp esi, esp
mov dword [ebp - 0xc], esp
test edi, edx
add dword [ebp - 0xc], ebx
test edi, eax
setne byte [ebp - 0xc]
mov dword [ebp - 0xc], edx
or dword [ebp - 0xc], ebx
mov dword [ebp - 0xc], 0xffffaba9
xor byte [ebp - 0xc], bl
mov dword [ebp - 0xc], ebp
add dword [ebp - 0xc], esp
movzx edx, dl
mov dword [ebp - 0xc], ebx
or dword [ebp - 0xc], 0xffffae94
xor byte [ebp - 0xc], bl
mov dword [ebp - 0xc], edx
add dword [ebp - 0xc], eax
and dword [ebp - 0xc], 0xa90495b8
or dword [ebp - 0xc], esi
mov byte [ebp - 0xc], al
test ebp, esi
sete byte [ebp - 0xc]
inc dword [ebp - 0xc]
mov word [ebp - 0xc], 1
setne byte [ebp - 0xc]
mov dword [ebp - 0xc], esi
mov esi, dword [edx*4 + 0x47c7c0]
nop
mov edx, dword [ebp + 0xc]
test eax, ecx
shr edx, 0x10
cmp ecx, eax
nop
test byte [ebp - 0x10], 1
nop
test al, dl
mov edi, ecx
movzx edx, dl
cmp edx, 0xffffc81e
call fcn.0041c2e3
inc esi
add esi, ebx
cmp edi, ebp
xchg esi, esi
mov esi, dword [eax + 0x180]
shr esi, 0xfc
test edx, eax
lea esi, [ebp + edx*4 - 0x32]
shl esi, 0xfb
add esi, 0xffffff8d
push eax
pop esi
shl esi, 4
movzx ecx, cl
add esi, 0xffffffcb
mov esi, eax
inc esi
mov esi, eax
adc esi, ecx
add esi, ebx
mov esi, dword [eax + 0x180]
imul esi, dword [eax + 0x100]
xor esi, ecx
inc esi
sub esi, 0x6174
xor esi, esi
neg esi
mov esi, dword [ebp - 0xc]
lea esi, [eax + edx*2]
sbb esi, 0xffffffff
or esi, eax
shr esi, 0
neg esi
xor esi, esp
inc esi
cmp bl, 0xfe
lea esi, [ebp + ebp*2 + 0x10]
add esi, 0x6f
mov esi, dword [edx*4 + 0x47d800]
xor esi, dword [ecx*4 + 0x47c7c0]
cmp word [eax + reloc.wtsapi32.dll_WTSSetSessionInformationW], ax
mov edi, dword [ebp - 0xc]
test edx, ecx
nop
mov ecx, dword [ebp - 8]
test esp, edi
mov edx, edi
shr edx, 0x18
xor esi, dword [edx*4 + 0x47dc00]
movzx edx, cl
cmp dword [eax + 0x154], 0x45074403
xor esi, dword [edx*4 + 0x47c3c0]
cmp dword [eax + 0x180], ecx
push ebx
pop edx
cmp dword [eax + 0x120], ecx
xor esi, dword [eax + 0x180]
inc dword [ebp + 0xc]
add dword [ebp + 0xc], 3
cmp edx, 0x572c
mov dword [ebp + 0xc], 0xffffffce
shl dword [ebp + 0xc], 0x51
sete byte [ebp + 0xc]
inc dword [ebp + 0xc]
cmp ebp, 0x63
mov dword [ebp + 0xc], esi
inc dword [ebp + 0xc]
cmp ebp, edi
and dword [ebp + 0xc], 0xffff9b35
or dword [ebp + 0xc], ebx
test edi, ebp
mov dword [ebp + 0xc], esp
and dword [ebp + 0xc], 0xffffffd6
mov dword [ebp + 0xc], esp
or dword [ebp + 0xc], ebx
cmp dword [eax + 0x15c], 0
sete byte [ebp + 0xc]
mov dword [ebp + 0xc], 0x5f29
inc dword [ebp + 0xc]
mov dword [ebp + 0xc], 0x73e8ebd5
and dword [ebp + 0xc], 0xffffc074
or dword [ebp + 0xc], ebp
mov dword [ebp + 0xc], ebx
shr edx, 8
and dword [ebp + 0xc], 5
or dword [ebp + 0xc], 0xffffbebc
test ebp, ecx
sete byte [ebp + 0xc]
inc dword [ebp + 0xc]
cmp esi, eax
mov byte [ebp + 0xc], 0
or dword [ebp + 0xc], edi
shl dword [ebp + 0xc], 0xf4
and dword [ebp + 0xc], 0xfffffffe
nop
neg dword [ebp + 0xc]
test esp, ebx
mov dword [ebp + 0xc], edx
movzx edx, dl
nop
sub dword [ebp + 0xc], 0x13
mov dword [ebp + 0xc], 0x4d
and dword [ebp + 0xc], 0x638d
mov dword [ebp + 0xc], esi
dec dword [ebp + 0xc]
sub dword [ebp + 0xc], esi
mov dword [ebp + 0xc], eax
cmp dword [eax + 0x178], 0xffffe5e3
setne byte [ebp + 0xc]
mov dword [ebp + 0xc], ecx
and dword [ebp + 0xc], 0xfffffffe
mov byte [ebp + 0xc], 0x53
cmp ebp, ebx
mov dword [ebp + 0xc], 5
cmp dword [eax + 0x158], 7
sete byte [ebp + 0xc]
inc dword [ebp + 0xc]
mov dword [ebp + 0xc], edx
add dword [ebp + 0xc], edx
and dword [ebp + 0xc], 0xdc9f0d65
cmp ecx, ebx
sete byte [ebp + 0xc]
mov dword [ebp + 0xc], esi
mov esi, ecx
shr ecx, 3
movzx cx, dl
xor ecx, esi
xchg ecx, ecx
inc ecx
setg cl
cmp dword [ebp - 0x10], 0x5c
lea ecx, [edx*8 + 0x633eb8c5]
cmp dword [eax + 0x178], 0xffff8a56
mov ecx, edx
lea ecx, [eax + eax]
movzx ecx, dx
xor ecx, esp
push esi
pop ecx
add ecx, 0xfffffffe
lea ecx, [ecx*8]
mov ecx, dword [eax + 0x180]
sub ecx, ecx
cmp al, bl
not ecx
not ecx
lea ecx, [ecx*8 + 1]
add ecx, 3
movsx ecx, dl
mov ecx, dword [edx*4 + 0x47c7c0]
shr esi, 0x18
nop
xor ecx, dword [esi*4 + 0x47dc00]
cmp dword [eax + 0x120], eax
push edi
pop edx
or edi, 0xfffffff0
mov edi, 0xffffffbd
shr edi, 0x62
and edi, 0xffffffff
push esp
pop edi
sar edi, 0x7e
and edi, 1
add edi, 0x4c
lea edi, [edi + ecx*4 + 0x2d366410]
mov edi, dword [ebp + 8]
shr edi, 0x16
mov edi, eax
lea edi, [ebx + ebx*8 + 0x7bb10ae9]
mov edi, ebp
inc edi
shl edi, 0x5b
xor edi, 0xffff82b3
cmp dword [eax + 0x104], 0xfffffffd
mov edi, dword [eax + 0x118]
shr edi, 0xf9
movzx edi, word [ebp + 8]
xor edi, esp
mov edi, dword [ebp - 0x18]
inc edi
shr edx, 0x10
xor edi, ecx
cmp dword [esi*4 + 0x47dc00], edx
inc edi
mov edi, dword [ebp + 8]
or edi, 0xfffffff9
cmp dword [eax + 0x144], 0xc96d42d4
mov edi, 0x5a49e02b
and edi, eax
or edi, esp
shr edi, cl
add edi, esi
shr edi, 0xe4
and edi, 0x2932
sub edi, 0xa3d09d87
sbb edi, esp
xor edi, eax
inc edi
add edi, eax
cmp eax, ecx
movzx edx, dl
xor edi, edx
and edi, 0x71506b89
test edi, ecx
shr edi, cl
neg edi
mov edi, dword [eax + 0x134]
xor edi, ecx
shr edi, 2
movzx edi, word [eax + reloc.wtsapi32.dll_WTSSetSessionInformationW]
and edi, 0xfffffffa
neg edi
push eax
pop edi
shl edi, 0x73
add edi, ecx
sub edi, eax
sbb edi, esp
mov edi, ebx
add edi, 0xd187a775
mov edi, dword [ebp + 0x10]
and edi, 4
lea edi, [ebp + ecx*4 + 0x6e]
shr edi, 1
cmp ebx, edi
xor ecx, dword [edx*4 + 0x47d800]
dec edi
inc edi
lea edi, [esi + esi + 0x5b8c]
sub edi, edi
shl edi, cl
mov edi, dword [eax + 0x17c]
shl edi, 7
add edi, 0
test ecx, esi
push ebp
pop edi
lea edi, [eax + eax - 0x6e09]
mov edi, dword [eax + 0x120]
shl edi, 0xb9
test edi, edi
and edi, 2
inc edi
cmp dword [eax + 0x120], 0x70bd
lea edi, [ebx + 0x5e]
xor edi, dword [eax + 0x180]
mov edx, dword [ebp - 4]
sbb edi, ebx
imul edi, ebx
sub edi, 0xfffffffd
mov edi, dword [eax + 0x118]
add edi, edx
lea edi, [edx + ebx*4 + 5]
push esi
pop edi
lea edi, [eax + ebp*4]
sub edi, 0x6c78
xor edi, ebp
mov edi, dword [eax + 0x180]
nop
adc edi, ebp
mov edi, dword [eax + 0x12c]
add edi, 2
lea edi, [edx]
cmp ax, 5
push eax
pop edi
add edi, edx
test ebp, eax
lea edi, [ebx + edi*2 - 0x7f83]
add edi, dword [eax + 0x178]
push eax
pop edi
movzx esi, dl
mov edi, dword [eax + 0x138]
lea edi, [ebp*8]
cmp dword [eax + 0x170], 0xfffffffa
mov edi, dword [eax + 0x144]
sub edi, 0xfffffffa
lea edi, [esp]
sub edi, 0x3ac5b04b
shl edi, 0xb7
mov edi, dword [ebp + 8]
imul edi, eax
mov edi, dword [eax + 0x110]
add edi, 0xffffffeb
lea edi, [0xffff9be7]
sub edi, 0xc2fae73
mov edi, dword [eax + 0x158]
xor edi, ebp
mov edi, eax
shr edi, 0x8a
neg edi
lea edi, [esp]
mov edi, dword [esi*4 + 0x47c3c0]
inc edi
shr edi, 0x3e
mov edi, dword [eax + 0x100]
movzx edi, word [eax + reloc.wtsapi32.dll_WTSSetSessionInformationW]
xor ecx, dword [esi*4 + 0x47c3c0]
inc edi
add edi, ecx
cmp eax, 0x24
mov edi, dword [eax + 0x184]
and edi, 0x9e7cc9d7
lea edi, [eax - 0xe]
shl edi, 1
lea edi, [esp + ebp*2 - 0x43]
mov edi, dword [ebp + 0xc]
neg edi
mov di, di
sbb edi, esi
imul edi, esp, 0x63426fc7
not edi
adc edi, edx
shr edx, 0x18
mov edi, ebp
xor edi, ecx
movzx edi, word [edx*4 + reloc.wtsapi32.dll_WTSSetSessionInformationW]
xor edi, ebx
inc edi
mov edi, dword [eax + 0x154]
and edi, 3
push edx
pop edi
xor edi, eax
push WTSVirtualChannelPurgeInput
pop edi
nop
nop
and edi, 0xdda9e15b
add edi, 6
mov edi, ebp
xor edi, ebp
inc edi
xor edi, edx
inc edi
cmp esi, edi
mov edi, dword [eax + 0x114]
sbb edi, edi
lea edi, [ebp*8 - 0x4e4ad74f]
cmp edi, edx
lea edi, [ebx + edi*4 + 0x65]
mov esi, dword [edx*4 + 0x47dc00]
shl edi, 0x7c
add edi, dword [eax + 0x100]
sub edi, dword [eax + 0x12c]
inc edi
cmp eax, eax
mov edi, dword [eax + 0x114]
inc edi
lea edi, [esp + 4]
shl edi, 0x99
sub edi, 0xa7bff2f5
lea edi, [edx*4 + 0x38544ba8]
mov edi, dword [eax + 0x158]
xor edi, ebx
test byte [eax + 0x108], 0xff
lea edi, [esp]
sub edi, 0x8355358c
mov edi, dword [eax + 0x160]
shr edi, 0x63
mov edi, dword [eax + 0x114]
xor edi, esi
movzx edi, word [eax + reloc.wtsapi32.dll_WTSSetSessionInformationW]
and edi, 0xffffade6
lea edi, [ecx*4 + 3]
mov edi, esi
shl edi, 0xe1
or edi, 0xffffa518
xor ecx, dword [eax + 0x184]
shr edi, 4
inc edi
mov di, word [eax + reloc.wtsapi32.dll_WTSSetSessionInformationW]
lea edi, [edx*8 + 0x2846]
add edi, 0xffffefbd
neg edi
dec edi
cmp edx, ebx
lea edi, [edi - 0x27]
mov edi, ebx
sub edi, 0x2f9ec9b9
push ecx
pop edi
xor edi, ebp
mov edi, 0xffff8e91
shr edi, 0xec
lea edi, [esi + ebx*2 - 0x5bb4]
movzx edi, word [eax + reloc.wtsapi32.dll_WTSSetSessionInformationW]
mov edi, dword [eax + 0x178]
cmp dword [eax + 0x150], 0x3d2f
mov edi, dword [eax + 0x110]
sub edi, 0xfffffffb
lea edi, [edi*8]
sub edi, eax
inc edi
mov edx, dword [ebp - 0xc]
add edi, dword [ebp + 0xc]
mov edi, dword [ebp - 8]
and edi, 0xffffff87
add edi, 0xf8310021
adc edi, esi
mov dword [ebp - 0x14], ebp
and dword [ebp - 0x14], 0x3972e389
mov edi, 0xfffffffc
not edi
shr edx, 8
add edi, 0
mov dword [ebp - 0x14], edx
lea edi, [eax + eax - 2]
sub edi, 0xffffb058
neg edi
sbb edi, ecx
dec edi
cmp dword [eax + 0x164], edx
mov edi, esp
sub edi, 0x74
inc edi
neg edi
lea edi, [ecx + ebp*4 + 0x2550]
add edi, ecx
movzx edx, dl
mov dword [ebp - 0x14], edi
adc edi, esi
cmp esp, ecx
mov edi, ecx
lea edi, [eax - 0x7e]
xor edi, ebx
test eax, edi
mov edi, dword [eax + 0x110]
lea edi, [edx + 7]
or dword [ebp - 0x14], 0x74068dcb
xor edi, eax
mov dword [ebp - 0x14], ecx
neg edi
mov edi, dword [eax + 0x118]
sbb edi, eax
xor ecx, edi
inc edi
neg edi
cmp ebp, eax
lea ecx, [ebp*4 + 0x1b56]
mov ecx, dword [ebp - 8]
shr edi, 0xc2
and edi, 0x6b26
xor edi, ebp
cmp dl, byte [eax + 0x154]
mov edi, 0xe4eae585
xor edi, ecx
mov edi, dword [eax + 0x170]
shr ecx, 0x10
lea edi, [esi*4 - 0x38836d98]
shr edi, 2
mov edi, dword [eax + 0x150]
add edi, esi
lea edi, [ebx + 0x6568144a]
lea edi, [eax + ebx*8 + 7]
add edi, 0x2d
mov edi, edx
movzx edi, cl
add ecx, 0xea93a562
adc ecx, ecx
inc ecx
and ecx, 0x3371b068
add ecx, 0x37210a0b
mov ecx, dword [eax + 0x17c]
shr ecx, 0x23
shl ecx, cl
xor esi, dword [edi*4 + 0x47d800]
cmp dword [ebp - 4], ecx
sete cl
mov ecx, dword [eax + 0x16c]
lea ecx, [eax*8 + 0x45]
mov cl, al
adc ecx, 0xffff8bcb
not ecx
add eax, 0x190
setg cl
mov ecx, dword [ebp + 0xc]
and ecx, 0xa160f550
mov ecx, dword [eax - 4]
or ecx, 0xb6b
push esi
pop ecx
shl ecx, 0xdd
xor esi, dword [edx*4 + 0x47c7c0]
lea ecx, [edx*4]
add cx, 0x2a
push esi
pop ecx
cmp dl, 0xa4
mov ecx, dword [eax + 0x18]
sete cl
movzx edx, bl
add ecx, 0xffffff9f
sar ecx, 0xa8
inc ecx
cmp dword [eax + 0xc], edx
setne cl
pushal
popal
shl ecx, 0x81
shr ecx, cl
xor esi, dword [edx*4 + 0x47c3c0]
mov ecx, dword [edi*4 + 0x47d800]
sub ecx, 0x4490c95c
inc ecx
setg cl
and ecx, 0x2669
cmp ebp, 0xfffffffa
seta cl
mov edx, dword [ebp - 4]
xor ecx, esp
shr ecx, cl
movzx ecx, word [eax + 0x18]
add ecx, 0x3e7fe3ea
adc ecx, ebp
inc ecx
cmp dword [eax + 0xc], 0xfffffff3
sbb ecx, eax
xor esi, dword [eax - 8]
inc ecx
cmp eax, ebp
mov ecx, dword [ebp + 0x10]
not ecx
xor ecx, edi
push eax
pop ecx
setne cl
shr edx, 0x10
xor ecx, ecx
inc ecx
mov ecx, 0x70767e6b
lea ecx, [ebp + esi*2 + 0x753fcbbd]
or ecx, ebp
add ecx, 0xd5860eec
push ebp
pop ecx
neg ecx
movzx edx, dl
and ecx, 0x33
xor ecx, esp
mov ecx, 0xffffffa3
shr ecx, 7
mov ecx, dword [ebp - 0x14]
and ecx, 0xa388cc2a
or ecx, 0x1652
mov ecx, dword [eax - 8]
shr ebx, 0x18
neg ecx
mov ecx, dword [ebp - 0xc]
neg ecx
sbb ecx, ebx
neg ecx
cmp dword [eax], edi
mov ebx, dword [ebx*4 + 0x47dc00]
or ecx, ecx
movzx ecx, word [ebp - 8]
shr ecx, 0xce
xor ecx, edx
mov ecx, eax
and ecx, 0x5e51b300
mov ecx, dword [ebp - 4]
shl ecx, 0xfa
xor ebx, dword [edx*4 + 0x47d800]
mov ecx, esp
add ecx, 0x35
cmp ebx, edx
mov ecx, dword [eax + 0x14]
cmp ebp, edx
lea ecx, [ebx*4 + 0x59a7]
adc ecx, 0x36
sub ecx, dword [ebp + 0xc]
mov edx, dword [ebp - 8]
add ecx, 0xffffff9c
imul ecx, dword [eax]
shl ecx, 0xf9
xor ecx, eax
cmp dword [ebp - 0x18], 0xb782b8df
mov ecx, dword [ebp + 0x10]
shl ecx, 0
push ebp
pop ecx
shr edx, 8
add ecx, 0x700f
lea ecx, [esi*4 - 0x58c2]
mov ecx, dword [eax - 4]
adc ecx, eax
nop
movzx edx, dl
add ecx, esi
adc ecx, ecx
inc ecx
lea ecx, [edi - 0x3b346665]
sbb ecx, ebp
mov ecx, dword [eax + 0xc]
shl ecx, cl
sub ecx, 0x6087
xor ebx, dword [edx*4 + 0x47c7c0]
mov ecx, dword [eax + 4]
add ecx, 5
shr ecx, 0xfe
sub ecx, 0xffff8be6
cmp dword [ebp + 8], esp
pushal
popal
xor ecx, ecx
mov ecx, dword [eax + 0x18]
movzx edx, byte [ebp - 0xc]
add ecx, 0xffff9387
mov ecx, edx
inc ecx
add ecx, esi
test ecx, edi
mov ecx, dword [eax + 0x18]
shl ecx, 0xd0
shr ecx, 0x49
xor ebx, dword [edx*4 + 0x47c3c0]
shr ecx, 0xfc
xor ecx, esp
inc cl
xor ecx, eax
inc ecx
cmp dword [eax - 4], 0x4dec
lea ecx, [edx + edx*4]
movsx ecx, dl
push esi
pop ecx
cmp byte [edx*4 + 0x47c3c0], 0x77
xor ebx, dword [eax - 4]
inc dword [ebp - 0x10]
mov dword [ebp - 0x10], edx
cmp esp, 0x33
or dword [ebp - 0x10], ecx
cmp dword [ebp - 0x18], esi
setne byte [ebp - 0x10]
mov dword [ebp - 0x10], esi
push ebx
pop edx
shr esi, 2
mov esi, dword [eax + 0x14]
lea esi, [eax + ebx*2 - 0x67]
lea esi, [edi + edi + 7]
mov esi, dword [eax - 4]
and esi, 0xffffffb2
or esi, 1
shr edx, 0x10
shl esi, 0xfc
xor esi, edx
push ebp
pop esi
lea esi, [ebx + edx*8]
movzx esi, word [ebp + 8]
shl esi, 0xf3
add esi, 0xfffffffc
push ecx
pop esi
movzx edx, dl
inc esi
mov esi, eax
xor esi, ebp
test edi, edi
mov esi, dword [ebp - 0x18]
lea esi, [ebx + ebx - 0x50]
sub esi, 0x378a
mov esi, dword [edx*4 + 0x47d800]
cmp ebp, edx
mov edx, dword [ebp + 0xc]
shr ecx, 8
movzx edi, cl
add ecx, 0xffffedad
mov ecx, esp
inc ecx
mov ecx, dword [eax]
xor ecx, ebp
add ecx, 0x78
movzx ecx, word [eax + 0x10]
sete cl
xor esi, dword [edi*4 + 0x47c7c0]
mov ecx, 0x6b
lea ecx, [edi + ecx*4 - 0x3259]
inc ecx
add ecx, 0x5f
push eax
pop eax
sub ecx, 0xffffffe1
sbb ecx, 0x23
add ecx, eax
mov ecx, dword [ebp - 0x14]
shr edx, 0x18
test eax, edi
xor esi, dword [edx*4 + 0x47dc00]
cmp cl, 0xba
nop
movzx edx, cl
xor esi, dword [edx*4 + 0x47c3c0]
cmp ebp, 5
push ebx
pop edx
test cl, 0x46
nop
test ebx, ebp
xor esi, dword [eax]
test dword [eax - 4], 0xff06ecf5
setne byte [ebp - 0xc]
mov dword [ebp - 0xc], esp
and dword [ebp - 0xc], 0x7e7c
and dword [ebp - 0xc], 0xffff9dde
or dword [ebp - 0xc], eax
mov dword [ebp - 0xc], edi
shr edx, 8
test ecx, edx
setne byte [ebp - 0xc]
mov word [ebp - 0xc], sp
and dword [ebp - 0xc], 0xffffff94
add dword [ebp - 0xc], esp
neg dword [ebp - 0xc]
movzx edx, dl
mov dword [ebp - 0xc], 0x21157095
add dword [ebp - 0xc], ecx
and dword [ebp - 0xc], 0xfffffffc
mov dword [ebp - 0xc], esp
inc dword [ebp - 0xc]
cmp esp, 0x4f743d8c
setne byte [ebp - 0xc]
mov dword [ebp - 0xc], esi
mov esi, dword [edx*4 + 0x47c7c0]
test ebx, ecx
cmp dword [eax + 8], ecx
mov edx, dword [ebp + 0xc]
nop
push ecx
pop edi
shr edi, 0x18
nop
xor esi, dword [edi*4 + 0x47dc00]
cmp di, 0xfffe
sete byte [ebp - 8]
mov byte [ebp - 8], dl
sete byte [ebp - 8]
inc dword [ebp - 8]
mov dword [ebp - 8], ecx
or dword [ebp - 8], ebp
shr edx, 0x10
and dword [ebp - 8], esi
mov dword [ebp - 8], 4
test esp, ecx
mov dword [ebp - 8], ebp
setne byte [ebp - 8]
mov dword [ebp - 8], esi
sub esi, 0xffffffb8
xor esi, ebp
cmp ecx, esi
movzx edx, dl
mov esi, dword [eax + 0xc]
inc esi
cmp esp, dword [ebp + 8]
mov esi, esp
and esi, 0xffffbdce
lea esi, [eax + edi*4]
cmp dword [ebp - 0xc], 0x692e
lea esi, [esi + 0x6da0618a]
mov edx, dword [edx*4 + 0x47d800]
imul esi, ebp
push ebp
pop esi
shl esi, 0xa0
mov esi, edi
shl esi, cl
shr esi, 0x15
and esi, 5
sub esi, 0xb1cb00ee
xor dword [ebp - 8], edx
cmp dword [eax + 4], 0xfffffffa
lea esi, [edx + edx + 1]
push esp
pop edx
sub edx, 0x4f
mov esi, dword [eax + 0x14]
add esi, 0x9c2ca7e
mov edx, edi
xor esi, ebp
movzx edx, byte [ebp - 0x10]
shr esi, cl
movzx esi, word [ebp + 0xc]
xor esi, esp
mov esi, dword [eax - 4]
xor esi, dword [ebp - 4]
add esi, esp
lea esi, [ecx + ebp*2 + 6]
mov esi, dword [ebp - 8]
push edi
pop edi
xor esi, dword [edx*4 + 0x47c3c0]
nop
test bl, al
mov edx, dword [ebp - 0x10]
xor esi, dword [eax + 4]
or ebx, ebx
setne byte [ebp - 8]
mov dword [ebp - 8], eax
and dword [ebp - 8], 0x68
mov dword [ebp - 8], ebp
cmp cl, 0xe9
add dword [ebp - 8], 0x2fbec090
mov dword [ebp - 8], ecx
shr edx, 0x18
test ebp, edx
sete byte [ebp - 8]
mov dword [ebp - 8], eax
cmp ebp, esp
mov dword [ebp - 8], esi
mov esi, dword [edx*4 + 0x47dc00]
mov edx, dword [ebp + 0xc]
or dword [ebp - 0x14], esi
shl dword [ebp - 0x14], 0xff
and dword [ebp - 0x14], 0xffffffff
test esi, ebp
setne byte [ebp - 0x14]
mov dword [ebp - 0x14], ecx
shr ecx, 0x10
movzx edi, cl
xor ecx, eax
shr ecx, 0x9a
test edi, ebx
setge cl
xor esi, dword [edi*4 + 0x47d800]
inc ecx
neg ecx
cmp edx, eax
mov ecx, dword [ebp + 8]
shr ecx, 1
lea ecx, [ebx + edi*2 - 1]
add ecx, 0xfffffffc
lea ecx, [ebx + ebx*8 + 0x3f07]
mov ecx, dword [ebp - 0x14]
shr edx, 8
cmp esi, ecx
movzx edx, dl
xor esi, dword [edx*4 + 0x47c7c0]
movzx edx, bl
xor esi, dword [edx*4 + 0x47c3c0]
nop
cmp eax, ecx
nop
mov edx, dword [ebp - 0x10]
xor esi, dword [eax + 8]
nop
shr ebx, 0x18
test esi, ebp
mov ebx, dword [ebx*4 + 0x47dc00]
nop
shr edx, 0x10
movzx edx, dl
nop
nop
cmp edi, 0x24aa97b0
xor ebx, dword [edx*4 + 0x47d800]
cmp dword [eax + 4], 0xffffffd4
movzx edx, byte [ebp + 0xc]
cmp dword [ebp - 0x14], edi
shr ecx, 8
test esp, eax
nop
nop
movzx ecx, cl
xor ebx, dword [ecx*4 + 0x47c7c0]
cmp esi, esi
cmp dword [ebp - 0xc], eax
test edi, esi
mov ecx, dword [ebp + 8]
xor ebx, dword [edx*4 + 0x47c3c0]
test cx, si
mov edi, dword [ecx + 0x200]
test ecx, esp
test edi, edx
xor ebx, dword [eax + 0xc]
dec dword [ebp - 4]
inc dword [ebp - 4]
mov dword [ebp - 4], ebx
dec dword [ebp - 4]
test ebx, ecx
sete byte [ebp - 4]
nop
inc dword [ebp - 4]
cmp eax, esp
sete byte [ebp - 4]
mov dword [ebp - 4], esp
add dword [ebp - 4], ebx
cmp esp, dword [eax]
and dword [ebp - 4], 0xffffde6e
or dword [ebp - 4], eax
neg dword [ebp - 4]
mov dword [ebp - 4], esi
inc dword [ebp - 4]
mov dword [ebp - 4], ebp
cmp ebp, 0xffffc6bb
or dword [ebp - 4], edi
test ebx, eax
mov dword [ebp - 4], ebx
setne byte [ebp - 4]
mov byte [ebp - 4], al
and word [ebp - 4], si
or dword [ebp - 4], ecx
shr dword [ebp - 4], cl
mov dword [ebp - 4], esp
add dword [ebp - 4], eax
and dword [ebp - 4], ebp
mov dword [ebp - 4], edx
dec dword [ebp - 4]
or esi, esi
setne byte [ebp - 4]
mov dword [ebp - 4], 0xfffffffb
and dword [ebp - 4], 1
mov dword [ebp - 4], edi
or dword [ebp - 4], ebx
shl dword [ebp - 4], 0xb
mov dword [ebp - 4], edi
and word [ebp - 4], bp
mov dword [ebp - 4], ebp
adc dword [ebp - 4], edi
add byte [ebp - 4], cl
cmp ebx, 0xdba1cba8
sete byte [ebp - 4]
mov dword [ebp - 4], ebx
and dword [ebp - 4], 0x48
add dword [ebp - 4], ebp
inc dword [ebp - 4]
cmp ebp, dword [ebp + 8]
mov dword [ebp - 4], edi
test edx, edi
adc dword [ebp - 4], 0xffff9adc
add dword [ebp - 4], ebx
mov dword [ebp - 4], ecx
inc dword [ebp - 4]
shl dword [ebp - 4], 0xc6
cmp ebx, ebx
mov word [ebp - 4], 1
inc dword [ebp - 4]
and word [ebp - 4], 0xa5c9
or dword [ebp - 4], eax
mov dword [ebp - 4], 0xfffffffe
add dword [ebp - 4], 0x550a51e2
and word [ebp - 4], cx
cmp dl, 0xfe
mov word [ebp - 4], 0xfc2e
add dword [ebp - 4], ebp
and dword [ebp - 4], 0x297b8327
test edi, esi
mov dword [ebp - 4], ecx
or dword [ebp - 4], esi
and word [ebp - 4], 0xe4c7
or dword [ebp - 4], edi
mov dword [ebp - 4], edi
add dword [ebp - 4], edx
and dword [ebp - 4], 0xffffffd6
mov dword [ebp - 4], 0x31b5
mov dword [ebp - 4], esi
add dword [ebp - 4], 6
adc dword [ebp - 4], esi
add dword [ebp - 4], ebx
mov dword [ebp - 4], edx
shr dword [ebp - 4], cl
and dword [ebp - 4], 0xe6f
cmp dword [ebp - 8], 0x59
mov byte [ebp - 4], 0x70
add dword [ebp - 4], 0x4c61
and dword [ebp - 4], 0xffff88fa
test dword [edx*4 + 0x47c3c0], 0x7c
mov dword [ebp - 4], ecx
and dword [ebp - 4], edx
shr dword [ebp - 4], 5
and byte [ebp - 4], 0
xor byte [ebp - 4], cl
cmp ebp, 0x21b8
mov dword [ebp - 4], 0x75f329fe
inc dword [ebp - 4]
and dword [ebp - 4], 0x197f8d03
cmp dword [ebp - 8], ebp
mov dword [ebp - 4], edx
xor byte [ebp - 4], al
inc dword [ebp - 4]
cmp ecx, esp
mov dword [ebp - 4], ecx
add dword [ebp - 4], esi
and dword [ebp - 4], 0x6566
cmp esp, ebx
mov dword [ebp - 4], 0xbf7
or dword [ebp - 4], 0x5772
and dword [ebp - 4], 0xfffffff9
mov dword [ebp - 4], 0xffffffc2
inc dword [ebp - 4]
cmp dword [eax + 0xc], esi
mov dword [ebp - 4], edx
and dword [ebp - 4], 0x4583
or dword [ebp - 4], edi
cmp ebp, 0x1420
mov dword [ebp - 4], ebx
shr dword [ebp - 4], cl
and dword [ebp - 4], 0xfffffffc
add dword [ebp - 4], ebx
mov dword [ebp - 4], ebx
inc dword [ebp - 4]
and dword [ebp - 4], 0x10
or dword [ebp - 4], esp
mov dword [ebp - 4], eax
add dword [ebp - 4], esi
adc dword [ebp - 4], esp
add byte [ebp - 4], dl
mov dword [ebp - 4], 0x7004
and dword [ebp - 4], ecx
or dword [ebp - 4], ecx
cmp esp, ebx
mov dword [ebp - 4], esi
and dword [ebp - 4], 0x16
or dword [ebp - 4], esi
cmp dword [eax + 0x14], ecx
mov dword [ebp - 4], ecx
or dword [ebp - 4], edx
and dword [ebp - 4], 0x3868df8d
or dword [ebp - 4], 0
mov dword [ebp - 4], edx
add dword [ebp - 4], eax
adc dword [ebp - 4], 0x450d97ae
cmp dword [eax + 0xc], 0xffffffdf
mov dword [ebp - 4], esi
inc dword [ebp - 4]
and dword [ebp - 4], 0xfffffffd
mov dword [ebp - 4], ebx
test esi, ebx
add dword [ebp - 4], edi
test byte [eax + 4], bl
mov dword [ebp - 4], 0xffffb210
inc dword [ebp - 4]
and dword [ebp - 4], 0xfa676970
cmp dword [eax + 0x10], 4
add dword [ebp - 4], 0x2d372f63
mov byte [ebp - 4], dl
and word [ebp - 4], 0x68
test eax, esi
mov dword [ebp - 4], esi
inc dword [ebp - 4]
add dword [ebp - 4], esp
mov dword [ebp - 4], 0x4d
inc dword [ebp - 4]
cmp esi, esi
mov dword [ebp - 4], edx
and dword [ebp - 4], 4
dec dword [ebp - 4]
cmp dword [ebp - 0x18], ebp
mov dword [ebp - 4], 0xffffaa61
or dword [ebp - 4], ebx
and dword [ebp - 4], 0x3299
cmp ecx, ecx
mov dword [ebp - 4], edi
inc dword [ebp - 4]
and dword [ebp - 4], 0x4b
cmp dword [ecx + 0x200], ebx
mov dword [ebp - 4], 0xfffffffe
and dword [ebp - 4], 0x1fe7750f
or dword [ebp - 4], esi
xor dword [ebp - 4], esp
inc dword [ebp - 4]
mov dword [ebp - 4], ebx
add dword [ebp - 4], eax
cmp edx, eax
mov dword [ebp - 4], eax
add dword [ebp - 4], 0x61559592
and dword [ebp - 4], 0xffffa059
xor byte [ebp - 4], cl
inc dword [ebp - 4]
mov dword [ebp - 4], ebx
add dword [ebp - 4], edx
cmp dword [ebp - 0x10], ecx
mov dword [ebp - 4], edi
and dword [ebp - 4], 0
dec dword [ebp - 4]
cmp dword [eax], esp
mov dword [ebp - 4], 0xffffffc6
sub dword [ebp - 4], ebx
and dword [ebp - 4], 0x1e14
and dword [ebp - 4], 4
mov dword [ebp - 4], ebx
or dword [ebp - 4], eax
and dword [ebp - 4], 7
dec dword [ebp - 4]
mov dword [ebp - 4], ebx
and dword [ebp - 4], 0x62
or dword [ebp - 4], esp
mov dword [ebp - 4], ebx
sub dword [ebp - 4], ecx
mov dword [ebp - 4], ecx
and dword [ebp - 4], 0x1a
mov dword [ebp - 4], ecx
cmp ecx, 0x5e
cmp dword [eax - 4], ebp
nop
sub dword [ebp - 4], esi
mov dword [ebp - 4], ebp
test bp, 0xb15e
cmp esp, 0xe26405cd
sete byte [ebp - 4]
inc dword [ebp - 4]
mov dword [ebp - 4], esp
or dword [ebp - 4], esi
and dword [ebp - 4], 0x6a2ddda4
mov dword [ebp - 4], esp
inc dword [ebp - 4]
mov dword [ebp - 4], edi
add byte [ebp - 4], al
mov dword [ebp - 4], 0
or dword [ebp - 4], edi
mov dword [ebp - 4], ebp
cmp dword [eax + 0xc], 0x7a568ef9
test ebp, ebx
sete byte [ebp - 4]
inc dword [ebp - 4]
mov dword [ebp - 4], edi
xor byte [ebp - 4], al
inc dword [ebp - 4]
mov dword [ebp - 4], ecx
add dword [ebp - 4], edi
cmp sp, 0x56
mov dword [ebp - 4], edi
and dword [ebp - 4], 0x8e566478
or dword [ebp - 4], ecx
nop
cmp edi, esi
mov dword [ebp - 4], esp
setne byte [ebp - 4]
mov dword [ebp - 4], esi
cmp edi, 0xa
jle 0x41e4cb
nop
mov edx, ebx
shr edx, 0x10
cmp esi, 0x78
movzx ecx, dl
mov edx, dword [ebp - 0x10]
cmp dword [eax + 8], 0xffffffd7
mov edx, ebp
lea edx, [ebp + 0x7b]
mov edx, 0xffffffff
cmp edi, 0
cmp dword [eax + 4], 0xffffff8b
mov edx, esp
lea edx, [0xffffad33]
push ebp
pop edx
add edx, 0xfffffffd
lea edx, [eax + edx*8 + 0x7a]
shl edx, 5
add edx, dword [eax - 8]
lea edx, [ebx + esi*2 + 0x49]
push esp
pop edx
test edi, edx
pushal
popal
push 0x4e
pop edx
lea edx, [eax + 2]
add edx, 0xfffffffa
sub edx, 0xffffaf41
inc edx
mov edx, dword [ecx*4 + 0x47d800]
cmp dword [eax - 8], 0xffffffd5
mov edx, dword [ebp + 0xc]
lea edx, [eax]
sar edx, 0x9f
shr edx, cl
push ebp
pop edx
and edx, 0xffffc329
mov edx, ebp
test cl, bl
sete dl
inc edx
add edx, 0x74
cmp esi, ecx
mov edx, dword [eax + 0x10]
lea edx, [eax*8]
add edx, 0x85167f77
sub dl, 0x69
sar edx, 7
add edx, 0xffffffe6
mov edx, ecx
lea edx, [edx - 0x150b48c0]
and edx, edi
inc edx
mov edx, dword [ebp + 0xc]
xor edx, ebp
inc edx
cmp ebp, 0xffffffa7
dec edx
lea edx, [edi + eax*8]
mov dx, cx
cmp esp, eax
mov edx, dword [ebp - 0x10]
setne dl
xchg edx, edx
mov edx, esi
sub edx, 7
shl edx, 0x15
mov edx, dword [ebp - 0x14]
lea edx, [edi + 0x14]
add edx, 0xffff9b26
mov edx, ecx
inc edx
imul edx, ebx
or edx, dword [ebp - 0x18]
push ebp
pop edx
neg edx
shl edx, 0x53
shr edx, 0xd9
lea edx, [edx + ebp*4 - 0x14]
xchg edx, edx
xor edx, edx
dec edx
inc edx
mov edx, edx
add edx, 0x1d671a2c
mov edx, dword [eax + 4]
lea edx, [ebx + eax*8 - 0x38a4f2d2]
sub edx, 0xffffffa9
add edx, ecx
neg edx
mov edx, 0xffffff84
sar edx, 3
add edx, 0xffffff95
xor edx, edi
sub edx, 0xffff9526
sbb edx, ecx
mov edx, dword [eax + 0xc]
xor edx, ebx
inc edx
seta dl
cmp dword [ebp - 0xc], 0xffffab49
mov edx, 0x25a0
lea edx, [esp - 0x6f]
mov edx, dword [eax + 0x14]
test dword [ebp - 0x10], esp
push edx
pop edx
lea edx, [eax + edi*8]
add edx, 0xffffc13a
sub edx, 0x2341
add edx, 0xc8a463e3
xor edx, esp
setg dl
inc edx
add edx, 0x43d39a3e
cmp byte [eax + 0x10], 0xcb
mov edx, ecx
lea edx, [ebp*8 + 0x7a5a]
mov edx, dword [ebp - 0x10]
test edx, ebp
lea edx, [edi + edx*4 + 6]
setne dl
mov edx, dword [eax + 0x14]
add edx, 0x5ff6
sub edx, 0xffff9795
mov edx, esp
sbb edx, 0x55
imul edx, dword [ebp + 0x10]
mov edx, dword [ebp - 4]
lea edx, [eax*8 + 0x2d63]
inc edx
push edi
pop edx
adc edx, esi
nop
lea edx, [esi + 0xb59]
adc edx, ecx
add edx, 0xfffffffc
mov edx, ebp
lea edx, [0x23]
adc edx, edx
not edx
add edx, 0x4861080d
lea edx, [edi + ecx*2 + 0x48a5b389]
mov edx, dword [ebp - 0x14]
lea edx, [esp]
inc edx
add edx, 0x7932c78b
cmp al, 0xe8
lea edx, [ebx + ebp*2]
push edi
pop edx
shr edx, 4
xor edx, esp
inc edx
cmp esp, 0x23
sar edx, 0x7a
mov edx, eax
movzx edx, word [ebp - 0x18]
and edx, dword [eax + 4]
test edi, esi
push esp
pop edx
xor dl, 0xc4
inc edx
add edx, 0x8a080c9
test edx, esp
xchg edx, edx
mov edx, dword [eax + 0x14]
sbb edx, 0x266ea08b
sub edx, 0x17678450
sbb edx, 0
add edx, 0xfffffffa
lea edx, [0x40fa1b06]
push esi
pop esi
shr edx, 5
add edx, dword [ebp - 4]
lea edx, [edi + ecx*4 + 0x42e]
mov edx, dword [ecx*4 + 0x47d800]
lea edx, [ecx + edi*4 - 5]
add edx, esi
lea edx, [ebp + edx*2]
mov edx, dword [ebp - 0x14]
adc edx, eax
nop
xchg edx, edx
lea edx, [esi - 0x4d]
push edi
pop edx
sub edx, 0x60631d2d
inc edx
neg edx
cmp edi, 0xffff895d
mov edx, dword [ebp - 0x14]
dec edx
neg edx
lea edx, [ebx + edi*4 - 6]
mov edx, dword [ebp - 0x14]
sub edx, esi
neg edx
cmp dword [ebp + 0xc], 0xf7d40473
mov edx, ecx
adc edx, 0x7b
nop
seta dl
sbb edx, ebx
inc edx
xor dl, 0xfb
dec edx
inc edx
and edx, eax
mov dx, word [eax + 0xc]
inc edx
and edx, 0x751f9860
mov edx, dword [eax + 0x14]
add edx, esi
and edx, 0xbf06a73b
xor edx, ebx
movsx edx, bl
inc edx
lea edx, [esi + edx*2 + 0x37bf]
mov edx, 0xffffa841
xor edx, ecx
test esi, ebp
neg edx
mov edx, dword [ecx*4 + 0x47d800]
sbb edx, ebp
imul edx, ecx, 0
neg edx
mov edx, dword [ebp - 8]
sbb edx, edx
and edx, esi
dec edx
mov edx, dword [eax + 0x14]
cmp esi, esp
mov edx, dword [ebp - 0x14]
setne dl
setl dl
mov edx, esi
mov esi, dword [ecx*4 + 0x47d800]
shr edx, 8
nop
movzx edx, dl
test edi, ebx
xor esi, dword [edx*4 + 0x47c7c0]
cmp ebx, edx
mov edx, dword [ebp - 0xc]
push edx
pop ecx
shr ecx, 0x18
xor esi, dword [ecx*4 + 0x47dc00]
movzx ecx, byte [ebp - 8]
xor esi, dword [ecx*4 + 0x47c3c0]
cmp word [eax - 4], si
nop
mov ecx, ebx
nop
cmp dx, bx
test esp, ecx
xor esi, dword [eax + 0x10]
add byte [ebp + 0xc], cl
dec dword [ebp + 0xc]
cmp edi, esp
mov dword [ebp + 0xc], edx
or dword [ebp + 0xc], eax
xor byte [ebp + 0xc], cl
mov dword [ebp + 0xc], ebp
inc dword [ebp + 0xc]
cmp ebx, ebp
mov dword [ebp + 0xc], ebp
nop
dec dword [ebp + 0xc]
cmp dword [eax - 8], 0x9944de0f
mov word [ebp + 0xc], bp
inc dword [ebp + 0xc]
and dword [ebp + 0xc], 0x2ffc
or dword [ebp + 0xc], eax
cmp eax, esp
cmp dword [ebp - 8], ecx
sete byte [ebp + 0xc]
mov word [ebp + 0xc], 0x6d9b
dec dword [ebp + 0xc]
cmp dword [eax + 0x10], ebp
sbb dword [ebp + 0xc], edi
and dword [ebp + 0xc], 0x9d427a11
sete byte [ebp + 0xc]
inc dword [ebp + 0xc]
mov dword [ebp + 0xc], eax
cmp dword [ebp - 0x14], 0x1341adc1
mov dword [ebp + 0xc], esi
setne byte [ebp + 0xc]
mov dword [ebp + 0xc], esp
add dword [ebp + 0xc], ecx
and dword [ebp + 0xc], 0x40
cmp ebp, edx
mov dword [ebp + 0xc], edi
adc dword [ebp + 0xc], 0xfffffd23
nop
or dword [ebp + 0xc], ecx
cmp word [ebp - 0x18], 0xff8b
mov dword [ebp + 0xc], edi
and dword [ebp + 0xc], 0x5ff1eb85
inc dword [ebp + 0xc]
mov dword [ebp + 0xc], esp
sub dword [ebp + 0xc], esi
neg dword [ebp + 0xc]
add dword [ebp + 0xc], ebp
test byte [eax - 8], 0xfa
mov dword [ebp + 0xc], ebx
test dword [eax + 0xc], 0xffffb135
and dword [ebp + 0xc], esp
cmp ebx, edx
mov byte [ebp + 0xc], 0xf9
nop
and dword [ebp + 0xc], 0x6fbe
test ebx, esi
mov byte [ebp + 0xc], 0xc0
and dword [ebp + 0xc], 0x63b1
dec dword [ebp + 0xc]
mov word [ebp + 0xc], 0x2c
sub dword [ebp + 0xc], ebp
test edx, edx
mov dword [ebp + 0xc], ebx
inc dword [ebp + 0xc]
dec dword [ebp + 0xc]
mov dword [ebp + 0xc], 0x7189dff3
sub dword [ebp + 0xc], ebx
test ebx, esp
mov dword [ebp + 0xc], eax
xor dword [ebp + 0xc], ebx
inc dword [ebp + 0xc]
and dword [ebp + 0xc], 0x2aee
mov dword [ebp + 0xc], esp
adc dword [ebp + 0xc], esi
nop
test edx, ebp
sete byte [ebp + 0xc]
cmp dword [ebp - 0xc], esi
mov dword [ebp + 0xc], esp
sbb dword [ebp + 0xc], esi
and word [ebp + 0xc], 0xfffa
add dword [ebp + 0xc], 0x41
mov word [ebp + 0xc], 0xc1f1
or dword [ebp + 0xc], ebx
and word [ebp + 0xc], ax
test ecx, esp
mov dword [ebp + 0xc], edx
or dword [ebp + 0xc], 0x2dd25157
and word [ebp + 0xc], bp
test al, bl
mov word [ebp + 0xc], dx
inc dword [ebp + 0xc]
and dword [ebp + 0xc], 0x9a12670b
cmp ebp, 0xfffffffa
mov dword [ebp + 0xc], 0xfffffffd
add dword [ebp + 0xc], ebx
and dword [ebp + 0xc], 0xa6bb198d
cmp word [ebp - 0xc], 6
mov dword [ebp + 0xc], ebx
test dword [eax - 8], 0xffff842b
and word [ebp + 0xc], 0xfff9
nop
or dword [ebp + 0xc], 0xffffa42b
sete byte [ebp + 0xc]
inc dword [ebp + 0xc]
mov dword [ebp + 0xc], edi
cmp dword [eax + 8], eax
mov dword [ebp + 0xc], esi
sbb dword [ebp + 0xc], edi
and dword [ebp + 0xc], 0xffffffad
mov dword [ebp + 0xc], 0x78
cmp dword [eax + 0x10], esi
mov dword [ebp + 0xc], ebx
setne byte [ebp + 0xc]
mov dword [ebp + 0xc], ebx
add dword [ebp + 0xc], edi
and dword [ebp + 0xc], 0xaa3356c2
or dword [ebp + 0xc], ebx
shr ecx, 8
mov dword [ebp + 0xc], esi
inc dword [ebp + 0xc]
and dword [ebp + 0xc], ebp
cmp esi, ebx
setne byte [ebp + 0xc]
add dword [ebp + 0xc], edx
and dword [ebp + 0xc], 6
test eax, edi
mov dword [ebp + 0xc], esi
neg esi
mov esi, dword [ebp - 8]
shr esi, 0x18
movzx ecx, cl
nop
test bl, al
mov ecx, dword [ecx*4 + 0x47c7c0]
xor ecx, dword [esi*4 + 0x47dc00]
cmp dword [eax + 8], 0x13ff
shr edx, 0x10
movzx edx, dl
xor ecx, dword [edx*4 + 0x47d800]
test edi, eax
mov edx, dword [ebp - 4]
test edi, ecx
movzx esi, dl
test edx, esp
xor ecx, dword [esi*4 + 0x47c3c0]
shr edx, 0x18
test edi, ebx
xor ecx, dword [eax + 0x14]
nop
mov esi, dword [edx*4 + 0x47dc00]
mov edx, dword [ebp - 0xc]
adc dword [ebp - 0x18], esi
nop
sbb dword [ebp - 0x18], esp
inc dword [ebp - 0x18]
mov dword [ebp - 0x18], ecx
mov ecx, dword [ebp - 8]
shr ecx, 0x10
cmp dword [eax + 8], ecx
nop
movzx ecx, cl
xor esi, dword [ecx*4 + 0x47d800]
cmp dword [eax + 4], 0xfffffffa
cmp edx, eax
cmp ebx, 0x37a
mov ecx, dword [ebp - 4]
mov dword [ebp + 8], esi
shl esi, 0xfc
sub esi, 0xffffffad
xor esi, esp
push edi
pop esi
adc esi, ecx
nop
shr edx, 8
test edx, edi
lea esi, [ebx + edx*2]
push esi
pop esi
movzx esi, word [eax - 8]
inc esi
xor esi, edx
mov esi, dword [eax + 0x10]
movzx esi, dl
push ebx
pop edx
shr edx, 0xff
sub edx, edx
mov edx, dword [eax + 0x18]
neg edx
sar edx, 0xa2
and edx, 0xc0a
add edx, 0x2aff74af
mov edx, dword [ebp + 8]
xor edx, dword [esi*4 + 0x47c7c0]
movzx esi, bl
xor edx, dword [esi*4 + 0x47c3c0]
shr ebx, 0x18
or edi, edi
mov esi, dword [ebx*4 + 0x47dc00]
mov ebx, dword [ebp - 8]
xor edx, dword [eax + 0x18]
cmp dword [eax - 8], esp
shr ebx, 8
movzx ebx, bl
cmp edx, dword [ebp - 4]
cmp dword [ebp - 0x18], edi
nop
shr ecx, 0x10
movzx ecx, cl
xor esi, dword [ecx*4 + 0x47d800]
cmp dword [eax], ebx
nop
mov ecx, dword [ebp - 0x18]
or ebx, ebx
xor esi, dword [ebx*4 + 0x47c7c0]
nop
movzx ebx, byte [ebp - 0xc]
xor esi, dword [ebx*4 + 0x47c3c0]
add eax, 0x20
xor esi, dword [eax - 4]
mov dword [ebp + 8], 0x5e
dec dword [ebp + 8]
cmp ecx, esi
sub dword [ebp + 8], 0x7a33
inc dword [ebp + 8]
setne byte [ebp + 8]
push esi
pop ebx
sub dword [ebp + 8], 0xe26b5df3
mov dword [ebp + 8], edi
and dword [ebp + 8], 0xffffd029
mov dword [ebp + 8], edi
and dword [ebp + 8], 0x3839
or dword [ebp + 8], ebp
mov dword [ebp + 8], eax
or dword [ebp + 8], ebx
shr ebx, 0x10
mov dword [ebp + 8], ebx
or dword [ebp + 8], ecx
and dword [ebp + 8], 0xffffffb3
mov dword [ebp + 8], edi
and dword [ebp + 8], 0xffffad45
cmp ebp, esi
cmp ebx, ebx
cmp ebp, 6
mov dword [ebp + 8], esi
sub esi, ebx
xor esi, edx
neg esi
movzx esi, bl
mov ebx, dword [eax + 8]
shl ebx, 0
and ebx, 0xffffbc25
inc ebx
add ebx, ebx
cmp edx, edx
movsx ebx, al
mov esi, dword [esi*4 + 0x47d800]
setl bl
mov ebx, edx
shr ebx, 8
cmp ebp, ebx
movzx ebx, bl
xor esi, dword [ebx*4 + 0x47c7c0]
cmp dword [ebp - 0xc], 0xffffffb2
mov ebx, dword [ebp + 0xc]
shr ebx, 0x18
xor esi, dword [ebx*4 + 0x47dc00]
movzx ebx, cl
test eax, ebp
xor esi, dword [ebx*4 + 0x47c3c0]
cmp eax, eax
test edi, ebx
mov ebx, dword [ebp + 8]
or edx, edx
cmp eax, dword [eax + 0x18]
xor esi, dword [eax]
or ebx, ebx
setne byte [ebp - 0xc]
mov dword [ebp - 0xc], ebx
and dword [ebp - 0xc], 0x4ce1
jmp 0x41e310
mov dword [ebp - 0xc], ebp
or dword [ebp - 0xc], edx
mov byte [ebp - 0xc], cl
and dword [ebp - 0xc], 0xffffff87
shr ebx, 8
add dword [ebp - 0xc], ebp
mov byte [ebp - 0xc], bl
and dword [ebp - 0xc], 0xffffffc0
mov byte [ebp - 0xc], 6
and dword [ebp - 0xc], ebx
or dword [ebp - 0xc], edi
cmp dword [ebp + 0xc], esp
sete byte [ebp - 0xc]
mov dword [ebp - 0xc], esi
nop
xor esi, ebx
push ebp
pop esi
sub esi, esi
shr esi, cl
mov esi, dword [ebp + 8]
xor esi, eax
movzx esi, bl
xor ebx, ebp
lea ebx, [eax + ebx*8]
test esi, ebp
xchg ebx, ebx
push ecx
pop ebx
mov esi, dword [esi*4 + 0x47c7c0]
shr ebx, 0x18
xor esi, dword [ebx*4 + 0x47dc00]
cmp dword [ebx*4 + 0x47dc00], 0xffffd962
mov ebx, dword [ebp + 0xc]
test ebp, eax
shr ebx, 0x10
movzx ebx, bl
xor esi, dword [ebx*4 + 0x47d800]
movzx ebx, dl
test byte [ebp - 0x18], 0xfc
xor esi, dword [ebx*4 + 0x47c3c0]
nop
cmp ecx, 0x983751f4
push ecx
pop ebx
or esi, esi
xor esi, dword [eax + 4]
cmp dword [eax + 0x1c], 0xffffa16d
sete byte [ebp - 8]
mov dword [ebp - 8], 0x2a07
add dword [ebp - 8], 0xffffc70d
mov dword [ebp - 8], edx
and dword [ebp - 8], 0x316688ea
or dword [ebp - 8], 0x74ba
mov word [ebp - 8], si
shr ebx, 0x10
and dword [ebp - 8], 0xffffa946
or dword [ebp - 8], ebx
test bl, dl
mov dword [ebp - 8], eax
setne byte [ebp - 8]
mov dword [ebp - 8], esi
neg esi
mov esi, dword [ebp - 4]
sbb esi, ebp
movzx esi, bx
movzx ebx, bl
push ebx
pop esi
shr esi, 0x5a
and esi, 0xffffb5f4
test cl, 0x22
push edx
pop esi
shr esi, 0x18
nop
mov esi, dword [esi*4 + 0x47dc00]
xor esi, dword [ebx*4 + 0x47d800]
cmp ebx, ecx
mov ebx, dword [ebp + 0xc]
cmp eax, edx
test bl, cl
shr ebx, 8
movzx ebx, bl
test edx, edi
xor esi, dword [ebx*4 + 0x47c7c0]
movzx ebx, byte [ebp + 8]
xor esi, dword [ebx*4 + 0x47c3c0]
nop
shr edx, 0x10
xor esi, dword [eax + 8]
mov dword [ebp - 4], edi
adc dword [ebp - 4], edx
nop
movzx edx, dl
mov dword [ebp - 4], 0x1c1e6c72
inc dword [ebp - 4]
cmp dword [eax + 4], 0xffffffd3
mov byte [ebp - 4], dl
neg dword [ebp - 4]
sbb dword [ebp - 4], eax
add dword [ebp - 4], edi
cmp dword [eax + 0x10], edx
mov dword [ebp - 4], esi
sbb esi, eax
imul esi, dword [eax + 0x18]
sub esi, 0xafec355e
cmp dword [edx*4 + 0x47d800], eax
lea esi, [ecx + ebp*2 + 0x79]
mov esi, dword [ebp + 8]
shr esi, 0x18
test ecx, ecx
mov ebx, dword [esi*4 + 0x47dc00]
nop
cmp ebp, 0xffffffb7
xor ebx, dword [edx*4 + 0x47d800]
movzx edx, byte [ebp + 0xc]
shr ecx, 8
movzx ecx, cl
nop
xor ebx, dword [ecx*4 + 0x47c7c0]
nop
test eax, edx
xor ebx, dword [edx*4 + 0x47c3c0]
nop
xor ebx, dword [eax + 0xc]
mov ecx, dword [ebp - 0x18]
inc esi
mov cl, bl
sub edx, 0xffffec8d
inc esi
mov dx, di
neg ecx
add edx, 0x1f
inc esi
dec edx
inc ecx
add ecx, ebx
cmp edi, 0xc
jle 0x41e70f
mov edi, dword [ebp - 0xc]
push esp
pop edx
push ebx
pop ecx
xor esi, ebp
inc esi
shl esi, 0xfb
xor edx, ebx
inc edx
push esp
pop edx
lea edx, [edi + ecx*2]
push ebx
pop edx
shr ecx, 0x10
sub esi, 0x74df
add esi, 0x74aa
sub esi, 0x33
mov esi, dword [ebp - 4]
push ecx
pop esi
cmp esi, ecx
mov edx, dword [eax + 0x18]
lea edx, [ecx*8 + 5]
add edx, esi
mov edx, esp
movzx edx, cl
add esi, 1
mov esi, dword [edx*4 + 0x47d800]
xor esi, esi
mov ecx, 0x62f14ec2
sub ecx, 0x62f14f06
lea esi, [eax*4 - 0x1297]
sub ecx, 0xffffffff
mov esi, 0xfffffffd
cmp ecx, esi
setne cl
mov esi, dword [edx*4 + 0x47d800]
mov ecx, dword [ebp - 4]
shr ecx, 8
movzx ecx, cl
xor esi, dword [ecx*4 + 0x47c7c0]
cmp esp, ecx
mov ecx, dword [ebp - 8]
push edi
pop edx
shr edx, 0x18
cmp sp, bx
nop
xor esi, dword [edx*4 + 0x47dc00]
movzx edx, cl
xor esi, dword [edx*4 + 0x47c3c0]
cmp dword [edx*4 + 0x47c3c0], 0x73c9
test bl, 4
push ebx
pop edx
xor esi, dword [eax + 0x10]
add dword [ebp + 0xc], ebx
and dword [ebp + 0xc], 0x50b04861
mov dword [ebp + 0xc], esi
add dword [ebp + 0xc], edx
mov dword [ebp + 0xc], 0xffe10fa4
add dword [ebp + 0xc], 0xffffffbe
and dword [ebp + 0xc], 0xfffff75b
or dword [ebp + 0xc], ecx
mov dword [ebp + 0xc], esp
shr edx, 8
and dword [ebp + 0xc], 0x5b1bcf2b
or dword [ebp + 0xc], ecx
test ecx, esp
mov dword [ebp + 0xc], esp
setne byte [ebp + 0xc]
nop
sub dword [ebp + 0xc], ebx
mov dword [ebp + 0xc], esi
movzx esi, word [ebp - 0x14]
mov esi, dword [eax + 0x14]
xor esi, eax
mov esi, dword [ebp - 0x10]
call fcn.0041e01d
mov edi, dword [ebp + 0xc]
mov ebx, dword [ebp + 8]
shr edi, 0x18
xor esi, dword [edi*4 + 0x47dc00]
movzx edi, cl
xor esi, dword [edi*4 + 0x47c3c0]
xor esi, dword [eax]
dec dword [ebp - 0xc]
cmp ebp, 0x50a7
mov dword [ebp - 0xc], esi
lea esi, [ecx]
sar esi, 0x5a
shr ebx, 8
push edi
pop esi
xor esi, ecx
movzx esi, bl
test esp, esi
lea ebx, [ebx + 0x57]
mov esi, dword [esi*4 + 0x47c7c0]
mov ebx, dword [ebp + 0xc]
shr ebx, 0x10
test esp, ecx
mov edi, ecx
nop
shr edi, 0x18
xor esi, dword [edi*4 + 0x47dc00]
movzx edi, bl
inc ebx
mov ebx, 0xfd83c853
xor esi, dword [edi*4 + 0x47d800]
shr ebx, 4
shr ebx, 0x9d
movzx edi, dl
inc ebx
mov ebx, edi
xor esi, dword [edi*4 + 0x47c3c0]
setl bl
push ecx
pop ebx
xor esi, dword [eax + 4]
shr ebx, 0x10
movzx edi, bl
add ebx, ecx
adc ebx, 0xffffec16
mov ebx, dword [ebp + 0xc]
mov dword [ebp - 8], esi
push edx
pop esi
shr esi, 0x18
test ecx, esi
mov esi, dword [esi*4 + 0x47dc00]
xor esi, dword [edi*4 + 0x47d800]
shr ebx, 8
movzx edi, bl
pushal
popal
shr ebx, 0x57
xor esi, dword [edi*4 + 0x47c7c0]
shr ebx, 0xea
lea ebx, [eax + ecx*2 - 0x641b42ab]
mov ebx, dword [ebp + 8]
movzx edi, bl
xor esi, dword [edi*4 + 0x47c3c0]
shr ebx, 0x18
nop
mov ebx, dword [ebx*4 + 0x47dc00]
test esp, ebp
xor esi, dword [eax + 8]
shr edx, 0x10
movzx edx, dl
nop
xor ebx, dword [edx*4 + 0x47d800]
movzx edx, byte [ebp + 0xc]
shr ecx, 8
movzx ecx, cl
xor ebx, dword [ecx*4 + 0x47c7c0]
cmp esp, ebx
sbb dword [ebp - 4], ebp
mov dword [ebp - 4], esi
sar esi, 0x42
add esi, 0xfffffffe
xor ebx, dword [edx*4 + 0x47c3c0]
xor ebx, dword [eax + 0xc]
add esi, 0x5d
lea esi, [ecx + ebx*8]
not ecx
test edx, ebx
mov ecx, dword [ebp - 0xc]
mov edx, ebx
lea esi, [edi + edi + 0xa20]
sar edi, 0xa9
shr edx, 0x10
mov edi, dword [ebp + 0x10]
movzx edx, dl
mov edi, dword [eax + 0x10]
shr ecx, 0x18
sub esi, 0xfffffffc
shl esi, 0xf3
mov ecx, dword [ecx*4 + 0x47f000]
xor edi, ebp
shl ecx, 8
add esi, 0xfffffff9
and edi, edi
xor ecx, dword [edx*4 + 0x47f000]
sub esi, 0x31
inc edi
mov edx, dword [ebp - 4]
and edi, 0xffffff91
or edi, 5
shr edx, 8
mov edi, dword [eax + 0x1c]
lea edi, [edi - 0x303f1dd4]
movzx edx, dl
shl ecx, 8
shr edi, 0x9a
push ecx
pop esi
xor ecx, dword [edx*4 + 0x47f000]
inc esi
mov edx, dword [ebp - 8]
neg edi
movzx esi, dl
mov edi, dword [eax + 0x1c]
xor edi, ebp
shr edx, 0x18
mov edi, dword [ebp - 8]
and edi, 0xfffffffb
shl ecx, 8
sub edi, 0xffffa498
sbb edi, ebx
xor ecx, dword [esi*4 + 0x47f000]
cmp ebp, 0
sbb edi, ebx
mov esi, dword [edx*4 + 0x47f000]
mov edx, dword [ebp - 0xc]
add edi, 0xcb3
mov edi, ebp
shr edx, 0x10
xchg edi, edi
shl esi, 8
add edi, 0xaa3e0e45
mov edi, dword [ebp + 0xc]
movzx edx, dl
inc edi
mov edi, dword [eax + 4]
xor esi, dword [edx*4 + 0x47f000]
lea edi, [ecx + ecx*4]
inc edi
push ebx
pop edx
lea edi, [edi + ebp*2 + 0x6d]
sar edi, 7
shr edx, 8
mov edi, edx
nop
shl esi, 8
add edi, dword [eax + 0xc]
mov edi, dword [ebp + 0xc]
movzx edx, dl
inc edi
add edi, 0xffffde27
xor esi, dword [edx*4 + 0x47f000]
mov edi, dword [eax + 0x14]
xor edi, esi
movzx edx, byte [ebp - 4]
shl esi, 8
movzx edi, word [eax + 0x10]
or dword [ebp + 8], esi
mov dword [ebp + 8], esi
sub edi, 0xffffff91
sbb edi, ebx
xor esi, dword [edx*4 + 0x47f000]
inc edi
cmp esp, eax
mov edx, dword [ebp - 4]
not edi
xor esi, dword [eax + 0x14]
mov dword [ebp + 0xc], 1
or edi, ebx
shr edx, 0x18
add edi, 0xad5b01f8
lea edi, [ebx + ebx*4 - 0x26]
mov dword [ebp + 0xc], esi
mov esi, dword [edx*4 + 0x47f000]
mov edx, dword [ebp - 8]
inc edi
test byte [eax], al
shr edx, 0x10
lea edi, [eax*4 - 0x3b]
mov edi, dword [ebp - 8]
shl esi, 8
add edi, eax
mov edi, dword [ebp - 0x18]
movzx edx, dl
inc edi
mov edi, esi
xor esi, dword [edx*4 + 0x47f000]
inc edi
cmp edx, ebp
mov edx, dword [ebp - 0xc]
xor edi, ebx
inc edi
shl esi, 8
xor edi, esp
inc edi
mov dword [ebp + 8], esi
inc edi
mov esi, dword [eax + 8]
shr edx, 8
mov edi, dword [ebp - 0x14]
xor esi, ebx
movzx esi, dl
xor edi, ebp
inc edx
mov edx, dword [ebp + 8]
lea edi, [eax + eax - 0x60b1a312]
mov edi, dword [eax + 0x1c]
xor edx, dword [esi*4 + 0x47f000]
mov edi, ebx
lea edi, [ecx + edx*4]
movzx esi, bl
shr edi, 0x5a
sub edi, edi
xor ecx, dword [eax + 0x10]
test dl, al
shr ebx, 0x18
mov edi, dword [ebp - 4]
sub edi, 0xffffffd2
shl edx, 8
sub edi, dword [eax + 0x1c]
sbb edi, 0x4655ec15
xor edx, dword [esi*4 + 0x47f000]
cmp ebp, eax
sar edi, 1
mov esi, dword [ebx*4 + 0x47f000]
mov ebx, dword [ebp - 4]
adc edi, ecx
xor edx, dword [eax + 0x18]
push edx
pop edi
neg edi
shr ebx, 0x10
mov edi, dword [ebp + 0xc]
xor edi, esi
movzx edi, bl
xor ebx, ecx
cmp ebx, edi
mov ebx, dword [ebp - 8]
and dword [ebp + 8], 0xfffffffb
mov dword [ebp + 8], ebp
shl esi, 8
add dword [ebp + 8], esp
test edi, edx
mov dword [ebp + 8], esi
xor esi, dword [edi*4 + 0x47f000]
mov dword [ebp + 8], ebp
and dword [ebp + 8], 0x30
shr ebx, 8
mov dword [ebp + 8], 0x875c1b33
and dword [ebp + 8], 0x5f0a
shl esi, 8
cmp dword [edi*4 + 0x47f000], esi
nop
mov dword [ebp + 8], esi
xor esi, edx
shr esi, 0x5d
movzx esi, bl
xor ebx, edi
inc ebx
mov ebx, dword [ebp + 8]
xor ebx, dword [esi*4 + 0x47f000]
nop
movzx esi, byte [ebp - 0xc]
shl ebx, 8
test byte [ebp - 0xc], 0x2f
xor ebx, dword [esi*4 + 0x47f000]
cmp ecx, ecx
cmp esi, 0xffffcd7d
mov esi, dword [ebp + 0x10]
xor ebx, dword [eax + 0x1c]
cmp esi, 2
push ecx
pop eax
shr eax, 0x18
test esi, ebx
mov byte [esi], al
shl eax, 0x19
add eax, ebx
push ecx
pop eax
shr eax, 0x10
test byte [ebp - 0x18], bl
mov byte [esi + 1], al
push ecx
pop eax
cmp dword [ebp + 0x10], ecx
shr eax, 8
test ecx, edx
mov byte [esi + 3], cl
mov byte [esi + 2], al
adc eax, eax
mov eax, dword [ebp + 0xc]
push eax
pop ecx
cmp dword [ebp + 8], esp
shr ecx, 0x18
test eax, ecx
mov byte [esi + 4], cl
mov ecx, eax
shr ecx, 0x10
test eax, edi
mov byte [esi + 5], cl
mov ecx, eax
mov byte [esi + 7], al
and eax, 4
or eax, ebp
shr ecx, 8
lea eax, [ecx + 0x2f]
shl eax, cl
push edx
pop eax
shr eax, 0x18
test edx, edx
mov byte [esi + 6], cl
mov byte [esi + 8], al
adc ecx, 0xffffffc4
dec ecx
mov ecx, edx
shl eax, 0x8f
push esi
pop eax
shr ecx, 0x10
lea eax, [esi*4 + 0x55]
xor eax, esi
mov eax, edx
shr eax, 8
test word [ebp + 8], 1
mov byte [esi + 9], cl
movsx ecx, cl
mov byte [esi + 0xb], dl
mov byte [esi + 0xa], al
push ebx
pop ecx
mov edx, ebx
mov eax, ebx
cmp dword [ebp - 4], ebx
shr ecx, 0x18
shr edx, 0x10
shr eax, 8
pop edi
cmp dword [ebp + 0xc], 0x2cc
mov byte [esi + 0xf], bl
cmp dword [ebp + 0x10], 0x42fa
mov byte [esi + 0xc], cl
mov byte [esi + 0xd], dl
mov byte [esi + 0xe], al
movzx ebx, word [ebp + 8]
pop esi
pop ebx
nop
mov esp, ebp
test al, dl
test edx, ecx
pop ebp
nop
ret