Function at 0x409a60
Capabilities:
Create thread
Read file on windows
Write file on windows

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff8
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
mov eax, 0x10a0
call fcn.00414a40
mov eax, dword [0x43f040]
xor eax, ebp
mov dword [ebp - 4], eax
push esi
push edi
push 0x63
lea eax, [ebp - 0x7f]
mov dword [ebp - 0x104c], edx
push 0
push eax
mov esi, ecx
mov dword [ebp - 0x1090], 0
mov byte [ebp - 0x80], 0
call fcn.00415680
add esp, 0xc
cmp dword [0x92597c], 2
jne 0x409b2b
mov eax, dword [0x819488]
sub eax, 2
je 0x409af8
sub eax, 0x20
jne 0x409b2b
movups xmm0, xmmword [str.ether__len__10___0x10_or_ether__len__10___0x20]
mov ax, word [0x43c3e8]
mov word [ebp - 0x50], ax
mov al, byte [0x43c3ea]
movups xmmword [ebp - 0x80], xmm0
movups xmm0, xmmword [0x43c3c8]
movups xmmword [ebp - 0x70], xmm0
movups xmm0, xmmword [0x43c3d8]
jmp 0x409b24
movups xmm0, xmmword [str.ether__len__10___0x40_or_ether__len__10___0x80]
mov ax, word [0x43c3b4]
mov word [ebp - 0x50], ax
mov al, byte [0x43c3b6]
movups xmmword [ebp - 0x80], xmm0
movups xmm0, xmmword [0x43c394]
movups xmmword [ebp - 0x70], xmm0
movups xmm0, xmmword [0x43c3a4]
mov byte [ebp - 0x4e], al
movups xmmword [ebp - 0x60], xmm0
mov edi, dword [sym.imp.wpcap.dll_pcap_open_live]
lea eax, [ebp - 0x680]
push eax
push 0x3e8
push 1
push 0x10000
push esi
call edi
add esp, 0x14
mov dword [ebp - 0x1074], eax
test eax, eax
jne 0x409b97
push esi
push str._nUnable_to_open_the_adapter._The_interface_is_not_supported_n_hs_n
lea eax, [ebp - 0x380]
push 0x100
push eax
call fcn.00401170
add esp, 0x10
lea eax, [ebp - 0x380]
push 0
push 0x43b47c
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0041418c
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
lea edx, [ebp - 0x80]
mov ecx, eax
call fcn.00404e00
test eax, eax
js 0x40ca92
cmp dword [0x92597c], 1
jne 0x409bf1
mov esi, dword [ebp - 0x104c]
lea eax, [ebp - 0x680]
push eax
push 0x3e8
push 1
push 0x10000
push esi
call edi
add esp, 0x14
mov dword [ebp - 0x1090], eax
test eax, eax
je 0x409b54
lea edx, [ebp - 0x80]
mov ecx, eax
call fcn.00404e00
test eax, eax
js 0x40ca92
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0x104
lea eax, [ebp - 0xc70]
mov byte [0x59bd68], 1
push eax
push 0
call dword [sym.imp.KERNEL32.dll_GetModuleFileNameW]
lea eax, [ebp - 0xc70]
push 0x5c
push eax
call fcn.004155d2
add esp, 8
test eax, eax
je 0x409c2e
xor ecx, ecx
mov word [eax], cx
xor ecx, ecx
movzx eax, word [ebp + ecx - 0xc70]
lea ecx, [ecx + 2]
mov word [ebp + ecx - 0xa6a], ax
test ax, ax
jne 0x409c30
lea edi, [ebp - 0xa68]
add edi, 0xfffffffe
mov ax, word [edi + 2]
add edi, 2
test ax, ax
jne 0x409c51
mov ecx, 7
lea eax, [ebp - 0xa68]
mov esi, str.Alarm_Setting
rep movsd dword es:[edi], dword [esi]
push 0x43a2d4
push eax
lea eax, [ebp - 0x103c]
push eax
movsw word es:[edi], word [esi]
call fcn.0041781f
add esp, 0xc
test eax, eax
je 0x409cc3
lea ecx, [ebp - 0xa68]
cmp eax, 2
push ecx
mov edx, str.File_non_found:_error__d__s_n
mov ecx, str.Error_reading_file:_error__d__s_n
push eax
cmove ecx, edx
push ecx
call fcn.00401100
add esp, 0xc
lea eax, [ebp - 0xa68]
push 0
push str.Error_Open
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxW]
jmp 0x409d02
mov eax, dword [ebp - 0x103c]
test eax, eax
je 0x409d02
push eax
call fcn.0041d9f2
add esp, 4
test eax, eax
jne 0x409cf4
push dword [ebp - 0x103c]
push 1
push 0x88
push 0x59bd68
call fcn.0041dc77
add esp, 0x10
push dword [ebp - 0x103c]
call fcn.00418185
add esp, 4
mov edi, dword [sym.imp.KERNEL32.dll_InitializeCriticalSection]
push 0x925960
mov byte [0x43fb00], 0
mov byte [0x59ab4b], 0
call edi
cmp byte [0x59ab4e], 0
mov ecx, 0x408770
push 0
mov eax, 0x4069e0
cmovne eax, ecx
push 0
push eax
call fcn.0041cb1a
add esp, 0xc
push 0x64
call dword [sym.imp.KERNEL32.dll_Sleep]
mov ecx, dword [0x925b90]
xorps xmm0, xmm0
movaps xmmword [0x59ab20], xmm0
movaps xmmword [0x59ab30], xmm0
movq qword [0x59ab40], xmm0
movaps xmmword [0x819460], xmm0
movaps xmmword [0x819470], xmm0
movq qword [0x819480], xmm0
movaps xmmword [0x71d310], xmm0
movaps xmmword [0x71d320], xmm0
movq qword [0x71d330], xmm0
movaps xmmword [0x59bdf0], xmm0
movaps xmmword [0x59be00], xmm0
movq qword [0x59be10], xmm0
movaps xmmword [0x8194f0], xmm0
movaps xmmword [0x819500], xmm0
movq qword [0x819510], xmm0
movaps xmmword [0x925930], xmm0
movaps xmmword [0x925940], xmm0
movq qword [0x925950], xmm0
mov eax, dword [ecx + 4]
mov dword [0x9154c0], 0
mov dword [0x59be48], 0
mov dword [eax], 0
mov eax, dword [ecx]
test eax, eax
je 0x409e0c
mov esi, dword [eax]
push 0x138
push eax
call fcn.00414618
add esp, 8
mov eax, esi
test esi, esi
jne 0x409df6
mov eax, dword [0x925b90]
mov esi, dword [0x92597c]
mov dword [eax], eax
mov eax, dword [0x925b90]
mov dword [eax + 4], eax
mov dword [0x925b94], 0
cmp esi, 1
jne 0x409e52
push 0x8194d8
call edi
push dword [ebp - 0x1090]
push 0
push 0x404f90
call fcn.0041cb1a
mov esi, dword [0x92597c]
add esp, 0xc
push 0x158
lea eax, [ebp - 0xdd0]
mov dword [ebp - 0x105c], 0
push 0
push eax
call fcn.00415680
add esp, 0xc
xor eax, eax
mov dword [ebp - 0x106c], eax
xor dl, dl
mov byte [ebp - 0x180], al
mov byte [ebp - 0x1031], dl
push 0xfe
push eax
lea eax, [ebp - 0x17f]
push eax
call fcn.00415680
add esp, 0xc
mov word [ebp - 0x1078], 0x81
mov word [ebp - 0x1040], 0x9288
mov word [ebp - 0x1068], 8
mov word [ebp - 0x1064], 0x608
mov word [ebp - 0x1070], 0xcc88
mov word [ebp - 0x107c], 0xe388
mov dword [ebp - 0xc], 0xffffffff
mov word [ebp - 8], 0xffff
mov dword [ebp - 0x14], 0xcf0e01
mov word [ebp - 0x10], 0
mov byte [ebp - 0x1051], 1
mov dword [ebp - 0x1060], 0
cmp esi, 4
jne 0x409ffe
mov dword [ebp - 0x1060], 0x1c
lea eax, [ebp - 0x1048]
push eax
lea eax, [ebp - 0x1058]
push eax
push dword [ebp - 0x1074]
call dword [sym.imp.wpcap.dll_pcap_next_ex]
mov esi, eax
add esp, 0xc
mov dword [ebp - 0x103c], esi
test esi, esi
js 0x40c9dd
mov dword [ebp - 0x1094], 0x7eff
nop dword [eax + eax]
cmp byte [0x43fb00], 1
je 0x40c9b4
test esi, esi
je 0x40c933
mov edi, dword [ebp - 0x1048]
mov eax, edi
mov edx, eax
mov dword [ebp - 0x104c], eax
mov eax, dword [0x92597c]
mov dword [ebp - 0x1038], edx
sub eax, 2
je 0x40b535
sub eax, 1
je 0x40b3fb
sub eax, 1
je 0x40b2f1
mov eax, dword [ebp - 0x1058]
mov eax, dword [eax + 4]
cdq
mov ecx, eax
mov esi, edx
mov eax, dword [ebp - 0x1058]
mov edx, 0xf4240
mov eax, dword [eax]
imul edx
add ecx, eax
mov dword [0x71d308], ecx
mov ecx, edi
adc esi, edx
mov dword [0x71d30c], esi
mov esi, dword [ebp - 0x1058]
mov eax, dword [esi + 8]
mov dl, byte [ecx + eax - 2]
mov byte [ebp - 0x1032], dl
lea edx, [eax + 0xc]
movzx eax, word [ecx + eax - 4]
mov dword [ebp - 0x1044], eax
xor eax, eax
mov dword [ebp - 0x1050], edx
mov dword [ebp - 0x1038], eax
jmp 0x40b68e
cmp esi, 1
jne 0x409f11
lea eax, [ebp - 0x1048]
push eax
lea eax, [ebp - 0x1058]
push eax
push dword [ebp - 0x1074]
call dword [sym.imp.wpcap.dll_pcap_next_ex]
mov esi, eax
add esp, 0xc
mov dword [ebp - 0x103c], esi
test esi, esi
js 0x40c9dd
mov dword [ebp - 0x1094], 0x7eff
nop
cmp byte [0x43fb00], 1
je 0x40c9b4
test esi, esi
je 0x40b2bf
push 0x8194d8
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov eax, dword [ebp - 0x1058]
mov edi, dword [ebp - 0x1048]
mov dword [ebp - 0x1044], edi
mov eax, dword [eax + 4]
cdq
mov ecx, eax
mov esi, edx
mov eax, dword [ebp - 0x1058]
mov edx, 0xf4240
mov eax, dword [eax]
imul edx
add ecx, eax
mov dword [0x71d308], ecx
adc esi, edx
mov dword [0x71d30c], esi
mov esi, dword [ebp - 0x1058]
mov eax, dword [esi + 8]
mov cl, byte [eax + edi - 2]
lea edx, [eax + 0xc]
movzx eax, word [eax + edi - 4]
mov dword [ebp - 0x1060], eax
movzx eax, ax
mov dword [ebp - 0x104c], eax
mov eax, dword [0x92595c]
mov byte [ebp - 0x1031], cl
mov dword [ebp - 0x1038], edx
sub eax, 1
je 0x40a297
sub eax, 1
je 0x40a172
sub eax, 1
jne 0x40a336
mov eax, dword [0x819458]
movups xmm0, xmmword [esi]
imul ecx, eax, 0x628
movups xmmword [ecx + 0x59c0a0], xmm0
mov edx, dword [esi + 8]
cmp edx, 0x618
jbe 0x40a124
mov esi, dword [ebp - 0x1048]
lea edi, [ecx + 0x59c0b0]
mov ecx, 0x186
rep movsd dword es:[edi], dword [esi]
mov edi, dword [ebp - 0x1044]
jmp 0x40a13a
push edx
lea eax, [ecx + 0x59c0b0]
push edi
push eax
call fcn.004157e0
mov eax, dword [0x819458]
add esp, 0xc
inc eax
mov dword [0x819458], eax
cmp eax, 0x3e8
jl 0x40a151
mov dword [0x819458], 0
mov eax, dword [0x59be18]
mov edx, dword [ebp - 0x1038]
cmp eax, 0x3e8
jge 0x40a336
inc eax
mov dword [0x59be18], eax
jmp 0x40a336
lea ecx, [ebp - 0x580]
call fcn.00404ef0
test eax, eax
js 0x40c965
mov ecx, dword [0x59be18]
mov dword [0x819424], ecx
mov dword [0x925978], 0
test ecx, ecx
jle 0x40a246
mov eax, dword [0x819458]
cmp ecx, eax
jle 0x40a1b5
sub eax, ecx
add eax, 0x3e8
jmp 0x40a1b7
sub eax, ecx
mov dword [0x925978], eax
cmp eax, 0x3e8
jle 0x40a1d2
mov dword [0x925978], 0x3e8
mov eax, 0x3e8
imul eax, eax, 0x628
mov esi, dword [eax + 0x59c0a8]
cmp esi, 0x618
jbe 0x40a1f5
mov dword [eax + 0x59c0a8], 0x618
mov esi, 0x618
movups xmm0, xmmword [eax + 0x59c0a0]
push esi
lea eax, [eax + 0x59c0b0]
push eax
push 0x915708
movups xmmword [0x9156f8], xmm0
call fcn.004157e0
add esp, 0xc
lea eax, [esi + 0x10]
push dword [0x819518]
push 1
push eax
push 0x9156f8
call fcn.0041d86c
mov ecx, dword [0x59be18]
add esp, 0x10
dec ecx
mov dword [0x59be18], ecx
test ecx, ecx
jg 0x40a1a3
mov esi, dword [ebp - 0x1058]
movups xmm0, xmmword [esi]
movups xmmword [0x9156f8], xmm0
push dword [esi + 8]
push dword [ebp - 0x1048]
push 0x915708
call fcn.004157e0
mov eax, dword [esi + 8]
add esp, 0xc
add eax, 0x10
push dword [0x819518]
push 1
push eax
push 0x9156f8
call fcn.0041d86c
add esp, 0x10
mov dword [0x92595c], 1
jmp 0x40a330
movups xmm0, xmmword [esi]
movups xmmword [0x9156f8], xmm0
push dword [esi + 8]
push edi
push 0x915708
call fcn.004157e0
mov eax, dword [esi + 8]
add esp, 0xc
add eax, 0x10
push dword [0x819518]
push 1
push eax
push 0x9156f8
call fcn.0041d86c
mov eax, dword [0x59be48]
add esp, 0x10
inc eax
mov dword [0x59be48], eax
cmp eax, 0x3e8
jle 0x40a330
push 0
call fcn.0041d994
add esp, 4
cmp edx, dword [0x92592c]
jl 0x40a330
jg 0x40a2fc
cmp eax, dword [0x925928]
jbe 0x40a330
mov eax, dword [0x819518]
test eax, eax
je 0x40a31c
push eax
call fcn.004180b9
add esp, 4
push dword [0x819518]
call fcn.00418185
add esp, 4
mov dword [0x92595c], 3
mov dword [0x59be48], 0
mov edx, dword [ebp - 0x1038]
cmp byte [ebp - 0x1051], 0
je 0x40a35d
mov eax, dword [0x71d308]
mov ecx, dword [0x71d30c]
mov dword [0x819548], eax
xor al, al
mov dword [0x81954c], ecx
mov byte [ebp - 0x1051], al
cmp byte [0x59ab48], 0
je 0x40a4d4
xorps xmm0, xmm0
mov byte [0x59ab48], 0
movaps xmmword [0x819550], xmm0
movaps xmmword [0x819560], xmm0
movq qword [0x819570], xmm0
movaps xmmword [0x9156d0], xmm0
movaps xmmword [0x9156e0], xmm0
movq qword [0x9156f0], xmm0
movaps xmmword [0x71d340], xmm0
movaps xmmword [0x71d350], xmm0
movq qword [0x71d360], xmm0
movaps xmmword [0x59ab50], xmm0
movaps xmmword [0x59ab60], xmm0
movq qword [0x59ab70], xmm0
movaps xmmword [0x59c070], xmm0
movaps xmmword [0x59c080], xmm0
movq qword [0x59c090], xmm0
movaps xmmword [0x819520], xmm0
movaps xmmword [0x819530], xmm0
movq qword [0x819540], xmm0
movaps xmmword [0x925900], xmm0
movaps xmmword [0x925910], xmm0
movq qword [0x925920], xmm0
movaps xmmword [0x9258d0], xmm0
movaps xmmword [0x9258e0], xmm0
movq qword [0x9258f0], xmm0
movaps xmmword [0x819430], xmm0
movaps xmmword [0x819440], xmm0
movq qword [0x819450], xmm0
movaps xmmword [0x59be20], xmm0
movaps xmmword [0x59be30], xmm0
movq qword [0x59be40], xmm0
movaps xmmword [0x59ab20], xmm0
movaps xmmword [0x59ab30], xmm0
movq qword [0x59ab40], xmm0
movaps xmmword [0x819460], xmm0
movaps xmmword [0x819470], xmm0
movq qword [0x819480], xmm0
movaps xmmword [0x71d310], xmm0
movaps xmmword [0x71d320], xmm0
movq qword [0x71d330], xmm0
movaps xmmword [0x59bdf0], xmm0
movaps xmmword [0x59be00], xmm0
movq qword [0x59be10], xmm0
movaps xmmword [0x8194f0], xmm0
movaps xmmword [0x819500], xmm0
movq qword [0x819510], xmm0
movaps xmmword [0x925930], xmm0
movaps xmmword [0x925940], xmm0
movq qword [0x925950], xmm0
mov eax, edx
cdq
mov esi, eax
add dword [0x59ab28], esi
adc dword [0x59ab2c], edx
add dword [0x819558], 1
adc dword [0x81955c], 0
test byte [edi], 1
je 0x40a906
mov eax, dword [edi]
lea ecx, [ebp - 0xc]
cmp eax, dword [ecx]
jne 0x40a5a4
movzx eax, word [edi + 4]
cmp ax, word [ecx + 4]
jne 0x40a5a4
cmp byte [0x59bd89], 0
jne 0x40a564
mov ax, word [edi + 0xc]
lea ecx, [ebp - 0x1064]
cmp ax, word [ecx]
jne 0x40a564
mov eax, dword [edi + 6]
mov ecx, 0x59c060
cmp eax, dword [ecx]
jne 0x40a564
movzx eax, word [edi + 0xa]
cmp ax, word [ecx + 4]
jne 0x40a564
cmp dword [0x92597c], 1
jne 0x40b2bf
mov edi, dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push 0x8194d8
call edi
jmp 0x40b2bf
add dword [0x819528], 1
lea ecx, [ebp - 0x1064]
adc dword [0x81952c], 0
add dword [0x8194f8], esi
adc dword [0x8194fc], edx
mov ax, word [edi + 0xc]
cmp ax, word [ecx]
jne 0x40aedd
add dword [0x925908], 1
adc dword [0x92590c], 0
jmp 0x40af96
mov ax, word [edi + 0xc]
lea ecx, [ebp - 0x1070]
cmp ax, word [ecx]
je 0x40aedd
add dword [0x59c078], 1
lea ecx, [ebp - 0x107c]
adc dword [0x59c07c], 0
add dword [0x59bdf8], esi
adc dword [0x59bdfc], edx
mov ax, word [edi + 0xc]
cmp ax, word [ecx]
jne 0x40a5f3
add dword [0x819438], 1
adc dword [0x81943c], 0
jmp 0x40af96
mov eax, dword [ebp - 0x1048]
mov ecx, dword [ebp - 0x105c]
mov edi, dword [ebp - 0x105c]
movzx ecx, byte [eax + ecx + 1]
movzx eax, word [eax + edi]
mov edi, dword [ebp - 0x1044]
shl ax, 8
or cx, ax
movzx ecx, cx
movzx eax, word [edi + 0xc]
lea edi, [ebp - 0x1040]
cmp ax, word [edi]
mov edi, dword [ebp - 0x1044]
jne 0x40a661
lea eax, [ecx - 0x100]
cmp ax, word [ebp - 0x1094]
ja 0x40a661
add dword [0x59be28], 1
adc dword [0x59be2c], 0
add dword [0x925938], esi
adc dword [0x92593c], edx
jmp 0x40af96
mov ax, word [edi + 0xc]
lea edx, [ebp - 0x1040]
cmp ax, word [edx]
je 0x40a67d
mov ax, word [edi + 0x10]
cmp ax, word [edx]
jne 0x40aedd
mov ax, word [edi + 0xc]
lea edx, [ebp - 0x1040]
cmp ax, word [edx]
jne 0x40a6a6
lea eax, [ecx + 0x103]
cmp ax, 2
ja 0x40a6a6
add dword [0x9258d8], 1
adc dword [0x9258dc], 0
mov eax, 0xfefe
cmp cx, ax
jne 0x40aedd
movzx eax, byte [edi + 0xb]
push eax
movzx eax, byte [edi + 0xa]
push eax
movzx eax, byte [edi + 9]
push eax
movzx eax, byte [edi + 8]
push eax
movzx eax, byte [edi + 7]
push eax
movzx eax, byte [edi + 6]
push eax
lea eax, [ebp - 0x102c]
push str._02x:_02x:_02x:_02x:_02x:_02x
push eax
call fcn.00401250
mov eax, dword [edi]
lea ecx, [ebp - 0x14]
add esp, 0x20
cmp eax, dword [ecx]
jne 0x40a8e7
movzx eax, word [edi + 4]
cmp ax, word [ecx + 4]
jne 0x40a8e7
mov edx, dword [ebp - 0x1048]
mov edi, dword [ebp - 0x105c]
cmp byte [edx + edi + 2], 5
jne 0x40a8e7
cmp byte [edx + edi + 3], 0
jne 0x40a8e7
mov ax, word [edx + edi + 0xe]
mov ch, al
mov cl, ah
mov eax, dword [ebp - 0x1058]
movzx ecx, cx
mov esi, ecx
cmp esi, dword [eax + 8]
jae 0x40a8e7
mov eax, 0x100
cmp cx, ax
jae 0x40a8e7
xor ecx, ecx
test esi, esi
je 0x40a771
add edx, 0x10
add edx, edi
nop dword [eax]
mov al, byte [edx]
lea edx, [edx + 1]
mov byte [ebp + ecx - 0x101a], al
inc ecx
cmp ecx, esi
jl 0x40a760
push 0
mov byte [ebp + ecx - 0x101a], 0
call fcn.0041d994
mov edi, dword [0x925b90]
add esp, 4
mov dword [ebp - 0xf18], eax
mov dword [ebp - 0xf14], edx
mov eax, dword [edi]
mov dword [ebp - 0x1038], eax
mov dword [0x925b98], eax
cmp eax, edi
je 0x40a878
mov ecx, eax
mov esi, eax
nop
lea edx, [ebp - 0x101a]
add ecx, 0x1e
nop dword [eax]
mov al, byte [ecx]
cmp al, byte [edx]
mov byte [ebp - 0x1031], al
mov eax, dword [ebp - 0x1038]
jne 0x40a802
cmp byte [ebp - 0x1031], 0
je 0x40a7fe
mov al, byte [ecx + 1]
cmp al, byte [edx + 1]
mov byte [ebp - 0x1031], al
mov eax, dword [ebp - 0x1038]
jne 0x40a802
add ecx, 2
add edx, 2
cmp byte [ebp - 0x1031], 0
jne 0x40a7c0
xor ecx, ecx
jmp 0x40a807
sbb ecx, ecx
or ecx, 1
test ecx, ecx
jne 0x40a85f
lea edx, [ebp - 0x102c]
lea ecx, [esi + 0xc]
mov al, byte [ecx]
cmp al, byte [edx]
mov byte [ebp - 0x1031], al
mov eax, dword [ebp - 0x1038]
jne 0x40a856
cmp byte [ebp - 0x1031], 0
je 0x40a852
mov al, byte [ecx + 1]
cmp al, byte [edx + 1]
mov byte [ebp - 0x1031], al
mov eax, dword [ebp - 0x1038]
jne 0x40a856
add ecx, 2
add edx, 2
cmp byte [ebp - 0x1031], 0
jne 0x40a814
xor ecx, ecx
jmp 0x40a85b
sbb ecx, ecx
or ecx, 1
test ecx, ecx
je 0x40a8a0
mov eax, dword [eax]
mov ecx, eax
mov dword [ebp - 0x1038], eax
mov esi, ecx
mov dword [0x925b98], eax
cmp eax, edi
jne 0x40a7b0
mov esi, dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
push 0x925960
call esi
lea eax, [ebp - 0x1030]
push eax
call fcn.0040d6d0
mov edi, dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push 0x925960
call edi
jmp 0x40a8ed
mov esi, dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
push 0x925960
call esi
mov eax, dword [0x925b98]
mov ecx, dword [ebp - 0xf18]
mov edx, dword [ebp - 0xf14]
mov edi, dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push 0x925960
mov dword [eax + 0x120], ecx
mov dword [eax + 0x124], edx
call edi
push 0x925960
call esi
push 0x925960
call edi
jmp 0x40a8ed
mov edi, dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
cmp dword [0x92597c], 1
jne 0x40b2bf
push 0x8194d8
call edi
jmp 0x40b2bf
add dword [0x59ab58], 1
adc dword [0x59ab5c], 0
xor ecx, ecx
movzx eax, word [edi + 0xc]
lea edi, [ebp - 0x1078]
cmp ax, word [edi]
mov edi, dword [ebp - 0x1044]
sete cl
movzx eax, word [edi + 0xc]
lea ecx, [ecx*4 + 0xe]
mov dword [ebp - 0x105c], ecx
lea ecx, [ebp - 0x1040]
cmp ax, word [ecx]
mov ecx, dword [ebp - 0x105c]
je 0x40a9a9
mov ax, word [edi + 0x10]
lea ecx, [ebp - 0x1040]
cmp ax, word [ecx]
mov ecx, dword [ebp - 0x105c]
je 0x40a9a9
mov ax, word [edi + 0xc]
lea ecx, [ebp - 0x1068]
cmp ax, word [ecx]
je 0x40a97f
mov ax, word [edi + 0x10]
cmp ax, word [ecx]
jne 0x40aedd
add dword [0x71d318], esi
push 0x8194d8
adc dword [0x71d31c], edx
add dword [0x71d348], 1
adc dword [0x71d34c], 0
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
jmp 0x40b2bf
add dword [0x819468], esi
mov esi, dword [ebp - 0x1048]
adc dword [0x81946c], edx
mov edx, 0xfaff
add dword [0x9156d8], 1
adc dword [0x9156dc], 0
mov eax, dword [edi + 6]
mov dword [ebp - 0xdbb], eax
movzx eax, word [edi + 0xa]
mov word [ebp - 0xdb7], ax
mov eax, dword [ebp - 0x105c]
movzx ecx, byte [esi + ecx + 1]
movzx eax, word [esi + eax]
shl ax, 8
or cx, ax
movzx ecx, cx
mov dword [ebp - 0x1038], ecx
lea eax, [ecx - 0x100]
cmp ax, dx
ja 0x40aec9
push 0x401420
push 0x158
push dword [0x9154c0]
lea eax, [ebp - 0xdd0]
push 0x71d370
push eax
call fcn.0041d8cf
mov ecx, eax
add esp, 0x14
test ecx, ecx
je 0x40aa67
mov al, byte [ebp - 0x1031]
mov byte [ecx + 0x108], al
mov eax, dword [ebp - 0x104c]
ror ax, 8
movzx edx, ax
mov word [ecx + 0xf6], 0x3001
mov dword [ebp - 0x103c], edx
jmp 0x40ab92
mov eax, dword [0x9154c0]
cmp eax, 0xbb8
jg 0x40c997
imul eax, eax, 0x158
mov byte [eax + 0x71d467], 0x30
movzx eax, byte [edi + 0xb]
push eax
movzx eax, byte [edi + 0xa]
push eax
movzx eax, byte [edi + 9]
push eax
movzx eax, byte [edi + 8]
push eax
movzx eax, byte [edi + 7]
push eax
movzx eax, byte [edi + 6]
push eax
lea eax, [ebp - 0xdce]
push str._02x:_02x:_02x:_02x:_02x:_02x
push eax
call fcn.00401250
mov edx, dword [0x9154c0]
movups xmm0, xmmword [ebp - 0xdce]
movzx eax, word [ebp - 0xdbe]
imul ecx, edx, 0x158
push 0x401420
push 0x158
movups xmmword [ecx + 0x71d372], xmm0
mov word [ecx + 0x71d382], ax
mov eax, dword [ebp - 0xdbb]
mov dword [ecx + 0x71d385], eax
movzx eax, word [ebp - 0xdb7]
mov word [ecx + 0x71d389], ax
mov al, byte [ebp - 0x1031]
mov byte [ecx + 0x71d478], al
lea eax, [edx + 1]
push eax
push 0x71d370
mov byte [ecx + 0x71d466], 1
call fcn.0041cd00
mov ecx, dword [0x9154c0]
mov dword [0x59be50], ecx
inc ecx
mov eax, dword [edi + 6]
push 0x401420
mov dword [ebp - 0xdbb], eax
movzx eax, word [edi + 0xa]
push 0x158
push ecx
mov word [ebp - 0xdb7], ax
lea eax, [ebp - 0xdd0]
push 0x71d370
push eax
mov dword [0x9154c0], ecx
mov dword [0x925980], ecx
call fcn.0041d8cf
mov edx, dword [ebp - 0x1060]
mov ecx, eax
mov ax, dx
add esp, 0x44
shl edx, 8
shr ax, 8
or ax, dx
movzx edx, ax
mov dword [ebp - 0x103c], edx
test ecx, ecx
je 0x40ad2a
cmp dword [ecx + 0xa8], 0
mov esi, dword [ebp - 0x1038]
jne 0x40abd1
mov word [ecx + 0xe8], dx
mov dword [ecx + 0xe4], 0x773593ff
mov eax, dword [edi]
mov dword [ecx + 0x113], eax
mov ax, word [edi + 4]
mov word [ecx + 0x117], ax
mov word [ecx + 0xea], si
jmp 0x40ad04
mov eax, dword [ecx + 0x113]
cmp eax, dword [edi]
jne 0x40acfd
movzx eax, word [ecx + 0x117]
cmp ax, word [edi + 4]
jne 0x40acfd
cmp word [ecx + 0xea], si
jne 0x40acfd
mov eax, dword [0x71d308]
sub eax, dword [ecx + 0x88]
cdq
add dword [ecx + 0xa0], eax
adc dword [ecx + 0xa4], edx
mov edx, dword [ebp - 0x103c]
mov ax, dx
sub ax, word [ecx + 0xe8]
movzx eax, ax
mov dword [ebp - 0x1060], eax
mov eax, dword [0x71d308]
sub eax, dword [ecx + 0x88]
mov dword [ebp - 0x104c], eax
mov eax, dword [0x71d30c]
sbb eax, dword [ecx + 0x8c]
js 0x40ac63
jg 0x40ac5a
cmp dword [ebp - 0x104c], 0x200b20
jbe 0x40ac63
mov byte [ecx + 0xf7], 0x31
jmp 0x40acc3
mov esi, dword [ebp - 0x1060]
mov eax, dword [ecx + 0xe4]
movzx esi, si
mov dword [ebp - 0x1044], esi
cmp esi, eax
mov esi, dword [ebp - 0x1038]
jge 0x40ac98
cmp word [ebp - 0x1060], 0
jbe 0x40ac98
mov eax, dword [ebp - 0x1044]
mov dword [ecx + 0xe4], eax
movd xmm1, dword [ebp - 0x1044]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
cvtdq2ps xmm1, xmm1
divss xmm1, xmm0
cvtps2pd xmm0, xmm1
subsd xmm0, qword [0x43cd60]
cvttsd2si eax, xmm0
mov dword [ebp - 0x106c], eax
mov word [ecx + 0xe8], dx
mov eax, dword [edi]
mov dword [ecx + 0x113], eax
mov ax, word [edi + 4]
mov word [ecx + 0x117], ax
mov eax, dword [ebp - 0x106c]
test eax, eax
jle 0x40ad04
cmp dword [ecx + 0xdc], eax
jge 0x40acf5
mov dword [ecx + 0xdc], eax
add dword [ecx + 0xd8], eax
jmp 0x40ad04
mov byte [ecx + 0x113], 0xff
mov eax, dword [0x92597c]
sub eax, 2
inc dword [ecx + 0xa8]
mov eax, dword [0x71d308]
mov dword [ecx + 0x88], eax
mov eax, dword [0x71d30c]
mov dword [ecx + 0x8c], eax
jmp 0x40ad30
mov esi, dword [ebp - 0x1038]
mov eax, dword [edi]
push 0x401420
push 0x158
push dword [0x925980]
mov dword [ebp - 0xdbb], eax
mov ax, word [edi + 4]
mov word [ebp - 0xdb7], ax
lea eax, [ebp - 0xdd0]
push 0x71d370
push eax
call fcn.0041d8cf
mov ecx, eax
add esp, 0x14
test ecx, ecx
je 0x40af96
mov edx, dword [ecx + 0x40]
test edx, edx
jne 0x40adcd
mov edx, dword [ebp - 0x103c]
mov word [ecx + 0x80], dx
mov dword [ecx + 0x7c], 0x773593ff
mov eax, dword [edi + 6]
mov dword [ecx + 0x10d], eax
mov ax, word [edi + 0xa]
mov word [ecx + 0x111], ax
mov word [ecx + 0x82], si
mov edx, dword [ecx + 0x40]
mov eax, dword [0x92597c]
sub eax, 2
mov eax, dword [0x71d308]
mov dword [ecx + 0x20], eax
mov eax, dword [0x71d30c]
mov dword [ecx + 0x24], eax
lea eax, [edx + 1]
mov dword [ecx + 0x40], eax
jmp 0x40af96
mov eax, dword [ecx + 0x10d]
cmp eax, dword [edi + 6]
jne 0x40aebd
movzx eax, word [ecx + 0x111]
cmp ax, word [edi + 0xa]
jne 0x40aebd
cmp word [ecx + 0x82], si
jne 0x40aebd
mov esi, dword [0x71d308]
mov eax, esi
sub eax, dword [ecx + 0x20]
cdq
add dword [ecx + 0x38], eax
adc dword [ecx + 0x3c], edx
mov edx, dword [ebp - 0x103c]
mov ax, dx
sub ax, word [ecx + 0x80]
sub esi, dword [ecx + 0x20]
movzx eax, ax
mov dword [ebp - 0x1060], eax
mov eax, dword [0x71d30c]
sbb eax, dword [ecx + 0x24]
test eax, eax
jg 0x40ae84
jl 0x40ae3e
cmp esi, 0x200b20
ja 0x40ae84
mov esi, dword [ebp - 0x1060]
mov eax, dword [ecx + 0x7c]
movzx esi, si
cmp esi, eax
jge 0x40ae5d
cmp word [ebp - 0x1060], 0
jbe 0x40ae5d
mov dword [ecx + 0x7c], esi
mov eax, esi
movd xmm0, eax
movd xmm1, esi
cvtdq2ps xmm0, xmm0
cvtdq2ps xmm1, xmm1
divss xmm1, xmm0
cvtps2pd xmm0, xmm1
subsd xmm0, qword [0x43cd60]
cvttsd2si eax, xmm0
mov dword [ebp - 0x106c], eax
mov word [ecx + 0x80], dx
mov eax, dword [edi + 6]
mov dword [ecx + 0x10d], eax
mov ax, word [edi + 0xa]
mov word [ecx + 0x111], ax
mov eax, dword [ebp - 0x106c]
test eax, eax
jle 0x40ada7
cmp dword [ecx + 0x74], eax
jge 0x40aeb5
mov dword [ecx + 0x74], eax
add dword [ecx + 0x70], eax
jmp 0x40ada7
mov byte [ecx + 0x10d], 0xff
jmp 0x40adaa
mov eax, 0xfe01
cmp cx, ax
je 0x40aeed
mov eax, 0xfc01
cmp cx, ax
je 0x40aeed
push 0x8194d8
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
jmp 0x40b2bf
push 0x48
push 0
push 0x819490
call fcn.00415680
mov edx, dword [ebp - 0x105c]
add esp, 0xc
movq xmm0, qword [esi + edx + 2]
movq qword [0x8194a8], xmm0
mov ecx, dword [esi + edx + 0xa]
mov dword [0x8194b0], ecx
movups xmm0, xmmword [esi + edx + 0xe]
shr ecx, 0x10
movups xmmword [0x8194b4], xmm0
movq xmm0, qword [esi + edx + 0x1e]
movq qword [0x8194c4], xmm0
mov eax, dword [esi + edx + 0x26]
mov dword [0x8194cc], eax
cmp ecx, 0x1c
jbe 0x40af5b
mov eax, dword [esi + edx + 0x2a]
mov dword [0x8194d0], eax
mov ax, word [esi + edx + 0x2e]
mov word [0x8194d4], ax
mov eax, dword [edi + 6]
mov dword [0x819490], eax
movzx eax, word [edi + 0xa]
mov word [0x819494], ax
mov eax, dword [edi]
mov dword [0x819496], eax
movzx eax, word [edi + 4]
push 0x8194a0
mov word [0x81949a], ax
call fcn.0041d994
mov al, byte [0x8194ac]
add esp, 4
and al, 0xf
cmp al, 3
jne 0x40afb3
cmp dword [0x92597c], 1
jne 0x40b2bf
push 0x8194d8
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
jmp 0x40b2bf
mov esi, dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
push 0x925960
call esi
mov edx, dword [0x925bb0]
dec edx
mov dword [ebp - 0x1060], edx
cmp edx, 0xffffffff
jle 0x40b0ca
mov ecx, dword [0x925ba8]
mov eax, dword [0x925bac]
dec ecx
add eax, edx
mov dword [ebp - 0x104c], ecx
mov dword [ebp - 0x103c], eax
and eax, ecx
mov ecx, dword [0x925ba4]
mov ecx, dword [ecx + eax*4]
mov eax, dword [0x8194a0]
cmp dword [ecx + 0x10], eax
jne 0x40b0a6
mov eax, dword [0x8194a4]
cmp dword [ecx + 0x14], eax
jne 0x40b0a6
mov eax, dword [ecx]
mov esi, 0x819490
cmp eax, dword [esi]
jne 0x40b0a6
movzx eax, word [ecx + 4]
cmp ax, word [esi + 4]
jne 0x40b0a6
mov eax, dword [ecx + 6]
mov esi, 0x819496
cmp eax, dword [esi]
jne 0x40b0a6
movzx eax, word [ecx + 0xa]
cmp ax, word [esi + 4]
jne 0x40b0a6
mov al, byte [0x8194ac]
cmp byte [ecx + 0x1c], al
jne 0x40b0a6
and al, 0xf
cmp al, 1
jne 0x40b0a2
add ecx, 0x24
mov edx, 0x8194b4
mov esi, 0xc
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x40b09a
add ecx, 4
add edx, 4
sub esi, 4
jae 0x40b063
mov edi, dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push 0x925960
call edi
cmp dword [0x92597c], 1
jne 0x40b2bf
push 0x8194d8
call edi
jmp 0x40b2bf
mov edx, dword [ebp - 0x1060]
jmp 0x40b0a6
cmp al, 2
je 0x40b074
mov eax, dword [ebp - 0x103c]
dec edx
dec eax
mov dword [ebp - 0x1060], edx
mov dword [ebp - 0x103c], eax
cmp edx, 0xffffffff
jle 0x40b0ca
mov ecx, dword [ebp - 0x104c]
jmp 0x40aff0
push 0x819490
call fcn.0040d7b0
mov esi, dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push 0x925960
call esi
mov ecx, dword [0x8194b4]
mov dl, byte [0x8194ac]
movzx eax, byte [0x8194b5]
and dl, 0xf
shl ecx, 8
or cx, ax
movzx eax, cx
cmp dl, 1
jne 0x40b130
mov ecx, 0x8001
cmp ax, cx
je 0x40b228
mov ecx, 0x8002
cmp ax, cx
je 0x40b228
mov ecx, 0x8103
cmp ax, cx
jne 0x40b139
jmp 0x40b228
cmp dl, 4
jne 0x40b228
push 0x401420
push 0x158
push dword [0x9154c0]
lea eax, [ebp - 0xdd0]
push 0x71d370
push eax
call fcn.0041d8cf
add esp, 0x14
test eax, eax
je 0x40b16c
inc dword [eax + 0xf0]
jmp 0x40b228
imul eax, dword [0x9154c0], 0x158
mov byte [eax + 0x71d467], 0x30
mov dword [eax + 0x71d460], 1
movzx eax, byte [edi + 0xb]
push eax
movzx eax, byte [edi + 0xa]
push eax
movzx eax, byte [edi + 9]
push eax
movzx eax, byte [edi + 8]
push eax
movzx eax, byte [edi + 7]
push eax
movzx eax, byte [edi + 6]
push eax
lea eax, [ebp - 0xdce]
push str._02x:_02x:_02x:_02x:_02x:_02x
push eax
call fcn.00401250
mov edx, dword [0x9154c0]
movups xmm0, xmmword [ebp - 0xdce]
movzx eax, word [ebp - 0xdbe]
imul ecx, edx, 0x158
push 0x401420
push 0x158
movups xmmword [ecx + 0x71d372], xmm0
mov word [ecx + 0x71d382], ax
mov eax, dword [ebp - 0xdbb]
mov dword [ecx + 0x71d385], eax
movzx eax, word [ebp - 0xdb7]
mov word [ecx + 0x71d389], ax
lea eax, [edx + 1]
push eax
push 0x71d370
call fcn.0041cd00
mov eax, dword [0x9154c0]
add esp, 0x30
mov dword [0x59be50], eax
inc eax
mov dword [0x9154c0], eax
mov dword [0x925980], eax
cmp dword [0x92595c], 3
jne 0x40b2af
mov eax, dword [0x8194a0]
mov ecx, dword [0x8194a4]
push 0x925928
mov dword [0x925928], eax
mov dword [0x92592c], ecx
call fcn.00417d94
add esp, 4
push eax
push str._Y__m__d__H__M__S_T
lea eax, [ebp - 0x180]
push 0xff
push eax
call fcn.0041c99d
movzx eax, byte [0x59ab49]
add eax, 0x30
push eax
push dword [0x819488]
lea eax, [ebp - 0x180]
push eax
push 0x9154d0
push str._s_hs_02x_c.pcap
lea eax, [ebp - 0x580]
push 0xff
push eax
call fcn.00401170
add esp, 0x2c
mov dword [0x92595c], 2
cmp dword [0x92597c], 1
jne 0x40b2bf
push 0x8194d8
call esi
lea eax, [ebp - 0x1048]
push eax
lea eax, [ebp - 0x1058]
push eax
push dword [ebp - 0x1074]
call dword [sym.imp.wpcap.dll_pcap_next_ex]
mov esi, eax
mov dword [ebp - 0x103c], eax
add esp, 0xc
test esi, esi
jns 0x40a040
jmp 0x40c9dd
mov ecx, dword [edx + 0x10]
mov edi, 0x624dd2f
mov eax, ecx
mov edx, 0x1a9fbe77
mul edx
mov eax, ecx
mov ecx, 0x1a9fbe77
mov esi, edx
mul edi
mov edi, eax
mov dword [ebp - 0x1044], edx
mov eax, dword [ebp - 0x1038]
mov eax, dword [eax + 0xc]
mul ecx
mov ecx, eax
mov dword [ebp - 0x104c], edx
mov eax, dword [ebp - 0x1038]
mov edx, 0x624dd2f
mov eax, dword [eax + 0xc]
mul edx
add ecx, esi
mov dword [ebp - 0x1050], eax
mov dword [ebp - 0x108c], edx
mov edx, dword [ebp - 0x104c]
adc edx, 0
add edi, ecx
mov ecx, dword [ebp - 0x1044]
mov edi, dword [ebp - 0x1038]
adc ecx, 0
xor eax, eax
add edx, ecx
mov ecx, dword [ebp - 0x1050]
adc eax, eax
add ecx, edx
mov edx, dword [ebp - 0x108c]
mov esi, dword [edi + 0xc]
adc edx, eax
mov eax, dword [edi + 0x10]
sub eax, ecx
sbb esi, edx
shrd eax, esi, 1
shr esi, 1
add eax, ecx
mov ecx, edi
adc esi, edx
shrd eax, esi, 9
shr esi, 9
mov dword [0x71d308], eax
lea eax, [ecx + 0x1c]
mov dword [0x71d30c], esi
mov esi, dword [ebp - 0x1058]
mov dword [ebp - 0x104c], eax
mov eax, dword [esi + 8]
mov dl, byte [ecx + eax - 2]
mov byte [ebp - 0x1032], dl
lea edx, [eax - 0x10]
movzx eax, word [ecx + eax - 4]
mov dword [ebp - 0x1044], eax
xor eax, eax
mov dword [ebp - 0x1038], eax
movzx eax, byte [ecx + 8]
mov dword [ebp - 0x1050], edx
sub eax, 2
je case.0x40b65f.128
sub eax, 1
jne case.0x40b65f.17
mov dword [ebp - 0x1038], 2
jmp case.0x40b65f.17
mov eax, dword [ebp - 0x1058]
xorps xmm0, xmm0
movlpd qword [ebp - 0xc78], xmm0
mov edi, 0x47ae147a
mov ecx, dword [eax + 8]
movzx eax, byte [edx + ecx - 7]
mov byte [ebp - 0xc73], al
movzx eax, byte [edx + ecx - 6]
mov byte [ebp - 0xc74], al
movzx eax, byte [edx + ecx - 5]
mov byte [ebp - 0xc75], al
movzx eax, byte [edx + ecx - 4]
mov byte [ebp - 0xc76], al
movzx eax, byte [edx + ecx - 3]
mov byte [ebp - 0xc77], al
movzx eax, byte [edx + ecx - 2]
mov edx, 0xe147ae15
mov byte [ebp - 0xc78], al
mov ecx, 0xe147ae15
mov eax, dword [ebp - 0xc78]
mul edx
mov eax, dword [ebp - 0xc78]
mov esi, edx
mul edi
mov edi, eax
mov dword [ebp - 0x1044], edx
mov eax, dword [ebp - 0xc74]
mul ecx
mov ecx, eax
mov dword [ebp - 0x108c], edx
mov eax, dword [ebp - 0xc74]
mov edx, 0x47ae147a
mul edx
add ecx, esi
mov esi, dword [ebp - 0xc74]
mov dword [ebp - 0x109c], edx
mov edx, dword [ebp - 0x108c]
adc edx, 0
mov dword [ebp - 0x1050], eax
add edi, ecx
mov ecx, dword [ebp - 0x1044]
adc ecx, 0
xor eax, eax
add edx, ecx
mov ecx, dword [ebp - 0x1050]
adc eax, eax
add ecx, edx
mov edx, dword [ebp - 0x109c]
adc edx, eax
mov eax, dword [ebp - 0xc78]
sub eax, ecx
sbb esi, edx
shrd eax, esi, 1
shr esi, 1
add eax, ecx
mov ecx, dword [ebp - 0x1038]
adc esi, edx
shrd eax, esi, 7
shr esi, 7
mov dword [0x71d30c], esi
mov esi, dword [ebp - 0x1058]
mov dword [0x71d308], eax
mov eax, dword [esi + 8]
mov dl, byte [ecx + eax - 0xa]
mov byte [ebp - 0x1032], dl
lea edx, [eax + 4]
movzx eax, word [ecx + eax - 0xc]
mov dword [ebp - 0x1044], eax
xor eax, eax
mov dword [ebp - 0x1050], edx
mov dword [ebp - 0x1038], eax
jmp case.0x40b65f.17
mov eax, dword [ebp - 0x1058]
mov edi, 0x624dd2f
mov eax, dword [eax + 8]
mov ecx, dword [edx + eax - 8]
mov eax, dword [edx + eax - 4]
mov edx, 0x1a9fbe77
mov dword [ebp - 0x1044], eax
mov dword [ebp - 0xc74], eax
mov eax, ecx
mul edx
mov dword [ebp - 0xc78], ecx
mov dword [ebp - 0xc78], eax
mov esi, edx
mov eax, ecx
mov dword [ebp - 0x1084], ecx
mul edi
mov ecx, 0x1a9fbe77
mov edi, eax
mov dword [ebp - 0x108c], edx
mov eax, dword [ebp - 0x1044]
mul ecx
mov dword [ebp - 0x109c], edx
mov ecx, eax
mov eax, dword [ebp - 0x1044]
mov edx, 0x624dd2f
mul edx
add ecx, esi
mov esi, dword [ebp - 0x1044]
mov dword [ebp - 0xc74], edx
mov edx, dword [ebp - 0x109c]
adc edx, 0
mov dword [ebp - 0x1050], eax
add edi, ecx
mov ecx, dword [ebp - 0x108c]
adc ecx, 0
xor eax, eax
add edx, ecx
mov ecx, dword [ebp - 0x1050]
adc eax, eax
add ecx, edx
mov edx, dword [ebp - 0xc74]
adc edx, eax
mov eax, dword [ebp - 0x1084]
sub eax, ecx
sbb esi, edx
shrd eax, esi, 1
shr esi, 1
add eax, ecx
mov ecx, dword [ebp - 0x1038]
adc esi, edx
shrd eax, esi, 9
shr esi, 9
mov dword [0x71d30c], esi
mov esi, dword [ebp - 0x1058]
mov dword [0x71d308], eax
mov eax, dword [esi + 8]
mov dl, byte [ecx + eax - 0x16]
mov byte [ebp - 0x1032], dl
lea edx, [eax - 8]
mov dword [ebp - 0x1050], edx
movzx edx, word [ecx + eax - 0x18]
mov dword [ebp - 0x1044], edx
mov dl, byte [ecx + eax - 9]
mov byte [ebp - 0x1031], dl
movzx edx, byte [ecx + eax - 0xa]
xor eax, eax
add edx, 0xfffffff0
mov dword [ebp - 0x1038], eax
cmp edx, 0x70
ja case.0x40b65f.17
mov dword [ebp - 0x1038], eax
movzx eax, byte [edx + 0x40cabc]
jmp dword [eax*4 + 0x40caa8]
mov dword [ebp - 0x1038], 4
jmp case.0x40b65f.17
mov dword [ebp - 0x1038], 3
jmp case.0x40b65f.17
mov dword [ebp - 0x1038], 1
mov edi, dword [ebp - 0x1048]
mov eax, dword [ebp - 0x1044]
movzx eax, ax
mov dword [ebp - 0x1084], eax
mov eax, dword [0x92595c]
sub eax, 1
je 0x40b864
sub eax, 1
je 0x40b73a
sub eax, 1
jne 0x40b8fd
mov eax, dword [0x819458]
movups xmm0, xmmword [esi]
imul ecx, eax, 0x628
movups xmmword [ecx + 0x59c0a0], xmm0
mov edx, dword [esi + 8]
cmp edx, 0x618
jbe 0x40b6f2
mov esi, dword [ebp - 0x1048]
lea edi, [ecx + 0x59c0b0]
mov ecx, 0x186
rep movsd dword es:[edi], dword [esi]
jmp 0x40b708
push edx
lea eax, [ecx + 0x59c0b0]
push edi
push eax
call fcn.004157e0
mov eax, dword [0x819458]
add esp, 0xc
inc eax
mov dword [0x819458], eax
cmp eax, 0x3e8
jl 0x40b71f
mov dword [0x819458], 0
mov eax, dword [0x59be18]
cmp eax, 0x3e8
jge 0x40b8fd
inc eax
mov dword [0x59be18], eax
jmp 0x40b8fd
lea ecx, [ebp - 0x580]
call fcn.00404ef0
test eax, eax
js 0x40c965
mov ecx, dword [0x59be18]
mov dword [0x819424], ecx
mov dword [0x925978], 0
test ecx, ecx
jle 0x40b813
nop dword [eax + eax]
mov eax, dword [0x819458]
cmp ecx, eax
jle 0x40b782
sub eax, ecx
add eax, 0x3e8
jmp 0x40b784
sub eax, ecx
mov dword [0x925978], eax
cmp eax, 0x3e8
jle 0x40b79f
mov dword [0x925978], 0x3e8
mov eax, 0x3e8
imul eax, eax, 0x628
mov esi, dword [eax + 0x59c0a8]
cmp esi, 0x618
jbe 0x40b7c2
mov dword [eax + 0x59c0a8], 0x618
mov esi, 0x618
movups xmm0, xmmword [eax + 0x59c0a0]
push esi
lea eax, [eax + 0x59c0b0]
push eax
push 0x915708
movups xmmword [0x9156f8], xmm0
call fcn.004157e0
add esp, 0xc
lea eax, [esi + 0x10]
push dword [0x819518]
push 1
push eax
push 0x9156f8
call fcn.0041d86c
mov ecx, dword [0x59be18]
add esp, 0x10
dec ecx
mov dword [0x59be18], ecx
test ecx, ecx
jg 0x40b770
mov esi, dword [ebp - 0x1058]
movups xmm0, xmmword [esi]
movups xmmword [0x9156f8], xmm0
push dword [esi + 8]
push dword [ebp - 0x1048]
push 0x915708
call fcn.004157e0
mov eax, dword [esi + 8]
add esp, 0xc
add eax, 0x10
push dword [0x819518]
push 1
push eax
push 0x9156f8
call fcn.0041d86c
add esp, 0x10
mov dword [0x92595c], 1
jmp 0x40b8fd
movups xmm0, xmmword [esi]
movups xmmword [0x9156f8], xmm0
push dword [esi + 8]
push ecx
push 0x915708
call fcn.004157e0
mov eax, dword [esi + 8]
add esp, 0xc
add eax, 0x10
push dword [0x819518]
push 1
push eax
push 0x9156f8
call fcn.0041d86c
mov eax, dword [0x59be48]
add esp, 0x10
inc eax
mov dword [0x59be48], eax
cmp eax, 0x3e8
jle 0x40b8fd
push 0
call fcn.0041d994
add esp, 4
cmp edx, dword [0x92592c]
jl 0x40b8fd
jg 0x40b8c9
cmp eax, dword [0x925928]
jbe 0x40b8fd
mov eax, dword [0x819518]
test eax, eax
je 0x40b8e9
push eax
call fcn.004180b9
add esp, 4
push dword [0x819518]
call fcn.00418185
add esp, 4
mov dword [0x92595c], 3
mov dword [0x59be48], 0
cmp byte [ebp - 0x1051], 0
je 0x40b923
mov eax, dword [0x71d308]
mov ecx, dword [0x71d30c]
mov dword [0x819548], eax
mov dword [0x81954c], ecx
mov byte [ebp - 0x1051], 0
cmp byte [0x59ab48], 0
je 0x40ba9a
xorps xmm0, xmm0
mov byte [0x59ab48], 0
movaps xmmword [0x819550], xmm0
movaps xmmword [0x819560], xmm0
movq qword [0x819570], xmm0
movaps xmmword [0x9156d0], xmm0
movaps xmmword [0x9156e0], xmm0
movq qword [0x9156f0], xmm0
movaps xmmword [0x71d340], xmm0
movaps xmmword [0x71d350], xmm0
movq qword [0x71d360], xmm0
movaps xmmword [0x59ab50], xmm0
movaps xmmword [0x59ab60], xmm0
movq qword [0x59ab70], xmm0
movaps xmmword [0x59c070], xmm0
movaps xmmword [0x59c080], xmm0
movq qword [0x59c090], xmm0
movaps xmmword [0x819520], xmm0
movaps xmmword [0x819530], xmm0
movq qword [0x819540], xmm0
movaps xmmword [0x925900], xmm0
movaps xmmword [0x925910], xmm0
movq qword [0x925920], xmm0
movaps xmmword [0x9258d0], xmm0
movaps xmmword [0x9258e0], xmm0
movq qword [0x9258f0], xmm0
movaps xmmword [0x819430], xmm0
movaps xmmword [0x819440], xmm0
movq qword [0x819450], xmm0
movaps xmmword [0x59be20], xmm0
movaps xmmword [0x59be30], xmm0
movq qword [0x59be40], xmm0
movaps xmmword [0x59ab20], xmm0
movaps xmmword [0x59ab30], xmm0
movq qword [0x59ab40], xmm0
movaps xmmword [0x819460], xmm0
movaps xmmword [0x819470], xmm0
movq qword [0x819480], xmm0
movaps xmmword [0x71d310], xmm0
movaps xmmword [0x71d320], xmm0
movq qword [0x71d330], xmm0
movaps xmmword [0x59bdf0], xmm0
movaps xmmword [0x59be00], xmm0
movq qword [0x59be10], xmm0
movaps xmmword [0x8194f0], xmm0
movaps xmmword [0x819500], xmm0
movq qword [0x819510], xmm0
movaps xmmword [0x925930], xmm0
movaps xmmword [0x925940], xmm0
movq qword [0x925950], xmm0
mov esi, dword [ebp - 0x1038]
mov eax, dword [ebp - 0x1050]
mov edi, dword [ebp - 0x104c]
cdq
mov ecx, eax
add dword [esi*8 + 0x59ab20], ecx
mov dword [ebp - 0x1050], ecx
adc dword [esi*8 + 0x59ab24], edx
add dword [esi*8 + 0x819550], 1
adc dword [esi*8 + 0x819554], 0
test byte [edi], 1
je 0x40bf14
mov eax, dword [edi]
lea esi, [ebp - 0xc]
cmp eax, dword [esi]
mov esi, dword [ebp - 0x1038]
jne 0x40bba9
movzx eax, word [edi + 4]
lea esi, [ebp - 0xc]
cmp ax, word [esi + 4]
mov esi, dword [ebp - 0x1038]
jne 0x40bba9
cmp byte [0x59bd89], 0
jne 0x40bb63
mov ax, word [edi + 0xc]
lea ecx, [ebp - 0x1064]
cmp ax, word [ecx]
mov ecx, dword [ebp - 0x1050]
jne 0x40bb63
mov eax, dword [edi + 6]
cmp eax, dword [0x59c060]
jne 0x40bb63
movzx eax, word [edi + 0xa]
mov esi, 0x59c060
cmp ax, word [esi + 4]
mov esi, dword [ebp - 0x1038]
jne 0x40bb63
cmp dword [0x92597c], 1
jne 0x40c933
mov edi, dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push 0x8194d8
call edi
jmp 0x40c933
add dword [esi*8 + 0x819520], 1
adc dword [esi*8 + 0x819524], 0
add dword [esi*8 + 0x8194f0], ecx
lea ecx, [ebp - 0x1064]
adc dword [esi*8 + 0x8194f4], edx
mov ax, word [edi + 0xc]
cmp ax, word [ecx]
jne 0x40c933
add dword [esi*8 + 0x925900], 1
adc dword [esi*8 + 0x925904], 0
jmp 0x40c602
mov ax, word [edi + 0xc]
lea ecx, [ebp - 0x1070]
cmp ax, word [ecx]
mov ecx, dword [ebp - 0x1050]
je 0x40c933
add dword [esi*8 + 0x59c070], 1
adc dword [esi*8 + 0x59c074], 0
add dword [esi*8 + 0x59bdf0], ecx
lea ecx, [ebp - 0x107c]
adc dword [esi*8 + 0x59bdf4], edx
mov ax, word [edi + 0xc]
cmp ax, word [ecx]
jne 0x40bc04
add dword [esi*8 + 0x819430], 1
adc dword [esi*8 + 0x819434], 0
jmp 0x40c602
mov eax, dword [ebp - 0x1048]
mov ecx, dword [ebp - 0x105c]
mov esi, dword [ebp - 0x105c]
movzx ecx, byte [eax + ecx + 1]
movzx eax, word [eax + esi]
lea esi, [ebp - 0x1040]
shl ax, 8
or cx, ax
movzx eax, word [edi + 0xc]
cmp ax, word [esi]
mov esi, dword [ebp - 0x1038]
movzx ecx, cx
jne 0x40bc76
lea eax, [ecx - 0x100]
cmp ax, word [ebp - 0x1094]
ja 0x40bc76
add dword [esi*8 + 0x59be20], 1
mov eax, dword [ebp - 0x1050]
adc dword [esi*8 + 0x59be24], 0
add dword [esi*8 + 0x925930], eax
adc dword [esi*8 + 0x925934], edx
jmp 0x40c602
mov ax, word [edi + 0xc]
lea edx, [ebp - 0x1040]
cmp ax, word [edx]
je 0x40bc92
mov ax, word [edi + 0x10]
cmp ax, word [edx]
jne 0x40c933
mov ax, word [edi + 0xc]
lea edx, [ebp - 0x1040]
cmp ax, word [edx]
jne 0x40bcbd
lea eax, [ecx + 0x103]
cmp ax, 2
ja 0x40bcbd
add dword [esi*8 + 0x9258d0], 1
adc dword [esi*8 + 0x9258d4], 0
mov eax, 0xfefe
cmp cx, ax
jne 0x40c933
movzx eax, byte [edi + 0xb]
push eax
movzx eax, byte [edi + 0xa]
push eax
movzx eax, byte [edi + 9]
push eax
movzx eax, byte [edi + 8]
push eax
movzx eax, byte [edi + 7]
push eax
movzx eax, byte [edi + 6]
push eax
lea eax, [ebp - 0xefc]
push str._02x:_02x:_02x:_02x:_02x:_02x
push eax
call fcn.00401250
mov eax, dword [edi]
lea ecx, [ebp - 0x14]
add esp, 0x20
cmp eax, dword [ecx]
jne 0x40bef5
movzx eax, word [edi + 4]
cmp ax, word [ecx + 4]
jne 0x40bef5
mov edx, dword [ebp - 0x1048]
mov edi, dword [ebp - 0x105c]
cmp byte [edx + edi + 2], 5
jne 0x40bef5
cmp byte [edx + edi + 3], 0
jne 0x40bef5
mov ax, word [edx + edi + 0xe]
mov ch, al
mov cl, ah
mov eax, dword [ebp - 0x1058]
movzx ecx, cx
mov esi, ecx
cmp esi, dword [eax + 8]
jae 0x40bef5
mov eax, 0x100
cmp cx, ax
jae 0x40bef5
xor ecx, ecx
test esi, esi
je 0x40bd81
add edx, 0x10
add edx, edi
mov al, byte [edx]
lea edx, [edx + 1]
mov byte [ebp + ecx - 0xeea], al
inc ecx
cmp ecx, esi
jl 0x40bd70
push 0
mov byte [ebp + ecx - 0xeea], 0
call fcn.0041d994
mov edi, dword [0x925b90]
add esp, 4
mov dword [ebp - 0xde8], eax
mov dword [ebp - 0xde4], edx
mov eax, dword [edi]
mov dword [ebp - 0x1038], eax
mov dword [0x925b98], eax
cmp eax, edi
je 0x40be88
mov ecx, eax
mov esi, eax
nop
lea edx, [ebp - 0xeea]
add ecx, 0x1e
nop dword [eax]
mov al, byte [ecx]
cmp al, byte [edx]
mov byte [ebp - 0x1032], al
mov eax, dword [ebp - 0x1038]
jne 0x40be12
cmp byte [ebp - 0x1032], 0
je 0x40be0e
mov al, byte [ecx + 1]
cmp al, byte [edx + 1]
mov byte [ebp - 0x1032], al
mov eax, dword [ebp - 0x1038]
jne 0x40be12
add ecx, 2
add edx, 2
cmp byte [ebp - 0x1032], 0
jne 0x40bdd0
xor ecx, ecx
jmp 0x40be17
sbb ecx, ecx
or ecx, 1
test ecx, ecx
jne 0x40be6f
lea edx, [ebp - 0xefc]
lea ecx, [esi + 0xc]
mov al, byte [ecx]
cmp al, byte [edx]
mov byte [ebp - 0x1032], al
mov eax, dword [ebp - 0x1038]
jne 0x40be66
cmp byte [ebp - 0x1032], 0
je 0x40be62
mov al, byte [ecx + 1]
cmp al, byte [edx + 1]
mov byte [ebp - 0x1032], al
mov eax, dword [ebp - 0x1038]
jne 0x40be66
add ecx, 2
add edx, 2
cmp byte [ebp - 0x1032], 0
jne 0x40be24
xor ecx, ecx
jmp 0x40be6b
sbb ecx, ecx
or ecx, 1
test ecx, ecx
je 0x40beae
mov eax, dword [eax]
mov ecx, eax
mov dword [ebp - 0x1038], eax
mov esi, ecx
mov dword [0x925b98], eax
cmp eax, edi
jne 0x40bdc0
push 0x925960
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
lea eax, [ebp - 0xf00]
push eax
call fcn.0040d6d0
mov edi, dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push 0x925960
call edi
jmp 0x40befb
mov esi, dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
push 0x925960
call esi
mov eax, dword [0x925b98]
mov ecx, dword [ebp - 0xde8]
mov edx, dword [ebp - 0xde4]
mov edi, dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push 0x925960
mov dword [eax + 0x120], ecx
mov dword [eax + 0x124], edx
call edi
push 0x925960
call esi
push 0x925960
call edi
jmp 0x40befb
mov edi, dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
cmp dword [0x92597c], 1
jne 0x40c933
push 0x8194d8
call edi
jmp 0x40c933
add dword [esi*8 + 0x59ab50], 1
lea ecx, [ebp - 0x1078]
adc dword [esi*8 + 0x59ab54], 0
mov ax, word [edi + 0xc]
cmp ax, word [ecx]
mov ecx, dword [ebp - 0x1050]
mov eax, dword [ebp - 0x1060]
jne 0x40bf44
add eax, 0x12
jmp 0x40bf47
add eax, 0xe
mov dword [ebp - 0x105c], eax
lea esi, [ebp - 0x1040]
mov ax, word [edi + 0xc]
cmp ax, word [esi]
mov esi, dword [ebp - 0x1038]
je 0x40bfc2
mov ax, word [edi + 0x10]
lea ecx, [ebp - 0x1040]
cmp ax, word [ecx]
mov ecx, dword [ebp - 0x1050]
je 0x40bfc2
mov ax, word [edi + 0xc]
lea esi, [ebp - 0x1068]
cmp ax, word [esi]
mov esi, dword [ebp - 0x1038]
je 0x40bf9f
mov ax, word [edi + 0x10]
lea edi, [ebp - 0x1068]
cmp ax, word [edi]
jne 0x40c933
add dword [esi*8 + 0x71d310], ecx
adc dword [esi*8 + 0x71d314], edx
add dword [esi*8 + 0x71d340], 1
adc dword [esi*8 + 0x71d344], 0
jmp 0x40c933
add dword [esi*8 + 0x819460], ecx
adc dword [esi*8 + 0x819464], edx
add dword [esi*8 + 0x9156d0], 1
mov edx, dword [ebp - 0x105c]
adc dword [esi*8 + 0x9156d4], 0
mov eax, dword [edi + 6]
mov dword [ebp - 0xdbb], eax
movzx eax, word [edi + 0xa]
mov word [ebp - 0xdb7], ax
mov eax, dword [ebp - 0x1048]
movzx ecx, byte [eax + edx + 1]
movzx eax, word [eax + edx]
mov edx, 0xfaff
shl ax, 8
or cx, ax
movzx ecx, cx
mov dword [ebp - 0x1050], ecx
lea eax, [ecx - 0x100]
cmp ax, dx
ja 0x40c53b
push 0x401420
push 0x158
push dword [0x9154c0]
lea eax, [ebp - 0xdd0]
push 0x71d370
push eax
call fcn.0041d8cf
add esp, 0x14
mov dword [ebp - 0xc74], eax
test eax, eax
je 0x40c08e
mov cl, byte [ebp - 0x1032]
mov byte [eax + 0x108], cl
mov word [eax + 0xf6], 0x3001
mov eax, dword [ebp - 0x1084]
mov ch, al
mov cl, ah
movzx edx, cx
mov ecx, dword [ebp - 0xc74]
mov dword [ebp - 0x103c], edx
jmp 0x40c1b0
mov eax, dword [0x9154c0]
cmp eax, 0xbb8
jg 0x40c997
imul eax, eax, 0x158
mov byte [eax + 0x71d467], 0x30
movzx eax, byte [edi + 0xb]
push eax
movzx eax, byte [edi + 0xa]
push eax
movzx eax, byte [edi + 9]
push eax
movzx eax, byte [edi + 8]
push eax
movzx eax, byte [edi + 7]
push eax
movzx eax, byte [edi + 6]
push eax
lea eax, [ebp - 0xdce]
push str._02x:_02x:_02x:_02x:_02x:_02x
push eax
call fcn.00401250
mov edx, dword [0x9154c0]
movups xmm0, xmmword [ebp - 0xdce]
movzx eax, word [ebp - 0xdbe]
imul ecx, edx, 0x158
push 0x401420
push 0x158
movups xmmword [ecx + 0x71d372], xmm0
mov word [ecx + 0x71d382], ax
mov eax, dword [ebp - 0xdbb]
mov dword [ecx + 0x71d385], eax
movzx eax, word [ebp - 0xdb7]
mov word [ecx + 0x71d389], ax
mov al, byte [ebp - 0x1032]
mov byte [ecx + 0x71d478], al
lea eax, [edx + 1]
push eax
push 0x71d370
mov byte [ecx + 0x71d466], 1
call fcn.0041cd00
mov ecx, dword [0x9154c0]
mov dword [0x59be50], ecx
inc ecx
mov eax, dword [edi + 6]
push 0x401420
mov dword [ebp - 0xdbb], eax
movzx eax, word [edi + 0xa]
push 0x158
push ecx
mov word [ebp - 0xdb7], ax
lea eax, [ebp - 0xdd0]
push 0x71d370
push eax
mov dword [0x9154c0], ecx
mov dword [0x925980], ecx
call fcn.0041d8cf
mov edx, dword [ebp - 0x1044]
mov ecx, eax
mov ah, dl
add esp, 0x44
mov al, dh
movzx edx, ax
mov dword [ebp - 0x103c], edx
test ecx, ecx
je 0x40c36b
cmp dword [ecx + 0xa8], 0
jne 0x40c1ef
mov word [ecx + 0xe8], dx
mov dword [ecx + 0xe4], 0x773593ff
mov eax, dword [edi]
mov dword [ecx + 0x113], eax
mov ax, word [edi + 4]
mov word [ecx + 0x117], ax
mov eax, dword [ebp - 0x1050]
mov word [ecx + 0xea], ax
jmp 0x40c32e
mov eax, dword [ecx + 0x113]
cmp eax, dword [edi]
jne 0x40c327
movzx eax, word [ecx + 0x117]
cmp ax, word [edi + 4]
jne 0x40c327
mov eax, dword [ebp - 0x1050]
cmp word [ecx + 0xea], ax
jne 0x40c327
mov eax, dword [0x71d308]
sub eax, dword [ecx + 0x88]
cdq
add dword [ecx + 0xa0], eax
adc dword [ecx + 0xa4], edx
mov edx, dword [ebp - 0x103c]
mov ax, dx
sub ax, word [ecx + 0xe8]
movzx eax, ax
mov dword [ebp - 0x104c], eax
mov eax, dword [0x71d308]
sub eax, dword [ecx + 0x88]
mov dword [ebp - 0x1084], eax
mov eax, dword [0x71d30c]
sbb eax, dword [ecx + 0x8c]
mov dword [ebp - 0xc74], eax
js 0x40c28d
jg 0x40c284
cmp dword [ebp - 0x1084], 0x200b20
jbe 0x40c28d
mov byte [ecx + 0xf7], 0x31
jmp 0x40c2ed
mov esi, dword [ebp - 0x104c]
mov eax, dword [ecx + 0xe4]
movzx esi, si
mov dword [ebp - 0x1044], esi
cmp esi, eax
mov esi, dword [ebp - 0x1038]
jge 0x40c2c2
cmp word [ebp - 0x104c], 0
jbe 0x40c2c2
mov eax, dword [ebp - 0x1044]
mov dword [ecx + 0xe4], eax
movd xmm1, dword [ebp - 0x1044]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
cvtdq2ps xmm1, xmm1
divss xmm1, xmm0
cvtps2pd xmm0, xmm1
subsd xmm0, qword [0x43cd60]
cvttsd2si eax, xmm0
mov dword [ebp - 0x106c], eax
mov word [ecx + 0xe8], dx
mov eax, dword [edi]
mov dword [ecx + 0x113], eax
mov ax, word [edi + 4]
mov word [ecx + 0x117], ax
mov eax, dword [ebp - 0x106c]
test eax, eax
jle 0x40c32e
cmp dword [ecx + 0xdc], eax
jge 0x40c31f
mov dword [ecx + 0xdc], eax
add dword [ecx + 0xd8], eax
jmp 0x40c32e
mov byte [ecx + 0x113], 0xff
mov eax, dword [0x92597c]
sub eax, 2
jne 0x40c34f
mov al, byte [ebp - 0x1031]
or byte [ecx + esi + 0x119], al
test al, 8
je 0x40c34f
inc dword [ecx + 0x104]
mov eax, dword [0x71d308]
inc dword [ecx + 0xa8]
mov dword [ecx + 0x88], eax
mov eax, dword [0x71d30c]
mov dword [ecx + 0x8c], eax
mov eax, dword [edi]
push 0x401420
push 0x158
push dword [0x925980]
mov dword [ebp - 0xdbb], eax
mov ax, word [edi + 4]
mov word [ebp - 0xdb7], ax
lea eax, [ebp - 0xdd0]
push 0x71d370
push eax
call fcn.0041d8cf
mov ecx, eax
add esp, 0x14
test ecx, ecx
je 0x40c602
cmp dword [ecx + 0x40], 0
jne 0x40c3ec
mov edx, dword [ebp - 0x103c]
mov word [ecx + 0x80], dx
mov dword [ecx + 0x7c], 0x773593ff
mov eax, dword [edi + 6]
mov dword [ecx + 0x10d], eax
mov ax, word [edi + 0xa]
mov word [ecx + 0x111], ax
mov eax, dword [ebp - 0x1050]
mov word [ecx + 0x82], ax
jmp 0x40c502
mov eax, dword [ecx + 0x10d]
cmp eax, dword [edi + 6]
jne 0x40c4fb
movzx eax, word [ecx + 0x111]
cmp ax, word [edi + 0xa]
jne 0x40c4fb
mov eax, dword [ebp - 0x1050]
cmp word [ecx + 0x82], ax
jne 0x40c4fb
mov eax, dword [0x71d308]
sub eax, dword [ecx + 0x20]
cdq
add dword [ecx + 0x38], eax
adc dword [ecx + 0x3c], edx
mov edx, dword [ebp - 0x103c]
mov ax, dx
sub ax, word [ecx + 0x80]
movzx eax, ax
mov dword [ebp - 0x104c], eax
mov eax, dword [0x71d308]
sub eax, dword [ecx + 0x20]
mov dword [ebp - 0x1084], eax
mov eax, dword [0x71d30c]
sbb eax, dword [ecx + 0x24]
test eax, eax
jg 0x40c4c9
jl 0x40c46f
cmp dword [ebp - 0x1084], 0x200b20
ja 0x40c4c9
mov esi, dword [ebp - 0x104c]
mov eax, dword [ecx + 0x7c]
movzx esi, si
mov dword [ebp - 0x103c], esi
cmp esi, eax
mov esi, dword [ebp - 0x1038]
jge 0x40c49e
cmp word [ebp - 0x104c], 0
jbe 0x40c49e
mov eax, dword [ebp - 0x103c]
mov dword [ecx + 0x7c], eax
movd xmm1, dword [ebp - 0x103c]
movd xmm0, eax
cvtdq2ps xmm0, xmm0
cvtdq2ps xmm1, xmm1
divss xmm1, xmm0
cvtps2pd xmm0, xmm1
subsd xmm0, qword [0x43cd60]
cvttsd2si eax, xmm0
mov dword [ebp - 0x106c], eax
mov word [ecx + 0x80], dx
mov eax, dword [edi + 6]
mov dword [ecx + 0x10d], eax
mov ax, word [edi + 0xa]
mov word [ecx + 0x111], ax
mov eax, dword [ebp - 0x106c]
test eax, eax
jle 0x40c502
cmp dword [ecx + 0x74], eax
jge 0x40c4f6
mov dword [ecx + 0x74], eax
add dword [ecx + 0x70], eax
jmp 0x40c502
mov byte [ecx + 0x10d], 0xff
mov eax, dword [0x92597c]
sub eax, 2
jne 0x40c523
mov al, byte [ebp - 0x1031]
or byte [ecx + esi + 0x119], al
test al, 8
je 0x40c523
inc dword [ecx + 0x100]
mov eax, dword [0x71d308]
inc dword [ecx + 0x40]
mov dword [ecx + 0x20], eax
mov eax, dword [0x71d30c]
mov dword [ecx + 0x24], eax
jmp 0x40c602
mov eax, 0xfe01
cmp cx, ax
je 0x40c553
mov eax, 0xfc01
cmp cx, ax
jne 0x40c933
push 0x48
push 0
push 0x819490
call fcn.00415680
mov edx, dword [ebp - 0x1048]
add esp, 0xc
mov esi, dword [ebp - 0x105c]
movq xmm0, qword [edx + esi + 2]
movq qword [0x8194a8], xmm0
mov ecx, dword [edx + esi + 0xa]
mov dword [0x8194b0], ecx
movups xmm0, xmmword [edx + esi + 0xe]
shr ecx, 0x10
movups xmmword [0x8194b4], xmm0
movq xmm0, qword [edx + esi + 0x1e]
movq qword [0x8194c4], xmm0
mov eax, dword [edx + esi + 0x26]
mov dword [0x8194cc], eax
cmp ecx, 0x1c
jbe 0x40c5c7
mov eax, dword [edx + esi + 0x2a]
mov dword [0x8194d0], eax
mov ax, word [edx + esi + 0x2e]
mov word [0x8194d4], ax
mov eax, dword [edi + 6]
mov dword [0x819490], eax
movzx eax, word [edi + 0xa]
mov word [0x819494], ax
mov eax, dword [edi]
mov dword [0x819496], eax
movzx eax, word [edi + 4]
push 0x8194a0
mov word [0x81949a], ax
call fcn.0041d994
mov al, byte [0x8194ac]
add esp, 4
and al, 0xf
cmp al, 3
jne 0x40c61f
cmp dword [0x92597c], 1
jne 0x40c933
push 0x8194d8
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
jmp 0x40c933
push 0x925960
call dword [sym.imp.KERNEL32.dll_EnterCriticalSection]
mov edx, dword [0x925bb0]
dec edx
mov dword [ebp - 0x104c], edx
cmp edx, 0xffffffff
jle 0x40c73e
mov ecx, dword [0x925ba8]
mov eax, dword [0x925bac]
dec ecx
add eax, edx
mov dword [ebp - 0x1084], ecx
mov dword [ebp - 0x103c], eax
nop word [eax + eax]
and eax, ecx
mov ecx, dword [0x925ba4]
mov ecx, dword [ecx + eax*4]
mov eax, dword [0x8194a0]
cmp dword [ecx + 0x10], eax
jne 0x40c71a
mov eax, dword [0x8194a4]
cmp dword [ecx + 0x14], eax
jne 0x40c71a
mov eax, dword [ecx]
mov esi, 0x819490
cmp eax, dword [esi]
jne 0x40c71a
movzx eax, word [ecx + 4]
cmp ax, word [esi + 4]
jne 0x40c71a
mov eax, dword [ecx + 6]
mov esi, 0x819496
cmp eax, dword [esi]
jne 0x40c71a
movzx eax, word [ecx + 0xa]
cmp ax, word [esi + 4]
jne 0x40c71a
mov al, byte [0x8194ac]
cmp byte [ecx + 0x1c], al
jne 0x40c71a
and al, 0xf
cmp al, 1
jne 0x40c716
add ecx, 0x24
mov edx, 0x8194b4
mov esi, 0xc
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x40c70e
add ecx, 4
add edx, 4
sub esi, 4
jae 0x40c6d7
mov edi, dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push 0x925960
call edi
cmp dword [0x92597c], 1
jne 0x40c933
push 0x8194d8
call edi
jmp 0x40c933
mov edx, dword [ebp - 0x104c]
jmp 0x40c71a
cmp al, 2
je 0x40c6e8
mov eax, dword [ebp - 0x103c]
dec edx
dec eax
mov dword [ebp - 0x104c], edx
mov dword [ebp - 0x103c], eax
cmp edx, 0xffffffff
jle 0x40c73e
mov ecx, dword [ebp - 0x1084]
jmp 0x40c660
push 0x819490
call fcn.0040d7b0
mov esi, dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
push 0x925960
call esi
mov ecx, dword [0x8194b4]
mov dl, byte [0x8194ac]
movzx eax, byte [0x8194b5]
and dl, 0xf
shl ecx, 8
or cx, ax
movzx eax, cx
cmp dl, 1
jne 0x40c7a4
mov ecx, 0x8001
cmp ax, cx
je 0x40c89c
mov ecx, 0x8002
cmp ax, cx
je 0x40c89c
mov ecx, 0x8103
cmp ax, cx
jne 0x40c7ad
jmp 0x40c89c
cmp dl, 4
jne 0x40c89c
push 0x401420
push 0x158
push dword [0x9154c0]
lea eax, [ebp - 0xdd0]
push 0x71d370
push eax
call fcn.0041d8cf
add esp, 0x14
test eax, eax
je 0x40c7e0
inc dword [eax + 0xf0]
jmp 0x40c89c
imul eax, dword [0x9154c0], 0x158
mov byte [eax + 0x71d467], 0x30
mov dword [eax + 0x71d460], 1
movzx eax, byte [edi + 0xb]
push eax
movzx eax, byte [edi + 0xa]
push eax
movzx eax, byte [edi + 9]
push eax
movzx eax, byte [edi + 8]
push eax
movzx eax, byte [edi + 7]
push eax
movzx eax, byte [edi + 6]
push eax
lea eax, [ebp - 0xdce]
push str._02x:_02x:_02x:_02x:_02x:_02x
push eax
call fcn.00401250
mov edx, dword [0x9154c0]
movups xmm0, xmmword [ebp - 0xdce]
movzx eax, word [ebp - 0xdbe]
imul ecx, edx, 0x158
push 0x401420
push 0x158
movups xmmword [ecx + 0x71d372], xmm0
mov word [ecx + 0x71d382], ax
mov eax, dword [ebp - 0xdbb]
mov dword [ecx + 0x71d385], eax
movzx eax, word [ebp - 0xdb7]
mov word [ecx + 0x71d389], ax
lea eax, [edx + 1]
push eax
push 0x71d370
call fcn.0041cd00
mov eax, dword [0x9154c0]
add esp, 0x30
mov dword [0x59be50], eax
inc eax
mov dword [0x9154c0], eax
mov dword [0x925980], eax
cmp dword [0x92595c], 3
jne 0x40c923
mov eax, dword [0x8194a0]
mov ecx, dword [0x8194a4]
push 0x925928
mov dword [0x925928], eax
mov dword [0x92592c], ecx
call fcn.00417d94
add esp, 4
push eax
push str._Y__m__d__H__M__S_T
lea eax, [ebp - 0x180]
push 0xff
push eax
call fcn.0041c99d
movzx eax, byte [0x59ab49]
add eax, 0x30
push eax
push dword [0x819488]
lea eax, [ebp - 0x180]
push eax
push 0x9154d0
push str._s_hs_02x_c.pcap
lea eax, [ebp - 0x580]
push 0xff
push eax
call fcn.00401170
add esp, 0x2c
mov dword [0x92595c], 2
cmp dword [0x92597c], 1
jne 0x40c933
push 0x8194d8
call esi
lea eax, [ebp - 0x1048]
push eax
lea eax, [ebp - 0x1058]
push eax
push dword [ebp - 0x1074]
call dword [sym.imp.wpcap.dll_pcap_next_ex]
mov esi, eax
mov dword [ebp - 0x103c], eax
add esp, 0xc
test esi, esi
jns 0x409f50
jmp 0x40c9dd
cmp dword [0x92597c], 1
mov byte [0x43fb00], 1
jne 0x40ca92
push 0x8194d8
call dword [sym.imp.KERNEL32.dll_LeaveCriticalSection]
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0041418c
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
mov eax, dword [sym.imp.USER32.dll_MessageBoxW]
push 0
push 0x43b47c
push str.The_analysis_did_not_complete_because_the_demo_version_limit_was_exceeded.
push 0
call eax
mov esi, dword [ebp - 0x103c]
jmp 0x40c9dd
cmp dword [0x92595c], 2
jne 0x40c9dd
mov eax, dword [0x819518]
test eax, eax
je 0x40c9dd
push eax
call fcn.004180b9
add esp, 4
push dword [0x819518]
call fcn.00418185
add esp, 4
cmp esi, 0xffffffff
jne 0x40ca19
push dword [ebp - 0x1074]
call dword [sym.imp.wpcap.dll_pcap_geterr]
add esp, 4
push eax
push str.Error_reading_the_packets__If1_:__s_n
call fcn.004011e0
add esp, 8
mov byte [0x43fb00], 1
pop edi
pop esi
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0041418c
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
cmp dword [0x92597c], 1
mov edi, dword [sym.imp.KERNEL32.dll_DeleteCriticalSection]
jne 0x40ca71
xor esi, esi
nop word [eax + eax]
cmp byte [0x59ab4b], 0
push 0x32
jne 0x40ca49
call dword [sym.imp.KERNEL32.dll_Sleep]
inc esi
cmp esi, 0x1e
jl 0x40ca30
jmp 0x40ca4f
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0x8194d8
call edi
push dword [ebp - 0x1074]
mov esi, dword [sym.imp.wpcap.dll_pcap_close]
call esi
add esp, 4
push dword [ebp - 0x1090]
call esi
jmp 0x40ca7d
push dword [ebp - 0x1074]
call dword [sym.imp.wpcap.dll_pcap_close]
add esp, 4
push 0xc8
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0x925960
call edi
mov ecx, dword [ebp - 4]
pop edi
xor ecx, ebp
pop esi
call fcn.0041418c
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret