Function at 0x48a700
Capabilities:
Allocate or change rwx memory
Create thread
Encode data using base64
Execute shellcode via indirect call
Inject thread
Parse pe header
Spawn thread to rwx shellcode

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x49f149
mov eax, dword fs:[0]
push eax
mov dword fs:[0], esp
sub esp, 0x974
push esi
push edi
mov dword [ebp - 0x24], 0
push 1
mov dword [ebp - 4], 0
call fcn.00492960
mov edi, dword [ebp + 8]
push edi
call fcn.00493f30
add esp, 8
lea ecx, [ebp - 0x50]
call fcn.00418ed0
mov dword [ebp - 0x80], 0
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x78], 0
mov dword [ebp - 0x74], 0
mov dword [ebp - 0x228], 0
mov dword [ebp - 0x224], 0
mov dword [ebp - 0x220], 0
mov dword [ebp - 0xdc], 0
mov dword [ebp - 0xd8], 0
mov dword [ebp - 0xd4], 0
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x68], 0
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x21c], 0
mov dword [ebp - 0x218], 0
mov dword [ebp - 0x214], 0
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x5c], 0
mov dword [ebp - 0x58], 0
mov dword [ebp - 0xac], 0
mov dword [ebp - 0xa8], 0
mov dword [ebp - 0xa4], 0
mov dword [ebp - 0xe8], 0
mov dword [ebp - 0xe4], 0
mov dword [ebp - 0xe0], 0
mov dword [ebp - 0x10c], 0
mov dword [ebp - 0x108], 0
mov dword [ebp - 0x104], 0
mov dword [ebp - 0xc4], 0
mov dword [ebp - 0xc0], 0
mov dword [ebp - 0xbc], 0
mov dword [ebp - 0x14c], 0
mov dword [ebp - 0x148], 0
mov dword [ebp - 0x144], 0
mov dword [ebp - 0xd0], 0
mov dword [ebp - 0xcc], 0
mov dword [ebp - 0xc8], 0
lea ecx, [ebp - 0x98]
call fcn.00418ed0
lea ecx, [ebp - 0x100]
call fcn.00418ed0
lea ecx, [ebp - 0x8f0]
call fcn.00418ed0
mov dword [ebp - 0xb8], 0
mov dword [ebp - 0xb4], 0
mov dword [ebp - 0xb0], 0
mov dword [ebp - 0x210], 0
mov dword [ebp - 0x20c], 0
mov dword [ebp - 0x208], 0
mov dword [ebp - 0x204], 0
mov dword [ebp - 0x200], 0
mov dword [ebp - 0x1fc], 0
lea ecx, [ebp - 0x8d8]
call fcn.00418ed0
mov dword [ebp - 0x1f8], 0
mov dword [ebp - 0x1f4], 0
mov dword [ebp - 0x1f0], 0
mov dword [ebp - 0x1ec], 0
mov dword [ebp - 0x1e8], 0
mov dword [ebp - 0x1e4], 0
lea ecx, [ebp - 0x1a8]
call fcn.00487be0
lea ecx, [ebp - 0x2ec]
call fcn.00487c10
lea eax, [ebp - 0x2ec]
mov byte [ebp - 4], 0x18
push eax
lea ecx, [ebp - 0x7c]
call fcn.00491200
xor esi, esi
lea ecx, [ebp + 0xc]
mov dword [ebp - 0x20], esi
call fcn.004913d0
test eax, eax
je 0x48c6fa
mov dword [ebp - 0x1c], 0x100
push esi
lea ecx, [ebp + 0xc]
call fcn.004883f0
push eax
lea ecx, [ebp - 0x50]
call fcn.00488200
lea ecx, [ebp - 0xac]
xor edi, edi
call fcn.00491390
test eax, eax
je 0x48aa5f
nop dword [eax + eax]
sub esp, 0x18
lea ecx, [ebp - 0xac]
mov esi, esp
mov dword [ebp - 0x14], esp
push edi
call fcn.004883b0
add eax, 0x18
mov ecx, esi
push eax
call fcn.00409d00
sub esp, 0x18
mov byte [ebp - 4], 0x19
mov esi, esp
mov dword [ebp - 0x2c], esp
lea ecx, [ebp - 0xac]
push edi
call fcn.004883b0
push eax
mov ecx, esi
call fcn.00409d00
sub esp, 0x18
mov byte [ebp - 4], 0x1a
lea eax, [ebp - 0x50]
mov ecx, esp
push eax
call fcn.00409d00
lea eax, [ebp - 0x908]
mov byte [ebp - 4], 0x18
push eax
call fcn.004965c0
add esp, 0x4c
lea ecx, [ebp - 0x50]
push eax
call fcn.0042d930
lea ecx, [ebp - 0x908]
call fcn.00402280
lea ecx, [ebp - 0xac]
inc edi
call fcn.00491390
cmp edi, eax
jb 0x48a9d0
mov esi, dword [ebp - 0x20]
lea eax, [ebp - 0x50]
push eax
lea ecx, [ebp - 0xb8]
call fcn.00491360
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.ASSERT_
call fcn.00409db0
sub esp, 0x18
mov byte [ebp - 4], 0x1b
mov eax, esp
lea ecx, [ebp - 0x50]
push 7
push 0
push eax
call fcn.004913f0
mov byte [ebp - 4], 0x18
call fcn.00493a50
add esp, 0x30
cmp al, 1
jne 0x48abf1
lea eax, [ebp - 0x1a8]
push eax
sub esp, 0x18
lea eax, [ebp - 0x50]
mov ecx, esp
push eax
call fcn.00409d00
call fcn.00490e00
add esp, 0x1c
test al, al
je 0x48cc38
lea eax, [ebp - 0x1a8]
push eax
lea ecx, [ebp - 0x98]
call fcn.00488200
lea eax, [ebp - 0x190]
push eax
lea ecx, [ebp - 0x100]
call fcn.00488200
lea eax, [ebp - 0x70]
mov dword [ebp - 0x70], 0
push eax
sub esp, 0x18
lea eax, [ebp - 0x98]
mov ecx, esp
push eax
call fcn.00409d00
mov edi, dword [ebp + 8]
push edi
call fcn.00492c80
add esp, 0x20
test al, al
je 0x48cc0b
sub esp, 0x18
lea eax, [ebp - 0x100]
mov ecx, esp
push eax
call fcn.00409d00
lea eax, [ebp - 0x140]
push eax
call fcn.00491640
add esp, 0x1c
mov eax, dword [ebp - 0x13c]
sub eax, dword [ebp - 0x140]
sar eax, 1
mov byte [ebp - 4], 0x1c
je 0x48cbd3
push eax
call fcn.0049c26b
mov ecx, dword [ebp - 0x13c]
add esp, 4
sub ecx, dword [ebp - 0x140]
mov esi, eax
lea eax, [ebp - 0x9c]
sar ecx, 1
push eax
push ecx
push esi
push dword [ebp - 0x70]
push edi
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
je 0x48cb4f
mov edx, dword [ebp - 0x13c]
mov edi, dword [ebp - 0x140]
sub edx, edi
sar edx, 1
cmp dword [ebp - 0x9c], edx
jne 0x48cb4f
xor eax, eax
test edx, edx
je 0x48abc9
movzx ecx, word [edi + eax*2]
cmp cx, word [ebp - 0x1c]
jae 0x48abc4
cmp cl, byte [esi + eax]
jne 0x48cacb
inc eax
cmp eax, edx
jb 0x48abb1
push esi
call fcn.0049c274
add esp, 4
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x140]
call fcn.00487d00
lea ecx, [ebp - 0xb8]
call fcn.004910e0
jmp 0x48c6e3
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.ASSERT2_
call fcn.00409db0
sub esp, 0x18
mov byte [ebp - 4], 0x1f
mov eax, esp
lea ecx, [ebp - 0x50]
push 8
push 0
push eax
call fcn.004913f0
mov byte [ebp - 4], 0x18
call fcn.00493a50
add esp, 0x30
cmp al, 1
jne 0x48aeac
push 0
push 0x28
lea ecx, [ebp - 0x50]
call fcn.00490dc0
push 0
push 0x29
lea ecx, [ebp - 0x50]
mov esi, eax
call fcn.00490dc0
test esi, esi
jle 0x48cdf1
lea ecx, [esi + 1]
cmp eax, ecx
jle 0x48cdf1
sub eax, esi
dec eax
push eax
push ecx
lea eax, [ebp - 0x920]
push eax
lea ecx, [ebp - 0x50]
call fcn.004913f0
push 0x2c
mov ecx, eax
mov byte [ebp - 4], 0x20
call fcn.00489540
push eax
lea eax, [ebp - 0x16c]
push eax
call fcn.00496700
add esp, 0xc
lea ecx, [ebp - 0x920]
mov byte [ebp - 4], 0x22
call fcn.00402280
lea ecx, [ebp - 0x16c]
call fcn.004913d0
cmp eax, 3
jne 0x48cdd0
sub esp, 0x18
lea ecx, [ebp - 0x16c]
mov esi, esp
push 0
call fcn.004883f0
push eax
mov ecx, esi
call fcn.00409d00
lea eax, [ebp - 0x938]
push eax
call fcn.00493b60
add esp, 0x1c
lea ecx, [ebp - 0x98]
push eax
call fcn.0042d930
lea ecx, [ebp - 0x938]
call fcn.00402280
sub esp, 0x18
lea ecx, [ebp - 0x16c]
mov esi, esp
push 1
call fcn.004883f0
push eax
mov ecx, esi
call fcn.00409d00
lea eax, [ebp - 0x428]
push eax
call fcn.00493b60
add esp, 0x1c
lea ecx, [ebp - 0x100]
push eax
call fcn.0042d930
lea ecx, [ebp - 0x428]
call fcn.00402280
sub esp, 0x18
lea ecx, [ebp - 0x16c]
mov esi, esp
push 2
call fcn.004883f0
push eax
mov ecx, esi
call fcn.00409d00
lea eax, [ebp - 0x1d8]
push eax
call fcn.00493b60
add esp, 0x1c
mov esi, dword [ebp - 0x1c8]
mov byte [ebp - 4], 0x23
cmp esi, 2
jb 0x48cda4
push 0
lea ecx, [ebp - 0x1d8]
call fcn.00488390
cmp byte [eax], 0x22
jne 0x48cda4
lea eax, [esi - 1]
push eax
lea ecx, [ebp - 0x1d8]
call fcn.00488390
cmp byte [eax], 0x22
jne 0x48cda4
lea eax, [ebp - 0x70]
mov dword [ebp - 0x70], 0
push eax
sub esp, 0x18
lea eax, [ebp - 0x98]
mov ecx, esp
push eax
call fcn.00409d00
mov edi, dword [ebp + 8]
push edi
call fcn.00492c80
add esp, 0x20
test al, al
je 0x48cd82
sub esp, 0x18
lea eax, [ebp - 0x100]
mov ecx, esp
push eax
call fcn.00409d00
lea eax, [ebp - 0x134]
push eax
call fcn.00491640
add esp, 0x1c
mov eax, dword [ebp - 0x130]
sub eax, dword [ebp - 0x134]
sar eax, 1
mov byte [ebp - 4], 0x24
je 0x48cd34
push eax
call fcn.0049c26b
mov ecx, dword [ebp - 0x130]
add esp, 4
sub ecx, dword [ebp - 0x134]
mov esi, eax
lea eax, [ebp - 0x9c]
sar ecx, 1
push eax
push ecx
push esi
push dword [ebp - 0x70]
push edi
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
je 0x48ccc3
mov edx, dword [ebp - 0x130]
mov edi, dword [ebp - 0x134]
sub edx, edi
sar edx, 1
cmp dword [ebp - 0x9c], edx
jne 0x48ccc3
xor eax, eax
test edx, edx
je 0x48ae6e
movzx ecx, word [edi + eax*2]
cmp cx, word [ebp - 0x1c]
jae 0x48ae69
cmp cl, byte [esi + eax]
jne 0x48cc4e
inc eax
cmp eax, edx
jb 0x48ae56
push esi
call fcn.0049c274
add esp, 4
lea ecx, [ebp - 0x134]
call fcn.00487d00
lea ecx, [ebp - 0x1d8]
call fcn.00402280
lea ecx, [ebp - 0x16c]
mov byte [ebp - 4], 0x18
call fcn.004190a0
lea ecx, [ebp - 0xb8]
call fcn.004910e0
jmp 0x48c6e3
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.GLOBALALLOC_
call fcn.00409db0
sub esp, 0x18
mov byte [ebp - 4], 0x25
mov eax, esp
lea ecx, [ebp - 0x50]
push 0xc
push 0
push eax
call fcn.004913f0
mov byte [ebp - 4], 0x18
call fcn.00493a50
add esp, 0x30
cmp al, 1
jne 0x48b005
lea eax, [ebp - 0x1a8]
push eax
sub esp, 0x18
lea eax, [ebp - 0x50]
mov ecx, esp
push eax
call fcn.00409d00
call fcn.00490e00
add esp, 0x1c
test al, al
je 0x48ce34
lea eax, [ebp - 0x1a8]
push eax
lea ecx, [ebp - 0x98]
call fcn.00488200
lea eax, [ebp - 0x190]
push eax
lea ecx, [ebp - 0x100]
call fcn.00488200
lea ecx, [ebp - 0x100]
call fcn.00489540
push eax
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atoi]
add esp, 4
test eax, eax
jle 0x48ce07
push eax
sub esp, 0x18
mov dword [ebp - 0x9c], eax
lea eax, [ebp - 0x98]
mov ecx, esp
push eax
call fcn.00409d00
push dword [ebp + 8]
call fcn.00488dc0
add esp, 0x20
lea ecx, [ebp - 0x30c]
call fcn.00487c30
lea eax, [ebp - 0x150]
mov byte [ebp - 4], 0x26
push eax
sub esp, 0x18
mov dword [ebp - 0x150], 0
lea eax, [ebp - 0x98]
mov ecx, esp
push eax
call fcn.00409d00
call fcn.00488b70
mov eax, dword [ebp - 0x150]
lea ecx, [ebp - 0x308]
add esp, 0x1c
mov dword [ebp - 0x30c], eax
lea eax, [ebp - 0x98]
push eax
call fcn.00488200
mov eax, dword [ebp - 0x9c]
lea ecx, [ebp - 0xdc]
mov dword [ebp - 0x2f0], eax
lea eax, [ebp - 0x30c]
push eax
call fcn.00491230
lea ecx, [ebp - 0xb8]
call fcn.004910e0
lea ecx, [ebp - 0x30c]
mov byte [ebp - 4], 0x18
call fcn.00488060
jmp 0x48c6e6
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.CREATETHREAD_
call fcn.00409db0
sub esp, 0x18
mov byte [ebp - 4], 0x27
mov eax, esp
lea ecx, [ebp - 0x50]
push 0xd
push 0
push eax
call fcn.004913f0
mov byte [ebp - 4], 0x18
call fcn.00493a50
add esp, 0x30
cmp al, 1
jne 0x48b0c9
push 0
push 0x28
lea ecx, [ebp - 0x50]
call fcn.00490dc0
push 0
push 0x29
lea ecx, [ebp - 0x50]
mov esi, eax
call fcn.00490dc0
test esi, esi
jle 0x48ce4a
lea edx, [esi + 1]
cmp eax, edx
jle 0x48ce4a
sub esp, 0x18
sub eax, esi
mov ecx, esp
dec eax
push eax
push edx
push ecx
lea ecx, [ebp - 0x50]
call fcn.004913f0
lea eax, [ebp - 0x440]
push eax
call fcn.00493b60
add esp, 0x1c
lea ecx, [ebp - 0x98]
push eax
call fcn.0042d930
lea ecx, [ebp - 0x440]
call fcn.00402280
lea eax, [ebp - 0x98]
push eax
lea ecx, [ebp - 0xd0]
call fcn.00491360
lea ecx, [ebp - 0xb8]
call fcn.004910e0
jmp 0x48c6e3
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x14], esp
push 0x4d3384
call fcn.00409db0
sub esp, 0x18
mov byte [ebp - 4], 0x28
mov eax, esp
lea ecx, [ebp - 0x50]
push 0xc
push 0
push eax
call fcn.004913f0
mov byte [ebp - 4], 0x18
call fcn.00493a50
add esp, 0x30
cmp al, 1
jne 0x48b18c
push 0
push 0x28
lea ecx, [ebp - 0x50]
call fcn.00490dc0
push 0
push 0x29
lea ecx, [ebp - 0x50]
mov esi, eax
call fcn.00490dc0
test esi, esi
jle 0x48ce60
lea edx, [esi + 1]
cmp eax, edx
jle 0x48ce60
sub esp, 0x18
sub eax, esi
mov ecx, esp
dec eax
push eax
push edx
push ecx
lea ecx, [ebp - 0x50]
call fcn.004913f0
lea eax, [ebp - 0x458]
push eax
call fcn.00493b60
add esp, 0x1c
lea ecx, [ebp - 0x98]
push eax
call fcn.0042d930
lea ecx, [ebp - 0x458]
call fcn.00402280
push 0
push 0
push str.LOADLIBRARY_
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
lea ecx, [ebp - 0xb8]
call fcn.004910e0
jmp 0x48c6e3
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.READMEM_
call fcn.00409db0
sub esp, 0x18
mov byte [ebp - 4], 0x29
mov eax, esp
lea ecx, [ebp - 0x50]
push 8
push 0
push eax
call fcn.004913f0
mov byte [ebp - 4], 0x18
call fcn.00493a50
add esp, 0x30
cmp al, 1
jne 0x48b3a8
lea eax, [ebp - 0x1a8]
push eax
sub esp, 0x18
lea eax, [ebp - 0x50]
mov ecx, esp
push eax
call fcn.00409d00
call fcn.00490e00
add esp, 0x1c
test al, al
je 0x48cf1e
lea eax, [ebp - 0x1a8]
push eax
lea ecx, [ebp - 0x98]
call fcn.00488200
lea eax, [ebp - 0x190]
push eax
lea ecx, [ebp - 0x100]
call fcn.00488200
lea eax, [ebp - 0x9c]
mov dword [ebp - 0x9c], 0
push eax
sub esp, 0x18
lea eax, [ebp - 0x98]
mov ecx, esp
push eax
call fcn.00409d00
push dword [ebp + 8]
call fcn.00492c80
add esp, 0x20
test al, al
je 0x48cf08
lea ecx, [ebp - 0x100]
call fcn.00489540
push eax
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atoi]
mov esi, eax
add esp, 4
mov dword [ebp - 0x18], esi
test esi, esi
jle 0x48cef2
push esi
call fcn.0049c26b
add esp, 4
mov dword [ebp - 0x11c], 0
mov edi, eax
lea eax, [ebp - 0x11c]
mov dword [ebp - 0x28], edi
push eax
push esi
push edi
push dword [ebp - 0x9c]
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
test eax, eax
je 0x48ce7c
cmp dword [ebp - 0x11c], esi
jb 0x48ce7c
lea ecx, [ebp - 0xb8]
call fcn.004910e0
push 0x4d3434
lea ecx, [ebp - 0x98]
call fcn.00488230
xor edi, edi
nop dword [eax]
mov eax, dword [ebp - 0x28]
movzx eax, byte [eax + edi]
push eax
lea eax, [ebp - 0x4a0]
push eax
call fcn.00494300
mov esi, eax
push 0x4d3438
lea eax, [ebp - 0x98]
mov byte [ebp - 4], 0x2b
push eax
lea eax, [ebp - 0x488]
push eax
call fcn.00485b40
push esi
push eax
lea eax, [ebp - 0x470]
mov byte [ebp - 4], 0x2c
push eax
call fcn.00485ab0
add esp, 0x20
lea ecx, [ebp - 0x98]
push eax
call fcn.0042d930
lea ecx, [ebp - 0x470]
call fcn.00402280
lea ecx, [ebp - 0x488]
call fcn.00402280
lea ecx, [ebp - 0x4a0]
mov byte [ebp - 4], 0x18
call fcn.00402280
mov eax, edi
and eax, 0xf
cmp al, 0xf
jne 0x48b373
lea eax, [ebp - 0x98]
push eax
lea ecx, [ebp - 0xb8]
call fcn.00491360
push 0x4d3434
lea ecx, [ebp - 0x98]
call fcn.00488230
inc edi
cmp edi, dword [ebp - 0x18]
jl 0x48b2d0
cmp dword [ebp - 0x88], 2
jbe 0x48b398
lea eax, [ebp - 0x98]
push eax
lea ecx, [ebp - 0xb8]
call fcn.00491360
push dword [ebp - 0x28]
call fcn.0049c274
add esp, 4
jmp 0x48c6e3
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.REGISTERSYMBOL_
call fcn.00409db0
sub esp, 0x18
mov byte [ebp - 4], 0x2d
mov eax, esp
lea ecx, [ebp - 0x50]
push 0xf
push 0
push eax
call fcn.004913f0
mov byte [ebp - 4], 0x18
call fcn.00493a50
add esp, 0x30
cmp al, 1
jne 0x48b46c
push 0
push 0x28
lea ecx, [ebp - 0x50]
call fcn.00490dc0
push 0
push 0x29
lea ecx, [ebp - 0x50]
mov esi, eax
call fcn.00490dc0
test esi, esi
jle 0x48cf34
lea edx, [esi + 1]
cmp eax, edx
jle 0x48cf34
sub esp, 0x18
sub eax, esi
mov ecx, esp
dec eax
push eax
push edx
push ecx
lea ecx, [ebp - 0x50]
call fcn.004913f0
lea eax, [ebp - 0x4b8]
push eax
call fcn.00493b60
add esp, 0x1c
lea ecx, [ebp - 0x98]
push eax
call fcn.0042d930
lea ecx, [ebp - 0x4b8]
call fcn.00402280
lea eax, [ebp - 0x98]
push eax
lea ecx, [ebp - 0xc4]
call fcn.00491360
lea ecx, [ebp - 0xb8]
call fcn.004910e0
jmp 0x48c6e3
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.UNREGISTERSYMBOL_
call fcn.00409db0
sub esp, 0x18
mov byte [ebp - 4], 0x2e
mov eax, esp
lea ecx, [ebp - 0x50]
push 0x11
push 0
push eax
call fcn.004913f0
mov byte [ebp - 4], 0x18
call fcn.00493a50
add esp, 0x30
cmp al, 1
jne 0x48b53a
push 0
push 0x28
lea ecx, [ebp - 0x50]
call fcn.00490dc0
push 0
push 0x29
lea ecx, [ebp - 0x50]
mov esi, eax
call fcn.00490dc0
mov ecx, eax
test esi, esi
jle 0x48cf34
test ecx, ecx
jle 0x48cf34
lea edx, [esi + 1]
cmp ecx, edx
jle 0x48cf34
sub esp, 0x18
sub ecx, esi
mov eax, esp
dec ecx
push ecx
push edx
push eax
lea ecx, [ebp - 0x50]
call fcn.004913f0
lea eax, [ebp - 0x4d0]
push eax
call fcn.00493b60
add esp, 0x1c
lea ecx, [ebp - 0x98]
push eax
call fcn.0042d930
lea ecx, [ebp - 0x4d0]
call fcn.00402280
lea eax, [ebp - 0x98]
push eax
lea ecx, [ebp - 0x14c]
call fcn.00491360
lea ecx, [ebp - 0xb8]
call fcn.004910e0
jmp 0x48c6e3
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.AOBSCAN_
call fcn.00409db0
sub esp, 0x18
mov byte [ebp - 4], 0x2f
mov eax, esp
lea ecx, [ebp - 0x50]
push 8
push 0
push eax
call fcn.004913f0
mov byte [ebp - 4], 0x18
call fcn.00493a50
add esp, 0x30
cmp al, 1
jne 0x48b6ac
lea eax, [ebp - 0x1a8]
push eax
sub esp, 0x18
lea eax, [ebp - 0x50]
mov ecx, esp
push eax
call fcn.00409d00
call fcn.00490e00
add esp, 0x1c
test al, al
je 0x48cfa3
lea eax, [ebp - 0x1a8]
push eax
lea ecx, [ebp - 0x98]
call fcn.00488200
lea eax, [ebp - 0x190]
push eax
lea ecx, [ebp - 0x100]
call fcn.00488200
lea eax, [ebp - 0x70]
mov dword [ebp - 0x70], 0
push eax
sub esp, 0x18
lea eax, [ebp - 0x100]
mov ecx, esp
push eax
call fcn.00409d00
mov edi, dword [ebp + 8]
push 0x7fffffff
push 0
push 1
push edi
call fcn.00491ce0
add esp, 0x2c
test al, al
je 0x48cf4a
push dword [ebp - 0x70]
lea eax, [ebp - 0x548]
push eax
call fcn.00494300
mov esi, eax
lea eax, [ebp - 0x98]
mov byte [ebp - 4], 0x31
push eax
lea eax, [ebp - 0x530]
push str.DEFINE_
push eax
call fcn.00485ca0
push 0x4a7430
push eax
lea eax, [ebp - 0x518]
mov byte [ebp - 4], 0x32
push eax
call fcn.00485ad0
push esi
push eax
lea eax, [ebp - 0x500]
mov byte [ebp - 4], 0x33
push eax
call fcn.00485ab0
push 0x4d34cc
push eax
lea eax, [ebp - 0x4e8]
mov byte [ebp - 4], 0x34
push eax
call fcn.00485ad0
add esp, 0x38
lea ecx, [ebp - 0x50]
push eax
call fcn.0042d930
lea ecx, [ebp - 0x4e8]
call fcn.00402280
lea ecx, [ebp - 0x500]
call fcn.00402280
lea ecx, [ebp - 0x518]
call fcn.00402280
lea ecx, [ebp - 0x530]
call fcn.00402280
lea ecx, [ebp - 0x548]
mov byte [ebp - 4], 0x18
call fcn.00402280
jmp 0x48b6af
mov edi, dword [ebp + 8]
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.AOBSCAN2_
call fcn.00409db0
sub esp, 0x18
mov byte [ebp - 4], 0x35
mov eax, esp
lea ecx, [ebp - 0x50]
push 9
push 0
push eax
call fcn.004913f0
mov byte [ebp - 4], 0x18
call fcn.00493a50
add esp, 0x30
cmp al, 1
jne 0x48ba5c
push 0
push 0x28
lea ecx, [ebp - 0x50]
call fcn.00490dc0
push 0
push 0x29
lea ecx, [ebp - 0x50]
mov esi, eax
call fcn.00490dc0
test esi, esi
jle 0x48d063
lea ecx, [esi + 1]
cmp eax, ecx
jle 0x48d063
sub eax, esi
dec eax
push eax
push ecx
lea eax, [ebp - 0x560]
push eax
lea ecx, [ebp - 0x50]
call fcn.004913f0
push 0x2c
mov ecx, eax
mov byte [ebp - 4], 0x36
call fcn.00489540
push eax
lea eax, [ebp - 0x118]
push eax
call fcn.00496700
add esp, 0xc
lea ecx, [ebp - 0x560]
mov byte [ebp - 4], 0x38
call fcn.00402280
lea ecx, [ebp - 0x118]
call fcn.004913d0
cmp eax, 6
jne 0x48d042
sub esp, 0x18
lea ecx, [ebp - 0x118]
mov esi, esp
push 0
call fcn.004883f0
push eax
mov ecx, esi
call fcn.00409d00
lea eax, [ebp - 0x578]
push eax
call fcn.00493b60
add esp, 0x1c
lea ecx, [ebp - 0x98]
push eax
call fcn.0042d930
lea ecx, [ebp - 0x578]
call fcn.00402280
sub esp, 0x18
lea ecx, [ebp - 0x118]
mov esi, esp
push 1
call fcn.004883f0
push eax
mov ecx, esi
call fcn.00409d00
lea eax, [ebp - 0x590]
push eax
call fcn.00493b60
add esp, 0x1c
lea ecx, [ebp - 0x100]
push eax
call fcn.0042d930
lea ecx, [ebp - 0x590]
call fcn.00402280
sub esp, 0x18
mov dword [ebp - 0x70], 0
mov esi, esp
lea ecx, [ebp - 0x118]
push 4
call fcn.004883f0
push eax
mov ecx, esi
call fcn.00409d00
lea eax, [ebp - 0x5a8]
push eax
call fcn.00493b60
add esp, 0x1c
mov ecx, eax
call fcn.00489540
push eax
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atoi]
add esp, 4
mov dword [ebp - 0x30], eax
lea ecx, [ebp - 0x5a8]
call fcn.00402280
lea eax, [ebp - 0x124]
mov dword [ebp - 0x124], 0
push eax
sub esp, 0x18
lea ecx, [ebp - 0x118]
mov edi, esp
sub esp, 0x18
mov esi, esp
push 2
call fcn.004883f0
push eax
mov ecx, esi
call fcn.00409d00
push edi
call fcn.00493b60
add esp, 0x1c
call fcn.004929e0
add esp, 0x1c
mov byte [ebp - 0x35], al
lea eax, [ebp - 0x120]
mov dword [ebp - 0x120], 0
push eax
sub esp, 0x18
mov edi, esp
sub esp, 0x18
mov esi, esp
push 3
lea ecx, [ebp - 0x118]
call fcn.004883f0
push eax
mov ecx, esi
call fcn.00409d00
push edi
call fcn.00493b60
add esp, 0x1c
call fcn.004929e0
add esp, 4
mov byte [ebp - 0xd], al
mov esi, esp
lea ecx, [ebp - 0x118]
push 5
call fcn.004883f0
push eax
mov ecx, esi
call fcn.00409d00
lea eax, [ebp - 0x240]
push eax
call fcn.00493b60
add esp, 0x1c
mov esi, dword [ebp - 0x230]
xor cl, cl
mov byte [ebp - 4], 0x39
mov dword [ebp - 0x28], ecx
cmp esi, 2
jb 0x48b934
push 0
lea ecx, [ebp - 0x240]
call fcn.00488390
cmp byte [eax], 0x22
jne 0x48b931
lea eax, [esi - 1]
push eax
lea ecx, [ebp - 0x240]
call fcn.00488390
mov ecx, dword [ebp - 0x28]
movzx ecx, cl
cmp byte [eax], 0x22
mov eax, 1
cmove ecx, eax
jmp 0x48b934
mov ecx, dword [ebp - 0x28]
cmp dword [ebp - 0x30], 1
jl 0x48d016
cmp byte [ebp - 0x35], 0
je 0x48d016
cmp byte [ebp - 0xd], 0
je 0x48d016
test cl, cl
je 0x48d016
mov esi, dword [ebp - 0x120]
lea eax, [ebp - 0x70]
mov edi, dword [ebp - 0x124]
push eax
sub esp, 0x18
lea eax, [ebp - 0x100]
mov ecx, esp
push eax
call fcn.00409d00
push esi
push edi
push dword [ebp - 0x30]
mov edi, dword [ebp + 8]
push edi
call fcn.00491ce0
add esp, 0x2c
test al, al
je 0x48cfb9
push dword [ebp - 0x70]
lea eax, [ebp - 0x620]
push eax
call fcn.00494300
mov esi, eax
lea eax, [ebp - 0x98]
mov byte [ebp - 4], 0x3a
push eax
lea eax, [ebp - 0x608]
push str.DEFINE_
push eax
call fcn.00485ca0
push 0x4a7430
push eax
lea eax, [ebp - 0x5f0]
mov byte [ebp - 4], 0x3b
push eax
call fcn.00485ad0
push esi
push eax
lea eax, [ebp - 0x5d8]
mov byte [ebp - 4], 0x3c
push eax
call fcn.00485ab0
push 0x4d34cc
push eax
lea eax, [ebp - 0x5c0]
mov byte [ebp - 4], 0x3d
push eax
call fcn.00485ad0
add esp, 0x38
lea ecx, [ebp - 0x50]
push eax
call fcn.0042d930
lea ecx, [ebp - 0x5c0]
call fcn.00402280
lea ecx, [ebp - 0x5d8]
call fcn.00402280
lea ecx, [ebp - 0x5f0]
call fcn.00402280
lea ecx, [ebp - 0x608]
call fcn.00402280
lea ecx, [ebp - 0x620]
call fcn.00402280
lea ecx, [ebp - 0x240]
call fcn.00402280
lea ecx, [ebp - 0x118]
mov byte [ebp - 4], 0x18
call fcn.004190a0
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.DEFINE_
call fcn.00409db0
sub esp, 0x18
mov byte [ebp - 4], 0x3e
mov eax, esp
lea ecx, [ebp - 0x50]
push 7
push 0
push eax
call fcn.004913f0
mov byte [ebp - 4], 0x18
call fcn.00493a50
add esp, 0x30
cmp al, 1
jne 0x48bba4
lea eax, [ebp - 0x1a8]
push eax
sub esp, 0x18
lea eax, [ebp - 0x50]
mov ecx, esp
push eax
call fcn.00409d00
call fcn.00490e00
add esp, 0x1c
test al, al
je 0x48d0d2
lea eax, [ebp - 0x1a8]
push eax
lea ecx, [ebp - 0x98]
call fcn.00488200
lea eax, [ebp - 0x190]
push eax
lea ecx, [ebp - 0x100]
call fcn.00488200
lea ecx, [ebp - 0xac]
xor edi, edi
call fcn.00491390
test eax, eax
je 0x48bb47
sub esp, 0x18
lea eax, [ebp - 0x98]
mov ecx, esp
mov dword [ebp - 0x14], esp
push eax
call fcn.00409d00
sub esp, 0x18
mov byte [ebp - 4], 0x3f
mov esi, esp
lea ecx, [ebp - 0xac]
push edi
call fcn.004883b0
push eax
mov ecx, esi
call fcn.00409d00
mov byte [ebp - 4], 0x18
call fcn.00493a50
add esp, 0x30
test al, al
jne 0x48d079
lea ecx, [ebp - 0xac]
inc edi
call fcn.00491390
cmp edi, eax
jb 0x48baf2
lea eax, [ebp - 0x98]
push eax
lea ecx, [ebp - 0x968]
call fcn.00409d00
lea eax, [ebp - 0x100]
mov byte [ebp - 4], 0x41
push eax
lea ecx, [ebp - 0x950]
call fcn.00409d00
lea eax, [ebp - 0x968]
mov byte [ebp - 4], 0x42
push eax
lea ecx, [ebp - 0xac]
call fcn.00491280
lea ecx, [ebp - 0xb8]
call fcn.004910e0
lea ecx, [ebp - 0x968]
mov byte [ebp - 4], 0x18
call fcn.00481a30
jmp 0x48c6e3
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.FULLACCESS_
call fcn.00409db0
sub esp, 0x18
mov byte [ebp - 4], 0x43
mov eax, esp
lea ecx, [ebp - 0x50]
push 0xb
push 0
push eax
call fcn.004913f0
mov byte [ebp - 4], 0x18
call fcn.00493a50
add esp, 0x30
cmp al, 1
jne 0x48bca5
lea eax, [ebp - 0x1a8]
push eax
sub esp, 0x18
lea eax, [ebp - 0x50]
mov ecx, esp
push eax
call fcn.00409d00
call fcn.00490e00
add esp, 0x1c
test al, al
je 0x48d0e8
lea eax, [ebp - 0x1a8]
push eax
lea ecx, [ebp - 0x98]
call fcn.00488200
lea eax, [ebp - 0x190]
push eax
lea ecx, [ebp - 0x100]
call fcn.00488200
lea ecx, [ebp - 0x100]
call fcn.00489540
push eax
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atoi]
add esp, 4
mov esi, eax
lea eax, [ebp - 0x1b0]
mov dword [ebp - 0x1dc], esi
push eax
sub esp, 0x18
lea eax, [ebp - 0x98]
mov ecx, esp
push eax
call fcn.00409d00
push edi
call fcn.00492c80
add esp, 0x20
test al, al
je 0x48d0e8
test esi, esi
je 0x48d0e8
mov eax, dword [ebp - 0x1b0]
lea ecx, [ebp - 0xe8]
mov dword [ebp - 0x1e0], eax
lea eax, [ebp - 0x1e0]
push eax
call fcn.00491300
lea ecx, [ebp - 0xb8]
call fcn.004910e0
jmp 0x48c6e3
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.LABEL_
call fcn.00409db0
sub esp, 0x18
mov byte [ebp - 4], 0x44
mov eax, esp
lea ecx, [ebp - 0x50]
push 6
push 0
push eax
call fcn.004913f0
mov byte [ebp - 4], 0x18
call fcn.00493a50
add esp, 0x30
cmp al, 1
jne 0x48bf1c
push 0
push 0x28
lea ecx, [ebp - 0x50]
call fcn.00490dc0
push 0
push 0x29
lea ecx, [ebp - 0x50]
mov esi, eax
call fcn.00490dc0
mov ecx, eax
test esi, esi
jle 0x48d1d6
test ecx, ecx
jle 0x48d1d6
lea edx, [esi + 1]
cmp ecx, edx
jle 0x48d1d6
sub esp, 0x18
sub ecx, esi
mov eax, esp
dec ecx
push ecx
push edx
push eax
lea ecx, [ebp - 0x50]
call fcn.004913f0
lea eax, [ebp - 0x638]
push eax
call fcn.00493b60
add esp, 0x1c
lea ecx, [ebp - 0x98]
push eax
call fcn.0042d930
lea ecx, [ebp - 0x638]
call fcn.00402280
lea eax, [ebp - 0x1ac]
mov dword [ebp - 0x1ac], 0
push eax
sub esp, 0x18
lea eax, [ebp - 0x98]
mov ecx, esp
push eax
call fcn.00409d00
call fcn.004929e0
add esp, 0x1c
cmp al, 1
je 0x48d24b
lea ecx, [ebp - 0x60]
xor esi, esi
call fcn.004913b0
mov edi, eax
test edi, edi
je 0x48bdb8
push esi
lea ecx, [ebp - 0x60]
call fcn.004883d0
lea ecx, [ebp - 0x98]
push ecx
lea ecx, [eax + 8]
call fcn.00490b10
test eax, eax
je 0x48d0fe
inc esi
cmp esi, edi
jb 0x48bd93
push 0x4d3618
lea eax, [ebp - 0x98]
mov byte [ebp - 0xd], 0
push eax
lea eax, [ebp - 0x344]
push eax
call fcn.00485b40
add esp, 0xc
lea ecx, [ebp + 0xc]
mov byte [ebp - 4], 0x45
xor edi, edi
call fcn.004913d0
test eax, eax
je 0x48d172
nop dword [eax]
sub esp, 0x18
lea ecx, [ebp + 0xc]
mov esi, esp
push edi
call fcn.004883f0
push eax
mov ecx, esi
call fcn.00409d00
lea eax, [ebp - 0x650]
push eax
call fcn.00493b60
add esp, 0x1c
lea ecx, [ebp - 0x344]
push ecx
mov ecx, eax
call fcn.00490b10
lea ecx, [ebp - 0x650]
mov esi, eax
call fcn.00402280
test esi, esi
jne 0x48be42
cmp byte [ebp - 0xd], 0
jne 0x48d108
mov byte [ebp - 0xd], 1
lea ecx, [ebp + 0xc]
inc edi
call fcn.004913d0
cmp edi, eax
jb 0x48bdf0
cmp byte [ebp - 0xd], 0
je 0x48d172
lea ecx, [ebp - 0x410]
call fcn.00487c50
lea eax, [ebp - 0x98]
mov byte [ebp - 4], 0x48
push eax
lea ecx, [ebp - 0x408]
call fcn.00488200
lea ecx, [ebp - 0x60]
mov byte [ebp - 0x410], 0
xor esi, esi
call fcn.004913b0
mov edi, eax
test edi, edi
je 0x48beaa
push esi
lea ecx, [ebp - 0x60]
call fcn.004883d0
mov ecx, dword [ebp - 0x88]
cmp dword [eax + 0x18], ecx
jbe 0x48beaa
inc esi
cmp esi, edi
jb 0x48be91
lea ecx, [ebp - 0x60]
call fcn.004913b0
cmp esi, eax
jb 0x48bec7
lea eax, [ebp - 0x410]
push eax
lea ecx, [ebp - 0x60]
call fcn.00491340
jmp 0x48bef2
mov eax, dword [ebp - 0x60]
lea ecx, [ebp - 0x18]
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x24c]
push esi
push eax
call fcn.00488430
lea ecx, [ebp - 0x410]
push ecx
lea ecx, [ebp - 0x60]
push dword [eax]
lea eax, [ebp - 0x54]
push eax
call fcn.004910c0
lea ecx, [ebp - 0xb8]
call fcn.004910e0
lea ecx, [ebp - 0x410]
call fcn.00488110
lea ecx, [ebp - 0x344]
mov byte [ebp - 4], 0x18
call fcn.00402280
jmp 0x48c6e3
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.DEALLOC_
call fcn.00409db0
sub esp, 0x18
mov byte [ebp - 4], 0x49
mov eax, esp
lea ecx, [ebp - 0x50]
push 8
push 0
push eax
call fcn.004913f0
mov byte [ebp - 4], 0x18
call fcn.00493a50
add esp, 0x30
cmp al, 1
jne 0x48c063
mov esi, dword [ebp + 0x18]
mov eax, dword [esi + 4]
sub eax, dword [esi]
sar eax, 5
test eax, eax
je 0x48c053
push 0
push 0x28
lea ecx, [ebp - 0x50]
call fcn.00490dc0
push 0
push 0x29
lea ecx, [ebp - 0x50]
mov esi, eax
call fcn.00490dc0
mov ecx, eax
test esi, esi
jle 0x48c053
test ecx, ecx
jle 0x48c053
lea edx, [esi + 1]
cmp ecx, edx
jle 0x48c053
sub esp, 0x18
sub ecx, esi
mov eax, esp
dec ecx
push ecx
push edx
push eax
lea ecx, [ebp - 0x50]
call fcn.004913f0
lea eax, [ebp - 0x668]
push eax
call fcn.00493b60
add esp, 0x1c
lea ecx, [ebp - 0x98]
push eax
call fcn.0042d930
lea ecx, [ebp - 0x668]
call fcn.00402280
mov ecx, dword [ebp + 0x18]
xor edi, edi
mov eax, dword [ecx + 4]
sub eax, dword [ecx]
sar eax, 5
test eax, eax
je 0x48c053
xor esi, esi
nop
sub esp, 0x18
lea eax, [ebp - 0x98]
mov ecx, esp
mov dword [ebp - 0x14], esp
push eax
call fcn.00409d00
mov eax, dword [ebp + 0x18]
sub esp, 0x18
mov ecx, esp
mov byte [ebp - 4], 0x4a
mov eax, dword [eax]
add eax, 4
add eax, esi
push eax
call fcn.00409d00
mov byte [ebp - 4], 0x18
call fcn.00493a50
add esp, 0x30
cmp al, 1
jne 0x48c040
mov eax, dword [ebp + 0x18]
lea ecx, [ebp - 0x10c]
mov eax, dword [eax]
add eax, esi
push eax
call fcn.00491140
mov ecx, dword [ebp + 0x18]
inc edi
add esi, 0x20
mov eax, dword [ecx + 4]
sub eax, dword [ecx]
sar eax, 5
cmp edi, eax
jb 0x48bff0
lea ecx, [ebp - 0xb8]
call fcn.004910e0
jmp 0x48c6e3
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.ALLOC_
call fcn.00409db0
sub esp, 0x18
mov byte [ebp - 4], 0x4b
mov eax, esp
lea ecx, [ebp - 0x50]
push 6
push 0
push eax
call fcn.004913f0
mov byte [ebp - 4], 0x18
call fcn.00493a50
add esp, 0x30
cmp al, 1
jne 0x48c20e
lea eax, [ebp - 0x1a8]
push eax
sub esp, 0x18
lea eax, [ebp - 0x50]
mov ecx, esp
push eax
call fcn.00409d00
call fcn.00490e00
add esp, 0x1c
test al, al
je 0x48d278
lea eax, [ebp - 0x1a8]
push eax
lea ecx, [ebp - 0x98]
call fcn.00488200
lea eax, [ebp - 0x190]
push eax
lea ecx, [ebp - 0x100]
call fcn.00488200
lea eax, [ebp - 0x178]
mov dword [ebp - 0x178], 0
push eax
sub esp, 0x18
lea eax, [ebp - 0x98]
mov ecx, esp
push eax
call fcn.00409d00
call fcn.004929e0
add esp, 0x1c
cmp al, 1
je 0x48d24b
mov eax, dword [ebp - 0x68]
xor esi, esi
mov edi, dword [ebp - 0x6c]
sub eax, edi
sar eax, 5
mov dword [ebp - 0x18], eax
test eax, eax
je 0x48c150
add edi, 4
lea eax, [ebp - 0x98]
mov ecx, edi
push eax
call fcn.00490b10
test eax, eax
je 0x48d1ec
inc esi
add edi, 0x20
cmp esi, dword [ebp - 0x18]
jb 0x48c131
lea ecx, [ebp - 0x32c]
call fcn.00487c30
lea eax, [ebp - 0x98]
mov byte [ebp - 4], 0x4d
push eax
lea ecx, [ebp - 0x328]
call fcn.00488200
lea ecx, [ebp - 0x100]
call fcn.00489540
push eax
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_atoi]
mov edx, dword [ebp - 0x68]
add esp, 4
mov edi, dword [ebp - 0x6c]
sub edx, edi
mov dword [ebp - 0x310], eax
xor eax, eax
sar edx, 5
test edx, edx
je 0x48c1b2
mov esi, dword [ebp - 0x88]
lea ecx, [edi + 0x14]
cmp dword [ecx], esi
jbe 0x48c1b2
inc eax
add ecx, 0x20
cmp eax, edx
jb 0x48c1a6
cmp eax, edx
jb 0x48c1c7
lea eax, [ebp - 0x32c]
push eax
lea ecx, [ebp - 0x6c]
call fcn.00491230
jmp 0x48c1ef
push eax
lea eax, [ebp - 0x244]
mov dword [ebp - 0x18], edi
push eax
lea ecx, [ebp - 0x18]
call fcn.00488410
lea ecx, [ebp - 0x32c]
push ecx
lea ecx, [ebp - 0x6c]
push dword [eax]
lea eax, [ebp - 0x34]
push eax
call fcn.00490f80
lea ecx, [ebp - 0xb8]
call fcn.004910e0
lea ecx, [ebp - 0x32c]
mov byte [ebp - 4], 0x18
call fcn.00488060
jmp 0x48c6e3
mov eax, dword [ebp - 0x40]
lea ecx, [ebp - 0x50]
dec eax
push eax
call fcn.00488390
cmp byte [eax], 0x3a
jne 0x48c3d7
xor al, al
lea ecx, [ebp - 0x60]
mov byte [ebp - 0xd], al
xor edi, edi
call fcn.004913b0
test eax, eax
je 0x48c2c3
nop dword [eax + eax]
push edi
lea ecx, [ebp - 0x60]
call fcn.004883d0
add eax, 8
lea ecx, [ebp - 0x264]
push eax
call fcn.00409d00
push 0x4d3618
lea ecx, [ebp - 0x264]
mov byte [ebp - 4], 0x4e
call fcn.00488470
lea eax, [ebp - 0x264]
push eax
lea ecx, [ebp - 0x50]
call fcn.00490b10
test eax, eax
jne 0x48c29d
lea ecx, [ebp - 0xb8]
call fcn.004913d0
push edi
lea ecx, [ebp - 0x60]
lea esi, [eax - 1]
call fcn.004883d0
mov byte [ebp - 0xd], 1
mov dword [eax + 0x20], esi
lea ecx, [ebp - 0x264]
mov byte [ebp - 4], 0x18
call fcn.00402280
lea ecx, [ebp - 0x60]
inc edi
call fcn.004913b0
cmp edi, eax
jb 0x48c240
cmp byte [ebp - 0xd], 0
jne 0x48c6e3
mov eax, dword [ebp - 0x68]
xor esi, esi
sub eax, dword [ebp - 0x6c]
sar eax, 5
test eax, eax
je 0x48c33d
xor edi, edi
mov eax, dword [ebp - 0x6c]
lea ecx, [ebp - 0x2dc]
add eax, 4
add eax, edi
push eax
call fcn.00409d00
push 0x4d3618
lea ecx, [ebp - 0x2dc]
mov byte [ebp - 4], 0x4f
call fcn.00488470
lea eax, [ebp - 0x2dc]
push eax
lea ecx, [ebp - 0x50]
call fcn.00490b10
mov byte [ebp - 4], 0x18
lea ecx, [ebp - 0x2dc]
test eax, eax
jne 0x48c31d
mov byte [ebp - 0xd], 1
call fcn.00402280
mov eax, dword [ebp - 0x68]
inc esi
sub eax, dword [ebp - 0x6c]
add edi, 0x20
sar eax, 5
cmp esi, eax
jb 0x48c2d4
cmp byte [ebp - 0xd], 0
jne 0x48c6e3
lea eax, [ebp - 0x174]
push eax
mov eax, dword [ebp - 0x40]
sub esp, 0x18
mov ecx, esp
dec eax
push eax
push 0
push ecx
lea ecx, [ebp - 0x50]
call fcn.004913f0
push dword [ebp + 8]
call fcn.00492c80
add esp, 0x20
test al, al
je 0x48d28e
push dword [ebp - 0x174]
lea eax, [ebp - 0x7e8]
push eax
call fcn.00494300
push 0x4d3618
push eax
lea eax, [ebp - 0x3a4]
mov byte [ebp - 4], 0x50
push eax
call fcn.00485ad0
add esp, 0x14
lea ecx, [ebp - 0x7e8]
mov byte [ebp - 4], 0x52
call fcn.00402280
lea ecx, [ebp - 0xb8]
call fcn.004910e0
lea eax, [ebp - 0x3a4]
push eax
lea ecx, [ebp - 0xb8]
call fcn.00491360
lea ecx, [ebp - 0x3a4]
mov byte [ebp - 4], 0x18
call fcn.00402280
jmp 0x48c6e3
lea eax, [ebp - 0x9d]
mov byte [ebp - 0x9d], 0
push eax
sub esp, 0x18
lea eax, [ebp - 0x50]
mov ecx, esp
push eax
call fcn.00409d00
lea eax, [ebp - 0x680]
push edi
push eax
call fcn.00495d60
add esp, 0x24
lea ecx, [ebp - 0x50]
push eax
call fcn.0042d930
lea ecx, [ebp - 0x680]
call fcn.00402280
cmp byte [ebp - 0x9d], 0
je 0x48c43a
lea ecx, [ebp - 0xb8]
call fcn.004910e0
lea eax, [ebp - 0x50]
push eax
lea ecx, [ebp - 0xb8]
call fcn.00491360
push 1
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x14], esp
push 0x4d370c
call fcn.00409db0
sub esp, 0x18
mov byte [ebp - 4], 0x53
lea eax, [ebp - 0x50]
mov ecx, esp
push eax
call fcn.00409d00
mov byte [ebp - 4], 0x18
call fcn.00493e10
add esp, 0x34
cmp eax, 0xffffffff
je 0x48c50f
lea ecx, [ebp - 0x9c]
mov dword [ebp - 0x9c], 0
push ecx
sub esp, 0x18
add eax, 4
mov ecx, esp
push 0xffffffffffffffff
push eax
push ecx
lea ecx, [ebp - 0x50]
call fcn.004913f0
push edi
call fcn.00492c80
add esp, 0x20
test al, al
je 0x48c50f
push dword [ebp - 0x9c]
lea eax, [ebp - 0x6b0]
push eax
call fcn.00494300
push eax
lea eax, [ebp - 0x698]
mov byte [ebp - 4], 0x54
push str.call
push eax
call fcn.00485ba0
add esp, 0x14
lea ecx, [ebp - 0x50]
push eax
call fcn.0042d930
lea ecx, [ebp - 0x698]
call fcn.00402280
lea ecx, [ebp - 0x6b0]
mov byte [ebp - 4], 0x18
call fcn.00402280
lea ecx, [ebp - 0xb8]
call fcn.004910e0
lea eax, [ebp - 0x50]
push eax
lea ecx, [ebp - 0xb8]
call fcn.00491360
mov eax, dword [ebp - 0x68]
xor edi, edi
sub eax, dword [ebp - 0x6c]
sar eax, 5
test eax, eax
je 0x48c596
xor esi, esi
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.00000000
call fcn.00409db0
mov eax, dword [ebp - 0x6c]
sub esp, 0x18
add eax, 4
mov dword [ebp - 0x2c], esp
add eax, esi
mov byte [ebp - 4], 0x55
mov ecx, esp
push eax
call fcn.00409d00
sub esp, 0x18
mov byte [ebp - 4], 0x56
lea eax, [ebp - 0x50]
mov ecx, esp
push eax
call fcn.00409d00
lea eax, [ebp - 0x6c8]
mov byte [ebp - 4], 0x18
push eax
call fcn.004965c0
add esp, 0x4c
lea ecx, [ebp - 0x50]
push eax
call fcn.0042d930
lea ecx, [ebp - 0x6c8]
call fcn.00402280
mov eax, dword [ebp - 0x68]
inc edi
sub eax, dword [ebp - 0x6c]
add esi, 0x20
sar eax, 5
cmp edi, eax
jb 0x48c520
mov eax, dword [ebp - 0xd8]
xor edi, edi
sub eax, dword [ebp - 0xdc]
sar eax, 5
test eax, eax
je 0x48c630
xor esi, esi
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.00000000
call fcn.00409db0
mov eax, dword [ebp - 0xdc]
sub esp, 0x18
add eax, 4
mov dword [ebp - 0x2c], esp
add eax, esi
mov byte [ebp - 4], 0x57
mov ecx, esp
push eax
call fcn.00409d00
sub esp, 0x18
mov byte [ebp - 4], 0x58
lea eax, [ebp - 0x50]
mov ecx, esp
push eax
call fcn.00409d00
lea eax, [ebp - 0x6e0]
mov byte [ebp - 4], 0x18
push eax
call fcn.004965c0
add esp, 0x4c
lea ecx, [ebp - 0x50]
push eax
call fcn.0042d930
lea ecx, [ebp - 0x6e0]
call fcn.00402280
mov eax, dword [ebp - 0xd8]
inc edi
sub eax, dword [ebp - 0xdc]
add esi, 0x20
sar eax, 5
cmp edi, eax
jb 0x48c5b1
lea ecx, [ebp - 0x60]
xor edi, edi
call fcn.004913b0
test eax, eax
je 0x48c6ba
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x14], esp
push str.00000000
call fcn.00409db0
sub esp, 0x18
mov byte [ebp - 4], 0x59
mov esi, esp
mov dword [ebp - 0x2c], esp
lea ecx, [ebp - 0x60]
push edi
call fcn.004883d0
add eax, 8
mov ecx, esi
push eax
call fcn.00409d00
sub esp, 0x18
mov byte [ebp - 4], 0x5a
lea eax, [ebp - 0x50]
mov ecx, esp
push eax
call fcn.00409d00
lea eax, [ebp - 0x6f8]
mov byte [ebp - 4], 0x18
push eax
call fcn.004965c0
add esp, 0x4c
lea ecx, [ebp - 0x50]
push eax
call fcn.0042d930
lea ecx, [ebp - 0x6f8]
call fcn.00402280
lea ecx, [ebp - 0x60]
inc edi
call fcn.004913b0
cmp edi, eax
jb 0x48c642
mov eax, dword [ebp - 0x7c]
mov esi, dword [ebp - 0x80]
add eax, 4
push eax
sub esp, 0x18
lea eax, [ebp - 0x50]
mov ecx, esp
push eax
call fcn.00409d00
push esi
call fcn.004896f0
add esp, 0x20
test al, al
je 0x48d2c9
mov esi, dword [ebp - 0x20]
inc esi
lea ecx, [ebp + 0xc]
mov dword [ebp - 0x20], esi
call fcn.004913d0
cmp esi, eax
jb 0x48a9a4
lea ecx, [ebp - 0xc4]
call fcn.004913d0
test eax, eax
je 0x48d2f9
lea ecx, [ebp - 0xc4]
mov dword [ebp - 0x20], 0
call fcn.004913d0
test eax, eax
je 0x48d2f9
mov eax, dword [ebp - 0x68]
xor edi, edi
sub eax, dword [ebp - 0x6c]
sar eax, 5
test eax, eax
je 0x48c7a0
xor edx, edx
mov dword [ebp - 0x1c], edx
nop dword [eax + eax]
mov eax, dword [ebp - 0x6c]
sub esp, 0x18
add eax, 4
mov dword [ebp - 0x34], esp
add eax, edx
mov ecx, esp
push eax
call fcn.00409d00
sub esp, 0x18
mov byte [ebp - 4], 0x5b
mov esi, esp
lea ecx, [ebp - 0xc4]
push dword [ebp - 0x20]
call fcn.004883f0
push eax
mov ecx, esi
call fcn.00409d00
mov byte [ebp - 4], 0x18
call fcn.00493a50
add esp, 0x30
cmp al, 1
je 0x48d2df
mov eax, dword [ebp - 0x68]
inc edi
sub eax, dword [ebp - 0x6c]
mov edx, dword [ebp - 0x1c]
add edx, 0x20
sar eax, 5
mov dword [ebp - 0x1c], edx
cmp edi, eax
jb 0x48c740
lea ecx, [ebp - 0x60]
xor edi, edi
call fcn.004913b0
test eax, eax
je 0x48c80c
nop
sub esp, 0x18
lea ecx, [ebp - 0x60]
mov esi, esp
mov dword [ebp - 0x34], esp
push edi
call fcn.004883d0
add eax, 8
mov ecx, esi
push eax
call fcn.00409d00
sub esp, 0x18
mov byte [ebp - 4], 0x5c
mov esi, esp
lea ecx, [ebp - 0xc4]
push dword [ebp - 0x20]
call fcn.004883f0
push eax
mov ecx, esi
call fcn.00409d00
mov byte [ebp - 4], 0x18
call fcn.00493a50
add esp, 0x30
cmp al, 1
je 0x48d2df
lea ecx, [ebp - 0x60]
inc edi
call fcn.004913b0
cmp edi, eax
jb 0x48c7b0
push str._was_supposed_to_be_added_to_the_symbollist__but_it_isnt_declared
push dword [ebp - 0x20]
lea ecx, [ebp - 0xc4]
call fcn.004883f0
push eax
lea eax, [ebp - 0x374]
push eax
call fcn.00485b40
add esp, 0xc
lea ecx, [ebp - 0x374]
push 0
push 0
call fcn.00489540
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
lea ecx, [ebp - 0x374]
call fcn.00402280
mov byte [ebp - 0xd], 0
lea ecx, [ebp - 0x2ec]
call fcn.00488000
lea ecx, [ebp - 0x190]
call fcn.00402280
lea ecx, [ebp - 0x1a8]
call fcn.00402280
lea ecx, [ebp - 0x1ec]
call fcn.0040acb0
lea ecx, [ebp - 0x1f8]
call fcn.0040acb0
lea ecx, [ebp - 0x8d8]
call fcn.00402280
lea ecx, [ebp - 0x204]
call fcn.004190a0
lea ecx, [ebp - 0x210]
call fcn.004190a0
lea ecx, [ebp - 0xb8]
call fcn.004190a0
lea ecx, [ebp - 0x8f0]
call fcn.00402280
lea ecx, [ebp - 0x100]
call fcn.00402280
lea ecx, [ebp - 0x98]
call fcn.00402280
lea ecx, [ebp - 0xd0]
call fcn.004190a0
lea ecx, [ebp - 0x14c]
call fcn.004190a0
lea ecx, [ebp - 0xc4]
call fcn.004190a0
mov ecx, dword [ebp - 0x10c]
test ecx, ecx
je 0x48c93b
mov eax, dword [ebp - 0x104]
sub eax, ecx
sar eax, 2
push eax
push ecx
lea ecx, [ebp - 0x10c]
call fcn.00490bb0
mov dword [ebp - 0x10c], 0
mov dword [ebp - 0x108], 0
mov dword [ebp - 0x104], 0
mov ecx, dword [ebp - 0xe8]
test ecx, ecx
je 0x48c97b
mov eax, dword [ebp - 0xe0]
sub eax, ecx
sar eax, 3
push eax
push ecx
lea ecx, [ebp - 0xe8]
call fcn.00490d40
mov dword [ebp - 0xe8], 0
mov dword [ebp - 0xe4], 0
mov dword [ebp - 0xe0], 0
mov esi, dword [ebp - 0xac]
test esi, esi
je 0x48c9e8
mov edi, dword [ebp - 0xa8]
cmp esi, edi
je 0x48c9a4
nop
mov ecx, esi
call fcn.00481a30
add esi, 0x30
cmp esi, edi
jne 0x48c990
mov esi, dword [ebp - 0xac]
mov ecx, dword [ebp - 0xa4]
mov eax, 0x2aaaaaab
sub ecx, esi
imul ecx
lea ecx, [ebp - 0xac]
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
push eax
push esi
call fcn.00490d00
mov dword [ebp - 0xac], 0
mov dword [ebp - 0xa8], 0
mov dword [ebp - 0xa4], 0
mov esi, dword [ebp - 0x60]
test esi, esi
je 0x48ca3e
mov edi, dword [ebp - 0x5c]
cmp esi, edi
je 0x48ca07
mov ecx, esi
call fcn.00488110
add esi, 0x3c
cmp esi, edi
jne 0x48c9f6
mov esi, dword [ebp - 0x60]
mov ecx, dword [ebp - 0x58]
mov eax, 0x88888889
sub ecx, esi
imul ecx
add edx, ecx
lea ecx, [ebp - 0x60]
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
push eax
push esi
call fcn.00490bf0
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x5c], 0
mov dword [ebp - 0x58], 0
lea ecx, [ebp - 0x21c]
call fcn.00489550
lea ecx, [ebp - 0x6c]
call fcn.00489550
lea ecx, [ebp - 0xdc]
call fcn.00489550
lea ecx, [ebp - 0x228]
call fcn.004895c0
mov eax, dword [ebp - 0x7c]
test eax, eax
je 0x48caa8
lea ecx, [ebp - 0x7c]
push ecx
push dword [ebp - 0x78]
push eax
call fcn.00485e80
mov ecx, dword [ebp - 0x7c]
add esp, 0xc
mov eax, dword [ebp - 0x74]
sub eax, ecx
sar eax, 4
push eax
push ecx
lea ecx, [ebp - 0x7c]
call fcn.00490c40
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x78], 0
mov dword [ebp - 0x74], 0
lea ecx, [ebp - 0x50]
call fcn.00402280
lea ecx, [ebp + 0xc]
call fcn.004190a0
mov ecx, dword [ebp - 0xc]
mov al, byte [ebp - 0xd]
pop edi
mov dword fs:[0], ecx
pop esi
mov esp, ebp
pop ebp
ret
lea eax, [ebp - 0x98]
push eax
lea eax, [ebp - 0x728]
push str.The_bytes_at
push eax
call fcn.00485ca0
push str._are_not_what_was_expected
push eax
lea eax, [ebp - 0x710]
mov byte [ebp - 4], 0x1d
push eax
call fcn.00485ad0
add esp, 0x18
lea ecx, [ebp - 0x98]
push eax
call fcn.0042d930
lea ecx, [ebp - 0x710]
call fcn.00402280
lea ecx, [ebp - 0x728]
call fcn.00402280
push 0
push 0
lea ecx, [ebp - 0x98]
call fcn.00489540
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
push esi
call fcn.0049c274
add esp, 4
lea ecx, [ebp - 0x140]
call fcn.00487d00
jmp 0x48c852
lea eax, [ebp - 0x98]
push eax
lea eax, [ebp - 0x758]
push str.The_memory_at
push eax
call fcn.00485ca0
push str._can_not_be_read
push eax
lea eax, [ebp - 0x740]
mov byte [ebp - 4], 0x1e
push eax
call fcn.00485ad0
add esp, 0x18
lea ecx, [ebp - 0x98]
push eax
call fcn.0042d930
lea ecx, [ebp - 0x740]
call fcn.00402280
lea ecx, [ebp - 0x758]
call fcn.00402280
push 0
push 0
lea ecx, [ebp - 0x98]
call fcn.00489540
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
push esi
call fcn.0049c274
add esp, 4
lea ecx, [ebp - 0x140]
call fcn.00487d00
jmp 0x48c852
push str._is_not_a_valid_bytestring
lea ecx, [ebp - 0x100]
call fcn.00488470
push 0
push 0
lea ecx, [ebp - 0x100]
call fcn.00489540
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
lea ecx, [ebp - 0x140]
call fcn.00487d00
jmp 0x48c852
push str._is_not_a_valid_name_or_address
lea ecx, [ebp - 0x98]
call fcn.00488470
push 0
push 0
lea ecx, [ebp - 0x98]
call fcn.00489540
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x48c852
push 0
push 0
push str.Wrong_syntax._ASSERT_address_11_22_33__55_66_
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x48c852
mov eax, dword [ebp - 0x1c8]
cmp eax, 2
jbe 0x48cd05
add eax, 0xfffffffe
lea ecx, [ebp - 0x1d8]
push eax
push 1
lea eax, [ebp - 0x770]
push eax
call fcn.004913f0
push 0
push 0
mov ecx, eax
call fcn.00489540
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
lea ecx, [ebp - 0x770]
call fcn.00402280
push esi
call fcn.0049c274
add esp, 4
lea ecx, [ebp - 0x134]
call fcn.00487d00
lea ecx, [ebp - 0x1d8]
call fcn.00402280
lea ecx, [ebp - 0x16c]
call fcn.004190a0
jmp 0x48c852
mov eax, dword [ebp - 0x1c8]
cmp eax, 2
jbe 0x48cd05
add eax, 0xfffffffe
lea ecx, [ebp - 0x1d8]
push eax
push 1
lea eax, [ebp - 0x788]
push eax
call fcn.004913f0
push 0
push 0
mov ecx, eax
call fcn.00489540
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
lea ecx, [ebp - 0x788]
call fcn.00402280
push esi
call fcn.0049c274
add esp, 4
lea ecx, [ebp - 0x134]
call fcn.00487d00
lea ecx, [ebp - 0x1d8]
call fcn.00402280
lea ecx, [ebp - 0x16c]
call fcn.004190a0
jmp 0x48c852
push str._is_not_a_valid_bytestring
lea ecx, [ebp - 0x100]
call fcn.00488470
push 0
push 0
lea ecx, [ebp - 0x100]
call fcn.00489540
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
lea ecx, [ebp - 0x134]
call fcn.00487d00
lea ecx, [ebp - 0x1d8]
call fcn.00402280
lea ecx, [ebp - 0x16c]
call fcn.004190a0
jmp 0x48c852
push str._is_not_a_valid_name_or_address
lea ecx, [ebp - 0x98]
call fcn.00488470
push 0
push 0
lea ecx, [ebp - 0x98]
call fcn.00489540
push eax
jmp 0x48cdad
push 0
push 0
push str.assert2_
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
lea ecx, [ebp - 0x1d8]
call fcn.00402280
lea ecx, [ebp - 0x16c]
call fcn.004190a0
jmp 0x48c852
push 0
push 0
push str.:_assert2_address_aob__failing_message__
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
lea ecx, [ebp - 0x16c]
call fcn.004190a0
jmp 0x48c852
push 0
push 0
push str.Wrong_syntax._ASSERT_address_11_22_33__55_66_
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x48c852
push str._is_not_a_valid_size
lea ecx, [ebp - 0x100]
call fcn.00488470
push 0
push 0
lea ecx, [ebp - 0x100]
call fcn.00489540
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x48c852
push 0
push 0
push str.Wrong_syntax._GLOBALALLOC_name_size_
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x48c852
push 0
push 0
push str.Wrong_syntax._CreateThread_address_
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x48c852
sub esp, 0x18
mov ecx, esp
push str.Wrong_syntax._LoadLibrary_filename_
call fcn.00409db0
call fcn.004943c0
add esp, 0x18
jmp 0x48c852
push edi
call fcn.0049c274
lea eax, [ebp - 0x98]
push eax
lea eax, [ebp - 0x7b8]
push str.The_memory_at
push eax
call fcn.00485ca0
push str._could_not_be_fully_read
push eax
lea eax, [ebp - 0x7a0]
mov byte [ebp - 4], 0x2a
push eax
call fcn.00485ad0
add esp, 0x1c
lea ecx, [ebp - 0x98]
push eax
call fcn.0042d930
lea ecx, [ebp - 0x7a0]
call fcn.00402280
lea ecx, [ebp - 0x7b8]
call fcn.00402280
push 0
push 0
lea ecx, [ebp - 0x98]
call fcn.00489540
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x48c852
push 0
push 0
push str.Invalid_size_for_ReadMem
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x48c852
push 0
push 0
push str.Invalid_address_for_ReadMem
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x48c852
push 0
push 0
push str.Wrong_syntax._ReadMem_address_size_
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x48c852
push 0
push 0
push str.Syntax_error
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x48c852
push str.The_array_of_byte_
lea ecx, [ebp - 0x27c]
call fcn.00409db0
lea eax, [ebp - 0x100]
mov byte [ebp - 4], 0x30
push eax
lea ecx, [ebp - 0x27c]
call fcn.00488450
push str._could_not_be_found
lea ecx, [ebp - 0x27c]
call fcn.00488470
push 0
push 0
lea ecx, [ebp - 0x27c]
call fcn.00489540
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
lea ecx, [ebp - 0x27c]
jmp 0x48c84d
push 0
push 0
push str.Wrong_syntax._AOBSCAN_name_11_22_33__55_
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x48c852
mov eax, dword [ebp - 0x230]
cmp eax, 2
jbe 0x48d027
add eax, 0xfffffffe
lea ecx, [ebp - 0x240]
push eax
push 1
lea eax, [ebp - 0x7d0]
push eax
call fcn.004913f0
push 0
push 0
mov ecx, eax
call fcn.00489540
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
lea ecx, [ebp - 0x7d0]
call fcn.00402280
lea ecx, [ebp - 0x240]
call fcn.00402280
lea ecx, [ebp - 0x118]
call fcn.004190a0
jmp 0x48c852
push 0
push 0
push str.aobscan2_
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
lea ecx, [ebp - 0x240]
call fcn.00402280
lea ecx, [ebp - 0x118]
call fcn.004190a0
jmp 0x48c852
push 0
push 0
push str.:_aobscan2_name_aob_start_end_n__failing_message__
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
lea ecx, [ebp - 0x118]
call fcn.004190a0
jmp 0x48c852
push 0
push 0
push str.:_aobscan2_name_aob_start_end_n__failing_message__
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x48c852
push str.Define
lea ecx, [ebp - 0x294]
call fcn.00409db0
lea eax, [ebp - 0x98]
mov byte [ebp - 4], 0x40
push eax
lea ecx, [ebp - 0x294]
call fcn.00488450
push str._already_defined
lea ecx, [ebp - 0x294]
call fcn.00488470
push 0
push 0
lea ecx, [ebp - 0x294]
call fcn.00489540
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
lea ecx, [ebp - 0x294]
jmp 0x48c84d
push 0
push 0
push str.Wrong_syntax._DEFINE_name_whatever_
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x48c852
push 0
push 0
push str.Syntax_error._FullAccess_address_size_
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x48c852
push str._is_being_redeclared
jmp 0x48d250
lea eax, [ebp - 0x98]
push eax
lea eax, [ebp - 0x980]
push str.label
push eax
call fcn.00485ca0
push str._is_being_defined_more_than_once
push eax
lea eax, [ebp - 0x3bc]
mov byte [ebp - 4], 0x46
push eax
call fcn.00485ad0
add esp, 0x18
lea ecx, [ebp - 0x980]
call fcn.00402280
push 0
push 0
lea ecx, [ebp - 0x3bc]
call fcn.00489540
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
lea ecx, [ebp - 0x3bc]
call fcn.00402280
lea ecx, [ebp - 0x344]
jmp 0x48c84d
push str.label
lea ecx, [ebp - 0x2ac]
call fcn.00409db0
lea eax, [ebp - 0x98]
mov byte [ebp - 4], 0x47
push eax
lea ecx, [ebp - 0x2ac]
call fcn.00488450
push str._is_not_defined_in_the_scriptd
lea ecx, [ebp - 0x2ac]
call fcn.00488470
push 0
push 0
lea ecx, [ebp - 0x2ac]
call fcn.00489540
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
lea ecx, [ebp - 0x2ac]
call fcn.00402280
lea ecx, [ebp - 0x344]
jmp 0x48c84d
push 0
push 0
push str.Syntax_Error
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x48c852
lea eax, [ebp - 0x98]
push eax
lea eax, [ebp - 0x800]
push str.The_identifier
push eax
call fcn.00485ca0
push str._has_already_been_declared
push eax
lea eax, [ebp - 0x3d4]
mov byte [ebp - 4], 0x4c
push eax
call fcn.00485ad0
add esp, 0x18
lea ecx, [ebp - 0x800]
call fcn.00402280
push 0
push 0
lea ecx, [ebp - 0x3d4]
call fcn.00489540
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
lea ecx, [ebp - 0x3d4]
jmp 0x48c84d
push str._is_not_a_valid_identifier
lea ecx, [ebp - 0x98]
call fcn.00488470
push 0
push 0
lea ecx, [ebp - 0x98]
call fcn.00489540
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x48c852
push 0
push 0
push str.Wrong_syntax._ALLOC_identifier_sizeinbytes_
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x48c852
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x35c]
push str.The_address_specifier_is_not_valid:
push eax
call fcn.00485ca0
add esp, 0xc
lea ecx, [ebp - 0x35c]
push 0
push 0
call fcn.00489540
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
lea ecx, [ebp - 0x35c]
jmp 0x48c84d
push 0
push 0
push str.This_instruction_cant_be_compiled
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x48c852
mov esi, dword [ebp - 0x20]
lea ecx, [ebp - 0xc4]
inc esi
mov dword [ebp - 0x20], esi
call fcn.004913d0
cmp esi, eax
jb 0x48c727
lea ecx, [ebp - 0xd0]
call fcn.004913d0
test eax, eax
je 0x48d551
xor edi, edi
lea ecx, [ebp - 0xd0]
mov dword [ebp - 0x20], edi
call fcn.004913d0
test eax, eax
je 0x48d551
lea eax, [ebp - 0x70]
push eax
sub esp, 0x18
lea ecx, [ebp - 0xd0]
mov esi, esp
push edi
call fcn.004883f0
push eax
mov ecx, esi
call fcn.00409d00
push dword [ebp + 8]
call fcn.00492c80
add esp, 0x20
test al, al
jne 0x48d534
lea ecx, [ebp - 0x60]
xor edi, edi
call fcn.004913b0
test eax, eax
je 0x48d3be
sub esp, 0x18
lea ecx, [ebp - 0xd0]
mov esi, esp
mov dword [ebp - 0x34], esp
push dword [ebp - 0x20]
call fcn.004883f0
push eax
mov ecx, esi
call fcn.00409d00
sub esp, 0x18
mov byte [ebp - 4], 0x5d
mov esi, esp
lea ecx, [ebp - 0x60]
push edi
call fcn.004883d0
add eax, 8
mov ecx, esi
push eax
call fcn.00409d00
mov byte [ebp - 4], 0x18
call fcn.00493a50
add esp, 0x30
cmp al, 1
je 0x48d534
lea ecx, [ebp - 0x60]
inc edi
call fcn.004913b0
cmp edi, eax
jb 0x48d362
mov eax, dword [ebp - 0x68]
xor edi, edi
sub eax, dword [ebp - 0x6c]
sar eax, 5
test eax, eax
je 0x48d430
mov dword [ebp - 0x1c], edi
sub esp, 0x18
lea ecx, [ebp - 0xd0]
mov esi, esp
mov dword [ebp - 0x34], esp
push dword [ebp - 0x20]
call fcn.004883f0
push eax
mov ecx, esi
call fcn.00409d00
mov eax, dword [ebp - 0x6c]
sub esp, 0x18
mov esi, dword [ebp - 0x1c]
add eax, 4
add eax, esi
mov byte [ebp - 4], 0x5e
mov ecx, esp
push eax
call fcn.00409d00
mov byte [ebp - 4], 0x18
call fcn.00493a50
add esp, 0x30
cmp al, 1
je 0x48d534
mov eax, dword [ebp - 0x68]
inc edi
sub eax, dword [ebp - 0x6c]
add esi, 0x20
sar eax, 5
mov dword [ebp - 0x1c], esi
cmp edi, eax
jb 0x48d3d0
lea ecx, [ebp - 0xac]
xor edi, edi
call fcn.00491390
test eax, eax
je 0x48d4a0
sub esp, 0x18
lea ecx, [ebp - 0xd0]
mov esi, esp
mov dword [ebp - 0x34], esp
push dword [ebp - 0x20]
call fcn.004883f0
push eax
mov ecx, esi
call fcn.00409d00
sub esp, 0x18
mov byte [ebp - 4], 0x5f
mov esi, esp
lea ecx, [ebp - 0xac]
push edi
call fcn.004883b0
push eax
mov ecx, esi
call fcn.00409d00
mov byte [ebp - 4], 0x18
call fcn.00493a50
add esp, 0x30
lea ecx, [ebp - 0xac]
cmp al, 1
je 0x48d507
inc edi
call fcn.00491390
cmp edi, eax
jb 0x48d441
push dword [ebp - 0x20]
lea ecx, [ebp - 0xd0]
call fcn.004883f0
push eax
lea eax, [ebp - 0x818]
push str.The_address_in_createthread_
push eax
call fcn.00485ca0
push str.__is_not_valid
push eax
lea eax, [ebp - 0x38c]
mov byte [ebp - 4], 0x60
push eax
call fcn.00485ad0
add esp, 0x18
lea ecx, [ebp - 0x818]
call fcn.00402280
push 0
push 0
lea ecx, [ebp - 0x38c]
call fcn.00489540
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
lea ecx, [ebp - 0x38c]
jmp 0x48c84d
lea eax, [ebp - 0x70]
push eax
sub esp, 0x18
mov esi, esp
push edi
call fcn.004883b0
add eax, 0x18
mov ecx, esi
push eax
call fcn.00409d00
push dword [ebp + 8]
call fcn.00492c80
add esp, 0x20
test al, al
je 0x48d4a0
mov esi, dword [ebp - 0x20]
lea ecx, [ebp - 0xd0]
inc esi
mov dword [ebp - 0x20], esi
call fcn.004913d0
cmp esi, eax
jae 0x48d551
mov edi, esi
jmp 0x48d324
mov edi, dword [ebp - 0x68]
sub edi, dword [ebp - 0x6c]
sar edi, 5
mov dword [ebp - 0x18], edi
test edi, edi
je 0x48d5f7
xor ecx, ecx
mov dword [ebp - 0x9c], 0
xor edx, edx
mov dword [ebp - 0x1c], ecx
lea esi, [ecx + 0x20]
nop dword [eax]
mov edi, dword [ebp - 0x1c]
inc edx
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x1c], esi
add esi, 0x20
add ecx, dword [edi + eax + 0x1c]
mov dword [ebp - 0x9c], ecx
cmp edx, dword [ebp - 0x18]
jb 0x48d580
push 0x40
push 0x1000
lea eax, [ecx + 0x1000]
push eax
push 0
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov ecx, dword [ebp - 0x6c]
mov dword [ecx], eax
mov eax, dword [ebp - 0x68]
mov ecx, dword [ebp - 0x6c]
sub eax, ecx
sar eax, 5
cmp eax, 1
jbe 0x48d5f7
mov edx, 1
mov edi, 0x20
lea esi, [edx + 0x3f]
mov eax, dword [edi + ecx - 0x20]
inc edx
add eax, dword [edi + ecx - 4]
mov dword [edi + ecx], eax
mov edi, esi
mov eax, dword [ebp - 0x68]
add esi, 0x20
mov ecx, dword [ebp - 0x6c]
sub eax, ecx
sar eax, 5
cmp edx, eax
jb 0x48d5d7
lea ecx, [ebp - 0x7c]
call fcn.00490ad0
mov ecx, dword [ebp - 0xb4]
mov eax, 0x2aaaaaab
sub ecx, dword [ebp - 0xb8]
xor esi, esi
imul ecx
mov dword [ebp - 0x54], esi
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x48e94a
nop word [eax + eax]
push esi
lea ecx, [ebp - 0xb8]
call fcn.004883f0
push eax
lea ecx, [ebp - 0x50]
call fcn.00488200
mov eax, dword [ebp - 0x68]
xor edi, edi
mov ecx, dword [ebp - 0x6c]
sub eax, ecx
sar eax, 5
test eax, eax
je 0x48d6d7
xor esi, esi
nop dword [eax]
sub esp, 0x18
mov eax, esp
mov dword [ebp - 0x34], esp
push dword [esi + ecx]
push eax
call fcn.00494300
mov eax, dword [ebp - 0x6c]
sub esp, 0x10
add eax, 4
mov dword [ebp - 0x14], esp
add eax, esi
mov byte [ebp - 4], 0x61
mov ecx, esp
push eax
call fcn.00409d00
sub esp, 0x18
mov byte [ebp - 4], 0x62
lea eax, [ebp - 0x50]
mov ecx, esp
push eax
call fcn.00409d00
lea eax, [ebp - 0x830]
mov byte [ebp - 4], 0x18
push eax
call fcn.004965c0
add esp, 0x4c
lea ecx, [ebp - 0x50]
push eax
call fcn.0042d930
lea ecx, [ebp - 0x830]
call fcn.00402280
mov eax, dword [ebp - 0x68]
inc edi
mov ecx, dword [ebp - 0x6c]
add esi, 0x20
sub eax, ecx
sar eax, 5
cmp edi, eax
jb 0x48d660
mov eax, dword [ebp - 0xd8]
xor edi, edi
mov ecx, dword [ebp - 0xdc]
sub eax, ecx
sar eax, 5
test eax, eax
je 0x48d774
xor esi, esi
sub esp, 0x18
mov eax, esp
mov dword [ebp - 0x34], esp
push dword [esi + ecx]
push eax
call fcn.00494300
mov eax, dword [ebp - 0xdc]
sub esp, 0x10
add eax, 4
mov dword [ebp - 0x14], esp
add eax, esi
mov byte [ebp - 4], 0x63
mov ecx, esp
push eax
call fcn.00409d00
sub esp, 0x18
mov byte [ebp - 4], 0x64
lea eax, [ebp - 0x50]
mov ecx, esp
push eax
call fcn.00409d00
lea eax, [ebp - 0x848]
mov byte [ebp - 4], 0x18
push eax
call fcn.004965c0
add esp, 0x4c
lea ecx, [ebp - 0x50]
push eax
call fcn.0042d930
lea ecx, [ebp - 0x848]
call fcn.00402280
mov eax, dword [ebp - 0xd8]
inc edi
mov ecx, dword [ebp - 0xdc]
add esi, 0x20
sub eax, ecx
sar eax, 5
cmp edi, eax
jb 0x48d6f4
mov edi, dword [ebp - 0xac]
xor ecx, ecx
mov dword [ebp - 0x30], ecx
mov eax, 0x2aaaaaab
mov ecx, dword [ebp - 0xa8]
sub ecx, edi
imul ecx
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x48d9cf
xor esi, esi
mov dword [ebp - 0x20], esi
lea eax, [edi + 0x18]
sub esp, 0x18
add eax, esi
mov dword [ebp - 0x34], esp
mov esi, esp
mov dword [ebp - 0x28], eax
xorps xmm0, xmm0
movups xmmword [esi], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
cmp dword [eax + 0x14], 0xf
mov edi, dword [eax + 0x10]
jbe 0x48d7d5
mov eax, dword [eax]
mov dword [ebp - 0x28], eax
cmp edi, 0x7fffffff
ja 0x48fa8f
cmp edi, 0xf
ja 0x48d7f8
mov dword [esi + 0x10], edi
mov dword [esi + 0x14], 0xf
movups xmm0, xmmword [eax]
movups xmmword [esi], xmm0
jmp 0x48d82f
push 0x7fffffff
push 0xf
push edi
call fcn.00489400
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
push esi
call fcn.00404660
lea ecx, [edi + 1]
mov edx, eax
mov eax, dword [ebp - 0x1c]
push ecx
push dword [ebp - 0x28]
mov dword [esi], edx
mov dword [esi + 0x10], edi
push edx
mov dword [esi + 0x14], eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0x20
mov eax, dword [ebp - 0xac]
sub esp, 0x18
add eax, dword [ebp - 0x20]
mov esi, esp
xorps xmm0, xmm0
mov byte [ebp - 4], 0x65
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x14], esp
movups xmmword [esi], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
cmp dword [eax + 0x14], 0xf
mov edi, dword [eax + 0x10]
jbe 0x48d869
mov eax, dword [eax]
mov dword [ebp - 0x28], eax
cmp edi, 0x7fffffff
ja 0x48fa8f
cmp edi, 0xf
ja 0x48d88c
mov dword [esi + 0x10], edi
mov dword [esi + 0x14], 0xf
movups xmm0, xmmword [eax]
movups xmmword [esi], xmm0
jmp 0x48d8c3
push 0x7fffffff
push 0xf
push edi
call fcn.00489400
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
push esi
call fcn.00404660
lea ecx, [edi + 1]
mov edx, eax
mov eax, dword [ebp - 0x1c]
push ecx
push dword [ebp - 0x28]
mov dword [esi], edx
mov dword [esi + 0x10], edi
push edx
mov dword [esi + 0x14], eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0x20
sub esp, 0x18
mov byte [ebp - 4], 0x66
mov esi, esp
lea eax, [ebp - 0x50]
xorps xmm0, xmm0
movups xmmword [esi], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
cmp dword [ebp - 0x3c], 0xf
mov edi, dword [ebp - 0x40]
cmova eax, dword [ebp - 0x50]
mov dword [ebp - 0x18], eax
cmp edi, 0x7fffffff
ja 0x48fa8f
cmp edi, 0xf
ja 0x48d914
mov dword [esi + 0x10], edi
mov dword [esi + 0x14], 0xf
movups xmm0, xmmword [eax]
movups xmmword [esi], xmm0
jmp 0x48d94b
push 0x7fffffff
push 0xf
push edi
call fcn.00489400
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
push esi
call fcn.00404660
lea ecx, [edi + 1]
mov edx, eax
mov eax, dword [ebp - 0x1c]
push ecx
push dword [ebp - 0x18]
mov dword [esi], edx
mov dword [esi + 0x10], edi
push edx
mov dword [esi + 0x14], eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0x20
lea eax, [ebp - 0x860]
mov byte [ebp - 4], 0x18
push eax
call fcn.004965c0
mov esi, eax
add esp, 0x4c
lea eax, [ebp - 0x50]
cmp eax, esi
je 0x48d990
mov ecx, eax
call fcn.00402280
movups xmm0, xmmword [esi]
movups xmmword [ebp - 0x50], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [ebp - 0x40], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xf
mov byte [esi], 0
lea ecx, [ebp - 0x860]
call fcn.00402280
mov ecx, dword [ebp - 0xa8]
mov eax, 0x2aaaaaab
mov edi, dword [ebp - 0xac]
sub ecx, edi
mov esi, dword [ebp - 0x20]
inc dword [ebp - 0x30]
add esi, 0x30
imul ecx
mov dword [ebp - 0x20], esi
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp dword [ebp - 0x30], eax
jb 0x48d7a3
cmp dword [ebp - 0x3c], 0xf
lea eax, [ebp - 0x50]
mov edi, dword [ebp - 0x40]
cmova eax, dword [ebp - 0x50]
mov esi, dword [ebp - 0x60]
cmp byte [eax + edi - 1], 0x3a
je 0x48e35c
mov ecx, dword [ebp - 0x5c]
xor eax, eax
mov dword [ebp - 0x20], eax
sub ecx, esi
mov eax, 0x88888889
imul ecx
add edx, ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x48e35c
xor eax, eax
mov dword [ebp - 0x30], eax
add esi, 8
xorps xmm0, xmm0
push 1
add eax, esi
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x34], esp
movups xmmword [esi], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
cmp dword [eax + 0x14], 0xf
mov edi, dword [eax + 0x10]
jbe 0x48da47
mov eax, dword [eax]
mov dword [ebp - 0x28], eax
cmp edi, 0x7fffffff
ja 0x48fa8f
cmp edi, 0xf
ja 0x48da6a
mov dword [esi + 0x10], edi
mov dword [esi + 0x14], 0xf
movups xmm0, xmmword [eax]
movups xmmword [esi], xmm0
jmp 0x48daa1
push 0x7fffffff
push 0xf
push edi
call fcn.00489400
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
push esi
call fcn.00404660
lea ecx, [edi + 1]
mov edx, eax
mov eax, dword [ebp - 0x1c]
push ecx
push dword [ebp - 0x28]
mov dword [esi], edx
mov dword [esi + 0x10], edi
push edx
mov dword [esi + 0x14], eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0x20
sub esp, 0x18
mov byte [ebp - 4], 0x67
mov esi, esp
lea eax, [ebp - 0x50]
xorps xmm0, xmm0
movups xmmword [esi], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
cmp dword [ebp - 0x3c], 0xf
mov edi, dword [ebp - 0x40]
cmova eax, dword [ebp - 0x50]
mov dword [ebp - 0x18], eax
cmp edi, 0x7fffffff
ja 0x48fa8f
cmp edi, 0xf
ja 0x48daf2
mov dword [esi + 0x10], edi
mov dword [esi + 0x14], 0xf
movups xmm0, xmmword [eax]
movups xmmword [esi], xmm0
jmp 0x48db29
push 0x7fffffff
push 0xf
push edi
call fcn.00489400
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
push esi
call fcn.00404660
lea ecx, [edi + 1]
mov edx, eax
mov eax, dword [ebp - 0x1c]
push ecx
push dword [ebp - 0x18]
mov dword [esi], edx
mov dword [esi + 0x10], edi
push edx
mov dword [esi + 0x14], eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0x20
mov byte [ebp - 4], 0x18
call fcn.00493e10
add esp, 0x34
cmp eax, 0xffffffff
jne 0x48db70
mov ecx, dword [ebp - 0x5c]
mov eax, 0x88888889
mov esi, dword [ebp - 0x60]
sub ecx, esi
mov edi, dword [ebp - 0x20]
add dword [ebp - 0x30], 0x3c
inc edi
imul ecx
mov dword [ebp - 0x20], edi
add edx, ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp edi, eax
mov eax, dword [ebp - 0x30]
jb 0x48da13
jmp 0x48e359
mov esi, dword [ebp - 0x20]
sub esp, 0x18
mov ecx, dword [ebp - 0x60]
mov eax, esp
shl esi, 4
sub esi, dword [ebp - 0x20]
shl esi, 2
mov dword [ebp - 0x20], esi
mov dword [ebp - 0x34], esp
cmp byte [ecx + esi], 0
jne 0x48e1d0
push dword [ebp - 0x80]
push eax
call fcn.00494300
mov ecx, dword [ebp - 0x60]
sub esp, 0x10
mov edi, esp
mov byte [ebp - 4], 0x68
add ecx, 8
mov dword [ebp - 0x14], esp
add ecx, esi
xorps xmm0, xmm0
mov dword [ebp - 0x28], ecx
movups xmmword [edi], xmm0
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 0
cmp dword [ecx + 0x14], 0xf
mov eax, dword [ecx + 0x10]
mov dword [ebp - 0x18], eax
jbe 0x48dbd9
mov ecx, dword [ecx]
mov dword [ebp - 0x28], ecx
cmp eax, 0x7fffffff
ja 0x48fa8f
cmp eax, 0xf
ja 0x48dbfb
mov dword [edi + 0x10], eax
mov dword [edi + 0x14], 0xf
movups xmm0, xmmword [ecx]
movups xmmword [edi], xmm0
jmp 0x48dc33
push 0x7fffffff
push 0xf
push eax
call fcn.00489400
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
push edi
call fcn.00404660
mov ecx, dword [ebp - 0x18]
mov edx, eax
mov eax, dword [ebp - 0x1c]
mov dword [edi], edx
mov dword [edi + 0x10], ecx
inc ecx
push ecx
push dword [ebp - 0x28]
mov dword [edi + 0x14], eax
push edx
call sub.VCRUNTIME140.dll_memcpy
add esp, 0x20
sub esp, 0x18
mov byte [ebp - 4], 0x69
mov edi, esp
lea ecx, [ebp - 0x50]
xorps xmm0, xmm0
movups xmmword [edi], xmm0
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 0
cmp dword [ebp - 0x3c], 0xf
mov eax, dword [ebp - 0x40]
cmova ecx, dword [ebp - 0x50]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x28], ecx
cmp eax, 0x7fffffff
ja 0x48fa8f
cmp eax, 0xf
ja 0x48dc86
mov dword [edi + 0x10], eax
mov dword [edi + 0x14], 0xf
movups xmm0, xmmword [ecx]
movups xmmword [edi], xmm0
jmp 0x48dccd
or eax, 0xf
cmp eax, 0x7fffffff
jbe 0x48dc97
mov eax, 0x7fffffff
jmp 0x48dca2
cmp eax, 0x16
mov ecx, 0x16
cmovb eax, ecx
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
push edi
call fcn.00404660
mov ecx, dword [ebp - 0x18]
mov edx, eax
mov eax, dword [ebp - 0x1c]
mov dword [edi], edx
mov dword [edi + 0x10], ecx
inc ecx
push ecx
push dword [ebp - 0x28]
mov dword [edi + 0x14], eax
push edx
call sub.VCRUNTIME140.dll_memcpy
add esp, 0x14
lea eax, [ebp - 0x878]
mov byte [ebp - 4], 0x18
push eax
call fcn.004965c0
mov edi, eax
add esp, 0x4c
lea eax, [ebp - 0x98]
cmp eax, edi
je 0x48dd1b
mov ecx, eax
call fcn.00402280
movups xmm0, xmmword [edi]
movups xmmword [ebp - 0x98], xmm0
movq xmm0, qword [edi + 0x10]
movq qword [ebp - 0x88], xmm0
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 0xf
mov byte [edi], 0
lea ecx, [ebp - 0x878]
call fcn.00402280
mov eax, dword [ebp - 0x80]
sub esp, 0x18
mov ecx, esp
mov dword [ebp - 0x34], esp
add eax, 0xfffff
push eax
push ecx
call fcn.00494300
mov ecx, dword [ebp - 0x60]
sub esp, 0x10
mov edi, esp
mov byte [ebp - 4], 0x6a
add ecx, 8
mov dword [ebp - 0x14], esp
add ecx, esi
xorps xmm0, xmm0
mov dword [ebp - 0x28], ecx
movups xmmword [edi], xmm0
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 0
cmp dword [ecx + 0x14], 0xf
mov eax, dword [ecx + 0x10]
mov dword [ebp - 0x18], eax
jbe 0x48dd79
mov ecx, dword [ecx]
mov dword [ebp - 0x28], ecx
cmp eax, 0x7fffffff
ja 0x48fa8f
cmp eax, 0xf
ja 0x48dd9b
mov dword [edi + 0x10], eax
mov dword [edi + 0x14], 0xf
movups xmm0, xmmword [ecx]
movups xmmword [edi], xmm0
jmp 0x48ddd3
push 0x7fffffff
push 0xf
push eax
call fcn.00489400
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
push edi
call fcn.00404660
mov ecx, dword [ebp - 0x18]
mov edx, eax
mov eax, dword [ebp - 0x1c]
mov dword [edi], edx
mov dword [edi + 0x10], ecx
inc ecx
push ecx
push dword [ebp - 0x28]
mov dword [edi + 0x14], eax
push edx
call sub.VCRUNTIME140.dll_memcpy
add esp, 0x20
sub esp, 0x18
mov byte [ebp - 4], 0x6b
mov edi, esp
lea ecx, [ebp - 0x50]
xorps xmm0, xmm0
movups xmmword [edi], xmm0
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 0
cmp dword [ebp - 0x3c], 0xf
mov eax, dword [ebp - 0x40]
cmova ecx, dword [ebp - 0x50]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x28], ecx
cmp eax, 0x7fffffff
ja 0x48fa8f
cmp eax, 0xf
ja 0x48de26
mov dword [edi + 0x10], eax
mov dword [edi + 0x14], 0xf
movups xmm0, xmmword [ecx]
movups xmmword [edi], xmm0
jmp 0x48de6d
or eax, 0xf
cmp eax, 0x7fffffff
jbe 0x48de37
mov eax, 0x7fffffff
jmp 0x48de42
cmp eax, 0x16
mov ecx, 0x16
cmovb eax, ecx
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
push edi
call fcn.00404660
mov ecx, dword [ebp - 0x18]
mov edx, eax
mov eax, dword [ebp - 0x1c]
mov dword [edi], edx
mov dword [edi + 0x10], ecx
inc ecx
push ecx
push dword [ebp - 0x28]
mov dword [edi + 0x14], eax
push edx
call sub.VCRUNTIME140.dll_memcpy
add esp, 0x14
lea eax, [ebp - 0x890]
mov byte [ebp - 4], 0x18
push eax
call fcn.004965c0
mov edi, eax
add esp, 0x4c
lea eax, [ebp - 0x50]
cmp eax, edi
je 0x48ded5
mov eax, dword [ebp - 0x3c]
cmp eax, 0xf
jbe 0x48dea1
push eax
push dword [ebp - 0x50]
lea eax, [ebp - 0x50]
push eax
call fcn.00489500
add esp, 0xc
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x3c], 0xf
mov byte [ebp - 0x50], 0
movups xmm0, xmmword [edi]
movups xmmword [ebp - 0x50], xmm0
movq xmm0, qword [edi + 0x10]
movq qword [ebp - 0x40], xmm0
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 0xf
mov byte [edi], 0
lea ecx, [ebp - 0x890]
call fcn.00402280
mov dword [ebp - 0x1bc], 0
mov dword [ebp - 0x1b8], 0
mov dword [ebp - 0x1b4], 0
mov eax, dword [ebp - 0x80]
lea ecx, [ebp - 0x1c0]
mov dword [ebp - 0x1c0], eax
mov eax, dword [ebp - 0x78]
push ecx
mov byte [ebp - 4], 0x6c
push eax
cmp eax, dword [ebp - 0x74]
je 0x48df32
lea eax, [ebp - 0x7c]
push eax
call fcn.00487420
mov ecx, dword [ebp - 0x78]
add esp, 0xc
add ecx, 0x10
mov dword [ebp - 0x78], ecx
jmp 0x48df3d
lea ecx, [ebp - 0x7c]
call fcn.00486520
mov ecx, dword [ebp - 0x78]
mov eax, dword [ebp - 0x7c]
xorps xmm0, xmm0
sub ecx, eax
add eax, 4
sar ecx, 4
dec ecx
shl ecx, 4
add eax, ecx
mov ecx, dword [ebp - 0x80]
push eax
sub esp, 0x18
mov dword [ebp - 0x30], ecx
mov edi, esp
lea ecx, [ebp - 0x50]
movups xmmword [edi], xmm0
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 0
cmp dword [ebp - 0x3c], 0xf
mov eax, dword [ebp - 0x40]
cmova ecx, dword [ebp - 0x50]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x28], ecx
cmp eax, 0x7fffffff
ja 0x48fa8f
cmp eax, 0xf
ja 0x48dfa4
mov dword [edi + 0x10], eax
mov dword [edi + 0x14], 0xf
movups xmm0, xmmword [ecx]
movups xmmword [edi], xmm0
jmp 0x48dfeb
or eax, 0xf
cmp eax, 0x7fffffff
jbe 0x48dfb5
mov eax, 0x7fffffff
jmp 0x48dfc0
cmp eax, 0x16
mov ecx, 0x16
cmovb eax, ecx
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
push edi
call fcn.00404660
mov ecx, dword [ebp - 0x18]
mov edx, eax
mov eax, dword [ebp - 0x1c]
mov dword [edi], edx
mov dword [edi + 0x10], ecx
inc ecx
push ecx
push dword [ebp - 0x28]
mov dword [edi + 0x14], eax
push edx
call sub.VCRUNTIME140.dll_memcpy
add esp, 0x14
push dword [ebp - 0x30]
call fcn.004896f0
mov ecx, dword [ebp - 0x78]
add esp, 0x20
mov edx, dword [ebp - 0x7c]
mov edi, ecx
sub edi, edx
sar edi, 4
dec edi
shl edi, 4
add edi, edx
mov eax, dword [edi + 8]
mov esi, dword [edi + 4]
mov dword [ebp - 0x30], eax
sub dword [ebp - 0x30], esi
cmp esi, eax
mov esi, dword [ebp - 0x20]
je 0x48e028
mov eax, dword [edi + 4]
mov dword [edi + 8], eax
mov ecx, dword [ebp - 0x78]
mov edx, dword [ebp - 0x7c]
sub ecx, edx
xorps xmm0, xmm0
sar ecx, 4
lea eax, [ecx - 1]
mov ecx, dword [ebp - 0x80]
shl eax, 4
add eax, 4
mov dword [ebp - 0x2c], ecx
add eax, edx
lea ecx, [ebp - 0x98]
push eax
sub esp, 0x18
mov edi, esp
movups xmmword [edi], xmm0
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 0
cmp dword [ebp - 0x84], 0xf
mov eax, dword [ebp - 0x88]
cmova ecx, dword [ebp - 0x98]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x28], ecx
cmp eax, 0x7fffffff
ja 0x48fa8f
cmp eax, 0xf
ja 0x48e09a
mov dword [edi + 0x10], eax
mov dword [edi + 0x14], 0xf
movups xmm0, xmmword [ecx]
movups xmmword [edi], xmm0
jmp 0x48e0e1
or eax, 0xf
cmp eax, 0x7fffffff
jbe 0x48e0ab
mov eax, 0x7fffffff
jmp 0x48e0b6
cmp eax, 0x16
mov ecx, 0x16
cmovb eax, ecx
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
push edi
call fcn.00404660
mov ecx, dword [ebp - 0x18]
mov edx, eax
mov eax, dword [ebp - 0x1c]
mov dword [edi], edx
mov dword [edi + 0x10], ecx
inc ecx
push ecx
push dword [ebp - 0x28]
mov dword [edi + 0x14], eax
push edx
call sub.VCRUNTIME140.dll_memcpy
add esp, 0x14
push dword [ebp - 0x2c]
call fcn.004896f0
mov ecx, dword [ebp - 0x78]
add esp, 0x20
mov edx, dword [ebp - 0x7c]
mov eax, ecx
sub eax, edx
sar eax, 4
dec eax
shl eax, 4
lea edi, [edx + 4]
add edi, eax
mov dword [ebp - 0x2c], edi
mov eax, dword [edi + 4]
sub eax, dword [edi]
cmp dword [ebp - 0x30], eax
jle 0x48e153
push dword [ebp - 0x2c]
mov edi, dword [ebp - 0x80]
lea ecx, [ebp - 0x50]
sub esp, 0x18
xorps xmm0, xmm0
mov esi, esp
movups xmmword [esi], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
call fcn.00489540
push dword [ebp - 0x40]
mov ecx, esi
push eax
call fcn.00485dc0
push edi
call fcn.004896f0
mov ecx, dword [ebp - 0x78]
add esp, 0x20
mov edx, dword [ebp - 0x7c]
mov esi, dword [ebp - 0x20]
mov eax, dword [ebp - 0x60]
sub ecx, edx
add eax, esi
sar ecx, 4
dec ecx
mov dword [ebp - 0x2c], ecx
mov edx, dword [eax + 0x28]
cmp edx, dword [eax + 0x2c]
je 0x48e171
mov dword [edx], ecx
add dword [eax + 0x28], 4
jmp 0x48e17e
lea ecx, [ebp - 0x2c]
push ecx
push edx
lea ecx, [eax + 0x24]
call fcn.004861d0
mov ecx, dword [ebp - 0x60]
add ecx, 0x30
add ecx, esi
mov eax, dword [ecx + 4]
cmp eax, dword [ecx + 8]
je 0x48e199
mov edx, dword [ebp - 0x54]
mov dword [eax], edx
add dword [ecx + 4], 4
jmp 0x48e1a3
lea edx, [ebp - 0x54]
push edx
push eax
call fcn.004861d0
mov ecx, dword [ebp - 0x7c]
mov edx, dword [ebp - 0x78]
sub edx, ecx
mov byte [ebp - 4], 0x18
sar edx, 4
dec edx
add edx, edx
mov eax, dword [ecx + edx*8 + 8]
sub eax, dword [ecx + edx*8 + 4]
lea ecx, [ebp - 0x1bc]
add dword [ebp - 0x80], eax
call fcn.0040acb0
jmp 0x48e91e
push dword [ecx + esi + 4]
push eax
call fcn.00494300
mov eax, dword [ebp - 0x60]
sub esp, 0x10
add eax, 8
mov byte [ebp - 4], 0x6d
add eax, esi
mov dword [ebp - 0x14], esp
mov esi, esp
mov dword [ebp - 0x28], eax
xorps xmm0, xmm0
movups xmmword [esi], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
cmp dword [eax + 0x14], 0xf
mov edi, dword [eax + 0x10]
jbe 0x48e213
mov eax, dword [eax]
mov dword [ebp - 0x28], eax
cmp edi, 0x7fffffff
ja 0x48fa8f
cmp edi, 0xf
ja 0x48e236
mov dword [esi + 0x10], edi
mov dword [esi + 0x14], 0xf
movups xmm0, xmmword [eax]
movups xmmword [esi], xmm0
jmp 0x48e26d
push 0x7fffffff
push 0xf
push edi
call fcn.00489400
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
push esi
call fcn.00404660
lea ecx, [edi + 1]
mov edx, eax
mov eax, dword [ebp - 0x1c]
push ecx
push dword [ebp - 0x28]
mov dword [esi], edx
mov dword [esi + 0x10], edi
push edx
mov dword [esi + 0x14], eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0x20
sub esp, 0x18
mov byte [ebp - 4], 0x6e
mov esi, esp
lea eax, [ebp - 0x50]
xorps xmm0, xmm0
movups xmmword [esi], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
cmp dword [ebp - 0x3c], 0xf
mov edi, dword [ebp - 0x40]
cmova eax, dword [ebp - 0x50]
mov dword [ebp - 0x2c], eax
cmp edi, 0x7fffffff
ja 0x48fa8f
cmp edi, 0xf
ja 0x48e2be
mov dword [esi + 0x10], edi
mov dword [esi + 0x14], 0xf
movups xmm0, xmmword [eax]
movups xmmword [esi], xmm0
jmp 0x48e306
mov eax, edi
or eax, 0xf
cmp eax, 0x7fffffff
jbe 0x48e2d1
mov eax, 0x7fffffff
jmp 0x48e2dc
cmp eax, 0x16
mov ecx, 0x16
cmovb eax, ecx
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
push esi
call fcn.00404660
lea ecx, [edi + 1]
mov edx, eax
mov eax, dword [ebp - 0x1c]
push ecx
push dword [ebp - 0x2c]
mov dword [esi], edx
mov dword [esi + 0x10], edi
push edx
mov dword [esi + 0x14], eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0x14
lea eax, [ebp - 0x8a8]
mov byte [ebp - 4], 0x18
push eax
call fcn.004965c0
mov esi, eax
add esp, 0x4c
lea eax, [ebp - 0x50]
cmp eax, esi
je 0x48e34b
mov ecx, eax
call fcn.00402280
movups xmm0, xmmword [esi]
movups xmmword [ebp - 0x50], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [ebp - 0x40], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xf
mov byte [esi], 0
lea ecx, [ebp - 0x8a8]
call fcn.00402280
mov esi, dword [ebp - 0x60]
mov edi, dword [ebp - 0x40]
cmp dword [ebp - 0x3c], 0xf
lea eax, [ebp - 0x50]
cmova eax, dword [ebp - 0x50]
cmp byte [eax + edi - 1], 0x3a
jne 0x48e7a8
mov ecx, dword [ebp - 0x5c]
mov eax, 0x88888889
sub ecx, esi
xor edi, edi
imul ecx
mov dword [ebp - 0x1c], edi
add edx, ecx
sar edx, 5
mov ecx, edx
shr ecx, 0x1f
add ecx, edx
je 0x48e3aa
mov edx, dword [ebp - 0x54]
lea eax, [esi + 0x20]
cmp edx, dword [eax]
je 0x48e442
inc edi
add eax, 0x3c
mov dword [ebp - 0x1c], edi
cmp edi, ecx
jb 0x48e397
mov edx, dword [ebp - 0x40]
lea eax, [ebp - 0x80]
push eax
sub esp, 0x18
lea eax, [ebp - 0x50]
mov ecx, esp
xorps xmm0, xmm0
mov dword [ebp - 0x34], ecx
dec edx
movups xmmword [ecx], xmm0
mov dword [ecx + 0x10], 0
mov dword [ecx + 0x14], 0
cmp dword [ebp - 0x40], edx
cmovb edx, dword [ebp - 0x40]
cmp dword [ebp - 0x3c], 0xf
push edx
cmova eax, dword [ebp - 0x50]
push eax
call fcn.004049a0
push dword [ebp + 8]
or dword [ebp - 0x24], 1
call fcn.00492c80
add esp, 0x20
cmp al, 1
je 0x48e91e
lea eax, [ebp - 0x50]
push eax
lea eax, [ebp - 0x2c4]
push str.This_address_specifier_is_not_valid:
push eax
call fcn.00485ca0
add esp, 0xc
lea eax, [ebp - 0x2c4]
cmp dword [ebp - 0x2b0], 0xf
cmova eax, dword [ebp - 0x2c4]
push 0
push 0
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
lea ecx, [ebp - 0x2c4]
jmp 0x48c84d
mov eax, dword [ebp - 0x80]
xor ecx, ecx
shl edi, 4
sub edi, dword [ebp - 0x1c]
shl edi, 2
mov dword [ebp - 0x30], edi
mov dword [ebp - 0x20], ecx
mov dword [edi + esi + 4], eax
mov eax, dword [ebp - 0x60]
mov byte [edi + eax], 1
mov edx, dword [ebp - 0x60]
mov eax, dword [edi + edx + 0x28]
sub eax, dword [edi + edx + 0x24]
sar eax, 2
test eax, eax
je 0x48e91e
mov eax, dword [edx + edi + 0x24]
add edx, edi
sub esp, 0x18
mov dword [ebp - 0x18], edx
mov dword [ebp - 0x34], esp
mov ecx, dword [eax + ecx*4]
mov eax, dword [ebp - 0x7c]
add ecx, ecx
mov esi, dword [eax + ecx*8 + 8]
sub esi, dword [eax + ecx*8 + 4]
mov eax, esp
push dword [edx + 4]
push eax
call fcn.00494300
mov ecx, dword [ebp - 0x60]
sub esp, 0x10
add ecx, 8
mov byte [ebp - 4], 0x6f
add ecx, edi
mov dword [ebp - 0x14], esp
mov edi, esp
mov dword [ebp - 0x28], ecx
xorps xmm0, xmm0
movups xmmword [edi], xmm0
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 0
cmp dword [ecx + 0x14], 0xf
mov eax, dword [ecx + 0x10]
mov dword [ebp - 0x2c], eax
jbe 0x48e4dd
mov ecx, dword [ecx]
mov dword [ebp - 0x28], ecx
cmp eax, 0x7fffffff
ja 0x48fa8f
cmp eax, 0xf
ja 0x48e4ff
mov dword [edi + 0x10], eax
mov dword [edi + 0x14], 0xf
movups xmm0, xmmword [ecx]
movups xmmword [edi], xmm0
jmp 0x48e537
push 0x7fffffff
push 0xf
push eax
call fcn.00489400
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
push edi
call fcn.00404660
mov ecx, dword [ebp - 0x2c]
mov edx, eax
mov eax, dword [ebp - 0x1c]
mov dword [edi], edx
mov dword [edi + 0x10], ecx
inc ecx
push ecx
push dword [ebp - 0x28]
mov dword [edi + 0x14], eax
push edx
call sub.VCRUNTIME140.dll_memcpy
add esp, 0x20
mov eax, dword [ebp - 0x18]
sub esp, 0x18
mov ecx, dword [ebp - 0x20]
mov edi, esp
xorps xmm0, xmm0
mov byte [ebp - 4], 0x70
mov eax, dword [eax + 0x30]
mov eax, dword [eax + ecx*4]
lea ecx, [eax + eax*2]
mov eax, dword [ebp - 0xb8]
movups xmmword [edi], xmm0
lea ecx, [eax + ecx*8]
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 0
cmp dword [ecx + 0x14], 0xf
mov eax, dword [ecx + 0x10]
mov dword [ebp - 0x28], ecx
mov dword [ebp - 0x2c], eax
jbe 0x48e580
mov ecx, dword [ecx]
mov dword [ebp - 0x28], ecx
cmp eax, 0x7fffffff
ja 0x48fa8f
cmp eax, 0xf
ja 0x48e5a2
mov dword [edi + 0x10], eax
mov dword [edi + 0x14], 0xf
movups xmm0, xmmword [ecx]
movups xmmword [edi], xmm0
jmp 0x48e5da
push 0x7fffffff
push 0xf
push eax
call fcn.00489400
mov dword [ebp - 0x1c], eax
lea eax, [ebp - 0x1c]
push eax
push edi
call fcn.00404660
mov ecx, dword [ebp - 0x2c]
mov edx, eax
mov eax, dword [ebp - 0x1c]
mov dword [edi], edx
mov dword [edi + 0x10], ecx
inc ecx
push ecx
push dword [ebp - 0x28]
mov dword [edi + 0x14], eax
push edx
call sub.VCRUNTIME140.dll_memcpy
add esp, 0x20
lea eax, [ebp - 0x8c0]
mov byte [ebp - 4], 0x18
push eax
call fcn.004965c0
mov edi, eax
add esp, 0x4c
lea eax, [ebp - 0x98]
cmp eax, edi
je 0x48e628
mov ecx, eax
call fcn.00402280
movups xmm0, xmmword [edi]
movups xmmword [ebp - 0x98], xmm0
movq xmm0, qword [edi + 0x10]
movq qword [ebp - 0x88], xmm0
mov dword [edi + 0x10], 0
mov dword [edi + 0x14], 0xf
mov byte [edi], 0
lea ecx, [ebp - 0x8c0]
call fcn.00402280
mov edi, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x60]
mov edx, dword [ebp - 0x20]
mov eax, dword [edi + ecx + 0x24]
mov eax, dword [eax + edx*4]
mov edx, dword [ebp - 0x7c]
add eax, eax
mov edi, dword [edx + eax*8 + 4]
cmp edi, dword [edx + eax*8 + 8]
mov edi, dword [ebp - 0x30]
je 0x48e663
mov ecx, dword [edx + eax*8 + 4]
mov dword [edx + eax*8 + 8], ecx
mov edx, dword [ebp - 0x7c]
mov ecx, dword [ebp - 0x60]
mov eax, dword [edi + ecx + 0x24]
xorps xmm0, xmm0
mov ecx, dword [ebp - 0x20]
mov eax, dword [eax + ecx*4]
lea ecx, [edx + 4]
shl eax, 4
add ecx, eax
push ecx
sub esp, 0x18
mov eax, dword [eax + edx]
lea edx, [ebp - 0x98]
mov dword [ebp - 0x14], eax
mov eax, esp
mov dword [ebp - 0x1c], eax
movups xmmword [eax], xmm0
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0
cmp dword [ebp - 0x84], 0xf
mov ecx, dword [ebp - 0x88]
cmova edx, dword [ebp - 0x98]
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x2c], edx
cmp ecx, 0x7fffffff
ja 0x48fa8f
cmp ecx, 0xf
ja 0x48e6db
mov dword [eax + 0x10], ecx
mov dword [eax + 0x14], 0xf
movups xmm0, xmmword [edx]
movups xmmword [eax], xmm0
jmp 0x48e71b
push 0x7fffffff
push 0xf
push ecx
call fcn.00489400
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0x28]
push eax
push dword [ebp - 0x1c]
call fcn.00404660
mov ecx, dword [ebp - 0x1c]
mov edx, eax
mov eax, dword [ebp - 0x18]
mov dword [ecx], edx
mov dword [ecx + 0x10], eax
mov eax, dword [ebp - 0x28]
mov dword [ecx + 0x14], eax
mov ecx, dword [ebp - 0x18]
inc ecx
push ecx
push dword [ebp - 0x2c]
push edx
call sub.VCRUNTIME140.dll_memcpy
add esp, 0x20
push dword [ebp - 0x14]
call fcn.004896f0
mov edx, dword [ebp - 0x60]
add esp, 0x20
mov ecx, dword [ebp - 0x20]
mov eax, dword [edi + edx + 0x24]
mov ecx, dword [eax + ecx*4]
mov eax, dword [ebp - 0x7c]
add ecx, ecx
mov edi, dword [eax + ecx*8 + 8]
sub edi, dword [eax + ecx*8 + 4]
mov eax, edi
mov dword [ebp - 0x14], edi
mov edi, dword [ebp - 0x30]
cmp eax, esi
jge 0x48e789
mov byte [ebp - 0x35], 0x90
sub esi, eax
mov eax, dword [edi + edx + 0x24]
mov ecx, dword [ebp - 0x20]
mov ecx, dword [eax + ecx*4]
mov eax, dword [ebp - 0x7c]
add eax, 4
shl ecx, 4
add ecx, eax
mov eax, dword [ecx + 4]
cmp eax, dword [ecx + 8]
je 0x48e777
mov byte [eax], 0x90
inc dword [ecx + 4]
jmp 0x48e781
lea edx, [ebp - 0x35]
push edx
push eax
call fcn.004860c0
mov edx, dword [ebp - 0x60]
sub esi, 1
jne 0x48e752
mov eax, dword [edi + edx + 0x28]
mov ecx, dword [ebp - 0x20]
sub eax, dword [edi + edx + 0x24]
inc ecx
sar eax, 2
mov dword [ebp - 0x20], ecx
cmp ecx, eax
jb 0x48e477
jmp 0x48e91e
mov dword [ebp - 0x15c], 0
mov dword [ebp - 0x158], 0
mov dword [ebp - 0x154], 0
mov eax, dword [ebp - 0x80]
lea ecx, [ebp - 0x160]
mov dword [ebp - 0x160], eax
mov eax, dword [ebp - 0x78]
push ecx
mov byte [ebp - 4], 0x71
push eax
cmp eax, dword [ebp - 0x74]
je 0x48e7fa
lea eax, [ebp - 0x7c]
push eax
call fcn.00487420
mov ecx, dword [ebp - 0x78]
add esp, 0xc
add ecx, 0x10
mov dword [ebp - 0x78], ecx
jmp 0x48e805
lea ecx, [ebp - 0x7c]
call fcn.00486520
mov ecx, dword [ebp - 0x78]
mov eax, dword [ebp - 0x7c]
xorps xmm0, xmm0
sub ecx, eax
add eax, 0xfffffff4
and ecx, 0xfffffff0
add eax, ecx
mov ecx, dword [ebp - 0x80]
push eax
sub esp, 0x18
mov dword [ebp - 0x2c], ecx
mov esi, esp
lea eax, [ebp - 0x50]
movups xmmword [esi], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
cmp dword [ebp - 0x3c], 0xf
mov edi, dword [ebp - 0x40]
cmova eax, dword [ebp - 0x50]
mov dword [ebp - 0x14], eax
cmp edi, 0x7fffffff
ja 0x48fa8f
cmp edi, 0xf
ja 0x48e866
mov dword [esi + 0x10], edi
mov dword [esi + 0x14], 0xf
movups xmm0, xmmword [eax]
movups xmmword [esi], xmm0
jmp 0x48e8a0
push 0x7fffffff
push 0xf
push edi
call fcn.00489400
mov dword [ebp - 0x18], eax
lea eax, [ebp - 0x18]
push eax
push esi
call fcn.00404660
lea ecx, [edi + 1]
mov edx, eax
mov eax, dword [ebp - 0x18]
push ecx
push dword [ebp - 0x14]
mov dword [esi], edx
mov dword [esi + 0x10], edi
push edx
mov dword [esi + 0x14], eax
call sub.VCRUNTIME140.dll_memcpy
mov ecx, dword [ebp - 0x2c]
add esp, 0x20
push ecx
call fcn.004896f0
mov ecx, dword [ebp - 0x7c]
add esp, 0x20
mov edx, dword [ebp - 0x78]
sub edx, ecx
mov byte [ebp - 4], 0x18
sar edx, 4
dec edx
add edx, edx
mov eax, dword [ecx + edx*8 + 8]
sub eax, dword [ecx + edx*8 + 4]
add dword [ebp - 0x80], eax
mov edx, dword [ebp - 0x15c]
test edx, edx
je 0x48e91e
mov ecx, dword [ebp - 0x154]
mov eax, edx
sub ecx, edx
cmp ecx, 0x1000
jb 0x48e8f6
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x48eae3
push ecx
push edx
call fcn.0049b35d
add esp, 8
mov dword [ebp - 0x15c], 0
mov dword [ebp - 0x158], 0
mov dword [ebp - 0x154], 0
mov ecx, dword [ebp - 0xb4]
mov eax, 0x2aaaaaab
sub ecx, dword [ebp - 0xb8]
mov esi, dword [ebp - 0x54]
imul ecx
inc esi
sar edx, 2
mov eax, edx
mov dword [ebp - 0x54], esi
shr eax, 0x1f
add eax, edx
cmp esi, eax
jb 0x48d630
mov eax, dword [ebp - 0xe4]
sub eax, dword [ebp - 0xe8]
mov edx, dword [sym.imp.KERNEL32.dll_VirtualProtectEx]
sar eax, 3
mov byte [ebp - 0xd], 1
test eax, eax
je 0x48e9ae
xor esi, esi
xor eax, eax
lea edi, [esi + 8]
nop
lea ecx, [ebp - 0x128]
push ecx
mov ecx, dword [ebp - 0xe8]
push 0x40
push dword [ecx + eax + 4]
push dword [ecx + eax]
push dword [ebp + 8]
call edx
mov eax, dword [ebp - 0xe4]
inc esi
sub eax, dword [ebp - 0xe8]
mov edx, dword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov dword [ebp - 0x14], edi
add edi, 8
sar eax, 3
cmp esi, eax
mov eax, dword [ebp - 0x14]
jb 0x48e970
mov eax, dword [ebp - 0x78]
sub eax, dword [ebp - 0x7c]
sar eax, 4
mov dword [ebp - 0x24], 0
test eax, eax
je 0x48eae9
xor edi, edi
mov dword [ebp - 0x54], edi
nop dword [eax + eax]
mov eax, dword [ebp - 0x7c]
lea esi, [ebp - 0x128]
push esi
push 0x40
mov ecx, dword [eax + edi + 8]
sub ecx, dword [eax + edi + 4]
push ecx
push dword [eax + edi]
push dword [ebp + 8]
call edx
mov eax, dword [ebp - 0x7c]
mov ecx, dword [eax + edi + 8]
sub ecx, dword [eax + edi + 4]
push ecx
call fcn.0049c26b
mov esi, dword [ebp - 0x54]
add esp, 4
mov edi, dword [ebp - 0x7c]
add esi, 4
add esi, edi
mov dword [ebp - 0x30], eax
xor edx, edx
mov ecx, dword [esi + 4]
sub ecx, dword [esi]
mov ecx, dword [ebp - 0x54]
je 0x48ea3d
nop dword [eax + eax]
mov eax, dword [esi]
mov esi, dword [ebp - 0x30]
mov al, byte [edx + eax]
mov byte [esi + edx], al
inc edx
mov edi, dword [ebp - 0x7c]
lea esi, [edi + 4]
add esi, ecx
mov eax, dword [esi + 4]
sub eax, dword [esi]
cmp edx, eax
jb 0x48ea20
mov eax, dword [edi + ecx + 8]
lea edx, [ebp - 0x170]
sub eax, dword [edi + ecx + 4]
push edx
push eax
push dword [ebp - 0x30]
push dword [edi + ecx]
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
push dword [ebp - 0x30]
mov esi, eax
call fcn.0049c274
mov eax, dword [ebp - 0x7c]
lea edx, [ebp - 0x170]
mov edi, dword [ebp - 0x54]
add esp, 4
mov ecx, dword [eax + edi + 8]
sub ecx, dword [eax + edi + 4]
push edx
push dword [ebp - 0x128]
push ecx
push dword [eax + edi]
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.dll_VirtualProtectEx]
movzx eax, byte [ebp - 0xd]
xor ecx, ecx
mov edx, dword [sym.imp.KERNEL32.dll_VirtualProtectEx]
test esi, esi
cmovne ecx, eax
mov eax, dword [ebp - 0x78]
sub eax, dword [ebp - 0x7c]
add edi, 0x10
mov byte [ebp - 0xd], cl
mov ecx, dword [ebp - 0x24]
inc ecx
sar eax, 4
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x54], edi
cmp ecx, eax
jb 0x48e9d0
mov al, byte [ebp - 0xd]
mov byte [ebp - 0xd], al
test al, al
jne 0x48eae9
push 0
push 0
push str.Not_all_instructions_could_be_injected
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x48c856
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
mov edi, dword [ebp + 0x18]
mov edx, dword [ebp - 0x108]
sub edx, dword [ebp - 0x10c]
sar edx, 2
mov eax, dword [edi + 4]
sub eax, dword [edi]
sar eax, 5
mov dword [ebp - 0x14], edx
cmp edx, eax
jne 0x48eb62
or esi, 0xffffffff
test edx, edx
je 0x48eb51
xor edi, edi
xor ecx, ecx
xor eax, eax
mov dword [ebp - 0x24], edi
mov dword [ebp - 0x18], eax
nop dword [eax]
mov edi, dword [ebp + 0x18]
shl eax, 5
mov edx, dword [edi]
mov edi, dword [ebp - 0x24]
cmp dword [eax + edx], esi
mov edx, dword [ebp - 0x14]
jae 0x48eb41
mov ecx, dword [ebp - 0x10c]
mov eax, dword [ebp - 0x18]
mov esi, dword [ecx + eax*4]
mov ecx, edi
inc ecx
mov eax, ecx
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x18], eax
cmp eax, edx
jb 0x48eb20
mov edi, dword [ebp + 0x18]
push 0x8000
push 0
push esi
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.dll_VirtualFreeEx]
mov ecx, edi
call fcn.00490af0
mov eax, dword [ebp - 0x68]
mov esi, dword [ebp - 0x6c]
sub eax, esi
sar eax, 5
test eax, eax
je 0x48ebba
xor ecx, ecx
xor edi, edi
mov dword [ebp - 0x24], ecx
nop
mov edx, dword [ebp + 0x18]
shl ecx, 5
add ecx, esi
push ecx
mov eax, dword [edx + 4]
mov ecx, edx
cmp eax, dword [edx + 8]
je 0x48eb9a
call fcn.00485ff0
jmp 0x48eba3
push eax
call fcn.004866f0
mov edi, dword [ebp - 0x24]
mov eax, dword [ebp - 0x68]
lea ecx, [edi + 1]
mov esi, dword [ebp - 0x6c]
mov edi, ecx
sub eax, esi
mov dword [ebp - 0x24], ecx
sar eax, 5
cmp ecx, eax
jb 0x48eb80
mov edi, dword [ebp - 0x14c]
xor ecx, ecx
mov dword [ebp - 0x30], ecx
mov eax, 0x2aaaaaab
mov ecx, dword [ebp - 0x148]
sub ecx, edi
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x48ecb9
xor esi, esi
mov dword [ebp - 0x1c], esi
nop dword [eax]
lea eax, [edi + esi]
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x18], eax
xorps xmm0, xmm0
movups xmmword [esi], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
cmp dword [eax + 0x14], 0xf
mov edi, dword [eax + 0x10]
jbe 0x48ec1d
mov eax, dword [eax]
mov dword [ebp - 0x18], eax
cmp edi, 0x7fffffff
ja 0x48fa8f
cmp edi, 0xf
ja 0x48ec40
mov dword [esi + 0x10], edi
mov dword [esi + 0x14], 0xf
movups xmm0, xmmword [eax]
movups xmmword [esi], xmm0
jmp 0x48ec77
push 0x7fffffff
push 0xf
push edi
call fcn.00489400
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
push esi
call fcn.00404660
lea ecx, [edi + 1]
mov edx, eax
mov eax, dword [ebp - 0x24]
push ecx
push dword [ebp - 0x18]
mov dword [esi], edx
mov dword [esi + 0x10], edi
push edx
mov dword [esi + 0x14], eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0x20
push dword [ebp + 8]
call fcn.00488830
mov ecx, dword [ebp - 0x148]
mov eax, 0x2aaaaaab
mov edi, dword [ebp - 0x14c]
add esp, 0x1c
mov esi, dword [ebp - 0x1c]
sub ecx, edi
inc dword [ebp - 0x30]
add esi, 0x18
imul ecx
mov dword [ebp - 0x1c], esi
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp dword [ebp - 0x30], eax
jb 0x48ebf0
mov esi, dword [ebp - 0x6c]
xor ecx, ecx
mov eax, 0x2aaaaaab
mov dword [ebp - 0x28], ecx
mov ecx, dword [ebp - 0xc0]
sub ecx, dword [ebp - 0xc4]
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x48f35c
mov edi, dword [ebp - 0x60]
mov dword [ebp - 0x20], 0
nop dword [eax + eax]
mov eax, dword [ebp - 0x68]
xor ecx, ecx
sub eax, esi
mov dword [ebp - 0x30], ecx
sar eax, 5
test eax, eax
je 0x48ee89
xor edx, edx
mov dword [ebp - 0x1c], edx
nop word [eax + eax]
sub esp, 0x18
lea eax, [esi + 4]
mov esi, esp
mov dword [ebp - 0x34], esp
add eax, edx
xorps xmm0, xmm0
mov dword [ebp - 0x18], eax
movups xmmword [esi], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
cmp dword [eax + 0x14], 0xf
mov edi, dword [eax + 0x10]
jbe 0x48ed42
mov eax, dword [eax]
mov dword [ebp - 0x18], eax
cmp edi, 0x7fffffff
ja 0x48fa8f
cmp edi, 0xf
ja 0x48ed65
mov dword [esi + 0x10], edi
mov dword [esi + 0x14], 0xf
movups xmm0, xmmword [eax]
movups xmmword [esi], xmm0
jmp 0x48edad
mov eax, edi
or eax, 0xf
cmp eax, 0x7fffffff
jbe 0x48ed78
mov eax, 0x7fffffff
jmp 0x48ed83
cmp eax, 0x16
mov ecx, 0x16
cmovb eax, ecx
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
push esi
call fcn.00404660
lea ecx, [edi + 1]
mov edx, eax
mov eax, dword [ebp - 0x24]
push ecx
push dword [ebp - 0x18]
mov dword [esi], edx
mov dword [esi + 0x10], edi
push edx
mov dword [esi + 0x14], eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0x14
mov eax, dword [ebp - 0xc4]
sub esp, 0x18
add eax, dword [ebp - 0x20]
mov esi, esp
xorps xmm0, xmm0
mov byte [ebp - 4], 0x72
mov dword [ebp - 0x18], eax
movups xmmword [esi], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
cmp dword [eax + 0x14], 0xf
mov edi, dword [eax + 0x10]
jbe 0x48ede4
mov eax, dword [eax]
mov dword [ebp - 0x18], eax
cmp edi, 0x7fffffff
ja 0x48fa8f
cmp edi, 0xf
ja 0x48ee07
mov dword [esi + 0x10], edi
mov dword [esi + 0x14], 0xf
movups xmm0, xmmword [eax]
movups xmmword [esi], xmm0
jmp 0x48ee4f
mov eax, edi
or eax, 0xf
cmp eax, 0x7fffffff
jbe 0x48ee1a
mov eax, 0x7fffffff
jmp 0x48ee25
cmp eax, 0x16
mov ecx, 0x16
cmovb eax, ecx
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
push esi
call fcn.00404660
lea ecx, [edi + 1]
mov edx, eax
mov eax, dword [ebp - 0x24]
push ecx
push dword [ebp - 0x18]
mov dword [esi], edx
mov dword [esi + 0x10], edi
push edx
mov dword [esi + 0x14], eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0x14
mov byte [ebp - 4], 0x18
call fcn.00493a50
add esp, 0x30
test al, al
jne 0x48ef0d
mov eax, dword [ebp - 0x68]
mov ecx, dword [ebp - 0x30]
mov esi, dword [ebp - 0x6c]
inc ecx
mov edx, dword [ebp - 0x1c]
sub eax, esi
add edx, 0x20
sar eax, 5
mov dword [ebp - 0x30], ecx
mov dword [ebp - 0x1c], edx
cmp ecx, eax
jb 0x48ed10
mov edi, dword [ebp - 0x60]
xor ecx, ecx
mov eax, 0x88888889
mov dword [ebp - 0x54], ecx
mov ecx, dword [ebp - 0x5c]
sub ecx, edi
imul ecx
add edx, ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x48f32f
xor esi, esi
mov dword [ebp - 0x30], esi
lea eax, [edi + 8]
sub esp, 0x18
add eax, esi
mov dword [ebp - 0x34], esp
mov esi, esp
mov dword [ebp - 0x18], eax
xorps xmm0, xmm0
movups xmmword [esi], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
cmp dword [eax + 0x14], 0xf
mov edi, dword [eax + 0x10]
jbe 0x48eee3
mov eax, dword [eax]
mov dword [ebp - 0x18], eax
cmp edi, 0x7fffffff
ja 0x48fa8f
cmp edi, 0xf
ja 0x48f08a
mov dword [esi + 0x10], edi
mov dword [esi + 0x14], 0xf
movups xmm0, xmmword [eax]
movups xmmword [esi], xmm0
jmp 0x48f0d2
mov ecx, dword [ebp - 0xc4]
sub esp, 0x18
mov edi, dword [ebp - 0x20]
mov esi, esp
add ecx, edi
xorps xmm0, xmm0
mov dword [ebp - 0x18], ecx
movups xmmword [esi], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
cmp dword [ecx + 0x14], 0xf
mov eax, dword [ecx + 0x10]
mov dword [ebp - 0x14], eax
jbe 0x48ef45
mov ecx, dword [ecx]
mov dword [ebp - 0x18], ecx
cmp eax, 0x7fffffff
ja 0x48fa8f
cmp eax, 0xf
ja 0x48ef67
mov dword [esi + 0x10], eax
mov dword [esi + 0x14], 0xf
movups xmm0, xmmword [ecx]
movups xmmword [esi], xmm0
jmp 0x48efae
or eax, 0xf
cmp eax, 0x7fffffff
jbe 0x48ef78
mov eax, 0x7fffffff
jmp 0x48ef83
cmp eax, 0x16
mov ecx, 0x16
cmovb eax, ecx
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
push esi
call fcn.00404660
mov ecx, dword [ebp - 0x14]
mov edx, eax
mov eax, dword [ebp - 0x24]
mov dword [esi], edx
mov dword [esi + 0x10], ecx
inc ecx
push ecx
push dword [ebp - 0x18]
mov dword [esi + 0x14], eax
push edx
call sub.VCRUNTIME140.dll_memcpy
add esp, 0x14
push dword [ebp + 8]
call fcn.00488830
mov eax, dword [ebp - 0xc4]
add esp, 4
mov esi, esp
mov dword [ebp - 0x34], esp
add eax, edi
xorps xmm0, xmm0
mov dword [ebp - 0x18], eax
movups xmmword [esi], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
cmp dword [eax + 0x14], 0xf
mov edi, dword [eax + 0x10]
jbe 0x48efeb
mov eax, dword [eax]
mov dword [ebp - 0x18], eax
cmp edi, 0x7fffffff
ja 0x48fa8f
cmp edi, 0xf
ja 0x48f00e
mov dword [esi + 0x10], edi
mov dword [esi + 0x14], 0xf
movups xmm0, xmmword [eax]
movups xmmword [esi], xmm0
jmp 0x48f056
mov eax, edi
or eax, 0xf
cmp eax, 0x7fffffff
jbe 0x48f021
mov eax, 0x7fffffff
jmp 0x48f02c
cmp eax, 0x16
mov ecx, 0x16
cmovb eax, ecx
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
push esi
call fcn.00404660
lea ecx, [edi + 1]
mov edx, eax
mov eax, dword [ebp - 0x24]
push ecx
push dword [ebp - 0x18]
mov dword [esi], edx
mov dword [esi + 0x10], edi
push edx
mov dword [esi + 0x14], eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0x14
mov ecx, dword [ebp - 0x30]
sub esp, 0x18
shl ecx, 5
mov eax, esp
add ecx, dword [ebp - 0x6c]
mov byte [ebp - 4], 0x73
push dword [ecx]
push eax
call fcn.00494300
add esp, 8
mov byte [ebp - 4], 0x18
push dword [ebp + 8]
call fcn.004884a0
mov edi, dword [ebp - 0x60]
add esp, 0x34
jmp 0x48f32c
mov eax, edi
or eax, 0xf
cmp eax, 0x7fffffff
jbe 0x48f09d
mov eax, 0x7fffffff
jmp 0x48f0a8
cmp eax, 0x16
mov ecx, 0x16
cmovb eax, ecx
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
push esi
call fcn.00404660
lea ecx, [edi + 1]
mov edx, eax
mov eax, dword [ebp - 0x24]
push ecx
push dword [ebp - 0x18]
mov dword [esi], edx
mov dword [esi + 0x10], edi
push edx
mov dword [esi + 0x14], eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0x14
mov eax, dword [ebp - 0xc4]
sub esp, 0x18
add eax, dword [ebp - 0x20]
mov esi, esp
xorps xmm0, xmm0
mov byte [ebp - 4], 0x74
mov dword [ebp - 0x18], eax
movups xmmword [esi], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
cmp dword [eax + 0x14], 0xf
mov edi, dword [eax + 0x10]
jbe 0x48f109
mov eax, dword [eax]
mov dword [ebp - 0x18], eax
cmp edi, 0x7fffffff
ja 0x48fa8f
cmp edi, 0xf
ja 0x48f12c
mov dword [esi + 0x10], edi
mov dword [esi + 0x14], 0xf
movups xmm0, xmmword [eax]
movups xmmword [esi], xmm0
jmp 0x48f174
mov eax, edi
or eax, 0xf
cmp eax, 0x7fffffff
jbe 0x48f13f
mov eax, 0x7fffffff
jmp 0x48f14a
cmp eax, 0x16
mov ecx, 0x16
cmovb eax, ecx
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
push esi
call fcn.00404660
lea ecx, [edi + 1]
mov edx, eax
mov eax, dword [ebp - 0x24]
push ecx
push dword [ebp - 0x18]
mov dword [esi], edx
mov dword [esi + 0x10], edi
push edx
mov dword [esi + 0x14], eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0x14
mov byte [ebp - 4], 0x18
call fcn.00493a50
add esp, 0x30
test al, al
je 0x48f2fc
mov eax, dword [ebp - 0xc4]
sub esp, 0x18
add eax, dword [ebp - 0x20]
mov esi, esp
xorps xmm0, xmm0
mov dword [ebp - 0x18], eax
movups xmmword [esi], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
cmp dword [eax + 0x14], 0xf
mov edi, dword [eax + 0x10]
jbe 0x48f1bb
mov eax, dword [eax]
mov dword [ebp - 0x18], eax
cmp edi, 0x7fffffff
ja 0x48fa8f
cmp edi, 0xf
ja 0x48f1de
mov dword [esi + 0x10], edi
mov dword [esi + 0x14], 0xf
movups xmm0, xmmword [eax]
movups xmmword [esi], xmm0
jmp 0x48f226
mov eax, edi
or eax, 0xf
cmp eax, 0x7fffffff
jbe 0x48f1f1
mov eax, 0x7fffffff
jmp 0x48f1fc
cmp eax, 0x16
mov ecx, 0x16
cmovb eax, ecx
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
push esi
call fcn.00404660
lea ecx, [edi + 1]
mov edx, eax
mov eax, dword [ebp - 0x24]
push ecx
push dword [ebp - 0x18]
mov dword [esi], edx
mov dword [esi + 0x10], edi
push edx
mov dword [esi + 0x14], eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0x14
push dword [ebp + 8]
call fcn.00488830
mov eax, dword [ebp - 0xc4]
add esp, 4
add eax, dword [ebp - 0x20]
mov esi, esp
xorps xmm0, xmm0
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x34], esp
movups xmmword [esi], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
cmp dword [eax + 0x14], 0xf
mov edi, dword [eax + 0x10]
jbe 0x48f264
mov eax, dword [eax]
mov dword [ebp - 0x18], eax
cmp edi, 0x7fffffff
ja 0x48fa8f
cmp edi, 0xf
ja 0x48f287
mov dword [esi + 0x10], edi
mov dword [esi + 0x14], 0xf
movups xmm0, xmmword [eax]
movups xmmword [esi], xmm0
jmp 0x48f2cf
mov eax, edi
or eax, 0xf
cmp eax, 0x7fffffff
jbe 0x48f29a
mov eax, 0x7fffffff
jmp 0x48f2a5
cmp eax, 0x16
mov ecx, 0x16
cmovb eax, ecx
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
push esi
call fcn.00404660
lea ecx, [edi + 1]
mov edx, eax
mov eax, dword [ebp - 0x24]
push ecx
push dword [ebp - 0x18]
mov dword [esi], edx
mov dword [esi + 0x10], edi
push edx
mov dword [esi + 0x14], eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0x14
mov ecx, dword [ebp - 0x60]
sub esp, 0x18
mov esi, dword [ebp - 0x30]
mov eax, esp
mov byte [ebp - 4], 0x75
push dword [ecx + esi + 4]
push eax
call fcn.00494300
add esp, 8
mov byte [ebp - 4], 0x18
push dword [ebp + 8]
call fcn.004884a0
add esp, 0x34
jmp 0x48f2ff
mov esi, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x5c]
mov eax, 0x88888889
mov edi, dword [ebp - 0x60]
add esi, 0x3c
inc dword [ebp - 0x54]
sub ecx, edi
imul ecx
mov dword [ebp - 0x30], esi
add edx, ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp dword [ebp - 0x54], eax
jb 0x48eeb1
mov esi, dword [ebp - 0x6c]
mov ecx, dword [ebp - 0xc0]
mov eax, 0x2aaaaaab
sub ecx, dword [ebp - 0xc4]
inc dword [ebp - 0x28]
add dword [ebp - 0x20], 0x18
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp dword [ebp - 0x28], eax
jb 0x48ecf0
mov ecx, dword [ebp - 0xcc]
mov eax, 0x2aaaaaab
mov esi, dword [ebp - 0xd0]
sub ecx, esi
imul ecx
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x48c856
xor ecx, ecx
xor edi, edi
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x54], edi
nop dword [eax + eax]
lea eax, [ebp - 0x70]
xorps xmm0, xmm0
push eax
lea eax, [edi + esi]
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x18], eax
movups xmmword [esi], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
cmp dword [eax + 0x14], 0xf
mov edi, dword [eax + 0x10]
jbe 0x48f3c1
mov eax, dword [eax]
mov dword [ebp - 0x18], eax
cmp edi, 0x7fffffff
ja 0x48fa8f
cmp edi, 0xf
ja 0x48f3e4
mov dword [esi + 0x10], edi
mov dword [esi + 0x14], 0xf
movups xmm0, xmmword [eax]
movups xmmword [esi], xmm0
jmp 0x48f42c
mov eax, edi
or eax, 0xf
cmp eax, 0x7fffffff
jbe 0x48f3f7
mov eax, 0x7fffffff
jmp 0x48f402
cmp eax, 0x16
mov ecx, 0x16
cmovb eax, ecx
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
push esi
call fcn.00404660
lea ecx, [edi + 1]
mov edx, eax
mov eax, dword [ebp - 0x24]
push ecx
push dword [ebp - 0x18]
mov dword [esi], edx
mov dword [esi + 0x10], edi
push edx
mov dword [esi + 0x14], eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0x14
push dword [ebp + 8]
call fcn.00492c80
add esp, 0x20
mov byte [ebp - 0x35], al
test al, al
jne 0x48fa28
mov ecx, dword [ebp - 0x5c]
xor edx, edx
sub ecx, dword [ebp - 0x60]
mov eax, 0x88888889
mov dword [ebp - 0x30], edx
imul ecx
add edx, ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x48f5f3
mov dword [ebp - 0x28], 0
nop dword [eax]
mov eax, dword [ebp - 0xd0]
sub esp, 0x18
add eax, dword [ebp - 0x54]
mov esi, esp
xorps xmm0, xmm0
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x34], esp
movups xmmword [esi], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
cmp dword [eax + 0x14], 0xf
mov edi, dword [eax + 0x10]
jbe 0x48f4a6
mov eax, dword [eax]
mov dword [ebp - 0x18], eax
cmp edi, 0x7fffffff
ja 0x48fa8f
cmp edi, 0xf
ja 0x48f4c9
mov dword [esi + 0x10], edi
mov dword [esi + 0x14], 0xf
movups xmm0, xmmword [eax]
movups xmmword [esi], xmm0
jmp 0x48f511
mov eax, edi
or eax, 0xf
cmp eax, 0x7fffffff
jbe 0x48f4dc
mov eax, 0x7fffffff
jmp 0x48f4e7
cmp eax, 0x16
mov ecx, 0x16
cmovb eax, ecx
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
push esi
call fcn.00404660
lea ecx, [edi + 1]
mov edx, eax
mov eax, dword [ebp - 0x24]
push ecx
push dword [ebp - 0x18]
mov dword [esi], edx
mov dword [esi + 0x10], edi
push edx
mov dword [esi + 0x14], eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0x14
mov eax, dword [ebp - 0x60]
sub esp, 0x18
mov esi, esp
mov byte [ebp - 4], 0x76
add eax, 8
xorps xmm0, xmm0
add eax, dword [ebp - 0x28]
mov dword [ebp - 0x18], eax
movups xmmword [esi], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
cmp dword [eax + 0x14], 0xf
mov edi, dword [eax + 0x10]
jbe 0x48f548
mov eax, dword [eax]
mov dword [ebp - 0x18], eax
cmp edi, 0x7fffffff
ja 0x48fa8f
cmp edi, 0xf
ja 0x48f56b
mov dword [esi + 0x10], edi
mov dword [esi + 0x14], 0xf
movups xmm0, xmmword [eax]
movups xmmword [esi], xmm0
jmp 0x48f5b3
mov eax, edi
or eax, 0xf
cmp eax, 0x7fffffff
jbe 0x48f57e
mov eax, 0x7fffffff
jmp 0x48f589
cmp eax, 0x16
mov ecx, 0x16
cmovb eax, ecx
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
push esi
call fcn.00404660
lea ecx, [edi + 1]
mov edx, eax
mov eax, dword [ebp - 0x24]
push ecx
push dword [ebp - 0x18]
mov dword [esi], edx
mov dword [esi + 0x10], edi
push edx
mov dword [esi + 0x14], eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0x14
mov byte [ebp - 4], 0x18
call fcn.00493a50
add esp, 0x30
test al, al
jne 0x48f669
mov ecx, dword [ebp - 0x5c]
mov eax, 0x88888889
sub ecx, dword [ebp - 0x60]
mov esi, dword [ebp - 0x30]
add dword [ebp - 0x28], 0x3c
inc esi
imul ecx
mov dword [ebp - 0x30], esi
add edx, ecx
sar edx, 5
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp esi, eax
jb 0x48f470
mov eax, dword [ebp - 0x68]
xor ecx, ecx
sub eax, dword [ebp - 0x6c]
sar eax, 5
mov dword [ebp - 0x30], ecx
test eax, eax
je 0x48f7a2
xor edx, edx
mov dword [ebp - 0x28], edx
nop
mov eax, dword [ebp - 0xd0]
sub esp, 0x18
add eax, dword [ebp - 0x54]
mov esi, esp
xorps xmm0, xmm0
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x34], esp
movups xmmword [esi], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
cmp dword [eax + 0x14], 0xf
mov edi, dword [eax + 0x10]
jbe 0x48f646
mov eax, dword [eax]
mov dword [ebp - 0x18], eax
cmp edi, 0x7fffffff
ja 0x48fa8f
cmp edi, 0xf
ja 0x48f681
mov dword [esi + 0x10], edi
mov dword [esi + 0x14], 0xf
movups xmm0, xmmword [eax]
movups xmmword [esi], xmm0
jmp 0x48f6cc
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x60]
shl ecx, 4
sub ecx, dword [ebp - 0x30]
mov eax, dword [eax + ecx*4 + 4]
mov dword [ebp - 0x70], eax
jmp 0x48fa2b
mov eax, edi
or eax, 0xf
cmp eax, 0x7fffffff
jbe 0x48f694
mov eax, 0x7fffffff
jmp 0x48f69f
cmp eax, 0x16
mov ecx, 0x16
cmovb eax, ecx
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
push esi
call fcn.00404660
lea ecx, [edi + 1]
mov edx, eax
mov eax, dword [ebp - 0x24]
push ecx
push dword [ebp - 0x18]
mov dword [esi], edx
mov dword [esi + 0x10], edi
push edx
mov dword [esi + 0x14], eax
call sub.VCRUNTIME140.dll_memcpy
mov edx, dword [ebp - 0x28]
add esp, 0x14
mov eax, dword [ebp - 0x6c]
sub esp, 0x18
mov esi, esp
mov byte [ebp - 4], 0x77
add eax, 4
xorps xmm0, xmm0
add eax, edx
mov dword [ebp - 0x18], eax
movups xmmword [esi], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
cmp dword [eax + 0x14], 0xf
mov edi, dword [eax + 0x10]
jbe 0x48f702
mov eax, dword [eax]
mov dword [ebp - 0x18], eax
cmp edi, 0x7fffffff
ja 0x48fa8f
cmp edi, 0xf
ja 0x48f725
mov dword [esi + 0x10], edi
mov dword [esi + 0x14], 0xf
movups xmm0, xmmword [eax]
movups xmmword [esi], xmm0
jmp 0x48f76d
mov eax, edi
or eax, 0xf
cmp eax, 0x7fffffff
jbe 0x48f738
mov eax, 0x7fffffff
jmp 0x48f743
cmp eax, 0x16
mov ecx, 0x16
cmovb eax, ecx
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
push esi
call fcn.00404660
lea ecx, [edi + 1]
mov edx, eax
mov eax, dword [ebp - 0x24]
push ecx
push dword [ebp - 0x18]
mov dword [esi], edx
mov dword [esi + 0x10], edi
push edx
mov dword [esi + 0x14], eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0x14
mov byte [ebp - 4], 0x18
call fcn.00493a50
mov ecx, dword [ebp - 0x30]
add esp, 0x30
test al, al
jne 0x48f82c
mov eax, dword [ebp - 0x68]
inc ecx
sub eax, dword [ebp - 0x6c]
mov edx, dword [ebp - 0x28]
add edx, 0x20
sar eax, 5
mov dword [ebp - 0x30], ecx
mov dword [ebp - 0x28], edx
cmp ecx, eax
jb 0x48f610
mov ecx, dword [ebp - 0xa8]
mov eax, 0x2aaaaaab
sub ecx, dword [ebp - 0xac]
imul ecx
mov dword [ebp - 0x28], 0
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
je 0x48fa56
mov dword [ebp - 0x20], 0
mov eax, dword [ebp - 0xd0]
sub esp, 0x18
add eax, dword [ebp - 0x54]
mov esi, esp
xorps xmm0, xmm0
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x34], esp
movups xmmword [esi], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
cmp dword [eax + 0x14], 0xf
mov edi, dword [eax + 0x10]
jbe 0x48f809
mov eax, dword [eax]
mov dword [ebp - 0x18], eax
cmp edi, 0x7fffffff
ja 0x48fa8f
cmp edi, 0xf
ja 0x48f83d
mov dword [esi + 0x10], edi
mov dword [esi + 0x14], 0xf
movups xmm0, xmmword [eax]
movups xmmword [esi], xmm0
jmp 0x48f885
mov eax, dword [ebp - 0x6c]
shl ecx, 5
mov eax, dword [ecx + eax]
mov dword [ebp - 0x70], eax
jmp 0x48fa2b
mov eax, edi
or eax, 0xf
cmp eax, 0x7fffffff
jbe 0x48f850
mov eax, 0x7fffffff
jmp 0x48f85b
cmp eax, 0x16
mov ecx, 0x16
cmovb eax, ecx
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
push esi
call fcn.00404660
lea ecx, [edi + 1]
mov edx, eax
mov eax, dword [ebp - 0x24]
push ecx
push dword [ebp - 0x18]
mov dword [esi], edx
mov dword [esi + 0x10], edi
push edx
mov dword [esi + 0x14], eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0x14
mov eax, dword [ebp - 0xac]
sub esp, 0x18
add eax, dword [ebp - 0x20]
mov esi, esp
xorps xmm0, xmm0
mov byte [ebp - 4], 0x78
mov dword [ebp - 0x18], eax
movups xmmword [esi], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
cmp dword [eax + 0x14], 0xf
mov edi, dword [eax + 0x10]
jbe 0x48f8bc
mov eax, dword [eax]
mov dword [ebp - 0x18], eax
cmp edi, 0x7fffffff
ja 0x48fa8f
cmp edi, 0xf
ja 0x48f8df
mov dword [esi + 0x10], edi
mov dword [esi + 0x14], 0xf
movups xmm0, xmmword [eax]
movups xmmword [esi], xmm0
jmp 0x48f927
mov eax, edi
or eax, 0xf
cmp eax, 0x7fffffff
jbe 0x48f8f2
mov eax, 0x7fffffff
jmp 0x48f8fd
cmp eax, 0x16
mov ecx, 0x16
cmovb eax, ecx
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
push esi
call fcn.00404660
lea ecx, [edi + 1]
mov edx, eax
mov eax, dword [ebp - 0x24]
push ecx
push dword [ebp - 0x18]
mov dword [esi], edx
mov dword [esi + 0x10], edi
push edx
mov dword [esi + 0x14], eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0x14
mov byte [ebp - 4], 0x18
call fcn.00493a50
add esp, 0x30
test al, al
je 0x48f9f2
lea eax, [ebp - 0x70]
xorps xmm0, xmm0
push eax
mov eax, dword [ebp - 0xac]
sub esp, 0x18
mov esi, esp
add eax, 0x18
add eax, dword [ebp - 0x20]
mov dword [ebp - 0x18], eax
movups xmmword [esi], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0
cmp dword [eax + 0x14], 0xf
mov edi, dword [eax + 0x10]
jbe 0x48f975
mov eax, dword [eax]
mov dword [ebp - 0x18], eax
cmp edi, 0x7fffffff
ja 0x48fa8f
cmp edi, 0xf
ja 0x48f998
mov dword [esi + 0x10], edi
mov dword [esi + 0x14], 0xf
movups xmm0, xmmword [eax]
movups xmmword [esi], xmm0
jmp 0x48f9e0
mov eax, edi
or eax, 0xf
cmp eax, 0x7fffffff
jbe 0x48f9ab
mov eax, 0x7fffffff
jmp 0x48f9b6
cmp eax, 0x16
mov ecx, 0x16
cmovb eax, ecx
mov dword [ebp - 0x24], eax
lea eax, [ebp - 0x24]
push eax
push esi
call fcn.00404660
lea ecx, [edi + 1]
mov edx, eax
mov eax, dword [ebp - 0x24]
push ecx
push dword [ebp - 0x18]
mov dword [esi], edx
mov dword [esi + 0x10], edi
push edx
mov dword [esi + 0x14], eax
call sub.VCRUNTIME140.dll_memcpy
add esp, 0x14
push dword [ebp + 8]
call fcn.00492c80
add esp, 0x20
mov byte [ebp - 0x35], al
test al, al
jne 0x48fa28
mov ecx, dword [ebp - 0xa8]
mov eax, 0x2aaaaaab
sub ecx, dword [ebp - 0xac]
mov esi, dword [ebp - 0x28]
add dword [ebp - 0x20], 0x30
inc esi
imul ecx
mov dword [ebp - 0x28], esi
sar edx, 3
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp esi, eax
jb 0x48f7d3
cmp byte [ebp - 0x35], 0
je 0x48fa56
mov eax, dword [ebp - 0x70]
lea ecx, [ebp - 0x248]
push ecx
push 0
push 0
push eax
push 0
push 0
push dword [ebp + 8]
call dword [sym.imp.KERNEL32.dll_CreateRemoteThread]
test eax, eax
jne 0x48fa56
push eax
push eax
push str.CreateThread
push eax
call dword [sym.imp.USER32.dll_MessageBoxA]
mov ecx, dword [ebp - 0xcc]
mov eax, 0x2aaaaaab
mov esi, dword [ebp - 0xd0]
sub ecx, esi
mov edi, dword [ebp - 0x54]
inc dword [ebp - 0x1c]
add edi, 0x18
imul ecx
mov dword [ebp - 0x54], edi
sar edx, 2
mov eax, edx
shr eax, 0x1f
add eax, edx
cmp dword [ebp - 0x1c], eax
jb 0x48f390
jmp 0x48c856
call fcn.0040e5d0
int3