Function at 0x414ed0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xc
mov eax, dword [ebp + 0xc]
movzx ecx, byte [eax]
movzx edx, byte [eax + 1]
push ebx
push esi
shl ecx, 8
or ecx, edx
movzx edx, byte [eax + 2]
mov esi, dword [ebp + 8]
shl ecx, 8
or ecx, edx
movzx edx, byte [eax + 3]
push edi
movzx edi, byte [eax + 5]
shl ecx, 8
or ecx, edx
xor ecx, dword [esi]
movzx edx, byte [eax + 4]
shl edx, 8
or edx, edi
movzx edi, byte [eax + 6]
shl edx, 8
or edx, edi
movzx edi, byte [eax + 7]
shl edx, 8
or edx, edi
xor edx, dword [esi + 4]
movzx esi, byte [eax + 8]
movzx edi, byte [eax + 9]
shl esi, 8
or esi, edi
movzx edi, byte [eax + 0xa]
shl esi, 8
or esi, edi
movzx edi, byte [eax + 0xb]
shl esi, 8
or esi, edi
mov edi, dword [ebp + 8]
xor esi, dword [edi + 8]
movzx edi, byte [eax + 0xd]
mov dword [ebp + 0xc], esi
movzx esi, byte [eax + 0xc]
mov ebx, dword [ebp + 0xc]
shl esi, 8
or esi, edi
movzx edi, byte [eax + 0xe]
movzx eax, byte [eax + 0xf]
shl esi, 8
or esi, edi
mov edi, dword [ebp + 8]
shl esi, 8
or esi, eax
xor esi, dword [edi + 0xc]
shr ebx, 8
mov dword [ebp - 0xc], esi
movzx esi, bl
mov esi, dword [esi*4 + 0x47e400]
mov ebx, edx
shr ebx, 0x10
movzx ebx, bl
xor esi, dword [ebx*4 + 0x47e800]
push ecx
pop ebx
shr ebx, 0x18
xor esi, dword [ebx*4 + 0x47ec00]
movzx ebx, byte [ebp - 0xc]
xor esi, dword [ebx*4 + 0x47e000]
mov ebx, dword [ebp - 0xc]
xor esi, dword [edi + 0x10]
shr ebx, 8
lea eax, [edi + 0x10]
mov dword [ebp + 8], esi
movzx esi, bl
mov ebx, dword [ebp + 0xc]
mov esi, dword [esi*4 + 0x47e400]
shr ebx, 0x10
movzx ebx, bl
xor esi, dword [ebx*4 + 0x47e800]
push edx
pop ebx
shr ebx, 0x18
xor esi, dword [ebx*4 + 0x47ec00]
movzx ebx, cl
xor esi, dword [ebx*4 + 0x47e000]
mov ebx, dword [ebp - 0xc]
xor esi, dword [eax + 4]
shr ebx, 0x10
mov dword [ebp - 4], esi
movzx esi, bl
mov esi, dword [esi*4 + 0x47e800]
mov ebx, dword [ebp + 0xc]
shr ebx, 0x18
xor esi, dword [ebx*4 + 0x47ec00]
mov ebx, ecx
shr ebx, 8
movzx ebx, bl
xor esi, dword [ebx*4 + 0x47e400]
movzx ebx, dl
xor esi, dword [ebx*4 + 0x47e000]
shr ecx, 0x10
xor esi, dword [eax + 8]
shr edx, 8
mov dword [ebp - 8], esi
mov esi, dword [ebp - 0xc]
shr esi, 0x18
movzx ebx, dl
mov edx, dword [esi*4 + 0x47ec00]
xor edx, dword [ebx*4 + 0x47e400]
mov ebx, dword [ebp - 4]
movzx ecx, cl
xor edx, dword [ecx*4 + 0x47e800]
movzx ecx, byte [ebp + 0xc]
xor edx, dword [ecx*4 + 0x47e000]
mov ecx, dword [ebp - 8]
xor edx, dword [eax + 0xc]
shr ebx, 0x10
movzx esi, bl
shr ecx, 8
movzx ecx, cl
mov ecx, dword [ecx*4 + 0x47e400]
xor ecx, dword [esi*4 + 0x47e800]
mov esi, dword [ebp + 8]
shr esi, 0x18
xor ecx, dword [esi*4 + 0x47ec00]
movzx esi, dl
xor ecx, dword [esi*4 + 0x47e000]
push edx
pop ebx
shr ebx, 8
movzx esi, bl
mov esi, dword [esi*4 + 0x47e400]
mov ebx, dword [ebp - 8]
shr ebx, 0x10
movzx ebx, bl
xor esi, dword [ebx*4 + 0x47e800]
movzx ebx, byte [ebp + 8]
mov dword [ebp + 0xc], esi
mov esi, dword [ebp - 4]
shr esi, 0x18
mov esi, dword [esi*4 + 0x47ec00]
xor dword [ebp + 0xc], esi
mov esi, dword [ebp + 0xc]
xor esi, dword [ebx*4 + 0x47e000]
xor ecx, dword [eax + 0x10]
test word [ebp + 0x10], 0xfffe
xor esi, dword [eax + 0x14]
cmp dword [ebp + 8], eax
mov dword [ebp - 0xc], eax
shr dword [ebp - 0xc], 0xfd
add dword [ebp - 0xc], ebx
cmp dword [eax + 0x24], 0x4d
mov dword [ebp - 0xc], esi
or dword [ebp - 0xc], ebp
and dword [ebp - 0xc], 0x11dd18cf
cmp ecx, 0x7f
mov dword [ebp - 0xc], eax
or dword [ebp - 0xc], eax
and dword [ebp - 0xc], 0xffffa107
test byte [ebp + 0x10], 0xb1
mov dword [ebp - 0xc], ebp
sub dword [ebp - 0xc], 0xffffd86c
add dword [ebp - 0xc], 0x35273164
and dword [ebp - 0xc], 0xfffffff3
test edx, esi
mov dword [ebp - 0xc], ebp
adc dword [ebp - 0xc], ecx
add dword [ebp - 0xc], ecx
test cl, dl
mov dword [ebp - 0xc], eax
and dword [ebp - 0xc], ebp
or dword [ebp - 0xc], 2
mov dword [ebp - 0xc], esp
add dword [ebp - 0xc], 1
cmp ebx, 0x1b3c
mov dword [ebp - 0xc], edi
or dword [ebp - 0xc], esp
and dword [ebp - 0xc], 0x70947d2c
cmp dword [eax + 0x4c], 0x37
mov dword [ebp - 0xc], edx
sub dword [ebp - 0xc], esi
add dword [ebp - 0xc], 0xffffffff
mov dword [ebp - 0xc], edi
or dword [ebp - 0xc], ebx
cmp ebp, 0
mov dword [ebp - 0xc], ebp
adc dword [ebp - 0xc], 0xffffb1e0
nop
cmp dword [eax + 0x18], 0
sete byte [ebp - 0xc]
mov dword [ebp - 0xc], edi
setne byte [ebp - 0xc]
add dword [ebp - 0xc], 0x58
add dword [ebp - 0xc], 0xffffffff
push edx
pop ebx
mov dword [ebp - 0xc], esi
lea esi, [edi + edx*2 - 0x26760d4b]
shl esi, cl
add esi, dword [edi + 0x200]
mov esi, dword [eax + 0x64]
imul esi, dword [eax + 0x70]
shl esi, 0xfa
add esi, ebp
mov si, word [eax + 0x10]
sub esi, 0x4292bb7
add esi, 0xffffff9f
neg esi
add esi, ebx
sub esi, esp
adc esi, ecx
sbb esi, ecx
neg esi
sub esi, 0
add esi, 0xb42ca4af
sub esi, ebx
lea esi, [edx + edx + 0x3cf3]
shr esi, 0x8d
mov esi, 0x339b
cmp edx, esi
mov esi, dword [eax + 0x20]
lea esi, [ebp - 6]
sub esi, ebp
add esi, 1
sub esi, 0x4ac4
sub esi, 0x70
mov esi, ebx
cmp ecx, esi
mov esi, dword [eax + 0x20]
lea esi, [eax - 0x77]
add esi, edx
add esi, 1
mov esi, dword [eax + 4]
test eax, ecx
mov esi, ebx
shl esi, cl
xor esi, ecx
sub esi, 0xffffffff
push ebx
pop esi
sub esi, 0x49d2
xor esi, ecx
mov esi, dword [eax + 0x68]
shr ebx, 0x10
neg esi
movzx si, al
add esi, dword [eax + 0x6c]
mov esi, 4
cmp dword [eax + 0x6c], esi
lea esi, [edi + eax*2 + 0x1382]
movzx esi, word [ebp + 0x10]
shl esi, 0xbc
add esi, 0xdcd9
add esi, 0xffff89d0
sub esi, 0x1fb8
sub esi, 0xffffe0b7
mov esi, eax
sbb esi, ebx
neg esi
add esi, 0xffffffff
sub esi, dword [eax + 0x30]
mov esi, edi
cmp dword [ebp + 0x10], esi
push ebp
pop esi
lea esi, [esp + ebp*4]
adc esi, ebp
add esi, 0xffffffff
neg esi
sbb esi, dword [eax + 0x10]
xor esi, edx
neg esi
mov esi, dword [eax + 0x58]
cmp dl, 0x89
lea esi, [ebp + ebp*4 - 5]
push eax
pop esi
lea esi, [edi + ebp*4]
adc esi, 0xffffdeba
not esi
or esi, 0x38
lea esi, [esp - 0x522da62f]
sub esi, dword [eax + 0x48]
mov esi, edi
sbb esi, ecx
not esi
and esi, 0x58d3
add esi, 0xffff9fd7
dec esi
mov esi, dword [eax + 0x54]
lea esi, [0xde242244]
shl esi, 7
sub esi, 0xffffffc8
add esi, 0xfffffffc
xor esi, edx
add esi, 5
sub esi, 0xffffffee
mov esi, dword [eax + 0x50]
imul esi, esp
shl esi, 0xfa
movzx esi, cx
shl esi, 0xfc
add esi, ecx
mov esi, ecx
add esi, 4
dec esi
add esi, 1
mov esi, edx
cmp eax, esi
push edi
pop esi
imul esi, edi, 0xbbefda8
add esi, 0xfffffffd
sub esi, 0xffffffea
mov esi, 0x72cd
cmp dword [edi + 0x10], esi
mov esi, dword [eax + 0x34]
xor esi, esp
lea esi, [ebx + 0x68]
mov si, di
add esi, 0xffffffdf
dec esi
sbb esi, ecx
not esi
and esi, 0xfffffffe
lea esi, [ebx + ebp*2]
mov si, word [eax + 0x14]
xor esi, esp
shr esi, 0xb8
sub esi, 1
test ecx, ebx
mov esi, dword [eax + 4]
sub esi, eax
imul esi, edi
mov esi, dword [eax + 0x2c]
shl esi, 0xfa
sub esi, 0x1089d233
sub esi, 0x3a66
xor esi, ebp
add esi, 1
mov esi, dword [eax + 0x50]
sub esi, eax
sar esi, 2
not esi
and esi, 0x59c3ade6
sub esi, 0x31421bd5
sub esi, 0xcebde42d
mov esi, dword [eax + 0x54]
shr esi, 0xbe
xor esi, edi
sub esi, 0xffffff88
inc esi
push esi
pop esi
sub esi, dword [eax + 0x5c]
shl esi, cl
add esi, 1
push ecx
pop esi
xor esi, ecx
add esi, 1
lea esi, [ebx + ebp*4 + 0x7250]
shl esi, 0xf2
xor esi, esi
mov esi, dword [eax + 0x30]
xor esi, edx
shl esi, 0
sub esi, dword [eax + 8]
xor esi, ebp
push ebp
pop esi
cmp esi, ecx
mov esi, dword [eax + 0x28]
lea esi, [eax*8 - 0x30]
adc esi, edx
shr esi, 4
movzx esi, word [ebp - 4]
xor esi, eax
push edx
pop esi
cmp esi, edi
mov esi, dword [eax + 0x50]
sub esi, 0xffffffeb
add esi, 0x57ec
add esi, 1
test ecx, ebp
mov esi, dword [eax + 0x68]
nop
sbb esi, eax
not esi
and esi, 0xfffffce5
xor esi, edx
push ecx
pop esi
shl esi, 0xaa
shr esi, 5
xor esi, esp
mov esi, dword [eax + 0x7c]
add esi, 1
add esi, edx
mov esi, dword [eax + 0xc]
shl esi, 0x70
adc esi, esi
xor esi, ebp
xor esi, ecx
push edi
pop esi
sub esi, 1
imul esi, dword [ebp + 0xc]
add esi, 0x1fc5
add esi, 0xffffe004
test esi, ebp
sub esi, 0xab677906
sub esi, 0
lea esi, [esi + ecx*4 - 0x4b]
mov esi, esp
shl esi, 3
add esi, esi
add esi, 0x2ab47d5
add esi, 0xfd54b82b
lea esi, [edi + edx*8 - 0x32]
mov esi, dword [edi + 0xc]
shr esi, cl
neg esi
movzx esi, bl
xor ebx, esi
push esp
pop ebx
xor ebx, ecx
sub ebx, 0xffffffff
mov ebx, dword [eax + 0x60]
xor ebx, edi
sub ebx, 0xffffffdb
add ebx, 0x493ee1eb
sub ebx, 0xffffffff
mov ebx, dword [ebp + 0x10]
mov ebx, edx
xor ebx, esp
add ebx, 1
mov ebx, dword [ebp + 0xc]
xor ebx, esp
shr ebx, 0x8e
movzx ebx, di
xor ebx, ebx
mov bx, word [eax + 0x48]
sete bl
sbb ebx, edx
not ebx
and ebx, 0x171a
add ebx, esp
mov ebx, dword [eax + 0x5c]
add ebx, esp
shl ebx, 0xfe
lea ebx, [edx + 0x691e]
mov ebx, dword [eax + 0x18]
lea ebx, [ebx + eax*2 - 6]
shl ebx, 0
sub ebx, 0x80
sub ebx, 0xffffff92
mov ebx, dword [eax + 0x30]
inc ebx
add ebx, 0xe4951b26
and ebx, 0x71ef
shr ebx, 0xfc
sub ebx, ebx
mov ebx, ebx
cmp ebx, 0xfffffff9
mov ebx, 0xffffd4b2
add ebx, 0x2b50
shl ebx, 0x4d
and ebx, 0x4df71ed4
setl bl
or ebx, 4
push edi
pop ebx
xor ebx, ecx
sar ebx, 0xfd
sub ebx, 0xffffffff
add ebx, dword [edi + 0x10]
cmp esp, esp
push edi
pop ebx
lea ebx, [edx + ebp*4 - 0x33bb]
mov bl, byte [eax + 0x58]
sub ebx, 0x33d
sub ebx, 0xfffffca8
mov ebx, dword [eax + 0x24]
shl ebx, 0xfa
push ecx
pop ebx
add ebx, esi
or ebx, edx
lea ebx, [ebx + ecx*8 + 0x2968b97d]
push eax
pop ebx
shl ebx, 0xff
sub ebx, 0x71e500fc
inc ebx
lea ebx, [0xfffffffa]
test dword [esi*4 + 0x47e800], 0x53
push edx
pop ebx
cmp ebp, ebx
push edi
pop ebx
lea ebx, [0x38aa]
neg ebx
shl ebx, 2
or ebx, 0x80001e88
lea ebx, [ecx - 0x8878e3]
xor ebx, ebp
push ebx
pop ebx
cmp dword [eax + 0x68], ebx
mov ebx, dword [ebp - 8]
lea ebx, [0xfffffffc]
sub ebx, 0x33b8
dec ebx
add ebx, 1
mov ebx, dword [eax + 0x34]
and ebx, 0xf27da66a
push esp
pop ebx
add ebx, eax
lea ebx, [edi + edi + 0x73fb]
mov ebx, 0x2390
sub ebx, 0xffffffc7
mov esi, dword [esi*4 + 0x47e800]
mov ebx, dword [ebp - 8]
shr ebx, 0x18
cmp dword [ebp + 0xc], ebp
xor esi, dword [ebx*4 + 0x47ec00]
nop
mov ebx, dword [ebp + 8]
mov dword [ebp + 0xc], esi
lea esi, [ecx]
sub esi, 0xffffd029
sub esi, 0xffffffb4
neg esi
sbb esi, ebx
neg esi
mov esi, dword [eax + 0x68]
and esi, 0xffffbad3
shr esi, cl
push ecx
pop esi
and esi, ecx
mov esi, dword [eax + 0x34]
xor esi, edi
push edi
pop esi
shr esi, 0xfe
sub esi, 1
sub esi, dword [edi + 0x200]
add esi, 1
nop
mov esi, ecx
cmp esi, 2
mov esi, ebp
lea esi, [edx*4]
add esi, 0x7937d251
add esi, 0x86c82daf
xor esi, esi
sub esi, 0x7b5b
sub esi, 0xffff80df
xor esi, edx
neg esi
add esi, 1
mov esi, dword [eax + 0x60]
test byte [eax + 0x10], 0xb0
sub esi, eax
mov esi, dword [eax + 0x34]
add esi, 0xc3f085a7
dec esi
lea esi, [eax + 0x5e]
sar esi, 4
shr ebx, 8
sub esi, 1
sub esi, ecx
push ebp
pop esi
cmp dword [eax + 0x64], esi
lea esi, [edi + edx*8]
mov esi, dword [eax + 0x18]
shl esi, 0xfa
dec esi
sub esi, 2
adc esi, ebx
or esi, esp
add esi, 5
dec esi
add esi, esp
sub esi, eax
sub esi, 1
js 0x4158f6
jns 0x4158f6
sti
mov eax, 0x8bb39e17
pop ebp
or al, 0x66
cmp dword [eax + 0x3c], 0x41
xor edx, dword [eax + 0x1c]
shr ebx, 8
nop
movzx esi, bl
xor ebx, ebp
inc ebx
add ebx, 6
mov esi, dword [esi*4 + 0x47e400]
sub ebx, dword [eax + 0x1c]
sbb ebx, ebp
mov ebx, dword [ebp - 0xc]
shr ebx, 0x10
movzx ebx, bl
xor esi, dword [ebx*4 + 0x47e800]
cmp dword [eax + 0x5c], ebx
push ecx
pop ebx
shr ebx, 0x18
xor esi, dword [ebx*4 + 0x47ec00]
movzx ebx, dl
xor esi, dword [ebx*4 + 0x47e000]
cmp dword [eax + 0x40], 0xb5f7e21
push edx
pop ebx
xor esi, dword [eax + 0x20]
mov dword [ebp + 8], esi
sub dword [ebp + 8], 0xe250c974
sub dword [ebp + 8], 0xfffffaa2
shr ebx, 8
and dword [ebp + 8], 0x7ff90f45
cmp ecx, 2
mov dword [ebp + 8], esi
shl esi, 0xfa
add esi, 0xffffffe5
inc esi
movzx esi, bl
add ebx, 0xfb23379a
add ebx, 0x19e6
lea ebx, [ebp + 0x63]
mov esi, dword [esi*4 + 0x47e400]
mov ebx, dword [ebp + 0xc]
shr ebx, 0x10
cmp ecx, ebp
movzx ebx, bl
xor esi, dword [ebx*4 + 0x47e800]
test eax, ecx
test ecx, ebp
mov ebx, dword [ebp - 0xc]
shr ebx, 0x18
xor esi, dword [ebx*4 + 0x47ec00]
movzx ebx, cl
xor esi, dword [ebx*4 + 0x47e000]
cmp esp, esi
push edx
pop ebx
xor esi, dword [eax + 0x24]
mov dword [ebp - 4], ecx
test cl, cl
shr ebx, 0x10
or dword [ebp - 4], ebp
nop
mov dword [ebp - 4], esi
neg esi
movzx esi, bl
xor ebx, esp
sub ebx, 0xffffffff
mov esi, dword [esi*4 + 0x47e800]
mov ebx, dword [ebp + 0xc]
shr ebx, 0x18
xor esi, dword [ebx*4 + 0x47ec00]
test esi, edx
sete byte [ebp - 8]
push ecx
pop ebx
mov dword [ebp - 8], esi
lea esi, [ebp + ebp*8]
mov esi, dword [eax + 4]
shr ebx, 8
mov esi, ebp
lea esi, [edx + ebp*8]
movzx esi, bl
xor ebx, eax
add ebx, 1
mov esi, dword [esi*4 + 0x47e400]
or ebx, ecx
mov ebx, esp
xor dword [ebp - 8], esi
shr esi, 0xfc
mov ebx, 0x9722
sub ebx, 0x62ec
movzx ebx, byte [ebp - 0xc]
sub esi, esi
mov esi, dword [ebp - 8]
xor esi, dword [ebx*4 + 0x47e000]
cmp ebp, esi
mov ebx, dword [ebp - 0xc]
xor esi, dword [eax + 0x28]
shr edx, 0x18
test ecx, esi
mov edx, dword [edx*4 + 0x47ec00]
and dword [ebp - 8], 0xffffffde
or dword [ebp - 8], ebx
shr ebx, 8
shr ecx, 0x10
and dword [ebp - 8], 0x57c7
test esi, ebp
mov dword [ebp - 8], esi
sub esi, esi
shr esi, cl
movzx esi, bl
sub ebx, 0xffffffff
push ebp
pop ebx
xor edx, dword [esi*4 + 0x47e400]
test edx, eax
setge bl
mov ebx, dword [ebp - 4]
movzx ecx, cl
xor edx, dword [ecx*4 + 0x47e800]
test ebx, esp
movzx ecx, byte [ebp + 0xc]
xor edx, dword [ecx*4 + 0x47e000]
cmp dword [ebp - 4], eax
mov ecx, dword [ebp - 8]
nop
xor edx, dword [eax + 0x2c]
nop
shr ecx, 8
movzx ecx, cl
cmp dl, 0xf8
mov ecx, dword [ecx*4 + 0x47e400]
nop
test esi, ebp
shr ebx, 0x10
movzx esi, bl
add ebx, 1
inc ebx
sub ebx, 0xfffffff9
xor ecx, dword [esi*4 + 0x47e800]
sub ebx, 0xffffffff
and ebx, ecx
mov esi, dword [ebp + 8]
xor ebx, ebp
push ebx
pop ebx
shr esi, 0x18
and ebx, 0xffffffd9
sub ebx, 0x3df01668
add ebx, 0xffffb943
xor ecx, dword [esi*4 + 0x47ec00]
shr ebx, cl
mov ebx, dword [ebp - 8]
movzx esi, dl
movsx ebx, al
xor ecx, dword [esi*4 + 0x47e000]
sub ebx, 0xffffffff
cmp byte [eax + 0x50], cl
push edx
pop ebx
shr ebx, 8
movzx esi, bl
add ebx, 0xfffffff0
adc ebx, esi
mov esi, dword [esi*4 + 0x47e400]
mov ebx, dword [ebp - 8]
shr ebx, 0x10
movzx ebx, bl
xor esi, dword [ebx*4 + 0x47e800]
movzx ebx, byte [ebp + 8]
and dword [ebp + 0xc], 0xfffffffb
cmp esi, eax
mov dword [ebp + 0xc], esi
mov esi, dword [ebp - 4]
cmp esi, 0x31
shr esi, 0x18
nop
mov esi, dword [esi*4 + 0x47ec00]
xor dword [ebp + 0xc], esi
inc esi
imul esi, edx, 0xfffffff8
mov esi, dword [ebp + 0xc]
xor esi, dword [ebx*4 + 0x47e000]
cmp edx, esi
mov ebx, edx
xor esi, dword [eax + 0x34]
mov dword [ebp - 0xc], ebx
and dword [ebp - 0xc], eax
shr ebx, 0x10
and dword [ebp - 0xc], 0xffff8907
test eax, edx
mov dword [ebp - 0xc], esi
lea esi, [ebp + ebp + 0x47e4f84b]
add esi, 0xfffffff9
movzx esi, bl
test edx, edx
setne bl
ret
sbb esi, esi
mov esi, dword [ebp + 0x10]
shl esi, 3
add esi, dword [eax + 0x18]
mov esi, dword [eax + 0x60]
cmp dword [eax + 0x18], 0xf3d5305b
sbb esi, ebx
mov esi, dword [eax + 0x34]
shr esi, cl
add esi, 0x75cb30f7
lea esi, [0xfffff944]
push eax
pop esi
sub esi, 0xffffffff
xor esi, 0x3e55eba7
inc esi
mov esi, dword [edi + 0xc]
add esi, 0xffffffd8
and esi, ecx
test ecx, ebp
mov esi, dword [ebp + 0xc]
add esi, ebx
and esi, 4
sar esi, 0xd5
mov esi, esp
test esp, edx
add esi, 0x55
lea esi, [ecx + ecx]
cmp ebx, ecx
lea esi, [edi + ebx*8 - 0x57]
mov esi, dword [eax + 0x74]
or esi, 0xffffffb0
sub esi, esi
mov esi, dword [ebp - 8]
cmp dword [eax + 0x10], 0xc861983
sbb esi, ecx
nop
nop
sub esi, 0xfffffff9
cmp esi, edi
mov esi, dword [eax + 0x1c]
xor esi, ebp
inc esi
xor esi, ecx
cmp dword [ebp - 8], 0xfffffffd
cmp ecx, eax
mov esi, dword [eax + 0x24]
shr esi, 0x85
and esi, 0x575db12b
add esi, 0xffffffcb
mov esi, dword [eax + 0x54]
inc esi
and esi, 0x7c
add esi, 5
mov esi, dword [eax + 0x5c]
inc esi
lea esi, [eax + ecx*4]
movzx esi, bl
xor ebx, ecx
dec ebx
mov esi, dword [esi*4 + 0x47e400]
sub ebx, ecx
add ebx, edx
xor dword [ebp + 0xc], esi
shr esi, 0x7e
push edx
pop esi
movzx ebx, byte [ebp - 4]
sub esi, esi
inc esi
mov esi, dword [ebp + 0xc]
xor esi, dword [ebx*4 + 0x47e000]
nop
xor esi, dword [eax + 0x18]
nop
shr edx, 0x18
and dword [ebp + 0xc], 0x1966
test bl, bl
mov dword [ebp + 0xc], esi
mov edx, dword [edx*4 + 0x47ec00]
mov ebx, dword [ebp - 4]
sub esi, esi
mov esi, 0xffff83a8
shr ebx, 8
mov esi, dword [eax + 0x28]
lea esi, [ebx*4 - 0x50]
movzx esi, bl
inc ebx
add ebx, 0xffffffdc
xor edx, dword [esi*4 + 0x47e400]
add ebx, 2
lea ebx, [esi + esi]
mov ebx, dword [ebp + 8]
shr ebx, 0x10
movzx esi, bl
inc ebx
push ecx
pop ebx
xor edx, dword [esi*4 + 0x47e800]
shr ebx, cl
mov bl, al
movzx esi, byte [ebp - 8]
inc ebx
shr ebx, 0xa9
xor edx, dword [esi*4 + 0x47e000]
cmp ebp, ebp
lea ebx, [ebp*8 - 0x29]
call 0x41565a
mov esi, dword [esi*4 + 0x47e800]
mov ebx, dword [ebp - 8]
shr ebx, 0x18
xor esi, dword [ebx*4 + 0x47ec00]
cmp dword [edi + 0xc], 0x26
nop
mov ebx, dword [ebp + 8]
and dword [ebp + 0xc], 0xffffffeb
or dword [ebp + 0xc], 0x18961edf
shr ebx, 8
sub dword [ebp + 0xc], 0x39e5
cmp esi, edx
mov dword [ebp + 0xc], esi
lea esi, [ecx]
add esi, esp
movzx esi, bl
xor ebx, ebx
inc ebx
mov esi, dword [esi*4 + 0x47e400]
sete bl
xor dword [ebp + 0xc], esi
shr esi, 0xec
cmp ebp, edx
movzx ebx, byte [ebp - 4]
test esp, ebp
lea esi, [edi*4 - 0x32b5095b]
mov esi, dword [ebp + 0xc]
xor esi, dword [ebx*4 + 0x47e000]
cmp dword [eax + 0x14], 0xfffffff9
mov ebx, dword [ebp - 4]
test ecx, esp
xor esi, dword [eax + 0x38]
mov dword [ebp + 0xc], ebx
and dword [ebp + 0xc], 0xd5d23843
shr ebx, 8
and dword [ebp + 0xc], 0xfffffff9
cmp esp, ecx
mov dword [ebp + 0xc], esi
neg esi
movzx esi, bl
add ebx, 0x5d02c55a
lea ebx, [ebp + esi*4]
mov ebx, dword [ebp + 8]
shr ebx, 0x10
xor ecx, dword [eax + 0x30]
shr edx, 0x18
test ecx, eax
mov edx, dword [edx*4 + 0x47ec00]
xor edx, dword [esi*4 + 0x47e400]
cmp dword [ebp + 8], 0x589de4d5
movzx esi, bl
inc ebx
mov ebx, dword [eax + 0x30]
xor edx, dword [esi*4 + 0x47e800]
mov ebx, ebx
shl ebx, 0x7e
movzx esi, byte [ebp - 8]
inc ebx
push edx
pop ebx
xor edx, dword [esi*4 + 0x47e000]
inc ebx
cmp ebx, 0xffffe875
mov ebx, dword [ebp + 0xc]
xor edx, dword [eax + 0x3c]
shr ebx, 8
movzx esi, bl
xor ebx, 0xfffffffe
inc ebx
mov esi, dword [esi*4 + 0x47e400]
mov ebx, dword [ebp - 0xc]
shr ebx, 0x10
test ebx, ebp
movzx ebx, bl
xor esi, dword [ebx*4 + 0x47e800]
cmp edx, ebx
test ebp, esp
test dword [eax + 0x44], 0x6c
push ecx
pop ebx
shr ebx, 0x18
xor esi, dword [ebx*4 + 0x47ec00]
movzx ebx, dl
pushal
popal
xor esi, dword [ebx*4 + 0x47e000]
nop
nop
cmp esi, ebx
mov ebx, edx
nop
xor esi, dword [eax + 0x40]
mov word [ebp + 8], 0x2300
inc dword [ebp + 8]
cmp dword [edi + 0x200], ecx
mov dword [ebp + 8], esp
add dword [ebp + 8], edx
and dword [ebp + 8], 0x2b
nop
cmp esp, dword [eax + 0x14]
setne byte [ebp + 8]
mov dword [ebp + 8], esp
setne byte [ebp + 8]
mov dword [ebp + 8], ebp
cmp ebx, ebp
mov word [ebp + 8], 0xff8f
sete byte [ebp + 8]
inc dword [ebp + 8]
mov dword [ebp + 8], ecx
cmp dword [eax + 0x6c], esp
mov dword [ebp + 8], eax
sete byte [ebp + 8]
inc dword [ebp + 8]
add dword [ebp + 8], edx
cmp ebp, 0xffffc18b
mov dword [ebp + 8], 0xffffffee
sete byte [ebp + 8]
inc dword [ebp + 8]
and dword [ebp + 8], 0xffffff8a
cmp esi, eax
mov dword [ebp + 8], 0x40ed
sete byte [ebp + 8]
or dword [ebp + 8], esi
mov dword [ebp + 8], esi
test edi, ebx
sete byte [ebp + 8]
inc dword [ebp + 8]
mov dword [ebp + 8], edi
cmp dword [eax + 0x7c], eax
mov dword [ebp + 8], eax
setne byte [ebp + 8]
mov dword [ebp + 8], ecx
add dword [ebp + 8], esi
adc dword [ebp + 8], 0xe9a9fe0c
inc dword [ebp + 8]
cmp ecx, eax
mov dword [ebp + 8], eax
setne byte [ebp + 8]
add dword [ebp + 8], ebx
and dword [ebp + 8], 6
cmp dword [eax + 0x54], edi
mov dword [ebp + 8], esi
sbb dword [ebp + 8], esi
and dword [ebp + 8], 0x2cfb
dec dword [ebp + 8]
mov word [ebp + 8], 0xf
cmp edx, esi
mov dword [ebp + 8], 0xffffdfcf
sete byte [ebp + 8]
inc dword [ebp + 8]
mov dword [ebp + 8], ebx
and dword [ebp + 8], 0xfffffffa
mov dword [ebp + 8], edi
cmp eax, 0xffff9bc5
nop
sete byte [ebp + 8]
inc dword [ebp + 8]
mov dword [ebp + 8], 0xffffff8e
cmp dword [eax + 0x5c], 0xffffb660
mov dword [ebp + 8], esp
setne byte [ebp + 8]
mov dword [ebp + 8], ebx
sub dword [ebp + 8], ebp
inc dword [ebp + 8]
mov dword [ebp + 8], ebp
xor dword [ebp + 8], eax
test esi, ebx
mov byte [ebp + 8], al
xor byte [ebp + 8], cl
inc dword [ebp + 8]
test esi, 0xffffff95
mov dword [ebp + 8], edi
and dword [ebp + 8], 4
or dword [ebp + 8], esi
test byte [eax + 0x30], dl
shl dword [ebp + 8], 0xbb
cmp esp, eax
jmp 0x415f97
mov dword [ebp + 8], ebx
and dword [ebp + 8], 0x6d2
inc dword [ebp + 8]
setne byte [ebp + 8]
mov dword [ebp + 8], edx
inc dword [ebp + 8]
cmp dword [ebp - 4], edi
mov dword [ebp + 8], 0x43
xor dword [ebp + 8], edi
inc dword [ebp + 8]
cmp ebx, dword [eax + 4]
mov dword [ebp + 8], edx
nop
add byte [ebp + 8], dl
nop
test eax, esp
and dword [ebp + 8], 0xffffa76a
mov dword [ebp + 8], esp
or dword [ebp + 8], edi
cmp ebp, 0x9e5c0ce2
mov dword [ebp + 8], ecx
and dword [ebp + 8], 0xfffffffa
dec dword [ebp + 8]
cmp dword [eax + 0x54], ebp
mov dword [ebp + 8], eax
inc dword [ebp + 8]
and dword [ebp + 8], 0xffffffa9
test ebp, ecx
mov dword [ebp + 8], 0x24
inc dword [ebp + 8]
and dword [ebp + 8], 1
cmp ebp, ebx
mov dword [ebp + 8], esp
and word [ebp + 8], 7
add dword [ebp + 8], 0x1919
cmp dword [edi + 0x200], eax
mov dword [ebp + 8], ecx
inc dword [ebp + 8]
add dword [ebp + 8], edi
cmp esp, eax
mov dword [ebp + 8], ebx
or dword [ebp + 8], edx
and dword [ebp + 8], 0xffffffee
cmp dword [edi + 0x10], 0xffffaebe
mov dword [ebp + 8], edx
add dword [ebp + 8], esi
and dword [ebp + 8], 0x4b59
test ecx, ecx
mov dword [ebp + 8], esp
inc dword [ebp + 8]
and dword [ebp + 8], 0xffffffbb
add dword [ebp + 8], ebx
mov dword [ebp + 8], edi
inc dword [ebp + 8]
and dword [ebp + 8], 0xbb15f772
xor dword [ebp + 8], ecx
or byte [ebp + 8], 0x9b
cmp ecx, esp
mov dword [ebp + 8], ecx
xor dword [ebp + 8], esi
inc dword [ebp + 8]
test eax, eax
mov dword [ebp + 8], ecx
and dword [ebp + 8], 0x37
cmp ecx, dword [eax + 0x5c]
shl dword [ebp + 8], 0xc5
nop
or dword [ebp + 8], eax
mov dword [ebp + 8], ebp
cmp byte [edi + 0xc], al
mov dword [ebp + 8], 0x20
setne byte [ebp + 8]
mov dword [ebp + 8], esp
add dword [ebp + 8], eax
and dword [ebp + 8], ebp
mov dword [ebp + 8], eax
or dword [ebp + 8], esp
cmp ebp, ebp
mov word [ebp + 8], WTSSetSessionInformationW
add dword [ebp + 8], eax
and dword [ebp + 8], 0x3d
mov dword [ebp + 8], 0xffffd243
or dword [ebp + 8], esi
cmp dword [ebp - 0xc], edx
mov dword [ebp + 8], ebx
xor byte [ebp + 8], al
inc dword [ebp + 8]
cmp dword [eax + 0x4c], ebx
mov dword [ebp + 8], 0xffffcabe
shr dword [ebp + 8], cl
and dword [ebp + 8], 0xffffffdb
mov dword [ebp + 8], eax
or dword [ebp + 8], 0xffffdc27
mov dword [ebp + 8], ebx
test edi, esi
sete byte [ebp + 8]
inc dword [ebp + 8]
add dword [ebp + 8], esi
cmp dword [eax + 0x70], ecx
mov byte [ebp + 8], 0
sete byte [ebp + 8]
inc dword [ebp + 8]
mov word [ebp + 8], bp
cmp edx, edi
test edx, ebp
mov dword [ebp + 8], ebx
setne byte [ebp + 8]
mov dword [ebp + 8], ecx
or byte [ebp + 8], dl
xor byte [ebp + 8], dl
cmp edx, ecx
mov byte [ebp + 8], 0xae
add dword [ebp + 8], ecx
xor byte [ebp + 8], bl
cmp byte [eax + 0x5c], 7
mov dword [ebp + 8], eax
and dword [ebp + 8], 0xffffffdc
xor dword [ebp + 8], ebx
cmp esp, 0xfffffffe
mov dword [ebp + 8], esp
inc dword [ebp + 8]
add dword [ebp + 8], 0x4c48
cmp ecx, 0xffffad66
mov dword [ebp + 8], ebx
inc dword [ebp + 8]
add dword [ebp + 8], ebx
mov dword [ebp + 8], 0xfffffffb
inc dword [ebp + 8]
cmp bx, bp
and dword [ebp + 8], 0x3f
mov dword [ebp + 8], 0xffffffd9
and dword [ebp + 8], edi
or dword [ebp + 8], 0xb7dee936
mov dword [ebp + 8], 0xfffffff1
add dword [ebp + 8], ebx
cmp dl, al
sete byte [ebp + 8]
inc dword [ebp + 8]
mov byte [ebp + 8], 0
add dword [ebp + 8], edi
cmp esi, esp
and dword [ebp + 8], 0x8501ed78
mov dword [ebp + 8], ebp
and dword [ebp + 8], 0
or dword [ebp + 8], 0x49b2
mov dword [ebp + 8], eax
or dword [ebp + 8], 0xffffffc9
cmp eax, 5
sete byte [ebp + 8]
inc dword [ebp + 8]
mov dword [ebp + 8], 0
or dword [ebp + 8], ebp
mov dword [ebp + 8], ecx
xor dword [ebp + 8], edi
dec dword [ebp + 8]
inc dword [ebp + 8]
add dword [ebp + 8], 0x2b
and dword [ebp + 8], 5
cmp edi, 0x70
sete byte [ebp + 8]
inc dword [ebp + 8]
mov dword [ebp + 8], edi
shr dword [ebp + 8], cl
xor byte [ebp + 8], bl
add dword [ebp + 8], ebp
mov dword [ebp + 8], 0xfffffffe
sub dword [ebp + 8], 0xfffffff9
and dword [ebp + 8], 0xfffffffe
cmp eax, esp
setne byte [ebp + 8]
mov dword [ebp + 8], edi
and dword [ebp + 8], 0xfffffffb
mov dword [ebp + 8], esp
or dword [ebp + 8], esi
mov dword [ebp + 8], ebx
and dword [ebp + 8], 0xb7c
cmp ecx, esp
setne byte [ebp + 8]
nop
mov byte [ebp + 8], 0
and dword [ebp + 8], 0x33ab
mov dword [ebp + 8], edi
add dword [ebp + 8], ebx
mov dword [ebp + 8], edx
inc dword [ebp + 8]
and dword [ebp + 8], 0xffffa444
test edi, ebp
setne byte [ebp + 8]
mov word [ebp + 8], si
and dword [ebp + 8], 0x3344
mov dword [ebp + 8], 0
or dword [ebp + 8], 0x72
mov dword [ebp + 8], ebx
dec dword [ebp + 8]
cmp dword [ebp - 8], eax
setne byte [ebp + 8]
mov word [ebp + 8], 0xffdf
and dword [ebp + 8], esp
xor byte [ebp + 8], bl
inc dword [ebp + 8]
mov dword [ebp + 8], edi
or dword [ebp + 8], esp
and dword [ebp + 8], 0x21
cmp esp, eax
setne byte [ebp + 8]
mov dword [ebp + 8], 7
and dword [ebp + 8], 3
mov dword [ebp + 8], ecx
or byte [ebp + 8], 0xa4
nop
shr ebx, 8
and dword [ebp + 8], 0x74f68e59
or dword [ebp + 8], esi
sub dword [ebp + 8], 0x2095
or dword [ebp + 8], ecx
cmp esi, 0xffffffff
mov dword [ebp + 8], edx
or dword [ebp + 8], esp
mov dword [ebp + 8], esi
xor byte [ebp + 8], cl
mov dword [ebp + 8], ecx
and dword [ebp + 8], 0xffffcc6d
call fcn.00415cb4
mov dword [ebp + 8], eax
add dword [ebp + 8], ecx
mov dword [ebp + 8], ebp
test ecx, ebp
test edi, esi
shr dword [ebp + 8], cl
mov dword [ebp + 8], ebx
or dword [ebp + 8], esp
and dword [ebp + 8], 0xdfaa3391
or dword [ebp + 8], ebp
cmp dword [edi + 0x200], 0x5cf1
mov dword [ebp + 8], eax
neg dword [ebp + 8]
adc dword [ebp + 8], eax
add dword [ebp + 8], 0xb75304c0
and dword [ebp + 8], 0xe
mov dword [ebp + 8], 0
and dword [ebp + 8], 0x357167b3
add dword [ebp + 8], edi
adc dword [ebp + 8], 0xfffffffa
mov dword [ebp + 8], eax
xor dword [ebp + 8], ebp
inc dword [ebp + 8]
cmp dword [eax + 4], eax
mov dword [ebp + 8], 0x74
and byte [ebp + 8], 0x61
or dword [ebp + 8], 0xfffffffd
mov dword [ebp + 8], ebp
shl dword [ebp + 8], 1
or dword [ebp + 8], eax
test cl, 0xfc
and dword [ebp + 8], 0xaf78aa30
inc dword [ebp + 8]
mov dword [ebp + 8], eax
inc dword [ebp + 8]
and dword [ebp + 8], 0x59
test ebp, ecx
mov dword [ebp + 8], edx
or dword [ebp + 8], edx
and dword [ebp + 8], 0x3df9
cmp edx, dword [eax + 0x38]
mov dword [ebp + 8], 0x35b5
inc dword [ebp + 8]
and dword [ebp + 8], 0x1119
and dword [ebp + 8], 0xe8d79dd4
add dword [ebp + 8], esp
mov dword [ebp + 8], eax
inc dword [ebp + 8]
test edi, ebx
nop
cmp dword [eax + 0x10], 1
sbb dword [ebp + 8], esp
inc dword [ebp + 8]
mov dword [ebp + 8], 0x1f
shl dword [ebp + 8], 0x78
mov dword [ebp + 8], esi
and dword [ebp + 8], 0xffffffb2
mov byte [ebp + 8], 0x56
xor byte [ebp + 8], cl
cmp dword [eax + 0x5c], esi
mov dword [ebp + 8], ecx
shr dword [ebp + 8], 0x63
and dword [ebp + 8], 0xffffbb1f
cmp ebx, 0xffffffc7
mov dword [ebp + 8], ecx
add dword [ebp + 8], 0xffffcc23
and word [ebp + 8], ax
test ebp, edi
mov dword [ebp + 8], ecx
inc dword [ebp + 8]
and dword [ebp + 8], 0xffffffba
cmp ebx, esi
mov dword [ebp + 8], eax
add dword [ebp + 8], ebx
and dword [ebp + 8], 0x94d76585
or dword [ebp + 8], 0x760a416c
mov dword [ebp + 8], ebp
inc dword [ebp + 8]
and dword [ebp + 8], 7
or dword [ebp + 8], 0xffffffe9
mov dword [ebp + 8], ebx
and dword [ebp + 8], 0x48
cmp dword [eax + 0x24], eax
or dword [ebp + 8], esi
cmp edi, 1
mov dword [ebp + 8], ecx
adc dword [ebp + 8], ecx
nop
test esp, ecx
setne byte [ebp + 8]
mov dword [ebp + 8], ebp
setne byte [ebp + 8]
mov dword [ebp + 8], esi
dec esi
sub esi, 0x44
test edx, ebp
jge 0x4165c6
jl 0x4165c6
xor edx, dword [eax + 0x4c]
movzx esi, bl
xor ebx, ebx
cmp esp, ebp
mov ebx, eax
shl ebx, 0x26
and ebx, 0x77
or ebx, ebx
mov ebx, ebx
xor ebx, esi
shr ecx, 8
sub ebx, 0x3878c064
dec ebx
mov ebx, esi
imul ebx, eax
mov ebx, ebx
xor ebx, edx
shr ebx, cl
mov ebx, ecx
movzx ecx, cl
mov ebx, esi
shr ebx, 0xe9
xor ebx, edi
sub ebx, 0xfffffea9
inc ebx
and ebx, edi
add ebx, 0xffff84e9
mov ecx, dword [ecx*4 + 0x47e400]
add ebx, 0x335e
xor ebx, edi
sub ebx, 0x3d7b480a
neg ebx
mov ebx, ebx
sbb ebx, esi
inc ebx
mov ebx, esp
xor ecx, dword [esi*4 + 0x47e800]
cmp ecx, ebp
mov ebx, ebx
lea ebx, [ebp + 0x4c8363fb]
add ebx, 0x107082c8
mov ebx, edx
sub ebx, ebx
sbb ebx, 0x56bf2fba
neg ebx
mov esi, dword [ebp + 8]
lea ebx, [ecx + ecx]
add ebx, ebp
inc ebx
cmp ebp, edx
sete bl
mov ebx, ebx
shl ebx, 0x89
shr ebx, 2
shr esi, 0x18
add ebx, 0x71dac52d
mov ebx, edx
and ebx, 0xffffdff5
or ebx, eax
mov ebx, 0xd0af0ed
shr ebx, 2
mov ebx, ebx
shr ebx, 0x6d
xor ecx, dword [esi*4 + 0x47ec00]
inc ebx
cmp esi, 0x304838b5
mov ebx, esi
add ebx, 0x8d297b34
mov ebx, ebx
shl ebx, 7
add ebx, 0x74
mov ebx, 0xffffffbc
movzx esi, dl
add ebx, edx
mov ebx, edx
inc ebx
mov ebx, edx
setl bl
add ebx, 0x61cd257b
lea ebx, [ecx*4 - 0x5b]
shr ebx, 5
xor ecx, dword [esi*4 + 0x47e000]
inc ebx
add ebx, esi
cmp eax, edi
mov ebx, ebp
add ebx, 0xbabb01d2
lea ebx, [eax + edi*8 - 0x5e]
shl ebx, 0x17
or ebx, eax
mov ebx, edx
shr ebx, 8
nop
movzx esi, bl
xor ebx, ebx
inc ebx
test ebp, edi
sete bl
inc ebx
sub ebx, 4
mov esi, dword [esi*4 + 0x47e400]
mov ebx, dword [ebp - 8]
shr ebx, 0x10
movzx ebx, bl
xor esi, dword [ebx*4 + 0x47e800]
movzx ebx, byte [ebp + 8]
test edi, esi
mov dword [ebp + 0xc], esi
mov esi, dword [ebp - 4]
test edx, esp
shr esi, 0x18
test eax, ebp
mov esi, dword [esi*4 + 0x47ec00]
xor dword [ebp + 0xc], esi
mov esi, ecx
sub esi, 0xffffffe1
inc esi
xor esi, edx
inc esi
cmp edi, esi
sbb esi, edi
mov esi, dword [ebp + 0xc]
cmp ebp, 0xfffffffb
xor esi, dword [ebx*4 + 0x47e000]
xor ecx, dword [eax + 0x50]
ret
movsx esi, al
movzx esi, bl
lea ebx, [esi + 7]
shr ebx, 0x6e
xor ebx, eax
neg ebx
sbb ebx, esp
inc ebx
cmp dword [eax + 0x2c], 0x5324
lea ebx, [ebx + ebx*2]
mov ebx, dword [ebp + 0xc]
nop
mov esi, dword [esi*4 + 0x47e400]
shr ebx, 0x10
movzx ebx, bl
xor esi, dword [ebx*4 + 0x47e800]
nop
nop
mov ebx, dword [ebp - 0xc]
shr ebx, 0x18
xor esi, dword [ebx*4 + 0x47ec00]
test ebp, esp
movzx ebx, cl
test ebp, esp
xor esi, dword [ebx*4 + 0x47e000]
cmp ebx, edx
cmp eax, eax
mov ebx, edx
xor esi, dword [eax + 0x44]
cmp dword [edi + 0x200], edi
sete byte [ebp - 4]
mov dword [ebp - 4], 0x8fde5897
and dword [ebp - 4], edx
mov dword [ebp - 4], edx
or dword [ebp - 4], eax
mov byte [ebp - 4], cl
cmp dword [eax + 0x48], 6
shr ebx, 0x10
inc dword [ebp - 4]
mov dword [ebp - 4], esi
and dword [ebp - 4], 0x2c
or dword [ebp - 4], esi
neg dword [ebp - 4]
test esi, esp
sete byte [ebp - 4]
inc dword [ebp - 4]
mov dword [ebp - 4], esi
imul esi, esi, 0xffffffb3
mov esi, dword [eax + 0x78]
shl esi, 0x1d
add esi, 0xd636d342
mov esi, edi
movzx esi, bl
add ebx, esi
adc ebx, ebp
inc ebx
mov ebx, esi
add ebx, 2
cmp dword [eax + 0x78], 0x13
lea ebx, [edi]
cmp edi, ecx
mov esi, dword [esi*4 + 0x47e800]
xor ebx, ebp
mov ebx, dword [ebp + 0xc]
nop
cmp dword [eax + 0x48], 0xffffc9ab
shr ebx, 0x18
nop
xor esi, dword [ebx*4 + 0x47ec00]
add dword [ebp - 8], edi
mov dword [ebp - 8], 4
test esi, ecx
sete byte [ebp - 8]
inc dword [ebp - 8]
nop
mov ebx, ecx
nop
sub dword [ebp - 8], edx
mov dword [ebp - 8], esi
add esi, 0xffff9f2f
sub esi, 0xeb08e174
xor esi, ebx
inc esi
cmp dword [ebp + 8], edi
mov esi, dword [eax + 0x24]
lea esi, [edx]
sar esi, 7
shr ebx, 8
adc esi, 0x86677ab5
sar esi, 0xc3
mov esi, dword [ebp - 8]
add esi, edi
mov esi, esp
movzx esi, bl
setg bl
mov esi, dword [esi*4 + 0x47e400]
sar ebx, 0xfd
setl bl
movzx ebx, byte [eax + 0x64]
imul ebx, eax
shl ebx, 0xfe
inc ebx
cmp ebx, 0x60d01859
mov ebx, dword [eax + 0x7c]
sub ebx, eax
neg ebx
movzx ebx, dl
mov ebx, esi
and ebx, 0x3e
lea ebx, [esi - 0x5bc2]
or ebx, dword [eax + 0x4c]
xor ebx, esi
test edx, eax
setge bl
mov ebx, edi
xor ebx, esi
movzx ebx, byte [eax + 0x4c]
and ebx, ebp
mov ebx, dword [eax + 0x14]
adc ebx, esi
sub ebx, ecx
mov ebx, dword [eax + 0x44]
and ebx, 0xfffffffc
test ebp, edi
lea ebx, [esi + edi*8 + 0x5cce8a31]
xchg ebx, ebx
mov ebx, dword [edi + 0x10]
sbb ebx, ecx
sub ebx, dword [eax + 0x6c]
setg bl
setge bl
imul ebx, dword [eax + 0x4c]
sar ebx, 0xfd
mov ebx, dword [eax + 0x48]
lea ebx, [ebp]
shl ebx, 0xfb
mov ebx, dword [eax + 0x34]
shr ebx, 3
mov ebx, ebx
and ebx, 0xffffffc9
test eax, esi
lea ebx, [4]
add ebx, 0xffffffc9
mov ebx, dword [ebp - 4]
sub ebx, dword [eax + 0x74]
shl ebx, 0xca
mov ebx, edx
shr ebx, 0xf9
mov ebx, edi
movzx ebx, word [eax + 0x1c]
add ebx, esi
inc ebx
test esp, edi
mov ebx, edx
sub ebx, 0x24
shl ebx, cl
mov ebx, dword [eax + 0x18]
shr ebx, 0x54
mov ebx, dword [eax + 0x2c]
and ebx, 0x3be0
neg ebx
mov ebx, dword [eax + 0x40]
inc ebx
add ebx, ebx
adc ebx, 0x2cdf947e
mov ebx, dword [ebp + 0xc]
shl ebx, 0x49
or ebx, edi
cmp edx, 3
mov ebx, dword [edi + 0xc]
and ebx, 0xd60d1293
sub ebx, 0xffff8384
inc ebx
add ebx, 0xe
sub ebx, 0xffff8e66
mov ebx, dword [edi + 0x200]
add ebx, 0xf61f2d11
mov ebx, edi
sub ebx, 0x1abb
movzx ebx, word [eax + 0x48]
add ebx, edx
lea ebx, [edx + ebp*4 - 0x205e]
mov ebx, dword [eax + 0x60]
and ebx, 2
shl ebx, 0xd0
add ebx, ebp
sub ebx, 0xfffffffa
sar ebx, 0x15
add ebx, 0xa5c8df3f
cmp edi, 0x76
mov ebx, dword [ebp - 0xc]
inc ebx
add ebx, 0xffffffca
lea ebx, [esp + edi*8 - 0x42c1be02]
mov ebx, dword [eax + 0x50]
imul ebx, dword [eax + 0x30]
shl ebx, 0xa5
mov ebx, eax
shr ebx, 0x8b
not ebx
and ebx, eax
dec ebx
sub ebx, edi
dec ebx
cmp dword [eax + 0x74], 0xffffffb5
sbb ebx, ebx
and bx, 0xa
add ebx, 0
mov bl, 0xf9
sub ebx, 0x73317571
lea ebx, [ecx - 0x4976]
shl ebx, 0x91
mov ebx, dword [eax + 0x74]
xor ebx, ebx
test edx, esi
setg bl
setl bl
lea ebx, [esp - 0x579a]
xor dword [ebp - 8], esi
cmp eax, 0xef4dbbcf
lea ebx, [ecx*8 - 0x1d7d]
add ebx, ebp
mov esi, ebx
not ebx
xor esi, ebp
mov esi, edi
nop
test ecx, ebx
mov ebx, edx
imul ebx, dword [eax + 0x1c]
shr ebx, 0xa2
sub esi, 0x295b3c5c
mov ebx, dword [eax + 0x78]
imul esi, eax
shr ebx, 0x69
cmp dword [ebp + 0xc], 0x94
mov ebx, esp
xor ebx, ebp
add esi, 0x34d4410
lea esi, [eax - 0x2b209fae]
mov ebx, ebx
or ebx, 0xffffffda
sub ebx, 0xa4de57b1
lea esi, [ecx]
add bx, 0xffe5
mov esi, dword [eax + 0x20]
test esp, ebx
setne bl
mov esi, dword [ebp - 8]
or ebx, ebx
sub ebx, 0xffffffb6
movzx esi, byte [eax + 0x30]
add ebx, dword [eax + 0x74]
adc ebx, esp
mov ebx, dword [eax + 0x6c]
shr ebx, 3
and ebx, 0xffffffc7
mov esi, ebp
lea esi, [edi + edi*4]
add esi, 0xffffb28e
inc ebx
add esi, ecx
cmp esp, esi
sar esi, 4
lea esi, [esi + esi + 0x14]
add ebx, 3
cmp ebp, edx
mov esi, dword [eax + 0x44]
lea esi, [edi - 0x24]
movzx ebx, word [ebp - 0xc]
xor esi, edx
mov ebx, esi
cmp ebx, esi
mov esi, esp
lea ebx, [ecx + 0x4c]
mov ebx, ecx
shl esi, 0
xor esi, esp
add esi, 0xffffffff
mov esi, dword [ebp - 4]
lea esi, [ecx*4 + 0x20923821]
mov esi, 0xffffff9d
cmp dword [eax + 0x78], 5
mov ebx, dword [eax + 0x18]
sete bl
inc ebx
xor esi, esi
and esi, edx
mov ebx, dword [eax + 0x5c]
xor esi, ebx
inc ebx
cmp ecx, edi
mov esi, dword [eax + 4]
lea esi, [ebx + eax*4 + 0x4bc6]
shl ebx, 0x26
add ebx, esi
sub esi, 0xffffe989
xor esi, eax
test eax, esp
imul esi, esi, 0xffffcd92
mov ebx, dword [eax + 0x38]
neg ebx
sbb esi, esi
imul esi, eax, 0xffffa789
add esi, 0xffff9f2f
mov bl, byte [eax + 0x54]
sub ebx, 7
shl esi, 0xfd
xor esi, esp
add esi, 0xfffffffd
mov esi, dword [eax + 0x74]
xor esi, ecx
mov esi, edi
inc ebx
mov esi, dword [eax + 0x54]
add ebx, 2
mov ebx, edx
lea esi, [ecx - 0x20e346b2]
sub ebx, 4
add esi, edi
lea esi, [ebx + eax*4]
xor esi, edi
mov ebx, esi
inc esi
cmp dword [eax + 0x4c], 0x9ebcefaf
mov ebx, dword [eax + 8]
lea ebx, [ebp + esi*4]
imul esi, dword [eax + 0x50]
shl esi, 0xfb
mov ebx, esi
xor ebx, esp
shl esi, 0x71
mov ebx, edi
add ebx, 0x562b
lea ebx, [esp + esi*2]
xor ebx, esi
mov esi, dword [eax + 0x48]
nop
sub esi, 0xffffff85
inc esi
mov ebx, dword [eax + 0x10]
cmp dword [eax + 0x44], edx
and ebx, 0x4b5f0960
sete bl
inc esi
add esi, 0x10f1ffe3
cmp byte [eax + 0x58], al
mov esi, edi
sete bl
lea esi, [edx + ebp*8 + 0x2d]
movzx esi, word [eax + 0x70]
shl ebx, 0x2f
shr ebx, 0
lea ebx, [edx*4 + 1]
sub esi, 0xffffd564
add esi, 1
add ebx, esi
mov ebx, dword [eax + 0x20]
lea ebx, [eax + eax - 2]
mov esi, dword [eax + 0x24]
shl ebx, 0xe1
setne bl
mov esi, dword [eax + 0x10]
xor esi, esp
shr esi, 0xa3
and ebx, 0x886
mov ebx, ebx
dec esi
sub esi, 0
shr ebx, cl
mov esi, esp
neg ebx
movzx ebx, word [eax + 0x68]
movzx esi, word [eax + 0x38]
mov esi, dword [eax + 0x1c]
sub esi, 0x29
sar esi, 5
not esi
and esi, 0x99c5e016
cmp ebx, dword [ebp - 0xc]
or ebx, 0x97c4cd04
mov esi, esp
xor esi, ebx
inc esi
cmp dword [eax + 0xc], edx
mov esi, ebx
lea esi, [esi + 0x5547201f]
sub ebx, 0x32
sbb ebx, ebp
sub esi, 0xfffffff9
neg esi
setl bl
sub ebx, 0x8a0baca9
xchg ebx, ebx
mov esi, dword [eax + 0x68]
xor esi, edx
inc esi
test esi, ecx
mov esi, dword [eax + 0x18]
xchg ebx, esi
lea esi, [ecx + ebx*8]
sar ebx, 0x4a
shr ebx, 6
imul esi, esp, 0
add esi, 0x55de
test edi, edx
mov ebx, edi
mov ebx, dword [eax + 0x40]
xor ebx, edi
add ebx, 6
lea ebx, [edx - 0x5d]
mov ebx, dword [eax + 0x54]
sub ebx, 0xb2380857
shl esi, 0xe0
mov ebx, 0x1d4e
add esi, dword [eax + 0x50]
lea ebx, [eax + ecx*4]
xor esi, edx
inc ebx
mov esi, ecx
sub ebx, dword [eax + 0x3c]
add esi, 0x714a
mov esi, 0x7f01
xor esi, esi
mov esi, 0x6e03a2a7
nop
sub ebx, 0xffffeb02
inc ebx
mov esi, edx
sub esi, esi
neg ebx
mov esi, dword [eax + 0x78]
sbb ebx, ebp
not esi
and ebx, 2
xor ebx, eax
inc ebx
mov ebx, edx
shl bl, 0xfa
xor esi, eax
mov esi, eax
imul ebx, edx, 0x5b
lea ebx, [edi*4 - 1]
add esi, edx
movzx ebx, word [eax + 0x28]
and bl, 0x89
mov esi, dword [eax + 0x58]
movzx esi, word [eax + 0x30]
imul ebx, edi
xor esi, eax
sub esi, 0x22ed160e
mov esi, dword [eax + 0x20]
shl esi, 0xc0
mov esi, dword [eax + 0x5c]
shr ebx, 2
and esi, 0x481e6e1b
xor ebx, ebx
mov ebx, dword [ebp - 8]
cmp dword [eax + 4], edx
lea esi, [esi + ebp*2 - 0x11]
adc ebx, 0xfffffffe
sub ebx, 0xfffffffc
neg ebx
sbb ebx, ebp
movsx ebx, al
add esi, eax
mov ebx, dword [eax + 0x28]
lea ebx, [edi + ecx*8 + 0x52d3e280]
shr esi, 0x69
cmp dword [eax + 0xc], ecx
mov esi, dword [eax + 0x70]
sbb esi, ecx
not ebx
and esi, 0x5f4
or esi, 0x7d8e
shr esi, 0x7c
test edi, esp
lea esi, [eax + ebp*4]
sub esi, 0xffffadc2
sbb ebx, ebx
xor ebx, esi
neg ebx
sbb esi, ecx
add esi, 0xffffb653
lea esi, [esi]
mov esi, dword [eax + 0x74]
inc ebx
and ebx, ebp
mov esi, dword [eax + 0x54]
add esi, ebx
lea ebx, [edi + ebp*4 - 0x51]
mov ebx, dword [eax + 0x40]
setne bl
dec ebx
sub esi, 0x448f
cmp dword [eax + 0x60], edx
mov ebx, dword [eax + 0x54]
lea esi, [ebx + ebx*8 - 7]
sub esi, 7
sbb ebx, dword [eax + 0x10]
cmp bl, byte [eax + 0x74]
neg esi
dec ebx
cmp edi, ebp
mov esi, ecx
lea ebx, [eax]
mov ebx, dword [eax + 0x6c]
xor ebx, esi
mov esi, edi
lea ebx, [ebx + ebx*2 - 0x14ad657c]
mov esi, dword [eax + 0x20]
cmp dword [eax + 0x14], esi
mov ebx, edx
lea esi, [esi*4]
cmp dword [eax + 0x50], esp
mov ebx, dword [ebp + 0x10]
shr esi, 0xa3
sub ebx, 0x82070fdd
mov esi, dword [eax + 0x3c]
lea esi, [eax + ebp*8 - 0x2e]
shr ebx, 0x53
mov ebx, edi
lea esi, [ecx - 5]
sbb ebx, ecx
mov ebx, dword [eax + 0x78]
imul ebx, ebp, 6
shl ebx, 1
xor esi, ebx
and esi, esi
test al, cl
mov ebx, dword [eax + 0x30]
sub esi, 0x765b
xor esi, eax
add ebx, 0xd851028c
mov esi, dword [eax + 0x20]
sar esi, 0x49
and esi, 0xb98f694d
cmp dword [eax + 8], ebp
mov esi, dword [eax + 0x7c]
imul ebx, dword [eax + 0x50]
shl esi, 0xff
mov ebx, dword [eax + 0x58]
or esi, 0xffff950e
mov ebx, esp
sub ebx, 0x3c94f670
inc esi
add esi, dword [eax + 0x10]
cmp edx, ebx
mov ebx, dword [eax + 0x50]
sbb ebx, edi
xor esi, edi
neg ebx
sar ebx, 0x8a
sub esi, esi
and ebx, 0xb3152a23
imul esi, dword [eax + 8]
sar esi, 0xe7
and ebx, 0xffffff8c
add ebx, 0xfdece39
mov esi, dword [ebp - 0xc]
lea esi, [edx - 0x49]
shl ebx, 4
cmp eax, esi
mov ebx, esi
lea esi, [ebx*8]
mov ebx, ebp
adc esi, esi
dec esi
sub ebx, 0x10aa4f8d
cmp dword [eax + 0x50], 1
mov esi, ebp
lea ebx, [ebp + eax*8]
mov esi, dword [eax + 0x24]
cmp dword [eax + 0x74], esi
mov esi, esi
lea esi, [esp - 0x56ca]
sub esi, 0x30bd
sbb esi, ebp
not ebx
and esi, 0x9b9c97c8
mov bl, al
or esi, ebp
not esi
cmp cl, 0xfc
mov esi, dword [eax + 0x40]
lea esi, [esi + edx*4 + 0x14]
shr esi, 0x2c
sub ebx, 6
add esi, 0x7a5a5f0a
test eax, ebx
add esi, eax
mov esi, dword [eax + 0x7c]
sbb esi, ebx
sub ebx, 0x3120340
neg ebx
sbb esi, esi
and esi, eax
or esi, ebp
mov esi, esi
xor ebx, 0xffffa9ae
mov ebx, edx
shl esi, 0x40
shr ebx, 0xf8
mov ebx, ebp
add esi, 0xffffff9c
movzx ebx, byte [ebp - 0xc]
add esi, 0xfffffffc
mov esi, dword [eax + 0x1c]
inc esi
cmp edi, eax
mov si, word [eax + 0xc]
imul esi, eax
mov esi, ecx
xor esi, edx
not esi
and esi, 0xfffffffd
mov esi, dword [eax + 0x14]
not esi
xor esi, ecx
mov esi, edi
add esi, eax
inc esi
imul esi, edx, 0
mov esi, edi
lea esi, [ebp + ecx*4]
sub esi, esi
neg esi
sbb esi, esi
dec esi
cmp dword [eax + 0x44], 0x53
mov esi, dword [ebp - 8]
nop
xor esi, dword [ebx*4 + 0x47e000]
cmp ebx, ecx
mov ebx, dword [ebp - 0xc]
cmp dword [eax + 0xc], ebp
nop
xor esi, dword [eax + 0x48]
mov dword [ebp - 8], esp
xor byte [ebp - 8], al
inc dword [ebp - 8]
add dword [ebp - 8], 4
mov dword [ebp - 8], 0x2b71f646
cmp cl, byte [eax + 0x2c]
sbb dword [ebp - 8], esi
dec dword [ebp - 8]
mov byte [ebp - 8], 0xf9
add dword [ebp - 8], edi
inc dword [ebp - 8]
dec dword [ebp - 8]
cmp eax, ebx
setne byte [ebp - 8]
mov dword [ebp - 8], edi
shr dword [ebp - 8], cl
mov word [ebp - 8], si
and dword [ebp - 8], 0x4a
mov dword [ebp - 8], eax
and dword [ebp - 8], 0
or byte [ebp - 8], bl
cmp ecx, ebx
setne byte [ebp - 8]
mov dword [ebp - 8], ebx
inc dword [ebp - 8]
mov word [ebp - 8], WTSSetSessionInformationW
shr ebx, 8
or dword [ebp - 8], esi
test esp, eax
mov dword [ebp - 8], ebx
or dword [ebp - 8], ebp
mov dword [ebp - 8], edi
sub dword [ebp - 8], edx
mov dword [ebp - 8], 0
or dword [ebp - 8], ebp
and dword [ebp - 8], 0xffff81ac
test esp, esi
setne byte [ebp - 8]
mov byte [ebp - 8], 0xfb
adc dword [ebp - 8], ecx
mov dword [ebp - 8], esi
inc dword [ebp - 8]
mov dword [ebp - 8], 0x20
inc dword [ebp - 8]
add dword [ebp - 8], esp
mov dword [ebp - 8], esp
and dword [ebp - 8], 0xffff9596
cmp dword [eax + 0x1c], 4
mov dword [ebp - 8], ebp
setne byte [ebp - 8]
mov dword [ebp - 8], esi
shl esi, 0
mov esi, dword [eax + 0x68]
shr esi, cl
mov esi, dword [eax + 0x14]
or esi, edx
and esi, 0
sub esi, 0x3004
inc esi
xor esi, edi
mov esi, dword [eax + 0x7c]
lea esi, [ebp]
shr esi, 0xfc
xor esi, ecx
inc esi
add esi, 0xc6708231
lea esi, [ebx + edi*2 + 0x39]
adc esi, eax
mov esi, dword [eax + 0x10]
sub esi, 0x4242a9f7
xor esi, edx
neg esi
movzx esi, bl
add ebx, edx
mov ebx, ebp
inc ebx
cmp dword [eax + 0x50], 7
setne bl
mov ebx, dword [eax + 0x48]
and ebx, 0x45
lea ebx, [edx + eax*8]
xor ebx, ebp
cmp ebx, ecx
lea ebx, [esp + ebp*8]
mov ebx, edx
lea ebx, [edx - 4]
mov ebx, eax
shl ebx, 3
mov ebx, dword [eax + 0x50]
inc ebx
shr ebx, 0x68
imul ebx, dword [ebp + 0xc]
not ebx
sub ebx, 0x4bb6b3cf
not ebx
inc ebx
test word [eax + 0x18], 0x3b9b
sete bl
inc ebx
mov ebx, dword [ebp - 4]
shr ecx, 0x10
test cl, cl
movzx ecx, cl
cmp edi, esp
cmp dword [eax + 0xc], 0xfffffffd
shr edx, 0x18
test ebx, edi
test eax, eax
mov edx, dword [edx*4 + 0x47ec00]
test cl, dl
xor edx, dword [esi*4 + 0x47e400]
shr ebx, 0x10
nop
test word [edi + reloc.wtsapi32.dll_WTSSetSessionInformationW], 0x6e03
xor edx, dword [ecx*4 + 0x47e800]
nop
nop
nop
movzx ecx, byte [ebp + 0xc]
xor edx, dword [ecx*4 + 0x47e000]
cmp dword [eax + 0x5c], edi
cmp word [eax + 0x6c], si
mov ecx, dword [ebp - 8]
call 0x416440
xor esi, dword [eax + 0x54]
dec dword [ebp - 0xc]
inc dword [ebp - 0xc]
cmp edi, ebx
sete byte [ebp - 0xc]
mov dword [ebp - 0xc], esi
nop
neg dword [ebp - 0xc]
add byte [ebp - 0xc], al
mov byte [ebp - 0xc], 0xe1
dec dword [ebp - 0xc]
cmp word [eax + 0x38], 3
sete byte [ebp - 0xc]
mov dword [ebp - 0xc], ebx
and dword [ebp - 0xc], 0x251c
mov dword [ebp - 0xc], 0xfffffffe
cmp ecx, edx
sbb dword [ebp - 0xc], eax
and byte [ebp - 0xc], 7
mov dword [ebp - 0xc], ecx
dec dword [ebp - 0xc]
cmp ecx, ecx
sbb dword [ebp - 0xc], eax
and dword [ebp - 0xc], 0
mov ebx, edx
test ebp, ebx
or dword [ebp - 0xc], esi
mov dword [ebp - 0xc], edi
and dword [ebp - 0xc], 0x83
shl dword [ebp - 0xc], 4
or dword [ebp - 0xc], edx
add dword [ebp - 0xc], esp
and dword [ebp - 0xc], 0xfffffffa
dec dword [ebp - 0xc]
test al, dl
mov dword [ebp - 0xc], eax
add dword [ebp - 0xc], edi
mov dword [ebp - 0xc], edi
and dword [ebp - 0xc], 0x2227
mov word [ebp - 0xc], WTSSetSessionInformationW
and dword [ebp - 0xc], 0xffffffec
or dword [ebp - 0xc], edx
cmp ebp, ebp
sete byte [ebp - 0xc]
mov dword [ebp - 0xc], 0xffffffef
add dword [ebp - 0xc], eax
mov dword [ebp - 0xc], ecx
and dword [ebp - 0xc], 0xffffffc1
or dword [ebp - 0xc], ecx
mov dword [ebp - 0xc], ebx
shr ebx, 0x10
nop
sub dword [ebp - 0xc], 0xeadd8ca9
cmp dword [eax + 0x30], ebp
setne byte [ebp - 0xc]
mov byte [ebp - 0xc], al
and dword [ebp - 0xc], 0xffffb99e
mov dword [ebp - 0xc], esp
dec dword [ebp - 0xc]
mov dword [ebp - 0xc], esi
and dword [ebp - 0xc], ecx
cmp dword [eax + 0x40], ebx
mov dword [ebp - 0xc], esi
setne byte [ebp - 0xc]
mov dword [ebp - 0xc], esi
imul esi, eax
mov esi, esp
shl esi, 0x2a
xor esi, ebx
mov esi, eax
add esi, ecx
mov esi, dword [eax + 0x54]
shr esi, 0x85
xor esi, esi
inc esi
xor esi, ebx
cmp edx, edi
mov esi, dword [eax + 0x48]
xor esi, eax
lea esi, [eax + esi*2 - 6]
sub esi, 0xffffdf81
neg esi
mov esi, 0x77d
and esi, 0
mov esi, eax
lea esi, [ecx]
add esi, 0xfeb85453
mov esi, dword [eax + 0x18]
movzx esi, bl
xor ebx, eax
cmp edi, eax
mov ebx, ebx
sete bl
shr ebx, 4
sete bl
and ebx, 0xffffc54e
lea ebx, [ebx + ebx + 0x5f9df8c5]
sub ebx, edx
mov ebx, dword [eax + 0x6c]
add ebx, ebx
adc ebx, ebx
dec ebx
mov ebx, dword [eax + 0x68]
dec ebx
cmp cl, bl
mov ebx, dword [eax + 0x34]
inc ebx
lea ebx, [edx + edx]
add ebx, 0xf
adc ebx, 0xffffbae2
inc ebx
sete bl
inc ebx
mov esi, dword [esi*4 + 0x47e800]
mov ebx, dword [ebp - 8]
shr ebx, 0x18
xor esi, dword [ebx*4 + 0x47ec00]
nop
cmp edx, ebx
mov ebx, dword [ebp + 8]
mov dword [ebp + 0xc], esi
shl esi, 0
mov esi, dword [ebp - 4]
shr esi, 0xfd
and esi, 0xffffffff
shr esi, 0x73
test ecx, ebp
sbb esi, eax
xor esi, esi
mov esi, dword [eax + 0x40]
inc esi
cmp ecx, dword [eax + 0x10]
sbb esi, esi
mov esi, eax
lea esi, [ebx]
movzx esi, byte [eax + 0x18]
shl esi, 0x67
xor esi, ebp
cmp dword [ebp - 0xc], ebp
mov esi, dword [eax + 0x50]
inc esi
mov esi, edx
shr ebx, 8
mov esi, dword [eax + 0x60]
add esi, esi
and esi, 0xffffe5d5
add esi, 0xae04c49c
mov esi, ebx
dec esi
cmp byte [eax + 0x74], bl
lea esi, [ecx + eax*2 - 0x141eb4bd]
mov esi, dword [eax + 0x44]
shl esi, 0x2b
movsx esi, dl
shr esi, 0xde
lea esi, [ebp*4]
sub esi, ebx
mov esi, dword [eax + 0x40]
movzx esi, dl
mov esi, dword [eax + 0x10]
xor esi, esp
xor esi, ecx
mov esi, dword [eax + 0x1c]
lea esi, [edx + edx + 0x67]
shr esi, cl
mov esi, ebx
shl esi, cl
movzx esi, bl
sete bl
sete bl
inc ebx
test esi, ebp
mov ebx, edi
lea ebx, [eax + ecx*2 - 7]
mov ebx, dword [eax + 8]
lea ebx, [ecx + esi*4 + 0x6987a4f3]
adc ebx, esp
add ebx, 4
lea ebx, [ebx*8 + 2]
mov esi, dword [esi*4 + 0x47e400]
shr ebx, 2
setge bl
and ebx, edi
and bl, 0
mov ebx, dword [ebp + 8]
shl ebx, 7
mov ebx, dword [eax + 0x60]
xor ebx, eax
shr ebx, 0x1f
mov ebx, dword [eax + 0x48]
movzx ebx, byte [eax + 0x64]
xor ebx, eax
not ebx
and ebx, 0x3b569058
lea ebx, [ebx + ecx*4 + 0x21cb6106]
cmp dword [eax + 0x34], 0xe139153
lea ebx, [esi]
mov ebx, dword [eax + 0x34]
lea ebx, [esi*4 + 0x12]
add ebx, 0
sub ebx, 0xffff948b
sar ebx, 0xd5
and ebx, 4
add ebx, 0x62d870dc
lea ebx, [ecx + ebx*8 - 0x5b]
movzx ebx, byte [ebp - 0xc]
xor dword [ebp + 0xc], esi
cmp ebx, esi
cmp ebp, 0x48aaa31e
mov ebx, dword [ebp + 8]
shr esi, 0x9a
lea esi, [eax*4]
inc ebx
cmp cl, 0xcc
mov ebx, eax
lea ebx, [eax + esi*8]
sub esi, 0x1246b3a7
sbb esi, esp
dec esi
test edi, esp
mov esi, dword [edi + 0x10]
and ebx, 0
mov esi, edx
xor esi, esi
test ebx, edx
setg bl
movzx ebx, byte [ebp - 4]
mov esi, dword [ebp - 0xc]
sub esi, 0xffffffc3
xor esi, ebx
shr esi, cl
inc esi
xor esi, esi
inc esi
and esi, 0x4b8a
lea esi, [0xfffffffe]
xchg esi, esi
mov esi, dword [eax + 4]
add esi, 0x5664a454
adc esi, ecx
mov esi, esp
shr esi, 0x79
add esi, eax
test eax, eax
mov esi, dword [edi + 0x200]
lea esi, [3]
and esi, 0xffffffb0
xor esi, ebx
cmp edi, ebp
lea esi, [eax + edi*8 + 0x31aa]
mov esi, dword [ebp + 0xc]
cmp dword [edi + 0xc], 0xebce18de
test ebx, edi
xor esi, dword [ebx*4 + 0x47e000]
xor esi, dword [eax + 0x58]
test al, al
cmp dword [eax + 0x3c], 0x5e
cmp dword [eax + 0x7c], esi
mov ebx, dword [ebp - 4]
and dword [ebp + 0xc], 0xffffffb6
or dword [ebp + 0xc], edi
shr dword [ebp + 0xc], 0x96
and dword [ebp + 0xc], 0x7149
test esi, eax
mov dword [ebp + 0xc], edi
inc dword [ebp + 0xc]
mov dword [ebp + 0xc], 0xfffffffb
and dword [ebp + 0xc], 0x6e
cmp ecx, ebx
sete byte [ebp + 0xc]
mov dword [ebp + 0xc], ebp
or dword [ebp + 0xc], esi
shl dword [ebp + 0xc], 0x91
and dword [ebp + 0xc], 0
mov dword [ebp + 0xc], ecx
cmp eax, ecx
or dword [ebp + 0xc], ebp
cmp ebx, dword [eax + 0xc]
setne byte [ebp + 0xc]
mov dword [ebp + 0xc], edi
and dword [ebp + 0xc], 0x971abbf0
mov byte [ebp + 0xc], 0x58
or dword [ebp + 0xc], esi
mov dword [ebp + 0xc], eax
and dword [ebp + 0xc], 0x78ae2852
shr ebx, 8
test al, dl
setne byte [ebp + 0xc]
mov dword [ebp + 0xc], edx
add dword [ebp + 0xc], esp
mov dword [ebp + 0xc], ecx
and dword [ebp + 0xc], 2
and byte [ebp + 0xc], 0x63
cmp ecx, eax
setne byte [ebp + 0xc]
mov dword [ebp + 0xc], edi
or dword [ebp + 0xc], ecx
shl dword [ebp + 0xc], 2
and dword [ebp + 0xc], 0xffffff8a
mov dword [ebp + 0xc], ecx
dec dword [ebp + 0xc]
test edi, ebx
cmp dword [ebp + 0x10], 4
sete byte [ebp + 0xc]
sub dword [ebp + 0xc], 0xffffffff
and dword [ebp + 0xc], esi
test ebx, ebp
mov dword [ebp + 0xc], esi
movzx esi, word [eax + 0x54]
mov esi, dword [eax + 0x14]
imul esi, eax
sar esi, 0
xor esi, edi
mov esi, dword [eax + 0x7c]
xchg esi, esi
shl esi, 0xfe
shr esi, 7
and esi, 0x2f85
xor esi, esi
inc esi
mov esi, ebx
cmp byte [eax + 0x78], 0xd4
add esi, ebp
movzx esi, word [eax + 0x1c]
xor esi, ecx
mov esi, eax
inc esi
lea esi, [edx + ebp*4]
shl esi, cl
add esi, 6
mov esi, ebx
movzx esi, bl
cmp ebp, edx
setne bl
mov ebx, 0x7b
sub ebx, 0x75
sbb ebx, ebx
and ebx, 0x3dba
add ebx, 0xffffff61
add ebx, 0x2d
mov ebx, ecx
shl ebx, 0xdd
xor ebx, edx
dec ebx
adc ebx, 0xfffffffb
sub ebx, 0xffffffff
mov ebx, ecx
xor ebx, eax
sar ebx, 0
and ebx, 0x1b53
or bl, byte [edi + 0x200]
mov ebx, edi
cmp dword [edi + 0x10], ebx
mov ebx, dword [eax + 0x38]
shl ebx, cl
lea ebx, [edx + edi*2 + 3]
movzx ebx, bl
inc ebx
xor ebx, esp
and ebx, 0
test eax, ebp
mov ebx, dword [ebp + 8]
cmp dword [eax + 0x48], 0xc08d4d80
test edi, ecx
shr ebx, 0x10
test esi, edx
shr edx, 0x18
test edx, ebx
test ecx, ecx
mov edx, dword [edx*4 + 0x47ec00]
test eax, eax
xor edx, dword [esi*4 + 0x47e400]
movzx esi, bl
dec ebx
add ebx, 0xffffd7c0
mov ebx, dword [ebp - 8]
add ebx, edx
adc ebx, ebx
mov ebx, edx
dec ebx
sub ebx, 0xffffffff
shl ebx, 0xfe
xor ebx, eax
add ebx, edx
setne bl
mov ebx, edi
xor ebx, ecx
add ebx, 0xb68ec137
shr ebx, 0xc0
xchg ebx, ebx
movzx ebx, byte [edi + 0xc]
mov bx, bx
sub ebx, esi
xor edx, dword [esi*4 + 0x47e800]
mov ebx, esi
adc ebx, 0xca898ceb
add ebx, 1
adc ebx, edx
add ebx, 1
mov ebx, dword [ebp + 0x10]
shr ebx, 0x2f
neg ebx
not ebx
movzx esi, byte [ebp - 8]
shr ebx, 3
movzx ebx, cx
xor ebx, ebp
mov ebx, ecx
inc ebx
add ebx, 0xd18b01a3
add ebx, 0x4cc155a0
lea ebx, [ebp + edx*2]
inc ebx
mov ebx, ecx
setg bl
xor edx, dword [esi*4 + 0x47e000]
setge bl
seta bl
sbb ebx, esi
setge bl
mov ebx, dword [ebp + 0xc]
test ebp, ebx
xor edx, dword [eax + 0x5c]
shr ebx, 8
movzx esi, bl
add ebx, 0xffffff90
lea ebx, [esp]
mov ebx, dword [esi*4 + 0x47e400]
inc ebx
mov ebx, dword [eax + 0x58]
add ebx, ebx
mov ebx, dword [eax + 0x58]
inc ebx
and ebx, 0xffffbe16
add bl, 0x5c
setg bl
mov ebx, dword [eax + 0x38]
shr ebx, 0xad
mov ebx, esi
and ebx, edx
dec ebx
mov ebx, esp
sub ebx, 0xffffffff
dec ebx
adc ebx, edi
xchg ebx, ebx
mov esi, dword [esi*4 + 0x47e400]
mov ebx, dword [ebp - 0xc]
shr ebx, 0x10
movzx ebx, bl
nop
nop
test ebp, edi
nop
xor esi, dword [ebx*4 + 0x47e800]
cmp dword [ebp - 8], ecx
nop
mov ebx, ecx
cmp dword [eax + 0x28], ebx
shr ebx, 0x18
xor esi, dword [ebx*4 + 0x47ec00]
nop
movzx ebx, dl
test edi, esp
xor esi, dword [ebx*4 + 0x47e000]
cmp dword [eax + 0x74], eax
mov ebx, edx
xor esi, dword [eax + 0x60]
mov byte [ebp + 8], 0xfc
dec dword [ebp + 8]
cmp ebx, ecx
mov dword [ebp + 8], ebp
setne byte [ebp + 8]
mov dword [ebp + 8], esi
and dword [ebp + 8], eax
mov dword [ebp + 8], esi
or dword [ebp + 8], eax
mov dword [ebp + 8], 0x6c92008a
sub dword [ebp + 8], 0xd3f6c53f
shl dword [ebp + 8], 0xe1
mov dword [ebp + 8], 0x61
sub dword [ebp + 8], 6
and dword [ebp + 8], 0xffff9a02
mov dword [ebp + 8], ebp
and dword [ebp + 8], 2
or dword [ebp + 8], ebp
mov dword [ebp + 8], edx
and dword [ebp + 8], 2
test ebx, ecx
shr ebx, 8
and dword [ebp + 8], 0x5cf8b3e9
shr dword [ebp + 8], cl
xor dword [ebp + 8], eax
cmp edi, 0xfffffffc
cmp ebx, dword [eax + 0x48]
mov dword [ebp + 8], ebx
or dword [ebp + 8], esi
inc dword [ebp + 8]
add dword [ebp + 8], ebx
cmp ecx, 0xffffffcc
setne byte [ebp + 8]
mov word [ebp + 8], ax
or dword [ebp + 8], edi
mov dword [ebp + 8], esp
xor byte [ebp + 8], cl
nop
sub dword [ebp + 8], 0xffffffff
test ecx, edi
cmp byte [eax + 0x6c], dl
cmp dword [eax + 0x20], esi
mov dword [ebp + 8], esi
setne byte [ebp + 8]
mov dword [ebp + 8], esi
xor esi, ebx
and esi, edx
test edx, ebx
sar esi, 6
add esi, dword [eax + 0x1c]
mov esi, dword [eax + 0x14]
xor esi, ebp
add esi, ecx
mov esi, edx
shr esi, 6
xor esi, edi
mov esi, edi
add esi, 0xea452c48
add esi, 0x4b968536
lea esi, [edx - 0x2172]
xchg esi, esi
mov esi, esp
inc esi
mov esi, esi
add esi, esp
lea esi, [ebp*8 - 0x65ed2354]
mov esi, dword [eax + 0x1c]
lea esi, [ebp*8 - 7]
add si, 0x75b6
movzx esi, bl
xor ebx, esi
inc ebx
mov ebx, esp
lea ebx, [esi*8 + 0x7c45]
inc ebx
movzx ebx, byte [esi*4 + 0x47e400]
xor bl, byte [ebp - 4]
cmp esp, 0xfffffffb
mov ebx, ebp
cmp ebx, edi
lea ebx, [0]
sbb ebx, ebx
mov ebx, dword [eax + 0x20]
movzx ebx, word [eax + 0xc]
shl ebx, 0
add ebx, 1
mov ebx, dword [eax + 0x10]
cmp ecx, eax
lea ebx, [esp - 0x219eab48]
seta bl
mov esi, dword [esi*4 + 0x47e400]
mov ebx, dword [ebp + 0xc]
cmp dword [eax + 0x1c], ebx
shr ebx, 0x10
movzx ebx, bl
cmp esi, dword [eax + 0x40]
nop
xor esi, dword [ebx*4 + 0x47e800]
test ebp, esi
mov ebx, dword [ebp - 0xc]
nop
shr ebx, 0x18
nop
xor esi, dword [ebx*4 + 0x47ec00]
movzx ebx, cl
xor esi, dword [ebx*4 + 0x47e000]
test byte [ebx*4 + 0x47e000], al
mov ebx, edx
cmp dword [eax + 0x48], 0x4b1d
nop
xor esi, dword [eax + 0x64]
cmp edi, esp
setne byte [ebp - 4]
mov dword [ebp - 4], 0x81
add dword [ebp - 4], 0xfffffffe
cmp dword [eax + 0x78], edi
setne byte [ebp - 4]
add dword [ebp - 4], esp
mov dword [ebp - 4], ebp
and dword [ebp - 4], esp
cmp ebp, ebx
shr ebx, 0x10
mov dword [ebp - 4], ecx
or dword [ebp - 4], edx
and dword [ebp - 4], 0xfffffffd
cmp eax, edi
sete byte [ebp - 4]
mov word [ebp - 4], 0xa609
inc dword [ebp - 4]
add dword [ebp - 4], esp
test eax, edi
sete byte [ebp - 4]
dec dword [ebp - 4]
test ebp, ebp
add dword [ebp - 4], 2
cmp ebx, esi
cmp dword [ebp + 0x10], ebp
setne byte [ebp - 4]
mov dword [ebp - 4], esi
sbb esi, edx
imul esi, esi
neg esi
mov esi, dword [ebp + 8]
inc esi
lea esi, [ebp + ebx*2 + 0x29f]
shl esi, 0x57
add esi, esi
mov esi, esp
xor esi, eax
mov esi, dword [eax + 0x70]
shr esi, 0x24
add esi, eax
lea esi, [esp + edx*8]
sbb esi, esi
mov esi, dword [eax + 0x4c]
shr esi, 0xd0
imul esi, ebp, 0xfffffff3
lea esi, [ecx + ecx*2]
add esi, 2
mov esi, esp
movzx esi, bl
xor ebx, edx
sar ebx, 0xf9
mov ebx, dword [edi + 0xc]
shr ebx, 0x2f
mov ebx, dword [eax + 0x4c]
or ebx, dword [eax + 0x1c]
mov ebx, dword [eax + 0x34]
shl ebx, 3
xor ebx, ecx
cmp bl, cl
lea ebx, [ebp*4 + 7]
mov ebx, dword [eax + 0x38]
shl ebx, cl
xor ebx, esi
and ebx, 2
test edi, ebp
test esp, edx
shr ebx, 0xa2
test byte [ebp - 4], 0xed
mov ebx, 0xb1e4a1b8
lea ebx, [ecx*4 + 0x68890bac]
movzx ebx, word [ebp + 0xc]
shl bl, 0x61
add ebx, 0x24cea50f
add ebx, 0xdb315af2
lea ebx, [edi + eax*4 + 0x1a0a]
adc ebx, ebp
mov esi, dword [esi*4 + 0x47e800]
shl ebx, 0xfc
or ebx, 0x9e716674
xor ebx, esp
inc ebx
cmp cl, bl
mov ebx, dword [eax + 0x3c]
xor ebx, esp
mov ebx, ebx
sar ebx, 4
add ebx, 1
mov ebx, dword [edi + 0x200]
xor ebx, ebp
nop
sub ebx, 0x92860d00
dec ebx
add ebx, 0xffffffff
adc ebx, 0xffffeb0a
cmp esi, ebx
mov ebx, dword [ebp + 0xc]
shr ebx, 0x18
xor esi, dword [ebx*4 + 0x47ec00]
cmp dword [edi + 0xc], ecx
setne byte [ebp - 8]
mov dword [ebp - 8], edi
add dword [ebp - 8], ebp
mov dword [ebp - 8], ebp
and dword [ebp - 8], 1
mov dword [ebp - 8], esi
add dword [ebp - 8], ebx
inc dword [ebp - 8]
nop
add dword [ebp - 8], 0
cmp ecx, esp
setne byte [ebp - 8]
mov dword [ebp - 8], ebp
cmp ecx, 0xffffffbe
or dword [ebp - 8], esi
and dword [ebp - 8], 2
mov dword [ebp - 8], edx
cmp esi, ebx
mov dword [ebp - 8], 0xffffd1ee
cmp dword [eax + 0x30], 0x2d8a8218
sete byte [ebp - 8]
sub dword [ebp - 8], 0x1041
sub dword [ebp - 8], 0xffffefbe
cmp dword [eax + 0x78], ecx
test ecx, ecx
mov ebx, ecx
mov dword [ebp - 8], esi
sub esi, 0
add esi, 0
xor esi, ebx
inc esi
mov esi, dword [ebp + 0xc]
sub esi, 0xffffffe1
sub esi, 0x20
inc esi
sub esi, 0
mov esi, dword [eax + 8]
and esi, 0x3d23c810
cmp cl, dl
mov esi, dword [eax + 0x14]
add esi, 0x38
lea esi, [edi + ecx*8 - 0x4b12ab5e]
sub esi, dword [eax + 0x74]
lea esi, [ebx*4 + 4]
mov esi, ebp
inc esi
lea esi, [eax + ecx*4 + 0x5a66]
shl esi, 1
imul esi, esp, 0xfffffff9
mov esi, edx
add esi, esp
mov esi, dword [eax + 0x24]
shr ebx, 8
mov esi, edi
sar esi, 0x8b
and esi, 0xffffb2ae
shr esi, 0xfa
and esi, 0xffffe355
xor esi, esi
sub esi, 0xea7e0a9f
inc esi
mov esi, eax
imul esi, ebp, 0x3a646ce1
mov esi, ebp
sub esi, 0xffb099f
sub esi, 0xf004f66a
sub esi, 1
xor esi, ecx
inc esi
mov esi, edi
neg esi
lea esi, [esi + esi - 0x61d79644]
lea esi, [eax + eax*2 + 4]
mov esi, edx
xor esi, edi
test edx, eax
mov esi, esp
lea esi, [edx + edx*2 - 0x48]
add esi, 2
mov esi, esi
movzx esi, bl
cmp dword [eax + 0x54], ebx
setne bl
mov ebx, dword [ebp - 4]
or ebx, edi
mov ebx, edx
xor ebx, ecx
shr ebx, 7
sub ebx, 0x513f
mov ebx, eax
sub ebx, 0x3b62bf5f
cmp esi, esi
lea ebx, [ebp + edi*2 + 0x7c930ba8]
mov bl, al
movzx ebx, word [eax + 0x58]
xor ebx, ebp
mov ebx, dword [eax + 0x10]
test edx, esp
sub ebx, 3
mov ebx, dword [eax + 0x18]
cmp dword [eax + 0x28], 0xffffed05
lea ebx, [edi - 0x51acfc4]
xchg ebx, ebx
mov esi, dword [esi*4 + 0x47e400]
dec ebx
movsx ebx, bl
lea ebx, [eax + edx*4]
sar ebx, 0
setg bl
xor ebx, edx
inc ebx
and bl, 0x64
mov ebx, ebp
shl ebx, 0
mov ebx, dword [eax + 0x74]
or ebx, 0x87175751
xchg ebx, ebx
xor dword [ebp - 8], esi
add ebx, 0
mov ebx, dword [eax + 0x74]
adc esi, ebx
add esi, 3
lea ebx, [0xfffffffc]
mov ebx, esi
sub ebx, eax
setl bl
cmp word [edi + reloc.wtsapi32.dll_WTSSetSessionInformationW], 0
lea esi, [ecx + ebp*2 + 0x6f0c]
cmp edi, edx
mov esi, dword [eax + 0xc]
inc esi
cmp esp, eax
mov ebx, edi
cmp esp, 0xfffffe6c
sete bl
not ebx
movzx ebx, byte [ebp - 0xc]
mov esi, dword [eax + 0x54]
shl esi, 0
shr esi, 0xc3
inc esi
xor esi, edx
and esi, 0x3f3e
mov esi, dword [ebp + 0x10]
lea esi, [eax + ebp*8 + 0x42]
test ebx, ebp
neg esi
adc esi, 0xb2abc6f7
mov esi, dword [eax + 0x6c]
inc esi
add si, 0xfffa
lea esi, [ebx]
add esi, eax
mov esi, dword [ebp - 8]
nop
nop
xor esi, dword [ebx*4 + 0x47e000]
nop
cmp ecx, dword [eax + 0x2c]
mov ebx, dword [ebp - 0xc]
cmp ecx, dword [eax + 0x70]
test esi, ebx
cmp dword [eax + 0x10], 0x563c6f0d
xor esi, dword [eax + 0x68]
shr edx, 0x18
test ebp, edi
mov edx, dword [edx*4 + 0x47ec00]
and dword [ebp - 8], 0x94b38922
or dword [ebp - 8], esp
sub dword [ebp - 8], ebx
inc dword [ebp - 8]
and dword [ebp - 8], 0xffffffff
mov dword [ebp - 8], edx
or dword [ebp - 8], eax
shl dword [ebp - 8], 0x9e
and dword [ebp - 8], 0xffffd344
nop
sub dword [ebp - 8], ebp
mov dword [ebp - 8], edx
inc dword [ebp - 8]
mov dword [ebp - 8], esp
and dword [ebp - 8], 0x7f68
mov dword [ebp - 8], edx
and dword [ebp - 8], 0xd
or byte [ebp - 8], cl
cmp cx, si
nop
mov dword [ebp - 8], ebp
or byte [ebp - 8], 0x79
shl dword [ebp - 8], 5
and dword [ebp - 8], ebx
or dword [ebp - 8], edx
mov dword [ebp - 8], ebp
shr ebx, 8
shr ecx, 0x10
inc dword [ebp - 8]
mov dword [ebp - 8], esi
and dword [ebp - 8], 0x1b75
or byte [ebp - 8], dl
test bl, 0x51
mov dword [ebp - 8], edi
dec dword [ebp - 8]
and dword [ebp - 8], 0x844f8c37
test edx, ebp
sete byte [ebp - 8]
mov dword [ebp - 8], 0x16c24cf5
cmp dword [eax + 0x34], 0x4e5f
sete byte [ebp - 8]
inc dword [ebp - 8]
mov dword [ebp - 8], ebp
setne byte [ebp - 8]
mov dword [ebp - 8], esi
xor esi, ebx
sbb esi, edi
add esi, 0xffffffff
add esi, 0xffffffa8
add esi, 0x48
lea esi, [ebp]
sbb esi, edx
mov esi, ebx
add esi, 0xffff87fc
mov esi, dword [eax + 0x50]
shl esi, cl
lea esi, [ebp*8 - 0x28]
mov esi, eax
add esi, ebp
mov esi, dword [ebp + 0x10]
shl esi, 0x3a
xor esi, edx
mov esi, ebx
add esi, esi
lea esi, [esp + ecx*8 + 0x6939]
add esi, 0xffffc80f
mov esi, esi
sar esi, 2
add esi, 0x1184
xor esi, esi
shr esi, 0
mov esi, dword [eax + 8]
movzx esi, bl
mov ebx, eax
adc ebx, 0x56e4
sub ebx, 1
add ebx, 2
inc ebx
add ebx, 0x1338
add ebx, 0xfffffff9
lea ebx, [ebx*4 + 1]
sub ebx, 0xffffffff
mov ebx, dword [eax + 0x14]
add bl, 0x9e
mov ebx, dword [eax + 0x74]
sub ebx, 1
sub ebx, 0xfffffffe
mov ebx, dword [ebp + 0x10]
xor ebx, ebx
cmp bp, 0
mov ebx, dword [eax + 0x38]
lea ebx, [edx + edx + 0x77]
sbb ebx, esi
neg ebx
mov ebx, esi
cmp eax, ebx
mov bx, ax
or ebx, ebx
mov ebx, edi
add ebx, 0x1c95
inc ebx
sub ebx, 0xffffffa4
sub ebx, 0xfffffff9
add ebx, 0x68ad516e
sub ebx, 0x68ad7d91
add ebx, 0xf5b
inc ebx
lea ebx, [eax + edx*8 + 0x49e6]
cmp ebp, dword [eax + 0x34]
mov ebx, ebx
movzx ebx, byte [eax + 0x1c]
mov bl, byte [eax + 0x68]
xor edx, dword [esi*4 + 0x47e400]
add ebx, 1
add ebx, ecx
sub ebx, 0x557d9f81
sub ebx, 0xaa82601c
cmp esi, ecx
inc ebx
sub ebx, 0x63
mov ebx, dword [ebp - 8]
dec ebx
add ebx, 5
shl ebx, 3
xor ebx, esp
sub ebx, 0xffffffff
add ebx, 0xfd8e55b7
sub ebx, 0x51
add ebx, 0x271e9a9
add ebx, 0xffffcbac
nop
add ebx, 0xe8d8de32
add ebx, 0
nop
sub ebx, 0xe8d89938
add ebx, 0x2389
shr ebx, 0xfe
and ebx, 0xffffffc4
mov ebx, dword [eax + 0x64]
adc ebx, esi
mov ebx, dword [edi + 0x200]
sub ebx, 0xffffffad
inc ebx
add ebx, 0x3fe6
add ebx, 0xffffbfc1
add ebx, 0x34d6
add ebx, 0xffffcb29
mov ebx, esp
shr ebx, cl
lea ebx, [edi + ebx*2]
mov ebx, dword [eax + 0x2c]
lea ebx, [edx + edx*2 + 0x17]
adc ebx, 0xffffffae
mov ebx, dword [eax + 0x30]
add ebx, 0x23b068e2
add ebx, 0xdc4f583a
inc ebx
sub ebx, 0x4c
test ecx, ebx
add ebx, 0x53e0b28
add ebx, 6
add ebx, 0xd67f543d
add ebx, 0x2442a0e7
sub ebx, 0xffffffff
and ebx, 0xffffff8f
mov ebx, dword [ebp - 4]
nop
nop
test eax, ebx
movzx ecx, cl
xor edx, dword [ecx*4 + 0x47e800]
test ebx, eax
nop
nop
test eax, edi
movzx ecx, byte [ebp + 0xc]
nop
xor edx, dword [ecx*4 + 0x47e000]
cmp dword [eax + 0x20], 0xffffcbcb
mov ecx, dword [ebp - 8]
cmp ebx, dword [eax + 0x5c]
xor edx, dword [eax + 0x6c]
nop
shr ecx, 8
shr ebx, 0x10
cmp esp, 0xffffffbd
movzx ecx, cl
movzx esi, bl
setl bl
nop
setg bl
sbb ebx, edx
imul ebx, esp
mov ebx, dword [ebp + 0xc]
sub ebx, 0x2e3e
sub ebx, 0xffffd1bb
add ebx, 0xffffffff
add ebx, 0xfffffff9
sub ebx, esp
add ebx, 0xfffffffd
dec ebx
movsx ebx, bl
mov ecx, dword [ecx*4 + 0x47e400]
imul ebx, dword [edi + 0x10]
mov ebx, edi
shl ebx, 0xa
xor ebx, edi
mov ebx, edx
cmp dword [eax + 0x74], ebx
mov ebx, dword [edi + 0x10]
shl ebx, 1
and ebx, eax
or ebx, dword [ebp - 0xc]
mov ebx, dword [eax + 0x3c]
shl ebx, 0x38
add ebx, 0x177c
sub ebx, 0x4bc6d067
sub ebx, 1
sub ebx, 0xb43946d4
sub ebx, 0x38
add ebx, 0xffffa8fb
sub ebx, 0xffffa900
setg bl
sub ebx, 0xfffffffd
dec ebx
add ebx, 0xd4a34395
add ebx, 0x2b5cbc6a
mov ebx, edi
cmp edi, ebx
setne bl
mov ebx, ebp
sub ebx, 0x3ba5ae37
sub ebx, 0xffffb2a3
mov bx, word [eax + 0x1c]
sar ebx, 0x8f
shr ebx, 0x6e
lea ebx, [edi + ecx*8 - 0x3417]
sub ebx, 0xccec457a
sub ebx, 0x38
sub ebx, 0xffffc3ea
add ebx, 0xffffbfaa
sub ebx, 0xcf897ba3
add ebx, 0x9c75c550
dec ebx
mov ebx, ecx
inc ebx
sub ebx, 0xffffc39c
xor ecx, dword [esi*4 + 0x47e800]
inc ebx
add ebx, 0xffffbbf7
sub ebx, 0xe07d46b9
sub ebx, 0x1f82b948
lea ebx, [ebp + ebx*2 - 0x631d172c]
adc ebx, edi
add ebx, esp
mov ebx, dword [eax + 8]
not ebx
test ebx, ecx
mov ebx, edi
cmp dword [eax + 0x3c], ebx
lea ebx, [ecx + esi*4 - 0xb]
mov ebx, esi
cmp ebx, 0xf9396ab0
mov ebx, edx
setne bl
mov esi, dword [ebp + 8]
xor ebx, ebp
mov ebx, ecx
lea ebx, [edx*4 + 0x6e3a61fe]
dec ebx
add ebx, 0x80bcd6ca
mov ebx, dword [eax + 0x14]
movzx ebx, byte [edi + 0x10]
shl ebx, cl
sub ebx, 1
mov ebx, dword [edi + 0x10]
xor ebx, esi
setne bl
sub ebx, 0x64bd
sub ebx, 0x68
add ebx, 0x6525
inc ebx
lea ebx, [edi + ecx*2 - 6]
sbb ebx, esp
mov ebx, edx
add ebx, edx
mov ebx, dword [eax + 0x2c]
imul ebx, ecx
movzx ebx, byte [eax + 0x38]
xor ebx, eax
mov ebx, dword [eax + 0x28]
xor ebx, esp
mov bl, cl
shr esi, 0x18
imul ebx, edx, 0xffffc0f1
xor ebx, ebx
dec ebx
add ebx, 0xd9e0d1fb
cmp eax, eax
sub ebx, 0x41c1971e
sub ebx, 0x53
cmp dword [eax + 0x38], 0xffffffd9
sub ebx, 0x43110b11
sub ebx, 0x550e2ff3
inc ebx
add ebx, 0xfffffffe
sub ebx, ecx
mov ebx, edx
sbb ebx, esp
sub ebx, 1
cmp dword [ebp - 8], esp
mov ebx, dword [eax + 0x58]
sar ebx, 0xff
shr ebx, 0xfb
sub ebx, 0xffffffa1
sub ebx, 5
dec ebx
add ebx, 0xffffffa8
lea ebx, [ecx + eax*2]
and ebx, 0xffffffff
mov ebx, ecx
imul ebx, dword [edi + 0x10]
sbb ebx, ecx
shl ebx, cl
mov ebx, 0xffff8723
sub ebx, 0
shl bl, 0xf9
shr ebx, cl
mov ebx, dword [eax + 0x1c]
shr ebx, 0x3d
and ebx, edi
mov ebx, ecx
cmp ebx, ebp
sbb ebx, ecx
xor ecx, dword [esi*4 + 0x47ec00]
seta bl
mov ebx, esp
add ebx, 0x772b
sub ebx, 0xbe8df27e
sub ebx, 0xffffffff
neg ebx
sbb ebx, ebp
shr ebx, 0x1d
imul ebx, dword [eax + 0x68]
mov ebx, dword [eax + 0x7c]
sub ebx, esi
neg ebx
mov ebx, dword [eax + 8]
sbb ebx, eax
neg ebx
cmp dword [edi + 0x10], esp
mov ebx, 0
sub ebx, 7
sub ebx, 0xffffffff
sub ebx, 0x25ce97ad
sub ebx, 0xda316851
xor ebx, esp
sub ebx, 0xffffffff
neg ebx
movzx esi, dl
xor ebx, ebx
sub ebx, 0xffffffff
mov ebx, dword [eax + 0x78]
sub ebx, edx
sete bl
mov bx, word [edi + reloc.wtsapi32.dll_WTSSetSessionInformationW]
xor ebx, ecx
mov ebx, ebp
movzx ebx, word [edi + reloc.wtsapi32.dll_WTSSetSessionInformationW]
mov ebx, ebx
add ebx, dword [edi + 0x10]
xor ecx, dword [esi*4 + 0x47e000]
sub ebx, 0xffffffaf
dec ebx
sub ebx, 0xffffffbb
add ebx, 0xffffff6c
mov ebx, ebx
cmp edx, ebx
mov ebx, dword [ebp + 8]
mov ebx, edx
shr ebx, 8
movzx esi, bl
inc ebx
add ebx, 1
add ebx, 0xffffffff
sub ebx, 1
sub ebx, 0xffffffd0
sub ebx, 0xfffffff9
sub ebx, 0xffffffff
inc ebx
add ebx, 0xffffffec
xor ebx, esp
and ebx, 0xffffe9bc
lea ebx, [0x4b1ca3c9]
test esp, eax
setge bl
mov esi, dword [esi*4 + 0x47e400]
mov ebx, dword [ebp - 8]
shr ebx, 0x10
movzx ebx, bl
test ebx, esp
xor esi, dword [ebx*4 + 0x47e800]
movzx ebx, byte [ebp + 8]
xor byte [ebp + 0xc], cl
sub dword [ebp + 0xc], 0xfffffffd
add dword [ebp + 0xc], 1
add dword [ebp + 0xc], 0xffffff86
add dword [ebp + 0xc], 0x77
test edi, edi
sete byte [ebp + 0xc]
add dword [ebp + 0xc], 0xcb4420f
add dword [ebp + 0xc], 0xf34bbdf9
sub dword [ebp + 0xc], 0x2e5a
sub dword [ebp + 0xc], 0xffffd1ad
cmp eax, ecx
mov dword [ebp + 0xc], esi
mov esi, dword [ebp - 4]
shr esi, 0x18
nop
test edx, edx
mov esi, dword [esi*4 + 0x47ec00]
xor dword [ebp + 0xc], esi
mov esi, dword [eax + 0x54]
adc esi, edx
nop
sbb esi, esi
neg esi
sbb esi, esp
mov esi, dword [ebp + 0xc]
xor esi, dword [ebx*4 + 0x47e000]
cmp dword [eax + 0x40], 0xffffffd2
mov ebx, edx
test ebx, esi
xor esi, dword [eax + 0x74]
sub dword [ebp - 0xc], 0x4424e46d
dec dword [ebp - 0xc]
sub dword [ebp - 0xc], 0x27d2a09e
sub dword [ebp - 0xc], 0x94087af3
cmp dword [eax + 0x50], 0x36
mov word [ebp - 0xc], sp
and dword [ebp - 0xc], 0xffffffd2
mov dword [ebp - 0xc], ebp
or dword [ebp - 0xc], edx
mov dword [ebp - 0xc], 0xffff95d6
sub dword [ebp - 0xc], 0x29
sub dword [ebp - 0xc], 0x83588c56
add dword [ebp - 0xc], 0x83588c23
add dword [ebp - 0xc], 0xffffffff
sub dword [ebp - 0xc], 0x3c1ce25c
add dword [ebp - 0xc], 0x3c1d4cdf
and dword [ebp - 0xc], edi
shr ebx, 0x10
and dword [ebp - 0xc], 0xba5f5d8f
or dword [ebp - 0xc], eax
test ecx, eax
sete byte [ebp - 0xc]
sub dword [ebp - 0xc], 0xb6b50b72
add dword [ebp - 0xc], 0xfffffffb
sub dword [ebp - 0xc], 0x494af46f
sub dword [ebp - 0xc], 0x19
test ecx, ebx
mov dword [ebp - 0xc], esi
shr esi, 0x74
xor esi, ebx
shr esi, cl
movzx esi, bl
sub ebx, 0xcbcc3b9c
sub ebx, 0x6583
add ebx, 0xcbcca126
add ebx, 0xffffffce
add ebx, 1
add ebx, 0xffffb9a2
sub ebx, 0xffffb999
lea ebx, [ecx + ecx*2 + 0x73e25269]
mov esi, dword [esi*4 + 0x47e800]
mov ebx, dword [ebp - 8]
shr ebx, 0x18
xor esi, dword [ebx*4 + 0x47ec00]
cmp esp, edi
nop
mov ebx, dword [ebp + 8]
and dword [ebp + 0xc], 3
or dword [ebp + 0xc], esi
shr ebx, 8
and dword [ebp + 0xc], 0x54
test edi, eax
mov dword [ebp + 0xc], esi
shl esi, 0x4c
add esi, esp
movzx esi, bl
xor ebx, eax
add ebx, 3
sub ebx, 1
sub ebx, 1
mov esi, dword [esi*4 + 0x47e400]
shr ebx, 0xe3
movzx ebx, word [eax + 0x28]
xor dword [ebp + 0xc], esi
shr ebx, cl
mov ebx, ecx
movzx ebx, byte [ebp - 4]
mov esi, edi
sub esi, ebx
lea esi, [esi + 0x7b0962c0]
mov esi, dword [ebp + 0xc]
xor esi, dword [ebx*4 + 0x47e000]
cmp dword [eax + 0x5c], 0xfffffffc
mov ebx, dword [ebp - 4]
xor esi, dword [eax + 0x78]
mov dword [ebp + 0xc], esi
and dword [ebp + 0xc], 0xfffffcba
shr ebx, 8
and dword [ebp + 0xc], 0xcb7f1b3
test eax, edi
mov dword [ebp + 0xc], esi
xor esi, eax
shr esi, 0xfb
movzx esi, bl
mov ebx, esi
cmp dword [eax + 0x48], ebx
sete bl
mov ebx, dword [ebp + 8]
xor ecx, dword [eax + 0x70]
shr ebx, 0x10
shr edx, 0x18
test edi, esp
mov edx, dword [edx*4 + 0x47ec00]
xor edx, dword [esi*4 + 0x47e400]
movzx esi, bl
mov ebx, eax
shl ebx, 0x2d
xor edx, dword [esi*4 + 0x47e800]
shr ebx, 4
movzx esi, byte [ebp - 8]
xor edx, dword [esi*4 + 0x47e000]
mov ebx, dword [ebp + 0xc]
xor edx, dword [eax + 0x7c]
shr ebx, 8
movzx esi, bl
mov ebx, dword [ebp - 0xc]
mov esi, dword [esi*4 + 0x47e400]
shr ebx, 0x10
movzx ebx, bl
xor esi, dword [ebx*4 + 0x47e800]
mov ebx, ecx
shr ebx, 0x18
xor esi, dword [ebx*4 + 0x47ec00]
movzx ebx, dl
xor esi, dword [ebx*4 + 0x47e000]
add eax, 0x13dd420a
add eax, 0x49823c4f
sub eax, 0xd990a600
sub eax, 0xc3ae6348
sub eax, 0x7214b718
add eax, 0xa99ee2d8
sub eax, 1
sub eax, 0xfffffffc
add eax, 0x8559a31
sub eax, 0xc7e4a9e2
sub eax, 0x381b90a6
inc eax
add eax, 0x53
sub eax, 3
add eax, 0xffffffb2
xor esi, dword [eax]
mov ebx, edx
shr ebx, 8
mov dword [ebp + 8], esi
movzx esi, bl
mov ebx, dword [ebp + 0xc]
mov esi, dword [esi*4 + 0x47e400]
shr ebx, 0x10
movzx ebx, bl
xor esi, dword [ebx*4 + 0x47e800]
mov ebx, dword [ebp - 0xc]
shr ebx, 0x18
xor esi, dword [ebx*4 + 0x47ec00]
movzx ebx, cl
xor esi, dword [ebx*4 + 0x47e000]
mov ebx, edx
xor esi, dword [eax + 4]
shr ebx, 0x10
mov dword [ebp - 4], esi
movzx esi, bl
mov esi, dword [esi*4 + 0x47e800]
mov ebx, dword [ebp + 0xc]
shr ebx, 0x18
xor esi, dword [ebx*4 + 0x47ec00]
mov ebx, ecx
mov dword [ebp - 8], esi
shr ebx, 8
movzx esi, bl
mov esi, dword [esi*4 + 0x47e400]
xor dword [ebp - 8], esi
movzx ebx, byte [ebp - 0xc]
mov esi, dword [ebp - 8]
xor esi, dword [ebx*4 + 0x47e000]
mov ebx, dword [ebp - 0xc]
xor esi, dword [eax + 8]
mov edi, dword [edi + 0x200]
shr edx, 0x18
mov edx, dword [edx*4 + 0x47ec00]
shr ebx, 8
mov dword [ebp - 8], esi
shr ecx, 0x10
movzx esi, bl
xor edx, dword [esi*4 + 0x47e400]
movzx ecx, cl
xor edx, dword [ecx*4 + 0x47e800]
movzx ecx, byte [ebp + 0xc]
xor edx, dword [ecx*4 + 0x47e000]
xor edx, dword [eax + 0xc]
mov ebx, 0x5c152aef
sub ebx, 0xa6995256
add ebx, 0xffffdfa5
sub ebx, 0xffffdfd8
sub ebx, 0xb57c25ee
add ebx, 0x4d9d
add ebx, 0x16
add ebx, 0xffffffdf
cmp edi, ebx
jle 0x4184ab
mov ecx, dword [ebp - 8]
mov ebx, dword [ebp - 4]
shr ebx, 0x10
movzx esi, bl
shr ecx, 8
movzx ecx, cl
mov ecx, dword [ecx*4 + 0x47e400]
xor ecx, dword [esi*4 + 0x47e800]
mov esi, dword [ebp + 8]
shr esi, 0x18
xor ecx, dword [esi*4 + 0x47ec00]
movzx esi, dl
xor ecx, dword [esi*4 + 0x47e000]
mov ebx, edx
shr ebx, 8
movzx esi, bl
mov esi, dword [esi*4 + 0x47e400]
mov ebx, dword [ebp - 8]
shr ebx, 0x10
movzx ebx, bl
xor esi, dword [ebx*4 + 0x47e800]
movzx ebx, byte [ebp + 8]
mov dword [ebp + 0xc], esi
mov esi, dword [ebp - 4]
shr esi, 0x18
mov esi, dword [esi*4 + 0x47ec00]
xor dword [ebp + 0xc], esi
mov esi, dword [ebp + 0xc]
xor esi, dword [ebx*4 + 0x47e000]
mov ebx, edx
xor esi, dword [eax + 0x14]
shr ebx, 0x10
mov dword [ebp - 0xc], esi
movzx esi, bl
mov esi, dword [esi*4 + 0x47e800]
mov ebx, dword [ebp - 8]
shr ebx, 0x18
xor esi, dword [ebx*4 + 0x47ec00]
mov ebx, dword [ebp + 8]
shr ebx, 8
mov dword [ebp + 0xc], esi
movzx esi, bl
mov esi, dword [esi*4 + 0x47e400]
xor dword [ebp + 0xc], esi
movzx ebx, byte [ebp - 4]
mov esi, dword [ebp + 0xc]
xor esi, dword [ebx*4 + 0x47e000]
mov ebx, dword [ebp - 4]
xor esi, dword [eax + 0x18]
shr ebx, 8
xor ecx, dword [eax + 0x10]
mov dword [ebp + 0xc], esi
movzx esi, bl
mov ebx, dword [ebp + 8]
shr ebx, 0x10
shr edx, 0x18
mov edx, dword [edx*4 + 0x47ec00]
xor edx, dword [esi*4 + 0x47e400]
movzx esi, bl
xor edx, dword [esi*4 + 0x47e800]
movzx esi, byte [ebp - 8]
xor edx, dword [esi*4 + 0x47e000]
mov ebx, dword [ebp + 0xc]
xor edx, dword [eax + 0x1c]
shr ebx, 8
movzx esi, bl
mov ebx, dword [ebp - 0xc]
mov esi, dword [esi*4 + 0x47e400]
shr ebx, 0x10
movzx ebx, bl
xor esi, dword [ebx*4 + 0x47e800]
mov ebx, ecx
shr ebx, 0x18
xor esi, dword [ebx*4 + 0x47ec00]
movzx ebx, dl
xor esi, dword [ebx*4 + 0x47e000]
add eax, 0x39
dec eax
sub eax, 0xfffffffc
add eax, 0xffffffda
sub eax, 0xdd2a0dd4
sub eax, 0x22d5f22d
add eax, 1
inc eax
sub eax, 0
add eax, 0x3760
add eax, 0xffffc84c
sub eax, 0xa9acb283
add eax, 0xa9acb2e0
xor esi, dword [eax]
mov ebx, edx
mov dword [ebp + 8], esi
shr ebx, 8
movzx esi, bl
mov esi, dword [esi*4 + 0x47e400]
mov ebx, dword [ebp + 0xc]
shr ebx, 0x10
movzx ebx, bl
xor esi, dword [ebx*4 + 0x47e800]
mov ebx, dword [ebp - 0xc]
shr ebx, 0x18
xor esi, dword [ebx*4 + 0x47ec00]
movzx ebx, cl
xor esi, dword [ebx*4 + 0x47e000]
mov ebx, edx
xor esi, dword [eax + 4]
shr ebx, 0x10
mov dword [ebp - 4], esi
movzx esi, bl
mov esi, dword [esi*4 + 0x47e800]
mov ebx, dword [ebp + 0xc]
shr ebx, 0x18
xor esi, dword [ebx*4 + 0x47ec00]
mov ebx, ecx
shr ebx, 8
movzx ebx, bl
xor esi, dword [ebx*4 + 0x47e400]
movzx ebx, byte [ebp - 0xc]
xor esi, dword [ebx*4 + 0x47e000]
mov ebx, dword [ebp - 0xc]
xor esi, dword [eax + 8]
shr edx, 0x18
mov edx, dword [edx*4 + 0x47ec00]
shr ebx, 8
mov dword [ebp - 8], esi
shr ecx, 0x10
movzx esi, bl
xor edx, dword [esi*4 + 0x47e400]
movzx ecx, cl
xor edx, dword [ecx*4 + 0x47e800]
movzx ecx, byte [ebp + 0xc]
xor edx, dword [ecx*4 + 0x47e000]
xor edx, dword [eax + 0xc]
mov esi, edi
mov ecx, 0xffffffee
sub ecx, 0xffffffff
sub ecx, 0xffffa991
add ecx, 0xffffa9ae
mov ebx, ecx
sub esi, ebx
jle 0x418905
mov ecx, dword [ebp - 8]
mov ebx, dword [ebp - 4]
shr ebx, 0x10
movzx esi, bl
shr ecx, 8
movzx ecx, cl
mov ecx, dword [ecx*4 + 0x47e400]
xor ecx, dword [esi*4 + 0x47e800]
mov esi, dword [ebp + 8]
shr esi, 0x18
xor ecx, dword [esi*4 + 0x47ec00]
movzx esi, dl
xor ecx, dword [esi*4 + 0x47e000]
mov ebx, edx
shr ebx, 8
movzx esi, bl
mov esi, dword [esi*4 + 0x47e400]
mov ebx, dword [ebp - 8]
shr ebx, 0x10
movzx edi, bl
xor esi, dword [edi*4 + 0x47e800]
movzx edi, byte [ebp + 8]
mov dword [ebp + 0xc], esi
mov esi, dword [ebp - 4]
shr esi, 0x18
mov esi, dword [esi*4 + 0x47ec00]
xor dword [ebp + 0xc], esi
mov esi, dword [ebp + 0xc]
xor esi, dword [edi*4 + 0x47e000]
mov edi, dword [ebp - 8]
xor esi, dword [eax + 0x14]
mov ebx, edx
mov dword [ebp - 0xc], esi
shr ebx, 0x10
movzx esi, bl
mov esi, dword [esi*4 + 0x47e800]
mov ebx, dword [ebp + 8]
shr edi, 0x18
xor esi, dword [edi*4 + 0x47ec00]
movzx edi, byte [ebp - 4]
mov dword [ebp + 0xc], esi
shr ebx, 8
movzx esi, bl
mov esi, dword [esi*4 + 0x47e400]
xor dword [ebp + 0xc], esi
mov esi, dword [ebp + 0xc]
xor esi, dword [edi*4 + 0x47e000]
mov ebx, dword [ebp - 4]
xor esi, dword [eax + 0x18]
xor ecx, dword [eax + 0x10]
mov dword [ebp + 0xc], esi
shr ebx, 8
movzx esi, bl
mov ebx, dword [ebp + 8]
shr edx, 0x18
mov edx, dword [edx*4 + 0x47ec00]
xor edx, dword [esi*4 + 0x47e400]
shr ebx, 0x10
movzx esi, bl
xor edx, dword [esi*4 + 0x47e800]
movzx esi, byte [ebp - 8]
xor edx, dword [esi*4 + 0x47e000]
mov ebx, dword [ebp + 0xc]
xor edx, dword [eax + 0x1c]
shr ebx, 8
jl 0x4185fa
jge 0x4185fa
mov al, al
pop edi
jmp 0x1218a6bd
movzx esi, bl
mov ebx, dword [ebp - 0xc]
mov esi, dword [esi*4 + 0x47e400]
shr ebx, 0x10
movzx edi, bl
xor esi, dword [edi*4 + 0x47e800]
mov edi, ecx
shr edi, 0x18
xor esi, dword [edi*4 + 0x47ec00]
movzx edi, dl
xor esi, dword [edi*4 + 0x47e000]
sub eax, 0xf6cec1c9
sub eax, 0xffff9310
add eax, 0xffffff57
sub eax, 0xffffff83
sub eax, 0x95ee603
dec eax
add eax, 0x8f4cfede
sub eax, 0x85ee18d5
add eax, 0x90f40d47
add eax, 0x6f0bf23f
add eax, 1
inc eax
add eax, 0xf6ce5564
inc eax
sub eax, 0xffffffcd
xor esi, dword [eax]
mov ebx, edx
mov dword [ebp + 8], esi
shr ebx, 8
mov esi, dword [eax + 0xc]
movzx esi, bl
mov ebx, dword [ebp + 0x10]
xor ebx, edi
sub ebx, 6
add ebx, 0xffffffff
add ebx, 1
sub ebx, 0xffffc523
add ebx, 0xffffc514
mov ebx, esp
add ebx, edi
imul ebx, ebp, 0xd200e4b5
mov ebx, edi
lea ebx, [ebp + edi*2]
seta bl
add ebx, esi
lea ebx, [edx + edx*8]
mov ebx, ecx
mov esi, dword [esi*4 + 0x47e400]
mov ebx, dword [ebp + 0xc]
shr ebx, 0x10
movzx edi, bl
sete bl
inc ebx
add ebx, 0x1b
mov ebx, dword [eax + 0x14]
adc ebx, 0x39aa
sub ebx, 1
mov ebx, ebp
dec ebx
add ebx, 0xfffffffc
adc ebx, 0x67
add bl, byte [eax + 8]
mov ebx, dword [ebp - 8]
shr ebx, 0xa2
xor bl, 0xbc
mov ebx, esi
sub ebx, 0xc46cd884
sub ebx, 2
mov ebx, dword [eax]
adc ebx, ecx
sub ebx, 0xfffffffc
add ebx, 0xfffffff7
mov ebx, dword [eax + 0x10]
sub ebx, ecx
xor ebx, esi
mov ebx, dword [eax + 0x1c]
or ebx, 0x65f3
mov ebx, dword [eax + 0xc]
xor ebx, ebp
setl bl
sub ebx, 0xffffffff
mov ebx, dword [eax + 0x1c]
inc ebx
sub ebx, 0xfffffffd
mov ebx, dword [ebp - 8]
lea ebx, [ebp + ebx*4 - 0x526b]
mov ebx, dword [ebp - 8]
mov ebx, ebp
cmp eax, ebx
mov ebx, dword [eax + 8]
lea ebx, [esp + edx*4 - 3]
sub ebx, 0xb41c1214
sub ebx, 2
add ebx, 1
sub ebx, 0xffffff8c
sub ebx, 0xfffffffe
test esi, ebp
lea ebx, [edx + ebx*2 - 0x22]
setl bl
setne bl
mov ebx, esi
shl ebx, cl
shr ebx, 0x72
lea ebx, [esi + ebp*8 - 0x3b]
mov ebx, dword [eax + 0xc]
sub ebx, 0xf368c998
sub ebx, 0xffffffcc
shl ebx, 0xfd
add ebx, 0xffffffff
lea ebx, [ebp - 0x56]
sub ebx, edi
mov ebx, dword [eax + 0x14]
lea ebx, [edx + 0xc]
add ebx, dword [eax + 0x10]
xor ebx, esi
add ebx, 0xfffffffd
sub ebx, 0xfffffffc
inc ebx
sub ebx, 0x6d
mov ebx, dword [eax + 0x10]
shl ebx, 0xfb
or ebx, edi
add ebx, 0xffffffd1
add ebx, 0x28
mov ebx, dword [ebp - 0xc]
shl ebx, 3
shr ebx, 4
movsx ebx, byte [eax + 8]
xor esi, dword [edi*4 + 0x47e800]
add ebx, 1
cmp esp, 0xe
sbb ebx, ebp
mov ebx, edx
xor ebx, edi
inc ebx
setne bl
mov ebx, 0x2959
cmp dword [ebp + 0xc], ebx
setge bl
xor ebx, esi
sub ebx, 1
sub ebx, 0xffffffff
mov ebx, eax
cmp dword [eax + 0x18], ebx
lea ebx, [esp + ebp*8]
adc ebx, 0xffffffc2
mov edi, dword [ebp - 0xc]
xor ebx, ebx
mov bl, bl
shr edi, 0x18
mov ebx, edi
shr ebx, 0xf9
xor esi, dword [edi*4 + 0x47ec00]
mov ebx, ecx
neg ebx
movzx edi, cl
sar ebx, 0xf9
add ebx, 0xffffffff
inc ebx
xor esi, dword [edi*4 + 0x47e000]
add ebx, 1
and ebx, 0x72ba767f
mov edi, dword [ebp + 0xc]
and ebx, 0xffffffd9
mov ebx, dword [eax + 0xc]
xor esi, dword [eax + 4]
cmp esp, ebp
sete bl
mov ebx, edx
nop
test ebp, ebx
mov dword [ebp - 4], esi
xor esi, esi
shr ebx, 0x10
mov esi, dword [ebp + 0xc]
xor esi, edi
movzx esi, bl
xor ebx, esi
mov ebx, 0x2bf18d3a
sub ebx, 0x2bf18db9
mov esi, dword [esi*4 + 0x47e800]
nop
add ebx, 0xffffbb96
sub ebx, 0xffffbbb3
mov ebx, ecx
shr edi, 0x18
xor esi, dword [edi*4 + 0x47ec00]
shr ebx, 8
movzx edi, bl
mov ebx, dword [ebp + 8]
shr ebx, 5
xor esi, dword [edi*4 + 0x47e400]
mov ebx, dword [ebp + 0x10]
cmp ebx, ebx
lea ebx, [eax + eax + 0x1b57205d]
mov ebx, dword [ebp - 0xc]
movzx edi, bl
xor esi, dword [edi*4 + 0x47e000]
nop
shr edx, 0x18
xor esi, dword [eax + 8]
cmp dword [eax + 0x18], 0xfffffffd
mov edx, dword [edx*4 + 0x47ec00]
nop
shr ebx, 8
test ebp, edi
setne byte [ebp - 8]
mov dword [ebp - 8], esi
sub esi, 0x1db708e5
add esi, 0x46e2fb0a
mov esi, esp
shr ecx, 0x10
mov esi, dword [eax + 0x18]
xor esi, 0xf73d27cb
movzx esi, bl
mov ebx, dword [ebp - 8]
shl ebx, 0
xor edx, dword [esi*4 + 0x47e400]
shr ebx, 0xfc
mov ebx, dword [ebp - 4]
movzx ecx, cl
mov ebx, dword [eax + 0x1c]
and ebx, esi
xor edx, dword [ecx*4 + 0x47e800]
mov ebx, dword [eax]
shl ebx, 0
movzx ecx, byte [ebp + 0xc]
sub ebx, 0xffffffff
mov bx, ax
xor edx, dword [ecx*4 + 0x47e000]
setge bl
xor edx, dword [eax + 0xc]
shr ebx, 0
test esp, ebx
lea ebx, [edi + ebp*8]
setge cl
mov ecx, dword [ebp + 8]
mov ebx, dword [ebp - 4]
lea esi, [esi + esi - 3]
sar edi, 0xde
shr ebx, 0x10
mov esi, dword [eax]
movzx esi, bl
xor ebx, ebp
cmp ebx, ecx
mov ebx, dword [ebp - 8]
inc edi
mov di, bx
shr ecx, 0x18
inc edi
cmp ecx, dword [ebp - 8]
mov ecx, dword [ecx*4 + 0x47bfc0]
xor edi, edx
mov edi, edi
shr ebx, 8
and edi, 0xffffffa5
lea edi, [eax + edi*2 - 2]
call fcn.004185dc
mov edi, dword [esi*4 + 0x47bfc0]
xor edi, ebp
movzx esi, dl
mov edi, edi
shl edi, cl
shr ebx, 0x10
mov edi, dword [ebp + 8]
xor edi, ecx
movzx edi, bl
shl ecx, 8
sub ebx, 0xfffffffe
sbb ebx, esp
xor ecx, dword [esi*4 + 0x47bfc0]
lea ebx, [edi - 0x38]
test ecx, ecx
mov esi, dword [ebp - 4]
xor ebx, edx
mov ebx, dword [ebp - 0xc]
shr esi, 0x18
add ebx, 0x8189ecc2
lea ebx, [eax + eax*2]
mov esi, dword [esi*4 + 0x47bfc0]
lea ebx, [esi*8 - 0x371f]
movzx ebx, word [eax + 4]
shl esi, 8
sub ebx, 0x18
movzx ebx, word [edi*4 + reloc.wtsapi32.dll_WTSSetSessionInformationW]
xor esi, dword [edi*4 + 0x47bfc0]
shr ebx, 0xce
xor ebx, ebp
mov ebx, edx
shl esi, 8
cmp eax, edi
shr ebx, 8
movzx edi, bl
inc ebx
mov ebx, 1
xor esi, dword [edi*4 + 0x47bfc0]
mov ebx, edx
lea ebx, [eax]
movzx edi, byte [ebp + 8]
shl esi, 8
movzx ebx, word [edi*4 + reloc.wtsapi32.dll_WTSSetSessionInformationW]
xor ebx, edi
mov dword [ebp + 0xc], esi
sub ebx, 0xfffffff9
inc ebx
xor esi, dword [edi*4 + 0x47bfc0]
shr ebx, 6
and ebx, 0x19
mov ebx, edx
xor esi, dword [eax + 0x14]
mov dword [ebp - 0xc], esp
and dword [ebp - 0xc], 0xffffffc0
shr ebx, 0x10
and dword [ebp - 0xc], 0xfffffffb
or dword [ebp - 0xc], eax
mov dword [ebp - 0xc], esi
mov esi, dword [ebp - 8]
shr esi, 0x18
test eax, ebp
mov esi, dword [esi*4 + 0x47bfc0]
shl esi, 8
nop
movzx edi, bl
test edx, ecx
setg bl
xor esi, dword [edi*4 + 0x47bfc0]
cmp edi, ecx
lea ebx, [edi + ebp*8 + 0x13bb]
mov ebx, dword [ebp + 8]
shl esi, 8
xor ecx, dword [eax + 0x10]
mov byte [ebp + 0xc], dl
and dword [ebp + 0xc], 0x2067b830
shr ebx, 8
sub dword [ebp + 0xc], eax
cmp dword [eax + 0x18], esi
mov dword [ebp + 0xc], esi
movzx edi, bl
mov ebx, dword [eax]
shl ebx, 0x9b
xor esi, dword [edi*4 + 0x47bfc0]
mov ebx, dword [eax + 0xc]
xor ebx, eax
movzx edi, byte [ebp - 4]
cmp edi, ebx
lea ebx, [ecx]
mov ebx, dword [ebp + 8]
and dword [ebp + 0xc], 0
mov dword [ebp + 0xc], esp
shl esi, 8
or byte [ebp + 0xc], 0x26
cmp eax, esp
mov dword [ebp + 0xc], esi
xor esi, dword [edi*4 + 0x47bfc0]
shr edx, 0x18
test esp, ecx
xor esi, dword [eax + 0x18]
cmp dword [eax + 8], esi
mov edx, dword [edx*4 + 0x47bfc0]
or dword [ebp + 0xc], ebp
mov dword [ebp + 0xc], esp
shr ebx, 0x10
test edx, esi
setne byte [ebp + 0xc]
mov dword [ebp + 0xc], esi
imul esi, edx
mov esi, ebp
shl edx, 8
add esi, esp
mov esi, dword [eax + 0x10]
movzx esi, bl
inc ebx
mov ebx, edx
xor edx, dword [esi*4 + 0x47bfc0]
inc ebx
test ecx, ecx
mov ebx, dword [ebp - 4]
cmp ebp, 0x5b
shr ebx, 8
shl edx, 8
movzx esi, bl
inc ebx
mov ebx, edx
xor edx, dword [esi*4 + 0x47bfc0]
shr ebx, 0xac
mov ebx, dword [eax + 0x14]
movzx esi, byte [ebp - 8]
shl edx, 8
nop
sete bl
xor edx, dword [esi*4 + 0x47bfc0]
cmp dword [eax + 0x10], ebx
setne bl
mov esi, dword [ebp + 0x10]
seta bl
xor edx, dword [eax + 0x1c]
test edx, esp
setne bl
mov eax, ecx
lea ebx, [eax + esi*2 + 0x1d79da6b]
xchg ebx, ebx
shr eax, 0x18
sub ebx, 0xffffffd4
not ebx
mov byte [esi], al
mov eax, ecx
xor ebx, ecx
mov ebx, edi
shr eax, 0x10
sub ebx, 0xfffffffa
test ecx, esi
mov byte [esi + 1], al
mov eax, ecx
xor ebx, esi
mov ebx, dword [ebp + 0xc]
shr eax, 8
sub ebx, 0xfffffcd3
cmp dword [ebp + 8], ebx
mov byte [esi + 3], cl
mov byte [esi + 2], al
mov eax, dword [ebp - 0xc]
xchg ebx, ecx
mov ecx, eax
sete bl
shr ecx, 0x18
sub ebx, ecx
xor ebx, edi
mov byte [esi + 4], cl
mov ecx, eax
xor ebx, esp
mov ebx, dword [ebp - 4]
shr ecx, 0x10
lea ebx, [ebp + ecx*8 - 0xe85]
shr ebx, 0x92
mov byte [esi + 5], cl
mov ecx, eax
and ebx, 6
xor ebx, esp
shr ecx, 8
sub ebx, 4
imul ebx, edi, 0xffffc41b
mov byte [esi + 6], cl
mov byte [esi + 7], al
not ebx
and eax, 0x5bd1c5ab
mov eax, dword [ebp + 0xc]
mov ecx, eax
xor ebx, ebx
mov ebx, 0xffffc269
shr ecx, 0x18
and ebx, 6
inc ebx
mov byte [esi + 8], cl
mov ecx, eax
xor ebx, ebx
mov ebx, dword [ebp - 4]
shr ecx, 0x10
sub ebx, 0xfffffcf4
imul ebx, ebp
mov byte [esi + 9], cl
setge cl
nop
mov ecx, eax
mov byte [esi + 0xb], al
lea eax, [eax + ebp*4]
sar ebx, 0xfc
shr ecx, 8
lea ebx, [ecx - 0x35fb]
inc ebx
mov eax, edx
and ebx, 0xfffffffe
or ebx, 0x2a
shr eax, 0x18
xor ebx, eax
cmp edx, 0xffffff94
mov byte [esi + 0xa], cl
mov byte [esi + 0xc], al
mov ecx, edx
shr ecx, 0x10
mov eax, edx
shr eax, 8
pop edi
mov byte [esi + 0xd], cl
mov byte [esi + 0xe], al
mov byte [esi + 0xf], dl
pop esi
pop ebx
mov esp, ebp
pop ebp
ret