Function at 0x4211d0
Capabilities:
Encode data using xor

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0x454
mov dword [esp + 0x40], 0
mov dword [esp + 0x3c], 0
mov dword [esp + 0x38], 0
mov dword [esp + 0x54], 0xb43bb636
mov dword [esp + 0x58], 0xb012b208
mov dword [esp + 0x5c], 0x8c7d8e04
mov dword [esp + 0x60], 0x88038a30
mov dword [esp + 0x64], 0x84878634
mov byte [esp + 0x68], 0
mov dword [esp], 0
mov eax, dword [esp]
cmp eax, 0x14
ja 0x42125e
nop
nop
mov eax, dword [esp]
mov ecx, dword [esp]
movzx ecx, byte [esp + ecx + 0x54]
add eax, 0x77904d57
xor eax, ecx
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0x2c]
add al, 0x12
mov ecx, dword [esp]
mov byte [esp + ecx + 0x54], al
inc dword [esp]
mov eax, dword [esp]
cmp eax, 0x15
jb 0x421230
lea edi, [esp + 0x54]
lea ecx, [esp + 0x38]
push edi
call fcn.0043a830
shr eax, 0x1f
xor ebx, ebx
jmp dword [eax*4 + 0x445c38]
jmp dword [0x445c40]
mov esi, dword [ebx]
push 0x400
push 0
push edi
call fcn.0040a380
add esp, 0xc
mov eax, esp
lea ecx, [esp + 0x38]
push eax
push 0x400
push edi
push esi
call fcn.0043aed0
cmp eax, 0xc0000000
setae al
cmp dword [esp], 0
sete cl
or cl, al
movzx ecx, cl
xor eax, eax
jmp dword [ecx*4 + 0x445c80]
mov eax, 1
jmp dword [0x445c94]
jmp dword [eax*4 + 0x445c98]
jmp dword [0x445ca8]
mov byte [esp + 0x453], 0
movzx eax, byte [esp + 0x54]
xor ebp, ebp
test al, al
je 0x4212f0
mov ecx, edi
nop
nop
nop
nop
nop
cmp al, 0x2e
je 0x421320
movzx eax, byte [ecx + 1]
inc ecx
test al, al
jne 0x421310
jmp 0x4212f0
mov ebp, ecx
jmp dword [0x445ca8]
xor eax, eax
test ebp, ebp
setne al
jmp dword [eax*4 + 0x445cb0]
movzx eax, byte [ebp + 1]
inc ebp
xor esi, esi
test al, al
je 0x421361
mov ecx, ebp
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp al, 0x2e
je 0x42135f
movzx eax, byte [ecx + 1]
inc ecx
test al, al
jne 0x421350
jmp 0x421361
mov esi, ecx
xor eax, eax
test esi, esi
setne al
jmp dword [eax*4 + 0x445cb8]
mov edx, esi
sub edx, ebp
mov eax, edx
and eax, 3
mov edi, edx
or edi, 3
imul edi, eax
xor eax, 3
mov ecx, edx
and ecx, 0xfffffffc
imul ecx, eax
add edi, ecx
shr edi, 2
movzx eax, byte [esi - 1]
cmp eax, 0x3d
je 0x42139e
cmp eax, 0x2e
jne 0x42139f
dec edi
movzx eax, byte [ebp + edx - 2]
cmp eax, 0x3d
mov dword [esp + 0x10], edx
je 0x4213b2
cmp eax, 0x2e
jne 0x4213b3
dec edi
mov dword [esp + 0x48], ebx
mov dword [esp + 0x44], edi
lea eax, [edi + 1]
push eax
call fcn.0040a300
add esp, 4
mov dword [esp + 0x1c], eax
mov dword [esp + 0x20], ebp
cmp esi, ebp
je 0x4214d0
xor edi, edi
mov esi, 2
jmp 0x421404
mov edx, dword [esp + 0x10]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
lea eax, [esi + 4]
add esi, 2
mov edi, dword [esp + 0x14]
cmp esi, edx
mov esi, eax
jae 0x4214d0
mov ebp, dword [esp + 0x20]
movzx eax, byte [ebp + esi - 2]
push eax
call fcn.00416610
add esp, 4
mov ebx, eax
movzx eax, byte [ebp + esi - 1]
push eax
call fcn.00416610
add esp, 4
mov bh, al
shl bl, 2
shr al, 4
and al, 3
or al, bl
lea ecx, [edi + 1]
mov dword [esp + 0x14], ecx
mov ecx, dword [esp + 0x1c]
mov dword [esp + 0x50], edi
mov byte [ecx + edi], al
mov edx, dword [esp + 0x10]
cmp esi, edx
jae 0x4213f0
mov eax, dword [esp + 0x20]
movzx eax, byte [eax + esi]
push eax
call fcn.00416610
mov edx, dword [esp + 0x14]
add esp, 4
cmp al, 0x40
je 0x4213f0
mov bl, al
shl bh, 4
xor al, 0xc0
mov ecx, ebx
or cl, 0x3c
and cl, al
shr cl, 2
add cl, bh
mov ebp, dword [esp + 0x50]
lea eax, [ebp + 2]
mov dword [esp + 0x14], eax
mov edi, dword [esp + 0x1c]
mov byte [edi + ebp + 1], cl
lea eax, [esi + 1]
cmp eax, edx
jae 0x4213f0
mov eax, dword [esp + 0x20]
movzx eax, byte [eax + esi + 1]
push eax
call fcn.00416610
add esp, 4
cmp al, 0x40
je 0x4213e0
shl bl, 6
add al, bl
mov ecx, ebp
and ecx, 1
mov edx, dword [esp + 0x14]
or edx, 1
add edx, ecx
mov dword [esp + 0x14], edx
mov byte [edi + ebp + 2], al
jmp 0x4213e0
mov eax, dword [esp + 0x44]
mov esi, dword [esp + 0x1c]
mov byte [esi + eax], 0
push esi
call fcn.00402fa0
add esp, 4
mov ebx, eax
jmp dword [0x445cc0]
push esi
call fcn.0040a310
add esp, 4
push ebx
call fcn.00403a20
add esp, 4
xor ecx, ecx
test eax, eax
setne cl
lea edi, [esp + 0x54]
mov esi, dword [esp + 0x18]
jmp dword [ecx*4 + 0x445cc8]
jmp 0x4215e9
mov dword [esp], 0xe6475150
mov byte [esp + 4], 0
mov dword [esp + 0xc], 0
mov ecx, dword [esp + 0xc]
cmp ecx, 4
ja 0x421573
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0xc]
movzx edx, byte [esp + edx]
add ecx, 0x4213ca8b
xor ecx, edx
mov dword [esp + 8], ecx
mov ecx, dword [esp + 8]
add cl, 0x98
mov edx, dword [esp + 0xc]
mov byte [esp + edx], cl
inc dword [esp + 0xc]
mov ecx, dword [esp + 0xc]
cmp ecx, 5
jb 0x421540
mov ecx, esp
push ecx
push eax
call fcn.004037e0
add esp, 8
xor ecx, ecx
test eax, eax
setne cl
jmp dword [ecx*4 + 0x445cd0]
jmp 0x4215b6
movzx ecx, byte [eax]
test cl, cl
je 0x4215ab
inc eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [esi], cl
inc esi
movzx ecx, byte [eax]
inc eax
test cl, cl
jne 0x4215a0
mov byte [esi], 0
mov word [esi], 0x203a
add esi, 2
movzx eax, byte [esp + 0x54]
test al, al
je 0x4215db
lea ecx, [esp + 0x55]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [esi], al
inc esi
movzx eax, byte [ecx]
inc ecx
test al, al
jne 0x4215d0
mov byte [esi], 0xa
inc esi
mov dword [esp + 0x18], esi
mov al, 1
mov dword [esp + 0x28], eax
push ebx
call fcn.00403fd0
add esp, 4
mov ebx, dword [esp + 0x48]
mov eax, dword [case.0x421871.16]
nop
nop
nop
nop
nop
jmp eax
mov eax, dword [case.0x421368.15]
nop
nop
nop
nop
nop
nop
nop
nop
nop
jmp eax
add ebx, 4
xor eax, eax
mov esi, dword [esp + 0x4c]
cmp ebx, esi
setne al
jmp dword [eax*4 + 0x445c60]
jmp dword [0x445c70]
mov ebx, dword [esp + 0x28]
mov eax, ebx
and al, 1
movzx eax, al
jmp dword [eax*4 + 0x445c78]
mov esi, dword [esp + 0x24]
jmp dword [0x445cf8]
mov edi, dword [esp + 0x18]
mov byte [edi], 0
mov dword [esp + 0x54], 0x3c393a14
mov dword [esp + 0x58], 0xc83a3b30
mov dword [esp + 0x5c], 0xcd333334
mov dword [esp + 0x60], 0x27d1336e
mov dword [esp + 0x64], 0x34682924
mov dword [esp + 0x68], 0x262e2326
mov dword [esp + 0x6c], 0xd8dd60de
mov dword [esp + 0x70], 0x6ee3
mov byte [esp + 0x74], 0
mov esi, dword [esp + 0x24]
sub edi, esi
mov dword [esp + 8], 0
mov eax, dword [esp + 8]
cmp eax, 0x20
ja 0x4216fe
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esp + 8]
mov ecx, dword [esp + 8]
movzx ecx, byte [esp + ecx + 0x54]
lea edx, [eax + ecx]
add eax, 0xc4
and eax, ecx
add eax, eax
sub edx, eax
add edx, 0x797f8fc4
mov dword [esp], edx
mov eax, dword [esp]
add al, 0x71
mov ecx, dword [esp + 8]
mov byte [esp + ecx + 0x54], al
inc dword [esp + 8]
mov eax, dword [esp + 8]
cmp eax, 0x21
jb 0x4216c0
lea eax, [esp + 0x54]
mov ecx, dword [esp + 0x468]
push edi
push esi
push eax
call fcn.0040ac30
mov ebx, eax
jmp dword [0x445cf8]
push esi
call fcn.0040a310
add esp, 4
and bl, 1
mov edi, ebx
mov ebx, dword [esp + 0x2c]
mov esi, dword [esp + 0x30]
test ebx, ebx
jne 0x42187e
jmp 0x42188b
mov eax, esi
sub eax, ebx
sar eax, 2
mov ecx, eax
and ecx, 0xfffffbde
mov edx, eax
and edx, 0x421
or eax, 0x421
imul eax, edx
xor edx, 0x421
imul edx, ecx
add eax, edx
push eax
call fcn.0040a300
add esp, 4
mov dword [esp + 0x28], 0
xor ecx, ecx
cmp ebx, esi
setne cl
mov dword [esp + 0x24], eax
mov dword [esp + 0x18], eax
jmp dword [ecx*4 + 0x445c60]
not eax
shr eax, 0x1f
xor ebx, ebx
jmp dword [eax*4 + 0x445c50]
mov dword [esp + 0x54], 0xb86fb689
mov dword [esp + 0x58], 0x82b855b2
mov dword [esp + 0x5c], 0xbeb9bf5d
mov dword [esp + 0x60], 0xabb4b051
mov dword [esp + 0x64], 0x92575ca8
mov dword [esp + 0x68], 0xa34a4049
mov dword [esp + 0x6c], 0xa0a540a4
mov dword [esp + 0x70], 0xa44ba247
mov dword [esp + 0x74], 0x34beb8bc
mov dword [esp + 0x78], 0xdc371dc5
mov dword [esp + 0x7c], 0x6718313d
mov word [esp + 0x80], 0
mov dword [esp], 0
mov eax, dword [esp]
cmp eax, 0x2d
ja 0x42184b
nop
nop
nop
nop
mov eax, dword [esp]
mov ecx, dword [esp]
movzx ecx, byte [esp + ecx + 0x54]
lea edx, [eax + ecx]
add eax, 0x9d
and eax, ecx
add eax, eax
sub edx, eax
add edx, 0x7de9d89d
mov dword [esp + 0x2c], edx
mov eax, dword [esp + 0x2c]
add al, 0x51
mov ecx, dword [esp]
mov byte [esp + ecx + 0x54], al
inc dword [esp]
mov eax, dword [esp]
cmp eax, 0x2e
jb 0x421810
lea eax, [esp + 0x2c]
lea ecx, [esp + 0x38]
push 0
push 0x2b
push edi
push eax
call fcn.0043b050
mov ebx, dword [esp + 0x2c]
mov esi, dword [esp + 0x30]
xor eax, eax
cmp ebx, esi
sete al
mov dword [esp + 0x4c], esi
jmp dword [eax*4 + 0x445c58]
xor edi, edi
test ebx, ebx
je 0x42188b
cmp ebx, esi
je 0x42188b
push ebx
call fcn.0040a310
add esp, 4
mov ebx, edi
lea ecx, [esp + 0x38]
call fcn.0043abd0
mov eax, ebx
add esp, 0x454
pop esi
pop edi
pop ebx
pop ebp
ret
lea ecx, [esp + 0x38]
push 0x410
call fcn.0043aa60
lea ecx, [esp + 0x38]
push 0x410
call fcn.0043aa60
jmp dword [0x445c48]
mov eax, dword [case.0x421d66.14]
nop
nop
nop
nop
nop
nop
nop
jmp eax
xor eax, eax
mov ecx, dword [ebp - 0x18]
test ecx, ecx
sete al
jmp dword [eax*4 + 0x445d78]
mov eax, ecx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov esi, eax
add eax, 2
cmp word [esi], 0
jne 0x421970
sub esi, ecx
lea edi, [esi + 0x26]
jmp dword [0x445d90]
xor ebx, ebx
test ecx, ecx
sete bl
xor edx, edx
jmp dword [ebx*4 + 0x445d60]
jmp dword [edx*4 + 0x445d00]
mov dword [ebp - 0xa4], 0xfa2df429
mov dword [ebp - 0xa0], 0xfe36f832
mov dword [ebp - 0x9c], 0x8256fc32
mov dword [ebp - 0x98], 0x86518055
mov dword [ebp - 0x94], 0x8a57845a
mov dword [ebp - 0x90], 0x8e48885a
mov dword [ebp - 0x8c], 0x925b8c48
mov dword [ebp - 0x88], 0x9645905e
mov dword [ebp - 0x84], 0x9a47945e
mov dword [ebp - 0x80], 0x9e4e984c
mov dword [ebp - 0x7c], 0xa2779c57
mov dword [ebp - 0x78], 0xa660a078
mov dword [ebp - 0x74], 0xaa60a473
mov dword [ebp - 0x70], 0xae75a875
mov dword [ebp - 0x6c], 0xb25fac4a
mov dword [ebp - 0x68], 0xb65cb04b
mov dword [ebp - 0x64], 0xba6eb469
mov dword [ebp - 0x60], 0xbe54b84d
mov dword [ebp - 0x5c], 0x42b0bc5a
mov word [ebp - 0x58], 0x4041
mov dword [ebp - 0x56], 0
mov dword [ebp - 0x10], 0
mov ecx, dword [ebp - 0x10]
cmp ecx, 0x51
ja 0x421aa4
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, dword [ebp - 0x10]
mov edx, dword [ebp - 0x10]
movzx edx, byte [ebp + edx - 0xa4]
add ecx, 0x1e7bfc36
xor ecx, edx
mov dword [ebp - 0x14], ecx
mov ecx, dword [ebp - 0x14]
add cl, 0x3d
mov edx, dword [ebp - 0x10]
mov byte [ebp + edx - 0xa4], cl
inc dword [ebp - 0x10]
mov ecx, dword [ebp - 0x10]
cmp ecx, 0x52
jb 0x421a70
lea ecx, [ebp - 0x34]
lea edx, [ebp - 0xa4]
push 0
push 0
push eax
push ecx
push edx
call fcn.0043f290
add esp, 0x14
shr eax, 0x1f
jmp dword [eax*4 + 0x445d08]
jmp dword [0x445d10]
lea eax, [ebp - 0xbc]
lea ecx, [ebp - 0xd4]
push eax
push ecx
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x34]
call fcn.0043f6f0
add esp, 0x24
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
lea ebx, [ebp - 0xbc]
lea eax, [ebp - 0xd4]
push ebx
push eax
push 0
push 0
push 0
push 0
push 0
push 0
push dword [ebp - 0x34]
call fcn.0043f6f0
add esp, 0x24
jmp dword [0x445d18]
not eax
shr eax, 0x1f
jmp dword [eax*4 + 0x445d20]
mov ecx, dword [ebp - 0xbc]
lea eax, [ecx*2 + 2]
inc ecx
jns 0x421b4c
mov eax, 0xffffffff
push eax
call fcn.0040a300
add esp, 4
mov esi, eax
mov dword [ebp - 0xa4], 0xce73c08a
mov dword [ebp - 0xa0], 0xca71cc70
mov dword [ebp - 0x9c], 0xd67dc86a
mov dword [ebp - 0x98], 0xd285d463
mov dword [ebp - 0x94], 0xde6dd072
mov dword [ebp - 0x90], 0xdadddc77
mov dword [ebp - 0x10], 0
mov eax, dword [ebp - 0x10]
cmp eax, 0x17
ja 0x421be2
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x10]
movzx ecx, byte [ebp + ecx - 0xa4]
add eax, 0x37df3365
xor eax, ecx
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x14]
add al, 0x5a
mov ecx, dword [ebp - 0x10]
mov byte [ebp + ecx - 0xa4], al
inc dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
cmp eax, 0x18
jb 0x421bb0
push ebx
push esi
push 0
lea eax, [ebp - 0xa4]
push eax
push dword [ebp - 0x34]
call fcn.0043fd00
add esp, 0x14
shr eax, 0x1f
mov dword [ebp - 0x18], esi
jmp dword [eax*4 + 0x445d28]
mov dword [ebp - 0x18], 0
jmp dword [0x445d30]
push esi
call fcn.0040a310
add esp, 4
nop
nop
nop
nop
nop
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0xa4], 0x1c1b1a19
mov word [ebp - 0xa0], 0
mov dword [ebp - 0x10], 0
mov ecx, dword [ebp - 0x10]
cmp ecx, 5
ja 0x421c84
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, dword [ebp - 0x10]
mov edx, dword [ebp - 0x10]
movzx edx, byte [ebp + edx - 0xa4]
add ecx, 0x4996fb31
xor ecx, edx
mov dword [ebp - 0x14], ecx
mov ecx, dword [ebp - 0x14]
add cl, 0xd7
mov edx, dword [ebp - 0x10]
mov byte [ebp + edx - 0xa4], cl
inc dword [ebp - 0x10]
mov ecx, dword [ebp - 0x10]
cmp ecx, 6
jb 0x421c50
mov ecx, dword [0x44996c]
test ecx, ecx
je 0x421cf0
mov edx, dword [ebp - 0xa4]
xor esi, esi
mov ebx, dword [0x449970]
nop
nop
nop
nop
cmp dword [ebx + esi*8], 0x625b6034
je 0x421cdb
mov edi, esi
and edi, 1
xor esi, 1
lea esi, [esi + edi*2]
cmp esi, ecx
jb 0x421ca0
jmp 0x421cf0
mov ecx, 4
xor ebx, ebx
cmp ecx, 4
setb bl
mov eax, 0x20119
xor edx, edx
jmp dword [ebx*4 + 0x445d58]
mov ecx, dword [ebx + esi*8 + 4]
cmp ecx, edx
jne case.default.0x421cf9
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
xor eax, eax
cmp dword [ebp - 0x18], 0
setne al
jmp dword [eax*4 + 0x445d38]
lea eax, [ebp - 0xa4]
push eax
call fcn.0043e880
add esp, 4
cmp dword [ebp - 0xa4], 1
sete cl
and cl, al
movzx eax, cl
xor edx, edx
xor ecx, ecx
jmp dword [eax*4 + 0x445d40]
mov eax, dword [case.0x421d66.2]
nop
nop
mov ecx, 2
jmp eax
xor ebx, ebx
cmp ecx, 4
setb bl
mov eax, 0x20119
jmp dword [ebx*4 + 0x445d58]
push eax
push 1
push dword [0x449974]
push ecx
call fcn.0043c800
add esp, 0x10
xor eax, eax
cmp dword [ebp - 0x18], 0
setne al
jmp dword [eax*4 + 0x445d38]
mov ecx, 2
xor ebx, ebx
cmp ecx, 4
setb bl
mov eax, 0x20119
xor edx, edx
jmp dword [ebx*4 + 0x445d58]
mov eax, dword [case.0x421d66.21]
xor ebx, ebx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
jmp eax
add ebx, 4
mov ebx, dword [ebx]
xor eax, eax
test ebx, ebx
setne al
jmp dword [eax*4 + 0x445e28]
mov edx, dword [ebx]
cmp dword [ebx + 0x18], 3
jne case.default.0x421dcf
mov esi, dword [ebx + 0x10]
test edx, edx
setne al
test esi, esi
setne cl
and cl, al
movzx eax, cl
jmp dword [eax*4 + 0x445e30]
test edx, edx
setne al
xor ecx, ecx
test ecx, ecx
setne cl
and cl, al
movzx eax, cl
xor esi, esi
jmp dword [eax*4 + 0x445e30]
mov dword [ebp - 0x2c], edx
mov dword [ebp - 0x30], ebx
mov dword [ebp - 0x20], edi
mov eax, esi
nop
nop
nop
nop
nop
mov ecx, eax
inc eax
cmp byte [ecx], 0
jne case.default.0x421e29
sub ecx, esi
inc ecx
shr ecx, 1
mov dword [ebp - 0x50], ecx
lea eax, [ecx + 1]
push eax
call fcn.0040a300
add esp, 4
movsx ecx, byte [esi]
xor edx, edx
test ecx, ecx
setne dl
mov dword [ebp - 0x44], eax
jmp dword [edx*4 + 0x445e38]
mov byte [eax], 0
push 0
push 0x10
push 0
push dword [ebp - 0x2c]
call fcn.004246e0
add esp, 0x10
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x3c], edx
xor edx, edx
mov ecx, dword [case.0x4226ed.16]
xor eax, eax
mov esi, dword [ebp - 0x18]
cmp esi, dword [ebp - 0x20]
setne al
jmp dword [eax*4 + 0x445e48]
or ecx, edx
mov byte [eax], cl
inc eax
movsx ecx, byte [esi]
xor edx, edx
test ecx, ecx
setne dl
jmp dword [edx*4 + 0x445e38]
lea edi, [esi + 1]
mov edx, ecx
or edx, 0x20
lea ebx, [edx - 0x61]
add edx, 0xffffffa9
add ecx, 0xffffffd0
cmp ecx, 0xa
jb 0x421ea1
mov ecx, 0xffffffff
cmp ebx, 6
jb case.default.0x421eb3
mov edx, ecx
movsx ebx, byte [esi + 1]
xor ecx, ecx
test bl, bl
setne cl
jmp dword [ecx*4 + 0x445e40]
mov byte [eax], dl
inc eax
movsx ecx, byte [edi]
xor edx, edx
test ecx, ecx
setne dl
mov esi, edi
jmp dword [edx*4 + 0x445e38]
shl edx, 4
add esi, 2
mov ecx, ebx
or ecx, 0x20
lea edi, [ecx - 0x61]
add ecx, 0xffffffa9
add ebx, 0xffffffd0
cmp ebx, 0xa
jb 0x421eee
mov ebx, 0xffffffff
cmp edi, 6
jb 0x421e70
mov ecx, ebx
jmp 0x421e70
mov edx, dword [esi]
xor edi, edi
jmp dword [edi*4 + 0x445e68]
add esi, 8
xor ebx, ebx
cmp esi, dword [ebp - 0x20]
setne bl
jmp dword [ebx*4 + 0x445e48]
mov edi, dword [esi + 4]
mov ebx, edi
shr ebx, 0x1c
shl edi, 4
or edi, 1
xor ebx, dword [ebp - 0x3c]
xor edi, dword [ebp - 0x2c]
xor eax, eax
or edi, ebx
sete al
jmp dword [eax*4 + 0x445e50]
jmp ecx
mov edi, 1
jmp dword [edi*4 + 0x445e68]
mov eax, dword [case.0x4226ed.23]
mov ebx, dword [ebp - 0x30]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
jmp eax
xor eax, eax
test edx, edx
setne al
jmp dword [eax*4 + 0x445e80]
mov edi, dword [ebp - 0x20]
jmp dword [0x445ea0]
mov eax, dword [ebp - 0xb8]
mov ecx, dword [ebp - 0x50]
mov dword [eax], ecx
mov ecx, dword [ebp - 0x44]
mov dword [eax + 4], ecx
mov eax, 0xffffffff
mov ecx, dword [ebp - 0x48]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp byte [edx + eax + 1], 0
lea eax, [eax + 1]
jne case.default.0x421ff3
mov esi, dword [ebp - 0xcc]
mov dword [esi], eax
mov dword [ebp - 0x2c], edx
mov dword [esi + 4], edx
mov dword [ecx], 0
mov dword [ecx + 4], 0
push 0x6c625980
push dword [0x449978]
mov edi, ecx
call fcn.0043e080
add esp, 8
push edi
push 1
push 0
push 0
push esi
push 0
push dword [ebp - 0xb8]
call eax
xor ecx, ecx
test eax, eax
setne cl
jmp dword [ecx*4 + 0x445e88]
mov edi, dword [ebp - 0x20]
jmp dword [0x445ea0]
mov esi, dword [ebp - 0x2c]
movzx eax, byte [esi]
test al, al
mov edi, dword [ebp - 0x20]
je 0x42202d
inc esi
mov ecx, dword [ebp - 0x48]
mov edx, dword [ebp - 0x24]
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [edx], al
inc edx
movzx eax, byte [esi]
inc esi
test al, al
jne 0x422020
jmp 0x422033
mov ecx, dword [ebp - 0x48]
mov edx, dword [ebp - 0x24]
mov word [edx], 0x203a
mov eax, edx
add eax, 2
mov esi, dword [ecx]
test esi, esi
je 0x42206e
mov ecx, dword [ecx + 4]
mov edx, esi
and edx, 3
je 0x422072
xor edi, edi
nop
movzx ebx, byte [ecx]
cmp bl, 1
sbb ecx, 0xffffffff
mov byte [eax + edi], bl
inc edi
cmp edx, edi
jne 0x422050
add eax, edi
mov edx, esi
sub edx, edi
mov ebx, eax
mov edi, dword [ebp - 0x20]
jmp 0x422074
mov esi, eax
jmp 0x4220b9
mov edx, esi
cmp esi, 4
mov esi, ebx
jb 0x4220b9
nop
nop
nop
nop
nop
movzx ebx, byte [ecx]
cmp bl, 1
sbb ecx, 0xffffffff
mov byte [eax], bl
movzx ebx, byte [ecx]
cmp bl, 1
sbb ecx, 0xffffffff
mov byte [eax + 1], bl
movzx ebx, byte [ecx]
cmp bl, 1
sbb ecx, 0xffffffff
mov byte [eax + 2], bl
movzx ebx, byte [ecx]
cmp bl, 1
sbb ecx, 0xffffffff
lea esi, [eax + 4]
mov byte [eax + 3], bl
mov eax, esi
add edx, 0xfffffffc
jne 0x422080
mov byte [esi], 0xa
inc esi
mov dword [ebp - 0x24], esi
push 0xe050b307
push dword [0x449960]
call fcn.0043e080
add esp, 8
mov ecx, dword [ebp - 0x48]
push dword [ecx + 4]
call eax
mov al, 1
mov dword [ebp - 0x28], eax
mov ebx, dword [ebp - 0x30]
jmp dword [0x445ea0]
push dword [ebp - 0x44]
call fcn.0040a310
add esp, 4
add ebx, 4
mov ebx, dword [ebx]
xor eax, eax
test ebx, ebx
setne al
jmp dword [eax*4 + 0x445e28]
mov edx, dword [ebp - 0x20]
mov dword [edx], 0xa5a8a289
mov dword [edx + 4], 0xaea090b9
mov dword [edx + 8], 0xb58d81e5
mov dword [edx + 0xc], 0x98ffb4a2
mov dword [edx + 0x10], 0xb285b8b8
mov dword [edx + 0x14], 0x8083e0f1
mov dword [edx + 0x18], 0x8d8890b5
mov dword [edx + 0x1c], 0x1f8d
mov dword [ebp - 0x14], 0
mov eax, dword [ebp - 0x14]
cmp eax, 0x1f
ja 0x422180
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x14]
movzx ecx, byte [edx + ecx]
add eax, 0xdd7948c7
xor eax, ecx
mov dword [ebp - 0xa4], eax
mov eax, dword [ebp - 0xa4]
add al, 5
mov ecx, dword [ebp - 0x14]
mov byte [edx + ecx], al
inc dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
cmp eax, 0x20
jb case.default.0x422195
mov ecx, dword [ebp - 0xac]
push edx
call fcn.004244a0
xor ecx, ecx
test eax, eax
setne cl
xor edx, edx
jmp dword [ecx*4 + 0x445dd0]
add eax, 8
xor esi, esi
mov ecx, dword [eax]
xor eax, eax
test ecx, ecx
setne al
mov dword [ebp - 0xb4], 0
xor edi, edi
xor edx, edx
jmp dword [eax*4 + 0x445dd8]
not eax
mov ecx, dword [ebp - 0x40]
mov esi, dword [ebp - 0x38]
mov dword [edx + esi + 4], eax
add edi, 8
add ecx, 4
mov ecx, dword [ecx]
xor eax, eax
test ecx, ecx
setne al
mov esi, edx
jmp dword [eax*4 + 0x445dd8]
mov edx, dword [ecx]
mov eax, dword [ebp - 0x24]
mov dword [eax], edx
mov eax, edi
sub eax, esi
cmp edi, dword [ebp - 0xb4]
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x40], ecx
jne 0x422283
mov ebx, edx
mov dword [ebp - 0x20], edi
mov ecx, eax
sar ecx, 3
lea eax, [ecx + 1]
mov edi, ecx
shr edi, 1
add edi, ecx
cmp edi, eax
ja 0x42221a
mov edi, eax
lea eax, [edi*8]
push eax
call fcn.0040a300
add esp, 4
mov dword [ebp - 0x18], eax
test esi, esi
mov edx, ebx
je 0x422270
mov ebx, dword [ebp - 0x20]
cmp esi, ebx
mov edx, dword [ebp - 0x18]
je 0x422262
xor eax, eax
nop
mov ecx, dword [esi + eax]
mov dword [edx + eax], ecx
mov ecx, dword [esi + eax + 4]
mov dword [edx + eax + 4], ecx
mov dword [esi + eax], 0
lea ecx, [esi + eax]
add ecx, 8
add eax, 8
cmp ecx, ebx
jne 0x422240
push esi
call fcn.0040a310
add esp, 4
mov eax, dword [ebp - 0x24]
mov edx, dword [eax]
mov esi, dword [ebp - 0x18]
lea eax, [esi + edi*8]
mov dword [ebp - 0xb4], eax
mov edi, esi
mov eax, dword [ebp - 0x38]
add edi, eax
mov dword [ebp - 0x20], edi
mov dword [esi + eax], 0
mov dword [ebp - 0x18], esi
mov dword [esi + eax + 4], 0
mov ebx, 0xffffffff
xor eax, eax
nop
mov esi, eax
cmp byte [edx + ebx + 1], 0
lea ebx, [ebx + 1]
lea eax, [eax + 1]
jne 0x4222a0
lea eax, [ebx + 1]
mov dword [ebp - 0x50], eax
push eax
mov dword [ebp - 0x1c], edx
call fcn.0040a300
add esp, 4
mov edi, eax
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x38]
mov dword [eax + ecx], edi
mov edx, dword [ebp - 0x50]
mov ecx, edx
shr ecx, 2
mov eax, dword [ebp - 0x1c]
xchg esi, eax
rep movsd dword es:[edi], dword [esi]
xchg esi, eax
mov eax, edx
and edx, 0xfffffffc
mov edi, dword [ebp - 0x28]
add edi, edx
add edx, dword [ebp - 0x1c]
and eax, 3
mov ecx, eax
shr ecx, 1
mov dword [ebp - 0xc0], edx
mov dword [ebp - 0xc4], edx
mov dword [ebp - 0x28], edi
mov edx, dword [ebp - 0xc4]
xchg esi, edx
rep movsw word es:[edi], word [esi]
xchg esi, edx
mov ecx, eax
xor ecx, 0xfffffffe
or eax, 1
and eax, ecx
je 0x422338
mov ecx, dword [ebp - 0x50]
and ecx, 2
mov edx, dword [ebp - 0xc0]
add edx, ecx
mov edi, dword [ebp - 0x28]
add edi, ecx
push eax
push edx
push edi
call fcn.0040a330
add esp, 0xc
test ebx, ebx
mov edi, dword [ebp - 0x20]
je 0x42234b
cmp ebx, 1
jne 0x422355
mov eax, 0xffffffff
jmp 0x42238e
xor eax, eax
mov edx, dword [ebp - 0x18]
jmp 0x4221c2
and esi, 0xfffffffe
mov eax, 0xffffffff
mov edx, dword [ebp - 0x1c]
mov ecx, eax
shr ecx, 8
xor al, byte [edx]
movzx eax, al
xor ecx, dword [eax*4 + 0x4415c0]
mov eax, ecx
shr eax, 8
xor cl, byte [edx + 1]
add edx, 2
movzx ecx, cl
xor eax, dword [ecx*4 + 0x4415c0]
add esi, 0xfffffffe
jne 0x422360
mov dword [ebp - 0x1c], edx
test bl, 1
mov edx, dword [ebp - 0x18]
je 0x4221c0
mov ecx, eax
shr ecx, 8
mov esi, dword [ebp - 0x1c]
xor al, byte [esi]
movzx eax, al
xor ecx, dword [eax*4 + 0x4415c0]
mov eax, ecx
jmp 0x4221c0
mov esi, dword [ebp - 0x10]
lea eax, [esi + 1]
push eax
call fcn.0040a300
add esp, 4
push 0
push esi
mov dword [ebp - 0xb0], eax
push eax
push dword [ebp - 0x34]
call fcn.0043ef20
add esp, 0x10
not eax
shr eax, 0x1f
xor edi, edi
xor esi, esi
jmp dword [eax*4 + 0x445dc0]
mov esi, dword [ebp - 0x10]
mov edi, dword [ebp - 0xb0]
mov byte [edi + esi], 0
push 0x20
call fcn.0040a300
add esp, 4
mov dword [eax + 8], 0
mov dword [eax + 4], 0
mov dword [eax + 0x18], 0xffffffff
mov dword [eax + 0x14], 0
mov dword [eax + 0x10], 0
mov dword [eax], 0
mov dword [ebp - 0xac], eax
mov ecx, eax
push esi
push edi
call fcn.00424260
movzx eax, al
xor edi, edi
xor edx, edx
jmp dword [eax*4 + 0x445dc8]
mov esi, edx
jmp dword [0x445de0]
mov ebx, dword [ebp - 0xac]
mov ecx, ebx
call fcn.00424640
push ebx
call fcn.0040a310
add esp, 4
jmp dword [0x445de8]
jmp dword [0x445de8]
push dword [ebp - 0xb0]
call fcn.0040a310
add esp, 4
jmp case.0x422be2.2
mov eax, dword [ebp - 0x28]
mov ecx, eax
and cl, 1
movzx ecx, cl
mov edx, dword [ebp - 0xd0]
mov esi, dword [ebp - 0x18]
jmp dword [ecx*4 + 0x445f00]
jmp dword [0x445f08]
and al, 1
mov ebx, eax
jmp dword [0x445f14]
mov ebx, dword [ebp - 0x24]
mov byte [ebx], 0
mov dword [edx], 0xc8d5d2e0
mov dword [edx + 4], 0xdccac3cc
mov dword [edx + 8], 0xd9c3dbc0
mov dword [edx + 0xc], 0xd7c5fb1e
mov dword [edx + 0x10], 0xe004ddd0
mov dword [edx + 0x14], 0xd6dedbc6
mov dword [edx + 0x18], 0xc4c914ce
mov word [edx + 0x1c], 0x3ecb
mov dword [edx + 0x1e], 0
mov byte [edx + 0x22], 0
sub ebx, dword [ebp - 0x1c]
mov dword [ebp - 0x14], 0
mov eax, dword [ebp - 0x14]
cmp eax, 0x22
ja 0x422540
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x14]
movzx ecx, byte [edx + ecx]
add eax, 0xa650062
xor eax, ecx
mov dword [ebp - 0xa4], eax
mov eax, dword [ebp - 0xa4]
add al, 0xbf
mov ecx, dword [ebp - 0x14]
mov byte [edx + ecx], al
inc dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
cmp eax, 0x23
jb 0x422510
mov ecx, dword [ebp + 8]
push ebx
push dword [ebp - 0x1c]
push edx
call fcn.0040ac30
jmp dword [0x445f08]
push dword [ebp - 0x1c]
mov ebx, eax
call fcn.0040a310
mov eax, ebx
add esp, 4
and al, 1
mov ebx, eax
jmp dword [0x445f14]
xor eax, eax
xor ebx, ebx
jmp dword [0x445f14]
mov ebx, eax
jmp 0x422f5d
push 0
mov edi, dword [ebp - 0x4c]
push edi
push dword [esi]
call fcn.0043ee20
add esp, 0xc
not eax
shr eax, 0x1f
mov dword [ebp - 0x28], 0
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x24], ecx
jmp dword [eax*4 + 0x445e08]
mov esi, dword [edi]
lea eax, [esi + 1]
push eax
call fcn.0040a300
add esp, 4
push 0
push esi
mov esi, dword [ebp - 0xa8]
mov dword [ebp - 0x40], eax
push eax
push dword [esi]
call fcn.0043ef20
add esp, 0x10
not eax
shr eax, 0x1f
mov dword [ebp - 0x28], 0
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x24], ecx
jmp dword [eax*4 + 0x445e10]
mov esi, dword [edi]
mov edi, dword [ebp - 0x40]
mov byte [edi + esi], 0
push 0x20
call fcn.0040a300
add esp, 4
mov dword [eax + 8], 0
mov dword [eax + 4], 0
mov dword [eax + 0x18], 0xffffffff
mov dword [eax + 0x14], 0
mov dword [eax + 0x10], 0
mov dword [eax], 0
mov dword [ebp - 0x4c], eax
mov ecx, eax
push esi
push edi
call fcn.00424260
movzx eax, al
mov dword [ebp - 0x28], 0
mov ecx, dword [ebp - 0x1c]
jmp dword [eax*4 + 0x445e18]
mov edi, ebx
mov edx, dword [ebp - 0xc8]
mov dword [edx], 0x73607a57
mov dword [edx + 4], 0x7e68786f
mov dword [edx + 8], 0x637f4b23
mov dword [edx + 0xc], 0x402d7466
mov dword [edx + 0x10], 0x6a777060
mov dword [edx + 0x14], 0x55556a17
mov dword [edx + 0x18], 0x5b4d4852
mov dword [edx + 0x1c], 0x5b414063
mov dword [edx + 0x20], 0x2541
mov byte [edx + 0x24], 0
mov dword [ebp - 0x14], 0
mov eax, dword [ebp - 0x14]
cmp eax, 0x24
ja 0x4226d0
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x14]
movzx ecx, byte [edx + ecx]
add eax, 0x4213bf8c
xor eax, ecx
mov dword [ebp - 0xa4], eax
mov eax, dword [ebp - 0xa4]
add al, 0x78
mov ecx, dword [ebp - 0x14]
mov byte [edx + ecx], al
inc dword [ebp - 0x14]
mov eax, dword [ebp - 0x14]
cmp eax, 0x25
jb 0x4226a0
mov ecx, dword [ebp - 0x4c]
push edx
call fcn.004244a0
xor ecx, ecx
test eax, eax
setne cl
mov dword [ebp - 0x28], 0
mov edx, dword [ebp - 0x1c]
mov dword [ebp - 0x24], edx
jmp dword [ecx*4 + 0x445e20]
mov eax, dword [case.0x422f35.6]
mov ecx, dword [ebp - 0x24]
mov ebx, edi
nop
nop
jmp eax
mov dword [ebp - 0x24], ecx
mov eax, dword [case.0x422f35.48]
nop
nop
nop
nop
nop
nop
jmp eax
mov esi, dword [ebp - 0xa8]
mov edi, dword [ebp - 0x4c]
jmp dword [0x445ec8]
mov ecx, edi
call fcn.00424640
push edi
call fcn.0040a310
add esp, 4
jmp dword [0x445ed0]
jmp dword [0x445ed0]
push dword [ebp - 0x40]
call fcn.0040a310
add esp, 4
mov eax, dword [case.0x422f35.2]
nop
nop
nop
jmp eax
mov eax, dword [esi]
mov dword [ebp - 0xa4], 0x1c1b1a19
mov word [ebp - 0xa0], 0
mov dword [ebp - 0x10], 0
mov ecx, dword [ebp - 0x10]
cmp ecx, 5
ja 0x4227b4
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, dword [ebp - 0x10]
mov edx, dword [ebp - 0x10]
movzx edx, byte [ebp + edx - 0xa4]
add ecx, 0x4996fb31
xor ecx, edx
mov dword [ebp - 0x14], ecx
mov ecx, dword [ebp - 0x14]
add cl, 0xd7
mov edx, dword [ebp - 0x10]
mov byte [ebp + edx - 0xa4], cl
inc dword [ebp - 0x10]
mov ecx, dword [ebp - 0x10]
cmp ecx, 6
jb 0x422780
mov ecx, dword [0x44996c]
test ecx, ecx
je 0x4227e8
mov edx, dword [ebp - 0xa4]
xor esi, esi
mov edi, dword [0x449970]
nop
nop
nop
nop
cmp dword [edi + esi*8], 0x625b6034
je 0x4227e0
inc esi
cmp ecx, esi
jne 0x4227d0
jmp 0x4227e8
mov ecx, dword [edi + esi*8 + 4]
cmp ecx, edx
jne 0x4227f0
mov edi, ebx
jmp dword [0x445ee8]
push eax
push 1
push dword [0x449974]
push ecx
call fcn.0043c800
add esp, 0x10
mov edi, ebx
jmp dword [0x445ee8]
add eax, 8
mov ebx, dword [eax]
xor eax, eax
test ebx, ebx
setne al
mov dword [ebp - 0x28], 0
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x24], ecx
jmp dword [eax*4 + 0x445e28]
mov eax, ebx
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
push dword [ebp - 0x38]
call fcn.0040a310
add esp, 4
nop
jmp dword [0x445ef8]
mov dword [ebp - 0x28], 0
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x24], eax
mov edi, ebx
jmp dword [0x445ee8]
push dword [ebp - 0x18]
call fcn.0040a310
mov eax, dword [ebp - 0x30]
add esp, 4
xor ecx, ecx
cmp word [eax], 0x5b
sete cl
jmp dword [ecx*4 + 0x445da8]
mov eax, 0xffffffff
cmp esi, 0xffffffda
jl 0x422885
mov eax, edi
push eax
call fcn.0040a300
add esp, 4
mov dword [ebp - 0xa4], 0x88ec8ae7
mov dword [ebp - 0xa0], 0x8cff8efe
mov dword [ebp - 0x9c], 0x80fe82f9
mov dword [ebp - 0x98], 0x84e986fe
mov dword [ebp - 0x94], 0x98e89afe
mov dword [ebp - 0x90], 0x9ce79eed
mov dword [ebp - 0x8c], 0x90e892ec
mov dword [ebp - 0x88], 0x941f96a5
mov dword [ebp - 0x84], 0xa8d3aacf
mov dword [ebp - 0x80], 0xaeaf
mov dword [ebp - 0x10], 0
mov ecx, dword [ebp - 0x10]
cmp ecx, 0x27
ja 0x422941
nop
nop
mov ecx, dword [ebp - 0x10]
mov edx, dword [ebp - 0x10]
movzx edx, byte [ebp + edx - 0xa4]
lea ebx, [ecx + edx]
xor ecx, 0x80
and ecx, edx
add ecx, ecx
sub ebx, ecx
add ebx, 0x5bfeca80
mov dword [ebp - 0x14], ebx
mov ecx, dword [ebp - 0x14]
add cl, 0xf5
mov edx, dword [ebp - 0x10]
mov byte [ebp + edx - 0xa4], cl
inc dword [ebp - 0x10]
mov ecx, dword [ebp - 0x10]
cmp ecx, 0x28
jb 0x422900
mov ecx, dword [ebp - 0x18]
movzx edx, word [ecx]
mov ecx, eax
test dx, dx
je 0x422971
mov ecx, dword [ebp - 0x18]
lea ebx, [ecx + 2]
mov ecx, eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [ecx], dx
add ecx, 2
movzx edx, word [ebx]
add ebx, 2
test dx, dx
jne 0x422960
mov word [ecx], 0
movzx edx, word [ebp - 0xa4]
test dx, dx
je 0x4229a1
lea ebx, [ebp - 0xa2]
nop
nop
nop
nop
nop
nop
nop
nop
mov word [ecx], dx
add ecx, 2
movzx edx, word [ebx]
add ebx, 2
test dx, dx
jne 0x422990
mov word [ecx], 0
jmp dword [0x445d98]
mov eax, 0xffffffff
cmp esi, 0xffffffda
jl 0x4229b8
mov eax, edi
push eax
call fcn.0040a300
add esp, 4
mov dword [ebp - 0xa4], 0x88ec8ae7
mov dword [ebp - 0xa0], 0x8cff8efe
mov dword [ebp - 0x9c], 0x80fe82f9
mov dword [ebp - 0x98], 0x84e986fe
mov dword [ebp - 0x94], 0x98e89afe
mov dword [ebp - 0x90], 0x9ce79eed
mov dword [ebp - 0x8c], 0x90e892ec
mov dword [ebp - 0x88], 0x941f96a5
mov dword [ebp - 0x84], 0xa8d3aacf
mov dword [ebp - 0x80], 0xaeaf
mov dword [ebp - 0x10], 0
mov ecx, dword [ebp - 0x10]
cmp ecx, 0x27
ja 0x422a81
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, dword [ebp - 0x10]
mov edx, dword [ebp - 0x10]
movzx edx, byte [ebp + edx - 0xa4]
lea ebx, [ecx + edx]
xor ecx, 0x80
and ecx, edx
add ecx, ecx
sub ebx, ecx
add ebx, 0x5bfeca80
mov dword [ebp - 0x14], ebx
mov ecx, dword [ebp - 0x14]
add cl, 0xf5
mov edx, dword [ebp - 0x10]
mov byte [ebp + edx - 0xa4], cl
inc dword [ebp - 0x10]
mov ecx, dword [ebp - 0x10]
cmp ecx, 0x28
jb 0x422a40
mov edx, dword [ebp - 0x18]
movzx ecx, word [edx]
test cx, cx
je 0x422aa1
add edx, 2
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [edx]
add edx, 2
test cx, cx
jne 0x422a90
mov word [eax], 0
movzx ecx, word [ebp - 0xa4]
test cx, cx
je 0x422ad1
lea edx, [ebp - 0xa2]
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [edx]
add edx, 2
test cx, cx
jne 0x422ac0
mov word [eax], 0
jmp case.0x421d66.22
mov dword [ebp - 0x30], eax
jmp dword [0x445da0]
xor ecx, ecx
cmp word [eax], 0x5b
sete cl
jmp dword [ecx*4 + 0x445da8]
mov dword [ebp - 0xa4], 0x3bf239e3
mov dword [ebp - 0xa0], 0x3789359e
mov dword [ebp - 0x9c], 0x33863187
mov dword [ebp - 0x98], 0xfb70d8c
mov dword [ebp - 0x94], 0xbac09b7
mov dword [ebp - 0x90], 0x7b505b7
mov dword [ebp - 0x8c], 0x3be01b0
mov dword [ebp - 0x88], 0x1fa51db9
mov dword [ebp - 0x84], 0x1b9619e8
mov dword [ebp - 0x80], 0x17aa15a6
mov word [ebp - 0x7c], 0x1116
mov dword [ebp - 0x7a], 0
mov word [ebp - 0x76], 0
mov dword [ebp - 0x10], 0
mov ecx, dword [ebp - 0x10]
cmp ecx, 0x2f
ja 0x422bb4
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, dword [ebp - 0x10]
mov edx, dword [ebp - 0x10]
movzx edx, byte [ebp + edx - 0xa4]
add ecx, 0x6fc22953
xor ecx, edx
mov dword [ebp - 0x14], ecx
mov ecx, dword [ebp - 0x14]
add cl, 0x93
mov edx, dword [ebp - 0x10]
mov byte [ebp + edx - 0xa4], cl
inc dword [ebp - 0x10]
mov ecx, dword [ebp - 0x10]
cmp ecx, 0x30
jb 0x422b80
lea ecx, [ebp - 0xa4]
push 0
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_CopyFileW]
mov eax, dword [ebp - 0x30]
lea ecx, [ebp - 0x34]
push 0x60
push 3
push 0x120089
push ecx
push eax
call fcn.0043eaa0
add esp, 0x14
not eax
shr eax, 0x1f
jmp dword [eax*4 + 0x445db0]
xor esi, esi
xor edi, edi
mov ecx, dword [ebp - 0x30]
jmp dword [0x445df0]
push ecx
call fcn.0040a310
add esp, 4
xor eax, eax
cmp esi, edi
sete al
jmp dword [eax*4 + 0x445df8]
lea eax, [ebp - 0x10]
push 0
push eax
push dword [ebp - 0x34]
call fcn.0043ee20
add esp, 0xc
not eax
shr eax, 0x1f
xor edi, edi
xor esi, esi
jmp dword [eax*4 + 0x445db8]
mov dword [ebp - 0x18], esi
mov dword [ebp - 0x20], edi
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0xa4], 0x1c1b1a19
mov word [ebp - 0xa0], 0
mov dword [ebp - 0x10], 0
mov ecx, dword [ebp - 0x10]
cmp ecx, 5
ja 0x422c94
nop
nop
nop
nop
nop
nop
nop
mov ecx, dword [ebp - 0x10]
mov edx, dword [ebp - 0x10]
movzx edx, byte [ebp + edx - 0xa4]
add ecx, 0x4996fb31
xor ecx, edx
mov dword [ebp - 0x14], ecx
mov ecx, dword [ebp - 0x14]
add cl, 0xd7
mov edx, dword [ebp - 0x10]
mov byte [ebp + edx - 0xa4], cl
inc dword [ebp - 0x10]
mov ecx, dword [ebp - 0x10]
cmp ecx, 6
jb 0x422c60
mov edx, dword [0x44996c]
test edx, edx
mov ecx, dword [ebp - 0x30]
je 0x422ccc
mov esi, dword [ebp - 0xa4]
xor edi, edi
mov ebx, dword [0x449970]
nop
cmp dword [ebx + edi*8], 0x625b6034
je 0x422cc0
inc edi
cmp edx, edi
jne 0x422cb0
jmp 0x422ccc
mov edx, dword [ebx + edi*8 + 4]
cmp edx, esi
jne 0x422f3c
mov edi, dword [ebp - 0x20]
mov esi, dword [ebp - 0x18]
jmp dword [0x445df0]
xor eax, eax
cmp esi, edi
sete al
jmp dword [eax*4 + 0x445df8]
mov ebx, edi
mov eax, edi
mov dword [ebp - 0x18], esi
sub eax, esi
sar eax, 3
mov ecx, eax
and ecx, 0xfffffbde
mov edx, eax
and edx, 0x421
or eax, 0x421
imul eax, edx
xor edx, 0x421
imul edx, ecx
add eax, edx
push eax
call fcn.0040a300
add esp, 4
mov dword [ebp - 0x1c], eax
mov eax, dword [0x449968]
mov edx, dword [ebp - 0x3c]
mov dword [edx], 0xa277a48e
mov dword [edx + 4], 0xae42a050
mov dword [edx + 8], 0xaa5fac42
mov dword [edx + 0xc], 0xb647a866
mov dword [edx + 0x10], 0xb27fb445
mov dword [edx + 0x14], 0xbe43b05e
mov dword [edx + 0x18], 0xba90bc52
mov dword [edx + 0x1c], 0x469ab85d
mov dword [edx + 0x20], 0x42a844b9
mov dword [edx + 0x24], 0x4ebc40ae
mov dword [edx + 0x28], 0x4abf4ca9
mov dword [edx + 0x2c], 0x56ba48b8
mov dword [edx + 0x30], 0x52a754ba
mov dword [edx + 0x34], 0x5ea55063
mov dword [edx + 0x38], 0x5ab15cb1
mov dword [edx + 0x3c], 0x5859
mov dword [ebp - 0x14], 0
mov ecx, dword [ebp - 0x14]
cmp ecx, 0x3f
ja 0x422e00
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x14]
mov esi, dword [ebp - 0x3c]
movzx edx, byte [esi + edx]
lea esi, [ecx + 0x3a80fbe2]
lea edi, [ecx + edx]
add edi, 0x3a80fbe2
add ecx, 0xe2
or ecx, esi
and ecx, edx
add ecx, ecx
sub edi, ecx
mov dword [ebp - 0xa4], edi
mov ecx, dword [ebp - 0xa4]
add cl, 0xb9
mov edx, dword [ebp - 0x14]
mov esi, dword [ebp - 0x3c]
mov byte [esi + edx], cl
mov edx, dword [ebp - 0x3c]
inc dword [ebp - 0x14]
mov ecx, dword [ebp - 0x14]
cmp ecx, 0x40
jb 0x422db0
mov esi, dword [ebp - 0x44]
push esi
push 0
push 0
push 0x1e
push edx
push 0
call eax
mov esi, dword [esi]
test esi, esi
jns 0x422e1c
mov eax, 0xffffffff
jmp 0x422e1f
lea eax, [esi + esi]
push eax
call fcn.0040a300
add esp, 4
mov dword [ebp - 0x38], eax
mov eax, dword [0x449968]
mov edx, dword [ebp - 0x2c]
mov dword [edx], 0xad7744e
mov dword [edx + 4], 0xeea08f8
mov dword [edx + 8], 0x2ff0cea
mov dword [edx + 0xc], 0x6f700c6
mov dword [edx + 0x10], 0x1adf04f5
mov dword [edx + 0x14], 0x1eeb18fe
mov dword [edx + 0x18], 0x12281cfa
mov dword [edx + 0x1c], 0x16c210fd
mov dword [edx + 0x20], 0x2ad014e1
mov dword [edx + 0x24], 0x2edc28ce
mov dword [edx + 0x28], 0x22df2cc1
mov dword [edx + 0x2c], 0x26c220d0
mov dword [edx + 0x30], 0x3ac724c2
mov dword [edx + 0x34], 0x3eb5380b
mov dword [edx + 0x38], 0x32c93cd9
mov word [edx + 0x3c], 0x3031
mov word [edx + 0x42], 0
mov dword [edx + 0x3e], 0
mov dword [ebp - 0x14], 0
mov ecx, dword [ebp - 0x14]
cmp ecx, 0x43
ja 0x422f08
nop
nop
nop
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x14]
mov edi, dword [ebp - 0x2c]
movzx edx, byte [edi + edx]
lea edi, [ecx + edx]
add ecx, 0xbe
and ecx, edx
add ecx, ecx
sub edi, ecx
add edi, 0x5efe31be
mov dword [ebp - 0xa4], edi
mov ecx, dword [ebp - 0xa4]
add cl, 0x35
mov edx, dword [ebp - 0x14]
mov edi, dword [ebp - 0x2c]
mov byte [edi + edx], cl
mov edx, dword [ebp - 0x2c]
inc dword [ebp - 0x14]
mov ecx, dword [ebp - 0x14]
cmp ecx, 0x44
jb 0x422ec0
push dword [ebp - 0x44]
push esi
mov edi, dword [ebp - 0x38]
push edi
push 0x1e
push edx
push 0
call eax
push 0x60
push 3
push 0x120089
mov esi, dword [ebp - 0xa8]
push esi
push edi
call fcn.0043eaa0
add esp, 0x14
not eax
shr eax, 0x1f
jmp dword [eax*4 + 0x445e00]
push eax
push 1
push dword [0x449974]
push edx
call fcn.0043c800
mov ecx, dword [ebp - 0x30]
add esp, 0x10
mov edi, dword [ebp - 0x20]
mov esi, dword [ebp - 0x18]
jmp dword [0x445df0]
test esi, esi
je 0x422f97
cmp esi, edi
je 0x422f97
mov dword [ebp - 0x18], esi
jmp 0x422f77
add esi, 8
cmp esi, edi
je 0x422f88
mov eax, dword [esi]
test eax, eax
je 0x422f70
push eax
call fcn.0040a310
add esp, 4
jmp 0x422f70
push dword [ebp - 0x18]
call fcn.0040a310
add esp, 4
xor edi, edi
xor esi, esi
jmp dword [0x445f1c]
test esi, esi
je 0x422f5d
cmp esi, edi
je 0x422f5d
mov dword [ebp - 0x18], esi
jmp 0x422fb7
add esi, 8
cmp esi, edi
je 0x422f88
mov eax, dword [esi]
test eax, eax
je 0x422fb0
push eax
call fcn.0040a310
add esp, 4
jmp 0x422fb0
jmp dword [0x445f28]
push dword [ebp - 0x3c]
call fcn.0040a310
add esp, 4
mov eax, dword [ebp - 0x98]
and al, 1
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov ecx, dword [ebp - 0xc8]
add ecx, 4
xor eax, eax
cmp ecx, 0xc
setne al
mov ebx, dword [ebp - 0x9c]
jmp dword [eax*4 + 0x445f20]
mov eax, dword [ebp - 0xbc]
mov dword [ebp - 0xc8], ecx
mov edx, dword [eax + ecx]
mov edi, 0xfffffffe
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
cmp word [edx + edi + 2], 0
lea edi, [edi + 2]
jne 0x423460
mov esi, edi
sar esi, 1
mov eax, dword [ebp - 0x70]
lea ecx, [esi + eax]
add ecx, 0xd
test ecx, ecx
mov dword [ebp - 0x18], edx
mov dword [ebp - 0x4c], esi
jns 0x423490
mov eax, 0xffffffff
jmp 0x423499
add eax, esi
lea eax, [eax*2 + 0x1a]
push eax
call fcn.0040a300
add esp, 4
mov edx, eax
mov eax, dword [ebp - 0x3c]
movzx ecx, word [eax]
mov dword [ebp - 0x1c], edx
mov eax, edx
test cx, cx
je 0x4234d1
mov edx, dword [ebp - 0xa4]
mov eax, dword [ebp - 0x1c]
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [edx]
add edx, 2
test cx, cx
jne 0x4234c0
mov word [eax], 0x5c
mov dword [ebx], 0x4cb06dd
mov dword [ebx + 4], 0x8ac0ab6
mov dword [ebx + 8], 0xca30ea8
mov dword [ebx + 0xc], 0x10c412ed
mov dword [ebx + 0x10], 0x14b616a5
mov dword [ebx + 0x14], 0x18be1aa1
mov word [ebx + 0x18], 0x1e19
mov dword [ebx + 0x1a], 0
mov dword [ebp - 0x10], 0
mov ecx, dword [ebp - 0x10]
cmp ecx, 0x1d
ja 0x423555
nop
nop
nop
nop
nop
mov ecx, dword [ebp - 0x10]
mov edx, dword [ebp - 0x10]
movzx edx, byte [ebx + edx]
lea esi, [ecx + 0x63]
and esi, edx
add ecx, edx
add esi, esi
sub ecx, esi
add ecx, 0x1192c463
mov dword [ebp - 0x38], ecx
mov ecx, dword [ebp - 0x38]
add cl, 0x9e
mov edx, dword [ebp - 0x10]
mov byte [ebx + edx], cl
inc dword [ebp - 0x10]
mov ecx, dword [ebp - 0x10]
cmp ecx, 0x1e
jb 0x423520
add eax, 2
mov edx, dword [ebp - 0x18]
movzx ecx, word [edx]
test cx, cx
je 0x423581
add edx, 2
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [edx]
add edx, 2
test cx, cx
jne 0x423570
mov word [eax], 0
movzx ecx, word [ebx]
test cx, cx
je 0x4235c0
mov edx, dword [ebp - 0xf0]
mov esi, dword [ebp - 0x6c]
mov ebx, dword [ebp - 0x68]
nop
nop
nop
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [edx]
add edx, 2
test cx, cx
jne 0x4235a0
jmp 0x4235c6
mov esi, dword [ebp - 0x6c]
mov ebx, dword [ebp - 0x68]
mov word [eax], 0
push 0x60
push 3
push 0x120089
push esi
push dword [ebp - 0x1c]
call fcn.0043eaa0
add esp, 0x14
not eax
shr eax, 0x1f
jmp dword [eax*4 + 0x445f30]
xor ebx, ebx
jmp dword [0x445fa0]
push dword [ebp - 0x1c]
call fcn.0040a310
add esp, 4
movzx eax, bl
jmp dword [eax*4 + 0x445fa8]
jmp dword [0x445f3c]
jmp dword [0x445fc8]
jmp dword [0x445f80]
push dword [ebp - 0x48]
call fcn.0040a310
add esp, 4
push dword [ebp - 0xe8]
call fcn.00403fd0
add esp, 4
mov esi, dword [ebp - 0xec]
jmp 0x4237f4
jmp dword [0x445f98]
push esi
call fcn.0040a310
add esp, 4
jmp case.0x421d66.132
cmp dword [ebp - 0x4c], 0xfffffff8
jge 0x423671
mov eax, 0xffffffff
jmp 0x423674
lea eax, [edi + 0x10]
mov ebx, dword [ebp - 0x90]
push eax
call fcn.0040a300
add esp, 4
mov edx, eax
mov dword [ebx], 0xa33ea1f7
mov dword [ebx + 4], 0xdf88dd4c
mov dword [ebx + 8], 0xdb52d954
mov dword [ebx + 0xc], 0xd7d6d558
mov byte [ebx + 0x10], 0
mov dword [ebp - 0x10], 0
mov eax, dword [ebp - 0x10]
cmp eax, 0x10
ja 0x4236ea
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x10]
movzx ecx, byte [ebx + ecx]
add eax, 0xe093ea3c
xor eax, ecx
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
add al, 0x64
mov ecx, dword [ebp - 0x10]
mov byte [ebx + ecx], al
inc dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
cmp eax, 0x11
jb 0x4236c0
mov eax, dword [ebp - 0x18]
movzx ecx, word [eax]
mov dword [ebp - 0x14], edx
mov eax, edx
test cx, cx
je 0x423721
mov eax, dword [ebp - 0x18]
lea edx, [eax + 2]
mov eax, dword [ebp - 0x14]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [edx]
add edx, 2
test cx, cx
jne 0x423710
mov word [eax], 0
movzx ecx, word [ebx]
test cx, cx
je 0x423751
mov edx, dword [ebp - 0xd4]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [edx]
add edx, 2
test cx, cx
jne 0x423740
mov word [eax], 0
mov ecx, dword [ebp + 8]
push dword [esi]
push dword [esi + 4]
mov esi, dword [ebp - 0x14]
push esi
call fcn.0040aa80
mov ebx, eax
jmp dword [0x445f68]
push esi
call fcn.0040a310
add esp, 4
mov esi, dword [ebp - 0xb4]
jmp dword [0x445f74]
movzx eax, bl
jmp dword [eax*4 + 0x445fa8]
jmp dword [0x445fb0]
mov eax, dword [ebp - 0x68]
mov esi, dword [eax]
lea eax, [esi + 1]
push eax
call fcn.0040a300
add esp, 4
push 0
push esi
mov esi, eax
push eax
mov eax, dword [ebp - 0x6c]
push dword [eax]
call fcn.0043ef20
add esp, 0x10
not eax
shr eax, 0x1f
xor ebx, ebx
jmp dword [eax*4 + 0x445f50]
mov eax, dword [ebp - 0x68]
mov eax, dword [eax]
mov byte [esi + eax], 0
push esi
call fcn.00402fa0
add esp, 4
xor ecx, ecx
test eax, eax
setne cl
jmp dword [ecx*4 + 0x445f58]
xor ebx, ebx
mov eax, dword [case.0x421d66.134]
nop
nop
nop
nop
nop
nop
nop
jmp eax
mov dword [ebp - 0xec], esi
mov dword [ebp - 0xe8], eax
push eax
call fcn.00403a20
add esp, 4
mov esi, dword [ebp - 0xb8]
mov dword [esi], 0xe1fed3f0
mov dword [esi + 4], 0xd2d5ddd1
mov dword [esi + 8], 0xe9e7eda9
mov dword [esi + 0xc], 0xdaddd5d9
mov dword [esi + 0x10], 0x998e94ea
mov word [esi + 0x14], 0xad96
mov byte [esi + 0x16], 0x35
mov ecx, dword [ebp - 0xd8]
mov word [ecx], 0
mov byte [ecx + 2], 0
mov dword [ebp - 0x10], 0
mov ecx, dword [ebp - 0x10]
cmp ecx, 0x19
ja 0x42389c
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, dword [ebp - 0x10]
mov edx, dword [ebp - 0x10]
movzx edx, byte [esi + edx]
add ecx, 0x852ce9af
xor ecx, edx
mov dword [ebp - 0x38], ecx
mov ecx, dword [ebp - 0x38]
add cl, 0x10
mov edx, dword [ebp - 0x10]
mov byte [esi + edx], cl
inc dword [ebp - 0x10]
mov ecx, dword [ebp - 0x10]
cmp ecx, 0x1a
jb 0x423870
push esi
push eax
call fcn.00403de0
add esp, 8
mov edx, eax
mov ecx, 0xffffffff
nop
nop
nop
mov eax, ecx
cmp byte [edx + ecx + 1], 0
lea ecx, [ecx + 1]
jne 0x4238b0
mov eax, ecx
and eax, 3
mov esi, ecx
or esi, 3
imul esi, eax
xor eax, 3
mov dword [ebp - 0x14], ecx
mov ecx, dword [ebp - 0x14]
and ecx, 0xfffffffc
imul ecx, eax
add esi, ecx
mov ecx, dword [ebp - 0x14]
shr esi, 2
movzx eax, byte [edx + ecx - 1]
cmp eax, 0x3d
je 0x4238ef
cmp eax, 0x2e
jne 0x4238f0
dec esi
movzx eax, byte [edx + ecx - 2]
cmp eax, 0x3d
mov dword [ebp - 0xac], edx
mov dword [ebp - 0xe0], edi
je 0x42390b
cmp eax, 0x2e
jne 0x42390c
dec esi
mov dword [ebp - 0xe4], esi
lea eax, [esi + 1]
push eax
call fcn.0040a300
add esp, 4
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x14], 0
je 0x423a3b
xor edx, edx
mov esi, 2
jmp 0x423950
mov ecx, dword [ebp - 0x14]
mov edx, dword [ebp - 0x94]
nop
nop
nop
lea eax, [esi + 4]
add esi, 2
cmp esi, ecx
mov esi, eax
jae 0x423a3b
mov dword [ebp - 0xb0], edx
mov edi, dword [ebp - 0xac]
movzx eax, byte [edi + esi - 2]
push eax
call fcn.00416610
add esp, 4
mov bh, al
movzx eax, byte [edi + esi - 1]
push eax
call fcn.00416610
add esp, 4
mov bl, al
shl bh, 2
shr al, 4
and al, 3
or al, bh
mov ecx, dword [ebp - 0x48]
mov edx, dword [ebp - 0xb0]
mov byte [ecx + edx], al
mov ecx, dword [ebp - 0x14]
inc edx
cmp esi, ecx
jae 0x423940
mov eax, dword [ebp - 0xac]
movzx eax, byte [eax + esi]
push eax
mov edi, edx
call fcn.00416610
mov edx, edi
mov ecx, dword [ebp - 0x14]
add esp, 4
cmp al, 0x40
je 0x423940
shl bl, 4
mov ecx, eax
xor cl, 0xc0
mov edx, eax
or dl, 0x3c
and dl, cl
shr dl, 2
add dl, bl
mov edi, dword [ebp - 0xb0]
lea ecx, [edi + 2]
mov dword [ebp - 0x94], ecx
mov ecx, dword [ebp - 0x48]
mov byte [ecx + edi + 1], dl
lea ecx, [esi + 1]
cmp ecx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x14]
jae 0x423937
mov ebx, eax
mov eax, dword [ebp - 0xac]
movzx eax, byte [eax + esi + 1]
push eax
call fcn.00416610
add esp, 4
cmp al, 0x40
je 0x423934
shl bl, 6
add al, bl
mov edx, dword [ebp - 0xb0]
mov ecx, edx
and ecx, 1
mov edi, dword [ebp - 0x94]
or edi, 1
add edi, ecx
mov ecx, dword [ebp - 0x48]
mov byte [ecx + edx + 2], al
mov edx, edi
mov ecx, dword [ebp - 0x14]
jmp 0x423940
mov eax, dword [ebp - 0xe4]
add eax, 0xfffffffb
mov esi, dword [ebp - 0xdc]
mov dword [esi], eax
mov eax, dword [ebp - 0x48]
add eax, 5
mov dword [esi + 4], eax
mov ebx, dword [ebp - 0xb4]
mov dword [ebx], 0
mov dword [ebx + 4], 0
push 0x6c625980
push dword [0x449978]
call fcn.0043e080
add esp, 8
push ebx
push 0
push 0
push 0
push 0
push 0
push esi
mov esi, ebx
call eax
xor ecx, ecx
test eax, eax
setne cl
xor ebx, ebx
mov edi, dword [ebp - 0xe0]
jmp dword [ecx*4 + 0x445f60]
mov eax, dword [ebp - 0x6c]
mov eax, dword [eax]
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x38], 0x1c1b1a19
mov word [ebp - 0x34], 0
mov dword [ebp - 0x44], 0
mov eax, dword [ebp - 0x44]
cmp eax, 5
ja 0x423b0c
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [ebp - 0x44]
mov ecx, dword [ebp - 0x44]
movzx ecx, byte [ebp + ecx - 0x38]
add eax, 0x4996fb31
xor eax, ecx
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x10]
add al, 0xd7
mov ecx, dword [ebp - 0x44]
mov byte [ebp + ecx - 0x38], al
inc dword [ebp - 0x44]
mov eax, dword [ebp - 0x44]
cmp eax, 6
jb 0x423ae0
mov ecx, dword [0x44996c]
test ecx, ecx
je 0x423b40
mov edx, dword [ebp - 0x38]
xor esi, esi
mov eax, dword [0x449970]
cmp dword [eax + esi*8], 0x625b6034
je 0x423b30
inc esi
cmp ecx, esi
jne 0x423b20
jmp 0x423b40
mov eax, dword [eax + esi*8 + 4]
cmp eax, edx
jne 0x423b46
nop
nop
nop
nop
nop
nop
nop
nop
jmp dword [0x445fa0]
push dword [ebp - 0x14]
push 1
push dword [0x449974]
push eax
call fcn.0043c800
add esp, 0x10
jmp dword [0x445fa0]
mov ecx, dword [ebp - 0x98]
and cl, 1
or cl, al
mov dword [ebp - 0x98], ecx
jmp dword [0x445fc0]
push ebx
call fcn.0040a310
add esp, 4
jmp dword [0x445fc8]
push esi
call fcn.0040a310
add esp, 4
mov ecx, dword [ebp - 0xc8]
add ecx, 4
xor eax, eax
cmp ecx, 0xc
setne al
mov ebx, dword [ebp - 0x9c]
jmp dword [eax*4 + 0x445f20]
push 0
push ebx
push dword [esi]
call fcn.0043ee20
add esp, 0xc
push 0
push ebx
push dword [esi]
call fcn.0043ee20
add esp, 0xc
jmp dword [0x445f40]
not eax
shr eax, 0x1f
xor ebx, ebx
jmp dword [eax*4 + 0x445f48]
mov eax, dword [ebp - 0x70]
mov edx, dword [ebp - 0x4c]
lea ecx, [edx + eax]
add edx, eax
add edx, 0x17
lea eax, [ecx*2 + 0x2e]
test edx, edx
mov ebx, dword [ebp - 0xa0]
jns 0x423c04
mov eax, 0xffffffff
push eax
call fcn.0040a300
add esp, 4
mov esi, eax
mov eax, dword [ebp - 0x3c]
movzx ecx, word [eax]
mov eax, esi
test cx, cx
je 0x423c41
mov edx, dword [ebp - 0xa4]
mov eax, esi
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [edx]
add edx, 2
test cx, cx
jne 0x423c30
mov dword [ebp - 0x1c], esi
mov word [eax], 0x5c
mov dword [ebx], 0xcc10af7
mov dword [ebx + 4], 0x30d40e9e
mov dword [ebx + 8], 0x34d932d0
mov dword [ebx + 0xc], 0x38cc3617
mov dword [ebx + 0x10], 0x3cac3aaf
mov dword [ebx + 0x14], 0x20c23ead
mov dword [ebx + 0x18], 0x24c222ca
mov dword [ebx + 0x1c], 0x28c526db
mov dword [ebx + 0x20], 0x2cbb2acc
mov dword [ebx + 0x24], 0xd03d2ec8
mov dword [ebx + 0x28], 0xd437d237
mov word [ebx + 0x2c], 0xd6d7
mov ecx, dword [ebp - 0xd0]
mov word [ecx + 4], 0
mov dword [ecx], 0
add eax, 2
mov dword [ebp - 0x10], 0
mov ecx, dword [ebp - 0x10]
cmp ecx, 0x33
ja 0x423cf9
nop
mov ecx, dword [ebp - 0x10]
mov edx, dword [ebp - 0x10]
movzx edx, byte [ebx + edx]
lea esi, [ecx + edx]
add esi, 0x8b2f295a
add ecx, 0x8b2f295a
and ecx, edx
add ecx, ecx
sub esi, ecx
mov dword [ebp - 0x38], esi
mov ecx, dword [ebp - 0x38]
add cl, 0xaf
mov edx, dword [ebp - 0x10]
mov byte [ebx + edx], cl
inc dword [ebp - 0x10]
mov ecx, dword [ebp - 0x10]
cmp ecx, 0x34
jb 0x423cc0
mov edx, dword [ebp - 0x18]
movzx ecx, word [edx]
test cx, cx
je 0x423d21
add edx, 2
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [edx]
add edx, 2
test cx, cx
jne 0x423d10
mov word [eax], 0
movzx ecx, word [ebx]
test cx, cx
je 0x423d60
mov edx, dword [ebp - 0xc4]
mov ebx, dword [ebp - 0x40]
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [edx]
add edx, 2
test cx, cx
jne 0x423d40
jmp 0x423d63
mov ebx, dword [ebp - 0x40]
mov word [eax], 0
lea eax, [edi + 0x12]
cmp dword [ebp - 0x4c], 0xfffffff7
jge 0x423d76
mov eax, 0xffffffff
push eax
call fcn.0040a300
add esp, 4
mov dword [ebx], 0x69fa6f3d
mov dword [ebx + 4], 0x55f46bc7
mov dword [ebx + 8], 0x51c257fb
mov dword [ebx + 0xc], 0x5df053fc
mov word [ebx + 0x10], 0x5f5c
mov ecx, dword [ebp - 0xcc]
mov word [ecx], 0
mov byte [ecx + 2], 0
mov dword [ebp - 0x10], 0
mov ecx, dword [ebp - 0x10]
cmp ecx, 0x14
ja 0x423e1c
nop
nop
mov edx, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x10]
movzx esi, byte [ebx + ecx]
lea ecx, [edx + esi]
add ecx, 0xad585059
add edx, 0xad585059
and edx, esi
mov esi, ecx
not esi
and esi, edx
mov ebx, edx
not ebx
and ecx, ebx
sub ecx, esi
mov esi, ecx
not esi
and esi, edx
and ecx, ebx
mov ebx, dword [ebp - 0x40]
sub ecx, esi
mov dword [ebp - 0x38], ecx
mov ecx, dword [ebp - 0x38]
mov edx, ecx
not edx
and edx, 0x35
and ecx, 0xca
sub ecx, edx
mov edx, dword [ebp - 0x10]
mov byte [ebx + edx], cl
inc dword [ebp - 0x10]
mov ecx, dword [ebp - 0x10]
cmp ecx, 0x15
jb 0x423dc0
mov ecx, dword [ebp - 0x18]
movzx edx, word [ecx]
mov ecx, eax
test dx, dx
je 0x423e51
mov ecx, dword [ebp - 0x18]
lea esi, [ecx + 2]
mov ecx, eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [ecx], dx
add ecx, 2
movzx edx, word [esi]
add esi, 2
test dx, dx
jne 0x423e40
mov word [ecx], 0
movzx edx, word [ebx]
test dx, dx
je 0x423e90
mov esi, dword [ebp - 0xc0]
mov ebx, dword [ebp - 0xa8]
nop
nop
nop
nop
nop
nop
mov word [ecx], dx
add ecx, 2
movzx edx, word [esi]
add esi, 2
test dx, dx
jne 0x423e70
jmp 0x423e96
mov ebx, dword [ebp - 0xa8]
mov word [ecx], 0
mov dword [ebx], 0x1b1a65ba
mov word [ebx + 4], 0
mov dword [ebp - 0x10], 0
mov ecx, dword [ebp - 0x10]
cmp ecx, 5
ja 0x423eec
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, dword [ebp - 0x10]
mov edx, dword [ebp - 0x10]
movzx edx, byte [ebx + edx]
add ecx, 0xd21d98be
xor ecx, edx
mov dword [ebp - 0x38], ecx
mov ecx, dword [ebp - 0x38]
add cl, 0x26
mov edx, dword [ebp - 0x10]
mov byte [ebx + edx], cl
inc dword [ebp - 0x10]
mov ecx, dword [ebp - 0x10]
cmp ecx, 6
jb 0x423ec0
push 0
push 0
push 0
push 0xc00000
push ebx
push dword [ebp - 0x1c]
push eax
push dword [ebp + 8]
call fcn.0041a3f0
add esp, 0x20
mov eax, dword [ebp - 0x70]
mov edx, dword [ebp - 0x4c]
lea ecx, [edx + eax]
add edx, eax
add edx, 0x17
lea eax, [ecx*2 + 0x2e]
test edx, edx
jns 0x423f25
mov eax, 0xffffffff
push eax
call fcn.0040a300
add esp, 4
mov esi, eax
mov eax, dword [ebp - 0x3c]
movzx ecx, word [eax]
mov eax, esi
test cx, cx
je 0x423f61
mov edx, dword [ebp - 0xa4]
mov eax, esi
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [edx]
add edx, 2
test cx, cx
jne 0x423f50
mov dword [ebp - 0x1c], esi
mov word [eax], 0x5c
mov ebx, dword [ebp - 0xa0]
mov dword [ebx], 0xcc10af7
mov dword [ebx + 4], 0x30d40e9e
mov dword [ebx + 8], 0x34d932d0
mov dword [ebx + 0xc], 0x38cc3617
mov dword [ebx + 0x10], 0x3cac3aaf
mov dword [ebx + 0x14], 0x20c23ead
mov dword [ebx + 0x18], 0x24c222ca
mov dword [ebx + 0x1c], 0x28c526db
mov dword [ebx + 0x20], 0x2cbb2acc
mov dword [ebx + 0x24], 0xd03d2ec8
mov dword [ebx + 0x28], 0xd437d237
mov word [ebx + 0x2c], 0xd6d7
mov ecx, dword [ebp - 0xd0]
mov word [ecx + 4], 0
mov dword [ecx], 0
add eax, 2
mov dword [ebp - 0x10], 0
mov ecx, dword [ebp - 0x10]
cmp ecx, 0x33
ja 0x424029
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, dword [ebp - 0x10]
mov edx, dword [ebp - 0x10]
movzx edx, byte [ebx + edx]
lea esi, [ecx + edx]
add esi, 0x8b2f295a
add ecx, 0x8b2f295a
and ecx, edx
add ecx, ecx
sub esi, ecx
mov dword [ebp - 0x38], esi
mov ecx, dword [ebp - 0x38]
add cl, 0xaf
mov edx, dword [ebp - 0x10]
mov byte [ebx + edx], cl
inc dword [ebp - 0x10]
mov ecx, dword [ebp - 0x10]
cmp ecx, 0x34
jb 0x423ff0
mov edx, dword [ebp - 0x18]
movzx ecx, word [edx]
test cx, cx
je 0x424051
add edx, 2
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [edx]
add edx, 2
test cx, cx
jne 0x424040
mov word [eax], 0
movzx ecx, word [ebx]
test cx, cx
je 0x424081
mov edx, dword [ebp - 0xc4]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [edx]
add edx, 2
test cx, cx
jne 0x424070
mov word [eax], 0
lea eax, [edi + 0x12]
cmp dword [ebp - 0x4c], 0xfffffff7
jge 0x424094
mov eax, 0xffffffff
push eax
call fcn.0040a300
add esp, 4
mov dword [ebp - 0x14], eax
mov ebx, dword [ebp - 0x40]
mov dword [ebx], 0x69fa6f3d
mov dword [ebx + 4], 0x55f46bc7
mov dword [ebx + 8], 0x51c257fb
mov dword [ebx + 0xc], 0x5df053fc
mov word [ebx + 0x10], 0x5f5c
mov eax, dword [ebp - 0xcc]
mov word [eax], 0
mov byte [eax + 2], 0
mov dword [ebp - 0x10], 0
mov eax, dword [ebp - 0x10]
cmp eax, 0x14
ja 0x424147
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
movzx edx, byte [ebx + eax]
lea eax, [ecx + edx]
add eax, 0xad585059
add ecx, 0xad585059
and ecx, edx
mov edx, eax
not edx
and edx, ecx
mov esi, ecx
not esi
and eax, esi
sub eax, edx
mov edx, eax
not edx
and edx, ecx
and eax, esi
sub eax, edx
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
mov ecx, eax
not ecx
and ecx, 0x35
and eax, 0xca
sub eax, ecx
mov ecx, dword [ebp - 0x10]
mov byte [ebx + ecx], al
inc dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
cmp eax, 0x15
jb 0x4240f0
mov edx, dword [ebp - 0x18]
movzx ecx, word [edx]
mov ebx, dword [ebp - 0x14]
mov eax, ebx
test cx, cx
je 0x424171
add edx, 2
mov eax, ebx
nop
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [edx]
add edx, 2
test cx, cx
jne 0x424160
mov word [eax], 0
mov ecx, dword [ebp - 0x40]
movzx ecx, word [ecx]
test cx, cx
mov esi, dword [ebp - 0xa8]
je 0x4241a1
mov edx, dword [ebp - 0xc0]
nop
nop
nop
mov word [eax], cx
add eax, 2
movzx ecx, word [edx]
add edx, 2
test cx, cx
jne 0x424190
mov word [eax], 0
mov dword [esi], 0x1b1a65ba
mov word [esi + 4], 0
mov dword [ebp - 0x10], 0
mov eax, dword [ebp - 0x10]
cmp eax, 5
ja 0x4241fa
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x10]
movzx ecx, byte [esi + ecx]
add eax, 0xd21d98be
xor eax, ecx
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
add al, 0x26
mov ecx, dword [ebp - 0x10]
mov byte [esi + ecx], al
inc dword [ebp - 0x10]
mov eax, dword [ebp - 0x10]
cmp eax, 6
jb 0x4241d0
push 0
push 0
push 0
push 0xc00000
push esi
mov esi, dword [ebp - 0x1c]
push esi
push ebx
push dword [ebp + 8]
call fcn.0041a3f0
add esp, 0x20
jmp dword [0x445fbc]
push 0xe050b307
push dword [0x449960]
call fcn.0043e080
add esp, 8
push dword [esi + 4]
call eax
push 0xe050b307
push dword [0x449960]
call fcn.0043e080
add esp, 8
push dword [esi + 4]
call eax
jmp dword [0x445f7c]
xor ecx, ecx
mov edx, eax
sub edx, 0x237e7ddf
setl cl
mov dword [esp + 0x210], ecx
mov ecx, dword [esp + 0x214]
mov edx, dword [esp + 0x210]
mov ecx, dword [ecx + edx*4]
jmp ecx
xor ecx, ecx
mov edx, eax
sub edx, 0xf97f5bd5
setl cl
mov dword [esp + 0x190], ecx
mov ecx, dword [esp + 0x194]
mov edx, dword [esp + 0x190]
mov ecx, dword [ecx + edx*4]
jmp ecx
mov eax, dword [esp + 0x2c]
mov dword [eax], 0xdb4cf169
mov eax, dword [esp + 0xe8]
mov ecx, dword [esp + 0xec]
mov eax, dword [ecx + eax*4]
jmp eax
xor ecx, ecx
sub eax, 0xcb866a
sete cl
mov dword [esp + 0x1a8], ecx
mov eax, dword [esp + 0x1ac]
mov ecx, dword [esp + 0x1a8]
mov eax, dword [eax + ecx*4]
jmp eax
mov al, byte [esp + 0x42]
test al, al
mov eax, 0x3a168588
jne 0x42595f
mov eax, 0xb46c6ed7
mov ecx, dword [esp + 0x2c]
mov dword [ecx], eax
mov al, byte [esp + 0x33]
mov byte [esp + 0x32], al
mov eax, dword [esp + 0xd0]
mov ecx, dword [esp + 0xd4]
mov eax, dword [ecx + eax*4]
jmp eax
mov eax, dword [esp + 0x7c]
mov dword [esp], eax
call fcn.0040a310
mov eax, dword [esp + 0x2c]
mov dword [eax], 0x3d0372be
mov eax, dword [esp + 0xc8]
mov ecx, dword [esp + 0xcc]
mov eax, dword [ecx + eax*4]
jmp eax
call fcn.0040aa20
mov eax, dword [esp + 0x5c]
mov dword [esp], eax
mov eax, dword [sym.imp.GDI32.dll_DeleteObject]
call eax
sub esp, 4
mov al, byte [esp + 0x40]
and al, 1
mov byte [esp + 0x41], al
mov eax, dword [esp + 0x2c]
mov dword [eax], 0xba0e6520
mov eax, dword [esp + 0xb0]
mov ecx, dword [esp + 0xb4]
mov eax, dword [ecx + eax*4]
jmp eax
xor ecx, ecx
sub eax, 0xf01adfa
sete cl
mov dword [esp + 0x1d8], ecx
mov eax, dword [esp + 0x1dc]
mov ecx, dword [esp + 0x1d8]
mov eax, dword [eax + ecx*4]
jmp eax
xor ecx, ecx
sub eax, 0x6f818714
sete cl
mov dword [esp + 0x240], ecx
mov eax, dword [esp + 0x244]
mov ecx, dword [esp + 0x240]
mov eax, dword [eax + ecx*4]
jmp eax
mov al, byte [esp + 0x41]
and al, 1
movzx eax, al
add esp, 0x29c
pop esi
pop edi
pop ebx
pop ebp
ret
xor ecx, ecx
sub eax, 0x1842ce6
sete cl
mov dword [esp + 0x1d0], ecx
mov eax, dword [esp + 0x1d4]
mov ecx, dword [esp + 0x1d0]
mov eax, dword [eax + ecx*4]
jmp eax
mov al, byte [esp + 0x32]
mov byte [esp + 0x40], al
call fcn.0040aa20
mov eax, dword [esp + 0x2c]
mov dword [eax], 0xf97f5bd5
mov eax, dword [esp + 0xb8]
mov ecx, dword [esp + 0xbc]
mov eax, dword [ecx + eax*4]
jmp eax
xor ecx, ecx
sub eax, 0xb46c6ed7
sete cl
mov dword [esp + 0x150], ecx
mov eax, dword [esp + 0x154]
mov ecx, dword [esp + 0x150]
mov eax, dword [eax + ecx*4]
jmp eax
xor ecx, ecx
sub eax, 0x49cb4086
sete cl
mov dword [esp + 0x220], ecx
mov eax, dword [esp + 0x224]
mov ecx, dword [esp + 0x220]
mov eax, dword [eax + ecx*4]
jmp eax
xor ecx, ecx
sub eax, 0x5bd05640
sete cl
mov dword [esp + 0x230], ecx
mov eax, dword [esp + 0x234]
mov ecx, dword [esp + 0x230]
mov eax, dword [eax + ecx*4]
jmp eax
xor ecx, ecx
mov edx, eax
sub edx, 0x6dc77d20
setl cl
mov dword [esp + 0x250], ecx
mov ecx, dword [esp + 0x254]
mov edx, dword [esp + 0x250]
mov ecx, dword [ecx + edx*4]
jmp ecx
mov eax, dword [esp + 0x278]
sub eax, 0xffffffff
mov eax, 0x237e7ddf
jl 0x425b39
mov eax, 0xcb866a
mov ecx, dword [esp + 0x2c]
mov dword [ecx], eax
mov eax, dword [esp + 0x128]
mov ecx, dword [esp + 0x12c]
mov eax, dword [ecx + eax*4]
jmp eax
xor ecx, ecx
mov edx, eax
sub edx, 0xf01adfa
setl cl
mov dword [esp + 0x1e0], ecx
mov ecx, dword [esp + 0x1e4]
mov edx, dword [esp + 0x1e0]
mov ecx, dword [ecx + edx*4]
jmp ecx
xor ecx, ecx
sub eax, 0xab54a2fe
sete cl
mov dword [esp + 0x140], ecx
mov eax, dword [esp + 0x144]
mov ecx, dword [esp + 0x140]
mov eax, dword [eax + ecx*4]
jmp eax
inc ebx
pop edi
push edx
lodsb al, byte [esi]
shr byte [0x7c8bdcb0], 1
and al, 0x6c
mov al, byte [esp + 0x3c]
mov byte [esp + 0x70], al
mov dword [esp], 0x8a187bf9
mov dword [esp + 4], 5
call fcn.00419ee0
add eax, 0x53
xor eax, 0xf9
mov byte [esp + 0x44], al
mov dword [esp], 0x8a187bf9
mov dword [esp + 4], 5
call fcn.00419ee0
add eax, 0x63
xor eax, 0xfa
mov byte [esp + 0x45], al
mov dword [esp], 0x8a187bf9
mov dword [esp + 4], 5
call fcn.00419ee0
add eax, 0x72
xor eax, 0xfb
mov byte [esp + 0x46], al
mov dword [esp], 0x8a187bf9
mov dword [esp + 4], 5
call fcn.00419ee0
add eax, 0x65
xor eax, 0xfc
mov byte [esp + 0x47], al
mov dword [esp], 0x8a187bf9
mov dword [esp + 4], 5
call fcn.00419ee0
add eax, 0x65
xor eax, 0xfd
mov byte [esp + 0x48], al
mov dword [esp], 0x8a187bf9
mov dword [esp + 4], 5
call fcn.00419ee0
add eax, 0x6e
xor eax, 0xfe
mov byte [esp + 0x49], al
mov dword [esp], 0x8a187bf9
mov dword [esp + 4], 5
call fcn.00419ee0
add eax, 0x2e
xor eax, 0xff
mov byte [esp + 0x4a], al
mov dword [esp], 0x8a187bf9
mov dword [esp + 4], 5
call fcn.00419ee0
add eax, 0x70
xor eax, 0x100
mov byte [esp + 0x4b], al
mov dword [esp], 0x8a187bf9
mov dword [esp + 4], 5
call fcn.00419ee0
add eax, 0x6e
xor eax, 0x101
mov byte [esp + 0x4c], al
mov dword [esp], 0x8a187bf9
mov dword [esp + 4], 5
call fcn.00419ee0
add eax, 0x67
xor eax, 0x102
mov byte [esp + 0x4d], al
mov dword [esp], 0x8a187bf9
mov dword [esp + 4], 5
call fcn.00419ee0
xor eax, 0x103
mov byte [esp + 0x4e], al
mov eax, 0xb
mov byte [esp + eax + 0x44], 0
add eax, 1
cmp eax, 0xf
jne 0x425d13
mov dword [esp + 0x58], 0
mov eax, dword [esp + 0x58]
cmp eax, 0xf
jae 0x425d5d
mov eax, dword [esp + 0x58]
mov ecx, dword [esp + 0x58]
movzx ecx, byte [esp + ecx + 0x44]
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.00431bc0
mov ecx, dword [esp + 0x58]
mov byte [esp + ecx + 0x44], al
mov eax, dword [esp + 0x58]
inc eax
mov dword [esp + 0x58], eax
jmp 0x425d28
mov eax, dword [esp + 0x80]
mov dword [esp + 8], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x44]
mov dword [esp], eax
mov ecx, esi
call fcn.0040ac30
sub esp, 0xc
mov eax, dword [esp + 0x2c]
mov dword [eax], 0xab54a2fe
mov eax, dword [esp + 0xa0]
mov ecx, dword [esp + 0xa4]
mov eax, dword [ecx + eax*4]
jmp eax
mov al, byte [esp + 0x43]
test al, al
mov eax, 0x6dc77d20
jne 0x425dac
mov eax, 0x3a168588
mov ecx, dword [esp + 0x2c]
mov dword [ecx], eax
mov byte [esp + 0x32], 0
mov eax, dword [esp + 0x108]
mov ecx, dword [esp + 0x10c]
mov eax, dword [ecx + eax*4]
jmp eax
mov bh, 9
leave
stc
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x60]
mov dword [esp + 4], ecx
mov dword [esp], eax
mov eax, dword [sym.imp.GDI32.dll_SelectObject]
call eax
sub esp, 8
mov eax, dword [esp + 0x34]
mov dword [esp], eax
mov eax, dword [sym.imp.GDI32.dll_DeleteDC]
call eax
sub esp, 4
mov eax, dword [esp + 0x38]
mov dword [esp + 4], eax
mov dword [esp], 0
mov eax, dword [sym.imp.USER32.dll_ReleaseDC]
call eax
sub esp, 8
mov eax, dword [esp + 0x60]
mov dword [esp], eax
mov eax, dword [sym.imp.GDI32.dll_DeleteObject]
call eax
sub esp, 4
mov eax, dword [esp + 0x5c]
lea ecx, [esp + 0x8c]
mov dword [esp + 8], ecx
lea ecx, [esp + 0x6c]
mov dword [esp + 4], ecx
mov dword [esp], eax
call fcn.004266c0
mov eax, dword [esp + 0x2c]
mov dword [eax], 0x49cb4086
mov eax, dword [esp + 0xa8]
mov ecx, dword [esp + 0xac]
mov eax, dword [ecx + eax*4]
jmp eax
xor ecx, ecx
sub eax, 0x3a168588
sete cl
mov dword [esp + 0x1f0], ecx
mov eax, dword [esp + 0x1f4]
mov ecx, dword [esp + 0x1f0]
mov eax, dword [eax + ecx*4]
jmp eax
xor ecx, ecx
sub eax, 0x6dc77d20
sete cl
mov dword [esp + 0x238], ecx
mov eax, dword [esp + 0x23c]
mov ecx, dword [esp + 0x238]
mov eax, dword [eax + ecx*4]
jmp eax
call fcn.0040aa20
mov eax, dword [esp + 0x2c]
mov dword [eax], 0x49cb4086
mov eax, dword [esp + 0x118]
mov ecx, dword [esp + 0x11c]
mov eax, dword [ecx + eax*4]
jmp eax
xor ecx, ecx
sub eax, 0x4e82cd
sete cl
mov dword [esp + 0x1a0], ecx
mov eax, dword [esp + 0x1a4]
mov ecx, dword [esp + 0x1a0]
mov eax, dword [eax + ecx*4]
jmp eax
xor ecx, ecx
mov edx, eax
sub edx, 0xfc6ed6d9
setl cl
mov dword [esp + 0x1c0], ecx
mov ecx, dword [esp + 0x1c4]
mov edx, dword [esp + 0x1c0]
mov ecx, dword [ecx + edx*4]
jmp ecx
aas
xchg ebx, eax
cmp al, 0x29
mov eax, dword [esp + 0x5c]
mov dword [esp], eax
mov eax, dword [sym.imp.GDI32.dll_DeleteObject]
call eax
sub esp, 4
mov eax, dword [esp + 0x2c]
mov dword [eax], 0xf97f5bd5
mov eax, dword [esp + 0x98]
mov ecx, dword [esp + 0x9c]
mov eax, dword [ecx + eax*4]
jmp eax
xor ecx, ecx
sub eax, 0xfc6ed6d9
sete cl
mov dword [esp + 0x198], ecx
mov eax, dword [esp + 0x19c]
mov ecx, dword [esp + 0x198]
mov eax, dword [eax + ecx*4]
jmp eax
xor ecx, ecx
mov edx, eax
sub edx, 0xdb4cf169
setl cl
mov dword [esp + 0x1c8], ecx
mov ecx, dword [esp + 0x1cc]
mov edx, dword [esp + 0x1c8]
mov ecx, dword [ecx + edx*4]
jmp ecx
xor ecx, ecx
sub eax, 0xc509f530
sete cl
mov dword [esp + 0x160], ecx
mov eax, dword [esp + 0x164]
mov ecx, dword [esp + 0x160]
mov eax, dword [eax + ecx*4]
jmp eax
xor ecx, ecx
sub eax, 0xba0e6520
sete cl
mov dword [esp + 0x158], ecx
mov eax, dword [esp + 0x15c]
mov ecx, dword [esp + 0x158]
mov eax, dword [eax + ecx*4]
jmp eax
xor ecx, ecx
mov edx, eax
sub edx, 0xc509f530
setl cl
mov dword [esp + 0x168], ecx
mov ecx, dword [esp + 0x16c]
mov edx, dword [esp + 0x168]
mov ecx, dword [ecx + edx*4]
jmp ecx
xor ecx, ecx
mov edx, eax
sub edx, 0x4e82cd
setl cl
mov dword [esp + 0x1b8], ecx
mov ecx, dword [esp + 0x1bc]
mov edx, dword [esp + 0x1b8]
mov ecx, dword [ecx + edx*4]
jmp ecx
xor ecx, ecx
mov edx, eax
sub edx, 0xcb866a
setl cl
mov dword [esp + 0x1b0], ecx
mov ecx, dword [esp + 0x1b4]
mov edx, dword [esp + 0x1b0]
mov ecx, dword [ecx + edx*4]
jmp ecx
call fcn.0040aa20
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x60]
mov dword [esp + 4], ecx
mov dword [esp], eax
mov eax, dword [sym.imp.GDI32.dll_SelectObject]
call eax
sub esp, 8
mov eax, dword [esp + 0x34]
mov dword [esp], eax
mov eax, dword [sym.imp.GDI32.dll_DeleteDC]
call eax
sub esp, 4
mov eax, dword [esp + 0x38]
mov dword [esp + 4], eax
mov dword [esp], 0
mov eax, dword [sym.imp.USER32.dll_ReleaseDC]
call eax
sub esp, 8
mov eax, dword [esp + 0x60]
mov dword [esp], eax
mov eax, dword [sym.imp.GDI32.dll_DeleteObject]
call eax
sub esp, 4
mov eax, dword [esp + 0x5c]
lea ecx, [esp + 0x8c]
mov dword [esp + 8], ecx
lea ecx, [esp + 0x6c]
mov dword [esp + 4], ecx
mov dword [esp], eax
call fcn.004266c0
mov byte [esp + 0x43], al
mov eax, dword [esp + 0x2c]
mov dword [eax], 0x6f818714
mov eax, dword [esp + 0x110]
mov ecx, dword [esp + 0x114]
mov eax, dword [ecx + eax*4]
jmp eax
xor ecx, ecx
mov edx, eax
sub edx, 0x3a168588
setl cl
mov dword [esp + 0x208], ecx
mov ecx, dword [esp + 0x20c]
mov edx, dword [esp + 0x208]
mov ecx, dword [ecx + edx*4]
jmp ecx
xor ecx, ecx
mov edx, eax
sub edx, 0x6f818714
setl cl
mov dword [esp + 0x248], ecx
mov ecx, dword [esp + 0x24c]
mov edx, dword [esp + 0x248]
mov ecx, dword [ecx + edx*4]
jmp ecx
xor ecx, ecx
mov edx, eax
sub edx, 0x49cb4086
setl cl
mov dword [esp + 0x228], ecx
mov ecx, dword [esp + 0x22c]
mov edx, dword [esp + 0x228]
mov ecx, dword [ecx + edx*4]
jmp ecx
xor ecx, ecx
mov edx, eax
sub edx, 0xba0e6520
setl cl
mov dword [esp + 0x170], ecx
mov ecx, dword [esp + 0x174]
mov edx, dword [esp + 0x170]
mov ecx, dword [ecx + edx*4]
jmp ecx
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x88]
mov edx, dword [esp + 0x84]
mov edi, dword [esp + 0x68]
mov ebx, dword [esp + 0x64]
mov ebp, dword [esp + 0x34]
mov dword [esp + 0x24], edx
mov dword [esp + 0x20], ecx
mov dword [esp + 0x14], eax
mov dword [esp + 0x10], ebx
mov dword [esp + 0xc], edi
mov dword [esp], ebp
mov dword [esp + 0x28], 0xcc0020
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0
mov eax, dword [sym.imp.GDI32.dll_StretchBlt]
call eax
sub esp, 0x2c
mov eax, dword [esp + 0x2c]
mov dword [eax], 0xcb866a
mov eax, dword [esp + 0x120]
mov ecx, dword [esp + 0x124]
mov eax, dword [ecx + eax*4]
jmp eax
mov edi, dword [esp + 0x6c]
mov al, byte [esp + 0x3c]
mov byte [esp + 0x74], al
mov dword [esp], 0x8a187bf9
mov dword [esp + 4], 5
call fcn.00419ee0
add eax, 0x53
xor eax, 0xf9
mov byte [esp + 0x44], al
mov dword [esp], 0x8a187bf9
mov dword [esp + 4], 5
call fcn.00419ee0
add eax, 0x63
xor eax, 0xfa
mov byte [esp + 0x45], al
mov dword [esp], 0x8a187bf9
mov dword [esp + 4], 5
call fcn.00419ee0
add eax, 0x72
xor eax, 0xfb
mov byte [esp + 0x46], al
mov dword [esp], 0x8a187bf9
mov dword [esp + 4], 5
call fcn.00419ee0
add eax, 0x65
xor eax, 0xfc
mov byte [esp + 0x47], al
mov dword [esp], 0x8a187bf9
mov dword [esp + 4], 5
call fcn.00419ee0
add eax, 0x65
xor eax, 0xfd
mov byte [esp + 0x48], al
mov dword [esp], 0x8a187bf9
mov dword [esp + 4], 5
call fcn.00419ee0
add eax, 0x6e
xor eax, 0xfe
mov byte [esp + 0x49], al
mov dword [esp], 0x8a187bf9
mov dword [esp + 4], 5
call fcn.00419ee0
add eax, 0x2e
xor eax, 0xff
mov byte [esp + 0x4a], al
mov dword [esp], 0x8a187bf9
mov dword [esp + 4], 5
call fcn.00419ee0
add eax, 0x70
xor eax, 0x100
mov byte [esp + 0x4b], al
mov dword [esp], 0x8a187bf9
mov dword [esp + 4], 5
call fcn.00419ee0
add eax, 0x6e
xor eax, 0x101
mov byte [esp + 0x4c], al
mov dword [esp], 0x8a187bf9
mov dword [esp + 4], 5
call fcn.00419ee0
add eax, 0x67
xor eax, 0x102
mov byte [esp + 0x4d], al
mov dword [esp], 0x8a187bf9
mov dword [esp + 4], 5
call fcn.00419ee0
xor eax, 0x103
mov byte [esp + 0x4e], al
mov eax, 0xb
mov byte [esp + eax + 0x44], 0
add eax, 1
cmp eax, 0xf
jne 0x426374
mov dword [esp + 0x54], 0
mov eax, dword [esp + 0x54]
cmp eax, 0xf
jae 0x4263be
mov eax, dword [esp + 0x54]
mov ecx, dword [esp + 0x54]
movzx ecx, byte [esp + ecx + 0x44]
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.00431bc0
mov ecx, dword [esp + 0x54]
mov byte [esp + ecx + 0x44], al
mov eax, dword [esp + 0x54]
inc eax
mov dword [esp + 0x54], eax
jmp 0x426389
mov eax, dword [esp + 0x80]
mov dword [esp + 8], eax
mov dword [esp + 4], edi
lea eax, [esp + 0x44]
mov dword [esp], eax
mov ecx, esi
call fcn.0040ac30
sub esp, 0xc
mov byte [esp + 0x33], al
mov eax, dword [esp + 0x2c]
mov dword [eax], 0x925f92d6
mov eax, dword [esp + 0xf0]
mov ecx, dword [esp + 0xf4]
mov eax, dword [ecx + eax*4]
jmp eax
xor ecx, ecx
mov edx, eax
sub edx, 0xab54a2fe
setl cl
mov dword [esp + 0x148], ecx
mov ecx, dword [esp + 0x14c]
mov edx, dword [esp + 0x148]
mov ecx, dword [ecx + edx*4]
jmp ecx
xor ecx, ecx
mov edx, eax
sub edx, 0x42bb3250
setl cl
mov dword [esp + 0x260], ecx
mov ecx, dword [esp + 0x264]
mov edx, dword [esp + 0x260]
mov ecx, dword [ecx + edx*4]
jmp ecx
xor ecx, ecx
sub eax, 0xf97f5bd5
sete cl
mov dword [esp + 0x188], ecx
mov eax, dword [esp + 0x18c]
mov ecx, dword [esp + 0x188]
mov eax, dword [eax + ecx*4]
jmp eax
xor ecx, ecx
sub eax, 0x42bb3250
sete cl
mov dword [esp + 0x218], ecx
mov eax, dword [esp + 0x21c]
mov ecx, dword [esp + 0x218]
mov eax, dword [eax + ecx*4]
jmp eax
xor ecx, ecx
mov edx, eax
sub edx, 0x1842ce6
setl cl
mov dword [esp + 0x268], ecx
mov ecx, dword [esp + 0x26c]
mov edx, dword [esp + 0x268]
mov ecx, dword [ecx + edx*4]
jmp ecx
mov eax, dword [esp + 0x7c]
test eax, eax
sete byte [esp + 0x42]
mov eax, dword [esp + 0x2c]
mov dword [eax], 0x4e82cd
mov eax, dword [esp + 0xd8]
mov ecx, dword [esp + 0xdc]
mov eax, dword [ecx + eax*4]
jmp eax
mov eax, dword [esp + 0x6c]
mov dword [esp + 0x7c], eax
mov eax, dword [esp + 0x2c]
mov dword [eax], 0x5bd05640
mov eax, dword [esp + 0xe0]
mov ecx, dword [esp + 0xe4]
mov eax, dword [ecx + eax*4]
jmp eax
xor ecx, ecx
sub eax, 0x3d0372be
sete cl
mov dword [esp + 0x1f8], ecx
mov eax, dword [esp + 0x1fc]
mov ecx, dword [esp + 0x1f8]
mov eax, dword [eax + ecx*4]
jmp eax
call fcn.0040aa20
mov eax, dword [esp + 0x2c]
mov dword [eax], 0xab54a2fe
mov eax, dword [esp + 0xf8]
mov ecx, dword [esp + 0xfc]
mov eax, dword [ecx + eax*4]
jmp eax
mov eax, dword [esp + 0x90]
mov ecx, dword [esp + 0x94]
mov eax, dword [ecx + eax*4]
jmp eax
mov eax, dword [esp + 0x78]
mov ecx, dword [esp + 0x270]
mov edx, dword [esp + 0x274]
mov ecx, dword [edx + ecx*4]
jmp ecx
mov eax, dword [esp + 0x8c]
mov dword [esp + 0x80], eax
mov eax, dword [esp + 0x2c]
mov dword [eax], 0x1842ce6
mov eax, dword [esp + 0x100]
mov ecx, dword [esp + 0x104]
mov eax, dword [ecx + eax*4]
jmp eax
xor ecx, ecx
mov edx, eax
sub edx, 0x5bd05640
setl cl
mov dword [esp + 0x258], ecx
mov ecx, dword [esp + 0x25c]
mov edx, dword [esp + 0x258]
mov ecx, dword [ecx + edx*4]
jmp ecx
xor ecx, ecx
mov edx, eax
sub edx, 0xb46c6ed7
setl cl
mov dword [esp + 0x178], ecx
mov ecx, dword [esp + 0x17c]
mov edx, dword [esp + 0x178]
mov ecx, dword [ecx + edx*4]
jmp ecx
xor ecx, ecx
sub eax, 0x925f92d6
sete cl
mov dword [esp + 0x138], ecx
mov eax, dword [esp + 0x13c]
mov ecx, dword [esp + 0x138]
mov eax, dword [eax + ecx*4]
jmp eax
xor ecx, ecx
sub eax, 0x237e7ddf
sete cl
mov dword [esp + 0x1e8], ecx
mov eax, dword [esp + 0x1ec]
mov ecx, dword [esp + 0x1e8]
mov eax, dword [eax + ecx*4]
jmp eax
xor ecx, ecx
mov edx, eax
sub edx, 0x3d0372be
setl cl
mov dword [esp + 0x200], ecx
mov ecx, dword [esp + 0x204]
mov edx, dword [esp + 0x200]
mov ecx, dword [ecx + edx*4]
jmp ecx
mov eax, dword [esp + 0x2c]
mov dword [eax], 0x3a168588
mov al, byte [esp + 0x33]
mov byte [esp + 0x32], al
mov eax, dword [esp + 0xc0]
mov ecx, dword [esp + 0xc4]
mov eax, dword [ecx + eax*4]
jmp eax
xor ecx, ecx
sub eax, 0xdb4cf169
sete cl
mov dword [esp + 0x180], ecx
mov eax, dword [esp + 0x184]
mov ecx, dword [esp + 0x180]
mov eax, dword [eax + ecx*4]
jmp eax
mov eax, dword [esp + 0x130]
mov ecx, dword [esp + 0x134]
mov eax, dword [ecx + eax*4]
jmp eax
xor ecx, ecx
sub eax, 0x975b4225
sete cl
mov dword [esp + 0x158], ecx
mov eax, dword [esp + 0x15c]
mov ecx, dword [esp + 0x158]
mov eax, dword [eax + ecx*4]
jmp eax
xor ecx, ecx
mov edx, eax
sub edx, 0x9c9b2272
setl cl
mov dword [esp + 0x1a8], ecx
mov ecx, dword [esp + 0x1ac]
mov edx, dword [esp + 0x1a8]
mov ecx, dword [ecx + edx*4]
jmp ecx
xor ecx, ecx
sub eax, 0x959d93e
sete cl
mov dword [esp + 0x228], ecx
mov eax, dword [esp + 0x22c]
mov ecx, dword [esp + 0x228]
mov eax, dword [eax + ecx*4]
jmp eax
call fcn.0040aa20
mov eax, dword [esp + 0x1c]
mov dword [eax], 0x3bf9ad9
mov eax, dword [esp + 0xb8]
mov ecx, dword [esp + 0xbc]
mov eax, dword [ecx + eax*4]
jmp eax
mov eax, dword [esp + 0x2c]
mov eax, dword [eax]
mov ecx, dword [esp + 0x44]
mov edx, eax
not edx
mov esi, ecx
and esi, edx
mov edx, ecx
not edx
mov ebx, eax
and ebx, edx
imul ebx, esi
mov edx, eax
and edx, ecx
or eax, ecx
imul eax, edx
add eax, ebx
mov ecx, dword [esp + 0x38]
imul eax, ecx
mov ecx, dword [esp + 0x30]
add ecx, eax
mov dword [esp + 0x31c], ecx
mov eax, dword [esp + 0x1c]
mov dword [eax], 0x427b1649
mov dword [esp + 0x4c], 0
mov eax, dword [esp + 0x118]
mov ecx, dword [esp + 0x11c]
mov eax, dword [ecx + eax*4]
jmp eax
xor ecx, ecx
mov edx, eax
sub edx, 0x427b1649
setl cl
mov dword [esp + 0x300], ecx
mov ecx, dword [esp + 0x304]
mov edx, dword [esp + 0x300]
mov ecx, dword [ecx + edx*4]
jmp ecx
xor ecx, ecx
mov edx, eax
sub edx, 0x4b17159b
setl cl
mov dword [esp + 0x2b8], ecx
mov ecx, dword [esp + 0x2bc]
mov edx, dword [esp + 0x2b8]
mov ecx, dword [ecx + edx*4]
jmp ecx
xor ecx, ecx
mov edx, eax
sub edx, 0x30d00bfa
setl cl
mov dword [esp + 0x278], ecx
mov ecx, dword [esp + 0x27c]
mov edx, dword [esp + 0x278]
mov ecx, dword [ecx + edx*4]
jmp ecx
call fcn.0040aa20
mov al, byte [esp + 0x25]
and al, 1
mov byte [esp + 0x27], al
mov eax, dword [esp + 0x1c]
mov dword [eax], 0xd3f00761
mov eax, dword [esp + 0x80]
mov ecx, dword [esp + 0x84]
mov eax, dword [ecx + eax*4]
jmp eax
xor ecx, ecx
sub eax, 0x9f748b7
sete cl
mov dword [esp + 0x230], ecx
mov eax, dword [esp + 0x234]
mov ecx, dword [esp + 0x230]
mov eax, dword [eax + ecx*4]
jmp eax
call fcn.0040aa20
mov eax, dword [esp + 0x1c]
mov dword [eax], 0x30d00bfa
mov eax, dword [esp + 0xe8]
mov ecx, dword [esp + 0xec]
mov eax, dword [ecx + eax*4]
jmp eax
xor ecx, ecx
sub eax, 0x8e45264e
sete cl
mov dword [esp + 0x148], ecx
mov eax, dword [esp + 0x14c]
mov ecx, dword [esp + 0x148]
mov eax, dword [eax + ecx*4]
jmp eax
xor ecx, ecx
mov edx, eax
sub edx, 0xcd80378a
setl cl
mov dword [esp + 0x1d0], ecx
mov ecx, dword [esp + 0x1d4]
mov edx, dword [esp + 0x1d0]
mov ecx, dword [ecx + edx*4]
jmp ecx
mov eax, dword [esp + 0x318]
mov ecx, dword [esp + 0x388]
mov dword [ecx], eax
mov eax, dword [esp + 0x1c]
mov dword [eax], 0x72c0d324
mov eax, dword [esp + 0xf0]
mov ecx, dword [esp + 0xf4]
mov eax, dword [ecx + eax*4]
jmp eax
xor ecx, ecx
sub eax, 0x79dc7238
sete cl
mov dword [esp + 0x2e0], ecx
mov eax, dword [esp + 0x2e4]
mov ecx, dword [esp + 0x2e0]
mov eax, dword [eax + ecx*4]
jmp eax
xor ecx, ecx
mov edx, eax
sub edx, 0x959d93e
setl cl
mov dword [esp + 0x240], ecx
mov ecx, dword [esp + 0x244]
mov edx, dword [esp + 0x240]
mov ecx, dword [ecx + edx*4]
jmp ecx
xor ecx, ecx
sub eax, 0x238e0fef
sete cl
mov dword [esp + 0x248], ecx
mov eax, dword [esp + 0x24c]
mov ecx, dword [esp + 0x248]
mov eax, dword [eax + ecx*4]
jmp eax
mov al, byte [esp + 0x24]
mov byte [esp + 0x26], al
call fcn.0040aa20
mov eax, dword [esp + 0x1c]
mov dword [eax], 0xcf1b0ffa
mov eax, dword [esp + 0xc0]
mov ecx, dword [esp + 0xc4]
mov eax, dword [ecx + eax*4]
jmp eax
enter 0xffffffffffffd93f, 0x7a
mov eax, dword [esp + 0x1c]
mov dword [eax], 0xa20a961b
mov eax, dword [esp + 0x60]
mov ecx, dword [esp + 0x64]
mov eax, dword [ecx + eax*4]
jmp eax
xor ecx, ecx
mov edx, eax
sub edx, 0x47dc35dd
setl cl
mov dword [esp + 0x298], ecx
mov ecx, dword [esp + 0x29c]
mov edx, dword [esp + 0x298]
mov ecx, dword [ecx + edx*4]
jmp ecx
xchg ecx, eax
out dx, al
jecxz 0x42711c
mov eax, dword [esp + 0x1c]
mov dword [eax], 0xcf1b0ffa
mov eax, dword [esp + 0x70]
mov ecx, dword [esp + 0x74]
mov eax, dword [ecx + eax*4]
jmp eax
mov eax, dword [esp + 0x1c]
mov dword [eax], 0xfcb7f9f2
mov byte [esp + 0x24], 1
mov eax, dword [esp + 0xc8]
mov ecx, dword [esp + 0xcc]
mov eax, dword [ecx + eax*4]
jmp eax
xor ecx, ecx
mov edx, eax
sub edx, 0x2855fdf9
setl cl
mov dword [esp + 0x258], ecx
mov ecx, dword [esp + 0x25c]
mov edx, dword [esp + 0x258]
mov ecx, dword [ecx + edx*4]
jmp ecx
xor ecx, ecx
mov edx, eax
sub edx, 0x58ac21c7
setl cl
mov dword [esp + 0x2f8], ecx
mov ecx, dword [esp + 0x2fc]
add byte [eax], al
mov edx, dword [esp + 0x2f8]
mov ecx, dword [ecx + edx*4]
jmp ecx
mov eax, dword [esp + 0x140]
mov ecx, dword [esp + 0x144]
mov eax, dword [ecx + eax*4]
jmp eax
xor ecx, ecx
mov edx, eax
sub edx, 0xcf1b0ffa
setl cl
mov dword [esp + 0x1c8], ecx
mov ecx, dword [esp + 0x1cc]
mov edx, dword [esp + 0x1c8]
mov ecx, dword [ecx + edx*4]
jmp ecx
xor ecx, ecx
mov edx, eax
sub edx, 0x5197b90a
setl cl
mov dword [esp + 0x2b0], ecx
mov ecx, dword [esp + 0x2b4]
mov edx, dword [esp + 0x2b0]
mov ecx, dword [ecx + edx*4]
jmp ecx
mov eax, dword [esp + 0x1c]
mov dword [eax], 0xd583b8a3
mov eax, dword [esp + 0x98]
mov ecx, dword [esp + 0x9c]
mov eax, dword [ecx + eax*4]
jmp eax
xor ecx, ecx
sub eax, 0x5197b90a
sete cl
mov dword [esp + 0x2a8], ecx
mov eax, dword [esp + 0x2ac]
mov ecx, dword [esp + 0x2a8]
mov eax, dword [eax + ecx*4]
jmp eax
xor ecx, ecx
sub eax, 0xabc070a4
sete cl
mov dword [esp + 0x190], ecx
mov eax, dword [esp + 0x194]
mov ecx, dword [esp + 0x190]
mov eax, dword [eax + ecx*4]
jmp eax
xor ecx, ecx
sub eax, 0xb3e49dff
sete cl
mov dword [esp + 0x1b0], ecx
mov eax, dword [esp + 0x1b4]
mov ecx, dword [esp + 0x1b0]
mov eax, dword [eax + ecx*4]
jmp eax
xor ecx, ecx
mov edx, eax
sub edx, 0xfcb7f9f2
setl cl
mov dword [esp + 0x200], ecx
mov ecx, dword [esp + 0x204]
mov edx, dword [esp + 0x200]
mov ecx, dword [ecx + edx*4]
jmp ecx
mov eax, dword [esp + 0x4c]
mov dword [esp + 0x34], eax
mov eax, dword [esp + 0x2c]
mov eax, dword [eax]
mov ecx, dword [esp + 0x34]
sub ecx, eax
mov eax, 0x8f857bb6
jl 0x42725b
mov eax, 0x47dc35dd
mov ecx, dword [esp + 0x1c]
mov dword [ecx], eax
mov eax, dword [esp + 0x110]
mov ecx, dword [esp + 0x114]
mov eax, dword [ecx + eax*4]
jmp eax
xor ecx, ecx
mov edx, eax
sub edx, 0xfb990041
setl cl
mov dword [esp + 0x208], ecx
mov ecx, dword [esp + 0x20c]
mov edx, dword [esp + 0x208]
mov ecx, dword [ecx + edx*4]
jmp ecx
xor ecx, ecx
sub eax, 0x47dc35dd
sete cl
mov dword [esp + 0x290], ecx
mov eax, dword [esp + 0x294]
mov ecx, dword [esp + 0x290]
mov eax, dword [eax + ecx*4]
jmp eax
xor ecx, ecx
mov edx, eax
sub edx, 0x238e0fef
setl cl
mov dword [esp + 0x280], ecx
mov ecx, dword [esp + 0x284]
mov edx, dword [esp + 0x280]
mov ecx, dword [ecx + edx*4]
jmp ecx
xor ecx, ecx
sub eax, 0xd3f00761
sete cl
mov dword [esp + 0x1d8], ecx
mov eax, dword [esp + 0x1dc]
mov ecx, dword [esp + 0x1d8]
mov eax, dword [eax + ecx*4]
jmp eax
mov eax, dword [esp + 0x320]
test eax, eax
mov eax, 0x9f748b7
jne 0x42731f
mov eax, 0x68a1864b
mov ecx, dword [esp + 0x1c]
mov dword [ecx], eax
mov byte [esp + 0x23], 0
mov eax, dword [esp + 0x138]
mov ecx, dword [esp + 0x13c]
mov eax, dword [ecx + eax*4]
jmp eax
mov al, byte [esp + 0x27]
and al, 1
movzx eax, al
add esp, 0x36c
pop esi
pop edi
pop ebx
pop ebp
ret
mov dword [esp + 0x54], 0
mov eax, dword [esp + 0x28]
mov eax, dword [eax]
mov ecx, dword [esp + 0x2c]
mov ecx, dword [ecx]
mov edx, dword [esp + 0x44]
mov esi, dword [esp + 0x30]
lea ebx, [esp + 0x54]
mov dword [esp + 0x10], ebx
mov dword [esp + 0xc], edx
mov dword [esp + 8], eax
mov dword [esp + 4], ecx
mov dword [esp], esi
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 9
call fcn.004063e0
mov dword [esp + 0x3c], eax
mov eax, dword [esp + 0x3c]
test eax, eax
mov eax, 0xcd80378a
jne 0x4273af
mov eax, 0xfcb7f9f2
mov ecx, dword [esp + 0x1c]
mov dword [ecx], eax
mov byte [esp + 0x24], 0
mov eax, dword [esp + 0x120]
mov ecx, dword [esp + 0x124]
mov eax, dword [ecx + eax*4]
jmp eax
mov eax, dword [esp + 0x1c]
mov dword [eax], 0xfb990041
mov eax, dword [esp + 0xd0]
mov ecx, dword [esp + 0xd4]
mov eax, dword [ecx + eax*4]
jmp eax
mov eax, dword [esp + 0x58]
mov ecx, dword [esp + 0x5c]
mov eax, dword [ecx + eax*4]
jmp eax
call fcn.0040aa20
mov eax, dword [esp + 0x1c]
mov dword [eax], 0xa20a961b
mov eax, dword [esp + 0x88]
mov ecx, dword [esp + 0x8c]
mov eax, dword [ecx + eax*4]
jmp eax
xor ecx, ecx
mov edx, eax
sub edx, 0x79dc7238
setl cl
mov dword [esp + 0x2e8], ecx
mov ecx, dword [esp + 0x2ec]
mov edx, dword [esp + 0x2e8]
mov ecx, dword [ecx + edx*4]
jmp ecx
xor ecx, ecx
sub eax, 0x3bf9ad9
sete cl
mov dword [esp + 0x220], ecx
mov eax, dword [esp + 0x224]
mov ecx, dword [esp + 0x220]
mov eax, dword [eax + ecx*4]
jmp eax
xor ecx, ecx
sub eax, 0xcf1b0ffa
sete cl
mov dword [esp + 0x1c0], ecx
mov eax, dword [esp + 0x1c4]
mov ecx, dword [esp + 0x1c0]
mov eax, dword [eax + ecx*4]
jmp eax
mov eax, dword [esp + 0x38]
inc eax
mov ecx, dword [esp + 0x1c]
mov dword [ecx], 0x348b7036
mov dword [esp + 0x50], eax
mov eax, dword [esp + 0x108]
mov ecx, dword [esp + 0x10c]
mov eax, dword [ecx + eax*4]
jmp eax
xor ecx, ecx
sub eax, 0x9cb95b46
sete cl
mov dword [esp + 0x178], ecx
mov eax, dword [esp + 0x17c]
mov ecx, dword [esp + 0x178]
mov eax, dword [eax + ecx*4]
jmp eax
xor ecx, ecx
mov edx, eax
sub edx, 0xb3e49dff
setl cl
mov dword [esp + 0x218], ecx
mov ecx, dword [esp + 0x21c]
mov edx, dword [esp + 0x218]
mov ecx, dword [ecx + edx*4]
jmp ecx
mov eax, dword [esp + 0x1c]
mov dword [eax], 0x975b4225
mov eax, dword [esp + 0xd8]
mov ecx, dword [esp + 0xdc]
mov eax, dword [ecx + eax*4]
jmp eax
xor ecx, ecx
mov edx, eax
sub edx, 0x348b7036
setl cl
mov dword [esp + 0x270], ecx
mov ecx, dword [esp + 0x274]
mov edx, dword [esp + 0x270]
mov ecx, dword [ecx + edx*4]
jmp ecx
mov eax, dword [esp + 0x50]
mov dword [esp + 0x38], eax
mov eax, dword [esp + 0x28]
mov eax, dword [eax]
mov ecx, dword [esp + 0x38]
sub ecx, eax
mov eax, 0x2855fdf9
jl 0x42755d
mov eax, 0x9c9b2272
mov ecx, dword [esp + 0x1c]
mov dword [ecx], eax
mov eax, dword [esp + 0x128]
mov ecx, dword [esp + 0x12c]
mov eax, dword [ecx + eax*4]
jmp eax
xor ecx, ecx
mov edx, eax
sub edx, 0x8f857bb6
setl cl
mov dword [esp + 0x168], ecx
mov ecx, dword [esp + 0x16c]
mov edx, dword [esp + 0x168]
mov ecx, dword [ecx + edx*4]
jmp ecx
xor ecx, ecx
sub eax, 0x68a1864b
sete cl
mov dword [esp + 0x2c8], ecx
mov eax, dword [esp + 0x2cc]
mov ecx, dword [esp + 0x2c8]
mov eax, dword [eax + ecx*4]
jmp eax
xor ecx, ecx
mov edx, eax
sub edx, 0x68a1864b
setl cl
mov dword [esp + 0x2d0], ecx
mov ecx, dword [esp + 0x2d4]
mov edx, dword [esp + 0x2d0]
mov ecx, dword [ecx + edx*4]
jmp ecx
xor ecx, ecx
sub eax, 0xcd80378a
sete cl
mov dword [esp + 0x1b8], ecx
mov eax, dword [esp + 0x1bc]
mov ecx, dword [esp + 0x1b8]
mov eax, dword [eax + ecx*4]
jmp eax
xor ecx, ecx
sub eax, 0x2855fdf9
sete cl
mov dword [esp + 0x250], ecx
mov eax, dword [esp + 0x254]
mov ecx, dword [esp + 0x250]
mov eax, dword [eax + ecx*4]
jmp eax
xor ecx, ecx
mov edx, eax
sub edx, 0x9f748b7
setl cl
mov dword [esp + 0x238], ecx
mov ecx, dword [esp + 0x23c]
mov edx, dword [esp + 0x238]
mov ecx, dword [ecx + edx*4]
jmp ecx
xor ecx, ecx
mov edx, eax
sub edx, 0x9cb95b46
setl cl
mov dword [esp + 0x180], ecx
mov ecx, dword [esp + 0x184]
mov edx, dword [esp + 0x180]
mov ecx, dword [ecx + edx*4]
jmp ecx
xor ecx, ecx
sub eax, 0x30d00bfa
sete cl
mov dword [esp + 0x260], ecx
mov eax, dword [esp + 0x264]
mov ecx, dword [esp + 0x260]
mov eax, dword [eax + ecx*4]
jmp eax
call fcn.0040aa20
mov eax, dword [esp + 0x3c]
mov dword [edi], eax
mov eax, dword [esp + 0x1c]
mov dword [eax], 0x58ac21c7
mov eax, dword [esp + 0xe0]
mov ecx, dword [esp + 0xe4]
mov eax, dword [ecx + eax*4]
jmp eax
xor ecx, ecx
mov edx, eax
sub edx, 0x72c0d324
setl cl
mov dword [esp + 0x2f0], ecx
mov ecx, dword [esp + 0x2f4]
mov edx, dword [esp + 0x2f0]
mov ecx, dword [ecx + edx*4]
jmp ecx
mov eax, dword [esp + 0x1c]
mov dword [eax], 0x68a1864b
mov al, byte [esp + 0x26]
mov byte [esp + 0x23], al
mov eax, dword [esp + 0xb0]
mov ecx, dword [esp + 0xb4]
mov eax, dword [ecx + eax*4]
jmp eax
xor ecx, ecx
sub eax, 0xfcb7f9f2
sete cl
mov dword [esp + 0x1f8], ecx
mov eax, dword [esp + 0x1fc]
mov ecx, dword [esp + 0x1f8]
mov eax, dword [eax + ecx*4]
jmp eax
xor ecx, ecx
sub eax, 0x58ac21c7
sete cl
mov dword [esp + 0x2c0], ecx
mov eax, dword [esp + 0x2c4]
mov ecx, dword [esp + 0x2c0]
mov eax, dword [eax + ecx*4]
jmp eax
xor ecx, ecx
mov edx, eax
sub edx, 0xa20a961b
setl cl
mov dword [esp + 0x1a0], ecx
mov ecx, dword [esp + 0x1a4]
mov edx, dword [esp + 0x1a0]
mov ecx, dword [ecx + edx*4]
jmp ecx
xor ecx, ecx
sub eax, 0x72c0d324
sete cl
mov dword [esp + 0x2d8], ecx
mov eax, dword [esp + 0x2dc]
mov ecx, dword [esp + 0x2d8]
mov eax, dword [eax + ecx*4]
jmp eax
xor ecx, ecx
sub eax, 0xfb990041
sete cl
mov dword [esp + 0x1f0], ecx
mov eax, dword [esp + 0x1f4]
mov ecx, dword [esp + 0x1f0]
mov eax, dword [eax + ecx*4]
jmp eax
xor ecx, ecx
sub eax, 0x9c9b2272
sete cl
mov dword [esp + 0x170], ecx
mov eax, dword [esp + 0x174]
mov ecx, dword [esp + 0x170]
mov eax, dword [eax + ecx*4]
jmp eax
mov eax, dword [esp + 0x31c]
mov ecx, dword [esp + 0x34]
mov edx, dword [eax + ecx*4]
mov esi, edx
not esi
mov ebx, esi
or ebx, 0xff00ff00
lea ebx, [ebx + edx + 1]
or esi, 0xff0000
lea esi, [esi + edx + 1]
shr esi, 0x10
movzx edx, dl
shl edx, 0x10
or ebx, edx
or ebx, esi
mov dword [eax + ecx*4], ebx
mov eax, dword [esp + 0x34]
inc eax
mov ecx, dword [esp + 0x1c]
mov dword [ecx], 0x427b1649
mov dword [esp + 0x4c], eax
mov eax, dword [esp + 0x100]
mov ecx, dword [esp + 0x104]
mov eax, dword [ecx + eax*4]
jmp eax
mov eax, dword [esp + 0x54]
mov dword [esp + 0x318], eax
mov eax, dword [esp + 0x1c]
mov dword [eax], 0x8e45264e
mov eax, dword [esp + 0xf8]
mov ecx, dword [esp + 0xfc]
mov eax, dword [ecx + eax*4]
jmp eax
xor ecx, ecx
mov edx, eax
sub edx, 0x975b4225
setl cl
mov dword [esp + 0x160], ecx
mov ecx, dword [esp + 0x164]
mov edx, dword [esp + 0x160]
mov ecx, dword [ecx + edx*4]
jmp ecx
call fcn.0040aa20
mov eax, dword [esp + 0x40]
mov dword [esp + 4], eax
mov dword [esp], 0
mov eax, dword [sym.imp.USER32.dll_ReleaseDC]
call eax
sub esp, 8
mov eax, dword [esp + 0x1c]
mov dword [eax], 0x9cb95b46
mov eax, dword [esp + 0xa0]
mov ecx, dword [esp + 0xa4]
mov eax, dword [ecx + eax*4]
jmp eax
xor ecx, ecx
sub eax, 0x8f857bb6
sete cl
mov dword [esp + 0x150], ecx
mov eax, dword [esp + 0x154]
mov ecx, dword [esp + 0x150]
mov eax, dword [eax + ecx*4]
jmp eax
xor ecx, ecx
mov edx, eax
sub edx, 0xabc070a4
setl cl
mov dword [esp + 0x198], ecx
mov ecx, dword [esp + 0x19c]
mov edx, dword [esp + 0x198]
mov ecx, dword [ecx + edx*4]
jmp ecx
mov eax, dword [esp + 0x40]
mov dword [esp + 4], eax
mov dword [esp], 0
mov eax, dword [sym.imp.USER32.dll_ReleaseDC]
call eax
sub esp, 8
mov eax, dword [esp + 0x1c]
mov dword [eax], 0xabc070a4
mov eax, dword [esp + 0x68]
mov ecx, dword [esp + 0x6c]
mov eax, dword [ecx + eax*4]
jmp eax
xor ecx, ecx
mov edx, eax
sub edx, 0x3bf9ad9
setl cl
mov dword [esp + 0x308], ecx
mov ecx, dword [esp + 0x30c]
mov edx, dword [esp + 0x308]
mov ecx, dword [ecx + edx*4]
jmp ecx
xor ecx, ecx
mov edx, eax
sub edx, 0xd3f00761
setl cl
mov dword [esp + 0x210], ecx
mov ecx, dword [esp + 0x214]
mov edx, dword [esp + 0x210]
mov ecx, dword [ecx + edx*4]
jmp ecx
mov al, byte [esp + 0x23]
mov byte [esp + 0x25], al
call fcn.0040aa20
mov eax, dword [esp + 0x1c]
mov dword [eax], 0xabc070a4
mov eax, dword [esp + 0xa8]
mov ecx, dword [esp + 0xac]
mov eax, dword [ecx + eax*4]
jmp eax
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x310]
mov edx, dword [esp + 0x314]
mov ecx, dword [edx + ecx*4]
jmp ecx
xor ecx, ecx
sub eax, 0x348b7036
sete cl
mov dword [esp + 0x268], ecx
mov eax, dword [esp + 0x26c]
mov ecx, dword [esp + 0x268]
mov eax, dword [eax + ecx*4]
jmp eax
xor ecx, ecx
mov edx, eax
sub edx, 0xd583b8a3
setl cl
mov dword [esp + 0x1e8], ecx
mov ecx, dword [esp + 0x1ec]
mov edx, dword [esp + 0x1e8]
mov ecx, dword [ecx + edx*4]
jmp ecx
xor ecx, ecx
sub eax, 0xd583b8a3
sete cl
mov dword [esp + 0x1e0], ecx
mov eax, dword [esp + 0x1e4]
mov ecx, dword [esp + 0x1e0]
mov eax, dword [eax + ecx*4]
jmp eax
xor ecx, ecx
sub eax, 0xa20a961b
sete cl
mov dword [esp + 0x188], ecx
mov eax, dword [esp + 0x18c]
mov ecx, dword [esp + 0x188]
mov eax, dword [eax + ecx*4]
jmp eax
xor ecx, ecx
sub eax, 0x4b17159b
sete cl
mov dword [esp + 0x2a0], ecx
mov eax, dword [esp + 0x2a4]
mov ecx, dword [esp + 0x2a0]
mov eax, dword [eax + ecx*4]
jmp eax
mov eax, 0x8b99ce36
inc esp
and al, 0x3c
mov dword [edi], eax
mov eax, dword [esp + 0x1c]
mov dword [eax], 0x30d00bfa
mov eax, dword [esp + 0x78]
mov ecx, dword [esp + 0x7c]
mov eax, dword [ecx + eax*4]
jmp eax
xor ecx, ecx
sub eax, 0x427b1649
sete cl
mov dword [esp + 0x288], ecx
mov eax, dword [esp + 0x28c]
mov ecx, dword [esp + 0x288]
mov eax, dword [eax + ecx*4]
jmp eax
mov eax, dword [esp + 0x1c]
mov dword [eax], 0x348b7036
mov dword [esp + 0x50], 0
mov eax, dword [esp + 0x130]
mov ecx, dword [esp + 0x134]
mov eax, dword [ecx + eax*4]
jmp eax
mov eax, dword [esp + 0x30]
mov dword [esp], eax
call fcn.0040a310
mov eax, dword [esp + 0x1c]
mov dword [eax], 0x238e0fef
mov eax, dword [esp + 0x90]
mov ecx, dword [esp + 0x94]
mov eax, dword [ecx + eax*4]
jmp eax
jmp 0x42809e
mov dword [esi + 8], edi
movzx edi, word [eax]
test di, di
je 0x428070
mov dword [esi + 0xc], eax
mov edx, eax
add edx, 2
xor ecx, ecx
jmp 0x427f1f
add eax, ebx
mov ecx, eax
movzx edi, word [edx]
add edx, 2
test di, di
je 0x427f43
mov eax, ecx
movzx ecx, di
cmp ecx, 0x800
mov edi, 3
sbb edi, 0
mov ebx, 1
cmp ecx, 0x80
jb 0x427f10
mov ebx, edi
jmp 0x427f10
mov edi, dword [esi + 0xc]
lea eax, [ecx + 4]
and eax, 0xfffffffc
call fcn.0040a2d0
mov eax, esp
and eax, 0xfffffff0
mov esp, eax
test ecx, ecx
jle 0x428078
lea edx, [eax + ecx]
mov dword [esi + 0x14], edx
inc ecx
add ecx, eax
mov dword [esi + 0xc0], ecx
mov edx, eax
mov ecx, edi
mov edi, dword [esi + 8]
jmp 0x427f98
mov byte [edx], bl
mov dword [esi + 4], 1
add ecx, 2
add edx, dword [esi + 4]
cmp edx, dword [esi + 0x14]
jae 0x42807d
movzx ebx, word [ecx]
test bx, bx
je 0x42807d
cmp bx, 0x7f
jbe 0x427f80
mov dword [esi + 0xc], ecx
mov edi, dword [esi + 0xc0]
sub edi, edx
mov ecx, edi
not ecx
and ecx, 1
and edi, 0xfffffffe
sub edi, ecx
movzx ecx, bx
cmp edi, 2
jb 0x428000
cmp ecx, 0x7ff
ja 0x428000
mov ecx, ebx
shr ecx, 6
add cl, 0xc0
mov byte [edx], cl
and bl, 0x3f
or bl, 0x80
mov byte [edx + 1], bl
mov dword [esi + 4], 2
mov edi, dword [esi + 8]
mov ecx, dword [esi + 0xc]
jmp 0x427f89
mov dword [esi + 0x98], ecx
mov dword [esi + 4], 0
cmp edi, 3
mov edi, dword [esi + 8]
mov ecx, dword [esi + 0xc]
jb 0x427f89
mov ecx, dword [esi + 0x98]
shr ecx, 0xc
or cl, 0xe0
mov byte [edx], cl
mov ecx, dword [esi + 0xc]
shr dword [esi + 0x98], 6
mov dword [esi + 0xac], edx
mov edx, dword [esi + 0x98]
and dl, 0x3f
or dl, 0x80
mov dword [esi + 4], ebx
mov ebx, dword [esi + 0xac]
mov byte [ebx + 1], dl
mov edx, dword [esi + 0xac]
mov ebx, dword [esi + 4]
and bl, 0x3f
or bl, 0x80
mov byte [edx + 2], bl
mov dword [esi + 4], 3
jmp 0x427f89
push eax
mov eax, esp
and eax, 0xfffffff0
mov esp, eax
mov edx, eax
mov edi, dword [esi + 8]
mov byte [edx], 0
movzx ecx, byte [eax]
test cl, cl
je 0x42809b
inc eax
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [edi], cl
inc edi
movzx ecx, byte [eax]
inc eax
test cl, cl
jne 0x428090
mov byte [edi], 0
mov byte [edi], 0xa
inc edi
lea eax, [esi + 0x1dc]
push eax
call fcn.0042a900
add esp, 4
movzx eax, al
mov dword [esi + 8], edi
jmp dword [eax*4 + 0x446868]
jmp 0x42a4c0
mov ecx, dword [esi + 0x1dc]
mov byte [esi + 0x7fa], 0
test ecx, ecx
je 0x42813a
lea ebx, [esi + 0x7fa]
cmp ecx, 0x64
jb 0x428149
nop
mov dword [esi + 4], ebx
mov eax, ecx
mov edx, 0x51eb851f
mul edx
shr edx, 5
imul edi, edx, 0x64
mov eax, ecx
sub eax, edi
mov ebx, eax
and ebx, 2
mov edi, eax
or eax, 2
imul eax, ebx
xor ebx, 2
and edi, 0x7d
imul edi, ebx
mov ebx, dword [esi + 4]
movzx eax, word [edi + eax + 0x441318]
mov word [ebx - 2], ax
add ebx, 0xfffffffe
cmp ecx, 0x270f
mov ecx, edx
ja 0x4280e0
cmp edx, 9
ja 0x428150
movzx eax, byte [edx + str.0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZ]
mov byte [ebx - 1], al
dec ebx
jmp 0x42815f
lea ebx, [esi + 0x7f9]
mov byte [esi + 0x7f9], 0x30
jmp 0x428162
mov edx, ecx
cmp edx, 9
jbe 0x42812d
movzx eax, word [edx + edx + 0x441318]
mov word [ebx - 2], ax
add ebx, 0xfffffffe
mov edi, dword [esi + 8]
mov ecx, dword [esi + 0x1e0]
mov byte [esi + 0xe2], 0
test ecx, ecx
mov dword [esi + 4], ebx
je 0x4281ea
lea edi, [esi + 0xe2]
cmp ecx, 0x64
jb 0x4281fc
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov dword [esi + 0xc], edi
mov eax, ecx
mov edx, 0x51eb851f
mul edx
shr edx, 5
imul edi, edx, 0x64
mov eax, ecx
sub eax, edi
mov edi, eax
and edi, 2
mov ebx, eax
or eax, 2
imul eax, edi
xor edi, 2
and ebx, 0x7d
imul ebx, edi
movzx eax, word [ebx + eax + 0x441318]
mov edi, dword [esi + 0xc]
mov word [edi - 2], ax
add edi, 0xfffffffe
cmp ecx, 0x270f
mov ecx, edx
ja 0x428190
cmp edx, 9
ja 0x428203
movzx eax, byte [edx + str.0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZ]
mov byte [edi - 1], al
dec edi
jmp 0x428212
lea eax, [esi + 0xe1]
mov dword [esi + 0xc], eax
mov byte [esi + 0xe1], 0x30
jmp 0x42821b
mov edx, ecx
cmp edx, 9
jbe 0x4281dd
movzx eax, word [edx + edx + 0x441318]
mov word [edi - 2], ax
add edi, 0xfffffffe
mov dword [esi + 0xc], edi
mov edi, dword [esi + 8]
mov ebx, dword [esi + 4]
mov ecx, dword [esi + 0x1e4]
mov byte [esi + 0x74e], 0
test ecx, ecx
je 0x42829a
lea ebx, [esi + 0x74e]
cmp ecx, 0x64
jb 0x4282ac
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov dword [esi + 0x14], ebx
mov eax, ecx
mov edx, 0x51eb851f
mul edx
shr edx, 5
imul edi, edx, 0x64
mov eax, ecx
sub eax, edi
mov ebx, eax
and ebx, 2
mov edi, eax
or eax, 2
imul eax, ebx
xor ebx, 2
and edi, 0x7d
imul edi, ebx
mov ebx, dword [esi + 0x14]
movzx eax, word [edi + eax + 0x441318]
mov word [ebx - 2], ax
add ebx, 0xfffffffe
cmp ecx, 0x270f
mov ecx, edx
ja 0x428240
cmp edx, 9
ja 0x4282b3
movzx eax, byte [edx + str.0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZ]
mov byte [ebx - 1], al
dec ebx
jmp 0x4282c2
lea eax, [esi + 0x74d]
mov dword [esi + 0x14], eax
mov byte [esi + 0x74d], 0x30
jmp 0x4282cb
mov edx, ecx
cmp edx, 9
jbe 0x42828d
movzx eax, word [edx + edx + 0x441318]
mov word [ebx - 2], ax
add ebx, 0xfffffffe
mov dword [esi + 0x14], ebx
mov edi, dword [esi + 8]
mov ebx, dword [esi + 4]
mov eax, dword [esi + 0x1ec]
mov dword [esi + 0x544], 0x5e887aa4
mov dword [esi + 0x548], 0xb8aa8b59
mov dword [esi + 0x54c], 0xc6b9c4c4
mov dword [esi + 0x550], 0x5d7c89c4
mov word [esi + 0x554], 0
mov byte [esi + 0x556], 0
mov dword [esi + 0x68], 0
mov ecx, dword [esi + 0x68]
cmp ecx, 0x12
ja 0x428354
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, dword [esi + 0x68]
mov edx, dword [esi + 0x68]
movzx edx, byte [esi + edx + 0x544]
add ecx, 0xa1d18ffa
xor ecx, edx
mov dword [esi + 0x34], ecx
mov ecx, dword [esi + 0x34]
add cl, 0xac
mov edx, dword [esi + 0x68]
mov byte [esi + edx + 0x544], cl
inc dword [esi + 0x68]
mov ecx, dword [esi + 0x68]
cmp ecx, 0x13
jb 0x428320
movzx ecx, byte [esi + 0x544]
test cl, cl
je 0x42837b
lea edx, [esi + 0x545]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [edi], cl
inc edi
movzx ecx, byte [edx]
inc edx
test cl, cl
jne 0x428370
mov byte [edi], 0
movzx ecx, byte [eax]
test cl, cl
je 0x42839b
inc eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [edi], cl
inc edi
movzx ecx, byte [eax]
inc eax
test cl, cl
jne 0x428390
mov word [edi], 0x2820
add edi, 2
movzx eax, byte [ebx]
test al, al
je 0x4283bb
inc ebx
nop
nop
nop
nop
nop
mov byte [edi], al
inc edi
movzx eax, byte [ebx]
inc ebx
test al, al
jne 0x4283b0
mov byte [edi], 0x2e
inc edi
mov ecx, dword [esi + 0xc]
movzx eax, byte [ecx]
test al, al
je 0x4283dd
inc ecx
mov edx, dword [esi + 0x14]
nop
nop
nop
mov byte [edi], al
inc edi
movzx eax, byte [ecx]
inc ecx
test al, al
jne 0x4283d0
jmp 0x4283e0
mov edx, dword [esi + 0x14]
mov byte [edi], 0x2e
inc edi
movzx eax, byte [edx]
test al, al
je 0x4283fb
inc edx
nop
nop
nop
nop
mov byte [edi], al
inc edi
movzx eax, byte [edx]
inc edx
test al, al
jne 0x4283f0
mov byte [edi], 0x29
inc edi
lea eax, [esi + 0x18]
push eax
call fcn.0043e880
add esp, 4
movzx eax, al
jmp dword [eax*4 + 0x446870]
jmp dword [0x446884]
mov byte [edi], 0x20
xor eax, eax
cmp dword [esi + 0x18], 1
sete al
jmp dword [eax*4 + 0x446878]
mov dword [esi + 0x544], 0x2e7b7ab5
mov byte [esi + 0x548], 0
mov dword [esi + 0x68], 0
mov eax, dword [esi + 0x68]
cmp eax, 4
ja 0x42850b
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esi + 0x68]
mov ecx, dword [esi + 0x68]
movzx edx, byte [esi + ecx + 0x544]
lea ecx, [eax + edx]
add ecx, 0x8a3e6cbc
add eax, 0x8a3e6cbc
and eax, edx
mov edx, ecx
not edx
and edx, eax
add edx, eax
not eax
and eax, ecx
sub eax, edx
mov dword [esi + 0x34], eax
mov eax, dword [esi + 0x34]
add al, 0x6f
mov ecx, dword [esi + 0x68]
mov byte [esi + ecx + 0x544], al
inc dword [esi + 0x68]
mov eax, dword [esi + 0x68]
cmp eax, 5
jb 0x428460
jmp 0x42850b
mov dword [esi + 0x544], 0x71bcbefc
mov byte [esi + 0x548], 0
mov dword [esi + 0x68], 0
mov eax, dword [esi + 0x68]
cmp eax, 4
ja 0x42850b
nop
nop
nop
nop
nop
mov eax, dword [esi + 0x68]
mov ecx, dword [esi + 0x68]
movzx ecx, byte [esi + ecx + 0x544]
lea edx, [eax + 0x1b]
and edx, ecx
add eax, ecx
add edx, edx
sub eax, edx
add eax, 0x79ccf81b
mov dword [esi + 0x34], eax
mov eax, dword [esi + 0x34]
add al, 0x91
mov ecx, dword [esi + 0x68]
mov byte [esi + ecx + 0x544], al
inc dword [esi + 0x68]
mov eax, dword [esi + 0x68]
cmp eax, 5
jb 0x4284d0
lea eax, [esi + 0x544]
inc edi
movzx ecx, byte [eax]
test cl, cl
je 0x42852b
inc eax
nop
nop
nop
nop
nop
nop
mov byte [edi], cl
inc edi
movzx ecx, byte [eax]
inc eax
test cl, cl
jne 0x428520
mov byte [edi], 0
jmp dword [0x446884]
mov dword [esi + 0xc], ebx
mov eax, 0xb
xor ecx, ecx
cpuid
mov edi, ebx
and ecx, 0xff00
xor eax, eax
cmp ecx, 0x200
sete al
jmp dword [eax*4 + 0x446910]
mov eax, 0xb
mov ecx, 1
cpuid
mov edi, ebx
sar ecx, 8
mov eax, ecx
or eax, 0xff
xor ecx, 0xffffff00
and ecx, eax
xor eax, eax
cmp ecx, 2
sete al
jmp dword [eax*4 + 0x446918]
movzx edi, byte [esi + 4]
xor eax, eax
xor ecx, ecx
cpuid
cmp eax, 4
jl 0x42862c
mov eax, 4
xor ecx, ecx
cpuid
jmp 0x429a61
xor eax, eax
mov ecx, dword [esi + 0xc]
and ecx, 0xffff
sete al
jmp dword [eax*4 + 0x446930]
jmp dword [0x446940]
movzx eax, di
xor edx, edx
div ecx
jmp case.0x421d66.380
xor eax, eax
xor ecx, ecx
cpuid
cmp eax, 4
jl 0x4285eb
mov eax, 4
xor ecx, ecx
cpuid
jmp 0x429a61
mov eax, SysReAllocString
xor ecx, ecx
cpuid
mov dword [esi + 4], eax
mov eax, 1
xor ecx, ecx
cpuid
mov eax, 1
test edx, 0x10000000
je case.0x421d66.380
cmp dword [esi + 4], reloc.OLEAUT32.dll_VariantClear
jl case.0x421d66.380
mov eax, reloc.OLEAUT32.dll_VariantClear
xor ecx, ecx
cpuid
jmp 0x429a9a
mov eax, SysReAllocString
xor ecx, ecx
cpuid
mov dword [esi + 4], eax
mov eax, 1
xor ecx, ecx
cpuid
mov eax, 1
test edx, 0x10000000
je case.0x421d66.380
cmp dword [esi + 4], reloc.OLEAUT32.dll_VariantClear
jl case.0x421d66.380
mov eax, reloc.OLEAUT32.dll_VariantClear
xor ecx, ecx
cpuid
jmp 0x429a9a
mov dword [esi + 0x544], 0xc3b2b0b7
mov byte [esi + 0x548], 0x27
mov dword [esi + 0x549], 0
mov dword [esi + 0x54c], 0
mov dword [esi + 0x7f0], 0
mov eax, dword [esi + 0x7f0]
cmp eax, 0xb
ja 0x4286f7
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esi + 0x7f0]
mov ecx, dword [esi + 0x7f0]
movzx ecx, byte [esi + ecx + 0x544]
add eax, 0x8e959b72
xor eax, ecx
mov dword [esi + 0x1dc], eax
mov eax, dword [esi + 0x1dc]
add al, 0xaf
mov ecx, dword [esi + 0x7f0]
mov byte [esi + ecx + 0x544], al
inc dword [esi + 0x7f0]
mov eax, dword [esi + 0x7f0]
cmp eax, 0xc
jb 0x4286b0
lea eax, [esi + 0x544]
mov dword [esi + 0x1dc], 0xaf49496d
mov dword [esi + 0x1e0], 0x8ffb8d87
mov dword [esi + 0x1e4], 0xcaf589fb
mov word [esi + 0x1e8], 0x1233
mov dword [esi + 0x1ea], 0
mov dword [esi + 0xd8], 0
mov ecx, dword [esi + 0xd8]
cmp ecx, 0x11
ja 0x428799
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, dword [esi + 0xd8]
mov edx, dword [esi + 0xd8]
movzx edx, byte [esi + edx + 0x1dc]
add ecx, 0x8e82feb6
xor ecx, edx
mov dword [esi + 0x7f0], ecx
mov ecx, dword [esi + 0x7f0]
add cl, 0x2f
mov edx, dword [esi + 0xd8]
mov byte [esi + edx + 0x1dc], cl
inc dword [esi + 0xd8]
mov ecx, dword [esi + 0xd8]
cmp ecx, 0x12
jb 0x428750
movzx ecx, byte [esi + 0x1dc]
test cl, cl
je 0x4287bb
lea edx, [esi + 0x1dd]
nop
nop
nop
nop
nop
nop
mov byte [edi], cl
inc edi
movzx ecx, byte [edx]
inc edx
test cl, cl
jne 0x4287b0
mov byte [edi], 0
movzx ecx, byte [eax]
test cl, cl
je 0x4287db
inc eax
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [edi], cl
inc edi
movzx ecx, byte [eax]
inc eax
test cl, cl
jne 0x4287d0
mov byte [edi], 0
mov byte [esi + 0x534], 0
mov dword [esi + 0xd0], 0x10
push 0x4cbcd57b
push dword [0x449960]
call fcn.0043e080
add esp, 8
lea ecx, [esi + 0xd0]
lea edx, [esi + 0x534]
push ecx
push edx
call eax
mov dword [esi + 0x1dc], 0xad95a989
mov dword [esi + 0x1e0], 0x7b797578
mov dword [esi + 0x1e4], 0xac7b497b
mov word [esi + 0x1e8], 0xe083
mov dword [esi + 0x1ea], 0
mov dword [esi + 0x7f0], 0
mov eax, dword [esi + 0x7f0]
cmp eax, 0x11
ja 0x4288a7
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esi + 0x7f0]
mov ecx, dword [esi + 0x7f0]
movzx ecx, byte [esi + ecx + 0x1dc]
add eax, 0xd1f36e4d
xor eax, ecx
mov dword [esi + 0x544], eax
mov eax, dword [esi + 0x544]
add al, 0x46
mov ecx, dword [esi + 0x7f0]
mov byte [esi + ecx + 0x1dc], al
inc dword [esi + 0x7f0]
mov eax, dword [esi + 0x7f0]
cmp eax, 0x12
jb 0x428860
movzx eax, byte [esi + 0x1dc]
test al, al
je 0x4288cb
lea ecx, [esi + 0x1dd]
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [edi], al
inc edi
movzx eax, byte [ecx]
inc ecx
test al, al
jne 0x4288c0
mov byte [edi], 0
movzx eax, byte [esi + 0x534]
test al, al
je 0x4288eb
lea ecx, [esi + 0x535]
nop
mov byte [edi], al
inc edi
movzx eax, byte [ecx]
inc ecx
test al, al
jne 0x4288e0
mov dword [esi + 8], edi
mov byte [edi], 0
mov dword [esi + 0x7f0], 0
mov dword [esi + 0x7f4], 0
mov eax, dword [0x448654]
mov dword [esi + 0x1dc], 0xd87fda74
mov dword [esi + 0x1e0], 0xdc7ede43
mov dword [esi + 0x1e4], 0xc06ac24d
mov dword [esi + 0x1e8], 0xc411c616
mov dword [esi + 0x1ec], 0xc86fca17
mov dword [esi + 0x1f0], 0xcc63ce65
mov dword [esi + 0x1f4], 0xb2cd
mov byte [esi + 0x1f8], 0
mov dword [esi + 0xd8], 0
mov ecx, dword [esi + 0xd8]
cmp ecx, 0x1c
ja 0x4289b9
nop
nop
nop
nop
mov ecx, dword [esi + 0xd8]
mov edx, dword [esi + 0xd8]
movzx edx, byte [esi + edx + 0x1dc]
add ecx, 0x90194b27
xor ecx, edx
mov dword [esi + 0x544], ecx
mov ecx, dword [esi + 0x544]
add cl, 0xe
mov edx, dword [esi + 0xd8]
mov byte [esi + edx + 0x1dc], cl
inc dword [esi + 0xd8]
mov ecx, dword [esi + 0xd8]
cmp ecx, 0x1d
jb 0x428970
push 0x800
push 0
lea edi, [esi + 0x1dc]
push edi
call eax
lea ecx, [esi + 0x7f0]
push eax
call fcn.0043b9f0
movzx eax, al
jmp dword [eax*4 + 0x4468b0]
jmp 0x428b01
mov byte [esi + 0x1dc], 0
mov dword [esi + 0x34], 0x101
push 0x19cb8461
push dword [esi + 0x7f0]
call fcn.0043e080
add esp, 8
lea ecx, [esi + 0x34]
push ecx
push edi
call eax
mov dword [esi + 0x544], 0x6c304624
mov dword [esi + 0x548], 0x5b827281
mov word [esi + 0x54c], 0x1b3a
mov dword [esi + 0x54e], 0
mov dword [esi + 0x744], 0
mov eax, dword [esi + 0x744]
cmp eax, 0xd
ja 0x428a97
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esi + 0x744]
mov ecx, dword [esi + 0x744]
movzx ecx, byte [esi + ecx + 0x544]
add eax, 0xb336b884
xor eax, ecx
mov dword [esi + 0xd8], eax
mov eax, dword [esi + 0xd8]
add al, 0x6a
mov ecx, dword [esi + 0x744]
mov byte [esi + ecx + 0x544], al
inc dword [esi + 0x744]
mov eax, dword [esi + 0x744]
cmp eax, 0xe
jb 0x428a50
movzx eax, byte [esi + 0x544]
test al, al
je 0x428abd
lea ecx, [esi + 0x545]
mov edx, dword [esi + 8]
nop
nop
nop
nop
nop
mov byte [edx], al
inc edx
movzx eax, byte [ecx]
inc ecx
test al, al
jne 0x428ab0
jmp 0x428ac0
mov edx, dword [esi + 8]
mov edi, edx
mov byte [edx], 0
movzx eax, byte [esi + 0x1dc]
test al, al
je 0x428aed
lea ecx, [esi + 0x1dd]
mov edx, edi
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [edx], al
inc edx
movzx eax, byte [ecx]
inc ecx
test al, al
jne 0x428ae0
jmp 0x428aef
mov edx, edi
mov dword [esi + 8], edx
mov byte [edx], 0
push dword [esi + 0x7f0]
call dword [0x448758]
push 0x6ead8a84
push dword [0x449960]
call fcn.0043e080
add esp, 8
mov ebx, eax
mov byte [esi + 0x544], 0
mov dword [esi + 0xcc], 0x200
lea eax, [esi + 0xcc]
lea ecx, [esi + 0x544]
push eax
push ecx
push 6
call ebx
mov dword [esi + 0x1dc], 0x16737f5b
mov dword [esi + 0x1e0], 0x3d343bc4
mov dword [esi + 0x1e4], 0x5a7b0237
mov word [esi + 0x1e8], 0
mov dword [esi + 0xd8], 0
mov eax, dword [esi + 0xd8]
cmp eax, 0xd
ja 0x428bd2
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esi + 0xd8]
mov ecx, dword [esi + 0xd8]
movzx edx, byte [esi + ecx + 0x1dc]
lea ecx, [eax + edx]
add eax, 0x40
and eax, edx
add eax, eax
sub ecx, eax
add ecx, 0x8da27a40
mov dword [esi + 0x7f0], ecx
mov eax, dword [esi + 0x7f0]
add al, 0xef
mov ecx, dword [esi + 0xd8]
mov byte [esi + ecx + 0x1dc], al
inc dword [esi + 0xd8]
mov eax, dword [esi + 0xd8]
cmp eax, 0xe
jb 0x428b80
movzx eax, byte [esi + 0x1dc]
test al, al
je 0x428bfd
lea ecx, [esi + 0x1dd]
mov edx, dword [esi + 8]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [edx], al
inc edx
movzx eax, byte [ecx]
inc ecx
test al, al
jne 0x428bf0
jmp 0x428c00
mov edx, dword [esi + 8]
mov edi, edx
mov byte [edx], 0
movzx eax, byte [esi + 0x544]
test al, al
je 0x428c2d
lea ecx, [esi + 0x545]
mov edx, edi
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [edx], al
inc edx
movzx eax, byte [ecx]
inc ecx
test al, al
jne 0x428c20
jmp 0x428c2f
mov edx, edi
mov edi, edx
mov byte [edx], 0
mov byte [esi + 0x7f0], 0
mov dword [esi + 0xc8], 0x200
lea eax, [esi + 0xc8]
push eax
lea eax, [esi + 0x7f0]
push eax
push 5
call ebx
mov dword [esi + 0x1dc], 0xe40d0521
mov dword [esi + 0x1e0], 0x3e45bbbe
mov dword [esi + 0x1e4], 0xe323d30
mov dword [esi + 0x1e8], 0xd6f7
mov byte [esi + 0x1ec], 0
mov dword [esi + 0x744], 0
mov eax, dword [esi + 0x744]
cmp eax, 0x10
ja 0x428ce7
nop
nop
nop
nop
nop
mov eax, dword [esi + 0x744]
mov ecx, dword [esi + 0x744]
movzx ecx, byte [esi + ecx + 0x1dc]
add eax, 0x8a3ea27a
xor eax, ecx
mov dword [esi + 0xd8], eax
mov eax, dword [esi + 0xd8]
add al, 0xaf
mov ecx, dword [esi + 0x744]
mov byte [esi + ecx + 0x1dc], al
inc dword [esi + 0x744]
mov eax, dword [esi + 0x744]
cmp eax, 0x11
jb 0x428ca0
movzx eax, byte [esi + 0x1dc]
test al, al
je 0x428d0b
lea ecx, [esi + 0x1dd]
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [edi], al
inc edi
movzx eax, byte [ecx]
inc ecx
test al, al
jne 0x428d00
mov byte [edi], 0
movzx eax, byte [esi + 0x7f0]
test al, al
je 0x428d2b
lea ecx, [esi + 0x7f1]
nop
mov byte [edi], al
inc edi
movzx eax, byte [ecx]
inc ecx
test al, al
jne 0x428d20
mov byte [edi], 0
mov byte [esi + 0x524], 0
mov dword [esi + 0xc4], 0x10
lea eax, [esi + 0xc4]
lea ecx, [esi + 0x524]
push eax
push ecx
push 4
call ebx
mov dword [esi + 0x1dc], 0x1b4a784a
mov dword [esi + 0x1e0], 0x12683b33
mov dword [esi + 0x1e4], 0x416c161d
mov byte [esi + 0x1e8], 0xa0
mov dword [esi + 0x1e9], 0
mov word [esi + 0x1ed], 0
mov dword [esi + 0x744], 0
mov eax, dword [esi + 0x744]
cmp eax, 0x12
ja 0x428de7
nop
nop
mov eax, dword [esi + 0x744]
mov ecx, dword [esi + 0x744]
movzx ecx, byte [esi + ecx + 0x1dc]
add eax, 0xdf113e4f
xor eax, ecx
mov dword [esi + 0xd8], eax
mov eax, dword [esi + 0xd8]
add al, 5
mov ecx, dword [esi + 0x744]
mov byte [esi + ecx + 0x1dc], al
inc dword [esi + 0x744]
mov eax, dword [esi + 0x744]
cmp eax, 0x13
jb 0x428da0
movzx eax, byte [esi + 0x1dc]
test al, al
je 0x428e0b
lea ecx, [esi + 0x1dd]
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [edi], al
inc edi
movzx eax, byte [ecx]
inc ecx
test al, al
jne 0x428e00
mov byte [edi], 0
movzx eax, byte [esi + 0x524]
test al, al
je 0x428e2b
lea ecx, [esi + 0x525]
nop
mov byte [edi], al
inc edi
movzx eax, byte [ecx]
inc ecx
test al, al
jne 0x428e20
mov byte [edi], 0
mov word [esi + 0x744], 0
push 0x9887397f
push dword [0x449960]
call fcn.0043e080
add esp, 8
lea ebx, [esi + 0x744]
push 0x56
push ebx
call eax
mov dword [esi + 0x1dc], 0xac718165
mov dword [esi + 0x1e0], 0xc3ccccb0
mov dword [esi + 0x1e4], 0x82aecfb4
mov dword [esi + 0x1e8], 0x4a6b
mov byte [esi + 0x1ec], 0
mov dword [esi + 0x34], 0
mov eax, dword [esi + 0x34]
cmp eax, 0x10
ja 0x428ed8
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esi + 0x34]
mov ecx, dword [esi + 0x34]
movzx ecx, byte [esi + ecx + 0x1dc]
add eax, 0xcb872686
xor eax, ecx
mov dword [esi + 0xd8], eax
mov eax, dword [esi + 0xd8]
add al, 0x27
mov ecx, dword [esi + 0x34]
mov byte [esi + ecx + 0x1dc], al
inc dword [esi + 0x34]
mov eax, dword [esi + 0x34]
cmp eax, 0x11
jb 0x428ea0
movzx eax, byte [esi + 0x1dc]
test al, al
je 0x428efb
lea ecx, [esi + 0x1dd]
nop
nop
nop
nop
nop
nop
nop
mov byte [edi], al
inc edi
movzx eax, byte [ecx]
inc ecx
test al, al
jne 0x428ef0
mov byte [edi], 0
xor eax, eax
mov ecx, edi
mov dword [esi + 8], edi
jmp 0x428f2b
mov byte [ecx], dl
mov edi, 1
add ebx, 2
add eax, edi
mov edi, dword [esi + 8]
lea ecx, [edi + eax]
cmp eax, 0x55
jae 0x428fc4
movzx edx, word [ebx]
test dx, dx
je 0x428fc4
cmp dx, 0x7f
jbe 0x428f10
mov dword [esi + 4], ebx
mov ebx, 0x56
sub ebx, eax
mov edi, ebx
not edi
and edi, 1
and ebx, 0xfffffffe
sub ebx, edi
movzx edi, dx
cmp ebx, 2
jb 0x428f80
cmp edi, 0x7ff
ja 0x428f80
mov ebx, edx
shr ebx, 6
add bl, 0xc0
mov byte [ecx], bl
and dl, 0x3f
or dl, 0x80
mov byte [ecx + 1], dl
mov edi, 2
mov ebx, dword [esi + 4]
jmp 0x428f17
mov dword [esi + 0xc], edi
xor edi, edi
cmp ebx, 3
mov ebx, dword [esi + 4]
jb 0x428f17
mov edi, dword [esi + 0xc]
mov ebx, edi
shr ebx, 0xc
or bl, 0xe0
mov byte [ecx], bl
mov ebx, dword [esi + 4]
shr edi, 6
mov dword [esi + 0xc], ecx
mov ecx, edi
and cl, 0x3f
or cl, 0x80
mov edi, dword [esi + 0xc]
mov byte [edi + 1], cl
and dl, 0x3f
or dl, 0x80
mov byte [edi + 2], dl
mov edi, 3
jmp 0x428f17
mov byte [ecx], 0
mov dword [esi + 0x1dc], 0x40e0d2f4
mov dword [esi + 0x1e0], 0x9b6b716c
mov dword [esi + 0x1e4], 0x7c766e50
mov word [esi + 0x1e8], 0xb37b
mov byte [esi + 0x1ea], 0xf4
mov word [esi + 0x1eb], 0
mov byte [esi + 0x1ed], 0
mov dword [esi + 0x34], 0
mov ecx, dword [esi + 0x34]
cmp ecx, 0x11
ja 0x42905a
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, dword [esi + 0x34]
mov edx, dword [esi + 0x34]
movzx edx, byte [esi + edx + 0x1dc]
add ecx, 0xfb2bf73d
xor ecx, edx
mov dword [esi + 0xd8], ecx
mov ecx, dword [esi + 0xd8]
add cl, 0x41
mov edx, dword [esi + 0x34]
mov byte [esi + edx + 0x1dc], cl
inc dword [esi + 0x34]
mov ecx, dword [esi + 0x34]
cmp ecx, 0x12
jb 0x429020
add edi, eax
movzx eax, byte [esi + 0x1dc]
test al, al
je 0x42907b
lea ecx, [esi + 0x1dd]
nop
nop
nop
mov byte [edi], al
inc edi
movzx eax, byte [ecx]
inc ecx
test al, al
jne 0x429070
mov byte [edi], 0
call fcn.0042dd30
xor edx, edx
test eax, eax
setne dl
mov dword [esi + 8], eax
mov ecx, eax
jmp dword [edx*4 + 0x4468b8]
mov ebx, edi
mov dword [esi + 0x1dc], 0x5c4ab7a7
mov dword [esi + 0x1e0], 0x1509096f
mov byte [esi + 0x1e4], 0xb9
mov dword [esi + 0x1e5], 0
mov dword [esi + 0x34], 0
mov eax, dword [esi + 0x34]
cmp eax, 0xc
ja 0x429119
nop
nop
nop
nop
mov eax, dword [esi + 0x34]
mov ecx, dword [esi + 0x34]
movzx ecx, byte [esi + ecx + 0x1dc]
lea edx, [eax + 0x3767e257]
lea edi, [eax + 0x57]
or edx, edi
and edx, ecx
add eax, ecx
add eax, 0x3767e257
add edx, edx
sub eax, edx
mov dword [esi + 0xd8], eax
mov eax, dword [esi + 0xd8]
add al, 0x1a
mov ecx, dword [esi + 0x34]
mov byte [esi + ecx + 0x1dc], al
inc dword [esi + 0x34]
mov eax, dword [esi + 0x34]
cmp eax, 0xd
jb 0x4290d0
movzx eax, byte [esi + 0x1dc]
test al, al
je 0x42936f
lea ecx, [esi + 0x1dd]
mov edi, ebx
mov byte [edi], al
inc edi
movzx eax, byte [ecx]
inc ecx
test al, al
jne 0x429130
mov byte [edi], 0
jmp 0x429374
mov ecx, dword [ecx]
xor edx, edx
test ecx, ecx
setne dl
jmp dword [edx*4 + 0x4468d8]
mov dword [edi], 0x202d090a
add edi, 4
mov edx, dword [ecx + 8]
movzx ebx, byte [edx]
test bl, bl
je 0x42918b
inc edx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [edi], bl
inc edi
movzx ebx, byte [edx]
inc edx
test bl, bl
jne 0x429180
mov byte [edi], 0
xor edx, edx
cmp byte [ecx + 4], 3
setb dl
jmp dword [edx*4 + 0x4468c0]
mov byte [edi], 0x20
movzx edx, byte [ecx + 4]
xor ebx, ebx
test dl, dl
sete bl
jmp dword [ebx*4 + 0x4468c8]
mov eax, edi
xor ebx, ebx
cmp dl, 1
sete bl
jmp dword [ebx*4 + 0x4468d0]
lea edx, [esi + 0x1e6]
mov dword [esi + 0x1dc], 0xe1efeb10
mov dword [esi + 0x1e0], 0xf2f41ee0
mov word [esi + 0x1e4], 0xb41a
mov word [edx + 4], 0
mov dword [edx], 0
mov dword [esi + 0x68], 0
mov edx, dword [esi + 0x68]
cmp edx, 0xf
ja 0x429244
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov edx, dword [esi + 0x68]
mov edi, dword [esi + 0x68]
movzx edi, byte [esi + edi + 0x1dc]
add edx, 0x56b2d415
xor edx, edi
mov dword [esi + 0x34], edx
mov edx, dword [esi + 0x34]
add dl, 0x56
mov edi, dword [esi + 0x68]
mov byte [esi + edi + 0x1dc], dl
inc dword [esi + 0x68]
mov edx, dword [esi + 0x68]
cmp edx, 0x10
jb 0x429210
lea edx, [esi + 0x1dc]
jmp case.0x421d66.347
mov eax, edi
mov dword [esi + 0x34], 0xc1c6cc3b
mov dword [esi + 0x38], 0x9939
mov dword [esi + 0x18], 0
mov edx, dword [esi + 0x18]
cmp edx, 7
ja 0x42929e
nop
mov edx, dword [esi + 0x18]
mov edi, dword [esi + 0x18]
movzx edi, byte [esi + edi + 0x34]
add edx, 0x7dae7bb1
xor edx, edi
mov dword [esi + 0x68], edx
mov edx, dword [esi + 0x68]
add dl, 0xd1
mov edi, dword [esi + 0x18]
mov byte [esi + edi + 0x34], dl
inc dword [esi + 0x18]
mov edx, dword [esi + 0x18]
cmp edx, 8
jb 0x429270
lea edx, [esi + 0x34]
jmp case.0x421d66.347
lea edx, [esi + 0xdd]
mov dword [esi + 0xd8], 0xd010112
mov byte [esi + 0xdc], 0xd1
mov dword [edx + 3], 0
mov dword [edx], 0
mov dword [esi + 0x68], 0
mov edx, dword [esi + 0x68]
cmp edx, 0xb
ja 0x429314
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov edx, dword [esi + 0x68]
mov edi, dword [esi + 0x68]
movzx edi, byte [esi + edi + 0xd8]
add edx, 0x13caf32f
xor edx, edi
mov dword [esi + 0x34], edx
mov edx, dword [esi + 0x34]
add dl, 0x1e
mov edi, dword [esi + 0x68]
mov byte [esi + edi + 0xd8], dl
inc dword [esi + 0x68]
mov edx, dword [esi + 0x68]
cmp edx, 0xc
jb 0x4292e0
lea edx, [esi + 0xd8]
mov edi, eax
inc edi
movzx ebx, byte [edx]
test bl, bl
je 0x42933b
inc edx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [edi], bl
inc edi
movzx ebx, byte [edx]
inc edx
test bl, bl
jne 0x429330
mov byte [edi], 0
mov ecx, dword [ecx]
xor edx, edx
test ecx, ecx
setne dl
jmp dword [edx*4 + 0x4468d8]
jmp dword [0x4468e0]
mov ecx, dword [esi + 8]
mov ebx, edi
mov edi, ecx
call fcn.00431500
push edi
mov edi, ebx
call fcn.0040a310
add esp, 4
jmp 0x429374
jmp 0x429374
mov edi, ebx
mov byte [ebx], 0
mov dword [esi + 0x1dc], 0x1c750559
mov dword [esi + 0x1e0], 0x61d1522
mov word [esi + 0x1e4], 0x5e7f
mov dword [esi + 0x1e6], 0
mov word [esi + 0x1ea], 0
mov dword [esi + 0x34], 0
mov eax, dword [esi + 0x34]
cmp eax, 0xf
ja 0x4293f8
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esi + 0x34]
mov ecx, dword [esi + 0x34]
movzx ecx, byte [esi + ecx + 0x1dc]
add eax, 0x9cc4cec4
xor eax, ecx
mov dword [esi + 0xd8], eax
mov eax, dword [esi + 0xd8]
add al, 0x6d
mov ecx, dword [esi + 0x34]
mov byte [esi + ecx + 0x1dc], al
inc dword [esi + 0x34]
mov eax, dword [esi + 0x34]
cmp eax, 0x10
jb 0x4293c0
movzx eax, byte [esi + 0x1dc]
test al, al
je 0x42941b
lea ecx, [esi + 0x1dd]
nop
nop
nop
nop
nop
nop
nop
mov byte [edi], al
inc edi
movzx eax, byte [ecx]
inc ecx
test al, al
jne 0x429410
mov byte [edi], 0
movzx eax, byte [0x4485f8]
test al, al
je 0x429441
xor ecx, ecx
nop
nop
nop
nop
nop
mov byte [edi + ecx], al
movzx eax, byte [ecx + 0x4485f9]
inc ecx
test al, al
jne 0x429430
add edi, ecx
mov dword [esi + 8], edi
mov byte [edi], 0
mov dword [esi + 0xb4], 0
mov dword [esi + 0xb0], 0
push 0xd7ec7170
push dword [0x449960]
call fcn.0043e080
add esp, 8
lea ecx, [esi + 0xb0]
push ecx
call eax
mov eax, dword [esi + 0xb0]
mov ecx, dword [esi + 0xb4]
shld ecx, eax, 0x16
mov byte [esi + 0x1cf], 0
je 0x4294f8
lea edi, [esi + 0x1cf]
cmp ecx, 0x64
jb 0x429507
nop
nop
nop
nop
nop
mov eax, ecx
mov edx, 0x51eb851f
mul edx
shr edx, 5
mov eax, ecx
mov dword [esi + 4], ecx
imul ecx, edx, 0x64
sub eax, ecx
mov ebx, eax
and ebx, 2
mov ecx, eax
or eax, 2
imul eax, ebx
xor ebx, 2
and ecx, 0x7d
imul ecx, ebx
movzx eax, word [ecx + eax + 0x441318]
mov word [edi - 2], ax
add edi, 0xfffffffe
cmp dword [esi + 4], 0x270f
mov ecx, edx
ja 0x4294a0
cmp edx, 9
ja 0x42950e
movzx eax, byte [edx + str.0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZ]
mov byte [edi - 1], al
dec edi
jmp 0x42951d
lea edi, [esi + 0x1ce]
mov byte [esi + 0x1ce], 0x30
jmp 0x42951d
mov edx, ecx
cmp edx, 9
jbe 0x4294eb
movzx eax, word [edx + edx + 0x441318]
mov word [edi - 2], ax
add edi, 0xfffffffe
mov word [esi + 0xd8], 0xa0b4
mov byte [esi + 0xda], 0xe3
mov word [esi + 0xdb], 0
mov byte [esi + 0xdd], 0
mov dword [esi + 0x34], 0
mov eax, dword [esi + 0x34]
cmp eax, 5
ja 0x429591
nop
nop
nop
nop
mov eax, dword [esi + 0x34]
mov ecx, dword [esi + 0x34]
movzx ecx, byte [esi + ecx + 0xd8]
lea edx, [eax + 0x45]
add eax, ecx
and edx, ecx
add edx, edx
sub eax, edx
add eax, 0x2638f345
mov dword [esi + 0x1dc], eax
mov eax, dword [esi + 0x1dc]
add al, 0x5c
mov ecx, dword [esi + 0x34]
mov byte [esi + ecx + 0xd8], al
inc dword [esi + 0x34]
mov eax, dword [esi + 0x34]
cmp eax, 6
jb 0x429550
mov dword [esi + 0x1dc], 0x42777b9f
mov dword [esi + 0x1e0], 0x4f7b5754
mov dword [esi + 0x1e4], 0x623a2030
mov word [esi + 0x1e8], 0x627d
mov dword [esi + 0x1ea], 0
mov byte [esi + 0x1ee], 0
mov dword [esi + 0x68], 0
mov eax, dword [esi + 0x68]
cmp eax, 0x12
ja 0x429612
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esi + 0x68]
mov ecx, dword [esi + 0x68]
movzx ecx, byte [esi + ecx + 0x1dc]
add eax, 0x17f2ecf3
xor eax, ecx
mov dword [esi + 0x34], eax
mov eax, dword [esi + 0x34]
add al, 0x9e
mov ecx, dword [esi + 0x68]
mov byte [esi + ecx + 0x1dc], al
inc dword [esi + 0x68]
mov eax, dword [esi + 0x68]
cmp eax, 0x13
jb 0x4295e0
movzx eax, byte [esi + 0x1dc]
test al, al
je 0x42963d
lea ecx, [esi + 0x1dd]
mov edx, dword [esi + 8]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [edx], al
inc edx
movzx eax, byte [ecx]
inc ecx
test al, al
jne 0x429630
jmp 0x429640
mov edx, dword [esi + 8]
mov ecx, edx
mov byte [edx], 0
movzx eax, byte [edi]
test al, al
je 0x42965b
inc edi
nop
nop
nop
mov byte [ecx], al
inc ecx
movzx eax, byte [edi]
inc edi
test al, al
jne 0x429650
mov byte [ecx], 0
movzx eax, byte [esi + 0xd8]
test al, al
mov edi, ecx
je 0x42968b
lea ecx, [esi + 0xd9]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [edi], al
inc edi
movzx eax, byte [ecx]
inc ecx
test al, al
jne 0x429680
xor eax, eax
xor ecx, ecx
cpuid
mov dword [esi + 0x1b4], ebx
mov dword [esi + 0x1b8], edx
mov byte [edi], 0
mov dword [esi + 0x1bc], ecx
mov byte [esi + 0x1c0], 0
mov dword [esi + 0x1dc], 0xf7dbcf2b
mov dword [esi + 0x1e0], 0xdee7dbe9
mov dword [esi + 0x1e4], 0xb3afb0a8
mov dword [esi + 0x1e8], 0xcefc8bf
mov dword [esi + 0x34], 0
mov eax, dword [esi + 0x34]
cmp eax, 0xf
ja 0x429728
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esi + 0x34]
mov ecx, dword [esi + 0x34]
movzx ecx, byte [esi + ecx + 0x1dc]
add eax, 0x329f205b
xor eax, ecx
mov dword [esi + 0xd8], eax
mov eax, dword [esi + 0xd8]
add al, 0x9a
mov ecx, dword [esi + 0x34]
mov byte [esi + ecx + 0x1dc], al
inc dword [esi + 0x34]
mov eax, dword [esi + 0x34]
cmp eax, 0x10
jb 0x4296f0
movzx eax, byte [esi + 0x1dc]
test al, al
je 0x42974b
lea ecx, [esi + 0x1dd]
nop
nop
nop
nop
nop
nop
nop
mov byte [edi], al
inc edi
movzx eax, byte [ecx]
inc ecx
test al, al
jne 0x429740
mov byte [edi], 0
movzx eax, byte [esi + 0x1b4]
test al, al
je 0x42976b
lea ecx, [esi + 0x1b5]
nop
mov byte [edi], al
inc edi
movzx eax, byte [ecx]
inc ecx
test al, al
jne 0x429760
mov dword [esi + 8], edi
mov byte [edi], 0
mov eax, reloc.OLEAUT32.dll_SysReAllocString
xor ecx, ecx
cpuid
mov dword [esi + 0x34], eax
mov dword [esi + 0x38], ebx
mov dword [esi + 0x3c], ecx
mov dword [esi + 0x40], edx
mov eax, SysStringLen
mov ecx, 0
cpuid
mov dword [esi + 0x44], eax
mov dword [esi + 0x48], ebx
mov dword [esi + 0x4c], ecx
mov dword [esi + 0x50], edx
mov eax, SysStringLen
mov ecx, 0
cpuid
mov dword [esi + 0x54], eax
mov dword [esi + 0x58], ebx
mov dword [esi + 0x5c], ecx
mov dword [esi + 0x60], edx
lea edx, [esi + 0x98]
lea eax, [esi + 0x68]
lea ebx, [esi + 0x34]
mov edi, eax
mov ecx, 0xc
xchg esi, ebx
rep movsd dword es:[edi], dword [esi]
xchg esi, ebx
lea ebx, [esi + 0x64]
mov edi, edx
xor ecx, ecx
xchg esi, ebx
rep movsw word es:[edi], word [esi]
xchg esi, ebx
mov ecx, edx
dec ecx
xor ebx, ebx
cmp byte [edx - 1], 0x20
sete bl
jmp dword [ebx*4 + 0x4468e8]
mov byte [ecx], 0
xor edx, edx
cmp byte [ecx - 1], 0x20
lea ecx, [ecx - 1]
sete dl
jmp dword [edx*4 + 0x4468e8]
xor ecx, ecx
cmp byte [eax], 0x20
sete cl
jmp dword [ecx*4 + 0x4468f0]
inc eax
xor ecx, ecx
cmp byte [eax], 0x20
sete cl
jmp dword [ecx*4 + 0x4468f0]
mov dword [esi + 0x1dc], 0xaf8b876b
mov dword [esi + 0x1e0], 0xde8fdbd9
mov dword [esi + 0x1e4], 0x8ef6ffcc
mov word [esi + 0x1e8], 0x56b1
mov dword [esi + 0x1ea], 0
mov word [esi + 0x1ee], 0
mov dword [esi + 0x18], 0
mov ecx, dword [esi + 0x18]
cmp ecx, 0x13
mov edi, dword [esi + 8]
ja 0x4298ba
nop
nop
nop
nop
mov ecx, dword [esi + 0x18]
mov edx, dword [esi + 0x18]
movzx edx, byte [esi + edx + 0x1dc]
add ecx, 0x901a9797
xor ecx, edx
mov dword [esi + 0xd8], ecx
mov ecx, dword [esi + 0xd8]
add cl, 0xe
mov edx, dword [esi + 0x18]
mov byte [esi + edx + 0x1dc], cl
inc dword [esi + 0x18]
mov ecx, dword [esi + 0x18]
cmp ecx, 0x14
jb 0x429880
movzx ecx, byte [esi + 0x1dc]
test cl, cl
je 0x4298db
lea edx, [esi + 0x1dd]
nop
nop
nop
nop
nop
mov byte [edi], cl
inc edi
movzx ecx, byte [edx]
inc edx
test cl, cl
jne 0x4298d0
mov byte [edi], 0
movzx ecx, byte [eax]
test cl, cl
je 0x4298fc
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [edi], cl
inc edi
movzx ecx, byte [eax + 1]
inc eax
test cl, cl
jne 0x4298f0
mov byte [edi], 0
mov dword [esi + 0xd8], 0xc2c33c3d
mov word [esi + 0xdc], 0
mov dword [esi + 0xa0], 0
mov eax, dword [esi + 0xa0]
cmp eax, 5
ja 0x429971
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esi + 0xa0]
mov ecx, dword [esi + 0xa0]
movzx ecx, byte [esi + ecx + 0xd8]
add eax, 0x205af7fe
xor eax, ecx
mov dword [esi + 0x18], eax
mov eax, dword [esi + 0x18]
add al, 0x3c
mov ecx, dword [esi + 0xa0]
mov byte [esi + ecx + 0xd8], al
inc dword [esi + 0xa0]
mov eax, dword [esi + 0xa0]
cmp eax, 6
jb 0x429930
mov eax, dword [esi + 0xd8]
mov ecx, dword [0x44996c]
test ecx, ecx
mov dword [esi + 8], edi
je case.default.0x4299cb
xor edx, edx
mov edi, dword [0x449970]
nop
nop
nop
nop
cmp dword [edi + edx*8], 0xcecd21fd
je 0x4299a0
inc edx
cmp ecx, edx
jne 0x429990
jmp case.default.0x4299cb
mov ecx, dword [edi + edx*8 + 4]
cmp ecx, eax
je case.default.0x4299cb
lea eax, [esi + 0x1dc]
push 0
push 0x2c
push eax
push 0
push 4
push dword [0x449974]
push ecx
call fcn.0043c800
add esp, 0x1c
not eax
shr eax, 0x1f
jmp dword [eax*4 + 0x4468f8]
mov dword [esi + 4], 0
mov eax, 0xb
xor ecx, ecx
cpuid
and ecx, 0xff00
xor eax, eax
cmp ecx, 0x100
sete al
jmp dword [eax*4 + 0x446900]
mov eax, 0xb
xor ecx, ecx
cpuid
and ecx, 0xff00
xor eax, eax
cmp ecx, 0x100
movzx ecx, byte [esi + 0x204]
mov dword [esi + 4], ecx
sete al
jmp dword [eax*4 + 0x446900]
mov eax, 0xb
mov ecx, 1
cpuid
and ecx, 0xff00
xor eax, eax
cmp ecx, 0x100
sete al
jmp dword [eax*4 + 0x446908]
movzx edi, byte [esi + 4]
xor eax, eax
xor ecx, ecx
cpuid
cmp eax, 4
jl 0x429a66
mov eax, 4
xor ecx, ecx
cpuid
sar eax, 0x1a
jmp 0x429a9d
mov eax, SysReAllocString
xor ecx, ecx
cpuid
mov dword [esi + 4], eax
mov eax, 1
xor ecx, ecx
cpuid
mov eax, 1
test edx, 0x10000000
je case.0x421d66.380
cmp dword [esi + 4], reloc.OLEAUT32.dll_VariantClear
jl case.0x421d66.380
mov eax, reloc.OLEAUT32.dll_VariantClear
xor ecx, ecx
cpuid
movzx eax, cl
inc eax
mov byte [esi + 0x13], 0
test di, di
je 0x429afa
mov dword [esi + 4], eax
lea ecx, [esi + 0x13]
cmp di, 0x64
jb 0x429b03
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx ebx, di
mov edx, ebx
shr edx, 2
imul edx, edx, 0x147b
shr edx, 0x11
mov eax, ecx
mov ecx, edi
imul edi, edx, 0x64
sub ecx, edi
movzx edi, cx
mov ecx, eax
movzx edi, word [edi + edi + 0x441318]
mov word [eax - 2], di
add ecx, 0xfffffffe
mov edi, edx
cmp ebx, 0x270f
ja 0x429ac0
jmp 0x429b05
lea ecx, [esi + 0x12]
mov byte [esi + 0x12], 0x30
jmp 0x429b2d
mov edx, edi
movzx edx, dx
cmp dx, 9
ja 0x429b1b
movzx edx, byte [edx + str.0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZ]
mov byte [ecx - 1], dl
dec ecx
jmp 0x429b2a
movzx edx, word [edx + edx + 0x441318]
mov word [ecx - 2], dx
add ecx, 0xfffffffe
mov eax, dword [esi + 4]
mov dword [esi + 0x1dc], 0xcce6d08e
mov dword [esi + 0x1e0], 0x31e23c30
mov dword [esi + 0x1e4], 0x2a211d24
mov dword [esi + 0x1e8], 0x95d01624
mov byte [esi + 0x1ec], 0xf4
mov dword [esi + 0x1ed], 0
mov dword [esi + 0x1f0], 0
mov dword [esi + 0x18], 0
mov edx, dword [esi + 0x18]
cmp edx, 0x17
ja 0x429bc7
nop
mov edx, dword [esi + 0x18]
mov edi, dword [esi + 0x18]
movzx ebx, byte [esi + edi + 0x1dc]
lea edi, [edx + ebx]
add edx, 0xb1
and edx, ebx
add edx, edx
sub edi, edx
add edi, 0xa86279b1
mov dword [esi + 0xd8], edi
mov edx, dword [esi + 0xd8]
add dl, 0xcb
mov edi, dword [esi + 0x18]
mov byte [esi + edi + 0x1dc], dl
inc dword [esi + 0x18]
mov edx, dword [esi + 0x18]
cmp edx, 0x18
jb 0x429b80
movzx edx, byte [esi + 0x1dc]
test dl, dl
je 0x429bed
lea edi, [esi + 0x1dd]
mov ebx, dword [esi + 8]
nop
nop
nop
nop
nop
mov byte [ebx], dl
inc ebx
movzx edx, byte [edi]
inc edi
test dl, dl
jne 0x429be0
jmp 0x429bf0
mov ebx, dword [esi + 8]
mov byte [ebx], 0
movzx edx, byte [ecx]
test dl, dl
je 0x429c0b
inc ecx
nop
nop
nop
nop
nop
mov byte [ebx], dl
inc ebx
movzx edx, byte [ecx]
inc ecx
test dl, dl
jne 0x429c00
mov byte [ebx], 0
mov byte [esi + 0x13], 0
test al, al
je 0x429c41
movzx ecx, al
cmp al, 0x64
jb 0x429c4a
lea edx, [ecx + ecx*4]
lea ecx, [ecx + edx*8]
shr ecx, 0xc
imul edx, ecx, 0x64
sub al, dl
movzx eax, al
movzx eax, word [eax + eax + 0x441318]
mov word [esi + 0x11], ax
mov edx, 0xfffffffd
jmp 0x429c53
lea eax, [esi + 0x12]
mov byte [esi + 0x12], 0x30
jmp 0x429c75
mov edx, 0xffffffff
cmp al, 9
ja 0x429c66
lea eax, [esi + 0x14]
movzx ecx, byte [ecx + str.0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZ]
add eax, edx
dec eax
mov byte [esi + edx + 0x13], cl
jmp 0x429c75
movzx ecx, word [ecx + ecx + 0x441318]
lea eax, [esi + 0x11]
mov word [esi + 0x11], cx
mov dword [esi + 0x1dc], 0x5f837793
mov dword [esi + 0x1e0], 0xa37f4b51
mov dword [esi + 0x1e4], 0xd7c0d2cc
mov word [esi + 0x1e8], 0x789f
mov byte [esi + 0x1ea], 0x57
mov word [esi + 0x1eb], 0
mov dword [esi + 0x18], 0
mov ecx, dword [esi + 0x18]
cmp ecx, 0x10
ja 0x429d07
nop
nop
nop
nop
nop
mov ecx, dword [esi + 0x18]
mov edx, dword [esi + 0x18]
movzx edi, byte [esi + edx + 0x1dc]
lea edx, [ecx + edi]
add ecx, 0xfa
and ecx, edi
add ecx, ecx
sub edx, ecx
add edx, 0xfe4a53fa
mov dword [esi + 0xd8], edx
mov ecx, dword [esi + 0xd8]
add cl, 0xa1
mov edx, dword [esi + 0x18]
mov byte [esi + edx + 0x1dc], cl
inc dword [esi + 0x18]
mov ecx, dword [esi + 0x18]
cmp ecx, 0x11
jb 0x429cc0
movzx ecx, byte [esi + 0x1dc]
test cl, cl
je 0x429d2d
lea edx, [esi + 0x1dd]
mov edi, ebx
nop
nop
nop
nop
nop
nop
mov byte [edi], cl
inc edi
movzx ecx, byte [edx]
inc edx
test cl, cl
jne 0x429d20
jmp 0x429d2f
mov edi, ebx
mov byte [edi], 0
movzx ecx, byte [eax]
test cl, cl
je 0x429d4b
inc eax
nop
nop
nop
nop
nop
nop
mov byte [edi], cl
inc edi
movzx ecx, byte [eax]
inc eax
test cl, cl
jne 0x429d40
mov byte [edi], 0
mov dword [esi + 0x1dc], 0xd882b092
mov dword [esi + 0x1e0], 0xbd98f4d0
mov byte [esi + 0x1e4], 0x5c
mov word [esi + 0x1e5], 0
mov byte [esi + 0x1e7], 0
mov dword [esi + 0x18], 0
mov eax, dword [esi + 0x18]
cmp eax, 0xb
ja 0x429dc8
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esi + 0x18]
mov ecx, dword [esi + 0x18]
movzx ecx, byte [esi + ecx + 0x1dc]
add eax, 0xfff5e01b
xor eax, ecx
mov dword [esi + 0xd8], eax
mov eax, dword [esi + 0xd8]
add al, 0x81
mov ecx, dword [esi + 0x18]
mov byte [esi + ecx + 0x1dc], al
inc dword [esi + 0x18]
mov eax, dword [esi + 0x18]
cmp eax, 0xc
jb 0x429d90
movzx eax, byte [esi + 0x1dc]
test al, al
je 0x429deb
lea ecx, [esi + 0x1dd]
nop
nop
nop
nop
nop
nop
nop
mov byte [edi], al
inc edi
movzx eax, byte [ecx]
inc ecx
test al, al
jne 0x429de0
mov byte [edi], 0
mov eax, dword [0x448654]
mov dword [esi + 0x1dc], 0x6bf56df1
mov dword [esi + 0x1e0], 0x17886985
mov dword [esi + 0x1e4], 0x13cc15cb
mov dword [esi + 0x1e8], 0x1ff211c2
mov dword [esi + 0x1ec], 0x1b8e1d88
mov word [esi + 0x1f0], 0x1918
mov dword [esi + 0x1f2], 0
mov word [esi + 0x1f6], 0
mov dword [esi + 0x18], 0
mov ecx, dword [esi + 0x18]
cmp ecx, 0x1b
ja 0x429e8a
mov ecx, dword [esi + 0x18]
mov edx, dword [esi + 0x18]
movzx edx, byte [esi + edx + 0x1dc]
add ecx, 0xb292b63a
xor ecx, edx
mov dword [esi + 0xd8], ecx
mov ecx, dword [esi + 0xd8]
add cl, 0xaa
mov edx, dword [esi + 0x18]
mov byte [esi + edx + 0x1dc], cl
inc dword [esi + 0x18]
mov ecx, dword [esi + 0x18]
cmp ecx, 0x1c
jb case.default.0x429ec0
lea ebx, [esi + 0x1dc]
push 0x800
push 0
push ebx
call eax
mov dword [esi + 0xb8], 0
mov dword [esi + 0xbc], 0
lea ecx, [esi + 0xb8]
mov dword [esi + 0x14], eax
push eax
call fcn.0043b9f0
movzx eax, al
jmp dword [eax*4 + 0x446948]
jmp 0x42a22d
lea eax, [esi + 0x1e0]
push 0x344
push 0
push eax
call fcn.0040a380
add esp, 0xc
mov dword [esi + 0x1dc], 0x348
push 0x3733e33b
push dword [esi + 0xb8]
call fcn.0043e080
add esp, 8
push 0
push ebx
push 0
push 0
call eax
xor ebx, ebx
lea eax, [esi + 0x220]
mov ecx, edi
mov dword [esi + 8], edi
jmp 0x429f3c
mov byte [ecx], dl
mov ebx, 1
add eax, 2
mov ecx, dword [esi + 4]
add ecx, ebx
mov ebx, ecx
add ecx, edi
cmp ebx, 0x7f
jae 0x429fde
movzx edx, word [eax]
test dx, dx
je 0x429fde
cmp dx, 0x7f
mov dword [esi + 4], ebx
jbe 0x429f20
mov edi, 0x80
sub edi, ebx
mov ebx, edi
not ebx
and ebx, 1
and edi, 0xfe
sub edi, ebx
movzx ebx, dx
cmp edi, 2
jb 0x429fa0
cmp ebx, 0x7ff
ja 0x429fa0
mov ebx, edx
shr ebx, 6
add bl, 0xc0
mov byte [ecx], bl
and dl, 0x3f
or dl, 0x80
mov byte [ecx + 1], dl
mov ebx, 2
mov edi, dword [esi + 8]
jmp 0x429f27
mov dword [esi + 0xc], ebx
xor ebx, ebx
cmp edi, 3
mov edi, dword [esi + 8]
jb 0x429f27
mov ebx, dword [esi + 0xc]
shr ebx, 0xc
or bl, 0xe0
mov byte [ecx], bl
mov ebx, dword [esi + 0xc]
shr ebx, 6
and bl, 0x3f
or bl, 0x80
mov byte [ecx + 1], bl
and dl, 0x3f
or dl, 0x80
mov byte [ecx + 2], dl
mov ebx, 3
jmp 0x429f27
mov dword [esi + 4], ebx
mov byte [ecx], 0
lea edi, [esi + 0xd8]
push 0xdc
push 0
push edi
call fcn.0040a380
add esp, 0xc
mov word [esi + 0x11c], 0xdc
push 0x30be1b3b
push dword [esi + 0xb8]
call fcn.0043e080
add esp, 8
push edi
push 0xffffffffffffffff
push 0
call eax
mov ebx, dword [esi + 0x184]
mov byte [esi + 0xab], 0
test ebx, ebx
je 0x42a082
lea ecx, [esi + 0xab]
cmp ebx, 0x64
jb 0x42a091
nop
nop
nop
nop
nop
nop
nop
mov eax, ebx
mov edx, 0x51eb851f
mul edx
shr edx, 5
imul eax, edx, 0x64
mov edi, ecx
mov ecx, ebx
sub ecx, eax
movzx eax, word [ecx + ecx + 0x441318]
mov ecx, edi
mov word [edi - 2], ax
add ecx, 0xfffffffe
cmp ebx, 0x270f
mov ebx, edx
ja 0x42a040
cmp edx, 9
ja 0x42a098
movzx eax, byte [edx + str.0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZ]
mov byte [ecx - 1], al
dec ecx
jmp 0x42a0a7
lea ecx, [esi + 0xaa]
mov byte [esi + 0xaa], 0x30
jmp 0x42a0a7
mov edx, ebx
cmp edx, 9
jbe 0x42a075
movzx eax, word [edx + edx + 0x441318]
mov word [ecx - 2], ax
add ecx, 0xfffffffe
mov edi, dword [esi + 0x188]
mov byte [esi + 0x1db], 0
test edi, edi
mov dword [esi + 0xc], ecx
je 0x42a10e
lea ebx, [esi + 0x1db]
cmp edi, 0x64
jb 0x42a11d
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, edi
mov ecx, 0x51eb851f
mul ecx
shr edx, 5
imul eax, edx, 0x64
mov ecx, edi
sub ecx, eax
movzx eax, word [ecx + ecx + 0x441318]
mov word [ebx - 2], ax
add ebx, 0xfffffffe
cmp edi, 0x270f
mov edi, edx
ja 0x42a0d0
cmp edx, 9
ja 0x42a124
movzx eax, byte [edx + str.0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZ]
mov byte [ebx - 1], al
dec ebx
jmp 0x42a133
lea ebx, [esi + 0x1da]
mov byte [esi + 0x1da], 0x30
jmp 0x42a133
mov edx, edi
cmp edx, 9
jbe 0x42a101
movzx eax, word [edx + edx + 0x441318]
mov word [ebx - 2], ax
add ebx, 0xfffffffe
mov edi, dword [esi + 8]
mov dword [esi + 0x18], 0x82effbc7
mov dword [esi + 0x1c], 0xbebbb5a2
mov dword [esi + 0x20], 0xa4f7afb6
mov dword [esi + 0x24], 0xa6a2adbe
mov dword [esi + 0x28], 0xafb4a0a2
mov dword [esi + 0x2c], 0xdafbe2af
mov word [esi + 0x30], 0
mov byte [esi + 0x32], 0
mov dword [esi + 0x64], 0
mov eax, dword [esi + 0x64]
cmp eax, 0x1a
ja 0x42a1bd
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esi + 0x64]
mov ecx, dword [esi + 0x64]
movzx ecx, byte [esi + ecx + 0x18]
mov edx, eax
and edx, 0x28ed2ec8
xor eax, 0x28ed2ec8
lea eax, [eax + edx*2]
xor eax, ecx
mov dword [esi + 0xd4], eax
mov eax, dword [esi + 0xd4]
add al, 0xfb
mov ecx, dword [esi + 0x64]
mov byte [esi + ecx + 0x18], al
inc dword [esi + 0x64]
mov eax, dword [esi + 0x64]
cmp eax, 0x1b
jb 0x42a180
add edi, dword [esi + 4]
movzx eax, byte [esi + 0x18]
test al, al
je 0x42a1db
lea ecx, [esi + 0x19]
nop
nop
nop
nop
nop
mov byte [edi], al
inc edi
movzx eax, byte [ecx]
inc ecx
test al, al
jne 0x42a1d0
mov byte [edi], 0
mov ecx, dword [esi + 0xc]
movzx eax, byte [ecx]
test al, al
je 0x42a1fb
inc ecx
nop
nop
nop
nop
nop
nop
nop
mov byte [edi], al
inc edi
movzx eax, byte [ecx]
inc ecx
test al, al
jne 0x42a1f0
mov byte [edi], pe_nt_image_headers32
inc edi
movzx eax, byte [ebx]
test al, al
je 0x42a21b
inc ebx
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [edi], al
inc edi
movzx eax, byte [ebx]
inc ebx
test al, al
jne 0x42a210
mov byte [edi], 0
push dword [esi + 0x14]
call dword [0x448758]
lea ebx, [esi + 0x1dc]
mov byte [edi], 0
mov dword [esi + 0x1dc], 0x989861ba
mov dword [esi + 0x1e0], 0x9cd39188
mov word [esi + 0x1e4], 0x9297
mov byte [esi + 0x1e6], 0xed
mov word [esi + 0x1e7], 0
mov edx, dword [esi + 0x9c]
sub edi, edx
mov dword [esi + 0x18], 0
mov eax, dword [esi + 0x18]
cmp eax, 0xc
ja 0x42a2b8
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esi + 0x18]
mov ecx, dword [esi + 0x18]
movzx ecx, byte [esi + ecx + 0x1dc]
add eax, 0x3859e5e0
xor eax, ecx
mov dword [esi + 0xd8], eax
mov eax, dword [esi + 0xd8]
add al, 0xf9
mov ecx, dword [esi + 0x18]
mov byte [esi + ecx + 0x1dc], al
inc dword [esi + 0x18]
mov eax, dword [esi + 0x18]
cmp eax, 0xd
jb 0x42a280
mov ecx, dword [ebp + 8]
push edi
push edx
push ebx
mov edi, edx
call fcn.0040ac30
jmp dword [0x446950]
push edi
call fcn.0040a310
add esp, 4
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
movzx edi, word [esi + 0x204]
xor ecx, ecx
test di, di
setns cl
jmp dword [ecx*4 + 0x446890]
jmp 0x42a324
jmp dword [0x446898]
mov byte [eax], 0x2b
jmp dword [0x4468a4]
mov byte [eax], 0x2b
mov byte [eax], 0x2b
jmp dword [0x4468a4]
inc eax
movzx edi, word [esi + 0x204]
mov byte [esi + 0x3a], 0
test di, di
je 0x42a386
lea ecx, [esi + 0x3a]
movsx edx, di
sar edx, 0xf
mov dword [esi + 4], edi
xor edi, edx
sub edi, edx
cmp di, 0x64
jb 0x42a391
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
movzx ebx, di
mov dword [esi + 8], ebx
shr ebx, 2
imul ebx, ebx, 0x147b
shr ebx, 0x11
imul edx, ebx, 0x64
sub edi, edx
movzx edx, di
movzx edx, word [edx + edx + 0x441318]
mov word [ecx - 2], dx
add ecx, 0xfffffffe
mov edi, ebx
cmp dword [esi + 8], 0x270f
ja 0x42a350
jmp 0x42a393
lea ecx, [esi + 0x39]
mov byte [esi + 0x39], 0x30
mov bl, 0x30
jmp 0x42a3d7
mov ebx, edi
movzx edx, bx
cmp dx, 9
ja 0x42a3a9
movzx ebx, byte [edx + str.0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZ]
mov byte [ecx - 1], bl
dec ecx
jmp 0x42a3c2
movzx ebx, byte [edx + edx + 0x441319]
mov byte [ecx - 1], bl
movzx ebx, byte [edx + edx + 0x441318]
mov byte [ecx - 2], bl
add ecx, 0xfffffffe
mov edx, dword [esi + 4]
test dx, dx
js 0x42a3d0
test bl, bl
jne 0x42a3d7
jmp 0x42a3eb
mov byte [ecx - 1], 0x2d
dec ecx
mov bl, 0x2d
inc ecx
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [eax], bl
inc eax
movzx ebx, byte [ecx]
inc ecx
test bl, bl
jne 0x42a3e0
mov byte [eax], 0
mov dword [esi + 0x544], 0x84a496c8
mov dword [esi + 0x548], 0x685c5c58
mov dword [esi + 0x54c], 0x77ac6162
mov dword [esi + 0x550], 0x699ba595
mov word [esi + 0x554], 0x3556
mov dword [esi + 0x556], 0
mov dword [esi + 0x18], 0
mov ecx, dword [esi + 0x18]
cmp ecx, 0x15
ja 0x42a474
nop
nop
nop
nop
nop
nop
nop
nop
mov ecx, dword [esi + 0x18]
mov edx, dword [esi + 0x18]
movzx edx, byte [esi + edx + 0x544]
add ecx, 0x99139d75
xor ecx, edx
mov dword [esi + 0x68], ecx
mov ecx, dword [esi + 0x68]
add cl, 0x4d
mov edx, dword [esi + 0x18]
mov byte [esi + edx + 0x544], cl
inc dword [esi + 0x18]
mov ecx, dword [esi + 0x18]
cmp ecx, 0x16
jb 0x42a440
movzx ecx, byte [esi + 0x544]
test cl, cl
je 0x42a49b
lea edx, [esi + 0x545]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [eax], cl
inc eax
movzx ecx, byte [edx]
inc edx
test cl, cl
jne 0x42a490
mov byte [eax], 0
movzx ecx, byte [esi + 0x206]
test cl, cl
je 0x42a4bb
lea edx, [esi + 0x207]
nop
mov byte [eax], cl
inc eax
movzx ecx, byte [edx]
inc edx
test cl, cl
jne 0x42a4b0
mov byte [eax], 0
mov edi, eax
mov eax, dword [esi + 0x1ec]
test eax, eax
je 0x42a4d3
push eax
call fcn.0040a310
add esp, 4
call fcn.00436150
movzx eax, al
jmp dword [eax*4 + 0x4468a8]
mov dword [esi + 0x544], 0x636b9f93
mov dword [esi + 0x548], 0xf896
mov byte [esi + 0x54c], 0
mov dword [esi + 0x7f0], 0
mov eax, dword [esi + 0x7f0]
cmp eax, 8
ja 0x4286f7
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esi + 0x7f0]
mov ecx, dword [esi + 0x7f0]
movzx ecx, byte [esi + ecx + 0x544]
add eax, 0xaa5023e8
xor eax, ecx
mov dword [esi + 0x1dc], eax
mov eax, dword [esi + 0x1dc]
add al, 0xeb
mov ecx, dword [esi + 0x7f0]
mov byte [esi + ecx + 0x544], al
inc dword [esi + 0x7f0]
mov eax, dword [esi + 0x7f0]
cmp eax, 9
jb 0x42a520
jmp 0x4286f7
mov edi, ebx
mov byte [eax], 0
mov dword [esi + 0x544], 0x88e5f5c9
mov dword [esi + 0x548], 0xa4aeafba
mov dword [esi + 0x54c], 0xb8aa8aef
mov dword [esi + 0x550], 0xd0f1ecb8
mov word [esi + 0x554], 0
mov byte [esi + 0x556], 0
mov dword [esi + 0x68], 0
mov eax, dword [esi + 0x68]
cmp eax, 0x12
ja 0x42a5f2
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esi + 0x68]
mov ecx, dword [esi + 0x68]
movzx ecx, byte [esi + ecx + 0x544]
add eax, 0x1da57e44
xor eax, ecx
mov dword [esi + 0x34], eax
mov eax, dword [esi + 0x34]
add al, 0x7d
mov ecx, dword [esi + 0x68]
mov byte [esi + ecx + 0x544], al
inc dword [esi + 0x68]
mov eax, dword [esi + 0x68]
cmp eax, 0x13
jb 0x42a5c0
movzx ecx, byte [esi + 0x544]
mov eax, edi
test cl, cl
je 0x42a61b
lea edx, [esi + 0x545]
mov eax, edi
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [eax], cl
inc eax
movzx ecx, byte [edx]
inc edx
test cl, cl
jne 0x42a610
mov byte [eax], 0
movzx ecx, byte [esi + 0x1f0]
mov ebx, edi
test cl, cl
je 0x42a64b
lea edx, [esi + 0x1f1]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [eax], cl
inc eax
movzx ecx, byte [edx]
inc edx
test cl, cl
jne 0x42a640
mov byte [eax], 0
mov dword [esi + 0x544], 0x467d6909
mov dword [esi + 0x548], 0x6b4adb2
mov dword [esi + 0x54c], 0xcfd7d7c1
mov dword [esi + 0x550], 0x323c0025
mov dword [esi + 0x554], 0x6c20
mov dword [esi + 0x68], 0
mov ecx, dword [esi + 0x68]
cmp ecx, 0x13
ja 0x42a6ce
nop
mov ecx, dword [esi + 0x68]
mov edx, dword [esi + 0x68]
movzx edi, byte [esi + edx + 0x544]
lea edx, [ecx + edi]
add ecx, 0x39
and ecx, edi
add ecx, ecx
sub edx, ecx
add edx, 0x31909f39
mov dword [esi + 0x34], edx
mov ecx, dword [esi + 0x34]
add cl, 0xda
mov edx, dword [esi + 0x68]
mov byte [esi + edx + 0x544], cl
inc dword [esi + 0x68]
mov ecx, dword [esi + 0x68]
cmp ecx, 0x14
jb 0x42a690
movzx ecx, byte [esi + 0x544]
test cl, cl
je 0x42a704
lea edx, [esi + 0x545]
mov edi, ebx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [eax], cl
inc eax
movzx ecx, byte [edx]
inc edx
test cl, cl
jne 0x42a6f0
mov byte [eax], 0
jmp dword [0x446888]
mov edi, ebx
mov byte [eax], 0
jmp dword [0x446888]
mov dword [esi + 0x544], 0x88e5f5c9
mov dword [esi + 0x548], 0xa4aeafba
mov dword [esi + 0x54c], 0xb8aa8aef
mov dword [esi + 0x550], 0xd0f1ecb8
mov word [esi + 0x554], 0
mov byte [esi + 0x556], 0
mov dword [esi + 0x68], 0
mov eax, dword [esi + 0x68]
cmp eax, 0x12
ja 0x42a792
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov eax, dword [esi + 0x68]
mov ecx, dword [esi + 0x68]
movzx ecx, byte [esi + ecx + 0x544]
add eax, 0x1da57e44
xor eax, ecx
mov dword [esi + 0x34], eax
mov eax, dword [esi + 0x34]
add al, 0x7d
mov ecx, dword [esi + 0x68]
mov byte [esi + ecx + 0x544], al
inc dword [esi + 0x68]
mov eax, dword [esi + 0x68]
cmp eax, 0x13
jb 0x42a760
movzx ecx, byte [esi + 0x544]
mov eax, edi
test cl, cl
je 0x42a7bb
lea edx, [esi + 0x545]
mov eax, edi
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [eax], cl
inc eax
movzx ecx, byte [edx]
inc edx
test cl, cl
jne 0x42a7b0
mov byte [eax], 0
movzx ecx, byte [esi + 0x1f0]
mov ebx, edi
test cl, cl
je 0x42a7eb
lea edx, [esi + 0x1f1]
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [eax], cl
inc eax
movzx ecx, byte [edx]
inc edx
test cl, cl
jne 0x42a7e0
mov byte [eax], 0
mov dword [esi + 0x544], 0x467d6909
mov dword [esi + 0x548], 0x6b4adb2
mov dword [esi + 0x54c], 0xcfd7d7c1
mov dword [esi + 0x550], 0x323c0025
mov dword [esi + 0x554], 0x6c20
mov dword [esi + 0x68], 0
mov ecx, dword [esi + 0x68]
cmp ecx, 0x13
ja 0x42a86e
nop
mov ecx, dword [esi + 0x68]
mov edx, dword [esi + 0x68]
movzx edi, byte [esi + edx + 0x544]
lea edx, [ecx + edi]
add ecx, 0x39
and ecx, edi
add ecx, ecx
sub edx, ecx
add edx, 0x31909f39
mov dword [esi + 0x34], edx
mov ecx, dword [esi + 0x34]
add cl, 0xda
mov edx, dword [esi + 0x68]
mov byte [esi + edx + 0x544], cl
inc dword [esi + 0x68]
mov ecx, dword [esi + 0x68]
cmp ecx, 0x14
jb 0x42a830
movzx ecx, byte [esi + 0x544]
test cl, cl
je 0x42a56c
lea edx, [esi + 0x545]
mov edi, ebx
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
nop
mov byte [eax], cl
inc eax
movzx ecx, byte [edx]
inc edx
test cl, cl
jne 0x42a890
jmp 0x42a56e
push ebx
push edi
push esi
mov ecx, dword [esp + 0x10]
movzx esi, word [ecx]
test si, si
je 0x42a8f8
mov edx, dword [esp + 0x14]
xor eax, eax
jmp 0x42a8ce
add eax, edi
movzx esi, word [ecx + 2]
add ecx, 2
test si, si
je 0x42a8fa
test edx, edx
je 0x42a8d6
cmp ecx, edx
jae 0x42a8fa
movzx ebx, si
cmp ebx, 0x800
mov esi, 3
sbb esi, 0
mov edi, 1
cmp ebx, 0x80
jb 0x42a8c0
mov edi, esi
jmp 0x42a8c0
xor eax, eax
pop esi
pop edi
pop ebx
ret
mov ebx, 0xceb887a7
test al, 6
or dword [ecx + 0x358b241c], 0xffffffe0
and eax, 0xd6ff0044
sub esp, 4
mov dword [esp], edi
call esi
sub esp, 4
mov eax, dword [esp + 0x1f8]
mov ecx, dword [esp + 0x1fc]
mov eax, dword [ecx + eax*4]
jmp eax
call fcn.0040aa20
mov dword [esp + 0x280], 1
mov eax, dword [esp + 0x284]
mov ecx, dword [esp + 0x280]
mov eax, dword [eax + ecx*4]
jmp eax
call fcn.0040aa20
mov dword [esp + 0x350], 1
mov eax, dword [esp + 0x354]
mov ecx, dword [esp + 0x350]
mov eax, dword [eax + ecx*4]
mov ebx, dword [esp + 0x78]
jmp eax
mov al, byte [esp + 0x140]
mov byte [esp + 0x15c], al
mov dword [esp], 0x24fee72a
mov dword [esp + 4], 5
call fcn.00419ee0
add eax, 0x57
xor eax, 0x2a
mov byte [esp + 0x144], al
mov dword [esp], 0x24fee72a
mov dword [esp + 4], 5
call fcn.00419ee0
xor eax, 0x2b
mov byte [esp + 0x145], al
mov dword [esp], 0x24fee72a
mov dword [esp + 4], 5
call fcn.00419ee0
add eax, 0x51
xor eax, 0x2c
mov byte [esp + 0x146], al
mov dword [esp], 0x24fee72a
mov dword [esp + 4], 5
call fcn.00419ee0
xor eax, 0x2d
mov byte [esp + 0x147], al
mov dword [esp], 0x24fee72a
mov dword [esp + 4], 5
call fcn.00419ee0
add eax, 0x4c
xor eax, 0x2e
mov byte [esp + 0x148], al
mov dword [esp], 0x24fee72a
mov dword [esp + 4], 5
call fcn.00419ee0
xor eax, 0x2f
mov byte [esp + 0x149], al
mov dword [esp], 0x24fee72a
mov dword [esp + 4], 5
call fcn.00419ee0
xor eax, 0x30
mov byte [esp + 0x14a], al
mov dword [esp], 0x24fee72a
mov dword [esp + 4], 5
call fcn.00419ee0
xor eax, 0x31
mov byte [esp + 0x14b], al
mov eax, 8
mov byte [esp + eax + 0x144], 0
add eax, 1
cmp eax, 9
jne 0x42af37
mov dword [esp + 0x30], 0
mov eax, dword [esp + 0x30]
cmp eax, 9
jae 0x42af8a
mov eax, dword [esp + 0x30]
mov ecx, dword [esp + 0x30]
movzx ecx, byte [esp + ecx + 0x144]
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.00431a00
mov ecx, dword [esp + 0x30]
mov byte [esp + ecx + 0x144], al
mov eax, dword [esp + 0x30]
inc eax
mov dword [esp + 0x30], eax
jmp 0x42af4f
lea eax, [esp + 0x144]
mov dword [esp], eax
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
sub esp, 4
mov dword [esp + 0x198], eax
mov al, byte [esp + 0xf0]
mov byte [esp + 0x160], al
mov dword [esp], 0x124eb36b
mov dword [esp + 4], 5
call fcn.00419ee0
add eax, 0x53
xor eax, 0x6b
mov byte [esp + 0xf4], al
mov dword [esp], 0x124eb36b
mov dword [esp + 4], 5
call fcn.00419ee0
xor eax, 0x6c
mov byte [esp + 0xf5], al
mov dword [esp], 0x124eb36b
mov dword [esp + 4], 5
call fcn.00419ee0
add eax, 0x45
xor eax, 0x6d
mov byte [esp + 0xf6], al
mov dword [esp], 0x124eb36b
mov dword [esp + 4], 5
call fcn.00419ee0
xor eax, 0x6e
mov byte [esp + 0xf7], al
mov dword [esp], 0x124eb36b
mov dword [esp + 4], 5
call fcn.00419ee0
add eax, 0x4c
xor eax, 0x6f
mov byte [esp + 0xf8], al
mov dword [esp], 0x124eb36b
mov dword [esp + 4], 5
call fcn.00419ee0
xor eax, 0x70
mov byte [esp + 0xf9], al
mov dword [esp], 0x124eb36b
mov dword [esp + 4], 5
call fcn.00419ee0
add eax, 0x45
xor eax, 0x71
mov byte [esp + 0xfa], al
mov dword [esp], 0x124eb36b
mov dword [esp + 4], 5
call fcn.00419ee0
xor eax, 0x72
mov byte [esp + 0xfb], al
mov dword [esp], 0x124eb36b
mov dword [esp + 4], 5
call fcn.00419ee0
add eax, 0x43
xor eax, 0x73
mov byte [esp + 0xfc], al
mov dword [esp], 0x124eb36b
mov dword [esp + 4], 5
call fcn.00419ee0
xor eax, 0x74
mov byte [esp + 0xfd], al
mov dword [esp], 0x124eb36b
mov dword [esp + 4], 5
call fcn.00419ee0
add eax, 0x54
xor eax, 0x75
mov byte [esp + 0xfe], al
mov dword [esp], 0x124eb36b
mov dword [esp + 4], 5
call fcn.00419ee0
xor eax, 0x76
mov byte [esp + 0xff], al
mov dword [esp], 0x124eb36b
mov dword [esp + 4], 5
call fcn.00419ee0
add eax, 0x20
xor eax, 0x77
mov byte [esp + 0x100], al
mov dword [esp], 0x124eb36b
mov dword [esp + 4], 5
call fcn.00419ee0
xor eax, 0x78
mov byte [esp + 0x101], al
mov dword [esp], 0x124eb36b
mov dword [esp + 4], 5
call fcn.00419ee0
add eax, 0x2a
xor eax, 0x79
mov byte [esp + 0x102], al
mov dword [esp], 0x124eb36b
mov dword [esp + 4], 5
call fcn.00419ee0
xor eax, 0x7a
mov byte [esp + 0x103], al
mov dword [esp], 0x124eb36b
mov dword [esp + 4], 5
call fcn.00419ee0
add eax, 0x20
xor eax, 0x7b
mov byte [esp + 0x104], al
mov dword [esp], 0x124eb36b
mov dword [esp + 4], 5
call fcn.00419ee0
xor eax, 0x7c
mov byte [esp + 0x105], al
mov dword [esp], 0x124eb36b
mov dword [esp + 4], 5
call fcn.00419ee0
add eax, 0x46
xor eax, 0x7d
mov byte [esp + 0x106], al
mov dword [esp], 0x124eb36b
mov dword [esp + 4], 5
call fcn.00419ee0
xor eax, 0x7e
mov byte [esp + 0x107], al
mov dword [esp], 0x124eb36b
mov dword [esp + 4], 5
call fcn.00419ee0
add eax, 0x52
xor eax, 0x7f
mov byte [esp + 0x108], al
mov dword [esp], 0x124eb36b
mov dword [esp + 4], 5
call fcn.00419ee0
xor eax, 0x80
mov byte [esp + 0x109], al
mov dword [esp], 0x124eb36b
mov dword [esp + 4], 5
call fcn.00419ee0
add eax, 0x4f
xor eax, 0x81
mov byte [esp + 0x10a], al
mov dword [esp], 0x124eb36b
mov dword [esp + 4], 5
call fcn.00419ee0
xor eax, 0x82
mov byte [esp + 0x10b], al
mov dword [esp], 0x124eb36b
mov dword [esp + 4], 5
call fcn.00419ee0
add eax, 0x4d
xor eax, 0x83
mov byte [esp + 0x10c], al
mov dword [esp], 0x124eb36b
mov dword [esp + 4], 5
call fcn.00419ee0
xor eax, 0x84
mov byte [esp + 0x10d], al
mov dword [esp], 0x124eb36b
mov dword [esp + 4], 5
call fcn.00419ee0
add eax, 0x20
xor eax, 0x85
mov byte [esp + 0x10e], al
mov dword [esp], 0x124eb36b
mov dword [esp + 4], 5
call fcn.00419ee0
xor eax, 0x86
mov byte [esp + 0x10f], al
mov dword [esp], 0x124eb36b
mov dword [esp + 4], 5
call fcn.00419ee0
add eax, 0x57
xor eax, 0x87
mov byte [esp + 0x110], al
mov dword [esp], 0x124eb36b
mov dword [esp + 4], 5
call fcn.00419ee0
xor eax, 0x88
mov byte [esp + 0x111], al
mov dword [esp], 0x124eb36b
mov dword [esp + 4], 5
call fcn.00419ee0
add eax, 0x69
xor eax, 0x89
mov byte [esp + 0x112], al
mov dword [esp], 0x124eb36b
mov dword [esp + 4], 5
call fcn.00419ee0
xor eax, 0x8a
mov byte [esp + 0x113], al
mov dword [esp], 0x124eb36b
mov dword [esp + 4], 5
call fcn.00419ee0
add eax, 0x6e
xor eax, 0x8b
mov byte [esp + 0x114], al
mov dword [esp], 0x124eb36b
mov dword [esp + 4], 5
call fcn.00419ee0
xor eax, 0x8c
mov byte [esp + 0x115], al
mov dword [esp], 0x124eb36b
mov dword [esp + 4], 5
call fcn.00419ee0
add eax, 0x33
xor eax, 0x8d
mov byte [esp + 0x116], al
mov dword [esp], 0x124eb36b
mov dword [esp + 4], 5
call fcn.00419ee0
xor eax, 0x8e
mov byte [esp + 0x117], al
mov dword [esp], 0x124eb36b
mov dword [esp + 4], 5
call fcn.00419ee0
add eax, 0x32
xor eax, 0x8f
mov byte [esp + 0x118], al
mov dword [esp], 0x124eb36b
mov dword [esp + 4], 5
call fcn.00419ee0
xor eax, 0x90
mov byte [esp + 0x119], al
mov dword [esp], 0x124eb36b
mov dword [esp + 4], 5
call fcn.00419ee0
add eax, 0x5f
xor eax, 0x91
mov byte [esp + 0x11a], al
mov dword [esp], 0x124eb36b
mov dword [esp + 4], 5
call fcn.00419ee0
xor eax, 0x92
mov byte [esp + 0x11b], al
mov dword [esp], 0x124eb36b
mov dword [esp + 4], 5
call fcn.00419ee0
add eax, 0x4f
xor eax, 0x93
mov byte [esp + 0x11c], al
mov dword [esp], 0x124eb36b
mov dword [esp + 4], 5
call fcn.00419ee0
xor eax, 0x94
mov byte [esp + 0x11d], al
mov dword [esp], 0x124eb36b
mov dword [esp + 4], 5
call fcn.00419ee0
add eax, 0x70
xor eax, 0x95
mov byte [esp + 0x11e], al
mov dword [esp], 0x124eb36b
mov dword [esp + 4], 5
call fcn.00419ee0
xor eax, 0x96
mov byte [esp + 0x11f], al
mov dword [esp], 0x124eb36b
mov dword [esp + 4], 5
call fcn.00419ee0
add eax, 0x65
xor eax, 0x97
mov byte [esp + 0x120], al
mov dword [esp], 0x124eb36b
mov dword [esp + 4], 5
call fcn.00419ee0
xor eax, 0x98
mov byte [esp + 0x121], al
mov dword [esp], 0x124eb36b
mov dword [esp + 4], 5
call fcn.00419ee0
add eax, 0x72
xor eax, 0x99
mov byte [esp + 0x122], al
mov dword [esp], 0x124eb36b
mov dword [esp + 4], 5
call fcn.00419ee0
xor eax, 0x9a
mov byte [esp + 0x123], al
mov dword [esp], 0x124eb36b
mov dword [esp + 4], 5
call fcn.00419ee0
add eax, 0x61
xor eax, 0x9b
mov byte [esp + 0x124], al
mov dword [esp], 0x124eb36b
mov dword [esp + 4], 5
call fcn.00419ee0
xor eax, 0x9c
mov byte [esp + 0x125], al
mov dword [esp], 0x124eb36b
mov dword [esp + 4], 5
call fcn.00419ee0
add eax, 0x74
xor eax, 0x9d
mov byte [esp + 0x126], al
mov dword [esp], 0x124eb36b
mov dword [esp + 4], 5
call fcn.00419ee0
xor eax, 0x9e
mov byte [esp + 0x127], al
mov dword [esp], 0x124eb36b
mov dword [esp + 4], 5
call fcn.00419ee0
add eax, 0x69
xor eax, 0x9f
mov byte [esp + 0x128], al
mov dword [esp], 0x124eb36b
mov dword [esp + 4], 5
call fcn.00419ee0
xor eax, 0xa0
mov byte [esp + 0x129], al
mov dword [esp], 0x124eb36b
mov dword [esp + 4], 5
call fcn.00419ee0
add eax, 0x6e
xor eax, 0xa1
mov byte [esp + 0x12a], al
mov dword [esp], 0x124eb36b
mov dword [esp + 4], 5
call fcn.00419ee0
xor eax, 0xa2
mov byte [esp + 0x12b], al
mov dword [esp], 0x124eb36b
mov dword [esp + 4], 5
call fcn.00419ee0
add eax, 0x67
xor eax, 0xa3
mov byte [esp + 0x12c], al
mov dword [esp], 0x124eb36b
mov dword [esp + 4], 5
call fcn.00419ee0
xor eax, 0xa4
mov byte [esp + 0x12d], al
mov dword [esp], 0x124eb36b
mov dword [esp + 4], 5
call fcn.00419ee0
add eax, 0x53
xor eax, 0xa5
mov byte [esp + 0x12e], al
mov dword [esp], 0x124eb36b
mov dword [esp + 4], 5
call fcn.00419ee0
xor eax, 0xa6
mov byte [esp + 0x12f], al
mov dword [esp], 0x124eb36b
mov dword [esp + 4], 5
call fcn.00419ee0
add eax, 0x79
xor eax, 0xa7
mov byte [esp + 0x130], al
mov dword [esp], 0x124eb36b
mov dword [esp + 4], 5
call fcn.00419ee0
xor eax, 0xa8
mov byte [esp + 0x131], al
mov dword [esp], 0x124eb36b
mov dword [esp + 4], 5
call fcn.00419ee0
add eax, 0x73
xor eax, 0xa9
mov byte [esp + 0x132], al
mov dword [esp], 0x124eb36b
mov dword [esp + 4], 5
call fcn.00419ee0
xor eax, 0xaa
mov byte [esp + 0x133], al
mov dword [esp], 0x124eb36b
mov dword [esp + 4], 5
call fcn.00419ee0
add eax, 0x74
xor eax, 0xab
mov byte [esp + 0x134], al
mov dword [esp], 0x124eb36b
mov dword [esp + 4], 5
call fcn.00419ee0
xor eax, 0xac
mov byte [esp + 0x135], al
mov dword [esp], 0x124eb36b
mov dword [esp + 4], 5
call fcn.00419ee0
add eax, 0x65
xor eax, 0xad
mov byte [esp + 0x136], al
mov dword [esp], 0x124eb36b
mov dword [esp + 4], 5
call fcn.00419ee0
xor eax, 0xae
mov byte [esp + 0x137], al
mov dword [esp], 0x124eb36b
mov dword [esp + 4], 5
call fcn.00419ee0
add eax, 0x6d
xor eax, 0xaf
mov byte [esp + 0x138], al
mov dword [esp], 0x124eb36b
mov dword [esp + 4], 5
call fcn.00419ee0
xor eax, 0xb0
mov byte [esp + 0x139], al
mov dword [esp], 0x124eb36b
mov dword [esp + 4], 5
call fcn.00419ee0
xor eax, 0xb1
mov byte [esp + 0x13a], al
mov dword [esp], 0x124eb36b
mov dword [esp + 4], 5
call fcn.00419ee0
xor eax, 0xb2
mov byte [esp + 0x13b], al
mov eax, 0x48
mov byte [esp + eax + 0xf4], 0
add eax, 1
cmp eax, 0x49
jne 0x42b8f6
mov dword [esp + 0x34], 0
mov eax, dword [esp + 0x34]
cmp eax, 0x49
jae 0x42b949
mov eax, dword [esp + 0x34]
mov ecx, dword [esp + 0x34]
movzx ecx, byte [esp + ecx + 0xf4]
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.00431a20
mov ecx, dword [esp + 0x34]
mov byte [esp + ecx + 0xf4], al
mov eax, dword [esp + 0x34]
inc eax
mov dword [esp + 0x34], eax
jmp 0x42b90e
mov dword [esp + 0x7c], edi
mov dword [esp + 0x1dc], ebx
lea eax, [esp + 0xf4]
mov dword [esp], eax
mov eax, dword [sym.imp.OLEAUT32.dll_SysReAllocString]
call eax
sub esp, 4
mov edi, dword [esp + 0x5c]
mov ecx, dword [edi]
mov ecx, dword [ecx + 0x50]
lea edx, [esp + 0xec]
mov dword [esp + 0x14], edx
mov dword [esp + 0x1d4], eax
mov dword [esp + 8], eax
mov edx, dword [esp + 0x198]
mov dword [esp + 4], edx
mov dword [esp], edi
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x30
call ecx
sub esp, 0x18
not eax
shr eax, 0x1f
mov dword [esp + 0x3a0], eax
mov eax, dword [esp + 0x3a4]
mov ecx, dword [esp + 0x3a0]
mov eax, dword [eax + ecx*4]
jmp eax
mov eax, dword [esp + 0x208]
mov ecx, dword [esp + 0x20c]
mov eax, dword [ecx + eax*4]
jmp eax
movzx eax, al
and eax, 1
mov dword [esp + 0x300], eax
mov eax, dword [esp + 0x304]
mov ecx, dword [esp + 0x300]
mov eax, dword [eax + ecx*4]
jmp eax
call fcn.0040aa20
mov dword [esp + 4], ebx
mov dword [esp], esi
mov dword [esp + 8], 4
call fcn.00431950
mov ecx, eax
inc ecx
mov byte [eax], 0x20
mov eax, ebx
add eax, 8
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 8], 2
call fcn.00431950
mov ecx, eax
inc ecx
mov byte [eax], 0x3a
mov dword [esp + 0x348], 0
mov eax, dword [esp + 0x34c]
mov edx, dword [esp + 0x348]
mov eax, dword [eax + edx*4]
jmp eax
call fcn.0040aa20
mov dword [esp + 0x298], 1
mov eax, dword [esp + 0x29c]
mov ecx, dword [esp + 0x298]
mov eax, dword [eax + ecx*4]
mov ebx, dword [esp + 0x198]
mov edi, dword [esp + 0x1d4]
jmp eax
call fcn.0040aa20
mov dword [esp + 0x398], 1
mov eax, dword [esp + 0x39c]
mov ecx, dword [esp + 0x398]
mov eax, dword [eax + ecx*4]
jmp eax
mov ecx, dword [esp + 0x258]
mov edx, dword [esp + 0x25c]
mov ecx, dword [edx + ecx*4]
jmp ecx
mov dword [esp], edi
call fcn.0040a310
mov eax, dword [esp + 0x2e0]
mov ecx, dword [esp + 0x2e4]
mov eax, dword [ecx + eax*4]
jmp eax
lea eax, [esp + 0x3d0]
mov dword [esp], eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
sub esp, 4
lea eax, [esp + 0x1a0]
mov dword [esp], eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
sub esp, 4
mov esi, dword [esp + 0x28]
mov al, byte [esp + 0xac]
mov byte [esp + 0x16c], al
mov dword [esp], 0xeba6c824
mov dword [esp + 4], 5
call fcn.00419ee0
mov ecx, eax
and ecx, 0x4c
shl ecx, 1
xor eax, 0x4c
add eax, ecx
xor eax, 0x24
mov byte [esp + 0xb0], al
mov dword [esp], 0xeba6c824
mov dword [esp + 4], 5
call fcn.00419ee0
xor eax, 0x25
mov byte [esp + 0xb1], al
mov dword [esp], 0xeba6c824
mov dword [esp + 4], 5
call fcn.00419ee0
mov ecx, eax
and ecx, 0x6f
shl ecx, 1
xor eax, 0x6f
add eax, ecx
xor eax, 0x26
mov byte [esp + 0xb2], al
mov dword [esp], 0xeba6c824
mov dword [esp + 4], 5
call fcn.00419ee0
xor eax, 0x27
mov byte [esp + 0xb3], al
mov dword [esp], 0xeba6c824
mov dword [esp + 4], 5
call fcn.00419ee0
mov ecx, eax
and ecx, 0x63
shl ecx, 1
xor eax, 0x63
add eax, ecx
xor eax, 0x28
mov byte [esp + 0xb4], al
mov dword [esp], 0xeba6c824
mov dword [esp + 4], 5
call fcn.00419ee0
xor eax, 0x29
mov byte [esp + 0xb5], al
mov dword [esp], 0xeba6c824
mov dword [esp + 4], 5
call fcn.00419ee0
mov ecx, eax
and ecx, 0x61
shl ecx, 1
xor eax, 0x61
add eax, ecx
xor eax, 0x2a
mov byte [esp + 0xb6], al
mov dword [esp], 0xeba6c824
mov dword [esp + 4], 5
call fcn.00419ee0
xor eax, 0x2b
mov byte [esp + 0xb7], al
mov dword [esp], 0xeba6c824
mov dword [esp + 4], 5
call fcn.00419ee0
mov ecx, eax
and ecx, 0x6c
shl ecx, 1
xor eax, 0x6c
add eax, ecx
xor eax, 0x2c
mov byte [esp + 0xb8], al
mov dword [esp], 0xeba6c824
mov dword [esp + 4], 5
call fcn.00419ee0
xor eax, 0x2d
mov byte [esp + 0xb9], al
mov dword [esp], 0xeba6c824
mov dword [esp + 4], 5
call fcn.00419ee0
mov ecx, eax
and ecx, 0x44
shl ecx, 1
xor eax, 0x44
add eax, ecx
xor eax, 0x2e
mov byte [esp + 0xba], al
mov dword [esp], 0xeba6c824
mov dword [esp + 4], 5
call fcn.00419ee0
xor eax, 0x2f
mov byte [esp + 0xbb], al
mov dword [esp], 0xeba6c824
mov dword [esp + 4], 5
call fcn.00419ee0
mov ecx, eax
and ecx, 0x61
shl ecx, 1
xor eax, 0x61
add eax, ecx
xor eax, 0x30
mov byte [esp + 0xbc], al
mov dword [esp], 0xeba6c824
mov dword [esp + 4], 5
call fcn.00419ee0
xor eax, 0x31
mov byte [esp + 0xbd], al
mov dword [esp], 0xeba6c824
mov dword [esp + 4], 5
call fcn.00419ee0
mov ecx, eax
and ecx, 0x74
shl ecx, 1
xor eax, 0x74
add eax, ecx
xor eax, 0x32
mov byte [esp + 0xbe], al
mov dword [esp], 0xeba6c824
mov dword [esp + 4], 5
call fcn.00419ee0
xor eax, 0x33
mov byte [esp + 0xbf], al
mov dword [esp], 0xeba6c824
mov dword [esp + 4], 5
call fcn.00419ee0
mov ecx, eax
and ecx, 0x65
shl ecx, 1
xor eax, 0x65
add eax, ecx
xor eax, 0x34
mov byte [esp + 0xc0], al
mov dword [esp], 0xeba6c824
mov dword [esp + 4], 5
call fcn.00419ee0
xor eax, 0x35
mov byte [esp + 0xc1], al
mov dword [esp], 0xeba6c824
mov dword [esp + 4], 5
call fcn.00419ee0
mov ecx, eax
and ecx, 0x54
shl ecx, 1
xor eax, 0x54
add eax, ecx
xor eax, 0x36
mov byte [esp + 0xc2], al
mov dword [esp], 0xeba6c824
mov dword [esp + 4], 5
call fcn.00419ee0
xor eax, 0x37
mov byte [esp + 0xc3], al
mov dword [esp], 0xeba6c824
mov dword [esp + 4], 5
call fcn.00419ee0
mov ecx, eax
and ecx, 0x69
shl ecx, 1
xor eax, 0x69
add eax, ecx
xor eax, 0x38
mov byte [esp + 0xc4], al
mov dword [esp], 0xeba6c824
mov dword [esp + 4], 5
call fcn.00419ee0
xor eax, 0x39
mov byte [esp + 0xc5], al
mov dword [esp], 0xeba6c824
mov dword [esp + 4], 5
call fcn.00419ee0
mov ecx, eax
and ecx, 0x6d
shl ecx, 1
xor eax, 0x6d
add eax, ecx
xor eax, 0x3a
mov byte [esp + 0xc6], al
mov dword [esp], 0xeba6c824
mov dword [esp + 4], 5
call fcn.00419ee0
xor eax, 0x3b
mov byte [esp + 0xc7], al
mov dword [esp], 0xeba6c824
mov dword [esp + 4], 5
call fcn.00419ee0
mov ecx, eax
and ecx, 0x65
shl ecx, 1
xor eax, 0x65
add eax, ecx
xor eax, 0x3c
mov byte [esp + 0xc8], al
mov dword [esp], 0xeba6c824
mov dword [esp + 4], 5
call fcn.00419ee0
xor eax, 0x3d
mov byte [esp + 0xc9], al
mov dword [esp], 0xeba6c824
mov dword [esp + 4], 5
call fcn.00419ee0
xor eax, 0x3e
mov byte [esp + 0xca], al
mov dword [esp], 0xeba6c824
mov dword [esp + 4], 5
call fcn.00419ee0
xor eax, 0x3f
mov byte [esp + 0xcb], al
mov eax, 0x1c
mov byte [esp + eax + 0xb0], 0
add eax, 1
cmp eax, 0x1e
jne 0x42befb
mov dword [esp + 0x40], 0
mov eax, dword [esp + 0x40]
cmp eax, 0x1e
jae 0x42bf4e
mov eax, dword [esp + 0x40]
mov ecx, dword [esp + 0x40]
movzx ecx, byte [esp + ecx + 0xb0]
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.00431a90
mov ecx, dword [esp + 0x40]
mov byte [esp + ecx + 0xb0], al
mov eax, dword [esp + 0x40]
inc eax
mov dword [esp + 0x40], eax
jmp 0x42bf13
mov eax, dword [esi]
mov eax, dword [eax + 0x10]
lea ecx, [esp + 0x1a0]
mov dword [esp + 0xc], ecx
lea ecx, [esp + 0xb0]
mov dword [esp + 4], ecx
mov dword [esp], esi
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 8], 0
call eax
sub esp, 0x18
test eax, eax
setns al
mov cx, word [esp + 0x1a0]
sub cx, 8
sete cl
and al, cl
movzx eax, al
mov dword [esp + 0x370], eax
mov eax, dword [esp + 0x374]
mov ecx, dword [esp + 0x370]
mov eax, dword [eax + ecx*4]
jmp eax
mov eax, dword [edi]
mov ecx, dword [esp + 0x240]
mov edx, dword [esp + 0x244]
mov ecx, dword [edx + ecx*4]
jmp ecx
mov esi, dword [esp + 0x78]
mov eax, esi
add eax, 0xa
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 8], 2
call fcn.00431950
mov ecx, eax
inc ecx
mov byte [eax], 0x3a
mov eax, esi
add eax, 0xc
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 8], 2
call fcn.00431950
mov byte [eax], 0
mov dword [esp + 0x338], 0
mov eax, dword [esp + 0x33c]
mov ecx, dword [esp + 0x338]
mov eax, dword [eax + ecx*4]
jmp eax
mov dword [esp], eax
call ecx
sub esp, 4
mov eax, dword [esp + 0x2b0]
mov ecx, dword [esp + 0x2b4]
mov eax, dword [ecx + eax*4]
jmp eax
mov al, byte [esp + 0x150]
mov byte [esp + 0x158], al
mov dword [esp], 0xaef15be5
mov dword [esp + 4], 5
call fcn.00419ee0
add eax, 0x52
mov ecx, eax
and ecx, 0xaef15be5
shl ecx, 1
add eax, 0xaef15be5
sub eax, ecx
mov byte [esp + 0x178], al
mov dword [esp], 0xaef15be5
mov dword [esp + 4], 5
call fcn.00419ee0
mov ecx, eax
and ecx, 0xaef15be6
shl ecx, 1
add eax, 0xaef15be6
sub eax, ecx
mov byte [esp + 0x179], al
mov dword [esp], 0xaef15be5
mov dword [esp + 4], 5
call fcn.00419ee0
add eax, 0x4f
mov ecx, eax
and ecx, 0xaef15be7
shl ecx, 1
add eax, 0xaef15be7
sub eax, ecx
mov byte [esp + 0x17a], al
mov dword [esp], 0xaef15be5
mov dword [esp + 4], 5
call fcn.00419ee0
mov ecx, eax
and ecx, 0xaef15be8
shl ecx, 1
add eax, 0xaef15be8
sub eax, ecx
mov byte [esp + 0x17b], al
mov dword [esp], 0xaef15be5
mov dword [esp + 4], 5
call fcn.00419ee0
add eax, 0x4f
mov ecx, eax
and ecx, 0xaef15be9
shl ecx, 1
add eax, 0xaef15be9
sub eax, ecx
mov byte [esp + 0x17c], al
mov dword [esp], 0xaef15be5
mov dword [esp + 4], 5
call fcn.00419ee0
mov ecx, eax
and ecx, 0xaef15bea
shl ecx, 1
add eax, 0xaef15bea
sub eax, ecx
mov byte [esp + 0x17d], al
mov dword [esp], 0xaef15be5
mov dword [esp + 4], 5
call fcn.00419ee0
add eax, 0x54
mov ecx, eax
and ecx, 0xaef15beb
shl ecx, 1
add eax, 0xaef15beb
sub eax, ecx
mov byte [esp + 0x17e], al
mov dword [esp], 0xaef15be5
mov dword [esp + 4], 5
call fcn.00419ee0
mov ecx, eax
and ecx, 0xaef15bec
shl ecx, 1
add eax, 0xaef15bec
sub eax, ecx
mov byte [esp + 0x17f], al
mov dword [esp], 0xaef15be5
mov dword [esp + 4], 5
call fcn.00419ee0
add eax, 0x5c
mov ecx, eax
and ecx, 0xaef15bed
shl ecx, 1
add eax, 0xaef15bed
sub eax, ecx
mov byte [esp + 0x180], al
mov dword [esp], 0xaef15be5
mov dword [esp + 4], 5
call fcn.00419ee0
mov ecx, eax
and ecx, 0xaef15bee
shl ecx, 1
add eax, 0xaef15bee
sub eax, ecx
mov byte [esp + 0x181], al
mov dword [esp], 0xaef15be5
mov dword [esp + 4], 5
call fcn.00419ee0
add eax, 0x43
mov ecx, eax
and ecx, 0xaef15bef
shl ecx, 1
add eax, 0xaef15bef
sub eax, ecx
mov byte [esp + 0x182], al
mov dword [esp], 0xaef15be5
mov dword [esp + 4], 5
call fcn.00419ee0
mov ecx, eax
and ecx, 0xaef15bf0
shl ecx, 1
add eax, 0xaef15bf0
sub eax, ecx
mov byte [esp + 0x183], al
mov dword [esp], 0xaef15be5
mov dword [esp + 4], 5
call fcn.00419ee0
add eax, 0x49
mov ecx, eax
and ecx, 0xaef15bf1
shl ecx, 1
add eax, 0xaef15bf1
sub eax, ecx
mov byte [esp + 0x184], al
mov dword [esp], 0xaef15be5
mov dword [esp + 4], 5
call fcn.00419ee0
mov ecx, eax
and ecx, 0xaef15bf2
shl ecx, 1
add eax, 0xaef15bf2
sub eax, ecx
mov byte [esp + 0x185], al
mov dword [esp], 0xaef15be5
mov dword [esp + 4], 5
call fcn.00419ee0
add eax, 0x4d
mov ecx, eax
and ecx, 0xaef15bf3
shl ecx, 1
add eax, 0xaef15bf3
sub eax, ecx
mov byte [esp + 0x186], al
mov dword [esp], 0xaef15be5
mov dword [esp + 4], 5
call fcn.00419ee0
mov ecx, eax
and ecx, 0xaef15bf4
shl ecx, 1
add eax, 0xaef15bf4
sub eax, ecx
mov byte [esp + 0x187], al
mov dword [esp], 0xaef15be5
mov dword [esp + 4], 5
call fcn.00419ee0
add eax, 0x56
mov ecx, eax
and ecx, 0xaef15bf5
shl ecx, 1
add eax, 0xaef15bf5
sub eax, ecx
mov byte [esp + 0x188], al
mov dword [esp], 0xaef15be5
mov dword [esp + 4], 5
call fcn.00419ee0
mov ecx, eax
and ecx, 0xaef15bf6
shl ecx, 1
add eax, 0xaef15bf6
sub eax, ecx
mov byte [esp + 0x189], al
mov dword [esp], 0xaef15be5
mov dword [esp + 4], 5
call fcn.00419ee0
add eax, 0x32
mov ecx, eax
and ecx, 0xaef15bf7
shl ecx, 1
add eax, 0xaef15bf7
sub eax, ecx
mov byte [esp + 0x18a], al
mov dword [esp], 0xaef15be5
mov dword [esp + 4], 5
call fcn.00419ee0
mov ecx, eax
and ecx, 0xaef15bf8
shl ecx, 1
add eax, 0xaef15bf8
sub eax, ecx
mov byte [esp + 0x18b], al
mov dword [esp], 0xaef15be5
mov dword [esp + 4], 5
call fcn.00419ee0
mov ecx, eax
and ecx, 0xaef15bf9
shl ecx, 1
add eax, 0xaef15bf9
sub eax, ecx
mov byte [esp + 0x18c], al
mov dword [esp], 0xaef15be5
mov dword [esp + 4], 5
call fcn.00419ee0
mov ecx, eax
and ecx, 0xaef15bfa
shl ecx, 1
add eax, 0xaef15bfa
sub eax, ecx
mov byte [esp + 0x18d], al
mov eax, 0x16
mov byte [esp + eax + 0x178], 0
add eax, 1
cmp eax, 0x1a
jne 0x42c442
mov dword [esp + 0x2c], 0
mov eax, dword [esp + 0x2c]
cmp eax, 0x1a
jae 0x42c495
mov eax, dword [esp + 0x2c]
mov ecx, dword [esp + 0x2c]
movzx ecx, byte [esp + ecx + 0x178]
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.004319e0
mov ecx, dword [esp + 0x2c]
mov byte [esp + ecx + 0x178], al
mov eax, dword [esp + 0x2c]
inc eax
mov dword [esp + 0x2c], eax
jmp 0x42c45a
mov dword [esp + 0x1d8], ebx
lea eax, [esp + 0x178]
mov dword [esp], eax
mov eax, dword [sym.imp.OLEAUT32.dll_SysReAllocString]
call eax
sub esp, 4
mov ebx, eax
mov ecx, dword [esp + 0x154]
mov eax, dword [ecx]
mov eax, dword [eax + 0xc]
lea edx, [esp + 0x5c]
mov dword [esp + 0x20], edx
mov dword [esp + 4], ebx
mov dword [esp], ecx
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
call eax
sub esp, 0x24
not eax
shr eax, 0x1f
mov dword [esp + 0x3b0], eax
mov eax, dword [esp + 0x3b4]
mov ecx, dword [esp + 0x3b0]
mov eax, dword [eax + ecx*4]
jmp eax
mov dword [esp + 0x19c], esi
lea eax, [esp + 0x3d0]
mov dword [esp], eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
sub esp, 4
mov esi, dword [esp + 0x28]
mov al, byte [esp + 0xd4]
mov byte [esp + 0x164], al
mov dword [esp], 0xfd56d2cd
mov dword [esp + 4], 5
call fcn.00419ee0
add eax, 0x43
xor eax, 0xcd
mov byte [esp + 0xd8], al
mov dword [esp], 0xfd56d2cd
mov dword [esp + 4], 5
call fcn.00419ee0
xor eax, 0xce
mov byte [esp + 0xd9], al
mov dword [esp], 0xfd56d2cd
mov dword [esp + 4], 5
call fcn.00419ee0
add eax, 0x61
xor eax, 0xcf
mov byte [esp + 0xda], al
mov dword [esp], 0xfd56d2cd
mov dword [esp + 4], 5
call fcn.00419ee0
xor eax, 0xd0
mov byte [esp + 0xdb], al
mov dword [esp], 0xfd56d2cd
mov dword [esp + 4], 5
call fcn.00419ee0
add eax, 0x70
xor eax, 0xd1
mov byte [esp + 0xdc], al
mov dword [esp], 0xfd56d2cd
mov dword [esp + 4], 5
call fcn.00419ee0
xor eax, 0xd2
mov byte [esp + 0xdd], al
mov dword [esp], 0xfd56d2cd
mov dword [esp + 4], 5
call fcn.00419ee0
add eax, 0x74
xor eax, 0xd3
mov byte [esp + 0xde], al
mov dword [esp], 0xfd56d2cd
mov dword [esp + 4], 5
call fcn.00419ee0
xor eax, 0xd4
mov byte [esp + 0xdf], al
mov dword [esp], 0xfd56d2cd
mov dword [esp + 4], 5
call fcn.00419ee0
add eax, 0x69
xor eax, 0xd5
mov byte [esp + 0xe0], al
mov dword [esp], 0xfd56d2cd
mov dword [esp + 4], 5
call fcn.00419ee0
xor eax, 0xd6
mov byte [esp + 0xe1], al
mov dword [esp], 0xfd56d2cd
mov dword [esp + 4], 5
call fcn.00419ee0
add eax, 0x6f
xor eax, 0xd7
mov byte [esp + 0xe2], al
mov dword [esp], 0xfd56d2cd
mov dword [esp + 4], 5
call fcn.00419ee0
xor eax, 0xd8
mov byte [esp + 0xe3], al
mov dword [esp], 0xfd56d2cd
mov dword [esp + 4], 5
call fcn.00419ee0
add eax, 0x6e
xor eax, 0xd9
mov byte [esp + 0xe4], al
mov dword [esp], 0xfd56d2cd
mov dword [esp + 4], 5
call fcn.00419ee0
xor eax, 0xda
mov byte [esp + 0xe5], al
mov dword [esp], 0xfd56d2cd
mov dword [esp + 4], 5
call fcn.00419ee0
xor eax, 0xdb
mov byte [esp + 0xe6], al
mov dword [esp], 0xfd56d2cd
mov dword [esp + 4], 5
call fcn.00419ee0
xor eax, 0xdc
mov byte [esp + 0xe7], al
mov eax, 0x10
mov byte [esp + eax + 0xd8], 0
add eax, 1
cmp eax, 0x11
jne 0x42c767
mov dword [esp + 0x38], 0
mov eax, dword [esp + 0x38]
cmp eax, 0x11
jae 0x42c7ba
mov eax, dword [esp + 0x38]
mov ecx, dword [esp + 0x38]
movzx ecx, byte [esp + ecx + 0xd8]
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.00431a40
mov ecx, dword [esp + 0x38]
mov byte [esp + ecx + 0xd8], al
mov eax, dword [esp + 0x38]
inc eax
mov dword [esp + 0x38], eax
jmp 0x42c77f
mov eax, dword [esi]
mov eax, dword [eax + 0x10]
lea ecx, [esp + 0x3d0]
mov dword [esp + 0xc], ecx
lea ecx, [esp + 0xd8]
mov dword [esp + 4], ecx
mov dword [esp], esi
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 8], 0
call eax
sub esp, 0x18
test eax, eax
setns al
mov cx, word [esp + 0x3d0]
sub cx, 8
sete cl
and al, cl
movzx eax, al
mov dword [esp + 0x380], eax
mov eax, dword [esp + 0x384]
mov ecx, dword [esp + 0x380]
mov eax, dword [eax + ecx*4]
jmp eax
movsx ecx, word [esp + 0x3e8]
mov edx, 0x88888889
mov eax, ecx
imul edx
add edx, ecx
mov eax, edx
shr eax, 0x1f
shr edx, 5
add edx, eax
mov eax, dword [esp + 0x1d8]
mov word [eax], dx
mov eax, dword [esp + 0x2f8]
mov ecx, dword [esp + 0x2fc]
mov eax, dword [ecx + eax*4]
jmp eax
mov eax, dword [esp + 0x358]
mov ecx, dword [esp + 0x35c]
mov eax, dword [ecx + eax*4]
jmp eax
mov ecx, dword [eax]
mov ecx, dword [ecx + 8]
mov dword [esp], eax
call ecx
sub esp, 4
mov eax, dword [esp + 0x250]
mov ecx, dword [esp + 0x254]
mov eax, dword [ecx + eax*4]
jmp eax
lea eax, [esp + 0x3c0]
mov dword [esp], eax
mov eax, dword [sym.imp.OLEAUT32.dll_VariantCopy]
call eax
sub esp, 4
mov eax, dword [esp + 0x28]
mov ecx, dword [eax]
mov ecx, dword [ecx + 8]
mov dword [esp], eax
call ecx
sub esp, 4
mov eax, dword [esp + 0x2c0]
mov ecx, dword [esp + 0x2c4]
mov eax, dword [ecx + eax*4]
jmp eax
int 0xcd
fistp qword [ebx - 0x75]
test byte [eax + eax], ah
add al, byte [eax]
add byte [ebx + 0x204248c], cl
add byte [eax], al
mov eax, dword [ecx + eax*4]
jmp eax
mov eax, dword [esp + 0x5c]
mov dword [esp], eax
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 3
mov dword [esp + 0x10], 3
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0xa
mov eax, dword [sym.imp.ole32.dll_CoSetProxyBlanket]
call eax
sub esp, 0x20
not eax
shr eax, 0x1f
mov dword [esp + 0x3a8], eax
mov eax, dword [esp + 0x3ac]
mov ecx, dword [esp + 0x3a8]
mov eax, dword [eax + ecx*4]
jmp eax
call fcn.0040aa20
mov dword [esp + 0x368], 1
mov eax, dword [esp + 0x36c]
mov ecx, dword [esp + 0x368]
mov eax, dword [eax + ecx*4]
jmp eax
mov al, 0x2c
clc
add esp, dword [esi - 0x76950018]
sbb al, 0x24
mov eax, dword [sym.imp.OLEAUT32.dll_SysStringLen]
call eax
sub esp, 4
mov eax, dword [esp + 0x1e8]
mov ecx, dword [esp + 0x1ec]
mov eax, dword [ecx + eax*4]
jmp eax
movzx eax, al
and eax, 1
mov dword [esp + 0x388], eax
mov eax, dword [esp + 0x38c]
mov ecx, dword [esp + 0x388]
mov eax, dword [eax + ecx*4]
jmp eax
lea eax, [esp + 0x1a0]
mov dword [esp], eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
sub esp, 4
lea eax, [esp + 0x3e0]
mov dword [esp], eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
sub esp, 4
mov esi, dword [esp + 0x28]
mov al, byte [esp + 0x84]
mov byte [esp + 0x170], al
mov dword [esp], 0x16a35636
mov dword [esp + 4], 5
call fcn.00419ee0
add eax, 0x43
xor eax, 0x36
mov byte [esp + 0x88], al
mov dword [esp], 0x16a35636
mov dword [esp + 4], 5
call fcn.00419ee0
xor eax, 0x37
mov byte [esp + 0x89], al
mov dword [esp], 0x16a35636
mov dword [esp + 4], 5
call fcn.00419ee0
add eax, 0x75
xor eax, 0x38
mov byte [esp + 0x8a], al
mov dword [esp], 0x16a35636
mov dword [esp + 4], 5
call fcn.00419ee0
xor eax, 0x39
mov byte [esp + 0x8b], al
mov dword [esp], 0x16a35636
mov dword [esp + 4], 5
call fcn.00419ee0
add eax, 0x72
xor eax, 0x3a
mov byte [esp + 0x8c], al
mov dword [esp], 0x16a35636
mov dword [esp + 4], 5
call fcn.00419ee0
xor eax, 0x3b
mov byte [esp + 0x8d], al
mov dword [esp], 0x16a35636
mov dword [esp + 4], 5
call fcn.00419ee0
add eax, 0x72
xor eax, 0x3c
mov byte [esp + 0x8e], al
mov dword [esp], 0x16a35636
mov dword [esp + 4], 5
call fcn.00419ee0
xor eax, 0x3d
mov byte [esp + 0x8f], al
mov dword [esp], 0x16a35636
mov dword [esp + 4], 5
call fcn.00419ee0
add eax, 0x65
xor eax, 0x3e
mov byte [esp + 0x90], al
mov dword [esp], 0x16a35636
mov dword [esp + 4], 5
call fcn.00419ee0
xor eax, 0x3f
mov byte [esp + 0x91], al
mov dword [esp], 0x16a35636
mov dword [esp + 4], 5
call fcn.00419ee0
add eax, 0x6e
xor eax, 0x40
mov byte [esp + 0x92], al
mov dword [esp], 0x16a35636
mov dword [esp + 4], 5
call fcn.00419ee0
xor eax, 0x41
mov byte [esp + 0x93], al
mov dword [esp], 0x16a35636
mov dword [esp + 4], 5
call fcn.00419ee0
add eax, 0x74
xor eax, 0x42
mov byte [esp + 0x94], al
mov dword [esp], 0x16a35636
mov dword [esp + 4], 5
call fcn.00419ee0
xor eax, 0x43
mov byte [esp + 0x95], al
mov dword [esp], 0x16a35636
mov dword [esp + 4], 5
call fcn.00419ee0
add eax, 0x54
xor eax, 0x44
mov byte [esp + 0x96], al
mov dword [esp], 0x16a35636
mov dword [esp + 4], 5
call fcn.00419ee0
xor eax, 0x45
mov byte [esp + 0x97], al
mov dword [esp], 0x16a35636
mov dword [esp + 4], 5
call fcn.00419ee0
add eax, 0x69
xor eax, 0x46
mov byte [esp + 0x98], al
mov dword [esp], 0x16a35636
mov dword [esp + 4], 5
call fcn.00419ee0
xor eax, 0x47
mov byte [esp + 0x99], al
mov dword [esp], 0x16a35636
mov dword [esp + 4], 5
call fcn.00419ee0
add eax, 0x6d
xor eax, 0x48
mov byte [esp + 0x9a], al
mov dword [esp], 0x16a35636
mov dword [esp + 4], 5
call fcn.00419ee0
xor eax, 0x49
mov byte [esp + 0x9b], al
mov dword [esp], 0x16a35636
mov dword [esp + 4], 5
call fcn.00419ee0
add eax, 0x65
xor eax, 0x4a
mov byte [esp + 0x9c], al
mov dword [esp], 0x16a35636
mov dword [esp + 4], 5
call fcn.00419ee0
xor eax, 0x4b
mov byte [esp + 0x9d], al
mov dword [esp], 0x16a35636
mov dword [esp + 4], 5
call fcn.00419ee0
add eax, 0x5a
xor eax, 0x4c
mov byte [esp + 0x9e], al
mov dword [esp], 0x16a35636
mov dword [esp + 4], 5
call fcn.00419ee0
xor eax, 0x4d
mov byte [esp + 0x9f], al
mov dword [esp], 0x16a35636
mov dword [esp + 4], 5
call fcn.00419ee0
add eax, 0x6f
xor eax, 0x4e
mov byte [esp + 0xa0], al
mov dword [esp], 0x16a35636
mov dword [esp + 4], 5
call fcn.00419ee0
xor eax, 0x4f
mov byte [esp + 0xa1], al
mov dword [esp], 0x16a35636
mov dword [esp + 4], 5
call fcn.00419ee0
add eax, 0x6e
xor eax, 0x50
mov byte [esp + 0xa2], al
mov dword [esp], 0x16a35636
mov dword [esp + 4], 5
call fcn.00419ee0
xor eax, 0x51
mov byte [esp + 0xa3], al
mov dword [esp], 0x16a35636
mov dword [esp + 4], 5
call fcn.00419ee0
add eax, 0x65
xor eax, 0x52
mov byte [esp + 0xa4], al
mov dword [esp], 0x16a35636
mov dword [esp + 4], 5
call fcn.00419ee0
xor eax, 0x53
mov byte [esp + 0xa5], al
mov dword [esp], 0x16a35636
mov dword [esp + 4], 5
call fcn.00419ee0
xor eax, 0x54
mov byte [esp + 0xa6], al
mov dword [esp], 0x16a35636
mov dword [esp + 4], 5
call fcn.00419ee0
xor eax, 0x55
mov byte [esp + 0xa7], al
mov eax, 0x20
and al, 0xa7
add byte [eax], al
add byte [eax + 0x20], bh
mov byte [esp + eax + 0x88], 0
add eax, 1
cmp eax, 0x24
jne 0x42cde1
mov eax, dword [esp + 0x310]
mov ecx, dword [esp + 0x314]
mov eax, dword [ecx + eax*4]
jmp eax
mov dword [esp], esi
call fcn.0040a310
mov eax, dword [esp + 0x330]
mov ecx, dword [esp + 0x334]
mov eax, dword [ecx + eax*4]
jmp eax
js 0x42cdd7
add dl, byte [ebx]
inc edx
sbb byte [ebx], 5
mov dword [esp + 4], ebx
mov dword [esp], esi
mov dword [esp + 8], 4
call fcn.00431950
mov ecx, eax
inc ecx
mov byte [eax], 0x20
mov eax, ebx
add eax, 8
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 8], 2
call fcn.00431950
mov byte [eax], 0x3a
mov eax, dword [esp + 0x210]
mov ecx, dword [esp + 0x214]
mov eax, dword [ecx + eax*4]
jmp eax
mov eax, dword [esp + 0x1a8]
mov dword [esp], eax
call dword [sym.imp.OLEAUT32.dll_VariantInit]
sub esp, 4
mov ebx, eax
mov eax, dword [esp + 0x1a8]
mov ecx, ebx
shl ecx, 1
mov edx, eax
add edx, ecx
mov dword [esp], eax
mov dword [esp + 4], edx
call case.0x421d66.354
mov esi, eax
add esi, 1
mov dword [esp], esi
call fcn.0040a300
mov edx, dword [esp + 0x1a8]
shl ebx, 1
mov edi, edx
add edi, ebx
mov ebx, eax
add ebx, esi
mov dword [esp + 0x78], eax
mov esi, eax
mov eax, ebx
add eax, 0xffffffff
cmp esi, eax
jae 0x42cf23
test edi, edi
sete al
mov ecx, edx
sub ecx, edi
setb cl
or al, cl
test al, 1
jne 0x42cee1
jmp 0x42cf23
mov ax, word [edx]
cmp ax, 0
je 0x42cf23
movzx eax, ax
add edx, 2
mov dword [esp + 0x1c8], edx
mov ecx, ebx
sub ecx, esi
mov edx, ecx
and edx, 1
xor edx, 1
and ecx, 0xfffffffe
sub ecx, edx
mov dword [esp], esi
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.00431890
mov edx, dword [esp + 0x1c8]
add esi, eax
jmp 0x42cec4
mov byte [esi], 0
mov esi, dword [esp + 0x78]
mov eax, esi
add eax, 6
mov dword [esp + 4], eax
mov eax, dword [esp + 0x194]
mov dword [esp], eax
mov dword [esp + 8], 2
call fcn.00431950
mov ecx, eax
inc ecx
mov byte [eax], 0x2e
mov eax, esi
add eax, 4
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 8], 2
call fcn.00431950
mov esi, eax
inc esi
mov byte [eax], 0x2e
mov dword [esp + 0x360], 1
mov eax, dword [esp + 0x364]
mov ecx, dword [esp + 0x360]
mov eax, dword [eax + ecx*4]
jmp eax
mov eax, dword [esp + 0x1e0]
mov ecx, dword [esp + 0x1e4]
mov eax, dword [ecx + eax*4]
jmp eax
mov eax, dword [esp + 0x288]
mov ecx, dword [esp + 0x28c]
mov eax, dword [ecx + eax*4]
mov ebx, dword [esp + 0x1dc]
mov edi, dword [esp + 0x7c]
jmp eax
or al, 0x69
inc ecx
add dword [ecx + 9], ebp
ror byte [ebx - 0x74a3dbbc], cl
or byte [ebx + 0x4890849], cl
and al, 0xff
rol dword [ebx - 0x7b74fb14], 1
and al, 0xf0
add dword [eax], eax
add byte [ebx + 0x1f4248c], cl
add byte [eax], al
mov eax, dword [ecx + eax*4]
jmp eax
call fcn.0040aa20
mov dword [esp + 0x2d0], 0
mov eax, dword [esp + 0x2d4]
mov ecx, dword [esp + 0x2d0]
mov eax, dword [eax + ecx*4]
jmp eax
call fcn.0040aa20
mov dword [esp + 0x320], 1
mov eax, dword [esp + 0x324]
mov ecx, dword [esp + 0x320]
mov eax, dword [eax + ecx*4]
jmp eax
mov eax, dword [esp + 0x2a8]
mov ecx, dword [esp + 0x2ac]
mov eax, dword [ecx + eax*4]
jmp eax
mov eax, dword [esp + 0x270]
mov ecx, dword [esp + 0x274]
mov eax, dword [ecx + eax*4]
jmp eax
lea eax, [esp + 0x1a0]
mov dword [esp], eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
sub esp, 4
lea eax, [esp + 0x3c0]
mov dword [esp], eax
call dword [sym.imp.OLEAUT32.dll_VariantClear]
sub esp, 4
mov esi, dword [esp + 0x28]
mov al, byte [esp + 0x80]
mov byte [esp + 0x174], al
mov dword [esp], 0x936337dd
mov dword [esp + 4], 5
call fcn.00419ee0
add eax, 0x49
xor eax, 0xdd
mov byte [esp + 0x60], al
mov dword [esp], 0x936337dd
mov dword [esp + 4], 5
call fcn.00419ee0
xor eax, 0xde
mov byte [esp + 0x61], al
mov dword [esp], 0x936337dd
mov dword [esp + 4], 5
call fcn.00419ee0
add eax, 0x6e
xor eax, 0xdf
mov byte [esp + 0x62], al
mov dword [esp], 0x936337dd
mov dword [esp + 4], 5
call fcn.00419ee0
xor eax, 0xe0
mov byte [esp + 0x63], al
mov dword [esp], 0x936337dd
mov dword [esp + 4], 5
call fcn.00419ee0
add eax, 0x73
xor eax, 0xe1
mov byte [esp + 0x64], al
mov dword [esp], 0x936337dd
mov dword [esp + 4], 5
call fcn.00419ee0
xor eax, 0xe2
mov byte [esp + 0x65], al
mov dword [esp], 0x936337dd
mov dword [esp + 4], 5
call fcn.00419ee0
add eax, 0x74
xor eax, 0xe3
mov byte [esp + 0x66], al
mov dword [esp], 0x936337dd
mov dword [esp + 4], 5
call fcn.00419ee0
xor eax, 0xe4
mov byte [esp + 0x67], al
mov dword [esp], 0x936337dd
mov dword [esp + 4], 5
call fcn.00419ee0
add eax, 0x61
xor eax, 0xe5
mov byte [esp + 0x68], al
mov dword [esp], 0x936337dd
mov dword [esp + 4], 5
call fcn.00419ee0
xor eax, 0xe6
mov byte [esp + 0x69], al
mov dword [esp], 0x936337dd
mov dword [esp + 4], 5
call fcn.00419ee0
add eax, 0x6c
xor eax, 0xe7
mov byte [esp + 0x6a], al
mov dword [esp], 0x936337dd
mov dword [esp + 4], 5
call fcn.00419ee0
xor eax, 0xe8
mov byte [esp + 0x6b], al
mov dword [esp], 0x936337dd
mov dword [esp + 4], 5
call fcn.00419ee0
add eax, 0x6c
xor eax, 0xe9
mov byte [esp + 0x6c], al
mov dword [esp], 0x936337dd
mov dword [esp + 4], 5
call fcn.00419ee0
xor eax, 0xea
mov byte [esp + 0x6d], al
mov dword [esp], 0x936337dd
mov dword [esp + 4], 5
call fcn.00419ee0
add eax, 0x44
xor eax, 0xeb
mov byte [esp + 0x6e], al
mov dword [esp], 0x936337dd
mov dword [esp + 4], 5
call fcn.00419ee0
xor eax, 0xec
mov byte [esp + 0x6f], al
mov dword [esp], 0x936337dd
mov dword [esp + 4], 5
call fcn.00419ee0
add eax, 0x61
xor eax, 0xed
mov byte [esp + 0x70], al
mov dword [esp], 0x936337dd
mov dword [esp + 4], 5
call fcn.00419ee0
xor eax, 0xee
mov byte [esp + 0x71], al
mov dword [esp], 0x936337dd
mov dword [esp + 4], 5
call fcn.00419ee0
add eax, 0x74
xor eax, 0xef
mov byte [esp + 0x72], al
mov dword [esp], 0x936337dd
mov dword [esp + 4], 5
call fcn.00419ee0
xor eax, 0xf0
mov byte [esp + 0x73], al
mov dword [esp], 0x936337dd
mov dword [esp + 4], 5
call fcn.00419ee0
add eax, 0x65
xor eax, 0xf1
mov byte [esp + 0x74], al
mov dword [esp], 0x936337dd
mov dword [esp + 4], 5
call fcn.00419ee0
xor eax, 0xf2
mov byte [esp + 0x75], al
mov dword [esp], 0x936337dd
mov dword [esp + 4], 5
call fcn.00419ee0
xor eax, 0xf3
mov byte [esp + 0x76], al
mov dword [esp], 0x936337dd
mov dword [esp + 4], 5
call fcn.00419ee0
xor eax, 0xf4
mov byte [esp + 0x77], al
mov dword [esp + 0x48], 0
mov eax, dword [esp + 0x48]
cmp eax, 0x18
jae 0x42d3a4
mov eax, dword [esp + 0x48]
mov ecx, dword [esp + 0x48]
movzx ecx, byte [esp + ecx + 0x60]
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.00431ad0
mov ecx, dword [esp + 0x48]
mov byte [esp + ecx + 0x60], al
mov eax, dword [esp + 0x48]
inc eax
mov dword [esp + 0x48], eax
jmp 0x42d36f
mov eax, dword [esi]
mov eax, dword [eax + 0x10]
lea ecx, [esp + 0x3c0]
mov dword [esp + 0xc], ecx
lea ecx, [esp + 0x60]
mov dword [esp + 4], ecx
mov dword [esp], esi
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 8], 0
call eax
sub esp, 0x18
test eax, eax
setns al
mov cx, word [esp + 0x3c0]
sub cx, 8
sete cl
and al, cl
movzx eax, al
mov dword [esp + 0x2f0], eax
mov eax, dword [esp + 0x2f4]
mov ecx, dword [esp + 0x2f0]
mov eax, dword [eax + ecx*4]
jmp eax
call fcn.0040aa20
mov dword [esp + 0x228], 1
mov eax, dword [esp + 0x22c]
mov ecx, dword [esp + 0x228]
mov eax, dword [eax + ecx*4]
jmp eax
call fcn.0040aa20
mov eax, dword [esp + 0x5c]
mov ecx, dword [eax]
mov ecx, dword [ecx + 8]
mov dword [esp], eax
call ecx
sub esp, 4
mov dword [esp + 0x278], 1
mov eax, dword [esp + 0x27c]
mov ecx, dword [esp + 0x278]
mov eax, dword [eax + ecx*4]
jmp eax
call fcn.0040aa20
mov dword [esp + 0x58], 0
mov eax, dword [esp + 0xec]
mov ecx, dword [eax]
mov ecx, dword [ecx + 0x10]
lea edx, [esp + 0x58]
mov dword [esp + 0x10], edx
lea edx, [esp + 0x28]
mov dword [esp + 0xc], edx
mov dword [esp], eax
mov dword [esp + 8], 1
mov dword [esp + 4], 0xffffffff
call ecx
sub esp, 0x14
test eax, eax
setns cl
sub eax, 1
setne al
mov edx, dword [esp + 0x58]
test edx, edx
setne dl
and al, dl
and al, cl
mov dword [esp + 0x390], 0
mov ecx, dword [esp + 0x394]
mov edx, dword [esp + 0x390]
mov ecx, dword [ecx + edx*4]
jmp ecx
call fcn.0040aa20
mov dword [esp], ebx
mov eax, dword [sym.imp.OLEAUT32.dll_SysStringLen]
call eax
sub esp, 4
mov eax, dword [esp + 0x154]
mov dword [esp + 0x260], 1
mov ecx, dword [esp + 0x264]
mov edx, dword [esp + 0x260]
mov ecx, dword [ecx + edx*4]
jmp ecx
call fcn.0040aa20
mov dword [esp], ebx
mov esi, dword [sym.imp.OLEAUT32.dll_SysStringLen]
call esi
sub esp, 4
mov dword [esp], edi
call esi
sub esp, 4
mov dword [esp + 0x290], 0
mov eax, dword [esp + 0x294]
mov ecx, dword [esp + 0x290]
mov eax, dword [eax + ecx*4]
jmp eax
call fcn.0040aa20
mov dword [esp + 0x328], 0
mov eax, dword [esp + 0x32c]
mov ecx, dword [esp + 0x328]
mov eax, dword [eax + ecx*4]
jmp eax
mov eax, dword [esp + 0xec]
mov ecx, dword [eax]
mov ecx, dword [ecx + 8]
mov edx, dword [esp + 0x2b8]
mov esi, dword [esp + 0x2bc]
mov edx, dword [esi + edx*4]
jmp edx
popfd
mov ebx, 0x24848b34
test al, 1
add byte [eax], al
mov dword [esp], eax
call dword [sym.imp.OLEAUT32.dll_VariantInit]
sub esp, 4
mov ebx, eax
mov eax, dword [esp + 0x1a8]
mov ecx, ebx
shl ecx, 1
mov edx, eax
add edx, ecx
mov dword [esp], eax
mov dword [esp + 4], edx
call case.0x421d66.354
mov edi, eax
add edi, 1
mov dword [esp], edi
call fcn.0040a300
mov edx, eax
mov ecx, dword [esp + 0x1a8]
shl ebx, 1
mov eax, ecx
add eax, ebx
mov dword [esp + 0x1b8], eax
mov ebx, edx
add ebx, edi
mov edi, edx
mov eax, ebx
add eax, 0xffffffff
mov esi, edi
cmp edi, eax
jae 0x42d668
mov dword [esp + 0x1b4], ebx
mov ebx, dword [esp + 0x1b8]
test ebx, ebx
sete al
mov edi, ecx
mov ecx, edi
sub ecx, ebx
mov ebx, dword [esp + 0x1b4]
setb cl
or al, cl
test al, 1
jne 0x42d622
jmp 0x42d668
mov ax, word [edi]
cmp ax, 0
je 0x42d668
movzx eax, ax
add edi, 2
mov ecx, ebx
sub ecx, esi
mov dword [esp + 0x1cc], edx
mov edx, ecx
and edx, 1
xor edx, 1
and ecx, 0xfffffffe
sub ecx, edx
mov dword [esp], esi
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.00431890
mov ecx, edi
mov edi, esi
mov edx, dword [esp + 0x1cc]
add edi, eax
jmp 0x42d5ec
mov byte [esi], 0
mov eax, edx
add eax, 6
mov dword [esp + 4], eax
mov eax, dword [esp + 0x194]
mov dword [esp], eax
mov dword [esp + 8], 2
mov esi, edx
call fcn.00431950
mov ecx, eax
inc ecx
mov byte [eax], 0x2e
add esi, 4
mov dword [esp + 4], esi
mov dword [esp], ecx
mov dword [esp + 8], 2
call fcn.00431950
mov byte [eax], 0x2e
mov eax, dword [esp + 0x218]
mov ecx, dword [esp + 0x21c]
mov eax, dword [ecx + eax*4]
jmp eax
call fcn.0040aa20
mov dword [esp + 0x230], 0
mov eax, dword [esp + 0x234]
mov ecx, dword [esp + 0x230]
mov eax, dword [eax + ecx*4]
jmp eax
call fcn.0040aa20
mov dword [esp + 0x268], 0
mov eax, dword [esp + 0x26c]
mov ecx, dword [esp + 0x268]
mov eax, dword [eax + ecx*4]
jmp eax
mov dword [esp + 0x44], 0
mov eax, dword [esp + 0x44]
cmp eax, 0x24
jae 0x42d749
mov eax, dword [esp + 0x44]
mov ecx, dword [esp + 0x44]
movzx ecx, byte [esp + ecx + 0x88]
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.00431ab0
mov ecx, dword [esp + 0x44]
mov byte [esp + ecx + 0x88], al
mov eax, dword [esp + 0x44]
inc eax
mov dword [esp + 0x44], eax
jmp 0x42d70e
mov eax, dword [esi]
mov eax, dword [eax + 0x10]
lea ecx, [esp + 0x3e0]
mov dword [esp + 0xc], ecx
lea ecx, [esp + 0x88]
mov dword [esp + 4], ecx
mov dword [esp], esi
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 8], 0
call eax
sub esp, 0x18
test eax, eax
setns al
mov cx, word [esp + 0x3e0]
sub cx, 2
sete cl
and al, cl
mov ecx, dword [esp + 0x308]
mov edx, dword [esp + 0x30c]
mov ecx, dword [edx + ecx*4]
jmp ecx
mov eax, dword [esp + 0x3c8]
mov dword [esp], eax
call dword [sym.imp.OLEAUT32.dll_VariantInit]
sub esp, 4
mov ebx, eax
mov eax, dword [esp + 0x3c8]
mov ecx, ebx
shl ecx, 1
mov edx, eax
add edx, ecx
mov dword [esp], eax
mov dword [esp + 4], edx
call case.0x421d66.354
mov esi, eax
and esi, 1
or eax, 1
add esi, eax
mov dword [esp], esi
call fcn.0040a300
mov edi, eax
mov edx, dword [esp + 0x3c8]
shl ebx, 1
mov eax, edx
add eax, ebx
mov dword [esp + 0x1bc], eax
mov ebx, edi
add ebx, esi
mov ecx, edi
mov esi, dword [esp + 0x19c]
mov eax, ebx
add eax, 0xffffffff
cmp ecx, eax
jae 0x42d891
mov esi, dword [esp + 0x1bc]
test esi, esi
sete al
mov dword [esp + 0x54], ecx
mov ecx, edx
sub ecx, esi
mov esi, dword [esp + 0x19c]
setb cl
or al, cl
mov ecx, dword [esp + 0x54]
test al, 1
jne 0x42d845
jmp 0x42d891
mov ax, word [edx]
cmp ax, 0
je 0x42d891
movzx eax, ax
add edx, 2
mov dword [esp + 0x1c4], edx
mov ecx, ebx
sub ecx, dword [esp + 0x54]
mov edx, ecx
and edx, 1
xor edx, 1
and ecx, 0xfffffffe
sub ecx, edx
mov edx, dword [esp + 0x54]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.00431890
mov ecx, dword [esp + 0x54]
mov edx, dword [esp + 0x1c4]
add ecx, eax
jmp 0x42d812
mov byte [ecx], 0
mov eax, edi
add eax, 6
mov dword [esp + 4], eax
mov dword [esp], esi
mov dword [esp + 8], 2
call fcn.00431950
mov ecx, eax
inc ecx
mov byte [eax], 0x2e
mov eax, edi
add eax, 4
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 8], 2
call fcn.00431950
mov ecx, eax
inc ecx
mov byte [eax], 0x2e
mov dword [esp + 4], edi
mov dword [esp], ecx
mov dword [esp + 8], 4
call fcn.00431950
mov ecx, eax
inc ecx
mov byte [eax], 0x20
mov eax, edi
add eax, 8
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 8], 2
call fcn.00431950
mov ecx, eax
inc ecx
mov byte [eax], 0x3a
mov eax, edi
add eax, 0xa
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 8], 2
call fcn.00431950
mov ecx, eax
inc ecx
mov byte [eax], 0x3a
mov eax, edi
add eax, 0xc
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 8], 2
call fcn.00431950
mov byte [eax], 0
mov dword [esp + 0x2e8], 0
mov eax, dword [esp + 0x2ec]
mov ecx, dword [esp + 0x2e8]
mov eax, dword [eax + ecx*4]
jmp eax
mov eax, dword [esp + 0x248]
mov ecx, dword [esp + 0x24c]
mov eax, dword [ecx + eax*4]
jmp eax
test eax, eax
setne bl
mov eax, dword [esp + 0x238]
mov ecx, dword [esp + 0x23c]
mov eax, dword [ecx + eax*4]
jmp eax
mov eax, dword [esp + 0x340]
mov edx, dword [esp + 0x344]
mov eax, dword [edx + eax*4]
jmp eax
mov eax, dword [esp + 0x318]
mov ecx, dword [esp + 0x31c]
mov eax, dword [ecx + eax*4]
jmp eax
mov eax, dword [esp + 0x2a0]
mov ecx, dword [esp + 0x2a4]
mov eax, dword [ecx + eax*4]
jmp eax
call fcn.0040aa20
mov dword [esp + 0x2d8], 1
mov eax, dword [esp + 0x2dc]
mov ecx, dword [esp + 0x2d8]
mov eax, dword [eax + ecx*4]
jmp eax
mov eax, dword [esp + 0x3d8]
mov dword [esp], eax
call dword [sym.imp.OLEAUT32.dll_VariantInit]
sub esp, 4
mov edi, eax
mov eax, dword [esp + 0x3d8]
mov ecx, edi
shl ecx, 1
mov edx, eax
add edx, ecx
mov dword [esp], eax
mov dword [esp + 4], edx
call case.0x421d66.354
mov esi, eax
mov dword [esp + 0x1d0], esi
add esi, 1
mov dword [esp], esi
call fcn.0040a300
mov ebx, eax
mov eax, dword [esp + 0x7c]
mov dword [eax], ebx
mov edx, dword [esp + 0x3d8]
shl edi, 1
mov eax, edx
add eax, edi
mov dword [esp + 0x1c0], eax
mov edi, ebx
add edi, esi
mov eax, edi
add eax, 0xffffffff
cmp ebx, eax
jae 0x42daab
mov esi, dword [esp + 0x1c0]
test esi, esi
sete al
mov ecx, edx
sub ecx, esi
setb cl
or al, cl
test al, 1
jne 0x42da73
jmp 0x42daab
mov ax, word [edx]
cmp ax, 0
je 0x42daab
movzx eax, ax
add edx, 2
mov ecx, edi
sub ecx, ebx
mov esi, edx
mov edx, ecx
and edx, 1
xor edx, 1
and ecx, 0xfffffffe
sub ecx, edx
mov dword [esp], ebx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.00431890
mov edx, esi
add ebx, eax
jmp 0x42da4f
mov byte [ebx], 0
mov al, byte [esp + 0xd0]
mov byte [esp + 0x168], al
mov dword [esp], 0xeb229008
mov dword [esp + 4], 5
call fcn.00419ee0
add eax, 0x57
xor eax, 8
mov byte [esp + 0x4c], al
mov dword [esp], 0xeb229008
mov dword [esp + 4], 5
call fcn.00419ee0
add eax, 0x69
xor eax, 9
mov byte [esp + 0x4d], al
mov dword [esp], 0xeb229008
mov dword [esp + 4], 5
call fcn.00419ee0
add eax, 0x6e
xor eax, 0xa
mov byte [esp + 0x4e], al
mov dword [esp], 0xeb229008
mov dword [esp + 4], 5
call fcn.00419ee0
add eax, 0x64
xor eax, 0xb
mov byte [esp + 0x4f], al
mov dword [esp], 0xeb229008
mov dword [esp + 4], 5
call fcn.00419ee0
add eax, 0x6f
xor eax, 0xc
mov byte [esp + 0x50], al
mov dword [esp], 0xeb229008
mov dword [esp + 4], 5
call fcn.00419ee0
add eax, 0x77
xor eax, 0xd
mov byte [esp + 0x51], al
mov dword [esp], 0xeb229008
mov dword [esp + 4], 5
call fcn.00419ee0
add eax, 0x73
xor eax, 0xe
mov byte [esp + 0x52], al
mov dword [esp], 0xeb229008
mov dword [esp + 4], 5
call fcn.00419ee0
xor eax, 0xf
mov byte [esp + 0x53], al
mov dword [esp + 0x3c], 0
mov esi, dword [esp + 0x7c]
mov eax, dword [esp + 0x3c]
cmp eax, 8
jae 0x42dbea
mov eax, dword [esp + 0x3c]
mov ecx, dword [esp + 0x3c]
movzx ecx, byte [esp + ecx + 0x4c]
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.00431a60
mov ecx, dword [esp + 0x3c]
mov byte [esp + ecx + 0x4c], al
mov eax, dword [esp + 0x3c]
inc eax
mov dword [esp + 0x3c], eax
jmp 0x42dbb5
mov eax, dword [esi]
lea ecx, [esp + 0x4c]
mov dword [esp + 4], ecx
mov dword [esp], eax
call fcn.004199e0
mov edx, dword [esi]
mov esi, edx
sub esi, eax
mov edi, dword [esp + 0x1d0]
lea ecx, [edi + esi]
lea esi, [edi + esi + 1]
seta bl
lea edi, [eax + ecx + 1]
sub edi, edx
seta bh
and bl, bh
test bl, 1
jne 0x42dc75
mov ecx, esi
shr ecx, 2
mov edi, edx
mov ebx, eax
xchg esi, ebx
rep movsd dword es:[edi], dword [esi]
xchg esi, ebx
mov ecx, esi
and ecx, 0xfffffffc
add edx, ecx
add eax, ecx
mov ecx, esi
shr ecx, 1
and ecx, 1
mov edi, edx
mov ebx, eax
xchg esi, ebx
rep movsw word es:[edi], word [esi]
xchg esi, ebx
mov ecx, esi
and ecx, 2
add edx, ecx
add eax, ecx
and esi, 1
cmp esi, 0
je 0x42dc99
add esi, 0xffffffff
mov ecx, eax
add ecx, 1
mov al, byte [eax]
mov edi, edx
add edi, 1
mov byte [edx], al
mov edx, edi
mov eax, ecx
jmp 0x42dc59
add edx, ecx
add eax, ecx
mov ecx, esi
add esi, 0xffffffff
cmp ecx, 0
je 0x42dc97
mov ecx, eax
add ecx, 0xffffffff
mov al, byte [eax]
mov edi, edx
add edi, 0xffffffff
mov byte [edx], al
mov edx, edi
mov eax, ecx
jmp 0x42dc79
jmp 0x42dc9b
jmp 0x42dc9b
mov eax, dword [esp + 0x378]
mov ecx, dword [esp + 0x37c]
mov eax, dword [ecx + eax*4]
jmp eax
mov byte [0xc71f291f], al
inc esp
and al, 0x58
add byte [eax], al
add byte [eax], al
mov eax, dword [esp + 0xec]
mov ecx, dword [eax]
mov ecx, dword [ecx + 0x10]
lea edx, [esp + 0x58]
mov dword [esp + 0x10], edx
lea edx, [esp + 0x28]
mov dword [esp + 0xc], edx
mov dword [esp], eax
mov dword [esp + 8], 1
mov dword [esp + 4], 0xffffffff
call ecx
sub esp, 0x14
mov eax, dword [esp + 0x220]
mov ecx, dword [esp + 0x224]
mov eax, dword [ecx + eax*4]
jmp eax
and bl, 1
movzx eax, bl
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov eax, dword [esp + 0x2c8]
mov ecx, dword [esp + 0x2cc]
mov eax, dword [ecx + eax*4]
jmp eax
xor ecx, dword [eax]
ljmp 0x8b1d
call fcn.0040aa20
mov dword [esi + 0x220], 1
mov eax, dword [esi + 0x224]
mov ecx, dword [esi + 0x220]
mov eax, dword [eax + ecx*4]
jmp eax
call fcn.0040aa20
sub esp, 4
mov dword [esp], 0xc
call fcn.0040a300
add esp, 4
mov edi, eax
mov dword [edi], 0
mov eax, edi
add eax, 4
mov dword [esi + 0x10c], eax
mov byte [edi + 4], 0
mov eax, edi
add eax, 8
mov dword [esi + 0x110], eax
mov dword [edi + 8], 0
sub esp, 4
mov dword [esp], ebx
mov eax, dword [sym.imp.OLEAUT32.dll_VariantClear]
call eax
mov eax, dword [esi + 0x60]
mov dword [esi + 0xec], eax
mov dword [esi + 0x280], 0
mov eax, dword [esi + 0x284]
mov ecx, dword [esi + 0x280]
mov eax, dword [eax + ecx*4]
jmp eax
call fcn.0040aa20
mov dword [esi + 0x1e0], 0
mov eax, dword [esi + 0x1e4]
mov ecx, dword [esi + 0x1e0]
mov eax, dword [eax + ecx*4]
jmp eax
sub esp, 4
mov eax, dword [esi + 0xf0]
mov dword [esp], eax
mov edi, dword [sym.imp.OLEAUT32.dll_SysStringLen]
call edi
sub esp, 4
mov eax, dword [esi + 0x118]
mov dword [esp], eax
call edi
mov eax, dword [esi + 0x1a8]
mov ecx, dword [esi + 0x1ac]
mov eax, dword [ecx + eax*4]
jmp eax
mov eax, dword [esi + 0x1d0]
mov ecx, dword [esi + 0x1d4]
mov eax, dword [ecx + eax*4]
jmp eax
call fcn.0040aa20
mov dword [esi + 0x1f8], 1
mov eax, dword [esi + 0x1fc]
mov ecx, dword [esi + 0x1f8]
mov eax, dword [eax + ecx*4]
jmp eax
mov eax, dword [esi + 0x1f0]
mov ecx, dword [esi + 0x1f4]
mov eax, dword [ecx + eax*4]
jmp eax
xor eax, eax
sub edi, 3
sete al
mov dword [esi + 0x1e8], eax
mov eax, dword [esi + 0x1ec]
mov ecx, dword [esi + 0x1e8]
mov eax, dword [eax + ecx*4]
jmp eax
mov eax, dword [esi + 0xfc]
mov al, byte [eax]
mov byte [esi + 0x98], al
sub esp, 8
mov dword [esp], 0xb0869331
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
mov ecx, eax
and ecx, 0x70
shl ecx, 1
xor eax, 0x70
add eax, ecx
xor eax, 0x31
mov byte [edi], al
sub esp, 8
mov dword [esp], 0xb0869331
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x32
mov byte [edi + 1], al
sub esp, 8
mov dword [esp], 0xb0869331
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
mov ecx, eax
and ecx, 0x72
shl ecx, 1
xor eax, 0x72
add eax, ecx
xor eax, 0x33
mov byte [edi + 2], al
sub esp, 8
mov dword [esp], 0xb0869331
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x34
mov byte [edi + 3], al
sub esp, 8
mov dword [esp], 0xb0869331
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
mov ecx, eax
and ecx, 0x6f
shl ecx, 1
xor eax, 0x6f
add eax, ecx
xor eax, 0x35
mov byte [edi + 4], al
sub esp, 8
mov dword [esp], 0xb0869331
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x36
mov byte [edi + 5], al
sub esp, 8
mov dword [esp], 0xb0869331
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
mov ecx, eax
and ecx, 0x64
shl ecx, 1
xor eax, 0x64
add eax, ecx
xor eax, 0x37
mov byte [edi + 6], al
sub esp, 8
mov dword [esp], 0xb0869331
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x38
mov byte [edi + 7], al
sub esp, 8
mov dword [esp], 0xb0869331
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
mov ecx, eax
and ecx, 0x75
shl ecx, 1
xor eax, 0x75
add eax, ecx
xor eax, 0x39
mov byte [edi + 8], al
sub esp, 8
mov dword [esp], 0xb0869331
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x3a
mov byte [edi + 9], al
sub esp, 8
mov dword [esp], 0xb0869331
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
mov ecx, eax
and ecx, 0x63
shl ecx, 1
xor eax, 0x63
add eax, ecx
xor eax, 0x3b
mov byte [edi + 0xa], al
sub esp, 8
mov dword [esp], 0xb0869331
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x3c
mov byte [edi + 0xb], al
sub esp, 8
mov dword [esp], 0xb0869331
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
mov ecx, eax
and ecx, 0x74
shl ecx, 1
xor eax, 0x74
add eax, ecx
xor eax, 0x3d
mov byte [edi + 0xc], al
sub esp, 8
mov dword [esp], 0xb0869331
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x3e
mov byte [edi + 0xd], al
sub esp, 8
mov dword [esp], 0xb0869331
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
mov ecx, eax
and ecx, 0x53
shl ecx, 1
xor eax, 0x53
add eax, ecx
xor eax, 0x3f
mov byte [edi + 0xe], al
sub esp, 8
mov dword [esp], 0xb0869331
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x40
mov byte [edi + 0xf], al
sub esp, 8
mov dword [esp], 0xb0869331
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
mov ecx, eax
and ecx, 0x74
shl ecx, 1
xor eax, 0x74
add eax, ecx
xor eax, 0x41
mov byte [edi + 0x10], al
sub esp, 8
mov dword [esp], 0xb0869331
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x42
mov byte [edi + 0x11], al
sub esp, 8
mov dword [esp], 0xb0869331
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
mov ecx, eax
and ecx, 0x61
shl ecx, 1
xor eax, 0x61
add eax, ecx
xor eax, 0x43
mov byte [edi + 0x12], al
sub esp, 8
mov dword [esp], 0xb0869331
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x44
mov byte [edi + 0x13], al
sub esp, 8
mov dword [esp], 0xb0869331
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
mov ecx, eax
and ecx, 0x74
shl ecx, 1
xor eax, 0x74
add eax, ecx
xor eax, 0x45
mov byte [edi + 0x14], al
sub esp, 8
mov dword [esp], 0xb0869331
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x46
mov byte [edi + 0x15], al
sub esp, 8
mov dword [esp], 0xb0869331
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
mov ecx, eax
and ecx, 0x65
shl ecx, 1
xor eax, 0x65
add eax, ecx
xor eax, 0x47
mov byte [edi + 0x16], al
sub esp, 8
mov dword [esp], 0xb0869331
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x48
mov byte [edi + 0x17], al
sub esp, 8
mov dword [esp], 0xb0869331
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x49
mov byte [edi + 0x18], al
sub esp, 8
mov dword [esp], 0xb0869331
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x4a
mov byte [edi + 0x19], al
mov eax, 0x1a
mov byte [edi + eax], 0
add eax, 1
cmp eax, 0x20
jne 0x42e68e
mov dword [esi + 0x54], 0
mov eax, dword [esi + 0x54]
cmp eax, 0x20
jae 0x42e6d7
mov eax, dword [esi + 0x54]
mov ecx, dword [esi + 0x54]
movzx ecx, byte [edi + ecx]
sub esp, 8
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.00431b80
mov edi, dword [esi + 0x78]
add esp, 8
mov ecx, dword [esi + 0x54]
mov byte [edi + ecx], al
mov eax, dword [esi + 0x54]
inc eax
mov dword [esi + 0x54], eax
jmp 0x42e6a1
mov ecx, dword [esi + 0xec]
mov eax, dword [ecx]
mov eax, dword [eax + 0x10]
sub esp, 0x18
mov edx, dword [esi]
mov dword [esp + 0xc], edx
mov dword [esp + 4], edi
mov dword [esp], ecx
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 8], 0
call eax
mov eax, dword [esi + 0x150]
mov ecx, dword [esi + 0x154]
mov eax, dword [ecx + eax*4]
jmp eax
mov eax, dword [esi + 0x2e0]
mov ecx, dword [esi + 0x2e4]
mov eax, dword [ecx + eax*4]
mov dword [esi + 0x30], 0
jmp eax
mov dword [esi + 0x6c], 0
mov eax, dword [esi + 0x7c]
mov ecx, dword [eax]
mov ecx, dword [ecx + 0x10]
sub esp, 0x14
lea edx, [esi + 0x6c]
mov dword [esp + 0x10], edx
lea edx, [esi + 0x60]
mov dword [esp + 0xc], edx
mov dword [esp], eax
mov dword [esp + 8], 1
mov dword [esp + 4], 0xffffffff
call ecx
mov eax, dword [esi + 0x170]
mov ecx, dword [esi + 0x174]
mov eax, dword [ecx + eax*4]
jmp eax
movzx eax, al
and eax, 1
mov dword [esi + 0x2c8], eax
mov eax, dword [esi + 0x2cc]
mov ecx, dword [esi + 0x2c8]
mov eax, dword [eax + ecx*4]
jmp eax
movzx eax, al
and eax, 1
mov dword [esi + 0x258], eax
mov eax, dword [esi + 0x25c]
mov ecx, dword [esi + 0x258]
mov eax, dword [eax + ecx*4]
mov edi, dword [esi + 0x38]
mov ebx, dword [esi]
jmp eax
call fcn.0040aa20
mov dword [esi + 0x248], 1
mov eax, dword [esi + 0x24c]
mov ecx, dword [esi + 0x248]
mov eax, dword [eax + ecx*4]
mov ebx, dword [esi + 0x74]
jmp eax
call fcn.0040aa20
mov dword [esi + 0x288], 0
mov eax, dword [esi + 0x28c]
mov ecx, dword [esi + 0x288]
mov eax, dword [eax + ecx*4]
add al, 0x88
jmp eax
mov eax, dword [esi + 0x70]
mov ecx, dword [esi + 0x300]
mov edx, dword [esi + 0x304]
mov ecx, dword [edx + ecx*4]
jmp ecx
sub esp, 4
mov dword [esp], edi
mov eax, dword [sym.imp.OLEAUT32.dll_VariantCopy]
call eax
xor eax, eax
cmp dword [esi + 0x30], 0
sete al
mov dword [esi + 0x228], eax
mov eax, dword [esi + 0x22c]
mov ecx, dword [esi + 0x228]
mov eax, dword [eax + ecx*4]
jmp eax
mov eax, dword [esi + 0x160]
mov ecx, dword [esi + 0x164]
mov eax, dword [ecx + eax*4]
jmp eax
mov eax, dword [eax + 8]
sub esp, 4
mov dword [esp], edi
call eax
mov eax, dword [esi + 0x1b0]
mov ecx, dword [esi + 0x1b4]
mov eax, dword [ecx + eax*4]
jmp eax
push ebp
test dword [eax - 0x137caf90], esi
or al, 0x89
loopne 0x42e7f9
sub esp, 0xc
mov eax, esp
and eax, 0xfffffff8
loopne 0x42e870
mov esp, eax
push eax
sub esp, 0x1c
push eax
push eax
sub esp, 0x10
mov eax, esp
and eax, 0xfffffff8
mov esp, eax
push eax
sub esp, 0x18
push eax
mov dword [esi + 0x3c], 0
sub esp, 0x14
lea eax, [esi + 0x3c]
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 0x4419c0
mov dword [esp + 8], 1
mov dword [esp + 4], 0
mov dword [esp], 0x4419d0
mov eax, dword [sym.imp.ole32.dll_CoCreateInstance]
call eax
mov eax, dword [esi + 0x180]
mov ecx, dword [esi + 0x184]
mov eax, dword [ecx + eax*4]
jmp eax
sub esp, 4
mov eax, dword [esi]
mov dword [esp], eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
sub esp, 4
mov dword [esp], edi
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov edi, dword [esi + 0x60]
mov eax, dword [esi + 0xf4]
mov al, byte [eax]
mov byte [esi + 0xa0], al
sub esp, 8
mov dword [esp], 0x44c4cf74
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x64
xor eax, 0x74
mov byte [ebx], al
sub esp, 8
mov dword [esp], 0x44c4cf74
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x75
mov byte [ebx + 1], al
sub esp, 8
mov dword [esp], 0x44c4cf74
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x69
xor eax, 0x76
mov byte [ebx + 2], al
sub esp, 8
mov dword [esp], 0x44c4cf74
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x77
mov byte [ebx + 3], al
sub esp, 8
mov dword [esp], 0x44c4cf74
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x73
xor eax, 0x78
mov byte [ebx + 4], al
sub esp, 8
mov dword [esp], 0x44c4cf74
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x79
mov byte [ebx + 5], al
sub esp, 8
mov dword [esp], 0x44c4cf74
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x70
xor eax, 0x7a
mov byte [ebx + 6], al
sub esp, 8
mov dword [esp], 0x44c4cf74
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x7b
mov byte [ebx + 7], al
sub esp, 8
mov dword [esp], 0x44c4cf74
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x6c
xor eax, 0x7c
mov byte [ebx + 8], al
sub esp, 8
mov dword [esp], 0x44c4cf74
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x7d
mov byte [ebx + 9], al
sub esp, 8
mov dword [esp], 0x44c4cf74
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x61
xor eax, 0x7e
mov byte [ebx + 0xa], al
sub esp, 8
mov dword [esp], 0x44c4cf74
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x7f
mov byte [ebx + 0xb], al
sub esp, 8
mov dword [esp], 0x44c4cf74
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x79
xor eax, 0x80
mov byte [ebx + 0xc], al
sub esp, 8
mov dword [esp], 0x44c4cf74
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x81
mov byte [ebx + 0xd], al
sub esp, 8
mov dword [esp], 0x44c4cf74
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x4e
xor eax, 0x82
mov byte [ebx + 0xe], al
sub esp, 8
mov dword [esp], 0x44c4cf74
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x83
mov byte [ebx + 0xf], al
sub esp, 8
mov dword [esp], 0x44c4cf74
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x61
xor eax, 0x84
mov byte [ebx + 0x10], al
sub esp, 8
mov dword [esp], 0x44c4cf74
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x85
mov byte [ebx + 0x11], al
sub esp, 8
mov dword [esp], 0x44c4cf74
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x6d
xor eax, 0x86
mov byte [ebx + 0x12], al
sub esp, 8
mov dword [esp], 0x44c4cf74
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x87
mov byte [ebx + 0x13], al
sub esp, 8
mov dword [esp], 0x44c4cf74
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x65
xor eax, 0x88
mov byte [ebx + 0x14], al
sub esp, 8
mov dword [esp], 0x44c4cf74
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x89
mov byte [ebx + 0x15], al
sub esp, 8
mov dword [esp], 0x44c4cf74
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x8a
mov byte [ebx + 0x16], al
sub esp, 8
mov dword [esp], 0x44c4cf74
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x8b
mov byte [ebx + 0x17], al
mov eax, 0x18
mov byte [ebx + eax], 0
add eax, 1
cmp eax, 0x1a
jne 0x42ec3f
mov dword [esi + 0x5c], 0
mov eax, dword [esi + 0x5c]
cmp eax, 0x1a
jae 0x42ec88
mov eax, dword [esi + 0x5c]
mov ecx, dword [esi + 0x5c]
movzx ecx, byte [ebx + ecx]
sub esp, 8
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.00431ba0
mov ebx, dword [esi + 0x74]
add esp, 8
mov ecx, dword [esi + 0x5c]
mov byte [ebx + ecx], al
mov eax, dword [esi + 0x5c]
inc eax
mov dword [esi + 0x5c], eax
jmp 0x42ec52
mov eax, dword [edi]
mov eax, dword [eax + 0x10]
sub esp, 0x18
mov ecx, dword [esi + 0x38]
mov dword [esp + 0xc], ecx
mov dword [esp + 4], ebx
mov dword [esp], edi
mov edi, ecx
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 8], 0
call eax
mov eax, dword [esi + 0x148]
mov ecx, dword [esi + 0x14c]
mov eax, dword [ecx + eax*4]
jmp eax
movzx eax, al
and eax, 1
mov dword [esi + 0x238], eax
mov eax, dword [esi + 0x23c]
mov ecx, dword [esi + 0x238]
mov eax, dword [eax + ecx*4]
mov ebx, dword [esi]
jmp eax
mov eax, dword [esi + 0x168]
mov ecx, dword [esi + 0x16c]
mov eax, dword [ecx + eax*4]
jmp eax
mov dword [esi + 0x38], ebx
mov ecx, dword [esi + 0x328]
mov edx, dword [esi + 0x32c]
mov ecx, dword [edx + ecx*4]
jmp ecx
mov eax, dword [esi + 0x2b0]
mov ecx, dword [esi + 0x2b4]
mov eax, dword [ecx + eax*4]
mov edi, 3
jmp eax
call fcn.0040aa20
mov dword [esi + 0x338], 1
mov eax, dword [esi + 0x33c]
mov ecx, dword [esi + 0x338]
mov eax, dword [eax + ecx*4]
jmp eax
mov eax, dword [esi + 0x210]
mov ecx, dword [esi + 0x214]
mov eax, dword [ecx + eax*4]
mov ecx, dword [esi + 0x114]
mov dword [esi + 0x30], ecx
jmp eax
call fcn.0040aa20
mov dword [esi + 0x218], 0
mov eax, dword [esi + 0x21c]
mov ecx, dword [esi + 0x218]
mov eax, dword [eax + ecx*4]
jmp eax
call fcn.0040aa20
sub esp, 0x10
mov edi, esp
and edi, 0xfffffff8
mov esp, edi
push eax
sub esp, 0x1c
mov dword [esi + 0x78], esp
push eax
mov dword [esi + 0xfc], esp
push eax
mov dword [esi + 0xf8], esp
sub esp, 0x10
mov ebx, esp
and ebx, 0xfffffff8
mov esp, ebx
push eax
sub esp, 0x18
mov dword [esi + 0x74], esp
push eax
mov dword [esi + 0xf4], esp
mov dword [esi + 0x3c], 0
sub esp, 0x14
lea eax, [esi + 0x3c]
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], 0x4419c0
mov dword [esp + 8], 1
mov dword [esp + 4], 0
mov dword [esp], 0x4419d0
mov eax, dword [sym.imp.ole32.dll_CoCreateInstance]
call eax
mov dword [esi + 0x330], 0
mov ecx, dword [esi + 0x334]
mov edx, dword [esi + 0x330]
mov ecx, dword [ecx + edx*4]
jmp ecx
dec edx
dec edx
invalid
call fcn.0040aa20
mov dword [esi + 0x188], 0
mov eax, dword [esi + 0x18c]
mov ecx, dword [esi + 0x188]
mov eax, dword [eax + ecx*4]
jmp eax
call fcn.0040aa20
mov dword [esi + 0x270], 0
mov eax, dword [esi + 0x274]
mov ecx, dword [esi + 0x270]
mov eax, dword [eax + ecx*4]
mov edi, dword [esi + 0x78]
jmp eax
mov eax, dword [esi + 0x138]
mov ecx, dword [esi + 0x13c]
mov eax, dword [ecx + eax*4]
jmp eax
add ebx, 8
mov edx, dword [esi + 0xf8]
mov edi, edx
mov ecx, 1
mov eax, ebx
xchg esi, eax
rep movsd dword es:[edi], dword [esi]
xchg esi, eax
mov eax, edx
add eax, 4
add ebx, 4
mov edi, eax
xor ecx, ecx
mov edx, ebx
xchg esi, edx
rep movsw word es:[edi], word [esi]
xchg esi, edx
xor ecx, ecx
mov edx, ecx
add ecx, 0xffffffff
cmp edx, 0
je 0x42eec5
mov edx, ebx
add edx, 1
mov edi, eax
add edi, 1
mov bl, byte [ebx]
mov byte [eax], bl
mov eax, edi
mov ebx, edx
jmp 0x42eea7
call fcn.0040aa20
call fcn.0040aa20
mov eax, dword [esi + 0xf8]
mov al, byte [eax + 1]
mov ecx, dword [esi + 0x10c]
mov byte [ecx], al
mov eax, dword [esi + 0x250]
mov ecx, dword [esi + 0x254]
mov eax, dword [ecx + eax*4]
mov edi, dword [esi + 0x38]
jmp eax
mov cl, al
and ecx, 1
mov dword [esi + 0x308], ecx
mov eax, dword [esi + 0x30c]
mov ecx, dword [esi + 0x308]
mov eax, dword [eax + ecx*4]
mov dword [esi + 0x30], 0
jmp eax
mov ecx, dword [esi + 0x1b8]
mov edx, dword [esi + 0x1bc]
mov ecx, dword [edx + ecx*4]
jmp ecx
mov eax, dword [esi + 0x70]
mov ecx, dword [eax]
mov ecx, dword [ecx + 8]
sub esp, 4
mov dword [esp], eax
call ecx
mov eax, dword [esi + 0x1a0]
mov ecx, dword [esi + 0x1a4]
mov eax, dword [ecx + eax*4]
jmp eax
call fcn.0040aa20
mov dword [esi + 0x190], 1
mov eax, dword [esi + 0x194]
mov ecx, dword [esi + 0x190]
mov eax, dword [eax + ecx*4]
jmp eax
call fcn.0040aa20
mov dword [esi + 0x318], 1
mov eax, dword [esi + 0x31c]
mov ecx, dword [esi + 0x318]
mov eax, dword [eax + ecx*4]
jmp eax
mov eax, dword [esi + 0xfc]
mov al, byte [eax]
mov byte [esi + 0x9c], al
sub esp, 8
mov dword [esp], 0xb0869331
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
mov ecx, eax
and ecx, 0x70
shl ecx, 1
xor eax, 0x70
add eax, ecx
xor eax, 0x31
mov byte [edi], al
sub esp, 8
mov dword [esp], 0xb0869331
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x32
mov byte [edi + 1], al
sub esp, 8
mov dword [esp], 0xb0869331
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
mov ecx, eax
and ecx, 0x72
shl ecx, 1
xor eax, 0x72
add eax, ecx
xor eax, 0x33
mov byte [edi + 2], al
sub esp, 8
mov dword [esp], 0xb0869331
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x34
mov byte [edi + 3], al
sub esp, 8
mov dword [esp], 0xb0869331
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
mov ecx, eax
and ecx, 0x6f
shl ecx, 1
xor eax, 0x6f
add eax, ecx
xor eax, 0x35
mov byte [edi + 4], al
sub esp, 8
mov dword [esp], 0xb0869331
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x36
mov byte [edi + 5], al
sub esp, 8
mov dword [esp], 0xb0869331
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
mov ecx, eax
and ecx, 0x64
shl ecx, 1
xor eax, 0x64
add eax, ecx
xor eax, 0x37
mov byte [edi + 6], al
sub esp, 8
mov dword [esp], 0xb0869331
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x38
mov byte [edi + 7], al
sub esp, 8
mov dword [esp], 0xb0869331
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
mov ecx, eax
and ecx, 0x75
shl ecx, 1
xor eax, 0x75
add eax, ecx
xor eax, 0x39
mov byte [edi + 8], al
sub esp, 8
mov dword [esp], 0xb0869331
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x3a
mov byte [edi + 9], al
sub esp, 8
mov dword [esp], 0xb0869331
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
mov ecx, eax
and ecx, 0x63
shl ecx, 1
xor eax, 0x63
add eax, ecx
xor eax, 0x3b
mov byte [edi + 0xa], al
sub esp, 8
mov dword [esp], 0xb0869331
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x3c
mov byte [edi + 0xb], al
sub esp, 8
mov dword [esp], 0xb0869331
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
mov ecx, eax
and ecx, 0x74
shl ecx, 1
xor eax, 0x74
add eax, ecx
xor eax, 0x3d
mov byte [edi + 0xc], al
sub esp, 8
mov dword [esp], 0xb0869331
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x3e
mov byte [edi + 0xd], al
sub esp, 8
mov dword [esp], 0xb0869331
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
mov ecx, eax
and ecx, 0x53
shl ecx, 1
xor eax, 0x53
add eax, ecx
xor eax, 0x3f
mov byte [edi + 0xe], al
sub esp, 8
mov dword [esp], 0xb0869331
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x40
mov byte [edi + 0xf], al
sub esp, 8
mov dword [esp], 0xb0869331
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
mov ecx, eax
and ecx, 0x74
shl ecx, 1
xor eax, 0x74
add eax, ecx
xor eax, 0x41
mov byte [edi + 0x10], al
sub esp, 8
mov dword [esp], 0xb0869331
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x42
mov byte [edi + 0x11], al
sub esp, 8
mov dword [esp], 0xb0869331
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
mov ecx, eax
and ecx, 0x61
shl ecx, 1
xor eax, 0x61
add eax, ecx
xor eax, 0x43
mov byte [edi + 0x12], al
sub esp, 8
mov dword [esp], 0xb0869331
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x44
mov byte [edi + 0x13], al
sub esp, 8
mov dword [esp], 0xb0869331
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
mov ecx, eax
and ecx, 0x74
shl ecx, 1
xor eax, 0x74
add eax, ecx
xor eax, 0x45
mov byte [edi + 0x14], al
sub esp, 8
mov dword [esp], 0xb0869331
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x46
mov byte [edi + 0x15], al
sub esp, 8
mov dword [esp], 0xb0869331
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
mov ecx, eax
and ecx, 0x65
shl ecx, 1
xor eax, 0x65
add eax, ecx
xor eax, 0x47
mov byte [edi + 0x16], al
sub esp, 8
mov dword [esp], 0xb0869331
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x48
mov byte [edi + 0x17], al
sub esp, 8
mov dword [esp], 0xb0869331
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x49
mov byte [edi + 0x18], al
sub esp, 8
mov dword [esp], 0xb0869331
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x4a
mov byte [edi + 0x19], al
mov eax, 0x1a
mov byte [edi + eax], 0
add eax, 1
cmp eax, 0x20
jne 0x42f36b
mov dword [esi + 0x50], 0
mov eax, dword [esi + 0x50]
cmp eax, 0x20
jae 0x42f3b4
mov eax, dword [esi + 0x50]
mov ecx, dword [esi + 0x50]
movzx ecx, byte [edi + ecx]
sub esp, 8
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.00431b80
mov edi, dword [esi + 0x78]
add esp, 8
mov ecx, dword [esi + 0x50]
mov byte [edi + ecx], al
mov eax, dword [esi + 0x50]
inc eax
mov dword [esi + 0x50], eax
jmp 0x42f37e
mov ecx, dword [esi + 0xec]
mov eax, dword [ecx]
mov eax, dword [eax + 0x10]
sub esp, 0x18
mov ebx, dword [esi]
mov dword [esp + 0xc], ebx
mov dword [esp + 4], edi
mov dword [esp], ecx
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 8], 0
call eax
test eax, eax
setns al
mov cx, word [ebx]
sub cx, 3
sete cl
and al, cl
mov dword [esi + 0x268], 1
mov ecx, dword [esi + 0x26c]
mov edx, dword [esi + 0x268]
mov ecx, dword [ecx + edx*4]
jmp ecx
not eax
shr eax, 0x1f
mov dword [esi + 0x320], eax
mov eax, dword [esi + 0x324]
mov ecx, dword [esi + 0x320]
mov eax, dword [eax + ecx*4]
mov dword [esi + 0x30], 0
mov ebx, edi
jmp eax
mov dword [esi + 0x114], edi
mov eax, dword [esi + 0x278]
mov ecx, dword [esi + 0x27c]
mov eax, dword [ecx + eax*4]
jmp eax
sub esp, 0x20
mov dword [esp], eax
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 3
mov dword [esp + 0x10], 3
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
mov dword [esp + 4], 0xa
mov eax, dword [sym.imp.ole32.dll_CoSetProxyBlanket]
call eax
mov ecx, dword [esi + 0x2f8]
mov edx, dword [esi + 0x2fc]
mov ecx, dword [edx + ecx*4]
jmp ecx
call fcn.0040aa20
mov dword [esi + 0x2c0], 1
mov eax, dword [esi + 0x2c4]
mov ecx, dword [esi + 0x2c0]
mov eax, dword [eax + ecx*4]
jmp eax
mov al, byte [esi + 0x84]
mov byte [esi + 0x90], al
sub esp, 8
mov dword [esp], 0xef764754
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x57
mov ecx, eax
or ecx, 0x54
xor eax, 0xffffffff
or eax, 0xab
and ecx, eax
mov byte [esi + 0x64], cl
sub esp, 8
mov dword [esp], 0xef764754
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
mov ecx, eax
or ecx, 0x55
xor eax, 0xffffffff
or eax, 0xaa
and ecx, eax
mov byte [esi + 0x65], cl
sub esp, 8
mov dword [esp], 0xef764754
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x51
mov ecx, eax
or ecx, 0x56
xor eax, 0xffffffff
or eax, 0xa9
and ecx, eax
mov byte [esi + 0x66], cl
sub esp, 8
mov dword [esp], 0xef764754
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
mov ecx, eax
or ecx, 0x57
xor eax, 0xffffffff
or eax, 0xa8
and ecx, eax
mov byte [esi + 0x67], cl
sub esp, 8
mov dword [esp], 0xef764754
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x4c
mov ecx, eax
or ecx, 0x58
xor eax, 0xffffffff
or eax, 0xa7
and ecx, eax
mov byte [esi + 0x68], cl
sub esp, 8
mov dword [esp], 0xef764754
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
mov ecx, eax
or ecx, 0x59
xor eax, 0xffffffff
or eax, 0xa6
and ecx, eax
mov byte [esi + 0x69], cl
sub esp, 8
mov dword [esp], 0xef764754
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
mov ecx, eax
or ecx, 0x5a
xor eax, 0xffffffff
or eax, 0xa5
and ecx, eax
mov byte [esi + 0x6a], cl
sub esp, 8
mov dword [esp], 0xef764754
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
mov ecx, eax
or ecx, 0x5b
xor eax, 0xffffffff
or eax, 0xa4
and ecx, eax
mov byte [esi + 0x6b], cl
mov dword [esi + 0x48], 0
mov eax, dword [esi + 0x48]
cmp eax, 8
jae 0x42f678
mov eax, dword [esi + 0x48]
mov ecx, dword [esi + 0x48]
movzx ecx, byte [esi + ecx + 0x64]
sub esp, 8
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.00431b30
add esp, 8
mov ecx, dword [esi + 0x48]
mov byte [esi + ecx + 0x64], al
mov eax, dword [esi + 0x48]
inc eax
mov dword [esi + 0x48], eax
jmp 0x42f643
lea eax, [esi + 0x64]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.OLEAUT32.dll_SysReAllocString]
mov dword [esi + 0xf0], eax
mov al, byte [esi + 0x80]
mov byte [esi + 0x94], al
sub esp, 8
mov dword [esp], 0xb966541a
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x53
xor eax, 0x1a
mov byte [esi + 0xa8], al
sub esp, 8
mov dword [esp], 0xb966541a
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x1b
mov byte [esi + 0xa9], al
sub esp, 8
mov dword [esp], 0xb966541a
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x45
xor eax, 0x1c
mov byte [esi + 0xaa], al
sub esp, 8
mov dword [esp], 0xb966541a
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x1d
mov byte [esi + 0xab], al
sub esp, 8
mov dword [esp], 0xb966541a
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x4c
xor eax, 0x1e
mov byte [esi + 0xac], al
sub esp, 8
mov dword [esp], 0xb966541a
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x1f
mov byte [esi + 0xad], al
sub esp, 8
mov dword [esp], 0xb966541a
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x45
xor eax, 0x20
mov byte [esi + 0xae], al
sub esp, 8
mov dword [esp], 0xb966541a
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x21
mov byte [esi + 0xaf], al
sub esp, 8
mov dword [esp], 0xb966541a
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x43
xor eax, 0x22
mov byte [esi + 0xb0], al
sub esp, 8
mov dword [esp], 0xb966541a
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x23
mov byte [esi + 0xb1], al
sub esp, 8
mov dword [esp], 0xb966541a
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x54
xor eax, 0x24
mov byte [esi + 0xb2], al
sub esp, 8
mov dword [esp], 0xb966541a
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x25
mov byte [esi + 0xb3], al
sub esp, 8
mov dword [esp], 0xb966541a
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x20
xor eax, 0x26
mov byte [esi + 0xb4], al
sub esp, 8
mov dword [esp], 0xb966541a
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x27
mov byte [esi + 0xb5], al
sub esp, 8
mov dword [esp], 0xb966541a
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x2a
xor eax, 0x28
mov byte [esi + 0xb6], al
sub esp, 8
mov dword [esp], 0xb966541a
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x29
mov byte [esi + 0xb7], al
sub esp, 8
mov dword [esp], 0xb966541a
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x20
xor eax, 0x2a
mov byte [esi + 0xb8], al
sub esp, 8
mov dword [esp], 0xb966541a
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x2b
mov byte [esi + 0xb9], al
sub esp, 8
mov dword [esp], 0xb966541a
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x46
xor eax, 0x2c
mov byte [esi + 0xba], al
sub esp, 8
mov dword [esp], 0xb966541a
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x2d
mov byte [esi + 0xbb], al
sub esp, 8
mov dword [esp], 0xb966541a
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x52
xor eax, 0x2e
mov byte [esi + 0xbc], al
sub esp, 8
mov dword [esp], 0xb966541a
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x2f
mov byte [esi + 0xbd], al
sub esp, 8
mov dword [esp], 0xb966541a
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x4f
xor eax, 0x30
mov byte [esi + 0xbe], al
sub esp, 8
mov dword [esp], 0xb966541a
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x31
mov byte [esi + 0xbf], al
sub esp, 8
mov dword [esp], 0xb966541a
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x4d
xor eax, 0x32
mov byte [esi + 0xc0], al
sub esp, 8
mov dword [esp], 0xb966541a
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x33
mov byte [esi + 0xc1], al
sub esp, 8
mov dword [esp], 0xb966541a
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x20
xor eax, 0x34
mov byte [esi + 0xc2], al
sub esp, 8
mov dword [esp], 0xb966541a
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x35
mov byte [esi + 0xc3], al
sub esp, 8
mov dword [esp], 0xb966541a
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x41
xor eax, 0x36
mov byte [esi + 0xc4], al
sub esp, 8
mov dword [esp], 0xb966541a
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x37
mov byte [esi + 0xc5], al
sub esp, 8
mov dword [esp], 0xb966541a
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x6e
xor eax, 0x38
mov byte [esi + 0xc6], al
sub esp, 8
mov dword [esp], 0xb966541a
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x39
mov byte [esi + 0xc7], al
sub esp, 8
mov dword [esp], 0xb966541a
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x74
xor eax, 0x3a
mov byte [esi + 0xc8], al
sub esp, 8
mov dword [esp], 0xb966541a
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x3b
mov byte [esi + 0xc9], al
sub esp, 8
mov dword [esp], 0xb966541a
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x69
xor eax, 0x3c
mov byte [esi + 0xca], al
sub esp, 8
mov dword [esp], 0xb966541a
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x3d
mov byte [esi + 0xcb], al
sub esp, 8
mov dword [esp], 0xb966541a
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x56
xor eax, 0x3e
mov byte [esi + 0xcc], al
sub esp, 8
mov dword [esp], 0xb966541a
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x3f
mov byte [esi + 0xcd], al
sub esp, 8
mov dword [esp], 0xb966541a
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x69
xor eax, 0x40
mov byte [esi + 0xce], al
sub esp, 8
mov dword [esp], 0xb966541a
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x41
mov byte [esi + 0xcf], al
sub esp, 8
mov dword [esp], 0xb966541a
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x72
xor eax, 0x42
mov byte [esi + 0xd0], al
sub esp, 8
mov dword [esp], 0xb966541a
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x43
mov byte [esi + 0xd1], al
sub esp, 8
mov dword [esp], 0xb966541a
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x75
xor eax, 0x44
mov byte [esi + 0xd2], al
sub esp, 8
mov dword [esp], 0xb966541a
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x45
mov byte [esi + 0xd3], al
sub esp, 8
mov dword [esp], 0xb966541a
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x73
xor eax, 0x46
mov byte [esi + 0xd4], al
sub esp, 8
mov dword [esp], 0xb966541a
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x47
mov byte [esi + 0xd5], al
sub esp, 8
mov dword [esp], 0xb966541a
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x50
xor eax, 0x48
mov byte [esi + 0xd6], al
sub esp, 8
mov dword [esp], 0xb966541a
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x49
mov byte [esi + 0xd7], al
sub esp, 8
mov dword [esp], 0xb966541a
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x72
xor eax, 0x4a
mov byte [esi + 0xd8], al
sub esp, 8
mov dword [esp], 0xb966541a
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x4b
mov byte [esi + 0xd9], al
sub esp, 8
mov dword [esp], 0xb966541a
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x6f
xor eax, 0x4c
mov byte [esi + 0xda], al
sub esp, 8
mov dword [esp], 0xb966541a
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x4d
mov byte [esi + 0xdb], al
sub esp, 8
mov dword [esp], 0xb966541a
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x64
xor eax, 0x4e
mov byte [esi + 0xdc], al
sub esp, 8
mov dword [esp], 0xb966541a
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x4f
mov byte [esi + 0xdd], al
sub esp, 8
mov dword [esp], 0xb966541a
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x75
xor eax, 0x50
mov byte [esi + 0xde], al
sub esp, 8
mov dword [esp], 0xb966541a
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x51
mov byte [esi + 0xdf], al
sub esp, 8
mov dword [esp], 0xb966541a
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x63
xor eax, 0x52
mov byte [esi + 0xe0], al
sub esp, 8
mov dword [esp], 0xb966541a
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x53
mov byte [esi + 0xe1], al
sub esp, 8
mov dword [esp], 0xb966541a
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x74
xor eax, 0x54
mov byte [esi + 0xe2], al
sub esp, 8
mov dword [esp], 0xb966541a
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x55
mov byte [esi + 0xe3], al
sub esp, 8
mov dword [esp], 0xb966541a
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x56
mov byte [esi + 0xe4], al
sub esp, 8
mov dword [esp], 0xb966541a
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x57
mov byte [esi + 0xe5], al
mov eax, 0x3e
mov byte [esi + eax + 0xa8], 0
add eax, 1
cmp eax, 0x41
jne 0x42ff72
mov dword [esi + 0x4c], 0
mov eax, dword [esi + 0x4c]
cmp eax, 0x41
jae 0x42ffc4
mov eax, dword [esi + 0x4c]
mov ecx, dword [esi + 0x4c]
movzx ecx, byte [esi + ecx + 0xa8]
sub esp, 8
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.00431b50
add esp, 8
mov ecx, dword [esi + 0x4c]
mov byte [esi + ecx + 0xa8], al
mov eax, dword [esi + 0x4c]
inc eax
mov dword [esi + 0x4c], eax
jmp 0x42ff89
sub esp, 4
lea eax, [esi + 0xa8]
mov dword [esp], eax
mov eax, dword [sym.imp.OLEAUT32.dll_SysReAllocString]
call eax
mov edi, dword [esi + 0x70]
mov ecx, dword [edi]
mov ecx, dword [ecx + 0x50]
sub esp, 0x18
lea edx, [esi + 0x7c]
mov dword [esp + 0x14], edx
mov dword [esi + 0x118], eax
mov dword [esp + 8], eax
mov edx, dword [esi + 0xf0]
mov dword [esp + 4], edx
mov dword [esp], edi
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0x30
call ecx
not eax
shr eax, 0x1f
mov dword [esi + 0x2e8], eax
mov eax, dword [esi + 0x2ec]
mov ecx, dword [esi + 0x2e8]
mov eax, dword [eax + ecx*4]
mov dword [esi + 0x30], 0
jmp eax
mov al, byte [esi + 0x34]
mov byte [esi + 0x8c], al
sub esp, 8
mov dword [esp], 0x4d87bf72
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x52
xor eax, 0x72
mov byte [esi + 4], al
sub esp, 8
mov dword [esp], 0x4d87bf72
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x73
mov byte [esi + 5], al
sub esp, 8
mov dword [esp], 0x4d87bf72
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x4f
xor eax, 0x74
mov byte [esi + 6], al
sub esp, 8
mov dword [esp], 0x4d87bf72
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x75
mov byte [esi + 7], al
sub esp, 8
mov dword [esp], 0x4d87bf72
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x4f
xor eax, 0x76
mov byte [esi + 8], al
sub esp, 8
mov dword [esp], 0x4d87bf72
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x77
mov byte [esi + 9], al
sub esp, 8
mov dword [esp], 0x4d87bf72
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x54
xor eax, 0x78
mov byte [esi + 0xa], al
sub esp, 8
mov dword [esp], 0x4d87bf72
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x79
mov byte [esi + 0xb], al
sub esp, 8
mov dword [esp], 0x4d87bf72
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x5c
xor eax, 0x7a
mov byte [esi + 0xc], al
sub esp, 8
mov dword [esp], 0x4d87bf72
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x7b
mov byte [esi + 0xd], al
sub esp, 8
mov dword [esp], 0x4d87bf72
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x53
xor eax, 0x7c
mov byte [esi + 0xe], al
sub esp, 8
mov dword [esp], 0x4d87bf72
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x7d
mov byte [esi + 0xf], al
sub esp, 8
mov dword [esp], 0x4d87bf72
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x65
xor eax, 0x7e
mov byte [esi + 0x10], al
sub esp, 8
mov dword [esp], 0x4d87bf72
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x7f
mov byte [esi + 0x11], al
sub esp, 8
mov dword [esp], 0x4d87bf72
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x63
xor eax, 0x80
mov byte [esi + 0x12], al
sub esp, 8
mov dword [esp], 0x4d87bf72
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x81
mov byte [esi + 0x13], al
sub esp, 8
mov dword [esp], 0x4d87bf72
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x75
xor eax, 0x82
mov byte [esi + 0x14], al
sub esp, 8
mov dword [esp], 0x4d87bf72
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x83
mov byte [esi + 0x15], al
sub esp, 8
mov dword [esp], 0x4d87bf72
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x72
xor eax, 0x84
mov byte [esi + 0x16], al
sub esp, 8
mov dword [esp], 0x4d87bf72
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x85
mov byte [esi + 0x17], al
sub esp, 8
mov dword [esp], 0x4d87bf72
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x69
xor eax, 0x86
mov byte [esi + 0x18], al
sub esp, 8
mov dword [esp], 0x4d87bf72
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x87
mov byte [esi + 0x19], al
sub esp, 8
mov dword [esp], 0x4d87bf72
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x74
xor eax, 0x88
mov byte [esi + 0x1a], al
sub esp, 8
mov dword [esp], 0x4d87bf72
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x89
mov byte [esi + 0x1b], al
sub esp, 8
mov dword [esp], 0x4d87bf72
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x79
xor eax, 0x8a
mov byte [esi + 0x1c], al
sub esp, 8
mov dword [esp], 0x4d87bf72
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x8b
mov byte [esi + 0x1d], al
sub esp, 8
mov dword [esp], 0x4d87bf72
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x43
xor eax, 0x8c
mov byte [esi + 0x1e], al
sub esp, 8
mov dword [esp], 0x4d87bf72
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x8d
mov byte [esi + 0x1f], al
sub esp, 8
mov dword [esp], 0x4d87bf72
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x65
xor eax, 0x8e
mov byte [esi + 0x20], al
sub esp, 8
mov dword [esp], 0x4d87bf72
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x8f
mov byte [esi + 0x21], al
sub esp, 8
mov dword [esp], 0x4d87bf72
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x6e
xor eax, 0x90
mov byte [esi + 0x22], al
sub esp, 8
mov dword [esp], 0x4d87bf72
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x91
mov byte [esi + 0x23], al
sub esp, 8
mov dword [esp], 0x4d87bf72
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x74
xor eax, 0x92
mov byte [esi + 0x24], al
sub esp, 8
mov dword [esp], 0x4d87bf72
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x93
mov byte [esi + 0x25], al
sub esp, 8
mov dword [esp], 0x4d87bf72
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x65
xor eax, 0x94
mov byte [esi + 0x26], al
sub esp, 8
mov dword [esp], 0x4d87bf72
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x95
mov byte [esi + 0x27], al
sub esp, 8
mov dword [esp], 0x4d87bf72
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x72
xor eax, 0x96
mov byte [esi + 0x28], al
sub esp, 8
mov dword [esp], 0x4d87bf72
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x97
mov byte [esi + 0x29], al
sub esp, 8
mov dword [esp], 0x4d87bf72
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x32
xor eax, 0x98
mov byte [esi + 0x2a], al
sub esp, 8
mov dword [esp], 0x4d87bf72
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x99
mov byte [esi + 0x2b], al
sub esp, 8
mov dword [esp], 0x4d87bf72
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x9a
mov byte [esi + 0x2c], al
sub esp, 8
mov dword [esp], 0x4d87bf72
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x9b
mov byte [esi + 0x2d], al
mov eax, 0x2a
mov byte [esi + eax + 4], 0
add eax, 1
cmp eax, 0x2c
jne 0x4305f7
mov dword [esi + 0x40], 0
mov eax, dword [esi + 0x40]
cmp eax, 0x2c
jae 0x430640
mov eax, dword [esi + 0x40]
mov ecx, dword [esi + 0x40]
movzx ecx, byte [esi + ecx + 4]
sub esp, 8
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.00431b00
add esp, 8
mov ecx, dword [esi + 0x40]
mov byte [esi + ecx + 4], al
mov eax, dword [esi + 0x40]
inc eax
mov dword [esi + 0x40], eax
jmp 0x43060b
sub esp, 4
lea eax, [esi + 4]
mov dword [esp], eax
mov eax, dword [sym.imp.OLEAUT32.dll_SysReAllocString]
call eax
mov ecx, dword [esi + 0x3c]
mov edx, dword [ecx]
mov edi, dword [edx + 0xc]
sub esp, 0x24
lea edx, [esi + 0x70]
mov dword [esp + 0x20], edx
mov dword [esi + 0x11c], eax
mov dword [esp + 4], eax
mov dword [esp], ecx
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
call edi
xor ecx, ecx
test eax, eax
setns al
mov dword [esi + 0x310], 1
mov edx, dword [esi + 0x314]
mov edi, dword [esi + 0x310]
mov edx, dword [edx + edi*4]
jmp edx
mov ecx, dword [esi + 0x260]
mov edx, dword [esi + 0x264]
mov ecx, dword [edx + ecx*4]
jmp ecx
mov eax, dword [esi + 0x60]
mov ecx, dword [eax]
mov ecx, dword [ecx + 8]
sub esp, 4
mov dword [esp], eax
call ecx
mov eax, dword [esi + 0x208]
mov ecx, dword [esi + 0x20c]
mov eax, dword [ecx + eax*4]
xor edi, edi
jmp eax
mov al, byte [esi + 0x34]
mov byte [esi + 0x88], al
sub esp, 8
mov dword [esp], 0x4d87bf72
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x52
xor eax, 0x72
mov byte [esi + 4], al
sub esp, 8
mov dword [esp], 0x4d87bf72
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x73
mov byte [esi + 5], al
sub esp, 8
mov dword [esp], 0x4d87bf72
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x4f
xor eax, 0x74
mov byte [esi + 6], al
sub esp, 8
mov dword [esp], 0x4d87bf72
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x75
mov byte [esi + 7], al
sub esp, 8
mov dword [esp], 0x4d87bf72
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x4f
xor eax, 0x76
mov byte [esi + 8], al
sub esp, 8
mov dword [esp], 0x4d87bf72
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x77
mov byte [esi + 9], al
sub esp, 8
mov dword [esp], 0x4d87bf72
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x54
xor eax, 0x78
mov byte [esi + 0xa], al
sub esp, 8
mov dword [esp], 0x4d87bf72
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x79
mov byte [esi + 0xb], al
sub esp, 8
mov dword [esp], 0x4d87bf72
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x5c
xor eax, 0x7a
mov byte [esi + 0xc], al
sub esp, 8
mov dword [esp], 0x4d87bf72
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x7b
mov byte [esi + 0xd], al
sub esp, 8
mov dword [esp], 0x4d87bf72
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x53
xor eax, 0x7c
mov byte [esi + 0xe], al
sub esp, 8
mov dword [esp], 0x4d87bf72
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x7d
mov byte [esi + 0xf], al
sub esp, 8
mov dword [esp], 0x4d87bf72
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x65
xor eax, 0x7e
mov byte [esi + 0x10], al
sub esp, 8
mov dword [esp], 0x4d87bf72
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x7f
mov byte [esi + 0x11], al
sub esp, 8
mov dword [esp], 0x4d87bf72
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x63
xor eax, 0x80
mov byte [esi + 0x12], al
sub esp, 8
mov dword [esp], 0x4d87bf72
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x81
mov byte [esi + 0x13], al
sub esp, 8
mov dword [esp], 0x4d87bf72
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x75
xor eax, 0x82
mov byte [esi + 0x14], al
sub esp, 8
mov dword [esp], 0x4d87bf72
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x83
mov byte [esi + 0x15], al
sub esp, 8
mov dword [esp], 0x4d87bf72
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x72
xor eax, 0x84
mov byte [esi + 0x16], al
sub esp, 8
mov dword [esp], 0x4d87bf72
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x85
mov byte [esi + 0x17], al
sub esp, 8
mov dword [esp], 0x4d87bf72
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x69
xor eax, 0x86
mov byte [esi + 0x18], al
sub esp, 8
mov dword [esp], 0x4d87bf72
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x87
mov byte [esi + 0x19], al
sub esp, 8
mov dword [esp], 0x4d87bf72
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x74
xor eax, 0x88
mov byte [esi + 0x1a], al
sub esp, 8
mov dword [esp], 0x4d87bf72
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x89
mov byte [esi + 0x1b], al
sub esp, 8
mov dword [esp], 0x4d87bf72
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x79
xor eax, 0x8a
mov byte [esi + 0x1c], al
sub esp, 8
mov dword [esp], 0x4d87bf72
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x8b
mov byte [esi + 0x1d], al
sub esp, 8
mov dword [esp], 0x4d87bf72
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x43
xor eax, 0x8c
mov byte [esi + 0x1e], al
sub esp, 8
mov dword [esp], 0x4d87bf72
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x8d
mov byte [esi + 0x1f], al
sub esp, 8
mov dword [esp], 0x4d87bf72
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x65
xor eax, 0x8e
mov byte [esi + 0x20], al
sub esp, 8
mov dword [esp], 0x4d87bf72
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x8f
mov byte [esi + 0x21], al
sub esp, 8
mov dword [esp], 0x4d87bf72
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x6e
xor eax, 0x90
mov byte [esi + 0x22], al
sub esp, 8
mov dword [esp], 0x4d87bf72
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x91
mov byte [esi + 0x23], al
sub esp, 8
mov dword [esp], 0x4d87bf72
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x74
xor eax, 0x92
mov byte [esi + 0x24], al
sub esp, 8
mov dword [esp], 0x4d87bf72
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x93
mov byte [esi + 0x25], al
sub esp, 8
mov dword [esp], 0x4d87bf72
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x65
xor eax, 0x94
mov byte [esi + 0x26], al
sub esp, 8
mov dword [esp], 0x4d87bf72
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x95
mov byte [esi + 0x27], al
sub esp, 8
mov dword [esp], 0x4d87bf72
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x72
xor eax, 0x96
mov byte [esi + 0x28], al
sub esp, 8
mov dword [esp], 0x4d87bf72
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x97
mov byte [esi + 0x29], al
sub esp, 8
mov dword [esp], 0x4d87bf72
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x32
xor eax, 0x98
mov byte [esi + 0x2a], al
sub esp, 8
mov dword [esp], 0x4d87bf72
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x99
mov byte [esi + 0x2b], al
sub esp, 8
mov dword [esp], 0x4d87bf72
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x9a
mov byte [esi + 0x2c], al
sub esp, 8
mov dword [esp], 0x4d87bf72
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x9b
mov byte [esi + 0x2d], al
mov eax, 0x2a
mov byte [esi + eax + 4], 0
add eax, 1
cmp eax, 0x2c
jne 0x430cb9
mov dword [esi + 0x44], 0
mov eax, dword [esi + 0x44]
cmp eax, 0x2c
jae 0x430d02
mov eax, dword [esi + 0x44]
mov ecx, dword [esi + 0x44]
movzx ecx, byte [esi + ecx + 4]
sub esp, 8
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.00431b00
add esp, 8
mov ecx, dword [esi + 0x44]
mov byte [esi + ecx + 4], al
mov eax, dword [esi + 0x44]
inc eax
mov dword [esi + 0x44], eax
jmp 0x430ccd
sub esp, 4
lea eax, [esi + 4]
mov dword [esp], eax
mov eax, dword [sym.imp.OLEAUT32.dll_SysReAllocString]
call eax
mov edx, dword [esi + 0x3c]
mov ecx, dword [edx]
mov ecx, dword [ecx + 0xc]
sub esp, 0x24
lea edi, [esi + 0x70]
mov dword [esp + 0x20], edi
mov dword [esp + 4], eax
mov dword [esp], edx
mov dword [esp + 0x1c], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0xc], 0
mov dword [esp + 8], 0
call ecx
mov eax, dword [esi + 0x178]
mov ecx, dword [esi + 0x17c]
mov eax, dword [ecx + eax*4]
jmp eax
call fcn.0040aa20
mov dword [esi + 0x200], 0
mov eax, dword [esi + 0x204]
mov ecx, dword [esi + 0x200]
mov eax, dword [eax + ecx*4]
jmp eax
call fcn.0040aa20
mov dword [esi + 0x2d8], 0
mov eax, dword [esi + 0x2dc]
mov ecx, dword [esi + 0x2d8]
mov eax, dword [eax + ecx*4]
mov dword [esi], ebx
jmp eax
mov eax, dword [esi + 0x2a8]
mov ecx, dword [esi + 0x2ac]
mov eax, dword [ecx + eax*4]
xor edi, edi
jmp eax
adc eax, 0x83e280d3
in al, dx
add al, 0xc7
add al, 0x24
or al, 0
add byte [eax], al
call fcn.0040a300
add esp, 4
mov dword [eax], 0
mov byte [eax + 4], 0
mov dword [eax + 8], 0
sub esp, 4
mov dword [esp], ebx
mov eax, dword [sym.imp.OLEAUT32.dll_VariantClear]
call eax
mov eax, dword [esi + 0x158]
mov ecx, dword [esi + 0x15c]
mov eax, dword [ecx + eax*4]
jmp eax
call fcn.0040aa20
mov dword [esi + 0x2b8], 1
mov eax, dword [esi + 0x2bc]
mov ecx, dword [esi + 0x2b8]
mov eax, dword [eax + ecx*4]
jmp eax
call fcn.0040aa20
xor eax, eax
test edi, edi
sete cl
mov dword [esi + 0x298], 1
mov edx, dword [esi + 0x29c]
mov ebx, dword [esi + 0x298]
mov edx, dword [edx + ebx*4]
jmp edx
mov eax, dword [esi + 0x30]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
call fcn.0040aa20
mov dword [esi + 0x1c8], 1
mov eax, dword [esi + 0x1cc]
mov ecx, dword [esi + 0x1c8]
mov eax, dword [eax + ecx*4]
jmp eax
mov eax, dword [esi + 0x140]
mov ecx, dword [esi + 0x144]
mov eax, dword [ecx + eax*4]
jmp eax
call fcn.0040aa20
mov edi, dword [esi + 0x7c]
mov dword [esi + 0x1d8], 0
mov eax, dword [esi + 0x1dc]
mov ecx, dword [esi + 0x1d8]
mov eax, dword [eax + ecx*4]
jmp eax
sub esp, 4
mov eax, dword [esi]
mov dword [esp], eax
call dword [sym.imp.OLEAUT32.dll_VariantCopy]
sub esp, 4
mov dword [esp], edi
call dword [sym.imp.OLEAUT32.dll_VariantClear]
mov edi, dword [esi + 0x60]
mov eax, dword [esi + 0xf4]
mov al, byte [eax]
mov byte [esi + 0xa4], al
sub esp, 8
mov dword [esp], 0x44c4cf74
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x64
xor eax, 0x74
mov byte [ebx], al
sub esp, 8
mov dword [esp], 0x44c4cf74
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x75
mov byte [ebx + 1], al
sub esp, 8
mov dword [esp], 0x44c4cf74
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x69
xor eax, 0x76
mov byte [ebx + 2], al
sub esp, 8
mov dword [esp], 0x44c4cf74
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x77
mov byte [ebx + 3], al
sub esp, 8
mov dword [esp], 0x44c4cf74
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x73
xor eax, 0x78
mov byte [ebx + 4], al
sub esp, 8
mov dword [esp], 0x44c4cf74
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x79
mov byte [ebx + 5], al
sub esp, 8
mov dword [esp], 0x44c4cf74
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x70
xor eax, 0x7a
mov byte [ebx + 6], al
sub esp, 8
mov dword [esp], 0x44c4cf74
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x7b
mov byte [ebx + 7], al
sub esp, 8
mov dword [esp], 0x44c4cf74
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x6c
xor eax, 0x7c
mov byte [ebx + 8], al
sub esp, 8
mov dword [esp], 0x44c4cf74
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x7d
mov byte [ebx + 9], al
sub esp, 8
mov dword [esp], 0x44c4cf74
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x61
xor eax, 0x7e
mov byte [ebx + 0xa], al
sub esp, 8
mov dword [esp], 0x44c4cf74
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x7f
mov byte [ebx + 0xb], al
sub esp, 8
mov dword [esp], 0x44c4cf74
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x79
xor eax, 0x80
mov byte [ebx + 0xc], al
sub esp, 8
mov dword [esp], 0x44c4cf74
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x81
mov byte [ebx + 0xd], al
sub esp, 8
mov dword [esp], 0x44c4cf74
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x4e
xor eax, 0x82
mov byte [ebx + 0xe], al
sub esp, 8
mov dword [esp], 0x44c4cf74
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x83
mov byte [ebx + 0xf], al
sub esp, 8
mov dword [esp], 0x44c4cf74
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x61
xor eax, 0x84
mov byte [ebx + 0x10], al
sub esp, 8
mov dword [esp], 0x44c4cf74
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x85
mov byte [ebx + 0x11], al
sub esp, 8
mov dword [esp], 0x44c4cf74
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x6d
xor eax, 0x86
mov byte [ebx + 0x12], al
sub esp, 8
mov dword [esp], 0x44c4cf74
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x87
mov byte [ebx + 0x13], al
sub esp, 8
mov dword [esp], 0x44c4cf74
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x65
xor eax, 0x88
mov byte [ebx + 0x14], al
sub esp, 8
mov dword [esp], 0x44c4cf74
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x89
mov byte [ebx + 0x15], al
sub esp, 8
mov dword [esp], 0x44c4cf74
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x8a
mov byte [ebx + 0x16], al
sub esp, 8
mov dword [esp], 0x44c4cf74
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x8b
mov byte [ebx + 0x17], al
mov eax, 0x18
mov byte [ebx + eax], 0
add eax, 1
cmp eax, 0x1a
jne 0x431216
mov dword [esi + 0x58], 0
mov eax, dword [esi + 0x58]
cmp eax, 0x1a
jae 0x43125f
mov eax, dword [esi + 0x58]
mov ecx, dword [esi + 0x58]
movzx ecx, byte [ebx + ecx]
sub esp, 8
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.00431ba0
mov ebx, dword [esi + 0x74]
add esp, 8
mov ecx, dword [esi + 0x58]
mov byte [ebx + ecx], al
mov eax, dword [esi + 0x58]
inc eax
mov dword [esi + 0x58], eax
jmp 0x431229
mov eax, dword [edi]
mov eax, dword [eax + 0x10]
sub esp, 0x18
mov ecx, dword [esi + 0x38]
mov dword [esp + 0xc], ecx
mov dword [esp + 4], ebx
mov dword [esp], edi
mov edi, ecx
mov dword [esp + 0x14], 0
mov dword [esp + 0x10], 0
mov dword [esp + 8], 0
call eax
test eax, eax
setns al
mov cx, word [edi]
sub cx, 8
sete cl
and al, cl
mov dword [esi + 0x240], 1
mov ecx, dword [esi + 0x244]
mov edx, dword [esi + 0x240]
mov ecx, dword [ecx + edx*4]
jmp ecx
call fcn.0040aa20
mov dword [esi + 0x2a0], 1
mov eax, dword [esi + 0x2a4]
mov ecx, dword [esi + 0x2a0]
mov eax, dword [eax + ecx*4]
jmp eax
mov bl, 0x69
mov al, 2
dec ebx
pop edx
pop ss
cmp eax, 0x130868b
add byte [eax], al
mov ecx, dword [esi + 0x134]
mov eax, dword [ecx + eax*4]
jmp eax
call fcn.0040aa20
mov eax, dword [edi]
mov dword [esi + 0x1c0], 0
mov ecx, dword [esi + 0x1c4]
mov edx, dword [esi + 0x1c0]
mov ecx, dword [ecx + edx*4]
jmp ecx
mov eax, dword [edi + 8]
sub esp, 4
mov dword [esp], eax
call dword [sym.imp.OLEAUT32.dll_VariantInit]
mov ecx, edi
mov edi, eax
mov eax, dword [ecx + 8]
mov ecx, edi
shl ecx, 1
mov edx, eax
add edx, ecx
sub esp, 8
mov dword [esp], eax
mov dword [esp + 4], edx
call case.0x421d66.354
add esp, 8
mov ebx, eax
add ebx, 1
sub esp, 4
mov dword [esp], ebx
call fcn.0040a300
add esp, 4
mov ecx, dword [esi + 0x110]
mov dword [ecx], eax
mov ecx, dword [esi + 0x38]
mov edx, dword [ecx + 8]
shl edi, 1
mov ecx, edx
add ecx, edi
mov dword [esi + 0x104], ecx
mov edi, eax
add edi, ebx
mov ecx, edi
add ecx, 0xffffffff
cmp eax, ecx
jae 0x4313f7
mov dword [esi + 0x100], edi
mov edi, dword [esi + 0x104]
test edi, edi
sete cl
mov ebx, edx
mov edx, ebx
sub edx, edi
mov edi, dword [esi + 0x100]
setb dl
or cl, dl
test cl, 1
jne 0x4313ab
jmp 0x4313f7
mov cx, word [ebx]
cmp cx, 0
je 0x4313f7
movzx ecx, cx
add ebx, 2
mov dword [esi + 0x108], ebx
mov edx, edi
sub edx, eax
mov ebx, edx
and ebx, 1
xor ebx, 1
and edx, 0xfffffffe
sub edx, ebx
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov ebx, eax
call fcn.00431890
mov edx, dword [esi + 0x108]
add esp, 0xc
mov ecx, eax
mov eax, ebx
add eax, ecx
jmp 0x431379
mov byte [eax], 0
mov eax, dword [esi + 0x230]
mov ecx, dword [esi + 0x234]
mov eax, dword [ecx + eax*4]
mov ebx, dword [esi]
mov edi, dword [esi + 0x38]
jmp eax
mov al, cl
and eax, 1
mov dword [esi + 0x290], eax
mov eax, dword [esi + 0x294]
mov ecx, dword [esi + 0x290]
mov eax, dword [eax + ecx*4]
mov ebx, dword [esi]
jmp eax
call fcn.0040aa20
mov dword [esi + 0x6c], 0
mov eax, dword [esi + 0x7c]
mov ecx, dword [eax]
mov ecx, dword [ecx + 0x10]
sub esp, 0x14
lea edx, [esi + 0x6c]
mov dword [esp + 0x10], edx
lea edx, [esi + 0x60]
mov dword [esp + 0xc], edx
mov dword [esp], eax
mov dword [esp + 8], 1
mov dword [esp + 4], 0xffffffff
call ecx
test eax, eax
sets cl
sub eax, 1
sete al
mov edx, dword [esi + 0x6c]
test edx, edx
sete dl
or al, dl
or al, cl
mov dword [esi + 0x2d0], 0
mov ecx, dword [esi + 0x2d4]
mov edx, dword [esi + 0x2d0]
mov ecx, dword [ecx + edx*4]
jmp ecx
not eax
shr eax, 0x1f
mov dword [esi + 0x2f0], eax
mov eax, dword [esi + 0x2f4]
mov ecx, dword [esi + 0x2f0]
mov eax, dword [eax + ecx*4]
mov dword [esi + 0x30], 0
jmp eax
sub esp, 4
mov eax, dword [esi + 0x11c]
mov dword [esp], eax
mov eax, dword [sym.imp.OLEAUT32.dll_SysStringLen]
call eax
mov eax, dword [esi + 0x3c]
mov ecx, dword [eax]
mov ecx, dword [ecx + 8]
sub esp, 4
mov dword [esp], eax
call ecx
mov eax, dword [esi + 0x198]
mov ecx, dword [esi + 0x19c]
mov eax, dword [ecx + eax*4]
jmp eax
call fcn.0040aa20
mov ecx, dword [ebp - 0x234]
mov dword [ecx], 0
mov eax, dword [ebp - 0x244]
mov eax, dword [eax]
mov ecx, dword [ecx]
mov eax, dword [eax + ecx*4]
jmp eax
call fcn.0040aa20
sub esp, 4
mov dword [esp], edi
call fcn.0040a300
add esp, 4
mov esi, eax
mov eax, dword [ebp - 0x1ac]
mov ecx, dword [ebp - 0x50]
sub esp, 0x10
mov dword [esp + 8], eax
mov dword [esp + 4], esi
mov dword [esp], ecx
mov dword [esp + 0xc], 0
call fcn.0043ef20
add esp, 0x10
xor ecx, ecx
test eax, eax
setns al
mov ebx, dword [ebp - 0x28c]
mov dword [ebx], 1
mov edx, dword [ebp - 0x298]
mov edx, dword [edx]
mov ebx, dword [ebx]
mov edx, dword [edx + ebx*4]
jmp edx
call fcn.0040aa20
mov ecx, dword [ebp - 0x384]
mov dword [ecx], 0
mov eax, dword [ebp - 0x38c]
mov eax, dword [eax]
mov ecx, dword [ecx]
mov eax, dword [eax + ecx*4]
jmp eax
mov esi, 0x14
lea ebx, [0x4419e0]
add ebx, 8
jmp 0x432381
mov edx, ebx
mov edi, ecx
cmp esi, 0
je 0x4323b7
add esi, 0xffffffff
mov ecx, edi
add ecx, 1
mov bl, byte [edi]
mov byte [ebp - 0xd], bl
mov ebx, edx
add ebx, 1
mov al, byte [ebp - 0xd]
cmp al, byte [edx]
je 0x432381
movzx eax, byte [edi]
movzx ecx, byte [edx]
add eax, 0xed5a560c
sub eax, ecx
add eax, 0x12a5a9f4
jmp 0x4323bb
xor eax, eax
jmp 0x4323bb
xor ecx, ecx
test eax, eax
sete al
mov edx, dword [ebp - 0x2a0]
mov edx, dword [edx]
mov edi, dword [ebp - 0x2a8]
mov edi, dword [edi]
mov edx, dword [edi + edx*4]
mov esi, dword [ebp - 0x1b0]
jmp edx
mov al, byte [ebp - 0xf8]
mov byte [ebp - 0x14c], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x44
xor eax, 0x24
mov byte [ebp - 0xf0], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x25
mov byte [ebp - 0xef], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x6f
xor eax, 0x26
mov byte [ebp - 0xee], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x27
mov byte [ebp - 0xed], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x20
xor eax, 0x28
mov byte [ebp - 0xec], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x29
mov byte [ebp - 0xeb], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x79
xor eax, 0x2a
mov byte [ebp - 0xea], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x2b
mov byte [ebp - 0xe9], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x6f
xor eax, 0x2c
mov byte [ebp - 0xe8], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x2d
mov byte [ebp - 0xe7], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x75
xor eax, 0x2e
mov byte [ebp - 0xe6], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x2f
mov byte [ebp - 0xe5], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x20
xor eax, 0x30
mov byte [ebp - 0xe4], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x31
mov byte [ebp - 0xe3], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x77
xor eax, 0x32
mov byte [ebp - 0xe2], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x33
mov byte [ebp - 0xe1], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x61
xor eax, 0x34
mov byte [ebp - 0xe0], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x35
mov byte [ebp - 0xdf], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x6e
xor eax, 0x36
mov byte [ebp - 0xde], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x37
mov byte [ebp - 0xdd], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x74
xor eax, 0x38
mov byte [ebp - 0xdc], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x39
mov byte [ebp - 0xdb], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x20
xor eax, 0x3a
mov byte [ebp - 0xda], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x3b
mov byte [ebp - 0xd9], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x74
xor eax, 0x3c
mov byte [ebp - 0xd8], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x3d
mov byte [ebp - 0xd7], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x6f
xor eax, 0x3e
mov byte [ebp - 0xd6], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x3f
mov byte [ebp - 0xd5], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x20
xor eax, 0x40
mov byte [ebp - 0xd4], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x41
mov byte [ebp - 0xd3], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x72
xor eax, 0x42
mov byte [ebp - 0xd2], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x43
mov byte [ebp - 0xd1], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x75
xor eax, 0x44
mov byte [ebp - 0xd0], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x45
mov byte [ebp - 0xcf], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x6e
xor eax, 0x46
mov byte [ebp - 0xce], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x47
mov byte [ebp - 0xcd], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x20
xor eax, 0x48
mov byte [ebp - 0xcc], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x49
mov byte [ebp - 0xcb], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x61
xor eax, 0x4a
mov byte [ebp - 0xca], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x4b
mov byte [ebp - 0xc9], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x20
xor eax, 0x4c
mov byte [ebp - 0xc8], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x4d
mov byte [ebp - 0xc7], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x6d
xor eax, 0x4e
mov byte [ebp - 0xc6], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x4f
mov byte [ebp - 0xc5], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x61
xor eax, 0x50
mov byte [ebp - 0xc4], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x51
mov byte [ebp - 0xc3], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x6c
xor eax, 0x52
mov byte [ebp - 0xc2], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x53
mov byte [ebp - 0xc1], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x77
xor eax, 0x54
mov byte [ebp - 0xc0], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x55
mov byte [ebp - 0xbf], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x61
xor eax, 0x56
mov byte [ebp - 0xbe], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x57
mov byte [ebp - 0xbd], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x72
xor eax, 0x58
mov byte [ebp - 0xbc], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x59
mov byte [ebp - 0xbb], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x65
xor eax, 0x5a
mov byte [ebp - 0xba], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x5b
mov byte [ebp - 0xb9], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x3f
xor eax, 0x5c
mov byte [ebp - 0xb8], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x5d
mov byte [ebp - 0xb7], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0xa
xor eax, 0x5e
mov byte [ebp - 0xb6], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x5f
mov byte [ebp - 0xb5], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x28
xor eax, 0x60
mov byte [ebp - 0xb4], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x61
mov byte [ebp - 0xb3], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x43
xor eax, 0x62
mov byte [ebp - 0xb2], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x63
mov byte [ebp - 0xb1], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x72
xor eax, 0x64
mov byte [ebp - 0xb0], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x65
mov byte [ebp - 0xaf], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x79
xor eax, 0x66
mov byte [ebp - 0xae], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x67
mov byte [ebp - 0xad], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x70
xor eax, 0x68
mov byte [ebp - 0xac], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x69
mov byte [ebp - 0xab], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x74
xor eax, 0x6a
mov byte [ebp - 0xaa], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x6b
mov byte [ebp - 0xa9], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x20
xor eax, 0x6c
mov byte [ebp - 0xa8], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x6d
mov byte [ebp - 0xa7], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x62
xor eax, 0x6e
mov byte [ebp - 0xa6], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x6f
mov byte [ebp - 0xa5], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x75
xor eax, 0x70
mov byte [ebp - 0xa4], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x71
mov byte [ebp - 0xa3], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x69
xor eax, 0x72
mov byte [ebp - 0xa2], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x73
mov byte [ebp - 0xa1], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x6c
xor eax, 0x74
mov byte [ebp - 0xa0], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x75
mov byte [ebp - 0x9f], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x64
xor eax, 0x76
mov byte [ebp - 0x9e], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x77
mov byte [ebp - 0x9d], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x20
xor eax, 0x78
mov byte [ebp - 0x9c], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x79
mov byte [ebp - 0x9b], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x74
xor eax, 0x7a
mov byte [ebp - 0x9a], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x7b
mov byte [ebp - 0x99], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x6f
xor eax, 0x7c
mov byte [ebp - 0x98], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x7d
mov byte [ebp - 0x97], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x20
xor eax, 0x7e
mov byte [ebp - 0x96], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x7f
mov byte [ebp - 0x95], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x64
xor eax, 0x80
mov byte [ebp - 0x94], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x81
mov byte [ebp - 0x93], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x69
xor eax, 0x82
mov byte [ebp - 0x92], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x83
mov byte [ebp - 0x91], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x73
xor eax, 0x84
mov byte [ebp - 0x90], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x85
mov byte [ebp - 0x8f], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x61
xor eax, 0x86
mov byte [ebp - 0x8e], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x87
mov byte [ebp - 0x8d], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x62
xor eax, 0x88
mov byte [ebp - 0x8c], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x89
mov byte [ebp - 0x8b], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x6c
xor eax, 0x8a
mov byte [ebp - 0x8a], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x8b
mov byte [ebp - 0x89], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x65
xor eax, 0x8c
mov byte [ebp - 0x88], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x8d
mov byte [ebp - 0x87], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x20
xor eax, 0x8e
mov byte [ebp - 0x86], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x8f
mov byte [ebp - 0x85], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x74
xor eax, 0x90
mov byte [ebp - 0x84], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x91
mov byte [ebp - 0x83], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x68
xor eax, 0x92
mov byte [ebp - 0x82], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x93
mov byte [ebp - 0x81], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x69
xor eax, 0x94
mov byte [ebp - 0x80], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x95
mov byte [ebp - 0x7f], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x73
xor eax, 0x96
mov byte [ebp - 0x7e], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x97
mov byte [ebp - 0x7d], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x20
xor eax, 0x98
mov byte [ebp - 0x7c], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x99
mov byte [ebp - 0x7b], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x6d
xor eax, 0x9a
mov byte [ebp - 0x7a], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x9b
mov byte [ebp - 0x79], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x65
xor eax, 0x9c
mov byte [ebp - 0x78], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x9d
mov byte [ebp - 0x77], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x73
xor eax, 0x9e
mov byte [ebp - 0x76], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x9f
mov byte [ebp - 0x75], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x73
xor eax, 0xa0
mov byte [ebp - 0x74], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0xa1
mov byte [ebp - 0x73], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x61
xor eax, 0xa2
mov byte [ebp - 0x72], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0xa3
mov byte [ebp - 0x71], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x67
xor eax, 0xa4
mov byte [ebp - 0x70], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0xa5
mov byte [ebp - 0x6f], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x65
xor eax, 0xa6
mov byte [ebp - 0x6e], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0xa7
mov byte [ebp - 0x6d], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x29
xor eax, 0xa8
mov byte [ebp - 0x6c], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0xa9
mov byte [ebp - 0x6b], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0xaa
mov byte [ebp - 0x6a], al
sub esp, 8
mov dword [esp], 0xded11e24
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0xab
mov byte [ebp - 0x69], al
mov eax, 0x88
mov byte [ebp + eax - 0xf0], 0
add eax, 1
cmp eax, 0x89
jne 0x43375f
mov dword [ebp - 0x30], 0
mov eax, dword [ebp - 0x30]
cmp eax, 0x89
jae 0x4337b5
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x30]
movzx ecx, byte [ebp + ecx - 0xf0]
sub esp, 8
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.0043a620
add esp, 8
mov ecx, dword [ebp - 0x30]
mov byte [ebp + ecx - 0xf0], al
mov eax, dword [ebp - 0x30]
inc eax
mov dword [ebp - 0x30], eax
jmp 0x433778
lea edi, [ebp - 0x4d2]
lea eax, [ebp - 0xf0]
mov ecx, 0x22
xchg esi, eax
rep movsd dword es:[edi], dword [esi]
xchg esi, eax
lea eax, [ebp - 0x4d2]
add eax, 0x88
lea edx, [ebp - 0xf0]
add edx, 0x88
xor ecx, ecx
mov ebx, edx
mov edi, eax
xchg esi, ebx
rep movsw word es:[edi], word [esi]
xchg esi, ebx
xor ecx, ecx
cmp ecx, 0
je 0x43380c
add ecx, 0xffffffff
mov edi, edx
add edi, 1
mov dl, byte [edx]
mov ebx, eax
add ebx, 1
mov byte [eax], dl
mov eax, ebx
mov edx, edi
jmp 0x4337f0
mov word [ebp - 0x3a4], 0x86
mov word [ebp - 0x3a2], 0x88
lea eax, [ebp - 0x4d2]
mov dword [ebp - 0x3a0], eax
mov al, byte [ebp - 0xf4]
mov byte [ebp - 0x150], al
sub esp, 8
mov dword [esp], 0xd9fdb7a2
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x57
xor eax, 0xa2
mov byte [ebp - 0x4c], al
sub esp, 8
mov dword [esp], 0xd9fdb7a2
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0xa3
mov byte [ebp - 0x4b], al
sub esp, 8
mov dword [esp], 0xd9fdb7a2
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x61
xor eax, 0xa4
mov byte [ebp - 0x4a], al
sub esp, 8
mov dword [esp], 0xd9fdb7a2
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0xa5
mov byte [ebp - 0x49], al
sub esp, 8
mov dword [esp], 0xd9fdb7a2
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x72
xor eax, 0xa6
mov byte [ebp - 0x48], al
sub esp, 8
mov dword [esp], 0xd9fdb7a2
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0xa7
mov byte [ebp - 0x47], al
sub esp, 8
mov dword [esp], 0xd9fdb7a2
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x6e
xor eax, 0xa8
mov byte [ebp - 0x46], al
sub esp, 8
mov dword [esp], 0xd9fdb7a2
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0xa9
mov byte [ebp - 0x45], al
sub esp, 8
mov dword [esp], 0xd9fdb7a2
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x69
xor eax, 0xaa
mov byte [ebp - 0x44], al
sub esp, 8
mov dword [esp], 0xd9fdb7a2
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0xab
mov byte [ebp - 0x43], al
sub esp, 8
mov dword [esp], 0xd9fdb7a2
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x6e
xor eax, 0xac
mov byte [ebp - 0x42], al
sub esp, 8
mov dword [esp], 0xd9fdb7a2
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0xad
mov byte [ebp - 0x41], al
sub esp, 8
mov dword [esp], 0xd9fdb7a2
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x67
xor eax, 0xae
mov byte [ebp - 0x40], al
sub esp, 8
mov dword [esp], 0xd9fdb7a2
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0xaf
mov byte [ebp - 0x3f], al
sub esp, 8
mov dword [esp], 0xd9fdb7a2
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0xb0
mov byte [ebp - 0x3e], al
sub esp, 8
mov dword [esp], 0xd9fdb7a2
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0xb1
mov byte [ebp - 0x3d], al
mov dword [ebp - 0x34], 0
mov eax, dword [ebp - 0x34]
cmp eax, 0x10
jae 0x433aa7
mov eax, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x34]
movzx ecx, byte [ebp + ecx - 0x4c]
sub esp, 8
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.0043a640
add esp, 8
mov ecx, dword [ebp - 0x34]
mov byte [ebp + ecx - 0x4c], al
mov eax, dword [ebp - 0x34]
inc eax
mov dword [ebp - 0x34], eax
jmp 0x433a72
lea edi, [ebp - 0x3e8]
lea eax, [ebp - 0x4c]
mov ecx, 4
xchg esi, eax
rep movsd dword es:[edi], dword [esi]
xchg esi, eax
lea eax, [ebp - 0x3e8]
add eax, 0x10
lea edx, [ebp - 0x4c]
add edx, 0x10
mov edi, eax
xor ecx, ecx
mov ebx, edx
xchg esi, ebx
rep movsw word es:[edi], word [esi]
xchg esi, ebx
xor ecx, ecx
cmp ecx, 0
je 0x433af3
add ecx, 0xffffffff
mov edi, edx
add edi, 1
mov dl, byte [edx]
mov ebx, eax
add ebx, 1
mov byte [eax], dl
mov eax, ebx
mov edx, edi
jmp 0x433ad7
mov word [ebp - 0x39c], 0xe
mov word [ebp - 0x39a], 0x10
lea eax, [ebp - 0x3e8]
mov dword [ebp - 0x398], eax
lea eax, [ebp - 0x3a4]
mov dword [ebp - 0x3c8], eax
lea eax, [ebp - 0x39c]
mov dword [ebp - 0x3c4], eax
mov dword [ebp - 0x3c0], 0x34
mov al, byte [ebp - 0x11c]
mov byte [ebp - 0x160], al
sub esp, 8
mov dword [esp], 0x205af7fe
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0xff
mov ecx, eax
or ecx, 1
and eax, 1
xor ecx, 0xffffffff
or eax, ecx
mov byte [ebp - 0x124], al
sub esp, 8
mov dword [esp], 0x205af7fe
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0xff
xor eax, 0xffffffff
mov byte [ebp - 0x123], al
sub esp, 8
mov dword [esp], 0x205af7fe
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0xff
mov byte [ebp - 0x122], al
sub esp, 8
mov dword [esp], 0x205af7fe
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0xff
mov ecx, eax
or ecx, 0xfffffffe
and eax, 0xfffffffe
xor ecx, 0xffffffff
or eax, ecx
mov byte [ebp - 0x121], al
mov eax, 4
mov byte [ebp + eax - 0x124], 0
add eax, 1
cmp eax, 6
jne 0x433bf5
mov dword [ebp - 0x20], 0
mov eax, dword [ebp - 0x20]
cmp eax, 6
jae 0x433c47
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x20]
movzx ecx, byte [ebp + ecx - 0x124]
sub esp, 8
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.0043a5f0
add esp, 8
mov ecx, dword [ebp - 0x20]
mov byte [ebp + ecx - 0x124], al
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
jmp 0x433c0c
mov edi, dword [ebp - 0x124]
xor ebx, ebx
cmp ebx, dword [0x44996c]
jb 0x433c5c
jmp 0x433ce5
mov eax, dword [0x449970]
cmp dword [eax + ebx*8], 0x99d31639
sete cl
test cl, 1
jne 0x433c72
jmp 0x433cd6
mov eax, dword [eax + ebx*8 + 4]
cmp eax, edi
je 0x433cd6
mov byte [ebp - 0x10], cl
mov ecx, dword [0x449974]
xor edx, edx
lea edx, [ebp - 0x394]
sub esp, 0x24
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], 6
mov dword [esp + 0xc], 0x50000018
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], 3
lea eax, [ebp - 0x3c8]
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], 0
mov dword [esp + 0x20], edx
call fcn.0043c800
mov cl, byte [ebp - 0x10]
add esp, 0x24
test cl, 1
je 0x433cdd
jmp 0x433ce5
add ebx, 1
jmp 0x433c4f
mov eax, dword [ebp - 0x394]
xor ecx, ecx
sub eax, 8
setne cl
mov edx, dword [ebp - 0x308]
mov dword [edx], ecx
mov eax, dword [ebp - 0x320]
mov eax, dword [eax]
mov ecx, dword [edx]
mov eax, dword [eax + ecx*4]
mov cl, 1
mov dword [ebp - 0x3c], ecx
mov edi, dword [ebp - 0x328]
mov ebx, dword [ebp - 0x31c]
jmp eax
call fcn.0040aa20
mov ecx, dword [ebp - 0x2ec]
mov dword [ecx], 0
mov eax, dword [ebp - 0x304]
mov eax, dword [eax]
mov ecx, dword [ecx]
mov eax, dword [eax + ecx*4]
mov edi, dword [ebp - 0x324]
jmp eax
test dword [0x37455294], ebp
mov ecx, 0x3c858b66
std
invalid
mov al, byte [ebp - 0x100]
mov byte [ebp - 0x114], al
sub esp, 8
mov dword [esp], 0xb22dde4e
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x54
xor eax, 0x4e
mov byte [ebp - 0x1a4], al
sub esp, 8
mov dword [esp], 0xb22dde4e
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x4f
mov byte [ebp - 0x1a3], al
sub esp, 8
mov dword [esp], 0xb22dde4e
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x68
xor eax, 0x50
mov byte [ebp - 0x1a2], al
sub esp, 8
mov dword [esp], 0xb22dde4e
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x51
mov byte [ebp - 0x1a1], al
sub esp, 8
mov dword [esp], 0xb22dde4e
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x69
xor eax, 0x52
mov byte [ebp - 0x1a0], al
sub esp, 8
mov dword [esp], 0xb22dde4e
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x53
mov byte [ebp - 0x19f], al
sub esp, 8
mov dword [esp], 0xb22dde4e
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x73
xor eax, 0x54
mov byte [ebp - 0x19e], al
sub esp, 8
mov dword [esp], 0xb22dde4e
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x55
mov byte [ebp - 0x19d], al
sub esp, 8
mov dword [esp], 0xb22dde4e
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x20
xor eax, 0x56
mov byte [ebp - 0x19c], al
sub esp, 8
mov dword [esp], 0xb22dde4e
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x57
mov byte [ebp - 0x19b], al
sub esp, 8
mov dword [esp], 0xb22dde4e
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x63
xor eax, 0x58
mov byte [ebp - 0x19a], al
sub esp, 8
mov dword [esp], 0xb22dde4e
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x59
mov byte [ebp - 0x199], al
sub esp, 8
mov dword [esp], 0xb22dde4e
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x6f
xor eax, 0x5a
mov byte [ebp - 0x198], al
sub esp, 8
mov dword [esp], 0xb22dde4e
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x5b
mov byte [ebp - 0x197], al
sub esp, 8
mov dword [esp], 0xb22dde4e
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x75
xor eax, 0x5c
mov byte [ebp - 0x196], al
sub esp, 8
mov dword [esp], 0xb22dde4e
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x5d
mov byte [ebp - 0x195], al
sub esp, 8
mov dword [esp], 0xb22dde4e
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x6e
xor eax, 0x5e
mov byte [ebp - 0x194], al
sub esp, 8
mov dword [esp], 0xb22dde4e
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x5f
mov byte [ebp - 0x193], al
sub esp, 8
mov dword [esp], 0xb22dde4e
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x74
xor eax, 0x60
mov byte [ebp - 0x192], al
sub esp, 8
mov dword [esp], 0xb22dde4e
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x61
mov byte [ebp - 0x191], al
sub esp, 8
mov dword [esp], 0xb22dde4e
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x72
xor eax, 0x62
mov byte [ebp - 0x190], al
sub esp, 8
mov dword [esp], 0xb22dde4e
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x63
mov byte [ebp - 0x18f], al
sub esp, 8
mov dword [esp], 0xb22dde4e
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x79
xor eax, 0x64
mov byte [ebp - 0x18e], al
sub esp, 8
mov dword [esp], 0xb22dde4e
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x65
mov byte [ebp - 0x18d], al
sub esp, 8
mov dword [esp], 0xb22dde4e
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x20
xor eax, 0x66
mov byte [ebp - 0x18c], al
sub esp, 8
mov dword [esp], 0xb22dde4e
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x67
mov byte [ebp - 0x18b], al
sub esp, 8
mov dword [esp], 0xb22dde4e
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x69
xor eax, 0x68
mov byte [ebp - 0x18a], al
sub esp, 8
mov dword [esp], 0xb22dde4e
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x69
mov byte [ebp - 0x189], al
sub esp, 8
mov dword [esp], 0xb22dde4e
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x73
xor eax, 0x6a
mov byte [ebp - 0x188], al
sub esp, 8
mov dword [esp], 0xb22dde4e
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x6b
mov byte [ebp - 0x187], al
sub esp, 8
mov dword [esp], 0xb22dde4e
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x20
xor eax, 0x6c
mov byte [ebp - 0x186], al
sub esp, 8
mov dword [esp], 0xb22dde4e
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x6d
mov byte [ebp - 0x185], al
sub esp, 8
mov dword [esp], 0xb22dde4e
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x6e
xor eax, 0x6e
mov byte [ebp - 0x184], al
sub esp, 8
mov dword [esp], 0xb22dde4e
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x6f
mov byte [ebp - 0x183], al
sub esp, 8
mov dword [esp], 0xb22dde4e
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x6f
xor eax, 0x70
mov byte [ebp - 0x182], al
sub esp, 8
mov dword [esp], 0xb22dde4e
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x71
mov byte [ebp - 0x181], al
sub esp, 8
mov dword [esp], 0xb22dde4e
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x74
xor eax, 0x72
mov byte [ebp - 0x180], al
sub esp, 8
mov dword [esp], 0xb22dde4e
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x73
mov byte [ebp - 0x17f], al
sub esp, 8
mov dword [esp], 0xb22dde4e
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x20
xor eax, 0x74
mov byte [ebp - 0x17e], al
sub esp, 8
mov dword [esp], 0xb22dde4e
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x75
mov byte [ebp - 0x17d], al
sub esp, 8
mov dword [esp], 0xb22dde4e
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x73
xor eax, 0x76
mov byte [ebp - 0x17c], al
sub esp, 8
mov dword [esp], 0xb22dde4e
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x77
mov byte [ebp - 0x17b], al
sub esp, 8
mov dword [esp], 0xb22dde4e
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x75
xor eax, 0x78
mov byte [ebp - 0x17a], al
sub esp, 8
mov dword [esp], 0xb22dde4e
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x79
mov byte [ebp - 0x179], al
sub esp, 8
mov dword [esp], 0xb22dde4e
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x70
xor eax, 0x7a
mov byte [ebp - 0x178], al
sub esp, 8
mov dword [esp], 0xb22dde4e
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x7b
mov byte [ebp - 0x177], al
sub esp, 8
mov dword [esp], 0xb22dde4e
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x70
xor eax, 0x7c
mov byte [ebp - 0x176], al
sub esp, 8
mov dword [esp], 0xb22dde4e
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x7d
mov byte [ebp - 0x175], al
sub esp, 8
mov dword [esp], 0xb22dde4e
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x6f
xor eax, 0x7e
mov byte [ebp - 0x174], al
sub esp, 8
mov dword [esp], 0xb22dde4e
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x7f
mov byte [ebp - 0x173], al
sub esp, 8
mov dword [esp], 0xb22dde4e
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x72
xor eax, 0x80
mov byte [ebp - 0x172], al
sub esp, 8
mov dword [esp], 0xb22dde4e
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x81
mov byte [ebp - 0x171], al
sub esp, 8
mov dword [esp], 0xb22dde4e
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x74
xor eax, 0x82
mov byte [ebp - 0x170], al
sub esp, 8
mov dword [esp], 0xb22dde4e
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x83
mov byte [ebp - 0x16f], al
sub esp, 8
mov dword [esp], 0xb22dde4e
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x65
xor eax, 0x84
mov byte [ebp - 0x16e], al
sub esp, 8
mov dword [esp], 0xb22dde4e
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x85
mov byte [ebp - 0x16d], al
sub esp, 8
mov dword [esp], 0xb22dde4e
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x64
xor eax, 0x86
mov byte [ebp - 0x16c], al
sub esp, 8
mov dword [esp], 0xb22dde4e
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x87
mov byte [ebp - 0x16b], al
sub esp, 8
mov dword [esp], 0xb22dde4e
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x21
xor eax, 0x88
mov byte [ebp - 0x16a], al
sub esp, 8
mov dword [esp], 0xb22dde4e
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x89
mov byte [ebp - 0x169], al
sub esp, 8
mov dword [esp], 0xb22dde4e
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x8a
mov byte [ebp - 0x168], al
sub esp, 8
mov dword [esp], 0xb22dde4e
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x8b
mov byte [ebp - 0x167], al
mov eax, 0x3e
mov byte [ebp + eax - 0x1a4], 0
add eax, 1
cmp eax, 0x41
jne 0x43465b
mov dword [ebp - 0x18], 0
mov eax, dword [ebp - 0x18]
cmp eax, 0x41
jae 0x4346ad
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x18]
movzx ecx, byte [ebp + ecx - 0x1a4]
sub esp, 8
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.0043a5c0
add esp, 8
mov ecx, dword [ebp - 0x18]
mov byte [ebp + ecx - 0x1a4], al
mov eax, dword [ebp - 0x18]
inc eax
mov dword [ebp - 0x18], eax
jmp 0x434672
lea edi, [ebp - 0x44a]
lea eax, [ebp - 0x1a4]
mov ecx, 0xf
xchg esi, eax
rep movsd dword es:[edi], dword [esi]
xchg esi, eax
lea eax, [ebp - 0x44a]
add eax, 0x3c
lea edx, [ebp - 0x1a4]
add edx, 0x3c
mov esi, edx
mov edi, eax
mov ecx, 1
xchg esi, esi
rep movsw word es:[edi], word [esi]
xchg esi, esi
add eax, 2
add edx, 2
xor ecx, ecx
cmp ecx, 0
je 0x434708
add ecx, 0xffffffff
mov esi, edx
add esi, 1
mov dl, byte [edx]
mov edi, eax
add edi, 1
mov byte [eax], dl
mov eax, edi
mov edx, esi
jmp 0x4346ec
mov word [ebp - 0x3b4], 0x3c
mov word [ebp - 0x3b2], 0x3e
lea eax, [ebp - 0x44a]
mov dword [ebp - 0x3b0], eax
mov al, byte [ebp - 0xfc]
mov byte [ebp - 0x118], al
sub esp, 8
mov dword [esp], 0xab549cea
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
mov ecx, eax
and ecx, 0x57
shl ecx, 1
xor eax, 0x57
add eax, ecx
mov ecx, eax
xor ecx, 0xffffffff
and ecx, 0xea
and eax, 0x15
or ecx, eax
mov byte [ebp - 0x64], cl
sub esp, 8
mov dword [esp], 0xab549cea
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
mov ecx, eax
xor ecx, 0xffffffff
and ecx, 0xeb
and eax, 0x14
or ecx, eax
mov byte [ebp - 0x63], cl
sub esp, 8
mov dword [esp], 0xab549cea
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
mov ecx, eax
and ecx, 0x61
shl ecx, 1
xor eax, 0x61
add eax, ecx
mov ecx, eax
xor ecx, 0xffffffff
and ecx, 0xec
and eax, 0x13
or ecx, eax
mov byte [ebp - 0x62], cl
sub esp, 8
mov dword [esp], 0xab549cea
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
mov ecx, eax
xor ecx, 0xffffffff
and ecx, 0xed
and eax, 0x12
or ecx, eax
mov byte [ebp - 0x61], cl
sub esp, 8
mov dword [esp], 0xab549cea
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
mov ecx, eax
and ecx, 0x72
shl ecx, 1
xor eax, 0x72
add eax, ecx
mov ecx, eax
xor ecx, 0xffffffff
and ecx, 0xee
and eax, 0x11
or ecx, eax
mov byte [ebp - 0x60], cl
sub esp, 8
mov dword [esp], 0xab549cea
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
mov ecx, eax
xor ecx, 0xffffffff
and ecx, 0xef
and eax, 0x10
or ecx, eax
mov byte [ebp - 0x5f], cl
sub esp, 8
mov dword [esp], 0xab549cea
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
mov ecx, eax
and ecx, 0x6e
shl ecx, 1
xor eax, 0x6e
add eax, ecx
mov ecx, eax
xor ecx, 0xffffffff
and ecx, 0xf0
and eax, 0xf
or ecx, eax
mov byte [ebp - 0x5e], cl
sub esp, 8
mov dword [esp], 0xab549cea
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
mov ecx, eax
xor ecx, 0xffffffff
and ecx, 0xf1
and eax, 0xe
or ecx, eax
mov byte [ebp - 0x5d], cl
sub esp, 8
mov dword [esp], 0xab549cea
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
mov ecx, eax
and ecx, 0x69
shl ecx, 1
xor eax, 0x69
add eax, ecx
mov ecx, eax
xor ecx, 0xffffffff
and ecx, 0xf2
and eax, 0xd
or ecx, eax
mov byte [ebp - 0x5c], cl
sub esp, 8
mov dword [esp], 0xab549cea
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
mov ecx, eax
xor ecx, 0xffffffff
and ecx, 0xf3
and eax, 0xc
or ecx, eax
mov byte [ebp - 0x5b], cl
sub esp, 8
mov dword [esp], 0xab549cea
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
mov ecx, eax
and ecx, 0x6e
shl ecx, 1
xor eax, 0x6e
add eax, ecx
mov ecx, eax
xor ecx, 0xffffffff
and ecx, 0xf4
and eax, 0xb
or ecx, eax
mov byte [ebp - 0x5a], cl
sub esp, 8
mov dword [esp], 0xab549cea
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
mov ecx, eax
xor ecx, 0xffffffff
and ecx, 0xf5
and eax, 0xa
or ecx, eax
mov byte [ebp - 0x59], cl
sub esp, 8
mov dword [esp], 0xab549cea
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
mov ecx, eax
and ecx, 0x67
shl ecx, 1
xor eax, 0x67
add eax, ecx
mov ecx, eax
xor ecx, 0xffffffff
and ecx, 0xf6
and eax, 9
or ecx, eax
mov byte [ebp - 0x58], cl
sub esp, 8
mov dword [esp], 0xab549cea
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
mov ecx, eax
xor ecx, 0xffffffff
and ecx, 0xf7
and eax, 8
or ecx, eax
mov byte [ebp - 0x57], cl
sub esp, 8
mov dword [esp], 0xab549cea
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
mov ecx, eax
xor ecx, 0xffffffff
and ecx, 0xf8
and eax, 7
or ecx, eax
mov byte [ebp - 0x56], cl
sub esp, 8
mov dword [esp], 0xab549cea
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
mov ecx, eax
xor ecx, 0xffffffff
and ecx, 0xf9
and eax, 6
or ecx, eax
mov byte [ebp - 0x55], cl
mov eax, 0x10
mov byte [ebp + eax - 0x64], 0
add eax, 1
cmp eax, 0x11
jne 0x434a5b
mov dword [ebp - 0x1c], 0
mov eax, dword [ebp - 0x1c]
cmp eax, 0x11
jae 0x434aa4
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x1c]
movzx ecx, byte [ebp + ecx - 0x64]
sub esp, 8
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.0041a2a0
add esp, 8
mov ecx, dword [ebp - 0x1c]
mov byte [ebp + ecx - 0x64], al
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
jmp 0x434a6f
lea edi, [ebp - 0x3f8]
lea eax, [ebp - 0x64]
mov ecx, 4
xchg esi, eax
rep movsd dword es:[edi], dword [esi]
xchg esi, eax
lea eax, [ebp - 0x3f8]
add eax, 0x10
lea edx, [ebp - 0x64]
add edx, 0x10
mov esi, edx
mov edi, eax
xor ecx, ecx
xchg esi, esi
rep movsw word es:[edi], word [esi]
xchg esi, esi
xor ecx, ecx
cmp ecx, 0
je 0x434af0
add ecx, 0xffffffff
mov esi, edx
add esi, 1
mov dl, byte [edx]
mov edi, eax
add edi, 1
mov byte [eax], dl
mov eax, edi
mov edx, esi
jmp 0x434ad4
mov word [ebp - 0x3ac], 0xe
mov word [ebp - 0x3aa], 0x10
lea eax, [ebp - 0x3f8]
mov dword [ebp - 0x3a8], eax
lea eax, [ebp - 0x3b4]
mov dword [ebp - 0x3d4], eax
lea eax, [ebp - 0x3ac]
mov dword [ebp - 0x3d0], eax
mov dword [ebp - 0x3cc], 0x30
mov al, byte [ebp - 0x128]
mov byte [ebp - 0x15c], al
sub esp, 8
mov dword [esp], 0x205af7fe
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0xff
mov ecx, eax
or ecx, 1
and eax, 1
xor ecx, 0xffffffff
or eax, ecx
mov byte [ebp - 0x130], al
sub esp, 8
mov dword [esp], 0x205af7fe
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0xff
xor eax, 0xffffffff
mov byte [ebp - 0x12f], al
sub esp, 8
mov dword [esp], 0x205af7fe
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0xff
mov byte [ebp - 0x12e], al
sub esp, 8
mov dword [esp], 0x205af7fe
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0xff
mov ecx, eax
or ecx, 0xfffffffe
and eax, 0xfffffffe
xor ecx, 0xffffffff
or eax, ecx
mov byte [ebp - 0x12d], al
mov eax, 4
mov byte [ebp + eax - 0x130], 0
add eax, 1
cmp eax, 6
jne 0x434bf2
mov dword [ebp - 0x24], 0
mov eax, dword [ebp - 0x24]
cmp eax, 6
jae 0x434c44
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x24]
movzx ecx, byte [ebp + ecx - 0x130]
sub esp, 8
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.0043a5f0
add esp, 8
mov ecx, dword [ebp - 0x24]
mov byte [ebp + ecx - 0x130], al
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
jmp 0x434c09
mov esi, dword [ebp - 0x130]
xor edi, edi
cmp edi, dword [0x44996c]
jb 0x434c59
jmp 0x434cdc
mov eax, dword [0x449970]
cmp dword [eax + edi*8], 0x99d31639
sete bl
test bl, 1
jne 0x434c6f
jmp 0x434ccd
mov eax, dword [eax + edi*8 + 4]
cmp eax, esi
je 0x434ccd
mov ecx, dword [0x449974]
xor edx, edx
lea edx, [ebp - 0x3d8]
sub esp, 0x24
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], 6
mov dword [esp + 0xc], 0x50000018
mov dword [esp + 0x10], 3
mov dword [esp + 0x14], 3
lea eax, [ebp - 0x3d4]
mov dword [esp + 0x18], eax
mov dword [esp + 0x1c], 0
mov dword [esp + 0x20], edx
call fcn.0043c800
add esp, 0x24
add byte [ebx - 0x3c09db3c], al
add dword [edx + eax - 0x15], esi
or byte [ebx + 0x70e901c7], al
invalid
test bl, 1
je 0x434cd4
jmp 0x434cdc
add edi, 1
jmp 0x434c4c
mov eax, dword [ebp - 0x2b4]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x2b8]
mov ecx, dword [ecx]
mov eax, dword [ecx + eax*4]
xor ebx, ebx
mov esi, dword [ebp - 0x38]
jmp eax
mov ecx, dword [ebp - 0x2e8]
mov dword [ecx], 0
mov eax, dword [ebp - 0x300]
mov eax, dword [eax]
mov ecx, dword [ecx]
mov eax, dword [eax + ecx*4]
jmp eax
mov al, cl
and eax, 1
mov ecx, dword [ebp - 0x240]
mov dword [ecx], eax
mov eax, dword [ebp - 0x25c]
mov eax, dword [eax]
mov ecx, dword [ecx]
mov eax, dword [eax + ecx*4]
jmp eax
mov dword [0x7822eb4], eax
loop 0x434cc9
ror dword [ebx - 0x1cf7b], 0xff
mov eax, dword [eax]
mov ecx, dword [ebp - 0x1d4]
mov ecx, dword [ecx]
mov eax, dword [ecx + eax*4]
jmp eax
mov eax, dword [ebp - 0x230]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x248]
mov ecx, dword [ecx]
mov eax, dword [ecx + eax*4]
mov bl, 1
mov esi, dword [ebp - 0x38]
jmp eax
sub esp, 4
mov dword [esp], 0
call fcn.0043df90
add esp, 4
xor edx, edx
mov edi, eax
test eax, eax
sete dl
mov ecx, dword [ebp - 0x218]
mov dword [ecx], edx
mov eax, dword [ebp - 0x224]
mov eax, dword [eax]
mov ecx, dword [ecx]
mov eax, dword [eax + ecx*4]
jmp eax
call fcn.0040aa20
mov ecx, dword [ebp - 0x1e4]
mov dword [ecx], 0
mov eax, dword [ebp - 0x1f0]
mov eax, dword [eax]
mov ecx, dword [ecx]
mov eax, dword [eax + ecx*4]
mov esi, dword [ebp - 0x1f8]
jmp eax
mov dword [ebp - 0x3c], ebx
call fcn.0040aa20
mov ecx, dword [ebp - 0x334]
mov dword [ecx], 1
mov eax, dword [ebp - 0x338]
mov eax, dword [eax]
mov ecx, dword [ecx]
mov eax, dword [eax + ecx*4]
jmp eax
call fcn.0040aa20
xor eax, eax
test esi, esi
sete cl
mov edi, dword [ebp - 0x340]
mov dword [edi], 0
mov edx, dword [ebp - 0x348]
mov edx, dword [edx]
mov edi, dword [edi]
mov edx, dword [edx + edi*4]
jmp edx
call fcn.0040aa20
mov ecx, dword [ebp - 0x36c]
mov dword [ecx], 0
mov eax, dword [edi]
mov ecx, dword [ecx]
mov eax, dword [eax + ecx*4]
jmp eax
mov eax, dword [ebp - 0x34c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x360]
mov ecx, dword [ecx]
mov eax, dword [ecx + eax*4]
jmp eax
add edx, esi
salc
in al, dx
mov eax, dword [esi]
mov ecx, dword [ebp - 0x1b4]
mov ecx, dword [ecx]
mov eax, dword [ecx + eax*4]
jmp eax
call fcn.0040aa20
mov eax, dword [sym.imp.KERNEL32.dll_GetCurrentThreadId]
call eax
mov eax, dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
call eax
sub esp, 0x14
lea eax, [ebp - 0x50]
mov dword [esp + 4], eax
mov dword [esp], edi
mov dword [esp + 0x10], 0x60
mov dword [esp + 0xc], 3
mov dword [esp + 8], 0x120089
call fcn.0043eaa0
add esp, 0x14
xor ecx, ecx
test eax, eax
setns al
mov esi, dword [ebp - 0x260]
mov dword [esi], 0
mov edx, dword [ebp - 0x278]
mov edx, dword [edx]
mov esi, dword [esi]
mov edx, dword [edx + esi*4]
jmp edx
call fcn.0040aa20
mov eax, dword [ebp - 0x50]
sub esp, 0xc
lea ecx, [ebp - 0x1ac]
mov dword [esp + 4], ecx
mov dword [esp], eax
mov dword [esp + 8], 0
call fcn.0043ee20
add esp, 0xc
xor ecx, ecx
test eax, eax
setns al
mov esi, dword [ebp - 0x268]
mov dword [esi], 0
mov edx, dword [ebp - 0x27c]
mov edx, dword [edx]
mov esi, dword [esi]
mov edx, dword [edx + esi*4]
jmp edx
mov eax, dword [ebp - 0x204]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x214]
mov ecx, dword [ecx]
mov eax, dword [ecx + eax*4]
mov bl, 1
mov esi, dword [ebp - 0x38]
jmp eax
mov al, cl
and eax, 1
mov ecx, dword [ebp - 0x22c]
mov dword [ecx], eax
mov eax, dword [ebp - 0x23c]
mov eax, dword [eax]
mov ecx, dword [ecx]
mov eax, dword [eax + ecx*4]
jmp eax
call fcn.0040aa20
mov dword [ebx], 1
mov eax, dword [edi]
mov ecx, dword [ebx]
mov eax, dword [eax + ecx*4]
jmp eax
call fcn.0040aa20
mov ecx, dword [ebp - 0x1fc]
mov dword [ecx], 1
mov eax, dword [ebp - 0x200]
mov eax, dword [eax]
mov ecx, dword [ecx]
mov eax, dword [eax + ecx*4]
mov ebx, dword [ebp - 0x1c0]
jmp eax
frstor dword [0xd7c598fb]
int1
inc ebp
mov eax, dword [ebx]
mov ecx, dword [ebp - 0x1c4]
mov ecx, dword [ecx]
mov eax, dword [ecx + eax*4]
jmp eax
mov cl, al
and ecx, 1
mov edx, dword [ebp - 0x288]
mov dword [edx], ecx
mov eax, dword [ebp - 0x294]
mov eax, dword [eax]
mov ecx, dword [edx]
mov eax, dword [eax + ecx*4]
mov bl, 1
jmp eax
mov eax, dword [ebp - 0x378]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x37c]
mov ecx, dword [ecx]
mov eax, dword [ecx + eax*4]
jmp eax
mov eax, dword [ebp - 0x2cc]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x2d0]
mov ecx, dword [ecx]
mov eax, dword [ecx + eax*4]
jmp eax
comiss xmm2, dword [esi + 0x48858bb8]
invalid
lea eax, [esi + edi*8 - 1]
dec dword [ebx - 0x7efb74f7]
jmp eax
mov edi, dword [ebp - 0x1ac]
mov eax, dword [0x4419e4]
add eax, 0x30
xor ecx, ecx
mov edx, edi
sub edx, eax
setb cl
mov edx, dword [ebp - 0x274]
mov dword [edx], ecx
mov eax, dword [ebp - 0x280]
mov eax, dword [eax]
mov ecx, dword [edx]
mov eax, dword [eax + ecx*4]
jmp eax
mov eax, dword [0x4419e4]
mov dword [ebp - 0x1b0], esi
lea ecx, [esi + eax + 8]
mov eax, dword [ebp - 0x284]
mov eax, dword [eax]
mov edx, dword [ebp - 0x290]
mov edx, dword [edx]
mov eax, dword [edx + eax*4]
jmp eax
mov eax, dword [ebp - 0x20c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x228]
mov ecx, dword [ecx]
mov eax, dword [ecx + eax*4]
mov bl, 1
mov esi, dword [ebp - 0x38]
jmp eax
inc esp
dec ebx
jl 0x43506b
jo 0x434fd0
push ss
retf
call fcn.0040aa20
mov ecx, dword [ebp - 0x2f8]
mov dword [ecx], 0
mov eax, dword [ebp - 0x314]
mov eax, dword [eax]
mov ecx, dword [ecx]
mov eax, dword [eax + ecx*4]
jmp eax
lea ecx, [eax]
std
invalid
sub esp, 4
mov dword [esp], esi
call fcn.0040a310
add esp, 4
mov eax, dword [ebp - 0x2e4]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x2fc]
mov ecx, dword [ecx]
mov eax, dword [ecx + eax*4]
jmp eax
mov eax, dword [ebp - 0x35c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x374]
mov ecx, dword [ecx]
mov eax, dword [ecx + eax*4]
jmp eax
loopne 0x435046
mov cl, al
and ecx, 1
mov edx, dword [ebp - 0x258]
mov dword [edx], ecx
mov eax, dword [ebp - 0x26c]
mov eax, dword [eax]
mov ecx, dword [edx]
mov eax, dword [eax + ecx*4]
mov bl, 1
jmp eax
rol dword [ebx - 0x6a74fe1f], 0xa8
std
invalid
call fcn.0040aa20
mov ecx, dword [ebp - 0x1f4]
mov dword [ecx], 0
mov eax, dword [esi]
mov ecx, dword [ecx]
mov eax, dword [eax + ecx*4]
jmp eax
call fcn.0040aa20
mov ecx, dword [ebp - 0x390]
mov dword [ecx], 1
mov eax, dword [esi]
mov ecx, dword [ecx]
mov eax, dword [eax + ecx*4]
jmp eax
jno 0x4350bc
loop 0x435175
push ebx
pop esp
into
adc al, 0x8b
test dword [ebp + edi*8 - 1], eax
dec dword [ebx + 0x408d8b00]
std
invalid
mov eax, dword [ebp - 0x380]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x388]
mov ecx, dword [ecx]
mov eax, dword [ecx + eax*4]
jmp eax
mov eax, dword [ebp - 0x2d8]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x2e0]
mov ecx, dword [ecx]
mov eax, dword [ecx + eax*4]
jmp eax
mov esi, dword [ebp - 0x50]
mov al, byte [ebp - 0x134]
mov byte [ebp - 0x158], al
sub esp, 8
mov dword [esp], 0x205af7fe
mov dword [esp + 4], 5
add byte [eax], al
call fcn.00419ee0
add esp, 8
add eax, 0xff
mov ecx, eax
or ecx, 1
and eax, 1
xor ecx, 0xffffffff
or eax, ecx
mov byte [ebp - 0x13c], al
sub esp, 8
mov dword [esp], 0x205af7fe
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0xff
xor eax, 0xffffffff
mov byte [ebp - 0x13b], al
sub esp, 8
mov dword [esp], 0x205af7fe
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0xff
mov byte [ebp - 0x13a], al
sub esp, 8
mov dword [esp], 0x205af7fe
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0xff
mov ecx, eax
or ecx, 0xfffffffe
and eax, 0xfffffffe
xor ecx, 0xffffffff
or eax, ecx
mov byte [ebp - 0x139], al
mov eax, 4
mov byte [ebp + eax - 0x13c], 0
add eax, 1
cmp eax, 6
jne 0x43521b
mov dword [ebp - 0x28], 0
mov eax, dword [ebp - 0x28]
cmp eax, 6
jae 0x43526d
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x28]
movzx ecx, byte [ebp + ecx - 0x13c]
sub esp, 8
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.0043a5f0
add esp, 8
mov ecx, dword [ebp - 0x28]
mov byte [ebp + ecx - 0x13c], al
mov eax, dword [ebp - 0x28]
inc eax
mov dword [ebp - 0x28], eax
jmp 0x435232
mov edi, dword [ebp - 0x13c]
xor ebx, ebx
cmp ebx, dword [0x44996c]
jb 0x43527f
jmp 0x4352de
mov eax, dword [0x449970]
cmp dword [eax + ebx*8], 0x625b6034
sete cl
test cl, 1
jne 0x435295
jmp 0x4352c9
mov eax, dword [eax + ebx*8 + 4]
cmp eax, edi
je 0x4352c9
mov byte [ebp - 0xe], cl
mov ecx, dword [0x449974]
sub esp, 0x10
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], 1
mov dword [esp + 0xc], esi
call fcn.0043c800
mov cl, byte [ebp - 0xe]
add esp, 0x10
jmp 0x4352c9
test cl, 1
je 0x4352d0
jmp 0x4352de
mov eax, ebx
xor eax, 1
shl ebx, 1
and ebx, 2
add ebx, eax
jmp 0x435275
mov eax, dword [ebp - 0x358]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x370]
mov ecx, dword [ecx]
mov eax, dword [ecx + eax*4]
mov ebx, dword [ebp - 0x3c]
mov edi, dword [ebp - 0x1a8]
jmp eax
mov cl, al
and ecx, 1
mov edx, dword [ebp - 0x29c]
mov dword [edx], ecx
mov eax, dword [ebp - 0x2a4]
mov eax, dword [eax]
mov ecx, dword [edx]
mov eax, dword [eax + ecx*4]
mov bl, 1
jmp eax
mov eax, dword [ebp - 0x2f0]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x310]
mov ecx, dword [ecx]
mov eax, dword [ecx + eax*4]
mov ebx, dword [ebp - 0x3c]
jmp eax
mov al, cl
and eax, 1
mov ecx, dword [ebp - 0x33c]
mov dword [ecx], eax
mov eax, dword [ebp - 0x344]
mov eax, dword [eax]
mov ecx, dword [ecx]
mov eax, dword [eax + ecx*4]
mov bl, 1
mov edi, dword [ebp - 0x1a8]
jmp eax
invalid
in al, 0xa1
jno 0x435351
mov eax, dword [edi]
mov ecx, dword [ebx]
mov eax, dword [ecx + eax*4]
jmp eax
and bl, 1
movzx eax, bl
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
call fcn.0040aa20
mov ecx, dword [ebp - 0x30c]
mov dword [ecx], 1
mov eax, dword [edi]
mov ecx, dword [ecx]
mov eax, dword [eax + ecx*4]
jmp eax
mov eax, dword [ebp - 0x350]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x368]
mov ecx, dword [ecx]
mov eax, dword [ecx + eax*4]
jmp eax
mov eax, dword [ebp - 0x2d4]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x2dc]
mov ecx, dword [ecx]
mov eax, dword [ecx + eax*4]
xor esi, esi
jmp eax
call fcn.0040aa20
mov ecx, dword [ebp - 0x210]
mov dword [ecx], 1
mov eax, dword [ebp - 0x220]
mov eax, dword [eax]
mov ecx, dword [ecx]
mov eax, dword [eax + ecx*4]
jmp eax
mov cl, al
and ecx, 1
mov edx, dword [ebp - 0x24c]
mov dword [edx], ecx
mov eax, dword [ebp - 0x264]
mov eax, dword [eax]
mov ecx, dword [edx]
mov eax, dword [eax + ecx*4]
jmp eax
mov eax, dword [ebp - 0x1e0]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x1ec]
mov ecx, dword [ecx]
mov eax, dword [ecx + eax*4]
xor ebx, ebx
jmp eax
mov esi, dword [ebp - 0x50]
mov al, byte [ebp - 0x140]
mov byte [ebp - 0x154], al
sub esp, 8
mov dword [esp], 0x205af7fe
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0xff
mov ecx, eax
or ecx, 1
and eax, 1
xor ecx, 0xffffffff
or eax, ecx
mov byte [ebp - 0x148], al
sub esp, 8
mov dword [esp], 0x205af7fe
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0xff
xor eax, 0xffffffff
mov byte [ebp - 0x147], al
sub esp, 8
mov dword [esp], 0x205af7fe
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0xff
mov byte [ebp - 0x146], al
sub esp, 8
mov dword [esp], 0x205af7fe
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0xff
mov ecx, eax
or ecx, 0xfffffffe
and eax, 0xfffffffe
xor ecx, 0xffffffff
or eax, ecx
mov byte [ebp - 0x145], al
mov eax, 4
mov byte [ebp + eax - 0x148], 0
add eax, 1
cmp eax, 6
jne 0x4354cf
mov dword [ebp - 0x2c], 0
mov eax, dword [ebp - 0x2c]
cmp eax, 6
jae 0x435521
mov eax, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x2c]
movzx ecx, byte [ebp + ecx - 0x148]
sub esp, 8
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.0043a5f0
add esp, 8
mov ecx, dword [ebp - 0x2c]
mov byte [ebp + ecx - 0x148], al
mov eax, dword [ebp - 0x2c]
inc eax
mov dword [ebp - 0x2c], eax
jmp 0x4354e6
mov edi, dword [ebp - 0x148]
xor ebx, ebx
cmp ebx, dword [0x44996c]
jb 0x435533
jmp 0x435592
mov eax, dword [0x449970]
cmp dword [eax + ebx*8], 0x625b6034
sete cl
test cl, 1
jne 0x435549
jmp 0x43557d
mov eax, dword [eax + ebx*8 + 4]
cmp eax, edi
je 0x43557d
mov byte [ebp - 0xf], cl
mov ecx, dword [0x449974]
sub esp, 0x10
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], 1
mov dword [esp + 0xc], esi
call fcn.0043c800
mov cl, byte [ebp - 0xf]
add esp, 0x10
jmp 0x43557d
test cl, 1
je 0x435584
jmp 0x435592
mov eax, ebx
xor eax, 1
shl ebx, 1
and ebx, 2
add ebx, eax
jmp 0x435529
mov eax, dword [ebp - 0x2ac]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x2b0]
mov ecx, dword [ecx]
mov eax, dword [ecx + eax*4]
mov bl, 1
mov esi, 1
jmp eax
call fcn.0040aa20
mov ecx, dword [0x4419e0]
xor eax, eax
sub ecx, 1
sete cl
mov dword [ebx], 1
mov edx, dword [edi]
mov esi, dword [ebx]
mov edx, dword [edx + esi*4]
jmp edx
mov eax, dword [ebp - 0x2f4]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x318]
mov ecx, dword [ecx]
mov eax, dword [ecx + eax*4]
mov dword [ebp - 0x3c], 0
jmp eax
call fcn.0040aa20
mov ecx, dword [ebp - 0x354]
mov dword [ecx], 0
mov eax, dword [ebp - 0x364]
mov eax, dword [eax]
mov ecx, dword [ecx]
mov eax, dword [eax + ecx*4]
mov esi, dword [ebp - 0x38]
jmp eax
mov dword [ebp - 0x378], eax
mov dword [ebp - 0x388], ecx
mov dword [ebp - 0x38c], edx
call fcn.0040aa20
mov ecx, dword [ebp - 0x1d8]
mov dword [ecx], 0
mov eax, dword [ebp - 0x1dc]
mov eax, dword [eax]
mov ecx, dword [ecx]
mov eax, dword [eax + ecx*4]
mov edi, dword [ebp - 0x270]
mov ebx, dword [ebp - 0x254]
jmp eax
lodsd eax, dword [esi]
rep movsd dword es:[edi], dword [esi]
ja 0x4356b2
sti
dec edi
mov eax, dword [ebp - 0x32c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x330]
mov ecx, dword [ecx]
mov eax, dword [ecx + eax*4]
jmp eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
mov eax, dword [0x449960]
sub esp, 8
mov dword [esp], eax
mov dword [esp + 4], 0x6c474eae
call fcn.0043e080
add esp, 8
cmp eax, 0
setne cl
test cl, 1
jne 0x435696
test cl, 1
jne 0x43569d
xor eax, eax
call eax
movzx esi, ax
mov al, byte [ebp - 0x104]
mov byte [ebp - 0x110], al
sub esp, 8
mov dword [esp], 0x48d27d2d
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x19
xor eax, 0x2d
mov byte [ebp - 0x10c], al
sub esp, 8
mov dword [esp], 0x48d27d2d
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 4
xor eax, 0x2e
mov byte [ebp - 0x10b], al
sub esp, 8
mov dword [esp], 0x48d27d2d
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x2f
mov byte [ebp - 0x10a], al
sub esp, 8
mov dword [esp], 0x48d27d2d
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x30
mov byte [ebp - 0x109], al
mov eax, 4
add al, 0x24
sub eax, 0xc748d27d
inc esp
and al, 4
add eax, 0xe8000000
sbb ecx, dword [eax - 2]
inc dword [ebx - 0x3f7cf73c]
sbb dword [ebx - 0x7a77d210], eax
hlt
mov byte [ebp + eax - 0x10c], 0
add eax, 1
cmp eax, 6
jne 0x435745
mov dword [ebp - 0x14], 0
mov eax, dword [ebp - 0x14]
cmp eax, 6
jae 0x435797
mov eax, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x14]
movzx ecx, byte [ebp + ecx - 0x10c]
sub esp, 8
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.0043a5a0
add esp, 8
mov ecx, dword [ebp - 0x14]
mov byte [ebp + ecx - 0x10c], al
mov eax, dword [ebp - 0x14]
inc eax
mov dword [ebp - 0x14], eax
jmp 0x43575c
mov ecx, dword [ebp - 0x10c]
xor eax, eax
sub esi, ecx
sete cl
mov dword [ebx], 1
mov edx, dword [edi]
mov esi, dword [ebx]
mov edx, dword [edx + esi*4]
jmp edx
call fcn.0040aa20
mov ecx, dword [ebp - 0x208]
mov dword [ecx], 0
mov eax, dword [ebp - 0x21c]
mov eax, dword [eax]
mov ecx, dword [ecx]
mov eax, dword [eax + ecx*4]
mov edi, dword [ebp - 0x250]
mov ebx, dword [ebp - 0x238]
jmp eax
int3
mov ecx, esi
call fcn.0043abd0
inc ebx
xor eax, eax
mov ecx, dword [ebp - 0x1c]
cmp ebx, dword [ecx]
setb al
jmp dword [eax*4 + 0x447200]
mov ecx, esi
push edi
push dword [ebp + 0xc]
push 0
call fcn.0043aca0
test eax, eax
setns al
mov dword [ebp - 0x24], eax
jmp case.0x4299cb.299
int3
mov al, cl
and eax, 1
mov dword [ebp - 0x460], eax
mov eax, dword [ebp - 0x464]
mov ecx, dword [ebp - 0x460]
mov eax, dword [eax + ecx*4]
mov edi, dword [ebp - 0x28]
jmp eax
movzx ecx, ax
mov eax, dword [ebp - 0x330]
mov edx, dword [ebp - 0x334]
mov eax, dword [edx + eax*4]
jmp eax
call fcn.0040aa20
mov dword [ebp - 0x1c8], 0
mov eax, dword [ebp - 0x1cc]
mov ecx, dword [ebp - 0x1c8]
mov eax, dword [eax + ecx*4]
jmp eax
call fcn.0040aa20
xor ebx, ebx
test esi, esi
sete dl
mov dword [ebp - 0x1e0], 0
mov eax, dword [ebp - 0x1e4]
mov ecx, dword [ebp - 0x1e0]
mov eax, dword [eax + ecx*4]
jmp eax
mov dword [ebp - 0x14], ebx
xor eax, eax
mov ecx, edi
sub ecx, 2
sete cl
mov edx, dword [ebp - 0x450]
mov ebx, dword [ebp - 0x454]
mov edx, dword [ebx + edx*4]
jmp edx
add ebx, 4
mov eax, dword [ebp - 0x348]
mov ecx, dword [ebp - 0x34c]
mov eax, dword [ecx + eax*4]
mov esi, ebx
mov edx, dword [ebp - 0x10]
jmp eax
mov eax, dword [ebp - 0x160]
mov ecx, dword [ebp - 0x164]
mov eax, dword [ecx + eax*4]
jmp eax
mov eax, dword [ebp - 0x4b0]
mov ecx, dword [ebp - 0x4b4]
mov ecx, dword [ecx + eax*4]
xor eax, eax
jmp ecx
xor ebx, ebx
test eax, eax
sete byte [ebp - 0x17]
mov eax, dword [ebp - 0x168]
mov ecx, dword [ebp - 0x16c]
mov eax, dword [ecx + eax*4]
mov edi, dword [ebp + 0xc]
jmp eax
not al
movzx eax, al
and eax, 1
mov dword [ebp - 0x2b0], eax
mov eax, dword [ebp - 0x2b4]
mov ecx, dword [ebp - 0x2b0]
mov eax, dword [eax + ecx*4]
jmp eax
call fcn.0040aa20
mov word [esi], 0x5c
mov dword [ebp - 0x130], 1
mov eax, dword [ebp - 0x134]
mov ecx, dword [ebp - 0x130]
mov eax, dword [eax + ecx*4]
jmp eax
call fcn.0040aa20
mov dword [ebp - 0x110], 0
mov eax, dword [ebp - 0x114]
mov ecx, dword [ebp - 0x110]
mov eax, dword [eax + ecx*4]
jmp eax
mov eax, dword [ebp - 0x360]
mov ecx, dword [ebp - 0x364]
mov eax, dword [ecx + eax*4]
mov edx, dword [ebp - 0x10]
jmp eax
mov eax, dword [ebp - 0x178]
mov ecx, dword [ebp - 0x17c]
mov eax, dword [ecx + eax*4]
jmp eax
call fcn.0040aa20
mov dword [ebp - 0x420], 0
mov eax, dword [ebp - 0x424]
mov ecx, dword [ebp - 0x420]
mov eax, dword [eax + ecx*4]
jmp eax
mov eax, dword [ebp - 0x88]
mov ecx, dword [ebp - 0x8c]
mov eax, dword [ecx + eax*4]
jmp eax
mov ecx, dword [ebp - 0x268]
mov edx, dword [ebp - 0x26c]
mov ecx, dword [edx + ecx*4]
jmp ecx
mov edx, dword [ebp - 0x10]
add edx, 0xfffffffe
mov eax, dword [ebp - 0x2a0]
mov ecx, dword [ebp - 0x2a4]
mov eax, dword [ecx + eax*4]
jmp eax
call fcn.0040aa20
mov dword [ebp - 0x2f8], 0
mov eax, dword [ebp - 0x2fc]
mov ecx, dword [ebp - 0x2f8]
mov eax, dword [eax + ecx*4]
mov esi, dword [ebp - 0x4c]
jmp eax
call fcn.0040aa20
mov dword [ebp - 0x1d0], 0
mov eax, dword [ebp - 0x1d4]
mov ecx, dword [ebp - 0x1d0]
mov eax, dword [eax + ecx*4]
jmp eax
mov dword [ebp - 0x2c], esi
mov eax, dword [ebp - 0x428]
mov ecx, dword [ebp - 0x42c]
mov eax, dword [ecx + eax*4]
jmp eax
sbb dword [ecx + 0x79], edi
cmp dword [esi - 0x39], esp
push es
pop esp
add byte [ebx + 0x4d8ba045], cl
pushfd
mov eax, dword [ecx + eax*4]
jmp eax
mov eax, dword [ebp - 0xe0]
mov ecx, dword [ebp - 0xe4]
mov eax, dword [ecx + eax*4]
jmp eax
add esp, ebx
pop edi
inc ebp
sub esp, 0xc
mov eax, dword [ebp - 0x28]
mov dword [esp + 8], eax
mov dword [esp + 4], ebx
mov dword [esp], edi
call fcn.0041c340
add esp, 0xc
mov eax, dword [ebp - 0x90]
mov ecx, dword [ebp - 0x94]
mov eax, dword [ecx + eax*4]
jmp eax
xor eax, eax
sub ecx, 0x2e
sete cl
mov edx, dword [ebp - 0x328]
mov ebx, dword [ebp - 0x32c]
mov edx, dword [ebx + edx*4]
jmp edx
mov eax, dword [ebp - 0x58]
mov ecx, dword [ebp - 0x5c]
mov eax, dword [ecx + eax*4]
jmp eax
mov ax, word [edi]
mov ecx, dword [ebp - 0x1f8]
mov edx, dword [ebp - 0x1fc]
mov ecx, dword [edx + ecx*4]
jmp ecx
mov al, byte [ecx]
mov byte [ebp - 0x30], al
sub esp, 8
mov dword [esp], 0x9d7fd62f
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x3a
xor eax, 0x2f
mov esi, dword [ebp - 0x54]
mov byte [esi], al
sub esp, 8
mov dword [esp], 0x9d7fd62f
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x30
mov byte [esi + 1], al
sub esp, 8
mov dword [esp], 0x9d7fd62f
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x5c
xor eax, 0x31
mov byte [esi + 2], al
sub esp, 8
mov dword [esp], 0x9d7fd62f
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x32
mov byte [esi + 3], al
sub esp, 8
mov dword [esp], 0x9d7fd62f
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x33
mov byte [esi + 4], al
sub esp, 8
mov dword [esp], 0x9d7fd62f
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x34
mov byte [esi + 5], al
mov eax, 6
mov byte [esi + eax], 0
add eax, 1
cmp eax, 9
jne 0x4380ca
mov dword [ebp - 0x1c], 0
mov eax, dword [ebp - 0x1c]
cmp eax, 9
jae 0x438110
mov eax, dword [ebp - 0x1c]
mov ecx, dword [ebp - 0x1c]
movzx ecx, byte [esi + ecx]
sub esp, 8
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.0043a6a0
add esp, 8
mov ecx, dword [ebp - 0x1c]
mov byte [esi + ecx], al
mov eax, dword [ebp - 0x1c]
inc eax
mov dword [ebp - 0x1c], eax
jmp 0x4380dd
mov eax, esi
mov esi, edi
add esi, 2
sub esp, 8
mov dword [esp + 4], eax
mov dword [esp], esi
call fcn.004390c0
add esp, 8
xor ecx, ecx
test eax, eax
setne cl
mov dword [ebp - 0x398], ecx
mov eax, dword [ebp - 0x39c]
mov ecx, dword [ebp - 0x398]
mov eax, dword [eax + ecx*4]
jmp eax
movzx eax, di
mov ecx, dword [ebp - 0x170]
mov edx, dword [ebp - 0x174]
mov ecx, dword [edx + ecx*4]
jmp ecx
add ebx, 0xfffffffe
mov eax, dword [ebp - 0x248]
mov ecx, dword [ebp - 0x24c]
mov eax, dword [ecx + eax*4]
jmp eax
mov al, byte [ebp - 0x17]
mov bl, al
and ebx, 1
mov dword [ebp - 0x140], ebx
mov eax, dword [ebp - 0x144]
mov ecx, dword [ebp - 0x140]
mov eax, dword [eax + ecx*4]
jmp eax
mov ax, word [ebx]
xor ecx, ecx
sub ax, 0x2e
sete cl
mov dword [ebp - 0x440], ecx
mov eax, dword [ebp - 0x444]
mov ecx, dword [ebp - 0x440]
mov eax, dword [eax + ecx*4]
jmp eax
call fcn.0040aa20
movzx esi, di
mov dword [ebp - 0x418], 1
mov eax, dword [ebp - 0x41c]
mov ecx, dword [ebp - 0x418]
mov eax, dword [eax + ecx*4]
jmp eax
mov esi, ebx
add esi, 2
mov eax, dword [ebp - 0x438]
mov ecx, dword [ebp - 0x43c]
mov eax, dword [ecx + eax*4]
jmp eax
mov al, cl
and eax, 1
mov dword [ebp - 0x300], eax
mov eax, dword [ebp - 0x304]
mov ecx, dword [ebp - 0x300]
mov eax, dword [eax + ecx*4]
jmp eax
mov dword [ebp - 0x44], edi
call fcn.0040aa20
mov dword [ebp - 0x310], 0
mov eax, dword [ebp - 0x314]
mov ecx, dword [ebp - 0x310]
mov eax, dword [eax + ecx*4]
mov edi, dword [ebp + 0xc]
jmp eax
xor ecx, ecx
sub eax, 0x5c
sete al
mov edx, dword [ebp - 0x260]
mov esi, dword [ebp - 0x264]
mov edx, dword [esi + edx*4]
jmp edx
xor eax, eax
mov cl, byte [ebp - 0x18]
mov al, cl
and eax, 1
mov dword [ebp - 0x3d8], eax
mov eax, dword [ebp - 0x3dc]
mov ecx, dword [ebp - 0x3d8]
mov eax, dword [eax + ecx*4]
jmp eax
xchg esi, eax
mov fs, word [eax - 0x76]
add ecx, dword [eax - 0x137c33bb]
or bh, al
add al, 0x24
inc esi
add bh, byte [esi + edx*2]
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x3a
xor eax, 0x46
mov byte [esi], al
sub esp, 8
mov dword [esp], 0x563c0246
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x47
mov byte [esi + 1], al
sub esp, 8
mov dword [esp], 0x563c0246
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x5c
xor eax, 0x48
mov byte [esi + 2], al
sub esp, 8
mov dword [esp], 0x563c0246
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x49
mov byte [esi + 3], al
sub esp, 8
mov dword [esp], 0x563c0246
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x4a
mov byte [esi + 4], al
sub esp, 8
mov dword [esp], 0x563c0246
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x4b
mov byte [esi + 5], al
mov eax, 6
mov byte [esi + eax], 0
add eax, 1
cmp eax, 9
jne 0x438339
mov dword [ebp - 0x24], 0
mov eax, dword [ebp - 0x24]
cmp eax, 9
jae 0x43837f
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x24]
movzx ecx, byte [esi + ecx]
sub esp, 8
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.0043a6d0
add esp, 8
mov ecx, dword [ebp - 0x24]
mov byte [esi + ecx], al
mov eax, dword [ebp - 0x24]
inc eax
mov dword [ebp - 0x24], eax
jmp 0x43834c
call fcn.0040aa20
call fcn.0040aa20
mov eax, edi
add eax, 2
sub esp, 8
mov dword [esp + 4], esi
mov dword [esp], eax
call fcn.004390c0
add esp, 8
mov eax, dword [ebp - 0xa8]
mov ecx, dword [ebp - 0xac]
mov eax, dword [ecx + eax*4]
jmp eax
mov dword [ebp - 0x10], edx
mov word [edx], 0
mov eax, dword [ebp - 0x200]
mov ecx, dword [ebp - 0x204]
mov eax, dword [ecx + eax*4]
mov ebx, esi
jmp eax
movsb byte es:[edi], byte [esi]
mov dword [ebx - 0x50], edx
cmp eax, 0x8bec92cd
test dword [eax - 1], esp
invalid
call fcn.0040aa20
mov dword [ebp - 0x290], 1
mov eax, dword [ebp - 0x294]
mov ecx, dword [ebp - 0x290]
mov eax, dword [eax + ecx*4]
jmp eax
mov ax, word [esi + 4]
xor ecx, ecx
sub ax, 0x5c
sete cl
mov dword [ebp - 0x230], ecx
mov eax, dword [ebp - 0x234]
mov ecx, dword [ebp - 0x230]
mov eax, dword [eax + ecx*4]
jmp eax
mov ecx, dword [ebp - 0x2c8]
mov edx, dword [ebp - 0x2cc]
mov ecx, dword [edx + ecx*4]
jmp ecx
mov eax, dword [ebp - 0xe8]
mov ecx, dword [ebp - 0xec]
mov eax, dword [ecx + eax*4]
jmp eax
mov eax, dword [ebp - 0x350]
mov ecx, dword [ebp - 0x354]
mov eax, dword [ecx + eax*4]
mov edx, dword [ebp - 0x10]
jmp eax
mov eax, dword [ebp - 0x410]
mov ecx, dword [ebp - 0x414]
mov eax, dword [ecx + eax*4]
jmp eax
sub esp, 8
mov dword [esp], ebx
mov dword [esp + 4], 0x5c
call fcn.00439080
add esp, 8
mov esi, eax
xor eax, eax
test esi, esi
sete al
mov dword [ebp - 0x488], eax
mov eax, dword [ebp - 0x48c]
mov ecx, dword [ebp - 0x488]
mov eax, dword [eax + ecx*4]
jmp eax
call fcn.0040aa20
mov dword [ebp - 0x108], 0
mov eax, dword [ebp - 0x10c]
mov ecx, dword [ebp - 0x108]
mov eax, dword [eax + ecx*4]
jmp eax
fcmovu st(0), st(4)
pushfd
inc esp
cmc
or al, 0xe0
movsb byte es:[edi], byte [esi]
mov eax, dword [ebp - 0xd0]
mov ecx, dword [ebp - 0xd4]
mov eax, dword [ecx + eax*4]
jmp eax
mov di, word [esi]
mov eax, dword [ebp - 0x430]
mov ecx, dword [ebp - 0x434]
mov eax, dword [ecx + eax*4]
jmp eax
mov di, word [esi]
mov eax, dword [ebp - 0x190]
mov ecx, dword [ebp - 0x194]
mov eax, dword [ecx + eax*4]
jmp eax
call fcn.0040aa20
mov dword [ebp - 0x180], 1
mov eax, dword [ebp - 0x184]
mov ecx, dword [ebp - 0x180]
mov eax, dword [eax + ecx*4]
jmp eax
call fcn.0040aa20
mov dword [ebp - 0x3e8], 1
mov eax, dword [ebp - 0x3ec]
mov ecx, dword [ebp - 0x3e8]
mov eax, dword [eax + ecx*4]
jmp eax
in eax, 0xa8
das
ror dword [ebx - 0xbf7b], cl
dec dword [ebx - 0xc373]
dec dword [ebx - 0x1f007efc]
movzx esi, ax
mov eax, dword [ebp - 0x1f0]
mov ecx, dword [ebp - 0x1f4]
mov eax, dword [ecx + eax*4]
jmp eax
call fcn.0040aa20
mov dword [ebp - 0x470], 1
mov eax, dword [ebp - 0x474]
mov ecx, dword [ebp - 0x470]
mov eax, dword [eax + ecx*4]
jmp eax
movzx eax, ax
mov ecx, dword [ebp - 0x3c0]
mov edx, dword [ebp - 0x3c4]
mov ecx, dword [edx + ecx*4]
jmp ecx
mov al, cl
and eax, 1
mov dword [ebp - 0x1a0], eax
mov eax, dword [ebp - 0x1a4]
mov ecx, dword [ebp - 0x1a0]
mov eax, dword [eax + ecx*4]
jmp eax
jb case.0x4299cb.428
lodsb al, byte [esi]
std
dec ecx
insb byte es:[edi], dx
hlt
mov eax, dword [ebp - 0x100]
mov ecx, dword [ebp - 0x104]
mov eax, dword [ecx + eax*4]
jmp eax
mov ecx, esi
not ecx
mov eax, ebx
xor eax, ecx
not eax
and eax, ecx
mov ecx, ebx
add ecx, ecx
not ecx
add ecx, ebx
and esi, ecx
sub esi, eax
sar esi, 1
mov edi, esi
inc edi
xor eax, eax
mov ecx, edi
sub ecx, 1
sete al
mov dword [ebp - 0x478], eax
mov eax, dword [ebp - 0x47c]
mov ecx, dword [ebp - 0x478]
mov eax, dword [eax + ecx*4]
mov dword [ebp - 0x28], edi
jmp eax
mov word [edi], 0
mov eax, dword [ebp - 0x118]
mov ecx, dword [ebp - 0x11c]
mov eax, dword [ecx + eax*4]
jmp eax
call fcn.0040aa20
mov si, word [ebx]
mov dword [ebp - 0x288], 1
mov eax, dword [ebp - 0x28c]
mov ecx, dword [ebp - 0x288]
mov eax, dword [eax + ecx*4]
jmp eax
mov eax, dword [ebp - 0x280]
mov ecx, dword [ebp - 0x284]
mov eax, dword [ecx + eax*4]
jmp eax
mov eax, dword [ebp - 0x3f8]
mov ecx, dword [ebp - 0x3fc]
mov eax, dword [ecx + eax*4]
jmp eax
pop esi
mov esp, 0x458b1381
nop
mov ecx, dword [ebp - 0x74]
mov eax, dword [ecx + eax*4]
jmp eax
mov al, byte [ebp - 0x16]
mov bl, al
and ebx, 1
mov dword [ebp - 0x1c0], ebx
mov eax, dword [ebp - 0x1c4]
mov ecx, dword [ebp - 0x1c0]
mov eax, dword [eax + ecx*4]
jmp eax
xor eax, eax
mov ecx, dword [ebp - 0x10]
sub ecx, edi
seta al
mov dword [ebp - 0x3d0], eax
mov eax, dword [ebp - 0x3d4]
mov ecx, dword [ebp - 0x3d0]
mov eax, dword [eax + ecx*4]
jmp eax
mov eax, dword [ebp - 0x14]
mov ax, word [eax]
mov ecx, dword [ebp - 0x338]
mov edx, dword [ebp - 0x33c]
mov ecx, dword [edx + ecx*4]
jmp ecx
call fcn.0040aa20
mov cx, word [edi + 2]
xor eax, eax
sub cx, 0x3a
sete cl
mov dword [ebp - 0x1a8], 1
mov edx, dword [ebp - 0x1ac]
mov esi, dword [ebp - 0x1a8]
mov edx, dword [edx + esi*4]
jmp edx
and al, 1
movzx eax, al
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
call fcn.0040aa20
movzx eax, si
mov dword [ebp - 0x270], 1
mov ecx, dword [ebp - 0x274]
mov edx, dword [ebp - 0x270]
mov ecx, dword [ecx + edx*4]
jmp ecx
call fcn.0040aa20
test esi, esi
sete dl
mov dword [ebp - 0x400], 1
mov eax, dword [ebp - 0x404]
mov ecx, dword [ebp - 0x400]
mov eax, dword [eax + ecx*4]
jmp eax
dec edi
invalid
mov ax, word [edi]
xor ecx, ecx
sub ax, 0x5c
sete cl
mov dword [ebp - 0x390], ecx
mov eax, dword [ebp - 0x394]
mov ecx, dword [ebp - 0x390]
mov ecx, dword [eax + ecx*4]
xor eax, eax
jmp ecx
call fcn.0040aa20
mov dword [ebp - 0x150], 0
mov eax, dword [ebp - 0x154]
mov ecx, dword [ebp - 0x150]
mov eax, dword [eax + ecx*4]
jmp eax
mov eax, dword [ebp - 0x2a8]
mov ecx, dword [ebp - 0x2ac]
mov eax, dword [ecx + eax*4]
mov esi, dword [ebp - 0x14]
jmp eax
mov edi, dword [ebp + 0xc]
mov word [edi], 0
mov eax, dword [ebp - 0x4a8]
mov ecx, dword [ebp - 0x4ac]
mov eax, dword [ecx + eax*4]
mov dword [ebp - 0x10], edi
mov ebx, dword [ebp + 8]
jmp eax
mov al, byte [ebp - 0x15]
mov bl, al
and ebx, 1
mov dword [ebp - 0x3a0], ebx
mov eax, dword [ebp - 0x3a4]
mov ecx, dword [ebp - 0x3a0]
mov eax, dword [eax + ecx*4]
mov ecx, dword [ebp - 0x50]
jmp eax
call fcn.0040aa20
mov dword [ebp - 0x278], 0
mov eax, dword [ebp - 0x27c]
mov ecx, dword [ebp - 0x278]
mov eax, dword [eax + ecx*4]
jmp eax
add edx, 0xfffffffe
mov eax, dword [ebp - 0x358]
mov ecx, dword [ebp - 0x35c]
mov eax, dword [ecx + eax*4]
jmp eax
mov byte [ebp - 0x16], dl
mov eax, dword [ebp - 0x1d8]
mov ecx, dword [ebp - 0x1dc]
mov eax, dword [ecx + eax*4]
jmp eax
call fcn.0040aa20
mov dword [ebp - 0x3b0], 0
mov eax, dword [ebp - 0x3b4]
mov ecx, dword [ebp - 0x3b0]
mov eax, dword [eax + ecx*4]
jmp eax
mov al, cl
and eax, 1
mov dword [ebp - 0x320], eax
mov eax, dword [ebp - 0x324]
mov ecx, dword [ebp - 0x320]
mov eax, dword [eax + ecx*4]
mov ebx, dword [ebp - 0x48]
jmp eax
call fcn.0040aa20
mov dword [ebp - 0x3e0], 1
mov eax, dword [ebp - 0x3e4]
mov ecx, dword [ebp - 0x3e0]
mov eax, dword [eax + ecx*4]
jmp eax
not al
movzx eax, al
and eax, 1
mov dword [ebp - 0x370], eax
mov eax, dword [ebp - 0x374]
mov ecx, dword [ebp - 0x370]
mov eax, dword [eax + ecx*4]
mov edx, dword [ebp - 0x10]
mov esi, dword [ebp - 0x2c]
jmp eax
add edi, 6
mov eax, dword [ebp - 0x120]
mov ecx, dword [ebp - 0x124]
mov eax, dword [ecx + eax*4]
jmp eax
mov eax, dword [ebp - 0x228]
mov ecx, dword [ebp - 0x22c]
mov eax, dword [ecx + eax*4]
mov esi, dword [ebp - 0x44]
jmp eax
mov ecx, dword [ebp - 0x2b8]
mov edx, dword [ebp - 0x2bc]
mov ecx, dword [edx + ecx*4]
jmp ecx
test eax, 0xd9a467a5
cli
aam 0xe9
mov eax, dword [ebp - 0xb8]
mov ecx, dword [ebp - 0xbc]
mov eax, dword [ecx + eax*4]
jmp eax
mov eax, dword [ebp - 0x14]
mov edi, eax
add edi, 2
mov ax, word [eax + 2]
xor ecx, ecx
sub ax, 0x2e
sete cl
mov dword [ebp - 0x318], ecx
mov eax, dword [ebp - 0x31c]
mov ecx, dword [ebp - 0x318]
mov eax, dword [eax + ecx*4]
jmp eax
mov ax, word [edi]
xor ecx, ecx
sub ax, 0x5c
sete cl
mov dword [ebp - 0x2e0], ecx
mov eax, dword [ebp - 0x2e4]
mov ecx, dword [ebp - 0x2e0]
mov ecx, dword [eax + ecx*4]
xor eax, eax
mov esi, dword [ebp - 0x14]
jmp ecx
call fcn.0040aa20
mov ax, word [esi]
test ax, ax
sete al
mov dword [ebp - 0x380], 0
mov ecx, dword [ebp - 0x384]
mov edx, dword [ebp - 0x380]
mov ecx, dword [ecx + edx*4]
jmp ecx
call fcn.0040aa20
mov dword [ebp - 0x388], 1
mov eax, dword [ebp - 0x38c]
mov ecx, dword [ebp - 0x388]
mov eax, dword [eax + ecx*4]
jmp eax
call fcn.0040aa20
mov cx, word [edi]
xor eax, eax
test cx, cx
sete cl
mov dword [ebp - 0x308], 1
mov edx, dword [ebp - 0x30c]
mov esi, dword [ebp - 0x308]
mov edx, dword [edx + esi*4]
jmp edx
call fcn.0040aa20
sub esp, 0xc
mov dword [ebp - 0x54], esp
push eax
mov esi, esp
sub esp, 0xc
mov ebx, esp
push eax
mov edi, esp
cmp dword [ebp + 8], 0
sete al
cmp dword [ebp + 0xc], 0
sete cl
or al, cl
mov dword [ebp - 0x4c0], 1
mov ecx, dword [ebp - 0x4c4]
mov edx, dword [ebp - 0x4c0]
mov ecx, dword [ecx + edx*4]
jmp ecx
mov eax, dword [ebp - 0xf8]
mov ecx, dword [ebp - 0xfc]
mov ecx, dword [ecx + eax*4]
mov al, 1
jmp ecx
call fcn.0040aa20
mov cx, word [ebx]
xor eax, eax
sub cx, 0x5c
sete cl
mov dword [ebp - 0x468], 1
mov edx, dword [ebp - 0x46c]
mov edi, ebx
mov ebx, dword [ebp - 0x468]
mov edx, dword [edx + ebx*4]
mov ebx, edi
jmp edx
mov al, byte [ebx]
mov byte [ebp - 0x38], al
sub esp, 8
mov dword [esp], 0x563c0246
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x3a
xor eax, 0x46
mov byte [esi], al
sub esp, 8
mov dword [esp], 0x563c0246
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x47
mov byte [esi + 1], al
sub esp, 8
mov dword [esp], 0x563c0246
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x5c
xor eax, 0x48
mov byte [esi + 2], al
sub esp, 8
mov dword [esp], 0x563c0246
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x49
mov byte [esi + 3], al
sub esp, 8
mov dword [esp], 0x563c0246
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x4a
mov byte [esi + 4], al
sub esp, 8
mov dword [esp], 0x563c0246
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x4b
mov byte [esi + 5], al
mov eax, 6
mov byte [esi + eax], 0
add eax, 1
cmp eax, 9
jne 0x438b5f
mov dword [ebp - 0x20], 0
mov eax, dword [ebp - 0x20]
cmp eax, 9
jae 0x438ba5
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x20]
movzx ecx, byte [esi + ecx]
sub esp, 8
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.0043a6d0
add esp, 8
mov ecx, dword [ebp - 0x20]
mov byte [esi + ecx], al
mov eax, dword [ebp - 0x20]
inc eax
mov dword [ebp - 0x20], eax
jmp 0x438b72
call fcn.0040aa20
call fcn.0040aa20
add edi, 2
sub esp, 8
mov dword [esp + 4], esi
mov dword [ebp - 0x40], edi
mov dword [esp], edi
call fcn.004390c0
add esp, 8
xor ecx, ecx
test eax, eax
setne al
mov dword [ebp - 0x2f0], 0
mov edx, dword [ebp - 0x2f4]
mov edi, dword [ebp - 0x2f0]
mov edx, dword [edx + edi*4]
mov edi, dword [ebp + 0xc]
jmp edx
xor ebx, ebx
test eax, eax
sete byte [ebp - 0x15]
mov eax, dword [ebp - 0x3b8]
mov ecx, dword [ebp - 0x3bc]
mov eax, dword [ecx + eax*4]
jmp eax
mov cl, al
and ecx, 1
mov dword [ebp - 0x258], ecx
mov eax, dword [ebp - 0x25c]
mov ecx, dword [ebp - 0x258]
mov eax, dword [eax + ecx*4]
mov esi, dword [ebp - 0x14]
jmp eax
mov ecx, dword [ebp - 0x208]
mov edx, dword [ebp - 0x20c]
mov ecx, dword [edx + ecx*4]
mov edx, dword [ebp - 0x3c]
mov edi, dword [ebp + 0xc]
mov esi, eax
jmp ecx
call fcn.0040aa20
mov dword [ebp - 0x188], 1
mov eax, dword [ebp - 0x18c]
mov ecx, dword [ebp - 0x188]
mov eax, dword [eax + ecx*4]
jmp eax
mov eax, dword [ebp - 0x240]
mov ecx, dword [ebp - 0x244]
mov eax, dword [ecx + eax*4]
mov edx, ebx
jmp eax
xor eax, eax
mov ebx, edx
mov ecx, edx
sub ecx, edi
setae al
mov dword [ebp - 0x298], eax
mov eax, dword [ebp - 0x29c]
mov ecx, dword [ebp - 0x298]
mov ecx, dword [eax + ecx*4]
mov eax, edi
jmp ecx
call fcn.0040aa20
mov dword [ebp - 0x148], 0
mov eax, dword [ebp - 0x14c]
mov ecx, dword [ebp - 0x148]
mov eax, dword [eax + ecx*4]
jmp eax
mov eax, dword [ebp - 0x250]
mov ecx, dword [ebp - 0x254]
mov ecx, dword [ecx + eax*4]
mov eax, ebx
jmp ecx
mov eax, dword [ebp - 0x128]
mov ecx, dword [ebp - 0x12c]
mov eax, dword [ecx + eax*4]
jmp eax
mov eax, dword [ebp - 0xc8]
mov ecx, dword [ebp - 0xcc]
mov eax, dword [ecx + eax*4]
jmp eax
call fcn.0040aa20
mov dword [ebp - 0x4a0], 1
mov eax, dword [ebp - 0x4a4]
mov ecx, dword [ebp - 0x4a0]
mov eax, dword [eax + ecx*4]
jmp eax
int1
or dword [edx + ecx*4 - 0x75], esi
inc ebp
or byte [ebx - 0x8373], 0xff
mov eax, dword [ecx + eax*4]
jmp eax
add esi, 4
mov eax, dword [ebp - 0x220]
mov ecx, dword [ebp - 0x224]
mov eax, dword [ecx + eax*4]
mov edx, dword [ebp - 0x10]
jmp eax
mov ecx, dword [ebp - 0x238]
mov edx, dword [ebp - 0x23c]
mov ecx, dword [edx + ecx*4]
mov dword [ebp - 0x10], eax
jmp ecx
call fcn.0040aa20
mov cx, word [ebx]
xor eax, eax
test cx, cx
setne cl
mov dword [ebp - 0x498], 0
mov edx, dword [ebp - 0x49c]
mov esi, dword [ebp - 0x498]
mov edx, dword [edx + esi*4]
jmp edx
call fcn.0040aa20
mov dword [ebp - 0x138], 1
mov eax, dword [ebp - 0x13c]
mov ecx, dword [ebp - 0x138]
mov eax, dword [eax + ecx*4]
jmp eax
call fcn.0040aa20
mov dword [ebp - 0x218], 0
mov eax, dword [ebp - 0x21c]
mov ecx, dword [ebp - 0x218]
mov eax, dword [eax + ecx*4]
mov ebx, dword [ebp - 0x14]
mov edi, dword [ebp - 0x10]
jmp eax
sub esp, 4
mov dword [esp], ebx
call fcn.00416960
add esp, 4
lea esi, [ebx + eax*2]
mov eax, dword [ebp - 0x480]
mov ecx, dword [ebp - 0x484]
mov eax, dword [ecx + eax*4]
jmp eax
mov al, cl
and eax, 1
mov dword [ebp - 0x490], eax
mov eax, dword [ebp - 0x494]
mov ecx, dword [ebp - 0x490]
mov eax, dword [eax + ecx*4]
jmp eax
movzx eax, ax
mov ecx, dword [ebp - 0x2d0]
mov edx, dword [ebp - 0x2d4]
mov ecx, dword [edx + ecx*4]
jmp ecx
test eax, eax
sete al
mov ecx, dword [ebp - 0x2c0]
mov edx, dword [ebp - 0x2c4]
mov ecx, dword [edx + ecx*4]
jmp ecx
mov ax, word [edi]
mov ecx, dword [ebp - 0x3c8]
mov edx, dword [ebp - 0x3cc]
mov ecx, dword [edx + ecx*4]
jmp ecx
mov esi, edi
add esi, 4
mov eax, dword [ebp - 0x198]
mov ecx, dword [ebp - 0x19c]
mov eax, dword [ecx + eax*4]
jmp eax
mov al, cl
and eax, 1
mov dword [ebp - 0x448], eax
mov eax, dword [ebp - 0x44c]
mov ecx, dword [ebp - 0x448]
mov eax, dword [eax + ecx*4]
mov ebx, dword [ebp - 0x14]
jmp eax
xor eax, eax
mov ecx, edi
sub ecx, 3
sete al
mov dword [ebp - 0x340], eax
mov eax, dword [ebp - 0x344]
mov ecx, dword [ebp - 0x340]
mov eax, dword [eax + ecx*4]
jmp eax
and dword [edx + 0x60], ebp
ror byte [ebx + 0x4d8b8845], 0x84
mov eax, dword [ecx + eax*4]
jmp eax
call fcn.0040aa20
mov dword [ebp - 0x3a8], 0
mov eax, dword [ebp - 0x3ac]
mov ecx, dword [ebp - 0x3a8]
mov eax, dword [eax + ecx*4]
jmp eax
mov eax, dword [ebp - 0x158]
mov ecx, dword [ebp - 0x15c]
mov eax, dword [ecx + eax*4]
jmp eax
and byte [ecx + 0x1cedcea3], 0x80
iretd
mov ecx, dword [ebp - 0x378]
mov edx, dword [ebp - 0x37c]
mov ecx, dword [edx + ecx*4]
jmp ecx
call fcn.0040aa20
mov dword [ebp - 0x408], 0
mov eax, dword [ebp - 0x40c]
mov ecx, dword [ebp - 0x408]
mov eax, dword [eax + ecx*4]
mov edi, dword [ebp + 0xc]
jmp eax
call fcn.0040aa20
sub esp, 0xc
mov eax, dword [ebp - 0x28]
mov dword [esp + 8], eax
mov dword [esp + 4], ebx
mov dword [esp], edi
call fcn.0041c340
add esp, 0xc
lea eax, [edi + esi*2]
mov dword [ebp - 0x3c], eax
lea eax, [ebx + esi*2]
mov dword [ebp - 0x210], 0
mov ecx, dword [ebp - 0x214]
mov edx, dword [ebp - 0x210]
mov ecx, dword [ecx + edx*4]
jmp ecx
in al, dx
or dword [ebp + 0x4ae5582e], eax
mov word [ebx - 0xd77b], cs
dec dword [ebx - 0xdb73]
dec dword [ebx - 0x1f007efc]
mov cl, al
and ecx, 1
mov dword [ebp - 0x2e8], ecx
mov eax, dword [ebp - 0x2ec]
mov ecx, dword [ebp - 0x2e8]
mov eax, dword [eax + ecx*4]
jmp eax
call fcn.0040aa20
mov dword [ebp - 0x1b0], 1
mov eax, dword [ebp - 0x1b4]
mov ecx, dword [ebp - 0x1b0]
mov eax, dword [eax + ecx*4]
jmp eax
mov eax, dword [ebp - 0x40]
mov ax, word [eax]
mov ecx, dword [ebp - 0x2d8]
mov edx, dword [ebp - 0x2dc]
mov ecx, dword [edx + ecx*4]
jmp ecx
mov dword [ebp - 0x50], esi
mov dword [ebp - 0x48], edi
mov dword [ebp - 0x4c], ebx
movzx eax, al
and eax, 1
mov dword [ebp - 0x4b8], eax
mov eax, dword [ebp - 0x4bc]
mov ecx, dword [ebp - 0x4b8]
mov eax, dword [eax + ecx*4]
jmp eax
mov word [edi], 0x5c
mov word [edi + 2], 0
mov eax, dword [ebp - 0x1b8]
mov ecx, dword [ebp - 0x1bc]
mov eax, dword [ecx + eax*4]
jmp eax
mov byte [ebp - 0x18], dl
mov eax, dword [ebp - 0x3f0]
mov ecx, dword [ebp - 0x3f4]
mov eax, dword [ecx + eax*4]
mov esi, dword [ebp - 0x2c]
jmp eax
mov eax, dword [ebp - 0xb0]
mov ecx, dword [ebp - 0xb4]
mov eax, dword [ecx + eax*4]
jmp eax
mov eax, dword [ebp - 0x368]
mov ecx, dword [ebp - 0x36c]
mov eax, dword [ecx + eax*4]
mov esi, dword [ebp - 0x2c]
jmp eax
mov edx, dword [ebp - 0x10]
mov word [edx], 0x5c
add edx, 2
add ebx, 2
mov eax, dword [ebp - 0x458]
mov ecx, dword [ebp - 0x45c]
mov eax, dword [ecx + eax*4]
mov esi, ebx
mov edi, dword [ebp + 0xc]
jmp eax
call fcn.0040aa20
mov dword [ebp - 0x1e8], 1
mov eax, dword [ebp - 0x1ec]
mov ecx, dword [ebp - 0x1e8]
mov eax, dword [eax + ecx*4]
jmp eax
sbb eax, 0x1d700042
inc edx
add byte [edi], dh
sbb eax, 0x1d290042
inc edx
add byte [eax], dh
sbb eax, 0x1d300042
inc edx
add byte [edi], dh
sbb eax, 0x1d300042
inc edx
add byte [eax - 0x6fffbde7], ah
sbb dword [edx], eax
inc esp
sbb dword [edx], eax
mov al, byte [0x50004219]
sbb dword [edx], eax
push eax
sbb dword [edx], eax
push edx
sbb dword [edx], eax
push eax
sbb dword [edx], eax
arpl word [ecx], bx
inc edx
add byte [ebx - 0x5fffbde3], cl
sbb eax, 0x1da00042
inc edx
add byte [eax + 0x2a00421d], ah
sub byte [edx], al
jns 0x445dba
inc edx
add byte [ecx + ebp + 0x2adb0042], ch
inc edx
add byte [ecx + ebp + 0x285b0042], ch
inc edx
add ah, ah
sub al, byte [edx]
invalid
inc edx
add byte [ebp + 0x6a004223], dh
and al, 0x42
add cl, ch
and eax, dword [edx]
inc esi
and al, 66
add byte [edi], al
and dword [edx], eax
inc esi
and al, 66
add byte [ecx + 0x24460042], bl
inc edx
add ah, ah
and dword [edx], eax
dec esi
and al, 66
add byte [edx + 0x24], ch
inc edx
add byte [eax + 0x24], dh
inc edx
add byte [esi], ch
sub al, 0x42
add dh, dh
sub eax, dword [edx]
fsubr dword [edx + eax*2]
add dh, ah
sub al, 0x42
add byte [ebp + 0x42], ch
add byte [esi + 0x28], al
sub byte [edx], al
jge 0x445e2b
sub byte [edx], al
jge 0x445e2b
inc edx
add byte [edx + 0x27], dl
inc edx
add byte [esi + 0x37004225], ah
daa
inc edx
add ah, ah
and eax, 0x27020042
inc edx
add byte [eax + 0x26], al
inc edx
add ah, dh
inc edx
add byte [edx], cl
sub byte [edx], al
hlt
add byte [ebp - 0x5dffbde3], dh
sbb eax, 0x1df00042
inc edx
add byte [eax], dh
push ds
inc edx
add byte [esi - 0x45ffbde2], al
push ds
inc edx
add al, dl
push ds
inc edx
add byte [esi + 0x1f], cl
inc edx
add byte [0x4000421f], bl
pop ds
inc edx
add byte [eax], al
pop ds
inc edx
add byte [eax + 0x1f], al
inc edx
add byte [eax + 0x1f], al
inc edx
add byte [edx + 0x1f], al
inc edx
add byte [eax + 0x1f], al
inc edx
add byte [esi + 0x1f], cl
inc edx
add byte [ebx], cl
pop ds
inc edx
add byte [eax + 0x1f], ah
inc edx
add byte [eax + 0x1f], ah
inc edx
add byte [eax + 0x1f], ah
inc edx
add byte [edx + 0x1f], ah
inc edx
add byte [eax + 0x1f], dh
inc edx
add byte [ecx + 0x1f], bh
inc edx
add dl, bh
pop ds
inc edx
add byte [ebx], al
and byte [edx], al
add dword [eax], eax
add byte [eax], al
add dword [eax], eax
add byte [eax], al
add dword [eax], eax
add byte [eax], al
jo 0x445ebd
inc edx
add cl, ch
and byte [edx], al
mov byte [0x421d], al
daa
inc edx
add byte [eax], al
daa
inc edx
add byte [eax], al
daa
inc edx
add byte [edx], al
daa
inc edx
add byte [eax], dl
daa
inc edx
add byte [eax], dl
daa
inc edx
add byte [edx], dl
daa
inc edx
add byte [eax], dl
daa
inc edx
add byte [ecx], ah
daa
inc edx
add byte [edi], dh
daa
inc edx
add byte [0x48004227], bh
daa
inc edx
add byte [eax + 0x27], dl
inc edx
add byte [eax + 0x27], dl
inc edx
add byte [eax + 0x27], dl
inc edx
add byte [edx + 0x27], dl
inc edx
add byte [eax + ebp], dh
inc edx
add byte [eax + 0x28], al
inc edx
add byte [eax + 0x28], al
inc edx
add byte [eax + 0x28], al
inc edx
add byte [ebx + 0x40004224], al
sub byte [edx], al
sahf
and al, 66
add byte [esi + 0x53004224], ch
and eax, 0x24a40042
inc edx
add byte [ebp + 0x7600422f], bl
and eax, 0x2f9d0042
inc edx
add byte [edx], ch
sub byte [edx], al
stc
xor eax, dword [edx]
xor al, 0x42
add bh, bh
xor eax, dword [edx]
or dh, byte [edx + eax*2]
add ah, ch
xor eax, 0x36100042
inc edx
add byte [eax - 0x42ffbdc5], dh
cmp eax, dword [edx]
sar byte [ebx], 1
inc edx
add byte [eax - 0x4fffbdc5], dh
cmp al, byte [edx]
mov al, byte [0x50004237]
inc edx
add dl, dl
aaa
inc edx
add dl, dh
aaa
inc edx
add byte [edx], al
cmp byte [edx], al
inc edx
add byte [esi + esi + 66], ah
add byte [edi + 0x37], ch
inc edx
add byte [eax + 0x37], bh
inc edx
add byte [edx + eax*2], bl
inc edx
add byte [edx + eax*2], dh
inc edx
add byte [edx + eax*2], bl
inc edx
add byte [esi], ah
inc edx
add byte [esi + esi], ch
inc edx
add byte [edi], dh
inc edx
add byte [eax], al
cmp byte [edx], al
add byte [eax], bh
inc edx
add byte [eax], al
cmp byte [edx], al
push eax
inc edx
add byte [esi + 0x36], dl
inc edx
add byte [eax - 0xbffbdc6], dh
xor eax, 0x37900042
inc edx
add byte [eax], ah
xor al, 0x42
add byte [edx + 0x7004237], bl
aas
inc edx
add al, ah
cmp eax, dword [edx]
loopne 0x445ff5
inc edx
add byte [eax + 0x3b], ah
inc edx
add byte [edi + 0x3b], dh
inc edx
add byte [eax], ah
inc edx
add byte [esi + 0x2000423b], al
xor al, 0x42
add byte [edx + 0x65], ah
inc edx
add byte [ebp + 0x26004264], dl
inc edx
add byte [ebp + 0x5afc0042], ah
inc edx
add byte [0xa004261], cl
pop edx
inc edx
add byte [edx - 0x27ffbda2], al
pop edx
inc edx
add byte [ecx], dh
popal
inc edx
add byte [edx + ebx*2 + 0x64710042], dh
inc edx
add byte [esi - 0x19ffbda8], bh
pushal
inc edx
add byte [edx], bh
inc dx
add byte [ecx], cl
inc edx
add byte [esi + 0x5e], bl
inc edx
add byte [esi], dl
inc dx
add byte [edx + 0x5b], dl
inc edx
add dh, ah
pop ecx
inc edx
add byte [edx + 0x5a], al
inc edx
add byte [ecx + 0x5f], ch
inc edx
add ah, ch
pop esi
inc edx
add bh, bh
pop edi
inc edx
add byte [esi], ah
pushal
inc edx
add byte [ecx], ch
pop ecx
inc edx
add al, cl
pop esi
inc edx
add byte [ebp + 0x5f], al
inc edx
add ch, ah
pop eax
inc edx
add byte [ebp + 0x64], cl
inc edx
add byte [esi - 0x34ffbd9a], al
inc edx
add byte [ebx + 0x61], bl
inc edx
add al, bl
pop edi
inc edx
add byte [eax - 0x4bffbda1], dl
pop edi
inc edx
add byte [eax - 0xffbda6], dl
arpl word [edx], ax
jns 0x4460c5
inc edx
add dl, dh
inc edx
add byte [edx + 0x23004266], ch
pop ebx
inc edx
add byte [edx - 0x59ffbd9f], al
pop esi
inc edx
add byte [ebp + 0x60], cl
inc edx
add byte [edx + 0x7900425d], bl
inc edx
add byte [0x6004265], ch
bound eax, qword [edx]
or al, 0x59
inc edx
add ah, ah
inc edx
add byte [esp + 0x594d0042], bh
inc edx
add byte [eax + 0x61004259], al
inc dx
add byte [esi + 0x5a], ah
inc edx
add byte [ecx + 0x2e004259], ch
pop edx
inc edx
add dl, cl
pop ebp
inc edx
add byte [ebp + 0x1300425b], bl
pop edi
inc edx
add byte [edi + 0x65], cl
inc edx
inc edx
add ah, cl
jns 0x44610d
add byte [ecx + edi*2 + 0x42], dl
add byte [ebp + 0x6e], ah
inc edx
add byte [ebx], al
jno 0x446119
add dl, cl
jbe 0x44611d
add byte [ecx], bl
je 0x446121
add ah, al
outsd dx, dword [esi]
inc edx
add byte [ebp - 0x3effbd89], al
jne 0x44612d
add byte [ebp + 0x3a004275], bl
ja 0x446135
add byte [esi + ebp*2 + 0x71640042], cl
inc edx
add byte [eax + 0x76004271], ch
jp 0x446145
add byte [eax + 0x70], bh
inc edx
add byte [ebx - 0x44ffbd8e], bl
jp 0x446151
add byte [edi - 0x4cffbd8e], bh
outsb dx, byte [esi]
inc edx
add byte [esi], dl
jne 0x44615d
add bl, ah
jns 0x446161
add byte [esi + 0x76], bh
inc edx
jbe 0x446165
add ah, bl
jo 0x446169
add byte [esi + esi*2], cl
inc edx
add byte [edi], cl
jo 0x446171
add al, ch
outsd dx, dword [esi]
inc edx
add byte [eax], dh
jbe 0x446179
add byte [esi], al
outsd dx, dword [esi]
inc edx
add byte [esi + 0x4000426d], bh
je 0x446185
add dl, dl
je 0x446189
add byte [ebx + 0x79], bh
inc edx
add byte [edx + esi*2 + 0x42], dh
add byte [edx + esi*2], dl
inc edx
jb 0x446195
add byte [esi], dl
ja 0x446199
add byte [ecx + 0x7004277], ch
jp 0x4461a1
add byte [esi], ch
jp 0x4461a5
add dh, ah
jb 0x4461a9
add byte [eax + 0x6f], dh
outsd dx, dword [esi]
inc edx
add byte [0x64004271], bh
je 0x4461b5
add al, ch
jne 0x4461b9
add al, dh
jno 0x4461bd
add byte [edi + 0x5e00426d], dl
ja 0x4461c5
add ch, bh
js 0x4461c9
add ah, cl
jno 0x4461cd
add byte [edx + 0x7a], dl
inc edx
add byte [edi + 0x76], dl
inc edx
add byte [esi - 0x32ffbd8c], ch
je 0x4461d9
add ch, cl
ja 0x4461dd
add byte [esi + 0x75], dh
inc edx
add byte [edi + 0x78], dh
inc edx
js 0x4461e5
add byte [ebx + 0x6d], dh
insd dword es:[edi], dx
inc edx
add cl, bl
js 0x4461ed
add byte [edi + ebp*2 + 0x42], cl
add byte [edx], ch
jno 0x4461f5
add byte [edx], cl
jae 0x4461f9
add bh, bl
jp 0x4461fd
add byte [0x51004275], bh
jae 0x446205
jne 0x446201
add byte [ecx + 0x73], dl
inc edx
add byte [esi + ebp*2], al
outsb dx, byte [esi]
inc edx
add byte [ebx], bh
jb 0x44620d
add byte [eax - 0xeffbd8c], cl
je 0x446211
add cl, dh
ja 0x446215
add byte [edi + 0x78], cl
inc edx
add byte [edi + 0x2a00426f], dl
outsd dx, dword [esi]
inc edx
add byte [edx], ch
outsd dx, dword [esi]
inc edx
add byte [edx - 0x6ffbd8a], ah
je 0x446229
add ch, cl
jae 0x44622d
add byte [edx + 0x33004270], bh
jo 0x446231
add byte [ebx], dh
jo 0x446235
add dl, ah
insd dword es:[edi], dx
inc edx
add cl, dh
jbe 0x44623d
add byte [edx - 0x61ffbd87], ah
jns 0x446241
add byte [esi - 0x74ffbd88], bl
js 0x446245
add byte [ebx + 0x4004271], cl
jnp 0x44624d
jno 0x446249
add byte [ebx + edi*2], al
inc edx
add bh, dh
jae 0x446251
add dl, bl
outsb dx, byte [esi]
inc edx
add byte [0x9a004273], bh
jp 0x44625d
jae 0x446259
add byte [edx - 0x60ffbd86], bl
jo 0x446261
add byte [edi + 0x24004270], bl
jns 0x446265
inc edx
add byte [ecx + edi*2], ah
inc edx
add byte [ebp + 0x70], bl
inc edx
add dl, ch
jae 0x44626d
add bl, ch
jle 0x446271
add dh, ah
jle 0x446275
add bl, al
add byte [edx], 0x1b
test byte [edx], al
stosd dword es:[edi], eax
test byte [edx], al
mov esp, 0x11004284
test byte [edx], al
adc dword [ebp - 0x7aeeffbe], eax
inc edx
add byte [esi], ch
test dword [edx], eax
adc dword [ebp - 0x7bd1ffbe], eax
inc edx
add byte [ecx], dl
test dword [edx], eax
test byte cs:[edx], al
test byte [edx], al
adc dword [ebp - 0x7beaffbe], eax
inc edx
add byte [ecx - 0x5b], dh
test dword [edx], eax
adc eax, 0x71004284
movsd dword es:[edi], dword [esi]
inc edx
add ah, bl
mov byte [0xa2f40042], al
inc edx
add dl, bh
mov byte [0xa2fa0042], al
inc edx
add byte [ebx], bl
mov byte [0xa31c0042], al
inc edx
add dl, dh
mov byte [0x80be0042], al
inc edx
add byte [ebp - 0x7a], ch
inc edx
add dl, ah
movsb byte es:[edi], byte [esi]
add byte [edx], 0x6d
xchg byte [edx], al
loop 0x44621e
inc edx
add ch, bh
xchg byte [edx], al
in al, 0x89
inc edx
add bh, bl
mov dword [edx], eax
pushal
xchg ecx, eax
inc edx
add byte [eax - 0x6f], ah
inc edx
add byte [esi + 0x50004291], bl
xchg edx, eax
inc edx
add byte [ebx - 0x5cffbd6f], dh
xchg edx, eax
inc edx
add ah, al
xchg ecx, eax
inc edx
add byte [edx], bl
xchg ebx, eax
inc edx
add byte [eax - 0x6f], dl
inc edx
add byte [esi - 0x6d], cl
inc edx
add byte [ebx + edx*4 + 0x42], dl
add byte [ebp - 0x6d], ch
inc edx
add byte [esi + 0x6d004290], dl
xchg ebx, eax
inc edx
add byte [eax - 0xfffbd58], ah
xchg edi, eax
inc edx
add byte [esi], al
cwde
inc edx
add byte [esi], al
cwde
inc edx
add byte [eax], ah
cwde
inc edx
add byte [eax], dh
cwde
inc edx
add dl, bh
cdq
inc edx
add dl, bh
cdq
inc edx
add dl, bh
cdq
inc edx
add dl, dl
cdq
inc edx
add byte [0xa000429a], ah
test al, 0x42
add byte [eax + 0x340042a8], ah
test dword [edx], eax
pop edx
test dword [edx], eax
mov al, byte [0xa00042a8]
test al, 66
add byte [edx + 0x1004285], ch
add byte [eax], al
add byte [edx - 0x2dffbd7b], ch
test dword [edx], eax
rol byte [ebp - 0x7a3fffbe], 0x42
add dh, al
test dword [edx], eax
mov byte [ebp - 0x7a39ffbe], 0x42
add byte [esi - 1996471654], bl
test dword [edx], eax
sahf
lcall 66, 0x9a490042
sahf
lcall 66, 0x9ecc0042
invalid
mov dword [edx], eax
in al, 0x89
inc edx
add byte [esi + 0x60004290], dl
xchg ecx, eax
inc edx
add byte [eax - 0x6f], dl
inc edx
add byte [esi - 0x4cffbd6f], bl
xchg ecx, eax
inc edx
add byte [eax - 0x6e], dl
inc edx
add ah, al
xchg ecx, eax
inc edx
add byte [ebx + 0x4e004292], ah
xchg ebx, eax
inc edx
add byte [eax - 0x6f], ah
inc edx
add byte [ebx + edx*4 + 0x42], dl
add byte [ebp - 0x6d], ch
inc edx
add byte [esi], al
cwde
inc edx
add al, dh
xchg edi, eax
inc edx
add byte [eax], dh
cwde
inc edx
add byte [eax], ah
cwde
inc edx
add dl, dl
cdq
inc edx
add dl, bh
cdq
inc edx
add byte [0x3400429a], ah
test dword [edx], eax
dec ecx
lcall 66, 0x85340042
pop edx
test dword [edx], eax
stosb byte es:[edi], al
test dword [edx], eax
mov dword [ebp - 0x7a55ffbe], eax
inc edx
add byte [ecx], al
add byte [eax], al
add byte [ecx], al
add byte [eax], al
add byte [ecx], al
add byte [eax], al
add byte [edx - 0x3fffbd7b], ch
test dword [edx], eax
rol byte [ebp - 0x7a3fffbe], cl
inc edx
add al, al
test dword [edx], eax
mov byte [ebp - 0x7a3fffbe], 0x42
add bh, al
sahf
inc edx
add ah, cl
sahf
inc edx
add bl, cl
mov byte [0xa2d40042], al
inc edx
add byte [edi + edi*4 - 0x3fb6ffbe], bh
inc edx
add bl, ah
salc
inc edx
add ah, ah
enter 0x42, 0xffffffffffffffe1
lodsd eax, dword [esi]
inc edx
add byte [ebx], ch
scasb al, byte es:[edi]
inc edx
add byte [eax - 0x46], bl
inc edx
add byte [ecx - 0x51ffbd46], cl
fadd qword [edx]
aam 0x42
add byte [edi - 1375714615], dl
fadd qword [edx]
jo 0x44695f
inc edx
add byte [ecx], ah
lds eax, [edx]
fidivr dword [edx - 0x2614ffbe]
inc edx
add byte [edi + 0x4c0042c9], dh
leave
inc edx
add byte [edi + 0x700042d5], cl
into
inc edx
add byte [eax - 0x32], dh
inc edx
add byte [edx - 0x38], ah
inc edx
add byte [edi], bl
into
inc edx
add ah, bh
mov ecx, 0xd98f0042
inc edx
add ah, bh
mov ecx, 0xce040042
inc edx
add byte [ebp - 0x2b], cl
inc edx
add byte [0xc90042d0], cl
mov ecx, 0xd00d0042
inc edx
add byte [edx + 0x560042d9], ah
rol byte [edx], 1
sub al, cl
inc edx
add byte [ebp - 0x52ffbd38], dl
xlatb
inc edx
add byte [edi - 0x37ffbd46], bh
fld dword [edx]
int 0xc8
inc edx
add dl, ch
iretd