Function at 0x406b50
Capabilities:
Inspect section memory permissions

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xa8
mov eax, dword [0x42e0e4]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0x10]
mov edx, dword [ebp + 0x14]
push ebx
mov ebx, dword [ebp + 0xc]
push esi
mov esi, dword [ebp + 8]
mov dword [ebp - 0x74], eax
mov eax, dword [eax]
push edi
mov edi, dword [ebp + 0x18]
mov dword [ebp - 0x6c], edi
mov cl, byte [eax]
inc eax
mov edi, dword [ebp - 0x74]
mov dword [ebp - 0x7c], edx
mov dword [ebp - 0x78], eax
mov dword [edi], eax
cmp cl, 0x52
jne case.0x406bb7.66
mov ecx, eax
mov al, byte [ecx]
inc ecx
movsx eax, al
add eax, 0xffffffbf
mov dword [edi], ecx
mov edi, dword [ebp - 0x6c]
mov dword [ebp - 0x80], ecx
cmp eax, 0x36
ja case.0x406bb7.66
movzx eax, byte [eax + 0x4095f4]
jmp dword [eax*4 + 0x4095cc]
push 5
push 0x40d781
push dword [ebp - 0x78]
mov dword [ebp - 0x98], 0
mov dword [ebp - 0x8c], 0x3f
mov dword [ebp - 0x84], 0x20
call sym.tstVBoxGINA.exe_nocrt_strncmp
add esp, 0xc
test eax, eax
je 0x406c64
mov ecx, dword [ebp - 0x98]
cmp dword [ebp - 0x8c], ecx
je case.0x406bb7.66
test eax, eax
jns 0x406c17
mov eax, dword [ebp - 0x84]
dec eax
mov dword [ebp - 0x8c], eax
jmp 0x406c2a
mov ecx, dword [ebp - 0x84]
mov eax, dword [ebp - 0x8c]
inc ecx
mov dword [ebp - 0x98], ecx
cmp eax, ecx
jl case.0x406bb7.66
sub eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
mov dword [ebp - 0x84], eax
lea edx, [eax + eax*2]
movzx ecx, byte [edx*8 + 0x40d480]
lea eax, [edx*8 + 0x40d481]
push ecx
push eax
push dword [ebp - 0x78]
call sym.tstVBoxGINA.exe_nocrt_strncmp
add esp, 0xc
test eax, eax
jne 0x406bf2
mov eax, dword [ebp - 0x84]
mov ecx, dword [ebp - 0x74]
push 0x10
push 0
lea edx, [eax + eax*2]
shl edx, 3
mov dword [ebp - 0x78], edx
movzx eax, byte [edx + 0x40d480]
dec eax
add dword [ecx], eax
movzx eax, word [edx + 0x40d494]
mov ecx, dword [ebp + 0x20]
or ecx, eax
lea eax, [ebp - 0x64]
push eax
mov dword [ebp - 0x68], ecx
call sym.tstVBoxGINA.exe_nocrt_memset
mov eax, dword [ebp - 0x78]
add esp, 0xc
mov edx, dword [ebp - 0x68]
movzx eax, byte [eax + 0x40d48b]
dec eax
test dl, 0x10
je 0x406d56
cmp eax, 7
ja case.0x406d5b.2
jmp dword [eax*4 + 0x40962c]
mov ecx, dword [ebp - 0x7c]
mov eax, dword [ecx]
add eax, 4
mov dword [ecx], eax
mov eax, dword [eax - 4]
cdq
mov dword [ebp - 0x60], edx
mov ecx, eax
mov edx, dword [ebp - 0x68]
or edx, 0x800
mov dword [ebp - 0x64], ecx
mov dword [ebp - 0x68], edx
jmp 0x406d7e
mov ecx, dword [ebp - 0x7c]
mov eax, dword [ecx]
add eax, 4
mov dword [ecx], eax
mov eax, dword [eax - 4]
cdq
mov dword [ebp - 0x60], edx
mov ecx, eax
mov edx, dword [ebp - 0x68]
or edx, 0x1000
mov dword [ebp - 0x64], ecx
mov dword [ebp - 0x68], edx
jmp 0x406d7e
mov ecx, dword [ebp - 0x7c]
mov eax, dword [ecx]
add eax, 4
mov dword [ecx], eax
mov eax, dword [eax - 4]
cdq
mov dword [ebp - 0x60], edx
mov ecx, eax
mov edx, dword [ebp - 0x68]
or edx, 0x2000
mov dword [ebp - 0x64], ecx
mov dword [ebp - 0x68], edx
jmp 0x406d7e
mov ecx, dword [ebp - 0x7c]
mov eax, dword [ecx]
add eax, 8
or edx, 0x4000
mov dword [ecx], eax
mov dword [ebp - 0x68], edx
mov ecx, dword [eax - 8]
mov eax, dword [eax - 4]
mov dword [ebp - 0x64], ecx
mov dword [ebp - 0x60], eax
jmp 0x406d7e
cmp eax, 9
ja case.0x406d5b.2
jmp dword [eax*4 + 0x40964c]
mov ecx, dword [ebp - 0x7c]
mov eax, dword [ecx]
add eax, 4
or edx, 0x800
mov dword [ecx], eax
mov al, byte [eax - 4]
mov byte [ebp - 0x64], al
mov dword [ebp - 0x68], edx
mov ecx, dword [ebp - 0x64]
mov dword [ebp - 0x6c], ecx
test edx, 0x400
je 0x406e40
push edx
push dword [ebp + 0x1c]
lea eax, [ebp - 0x54]
push edi
push ecx
push 0x50
push eax
call fcn.0040be10
add esp, 0x18
push eax
lea eax, [ebp - 0x54]
push eax
push ebx
mov ecx, esi
call dword [section..rdata]
call esi
add esp, 0xc
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00401290
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebp - 0x7c]
mov eax, dword [ecx]
add eax, 4
or edx, 0x1000
mov dword [ecx], eax
mov ax, word [eax - 4]
mov word [ebp - 0x64], ax
jmp 0x406d78
mov ecx, dword [ebp - 0x7c]
mov eax, dword [ecx]
add eax, 4
or edx, 0x2000
mov dword [ecx], eax
mov dword [ebp - 0x68], edx
mov ecx, dword [eax - 4]
mov dword [ebp - 0x64], ecx
jmp 0x406d7e
mov ecx, dword [ebp - 0x7c]
mov eax, dword [ecx]
add eax, 8
mov dword [ecx], eax
mov ecx, dword [eax - 8]
mov dword [ebp - 0x64], ecx
mov ax, word [eax - 4]
mov word [ebp - 0x60], ax
jmp 0x406d7e
mov eax, dword [ebp - 0x7c]
mov ecx, dword [eax]
add ecx, 0xc
mov dword [eax], ecx
mov eax, dword [ecx - 0xc]
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x64], eax
mov eax, dword [ecx - 8]
mov dword [ebp - 0x60], eax
mov ax, word [ecx - 4]
mov ecx, dword [ebp - 0x6c]
mov word [ebp - 0x5c], ax
jmp 0x406d81
mov eax, dword [ebp - 0x78]
mov ecx, dword [eax + 0x40d490]
mov dword [ebp - 0x90], ecx
cmp ecx, 0xc
ja case.0x406bb7.66
jmp dword [ecx*4 + 0x409674]
movzx eax, byte [eax + 0x40d48c]
mov ecx, dword [ebp - 0x6c]
push edx
push dword [ebp + 0x1c]
push edi
push eax
push dword [ebp - 0x60]
lea eax, [ebp - 0x54]
push ecx
push eax
call fcn.00402f10
add esp, 0x1c
jmp 0x406da1
test edi, edi
jns 0x406ea0
movzx eax, byte [eax + 0x40d48b]
mov ecx, edx
shr ecx, 2
and ecx, 2
or edx, 4
lea edi, [ecx + eax*2]
mov eax, dword [ebp - 0x78]
movzx eax, byte [eax + 0x40d48c]
push edx
push dword [ebp + 0x1c]
push edi
push eax
push dword [ebp - 0x60]
mov eax, dword [ebp - 0x6c]
push eax
lea eax, [ebp - 0x54]
push eax
call fcn.00402f10
add esp, 0x1c
jmp 0x406da1
mov ecx, dword [ebp - 0x6c]
cmp ecx, 1
jne 0x406f01
cmp dword [ebp - 0x60], 0
jne 0x406f01
and edx, 8
mov ecx, esi
or edx, 0x20
shr edx, 3
push edx
push 0x40da80
push ebx
call dword [section..rdata]
call esi
add esp, 0xc
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00401290
mov esp, ebp
pop ebp
ret
mov eax, ecx
or eax, dword [ebp - 0x60]
jne 0x406f2e
push 5
push 0x40da88
push ebx
mov ecx, esi
call dword [section..rdata]
call esi
add esp, 0xc
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00401290
mov esp, ebp
pop ebp
ret
push dword [ebp - 0x60]
push ecx
push 0x40dc08
push 0
push 0
push ebx
push esi
call fcn.0040bc30
add esp, 0x1c
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00401290
mov esp, ebp
pop ebp
ret
movzx eax, word [ebp - 0x62]
and edx, 0xffff146f
or edx, 0x1000
push edx
push 0xffffffffffffffff
push 4
mov dword [ebp - 0x68], edx
cdq
push 0x10
push edx
push eax
lea eax, [ebp - 0x54]
push eax
call fcn.00402f10
mov ecx, dword [ebp - 0x68]
movzx eax, word [ebp - 0x64]
push ecx
push 0xffffffffffffffff
push 4
cdq
push 0x10
push edx
push eax
lea eax, [ebp - 0x4f]
mov byte [ebp - 0x50], 0x3a
push eax
call fcn.00402f10
mov eax, 9
add esp, 0x38
jmp 0x406da1
movzx eax, word [ebp - 0x60]
and edx, 0xffff046f
mov dword [ebp - 0x68], edx
or edx, 0x1000
push edx
push 0xffffffffffffffff
push 4
cdq
push 0x10
push edx
push eax
lea eax, [ebp - 0x54]
push eax
call fcn.00402f10
mov ecx, dword [ebp - 0x68]
lea eax, [ebp - 0x4f]
or ecx, 0x2000
mov byte [ebp - 0x50], 0x3a
push ecx
push 0xffffffffffffffff
push 8
push 0x10
push 0
push dword [ebp - 0x64]
push eax
call fcn.00402f10
mov eax, 0xd
add esp, 0x38
jmp 0x406da1
movzx eax, word [ebp - 0x5c]
and edx, 0xffff046f
mov dword [ebp - 0x68], edx
or edx, 0x1000
push edx
push 0xffffffffffffffff
push 4
cdq
push 0x10
push edx
push eax
lea eax, [ebp - 0x54]
push eax
call fcn.00402f10
mov ecx, dword [ebp - 0x68]
lea eax, [ebp - 0x4f]
or ecx, 0x4000
mov byte [ebp - 0x50], 0x3a
push ecx
push 0xffffffffffffffff
push 0x10
push 0x10
push dword [ebp - 0x60]
push dword [ebp - 0x64]
push eax
call fcn.00402f10
mov eax, 0x15
add esp, 0x38
jmp 0x406da1
movzx eax, byte [ebp - 0x61]
push eax
movzx eax, byte [ebp - 0x62]
push eax
movzx eax, byte [ebp - 0x63]
push eax
movzx eax, byte [ebp - 0x64]
push eax
push 0x40d470
push 0
push 0
push ebx
push esi
call fcn.0040bc30
add esp, 0x24
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00401290
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebp - 0x6c]
lea eax, [ecx + 0x1000]
cmp eax, 0x2000
jb 0x4070b6
push ecx
push ebx
push esi
call fcn.004067e0
add esp, 0xc
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00401290
mov esp, ebp
pop ebp
ret
push 8
push 0x40dc10
lea eax, [ebp - 0x54]
push eax
push ecx
push edx
push edi
push ebx
push esi
push 0
call fcn.00403f50
add esp, 0x24
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00401290
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebp - 0x6c]
lea eax, [ecx + 0x1000]
cmp eax, 0x2000
jb 0x407132
movzx eax, byte [ecx + 5]
push eax
movzx eax, byte [ecx + 4]
push eax
movzx eax, byte [ecx + 3]
push eax
movzx eax, byte [ecx + 2]
push eax
movzx eax, byte [ecx + 1]
push eax
movzx eax, byte [ecx]
push eax
push 0x40dc1c
push 0
push 0
push ebx
push esi
call fcn.0040bc30
add esp, 0x2c
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00401290
mov esp, ebp
pop ebp
ret
push 7
push 0x40dc3c
jmp 0x4070bd
mov ecx, dword [ebp - 0x6c]
lea eax, [ecx + 0x1000]
cmp eax, 0x2000
jb 0x407231
mov edx, dword [ecx + 0x10]
mov eax, edx
sub eax, 1
je 0x4071ba
sub eax, 1
je 0x407188
sub eax, 2
je 0x4070f1
push edx
push 0x40dc64
push 0
push 0
push ebx
push esi
call fcn.0040bc30
add esp, 0x18
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00401290
mov esp, ebp
pop ebp
ret
mov eax, dword [ecx + 0x14]
cmp eax, 0xffffffff
je 0x40709a
push eax
push ecx
push 0x40dc54
push 0
push 0
push ebx
push esi
call fcn.0040bc30
add esp, 0x1c
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00401290
mov esp, ebp
pop ebp
ret
mov eax, dword [ecx + 0x14]
cmp eax, 0xffffffff
jne 0x4071f9
movzx eax, byte [ecx + 3]
push eax
movzx eax, byte [ecx + 2]
push eax
movzx eax, byte [ecx + 1]
push eax
movzx eax, byte [ecx]
push eax
push 0x40d470
push 0
push 0
push ebx
push esi
call fcn.0040bc30
add esp, 0x24
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00401290
mov esp, ebp
pop ebp
ret
push eax
movzx eax, byte [ecx + 3]
push eax
movzx eax, byte [ecx + 2]
push eax
movzx eax, byte [ecx + 1]
push eax
movzx eax, byte [ecx]
push eax
push 0x40dc44
push 0
push 0
push ebx
push esi
call fcn.0040bc30
add esp, 0x28
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00401290
mov esp, ebp
pop ebp
ret
push 0xb
push 0x40dc80
jmp 0x4070bd
mov ecx, dword [ebp - 0x6c]
lea eax, [ecx + 0x1000]
cmp eax, 0x2000
jb 0x4072a5
movzx eax, byte [ecx + 0xf]
push eax
movzx eax, byte [ecx + 0xe]
push eax
movzx eax, byte [ecx + 0xd]
push eax
movzx eax, byte [ecx + 0xc]
push eax
movzx eax, byte [ecx + 0xb]
push eax
movzx eax, byte [ecx + 0xa]
push eax
movzx eax, byte [ecx + 9]
push eax
movzx eax, byte [ecx + 8]
push eax
movzx eax, word [ecx + 6]
push eax
movzx eax, word [ecx + 4]
push eax
push dword [ecx]
push 0x40dc8c
push 0
push 0
push ebx
push esi
call fcn.0040bc30
add esp, 0x40
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00401290
mov esp, ebp
pop ebp
ret
push 8
push 0x40dcc0
jmp 0x4070bd
mov ecx, dword [ebp - 0x6c]
lea eax, [ecx + 0x1000]
cmp eax, 0x2000
jb case.0x406bb7.66
test ecx, ecx
je case.0x406bb7.66
mov eax, dword [ecx]
and eax, 0xffff0004
cmp eax, 0xbabe0004
jne case.0x406bb7.66
xor edi, edi
cmp dword [ebp - 0x90], 0xb
jne 0x407305
push 0x50
lea eax, [ebp - 0x54]
push eax
push ebx
push esi
push dword [ecx + 4]
call fcn.0040b950
mov ecx, dword [ebp - 0x64]
add esp, 0x14
mov edx, dword [ebp - 0x68]
mov edi, eax
cmp dword [ecx + 8], 0
jbe 0x407358
mov ecx, esi
test dl, 8
je 0x40731b
push 3
push 0x40dccc
jmp 0x407322
push 2
push str.fbI_
push ebx
call dword [section..rdata]
call esi
mov edi, eax
add esp, 0xc
mov eax, dword [ebp - 0x64]
push dword [eax + 8]
push dword [eax + 0xc]
call fcn.0040bdf0
mov ecx, dword [ebp - 0x64]
add esp, 8
push eax
push dword [ecx + 0xc]
push ebx
mov ecx, esi
call dword [section..rdata]
call esi
add esp, 0xc
add edi, eax
mov eax, edi
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00401290
mov esp, ebp
pop ebp
ret
mov al, byte [ecx]
mov byte [ebp - 0x6d], al
lea eax, [ecx + 1]
mov ecx, dword [ebp - 0x74]
mov dword [ecx], eax
mov al, byte [ebp - 0x6d]
cmp al, 0x6e
je 0x4074ed
cmp al, 0x73
jne case.0x406bb7.66
cmp byte [ebp + 0x24], 0x6c
jne case.0x406bb7.66
mov eax, dword [edx]
add eax, 4
mov dword [edx], eax
mov ecx, dword [eax - 4]
mov dword [ebp - 0x8c], ecx
lea eax, [ecx + 0x1000]
cmp eax, 0x2000
jb 0x4073d5
mov edx, dword [ebp + 0x1c]
xor eax, eax
mov dword [ebp - 0x84], eax
test edx, edx
jle 0x4073ea
cmp word [ecx + eax*2], 0
je 0x4073ea
inc eax
mov dword [ebp - 0x84], eax
cmp eax, edx
jl 0x4073c1
jmp 0x4073ea
mov eax, 6
mov dword [ebp - 0x8c], 0x42e118
mov dword [ebp - 0x84], eax
xor ecx, ecx
test byte [ebp + 0x20], 2
mov dword [ebp - 0x80], ecx
jne 0x407436
dec edi
cmp edi, eax
jl 0x407436
mov ecx, edi
sub ecx, eax
inc ecx
sub edi, ecx
mov dword [ebp - 0x78], ecx
mov dword [ebp - 0x6c], edi
xor edi, edi
lea esp, [esp]
push 1
push 0x40d28c
push ebx
mov ecx, esi
call dword [section..rdata]
call esi
add esp, 0xc
add edi, eax
sub dword [ebp - 0x78], 1
jne 0x407410
mov dword [ebp - 0x80], edi
mov edi, dword [ebp - 0x6c]
mov ecx, dword [ebp - 0x80]
mov eax, dword [ebp - 0x84]
sub edi, eax
mov dword [ebp - 0x6c], edi
test eax, eax
jle 0x4074b3
mov edi, eax
jmp 0x407450
lea eax, [ebp - 0x78]
mov dword [ebp - 0x78], 0
push eax
lea eax, [ebp - 0x8c]
dec edi
push eax
call fcn.00406220
mov eax, dword [ebp - 0x78]
add esp, 8
cmp eax, 0x80
jae 0x40747d
mov byte [ebp - 0x54], al
lea eax, [ebp - 0x53]
jmp 0x40748a
push eax
lea eax, [ebp - 0x54]
push eax
call fcn.00405a00
add esp, 8
lea ecx, [ebp - 0x54]
mov byte [eax], 0
sub eax, ecx
push eax
mov eax, ecx
mov ecx, esi
push eax
push ebx
call dword [section..rdata]
call esi
mov ecx, dword [ebp - 0x80]
add esp, 0xc
add ecx, eax
mov dword [ebp - 0x80], ecx
test edi, edi
jg 0x407450
mov edi, dword [ebp - 0x6c]
sub edi, 1
js 0x4074da
push 1
push 0x40d28c
push ebx
mov ecx, esi
call dword [section..rdata]
call esi
mov ecx, dword [ebp - 0x80]
add esp, 0xc
add ecx, eax
sub edi, 1
mov dword [ebp - 0x80], ecx
jns 0x4074b8
pop edi
pop esi
mov eax, ecx
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00401290
mov esp, ebp
pop ebp
ret
mov eax, dword [edx]
add eax, 4
mov dword [edx], eax
mov edx, dword [eax - 4]
mov ecx, edx
lea eax, [edx + 0x1000]
cmp eax, 0x2000
jae 0x40751a
push 0xc
push 0x40dcd4
lea eax, [ebp - 0x54]
push eax
push edx
push dword [ebp + 0x20]
jmp 0x4070c3
mov al, byte [edx]
test al, al
je 0x40754e
cmp al, 0x5c
je 0x407530
cmp al, 0x2f
je 0x407530
cmp al, 0x3a
jne 0x407546
lea esp, [esp]
mov al, byte [ecx + 1]
inc ecx
test al, al
je 0x40754e
cmp al, 0x5c
je 0x407530
cmp al, 0x2f
je 0x407530
cmp al, 0x3a
je 0x407530
mov edx, ecx
mov al, byte [ecx + 1]
inc ecx
test al, al
jne 0x407520
sub ecx, edx
push ecx
push edx
jmp 0x406da6
mov edi, dword [ebp - 0x74]
mov eax, dword [ebp - 0x80]
mov cl, byte [ecx]
inc eax
mov dword [edi], eax
mov edi, dword [ebp - 0x6c]
cmp cl, 0x6e
jne case.0x406bb7.66
mov eax, dword [edx]
add eax, 4
mov dword [edx], eax
xor edx, edx
mov eax, dword [eax - 4]
mov ecx, eax
add eax, 0x1000
cmp eax, 0x2000
jae 0x40759c
push 8
push 0x40dce4
lea eax, [ebp - 0x54]
push eax
push ecx
push dword [ebp + 0x20]
jmp 0x4070c3
mov edi, ecx
mov al, byte [edi]
test al, al
je 0x4075ed
cmp al, 0x28
je 0x4075ed
cmp al, 0x20
je 0x4075bf
cmp al, 9
je 0x4075bf
inc ecx
cmp al, 0x3c
jne 0x4075b8
inc edx
jmp 0x4075e7
cmp al, 0x3e
jne 0x4075e7
dec edx
jmp 0x4075e7
mov al, byte [ecx + 1]
inc ecx
test al, al
je 0x4075e7
cmp al, 0x20
je 0x4075d3
cmp al, 9
je 0x4075d3
cmp al, 0x28
jne 0x4075dd
mov al, byte [ecx + 1]
inc ecx
test al, al
jne 0x4075c7
jmp 0x4075e7
test al, al
je 0x4075e7
test edx, edx
jne 0x4075e7
mov edi, ecx
mov al, byte [ecx]
test al, al
jne 0x4075a4
sub ecx, edi
push ecx
push edi
jmp 0x406da6
mov al, byte [ecx]
mov byte [ebp - 0x85], al
lea eax, [ecx + 1]
mov ecx, dword [ebp - 0x74]
mov dword [ebp - 0x90], eax
mov dword [ecx], eax
movsx eax, byte [ebp - 0x85]
add eax, 0xffffffa8
cmp eax, 0x20
ja case.0x406bb7.66
movzx eax, byte [eax + 0x4096b8]
jmp dword [eax*4 + 0x4096a8]
mov eax, dword [edx]
add eax, 4
mov dword [edx], eax
mov edx, dword [ebp + 0x1c]
mov dword [ebp - 0x80], edx
mov ecx, dword [eax - 4]
mov dword [ebp - 0x68], ecx
test edx, edx
jns 0x40764c
mov edx, 0x10
mov dword [ebp - 0x80], edx
cmp byte [ebp - 0x85], 0x78
mov dword [ebp - 0x78], edx
jne 0x407674
mov dword [ebp - 0x8c], ecx
mov dword [ebp - 0x84], 0
mov dword [ebp - 0x9c], 8
jmp 0x4076ce
mov ecx, dword [ebp - 0x7c]
add eax, 8
mov dword [ecx], eax
mov ecx, dword [eax - 8]
mov eax, dword [eax - 4]
mov dword [ebp - 0x8c], ecx
mov dword [ebp - 0x84], eax
test eax, eax
ja 0x4076c1
jb 0x407699
cmp ecx, 0xffffffff
ja 0x4076c1
mov ecx, dword [ebp - 0x78]
xor eax, eax
add ecx, dword [ebp - 0x8c]
adc eax, dword [ebp - 0x84]
test eax, eax
ja 0x4076c1
jb 0x4076b5
cmp ecx, 0xffffffff
ja 0x4076c1
mov dword [ebp - 0x9c], 8
jmp 0x4076cb
mov dword [ebp - 0x9c], 0x10
mov ecx, dword [ebp - 0x68]
test ecx, ecx
je 0x407d15
mov eax, dword [ebp - 0x74]
mov edi, dword [ebp - 0x74]
mov eax, dword [eax]
mov dl, byte [eax]
inc eax
mov dword [edi], eax
mov al, dl
mov edi, dword [ebp - 0x6c]
mov edx, dword [ebp - 0x80]
cmp al, 0x44
je 0x407a60
cmp al, 0x64
je 0x407857
cmp al, 0x73
jne case.0x406bb7.66
mov edi, edx
dec edi
cmp dword [ebp - 0x78], 0
jbe case.0x406bb7.66
cmp byte [ebp - 0x85], 0x78
lea eax, [ecx + 1]
mov dword [ebp - 0x7c], eax
movzx eax, byte [ecx]
push eax
jne 0x407738
push 0x40dd4c
push 0
push 0
push ebx
push esi
call fcn.0040bc30
add esp, 0x18
jmp 0x40775d
push dword [ebp - 0x84]
push dword [ebp - 0x8c]
push dword [ebp - 0x9c]
push 0x40dd54
push 0
push 0
push ebx
push esi
call fcn.0040bc30
add esp, 0x24
mov dword [ebp - 0x74], eax
mov eax, dword [ebp + 0x20]
test eax, 0x208
jne 0x4077b3
test edi, edi
jle 0x407841
mov eax, dword [ebp - 0x7c]
movzx eax, byte [eax]
push eax
push 0x40dd0c
push 0
push 0
push ebx
push esi
call fcn.0040bc30
mov ecx, dword [ebp - 0x74]
dec edi
add ecx, eax
add esp, 0x18
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x74], ecx
mov dword [ebp - 0x7c], eax
test edi, edi
jg 0x407775
pop edi
pop esi
mov eax, ecx
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00401290
mov esp, ebp
pop ebp
ret
and eax, 8
test edi, edi
jle 0x407841
test eax, eax
mov eax, dword [ebp - 0x7c]
je 0x407803
movzx eax, byte [eax]
push eax
push 0x40dd4c
push 0
push 0
push ebx
push esi
call fcn.0040bc30
mov ecx, dword [ebp - 0x74]
dec edi
add ecx, eax
add esp, 0x18
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x74], ecx
mov dword [ebp - 0x7c], eax
test edi, edi
jg 0x4077c5
pop edi
pop esi
mov eax, ecx
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00401290
mov esp, ebp
pop ebp
ret
movzx eax, byte [eax]
push eax
push 0x40dd64
push 0
push 0
push ebx
push esi
call fcn.0040bc30
mov ecx, dword [ebp - 0x74]
dec edi
add ecx, eax
add esp, 0x18
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x74], ecx
mov dword [ebp - 0x7c], eax
test edi, edi
jg 0x407803
pop edi
pop esi
mov eax, ecx
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00401290
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebp - 0x74]
mov eax, ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00401290
mov esp, ebp
pop ebp
ret
xor eax, eax
xor ecx, ecx
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x7c], ecx
test edi, edi
jg 0x40786c
mov dword [ebp - 0x6c], 0x10
cmp dword [ebp - 0x78], eax
jbe 0x4074da
jmp 0x407880
cdq
mov ecx, 0x40dcf0
add eax, dword [ebp - 0x8c]
adc edx, dword [ebp - 0x84]
cmp dword [ebp - 0x74], 0
jne 0x40789d
mov ecx, 0x40d2e0
push dword [ebp - 0x74]
push edx
push eax
push dword [ebp - 0x9c]
push ecx
push 0x40dcf4
push 0
push 0
push ebx
push esi
call fcn.0040bc30
add dword [ebp - 0x7c], eax
xor ecx, ecx
mov edi, dword [ebp - 0x6c]
add esp, 0x28
mov dword [ebp - 0x78], ecx
test edi, edi
je 0x4079a3
mov edx, dword [ebp - 0x74]
mov eax, dword [ebp - 0x68]
sub edx, eax
mov dword [ebp - 0x90], edx
lea ecx, [ecx]
lea edx, [ecx + eax]
mov eax, dword [ebp - 0x90]
add eax, edx
cmp eax, dword [ebp - 0x80]
jge 0x407954
movzx edx, byte [edx]
test cl, 7
jne 0x407901
mov eax, 0x40dd04
test ecx, ecx
jne 0x407906
mov eax, 0x40dd0c
push edx
push eax
push 0
push 0
push ebx
push esi
call fcn.0040bc30
mov ecx, dword [ebp - 0x7c]
add esp, 0x18
add ecx, eax
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x7c], ecx
mov dword [ebp - 0xa0], ecx
mov ecx, dword [ebp - 0x78]
inc ecx
mov dword [ebp - 0x78], ecx
cmp ecx, edi
jl 0x4078e0
push 1
push 0x40d28c
push ebx
mov ecx, esi
call dword [section..rdata]
call esi
mov ecx, eax
add esp, 0xc
add ecx, dword [ebp - 0xa0]
mov dword [ebp - 0x7c], ecx
jmp 0x4079c4
cmp ecx, edi
jge 0x4079a3
mov eax, edi
mov edi, dword [ebp - 0x7c]
sub eax, ecx
mov dword [ebp - 0x78], eax
push 3
push 0x40dd14
push ebx
mov ecx, esi
call dword [section..rdata]
call esi
add esp, 0xc
add edi, eax
sub dword [ebp - 0x78], 1
jne 0x407962
push 1
push 0x40d28c
push ebx
mov ecx, esi
mov dword [ebp - 0x90], edi
call dword [section..rdata]
call esi
mov ecx, eax
add esp, 0xc
add ecx, edi
mov dword [ebp - 0x7c], ecx
jmp 0x4079c4
push 1
push 0x40d28c
push ebx
mov ecx, esi
call dword [section..rdata]
call esi
mov ecx, dword [ebp - 0x7c]
add esp, 0xc
add ecx, eax
mov dword [ebp - 0x7c], ecx
test edi, edi
je 0x407a39
mov eax, dword [ebp - 0x68]
mov edx, eax
mov edi, dword [ebp - 0x74]
mov dword [ebp - 0x78], edi
sub dword [ebp - 0x78], eax
mov edi, dword [ebp - 0x6c]
mov dword [ebp - 0xa4], edx
mov dword [ebp - 0x98], 0
mov eax, dword [ebp - 0x78]
add eax, edx
cmp eax, dword [ebp - 0x80]
jge 0x407a39
mov al, byte [edx]
mov byte [ebp - 0x6d], al
sub al, 0x20
cmp al, 0x5e
lea eax, [ebp - 0x6d]
jbe 0x407a02
mov eax, 0x40dd18
push 1
push eax
push ebx
mov ecx, esi
call dword [section..rdata]
call esi
mov ecx, dword [ebp - 0x7c]
add esp, 0xc
mov edx, dword [ebp - 0xa4]
add ecx, eax
mov eax, dword [ebp - 0x98]
inc edx
inc eax
mov dword [ebp - 0x7c], ecx
mov dword [ebp - 0x98], eax
mov dword [ebp - 0xa4], edx
cmp eax, edi
jl 0x4079e5
mov eax, dword [ebp - 0x74]
add dword [ebp - 0x68], edi
add eax, edi
mov dword [ebp - 0x74], eax
cmp eax, dword [ebp - 0x80]
jl 0x407880
pop edi
pop esi
mov eax, ecx
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00401290
mov esp, ebp
pop ebp
ret
xor eax, eax
mov dword [ebp - 0x98], 0
xor ecx, ecx
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x7c], ecx
test edi, edi
jg 0x407a80
mov edi, 0x10
mov dword [ebp - 0x6c], edi
sub edx, edi
mov dword [ebp - 0xa4], edx
cmp dword [ebp - 0x78], eax
jbe 0x4074da
mov edx, dword [ebp - 0x68]
cmp eax, dword [ebp - 0xa4]
jge 0x407af3
test eax, eax
jle 0x407af3
mov eax, edx
push edi
sub eax, edi
push eax
push edx
call sym.tstVBoxGINA.exe_nocrt_memcmp
add esp, 0xc
test eax, eax
jne 0x407af3
mov eax, dword [ebp - 0x98]
test eax, eax
jne 0x407ae4
mov eax, dword [ebp - 0x74]
add eax, edi
cmp eax, dword [ebp - 0xa4]
jge 0x407b29
mov eax, dword [ebp - 0x68]
push edi
push eax
add eax, edi
push eax
call sym.tstVBoxGINA.exe_nocrt_memcmp
add esp, 0xc
test eax, eax
jne 0x407b29
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x98], eax
jmp 0x407ce9
mov eax, dword [ebp - 0x98]
test eax, eax
jle 0x407b29
push eax
push 0x40dd1c
push dword [ebp - 0x9c]
push 0x40dd30
push 0
push 0
push ebx
push esi
call fcn.0040bc30
add esp, 0x20
mov dword [ebp - 0x98], 0
add dword [ebp - 0x7c], eax
mov eax, dword [ebp - 0x74]
mov ecx, dword [ebp - 0x74]
cdq
add eax, dword [ebp - 0x8c]
mov dword [ebp - 0x78], 0x40dcf0
adc edx, dword [ebp - 0x84]
test ecx, ecx
jne 0x407b4e
mov dword [ebp - 0x78], 0x40d2e0
push ecx
push edx
push eax
push dword [ebp - 0x9c]
push dword [ebp - 0x78]
push 0x40dcf4
push 0
push 0
push ebx
push esi
call fcn.0040bc30
add dword [ebp - 0x7c], eax
xor ecx, ecx
add esp, 0x28
mov dword [ebp - 0x78], ecx
test edi, edi
je 0x407c53
mov edx, dword [ebp - 0x74]
mov eax, dword [ebp - 0x68]
sub edx, eax
mov dword [ebp - 0x90], edx
jmp 0x407b90
lea edx, [ecx + eax]
mov eax, dword [ebp - 0x90]
add eax, edx
cmp eax, dword [ebp - 0x80]
jge 0x407c04
movzx edx, byte [edx]
test cl, 7
jne 0x407bb1
mov eax, 0x40dd04
test ecx, ecx
jne 0x407bb6
mov eax, 0x40dd0c
push edx
push eax
push 0
push 0
push ebx
push esi
call fcn.0040bc30
mov ecx, dword [ebp - 0x7c]
add esp, 0x18
add ecx, eax
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x7c], ecx
mov dword [ebp - 0xa0], ecx
mov ecx, dword [ebp - 0x78]
inc ecx
mov dword [ebp - 0x78], ecx
cmp ecx, edi
jl 0x407b90
push 1
push 0x40d28c
push ebx
mov ecx, esi
call dword [section..rdata]
call esi
mov ecx, eax
add esp, 0xc
add ecx, dword [ebp - 0xa0]
mov dword [ebp - 0x7c], ecx
jmp 0x407c74
cmp ecx, edi
jge 0x407c53
mov eax, edi
mov edi, dword [ebp - 0x7c]
sub eax, ecx
mov dword [ebp - 0x78], eax
push 3
push 0x40dd14
push ebx
mov ecx, esi
call dword [section..rdata]
call esi
add esp, 0xc
add edi, eax
sub dword [ebp - 0x78], 1
jne 0x407c12
push 1
push 0x40d28c
push ebx
mov ecx, esi
mov dword [ebp - 0x90], edi
call dword [section..rdata]
call esi
mov ecx, eax
add esp, 0xc
add ecx, edi
mov dword [ebp - 0x7c], ecx
jmp 0x407c74
push 1
push 0x40d28c
push ebx
mov ecx, esi
call dword [section..rdata]
call esi
mov ecx, dword [ebp - 0x7c]
add esp, 0xc
add ecx, eax
mov dword [ebp - 0x7c], ecx
test edi, edi
je 0x407ce9
mov eax, dword [ebp - 0x68]
mov edx, eax
mov edi, dword [ebp - 0x74]
mov dword [ebp - 0x78], edi
sub dword [ebp - 0x78], eax
mov edi, dword [ebp - 0x6c]
mov dword [ebp - 0x90], edx
mov dword [ebp - 0xa0], 0
mov eax, dword [ebp - 0x78]
add eax, edx
cmp eax, dword [ebp - 0x80]
jge 0x407ce9
mov al, byte [edx]
mov byte [ebp - 0x6d], al
sub al, 0x20
cmp al, 0x5e
lea eax, [ebp - 0x6d]
jbe 0x407cb2
mov eax, 0x40dd18
push 1
push eax
push ebx
mov ecx, esi
call dword [section..rdata]
call esi
mov ecx, dword [ebp - 0x7c]
add esp, 0xc
mov edx, dword [ebp - 0x90]
add ecx, eax
mov eax, dword [ebp - 0xa0]
inc edx
inc eax
mov dword [ebp - 0x7c], ecx
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0x90], edx
cmp eax, edi
jl 0x407c95
mov eax, dword [ebp - 0x74]
mov edx, dword [ebp - 0x68]
add eax, edi
add edx, edi
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x68], edx
cmp eax, dword [ebp - 0x80]
jl 0x407a94
pop edi
pop esi
mov eax, ecx
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00401290
mov esp, ebp
pop ebp
ret
push 6
push 0x40dd6c
jmp 0x406da6
mov eax, dword [edx]
add eax, 4
mov dword [edx], eax
mov edi, dword [eax - 4]
mov eax, dword [ecx]
movsx edx, byte [eax]
inc eax
mov dword [ecx], eax
sub edx, 0x61
je 0x407d8a
sub edx, 2
je 0x407d68
sub edx, 3
jne case.0x406bb7.66
push 0x50
lea eax, [ebp - 0x54]
push eax
push ebx
push esi
push edi
call fcn.0040ba00
add esp, 0x14
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00401290
mov esp, ebp
pop ebp
ret
push 0x50
lea eax, [ebp - 0x54]
push eax
push ebx
push esi
push edi
call fcn.0040ba00
add esp, 0x14
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00401290
mov esp, ebp
pop ebp
ret
push 0x50
lea eax, [ebp - 0x54]
push eax
push ebx
push esi
push edi
call fcn.0040bb10
add esp, 0x14
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00401290
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x68], 0
mov dword [ebp - 0x74], 0
mov dl, byte [eax]
inc eax
mov dword [ecx], eax
mov al, dl
mov byte [ebp - 0x6d], dl
mov edx, dword [ebp - 0x7c]
cmp al, 0x62
je 0x407ddd
cmp al, 0x42
je 0x407ddd
cmp al, 0x69
jne case.0x406bb7.66
mov eax, dword [edx]
add eax, 8
test dword [ebp + 0x20], 0x100
mov dword [edx], eax
mov edi, dword [eax - 8]
mov edx, dword [eax - 4]
mov dword [ebp - 0x80], edi
mov dword [ebp - 0x9c], edx
jne 0x407e03
mov ecx, 1
jmp 0x407e1c
mov eax, dword [ebp + 0x1c]
cmp eax, 3
jle 0x407e12
mov ecx, 3
jmp 0x407e1c
xor ecx, ecx
test eax, eax
sets cl
dec ecx
and ecx, eax
mov al, byte [ebp - 0x6d]
mov dword [ebp - 0x84], ecx
cmp al, 0x62
je 0x407f67
cmp al, 0x42
je 0x407f67
mov dword [ebp - 0x98], 0
xor eax, eax
mov edi, dword [eax + 0x40db40]
mov dword [ebp - 0x8c], edi
mov edi, dword [eax + 0x40db44]
cmp edx, edi
mov dword [ebp - 0x78], edi
mov edi, dword [ebp - 0x80]
jb 0x407e7d
ja 0x407e67
cmp edi, dword [eax + 0x40db40]
jb 0x407e7d
test ecx, ecx
jg 0x407eac
cmp edx, dword [eax + 0x40db4c]
ja 0x407eac
jb 0x407e7d
cmp edi, dword [eax + 0x40db48]
jae 0x407eac
inc dword [ebp - 0x98]
add eax, 0x18
cmp eax, 0x90
jb 0x407e41
push 0
push 0
push 0
push 0xa
push edx
push edi
lea eax, [ebp - 0x54]
push 0x50
push eax
call fcn.0040bd20
mov ecx, eax
mov dword [ebp - 0x80], ecx
jmp 0x407fcb
push dword [ebp - 0x78]
push dword [ebp - 0x8c]
push edx
push edi
call fcn.0040bf70
mov edi, dword [ebp - 0x84]
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0xa0], edx
test edi, edi
je 0x407f4c
push dword [ebp - 0x78]
push dword [ebp - 0x8c]
push dword [ebp - 0x9c]
push dword [ebp - 0x80]
call fcn.0040c190
mov dword [ebp - 0x90], eax
cmp edi, 1
jne 0x407efd
lea ecx, [edi + 9]
jmp 0x407f0d
lea ecx, [edi - 2]
neg ecx
sbb ecx, ecx
and ecx, 0x384
add ecx, 0x64
push dword [ebp - 0x78]
mov eax, edx
push dword [ebp - 0x8c]
mul ecx
mov edi, eax
mov eax, dword [ebp - 0x90]
mul ecx
mov ecx, dword [ebp - 0x8c]
add edi, edx
mov edx, dword [ebp - 0x78]
shrd ecx, edx, 1
shr edx, 1
add eax, ecx
adc edi, edx
push edi
push eax
call fcn.0040bf70
mov dword [ebp - 0x74], edx
mov edx, dword [ebp - 0xa0]
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 0x98]
lea ecx, [eax + eax*2]
mov eax, dword [ebp - 0xa4]
mov edi, dword [ecx*8 + 0x40db38]
jmp 0x408117
mov dword [ebp - 0x78], 0
xor eax, eax
cmp edx, dword [eax + 0x40da9c]
jb 0x407fa4
ja 0x407f82
cmp edi, dword [eax + 0x40da98]
jb 0x407fa4
test ecx, ecx
jg 0x40807f
cmp edx, dword [eax + 0x40daa4]
ja 0x408077
jb 0x407fa4
cmp edi, dword [eax + 0x40daa0]
jae 0x408077
inc dword [ebp - 0x78]
add eax, 0x18
cmp eax, 0x90
jb 0x407f70
push 0
push 0
push 0
push 0xa
push edx
push edi
lea eax, [ebp - 0x54]
push 0x50
push eax
call fcn.0040bd20
mov ecx, eax
mov dword [ebp - 0x80], eax
add esp, 0x20
mov edx, dword [ebp + 0x20]
test dl, 0x40
je 0x407fdf
mov byte [ebp + ecx - 0x54], 0x20
inc ecx
mov dword [ebp - 0x80], ecx
cmp byte [ebp - 0x85], 0x63
jne 0x407ff1
mov byte [ebp + ecx - 0x54], 0x42
inc ecx
mov dword [ebp - 0x80], ecx
cmp ecx, 0x50
jae 0x4095c7
mov eax, edx
mov byte [ebp + ecx - 0x54], 0
and al, 0x82
mov dword [ebp - 0x78], 0
cmp al, 0x80
jne 0x408050
mov edi, dword [ebp - 0x6c]
cmp edi, ecx
jle 0x408050
and edx, 4
sub edi, ecx
mov dword [ebp - 0x90], edx
mov eax, 0x40dd74
test edx, edx
jne 0x40802e
mov eax, 0x40d28c
push 1
push eax
push ebx
mov ecx, esi
call dword [section..rdata]
call esi
add dword [ebp - 0x78], eax
add esp, 0xc
mov edx, dword [ebp - 0x90]
sub edi, 1
jne 0x408020
mov ecx, dword [ebp - 0x80]
push ecx
lea eax, [ebp - 0x54]
mov ecx, esi
push eax
push ebx
call dword [section..rdata]
call esi
add esp, 0xc
add eax, dword [ebp - 0x78]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00401290
mov esp, ebp
pop ebp
ret
test ecx, ecx
je 0x4080fa
mov eax, dword [ebp - 0x78]
xor edx, edx
lea eax, [eax + eax*2]
movzx ecx, byte [eax*8 + 0x40da94]
mov eax, 1
mov dword [ebp - 0xa0], ecx
call fcn.0040c170
add eax, 0xffffffff
adc edx, 0xffffffff
and eax, edi
and edx, dword [ebp - 0x9c]
mov dword [ebp - 0x90], eax
mov eax, dword [ebp - 0x84]
cmp eax, 1
jne 0x4080c3
lea ecx, [eax + 9]
jmp 0x4080d3
lea ecx, [eax - 2]
neg ecx
sbb ecx, ecx
and ecx, 0x384
add ecx, 0x64
mov eax, edx
mul ecx
mov edi, eax
mov eax, dword [ebp - 0x90]
mul ecx
mov ecx, dword [ebp - 0xa0]
add edx, edi
call fcn.0040c210
mov dword [ebp - 0x74], edx
mov edx, dword [ebp - 0x9c]
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 0x78]
lea edi, [eax + eax*2]
mov eax, dword [ebp - 0x80]
movzx ecx, byte [edi*8 + 0x40da94]
call fcn.0040c210
mov edi, dword [edi*8 + 0x40da90]
push 0
push 0
push 0
push 0xa
push edx
push eax
lea eax, [ebp - 0x54]
push 0x50
push eax
call fcn.0040bd20
add esp, 0x20
mov ecx, eax
mov dword [ebp - 0x80], ecx
test edi, edi
je 0x407fce
mov eax, dword [ebp - 0x84]
test eax, eax
je 0x40817a
push 0x84
push 0
push eax
push 0xa
push dword [ebp - 0x74]
mov byte [ebp + ecx - 0x54], 0x2e
mov eax, 0x50
push dword [ebp - 0x68]
inc ecx
sub eax, ecx
mov dword [ebp - 0x80], ecx
push eax
lea eax, [ebp - 0x54]
add eax, ecx
push eax
call fcn.0040bd20
mov ecx, dword [ebp - 0x80]
add esp, 0x20
add ecx, eax
mov edx, dword [ebp + 0x20]
test dl, 0x40
je 0x408188
mov byte [ebp + ecx - 0x54], 0x20
inc ecx
mov al, byte [edi]
mov byte [ebp + ecx - 0x54], al
inc ecx
mov al, byte [edi + 1]
mov dword [ebp - 0x80], ecx
test al, al
je 0x407fdf
cmp byte [ebp - 0x6d], 0x42
je 0x407fdf
mov byte [ebp + ecx - 0x54], al
jmp 0x407fdb
mov eax, dword [edx]
mov ecx, dword [ebp - 0x74]
add eax, 4
mov dword [edx], eax
mov edx, dword [eax - 4]
mov eax, dword [ecx]
movsx edi, byte [eax]
inc eax
sub edi, 0x61
mov dword [ecx], eax
cmp edi, 0x12
ja case.0x406bb7.66
movzx eax, byte [edi + 0x4096f0]
jmp dword [eax*4 + 0x4096dc]
push 0x50
lea eax, [ebp - 0x54]
push eax
push ebx
push esi
push edx
call fcn.0040b7c0
add esp, 0x14
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00401290
mov esp, ebp
pop ebp
ret
push 0x50
lea eax, [ebp - 0x54]
push eax
push ebx
push esi
push edx
call fcn.0040b950
add esp, 0x14
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00401290
mov esp, ebp
pop ebp
ret
push 0x50
lea eax, [ebp - 0x54]
push eax
push ebx
push esi
push edx
call fcn.0040b950
add esp, 0x14
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00401290
mov esp, ebp
pop ebp
ret
push 0x50
lea eax, [ebp - 0x54]
push eax
push ebx
push esi
push edx
call fcn.0040b840
add esp, 0x14
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00401290
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebp - 0x74]
jmp case.0x407626.114
push 9
push 0x40dbe1
push dword [ebp - 0x78]
mov dword [ebp - 0x90], 0
mov dword [ebp - 0x8c], 0
mov dword [ebp - 0x84], 0
call sym.tstVBoxGINA.exe_nocrt_strncmp
add esp, 0xc
test eax, eax
je 0x408315
mov ecx, dword [ebp - 0x90]
cmp dword [ebp - 0x8c], ecx
je case.0x406bb7.66
test eax, eax
jns 0x4082c8
mov eax, dword [ebp - 0x84]
dec eax
mov dword [ebp - 0x8c], eax
jmp 0x4082db
mov ecx, dword [ebp - 0x84]
mov eax, dword [ebp - 0x8c]
inc ecx
mov dword [ebp - 0x90], ecx
cmp eax, ecx
jl case.0x406bb7.66
sub eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
mov dword [ebp - 0x84], eax
lea edx, [eax + eax*2]
movzx ecx, byte [edx*8 + 0x40dbe0]
lea eax, [edx*8 + 0x40dbe1]
push ecx
push eax
push dword [ebp - 0x78]
call sym.tstVBoxGINA.exe_nocrt_strncmp
add esp, 0xc
test eax, eax
jne 0x4082a3
mov eax, dword [ebp - 0x84]
mov ecx, dword [ebp - 0x74]
lea edx, [eax + eax*2]
movzx eax, byte [edx*8 + 0x40dbe0]
dec eax
add dword [ecx], eax
xor ecx, ecx
xor eax, eax
cmp byte [edx*8 + 0x40dbef], 4
jne 0x408349
mov ecx, dword [ebp - 0x7c]
mov eax, dword [ecx]
add eax, 4
mov dword [ecx], eax
mov ecx, dword [eax - 4]
mov eax, ecx
test byte [edx*8 + 0x40dbf0], 1
je 0x408373
add eax, 0x1000
cmp eax, 0x2000
jae 0x408373
push 6
push 0x40dd78
lea eax, [ebp - 0x54]
push eax
push ecx
push dword [ebp + 0x20]
jmp 0x4070c3
cmp dword [edx*8 + 0x40dbf4], 0
jne case.0x406bb7.66
push dword [ecx + 4]
push dword [ecx]
push 0x40dd80
push 0
push 0
push ebx
push esi
call fcn.0040bc30
add esp, 0x1c
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00401290
mov esp, ebp
pop ebp
ret
mov al, byte [ecx]
mov byte [ebp - 0x6d], al
cmp al, 0x61
je 0x40892d
cmp al, 0x65
je 0x40892d
cmp al, 0x6a
jne 0x4086dc
mov edi, dword [ebp - 0x74]
mov eax, dword [ebp - 0x80]
mov cl, byte [ecx + 1]
add eax, 2
mov dword [edi], eax
mov edi, dword [ebp - 0x6c]
cmp cl, 0x73
jne case.0x406bb7.66
mov eax, dword [edx]
add eax, 4
mov dword [edx], eax
mov ecx, dword [eax - 4]
mov dword [ebp - 0x8c], ecx
lea eax, [ecx + 0x1000]
cmp eax, 0x2000
jae 0x408409
mov ecx, 0x40dd8c
mov dword [ebp - 0x8c], ecx
push dword [ebp + 0x1c]
push ecx
call fcn.0040bdf0
add esp, 8
mov dword [ebp - 0x98], eax
mov ecx, esi
push 1
push 0x40dd94
push ebx
call dword [section..rdata]
call esi
add esp, 0xc
mov dword [ebp - 0x74], eax
test byte [ebp + 0x20], 2
jne 0x408486
dec edi
mov dword [ebp - 0x6c], edi
cmp edi, dword [ebp - 0x98]
jl 0x408486
mov eax, edi
sub eax, dword [ebp - 0x98]
inc eax
sub edi, eax
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x6c], edi
mov edi, dword [ebp - 0x74]
lea esp, [esp]
push 1
push 0x40d28c
push ebx
mov ecx, esi
call dword [section..rdata]
call esi
add esp, 0xc
add edi, eax
sub dword [ebp - 0x90], 1
jne 0x408460
mov dword [ebp - 0x74], edi
mov edi, dword [ebp - 0x6c]
xor eax, eax
mov dword [ebp - 0x78], eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x98], eax
jle 0x408688
mov edi, dword [ebp - 0x74]
mov edx, dword [ebp - 0x8c]
add edx, eax
mov dword [ebp - 0x90], edx
mov cl, byte [edx]
mov byte [ebp - 0x6d], cl
cmp cl, 0x5d
jae 0x40864b
cmp cl, 0x20
jb 0x4084cf
cmp cl, 0x22
je 0x4084cf
cmp cl, 0x5c
jne 0x40864b
cmp dword [ebp - 0x84], eax
jge 0x408504
sub eax, dword [ebp - 0x84]
mov ecx, esi
push eax
mov eax, dword [ebp - 0x8c]
add eax, dword [ebp - 0x84]
push eax
push ebx
call dword [section..rdata]
call esi
mov cl, byte [ebp - 0x6d]
add esp, 0xc
mov edx, dword [ebp - 0x90]
add edi, eax
movsx eax, cl
add eax, 0xfffffff8
cmp eax, 0x54
ja case.0x408516.11
movzx eax, byte [eax + 0x409724]
jmp dword [eax*4 + 0x409704]
push 2
push 0x40ddd0
jmp 0x40862d
push 2
push 0x40ddd4
jmp 0x40862d
push 2
push 0x40ddd8
jmp 0x40862d
push 2
push 0x40dddc
jmp 0x40862d
push 2
push 0x40dde0
jmp 0x40862d
push 2
push 0x40dde4
jmp 0x40862d
push 2
push 0x40dde8
jmp 0x40862d
mov dword [ebp - 0x84], 0xfffd
mov dword [ebp - 0x9c], edx
mov cl, byte [edx]
test cl, cl
js 0x40859b
lea eax, [edx + 1]
movzx ecx, cl
mov dword [ebp - 0x9c], eax
mov dword [ebp - 0x84], ecx
jmp 0x4085c1
lea eax, [ebp - 0x84]
push eax
lea eax, [ebp - 0x9c]
push eax
call fcn.00405470
mov ecx, dword [ebp - 0x84]
add esp, 8
test eax, eax
js 0x4085cb
mov eax, dword [ebp - 0x9c]
sub eax, dword [ebp - 0x8c]
dec eax
mov dword [ebp - 0x78], eax
cmp ecx, 0xfffe
jb 0x4085de
mov ecx, 0xfffd
mov dword [ebp - 0x84], ecx
mov eax, ecx
mov word [ebp - 0x54], 0x755c
shr eax, 0xc
and eax, 0xf
mov byte [ebp - 0x4e], 0
push 6
mov al, byte [eax + str.0123456789abcdef]
mov byte [ebp - 0x52], al
mov eax, ecx
shr eax, 8
and eax, 0xf
mov al, byte [eax + str.0123456789abcdef]
mov byte [ebp - 0x51], al
mov eax, ecx
shr eax, 4
and eax, 0xf
and ecx, 0xf
mov al, byte [eax + str.0123456789abcdef]
mov byte [ebp - 0x50], al
mov al, byte [ecx + str.0123456789abcdef]
mov byte [ebp - 0x4f], al
lea eax, [ebp - 0x54]
push eax
push ebx
mov ecx, esi
call dword [section..rdata]
call esi
add edi, eax
add esp, 0xc
mov eax, dword [ebp - 0x78]
inc eax
mov ecx, eax
mov dword [ebp - 0x84], ecx
jmp 0x408652
mov ecx, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x78], eax
cmp eax, dword [ebp - 0x98]
jl 0x4084a0
mov dword [ebp - 0x74], edi
mov edi, dword [ebp - 0x6c]
cmp ecx, eax
jge 0x408688
sub eax, ecx
push eax
mov eax, dword [ebp - 0x8c]
add eax, ecx
mov ecx, esi
push eax
push ebx
call dword [section..rdata]
call esi
add esp, 0xc
add dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x98]
dec edi
cmp edi, eax
jl 0x4086b3
sub edi, eax
inc edi
push 1
push 0x40d28c
push ebx
mov ecx, esi
call dword [section..rdata]
call esi
add dword [ebp - 0x74], eax
add esp, 0xc
sub edi, 1
jne 0x408696
push 1
push 0x40dd94
push ebx
mov ecx, esi
call dword [section..rdata]
call esi
add esp, 0xc
add eax, dword [ebp - 0x74]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00401290
mov esp, ebp
pop ebp
ret
cmp al, 0x70
jne case.0x406bb7.66
mov al, byte [ecx + 1]
mov byte [ebp - 0x6d], al
cmp al, 0x70
mov eax, dword [edx]
jne 0x40870a
add eax, 4
mov byte [ebp - 0x85], 0x2f
mov dword [edx], eax
mov ecx, dword [eax - 4]
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x80], ecx
add dword [eax], 2
jmp 0x408757
add eax, 4
mov dword [edx], eax
mov ecx, dword [eax - 4]
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x80], ecx
add dword [eax], 2
mov al, byte [ebp - 0x6d]
cmp al, 0x71
setne dl
dec dl
and dl, 0xad
add dl, 0x7e
mov byte [ebp - 0x85], dl
mov ah, dl
cmp al, 0x61
je 0x408757
mov byte [ebp - 0x85], ah
mov edx, ecx
mov dword [ebp - 0x80], ecx
cmp al, 0x71
je 0x408757
mov byte [ebp - 0x85], ah
mov dword [ebp - 0x80], ecx
cmp al, 0x66
jne case.0x406bb7.66
lea eax, [ecx + 0x1000]
cmp eax, 0x2000
jae 0x40876c
mov ecx, 0x40dd8c
mov dword [ebp - 0x80], ecx
push dword [ebp + 0x1c]
push ecx
call fcn.0040bdf0
add esp, 8
mov ecx, eax
test byte [ebp + 0x20], 2
mov dword [ebp - 0x78], ecx
jne 0x4087c0
dec edi
mov dword [ebp - 0x6c], edi
cmp edi, ecx
jl 0x4087c0
mov eax, edi
sub eax, ecx
inc eax
sub edi, eax
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x6c], edi
mov edi, eax
lea ecx, [ecx]
push 3
push 0x40ddec
push ebx
mov ecx, esi
call dword [section..rdata]
call esi
add esp, 0xc
sub edi, 1
jne 0x4087a0
mov edi, dword [ebp - 0x6c]
mov ecx, dword [ebp - 0x78]
xor eax, eax
xor edx, edx
test ecx, ecx
jle 0x4088f3
xor edi, edi
mov edi, edi
mov eax, dword [ebp - 0x80]
mov cl, byte [edi + eax]
movsx eax, cl
mov dword [ebp - 0x90], eax
add eax, 0xffffff9f
mov byte [ebp - 0xa5], cl
cmp eax, 0x1a
jb 0x4088ba
mov eax, dword [ebp - 0x90]
add eax, 0xffffffbf
cmp eax, 0x1a
jb 0x4088ba
mov eax, dword [ebp - 0x90]
add eax, 0xffffffd0
cmp eax, 0xa
jb 0x4088ba
cmp cl, 0x2d
je 0x4088ba
cmp cl, 0x2e
je 0x4088ba
cmp cl, 0x5f
je 0x4088ba
cmp cl, 0x7e
je 0x4088ba
cmp cl, byte [ebp - 0x85]
je 0x4088ba
cmp edx, edi
jge 0x408868
mov eax, edi
mov ecx, esi
sub eax, edx
push eax
mov eax, dword [ebp - 0x80]
add eax, edx
push eax
push ebx
call dword [section..rdata]
call esi
mov cl, byte [ebp - 0xa5]
add esp, 0xc
cmp cl, 0x20
jne 0x40887c
cmp byte [ebp - 0x6d], 0x66
jne 0x40887c
push 1
push 0x40ddf0
jmp 0x4088a7
movzx ecx, cl
mov eax, ecx
mov byte [ebp - 0x54], 0x25
shr eax, 4
and ecx, 0xf
push 3
mov byte [ebp - 0x51], 0
mov al, byte [eax + str.0123456789ABCDEF]
mov byte [ebp - 0x53], al
mov al, byte [ecx + str.0123456789ABCDEF]
mov byte [ebp - 0x52], al
lea eax, [ebp - 0x54]
push eax
push ebx
mov ecx, esi
call dword [section..rdata]
call esi
add esp, 0xc
inc edi
mov edx, edi
jmp 0x4088bb
inc edi
mov ecx, dword [ebp - 0x78]
cmp edi, ecx
jl 0x4087d0
mov dword [ebp - 0x90], edi
cmp edx, edi
mov edi, dword [ebp - 0x6c]
jge 0x4088f3
mov eax, dword [ebp - 0x90]
mov ecx, esi
sub eax, edx
push eax
mov eax, dword [ebp - 0x80]
add eax, edx
push eax
push ebx
call dword [section..rdata]
call esi
mov ecx, dword [ebp - 0x78]
add esp, 0xc
dec edi
cmp edi, ecx
jl case.0x406bb7.66
sub edi, ecx
inc edi
jmp 0x408900
push 3
push 0x40ddec
push ebx
mov ecx, esi
call dword [section..rdata]
call esi
add esp, 0xc
sub edi, 1
jne 0x408900
pop edi
pop esi
xor eax, eax
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00401290
mov esp, ebp
pop ebp
ret
mov edi, dword [ebp - 0x74]
mov eax, dword [ebp - 0x80]
mov cl, byte [ecx + 1]
add eax, 2
mov dword [edi], eax
mov edi, dword [ebp - 0x6c]
cmp cl, 0x73
jne case.0x406bb7.66
mov al, byte [ebp - 0x6d]
mov dword [ebp - 0xa0], 0x40dc00
cmp al, 0x61
je 0x40895e
mov dword [ebp - 0xa0], 0x40dbf8
xor ecx, ecx
cmp al, 0x61
sete cl
xor eax, eax
mov dword [ebp - 0x68], eax
add ecx, 5
mov eax, dword [edx]
add eax, 4
mov dword [ebp - 0xa4], ecx
mov dword [edx], eax
mov ecx, dword [eax - 4]
mov dword [ebp - 0x84], ecx
lea eax, [ecx + 0x1000]
cmp eax, 0x2000
jae 0x40899b
mov ecx, 0x40dd8c
mov dword [ebp - 0x84], ecx
push dword [ebp + 0x1c]
push ecx
call fcn.0040bdf0
add esp, 8
mov ecx, eax
cmp byte [ebp - 0x6d], 0x61
mov dword [ebp - 0x78], ecx
jne 0x4089cd
push 1
push 0x40dd94
push ebx
mov ecx, esi
call dword [section..rdata]
call esi
mov ecx, dword [ebp - 0x78]
add esp, 0xc
mov dword [ebp - 0x68], eax
test byte [ebp + 0x20], 2
jne 0x408a16
dec edi
mov dword [ebp - 0x6c], edi
cmp edi, ecx
jl 0x408a16
mov eax, edi
sub eax, ecx
inc eax
sub edi, eax
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x6c], edi
mov edi, dword [ebp - 0x68]
mov edi, edi
push 1
push 0x40d28c
push ebx
mov ecx, esi
call dword [section..rdata]
call esi
add esp, 0xc
add edi, eax
sub dword [ebp - 0x90], 1
jne 0x4089f0
mov dword [ebp - 0x68], edi
mov edi, dword [ebp - 0x6c]
xor eax, eax
mov dword [ebp - 0x98], eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x78], eax
jle 0x408b6c
mov edx, dword [ebp - 0x84]
mov ecx, 1
mov edi, dword [ebp - 0x68]
sub ecx, edx
mov dword [ebp - 0x9c], ecx
jmp 0x408a56
mov edx, dword [ebp - 0x84]
push dword [ebp - 0xa4]
add eax, edx
mov dword [ebp - 0x90], eax
movsx eax, byte [eax]
push eax
push dword [ebp - 0xa0]
call sym.tstVBoxGINA.exe_nocrt_memchr
mov ecx, dword [ebp - 0x8c]
add esp, 0xc
test eax, eax
je 0x408b28
mov eax, dword [ebp - 0x98]
cmp ecx, eax
jge 0x408aaa
sub eax, ecx
push eax
mov eax, dword [ebp - 0x84]
add eax, ecx
mov ecx, esi
push eax
push ebx
call dword [section..rdata]
call esi
add esp, 0xc
add edi, eax
mov eax, dword [ebp - 0x90]
movsx eax, byte [eax]
add eax, 0xfffffff6
cmp eax, 0x34
ja case.0x408ac2.11
movzx eax, byte [eax + 0x40979c]
jmp dword [eax*4 + 0x40977c]
push 4
push 0x40dd98
jmp 0x408b06
push 4
push 0x40dda0
jmp 0x408b06
push 5
push 0x40dda8
jmp 0x408b06
push 6
push 0x40ddb0
jmp 0x408b06
push 6
push 0x40ddb8
jmp 0x408b06
push 5
push 0x40ddc0
jmp 0x408b06
push 5
push 0x40ddc8
push ebx
mov ecx, esi
call dword [section..rdata]
call esi
add esp, 0xc
add edi, eax
mov ecx, dword [ebp - 0x9c]
add ecx, dword [ebp - 0x90]
mov dword [ebp - 0x8c], ecx
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp eax, dword [ebp - 0x78]
jl 0x408a50
mov dword [ebp - 0x68], edi
mov edi, dword [ebp - 0x6c]
cmp ecx, eax
jge 0x408b6c
sub eax, ecx
push eax
mov eax, dword [ebp - 0x84]
add eax, ecx
mov ecx, esi
push eax
push ebx
call dword [section..rdata]
call esi
mov ecx, dword [ebp - 0x68]
add esp, 0xc
add ecx, eax
mov dword [ebp - 0x68], ecx
jmp 0x408b6f
mov ecx, dword [ebp - 0x68]
mov eax, dword [ebp - 0x78]
dec edi
cmp edi, eax
jl 0x408ba2
sub edi, eax
inc edi
lea ebx, [ebx]
push 1
push 0x40d28c
push ebx
mov ecx, esi
call dword [section..rdata]
call esi
mov ecx, dword [ebp - 0x68]
add esp, 0xc
add ecx, eax
mov dword [ebp - 0x68], ecx
sub edi, 1
jne 0x408b80
cmp byte [ebp - 0x6d], 0x61
jne 0x408bc2
push 1
push 0x40dd94
push ebx
mov ecx, esi
call dword [section..rdata]
call esi
mov ecx, dword [ebp - 0x68]
add esp, 0xc
add ecx, eax
pop edi
pop esi
mov eax, ecx
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00401290
mov esp, ebp
pop ebp
ret
xor edi, edi
mov edx, ecx
mov dword [ebp - 0x68], edi
lea esp, [esp]
mov al, byte [edx]
inc edx
mov dword [ebp - 0xa0], edx
test al, al
je case.0x406bb7.66
cmp al, 0x5b
jne 0x408be0
mov cl, byte [edx]
xor eax, eax
mov dword [ebp - 0x90], eax
mov byte [ebp - 0x6d], cl
test cl, cl
je case.0x406bb7.66
lea ebx, [ebx]
inc eax
cmp byte [ebp - 0x6d], 0x5d
je 0x408c3a
mov cl, byte [eax + edx]
mov dword [ebp - 0x90], eax
mov byte [ebp - 0x6d], cl
test cl, cl
jne 0x408c10
mov ecx, dword [ebp - 4]
xor eax, eax
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00401290
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebp - 0x74]
add eax, edx
mov dword [ecx], eax
mov eax, edx
mov ecx, dword [ebp - 0x80]
sub eax, ecx
cmp eax, 4
jne 0x407358
cmp byte [ecx], 0x78
jne 0x407358
cmp byte [ecx + 1], 0x38
jne 0x407358
cmp byte [ecx + 2], 0x36
jne 0x407358
cmp dword [ebp - 0x90], 3
jne 0x407358
push 3
push edx
push 0x40ddf4
call sym.tstVBoxGINA.exe_nocrt_strncmp
add esp, 0xc
test eax, eax
jne 0x409041
mov ecx, dword [ebp - 0x7c]
mov eax, dword [ecx]
add eax, 8
mov dword [ecx], eax
mov ecx, dword [eax - 8]
mov edx, dword [eax - 4]
mov eax, dword [ebp + 0x20]
or eax, 0x4000
mov dword [ebp - 0x6c], ecx
mov dword [ebp - 0x90], eax
or eax, 4
push eax
push 0xffffffffffffffff
push 8
push 0x10
push edx
push ecx
lea eax, [ebp - 0x54]
mov dword [ebp - 0x7c], edx
push eax
call fcn.00402f10
add esp, 0x1c
mov ecx, esi
push eax
lea eax, [ebp - 0x54]
push eax
push ebx
call dword [section..rdata]
call esi
mov ecx, dword [ebp - 0x6c]
add esp, 0xc
and ecx, 1
mov edi, eax
or ecx, 0
je 0x408d1d
push 3
push 0x40ddf8
push ebx
mov ecx, esi
mov dword [ebp - 0x68], 1
call dword [section..rdata]
call esi
mov ecx, dword [ebp - 0x6c]
add esp, 0xc
and ecx, 0xfffffffe
add edi, eax
xor edx, edx
mov dword [ebp - 0x6c], ecx
mov dword [ebp - 0x7c], edx
jmp 0x408d23
mov ecx, dword [ebp - 0x6c]
mov edx, dword [ebp - 0x7c]
mov eax, ecx
and eax, 2
or eax, 0
je 0x408d66
mov ecx, dword [ebp - 0x68]
mov eax, ecx
inc ecx
mov dword [ebp - 0x68], ecx
mov ecx, esi
push 3
test eax, eax
jne 0x408d45
push 0x40ddfc
jmp 0x408d4a
push 0x40de00
push ebx
call dword [section..rdata]
call esi
mov ecx, dword [ebp - 0x6c]
add esp, 0xc
and ecx, 0xfffffffd
add edi, eax
xor edx, edx
mov dword [ebp - 0x6c], ecx
mov dword [ebp - 0x7c], edx
mov eax, ecx
and eax, 4
or eax, 0
je 0x408da9
mov ecx, dword [ebp - 0x68]
mov eax, ecx
inc ecx
mov dword [ebp - 0x68], ecx
mov ecx, esi
push 3
test eax, eax
jne 0x408d88
push 0x40de04
jmp 0x408d8d
push str.1kRd
push ebx
call dword [section..rdata]
call esi
mov ecx, dword [ebp - 0x6c]
add esp, 0xc
and ecx, 0xfffffffb
add edi, eax
xor edx, edx
mov dword [ebp - 0x6c], ecx
mov dword [ebp - 0x7c], edx
mov eax, ecx
and eax, 8
or eax, 0
je 0x408dec
mov ecx, dword [ebp - 0x68]
mov eax, ecx
inc ecx
mov dword [ebp - 0x68], ecx
mov ecx, esi
push 3
test eax, eax
jne 0x408dcb
push 0x40de0c
jmp 0x408dd0
push 0x40de10
push ebx
call dword [section..rdata]
call esi
mov ecx, dword [ebp - 0x6c]
add esp, 0xc
and ecx, 0xfffffff7
add edi, eax
xor edx, edx
mov dword [ebp - 0x6c], ecx
mov dword [ebp - 0x7c], edx
mov eax, ecx
and eax, 0x10
or eax, 0
je 0x408e2f
mov ecx, dword [ebp - 0x68]
mov eax, ecx
inc ecx
mov dword [ebp - 0x68], ecx
mov ecx, esi
push 3
test eax, eax
jne 0x408e0e
push 0x40de14
jmp 0x408e13
push 0x40de18
push ebx
call dword [section..rdata]
call esi
mov ecx, dword [ebp - 0x6c]
add esp, 0xc
and ecx, 0xffffffef
add edi, eax
xor edx, edx
mov dword [ebp - 0x6c], ecx
mov dword [ebp - 0x7c], edx
mov eax, ecx
and eax, 0x20
or eax, 0
je 0x408e72
mov ecx, dword [ebp - 0x68]
mov eax, ecx
inc ecx
mov dword [ebp - 0x68], ecx
mov ecx, esi
push 3
test eax, eax
jne 0x408e51
push 0x40de1c
jmp 0x408e56
push 0x40de20
push ebx
call dword [section..rdata]
call esi
mov ecx, dword [ebp - 0x6c]
add esp, 0xc
and ecx, 0xffffffdf
add edi, eax
xor edx, edx
mov dword [ebp - 0x6c], ecx
mov dword [ebp - 0x7c], edx
mov eax, ecx
and eax, 0x10000
or eax, 0
je 0x408eba
mov ecx, dword [ebp - 0x68]
mov eax, ecx
inc ecx
mov dword [ebp - 0x68], ecx
mov ecx, esi
push 3
test eax, eax
jne 0x408e96
push 0x40de24
jmp 0x408e9b
push str.GXi_a_nI_
push ebx
call dword [section..rdata]
call esi
mov ecx, dword [ebp - 0x6c]
add esp, 0xc
and ecx, 0xfffeffff
add edi, eax
xor edx, edx
mov dword [ebp - 0x6c], ecx
mov dword [ebp - 0x7c], edx
mov eax, ecx
and eax, 0x40000
or eax, 0
je 0x408f02
mov ecx, dword [ebp - 0x68]
mov eax, ecx
inc ecx
mov dword [ebp - 0x68], ecx
mov ecx, esi
push 3
test eax, eax
jne 0x408ede
push 0x40de2c
jmp 0x408ee3
push 0x40de30
push ebx
call dword [section..rdata]
call esi
mov ecx, dword [ebp - 0x6c]
add esp, 0xc
and ecx, 0xfffbffff
add edi, eax
xor edx, edx
mov dword [ebp - 0x6c], ecx
mov dword [ebp - 0x7c], edx
mov eax, ecx
and eax, 0x20000000
or eax, 0
je 0x408f4a
mov ecx, dword [ebp - 0x68]
mov eax, ecx
inc ecx
mov dword [ebp - 0x68], ecx
mov ecx, esi
push 3
test eax, eax
jne 0x408f26
push 0x40de34
jmp 0x408f2b
push 0x40de38
push ebx
call dword [section..rdata]
call esi
mov ecx, dword [ebp - 0x6c]
add esp, 0xc
and ecx, 0xdfffffff
add edi, eax
xor edx, edx
mov dword [ebp - 0x6c], ecx
mov dword [ebp - 0x7c], edx
mov eax, ecx
and eax, 0x40000000
or eax, 0
je 0x408f92
mov ecx, dword [ebp - 0x68]
mov eax, ecx
inc ecx
mov dword [ebp - 0x68], ecx
mov ecx, esi
push 3
test eax, eax
jne 0x408f6e
push 0x40de3c
jmp 0x408f73
push 0x40de40
push ebx
call dword [section..rdata]
call esi
mov ecx, dword [ebp - 0x6c]
add esp, 0xc
and ecx, 0xbfffffff
add edi, eax
xor edx, edx
mov dword [ebp - 0x6c], ecx
mov dword [ebp - 0x7c], edx
mov eax, ecx
and eax, 0x80000000
or eax, 0
je 0x408fda
mov ecx, dword [ebp - 0x68]
mov eax, ecx
inc ecx
mov dword [ebp - 0x68], ecx
mov ecx, esi
push 3
test eax, eax
jne 0x408fb6
push 0x40de44
jmp 0x408fbb
push 0x40de48
push ebx
call dword [section..rdata]
call esi
mov ecx, dword [ebp - 0x6c]
add esp, 0xc
and ecx, 0x7fffffff
add edi, eax
xor edx, edx
mov dword [ebp - 0x6c], ecx
mov dword [ebp - 0x7c], edx
mov eax, ecx
or eax, edx
je 0x4095b0
cmp dword [ebp - 0x68], 0
mov eax, 0x40de4c
je 0x408ff4
mov eax, 0x40de54
push 6
push eax
push ebx
mov ecx, esi
call dword [section..rdata]
call esi
push dword [ebp - 0x90]
mov edx, dword [ebp - 0x7c]
add edi, eax
push 0xffffffffffffffff
push 1
push 0x10
push edx
push dword [ebp - 0x6c]
lea eax, [ebp - 0x54]
push eax
call fcn.00402f10
add esp, 0x28
mov ecx, esi
push eax
lea eax, [ebp - 0x54]
push eax
push ebx
call dword [section..rdata]
call esi
add edi, eax
add esp, 0xc
mov eax, dword [ebp - 0x68]
inc eax
jmp 0x4095b3
push 3
push dword [ebp - 0xa0]
push 0x40de60
call sym.tstVBoxGINA.exe_nocrt_strncmp
add esp, 0xc
test eax, eax
jne 0x407358
mov ecx, dword [ebp - 0x7c]
mov eax, dword [ecx]
add eax, 8
mov dword [ecx], eax
mov ecx, dword [eax - 8]
mov edx, dword [eax - 4]
mov eax, dword [ebp + 0x20]
or eax, 0x4000
mov dword [ebp - 0x6c], ecx
mov dword [ebp - 0x90], eax
or eax, 4
push eax
push 0xffffffffffffffff
push 8
push 0x10
push edx
push ecx
lea eax, [ebp - 0x54]
mov dword [ebp - 0x74], edx
push eax
call fcn.00402f10
add esp, 0x1c
mov ecx, esi
push eax
lea eax, [ebp - 0x54]
push eax
push ebx
call dword [section..rdata]
call esi
mov ecx, dword [ebp - 0x6c]
mov edi, eax
mov eax, ecx
add esp, 0xc
and eax, 1
or eax, 0
je 0x4090ea
push 4
push 0x40de64
push ebx
mov ecx, esi
mov dword [ebp - 0x68], 1
call dword [section..rdata]
call esi
mov ecx, dword [ebp - 0x6c]
add esp, 0xc
and ecx, 0xfffffffe
add edi, eax
xor edx, edx
mov dword [ebp - 0x6c], ecx
mov dword [ebp - 0x74], edx
jmp 0x4090ed
mov edx, dword [ebp - 0x74]
mov eax, ecx
and eax, 2
or eax, 0
je 0x409130
mov ecx, dword [ebp - 0x68]
mov eax, ecx
inc ecx
mov dword [ebp - 0x68], ecx
mov ecx, esi
push 4
test eax, eax
jne 0x40910f
push 0x40de6c
jmp 0x409114
push 0x40de74
push ebx
call dword [section..rdata]
call esi
mov ecx, dword [ebp - 0x6c]
add esp, 0xc
and ecx, 0xfffffffd
add edi, eax
xor edx, edx
mov dword [ebp - 0x6c], ecx
mov dword [ebp - 0x74], edx
mov eax, ecx
and eax, 4
or eax, 0
je 0x409173
mov ecx, dword [ebp - 0x68]
mov eax, ecx
inc ecx
mov dword [ebp - 0x68], ecx
mov ecx, esi
push 4
test eax, eax
jne 0x409152
push 0x40de7c
jmp 0x409157
push 0x40de84
push ebx
call dword [section..rdata]
call esi
mov ecx, dword [ebp - 0x6c]
add esp, 0xc
and ecx, 0xfffffffb
add edi, eax
xor edx, edx
mov dword [ebp - 0x6c], ecx
mov dword [ebp - 0x74], edx
mov eax, ecx
and eax, 8
or eax, 0
je 0x4091b6
mov ecx, dword [ebp - 0x68]
mov eax, ecx
inc ecx
mov dword [ebp - 0x68], ecx
mov ecx, esi
push 3
test eax, eax
jne 0x409195
push 0x40de0c
jmp 0x40919a
push 0x40de10
push ebx
call dword [section..rdata]
call esi
mov ecx, dword [ebp - 0x6c]
add esp, 0xc
and ecx, 0xfffffff7
add edi, eax
xor edx, edx
mov dword [ebp - 0x6c], ecx
mov dword [ebp - 0x74], edx
mov eax, ecx
and eax, 0x10
or eax, 0
je 0x4091f9
mov ecx, dword [ebp - 0x68]
mov eax, ecx
inc ecx
mov dword [ebp - 0x68], ecx
mov ecx, esi
push 4
test eax, eax
jne 0x4091d8
push 0x40de8c
jmp 0x4091dd
push 0x40de94
push ebx
call dword [section..rdata]
call esi
mov ecx, dword [ebp - 0x6c]
add esp, 0xc
and ecx, 0xffffffef
add edi, eax
xor edx, edx
mov dword [ebp - 0x6c], ecx
mov dword [ebp - 0x74], edx
mov eax, ecx
and eax, 0x20
or eax, 0
je 0x40923c
mov ecx, dword [ebp - 0x68]
mov eax, ecx
inc ecx
mov dword [ebp - 0x68], ecx
mov ecx, esi
push 4
test eax, eax
jne 0x40921b
push 0x40de9c
jmp 0x409220
push 0x40dea4
push ebx
call dword [section..rdata]
call esi
mov ecx, dword [ebp - 0x6c]
add esp, 0xc
and ecx, 0xffffffdf
add edi, eax
xor edx, edx
mov dword [ebp - 0x6c], ecx
mov dword [ebp - 0x74], edx
mov eax, ecx
and eax, 0x40
or eax, 0
je 0x40927f
mov ecx, dword [ebp - 0x68]
mov eax, ecx
inc ecx
mov dword [ebp - 0x68], ecx
mov ecx, esi
push 4
test eax, eax
jne 0x40925e
push 0x40deac
jmp 0x409263
push 0x40deb4
push ebx
call dword [section..rdata]
call esi
mov ecx, dword [ebp - 0x6c]
add esp, 0xc
and ecx, 0xffffffbf
add edi, eax
xor edx, edx
mov dword [ebp - 0x6c], ecx
mov dword [ebp - 0x74], edx
mov eax, ecx
and eax, 0x80
or eax, 0
je 0x4092c7
mov ecx, dword [ebp - 0x68]
mov eax, ecx
inc ecx
mov dword [ebp - 0x68], ecx
mov ecx, esi
push 4
test eax, eax
jne 0x4092a3
push 0x40debc
jmp 0x4092a8
push 0x40dec4
push ebx
call dword [section..rdata]
call esi
mov ecx, dword [ebp - 0x6c]
add esp, 0xc
and ecx, 0xffffff7f
add edi, eax
xor edx, edx
mov dword [ebp - 0x6c], ecx
mov dword [ebp - 0x74], edx
mov eax, ecx
and eax, 0x100
or eax, 0
je 0x40930f
mov ecx, dword [ebp - 0x68]
mov eax, ecx
inc ecx
mov dword [ebp - 0x68], ecx
mov ecx, esi
push 4
test eax, eax
jne 0x4092eb
push 0x40decc
jmp 0x4092f0
push 0x40ded4
push ebx
call dword [section..rdata]
call esi
mov ecx, dword [ebp - 0x6c]
add esp, 0xc
and ecx, 0xfffffeff
add edi, eax
xor edx, edx
mov dword [ebp - 0x6c], ecx
mov dword [ebp - 0x74], edx
mov eax, ecx
and eax, 0x200
or eax, 0
je 0x409357
mov ecx, dword [ebp - 0x68]
mov eax, ecx
inc ecx
mov dword [ebp - 0x68], ecx
mov ecx, esi
push 7
test eax, eax
jne 0x409333
push 0x40dedc
jmp 0x409338
push 0x40dee4
push ebx
call dword [section..rdata]
call esi
mov ecx, dword [ebp - 0x6c]
add esp, 0xc
and ecx, 0xfffffdff
add edi, eax
xor edx, edx
mov dword [ebp - 0x6c], ecx
mov dword [ebp - 0x74], edx
mov eax, ecx
and eax, 0x400
or eax, 0
je 0x40939f
mov ecx, dword [ebp - 0x68]
mov eax, ecx
inc ecx
mov dword [ebp - 0x68], ecx
mov ecx, esi
push 0xc
test eax, eax
jne 0x40937b
push 0x40deec
jmp 0x409380
push 0x40defc
push ebx
call dword [section..rdata]
call esi
mov ecx, dword [ebp - 0x6c]
add esp, 0xc
and ecx, 0xfffffbff
add edi, eax
xor edx, edx
mov dword [ebp - 0x6c], ecx
mov dword [ebp - 0x74], edx
mov eax, ecx
and eax, 0x2000
or eax, 0
je 0x4093e7
mov ecx, dword [ebp - 0x68]
mov eax, ecx
inc ecx
mov dword [ebp - 0x68], ecx
mov ecx, esi
push 5
test eax, eax
jne 0x4093c3
push 0x40df0c
jmp 0x4093c8
push 0x40df14
push ebx
call dword [section..rdata]
call esi
mov ecx, dword [ebp - 0x6c]
add esp, 0xc
and ecx, 0xffffdfff
add edi, eax
xor edx, edx
mov dword [ebp - 0x6c], ecx
mov dword [ebp - 0x74], edx
mov eax, ecx
and eax, 0x4000
or eax, 0
je 0x40942f
mov ecx, dword [ebp - 0x68]
mov eax, ecx
inc ecx
mov dword [ebp - 0x68], ecx
mov ecx, esi
push 5
test eax, eax
jne 0x40940b
push 0x40df1c
jmp 0x409410
push 0x40df24
push ebx
call dword [section..rdata]
call esi
mov ecx, dword [ebp - 0x6c]
add esp, 0xc
and ecx, 0xffffbfff
add edi, eax
xor edx, edx
mov dword [ebp - 0x6c], ecx
mov dword [ebp - 0x74], edx
mov eax, ecx
and eax, 0x20000
or eax, 0
je 0x409477
mov ecx, dword [ebp - 0x68]
mov eax, ecx
inc ecx
mov dword [ebp - 0x68], ecx
mov ecx, esi
push 6
test eax, eax
jne 0x409453
push 0x40df2c
jmp 0x409458
push 0x40df34
push ebx
call dword [section..rdata]
call esi
mov ecx, dword [ebp - 0x6c]
add esp, 0xc
and ecx, 0xfffdffff
add edi, eax
xor edx, edx
mov dword [ebp - 0x6c], ecx
mov dword [ebp - 0x74], edx
mov eax, ecx
and eax, 0x40000
or eax, 0
je 0x4094bf
mov ecx, dword [ebp - 0x68]
mov eax, ecx
inc ecx
mov dword [ebp - 0x68], ecx
mov ecx, esi
push 8
test eax, eax
jne 0x40949b
push 0x40df3c
jmp 0x4094a0
push 0x40df48
push ebx
call dword [section..rdata]
call esi
mov ecx, dword [ebp - 0x6c]
add esp, 0xc
and ecx, 0xfffbffff
add edi, eax
xor edx, edx
mov dword [ebp - 0x6c], ecx
mov dword [ebp - 0x74], edx
mov eax, ecx
and eax, 0x100000
or eax, 0
je 0x409507
mov ecx, dword [ebp - 0x68]
mov eax, ecx
inc ecx
mov dword [ebp - 0x68], ecx
mov ecx, esi
push 5
test eax, eax
jne 0x4094e3
push 0x40df54
jmp 0x4094e8
push 0x40df5c
push ebx
call dword [section..rdata]
call esi
mov ecx, dword [ebp - 0x6c]
add esp, 0xc
and ecx, 0xffefffff
add edi, eax
xor edx, edx
mov dword [ebp - 0x6c], ecx
mov dword [ebp - 0x74], edx
mov eax, ecx
and eax, 0x200000
or eax, 0
je 0x40954f
mov ecx, dword [ebp - 0x68]
mov eax, ecx
inc ecx
mov dword [ebp - 0x68], ecx
mov ecx, esi
push 5
test eax, eax
jne 0x40952b
push 0x40df64
jmp 0x409530
push 0x40df6c
push ebx
call dword [section..rdata]
call esi
mov ecx, dword [ebp - 0x6c]
add esp, 0xc
and ecx, 0xffdfffff
add edi, eax
xor edx, edx
mov dword [ebp - 0x6c], ecx
mov dword [ebp - 0x74], edx
mov eax, ecx
or eax, edx
je 0x4095b0
cmp dword [ebp - 0x68], 0
mov eax, 0x40de4c
je 0x409565
mov eax, 0x40de54
push 6
push eax
push ebx
mov ecx, esi
call dword [section..rdata]
call esi
push dword [ebp - 0x90]
mov edx, dword [ebp - 0x74]
add edi, eax
mov ecx, dword [ebp - 0x6c]
lea eax, [ebp - 0x54]
push 0xffffffffffffffff
push 1
push 0x10
push edx
push ecx
push eax
call fcn.00402f10
add esp, 0x28
mov ecx, esi
push eax
lea eax, [ebp - 0x54]
push eax
push ebx
call dword [section..rdata]
call esi
add edi, eax
add esp, 0xc
mov eax, dword [ebp - 0x68]
inc eax
jmp 0x4095b3
mov eax, dword [ebp - 0x68]
test eax, eax
je 0x407358
push 1
push 0x40de5c
jmp 0x407348
call fcn.004012cb
aad 0x8b
inc eax
add byte [esi + 0x6f00406b], bh
add byte [eax], 0xaa
add dword [eax], 0x6b
jae 0x40961f
add byte [edi + 0x75], dl
inc eax
add dh, dh
jne 0x409627
add byte [eax + 0x67004081], dh
add byte [eax], 0x1a
mov dword [eax], eax
add byte [ecx], cl
add dword [edx], eax
or dword [ecx], ecx
add dword [ecx], eax
add dword [ecx], ecx
add dword [ecx], ecx
add ecx, dword [ecx]
or dword [ecx], ecx
or dword [ecx], eax
or dword [ecx], eax
add dword [ecx], ecx
or dword [ecx], eax
or dword [ecx], ecx
or dword [ecx], ecx
or dword [ecx], ecx
or dword [ecx], ecx
or dword [ecx + ecx], eax
or dword [ecx], ecx
add eax, 151586313
or dword [ecx], ecx
or dword [ecx], ecx
or dword [ecx], ecx
or dword [edi], eax
or dword [ecx], ecx
or dword [ecx], ecx
or dword [ecx], ecx
pop es
or dword [ecx], ecx
or dword [ecx], ecx
or byte [eax + case.0x406cbf.0], dl
in eax, dx
insb byte es:[edi], dx
inc eax
add byte [ebx + 0x6d], bh
inc eax
add byte [ecx], dl
insd dword es:[edi], dx
inc eax
add byte [ebx + 0x6d], bh
inc eax
add byte [ebx + 0x6d], bh
inc eax
add byte [ebx + 0x6d], bh
inc eax
add byte [0x6200406d], dh
insd dword es:[edi], dx
inc eax
add ch, al
insd dword es:[edi], dx
inc eax
add byte [ebx + 0x6d], bh
inc eax
add bh, bl
insd dword es:[edi], dx
inc eax
add byte [ebx + 0x6d], bh
inc eax
add dl, bh
insd dword es:[edi], dx
inc eax
add byte [ebx + 0x6d], bh
inc eax
add byte [0x7b00406d], dh
insd dword es:[edi], dx
inc eax
add byte [edi], dl
outsb dx, byte [esi]
inc eax
add byte [edi + 0x6e], bl
inc eax
add byte [esi + ebp*2 + 0x6ec50040], al
inc eax
add byte [esi + 0x6f], dl
inc eax
add byte [edi - 0x3ffbf91], ah
outsd dx, dword [esi]
inc eax
add byte [edx + 0x70], dl
inc eax
add byte [edx - 0x1effbf90], cl
jo 0x4096d7
or dword [ecx], ecx
or dword [eax], ecx
nop
invalid
add byte [ebx], bh
jno 0x4096db
add byte [0xb1004072], bh
jb 0x4096e3
add byte [ecx + 0x2d004072], dh
jbe 0x4096eb
add byte [ebp + edi*2 + 0x7d210040], ch
inc eax
add byte [edx], bl
mov dword [eax], eax
add byte [ebx], al
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ecx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add al, byte [ebx]
add eax, dword [ecx]
add eax, dword [ebx]
add byte [ebp - 2109407159], cl
add eax, dword [eax]
lea ecx, [ecx]
inc ebp
add byte [eax], 223
add byte [ebp - 0x7e], al
inc eax
add bh, bl
add dword [eax], case.0x4081d8.102
add dword [edx - 0x76e5ffc0], eax
inc eax
add byte [eax], al
add al, 1
add byte [ebx], ah
add byte [eax], 1
add byte [eax], 0x1a
add byte [edx], bl
mov dword [eax], eax
add byte [ecx + eax], al
add al, 4
add al, byte [esp + eax]
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add edx, dword [eax + case.0x408516.8]
test dword gs:[eax], eax
pop ecx
test dword [eax], eax
dec ebp
test dword [eax], eax
sbb eax, 0x35004085
test dword [eax], eax
sub dword [ebp - 0x7a8effc0], eax
inc eax
add byte [eax], al
add dword [edx], eax
pop es
add eax, dword [edi]
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
add al, 7
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
add eax, 117901063
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
push es
lea ecx, [ecx]
test byte [edx - 0x7500ffc0], 0x40
add ch, ch
mov al, byte [eax]
fisttp dword [edx - 0x751bffc0]
inc eax
add cl, cl
mov al, byte [eax]
ror byte [edx - 0x74e9ffc0], cl
inc eax
add byte [eax], al
pop es
pop es
add dword [edi], eax
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
add al, byte [edi]
pop es
pop es
add eax, dword [edi + eax]
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
add eax, -859044345
int3