Function at 0x4172a0
Capabilities:
Access peb ldr_data
Get kernel32 base address

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x40
mov eax, dword [0x53182c]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov eax, dword [0x5325b8]
lea ecx, [eax - 1]
imul ecx, eax
mov edx, ecx
mov eax, ecx
and ecx, 0x5476f52d
not edx
or eax, 1
mov esi, eax
and edx, 0xab890ad2
not esi
or edx, ecx
mov ecx, eax
and ecx, 0xc6443781
and esi, 0x39bbc87e
or esi, ecx
mov ecx, edx
xor edx, 0x5476f52c
xor ecx, 0x29890852
or eax, edx
and edx, 0xc6443781
and ecx, 0x39bbc87e
not eax
or ecx, edx
xor ecx, esi
or eax, ecx
mov ecx, eax
and eax, 0x97d029d6
not ecx
and ecx, 0x682fd629
or eax, ecx
mov ecx, eax
xor eax, 0x8014408
xor ecx, 0x13100042
and eax, 0x8cc16d9c
and ecx, 0x733e9263
or ecx, eax
mov eax, ecx
xor ecx, 0x733e9263
xor eax, 0x8c804c00
mov edx, ecx
and edx, 0x434ba1be
and eax, 0xbcb45e41
or eax, edx
mov edx, dword [0x5325bc]
xor eax, 0x434ba1be
xor ecx, eax
test ecx, eax
mov eax, 0xa5c6ac9
sete byte [ebp - 0x42]
cmp edx, 0xa
setl byte [ebp - 0x41]
nop word cs:[eax + eax]
nop dword [eax]
cmp eax, 0xfb7fae96
jg 0x417540
cmp eax, 0xdaa10dd1
jle 0x4174f0
cmp eax, 0xe8867d7c
jle 0x417779
cmp eax, 0xf382be12
jg 0x417996
cmp eax, 0xe8867d7d
je 0x417ec9
cmp eax, 0xeb600dec
je 0x417f0c
cmp eax, 0xf068bca5
jne 0x417380
mov eax, dword [ebp - 0x30]
mov ecx, dword [0x5325b8]
lea eax, [ecx - 1]
imul eax, ecx
mov ecx, eax
not ecx
and eax, ecx
mov edx, ecx
and edx, eax
xor eax, ecx
or eax, edx
mov edx, eax
mov ecx, eax
xor edx, 1
not ecx
and edx, eax
and ecx, 0xfffffffe
and eax, 1
or eax, ecx
mov ecx, edx
and edx, 0xb963e026
not ecx
mov esi, ecx
and esi, 0x469c1fd9
or edx, esi
mov esi, eax
and eax, 0xb963e026
not esi
or ecx, esi
and esi, 0x469c1fd9
or eax, esi
not ecx
mov esi, 0x1894f6e5
xor eax, edx
mov edx, dword [0x5325bc]
or ecx, eax
mov eax, ecx
and ecx, 0x19e27713
not eax
and eax, 0xe61d88ec
or ecx, eax
mov eax, ecx
and ecx, 0xe61d88ec
not eax
and eax, 0x19e27713
or ecx, eax
sete ah
setne ch
cmp edx, 9
setg al
cmp edx, 0xa
mov dh, ch
setl dl
mov cl, al
or dh, dl
and ch, dl
mov dl, al
or cl, ah
xor dl, ah
xor dh, 1
xor cl, 1
and dl, al
and al, ah
mov bl, dh
or al, ch
mov ah, dl
and bl, cl
xor cl, dh
and ah, al
xor al, dl
or cl, bl
or al, ah
mov edx, eax
mov ah, al
not dl
and dl, al
xor dl, 1
xor ah, dl
or dl, al
mov al, cl
xor dl, 1
xor al, 1
or dl, ah
and cl, al
mov ah, al
and ah, cl
xor cl, al
or cl, ah
mov ah, cl
and cl, dl
xor dl, 1
xor ah, 1
and ah, dl
or cl, ah
mov ah, al
xor al, dl
and ah, dl
or al, ah
mov edx, eax
xor dl, cl
test dl, 1
mov edx, 0xf49c379e
cmovne edx, esi
test al, 1
mov eax, 0xf49c379e
jmp 0x417ebe
cmp eax, 0xaec695c6
jg 0x4177c5
cmp eax, 0x960ba2c3
jle 0x417a0b
cmp eax, 0x960ba2c4
je 0x4180d0
cmp eax, 0x9c8263e1
je 0x4180e5
cmp eax, 0xa13f7061
jne 0x417380
mov eax, 0x700957ab
cmp eax, 0xfb7fae96
jle 0x41738b
nop word [eax + eax]
cmp eax, 0x1894f6e4
jle 0x4175a0
cmp eax, 0x60f97ec8
jle 0x4178f5
cmp eax, 0x6efd6067
jg 0x4179d5
cmp eax, 0x60f97ec9
je 0x4180fa
cmp eax, 0x655e7ce2
je 0x4181a8
cmp eax, 0x6ef7e00e
jne 0x417380
mov eax, 0xaec695c7
mov dword [ebp - 0x4c], 0x4e4
cmp eax, 0xfb7fae96
jle 0x41738b
jmp 0x417540
cmp eax, 0xa5c6ac8
jg 0x417952
cmp eax, 0x169c60b
jle 0x417a42
cmp eax, 0x169c60c
je 0x4181c0
cmp eax, 0x627ebc7
je 0x4181f0
cmp eax, 0x96f4f6a
jne 0x417380
push dword [ebp + 8]
call fcn.004168f0
add esp, 4
mov eax, dword [0x5325b8]
lea edx, [eax - 1]
imul edx, eax
mov eax, edx
or edx, 0xd843035c
not eax
and edx, 0xfc43835c
mov esi, eax
and eax, 0x21c30a2
or esi, 0x261cb0a2
or eax, edx
mov ecx, esi
and esi, 0xfc43835c
not ecx
and ecx, 0x1a04c01
or ecx, esi
xor ecx, eax
mov eax, ecx
and ecx, 0x261cb0a2
not eax
and eax, 0xd9e34f5d
or ecx, eax
mov esi, ecx
mov eax, ecx
xor esi, 0xca00316e
not eax
mov edi, esi
and esi, ecx
and ecx, 0x614fedbe
and edi, eax
mov edx, edi
and edi, 0x7ea2418f
not edx
mov ebx, edx
and ebx, 0x815dbe70
or edi, ebx
mov ebx, esi
and esi, 0x7ea2418f
not ebx
or edx, ebx
and ebx, 0x815dbe70
or esi, ebx
not edx
xor esi, edi
or edx, esi
mov esi, edx
and edx, 0xfba02205
not esi
and esi, 0x45fddfa
or edx, esi
mov esi, eax
and eax, 1
and esi, 0x9eb01241
xor edx, 0x31a0136a
or esi, ecx
mov ecx, edx
xor esi, 0x614fedbf
or eax, esi
not eax
and ecx, eax
xor eax, edx
or eax, ecx
mov ecx, eax
mov esi, eax
not ecx
and esi, 0x6ffe94eb
mov edx, ecx
and ecx, 0x90016b14
and edx, eax
or ecx, esi
mov esi, edx
and edx, 0x90016b14
not esi
or eax, esi
and esi, 0x6ffe94eb
or edx, esi
not eax
mov esi, 0xa13f7061
xor edx, ecx
or eax, edx
mov ecx, eax
and eax, 0xa00455ad
not ecx
mov edx, ecx
and edx, 0x5ffbaa52
or eax, edx
mov edx, dword [0x5325bc]
xor eax, 0xa00455ad
or eax, ecx
cmp eax, 0xffffffff
sete ch
setne ah
cmp edx, 9
setg al
cmp edx, 0xa
mov cl, ch
setl dl
xor cl, ah
and cl, ch
xor cl, 1
mov dh, cl
xor cl, dl
or dh, dl
not cl
xor dh, 1
and cl, dl
mov bl, dh
and bl, cl
xor cl, dh
mov dh, dl
xor dl, ch
and ch, al
or al, ah
and dh, ah
xor al, 1
or cl, bl
or al, dl
or dh, ch
xor al, 1
mov dl, dh
and dl, al
xor al, dh
or al, dl
mov edx, eax
xor dl, cl
xor cl, 1
or cl, al
xor dl, 1
mov eax, ecx
xor al, dl
test al, 1
mov eax, 0xe826a0db
cmovne esi, eax
test dl, 1
mov edx, 0xa13f7061
jmp 0x4183ee
cmp eax, 0xe008315b
jle 0x417a6d
cmp eax, 0xe008315c
je 0x418208
cmp eax, 0xe3a3bfd5
je 0x418241
cmp eax, 0xe826a0db
jne 0x417380
push dword [ebp + 8]
call fcn.004168f0
add esp, 4
mov eax, 0x96f4f6a
cmp eax, 0xfb7fae96
jle 0x41738b
jmp 0x417540
cmp eax, 0xc51a6202
jle 0x417b7e
cmp eax, 0xc51a6203
je 0x418259
cmp eax, 0xd05ab4af
je 0x418275
cmp eax, 0xd7176499
jne 0x417380
push eax
sub esp, 0xc
mov ecx, dword [0x5325b8]
mov eax, esp
mov dword [ebp - 0x40], eax
lea eax, [ecx - 1]
imul eax, ecx
mov edx, eax
mov ecx, eax
xor edx, 0xfb2f95ca
not ecx
and edx, eax
or eax, 0x4d06a35
mov edi, ecx
mov esi, eax
and edi, 0x520d81ca
and esi, 0xad221411
or edi, esi
mov esi, edx
and edx, 0x52ddebee
not esi
or eax, esi
and esi, 0xad221411
or edx, esi
not eax
mov esi, 0xf382be13
xor edx, edi
or eax, edx
mov edx, eax
and eax, 0xfb2f95cb
not edx
and edx, 0x4d06a34
or eax, edx
mov edx, eax
and eax, 0xec08b46d
not edx
and edx, 0x13f74b92
or eax, edx
xor eax, 0xec08b46d
mov edx, eax
xor eax, ecx
and edx, ecx
or eax, edx
mov ecx, eax
and eax, 0x4d58991f
not ecx
and ecx, 0xb2a766e0
or eax, ecx
mov ecx, dword [0x5325bc]
xor eax, 0x4d58991f
sete al
setne dl
cmp ecx, 0xa
setl ah
cmp ecx, 9
setg cl
and ah, dl
mov ch, cl
and al, cl
xor cl, dl
and ch, dl
or ah, al
or cl, ch
mov al, ah
mov ch, cl
xor al, cl
xor ch, 1
xor al, 1
and cl, ch
mov edx, ecx
xor cl, ch
and dl, ch
or cl, dl
xor cl, ah
or ah, ch
xor ah, 1
or ah, al
mov dl, ah
xor dl, cl
test ah, 1
mov eax, 0x3beb6926
cmovne eax, esi
test cl, 1
mov ecx, 0x3beb6926
cmove eax, esi
test dl, 1
jmp 0x4189ec
cmp eax, 0x27543e15
jle 0x417d1f
cmp eax, 0x27543e16
je 0x4183fb
cmp eax, 0x3beb6926
je 0x418410
cmp eax, 0x4f7c3b25
jne 0x417380
mov edi, dword fs:[0x30]
mov edi, dword [edi + 0xc]
mov esi, dword [edi + 0xc]
mov eax, dword [esi]
mov eax, dword [eax]
mov eax, dword [eax + 0x18]
mov dword [section..warn], eax
mov eax, dword [ebp - 0x38]
mov eax, 0xca04a31
cmp eax, 0xfb7fae96
jle 0x41738b
jmp 0x417540
cmp eax, 0x148dac99
jle 0x417d5d
cmp eax, 0x148dac9a
je 0x418425
cmp eax, 0x151dc0cd
je 0x4185c4
cmp eax, 0x18731b1e
jne 0x417380
mov eax, dword [ebp - 0x30]
mov eax, 0xe3a3bfd5
cmp eax, 0xfb7fae96
jle 0x41738b
jmp 0x417540
cmp eax, 0xf382be13
je 0x4185ec
cmp eax, 0xf49c379e
je 0x418601
cmp eax, 0xf565be6b
jne 0x417380
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x34]
mov eax, 0xe008315c
cmp eax, 0xfb7fae96
jle 0x41738b
jmp 0x417540
cmp eax, 0x6efd6068
je 0x4187d7
cmp eax, 0x700957ab
je 0x4187ec
cmp eax, 0x7374b652
jne 0x417380
mov eax, 0xf49c379e
cmp eax, 0xfb7fae96
jle 0x41738b
jmp 0x417540
cmp eax, 0x88158a0d
je 0x418b82
cmp eax, 0x90283e74
jne 0x417380
push eax
mov eax, esp
mov dword [ebp - 0x3c], eax
push eax
mov eax, esp
mov dword [ebp - 0x38], eax
mov eax, 0xf565be6b
cmp eax, 0xfb7fae96
jle 0x41738b
jmp 0x417540
cmp eax, 0xfb7fae97
je 0x418916
cmp eax, 0xfcca21cf
jne 0x417380
mov eax, 0x655e7ce2
cmp eax, 0xfb7fae96
jle 0x41738b
jmp 0x417540
cmp eax, 0xdaa10dd2
je 0x4189b9
cmp eax, 0xddb79b9c
jne 0x417380
mov eax, dword [section..warn]
mov dword [ebp - 0x28], eax
mov eax, dword [0x5325b8]
lea ecx, [eax - 1]
imul ecx, eax
mov eax, ecx
mov esi, ecx
and ecx, 0xcdba37c0
not eax
and esi, 0xa80914
mov edx, eax
mov ebx, eax
and eax, 0x3245c83f
and edx, 0x344060ca
or ebx, 0x34e869de
or eax, ecx
mov ecx, dword [0x5325bc]
or esi, edx
mov edx, ebx
and ebx, 0x38309bf2
mov edi, esi
xor esi, 0x381092e2
not edx
xor edi, 0x880004
and edx, 0xc3070401
and esi, 0x38309bf2
and edi, 0x4c8600c
or edx, ebx
or edi, esi
xor edx, edi
mov esi, edx
and edx, 0x692376d6
not esi
and esi, 0x96dc8929
or edx, esi
mov esi, edx
xor edx, 0xa234e0f6
xor esi, 0x10410809
mov edi, edx
and edi, 0xcdba37c0
and esi, 0x3245c83f
or esi, edi
mov edi, 0x27543e16
xor eax, esi
mov esi, 0xdaa10dd2
not eax
or eax, edx
cmp eax, 0xffffffff
sete al
setne dl
cmp ecx, 9
setg ah
cmp ecx, 0xa
setl cl
and al, ah
mov ch, cl
xor ch, dl
and dl, cl
mov dh, ch
or al, dl
xor dh, ah
and dh, ch
xor al, dh
mov ecx, eax
not cl
and cl, dh
mov edx, ecx
xor dl, al
test al, al
mov eax, 0x27543e16
cmovne eax, esi
test cl, cl
cmove eax, edi
test dl, dl
jmp 0x4185b1
cmp eax, 0xaec695c7
je 0x4189ce
cmp eax, 0xc42a56f3
jne 0x417380
mov eax, dword [0x5325b8]
mov edi, 0xddb79b9c
lea ecx, [eax - 1]
imul ecx, eax
mov edx, ecx
mov eax, ecx
xor edx, 0x88adc514
or eax, 0x77523aeb
and edx, ecx
mov ecx, eax
mov esi, eax
not ecx
and esi, 0x365d105b
and ecx, 0x88a0c504
or ecx, esi
mov esi, edx
and edx, 0xc9a2efa4
not esi
or eax, esi
and esi, 0x365d105b
or edx, esi
not eax
xor edx, ecx
or eax, edx
mov ecx, eax
and eax, 0x88adc514
not ecx
and ecx, 0x77523aeb
or eax, ecx
mov edx, eax
mov ecx, eax
xor edx, 1
not ecx
and edx, eax
and ecx, 0xf422667d
and eax, 0xbdd9982
or eax, ecx
mov ecx, edx
and edx, 0xfb41f30
not ecx
mov esi, ecx
and esi, 0xf04be0cf
or edx, esi
mov esi, eax
xor eax, 0xf422667c
xor esi, 0xb941900
or ecx, eax
and eax, 0xf04be0cf
and esi, 0xfb41f30
not ecx
or esi, eax
xor esi, edx
or ecx, esi
mov edx, ecx
mov eax, ecx
xor edx, 0x21bc46a8
and eax, 0xe6433b56
and edx, ecx
not ecx
and ecx, 0x19bcc4a9
or eax, ecx
mov ecx, eax
xor eax, 0x1bc44a8
or eax, 0xde43b957
xor ecx, 0x20000200
mov esi, eax
and ecx, 0x21280200
and esi, 0xdcd75cbc
or ecx, esi
mov esi, edx
and edx, 0x2328a343
not esi
or eax, esi
and esi, 0xdcd75cbc
or edx, esi
not eax
mov esi, 0x27543e16
xor edx, ecx
or eax, edx
mov ecx, eax
and eax, 0x21bc46a8
not ecx
and ecx, 0xde43b957
or eax, ecx
mov eax, dword [0x5325bc]
sete dl
setne ch
cmp eax, 9
setg dh
cmp eax, 0xa
setl al
mov cl, dh
xor dh, ch
mov ah, al
and ch, al
xor al, dl
and cl, dl
and ah, dl
or cl, ch
or al, ah
mov dl, al
xor dl, dh
xor dh, 1
or dh, al
xor dl, 1
xor dh, 1
or dh, dl
mov al, dh
mov dl, dh
xor al, 1
and al, dh
xor al, 1
xor dl, al
or al, dh
xor al, 1
or al, dl
xor al, cl
mov edx, eax
xor dl, 1
and cl, dl
xor dl, cl
test dl, 1
cmovne edi, esi
test al, 1
mov esi, 0xddb79b9c
mov eax, edi
cmovne eax, esi
test cl, cl
jmp 0x418195
cmp eax, 0x1894f6e5
je 0x4189ff
cmp eax, 0x26ca81ca
jne 0x417380
push 0x9385646d
push dword [ebp - 0x28]
call fcn.00413250
add esp, 8
mov dword [ebp - 0x24], eax
mov eax, 0xe8867d7d
cmp eax, 0xfb7fae96
jle 0x41738b
jmp 0x417540
cmp eax, 0xa5c6ac9
je 0x418ae2
cmp eax, 0xca04a31
jne 0x417380
mov edi, dword fs:[0x30]
mov edi, dword [edi + 0xc]
mov esi, dword [edi + 0xc]
mov eax, dword [esi]
mov eax, dword [eax]
mov eax, dword [eax + 0x18]
mov dword [section..warn], eax
mov eax, dword [ebp - 0x38]
mov ecx, dword [0x5325b8]
lea eax, [ecx - 1]
imul eax, ecx
mov edx, eax
mov ecx, eax
not edx
or ecx, 1
mov edi, edx
mov esi, ecx
and edx, 0xe6be2448
and esi, 0xd238ef95
and edi, 0x2dc7106a
or edi, esi
mov esi, eax
xor esi, 0xfffffffe
and esi, eax
and eax, 0x1941dbb7
mov ebx, esi
and esi, 0x2dc7106a
or eax, edx
not ebx
or ecx, ebx
and ebx, 0xd238ef95
or esi, ebx
not ecx
xor esi, edi
or ecx, esi
mov edx, ecx
and ecx, 0x51db4133
not edx
mov esi, edx
and esi, 0xae24becc
or ecx, esi
mov esi, eax
xor eax, 0xa6242448
xor esi, 0x11414133
and eax, 0xae24becc
and esi, 0x51db4133
or esi, eax
xor esi, ecx
mov ecx, dword [0x5325bc]
not esi
or esi, edx
cmp esi, 0xffffffff
mov esi, 0x4f7c3b25
setne dl
sete ah
cmp ecx, 9
setg al
cmp ecx, 0xa
setl ch
mov dh, ch
xor dh, al
and dh, ch
mov cl, dh
mov bl, dh
xor cl, 1
or bl, cl
xor dh, bl
or bl, cl
mov cl, ah
xor cl, dl
xor dh, 1
xor bl, 1
and dl, ch
mov ch, al
and cl, ah
or bl, dh
xor ch, ah
xor cl, 1
and ch, al
and al, ah
mov dh, cl
xor cl, bl
or al, dl
xor ch, 1
xor cl, 1
or dh, bl
xor al, 1
mov dl, ch
and cl, bl
mov bl, dh
xor dl, al
or al, ch
xor cl, 1
xor al, 1
xor bl, cl
or cl, dh
or al, dl
xor cl, 1
mov edx, eax
or cl, bl
xor dl, 1
mov ah, cl
and cl, al
xor ah, 1
and dl, ah
or cl, dl
mov dl, ah
xor ah, al
and dl, al
or ah, dl
mov edx, 0x7374b652
mov al, ah
xor al, cl
test al, 1
cmovne edx, esi
test ah, 1
mov eax, 0x7374b652
cmovne eax, edx
test cl, 1
jmp 0x418acf
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x24]
mov dword [eax], ecx
mov eax, dword [ebp - 0x38]
mov edx, dword [eax]
call edx
push 0x27
push section..data
push 0x547
push 0x531027
call section..text
add esp, 0x10
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x20], eax
mov eax, 0x151dc0cd
cmp eax, 0xfb7fae96
jle 0x41738b
jmp 0x417540
mov ecx, dword [0x5325b8]
lea eax, [ecx - 1]
imul eax, ecx
mov ecx, eax
not ecx
mov edx, ecx
and ecx, eax
and eax, 0xb9c7c4ed
and edx, 0x46383b12
or eax, edx
mov edx, eax
xor eax, 0x46383b12
xor edx, 0x90014409
mov esi, eax
and esi, 0x69de9bf6
and edx, 0x96216409
or edx, esi
mov esi, ecx
and ecx, 0x96216409
not esi
or eax, esi
and esi, 0x69de9bf6
or ecx, esi
not eax
xor ecx, edx
or eax, ecx
mov edx, eax
and eax, 1
not edx
mov ecx, edx
and edx, 0xfffffffe
or ecx, 1
or eax, edx
mov esi, ecx
mov edx, ecx
not esi
and edx, 0xc1f3d315
and esi, 0x3e0c2cea
or esi, edx
mov edx, eax
and eax, 0x3e0c2cea
not edx
or ecx, edx
and edx, 0xc1f3d315
or eax, edx
not ecx
xor eax, esi
or ecx, eax
mov edx, ecx
mov eax, ecx
xor edx, 0x23ed9b6d
and eax, 0x4b5897bd
and edx, ecx
not ecx
and ecx, 0xb4a76842
or eax, ecx
mov ecx, eax
xor eax, 0x20a50840
or eax, 0xdc126492
xor ecx, 0x3009221
mov esi, eax
and ecx, 0x3a59221
and esi, 0xa04a4d5c
or ecx, esi
mov esi, edx
and edx, 0x5fb5b2a3
not esi
or eax, esi
and esi, 0xa04a4d5c
or edx, esi
not eax
mov esi, 0x6efd6068
xor edx, ecx
or eax, edx
mov ecx, eax
and eax, 0xc373d6fe
not ecx
and ecx, 0x3c8c2901
or eax, ecx
mov ecx, eax
xor eax, 0x19201260
xor ecx, 0xe0104500
and eax, 0x19ae1af3
and ecx, 0xe651e50c
or ecx, eax
mov eax, ecx
xor ecx, 0x800820
xor eax, 0x26404004
and ecx, 0xc091ad28
and eax, 0x3f6e52d7
or eax, ecx
mov ecx, dword [0x5325bc]
xor eax, 0x3f6e52d7
sete dl
setne ah
cmp ecx, 0xa
setl al
cmp ecx, 9
mov ch, ah
setg cl
and ah, al
and al, dl
and ch, cl
or al, ch
xor al, 1
or al, cl
and cl, dl
mov ch, al
or cl, ah
xor ch, 1
mov dl, ch
and dl, al
mov dh, dl
xor dl, ch
xor dh, 1
or dh, al
xor dh, 1
or dh, dl
mov dl, dh
xor dl, 1
and dl, cl
xor cl, 1
and dh, cl
or dh, dl
mov dl, al
and dl, cl
xor cl, al
mov eax, 0xd05ab4af
or cl, dl
mov dl, cl
xor dl, dh
test cl, 1
cmovne eax, esi
test dh, dh
not dl
cmove eax, esi
test dl, 1
mov edx, 0xd05ab4af
cmovne eax, edx
cmp eax, 0xfb7fae96
jle 0x41738b
jmp 0x417540
mov eax, 0x627ebc7
cmp eax, 0xfb7fae96
jle 0x41738b
jmp 0x417540
mov eax, 0xeb600dec
cmp eax, 0xfb7fae96
jle 0x41738b
jmp 0x417540
mov eax, dword [0x5325b8]
mov ecx, dword [0x5325bc]
mov edi, 0x960ba2c4
lea edx, [eax - 1]
imul edx, eax
mov eax, edx
and edx, 1
not eax
mov esi, eax
and esi, 0xfffffffe
or edx, esi
not edx
mov esi, edx
xor edx, eax
and esi, eax
or edx, esi
mov esi, 0x9c8263e1
cmp edx, 0xffffffff
sete dl
setne ah
cmp ecx, 9
setg al
cmp ecx, 0xa
setl cl
mov ch, al
or cl, ah
or ch, dl
xor dl, al
xor cl, 1
and dl, al
xor ch, 1
xor al, ah
mov dh, cl
and dh, ch
xor ch, cl
mov cl, dl
xor dl, al
xor al, 1
xor cl, 1
or ch, dh
or al, cl
mov cl, ch
xor al, 1
or al, dl
xor cl, al
xor al, 1
mov edx, eax
or al, ch
xor cl, 1
xor al, 1
xor dl, ch
or al, cl
mov ecx, eax
xor cl, dl
test cl, 1
cmovne edi, esi
test al, 1
mov eax, 0x960ba2c4
cmovne eax, edi
test dl, 1
cmove eax, edi
cmp eax, 0xfb7fae96
jle 0x41738b
jmp 0x417540
mov eax, dword [ebp - 0x2c]
mov eax, 0xc42a56f3
cmp eax, 0xfb7fae96
jle 0x41738b
jmp 0x417540
push dword [ebp - 0x48]
push dword [section..warn]
call fcn.00413250
add esp, 8
mov dword [ebp - 0x1c], eax
mov eax, 0x6ef7e00e
mov dword [ebp - 0x4c], 0
cmp eax, 0xfb7fae96
jle 0x41738b
jmp 0x417540
mov eax, dword [ebp - 0x2c]
mov eax, 0x18731b1e
cmp eax, 0xfb7fae96
jle 0x41738b
jmp 0x417540
mov eax, dword [ebp - 0x34]
mov dword [eax + 0xc], 0xe901fcff
mov dword [eax + 8], 0x67341306
mov dword [eax + 4], 0x34385717
mov dword [eax], 0x18190501
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x30], eax
mov eax, 0xf068bca5
cmp eax, 0xfb7fae96
jle 0x41738b
jmp 0x417540
mov eax, dword [ebp - 0x34]
mov eax, 0x88158a0d
cmp eax, 0xfb7fae96
jle 0x41738b
jmp 0x417540
mov eax, 0x169c60c
mov dword [ebp - 0x48], 0x8aafdc01
cmp eax, 0xfb7fae96
jle 0x41738b
jmp 0x417540
mov ecx, dword [0x5325b8]
lea eax, [ecx - 1]
imul eax, ecx
mov ecx, eax
not ecx
mov edx, ecx
and ecx, eax
and eax, 0x50acfa11
and edx, 0xaf5305ee
or eax, edx
xor eax, 0x50acfa11
mov edx, eax
xor eax, ecx
and edx, ecx
or eax, edx
mov ecx, eax
mov edx, eax
and eax, 0x9143414c
not ecx
and edx, 0xb0bae3b5
and ecx, 0x4f451c4a
or edx, ecx
mov ecx, edx
mov esi, edx
xor edx, 0x49010c0a
xor ecx, 0xb0bae3b5
xor esi, 0x21f9a2f9
and edx, 0x79b90e2f
and esi, ecx
mov edi, esi
and edi, eax
xor eax, esi
or eax, edi
mov esi, eax
and eax, 0x48bff5a4
not esi
and esi, 0xb7400a5b
or eax, esi
mov esi, ecx
and ecx, 1
and esi, 0x8646f1d0
or esi, edx
mov edx, eax
xor eax, 0xd9fcb4e9
xor esi, 0x79b90e2e
xor edx, 0x4020106
or ecx, esi
mov esi, eax
and edx, 0x1d861506
and esi, 0xe279eaf9
or eax, ecx
or edx, esi
mov esi, ecx
and ecx, 0xe279eaf9
not eax
not esi
and esi, 0x1d861506
or esi, ecx
xor esi, edx
or eax, esi
mov esi, dword [0x5325bc]
mov edx, eax
mov ecx, eax
xor edx, 0x21f21835
and ecx, 0x1121030
and edx, eax
not eax
and eax, 0x20e00805
or ecx, eax
xor ecx, 0x1121030
mov eax, ecx
and eax, edx
xor edx, ecx
or edx, eax
mov eax, edx
and edx, 0x2114683e
not eax
and eax, 0xdeeb97c1
or edx, eax
xor edx, 0xe6700b
setne cl
sete dl
cmp esi, 0xa
setl al
cmp esi, 9
mov esi, 0x60f97ec9
setg ah
xor cl, dl
xor al, dl
and cl, dl
mov ch, ah
xor ch, cl
not ch
and ch, cl
or cl, ah
xor cl, 1
mov dh, ch
and dh, cl
xor cl, ch
mov ch, ah
xor ch, dl
or cl, dh
and ch, ah
mov dl, ch
xor ch, al
xor al, 1
xor dl, 1
or al, dl
xor al, 1
or al, ch
mov edx, eax
xor dl, cl
xor cl, 1
or cl, al
xor dl, 1
mov eax, ecx
xor al, dl
test al, 1
mov eax, 0x6efd6068
cmovne esi, eax
test dl, 1
mov edx, 0x60f97ec9
mov eax, esi
cmovne eax, edx
test cl, 1
jmp 0x4185b1
mov eax, 0xddb79b9c
cmp eax, 0xfb7fae96
jle 0x41738b
jmp 0x417540
mov eax, 0x90283e74
cmp eax, 0xfb7fae96
jle 0x41738b
jmp 0x417540
mov ecx, dword [0x5325b8]
mov eax, dword [0x5325bc]
lea edx, [ecx - 1]
imul edx, ecx
mov ecx, edx
and edx, 0x35b134b1
not ecx
mov esi, ecx
or ecx, 0xa10ed557
and esi, 0xca4ecb4e
or edx, esi
mov esi, edx
xor edx, 4
xor esi, 0x1001011
or edx, 0x58912800
and edx, 0x78912c04
and esi, 0x810ed153
or esi, edx
mov edx, ecx
and ecx, 0x78912c04
not edx
and edx, 0x66002a8
or edx, ecx
xor edx, esi
mov ecx, edx
and edx, 0xfdef9559
not ecx
and ecx, 0x2106aa6
or edx, ecx
mov ecx, edx
xor edx, 0xa31ebff0
xor ecx, 0x5ce1400e
and edx, 0xfffffffe
mov esi, ecx
and ecx, 1
and esi, 0xfffffffe
or ecx, edx
mov edx, esi
and edx, ecx
xor ecx, esi
or ecx, edx
mov edx, ecx
mov esi, ecx
and ecx, 0x245cf0
not edx
and esi, 0x50d9a20c
and edx, 0xaf020103
or esi, edx
xor esi, 0x50d9a20c
or ecx, esi
mov esi, 0x96f4f6a
mov edx, ecx
and ecx, 0x740ff244
not edx
and edx, 0x8bf00dbb
or ecx, edx
mov edx, ecx
xor ecx, 0x142aa4a0
xor edx, 0x104148
and ecx, 0x9feeb4a3
and edx, 0x60114b5c
or ecx, edx
xor ecx, 0x9feeb4a3
sete dl
setne ch
cmp eax, 9
setg cl
cmp eax, 0xa
mov ah, ch
setl al
xor ah, dl
and cl, dl
and ah, ch
and ch, al
mov dh, ah
mov bh, ah
or cl, ch
mov ch, al
xor dh, 1
and ch, dl
xor cl, 1
mov bl, dh
or dh, ah
and bl, ah
xor bl, 1
xor bh, bl
or bl, ah
xor bl, 1
or bl, bh
mov ah, bl
xor ah, dh
or dh, bl
xor dh, 1
or dh, ah
mov ah, dh
mov bl, dh
xor ah, 1
and ah, dh
xor ah, 1
xor bl, ah
or ah, dh
xor ah, 1
or ah, bl
xor ah, al
xor al, dl
mov edx, ecx
or al, ch
or cl, al
xor dl, al
xor cl, 1
or cl, dl
mov dl, ah
mov al, cl
xor dl, 1
xor al, 1
and al, dl
or dl, cl
and cl, ah
or cl, al
mov eax, edx
xor al, cl
test al, 1
mov eax, 0xe826a0db
cmovne esi, eax
test cl, 1
mov ecx, 0x96f4f6a
mov eax, esi
cmovne eax, ecx
test dl, 1
cmovne eax, esi
cmp eax, 0xfb7fae96
jle 0x41738b
jmp 0x417540
push 0x10
push dword [ebp - 0x20]
push dword [ebp + 0xc]
push dword [ebp + 8]
call section..text
add esp, 0x10
mov eax, 0xfb7fae97
cmp eax, 0xfb7fae96
jle 0x41738b
jmp 0x417540
mov eax, 0xd7176499
cmp eax, 0xfb7fae96
jle 0x41738b
jmp 0x417540
mov edi, dword fs:[0x30]
mov edi, dword [edi + 0xc]
mov esi, dword [edi + 0xc]
mov eax, dword [esi]
mov eax, dword [eax]
mov eax, dword [eax + 0x18]
mov dword [section..warn], eax
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x2c], eax
mov eax, dword [0x5325b8]
lea ecx, [eax - 1]
imul ecx, eax
mov edx, ecx
mov eax, ecx
xor edx, 0x8ee17b67
and eax, 0xe417965
and edx, ecx
not ecx
and ecx, 0x80a00202
or eax, ecx
mov ecx, eax
xor eax, 0xf1be869a
xor ecx, 0xe406020
mov esi, eax
and esi, 0x800b1fc5
and ecx, 0xee06022
or ecx, esi
mov esi, edx
and edx, 0x7ff4e03a
not esi
or eax, esi
and esi, 0x800b1fc5
or edx, esi
not eax
xor edx, ecx
or eax, edx
mov ecx, eax
and eax, 0x3d0de71e
not ecx
and ecx, 0xc2f218e1
or eax, ecx
mov edx, eax
xor eax, 0x4c136386
xor edx, 0xb3ec9c79
mov esi, eax
mov ecx, edx
and esi, 0x15ab406f
and edx, 0xaee43ff4
and ecx, 0xea54bf90
or ecx, esi
mov esi, ecx
and ecx, 0x15ab406e
not esi
and esi, 0xea54bf91
or ecx, esi
mov esi, eax
and eax, 1
and esi, 0x511bc00b
or esi, edx
xor esi, 0xaee43ff5
or eax, esi
mov edx, eax
and eax, 0xed5d4447
not edx
and edx, 0x12a2bbb8
or eax, edx
mov edx, ecx
and ecx, 0xb23069c8
not edx
mov esi, edx
and esi, 0x4dcf9637
or ecx, esi
mov esi, eax
xor eax, 0x12a2bbb8
xor esi, 0xa0104040
or edx, eax
and eax, 0x4dcf9637
and esi, 0xb23069c8
not edx
or esi, eax
xor esi, ecx
or edx, esi
mov esi, 0x1894f6e5
mov eax, edx
xor eax, 0x41b67d05
and eax, edx
not edx
and edx, 0x41b67d05
mov ecx, edx
and ecx, eax
xor eax, edx
or eax, ecx
mov ecx, eax
and eax, 0x41b67d05
not ecx
and ecx, 0xbe4982fa
or eax, ecx
mov ecx, eax
and eax, 0xe0bf2530
not ecx
and ecx, 0x1f40dacf
or ecx, eax
mov eax, ecx
xor ecx, 0x10001a8e
xor eax, 0x803c2010
and ecx, 0x70831fae
and eax, 0x8f7ce051
or eax, ecx
mov ecx, dword [0x5325bc]
xor eax, 0x8f7ce051
sete al
setne dl
cmp ecx, 0xa
setl ah
cmp ecx, 9
setg cl
and ah, al
and dl, cl
xor al, cl
or ah, dl
mov dl, ah
xor dl, cl
and dl, ah
mov ecx, edx
xor cl, al
xor al, 1
mov ch, al
or al, dl
xor cl, 1
xor al, 1
xor ch, dl
mov edx, 0xfcca21cf
or al, cl
mov cl, al
xor cl, ch
test cl, 1
cmovne edx, esi
test al, 1
mov eax, 0xfcca21cf
cmovne eax, edx
jmp 0x418acd
mov eax, 0xd05ab4af
cmp eax, 0xfb7fae96
jle 0x41738b
jmp 0x417540
mov eax, dword [0x5325b8]
lea ecx, [eax - 1]
imul ecx, eax
mov eax, ecx
mov esi, ecx
or eax, 0x716a2ea1
xor esi, 0x8e95d15e
mov edx, eax
mov edi, eax
and esi, ecx
not edx
and edi, 0x76176e59
and edx, 0x88809106
or edx, edi
mov edi, esi
and esi, 0x89e891a6
not edi
or eax, edi
and edi, 0x76176e59
or esi, edi
not eax
mov edi, ecx
xor esi, edx
not edi
or eax, esi
and edi, 0x37362337
mov edx, eax
and eax, 0x8e95d15f
not edx
and edx, 0x716a2ea0
or eax, edx
mov edx, eax
and eax, 0xde3fbb9f
not edx
and edx, 0x21c04460
or eax, edx
mov edx, eax
xor eax, 0x21c04460
mov esi, eax
xor edx, 0x16362317
or eax, ecx
and ecx, 0xc8c9dcc8
and esi, 0xc8c9dcc8
and edx, 0x37362337
or edi, ecx
mov ecx, dword [0x5325bc]
not eax
or edx, esi
xor edi, edx
or eax, edi
cmp eax, 0xffffffff
setne dl
sete ah
cmp ecx, 9
setg dh
cmp ecx, 0xa
setl al
mov ecx, eax
and al, dl
xor cl, ah
and ah, dh
or al, ah
mov ah, dh
or dh, dl
xor ah, dl
xor dh, 1
mov dl, cl
or dh, ah
xor dl, 1
mov ah, dh
mov ch, dl
xor ah, al
xor al, 1
and ch, cl
or al, dh
xor ah, 1
xor al, 1
or al, ah
mov ah, dl
and ah, ch
xor ch, dl
or ch, ah
mov ah, al
xor ah, 1
xor ch, al
xor al, dl
mov edx, 0x9c8263e1
or ah, cl
xor ah, 1
or ah, al
mov cl, ah
xor cl, ch
test ah, 1
mov eax, 0xeb600dec
cmovne eax, edx
test ch, 1
cmove eax, edx
test cl, 1
mov edx, 0xeb600dec
jmp 0x418acf
mov ecx, 0x818c28df
mov dword [ebp - 0x18], 1
nop word cs:[eax + eax]
nop dword [eax]
cmp ecx, 0xb3fe7dcc
jle 0x418970
cmp ecx, 0xb3fe7dcd
je 0x418955
cmp ecx, 0xf248ba16
je 0x418991
cmp ecx, 0x24a43b7c
jne 0x418930
jmp 0x418b5c
cmp byte [ebp - 0x11], 0
mov ecx, 0xf248ba16
mov edx, 0xaedb0072
cmovne ecx, edx
cmp ecx, 0xb3fe7dcc
jg 0x418938
nop
cmp ecx, 0x818c28df
je 0x4189a2
cmp ecx, 0xaedb0072
jne 0x418930
mov ecx, 0x24a43b7c
mov al, 1
cmp ecx, 0xb3fe7dcc
jg 0x418938
jmp 0x418970
mov ecx, 0x24a43b7c
xor eax, eax
cmp ecx, 0xb3fe7dcc
jg 0x418938
jmp 0x418970
cmp dword [ebp - 0x18], 0
mov ecx, 0xb3fe7dcd
sete byte [ebp - 0x11]
cmp ecx, 0xb3fe7dcc
jg 0x418938
jmp 0x418970
mov eax, 0x26ca81ca
cmp eax, 0xfb7fae96
jle 0x41738b
jmp 0x417540
mov eax, dword [ebp - 0x1c]
push dword [ebp - 0x3c]
push 0x40
push dword [ebp - 0x4c]
push 0x531027
call eax
test eax, eax
mov eax, 0x148dac9a
mov ecx, 0x627ebc7
cmove eax, ecx
cmp eax, 0xfb7fae96
jle 0x41738b
jmp 0x417540
mov ecx, dword [0x5325b8]
lea eax, [ecx - 1]
imul eax, ecx
mov edx, eax
mov ecx, eax
and eax, 0x72210d14
not edx
and ecx, 0x841912b8
mov esi, edx
and edx, 0x8ddef2eb
and esi, 0x7be6ed47
or eax, edx
or ecx, esi
xor eax, 0x72210d14
mov esi, ecx
and ecx, 0x7be6ed46
not esi
and esi, 0x841912b9
or ecx, esi
mov esi, ecx
and ecx, 0x64131f83
not esi
and esi, 0x9bece07c
or ecx, esi
mov esi, 0xca04a31
xor ecx, 0x64131f83
mov edx, ecx
and edx, eax
xor eax, ecx
mov ecx, dword [0x5325bc]
or eax, edx
cmp eax, 0xffffffff
sete al
setne dl
cmp ecx, 0xa
setl ah
cmp ecx, 9
mov ch, dl
setg cl
mov dh, ah
or dl, ah
and dh, al
and ch, cl
xor al, ah
xor dl, 1
or dh, ch
and al, ah
mov ah, dl
xor cl, dh
and ah, al
xor al, dl
and cl, dh
or al, ah
mov edx, ecx
mov ch, cl
xor dl, 1
and dl, al
xor al, 1
xor ch, al
and al, cl
and ch, cl
or al, dl
mov edx, 0x4f7c3b25
mov cl, ch
xor cl, al
test cl, 1
cmovne edx, esi
test al, 1
mov eax, edx
cmovne eax, esi
test ch, ch
cmove eax, edx
cmp eax, 0xfb7fae96
jle 0x41738b
jmp 0x417540
mov al, byte [ebp - 0x42]
mov dl, byte [ebp - 0x41]
mov esi, 0xd7176499
mov ah, al
mov ecx, edx
xor ah, 1
xor cl, 1
mov ch, ah
xor ch, cl
and cl, dl
mov dh, cl
xor cl, dl
and dh, dl
or cl, dh
and ah, cl
xor cl, 1
and cl, al
or al, dl
or cl, ah
xor al, 1
mov edx, ecx
or al, ch
xor dl, 1
and cl, dl
mov ah, dl
and ah, cl
xor cl, dl
or cl, ah
mov ah, al
and ah, dl
xor dl, al
xor cl, al
or dl, ah
mov eax, edx
xor al, cl
test al, 1
mov eax, 0xf382be13
cmovne esi, eax
test dl, 1
mov eax, 0xd7176499
cmovne eax, esi
test cl, 1
cmove eax, esi
cmp eax, 0xfb7fae96
jle 0x41738b
jmp 0x417540
test al, 1
mov eax, 0xc51a6203
mov ecx, 0x169c60c
mov dword [ebp - 0x48], 0
cmovne eax, ecx
cmp eax, 0xfb7fae96
jle 0x41738b
jmp 0x417540
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.00500b23
xor eax, eax
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret