Function at 0x77b66c
Capabilities:
Access the windows event log
Contain obfuscated stackstrings
Persist via run registry key

Disassembly:
push ebp
mov ebp, esp
mov ecx, 0x37
push 0
push 0
dec ecx
jne 0x77b674
push ecx
push ebx
push esi
push edi
xor eax, eax
push ebp
push 0x77dc54
push dword fs:[eax]
mov dword fs:[eax], esp
mov edx, dword [0x7c80e4]
mov edx, dword [edx]
mov ecx, 0x77dc70
mov eax, 0x80000001
call fcn.005b843c
mov edx, dword [0x7c8248]
mov dword [edx], eax
mov eax, dword [0x7c8248]
mov eax, dword [eax]
cmp eax, 0x10
ja case.0x77b6bc.0
jmp dword [eax*4 + 0x77b6c3]
mov eax, dword [0x7c7dc8]
mov edx, 0x77dc90
call fcn.00409ef0
jmp 0x77b841
mov eax, dword [0x7c7dc8]
mov edx, 0x77dcb4
call fcn.00409ef0
jmp 0x77b841
mov eax, dword [0x7c7dc8]
mov edx, 0x77dcd8
call fcn.00409ef0
jmp 0x77b841
mov eax, dword [0x7c7dc8]
mov edx, 0x77dcfc
call fcn.00409ef0
jmp 0x77b841
mov eax, dword [0x7c7dc8]
mov edx, 0x77dd20
call fcn.00409ef0
jmp 0x77b841
mov eax, dword [0x7c7dc8]
mov edx, 0x77dd44
call fcn.00409ef0
jmp 0x77b841
mov eax, dword [0x7c7dc8]
mov edx, 0x77dd70
call fcn.00409ef0
jmp 0x77b841
mov eax, dword [0x7c7dc8]
mov edx, 0x77dd94
call fcn.00409ef0
jmp 0x77b841
mov eax, dword [0x7c7dc8]
mov edx, 0x77ddb4
call fcn.00409ef0
jmp 0x77b841
mov eax, dword [0x7c7dc8]
mov edx, 0x77ddd8
call fcn.00409ef0
jmp 0x77b841
mov eax, dword [0x7c7dc8]
mov edx, 0x77ddfc
call fcn.00409ef0
jmp 0x77b841
mov eax, dword [0x7c7dc8]
mov edx, 0x77de20
call fcn.00409ef0
jmp 0x77b841
mov eax, dword [0x7c7dc8]
mov edx, 0x77de48
call fcn.00409ef0
jmp 0x77b841
mov eax, dword [0x7c7dc8]
mov edx, 0x77de6c
call fcn.00409ef0
jmp 0x77b841
mov eax, dword [0x7c7dc8]
mov edx, 0x77de94
call fcn.00409ef0
jmp 0x77b841
mov eax, dword [0x7c7dc8]
mov edx, 0x77deb8
call fcn.00409ef0
jmp 0x77b841
mov eax, dword [0x7c7dc8]
mov edx, 0x77dc90
call fcn.00409ef0
mov eax, dword [0x7c89a0]
cmp dword [eax], 0
je 0x77b857
mov eax, dword [0x7c89a0]
mov eax, dword [eax]
call fcn.00407e28
call fcn.004300e4
push eax
mov eax, dword [0x7c8534]
push dword [eax]
push 0x77dee0
mov eax, dword [0x7c7dc8]
push dword [eax]
lea eax, [ebp - 0x8c]
mov edx, 3
call fcn.0040a930
mov ecx, dword [ebp - 0x8c]
mov dl, 1
mov eax, dword [0x4e0400]
call fcn.004e4280
mov edx, dword [0x7c89a0]
mov dword [edx], eax
mov eax, dword [0x7c8290]
mov edx, 0x77def0
call fcn.00409ef0
mov eax, dword [0x7c8248]
mov eax, dword [eax]
cmp eax, 0x10
ja case.0x77b8b9.0
jmp dword [eax*4 + 0x77b8c0]
mov eax, dword [0x7c8290]
mov edx, 0x77df04
call fcn.00409ef0
jmp case.0x77b8b9.0
mov eax, dword [0x7c8290]
mov edx, 0x77df18
call fcn.00409ef0
jmp case.0x77b8b9.0
mov eax, dword [0x7c8290]
mov edx, 0x77df2c
call fcn.00409ef0
jmp case.0x77b8b9.0
mov eax, dword [0x7c8290]
mov edx, 0x77df40
call fcn.00409ef0
jmp case.0x77b8b9.0
mov eax, dword [0x7c8290]
mov edx, 0x77df54
call fcn.00409ef0
jmp case.0x77b8b9.0
mov eax, dword [0x7c8290]
mov edx, 0x77df68
call fcn.00409ef0
jmp case.0x77b8b9.0
mov eax, dword [0x7c8290]
mov edx, 0x77df7c
call fcn.00409ef0
jmp case.0x77b8b9.0
mov eax, dword [0x7c8290]
mov edx, 0x77df90
call fcn.00409ef0
jmp case.0x77b8b9.0
mov eax, dword [0x7c8290]
mov edx, 0x77dfa4
call fcn.00409ef0
jmp case.0x77b8b9.0
mov eax, dword [0x7c8290]
mov edx, 0x77dfb8
call fcn.00409ef0
jmp case.0x77b8b9.0
mov eax, dword [0x7c8290]
mov edx, 0x77dfcc
call fcn.00409ef0
jmp case.0x77b8b9.0
mov eax, dword [0x7c8290]
mov edx, 0x77dfe0
call fcn.00409ef0
jmp case.0x77b8b9.0
mov eax, dword [0x7c8290]
mov edx, 0x77dff4
call fcn.00409ef0
jmp case.0x77b8b9.0
mov eax, dword [0x7c8290]
mov edx, 0x77e008
call fcn.00409ef0
jmp case.0x77b8b9.0
mov eax, dword [0x7c8290]
mov edx, 0x77e01c
call fcn.00409ef0
mov eax, dword [0x7c8248]
cmp dword [eax], 2
jne 0x77ba4f
mov eax, dword [0x7c85cc]
mov edx, 0x77e030
call fcn.00409ef0
mov eax, dword [0x7c80c4]
mov edx, 0x77e044
call fcn.00409ef0
mov eax, dword [0x7c7cb4]
mov edx, 0x77e058
call fcn.00409ef0
jmp 0x77ba7c
mov eax, dword [0x7c85cc]
mov edx, 0x77e06c
call fcn.00409ef0
mov eax, dword [0x7c80c4]
mov edx, 0x77e080
call fcn.00409ef0
mov eax, dword [0x7c7cb4]
mov edx, 0x77e094
call fcn.00409ef0
push 0
lea eax, [ebp - 0x90]
push eax
mov eax, dword [0x7c89a0]
mov eax, dword [eax]
mov ecx, 0x77e0a8
mov edx, 0x77e0c0
mov ebx, dword [eax]
call dword [ebx + 8]
mov edx, dword [ebp - 0x90]
mov eax, dword [0x7d0930]
mov eax, dword [eax + 0x404]
call fcn.0058eb90
push 0
lea eax, [ebp - 0x94]
push eax
mov eax, dword [0x7c89a0]
mov eax, dword [eax]
mov ecx, 0x77e0dc
mov edx, 0x77e0c0
mov ebx, dword [eax]
call dword [ebx + 8]
mov edx, dword [ebp - 0x94]
mov eax, dword [0x7d0930]
mov eax, dword [eax + 0x408]
call fcn.0058eb90
push 0
lea eax, [ebp - 0x98]
push eax
mov eax, dword [0x7c89a0]
mov eax, dword [eax]
mov ecx, 0x77e0f0
mov edx, 0x77e10c
mov ebx, dword [eax]
call dword [ebx + 8]
mov edx, dword [ebp - 0x98]
mov eax, dword [0x7d0930]
mov eax, dword [eax + 0x40c]
call fcn.0058eb90
push 0
lea eax, [ebp - 0x9c]
push eax
mov eax, dword [0x7c89a0]
mov eax, dword [eax]
mov ecx, 0x77e128
mov edx, 0x77e140
mov ebx, dword [eax]
call dword [ebx + 8]
mov edx, dword [ebp - 0x9c]
mov eax, dword [0x7d0930]
mov eax, dword [eax + 0x410]
call fcn.0058eb90
mov edx, dword [0x7c80e4]
mov edx, dword [edx]
mov ecx, 0x77e15c
mov eax, 0x80000001
call fcn.005b8634
fstp qword [ebp - 0x38]
wait
call fcn.00427640
add esp, 0xfffffff8
fstp qword [esp]
wait
push dword [ebp - 0x34]
push dword [ebp - 0x38]
call fcn.004d9160
cmp eax, 0xa
jle 0x77bbd2
push 1
mov edx, dword [0x7c80e4]
mov edx, dword [edx]
mov ecx, 0x77e190
mov eax, 0x80000001
call fcn.005b88f4
push 1
mov edx, dword [0x7c80e4]
mov edx, dword [edx]
mov ecx, 0x77e1b4
mov eax, 0x80000001
call fcn.005b88f4
push 1
mov edx, dword [0x7c80e4]
mov edx, dword [edx]
mov ecx, 0x77e1ec
mov eax, 0x80000001
call fcn.005b88f4
mov edx, dword [0x7c80e4]
mov edx, dword [edx]
mov ecx, 0x77e214
mov eax, 0x80000001
call fcn.005b8634
fstp qword [ebp - 0x38]
wait
mov edx, dword [0x7c80e4]
mov edx, dword [edx]
mov ecx, 0x77e234
mov eax, 0x80000001
call fcn.005b854c
mov edx, dword [0x7c7ab8]
mov byte [edx], al
push dword [ebp - 0x34]
push dword [ebp - 0x38]
call fcn.004d8fa4
test al, al
je 0x77bc25
mov eax, dword [0x7c7ab8]
cmp byte [eax], 0
je 0x77bc4d
call fcn.006a993c
call fcn.00427640
add esp, 0xfffffff8
fstp qword [esp]
wait
mov edx, dword [0x7c80e4]
mov edx, dword [edx]
mov ecx, 0x77e214
mov eax, 0x80000001
call fcn.005b89c8
mov eax, 0x77e258
call fcn.006a7f94
push dword [0x7d093c]
push dword [0x7d0938]
lea edx, [ebp - 0x10]
mov eax, dword [0x7c8718]
call fcn.004285c8
push dword [0x7d093c]
push dword [0x7d0938]
lea edx, [ebp - 0x14]
mov eax, dword [0x7c8718]
call fcn.004285ec
push 0x77e308
push dword [ebp - 0x10]
push 0x77e35c
push dword [ebp - 0x14]
push 0x77e36c
lea edx, [ebp - 0xa4]
mov eax, dword [0x7c8248]
mov eax, dword [eax]
call fcn.0042419c
push dword [ebp - 0xa4]
push 0x77e3a8
mov eax, dword [0x7c7dc8]
push dword [eax]
push 0x77e3bc
lea eax, [ebp - 0xa0]
mov edx, 9
call fcn.0040a930
mov eax, dword [ebp - 0xa0]
call fcn.006a7f94
mov ecx, dword [0x7c815c]
mov ecx, dword [ecx]
lea eax, [ebp - 0xa8]
mov edx, 0x77e3cc
call fcn.0040a8a8
mov eax, dword [ebp - 0xa8]
call fcn.006a7f94
call fcn.006a6e04
call fcn.006a6e88
test al, al
je 0x77bd8b
call fcn.006a6fb8
test al, al
je 0x77bd2b
lea eax, [ebp - 0xc]
mov edx, 0x77e40c
call fcn.00409f38
jmp 0x77bd38
lea eax, [ebp - 0xc]
mov edx, 0x77e454
call fcn.00409f38
mov ecx, 0x77e4a4
mov edx, 0x77e4b8
mov eax, 0x80000001
call fcn.005b8634
fstp qword [ebp - 0x38]
wait
push dword [ebp - 0x34]
push dword [ebp - 0x38]
lea edx, [ebp - 0x18]
mov eax, dword [0x7c8718]
call fcn.004285c8
push dword [ebp - 0xc]
push 0x77e52c
push dword [ebp - 0x18]
lea eax, [ebp - 0xac]
mov edx, 3
call fcn.0040a930
mov eax, dword [ebp - 0xac]
call fcn.006a7f94
jmp 0x77bdeb
mov ecx, 0x77e564
mov edx, 0x77e4b8
mov eax, 0x80000001
call fcn.005b8634
fstp qword [ebp - 0x38]
wait
call fcn.00427640
add esp, 0xfffffff8
fstp qword [esp]
wait
push dword [ebp - 0x34]
push dword [ebp - 0x38]
call fcn.004d91a0
test edx, edx
jge 0x77bdc5
neg eax
adc edx, 0
neg edx
cmp edx, 0
jne 0x77bdd3
cmp eax, 0xa8
jae 0x77bde1
jmp 0x77bdd5
jge 0x77bde1
mov eax, 0x77e584
call fcn.006a7f94
jmp 0x77bdeb
mov eax, 0x77e5fc
call fcn.006a7f94
lea eax, [ebp - 0xc]
call fcn.00409b00
mov edx, dword [0x7c80e4]
mov edx, dword [edx]
mov ecx, 0x77e684
mov eax, 0x80000001
call fcn.005b854c
test al, al
je 0x77be1d
lea eax, [ebp - 0xc]
mov edx, 0x77e6c0
call fcn.0040a850
jmp 0x77be2a
lea eax, [ebp - 0xc]
mov edx, 0x77e6d0
call fcn.0040a850
mov edx, dword [0x7c80e4]
mov edx, dword [edx]
mov ecx, 0x77e6e0
mov eax, 0x80000001
call fcn.005b854c
test al, al
je 0x77be54
lea eax, [ebp - 0xc]
mov edx, 0x77e6c0
call fcn.0040a850
jmp 0x77be61
lea eax, [ebp - 0xc]
mov edx, 0x77e6d0
call fcn.0040a850
mov edx, dword [0x7c80e4]
mov edx, dword [edx]
mov ecx, 0x77e720
mov eax, 0x80000001
call fcn.005b854c
test al, al
je 0x77be8b
lea eax, [ebp - 0xc]
mov edx, 0x77e6c0
call fcn.0040a850
jmp 0x77be98
lea eax, [ebp - 0xc]
mov edx, 0x77e6d0
call fcn.0040a850
mov edx, dword [0x7c80e4]
mov edx, dword [edx]
mov ecx, 0x77e750
mov eax, 0x80000001
call fcn.005b854c
test al, al
je 0x77bec2
lea eax, [ebp - 0xc]
mov edx, 0x77e6c0
call fcn.0040a850
jmp 0x77becf
lea eax, [ebp - 0xc]
mov edx, 0x77e6d0
call fcn.0040a850
mov edx, dword [0x7c80e4]
mov edx, dword [edx]
mov ecx, 0x77e790
mov eax, 0x80000001
call fcn.005b854c
test al, al
je 0x77bef9
lea eax, [ebp - 0xc]
mov edx, 0x77e6c0
call fcn.0040a850
jmp 0x77bf06
lea eax, [ebp - 0xc]
mov edx, 0x77e6d0
call fcn.0040a850
mov edx, dword [0x7c80e4]
mov edx, dword [edx]
mov ecx, 0x77e7c4
mov eax, 0x80000001
call fcn.005b854c
test al, al
je 0x77bf30
lea eax, [ebp - 0xc]
mov edx, 0x77e6c0
call fcn.0040a850
jmp 0x77bf3d
lea eax, [ebp - 0xc]
mov edx, 0x77e6d0
call fcn.0040a850
mov edx, dword [0x7c80e4]
mov edx, dword [edx]
mov ecx, 0x77e804
mov eax, 0x80000001
call fcn.005b854c
test al, al
je 0x77bf67
lea eax, [ebp - 0xc]
mov edx, 0x77e6c0
call fcn.0040a850
jmp 0x77bf74
lea eax, [ebp - 0xc]
mov edx, 0x77e6d0
call fcn.0040a850
mov edx, dword [0x7c80e4]
mov edx, dword [edx]
mov ecx, 0x77e840
mov eax, 0x80000001
call fcn.005b854c
test al, al
je 0x77bf9e
lea eax, [ebp - 0xc]
mov edx, 0x77e6c0
call fcn.0040a850
jmp 0x77bfab
lea eax, [ebp - 0xc]
mov edx, 0x77e6d0
call fcn.0040a850
push 0x77e888
push dword [ebp - 0xc]
push 0x77e8e0
lea eax, [ebp - 0xb4]
push eax
mov edx, dword [0x7c80e4]
mov edx, dword [edx]
mov ecx, 0x77e91c
mov eax, 0x80000001
call fcn.005b8330
push dword [ebp - 0xb4]
lea eax, [ebp - 0xb0]
mov edx, 4
call fcn.0040a930
mov eax, dword [ebp - 0xb0]
call fcn.006a7f94
mov eax, dword [0x7c7ef8]
mov byte [eax], 0
mov eax, dword [0x7c8b68]
mov byte [eax], 0
mov eax, dword [0x7c7f6c]
mov edx, 0x77e950
call fcn.00409ef0
call fcn.006a6e88
test al, al
je 0x77c16c
lea eax, [ebp - 0xc]
call fcn.006a6e18
mov eax, dword [ebp - 0xc]
test eax, eax
je 0x77c037
sub eax, 4
mov eax, dword [eax]
cmp eax, 4
jle 0x77c16c
mov eax, dword [ebp - 0xc]
cmp word [eax + 6], 0x4a
jne 0x77c059
mov eax, dword [0x7c7f6c]
mov edx, 0x77e964
call fcn.00409ef0
mov eax, dword [ebp - 0xc]
cmp word [eax + 6], 0x48
jne 0x77c072
mov eax, dword [0x7c7f6c]
mov edx, 0x77e964
call fcn.00409ef0
mov eax, dword [ebp - 0xc]
cmp word [eax + 6], 0x4c
jne 0x77c08b
mov eax, dword [0x7c7f6c]
mov edx, 0x77e980
call fcn.00409ef0
mov eax, dword [ebp - 0xc]
cmp word [eax + 6], 0x4b
jne 0x77c0a4
mov eax, dword [0x7c7f6c]
mov edx, 0x77e980
call fcn.00409ef0
mov eax, dword [ebp - 0xc]
cmp word [eax + 6], 0x58
jne 0x77c0bd
mov eax, dword [0x7c7f6c]
mov edx, 0x77e9a0
call fcn.00409ef0
mov eax, dword [ebp - 0xc]
cmp word [eax + 6], 0x5a
jne 0x77c0d6
mov eax, dword [0x7c7f6c]
mov edx, 0x77e9a0
call fcn.00409ef0
mov eax, dword [ebp - 0xc]
cmp word [eax + 6], 0x55
jne 0x77c0ef
mov eax, dword [0x7c7f6c]
mov edx, 0x77e9bc
call fcn.00409ef0
mov eax, dword [ebp - 0xc]
cmp word [eax + 6], 0x54
jne 0x77c108
mov eax, dword [0x7c7f6c]
mov edx, 0x77e9bc
call fcn.00409ef0
mov eax, dword [ebp - 0xc]
cmp word [eax + 6], 0x4e
jne 0x77c121
mov eax, dword [0x7c7f6c]
mov edx, 0x77e9d8
call fcn.00409ef0
mov eax, dword [ebp - 0xc]
cmp word [eax + 6], 0x42
jne 0x77c13a
mov eax, dword [0x7c7f6c]
mov edx, 0x77e9d8
call fcn.00409ef0
mov eax, dword [ebp - 0xc]
cmp word [eax + 6], 0x56
jne 0x77c153
mov eax, dword [0x7c7f6c]
mov edx, 0x77e9f4
call fcn.00409ef0
mov eax, dword [ebp - 0xc]
cmp word [eax + 6], 0x43
jne 0x77c16c
mov eax, dword [0x7c7f6c]
mov edx, 0x77e9f4
call fcn.00409ef0
mov ecx, dword [0x7c7f6c]
mov ecx, dword [ecx]
lea eax, [ebp - 0xb8]
mov edx, 0x77ea14
call fcn.0040a8a8
mov eax, dword [ebp - 0xb8]
call fcn.006a7f94
call fcn.006a6590
sub al, 2
je 0x77c1ad
dec al
je 0x77c2e2
sub al, 4
je 0x77c2e2
jmp 0x77c3a7
mov eax, dword [0x7c7ef8]
mov byte [eax], 1
mov eax, 0x77ea6c
call fcn.006a7f94
mov ecx, 0x77ead0
mov edx, 0x77e4b8
mov eax, 0x80000001
call fcn.005b8bac
test al, al
jne 0x77c1f7
call fcn.00427640
add esp, 0xfffffff8
fstp qword [esp]
wait
mov ecx, 0x77ead0
mov edx, 0x77e4b8
mov eax, 0x80000001
call fcn.005b89c8
mov edx, dword [0x7c80e4]
mov edx, dword [edx]
mov ecx, 0x77eb00
mov eax, 0x80000001
call fcn.005b8bac
test al, al
jne 0x77c24b
call fcn.00427640
fstp qword [ebp - 0x48]
wait
push dword [ebp - 0x44]
push dword [ebp - 0x48]
push 0xffffffffffffffff
push 0xffffffffffffffe8
call fcn.004d9290
fstp qword [ebp - 0x50]
wait
push dword [ebp - 0x4c]
push dword [ebp - 0x50]
mov edx, dword [0x7c80e4]
mov edx, dword [edx]
mov ecx, 0x77eb00
mov eax, 0x80000001
call fcn.005b89c8
mov edx, dword [0x7c80e4]
mov edx, dword [edx]
mov ecx, 0x77eb00
mov eax, 0x80000001
call fcn.005b8634
fstp qword [ebp - 0x38]
wait
push dword [ebp - 0x34]
push dword [ebp - 0x38]
call fcn.004d8fa4
test al, al
jne 0x77c3a7
call fcn.00427640
add esp, 0xfffffff8
fstp qword [esp]
wait
mov edx, dword [0x7c80e4]
mov edx, dword [edx]
mov ecx, 0x77eb00
mov eax, 0x80000001
call fcn.005b89c8
mov eax, dword [0x7c7df4]
mov byte [eax], 1
xor ecx, ecx
mov dl, 1
mov eax, dword [0x71ef04]
call fcn.0059e52c
mov edx, dword [0x7c79e4]
mov dword [edx], eax
mov eax, dword [0x7c79e4]
mov eax, dword [eax]
mov edx, dword [eax]
call dword [edx + 0x190]
mov eax, dword [0x7c79e4]
mov eax, dword [eax]
call fcn.00407e28
mov eax, dword [0x7c7df4]
mov byte [eax], 0
jmp 0x77c3a7
mov eax, dword [0x7c8b68]
mov byte [eax], 1
call fcn.006a65f4
fstp qword [ebp - 0x58]
wait
push dword [ebp - 0x54]
push dword [ebp - 0x58]
lea edx, [ebp - 0x1c]
mov eax, dword [0x7c8718]
call fcn.004285c8
lea eax, [ebp - 0xbc]
mov ecx, dword [ebp - 0x1c]
mov edx, 0x77eb30
call fcn.0040a8a8
mov eax, dword [ebp - 0xbc]
call fcn.006a7f94
mov eax, 0x77eb90
call fcn.006a7f94
mov ecx, 0x77ebf0
mov edx, 0x77e4b8
mov eax, 0x80000001
call fcn.005b8bac
test al, al
jne 0x77c3a7
call fcn.00427640
add esp, 0xfffffff8
fstp qword [esp]
wait
mov ecx, 0x77ebf0
mov edx, 0x77e4b8
mov eax, 0x80000001
call fcn.005b89c8
mov eax, dword [0x7c7df4]
mov byte [eax], 1
xor ecx, ecx
mov dl, 1
mov eax, dword [0x71ef04]
call fcn.0059e52c
mov edx, dword [0x7c79e4]
mov dword [edx], eax
mov eax, dword [0x7c79e4]
mov eax, dword [eax]
mov edx, dword [eax]
call dword [edx + 0x190]
mov eax, dword [0x7c79e4]
mov eax, dword [eax]
call fcn.00407e28
mov eax, dword [0x7c7df4]
mov byte [eax], 0
mov edx, dword [0x7c80e4]
mov edx, dword [edx]
mov ecx, 0x77ec1c
mov eax, 0x80000001
call fcn.005b8634
fstp qword [ebp - 0x38]
wait
push dword [ebp - 0x34]
push dword [ebp - 0x38]
lea edx, [ebp - 0x20]
mov eax, dword [0x7c8718]
call fcn.004285c8
push dword [ebp - 0x34]
push dword [ebp - 0x38]
lea edx, [ebp - 0x24]
mov eax, dword [0x7c8718]
call fcn.004285ec
push 0x77ec44
push dword [ebp - 0x20]
push 0x77e35c
push dword [ebp - 0x24]
push 0x77e3a8
push dword [ebp - 0x34]
push dword [ebp - 0x38]
call fcn.00427640
add esp, 0xfffffff8
fstp qword [esp]
wait
call fcn.004d91a0
push edx
push eax
lea eax, [ebp - 0xc4]
call fcn.004241b8
push dword [ebp - 0xc4]
push 0x77eca4
lea eax, [ebp - 0xc0]
mov edx, 7
call fcn.0040a930
mov eax, dword [ebp - 0xc0]
call fcn.006a7f94
mov edx, dword [0x7c80e4]
mov edx, dword [edx]
mov ecx, 0x77e1ec
mov eax, 0x80000001
call fcn.005b854c
test al, al
je 0x77c467
call fcn.00777d60
call fcn.00427640
add esp, 0xfffffff8
fstp qword [esp]
wait
push dword [ebp - 0x34]
push dword [ebp - 0x38]
call fcn.004d91f0
test edx, edx
jge 0x77c489
neg eax
adc edx, 0
neg edx
cmp edx, 0
jne 0x77c497
cmp eax, 0x168
jbe 0x77c4d0
jmp 0x77c499
jle 0x77c4d0
mov eax, 0x77ecc8
call fcn.006a7f94
mov eax, dword [0x7d0930]
call fcn.0078a1b0
call fcn.00427640
add esp, 0xfffffff8
fstp qword [esp]
wait
mov edx, dword [0x7c80e4]
mov edx, dword [edx]
mov ecx, 0x77ec1c
mov eax, 0x80000001
call fcn.005b89c8
mov edx, dword [0x7c86d4]
mov edx, dword [edx]
lea eax, [ebp - 0xc8]
mov ecx, 0x77ed24
call fcn.0040a8a8
mov eax, dword [ebp - 0xc8]
mov dl, 1
call fcn.00424a54
test al, al
je 0x77c50d
mov eax, dword [0x7d0930]
call fcn.0078c870
mov eax, dword [0x7d0930]
call fcn.0078e0a0
mov eax, dword [0x7d0930]
mov eax, dword [eax + 0x3e8]
xor edx, edx
call fcn.00551f70
mov eax, dword [0x7d0930]
mov eax, dword [eax + 0x3ec]
xor edx, edx
call fcn.00551f70
mov eax, dword [0x7d0930]
mov eax, dword [eax + 0x3f0]
mov edx, 0x1b7740
call fcn.00551f80
mov eax, dword [0x7d0930]
mov eax, dword [eax + 0x3f0]
mov dl, 1
call fcn.00551f70
mov eax, dword [0x7d0930]
call fcn.00785e3c
mov eax, dword [0x7d0930]
mov eax, dword [eax + 0x3f4]
mov dl, 1
call fcn.00551f70
lea eax, [ebp - 0xcc]
push eax
mov word [ebp - 0x124], 0x73
mov byte [ebp - 0x120], 9
mov word [ebp - 0x11c], 0x5f
mov byte [ebp - 0x118], 9
mov word [ebp - 0x114], 0x53
mov byte [ebp - 0x110], 9
mov word [ebp - 0x10c], 0x6d
mov byte [ebp - 0x108], 9
mov word [ebp - 0x104], 0x61
mov byte [ebp - 0x100], 9
mov word [ebp - 0xfc], 0x72
mov byte [ebp - 0xf8], 9
mov word [ebp - 0xf4], 0x74
mov byte [ebp - 0xf0], 9
mov word [ebp - 0xec], 0x4d
mov byte [ebp - 0xe8], 9
mov word [ebp - 0xe4], 0x6f
mov byte [ebp - 0xe0], 9
mov word [ebp - 0xdc], 0x64
mov byte [ebp - 0xd8], 9
mov word [ebp - 0xd4], 0x65
mov byte [ebp - 0xd0], 9
lea edx, [ebp - 0x124]
mov ecx, 0xa
mov eax, 0x77ed4c
call fcn.00425904
mov ecx, dword [ebp - 0xcc]
mov edx, dword [0x7c80e4]
mov edx, dword [edx]
mov eax, 0x80000001
call fcn.005b843c
mov edx, dword [0x7c8368]
mov dword [edx], eax
lea eax, [ebp - 0x128]
push eax
mov word [ebp - 0x124], 0x73
mov byte [ebp - 0x120], 9
mov word [ebp - 0x11c], 0x5f
mov byte [ebp - 0x118], 9
mov word [ebp - 0x114], 0x53
mov byte [ebp - 0x110], 9
mov word [ebp - 0x10c], 0x6d
mov byte [ebp - 0x108], 9
mov word [ebp - 0x104], 0x61
mov byte [ebp - 0x100], 9
mov word [ebp - 0xfc], 0x72
mov byte [ebp - 0xf8], 9
mov word [ebp - 0xf4], 0x74
mov byte [ebp - 0xf0], 9
mov word [ebp - 0xec], 0x44
mov byte [ebp - 0xe8], 9
mov word [ebp - 0xe4], 0x61
mov byte [ebp - 0xe0], 9
mov word [ebp - 0xdc], 0x74
mov byte [ebp - 0xd8], 9
mov word [ebp - 0xd4], 0x65
mov byte [ebp - 0xd0], 9
lea edx, [ebp - 0x124]
mov ecx, 0xa
mov eax, 0x77ed4c
call fcn.00425904
mov ecx, dword [ebp - 0x128]
mov edx, dword [0x7c80e4]
mov edx, dword [edx]
mov eax, 0x80000001
call fcn.005b8634
mov eax, dword [0x7c8b40]
fstp qword [eax]
wait
mov eax, dword [0x7c8b40]
push dword [eax + 4]
push dword [eax]
call fcn.004275e0
add esp, 0xfffffff8
fstp qword [esp]
wait
call fcn.004d9160
cdq
xor eax, edx
sub eax, edx
mov ebx, eax
mov edx, dword [0x7c80e4]
mov edx, dword [edx]
mov ecx, 0x77ed88
mov eax, 0x80000001
call fcn.005b854c
test al, al
je 0x77c800
mov eax, dword [0x7c8368]
cmp dword [eax], 0
je 0x77c7ee
mov eax, dword [0x7c8368]
cmp dword [eax], 1
jne 0x77c7b4
cmp ebx, 1
jle 0x77c7b4
mov eax, ebx
and eax, 0x80000001
jns 0x77c7b0
dec eax
or eax, 0xfffffffe
inc eax
test eax, eax
jg 0x77c7ee
mov eax, dword [0x7c8368]
cmp dword [eax], 2
jne 0x77c7d1
cmp ebx, 6
jle 0x77c7d1
mov eax, ebx
mov ecx, 7
cdq
idiv ecx
test edx, edx
jg 0x77c7ee
mov eax, dword [0x7c8368]
cmp dword [eax], 3
jne 0x77c800
cmp ebx, 0x1d
jle 0x77c800
mov eax, ebx
mov ecx, 0x1e
cdq
idiv ecx
test edx, edx
jle 0x77c800
mov eax, dword [0x7d0930]
mov eax, dword [eax + 0x3e8]
mov dl, 1
call fcn.00551f70
lea eax, [ebp - 0x12c]
push eax
mov word [ebp - 0x15c], 0x73
mov byte [ebp - 0x158], 9
mov word [ebp - 0x154], 0x5f
mov byte [ebp - 0x150], 9
mov word [ebp - 0x14c], 0x45
mov byte [ebp - 0x148], 9
mov word [ebp - 0x144], 0x78
mov byte [ebp - 0x140], 9
mov word [ebp - 0x13c], 0x65
mov byte [ebp - 0x138], 9
mov word [ebp - 0x134], 0x63
mov byte [ebp - 0x130], 9
lea edx, [ebp - 0x15c]
mov ecx, 5
mov eax, 0x77edb4
call fcn.00425904
mov ecx, dword [ebp - 0x12c]
mov edx, dword [0x7c80e4]
mov edx, dword [edx]
mov eax, 0x80000001
call fcn.005b854c
mov edx, dword [0x7c7b70]
mov byte [edx], al
lea eax, [ebp - 0x160]
push eax
mov word [ebp - 0x15c], 0x73
mov byte [ebp - 0x158], 9
mov word [ebp - 0x154], 0x5f
mov byte [ebp - 0x150], 9
mov word [ebp - 0x14c], 0x4d
mov byte [ebp - 0x148], 9
mov word [ebp - 0x144], 0x6f
mov byte [ebp - 0x140], 9
mov word [ebp - 0x13c], 0x64
mov byte [ebp - 0x138], 9
mov word [ebp - 0x134], 0x65
mov byte [ebp - 0x130], 9
lea edx, [ebp - 0x15c]
mov ecx, 5
mov eax, 0x77edb4
call fcn.00425904
mov ecx, dword [ebp - 0x160]
mov edx, dword [0x7c80e4]
mov edx, dword [edx]
mov eax, 0x80000001
call fcn.005b843c
mov edx, dword [0x7c7cec]
mov dword [edx], eax
lea eax, [ebp - 0x164]
push eax
mov word [ebp - 0x15c], 0x73
mov byte [ebp - 0x158], 9
mov word [ebp - 0x154], 0x5f
mov byte [ebp - 0x150], 9
mov word [ebp - 0x14c], 0x54
mov byte [ebp - 0x148], 9
mov word [ebp - 0x144], 0x69
mov byte [ebp - 0x140], 9
mov word [ebp - 0x13c], 0x6d
mov byte [ebp - 0x138], 9
mov word [ebp - 0x134], 0x65
mov byte [ebp - 0x130], 9
lea edx, [ebp - 0x15c]
mov ecx, 5
mov eax, 0x77edb4
call fcn.00425904
mov ecx, dword [ebp - 0x164]
mov edx, dword [0x7c80e4]
mov edx, dword [edx]
mov eax, 0x80000001
call fcn.005b8634
mov eax, dword [0x7c8180]
fstp qword [eax]
wait
lea eax, [ebp - 0x168]
push eax
mov word [ebp - 0x124], 0x73
mov byte [ebp - 0x120], 9
mov word [ebp - 0x11c], 0x63
mov byte [ebp - 0x118], 9
mov word [ebp - 0x114], 0x68
mov byte [ebp - 0x110], 9
mov word [ebp - 0x10c], 0x5f
mov byte [ebp - 0x108], 9
mov word [ebp - 0x104], 0x65
mov byte [ebp - 0x100], 9
mov word [ebp - 0xfc], 0x6e
mov byte [ebp - 0xf8], 9
mov word [ebp - 0xf4], 0x61
mov byte [ebp - 0xf0], 9
mov word [ebp - 0xec], 0x62
mov byte [ebp - 0xe8], 9
mov word [ebp - 0xe4], 0x6c
mov byte [ebp - 0xe0], 9
mov word [ebp - 0xdc], 0x65
mov byte [ebp - 0xd8], 9
mov word [ebp - 0xd4], 0x64
mov byte [ebp - 0xd0], 9
lea edx, [ebp - 0x124]
mov ecx, 0xa
mov eax, 0x77ed4c
call fcn.00425904
mov ecx, dword [ebp - 0x168]
mov edx, dword [0x7c80e4]
mov edx, dword [edx]
mov eax, 0x80000001
call fcn.005b854c
test al, al
je 0x77caf6
mov eax, dword [0x7c7cec]
cmp dword [eax], 0
jne 0x77cae4
mov eax, dword [0x7c7b70]
cmp byte [eax], 1
jne 0x77cae4
mov eax, dword [0x7d0930]
mov eax, dword [eax + 0x3ec]
xor edx, edx
call fcn.00551f70
jmp 0x77caf6
mov eax, dword [0x7d0930]
mov eax, dword [eax + 0x3ec]
mov dl, 1
call fcn.00551f70
cmp byte [0x7d09a9], 1
jne 0x77cc67
mov edx, dword [0x7c80e4]
mov edx, dword [edx]
mov ecx, 0x77eddc
mov eax, 0x80000001
call fcn.005b854c
test al, al
jne 0x77cc67
xor eax, eax
push ebp
push 0x77cb4d
push dword fs:[eax]
mov dword fs:[eax], esp
cmp dword [0x7d09b0], 0
je 0x77cb43
mov eax, dword [0x7d09b0]
call fcn.004af63c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x77cb57
xor eax, eax
push ebp
push 0x77cb82
push dword fs:[eax]
mov dword fs:[eax], esp
cmp dword [0x7d09b4], 0
je 0x77cb78
mov eax, dword [0x7d09b4]
call fcn.004af63c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x77cb8c
xor eax, eax
push ebp
push 0x77cbb7
push dword fs:[eax]
mov dword fs:[eax], esp
cmp dword [0x7d09b8], 0
je 0x77cbad
mov eax, dword [0x7d09b8]
call fcn.004af63c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x77cbc1
xor eax, eax
push ebp
push 0x77cbec
push dword fs:[eax]
mov dword fs:[eax], esp
cmp dword [0x7d09bc], 0
je 0x77cbe2
mov eax, dword [0x7d09bc]
call fcn.004af63c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x77cbf6
xor eax, eax
push ebp
push 0x77cc21
push dword fs:[eax]
mov dword fs:[eax], esp
cmp dword [0x7d09c0], 0
je 0x77cc17
mov eax, dword [0x7d09c0]
call fcn.004af63c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x77cc2b
xor eax, eax
push ebp
push 0x77cc56
push dword fs:[eax]
mov dword fs:[eax], esp
cmp dword [0x7d09c4], 0
je 0x77cc4c
mov eax, dword [0x7d09c4]
call fcn.004af63c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x77cc60
mov byte [0x7d09a9], 0
cmp byte [0x7d09a9], 0
jne 0x77ced0
mov edx, dword [0x7c80e4]
mov edx, dword [edx]
mov ecx, 0x77eddc
mov eax, 0x80000001
call fcn.005b854c
cmp al, 1
jne 0x77ced0
mov edx, 0x77ee14
mov eax, 0x80000001
call fcn.005b8aa0
test al, al
je 0x77ccf6
mov cl, 1
mov dl, 1
mov eax, dword [0x770dc8]
call fcn.004ae958
mov dword [0x7d09b0], eax
mov eax, dword [0x7d09b0]
mov dword [eax + 0x28], 0x80000001
mov eax, dword [0x7d09b0]
add eax, 0x2c
mov edx, 0x77ee14
call fcn.00409ef0
mov dl, 1
mov eax, dword [0x477334]
call fcn.004a1dec
mov edx, dword [0x7d09b0]
mov dword [edx + 0x30], eax
mov eax, dword [0x7d09b0]
call fcn.004af59c
mov edx, 0x77ee7c
mov eax, 0x80000001
call fcn.005b8aa0
test al, al
je 0x77cd59
mov cl, 1
mov dl, 1
mov eax, dword [0x770dc8]
call fcn.004ae958
mov dword [0x7d09b4], eax
mov eax, dword [0x7d09b4]
mov dword [eax + 0x28], 0x80000001
mov eax, dword [0x7d09b4]
add eax, 0x2c
mov edx, 0x77ee7c
call fcn.00409ef0
mov dl, 1
mov eax, dword [0x477334]
call fcn.004a1dec
mov edx, dword [0x7d09b4]
mov dword [edx + 0x30], eax
mov eax, dword [0x7d09b4]
call fcn.004af59c
mov edx, 0x77ee14
mov eax, 0x80000002
call fcn.005b8aa0
test al, al
je 0x77cdbc
mov cl, 1
mov dl, 1
mov eax, dword [0x770dc8]
call fcn.004ae958
mov dword [0x7d09b8], eax
mov eax, dword [0x7d09b8]
mov dword [eax + 0x28], 0x80000002
mov eax, dword [0x7d09b8]
add eax, 0x2c
mov edx, 0x77ee14
call fcn.00409ef0
mov dl, 1
mov eax, dword [0x477334]
call fcn.004a1dec
mov edx, dword [0x7d09b8]
mov dword [edx + 0x30], eax
mov eax, dword [0x7d09b8]
call fcn.004af59c
mov edx, 0x77ee7c
mov eax, 0x80000002
call fcn.005b8aa0
test al, al
je 0x77ce1f
mov cl, 1
mov dl, 1
mov eax, dword [0x770dc8]
call fcn.004ae958
mov dword [0x7d09bc], eax
mov eax, dword [0x7d09bc]
mov dword [eax + 0x28], 0x80000002
mov eax, dword [0x7d09bc]
add eax, 0x2c
mov edx, 0x77ee7c
call fcn.00409ef0
mov dl, 1
mov eax, dword [0x477334]
call fcn.004a1dec
mov edx, dword [0x7d09bc]
mov dword [edx + 0x30], eax
mov eax, dword [0x7d09bc]
call fcn.004af59c
mov dl, 1
mov eax, dword [0x7d0998]
call fcn.00424aec
test al, al
je 0x77ce74
mov cl, 1
mov dl, 1
mov eax, dword [0x770ee4]
call fcn.004ae958
mov dword [0x7d09c0], eax
mov eax, dword [0x7d09c0]
add eax, 0x28
mov edx, dword [0x7d0998]
call fcn.00409ef0
mov dl, 1
mov eax, dword [0x477334]
call fcn.004a1dec
mov edx, dword [0x7d09c0]
mov dword [edx + 0x2c], eax
mov eax, dword [0x7d09c0]
call fcn.004af59c
mov dl, 1
mov eax, dword [0x7d099c]
call fcn.00424aec
test al, al
je 0x77cec9
mov cl, 1
mov dl, 1
mov eax, dword [0x770ee4]
call fcn.004ae958
mov dword [0x7d09c4], eax
mov eax, dword [0x7d09c4]
add eax, 0x28
mov edx, dword [0x7d099c]
call fcn.00409ef0
mov dl, 1
mov eax, dword [0x477334]
call fcn.004a1dec
mov edx, dword [0x7d09c4]
mov dword [edx + 0x2c], eax
mov eax, dword [0x7d09c4]
call fcn.004af59c
mov byte [0x7d09a9], 1
cmp byte [0x7d09aa], 1
jne 0x77cfc1
mov edx, dword [0x7c80e4]
mov edx, dword [edx]
mov ecx, 0x77eeec
mov eax, 0x80000001
call fcn.005b854c
test al, al
jne 0x77cfc1
mov edx, dword [0x7c80e4]
mov edx, dword [edx]
mov ecx, 0x77ef20
mov eax, 0x80000001
call fcn.005b854c
test al, al
jne 0x77cfc1
xor eax, eax
push ebp
push 0x77cf46
push dword fs:[eax]
mov dword fs:[eax], esp
cmp dword [0x7d09c8], 0
je 0x77cf3c
mov eax, dword [0x7d09c8]
call fcn.004af63c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x77cf50
xor eax, eax
push ebp
push 0x77cf7b
push dword fs:[eax]
mov dword fs:[eax], esp
cmp dword [0x7d09cc], 0
je 0x77cf71
mov eax, dword [0x7d09cc]
call fcn.004af63c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x77cf85
xor eax, eax
push ebp
push 0x77cfb0
push dword fs:[eax]
mov dword fs:[eax], esp
cmp dword [0x7d09d0], 0
je 0x77cfa6
mov eax, dword [0x7d09d0]
call fcn.004af63c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x77cfba
mov byte [0x7d09aa], 0
cmp byte [0x7d09aa], 0
jne 0x77d138
mov edx, dword [0x7c80e4]
mov edx, dword [edx]
mov ecx, 0x77eeec
mov eax, 0x80000001
call fcn.005b854c
test al, al
jne 0x77d008
mov edx, dword [0x7c80e4]
mov edx, dword [edx]
mov ecx, 0x77ef20
mov eax, 0x80000001
call fcn.005b854c
test al, al
je 0x77d138
mov edx, 0x77ef5c
mov eax, 0x80000001
call fcn.005b8aa0
test al, al
je 0x77d06b
mov cl, 1
mov dl, 1
mov eax, dword [0x770fec]
call fcn.004ae958
mov dword [0x7d09c8], eax
mov eax, dword [0x7d09c8]
mov dword [eax + 0x28], 0x80000001
mov eax, dword [0x7d09c8]
add eax, 0x2c
mov edx, 0x77ef5c
call fcn.00409ef0
mov dl, 1
mov eax, dword [0x477334]
call fcn.004a1dec
mov edx, dword [0x7d09c8]
mov dword [edx + 0x30], eax
mov eax, dword [0x7d09c8]
call fcn.004af59c
mov edx, 0x77ef5c
mov eax, 0x80000002
call fcn.005b8aa0
test al, al
je 0x77d0ce
mov cl, 1
mov dl, 1
mov eax, dword [0x770fec]
call fcn.004ae958
mov dword [0x7d09cc], eax
mov eax, dword [0x7d09cc]
mov dword [eax + 0x28], 0x80000002
mov eax, dword [0x7d09cc]
add eax, 0x2c
mov edx, 0x77ef5c
call fcn.00409ef0
mov dl, 1
mov eax, dword [0x477334]
call fcn.004a1dec
mov edx, dword [0x7d09cc]
mov dword [edx + 0x30], eax
mov eax, dword [0x7d09cc]
call fcn.004af59c
mov edx, 0x77efd4
mov eax, 0x80000002
call fcn.005b8aa0
test al, al
je 0x77d131
mov cl, 1
mov dl, 1
mov eax, dword [0x770fec]
call fcn.004ae958
mov dword [0x7d09d0], eax
mov eax, dword [0x7d09d0]
mov dword [eax + 0x28], 0x80000002
mov eax, dword [0x7d09d0]
add eax, 0x2c
mov edx, 0x77efd4
call fcn.00409ef0
mov dl, 1
mov eax, dword [0x477334]
call fcn.004a1dec
mov edx, dword [0x7d09d0]
mov dword [edx + 0x30], eax
mov eax, dword [0x7d09d0]
call fcn.004af59c
mov byte [0x7d09aa], 1
cmp byte [0x7d09ad], 1
jne 0x77d198
mov edx, dword [0x7c80e4]
mov edx, dword [edx]
mov ecx, 0x77f064
mov eax, 0x80000001
call fcn.005b854c
test al, al
jne 0x77d198
xor eax, eax
push ebp
push 0x77d187
push dword fs:[eax]
mov dword fs:[eax], esp
cmp dword [0x7d09d4], 0
je 0x77d17d
mov eax, dword [0x7d09d4]
call fcn.004af63c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x77d191
mov byte [0x7d09ad], 0
cmp byte [0x7d09ad], 0
jne 0x77d347
mov edx, dword [0x7c80e4]
mov edx, dword [edx]
mov ecx, 0x77f064
mov eax, 0x80000001
call fcn.005b854c
cmp al, 1
jne 0x77d347
mov eax, 0x7d098c
mov ecx, 0x77f098
mov edx, dword [0x7d0984]
call fcn.0040a8a8
lea eax, [ebp - 0x16c]
mov ecx, 0x77f0cc
mov edx, dword [0x7d0984]
call fcn.0040a8a8
mov eax, dword [ebp - 0x16c]
mov dl, 1
call fcn.00774a14
fstp qword [ebp - 0x38]
wait
mov ebx, 1
mov dl, 1
mov eax, dword [0x7d0984]
call fcn.00424aec
test al, al
je 0x77d2eb
push 0x77f0ec
lea edx, [ebp - 0x170]
mov eax, ebx
call fcn.0042419c
push dword [ebp - 0x170]
push 0x77dee0
lea eax, [ebp - 4]
mov edx, 3
call fcn.0040a930
lea eax, [ebp - 0x174]
mov ecx, dword [ebp - 4]
mov edx, dword [0x7d0984]
call fcn.0040a8a8
mov eax, dword [ebp - 0x174]
mov dl, 1
call fcn.00424aec
test al, al
je 0x77d2e1
lea eax, [ebp - 0x178]
mov ecx, dword [ebp - 4]
mov edx, dword [0x7d0984]
call fcn.0040a8a8
mov eax, dword [ebp - 0x178]
mov dl, 1
call fcn.00774a14
add esp, 0xfffffff8
fstp qword [esp]
wait
push dword [ebp - 0x34]
push dword [ebp - 0x38]
call fcn.004d9444
cmp al, 1
jne 0x77d2e1
push dword [0x7d0984]
push dword [ebp - 4]
push 0x77f10c
mov eax, 0x7d098c
mov edx, 3
call fcn.0040a930
lea eax, [ebp - 0x17c]
mov ecx, dword [ebp - 4]
mov edx, dword [0x7d0984]
call fcn.0040a8a8
mov eax, dword [ebp - 0x17c]
mov dl, 1
call fcn.00774a14
fstp qword [ebp - 0x38]
wait
inc ebx
cmp ebx, 0xa
jne 0x77d219
mov dl, 1
mov eax, dword [0x7d098c]
call fcn.00424aec
test al, al
je 0x77d347
mov cl, 1
mov dl, 1
mov eax, dword [0x771448]
call fcn.004ae958
mov dword [0x7d09d4], eax
mov eax, dword [0x7d09d4]
add eax, 0x2c
mov edx, dword [0x7d098c]
call fcn.00409ef0
mov dl, 1
mov eax, dword [0x477334]
call fcn.004a1dec
mov edx, dword [0x7d09d4]
mov dword [edx + 0x30], eax
mov eax, dword [0x7d09d4]
call fcn.004af59c
mov byte [0x7d09ad], 1
cmp byte [0x7d09ae], 1
jne 0x77d3a7
mov edx, dword [0x7c80e4]
mov edx, dword [edx]
mov ecx, 0x77f064
mov eax, 0x80000001
call fcn.005b854c
test al, al
jne 0x77d3a7
xor eax, eax
push ebp
push 0x77d396
push dword fs:[eax]
mov dword fs:[eax], esp
cmp dword [0x7d09d8], 0
je 0x77d38c
mov eax, dword [0x7d09d8]
call fcn.004af63c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x77d3a0
mov byte [0x7d09ae], 0
cmp byte [0x7d09ae], 0
jne 0x77d556
mov edx, dword [0x7c80e4]
mov edx, dword [edx]
mov ecx, 0x77f064
mov eax, 0x80000001
call fcn.005b854c
cmp al, 1
jne 0x77d556
mov eax, 0x7d0990
mov ecx, 0x77f098
mov edx, dword [0x7d0988]
call fcn.0040a8a8
lea eax, [ebp - 0x180]
mov ecx, 0x77f0cc
mov edx, dword [0x7d0988]
call fcn.0040a8a8
mov eax, dword [ebp - 0x180]
mov dl, 1
call fcn.00774a14
fstp qword [ebp - 0x38]
wait
mov ebx, 1
mov dl, 1
mov eax, dword [0x7d0988]
call fcn.00424aec
test al, al
je 0x77d4fa
push 0x77f0ec
lea edx, [ebp - 0x184]
mov eax, ebx
call fcn.0042419c
push dword [ebp - 0x184]
push 0x77dee0
lea eax, [ebp - 8]
mov edx, 3
call fcn.0040a930
lea eax, [ebp - 0x188]
mov ecx, dword [ebp - 8]
mov edx, dword [0x7d0988]
call fcn.0040a8a8
mov eax, dword [ebp - 0x188]
mov dl, 1
call fcn.00424aec
test al, al
je 0x77d4f0
lea eax, [ebp - 0x18c]
mov ecx, dword [ebp - 8]
mov edx, dword [0x7d0988]
call fcn.0040a8a8
mov eax, dword [ebp - 0x18c]
mov dl, 1
call fcn.00774a14
add esp, 0xfffffff8
fstp qword [esp]
wait
push dword [ebp - 0x34]
push dword [ebp - 0x38]
call fcn.004d9444
cmp al, 1
jne 0x77d4f0
push dword [0x7d0988]
push dword [ebp - 8]
push 0x77f10c
mov eax, 0x7d0990
mov edx, 3
call fcn.0040a930
lea eax, [ebp - 0x190]
mov ecx, dword [ebp - 8]
mov edx, dword [0x7d0988]
call fcn.0040a8a8
mov eax, dword [ebp - 0x190]
mov dl, 1
call fcn.00774a14
fstp qword [ebp - 0x38]
wait
inc ebx
cmp ebx, 0xa
jne 0x77d428
mov dl, 1
mov eax, dword [0x7d0990]
call fcn.00424aec
test al, al
je 0x77d556
mov cl, 1
mov dl, 1
mov eax, dword [0x77156c]
call fcn.004ae958
mov dword [0x7d09d8], eax
mov eax, dword [0x7d09d8]
add eax, 0x2c
mov edx, dword [0x7d0990]
call fcn.00409ef0
mov dl, 1
mov eax, dword [0x477334]
call fcn.004a1dec
mov edx, dword [0x7d09d8]
mov dword [edx + 0x30], eax
mov eax, dword [0x7d09d8]
call fcn.004af59c
mov byte [0x7d09ae], 1
cmp byte [0x7d09ab], 1
jne 0x77d5c4
mov edx, dword [0x7c80e4]
mov edx, dword [edx]
mov ecx, 0x77f130
mov eax, 0x80000001
call fcn.005b854c
test al, al
jne 0x77d5c4
xor eax, eax
push ebp
push 0x77d5b3
push dword fs:[eax]
mov dword fs:[eax], esp
cmp dword [0x7d09dc], 0
je 0x77d5a9
mov eax, dword [0x7d09dc]
mov eax, dword [eax + 0x28]
push eax
call sub.advapi32.dll_CloseEventLog
mov eax, dword [0x7d09dc]
call fcn.004af63c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x77d5bd
mov byte [0x7d09ab], 0
cmp byte [0x7d09ab], 0
jne 0x77d6d9
mov edx, dword [0x7c80e4]
mov edx, dword [edx]
mov ecx, 0x77f130
mov eax, 0x80000001
call fcn.005b854c
test al, al
je 0x77d6d9
mov cl, 1
mov dl, 1
mov eax, dword [0x771180]
call fcn.004ae958
mov dword [0x7d09dc], eax
push 0x77f158
push 0
call sub.advapi32.dll_OpenEventLogW
mov edx, dword [0x7d09dc]
mov dword [edx + 0x28], eax
push 0
push 0
push 0xffffffffffffffff
push 0
call sub.kernel32.dll_CreateEventW
mov edx, dword [0x7d09dc]
mov dword [edx + 0x2c], eax
mov edx, dword [0x7c80e4]
mov edx, dword [edx]
mov ecx, 0x77f17c
mov eax, 0x80000001
call fcn.005b8bac
test al, al
je 0x77d669
mov edx, dword [0x7c80e4]
mov edx, dword [edx]
mov ecx, 0x77f17c
mov eax, 0x80000001
call fcn.005b8634
fstp qword [0x7d09e8]
wait
jmp 0x77d697
call fcn.00427640
fstp qword [ebp - 0x60]
wait
push dword [ebp - 0x5c]
push dword [ebp - 0x60]
push 0xffffffffffffffff
push 0xffffffffffffffc4
call fcn.004d92f0
fstp qword [ebp - 0x68]
wait
mov eax, dword [ebp - 0x68]
mov dword [0x7d09e8], eax
mov eax, dword [ebp - 0x64]
mov dword [0x7d09ec], eax
call fcn.00427640
fstp qword [ebp - 0x70]
wait
push dword [ebp - 0x6c]
push dword [ebp - 0x70]
push 0xffffffffffffffff
push 0xffffd8f0
call fcn.004d9324
fstp qword [ebp - 0x78]
wait
mov eax, dword [ebp - 0x78]
mov dword [0x7d09f0], eax
mov eax, dword [ebp - 0x74]
mov dword [0x7d09f4], eax
mov eax, dword [0x7d09dc]
call fcn.004af59c
mov byte [0x7d09ab], 1
cmp byte [0x7d09ac], 1
jne 0x77d747
mov edx, dword [0x7c80e4]
mov edx, dword [edx]
mov ecx, 0x77f130
mov eax, 0x80000001
call fcn.005b854c
test al, al
jne 0x77d747
xor eax, eax
push ebp
push 0x77d736
push dword fs:[eax]
mov dword fs:[eax], esp
cmp dword [0x7d09e0], 0
je 0x77d72c
mov eax, dword [0x7d09e0]
mov eax, dword [eax + 0x28]
push eax
call sub.advapi32.dll_CloseEventLog
mov eax, dword [0x7d09e0]
call fcn.004af63c
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
jmp 0x77d740
mov byte [0x7d09ac], 0
cmp byte [0x7d09ac], 0
jne 0x77d851
mov edx, dword [0x7c80e4]
mov edx, dword [edx]
mov ecx, 0x77f130
mov eax, 0x80000001
call fcn.005b854c
test al, al
je 0x77d851
mov cl, 1
mov dl, 1
mov eax, dword [0x771258]
call fcn.004ae958
mov dword [0x7d09e0], eax
push 0x77f198
push 0
call sub.advapi32.dll_OpenEventLogW
mov edx, dword [0x7d09e0]
mov dword [edx + 0x28], eax
push 0
push 0
push 0xffffffffffffffff
push 0
call sub.kernel32.dll_CreateEventW
mov edx, dword [0x7d09e0]
mov dword [edx + 0x2c], eax
mov edx, dword [0x7c80e4]
mov edx, dword [edx]
mov ecx, 0x77f1b4
mov eax, 0x80000001
call fcn.005b8bac
test al, al
je 0x77d7fc
lea eax, [ebp - 0x194]
push eax
mov edx, dword [0x7c80e4]
mov edx, dword [edx]
mov ecx, 0x77f1b4
mov eax, 0x80000001
call fcn.005b8330
mov edx, dword [ebp - 0x194]
mov eax, 0x7d09e4
call fcn.00409ef0
jmp 0x77d806
mov eax, 0x7d09e4
call fcn.00409b00
call fcn.00427640
fstp qword [ebp - 0x80]
wait
push dword [ebp - 0x7c]
push dword [ebp - 0x80]
push 0xffffffffffffffff
push 0xffffd8f0
call fcn.004d9324
fstp qword [ebp - 0x88]
wait
mov eax, dword [ebp - 0x88]
mov dword [0x7d09f8], eax
mov eax, dword [ebp - 0x84]
mov dword [0x7d09fc], eax
mov eax, dword [0x7d09e0]
call fcn.004af59c
mov byte [0x7d09ac], 1
call fcn.00427640
add esp, 0xfffffff8
fstp qword [esp]
wait
push dword [0x7d093c]
push dword [0x7d0938]
call fcn.004d9160
cmp eax, 0x1e
jl 0x77dc07
mov edx, dword [0x7c80e4]
mov edx, dword [edx]
mov ecx, 0x77f1dc
mov eax, 0x80000001
call fcn.005b843c
cmp edx, 0
jne 0x77d89d
cmp eax, 0xa
jae 0x77d8a3
jmp 0x77dc07
jl 0x77dc07
mov edx, dword [0x7c80e4]
mov edx, dword [edx]
mov ecx, 0x77f1fc
mov eax, 0x80000001
call fcn.005b8634
fstp qword [ebp - 0x38]
wait
call fcn.00427640
add esp, 0xfffffff8
fstp qword [esp]
wait
push dword [ebp - 0x34]
push dword [ebp - 0x38]
call fcn.004d9160
cmp eax, 0x1e
jl 0x77dc07
mov dl, 1
mov eax, dword [0x477334]
call fcn.004a1dec
mov esi, eax
mov eax, dword [0x7c8530]
mov eax, dword [eax]
mov edx, esi
mov ecx, dword [eax]
call dword [ecx + 0x54]
xor eax, eax
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x2c], 0
mov eax, esi
mov edx, dword [eax]
call dword [edx + 0x14]
dec eax
test eax, eax
jl 0x77db45
inc eax
mov dword [ebp - 0x3c], eax
xor ebx, ebx
call fcn.00427640
fstp qword [ebp - 0x38]
wait
lea ecx, [ebp - 0x198]
mov edx, ebx
mov eax, esi
mov edi, dword [eax]
call dword [edi + 0xc]
mov eax, dword [ebp - 0x198]
mov ecx, dword [0x7c8718]
lea edx, [ebp - 0x38]
call fcn.004292f0
test al, al
je 0x77db3b
call fcn.00427640
add esp, 0xfffffff8
fstp qword [esp]
wait
push dword [ebp - 0x34]
push dword [ebp - 0x38]
call fcn.004d9160
cmp eax, 0x1e
jg 0x77db3b
push 0
lea ecx, [ebp - 0x19c]
mov edx, ebx
mov eax, esi
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [ebp - 0x19c]
mov eax, dword [0x7c8530]
mov eax, dword [eax]
mov ecx, 0x77f22c
mov edi, dword [eax]
call dword [edi + 0x10]
add eax, dword [ebp - 0x28]
push eax
push 0
lea ecx, [ebp - 0x1a0]
mov edx, ebx
mov eax, esi
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [ebp - 0x1a0]
mov eax, dword [0x7c8530]
mov eax, dword [eax]
mov ecx, 0x77f24c
mov edi, dword [eax]
call dword [edi + 0x10]
pop edx
add edx, eax
push edx
push 0
lea ecx, [ebp - 0x1a4]
mov edx, ebx
mov eax, esi
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [ebp - 0x1a4]
mov eax, dword [0x7c8530]
mov eax, dword [eax]
mov ecx, 0x77f26c
mov edi, dword [eax]
call dword [edi + 0x10]
pop edx
add edx, eax
mov dword [ebp - 0x28], edx
push 0
lea ecx, [ebp - 0x1a8]
mov edx, ebx
mov eax, esi
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [ebp - 0x1a8]
mov eax, dword [0x7c8530]
mov eax, dword [eax]
mov ecx, 0x77f288
mov edi, dword [eax]
call dword [edi + 0x10]
cdq
add eax, dword [ebp - 0x30]
adc edx, dword [ebp - 0x2c]
push edx
push eax
push 0
lea ecx, [ebp - 0x1ac]
mov edx, ebx
mov eax, esi
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [ebp - 0x1ac]
mov eax, dword [0x7c8530]
mov eax, dword [eax]
mov ecx, 0x77f2a4
mov edi, dword [eax]
call dword [edi + 0x10]
cdq
add eax, dword [esp]
adc edx, dword [esp + 4]
add esp, 8
push edx
push eax
push 0
lea ecx, [ebp - 0x1b0]
mov edx, ebx
mov eax, esi
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [ebp - 0x1b0]
mov eax, dword [0x7c8530]
mov eax, dword [eax]
mov ecx, 0x77f2c4
mov edi, dword [eax]
call dword [edi + 0x10]
cdq
add eax, dword [esp]
adc edx, dword [esp + 4]
add esp, 8
push edx
push eax
push 0
lea ecx, [ebp - 0x1b4]
mov edx, ebx
mov eax, esi
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [ebp - 0x1b4]
mov eax, dword [0x7c8530]
mov eax, dword [eax]
mov ecx, 0x77f2e0
mov edi, dword [eax]
call dword [edi + 0x10]
cdq
add eax, dword [esp]
adc edx, dword [esp + 4]
add esp, 8
push edx
push eax
push 0
lea ecx, [ebp - 0x1b8]
mov edx, ebx
mov eax, esi
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [ebp - 0x1b8]
mov eax, dword [0x7c8530]
mov eax, dword [eax]
mov ecx, 0x77f2f8
mov edi, dword [eax]
call dword [edi + 0x10]
cdq
add eax, dword [esp]
adc edx, dword [esp + 4]
add esp, 8
push edx
push eax
push 0
lea ecx, [ebp - 0x1bc]
mov edx, ebx
mov eax, esi
mov edi, dword [eax]
call dword [edi + 0xc]
mov edx, dword [ebp - 0x1bc]
mov eax, dword [0x7c8530]
mov eax, dword [eax]
mov ecx, 0x77f310
mov edi, dword [eax]
call dword [edi + 0x10]
cdq
add eax, dword [esp]
adc edx, dword [esp + 4]
add esp, 8
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x2c], edx
inc ebx
dec dword [ebp - 0x3c]
jne 0x77d923
mov eax, esi
call fcn.00407e28
mov eax, dword [ebp - 0x28]
cdq
add eax, dword [ebp - 0x30]
adc edx, dword [ebp - 0x2c]
cmp edx, 0
jne 0x77dba3
cmp eax, 0
jne 0x77dba3
mov eax, dword [0x7c7df4]
mov byte [eax], 1
xor ecx, ecx
mov dl, 1
mov eax, dword [0x74eec8]
call fcn.0059e52c
mov edx, dword [0x7c8ae0]
mov dword [edx], eax
mov eax, dword [0x7c8ae0]
mov eax, dword [eax]
mov edx, dword [eax]
call dword [edx + 0x190]
mov eax, dword [0x7c8ae0]
mov eax, dword [eax]
call fcn.00407e28
mov eax, dword [0x7c7df4]
mov byte [eax], 0
jmp 0x77dbe4
mov eax, dword [0x7c7df4]
mov byte [eax], 1
xor ecx, ecx
mov dl, 1
mov eax, dword [0x74fb60]
call fcn.0059e52c
mov edx, dword [0x7c8a88]
mov dword [edx], eax
mov eax, dword [0x7c8a88]
mov eax, dword [eax]
mov edx, dword [eax]
call dword [edx + 0x190]
mov eax, dword [0x7c8a88]
mov eax, dword [eax]
call fcn.00407e28
mov eax, dword [0x7c7df4]
mov byte [eax], 0
call fcn.00427640
add esp, 0xfffffff8
fstp qword [esp]
wait
mov edx, dword [0x7c80e4]
mov edx, dword [edx]
mov ecx, 0x77f1fc
mov eax, 0x80000001
call fcn.005b89c8
xor eax, eax
pop edx
pop ecx
pop ecx
mov dword fs:[eax], edx
push 0x77dc5b
lea eax, [ebp - 0x1bc]
mov edx, 0x18
call fcn.00409b60
lea eax, [ebp - 0x12c]
mov edx, 2
call fcn.00409b60
lea eax, [ebp - 0xcc]
mov edx, 0x11
call fcn.00409b60
lea eax, [ebp - 0x24]
mov edx, 9
call fcn.00409b60
pop eax
jmp eax