Function at 0x4dd810
Capabilities:
Resolve function by parsing pe exports

Disassembly:
mov ecx, dword fs:[0x14]
mov ecx, dword [ecx]
lea eax, [esp - 0x120]
cmp eax, dword [ecx + 8]
jbe 0x4e01b5
sub esp, 0x1a0
mov eax, dword [esp + 0x1ac]
test eax, eax
jne 0x4dd9bb
mov ecx, dword [esp + 0x1bc]
test ecx, ecx
je 0x4dd864
test ecx, 0x200
jne 0x4dd864
lea eax, [0x728fe4]
mov ecx, dword [esp + 0x1b4]
jmp 0x4dd88a
mov eax, dword [esp + 0x1b4]
mov dword [esp], eax
mov eax, dword [esp + 0x1b8]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.0048c9d0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x144], ecx
mov dword [esp + 0x7c], eax
mov dword [esp + 0x190], 0
mov dword [esp + 0x194], 0
mov dword [esp + 0x198], 0
mov dword [esp + 0x19c], 0
mov edx, dword [esp + 0x1a8]
mov dword [esp], edx
mov edx, dword [esp + 0x1ac]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x1b0]
mov dword [esp + 8], edx
call fcn.004096c0
mov eax, dword [esp + 0xc]
lea ecx, [0x67f520]
mov dword [esp + 0x190], ecx
mov dword [esp + 0x194], eax
mov eax, dword [esp + 0x7c]
test eax, eax
je 0x4dd909
mov eax, dword [eax + 4]
mov dword [esp + 0x198], eax
mov eax, dword [esp + 0x144]
mov dword [esp + 0x19c], eax
lea eax, [0x6d431d]
mov dword [esp], eax
mov dword [esp + 4], 0x47
lea eax, [esp + 0x190]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004c3100
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1a4]
mov ebx, dword [edx + 0x3c]
test ebx, ebx
jne 0x4dd99e
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.004da0e0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x1a4]
mov dword [edx + 0x3c], ecx
mov ecx, dword [0x8d9190]
test ecx, ecx
jne 0x4dd996
mov dword [edx + 0x40], eax
jmp 0x4dd99e
lea edi, [edx + 0x40]
call fcn.004643a0
mov dword [esp + 0x1c4], 0
mov dword [esp + 0x1c8], 0
add esp, 0x1a0
ret
mov eax, dword [esp + 0x1a8]
cmp byte [eax], 0x6e
sete cl
mov edx, dword [esp + 0x1b4]
mov dword [esp], edx
mov ebx, dword [esp + 0x1b8]
mov dword [esp + 4], ebx
mov ebp, dword [esp + 0x1bc]
mov dword [esp + 8], ebp
mov byte [esp + 0xc], cl
call fcn.004da7b0
mov eax, dword [esp + 0x20]
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x14]
mov ebp, dword [esp + 0x18]
mov esi, dword [esp + 0x1c]
mov edi, dword [esp + 0x28]
test edx, edx
jne 0x4e0121
test ebp, ebp
je 0x4ddf0a
mov eax, dword [esp + 0x1a8]
movzx ecx, byte [eax]
cmp cl, 0x22
je 0x4ddd4d
movzx edx, byte [esp + 0x1c0]
test dl, dl
je 0x4ddbb9
mov ecx, dword [esp + 0x1bc]
test ecx, ecx
je 0x4dda62
test ecx, 0x200
jne 0x4dda62
lea eax, [0x728fe4]
mov ecx, dword [esp + 0x1b4]
jmp 0x4dda88
mov eax, dword [esp + 0x1b4]
mov dword [esp], eax
mov eax, dword [esp + 0x1b8]
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.0048c9d0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x140], ecx
mov dword [esp + 0x78], eax
mov dword [esp + 0x190], 0
mov dword [esp + 0x194], 0
mov dword [esp + 0x198], 0
mov dword [esp + 0x19c], 0
mov edx, dword [esp + 0x1a8]
mov dword [esp], edx
mov edx, dword [esp + 0x1ac]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x1b0]
mov dword [esp + 8], edx
call fcn.004096c0
mov eax, dword [esp + 0xc]
lea ecx, [0x67f520]
mov dword [esp + 0x190], ecx
mov dword [esp + 0x194], eax
mov eax, dword [esp + 0x78]
test eax, eax
je 0x4ddb07
mov eax, dword [eax + 4]
mov dword [esp + 0x198], eax
mov eax, dword [esp + 0x140]
mov dword [esp + 0x19c], eax
lea eax, [0x6d431d]
mov dword [esp], eax
mov dword [esp + 4], 0x47
lea eax, [esp + 0x190]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004c3100
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1a4]
mov ebx, dword [edx + 0x3c]
test ebx, ebx
jne 0x4ddb9c
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.004da0e0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x1a4]
mov dword [edx + 0x3c], ecx
mov ecx, dword [0x8d9190]
test ecx, ecx
jne 0x4ddb94
mov dword [edx + 0x40], eax
jmp 0x4ddb9c
lea edi, [edx + 0x40]
call fcn.004643a0
mov dword [esp + 0x1c4], 0
mov dword [esp + 0x1c8], 0
add esp, 0x1a0
ret
cmp cl, 0x66
je 0x4ddbd5
cmp cl, 0x6e
jne 0x4ddbd0
lea eax, [0x6bfbe2]
mov ecx, 4
jmp 0x4ddbed
cmp cl, 0x74
jne 0x4ddbe2
lea eax, [0x6bfb5e]
mov ecx, 4
jmp 0x4ddbed
lea eax, [0x6c00fe]
mov ecx, 6
mov dword [esp + 0x148], eax
mov dword [esp + 0x84], ecx
mov edx, dword [esp + 0x1bc]
test edx, edx
je 0x4ddc1d
test edx, 0x200
jne 0x4ddc1d
mov edx, dword [esp + 0x1b4]
lea ebx, [0x728fe4]
jmp 0x4ddc47
mov eax, dword [esp + 0x1b4]
mov dword [esp], eax
mov eax, dword [esp + 0x1b8]
mov dword [esp + 4], eax
mov dword [esp + 8], edx
call fcn.0048c9d0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, ecx
mov ebx, eax
mov dword [esp + 0x13c], edx
mov dword [esp + 0x74], ebx
mov eax, dword [esp + 0x1a4]
mov ecx, dword [eax + 0xc]
mov dword [esp + 0xd4], ecx
lea ebp, [0x6a6100]
mov dword [esp], ebp
call fcn.0040bd00
mov edi, dword [esp + 4]
mov eax, dword [esp + 0x84]
mov dword [edi + 4], eax
mov eax, dword [0x8d9190]
test eax, eax
jne 0x4ddc94
mov ecx, dword [esp + 0x148]
mov dword [edi], ecx
jmp 0x4ddca0
mov eax, dword [esp + 0x148]
call fcn.004643a0
mov ecx, dword [esp + 0x74]
mov dword [edi + 8], ecx
mov ecx, dword [0x8d9190]
test ecx, ecx
jne 0x4ddcbd
mov eax, dword [esp + 0x13c]
mov dword [edi + 0xc], eax
jmp 0x4ddcd2
lea ecx, [edi + 0xc]
mov eax, dword [esp + 0x13c]
mov edx, edi
mov edi, ecx
call fcn.004643a0
mov edi, edx
mov eax, dword [esp + 0xd4]
dec eax
mov dword [edi + 0x10], eax
sar eax, 0x1f
mov dword [edi + 0x14], eax
mov eax, dword [esp + 0x1a4]
mov ecx, dword [eax + 0x3c]
test ecx, ecx
jne 0x4ddd30
mov dword [esp], eax
lea ecx, [0x7271e0]
mov dword [esp + 4], ecx
mov dword [esp + 8], edi
call fcn.004da0e0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x1a4]
mov dword [edx + 0x3c], ecx
mov ecx, dword [0x8d9190]
test ecx, ecx
jne 0x4ddd28
mov dword [edx + 0x40], eax
jmp 0x4ddd30
lea edi, [edx + 0x40]
call fcn.004643a0
mov dword [esp + 0x1c4], 0
mov dword [esp + 0x1c8], 0
add esp, 0x1a0
ret
mov dword [esp + 0x14c], esi
mov dword [esp + 0x88], ebp
mov dword [esp], eax
mov ecx, dword [esp + 0x1ac]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0x1b0]
mov dword [esp + 8], edx
call fcn.004e0970
movzx eax, byte [esp + 0x18]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x14]
test al, al
jne 0x4ddecb
movzx eax, byte [esp + 0x1c0]
test al, al
je SetThreadContext
mov eax, dword [esp + 0x1bc]
test eax, eax
je 0x4dddc3
test eax, 0x200
jne 0x4dddc3
lea eax, [0x728fe4]
mov ecx, dword [esp + 0x1b4]
jmp 0x4ddde9
mov ecx, dword [esp + 0x1b4]
mov dword [esp], ecx
mov ecx, dword [esp + 0x1b8]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.0048c9d0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x138], ecx
mov dword [esp + 0x70], eax
mov dword [esp + 0x190], 0
mov dword [esp + 0x194], 0
mov dword [esp + 0x198], 0
mov dword [esp + 0x19c], 0
mov edx, dword [esp + 0x1a8]
mov dword [esp], edx
mov edx, dword [esp + 0x1ac]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x1b0]
mov dword [esp + 8], edx
call fcn.004096c0
mov eax, dword [esp + 0xc]
lea ecx, [0x67f520]
mov dword [esp + 0x190], ecx
mov dword [esp + 0x194], eax
mov eax, dword [esp + 0x70]
test eax, eax
je 0x4dde68
mov eax, dword [eax + 4]
mov dword [esp + 0x198], eax
mov eax, dword [esp + 0x138]
mov dword [esp + 0x19c], eax
lea eax, [0x6d431d]
mov dword [esp], eax
mov dword [esp + 4], 0x47
lea eax, [esp + 0x190]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004c3100
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x1c4], eax
mov dword [esp + 0x1c8], ecx
add esp, 0x1a0
ret
mov eax, dword [esp + 0x88]
mov eax, dword [eax + 0x10]
mov ebp, dword [esp + 0x14c]
mov dword [esp], ebp
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
mov dword [esp + 0xc], ebx
call eax
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x1c4], eax
mov dword [esp + 0x1c8], ecx
add esp, 0x1a0
ret
mov dword [esp + 0x16c], ecx
mov dword [esp + 0x168], eax
mov dword [esp + 0xb0], edi
mov edx, dword [esp + 0x1a8]
movzx ebx, byte [edx]
cmp bl, 0x66
ja 0x4de8d6
cmp bl, 0x22
je 0x4ddf45
cmp bl, 0x66
je 0x4deaf2
jmp 0x4df13b
mov dword [esp], edx
mov eax, dword [esp + 0x1ac]
mov dword [esp + 4], eax
mov ecx, dword [esp + 0x1b0]
mov dword [esp + 8], ecx
call fcn.004e0970
movzx eax, byte [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0xc]
test al, al
je 0x4de79d
mov dword [esp + 0x90], edx
mov dword [esp + 0x154], ebx
nop
nop
mov eax, dword [esp + 0xb0]
mov ebp, eax
and eax, 0x1f
cmp eax, 0x14
je 0x4de576
cmp eax, 0x17
jne 0x4de283
mov dword [esp + 0x94], ecx
test ebp, 0x200
jne 0x4ddfc8
lea eax, [0x728fe4]
mov esi, dword [esp + 0x168]
jmp 0x4ddff0
mov eax, dword [esp + 0x168]
mov dword [esp], eax
mov ecx, dword [esp + 0x16c]
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
call fcn.0048c9d0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov esi, ecx
mov eax, dword [eax + 0x28]
mov dword [esp], esi
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 8]
mov eax, dword [eax + 0x50]
mov dword [esp], ecx
call eax
cmp dword [esp + 4], 8
je 0x4de12d
mov eax, dword [esp + 0xb0]
test eax, 0x200
jne 0x4de030
mov ecx, dword [esp + 0x168]
lea eax, [0x728fe4]
jmp 0x4de056
mov ecx, dword [esp + 0x168]
mov dword [esp], ecx
mov ecx, dword [esp + 0x16c]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.0048c9d0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x50], eax
mov dword [esp + 0x118], ecx
mov edx, dword [esp + 0x1a4]
mov ebx, dword [edx + 0xc]
mov dword [esp + 0xd4], ebx
lea ebp, [0x6a6100]
mov dword [esp], ebp
call fcn.0040bd00
mov eax, dword [esp + 4]
mov dword [eax + 4], 6
lea ecx, [0x6c014c]
mov dword [eax], ecx
mov ecx, dword [esp + 0x50]
mov dword [eax + 8], ecx
mov ecx, dword [0x8d9190]
test ecx, ecx
jne 0x4de0b0
mov ecx, dword [esp + 0x118]
mov dword [eax + 0xc], ecx
jmp 0x4de0c3
lea edi, [eax + 0xc]
mov ecx, eax
mov eax, dword [esp + 0x118]
call fcn.004643a0
mov eax, ecx
mov ecx, dword [esp + 0xd4]
dec ecx
mov dword [eax + 0x10], ecx
sar ecx, 0x1f
mov dword [eax + 0x14], ecx
mov ecx, dword [esp + 0x1a4]
mov edx, dword [ecx + 0x3c]
test edx, edx
jne reloc.kernel32.dll_SetProcessPriorityBoost
mov dword [esp], ecx
lea edx, [0x7271e0]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.004da0e0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x1a4]
mov dword [edx + 0x3c], ecx
mov ecx, dword [0x8d9190]
test ecx, ecx
jne 0x4de120
mov dword [edx + 0x40], eax
jmp reloc.kernel32.dll_SetProcessPriorityBoost
lea edi, [edx + 0x40]
call fcn.004643a0
jmp reloc.kernel32.dll_SetProcessPriorityBoost
mov eax, dword [0x8b1f38]
cmp dword [eax + 0x140], 0xffffffff
jne 0x4de158
mov eax, dword [esp + 0x90]
lea ecx, [eax + eax*2]
mov edx, ecx
shl ecx, 1
sar ecx, 0x1f
shr ecx, 0x1d
lea ecx, [ecx + edx*2]
sar ecx, 3
jmp 0x4de165
mov eax, dword [esp + 0x90]
shr eax, 2
lea ecx, [eax + eax*2]
mov dword [esp + 0x80], ecx
lea eax, [0x6873e0]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], ecx
call fcn.0044aea0
mov eax, dword [esp + 0xc]
mov dword [esp + 0x164], eax
mov ecx, dword [0x8b1f38]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov ecx, dword [esp + 0x80]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], ecx
mov edx, dword [esp + 0x154]
mov dword [esp + 0x10], edx
mov edx, dword [esp + 0x90]
mov dword [esp + 0x14], edx
mov edx, dword [esp + 0x94]
mov dword [esp + 0x18], edx
call fcn.00491eb0
mov ecx, dword [esp + 0x1c]
mov eax, dword [esp + 0x20]
mov edx, dword [esp + 0x24]
mov ebx, dword [esp + 0x20]
test ebx, ebx
je 0x4de237
nop
mov ecx, dword [esp + 0x1a4]
mov ebx, dword [ecx + 0x3c]
test ebx, ebx
jne reloc.kernel32.dll_SetProcessPriorityBoost
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], edx
call fcn.004da0e0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x1a4]
mov dword [edx + 0x3c], ecx
mov ecx, dword [0x8d9190]
test ecx, ecx
jne 0x4de22a
mov dword [edx + 0x40], eax
jmp reloc.kernel32.dll_SetProcessPriorityBoost
lea edi, [edx + 0x40]
call fcn.004643a0
jmp reloc.kernel32.dll_SetProcessPriorityBoost
mov edx, dword [esp + 0x80]
cmp edx, ecx
jb 0x4e0197
mov eax, dword [esp + 0x168]
mov dword [esp], eax
mov eax, dword [esp + 0x16c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 8], eax
mov eax, dword [esp + 0x164]
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
call fcn.0048bab0
jmp reloc.kernel32.dll_SetProcessPriorityBoost
cmp eax, 0x18
jne 0x4de45e
test ebp, 0x200
jne 0x4de2a3
lea eax, [0x728fe4]
mov ecx, dword [esp + 0x168]
jmp 0x4de2de
mov eax, dword [esp + 0x168]
mov dword [esp], eax
mov ecx, dword [esp + 0x16c]
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
call fcn.0048c9d0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x90]
mov ebx, dword [esp + 0x154]
mov ebp, dword [esp + 0xb0]
mov esi, dword [0x8b2614]
cmp dword [0x8b2610], eax
je 0x4de2f3
xor eax, eax
jmp 0x4de37b
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], esi
call fcn.004038b0
movzx eax, byte [esp + 0xc]
test al, al
jne 0x4de325
mov edx, dword [esp + 0x90]
mov ebx, dword [esp + 0x154]
mov ebp, dword [esp + 0xb0]
xor eax, eax
jmp 0x4de37b
lea eax, [esp + 0xd8]
mov dword [esp], eax
mov eax, dword [esp + 0x154]
mov dword [esp + 4], eax
mov ecx, dword [esp + 0x90]
mov dword [esp + 8], ecx
call fcn.0044ec30
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.004e3580
movzx eax, byte [esp + 8]
xor eax, 1
mov edx, dword [esp + 0x90]
mov ebx, dword [esp + 0x154]
mov ebp, dword [esp + 0xb0]
test al, al
jne 0x4de3bd
mov dword [esp], 0
mov dword [esp + 4], ebx
mov dword [esp + 8], edx
call fcn.0044ec30
mov eax, dword [esp + 0x168]
mov dword [esp], eax
mov eax, dword [esp + 0x16c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 8], eax
call fcn.0048c560
jmp reloc.kernel32.dll_SetProcessPriorityBoost
mov dword [esp + 0x188], 0
mov dword [esp + 0x18c], 0
mov eax, dword [esp + 0x1a8]
mov dword [esp], eax
mov eax, dword [esp + 0x1ac]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x1b0]
mov dword [esp + 8], eax
call fcn.004096c0
mov eax, dword [esp + 0xc]
lea ecx, [0x67f520]
mov dword [esp + 0x188], ecx
mov dword [esp + 0x18c], eax
lea eax, [0x6d3968]
mov dword [esp], eax
mov dword [esp + 4], 0x40
lea eax, [esp + 0x188]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 1
mov dword [esp + 0x10], 1
call fcn.004c3100
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x1c4], eax
mov dword [esp + 0x1c8], ecx
add esp, 0x1a0
ret
test ebp, ebp
je 0x4de479
test ebp, 0x200
jne 0x4de479
mov ecx, dword [esp + 0x168]
lea eax, [0x728fe4]
jmp 0x4de49f
mov eax, dword [esp + 0x168]
mov dword [esp], eax
mov eax, dword [esp + 0x16c]
mov dword [esp + 4], eax
mov dword [esp + 8], ebp
call fcn.0048c9d0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x11c], ecx
mov dword [esp + 0x54], eax
mov edx, dword [esp + 0x1a4]
mov ebx, dword [edx + 0xc]
mov dword [esp + 0xd4], ebx
lea ebp, [0x6a6100]
mov dword [esp], ebp
call fcn.0040bd00
mov eax, dword [esp + 4]
mov dword [eax + 4], 6
lea ecx, [0x6c014c]
mov dword [eax], ecx
mov ecx, dword [esp + 0x54]
mov dword [eax + 8], ecx
mov ecx, dword [0x8d9190]
test ecx, ecx
jne 0x4de4f9
mov ecx, dword [esp + 0x11c]
mov dword [eax + 0xc], ecx
jmp 0x4de50c
lea edi, [eax + 0xc]
mov ecx, eax
mov eax, dword [esp + 0x11c]
call fcn.004643a0
mov eax, ecx
mov ecx, dword [esp + 0xd4]
dec ecx
mov dword [eax + 0x10], ecx
sar ecx, 0x1f
mov dword [eax + 0x14], ecx
mov ecx, dword [esp + 0x1a4]
mov edx, dword [ecx + 0x3c]
test edx, edx
jne reloc.kernel32.dll_SetProcessPriorityBoost
mov dword [esp], ecx
lea edx, [0x7271e0]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.004da0e0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x1a4]
mov dword [edx + 0x3c], ecx
mov ecx, dword [0x8d9190]
test ecx, ecx
jne 0x4de569
mov dword [edx + 0x40], eax
jmp reloc.kernel32.dll_SetProcessPriorityBoost
lea edi, [edx + 0x40]
call fcn.004643a0
jmp reloc.kernel32.dll_SetProcessPriorityBoost
mov eax, dword [esp + 0x168]
mov dword [esp], eax
mov ecx, dword [esp + 0x16c]
mov dword [esp + 4], ecx
mov dword [esp + 8], ebp
call fcn.0048b5f0
mov eax, dword [esp + 0xc]
test eax, eax
je 0x4de6ba
mov eax, dword [esp + 0xb0]
test eax, 0x200
jne 0x4de5bd
mov ecx, dword [esp + 0x168]
lea eax, [0x728fe4]
jmp 0x4de5e3
mov ecx, dword [esp + 0x168]
mov dword [esp], ecx
mov ecx, dword [esp + 0x16c]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.0048c9d0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x4c], eax
mov dword [esp + 0x114], ecx
mov edx, dword [esp + 0x1a4]
mov ebx, dword [edx + 0xc]
mov dword [esp + 0xd4], ebx
lea ebp, [0x6a6100]
mov dword [esp], ebp
call fcn.0040bd00
mov eax, dword [esp + 4]
mov dword [eax + 4], 6
lea ecx, [0x6c014c]
mov dword [eax], ecx
mov ecx, dword [esp + 0x4c]
mov dword [eax + 8], ecx
mov ecx, dword [0x8d9190]
test ecx, ecx
jne 0x4de63d
mov ecx, dword [esp + 0x114]
mov dword [eax + 0xc], ecx
jmp 0x4de650
lea edi, [eax + 0xc]
mov ecx, eax
mov eax, dword [esp + 0x114]
call fcn.004643a0
mov eax, ecx
mov ecx, dword [esp + 0xd4]
dec ecx
mov dword [eax + 0x10], ecx
sar ecx, 0x1f
mov dword [eax + 0x14], ecx
mov ecx, dword [esp + 0x1a4]
mov edx, dword [ecx + 0x3c]
test edx, edx
jne reloc.kernel32.dll_SetProcessPriorityBoost
mov dword [esp], ecx
lea edx, [0x7271e0]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.004da0e0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x1a4]
mov dword [edx + 0x3c], ecx
mov ecx, dword [0x8d9190]
test ecx, ecx
jne 0x4de6ad
mov dword [edx + 0x40], eax
jmp reloc.kernel32.dll_SetProcessPriorityBoost
lea edi, [edx + 0x40]
call fcn.004643a0
jmp reloc.kernel32.dll_SetProcessPriorityBoost
mov dword [esp], 0
mov eax, dword [esp + 0x154]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x90]
mov dword [esp + 8], eax
call fcn.0044ec30
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.00409640
mov eax, dword [esp + 8]
nop
movzx ecx, byte [0x8b2ca0]
test cl, cl
je 0x4de72b
lea ecx, [0x6871e0]
mov dword [0x8b2ca4], ecx
mov edx, dword [0x8d9190]
test edx, edx
jne 0x4de71e
mov dword [0x8b2ca8], eax
jmp 0x4de731
lea edi, [0x8b2ca8]
call fcn.004643a0
jmp 0x4de731
lea ecx, [0x6871e0]
mov dword [esp + 0x178], ecx
mov dword [esp + 0x17c], eax
mov ecx, dword [esp + 0x178]
test ecx, ecx
je 0x4de761
nop
movzx edx, byte [ecx + 0xf]
mov ebx, edx
and edx, 0x1f
test bl, 0x20
jne 0x4de767
or edx, 0x80
jmp 0x4de767
xor edx, edx
xor ecx, ecx
xor eax, eax
mov ebx, dword [esp + 0x168]
mov dword [esp], ebx
mov ebx, dword [esp + 0x16c]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0xb0]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], edx
call fcn.0048b8e0
jmp reloc.kernel32.dll_SetProcessPriorityBoost
movzx eax, byte [esp + 0x1c0]
test al, al
je LoadLibraryA
mov eax, dword [esp + 0xb0]
test eax, eax
je 0x4de7ce
test eax, 0x200
jne 0x4de7ce
lea eax, [0x728fe4]
mov ecx, dword [esp + 0x168]
jmp 0x4de7f4
mov ecx, dword [esp + 0x168]
mov dword [esp], ecx
mov ecx, dword [esp + 0x16c]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.0048c9d0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x120], ecx
mov dword [esp + 0x58], eax
mov dword [esp + 0x190], 0
mov dword [esp + 0x194], 0
mov dword [esp + 0x198], 0
mov dword [esp + 0x19c], 0
mov edx, dword [esp + 0x1a8]
mov dword [esp], edx
mov edx, dword [esp + 0x1ac]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x1b0]
mov dword [esp + 8], edx
call fcn.004096c0
mov eax, dword [esp + 0xc]
lea ecx, [0x67f520]
mov dword [esp + 0x190], ecx
mov dword [esp + 0x194], eax
mov eax, dword [esp + 0x58]
test eax, eax
je 0x4de873
mov eax, dword [eax + 4]
mov dword [esp + 0x198], eax
mov eax, dword [esp + 0x120]
mov dword [esp + 0x19c], eax
lea eax, [0x6d431d]
mov dword [esp], eax
mov dword [esp + 4], 0x47
lea eax, [esp + 0x190]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004c3100
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x1c4], eax
mov dword [esp + 0x1c8], ecx
add esp, 0x1a0
ret
cmp bl, 0x6e
jne 0x4deae9
movzx ebx, byte [esp + 0x1c0]
test bl, bl
je 0x4dea5d
mov ebx, dword [esp + 0x1ac]
cmp ebx, 4
jne 0x4de907
cmp dword [edx], 0x6c6c756e
je 0x4dea5d
test edi, edi
je 0x4de91b
test edi, 0x200
jne 0x4de91b
lea ecx, [0x728fe4]
jmp 0x4de947
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edi
call fcn.0048c9d0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x1a8]
mov ebx, dword [esp + 0x1ac]
mov ebp, ecx
mov ecx, eax
mov eax, ebp
mov dword [esp + 0x134], eax
mov dword [esp + 0x6c], ecx
mov dword [esp + 0x190], 0
mov dword [esp + 0x194], 0
mov dword [esp + 0x198], 0
mov dword [esp + 0x19c], 0
mov dword [esp], edx
mov dword [esp + 4], ebx
mov edx, dword [esp + 0x1b0]
mov dword [esp + 8], edx
call fcn.004096c0
mov eax, dword [esp + 0xc]
lea ecx, [0x67f520]
mov dword [esp + 0x190], ecx
mov dword [esp + 0x194], eax
mov eax, dword [esp + 0x6c]
test eax, eax
je 0x4de9ba
mov ecx, dword [eax + 4]
jmp 0x4de9bc
mov ecx, eax
mov dword [esp + 0x198], ecx
mov eax, dword [esp + 0x134]
mov dword [esp + 0x19c], eax
lea eax, [0x6d431d]
mov dword [esp], eax
mov dword [esp + 4], 0x47
lea eax, [esp + 0x190]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004c3100
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1a4]
mov ebx, dword [edx + 0x3c]
test ebx, ebx
jne reloc.kernel32.dll_SetProcessPriorityBoost
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.004da0e0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x1a4]
mov dword [edx + 0x3c], ecx
mov ecx, dword [0x8d9190]
test ecx, ecx
jne 0x4dea50
mov dword [edx + 0x40], eax
jmp reloc.kernel32.dll_SetProcessPriorityBoost
lea edi, [edx + 0x40]
call fcn.004643a0
jmp reloc.kernel32.dll_SetProcessPriorityBoost
nop
mov edx, edi
and edi, 0x1f
lea ebx, [edi - 0x14]
cmp ebx, 3
ja reloc.kernel32.dll_SetProcessPriorityBoost
test edx, 0x200
jne 0x4dea7f
lea ebx, [0x728fe4]
jmp 0x4dea9b
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.0048c9d0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov ebx, eax
mov eax, ecx
mov dword [esp], ebx
mov dword [esp + 4], eax
call fcn.0048d360
mov eax, dword [esp + 8]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x168]
mov dword [esp], ebx
mov ebx, dword [esp + 0x16c]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0xb0]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
call fcn.0048b8e0
jmp reloc.kernel32.dll_SetProcessPriorityBoost
cmp bl, 0x74
jne 0x4df13b
movzx ebp, byte [esp + 0x1c0]
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x4dec89
mov esi, dword [esp + 0x1ac]
cmp esi, 4
jne 0x4deb1c
cmp dword [edx], 0x65757274
je 0x4dec90
cmp esi, 5
jne 0x4deb33
cmp dword [edx], 0x736c6166
jne 0x4deb33
cmp byte [edx + 4], 0x65
je 0x4dec90
test edi, edi
je 0x4deb47
test edi, 0x200
jne 0x4deb47
lea ecx, [0x728fe4]
jmp 0x4deb73
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edi
call fcn.0048c9d0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x1a8]
mov esi, dword [esp + 0x1ac]
mov ebx, ecx
mov ecx, eax
mov eax, ebx
mov dword [esp + 0x130], eax
mov dword [esp + 0x68], ecx
mov dword [esp + 0x190], 0
mov dword [esp + 0x194], 0
mov dword [esp + 0x198], 0
mov dword [esp + 0x19c], 0
mov dword [esp], edx
mov dword [esp + 4], esi
mov edx, dword [esp + 0x1b0]
mov dword [esp + 8], edx
call fcn.004096c0
mov eax, dword [esp + 0xc]
lea ecx, [0x67f520]
mov dword [esp + 0x190], ecx
mov dword [esp + 0x194], eax
mov eax, dword [esp + 0x68]
test eax, eax
je 0x4debe6
mov ecx, dword [eax + 4]
jmp 0x4debe8
mov ecx, eax
mov dword [esp + 0x198], ecx
mov eax, dword [esp + 0x130]
mov dword [esp + 0x19c], eax
lea eax, [0x6d431d]
mov dword [esp], eax
mov dword [esp + 4], 0x47
lea eax, [esp + 0x190]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004c3100
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1a4]
mov ebx, dword [edx + 0x3c]
test ebx, ebx
jne reloc.kernel32.dll_SetProcessPriorityBoost
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.004da0e0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x1a4]
mov dword [edx + 0x3c], ecx
mov ecx, dword [0x8d9190]
test ecx, ecx
jne 0x4dec7c
mov dword [edx + 0x40], eax
jmp reloc.kernel32.dll_SetProcessPriorityBoost
lea edi, [edx + 0x40]
call fcn.004643a0
jmp reloc.kernel32.dll_SetProcessPriorityBoost
mov esi, dword [esp + 0x1ac]
cmp bl, 0x74
sete bl
nop
nop
and edi, 0x1f
cmp edi, 1
je 0x4df11b
cmp edi, 0x14
je 0x4def20
xchg ebp, eax
test al, al
xchg ebp, eax
je 0x4dee14
mov ebx, dword [esp + 0xb0]
test ebx, ebx
je 0x4decd2
test ebx, 0x200
jne 0x4decd2
lea ecx, [0x728fe4]
jmp 0x4decfe
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
call fcn.0048c9d0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x1a8]
mov esi, dword [esp + 0x1ac]
mov ebx, ecx
mov ecx, eax
mov eax, ebx
mov dword [esp + 0x12c], eax
mov dword [esp + 0x64], ecx
mov dword [esp + 0x190], 0
mov dword [esp + 0x194], 0
mov dword [esp + 0x198], 0
mov dword [esp + 0x19c], 0
mov dword [esp], edx
mov dword [esp + 4], esi
mov edx, dword [esp + 0x1b0]
mov dword [esp + 8], edx
call fcn.004096c0
mov eax, dword [esp + 0xc]
lea ecx, [0x67f520]
mov dword [esp + 0x190], ecx
mov dword [esp + 0x194], eax
mov eax, dword [esp + 0x64]
test eax, eax
je 0x4ded71
mov ecx, dword [eax + 4]
jmp 0x4ded73
mov ecx, eax
mov dword [esp + 0x198], ecx
mov eax, dword [esp + 0x12c]
mov dword [esp + 0x19c], eax
lea eax, [0x6d431d]
mov dword [esp], eax
mov dword [esp + 4], 0x47
lea eax, [esp + 0x190]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004c3100
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x1a4]
mov ebx, dword [edx + 0x3c]
test ebx, ebx
jne reloc.kernel32.dll_SetProcessPriorityBoost
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.004da0e0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x1a4]
mov dword [edx + 0x3c], ecx
mov ecx, dword [0x8d9190]
test ecx, ecx
jne 0x4dee07
mov dword [edx + 0x40], eax
jmp reloc.kernel32.dll_SetProcessPriorityBoost
lea edi, [edx + 0x40]
call fcn.004643a0
jmp reloc.kernel32.dll_SetProcessPriorityBoost
mov edx, dword [esp + 0xb0]
test edx, edx
je 0x4dee31
test edx, 0x200
jne 0x4dee31
mov ecx, eax
lea eax, [0x728fe4]
jmp 0x4dee49
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.0048c9d0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x60], eax
mov dword [esp + 0x128], ecx
mov edx, dword [esp + 0x1a4]
mov ebx, dword [edx + 0xc]
mov dword [esp + 0xd4], ebx
lea ebp, [0x6a6100]
mov dword [esp], ebp
call fcn.0040bd00
mov eax, dword [esp + 4]
mov dword [eax + 4], 4
lea ecx, [0x6bfb5e]
mov dword [eax], ecx
mov ecx, dword [esp + 0x60]
mov dword [eax + 8], ecx
mov ecx, dword [0x8d9190]
test ecx, ecx
jne 0x4deea3
mov ecx, dword [esp + 0x128]
mov dword [eax + 0xc], ecx
jmp 0x4deeb6
lea edi, [eax + 0xc]
mov ecx, eax
mov eax, dword [esp + 0x128]
call fcn.004643a0
mov eax, ecx
mov ecx, dword [esp + 0xd4]
dec ecx
mov dword [eax + 0x10], ecx
sar ecx, 0x1f
mov dword [eax + 0x14], ecx
mov ecx, dword [esp + 0x1a4]
mov edx, dword [ecx + 0x3c]
test edx, edx
jne reloc.kernel32.dll_SetProcessPriorityBoost
mov dword [esp], ecx
lea edx, [0x7271e0]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.004da0e0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x1a4]
mov dword [edx + 0x3c], ecx
mov ecx, dword [0x8d9190]
test ecx, ecx
jne 0x4def13
mov dword [edx + 0x40], eax
jmp reloc.kernel32.dll_SetProcessPriorityBoost
lea edi, [edx + 0x40]
call fcn.004643a0
jmp reloc.kernel32.dll_SetProcessPriorityBoost
mov byte [esp + 0x2e], bl
mov dword [esp], eax
mov dword [esp + 4], ecx
mov edx, dword [esp + 0xb0]
mov dword [esp + 8], edx
call fcn.0048b5f0
mov eax, dword [esp + 0xc]
test eax, eax
jne 0x4df001
movzx ecx, byte [esp + 0x2e]
movzx ecx, cl
lea edx, [0x88e7a0]
lea eax, [edx + ecx*8]
nop
movzx ecx, byte [0x8b2ca0]
test cl, cl
je 0x4def8f
lea ecx, [0x685d20]
mov dword [0x8b2ca4], ecx
mov edx, dword [0x8d9190]
test edx, edx
jne 0x4def82
mov dword [0x8b2ca8], eax
jmp 0x4def95
lea edi, [0x8b2ca8]
call fcn.004643a0
jmp 0x4def95
lea ecx, [0x685d20]
mov dword [esp + 0x180], ecx
mov dword [esp + 0x184], eax
mov ecx, dword [esp + 0x180]
test ecx, ecx
je 0x4defc5
nop
movzx edx, byte [ecx + 0xf]
mov ebx, edx
and edx, 0x1f
test bl, 0x20
jne 0x4defcb
or edx, 0x80
jmp 0x4defcb
xor edx, edx
xor ecx, ecx
xor eax, eax
mov ebx, dword [esp + 0x168]
mov dword [esp], ebx
mov ebx, dword [esp + 0x16c]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0xb0]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], edx
call fcn.0048b8e0
jmp reloc.kernel32.dll_SetProcessPriorityBoost
mov eax, dword [esp + 0xb0]
test eax, 0x200
jne 0x4df01e
mov ecx, dword [esp + 0x168]
lea eax, [0x728fe4]
jmp 0x4df044
mov ecx, dword [esp + 0x168]
mov dword [esp], ecx
mov ecx, dword [esp + 0x16c]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.0048c9d0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x124], ecx
mov dword [esp + 0x5c], eax
mov edx, dword [esp + 0x1a4]
mov ebx, dword [edx + 0xc]
mov dword [esp + 0xd4], ebx
lea ebp, [0x6a6100]
mov dword [esp], ebp
call fcn.0040bd00
mov eax, dword [esp + 4]
mov dword [eax + 4], 4
lea ecx, [0x6bfb5e]
mov dword [eax], ecx
mov ecx, dword [esp + 0x5c]
mov dword [eax + 8], ecx
mov ecx, dword [0x8d9190]
test ecx, ecx
jne 0x4df09e
mov ecx, dword [esp + 0x124]
mov dword [eax + 0xc], ecx
jmp 0x4df0b1
lea edi, [eax + 0xc]
mov ecx, eax
mov eax, dword [esp + 0x124]
call fcn.004643a0
mov eax, ecx
mov ecx, dword [esp + 0xd4]
dec ecx
mov dword [eax + 0x10], ecx
sar ecx, 0x1f
mov dword [eax + 0x14], ecx
mov ecx, dword [esp + 0x1a4]
mov edx, dword [ecx + 0x3c]
test edx, edx
jne reloc.kernel32.dll_SetProcessPriorityBoost
mov dword [esp], ecx
lea edx, [0x7271e0]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.004da0e0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x1a4]
mov dword [edx + 0x3c], ecx
mov ecx, dword [0x8d9190]
test ecx, ecx
jne 0x4df10e
mov dword [edx + 0x40], eax
jmp reloc.kernel32.dll_SetProcessPriorityBoost
lea edi, [edx + 0x40]
call fcn.004643a0
jmp reloc.kernel32.dll_SetProcessPriorityBoost
mov dword [esp], eax
mov dword [esp + 4], ecx
mov eax, dword [esp + 0xb0]
mov dword [esp + 8], eax
mov byte [esp + 0xc], bl
call fcn.0048b9f0
jmp reloc.kernel32.dll_SetProcessPriorityBoost
cmp bl, 0x2d
je 0x4df278
add ebx, 0xffffffd0
cmp bl, 9
jbe 0x4df278
movzx ebx, byte [esp + 0x1c0]
test bl, bl
je 0x4e0167
test edi, edi
je 0x4df174
test edi, 0x200
jne 0x4df174
lea ecx, [0x728fe4]
jmp 0x4df199
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edi
call fcn.0048c9d0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov edx, dword [esp + 0x1a8]
mov ebx, ecx
mov ecx, eax
mov eax, ebx
mov dword [esp + 0x110], eax
mov dword [esp + 0x48], ecx
mov dword [esp + 0x190], 0
mov dword [esp + 0x194], 0
mov dword [esp + 0x198], 0
mov dword [esp + 0x19c], 0
mov dword [esp], edx
mov edx, dword [esp + 0x1ac]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x1b0]
mov dword [esp + 8], edx
call fcn.004096c0
mov eax, dword [esp + 0xc]
lea ecx, [0x67f520]
mov dword [esp + 0x190], ecx
mov dword [esp + 0x194], eax
mov eax, dword [esp + 0x48]
test eax, eax
je 0x4df213
mov ecx, dword [eax + 4]
jmp 0x4df215
mov ecx, eax
mov dword [esp + 0x198], ecx
mov eax, dword [esp + 0x110]
mov dword [esp + 0x19c], eax
lea eax, [0x6d431d]
mov dword [esp], eax
mov dword [esp + 4], 0x47
lea eax, [esp + 0x190]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004c3100
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x1c4], eax
mov dword [esp + 0x1c8], ecx
add esp, 0x1a0
ret
mov dword [esp], 0
mov dword [esp + 4], edx
mov eax, dword [esp + 0x1ac]
mov dword [esp + 8], eax
call fcn.0044ec30
mov eax, dword [esp + 0xc]
mov dword [esp + 0x150], eax
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x8c], ecx
nop
mov edx, dword [esp + 0xb0]
mov ebx, edx
and edx, 0x1f
cmp edx, 0xc
ja 0x4df8ab
lea ebp, [edx - 2]
cmp ebp, 4
jbe 0x4df595
cmp edx, 7
jb 0x4dfb2c
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], 0xa
mov dword [esp + 0xc], 0x40
call fcn.004730e0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x14]
mov edx, dword [esp + 0x10]
test eax, eax
jne 0x4df3f6
mov dword [esp + 0xa8], ecx
mov dword [esp + 0x9c], edx
mov eax, dword [esp + 0x168]
mov ebx, dword [eax]
shl ebx, 3
add ebx, 0xffffffc0
neg ebx
cmp ebx, 0x20
sbb ebp, ebp
lea esi, [ebx - 0x20]
mov dword [esp + 0xd0], esi
mov edi, esi
xchg esi, ebx
neg ebx
xchg esi, ebx
cmp esi, 0x20
sbb eax, eax
mov dword [esp + 0xcc], eax
cmp edi, 0x20
sbb eax, eax
mov dword [esp + 0xc8], eax
mov ecx, edi
shl edx, cl
and edx, eax
mov ecx, ebx
mov eax, dword [esp + 0xa8]
shl eax, cl
and eax, ebp
mov ecx, esi
mov edi, dword [esp + 0x9c]
shr edi, cl
mov esi, dword [esp + 0xcc]
and edi, esi
or edi, eax
or edi, edx
mov dword [esp + 0xcc], edi
mov eax, ecx
mov ecx, ebx
mov edx, dword [esp + 0x9c]
shl edx, cl
and edx, ebp
mov ecx, dword [esp + 0xd0]
shr edi, cl
mov ecx, ebp
mov ebp, dword [esp + 0xc8]
and edi, ebp
mov dword [esp + 0xd0], edi
mov ebp, ecx
mov ecx, eax
mov edi, dword [esp + 0xcc]
mov eax, edi
shl edi, cl
and edi, esi
mov ecx, ebx
shr edx, cl
and edx, ebp
or edx, edi
mov esi, dword [esp + 0xd0]
or edx, esi
mov esi, dword [esp + 0x9c]
cmp esi, edx
setne dl
shr eax, cl
and eax, ebp
mov ebx, dword [esp + 0xa8]
cmp ebx, eax
setne al
or eax, edx
test al, al
je 0x4df563
mov eax, dword [esp + 0xb0]
test eax, 0x200
jne 0x4df413
mov ecx, dword [esp + 0x168]
lea eax, [0x728fe4]
jmp 0x4df439
mov ecx, dword [esp + 0x168]
mov dword [esp], ecx
mov ecx, dword [esp + 0x16c]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.0048c9d0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0xfc], ecx
mov dword [esp + 0x34], eax
mov edx, dword [esp + 0x1a4]
mov ebx, dword [edx + 0xc]
mov dword [esp + 0xd4], ebx
lea ebp, [0x6a6100]
mov dword [esp], ebp
call fcn.0040bd00
mov eax, dword [esp + 4]
mov dword [esp + 0x160], eax
mov dword [esp], 0
lea ecx, [0x6c050f]
mov dword [esp + 4], ecx
mov dword [esp + 8], 7
mov ecx, dword [esp + 0x150]
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0x8c]
mov dword [esp + 0x10], ecx
call fcn.0044e980
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edi, dword [esp + 0x160]
mov dword [edi + 4], ecx
mov ecx, dword [0x8d9190]
test ecx, ecx
jne 0x4df4c2
mov dword [edi], eax
jmp 0x4df4c7
call fcn.004643a0
mov ecx, dword [esp + 0x34]
mov dword [edi + 8], ecx
mov ecx, dword [0x8d9190]
test ecx, ecx
jne 0x4df4e4
mov eax, dword [esp + 0xfc]
mov dword [edi + 0xc], eax
jmp 0x4df4f9
lea ecx, [edi + 0xc]
mov eax, dword [esp + 0xfc]
mov edx, edi
mov edi, ecx
call fcn.004643a0
mov edi, edx
mov eax, dword [esp + 0xd4]
dec eax
mov dword [edi + 0x10], eax
sar eax, 0x1f
mov dword [edi + 0x14], eax
mov eax, dword [esp + 0x1a4]
mov ecx, dword [eax + 0x3c]
test ecx, ecx
jne reloc.kernel32.dll_SetProcessPriorityBoost
mov dword [esp], eax
lea ecx, [0x7271e0]
mov dword [esp + 4], ecx
mov dword [esp + 8], edi
call fcn.004da0e0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x1a4]
mov dword [edx + 0x3c], ecx
mov ecx, dword [0x8d9190]
test ecx, ecx
jne 0x4df556
mov dword [edx + 0x40], eax
jmp reloc.kernel32.dll_SetProcessPriorityBoost
lea edi, [edx + 0x40]
call fcn.004643a0
jmp reloc.kernel32.dll_SetProcessPriorityBoost
mov eax, dword [esp + 0x168]
mov dword [esp], eax
mov eax, dword [esp + 0x16c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 8], eax
mov dword [esp + 0x10], ebx
mov dword [esp + 0xc], esi
call fcn.0048c460
jmp reloc.kernel32.dll_SetProcessPriorityBoost
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], 0xa
mov dword [esp + 0xc], 0x40
call fcn.00473b80
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x10]
mov ebx, dword [esp + 0x14]
test ecx, ecx
jne 0x4df705
mov dword [esp + 0xac], eax
mov dword [esp + 0xa0], edx
mov dword [esp + 0xa4], ebx
mov ebp, dword [esp + 0x168]
mov esi, dword [ebp]
shl esi, 3
lea ecx, [esi - 0x40]
neg ecx
mov dword [esp + 0xc4], ecx
cmp ecx, 0x20
sbb esi, esi
mov dword [esp + 0xd0], esi
lea edi, [ecx - 0x20]
mov dword [esp + 0xcc], edi
xchg edi, ebx
neg ebx
xchg edi, ebx
mov dword [esp + 0xc8], edi
cmp edi, 0x20
sbb eax, eax
mov dword [esp + 0xc0], eax
mov ebp, dword [esp + 0xcc]
cmp ebp, 0x20
sbb ebp, ebp
mov dword [esp + 0xbc], ebp
shr ecx, 5
cmp ecx, 1
sbb ebp, ebp
mov dword [esp + 0xb8], ebp
mov ebp, dword [esp + 0xc4]
cmp ebp, 0x20
sbb eax, eax
mov ecx, ebp
shl ebx, cl
and ebx, esi
mov ecx, edi
shr edx, cl
mov edi, dword [esp + 0xc0]
and edx, edi
mov ecx, dword [esp + 0xcc]
mov edi, dword [esp + 0xa0]
shl edi, cl
mov esi, dword [esp + 0xbc]
and edi, esi
or edx, ebx
or edx, edi
not eax
or eax, ebp
mov ebx, ecx
mov ecx, eax
mov edi, edx
sar edx, cl
mov eax, dword [esp + 0xa4]
cmp eax, edx
setne al
mov byte [esp + 0x2f], al
mov ecx, ebp
mov edx, dword [esp + 0xa0]
shl edx, cl
mov eax, dword [esp + 0xd0]
and edx, eax
xchg esi, ebx
not ebx
xchg esi, ebx
or esi, ebx
mov ecx, esi
mov ebx, edi
sar edi, cl
mov ecx, ebp
shr edx, cl
and edx, eax
mov ecx, dword [esp + 0xc8]
shl ebx, cl
mov eax, dword [esp + 0xc0]
and ebx, eax
or edx, ebx
mov eax, dword [esp + 0xb8]
xor eax, 0xffffffff
and eax, edi
or eax, edx
mov edx, dword [esp + 0xa0]
cmp edx, eax
setne al
movzx ebx, byte [esp + 0x2f]
or eax, ebx
test al, al
je 0x4df872
mov eax, dword [esp + 0xb0]
test eax, 0x200
jne 0x4df722
mov ecx, dword [esp + 0x168]
lea eax, [0x728fe4]
jmp 0x4df748
mov ecx, dword [esp + 0x168]
mov dword [esp], ecx
mov ecx, dword [esp + 0x16c]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.0048c9d0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x38], eax
mov dword [esp + 0x100], ecx
mov edx, dword [esp + 0x1a4]
mov ebx, dword [edx + 0xc]
mov dword [esp + 0xd4], ebx
lea ebp, [0x6a6100]
mov dword [esp], ebp
call fcn.0040bd00
mov eax, dword [esp + 4]
mov dword [esp + 0x160], eax
mov dword [esp], 0
lea ecx, [0x6c050f]
mov dword [esp + 4], ecx
mov dword [esp + 8], 7
mov ecx, dword [esp + 0x150]
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0x8c]
mov dword [esp + 0x10], ecx
call fcn.0044e980
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edi, dword [esp + 0x160]
mov dword [edi + 4], ecx
mov ecx, dword [0x8d9190]
test ecx, ecx
jne 0x4df7d1
mov dword [edi], eax
jmp 0x4df7d6
call fcn.004643a0
mov ecx, dword [esp + 0x38]
mov dword [edi + 8], ecx
mov ecx, dword [0x8d9190]
test ecx, ecx
jne 0x4df7f3
mov eax, dword [esp + 0x100]
mov dword [edi + 0xc], eax
jmp 0x4df808
lea ecx, [edi + 0xc]
mov eax, dword [esp + 0x100]
mov edx, edi
mov edi, ecx
call fcn.004643a0
mov edi, edx
mov eax, dword [esp + 0xd4]
dec eax
mov dword [edi + 0x10], eax
sar eax, 0x1f
mov dword [edi + 0x14], eax
mov eax, dword [esp + 0x1a4]
mov ecx, dword [eax + 0x3c]
test ecx, ecx
jne reloc.kernel32.dll_SetProcessPriorityBoost
mov dword [esp], eax
lea ecx, [0x7271e0]
mov dword [esp + 4], ecx
mov dword [esp + 8], edi
call fcn.004da0e0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x1a4]
mov dword [edx + 0x3c], ecx
mov ecx, dword [0x8d9190]
test ecx, ecx
jne 0x4df865
mov dword [edx + 0x40], eax
jmp reloc.kernel32.dll_SetProcessPriorityBoost
lea edi, [edx + 0x40]
call fcn.004643a0
jmp reloc.kernel32.dll_SetProcessPriorityBoost
mov eax, dword [esp + 0x168]
mov dword [esp], eax
mov eax, dword [esp + 0x16c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 8], eax
mov eax, dword [esp + 0xac]
mov dword [esp + 0x10], eax
mov dword [esp + 0xc], edx
call fcn.0048be80
jmp reloc.kernel32.dll_SetProcessPriorityBoost
cmp edx, 0xe
ja 0x4dfb23
mov dword [esp + 0xb4], edx
test ebx, 0x200
jne 0x4df8d2
lea ebp, [0x728fe4]
mov esi, dword [esp + 0x168]
jmp 0x4df8fc
mov eax, dword [esp + 0x168]
mov dword [esp], eax
mov ecx, dword [esp + 0x16c]
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
call fcn.0048c9d0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov ebp, eax
mov esi, ecx
mov eax, dword [ebp + 0x18]
mov dword [esp], esi
call eax
mov eax, dword [esp + 4]
mov ecx, dword [esp + 0x150]
mov dword [esp], ecx
mov edx, dword [esp + 0x8c]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.00472940
movsd xmm0, qword [esp + 0xc]
mov eax, dword [esp + 0x14]
test eax, eax
je 0x4df942
mov eax, dword [esp + 0xb0]
test eax, 0x200
jmp 0x4df998
mov eax, dword [esp + 0xb4]
cmp eax, 0xd
jne 0x4dfaf9
nop
xorps xmm1, xmm1
ucomisd xmm1, xmm0
jbe 0x4df968
movsd xmm1, qword [0x726830]
pxor xmm0, xmm1
movsd xmm1, qword [0x726818]
ucomisd xmm0, xmm1
jbe 0x4dfaf9
movsd xmm1, qword [0x726820]
ucomisd xmm1, xmm0
jb 0x4dfaf9
mov eax, dword [esp + 0xb0]
test eax, 0x200
jne 0x4df9a9
mov ecx, dword [esp + 0x168]
lea eax, [0x728fe4]
jmp 0x4df9cf
mov ecx, dword [esp + 0x168]
mov dword [esp], ecx
mov ecx, dword [esp + 0x16c]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.0048c9d0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0xf8], ecx
mov dword [esp + 0x30], eax
mov edx, dword [esp + 0x1a4]
mov ebx, dword [edx + 0xc]
mov dword [esp + 0xd4], ebx
lea ebp, [0x6a6100]
mov dword [esp], ebp
call fcn.0040bd00
mov eax, dword [esp + 4]
mov dword [esp + 0x160], eax
mov dword [esp], 0
lea ecx, [0x6c050f]
mov dword [esp + 4], ecx
mov dword [esp + 8], 7
mov ecx, dword [esp + 0x150]
mov dword [esp + 0xc], ecx
mov ecx, dword [esp + 0x8c]
mov dword [esp + 0x10], ecx
call fcn.0044e980
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edi, dword [esp + 0x160]
mov dword [edi + 4], ecx
mov ecx, dword [0x8d9190]
test ecx, ecx
jne 0x4dfa58
mov dword [edi], eax
jmp 0x4dfa5d
call fcn.004643a0
mov ecx, dword [esp + 0x30]
mov dword [edi + 8], ecx
mov ecx, dword [0x8d9190]
test ecx, ecx
jne 0x4dfa7a
mov eax, dword [esp + 0xf8]
mov dword [edi + 0xc], eax
jmp 0x4dfa8f
lea ecx, [edi + 0xc]
mov eax, dword [esp + 0xf8]
mov edx, edi
mov edi, ecx
call fcn.004643a0
mov edi, edx
mov eax, dword [esp + 0xd4]
dec eax
mov dword [edi + 0x10], eax
sar eax, 0x1f
mov dword [edi + 0x14], eax
mov eax, dword [esp + 0x1a4]
mov ecx, dword [eax + 0x3c]
test ecx, ecx
jne reloc.kernel32.dll_SetProcessPriorityBoost
mov dword [esp], eax
lea ecx, [0x7271e0]
mov dword [esp + 4], ecx
mov dword [esp + 8], edi
call fcn.004da0e0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x1a4]
mov dword [edx + 0x3c], ecx
mov ecx, dword [0x8d9190]
test ecx, ecx
jne 0x4dfaec
mov dword [edx + 0x40], eax
jmp reloc.kernel32.dll_SetProcessPriorityBoost
lea edi, [edx + 0x40]
call fcn.004643a0
jmp reloc.kernel32.dll_SetProcessPriorityBoost
mov eax, dword [esp + 0x168]
mov dword [esp], eax
mov eax, dword [esp + 0x16c]
mov dword [esp + 4], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 8], eax
call fcn.0048bdc0
jmp reloc.kernel32.dll_SetProcessPriorityBoost
cmp edx, 0x14
je 0x4dfe4b
cmp edx, 0x18
jne 0x4dfbcb
test ebx, 0x200
jne 0x4dfb4c
lea edx, [0x728fe4]
mov ebp, dword [esp + 0x168]
jmp 0x4dfb8b
mov eax, dword [esp + 0x168]
mov dword [esp], eax
mov ecx, dword [esp + 0x16c]
mov dword [esp + 4], ecx
mov dword [esp + 8], ebx
call fcn.0048c9d0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov ebx, dword [esp + 0xb0]
mov edx, eax
mov ebp, ecx
mov eax, dword [esp + 0x150]
mov ecx, dword [esp + 0x8c]
mov esi, dword [0x8b2614]
cmp dword [0x8b2610], edx
je 0x4dfb9d
xor edx, edx
jmp 0x4dfbcd
mov dword [esp], edx
mov dword [esp + 4], ebp
mov dword [esp + 8], esi
call fcn.004038b0
movzx eax, byte [esp + 0xc]
mov ecx, dword [esp + 0x8c]
mov ebx, dword [esp + 0xb0]
mov edx, eax
mov eax, dword [esp + 0x150]
jmp 0x4dfbcd
xor edx, edx
test dl, dl
jne 0x4dfe20
movzx eax, byte [esp + 0x1c0]
test al, al
je 0x4dfd08
test ebx, ebx
je 0x4dfc00
test ebx, 0x200
jne 0x4dfc00
lea eax, [0x728fe4]
mov ecx, dword [esp + 0x168]
jmp 0x4dfc26
mov eax, dword [esp + 0x168]
mov dword [esp], eax
mov eax, dword [esp + 0x16c]
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
call fcn.0048c9d0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x10c], ecx
mov dword [esp + 0x44], eax
mov dword [esp + 0x190], 0
mov dword [esp + 0x194], 0
mov dword [esp + 0x198], 0
mov dword [esp + 0x19c], 0
mov edx, dword [esp + 0x1a8]
mov dword [esp], edx
mov edx, dword [esp + 0x1ac]
mov dword [esp + 4], edx
mov edx, dword [esp + 0x1b0]
mov dword [esp + 8], edx
call fcn.004096c0
mov eax, dword [esp + 0xc]
lea ecx, [0x67f520]
mov dword [esp + 0x190], ecx
mov dword [esp + 0x194], eax
mov eax, dword [esp + 0x44]
test eax, eax
je 0x4dfca5
mov eax, dword [eax + 4]
mov dword [esp + 0x198], eax
mov eax, dword [esp + 0x10c]
mov dword [esp + 0x19c], eax
lea eax, [0x6d431d]
mov dword [esp], eax
mov dword [esp + 4], 0x47
lea eax, [esp + 0x190]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 2
mov dword [esp + 0x10], 2
call fcn.004c3100
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov dword [esp + 0x1c4], eax
mov dword [esp + 0x1c8], ecx
add esp, 0x1a0
ret
test ebx, ebx
je 0x4dfd23
test ebx, 0x200
jne 0x4dfd23
mov ecx, dword [esp + 0x168]
lea eax, [0x728fe4]
jmp 0x4dfd49
mov eax, dword [esp + 0x168]
mov dword [esp], eax
mov eax, dword [esp + 0x16c]
mov dword [esp + 4], eax
mov dword [esp + 8], ebx
call fcn.0048c9d0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x108], ecx
mov dword [esp + 0x40], eax
mov edx, dword [esp + 0x1a4]
mov ebx, dword [edx + 0xc]
mov dword [esp + 0xd4], ebx
lea ebp, [0x6a6100]
mov dword [esp], ebp
call fcn.0040bd00
mov eax, dword [esp + 4]
mov dword [eax + 4], 6
lea ecx, [0x6c00fe]
mov dword [eax], ecx
mov ecx, dword [esp + 0x40]
mov dword [eax + 8], ecx
mov ecx, dword [0x8d9190]
test ecx, ecx
jne 0x4dfda3
mov ecx, dword [esp + 0x108]
mov dword [eax + 0xc], ecx
jmp 0x4dfdb6
lea edi, [eax + 0xc]
mov ecx, eax
mov eax, dword [esp + 0x108]
call fcn.004643a0
mov eax, ecx
mov ecx, dword [esp + 0xd4]
dec ecx
mov dword [eax + 0x10], ecx
sar ecx, 0x1f
mov dword [eax + 0x14], ecx
mov ecx, dword [esp + 0x1a4]
mov edx, dword [ecx + 0x3c]
test edx, edx
jne reloc.kernel32.dll_SetProcessPriorityBoost
mov dword [esp], ecx
lea edx, [0x7271e0]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.004da0e0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x1a4]
mov dword [edx + 0x3c], ecx
mov ecx, dword [0x8d9190]
test ecx, ecx
jne 0x4dfe13
mov dword [edx + 0x40], eax
jmp reloc.kernel32.dll_SetProcessPriorityBoost
lea edi, [edx + 0x40]
call fcn.004643a0
jmp reloc.kernel32.dll_SetProcessPriorityBoost
mov edx, dword [esp + 0x168]
mov dword [esp], edx
mov edx, dword [esp + 0x16c]
mov dword [esp + 4], edx
mov dword [esp + 8], ebx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], ecx
call fcn.0048c560
jmp reloc.kernel32.dll_SetProcessPriorityBoost
mov edx, dword [esp + 0x1a4]
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.004dd640
mov eax, dword [esp + 0x14]
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
mov ebx, dword [esp + 0xc]
mov ebp, dword [esp + 0xc]
mov esi, dword [esp + 0x10]
test edx, edx
je 0x4dfed2
nop
mov edx, dword [esp + 0x1a4]
mov ebx, dword [edx + 0x3c]
test ebx, ebx
jne reloc.kernel32.dll_SetProcessPriorityBoost
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], ecx
call fcn.004da0e0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x1a4]
mov dword [edx + 0x3c], ecx
mov ecx, dword [0x8d9190]
test ecx, ecx
jne 0x4dfec5
mov dword [edx + 0x40], eax
jmp reloc.kernel32.dll_SetProcessPriorityBoost
lea edi, [edx + 0x40]
call fcn.004643a0
jmp reloc.kernel32.dll_SetProcessPriorityBoost
mov dword [esp + 0x158], esi
mov dword [esp + 0x15c], ebp
mov dword [esp + 0x98], ebx
mov eax, dword [esp + 0x168]
mov dword [esp], eax
mov ecx, dword [esp + 0x16c]
mov dword [esp + 4], ecx
mov edx, dword [esp + 0xb0]
mov dword [esp + 8], edx
call fcn.0048b5f0
mov eax, dword [esp + 0xc]
test eax, eax
je WriteFile
mov eax, dword [esp + 0xb0]
test eax, 0x200
jne 0x4dff35
mov ecx, dword [esp + 0x168]
lea eax, [0x728fe4]
jmp 0x4dff5b
mov ecx, dword [esp + 0x168]
mov dword [esp], ecx
mov ecx, dword [esp + 0x16c]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.0048c9d0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x104], ecx
mov dword [esp + 0x3c], eax
mov edx, dword [esp + 0x1a4]
mov ebx, dword [edx + 0xc]
mov dword [esp + 0xd4], ebx
lea ebp, [0x6a6100]
mov dword [esp], ebp
call fcn.0040bd00
mov eax, dword [esp + 4]
mov dword [eax + 4], 6
lea ecx, [0x6c00fe]
mov dword [eax], ecx
mov ecx, dword [esp + 0x3c]
mov dword [eax + 8], ecx
mov ecx, dword [0x8d9190]
test ecx, ecx
jne 0x4dffb5
mov ecx, dword [esp + 0x104]
mov dword [eax + 0xc], ecx
jmp 0x4dffc8
lea edi, [eax + 0xc]
mov ecx, eax
mov eax, dword [esp + 0x104]
call fcn.004643a0
mov eax, ecx
mov ecx, dword [esp + 0xd4]
dec ecx
mov dword [eax + 0x10], ecx
sar ecx, 0x1f
mov dword [eax + 0x14], ecx
mov ecx, dword [esp + 0x1a4]
mov edx, dword [ecx + 0x3c]
test edx, edx
jne reloc.kernel32.dll_SetProcessPriorityBoost
mov dword [esp], ecx
lea edx, [0x7271e0]
mov dword [esp + 4], edx
mov dword [esp + 8], eax
call fcn.004da0e0
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0xc]
mov edx, dword [esp + 0x1a4]
mov dword [edx + 0x3c], ecx
mov ecx, dword [0x8d9190]
test ecx, ecx
jne 0x4e0025
mov dword [edx + 0x40], eax
jmp reloc.kernel32.dll_SetProcessPriorityBoost
lea edi, [edx + 0x40]
call fcn.004643a0
jmp reloc.kernel32.dll_SetProcessPriorityBoost
mov ecx, dword [esp + 0x98]
test ecx, ecx
je SetWaitableTimer
nop
movzx ecx, byte [0x8b2ca0]
test cl, cl
je 0x4e0087
mov ecx, dword [esp + 0x15c]
mov dword [0x8b2ca4], ecx
mov edx, dword [0x8d9190]
test edx, edx
jne 0x4e0073
mov eax, dword [esp + 0x158]
mov dword [0x8b2ca8], eax
jmp 0x4e0095
lea edi, [0x8b2ca8]
mov eax, dword [esp + 0x158]
call fcn.004643a0
jmp 0x4e0095
mov eax, dword [esp + 0x158]
mov ecx, dword [esp + 0x15c]
mov dword [esp + 0x170], ecx
mov dword [esp + 0x174], eax
mov ecx, dword [esp + 0x170]
test ecx, ecx
je 0x4e00c5
nop
movzx edx, byte [ecx + 0xf]
mov ebx, edx
and edx, 0x1f
test bl, 0x20
jne 0x4e00d3
or edx, 0x80
jmp 0x4e00d3
xor edx, edx
xor ecx, ecx
xor eax, eax
jmp 0x4e00d3
xor edx, edx
xor ecx, ecx
xor eax, eax
mov ebx, dword [esp + 0x168]
mov dword [esp], ebx
mov ebx, dword [esp + 0x16c]
mov dword [esp + 4], ebx
mov ebx, dword [esp + 0xb0]
mov dword [esp + 8], ebx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], eax
mov dword [esp + 0x14], edx
call fcn.0048b8e0
mov dword [esp + SetProcessPriorityBoostx1c4], 0
mov dword [esp + 0x1c8], 0
add esp, 0x1a0
ret
mov eax, dword [edx + 0x10]
mov dword [esp], ebx
mov ecx, dword [esp + 0x1a8]
mov dword [esp + 4], ecx
mov ecx, dword [esp + 0x1ac]
mov dword [esp + 8], ecx
mov ecx, dword [esp + 0x1b0]
mov dword [esp + 0xc], ecx
call eax
mov eax, dword [esp + 0x10]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x1c4], eax
mov dword [esp + 0x1c8], ecx
add esp, 0x1a0
ret
lea eax, [0x6871e0]
mov dword [esp], eax
lea eax, [0x726a70]
mov dword [esp + 4], eax
call fcn.00436170
lea eax, [0x6871e0]
mov dword [esp], eax
lea eax, [0x726a70]
mov dword [esp + 4], eax
call fcn.00436170
call fcn.00464460
lea eax, [0x6871e0]
mov dword [esp], eax
lea eax, [0x726a70]
mov dword [esp + 4], eax
call fcn.00436170
nop
call fcn.00462f90
jmp fcn.004dd810