Function at 0x4144c0
Capabilities:
Inspect section memory permissions

Disassembly:
push ebp
mov ebp, esp
sub esp, 0xa8
mov eax, dword [0x449158]
xor eax, ebp
mov dword [ebp - 4], eax
mov eax, dword [ebp + 0x10]
mov edx, dword [ebp + 0x14]
push ebx
mov ebx, dword [ebp + 0xc]
push esi
mov esi, dword [ebp + 8]
mov dword [ebp - 0x74], eax
mov eax, dword [eax]
push edi
mov edi, dword [ebp + 0x18]
mov dword [ebp - 0x6c], edi
mov cl, byte [eax]
inc eax
mov edi, dword [ebp - 0x74]
mov dword [ebp - 0x7c], edx
mov dword [ebp - 0x78], eax
mov dword [edi], eax
cmp cl, 0x52
jne case.0x414527.66
mov ecx, eax
mov al, byte [ecx]
inc ecx
movsx eax, al
add eax, 0xffffffbf
mov dword [edi], ecx
mov edi, dword [ebp - 0x6c]
mov dword [ebp - 0x80], ecx
cmp eax, 0x36
ja case.0x414527.66
movzx eax, byte [eax + 0x416f64]
jmp dword [eax*4 + 0x416f3c]
push 5
push str.Tfp64
push dword [ebp - 0x78]
mov dword [ebp - 0x98], 0
mov dword [ebp - 0x8c], 0x3f
mov dword [ebp - 0x84], 0x20
call sym.ntTimeSources.exe_nocrt_strncmp
add esp, 0xc
test eax, eax
je 0x4145d4
mov ecx, dword [ebp - 0x98]
cmp dword [ebp - 0x8c], ecx
je case.0x414527.66
test eax, eax
jns 0x414587
mov eax, dword [ebp - 0x84]
dec eax
mov dword [ebp - 0x8c], eax
jmp 0x41459a
mov ecx, dword [ebp - 0x84]
mov eax, dword [ebp - 0x8c]
inc ecx
mov dword [ebp - 0x98], ecx
cmp eax, ecx
jl case.0x414527.66
sub eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
mov dword [ebp - 0x84], eax
lea edx, [eax + eax*2]
movzx ecx, byte [edx*8 + 0x423cf0]
lea eax, [edx*8 + 0x423cf1]
push ecx
push eax
push dword [ebp - 0x78]
call sym.ntTimeSources.exe_nocrt_strncmp
add esp, 0xc
test eax, eax
jne 0x414562
mov eax, dword [ebp - 0x84]
mov ecx, dword [ebp - 0x74]
push 0x10
push 0
lea edx, [eax + eax*2]
shl edx, 3
mov dword [ebp - 0x78], edx
movzx eax, byte [edx + 0x423cf0]
dec eax
add dword [ecx], eax
movzx eax, word [edx + 0x423d04]
mov ecx, dword [ebp + 0x20]
or ecx, eax
lea eax, [ebp - 0x64]
push eax
mov dword [ebp - 0x68], ecx
call sym.ntTimeSources.exe_nocrt_memset
mov eax, dword [ebp - 0x78]
add esp, 0xc
mov edx, dword [ebp - 0x68]
movzx eax, byte [eax + 0x423cfb]
dec eax
test dl, 0x10
je 0x4146c6
cmp eax, 7
ja case.0x4146cb.2
jmp dword [eax*4 + 0x416f9c]
mov ecx, dword [ebp - 0x7c]
mov eax, dword [ecx]
add eax, 4
mov dword [ecx], eax
mov eax, dword [eax - 4]
cdq
mov dword [ebp - 0x60], edx
mov ecx, eax
mov edx, dword [ebp - 0x68]
or edx, 0x800
mov dword [ebp - 0x64], ecx
mov dword [ebp - 0x68], edx
jmp 0x4146ee
mov ecx, dword [ebp - 0x7c]
mov eax, dword [ecx]
add eax, 4
mov dword [ecx], eax
mov eax, dword [eax - 4]
cdq
mov dword [ebp - 0x60], edx
mov ecx, eax
mov edx, dword [ebp - 0x68]
or edx, 0x1000
mov dword [ebp - 0x64], ecx
mov dword [ebp - 0x68], edx
jmp 0x4146ee
mov ecx, dword [ebp - 0x7c]
mov eax, dword [ecx]
add eax, 4
mov dword [ecx], eax
mov eax, dword [eax - 4]
cdq
mov dword [ebp - 0x60], edx
mov ecx, eax
mov edx, dword [ebp - 0x68]
or edx, 0x2000
mov dword [ebp - 0x64], ecx
mov dword [ebp - 0x68], edx
jmp 0x4146ee
mov ecx, dword [ebp - 0x7c]
mov eax, dword [ecx]
add eax, 8
or edx, 0x4000
mov dword [ecx], eax
mov dword [ebp - 0x68], edx
mov ecx, dword [eax - 8]
mov eax, dword [eax - 4]
mov dword [ebp - 0x64], ecx
mov dword [ebp - 0x60], eax
jmp 0x4146ee
cmp eax, 9
ja case.0x4146cb.2
jmp dword [eax*4 + 0x416fbc]
mov ecx, dword [ebp - 0x7c]
mov eax, dword [ecx]
add eax, 4
or edx, 0x800
mov dword [ecx], eax
mov al, byte [eax - 4]
mov byte [ebp - 0x64], al
mov dword [ebp - 0x68], edx
mov ecx, dword [ebp - 0x64]
mov dword [ebp - 0x6c], ecx
test edx, 0x400
je 0x4147b0
push edx
push dword [ebp + 0x1c]
lea eax, [ebp - 0x54]
push edi
push ecx
push 0x50
push eax
call fcn.0041f7d0
add esp, 0x18
push eax
lea eax, [ebp - 0x54]
push eax
push ebx
mov ecx, esi
call dword [section..rdata]
call esi
add esp, 0xc
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00401320
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebp - 0x7c]
mov eax, dword [ecx]
add eax, 4
or edx, 0x1000
mov dword [ecx], eax
mov ax, word [eax - 4]
mov word [ebp - 0x64], ax
jmp 0x4146e8
mov ecx, dword [ebp - 0x7c]
mov eax, dword [ecx]
add eax, 4
or edx, 0x2000
mov dword [ecx], eax
mov dword [ebp - 0x68], edx
mov ecx, dword [eax - 4]
mov dword [ebp - 0x64], ecx
jmp 0x4146ee
mov ecx, dword [ebp - 0x7c]
mov eax, dword [ecx]
add eax, 8
mov dword [ecx], eax
mov ecx, dword [eax - 8]
mov dword [ebp - 0x64], ecx
mov ax, word [eax - 4]
mov word [ebp - 0x60], ax
jmp 0x4146ee
mov eax, dword [ebp - 0x7c]
mov ecx, dword [eax]
add ecx, 0xc
mov dword [eax], ecx
mov eax, dword [ecx - 0xc]
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x64], eax
mov eax, dword [ecx - 8]
mov dword [ebp - 0x60], eax
mov ax, word [ecx - 4]
mov ecx, dword [ebp - 0x6c]
mov word [ebp - 0x5c], ax
jmp 0x4146f1
mov eax, dword [ebp - 0x78]
mov ecx, dword [eax + 0x423d00]
mov dword [ebp - 0x90], ecx
cmp ecx, 0xc
ja case.0x414527.66
jmp dword [ecx*4 + 0x416fe4]
movzx eax, byte [eax + 0x423cfc]
mov ecx, dword [ebp - 0x6c]
push edx
push dword [ebp + 0x1c]
push edi
push eax
push dword [ebp - 0x60]
lea eax, [ebp - 0x54]
push ecx
push eax
call fcn.004065b0
add esp, 0x1c
jmp 0x414711
test edi, edi
jns 0x414810
movzx eax, byte [eax + 0x423cfb]
mov ecx, edx
shr ecx, 2
and ecx, 2
or edx, 4
lea edi, [ecx + eax*2]
mov eax, dword [ebp - 0x78]
movzx eax, byte [eax + 0x423cfc]
push edx
push dword [ebp + 0x1c]
push edi
push eax
push dword [ebp - 0x60]
mov eax, dword [ebp - 0x6c]
push eax
lea eax, [ebp - 0x54]
push eax
call fcn.004065b0
add esp, 0x1c
jmp 0x414711
mov ecx, dword [ebp - 0x6c]
cmp ecx, 1
jne 0x414871
cmp dword [ebp - 0x60], 0
jne 0x414871
and edx, 8
mov ecx, esi
or edx, 0x20
shr edx, 3
push edx
push str.true
push ebx
call dword [section..rdata]
call esi
add esp, 0xc
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00401320
mov esp, ebp
pop ebp
ret
mov eax, ecx
or eax, dword [ebp - 0x60]
jne 0x41489e
push 5
push str.false
push ebx
mov ecx, esi
call dword [section..rdata]
call esi
add esp, 0xc
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00401320
mov esp, ebp
pop ebp
ret
push dword [ebp - 0x60]
push ecx
push str.__lld_
push 0
push 0
push ebx
push esi
call fcn.0041f5f0
add esp, 0x1c
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00401320
mov esp, ebp
pop ebp
ret
movzx eax, word [ebp - 0x62]
and edx, 0xffff146f
or edx, 0x1000
push edx
push 0xffffffffffffffff
push 4
mov dword [ebp - 0x68], edx
cdq
push 0x10
push edx
push eax
lea eax, [ebp - 0x54]
push eax
call fcn.004065b0
mov ecx, dword [ebp - 0x68]
movzx eax, word [ebp - 0x64]
push ecx
push 0xffffffffffffffff
push 4
cdq
push 0x10
push edx
push eax
lea eax, [ebp - 0x4f]
mov byte [ebp - 0x50], 0x3a
push eax
call fcn.004065b0
mov eax, 9
add esp, 0x38
jmp 0x414711
movzx eax, word [ebp - 0x60]
and edx, 0xffff046f
mov dword [ebp - 0x68], edx
or edx, 0x1000
push edx
push 0xffffffffffffffff
push 4
cdq
push 0x10
push edx
push eax
lea eax, [ebp - 0x54]
push eax
call fcn.004065b0
mov ecx, dword [ebp - 0x68]
lea eax, [ebp - 0x4f]
or ecx, 0x2000
mov byte [ebp - 0x50], 0x3a
push ecx
push 0xffffffffffffffff
push 8
push 0x10
push 0
push dword [ebp - 0x64]
push eax
call fcn.004065b0
mov eax, 0xd
add esp, 0x38
jmp 0x414711
movzx eax, word [ebp - 0x5c]
and edx, 0xffff046f
mov dword [ebp - 0x68], edx
or edx, 0x1000
push edx
push 0xffffffffffffffff
push 4
cdq
push 0x10
push edx
push eax
lea eax, [ebp - 0x54]
push eax
call fcn.004065b0
mov ecx, dword [ebp - 0x68]
lea eax, [ebp - 0x4f]
or ecx, 0x4000
mov byte [ebp - 0x50], 0x3a
push ecx
push 0xffffffffffffffff
push 0x10
push 0x10
push dword [ebp - 0x60]
push dword [ebp - 0x64]
push eax
call fcn.004065b0
mov eax, 0x15
add esp, 0x38
jmp 0x414711
movzx eax, byte [ebp - 0x61]
push eax
movzx eax, byte [ebp - 0x62]
push eax
movzx eax, byte [ebp - 0x63]
push eax
movzx eax, byte [ebp - 0x64]
push eax
push str._u._u._u._u
push 0
push 0
push ebx
push esi
call fcn.0041f5f0
add esp, 0x24
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00401320
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebp - 0x6c]
lea eax, [ecx + 0x1000]
cmp eax, 0x2000
jb 0x414a26
push ecx
push ebx
push esi
call fcn.00414150
add esp, 0xc
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00401320
mov esp, ebp
pop ebp
ret
push 8
push str._BadIPv6
lea eax, [ebp - 0x54]
push eax
push ecx
push edx
push edi
push ebx
push esi
push 0
call fcn.004075f0
add esp, 0x24
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00401320
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebp - 0x6c]
lea eax, [ecx + 0x1000]
cmp eax, 0x2000
jb 0x414aa2
movzx eax, byte [ecx + 5]
push eax
movzx eax, byte [ecx + 4]
push eax
movzx eax, byte [ecx + 3]
push eax
movzx eax, byte [ecx + 2]
push eax
movzx eax, byte [ecx + 1]
push eax
movzx eax, byte [ecx]
push eax
push str._02x:_02x:_02x:_02x:_02x:_02x
push 0
push 0
push ebx
push esi
call fcn.0041f5f0
add esp, 0x2c
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00401320
mov esp, ebp
pop ebp
ret
push 7
push str._BadMac
jmp 0x414a2d
mov ecx, dword [ebp - 0x6c]
lea eax, [ecx + 0x1000]
cmp eax, 0x2000
jb 0x414ba1
mov edx, dword [ecx + 0x10]
mov eax, edx
sub eax, 1
je 0x414b2a
sub eax, 1
je 0x414af8
sub eax, 2
je 0x414a61
push edx
push str.unsupported_netaddr_type_u
push 0
push 0
push ebx
push esi
call fcn.0041f5f0
add esp, 0x18
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00401320
mov esp, ebp
pop ebp
ret
mov eax, dword [ecx + 0x14]
cmp eax, 0xffffffff
je 0x414a0a
push eax
push ecx
push str.__RTnaipv6_:_u
push 0
push 0
push ebx
push esi
call fcn.0041f5f0
add esp, 0x1c
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00401320
mov esp, ebp
pop ebp
ret
mov eax, dword [ecx + 0x14]
cmp eax, 0xffffffff
jne 0x414b69
movzx eax, byte [ecx + 3]
push eax
movzx eax, byte [ecx + 2]
push eax
movzx eax, byte [ecx + 1]
push eax
movzx eax, byte [ecx]
push eax
push str._u._u._u._u
push 0
push 0
push ebx
push esi
call fcn.0041f5f0
add esp, 0x24
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00401320
mov esp, ebp
pop ebp
ret
push eax
movzx eax, byte [ecx + 3]
push eax
movzx eax, byte [ecx + 2]
push eax
movzx eax, byte [ecx + 1]
push eax
movzx eax, byte [ecx]
push eax
push str._u._u._u._u:_u
push 0
push 0
push ebx
push esi
call fcn.0041f5f0
add esp, 0x28
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00401320
mov esp, ebp
pop ebp
ret
push 0xb
push str._BadNetAddr
jmp 0x414a2d
mov ecx, dword [ebp - 0x6c]
lea eax, [ecx + 0x1000]
cmp eax, 0x2000
jb 0x414c15
movzx eax, byte [ecx + 0xf]
push eax
movzx eax, byte [ecx + 0xe]
push eax
movzx eax, byte [ecx + 0xd]
push eax
movzx eax, byte [ecx + 0xc]
push eax
movzx eax, byte [ecx + 0xb]
push eax
movzx eax, byte [ecx + 0xa]
push eax
movzx eax, byte [ecx + 9]
push eax
movzx eax, byte [ecx + 8]
push eax
movzx eax, word [ecx + 6]
push eax
movzx eax, word [ecx + 4]
push eax
push dword [ecx]
push str._08x__04x__04x__02x_02x__02x_02x_02x_02x_02x_02x
push 0
push 0
push ebx
push esi
call fcn.0041f5f0
add esp, 0x40
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00401320
mov esp, ebp
pop ebp
ret
push 8
push str._BadUuid
jmp 0x414a2d
mov ecx, dword [ebp - 0x6c]
lea eax, [ecx + 0x1000]
cmp eax, 0x2000
jb case.0x414527.66
test ecx, ecx
je case.0x414527.66
mov eax, dword [ecx]
and eax, 0xffff0004
cmp eax, 0xbabe0004
jne case.0x414527.66
xor edi, edi
cmp dword [ebp - 0x90], 0xb
jne 0x414c75
push 0x50
lea eax, [ebp - 0x54]
push eax
push ebx
push esi
push dword [ecx + 4]
call fcn.0041f310
mov ecx, dword [ebp - 0x64]
add esp, 0x14
mov edx, dword [ebp - 0x68]
mov edi, eax
cmp dword [ecx + 8], 0
jbe 0x414cc8
mov ecx, esi
test dl, 8
je 0x414c8b
push 3
push 0x42453c
jmp 0x414c92
push 2
push 0x42167c
push ebx
call dword [section..rdata]
call esi
mov edi, eax
add esp, 0xc
mov eax, dword [ebp - 0x64]
push dword [eax + 8]
push dword [eax + 0xc]
call fcn.0041f7b0
mov ecx, dword [ebp - 0x64]
add esp, 8
push eax
push dword [ecx + 0xc]
push ebx
mov ecx, esi
call dword [section..rdata]
call esi
add esp, 0xc
add edi, eax
mov eax, edi
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00401320
mov esp, ebp
pop ebp
ret
mov al, byte [ecx]
mov byte [ebp - 0x6d], al
lea eax, [ecx + 1]
mov ecx, dword [ebp - 0x74]
mov dword [ecx], eax
mov al, byte [ebp - 0x6d]
cmp al, 0x6e
je 0x414e5d
cmp al, 0x73
jne case.0x414527.66
cmp byte [ebp + 0x24], 0x6c
jne case.0x414527.66
mov eax, dword [edx]
add eax, 4
mov dword [edx], eax
mov ecx, dword [eax - 4]
mov dword [ebp - 0x8c], ecx
lea eax, [ecx + 0x1000]
cmp eax, 0x2000
jb 0x414d45
mov edx, dword [ebp + 0x1c]
xor eax, eax
mov dword [ebp - 0x84], eax
test edx, edx
jle 0x414d5a
cmp word [ecx + eax*2], 0
je 0x414d5a
inc eax
mov dword [ebp - 0x84], eax
cmp eax, edx
jl 0x414d31
jmp 0x414d5a
mov eax, 6
mov dword [ebp - 0x8c], 0x449354
mov dword [ebp - 0x84], eax
xor ecx, ecx
test byte [ebp + 0x20], 2
mov dword [ebp - 0x80], ecx
jne 0x414da6
dec edi
cmp edi, eax
jl 0x414da6
mov ecx, edi
sub ecx, eax
inc ecx
sub edi, ecx
mov dword [ebp - 0x78], ecx
mov dword [ebp - 0x6c], edi
xor edi, edi
lea esp, [esp]
push 1
push 0x4223d8
push ebx
mov ecx, esi
call dword [section..rdata]
call esi
add esp, 0xc
add edi, eax
sub dword [ebp - 0x78], 1
jne 0x414d80
mov dword [ebp - 0x80], edi
mov edi, dword [ebp - 0x6c]
mov ecx, dword [ebp - 0x80]
mov eax, dword [ebp - 0x84]
sub edi, eax
mov dword [ebp - 0x6c], edi
test eax, eax
jle 0x414e23
mov edi, eax
jmp 0x414dc0
lea eax, [ebp - 0x78]
mov dword [ebp - 0x78], 0
push eax
lea eax, [ebp - 0x8c]
dec edi
push eax
call fcn.0040c3f0
mov eax, dword [ebp - 0x78]
add esp, 8
cmp eax, 0x80
jae 0x414ded
mov byte [ebp - 0x54], al
lea eax, [ebp - 0x53]
jmp 0x414dfa
push eax
lea eax, [ebp - 0x54]
push eax
call fcn.0040bae0
add esp, 8
lea ecx, [ebp - 0x54]
mov byte [eax], 0
sub eax, ecx
push eax
mov eax, ecx
mov ecx, esi
push eax
push ebx
call dword [section..rdata]
call esi
mov ecx, dword [ebp - 0x80]
add esp, 0xc
add ecx, eax
mov dword [ebp - 0x80], ecx
test edi, edi
jg 0x414dc0
mov edi, dword [ebp - 0x6c]
sub edi, 1
js 0x414e4a
push 1
push 0x4223d8
push ebx
mov ecx, esi
call dword [section..rdata]
call esi
mov ecx, dword [ebp - 0x80]
add esp, 0xc
add ecx, eax
sub edi, 1
mov dword [ebp - 0x80], ecx
jns 0x414e28
pop edi
pop esi
mov eax, ecx
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00401320
mov esp, ebp
pop ebp
ret
mov eax, dword [edx]
add eax, 4
mov dword [edx], eax
mov edx, dword [eax - 4]
mov ecx, edx
lea eax, [edx + 0x1000]
cmp eax, 0x2000
jae 0x414e8a
push 0xc
push str._BadBaseName
lea eax, [ebp - 0x54]
push eax
push edx
push dword [ebp + 0x20]
jmp 0x414a33
mov al, byte [edx]
test al, al
je 0x414ebe
cmp al, 0x5c
je 0x414ea0
cmp al, 0x2f
je 0x414ea0
cmp al, 0x3a
jne 0x414eb6
lea esp, [esp]
mov al, byte [ecx + 1]
inc ecx
test al, al
je 0x414ebe
cmp al, 0x5c
je 0x414ea0
cmp al, 0x2f
je 0x414ea0
cmp al, 0x3a
je 0x414ea0
mov edx, ecx
mov al, byte [ecx + 1]
inc ecx
test al, al
jne 0x414e90
sub ecx, edx
push ecx
push edx
jmp 0x414716
mov edi, dword [ebp - 0x74]
mov eax, dword [ebp - 0x80]
mov cl, byte [ecx]
inc eax
mov dword [edi], eax
mov edi, dword [ebp - 0x6c]
cmp cl, 0x6e
jne case.0x414527.66
mov eax, dword [edx]
add eax, 4
mov dword [edx], eax
xor edx, edx
mov eax, dword [eax - 4]
mov ecx, eax
add eax, 0x1000
cmp eax, 0x2000
jae 0x414f0c
push 8
push str._BadFnNm
lea eax, [ebp - 0x54]
push eax
push ecx
push dword [ebp + 0x20]
jmp 0x414a33
mov edi, ecx
mov al, byte [edi]
test al, al
je 0x414f5d
cmp al, 0x28
je 0x414f5d
cmp al, 0x20
je 0x414f2f
cmp al, 9
je 0x414f2f
inc ecx
cmp al, 0x3c
jne 0x414f28
inc edx
jmp 0x414f57
cmp al, 0x3e
jne 0x414f57
dec edx
jmp 0x414f57
mov al, byte [ecx + 1]
inc ecx
test al, al
je 0x414f57
cmp al, 0x20
je 0x414f43
cmp al, 9
je 0x414f43
cmp al, 0x28
jne 0x414f4d
mov al, byte [ecx + 1]
inc ecx
test al, al
jne 0x414f37
jmp 0x414f57
test al, al
je 0x414f57
test edx, edx
jne 0x414f57
mov edi, ecx
mov al, byte [ecx]
test al, al
jne 0x414f14
sub ecx, edi
push ecx
push edi
jmp 0x414716
mov al, byte [ecx]
mov byte [ebp - 0x85], al
lea eax, [ecx + 1]
mov ecx, dword [ebp - 0x74]
mov dword [ebp - 0x90], eax
mov dword [ecx], eax
movsx eax, byte [ebp - 0x85]
add eax, 0xffffffa8
cmp eax, 0x20
ja case.0x414527.66
movzx eax, byte [eax + 0x417028]
jmp dword [eax*4 + 0x417018]
mov eax, dword [edx]
add eax, 4
mov dword [edx], eax
mov edx, dword [ebp + 0x1c]
mov dword [ebp - 0x80], edx
mov ecx, dword [eax - 4]
mov dword [ebp - 0x68], ecx
test edx, edx
jns 0x414fbc
mov edx, 0x10
mov dword [ebp - 0x80], edx
cmp byte [ebp - 0x85], 0x78
mov dword [ebp - 0x78], edx
jne 0x414fe4
mov dword [ebp - 0x8c], ecx
mov dword [ebp - 0x84], 0
mov dword [ebp - 0x9c], 8
jmp 0x41503e
mov ecx, dword [ebp - 0x7c]
add eax, 8
mov dword [ecx], eax
mov ecx, dword [eax - 8]
mov eax, dword [eax - 4]
mov dword [ebp - 0x8c], ecx
mov dword [ebp - 0x84], eax
test eax, eax
ja 0x415031
jb 0x415009
cmp ecx, 0xffffffff
ja 0x415031
mov ecx, dword [ebp - 0x78]
xor eax, eax
add ecx, dword [ebp - 0x8c]
adc eax, dword [ebp - 0x84]
test eax, eax
ja 0x415031
jb 0x415025
cmp ecx, 0xffffffff
ja 0x415031
mov dword [ebp - 0x9c], 8
jmp 0x41503b
mov dword [ebp - 0x9c], 0x10
mov ecx, dword [ebp - 0x68]
test ecx, ecx
je 0x415685
mov eax, dword [ebp - 0x74]
mov edi, dword [ebp - 0x74]
mov eax, dword [eax]
mov dl, byte [eax]
inc eax
mov dword [edi], eax
mov al, dl
mov edi, dword [ebp - 0x6c]
mov edx, dword [ebp - 0x80]
cmp al, 0x44
je 0x4153d0
cmp al, 0x64
je 0x4151c7
cmp al, 0x73
jne case.0x414527.66
mov edi, edx
dec edi
cmp dword [ebp - 0x78], 0
jbe case.0x414527.66
cmp byte [ebp - 0x85], 0x78
lea eax, [ecx + 1]
mov dword [ebp - 0x7c], eax
movzx eax, byte [ecx]
push eax
jne 0x4150a8
push str._02x
push 0
push 0
push ebx
push esi
call fcn.0041f5f0
add esp, 0x18
jmp 0x4150cd
push dword [ebp - 0x84]
push dword [ebp - 0x8c]
push dword [ebp - 0x9c]
push str._0llx:__02x
push 0
push 0
push ebx
push esi
call fcn.0041f5f0
add esp, 0x24
mov dword [ebp - 0x74], eax
mov eax, dword [ebp + 0x20]
test eax, 0x208
jne 0x415123
test edi, edi
jle 0x4151b1
mov eax, dword [ebp - 0x7c]
movzx eax, byte [eax]
push eax
push str.__02x
push 0
push 0
push ebx
push esi
call fcn.0041f5f0
mov ecx, dword [ebp - 0x74]
dec edi
add ecx, eax
add esp, 0x18
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x74], ecx
mov dword [ebp - 0x7c], eax
test edi, edi
jg 0x4150e5
pop edi
pop esi
mov eax, ecx
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00401320
mov esp, ebp
pop ebp
ret
and eax, 8
test edi, edi
jle 0x4151b1
test eax, eax
mov eax, dword [ebp - 0x7c]
je 0x415173
movzx eax, byte [eax]
push eax
push str._02x
push 0
push 0
push ebx
push esi
call fcn.0041f5f0
mov ecx, dword [ebp - 0x74]
dec edi
add ecx, eax
add esp, 0x18
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x74], ecx
mov dword [ebp - 0x7c], eax
test edi, edi
jg 0x415135
pop edi
pop esi
mov eax, ecx
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00401320
mov esp, ebp
pop ebp
ret
movzx eax, byte [eax]
push eax
push str.:_02x
push 0
push 0
push ebx
push esi
call fcn.0041f5f0
mov ecx, dword [ebp - 0x74]
dec edi
add ecx, eax
add esp, 0x18
mov eax, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x74], ecx
mov dword [ebp - 0x7c], eax
test edi, edi
jg 0x415173
pop edi
pop esi
mov eax, ecx
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00401320
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebp - 0x74]
mov eax, ecx
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00401320
mov esp, ebp
pop ebp
ret
xor eax, eax
xor ecx, ecx
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x7c], ecx
test edi, edi
jg 0x4151dc
mov dword [ebp - 0x6c], 0x10
cmp dword [ebp - 0x78], eax
jbe 0x414e4a
jmp 0x4151f0
cdq
mov ecx, 0x421568
add eax, dword [ebp - 0x8c]
adc edx, dword [ebp - 0x84]
cmp dword [ebp - 0x74], 0
jne 0x41520d
mov ecx, 0x4215a9
push dword [ebp - 0x74]
push edx
push eax
push dword [ebp - 0x9c]
push ecx
push str._s_0llx__04x:
push 0
push 0
push ebx
push esi
call fcn.0041f5f0
add dword [ebp - 0x7c], eax
xor ecx, ecx
mov edi, dword [ebp - 0x6c]
add esp, 0x28
mov dword [ebp - 0x78], ecx
test edi, edi
je 0x415313
mov edx, dword [ebp - 0x74]
mov eax, dword [ebp - 0x68]
sub edx, eax
mov dword [ebp - 0x90], edx
lea ecx, [ecx]
lea edx, [ecx + eax]
mov eax, dword [ebp - 0x90]
add eax, edx
cmp eax, dword [ebp - 0x80]
jge 0x4152c4
movzx edx, byte [edx]
test cl, 7
jne 0x415271
mov eax, 0x42456c
test ecx, ecx
jne 0x415276
mov eax, str.__02x
push edx
push eax
push 0
push 0
push ebx
push esi
call fcn.0041f5f0
mov ecx, dword [ebp - 0x7c]
add esp, 0x18
add ecx, eax
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x7c], ecx
mov dword [ebp - 0xa0], ecx
mov ecx, dword [ebp - 0x78]
inc ecx
mov dword [ebp - 0x78], ecx
cmp ecx, edi
jl 0x415250
push 1
push 0x4223d8
push ebx
mov ecx, esi
call dword [section..rdata]
call esi
mov ecx, eax
add esp, 0xc
add ecx, dword [ebp - 0xa0]
mov dword [ebp - 0x7c], ecx
jmp 0x415334
cmp ecx, edi
jge 0x415313
mov eax, edi
mov edi, dword [ebp - 0x7c]
sub eax, ecx
mov dword [ebp - 0x78], eax
push 3
push 0x42457c
push ebx
mov ecx, esi
call dword [section..rdata]
call esi
add esp, 0xc
add edi, eax
sub dword [ebp - 0x78], 1
jne 0x4152d2
push 1
push 0x4223d8
push ebx
mov ecx, esi
mov dword [ebp - 0x90], edi
call dword [section..rdata]
call esi
mov ecx, eax
add esp, 0xc
add ecx, edi
mov dword [ebp - 0x7c], ecx
jmp 0x415334
push 1
push 0x4223d8
push ebx
mov ecx, esi
call dword [section..rdata]
call esi
mov ecx, dword [ebp - 0x7c]
add esp, 0xc
add ecx, eax
mov dword [ebp - 0x7c], ecx
test edi, edi
je 0x4153a9
mov eax, dword [ebp - 0x68]
mov edx, eax
mov edi, dword [ebp - 0x74]
mov dword [ebp - 0x78], edi
sub dword [ebp - 0x78], eax
mov edi, dword [ebp - 0x6c]
mov dword [ebp - 0xa4], edx
mov dword [ebp - 0x98], 0
mov eax, dword [ebp - 0x78]
add eax, edx
cmp eax, dword [ebp - 0x80]
jge 0x4153a9
mov al, byte [edx]
mov byte [ebp - 0x6d], al
sub al, 0x20
cmp al, 0x5e
lea eax, [ebp - 0x6d]
jbe 0x415372
mov eax, 0x424580
push 1
push eax
push ebx
mov ecx, esi
call dword [section..rdata]
call esi
mov ecx, dword [ebp - 0x7c]
add esp, 0xc
mov edx, dword [ebp - 0xa4]
add ecx, eax
mov eax, dword [ebp - 0x98]
inc edx
inc eax
mov dword [ebp - 0x7c], ecx
mov dword [ebp - 0x98], eax
mov dword [ebp - 0xa4], edx
cmp eax, edi
jl 0x415355
mov eax, dword [ebp - 0x74]
add dword [ebp - 0x68], edi
add eax, edi
mov dword [ebp - 0x74], eax
cmp eax, dword [ebp - 0x80]
jl 0x4151f0
pop edi
pop esi
mov eax, ecx
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00401320
mov esp, ebp
pop ebp
ret
xor eax, eax
mov dword [ebp - 0x98], 0
xor ecx, ecx
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x7c], ecx
test edi, edi
jg 0x4153f0
mov edi, 0x10
mov dword [ebp - 0x6c], edi
sub edx, edi
mov dword [ebp - 0xa4], edx
cmp dword [ebp - 0x78], eax
jbe 0x414e4a
mov edx, dword [ebp - 0x68]
cmp eax, dword [ebp - 0xa4]
jge 0x415463
test eax, eax
jle 0x415463
mov eax, edx
push edi
sub eax, edi
push eax
push edx
call sym.ntTimeSources.exe_nocrt_memcmp
add esp, 0xc
test eax, eax
jne 0x415463
mov eax, dword [ebp - 0x98]
test eax, eax
jne 0x415454
mov eax, dword [ebp - 0x74]
add eax, edi
cmp eax, dword [ebp - 0xa4]
jge 0x415499
mov eax, dword [ebp - 0x68]
push edi
push eax
add eax, edi
push eax
call sym.ntTimeSources.exe_nocrt_memcmp
add esp, 0xc
test eax, eax
jne 0x415499
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x7c]
inc eax
mov dword [ebp - 0x98], eax
jmp 0x415659
mov eax, dword [ebp - 0x98]
test eax, eax
jle 0x415499
push eax
push str.
push dword [ebp - 0x9c]
push str._n_.s____ditto_x__u_
push 0
push 0
push ebx
push esi
call fcn.0041f5f0
add esp, 0x20
mov dword [ebp - 0x98], 0
add dword [ebp - 0x7c], eax
mov eax, dword [ebp - 0x74]
mov ecx, dword [ebp - 0x74]
cdq
add eax, dword [ebp - 0x8c]
mov dword [ebp - 0x78], 0x421568
adc edx, dword [ebp - 0x84]
test ecx, ecx
jne 0x4154be
mov dword [ebp - 0x78], 0x4215a9
push ecx
push edx
push eax
push dword [ebp - 0x9c]
push dword [ebp - 0x78]
push str._s_0llx__04x:
push 0
push 0
push ebx
push esi
call fcn.0041f5f0
add dword [ebp - 0x7c], eax
xor ecx, ecx
add esp, 0x28
mov dword [ebp - 0x78], ecx
test edi, edi
je 0x4155c3
mov edx, dword [ebp - 0x74]
mov eax, dword [ebp - 0x68]
sub edx, eax
mov dword [ebp - 0x90], edx
jmp 0x415500
lea edx, [ecx + eax]
mov eax, dword [ebp - 0x90]
add eax, edx
cmp eax, dword [ebp - 0x80]
jge 0x415574
movzx edx, byte [edx]
test cl, 7
jne 0x415521
mov eax, 0x42456c
test ecx, ecx
jne 0x415526
mov eax, str.__02x
push edx
push eax
push 0
push 0
push ebx
push esi
call fcn.0041f5f0
mov ecx, dword [ebp - 0x7c]
add esp, 0x18
add ecx, eax
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x7c], ecx
mov dword [ebp - 0xa0], ecx
mov ecx, dword [ebp - 0x78]
inc ecx
mov dword [ebp - 0x78], ecx
cmp ecx, edi
jl 0x415500
push 1
push 0x4223d8
push ebx
mov ecx, esi
call dword [section..rdata]
call esi
mov ecx, eax
add esp, 0xc
add ecx, dword [ebp - 0xa0]
mov dword [ebp - 0x7c], ecx
jmp 0x4155e4
cmp ecx, edi
jge 0x4155c3
mov eax, edi
mov edi, dword [ebp - 0x7c]
sub eax, ecx
mov dword [ebp - 0x78], eax
push 3
push 0x42457c
push ebx
mov ecx, esi
call dword [section..rdata]
call esi
add esp, 0xc
add edi, eax
sub dword [ebp - 0x78], 1
jne 0x415582
push 1
push 0x4223d8
push ebx
mov ecx, esi
mov dword [ebp - 0x90], edi
call dword [section..rdata]
call esi
mov ecx, eax
add esp, 0xc
add ecx, edi
mov dword [ebp - 0x7c], ecx
jmp 0x4155e4
push 1
push 0x4223d8
push ebx
mov ecx, esi
call dword [section..rdata]
call esi
mov ecx, dword [ebp - 0x7c]
add esp, 0xc
add ecx, eax
mov dword [ebp - 0x7c], ecx
test edi, edi
je 0x415659
mov eax, dword [ebp - 0x68]
mov edx, eax
mov edi, dword [ebp - 0x74]
mov dword [ebp - 0x78], edi
sub dword [ebp - 0x78], eax
mov edi, dword [ebp - 0x6c]
mov dword [ebp - 0x90], edx
mov dword [ebp - 0xa0], 0
mov eax, dword [ebp - 0x78]
add eax, edx
cmp eax, dword [ebp - 0x80]
jge 0x415659
mov al, byte [edx]
mov byte [ebp - 0x6d], al
sub al, 0x20
cmp al, 0x5e
lea eax, [ebp - 0x6d]
jbe 0x415622
mov eax, 0x424580
push 1
push eax
push ebx
mov ecx, esi
call dword [section..rdata]
call esi
mov ecx, dword [ebp - 0x7c]
add esp, 0xc
mov edx, dword [ebp - 0x90]
add ecx, eax
mov eax, dword [ebp - 0xa0]
inc edx
inc eax
mov dword [ebp - 0x7c], ecx
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0x90], edx
cmp eax, edi
jl 0x415605
mov eax, dword [ebp - 0x74]
mov edx, dword [ebp - 0x68]
add eax, edi
add edx, edi
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x68], edx
cmp eax, dword [ebp - 0x80]
jl 0x415404
pop edi
pop esi
mov eax, ecx
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00401320
mov esp, ebp
pop ebp
ret
push 6
push str._null_
jmp 0x414716
mov eax, dword [edx]
add eax, 4
mov dword [edx], eax
mov edi, dword [eax - 4]
mov eax, dword [ecx]
movsx edx, byte [eax]
inc eax
mov dword [ecx], eax
sub edx, 0x61
je 0x4156fa
sub edx, 2
je 0x4156d8
sub edx, 3
jne case.0x414527.66
push 0x50
lea eax, [ebp - 0x54]
push eax
push ebx
push esi
push edi
call fcn.0041f3c0
add esp, 0x14
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00401320
mov esp, ebp
pop ebp
ret
push 0x50
lea eax, [ebp - 0x54]
push eax
push ebx
push esi
push edi
call fcn.0041f3c0
add esp, 0x14
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00401320
mov esp, ebp
pop ebp
ret
push 0x50
lea eax, [ebp - 0x54]
push eax
push ebx
push esi
push edi
call fcn.0041f4d0
add esp, 0x14
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00401320
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp - 0x90]
mov dword [ebp - 0x68], 0
mov dword [ebp - 0x74], 0
mov dl, byte [eax]
inc eax
mov dword [ecx], eax
mov al, dl
mov byte [ebp - 0x6d], dl
mov edx, dword [ebp - 0x7c]
cmp al, 0x62
je 0x41574d
cmp al, 0x42
je 0x41574d
cmp al, 0x69
jne case.0x414527.66
mov eax, dword [edx]
add eax, 8
test dword [ebp + 0x20], 0x100
mov dword [edx], eax
mov edi, dword [eax - 8]
mov edx, dword [eax - 4]
mov dword [ebp - 0x80], edi
mov dword [ebp - 0x9c], edx
jne 0x415773
mov ecx, 1
jmp 0x41578c
mov eax, dword [ebp + 0x1c]
cmp eax, 3
jle 0x415782
mov ecx, 3
jmp 0x41578c
xor ecx, ecx
test eax, eax
sets cl
dec ecx
and ecx, eax
mov al, byte [ebp - 0x6d]
mov dword [ebp - 0x84], ecx
cmp al, 0x62
je 0x4158d7
cmp al, 0x42
je 0x4158d7
mov dword [ebp - 0x98], 0
xor eax, eax
mov edi, dword [eax + 0x4243b0]
mov dword [ebp - 0x8c], edi
mov edi, dword [eax + 0x4243b4]
cmp edx, edi
mov dword [ebp - 0x78], edi
mov edi, dword [ebp - 0x80]
jb 0x4157ed
ja 0x4157d7
cmp edi, dword [eax + 0x4243b0]
jb 0x4157ed
test ecx, ecx
jg 0x41581c
cmp edx, dword [eax + 0x4243bc]
ja 0x41581c
jb 0x4157ed
cmp edi, dword [eax + 0x4243b8]
jae 0x41581c
inc dword [ebp - 0x98]
add eax, 0x18
cmp eax, 0x90
jb 0x4157b1
push 0
push 0
push 0
push 0xa
push edx
push edi
lea eax, [ebp - 0x54]
push 0x50
push eax
call fcn.0041f6e0
mov ecx, eax
mov dword [ebp - 0x80], ecx
jmp 0x41593b
push dword [ebp - 0x78]
push dword [ebp - 0x8c]
push edx
push edi
call fcn.004014e0
mov edi, dword [ebp - 0x84]
mov dword [ebp - 0xa4], eax
mov dword [ebp - 0xa0], edx
test edi, edi
je 0x4158bc
push dword [ebp - 0x78]
push dword [ebp - 0x8c]
push dword [ebp - 0x9c]
push dword [ebp - 0x80]
call fcn.004015e0
mov dword [ebp - 0x90], eax
cmp edi, 1
jne 0x41586d
lea ecx, [edi + 9]
jmp 0x41587d
lea ecx, [edi - 2]
neg ecx
sbb ecx, ecx
and ecx, 0x384
add ecx, 0x64
push dword [ebp - 0x78]
mov eax, edx
push dword [ebp - 0x8c]
mul ecx
mov edi, eax
mov eax, dword [ebp - 0x90]
mul ecx
mov ecx, dword [ebp - 0x8c]
add edi, edx
mov edx, dword [ebp - 0x78]
shrd ecx, edx, 1
shr edx, 1
add eax, ecx
adc edi, edx
push edi
push eax
call fcn.004014e0
mov dword [ebp - 0x74], edx
mov edx, dword [ebp - 0xa0]
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 0x98]
lea ecx, [eax + eax*2]
mov eax, dword [ebp - 0xa4]
mov edi, dword [ecx*8 + 0x4243a8]
jmp 0x415a87
mov dword [ebp - 0x78], 0
xor eax, eax
cmp edx, dword [eax + 0x42430c]
jb 0x415914
ja 0x4158f2
cmp edi, dword [eax + 0x424308]
jb 0x415914
test ecx, ecx
jg 0x4159ef
cmp edx, dword [eax + 0x424314]
ja 0x4159e7
jb 0x415914
cmp edi, dword [eax + 0x424310]
jae 0x4159e7
inc dword [ebp - 0x78]
add eax, 0x18
cmp eax, 0x90
jb 0x4158e0
push 0
push 0
push 0
push 0xa
push edx
push edi
lea eax, [ebp - 0x54]
push 0x50
push eax
call fcn.0041f6e0
mov ecx, eax
mov dword [ebp - 0x80], eax
add esp, 0x20
mov edx, dword [ebp + 0x20]
test dl, 0x40
je 0x41594f
mov byte [ebp + ecx - 0x54], 0x20
inc ecx
mov dword [ebp - 0x80], ecx
cmp byte [ebp - 0x85], 0x63
jne 0x415961
mov byte [ebp + ecx - 0x54], 0x42
inc ecx
mov dword [ebp - 0x80], ecx
cmp ecx, 0x50
jae 0x416f37
mov eax, edx
mov byte [ebp + ecx - 0x54], 0
and al, 0x82
mov dword [ebp - 0x78], 0
cmp al, 0x80
jne 0x4159c0
mov edi, dword [ebp - 0x6c]
cmp edi, ecx
jle 0x4159c0
and edx, 4
sub edi, ecx
mov dword [ebp - 0x90], edx
mov eax, 0x4245dc
test edx, edx
jne 0x41599e
mov eax, 0x4223d8
push 1
push eax
push ebx
mov ecx, esi
call dword [section..rdata]
call esi
add dword [ebp - 0x78], eax
add esp, 0xc
mov edx, dword [ebp - 0x90]
sub edi, 1
jne 0x415990
mov ecx, dword [ebp - 0x80]
push ecx
lea eax, [ebp - 0x54]
mov ecx, esi
push eax
push ebx
call dword [section..rdata]
call esi
add esp, 0xc
add eax, dword [ebp - 0x78]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00401320
mov esp, ebp
pop ebp
ret
test ecx, ecx
je 0x415a6a
mov eax, dword [ebp - 0x78]
xor edx, edx
lea eax, [eax + eax*2]
movzx ecx, byte [eax*8 + 0x424304]
mov eax, 1
mov dword [ebp - 0xa0], ecx
call fcn.00401950
add eax, 0xffffffff
adc edx, 0xffffffff
and eax, edi
and edx, dword [ebp - 0x9c]
mov dword [ebp - 0x90], eax
mov eax, dword [ebp - 0x84]
cmp eax, 1
jne 0x415a33
lea ecx, [eax + 9]
jmp 0x415a43
lea ecx, [eax - 2]
neg ecx
sbb ecx, ecx
and ecx, 0x384
add ecx, 0x64
mov eax, edx
mul ecx
mov edi, eax
mov eax, dword [ebp - 0x90]
mul ecx
mov ecx, dword [ebp - 0xa0]
add edx, edi
call fcn.004017f0
mov dword [ebp - 0x74], edx
mov edx, dword [ebp - 0x9c]
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 0x78]
lea edi, [eax + eax*2]
mov eax, dword [ebp - 0x80]
movzx ecx, byte [edi*8 + 0x424304]
call fcn.004017f0
mov edi, dword [edi*8 + 0x424300]
push 0
push 0
push 0
push 0xa
push edx
push eax
lea eax, [ebp - 0x54]
push 0x50
push eax
call fcn.0041f6e0
add esp, 0x20
mov ecx, eax
mov dword [ebp - 0x80], ecx
test edi, edi
je 0x41593e
mov eax, dword [ebp - 0x84]
test eax, eax
je 0x415aea
push 0x84
push 0
push eax
push 0xa
push dword [ebp - 0x74]
mov byte [ebp + ecx - 0x54], 0x2e
mov eax, 0x50
push dword [ebp - 0x68]
inc ecx
sub eax, ecx
mov dword [ebp - 0x80], ecx
push eax
lea eax, [ebp - 0x54]
add eax, ecx
push eax
call fcn.0041f6e0
mov ecx, dword [ebp - 0x80]
add esp, 0x20
add ecx, eax
mov edx, dword [ebp + 0x20]
test dl, 0x40
je 0x415af8
mov byte [ebp + ecx - 0x54], 0x20
inc ecx
mov al, byte [edi]
mov byte [ebp + ecx - 0x54], al
inc ecx
mov al, byte [edi + 1]
mov dword [ebp - 0x80], ecx
test al, al
je 0x41594f
cmp byte [ebp - 0x6d], 0x42
je 0x41594f
mov byte [ebp + ecx - 0x54], al
jmp 0x41594b
mov eax, dword [edx]
mov ecx, dword [ebp - 0x74]
add eax, 4
mov dword [edx], eax
mov edx, dword [eax - 4]
mov eax, dword [ecx]
movsx edi, byte [eax]
inc eax
sub edi, 0x61
mov dword [ecx], eax
cmp edi, 0x12
ja case.0x414527.66
movzx eax, byte [edi + 0x417060]
jmp dword [eax*4 + 0x41704c]
push 0x50
lea eax, [ebp - 0x54]
push eax
push ebx
push esi
push edx
call fcn.0041f180
add esp, 0x14
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00401320
mov esp, ebp
pop ebp
ret
push 0x50
lea eax, [ebp - 0x54]
push eax
push ebx
push esi
push edx
call fcn.0041f310
add esp, 0x14
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00401320
mov esp, ebp
pop ebp
ret
push 0x50
lea eax, [ebp - 0x54]
push eax
push ebx
push esi
push edx
call fcn.0041f310
add esp, 0x14
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00401320
mov esp, ebp
pop ebp
ret
push 0x50
lea eax, [ebp - 0x54]
push eax
push ebx
push esi
push edx
call fcn.0041f200
add esp, 0x14
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00401320
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebp - 0x74]
jmp case.0x414f96.114
push 9
push 0x424451
push dword [ebp - 0x78]
mov dword [ebp - 0x90], 0
mov dword [ebp - 0x8c], 0
mov dword [ebp - 0x84], 0
call sym.ntTimeSources.exe_nocrt_strncmp
add esp, 0xc
test eax, eax
je 0x415c85
mov ecx, dword [ebp - 0x90]
cmp dword [ebp - 0x8c], ecx
je case.0x414527.66
test eax, eax
jns 0x415c38
mov eax, dword [ebp - 0x84]
dec eax
mov dword [ebp - 0x8c], eax
jmp 0x415c4b
mov ecx, dword [ebp - 0x84]
mov eax, dword [ebp - 0x8c]
inc ecx
mov dword [ebp - 0x90], ecx
cmp eax, ecx
jl case.0x414527.66
sub eax, ecx
cdq
sub eax, edx
sar eax, 1
add eax, ecx
mov dword [ebp - 0x84], eax
lea edx, [eax + eax*2]
movzx ecx, byte [edx*8 + 0x424450]
lea eax, [edx*8 + 0x424451]
push ecx
push eax
push dword [ebp - 0x78]
call sym.ntTimeSources.exe_nocrt_strncmp
add esp, 0xc
test eax, eax
jne 0x415c13
mov eax, dword [ebp - 0x84]
mov ecx, dword [ebp - 0x74]
lea edx, [eax + eax*2]
movzx eax, byte [edx*8 + 0x424450]
dec eax
add dword [ecx], eax
xor ecx, ecx
xor eax, eax
cmp byte [edx*8 + 0x42445f], 4
jne 0x415cb9
mov ecx, dword [ebp - 0x7c]
mov eax, dword [ecx]
add eax, 4
mov dword [ecx], eax
mov ecx, dword [eax - 4]
mov eax, ecx
test byte [edx*8 + 0x424460], 1
je 0x415ce3
add eax, 0x1000
cmp eax, 0x2000
jae 0x415ce3
push 6
push str._BadRD
lea eax, [ebp - 0x54]
push eax
push ecx
push dword [ebp + 0x20]
jmp 0x414a33
cmp dword [edx*8 + 0x424464], 0
jne case.0x414527.66
push dword [ecx + 4]
push dword [ecx]
push str._lld_ns
push 0
push 0
push ebx
push esi
call fcn.0041f5f0
add esp, 0x1c
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00401320
mov esp, ebp
pop ebp
ret
mov al, byte [ecx]
mov byte [ebp - 0x6d], al
cmp al, 0x61
je 0x41629d
cmp al, 0x65
je 0x41629d
cmp al, 0x6a
jne 0x41604c
mov edi, dword [ebp - 0x74]
mov eax, dword [ebp - 0x80]
mov cl, byte [ecx + 1]
add eax, 2
mov dword [edi], eax
mov edi, dword [ebp - 0x6c]
cmp cl, 0x73
jne case.0x414527.66
mov eax, dword [edx]
add eax, 4
mov dword [edx], eax
mov ecx, dword [eax - 4]
mov dword [ebp - 0x8c], ecx
lea eax, [ecx + 0x1000]
cmp eax, 0x2000
jae 0x415d79
mov ecx, 0x4245f4
mov dword [ebp - 0x8c], ecx
push dword [ebp + 0x1c]
push ecx
call fcn.0041f7b0
add esp, 8
mov dword [ebp - 0x98], eax
mov ecx, esi
push 1
push 0x4245fc
push ebx
call dword [section..rdata]
call esi
add esp, 0xc
mov dword [ebp - 0x74], eax
test byte [ebp + 0x20], 2
jne 0x415df6
dec edi
mov dword [ebp - 0x6c], edi
cmp edi, dword [ebp - 0x98]
jl 0x415df6
mov eax, edi
sub eax, dword [ebp - 0x98]
inc eax
sub edi, eax
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x6c], edi
mov edi, dword [ebp - 0x74]
lea esp, [esp]
push 1
push 0x4223d8
push ebx
mov ecx, esi
call dword [section..rdata]
call esi
add esp, 0xc
add edi, eax
sub dword [ebp - 0x90], 1
jne 0x415dd0
mov dword [ebp - 0x74], edi
mov edi, dword [ebp - 0x6c]
xor eax, eax
mov dword [ebp - 0x78], eax
mov dword [ebp - 0x84], eax
cmp dword [ebp - 0x98], eax
jle 0x415ff8
mov edi, dword [ebp - 0x74]
mov edx, dword [ebp - 0x8c]
add edx, eax
mov dword [ebp - 0x90], edx
mov cl, byte [edx]
mov byte [ebp - 0x6d], cl
cmp cl, 0x5d
jae 0x415fbb
cmp cl, 0x20
jb 0x415e3f
cmp cl, 0x22
je 0x415e3f
cmp cl, 0x5c
jne 0x415fbb
cmp dword [ebp - 0x84], eax
jge 0x415e74
sub eax, dword [ebp - 0x84]
mov ecx, esi
push eax
mov eax, dword [ebp - 0x8c]
add eax, dword [ebp - 0x84]
push eax
push ebx
call dword [section..rdata]
call esi
mov cl, byte [ebp - 0x6d]
add esp, 0xc
mov edx, dword [ebp - 0x90]
add edi, eax
movsx eax, cl
add eax, 0xfffffff8
cmp eax, 0x54
ja case.0x415e86.11
movzx eax, byte [eax + 0x417094]
jmp dword [eax*4 + 0x417074]
push 2
push 0x424638
jmp 0x415f9d
push 2
push 0x42463c
jmp 0x415f9d
push 2
push 0x424640
jmp 0x415f9d
push 2
push 0x424644
jmp 0x415f9d
push 2
push 0x424648
jmp 0x415f9d
push 2
push 0x42464c
jmp 0x415f9d
push 2
push 0x424650
jmp 0x415f9d
mov dword [ebp - 0x84], 0xfffd
mov dword [ebp - 0x9c], edx
mov cl, byte [edx]
test cl, cl
js 0x415f0b
lea eax, [edx + 1]
movzx ecx, cl
mov dword [ebp - 0x9c], eax
mov dword [ebp - 0x84], ecx
jmp 0x415f31
lea eax, [ebp - 0x84]
push eax
lea eax, [ebp - 0x9c]
push eax
call fcn.0040b550
mov ecx, dword [ebp - 0x84]
add esp, 8
test eax, eax
js 0x415f3b
mov eax, dword [ebp - 0x9c]
sub eax, dword [ebp - 0x8c]
dec eax
mov dword [ebp - 0x78], eax
cmp ecx, 0xfffe
jb 0x415f4e
mov ecx, 0xfffd
mov dword [ebp - 0x84], ecx
mov eax, ecx
mov word [ebp - 0x54], 0x755c
shr eax, 0xc
and eax, 0xf
mov byte [ebp - 0x4e], 0
push 6
mov al, byte [eax + str.0123456789abcdef]
mov byte [ebp - 0x52], al
mov eax, ecx
shr eax, 8
and eax, 0xf
mov al, byte [eax + str.0123456789abcdef]
mov byte [ebp - 0x51], al
mov eax, ecx
shr eax, 4
and eax, 0xf
and ecx, 0xf
mov al, byte [eax + str.0123456789abcdef]
mov byte [ebp - 0x50], al
mov al, byte [ecx + str.0123456789abcdef]
mov byte [ebp - 0x4f], al
lea eax, [ebp - 0x54]
push eax
push ebx
mov ecx, esi
call dword [section..rdata]
call esi
add edi, eax
add esp, 0xc
mov eax, dword [ebp - 0x78]
inc eax
mov ecx, eax
mov dword [ebp - 0x84], ecx
jmp 0x415fc2
mov ecx, dword [ebp - 0x84]
inc eax
mov dword [ebp - 0x78], eax
cmp eax, dword [ebp - 0x98]
jl 0x415e10
mov dword [ebp - 0x74], edi
mov edi, dword [ebp - 0x6c]
cmp ecx, eax
jge 0x415ff8
sub eax, ecx
push eax
mov eax, dword [ebp - 0x8c]
add eax, ecx
mov ecx, esi
push eax
push ebx
call dword [section..rdata]
call esi
add esp, 0xc
add dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x98]
dec edi
cmp edi, eax
jl 0x416023
sub edi, eax
inc edi
push 1
push 0x4223d8
push ebx
mov ecx, esi
call dword [section..rdata]
call esi
add dword [ebp - 0x74], eax
add esp, 0xc
sub edi, 1
jne 0x416006
push 1
push 0x4245fc
push ebx
mov ecx, esi
call dword [section..rdata]
call esi
add esp, 0xc
add eax, dword [ebp - 0x74]
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00401320
mov esp, ebp
pop ebp
ret
cmp al, 0x70
jne case.0x414527.66
mov al, byte [ecx + 1]
mov byte [ebp - 0x6d], al
cmp al, 0x70
mov eax, dword [edx]
jne 0x41607a
add eax, 4
mov byte [ebp - 0x85], 0x2f
mov dword [edx], eax
mov ecx, dword [eax - 4]
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x80], ecx
add dword [eax], 2
jmp 0x4160c7
add eax, 4
mov dword [edx], eax
mov ecx, dword [eax - 4]
mov eax, dword [ebp - 0x74]
mov dword [ebp - 0x80], ecx
add dword [eax], 2
mov al, byte [ebp - 0x6d]
cmp al, 0x71
setne dl
dec dl
and dl, 0xad
add dl, 0x7e
mov byte [ebp - 0x85], dl
mov ah, dl
cmp al, 0x61
je 0x4160c7
mov byte [ebp - 0x85], ah
mov edx, ecx
mov dword [ebp - 0x80], ecx
cmp al, 0x71
je 0x4160c7
mov byte [ebp - 0x85], ah
mov dword [ebp - 0x80], ecx
cmp al, 0x66
jne case.0x414527.66
lea eax, [ecx + 0x1000]
cmp eax, 0x2000
jae 0x4160dc
mov ecx, 0x4245f4
mov dword [ebp - 0x80], ecx
push dword [ebp + 0x1c]
push ecx
call fcn.0041f7b0
add esp, 8
mov ecx, eax
test byte [ebp + 0x20], 2
mov dword [ebp - 0x78], ecx
jne 0x416130
dec edi
mov dword [ebp - 0x6c], edi
cmp edi, ecx
jl 0x416130
mov eax, edi
sub eax, ecx
inc eax
sub edi, eax
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x6c], edi
mov edi, eax
lea ecx, [ecx]
push 3
push 0x424654
push ebx
mov ecx, esi
call dword [section..rdata]
call esi
add esp, 0xc
sub edi, 1
jne 0x416110
mov edi, dword [ebp - 0x6c]
mov ecx, dword [ebp - 0x78]
xor eax, eax
xor edx, edx
test ecx, ecx
jle 0x416263
xor edi, edi
mov edi, edi
mov eax, dword [ebp - 0x80]
mov cl, byte [edi + eax]
movsx eax, cl
mov dword [ebp - 0x90], eax
add eax, 0xffffff9f
mov byte [ebp - 0xa5], cl
cmp eax, 0x1a
jb 0x41622a
mov eax, dword [ebp - 0x90]
add eax, 0xffffffbf
cmp eax, 0x1a
jb 0x41622a
mov eax, dword [ebp - 0x90]
add eax, 0xffffffd0
cmp eax, 0xa
jb 0x41622a
cmp cl, 0x2d
je 0x41622a
cmp cl, 0x2e
je 0x41622a
cmp cl, 0x5f
je 0x41622a
cmp cl, 0x7e
je 0x41622a
cmp cl, byte [ebp - 0x85]
je 0x41622a
cmp edx, edi
jge 0x4161d8
mov eax, edi
mov ecx, esi
sub eax, edx
push eax
mov eax, dword [ebp - 0x80]
add eax, edx
push eax
push ebx
call dword [section..rdata]
call esi
mov cl, byte [ebp - 0xa5]
add esp, 0xc
cmp cl, 0x20
jne 0x4161ec
cmp byte [ebp - 0x6d], 0x66
jne 0x4161ec
push 1
push 0x424658
jmp 0x416217
movzx ecx, cl
mov eax, ecx
mov byte [ebp - 0x54], 0x25
shr eax, 4
and ecx, 0xf
push 3
mov byte [ebp - 0x51], 0
mov al, byte [eax + str.0123456789ABCDEF]
mov byte [ebp - 0x53], al
mov al, byte [ecx + str.0123456789ABCDEF]
mov byte [ebp - 0x52], al
lea eax, [ebp - 0x54]
push eax
push ebx
mov ecx, esi
call dword [section..rdata]
call esi
add esp, 0xc
inc edi
mov edx, edi
jmp 0x41622b
inc edi
mov ecx, dword [ebp - 0x78]
cmp edi, ecx
jl 0x416140
mov dword [ebp - 0x90], edi
cmp edx, edi
mov edi, dword [ebp - 0x6c]
jge 0x416263
mov eax, dword [ebp - 0x90]
mov ecx, esi
sub eax, edx
push eax
mov eax, dword [ebp - 0x80]
add eax, edx
push eax
push ebx
call dword [section..rdata]
call esi
mov ecx, dword [ebp - 0x78]
add esp, 0xc
dec edi
cmp edi, ecx
jl case.0x414527.66
sub edi, ecx
inc edi
jmp 0x416270
push 3
push 0x424654
push ebx
mov ecx, esi
call dword [section..rdata]
call esi
add esp, 0xc
sub edi, 1
jne 0x416270
pop edi
pop esi
xor eax, eax
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00401320
mov esp, ebp
pop ebp
ret
mov edi, dword [ebp - 0x74]
mov eax, dword [ebp - 0x80]
mov cl, byte [ecx + 1]
add eax, 2
mov dword [edi], eax
mov edi, dword [ebp - 0x6c]
cmp cl, 0x73
jne case.0x414527.66
mov al, byte [ebp - 0x6d]
mov dword [ebp - 0xa0], str.____n_r
cmp al, 0x61
je 0x4162ce
mov dword [ebp - 0xa0], 0x424468
xor ecx, ecx
cmp al, 0x61
sete cl
xor eax, eax
mov dword [ebp - 0x68], eax
add ecx, 5
mov eax, dword [edx]
add eax, 4
mov dword [ebp - 0xa4], ecx
mov dword [edx], eax
mov ecx, dword [eax - 4]
mov dword [ebp - 0x84], ecx
lea eax, [ecx + 0x1000]
cmp eax, 0x2000
jae 0x41630b
mov ecx, 0x4245f4
mov dword [ebp - 0x84], ecx
push dword [ebp + 0x1c]
push ecx
call fcn.0041f7b0
add esp, 8
mov ecx, eax
cmp byte [ebp - 0x6d], 0x61
mov dword [ebp - 0x78], ecx
jne 0x41633d
push 1
push 0x4245fc
push ebx
mov ecx, esi
call dword [section..rdata]
call esi
mov ecx, dword [ebp - 0x78]
add esp, 0xc
mov dword [ebp - 0x68], eax
test byte [ebp + 0x20], 2
jne 0x416386
dec edi
mov dword [ebp - 0x6c], edi
cmp edi, ecx
jl 0x416386
mov eax, edi
sub eax, ecx
inc eax
sub edi, eax
mov dword [ebp - 0x90], eax
mov dword [ebp - 0x6c], edi
mov edi, dword [ebp - 0x68]
mov edi, edi
push 1
push 0x4223d8
push ebx
mov ecx, esi
call dword [section..rdata]
call esi
add esp, 0xc
add edi, eax
sub dword [ebp - 0x90], 1
jne 0x416360
mov dword [ebp - 0x68], edi
mov edi, dword [ebp - 0x6c]
xor eax, eax
mov dword [ebp - 0x98], eax
mov dword [ebp - 0x8c], eax
cmp dword [ebp - 0x78], eax
jle 0x4164dc
mov edx, dword [ebp - 0x84]
mov ecx, 1
mov edi, dword [ebp - 0x68]
sub ecx, edx
mov dword [ebp - 0x9c], ecx
jmp 0x4163c6
mov edx, dword [ebp - 0x84]
push dword [ebp - 0xa4]
add eax, edx
mov dword [ebp - 0x90], eax
movsx eax, byte [eax]
push eax
push dword [ebp - 0xa0]
call sym.ntTimeSources.exe_nocrt_memchr
mov ecx, dword [ebp - 0x8c]
add esp, 0xc
test eax, eax
je 0x416498
mov eax, dword [ebp - 0x98]
cmp ecx, eax
jge 0x41641a
sub eax, ecx
push eax
mov eax, dword [ebp - 0x84]
add eax, ecx
mov ecx, esi
push eax
push ebx
call dword [section..rdata]
call esi
add esp, 0xc
add edi, eax
mov eax, dword [ebp - 0x90]
movsx eax, byte [eax]
add eax, 0xfffffff6
cmp eax, 0x34
ja case.0x416432.11
movzx eax, byte [eax + 0x41710c]
jmp dword [eax*4 + 0x4170ec]
push 4
push str.lt_
jmp 0x416476
push 4
push str.gt_
jmp 0x416476
push 5
push str.amp_
jmp 0x416476
push 6
push str.apos_
jmp 0x416476
push 6
push str.quot_
jmp 0x416476
push 5
push str.xA_
jmp 0x416476
push 5
push str.xD_
push ebx
mov ecx, esi
call dword [section..rdata]
call esi
add esp, 0xc
add edi, eax
mov ecx, dword [ebp - 0x9c]
add ecx, dword [ebp - 0x90]
mov dword [ebp - 0x8c], ecx
mov eax, dword [ebp - 0x98]
inc eax
mov dword [ebp - 0x98], eax
cmp eax, dword [ebp - 0x78]
jl 0x4163c0
mov dword [ebp - 0x68], edi
mov edi, dword [ebp - 0x6c]
cmp ecx, eax
jge 0x4164dc
sub eax, ecx
push eax
mov eax, dword [ebp - 0x84]
add eax, ecx
mov ecx, esi
push eax
push ebx
call dword [section..rdata]
call esi
mov ecx, dword [ebp - 0x68]
add esp, 0xc
add ecx, eax
mov dword [ebp - 0x68], ecx
jmp 0x4164df
mov ecx, dword [ebp - 0x68]
mov eax, dword [ebp - 0x78]
dec edi
cmp edi, eax
jl 0x416512
sub edi, eax
inc edi
lea ebx, [ebx]
push 1
push 0x4223d8
push ebx
mov ecx, esi
call dword [section..rdata]
call esi
mov ecx, dword [ebp - 0x68]
add esp, 0xc
add ecx, eax
mov dword [ebp - 0x68], ecx
sub edi, 1
jne 0x4164f0
cmp byte [ebp - 0x6d], 0x61
jne 0x416532
push 1
push 0x4245fc
push ebx
mov ecx, esi
call dword [section..rdata]
call esi
mov ecx, dword [ebp - 0x68]
add esp, 0xc
add ecx, eax
pop edi
pop esi
mov eax, ecx
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.00401320
mov esp, ebp
pop ebp
ret
xor edi, edi
mov edx, ecx
mov dword [ebp - 0x68], edi
lea esp, [esp]
mov al, byte [edx]
inc edx
mov dword [ebp - 0xa0], edx
test al, al
je case.0x414527.66
cmp al, 0x5b
jne 0x416550
mov cl, byte [edx]
xor eax, eax
mov dword [ebp - 0x90], eax
mov byte [ebp - 0x6d], cl
test cl, cl
je case.0x414527.66
lea ebx, [ebx]
inc eax
cmp byte [ebp - 0x6d], 0x5d
je 0x4165aa
mov cl, byte [eax + edx]
mov dword [ebp - 0x90], eax
mov byte [ebp - 0x6d], cl
test cl, cl
jne 0x416580
mov ecx, dword [ebp - 4]
xor eax, eax
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.00401320
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebp - 0x74]
add eax, edx
mov dword [ecx], eax
mov eax, edx
mov ecx, dword [ebp - 0x80]
sub eax, ecx
cmp eax, 4
jne 0x414cc8
cmp byte [ecx], 0x78
jne 0x414cc8
cmp byte [ecx + 1], 0x38
jne 0x414cc8
cmp byte [ecx + 2], 0x36
jne 0x414cc8
cmp dword [ebp - 0x90], 3
jne 0x414cc8
push 3
push edx
push 0x42465c
call sym.ntTimeSources.exe_nocrt_strncmp
add esp, 0xc
test eax, eax
jne 0x4169b1
mov ecx, dword [ebp - 0x7c]
mov eax, dword [ecx]
add eax, 8
mov dword [ecx], eax
mov ecx, dword [eax - 8]
mov edx, dword [eax - 4]
mov eax, dword [ebp + 0x20]
or eax, 0x4000
mov dword [ebp - 0x6c], ecx
mov dword [ebp - 0x90], eax
or eax, 4
push eax
push 0xffffffffffffffff
push 8
push 0x10
push edx
push ecx
lea eax, [ebp - 0x54]
mov dword [ebp - 0x7c], edx
push eax
call fcn.004065b0
add esp, 0x1c
mov ecx, esi
push eax
lea eax, [ebp - 0x54]
push eax
push ebx
call dword [section..rdata]
call esi
mov ecx, dword [ebp - 0x6c]
add esp, 0xc
and ecx, 1
mov edi, eax
or ecx, 0
je 0x41668d
push 3
push 0x424660
push ebx
mov ecx, esi
mov dword [ebp - 0x68], 1
call dword [section..rdata]
call esi
mov ecx, dword [ebp - 0x6c]
add esp, 0xc
and ecx, 0xfffffffe
add edi, eax
xor edx, edx
mov dword [ebp - 0x6c], ecx
mov dword [ebp - 0x7c], edx
jmp 0x416693
mov ecx, dword [ebp - 0x6c]
mov edx, dword [ebp - 0x7c]
mov eax, ecx
and eax, 2
or eax, 0
je 0x4166d6
mov ecx, dword [ebp - 0x68]
mov eax, ecx
inc ecx
mov dword [ebp - 0x68], ecx
mov ecx, esi
push 3
test eax, eax
jne 0x4166b5
push 0x424664
jmp 0x4166ba
push 0x424668
push ebx
call dword [section..rdata]
call esi
mov ecx, dword [ebp - 0x6c]
add esp, 0xc
and ecx, 0xfffffffd
add edi, eax
xor edx, edx
mov dword [ebp - 0x6c], ecx
mov dword [ebp - 0x7c], edx
mov eax, ecx
and eax, 4
or eax, 0
je 0x416719
mov ecx, dword [ebp - 0x68]
mov eax, ecx
inc ecx
mov dword [ebp - 0x68], ecx
mov ecx, esi
push 3
test eax, eax
jne 0x4166f8
push 0x42466c
jmp 0x4166fd
push 0x424670
push ebx
call dword [section..rdata]
call esi
mov ecx, dword [ebp - 0x6c]
add esp, 0xc
and ecx, 0xfffffffb
add edi, eax
xor edx, edx
mov dword [ebp - 0x6c], ecx
mov dword [ebp - 0x7c], edx
mov eax, ecx
and eax, 8
or eax, 0
je 0x41675c
mov ecx, dword [ebp - 0x68]
mov eax, ecx
inc ecx
mov dword [ebp - 0x68], ecx
mov ecx, esi
push 3
test eax, eax
jne 0x41673b
push 0x424674
jmp 0x416740
push 0x424678
push ebx
call dword [section..rdata]
call esi
mov ecx, dword [ebp - 0x6c]
add esp, 0xc
and ecx, 0xfffffff7
add edi, eax
xor edx, edx
mov dword [ebp - 0x6c], ecx
mov dword [ebp - 0x7c], edx
mov eax, ecx
and eax, 0x10
or eax, 0
je 0x41679f
mov ecx, dword [ebp - 0x68]
mov eax, ecx
inc ecx
mov dword [ebp - 0x68], ecx
mov ecx, esi
push 3
test eax, eax
jne 0x41677e
push 0x42467c
jmp 0x416783
push 0x424680
push ebx
call dword [section..rdata]
call esi
mov ecx, dword [ebp - 0x6c]
add esp, 0xc
and ecx, 0xffffffef
add edi, eax
xor edx, edx
mov dword [ebp - 0x6c], ecx
mov dword [ebp - 0x7c], edx
mov eax, ecx
and eax, 0x20
or eax, 0
je 0x4167e2
mov ecx, dword [ebp - 0x68]
mov eax, ecx
inc ecx
mov dword [ebp - 0x68], ecx
mov ecx, esi
push 3
test eax, eax
jne 0x4167c1
push 0x424684
jmp 0x4167c6
push 0x424688
push ebx
call dword [section..rdata]
call esi
mov ecx, dword [ebp - 0x6c]
add esp, 0xc
and ecx, 0xffffffdf
add edi, eax
xor edx, edx
mov dword [ebp - 0x6c], ecx
mov dword [ebp - 0x7c], edx
mov eax, ecx
and eax, 0x10000
or eax, 0
je 0x41682a
mov ecx, dword [ebp - 0x68]
mov eax, ecx
inc ecx
mov dword [ebp - 0x68], ecx
mov ecx, esi
push 3
test eax, eax
jne 0x416806
push 0x42468c
jmp 0x41680b
push 0x424690
push ebx
call dword [section..rdata]
call esi
mov ecx, dword [ebp - 0x6c]
add esp, 0xc
and ecx, 0xfffeffff
add edi, eax
xor edx, edx
mov dword [ebp - 0x6c], ecx
mov dword [ebp - 0x7c], edx
mov eax, ecx
and eax, 0x40000
or eax, 0
je 0x416872
mov ecx, dword [ebp - 0x68]
mov eax, ecx
inc ecx
mov dword [ebp - 0x68], ecx
mov ecx, esi
push 3
test eax, eax
jne 0x41684e
push 0x424694
jmp 0x416853
push 0x424698
push ebx
call dword [section..rdata]
call esi
mov ecx, dword [ebp - 0x6c]
add esp, 0xc
and ecx, 0xfffbffff
add edi, eax
xor edx, edx
mov dword [ebp - 0x6c], ecx
mov dword [ebp - 0x7c], edx
mov eax, ecx
and eax, 0x20000000
or eax, 0
je 0x4168ba
mov ecx, dword [ebp - 0x68]
mov eax, ecx
inc ecx
mov dword [ebp - 0x68], ecx
mov ecx, esi
push 3
test eax, eax
jne 0x416896
push 0x42469c
jmp 0x41689b
push 0x4246a0
push ebx
call dword [section..rdata]
call esi
mov ecx, dword [ebp - 0x6c]
add esp, 0xc
and ecx, 0xdfffffff
add edi, eax
xor edx, edx
mov dword [ebp - 0x6c], ecx
mov dword [ebp - 0x7c], edx
mov eax, ecx
and eax, 0x40000000
or eax, 0
je 0x416902
mov ecx, dword [ebp - 0x68]
mov eax, ecx
inc ecx
mov dword [ebp - 0x68], ecx
mov ecx, esi
push 3
test eax, eax
jne 0x4168de
push 0x4246a4
jmp 0x4168e3
push 0x4246a8
push ebx
call dword [section..rdata]
call esi
mov ecx, dword [ebp - 0x6c]
add esp, 0xc
and ecx, 0xbfffffff
add edi, eax
xor edx, edx
mov dword [ebp - 0x6c], ecx
mov dword [ebp - 0x7c], edx
mov eax, ecx
and eax, 0x80000000
or eax, 0
je 0x41694a
mov ecx, dword [ebp - 0x68]
mov eax, ecx
inc ecx
mov dword [ebp - 0x68], ecx
mov ecx, esi
push 3
test eax, eax
jne 0x416926
push 0x4246ac
jmp 0x41692b
push 0x4246b0
push ebx
call dword [section..rdata]
call esi
mov ecx, dword [ebp - 0x6c]
add esp, 0xc
and ecx, 0x7fffffff
add edi, eax
xor edx, edx
mov dword [ebp - 0x6c], ecx
mov dword [ebp - 0x7c], edx
mov eax, ecx
or eax, edx
je 0x416f20
cmp dword [ebp - 0x68], 0
mov eax, str.unkn
je 0x416964
mov eax, str._unkn
push 6
push eax
push ebx
mov ecx, esi
call dword [section..rdata]
call esi
push dword [ebp - 0x90]
mov edx, dword [ebp - 0x7c]
add edi, eax
push 0xffffffffffffffff
push 1
push 0x10
push edx
push dword [ebp - 0x6c]
lea eax, [ebp - 0x54]
push eax
call fcn.004065b0
add esp, 0x28
mov ecx, esi
push eax
lea eax, [ebp - 0x54]
push eax
push ebx
call dword [section..rdata]
call esi
add edi, eax
add esp, 0xc
mov eax, dword [ebp - 0x68]
inc eax
jmp 0x416f23
push 3
push dword [ebp - 0xa0]
push 0x4246c8
call sym.ntTimeSources.exe_nocrt_strncmp
add esp, 0xc
test eax, eax
jne 0x414cc8
mov ecx, dword [ebp - 0x7c]
mov eax, dword [ecx]
add eax, 8
mov dword [ecx], eax
mov ecx, dword [eax - 8]
mov edx, dword [eax - 4]
mov eax, dword [ebp + 0x20]
or eax, 0x4000
mov dword [ebp - 0x6c], ecx
mov dword [ebp - 0x90], eax
or eax, 4
push eax
push 0xffffffffffffffff
push 8
push 0x10
push edx
push ecx
lea eax, [ebp - 0x54]
mov dword [ebp - 0x74], edx
push eax
call fcn.004065b0
add esp, 0x1c
mov ecx, esi
push eax
lea eax, [ebp - 0x54]
push eax
push ebx
call dword [section..rdata]
call esi
mov ecx, dword [ebp - 0x6c]
mov edi, eax
mov eax, ecx
add esp, 0xc
and eax, 1
or eax, 0
je 0x416a5a
push 4
push str.VME
push ebx
mov ecx, esi
mov dword [ebp - 0x68], 1
call dword [section..rdata]
call esi
mov ecx, dword [ebp - 0x6c]
add esp, 0xc
and ecx, 0xfffffffe
add edi, eax
xor edx, edx
mov dword [ebp - 0x6c], ecx
mov dword [ebp - 0x74], edx
jmp 0x416a5d
mov edx, dword [ebp - 0x74]
mov eax, ecx
and eax, 2
or eax, 0
je 0x416aa0
mov ecx, dword [ebp - 0x68]
mov eax, ecx
inc ecx
mov dword [ebp - 0x68], ecx
mov ecx, esi
push 4
test eax, eax
jne 0x416a7f
push str.PVI
jmp 0x416a84
push str._PVI
push ebx
call dword [section..rdata]
call esi
mov ecx, dword [ebp - 0x6c]
add esp, 0xc
and ecx, 0xfffffffd
add edi, eax
xor edx, edx
mov dword [ebp - 0x6c], ecx
mov dword [ebp - 0x74], edx
mov eax, ecx
and eax, 4
or eax, 0
je 0x416ae3
mov ecx, dword [ebp - 0x68]
mov eax, ecx
inc ecx
mov dword [ebp - 0x68], ecx
mov ecx, esi
push 4
test eax, eax
jne 0x416ac2
push str.TSD
jmp 0x416ac7
push str._TSD
push ebx
call dword [section..rdata]
call esi
mov ecx, dword [ebp - 0x6c]
add esp, 0xc
and ecx, 0xfffffffb
add edi, eax
xor edx, edx
mov dword [ebp - 0x6c], ecx
mov dword [ebp - 0x74], edx
mov eax, ecx
and eax, 8
or eax, 0
je 0x416b26
mov ecx, dword [ebp - 0x68]
mov eax, ecx
inc ecx
mov dword [ebp - 0x68], ecx
mov ecx, esi
push 3
test eax, eax
jne 0x416b05
push 0x424674
jmp 0x416b0a
push 0x424678
push ebx
call dword [section..rdata]
call esi
mov ecx, dword [ebp - 0x6c]
add esp, 0xc
and ecx, 0xfffffff7
add edi, eax
xor edx, edx
mov dword [ebp - 0x6c], ecx
mov dword [ebp - 0x74], edx
mov eax, ecx
and eax, 0x10
or eax, 0
je 0x416b69
mov ecx, dword [ebp - 0x68]
mov eax, ecx
inc ecx
mov dword [ebp - 0x68], ecx
mov ecx, esi
push 4
test eax, eax
jne 0x416b48
push str.PSE
jmp 0x416b4d
push str._PSE
push ebx
call dword [section..rdata]
call esi
mov ecx, dword [ebp - 0x6c]
add esp, 0xc
and ecx, 0xffffffef
add edi, eax
xor edx, edx
mov dword [ebp - 0x6c], ecx
mov dword [ebp - 0x74], edx
mov eax, ecx
and eax, 0x20
or eax, 0
je 0x416bac
mov ecx, dword [ebp - 0x68]
mov eax, ecx
inc ecx
mov dword [ebp - 0x68], ecx
mov ecx, esi
push 4
test eax, eax
jne 0x416b8b
push str.PAE
jmp 0x416b90
push str._PAE
push ebx
call dword [section..rdata]
call esi
mov ecx, dword [ebp - 0x6c]
add esp, 0xc
and ecx, 0xffffffdf
add edi, eax
xor edx, edx
mov dword [ebp - 0x6c], ecx
mov dword [ebp - 0x74], edx
mov eax, ecx
and eax, 0x40
or eax, 0
je 0x416bef
mov ecx, dword [ebp - 0x68]
mov eax, ecx
inc ecx
mov dword [ebp - 0x68], ecx
mov ecx, esi
push 4
test eax, eax
jne 0x416bce
push str.MCE
jmp 0x416bd3
push str._MCE
push ebx
call dword [section..rdata]
call esi
mov ecx, dword [ebp - 0x6c]
add esp, 0xc
and ecx, 0xffffffbf
add edi, eax
xor edx, edx
mov dword [ebp - 0x6c], ecx
mov dword [ebp - 0x74], edx
mov eax, ecx
and eax, 0x80
or eax, 0
je 0x416c37
mov ecx, dword [ebp - 0x68]
mov eax, ecx
inc ecx
mov dword [ebp - 0x68], ecx
mov ecx, esi
push 4
test eax, eax
jne 0x416c13
push str.PGE
jmp 0x416c18
push str._PGE
push ebx
call dword [section..rdata]
call esi
mov ecx, dword [ebp - 0x6c]
add esp, 0xc
and ecx, 0xffffff7f
add edi, eax
xor edx, edx
mov dword [ebp - 0x6c], ecx
mov dword [ebp - 0x74], edx
mov eax, ecx
and eax, 0x100
or eax, 0
je 0x416c7f
mov ecx, dword [ebp - 0x68]
mov eax, ecx
inc ecx
mov dword [ebp - 0x68], ecx
mov ecx, esi
push 4
test eax, eax
jne 0x416c5b
push str.PCE
jmp 0x416c60
push str._PCE
push ebx
call dword [section..rdata]
call esi
mov ecx, dword [ebp - 0x6c]
add esp, 0xc
and ecx, 0xfffffeff
add edi, eax
xor edx, edx
mov dword [ebp - 0x6c], ecx
mov dword [ebp - 0x74], edx
mov eax, ecx
and eax, 0x200
or eax, 0
je 0x416cc7
mov ecx, dword [ebp - 0x68]
mov eax, ecx
inc ecx
mov dword [ebp - 0x68], ecx
mov ecx, esi
push 7
test eax, eax
jne 0x416ca3
push str.OSFXSR
jmp 0x416ca8
push str._OSFXSR
push ebx
call dword [section..rdata]
call esi
mov ecx, dword [ebp - 0x6c]
add esp, 0xc
and ecx, 0xfffffdff
add edi, eax
xor edx, edx
mov dword [ebp - 0x6c], ecx
mov dword [ebp - 0x74], edx
mov eax, ecx
and eax, 0x400
or eax, 0
je 0x416d0f
mov ecx, dword [ebp - 0x68]
mov eax, ecx
inc ecx
mov dword [ebp - 0x68], ecx
mov ecx, esi
push 0xc
test eax, eax
jne 0x416ceb
push str.OSXMMEEXCPT
jmp 0x416cf0
push str._OSXMMEEXCPT
push ebx
call dword [section..rdata]
call esi
mov ecx, dword [ebp - 0x6c]
add esp, 0xc
and ecx, 0xfffffbff
add edi, eax
xor edx, edx
mov dword [ebp - 0x6c], ecx
mov dword [ebp - 0x74], edx
mov eax, ecx
and eax, 0x2000
or eax, 0
je 0x416d57
mov ecx, dword [ebp - 0x68]
mov eax, ecx
inc ecx
mov dword [ebp - 0x68], ecx
mov ecx, esi
push 5
test eax, eax
jne 0x416d33
push str.VMXE
jmp 0x416d38
push str._VMXE
push ebx
call dword [section..rdata]
call esi
mov ecx, dword [ebp - 0x6c]
add esp, 0xc
and ecx, 0xffffdfff
add edi, eax
xor edx, edx
mov dword [ebp - 0x6c], ecx
mov dword [ebp - 0x74], edx
mov eax, ecx
and eax, 0x4000
or eax, 0
je 0x416d9f
mov ecx, dword [ebp - 0x68]
mov eax, ecx
inc ecx
mov dword [ebp - 0x68], ecx
mov ecx, esi
push 5
test eax, eax
jne 0x416d7b
push str.SMXE
jmp 0x416d80
push str._SMXE
push ebx
call dword [section..rdata]
call esi
mov ecx, dword [ebp - 0x6c]
add esp, 0xc
and ecx, 0xffffbfff
add edi, eax
xor edx, edx
mov dword [ebp - 0x6c], ecx
mov dword [ebp - 0x74], edx
mov eax, ecx
and eax, 0x20000
or eax, 0
je 0x416de7
mov ecx, dword [ebp - 0x68]
mov eax, ecx
inc ecx
mov dword [ebp - 0x68], ecx
mov ecx, esi
push 6
test eax, eax
jne 0x416dc3
push str.PCIDE
jmp 0x416dc8
push str._PCIDE
push ebx
call dword [section..rdata]
call esi
mov ecx, dword [ebp - 0x6c]
add esp, 0xc
and ecx, 0xfffdffff
add edi, eax
xor edx, edx
mov dword [ebp - 0x6c], ecx
mov dword [ebp - 0x74], edx
mov eax, ecx
and eax, 0x40000
or eax, 0
je 0x416e2f
mov ecx, dword [ebp - 0x68]
mov eax, ecx
inc ecx
mov dword [ebp - 0x68], ecx
mov ecx, esi
push 8
test eax, eax
jne 0x416e0b
push str.OSXSAVE
jmp 0x416e10
push str._OSXSAVE
push ebx
call dword [section..rdata]
call esi
mov ecx, dword [ebp - 0x6c]
add esp, 0xc
and ecx, 0xfffbffff
add edi, eax
xor edx, edx
mov dword [ebp - 0x6c], ecx
mov dword [ebp - 0x74], edx
mov eax, ecx
and eax, 0x100000
or eax, 0
je 0x416e77
mov ecx, dword [ebp - 0x68]
mov eax, ecx
inc ecx
mov dword [ebp - 0x68], ecx
mov ecx, esi
push 5
test eax, eax
jne 0x416e53
push str.SMEP
jmp 0x416e58
push str._SMEP
push ebx
call dword [section..rdata]
call esi
mov ecx, dword [ebp - 0x6c]
add esp, 0xc
and ecx, 0xffefffff
add edi, eax
xor edx, edx
mov dword [ebp - 0x6c], ecx
mov dword [ebp - 0x74], edx
mov eax, ecx
and eax, 0x200000
or eax, 0
je 0x416ebf
mov ecx, dword [ebp - 0x68]
mov eax, ecx
inc ecx
mov dword [ebp - 0x68], ecx
mov ecx, esi
push 5
test eax, eax
jne 0x416e9b
push str.SMAP
jmp 0x416ea0
push str._SMAP
push ebx
call dword [section..rdata]
call esi
mov ecx, dword [ebp - 0x6c]
add esp, 0xc
and ecx, 0xffdfffff
add edi, eax
xor edx, edx
mov dword [ebp - 0x6c], ecx
mov dword [ebp - 0x74], edx
mov eax, ecx
or eax, edx
je 0x416f20
cmp dword [ebp - 0x68], 0
mov eax, str.unkn
je 0x416ed5
mov eax, str._unkn
push 6
push eax
push ebx
mov ecx, esi
call dword [section..rdata]
call esi
push dword [ebp - 0x90]
mov edx, dword [ebp - 0x74]
add edi, eax
mov ecx, dword [ebp - 0x6c]
lea eax, [ebp - 0x54]
push 0xffffffffffffffff
push 1
push 0x10
push edx
push ecx
push eax
call fcn.004065b0
add esp, 0x28
mov ecx, esi
push eax
lea eax, [ebp - 0x54]
push eax
push ebx
call dword [section..rdata]
call esi
add edi, eax
add esp, 0xc
mov eax, dword [ebp - 0x68]
inc eax
jmp 0x416f23
mov eax, dword [ebp - 0x68]
test eax, eax
je 0x414cc8
push 1
push 0x4246c4
jmp 0x414cb8
call fcn.0040135b
inc ebp
inc ecx
add byte [esi], ch
inc ebp
inc ecx
add bh, bl
pop ebx
inc ecx
add byte [edx], bl
pop ebp
inc ecx
add bl, bl
dec esp
inc ecx
add bh, al
dec esi
inc ecx
add byte [esi + 0x4f], ah
inc ecx
add byte [eax], ah
pop ebx
inc ecx
add bh, dl
pop ebx
inc ecx
add byte [edx + 0x4162], cl
or dword [ecx], eax
add cl, byte [ecx]
or dword [ecx], eax
add dword [ecx], eax
or dword [ecx], eax
or dword [ebx], eax
or dword [ecx], ecx
or dword [ecx], ecx
add dword [ecx], ecx
add dword [ecx], eax
or dword [ecx], ecx
add dword [ecx], ecx
or dword [ecx], ecx
or dword [ecx], ecx
or dword [ecx], ecx
or dword [ecx], ecx
add al, 9
or dword [ecx], ecx
add eax, 151586313
or dword [ecx], ecx
or dword [ecx], ecx
or dword [ecx], ecx
or dword [edi], eax
or dword [ecx], ecx
or dword [ecx], ecx
or byte [eax + case.0x41462f.0], dl
pop ebp
inc esi
inc ecx
add bl, ch
inc esi
inc ecx
add byte [ecx - 0x14ffbeba], al
inc esi
inc ecx
add bl, ch
inc esi
inc ecx
add bl, ch
inc esi
inc ecx
add byte [ebp - 0x2dffbeba], ah
inc esi
inc ecx
add byte [0xeb004147], dh
inc esi
inc ecx
add byte [edi + 0x47], cl
inc ecx
add bl, ch
inc esi
inc ecx
add byte [edx + 0x47], ch
inc ecx
add bl, ch
inc esi
inc ecx
add byte [ebp - 0x14ffbeba], ah
inc esi
inc ecx
add byte [edi - 0x30ffbeb9], al
inc edi
inc ecx
add ah, dh
inc edi
inc ecx
add byte [0xc6004148], dh
dec eax
inc ecx
add byte [edi], dl
dec ecx
inc ecx
add byte [ecx + ecx*2 + 0x41], ch
add dl, al
dec ecx
inc ecx
add dl, bh
dec ecx
inc ecx
add byte [ecx + 0x4a], dl
inc ecx
add byte [ebx - 0x52ffbeb6], ch
dec ebx
inc ecx
add byte [ecx], ah
dec esp
inc ecx
add byte [ecx], ah
dec esp
inc ecx
add byte [ebp + 0x1c00414f], bl
push edi
inc ecx
add byte [ecx - 0x75ffbeaa], dl
bound eax, qword [ecx]
add byte [ebx], al
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ecx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add eax, dword [ebx]
add al, byte [ebx]
add eax, dword [ecx]
add eax, dword [ebx]
add byte [ebp + 1538588745], cl
inc ecx
add byte [edi + 0x5b], cl
inc ecx
add byte [ebx + 0x7100415b], dl
pop ebx
inc ecx
add byte [edx + 0x4162], cl
add al, 1
add al, 4
add al, byte [esp + eax]
add al, 4
add al, 4
add al, 4
add al, 4
add al, 4
add edx, dword [eax + case.0x415e86.8]
aad 94
inc ecx
add cl, cl
pop esi
inc ecx
add byte [ebp - 0x72ffbea2], bh
pop esi
inc ecx
add byte [ebp - 0x66ffbea2], ah
pop esi
inc ecx
add cl, ah
pop esi
inc ecx
add byte [eax], al
add dword [edx], eax
pop es
add eax, dword [edi]
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
add al, 7
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
add eax, 117901063
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
push es
lea ecx, [ecx]
inc cx
add byte [edi + 100], ch
inc ecx
add byte [ebp + 0x64], bl
inc ecx
add byte [ebx + 0x64], cl
inc ecx
add byte [esp + 0x41], dl
add byte [ecx], bh
inc ecx
add byte [edx + 0x64], al
inc ecx
add byte [esi + 0x4164], al
pop es
pop es
add dword [edi], eax
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
add al, byte [edi]
pop es
pop es
add eax, dword [edi + eax]
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
pop es
add eax, -859044345
int3