Function at 0x4fd470
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff0
sub esp, 0x590
call 0x4fd484
pop eax
mov dword [esp + 0x84], eax
mov eax, dword [ebp + 0xc]
test eax, eax
js 0x4fd647
test byte [edx + 0xb], 1
je 0x4fd4a7
cmp byte [edx + 0xd], 2
jne 0x4fd905
cmp dword [edx + 0x20], 0
mov dword [esp + 0x58], ecx
jne 0x5004c8
mov dword [edx + 0x20], 0xffffffff
mov dword [edx + 0x24], 0
mov dword [esp + 0x14], edx
mov edi, dword [edx + 0x3c]
mov esi, dword [edx + 0x38]
mov dword [edx + 0x3c], 0
test edi, edi
je 0x4fd51c
mov ebx, dword [sym.imp.kernel32.dll_HeapFree]
add esi, 8
jmp 0x4fd4f6
add esi, 0x10
dec edi
je 0x4fd51c
mov eax, dword [esi - 8]
cmp eax, 7
je 0x4fd508
cmp eax, 6
je 0x4fd508
cmp eax, 2
jne 0x4fd4f0
cmp dword [esi - 4], 0
je 0x4fd4f0
push dword [esi]
push 0
push dword [0x94bf18]
call ebx
jmp 0x4fd4f0
mov eax, dword [esp + 0x14]
mov dword [eax + 0x48], 0
mov edx, dword [eax + 0x54]
mov ecx, dword [eax + 0x50]
mov dword [eax + 0x54], 0
test edx, edx
mov dword [esp + 0xc], ecx
mov dword [esp + 8], edx
je 0x4fd5c3
xor edi, edi
jmp 0x4fd557
inc edi
cmp edi, dword [esp + 8]
je 0x4fd5c3
mov eax, dword [esp + 0xc]
lea ecx, [edi + edi*2]
mov dword [esp + 0x30], ecx
mov esi, dword [eax + ecx*4 + 8]
test esi, esi
je 0x4fd5a0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x30]
mov ebx, dword [eax + ecx*4 + 4]
jmp 0x4fd586
add ebx, 8
dec esi
je 0x4fd5a0
mov eax, dword [ebx]
test eax, eax
je 0x4fd580
lock dec dword [eax]
jne 0x4fd580
mov ecx, dword [ebx]
mov edx, dword [ebx + 4]
call fcn.004731d0
jmp 0x4fd580
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x30]
lea eax, [eax + ecx*4]
cmp dword [eax], 0
je 0x4fd550
push dword [eax + 4]
push 0
push dword [0x94bf18]
call dword [sym.imp.kernel32.dll_HeapFree]
jmp 0x4fd550
mov edi, dword [esp + 0x14]
mov dword [edi + 0x58], 0
inc dword [edi + 0x20]
jne 0x5004d2
movzx eax, byte [edi + 0xa]
mov ecx, 1
mov edx, 0xa
cmp al, 2
cmovne ecx, eax
mov byte [edi + 0x5c], cl
movzx ecx, byte [edi + 0xb]
and cl, 1
mov byte [edi + 0x5d], cl
cmp byte [edi + 8], 0
movzx eax, byte [edi + 9]
cmovne edx, eax
xor eax, eax
mov byte [edi + 0x5e], dl
mov dword [edi + 0x20], 0xffffffff
mov esi, dword [edi]
mov edx, dword [edi + 4]
cmp esi, 2
cmove esi, eax
cmp esi, 1
mov dword [edi + 0x2c], esi
mov dword [edi + 0x30], edx
jne 0x4fd65c
mov esi, dword [edi + 0x3c]
shl esi, 4
cmp esi, edx
jbe 0x4fd65c
mov eax, dword [esp + 0x58]
mov dword [eax], 0x27
mov dword [eax + 4], edx
mov dword [edi + 0x20], 0
jmp 0x500184
mov dword [ecx], 0x25
mov dword [ecx + 4], eax
mov dword [ecx + 8], 0x7fffffff
jmp 0x500184
mov ebx, dword [ebp + 8]
mov esi, dword [ebp + 0xc]
lea edx, [edi + 0x24]
cmp cl, 1
movzx ecx, cl
mov dword [edi + 0x20], 0
mov dword [esp + 0xc], edx
lea edx, [ebx + esi*4]
mov dword [esp + 0x30], edx
mov edx, 2
sbb edx, 0
shl esi, 2
nop dword [eax + eax]
cmp esi, eax
je 0x4fd7fa
mov edi, dword [ebx + eax]
add eax, 4
mov edi, dword [edi + 0x18]
test dword [edi + ecx*4 + 0x1c], edx
jne 0x4fd690
lea ecx, [esp + 0x260]
mov dword [esp + 0x260], 0
mov dword [esp + 0x264], 1
mov dword [esp + 0x268], 0
mov byte [esp + 0x26c], 1
call fcn.00545880
movsd xmm0, qword [esp + 0x260]
movsd xmm1, qword [esp + 0x268]
movsd qword [esp + 0x220], xmm1
movsd qword [esp + 0x218], xmm0
mov edx, dword [esp + 0x220]
cmp edx, dword [esp + 0x218]
jne 0x4fd723
lea ecx, [esp + 0x218]
call fcn.00546060
mov edx, dword [esp + 0x220]
mov eax, dword [esp + 0x21c]
lea ecx, [esp + 0x218]
mov word [eax + edx*2], 0xff00
inc edx
mov dword [esp + 0x220], edx
call fcn.00545880
mov byte [esp + 0x224], 0
lea edi, [esp + 0x420]
lea edx, [esp + 0x260]
movq xmm0, qword [esp + 0x220]
movq xmm1, qword [esp + 0x218]
mov ecx, edi
movq qword [esp + 0x26c], xmm0
movq qword [esp + 0x264], xmm1
mov dword [esp + 0x260], 1
call fcn.004cfbb0
mov edx, dword [esp + 0x14]
lea ecx, [esp + 0xa0]
push 0
push 0
push edi
call fcn.004c63b0
add esp, 0xc
mov eax, dword [esp + 0xa0]
cmp eax, 0x2a
jne 0x4fd9db
mov ecx, dword [esp + 0xa8]
mov eax, dword [esp + 0xa4]
lea edi, [esp + 0x420]
mov dword [esp + 8], ecx
mov ecx, edi
mov dword [esp + 0x60], eax
call fcn.00542e60
mov ecx, edi
call fcn.004c6c20
push dword [esp + 0x438]
push 0
push dword [0x94bf18]
call dword [sym.imp.kernel32.dll_HeapFree]
jmp 0x4fd858
mov edi, dword [esp + 0x14]
mov edx, dword [esp + 0xc]
lea eax, [esp + 0x420]
lea ecx, [esp + 0xa0]
mov dword [edi + 0x20], 0xffffffff
mov dword [esp + 0x424], 0
mov dword [esp + 0x420], 0
push eax
call fcn.004c6b00
add esp, 4
inc dword [edi + 0x20]
mov eax, dword [esp + 0xa0]
cmp eax, 0x2a
jne 0x4fd910
mov eax, dword [esp + 0xa4]
mov dword [esp + 0x60], eax
mov dword [esp + 8], eax
mov dword [esp + 0x3c8], ebx
mov eax, dword [esp + 0x30]
mov ebx, dword [esp + 0x14]
lea esi, [esp + 0x420]
lea edx, [esp + 0x3c8]
mov ecx, esi
mov dword [esp + 0x3cc], eax
mov dword [esp + 0x3d0], ebx
call fcn.00524b50
mov eax, dword [esp + 0x420]
cmp eax, 0x2b
jne 0x4fd987
cmp dword [ebx + 0x20], 0
jne 0x5004eb
mov edx, dword [esp + 0xc]
lea eax, [esp + 0x218]
mov dword [ebx + 0x20], 0xffffffff
mov dword [esp + 0x218], 8
lea ecx, [esp + 0xa0]
push eax
call fcn.004c6b00
add esp, 4
inc dword [ebx + 0x20]
mov eax, dword [esp + 0xa0]
cmp eax, 0x2a
jne 0x4fdb04
movdqu xmm0, xmmword [esp + 0xa4]
mov eax, 0x2a
pshufd xmm2, xmm0, 0x50
cmp eax, 0x2a
je 0x4fde91
jmp 0x4fec87
mov dword [ecx], 0x29
jmp 0x500184
mov edx, dword [esp + 0x58]
movsd xmm1, qword [esp + 0xcc]
movsd xmm2, qword [esp + 0xc4]
mov ecx, dword [esp + 0xdc]
movq xmm0, qword [esp + 0xd4]
movsd qword [edx + 0x2c], xmm1
movsd xmm1, qword [esp + 0xbc]
movsd qword [edx + 0x24], xmm2
movq xmm2, qword [esp + 0xac]
mov dword [edx + 0x3c], ecx
movq qword [edx + 0x34], xmm0
movsd qword [edx + 0x1c], xmm1
movsd xmm1, qword [esp + 0xb4]
movq qword [edx + 0xc], xmm2
movsd qword [edx + 0x14], xmm1
movq xmm1, qword [esp + 0xa4]
mov dword [edx], eax
movq qword [edx + 4], xmm1
jmp 0x500184
movq xmm2, qword [esp + 0x424]
cmp eax, 0x2a
jne 0x4fda7c
lea ecx, [esp + 0xa0]
lea edx, [esp + 0x3c8]
movdqa xmmword [esp + 0x30], xmm2
call fcn.00524b50
mov eax, dword [esp + 0xa0]
cmp eax, 0x2b
jne 0x4fdb95
movdqa xmm2, xmmword [esp + 0x30]
mov eax, 0x2a
cmp eax, 0x2a
je 0x4fde91
jmp 0x4fec87
mov edx, dword [esp + 0x58]
movsd xmm1, qword [esp + 0xcc]
movsd xmm2, qword [esp + 0xc4]
mov ecx, dword [esp + 0xdc]
movq xmm0, qword [esp + 0xd4]
lea esi, [esp + 0x420]
movsd qword [edx + 0x2c], xmm1
movsd xmm1, qword [esp + 0xbc]
movsd qword [edx + 0x24], xmm2
movq xmm2, qword [esp + 0xac]
mov dword [edx + 0x3c], ecx
mov ecx, esi
movq qword [edx + 0x34], xmm0
movsd qword [edx + 0x1c], xmm1
movsd xmm1, qword [esp + 0xb4]
movq qword [edx + 0xc], xmm2
movsd qword [edx + 0x14], xmm1
movq xmm1, qword [esp + 0xa4]
mov dword [edx], eax
movq qword [edx + 4], xmm1
call fcn.00542e60
mov ecx, esi
call fcn.004c6c20
push dword [esp + 0x438]
push 0
push dword [0x94bf18]
call dword [sym.imp.kernel32.dll_HeapFree]
jmp 0x500184
movsd xmm0, qword [esp + 0x454]
mov ecx, dword [esp + 0x45c]
movq xmm1, qword [esp + 0x434]
movsd qword [esp + 0x288], xmm0
movsd xmm0, qword [esp + 0x44c]
mov dword [esp + 0x290], ecx
movsd qword [esp + 0x280], xmm0
movsd xmm0, qword [esp + 0x444]
movsd qword [esp + 0x278], xmm0
movsd xmm0, qword [esp + 0x43c]
movsd qword [esp + 0x270], xmm0
movq xmm0, qword [esp + 0x42c]
movq qword [esp + 0x268], xmm1
movq qword [esp + 0x260], xmm0
cmp eax, 0x2a
jne 0x4fec87
jmp 0x4fde91
movsd xmm1, qword [esp + 0xb4]
movsd xmm3, qword [esp + 0xbc]
movq xmm2, qword [esp + 0xa4]
movq xmm0, qword [esp + 0xac]
mov ecx, dword [esp + 0xdc]
movsd qword [esp + 0x268], xmm1
movsd xmm1, qword [esp + 0xc4]
movsd qword [esp + 0x270], xmm3
movsd xmm3, qword [esp + 0xcc]
movq qword [esp + 0x260], xmm0
mov dword [esp + 0x290], ecx
movsd qword [esp + 0x278], xmm1
movq xmm1, qword [esp + 0xd4]
movsd qword [esp + 0x280], xmm3
movq qword [esp + 0x288], xmm1
cmp eax, 0x2a
je 0x4fde91
jmp 0x4fec87
movq xmm2, qword [esp + 0xa4]
cmp eax, 0x2a
jne 0x4fde0e
cmp dword [ebx + 0x20], 0
movdqa xmmword [esp + 0x70], xmm2
jne 0x500698
mov edx, dword [esp + 0xc]
lea ecx, [esp + 0xa0]
mov dword [ebx + 0x20], 0xffffffff
mov dword [esp + 0x424], 0
mov dword [esp + 0x428], 4
mov dword [esp + 0x42c], 0
mov dword [esp + 0x420], 6
push esi
call fcn.004c6b00
add esp, 4
mov ecx, dword [ebx + 0x20]
inc ecx
mov dword [ebx + 0x20], ecx
mov eax, dword [esp + 0xa0]
cmp eax, 0x2a
jne 0x4fec04
test ecx, ecx
jne 0x5006b3
mov edi, dword [esp + 0xa4]
mov edx, dword [esp + 0xc]
mov dword [ebx + 0x20], 0xffffffff
mov dword [esp + 0x424], 0
mov dword [esp + 0x420], 0
lea ecx, [esp + 0xa0]
push esi
call fcn.004c6b00
add esp, 4
inc dword [ebx + 0x20]
mov eax, dword [esp + 0xa0]
cmp eax, 0x2a
jne 0x4fec04
mov esi, dword [esp + 0xa4]
sub esp, 8
movdqa xmm0, xmmword [esp + 0x38]
lea ecx, [esp + 0xa8]
mov edx, ebx
mov dword [esp], edi
movd dword [esp + 4], xmm0
call fcn.004cec90
add esp, 8
mov eax, dword [esp + 0xa0]
cmp eax, 0x2a
jne 0x4fec04
pshufd xmm0, xmmword [esp + 0x30], 0x55
sub esp, 8
lea ecx, [esp + 0xa8]
mov edx, ebx
mov dword [esp + 4], esi
movd dword [esp], xmm0
call fcn.004cec90
add esp, 8
mov eax, dword [esp + 0xa0]
cmp eax, 0x2a
jne 0x4fec04
sub esp, 8
movdqa xmm0, xmmword [esp + 0x78]
lea ecx, [esp + 0xa8]
mov edx, ebx
mov dword [esp], edi
movd dword [esp + 4], xmm0
call fcn.004cec90
add esp, 8
mov eax, dword [esp + 0xa0]
cmp eax, 0x2a
jne 0x4fec04
pshufd xmm0, xmmword [esp + 0x70], 0x55
sub esp, 8
lea ecx, [esp + 0xa8]
mov edx, ebx
mov dword [esp + 4], esi
movd dword [esp], xmm0
call fcn.004cec90
add esp, 8
mov eax, dword [esp + 0xa0]
cmp eax, 0x2a
jne 0x4fec04
mov eax, dword [esp + 0x3d0]
movq xmm0, qword [esp + 0x3c8]
mov dword [esp + 0x10], esi
mov esi, dword [esp + 0x14]
lea ebx, [esp + 0xa0]
mov dword [esp + 0x220], eax
movq qword [esp + 0x218], xmm0
lea ecx, [esp + 0x420]
lea edx, [esp + 0x218]
call fcn.00524b50
mov eax, dword [esp + 0x420]
cmp eax, 0x2b
je 0x500242
movq xmm2, qword [esp + 0x424]
cmp eax, 0x2a
jne 0x50025a
sub esp, 8
mov ecx, ebx
mov edx, esi
movd dword [esp + 4], xmm2
mov dword [esp], edi
movdqa xmmword [esp + 0x78], xmm2
call fcn.004cec90
add esp, 8
mov eax, dword [esp + 0xa0]
cmp eax, 0x2a
jne 0x4fec04
pshufd xmm0, xmmword [esp + 0x70], 0x55
sub esp, 8
mov eax, dword [esp + 0x18]
mov ecx, ebx
mov edx, esi
movd dword [esp], xmm0
mov dword [esp + 4], eax
call fcn.004cec90
add esp, 8
mov eax, dword [esp + 0xa0]
cmp eax, 0x2a
jne 0x4fec04
lea ebx, [esp + 0xa0]
jmp 0x4fdd6c
movsd xmm0, qword [esp + 0xd4]
mov ecx, dword [esp + 0xdc]
movq xmm1, qword [esp + 0xb4]
movsd qword [esp + 0x288], xmm0
movsd xmm0, qword [esp + 0xcc]
mov dword [esp + 0x290], ecx
movsd qword [esp + 0x280], xmm0
movsd xmm0, qword [esp + 0xc4]
movsd qword [esp + 0x278], xmm0
movsd xmm0, qword [esp + 0xbc]
movsd qword [esp + 0x270], xmm0
movq xmm0, qword [esp + 0xac]
movq qword [esp + 0x268], xmm1
movq qword [esp + 0x260], xmm0
cmp eax, 0x2a
jne 0x4fec87
movd edi, xmm2
cmp dword [ebx + 0x20], 0
jne 0x500250
mov edx, dword [esp + 0xc]
lea ecx, [esp + 0xa0]
mov dword [ebx + 0x20], 0xffffffff
push edi
push dword [esp + 0xc]
call fcn.004c6d70
add esp, 8
mov ecx, dword [ebx + 0x20]
inc ecx
mov dword [ebx + 0x20], ecx
mov eax, dword [esp + 0xa0]
cmp eax, 0x2a
jne 0x4fe19a
test ecx, ecx
jne 0x500538
mov dword [ebx + 0x20], 0xffffffff
cmp dword [ebx + 0x24], 0
jne 0x500542
movzx eax, byte [0x94bfc5]
xor ecx, ecx
mov edx, 0x30
xor ebx, ebx
call fcn.0071ee80
test eax, eax
je 0x50051d
movaps xmm0, xmmword [0x7d4330]
movaps xmm1, xmmword [0x7d4340]
mov dword [eax], 1
mov dword [eax + 4], 1
mov dword [eax + 8], 0
mov dword [eax + 0xc], 4
mov dword [eax + 0x10], 0
mov dword [eax + 0x14], 0
mov dword [eax + 0x18], 8
mov dword [eax + 0x1c], 0
mov dword [eax + 0x20], 0
mov dword [eax + 0x24], 4
mov dword [eax + 0x28], 0
mov dword [eax + 0x2c], 0
movaps xmm2, xmmword [str._________._0123456789:_____ABCDEFGHIJKLMNOPQRSTUVWXYZ____abcdefghijklmnopqrstuvwxyz]
lea ecx, [esp + 0x260]
mov esi, eax
movaps xmmword [esp + 0xa0], xmm0
movaps xmmword [esp + 0xb0], xmm1
movaps xmm1, xmmword [0x7d4360]
movaps xmmword [esp + 0xc0], xmm2
movaps xmm2, xmmword [0x7d4370]
movaps xmmword [esp + 0xd0], xmm1
movaps xmm1, xmmword [0x7d4380]
movaps xmmword [esp + 0xe0], xmm2
movaps xmm2, xmmword [0x7d4390]
movaps xmmword [esp + 0xf0], xmm1
movaps xmm1, xmmword [0x7d43a0]
movaps xmmword [esp + 0x100], xmm2
movaps xmm2, xmmword [0x7d43b0]
movaps xmmword [esp + 0x110], xmm1
movaps xmm1, xmmword [0x7d43c0]
movaps xmmword [esp + 0x120], xmm2
movaps xmm2, xmmword [0x7d43d0]
movaps xmmword [esp + 0x130], xmm1
movaps xmm1, xmmword [0x7d43e0]
movaps xmmword [esp + 0x140], xmm2
movaps xmm2, xmmword [0x7d43f0]
movaps xmmword [esp + 0x150], xmm1
movaps xmm1, xmmword [0x7d4400]
movaps xmmword [esp + 0x160], xmm2
movdqa xmm2, xmmword [0x7d4410]
movaps xmmword [esp + 0x170], xmm1
movdqa xmm1, xmmword [0x7d4420]
movdqa xmmword [esp + 0x180], xmm2
movdqa xmmword [esp + 0x190], xmm1
push pe_nt_image_headers32
lea eax, [esp + 0xa4]
push eax
push ecx
call fcn.007bd9b0
add esp, 0xc
movdqa xmm0, xmmword [0x7d4490]
mov ecx, dword [esp + 0x14]
mov dword [esp + 0x398], 0
mov dword [esp + 0x39c], 4
movdqa xmmword [esp + 0x3a0], xmm0
pxor xmm0, xmm0
mov dword [esp + 0x394], esi
movdqa xmmword [esp + 0x360], xmm0
movdqa xmmword [esp + 0x370], xmm0
mov word [esp + 0x3b1], 0
movdqa xmmword [esp + 0x380], xmm0
mov dword [esp + 0x390], 0
movzx eax, byte [ecx + 0x5c]
mov byte [esp + 0x3b3], al
movzx eax, byte [ecx + 0x5d]
mov byte [esp + 0x3b4], al
movzx eax, byte [ecx + 0x5e]
mov dword [esp + 0x4c], 0
mov dword [esp + 0x50], 4
mov dword [esp + 0x20], 0
mov dword [esp + 0x24], 4
mov dword [esp + 0x54], 0
mov dword [esp + 0x28], 0
mov byte [esp + 0x3b0], al
mov eax, dword [ecx + 0x3c]
test eax, eax
mov dword [esp + 0x5c], eax
jne 0x4fef32
mov dword [esp + 0x28], ebx
mov eax, dword [esp + 0x60]
mov ebx, dword [ecx + 0x48]
mov edx, dword [ecx + 0x44]
mov dword [esp + 0x380], edi
mov dword [esp + 0x384], eax
test ebx, ebx
je 0x4fe211
cmp ebx, 0x1fffffff
ja 0x5004e6
lea esi, [ebx*4]
mov dword [esp + 0xc], edx
test esi, esi
js 0x5004e6
movzx eax, byte [0x94bfc5]
xor ecx, ecx
mov edx, esi
call fcn.0071ee80
test eax, eax
je 0x50052c
mov edx, dword [esp + 0xc]
mov edi, eax
jmp 0x4fe218
mov edx, dword [esp + 0x58]
movsd xmm2, qword [esp + 0xcc]
movsd xmm1, qword [esp + 0xc4]
mov ecx, dword [esp + 0xdc]
movq xmm0, qword [esp + 0xd4]
movsd qword [edx + 0x2c], xmm2
movsd qword [edx + 0x24], xmm1
movsd xmm2, qword [esp + 0xbc]
movsd xmm1, qword [esp + 0xb4]
mov dword [edx + 0x3c], ecx
movq qword [edx + 0x34], xmm0
movsd qword [edx + 0x1c], xmm2
movsd qword [edx + 0x14], xmm1
movq xmm2, qword [esp + 0xa4]
movq xmm1, qword [esp + 0xac]
movq qword [edx + 0xc], xmm1
movq qword [edx + 4], xmm2
mov dword [edx], eax
jmp 0x500184
mov edi, 4
xor esi, esi
push esi
push edx
push edi
call fcn.007bd9b0
add esp, 0xc
mov dword [esp + 0x3a4], ebx
mov dword [esp + 0x3a8], edi
mov edi, dword [esp + 0x14]
mov dword [esp + 0x3ac], ebx
mov eax, dword [edi + 0x54]
mov ecx, dword [edi + 0x50]
mov dword [esp + 0x420], 0
mov dword [esp + 0x424], 4
mov dword [esp + 0x428], 0
mov dword [esp + 0x42c], 0
mov dword [esp + 0x430], 8
mov dword [esp + 0x434], 0
mov dword [esp + 0x438], 0
mov dword [esp + 0x43c], 4
mov dword [esp + 0x440], 0
mov dword [esp + 0x444], 0
test eax, eax
je 0x4ff02b
mov esi, dword [ecx + 8]
test esi, esi
je 0x4fecf5
mov edx, dword [ecx + 4]
lea eax, [eax + eax*2]
xor ebx, ebx
lea eax, [ecx + eax*4]
mov dword [esp + 0x258], eax
lea eax, [edx + esi*8]
mov dword [esp + 0x8c], eax
mov eax, 1
cmp dword [edx], 0
mov edi, dword [esp + 0x14]
jne 0x4fefa0
mov dword [esp + 0x10], edx
mov dword [esp + 0x9c], ecx
lea ecx, [esp + 0x420]
mov edx, ebx
mov dword [esp + 0x98], eax
call fcn.004c78b0
cmp esi, 1
jne 0x4fe352
mov eax, dword [esp + 0x9c]
lea ecx, [eax + 0xc]
cmp ecx, dword [esp + 0x258]
je 0x4fefad
mov esi, dword [eax + 0x14]
mov edx, dword [eax + 0x10]
mov edi, dword [esp + 0x98]
lea eax, [edx + esi*8]
test esi, esi
mov ebx, edi
mov dword [esp + 0x8c], eax
lea eax, [edi + 1]
jne 0x4fe2e4
jmp 0x5001d7
add dword [esp + 0x10], 8
mov dword [esp + 0x18], 1
mov dword [esp + 0x70], ebx
mov edx, dword [esp + 0x428]
cmp edx, ebx
jbe 0x5002ef
mov edi, dword [esp + 0x424]
mov eax, dword [edi + ebx*8 + 4]
add eax, 2
cmp eax, 0x7ffffffe
ja 0x4fef8b
mov ecx, dword [esp + 0x10]
mov dword [esp + 0x90], edi
mov esi, dword [ecx]
mov dword [edi + ebx*8 + 4], eax
test esi, esi
je 0x4fe3e5
mov ecx, dword [ecx + 4]
test ecx, ecx
js 0x50064a
lea eax, [ecx - 0x7ffffff5]
cmp eax, 0x80000002
jbe 0x50066b
lea edi, [ecx + 0xb]
mov dword [esp + 8], ecx
and edi, 0xfffffffc
je 0x4fe437
movzx eax, byte [0x94bfc5]
xor ecx, ecx
mov edx, edi
call fcn.0071ee80
mov ecx, dword [esp + 8]
test eax, eax
jne 0x4fe43c
jmp 0x50068c
mov eax, dword [esp + 0x440]
mov ecx, ebx
cmp eax, ebx
mov dword [esp + 0xc], eax
jbe 0x500395
mov ebx, dword [esp + 0x43c]
lea eax, [ecx + ecx*2]
mov edx, dword [ebx + eax*4 + 8]
lea esi, [ebx + eax*4]
cmp edx, dword [ebx + eax*4]
jne 0x4fe41a
mov ecx, esi
call fcn.004c7a80
mov edx, dword [esi + 8]
mov eax, dword [esi + 4]
mov dword [eax + edx*8], 0
inc edx
mov dword [esi + 8], edx
mov ecx, dword [esp + 0x444]
add ecx, 8
jmp 0x4feaaf
mov eax, 4
mov dword [eax], 1
add esi, 8
mov dword [eax + 4], 1
mov dword [esp + 0x2c], eax
add eax, 8
push ecx
push esi
mov dword [esp + 0x14], eax
push eax
call fcn.007bd9b0
add esp, 0xc
mov edx, dword [esp + 0x434]
cmp edx, ebx
jbe 0x500389
mov eax, dword [esp + 0x430]
shl ebx, 5
cmp dword [eax + ebx + 0xc], 0
lea edx, [eax + ebx]
mov dword [esp + 0x80], edx
je 0x4fe8bf
mov ebx, dword [esp + 0x80]
mov edx, dword [esp + 0xc]
lea esi, [esp + 0xa0]
lea eax, [esp + 0xd0]
mov ecx, esi
movdqu xmm0, xmmword [ebx + 0x10]
pshufd xmm1, xmm0, 0x44
pshufd xmm2, xmm0, 0xee
pxor xmm1, xmmword [str.uespemosarenegylmodnarodsetybdet]
pxor xmm2, xmmword [0x7d4a40]
movdqu xmmword [esp + 0xa0], xmm1
movdqu xmmword [esp + 0xb0], xmm2
movdqu xmmword [esp + 0xc0], xmm0
mov dword [eax + 4], 0
mov dword [eax], 0
mov dword [eax + 0xc], 0
mov dword [eax + 8], 0
push dword [esp + 8]
call fcn.00481c80
add esp, 4
mov ecx, esi
lea edx, [esp + 0x40]
mov byte [esp + 0x40], 0xff
push 1
call fcn.00481c80
add esp, 4
mov eax, dword [esp + 0xd8]
mov ecx, dword [esp + 0xd0]
mov edx, dword [esp + 0xb8]
mov esi, dword [esp + 0xbc]
movdqu xmm0, xmmword [esp + 0xa8]
mov edi, dword [ebx]
mov dword [esp + 0x1c], 0
shl eax, 0x18
xor edx, ecx
movdqa xmm5, xmm0
mov dword [esp + 0x30], edi
or eax, dword [esp + 0xd4]
movd xmm2, edx
movd xmm4, edx
psrlq xmm5, 0x33
xor esi, eax
movd xmm1, esi
punpckldq xmm2, xmm1
punpcklqdq xmm1, xmm4
punpcklqdq xmm2, xmmword [esp + 0xa0]
shufps xmm1, xmm0, 0xe2
movaps xmm4, xmm1
psllq xmm1, 0x10
psrlq xmm4, 0x30
movsd xmm5, xmm4
paddq xmm2, xmm0
psllq xmm0, 0xd
pshufd xmm3, xmm2, 0xff
movsd xmm0, xmm1
movdqa xmm1, xmm2
movd edx, xmm3
orpd xmm0, xmm5
movd xmm3, edx
xorpd xmm0, xmm2
shufps xmm1, xmm3, 0x4e
movapd xmm3, xmm0
shufps xmm1, xmm2, 0x42
movapd xmm2, xmm0
psrlq xmm3, 0x2f
psrlq xmm2, 0x2b
paddq xmm1, xmm0
movsd xmm3, xmm2
movdqa xmm2, xmm0
psllq xmm0, 0x11
psllq xmm2, 0x15
movsd xmm0, xmm2
pshufd xmm2, xmm1, 0xff
movd edx, xmm2
pshufd xmm2, xmm1, 0x55
orpd xmm0, xmm3
movd esi, xmm2
xor edx, 0xff
xorpd xmm0, xmm1
xor esi, eax
movd eax, xmm1
movd xmm2, edx
mov edx, dword [esp + 8]
xor eax, ecx
movd xmm4, esi
shufpd xmm1, xmm2, 1
movd xmm3, eax
shufps xmm1, xmm0, 0xe2
punpcklqdq xmm4, xmm3
movaps xmm3, xmm0
shufps xmm3, xmm4, 0x24
movaps xmm4, xmm0
paddq xmm1, xmm3
psrlq xmm4, 0x33
pshufd xmm2, xmm1, 0xff
movd eax, xmm2
movaps xmm2, xmm0
psrlq xmm2, 0x30
movd xmm3, eax
movsd xmm4, xmm2
movaps xmm2, xmm0
psllq xmm0, 0xd
psllq xmm2, 0x10
movsd xmm0, xmm2
movdqa xmm2, xmm1
orpd xmm0, xmm4
shufps xmm2, xmm3, 0x4e
xorpd xmm0, xmm1
shufps xmm2, xmm1, 0x42
movapd xmm1, xmm0
movapd xmm3, xmm0
paddq xmm2, xmm0
psrlq xmm1, 0x2b
psrlq xmm3, 0x2f
movsd xmm3, xmm1
movdqa xmm1, xmm0
psllq xmm0, 0x11
psllq xmm1, 0x15
movsd xmm0, xmm1
pshufd xmm1, xmm2, 0xff
movd eax, xmm1
orpd xmm0, xmm3
movdqa xmm1, xmm2
movd xmm3, eax
xorpd xmm0, xmm2
shufps xmm1, xmm3, 0x4e
movapd xmm4, xmm0
shufps xmm1, xmm2, 0x42
psrlq xmm4, 0x33
paddq xmm1, xmm0
pshufd xmm2, xmm1, 0xff
movd eax, xmm2
movdqa xmm2, xmm0
psrlq xmm2, 0x30
movd xmm3, eax
movsd xmm4, xmm2
movdqa xmm2, xmm0
psllq xmm0, 0xd
psllq xmm2, 0x10
movsd xmm0, xmm2
movdqa xmm2, xmm1
orpd xmm0, xmm4
shufps xmm2, xmm3, 0x4e
xorpd xmm0, xmm1
shufps xmm2, xmm1, 0x42
movapd xmm1, xmm0
movapd xmm3, xmm0
paddq xmm2, xmm0
psrlq xmm1, 0x2b
psrlq xmm3, 0x2f
movsd xmm3, xmm1
movdqa xmm1, xmm0
psllq xmm0, 0x11
psllq xmm1, 0x15
movsd xmm0, xmm1
pshufd xmm1, xmm2, 0xff
movd eax, xmm1
orpd xmm0, xmm3
movdqa xmm1, xmm2
movd xmm3, eax
xorpd xmm0, xmm2
shufps xmm1, xmm3, 0x4e
movapd xmm3, xmm0
shufps xmm1, xmm2, 0x42
movapd xmm2, xmm0
psrlq xmm3, 0x33
psrlq xmm2, 0x30
paddq xmm1, xmm0
movsd xmm3, xmm2
movdqa xmm2, xmm0
psllq xmm0, 0xd
psllq xmm2, 0x10
movsd xmm0, xmm2
orpd xmm0, xmm3
xorpd xmm0, xmm1
movapd xmm2, xmm0
movapd xmm3, xmm0
movapd xmm4, xmm0
psrlq xmm2, 0x2b
psrlq xmm3, 0x2f
psllq xmm4, 0x11
movsd xmm3, xmm2
movapd xmm2, xmm0
psllq xmm2, 0x15
movsd xmm4, xmm2
orpd xmm4, xmm3
movapd xmm2, xmm4
shufpd xmm2, xmm1, 1
xorpd xmm4, xmm2
paddq xmm2, xmm0
pshufd xmm0, xmm2, 0xee
movd esi, xmm4
movd eax, xmm0
pshufd xmm0, xmm2, 0xff
movd ecx, xmm0
xor esi, ecx
mov ecx, dword [ebx + 4]
xor esi, eax
mov eax, esi
shr eax, 0x19
movd xmm0, eax
punpcklbw xmm0, xmm0
pshuflw xmm0, xmm0, 0
pshufd xmm0, xmm0, 0
movdqa xmmword [esp + 0x240], xmm0
and esi, ecx
movdqu xmm0, xmmword [edi + esi]
movdqa xmmword [esp + 0x60], xmm0
pcmpeqb xmm0, xmmword [esp + 0x240]
pmovmskb ebx, xmm0
test ebx, ebx
jne 0x4fe87c
movdqa xmm1, xmmword [esp + 0x60]
pcmpeqd xmm0, xmm0
pcmpeqb xmm1, xmm0
pmovmskb eax, xmm1
test eax, eax
jne 0x4fe8bf
mov eax, dword [esp + 0x1c]
lea esi, [esi + eax + 0x10]
add eax, 0x10
mov dword [esp + 0x1c], eax
jmp 0x4fe826
lea eax, [ebx - 1]
and eax, ebx
test ax, ax
mov ebx, eax
je 0x4fe844
tzcnt eax, ebx
add eax, esi
and eax, ecx
neg eax
lea eax, [eax + eax*2]
cmp dword [edi + eax*4 - 8], edx
jne 0x4fe870
lea eax, [edi + eax*4]
mov eax, dword [eax - 0xc]
add eax, 8
push edx
push eax
push dword [esp + 0x14]
mov edi, esi
mov esi, ecx
call fcn.007be090
mov ecx, esi
mov esi, edi
mov edi, dword [esp + 0x3c]
mov edx, dword [esp + 0x14]
add esp, 0xc
test eax, eax
jne 0x4fe870
jmp 0x4febce
mov eax, dword [esp + 0x2c]
lock inc dword [eax]
jle 0x5006a2
mov edi, dword [esp + 0x80]
mov ecx, dword [edi + 0x10]
mov edx, dword [edi + 0x14]
mov esi, dword [edi + 0x18]
mov ebx, dword [edi + 0x1c]
mov dword [esp + 0x60], ecx
mov dword [esp + 0x30], edx
push dword [esp + 8]
push eax
push ebx
mov dword [esp + 0x28], esi
push esi
call fcn.004c8630
add esp, 0x10
cmp dword [edi + 8], 0
mov esi, eax
mov ecx, edi
je 0x4febad
mov eax, esi
mov ebx, dword [ecx]
mov edx, dword [ecx + 4]
mov ecx, dword [esp + 8]
mov edi, esi
mov dword [esp + 0x94], 0
mov dword [esp + 0x1c], 0
shr eax, 0x19
movd xmm0, eax
mov dword [esp + 0x250], eax
punpcklbw xmm0, xmm0
pshuflw xmm0, xmm0, 0
mov dword [esp + 0x60], ebx
pshufd xmm0, xmm0, 0
movdqa xmmword [esp + 0x410], xmm0
and edi, edx
movdqu xmm0, xmmword [ebx + edi]
mov dword [esp + 0x30], edi
movdqa xmmword [esp + 0x240], xmm0
pcmpeqb xmm0, xmmword [esp + 0x410]
pmovmskb esi, xmm0
test esi, esi
jne 0x4fea04
cmp dword [esp + 0x1c], 1
mov dword [esp + 0x1c], 1
je 0x4fe9b0
movdqa xmm0, xmmword [esp + 0x240]
xor eax, eax
pmovmskb esi, xmm0
test esi, esi
setne al
tzcnt esi, esi
add esi, edi
mov dword [esp + 0x1c], eax
and esi, edx
mov dword [esp + 0x254], esi
movdqa xmm1, xmmword [esp + 0x240]
pcmpeqd xmm0, xmm0
pcmpeqb xmm1, xmm0
pmovmskb eax, xmm1
test eax, eax
jne 0x4feb36
mov eax, dword [esp + 0x94]
lea edi, [edi + eax + 0x10]
add eax, 0x10
mov dword [esp + 0x94], eax
jmp 0x4fe951
mov edi, dword [esp + 0x30]
lea eax, [esi - 1]
and eax, esi
test ax, ax
mov esi, eax
je 0x4fe97a
tzcnt eax, esi
add eax, edi
and eax, edx
neg eax
lea eax, [eax + eax*2]
cmp dword [ebx + eax*4 - 8], ecx
jne 0x4fe9f0
lea edi, [ebx + eax*4]
mov eax, dword [edi - 0xc]
add eax, 8
push ecx
push eax
push dword [esp + 0x14]
mov ebx, edx
call fcn.007be090
mov edx, ebx
mov ebx, dword [esp + 0x6c]
mov ecx, dword [esp + 0x14]
add esp, 0xc
test eax, eax
jne 0x4fe9f0
mov eax, dword [esp + 0x18]
mov ecx, dword [esp + 0x2c]
mov dword [edi - 4], eax
lock dec dword [ecx]
jne 0x4fea57
mov edx, dword [esp + 8]
call fcn.004731d0
mov edi, dword [esp + 0x440]
mov ecx, dword [esp + 0x70]
cmp edi, ecx
jbe 0x5003bb
mov ebx, dword [esp + 0x43c]
lea eax, [ecx + ecx*2]
mov dword [esp + 0xc], edi
mov edx, dword [ebx + eax*4 + 8]
lea esi, [ebx + eax*4]
cmp edx, dword [ebx + eax*4]
jne 0x4fea8e
mov ecx, esi
call fcn.004c7a80
mov edx, dword [esi + 8]
mov eax, dword [esi + 4]
mov ecx, dword [esp + 0x2c]
mov dword [eax + edx*8], ecx
mov ecx, dword [esp + 8]
mov dword [eax + edx*8 + 4], ecx
inc edx
mov dword [esi + 8], edx
mov eax, dword [esp + 0x444]
lea ecx, [eax + ecx*2 + 0x14]
mov edi, dword [esp + 0x18]
mov dword [esp + 0x444], ecx
mov ecx, dword [esp + 0x70]
mov edx, dword [esp + 0x90]
lea eax, [edi + 1]
mov dword [esp + 0x88], eax
mov esi, dword [edx + ecx*8 + 4]
sub esi, dword [edx + ecx*8]
shr esi, 1
lea edx, [esi + 1]
cmp esi, edi
mov dword [esp + 0x40], edx
jne 0x5005fa
mov edx, dword [esp + 0xc]
mov esi, dword [esp + 0x10]
mov dword [esp + 0x88], eax
cmp edx, ecx
jbe 0x50037f
lea ecx, [ecx + ecx*2]
mov ecx, dword [ebx + ecx*4 + 8]
cmp eax, ecx
mov dword [esp + 0x40], ecx
jne 0x500622
add esi, 8
mov edi, dword [esp + 0x14]
mov ebx, dword [esp + 0x70]
mov dword [esp + 0x18], eax
cmp esi, dword [esp + 0x8c]
mov dword [esp + 0x10], esi
jne 0x4fe363
jmp 0x4fe316
mov edi, dword [esp + 0x254]
mov esi, edx
movzx eax, byte [ebx + edi]
test al, al
js 0x4feb57
movdqa xmm0, xmmword [ebx]
pmovmskb eax, xmm0
tzcnt edi, eax
movzx eax, byte [ebx + edi]
mov edx, dword [esp + 0x80]
and al, 1
movzx eax, al
sub dword [edx + 8], eax
lea eax, [edi - 0x10]
and esi, eax
mov eax, dword [esp + 0x250]
mov byte [ebx + edi], al
mov byte [esi + ebx + 0x10], al
inc dword [edx + 0xc]
mov edx, dword [esp + 0x2c]
neg edi
lea eax, [edi + edi*2]
mov dword [ebx + eax*4 - 0xc], edx
mov edx, dword [esp + 0x18]
mov dword [ebx + eax*4 - 8], ecx
mov dword [ebx + eax*4 - 4], edx
mov edi, dword [esp + 0x440]
mov ecx, dword [esp + 0x70]
cmp edi, ecx
ja 0x4fea6a
jmp 0x5003bb
mov edx, dword [esp + 0x60]
push ebx
push dword [esp + 0x20]
push dword [esp + 0x38]
call fcn.007c6c50
mov ecx, dword [esp + 0x8c]
add esp, 0xc
jmp 0x4fe908
test edx, edx
je 0x4fed01
movzx eax, byte [0x94bfc5]
mov edx, dword [esp + 8]
xor ecx, ecx
call fcn.0071ee80
mov edx, dword [esp + 8]
mov esi, dword [esp + 0x70]
mov edi, eax
test eax, eax
jne 0x4fed0a
mov ecx, 1
call fcn.007c1490
movsd xmm1, qword [esp + 0xb4]
movsd xmm3, qword [esp + 0xbc]
movsd xmm0, qword [esp + 0xac]
mov ecx, dword [esp + 0xdc]
movsd xmm2, qword [esp + 0xa4]
movsd qword [esp + 0x268], xmm1
movsd xmm1, qword [esp + 0xc4]
movsd qword [esp + 0x270], xmm3
movsd xmm3, qword [esp + 0xcc]
movsd qword [esp + 0x260], xmm0
mov dword [esp + 0x290], ecx
movsd qword [esp + 0x278], xmm1
movsd xmm1, qword [esp + 0xd4]
movsd qword [esp + 0x280], xmm3
movsd qword [esp + 0x288], xmm1
mov edx, dword [esp + 0x58]
movsd xmm1, qword [esp + 0x280]
movsd xmm3, qword [esp + 0x278]
mov ecx, dword [esp + 0x290]
movq xmm0, qword [esp + 0x288]
movsd qword [edx + 0x2c], xmm1
movsd xmm1, qword [esp + 0x270]
movsd qword [edx + 0x24], xmm3
movsd xmm3, qword [esp + 0x260]
mov dword [edx + 0x3c], ecx
movq qword [edx + 0x34], xmm0
movsd qword [edx + 0x1c], xmm1
movq xmm1, qword [esp + 0x268]
movsd qword [edx + 0xc], xmm3
movq qword [edx + 0x14], xmm1
mov dword [edx], eax
movq qword [edx + 4], xmm2
jmp 0x500184
xor ebx, ebx
mov dword [esp + 8], 0x80000002
jmp 0x4fed34
mov esi, dword [esp + 0x70]
mov edi, 1
push edx
push dword [esp + 0x10]
push edi
mov ebx, edx
call fcn.007bd9b0
add esp, 0xc
mov ecx, dword [esp + 0x2c]
lock dec dword [ecx]
jne 0x4fed2a
mov edx, ebx
call fcn.004731d0
mov dword [esp + 0x18], ebx
mov dword [esp + 0x60], esi
mov ebx, edi
cmp dword [esp + 0x420], 0
lea esi, [esp + 0x42c]
mov dword [esp + 0x70], ebx
je 0x4fed5e
push dword [esp + 0x424]
push 0
push dword [0x94bf18]
call dword [sym.imp.kernel32.dll_HeapFree]
push esi
call fcn.004c5ce0
add esp, 4
mov eax, dword [esp + 0x440]
test eax, eax
mov dword [esp + 0x84], eax
je 0x4fee03
mov eax, dword [esp + 0x43c]
xor ebx, ebx
mov dword [esp + 0xc], eax
jmp 0x4fed9a
inc ebx
cmp ebx, dword [esp + 0x84]
je 0x4fee03
mov eax, dword [esp + 0xc]
lea ecx, [ebx + ebx*2]
mov dword [esp + 0x30], ecx
mov edi, dword [eax + ecx*4 + 8]
test edi, edi
je 0x4fede0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x30]
mov esi, dword [eax + ecx*4 + 4]
jmp 0x4fedc6
add esi, 8
dec edi
je 0x4fede0
mov eax, dword [esi]
test eax, eax
je 0x4fedc0
lock dec dword [eax]
jne 0x4fedc0
mov ecx, dword [esi]
mov edx, dword [esi + 4]
call fcn.004731d0
jmp 0x4fedc0
mov eax, dword [esp + 0xc]
mov ecx, dword [esp + 0x30]
lea eax, [eax + ecx*4]
cmp dword [eax], 0
je 0x4fed90
push dword [eax + 4]
push 0
push dword [0x94bf18]
call dword [sym.imp.kernel32.dll_HeapFree]
jmp 0x4fed90
cmp dword [esp + 0x438], 0
je 0x4fee22
push dword [esp + 0x43c]
push 0
push dword [0x94bf18]
call dword [sym.imp.kernel32.dll_HeapFree]
movsd xmm1, qword [esp + 0x220]
movsd xmm0, qword [esp + 0x218]
movsd xmm2, qword [esp + 0x230]
cmp dword [esp + 0x20], 0
mov esi, dword [esp + 0x14]
mov edi, dword [esp + 0x70]
movsd qword [esp + 0x3d0], xmm1
movsd xmm1, qword [esp + 0x228]
movsd qword [esp + 0x3c8], xmm0
movsd qword [esp + 0x3e0], xmm2
movsd qword [esp + 0x3d8], xmm1
movsd xmm1, qword [esp + 0x238]
movsd qword [esp + 0x3e8], xmm1
je 0x4fee9d
push dword [esp + 0x24]
push 0
push dword [0x94bf18]
call dword [sym.imp.kernel32.dll_HeapFree]
cmp dword [esp + 0x4c], 0
je 0x4feeb6
push dword [esp + 0x50]
push 0
push dword [0x94bf18]
call dword [sym.imp.kernel32.dll_HeapFree]
lea ecx, [esp + 0x260]
call fcn.004c5bd0
mov eax, dword [esp + 0x58]
mov ecx, dword [esp + 8]
mov edx, dword [esp + 0x18]
movsd xmm1, qword [esp + 0x3d0]
movq xmm0, qword [esp + 0x3c8]
movq xmm2, qword [esp + 0x3e0]
mov dword [eax + 8], ecx
mov dword [eax + 0xc], edi
mov edi, dword [esp + 0x60]
mov dword [eax + 0x10], edx
mov dword [eax + 0x14], edi
movsd qword [eax + 0x20], xmm1
movsd xmm1, qword [esp + 0x3d8]
movq qword [eax + 0x18], xmm0
movq qword [eax + 0x30], xmm2
movsd qword [eax + 0x28], xmm1
movq xmm1, qword [esp + 0x3e8]
movq qword [eax + 0x38], xmm1
mov dword [eax], 0x23
inc dword [esi + 0x20]
jmp 0x500184
mov esi, dword [esp + 0x5c]
lea ecx, [esp + 0x20]
xor edx, edx
push esi
call fcn.007c7a80
add esp, 4
mov ecx, dword [esp + 0x24]
mov ebx, dword [esp + 0x28]
cmp esi, 1
lea eax, [ecx + ebx*4]
je 0x4fef7b
mov dword [esp + 0xc], ecx
lea ecx, [esi*4 - 4]
push ecx
push 0
push eax
call fcn.007bdf30
add esp, 0xc
mov ecx, dword [esp + 0xc]
lea eax, [ebx + esi]
lea ebx, [ebx + esi - 1]
lea eax, [ecx + eax*4 - 4]
mov ecx, dword [esp + 0x14]
inc ebx
mov dword [eax], 0
jmp 0x4fe137
mov dword [esp + 0x60], 0
mov dword [esp + 8], 0x80000001
jmp 0x4fed34
mov dword [esp + 8], 0x80000003
jmp 0x4fed34
mov eax, dword [esp + 0x428]
lea ecx, [eax + eax]
test eax, eax
mov dword [esp + 0x30], eax
mov dword [esp + 0xc], ecx
js 0x5006fa
je 0x4ff02b
mov eax, dword [esp + 0x30]
mov edx, dword [esp + 0x424]
xor ebx, ebx
lea esi, [eax*8]
cmp dword [esp + 0x30], ebx
je 0x5006bd
mov edi, dword [edx + ebx*8]
mov eax, ebx
mov ebx, dword [edx + ebx*8 + 4]
mov ecx, ebx
add ebx, dword [esp + 0xc]
jb 0x50020a
cmp ebx, 0x7ffffffe
ja 0x50020a
add edi, dword [esp + 0xc]
mov dword [edx + eax*8 + 4], ebx
cmp edi, 0x7fffffff
jae 0x5006c7
mov dword [edx + eax*8], edi
mov edi, dword [esp + 0x14]
mov ebx, eax
inc ebx
add esi, 0xfffffff8
jne 0x4fefdd
movzx eax, byte [0x94bfc5]
xor ecx, ecx
mov edx, 0x30
call fcn.0071ee80
test eax, eax
je 0x50051d
mov dword [eax], 1
mov dword [eax + 4], 1
mov esi, eax
movsd xmm0, qword [esp + 0x440]
movsd qword [eax + 0x28], xmm0
movsd xmm0, qword [esp + 0x438]
movsd qword [eax + 0x20], xmm0
movsd xmm0, qword [esp + 0x430]
movsd qword [eax + 0x18], xmm0
movq xmm0, qword [esp + 0x420]
movq xmm1, qword [esp + 0x428]
movq qword [eax + 0x10], xmm1
movq qword [eax + 8], xmm0
mov eax, dword [esp + 0x394]
lock dec dword [eax]
jne 0x4ff0b3
mov ecx, dword [esp + 0x394]
call fcn.004c5c90
mov dword [esp + 0x394], esi
mov ebx, dword [edi + 0x38]
mov edi, dword [esp + 0x5c]
test edi, edi
mov dword [esp + 0xc], ebx
je 0x4ff818
mov eax, edi
xor esi, esi
shl eax, 4
add eax, ebx
mov dword [esp + 0x30], eax
jmp 0x4ff0fe
cmp esi, edi
je 0x5004dc
mov eax, dword [ebx]
mov eax, dword [eax*4 + 0x500704]
add eax, dword [esp + 0x84]
jmp eax
mov dword [esp + 0x1c], 1
mov eax, dword [esp + 0x54]
mov ecx, dword [esp + 0x24]
mov ebx, dword [esp + 0x28]
test eax, eax
mov dword [esp + 0x30], ecx
je 0x4ff98b
mov ecx, dword [esp + 0x50]
mov dword [esp + 8], ebx
lea eax, [ecx + eax*8]
mov dword [esp + 0x10], eax
jmp 0x4ff85a
mov ecx, dword [esp + 0x70]
add ecx, 8
cmp ecx, dword [esp + 0x10]
je 0x4ff98b
mov dword [esp + 0x70], ecx
mov ecx, dword [ecx]
cmp ecx, edi
jae 0x500236
mov eax, dword [esp + 0x1c]
cmp byte [eax + ecx], 0
jne 0x4ff849
mov eax, dword [esp + 0x70]
mov dword [esp + 0x18], ecx
mov ecx, dword [eax + 4]
cmp ecx, edi
mov eax, ecx
jae 0x5002c3
nop word [eax + eax]
mov esi, dword [esp + 0xc]
mov edi, eax
shl edi, 4
lea edx, [esi + edi]
mov edi, dword [esi + edi]
cmp edi, 7
je 0x4ff8c0
cmp edi, 6
je 0x4ff8c0
test edi, edi
mov edi, dword [esp + 0x5c]
jne 0x4ff8d8
add edx, 4
mov eax, dword [edx]
cmp eax, edi
jb 0x4ff890
jmp 0x5002c5
cmp dword [edx + 0xc], 1
mov edi, dword [esp + 0x5c]
jne 0x4ff8d8
mov edx, dword [edx + 8]
mov eax, dword [edx]
cmp eax, edi
jb 0x4ff890
jmp 0x5002c5
cmp eax, ebx
jae 0x5002d3
mov esi, dword [esp + 0x18]
cmp esi, ebx
jae 0x5002e1
mov edx, dword [esp + 0x30]
mov dword [esp + 0x60], eax
mov edx, dword [edx + eax*4]
mov eax, dword [esp + 0x30]
mov dword [eax + esi*4], edx
mov eax, dword [esp + 0x1c]
mov byte [eax + esi], 1
nop word cs:[eax + eax]
mov eax, dword [esp + 0xc]
mov edx, ecx
mov ebx, edi
shl edx, 4
lea esi, [eax + edx]
mov edx, dword [eax + edx]
cmp edx, 7
je 0x4ff940
cmp edx, 6
je 0x4ff940
mov edi, ebx
mov ebx, dword [esp + 8]
test edx, edx
jne 0x4ff849
add esi, 4
jmp 0x4ff953
mov edi, ebx
cmp dword [esi + 0xc], 1
mov ebx, dword [esp + 8]
jne 0x4ff849
mov esi, dword [esi + 8]
cmp ecx, ebx
jae 0x50019a
mov ebx, edi
mov edi, dword [esp + 0x30]
mov edx, dword [esp + 0x60]
mov esi, dword [esi]
mov eax, dword [esp + 0x1c]
mov edx, dword [edi + edx*4]
cmp esi, ebx
mov dword [edi + ecx*4], edx
mov byte [eax + ecx], 1
mov edi, ebx
mov ecx, esi
jb 0x4ff910
mov ecx, esi
mov edx, edi
push 0x84ff98
call fcn.007c1be0
mov ecx, dword [esp + 0x3a0]
test ecx, ecx
je 0x4ffabf
mov eax, dword [esp + 0x39c]
lea ecx, [ecx + ecx*4]
lea ecx, [eax + ecx*4]
mov dword [esp + 0xc], ecx
jmp 0x4ff9d1
mov ecx, dword [eax]
mov ecx, dword [ecx*4 + 0x50072c]
add ecx, dword [esp + 0x84]
jmp ecx
mov ecx, dword [esp + 0x380]
cmp ecx, ebx
jae 0x5003a3
mov edi, dword [esp + 0x30]
lea esi, [esp + 0x420]
mov eax, dword [edi + ecx*4]
mov dword [esp + 0x380], eax
mov ecx, dword [esp + 0x384]
cmp ecx, ebx
jae 0x5003af
mov eax, dword [edi + ecx*4]
mov dword [esp + 0x384], eax
mov eax, dword [esp + 0x3ac]
test eax, eax
je 0x4ffb37
mov edx, dword [esp + 0x3a8]
shl eax, 2
nop word cs:[eax + eax]
nop dword [eax + eax]
mov ecx, dword [edx]
cmp ecx, ebx
jae 0x50022a
mov ecx, dword [edi + ecx*4]
mov dword [edx], ecx
add edx, 4
add eax, 0xfffffffc
jne 0x4ffb20
push 0x160
lea eax, [esp + 0x264]
push eax
push esi
call fcn.007bd9b0
add esp, 0xc
pxor xmm0, xmm0
xor eax, eax
xor ecx, ecx
movdqa xmmword [esp + 0x190], xmm0
movdqa xmmword [esp + 0x180], xmm0
movdqa xmmword [esp + 0x170], xmm0
movdqa xmmword [esp + 0x160], xmm0
movdqa xmmword [esp + 0x150], xmm0
movdqa xmmword [esp + 0x140], xmm0
movdqa xmmword [esp + 0x130], xmm0
movdqa xmmword [esp + 0x120], xmm0
movdqa xmmword [esp + 0x110], xmm0
movdqa xmmword [esp + 0x100], xmm0
movdqa xmmword [esp + 0xf0], xmm0
movdqa xmmword [esp + 0xe0], xmm0
movdqa xmmword [esp + 0xd0], xmm0
movdqa xmmword [esp + 0xc0], xmm0
movdqa xmmword [esp + 0xb0], xmm0
movdqa xmmword [esp + 0xa0], xmm0
jmp 0x4ffc02
mov ecx, dword [esp + 0x30]
mov eax, dword [esp + 0xc]
mov byte [esp + eax + 0xa1], cl
inc eax
cmp eax, 0xff
je 0x4ffcf1
mov dword [esp + 0x30], ecx
mov dword [esp + 0xc], eax
mov ecx, eax
and al, 0x78
mov dword [esp + 0x40c], 0
mov dword [esp + 0x408], 0
mov dword [esp + 0x404], 0
mov dword [esp + 0x400], 1
mov dword [esp + 0x3fc], 0
mov dword [esp + 0x3f8], 0
mov dword [esp + 0x3f4], 0
mov dword [esp + 0x3f0], 0
shr al, 3
mov ch, cl
neg al
and ch, 7
movsx edi, al
mov cl, ch
mov edx, dword [esp + edi + 0x408]
mov eax, dword [esp + edi + 0x40c]
shld eax, edx, cl
shl edx, cl
not cl
mov dword [esp + 8], eax
mov eax, dword [esp + 0xc]
mov ebx, dword [esp + edi + 0x404]
shr eax, 3
mov esi, ebx
and eax, 0x10
shr esi, 1
shr esi, cl
mov cl, ch
or esi, edx
mov edx, dword [esp + edi + 0x400]
mov edi, dword [esp + 8]
shld ebx, edx, cl
shl edx, cl
lea ecx, [esp + 0x520]
and esi, dword [ecx + eax + 8]
and edx, dword [ecx + eax]
and edi, dword [ecx + eax + 0xc]
and ebx, dword [ecx + eax + 4]
or edx, esi
or ebx, edi
or ebx, edx
je 0x4ffbe7
mov ecx, dword [esp + 0x30]
inc cl
jne 0x4ffbeb
mov ecx, 0x850d7c
call fcn.007c1fe0
push pe_nt_image_headers32
lea eax, [esp + 0xa4]
push eax
lea eax, [esp + 0x428]
push eax
call fcn.007bd9b0
add esp, 0xc
mov edx, dword [esp + 0x560]
lea ecx, [esp + 0xa0]
mov dword [esp + 0x40], 0
mov dword [esp + 0x44], 4
mov dword [esp + 0xb8], 0
mov dword [esp + 0xa0], 0
mov dword [esp + 0xa4], 4
mov dword [esp + 0xa8], 0
mov dword [esp + 0xac], 0
mov dword [esp + 0xb0], 4
mov dword [esp + 0x48], 0
mov dword [esp + 0xb4], 0
mov dword [esp + 0x240], edx
call fcn.004c5530
mov eax, dword [esp + 0xa0]
mov edi, dword [esp + 0x14]
mov dword [esp + 0x98], eax
mov eax, dword [esp + 0xa4]
mov dword [esp + 0x60], eax
mov eax, dword [esp + 0xac]
mov dword [esp + 0x9c], eax
mov eax, dword [esp + 0xb0]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0x56c]
test eax, eax
je 0x50006e
mov ebx, dword [esp + 0x568]
mov ecx, dword [esp + 0xa8]
mov esi, dword [esp + 0xb4]
mov edx, dword [esp + 0x55c]
mov dword [esp + 8], 4
lea eax, [ebx + eax*4]
mov dword [esp + 0x70], ecx
mov dword [esp + 0x30], esi
mov dword [esp + 0x94], edx
mov dword [esp + 0x80], eax
mov eax, dword [esp + 0x54c]
jmp 0x4ffe54
movzx eax, byte [esp + 0x90]
mov edi, dword [esp + 0x14]
mov ebx, dword [esp + 0x410]
mov byte [esp + 0x572], al
mov eax, dword [esp + 0x8c]
add ebx, 4
or eax, dword [esp + 0x2c]
cmp ebx, dword [esp + 0x80]
mov dword [esp + 0x54c], eax
je 0x50006e
mov esi, dword [ebx]
cmp dword [esp + 0x40], 0
mov dword [esp + 0x8c], eax
je 0x4ffe79
mov eax, dword [esp + 8]
mov edx, 1
mov dword [eax], esi
mov eax, dword [esp + 0x44]
mov dword [esp + 8], eax
jmp 0x4ffea2
lea ecx, [esp + 0x40]
xor edx, edx
mov dword [esp + 0x2c], 0
call fcn.0075a1c0
mov eax, dword [esp + 0x44]
mov edx, dword [esp + 0x48]
mov dword [eax + edx*4], esi
inc edx
mov dword [esp + 8], eax
mov dword [esp + 0x48], edx
je 0x4ffe32
movzx eax, byte [esp + 0x572]
mov dword [esp + 0x410], ebx
mov dword [esp + 0x2c], 0
xor esi, esi
mov byte [esp + 0x90], al
jmp 0x4ffee5
test ebx, ebx
mov edx, ebx
je 0x4ffe18
mov eax, dword [esp + 8]
lea ebx, [edx - 1]
mov dword [esp + 0x48], ebx
mov edi, dword [esp + 0x40]
mov ecx, dword [eax + edx*4 - 4]
cmp dword [esp + 0x30], ecx
mov dword [esp + 0x214], ecx
jbe 0x50018c
mov eax, dword [esp + 0xc]
mov eax, dword [eax + ecx*4]
cmp eax, esi
jae 0x4fff2f
cmp eax, dword [esp + 0x70]
jae 0x5001c7
mov dword [esp + 0x10], esi
mov esi, dword [esp + 0x60]
cmp dword [esi + eax*4], ecx
mov esi, dword [esp + 0x10]
je 0x4ffedb
cmp esi, dword [esp + 0x70]
mov dword [esp + 0x25c], esi
jae 0x500427
mov eax, dword [esp + 0x60]
mov dword [eax + esi*4], ecx
mov eax, dword [esp + 0x214]
cmp eax, dword [esp + 0x30]
jae 0x5001a6
mov dword [esp + 0x18], edx
mov edx, edi
mov edi, ebx
mov ebx, esi
mov esi, dword [esp + 0xc]
cmp ecx, dword [esp + 0x240]
mov dword [esi + eax*4], ebx
jae 0x5001b6
mov esi, dword [esp + 0x94]
inc ebx
lea ecx, [ecx + ecx*4]
mov eax, ebx
lea ebx, [esi + ecx*4]
mov ecx, dword [esi + ecx*4]
mov esi, eax
mov dword [esp + 0x10], ebx
mov ebx, edi
mov ecx, dword [ecx*4 + 0x500750]
add ecx, dword [esp + 0x84]
jmp ecx
lea eax, [esp + 0xa8]
push 0x160
lea ecx, [esp + 0x424]
push ecx
push eax
call fcn.007bd9b0
add esp, 0xc
movzx eax, byte [0x94bfc5]
xor ecx, ecx
mov edx, 0x180
call fcn.0071ee80
test eax, eax
je 0x5006a4
mov esi, eax
and esi, 0xfffffff0
mov dword [esi + 0xc], eax
mov dword [esi + 0x10], 1
mov dword [esi + 0x14], 1
lea eax, [esi + 0x18]
push 0x168
lea ecx, [esp + 0xa4]
push ecx
push eax
call fcn.007bd9b0
add esp, 0xc
cmp dword [esp + 0x98], 0
je 0x5000f1
push dword [esp + 0x60]
push 0
push dword [0x94bf18]
call dword [sym.imp.kernel32.dll_HeapFree]
cmp dword [esp + 0x9c], 0
je 0x50010d
push dword [esp + 0xc]
push 0
push dword [0x94bf18]
call dword [sym.imp.kernel32.dll_HeapFree]
cmp dword [esp + 0x40], 0
je 0x500126
push dword [esp + 0x44]
push 0
push dword [0x94bf18]
call dword [sym.imp.kernel32.dll_HeapFree]
cmp dword [esp + 0x5c], 0
je 0x50013f
push dword [esp + 0x1c]
push 0
push dword [0x94bf18]
call dword [sym.imp.kernel32.dll_HeapFree]
cmp dword [esp + 0x20], 0
je 0x500158
push dword [esp + 0x24]
push 0
push dword [0x94bf18]
call dword [sym.imp.kernel32.dll_HeapFree]
add esi, 0x10
cmp dword [esp + 0x4c], 0
je 0x500174
push dword [esp + 0x50]
push 0
push dword [0x94bf18]
call dword [sym.imp.kernel32.dll_HeapFree]
mov eax, dword [esp + 0x58]
inc dword [edi + 0x20]
mov dword [eax + 4], esi
mov dword [eax], 0x2a
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov edx, dword [esp + 0x30]
push 0x851cb0
call fcn.007c1be0
mov edx, ebx
push 0x84ffa8
call fcn.007c1be0
mov edx, dword [esp + 0x30]
mov ecx, eax
push 0x851ca0
call fcn.007c1be0
mov edx, dword [esp + 0x240]
push 0x8507a4
call fcn.007c1be0
mov edx, dword [esp + 0x70]
mov ecx, eax
push 0x851cc0
call fcn.007c1be0
mov ebx, edi
mov dword [esp + 8], 0x80000002
jmp 0x4fed34
sub ecx, edi
mov ebx, eax
mov dword [esp + 0x60], 0
mov dword [esp + 8], 0x80000001
shr ecx, 1
inc ecx
mov dword [esp + 0x18], ecx
jmp 0x4fed34
mov edx, ebx
push 0x8507f4
call fcn.007c1be0
mov edx, edi
push 0x84ff58
call fcn.007c1be0
mov ebx, dword [esp + 0x14]
cmp dword [ebx + 0x20], 0
je 0x4fde9f
mov ecx, 0x85031c
call fcn.007c1ec0
lea edx, [esp + 0x42c]
movsd xmm1, qword [edx + 0x20]
movsd xmm3, qword [edx + 0x18]
mov ecx, dword [edx + 0x30]
movsd xmm0, qword [edx + 0x28]
movsd qword [esp + 0x280], xmm1
movsd xmm1, qword [edx + 0x10]
movsd qword [esp + 0x278], xmm3
movsd xmm3, qword [edx]
mov dword [esp + 0x290], ecx
movsd qword [esp + 0x288], xmm0
movsd qword [esp + 0x270], xmm1
movsd xmm1, qword [edx + 8]
movsd qword [esp + 0x260], xmm3
movsd qword [esp + 0x268], xmm1
jmp 0x4fec87
mov eax, ecx
mov ecx, eax
mov edx, edi
push 0x84ff68
call fcn.007c1be0
mov ecx, eax
mov edx, ebx
push 0x84ff78
call fcn.007c1be0
mov ecx, esi
mov edx, ebx
push 0x84ff88
call fcn.007c1be0
mov ecx, ebx
push 0x850e40
call fcn.007c1be0
mov ecx, esi
push 0x850114
call fcn.007c1be0
mov ecx, esi
push 0x84ffb8
call fcn.007c1be0
mov ecx, esi
push 0x84ffd8
call fcn.007c1be0
mov ecx, esi
push 0x850104
call fcn.007c1be0
mov ecx, esi
push 0x84ffc8
call fcn.007c1be0
mov ecx, esi
push 0x850034
call fcn.007c1be0
mov ecx, esi
push 0x850074
call fcn.007c1be0
mov edx, ebx
push 0x85088c
call fcn.007c1be0
mov edx, ebx
push 0x8508bc
call fcn.007c1be0
mov edx, ebx
push 0x8508dc
call fcn.007c1be0
mov edx, ebx
push 0x8508ec
call fcn.007c1be0
push 0x850e90
call fcn.007c1be0
mov ecx, ebx
push 0x850e50
call fcn.007c1be0
mov edx, dword [esp + 0xc]
push 0x850e70
call fcn.007c1be0
mov edx, ebx
push 0x8507d4
call fcn.007c1be0
mov edx, ebx
push 0x8507e4
call fcn.007c1be0
mov edx, edi
push 0x850e60
call fcn.007c1be0
mov ecx, esi
push 0x8500a4
call fcn.007c1be0
mov ecx, esi
push 0x8500e4
call fcn.007c1be0
mov ecx, esi
push 0x850084
call fcn.007c1be0
mov ecx, esi
push 0x850094
call fcn.007c1be0
mov ecx, esi
push 0x8500b4
call fcn.007c1be0
mov ecx, esi
push 0x8500c4
call fcn.007c1be0
mov ecx, esi
push 0x8500d4
call fcn.007c1be0
mov ecx, esi
push 0x8500f4
call fcn.007c1be0
mov eax, dword [esp + 0x70]
lea edx, [esp + 0x25c]
lea ecx, [esp + 0x88]
mov dword [esp + 0x218], 0x851c78
mov dword [esp + 0x21c], 3
mov dword [esp + 0x228], 0
mov dword [esp + 0xa0], edx
mov dword [esp + 0xa4], fcn.00412930
mov dword [esp + 0xa8], ecx
lea ecx, [esp + 0xa0]
lea edx, [esp + 0x214]
mov dword [esp + 0xac], fcn.00412930
mov dword [esp + 0xb0], edx
mov dword [esp + 0x220], ecx
lea ecx, [esp + 0x218]
mov edx, 0x851c90
mov dword [esp + 0xb4], 0x4c5f70
mov dword [esp + 0x224], 3
mov dword [esp + 0x88], eax
call fcn.007c1b50
mov ecx, 0x85026c
call fcn.007c1ec0
mov ecx, 0x85025c
call fcn.007c1ec0
mov ecx, 0x84e604
call fcn.007c1fe0
call fcn.00418cb0
mov ecx, 0x8503cc
call fcn.007c1ec0
mov ecx, str.invalid_capture_index
mov edx, 0x15
push 0x850000
call fcn.007c2000
mov ecx, str.invalid_capture_index
mov edx, 0x15
push 0x850044
call fcn.007c2000
mov ecx, 4
mov edx, 0x30
call fcn.007c1490
mov ecx, 4
mov edx, esi
call fcn.007c1490
mov ecx, 0x85024c
call fcn.007c1ec0
lea ecx, [esp + 0xa0]
mov edx, 0x84ff48
mov dword [esp + 0xa0], 0x84ff40
mov dword [esp + 0xa4], 1
mov dword [esp + 0xb0], 0
mov dword [esp + 0xa8], 0x93d1f8
mov dword [esp + 0xac], 0
call fcn.007c1b50
mov dword [esp + 0xa0], edx
mov ecx, str.a_small_enough_slot
mov edx, 0x13
mov dword [esp + 0xa4], 0
push 0x850024
push 0x84dec8
lea eax, [esp + 0xa8]
push eax
call fcn.007c1f60
mov ecx, 0x850054
call fcn.007c1fe0
mov dword [esp + 0xa0], edx
mov ecx, str.a_small_enough_slot
mov edx, 0x13
mov dword [esp + 0xa4], 0
push 0x850064
push 0x84dec8
lea eax, [esp + 0xa8]
push eax
call fcn.007c1f60
lea ecx, [esp + 0x88]
lea edx, [esp + 0x40]
mov dword [esp + 0xa0], 0
push 0x850e80
lea eax, [esp + 0xa4]
push eax
call fcn.007c6c20
lea ecx, [esp + 0x88]
lea edx, [esp + 0x40]
mov dword [esp + 0xa0], 0
push 0x850ea0
lea eax, [esp + 0xa4]
push eax
call fcn.007c6c20
mov ecx, 0x93b384
mov edx, 0x2b
push 0x84dff4
push 0x84df18
lea eax, [esp + 0xa8]
push eax
call fcn.007c1f60
mov ecx, 0x93b384
mov edx, 0x2b
push 0x7d72a4
push 0x7d7198
lea eax, [esp + 0xa8]
push eax
call fcn.007c1f60
mov ecx, 4
mov edx, edi
call fcn.007c1490
mov ecx, 0x85038c
call fcn.007c1ec0
ud2
mov ecx, 0x10
mov edx, 0x170
call fcn.007c1490
mov ecx, 0x85034c
call fcn.007c1ec0
mov ecx, 0x852630
call fcn.007c1fe0
mov ecx, 0x93b384
mov edx, 0x2b
mov dword [esp + 0xa0], edi
mov dword [esp + 0xa4], 0
push 0x850ec0
push 0x84dec8
lea eax, [esp + 0xa8]
push eax
call fcn.007c1f60
mov ecx, 0x850eb0
call fcn.007c1fe0
xchg esp, eax
sbb al, 0
add ch, cl
sbb eax, 0x1cb80000
add byte [eax], al
adc byte [esi], bl
add byte [eax], al
sbb al, 0
add byte [ebp + 0x1e], cl
add byte [eax], al
neg byte [esi]
add byte [eax], al
push edx
pop ds
add byte [eax], al
mov cl, 0x1f
add byte [eax], al
xchg esp, eax
sbb eax, 0x25290000
add byte [eax], al
pop edi
and eax, 0x25890000
add byte [eax], al
mov ecx, 0xc9000025
and eax, 0x25fc0000
add byte [eax], al
and al, 0x26
add byte [eax], al
inc eax
and eax, 0x25400000
add byte [eax], al
push edi
sub al, byte [eax]
add byte [edi + 0x2a], dl
add byte [eax], al
push edi
sub al, byte [eax]
add byte [0x4600002b], bl
sub eax, dword [eax]
add byte [ebp + 0x2b], bh
add byte [eax], al
inc eax
sub al, byte [eax]
add byte [edi + 0x2a], dl
add byte [eax], al
mov ebp, 0xcc00002b
int3