Function at 0x413ad8
Capabilities:
Resolve function by parsing pe exports

Disassembly:
call 0x56cc4968
add al, 0x71
add esi, dword [eax + 1]
call 0x58a94251
cmp eax, 0xd8e80040
jge 0x413aed
invalid
dec dword [ebx - 0x7cf7dbb4]
les ecx, [eax]
test al, 1
je 0x413cdc
js 0x413b03
jns 0x413b03
call 0x1514af9
movsd xmm0, qword [ecx]
lea edx, [esp + 0xcc]
movsd qword [edx], xmm0
mov eax, dword [esi + 8]
mov edi, dword [esi + 0xc]
lea esi, [esp + 0xc0]
jl 0x413b24
jge 0x413b24
call 0x50992cb1
mov ecx, esi
push edi
push eax
call fcn.00418109
pop eax
pop ecx
movzx eax, word [esi + 8]
test ax, ax
jp 0x413b3b
jnp 0x413b3b
call 0x1b13eb0
jno 0x413b40
jo 0x413b40
call 0x469c053
add byte [eax], al
jne 0x413f6e
jb 0x413b4b
jae 0x413b4b
call 0xc065bfda
add byte [eax], al
add bh, al
test byte [eax + esi*8], ah
add byte [eax], al
add byte [eax + eax], al
add byte [ecx], dh
dec dword [ecx - 0x74d3dbbc]
test byte [esp + eax*8], ah
add byte [eax], al
add byte [ecx - 0x74cfdbbc], cl
inc esp
and al, 0x70
mov eax, dword [esp + 0xc0]
mov dword [esp + 0xf0], 0x44
xor edi, edi
mov dword [esp + 0x2c], eax
mov eax, dword [esp + 0xc4]
mov dword [esp + 0x30], eax
mov eax, dword [esp + 0x70]
mov dword [esp + 0x3c], eax
mov dword [esp + 0x130], eax
mov eax, dword [esp + 0x68]
mov dword [esp + 0x38], eax
mov dword [esp + 0x12c], eax
mov eax, dword [esp + 0x18]
mov dword [esp + 0x128], eax
mov dword [esp + 0x11c], 0x100
jp 0x413ba7
jnp 0x413ba7
call 0x50659836
mov ebx, dword [esp + 0x50]
and dword [esp + 0xf8], 0
and dword [esp + 0xf4], 0
and dword [esp + 0x100], 0
and dword [esp + 0xfc], 0
and dword [esp + 0x108], 0
and dword [esp + 0x104], 0
and dword [esp + 0x110], 0
and dword [esp + 0x10c], 0
and dword [esp + 0x118], 0
and dword [esp + 0x114], 0
and dword [esp + 0x124], 0
and dword [esp + 0x120], 0
mov eax, dword [ebx + 0x44]
test eax, eax
je 0x413ffe
jl 0x413c1b
jge 0x413c1b
call 0x7289b7aa
add esi, dword [ebx + 1]
mov edi, dword [ebx + 0x48]
jb 0x413c23
jae 0x413c23
call 0x8d6558b2
mov ah, 0x24
push esp
add dword [eax], eax
add byte [ecx + 0x57da89f1], cl
mov ebx, dword [esp]
lea esi, [esp + 0x154]
mov ecx, esi
mov edx, ebx
push edi
push eax
call fcn.004181ba
pop eax
pop ecx
movzx eax, word [esi + 8]
test ax, ax
je 0x414034
jo 0x413c4c
jno 0x413c4c
call 0x2c6590db
mov edx, dword [esp + 0x2c]
mov edi, eax
mov ecx, ebx
push dword [esp + 0x30]
call fcn.00418553
pop eax
mov esi, dword [esp + 4]
cmp byte [esi], 2
jne 0x413cb1
jg 0x413c6c
jle 0x413c6c
call 0x246588fb
mov ecx, dword [esp + 0x24]
jo 0x413c75
jno 0x413c75
call 0x3c659104
mov edx, dword [esp + 0x3c]
call fcn.00417e28
cmp byte [esi], 2
jne 0x413cb1
jnp 0x413c88
jp 0x413c88
call 0x1c658917
mov ecx, dword [esp + 0x1c]
jae 0x413c91
jb 0x413c91
call 0x38659120
mov edx, dword [esp + 0x38]
call fcn.00417e28
cmp byte [esi], 2
jne 0x413cb1
jne 0x413ca4
je 0x413ca4
call 0x18658933
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
call fcn.00417e28
jne 0x413cb6
je 0x413cb6
call 0x2065b93a
add byte [ecx + 0x2b840ff8], cl
add eax, dword [eax]
add byte [ecx + 3], bh
cmp byte [esp + 0x20], 0
mov eax, edi
je 0x413fee
jns 0x413cc8
js 0x413cc8
call 0xe907c621
and ch, byte [edx + eax]
add byte [ecx + 0x7c037df0], cl
add eax, ebp
push ebp
mov esi, eax
call sub.ntdll.dll_NtClose
mov eax, esi
jge 0x413cd7
jl 0x413cd7
call 0x444fc4
add byte [ebx + 3], dh
jmp 0x413fee
jae 0x413ce1
jb 0x413ce1
call 0x49cc3e70
add al, 0x8d
xchg esp, eax
and al, 0x90
add byte [eax], al
add byte [ecx - 0x76c3db8c], cl
jl 0x413d18
mov eax, dword [ecx]
mov ecx, dword [ecx + 4]
lea edx, [esp + 0x90]
mov dword [esp + 0x3c], esi
mov dword [esp + 0x38], edi
mov dword [edx], 0xaaaaaaaa
and dword [edx + 4], 0
cmp bh, al
add ch, byte [edx - 0x7c555556]
bound eax, qword [eax + eax]
and dword [edx + 8], 0
mov dword [edx + 0x10], ecx
xor ecx, ecx
mov dword [edx + 0xc], eax
cmp ecx, edi
jbe 0x413d12
ja 0x413d12
call 0x333c125
add byte [eax], al
je 0x41400a
mov eax, esi
jno 0x413d1f
jo 0x413d1f
call 0x860f71ae
leave
mov esi, dword [esi + ecx*8]
test ecx, ecx
lea edi, [esp + 0x90]
mov dword [esp + 0x2c], ecx
mov ebp, dword [eax + ecx*8 + 4]
je 0x413d4d
jo 0x413d3a
jno 0x413d3a
call 0x20ac36c7
mov ecx, edi
push 0x20
pop edx
call fcn.0041817c
test ax, ax
jne 0x413f4b
xor eax, eax
jle 0x413d54
jg 0x413d54
call 0x3bc2591
cmp eax, ebp
jp 0x413d5b
jnp 0x413d5b
call 0x219c16e
add byte [eax], al
je 0x413f39
jns 0x413d66
js 0x413d66
call 0x6a4749f4
cld
mov cl, byte [esi + eax]
push 0xfffffffffffffffc
pop edx
test edx, edx
jbe 0x413d73
ja 0x413d73
call 0x3b34feb
je 0x413d87
jb 0x413d7a
jae 0x413d7a
call 0x3fe9c7b8
inc eax
add byte [ebp - 0x188afeae], cl
cmp cl, byte [edx + 0x403fa8]
lea edx, [edx + 1]
jne 0x413d6c
jmp 0x413d8f
jo 0x413d8c
jno 0x413d8c
call 0x800728d0
add edi, dword [esi + 1]
inc eax
jmp 0x413d54
jg 0x413d94
jle 0x413d94
call 0x22ac3721
mov ecx, edi
push 0x22
pop edx
call fcn.0041817c
test ax, ax
jne 0x413f4b
xor edx, edx
sub ebp, 1
jne 0x413db1
je 0x413db1
call 0x14cbfc4
add byte [eax], al
jb 0x413ec2
jno 0x413dbc
jo 0x413dbc
call 0x835ff3cf
sti
and dh, byte [eax + edx - 0x7d]
sti
pop esp
movzx ebx, byte [esi]
cmp ebx, 0x22
je 0x413dd4
cmp ebx, 0x5c
jne 0x413e44
inc edx
jns 0x413dcf
js 0x413dcf
call fcn.004221bc
add byte [ecx + 0x7bfe89f3], cl
add edi, dword [edx + 1]
jmp 0x413eb7
mov ebx, esi
mov esi, edi
jnp 0x413ddd
jp 0x413ddd
call 0x9465fa6c
add byte [eax], al
add byte [edi + 3], bh
mov edi, dword [esp + 0x94]
jg 0x413de9
jle 0x413de9
call 0x54cf2f76
push edi
add eax, ebp
cmpsd dword [esi], dword es:[edi]
xor al, byte [eax]
add byte [esi - 0x7b], ah
ror byte [edi], 0x85
dec esi
add dword [eax], eax
add byte [edi + 3], dh
mov ecx, esi
lea edx, [edi + edx*2 + 1]
call fcn.0041709b
test ax, ax
jne 0x413f4b
ja 0x413e02
jbe 0x413e02
call 0x9465c291
add byte [eax], al
add byte [ebx + 0x90248c], cl
add byte [eax], al
mov eax, dword [esp + 0x94]
mov ecx, dword [esp + 0x90]
jno 0x413e15
jo 0x413e15
call 0xf9433642
sub eax, edi
add ecx, edi
push eax
push 0x5c
push ecx
call fcn.00403060
add esp, 0xc
jg 0x413e2a
jle 0x413e2a
call 0x22ac2fb7
mov ecx, esi
push 0x22
pop edx
call fcn.0041817c
mov edi, esi
xor edx, edx
test ax, ax
mov esi, ebx
je 0x413eb7
jmp 0x413f4b
mov dword [esp + 0x30], esi
mov esi, edi
jnp 0x413e4f
jp 0x413e4f
call 0x9465fade
add byte [eax], al
add byte [eax + 3], dh
mov edi, dword [esp + 0x94]
jo 0x413e5b
jno 0x413e5b
call 0xfa432fe8
mov ecx, esi
add edx, edi
call fcn.0041709b
test ax, ax
jne 0x413f4b
call 0x413e73
add al, ch
mov eax, dword [esp + 0x94]
mov ecx, dword [esp + 0x90]
jg 0x413e87
jle 0x413e87
call 0xf94336b4
sub eax, edi
add ecx, edi
push eax
push 0x5c
push ecx
call fcn.00403060
add esp, 0xc
movzx edx, bl
mov ecx, esi
jbe 0x413ea1
ja 0x413ea1
call 0x84158d
add byte [ecx + 0x24748bf7], cl
xor byte [ecx], dh
shl byte [esi - 0x7b], cl
ror byte [edi], 0x85
xchg esp, eax
add byte [eax], al
add byte [esi + 3], bh
call fcn.0041817c
mov edi, esi
mov esi, dword [esp + 0x30]
xor edx, edx
test ax, ax
jne 0x413f4b
jle 0x413ebc
jg 0x413ebc
call 0xff292806
invalid
inc esi
jmp 0x413da9
js 0x413ec7
jns 0x413ec7
call 0x9465f356
add byte [eax], al
add byte [ecx + 0x7f037ef9], cl
add eax, ebp
mov esi, dword [esp + 0x94]
mov ecx, edi
jle 0x413ed5
jg 0x413ed5
call 0xe8975366
mov esi, 0x66000031
test eax, eax
lea edx, [esi + edx*2]
call fcn.0041709b
test ax, ax
jne 0x413f4b
jae 0x413ee7
jb 0x413ee7
call 0x9465c376
add byte [eax], al
add byte [ebx + 0x90248c], cl
add byte [eax], al
mov eax, dword [esp + 0x94]
mov ecx, dword [esp + 0x90]
jb 0x413efa
jae 0x413efa
call 0xf1432f27
sub eax, esi
add ecx, esi
push eax
push 0x5c
push ecx
call fcn.00403060
add esp, 0xc
jbe 0x413f0f
ja 0x413f0f
call 0x22ac389c
mov ecx, edi
push 0x22
pop edx
call fcn.0041817c
mov ebp, dword [esp + 0x10]
test ax, ax
jne 0x413f4f
jae 0x413f27
jb 0x413f27
call 0x2c658bb6
mov ecx, dword [esp + 0x2c]
mov esi, dword [esp + 0x3c]
mov edi, dword [esp + 0x38]
inc ecx
jmp 0x413d0b
je 0x413f3e
jne 0x413f3e
call 0xf2cb38cb
mov ecx, edi
mov edx, esi
push ebp
call fcn.00416f74
pop ecx
jmp 0x413f19
mov ebp, dword [esp + 0x10]
mov esi, eax
lea ecx, [esp + 0x90]
jno 0x413f5d
jo 0x413f5d
call 0xff9e6849
dec dword [ecx + 0x720373f0]
add eax, ebp
call 0x409c8a
mov eax, esi
jae 0x413f69
jb 0x413f69
call 0x1b142de
jno 0x413f6e
jo 0x413f6e
call 0x1b542e7
jne 0x413f73
je 0x413f73
call 0x465b402
mov esi, dword [esp + 4]
cmp byte [esi], 2
jne 0x413fce
jns 0x413f81
js 0x413f81
call 0x24658c10
mov ecx, dword [esp + 0x24]
mov edx, dword [esp + 0x70]
jge 0x413f8e
jl 0x413f8e
call 0x942a071b
add byte ds:[eax], al
mov edi, eax
call fcn.00417e28
cmp byte [esi], 2
mov eax, edi
jne 0x413fce
jb 0x413fa1
jae 0x413fa1
call 0x1c658c30
mov ecx, dword [esp + 0x1c]
mov edx, dword [esp + 0x68]
jbe 0x413fae
ja 0x413fae
call 0x7fb59a
add byte [eax - 0x776fdc2], al
call fcn.00417e28
cmp byte [esi], 2
mov eax, edi
jne 0x413fce
ja 0x413fbf
jbe 0x413fbf
call 0x18658c4e
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
call fcn.00417e28
mov eax, edi
jg 0x413fd3
jle 0x413fd3
call 0x2065bc57
add byte [esp + edx + 0x73], dh
add esi, dword [edx + 1]
cmp byte [esp + 0x20], 0
je 0x413fee
jae 0x413fdf
jb 0x413fdf
call 0xe907c938
or ebp, dword [ecx]
add al, byte [eax]
push ebp
mov esi, eax
call sub.ntdll.dll_NtClose
mov eax, esi
jg 0x413fee
jle 0x413fee
call 0x1b44364
xor ecx, ecx
mov dword [esp + 0x48], 0
jmp 0x414051
lea ecx, [esp + 0x90]
je 0x414016
jne 0x414016
call 0x744591a5
add esi, dword [ebp + 1]
mov edx, dword [ecx + 4]
je 0x41401e
jne 0x41401e
call 0x313f2864
add byte [eax], al
inc edx
call 0x417121
test ax, ax
je 0x41436e
mov edi, eax
jmp 0x4143b0
jbe 0x414039
ja 0x414039
call 0x5865c4c8
add dword [eax], eax
add byte [ebx + 0x154248c], cl
add byte [eax], al
mov eax, dword [esp + 0x158]
mov ecx, dword [esp + 0x154]
mov ebx, dword [esp + 0x50]
xor edi, edi
mov dword [esp + 0x48], eax
jno 0x414056
jo 0x414056
call 0x8981abe5
dec esp
and al, 0xc
mov ebp, dword [ebx + 0x40]
mov dword [esp + 0xc], ecx
test ebp, ebp
je 0x41421f
lea esi, [esp + 0x1c4]
jb 0x414071
jae 0x414071
call 0x1bf43f4
jg 0x414076
jle 0x414076
call 0x1b343ed
jae 0x41407b
jb 0x41407b
call 0x1b243ef
jo 0x414080
jno 0x414080
call 0x1b143f5
jno 0x414085
jo 0x414085
call 0x1b443fb
jb 0x41408a
jae 0x41408a
call 0x1bd440b
jge 0x41408f
jl 0x41408f
call 0x1b54408
jne 0x414094
je 0x414094
call 0x1bf4417
jg 0x414099
jle 0x414099
call 0x1b94416
jns 0x41409e
js 0x41409e
call 0x1bf4421
jg 0x4140a3
jle 0x4140a3
call 0x45a72a
and dword [esi + 4], 0
mov dword [esi], ebp
push 4
pop ebx
lea edi, [esp + 0xcc]
mov ecx, edi
mov edx, esi
jbe 0x4140bc
ja 0x4140bc
call 0x8605a8
add byte [eax + 0xd424bc], al
add byte [eax], al
add byte [edi + ebx + 0x78], dh
add edi, dword [ecx + 1]
call 0x418585
cmp byte [esp + 0xd4], 0
je 0x4140ea
js 0x4140d0
jns 0x4140d0
call 0xd065cd5f
add byte [eax], al
add byte [ebx + 0xcc2484], cl
add byte [eax], al
mov ecx, dword [esp + 0xd0]
mov eax, dword [esp + 0xcc]
mov ecx, dword [ecx + 4]
add ebx, dword [eax + 4]
lea ebx, [ecx + ebx + 2]
jmp 0x4140b3
jo 0x4140ef
jno 0x4140ef
call 0x8d65457e
mov ah, 0x24
lodsb al, byte [esi]
add byte [eax], al
add byte [ebp + 0x1cc2494], cl
add byte [eax], al
mov eax, dword [esp]
lea esi, [esp + 0xac]
lea edx, [esp + 0x1cc]
mov ecx, esi
movsd xmm0, qword [eax]
movsd qword [edx], xmm0
jo 0x41410f
jno 0x41410f
call 0x2f482966
add byte [eax], al
push ebx
call 0x41701b
pop eax
movzx eax, word [esi + 8]
mov ebx, eax
test ax, ax
jne 0x414e3b
jl 0x41412a
jge 0x41412a
call 0xa465cdbb
add dword [eax], eax
add byte [ebx + 0xb02484], cl
add byte [eax], al
lea ecx, [esp + 0x1a4]
mov eax, dword [esp + 0xb0]
mov edi, dword [esp + 0xac]
xor esi, esi
and dword [ecx + 4], 0
mov dword [ecx], ebp
mov dword [esp + 0x80], eax
lea ecx, [esp + 0x90]
lea edx, [esp + 0x1a4]
jle 0x414161
jg 0x414161
call 0x85614d
add byte [eax + 0x9824bc], al
add byte [eax], al
add byte [edi], cl
test byte [edi + 0x78000003], ch
add edi, dword [ecx + 1]
call 0x418585
cmp byte [esp + 0x98], 0
je 0x414523
js 0x414179
jns 0x414179
call 0x9065c608
add byte [eax], al
add byte [ebx + 0x94249c], cl
add byte [eax], al
mov eax, dword [esp + 0x90]
mov ebx, dword [esp + 0x94]
lea edx, [edi + esi*2]
mov ebp, edi
lea ecx, [esp + 0xe0]
mov edi, dword [eax]
mov eax, dword [eax + 4]
js 0x41419d
jns 0x41419d
call 0x6d2998f1
mov ebp, 0x5958ffff
push eax
push edi
call fcn.0040ff10
pop eax
pop ecx
movzx edx, word [esp + 0xe4]
test dx, dx
jne 0x4145c3
jbe 0x4141bc
ja 0x4141bc
call 0xe065fe4b
add byte [eax], al
add byte [ebp + 0xe8248c], cl
add byte [eax], al
mov edi, dword [esp + 0xe0]
lea ecx, [esp + 0xe8]
lea eax, [edi + esi]
lea edx, [ebp + eax*2 + 2]
mov word [edx - 2], 0x3d
mov eax, dword [ebx]
mov ebx, dword [ebx + 4]
jo 0x4141e1
jno 0x4141e1
call 0x29299238
mov ebp, 0x5958ffff
push ebx
push eax
call fcn.0040ff10
pop eax
pop ecx
movzx ebx, word [esp + 0xec]
test bx, bx
jne 0x414609
jo 0x414200
jno 0x414200
call 0xe865ce8f
add byte [eax], al
add byte [ebp - 0x76fec8bc], cl
out dx, eax
mov ecx, dword [esp + 0xe8]
lea eax, [edi + esi + 1]
mov edi, ebp
lea edx, [ecx + eax]
lea esi, [ecx + eax + 1]
and word [ebp + edx*2], 0
jmp 0x41414e
mov dword [esp + 0x44], 0
jbe 0x41422c
ja 0x41422c
call 0x8b7985bb
xor byte [ebx + 0x37b0468], cl
mov eax, dword [ebx + 0x38]
mov esi, dword [eax]
mov ebp, dword [eax + 4]
jnp 0x414239
jp 0x414239
call 0xeacb33c6
mov ecx, esi
mov edx, ebp
call fcn.00410d45
test al, 1
mov byte [esp + 0x80], al
mov dword [esp + 8], edi
je 0x4143e3
mov ecx, esi
mov edx, ebp
jb 0x41425e
jae 0x41425e
call 0x1cae4a
dec dword [ecx + 0x7c037dd7]
add eax, ebp
call fcn.00411dce
mov edi, edx
jge 0x41426a
jl 0x41426a
call 0x8d6556f9
pushfd
and al, 0x60
add dword [eax], eax
add byte [ecx - 0x17afa827], cl
cmp eax, 0x5800003f
mov edx, dword [esp]
lea ebx, [esp + 0x160]
mov ecx, ebx
push edi
push eax
call fcn.004181ba
pop eax
pop ecx
movzx ebx, word [ebx + 8]
test bx, bx
je 0x4145d6
mov edx, dword [esp + 8]
js 0x414295
jns 0x414295
call 0x17b6151e
test edx, edx
je 0x4142b0
js 0x41429e
jns 0x41429e
call 0x1b14613
jno 0x4142a3
jo 0x4142a3
call 0xff654f32
je 0x4142cd
mov ecx, dword [esp]
push dword [esp + 0x44]
inc esp
call fcn.00416fcc
pop eax
mov edx, dword [esp + 0xc]
jnp 0x4142b9
jp 0x4142b9
call 0x1065b748
mov esi, dword [esp + 0x10]
mov edi, dword [esp + 4]
mov ecx, dword [esp]
test edx, edx
je 0x4142e5
jb 0x4142cd
jae 0x4142cd
call 0x1be464d
jl 0x4142d2
jge 0x4142d2
call 0xff654f61
je 0x4142fc
mov ecx, dword [esp]
push dword [esp + 0x48]
dec eax
call fcn.0041865a
mov ecx, dword [esp + 4]
add esp, 4
call 0x4142eb
add al, ch
mov edx, dword [esp + 0x2c]
push dword [esp + 0x30]
call fcn.00418553
pop eax
cmp byte [edi], 2
jne 0x414349
add dh, byte [ebp + 0x4a]
jo 0x414304
jno 0x414304
call 0x24658f93
mov ecx, dword [esp + 0x24]
ja 0x41430d
jbe 0x41430d
call 0x3c65979c
mov edx, dword [esp + 0x3c]
call fcn.00417e28
cmp byte [edi], 2
jne 0x414349
jne 0x414320
je 0x414320
call 0x1c658faf
mov ecx, dword [esp + 0x1c]
ja 0x414329
jbe 0x414329
call 0x386597b8
mov edx, dword [esp + 0x38]
call fcn.00417e28
cmp byte [edi], 2
jne 0x414349
jae 0x41433c
jb 0x41433c
call 0x18658fcb
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
call fcn.00417e28
jle 0x41434e
jg 0x41434e
call 0x2065bfd2
add byte [edi], cl
test al, cl
or eax, dword [eax]
add byte [ebx + eax + 0x7d], bh
add eax, ebp
cmp byte [esp + 0x20], 0
je 0x414f21
jl 0x41435e
jge 0x41435e
call 0x25d02bb8
add al, byte [eax]
push esi
call sub.ntdll.dll_NtClose
ja 0x414369
jbe 0x414369
call 0x4cf756
add byte [ebp + 0x902494], cl
add byte [eax], al
jmp 0x414f21
lea edx, [esp + 0x90]
jge 0x41437a
jl 0x41437a
call 0xac65f80b
add byte [eax], al
add byte [ebx + 0x3750442], cl
lea esi, [esp + 0xac]
mov eax, dword [edx + 4]
jne 0x414389
je 0x414389
call 0x89428c1a
dec edx
add al, 0x8b
or al, dh
add al, 1
add byte [ecx + 0x1e8f1], cl
add byte [eax], al
lea ecx, [eax + 1]
mov dword [edx + 4], ecx
mov ecx, dword [edx]
mov byte [ecx + eax], 0
mov ecx, esi
call 0x41439d
add al, ch
call fcn.00409942
movzx edi, word [esi + 8]
test di, di
je 0x414508
lea ecx, [esp + 0x90]
jb 0x4143bc
jae 0x4143bc
call 0x1b24730
jo 0x4143c1
jno 0x4143c1
call 0xff9a08ad
dec dword [ecx + 0x24b489f8]
rol byte [eax], 0
add byte [ecx + 0xc4249c], cl
add byte [eax], al
call 0x409c8a
mov eax, edi
mov dword [esp + 0xc0], esi
mov dword [esp + 0xc4], ebx
mov word [esp + 0xc8], ax
jmp 0x413b33
jl 0x4143e8
jge 0x4143e8
call 0x85858777
ror byte [edi], 0x84
cld
add dword [eax], eax
add byte [edx + 3], bh
mov eax, dword [ebx + 0x44]
test eax, eax
je 0x4145ef
jp 0x4143f8
jnp 0x4143f8
call 0x7f899f87
add edi, dword [esi + 1]
mov ebx, dword [ebx + 0x48]
jg 0x414400
jle 0x414400
call 0x8d65588f
mov esp, 0x16c24
add byte [ecx - 0x17afac07], cl
cmpsd dword [esi], dword es:[edi]
cmp eax, 0x59580000
mov edx, dword [esp]
lea edi, [esp + 0x16c]
mov ecx, edi
push ebx
push eax
call fcn.004181ba
pop eax
pop ecx
movzx ebx, word [edi + 8]
test bx, bx
je 0x414623
mov edx, dword [esp + 8]
call 0x41442c
add al, ch
test edx, edx
je 0x414448
jle 0x414436
jg 0x414436
call 0x1b647ae
je 0x41443b
jne 0x41443b
call 0xff6550ca
je 0x414465
mov ecx, dword [esp]
push dword [esp + 0x44]
inc esp
call fcn.00416fcc
pop eax
mov edx, dword [esp + 0xc]
call 0x414452
add al, ch
mov esi, dword [esp + 0x10]
mov edi, dword [esp + 4]
mov ecx, dword [esp]
test edx, edx
je 0x41447f
jnp 0x414467
jp 0x414467
add eax, ebp
call 0x1b447dd
jb 0x41446c
jae 0x41446c
call 0xff6550fb
je 0x414496
mov ecx, dword [esp]
push dword [esp + 0x48]
dec eax
call fcn.0041865a
mov ecx, dword [esp + 4]
add esp, 4
ja 0x414484
jbe 0x414484
call 0x2c659913
mov edx, dword [esp + 0x2c]
push dword [esp + 0x30]
call fcn.00418553
pop eax
cmp byte [edi], 2
jne 0x4144e1
dec edx
jnp 0x41449c
jp 0x41449c
call 0x2465912b
mov ecx, dword [esp + 0x24]
jne 0x4144a5
je 0x4144a5
call 0x3c659934
mov edx, dword [esp + 0x3c]
call fcn.00417e28
cmp byte [edi], 2
jne 0x4144e1
je 0x4144b8
jne 0x4144b8
call 0x1c659147
mov ecx, dword [esp + 0x1c]
jle 0x4144c1
jg 0x4144c1
call 0x38659950
mov edx, dword [esp + 0x38]
call fcn.00417e28
cmp byte [edi], 2
jne 0x4144e1
jns 0x4144d4
js 0x4144d4
call 0x18659163
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
call fcn.00417e28
ja 0x4144e6
jbe 0x4144e6
call 0x2065c16a
add byte [edi], cl
test byte [eax], dh
or al, byte [eax]
add byte [esi + 3], dh
cmp byte [esp + 0x20], 0
je 0x414f21
jbe 0x4144f6
ja 0x4144f6
call 0x24382d50
add al, byte [eax]
push esi
call sub.ntdll.dll_NtClose
call 0x414502
add al, ch
jmp 0x414f21
jnp 0x41450d
jp 0x41450d
call 0xb065e19c
add byte [eax], al
add byte [ebx + 0xac24b4], cl
add byte [eax], al
mov ebx, dword [esp + 0xb0]
mov esi, dword [esp + 0xac]
xor edi, edi
dec ebx
jmp 0x4143b0
jge 0x414528
jl 0x414528
call 0xf6559b7
push edi
ror byte [ecx + 0x4130ff1], 0x77
mov edx, dword [esp]
xorps xmm0, xmm0
mov ecx, esi
movlps qword [edi + esi*2], xmm0
add ecx, 4
mov esi, dword [edx]
mov ebp, dword [edx + 4]
jl 0x414541
jge 0x414541
call 0x1465e1d0
add al, byte [eax]
add al, ch
add dword [eax], eax
add byte [eax], al
mov ebx, dword [esp + 0x214]
call 0x41454e
add al, ch
jnp 0x414554
jp 0x414554
call 0x806601db
add byte [eax], al
add byte [eax], al
cmp dword [esp + 0x80], 0
je 0x414aea
test ecx, ecx
mov dword [esp + 8], edi
call 0x41456e
add al, ch
js 0x414e01
mov eax, dword [esp + 0x80]
jo 0x414581
jno 0x414581
call 0x4465920e
mov dword [esp + 0x44], ecx
lea edi, [ecx + ecx]
mov ecx, dword [ebp + 4]
mov dword [esp + 0x34], ecx
je 0x414594
jne 0x414594
call 0x8659a23
mov edx, dword [esp + 8]
add eax, eax
mov ecx, esi
push ebx
push edi
push 1
mov dword [esp + 0x34], eax
push eax
call dword [esp + 0x44]
add esp, 0x10
test al, 1
mov eax, ebx
mov ebx, dword [esp + 0x50]
je 0x414d46
mov edi, dword [esp + 8]
jmp 0x414dbb
jb 0x4145c8
jae 0x4145c8
call 0x8d654a57
mov word [esp + edx*8], fs
add dword [eax], eax
add byte [ecx + 0x7e42ebd3], cl
add edi, dword [edi + 1]
mov eax, dword [esp]
lea ecx, [esp + 0x1d4]
mov ebx, edx
jmp 0x414618
jle 0x4145db
jg 0x4145db
call 0x6065ca6a
add dword [eax], eax
add byte [ecx - 0x74b3dbbc], cl
test byte [esp], ah
add dword [eax], eax
add bl, ch
dec ebx
mov eax, dword [esp + 0x160]
mov dword [esp + 0x4c], eax
mov eax, dword [esp + 0x164]
jmp 0x41463a
mov dword [esp + 0x34], 0
mov dword [esp + 0x4c], 0x403fe8
mov dword [esp + 0x40], 0
add byte [eax], al
jmp 0x414644
jg 0x41460e
jle 0x41460e
call 0x8d654a9d
mov word [esp + ebx*8], fs
add dword [eax], eax
add byte [ecx + 0x100ff2ef], cl
add cl, ch
add byte [eax], cl
add byte [eax], al
mov eax, dword [esp]
lea ecx, [esp + 0x1dc]
mov edi, ebp
movsd xmm0, qword [eax]
jmp 0x414e23
jg 0x414628
jle 0x414628
call 0x6c65cab7
add dword [eax], eax
add byte [ecx - 0x74b3dbbc], cl
test byte [eax + esi*2], ah
add dword [eax], eax
add byte [ecx - 0x4fbfdbbc], cl
add dword [ecx - 0x76cbdbbc], ecx
int1
mov eax, dword [esp + 0x16c]
mov dword [esp + 0x4c], eax
mov eax, dword [esp + 0x170]
mov dword [esp + 0x40], eax
mov al, 1
mov dword [esp + 0x34], eax
mov ecx, esi
mov edx, ebp
jbe 0x41464d
ja 0x41464d
call 0xff91c239
push esi
test byte [eax + eax*4], ah
add byte [eax], al
add byte [ecx], al
call fcn.004096cd
test byte [esp + 0x80], 1
mov ebx, eax
mov eax, 0
mov edi, 0
mov dword [esp + 0x54], edx
mov dword [esp + 0x28], 0
jne 0x414684
mov ecx, esi
mov edx, ebp
jg 0x41467d
jle 0x41467d
call 0x189369
dec dword [ecx + 0x79c085d7]
add edi, dword [eax + 1]
call fcn.00411dce
mov edi, edx
test eax, eax
jns 0x41468b
js 0x41468b
call 0x184ca9e
add byte [eax], al
je 0x4147d4
jae 0x414696
jb 0x414696
call 0x1ba4a12
js 0x41469b
jns 0x41469b
call 0x89655b2a
fisttp qword [ebp + 0x17824b4]
add byte [eax], al
mov edx, dword [esp]
mov ebp, ebx
lea esi, [esp + 0x178]
mov ecx, esi
push edi
push eax
call fcn.004181ba
pop eax
pop ecx
movzx ebx, word [esi + 8]
test bx, bx
je 0x4147d8
jge 0x4146c4
jl 0x4146c4
call 0x3465c348
add byte [ebx + 0x7408247c], cl
sbb esi, dword [esi + 3]
cmp byte [esp + 0x34], 0
mov edi, dword [esp + 8]
je 0x4146ea
jbe 0x4146d4
ja 0x4146d4
call 0x1bb4a53
jnp 0x4146d9
jp 0x4146d9
call 0x8b655368
push esp
and al, 0x4c
mov ecx, dword [esp]
mov edx, dword [esp + 0x4c]
push dword [esp + 0x40]
call fcn.0041868f
pop eax
jae 0x4146ef
jb 0x4146ef
call 0xfacb4678
test edi, edi
mov edx, edi
mov esi, dword [esp + 0x10]
mov edi, dword [esp + 4]
mov ecx, dword [esp]
je 0x41471f
call 0x414706
add al, ch
jo 0x41470c
jno 0x41470c
call 0xff65539b
je 0x414736
mov ecx, dword [esp]
push dword [esp + 0x44]
inc esp
call fcn.00416fcc
mov ecx, dword [esp + 4]
add esp, 4
mov edx, dword [esp + 0xc]
jp 0x414728
jnp 0x414728
call 0x1db619b1
test edx, edx
je 0x414749
je 0x414731
jne 0x414731
call 0x1b24aa5
jo 0x414736
jno 0x414736
call 0xff6553c5
je 0x414760
mov ecx, dword [esp]
push dword [esp + 0x48]
dec eax
call fcn.0041865a
mov ecx, dword [esp + 4]
add esp, 4
call 0x41474f
add al, ch
mov edx, dword [esp + 0x2c]
push dword [esp + 0x30]
call fcn.00418553
pop eax
cmp byte [edi], 2
jne 0x4147af
add dh, byte [ebp + 0x4c]
jne 0x414768
je 0x414768
call 0x246593f7
mov ecx, dword [esp + 0x24]
jnp 0x414771
jp 0x414771
call 0x3c659c00
mov edx, dword [esp + 0x3c]
call fcn.00417e28
cmp byte [edi], 2
jne 0x4147af
call 0x414785
add al, ch
mov ecx, dword [esp + 0x1c]
jno 0x41478f
jo 0x41478f
call 0x38659c1e
mov edx, dword [esp + 0x38]
call fcn.00417e28
cmp byte [edi], 2
jne 0x4147af
jo 0x4147a2
jno 0x4147a2
call 0x18659431
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
call fcn.00417e28
jg 0x4147b4
jle 0x4147b4
call 0x2065c438
add byte [edi], cl
test byte [edx + 7], ah
add byte [eax], al
cmp byte [esp + 0x20], 0
je 0x414f21
jns 0x4147c4
js 0x4147c4
call 0x216a301e
add al, byte [eax]
push esi
call sub.ntdll.dll_NtClose
jbe 0x4147cf
ja 0x4147cf
call 0x4895bc
add byte [ecx], dh
invalid
jmp 0x414f21
xor edi, edi
jmp 0x4147f1
jl 0x4147dd
jge 0x4147dd
call 0x7865cc6c
add dword [eax], eax
add byte [ebx + 0x17c24bc], cl
add byte [eax], al
mov eax, dword [esp + 0x178]
mov edi, dword [esp + 0x17c]
mov ebx, ebp
mov dword [esp + 0x28], eax
js 0x4147f6
jns 0x4147f6
call 0x1bd4b77
jge 0x4147fb
jl 0x4147fb
call 0x8d65748a
mov ah, 0x24
test byte [ecx], al
add byte [eax], al
mov ebp, dword [esp]
lea esi, [esp + 0x184]
mov ecx, esi
mov edx, ebp
push dword [esp + 0x54]
push ebx
call fcn.004181ba
pop eax
pop ecx
movzx ebx, word [esi + 8]
test bx, bx
je 0x414960
jo 0x414827
jno 0x414827
call 0x28659cb6
mov edx, dword [esp + 0x28]
test edx, edx
je 0x414845
call 0x414835
add al, ch
jg 0x41483b
jle 0x41483b
call 0x576554ca
mov ecx, dword [esp]
push edi
call fcn.0041865a
pop eax
jg 0x41484a
jle 0x41484a
call 0x3465c4ce
add byte [ebx + 0x7c8b240c], cl
and al, 8
cmp byte [esp + 0x34], 0
mov ecx, dword [esp]
mov edi, dword [esp + 8]
je 0x414879
jno 0x41485d
jo 0x41485d
call 0x1b84bd7
jbe 0x414862
ja 0x414862
call 0x8b6554f1
push esp
and al, 0x4c
mov ecx, dword [esp]
mov edx, dword [esp + 0x4c]
push dword [esp + 0x40]
call fcn.0041868f
mov ecx, dword [esp + 4]
add esp, 4
jg 0x41487e
jle 0x41487e
call 0xfacb4807
test edi, edi
mov edx, edi
mov esi, dword [esp + 0x10]
mov edi, dword [esp + 4]
je 0x4148a9
jnp 0x414891
jp 0x414891
call 0x1b54c0a
jne 0x414896
je 0x414896
call 0xff655525
je 0x4148c0
mov ecx, dword [esp]
push dword [esp + 0x44]
inc esp
call fcn.00416fcc
mov ecx, dword [esp + 4]
add esp, 4
mov edx, dword [esp + 0xc]
call 0x4148b3
add al, ch
test edx, edx
je 0x4148d7
call 0x4148be
add al, ch
jbe 0x4148c4
add esi, dword [edi + 1]
ja 0x4148c4
call 0xff655553
je 0x4148ee
mov ecx, dword [esp]
push dword [esp + 0x48]
dec eax
call fcn.0041865a
mov ecx, dword [esp + 4]
add esp, 4
jo 0x4148dc
jno 0x4148dc
call 0x2c659d6b
mov edx, dword [esp + 0x2c]
push dword [esp + 0x30]
call fcn.00418553
pop eax
cmp byte [edi], 2
jne 0x41493b
dec esp
jns 0x4148f4
js 0x4148f4
call 0x24659583
mov ecx, dword [esp + 0x24]
je 0x4148fd
jne 0x4148fd
call 0x3c659d8c
mov edx, dword [esp + 0x3c]
call fcn.00417e28
cmp byte [edi], 2
jne 0x41493b
call 0x414911
add al, ch
mov ecx, dword [esp + 0x1c]
js 0x41491b
jns 0x41491b
call 0x38659daa
mov edx, dword [esp + 0x38]
call fcn.00417e28
cmp byte [edi], 2
jne 0x41493b
jp 0x41492e
jnp 0x41492e
call 0x186595bd
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
call fcn.00417e28
jns 0x414940
js 0x414940
call 0x2065c5c4
add byte [edi], cl
test dh, dl
add eax, 0x37c0000
cmp byte [esp + 0x20], 0
je 0x414f21
jl 0x414950
jge 0x414950
call 0x1fde31aa
add al, byte [eax]
push esi
call sub.ntdll.dll_NtClose
jo 0x41495b
jno 0x41495b
call 0x470b48
add byte [ecx + 0x7564247c], cl
add esi, dword [ecx + eax - 0x18]
jmp 0x414f21
mov dword [esp + 0x64], edi
jne 0x414969
je 0x414969
call 0x846605f8
add dword [eax], eax
add byte [ebx + 0x1882484], cl
add byte [eax], al
mov edi, dword [esp + 0x184]
mov eax, dword [esp + 0x188]
lea esi, [esp + 0x190]
mov edx, ebp
mov ecx, esi
mov dword [esp + 0x54], eax
call 0x41498c
add al, ch
push dword [esp + 0x30]
push dword [esp + 0x30]
call fcn.004181ba
pop eax
pop ecx
movzx ebx, word [esi + 8]
test bx, bx
je 0x414b46
mov edx, edi
jp 0x4149b0
jnp 0x4149b0
call 0x7541333d
and al, 0x54
mov ecx, ebp
push dword [esp + 0x54]
call fcn.0041865a
pop eax
mov edx, dword [esp + 0x28]
test edx, edx
je 0x4149db
js 0x4149c9
jns 0x4149c9
call 0x1b54d42
jne 0x4149ce
je 0x4149ce
call 0xff65565d
je 0x4149f8
mov ecx, dword [esp]
push dword [esp + 0x64]
call fcn.0041865a
call fcn.0041865a
pop eax
jp 0x4149e0
jnp 0x4149e0
call 0x3465c664
add byte [ebx + 0x7408247c], cl
sbb edi, dword [ecx + 3]
cmp byte [esp + 0x34], 0
mov edi, dword [esp + 8]
je 0x414a06
jns 0x4149f0
js 0x4149f0
call 0x1b44d66
jb 0x4149f5
jae 0x4149f5
call 0x8b655684
push esp
and al, 0x4c
mov ecx, dword [esp]
mov edx, dword [esp + 0x4c]
push dword [esp + 0x40]
call fcn.0041868f
pop eax
jg 0x414a0b
jle 0x414a0b
call 0xfacb4994
test edi, edi
mov edx, edi
mov esi, dword [esp + 0x10]
mov edi, dword [esp + 4]
mov ecx, dword [esp]
je 0x414a39
je 0x414a21
jne 0x414a21
call 0x1b44d97
jb 0x414a26
jae 0x414a26
call 0xff6556b5
je 0x414a50
mov ecx, dword [esp]
push dword [esp + 0x44]
inc esp
call fcn.00416fcc
mov ecx, dword [esp + 4]
add esp, 4
mov edx, dword [esp + 0xc]
je 0x414a42
jne 0x414a42
call 0x1db61ccb
test edx, edx
je 0x414a63
jl 0x414a4b
jge 0x414a4b
call 0x1c04dcd
jle 0x414a50
jg 0x414a50
call 0xff6556df
je 0x414a7a
mov ecx, dword [esp]
push dword [esp + 0x48]
dec eax
call fcn.0041865a
mov ecx, dword [esp + 4]
add esp, 4
jbe 0x414a68
ja 0x414a68
call 0x2c659ef7
mov edx, dword [esp + 0x2c]
push dword [esp + 0x30]
call fcn.00418553
pop eax
cmp byte [edi], 2
jne 0x414ac5
dec edx
jns 0x414a80
js 0x414a80
call 0x2465970f
mov ecx, dword [esp + 0x24]
jno 0x414a89
jo 0x414a89
call 0x3c659f18
mov edx, dword [esp + 0x3c]
call fcn.00417e28
cmp byte [edi], 2
jne 0x414ac5
jp 0x414a9c
jnp 0x414a9c
call 0x1c65972b
mov ecx, dword [esp + 0x1c]
jns 0x414aa5
js 0x414aa5
call 0x38659f34
mov edx, dword [esp + 0x38]
call fcn.00417e28
cmp byte [edi], 2
jne 0x414ac5
jge 0x414ab8
jl 0x414ab8
call 0x18659747
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
call fcn.00417e28
js 0x414aca
jns 0x414aca
call 0x2065c74e
add byte [edi], cl
test byte [esp + eax], cl
add byte [ebx + eax + 0x75], dh
add eax, ebp
cmp byte [esp + 0x20], 0
je 0x414f21
je 0x414ada
jne 0x414ada
call 0x1e543334
add al, byte [eax]
push esi
call sub.ntdll.dll_NtClose
jge 0x414ae5
jl 0x414ae5
call 0x4582d2
add byte [ebp + 0x1ec2494], cl
add byte [eax], al
jmp 0x414f21
lea edx, [esp + 0x1ec]
js 0x414af6
jns 0x414af6
call 0x32cb1383
mov eax, ecx
mov dword [edx], esi
lea esi, [esp + 0x1ac]
mov dword [edx + 4], ebp
jb 0x414b09
jae 0x414b09
call 0x89953c96
inc esp
and al, 0x48
mov ecx, esi
push ebx
mov dword [esp + 0x48], eax
push eax
call fcn.00417314
mov edx, dword [esp + 8]
add esp, 8
movzx ecx, word [esi + 4]
jno 0x414b26
jo 0x414b26
call 0x1bd4ea7
jge 0x414b2b
jl 0x414b2b
call 0x85a816b8
leave
mov ebx, ecx
test cx, cx
jne 0x414e13
mov edi, dword [esp + 0x1ac]
mov ebx, dword [esp + 0x50]
jmp 0x414dc5
jae 0x414b4b
jb 0x414b4b
call 0x9065e7da
add dword [eax], eax
add byte [ebx + 0x19424b4], cl
add byte [eax], al
mov ebx, dword [esp + 0x190]
mov esi, dword [esp + 0x194]
mov ecx, 0x403ffc
jne 0x414b63
je 0x414b63
call 0x7ca84f
add byte [ebp + 0x3feab9c0], al
inc eax
add byte [edi], cl
inc ebp
enter 0x440f, 0xffffffffffffffd0
call 0x4186c4
test eax, eax
mov ecx, 0x403fea
cmovne ecx, eax
cmove edx, eax
mov dword [esp + 0xb8], ecx
mov ecx, 0x404006
mov dword [esp + 0xbc], edx
jnp 0x414b8d
jp 0x414b8d
call 0x7c7e79
add byte [ebp + 0x3fecb9c0], al
inc eax
add byte [edi], cl
inc ebp
enter 0x440f, 0xffffffffffffffd0
call 0x4186c4
test eax, eax
mov ecx, 0x403fec
cmovne ecx, eax
cmove edx, eax
mov dword [esp + 0xa4], ecx
lea ecx, [esp + 0x84]
mov dword [esp + 0xa8], edx
jo 0x414bb9
jno 0x414bb9
call 0x61c53646
or byte [eax], al
mov edx, ebp
and dword [ecx + 8], 0
and dword [ecx + 4], 0
mov dword [ecx], 0xaaaaaaaa
jg 0x414bce
jle 0x414bce
call 0x5465c0d1
push dword [esp + 0x54]
push edi
call fcn.004187c0
pop ecx
pop edx
test ax, ax
mov dword [esp + 0x6c], eax
je 0x414f28
lea ecx, [esp + 0x84]
mov edx, ebp
ja 0x414bf5
jbe 0x414bf5
call 0x7d70e1
add byte [ecx + 0x790378da], cl
add eax, ebp
call fcn.0041881e
mov edx, ebx
js 0x414c01
jns 0x414c01
call 0xe898358e
push ecx
cmp al, byte [eax]
add byte [eax - 0x77], bl
cli
mov ecx, ebp
push esi
call fcn.0041865a
pop eax
mov edx, edi
call 0x414c12
add al, ch
mov ecx, ebp
push dword [esp + 0x54]
call fcn.0041865a
pop eax
mov edx, dword [esp + 0x28]
test edx, edx
je 0x414c3e
jge 0x414c2c
jl 0x414c2c
call 0x1b64fa4
je 0x414c31
jne 0x414c31
call 0xff6558c0
je 0x414c5b
mov ecx, dword [esp]
push dword [esp + 0x64]
call fcn.0041865a
call fcn.0041865a
pop eax
je 0x414c43
jne 0x414c43
call 0x3465c8c7
add byte [ebx + ebx + 0x7b], dh
add edi, dword [edx + 1]
cmp byte [esp + 0x34], 0
je 0x414c65
jnp 0x414c4f
jp 0x414c4f
call 0x1bb4fce
jnp 0x414c54
jp 0x414c54
call 0x8b6558e3
push esp
and al, 0x4c
mov ecx, dword [esp]
mov edx, dword [esp + 0x4c]
push dword [esp + 0x40]
call fcn.0041868f
pop eax
mov edx, dword [esp + 8]
jle 0x414c6e
jg 0x414c6e
call 0x17b61ef7
test edx, edx
je 0x414c89
ja 0x414c77
jbe 0x414c77
call 0x1bc4ff5
jp 0x414c7c
jnp 0x414c7c
call 0xff65590b
je 0x414ca6
mov ecx, dword [esp]
push dword [esp + 0x44]
inc esp
call fcn.00416fcc
pop eax
mov edx, dword [esp + 0xc]
call 0x414c93
add al, ch
test edx, edx
je 0x414cb3
call 0x414c9e
add al, ch
call 0x414ca5
add al, ch
mov ecx, dword [esp]
push dword [esp + 0x48]
call fcn.0041865a
pop eax
jp 0x414cb8
jnp 0x414cb8
call 0x8b655947
push esp
and al, 0x2c
mov ecx, dword [esp]
mov edx, dword [esp + 0x2c]
push dword [esp + 0x30]
call fcn.00418553
pop eax
mov esi, dword [esp + 4]
cmp byte [esi], 2
jne 0x414d1e
js 0x414cd7
jns 0x414cd7
call 0x24659966
mov ecx, dword [esp + 0x24]
call 0x414ce1
add al, ch
mov edx, dword [esp + 0x3c]
call fcn.00417e28
cmp byte [esi], 2
jne 0x414d1e
je 0x414cf5
jne 0x414cf5
call 0x1c659984
mov ecx, dword [esp + 0x1c]
jp 0x414cfe
jnp 0x414cfe
call 0x3865a18d
mov edx, dword [esp + 0x38]
call fcn.00417e28
cmp byte [esi], 2
jne 0x414d1e
jge 0x414d11
jl 0x414d11
call 0x186599a0
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
call fcn.00417e28
jg 0x414d23
jle 0x414d23
call 0x2065c9a7
add byte [ebx + edx + 0x7e], dh
add edi, dword [edi + 1]
cmp byte [esp + 0x20], 0
je 0x414d3d
jle 0x414d2f
jg 0x414d2f
call 0x1065c232
push dword [esp + 0x10]
call sub.ntdll.dll_NtClose
jo 0x414d3d
jno 0x414d3d
call 0x6c6591cc
mov eax, dword [esp + 0x6c]
jmp 0x413fee
jne 0x414d4b
je 0x414d4b
call 0x45cd10d8
add byte [ecx + 0x740375fa], cl
add eax, ebp
mov ebx, eax
mov eax, dword [ebp]
mov edx, edi
jne 0x414d57
je 0x414d57
call 0x6a953ee4
add edi, edi
rcr byte [ecx + 0x5a], 1
mov ecx, esi
push ebx
push 1
call eax
pop ecx
pop edx
mov edx, dword [esp]
test eax, eax
mov dword [esp + 0x34], ebx
je 0x414e01
js 0x414d74
jns 0x414d74
call 0x2865aa03
mov ebx, dword [esp + 0x28]
jge 0x414d7d
jl 0x414d7d
call 0x43512cba
sti
cmp edi, ebx
cmovae edi, ebx
push edi
mov edi, dword [esp + 0xc]
push edi
push eax
mov dword [esp + 0x8c], eax
call fcn.0040307b
add esp, 0xc
mov eax, dword [ebp + 8]
jge 0x414da0
jl 0x414da0
call 0xfacb3f2d
mov ecx, esi
mov edx, edi
push dword [esp + 0x34]
push 1
push ebx
call eax
add esp, 0xc
mov edi, dword [esp + 0x80]
mov ebx, dword [esp + 0x50]
jbe 0x414dc0
ja 0x414dc0
call 0x1b8513a
jbe 0x414dc5
ja 0x414dc5
call 0x1be5145
jl 0x414dca
jge 0x414dca
call 0x1bd514b
jge 0x414dcf
jl 0x414dcf
call 0x1b45145
jb 0x414dd4
jae 0x414dd4
call 0x1bb5153
jnp 0x414dd9
jp 0x414dd9
call 0x1b4514f
jb 0x414dde
jae 0x414dde
call 0x1c05160
jle 0x414de3
jg 0x414de3
call 0x1bc5161
jp 0x414de8
jnp 0x414de8
call 0x1bd5169
jge 0x414ded
jl 0x414ded
call 0x1b65165
je 0x414df2
jne 0x414df2
call 0x1b35169
jae 0x414df7
jb 0x414df7
call 0x1be5177
jl 0x414dfc
jge 0x414dfc
call 0x3574e9
push dword [esi + 3]
jmp 0x414227
jbe 0x414e06
ja 0x414e06
call 0x1bb5185
jnp 0x414e0b
jp 0x414e0b
call 0x865ca9a
mov edi, dword [esp + 8]
mov bx, 2
jp 0x414e18
jnp 0x414e18
call 0x2515e0e
movsd xmm0, qword [edx]
lea ecx, [esp + 0x1e4]
movsd qword [ecx], xmm0
jle 0x414e2c
jg 0x414e2c
call 0xb54148b9
and al, 0x80
add byte [eax], al
add al, ch
xchg edx, eax
and dword [eax], eax
add byte [eax - 0x75], bl
push esp
and al, 0xc
mov edx, edi
push dword [esp + 0x80]
call fcn.00416fcc
pop eax
mov edx, dword [esp + 0xc]
jp 0x414e44
jnp 0x414e44
call 0x1b151b9
jno 0x414e49
jo 0x414e49
call 0x1b651c1
je 0x414e4e
jne 0x414e4e
call 0x1b451c4
jb 0x414e53
jae 0x414e53
call 0x1b851cd
jbe 0x414e58
ja 0x414e58
call 0x1b651d0
je 0x414e5d
jne 0x414e5d
call 0x415049
add byte [eax], al
call 0x1be51e4
call 0x414e63
add al, ch
jl 0x414e69
jge 0x414e69
call 0x1bc51e7
jp 0x414e6e
jnp 0x414e6e
call 0x1b951eb
jns 0x414e73
js 0x414e73
call 0x1c051f5
jle 0x414e78
jg 0x414e78
call 0x85658307
sal byte [esi + edx + 0x7e], cl
add edi, dword [edi + 1]
mov esi, dword [esp]
test edx, edx
je 0x414e95
jle 0x414e84
jg 0x414e84
call 0x1b351fb
jae 0x414e89
jb 0x414e89
call 0x75414016
and al, 0x48
mov ecx, esi
push dword [esp + 0x48]
call fcn.0041865a
pop eax
jge 0x414e9a
jl 0x414e9a
call 0x2c65a329
mov edx, dword [esp + 0x2c]
mov ecx, esi
push dword [esp + 0x30]
call fcn.00418553
pop eax
mov edi, dword [esp + 4]
mov esi, dword [esp + 0x10]
cmp byte [edi], 2
jne 0x414f05
call 0x414ebd
add al, ch
mov ecx, dword [esp + 0x24]
jne 0x414ec7
je 0x414ec7
call 0x3c65a356
mov edx, dword [esp + 0x3c]
call fcn.00417e28
cmp byte [edi], 2
jne 0x414f05
jp 0x414eda
jnp 0x414eda
call 0x1c659b69
mov ecx, dword [esp + 0x1c]
call 0x414ee4
add al, ch
mov edx, dword [esp + 0x38]
call fcn.00417e28
cmp byte [edi], 2
jne 0x414f05
jle 0x414ef8
jg 0x414ef8
call 0x18659b87
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
call fcn.00417e28
jae 0x414f0a
jb 0x414f0a
call 0x2065cb8e
add byte [eax + edx + 0x73], dh
add esi, dword [edx + 1]
cmp byte [esp + 0x20], 0
je 0x414f21
jae 0x414f16
jb 0x414f16
call 0x1a183770
add al, byte [eax]
push esi
call sub.ntdll.dll_NtClose
jbe 0x414f21
ja 0x414f21
call 0xc72b27ae
invalid
mov eax, ebx
jmp 0x413fee
mov dword [esp + 0x58], ebx
mov dword [esp + 0x5c], esi
mov dword [esp + 0x60], edi
js 0x414f39
jns 0x414f39
call 0x7c65b3c0
add byte [ebx + 0x782464], al
and dword [esp + 0x7c], 0
and dword [esp + 0x78], 0
cmp dword [esp + 0x40], 0
mov dword [esp + 0x74], 0xaaaaaaaa
je 0x4150fc
jnp 0x414f5b
jp 0x414f5b
call 0x1be52db
jl 0x414f60
jge 0x414f60
call 0x8d6563ef
dec esp
and al, 0x74
mov edx, dword [esp]
lea ecx, [esp + 0x74]
push dword [esp + 0x40]
push dword [esp + 0x50]
call fcn.004187c0
pop ecx
pop edx
test ax, ax
je 0x4150fc
jae 0x414f84
jb 0x414f84
call 0x8d658413
dec esp
and al, 0x74
mov esi, dword [esp]
lea ecx, [esp + 0x74]
mov edi, eax
mov edx, esi
call fcn.0041881e
lea ecx, [esp + 0x84]
mov edx, esi
jne 0x414fa2
je 0x414fa2
call 0x79c78e
add byte [eax + 3], dh
call fcn.0041881e
jo 0x414fac
jno 0x414fac
call 0x5865a43b
mov edx, dword [esp + 0x58]
mov ecx, esi
push dword [esp + 0x5c]
call fcn.0041865a
pop eax
jb 0x414fc1
jae 0x414fc1
call 0x6065a450
mov edx, dword [esp + 0x60]
mov ecx, esi
push dword [esp + 0x54]
call fcn.0041865a
pop eax
cmp dword [esp + 0x28], 0
je 0x414ff3
jg 0x414fdd
jle 0x414fdd
call 0x1b65355
je 0x414fe2
jne 0x414fe2
call 0x8b655c71
push esp
and al, 0x28
mov ecx, dword [esp]
mov edx, dword [esp + 0x28]
push dword [esp + 0x64]
call fcn.0041865a
pop eax
jle 0x414ff8
jg 0x414ff8
call 0x3465cc7c
add byte [esi + edx + 0x74], dh
add esi, dword [ebp + 1]
cmp byte [esp + 0x34], 0
je 0x415015
je 0x415004
jne 0x415004
call 0x8b655c93
push esp
and al, 0x4c
mov ecx, dword [esp]
mov edx, dword [esp + 0x4c]
push dword [esp + 0x40]
call fcn.0041868f
pop eax
cmp dword [esp + 8], 0
jp 0x41501f
jnp 0x41501f
call 0x3c06b97
je 0x41503c
jg 0x415026
jle 0x415026
call 0x1b3539d
jae 0x41502b
jb 0x41502b
call 0x8b655cba
push esp
and al, 8
mov ecx, dword [esp]
mov edx, dword [esp + 8]
push dword [esp + 0x44]
call fcn.00416fcc
pop eax
cmp dword [esp + 0xc], 0
jns 0x415046
js 0x415046
call 0x3ba6bbe
je 0x415063
jns 0x41504d
js 0x41504d
call 0x1b853c7
jbe 0x415052
ja 0x415052
call 0x8b655ce1
push esp
and al, 0xc
mov ecx, dword [esp]
mov edx, dword [esp + 0xc]
push dword [esp + 0x48]
call fcn.0041865a
pop eax
jns 0x415068
js 0x415068
call 0x8b655cf7
push esp
and al, 0x2c
mov ecx, dword [esp]
mov edx, dword [esp + 0x2c]
push dword [esp + 0x30]
call fcn.00418553
pop eax
mov eax, dword [esp + 4]
cmp byte [eax], 2
jne 0x4150d4
je 0x415087
jne 0x415087
call 0x24659d16
mov ecx, dword [esp + 0x24]
jo 0x415090
jno 0x415090
call 0x3c65a51f
mov edx, dword [esp + 0x3c]
call fcn.00417e28
mov eax, dword [esp + 4]
cmp byte [eax], 2
jne 0x4150d4
jnp 0x4150a7
jp 0x4150a7
call 0x1c659d36
mov ecx, dword [esp + 0x1c]
jae 0x4150b0
jb 0x4150b0
call 0x3865a53f
mov edx, dword [esp + 0x38]
call fcn.00417e28
mov eax, dword [esp + 4]
cmp byte [eax], 2
jne 0x4150d4
jbe 0x4150c7
ja 0x4150c7
call 0x18659d56
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
call fcn.00417e28
jns 0x4150d9
js 0x4150d9
call 0x2065cd5d
add byte [edi], cl
test byte [ebx + 3], bl
add byte [eax], al
cmp byte [esp + 0x20], 0
je 0x41543f
jno 0x4150e9
jo 0x4150e9
call 0x1065c5ec
push dword [esp + 0x10]
call sub.ntdll.dll_NtClose
jg 0x4150f7
jle 0x4150f7
call 0x4494e4
add byte [eax + 3], bh
jmp 0x41543f
js 0x415101
jns 0x415101
call 0x2865cd88
add byte [edi], cl
test byte [edx], bh
add eax, dword [eax]
add byte [edx + 3], bh
cmp dword [esp + 0x28], 0
je 0x415446
jp 0x415111
jnp 0x415111
call 0x7865cd98
add byte [edi], cl
test byte [edi - 0x17ffffff], cl
add dword [eax], eax
add byte [eax], al
cmp dword [esp + 0x78], 0
je 0x4152ab
call 0x415122
add al, ch
mov edx, dword [esp]
lea ecx, [esp + 0x74]
push 0x5c
call fcn.00418848
pop ecx
test ax, ax
je 0x4152ab
jno 0x415140
jo 0x415140
call 0x8d6585cf
dec esp
and al, 0x74
mov esi, dword [esp]
lea ecx, [esp + 0x74]
mov edi, eax
mov edx, esi
call fcn.0041881e
lea ecx, [esp + 0x84]
mov edx, esi
jne 0x41515e
je 0x41515e
call 0x780d4a
add byte [ebx + eax + 0x75], dh
add eax, ebp
call fcn.0041881e
je 0x415168
jne 0x415168
call 0x5865a5f7
mov edx, dword [esp + 0x58]
mov ecx, esi
push dword [esp + 0x5c]
call fcn.0041865a
pop eax
jge 0x41517d
jl 0x41517d
call 0x6065a60c
mov edx, dword [esp + 0x60]
mov ecx, esi
push dword [esp + 0x54]
call fcn.0041865a
pop eax
ja 0x415192
jbe 0x415192
call 0x2865a621
mov edx, dword [esp + 0x28]
mov ecx, esi
push dword [esp + 0x64]
call fcn.0041865a
pop eax
cmp byte [esp + 0x34], 0
je 0x4151c4
ja 0x4151ae
jbe 0x4151ae
call 0x1bc552c
jp 0x4151b3
jnp 0x4151b3
call 0x8b655e42
push esp
and al, 0x4c
mov ecx, dword [esp]
mov edx, dword [esp + 0x4c]
push dword [esp + 0x40]
call fcn.0041868f
pop eax
cmp dword [esp + 8], 0
ja 0x4151ce
jbe 0x4151ce
call 0x3b96d46
je 0x4151eb
js 0x4151d5
jns 0x4151d5
call 0x1b3554c
jae 0x4151da
jb 0x4151da
call 0x8b655e69
push esp
and al, 8
mov ecx, dword [esp]
mov edx, dword [esp + 8]
push dword [esp + 0x44]
call fcn.00416fcc
pop eax
cmp dword [esp + 0xc], 0
ja 0x4151f5
jbe 0x4151f5
call 0x3b76d6d
je 0x415212
jbe 0x4151fc
ja 0x4151fc
call 0x1b45572
jb 0x415201
jae 0x415201
call 0x8b655e90
push esp
and al, 0xc
mov ecx, dword [esp]
mov edx, dword [esp + 0xc]
push dword [esp + 0x48]
call fcn.0041865a
pop eax
jp 0x415217
jnp 0x415217
call 0x8b655ea6
push esp
and al, 0x2c
mov ecx, dword [esp]
mov edx, dword [esp + 0x2c]
push dword [esp + 0x30]
call fcn.00418553
pop eax
mov eax, dword [esp + 4]
cmp byte [eax], 2
jne 0x415283
jae 0x415236
jb 0x415236
call 0x24659ec5
mov ecx, dword [esp + 0x24]
js 0x41523f
jns 0x41523f
call 0x3c65a6ce
mov edx, dword [esp + 0x3c]
call fcn.00417e28
mov eax, dword [esp + 4]
cmp byte [eax], 2
jne 0x415283
jp 0x415256
jnp 0x415256
call 0x1c659ee5
mov ecx, dword [esp + 0x1c]
ja 0x41525f
jbe 0x41525f
call 0x3865a6ee
mov edx, dword [esp + 0x38]
call fcn.00417e28
mov eax, dword [esp + 4]
cmp byte [eax], 2
jne 0x415283
js 0x415276
jns 0x415276
call 0x18659f05
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
call fcn.00417e28
jg 0x415288
jle 0x415288
call 0x2065cf0c
add byte [edi], cl
test byte [ecx + eax + 0x37b0000], ch
cmp byte [esp + 0x20], 0
je 0x41543f
jnp 0x415298
jp 0x415298
call 0x1065c79b
push dword [esp + 0x10]
call sub.ntdll.dll_NtClose
jge 0x4152a6
jl 0x4152a6
call fcn.0042e793
add byte [ecx + 3], dh
jmp 0x41543f
jno 0x4152b0
jo 0x4152b0
call 0x1bf5633
jg 0x4152b5
jle 0x4152b5
call 0x8d656744
dec esp
and al, 0x74
mov edx, dword [esp]
lea ecx, [esp + 0x74]
push dword [esp + 0x64]
push dword [esp + 0x2c]
call fcn.004187c0
pop ecx
pop edx
test ax, ax
je 0x415446
jbe 0x4152d9
ja 0x4152d9
call 0x8d658768
dec esp
and al, 0x74
mov esi, dword [esp]
lea ecx, [esp + 0x74]
mov edi, eax
mov edx, esi
call fcn.0041881e
lea ecx, [esp + 0x84]
mov edx, esi
jl 0x4152f7
jge 0x4152f7
call 0x7675e3
add byte [edi + 3], dh
call fcn.0041881e
ja 0x415301
jbe 0x415301
call 0x5865a790
mov edx, dword [esp + 0x58]
mov ecx, esi
push dword [esp + 0x5c]
call fcn.0041865a
pop eax
jae 0x415316
jb 0x415316
call 0x6065a7a5
mov edx, dword [esp + 0x60]
mov ecx, esi
push dword [esp + 0x54]
call fcn.0041865a
pop eax
jno 0x41532b
jo 0x41532b
call 0x2865a7ba
mov edx, dword [esp + 0x28]
mov ecx, esi
push dword [esp + 0x64]
call fcn.0041865a
pop eax
cmp byte [esp + 0x34], 0
je 0x41535d
jno 0x415347
jo 0x415347
call 0x1b356be
jae 0x41534c
jb 0x41534c
call 0x8b655fdb
push esp
and al, 0x4c
mov ecx, dword [esp]
mov edx, dword [esp + 0x4c]
push dword [esp + 0x40]
call fcn.0041868f
pop eax
cmp dword [esp + 8], 0
jl 0x415367
jge 0x415367
call 0x3ba6edf
je 0x415384
jns 0x41536e
js 0x41536e
call 0x1ba56ea
js 0x415373
jns 0x415373
call 0x8b656002
push esp
and al, 8
mov ecx, dword [esp]
mov edx, dword [esp + 8]
push dword [esp + 0x44]
call fcn.00416fcc
pop eax
cmp dword [esp + 0xc], 0
jb 0x41538e
jae 0x41538e
call 0x3bb6f06
je 0x4153ab
jp 0x415395
jnp 0x415395
call 0x1b75710
ja 0x41539a
jbe 0x41539a
call 0x8b656029
push esp
and al, 0xc
mov ecx, dword [esp]
mov edx, dword [esp + 0xc]
push dword [esp + 0x48]
call fcn.0041865a
pop eax
jno 0x4153b0
jo 0x4153b0
call 0x8b65603f
push esp
and al, 0x2c
mov ecx, dword [esp]
mov edx, dword [esp + 0x2c]
push dword [esp + 0x30]
call fcn.00418553
pop eax
mov eax, dword [esp + 4]
cmp byte [eax], 2
jne 0x41541e
je 0x4153cf
jne 0x4153cf
call 0x2465a05e
mov ecx, dword [esp + 0x24]
ja 0x4153d8
jbe 0x4153d8
call 0x3c65a867
mov edx, dword [esp + 0x3c]
call fcn.00417e28
mov eax, dword [esp + 4]
cmp byte [eax], 2
jne 0x41541e
jle 0x4153ef
jg 0x4153ef
call 0x1c65a07e
mov ecx, dword [esp + 0x1c]
call 0x4153f9
add al, ch
mov edx, dword [esp + 0x38]
call fcn.00417e28
mov eax, dword [esp + 4]
cmp byte [eax], 2
jne 0x41541e
jns 0x415411
js 0x415411
call 0x1865a0a0
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
call fcn.00417e28
jbe 0x415423
ja 0x415423
call 0x2065d0a7
add byte [ebp + edx - 0x18], dh
add dword [eax], eax
add byte [eax], al
cmp byte [esp + 0x20], 0
je 0x41543f
call 0x415430
add al, ch
push dword [esp + 0x10]
call sub.ntdll.dll_NtClose
jge 0x41543f
jl 0x41543f
call 0xa92b4ccc
jmp 0x415444
mov eax, edi
jmp 0x413fee
invalid
jbe 0x41544b
ja 0x41544b
call 0x786598da
mov eax, dword [esp + 0x78]
test eax, eax
je 0x415617
jp 0x41545c
jnp 0x41545c
call 0x7465a8eb
mov edx, dword [esp + 0x74]
lea edi, [esp + 0x19c]
jno 0x41546c
jo 0x41546c
call 0xe8924df9
mov ecx, 0x5800003d
mov ecx, edi
push eax
call fcn.0041922d
pop eax
cmp word [edi + 4], 0
je 0x415602
call 0x415486
add al, ch
mov esi, dword [esp]
lea ecx, [esp + 0x74]
mov edx, esi
call fcn.0041881e
lea ecx, [esp + 0x84]
mov edx, esi
jl 0x4154a3
jge 0x4154a3
call 0x74cb8f
add byte [ebx + eax + 0x75], dh
add eax, ebp
call fcn.0041881e
je 0x4154ad
jne 0x4154ad
call 0x5865a93c
mov edx, dword [esp + 0x58]
mov ecx, esi
push dword [esp + 0x5c]
call fcn.0041865a
pop eax
jne 0x4154c2
je 0x4154c2
call 0x6065a951
mov edx, dword [esp + 0x60]
mov ecx, esi
push dword [esp + 0x54]
call fcn.0041865a
pop eax
cmp dword [esp + 0x28], 0
je 0x4154f4
jo 0x4154de
jno 0x4154de
call 0x1be585e
jl 0x4154e3
jge 0x4154e3
call 0x8b656172
push esp
and al, 0x28
mov ecx, dword [esp]
mov edx, dword [esp + 0x28]
push dword [esp + 0x64]
call fcn.0041865a
pop eax
jb 0x4154f9
jae 0x4154f9
call 0x3465d17d
add byte [ebx + ebx + 0x7f], dh
add edi, dword [esi + 1]
cmp byte [esp + 0x34], 0
je 0x41551b
jg 0x415505
jle 0x415505
call 0x1b3587c
jae 0x41550a
jb 0x41550a
call 0x8b656199
push esp
and al, 0x4c
mov ecx, dword [esp]
mov edx, dword [esp + 0x4c]
push dword [esp + 0x40]
call fcn.0041868f
pop eax
cmp dword [esp + 8], 0
jae 0x415525
jb 0x415525
call 0x3c0709d
je 0x415542
jg 0x41552c
jle 0x41552c
call 0x1b558a5
jne 0x415531
je 0x415531
call 0x8b6561c0
push esp
and al, 8
mov ecx, dword [esp]
mov edx, dword [esp + 8]
push dword [esp + 0x44]
call fcn.00416fcc
pop eax
cmp dword [esp + 0xc], 0
jl 0x41554c
jge 0x41554c
call 0x3b570c4
je 0x415569
je 0x415553
jne 0x415553
call 0x1b958d0
jns 0x415558
js 0x415558
call 0x8b6561e7
push esp
and al, 0xc
mov ecx, dword [esp]
mov edx, dword [esp + 0xc]
push dword [esp + 0x48]
call fcn.0041865a
pop eax
jo 0x41556e
jno 0x41556e
call 0x8b6561fd
push esp
and al, 0x2c
mov ecx, dword [esp]
mov edx, dword [esp + 0x2c]
push dword [esp + 0x30]
call fcn.00418553
pop eax
mov eax, dword [esp + 4]
cmp byte [eax], 2
jne 0x4155da
jg 0x41558d
jle 0x41558d
call 0x2465a21c
mov ecx, dword [esp + 0x24]
jne 0x415596
je 0x415596
call 0x3c65aa25
mov edx, dword [esp + 0x3c]
call fcn.00417e28
mov eax, dword [esp + 4]
cmp byte [eax], 2
jne 0x4155da
jo 0x4155ad
jno 0x4155ad
call 0x1c65a23c
mov ecx, dword [esp + 0x1c]
jns 0x4155b6
js 0x4155b6
call 0x3865aa45
mov edx, dword [esp + 0x38]
call fcn.00417e28
mov eax, dword [esp + 4]
cmp byte [eax], 2
jne 0x4155da
jbe 0x4155cd
ja 0x4155cd
call 0x1865a25c
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
call fcn.00417e28
jb 0x4155df
jae 0x4155df
call 0x2065d263
add byte [ebx + edx + 0x75], dh
add esi, dword [ecx + eax - 0x18]
cmp byte [esp + 0x20], 0
je 0x4155f9
jne 0x4155eb
je 0x4155eb
call 0x1065caee
push dword [esp + 0x10]
call sub.ntdll.dll_NtClose
jge 0x4155f9
jl 0x4155f9
call 0x4f0e63
mov ax, 0xd
jmp 0x413fee
jge 0x415607
jl 0x415607
call 0x9c65da96
add dword [eax], eax
add byte [ecx + 3], dh
mov eax, dword [esp + 0x19c]
jno 0x415613
jo 0x415613
call 0x78659aa0
mov dword [esp + 0x78], eax
ja 0x41561c
jbe 0x41561c
call 0x1b35993
jae 0x415621
jb 0x415621
call 0x8d6562b0
pushfd
and al, 0xb4
add dword [eax], eax
add byte [ebp + 0xf024ac], cl
add byte [eax], al
mov ecx, dword [esp]
lea ebx, [esp + 0x1b4]
lea ebp, [esp + 0xf0]
lea edx, [esp + 0x74]
push ebx
push ebp
push dword [esp + 0x14]
push dword [esp + 0x14]
push dword [esp + 0x68]
push dword [esp + 0xbc]
push dword [esp + 0xbc]
lea eax, [esp + 0xa0]
push eax
call fcn.0041888e
add esp, 0x20
mov dword [esp + 0x6c], eax
movzx eax, ax
lea ecx, [eax - 8]
cmp ecx, 2
jb 0x415811
test eax, eax
je 0x416055
cmp eax, 0x6d
je 0x415811
cmp eax, 0x76
jne 0x415ab5
jg 0x415694
jle 0x415694
call 0x8d658b23
dec esp
and al, 0x74
mov esi, dword [esp]
lea ecx, [esp + 0x74]
mov edx, esi
call fcn.0041881e
lea ecx, [esp + 0x84]
mov edx, esi
jbe 0x4156b0
ja 0x4156b0
call 0x72c09c
add byte [edi + 3], bh
call fcn.0041881e
jg 0x4156ba
jle 0x4156ba
call 0x5865ab49
mov edx, dword [esp + 0x58]
mov ecx, esi
push dword [esp + 0x5c]
call fcn.0041865a
pop eax
jns 0x4156cf
js 0x4156cf
call 0x6065ab5e
mov edx, dword [esp + 0x60]
mov ecx, esi
push dword [esp + 0x54]
call fcn.0041865a
pop eax
cmp dword [esp + 0x28], 0
je 0x415701
jne 0x4156eb
je 0x4156eb
call 0x1b65a63
je 0x4156f0
jne 0x4156f0
call 0x8b65637f
push esp
and al, 0x28
mov ecx, dword [esp]
mov edx, dword [esp + 0x28]
push dword [esp + 0x64]
call fcn.0041865a
pop eax
jb 0x415706
jae 0x415706
call 0x3465d38a
add byte [ebx + ebx + 0x79], dh
add edi, dword [eax + 1]
cmp byte [esp + 0x34], 0
je 0x415728
jns 0x415712
js 0x415712
call 0x1b75a8d
ja 0x415717
jbe 0x415717
call 0x8b6563a6
push esp
and al, 0x4c
mov ecx, dword [esp]
mov edx, dword [esp + 0x4c]
push dword [esp + 0x40]
call fcn.0041868f
pop eax
cmp dword [esp + 8], 0
js 0x415732
jns 0x415732
call 0x3b972aa
je 0x41574f
js 0x415739
jns 0x415739
call 0x1b55ab2
jne 0x41573e
je 0x41573e
call 0x8b6563cd
push esp
and al, 8
mov ecx, dword [esp]
mov edx, dword [esp + 8]
push dword [esp + 0x44]
call fcn.00416fcc
pop eax
cmp dword [esp + 0xc], 0
jo 0x415759
jno 0x415759
call 0x22974d1
add byte [eax], al
add byte [eax], al
call 0x1bf5ae5
je 0x415778
call 0x415761
add al, ch
jg 0x415767
jle 0x415767
call 0x8b6563f6
push esp
and al, 0xc
mov ecx, dword [esp]
mov edx, dword [esp + 0xc]
push dword [esp + 0x48]
call fcn.0041865a
pop eax
jp 0x41577d
jnp 0x41577d
call 0x8b65640c
push esp
and al, 0x2c
mov ecx, dword [esp]
mov edx, dword [esp + 0x2c]
push dword [esp + 0x30]
call fcn.00418553
pop eax
mov eax, dword [esp + 4]
cmp byte [eax], 2
jne 0x4157e9
je 0x41579c
jne 0x41579c
call 0x2465a42b
mov ecx, dword [esp + 0x24]
jbe 0x4157a5
ja 0x4157a5
call 0x3c65ac34
mov edx, dword [esp + 0x3c]
call fcn.00417e28
mov eax, dword [esp + 4]
cmp byte [eax], 2
jne 0x4157e9
jnp 0x4157bc
jp 0x4157bc
call 0x1c65a44b
mov ecx, dword [esp + 0x1c]
jle 0x4157c5
jg 0x4157c5
call 0x3865ac54
mov edx, dword [esp + 0x38]
call fcn.00417e28
mov eax, dword [esp + 4]
cmp byte [eax], 2
jne 0x4157e9
jo 0x4157dc
jno 0x4157dc
call 0x1865a46b
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
call fcn.00417e28
jns 0x4157ee
js 0x4157ee
call 0x2065d472
add byte [ebx + edx + 0x7f], dh
add edi, dword [esi + 1]
cmp byte [esp + 0x20], 0
je 0x415808
jg 0x4157fa
jle 0x4157fa
call 0x1065ccfd
push dword [esp + 0x10]
call sub.ntdll.dll_NtClose
jno 0x415808
jo 0x415808
call 0xaf1072
mov ax, 0x6d
jmp 0x413fee
cmp dword [esp + 0x28], 0
jb 0x41581b
jae 0x41581b
call 0x8065e4a9
add byte [eax], al
add byte [edi], cl
xchg ebp, eax
ror byte [eax], 0xc1
mov cl, byte [esp + 0x80]
setne al
or cl, al
test cl, 1
je 0x4159b4
ja 0x415835
jbe 0x415835
call 0x8d658cc4
dec esp
and al, 0x74
mov esi, dword [esp]
lea ecx, [esp + 0x74]
mov edx, esi
call fcn.0041881e
lea ecx, [esp + 0x84]
mov edx, esi
jb 0x415851
jae 0x415851
call 0x71213d
add byte [ecx + 3], bh
call fcn.0041881e
jns 0x41585b
js 0x41585b
call 0x5865acea
mov edx, dword [esp + 0x58]
mov ecx, esi
push dword [esp + 0x5c]
call fcn.0041865a
pop eax
call 0x415871
add al, ch
mov edx, dword [esp + 0x60]
mov ecx, esi
push dword [esp + 0x54]
call fcn.0041865a
pop eax
cmp dword [esp + 0x28], 0
je 0x4158a4
jno 0x41588e
jo 0x41588e
call 0x1bc5c0c
jp 0x415893
jnp 0x415893
call 0x8b656522
push esp
and al, 0x28
mov ecx, dword [esp]
mov edx, dword [esp + 0x28]
push dword [esp + 0x64]
call fcn.0041865a
pop eax
jp 0x4158a9
jnp 0x4158a9
call 0x3465d52d
add byte [ebx + ebx + 0x77], dh
add esi, dword [esi + 1]
cmp byte [esp + 0x34], 0
je 0x4158cb
ja 0x4158b5
jbe 0x4158b5
call 0x1c05c37
jle 0x4158ba
jg 0x4158ba
call 0x8b656549
push esp
and al, 0x4c
mov ecx, dword [esp]
mov edx, dword [esp + 0x4c]
push dword [esp + 0x40]
call fcn.0041868f
pop eax
cmp dword [esp + 8], 0
jne 0x4158d5
je 0x4158d5
call 0x3b7744d
je 0x4158f2
jbe 0x4158dc
ja 0x4158dc
call 0x1bb5c5b
jnp 0x4158e1
jp 0x4158e1
call 0x8b656570
push esp
and al, 8
mov ecx, dword [esp]
mov edx, dword [esp + 8]
push dword [esp + 0x44]
call fcn.00416fcc
pop eax
cmp dword [esp + 0xc], 0
jle 0x4158fc
jg 0x4158fc
call 0x3b17474
je 0x415919
jo 0x415903
jno 0x415903
call 0x1b85c7d
jbe 0x415908
ja 0x415908
call 0x8b656597
push esp
and al, 0xc
mov ecx, dword [esp]
mov edx, dword [esp + 0xc]
push dword [esp + 0x48]
call fcn.0041865a
pop eax
jle 0x41591e
jg 0x41591e
call 0x8b6565ad
push esp
and al, 0x2c
mov ecx, dword [esp]
mov edx, dword [esp + 0x2c]
push dword [esp + 0x30]
call fcn.00418553
pop eax
mov eax, dword [esp + 4]
cmp byte [eax], 2
jne 0x41598c
call 0x41593e
add al, ch
mov ecx, dword [esp + 0x24]
jle 0x415948
jg 0x415948
call 0x3c65add7
mov edx, dword [esp + 0x3c]
call fcn.00417e28
mov eax, dword [esp + 4]
cmp byte [eax], 2
jne 0x41598c
ja 0x41595f
jbe 0x41595f
call 0x1c65a5ee
mov ecx, dword [esp + 0x1c]
jno 0x415968
jo 0x415968
call 0x3865adf7
mov edx, dword [esp + 0x38]
call fcn.00417e28
mov eax, dword [esp + 4]
cmp byte [eax], 2
jne 0x41598c
jae 0x41597f
jb 0x41597f
call 0x1865a60e
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
call fcn.00417e28
jle 0x415991
jg 0x415991
call 0x2065d615
add byte [edi], cl
test byte [ecx + 0x72fffff3], ah
add esi, dword [ebx + 1]
cmp byte [esp + 0x20], 0
je 0x414d3d
jb 0x4159a1
jae 0x4159a1
call 0x1065cea4
push dword [esp + 0x10]
call sub.ntdll.dll_NtClose
jl 0x4159af
jge 0x4159af
call 0x34e39c
push dword [ecx + 3]
jmp 0x414d3d
jno 0x4159b9
jo 0x4159b9
call 0xb865de48
add byte [eax], al
add byte [ebx + 0xbc2494], cl
add byte [eax], al
mov eax, dword [esp + 0xb8]
mov edx, dword [esp + 0xbc]
lea ecx, [esp + 0x1f4]
mov edi, ecx
mov dword [ecx], eax
mov dword [ecx + 4], edx
and dword [ecx + 8], 0
mov word [ecx + 0xc], 0x3b
mov ecx, edi
jnp 0x4159e6
jp 0x4159e6
call 0x7bcdd2
add byte [ebp + 0x44840fc0], al
add al, byte [eax]
add byte [edx + 3], dh
call 0x41945e
test eax, eax
je 0x415c37
jb 0x4159f8
jae 0x4159f8
call 0x7865be7f
add byte [ecx + 0x7f037ed6], cl
add eax, ebp
and dword [esp + 0x78], 0
mov esi, edx
jle 0x415a04
jg 0x415a04
call 0x8d656e93
dec esp
and al, 0x74
mov edx, dword [esp]
lea ecx, [esp + 0x74]
push esi
push eax
call fcn.004187c0
pop ecx
pop edx
test ax, ax
jne 0x415d90
jg 0x415a22
jle 0x415a22
call 0x78659eb1
mov eax, dword [esp + 0x78]
mov edx, dword [esp + 0x74]
jne 0x415a2f
je 0x415a2f
call 0xd865e6c0
add byte [eax], al
add byte [eax - 0x18], dl
int1
aaa
add byte [eax], al
lea ecx, [esp + 0xd8]
push eax
call fcn.0041922d
pop eax
cmp word [esp + 0xdc], 0
jne 0x415aab
jo 0x415a4d
jno 0x415a4d
call 0xd865dedc
add byte [eax], al
add byte [esi + 3], dh
mov eax, dword [esp + 0xd8]
jbe 0x415a59
ja 0x415a59
call 0x7465aeea
lea edx, [esp + 0x74]
mov dword [esp + 0x78], eax
ja 0x415a66
jbe 0x415a66
call 0x536566f5
mov ecx, dword [esp]
push ebx
push ebp
push dword [esp + 0x14]
push dword [esp + 0x14]
push dword [esp + 0x68]
push dword [esp + 0xbc]
push dword [esp + 0xbc]
lea eax, [esp + 0xa0]
push eax
call fcn.0041888e
add esp, 0x20
mov esi, eax
movzx eax, ax
lea ecx, [eax - 8]
cmp ecx, 2
jb 0x415aab
cmp eax, 0x6d
jne 0x415ee9
jnp 0x415ab0
jp 0x415ab0
call fcn.0040859d
push dword [edx + 3]
jmp 0x4159df
jb 0x415aba
jae 0x415aba
call 0x8d658f49
dec esp
and al, 0x74
mov esi, dword [esp]
lea ecx, [esp + 0x74]
mov edx, esi
call fcn.0041881e
lea ecx, [esp + 0x84]
mov edx, esi
jnp 0x415ad6
jp 0x415ad6
call 0x6e9ec2
add al, ch
add dword [eax], eax
add byte [eax], al
call fcn.0041881e
call 0x415ae1
add al, ch
mov edx, dword [esp + 0x58]
mov ecx, esi
push dword [esp + 0x5c]
call fcn.0041865a
pop eax
ja 0x415af7
jbe 0x415af7
call 0x6065af86
mov edx, dword [esp + 0x60]
mov ecx, esi
push dword [esp + 0x54]
call fcn.0041865a
pop eax
cmp dword [esp + 0x28], 0
je 0x415b29
jns 0x415b13
js 0x415b13
call 0x1b15e88
jno 0x415b18
jo 0x415b18
call 0x8b6567a7
push esp
and al, 0x28
mov ecx, dword [esp]
mov edx, dword [esp + 0x28]
push dword [esp + 0x64]
call fcn.0041865a
pop eax
js 0x415b2e
jns 0x415b2e
call 0x3465d7b2
add byte [ebx + ebx + 0x7b], dh
add edi, dword [edx + 1]
cmp byte [esp + 0x34], 0
je 0x415b50
jnp 0x415b3a
jp 0x415b3a
call 0x1b35eb1
jae 0x415b3f
jb 0x415b3f
call 0x8b6567ce
push esp
and al, 0x4c
mov ecx, dword [esp]
mov edx, dword [esp + 0x4c]
push dword [esp + 0x40]
call fcn.0041868f
pop eax
cmp dword [esp + 8], 0
jae 0x415b5a
jb 0x415b5a
call 0x3c076d2
je 0x415b77
jg 0x415b61
jle 0x415b61
call 0x1b65ed9
je 0x415b66
jne 0x415b66
call 0x8b6567f5
push esp
and al, 8
mov ecx, dword [esp]
mov edx, dword [esp + 8]
push dword [esp + 0x44]
call fcn.00416fcc
pop eax
cmp dword [esp + 0xc], 0
jb 0x415b81
jae 0x415b81
call 0x3bf76f9
je 0x415b9e
jle 0x415b88
jg 0x415b88
call 0x1b65f00
je 0x415b8d
jne 0x415b8d
call 0x8b65681c
push esp
and al, 0xc
mov ecx, dword [esp]
mov edx, dword [esp + 0xc]
push dword [esp + 0x48]
call fcn.0041865a
pop eax
jbe 0x415ba3
ja 0x415ba3
call 0x8b656832
push esp
and al, 0x2c
mov ecx, dword [esp]
mov edx, dword [esp + 0x2c]
push dword [esp + 0x30]
call fcn.00418553
pop eax
mov eax, dword [esp + 4]
cmp byte [eax], 2
jne 0x415c0f
jae 0x415bc2
jb 0x415bc2
call 0x2465a851
mov ecx, dword [esp + 0x24]
jg 0x415bcb
jle 0x415bcb
call 0x3c65b05a
mov edx, dword [esp + 0x3c]
call fcn.00417e28
mov eax, dword [esp + 4]
cmp byte [eax], 2
jne 0x415c0f
jno 0x415be2
jo 0x415be2
call 0x1c65a871
mov ecx, dword [esp + 0x1c]
je 0x415beb
jne 0x415beb
call 0x3865b07a
mov edx, dword [esp + 0x38]
call fcn.00417e28
mov eax, dword [esp + 4]
cmp byte [eax], 2
jne 0x415c0f
ja 0x415c02
jbe 0x415c02
call 0x1865a891
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
call fcn.00417e28
jb 0x415c14
jae 0x415c14
call 0x2065d898
add byte [edi], cl
test byte [esi], bl
int1
invalid
cmp byte [esp + 0x20], 0
je 0x414d3d
jb 0x415c24
jae 0x415c24
call 0x1065d127
push dword [esp + 0x10]
call sub.ntdll.dll_NtClose
je 0x415c32
jne 0x415c32
call 0x32631f
invalid
jmp 0x414d3d
jns 0x415c3c
js 0x415c3c
call 0x8d6590cb
dec esp
and al, 0x74
mov esi, dword [esp]
lea ecx, [esp + 0x74]
mov edx, esi
call fcn.0041881e
lea ecx, [esp + 0x84]
mov edx, esi
jl 0x415c58
jge 0x415c58
call 0x6d1e44
add byte [ebx + 3], bh
call fcn.0041881e
jnp 0x415c62
jp 0x415c62
call 0x5865b0f1
mov edx, dword [esp + 0x58]
mov ecx, esi
push dword [esp + 0x5c]
call fcn.0041865a
pop eax
jne 0x415c77
je 0x415c77
call 0x6065b106
mov edx, dword [esp + 0x60]
mov ecx, esi
push dword [esp + 0x54]
call fcn.0041865a
pop eax
cmp byte [esp + 0x34], 0
je 0x415ca9
jb 0x415c93
jae 0x415c93
call 0x1b6600b
je 0x415c98
jne 0x415c98
call 0x8b656927
push esp
and al, 0x4c
mov ecx, dword [esp]
mov edx, dword [esp + 0x4c]
push dword [esp + 0x40]
call fcn.0041868f
pop eax
cmp dword [esp + 8], 0
jge 0x415cb3
jl 0x415cb3
call 0x3bb782b
je 0x415cd0
jp 0x415cba
jnp 0x415cba
call 0x1b2602e
jo 0x415cbf
jno 0x415cbf
call 0x8b65694e
push esp
and al, 8
mov ecx, dword [esp]
mov edx, dword [esp + 8]
push dword [esp + 0x44]
call fcn.00416fcc
pop eax
cmp dword [esp + 0xc], 0
jp 0x415cda
jnp 0x415cda
call 0x3c07852
je 0x415cf7
jg 0x415ce1
jle 0x415ce1
call 0x1ba605d
js 0x415ce6
jns 0x415ce6
call 0x8b656975
push esp
and al, 0xc
mov ecx, dword [esp]
mov edx, dword [esp + 0xc]
push dword [esp + 0x48]
call fcn.0041865a
pop eax
jle 0x415cfc
jg 0x415cfc
call 0x8b65698b
push esp
and al, 0x2c
mov ecx, dword [esp]
mov edx, dword [esp + 0x2c]
push dword [esp + 0x30]
call fcn.00418553
pop eax
mov eax, dword [esp + 4]
cmp byte [eax], 2
jne 0x415d68
ja 0x415d1b
jbe 0x415d1b
call 0x2465a9aa
mov ecx, dword [esp + 0x24]
jbe 0x415d24
ja 0x415d24
call 0x3c65b1b3
mov edx, dword [esp + 0x3c]
call fcn.00417e28
mov eax, dword [esp + 4]
cmp byte [eax], 2
jne 0x415d68
jb 0x415d3b
jae 0x415d3b
call 0x1c65a9ca
mov ecx, dword [esp + 0x1c]
jp 0x415d44
jnp 0x415d44
call 0x3865b1d3
mov edx, dword [esp + 0x38]
call fcn.00417e28
mov eax, dword [esp + 4]
cmp byte [eax], 2
jne 0x415d68
js 0x415d5b
jns 0x415d5b
call 0x1865a9ea
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
call fcn.00417e28
jno 0x415d6d
jo 0x415d6d
call 0x2065d9f1
add byte [edi], cl
test ch, al
out dx, eax
invalid
cmp byte [esp + 0x20], 0
je 0x414d3d
js 0x415d7d
jns 0x415d7d
call 0x1065d280
push dword [esp + 0x10]
call sub.ntdll.dll_NtClose
jle 0x415d8b
jg 0x415d8b
call 0x310b78
invalid
jmp 0x414d3d
jge 0x415d95
jl 0x415d95
call 0x8d659a24
dec esp
and al, 0x74
mov edi, dword [esp]
lea ecx, [esp + 0x74]
mov esi, eax
mov edx, edi
call fcn.0041881e
lea ecx, [esp + 0x84]
mov edx, edi
jl 0x415db3
jge 0x415db3
call 0x6bc49f
add byte [esi + 3], dh
call fcn.0041881e
jbe 0x415dbd
ja 0x415dbd
call 0x5865b24c
mov edx, dword [esp + 0x58]
mov ecx, edi
push dword [esp + 0x5c]
call fcn.0041865a
pop eax
ja 0x415dd2
jbe 0x415dd2
call 0x6065b261
mov edx, dword [esp + 0x60]
mov ecx, edi
push dword [esp + 0x54]
call fcn.0041865a
pop eax
cmp byte [esp + 0x34], 0
je 0x415e04
jp 0x415dee
jnp 0x415dee
call 0x1b46164
jb 0x415df3
jae 0x415df3
call 0x8b656a82
push esp
and al, 0x4c
mov ecx, dword [esp]
mov edx, dword [esp + 0x4c]
push dword [esp + 0x40]
call fcn.0041868f
pop eax
cmp dword [esp + 8], 0
jo 0x415e0e
jno 0x415e0e
call 0x3bd7986
je 0x415e2b
jl 0x415e15
jge 0x415e15
call 0x1c06197
jle 0x415e1a
jg 0x415e1a
call 0x8b656aa9
push esp
and al, 8
mov ecx, dword [esp]
mov edx, dword [esp + 8]
push dword [esp + 0x44]
call fcn.00416fcc
pop eax
cmp dword [esp + 0xc], 0
jne 0x415e35
je 0x415e35
call 0x3ba79ad
je 0x415e52
jns 0x415e3c
js 0x415e3c
call 0x1bc61ba
jp 0x415e41
jnp 0x415e41
call 0x8b656ad0
push esp
and al, 0xc
mov ecx, dword [esp]
mov edx, dword [esp + 0xc]
push dword [esp + 0x48]
call fcn.0041865a
pop eax
jae 0x415e57
jb 0x415e57
call 0x8b656ae6
push esp
and al, 0x2c
mov ecx, dword [esp]
mov edx, dword [esp + 0x2c]
push dword [esp + 0x30]
call fcn.00418553
pop eax
mov eax, dword [esp + 4]
cmp byte [eax], 2
jne 0x415ec3
je 0x415e76
jne 0x415e76
call 0x2465ab05
mov ecx, dword [esp + 0x24]
jno 0x415e7f
jo 0x415e7f
call 0x3c65b30e
mov edx, dword [esp + 0x3c]
call fcn.00417e28
mov eax, dword [esp + 4]
cmp byte [eax], 2
jne 0x415ec3
jnp 0x415e96
jp 0x415e96
call 0x1c65ab25
mov ecx, dword [esp + 0x1c]
jle 0x415e9f
jg 0x415e9f
call 0x3865b32e
mov edx, dword [esp + 0x38]
call fcn.00417e28
mov eax, dword [esp + 4]
cmp byte [eax], 2
jne 0x415ec3
jno 0x415eb6
jo 0x415eb6
call 0x1865ab45
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
call fcn.00417e28
jl 0x415ec8
jge 0x415ec8
call 0x2065db4c
add byte [ebx + edx + 0x75], dh
add esi, dword [ecx + eax - 0x18]
cmp byte [esp + 0x20], 0
je 0x415ee2
jne 0x415ed4
je 0x415ed4
call 0x1065d3d7
push dword [esp + 0x10]
call sub.ntdll.dll_NtClose
jae 0x415ee2
jb 0x415ee2
call 0x62b4f6f
loope 0x415ee7
mov eax, esi
jmp 0x413fee
invalid
inc dword [ebp + 0x64840fc0]
add dword [eax], eax
add byte [ebx - 0x7af08908], al
wait
add eax, dword [eax]
add byte [edx + 3], bh
test eax, eax
je 0x416055
cmp eax, 0x76
jne 0x416295
jp 0x415eff
jnp 0x415eff
call 0x8d65938e
dec esp
and al, 0x74
mov esi, dword [esp]
lea ecx, [esp + 0x74]
mov edx, esi
call fcn.0041881e
lea ecx, [esp + 0x84]
mov edx, esi
jne 0x415f1b
je 0x415f1b
call 0x6a5e07
add byte [ebp + 3], bh
call fcn.0041881e
jge 0x415f25
jl 0x415f25
call 0x5865b3b4
mov edx, dword [esp + 0x58]
mov ecx, esi
push dword [esp + 0x5c]
call fcn.0041865a
pop eax
call 0x415f3b
add al, ch
mov edx, dword [esp + 0x60]
mov ecx, esi
push dword [esp + 0x54]
call fcn.0041865a
pop eax
cmp byte [esp + 0x34], 0
je 0x415f6e
ja 0x415f58
jbe 0x415f58
call 0x1c062da
jle 0x415f5d
jg 0x415f5d
call 0x8b656bec
push esp
and al, 0x4c
mov ecx, dword [esp]
mov edx, dword [esp + 0x4c]
push dword [esp + 0x40]
call fcn.0041868f
pop eax
cmp dword [esp + 8], 0
jo 0x415f78
jno 0x415f78
call 0x3b97af0
je 0x415f95
js 0x415f7f
jns 0x415f7f
call 0x1b162f4
jno 0x415f84
jo 0x415f84
call 0x8b656c13
push esp
and al, 8
mov ecx, dword [esp]
mov edx, dword [esp + 8]
push dword [esp + 0x44]
call fcn.00416fcc
pop eax
cmp dword [esp + 0xc], 0
jle 0x415f9f
jg 0x415f9f
call 0x3b47b17
je 0x415fbc
jae 0x415fa6
jb 0x415fa6
call 0x1b96323
jns 0x415fab
js 0x415fab
call 0x8b656c3a
push esp
and al, 0xc
mov ecx, dword [esp]
mov edx, dword [esp + 0xc]
push dword [esp + 0x48]
call fcn.0041865a
pop eax
jb 0x415fc1
jae 0x415fc1
call 0x8b656c50
push esp
and al, 0x2c
mov ecx, dword [esp]
mov edx, dword [esp + 0x2c]
push dword [esp + 0x30]
call fcn.00418553
pop eax
mov eax, dword [esp + 4]
cmp byte [eax], 2
jne 0x41602d
jle 0x415fe0
jg 0x415fe0
call 0x2465ac6f
mov ecx, dword [esp + 0x24]
jg 0x415fe9
jle 0x415fe9
call 0x3c65b478
mov edx, dword [esp + 0x3c]
call fcn.00417e28
mov eax, dword [esp + 4]
cmp byte [eax], 2
jne 0x41602d
jnp 0x416000
jp 0x416000
call 0x1c65ac8f
mov ecx, dword [esp + 0x1c]
ja 0x416009
jbe 0x416009
call 0x3865b498
mov edx, dword [esp + 0x38]
call fcn.00417e28
mov eax, dword [esp + 4]
cmp byte [eax], 2
jne 0x41602d
je 0x416020
jne 0x416020
call 0x1865acaf
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
call fcn.00417e28
jae 0x416032
jb 0x416032
call 0x2065dcb6
add byte [edi], cl
test bl, cl
idiv edi
invalid
cmp byte [esp + 0x20], 0
je 0x415808
jns 0x416042
js 0x416042
call 0x1065d545
push dword [esp + 0x10]
call sub.ntdll.dll_NtClose
je 0x416050
jne 0x416050
call 0x39143d
invalid
jmp 0x415808
jge 0x41605a
jl 0x41605a
call 0x8d6594e9
dec esp
and al, 0x74
mov esi, dword [esp]
lea ecx, [esp + 0x74]
mov edx, esi
call fcn.0041881e
lea ecx, [esp + 0x84]
mov edx, esi
jl 0x416076
jge 0x416076
call 0x690462
add byte [ebx + 0x14247c], al
call fcn.0041881e
cmp dword [esp + 0x14], 0
je 0x416098
jo 0x416087
jno 0x416087
call 0x5065ad16
mov ecx, dword [esp + 0x50]
mov eax, dword [esp + 0x14]
mov byte [ecx + 0x14], 1
mov dword [ecx + 0x10], eax
jmp 0x4160a9
jnp 0x41609d
jp 0x41609d
call 0x5065a52c
mov eax, dword [esp + 0x50]
and dword [eax + 0x14], 0
and dword [eax + 0x10], 0
jb 0x4160ae
jae 0x4160ae
call 0x1c65a53d
mov eax, dword [esp + 0x1c]
test eax, eax
je 0x4160c8
jge 0x4160bb
jl 0x4160bb
call 0x5065ad4a
mov ecx, dword [esp + 0x50]
mov byte [ecx + 0x1c], 1
mov dword [ecx + 0x18], eax
jmp 0x4160d9
ja 0x4160cd
jbe 0x4160cd
call 0x5065a55c
mov eax, dword [esp + 0x50]
and dword [eax + 0x1c], 0
and dword [eax + 0x18], 0
jge 0x4160de
jl 0x4160de
call 0x2465a56d
mov eax, dword [esp + 0x24]
test eax, eax
je 0x4160f8
jle 0x4160eb
jg 0x4160eb
call 0x5065ad7a
mov ecx, dword [esp + 0x50]
mov byte [ecx + 0x24], 1
mov dword [ecx + 0x20], eax
jmp 0x416109
jne 0x4160fd
je 0x4160fd
call 0x5065a58c
mov eax, dword [esp + 0x50]
and dword [eax + 0x24], 0
and dword [eax + 0x20], 0
jno 0x41610e
jo 0x41610e
call 0x84517104
and al, 0xb4
add dword [eax], eax
add byte [ebx - 0xdafdbbc], cl
movups xmmword [eax], xmm0
movsd xmm0, qword [esp + 0x1b4]
mov eax, dword [esp + 0x50]
movsd qword [eax], xmm0
jae 0x416124
jb 0x416124
call 0x6dc1ab
and dword [eax + 0x2c], 0
and dword [eax + 0x28], 0
and dword [eax + 0x34], 0
and dword [eax + 0x30], 0
cmp byte [eax + 0x84], 2
jne 0x416150
jbe 0x416142
ja 0x416142
call 0x1865d645
push dword [esp + 0x18]
call sub.ntdll.dll_NtClose
jae 0x416150
jb 0x416150
call 0x1b764cb
ja 0x416155
jbe 0x416155
call 0x5065a5e4
mov eax, dword [esp + 0x50]
cmp byte [eax + 0x86], 2
jne 0x416175
jb 0x416167
jae 0x416167
call 0x3c65d66a
push dword [esp + 0x3c]
call sub.ntdll.dll_NtClose
jbe 0x416175
ja 0x416175
call 0x1ba64f1
js 0x41617a
jns 0x41617a
call 0x5065a609
mov eax, dword [esp + 0x50]
cmp byte [eax + 0x85], 2
jne 0x41619a
jo 0x41618c
jno 0x41618c
call 0x3865d68f
push dword [esp + 0x38]
call sub.ntdll.dll_NtClose
jb 0x41619a
jae 0x41619a
call 0x1b86514
jbe 0x41619f
ja 0x41619f
call 0x8b65962e
push esp
and al, 0x58
mov esi, dword [esp]
mov edx, dword [esp + 0x58]
mov ecx, esi
push dword [esp + 0x5c]
call fcn.0041865a
pop eax
jle 0x4161b7
jg 0x4161b7
call 0x6065b646
mov edx, dword [esp + 0x60]
mov ecx, esi
push dword [esp + 0x54]
call fcn.0041865a
pop eax
cmp dword [esp + 0x28], 0
je 0x4161e9
jae 0x4161d3
jb 0x4161d3
call 0x1b5654c
jne 0x4161d8
je 0x4161d8
call 0x8b656e67
push esp
and al, 0x28
mov ecx, dword [esp]
mov edx, dword [esp + 0x28]
push dword [esp + 0x64]
call fcn.0041865a
pop eax
js 0x4161ee
jns 0x4161ee
call 0x3465de72
add byte [ebx + ebx + 0x7c], dh
add edi, dword [ebp + 1]
cmp byte [esp + 0x34], 0
je 0x416210
jl 0x4161fa
jge 0x4161fa
call 0x1b76575
ja 0x4161ff
jbe 0x4161ff
call 0x8b656e8e
push esp
and al, 0x4c
mov ecx, dword [esp]
mov edx, dword [esp + 0x4c]
push dword [esp + 0x40]
call fcn.0041868f
pop eax
cmp dword [esp + 8], 0
jo 0x41621a
jno 0x41621a
call 0x3b27d92
je 0x416237
jno 0x416221
jo 0x416221
call 0x1b16596
jno 0x416226
jo 0x416226
call 0x8b656eb5
push esp
and al, 8
mov ecx, dword [esp]
mov edx, dword [esp + 8]
push dword [esp + 0x44]
call fcn.00416fcc
pop eax
cmp dword [esp + 0xc], 0
jae 0x416241
jb 0x416241
call 0x3be7db9
je 0x41625e
jge 0x416248
jl 0x416248
call 0x1b965c5
jns 0x41624d
js 0x41624d
call 0x8b656edc
push esp
and al, 0xc
mov ecx, dword [esp]
mov edx, dword [esp + 0xc]
push dword [esp + 0x48]
call fcn.0041865a
pop eax
jge 0x416263
jl 0x416263
call 0x8b656ef2
push esp
and al, 0x2c
mov ecx, dword [esp]
mov edx, dword [esp + 0x2c]
push dword [esp + 0x30]
call fcn.00418553
pop eax
cmp byte [esp + 0x20], 0
je 0x41628e
je 0x416280
jne 0x416280
call 0x1065d783
push dword [esp + 0x10]
call sub.ntdll.dll_NtClose
jl 0x41628e
jge 0x41628e
call 0x5a2b22c3
invalid
xor eax, eax
jmp 0x413fee
jge 0x41629a
jl 0x41629a
call 0x8d659f29
dec esp
and al, 0x74
mov edi, dword [esp]
lea ecx, [esp + 0x74]
mov edx, edi
call fcn.0041881e
lea ecx, [esp + 0x84]
mov edx, edi
jo 0x4162b6
jno 0x4162b6
call 0x66c6a2
add al, ch
add dword [eax], eax
add byte [eax], al
call fcn.0041881e
call 0x4162c1
add al, ch
mov edx, dword [esp + 0x58]
mov ecx, edi
push dword [esp + 0x5c]
call fcn.0041865a
pop eax
jle 0x4162d7
jg 0x4162d7
call 0x6065b766
mov edx, dword [esp + 0x60]
mov ecx, edi
push dword [esp + 0x54]
call fcn.0041865a
pop eax
cmp byte [esp + 0x34], 0
je 0x416309
jp 0x4162f3
jnp 0x4162f3
call 0x1c06675
jle 0x4162f8
jg 0x4162f8
call 0x8b656f87
push esp
and al, 0x4c
mov ecx, dword [esp]
mov edx, dword [esp + 0x4c]
push dword [esp + 0x40]
call fcn.0041868f
pop eax
cmp dword [esp + 8], 0
jno 0x416313
jo 0x416313
call 0x3b77e8b
je 0x416330
jbe 0x41631a
ja 0x41631a
call 0x1b46690
jb 0x41631f
jae 0x41631f
call 0x8b656fae
push esp
and al, 8
mov ecx, dword [esp]
mov edx, dword [esp + 8]
push dword [esp + 0x44]
call fcn.00416fcc
pop eax
cmp dword [esp + 0xc], 0
jo 0x41633a
jno 0x41633a
call 0x3bd7eb2
je 0x416357
jl 0x416341
jge 0x416341
call 0x1b866bb
jbe 0x416346
ja 0x416346
call 0x8b656fd5
push esp
and al, 0xc
mov ecx, dword [esp]
mov edx, dword [esp + 0xc]
push dword [esp + 0x48]
call fcn.0041865a
pop eax
je 0x41635c
jne 0x41635c
call 0x8b656feb
push esp
and al, 0x2c
mov ecx, dword [esp]
mov edx, dword [esp + 0x2c]
push dword [esp + 0x30]
call fcn.00418553
pop eax
mov eax, dword [esp + 4]
cmp byte [eax], 2
jne 0x4163c8
jns 0x41637b
js 0x41637b
call 0x2465b00a
mov ecx, dword [esp + 0x24]
jns 0x416384
js 0x416384
call 0x3c65b813
mov edx, dword [esp + 0x3c]
call fcn.00417e28
mov eax, dword [esp + 4]
cmp byte [eax], 2
jne 0x4163c8
jbe 0x41639b
ja 0x41639b
call 0x1c65b02a
mov ecx, dword [esp + 0x1c]
jno 0x4163a4
jo 0x4163a4
call 0x3865b833
mov edx, dword [esp + 0x38]
call fcn.00417e28
mov eax, dword [esp + 4]
cmp byte [eax], 2
jne 0x4163c8
jae 0x4163bb
jb 0x4163bb
call 0x1865b04a
mov ecx, dword [esp + 0x18]
mov edx, dword [esp + 0x14]
call fcn.00417e28
jl 0x4163cd
jge 0x4163cd
call 0x2065e051
add byte [edi], cl
test byte [edx], cl
sti
invalid
cmp byte [esp + 0x20], 0
je 0x415ee2
jnp 0x4163dd
jp 0x4163dd
call 0x1065d8e0
push dword [esp + 0x10]
call sub.ntdll.dll_NtClose
call 0x4163ec
add al, ch
jmp 0x415ee2