Function at 0x424770
Capabilities:
Acquire debug privileges
Contain obfuscated stackstrings
Encode data using xor
Manipulate console buffer
Terminate process

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff0
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x4872eb
mov eax, dword fs:[0]
push eax
push ebx
sub esp, 0x2e8
mov eax, dword [0x4a1400]
xor eax, ebp
mov dword [ebp - 0x14], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
xor edi, edi
nop dword [eax]
nop word [eax + eax]
mov eax, dword [edi + 0x6301dc]
xor cl, cl
mov edx, dword [edi + 0x6301d8]
mov dword [ebp - 0xec], eax
xor al, al
mov dword [ebp - 0xf4], edx
xor esi, esi
mov byte [ebp - 0x269], cl
test esi, esi
je 0x424807
cmp dword [esi*8 + 0x630160], edx
jne 0x424807
mov eax, dword [esi*8 + 0x630164]
mov byte [ebp - 0x269], 1
call eax
mov edx, dword [ebp - 0xf4]
inc esi
cmp esi, 0xd
jl 0x4247e4
mov cl, byte [ebp - 0x269]
test cl, cl
jne 0x42481b
xor al, al
jmp 0x424876
test al, al
je 0x424876
mov edx, dword [ebp - 0xec]
test edx, edx
jne 0x42482d
mov al, 1
jmp 0x424876
xor cl, cl
mov esi, 0x630164
mov byte [ebp - 0x269], cl
xor al, al
nop dword [eax]
cmp dword [esi - 4], edx
jne 0x42485b
mov eax, dword [esi]
mov byte [ebp - 0x269], 1
call eax
mov edx, dword [ebp - 0xec]
test al, al
sete al
add esi, 8
cmp esi, 0x6301cc
jl 0x424840
mov cl, byte [ebp - 0x269]
xor edx, edx
test cl, cl
movzx eax, al
cmove eax, edx
push dword [edi + 0x6301cc]
mov byte [edi + 0x6301e1], al
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
test eax, eax
jne 0x424894
mov byte [edi + 0x6301e0], al
jmp 0x4248b2
push dword [edi + 0x6301d0]
push eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
test eax, eax
mov dword [edi + 0x6301e4], eax
setne al
mov byte [edi + 0x6301e0], al
add edi, 0x20
cmp edi, 0x360
jb 0x4247c0
lea eax, [ebp - 0xe4]
xor esi, esi
push eax
push 8
mov dword [ebp - 0xe4], esi
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.ADVAPI32.dll_OpenProcessToken]
test eax, eax
je 0x424914
lea eax, [ebp - 0xf4]
mov dword [ebp - 0xf4], 4
push eax
push 4
lea eax, [ebp - 0xec]
push eax
push 0x14
push dword [ebp - 0xe4]
call dword [sym.imp.ADVAPI32.dll_GetTokenInformation]
test eax, eax
cmovne esi, dword [ebp - 0xec]
mov eax, dword [ebp - 0xe4]
mov edi, dword [sym.imp.KERNEL32.dll_CloseHandle]
test eax, eax
je 0x424927
push eax
call edi
test esi, esi
je 0x4276a4
call dword [sym.imp.KERNEL32.dll_GetCurrentThread]
mov esi, eax
xor ecx, ecx
mov edx, 0x6301c8
nop
cmp dword [edx], 0x11
je 0x424950
inc ecx
add edx, 0x20
cmp ecx, 0x1b
jb 0x424940
jmp 0x424973
shl ecx, 5
cmp byte [ecx + 0x6301e0], 0
je 0x424973
mov eax, dword [ecx + 0x6301e4]
test eax, eax
je 0x424973
test esi, esi
je 0x424973
push 0
push 0
push 0x11
push esi
call eax
push 0x423a10
lea ecx, [ebp - 0x180]
call fcn.004203a0
push 0x423bf0
lea ecx, [ebp - 0x188]
mov dword [ebp - 4], 0
call fcn.004203a0
mov byte [ebp - 4], 1
call fcn.0041fda0
mov dword [ebp - 0x98], 0x5ab32c46
xorps xmm0, xmm0
mov dword [ebp - 0x94], 0x58201758
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x11c], ecx
mov dword [ebp - 0x120], eax
mov dword [ebp - 0x98], 0x66997a14
mov dword [ebp - 0x94], 0xf017dfef
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x114], ecx
mov dword [ebp - 0x118], eax
mov dword [ebp - 0x98], 0x60277695
mov dword [ebp - 0x94], 0x6348cf1
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x10c], ecx
mov dword [ebp - 0x110], eax
mov dword [ebp - 0x98], 0x5df65d24
mov dword [ebp - 0x94], 0x760b9f92
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x104], ecx
mov dword [ebp - 0x108], eax
mov dword [ebp - 0x98], 0x34dd4305
mov dword [ebp - 0x94], 0x3154743d
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x28c], ecx
mov dword [ebp - 0x290], eax
mov dword [ebp - 0x98], 0x12b91d7a
mov dword [ebp - 0x94], 0x9564ff80
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x284], ecx
mov dword [ebp - 0x288], eax
mov dword [ebp - 0x98], 0x124200e7
mov dword [ebp - 0x94], 0xc1aa2df
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x27c], ecx
mov dword [ebp - 0x280], eax
mov dword [ebp - 0x98], 0x5df65d24
mov dword [ebp - 0x94], 0x760b9f92
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
movaps xmm1, xmmword [ebp - 0x120]
xorps xmm1, xmmword [ebp - 0x290]
movaps xmmword [ebp - 0x120], xmm1
movaps xmm1, xmmword [ebp - 0x110]
mov dword [ebp - 0x274], ecx
lea ecx, [ebp - 0x120]
mov dword [ebp - 0x278], eax
lea edx, [ecx + 1]
xorps xmm1, xmmword [ebp - 0x280]
movaps xmmword [ebp - 0x110], xmm1
movups xmmword [ebp - 0xd8], xmm0
mov dword [ebp - 0xc8], 0
mov dword [ebp - 0xc4], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x424b54
sub ecx, edx
lea eax, [ebp - 0x120]
push ecx
push eax
lea ecx, [ebp - 0xd8]
call fcn.00412900
mov edx, 7
mov byte [ebp - 4], 2
lea ecx, [ebp - 0xd8]
call fcn.00420180
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0xc4]
cmp ecx, 0xf
jbe 0x424bc4
mov edx, dword [ebp - 0xd8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x424bba
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x424bba
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.00483cf3
add esp, 8
mov dword [ebp - 0xc8], 0
mov dword [ebp - 0xc4], 0xf
mov byte [ebp - 0xd8], 0
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call edi
test eax, eax
jne 0x424bf3
push eax
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_exit]
push 0x424290
lea ecx, [ebp - 0x2f8]
call fcn.004203a0
mov esi, eax
mov byte [ebp - 4], 3
cmp dword [esi + 4], 0
je 0x42769c
push dword [esi + 4]
push dword [esi]
call dword [sym.imp.MSVCP140.dll__Thrd_detach]
add esp, 8
test eax, eax
jne 0x42769c
mov dword [esi], eax
mov dword [esi + 4], eax
mov byte [ebp - 4], 1
cmp dword [ebp - 0x2f4], eax
je 0x424c40
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll_terminate]
call fcn.004226b0
call fcn.004234e0
call fcn.00423340
call fcn.00423070
call fcn.00422da0
mov ecx, 0x6311d8
call fcn.00404f90
cmp byte [0x631370], 0
je 0x425315
mov dword [ebp - 0x98], 0x5ca93644
xorps xmm0, xmm0
mov dword [ebp - 0x94], 0x58201a58
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x11c], ecx
mov dword [ebp - 0x120], eax
mov dword [ebp - 0x98], 0x7bcd7c19
mov dword [ebp - 0x94], 0xbb4a91ef
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x114], ecx
mov dword [ebp - 0x118], eax
mov dword [ebp - 0x98], 0x12420ac9
mov dword [ebp - 0x94], 0xc1aa2df
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x10c], ecx
mov dword [ebp - 0x110], eax
mov dword [ebp - 0x98], 0x5df65d24
mov dword [ebp - 0x94], 0x760b9f92
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x104], ecx
mov dword [ebp - 0x108], eax
mov dword [ebp - 0x98], 0x34dd4305
mov dword [ebp - 0x94], 0x3154743d
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x28c], ecx
mov dword [ebp - 0x290], eax
mov dword [ebp - 0x98], 0x12b91d7a
mov dword [ebp - 0x94], 0x9564ff80
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x284], ecx
mov dword [ebp - 0x288], eax
mov dword [ebp - 0x98], 0x124200e7
mov dword [ebp - 0x94], 0xc1aa2df
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x27c], ecx
mov dword [ebp - 0x280], eax
mov dword [ebp - 0x98], 0x5df65d24
mov dword [ebp - 0x94], 0x760b9f92
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
movaps xmm1, xmmword [ebp - 0x120]
xorps xmm1, xmmword [ebp - 0x290]
mov dword [ebp - 0x274], ecx
lea ecx, [ebp - 0x120]
movaps xmmword [ebp - 0x120], xmm1
lea edx, [ecx + 1]
mov dword [ebp - 0x278], eax
movaps xmm1, xmmword [ebp - 0x280]
xorps xmm1, xmmword [ebp - 0x110]
movaps xmmword [ebp - 0x110], xmm1
movups xmmword [ebp - 0xd8], xmm0
mov dword [ebp - 0xc8], 0
mov dword [ebp - 0xc4], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x424e21
sub ecx, edx
lea eax, [ebp - 0x120]
push ecx
push eax
lea ecx, [ebp - 0xd8]
call fcn.00412900
mov edx, 7
mov byte [ebp - 4], 4
lea ecx, [ebp - 0xd8]
call fcn.00420180
mov byte [ebp - 4], 1
mov ecx, dword [ebp - 0xc4]
cmp ecx, 0xf
jbe 0x424e91
mov edx, dword [ebp - 0xd8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x424e87
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x424e87
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.00483cf3
add esp, 8
xorps xmm0, xmm0
mov dword [ebp - 0xc8], 0
movups xmmword [ebp - 0x148], xmm0
mov dword [ebp - 0xc4], 0xf
mov byte [ebp - 0xd8], 0
mov dword [ebp - 0x138], 0
mov dword [ebp - 0x134], 0xf
mov byte [ebp - 0x148], 0
mov byte [ebp - 4], 5
xorps xmm0, xmm0
mov dword [ebp - 0x98], 0x5ca93664
mov dword [ebp - 0x94], 0x5a3b0013
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0xbc], ecx
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0x98], 0x12b9731f
mov dword [ebp - 0x94], 0x9564ff80
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0xb4], ecx
mov dword [ebp - 0xb8], eax
mov dword [ebp - 0x98], 0x34dd4305
mov dword [ebp - 0x94], 0x3154743d
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x98], 0x12b91d7a
mov dword [ebp - 0x94], 0x9564ff80
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
movaps xmm1, xmmword [ebp - 0xc0]
mov dword [ebp - 0x24], ecx
lea ecx, [ebp - 0xc0]
mov dword [ebp - 0x28], eax
lea edx, [ecx + 1]
xorps xmm1, xmmword [ebp - 0x30]
movaps xmmword [ebp - 0xc0], xmm1
movups xmmword [ebp - 0xd8], xmm0
mov dword [ebp - 0xc8], 0
mov dword [ebp - 0xc4], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x424fb2
sub ecx, edx
lea eax, [ebp - 0xc0]
push ecx
push eax
lea ecx, [ebp - 0xd8]
call fcn.00412900
mov byte [ebp - 4], 6
lea eax, [ebp - 0xd8]
cmp dword [ebp - 0xc4], 0xf
push dword [ebp - 0xc8]
cmova eax, dword [ebp - 0xd8]
push eax
call fcn.00483322
mov edx, eax
lea ecx, [ebp - 0x288]
call fcn.00403fc0
add esp, 8
lea ecx, [ebp - 0x288]
mov byte [ebp - 4], 7
call fcn.00404c60
mov byte [ebp - 4], 6
mov ecx, dword [ebp - 0x274]
mov byte [ebp - 0x269], al
cmp ecx, 7
jbe 0x42505d
mov edx, dword [ebp - 0x288]
lea ecx, [ecx*2 + 2]
mov eax, edx
cmp ecx, 0x1000
jb 0x425053
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x425053
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.00483cf3
add esp, 8
xor eax, eax
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0xc4]
mov dword [ebp - 0x278], 0
mov dword [ebp - 0x274], 7
mov word [ebp - 0x288], ax
cmp ecx, 0xf
jbe 0x4250ba
mov edx, dword [ebp - 0xd8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4250b0
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x4250b0
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.00483cf3
add esp, 8
cmp byte [ebp - 0x269], 0
xorps xmm0, xmm0
mov edi, dword [sym.imp.KERNEL32.dll_GetStdHandle]
mov dword [ebp - 0xc8], 0
mov dword [ebp - 0xc4], 0xf
mov byte [ebp - 0xd8], 0
je 0x425329
mov dword [ebp - 0x98], 0x5ca93664
mov dword [ebp - 0x94], 0x5a3b0013
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0xbc], ecx
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0x98], 0x12b9731f
mov dword [ebp - 0x94], 0x9564ff80
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0xb4], ecx
mov dword [ebp - 0xb8], eax
mov dword [ebp - 0x98], 0x34dd4305
mov dword [ebp - 0x94], 0x3154743d
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x98], 0x12b91d7a
mov dword [ebp - 0x94], 0x9564ff80
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
movaps xmm1, xmmword [ebp - 0xc0]
mov dword [ebp - 0x24], ecx
lea ecx, [ebp - 0xc0]
mov dword [ebp - 0x28], eax
lea edx, [ecx + 1]
xorps xmm1, xmmword [ebp - 0x30]
movaps xmmword [ebp - 0xc0], xmm1
movups xmmword [ebp - 0xd8], xmm0
mov dword [ebp - 0xc8], 0
mov dword [ebp - 0xc4], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4251c5
sub ecx, edx
lea eax, [ebp - 0xc0]
push ecx
push eax
lea ecx, [ebp - 0xd8]
call fcn.00412900
lea edx, [ebp - 0xd8]
mov byte [ebp - 4], 8
lea ecx, [ebp - 0x288]
call fcn.00427bd0
push eax
lea ecx, [ebp - 0x148]
call fcn.0040efb0
mov ecx, dword [ebp - 0x274]
cmp ecx, 0xf
jbe 0x425238
mov edx, dword [ebp - 0x288]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x42522e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x425283
push ecx
push edx
call fcn.00483cf3
add esp, 8
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0xc4]
mov dword [ebp - 0x278], 0
mov dword [ebp - 0x274], 0xf
mov byte [ebp - 0x288], 0
cmp ecx, 0xf
jbe 0x425293
mov edx, dword [ebp - 0xd8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x425289
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x425289
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.00483cf3
add esp, 8
mov ecx, dword [ebp - 0x138]
mov dword [ebp - 0xc8], 0
mov dword [ebp - 0xc4], 0xf
mov byte [ebp - 0xd8], 0
test ecx, ecx
je 0x4252ed
mov edx, dword [ebp - 0x134]
lea eax, [ebp - 0x148]
mov esi, dword [ebp - 0x148]
cmp edx, 0xf
cmova eax, esi
dec ecx
cmp byte [ecx + eax], 0xa
jne 0x4252ed
cmp edx, 0xf
mov dword [ebp - 0x138], ecx
lea eax, [ebp - 0x148]
cmova eax, esi
mov byte [ecx + eax], 0
sub esp, 0x18
lea eax, [ebp - 0x148]
mov ecx, esp
push eax
call fcn.0040f070
mov ecx, 0x6311d8
call fcn.004082a0
cmp byte [0x631370], 0
jne 0x4256d3
mov edx, 0xc
mov ecx, 0x631374
call fcn.00420180
jmp 0x42707c
mov dword [ebp - 0x98], 0x51be2a49
mov dword [ebp - 0x94], 0x11310753
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0xbc], ecx
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0x98], 0x28c07831
mov dword [ebp - 0x94], 0x9564ffa0
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0xb4], ecx
mov dword [ebp - 0xb8], eax
mov dword [ebp - 0x98], 0x34dd4305
mov dword [ebp - 0x94], 0x3154743d
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x98], 0x12b91d7a
mov dword [ebp - 0x94], 0x9564ff80
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x24], ecx
lea ecx, [ebp - 0xc0]
mov dword [ebp - 0x28], eax
lea edx, [ecx + 1]
movaps xmm1, xmmword [ebp - 0x30]
xorps xmm1, xmmword [ebp - 0xc0]
movaps xmmword [ebp - 0xc0], xmm1
movups xmmword [ebp - 0xd8], xmm0
mov dword [ebp - 0xc8], 0
mov dword [ebp - 0xc4], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x425403
sub ecx, edx
lea eax, [ebp - 0xc0]
push ecx
push eax
lea ecx, [ebp - 0xd8]
call fcn.00412900
mov edx, 7
mov byte [ebp - 4], 9
lea ecx, [ebp - 0xd8]
call fcn.00420180
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0xc4]
cmp ecx, 0xf
jbe 0x425473
mov edx, dword [ebp - 0xd8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x425469
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x425469
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.00483cf3
add esp, 8
push 0xfffffffffffffff5
mov dword [ebp - 0xc8], 0
mov dword [ebp - 0xc4], 0xf
mov byte [ebp - 0xd8], 0
call edi
push 9
push eax
call dword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov esi, dword [sym.imp.MSVCP140.dll_class_std::basic_istream_char__struct_std::char_traits_char___std::cin]
push 0xa
mov eax, dword [esi]
mov ecx, dword [eax + 4]
add ecx, esi
call dword [sym.imp.MSVCP140.dll_public:_char___thiscall_std::basic_ios_char__struct_std::char_traits_char__::widen_char_const]
movzx eax, al
lea edx, [ebp - 0x148]
push eax
mov ecx, esi
call fcn.00417430
sub esp, 0x14
lea eax, [ebp - 0x148]
mov ecx, esp
push eax
call fcn.0040f070
mov ecx, 0x6311d8
call fcn.004082a0
cmp byte [0x631370], 0
je 0x425315
mov dword [ebp - 0x98], 0x5ca93664
mov dword [ebp - 0x94], 0x5a3b0013
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0xbc], ecx
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0x98], 0x12b9731f
mov dword [ebp - 0x94], 0x9564ff80
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0xb4], ecx
mov dword [ebp - 0xb8], eax
mov dword [ebp - 0x98], 0x34dd4305
mov dword [ebp - 0x94], 0x3154743d
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x98], 0x12b91d7a
mov dword [ebp - 0x94], 0x9564ff80
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
movaps xmm0, xmmword [ebp - 0xc0]
mov dword [ebp - 0x24], ecx
lea ecx, [ebp - 0xc0]
mov dword [ebp - 0x28], eax
lea edx, [ecx + 1]
xorps xmm0, xmmword [ebp - 0x30]
movaps xmmword [ebp - 0xc0], xmm0
xorps xmm0, xmm0
movups xmmword [ebp - 0xd8], xmm0
mov dword [ebp - 0xc8], 0
mov dword [ebp - 0xc4], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4255c6
sub ecx, edx
lea eax, [ebp - 0xc0]
push ecx
push eax
lea ecx, [ebp - 0xd8]
call fcn.00412900
push 0xb0
lea eax, [ebp - 0x268]
mov byte [ebp - 4], 0xa
push 0
push eax
call sub.VCRUNTIME140.dll_memset
add esp, 4
lea eax, [ebp - 0xd8]
lea ecx, [ebp - 0x268]
push 2
push eax
call fcn.0040c550
mov byte [ebp - 4], 0xb
cmp dword [ebp - 0x218], 0
je 0x42566d
cmp dword [ebp - 0x134], 0xf
lea edx, [ebp - 0x148]
push dword [ebp - 0x138]
cmova edx, dword [ebp - 0x148]
lea ecx, [ebp - 0x268]
call fcn.004177b0
add esp, 4
lea ecx, [ebp - 0x264]
call fcn.00410010
test eax, eax
jne 0x42566d
mov eax, dword [ebp - 0x268]
lea ecx, [ebp - 0x268]
push 0
push 2
add ecx, dword [eax + 4]
call dword [sym.imp.MSVCP140.dll_public:_void___thiscall_std::basic_ios_char__struct_std::char_traits_char__::setstate_int__bool_]
lea ecx, [ebp - 0x268]
call fcn.0040c240
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0xc4]
cmp ecx, 0xf
jbe 0x4256b8
mov edx, dword [ebp - 0xd8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4256ae
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x4256ae
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.00483cf3
add esp, 8
mov dword [ebp - 0xc8], 0
mov dword [ebp - 0xc4], 0xf
mov byte [ebp - 0xd8], 0
mov esi, dword [sym.imp.KERNEL32.dll_Sleep]
push 0x3e8
call esi
mov dword [ebp - 0x98], 0x14a82c5c
mov dword [ebp - 0x94], 0x54221555
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x2f0], eax
mov dword [ebp - 0x2ec], ecx
mov dword [ebp - 0x98], 0x71cc6e5a
mov dword [ebp - 0x94], 0xe6179ae3
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x2e8], eax
mov dword [ebp - 0x2e4], ecx
mov dword [ebp - 0x98], 0x7e2e7581
mov dword [ebp - 0x94], 0x637682a6
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x2e0], eax
mov dword [ebp - 0x2dc], ecx
mov dword [ebp - 0x98], 0x39933a43
mov dword [ebp - 0x94], 0x5865f6b2
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x2d8], eax
mov dword [ebp - 0x2d4], ecx
mov dword [ebp - 0x98], 0x83f80103
mov dword [ebp - 0x94], 0xa2006e39
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x2d0], eax
mov dword [ebp - 0x2cc], ecx
mov dword [ebp - 0x98], 0xc522a28e
mov dword [ebp - 0x94], 0x4c97ce2c
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x2c8], eax
mov dword [ebp - 0x2c4], ecx
mov dword [ebp - 0x98], 0x34dd4305
mov dword [ebp - 0x94], 0x3154743d
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x130], eax
mov dword [ebp - 0x12c], ecx
mov dword [ebp - 0x98], 0x12b91d7a
mov dword [ebp - 0x94], 0x9564ff80
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x128], eax
mov dword [ebp - 0x124], ecx
mov dword [ebp - 0x98], 0x124200e7
mov dword [ebp - 0x94], 0xc1aa2df
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x120], eax
mov dword [ebp - 0x11c], ecx
mov dword [ebp - 0x98], 0x5df65d24
mov dword [ebp - 0x94], 0x760b9f92
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x118], eax
mov dword [ebp - 0x114], ecx
mov dword [ebp - 0x98], 0x83f80109
mov dword [ebp - 0x94], 0xa2006e39
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x110], eax
mov dword [ebp - 0x10c], ecx
mov dword [ebp - 0x98], 0xc522a28e
mov dword [ebp - 0x94], 0x4c97ce2c
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
movaps xmm1, xmmword [ebp - 0x130]
xorps xmm1, xmmword [ebp - 0x2f0]
movaps xmmword [ebp - 0x2f0], xmm1
movaps xmm1, xmmword [ebp - 0x120]
xorps xmm1, xmmword [ebp - 0x2e0]
mov dword [ebp - 0x108], eax
mov dword [ebp - 0x104], ecx
movaps xmmword [ebp - 0x2e0], xmm1
movaps xmm1, xmmword [ebp - 0x2d0]
lea ecx, [ebp - 0x2f0]
xorps xmm1, xmmword [ebp - 0x110]
lea edx, [ecx + 1]
xorps xmm0, xmm0
movaps xmmword [ebp - 0x2d0], xmm1
movups xmmword [ebp - 0xd8], xmm0
mov dword [ebp - 0xc8], 0
mov dword [ebp - 0xc4], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x425956
sub ecx, edx
lea eax, [ebp - 0x2f0]
push ecx
push eax
lea ecx, [ebp - 0xd8]
call fcn.00412900
mov edx, 0xa
mov byte [ebp - 4], 0xc
lea ecx, [ebp - 0xd8]
call fcn.00420180
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0xc4]
cmp ecx, 0xf
jbe 0x4259c6
mov edx, dword [ebp - 0xd8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4259bc
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x4259bc
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.00483cf3
add esp, 8
push 0x5dc
mov dword [ebp - 0xc8], 0
mov dword [ebp - 0xc4], 0xf
mov byte [ebp - 0xd8], 0
call esi
push 0xfffffffffffffff5
call edi
mov edi, eax
xor eax, eax
mov dword [ebp - 0xec], eax
lea eax, [ebp - 0x160]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_GetConsoleScreenBufferInfo]
movsx eax, word [ebp - 0x15e]
movsx ecx, word [ebp - 0x160]
mov esi, dword [ebp - 0xec]
imul ecx, eax
lea eax, [ebp - 0xf4]
push eax
push esi
push ecx
push 0x20
push edi
call dword [sym.imp.KERNEL32.dll_FillConsoleOutputCharacterA]
push esi
push edi
call dword [sym.imp.KERNEL32.dll_SetConsoleCursorPosition]
mov esi, dword [sym.imp.KERNEL32.dll_Sleep]
push 0x1f4
call esi
mov dword [ebp - 0x98], 0x57b12652
xorps xmm0, xmm0
mov dword [ebp - 0x94], 0x10311952
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0xbc], ecx
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0x98], 0x12b91d70
mov dword [ebp - 0x94], 0x9564ff80
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0xb4], ecx
mov dword [ebp - 0xb8], eax
mov dword [ebp - 0x98], 0x34dd4305
mov dword [ebp - 0x94], 0x3154743d
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x98], 0x12b91d7a
mov dword [ebp - 0x94], 0x9564ff80
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
movaps xmm1, xmmword [ebp - 0xc0]
mov dword [ebp - 0x24], ecx
lea ecx, [ebp - 0xc0]
mov dword [ebp - 0x28], eax
lea edx, [ecx + 1]
xorps xmm1, xmmword [ebp - 0x30]
movaps xmmword [ebp - 0xc0], xmm1
movups xmmword [ebp - 0xd8], xmm0
mov dword [ebp - 0xc8], 0
mov dword [ebp - 0xc4], 0
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x425b20
sub ecx, edx
lea eax, [ebp - 0xc0]
push ecx
push eax
lea ecx, [ebp - 0xd8]
call fcn.00412900
mov edx, 7
mov byte [ebp - 4], 0xd
lea ecx, [ebp - 0xd8]
call fcn.00420180
mov byte [ebp - 4], 5
mov ecx, dword [ebp - 0xc4]
cmp ecx, 0xf
jbe 0x425b90
mov edx, dword [ebp - 0xd8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x425b86
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x425b86
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.00483cf3
add esp, 8
push 0x1f4
mov dword [ebp - 0xc8], 0
mov dword [ebp - 0xc4], 0xf
mov byte [ebp - 0xd8], 0
call esi
mov esi, dword [0x6312e0]
lea ecx, [ebp - 0x1b8]
push esi
call fcn.0040f070
lea eax, [esi + 0x18]
mov byte [ebp - 4], 0xe
push eax
lea ecx, [ebp - 0x1a0]
call fcn.0040f070
lea eax, [ebp - 0x1a0]
mov byte [ebp - 4], 0xf
push eax
lea ecx, [ebp - 0x288]
call fcn.0040f070
cmp dword [ebp - 0x274], 0xf
lea eax, [ebp - 0x288]
push 0xa
cmova eax, dword [ebp - 0x288]
push 0
push eax
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_strtol]
mov ecx, dword [ebp - 0x274]
add esp, 0xc
cdq
mov esi, eax
mov edi, edx
cmp ecx, 0xf
jbe 0x425c4e
mov edx, dword [ebp - 0x288]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x425c44
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x425d47
push ecx
push edx
call fcn.00483cf3
add esp, 8
lea eax, [ebp - 0x98]
mov dword [ebp - 0x278], 0
push eax
lea eax, [ebp - 0x2e8]
mov dword [ebp - 0x274], 0xf
push eax
mov byte [ebp - 0x288], 0
mov dword [ebp - 0x98], esi
mov dword [ebp - 0x94], edi
call dword [sym.imp.api_ms_win_crt_time_l1_1_0.dll__localtime64_s]
mov eax, dword [ebp - 0x2c8]
movups xmm0, xmmword [ebp - 0x2e8]
mov dword [ebp - 0x104], eax
lea eax, [ebp - 0x124]
push eax
movups xmmword [ebp - 0x124], xmm0
push str._d__m__y__H:_M:_S
movups xmm0, xmmword [ebp - 0x2d8]
lea eax, [ebp - 0x90]
push 0x50
push eax
movups xmmword [ebp - 0x114], xmm0
call dword [sym.imp.api_ms_win_crt_time_l1_1_0.dll_strftime]
xorps xmm0, xmm0
mov dword [ebp - 0xc8], 0
lea ecx, [ebp - 0x90]
mov dword [ebp - 0xc4], 0
add esp, 0x18
lea edx, [ecx + 1]
movups xmmword [ebp - 0xd8], xmm0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x425cf6
sub ecx, edx
lea eax, [ebp - 0x90]
push ecx
push eax
lea ecx, [ebp - 0xd8]
call fcn.00412900
mov edx, dword [ebp - 0xc4]
lea esi, [ebp - 0xd8]
mov ecx, dword [ebp - 0xd8]
cmp edx, 0xf
cmova esi, ecx
jbe 0x425d57
inc edx
mov eax, ecx
cmp edx, 0x1000
jb 0x425d4d
mov ecx, dword [eax - 4]
add edx, 0x23
sub eax, ecx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x425d4d
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push edx
push ecx
call fcn.00483cf3
add esp, 8
mov dword [ebp - 0xc8], 0
xorps xmm0, xmm0
mov dword [ebp - 0xc4], 0xf
mov byte [ebp - 0xd8], 0
mov dword [ebp - 0x98], 0x5dad3b40
mov dword [ebp - 0x94], 0x75740d4f
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0xbc], ecx
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0x98], 0x28dc691b
mov dword [ebp - 0x94], 0x9564ffa0
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0xb4], ecx
mov dword [ebp - 0xb8], eax
mov dword [ebp - 0x98], 0x34dd4305
mov dword [ebp - 0x94], 0x3154743d
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x98], 0x12b91d7a
mov dword [ebp - 0x94], 0x9564ff80
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
movaps xmm1, xmmword [ebp - 0xc0]
mov dword [ebp - 0x24], ecx
lea ecx, [ebp - 0xc0]
mov dword [ebp - 0x28], eax
lea edx, [ecx + 1]
xorps xmm1, xmmword [ebp - 0x30]
movaps xmmword [ebp - 0xc0], xmm1
movups xmmword [ebp - 0x2a8], xmm0
mov dword [ebp - 0x298], 0
mov dword [ebp - 0x294], 0
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x425e50
sub ecx, edx
lea eax, [ebp - 0xc0]
push ecx
push eax
lea ecx, [ebp - 0x2a8]
call fcn.00412900
mov edx, 7
mov byte [ebp - 4], 0x10
lea ecx, [ebp - 0x2a8]
call fcn.00420180
mov byte [ebp - 4], 0xf
mov ecx, dword [ebp - 0x294]
cmp ecx, 0xf
jbe 0x425ec0
mov edx, dword [ebp - 0x2a8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x425eb6
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x425eb6
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.00483cf3
add esp, 8
mov dword [ebp - 0x298], 0
xorps xmm0, xmm0
mov dword [ebp - 0x294], 0xf
mov byte [ebp - 0x2a8], 0
mov dword [ebp - 0x98], 0x34dd430f
mov dword [ebp - 0x94], 0x3154743d
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0xbc], ecx
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0x98], 0x12b91d7a
mov dword [ebp - 0x94], 0x9564ff80
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0xb4], ecx
mov dword [ebp - 0xb8], eax
mov dword [ebp - 0x98], 0x34dd4305
mov dword [ebp - 0x94], 0x3154743d
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x98], 0x12b91d7a
mov dword [ebp - 0x94], 0x9564ff80
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
movaps xmm1, xmmword [ebp - 0xc0]
mov dword [ebp - 0x24], ecx
mov ecx, esi
mov dword [ebp - 0x28], eax
xorps xmm1, xmmword [ebp - 0x30]
movaps xmmword [ebp - 0xc0], xmm1
movups xmmword [ebp - 0x2a8], xmm0
mov dword [ebp - 0x298], 0
lea edx, [ecx + 1]
mov dword [ebp - 0x294], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x425fb4
sub ecx, edx
push ecx
push esi
lea ecx, [ebp - 0x2a8]
call fcn.00412900
lea eax, [ebp - 0xc0]
mov byte [ebp - 4], 0x11
push eax
lea edx, [ebp - 0x2a8]
lea ecx, [ebp - 0x118]
call fcn.004117f0
add esp, 4
mov esi, eax
push 0xfffffffffffffff5
mov byte [ebp - 4], 0x12
call dword [sym.imp.KERNEL32.dll_GetStdHandle]
mov edi, eax
lea eax, [ebp - 0xc0]
push eax
push edi
call dword [sym.imp.KERNEL32.dll_GetConsoleScreenBufferInfo]
push 9
push edi
call dword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
cmp dword [esi + 0x14], 0xf
mov eax, dword [esi + 0x10]
jbe 0x42601b
mov esi, dword [esi]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, esi
push eax
call fcn.004177b0
add esp, 4
push dword [ebp - 0xb8]
push edi
call dword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov byte [ebp - 4], 0x11
mov ecx, dword [ebp - 0x104]
cmp ecx, 0xf
jbe 0x426073
mov edx, dword [ebp - 0x118]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x426069
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x4260be
push ecx
push edx
call fcn.00483cf3
add esp, 8
mov byte [ebp - 4], 0xf
mov ecx, dword [ebp - 0x294]
mov dword [ebp - 0x108], 0
mov dword [ebp - 0x104], 0xf
mov byte [ebp - 0x118], 0
cmp ecx, 0xf
jbe 0x4260ce
mov edx, dword [ebp - 0x2a8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4260c4
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x4260c4
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.00483cf3
add esp, 8
push 0x3e8
mov dword [ebp - 0x298], 0
mov dword [ebp - 0x294], 0xf
mov byte [ebp - 0x2a8], 0
call dword [sym.imp.KERNEL32.dll_Sleep]
xorps xmm0, xmm0
mov dword [ebp - 0x168], 0
movups xmmword [ebp - 0x178], xmm0
mov dword [ebp - 0x164], 0xf
mov byte [ebp - 0x178], 0
mov byte [ebp - 4], 0x13
xor esi, esi
nop
mov dword [ebp - 0x98], 0x46b42263
xorps xmm0, xmm0
mov dword [ebp - 0x94], 0x4835184d
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0xbc], ecx
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0x2b8], 0x12b97911
mov dword [ebp - 0x2b4], 0x9564ff80
mov eax, dword [ebp - 0x2b8]
mov ecx, dword [ebp - 0x2b4]
mov dword [ebp - 0xb4], ecx
mov dword [ebp - 0xb8], eax
mov dword [ebp - 0xf8], 0x34dd4305
mov dword [ebp - 0xf4], 0x3154743d
mov eax, dword [ebp - 0xf8]
mov ecx, dword [ebp - 0xf4]
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x30], eax
mov dword [ebp - 0xe8], 0x12b91d7a
mov dword [ebp - 0xe4], 0x9564ff80
mov eax, dword [ebp - 0xe8]
mov ecx, dword [ebp - 0xe4]
movaps xmm1, xmmword [ebp - 0xc0]
mov dword [ebp - 0x24], ecx
lea ecx, [ebp - 0xc0]
mov dword [ebp - 0x28], eax
lea edx, [ecx + 1]
xorps xmm1, xmmword [ebp - 0x30]
movaps xmmword [ebp - 0xc0], xmm1
movups xmmword [ebp - 0xd8], xmm0
mov dword [ebp - 0xc8], 0
mov dword [ebp - 0xc4], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x426200
sub ecx, edx
lea eax, [ebp - 0xc0]
push ecx
push eax
lea ecx, [ebp - 0xd8]
call fcn.00412900
mov byte [ebp - 4], 0x14
test esi, esi
jle 0x42629a
mov edx, esi
lea ecx, [ebp - 0x118]
call fcn.00402300
push eax
lea ecx, [ebp - 0xd8]
mov byte [ebp - 4], 0x15
call fcn.0040eec0
mov byte [ebp - 4], 0x14
mov ecx, dword [ebp - 0x104]
cmp ecx, 0xf
jbe 0x42627f
mov edx, dword [ebp - 0x118]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x426275
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x424bb4
push ecx
push edx
call fcn.00483cf3
add esp, 8
mov dword [ebp - 0x108], 0
mov dword [ebp - 0x104], 0xf
mov byte [ebp - 0x118], 0
lea ecx, [ebp - 0xd8]
call fcn.00423e90
test al, al
jne 0x4262f2
mov byte [ebp - 4], 0x13
mov ecx, dword [ebp - 0xc4]
cmp ecx, 0xf
jbe 0x4262e3
mov edx, dword [ebp - 0xd8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4262d9
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x426348
push ecx
push edx
call fcn.00483cf3
add esp, 8
inc esi
cmp esi, 0xa
jle 0x426120
jmp 0x426373
cmp dword [ebp - 0xc4], 0xf
lea eax, [ebp - 0xd8]
push dword [ebp - 0xc8]
cmova eax, dword [ebp - 0xd8]
lea ecx, [ebp - 0x178]
push eax
call fcn.004113b0
mov byte [ebp - 4], 0x13
mov ecx, dword [ebp - 0xc4]
cmp ecx, 0xf
jbe 0x426358
mov edx, dword [ebp - 0xd8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x42634e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x42634e
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.00483cf3
add esp, 8
mov dword [ebp - 0xc8], 0
mov dword [ebp - 0xc4], 0xf
mov byte [ebp - 0xd8], 0
mov dword [ebp - 0x98], 0x40b42252
xorps xmm0, xmm0
mov dword [ebp - 0x94], 0x11331a54
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x11c], ecx
mov dword [ebp - 0x120], eax
mov dword [ebp - 0x98], 0x32cb721c
mov dword [ebp - 0x94], 0xf0099ee7
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x114], ecx
mov dword [ebp - 0x118], eax
mov dword [ebp - 0x98], 0x186c2ec9
mov dword [ebp - 0x94], 0xc1aa2df
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x10c], ecx
mov dword [ebp - 0x110], eax
mov dword [ebp - 0x98], 0x5df65d24
mov dword [ebp - 0x94], 0x760b9f92
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x104], ecx
mov dword [ebp - 0x108], eax
mov dword [ebp - 0x98], 0x34dd4305
mov dword [ebp - 0x94], 0x3154743d
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x28c], ecx
mov dword [ebp - 0x290], eax
mov dword [ebp - 0x98], 0x12b91d7a
mov dword [ebp - 0x94], 0x9564ff80
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x284], ecx
mov dword [ebp - 0x288], eax
mov dword [ebp - 0x98], 0x124200e7
mov dword [ebp - 0x94], 0xc1aa2df
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x27c], ecx
mov dword [ebp - 0x280], eax
mov dword [ebp - 0x98], 0x5df65d24
mov dword [ebp - 0x94], 0x760b9f92
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
movaps xmm1, xmmword [ebp - 0x120]
xorps xmm1, xmmword [ebp - 0x290]
mov dword [ebp - 0x274], ecx
lea ecx, [ebp - 0x120]
movaps xmmword [ebp - 0x120], xmm1
lea edx, [ecx + 1]
mov dword [ebp - 0x278], eax
movaps xmm1, xmmword [ebp - 0x280]
xorps xmm1, xmmword [ebp - 0x110]
movaps xmmword [ebp - 0x110], xmm1
movups xmmword [ebp - 0x2a8], xmm0
mov dword [ebp - 0x298], 0
mov dword [ebp - 0x294], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x426524
sub ecx, edx
lea eax, [ebp - 0x120]
push ecx
push eax
lea ecx, [ebp - 0x2a8]
call fcn.00412900
mov edx, 7
mov byte [ebp - 4], 0x16
lea ecx, [ebp - 0x2a8]
call fcn.00420180
mov byte [ebp - 4], 0x13
mov ecx, dword [ebp - 0x294]
cmp ecx, 0xf
jbe 0x426594
mov edx, dword [ebp - 0x2a8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x42658a
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x42658a
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.00483cf3
add esp, 8
mov dword [ebp - 0x298], 0
mov dword [ebp - 0x294], 0xf
mov byte [ebp - 0x2a8], 0
mov dword [ebp - 0xf8], 0x6bbc3762
mov dword [ebp - 0xf4], 0x547a154e
mov eax, dword [ebp - 0xf8]
mov ecx, dword [ebp - 0xf4]
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x30], eax
mov dword [ebp - 0xe8], 0x12b97802
mov dword [ebp - 0xe4], 0x9564ff80
mov eax, dword [ebp - 0xe8]
mov ecx, dword [ebp - 0xe4]
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x2b8], 0x34dd4305
mov dword [ebp - 0x2b4], 0x3154743d
mov eax, dword [ebp - 0x2b8]
mov ecx, dword [ebp - 0x2b4]
mov dword [ebp - 0xbc], ecx
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0x98], 0x12b91d7a
mov dword [ebp - 0x94], 0x9564ff80
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
movaps xmm1, xmmword [ebp - 0x30]
mov dword [ebp - 0xb4], ecx
lea ecx, [ebp - 0x30]
mov dword [ebp - 0xb8], eax
xorps xmm1, xmmword [ebp - 0xc0]
movaps xmmword [ebp - 0x30], xmm1
call fcn.00427ae0
mov edi, eax
test edi, edi
jne 0x426754
mov dword [ebp - 0x2f8], 1
mov dword [ebp - 0x2f4], eax
lea ecx, [ebp - 0x2f8]
call fcn.00427a30
mov dword [ebp - 0xf8], 0x6bbc3762
mov dword [ebp - 0xf4], 0x547a154e
mov eax, dword [ebp - 0xf8]
mov ecx, dword [ebp - 0xf4]
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x30], eax
mov dword [ebp - 0xe8], 0x12b97802
mov dword [ebp - 0xe4], 0x9564ff80
mov eax, dword [ebp - 0xe8]
mov ecx, dword [ebp - 0xe4]
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x2b8], 0x34dd4305
mov dword [ebp - 0x2b4], 0x3154743d
mov eax, dword [ebp - 0x2b8]
mov ecx, dword [ebp - 0x2b4]
mov dword [ebp - 0xbc], ecx
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0x98], 0x12b91d7a
mov dword [ebp - 0x94], 0x9564ff80
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
movaps xmm1, xmmword [ebp - 0x30]
mov dword [ebp - 0xb4], ecx
lea ecx, [ebp - 0x30]
mov dword [ebp - 0xb8], eax
xorps xmm1, xmmword [ebp - 0xc0]
movaps xmmword [ebp - 0x30], xmm1
call fcn.00427ae0
mov edi, eax
test edi, edi
je 0x426684
cmp dword [ebp - 0x168], 0
je 0x426768
lea ecx, [ebp - 0x178]
call fcn.004242e0
mov dword [ebp - 0x98], 0x5aa82c43
xorps xmm0, xmm0
mov dword [ebp - 0x94], 0x43245459
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x11c], ecx
mov dword [ebp - 0x120], eax
mov dword [ebp - 0x98], 0x61dc7e15
mov dword [ebp - 0x94], 0xf10ddff3
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x114], ecx
mov dword [ebp - 0x118], eax
mov dword [ebp - 0x98], 0x124220dd
mov dword [ebp - 0x94], 0xc1aa2df
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x10c], ecx
mov dword [ebp - 0x110], eax
mov dword [ebp - 0x98], 0x5df65d24
mov dword [ebp - 0x94], 0x760b9f92
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x104], ecx
mov dword [ebp - 0x108], eax
mov dword [ebp - 0x98], 0x34dd4305
mov dword [ebp - 0x94], 0x3154743d
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x28c], ecx
mov dword [ebp - 0x290], eax
mov dword [ebp - 0x98], 0x12b91d7a
mov dword [ebp - 0x94], 0x9564ff80
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x284], ecx
mov dword [ebp - 0x288], eax
mov dword [ebp - 0x98], 0x124200e7
mov dword [ebp - 0x94], 0xc1aa2df
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x27c], ecx
mov dword [ebp - 0x280], eax
mov dword [ebp - 0x98], 0x5df65d24
mov dword [ebp - 0x94], 0x760b9f92
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
movaps xmm1, xmmword [ebp - 0x290]
xorps xmm1, xmmword [ebp - 0x120]
movaps xmmword [ebp - 0x120], xmm1
movaps xmm1, xmmword [ebp - 0x110]
mov dword [ebp - 0x274], ecx
lea ecx, [ebp - 0x120]
mov dword [ebp - 0x278], eax
lea edx, [ecx + 1]
xorps xmm1, xmmword [ebp - 0x280]
movaps xmmword [ebp - 0x110], xmm1
movups xmmword [ebp - 0x2a8], xmm0
mov dword [ebp - 0x298], 0
mov dword [ebp - 0x294], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x426920
sub ecx, edx
lea eax, [ebp - 0x120]
push ecx
push eax
lea ecx, [ebp - 0x2a8]
call fcn.00412900
mov edx, 7
mov byte [ebp - 4], 0x17
lea ecx, [ebp - 0x2a8]
call fcn.00420180
mov byte [ebp - 4], 0x13
mov ecx, dword [ebp - 0x294]
cmp ecx, 0xf
jbe 0x426990
mov edx, dword [ebp - 0x2a8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x426986
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x426986
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.00483cf3
add esp, 8
mov dword [ebp - 0x298], 0
lea esi, [ebp - 0x23]
mov dword [ebp - 0x294], 0xf
mov byte [ebp - 0x2a8], 0
mov dword [ebp - 0x98], 0x34dd430f
mov dword [ebp - 0x94], 0x3154743d
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0xbc], ecx
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0x98], 0x12b91d7a
mov dword [ebp - 0x94], 0x9564ff80
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0xb4], ecx
mov dword [ebp - 0xb8], eax
mov dword [ebp - 0x98], 0x34dd4305
mov dword [ebp - 0x94], 0x3154743d
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x98], 0x12b91d7a
mov dword [ebp - 0x94], 0x9564ff80
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x24], ecx
mov ecx, edi
mov dword [ebp - 0x28], eax
movaps xmm1, xmmword [ebp - 0x30]
xorps xmm1, xmmword [ebp - 0xc0]
movaps xmmword [ebp - 0xc0], xmm1
mov dword [ebp - 0xe4], ecx
nop dword [eax]
mov eax, 0xcccccccd
dec esi
mul ecx
shr edx, 3
mov al, dl
mov cl, dl
shl al, 2
add cl, al
mov eax, dword [ebp - 0xe4]
add cl, cl
sub al, cl
mov ecx, edx
add al, 0x30
mov byte [esi], al
mov eax, edx
mov dword [ebp - 0xe4], eax
test eax, eax
jne 0x426a70
push ecx
lea eax, [ebp - 0x23]
push eax
push esi
lea ecx, [ebp - 0x288]
call fcn.00411d30
lea eax, [ebp - 0xc0]
mov byte [ebp - 4], 0x18
push eax
lea edx, [ebp - 0x288]
lea ecx, [ebp - 0x118]
call fcn.004117f0
add esp, 4
mov esi, eax
push 0xfffffffffffffff5
mov byte [ebp - 4], 0x19
call dword [sym.imp.KERNEL32.dll_GetStdHandle]
lea ecx, [ebp - 0xc0]
mov dword [ebp - 0xe4], eax
push ecx
push eax
call dword [sym.imp.KERNEL32.dll_GetConsoleScreenBufferInfo]
push 9
push dword [ebp - 0xe4]
call dword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
cmp dword [esi + 0x14], 0xf
mov eax, dword [esi + 0x10]
jbe 0x426b0b
mov esi, dword [esi]
mov ecx, dword [sym.imp.MSVCP140.dll_class_std::basic_ostream_char__struct_std::char_traits_char___std::cout]
mov edx, esi
push eax
call fcn.004177b0
add esp, 4
push dword [ebp - 0xb8]
push dword [ebp - 0xe4]
call dword [sym.imp.KERNEL32.dll_SetConsoleTextAttribute]
mov byte [ebp - 4], 0x18
mov ecx, dword [ebp - 0x104]
cmp ecx, 0xf
jbe 0x426b68
mov edx, dword [ebp - 0x118]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x426b5e
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x426bb3
push ecx
push edx
call fcn.00483cf3
add esp, 8
mov byte [ebp - 4], 0x13
mov ecx, dword [ebp - 0x274]
mov dword [ebp - 0x108], 0
mov dword [ebp - 0x104], 0xf
mov byte [ebp - 0x118], 0
cmp ecx, 0xf
jbe 0x426bc3
mov edx, dword [ebp - 0x288]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x426bb9
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x426bb9
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.00483cf3
add esp, 8
mov dword [ebp - 0x278], 0
xorps xmm0, xmm0
mov dword [ebp - 0x274], 0xf
mov byte [ebp - 0x288], 0
mov dword [ebp - 0x98], 0x50bc2c49
mov dword [ebp - 0x94], 0x1f331a54
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0xbc], ecx
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0x98], 0x12b33354
mov dword [ebp - 0x94], 0x9564ff80
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0xb4], ecx
mov dword [ebp - 0xb8], eax
mov dword [ebp - 0x98], 0x34dd4305
mov dword [ebp - 0x94], 0x3154743d
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x98], 0x12b91d7a
mov dword [ebp - 0x94], 0x9564ff80
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
movaps xmm1, xmmword [ebp - 0xc0]
mov dword [ebp - 0x24], ecx
lea ecx, [ebp - 0xc0]
mov dword [ebp - 0x28], eax
lea edx, [ecx + 1]
xorps xmm1, xmmword [ebp - 0x30]
movaps xmmword [ebp - 0xc0], xmm1
movups xmmword [ebp - 0x2a8], xmm0
mov dword [ebp - 0x298], 0
mov dword [ebp - 0x294], 0
nop dword [eax + eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x426cc0
sub ecx, edx
lea eax, [ebp - 0xc0]
push ecx
push eax
lea ecx, [ebp - 0x2a8]
call fcn.00412900
mov edx, 7
mov byte [ebp - 4], 0x1a
lea ecx, [ebp - 0x2a8]
call fcn.00420180
mov byte [ebp - 4], 0x13
mov ecx, dword [ebp - 0x294]
cmp ecx, 0xf
jbe 0x426d30
mov edx, dword [ebp - 0x2a8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x426d26
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x426d26
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.00483cf3
add esp, 8
lea eax, [ebp - 0xec]
mov dword [ebp - 0x298], 0
push eax
xorps xmm0, xmm0
mov dword [ebp - 0x294], 0xf
push 0x28
mov byte [ebp - 0x2a8], 0
movups xmmword [ebp - 0x15c], xmm0
mov dword [ebp - 0xec], 0
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call dword [sym.imp.ADVAPI32.dll_OpenProcessToken]
test eax, eax
je 0x426dcc
lea eax, [ebp - 0x158]
mov dword [ebp - 0x15c], 1
push eax
push str.SeDebugPrivilege
push 0
mov dword [ebp - 0x150], 2
call dword [sym.imp.ADVAPI32.dll_LookupPrivilegeValueA]
test eax, eax
je 0x426dc0
push 0
push 0
push 0
lea eax, [ebp - 0x15c]
push eax
push 0
push dword [ebp - 0xec]
call dword [sym.imp.ADVAPI32.dll_AdjustTokenPrivileges]
push dword [ebp - 0xec]
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push edi
push 0
push 0x1fffff
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov esi, eax
test esi, esi
jne 0x42708f
mov dword [ebp - 0x98], 0x34dd492c
mov dword [ebp - 0x94], 0x3154743d
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0xbc], ecx
mov dword [ebp - 0x98], 0x12b91d7a
mov dword [ebp - 0x94], 0x9564ff80
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0xb8], eax
mov dword [ebp - 0xb4], ecx
mov dword [ebp - 0x98], 0x34dd4305
mov dword [ebp - 0x94], 0x3154743d
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x98], 0x12b91d7a
mov dword [ebp - 0x94], 0x9564ff80
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
movaps xmm1, xmmword [ebp - 0xc0]
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x24], ecx
xorps xmm1, xmmword [ebp - 0x30]
movaps xmmword [ebp - 0xc0], xmm1
call dword [sym.imp.KERNEL32.dll_GetLastError]
mov edx, eax
lea ecx, [ebp - 0x2a8]
call fcn.00420830
push eax
mov byte [ebp - 4], 0x1b
mov dword [ebp - 0x98], 0x7b8f1140
mov dword [ebp - 0x94], 0x177546f
mov ecx, dword [ebp - 0x98]
mov edx, dword [ebp - 0x94]
mov dword [ebp - 0xe0], ecx
mov dword [ebp - 0xdc], edx
mov dword [ebp - 0x98], 0x3a99274b
mov dword [ebp - 0x94], 0xd020b0c3
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0xd8], eax
mov dword [ebp - 0xd4], ecx
mov dword [ebp - 0x98], 0x124220dd
mov dword [ebp - 0x94], 0xc1aa2df
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0xd0], eax
mov dword [ebp - 0xcc], ecx
mov dword [ebp - 0x98], 0x5df65d24
mov dword [ebp - 0x94], 0x760b9f92
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0xc8], eax
mov dword [ebp - 0xc4], ecx
mov dword [ebp - 0x98], 0x34dd4305
mov dword [ebp - 0x94], 0x3154743d
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x3c], ecx
mov dword [ebp - 0x98], 0x12b91d7a
mov dword [ebp - 0x94], 0x9564ff80
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x34], ecx
mov dword [ebp - 0x98], 0x124200e7
mov dword [ebp - 0x94], 0xc1aa2df
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x98], 0x5df65d24
mov dword [ebp - 0x94], 0x760b9f92
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x28], eax
movaps xmm1, xmmword [ebp - 0xe0]
lea edx, [ebp - 0xe0]
xorps xmm1, xmmword [ebp - 0x40]
mov dword [ebp - 0x24], ecx
lea ecx, [ebp - 0x288]
movaps xmmword [ebp - 0xe0], xmm1
movaps xmm1, xmmword [ebp - 0x30]
xorps xmm1, xmmword [ebp - 0xd0]
movaps xmmword [ebp - 0xd0], xmm1
call fcn.00411720
add esp, 4
lea ecx, [ebp - 0xc0]
mov byte [ebp - 4], 0x1c
push ecx
mov edx, eax
lea ecx, [ebp - 0x118]
call fcn.004117f0
add esp, 4
lea edx, [esi + 0xc]
mov byte [ebp - 4], 0x1d
mov ecx, eax
call fcn.00420180
lea ecx, [ebp - 0x118]
call fcn.0040ef60
lea ecx, [ebp - 0x288]
call fcn.0040ef60
lea ecx, [ebp - 0x2a8]
call fcn.0040ef60
push 0xbb8
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
mov edi, dword [sym.imp.KERNEL32.dll_IsWow64Process]
lea eax, [ebp - 0xe4]
push eax
push esi
mov dword [ebp - 0xe4], 0
call edi
test eax, eax
jne 0x4270c3
call dword [sym.imp.KERNEL32.dll_GetLastError]
push eax
push 0x499a20
call fcn.004207f0
add esp, 8
jmp 0x4270ef
lea eax, [ebp - 0xf4]
mov dword [ebp - 0xf4], 0
push eax
call dword [sym.imp.KERNEL32.dll_GetCurrentProcess]
push eax
call edi
mov eax, dword [ebp - 0xe4]
cmp eax, dword [ebp - 0xf4]
je 0x4271f0
mov dword [ebp - 0x98], 0x7b8f1140
mov dword [ebp - 0x94], 0x177546f
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0xbc], ecx
mov dword [ebp - 0x98], 0x12b91748
mov dword [ebp - 0x94], 0x9564ff80
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0xb8], eax
mov dword [ebp - 0xb4], ecx
mov dword [ebp - 0x98], 0x34dd4305
mov dword [ebp - 0x94], 0x3154743d
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x98], 0x12b91d7a
mov dword [ebp - 0x94], 0x9564ff80
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0xc0]
mov dword [ebp - 0x24], ecx
lea ecx, [ebp - 0x118]
movaps xmm1, xmmword [ebp - 0x30]
xorps xmm1, xmmword [ebp - 0xc0]
push eax
movaps xmmword [ebp - 0xc0], xmm1
call fcn.0040f030
mov edx, 0xc
mov byte [ebp - 4], 0x1e
lea ecx, [ebp - 0x118]
call fcn.00420180
lea ecx, [ebp - 0x118]
call fcn.0040ef60
push esi
call dword [sym.imp.KERNEL32.dll_CloseHandle]
push 0xbb8
call dword [sym.imp.KERNEL32.dll_Sleep]
push 0
call dword [sym.imp.KERNEL32.dll_ExitProcess]
push 0
push 1
push 1
push 1
push 1
push 1
push 0x18ec00
mov edx, 0x4a1488
mov ecx, esi
call fcn.00427f20
add esp, 0x1c
push esi
test al, al
jne 0x427306
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x98], 0x7b8f1140
mov dword [ebp - 0x94], 0x177546f
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0xbc], ecx
mov dword [ebp - 0x98], 0x12b9174d
mov dword [ebp - 0x94], 0x9564ff80
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0xb8], eax
mov dword [ebp - 0xb4], ecx
mov dword [ebp - 0x98], 0x34dd4305
mov dword [ebp - 0x94], 0x3154743d
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x30], eax
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x98], 0x12b91d7a
mov dword [ebp - 0x94], 0x9564ff80
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
movaps xmm1, xmmword [ebp - 0xc0]
mov dword [ebp - 0x28], eax
lea eax, [ebp - 0xc0]
mov dword [ebp - 0x24], ecx
lea ecx, [ebp - 0x118]
xorps xmm1, xmmword [ebp - 0x30]
push eax
movaps xmmword [ebp - 0xc0], xmm1
call fcn.0040f030
mov edx, 0xc
mov byte [ebp - 4], 0x1f
lea ecx, [ebp - 0x118]
call fcn.00420180
lea ecx, [ebp - 0x118]
jmp 0x427077
call dword [sym.imp.KERNEL32.dll_CloseHandle]
mov dword [ebp - 0x98], 0x51b72d4c
mov dword [ebp - 0x94], 0x5531005e
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x290], eax
mov dword [ebp - 0x28c], ecx
mov dword [ebp - 0x98], 0x71cc6e5a
mov dword [ebp - 0x94], 0xe6179ae3
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x288], eax
mov dword [ebp - 0x284], ecx
mov dword [ebp - 0x98], 0x7e2e7581
mov dword [ebp - 0x94], 0xc108ca6
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x280], eax
mov dword [ebp - 0x27c], ecx
mov dword [ebp - 0x98], 0x5df65d24
mov dword [ebp - 0x94], 0x760b9f92
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x278], eax
mov dword [ebp - 0x274], ecx
mov dword [ebp - 0x98], 0x34dd4305
mov dword [ebp - 0x94], 0x3154743d
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x2b0], eax
mov dword [ebp - 0x2ac], ecx
mov dword [ebp - 0x98], 0x12b91d7a
mov dword [ebp - 0x94], 0x9564ff80
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x2a8], eax
mov dword [ebp - 0x2a4], ecx
mov dword [ebp - 0x98], 0x124200e7
mov dword [ebp - 0x94], 0xc1aa2df
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x2a0], eax
mov dword [ebp - 0x29c], ecx
mov dword [ebp - 0x98], 0x5df65d24
mov dword [ebp - 0x94], 0x760b9f92
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
movaps xmm1, xmmword [ebp - 0x2b0]
xorps xmm1, xmmword [ebp - 0x290]
mov dword [ebp - 0x298], eax
lea eax, [ebp - 0x290]
mov dword [ebp - 0x294], ecx
lea ecx, [ebp - 0x118]
movaps xmmword [ebp - 0x290], xmm1
movaps xmm1, xmmword [ebp - 0x2a0]
xorps xmm1, xmmword [ebp - 0x280]
push eax
movaps xmmword [ebp - 0x280], xmm1
call fcn.0040f030
mov edx, 0xa
mov byte [ebp - 4], 0x20
lea ecx, [ebp - 0x118]
call fcn.00420180
lea ecx, [ebp - 0x118]
call fcn.0040ef60
lea ecx, [ebp - 0x178]
call fcn.0040ef60
lea ecx, [ebp - 0x1b8]
mov byte [ebp - 4], 5
call fcn.00403ae0
mov dword [ebp - 0x98], 0x5db32a43
mov dword [ebp - 0x94], 0x5f3d1c4e
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x290], eax
mov dword [ebp - 0x28c], ecx
mov dword [ebp - 0x98], 0x62cc3d1d
mov dword [ebp - 0x94], 0x9f4ad1ae
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x288], eax
mov dword [ebp - 0x284], ecx
mov dword [ebp - 0x98], 0x124200e7
mov dword [ebp - 0x94], 0xc1aa2df
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x280], eax
mov dword [ebp - 0x27c], ecx
mov dword [ebp - 0x98], 0x5df65d24
mov dword [ebp - 0x94], 0x760b9f92
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x278], eax
mov dword [ebp - 0x274], ecx
mov dword [ebp - 0x98], 0x34dd4305
mov dword [ebp - 0x94], 0x3154743d
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x2b0], eax
mov dword [ebp - 0x2ac], ecx
mov dword [ebp - 0x98], 0x12b91d7a
mov dword [ebp - 0x94], 0x9564ff80
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x2a8], eax
mov dword [ebp - 0x2a4], ecx
mov dword [ebp - 0x98], 0x124200e7
mov dword [ebp - 0x94], 0xc1aa2df
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x2a0], eax
mov dword [ebp - 0x29c], ecx
mov dword [ebp - 0x98], 0x5df65d24
mov dword [ebp - 0x94], 0x760b9f92
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
movaps xmm1, xmmword [ebp - 0x2b0]
xorps xmm1, xmmword [ebp - 0x290]
movaps xmmword [ebp - 0x290], xmm1
movaps xmm1, xmmword [ebp - 0x280]
mov dword [ebp - 0x298], eax
lea eax, [ebp - 0x290]
mov dword [ebp - 0x294], ecx
lea ecx, [ebp - 0x118]
xorps xmm1, xmmword [ebp - 0x2a0]
push eax
movaps xmmword [ebp - 0x280], xmm1
call fcn.0040f030
mov edx, 7
mov byte [ebp - 4], 0x21
lea ecx, [ebp - 0x118]
call fcn.00420180
lea ecx, [ebp - 0x118]
jmp 0x427077
push 1
call dword [sym.imp.MSVCP140.dll_void___cdecl_std::_Throw_Cpp_error_int_]
mov dword [ebp - 0x98], 0x14b82b51
mov dword [ebp - 0x94], 0x5d24047c
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x2f0], eax
mov dword [ebp - 0x2ec], ecx
mov dword [ebp - 0x98], 0x66d87e13
mov dword [ebp - 0x94], 0xb50a90e9
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x2e8], eax
mov dword [ebp - 0x2e4], ecx
mov dword [ebp - 0x98], 0x6631758a
mov dword [ebp - 0x94], 0x2c7fc0ff
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x2e0], eax
mov dword [ebp - 0x2dc], ecx
mov dword [ebp - 0x98], 0x7d982856
mov dword [ebp - 0x94], 0x172becf3
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x2d8], eax
mov dword [ebp - 0x2d4], ecx
mov dword [ebp - 0x98], 0xed916c6d
mov dword [ebp - 0x94], 0xd0741d50
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x2d0], eax
mov dword [ebp - 0x2cc], ecx
mov dword [ebp - 0x98], 0xb74dd6ef
mov dword [ebp - 0x94], 0x4c97ce2c
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x2c8], eax
mov dword [ebp - 0x2c4], ecx
mov dword [ebp - 0x98], 0x34dd4305
mov dword [ebp - 0x94], 0x3154743d
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x130], eax
mov dword [ebp - 0x12c], ecx
mov dword [ebp - 0x98], 0x12b91d7a
mov dword [ebp - 0x94], 0x9564ff80
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x128], eax
mov dword [ebp - 0x124], ecx
mov dword [ebp - 0x98], 0x124200e7
mov dword [ebp - 0x94], 0xc1aa2df
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x120], eax
mov dword [ebp - 0x11c], ecx
mov dword [ebp - 0x98], 0x5df65d24
mov dword [ebp - 0x94], 0x760b9f92
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x118], eax
mov dword [ebp - 0x114], ecx
mov dword [ebp - 0x98], 0x83f80109
mov dword [ebp - 0x94], 0xa2006e39
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
mov dword [ebp - 0x110], eax
mov dword [ebp - 0x10c], ecx
mov dword [ebp - 0x98], 0xc522a28e
mov dword [ebp - 0x94], 0x4c97ce2c
mov eax, dword [ebp - 0x98]
mov ecx, dword [ebp - 0x94]
movaps xmm1, xmmword [ebp - 0x2f0]
xorps xmm1, xmmword [ebp - 0x130]
movaps xmmword [ebp - 0x2f0], xmm1
movaps xmm1, xmmword [ebp - 0x2e0]
xorps xmm1, xmmword [ebp - 0x120]
movaps xmmword [ebp - 0x2e0], xmm1
mov dword [ebp - 0x108], eax
mov dword [ebp - 0x104], ecx
movaps xmm1, xmmword [ebp - 0x110]
xorps xmm1, xmmword [ebp - 0x2d0]
movaps xmmword [ebp - 0x2d0], xmm1
push 0x10
push 0
lea eax, [ebp - 0x2f0]
push eax
push 0
call dword [sym.imp.USER32.dll_MessageBoxA]
jmp 0x427087