0x00401000 (01) 53 PUSH EBX 0x00401001 (03) 83EC38 SUB ESP, 0x38 0x00401004 (05) A144304000 MOV EAX, [0x403044] 0x00401009 (02) 85C0 TEST EAX, EAX 0x0040100b (02) 741C JZ 0x401029 0x0040100d (08) C744240800000000 MOV DWORD [ESP+0x8], 0x0 0x00401015 (08) C744240402000000 MOV DWORD [ESP+0x4], 0x2 0x0040101d (07) C7042400000000 MOV DWORD [ESP], 0x0 0x00401024 (02) FFD0 CALL EAX 0x00401026 (03) 83EC0C SUB ESP, 0xc 0x00401029 (07) C7042410114000 MOV DWORD [ESP], 0x401110 0x00401030 (05) E86B0B0000 CALL 0x401ba0 0x00401035 (03) 83EC04 SUB ESP, 0x4 0x00401038 (05) E8F3030000 CALL 0x401430 0x0040103d (05) E8CE040000 CALL 0x401510 0x00401042 (04) 8D44242C LEA EAX, [ESP+0x2c] 0x00401046 (04) 89442410 MOV [ESP+0x10], EAX 0x0040104a (05) A100204000 MOV EAX, [0x402000] 0x0040104f (08) C744240400504000 MOV DWORD [ESP+0x4], 0x405000 0x00401057 (07) C7042404504000 MOV DWORD [ESP], 0x405004 0x0040105e (08) C744242C00000000 MOV DWORD [ESP+0x2c], 0x0 0x00401066 (04) 8944240C MOV [ESP+0xc], EAX 0x0040106a (04) 8D442428 LEA EAX, [ESP+0x28] 0x0040106e (04) 89442408 MOV [ESP+0x8], EAX 0x00401072 (05) E8B90A0000 CALL 0x401b30 0x00401077 (05) A118504000 MOV EAX, [0x405018] 0x0040107c (02) 85C0 TEST EAX, EAX 0x0040107e (02) 7442 JZ 0x4010c2 0x00401080 (06) 8B1D08614000 MOV EBX, [0x406108] 0x00401086 (05) A304204000 MOV [0x402004], EAX 0x0040108b (04) 89442404 MOV [ESP+0x4], EAX 0x0040108f (03) 8B4310 MOV EAX, [EBX+0x10] 0x00401092 (03) 890424 MOV [ESP], EAX 0x00401095 (05) E89E0A0000 CALL 0x401b38 0x0040109a (05) A118504000 MOV EAX, [0x405018] 0x0040109f (04) 89442404 MOV [ESP+0x4], EAX 0x004010a3 (03) 8B4330 MOV EAX, [EBX+0x30] 0x004010a6 (03) 890424 MOV [ESP], EAX 0x004010a9 (05) E88A0A0000 CALL 0x401b38 0x004010ae (05) A118504000 MOV EAX, [0x405018] 0x004010b3 (04) 89442404 MOV [ESP+0x4], EAX 0x004010b7 (03) 8B4350 MOV EAX, [EBX+0x50] 0x004010ba (03) 890424 MOV [ESP], EAX 0x004010bd (05) E8760A0000 CALL 0x401b38 0x004010c2 (05) E8790A0000 CALL 0x401b40 0x004010c7 (06) 8B1504204000 MOV EDX, [0x402004] 0x004010cd (02) 8910 MOV [EAX], EDX 0x004010cf (05) E8BC050000 CALL 0x401690 0x004010d4 (03) 83E4F0 AND ESP, -0x10 0x004010d7 (05) E814080000 CALL 0x4018f0 0x004010dc (05) E8670A0000 CALL 0x401b48 0x004010e1 (02) 8B00 MOV EAX, [EAX] 0x004010e3 (04) 89442408 MOV [ESP+0x8], EAX 0x004010e7 (05) A100504000 MOV EAX, [0x405000] 0x004010ec (04) 89442404 MOV [ESP+0x4], EAX 0x004010f0 (05) A104504000 MOV EAX, [0x405004] 0x004010f5 (03) 890424 MOV [ESP], EAX 0x004010f8 (05) E8030B0000 CALL 0x401c00 0x004010fd (02) 89C3 MOV EBX, EAX 0x004010ff (05) E84C0A0000 CALL 0x401b50 0x00401104 (03) 891C24 MOV [ESP], EBX 0x00401107 (05) E89C0A0000 CALL 0x401ba8 0x0040110c (04) 8D742600 LEA ESI, [ESI+0x0] 0x00401110 (01) 53 PUSH EBX 0x00401111 (03) 83EC28 SUB ESP, 0x28 0x00401114 (04) 8B442430 MOV EAX, [ESP+0x30] 0x00401118 (02) 8B00 MOV EAX, [EAX] 0x0040111a (02) 8B00 MOV EAX, [EAX] 0x0040111c (05) 3D910000C0 CMP EAX, 0xc0000091 0x00401121 (02) 773D JA 0x401160 0x00401123 (05) 3D8D0000C0 CMP EAX, 0xc000008d 0x00401128 (02) 724D JB 0x401177 0x0040112a (05) BB01000000 MOV EBX, 0x1 0x0040112f (08) C744240400000000 MOV DWORD [ESP+0x4], 0x0 0x00401137 (07) C7042408000000 MOV DWORD [ESP], 0x8 0x0040113e (05) E8150A0000 CALL 0x401b58 0x00401143 (03) 83F801 CMP EAX, 0x1 0x00401146 (06) 0F84F4000000 JZ 0x401240 0x0040114c (02) 85C0 TEST EAX, EAX 0x0040114e (06) 0F85A0000000 JNZ 0x4011f4 0x00401154 (02) 31C0 XOR EAX, EAX 0x00401156 (03) 83C428 ADD ESP, 0x28 0x00401159 (01) 5B POP EBX 0x0040115a (03) C20400 RET 0x4 0x0040115d (03) 8D7600 LEA ESI, [ESI+0x0] 0x00401160 (05) 3D940000C0 CMP EAX, 0xc0000094 0x00401165 (02) 744B JZ 0x4011b2 0x00401167 (05) 3D960000C0 CMP EAX, 0xc0000096 0x0040116c (02) 7417 JZ 0x401185 0x0040116e (05) 3D930000C0 CMP EAX, 0xc0000093 0x00401173 (02) 75DF JNZ 0x401154 0x00401175 (02) EBB3 JMP 0x40112a 0x00401177 (05) 3D050000C0 CMP EAX, 0xc0000005 0x0040117c (02) 7442 JZ 0x4011c0 0x0040117e (05) 3D1D0000C0 CMP EAX, 0xc000001d 0x00401183 (02) 75CF JNZ 0x401154 0x00401185 (08) C744240400000000 MOV DWORD [ESP+0x4], 0x0 0x0040118d (07) C7042404000000 MOV DWORD [ESP], 0x4 0x00401194 (05) E8BF090000 CALL 0x401b58 0x00401199 (03) 83F801 CMP EAX, 0x1 0x0040119c (02) 7469 JZ 0x401207 0x0040119e (02) 85C0 TEST EAX, EAX 0x004011a0 (02) 74B2 JZ 0x401154 0x004011a2 (07) C7042404000000 MOV DWORD [ESP], 0x4 0x004011a9 (02) FFD0 CALL EAX 0x004011ab (05) B8FFFFFFFF MOV EAX, 0xffffffff 0x004011b0 (02) EBA4 JMP 0x401156 0x004011b2 (02) 31DB XOR EBX, EBX 0x004011b4 (05) E976FFFFFF JMP 0x40112f 0x004011b9 (07) 8DB42600000000 LEA ESI, [ESI+0x0] 0x004011c0 (08) C744240400000000 MOV DWORD [ESP+0x4], 0x0 0x004011c8 (07) C704240B000000 MOV DWORD [ESP], 0xb 0x004011cf (05) E884090000 CALL 0x401b58 0x004011d4 (03) 83F801 CMP EAX, 0x1 0x004011d7 (02) 744A JZ 0x401223 0x004011d9 (02) 85C0 TEST EAX, EAX 0x004011db (06) 0F8473FFFFFF JZ 0x401154 0x004011e1 (07) C704240B000000 MOV DWORD [ESP], 0xb 0x004011e8 (02) FFD0 CALL EAX 0x004011ea (05) B8FFFFFFFF MOV EAX, 0xffffffff 0x004011ef (05) E962FFFFFF JMP 0x401156 0x004011f4 (07) C7042408000000 MOV DWORD [ESP], 0x8 0x004011fb (02) FFD0 CALL EAX 0x004011fd (05) B8FFFFFFFF MOV EAX, 0xffffffff 0x00401202 (05) E94FFFFFFF JMP 0x401156 0x00401207 (08) C744240401000000 MOV DWORD [ESP+0x4], 0x1 0x0040120f (07) C7042404000000 MOV DWORD [ESP], 0x4 0x00401216 (05) E83D090000 CALL 0x401b58 0x0040121b (03) 83C8FF OR EAX, -0x1 0x0040121e (05) E933FFFFFF JMP 0x401156 0x00401223 (08) C744240401000000 MOV DWORD [ESP+0x4], 0x1 0x0040122b (07) C704240B000000 MOV DWORD [ESP], 0xb 0x00401232 (05) E821090000 CALL 0x401b58 0x00401237 (03) 83C8FF OR EAX, -0x1 0x0040123a (05) E917FFFFFF JMP 0x401156 0x0040123f (01) 90 NOP 0x00401240 (08) C744240401000000 MOV DWORD [ESP+0x4], 0x1 0x00401248 (07) C7042408000000 MOV DWORD [ESP], 0x8 0x0040124f (05) E804090000 CALL 0x401b58 0x00401254 (02) 85DB TEST EBX, EBX 0x00401256 (05) B8FFFFFFFF MOV EAX, 0xffffffff 0x0040125b (06) 0F84F5FEFFFF JZ 0x401156 0x00401261 (04) 8944241C MOV [ESP+0x1c], EAX 0x00401265 (05) E8A6020000 CALL 0x401510 0x0040126a (04) 8B44241C MOV EAX, [ESP+0x1c] 0x0040126e (05) E9E3FEFFFF JMP 0x401156 0x00401273 (06) 8DB600000000 LEA ESI, [ESI+0x0] 0x00401279 (07) 8DBC2700000000 LEA EDI, [EDI+0x0] 0x00401280 (03) 83EC1C SUB ESP, 0x1c 0x00401283 (07) C7042401000000 MOV DWORD [ESP], 0x1 0x0040128a (06) FF15FC604000 CALL DWORD [0x4060fc] 0x00401290 (05) E86BFDFFFF CALL 0x401000 0x00401295 (04) 8D742600 LEA ESI, [ESI+0x0] 0x00401299 (07) 8DBC2700000000 LEA EDI, [EDI+0x0] 0x004012a0 (03) 83EC1C SUB ESP, 0x1c 0x004012a3 (07) C7042402000000 MOV DWORD [ESP], 0x2 0x004012aa (06) FF15FC604000 CALL DWORD [0x4060fc] 0x004012b0 (05) E84BFDFFFF CALL 0x401000 0x004012b5 (04) 8D742600 LEA ESI, [ESI+0x0] 0x004012b9 (07) 8DBC2700000000 LEA EDI, [EDI+0x0] 0x004012c0 (05) A118614000 MOV EAX, [0x406118] 0x004012c5 (02) FFE0 JMP EAX 0x004012c7 (02) 89F6 MOV ESI, ESI 0x004012c9 (07) 8DBC2700000000 LEA EDI, [EDI+0x0] 0x004012d0 (05) A10C614000 MOV EAX, [0x40610c] 0x004012d5 (02) FFE0 JMP EAX 0x004012d7 (01) 90 NOP 0x004012d8 (01) 90 NOP 0x004012d9 (01) 90 NOP 0x004012da (01) 90 NOP 0x004012db (01) 90 NOP 0x004012dc (01) 90 NOP 0x004012dd (01) 90 NOP 0x004012de (01) 90 NOP 0x004012df (01) 90 NOP 0x004012e0 (06) 8B0D0C204000 MOV ECX, [0x40200c] 0x004012e6 (02) 85C9 TEST ECX, ECX 0x004012e8 (02) 7438 JZ 0x401322 0x004012ea (01) 55 PUSH EBP 0x004012eb (02) 89E5 MOV EBP, ESP 0x004012ed (03) 83EC18 SUB ESP, 0x18 0x004012f0 (07) C7042400304000 MOV DWORD [ESP], 0x403000 0x004012f7 (05) E8B4080000 CALL 0x401bb0 0x004012fc (01) 52 PUSH EDX 0x004012fd (02) 85C0 TEST EAX, EAX 0x004012ff (02) 7423 JZ 0x401324 0x00401301 (08) C74424040E304000 MOV DWORD [ESP+0x4], 0x40300e 0x00401309 (03) 890424 MOV [ESP], EAX 0x0040130c (05) E8A7080000 CALL 0x401bb8 0x00401311 (03) 83EC08 SUB ESP, 0x8 0x00401314 (02) 85C0 TEST EAX, EAX 0x00401316 (02) 7409 JZ 0x401321 0x00401318 (07) C704240C204000 MOV DWORD [ESP], 0x40200c 0x0040131f (02) FFD0 CALL EAX 0x00401321 (01) C9 LEAVE 0x00401322 (01) C3 RET 0x00401323 (01) 90 NOP 0x00401324 (05) B800000000 MOV EAX, 0x0 0x00401329 (02) EBE9 JMP 0x401314 0x0040132b (01) 90 NOP 0x0040132c (01) 55 PUSH EBP 0x0040132d (02) 89E5 MOV EBP, ESP 0x0040132f (01) 5D POP EBP 0x00401330 (01) C3 RET 0x00401331 (01) 90 NOP 0x00401332 (01) 90 NOP 0x00401333 (01) 90 NOP 0x00401334 (04) 8B442408 MOV EAX, [ESP+0x8] 0x00401338 (04) 03442404 ADD EAX, [ESP+0x4] 0x0040133c (01) C3 RET 0x0040133d (01) 90 NOP 0x0040133e (01) 90 NOP 0x0040133f (01) 90 NOP 0x00401340 (03) 83EC1C SUB ESP, 0x1c 0x00401343 (04) 8B442424 MOV EAX, [ESP+0x24] 0x00401347 (02) 85C0 TEST EAX, EAX 0x00401349 (02) 7415 JZ 0x401360 0x0040134b (03) 83F803 CMP EAX, 0x3 0x0040134e (02) 7410 JZ 0x401360 0x00401350 (05) B801000000 MOV EAX, 0x1 0x00401355 (03) 83C41C ADD ESP, 0x1c 0x00401358 (03) C20C00 RET 0xc 0x0040135b (01) 90 NOP 0x0040135c (04) 8D742600 LEA ESI, [ESI+0x0] 0x00401360 (04) 8B542428 MOV EDX, [ESP+0x28] 0x00401364 (04) 89442404 MOV [ESP+0x4], EAX 0x00401368 (04) 8B442420 MOV EAX, [ESP+0x20] 0x0040136c (04) 89542408 MOV [ESP+0x8], EDX 0x00401370 (03) 890424 MOV [ESP], EAX 0x00401373 (05) E818070000 CALL 0x401a90 0x00401378 (05) B801000000 MOV EAX, 0x1 0x0040137d (03) 83C41C ADD ESP, 0x1c 0x00401380 (03) C20C00 RET 0xc 0x00401383 (06) 8DB600000000 LEA ESI, [ESI+0x0] 0x00401389 (07) 8DBC2700000000 LEA EDI, [EDI+0x0] 0x00401390 (01) 56 PUSH ESI 0x00401391 (01) 53 PUSH EBX 0x00401392 (03) 83EC14 SUB ESP, 0x14 0x00401395 (07) 833D2850400002 CMP DWORD [0x405028], 0x2 0x0040139c (04) 8B442424 MOV EAX, [ESP+0x24] 0x004013a0 (02) 740A JZ 0x4013ac 0x004013a2 (0a) C7052850400002000000 MOV DWORD [0x405028], 0x2 0x004013ac (03) 83F802 CMP EAX, 0x2 0x004013af (02) 7412 JZ 0x4013c3 0x004013b1 (03) 83F801 CMP EAX, 0x1 0x004013b4 (02) 7442 JZ 0x4013f8 0x004013b6 (03) 83C414 ADD ESP, 0x14 0x004013b9 (05) B801000000 MOV EAX, 0x1 0x004013be (01) 5B POP EBX 0x004013bf (01) 5E POP ESI 0x004013c0 (03) C20C00 RET 0xc 0x004013c3 (05) BE14704000 MOV ESI, 0x407014 0x004013c8 (06) 81EE14704000 SUB ESI, 0x407014 0x004013ce (03) C1FE02 SAR ESI, 0x2 0x004013d1 (02) 85F6 TEST ESI, ESI 0x004013d3 (02) 7EE1 JLE 0x4013b6 0x004013d5 (02) 31DB XOR EBX, EBX 0x004013d7 (07) 8B049D14704000 MOV EAX, [EBX*4+0x407014] 0x004013de (02) 85C0 TEST EAX, EAX 0x004013e0 (02) 7402 JZ 0x4013e4 0x004013e2 (02) FFD0 CALL EAX 0x004013e4 (03) 83C301 ADD EBX, 0x1 0x004013e7 (02) 39F3 CMP EBX, ESI 0x004013e9 (02) 75EC JNZ 0x4013d7 0x004013eb (03) 83C414 ADD ESP, 0x14 0x004013ee (05) B801000000 MOV EAX, 0x1 0x004013f3 (01) 5B POP EBX 0x004013f4 (01) 5E POP ESI 0x004013f5 (03) C20C00 RET 0xc 0x004013f8 (04) 8B442428 MOV EAX, [ESP+0x28] 0x004013fc (08) C744240401000000 MOV DWORD [ESP+0x4], 0x1 0x00401404 (04) 89442408 MOV [ESP+0x8], EAX 0x00401408 (04) 8B442420 MOV EAX, [ESP+0x20] 0x0040140c (03) 890424 MOV [ESP], EAX 0x0040140f (05) E87C060000 CALL 0x401a90 0x00401414 (02) EBA0 JMP 0x4013b6 0x00401416 (03) 8D7600 LEA ESI, [ESI+0x0] 0x00401419 (07) 8DBC2700000000 LEA EDI, [EDI+0x0] 0x00401420 (02) 31C0 XOR EAX, EAX 0x00401422 (01) C3 RET 0x00401423 (01) 90 NOP 0x00401424 (01) 90 NOP 0x00401425 (01) 90 NOP 0x00401426 (01) 90 NOP 0x00401427 (01) 90 NOP 0x00401428 (01) 90 NOP 0x00401429 (01) 90 NOP 0x0040142a (01) 90 NOP 0x0040142b (01) 90 NOP 0x0040142c (01) 90 NOP 0x0040142d (01) 90 NOP 0x0040142e (01) 90 NOP 0x0040142f (01) 90 NOP 0x00401430 (01) 9C PUSHF 0x00401431 (01) 9C PUSHF 0x00401432 (01) 58 POP EAX 0x00401433 (02) 89C2 MOV EDX, EAX 0x00401435 (05) 3500002000 XOR EAX, 0x200000 0x0040143a (01) 50 PUSH EAX 0x0040143b (01) 9D POPF 0x0040143c (01) 9C PUSHF 0x0040143d (01) 58 POP EAX 0x0040143e (01) 9D POPF 0x0040143f (02) 31D0 XOR EAX, EDX 0x00401441 (05) A900002000 TEST EAX, 0x200000 0x00401446 (06) 0F84A5000000 JZ 0x4014f1 0x0040144c (01) 53 PUSH EBX 0x0040144d (02) 31C0 XOR EAX, EAX 0x0040144f (02) 0FA2 CPUID 0x00401451 (02) 85C0 TEST EAX, EAX 0x00401453 (06) 0F8497000000 JZ 0x4014f0 0x00401459 (05) B801000000 MOV EAX, 0x1 0x0040145e (02) 0FA2 CPUID 0x00401460 (03) F6C601 TEST DH, 0x1 0x00401463 (02) 7407 JZ 0x40146c 0x00401465 (07) 830D1C50400001 OR DWORD [0x40501c], 0x1 0x0040146c (03) F6C680 TEST DH, 0x80 0x0040146f (02) 7407 JZ 0x401478 0x00401471 (07) 830D1C50400002 OR DWORD [0x40501c], 0x2 0x00401478 (06) F7C200008000 TEST EDX, 0x800000 0x0040147e (02) 7407 JZ 0x401487 0x00401480 (07) 830D1C50400004 OR DWORD [0x40501c], 0x4 0x00401487 (06) F7C200000001 TEST EDX, 0x1000000 0x0040148d (02) 7407 JZ 0x401496 0x0040148f (07) 830D1C50400008 OR DWORD [0x40501c], 0x8 0x00401496 (06) F7C200000002 TEST EDX, 0x2000000 0x0040149c (02) 7407 JZ 0x4014a5 0x0040149e (07) 830D1C50400010 OR DWORD [0x40501c], 0x10 0x004014a5 (06) 81E200000004 AND EDX, 0x4000000 0x004014ab (02) 7407 JZ 0x4014b4 0x004014ad (07) 830D1C50400020 OR DWORD [0x40501c], 0x20 0x004014b4 (03) F6C101 TEST CL, 0x1 0x004014b7 (02) 7407 JZ 0x4014c0 0x004014b9 (07) 830D1C50400040 OR DWORD [0x40501c], 0x40 0x004014c0 (03) 80E520 AND CH, 0x20 0x004014c3 (02) 752E JNZ 0x4014f3 0x004014c5 (05) B800000080 MOV EAX, 0x80000000 0x004014ca (02) 0FA2 CPUID 0x004014cc (05) 3D00000080 CMP EAX, 0x80000000 0x004014d1 (02) 761D JBE 0x4014f0 0x004014d3 (05) B801000080 MOV EAX, 0x80000001 0x004014d8 (02) 0FA2 CPUID 0x004014da (02) 85D2 TEST EDX, EDX 0x004014dc (02) 7822 JS 0x401500 0x004014de (06) 81E200000040 AND EDX, 0x40000000 0x004014e4 (02) 740A JZ 0x4014f0 0x004014e6 (0a) 810D1C50400000020000 OR DWORD [0x40501c], 0x200 0x004014f0 (01) 5B POP EBX 0x004014f1 (02) F3C3 RET 0x004014f3 (0a) 810D1C50400080000000 OR DWORD [0x40501c], 0x80 0x004014fd (02) EBC6 JMP 0x4014c5 0x004014ff (01) 90 NOP 0x00401500 (0a) 810D1C50400000010000 OR DWORD [0x40501c], 0x100 0x0040150a (02) EBD2 JMP 0x4014de 0x0040150c (01) 90 NOP 0x0040150d (01) 90 NOP 0x0040150e (01) 90 NOP 0x0040150f (01) 90 NOP 0x00401510 (02) DBE3 FNINIT 0x00401512 (01) C3 RET 0x00401513 (01) 90 NOP 0x00401514 (01) 90 NOP 0x00401515 (01) 90 NOP 0x00401516 (01) 90 NOP 0x00401517 (01) 90 NOP 0x00401518 (01) 90 NOP 0x00401519 (01) 90 NOP 0x0040151a (01) 90 NOP 0x0040151b (01) 90 NOP 0x0040151c (01) 90 NOP 0x0040151d (01) 90 NOP 0x0040151e (01) 90 NOP 0x0040151f (01) 90 NOP 0x00401520 (01) 53 PUSH EBX 0x00401521 (03) 83EC28 SUB ESP, 0x28 0x00401524 (06) 8B1D08614000 MOV EBX, [0x406108] 0x0040152a (04) 8D442434 LEA EAX, [ESP+0x34] 0x0040152e (08) C744240817000000 MOV DWORD [ESP+0x8], 0x17 0x00401536 (08) C744240401000000 MOV DWORD [ESP+0x4], 0x1 0x0040153e (03) 83C340 ADD EBX, 0x40 0x00401541 (04) 895C240C MOV [ESP+0xc], EBX 0x00401545 (07) C7042448304000 MOV DWORD [ESP], 0x403048 0x0040154c (04) 8944241C MOV [ESP+0x1c], EAX 0x00401550 (05) E81B060000 CALL 0x401b70 0x00401555 (04) 8B44241C MOV EAX, [ESP+0x1c] 0x00401559 (03) 891C24 MOV [ESP], EBX 0x0040155c (04) 89442408 MOV [ESP+0x8], EAX 0x00401560 (04) 8B442430 MOV EAX, [ESP+0x30] 0x00401564 (04) 89442404 MOV [ESP+0x4], EAX 0x00401568 (05) E80B060000 CALL 0x401b78 0x0040156d (05) E80E060000 CALL 0x401b80 0x00401572 (07) 8DB42600000000 LEA ESI, [ESI+0x0] 0x00401579 (07) 8DBC2700000000 LEA EDI, [EDI+0x0] 0x00401580 (03) 83EC5C SUB ESP, 0x5c 0x00401583 (04) 895C244C MOV [ESP+0x4c], EBX 0x00401587 (02) 89C3 MOV EBX, EAX 0x00401589 (04) 8D442424 LEA EAX, [ESP+0x24] 0x0040158d (08) C74424081C000000 MOV DWORD [ESP+0x8], 0x1c 0x00401595 (04) 89442404 MOV [ESP+0x4], EAX 0x00401599 (03) 891C24 MOV [ESP], EBX 0x0040159c (04) 89742450 MOV [ESP+0x50], ESI 0x004015a0 (02) 89D6 MOV ESI, EDX 0x004015a2 (04) 897C2454 MOV [ESP+0x54], EDI 0x004015a6 (02) 89CF MOV EDI, ECX 0x004015a8 (04) 896C2458 MOV [ESP+0x58], EBP 0x004015ac (05) E80F060000 CALL 0x401bc0 0x004015b1 (03) 83EC0C SUB ESP, 0xc 0x004015b4 (02) 85C0 TEST EAX, EAX 0x004015b6 (06) 0F84BA000000 JZ 0x401676 0x004015bc (04) 8B442438 MOV EAX, [ESP+0x38] 0x004015c0 (03) 83F804 CMP EAX, 0x4 0x004015c3 (02) 752B JNZ 0x4015f0 0x004015c5 (04) 897C2408 MOV [ESP+0x8], EDI 0x004015c9 (04) 89742404 MOV [ESP+0x4], ESI 0x004015cd (03) 891C24 MOV [ESP], EBX 0x004015d0 (05) E8B3050000 CALL 0x401b88 0x004015d5 (04) 8B5C244C MOV EBX, [ESP+0x4c] 0x004015d9 (04) 8B742450 MOV ESI, [ESP+0x50] 0x004015dd (04) 8B7C2454 MOV EDI, [ESP+0x54] 0x004015e1 (04) 8B6C2458 MOV EBP, [ESP+0x58] 0x004015e5 (03) 83C45C ADD ESP, 0x5c 0x004015e8 (01) C3 RET 0x004015e9 (07) 8DB42600000000 LEA ESI, [ESI+0x0] 0x004015f0 (03) 83F840 CMP EAX, 0x40 0x004015f3 (02) 74D0 JZ 0x4015c5 0x004015f5 (04) 8B442430 MOV EAX, [ESP+0x30] 0x004015f9 (04) 8D6C2420 LEA EBP, [ESP+0x20] 0x004015fd (04) 896C240C MOV [ESP+0xc], EBP 0x00401601 (08) C744240840000000 MOV DWORD [ESP+0x8], 0x40 0x00401609 (04) 89442404 MOV [ESP+0x4], EAX 0x0040160d (04) 8B442424 MOV EAX, [ESP+0x24] 0x00401611 (03) 890424 MOV [ESP], EAX 0x00401614 (05) E8AF050000 CALL 0x401bc8 0x00401619 (03) 83EC10 SUB ESP, 0x10 0x0040161c (04) 8B442438 MOV EAX, [ESP+0x38] 0x00401620 (04) 897C2408 MOV [ESP+0x8], EDI 0x00401624 (04) 89742404 MOV [ESP+0x4], ESI 0x00401628 (03) 891C24 MOV [ESP], EBX 0x0040162b (03) 83F840 CMP EAX, 0x40 0x0040162e (05) 0F9544241E SETNZ BYTE [ESP+0x1e] 0x00401633 (03) 83F804 CMP EAX, 0x4 0x00401636 (05) 0F9544241F SETNZ BYTE [ESP+0x1f] 0x0040163b (05) E848050000 CALL 0x401b88 0x00401640 (05) 807C241F00 CMP BYTE [ESP+0x1f], 0x0 0x00401645 (02) 748E JZ 0x4015d5 0x00401647 (05) 807C241E00 CMP BYTE [ESP+0x1e], 0x0 0x0040164c (02) 7487 JZ 0x4015d5 0x0040164e (04) 8B442420 MOV EAX, [ESP+0x20] 0x00401652 (04) 896C240C MOV [ESP+0xc], EBP 0x00401656 (04) 89442408 MOV [ESP+0x8], EAX 0x0040165a (04) 8B442430 MOV EAX, [ESP+0x30] 0x0040165e (04) 89442404 MOV [ESP+0x4], EAX 0x00401662 (04) 8B442424 MOV EAX, [ESP+0x24] 0x00401666 (03) 890424 MOV [ESP], EAX 0x00401669 (05) E85A050000 CALL 0x401bc8 0x0040166e (03) 83EC10 SUB ESP, 0x10 0x00401671 (05) E95FFFFFFF JMP 0x4015d5 0x00401676 (04) 895C2408 MOV [ESP+0x8], EBX 0x0040167a (08) C74424041C000000 MOV DWORD [ESP+0x4], 0x1c 0x00401682 (07) C7042460304000 MOV DWORD [ESP], 0x403060 0x00401689 (05) E892FEFFFF CALL 0x401520 0x0040168e (02) 6690 NOP 0x00401690 (05) A120504000 MOV EAX, [0x405020] 0x00401695 (02) 85C0 TEST EAX, EAX 0x00401697 (02) 7407 JZ 0x4016a0 0x00401699 (01) C3 RET 0x0040169a (06) 8DB600000000 LEA ESI, [ESI+0x0] 0x004016a0 (05) B8F4304000 MOV EAX, 0x4030f4 0x004016a5 (05) 2DF4304000 SUB EAX, 0x4030f4 0x004016aa (03) 83F807 CMP EAX, 0x7 0x004016ad (0a) C7052050400001000000 MOV DWORD [0x405020], 0x1 0x004016b7 (02) 7EE0 JLE 0x401699 0x004016b9 (03) 83EC2C SUB ESP, 0x2c 0x004016bc (03) 83F80B CMP EAX, 0xb 0x004016bf (04) 895C2420 MOV [ESP+0x20], EBX 0x004016c3 (04) 89742424 MOV [ESP+0x24], ESI 0x004016c7 (04) 897C2428 MOV [ESP+0x28], EDI 0x004016cb (06) 0F8EDF000000 JLE 0x4017b0 0x004016d1 (06) 8B35F4304000 MOV ESI, [0x4030f4] 0x004016d7 (02) 85F6 TEST ESI, ESI 0x004016d9 (06) 0F8585000000 JNZ 0x401764 0x004016df (06) 8B1DF8304000 MOV EBX, [0x4030f8] 0x004016e5 (02) 85DB TEST EBX, EBX 0x004016e7 (02) 757B JNZ 0x401764 0x004016e9 (06) 8B0DFC304000 MOV ECX, [0x4030fc] 0x004016ef (05) BB00314000 MOV EBX, 0x403100 0x004016f4 (02) 85C9 TEST ECX, ECX 0x004016f6 (06) 0F84B9000000 JZ 0x4017b5 0x004016fc (05) BBF4304000 MOV EBX, 0x4030f4 0x00401701 (03) 8B4308 MOV EAX, [EBX+0x8] 0x00401704 (03) 83F801 CMP EAX, 0x1 0x00401707 (06) 0F8547010000 JNZ 0x401854 0x0040170d (03) 83C30C ADD EBX, 0xc 0x00401710 (06) 81FBF4304000 CMP EBX, 0x4030f4 0x00401716 (06) 0F8383000000 JAE 0x40179f 0x0040171c (04) 0FB65308 MOVZX EDX, BYTE [EBX+0x8] 0x00401720 (03) 8B7304 MOV ESI, [EBX+0x4] 0x00401723 (02) 8B0B MOV ECX, [EBX] 0x00401725 (03) 83FA10 CMP EDX, 0x10 0x00401728 (06) 8D8600004000 LEA EAX, [ESI+0x400000] 0x0040172e (06) 8BB900004000 MOV EDI, [ECX+0x400000] 0x00401734 (06) 0F848E000000 JZ 0x4017c8 0x0040173a (03) 83FA20 CMP EDX, 0x20 0x0040173d (06) 0F84F0000000 JZ 0x401833 0x00401743 (03) 83FA08 CMP EDX, 0x8 0x00401746 (06) 0F84B4000000 JZ 0x401800 0x0040174c (04) 89542404 MOV [ESP+0x4], EDX 0x00401750 (07) C70424C8304000 MOV DWORD [ESP], 0x4030c8 0x00401757 (08) C744241800000000 MOV DWORD [ESP+0x18], 0x0 0x0040175f (05) E8BCFDFFFF CALL 0x401520 0x00401764 (05) BBF4304000 MOV EBX, 0x4030f4 0x00401769 (06) 81FBF4304000 CMP EBX, 0x4030f4 0x0040176f (02) 732E JAE 0x40179f 0x00401771 (03) 8B5304 MOV EDX, [EBX+0x4] 0x00401774 (05) B904000000 MOV ECX, 0x4 0x00401779 (06) 8D8200004000 LEA EAX, [EDX+0x400000] 0x0040177f (06) 8B9200004000 MOV EDX, [EDX+0x400000] 0x00401785 (02) 0313 ADD EDX, [EBX] 0x00401787 (03) 83C308 ADD EBX, 0x8 0x0040178a (04) 8954241C MOV [ESP+0x1c], EDX 0x0040178e (04) 8D54241C LEA EDX, [ESP+0x1c] 0x00401792 (05) E8E9FDFFFF CALL 0x401580 0x00401797 (06) 81FBF4304000 CMP EBX, 0x4030f4 0x0040179d (02) 72D2 JB 0x401771 0x0040179f (04) 8B5C2420 MOV EBX, [ESP+0x20] 0x004017a3 (04) 8B742424 MOV ESI, [ESP+0x24] 0x004017a7 (04) 8B7C2428 MOV EDI, [ESP+0x28] 0x004017ab (03) 83C42C ADD ESP, 0x2c 0x004017ae (01) C3 RET 0x004017af (01) 90 NOP 0x004017b0 (05) BBF4304000 MOV EBX, 0x4030f4 0x004017b5 (02) 8B13 MOV EDX, [EBX] 0x004017b7 (02) 85D2 TEST EDX, EDX 0x004017b9 (02) 75AE JNZ 0x401769 0x004017bb (03) 8B4304 MOV EAX, [EBX+0x4] 0x004017be (02) 85C0 TEST EAX, EAX 0x004017c0 (06) 0F843BFFFFFF JZ 0x401701 0x004017c6 (02) EBA1 JMP 0x401769 0x004017c8 (07) 0FB7B600004000 MOVZX ESI, WORD [ESI+0x400000] 0x004017cf (03) 6685F6 TEST SI, SI 0x004017d2 (03) 0FB7D6 MOVZX EDX, SI 0x004017d5 (02) 7906 JNS 0x4017dd 0x004017d7 (06) 81CA0000FFFF OR EDX, 0xffff0000 0x004017dd (02) 29CA SUB EDX, ECX 0x004017df (05) B902000000 MOV ECX, 0x2 0x004017e4 (06) 81EA00004000 SUB EDX, 0x400000 0x004017ea (02) 01FA ADD EDX, EDI 0x004017ec (04) 89542418 MOV [ESP+0x18], EDX 0x004017f0 (04) 8D542418 LEA EDX, [ESP+0x18] 0x004017f4 (05) E887FDFFFF CALL 0x401580 0x004017f9 (05) E90FFFFFFF JMP 0x40170d 0x004017fe (02) 6690 NOP 0x00401800 (03) 0FB610 MOVZX EDX, BYTE [EAX] 0x00401803 (02) 84D2 TEST DL, DL 0x00401805 (03) 0FB6F2 MOVZX ESI, DL 0x00401808 (02) 7906 JNS 0x401810 0x0040180a (06) 81CE00FFFFFF OR ESI, 0xffffff00 0x00401810 (02) 89F2 MOV EDX, ESI 0x00401812 (06) 81EA00004000 SUB EDX, 0x400000 0x00401818 (02) 29CA SUB EDX, ECX 0x0040181a (05) B901000000 MOV ECX, 0x1 0x0040181f (02) 01FA ADD EDX, EDI 0x00401821 (04) 89542418 MOV [ESP+0x18], EDX 0x00401825 (04) 8D542418 LEA EDX, [ESP+0x18] 0x00401829 (05) E852FDFFFF CALL 0x401580 0x0040182e (05) E9DAFEFFFF JMP 0x40170d 0x00401833 (06) 81C100004000 ADD ECX, 0x400000 0x00401839 (02) 29CF SUB EDI, ECX 0x0040183b (05) B904000000 MOV ECX, 0x4 0x00401840 (02) 0338 ADD EDI, [EAX] 0x00401842 (04) 8D542418 LEA EDX, [ESP+0x18] 0x00401846 (04) 897C2418 MOV [ESP+0x18], EDI 0x0040184a (05) E831FDFFFF CALL 0x401580 0x0040184f (05) E9B9FEFFFF JMP 0x40170d 0x00401854 (04) 89442404 MOV [ESP+0x4], EAX 0x00401858 (07) C7042494304000 MOV DWORD [ESP], 0x403094 0x0040185f (05) E8BCFCFFFF CALL 0x401520 0x00401864 (01) 90 NOP 0x00401865 (01) 90 NOP 0x00401866 (01) 90 NOP 0x00401867 (01) 90 NOP 0x00401868 (01) 90 NOP 0x00401869 (01) 90 NOP 0x0040186a (01) 90 NOP 0x0040186b (01) 90 NOP 0x0040186c (01) 90 NOP 0x0040186d (01) 90 NOP 0x0040186e (01) 90 NOP 0x0040186f (01) 90 NOP 0x00401870 (05) A108204000 MOV EAX, [0x402008] 0x00401875 (02) 8B00 MOV EAX, [EAX] 0x00401877 (02) 85C0 TEST EAX, EAX 0x00401879 (02) 741F JZ 0x40189a 0x0040187b (03) 83EC0C SUB ESP, 0xc 0x0040187e (02) 6690 NOP 0x00401880 (02) FFD0 CALL EAX 0x00401882 (05) A108204000 MOV EAX, [0x402008] 0x00401887 (03) 8D5004 LEA EDX, [EAX+0x4] 0x0040188a (03) 8B4004 MOV EAX, [EAX+0x4] 0x0040188d (06) 891508204000 MOV [0x402008], EDX 0x00401893 (02) 85C0 TEST EAX, EAX 0x00401895 (02) 75E9 JNZ 0x401880 0x00401897 (03) 83C40C ADD ESP, 0xc 0x0040189a (02) F3C3 RET 0x0040189c (04) 8D742600 LEA ESI, [ESI+0x0] 0x004018a0 (01) 53 PUSH EBX 0x004018a1 (03) 83EC18 SUB ESP, 0x18 0x004018a4 (06) 8B1D6C1C4000 MOV EBX, [0x401c6c] 0x004018aa (03) 83FBFF CMP EBX, -0x1 0x004018ad (02) 7424 JZ 0x4018d3 0x004018af (02) 85DB TEST EBX, EBX 0x004018b1 (02) 740F JZ 0x4018c2 0x004018b3 (07) FF149D6C1C4000 CALL DWORD [EBX*4+0x401c6c] 0x004018ba (03) 83EB01 SUB EBX, 0x1 0x004018bd (03) 8D7600 LEA ESI, [ESI+0x0] 0x004018c0 (02) 75F1 JNZ 0x4018b3 0x004018c2 (07) C7042470184000 MOV DWORD [ESP], 0x401870 0x004018c9 (05) E8F2F9FFFF CALL 0x4012c0 0x004018ce (03) 83C418 ADD ESP, 0x18 0x004018d1 (01) 5B POP EBX 0x004018d2 (01) C3 RET 0x004018d3 (02) 31DB XOR EBX, EBX 0x004018d5 (02) EB02 JMP 0x4018d9 0x004018d7 (02) 89C3 MOV EBX, EAX 0x004018d9 (03) 8D4301 LEA EAX, [EBX+0x1] 0x004018dc (07) 8B14856C1C4000 MOV EDX, [EAX*4+0x401c6c] 0x004018e3 (02) 85D2 TEST EDX, EDX 0x004018e5 (02) 75F0 JNZ 0x4018d7 0x004018e7 (02) EBC6 JMP 0x4018af 0x004018e9 (07) 8DB42600000000 LEA ESI, [ESI+0x0] 0x004018f0 (06) 8B0D24504000 MOV ECX, [0x405024] 0x004018f6 (02) 85C9 TEST ECX, ECX 0x004018f8 (02) 7406 JZ 0x401900 0x004018fa (02) F3C3 RET 0x004018fc (04) 8D742600 LEA ESI, [ESI+0x0] 0x00401900 (0a) C7052450400001000000 MOV DWORD [0x405024], 0x1 0x0040190a (02) EB94 JMP 0x4018a0 0x0040190c (01) 90 NOP 0x0040190d (01) 90 NOP 0x0040190e (01) 90 NOP 0x0040190f (01) 90 NOP 0x00401910 (01) 56 PUSH ESI 0x00401911 (01) 53 PUSH EBX 0x00401912 (03) 83EC14 SUB ESP, 0x14 0x00401915 (07) C7042430504000 MOV DWORD [ESP], 0x405030 0x0040191c (05) E8AF020000 CALL 0x401bd0 0x00401921 (06) 8B1D48504000 MOV EBX, [0x405048] 0x00401927 (03) 83EC04 SUB ESP, 0x4 0x0040192a (02) 85DB TEST EBX, EBX 0x0040192c (02) 742D JZ 0x40195b 0x0040192e (02) 6690 NOP 0x00401930 (02) 8B03 MOV EAX, [EBX] 0x00401932 (03) 890424 MOV [ESP], EAX 0x00401935 (05) E89E020000 CALL 0x401bd8 0x0040193a (03) 83EC04 SUB ESP, 0x4 0x0040193d (02) 89C6 MOV ESI, EAX 0x0040193f (05) E89C020000 CALL 0x401be0 0x00401944 (02) 85C0 TEST EAX, EAX 0x00401946 (02) 750C JNZ 0x401954 0x00401948 (02) 85F6 TEST ESI, ESI 0x0040194a (02) 7408 JZ 0x401954 0x0040194c (03) 8B4304 MOV EAX, [EBX+0x4] 0x0040194f (03) 893424 MOV [ESP], ESI 0x00401952 (02) FFD0 CALL EAX 0x00401954 (03) 8B5B08 MOV EBX, [EBX+0x8] 0x00401957 (02) 85DB TEST EBX, EBX 0x00401959 (02) 75D5 JNZ 0x401930 0x0040195b (07) C7042430504000 MOV DWORD [ESP], 0x405030 0x00401962 (05) E881020000 CALL 0x401be8 0x00401967 (03) 83EC04 SUB ESP, 0x4 0x0040196a (03) 83C414 ADD ESP, 0x14 0x0040196d (01) 5B POP EBX 0x0040196e (01) 5E POP ESI 0x0040196f (01) C3 RET 0x00401970 (03) 83EC1C SUB ESP, 0x1c 0x00401973 (05) A12C504000 MOV EAX, [0x40502c] 0x00401978 (04) 89742418 MOV [ESP+0x18], ESI 0x0040197c (02) 31F6 XOR ESI, ESI 0x0040197e (04) 895C2414 MOV [ESP+0x14], EBX 0x00401982 (02) 85C0 TEST EAX, EAX 0x00401984 (02) 750E JNZ 0x401994 0x00401986 (02) 89F0 MOV EAX, ESI 0x00401988 (04) 8B5C2414 MOV EBX, [ESP+0x14] 0x0040198c (04) 8B742418 MOV ESI, [ESP+0x18] 0x00401990 (03) 83C41C ADD ESP, 0x1c 0x00401993 (01) C3 RET 0x00401994 (08) C74424040C000000 MOV DWORD [ESP+0x4], 0xc 0x0040199c (07) C7042401000000 MOV DWORD [ESP], 0x1 0x004019a3 (05) E8E8010000 CALL 0x401b90 0x004019a8 (02) 85C0 TEST EAX, EAX 0x004019aa (02) 89C3 MOV EBX, EAX 0x004019ac (02) 7447 JZ 0x4019f5 0x004019ae (04) 8B442420 MOV EAX, [ESP+0x20] 0x004019b2 (07) C7042430504000 MOV DWORD [ESP], 0x405030 0x004019b9 (02) 8903 MOV [EBX], EAX 0x004019bb (04) 8B442424 MOV EAX, [ESP+0x24] 0x004019bf (03) 894304 MOV [EBX+0x4], EAX 0x004019c2 (05) E809020000 CALL 0x401bd0 0x004019c7 (05) A148504000 MOV EAX, [0x405048] 0x004019cc (06) 891D48504000 MOV [0x405048], EBX 0x004019d2 (03) 894308 MOV [EBX+0x8], EAX 0x004019d5 (03) 83EC04 SUB ESP, 0x4 0x004019d8 (07) C7042430504000 MOV DWORD [ESP], 0x405030 0x004019df (05) E804020000 CALL 0x401be8 0x004019e4 (02) 89F0 MOV EAX, ESI 0x004019e6 (03) 83EC04 SUB ESP, 0x4 0x004019e9 (04) 8B5C2414 MOV EBX, [ESP+0x14] 0x004019ed (04) 8B742418 MOV ESI, [ESP+0x18] 0x004019f1 (03) 83C41C ADD ESP, 0x1c 0x004019f4 (01) C3 RET 0x004019f5 (05) BEFFFFFFFF MOV ESI, 0xffffffff 0x004019fa (02) EB8A JMP 0x401986 0x004019fc (04) 8D742600 LEA ESI, [ESI+0x0] 0x00401a00 (01) 53 PUSH EBX 0x00401a01 (03) 83EC18 SUB ESP, 0x18 0x00401a04 (05) A12C504000 MOV EAX, [0x40502c] 0x00401a09 (04) 8B5C2420 MOV EBX, [ESP+0x20] 0x00401a0d (02) 85C0 TEST EAX, EAX 0x00401a0f (02) 7507 JNZ 0x401a18 0x00401a11 (03) 83C418 ADD ESP, 0x18 0x00401a14 (02) 31C0 XOR EAX, EAX 0x00401a16 (01) 5B POP EBX 0x00401a17 (01) C3 RET 0x00401a18 (07) C7042430504000 MOV DWORD [ESP], 0x405030 0x00401a1f (05) E8AC010000 CALL 0x401bd0 0x00401a24 (06) 8B1548504000 MOV EDX, [0x405048] 0x00401a2a (03) 83EC04 SUB ESP, 0x4 0x00401a2d (02) 85D2 TEST EDX, EDX 0x00401a2f (02) 741E JZ 0x401a4f 0x00401a31 (02) 8B02 MOV EAX, [EDX] 0x00401a33 (02) 39D8 CMP EAX, EBX 0x00401a35 (02) 7511 JNZ 0x401a48 0x00401a37 (02) EB4B JMP 0x401a84 0x00401a39 (07) 8DB42600000000 LEA ESI, [ESI+0x0] 0x00401a40 (02) 8B08 MOV ECX, [EAX] 0x00401a42 (02) 39D9 CMP ECX, EBX 0x00401a44 (02) 741F JZ 0x401a65 0x00401a46 (02) 89C2 MOV EDX, EAX 0x00401a48 (03) 8B4208 MOV EAX, [EDX+0x8] 0x00401a4b (02) 85C0 TEST EAX, EAX 0x00401a4d (02) 75F1 JNZ 0x401a40 0x00401a4f (07) C7042430504000 MOV DWORD [ESP], 0x405030 0x00401a56 (05) E88D010000 CALL 0x401be8 0x00401a5b (03) 83EC04 SUB ESP, 0x4 0x00401a5e (03) 83C418 ADD ESP, 0x18 0x00401a61 (02) 31C0 XOR EAX, EAX 0x00401a63 (01) 5B POP EBX 0x00401a64 (01) C3 RET 0x00401a65 (03) 8B4808 MOV ECX, [EAX+0x8] 0x00401a68 (03) 894A08 MOV [EDX+0x8], ECX 0x00401a6b (03) 890424 MOV [ESP], EAX 0x00401a6e (05) E825010000 CALL 0x401b98 0x00401a73 (07) C7042430504000 MOV DWORD [ESP], 0x405030 0x00401a7a (05) E869010000 CALL 0x401be8 0x00401a7f (03) 83EC04 SUB ESP, 0x4 0x00401a82 (02) EBDA JMP 0x401a5e 0x00401a84 (03) 8B4208 MOV EAX, [EDX+0x8] 0x00401a87 (05) A348504000 MOV [0x405048], EAX 0x00401a8c (02) 89D0 MOV EAX, EDX 0x00401a8e (02) EBDB JMP 0x401a6b 0x00401a90 (03) 83EC1C SUB ESP, 0x1c 0x00401a93 (04) 8B442424 MOV EAX, [ESP+0x24] 0x00401a97 (03) 83F801 CMP EAX, 0x1 0x00401a9a (02) 7444 JZ 0x401ae0 0x00401a9c (02) 7212 JB 0x401ab0 0x00401a9e (03) 83F803 CMP EAX, 0x3 0x00401aa1 (02) 745D JZ 0x401b00 0x00401aa3 (05) B801000000 MOV EAX, 0x1 0x00401aa8 (03) 83C41C ADD ESP, 0x1c 0x00401aab (01) C3 RET 0x00401aac (04) 8D742600 LEA ESI, [ESI+0x0] 0x00401ab0 (05) A12C504000 MOV EAX, [0x40502c] 0x00401ab5 (02) 85C0 TEST EAX, EAX 0x00401ab7 (02) 7568 JNZ 0x401b21 0x00401ab9 (05) A12C504000 MOV EAX, [0x40502c] 0x00401abe (03) 83F801 CMP EAX, 0x1 0x00401ac1 (02) 75E0 JNZ 0x401aa3 0x00401ac3 (07) C7042430504000 MOV DWORD [ESP], 0x405030 0x00401aca (0a) C7052C50400000000000 MOV DWORD [0x40502c], 0x0 0x00401ad4 (05) E817010000 CALL 0x401bf0 0x00401ad9 (03) 83EC04 SUB ESP, 0x4 0x00401adc (02) EBC5 JMP 0x401aa3 0x00401ade (02) 6690 NOP 0x00401ae0 (05) A12C504000 MOV EAX, [0x40502c] 0x00401ae5 (02) 85C0 TEST EAX, EAX 0x00401ae7 (02) 7427 JZ 0x401b10 0x00401ae9 (0a) C7052C50400001000000 MOV DWORD [0x40502c], 0x1 0x00401af3 (05) B801000000 MOV EAX, 0x1 0x00401af8 (03) 83C41C ADD ESP, 0x1c 0x00401afb (01) C3 RET 0x00401afc (04) 8D742600 LEA ESI, [ESI+0x0] 0x00401b00 (05) A12C504000 MOV EAX, [0x40502c] 0x00401b05 (02) 85C0 TEST EAX, EAX 0x00401b07 (02) 749A JZ 0x401aa3 0x00401b09 (05) E802FEFFFF CALL 0x401910 0x00401b0e (02) EB93 JMP 0x401aa3 0x00401b10 (07) C7042430504000 MOV DWORD [ESP], 0x405030 0x00401b17 (05) E8DC000000 CALL 0x401bf8 0x00401b1c (03) 83EC04 SUB ESP, 0x4 0x00401b1f (02) EBC8 JMP 0x401ae9 0x00401b21 (05) E8EAFDFFFF CALL 0x401910 0x00401b26 (02) EB91 JMP 0x401ab9 0x00401b28 (01) 90 NOP 0x00401b29 (01) 90 NOP 0x00401b2a (01) 90 NOP 0x00401b2b (01) 90 NOP 0x00401b2c (01) 90 NOP 0x00401b2d (01) 90 NOP 0x00401b2e (01) 90 NOP 0x00401b2f (01) 90 NOP 0x00401b30 (06) FF25F0604000 JMP DWORD [0x4060f0] 0x00401b36 (01) 90 NOP 0x00401b37 (01) 90 NOP 0x00401b38 (06) FF2510614000 JMP DWORD [0x406110] 0x00401b3e (01) 90 NOP 0x00401b3f (01) 90 NOP 0x00401b40 (06) FF25F8604000 JMP DWORD [0x4060f8] 0x00401b46 (01) 90 NOP 0x00401b47 (01) 90 NOP 0x00401b48 (06) FF25F4604000 JMP DWORD [0x4060f4] 0x00401b4e (01) 90 NOP 0x00401b4f (01) 90 NOP 0x00401b50 (06) FF2500614000 JMP DWORD [0x406100] 0x00401b56 (01) 90 NOP 0x00401b57 (01) 90 NOP 0x00401b58 (06) FF2530614000 JMP DWORD [0x406130] 0x00401b5e (01) 90 NOP 0x00401b5f (01) 90 NOP 0x00401b60 (06) FF252C614000 JMP DWORD [0x40612c] 0x00401b66 (01) 90 NOP 0x00401b67 (01) 90 NOP 0x00401b68 (06) FF2504614000 JMP DWORD [0x406104] 0x00401b6e (01) 90 NOP 0x00401b6f (01) 90 NOP 0x00401b70 (06) FF2524614000 JMP DWORD [0x406124] 0x00401b76 (01) 90 NOP 0x00401b77 (01) 90 NOP 0x00401b78 (06) FF2534614000 JMP DWORD [0x406134] 0x00401b7e (01) 90 NOP 0x00401b7f (01) 90 NOP 0x00401b80 (06) FF2514614000 JMP DWORD [0x406114] 0x00401b86 (01) 90 NOP 0x00401b87 (01) 90 NOP 0x00401b88 (06) FF2528614000 JMP DWORD [0x406128] 0x00401b8e (01) 90 NOP 0x00401b8f (01) 90 NOP 0x00401b90 (06) FF251C614000 JMP DWORD [0x40611c] 0x00401b96 (01) 90 NOP 0x00401b97 (01) 90 NOP 0x00401b98 (06) FF2520614000 JMP DWORD [0x406120] 0x00401b9e (01) 90 NOP 0x00401b9f (01) 90 NOP 0x00401ba0 (06) FF25DC604000 JMP DWORD [0x4060dc] 0x00401ba6 (01) 90 NOP 0x00401ba7 (01) 90 NOP 0x00401ba8 (06) FF25C4604000 JMP DWORD [0x4060c4] 0x00401bae (01) 90 NOP 0x00401baf (01) 90 NOP 0x00401bb0 (06) FF25CC604000 JMP DWORD [0x4060cc] 0x00401bb6 (01) 90 NOP 0x00401bb7 (01) 90 NOP 0x00401bb8 (06) FF25D0604000 JMP DWORD [0x4060d0] 0x00401bbe (01) 90 NOP 0x00401bbf (01) 90 NOP 0x00401bc0 (06) FF25E8604000 JMP DWORD [0x4060e8] 0x00401bc6 (01) 90 NOP 0x00401bc7 (01) 90 NOP 0x00401bc8 (06) FF25E4604000 JMP DWORD [0x4060e4] 0x00401bce (01) 90 NOP 0x00401bcf (01) 90 NOP 0x00401bd0 (06) FF25C0604000 JMP DWORD [0x4060c0] 0x00401bd6 (01) 90 NOP 0x00401bd7 (01) 90 NOP 0x00401bd8 (06) FF25E0604000 JMP DWORD [0x4060e0] 0x00401bde (01) 90 NOP 0x00401bdf (01) 90 NOP 0x00401be0 (06) FF25C8604000 JMP DWORD [0x4060c8] 0x00401be6 (01) 90 NOP 0x00401be7 (01) 90 NOP 0x00401be8 (06) FF25D8604000 JMP DWORD [0x4060d8] 0x00401bee (01) 90 NOP 0x00401bef (01) 90 NOP 0x00401bf0 (06) FF25BC604000 JMP DWORD [0x4060bc] 0x00401bf6 (01) 90 NOP 0x00401bf7 (01) 90 NOP 0x00401bf8 (06) FF25D4604000 JMP DWORD [0x4060d4] 0x00401bfe (01) 90 NOP 0x00401bff (01) 90 NOP 0x00401c00 (01) 55 PUSH EBP 0x00401c01 (02) 89E5 MOV EBP, ESP 0x00401c03 (03) 83E4F0 AND ESP, -0x10 0x00401c06 (03) 83EC10 SUB ESP, 0x10 0x00401c09 (05) E8E2FCFFFF CALL 0x4018f0 0x00401c0e (08) C7442404A4000000 MOV DWORD [ESP+0x4], 0xa4 0x00401c16 (07) C7042424304000 MOV DWORD [ESP], 0x403024 0x00401c1d (05) E83EFFFFFF CALL 0x401b60 0x00401c22 (08) C744240434134000 MOV DWORD [ESP+0x4], 0x401334 0x00401c2a (07) C7042433304000 MOV DWORD [ESP], 0x403033 0x00401c31 (05) E82AFFFFFF CALL 0x401b60 0x00401c36 (05) A108614000 MOV EAX, [0x406108] 0x00401c3b (03) FF4804 DEC DWORD [EAX+0x4] 0x00401c3e (02) 7806 JS 0x401c46 0x00401c40 (02) FF00 INC DWORD [EAX] 0x00401c42 (02) 31C0 XOR EAX, EAX 0x00401c44 (01) C9 LEAVE 0x00401c45 (01) C3 RET 0x00401c46 (03) 890424 MOV [ESP], EAX 0x00401c49 (05) E81AFFFFFF CALL 0x401b68 0x00401c4e (02) EBF2 JMP 0x401c42 0x00401c50 (01) 55 PUSH EBP 0x00401c51 (02) 89E5 MOV EBP, ESP 0x00401c53 (03) 83EC18 SUB ESP, 0x18 0x00401c56 (05) E885F6FFFF CALL 0x4012e0 0x00401c5b (07) C704242C134000 MOV DWORD [ESP], 0x40132c 0x00401c62 (05) E859F6FFFF CALL 0x4012c0 0x00401c67 (01) C9 LEAVE 0x00401c68 (01) C3 RET 0x00401c69 (01) 90 NOP 0x00401c6a (01) 90 NOP 0x00401c6b (01) 90 NOP 0x00401c6c (01) FF DB 0xff 0x00401c6d (01) FF DB 0xff 0x00401c6e (01) FF DB 0xff 0x00401c6f (03) FF501C CALL DWORD [EAX+0x1c] 0x00401c72 (01) 40 INC EAX 0x00401c73 (02) 0000 ADD [EAX], AL 0x00401c75 (02) 0000 ADD [EAX], AL 0x00401c77 (02) 00FF ADD BH, BH 0x00401c79 (01) FF DB 0xff 0x00401c7a (01) FF DB 0xff 0x00401c7b (01) FF DB 0xff