【进行中】第四关、@全论坛大神【无壳无花】欢迎来虐，独孤求败!
本帖最后由 Heiye_Hack 于 2015-8-10 18:31 编辑前言：基于论坛cm版块不够活跃，高难度的cm帖子极少，就算有，也是加了各种强壳，要么就是Km帖子，而我们这个是【无壳无花】。
所以特别为大家准备些高难度，及其难吃的菜但愿我们的cm帖子能给大家带来更好的学习，技术更上一层楼。
历史关卡突破者
第一关：josong大神已突破
第二关：josong大神已突破(依旧是他)
第三关：josong大神已突破(三连杀)
第四关：下一位大神有可能就是你
文件详情
文件：注册码算法防破测试.exe
大小：1,970,176 字节
MD5：873e482f06f3b6a0c650823def0fb022
加密方式：无【无壳无花】
在线查毒：http://r.virscan.org/report/7ab4960bdc1f4cb15439c38ec53e6771
在线分析：http://habo.qq.com/file/showdetail?pk=ADMGYl1oB2UIPQ==
改动：加强反调试
破解要求：成功验证并完美破解，注册码要生成试用卡，突破不允许试用的限制，带文件破解
===========================================================
=========================上图演示============================
===========================================================
破解要求：成功验证并完美破解，注册码要生成试用卡，突破不允许试用的限制，带文件破解
下载地址： http://pan.baidu.com/s/1i390F7v 密码: 482a（文件大于1MB,所以百度云盘)
本帖最后由 ollydebug 于 2015-8-11 10:06 编辑
@josong @Heiye_Hack
03621805 55 push ebp
03621806 8BEC mov ebp,esp
03621808 81EC 0C010000 sub esp,0x10C
0362180E C745 FC 0000000>mov dword ptr ss:,0x0
03621815 C745 F8 0000000>mov dword ptr ss:,0x0
0362181C C745 F4 0000000>mov dword ptr ss:,0x0
03621823 C745 F0 0000000>mov dword ptr ss:,0x0
0362182A C745 EC 0000000>mov dword ptr ss:,0x0
03621831 C745 E8 0000000>mov dword ptr ss:,0x0
03621838 C745 E4 0000000>mov dword ptr ss:,0x0
0362183F C745 E0 0000000>mov dword ptr ss:,0x0
03621846 C745 DC 0000000>mov dword ptr ss:,0x0
0362184D 68 64000000 push 0x64
03621852 E8 CF810100 call 03639A26
03621857 83C4 04 add esp,0x4
0362185A 8945 D8 mov dword ptr ss:,eax
0362185D 8BD8 mov ebx,eax
0362185F 8BF8 mov edi,eax
03621861 33C0 xor eax,eax
03621863 B9 19000000 mov ecx,0x19
03621868 F3:AB rep stos dword ptr es:
0362186A 83C3 1C add ebx,0x1C
0362186D 53 push ebx ; ntdll.7C99D5E0
0362186E 68 24000000 push 0x24
03621873 E8 AE810100 call 03639A26
03621878 83C4 04 add esp,0x4
0362187B 5B pop ebx ; 03626828
0362187C 53 push ebx ; ntdll.7C99D5E0
0362187D 8903 mov dword ptr ds:,eax
0362187F 8BD8 mov ebx,eax
03621881 8BF8 mov edi,eax
03621883 33C0 xor eax,eax
03621885 B9 09000000 mov ecx,0x9
0362188A F3:AB rep stos dword ptr es:
0362188C 83C3 1C add ebx,0x1C
0362188F 53 push ebx ; ntdll.7C99D5E0
03621890 68 58000000 push 0x58
03621895 E8 8C810100 call 03639A26
0362189A 83C4 04 add esp,0x4
0362189D 5B pop ebx ; 03626828
0362189E 8903 mov dword ptr ds:,eax
036218A0 8BF8 mov edi,eax
036218A2 BE 9F9B6D03 mov esi,0x36D9B9F
036218A7 AD lods dword ptr ds:
036218A8 AB stos dword ptr es:
036218A9 AD lods dword ptr ds:
036218AA AB stos dword ptr es:
036218AB 33C0 xor eax,eax
036218AD B9 14000000 mov ecx,0x14
036218B2 F3:AB rep stos dword ptr es:
036218B4 5B pop ebx ; 03626828
036218B5 83C3 44 add ebx,0x44
036218B8 53 push ebx ; ntdll.7C99D5E0
036218B9 68 08020000 push 0x208
036218BE E8 63810100 call 03639A26
036218C3 83C4 04 add esp,0x4
036218C6 5B pop ebx ; 03626828
036218C7 8903 mov dword ptr ds:,eax
036218C9 8BF8 mov edi,eax
036218CB BE A79B6D03 mov esi,0x36D9BA7
036218D0 AD lods dword ptr ds:
036218D1 AB stos dword ptr es:
036218D2 AD lods dword ptr ds:
036218D3 AB stos dword ptr es:
036218D4 33C0 xor eax,eax
036218D6 B9 80000000 mov ecx,0x80
036218DB F3:AB rep stos dword ptr es:
036218DD C745 D4 0000000>mov dword ptr ss:,0x0
036218E4 C745 D0 0000000>mov dword ptr ss:,0x0
036218EB C745 CC 0000000>mov dword ptr ss:,0x0
036218F2 C745 C8 0000000>mov dword ptr ss:,0x0
036218F9 C745 C4 0000000>mov dword ptr ss:,0x0
03621900 C745 C0 0000000>mov dword ptr ss:,0x0
03621907 C745 BC 0000000>mov dword ptr ss:,0x0
0362190E C745 B8 0000000>mov dword ptr ss:,0x0
03621915 C745 B4 0000000>mov dword ptr ss:,0x0
0362191C C745 B0 0000000>mov dword ptr ss:,0x0
03621923 C745 AC 0000000>mov dword ptr ss:,0x0
0362192A C745 A8 0000000>mov dword ptr ss:,0x0
03621931 C745 A4 0000000>mov dword ptr ss:,0x0
03621938 C745 A0 0000000>mov dword ptr ss:,0x0
0362193F C745 9C 0000000>mov dword ptr ss:,0x0
03621946 C745 98 0000000>mov dword ptr ss:,0x0
0362194D C745 94 0000000>mov dword ptr ss:,0x0
03621954 C745 90 0000000>mov dword ptr ss:,0x0
0362195B C745 8C 0000000>mov dword ptr ss:,0x0
03621962 C745 88 0000000>mov dword ptr ss:,0x0
03621969 C745 84 0000000>mov dword ptr ss:,0x0
03621970 C745 80 0000000>mov dword ptr ss:,0x0
03621977 C785 7CFFFFFF 0>mov dword ptr ss:,0x0
03621981 C785 78FFFFFF 0>mov dword ptr ss:,0x0
0362198B C785 74FFFFFF 0>mov dword ptr ss:,0x0
03621995 C785 70FFFFFF 0>mov dword ptr ss:,0x0
0362199F C785 6CFFFFFF 0>mov dword ptr ss:,0x0
036219A9 C785 68FFFFFF 0>mov dword ptr ss:,0x0
036219B3 833D DC167003 0>cmp dword ptr ds:,0x1
036219BA 0F85 02000000 jnz 036219C2
036219C0^ EB F1 jmp short 036219B3
036219C2 833D 08177003 0>cmp dword ptr ds:,0x1
036219C9 0F85 28000000 jnz 036219F7
036219CF FF35 50167003 push dword ptr ds: ; user32.SendMessageA
036219D5 E8 6AFAFEFF call 03611444
036219DA 8985 5CFFFFFF mov dword ptr ss:,eax
036219E0 81BD 5CFFFFFF E>cmp dword ptr ss:,0xEB
036219EA 0F84 07000000 je 036219F7
036219F0 B8 01000000 mov eax,0x1
036219F5 EB 05 jmp short 036219FC
036219F7 B8 00000000 mov eax,0x0
036219FC 85C0 test eax,eax
036219FE 0F84 0C000000 je 03621A10
03621A04 837D FC 00 cmp dword ptr ss:,0x0
03621A08 0F85 02000000 jnz 03621A10
03621A0E^ EB F4 jmp short 03621A04
03621A10 FF75 08 push dword ptr ss:
03621A13 E8 78FDFEFF call 03611790
03621A18 8945 F8 mov dword ptr ss:,eax
03621A1B DB45 08 fild dword ptr ss:
03621A1E DD9D 60FFFFFF fstp qword ptr ss:
03621A24 DD85 60FFFFFF fld qword ptr ss:
03621A2A DC05 37976D03 fadd qword ptr ds:
03621A30 DD9D 58FFFFFF fstp qword ptr ss:
03621A36 DD85 58FFFFFF fld qword ptr ss:
03621A3C E8 7AF8FEFF call 036112BB
03621A41 50 push eax
03621A42 E8 49FDFEFF call 03611790
03621A47 8945 F4 mov dword ptr ss:,eax
03621A4A FF35 4C167003 push dword ptr ds: ; kernel32.RtlMoveMemory
03621A50 E8 EFF9FEFF call 03611444
03621A55 8985 60FFFFFF mov dword ptr ss:,eax
03621A5B 81BD 60FFFFFF C>cmp dword ptr ss:,0xCC
03621A65 0F85 0A000000 jnz 03621A75
03621A6B B8 00000000 mov eax,0x0
03621A70 E9 12400000 jmp 03625A87
03621A75 DB05 4C167003 fild dword ptr ds:
03621A7B DD9D 60FFFFFF fstp qword ptr ss:
03621A81 DD85 60FFFFFF fld qword ptr ss:
03621A87 DC05 55976D03 fadd qword ptr ds:
03621A8D DD9D 58FFFFFF fstp qword ptr ss:
03621A93 DD85 58FFFFFF fld qword ptr ss:
03621A99 E8 1DF8FEFF call 036112BB
03621A9E 50 push eax
03621A9F E8 A0F9FEFF call 03611444
03621AA4 8985 50FFFFFF mov dword ptr ss:,eax
03621AAA 81BD 50FFFFFF C>cmp dword ptr ss:,0xCC
03621AB4 0F85 0A000000 jnz 03621AC4
03621ABA B8 00000000 mov eax,0x0
03621ABF E9 C33F0000 jmp 03625A87
03621AC4 FF35 DC157003 push dword ptr ds: ; ntdll.KiUserExceptionDispatcher
03621ACA E8 75F9FEFF call 03611444
03621ACF 8985 60FFFFFF mov dword ptr ss:,eax
03621AD5 81BD 60FFFFFF C>cmp dword ptr ss:,0xCC
03621ADF 0F85 0A000000 jnz 03621AEF
03621AE5 C705 DC167003 0>mov dword ptr ds:,0x1
03621AEF FF75 F8 push dword ptr ss:
03621AF2 E8 99FCFEFF call 03611790
03621AF7 8945 F0 mov dword ptr ss:,eax
03621AFA DB45 F8 fild dword ptr ss:
03621AFD DD9D 60FFFFFF fstp qword ptr ss:
03621B03 DD85 60FFFFFF fld qword ptr ss:
03621B09 DC05 1D9D6D03 fadd qword ptr ds:
03621B0F DD9D 58FFFFFF fstp qword ptr ss:
03621B15 DD85 58FFFFFF fld qword ptr ss:
03621B1B E8 9BF7FEFF call 036112BB
03621B20 50 push eax
03621B21 E8 6AFCFEFF call 03611790
03621B26 8945 EC mov dword ptr ss:,eax
03621B29 817D F0 0300008>cmp dword ptr ss:,0x80000003
03621B30 0F85 F2000000 jnz 03621C28
03621B36 DB45 F4 fild dword ptr ss:
03621B39 DD9D 60FFFFFF fstp qword ptr ss:
03621B3F DD85 60FFFFFF fld qword ptr ss:
03621B45 DC05 C89D6D03 fadd qword ptr ds:
03621B4B DD9D 58FFFFFF fstp qword ptr ss:
03621B51 DD85 58FFFFFF fld qword ptr ss:
03621B57 E8 5FF7FEFF call 036112BB
03621B5C 50 push eax
03621B5D E8 2EFCFEFF call 03611790
03621B62 8985 50FFFFFF mov dword ptr ss:,eax
03621B68 81BD 50FFFFFF 9>cmp dword ptr ss:,0x47169F
03621B72 0F85 A6000000 jnz 03621C1E
03621B78 C705 F8167003 0>mov dword ptr ds:,0x0
03621B82 DB45 F4 fild dword ptr ss:
03621B85 DD9D 60FFFFFF fstp qword ptr ss:
03621B8B DD85 60FFFFFF fld qword ptr ss:
03621B91 DC05 0B9C6D03 fadd qword ptr ds:
03621B97 DD9D 58FFFFFF fstp qword ptr ss:
03621B9D DD85 58FFFFFF fld qword ptr ss:
03621BA3 E8 13F7FEFF call 036112BB
03621BA8 50 push eax
03621BA9 E8 E2FBFEFF call 03611790
03621BAE 8985 4CFFFFFF mov dword ptr ss:,eax
03621BB4 DB85 4CFFFFFF fild dword ptr ss:
03621BBA DD9D 4CFFFFFF fstp qword ptr ss:
03621BC0 DD85 4CFFFFFF fld qword ptr ss:
03621BC6 DC05 55976D03 fadd qword ptr ds:
03621BCC DD9D 44FFFFFF fstp qword ptr ss:
03621BD2 DD85 44FFFFFF fld qword ptr ss:
03621BD8 E8 DEF6FEFF call 036112BB
03621BDD 8945 E8 mov dword ptr ss:,eax
03621BE0 DB45 F4 fild dword ptr ss:
03621BE3 DD9D 60FFFFFF fstp qword ptr ss:
03621BE9 DD85 60FFFFFF fld qword ptr ss:
03621BEF DC05 0B9C6D03 fadd qword ptr ds:
03621BF5 DD9D 58FFFFFF fstp qword ptr ss:
03621BFB FF75 E8 push dword ptr ss:
03621BFE DD85 58FFFFFF fld qword ptr ss:
03621C04 E8 B2F6FEFF call 036112BB
03621C09 50 push eax
03621C0A E8 1D6AFFFF call 0361862C
03621C0F B8 FFFFFFFF mov eax,-0x1
03621C14 E9 6E3E0000 jmp 03625A87
03621C19 E9 00000000 jmp 03621C1E
03621C1E B8 00000000 mov eax,0x0
03621C23 E9 5F3E0000 jmp 03625A87
03621C28 817D F0 0400008>cmp dword ptr ss:,0x80000004
03621C2F 0F85 1B3E0000 jnz 03625A50
03621C35 A1 50167003 mov eax,dword ptr ds:
03621C3A 3945 EC cmp dword ptr ss:,eax
03621C3D 0F85 F7040000 jnz 0362213A
03621C43 DB45 F4 fild dword ptr ss:
03621C46 DD9D 60FFFFFF fstp qword ptr ss:
03621C4C DD85 60FFFFFF fld qword ptr ss:
03621C52 DC05 D09D6D03 fadd qword ptr ds:
03621C58 DD9D 58FFFFFF fstp qword ptr ss:
03621C5E DD85 58FFFFFF fld qword ptr ss:
03621C64 E8 52F6FEFF call 036112BB
03621C69 50 push eax
03621C6A E8 21FBFEFF call 03611790
03621C6F 8985 4CFFFFFF mov dword ptr ss:,eax
03621C75 DB85 4CFFFFFF fild dword ptr ss:
03621C7B DD9D 4CFFFFFF fstp qword ptr ss:
03621C81 DD85 4CFFFFFF fld qword ptr ss:
03621C87 DC05 37976D03 fadd qword ptr ds:
03621C8D DD9D 44FFFFFF fstp qword ptr ss:
03621C93 DD85 44FFFFFF fld qword ptr ss:
03621C99 E8 1DF6FEFF call 036112BB
03621C9E 50 push eax
03621C9F E8 ECFAFEFF call 03611790
03621CA4 8985 3CFFFFFF mov dword ptr ss:,eax
03621CAA 81BD 3CFFFFFF 4>cmp dword ptr ss:,-0x1BC
03621CB4 0F85 0A000000 jnz 03621CC4
03621CBA C705 F8167003 0>mov dword ptr ds:,0x0
03621CC4 DB45 F4 fild dword ptr ss:
03621CC7 DD9D 60FFFFFF fstp qword ptr ss:
03621CCD DD85 60FFFFFF fld qword ptr ss:
03621CD3 DC05 0B9C6D03 fadd qword ptr ds:
03621CD9 DD9D 58FFFFFF fstp qword ptr ss:
03621CDF DD85 58FFFFFF fld qword ptr ss:
03621CE5 E8 D1F5FEFF call 036112BB
03621CEA 50 push eax
03621CEB E8 A0FAFEFF call 03611790
03621CF0 8985 4CFFFFFF mov dword ptr ss:,eax
03621CF6 DB85 4CFFFFFF fild dword ptr ss:
03621CFC DD9D 4CFFFFFF fstp qword ptr ss:
03621D02 DD85 4CFFFFFF fld qword ptr ss:
03621D08 DC05 F4956D03 fadd qword ptr ds:
03621D0E DD9D 44FFFFFF fstp qword ptr ss:
03621D14 DD85 44FFFFFF fld qword ptr ss:
03621D1A E8 9CF5FEFF call 036112BB
03621D1F 8945 E8 mov dword ptr ss:,eax
03621D22 DB45 F4 fild dword ptr ss:
03621D25 DD9D 60FFFFFF fstp qword ptr ss:
03621D2B DD85 60FFFFFF fld qword ptr ss:
03621D31 DC05 0B9C6D03 fadd qword ptr ds:
03621D37 DD9D 58FFFFFF fstp qword ptr ss:
03621D3D FF75 E8 push dword ptr ss:
03621D40 DD85 58FFFFFF fld qword ptr ss:
03621D46 E8 70F5FEFF call 036112BB
03621D4B 50 push eax
03621D4C E8 DB68FFFF call 0361862C
03621D51 E8 F91BFFFF call 0361394F
03621D56 8945 E4 mov dword ptr ss:,eax
03621D59 833D 94157003 0>cmp dword ptr ds:,0x0
03621D60 0F8E 16000000 jle 03621D7C
03621D66 8B45 E4 mov eax,dword ptr ss: ; ntdll.7C962628
03621D69 3905 94157003 cmp dword ptr ds:,eax
03621D6F 0F8D 07000000 jge 03621D7C
03621D75 B8 01000000 mov eax,0x1
03621D7A EB 05 jmp short 03621D81
03621D7C B8 00000000 mov eax,0x0
03621D81 85C0 test eax,eax
03621D83 0F84 05000000 je 03621D8E
03621D89 E8 903D0000 call 03625B1E
03621D8E A1 1C177003 mov eax,dword ptr ds:
03621D93 3945 E4 cmp dword ptr ss:,eax
03621D96 0F8C 14000000 jl 03621DB0
03621D9C 833D 1C177003 0>cmp dword ptr ds:,0x0
03621DA3 0F84 07000000 je 03621DB0
03621DA9 B8 01000000 mov eax,0x1
03621DAE EB 05 jmp short 03621DB5
03621DB0 B8 00000000 mov eax,0x0
03621DB5 85C0 test eax,eax
03621DB7 0F84 36030000 je 036220F3
03621DBD DB45 E4 fild dword ptr ss:
03621DC0 DD9D 60FFFFFF fstp qword ptr ss:
03621DC6 DD85 60FFFFFF fld qword ptr ss:
03621DCC DC05 D89D6D03 fadd qword ptr ds:
03621DD2 DD9D 58FFFFFF fstp qword ptr ss:
03621DD8 DD85 58FFFFFF fld qword ptr ss:
03621DDE E8 D8F4FEFF call 036112BB
03621DE3 A3 1C177003 mov dword ptr ds:,eax
03621DE8 DB45 E4 fild dword ptr ss:
03621DEB DD9D 60FFFFFF fstp qword ptr ss:
03621DF1 DD85 60FFFFFF fld qword ptr ss:
03621DF7 DC35 EB9B6D03 fdiv qword ptr ds:
03621DFD DD9D 58FFFFFF fstp qword ptr ss:
03621E03 DD85 58FFFFFF fld qword ptr ss:
03621E09 E8 ADF4FEFF call 036112BB
03621E0E 8945 E4 mov dword ptr ss:,eax
03621E11 68 04000080 push 0x80000004
03621E16 6A 00 push 0x0
03621E18 A1 F4167003 mov eax,dword ptr ds:
03621E1D 85C0 test eax,eax
03621E1F 75 05 jnz short 03621E26
03621E21 B8 00DD6B03 mov eax,0x36BDD00
03621E26 50 push eax
03621E27 68 01000000 push 0x1
03621E2C BB C0A36303 mov ebx,0x363A3C0
03621E31 E8 EA7B0100 call 03639A20
03621E36 83C4 10 add esp,0x10
03621E39 8945 E0 mov dword ptr ss:,eax
03621E3C DB45 E4 fild dword ptr ss:
03621E3F DD9D 60FFFFFF fstp qword ptr ss:
03621E45 DD85 60FFFFFF fld qword ptr ss:
03621E4B DC05 F39B6D03 fadd qword ptr ds:
03621E51 DD9D 58FFFFFF fstp qword ptr ss:
03621E57 DB45 E0 fild dword ptr ss:
03621E5A DD9D 50FFFFFF fstp qword ptr ss:
03621E60 DD85 58FFFFFF fld qword ptr ss:
03621E66 DCA5 50FFFFFF fsub qword ptr ss:
03621E6C DC1D FB9B6D03 fcomp qword ptr ds:
03621E72 DFE0 fstsw ax
03621E74 F6C4 01 test ah,0x1
03621E77 0F85 45000000 jnz 03621EC2
03621E7D DB45 E0 fild dword ptr ss:
03621E80 DD9D 44FFFFFF fstp qword ptr ss:
03621E86 DD85 44FFFFFF fld qword ptr ss:
03621E8C DC05 039C6D03 fadd qword ptr ds:
03621E92 DD9D 3CFFFFFF fstp qword ptr ss:
03621E98 DB45 E4 fild dword ptr ss:
03621E9B DD9D 34FFFFFF fstp qword ptr ss:
03621EA1 DD85 3CFFFFFF fld qword ptr ss:
03621EA7 DCA5 34FFFFFF fsub qword ptr ss:
03621EAD DC1D FB9B6D03 fcomp qword ptr ds:
03621EB3 DFE0 fstsw ax
03621EB5 F6C4 01 test ah,0x1
03621EB8 0F85 04000000 jnz 03621EC2
03621EBE 33C0 xor eax,eax
03621EC0 EB 05 jmp short 03621EC7
03621EC2 B8 01000000 mov eax,0x1
03621EC7 85C0 test eax,eax
03621EC9 0F84 0A000000 je 03621ED9
03621ECF E8 4A3C0000 call 03625B1E
03621ED4 E9 15020000 jmp 036220EE
03621ED9 833D 24167003 6>cmp dword ptr ds:,0x64
03621EE0 0F8E 6D010000 jle 03622053
03621EE6 833D 30167003 0>cmp dword ptr ds:,0x0
03621EED 0F84 60010000 je 03622053
03621EF3 833D 2C167003 6>cmp dword ptr ds:,0x64
03621EFA 0F8E 53010000 jle 03622053
03621F00 833D 28167003 6>cmp dword ptr ds:,0x64
03621F07 0F8E 46010000 jle 03622053
03621F0D 833D 88157003 6>cmp dword ptr ds:,0x64
03621F14 0F8E 39010000 jle 03622053
03621F1A 833D 80157003 6>cmp dword ptr ds:,0x64
03621F21 0F8E 2C010000 jle 03622053
03621F27 833D 50167003 6>cmp dword ptr ds:,0x64
03621F2E 0F8E 1F010000 jle 03622053
03621F34 833D 74157003 6>cmp dword ptr ds:,0x64
03621F3B 0F8E 12010000 jle 03622053
03621F41 833D 4C167003 6>cmp dword ptr ds:,0x64
03621F48 0F8E 05010000 jle 03622053
03621F4E 833D 64167003 6>cmp dword ptr ds:,0x64
03621F55 0F8E F8000000 jle 03622053
03621F5B 833D 98157003 6>cmp dword ptr ds:,0x64
03621F62 0F8E EB000000 jle 03622053
03621F68 833D 68167003 6>cmp dword ptr ds:,0x64
03621F6F 0F8E DE000000 jle 03622053
03621F75 833D 84157003 6>cmp dword ptr ds:,0x64
03621F7C 0F8E D1000000 jle 03622053
03621F82 833D 38167003 6>cmp dword ptr ds:,0x64
03621F89 0F8E C4000000 jle 03622053
03621F8F 833D 3C167003 6>cmp dword ptr ds:,0x64
03621F96 0F8E B7000000 jle 03622053
03621F9C 833D 40167003 6>cmp dword ptr ds:,0x64
03621FA3 0F8E AA000000 jle 03622053
03621FA9 833D 44167003 6>cmp dword ptr ds:,0x64
03621FB0 0F8E 9D000000 jle 03622053
03621FB6 833D 48167003 6>cmp dword ptr ds:,0x64
03621FBD 0F8E 90000000 jle 03622053
03621FC3 833D D0157003 6>cmp dword ptr ds:,0x64
03621FCA 0F8E 83000000 jle 03622053
03621FD0 833D D4157003 6>cmp dword ptr ds:,0x64
03621FD7 0F8E 76000000 jle 03622053
03621FDD 833D 18167003 6>cmp dword ptr ds:,0x64
03621FE4 0F8E 69000000 jle 03622053
03621FEA 833D C8157003 6>cmp dword ptr ds:,0x64
03621FF1 0F8E 5C000000 jle 03622053
03621FF7 833D CC157003 6>cmp dword ptr ds:,0x64
03621FFE 0F8E 4F000000 jle 03622053
03622004 833D 54167003 6>cmp dword ptr ds:,0x64
0362200B 0F8E 42000000 jle 03622053
03622011 833D DC157003 6>cmp dword ptr ds:,0x64
03622018 0F8F 24000000 jg 03622042
0362201E 833D 60167003 6>cmp dword ptr ds:,0x64
03622025 0F8F 17000000 jg 03622042
0362202B 813D 90157003 7>cmp dword ptr ds:,0x378
03622035 0F8F 07000000 jg 03622042
0362203B B8 01000000 mov eax,0x1
03622040 EB 05 jmp short 03622047
03622042 B8 00000000 mov eax,0x0
03622047 85C0 test eax,eax
03622049 0F85 04000000 jnz 03622053
0362204F 33C0 xor eax,eax
03622051 EB 05 jmp short 03622058
03622053 B8 01000000 mov eax,0x1
03622058 85C0 test eax,eax
0362205A 0F84 05000000 je 03622065
03622060 E8 B93A0000 call 03625B1E
03622065 833D D8167003 6>cmp dword ptr ds:,0x64
0362206C 0F8F 05000000 jg 03622077
03622072 E8 A73A0000 call 03625B1E
03622077 68 1B106203 push 0x362101B
0362207C E8 2F9CFFFF call 0361BCB0
03622081 8985 5CFFFFFF mov dword ptr ss:,eax
03622087 DB85 5CFFFFFF fild dword ptr ss:
0362208D DD9D 5CFFFFFF fstp qword ptr ss:
03622093 DD85 5CFFFFFF fld qword ptr ss:
03622099 DC25 0B9C6D03 fsub qword ptr ds:
0362209F DD9D 54FFFFFF fstp qword ptr ss:
036220A5 68 B1116203 push 0x36211B1
036220AA E8 019CFFFF call 0361BCB0
036220AF 8985 48FFFFFF mov dword ptr ss:,eax
036220B5 DB85 48FFFFFF fild dword ptr ss:
036220BB DD9D 48FFFFFF fstp qword ptr ss:
036220C1 DD85 54FFFFFF fld qword ptr ss:
036220C7 DCA5 48FFFFFF fsub qword ptr ss:
036220CD D9E4 ftst
036220CF DFE0 fstsw ax
036220D1 F6C4 01 test ah,0x1
036220D4 74 02 je short 036220D8
036220D6 D9E0 fchs
036220D8 DC1D 139C6D03 fcomp qword ptr ds:
036220DE DFE0 fstsw ax
036220E0 F6C4 41 test ah,0x41
036220E3 0F85 05000000 jnz 036220EE
036220E9 E8 303A0000 call 03625B1E
036220EE E9 38000000 jmp 0362212B
036220F3 833D 1C177003 0>cmp dword ptr ds:,0x0
036220FA 0F85 2B000000 jnz 0362212B
03622100 DB45 E4 fild dword ptr ss:
03622103 DD9D 60FFFFFF fstp qword ptr ss:
03622109 DD85 60FFFFFF fld qword ptr ss:
0362210F DC05 D89D6D03 fadd qword ptr ds:
03622115 DD9D 58FFFFFF fstp qword ptr ss:
0362211B DD85 58FFFFFF fld qword ptr ss:
03622121 E8 95F1FEFF call 036112BB
03622126 A3 1C177003 mov dword ptr ds:,eax
0362212B B8 FFFFFFFF mov eax,-0x1
03622130 E9 52390000 jmp 03625A87
03622135 E9 16390000 jmp 03625A50
0362213A A1 24167003 mov eax,dword ptr ds:
0362213F 3945 EC cmp dword ptr ss:,eax
03622142 0F85 67090000 jnz 03622AAF
03622148 A1 2C167003 mov eax,dword ptr ds:
0362214D 8945 E8 mov dword ptr ss:,eax
03622150 DB45 F4 fild dword ptr ss:
03622153 DD9D 60FFFFFF fstp qword ptr ss:
03622159 DD85 60FFFFFF fld qword ptr ss:
0362215F DC05 0B9C6D03 fadd qword ptr ds:
03622165 DD9D 58FFFFFF fstp qword ptr ss:
0362216B FF75 E8 push dword ptr ss:
0362216E DD85 58FFFFFF fld qword ptr ss:
03622174 E8 42F1FEFF call 036112BB
03622179 50 push eax
0362217A E8 AD64FFFF call 0361862C
0362217F DB45 F4 fild dword ptr ss:
03622182 DD9D 60FFFFFF fstp qword ptr ss:
03622188 DD85 60FFFFFF fld qword ptr ss:
0362218E DC05 E09D6D03 fadd qword ptr ds:
03622194 DD9D 58FFFFFF fstp qword ptr ss:
0362219A DD85 58FFFFFF fld qword ptr ss:
036221A0 E8 16F1FEFF call 036112BB
036221A5 50 push eax
036221A6 E8 E5F5FEFF call 03611790
036221AB 8985 4CFFFFFF mov dword ptr ss:,eax
036221B1 DB85 4CFFFFFF fild dword ptr ss:
036221B7 DD9D 4CFFFFFF fstp qword ptr ss:
036221BD DD85 4CFFFFFF fld qword ptr ss:
036221C3 DC05 37976D03 fadd qword ptr ds:
036221C9 DD9D 44FFFFFF fstp qword ptr ss:
036221CF DD85 44FFFFFF fld qword ptr ss:
036221D5 E8 E1F0FEFF call 036112BB
036221DA 50 push eax
036221DB E8 B0F5FEFF call 03611790
036221E0 8985 3CFFFFFF mov dword ptr ss:,eax
036221E6 A1 28167003 mov eax,dword ptr ds:
036221EB 3985 3CFFFFFF cmp dword ptr ss:,eax
036221F1 0F85 A9080000 jnz 03622AA0
036221F7 DB45 F4 fild dword ptr ss:
036221FA DD9D 60FFFFFF fstp qword ptr ss:
03622200 DD85 60FFFFFF fld qword ptr ss:
03622206 DC05 E09D6D03 fadd qword ptr ds:
0362220C DD9D 58FFFFFF fstp qword ptr ss:
03622212 DD85 58FFFFFF fld qword ptr ss:
03622218 E8 9EF0FEFF call 036112BB
0362221D 50 push eax
0362221E E8 6DF5FEFF call 03611790
03622223 8985 4CFFFFFF mov dword ptr ss:,eax
03622229 DB85 4CFFFFFF fild dword ptr ss:
0362222F DD9D 4CFFFFFF fstp qword ptr ss:
03622235 DD85 4CFFFFFF fld qword ptr ss:
0362223B DB05 30167003 fild dword ptr ds:
03622241 DD9D 44FFFFFF fstp qword ptr ss:
03622247 DC85 44FFFFFF fadd qword ptr ss:
0362224D DD9D 3CFFFFFF fstp qword ptr ss:
03622253 DD85 3CFFFFFF fld qword ptr ss:
03622259 E8 5DF0FEFF call 036112BB
0362225E 50 push eax
0362225F E8 2CF5FEFF call 03611790
03622264 8945 DC mov dword ptr ss:,eax
03622267 837D DC 00 cmp dword ptr ss:,0x0
0362226B 0F8E 2A080000 jle 03622A9B
03622271 8B5D D8 mov ebx,dword ptr ss: ; ntdll.7C99D5E0
03622274 899D 64FFFFFF mov dword ptr ss:,ebx ; ntdll.7C99D5E0
0362227A 68 01030080 push 0x80000301
0362227F 6A 00 push 0x0
03622281 68 10000100 push 0x10010 ; UNICODE "PROFILE=C:\Documents and Settings\All Users"
03622286 68 01030080 push 0x80000301
0362228B 6A 00 push 0x0
0362228D 68 07000100 push 0x10007
03622292 68 02000000 push 0x2
03622297 BB 209E6303 mov ebx,0x3639E20
0362229C E8 7F770100 call 03639A20
036222A1 83C4 1C add esp,0x1C
036222A4 8B9D 64FFFFFF mov ebx,dword ptr ss:
036222AA 8903 mov dword ptr ds:,eax
036222AC FF35 C8157003 push dword ptr ds: ; kernel32.GetThreadContext
036222B2 E8 8DF1FEFF call 03611444
036222B7 8985 60FFFFFF mov dword ptr ss:,eax
036222BD 81BD 60FFFFFF C>cmp dword ptr ss:,0xCC
036222C7 0F84 25000000 je 036222F2
036222CD FF35 CC157003 push dword ptr ds: ; kernel32.SetThreadContext
036222D3 E8 6CF1FEFF call 03611444
036222D8 8985 54FFFFFF mov dword ptr ss:,eax
036222DE 81BD 54FFFFFF C>cmp dword ptr ss:,0xCC
036222E8 0F84 04000000 je 036222F2
036222EE 33C0 xor eax,eax
036222F0 EB 05 jmp short 036222F7
036222F2 B8 01000000 mov eax,0x1
036222F7 85C0 test eax,eax
036222F9 0F84 1A000000 je 03622319
036222FF C745 D4 0600000>mov dword ptr ss:,0x6
03622306 837D D4 06 cmp dword ptr ss:,0x6
0362230A 0F85 09000000 jnz 03622319
03622310 C745 D4 0600000>mov dword ptr ss:,0x6
03622317^ EB ED jmp short 03622306
03622319 8B45 D8 mov eax,dword ptr ss: ; ntdll.7C99D5E0
0362231C 50 push eax
0362231D 68 CC020000 push 0x2CC
03622322 E8 FF760100 call 03639A26
03622327 83C4 04 add esp,0x4
0362232A 8BF8 mov edi,eax
0362232C 5B pop ebx ; 03626828
0362232D 50 push eax
0362232E 899D 60FFFFFF mov dword ptr ss:,ebx ; ntdll.7C99D5E0
03622334 8985 64FFFFFF mov dword ptr ss:,eax
0362233A 8B03 mov eax,dword ptr ds: ; ntdll.7C99B520
0362233C 83C3 04 add ebx,0x4
0362233F 8907 mov dword ptr ds:,eax
03622341 83C7 04 add edi,0x4
03622344 8B03 mov eax,dword ptr ds: ; ntdll.7C99B520
03622346 83C3 04 add ebx,0x4
03622349 8907 mov dword ptr ds:,eax
0362234B 83C7 04 add edi,0x4
0362234E 8B03 mov eax,dword ptr ds: ; ntdll.7C99B520
03622350 83C3 04 add ebx,0x4
03622353 8907 mov dword ptr ds:,eax
03622355 83C7 04 add edi,0x4
03622358 8B03 mov eax,dword ptr ds: ; ntdll.7C99B520
0362235A 83C3 04 add ebx,0x4
0362235D 8907 mov dword ptr ds:,eax
0362235F 83C7 04 add edi,0x4
03622362 8B03 mov eax,dword ptr ds: ; ntdll.7C99B520
03622364 83C3 04 add ebx,0x4
03622367 8907 mov dword ptr ds:,eax
03622369 83C7 04 add edi,0x4
0362236C 8B03 mov eax,dword ptr ds: ; ntdll.7C99B520
0362236E 83C3 04 add ebx,0x4
03622371 8907 mov dword ptr ds:,eax
03622373 83C7 04 add edi,0x4
03622376 8B03 mov eax,dword ptr ds: ; ntdll.7C99B520
03622378 83C3 04 add ebx,0x4
0362237B 8907 mov dword ptr ds:,eax
0362237D 83C7 04 add edi,0x4
03622380 53 push ebx ; ntdll.7C99D5E0
03622381 8B1B mov ebx,dword ptr ds: ; ntdll.7C99B520
03622383 8B03 mov eax,dword ptr ds: ; ntdll.7C99B520
03622385 83C3 04 add ebx,0x4
03622388 8907 mov dword ptr ds:,eax
0362238A 83C7 04 add edi,0x4
0362238D 8B03 mov eax,dword ptr ds: ; ntdll.7C99B520
0362238F 83C3 04 add ebx,0x4
03622392 8907 mov dword ptr ds:,eax
03622394 83C7 04 add edi,0x4
03622397 8B03 mov eax,dword ptr ds: ; ntdll.7C99B520
03622399 83C3 04 add ebx,0x4
0362239C 8907 mov dword ptr ds:,eax
0362239E 83C7 04 add edi,0x4
036223A1 8B03 mov eax,dword ptr ds: ; ntdll.7C99B520
036223A3 83C3 04 add ebx,0x4
036223A6 8907 mov dword ptr ds:,eax
036223A8 83C7 04 add edi,0x4
036223AB 8B03 mov eax,dword ptr ds: ; ntdll.7C99B520
036223AD 83C3 04 add ebx,0x4
036223B0 8907 mov dword ptr ds:,eax
036223B2 83C7 04 add edi,0x4
036223B5 8B03 mov eax,dword ptr ds: ; ntdll.7C99B520
036223B7 83C3 04 add ebx,0x4
036223BA 8907 mov dword ptr ds:,eax
036223BC 83C7 04 add edi,0x4
036223BF 8B03 mov eax,dword ptr ds: ; ntdll.7C99B520
036223C1 83C3 04 add ebx,0x4
036223C4 8907 mov dword ptr ds:,eax
036223C6 83C7 04 add edi,0x4
036223C9 53 push ebx ; ntdll.7C99D5E0
036223CA 8B1B mov ebx,dword ptr ds: ; ntdll.7C99B520
036223CC 81C3 08000000 add ebx,0x8
036223D2 B9 50000000 mov ecx,0x50
036223D7 8BF3 mov esi,ebx ; ntdll.7C99D5E0
036223D9 F3:A4 rep movs byte ptr es:,byte ptr ds:[>
036223DB 5B pop ebx ; 03626828
036223DC 83C3 04 add ebx,0x4
036223DF 8B03 mov eax,dword ptr ds: ; ntdll.7C99B520
036223E1 83C3 04 add ebx,0x4
036223E4 8907 mov dword ptr ds:,eax
036223E6 83C7 04 add edi,0x4
036223E9 5B pop ebx ; 03626828
036223EA 83C3 04 add ebx,0x4
036223ED 8B03 mov eax,dword ptr ds: ; ntdll.7C99B520
036223EF 83C3 04 add ebx,0x4
036223F2 8907 mov dword ptr ds:,eax
036223F4 83C7 04 add edi,0x4
036223F7 8B03 mov eax,dword ptr ds: ; ntdll.7C99B520
036223F9 83C3 04 add ebx,0x4
036223FC 8907 mov dword ptr ds:,eax
036223FE 83C7 04 add edi,0x4
03622401 8B03 mov eax,dword ptr ds: ; ntdll.7C99B520
03622403 83C3 04 add ebx,0x4
03622406 8907 mov dword ptr ds:,eax
03622408 83C7 04 add edi,0x4
0362240B 8B03 mov eax,dword ptr ds: ; ntdll.7C99B520
0362240D 83C3 04 add ebx,0x4
03622410 8907 mov dword ptr ds:,eax
03622412 83C7 04 add edi,0x4
03622415 8B03 mov eax,dword ptr ds: ; ntdll.7C99B520
03622417 83C3 04 add ebx,0x4
0362241A 8907 mov dword ptr ds:,eax
0362241C 83C7 04 add edi,0x4
0362241F 8B03 mov eax,dword ptr ds: ; ntdll.7C99B520
03622421 83C3 04 add ebx,0x4
03622424 8907 mov dword ptr ds:,eax
03622426 83C7 04 add edi,0x4
03622429 8B03 mov eax,dword ptr ds: ; ntdll.7C99B520
0362242B 83C3 04 add ebx,0x4
0362242E 8907 mov dword ptr ds:,eax
03622430 83C7 04 add edi,0x4
03622433 8B03 mov eax,dword ptr ds: ; ntdll.7C99B520
03622435 83C3 04 add ebx,0x4
03622438 8907 mov dword ptr ds:,eax
0362243A 83C7 04 add edi,0x4
0362243D 8B03 mov eax,dword ptr ds: ; ntdll.7C99B520
0362243F 83C3 04 add ebx,0x4
03622442 8907 mov dword ptr ds:,eax
03622444 83C7 04 add edi,0x4
03622447 8B03 mov eax,dword ptr ds: ; ntdll.7C99B520
03622449 83C3 04 add ebx,0x4
0362244C 8907 mov dword ptr ds:,eax
0362244E 83C7 04 add edi,0x4
03622451 8B03 mov eax,dword ptr ds: ; ntdll.7C99B520
03622453 83C3 04 add ebx,0x4
03622456 8907 mov dword ptr ds:,eax
03622458 83C7 04 add edi,0x4
0362245B 8B03 mov eax,dword ptr ds: ; ntdll.7C99B520
0362245D 83C3 04 add ebx,0x4
03622460 8907 mov dword ptr ds:,eax
03622462 83C7 04 add edi,0x4
03622465 8B03 mov eax,dword ptr ds: ; ntdll.7C99B520
03622467 83C3 04 add ebx,0x4
0362246A 8907 mov dword ptr ds:,eax
0362246C 83C7 04 add edi,0x4
0362246F 8B03 mov eax,dword ptr ds: ; ntdll.7C99B520
03622471 83C3 04 add ebx,0x4
03622474 8907 mov dword ptr ds:,eax
03622476 83C7 04 add edi,0x4
03622479 8B03 mov eax,dword ptr ds: ; ntdll.7C99B520
0362247B 83C3 04 add ebx,0x4
0362247E 8907 mov dword ptr ds:,eax
03622480 83C7 04 add edi,0x4
03622483 8B03 mov eax,dword ptr ds: ; ntdll.7C99B520
03622485 83C3 04 add ebx,0x4
03622488 8907 mov dword ptr ds:,eax
0362248A 83C7 04 add edi,0x4
0362248D 53 push ebx ; ntdll.7C99D5E0
0362248E 8B1B mov ebx,dword ptr ds: ; ntdll.7C99B520
03622490 81C3 08000000 add ebx,0x8
03622496 B9 00020000 mov ecx,0x200
0362249B 8BF3 mov esi,ebx ; ntdll.7C99D5E0
0362249D F3:A4 rep movs byte ptr es:,byte ptr ds:[>
0362249F 5B pop ebx ; 03626828
036224A0 83C3 04 add ebx,0x4
036224A3 FF75 DC push dword ptr ss: ; ntdll.7C99B3C0
036224A6 B8 09000000 mov eax,0x9
036224AB E8 6A750100 call 03639A1A
036224B0 50 push eax
036224B1 8B9D 64FFFFFF mov ebx,dword ptr ss:
036224B7 53 push ebx ; ntdll.7C99D5E0
036224B8 8BBD 60FFFFFF mov edi,dword ptr ss:
036224BE 8B03 mov eax,dword ptr ds: ; ntdll.7C99B520
036224C0 83C3 04 add ebx,0x4
036224C3 8907 mov dword ptr ds:,eax
036224C5 83C7 04 add edi,0x4
036224C8 8B03 mov eax,dword ptr ds: ; ntdll.7C99B520
036224CA 83C3 04 add ebx,0x4
036224CD 8907 mov dword ptr ds:,eax
036224CF 83C7 04 add edi,0x4
036224D2 8B03 mov eax,dword ptr ds: ; ntdll.7C99B520
036224D4 83C3 04 add ebx,0x4
036224D7 8907 mov dword ptr ds:,eax
036224D9 83C7 04 add edi,0x4
036224DC 8B03 mov eax,dword ptr ds: ; ntdll.7C99B520
036224DE 83C3 04 add ebx,0x4
036224E1 8907 mov dword ptr ds:,eax
036224E3 83C7 04 add edi,0x4
036224E6 8B03 mov eax,dword ptr ds: ; ntdll.7C99B520
036224E8 83C3 04 add ebx,0x4
036224EB 8907 mov dword ptr ds:,eax
036224ED 83C7 04 add edi,0x4
036224F0 8B03 mov eax,dword ptr ds: ; ntdll.7C99B520
036224F2 83C3 04 add ebx,0x4
036224F5 8907 mov dword ptr ds:,eax
036224F7 83C7 04 add edi,0x4
036224FA 8B03 mov eax,dword ptr ds: ; ntdll.7C99B520
036224FC 83C3 04 add ebx,0x4
036224FF 8907 mov dword ptr ds:,eax
03622501 83C7 04 add edi,0x4
03622504 57 push edi
03622505 8B3F mov edi,dword ptr ds: ; ntdll.7C99D5E0
03622507 53 push ebx ; ntdll.7C99D5E0
03622508 8B03 mov eax,dword ptr ds: ; ntdll.7C99B520
0362250A 83C3 04 add ebx,0x4
0362250D 8907 mov dword ptr ds:,eax
0362250F 83C7 04 add edi,0x4
03622512 8B03 mov eax,dword ptr ds: ; ntdll.7C99B520
03622514 83C3 04 add ebx,0x4
03622517 8907 mov dword ptr ds:,eax
03622519 83C7 04 add edi,0x4
0362251C 8B03 mov eax,dword ptr ds: ; ntdll.7C99B520
0362251E 83C3 04 add ebx,0x4
03622521 8907 mov dword ptr ds:,eax
03622523 83C7 04 add edi,0x4
03622526 8B03 mov eax,dword ptr ds: ; ntdll.7C99B520
03622528 83C3 04 add ebx,0x4
0362252B 8907 mov dword ptr ds:,eax
0362252D 83C7 04 add edi,0x4
03622530 8B03 mov eax,dword ptr ds: ; ntdll.7C99B520
03622532 83C3 04 add ebx,0x4
03622535 8907 mov dword ptr ds:,eax
03622537 83C7 04 add edi,0x4
0362253A 8B03 mov eax,dword ptr ds: ; ntdll.7C99B520
0362253C 83C3 04 add ebx,0x4
0362253F 8907 mov dword ptr ds:,eax
03622541 83C7 04 add edi,0x4
03622544 8B03 mov eax,dword ptr ds: ; ntdll.7C99B520
03622546 83C3 04 add ebx,0x4
03622549 8907 mov dword ptr ds:,eax
0362254B 83C7 04 add edi,0x4
0362254E 53 push ebx ; ntdll.7C99D5E0
0362254F 57 push edi
03622550 6A 01 push 0x1
03622552 B8 02000000 mov eax,0x2
03622557 E8 B2740100 call 03639A0E
0362255C 83C4 04 add esp,0x4
0362255F 5F pop edi ; 03626828
03622560 5B pop ebx ; 03626828
03622561 53 push ebx ; ntdll.7C99D5E0
03622562 57 push edi
03622563 8B3F mov edi,dword ptr ds: ; ntdll.7C99D5E0
03622565 8B0F mov ecx,dword ptr ds: ; ntdll.7C99D5E0
03622567 83C7 04 add edi,0x4
0362256A 85C9 test ecx,ecx
0362256C 74 0F je short 0362257D
0362256E 8B07 mov eax,dword ptr ds: ; ntdll.7C99D5E0
03622570 83C7 04 add edi,0x4
03622573 49 dec ecx
03622574 74 05 je short 0362257B
03622576 0FAF07 imul eax,dword ptr ds: ; ntdll.7C99D5E0
03622579^ EB F5 jmp short 03622570
0362257B 8BC8 mov ecx,eax
0362257D 83F9 50 cmp ecx,0x50
03622580 7E 05 jle short 03622587
03622582 B9 50000000 mov ecx,0x50
03622587 8BF3 mov esi,ebx ; ntdll.7C99D5E0
03622589 F3:A4 rep movs byte ptr es:,byte ptr ds:[>
0362258B 5F pop edi ; 03626828
0362258C 5B pop ebx ; 03626828
0362258D 83C7 04 add edi,0x4
03622590 83C3 50 add ebx,0x50
03622593 8B03 mov eax,dword ptr ds: ; ntdll.7C99B520
03622595 83C3 04 add ebx,0x4
03622598 8907 mov dword ptr ds:,eax
0362259A 83C7 04 add edi,0x4
0362259D 5B pop ebx ; 03626828
0362259E 81C3 70000000 add ebx,0x70
036225A4 5F pop edi ; 03626828
036225A5 83C7 04 add edi,0x4
036225A8 8B03 mov eax,dword ptr ds: ; ntdll.7C99B520
036225AA 83C3 04 add ebx,0x4
036225AD 8907 mov dword ptr ds:,eax
036225AF 83C7 04 add edi,0x4
036225B2 8B03 mov eax,dword ptr ds: ; ntdll.7C99B520
036225B4 83C3 04 add ebx,0x4
036225B7 8907 mov dword ptr ds:,eax
036225B9 83C7 04 add edi,0x4
036225BC 8B03 mov eax,dword ptr ds: ; ntdll.7C99B520
036225BE 83C3 04 add ebx,0x4
036225C1 8907 mov dword ptr ds:,eax
036225C3 83C7 04 add edi,0x4
036225C6 8B03 mov eax,dword ptr ds: ; ntdll.7C99B520
036225C8 83C3 04 add ebx,0x4
036225CB 8907 mov dword ptr ds:,eax
036225CD 83C7 04 add edi,0x4
036225D0 8B03 mov eax,dword ptr ds: ; ntdll.7C99B520
036225D2 83C3 04 add ebx,0x4
036225D5 8907 mov dword ptr ds:,eax
036225D7 83C7 04 add edi,0x4
036225DA 8B03 mov eax,dword ptr ds: ; ntdll.7C99B520
036225DC 83C3 04 add ebx,0x4
036225DF 8907 mov dword ptr ds:,eax
036225E1 83C7 04 add edi,0x4
036225E4 8B03 mov eax,dword ptr ds: ; ntdll.7C99B520
036225E6 83C3 04 add ebx,0x4
036225E9 8907 mov dword ptr ds:,eax
036225EB 83C7 04 add edi,0x4
036225EE 8B03 mov eax,dword ptr ds: ; ntdll.7C99B520
036225F0 83C3 04 add ebx,0x4
036225F3 8907 mov dword ptr ds:,eax
036225F5 83C7 04 add edi,0x4
036225F8 8B03 mov eax,dword ptr ds: ; ntdll.7C99B520
036225FA 83C3 04 add ebx,0x4
036225FD 8907 mov dword ptr ds:,eax
036225FF 83C7 04 add edi,0x4
03622602 8B03 mov eax,dword ptr ds: ; ntdll.7C99B520
03622604 83C3 04 add ebx,0x4
03622607 8907 mov dword ptr ds:,eax
03622609 83C7 04 add edi,0x4
0362260C 8B03 mov eax,dword ptr ds: ; ntdll.7C99B520
0362260E 83C3 04 add ebx,0x4
03622611 8907 mov dword ptr ds:,eax
03622613 83C7 04 add edi,0x4
03622616 8B03 mov eax,dword ptr ds: ; ntdll.7C99B520
03622618 83C3 04 add ebx,0x4
0362261B 8907 mov dword ptr ds:,eax
0362261D 83C7 04 add edi,0x4
03622620 8B03 mov eax,dword ptr ds: ; ntdll.7C99B520
03622622 83C3 04 add ebx,0x4
03622625 8907 mov dword ptr ds:,eax
03622627 83C7 04 add edi,0x4
0362262A 8B03 mov eax,dword ptr ds: ; ntdll.7C99B520
0362262C 83C3 04 add ebx,0x4
0362262F 8907 mov dword ptr ds:,eax
03622631 83C7 04 add edi,0x4
03622634 8B03 mov eax,dword ptr ds: ; ntdll.7C99B520
03622636 83C3 04 add ebx,0x4
03622639 8907 mov dword ptr ds:,eax
0362263B 83C7 04 add edi,0x4
0362263E 8B03 mov eax,dword ptr ds: ; ntdll.7C99B520
03622640 83C3 04 add ebx,0x4
03622643 8907 mov dword ptr ds:,eax
03622645 83C7 04 add edi,0x4
03622648 53 push ebx ; ntdll.7C99D5E0
03622649 57 push edi
0362264A 6A 01 push 0x1
0362264C B8 02000000 mov eax,0x2
03622651 E8 B8730100 call 03639A0E
03622656 83C4 04 add esp,0x4
03622659 5F pop edi ; 03626828
0362265A 5B pop ebx ; 03626828
0362265B 53 push ebx ; ntdll.7C99D5E0
0362265C 57 push edi
0362265D 8B3F mov edi,dword ptr ds: ; ntdll.7C99D5E0
0362265F 8B0F mov ecx,dword ptr ds: ; ntdll.7C99D5E0
03622661 83C7 04 add edi,0x4
03622664 85C9 test ecx,ecx
03622666 74 0F je short 03622677
03622668 8B07 mov eax,dword ptr ds: ; ntdll.7C99D5E0
0362266A 83C7 04 add edi,0x4
0362266D 49 dec ecx
0362266E 74 05 je short 03622675
03622670 0FAF07 imul eax,dword ptr ds: ; ntdll.7C99D5E0
03622673^ EB F5 jmp short 0362266A
03622675 8BC8 mov ecx,eax
03622677 81F9 00020000 cmp ecx,0x200
0362267D 7E 05 jle short 03622684
0362267F B9 00020000 mov ecx,0x200
03622684 8BF3 mov esi,ebx ; ntdll.7C99D5E0
03622686 F3:A4 rep movs byte ptr es:,byte ptr ds:[>
03622688 5F pop edi ; 03626828
03622689 5B pop ebx ; 03626828
0362268A 83C7 04 add edi,0x4
0362268D 81C3 00020000 add ebx,0x200
03622693 E8 7C730100 call 03639A14
03622698 83C4 04 add esp,0x4
0362269B 58 pop eax ; 03626828
0362269C 8B5D D8 mov ebx,dword ptr ss: ; ntdll.7C99D5E0
0362269F 83C3 04 add ebx,0x4
036226A2 899D 64FFFFFF mov dword ptr ss:,ebx ; ntdll.7C99D5E0
036226A8 A1 54167003 mov eax,dword ptr ds:
036226AD 8B9D 64FFFFFF mov ebx,dword ptr ss:
036226B3 8903 mov dword ptr ds:,eax
036226B5 8B5D D8 mov ebx,dword ptr ss: ; ntdll.7C99D5E0
036226B8 83C3 08 add ebx,0x8
036226BB 899D 64FFFFFF mov dword ptr ss:,ebx ; ntdll.7C99D5E0
036226C1 A1 18167003 mov eax,dword ptr ds:
036226C6 8B9D 64FFFFFF mov ebx,dword ptr ss:
036226CC 8903 mov dword ptr ds:,eax
036226CE 8B5D D8 mov ebx,dword ptr ss: ; ntdll.7C99D5E0
036226D1 83C3 0C add ebx,0xC
036226D4 899D 64FFFFFF mov dword ptr ss:,ebx ; ntdll.7C99D5E0
036226DA A1 24167003 mov eax,dword ptr ds:
036226DF 8B9D 64FFFFFF mov ebx,dword ptr ss:
036226E5 8903 mov dword ptr ds:,eax
036226E7 8B5D D8 mov ebx,dword ptr ss: ; ntdll.7C99D5E0
036226EA 83C3 18 add ebx,0x18
036226ED 899D 64FFFFFF mov dword ptr ss:,ebx ; ntdll.7C99D5E0
036226F3 8B9D 64FFFFFF mov ebx,dword ptr ss:
036226F9 C703 55040000 mov dword ptr ds:,0x455
036226FF 8B5D D8 mov ebx,dword ptr ss: ; ntdll.7C99D5E0
03622702 83C3 10 add ebx,0x10
03622705 899D 64FFFFFF mov dword ptr ss:,ebx ; ntdll.7C99D5E0
0362270B A1 50167003 mov eax,dword ptr ds:
03622710 8B9D 64FFFFFF mov ebx,dword ptr ss:
03622716 8903 mov dword ptr ds:,eax
03622718 8B45 D8 mov eax,dword ptr ss: ; ntdll.7C99D5E0
0362271B 50 push eax
0362271C 68 CC020000 push 0x2CC
03622721 E8 00730100 call 03639A26
03622726 83C4 04 add esp,0x4
03622729 8BF8 mov edi,eax
0362272B 5B pop ebx ; 03626828
0362272C 50 push eax
0362272D 899D 60FFFFFF mov dword ptr ss:,ebx ; ntdll.7C99D5E0
03622733 8985 64FFFFFF mov dword ptr ss:,eax
03622739 8B03 mov eax,dword ptr ds: ; ntdll.7C99B520
0362273B 83C3 04 add ebx,0x4
0362273E 8907 mov dword ptr ds:,eax
03622740 83C7 04 add edi,0x4
03622743 8B03 mov eax,dword ptr ds: ; ntdll.7C99B520
03622745 83C3 04 add ebx,0x4
03622748 8907 mov dword ptr ds:,eax
0362274A 83C7 04 add edi,0x4
0362274D 8B03 mov eax,dword ptr ds: ; ntdll.7C99B520
0362274F 83C3 04 add ebx,0x4
03622752 8907 mov dword ptr ds:,eax
03622754 83C7 04 add edi,0x4
03622757 8B03 mov eax,dword ptr ds: ; ntdll.7C99B520
03622759 83C3 04 add ebx,0x4
0362275C 8907 mov dword ptr ds:,eax
0362275E 83C7 04 add edi,0x4
03622761 8B03 mov eax,dword ptr ds: ; ntdll.7C99B520
03622763 83C3 04 add ebx,0x4
03622766 8907 mov dword ptr ds:,eax
03622768 83C7 04 add edi,0x4
0362276B 8B03 mov eax,dword ptr ds: ; ntdll.7C99B520
0362276D 83C3 04 add ebx,0x4
03622770 8907 mov dword ptr ds:,eax
03622772 83C7 04 add edi,0x4
03622775 8B03 mov eax,dword ptr ds: ; ntdll.7C99B520
03622777 83C3 04 add ebx,0x4
0362277A 8907 mov dword ptr ds:,eax
0362277C 83C7 04 add edi,0x4
0362277F 53 push ebx ; ntdll.7C99D5E0
03622780 8B1B mov ebx,dword ptr ds: ; ntdll.7C99B520
03622782 8B03 mov eax,dword ptr ds: ; ntdll.7C99B520
03622784 83C3 04 add ebx,0x4
03622787 8907 mov dword ptr ds:,eax
03622789 83C7 04 add edi,0x4
0362278C 8B03 mov eax,dword ptr ds: ; ntdll.7C99B520
0362278E 83C3 04 add ebx,0x4
03622791 8907 mov dword ptr ds:,eax
03622793 83C7 04 add edi,0x4
03622796 8B03 mov eax,dword ptr ds: ; ntdll.7C99B520
03622798 83C3 04 add ebx,0x4
0362279B 8907 mov dword ptr ds:,eax
0362279D 83C7 04 add edi,0x4
036227A0 8B03 mov eax,dword ptr ds: ; ntdll.7C99B520
036227A2 83C3 04 add ebx,0x4
036227A5 8907 mov dword ptr ds:,eax
036227A7 83C7 04 add edi,0x4
036227AA 8B03 mov eax,dword ptr ds: ; ntdll.7C99B520
036227AC 83C3 04 add ebx,0x4
036227AF 8907 mov dword ptr ds:,eax
036227B1 83C7 04 add edi,0x4
036227B4 8B03 mov eax,dword ptr ds: ; ntdll.7C99B520
036227B6 83C3 04 add ebx,0x4
036227B9 8907 mov dword ptr ds:,eax
036227BB 83C7 04 add edi,0x4
036227BE 8B03 mov eax,dword ptr ds: ; ntdll.7C99B520
036227C0 83C3 04 add ebx,0x4
036227C3 8907 mov dword ptr ds:,eax
036227C5 83C7 04 add edi,0x4
036227C8 53 push ebx ; ntdll.7C99D5E0
036227C9 8B1B mov ebx,dword ptr ds: ; ntdll.7C99B520
036227CB 81C3 08000000 add ebx,0x8
036227D1 B9 50000000 mov ecx,0x50
036227D6 8BF3 mov esi,ebx ; ntdll.7C99D5E0
036227D8 F3:A4 rep movs byte ptr es:,byte ptr ds:[>
036227DA 5B pop ebx ; 03626828
036227DB 83C3 04 add ebx,0x4
036227DE 8B03 mov eax,dword ptr ds: ; ntdll.7C99B520
036227E0 83C3 04 add ebx,0x4
036227E3 8907 mov dword ptr ds:,eax
036227E5 83C7 04 add edi,0x4
036227E8 5B pop ebx ; 03626828
036227E9 83C3 04 add ebx,0x4
036227EC 8B03 mov eax,dword ptr ds: ; ntdll.7C99B520
036227EE 83C3 04 add ebx,0x4
036227F1 8907 mov dword ptr ds:,eax
036227F3 83C7 04 add edi,0x4
036227F6 8B03 mov eax,dword ptr ds: ; ntdll.7C99B520
036227F8 83C3 04 add ebx,0x4
036227FB 8907 mov dword ptr ds:,eax
036227FD 83C7 04 add edi,0x4
03622800 8B03 mov eax,dword ptr ds: ; ntdll.7C99B520
03622802 83C3 04 add ebx,0x4
03622805 8907 mov dword ptr ds:,eax
03622807 83C7 04 add edi,0x4
0362280A 8B03 mov eax,dword ptr ds: ; ntdll.7C99B520
0362280C 83C3 04 add ebx,0x4
0362280F 8907 mov dword ptr ds:,eax
03622811 83C7 04 add edi,0x4
03622814 8B03 mov eax,dword ptr ds: ; ntdll.7C99B520
03622816 83C3 04 add ebx,0x4
03622819 8907 mov dword ptr ds:,eax
0362281B 83C7 04 add edi,0x4
0362281E 8B03 mov eax,dword ptr ds: ; ntdll.7C99B520
03622820 83C3 04 add ebx,0x4
03622823 8907 mov dword ptr ds:,eax
03622825 83C7 04 add edi,0x4
03622828 8B03 mov eax,dword ptr ds: ; ntdll.7C99B520
0362282A 83C3 04 add ebx,0x4
0362282D 8907 mov dword ptr ds:,eax
0362282F 83C7 04 add edi,0x4
03622832 8B03 mov eax,dword ptr ds: ; ntdll.7C99B520
03622834 83C3 04 add ebx,0x4
03622837 8907 mov dword ptr ds:,eax
03622839 83C7 04 add edi,0x4
0362283C 8B03 mov eax,dword ptr ds: ; ntdll.7C99B520
0362283E 83C3 04 add ebx,0x4
03622841 8907 mov dword ptr ds:,eax
03622843 83C7 04 add edi,0x4
03622846 8B03 mov eax,dword ptr ds: ; ntdll.7C99B520
03622848 83C3 04 add ebx,0x4
0362284B 8907 mov dword ptr ds:,eax
0362284D 83C7 04 add edi,0x4
03622850 8B03 mov eax,dword ptr ds: ; ntdll.7C99B520
03622852 83C3 04 add ebx,0x4
03622855 8907 mov dword ptr ds:,eax
03622857 83C7 04 add edi,0x4
0362285A 8B03 mov eax,dword ptr ds: ; ntdll.7C99B520
0362285C 83C3 04 add ebx,0x4
0362285F 8907 mov dword ptr ds:,eax
03622861 83C7 04 add edi,0x4
03622864 8B03 mov eax,dword ptr ds: ; ntdll.7C99B520
03622866 83C3 04 add ebx,0x4
03622869 8907 mov dword ptr ds:,eax
0362286B 83C7 04 add edi,0x4
0362286E 8B03 mov eax,dword ptr ds: ; ntdll.7C99B520
03622870 83C3 04 add ebx,0x4
03622873 8907 mov dword ptr ds:,eax
03622875 83C7 04 add edi,0x4
03622878 8B03 mov eax,dword ptr ds: ; ntdll.7C99B520
0362287A 83C3 04 add ebx,0x4
0362287D 8907 mov dword ptr ds:,eax
0362287F 83C7 04 add edi,0x4
03622882 8B03 mov eax,dword ptr ds: ; ntdll.7C99B520
03622884 83C3 04 add ebx,0x4
03622887 8907 mov dword ptr ds:,eax
03622889 83C7 04 add edi,0x4
0362288C 53 push ebx ; ntdll.7C99D5E0
0362288D 8B1B mov ebx,dword ptr ds: ; ntdll.7C99B520
0362288F 81C3 08000000 add ebx,0x8
03622895 B9 00020000 mov ecx,0x200
0362289A 8BF3 mov esi,ebx ; ntdll.7C99D5E0
0362289C F3:A4 rep movs byte ptr es:,byte ptr ds:[>
0362289E 5B pop ebx ; 03626828
0362289F 83C3 04 add ebx,0x4
036228A2 FF75 DC push dword ptr ss: ; ntdll.7C99B3C0
036228A5 B8 0A000000 mov eax,0xA
036228AA E8 6B710100 call 03639A1A
036228AF 50 push eax
036228B0 8B9D 64FFFFFF mov ebx,dword ptr ss:
036228B6 53 push ebx ; ntdll.7C99D5E0
036228B7 8BBD 60FFFFFF mov edi,dword ptr ss:
036228BD 8B03 mov eax,dword ptr ds: ; ntdll.7C99B520
036228BF 83C3 04 add ebx,0x4
036228C2 8907 mov dword ptr ds:,eax
036228C4 83C7 04 add edi,0x4
036228C7 8B03 mov eax,dword ptr ds: ; ntdll.7C99B520
036228C9 83C3 04 add ebx,0x4
036228CC 8907 mov dword ptr ds:,eax
036228CE 83C7 04 add edi,0x4
036228D1 8B03 mov eax,dword ptr ds: ; ntdll.7C99B520
036228D3 83C3 04 add ebx,0x4
036228D6 8907 mov dword ptr ds:,eax
036228D8 83C7 04 add edi,0x4
036228DB 8B03 mov eax,dword ptr ds: ; ntdll.7C99B520
036228DD 83C3 04 add ebx,0x4
036228E0 8907 mov dword ptr ds:,eax
036228E2 83C7 04 add edi,0x4
036228E5 8B03 mov eax,dword ptr ds: ; ntdll.7C99B520
036228E7 83C3 04 add ebx,0x4
036228EA 8907 mov dword ptr ds:,eax
036228EC 83C7 04 add edi,0x4
036228EF 8B03 mov eax,dword ptr ds: ; ntdll.7C99B520
036228F1 83C3 04 add ebx,0x4
036228F4 8907 mov dword ptr ds:,eax
036228F6 83C7 04 add edi,0x4
036228F9 8B03 mov eax,dword ptr ds: ; ntdll.7C99B520
036228FB 83C3 04 add ebx,0x4
036228FE 8907 mov dword ptr ds:,eax
03622900 83C7 04 add edi,0x4
03622903 57 push edi
03622904 8B3F mov edi,dword ptr ds: ; ntdll.7C99D5E0
03622906 53 push ebx ; ntdll.7C99D5E0
03622907 8B03 mov eax,dword ptr ds: ; ntdll.7C99B520
03622909 83C3 04 add ebx,0x4
0362290C 8907 mov dword ptr ds:,eax
0362290E 83C7 04 add edi,0x4
03622911 8B03 mov eax,dword ptr ds: ; ntdll.7C99B520
03622913 83C3 04 add ebx,0x4
03622916 8907 mov dword ptr ds:,eax
03622918 83C7 04 add edi,0x4
0362291B 8B03 mov eax,dword ptr ds: ; ntdll.7C99B520
0362291D 83C3 04 add ebx,0x4
03622920 8907 mov dword ptr ds:,eax
03622922 83C7 04 add edi,0x4
03622925 8B03 mov eax,dword ptr ds: ; ntdll.7C99B520
03622927 83C3 04 add ebx,0x4
0362292A 8907 mov dword ptr ds:,eax
0362292C 83C7 04 add edi,0x4
0362292F 8B03 mov eax,dword ptr ds: ; ntdll.7C99B520
03622931 83C3 04 add ebx,0x4
03622934 8907 mov dword ptr ds:,eax
03622936 83C7 04 add edi,0x4
03622939 8B03 mov eax,dword ptr ds: ; ntdll.7C99B520
0362293B 83C3 04 add ebx,0x4
0362293E 8907 mov dword ptr ds:,eax
03622940 83C7 04 add edi,0x4
03622943 8B03 mov eax,dword ptr ds: ; ntdll.7C99B520
03622945 83C3 04 add ebx,0x4
03622948 8907 mov dword ptr ds:,eax
0362294A 83C7 04 add edi,0x4
0362294D 53 push ebx ; ntdll.7C99D5E0
0362294E 57 push edi
0362294F 6A 01 push 0x1
03622951 B8 02000000 mov eax,0x2
03622956 E8 B3700100 call 03639A0E
0362295B 83C4 04 add esp,0x4
0362295E 5F pop edi ; 03626828
0362295F 5B pop ebx ; 03626828
03622960 53 push ebx ; ntdll.7C99D5E0
03622961 57 push edi
03622962 8B3F mov edi,dword ptr ds: ; ntdll.7C99D5E0
03622964 8B0F mov ecx,dword ptr ds: ; ntdll.7C99D5E0
03622966 83C7 04 add edi,0x4
03622969 85C9 test ecx,ecx
0362296B 74 0F je short 0362297C
0362296D 8B07 mov eax,dword ptr ds: ; ntdll.7C99D5E0
0362296F 83C7 04 add edi,0x4
03622972 49 dec ecx
03622973 74 05 je short 0362297A
03622975 0FAF07 imul eax,dword ptr ds: ; ntdll.7C99D5E0
03622978^ EB F5 jmp short 0362296F
0362297A 8BC8 mov ecx,eax
0362297C 83F9 50 cmp ecx,0x50
0362297F 7E 05 jle short 03622986
03622981 B9 50000000 mov ecx,0x50
03622986 8BF3 mov esi,ebx ; ntdll.7C99D5E0
03622988 F3:A4 rep movs byte ptr es:,byte ptr ds:[>
0362298A 5F pop edi ; 03626828
0362298B 5B pop ebx ; 03626828
0362298C 83C7 04 add edi,0x4
0362298F 83C3 50 add ebx,0x50
03622992 8B03 mov eax,dword ptr ds: ; ntdll.7C99B520
03622994 83C3 04 add ebx,0x4
03622997 8907 mov dword ptr ds:,eax
03622999 83C7 04 add edi,0x4
0362299C 5B pop ebx ; 03626828
0362299D 81C3 70000000 add ebx,0x70
036229A3 5F pop edi ; 03626828
036229A4 83C7 04 add edi,0x4
036229A7 8B03 mov eax,dword ptr ds: ; ntdll.7C99B520
036229A9 83C3 04 add ebx,0x4
036229AC 8907 mov dword ptr ds:,eax
036229AE 83C7 04 add edi,0x4
036229B1 8B03 mov eax,dword ptr ds: ; ntdll.7C99B520
036229B3 83C3 04 add ebx,0x4
036229B6 8907 mov dword ptr ds:,eax
036229B8 83C7 04 add edi,0x4
036229BB 8B03 mov eax,dword ptr ds: ; ntdll.7C99B520
036229BD 83C3 04 add ebx,0x4
036229C0 8907 mov dword ptr ds:,eax
036229C2 83C7 04 add edi,0x4
036229C5 8B03 mov eax,dword ptr ds: ; ntdll.7C99B520
036229C7 83C3 04 add ebx,0x4
036229CA 8907 mov dword ptr ds:,eax
036229CC 83C7 04 add edi,0x4
036229CF 8B03 mov eax,dword ptr ds: ; ntdll.7C99B520
036229D1 83C3 04 add ebx,0x4
036229D4 8907 mov dword ptr ds:,eax
036229D6 83C7 04 add edi,0x4
036229D9 8B03 mov eax,dword ptr ds: ; ntdll.7C99B520
036229DB 83C3 04 add ebx,0x4
036229DE 8907 mov dword ptr ds:,eax
036229E0 83C7 04 add edi,0x4
036229E3 8B03 mov eax,dword ptr ds: ; ntdll.7C99B520
036229E5 83C3 04 add ebx,0x4
036229E8 8907 mov dword ptr ds:,eax
036229EA 83C7 04 add edi,0x4
036229ED 8B03 mov eax,dword ptr ds: ; ntdll.7C99B520
036229EF 83C3 04 add ebx,0x4
036229F2 8907 mov dword ptr ds:,eax
036229F4 83C7 04 add edi,0x4
036229F7 8B03 mov eax,dword ptr ds: ; ntdll.7C99B520
036229F9 83C3 04 add ebx,0x4
036229FC 8907 mov dword ptr ds:,eax
036229FE 83C7 04 add edi,0x4
03622A01 8B03 mov eax,dword ptr ds: ; ntdll.7C99B520
03622A03 83C3 04 add ebx,0x4
03622A06 8907 mov dword ptr ds:,eax
03622A08 83C7 04 add edi,0x4
03622A0B 8B03 mov eax,dword ptr ds: ; ntdll.7C99B520
03622A0D 83C3 04 add ebx,0x4
03622A10 8907 mov dword ptr ds:,eax
03622A12 83C7 04 add edi,0x4
03622A15 8B03 mov eax,dword ptr ds: ; ntdll.7C99B520
03622A17 83C3 04 add ebx,0x4
03622A1A 8907 mov dword ptr ds:,eax
03622A1C 83C7 04 add edi,0x4
03622A1F 8B03 mov eax,dword ptr ds: ; ntdll.7C99B520
03622A21 83C3 04 add ebx,0x4
03622A24 8907 mov dword ptr ds:,eax
03622A26 83C7 04 add edi,0x4
03622A29 8B03 mov eax,dword ptr ds: ; ntdll.7C99B520
03622A2B 83C3 04 add ebx,0x4
03622A2E 8907 mov dword ptr ds:,eax
03622A30 83C7 04 add edi,0x4
03622A33 8B03 mov eax,dword ptr ds: ; ntdll.7C99B520
03622A35 83C3 04 add ebx,0x4
03622A38 8907 mov dword ptr ds:,eax
03622A3A 83C7 04 add edi,0x4
03622A3D 8B03 mov eax,dword ptr ds: ; ntdll.7C99B520
03622A3F 83C3 04 add ebx,0x4
03622A42 8907 mov dword ptr ds:,eax
03622A44 83C7 04 add edi,0x4
03622A47 53 push ebx ; ntdll.7C99D5E0
03622A48 57 push edi
03622A49 6A 01 push 0x1
03622A4B B8 02000000 mov eax,0x2
03622A50 E8 B96F0100 call 03639A0E
03622A55 83C4 04 add esp,0x4
03622A58 5F pop edi ; 03626828
03622A59 5B pop ebx ; 03626828
03622A5A 53 push ebx ; ntdll.7C99D5E0
03622A5B 57 push edi
03622A5C 8B3F mov edi,dword ptr ds: ; ntdll.7C99D5E0
03622A5E 8B0F mov ecx,dword ptr ds: ; ntdll.7C99D5E0
03622A60 83C7 04 add edi,0x4
03622A63 85C9 test ecx,ecx
03622A65 74 0F je short 03622A76
03622A67 8B07 mov eax,dword ptr ds: ; ntdll.7C99D5E0
03622A69 83C7 04 add edi,0x4
03622A6C 49 dec ecx
03622A6D 74 05 je short 03622A74
03622A6F 0FAF07 imul eax,dword ptr ds: ; ntdll.7C99D5E0
03622A72^ EB F5 jmp short 03622A69
03622A74 8BC8 mov ecx,eax
03622A76 81F9 00020000 cmp ecx,0x200
03622A7C 7E 05 jle short 03622A83
03622A7E B9 00020000 mov ecx,0x200
03622A83 8BF3 mov esi,ebx ; ntdll.7C99D5E0
03622A85 F3:A4 rep movs byte ptr es:,byte ptr ds:[>
03622A87 5F pop edi ; 03626828
03622A88 5B pop ebx ; 03626828
03622A89 83C7 04 add edi,0x4
03622A8C 81C3 00020000 add ebx,0x200
03622A92 E8 7D6F0100 call 03639A14
03622A97 83C4 04 add esp,0x4
03622A9A 58 pop eax ; 03626828
03622A9B E9 00000000 jmp 03622AA0
03622AA0 B8 FFFFFFFF mov eax,-0x1
03622AA5 E9 DD2F0000 jmp 03625A87
03622AAA E9 A12F0000 jmp 03625A50
03622AAF A1 18167003 mov eax,dword ptr ds:
03622AB4 3945 EC cmp dword ptr ss:,eax
03622AB7 0F85 552E0000 jnz 03625912
03622ABD DB45 F4 fild dword ptr ss:
03622AC0 DD9D 60FFFFFF fstp qword ptr ss:
03622AC6 DD85 60FFFFFF fld qword ptr ss:
03622ACC DC05 E09D6D03 fadd qword ptr ds:
03622AD2 DD9D 58FFFFFF fstp qword ptr ss:
03622AD8 DD85 58FFFFFF fld qword ptr ss:
03622ADE E8 D8E7FEFF call 036112BB
03622AE3 50 push eax
03622AE4 E8 A7ECFEFF call 03611790
03622AE9 8985 4CFFFFFF mov dword ptr ss:,eax
03622AEF DB85 4CFFFFFF fild dword ptr ss:
03622AF5 DD9D 4CFFFFFF fstp qword ptr ss:
03622AFB DD85 4CFFFFFF fld qword ptr ss:
03622B01 DC05 37976D03 fadd qword ptr ds:
03622B07 DD9D 44FFFFFF fstp qword ptr ss:
03622B0D DD85 44FFFFFF fld qword ptr ss:
03622B13 E8 A3E7FEFF call 036112BB
03622B18 50 push eax
03622B19 E8 72ECFEFF call 03611790
03622B1E 8985 38FFFFFF mov dword ptr ss:,eax
03622B24 DB85 38FFFFFF fild dword ptr ss:
03622B2A DD9D 38FFFFFF fstp qword ptr ss:
03622B30 DD85 38FFFFFF fld qword ptr ss:
03622B36 DC25 B8976D03 fsub qword ptr ds:
03622B3C DD9D 30FFFFFF fstp qword ptr ss:
03622B42 DD85 30FFFFFF fld qword ptr ss:
03622B48 E8 6EE7FEFF call 036112BB
03622B4D 8945 E0 mov dword ptr ss:,eax
03622B50 DB45 E0 fild dword ptr ss:
03622B53 DD9D 60FFFFFF fstp qword ptr ss:
03622B59 DD85 60FFFFFF fld qword ptr ss:
03622B5F DC05 B8976D03 fadd qword ptr ds:
03622B65 DD9D 58FFFFFF fstp qword ptr ss:
03622B6B DD85 58FFFFFF fld qword ptr ss:
03622B71 E8 45E7FEFF call 036112BB
03622B76 8945 D0 mov dword ptr ss:,eax
03622B79 DB45 E0 fild dword ptr ss:
03622B7C DD9D 60FFFFFF fstp qword ptr ss:
03622B82 DD85 60FFFFFF fld qword ptr ss:
03622B88 DC05 55976D03 fadd qword ptr ds:
03622B8E DD9D 58FFFFFF fstp qword ptr ss:
03622B94 DD85 58FFFFFF fld qword ptr ss:
03622B9A E8 1CE7FEFF call 036112BB
03622B9F 50 push eax
03622BA0 E8 EBEBFEFF call 03611790
03622BA5 8985 54FFFFFF mov dword ptr ss:,eax
03622BAB DB45 E0 fild dword ptr ss:
03622BAE DD9D 4CFFFFFF fstp qword ptr ss:
03622BB4 DD85 4CFFFFFF fld qword ptr ss:
03622BBA DB85 54FFFFFF fild dword ptr ss:
03622BC0 DD9D 44FFFFFF fstp qword ptr ss:
03622BC6 DC85 44FFFFFF fadd qword ptr ss:
03622BCC DC05 B8976D03 fadd qword ptr ds:
03622BD2 DD9D 3CFFFFFF fstp qword ptr ss:
03622BD8 DD85 3CFFFFFF fld qword ptr ss:
03622BDE E8 D8E6FEFF call 036112BB
03622BE3 8945 E0 mov dword ptr ss:,eax
03622BE6 A1 AC157003 mov eax,dword ptr ds:
03622BEB 3945 E0 cmp dword ptr ss:,eax
03622BEE 0F85 86240000 jnz 0362507A
03622BF4 C705 10177003 0>mov dword ptr ds:,0x1
03622BFE 833D 10177003 0>cmp dword ptr ds:,0x1
03622C05 0F85 02000000 jnz 03622C0D
03622C0B^ EB F1 jmp short 03622BFE
03622C0D DB05 78157003 fild dword ptr ds:
03622C13 DD9D 60FFFFFF fstp qword ptr ss:
03622C19 DD85 60FFFFFF fld qword ptr ss:
03622C1F DC25 21DD6B03 fsub qword ptr ds:
03622C25 DD9D 58FFFFFF fstp qword ptr ss:
03622C2B DD85 58FFFFFF fld qword ptr ss:
03622C31 E8 85E6FEFF call 036112BB
03622C36 8945 E0 mov dword ptr ss:,eax
03622C39 DB45 F4 fild dword ptr ss:
03622C3C DD9D 60FFFFFF fstp qword ptr ss:
03622C42 DD85 60FFFFFF fld qword ptr ss:
03622C48 DC05 D09D6D03 fadd qword ptr ds:
03622C4E DD9D 58FFFFFF fstp qword ptr ss:
03622C54 DB45 F4 fild dword ptr ss:
03622C57 DD9D 50FFFFFF fstp qword ptr ss:
03622C5D DD85 50FFFFFF fld qword ptr ss:
03622C63 DC05 D09D6D03 fadd qword ptr ds:
03622C69 DD9D 48FFFFFF fstp qword ptr ss:
03622C6F DD85 48FFFFFF fld qword ptr ss:
03622C75 E8 41E6FEFF call 036112BB
03622C7A 50 push eax
03622C7B E8 10EBFEFF call 03611790
03622C80 8985 3CFFFFFF mov dword ptr ss:,eax
03622C86 DB85 3CFFFFFF fild dword ptr ss:
03622C8C DD9D 3CFFFFFF fstp qword ptr ss:
03622C92 DD85 3CFFFFFF fld qword ptr ss:
03622C98 DC05 37976D03 fadd qword ptr ds:
03622C9E DD9D 34FFFFFF fstp qword ptr ss:
03622CA4 DD85 34FFFFFF fld qword ptr ss:
03622CAA E8 0CE6FEFF call 036112BB
03622CAF 50 push eax
03622CB0 DD85 58FFFFFF fld qword ptr ss:
03622CB6 E8 00E6FEFF call 036112BB
03622CBB 50 push eax
03622CBC E8 6B59FFFF call 0361862C
03622CC1 837D E0 00 cmp dword ptr ss:,0x0
03622CC5 0F8E 22000000 jle 03622CED
03622CCB FF75 E0 push dword ptr ss:
03622CCE E8 71E7FEFF call 03611444
03622CD3 8985 5CFFFFFF mov dword ptr ss:,eax
03622CD9 81BD 5CFFFFFF C>cmp dword ptr ss:,0xCC
03622CE3 0F84 04000000 je 03622CED
03622CE9 33C0 xor eax,eax
03622CEB EB 05 jmp short 03622CF2
03622CED B8 01000000 mov eax,0x1
03622CF2 85C0 test eax,eax
03622CF4 0F84 A5010000 je 03622E9F
03622CFA DB45 F4 fild dword ptr ss:
03622CFD DD9D 60FFFFFF fstp qword ptr ss:
03622D03 DD85 60FFFFFF fld qword ptr ss:
03622D09 DC05 D09D6D03 fadd qword ptr ds:
03622D0F DD9D 58FFFFFF fstp qword ptr ss:
03622D15 DB45 F4 fild dword ptr ss:
03622D18 DD9D 50FFFFFF fstp qword ptr ss:
03622D1E DD85 50FFFFFF fld qword ptr ss:
03622D24 DC05 E09D6D03 fadd qword ptr ds:
03622D2A DD9D 48FFFFFF fstp qword ptr ss:
03622D30 DD85 48FFFFFF fld qword ptr ss:
03622D36 E8 80E5FEFF call 036112BB
03622D3B 50 push eax
03622D3C E8 4FEAFEFF call 03611790
03622D41 50 push eax
03622D42 DD85 58FFFFFF fld qword ptr ss:
03622D48 E8 6EE5FEFF call 036112BB
03622D4D 50 push eax
03622D4E E8 D958FFFF call 0361862C
03622D53 DB45 F4 fild dword ptr ss:
03622D56 DD9D 60FFFFFF fstp qword ptr ss:
03622D5C DD85 60FFFFFF fld qword ptr ss:
03622D62 DC05 E09D6D03 fadd qword ptr ds:
03622D68 DD9D 58FFFFFF fstp qword ptr ss:
03622D6E DB45 F4 fild dword ptr ss:
03622D71 DD9D 50FFFFFF fstp qword ptr ss:
03622D77 DD85 50FFFFFF fld qword ptr ss:
03622D7D DC05 D09D6D03 fadd qword ptr ds:
03622D83 DD9D 48FFFFFF fstp qword ptr ss:
03622D89 DD85 48FFFFFF fld qword ptr ss:
03622D8F E8 27E5FEFF call 036112BB
03622D94 50 push eax
03622D95 E8 F6E9FEFF call 03611790
03622D9A 50 push eax
03622D9B E8 F0E9FEFF call 03611790
03622DA0 50 push eax
03622DA1 DD85 58FFFFFF fld qword ptr ss:
03622DA7 E8 0FE5FEFF call 036112BB
03622DAC 50 push eax
03622DAD E8 7A58FFFF call 0361862C
03622DB2 DB45 F4 fild dword ptr ss:
03622DB5 DD9D 60FFFFFF fstp qword ptr ss:
03622DBB DD85 60FFFFFF fld qword ptr ss:
03622DC1 DC05 D09D6D03 fadd qword ptr ds:
03622DC7 DD9D 58FFFFFF fstp qword ptr ss:
03622DCD DB45 F4 fild dword ptr ss:
03622DD0 DD9D 50FFFFFF fstp qword ptr ss:
03622DD6 DD85 50FFFFFF fld qword ptr ss:
03622DDC DC05 D09D6D03 fadd qword ptr ds:
03622DE2 DD9D 48FFFFFF fstp qword ptr ss:
03622DE8 DD85 48FFFFFF fld qword ptr ss:
03622DEE E8 C8E4FEFF call 036112BB
03622DF3 50 push eax
03622DF4 E8 97E9FEFF call 03611790
03622DF9 8985 3CFFFFFF mov dword ptr ss:,eax
03622DFF DB85 3CFFFFFF fild dword ptr ss:
03622E05 DD9D 3CFFFFFF fstp qword ptr ss:
03622E0B DD85 3CFFFFFF fld qword ptr ss:
03622E11 DC05 E89D6D03 fadd qword ptr ds:
03622E17 DD9D 34FFFFFF fstp qword ptr ss:
03622E1D DD85 34FFFFFF fld qword ptr ss:
03622E23 E8 93E4FEFF call 036112BB
03622E28 50 push eax
03622E29 DD85 58FFFFFF fld qword ptr ss:
03622E2F E8 87E4FEFF call 036112BB
03622E34 50 push eax
03622E35 E8 F257FFFF call 0361862C
03622E3A DB45 F4 fild dword ptr ss:
03622E3D DD9D 60FFFFFF fstp qword ptr ss:
03622E43 DD85 60FFFFFF fld qword ptr ss:
03622E49 DC05 C89D6D03 fadd qword ptr ds:
03622E4F DD9D 58FFFFFF fstp qword ptr ss:
03622E55 68 FDFFFFFF push -0x3
03622E5A DD85 58FFFFFF fld qword ptr ss:
03622E60 E8 56E4FEFF call 036112BB
03622E65 50 push eax
03622E66 E8 C157FFFF call 0361862C
03622E6B DB45 F4 fild dword ptr ss:
03622E6E DD9D 60FFFFFF fstp qword ptr ss:
03622E74 DD85 60FFFFFF fld qword ptr ss:
03622E7A DC05 0B9C6D03 fadd qword ptr ds:
03622E80 DD9D 58FFFFFF fstp qword ptr ss:
03622E86 FF75 D0 push dword ptr ss:
03622E89 DD85 58FFFFFF fld qword ptr ss:
03622E8F E8 27E4FEFF call 036112BB
03622E94 50 push eax
03622E95 E8 9257FFFF call 0361862C
03622E9A E9 D6210000 jmp 03625075
03622E9F 68 00000000 push 0x0
03622EA4 E8 2855FFFF call 036183D1
03622EA9 3905 1C167003 cmp dword ptr ds:,eax
03622EAF 0F84 0C000000 je 03622EC1
03622EB5 837D FC 00 cmp dword ptr ss:,0x0
03622EB9 0F85 02000000 jnz 03622EC1
03622EBF^ EB F4 jmp short 03622EB5
03622EC1 E8 F3A3FFFF call 0361D2B9
03622EC6 8985 60FFFFFF mov dword ptr ss:,eax
03622ECC 83BD 60FFFFFF 0>cmp dword ptr ss:,0x1
03622ED3 0F84 15000000 je 03622EEE
03622ED9 E8 ED5BFFFF call 03618ACB
03622EDE 3905 5C167003 cmp dword ptr ds:,eax
03622EE4 0F85 04000000 jnz 03622EEE
03622EEA 33C0 xor eax,eax
03622EEC EB 05 jmp short 03622EF3
03622EEE B8 01000000 mov eax,0x1
03622EF3 85C0 test eax,eax
03622EF5 0F84 05000000 je 03622F00
03622EFB E8 1E2C0000 call 03625B1E
03622F00 E8 DF9AFFFF call 0361C9E4
03622F05 8985 60FFFFFF mov dword ptr ss:,eax
03622F0B 83BD 60FFFFFF 0>cmp dword ptr ss:,0x1
03622F12 0F85 0C000000 jnz 03622F24
03622F18 837D FC 00 cmp dword ptr ss:,0x0
03622F1C 0F85 02000000 jnz 03622F24
03622F22^ EB F4 jmp short 03622F18
03622F24 DB45 F4 fild dword ptr ss:
03622F27 DD9D 60FFFFFF fstp qword ptr ss:
03622F2D DD85 60FFFFFF fld qword ptr ss:
03622F33 DC05 E09D6D03 fadd qword ptr ds:
03622F39 DD9D 58FFFFFF fstp qword ptr ss:
03622F3F DD85 58FFFFFF fld qword ptr ss:
03622F45 E8 71E3FEFF call 036112BB
03622F4A 50 push eax
03622F4B E8 40E8FEFF call 03611790
03622F50 8945 CC mov dword ptr ss:,eax
03622F53 68 01030080 push 0x80000301
03622F58 6A 00 push 0x0
03622F5A 68 40000000 push 0x40
03622F5F 68 01000000 push 0x1
03622F64 BB E0AF6303 mov ebx,0x363AFE0
03622F69 E8 B26A0100 call 03639A20
03622F6E 83C4 10 add esp,0x10
03622F71 8985 64FFFFFF mov dword ptr ss:,eax
03622F77 8B85 64FFFFFF mov eax,dword ptr ss:
03622F7D 50 push eax
03622F7E 8B5D C8 mov ebx,dword ptr ss:
03622F81 85DB test ebx,ebx ; ntdll.7C99D5E0
03622F83 74 09 je short 03622F8E
03622F85 53 push ebx ; ntdll.7C99D5E0
03622F86 E8 896A0100 call 03639A14
03622F8B 83C4 04 add esp,0x4
03622F8E 58 pop eax ; 03626828
03622F8F 8945 C8 mov dword ptr ss:,eax
03622F92 DB45 CC fild dword ptr ss:
03622F95 DD9D 60FFFFFF fstp qword ptr ss:
03622F9B DD85 60FFFFFF fld qword ptr ss:
03622FA1 DC05 2F976D03 fadd qword ptr ds:
03622FA7 DD9D 58FFFFFF fstp qword ptr ss:
03622FAD DD85 58FFFFFF fld qword ptr ss:
03622FB3 E8 03E3FEFF call 036112BB
03622FB8 50 push eax
03622FB9 E8 D2E7FEFF call 03611790
03622FBE 50 push eax
03622FBF E8 CCE7FEFF call 03611790
03622FC4 8985 50FFFFFF mov dword ptr ss:,eax
03622FCA 68 05000080 push 0x80000005
03622FCF 6A 00 push 0x0
03622FD1 8D45 C8 lea eax,dword ptr ss:
03622FD4 50 push eax
03622FD5 68 01000000 push 0x1
03622FDA B8 01000000 mov eax,0x1
03622FDF BB 40566903 mov ebx,0x3695640
03622FE4 E8 496A0100 call 03639A32
03622FE9 83C4 10 add esp,0x10
03622FEC 8985 4CFFFFFF mov dword ptr ss:,eax
03622FF2 68 20000000 push 0x20
03622FF7 FFB5 4CFFFFFF push dword ptr ss:
03622FFD FFB5 50FFFFFF push dword ptr ss:
03623003 68 FFFFFFFF push -0x1
03623008 E8 CBE5FEFF call 036115D8
0362300D 68 01030080 push 0x80000301
03623012 6A 00 push 0x0
03623014 68 20000000 push 0x20
03623019 68 05000080 push 0x80000005
0362301E 6A 00 push 0x0
03623020 8B45 C8 mov eax,dword ptr ss:
03623023 85C0 test eax,eax
03623025 75 05 jnz short 0362302C
03623027 B8 19DD6B03 mov eax,0x36BDD19
0362302C 50 push eax
0362302D 68 02000000 push 0x2
03623032 BB 30AE6303 mov ebx,0x363AE30
03623037 E8 E4690100 call 03639A20
0362303C 83C4 1C add esp,0x1C
0362303F 8985 64FFFFFF mov dword ptr ss:,eax
03623045 68 05000080 push 0x80000005
0362304A 6A 00 push 0x0
0362304C 8B85 64FFFFFF mov eax,dword ptr ss:
03623052 85C0 test eax,eax
03623054 75 05 jnz short 0362305B
03623056 B8 19DD6B03 mov eax,0x36BDD19
0362305B 50 push eax
0362305C 68 01000000 push 0x1
03623061 BB 20B36303 mov ebx,0x363B320
03623066 E8 B5690100 call 03639A20
0362306B 83C4 10 add esp,0x10
0362306E 8985 60FFFFFF mov dword ptr ss:,eax
03623074 8B9D 64FFFFFF mov ebx,dword ptr ss:
0362307A 85DB test ebx,ebx ; ntdll.7C99D5E0
0362307C 74 09 je short 03623087
0362307E 53 push ebx ; ntdll.7C99D5E0
0362307F E8 90690100 call 03639A14
03623084 83C4 04 add esp,0x4
03623087 8B85 60FFFFFF mov eax,dword ptr ss:
0362308D 50 push eax
0362308E 8B5D C4 mov ebx,dword ptr ss: ; ntdll.7C9333F6
03623091 85DB test ebx,ebx ; ntdll.7C99D5E0
03623093 74 09 je short 0362309E
03623095 53 push ebx ; ntdll.7C99D5E0
03623096 E8 79690100 call 03639A14
0362309B 83C4 04 add esp,0x4
0362309E 58 pop eax ; 03626828
0362309F 8945 C4 mov dword ptr ss:,eax
036230A2 DB45 CC fild dword ptr ss:
036230A5 DD9D 60FFFFFF fstp qword ptr ss:
036230AB DD85 60FFFFFF fld qword ptr ss:
036230B1 DC05 1D9D6D03 fadd qword ptr ds:
036230B7 DD9D 58FFFFFF fstp qword ptr ss:
036230BD DD85 58FFFFFF fld qword ptr ss:
036230C3 E8 F3E1FEFF call 036112BB
036230C8 50 push eax
036230C9 E8 C2E6FEFF call 03611790
036230CE 50 push eax
036230CF E8 BCE6FEFF call 03611790
036230D4 8985 50FFFFFF mov dword ptr ss:,eax
036230DA 68 05000080 push 0x80000005
036230DF 6A 00 push 0x0
036230E1 8D45 C8 lea eax,dword ptr ss:
036230E4 50 push eax
036230E5 68 01000000 push 0x1
036230EA B8 01000000 mov eax,0x1
036230EF BB 40566903 mov ebx,0x3695640
036230F4 E8 39690100 call 03639A32
036230F9 83C4 10 add esp,0x10
036230FC 8985 4CFFFFFF mov dword ptr ss:,eax
03623102 68 40000000 push 0x40
03623107 FFB5 4CFFFFFF push dword ptr ss:
0362310D FFB5 50FFFFFF push dword ptr ss:
03623113 68 FFFFFFFF push -0x1
03623118 E8 BBE4FEFF call 036115D8
0362311D 68 05000080 push 0x80000005
03623122 6A 00 push 0x0
03623124 8B45 C8 mov eax,dword ptr ss:
03623127 85C0 test eax,eax
03623129 75 05 jnz short 03623130
0362312B B8 19DD6B03 mov eax,0x36BDD19
03623130 50 push eax
03623131 68 01000000 push 0x1
03623136 BB 20B36303 mov ebx,0x363B320
0362313B E8 E0680100 call 03639A20
03623140 83C4 10 add esp,0x10
03623143 8985 64FFFFFF mov dword ptr ss:,eax
03623149 8B85 64FFFFFF mov eax,dword ptr ss:
0362314F 50 push eax
03623150 8B5D C0 mov ebx,dword ptr ss: ; ntdll.7C92D7EC
03623153 85DB test ebx,ebx ; ntdll.7C99D5E0
03623155 74 09 je short 03623160
03623157 53 push ebx ; ntdll.7C99D5E0
03623158 E8 B7680100 call 03639A14
0362315D 83C4 04 add esp,0x4
03623160 58 pop eax ; 03626828
03623161 8945 C0 mov dword ptr ss:,eax
03623164 833D E8167003 5>cmp dword ptr ds:,0x59
0362316B 0F85 36000000 jnz 036231A7
03623171 DB45 F4 fild dword ptr ss:
03623174 DD9D 60FFFFFF fstp qword ptr ss:
0362317A DD85 60FFFFFF fld qword ptr ss:
03623180 DC05 C89D6D03 fadd qword ptr ds:
03623186 DD9D 58FFFFFF fstp qword ptr ss:
0362318C 68 00000000 push 0x0
03623191 DD85 58FFFFFF fld qword ptr ss:
03623197 E8 1FE1FEFF call 036112BB
0362319C 50 push eax
0362319D E8 8A54FFFF call 0361862C
036231A2 E9 DA1C0000 jmp 03624E81
036231A7 68 04000080 push 0x80000004
036231AC 6A 00 push 0x0
036231AE 8B45 C4 mov eax,dword ptr ss: ; ntdll.7C9333F6
036231B1 85C0 test eax,eax
036231B3 75 05 jnz short 036231BA
036231B5 B8 00DD6B03 mov eax,0x36BDD00
036231BA 50 push eax
036231BB 68 01000000 push 0x1
036231C0 BB 409E6303 mov ebx,0x3639E40
036231C5 E8 56680100 call 03639A20
036231CA 83C4 10 add esp,0x10
036231CD 8985 60FFFFFF mov dword ptr ss:,eax
036231D3 83BD 60FFFFFF 2>cmp dword ptr ss:,0x20
036231DA 0F85 3D000000 jnz 0362321D
036231E0 68 04000080 push 0x80000004
036231E5 6A 00 push 0x0
036231E7 8B45 C0 mov eax,dword ptr ss: ; ntdll.7C92D7EC
036231EA 85C0 test eax,eax
036231EC 75 05 jnz short 036231F3
036231EE B8 00DD6B03 mov eax,0x36BDD00
036231F3 50 push eax
036231F4 68 01000000 push 0x1
036231F9 BB 409E6303 mov ebx,0x3639E40
036231FE E8 1D680100 call 03639A20
03623203 83C4 10 add esp,0x10
03623206 8985 54FFFFFF mov dword ptr ss:,eax
0362320C 83BD 54FFFFFF 4>cmp dword ptr ss:,0x40
03623213 0F85 04000000 jnz 0362321D
03623219 33C0 xor eax,eax
0362321B EB 05 jmp short 03623222
0362321D B8 01000000 mov eax,0x1
03623222 85C0 test eax,eax
03623224 0F84 36000000 je 03623260
0362322A DB45 F4 fild dword ptr ss:
0362322D DD9D 60FFFFFF fstp qword ptr ss:
03623233 DD85 60FFFFFF fld qword ptr ss:
03623239 DC05 C89D6D03 fadd qword ptr ds:
0362323F DD9D 58FFFFFF fstp qword ptr ss:
03623245 68 FDFFFFFF push -0x3
0362324A DD85 58FFFFFF fld qword ptr ss:
03623250 E8 66E0FEFF call 036112BB
03623255 50 push eax
03623256 E8 D153FFFF call 0361862C
0362325B E9 211C0000 jmp 03624E81
03623260 8D45 C0 lea eax,dword ptr ss:
03623263 50 push eax
03623264 E8 CB290000 call 03625C34
03623269 8985 64FFFFFF mov dword ptr ss:,eax
0362326F 8B85 64FFFFFF mov eax,dword ptr ss:
03623275 50 push eax
03623276 8B5D C8 mov ebx,dword ptr ss:
03623279 85DB test ebx,ebx ; ntdll.7C99D5E0
0362327B 74 09 je short 03623286
0362327D 53 push ebx ; ntdll.7C99D5E0
0362327E E8 91670100 call 03639A14
03623283 83C4 04 add esp,0x4
03623286 58 pop eax ; 03626828
03623287 8945 C8 mov dword ptr ss:,eax
0362328A 68 05000080 push 0x80000005
0362328F 6A 00 push 0x0
03623291 8B45 C8 mov eax,dword ptr ss:
03623294 85C0 test eax,eax
03623296 75 05 jnz short 0362329D
03623298 B8 19DD6B03 mov eax,0x36BDD19
0362329D 50 push eax
0362329E 68 01000000 push 0x1
036232A3 BB 609E6303 mov ebx,0x3639E60
036232A8 E8 73670100 call 03639A20
036232AD 83C4 10 add esp,0x10
036232B0 8985 60FFFFFF mov dword ptr ss:,eax
036232B6 83BD 60FFFFFF 2>cmp dword ptr ss:,0x20
036232BD 0F84 36000000 je 036232F9
036232C3 DB45 F4 fild dword ptr ss:
036232C6 DD9D 60FFFFFF fstp qword ptr ss:
036232CC DD85 60FFFFFF fld qword ptr ss:
036232D2 DC05 C89D6D03 fadd qword ptr ds:
036232D8 DD9D 58FFFFFF fstp qword ptr ss:
036232DE 68 FDFFFFFF push -0x3
036232E3 DD85 58FFFFFF fld qword ptr ss:
036232E9 E8 CDDFFEFF call 036112BB
036232EE 50 push eax
036232EF E8 3853FFFF call 0361862C
036232F4 E9 881B0000 jmp 03624E81
036232F9 6A 00 push 0x0
036232FB 6A 00 push 0x0
036232FD 6A 00 push 0x0
036232FF 68 01030080 push 0x80000301
03623304 6A 00 push 0x0
03623306 68 03000000 push 0x3
0362330B 68 05000080 push 0x80000005
03623310 6A 00 push 0x0
03623312 8B45 C8 mov eax,dword ptr ss:
03623315 85C0 test eax,eax
03623317 75 05 jnz short 0362331E
03623319 B8 19DD6B03 mov eax,0x36BDD19
0362331E 50 push eax
0362331F 68 03000000 push 0x3
03623324 BB B0AC6303 mov ebx,0x363ACB0
03623329 E8 F2660100 call 03639A20
0362332E 83C4 28 add esp,0x28
03623331 8985 5CFFFFFF mov dword ptr ss:,eax
03623337 8995 60FFFFFF mov dword ptr ss:,edx ; ntdll.KiFastSystemCallRet
0362333D 898D 64FFFFFF mov dword ptr ss:,ecx
03623343 8B8D 64FFFFFF mov ecx,dword ptr ss:
03623349 8B95 60FFFFFF mov edx,dword ptr ss:
0362334F 8B85 5CFFFFFF mov eax,dword ptr ss:
03623355 81F9 01010080 cmp ecx,0x80000101
0362335B 75 07 jnz short 03623364
0362335D 25 FF000000 and eax,0xFF
03623362 EB 57 jmp short 036233BB
03623364 81F9 01020080 cmp ecx,0x80000201
0362336A 75 03 jnz short 0362336F
0362336C 98 cwde
0362336D EB 4C jmp short 036233BB
0362336F 81F9 01030080 cmp ecx,0x80000301
03623375 74 44 je short 036233BB
03623377 81F9 01040080 cmp ecx,0x80000401
0362337D 74 3C je short 036233BB
0362337F 8985 54FFFFFF mov dword ptr ss:,eax
03623385 81F9 01050080 cmp ecx,0x80000501
0362338B 74 15 je short 036233A2
0362338D 81F9 01060080 cmp ecx,0x80000601
03623393 74 15 je short 036233AA
03623395 68 02000000 push 0x2
0362339A E8 8D660100 call 03639A2C
0362339F 83C4 04 add esp,0x4
036233A2 D985 54FFFFFF fld dword ptr ss:
036233A8 EB 0C jmp short 036233B6
036233AA 8995 58FFFFFF mov dword ptr ss:,edx ; ntdll.KiFastSystemCallRet
036233B0 DD85 54FFFFFF fld qword ptr ss:
036233B6 E8 00DFFEFF call 036112BB
036233BB 8945 BC mov dword ptr ss:,eax
036233BE 68 01030080 push 0x80000301
036233C3 6A 00 push 0x0
036233C5 68 1C000000 push 0x1C
036233CA 68 05000080 push 0x80000005
036233CF 6A 00 push 0x0
036233D1 8B45 C8 mov eax,dword ptr ss:
036233D4 85C0 test eax,eax
036233D6 75 05 jnz short 036233DD
036233D8 B8 19DD6B03 mov eax,0x36BDD19
036233DD 50 push eax
036233DE 68 02000000 push 0x2
036233E3 BB 70AE6303 mov ebx,0x363AE70
036233E8 E8 33660100 call 03639A20
036233ED 83C4 1C add esp,0x1C
036233F0 8985 64FFFFFF mov dword ptr ss:,eax
036233F6 8B85 64FFFFFF mov eax,dword ptr ss:
036233FC 50 push eax
036233FD 8B5D C8 mov ebx,dword ptr ss:
03623400 85DB test ebx,ebx ; ntdll.7C99D5E0
03623402 74 09 je short 0362340D
03623404 53 push ebx ; ntdll.7C99D5E0
03623405 E8 0A660100 call 03639A14
0362340A 83C4 04 add esp,0x4
0362340D 58 pop eax ; 03626828
0362340E 8945 C8 mov dword ptr ss:,eax
03623411 68 05000080 push 0x80000005
03623416 6A 00 push 0x0
03623418 8B45 C8 mov eax,dword ptr ss:
0362341B 85C0 test eax,eax
0362341D 75 05 jnz short 03623424
0362341F B8 19DD6B03 mov eax,0x36BDD19
03623424 50 push eax
03623425 68 01000000 push 0x1
0362342A BB 80AA6303 mov ebx,0x363AA80
0362342F E8 EC650100 call 03639A20
03623434 83C4 10 add esp,0x10
03623437 8985 64FFFFFF mov dword ptr ss:,eax
0362343D 8D85 64FFFFFF lea eax,dword ptr ss:
03623443 50 push eax
03623444 E8 6651FFFF call 036185AF
03623449 8985 60FFFFFF mov dword ptr ss:,eax
0362344F 8B9D 64FFFFFF mov ebx,dword ptr ss:
03623455 85DB test ebx,ebx ; ntdll.7C99D5E0
03623457 74 09 je short 03623462
03623459 53 push ebx ; ntdll.7C99D5E0
0362345A E8 B5650100 call 03639A14
0362345F 83C4 04 add esp,0x4
03623462 8B85 60FFFFFF mov eax,dword ptr ss:
03623468 3945 BC cmp dword ptr ss:,eax
0362346B 0F84 36000000 je 036234A7
03623471 DB45 F4 fild dword ptr ss:
03623474 DD9D 60FFFFFF fstp qword ptr ss:
0362347A DD85 60FFFFFF fld qword ptr ss:
03623480 DC05 C89D6D03 fadd qword ptr ds:
03623486 DD9D 58FFFFFF fstp qword ptr ss:
0362348C 68 FDFFFFFF push -0x3
03623491 DD85 58FFFFFF fld qword ptr ss:
03623497 E8 1FDEFEFF call 036112BB
0362349C 50 push eax
0362349D E8 8A51FFFF call 0361862C
036234A2 E9 DA190000 jmp 03624E81
036234A7 6A 00 push 0x0
036234A9 6A 00 push 0x0
036234AB 6A 00 push 0x0
036234AD 68 01030080 push 0x80000301
036234B2 6A 00 push 0x0
036234B4 68 03000000 push 0x3
036234B9 68 05000080 push 0x80000005
036234BE 6A 00 push 0x0
036234C0 8B45 C8 mov eax,dword ptr ss:
036234C3 85C0 test eax,eax
036234C5 75 05 jnz short 036234CC
036234C7 B8 19DD6B03 mov eax,0x36BDD19
036234CC 50 push eax
036234CD 68 03000000 push 0x3
036234D2 BB B0AC6303 mov ebx,0x363ACB0
036234D7 E8 44650100 call 03639A20
036234DC 83C4 28 add esp,0x28
036234DF 8985 5CFFFFFF mov dword ptr ss:,eax
036234E5 8995 60FFFFFF mov dword ptr ss:,edx ; ntdll.KiFastSystemCallRet
036234EB 898D 64FFFFFF mov dword ptr ss:,ecx
036234F1 8B8D 64FFFFFF mov ecx,dword ptr ss:
036234F7 8B95 60FFFFFF mov edx,dword ptr ss:
036234FD 8B85 5CFFFFFF mov eax,dword ptr ss:
03623503 81F9 01010080 cmp ecx,0x80000101
03623509 75 07 jnz short 03623512
0362350B 25 FF000000 and eax,0xFF
03623510 EB 57 jmp short 03623569
03623512 81F9 01020080 cmp ecx,0x80000201
03623518 75 03 jnz short 0362351D
0362351A 98 cwde
0362351B EB 4C jmp short 03623569
0362351D 81F9 01030080 cmp ecx,0x80000301
03623523 74 44 je short 03623569
03623525 81F9 01040080 cmp ecx,0x80000401
0362352B 74 3C je short 03623569
0362352D 8985 54FFFFFF mov dword ptr ss:,eax
03623533 81F9 01050080 cmp ecx,0x80000501
03623539 74 15 je short 03623550
0362353B 81F9 01060080 cmp ecx,0x80000601
03623541 74 15 je short 03623558
03623543 68 02000000 push 0x2
03623548 E8 DF640100 call 03639A2C
0362354D 83C4 04 add esp,0x4
03623550 D985 54FFFFFF fld dword ptr ss:
03623556 EB 0C jmp short 03623564
03623558 8995 58FFFFFF mov dword ptr ss:,edx ; ntdll.KiFastSystemCallRet
0362355E DD85 54FFFFFF fld qword ptr ss:
03623564 E8 52DDFEFF call 036112BB
03623569 8945 B8 mov dword ptr ss:,eax
0362356C 68 01030080 push 0x80000301
03623571 6A 00 push 0x0
03623573 68 18000000 push 0x18
03623578 68 05000080 push 0x80000005
0362357D 6A 00 push 0x0
0362357F 8B45 C8 mov eax,dword ptr ss:
03623582 85C0 test eax,eax
03623584 75 05 jnz short 0362358B
03623586 B8 19DD6B03 mov eax,0x36BDD19
0362358B 50 push eax
0362358C 68 02000000 push 0x2
03623591 BB 70AE6303 mov ebx,0x363AE70
03623596 E8 85640100 call 03639A20
0362359B 83C4 1C add esp,0x1C
0362359E 8985 64FFFFFF mov dword ptr ss:,eax
036235A4 8B85 64FFFFFF mov eax,dword ptr ss:
036235AA 50 push eax
036235AB 8B5D C8 mov ebx,dword ptr ss:
036235AE 85DB test ebx,ebx ; ntdll.7C99D5E0
036235B0 74 09 je short 036235BB
036235B2 53 push ebx ; ntdll.7C99D5E0
036235B3 E8 5C640100 call 03639A14
036235B8 83C4 04 add esp,0x4
036235BB 58 pop eax ; 03626828
036235BC 8945 C8 mov dword ptr ss:,eax
036235BF A1 A8167003 mov eax,dword ptr ds:
036235C4 8945 B4 mov dword ptr ss:,eax
036235C7 DB45 B8 fild dword ptr ss:
036235CA DD9D 60FFFFFF fstp qword ptr ss:
036235D0 DD85 60FFFFFF fld qword ptr ss:
036235D6 DB45 B4 fild dword ptr ss:
036235D9 DD9D 58FFFFFF fstp qword ptr ss:
036235DF DC85 58FFFFFF fadd qword ptr ss:
036235E5 DD9D 50FFFFFF fstp qword ptr ss:
036235EB DD85 50FFFFFF fld qword ptr ss:
036235F1 E8 C5DCFEFF call 036112BB
036235F6 50 push eax
036235F7 8D45 C8 lea eax,dword ptr ss:
036235FA 50 push eax
036235FB E8 E1270000 call 03625DE1
03623600 8985 4CFFFFFF mov dword ptr ss:,eax
03623606 8B85 4CFFFFFF mov eax,dword ptr ss:
0362360C 50 push eax
0362360D 8B5D C8 mov ebx,dword ptr ss:
03623610 85DB test ebx,ebx ; ntdll.7C99D5E0
03623612 74 09 je short 0362361D
03623614 53 push ebx ; ntdll.7C99D5E0
03623615 E8 FA630100 call 03639A14
0362361A 83C4 04 add esp,0x4
0362361D 58 pop eax ; 03626828
0362361E 8945 C8 mov dword ptr ss:,eax
03623621 68 05000080 push 0x80000005
03623626 6A 00 push 0x0
03623628 8B45 C8 mov eax,dword ptr ss:
0362362B 85C0 test eax,eax
0362362D 75 05 jnz short 03623634
0362362F B8 19DD6B03 mov eax,0x36BDD19
03623634 50 push eax
03623635 68 01000000 push 0x1
0362363A BB 609E6303 mov ebx,0x3639E60
0362363F E8 DC630100 call 03639A20
03623644 83C4 10 add esp,0x10
03623647 8985 60FFFFFF mov dword ptr ss:,eax
0362364D 83BD 60FFFFFF 1>cmp dword ptr ss:,0x17
03623654 0F84 36000000 je 03623690
0362365A DB45 F4 fild dword ptr ss:
0362365D DD9D 60FFFFFF fstp qword ptr ss:
03623663 DD85 60FFFFFF fld qword ptr ss:
03623669 DC05 C89D6D03 fadd qword ptr ds:
0362366F DD9D 58FFFFFF fstp qword ptr ss:
03623675 68 FDFFFFFF push -0x3
0362367A DD85 58FFFFFF fld qword ptr ss:
03623680 E8 36DCFEFF call 036112BB
03623685 50 push eax
03623686 E8 A14FFFFF call 0361862C
0362368B E9 F1170000 jmp 03624E81
03623690 6A 00 push 0x0
03623692 6A 00 push 0x0
03623694 6A 00 push 0x0
03623696 68 01030080 push 0x80000301
0362369B 6A 00 push 0x0
0362369D 68 03000000 push 0x3
036236A2 68 05000080 push 0x80000005
036236A7 6A 00 push 0x0
036236A9 8B45 C8 mov eax,dword ptr ss:
036236AC 85C0 test eax,eax
036236AE 75 05 jnz short 036236B5
036236B0 B8 19DD6B03 mov eax,0x36BDD19
036236B5 50 push eax
036236B6 68 03000000 push 0x3
036236BB BB B0AC6303 mov ebx,0x363ACB0
036236C0 E8 5B630100 call 03639A20
036236C5 83C4 28 add esp,0x28
036236C8 8985 5CFFFFFF mov dword ptr ss:,eax
036236CE 8995 60FFFFFF mov dword ptr ss:,edx ; ntdll.KiFastSystemCallRet
036236D4 898D 64FFFFFF mov dword ptr ss:,ecx
036236DA 8B8D 64FFFFFF mov ecx,dword ptr ss:
036236E0 8B95 60FFFFFF mov edx,dword ptr ss:
036236E6 8B85 5CFFFFFF mov eax,dword ptr ss:
036236EC 81F9 01010080 cmp ecx,0x80000101
036236F2 75 07 jnz short 036236FB
036236F4 25 FF000000 and eax,0xFF
036236F9 EB 57 jmp short 03623752
036236FB 81F9 01020080 cmp ecx,0x80000201
03623701 75 03 jnz short 03623706
03623703 98 cwde
03623704 EB 4C jmp short 03623752
03623706 81F9 01030080 cmp ecx,0x80000301
0362370C 74 44 je short 03623752
0362370E 81F9 01040080 cmp ecx,0x80000401
03623714 74 3C je short 03623752
03623716 8985 54FFFFFF mov dword ptr ss:,eax
0362371C 81F9 01050080 cmp ecx,0x80000501
03623722 74 15 je short 03623739
03623724 81F9 01060080 cmp ecx,0x80000601
0362372A 74 15 je short 03623741
0362372C 68 02000000 push 0x2
03623731 E8 F6620100 call 03639A2C
03623736 83C4 04 add esp,0x4
03623739 D985 54FFFFFF fld dword ptr ss:
0362373F EB 0C jmp short 0362374D
03623741 8995 58FFFFFF mov dword ptr ss:,edx ; ntdll.KiFastSystemCallRet
03623747 DD85 54FFFFFF fld qword ptr ss:
0362374D E8 69DBFEFF call 036112BB
03623752 8945 B0 mov dword ptr ss:,eax
03623755 68 05000080 push 0x80000005
0362375A 6A 00 push 0x0
0362375C 8B45 C8 mov eax,dword ptr ss:
0362375F 85C0 test eax,eax
03623761 75 05 jnz short 03623768
03623763 B8 19DD6B03 mov eax,0x36BDD19
03623768 50 push eax
03623769 68 01000000 push 0x1
0362376E BB 609E6303 mov ebx,0x3639E60
03623773 E8 A8620100 call 03639A20
03623778 83C4 10 add esp,0x10
0362377B 8985 5CFFFFFF mov dword ptr ss:,eax
03623781 DB85 5CFFFFFF fild dword ptr ss:
03623787 DD9D 5CFFFFFF fstp qword ptr ss:
0362378D DD85 5CFFFFFF fld qword ptr ss:
03623793 DC25 37976D03 fsub qword ptr ds:
03623799 DD9D 54FFFFFF fstp qword ptr ss:
0362379F DD85 54FFFFFF fld qword ptr ss:
036237A5 E8 11DBFEFF call 036112BB
036237AA 68 01030080 push 0x80000301
036237AF 6A 00 push 0x0
036237B1 50 push eax
036237B2 68 05000080 push 0x80000005
036237B7 6A 00 push 0x0
036237B9 8B45 C8 mov eax,dword ptr ss:
036237BC 85C0 test eax,eax
036237BE 75 05 jnz short 036237C5
036237C0 B8 19DD6B03 mov eax,0x36BDD19
036237C5 50 push eax
036237C6 68 02000000 push 0x2
036237CB BB 70AE6303 mov ebx,0x363AE70
036237D0 E8 4B620100 call 03639A20
036237D5 83C4 1C add esp,0x1C
036237D8 8985 50FFFFFF mov dword ptr ss:,eax
036237DE 8B85 50FFFFFF mov eax,dword ptr ss:
036237E4 50 push eax
036237E5 8B5D C8 mov ebx,dword ptr ss:
036237E8 85DB test ebx,ebx ; ntdll.7C99D5E0
036237EA 74 09 je short 036237F5
036237EC 53 push ebx ; ntdll.7C99D5E0
036237ED E8 22620100 call 03639A14
036237F2 83C4 04 add esp,0x4
036237F5 58 pop eax ; 03626828
036237F6 8945 C8 mov dword ptr ss:,eax
036237F9 68 04000080 push 0x80000004
036237FE 6A 00 push 0x0
03623800 8B45 C4 mov eax,dword ptr ss: ; ntdll.7C9333F6
03623803 85C0 test eax,eax
03623805 75 05 jnz short 0362380C
03623807 B8 00DD6B03 mov eax,0x36BDD00
0362380C 50 push eax
0362380D 68 01000000 push 0x1
03623812 BB 80AA6303 mov ebx,0x363AA80
03623817 E8 04620100 call 03639A20
0362381C 83C4 10 add esp,0x10
0362381F 8985 64FFFFFF mov dword ptr ss:,eax
03623825 8D85 64FFFFFF lea eax,dword ptr ss:
0362382B 50 push eax
0362382C E8 5BDCFFFF call 0362148C
03623831 8985 60FFFFFF mov dword ptr ss:,eax
03623837 8B9D 64FFFFFF mov ebx,dword ptr ss:
0362383D 85DB test ebx,ebx ; ntdll.7C99D5E0
0362383F 74 09 je short 0362384A
03623841 53 push ebx ; ntdll.7C99D5E0
03623842 E8 CD610100 call 03639A14
03623847 83C4 04 add esp,0x4
0362384A A1 B4167003 mov eax,dword ptr ds:
0362384F 33C9 xor ecx,ecx
03623851 85C0 test eax,eax
03623853 74 03 je short 03623858
03623855 8B48 04 mov ecx,dword ptr ds:
03623858 51 push ecx
03623859 83C0 08 add eax,0x8
0362385C 50 push eax
0362385D 8B85 60FFFFFF mov eax,dword ptr ss:
03623863 33DB xor ebx,ebx ; ntdll.7C99D5E0
03623865 85C0 test eax,eax
03623867 74 03 je short 0362386C
03623869 8B58 04 mov ebx,dword ptr ds:
0362386C 83C0 08 add eax,0x8
0362386F 50 push eax
03623870 3BD9 cmp ebx,ecx
03623872 B8 01000000 mov eax,0x1
03623877 75 0A jnz short 03623883
03623879 48 dec eax
0362387A 85C9 test ecx,ecx
0362387C 74 05 je short 03623883
0362387E E8 34F6FEFF call 03612EB7
03623883 83C4 0C add esp,0xC
03623886 85C0 test eax,eax
03623888 B8 00000000 mov eax,0x0
0362388D 0F95C0 setne al
03623890 8985 5CFFFFFF mov dword ptr ss:,eax
03623896 8B9D 60FFFFFF mov ebx,dword ptr ss:
0362389C 85DB test ebx,ebx ; ntdll.7C99D5E0
0362389E 74 09 je short 036238A9
036238A0 53 push ebx ; ntdll.7C99D5E0
036238A1 E8 6E610100 call 03639A14
036238A6 83C4 04 add esp,0x4
036238A9 83BD 5CFFFFFF 0>cmp dword ptr ss:,0x0
036238B0 0F85 85000000 jnz 0362393B
036238B6 817D B0 D092F2A>cmp dword ptr ss:,0xA0F292D0
036238BD 0F84 67000000 je 0362392A
036238C3 68 04000080 push 0x80000004
036238C8 6A 00 push 0x0
036238CA 8B45 C4 mov eax,dword ptr ss: ; ntdll.7C9333F6
036238CD 85C0 test eax,eax
036238CF 75 05 jnz short 036238D6
036238D1 B8 00DD6B03 mov eax,0x36BDD00
036238D6 50 push eax
036238D7 68 01000000 push 0x1
036238DC BB 80AA6303 mov ebx,0x363AA80
036238E1 E8 3A610100 call 03639A20
036238E6 83C4 10 add esp,0x10
036238E9 8985 54FFFFFF mov dword ptr ss:,eax
036238EF 8D85 54FFFFFF lea eax,dword ptr ss:
036238F5 50 push eax
036238F6 E8 B44CFFFF call 036185AF
036238FB 8985 50FFFFFF mov dword ptr ss:,eax
03623901 8B9D 54FFFFFF mov ebx,dword ptr ss:
03623907 85DB test ebx,ebx ; ntdll.7C99D5E0
03623909 74 09 je short 03623914
0362390B 53 push ebx ; ntdll.7C99D5E0
0362390C E8 03610100 call 03639A14
03623911 83C4 04 add esp,0x4
03623914 8B85 50FFFFFF mov eax,dword ptr ss:
0362391A 3945 B0 cmp dword ptr ss:,eax
0362391D 0F84 07000000 je 0362392A
03623923 B8 01000000 mov eax,0x1
03623928 EB 05 jmp short 0362392F
0362392A B8 00000000 mov eax,0x0
0362392F 85C0 test eax,eax
03623931 0F85 04000000 jnz 0362393B
03623937 33C0 xor eax,eax
03623939 EB 05 jmp short 03623940
0362393B B8 01000000 mov eax,0x1
03623940 85C0 test eax,eax
03623942 0F84 36000000 je 0362397E
03623948 DB45 F4 fild dword ptr ss:
0362394B DD9D 60FFFFFF fstp qword ptr ss:
03623951 DD85 60FFFFFF fld qword ptr ss:
03623957 DC05 C89D6D03 fadd qword ptr ds:
0362395D DD9D 58FFFFFF fstp qword ptr ss:
03623963 68 FAFFFFFF push -0x6
03623968 DD85 58FFFFFF fld qword ptr ss:
0362396E E8 48D9FEFF call 036112BB
03623973 50 push eax
03623974 E8 B34CFFFF call 0361862C
03623979 E9 03150000 jmp 03624E81
0362397E 817D B0 D092F2A>cmp dword ptr ss:,0xA0F292D0
03623985 0F85 0F000000 jnz 0362399A
0362398B C705 20177003 F>mov dword ptr ds:,-0x2
03623995 E9 0A000000 jmp 036239A4
0362399A C705 20177003 F>mov dword ptr ds:,-0x3
036239A4 833D 20177003 F>cmp dword ptr ds:,-0x2
036239AB 0F85 14000000 jnz 036239C5
036239B1 833D 7C157003 0>cmp dword ptr ds:,0x1
036239B8 0F85 07000000 jnz 036239C5
036239BE B8 01000000 mov eax,0x1
036239C3 EB 05 jmp short 036239CA
036239C5 B8 00000000 mov eax,0x0
036239CA 85C0 test eax,eax
036239CC 0F84 36000000 je 03623A08
036239D2 DB45 F4 fild dword ptr ss:
036239D5 DD9D 60FFFFFF fstp qword ptr ss:
036239DB DD85 60FFFFFF fld qword ptr ss:
036239E1 DC05 C89D6D03 fadd qword ptr ds:
036239E7 DD9D 58FFFFFF fstp qword ptr ss:
036239ED 68 F9FFFFFF push -0x7
036239F2 DD85 58FFFFFF fld qword ptr ss:
036239F8 E8 BED8FEFF call 036112BB
036239FD 50 push eax
036239FE E8 294CFFFF call 0361862C
03623A03 E9 79140000 jmp 03624E81
03623A08 6A 00 push 0x0
03623A0A 6A 00 push 0x0
03623A0C 6A 00 push 0x0
03623A0E 68 01030080 push 0x80000301
03623A13 6A 00 push 0x0
03623A15 68 03000000 push 0x3
03623A1A 68 05000080 push 0x80000005
03623A1F 6A 00 push 0x0
03623A21 8B45 C8 mov eax,dword ptr ss:
03623A24 85C0 test eax,eax
03623A26 75 05 jnz short 03623A2D
03623A28 B8 19DD6B03 mov eax,0x36BDD19
03623A2D 50 push eax
03623A2E 68 03000000 push 0x3
03623A33 BB B0AC6303 mov ebx,0x363ACB0
03623A38 E8 E35F0100 call 03639A20
03623A3D 83C4 28 add esp,0x28
03623A40 8985 5CFFFFFF mov dword ptr ss:,eax
03623A46 8995 60FFFFFF mov dword ptr ss:,edx ; ntdll.KiFastSystemCallRet
03623A4C 898D 64FFFFFF mov dword ptr ss:,ecx
03623A52 8B8D 64FFFFFF mov ecx,dword ptr ss:
03623A58 8B95 60FFFFFF mov edx,dword ptr ss:
03623A5E 8B85 5CFFFFFF mov eax,dword ptr ss:
03623A64 81F9 01010080 cmp ecx,0x80000101
03623A6A 75 07 jnz short 03623A73
03623A6C 25 FF000000 and eax,0xFF
03623A71 EB 57 jmp short 03623ACA
03623A73 81F9 01020080 cmp ecx,0x80000201
03623A79 75 03 jnz short 03623A7E
03623A7B 98 cwde
03623A7C EB 4C jmp short 03623ACA
03623A7E 81F9 01030080 cmp ecx,0x80000301
03623A84 74 44 je short 03623ACA
03623A86 81F9 01040080 cmp ecx,0x80000401
03623A8C 74 3C je short 03623ACA
03623A8E 8985 54FFFFFF mov dword ptr ss:,eax
03623A94 81F9 01050080 cmp ecx,0x80000501
03623A9A 74 15 je short 03623AB1
03623A9C 81F9 01060080 cmp ecx,0x80000601
03623AA2 74 15 je short 03623AB9
03623AA4 68 02000000 push 0x2
03623AA9 E8 7E5F0100 call 03639A2C
03623AAE 83C4 04 add esp,0x4
03623AB1 D985 54FFFFFF fld dword ptr ss:
03623AB7 EB 0C jmp short 03623AC5
03623AB9 8995 58FFFFFF mov dword ptr ss:,edx ; ntdll.KiFastSystemCallRet
03623ABF DD85 54FFFFFF fld qword ptr ss:
03623AC5 E8 F1D7FEFF call 036112BB
03623ACA 8945 AC mov dword ptr ss:,eax
03623ACD 68 05000080 push 0x80000005
03623AD2 6A 00 push 0x0
03623AD4 8B45 C8 mov eax,dword ptr ss:
03623AD7 85C0 test eax,eax
03623AD9 75 05 jnz short 03623AE0
03623ADB B8 19DD6B03 mov eax,0x36BDD19
03623AE0 50 push eax
03623AE1 68 01000000 push 0x1
03623AE6 BB 609E6303 mov ebx,0x3639E60
03623AEB E8 305F0100 call 03639A20
03623AF0 83C4 10 add esp,0x10
03623AF3 8985 5CFFFFFF mov dword ptr ss:,eax
03623AF9 DB85 5CFFFFFF fild dword ptr ss:
03623AFF DD9D 5CFFFFFF fstp qword ptr ss:
03623B05 DD85 5CFFFFFF fld qword ptr ss:
03623B0B DC25 37976D03 fsub qword ptr ds:
03623B11 DD9D 54FFFFFF fstp qword ptr ss:
03623B17 DD85 54FFFFFF fld qword ptr ss:
03623B1D E8 99D7FEFF call 036112BB
03623B22 68 01030080 push 0x80000301
03623B27 6A 00 push 0x0
03623B29 50 push eax
03623B2A 68 05000080 push 0x80000005
03623B2F 6A 00 push 0x0
03623B31 8B45 C8 mov eax,dword ptr ss:
03623B34 85C0 test eax,eax
03623B36 75 05 jnz short 03623B3D
03623B38 B8 19DD6B03 mov eax,0x36BDD19
03623B3D 50 push eax
03623B3E 68 02000000 push 0x2
03623B43 BB 70AE6303 mov ebx,0x363AE70
03623B48 E8 D35E0100 call 03639A20
03623B4D 83C4 1C add esp,0x1C
03623B50 8985 50FFFFFF mov dword ptr ss:,eax
03623B56 8B85 50FFFFFF mov eax,dword ptr ss:
03623B5C 50 push eax
03623B5D 8B5D C8 mov ebx,dword ptr ss:
03623B60 85DB test ebx,ebx ; ntdll.7C99D5E0
03623B62 74 09 je short 03623B6D
03623B64 53 push ebx ; ntdll.7C99D5E0
03623B65 E8 AA5E0100 call 03639A14
03623B6A 83C4 04 add esp,0x4
03623B6D 58 pop eax ; 03626828
03623B6E 8945 C8 mov dword ptr ss:,eax
03623B71 8B45 AC mov eax,dword ptr ss: ; user32.77D2A998
03623B74 3945 B4 cmp dword ptr ss:,eax
03623B77 0F84 36000000 je 03623BB3
03623B7D DB45 F4 fild dword ptr ss:
03623B80 DD9D 60FFFFFF fstp qword ptr ss:
03623B86 DD85 60FFFFFF fld qword ptr ss:
03623B8C DC05 C89D6D03 fadd qword ptr ds:
03623B92 DD9D 58FFFFFF fstp qword ptr ss:
03623B98 68 FDFFFFFF push -0x3
03623B9D DD85 58FFFFFF fld qword ptr ss:
03623BA3 E8 13D7FEFF call 036112BB
03623BA8 50 push eax
03623BA9 E8 7E4AFFFF call 0361862C
03623BAE E9 CE120000 jmp 03624E81
03623BB3 C705 10177003 0>mov dword ptr ds:,0x3
03623BBD 833D 10177003 0>cmp dword ptr ds:,0x3
03623BC4 0F85 02000000 jnz 03623BCC
03623BCA^ EB F1 jmp short 03623BBD
03623BCC 8D45 94 lea eax,dword ptr ss:
03623BCF 50 push eax
03623BD0 8D45 98 lea eax,dword ptr ss:
03623BD3 50 push eax
03623BD4 8D45 9C lea eax,dword ptr ss:
03623BD7 50 push eax
03623BD8 8D45 A0 lea eax,dword ptr ss:
03623BDB 50 push eax
03623BDC 8D45 A4 lea eax,dword ptr ss:
03623BDF 50 push eax
03623BE0 8D45 A8 lea eax,dword ptr ss:
03623BE3 50 push eax
03623BE4 E8 86240000 call 0362606F
03623BE9 8985 60FFFFFF mov dword ptr ss:,eax
03623BEF 83BD 60FFFFFF 0>cmp dword ptr ss:,0x0
03623BF6 0F85 36000000 jnz 03623C32
03623BFC DB45 F4 fild dword ptr ss:
03623BFF DD9D 60FFFFFF fstp qword ptr ss:
03623C05 DD85 60FFFFFF fld qword ptr ss:
03623C0B DC05 C89D6D03 fadd qword ptr ds:
03623C11 DD9D 58FFFFFF fstp qword ptr ss:
03623C17 68 FCFFFFFF push -0x4
03623C1C DD85 58FFFFFF fld qword ptr ss:
03623C22 E8 94D6FEFF call 036112BB
03623C27 50 push eax
03623C28 E8 FF49FFFF call 0361862C
03623C2D E9 4F120000 jmp 03624E81
03623C32 68 01030080 push 0x80000301
03623C37 6A 00 push 0x0
03623C39 68 08000000 push 0x8
03623C3E 68 05000080 push 0x80000005
03623C43 6A 00 push 0x0
03623C45 8B45 C8 mov eax,dword ptr ss:
03623C48 85C0 test eax,eax
03623C4A 75 05 jnz short 03623C51
03623C4C B8 19DD6B03 mov eax,0x36BDD19
03623C51 50 push eax
03623C52 68 02000000 push 0x2
03623C57 BB 30AE6303 mov ebx,0x363AE30
03623C5C E8 BF5D0100 call 03639A20
03623C61 83C4 1C add esp,0x1C
03623C64 8985 64FFFFFF mov dword ptr ss:,eax
03623C6A 68 05000080 push 0x80000005
03623C6F 6A 00 push 0x0
03623C71 8B85 64FFFFFF mov eax,dword ptr ss:
03623C77 85C0 test eax,eax
03623C79 75 05 jnz short 03623C80
03623C7B B8 19DD6B03 mov eax,0x36BDD19
03623C80 50 push eax
03623C81 68 01000000 push 0x1
03623C86 BB 20B36303 mov ebx,0x363B320
03623C8B E8 905D0100 call 03639A20
03623C90 83C4 10 add esp,0x10
03623C93 8985 60FFFFFF mov dword ptr ss:,eax
03623C99 8B9D 64FFFFFF mov ebx,dword ptr ss:
03623C9F 85DB test ebx,ebx ; ntdll.7C99D5E0
03623CA1 74 09 je short 03623CAC
03623CA3 53 push ebx ; ntdll.7C99D5E0
03623CA4 E8 6B5D0100 call 03639A14
03623CA9 83C4 04 add esp,0x4
03623CAC 8B85 60FFFFFF mov eax,dword ptr ss:
03623CB2 50 push eax
03623CB3 8B5D 90 mov ebx,dword ptr ss:
03623CB6 85DB test ebx,ebx ; ntdll.7C99D5E0
03623CB8 74 09 je short 03623CC3
03623CBA 53 push ebx ; ntdll.7C99D5E0
03623CBB E8 545D0100 call 03639A14
03623CC0 83C4 04 add esp,0x4
03623CC3 58 pop eax ; 03626828
03623CC4 8945 90 mov dword ptr ss:,eax
03623CC7 68 05000080 push 0x80000005
03623CCC 6A 00 push 0x0
03623CCE 8B45 C8 mov eax,dword ptr ss:
03623CD1 85C0 test eax,eax
03623CD3 75 05 jnz short 03623CDA
03623CD5 B8 19DD6B03 mov eax,0x36BDD19
03623CDA 50 push eax
03623CDB 68 01000000 push 0x1
03623CE0 BB 609E6303 mov ebx,0x3639E60
03623CE5 E8 365D0100 call 03639A20
03623CEA 83C4 10 add esp,0x10
03623CED 8985 5CFFFFFF mov dword ptr ss:,eax
03623CF3 DB85 5CFFFFFF fild dword ptr ss:
03623CF9 DD9D 5CFFFFFF fstp qword ptr ss:
03623CFF DD85 5CFFFFFF fld qword ptr ss:
03623D05 DC25 2F976D03 fsub qword ptr ds:
03623D0B DD9D 54FFFFFF fstp qword ptr ss:
03623D11 DD85 54FFFFFF fld qword ptr ss:
03623D17 E8 9FD5FEFF call 036112BB
03623D1C 68 01030080 push 0x80000301
03623D21 6A 00 push 0x0
03623D23 50 push eax
03623D24 68 05000080 push 0x80000005
03623D29 6A 00 push 0x0
03623D2B 8B45 C8 mov eax,dword ptr ss:
03623D2E 85C0 test eax,eax
03623D30 75 05 jnz short 03623D37
03623D32 B8 19DD6B03 mov eax,0x36BDD19
03623D37 50 push eax
03623D38 68 02000000 push 0x2
03623D3D BB 70AE6303 mov ebx,0x363AE70
03623D42 E8 D95C0100 call 03639A20
03623D47 83C4 1C add esp,0x1C
03623D4A 8985 50FFFFFF mov dword ptr ss:,eax
03623D50 8B85 50FFFFFF mov eax,dword ptr ss:
03623D56 50 push eax
03623D57 8B5D C8 mov ebx,dword ptr ss:
03623D5A 85DB test ebx,ebx ; ntdll.7C99D5E0
03623D5C 74 09 je short 03623D67
03623D5E 53 push ebx ; ntdll.7C99D5E0
03623D5F E8 B05C0100 call 03639A14
03623D64 83C4 04 add esp,0x4
03623D67 58 pop eax ; 03626828
03623D68 8945 C8 mov dword ptr ss:,eax
03623D6B 6A 00 push 0x0
03623D6D 6A 00 push 0x0
03623D6F 6A 00 push 0x0
03623D71 68 01030080 push 0x80000301
03623D76 6A 00 push 0x0
03623D78 68 02000000 push 0x2
03623D7D 68 05000080 push 0x80000005
03623D82 6A 00 push 0x0
03623D84 8B45 C8 mov eax,dword ptr ss:
03623D87 85C0 test eax,eax
03623D89 75 05 jnz short 03623D90
03623D8B B8 19DD6B03 mov eax,0x36BDD19
03623D90 50 push eax
03623D91 68 03000000 push 0x3
03623D96 BB B0AC6303 mov ebx,0x363ACB0
03623D9B E8 805C0100 call 03639A20
03623DA0 83C4 28 add esp,0x28
03623DA3 8985 5CFFFFFF mov dword ptr ss:,eax
03623DA9 8995 60FFFFFF mov dword ptr ss:,edx ; ntdll.KiFastSystemCallRet
03623DAF 898D 64FFFFFF mov dword ptr ss:,ecx
03623DB5 8B8D 64FFFFFF mov ecx,dword ptr ss:
03623DBB 8B95 60FFFFFF mov edx,dword ptr ss:
03623DC1 8B85 5CFFFFFF mov eax,dword ptr ss:
03623DC7 81F9 01010080 cmp ecx,0x80000101
03623DCD 75 07 jnz short 03623DD6
03623DCF 25 FF000000 and eax,0xFF
03623DD4 EB 54 jmp short 03623E2A
03623DD6 81F9 01020080 cmp ecx,0x80000201
03623DDC 74 4C je short 03623E2A
03623DDE 81F9 01030080 cmp ecx,0x80000301
03623DE4 74 44 je short 03623E2A
03623DE6 81F9 01040080 cmp ecx,0x80000401
03623DEC 74 3C je short 03623E2A
03623DEE 8985 54FFFFFF mov dword ptr ss:,eax
03623DF4 81F9 01050080 cmp ecx,0x80000501
03623DFA 74 15 je short 03623E11
03623DFC 81F9 01060080 cmp ecx,0x80000601
03623E02 74 15 je short 03623E19
03623E04 68 02000000 push 0x2
03623E09 E8 1E5C0100 call 03639A2C
03623E0E 83C4 04 add esp,0x4
03623E11 D985 54FFFFFF fld dword ptr ss:
03623E17 EB 0C jmp short 03623E25
03623E19 8995 58FFFFFF mov dword ptr ss:,edx ; ntdll.KiFastSystemCallRet
03623E1F DD85 54FFFFFF fld qword ptr ss:
03623E25 E8 91D4FEFF call 036112BB
03623E2A 66:8945 8C mov word ptr ss:,ax
03623E2E 68 05000080 push 0x80000005
03623E33 6A 00 push 0x0
03623E35 8B45 C8 mov eax,dword ptr ss:
03623E38 85C0 test eax,eax
03623E3A 75 05 jnz short 03623E41
03623E3C B8 19DD6B03 mov eax,0x36BDD19
03623E41 50 push eax
03623E42 68 01000000 push 0x1
03623E47 BB 609E6303 mov ebx,0x3639E60
03623E4C E8 CF5B0100 call 03639A20
03623E51 83C4 10 add esp,0x10
03623E54 8985 5CFFFFFF mov dword ptr ss:,eax
03623E5A DB85 5CFFFFFF fild dword ptr ss:
03623E60 DD9D 5CFFFFFF fstp qword ptr ss:
03623E66 DD85 5CFFFFFF fld qword ptr ss:
03623E6C DC25 F4956D03 fsub qword ptr ds:
03623E72 DD9D 54FFFFFF fstp qword ptr ss:
03623E78 DD85 54FFFFFF fld qword ptr ss:
03623E7E E8 38D4FEFF call 036112BB
03623E83 68 01030080 push 0x80000301
03623E88 6A 00 push 0x0
03623E8A 50 push eax
03623E8B 68 05000080 push 0x80000005
03623E90 6A 00 push 0x0
03623E92 8B45 C8 mov eax,dword ptr ss:
03623E95 85C0 test eax,eax
03623E97 75 05 jnz short 03623E9E
03623E99 B8 19DD6B03 mov eax,0x36BDD19
03623E9E 50 push eax
03623E9F 68 02000000 push 0x2
03623EA4 BB 70AE6303 mov ebx,0x363AE70
03623EA9 E8 725B0100 call 03639A20
03623EAE 83C4 1C add esp,0x1C
03623EB1 8985 50FFFFFF mov dword ptr ss:,eax
03623EB7 8B85 50FFFFFF mov eax,dword ptr ss:
03623EBD 50 push eax
03623EBE 8B5D C8 mov ebx,dword ptr ss:
03623EC1 85DB test ebx,ebx ; ntdll.7C99D5E0
03623EC3 74 09 je short 03623ECE
03623EC5 53 push ebx ; ntdll.7C99D5E0
03623EC6 E8 495B0100 call 03639A14
03623ECB 83C4 04 add esp,0x4
03623ECE 58 pop eax ; 03626828
03623ECF 8945 C8 mov dword ptr ss:,eax
03623ED2 6A 00 push 0x0
03623ED4 6A 00 push 0x0
03623ED6 6A 00 push 0x0
03623ED8 68 01030080 push 0x80000301
03623EDD 6A 00 push 0x0
03623EDF 68 01000000 push 0x1
03623EE4 68 05000080 push 0x80000005
03623EE9 6A 00 push 0x0
03623EEB 8B45 C8 mov eax,dword ptr ss:
03623EEE 85C0 test eax,eax
03623EF0 75 05 jnz short 03623EF7
03623EF2 B8 19DD6B03 mov eax,0x36BDD19
03623EF7 50 push eax
03623EF8 68 03000000 push 0x3
03623EFD BB B0AC6303 mov ebx,0x363ACB0
03623F02 E8 195B0100 call 03639A20
03623F07 83C4 28 add esp,0x28
03623F0A 8985 5CFFFFFF mov dword ptr ss:,eax
03623F10 8995 60FFFFFF mov dword ptr ss:,edx ; ntdll.KiFastSystemCallRet
03623F16 898D 64FFFFFF mov dword ptr ss:,ecx
03623F1C 8B8D 64FFFFFF mov ecx,dword ptr ss:
03623F22 8B95 60FFFFFF mov edx,dword ptr ss:
03623F28 8B85 5CFFFFFF mov eax,dword ptr ss:
03623F2E 81F9 01010080 cmp ecx,0x80000101
03623F34 74 54 je short 03623F8A
03623F36 81F9 01020080 cmp ecx,0x80000201
03623F3C 74 4C je short 03623F8A
03623F3E 81F9 01030080 cmp ecx,0x80000301
03623F44 74 44 je short 03623F8A
03623F46 81F9 01040080 cmp ecx,0x80000401
03623F4C 74 3C je short 03623F8A
03623F4E 8985 54FFFFFF mov dword ptr ss:,eax
03623F54 81F9 01050080 cmp ecx,0x80000501
03623F5A 74 15 je short 03623F71
03623F5C 81F9 01060080 cmp ecx,0x80000601
03623F62 74 15 je short 03623F79
03623F64 68 02000000 push 0x2
03623F69 E8 BE5A0100 call 03639A2C
03623F6E 83C4 04 add esp,0x4
03623F71 D985 54FFFFFF fld dword ptr ss:
03623F77 EB 0C jmp short 03623F85
03623F79 8995 58FFFFFF mov dword ptr ss:,edx ; ntdll.KiFastSystemCallRet
03623F7F DD85 54FFFFFF fld qword ptr ss:
03623F85 E8 31D3FEFF call 036112BB
03623F8A 8845 88 mov byte ptr ss:,al
03623F8D 68 05000080 push 0x80000005
03623F92 6A 00 push 0x0
03623F94 8B45 C8 mov eax,dword ptr ss:
03623F97 85C0 test eax,eax
03623F99 75 05 jnz short 03623FA0
03623F9B B8 19DD6B03 mov eax,0x36BDD19
03623FA0 50 push eax
03623FA1 68 01000000 push 0x1
03623FA6 BB 609E6303 mov ebx,0x3639E60
03623FAB E8 705A0100 call 03639A20
03623FB0 83C4 10 add esp,0x10
03623FB3 8985 5CFFFFFF mov dword ptr ss:,eax
03623FB9 DB85 5CFFFFFF fild dword ptr ss:
03623FBF DD9D 5CFFFFFF fstp qword ptr ss:
03623FC5 DD85 5CFFFFFF fld qword ptr ss:
03623FCB DC25 55976D03 fsub qword ptr ds:
03623FD1 DD9D 54FFFFFF fstp qword ptr ss:
03623FD7 DD85 54FFFFFF fld qword ptr ss:
03623FDD E8 D9D2FEFF call 036112BB
03623FE2 68 01030080 push 0x80000301
03623FE7 6A 00 push 0x0
03623FE9 50 push eax
03623FEA 68 05000080 push 0x80000005
03623FEF 6A 00 push 0x0
03623FF1 8B45 C8 mov eax,dword ptr ss:
03623FF4 85C0 test eax,eax
03623FF6 75 05 jnz short 03623FFD
03623FF8 B8 19DD6B03 mov eax,0x36BDD19
03623FFD 50 push eax
03623FFE 68 02000000 push 0x2
03624003 BB 70AE6303 mov ebx,0x363AE70
03624008 E8 135A0100 call 03639A20
0362400D 83C4 1C add esp,0x1C
03624010 8985 50FFFFFF mov dword ptr ss:,eax
03624016 8B85 50FFFFFF mov eax,dword ptr ss:
0362401C 50 push eax
0362401D 8B5D C8 mov ebx,dword ptr ss:
03624020 85DB test ebx,ebx ; ntdll.7C99D5E0
03624022 74 09 je short 0362402D
03624024 53 push ebx ; ntdll.7C99D5E0
03624025 E8 EA590100 call 03639A14
0362402A 83C4 04 add esp,0x4
0362402D 58 pop eax ; 03626828
0362402E 8945 C8 mov dword ptr ss:,eax
03624031 6A 00 push 0x0
03624033 6A 00 push 0x0
03624035 6A 00 push 0x0
03624037 68 01030080 push 0x80000301
0362403C 6A 00 push 0x0
0362403E 68 01000000 push 0x1
03624043 68 05000080 push 0x80000005
03624048 6A 00 push 0x0
0362404A 8B45 C8 mov eax,dword ptr ss:
0362404D 85C0 test eax,eax
0362404F 75 05 jnz short 03624056
03624051 B8 19DD6B03 mov eax,0x36BDD19
03624056 50 push eax
03624057 68 03000000 push 0x3
0362405C BB B0AC6303 mov ebx,0x363ACB0
03624061 E8 BA590100 call 03639A20
03624066 83C4 28 add esp,0x28
03624069 8985 5CFFFFFF mov dword ptr ss:,eax
0362406F 8995 60FFFFFF mov dword ptr ss:,edx ; ntdll.KiFastSystemCallRet
03624075 898D 64FFFFFF mov dword ptr ss:,ecx
0362407B 8B8D 64FFFFFF mov ecx,dword ptr ss:
03624081 8B95 60FFFFFF mov edx,dword ptr ss:
03624087 8B85 5CFFFFFF mov eax,dword ptr ss:
0362408D 81F9 01010080 cmp ecx,0x80000101
03624093 74 54 je short 036240E9
03624095 81F9 01020080 cmp ecx,0x80000201
0362409B 74 4C je short 036240E9
0362409D 81F9 01030080 cmp ecx,0x80000301
036240A3 74 44 je short 036240E9
036240A5 81F9 01040080 cmp ecx,0x80000401
036240AB 74 3C je short 036240E9
036240AD 8985 54FFFFFF mov dword ptr ss:,eax
036240B3 81F9 01050080 cmp ecx,0x80000501
036240B9 74 15 je short 036240D0
036240BB 81F9 01060080 cmp ecx,0x80000601
036240C1 74 15 je short 036240D8
036240C3 68 02000000 push 0x2
036240C8 E8 5F590100 call 03639A2C
036240CD 83C4 04 add esp,0x4
036240D0 D985 54FFFFFF fld dword ptr ss:
036240D6 EB 0C jmp short 036240E4
036240D8 8995 58FFFFFF mov dword ptr ss:,edx ; ntdll.KiFastSystemCallRet
036240DE DD85 54FFFFFF fld qword ptr ss:
036240E4 E8 D2D1FEFF call 036112BB
036240E9 8845 84 mov byte ptr ss:,al
036240EC 68 05000080 push 0x80000005
036240F1 6A 00 push 0x0
036240F3 8B45 C8 mov eax,dword ptr ss:
036240F6 85C0 test eax,eax
036240F8 75 05 jnz short 036240FF
036240FA B8 19DD6B03 mov eax,0x36BDD19
036240FF 50 push eax
03624100 68 01000000 push 0x1
03624105 BB 609E6303 mov ebx,0x3639E60
0362410A E8 11590100 call 03639A20
0362410F 83C4 10 add esp,0x10
03624112 8985 5CFFFFFF mov dword ptr ss:,eax
03624118 DB85 5CFFFFFF fild dword ptr ss:
0362411E DD9D 5CFFFFFF fstp qword ptr ss:
03624124 DD85 5CFFFFFF fld qword ptr ss:
0362412A DC25 55976D03 fsub qword ptr ds:
03624130 DD9D 54FFFFFF fstp qword ptr ss:
03624136 DD85 54FFFFFF fld qword ptr ss:
0362413C E8 7AD1FEFF call 036112BB
03624141 68 01030080 push 0x80000301
03624146 6A 00 push 0x0
03624148 50 push eax
03624149 68 05000080 push 0x80000005
0362414E 6A 00 push 0x0
03624150 8B45 C8 mov eax,dword ptr ss:
03624153 85C0 test eax,eax
03624155 75 05 jnz short 0362415C
03624157 B8 19DD6B03 mov eax,0x36BDD19
0362415C 50 push eax
0362415D 68 02000000 push 0x2
03624162 BB 70AE6303 mov ebx,0x363AE70
03624167 E8 B4580100 call 03639A20
0362416C 83C4 1C add esp,0x1C
0362416F 8985 50FFFFFF mov dword ptr ss:,eax
03624175 8B85 50FFFFFF mov eax,dword ptr ss:
0362417B 50 push eax
0362417C 8B5D C8 mov ebx,dword ptr ss:
0362417F 85DB test ebx,ebx ; ntdll.7C99D5E0
03624181 74 09 je short 0362418C
03624183 53 push ebx ; ntdll.7C99D5E0
03624184 E8 8B580100 call 03639A14
03624189 83C4 04 add esp,0x4
0362418C 58 pop eax ; 03626828
0362418D 8945 C8 mov dword ptr ss:,eax
03624190 6A 00 push 0x0
03624192 6A 00 push 0x0
03624194 6A 00 push 0x0
03624196 68 01030080 push 0x80000301
0362419B 6A 00 push 0x0
0362419D 68 01000000 push 0x1
036241A2 68 05000080 push 0x80000005
036241A7 6A 00 push 0x0
036241A9 8B45 C8 mov eax,dword ptr ss:
036241AC 85C0 test eax,eax
036241AE 75 05 jnz short 036241B5
036241B0 B8 19DD6B03 mov eax,0x36BDD19
036241B5 50 push eax
036241B6 68 03000000 push 0x3
036241BB BB B0AC6303 mov ebx,0x363ACB0
036241C0 E8 5B580100 call 03639A20
036241C5 83C4 28 add esp,0x28
036241C8 8985 5CFFFFFF mov dword ptr ss:,eax
036241CE 8995 60FFFFFF mov dword ptr ss:,edx ; ntdll.KiFastSystemCallRet
036241D4 898D 64FFFFFF mov dword ptr ss:,ecx
036241DA 8B8D 64FFFFFF mov ecx,dword ptr ss:
036241E0 8B95 60FFFFFF mov edx,dword ptr ss:
036241E6 8B85 5CFFFFFF mov eax,dword ptr ss:
036241EC 81F9 01010080 cmp ecx,0x80000101
036241F2 74 54 je short 03624248
036241F4 81F9 01020080 cmp ecx,0x80000201
036241FA 74 4C je short 03624248
036241FC 81F9 01030080 cmp ecx,0x80000301
03624202 74 44 je short 03624248
03624204 81F9 01040080 cmp ecx,0x80000401
0362420A 74 3C je short 03624248
0362420C 8985 54FFFFFF mov dword ptr ss:,eax
03624212 81F9 01050080 cmp ecx,0x80000501
03624218 74 15 je short 0362422F
0362421A 81F9 01060080 cmp ecx,0x80000601
03624220 74 15 je short 03624237
03624222 68 02000000 push 0x2
03624227 E8 00580100 call 03639A2C
0362422C 83C4 04 add esp,0x4
0362422F D985 54FFFFFF fld dword ptr ss:
03624235 EB 0C jmp short 03624243
03624237 8995 58FFFFFF mov dword ptr ss:,edx ; ntdll.KiFastSystemCallRet
0362423D DD85 54FFFFFF fld qword ptr ss:
03624243 E8 73D0FEFF call 036112BB
03624248 8845 80 mov byte ptr ss:,al
0362424B 68 05000080 push 0x80000005
03624250 6A 00 push 0x0
03624252 8B45 C8 mov eax,dword ptr ss:
03624255 85C0 test eax,eax
03624257 75 05 jnz short 0362425E
03624259 B8 19DD6B03 mov eax,0x36BDD19
0362425E 50 push eax
0362425F 68 01000000 push 0x1
03624264 BB 609E6303 mov ebx,0x3639E60
03624269 E8 B2570100 call 03639A20
0362426E 83C4 10 add esp,0x10
03624271 8985 5CFFFFFF mov dword ptr ss:,eax
03624277 DB85 5CFFFFFF fild dword ptr ss:
0362427D DD9D 5CFFFFFF fstp qword ptr ss:
03624283 DD85 5CFFFFFF fld qword ptr ss:
03624289 DC25 55976D03 fsub qword ptr ds:
0362428F DD9D 54FFFFFF fstp qword ptr ss:
03624295 DD85 54FFFFFF fld qword ptr ss:
0362429B E8 1BD0FEFF call 036112BB
036242A0 68 01030080 push 0x80000301
036242A5 6A 00 push 0x0
036242A7 50 push eax
036242A8 68 05000080 push 0x80000005
036242AD 6A 00 push 0x0
036242AF 8B45 C8 mov eax,dword ptr ss:
036242B2 85C0 test eax,eax
036242B4 75 05 jnz short 036242BB
036242B6 B8 19DD6B03 mov eax,0x36BDD19
036242BB 50 push eax
036242BC 68 02000000 push 0x2
036242C1 BB 70AE6303 mov ebx,0x363AE70
036242C6 E8 55570100 call 03639A20
036242CB 83C4 1C add esp,0x1C
036242CE 8985 50FFFFFF mov dword ptr ss:,eax
036242D4 8B85 50FFFFFF mov eax,dword ptr ss:
036242DA 50 push eax
036242DB 8B5D C8 mov ebx,dword ptr ss:
036242DE 85DB test ebx,ebx ; ntdll.7C99D5E0
036242E0 74 09 je short 036242EB
036242E2 53 push ebx ; ntdll.7C99D5E0
036242E3 E8 2C570100 call 03639A14
036242E8 83C4 04 add esp,0x4
036242EB 58 pop eax ; 03626828
036242EC 8945 C8 mov dword ptr ss:,eax
036242EF 6A 00 push 0x0
036242F1 6A 00 push 0x0
036242F3 6A 00 push 0x0
036242F5 68 01030080 push 0x80000301
036242FA 6A 00 push 0x0
036242FC 68 01000000 push 0x1
03624301 68 05000080 push 0x80000005
03624306 6A 00 push 0x0
03624308 8B45 C8 mov eax,dword ptr ss:
0362430B 85C0 test eax,eax
0362430D 75 05 jnz short 03624314
0362430F B8 19DD6B03 mov eax,0x36BDD19
03624314 50 push eax
03624315 68 03000000 push 0x3
0362431A BB B0AC6303 mov ebx,0x363ACB0
0362431F E8 FC560100 call 03639A20
03624324 83C4 28 add esp,0x28
03624327 8985 5CFFFFFF mov dword ptr ss:,eax
0362432D 8995 60FFFFFF mov dword ptr ss:,edx ; ntdll.KiFastSystemCallRet
03624333 898D 64FFFFFF mov dword ptr ss:,ecx
03624339 8B8D 64FFFFFF mov ecx,dword ptr ss:
0362433F 8B95 60FFFFFF mov edx,dword ptr ss:
03624345 8B85 5CFFFFFF mov eax,dword ptr ss:
0362434B 81F9 01010080 cmp ecx,0x80000101
03624351 74 54 je short 036243A7
03624353 81F9 01020080 cmp ecx,0x80000201
03624359 74 4C je short 036243A7
0362435B 81F9 01030080 cmp ecx,0x80000301
03624361 74 44 je short 036243A7
03624363 81F9 01040080 cmp ecx,0x80000401
03624369 74 3C je short 036243A7
0362436B 8985 54FFFFFF mov dword ptr ss:,eax
03624371 81F9 01050080 cmp ecx,0x80000501
03624377 74 15 je short 0362438E
03624379 81F9 01060080 cmp ecx,0x80000601
0362437F 74 15 je short 03624396
03624381 68 02000000 push 0x2
03624386 E8 A1560100 call 03639A2C
0362438B 83C4 04 add esp,0x4
0362438E D985 54FFFFFF fld dword ptr ss:
03624394 EB 0C jmp short 036243A2
03624396 8995 58FFFFFF mov dword ptr ss:,edx ; ntdll.KiFastSystemCallRet
0362439C DD85 54FFFFFF fld qword ptr ss:
036243A2 E8 14CFFEFF call 036112BB
036243A7 8885 7CFFFFFF mov byte ptr ss:,al
036243AD 68 05000080 push 0x80000005
036243B2 6A 00 push 0x0
036243B4 8B45 C8 mov eax,dword ptr ss:
036243B7 85C0 test eax,eax
036243B9 75 05 jnz short 036243C0
036243BB B8 19DD6B03 mov eax,0x36BDD19
036243C0 50 push eax
036243C1 68 01000000 push 0x1
036243C6 BB 609E6303 mov ebx,0x3639E60
036243CB E8 50560100 call 03639A20
036243D0 83C4 10 add esp,0x10
036243D3 8985 5CFFFFFF mov dword ptr ss:,eax
036243D9 DB85 5CFFFFFF fild dword ptr ss:
036243DF DD9D 5CFFFFFF fstp qword ptr ss:
036243E5 DD85 5CFFFFFF fld qword ptr ss:
036243EB DC25 55976D03 fsub qword ptr ds:
036243F1 DD9D 54FFFFFF fstp qword ptr ss:
036243F7 DD85 54FFFFFF fld qword ptr ss:
036243FD E8 B9CEFEFF call 036112BB
03624402 68 01030080 push 0x80000301
03624407 6A 00 push 0x0
03624409 50 push eax
0362440A 68 05000080 push 0x80000005
0362440F 6A 00 push 0x0
03624411 8B45 C8 mov eax,dword ptr ss:
03624414 85C0 test eax,eax
03624416 75 05 jnz short 0362441D
03624418 B8 19DD6B03 mov eax,0x36BDD19
0362441D 50 push eax
0362441E 68 02000000 push 0x2
03624423 BB 70AE6303 mov ebx,0x363AE70
03624428 E8 F3550100 call 03639A20
0362442D 83C4 1C add esp,0x1C
03624430 8985 50FFFFFF mov dword ptr ss:,eax
03624436 8B85 50FFFFFF mov eax,dword ptr ss:
0362443C 50 push eax
0362443D 8B5D C8 mov ebx,dword ptr ss:
03624440 85DB test ebx,ebx ; ntdll.7C99D5E0
03624442 74 09 je short 0362444D
03624444 53 push ebx ; ntdll.7C99D5E0
03624445 E8 CA550100 call 03639A14
0362444A 83C4 04 add esp,0x4
0362444D 58 pop eax ; 03626828
0362444E 8945 C8 mov dword ptr ss:,eax
03624451 6A 00 push 0x0
03624453 6A 00 push 0x0
03624455 6A 00 push 0x0
03624457 68 01030080 push 0x80000301
0362445C 6A 00 push 0x0
0362445E 68 01000000 push 0x1
03624463 68 05000080 push 0x80000005
03624468 6A 00 push 0x0
0362446A 8B45 C8 mov eax,dword ptr ss:
0362446D 85C0 test eax,eax
0362446F 75 05 jnz short 03624476
03624471 B8 19DD6B03 mov eax,0x36BDD19
03624476 50 push eax
03624477 68 03000000 push 0x3
0362447C BB B0AC6303 mov ebx,0x363ACB0
03624481 E8 9A550100 call 03639A20
03624486 83C4 28 add esp,0x28
03624489 8985 5CFFFFFF mov dword ptr ss:,eax
0362448F 8995 60FFFFFF mov dword ptr ss:,edx ; ntdll.KiFastSystemCallRet
03624495 898D 64FFFFFF mov dword ptr ss:,ecx
0362449B 8B8D 64FFFFFF mov ecx,dword ptr ss:
036244A1 8B95 60FFFFFF mov edx,dword ptr ss:
036244A7 8B85 5CFFFFFF mov eax,dword ptr ss:
036244AD 81F9 01010080 cmp ecx,0x80000101
036244B3 74 54 je short 03624509
036244B5 81F9 01020080 cmp ecx,0x80000201
036244BB 74 4C je short 03624509
036244BD 81F9 01030080 cmp ecx,0x80000301
036244C3 74 44 je short 03624509
036244C5 81F9 01040080 cmp ecx,0x80000401
036244CB 74 3C je short 03624509
036244CD 8985 54FFFFFF mov dword ptr ss:,eax
036244D3 81F9 01050080 cmp ecx,0x80000501
036244D9 74 15 je short 036244F0
036244DB 81F9 01060080 cmp ecx,0x80000601
036244E1 74 15 je short 036244F8
036244E3 68 02000000 push 0x2
036244E8 E8 3F550100 call 03639A2C
036244ED 83C4 04 add esp,0x4
036244F0 D985 54FFFFFF fld dword ptr ss:
036244F6 EB 0C jmp short 03624504
036244F8 8995 58FFFFFF mov dword ptr ss:,edx ; ntdll.KiFastSystemCallRet
036244FE DD85 54FFFFFF fld qword ptr ss:
03624504 E8 B2CDFEFF call 036112BB
03624509 8885 78FFFFFF mov byte ptr ss:,al
0362450F 8B45 8C mov eax,dword ptr ss:
03624512 98 cwde
03624513 3945 A8 cmp dword ptr ss:,eax
03624516 0F8F B1010000 jg 036246CD
0362451C 8B45 8C mov eax,dword ptr ss:
0362451F 98 cwde
03624520 3945 A8 cmp dword ptr ss:,eax
03624523 0F85 18000000 jnz 03624541
03624529 8B45 88 mov eax,dword ptr ss:
0362452C 25 FF000000 and eax,0xFF
03624531 3945 A4 cmp dword ptr ss:,eax
03624534 0F8E 07000000 jle 03624541
0362453A B8 01000000 mov eax,0x1
0362453F EB 05 jmp short 03624546
03624541 B8 00000000 mov eax,0x0
03624546 85C0 test eax,eax
03624548 0F85 7F010000 jnz 036246CD
0362454E 8B45 8C mov eax,dword ptr ss:
03624551 98 cwde
03624552 3945 A8 cmp dword ptr ss:,eax
03624555 0F85 29000000 jnz 03624584
0362455B 8B45 88 mov eax,dword ptr ss:
0362455E 25 FF000000 and eax,0xFF
03624563 3945 A4 cmp dword ptr ss:,eax
03624566 0F85 18000000 jnz 03624584
0362456C 8B45 84 mov eax,dword ptr ss: ; user32.DefWindowProcA
0362456F 25 FF000000 and eax,0xFF
03624574 3945 A0 cmp dword ptr ss:,eax
03624577 0F8E 07000000 jle 03624584
0362457D B8 01000000 mov eax,0x1
03624582 EB 05 jmp short 03624589
03624584 B8 00000000 mov eax,0x0
03624589 85C0 test eax,eax
0362458B 0F85 3C010000 jnz 036246CD
03624591 8B45 8C mov eax,dword ptr ss:
03624594 98 cwde
03624595 3945 A8 cmp dword ptr ss:,eax
03624598 0F85 3A000000 jnz 036245D8
0362459E 8B45 88 mov eax,dword ptr ss:
036245A1 25 FF000000 and eax,0xFF
036245A6 3945 A4 cmp dword ptr ss:,eax
036245A9 0F85 29000000 jnz 036245D8
036245AF 8B45 84 mov eax,dword ptr ss: ; user32.DefWindowProcA
036245B2 25 FF000000 and eax,0xFF
036245B7 3945 A0 cmp dword ptr ss:,eax
036245BA 0F85 18000000 jnz 036245D8
036245C0 8B45 80 mov eax,dword ptr ss:
036245C3 25 FF000000 and eax,0xFF
036245C8 3945 9C cmp dword ptr ss:,eax
036245CB 0F8E 07000000 jle 036245D8
036245D1 B8 01000000 mov eax,0x1
036245D6 EB 05 jmp short 036245DD
036245D8 B8 00000000 mov eax,0x0
036245DD 85C0 test eax,eax
036245DF 0F85 E8000000 jnz 036246CD
036245E5 8B45 8C mov eax,dword ptr ss:
036245E8 98 cwde
036245E9 3945 A8 cmp dword ptr ss:,eax
036245EC 0F85 4E000000 jnz 03624640
036245F2 8B45 88 mov eax,dword ptr ss:
036245F5 25 FF000000 and eax,0xFF
036245FA 3945 A4 cmp dword ptr ss:,eax
036245FD 0F85 3D000000 jnz 03624640
03624603 8B45 84 mov eax,dword ptr ss: ; user32.DefWindowProcA
03624606 25 FF000000 and eax,0xFF
0362460B 3945 A0 cmp dword ptr ss:,eax
0362460E 0F85 2C000000 jnz 03624640
03624614 8B45 80 mov eax,dword ptr ss:
03624617 25 FF000000 and eax,0xFF
0362461C 3945 9C cmp dword ptr ss:,eax
0362461F 0F85 1B000000 jnz 03624640
03624625 8B85 7CFFFFFF mov eax,dword ptr ss: ; user32.77D2A013
0362462B 25 FF000000 and eax,0xFF
03624630 3945 98 cmp dword ptr ss:,eax
03624633 0F8E 07000000 jle 03624640
03624639 B8 01000000 mov eax,0x1
0362463E EB 05 jmp short 03624645
03624640 B8 00000000 mov eax,0x0
03624645 85C0 test eax,eax
03624647 0F85 80000000 jnz 036246CD
0362464D 8B45 8C mov eax,dword ptr ss:
03624650 98 cwde
03624651 3945 A8 cmp dword ptr ss:,eax
03624654 0F85 62000000 jnz 036246BC
0362465A 8B45 88 mov eax,dword ptr ss:
0362465D 25 FF000000 and eax,0xFF
03624662 3945 A4 cmp dword ptr ss:,eax
03624665 0F85 51000000 jnz 036246BC
0362466B 8B45 84 mov eax,dword ptr ss: ; user32.DefWindowProcA
0362466E 25 FF000000 and eax,0xFF
03624673 3945 A0 cmp dword ptr ss:,eax
03624676 0F85 40000000 jnz 036246BC
0362467C 8B45 80 mov eax,dword ptr ss:
0362467F 25 FF000000 and eax,0xFF
03624684 3945 9C cmp dword ptr ss:,eax
03624687 0F85 2F000000 jnz 036246BC
0362468D 8B85 7CFFFFFF mov eax,dword ptr ss: ; user32.77D2A013
03624693 25 FF000000 and eax,0xFF
03624698 3945 98 cmp dword ptr ss:,eax
0362469B 0F85 1B000000 jnz 036246BC
036246A1 8B85 78FFFFFF mov eax,dword ptr ss: ; user32.77D1882A
036246A7 25 FF000000 and eax,0xFF
036246AC 3945 94 cmp dword ptr ss:,eax
036246AF 0F8E 07000000 jle 036246BC
036246B5 B8 01000000 mov eax,0x1
036246BA EB 05 jmp short 036246C1
036246BC B8 00000000 mov eax,0x0
036246C1 85C0 test eax,eax
036246C3 0F85 04000000 jnz 036246CD
036246C9 33C0 xor eax,eax
036246CB EB 05 jmp short 036246D2
036246CD B8 01000000 mov eax,0x1
036246D2 85C0 test eax,eax
036246D4 0F84 36000000 je 03624710
036246DA DB45 F4 fild dword ptr ss:
036246DD DD9D 60FFFFFF fstp qword ptr ss:
036246E3 DD85 60FFFFFF fld qword ptr ss:
036246E9 DC05 C89D6D03 fadd qword ptr ds:
036246EF DD9D 58FFFFFF fstp qword ptr ss:
036246F5 68 FBFFFFFF push -0x5
036246FA DD85 58FFFFFF fld qword ptr ss:
03624700 E8 B6CBFEFF call 036112BB
03624705 50 push eax
03624706 E8 213FFFFF call 0361862C
0362470B E9 71070000 jmp 03624E81
03624710 68 00000000 push 0x0
03624715 E8 B73CFFFF call 036183D1
0362471A 8985 74FFFFFF mov dword ptr ss:,eax
03624720 8B85 74FFFFFF mov eax,dword ptr ss:
03624726 3905 1C167003 cmp dword ptr ds:,eax
0362472C 0F84 0C000000 je 0362473E
03624732 837D FC 00 cmp dword ptr ss:,0x0
03624736 0F85 02000000 jnz 0362473E
0362473C^ EB F4 jmp short 03624732
0362473E 68 00000000 push 0x0
03624743 E8 091E0000 call 03626551
03624748 8985 60FFFFFF mov dword ptr ss:,eax
0362474E 8B85 74FFFFFF mov eax,dword ptr ss:
03624754 3985 60FFFFFF cmp dword ptr ss:,eax
0362475A 0F84 0C000000 je 0362476C
03624760 837D FC 00 cmp dword ptr ss:,0x0
03624764 0F85 02000000 jnz 0362476C
0362476A^ EB F4 jmp short 03624760
0362476C E8 488BFFFF call 0361D2B9
03624771 8985 60FFFFFF mov dword ptr ss:,eax
03624777 83BD 60FFFFFF 0>cmp dword ptr ss:,0x1
0362477E 0F84 15000000 je 03624799
03624784 E8 4243FFFF call 03618ACB
03624789 3905 5C167003 cmp dword ptr ds:,eax
0362478F 0F85 04000000 jnz 03624799
03624795 33C0 xor eax,eax
03624797 EB 05 jmp short 0362479E
03624799 B8 01000000 mov eax,0x1
0362479E 85C0 test eax,eax
036247A0 0F84 05000000 je 036247AB
036247A6 E8 73130000 call 03625B1E
036247AB E8 3482FFFF call 0361C9E4
036247B0 8985 60FFFFFF mov dword ptr ss:,eax
036247B6 83BD 60FFFFFF 0>cmp dword ptr ss:,0x1
036247BD 0F85 0C000000 jnz 036247CF
036247C3 837D FC 00 cmp dword ptr ss:,0x0
036247C7 0F85 02000000 jnz 036247CF
036247CD^ EB F4 jmp short 036247C3
036247CF 68 01020080 push 0x80000201
036247D4 6A 00 push 0x0
036247D6 FF75 8C push dword ptr ss:
036247D9 68 01000000 push 0x1
036247DE BB 20B36303 mov ebx,0x363B320
036247E3 E8 38520100 call 03639A20
036247E8 83C4 10 add esp,0x10
036247EB 8985 64FFFFFF mov dword ptr ss:,eax
036247F1 B8 F09D6D03 mov eax,0x36D9DF0
036247F6 8985 60FFFFFF mov dword ptr ss:,eax
036247FC 8D85 60FFFFFF lea eax,dword ptr ss:
03624802 50 push eax
03624803 E8 6BF4FEFF call 03613C73
03624808 8985 5CFFFFFF mov dword ptr ss:,eax
0362480E 8B9D 60FFFFFF mov ebx,dword ptr ss:
03624814 85DB test ebx,ebx ; ntdll.7C99D5E0
03624816 74 09 je short 03624821
03624818 53 push ebx ; ntdll.7C99D5E0
03624819 E8 F6510100 call 03639A14
0362481E 83C4 04 add esp,0x4
03624821 68 05000080 push 0x80000005
03624826 6A 00 push 0x0
03624828 8B85 5CFFFFFF mov eax,dword ptr ss:
0362482E 85C0 test eax,eax
03624830 75 05 jnz short 03624837
03624832 B8 19DD6B03 mov eax,0x36BDD19
03624837 50 push eax
03624838 68 01000000 push 0x1
0362483D BB 20B36303 mov ebx,0x363B320
03624842 E8 D9510100 call 03639A20
03624847 83C4 10 add esp,0x10
0362484A 8985 58FFFFFF mov dword ptr ss:,eax
03624850 8B9D 5CFFFFFF mov ebx,dword ptr ss:
03624856 85DB test ebx,ebx ; ntdll.7C99D5E0
03624858 74 09 je short 03624863
0362485A 53 push ebx ; ntdll.7C99D5E0
0362485B E8 B4510100 call 03639A14
03624860 83C4 04 add esp,0x4
03624863 68 01010080 push 0x80000101
03624868 6A 00 push 0x0
0362486A FF75 88 push dword ptr ss:
0362486D 68 01000000 push 0x1
03624872 BB 20B36303 mov ebx,0x363B320
03624877 E8 A4510100 call 03639A20
0362487C 83C4 10 add esp,0x10
0362487F 8985 54FFFFFF mov dword ptr ss:,eax
03624885 B8 FC9D6D03 mov eax,0x36D9DFC
0362488A 8985 50FFFFFF mov dword ptr ss:,eax
03624890 8D85 50FFFFFF lea eax,dword ptr ss:
03624896 50 push eax
03624897 E8 D7F3FEFF call 03613C73
0362489C 8985 4CFFFFFF mov dword ptr ss:,eax
036248A2 8B9D 50FFFFFF mov ebx,dword ptr ss:
036248A8 85DB test ebx,ebx ; ntdll.7C99D5E0
036248AA 74 09 je short 036248B5
036248AC 53 push ebx ; ntdll.7C99D5E0
036248AD E8 62510100 call 03639A14
036248B2 83C4 04 add esp,0x4
036248B5 68 05000080 push 0x80000005
036248BA 6A 00 push 0x0
036248BC 8B85 4CFFFFFF mov eax,dword ptr ss:
036248C2 85C0 test eax,eax
036248C4 75 05 jnz short 036248CB
036248C6 B8 19DD6B03 mov eax,0x36BDD19
036248CB 50 push eax
036248CC 68 01000000 push 0x1
036248D1 BB 20B36303 mov ebx,0x363B320
036248D6 E8 45510100 call 03639A20
036248DB 83C4 10 add esp,0x10
036248DE 8985 48FFFFFF mov dword ptr ss:,eax
036248E4 8B9D 4CFFFFFF mov ebx,dword ptr ss:
036248EA 85DB test ebx,ebx ; ntdll.7C99D5E0
036248EC 74 09 je short 036248F7
036248EE 53 push ebx ; ntdll.7C99D5E0
036248EF E8 20510100 call 03639A14
036248F4 83C4 04 add esp,0x4
036248F7 68 01010080 push 0x80000101
036248FC 6A 00 push 0x0
036248FE FF75 84 push dword ptr ss: ; user32.DefWindowProcA
03624901 68 01000000 push 0x1
03624906 BB 20B36303 mov ebx,0x363B320
0362490B E8 10510100 call 03639A20
03624910 83C4 10 add esp,0x10
03624913 8985 44FFFFFF mov dword ptr ss:,eax
03624919 B8 089E6D03 mov eax,0x36D9E08
0362491E 8985 40FFFFFF mov dword ptr ss:,eax
03624924 8D85 40FFFFFF lea eax,dword ptr ss:
0362492A 50 push eax
0362492B E8 43F3FEFF call 03613C73
03624930 8985 3CFFFFFF mov dword ptr ss:,eax
03624936 8B9D 40FFFFFF mov ebx,dword ptr ss:
0362493C 85DB test ebx,ebx ; ntdll.7C99D5E0
0362493E 74 09 je short 03624949
03624940 53 push ebx ; ntdll.7C99D5E0
03624941 E8 CE500100 call 03639A14
03624946 83C4 04 add esp,0x4
03624949 68 05000080 push 0x80000005
0362494E 6A 00 push 0x0
03624950 8B85 3CFFFFFF mov eax,dword ptr ss:
03624956 85C0 test eax,eax
03624958 75 05 jnz short 0362495F
0362495A B8 19DD6B03 mov eax,0x36BDD19
0362495F 50 push eax
03624960 68 01000000 push 0x1
03624965 BB 20B36303 mov ebx,0x363B320
0362496A E8 B1500100 call 03639A20
0362496F 83C4 10 add esp,0x10
03624972 8985 38FFFFFF mov dword ptr ss:,eax
03624978 8B9D 3CFFFFFF mov ebx,dword ptr ss:
0362497E 85DB test ebx,ebx ; ntdll.7C99D5E0
03624980 74 09 je short 0362498B
03624982 53 push ebx ; ntdll.7C99D5E0
03624983 E8 8C500100 call 03639A14
03624988 83C4 04 add esp,0x4
0362498B 68 01010080 push 0x80000101
03624990 6A 00 push 0x0
03624992 FF75 80 push dword ptr ss:
03624995 68 01000000 push 0x1
0362499A BB 20B36303 mov ebx,0x363B320
0362499F E8 7C500100 call 03639A20
036249A4 83C4 10 add esp,0x10
036249A7 8985 34FFFFFF mov dword ptr ss:,eax
036249AD B8 149E6D03 mov eax,0x36D9E14
036249B2 8985 30FFFFFF mov dword ptr ss:,eax
036249B8 8D85 30FFFFFF lea eax,dword ptr ss:
036249BE 50 push eax
036249BF E8 AFF2FEFF call 03613C73
036249C4 8985 2CFFFFFF mov dword ptr ss:,eax
036249CA 8B9D 30FFFFFF mov ebx,dword ptr ss: ; user32.DefWindowProcA
036249D0 85DB test ebx,ebx ; ntdll.7C99D5E0
036249D2 74 09 je short 036249DD
036249D4 53 push ebx ; ntdll.7C99D5E0
036249D5 E8 3A500100 call 03639A14
036249DA 83C4 04 add esp,0x4
036249DD 68 05000080 push 0x80000005
036249E2 6A 00 push 0x0
036249E4 8B85 2CFFFFFF mov eax,dword ptr ss:
036249EA 85C0 test eax,eax
036249EC 75 05 jnz short 036249F3
036249EE B8 19DD6B03 mov eax,0x36BDD19
036249F3 50 push eax
036249F4 68 01000000 push 0x1
036249F9 BB 20B36303 mov ebx,0x363B320
036249FE E8 1D500100 call 03639A20
03624A03 83C4 10 add esp,0x10
03624A06 8985 28FFFFFF mov dword ptr ss:,eax
03624A0C 8B9D 2CFFFFFF mov ebx,dword ptr ss:
03624A12 85DB test ebx,ebx ; ntdll.7C99D5E0
03624A14 74 09 je short 03624A1F
03624A16 53 push ebx ; ntdll.7C99D5E0
03624A17 E8 F84F0100 call 03639A14
03624A1C 83C4 04 add esp,0x4
03624A1F 68 01010080 push 0x80000101
03624A24 6A 00 push 0x0
03624A26 FFB5 7CFFFFFF push dword ptr ss: ; user32.77D2A013
03624A2C 68 01000000 push 0x1
03624A31 BB 20B36303 mov ebx,0x363B320
03624A36 E8 E54F0100 call 03639A20
03624A3B 83C4 10 add esp,0x10
03624A3E 8985 24FFFFFF mov dword ptr ss:,eax
03624A44 B8 209E6D03 mov eax,0x36D9E20
03624A49 8985 20FFFFFF mov dword ptr ss:,eax
03624A4F 8D85 20FFFFFF lea eax,dword ptr ss:
03624A55 50 push eax
03624A56 E8 18F2FEFF call 03613C73
03624A5B 8985 1CFFFFFF mov dword ptr ss:,eax
03624A61 8B9D 20FFFFFF mov ebx,dword ptr ss: ; user32.77D1885A
03624A67 85DB test ebx,ebx ; ntdll.7C99D5E0
03624A69 74 09 je short 03624A74
03624A6B 53 push ebx ; ntdll.7C99D5E0
03624A6C E8 A34F0100 call 03639A14
03624A71 83C4 04 add esp,0x4
03624A74 68 05000080 push 0x80000005
03624A79 6A 00 push 0x0
03624A7B 8B85 1CFFFFFF mov eax,dword ptr ss:
03624A81 85C0 test eax,eax
03624A83 75 05 jnz short 03624A8A
03624A85 B8 19DD6B03 mov eax,0x36BDD19
03624A8A 50 push eax
03624A8B 68 01000000 push 0x1
03624A90 BB 20B36303 mov ebx,0x363B320
03624A95 E8 864F0100 call 03639A20
03624A9A 83C4 10 add esp,0x10
03624A9D 8985 18FFFFFF mov dword ptr ss:,eax
03624AA3 8B9D 1CFFFFFF mov ebx,dword ptr ss:
03624AA9 85DB test ebx,ebx ; ntdll.7C99D5E0
03624AAB 74 09 je short 03624AB6
03624AAD 53 push ebx ; ntdll.7C99D5E0
03624AAE E8 614F0100 call 03639A14
03624AB3 83C4 04 add esp,0x4
03624AB6 68 01010080 push 0x80000101
03624ABB 6A 00 push 0x0
03624ABD FFB5 78FFFFFF push dword ptr ss: ; user32.77D1882A
03624AC3 68 01000000 push 0x1
03624AC8 BB 20B36303 mov ebx,0x363B320
03624ACD E8 4E4F0100 call 03639A20
03624AD2 83C4 10 add esp,0x10
03624AD5 8985 14FFFFFF mov dword ptr ss:,eax
03624ADB B8 2C9E6D03 mov eax,0x36D9E2C
03624AE0 8985 10FFFFFF mov dword ptr ss:,eax
03624AE6 8D85 10FFFFFF lea eax,dword ptr ss:
03624AEC 50 push eax
03624AED E8 81F1FEFF call 03613C73
03624AF2 8985 0CFFFFFF mov dword ptr ss:,eax
03624AF8 8B9D 10FFFFFF mov ebx,dword ptr ss:
03624AFE 85DB test ebx,ebx ; ntdll.7C99D5E0
03624B00 74 09 je short 03624B0B
03624B02 53 push ebx ; ntdll.7C99D5E0
03624B03 E8 0C4F0100 call 03639A14
03624B08 83C4 04 add esp,0x4
03624B0B 68 05000080 push 0x80000005
03624B10 6A 00 push 0x0
03624B12 8B85 0CFFFFFF mov eax,dword ptr ss: ; user32.DefWindowProcA
03624B18 85C0 test eax,eax
03624B1A 75 05 jnz short 03624B21
03624B1C B8 19DD6B03 mov eax,0x36BDD19
03624B21 50 push eax
03624B22 68 01000000 push 0x1
03624B27 BB 20B36303 mov ebx,0x363B320
03624B2C E8 EF4E0100 call 03639A20
03624B31 83C4 10 add esp,0x10
03624B34 8985 08FFFFFF mov dword ptr ss:,eax
03624B3A 8B9D 0CFFFFFF mov ebx,dword ptr ss: ; user32.DefWindowProcA
03624B40 85DB test ebx,ebx ; ntdll.7C99D5E0
03624B42 74 09 je short 03624B4D
03624B44 53 push ebx ; ntdll.7C99D5E0
03624B45 E8 CA4E0100 call 03639A14
03624B4A 83C4 04 add esp,0x4
03624B4D FFB5 08FFFFFF push dword ptr ss:
03624B53 FFB5 14FFFFFF push dword ptr ss: ; user32.77D18816
03624B59 FFB5 18FFFFFF push dword ptr ss:
03624B5F FFB5 24FFFFFF push dword ptr ss:
03624B65 FFB5 28FFFFFF push dword ptr ss: ; user32.77D1882A
03624B6B FFB5 34FFFFFF push dword ptr ss:
03624B71 FFB5 38FFFFFF push dword ptr ss:
03624B77 FFB5 44FFFFFF push dword ptr ss:
03624B7D FFB5 48FFFFFF push dword ptr ss:
03624B83 FFB5 54FFFFFF push dword ptr ss:
03624B89 FFB5 58FFFFFF push dword ptr ss:
03624B8F FFB5 64FFFFFF push dword ptr ss:
03624B95 B9 0C000000 mov ecx,0xC
03624B9A E8 53D9FEFF call 036124F2
03624B9F 83C4 30 add esp,0x30
03624BA2 8985 04FFFFFF mov dword ptr ss:,eax
03624BA8 8B9D 64FFFFFF mov ebx,dword ptr ss:
03624BAE 85DB test ebx,ebx ; ntdll.7C99D5E0
03624BB0 74 09 je short 03624BBB
03624BB2 53 push ebx ; ntdll.7C99D5E0
03624BB3 E8 5C4E0100 call 03639A14
03624BB8 83C4 04 add esp,0x4
03624BBB 8B9D 58FFFFFF mov ebx,dword ptr ss:
03624BC1 85DB test ebx,ebx ; ntdll.7C99D5E0
03624BC3 74 09 je short 03624BCE
03624BC5 53 push ebx ; ntdll.7C99D5E0
03624BC6 E8 494E0100 call 03639A14
03624BCB 83C4 04 add esp,0x4
03624BCE 8B9D 54FFFFFF mov ebx,dword ptr ss:
03624BD4 85DB test ebx,ebx ; ntdll.7C99D5E0
03624BD6 74 09 je short 03624BE1
03624BD8 53 push ebx ; ntdll.7C99D5E0
03624BD9 E8 364E0100 call 03639A14
03624BDE 83C4 04 add esp,0x4
03624BE1 8B9D 48FFFFFF mov ebx,dword ptr ss:
03624BE7 85DB test ebx,ebx ; ntdll.7C99D5E0
03624BE9 74 09 je short 03624BF4
03624BEB 53 push ebx ; ntdll.7C99D5E0
03624BEC E8 234E0100 call 03639A14
03624BF1 83C4 04 add esp,0x4
03624BF4 8B9D 44FFFFFF mov ebx,dword ptr ss:
03624BFA 85DB test ebx,ebx ; ntdll.7C99D5E0
03624BFC 74 09 je short 03624C07
03624BFE 53 push ebx ; ntdll.7C99D5E0
03624BFF E8 104E0100 call 03639A14
03624C04 83C4 04 add esp,0x4
03624C07 8B9D 38FFFFFF mov ebx,dword ptr ss:
03624C0D 85DB test ebx,ebx ; ntdll.7C99D5E0
03624C0F 74 09 je short 03624C1A
03624C11 53 push ebx ; ntdll.7C99D5E0
03624C12 E8 FD4D0100 call 03639A14
03624C17 83C4 04 add esp,0x4
03624C1A 8B9D 34FFFFFF mov ebx,dword ptr ss:
03624C20 85DB test ebx,ebx ; ntdll.7C99D5E0
03624C22 74 09 je short 03624C2D
03624C24 53 push ebx ; ntdll.7C99D5E0
03624C25 E8 EA4D0100 call 03639A14
03624C2A 83C4 04 add esp,0x4
03624C2D 8B9D 28FFFFFF mov ebx,dword ptr ss: ; user32.77D1882A
03624C33 85DB test ebx,ebx ; ntdll.7C99D5E0
03624C35 74 09 je short 03624C40
03624C37 53 push ebx ; ntdll.7C99D5E0
03624C38 E8 D74D0100 call 03639A14
03624C3D 83C4 04 add esp,0x4
03624C40 8B9D 24FFFFFF mov ebx,dword ptr ss:
03624C46 85DB test ebx,ebx ; ntdll.7C99D5E0
03624C48 74 09 je short 03624C53
03624C4A 53 push ebx ; ntdll.7C99D5E0
03624C4B E8 C44D0100 call 03639A14
03624C50 83C4 04 add esp,0x4
03624C53 8B9D 18FFFFFF mov ebx,dword ptr ss:
03624C59 85DB test ebx,ebx ; ntdll.7C99D5E0
03624C5B 74 09 je short 03624C66
03624C5D 53 push ebx ; ntdll.7C99D5E0
03624C5E E8 B14D0100 call 03639A14
03624C63 83C4 04 add esp,0x4
03624C66 8B9D 14FFFFFF mov ebx,dword ptr ss: ; user32.77D18816
03624C6C 85DB test ebx,ebx ; ntdll.7C99D5E0
03624C6E 74 09 je short 03624C79
03624C70 53 push ebx ; ntdll.7C99D5E0
03624C71 E8 9E4D0100 call 03639A14
03624C76 83C4 04 add esp,0x4
03624C79 8B9D 08FFFFFF mov ebx,dword ptr ss:
03624C7F 85DB test ebx,ebx ; ntdll.7C99D5E0
03624C81 74 09 je short 03624C8C
03624C83 53 push ebx ; ntdll.7C99D5E0
03624C84 E8 8B4D0100 call 03639A14
03624C89 83C4 04 add esp,0x4
03624C8C 8B85 04FFFFFF mov eax,dword ptr ss:
03624C92 50 push eax
03624C93 8B9D 70FFFFFF mov ebx,dword ptr ss: ; user32.77D18830
03624C99 85DB test ebx,ebx ; ntdll.7C99D5E0
03624C9B 74 09 je short 03624CA6
03624C9D 53 push ebx ; ntdll.7C99D5E0
03624C9E E8 714D0100 call 03639A14
03624CA3 83C4 04 add esp,0x4
03624CA6 58 pop eax ; 03626828
03624CA7 8985 70FFFFFF mov dword ptr ss:,eax
03624CAD 68 04000080 push 0x80000004
03624CB2 6A 00 push 0x0
03624CB4 8B85 70FFFFFF mov eax,dword ptr ss: ; user32.77D18830
03624CBA 85C0 test eax,eax
03624CBC 75 05 jnz short 03624CC3
03624CBE B8 00DD6B03 mov eax,0x36BDD00
03624CC3 50 push eax
03624CC4 68 01000000 push 0x1
03624CC9 BB 80AA6303 mov ebx,0x363AA80
03624CCE E8 4D4D0100 call 03639A20
03624CD3 83C4 10 add esp,0x10
03624CD6 8985 64FFFFFF mov dword ptr ss:,eax
03624CDC 68 389E6D03 push 0x36D9E38
03624CE1 FFB5 64FFFFFF push dword ptr ss:
03624CE7 B9 02000000 mov ecx,0x2
03624CEC E8 72E2FEFF call 03612F63
03624CF1 83C4 08 add esp,0x8
03624CF4 8985 60FFFFFF mov dword ptr ss:,eax
03624CFA 8B9D 64FFFFFF mov ebx,dword ptr ss:
03624D00 85DB test ebx,ebx ; ntdll.7C99D5E0
03624D02 74 09 je short 03624D0D
03624D04 53 push ebx ; ntdll.7C99D5E0
03624D05 E8 0A4D0100 call 03639A14
03624D0A 83C4 04 add esp,0x4
03624D0D 8B85 60FFFFFF mov eax,dword ptr ss:
03624D13 50 push eax
03624D14 8B5D C8 mov ebx,dword ptr ss:
03624D17 85DB test ebx,ebx ; ntdll.7C99D5E0
03624D19 74 09 je short 03624D24
03624D1B 53 push ebx ; ntdll.7C99D5E0
03624D1C E8 F34C0100 call 03639A14
03624D21 83C4 04 add esp,0x4
03624D24 58 pop eax ; 03626828
03624D25 8945 C8 mov dword ptr ss:,eax
03624D28 68 05000080 push 0x80000005
03624D2D 6A 00 push 0x0
03624D2F 8B45 C8 mov eax,dword ptr ss:
03624D32 85C0 test eax,eax
03624D34 75 05 jnz short 03624D3B
03624D36 B8 19DD6B03 mov eax,0x36BDD19
03624D3B 50 push eax
03624D3C 68 01000000 push 0x1
03624D41 BB 80AA6303 mov ebx,0x363AA80
03624D46 E8 D54C0100 call 03639A20
03624D4B 83C4 10 add esp,0x10
03624D4E 8985 64FFFFFF mov dword ptr ss:,eax
03624D54 68 05000080 push 0x80000005
03624D59 6A 00 push 0x0
03624D5B 8B45 C8 mov eax,dword ptr ss:
03624D5E 85C0 test eax,eax
03624D60 75 05 jnz short 03624D67
03624D62 B8 19DD6B03 mov eax,0x36BDD19
03624D67 50 push eax
03624D68 68 01000000 push 0x1
03624D6D BB 609E6303 mov ebx,0x3639E60
03624D72 E8 A94C0100 call 03639A20
03624D77 83C4 10 add esp,0x10
03624D7A 68 01030080 push 0x80000301
03624D7F 6A 00 push 0x0
03624D81 50 push eax
03624D82 68 01030080 push 0x80000301
03624D87 6A 00 push 0x0
03624D89 FF35 BC157003 push dword ptr ds:
03624D8F 68 05000080 push 0x80000005
03624D94 6A 00 push 0x0
03624D96 8B85 64FFFFFF mov eax,dword ptr ss:
03624D9C 85C0 test eax,eax
03624D9E 75 05 jnz short 03624DA5
03624DA0 B8 19DD6B03 mov eax,0x36BDD19
03624DA5 50 push eax
03624DA6 68 03000000 push 0x3
03624DAB BB 10B86303 mov ebx,0x363B810
03624DB0 E8 6B4C0100 call 03639A20
03624DB5 83C4 28 add esp,0x28
03624DB8 8B9D 64FFFFFF mov ebx,dword ptr ss:
03624DBE 85DB test ebx,ebx ; ntdll.7C99D5E0
03624DC0 74 09 je short 03624DCB
03624DC2 53 push ebx ; ntdll.7C99D5E0
03624DC3 E8 4C4C0100 call 03639A14
03624DC8 83C4 04 add esp,0x4
03624DCB 68 04000080 push 0x80000004
03624DD0 6A 00 push 0x0
03624DD2 8B45 C0 mov eax,dword ptr ss: ; ntdll.7C92D7EC
03624DD5 85C0 test eax,eax
03624DD7 75 05 jnz short 03624DDE
03624DD9 B8 00DD6B03 mov eax,0x36BDD00
03624DDE 50 push eax
03624DDF 68 01000000 push 0x1
03624DE4 BB 80AA6303 mov ebx,0x363AA80
03624DE9 E8 324C0100 call 03639A20
03624DEE 83C4 10 add esp,0x10
03624DF1 8985 64FFFFFF mov dword ptr ss:,eax
03624DF7 8D85 64FFFFFF lea eax,dword ptr ss:
03624DFD 50 push eax
03624DFE E8 89C6FFFF call 0362148C
03624E03 8985 60FFFFFF mov dword ptr ss:,eax
03624E09 8B9D 64FFFFFF mov ebx,dword ptr ss:
03624E0F 85DB test ebx,ebx ; ntdll.7C99D5E0
03624E11 74 09 je short 03624E1C
03624E13 53 push ebx ; ntdll.7C99D5E0
03624E14 E8 FB4B0100 call 03639A14
03624E19 83C4 04 add esp,0x4
03624E1C 8B85 60FFFFFF mov eax,dword ptr ss:
03624E22 50 push eax
03624E23 8B1D FC167003 mov ebx,dword ptr ds:
03624E29 85DB test ebx,ebx ; ntdll.7C99D5E0
03624E2B 74 09 je short 03624E36
03624E2D 53 push ebx ; ntdll.7C99D5E0
03624E2E E8 E14B0100 call 03639A14
03624E33 83C4 04 add esp,0x4
03624E36 58 pop eax ; 03626828
03624E37 A3 FC167003 mov dword ptr ds:,eax
03624E3C C705 E8167003 5>mov dword ptr ds:,0x59
03624E46 DB45 F4 fild dword ptr ss:
03624E49 DD9D 60FFFFFF fstp qword ptr ss:
03624E4F DD85 60FFFFFF fld qword ptr ss:
03624E55 DC05 C89D6D03 fadd qword ptr ds:
03624E5B DD9D 58FFFFFF fstp qword ptr ss:
03624E61 68 00000000 push 0x0
03624E66 DD85 58FFFFFF fld qword ptr ss:
03624E6C E8 4AC4FEFF call 036112BB
03624E71 50 push eax
03624E72 E8 B537FFFF call 0361862C
03624E77 C785 6CFFFFFF 0>mov dword ptr ss:,0x1
03624E81 DB45 F4 fild dword ptr ss:
03624E84 DD9D 60FFFFFF fstp qword ptr ss:
03624E8A DD85 60FFFFFF fld qword ptr ss:
03624E90 DC05 D09D6D03 fadd qword ptr ds:
03624E96 DD9D 58FFFFFF fstp qword ptr ss:
03624E9C DB45 F4 fild dword ptr ss:
03624E9F DD9D 50FFFFFF fstp qword ptr ss:
03624EA5 DD85 50FFFFFF fld qword ptr ss:
03624EAB DC05 E09D6D03 fadd qword ptr ds:
03624EB1 DD9D 48FFFFFF fstp qword ptr ss:
03624EB7 DD85 48FFFFFF fld qword ptr ss:
03624EBD E8 F9C3FEFF call 036112BB
03624EC2 50 push eax
03624EC3 E8 C8C8FEFF call 03611790
03624EC8 50 push eax
03624EC9 DD85 58FFFFFF fld qword ptr ss:
03624ECF E8 E7C3FEFF call 036112BB
03624ED4 50 push eax
03624ED5 E8 5237FFFF call 0361862C
03624EDA DB45 F4 fild dword ptr ss:
03624EDD DD9D 60FFFFFF fstp qword ptr ss:
03624EE3 DD85 60FFFFFF fld qword ptr ss:
03624EE9 DC05 E09D6D03 fadd qword ptr ds:
03624EEF DD9D 58FFFFFF fstp qword ptr ss:
03624EF5 DB45 F4 fild dword ptr ss:
03624EF8 DD9D 50FFFFFF fstp qword ptr ss:
03624EFE DD85 50FFFFFF fld qword ptr ss:
03624F04 DC05 D09D6D03 fadd qword ptr ds:
03624F0A DD9D 48FFFFFF fstp qword ptr ss:
03624F10 DD85 48FFFFFF fld qword ptr ss:
03624F16 E8 A0C3FEFF call 036112BB
03624F1B 50 push eax
03624F1C E8 6FC8FEFF call 03611790
03624F21 50 push eax
03624F22 E8 69C8FEFF call 03611790
03624F27 50 push eax
03624F28 DD85 58FFFFFF fld qword ptr ss:
03624F2E E8 88C3FEFF call 036112BB
03624F33 50 push eax
03624F34 E8 F336FFFF call 0361862C
03624F39 DB45 F4 fild dword ptr ss:
03624F3C DD9D 60FFFFFF fstp qword ptr ss:
03624F42 DD85 60FFFFFF fld qword ptr ss:
03624F48 DC05 D09D6D03 fadd qword ptr ds:
03624F4E DD9D 58FFFFFF fstp qword ptr ss:
03624F54 DB45 F4 fild dword ptr ss:
03624F57 DD9D 50FFFFFF fstp qword ptr ss:
03624F5D DD85 50FFFFFF fld qword ptr ss:
03624F63 DC05 D09D6D03 fadd qword ptr ds:
03624F69 DD9D 48FFFFFF fstp qword ptr ss:
03624F6F DD85 48FFFFFF fld qword ptr ss:
03624F75 E8 41C3FEFF call 036112BB
03624F7A 50 push eax
03624F7B E8 10C8FEFF call 03611790
03624F80 8985 3CFFFFFF mov dword ptr ss:,eax
03624F86 DB85 3CFFFFFF fild dword ptr ss:
03624F8C DD9D 3CFFFFFF fstp qword ptr ss:
03624F92 DD85 3CFFFFFF fld qword ptr ss:
03624F98 DC05 E89D6D03 fadd qword ptr ds:
03624F9E DD9D 34FFFFFF fstp qword ptr ss:
03624FA4 DD85 34FFFFFF fld qword ptr ss:
03624FAA E8 0CC3FEFF call 036112BB
03624FAF 50 push eax
03624FB0 DD85 58FFFFFF fld qword ptr ss:
03624FB6 E8 00C3FEFF call 036112BB
03624FBB 50 push eax
03624FBC E8 6B36FFFF call 0361862C
03624FC1 DB45 F4 fild dword ptr ss:
03624FC4 DD9D 60FFFFFF fstp qword ptr ss:
03624FCA DD85 60FFFFFF fld qword ptr ss:
03624FD0 DC05 0B9C6D03 fadd qword ptr ds:
03624FD6 DD9D 58FFFFFF fstp qword ptr ss:
03624FDC FF75 D0 push dword ptr ss:
03624FDF DD85 58FFFFFF fld qword ptr ss:
03624FE5 E8 D1C2FEFF call 036112BB
03624FEA 50 push eax
03624FEB E8 3C36FFFF call 0361862C
03624FF0 83BD 6CFFFFFF 0>cmp dword ptr ss:,0x1
03624FF7 0F85 78000000 jnz 03625075
03624FFD C705 10177003 0>mov dword ptr ds:,0x1
03625007 68 DC050000 push 0x5DC
0362500C E8 87BFFFFF call 03620F98
03625011 833D 14177003 0>cmp dword ptr ds:,0x0
03625018 0F85 05000000 jnz 03625023
0362501E E8 0C170000 call 0362672F
03625023 DB05 78157003 fild dword ptr ds:
03625029 DD9D 60FFFFFF fstp qword ptr ss:
0362502F DD85 60FFFFFF fld qword ptr ss:
03625035 DC25 21DD6B03 fsub qword ptr ds:
0362503B DD9D 58FFFFFF fstp qword ptr ss:
03625041 68 04000080 push 0x80000004
03625046 6A 00 push 0x0
03625048 8D45 90 lea eax,dword ptr ss:
0362504B 50 push eax
0362504C 68 01000000 push 0x1
03625051 B8 01000000 mov eax,0x1
03625056 BB 40566903 mov ebx,0x3695640
0362505B E8 D2490100 call 03639A32
03625060 83C4 10 add esp,0x10
03625063 50 push eax
03625064 DD85 58FFFFFF fld qword ptr ss:
0362506A E8 4CC2FEFF call 036112BB
0362506F 50 push eax
03625070 E8 64BFFFFF call 03620FD9
03625075 E9 93080000 jmp 0362590D
0362507A A1 B0157003 mov eax,dword ptr ds:
0362507F 3945 E0 cmp dword ptr ss:,eax
03625082 0F85 70010000 jnz 036251F8
03625088 DB45 F4 fild dword ptr ss:
0362508B DD9D 60FFFFFF fstp qword ptr ss:
03625091 DD85 60FFFFFF fld qword ptr ss:
03625097 DC05 D09D6D03 fadd qword ptr ds:
0362509D DD9D 58FFFFFF fstp qword ptr ss:
036250A3 DD85 58FFFFFF fld qword ptr ss:
036250A9 E8 0DC2FEFF call 036112BB
036250AE 50 push eax
036250AF E8 DCC6FEFF call 03611790
036250B4 8985 68FFFFFF mov dword ptr ss:,eax
036250BA 833D E8167003 5>cmp dword ptr ds:,0x59
036250C1 0F85 9E000000 jnz 03625165
036250C7 DB45 F4 fild dword ptr ss:
036250CA DD9D 60FFFFFF fstp qword ptr ss:
036250D0 DD85 60FFFFFF fld qword ptr ss:
036250D6 DC05 0B9C6D03 fadd qword ptr ds:
036250DC DD9D 58FFFFFF fstp qword ptr ss:
036250E2 FFB5 68FFFFFF push dword ptr ss:
036250E8 E8 A3C6FEFF call 03611790
036250ED 8985 4CFFFFFF mov dword ptr ss:,eax
036250F3 DB85 4CFFFFFF fild dword ptr ss:
036250F9 DD9D 4CFFFFFF fstp qword ptr ss:
036250FF DD85 4CFFFFFF fld qword ptr ss:
03625105 DC05 B8976D03 fadd qword ptr ds:
0362510B DD9D 44FFFFFF fstp qword ptr ss:
03625111 DD85 44FFFFFF fld qword ptr ss:
03625117 E8 9FC1FEFF call 036112BB
0362511C 50 push eax
0362511D DD85 58FFFFFF fld qword ptr ss:
03625123 E8 93C1FEFF call 036112BB
03625128 50 push eax
03625129 E8 FE34FFFF call 0361862C
0362512E DB45 F4 fild dword ptr ss:
03625131 DD9D 60FFFFFF fstp qword ptr ss:
03625137 DD85 60FFFFFF fld qword ptr ss:
0362513D DC05 C89D6D03 fadd qword ptr ds:
03625143 DD9D 58FFFFFF fstp qword ptr ss:
03625149 FF35 BC157003 push dword ptr ds:
0362514F DD85 58FFFFFF fld qword ptr ss:
03625155 E8 61C1FEFF call 036112BB
0362515A 50 push eax
0362515B E8 CC34FFFF call 0361862C
03625160 E9 38000000 jmp 0362519D
03625165 DB45 F4 fild dword ptr ss:
03625168 DD9D 60FFFFFF fstp qword ptr ss:
0362516E DD85 60FFFFFF fld qword ptr ss:
03625174 DC05 0B9C6D03 fadd qword ptr ds:
0362517A DD9D 58FFFFFF fstp qword ptr ss:
03625180 FFB5 68FFFFFF push dword ptr ss:
03625186 E8 05C6FEFF call 03611790
0362518B 50 push eax
0362518C DD85 58FFFFFF fld qword ptr ss:
03625192 E8 24C1FEFF call 036112BB
03625197 50 push eax
03625198 E8 8F34FFFF call 0361862C
0362519D DB45 F4 fild dword ptr ss:
036251A0 DD9D 60FFFFFF fstp qword ptr ss:
036251A6 DD85 60FFFFFF fld qword ptr ss:
036251AC DC05 D09D6D03 fadd qword ptr ds:
036251B2 DD9D 58FFFFFF fstp qword ptr ss:
036251B8 DB85 68FFFFFF fild dword ptr ss:
036251BE DD9D 50FFFFFF fstp qword ptr ss:
036251C4 DD85 50FFFFFF fld qword ptr ss:
036251CA DC05 37976D03 fadd qword ptr ds:
036251D0 DD9D 48FFFFFF fstp qword ptr ss:
036251D6 DD85 48FFFFFF fld qword ptr ss:
036251DC E8 DAC0FEFF call 036112BB
036251E1 50 push eax
036251E2 DD85 58FFFFFF fld qword ptr ss:
036251E8 E8 CEC0FEFF call 036112BB
036251ED 50 push eax
036251EE E8 3934FFFF call 0361862C
036251F3 E9 15070000 jmp 0362590D
036251F8 A1 B4157003 mov eax,dword ptr ds:
036251FD 3945 E0 cmp dword ptr ss:,eax
03625200 0F85 6B030000 jnz 03625571
03625206 DB45 F4 fild dword ptr ss:
03625209 DD9D 60FFFFFF fstp qword ptr ss:
0362520F DD85 60FFFFFF fld qword ptr ss:
03625215 DC05 D09D6D03 fadd qword ptr ds:
0362521B DD9D 58FFFFFF fstp qword ptr ss:
03625221 DD85 58FFFFFF fld qword ptr ss:
03625227 E8 8FC0FEFF call 036112BB
0362522C 50 push eax
0362522D E8 5EC5FEFF call 03611790
03625232 8985 68FFFFFF mov dword ptr ss:,eax
03625238 833D E8167003 5>cmp dword ptr ds:,0x59
0362523F 0F85 79000000 jnz 036252BE
03625245 833D 20177003 F>cmp dword ptr ds:,-0x2
0362524C 0F85 36000000 jnz 03625288
03625252 DB45 F4 fild dword ptr ss:
03625255 DD9D 60FFFFFF fstp qword ptr ss:
0362525B DD85 60FFFFFF fld qword ptr ss:
03625261 DC05 C89D6D03 fadd qword ptr ds:
03625267 DD9D 58FFFFFF fstp qword ptr ss:
0362526D 68 01000000 push 0x1
03625272 DD85 58FFFFFF fld qword ptr ss:
03625278 E8 3EC0FEFF call 036112BB
0362527D 50 push eax
0362527E E8 A933FFFF call 0361862C
03625283 E9 31000000 jmp 036252B9
03625288 DB45 F4 fild dword ptr ss:
0362528B DD9D 60FFFFFF fstp qword ptr ss:
03625291 DD85 60FFFFFF fld qword ptr ss:
03625297 DC05 C89D6D03 fadd qword ptr ds:
0362529D DD9D 58FFFFFF fstp qword ptr ss:
036252A3 68 00000000 push 0x0
036252A8 DD85 58FFFFFF fld qword ptr ss:
036252AE E8 08C0FEFF call 036112BB
036252B3 50 push eax
036252B4 E8 7333FFFF call 0361862C
036252B9 E9 31000000 jmp 036252EF
036252BE DB45 F4 fild dword ptr ss:
036252C1 DD9D 60FFFFFF fstp qword ptr ss:
036252C7 DD85 60FFFFFF fld qword ptr ss:
036252CD DC05 C89D6D03 fadd qword ptr ds:
036252D3 DD9D 58FFFFFF fstp qword ptr ss:
036252D9 68 00000000 push 0x0
036252DE DD85 58FFFFFF fld qword ptr ss:
036252E4 E8 D2BFFEFF call 036112BB
036252E9 50 push eax
036252EA E8 3D33FFFF call 0361862C
036252EF DB45 F4 fild dword ptr ss:
036252F2 DD9D 60FFFFFF fstp qword ptr ss:
036252F8 DD85 60FFFFFF fld qword ptr ss:
036252FE DC05 D09D6D03 fadd qword ptr ds:
03625304 DD9D 58FFFFFF fstp qword ptr ss:
0362530A DB85 68FFFFFF fild dword ptr ss:
03625310 DD9D 50FFFFFF fstp qword ptr ss:
03625316 DD85 50FFFFFF fld qword ptr ss:
0362531C DC05 37976D03 fadd qword ptr ds:
03625322 DD9D 48FFFFFF fstp qword ptr ss:
03625328 DD85 48FFFFFF fld qword ptr ss:
0362532E E8 88BFFEFF call 036112BB
03625333 50 push eax
03625334 DD85 58FFFFFF fld qword ptr ss:
0362533A E8 7CBFFEFF call 036112BB
0362533F 50 push eax
03625340 E8 E732FFFF call 0361862C
03625345 DB45 F4 fild dword ptr ss:
03625348 DD9D 60FFFFFF fstp qword ptr ss:
0362534E DD85 60FFFFFF fld qword ptr ss:
03625354 DC05 D09D6D03 fadd qword ptr ds:
0362535A DD9D 58FFFFFF fstp qword ptr ss:
03625360 DB45 F4 fild dword ptr ss:
03625363 DD9D 50FFFFFF fstp qword ptr ss:
03625369 DD85 50FFFFFF fld qword ptr ss:
0362536F DC05 E09D6D03 fadd qword ptr ds:
03625375 DD9D 48FFFFFF fstp qword ptr ss:
0362537B DD85 48FFFFFF fld qword ptr ss:
03625381 E8 35BFFEFF call 036112BB
03625386 50 push eax
03625387 E8 04C4FEFF call 03611790
0362538C 50 push eax
0362538D DD85 58FFFFFF fld qword ptr ss:
03625393 E8 23BFFEFF call 036112BB
03625398 50 push eax
03625399 E8 8E32FFFF call 0361862C
0362539E DB45 F4 fild dword ptr ss:
036253A1 DD9D 60FFFFFF fstp qword ptr ss:
036253A7 DD85 60FFFFFF fld qword ptr ss:
036253AD DC05 E09D6D03 fadd qword ptr ds:
036253B3 DD9D 58FFFFFF fstp qword ptr ss:
036253B9 DB45 F4 fild dword ptr ss:
036253BC DD9D 50FFFFFF fstp qword ptr ss:
036253C2 DD85 50FFFFFF fld qword ptr ss:
036253C8 DC05 D09D6D03 fadd qword ptr ds:
036253CE DD9D 48FFFFFF fstp qword ptr ss:
036253D4 DD85 48FFFFFF fld qword ptr ss:
036253DA E8 DCBEFEFF call 036112BB
036253DF 50 push eax
036253E0 E8 ABC3FEFF call 03611790
036253E5 50 push eax
036253E6 E8 A5C3FEFF call 03611790
036253EB 50 push eax
036253EC DD85 58FFFFFF fld qword ptr ss:
036253F2 E8 C4BEFEFF call 036112BB
036253F7 50 push eax
036253F8 E8 2F32FFFF call 0361862C
036253FD DB45 F4 fild dword ptr ss:
03625400 DD9D 60FFFFFF fstp qword ptr ss:
03625406 DD85 60FFFFFF fld qword ptr ss:
0362540C DC05 D09D6D03 fadd qword ptr ds:
03625412 DD9D 58FFFFFF fstp qword ptr ss:
03625418 DB45 F4 fild dword ptr ss:
0362541B DD9D 50FFFFFF fstp qword ptr ss:
03625421 DD85 50FFFFFF fld qword ptr ss:
03625427 DC05 D09D6D03 fadd qword ptr ds:
0362542D DD9D 48FFFFFF fstp qword ptr ss:
03625433 DD85 48FFFFFF fld qword ptr ss:
03625439 E8 7DBEFEFF call 036112BB
0362543E 50 push eax
0362543F E8 4CC3FEFF call 03611790
03625444 8985 3CFFFFFF mov dword ptr ss:,eax
0362544A DB85 3CFFFFFF fild dword ptr ss:
03625450 DD9D 3CFFFFFF fstp qword ptr ss:
03625456 DD85 3CFFFFFF fld qword ptr ss:
0362545C DC05 37976D03 fadd qword ptr ds:
03625462 DD9D 34FFFFFF fstp qword ptr ss:
03625468 DD85 34FFFFFF fld qword ptr ss:
0362546E E8 48BEFEFF call 036112BB
03625473 50 push eax
03625474 DD85 58FFFFFF fld qword ptr ss:
0362547A E8 3CBEFEFF call 036112BB
0362547F 50 push eax
03625480 E8 A731FFFF call 0361862C
03625485 DB45 F4 fild dword ptr ss:
03625488 DD9D 60FFFFFF fstp qword ptr ss:
0362548E DD85 60FFFFFF fld qword ptr ss:
03625494 DC05 0B9C6D03 fadd qword ptr ds:
0362549A DD9D 58FFFFFF fstp qword ptr ss:
036254A0 DB45 F4 fild dword ptr ss:
036254A3 DD9D 50FFFFFF fstp qword ptr ss:
036254A9 DD85 50FFFFFF fld qword ptr ss:
036254AF DC05 D09D6D03 fadd qword ptr ds:
036254B5 DD9D 48FFFFFF fstp qword ptr ss:
036254BB DD85 48FFFFFF fld qword ptr ss:
036254C1 E8 F5BDFEFF call 036112BB
036254C6 50 push eax
036254C7 E8 C4C2FEFF call 03611790
036254CC 50 push eax
036254CD E8 BEC2FEFF call 03611790
036254D2 50 push eax
036254D3 DD85 58FFFFFF fld qword ptr ss:
036254D9 E8 DDBDFEFF call 036112BB
036254DE 50 push eax
036254DF E8 4831FFFF call 0361862C
036254E4 DB45 F4 fild dword ptr ss:
036254E7 DD9D 60FFFFFF fstp qword ptr ss:
036254ED DD85 60FFFFFF fld qword ptr ss:
036254F3 DC05 D09D6D03 fadd qword ptr ds:
036254F9 DD9D 58FFFFFF fstp qword ptr ss:
036254FF DB45 F4 fild dword ptr ss:
03625502 DD9D 50FFFFFF fstp qword ptr ss:
03625508 DD85 50FFFFFF fld qword ptr ss:
0362550E DC05 D09D6D03 fadd qword ptr ds:
03625514 DD9D 48FFFFFF fstp qword ptr ss:
0362551A DD85 48FFFFFF fld qword ptr ss:
03625520 E8 96BDFEFF call 036112BB
03625525 50 push eax
03625526 E8 65C2FEFF call 03611790
0362552B 8985 3CFFFFFF mov dword ptr ss:,eax
03625531 DB85 3CFFFFFF fild dword ptr ss:
03625537 DD9D 3CFFFFFF fstp qword ptr ss:
0362553D DD85 3CFFFFFF fld qword ptr ss:
03625543 DC05 37976D03 fadd qword ptr ds:
03625549 DD9D 34FFFFFF fstp qword ptr ss:
0362554F DD85 34FFFFFF fld qword ptr ss:
03625555 E8 61BDFEFF call 036112BB
0362555A 50 push eax
0362555B DD85 58FFFFFF fld qword ptr ss:
03625561 E8 55BDFEFF call 036112BB
03625566 50 push eax
03625567 E8 C030FFFF call 0361862C
0362556C E9 9C030000 jmp 0362590D
03625571 A1 B8157003 mov eax,dword ptr ds:
03625576 3945 E0 cmp dword ptr ss:,eax
03625579 0F85 28030000 jnz 036258A7
0362557F DB45 F4 fild dword ptr ss:
03625582 DD9D 60FFFFFF fstp qword ptr ss:
03625588 DD85 60FFFFFF fld qword ptr ss:
0362558E DC05 D09D6D03 fadd qword ptr ds:
03625594 DD9D 58FFFFFF fstp qword ptr ss:
0362559A DD85 58FFFFFF fld qword ptr ss:
036255A0 E8 16BDFEFF call 036112BB
036255A5 50 push eax
036255A6 E8 E5C1FEFF call 03611790
036255AB 8985 68FFFFFF mov dword ptr ss:,eax
036255B1 833D E8167003 5>cmp dword ptr ds:,0x59
036255B8 0F85 36000000 jnz 036255F4
036255BE DB45 F4 fild dword ptr ss:
036255C1 DD9D 60FFFFFF fstp qword ptr ss:
036255C7 DD85 60FFFFFF fld qword ptr ss:
036255CD DC05 C89D6D03 fadd qword ptr ds:
036255D3 DD9D 58FFFFFF fstp qword ptr ss:
036255D9 68 01000000 push 0x1
036255DE DD85 58FFFFFF fld qword ptr ss:
036255E4 E8 D2BCFEFF call 036112BB
036255E9 50 push eax
036255EA E8 3D30FFFF call 0361862C
036255EF E9 31000000 jmp 03625625
036255F4 DB45 F4 fild dword ptr ss:
036255F7 DD9D 60FFFFFF fstp qword ptr ss:
036255FD DD85 60FFFFFF fld qword ptr ss:
03625603 DC05 C89D6D03 fadd qword ptr ds:
03625609 DD9D 58FFFFFF fstp qword ptr ss:
0362560F 68 00000000 push 0x0
03625614 DD85 58FFFFFF fld qword ptr ss:
0362561A E8 9CBCFEFF call 036112BB
0362561F 50 push eax
03625620 E8 0730FFFF call 0361862C
03625625 DB45 F4 fild dword ptr ss:
03625628 DD9D 60FFFFFF fstp qword ptr ss:
0362562E DD85 60FFFFFF fld qword ptr ss:
03625634 DC05 D09D6D03 fadd qword ptr ds:
0362563A DD9D 58FFFFFF fstp qword ptr ss:
03625640 DB85 68FFFFFF fild dword ptr ss:
03625646 DD9D 50FFFFFF fstp qword ptr ss:
0362564C DD85 50FFFFFF fld qword ptr ss:
03625652 DC05 37976D03 fadd qword ptr ds:
03625658 DD9D 48FFFFFF fstp qword ptr ss:
0362565E DD85 48FFFFFF fld qword ptr ss:
03625664 E8 52BCFEFF call 036112BB
03625669 50 push eax
0362566A DD85 58FFFFFF fld qword ptr ss:
03625670 E8 46BCFEFF call 036112BB
03625675 50 push eax
03625676 E8 B12FFFFF call 0361862C
0362567B DB45 F4 fild dword ptr ss:
0362567E DD9D 60FFFFFF fstp qword ptr ss:
03625684 DD85 60FFFFFF fld qword ptr ss:
0362568A DC05 D09D6D03 fadd qword ptr ds:
03625690 DD9D 58FFFFFF fstp qword ptr ss:
03625696 DB45 F4 fild dword ptr ss:
03625699 DD9D 50FFFFFF fstp qword ptr ss:
0362569F DD85 50FFFFFF fld qword ptr ss:
036256A5 DC05 E09D6D03 fadd qword ptr ds:
036256AB DD9D 48FFFFFF fstp qword ptr ss:
036256B1 DD85 48FFFFFF fld qword ptr ss:
036256B7 E8 FFBBFEFF call 036112BB
036256BC 50 push eax
036256BD E8 CEC0FEFF call 03611790
036256C2 50 push eax
036256C3 DD85 58FFFFFF fld qword ptr ss:
036256C9 E8 EDBBFEFF call 036112BB
036256CE 50 push eax
036256CF E8 582FFFFF call 0361862C
036256D4 DB45 F4 fild dword ptr ss:
036256D7 DD9D 60FFFFFF fstp qword ptr ss:
036256DD DD85 60FFFFFF fld qword ptr ss:
036256E3 DC05 E09D6D03 fadd qword ptr ds:
036256E9 DD9D 58FFFFFF fstp qword ptr ss:
036256EF DB45 F4 fild dword ptr ss:
036256F2 DD9D 50FFFFFF fstp qword ptr ss:
036256F8 DD85 50FFFFFF fld qword ptr ss:
036256FE DC05 D09D6D03 fadd qword ptr ds:
03625704 DD9D 48FFFFFF fstp qword ptr ss:
0362570A DD85 48FFFFFF fld qword ptr ss:
03625710 E8 A6BBFEFF call 036112BB
03625715 50 push eax
03625716 E8 75C0FEFF call 03611790
0362571B 50 push eax
0362571C E8 6FC0FEFF call 03611790
03625721 50 push eax
03625722 DD85 58FFFFFF fld qword ptr ss:
03625728 E8 8EBBFEFF call 036112BB
0362572D 50 push eax
0362572E E8 F92EFFFF call 0361862C
03625733 DB45 F4 fild dword ptr ss:
03625736 DD9D 60FFFFFF fstp qword ptr ss:
0362573C DD85 60FFFFFF fld qword ptr ss:
03625742 DC05 D09D6D03 fadd qword ptr ds:
03625748 DD9D 58FFFFFF fstp qword ptr ss:
0362574E DB45 F4 fild dword ptr ss:
03625751 DD9D 50FFFFFF fstp qword ptr ss:
03625757 DD85 50FFFFFF fld qword ptr ss:
0362575D DC05 D09D6D03 fadd qword ptr ds:
03625763 DD9D 48FFFFFF fstp qword ptr ss:
03625769 DD85 48FFFFFF fld qword ptr ss:
0362576F E8 47BBFEFF call 036112BB
03625774 50 push eax
03625775 E8 16C0FEFF call 03611790
0362577A 8985 3CFFFFFF mov dword ptr ss:,eax
03625780 DB85 3CFFFFFF fild dword ptr ss:
03625786 DD9D 3CFFFFFF fstp qword ptr ss:
0362578C DD85 3CFFFFFF fld qword ptr ss:
03625792 DC05 37976D03 fadd qword ptr ds:
03625798 DD9D 34FFFFFF fstp qword ptr ss:
0362579E DD85 34FFFFFF fld qword ptr ss:
036257A4 E8 12BBFEFF call 036112BB
036257A9 50 push eax
036257AA DD85 58FFFFFF fld qword ptr ss:
036257B0 E8 06BBFEFF call 036112BB
036257B5 50 push eax
036257B6 E8 712EFFFF call 0361862C
036257BB DB45 F4 fild dword ptr ss:
036257BE DD9D 60FFFFFF fstp qword ptr ss:
036257C4 DD85 60FFFFFF fld qword ptr ss:
036257CA DC05 0B9C6D03 fadd qword ptr ds:
036257D0 DD9D 58FFFFFF fstp qword ptr ss:
036257D6 DB45 F4 fild dword ptr ss:
036257D9 DD9D 50FFFFFF fstp qword ptr ss:
036257DF DD85 50FFFFFF fld qword ptr ss:
036257E5 DC05 D09D6D03 fadd qword ptr ds:
036257EB DD9D 48FFFFFF fstp qword ptr ss:
036257F1 DD85 48FFFFFF fld qword ptr ss:
036257F7 E8 BFBAFEFF call 036112BB
036257FC 50 push eax
036257FD E8 8EBFFEFF call 03611790
03625802 50 push eax
03625803 E8 88BFFEFF call 03611790
03625808 50 push eax
03625809 DD85 58FFFFFF fld qword ptr ss:
0362580F E8 A7BAFEFF call 036112BB
03625814 50 push eax
03625815 E8 122EFFFF call 0361862C
0362581A DB45 F4 fild dword ptr ss:
0362581D DD9D 60FFFFFF fstp qword ptr ss:
03625823 DD85 60FFFFFF fld qword ptr ss:
03625829 DC05 D09D6D03 fadd qword ptr ds:
0362582F DD9D 58FFFFFF fstp qword ptr ss:
03625835 DB45 F4 fild dword ptr ss:
03625838 DD9D 50FFFFFF fstp qword ptr ss:
0362583E DD85 50FFFFFF fld qword ptr ss:
03625844 DC05 D09D6D03 fadd qword ptr ds:
0362584A DD9D 48FFFFFF fstp qword ptr ss:
03625850 DD85 48FFFFFF fld qword ptr ss:
03625856 E8 60BAFEFF call 036112BB
0362585B 50 push eax
0362585C E8 2FBFFEFF call 03611790
03625861 8985 3CFFFFFF mov dword ptr ss:,eax
03625867 DB85 3CFFFFFF fild dword ptr ss:
0362586D DD9D 3CFFFFFF fstp qword ptr ss:
03625873 DD85 3CFFFFFF fld qword ptr ss:
03625879 DC05 37976D03 fadd qword ptr ds:
0362587F DD9D 34FFFFFF fstp qword ptr ss:
03625885 DD85 34FFFFFF fld qword ptr ss:
0362588B E8 2BBAFEFF call 036112BB
03625890 50 push eax
03625891 DD85 58FFFFFF fld qword ptr ss:
03625897 E8 1FBAFEFF call 036112BB
0362589C 50 push eax
0362589D E8 8A2DFFFF call 0361862C
036258A2 E9 66000000 jmp 0362590D
036258A7 FF35 70157003 push dword ptr ds: ; 注册码算.00402AF9
036258AD E8 92BBFEFF call 03611444
036258B2 8985 60FFFFFF mov dword ptr ss:,eax
036258B8 81BD 60FFFFFF C>cmp dword ptr ss:,0xCC
036258C2 0F85 13000000 jnz 036258DB
036258C8 837D D4 63 cmp dword ptr ss:,0x63
036258CC 0F84 09000000 je 036258DB
036258D2 C745 D4 6200000>mov dword ptr ss:,0x62
036258D9^ EB ED jmp short 036258C8
036258DB DB45 F4 fild dword ptr ss:
036258DE DD9D 60FFFFFF fstp qword ptr ss:
036258E4 DD85 60FFFFFF fld qword ptr ss:
036258EA DC05 0B9C6D03 fadd qword ptr ds:
036258F0 DD9D 58FFFFFF fstp qword ptr ss:
036258F6 FF35 70157003 push dword ptr ds: ; 注册码算.00402AF9
036258FC DD85 58FFFFFF fld qword ptr ss:
03625902 E8 B4B9FEFF call 036112BB
03625907 50 push eax
03625908 E8 1F2DFFFF call 0361862C
0362590D E9 34010000 jmp 03625A46
03625912 A1 54167003 mov eax,dword ptr ds:
03625917 3945 EC cmp dword ptr ss:,eax
0362591A 0F85 26010000 jnz 03625A46
03625920 DB45 F4 fild dword ptr ss:
03625923 DD9D 60FFFFFF fstp qword ptr ss:
03625929 DD85 60FFFFFF fld qword ptr ss:
0362592F DC05 C89D6D03 fadd qword ptr ds:
03625935 DD9D 58FFFFFF fstp qword ptr ss:
0362593B 68 01000000 push 0x1
03625940 DD85 58FFFFFF fld qword ptr ss:
03625946 E8 70B9FEFF call 036112BB
0362594B 50 push eax
0362594C E8 DB2CFFFF call 0361862C
03625951 DB45 F4 fild dword ptr ss:
03625954 DD9D 60FFFFFF fstp qword ptr ss:
0362595A DD85 60FFFFFF fld qword ptr ss:
03625960 DC05 D09D6D03 fadd qword ptr ds:
03625966 DD9D 58FFFFFF fstp qword ptr ss:
0362596C DD85 58FFFFFF fld qword ptr ss:
03625972 E8 44B9FEFF call 036112BB
03625977 50 push eax
03625978 E8 13BEFEFF call 03611790
0362597D 8985 68FFFFFF mov dword ptr ss:,eax
03625983 DB45 F4 fild dword ptr ss:
03625986 DD9D 60FFFFFF fstp qword ptr ss:
0362598C DD85 60FFFFFF fld qword ptr ss:
03625992 DC05 0B9C6D03 fadd qword ptr ds:
03625998 DD9D 58FFFFFF fstp qword ptr ss:
0362599E FFB5 68FFFFFF push dword ptr ss:
036259A4 E8 E7BDFEFF call 03611790
036259A9 50 push eax
036259AA DD85 58FFFFFF fld qword ptr ss:
036259B0 E8 06B9FEFF call 036112BB
036259B5 50 push eax
036259B6 E8 712CFFFF call 0361862C
036259BB DB45 F4 fild dword ptr ss:
036259BE DD9D 60FFFFFF fstp qword ptr ss:
036259C4 DD85 60FFFFFF fld qword ptr ss:
036259CA DC05 D09D6D03 fadd qword ptr ds:
036259D0 DD9D 58FFFFFF fstp qword ptr ss:
036259D6 DB85 68FFFFFF fild dword ptr ss:
036259DC DD9D 50FFFFFF fstp qword ptr ss:
036259E2 DD85 50FFFFFF fld qword ptr ss:
036259E8 DC05 37976D03 fadd qword ptr ds:
036259EE DD9D 48FFFFFF fstp qword ptr ss:
036259F4 DD85 48FFFFFF fld qword ptr ss:
036259FA E8 BCB8FEFF call 036112BB
036259FF 50 push eax
03625A00 DD85 58FFFFFF fld qword ptr ss:
03625A06 E8 B0B8FEFF call 036112BB
03625A0B 50 push eax
03625A0C E8 1B2CFFFF call 0361862C
03625A11 833D 24177003 0>cmp dword ptr ds:,0x0
03625A18 0F85 23000000 jnz 03625A41
03625A1E C705 24177003 0>mov dword ptr ds:,0x1
03625A28 C705 10177003 0>mov dword ptr ds:,0x1
03625A32 833D 10177003 0>cmp dword ptr ds:,0x1
03625A39 0F85 02000000 jnz 03625A41
03625A3F^ EB F1 jmp short 03625A32
03625A41 E9 00000000 jmp 03625A46
03625A46 B8 FFFFFFFF mov eax,-0x1
03625A4B E9 37000000 jmp 03625A87
03625A50 A1 50167003 mov eax,dword ptr ds:
03625A55 3945 EC cmp dword ptr ss:,eax
03625A58 0F85 1A000000 jnz 03625A78
03625A5E C745 D4 0600000>mov dword ptr ss:,0x6
03625A65 837D D4 06 cmp dword ptr ss:,0x6
03625A69 0F85 09000000 jnz 03625A78
03625A6F C745 D4 0600000>mov dword ptr ss:,0x6
03625A76^ EB ED jmp short 03625A65
03625A78 B8 00000000 mov eax,0x0
03625A7D E9 05000000 jmp 03625A87
03625A82 B8 8957E4AF mov eax,0xAFE45789
03625A87 50 push eax
03625A88 8B5D D8 mov ebx,dword ptr ss: ; ntdll.7C99D5E0
03625A8B 53 push ebx ; ntdll.7C99D5E0
03625A8C 83C3 1C add ebx,0x1C
03625A8F 53 push ebx ; ntdll.7C99D5E0
03625A90 8B1B mov ebx,dword ptr ds: ; ntdll.7C99B520
03625A92 53 push ebx ; ntdll.7C99D5E0
03625A93 83C3 1C add ebx,0x1C
03625A96 53 push ebx ; ntdll.7C99D5E0
03625A97 8B1B mov ebx,dword ptr ds: ; ntdll.7C99B520
03625A99 53 push ebx ; ntdll.7C99D5E0
03625A9A E8 753F0100 call 03639A14
03625A9F 83C4 04 add esp,0x4
03625AA2 5B pop ebx ; 03626828
03625AA3 E8 6C3F0100 call 03639A14
03625AA8 83C4 04 add esp,0x4
03625AAB 5B pop ebx ; 03626828
03625AAC 83C3 44 add ebx,0x44
03625AAF 53 push ebx ; ntdll.7C99D5E0
03625AB0 8B1B mov ebx,dword ptr ds: ; ntdll.7C99B520
03625AB2 53 push ebx ; ntdll.7C99D5E0
03625AB3 E8 5C3F0100 call 03639A14
03625AB8 83C4 04 add esp,0x4
03625ABB 5B pop ebx ; 03626828
03625ABC E8 533F0100 call 03639A14
03625AC1 83C4 04 add esp,0x4
03625AC4 8B5D C8 mov ebx,dword ptr ss:
03625AC7 85DB test ebx,ebx ; ntdll.7C99D5E0
03625AC9 74 09 je short 03625AD4
03625ACB 53 push ebx ; ntdll.7C99D5E0
03625ACC E8 433F0100 call 03639A14
03625AD1 83C4 04 add esp,0x4
03625AD4 8B5D C4 mov ebx,dword ptr ss: ; ntdll.7C9333F6
03625AD7 85DB test ebx,ebx ; ntdll.7C99D5E0
03625AD9 74 09 je short 03625AE4
03625ADB 53 push ebx ; ntdll.7C99D5E0
03625ADC E8 333F0100 call 03639A14
03625AE1 83C4 04 add esp,0x4
03625AE4 8B5D C0 mov ebx,dword ptr ss: ; ntdll.7C92D7EC
03625AE7 85DB test ebx,ebx ; ntdll.7C99D5E0
03625AE9 74 09 je short 03625AF4
03625AEB 53 push ebx ; ntdll.7C99D5E0
03625AEC E8 233F0100 call 03639A14
03625AF1 83C4 04 add esp,0x4
03625AF4 8B5D 90 mov ebx,dword ptr ss:
03625AF7 85DB test ebx,ebx ; ntdll.7C99D5E0
03625AF9 74 09 je short 03625B04
03625AFB 53 push ebx ; ntdll.7C99D5E0
03625AFC E8 133F0100 call 03639A14
03625B01 83C4 04 add esp,0x4
03625B04 8B9D 70FFFFFF mov ebx,dword ptr ss: ; user32.77D18830
03625B0A 85DB test ebx,ebx ; ntdll.7C99D5E0
03625B0C 74 09 je short 03625B17
03625B0E 53 push ebx ; ntdll.7C99D5E0
03625B0F E8 003F0100 call 03639A14
03625B14 83C4 04 add esp,0x4
03625B17 58 pop eax ; 03626828
03625B18 8BE5 mov esp,ebp
03625B1A 5D pop ebp ; 03626828
03625B1B C2 0400 retn 0x4
Heiye_Hack 发表于 2015-8-11 11:26
他能跟不出来 这个对他来说也差不多
4000多行代码 不止处理验证的代码 还有其他的 你要跟才知道
我要跟我肯定能跟出来，只不过跟完之后我能不能活着就不一定了 本帖最后由 Heiye_Hack 于 2015-8-10 18:41 编辑
沙发自己留下，有必要说明，会在这里
补上一个解密KEY(a拉5A*！)
这是啥啊 {:301_971:} 这个是自己翻译的程序吗？ 不错。今天再去试试看 还检测OD没意思 Very_good 发表于 2015-8-10 18:59
还检测OD没意思
检测都过不了 怎么逆出算法来 Heiye_Hack 发表于 2015-8-10 19:11
检测都过不了 怎么逆出算法来
VEH，233 这次能运行了,可以OD里看代码真的是好开心,但是我突破不了,楼主你限制鼠标真的是好坑啊 你们用的OD 发个我用用吧