Function at 0x401000
Capabilities:
Link many functions at runtime
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push esi
push edi
jmp 0x4022e3
pushfd
add ebp, 0x35e7b8f4
popfd
push ebp
pushfd
xchg dword ds:[esp + 4], ecx
sub ecx, 0x35e7b8f4
xchg dword ds:[esp + 4], ecx
sub ebp, 0x35e7b8f4
popfd
mov ebp, esp
jmp 0x40230d
sub esp, 0x1764
jmp 0x40231b
mov dword ds:[ebp - 0x9c], 2
jmp 0x40232b
mov dword ds:[ebp - 0xa0], 0
jmp 0x402339
jmp 0x40235c
mov eax, dword ds:[ebp - 0xa0]
jmp 0x40234b
add eax, 1
jmp 0x402351
mov dword ds:[ebp - 0xa0], eax
jmp 0x40235c
cmp dword ds:[ebp - 0xa0], 0x8c
jmp 0x40236d
jae 0x402395
jmp 0x402373
mov ecx, dword ds:[ebp - 0xa0]
jmp 0x402380
mov byte ds:[ebp + ecx - 0x98], 0
jmp 0x40238d
jmp 0x402341
mov dword ds:[ebp - 0xac], 0x1000
jmp 0x4023a5
mov dword ds:[ebp - 0xc0], 0
jmp 0x4023b7
push 0x768f2716
pushfd
add dword ds:[esp + 4], 0x8970d8ea
popfd
call fcn.004138af
jmp 0x4023d0
add esp, 4
jmp 0x4023da
push eax
pop dword ds:[ebp - 0x1dc]
mov edx, dword ds:[ebp - 0x1dc]
jmp 0x4023ec
push edx
pop dword ds:[ebp - 0x268]
mov byte ds:[ebp - 0x261], 0
jmp 0x4023ff
mov dword ds:[ebp - 0x26c], 0
jmp 0x40240d
mov dword ds:[ebp - 0x260], 0
jmp 0x40241d
mov eax, dword ds:[ebp - 0x268]
jmp 0x40242b
movzx ecx, word ds:[eax]
jmp 0x402436
cmp ecx, 0x5a4d
jmp 0x402440
jne 0x40271e
jmp 0x402449
mov edx, dword ds:[ebp - 0x268]
jmp 0x402453
add edx, 0x3c
jmp 0x40245b
cmp edx, dword ds:[ebp - 0x1dc]
jmp 0x402465
jae 0x40271e
jmp 0x402471
mov eax, dword ds:[ebp - 0x268]
jmp 0x40247e
mov ecx, dword ds:[ebp - 0x268]
jmp 0x402489
add ecx, dword ds:[eax + 0x3c]
jmp 0x402492
push ecx
pop dword ds:[ebp - 0x26c]
mov edx, dword ds:[ebp - 0x26c]
jmp 0x4024a4
add edx, 0x18
jmp 0x4024ae
cmp edx, dword ds:[ebp - 0x1dc]
jmp 0x4024bc
jae 0x40271e
jmp 0x4024ca
mov eax, dword ds:[ebp - 0x26c]
jmp 0x4024d7
movzx ecx, word ds:[eax + 0x14]
jmp 0x4024e0
mov edx, dword ds:[ebp - 0x26c]
jmp 0x4024ec
lea eax, [edx + ecx + 0x18]
jmp 0x4024f8
cmp eax, dword ds:[ebp - 0x1dc]
jmp 0x402503
jae 0x40271e
jmp 0x40250e
mov ecx, dword ds:[ebp - 0x26c]
jmp 0x40251b
cmp dword ds:[ecx], 0x4550
jmp 0x402529
jne 0x40271e
jmp 0x402536
mov edx, dword ds:[ebp - 0x26c]
jmp 0x402545
movzx eax, word ds:[edx + 0x18]
jmp 0x402552
cmp eax, 0x10b
jmp 0x40255e
jne 0x40271e
jmp 0x402567
mov ecx, dword ds:[ebp - 0x26c]
jmp 0x402571
movzx edx, word ds:[ecx + 6]
jmp 0x402579
test edx, edx
jmp 0x40257e
jle 0x40271e
jmp 0x40258b
mov eax, dword ds:[ebp - 0x26c]
jmp 0x402596
movzx ecx, word ds:[eax + 0x14]
jmp 0x4025a0
mov edx, dword ds:[ebp - 0x26c]
jmp 0x4025ab
lea eax, [edx + ecx + 0x18]
jmp 0x4025b5
push eax
pop dword ds:[ebp - 0x260]
mov ecx, dword ds:[ebp - 0x26c]
jmp 0x4025cb
movzx edx, word ds:[ecx + 6]
jmp 0x4025d5
add edx, dword ds:[ebp - 0x260]
jmp 0x4025e1
cmp edx, dword ds:[ebp - 0x1dc]
jmp 0x4025ed
jae 0x40271e
jmp 0x4025f6
mov eax, dword ds:[ebp - 0x26c]
jmp 0x402604
movzx ecx, word ds:[eax + 6]
jmp 0x40260c
imul ecx, ecx, 0x28
jmp 0x402612
add ecx, dword ds:[ebp - 0x260]
jmp 0x402621
cmp ecx, dword ds:[ebp - 0x260]
jmp 0x40262c
jbe 0x40271e
jmp 0x402636
mov edx, dword ds:[ebp - 0x260]
jmp 0x402643
mov eax, dword ds:[ebp - 0x268]
jmp 0x402650
add eax, dword ds:[edx + 0xc]
jmp 0x402659
cmp eax, dword ds:[ebp - 0x1dc]
jmp 0x402664
jae 0x40271e
jmp 0x40266f
mov ecx, dword ds:[ebp - 0x26c]
jmp 0x402679
movzx edx, word ds:[ecx + 6]
jmp 0x402685
sub edx, 1
jmp 0x40268b
imul edx, edx, 0x28
jmp 0x402692
mov eax, dword ds:[ebp - 0x260]
jmp 0x40269c
mov ecx, dword ds:[ebp - 0x268]
jmp 0x4026aa
add ecx, dword ds:[eax + edx + 0xc]
jmp 0x4026b5
mov edx, dword ds:[ebp - 0x26c]
jmp 0x4026c0
movzx eax, word ds:[edx + 6]
jmp 0x4026cb
sub eax, 1
jmp 0x4026d3
imul eax, eax, 0x28
jmp 0x4026da
mov edx, dword ds:[ebp - 0x260]
jmp 0x4026e9
add ecx, dword ds:[edx + eax + 8]
jmp 0x4026f4
cmp ecx, dword ds:[ebp - 0x1dc]
jmp 0x402700
jbe 0x40271e
jmp 0x402709
mov byte ds:[ebp - 0x261], 1
jmp 0x402716
jmp 0x40273f
mov eax, dword ds:[ebp - 0x268]
jmp 0x40272d
sub eax, 1
jmp 0x402733
mov dword ds:[ebp - 0x268], eax
jmp 0x40273f
movzx ecx, byte ds:[ebp - 0x261]
jmp 0x40274b
test ecx, ecx
jmp 0x402753
je 0x40241d
jmp 0x40275d
mov edx, dword ds:[ebp - 0x268]
jmp 0x40276b
mov dword ds:[ebp - 0x1e0], edx
jmp 0x40277a
mov byte ds:[ebp - 0x1f8], 0x47
jmp 0x402785
mov byte ds:[ebp - 0x1f7], 0x65
jmp 0x402794
mov byte ds:[ebp - 0x1f6], 0x74
jmp 0x4027a0
mov byte ds:[ebp - 0x1f5], 0x4d
jmp 0x4027ab
mov byte ds:[ebp - 0x1f4], 0x6f
jmp 0x4027ba
mov byte ds:[ebp - 0x1f3], 0x64
jmp 0x4027c8
mov byte ds:[ebp - 0x1f2], 0x75
jmp 0x4027d4
mov byte ds:[ebp - 0x1f1], 0x6c
jmp 0x4027e0
mov byte ds:[ebp - 0x1f0], 0x65
jmp 0x4027ec
mov byte ds:[ebp - 0x1ef], 0x46
jmp 0x4027fb
mov byte ds:[ebp - 0x1ee], 0x69
jmp 0x40280a
mov byte ds:[ebp - 0x1ed], 0x6c
jmp 0x40281a
mov byte ds:[ebp - 0x1ec], 0x65
jmp 0x402827
mov byte ds:[ebp - 0x1eb], 0x4e
jmp 0x402833
mov byte ds:[ebp - 0x1ea], 0x61
jmp 0x40283e
mov byte ds:[ebp - 0x1e9], 0x6d
jmp 0x40284a
mov byte ds:[ebp - 0x1e8], 0x65
jmp 0x402856
mov byte ds:[ebp - 0x1e7], 0x41
jmp 0x402864
mov byte ds:[ebp - 0x1e6], 0
jmp 0x402872
mov eax, dword ds:[ebp - 0x1e0]
jmp 0x40287d
mov ecx, dword ds:[ebp - 0x1e0]
jmp 0x40288c
add ecx, dword ds:[eax + 0x3c]
jmp 0x402897
push ecx
pop dword ds:[ebp - 0x280]
mov edx, dword ds:[ebp - 0x280]
jmp 0x4028aa
mov eax, dword ds:[ebp - 0x1e0]
jmp 0x4028b8
add eax, dword ds:[edx + 0x80]
jmp 0x4028c3
push eax
pop dword ds:[ebp - 0x278]
mov dword ds:[ebp - 0x270], 0
jmp 0x4028da
cmp dword ds:[ebp - 0x270], 0
jmp 0x4028e5
je 0x402957
jmp 0x4028eb
mov ecx, dword ds:[ebp - 0x270]
jmp 0x4028f9
movsx edx, byte ds:[ecx]
jmp 0x402903
test edx, edx
jmp 0x40290b
je 0x402957
jmp 0x402910
mov eax, dword ds:[ebp - 0x270]
jmp 0x40291c
movsx ecx, byte ds:[eax]
jmp 0x402925
cmp ecx, 0x2e
jmp 0x40292e
je 0x402957
jmp 0x402936
mov edx, dword ds:[ebp - 0x270]
jmp 0x402941
add edx, 1
jmp 0x402947
push edx
pop dword ds:[ebp - 0x270]
jmp 0x4028eb
cmp dword ds:[ebp - 0x270], 0
jmp 0x402966
je 0x4029a4
jmp 0x40296f
mov eax, dword ds:[ebp - 0x270]
jmp 0x40297d
movsx ecx, byte ds:[eax]
jmp 0x402985
test ecx, ecx
jmp 0x40298d
jne 0x4029a4
jmp 0x402993
mov dword ds:[ebp - 0x270], 0
jmp 0x4029a4
cmp dword ds:[ebp - 0x270], 0
jmp 0x4029b2
je 0x4029d0
jmp 0x4029b8
mov edx, dword ds:[ebp - 0x270]
jmp 0x4029c2
push edx
pop dword ds:[ebp - 0x1720]
jmp 0x4029e2
mov dword ds:[ebp - 0x1720], 0
jmp 0x4029e2
mov eax, dword ds:[ebp - 0x1720]
jmp 0x4029ef
push eax
pop dword ds:[ebp - 0x274]
lea ecx, [ebp - 0x1f8]
jmp 0x402a01
test ecx, ecx
jmp 0x402a06
je 0x402a8e
jmp 0x402a0f
mov dword ds:[ebp - 0x294], 0
jmp 0x402a20
jmp 0x402a3f
mov edx, dword ds:[ebp - 0x294]
jmp 0x402a31
add edx, 1
jmp 0x402a37
push edx
pop dword ds:[ebp - 0x294]
mov eax, dword ds:[ebp - 0x294]
jmp 0x402a4b
movsx ecx, byte ds:[ebp + eax - 0x1f8]
jmp 0x402a57
test ecx, ecx
jmp 0x402a5c
je 0x402a6e
jmp 0x402a65
jmp 0x402a25
mov edx, dword ds:[ebp - 0x294]
jmp 0x402a7b
mov dword ds:[ebp - 0x1724], edx
jmp 0x402a86
jmp 0x402a9c
mov dword ds:[ebp - 0x1724], 0
jmp 0x402a9c
mov eax, dword ds:[ebp - 0x1724]
jmp 0x402aa8
mov dword ds:[ebp - 0x27c], eax
jmp 0x402ab3
jmp 0x402adb
mov ecx, dword ds:[ebp - 0x278]
jmp 0x402acb
add ecx, 0x14
jmp 0x402ad3
push ecx
pop dword ds:[ebp - 0x278]
mov edx, dword ds:[ebp - 0x278]
jmp 0x402ae5
cmp dword ds:[edx + 0xc], 0
jmp 0x402af0
je 0x40315a
jmp 0x402afd
mov eax, dword ds:[ebp - 0x278]
jmp 0x402b0a
mov ecx, dword ds:[ebp - 0x1e0]
jmp 0x402b17
add ecx, dword ds:[eax + 0xc]
jmp 0x402b22
push ecx
pop dword ds:[ebp - 0x290]
mov edx, dword ds:[ebp - 0x290]
jmp 0x402b37
push edx
pop dword ds:[ebp - 0x284]
mov eax, dword ds:[ebp - 0x284]
jmp 0x402b49
movsx ecx, byte ds:[eax]
jmp 0x402b50
test ecx, ecx
jmp 0x402b59
je 0x402ba3
jmp 0x402b5e
mov edx, dword ds:[ebp - 0x284]
jmp 0x402b69
movsx eax, byte ds:[edx]
jmp 0x402b75
cmp eax, 0x2e
jmp 0x402b7c
je 0x402ba3
jmp 0x402b81
mov ecx, dword ds:[ebp - 0x284]
jmp 0x402b8c
add ecx, 1
jmp 0x402b94
push ecx
pop dword ds:[ebp - 0x284]
jmp 0x402b3f
mov edx, dword ds:[ebp - 0x284]
jmp 0x402bb1
movsx eax, byte ds:[edx]
jmp 0x402bba
test eax, eax
jmp 0x402bbf
jne 0x402bd8
jmp 0x402bc8
mov dword ds:[ebp - 0x284], 0
jmp 0x402bd8
cmp dword ds:[ebp - 0x284], 0
jmp 0x402be7
je 0x402c24
jmp 0x402bec
cmp dword ds:[ebp - 0x274], 0
jmp 0x402bf7
je 0x402c24
jmp 0x402bff
mov ecx, dword ds:[ebp - 0x284]
jmp 0x402c0b
sub ecx, dword ds:[ebp - 0x290]
jmp 0x402c15
push ecx
pop dword ds:[ebp - 0x1728]
jmp 0x402c32
mov dword ds:[ebp - 0x1728], 0
jmp 0x402c32
mov edx, dword ds:[ebp - 0x1728]
jmp 0x402c40
push edx
pop dword ds:[ebp - 0x28c]
mov eax, dword ds:[ebp - 0x274]
jmp 0x402c56
cmp eax, dword ds:[ebp - 0x28c]
jmp 0x402c64
jne 0x402ec1
jmp 0x402c6e
mov dword ds:[ebp - 0x29c], 0
jmp 0x402c7e
mov byte ds:[ebp - 0x295], 0
jmp 0x402c8b
mov byte ds:[ebp - 0x297], 0xe0
jmp 0x402c98
mov byte ds:[ebp - 0x296], 0x20
jmp 0x402ca3
jmp 0x402cc2
mov ecx, dword ds:[ebp - 0x29c]
jmp 0x402cb2
add ecx, 1
jmp 0x402cba
push ecx
pop dword ds:[ebp - 0x29c]
mov edx, dword ds:[ebp - 0x29c]
jmp 0x402ccc
cmp edx, dword ds:[ebp - 0x28c]
jmp 0x402cda
jae 0x402d5a
jmp 0x402ce1
mov eax, dword ds:[ebp - 0x29c]
jmp 0x402cee
movsx ecx, byte ds:[eax]
jmp 0x402cf9
mov edx, dword ds:[ebp - 0x290]
jmp 0x402d04
add edx, dword ds:[ebp - 0x29c]
jmp 0x402d12
movsx eax, byte ds:[edx]
jmp 0x402d1d
sub ecx, eax
jmp 0x402d25
pushfd
push cx
mov byte ds:[ebp - 0x295], 0xaa
sub cl, 0xaa
add byte ds:[ebp - 0x295], cl
pop cx
popfd
movsx ecx, byte ds:[ebp - 0x295]
jmp 0x402d4c
test ecx, ecx
jmp 0x402d51
je 0x402e29
jmp 0x402d5a
movsx edx, byte ds:[ebp - 0x295]
jmp 0x402d66
cmp edx, 0xffffffe0
jmp 0x402d71
jne 0x402dc3
jmp 0x402d76
mov eax, dword ds:[ebp - 0x29c]
jmp 0x402d84
movsx ecx, byte ds:[eax]
jmp 0x402d8e
cmp ecx, 0x41
jmp 0x402d95
jl 0x402dc3
jmp 0x402da0
mov edx, dword ds:[ebp - 0x29c]
jmp 0x402daa
movsx eax, byte ds:[edx]
jmp 0x402db5
cmp eax, 0x5a
jmp 0x402dbc
jle 0x402e29
jmp 0x402dc3
movsx ecx, byte ds:[ebp - 0x295]
jmp 0x402dce
cmp ecx, 0x20
jmp 0x402dd6
jne 0x402e33
jmp 0x402dde
mov edx, dword ds:[ebp - 0x29c]
jmp 0x402de9
movsx eax, byte ds:[edx]
jmp 0x402df3
cmp eax, 0x61
jmp 0x402dfd
jl 0x402e33
jmp 0x402e04
mov ecx, dword ds:[ebp - 0x29c]
jmp 0x402e0f
movsx edx, byte ds:[ecx]
jmp 0x402e19
cmp edx, 0x7a
jmp 0x402e20
jg 0x402e33
jmp 0x402e29
jmp 0x402ca8
mov eax, dword ds:[ebp - 0x29c]
jmp 0x402e3f
cmp eax, dword ds:[ebp - 0x28c]
jmp 0x402e4b
jae 0x402e9d
jmp 0x402e53
mov ecx, dword ds:[ebp - 0x29c]
jmp 0x402e5d
movsx edx, byte ds:[ecx]
jmp 0x402e64
mov eax, dword ds:[ebp - 0x290]
jmp 0x402e6e
add eax, dword ds:[ebp - 0x29c]
jmp 0x402e7a
movsx ecx, byte ds:[eax]
jmp 0x402e86
sub edx, ecx
jmp 0x402e8b
push edx
pop dword ds:[ebp - 0x172c]
jmp 0x402eb0
mov dword ds:[ebp - 0x172c], 0
jmp 0x402eb0
cmp dword ds:[ebp - 0x172c], 0
jmp 0x402ebb
je 0x402eca
jmp 0x402ec1
jmp 0x402abd
mov edx, dword ds:[ebp - 0x278]
jmp 0x402ed6
mov eax, dword ds:[ebp - 0x1e0]
jmp 0x402ee2
add eax, dword ds:[edx]
jmp 0x402ee8
push eax
pop dword ds:[ebp - 0x288]
mov ecx, dword ds:[ebp - 0x288]
jmp 0x402efe
cmp dword ds:[ecx], 0
jmp 0x402f05
je 0x4030a3
jmp 0x402f0e
mov edx, dword ds:[ebp - 0x288]
jmp 0x402f19
mov eax, dword ds:[edx]
jmp 0x402f23
and eax, 0x80000000
jmp 0x402f2f
jne 0x403076
jmp 0x402f3b
cmp dword ds:[ebp - 0x27c], 0
jmp 0x402f47
je 0x4030a3
jmp 0x402f52
mov ecx, dword ds:[ebp - 0x288]
jmp 0x403083
add ecx, 4
jmp 0x40308a
mov dword ds:[ebp - 0x288], ecx
jmp 0x403097
jmp 0x402ef0
mov edx, dword ds:[ebp - 0x288]
jmp 0x4030ad
cmp dword ds:[edx], 0
jmp 0x4030b6
je 0x403150
jmp 0x4030c0
cmp dword ds:[ebp - 0x27c], 0
jmp 0x4030ce
je 0x4030fc
jmp 0x4030d4
mov eax, dword ds:[ebp - 0x288]
jmp 0x4030e3
mov ecx, dword ds:[eax]
jmp 0x4030e9
mov edx, dword ds:[ebp - 0x278]
jmp 0x40310a
mov eax, dword ds:[ebp - 0x288]
jmp 0x403114
sub eax, dword ds:[edx]
jmp 0x40311c
jmp 0x402abd
mov dword ds:[ebp - 0x2a8], 0
jmp 0x403169
mov ecx, dword ds:[ebp - 0x2a8]
jmp 0x403176
push ecx
pop dword ds:[ebp - 0xc0]
cmp dword ds:[ebp - 0xc0], 0
jmp 0x40318b
jne 0x4031a7
jmp 0x403192
mov byte ds:[ebp - 0x359], 0
jmp 0x40319f
jmp 0x406920
mov edx, dword ds:[ebp - 0xac]
jmp 0x4031b4
sub edx, 1
jmp 0x4031ba
not edx
jmp 0x4031c2
and edx, dword ds:[ebp - 0xc0]
jmp 0x4031ce
push edx
pop dword ds:[ebp - 0x1e4]
mov dword ds:[ebp - 0x1fc], 0
jmp 0x4031e4
push 0x7d931567
pushfd
add dword ds:[esp + 4], 0x826ceb9d
popfd
lea eax, [ebp - 0x1d8]
jmp 0x4031fe
pushfd
add eax, 0x54579df8
popfd
push eax
pushfd
xchg dword ds:[esp + 4], ebx
sub ebx, 0x54579df8
xchg dword ds:[esp + 4], ebx
sub eax, 0x54579df8
popfd
mov ecx, dword ds:[ebp - 0x1e4]
jmp 0x40322b
pushfd
add ecx, 0x2d29a9e7
popfd
push ecx
pushfd
xchg dword ds:[esp + 4], ebx
sub ebx, 0x2d29a9e7
xchg dword ds:[esp + 4], ebx
sub ecx, 0x2d29a9e7
popfd
notrack call dword ds:[ebp - 0xc0]
jmp 0x403259
test eax, eax
jmp 0x403261
jne 0x4032ca
jmp 0x40326a
mov eax, dword fs:[0x34]
jmp 0x403278
push eax
pop dword ds:[ebp - 0x1fc]
cmp dword ds:[ebp - 0x1fc], 0x7e
jmp 0x40328b
je 0x4032a5
jmp 0x403293
cmp dword ds:[ebp - 0x1fc], 0
jmp 0x40329f
jne 0x4032ca
jmp 0x4032a5
mov edx, dword ds:[ebp - 0x1e4]
jmp 0x4032af
sub edx, dword ds:[ebp - 0xac]
jmp 0x4032ba
push edx
pop dword ds:[ebp - 0x1e4]
jmp 0x4031e4
mov eax, dword ds:[ebp - 0x1e4]
jmp 0x4032d7
mov dword ds:[ebp - 0x14], eax
jmp 0x4032e1
cmp dword ds:[ebp - 0x14], 0
jmp 0x4032ed
jne 0x40330b
jmp 0x4032f5
mov byte ds:[ebp - 0x359], 0
jmp 0x403302
jmp 0x406920
call dword [sym.imp.KERNEL32.dll_GetProcessHeap]
jmp 0x403316
push eax
pop dword ds:[ebp - 0xc8]
mov ecx, dword ds:[ebp - 0x14]
jmp 0x403328
mov edx, dword ds:[ebp - 0x14]
jmp 0x403332
mov eax, dword ds:[ecx + 0x3c]
jmp 0x403339
lea ecx, [edx + eax + 0x78]
jmp 0x403343
mov dword ds:[ebp - 0xd4], ecx
jmp 0x40334e
mov edx, dword ds:[ebp - 0xd4]
jmp 0x403358
mov eax, dword ds:[edx + 4]
jmp 0x40335f
pushfd
add eax, 0x307b0328
popfd
push eax
pushfd
xchg dword ds:[esp + 4], ebx
sub ebx, 0x307b0328
xchg dword ds:[esp + 4], ebx
sub eax, 0x307b0328
popfd
push 0
jmp 0x403385
mov ecx, dword ds:[ebp - 0xc8]
jmp 0x403392
pushfd
add ecx, 0x2f096820
popfd
push ecx
pushfd
xchg dword ds:[esp + 4], edx
sub edx, 0x2f096820
xchg dword ds:[esp + 4], edx
sub ecx, 0x2f096820
popfd
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
jmp 0x4033c0
mov dword ds:[ebp - 0xd0], eax
jmp 0x4033cc
mov edx, dword ds:[ebp - 0xd4]
jmp 0x4033d6
mov eax, dword ds:[edx + 4]
jmp 0x4033dd
push eax
pop dword ds:[ebp - 0x2b4]
mov ecx, dword ds:[ebp - 0x14]
jmp 0x4033ef
mov edx, dword ds:[ebp - 0xd4]
jmp 0x4033fb
add ecx, dword ds:[edx]
jmp 0x403403
push ecx
pop dword ds:[ebp - 0x2b0]
mov dword ds:[ebp - 0x2ac], 0
jmp 0x40341b
jmp 0x403439
mov eax, dword ds:[ebp - 0x2ac]
jmp 0x40342b
add eax, 1
jmp 0x403431
push eax
pop dword ds:[ebp - 0x2ac]
mov ecx, dword ds:[ebp - 0x2ac]
jmp 0x403449
cmp ecx, dword ds:[ebp - 0x2b4]
jmp 0x403454
jae 0x4034af
jmp 0x40345d
mov edx, dword ds:[ebp - 0xd0]
jmp 0x403468
add edx, dword ds:[ebp - 0x2ac]
jmp 0x403474
mov eax, dword ds:[ebp - 0x2b0]
jmp 0x40347e
add eax, dword ds:[ebp - 0x2ac]
jmp 0x40348c
mov cl, byte ds:[eax]
jmp 0x403496
pushfd
push cx
mov byte ds:[edx], 0
sub cl, 0
add byte ds:[edx], cl
pop cx
popfd
jmp 0x403420
mov edx, dword ds:[ebp - 0xd0]
jmp 0x4034b9
push edx
pop dword ds:[ebp - 0xb0]
mov eax, dword ds:[ebp - 0xb0]
jmp 0x4034ce
mov ecx, dword ds:[ebp - 0xd0]
jmp 0x4034db
add ecx, dword ds:[eax + 0x20]
jmp 0x4034e2
mov edx, dword ds:[ebp - 0xd4]
jmp 0x4034ed
sub ecx, dword ds:[edx]
jmp 0x4034f4
mov dword ds:[ebp - 0xcc], ecx
jmp 0x403500
mov eax, dword ds:[ebp - 0xb0]
jmp 0x40350d
mov ecx, dword ds:[ebp - 0xd0]
jmp 0x403518
add ecx, dword ds:[eax + 0x24]
jmp 0x40351f
mov edx, dword ds:[ebp - 0xd4]
jmp 0x40352a
sub ecx, dword ds:[edx]
jmp 0x403530
push ecx
pop dword ds:[ebp - 0xc4]
mov eax, dword ds:[ebp - 0xb0]
jmp 0x403546
mov ecx, dword ds:[ebp - 0xd0]
jmp 0x403550
add ecx, dword ds:[eax + 0x1c]
jmp 0x40355b
mov edx, dword ds:[ebp - 0xd4]
jmp 0x403567