Function at 0x41e891
Capabilities:
Resolve function by parsing pe exports

Disassembly:
add ebp, 4
mov dword [0x427be8], esi
add esi, dword [0x427ae4]
cmp ebx, esi
jge 0x41c940
mov dword [0x4278ec], 0x2e
mov dword [0x427d08], ebx
mov ebx, 0xf
mov ebx, dword [0x427d08]
mov dword [0x4279f0], ecx
sub esp, 4
mov ecx, dword [0x4271e4]
push ecx
mov dword [0x427adc], eax
mov eax, dword [0x4278ec]
mov ecx, 0xf
mov dword [0x427b54], edi
mov edi, ebx
repne scasb al, byte es:[edi]
mov eax, edi
jmp 0x4180f2
lea ecx, [0x426608]
mov edx, dword [0x42693c]
xor edx, dword [0x426974]
add ebx, dword [esp + 0x454]
mov dword [0x427b30], eax
mov dword [0x427b68], ebx
push ebx
mov esi, dword [ecx + 0x1560]
mov dword [ebp + 0x2f4], esi
mov esi, dword [0x427b5c]
sub esp, 8
push esi
push dword fs:[0]
mov dword fs:[0], esp
mov ecx, dword [ebp + 0x318]
mov dword [0x427c08], ecx
mov eax, dword [0x427d1c]
mov dword [ebp + 0x2f0], ebx
mov dword [0x427bf0], edx
mov ebx, dword [ebp + 0x2fc]
push 0xa
push dword [0x426704]
push 0x14
push dword [0x42664c]
push dword [0x4268b8]
call fcn.00411cf0
mov dword [ebp - 8], 0x40
mov ebx, dword [edi + 0x1f4]
mov dword [ebp - 0xc], ebx
mov esi, dword [edi + 0x1550]
mov dword [ebp - 0x10], esi
mov edx, dword [0x427088]
sub esp, 0x18
push edx
sub esp, 0xc
mov dword [0x427d30], ecx
call dword [edi + 0xadc]
rol dword [0x427d30], 0x1d
push dword [0x42693c]
push ecx
push 0x1770
push 0x14
call fcn.0041672a
ret
mov ecx, dword [ecx + 0x1658]
mov edi, dword [0x42788c]
mov dword [0x427958], ebx
mov eax, dword [0x427870]
mov ebx, dword [ebp + 0x304]
jmp 0x40e40f
mov dword [esp + 0x2f8], ebx
mov eax, dword [0x427a08]
mov ebx, dword [esp + 0x304]
jmp 0x41daca
add ebp, 4
lea edx, [edx*4]
mov dword [ebp + 0x308], edi
mov edi, dword [0x427948]
mov ecx, dword [edx + edi]
add ecx, dword [esp + 0x448]
cmp ecx, ebx
jge 0x40c33b
mov dword [ebp + 0x358], ecx
jmp 0x421544
mov dword [esp + 0x2f8], edx
mov eax, dword [esp + 0x310]
mov edi, dword [0x427b98]
mov dword [0x4278a0], edi
mov dword [0x427b98], edx
mov edi, dword [0x4279e0]
mov edx, dword [esp + 0x300]
jmp 0x405bac
lea ebx, [0x426608]
mov eax, dword [0x4276bc]
add eax, dword [esp + 0x450]
lea esi, [0x426608]
mov ebx, dword [esi + 0x7f0]
add ebx, dword [esi + 0xa88]
mov dword [ebp - 0xc], 0x2294
mov dword [ebp - 0x10], 0
sub esp, 0xc
mov dword [0x427b5c], eax
call dword [esp + 0x44c]
push 0x1ab4
push 0x42
mov dword [ebp + 0x350], eax
call dword [esp + 0x44c]
push eax
call dword [esp + 0x3e0]
push dword [0x4267fc]
push 2
mov dword [ebp + 0x308], eax
call dword [esp + 0x44c]
push dword [0x426730]
push 0x3e8
call fcn.00412600
cmp dword [0x4279b0], 0
je 0x401477
mov esi, dword [0x42693c]
sub esp, 0xc
push esi
mov dword [0x427b30], eax
call dword [0x4279b0]
lea edx, [0x426608]
add ebx, dword [esp + 0x460]
mov edx, eax
mov dword [ebp + 0x2f4], ebx
mov dword [ebp + 0x2f0], ebx
add esp, 8
jmp 0x4014a9
mov ebx, dword [0x427ab8]
mov esi, dword [0x4279bc]
mov eax, dword [ebp + 0x444]
sub ebp, 4
jmp 0x403c03
lea ecx, [0x426608]
mov dword [ecx + 0x13bc], ebx
mov dword [ecx + 0x150c], edx
mov dword [ecx + 0x15cc], eax
mov dword [ecx + 0x1668], edi
mov eax, dword [ebp + 0x344]
mov dword [0x427b80], eax
mov eax, dword [ecx + 0x15cc]
sub esp, 4
sub ebp, 0x8c
jmp 0x40d298
mov dword [0x427880], eax
mov eax, dword [ebp + 0x448]
mov dword [0x4279bc], esi
mov esi, dword [0x427934]
mov eax, dword [esi]
and eax, 0xff
test eax, eax
je 0x40d3d0
mov dword [ebp + 0x300], edx
mov edx, dword [ebp + 0x2fc]
mov dword [0x427a24], edx
shl edx, 5
shr dword [0x427a24], 0x1b
or edx, dword [0x427a24]
sub eax, 0x41
add edx, eax
inc esi
mov dword [ebp + 0x2f8], esi
mov dword [0x427cbc], eax
mov dword [ebp + 0x2f4], edx
mov esi, dword [0x4279bc]
jmp 0x40d5c9
mov dword [esp + 0x304], ebp
mov ebp, esp
add ebp, 4
jmp 0x4131c2
add ebp, 4
lea edx, [edx*4]
mov dword [0x427c44], edx
mov dword [ebp + 0x444], ecx
mov ecx, dword [0x427a18]
mov ecx, dword [edx + ecx]
add ecx, edi
cmp ecx, dword [esp + 0x354]
jge 0x406096
mov dword [0x427a90], ecx
jmp 0x407460
mov eax, dword [0x427d04]
mov dword [0x427980], eax
mov ecx, dword [0x427888]
mov dword [ebp + 0x2ec], ecx
mov dword [0x427888], eax
mov ecx, dword [ebp + 0x2f8]
mov eax, dword [ebp + 0x2f0]
jmp 0x41580b
mov dword [ebp + 0x3d0], ecx
jmp 0x411a5b
mov dword [ebp + 0x308], eax
lea eax, [0x426608]
mov dword [0x427b90], edx
add edx, dword [eax + 0x16e8]
cmp ecx, edx
jge 0x41564c
mov eax, 0x2e
mov eax, ecx
mov eax, 0xf
mov ebx, ecx
mov dword [0x427cb0], edx
sub esp, 4
mov edx, dword [ebp + 0x3e0]
push edx
mov eax, 0x2e
mov ecx, 0xf
mov dword [ebp + 0x2f8], edi
mov edi, ebx
repne scasb al, byte es:[edi]
mov eax, edi
jmp 0x419b09
lea ebx, [ebx*4]
mov ecx, dword [ebx + edi]
add ecx, dword [esp + 0x448]
cmp ecx, dword [0x4279c4]
jge 0x41f0fe
mov dword [ebp + 0x3d0], edx
mov dword [0x427ad4], ecx
jmp 0x407e24
mov dword [0x427c60], ecx
lea ecx, [0x426608]
mov dword [ecx + 0x1284], edi
mov dword [0x427870], eax
mov edi, dword [0x427a84]
mov eax, dword [0x427ca4]
mov dword [ebp + 0x304], ebx
add ebx, edx
cmp dword [ecx + 0x1268], ebx
jge 0x401a9c
mov eax, 0x2e
mov eax, dword [0x427870]
mov eax, 0xf
mov ecx, dword [ecx + 0x1268]
mov dword [0x427d48], edx
sub esp, 4
mov edx, dword [ebp + 0x37c]
push edx
mov eax, 0x2e
mov ecx, 0xf
jmp 0x4163ad
sub edi, ebp
mov ecx, edi
mov dword [0x427bb8], esi
mov esi, ebp
mov edi, eax
rep movsb byte es:[edi], byte [esi]
mov dword [esp + 0x300], edx
mov edx, dword [0x426770]
mov dword [edi], edx
call dword [esp + 0x434]
push dword [esp + 0x300]
push eax
mov dword [esp + 0x300], eax
call dword [0x42747c]
mov edi, dword [esp + 0x300]
mov edx, dword [esp + 0x2f8]
mov dword [0x427c90], esi
mov ecx, eax
mov dword [0x427b0c], edx
mov esi, dword [0x427bb8]
mov edx, dword [esp + 0x2fc]
mov eax, dword [0x427944]
add esp, 4
mov ebp, esp
add ebp, 4
jmp 0x404274
sub edi, ebp
mov ecx, edi
mov dword [0x4279b4], esi
mov esi, ebp
mov edi, eax
rep movsb byte es:[edi], byte [esi]
mov dword [esp + 0x2fc], esi
mov dword [0x4279a8], ebp
mov dword [esp + 0x2f8], ebx
mov eax, dword [0x426770]
mov dword [edi], eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push dword [esp + 0x2fc]
push eax
mov dword [0x427a1c], eax
call dword [0x42747c]
mov ecx, dword [0x427a1c]
mov esi, dword [0x4279b4]
mov edx, dword [0x427c44]
mov edi, dword [esp + 0x300]
mov dword [0x427790], eax
mov dword [esp + 0x304], ecx
mov eax, dword [esp + 0x308]
mov ecx, dword [0x427790]
add esp, 4
mov ebp, esp
add ebp, 4
jmp 0x403c34
mov dword [0x4279e0], edi
mov dword [esp + 0x310], eax
mov edi, dword [0x427a84]
mov eax, dword [0x427ca4]
mov dword [esp + 0x304], ecx
mov dword [esp + 0x300], edx
mov edx, dword [esp + 0x30c]
mov eax, dword [edx]
and eax, 0xff
test eax, eax
je 0x4139d9
mov edx, dword [0x427b98]
mov dword [esp + 0x2fc], edx
shl edx, 5
shr dword [0x427b98], 0x1b
or edx, dword [0x427b98]
sub eax, 0x41
add edx, eax
inc dword [esp + 0x30c]
mov dword [0x427b4c], eax
mov edi, dword [0x4279e0]
jmp 0x40278e
mov dword [ebp + 0x2e8], eax
mov eax, dword [esi + 0x12bc]
mov dword [esi + 0x16a0], edx
mov edx, dword [ebp + 0x2f8]
mov dword [esi + 0x13d4], edx
mov ecx, dword [ebp + 0x2ec]
mov dword [ebp + 0x2f8], ecx
mov ecx, dword [ebp + 0x2f4]
mov edx, dword [esi + 0x16a0]
jmp 0x40a29f
mov dword [0x427a04], eax
and dword [esp + 0x304], 0x7fffffff
mov eax, dword [0x427bc0]
mov dword [esp + 0x300], ebp
mov ebp, dword [esp + 0x304]
cmp ebp, dword [esp + 0x444]
je 0x408544
mov ebp, esp
inc dword [0x427c04]
mov dword [ebp + 0x2fc], ecx
mov ebp, dword [ebp + 0x300]
mov edi, dword [0x427c10]
mov edx, dword [0x427b08]
mov ecx, dword [esp + 0x30c]
jmp 0x41a34d
mov edx, dword [ebp + 0x350]
add edx, dword [0x4278e8]
cmp ecx, edx
jge 0x41b22b
mov ebp, 0x2e
mov ebp, ecx
mov ecx, 0xf
mov ecx, ebp
mov dword [esp + 0x2fc], edi
sub esp, 4
mov edi, dword [esp + 0x3bc]
push edi
mov dword [esp + 0x30c], eax
mov eax, 0x2e
mov ecx, 0xf
mov edi, ebp
repne scasb al, byte es:[edi]
mov eax, edi
mov eax, dword [esp + 0x3c0]
mov dword [esp + 0x300], edi
jmp 0x4051e9
mov eax, dword [esp + 0x310]
mov dword [0x4278c0], esi
mov esi, dword [0x426f6c]
mov dword [0x427d40], esi
and esi, 0xffff
mov dword [esp + 0x304], esi
sub esi, dword [esp + 0x354]
cmp esi, dword [0x427c7c]
jge 0x413174
mov dword [esp + 0x300], esi
mov dword [0x427b94], ecx
mov eax, dword [esp + 0x30c]
mov esi, dword [0x4278c0]
mov dword [0x427d20], eax
mov ecx, dword [esp + 0x300]
mov dword [esp + 0x300], ebp
jmp 0x41da9c
lea esi, [0x426608]
mov dword [0x427a90], 0
mov ecx, dword [edi + 0x3c]
add ecx, edi
mov edx, dword [ecx + 0x7c]
mov ebx, dword [ecx + 0x78]
add ebx, edi
test ebx, ebx
je 0x416055
lea esi, [0x426608]
mov ecx, dword [ebx + 0x14]
mov ebp, dword [ebx + 0x18]
mov esi, dword [ebx + 0x10]
mov dword [0x427ca4], eax
mov eax, dword [ebx + 0x20]
add eax, edi
mov dword [esp + 0x448], eax
mov eax, dword [ebx + 0x24]
add eax, edi
mov dword [0x427a84], edi
mov edi, dword [ebx + 0x1c]
add edi, dword [0x427a84]
test dword [esp + 0x380], 0x80000000
jmp 0x41e43a
mov dword [ebp + 0x300], ebx
mov ebx, dword [0x4279e8]
jmp 0x40211a
mov dword [ebp + 0x358], esi
mov dword [ebp + 0x350], edi
mov edi, dword [0x427a3c]
mov esi, dword [edi + 0x1c]
add esi, dword [esp + 0x448]
mov dword [0x42795c], ebx
mov dword [ebp + 0x3d0], edx
mov edx, dword [0x427a3c]
mov edx, dword [edx + 0x24]
add edx, dword [esp + 0x448]
mov dword [0x427cd8], 0
mov dword [ebp + 0x30c], ebx
mov ebx, dword [0x427cd8]
cmp ebx, dword [esp + 0x35c]
jg 0x40cc1c
add ebx, ebx
add ebx, dword [0x427cd8]
add ebx, dword [0x427cd8]
mov dword [0x4278e0], edi
mov edi, dword [ebp + 0x30c]
mov dword [0x427c14], edi
add edi, ebx
mov dword [ebp + 0x308], ecx
mov ecx, dword [edi]
add ecx, dword [esp + 0x448]
mov dword [ebp + 0x300], ecx
mov dword [0x427888], 0
jmp 0x41580b
mov dword [ebp + 0x2fc], ecx
mov dword [ebp + 0x2f8], esi
mov dword [0x427c48], ebx
mov esi, dword [0x427cac]
mov ecx, dword [ebp + 0x2f8]
jmp 0x4126bf
mov dword [0x427d34], ecx
mov ecx, dword [0x427cf0]
jmp 0x4027ff
mov ebx, dword [ebp + 0x444]
mov ecx, dword [ebx + 0x3c]
add ecx, ebx
mov edx, dword [ecx + 0x7c]
mov ebx, dword [ecx + 0x78]
add ebx, dword [esp + 0x448]
test ebx, ebx
je 0x411a4b
lea edi, [0x426608]
mov ecx, dword [ebx + 0x14]
mov esi, dword [ebx + 0x18]
mov edi, dword [ebx + 0x10]
mov dword [0x427a3c], ebx
mov ebx, dword [ebx + 0x20]
add ebx, dword [esp + 0x448]
test dword [esp + 0x378], 0x80000000
je 0x407b2c
mov dword [ebp + 0x358], esi
mov dword [ebp + 0x350], edi
mov edi, dword [0x427a3c]
mov esi, dword [edi + 0x1c]
jmp 0x40c931
mov dword [ebp + 0x2f8], edi
sub edi, edx
mov ecx, edi
mov esi, edx
mov edi, eax
rep movsb byte es:[edi], byte [esi]
mov dword [ebp + 0x2f4], edi
mov eax, dword [0x426770]
mov dword [edi], eax
mov dword [0x427a30], edx
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push dword [esp + 0x300]
push eax
mov dword [ebp + 0x2f0], eax
call dword [0x42747c]
mov ecx, dword [ebp + 0x2f0]
mov dword [0x427ac8], eax
mov ebx, dword [0x4278d4]
mov edi, dword [ebp + 0x2fc]
mov dword [0x427a40], ecx
mov eax, dword [0x427a60]
mov ecx, dword [0x427978]
mov edx, dword [0x427ac8]
add esp, 4
jmp 0x40b499
mov dword [ebp + 0x2fc], ebx
mov ebx, dword [0x4278d4]
jmp 0x40b499
mov dword [esp + 0x300], edx
mov edx, dword [0x427ae4]
mov dword [esp + 0x310], ebx
mov dword [0x427aac], esi
mov esi, dword [esp + 0x354]
mov edx, dword [esi + 0x1c]
add edx, edi
mov ebx, esi
mov dword [0x427cc0], edx
mov edx, dword [0x427ae4]
mov dword [0x427960], ebp
mov ebp, esp
add ebp, 4
jmp 0x4091d5
mov ebp, esp
mov edi, dword [ebp + 0x310]
add edi, dword [0x427c04]
add edi, dword [0x427c04]
mov eax, dword [edi]
and eax, 0xffff
mov ecx, dword [ebp + 0x30c]
mov ebp, dword [ebp + 0x300]
mov edx, eax
mov dword [esp + 0x2fc], esi
mov dword [0x427a9c], edi
mov esi, dword [0x427b08]
mov edi, dword [esp + 0x448]
mov dword [0x427ae4], esi
mov ebp, dword [0x427c10]
mov esi, dword [esp + 0x2fc]
mov eax, dword [0x427bc0]
mov dword [esp + 0x30c], ebp
mov ebp, dword [esp + 0x300]
jmp 0x41006e
lea esi, [0x426608]
mov dword [0x427d18], 0
mov ecx, dword [edi + 0x3c]
add ecx, edi
mov edx, dword [ecx + 0x7c]
mov ebx, dword [ecx + 0x78]
add ebx, edi
test ebx, ebx
je 0x407450
lea esi, [0x426608]
mov ecx, dword [ebx + 0x14]
mov esi, dword [ebx + 0x18]
mov dword [ebp + 0x444], eax
mov eax, dword [ebx + 0x10]
mov ebp, dword [ebx + 0x20]
add ebp, edi
mov dword [esp + 0x354], ebx
mov ebx, dword [ebx + 0x24]
add ebx, edi
test dword [0x426fec], 0x80000000
je 0x418a6d
mov dword [esp + 0x30c], ebp
mov ebp, esp
jmp 0x41f6c6
mov dword [0x427bcc], edi
mov dword [ebp + 0x3d0], eax
mov eax, dword [0x427ac0]
mov eax, dword [eax]
and eax, 0xff
test eax, eax
je 0x40ed19
mov dword [0x427aec], edx
mov edx, dword [0x427c78]
mov dword [0x427b04], edx
shl edx, 5
shr dword [0x427b04], 0x1b
or edx, dword [0x427b04]
sub eax, 0x41
add edx, eax
inc dword [0x427ac0]
mov dword [0x4279fc], edx
mov dword [0x4278bc], eax
mov edx, dword [0x427aec]
mov eax, dword [ebp + 0x3d0]
mov dword [ebp + 0x30c], ecx
jmp 0x40b87e
mov dword [ebp + 0x2f4], ecx
mov ecx, dword [ebp + 0x2fc]
mov ecx, dword [ecx]
and ecx, 0xff
test ecx, ecx
je 0x415c21
lea esi, [0x426608]
mov dword [0x4278c4], eax
mov eax, dword [ebp + 0x2f8]
mov dword [ebp + 0x2f0], eax
shl eax, 5
shr dword [esp + 0x2fc], 0x1b
or eax, dword [esp + 0x2fc]
sub ecx, 0x41
add eax, ecx
inc dword [esp + 0x300]
mov dword [0x427cfc], ecx
mov dword [ebp + 0x2ec], eax
mov ecx, dword [ebp + 0x2f4]
mov eax, dword [0x4278c4]
mov eax, dword [ebp + 0x2ec]
jmp 0x405c97
mov dword [ebp + 0x2fc], ebx
mov dword [0x427b00], edx
mov ebx, dword [ebp + 0x354]
mov edx, dword [0x4278e8]
add ebp, 4
jmp 0x407456
shl dword [0x427954], 2
mov dword [ebp + 0x300], edx
mov edx, dword [0x427954]
mov edx, dword [edx + eax]
add edx, edi
cmp edx, ebx
jge 0x40cafd
mov dword [0x427b48], edx
jmp 0x4126c9
mov ecx, dword [0x4279fc]
mov dword [ebp + 0x350], ecx
mov ecx, dword [ebp + 0x30c]
mov dword [0x427938], ebx
mov ebx, dword [0x4279fc]
mov dword [0x427c78], ebx
mov ebx, dword [0x427938]
jmp 0x409e96
mov dword [esp + 0x354], 0
mov dword [0x427a8c], edi
mov dword [0x427bb0], eax
cmp dword [esp + 0x354], ebp
mov edi, dword [0x427a84]
mov eax, dword [0x427ca4]
jg 0x40e741
mov dword [0x42794c], ebx
mov ebx, dword [esp + 0x354]
add ebx, ebx
add ebx, dword [esp + 0x354]
add ebx, dword [esp + 0x354]
mov eax, dword [esp + 0x448]
mov dword [esp + 0x310], eax
add eax, ebx
mov edi, dword [eax]
add edi, dword [0x427a84]
mov dword [esp + 0x30c], edi
mov dword [0x427b98], 0
jmp 0x405bac
mov dword [ebp + 0x2f0], edi
mov edi, dword [ebp + 0x350]
add edi, dword [esp + 0x30c]
add edi, dword [esp + 0x30c]
mov eax, dword [edi]
and eax, 0xffff
mov dword [ebp + 0x2ec], ebx
mov dword [0x427b38], edx
mov esi, eax
mov dword [ebp + 0x2e4], ecx
mov dword [0x427bb4], edi
mov ebx, dword [0x427a74]
mov edx, dword [0x427a64]
mov ecx, dword [ebp + 0x2fc]
mov edi, dword [ebp + 0x2f0]
mov dword [0x4278ac], edx
mov dword [ebp + 0x2e8], ecx
mov ebp, dword [ebp + 0x2f4]
mov dword [esp + 0x300], ebp
mov eax, dword [0x4278b0]
jmp 0x41c83f
mov dword [0x4279e8], ebx
add ebx, dword [esp + 0x310]
cmp ecx, ebx
jge 0x4074be
mov edi, 0x2e
mov edi, ecx
mov ecx, 0xf
mov ecx, edi
mov edi, dword [0x42725c]
sub esp, 4
push edi
mov dword [ebp + 0x300], eax
mov eax, 0x2e
mov dword [0x427aa4], ecx
mov ecx, 0xf
mov edi, dword [0x427aa4]
repne scasb al, byte es:[edi]
mov eax, edi
mov eax, dword [0x42725c]
mov dword [ebp + 0x2fc], edi
jmp 0x40eae1
and dword [0x427888], 0x7fffffff
mov dword [0x427c88], ecx
mov ecx, dword [0x427888]
cmp ecx, dword [esp + 0x378]
je 0x40da09
inc dword [0x427cd8]
mov ecx, dword [ebp + 0x308]
mov ebx, dword [0x427c14]
mov dword [ebp + 0x2f8], edx
mov dword [0x427b44], edi
mov edx, dword [ebp + 0x2fc]
mov edi, dword [0x4278e0]
jmp 0x407b6e
add esi, dword [esp + 0x448]
mov dword [0x42795c], ebx
mov dword [ebp + 0x3d0], edx
mov edx, dword [0x427a3c]
mov edx, dword [edx + 0x24]
add edx, dword [esp + 0x448]
mov dword [ebp + 0x308], ecx
mov ecx, dword [ebp + 0x374]
mov dword [ebp + 0x30c], ecx
and ecx, 0xffff
mov dword [0x427b0c], ecx
sub ecx, dword [esp + 0x354]
cmp ecx, dword [esp + 0x30c]
jge 0x41b9ac
jmp 0x420150
mov dword [0x4278d4], ebx
add ebx, dword [esp + 0x304]
cmp edx, ebx
jge 0x40832c
mov esi, 0x2e
mov esi, edx
mov edx, 0xf
mov edx, esi
mov esi, dword [0x4272f4]
sub esp, 4
push esi
mov dword [0x427a60], eax
mov eax, 0x2e
mov dword [0x427978], ecx
mov ecx, 0xf
mov dword [ebp + 0x2fc], edi
mov edi, edx
repne scasb al, byte es:[edi]
mov eax, edi
mov eax, esi
jmp 0x4080bb
mov ebx, edi
mov dword [0x427a94], edx
mov edx, dword [ebp + 0x3d0]
jmp 0x411a51
mov dword [0x4278dc], 0
mov ecx, dword [0x4278dc]
mov dword [0x427ad4], ecx
jmp 0x407e24
mov dword [ebp + 0x300], eax
and dword [esp + 0x2fc], 0x7fffffff
mov eax, dword [ebp + 0x448]
mov dword [0x427c68], edx
mov edx, dword [ebp + 0x2fc]
cmp edx, dword [0x426fec]
je 0x40e444
add ebp, 4
inc dword [0x427c38]
mov esi, dword [0x4279bc]
mov eax, dword [ebp + 0x300]
mov edx, dword [0x427c68]
sub ebp, 4
jmp 0x418aa3
mov eax, dword [0x427880]
mov dword [ebp + 0x2fc], edx
mov esi, dword [ebp + 0x2f8]
mov dword [0x427934], esi
mov esi, dword [0x4279bc]
mov edx, dword [ebp + 0x300]
jmp 0x402edb
mov ecx, dword [ebp + 0x2fc]
add ecx, dword [0x427cd8]
add ecx, dword [0x427cd8]
mov ebx, dword [ecx]
and ebx, 0xffff
mov dword [0x427c40], ecx
mov dword [0x427d44], edx
mov edi, dword [0x4278e0]
mov ecx, ebx
mov edx, dword [ebp + 0x2fc]
mov ebx, dword [0x427c14]
jmp 0x420150
mov eax, edi
mov eax, ebx
mov dword [esp + 0x2fc], edi
sub edi, ebp
mov ecx, edi
mov dword [0x427c50], esi
mov esi, ebp
mov edi, eax
rep movsb byte es:[edi], byte [esi]
mov dword [esp + 0x2f8], edi
mov dword [0x427ca0], ecx
mov ecx, dword [0x426770]
mov dword [edi], ecx
mov dword [esp + 0x2f4], edx
call dword [esp + 0x434]
push dword [esp + 0x2f8]
push eax
mov dword [0x427cd4], eax
call dword [0x42747c]
mov dword [0x427b6c], esi
mov ecx, dword [esp + 0x2fc]
mov ebp, dword [0x427d20]
mov ebx, dword [esp + 0x308]
mov edx, dword [esp + 0x2f0]
mov edi, dword [0x42797c]
mov esi, dword [0x427c50]
add esp, 4
jmp 0x41daca
lea edi, [edi*4]
mov dword [ebp + 0x310], esi
mov esi, dword [0x427bd0]
mov eax, dword [edi + esi]
add eax, dword [0x427a84]
cmp eax, ebx
jge 0x404a66
mov dword [ebp + 0x304], edi
mov dword [ebp + 0x300], eax
mov edi, dword [0x427a84]
mov eax, dword [0x427ca4]
mov eax, dword [ebp + 0x300]
mov dword [ebp + 0x448], eax
mov eax, dword [0x427ca4]
add ebp, 4
jmp 0x416065
add ebp, 4
mov esi, dword [0x4279bc]
mov ecx, dword [ebp + 0x308]
mov edx, dword [0x427c38]
mov dword [ebp + 0x2f4], edi
mov dword [0x427ae8], ebx
mov eax, dword [0x427c68]
mov dword [0x427ab8], ebx
mov edi, dword [ebp + 0x300]
mov dword [0x4278e8], eax
add ebx, edx
mov dword [0x427a18], edi
add ebx, edx
mov eax, dword [ebx]
and eax, 0xffff
mov edx, eax
mov esi, dword [0x427998]
mov dword [0x427868], ebx
mov edi, dword [ebp + 0x2f4]
mov dword [ebp + 0x308], esi
jmp 0x402b47
mov dword [esp + 0x310], ebp
mov ebp, esp
add ebp, 4
jmp 0x41605b
sub edi, dword [0x427aa4]
mov ecx, edi
mov dword [ebp + 0x2f8], esi
mov esi, dword [0x427aa4]
mov edi, eax
rep movsb byte es:[edi], byte [esi]
mov ebx, dword [0x426770]
mov dword [edi], ebx
mov dword [ebp + 0x2f4], edx
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push dword [esp + 0x304]
push eax
mov dword [0x427a6c], eax
call dword [0x42747c]
mov ecx, dword [0x427a6c]
mov dword [ebp + 0x2f0], esi
mov edx, dword [ebp + 0x2f4]
mov edi, dword [0x427948]
mov ebx, dword [0x4279e8]
mov dword [0x427d10], eax
mov dword [0x4278d8], ecx
mov esi, dword [ebp + 0x2f8]
mov eax, dword [ebp + 0x300]
mov ecx, dword [0x427d10]
add esp, 4
jmp 0x40211a
mov ebx, dword [0x427cb8]
add ebx, dword [esp + 0x304]
add ebx, dword [esp + 0x304]
mov edx, dword [ebx]
and edx, 0xffff
mov dword [ebp + 0x2ec], ecx
mov esi, dword [0x427c00]
mov dword [0x427954], edx
mov dword [0x427c20], eax
mov ecx, dword [ebp + 0x2fc]
mov dword [0x427cac], esi
mov eax, dword [ebp + 0x308]
mov dword [0x4278a4], eax
mov dword [0x4278b8], ebx
mov ebx, dword [0x427c80]
mov dword [ebp + 0x308], ebx
mov eax, dword [0x427c20]
mov ebx, dword [0x4278a4]
mov edx, dword [0x427a50]
jmp 0x40b479
mov dword [0x427bdc], eax
and dword [0x427c78], 0x7fffffff
mov eax, dword [ebp + 0x3d0]
mov eax, dword [0x427c78]
cmp eax, dword [0x427b80]
je 0x41f20b
mov eax, dword [ebp + 0x3d0]
inc dword [0x427774]
mov dword [0x4278fc], ecx
mov dword [ebp + 0x350], esi
mov dword [ebp + 0x30c], edx
mov ecx, dword [ebp + 0x358]
mov esi, dword [0x4279b8]
mov edx, dword [0x427b80]
mov dword [ebp + 0x3d0], edx
jmp 0x41e37a
mov dword [0x427ae4], edx
mov edx, dword [esp + 0x444]
mov dword [esp + 0x304], edx
and edx, 0xffff
mov dword [0x427ce0], edx
sub edx, ebp
cmp edx, ecx
jge 0x4084fd
mov dword [esp + 0x310], ebx
mov dword [0x427aac], esi
mov esi, dword [esp + 0x354]
mov ebx, dword [esi + 0x1c]
add ebx, edi
jmp 0x41006e
mov eax, dword [ebp + 0x3d0]
mov dword [0x4279c4], edx
mov edx, dword [0x427bd8]
jmp 0x40468e
mov dword [esp + 0x448], ebp
lea edx, [edx*4]
mov ebp, esp
mov dword [0x427b60], ebx
mov ebx, dword [edx + ebx]
add ebx, edi
cmp ebx, esi
jge 0x4012b4
add ebp, 4
mov dword [0x427d18], ebx
jmp 0x4091df
jmp 0x40e3eb
test dword [esp + 0x3d0], 0x80000000
je 0x41e361
mov dword [0x427d24], ebp
mov ebp, esp
push ecx
lea ecx, [0x426608]
mov dword [0x4279c4], ebx
mov ebx, dword [ebp + 0x3d0]
mov dword [ecx + 0x1578], ebx
and ebx, 0xffff
mov dword [ebp + 0x358], ebx
sub ebx, edx
cmp ebx, dword [ebp - 4]
jge 0x40d298
jmp 0x40468e
mov dword [esp + 0x30c], 0
mov dword [0x427d20], eax
cmp dword [esp + 0x30c], esi
mov eax, dword [esp + 0x310]
jg 0x4038a5
mov dword [esp + 0x304], edi
mov edi, dword [esp + 0x30c]
add edi, edi
add edi, dword [esp + 0x30c]
add edi, dword [esp + 0x30c]
mov dword [0x427b94], ecx
add ecx, edi
mov eax, dword [ecx]
add eax, dword [esp + 0x304]
mov dword [0x427a48], eax
mov dword [0x427b20], 0
jmp 0x4129dc
lea edi, [0x426608]
mov dword [ebp + 0x3d0], 0
mov ebx, dword [ebp + 0x444]
mov ecx, dword [ebx + 0x3c]
add ecx, ebx
mov edx, dword [ecx + 0x7c]
mov ebx, dword [ecx + 0x78]
add ebx, dword [esp + 0x448]
test ebx, ebx
je 0x421534
lea esi, [0x426608]
mov ecx, dword [ebx + 0x14]
mov esi, dword [ebx + 0x18]
mov edi, dword [ebx + 0x10]
mov dword [0x427ad0], ecx
mov ecx, dword [ebx + 0x20]
add ecx, dword [esp + 0x448]
mov dword [0x427d28], eax
mov eax, dword [ebx + 0x24]
add eax, dword [esp + 0x448]
mov ebp, dword [ebx + 0x1c]
add ebp, dword [esp + 0x448]
test dword [0x4272e0], 0x80000000
jmp 0x417d03
mov dword [0x427d2c], edx
mov ebx, dword [esp + 0x30c]
mov esi, dword [esp + 0x2f4]
mov edx, dword [0x427a50]
mov dword [esp + 0x2ec], ecx
mov edx, dword [esp + 0x2f0]
mov ecx, dword [0x427cd0]
mov dword [esp + 0x2fc], edx
mov dword [0x42789c], ecx
mov ecx, dword [esp + 0x2ec]
mov ebx, dword [0x42789c]
mov edx, dword [0x427a50]
mov dword [esp + 0x2f8], ebx
mov ebx, dword [esp + 0x30c]
jmp 0x412ab3
test dword [esp + 0x340], 0x80000000
je 0x412bf2
mov dword [0x427cac], esi
lea esi, [0x426608]
mov esi, dword [ebp + 0x33c]
mov dword [ebp + 0x300], esi
and esi, 0xffff
mov dword [0x427a40], esi
sub esi, dword [0x427cac]
cmp esi, ecx
jge 0x407c9c
mov dword [0x427954], esi
lea esi, [0x426608]
jmp 0x40b479
mov dword [ebp + 0x30c], edx
mov edx, dword [ebp + 0x310]
add ebp, 4
jmp 0x42153a
mov dword [0x427c48], ebx
lea ebx, [0x426608]
mov dword [0x427b48], 0
mov eax, dword [edi + 0x3c]
add eax, edi
mov ecx, dword [eax + 0x7c]
mov edx, dword [eax + 0x78]
add edx, edi
test edx, edx
je 0x4027f9
lea esi, [0x426608]
mov eax, dword [edx + 0x14]
mov ebx, dword [edx + 0x18]
mov esi, dword [edx + 0x10]
mov dword [0x427a98], eax
mov eax, dword [edx + 0x20]
add eax, edi
mov dword [0x427cf0], ecx
mov ecx, dword [edx + 0x24]
add ecx, edi
mov dword [ebp + 0x350], ecx
mov ecx, dword [edx + 0x1c]
add ecx, edi
test dword [esp + 0x388], 0x80000000
jmp 0x4203bb
mov dword [0x427bec], edi
mov dword [0x427a20], eax
mov edi, dword [esp + 0x304]
mov eax, dword [esp + 0x310]
mov dword [0x4277ac], esi
mov dword [esp + 0x300], ebp
mov ebp, dword [0x427a48]
mov eax, dword [ebp]
and eax, 0xff
test eax, eax
je 0x41f646
mov esi, dword [0x427b20]
mov dword [0x427c34], esi
shl esi, 5
shr dword [0x427b20], 0x1b
or esi, dword [0x427b20]
sub eax, 0x41
add esi, eax
inc ebp
mov dword [esp + 0x2fc], esi
mov dword [0x427c6c], ebp
jmp 0x41b1a9
mov dword [0x4278cc], ebp
mov ebp, esp
mov dword [0x427a50], edx
mov dword [ebp + 0x30c], ebx
mov ebx, dword [ebp + 0x2fc]
mov edx, dword [ebx]
and edx, 0xff
test edx, edx
je 0x415af5
mov dword [ebp + 0x2f4], esi
mov esi, dword [ebp + 0x2f8]
mov dword [0x427ac4], esi
shl esi, 5
shr dword [0x427ac4], 0x1b
or esi, dword [0x427ac4]
sub edx, 0x41
add esi, edx
inc ebx
mov dword [ebp + 0x2f0], ebx
mov dword [0x427cd0], esi
mov ebp, dword [0x4278cc]
jmp 0x411bf9
mov dword [ebp + 0x300], 0
mov dword [ebp + 0x2fc], ecx
mov ecx, dword [ebp + 0x300]
cmp ecx, dword [esp + 0x354]
jg 0x4126b3
add ecx, ecx
add ecx, dword [esp + 0x304]
add ecx, dword [esp + 0x304]
mov dword [0x427c00], esi
mov esi, dword [ebp + 0x308]
mov dword [0x427c80], esi
add esi, ecx
mov ebp, dword [esi]
add ebp, edi
mov dword [esp + 0x2fc], ebp
mov dword [esp + 0x2f8], 0
jmp 0x412ab3
mov dword [0x4279f4], ecx
mov ecx, dword [0x427cf0]
jmp 0x4027ff
mov dword [0x427914], ebp
mov ebp, esp
add ebp, 4
jmp 0x4131c2
mov dword [0x4279b0], 0
mov ecx, dword [edi + 0x3c]
add ecx, edi
mov edx, dword [ecx + 0x7c]
mov ebx, dword [ecx + 0x78]
add ebx, edi
test ebx, ebx
je 0x418184
lea esi, [0x426608]
mov ecx, dword [ebx + 0x14]
mov esi, dword [ebx + 0x18]
mov dword [ebp + 0x350], esi
mov esi, dword [ebx + 0x10]
mov dword [ebp + 0x30c], eax
mov eax, dword [ebx + 0x20]
add eax, edi
mov dword [ebp + 0x308], eax
mov eax, dword [ebx + 0x24]
add eax, edi
mov dword [0x427cb8], eax
mov eax, dword [ebx + 0x1c]
add eax, edi
jmp 0x411ecb
mov dword [esp + 0x354], ebx
mov eax, dword [0x427bc0]
mov ebx, esi
mov dword [esp + 0x30c], ebp
mov ebp, esp
add ebp, 4
jmp 0x4091d5
add ebp, 4
jmp 0x42153a
mov dword [esp + 0x2fc], eax
and dword [0x427b98], 0x7fffffff
mov eax, dword [0x427ca4]
mov edi, dword [0x427b98]
cmp edi, dword [esp + 0x380]
je 0x41e06e
mov edi, dword [0x427a84]
inc dword [esp + 0x354]
mov edi, dword [0x427a8c]
mov eax, dword [0x427bb0]
mov dword [0x427be0], ebx
mov edx, dword [esp + 0x300]
mov ebx, dword [0x42794c]
jmp 0x40be23
mov edi, dword [ebp + 0x300]
mov eax, dword [ebp + 0x304]
mov eax, dword [0x4279d0]
mov dword [0x4278b4], ecx
mov dword [ebp + 0x2f0], eax
mov ecx, dword [0x427908]
mov dword [0x4279d0], edx
mov dword [ebp + 0x30c], ecx
mov ecx, dword [0x4278b4]
mov eax, dword [ebp + 0x304]
mov edx, dword [ebp + 0x2f8]
jmp 0x41e2f1
mov eax, dword [ebp + 0x308]
mov dword [ebp + 0x2f8], edi
mov edi, dword [0x427b90]
mov dword [ebp + 0x308], edi
mov edi, dword [ebp + 0x2f8]
jmp 0x420429
mov dword [ebp + 0x30c], ebx
mov dword [ebp + 0x2fc], edx
mov edx, dword [ebp + 0x300]
mov edx, dword [edx]
and edx, 0xff
test edx, edx
je 0x40c536
mov dword [ebp + 0x2f8], ecx
mov ecx, dword [0x427888]
mov dword [0x4279ec], ecx
shl ecx, 5
shr dword [0x427888], 0x1b
or ecx, dword [0x427888]
sub edx, 0x41
add ecx, edx
inc dword [esp + 0x304]
mov dword [ebp + 0x2f4], edx
mov dword [0x427d04], ecx
mov edx, dword [ebp + 0x2fc]
mov ecx, dword [ebp + 0x2f8]
mov dword [ebp + 0x2f0], eax
jmp 0x40406b
add ebp, 4
and dword [esp + 0x2f8], 0x7fffffff
mov dword [ebp + 0x2f0], edx
mov edx, dword [ebp + 0x2f4]
cmp edx, dword [esp + 0x340]
je 0x40eb68
inc dword [esp + 0x304]
mov dword [0x427984], ecx
mov dword [ebp + 0x2ec], esi
mov edx, dword [ebp + 0x308]
mov ecx, dword [ebp + 0x2fc]
mov esi, dword [0x427c00]
mov dword [ebp + 0x2e8], edx
mov dword [0x427968], edi
mov edi, dword [0x427c80]
mov dword [ebp + 0x308], edi
mov ebx, edx
mov edi, dword [0x427968]
mov edx, dword [0x427a50]
jmp 0x412bfc
lea esi, [0x426608]
and dword [esp + 0x2fc], 0x7fffffff
mov esi, dword [ebp + 0x2f8]
cmp esi, dword [esp + 0x388]
je 0x40c246
mov dword [ebp + 0x2f0], eax
lea eax, [0x426608]
inc dword [esp + 0x30c]
mov dword [eax + 0x166c], ebx
mov esi, dword [0x427a64]
mov dword [ebp + 0x2ec], ecx
mov dword [eax + 0x1424], edx
mov ebx, dword [eax + 0x146c]
mov ecx, dword [ebp + 0x2f4]
mov edx, dword [ebp + 0x300]
mov eax, dword [0x4278b0]
jmp 0x41d436
mov dword [0x427b10], eax
mov dword [0x427c98], ebx
mov dword [ebp + 0x350], edi
pop eax
mov ebx, ecx
mov edi, dword [0x4278f0]
mov dword [0x427970], eax
mov dword [0x427d24], edi
mov dword [0x427ab0], esi
mov esi, dword [ebp + 0x358]
push esi
mov edx, eax
mov esi, dword [0x427ab0]
mov edi, dword [ebp + 0x350]
mov ecx, dword [0x427c98]
mov dword [0x4279c4], ecx
mov eax, dword [0x427b10]
jmp 0x40d298
lea esi, [0x426608]
mov dword [ebp + 0x444], 0
mov ecx, dword [edi + 0x3c]
add ecx, edi
mov edx, dword [ecx + 0x7c]
mov ebx, dword [ecx + 0x78]
add ebx, edi
test ebx, ebx
je 0x4131c2
mov ecx, dword [ebx + 0x14]
mov esi, dword [ebx + 0x18]
mov dword [0x427c7c], ecx
mov ecx, dword [ebx + 0x10]
mov dword [ebp + 0x350], ecx
mov ecx, dword [ebx + 0x20]
add ecx, edi
mov ebp, dword [ebx + 0x24]
add ebp, edi
mov dword [esp + 0x310], eax
mov eax, dword [ebx + 0x1c]
add eax, edi
test dword [0x426f6c], 0x80000000
je 0x41199c
mov dword [esp + 0x30c], eax
jmp 0x40652b
mov edi, dword [0x427870]
repne scasb al, byte es:[edi]
mov eax, edi
mov eax, edx
mov dword [0x427ba0], edi
sub edi, dword [0x427870]
mov ecx, edi
mov esi, dword [0x427870]
mov edi, eax
rep movsb byte es:[edi], byte [esi]
mov eax, dword [0x426770]
mov dword [edi], eax
call dword [esp + 0x434]
push dword [0x427ba0]
push eax
mov dword [ebp + 0x300], eax
call dword [0x42747c]
mov edx, dword [ebp + 0x300]
mov ecx, dword [0x427c60]
mov edi, dword [0x42788c]
mov dword [0x427990], esi
mov ebx, dword [ebp + 0x304]
mov dword [ebp + 0x30c], edx
mov esi, dword [0x427bd0]
mov edx, dword [0x427d48]
add esp, 4
jmp 0x40e40f
je 0x41b58b
mov dword [0x427948], ebp
mov ebp, esp
mov dword [ebp + 0x35c], ecx
lea ecx, [0x426608]
mov dword [ebp + 0x354], eax
mov eax, dword [0x427d28]
mov dword [ebp + 0x310], edx
mov edx, dword [0x4272e0]
mov dword [ecx + 0x16d4], edx
and edx, 0xffff
mov dword [ecx + 0x12d0], edx
sub edx, edi
cmp edx, dword [0x427ad0]
jge 0x41234d
jmp 0x4020ef
mov dword [eax + 0x165c], edi
mov edi, dword [eax + 0x147c]
mov eax, dword [0x427ca4]
add ebp, 4
jmp 0x41605b
mov eax, dword [0x4271e4]
mov dword [ebp + 0x350], edi
sub edi, ebx
mov ecx, edi
mov esi, ebx
mov edi, eax
rep movsb byte es:[edi], byte [esi]
mov dword [0x427c24], edi
mov dword [ebp + 0x300], ecx
mov eax, dword [0x426770]
mov dword [edi], eax
mov dword [0x427a38], edx
call dword [esp + 0x434]
push dword [esp + 0x358]
push eax
mov dword [0x427b70], eax
call dword [0x42747c]
mov ecx, dword [0x427b70]
mov edx, dword [0x427a38]
mov dword [ebp + 0x2fc], esi
mov ebx, eax
mov edi, dword [0x427b54]
mov dword [0x427ce0], ecx
mov esi, dword [0x427be8]
mov ecx, dword [0x4279f0]
mov eax, dword [0x427adc]
add esp, 4
sub ebp, 4
jmp 0x410091
mov dword [0x427c48], ebx
mov dword [ebp + 0x30c], eax
jmp 0x4126bf
mov dword [0x427998], ebp
mov dword [esp + 0x30c], ecx
mov ebp, esp
lea ecx, [0x426608]
mov dword [0x4278e8], edx
mov dword [ebp + 0x310], eax
mov eax, dword [ebp + 0x354]
mov eax, dword [eax + 0x1c]
add eax, edi
mov dword [0x427c38], 0
mov dword [ebp + 0x304], eax
cmp dword [0x427c38], esi
mov eax, dword [ebp + 0x448]
jg 0x41caeb
mov ecx, dword [0x427c38]
add ecx, ecx
add ecx, dword [0x427c38]
add ecx, dword [0x427c38]
mov dword [0x427ad8], ecx
mov ecx, dword [0x427998]
mov dword [ebp + 0x300], ecx
add ecx, dword [0x427ad8]
mov eax, dword [ecx]
add eax, edi
mov dword [0x427934], eax
mov dword [ebp + 0x2fc], 0
jmp 0x402edb
mov eax, edx
mov dword [ebp + 0x2f4], edi
sub edi, ebx
mov ecx, edi
mov dword [0x427d38], esi
mov esi, ebx
mov edi, eax
rep movsb byte es:[edi], byte [esi]
mov dword [0x427b2c], edi
mov dword [ebp + 0x2f0], ecx
mov edi, dword [0x426770]
mov ecx, dword [0x427b2c]
mov dword [ecx], edi
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push dword [esp + 0x2fc]
push eax
mov dword [0x4279f8], eax
call dword [0x42747c]
mov ecx, dword [0x4279f8]
mov dword [ebp + 0x2ec], esi
mov dword [0x427d00], eax
mov ebx, dword [ebp + 0x2fc]
mov edi, dword [ebp + 0x2f8]
mov dword [ebp + 0x300], ecx
mov esi, dword [0x427d38]
mov eax, dword [ebp + 0x308]
mov dword [0x42798c], eax
mov ecx, dword [0x427d00]
mov eax, dword [0x427b90]
mov dword [ebp + 0x308], eax
mov eax, dword [0x42798c]
add esp, 4
jmp 0x420429
mov dword [esp + 0x310], ebx
mov dword [0x427aac], esi
mov esi, dword [esp + 0x354]
mov ebx, dword [esi + 0x1c]
add ebx, dword [esp + 0x448]
mov dword [0x427c04], 0
mov dword [0x427c10], edi
mov edi, dword [esp + 0x448]
mov dword [0x427bc0], eax
mov eax, dword [0x427c04]
cmp eax, dword [0x427aac]
jg 0x41349d
add eax, eax
add eax, dword [0x427c04]
add eax, dword [0x427c04]
mov dword [esp + 0x30c], ecx
mov ecx, dword [0x427c10]
mov dword [esp + 0x354], ecx
add ecx, eax
mov edi, dword [ecx]
add edi, dword [esp + 0x448]
mov dword [0x427ccc], edi
mov dword [esp + 0x304], 0
jmp 0x41b33e
mov dword [0x427a08], eax
mov eax, dword [esp + 0x310]
mov dword [esp + 0x304], ebx
add ebx, edx
cmp dword [0x427a08], ebx
jge 0x401abf
mov eax, 0x2e
mov eax, dword [0x427a08]
mov eax, 0xf
mov ebp, dword [0x427a08]
mov dword [0x427918], ebx
sub esp, 4
mov ebx, dword [esp + 0xf4]
push ebx
mov eax, 0x2e
mov dword [esp + 0x300], ecx
mov ecx, 0xf
mov dword [0x42797c], edi
mov edi, ebp
repne scasb al, byte es:[edi]
jmp 0x40e14b
mov dword [0x427988], ecx
mov edi, dword [0x427cf4]
mov dword [0x427ccc], edx
mov eax, dword [esp + 0x354]
mov ecx, dword [0x427a78]
mov edx, dword [0x427988]
mov dword [0x427a4c], edx
mov dword [esp + 0x304], edx
mov edx, dword [0x427b08]
jmp 0x41b33e
mov edi, dword [0x427bec]
mov dword [esp + 0x2f8], eax
mov esi, dword [0x4277ac]
mov ebp, dword [esp + 0x300]
mov eax, dword [0x427a20]
mov edi, dword [esp + 0x2fc]
mov dword [esp + 0x2f4], ebx
mov dword [0x427b88], edi
mov ebx, dword [0x427c6c]
mov dword [0x427a48], ebx
mov ebx, dword [esp + 0x2f4]
mov edi, dword [0x427bec]
mov dword [esp + 0x2ec], ecx
mov ecx, dword [0x427b20]
mov dword [esp + 0x2f0], ecx
mov eax, dword [0x427b88]
mov dword [0x427b20], eax
mov ecx, dword [esp + 0x2ec]
mov eax, dword [0x427a20]
jmp 0x4129dc
mov dword [0x427c84], edx
mov edx, dword [0x427c44]
jmp 0x403c34
mov dword [0x427cf4], edi
mov dword [esp + 0x354], eax
mov edi, dword [esp + 0x448]
mov eax, dword [0x427bc0]
mov dword [0x427cf8], ebx
mov dword [0x427b08], edx
mov edx, dword [0x427ccc]
mov eax, dword [edx]
and eax, 0xff
test eax, eax
je 0x405f45
mov dword [0x427a78], ecx
mov ecx, dword [esp + 0x304]
mov dword [0x427c2c], ecx
shl ecx, 5
shr dword [0x427c2c], 0x1b
or ecx, dword [0x427c2c]
sub eax, 0x41
add ecx, eax
inc edx
mov dword [0x427cc8], eax
jmp 0x41a66b
mov dword [0x427894], ebp
mov dword [esp + 0x35c], esi
mov ebp, esp
lea esi, [0x426608]
mov dword [0x427b8c], 0
mov dword [ebp + 0x354], eax
mov eax, dword [0x427d28]
mov esi, dword [0x427b8c]
cmp esi, dword [esp + 0x35c]
jg 0x4134c4
add esi, esi
add esi, dword [0x427b8c]
add esi, dword [0x427b8c]
mov dword [ebp + 0x310], ecx
add ecx, esi
mov eax, dword [ecx]
add eax, dword [esp + 0x448]
mov dword [ebp + 0x30c], eax
mov dword [0x4279d0], 0
jmp 0x41e2f1
mov ebx, edi
mov dword [ebp + 0x300], edx
mov edx, dword [ebp + 0x3d0]
jmp 0x411a51
mov edx, dword [esp + 0x304]
mov ebp, esp
add ebp, 4
jmp 0x4203fd
mov dword [ebp + 0x350], esi
mov esi, dword [0x427be8]
sub ebp, 4
jmp 0x410091
mov dword [0x42792c], ebx
mov ebx, dword [ebp + 0x354]
add ebp, 4
jmp 0x407456
mov dword [ebp + 0x308], 0
cmp dword [esp + 0x30c], ebx
jg 0x413079
mov dword [0x427a74], ebx
mov ebx, dword [ebp + 0x308]
add ebx, ebx
add ebx, dword [esp + 0x30c]
add ebx, dword [esp + 0x30c]
mov dword [0x4278b0], eax
add eax, ebx
mov dword [ebp + 0x300], edx
mov edx, dword [eax]
add edx, edi
mov dword [0x427a64], esi
lea esi, [0x426608]
mov dword [ebp + 0x2fc], edx
mov dword [ebp + 0x2f8], 0
jmp 0x40a29f
mov eax, dword [esp + 0x310]
mov eax, dword [esp + 0x300]
add eax, dword [esp + 0x30c]
add eax, dword [esp + 0x30c]
mov ecx, dword [eax]
and ecx, 0xffff
mov dword [0x427aa0], eax
lea ecx, [ecx*4]
mov eax, dword [esp + 0x310]
mov dword [esp + 0x30c], ebp
mov ebp, dword [0x427d20]
mov eax, dword [ecx + ebp]
add eax, edi
cmp eax, ebx
jge 0x41a4e6
mov dword [esp + 0x304], eax
mov eax, dword [esp + 0x310]
mov eax, dword [esp + 0x304]
mov dword [0x4279b0], eax
mov eax, dword [esp + 0x310]
mov ebp, esp
add ebp, 4
jmp 0x4131cc
mov edi, dword [0x427a84]
mov dword [0x427b40], esi
mov esi, dword [0x427bb0]
add esi, dword [esp + 0x354]
add esi, dword [esp + 0x354]
mov eax, dword [esi]
and eax, 0xffff
mov dword [0x427d14], ebp
mov dword [esp + 0x2f8], esi
mov edi, eax
mov ecx, dword [0x427a8c]
mov dword [0x427c3c], ebx
mov edx, dword [esp + 0x300]
mov esi, dword [0x427b40]
mov dword [0x427bd0], ecx
mov ebx, dword [0x427bb0]
mov dword [esp + 0x354], ebx
mov ecx, dword [esp + 0x304]
mov ebx, dword [0x42794c]
mov ebp, esp
jmp 0x41128e
mov dword [ebp + 0x304], eax
mov eax, dword [0x427d28]
mov dword [0x427b64], esi
mov dword [ebp + 0x300], edi
mov edi, dword [ebp + 0x30c]
mov eax, dword [edi]
and eax, 0xff
test eax, eax
je 0x420b15
mov dword [ebp + 0x2f8], edx
mov edx, dword [0x4279d0]
mov dword [ebp + 0x2fc], edx
shl edx, 5
shr dword [0x4279d0], 0x1b
or edx, dword [0x4279d0]
sub eax, 0x41
add edx, eax
inc edi
mov dword [0x427908], edi
mov dword [0x4279e4], eax
mov dword [ebp + 0x2f4], edx
jmp 0x4151ff
mov dword [0x4278f0], ebp
mov ebp, esp
push edx
lea edx, [0x426608]
mov dword [edx + 0x116c], 0
mov edx, dword [ebp + 0x3d0]
mov dword [0x427b80], edx
mov dword [ebp + 0x358], ecx
mov ecx, dword [0x427774]
cmp ecx, dword [0x427928]
jg 0x415e09
add ecx, ecx
add ecx, dword [0x427774]
add ecx, dword [0x427774]
mov dword [0x4279b8], esi
add esi, ecx
mov edx, dword [esi]
add edx, dword [esp + 0x448]
mov dword [0x427ac0], edx
mov dword [0x427c78], 0
jmp 0x409e96
je 0x40be18
mov dword [0x427d14], ebp
mov ebp, esp
mov dword [ebp + 0x354], eax
lea eax, [0x426608]
mov dword [eax + 0x15c8], edi
mov edi, dword [ebp + 0x380]
mov dword [ebp + 0x310], edi
and edi, 0xffff
mov dword [ebp + 0x30c], edi
sub edi, esi
cmp edi, ecx
jge 0x4180d5
jmp 0x40e3eb
push ebx
call fcn.0040b2db
mov esi, dword [ebp + 0x3b8]
mov ecx, dword [esi + 0x3c]
add ecx, esi
mov edx, dword [ecx + 0x7c]
mov ebx, dword [ecx + 0x78]
add ebx, esi
test ebx, ebx
je 0x402b67
lea esi, [0x426608]
mov ecx, dword [ebx + 0x14]
mov esi, dword [ebx + 0x18]
mov dword [0x427b14], edx
mov edx, dword [ebx + 0x10]
mov dword [0x427928], esi
mov esi, dword [ebx + 0x20]
add esi, dword [esp + 0x444]
mov ebp, dword [ebx + 0x24]
add ebp, dword [esp + 0x444]
mov dword [0x427c70], edi
mov edi, dword [ebx + 0x1c]
add edi, dword [esp + 0x444]
jmp 0x41194a
add ebp, 4
mov dword [ebp + 0x2f8], edx
mov edx, dword [ebp + 0x350]
add edx, dword [0x427b8c]
add edx, dword [0x427b8c]
mov eax, dword [edx]
and eax, 0xffff
mov esi, dword [ebp + 0x358]
mov edi, dword [ebp + 0x2fc]
mov dword [ebp + 0x2f4], edx
mov ecx, dword [0x427894]
mov dword [0x427d3c], ebx
mov edx, eax
mov dword [0x427948], ecx
mov ebx, dword [ebp + 0x30c]
mov dword [ebp + 0x2f0], ebx
mov ebp, dword [ebp + 0x2f8]
mov dword [esp + 0x310], ebp
mov dword [esp + 0x35c], ebx
mov eax, dword [0x427d28]
jmp 0x421947
mov dword [0x427ad4], ecx
lea ecx, [0x426608]
mov dword [ebp + 0x3d0], edx
mov edx, dword [0x4279c4]
add edx, dword [ecx + 0x150c]
cmp dword [ecx + 0x14cc], edx
jge 0x407e24
mov ecx, 0x2e
mov ecx, dword [0x427ad4]
mov ecx, 0xf
mov ecx, dword [0x427ad4]
mov dword [0x427a00], esi
sub esp, 4
mov esi, dword [0x426e8c]
push esi
mov dword [ebp + 0x350], eax
mov eax, 0x2e
mov ecx, 0xf
mov dword [0x42791c], edi
mov edi, dword [0x427ad4]
jmp 0x4212be
mov eax, dword [ebp + 0x3d0]
mov edi, dword [0x4278f0]
add edi, dword [0x427774]
add edi, dword [0x427774]
mov eax, dword [edi]
and eax, 0xffff
mov dword [0x4279c0], edx
mov dword [0x427c8c], ebx
mov esi, dword [0x4279b8]
mov dword [0x42787c], ecx
pop edx
mov ebx, eax
mov ecx, dword [0x4278f0]
mov dword [0x427bd8], edx
mov dword [0x427d24], ecx
mov dword [0x427afc], edi
mov edi, dword [ebp + 0x358]
push edi
mov edi, dword [0x427bcc]
mov edx, dword [0x427c8c]
jmp 0x40f0b7
mov dword [esp + 0x2fc], eax
and dword [0x427b20], 0x7fffffff
mov eax, dword [esp + 0x310]
mov eax, dword [0x427b20]
cmp eax, dword [0x426f6c]
je 0x41da78
mov eax, dword [esp + 0x310]
inc dword [esp + 0x30c]
mov dword [0x42799c], ecx
mov eax, dword [0x427d20]
mov ebp, dword [esp + 0x300]
mov ecx, dword [0x427b94]
jmp 0x4119a7
mov dword [0x4278e8], edx
mov dword [ebp + 0x310], eax
mov eax, dword [ebp + 0x354]
mov eax, dword [eax + 0x1c]
add eax, edi
mov dword [0x427a18], eax
mov eax, dword [ebp + 0x448]
mov edx, dword [0x426fec]
mov dword [ebp + 0x304], edx
and edx, 0xffff
mov dword [ebp + 0x300], edx
sub edx, dword [esp + 0x310]
cmp edx, ecx
jge 0x40b0be
jmp 0x403c03
lea ecx, [ecx*4]
mov dword [ebp + 0x30c], ecx
mov ecx, dword [ecx + esi]
add ecx, dword [esp + 0x448]
cmp ecx, edi
jge 0x4206c6
mov dword [ebp + 0x300], edi
jmp 0x404274
je 0x41d42c
mov dword [0x4278ac], esi
mov esi, dword [ebp + 0x384]
mov dword [ebp + 0x308], esi
and esi, 0xffff
mov dword [ebp + 0x300], esi
sub esi, dword [0x4278ac]
cmp esi, dword [0x427a98]
jge 0x407d60
mov dword [ebp + 0x2fc], ecx
lea ecx, [0x426608]
lea esi, [esi*4]
mov dword [0x4279d8], ebx
mov ebx, dword [ebp + 0x2fc]
mov ecx, dword [esi + ebx]
add ecx, edi
cmp ecx, edx
jge 0x404569
mov dword [ebp + 0x308], edx
lea edx, [0x426608]
mov edx, dword [0x4276bc]
add edx, dword [esp + 0x450]
lea eax, [0x426608]
mov ebx, dword [0x426df8]
add ebx, dword [0x427090]
mov dword [ebp - 0xc], 0x2294
mov dword [ebp - 0x10], 0
sub esp, 0xc
mov dword [0x427860], ecx
mov dword [ebp + 0x2fc], edx
call dword [esp + 0x44c]
lea ecx, [0x426608]
push 0x1ab4
push 0x42
mov dword [ebp + 0x2f8], eax
call dword [esp + 0x44c]
push eax
call dword [esp + 0x3e0]
lea ecx, [0x426608]
mov edx, eax
push dword [0x426770]
push dword [0x426914]
push 0x320
push 1
call fcn.0041fcbd
mov ecx, dword [ebp + 0x2f8]
mov dword [ebp + 0x2e4], ebx
mov dword [0x427b18], eax
mov esi, dword [ebp + 0x2ec]
mov ebp, dword [ebp + 0x2f4]
mov dword [esp + 0x2f0], ecx
mov ebx, dword [esp + 0x2f8]
mov eax, dword [0x427b1c]
mov dword [0x427d1c], esi
mov dword [esp + 0x310], ebp
mov edx, dword [0x427860]
mov dword [0x427b58], ebx
mov dword [esp + 0x308], eax
mov dword [esp + 0x300], edx
mov eax, dword [0x427b18]
mov esi, dword [esp + 0x304]
mov ebx, dword [0x427c94]
push esi
mov dword [0x427900], ebx
mov ecx, dword [0x427b84]
mov dword [esp + 0x308], ecx
mov ebx, dword [esp + 0x2f4]
mov dword [0x427b5c], esi
mov dword [esp + 0x35c], ebx
mov ebx, dword [esp + 0x2f0]
add esp, 4
mov ebp, esp
add ebp, 8
jmp 0x402886
mov dword [ebp + 0x300], edi
add edi, dword [esp + 0x3d4]
cmp ecx, edi
jge 0x404274
mov dword [esp + 0x300], 0x2e
mov ebp, ecx
mov ecx, 0xf
mov ecx, ebp
mov ecx, dword [0x426e04]
sub esp, 4
push ecx
mov dword [0x427944], eax
mov eax, dword [esp + 0x308]
mov ecx, 0xf
mov dword [0x427a5c], edi
mov edi, ebp
repne scasb al, byte es:[edi]
mov eax, edi
mov eax, dword [0x426e04]
mov dword [esp + 0x304], edi
jmp 0x405038
mov dword [0x4279a4], eax
and dword [0x4279d0], 0x7fffffff
mov eax, dword [0x427d28]
mov edi, dword [0x4279d0]
cmp edi, dword [0x4272e0]
je 0x41eeb8
add ebp, 4
inc dword [0x427b8c]
mov edi, dword [ebp + 0x2fc]
mov dword [0x427abc], ecx
mov eax, dword [ebp + 0x350]
mov ecx, dword [ebp + 0x30c]
sub ebp, 4
jmp 0x41b5aa
repne scasb al, byte es:[edi]
mov eax, edi
mov eax, esi
mov dword [ebp + 0x30c], edi
sub edi, dword [0x427ad4]
mov ecx, edi
mov esi, dword [0x427ad4]
mov edi, eax
rep movsb byte es:[edi], byte [esi]
mov edx, dword [0x426770]
mov dword [edi], edx
call dword [esp + 0x434]
push dword [esp + 0x314]
push eax
mov dword [0x427a70], eax
call dword [0x42747c]
mov edx, dword [ebp + 0x30c]
mov ecx, dword [0x427a70]
mov dword [ebp + 0x308], esi
mov edi, dword [0x42791c]
mov dword [0x427ad4], eax
mov dword [ebp + 0x358], ecx
mov esi, dword [0x427a00]
mov eax, dword [ebp + 0x350]
add esp, 4
jmp 0x407e24
lea esi, [0x426608]
mov dword [ebp + 0x358], 0
mov edi, dword [ebp + 0x444]
mov ecx, dword [edi + 0x3c]
add ecx, edi
mov edx, dword [ecx + 0x7c]
mov ebx, dword [ecx + 0x78]
add ebx, edi
test ebx, ebx
je 0x4091cf
lea esi, [0x426608]
mov ecx, dword [ebx + 0x14]
mov esi, dword [ebx + 0x18]
mov ebp, dword [ebx + 0x10]
mov edi, dword [ebx + 0x20]
add edi, dword [esp + 0x448]
mov dword [esp + 0x354], ebx
mov ebx, dword [ebx + 0x24]
add ebx, dword [esp + 0x448]
test dword [esp + 0x444], 0x80000000
je 0x41a325
mov dword [esp + 0x30c], edi
mov edi, dword [esp + 0x448]
jmp 0x40ed7f
mov ebx, dword [0x427d3c]
mov ebp, esp
jmp 0x4020ef