Function at 0x407633
Capabilities:
Resolve function by parsing pe exports

Disassembly:
inc edx
lea ecx, [ecx + 4]
mov eax, edx
jmp 0x4044b5
inc edx
mov eax, edx
jmp 0x4044b5
mov eax, dword [ecx]
add eax, eax
adc edi, edi
dec edx
je 0x409117
lea ecx, [ecx + 4]
inc eax
jmp 0x4044c1
inc esi
mov edi, dword [ebp + 0x34]
add edi, edi
jne 0x404587
mov eax, dword [ecx]
add ecx, 4
add eax, eax
jae 0x408fd9
inc eax
jmp 0x4044b5
jae 0x408a03
mov ebx, 0x100
mov edx, 8
xor edi, edi
add eax, eax
je 0x404472
mov dword [ebp + 0x34], eax
lea eax, [0x40027a]
adc edi, edi
dec edx
je 0x40458b
mov eax, dword [ebp + 0x34]
jmp 0x4044c1
inc edx
lea ecx, [ecx + 4]
mov eax, edx
jmp 0x4044b5
or edx, edi
mov dword [esi], edx
inc esi
jmp 0x4044ba
jmp 0x4044af
jae 0x40914d
jmp 0x4044b5
mov eax, edi
jmp 0x40456a
mov eax, dword [esi]
and eax, dword [esp + 0x548]
or eax, edi
dec ebx
mov dword [esi], eax
je 0x404485
inc esi
mov eax, dword [ebp + 0x34]
jmp 0x4044ba
inc eax
sub edx, 2
je 0x409437
dec edx
mov dword [edi + 0x7c], eax
mov eax, dword [edi + 0x38]
movzx eax, al
mov dword [ebp + 0x1c], ecx
mov ecx, eax
mov dword [edi + 0x60], esi
mov esi, edx
shl edx, cl
mov eax, dword [ebp + 0x1c]
mov dword [edi + 0x6c], eax
mov eax, dword [edi + 0x60]
mov dword [ebp + 0x2c], eax
mov ebx, dword [edi + 0x7c]
xor esi, esi
jmp 0x4049e9
dec edx
mov edi, dword [0x4a2488]
and edi, 0xff
mov dword [0x4a24a0], ecx
mov ecx, edi
shl edx, cl
mov dword [ebp + 0x2c], esi
mov ebx, dword [0x4a24a0]
mov dword [0x4a24bc], ebx
xor esi, esi
mov ebx, eax
jmp 0x4049e9
dec edx
mov dword [edi + 0x7c], ecx
mov ecx, dword [edi + 0x48]
movzx ecx, cl
mov dword [ebp + 0x2c], esi
mov esi, edx
shl edx, cl
xor esi, esi
add ebx, ebx
jne 0x409678
mov edi, dword [0x4a24bc]
mov eax, dword [edi]
lea edi, [edi + 4]
add eax, eax
mov dword [0x4a24c4], eax
lea eax, [0x4a2458]
adc esi, esi
dec ecx
je 0x41a811
inc dword [eax + 0x6c]
mov dword [eax + 0x64], edi
mov ebx, dword [eax + 0x6c]
jmp 0x4049e9
jmp 0x4049e9
lea ecx, [ecx + 4]
inc eax
jmp 0x4050a5
inc edx
lea ecx, [ecx + 4]
mov eax, edx
mov edx, 7
xor edi, edi
jmp 0x4050a5
mov edx, 7
xor edi, edi
add eax, eax
je 0x4050e2
adc edi, edi
dec edx
jne 0x4050bc
mov dword [0x4a24b8], eax
xor eax, eax
mov ebx, 2
jmp 0x4050fb
jmp 0x4050a5
mov dword [0x4a24b8], edx
jmp 0x4050fb
inc edx
lea ecx, [ecx + 4]
mov eax, edx
mov edx, 7
xor edi, edi
jmp 0x4050a5
inc eax
add ecx, 4
mov edx, 7
xor edi, edi
jmp 0x4050a5
mov eax, dword [ecx]
add eax, eax
adc edi, edi
dec edx
jne 0x405089
lea ecx, [ecx + 4]
inc eax
mov ebx, 2
mov dword [0x4a24b8], eax
xor eax, eax
mov edx, dword [0x4a24b8]
add edx, edx
jne 0x418778
mov dword [0x4a24a4], ecx
mov ecx, dword [ecx]
add dword [0x4a24a4], 4
add ecx, ecx
mov dword [ebp + 0x34], eax
lea eax, [0x4a245c]
mov dword [ebp + 0x2c], edi
mov edi, dword [ebp + 0x34]
adc edi, edi
inc ecx
dec ebx
je 0x408b6a
mov dword [eax + 0x5c], ecx
mov ecx, dword [eax + 0x48]
mov eax, edi
mov edi, dword [ebp + 0x2c]
jmp 0x4050fb
and ecx, 0x7fffffff
cmp ecx, dword [ebp + 0x38]
je 0x40598e
inc ebx
mov ecx, dword [0x4a248c]
mov edi, ebx
mov ebx, dword [0x4a2478]
jmp 0x405572
lea eax, [0x4a245c]
mov dword [eax], edi
xor edi, edi
cmp edi, dword [ebp + 0x3c]
jg 0x4093bd
mov dword [0x4a2484], edi
mov edi, dword [0x4a244c]
mov dword [0x4a2478], ebx
xor ebx, ebx
add ebx, dword [0x4a2484]
mov eax, dword [edi + ebx*4]
mov dword [ebp + 0x34], eax
lea eax, [0x4a248c]
mov edi, dword [ebp + 0x34]
add edi, dword [esp + 0x328]
mov dword [eax], ecx
xor ecx, ecx
movzx eax, byte [edi]
test eax, eax
je 0x405522
mov dword [0x4a2480], esi
lea esi, [0x4a241c]
inc edi
sub eax, dword [esi - 0x5dc]
mov dword [ebp + 0x34], ecx
mov ecx, dword [esp + 0x584]
mov dword [esi + 0x78], eax
mov eax, dword [ebp + 0x34]
jmp 0x4055e9
mov dword [esi + 0x7c], eax
rol eax, cl
add eax, dword [esi + 0x78]
mov ecx, eax
mov esi, dword [esi + 0x64]
jmp 0x4055af
mov edx, dword [ebp + 0x34]
mov eax, dword [0x4a239c]
jmp 0x405a12
mov dword [esp + 0x38], ebp
mov ebp, esp
add dword [0x4a2458], 4
mov ecx, dword [ebp + 0x38]
mov esi, dword [0x4a2474]
mov dword [esi + 0x464], ecx
inc dword [0x4a2470]
add ebx, 4
cmp dword [0x4a2470], 3
jge 0x408e26
lea esi, [esi + 4]
mov dword [esp + 0x648], eax
mov eax, dword [0x4a2458]
mov ecx, esi
mov esi, dword [ebp + 4]
jmp 0x405a78
mov dword [ebp + 0x34], edx
mov edx, dword [0x4a245c]
mov eax, dword [edx + ebx*2]
movzx eax, ax
mov dword [ebp + 4], esi
mov ecx, dword [0x4a248c]
mov dword [0x4a2474], ecx
mov ecx, eax
mov eax, dword [esp + 0x648]
mov edi, edx
mov edx, dword [ebp + 0x34]
mov ebx, dword [0x4a2478]
lea ecx, [ecx*4]
mov ebp, dword [ecx + edx]
add ebp, dword [esp + 0x328]
cmp ebp, dword [esp + 0x30]
jl 0x4058ee
mov dword [esp + 0x44], ebp
mov ebp, esp
mov esi, dword [ebp + 0x30]
add esi, dword [ebp + 4]
cmp dword [ebp + 0x44], esi
jl 0x405a0d
mov ebp, dword [ebp + 0x44]
jmp 0x4058ee
mov eax, dword [0x4a1efc]
add edx, esi
inc edx
mov eax, edx
sub eax, ecx
mov dword [ebp + 0x38], ecx
mov ecx, eax
mov esi, dword [ebp + 0x38]
jmp 0x405abb
mov ecx, dword [ebp + 0x44]
xor esi, esi
mov dword [0x4a239c], eax
mov dword [ebp + 0x34], edx
mov edx, dword [ebp + 0x44]
movzx eax, byte [esi + edx]
cmp eax, dword [esp + 0x6d8]
je 0x4059f4
inc esi
cmp esi, dword [esp + 0x5ec]
jle 0x4058ca
jmp 0x4059f4
mov ebp, dword [eax + 0x10]
add edx, dword [esp + 0x328]
mov dword [esp + 0x2c], ebp
mov ebp, esp
mov dword [ebp + 0x30], eax
mov dword [ebp + 0x1c], ecx
mov dword [0x4a2470], 0
mov dword [ebp + 0x3c], ebx
mov eax, dword [esp + 0x5d4]
mov ecx, dword [0x4a2044]
mov ebx, dword [0x4a1f64]
mov dword [0x4a2460], eax
mov dword [ebp + 0x34], ecx
mov dword [0x4a2458], eax
mov eax, dword [eax]
xor eax, dword [ebx]
mov dword [ebp + 0x38], eax
mov eax, dword [esp + 0x648]
test dword [ebp + 0x38], eax
je 0x405568
mov dword [ebp + 4], esi
lea esi, [0x4a23f8]
and dword [ebp + 0x38], 0xffff
mov dword [esi + 0x7c], ecx
mov ecx, dword [ebp + 0x38]
sub ecx, dword [ebp + 0x2c]
cmp ecx, dword [ebp + 0x1c]
jge 0x40944a
jmp 0x4059c0
mov dword [0x4a246c], edi
mov edi, dword [0x4a1efc]
rep movsb byte es:[edi], byte [esi]
mov dword [ebp + 0x4c], edi
mov edi, dword [esp + 0x6e4]
mov eax, dword [ebp + 0x4c]
mov dword [eax], edi
mov eax, dword [0x4a1efc]
sub esp, 0xc
push eax
mov dword [0x4a2490], edx
call dword [sym.imp.kernel32.dll_LoadLibraryA]
push dword [0x4a2490]
push eax
call dword [sym.imp.kernel32.dll_GetProcAddress]
mov ecx, eax
mov dword [0x4a2228], esi
mov edx, dword [ebp + 0x34]
mov edi, dword [0x4a246c]
mov ebp, ecx
mov eax, dword [0x4a239c]
add esp, 0xc
jmp 0x4058ee
add ecx, dword [ebp + 0x328]
add ecx, dword [esp + 0x6b0]
mov eax, dword [ecx]
test eax, eax
je 0x409333
add eax, dword [esp + 0x328]
mov edx, dword [eax + 0x20]
mov ebx, dword [eax + 0x18]
add edx, dword [esp + 0x328]
mov esi, dword [ecx + 4]
mov ecx, dword [eax + 0x14]
mov edi, dword [eax + 0x24]
mov dword [0x4a244c], edx
xor edx, edx
add edx, dword [eax + 0x1c]
add edi, dword [esp + 0x328]
jmp 0x405a3a
mov dword [0x4a2388], edi
lea edi, [0x4a2344]
sub eax, dword [edi - 0x504]
inc dword [edi + 0x74]
mov dword [ebp + 0x2c], ecx
mov ecx, dword [esp + 0x584]
mov dword [edi + 0x7c], eax
mov eax, dword [ebp + 0x2c]
jmp 0x40769d
lea esi, [esi*4]
mov dword [0x4a239c], ebx
mov ebx, dword [ebp + 4]
mov eax, dword [esi + ebx]
add eax, dword [0x4a20d8]
cmp eax, dword [0x4a2398]
jl 0x407a18
mov dword [ebp + 0x2c], ecx
lea ecx, [0x4a2398]
mov esi, dword [ecx]
add esi, dword [ebp + 0x30]
cmp eax, esi
jl 0x407705
mov ecx, dword [ebp + 0x2c]
jmp 0x407a18
mov dword [0x4a23b4], eax
mov eax, dword [esi + ebx*4]
add eax, dword [0x4a20d8]
mov dword [0x4a2390], ecx
xor ecx, ecx
mov dword [0x4a23b8], eax
movzx eax, byte [eax]
test eax, eax
jne 0x4074b4
mov dword [0x4a23a8], edx
lea edx, [0x4a2338]
and ecx, 0x7fffffff
cmp ecx, dword [edx + 0x7c]
jne 0x407b8f
mov dword [edx + 0x78], esi
mov esi, dword [edx + 0x5c]
mov ecx, dword [esi + ebx*2]
movzx ecx, cx
mov eax, dword [edx + 0x78]
mov dword [edx + 0x74], eax
mov edx, dword [edx + 0x70]
mov esi, ecx
mov ecx, dword [0x4a2390]
mov ebx, dword [esp + 0x648]
jmp 0x4074de
push eax
call dword [sym.imp.kernel32.dll_LoadLibraryA]
push dword [0x4a23d4]
push eax
call dword [0x4a206c]
mov dword [0x4a2228], esi
mov ecx, dword [ebp + 0x2c]
mov edx, dword [ebp + 0x44]
mov edi, dword [ebp + 4]
add esp, 0x1c
jmp 0x407a18
mov dword [edi], edx
mov eax, dword [0x4a1efc]
sub esp, 0xc
push 0
push dword [0x4a1d28]
push 0
call fcn.00407633
ret 8
mov eax, dword [0x4a23c4]
mov ebp, ecx
jmp 0x407709
mov dword [ebp + 0x48], eax
rol eax, cl
add eax, dword [edi + 0x7c]
mov edi, dword [edi + 0x44]
mov ecx, eax
mov eax, dword [0x4a23b8]
jmp 0x4075df
inc dword [0x4a23c8]
mov ecx, dword [0x4a23c8]
cmp ecx, dword [esp + 0x5ec]
jle 0x407694
jmp 0x407728
mov edi, dword [ebp + 4]
jmp 0x4076eb
mov edi, edx
mov dword [0x4a2408], ecx
xor ecx, ecx
movzx eax, byte [ecx + edi]
cmp eax, dword [esp + 0x6d8]
jne 0x4077c8
add edi, ecx
inc edi
mov eax, edx
mov dword [ebp + 4], ebx
mov ebx, edi
sub ebx, eax
mov eax, ebx
mov ecx, eax
mov dword [ebp + 0x38], esi
mov esi, edx
jmp 0x4078ba
mov esi, eax
xor ebp, ebp
mov dword [0x4a23c8], ebp
mov ebp, esp
mov dword [0x4a23c4], eax
mov eax, dword [0x4a23c8]
movzx eax, byte [eax + esi]
cmp eax, dword [esp + 0x6d8]
jne 0x4076b4
mov eax, dword [0x4a23c4]
add esi, dword [0x4a23c8]
inc esi
mov ecx, esi
sub ecx, eax
mov eax, ecx
mov dword [0x4a23d4], esi
mov esi, dword [0x4a23c4]
mov dword [ebp + 4], edi
xor edi, edi
add edi, dword [0x4a1efc]
rep movsb byte es:[edi], byte [esi]
mov dword [ebp + 0x44], edx
mov edx, dword [esp + 0x6e4]
jmp 0x407678
mov dword [ebp + 4], edi
lea edi, [0x402e63]
inc ecx
cmp ecx, dword [esp + 0x5ec]
jg 0x4076cb
mov edi, dword [ebp + 4]
jmp 0x4076da
mov edx, dword [ecx + 4]
add eax, dword [esp + 0x330]
mov ecx, dword [eax + 0x14]
mov ebx, dword [eax + 0x1c]
mov esi, dword [eax + 0x24]
mov edi, dword [eax + 0x10]
jmp 0x407946
mov eax, dword [ecx]
xor eax, dword [ebx]
mov dword [ebp + 0x34], ebx
mov ebx, dword [esp + 0x648]
test eax, ebx
je 0x407bd6
mov dword [0x4a238c], eax
lea eax, [0x4a2330]
and dword [eax + 0x5c], 0xffff
mov dword [eax + 0x7c], esi
mov esi, dword [eax + 0x5c]
sub esi, dword [ebp + 0x38]
cmp esi, edi
jl 0x4074de
mov eax, dword [eax + 0x50]
mov dword [esp + 0x590], eax
mov esi, edx
jmp 0x407937
mov dword [ebp + 0x30], edx
lea edx, [0x4a23e4]
movzx eax, ax
sub eax, dword [edx]
cmp eax, ecx
jl 0x407aa3
jmp 0x407a5f
mov eax, dword [0x4a23cc]
add eax, dword [ebp + 0x30]
cmp edx, eax
jl 0x4076d0
jmp 0x407acc
mov dword [0x4a23bc], edi
mov edi, dword [0x4a1efc]
rep movsb byte es:[edi], byte [esi]
mov ebx, dword [esp + 0x6e4]
mov dword [edi], ebx
mov eax, dword [0x4a1efc]
sub esp, 0xc
push eax
mov dword [ebp - 8], edx
call dword [sym.imp.kernel32.dll_LoadLibraryA]
push dword [0x4a23bc]
push eax
call dword [0x4a206c]
mov dword [0x4a2228], esi
mov esi, dword [ebp + 0x38]
mov ebx, dword [ebp + 4]
mov ecx, dword [0x4a2408]
mov edi, dword [0x4a23f0]
mov edx, eax
add esp, 0xc
jmp 0x407acc
add ecx, 4
mov dword [ebp + 4], ebx
mov eax, dword [0x4a239c]
mov dword [esp + 0x648], eax
mov ebx, esi
mov esi, dword [0x4a23ac]
jmp 0x407840
mov dword [esi + 0x474], 0
jmp 0x407a70
mov dword [0x4a23e4], edi
mov ebp, dword [eax + 0x20]
mov edi, dword [eax + 0x18]
add esi, dword [esp + 0x330]
add ebp, dword [esp + 0x330]
add ebx, dword [esp + 0x330]
mov dword [esp + 0x2c], ebp
mov ebp, esp
mov dword [0x4a23cc], eax
mov dword [0x4a23f0], ebx
mov dword [0x4a23f4], 0
mov dword [0x4a23f8], edi
mov eax, dword [0x4a1e0c]
xor ebx, ebx
add ebx, dword [0x4a2044]
xor edi, edi
or edi, dword [esp + 0x654]
mov dword [0x4a23d0], eax
jmp 0x407b9d
mov dword [0x4a2414], ecx
mov ecx, dword [0x4a23ec]
mov dword [ebp + 0x34], edi
mov edi, dword [0x4a2414]
xor eax, eax
add eax, dword [ecx + edi*2]
movzx eax, ax
mov ecx, dword [0x4a2404]
mov dword [ebp + 0x30], ecx
mov ecx, dword [ebp + 4]
mov edi, dword [ebp + 0x34]
mov esi, dword [esp + 0x648]
jmp 0x407aa3
mov esi, dword [ebp + 0x34]
lea esi, [esi + 4]
mov dword [edx + 0x474], eax
add edx, 4
inc dword [0x4a23a0]
cmp dword [0x4a23a0], 0x20
jl 0x407912
lea ecx, [ecx + 4]
mov esi, dword [0x4a239c]
mov ebp, dword [0x4a2380]
mov dword [esp + 0x648], esi
mov dword [esp + 0x590], ebp
jmp 0x407a6e
mov ebx, dword [0x4a2044]
mov dword [ebx + 0x32c], 0
jmp 0x407bfa
mov ebp, esp
mov eax, dword [esp + 0x330]
add eax, dword [0x4a1db0]
mov ecx, dword [eax]
test ecx, ecx
je 0x407a59
add ecx, dword [esp + 0x330]
add ecx, dword [esp + 0x6b0]
mov eax, dword [ecx]
test eax, eax
jne 0x40781f
mov ebx, dword [0x4a2044]
jmp 0x407a5f
lea eax, [eax*4]
mov dword [0x4a23fc], edi
mov edi, dword [0x4a23f0]
mov edx, dword [eax + edi]
add edx, dword [esp + 0x330]
cmp edx, dword [0x4a23cc]
jge 0x4078a5
mov dword [ebx + 0x32c], edx
add dword [0x4a23e8], 4
lea ebx, [ebx + 4]
inc dword [0x4a23f4]
add dword [0x4a23fc], 4
cmp dword [0x4a23f4], 1
jge 0x407bf4
mov dword [0x4a23f0], edi
mov dword [esp + 0x648], esi
mov eax, dword [0x4a23e8]
mov edi, dword [0x4a23fc]
mov esi, dword [0x4a23ec]
mov edx, dword [ebp + 0x30]
jmp 0x407ba0
mov dword [esp + 0x34], ebx
lea ebx, [0x4a239c]
mov dword [ebx + 0x44], ebp
mov ebp, esp
inc edx
mov dword [ebx + 0x7c], eax
mov eax, dword [ebx + 0x44]
sub eax, dword [ebx - 0x55c]
mov dword [ebx + 0x74], ecx
mov ecx, dword [esp + 0x584]
rol esi, cl
add esi, eax
mov ebx, dword [ebp + 0x34]
mov ecx, dword [0x4a2410]
mov eax, dword [0x4a2418]
jmp 0x407b6b
mov dword [0x4a2404], edx
mov edx, dword [ebp + 0x2c]
mov edx, dword [edx + ecx*4]
add edx, dword [esp + 0x330]
xor esi, esi
movzx ebp, byte [edx]
test ebp, ebp
jne 0x407b1c
mov dword [esp + 0x1c], ebp
mov ebp, esp
and esi, 0x7fffffff
cmp esi, eax
je 0x4079a8
inc ecx
mov edx, dword [0x4a2404]
jmp 0x407bc9
inc ebx
mov ecx, dword [edx + 0x58]
mov edx, dword [edx + 0x70]
mov eax, dword [0x4a23b4]
jmp 0x407bd8
mov dword [ebp + 0x30], ebx
mov dword [0x4a23e8], eax
mov eax, dword [eax]
xor eax, dword [edi]
mov dword [0x4a23ec], esi
mov esi, dword [esp + 0x648]
test eax, esi
jne 0x40788a
lea esi, [0x4019cd]
mov dword [ebp + 4], ecx
xor ecx, ecx
cmp ecx, dword [0x4a23f8]
jle 0x407b56
jmp 0x407a5f
xor ebx, ebx
cmp ebx, dword [ebp + 0x1c]
jle 0x4075c9
mov eax, dword [0x4a2380]
mov dword [esp + 0x590], eax
mov esi, edx
jmp 0x407937
mov dword [ebp + 0x648], esi
mov eax, dword [0x4a204c]
add eax, dword [0x4a1db0]
mov ecx, dword [eax]
test ecx, ecx
jne 0x407d23
mov esi, dword [esp + 0x6e8]
mov edx, dword [0x4a2044]
mov edi, dword [0x4a1dbc]
mov dword [ebp + 0x1c], edx
mov dword [edx + 0x348], 0
jmp 0x408209
mov dword [0x4a2444], ecx
mov ecx, dword [ebp + 0x1c]
add ecx, edx
cmp eax, ecx
jl 0x415691
mov ecx, dword [0x4a2444]
jmp 0x4081c7
mov dword [ebp + 0x34], eax
jmp 0x408156
lea eax, [0x4a23c4]
and dword [eax + 0x7c], 0xffff
sub dword [eax + 0x7c], ecx
mov dword [ebp + 0x44], ebx
mov ebx, dword [eax + 0x7c]
cmp ebx, dword [eax + 0x3c]
jl 0x4081a8
mov eax, dword [eax + 0x60]
mov dword [0x4a23a4], eax
mov eax, dword [esp + 0x6e8]
mov dword [0x4a240c], eax
mov esi, dword [ebp + 0x44]
mov edx, dword [ebp + 4]
mov edi, dword [0x4a2438]
jmp 0x407c25
mov dword [ebp + 0x34], ebx
mov dword [ebp + 0x1c], eax
mov dword [0x4a2424], 0
mov dword [ebp + 0x3c], edi
mov ebx, dword [esp + 0x6e8]
mov eax, dword [0x4a2044]
mov edi, dword [0x4a1dbc]
mov dword [ebp + 4], ebx
mov dword [0x4a2434], eax
mov dword [0x4a2438], edi
mov edi, dword [ebx]
mov dword [ebp + 4], eax
mov eax, dword [0x4a2438]
xor edi, dword [eax]
mov dword [0x4a2440], edi
mov edi, dword [esp + 0x648]
test dword [0x4a2440], edi
jne 0x407c5a
xor edi, edi
cmp edi, dword [ebp + 0x2c]
jle 0x40a35f
mov ecx, dword [0x4a2424]
mov dword [0x4a23a4], ecx
mov ecx, dword [esp + 0x6e8]
mov dword [0x4a240c], ecx
mov esi, ebx
mov edx, dword [ebp + 4]
mov edi, eax
jmp 0x407c25
add ecx, dword [0x4a204c]
add ecx, dword [esp + 0x6b0]
mov eax, dword [ecx]
test eax, eax
jne 0x4082ab
mov dword [0x4a23a4], 0
mov edx, dword [0x4a2044]
mov edi, dword [0x4a1dbc]
mov esi, dword [esp + 0x6e8]
mov eax, dword [esp + 0x6e8]
mov dword [0x4a240c], eax
jmp 0x407c25
mov dword [ebp + 0x34], eax
lea eax, [0x4011ac]
mov eax, dword [0x4a1efc]
mov eax, dword [ebp + 0x34]
add edi, edx
inc edi
mov ebx, edi
sub ebx, eax
mov eax, ebx
mov ecx, eax
mov dword [0x4a2448], esi
xor esi, esi
add esi, dword [ebp + 0x34]
mov dword [0x4a2454], edi
mov edi, dword [0x4a1efc]
rep movsb byte es:[edi], byte [esi]
mov dword [ebp + 0x54], ecx
mov eax, dword [esp + 0x6e4]
mov dword [edi], eax
mov eax, dword [0x4a1efc]
sub esp, 0xc
push eax
call dword [0x4a1fd8]
push dword [0x4a2454]
jmp 0x4082eb
lea ebx, [ebx*4]
mov dword [ebp + 0x38], esi
mov esi, dword [ebp + 0x34]
mov eax, dword [ebx + esi]
add eax, dword [0x4a204c]
cmp eax, dword [ebp + 0x1c]
jge 0x407c34
mov ebx, dword [ebp + 0x44]
lea ebx, [ebx + 4]
add dword [0x4a2438], 4
mov dword [ebp + 0x34], esi
mov esi, dword [ebp + 4]
mov dword [esi + 0x348], eax
inc dword [0x4a2424]
cmp dword [0x4a2424], 0x46
jl 0x408315
add esi, 4
mov dword [esp + 0x648], edi
mov eax, dword [esp + 0x6e8]
mov dword [0x4a240c], eax
mov edi, dword [0x4a2044]
sub edi, dword [0x4a1eac]
xor eax, eax
xor esi, esi
mov ecx, eax
inc eax
cmp eax, 0x744
jge 0x409066
mov edx, dword [0x4a1e4c]
mov eax, dword [ecx + edx]
movzx eax, al
cmp eax, 0xff
je 0x40832f
inc ecx
add esi, eax
mov ebx, dword [0x4a2044]
add dword [esi + ebx], edi
mov dword [0x4a1e4c], edx
mov eax, ecx
jmp 0x408219
and dword [ebp + 0x44], 0x7fffffff
mov dword [ebp + 0x38], ecx
mov ecx, dword [ebp + 0x44]
cmp ecx, dword [0x4a2440]
jne 0x408297
mov eax, dword [esi + edi*2]
and eax, 0xffff
mov ecx, dword [0x4a2420]
mov dword [ebp + 0x44], ecx
mov ecx, dword [0x4a243c]
mov dword [0x4a2438], ecx
mov ecx, dword [ebp + 0x38]
mov ebx, eax
mov edi, dword [esp + 0x648]
jmp 0x4081a8
inc edi
mov ebx, dword [0x4a2420]
mov ecx, dword [ebp + 0x38]
mov eax, dword [0x4a243c]
jmp 0x407cf5
mov edx, dword [ecx + 4]
add eax, dword [0x4a204c]
mov ecx, dword [eax + 0x18]
mov ebx, dword [eax + 0x1c]
mov ebp, dword [eax + 0x14]
xor esi, esi
add esi, dword [eax + 0x24]
mov edi, dword [eax + 0x20]
add esi, dword [0x4a204c]
add edi, dword [0x4a204c]
add ebx, dword [0x4a204c]
mov dword [esp + 0x2c], ecx
mov ecx, dword [eax + 0x10]
mov dword [0x4a2400], ebp
mov ebp, esp
jmp 0x407c9b
push eax
call dword [sym.imp.kernel32.dll_GetProcAddress]
mov dword [0x4a2228], esi
mov esi, dword [0x4a2448]
mov ecx, dword [0x4a2444]
mov edx, dword [0x4a2430]
mov edi, dword [ebp + 0x48]
add esp, 0xc
jmp 0x4081c7
lea esi, [esi + 4]
mov dword [esp + 0x648], edi
mov eax, esi
mov esi, dword [ebp + 0x38]
mov edi, dword [0x4a2438]
jmp 0x407cc8
inc ecx
mov eax, dword [ecx + edx]
lea ecx, [ecx + 4]
jmp 0x40823f
lea ebx, [0x4a2430]
mov eax, dword [ecx]
add eax, eax
jb 0x408a3d
inc eax
lea ecx, [ecx + 4]
add eax, eax
jne 0x411c48
mov edx, dword [ecx]
add edx, edx
jb 0x411efc
inc edx
lea ecx, [ecx + 4]
add edx, edx
jne 0x4089e8
mov eax, dword [ecx]
add eax, eax
jae 0x4050d5
inc eax
lea ecx, [ecx + 4]
jmp 0x4088fe
jmp 0x408aaf
jmp 0x408ac1
mov dword [ebx + 0x78], 4
xor edi, edi
jmp 0x408ac1
inc eax
lea ecx, [ecx + 4]
jmp 0x408ac1
mov edi, dword [0x4a1e38]
mov eax, dword [ebx + edi]
movzx eax, al
inc ebx
cmp eax, 0xff
je 0x408fe1
jmp 0x408fed
add eax, eax
jne 0x408aaf
mov edx, dword [ecx]
add edx, edx
jae 0x40508f
inc edx
lea ecx, [ecx + 4]
mov dword [0x4a24a8], 4
mov eax, edx
xor edi, edi
jmp 0x408ac1
inc eax
add eax, eax
jne 0x4088f4
mov edx, dword [ecx]
add edx, edx
jae 0x4050c6
inc edx
lea ecx, [ecx + 4]
mov dword [ebx], 4
mov eax, edx
xor edi, edi
jmp 0x408ac1
add eax, eax
jne 0x4044af
mov edx, dword [ecx]
add edx, edx
jb 0x404550
lea ecx, [ecx + 4]
inc edx
mov eax, edx
mov edx, 1
xor ebx, ebx
jmp 0x408a0a
jmp 0x408a49
jns 0x4093a6
add eax, eax
jne 0x404565
mov edx, dword [ecx]
add edx, edx
jb 0x404465
inc edx
lea ecx, [ecx + 4]
mov eax, edx
mov edx, 1
xor ebx, ebx
jmp 0x408a0a
jmp 0x408a0a
cmp esi, 2
je 0x418ff2
inc esi
mov dword [ebp + 0x2c], esi
mov esi, dword [eax + 0x7c]
mov edx, ecx
mov ecx, dword [eax + 0x48]
xor eax, eax
jmp 0x408a8b
mov eax, edx
jmp 0x408aaf
adc eax, eax
mov ebx, dword [ebp + 0x2c]
dec ebx
je 0x408ded
mov dword [ebp + 0x2c], ebx
jmp 0x408a8b
mov edx, 1
xor ebx, ebx
add eax, eax
jne 0x409461
mov edi, dword [ecx]
add edi, edi
adc ebx, ebx
lea ecx, [ecx + 4]
dec edx
jne 0x408a75
inc edi
add ebx, 7
cmp ebx, 8
jne 0x4092a6
mov dword [0x4a24ac], ebx
mov dword [ebp + 0x30], 0
jmp 0x408ea1
lea ecx, [ecx + 4]
inc eax
mov edx, dword [ebx + 0x7c]
mov dword [ebx + 0x6c], esi
xor esi, esi
add eax, eax
jne 0x408b0e
mov ebx, dword [ecx]
add ecx, 4
add ebx, ebx
lea edi, [0x4a24ac]
adc esi, esi
inc ebx
dec dword [edi]
jne 0x408a81
add esi, dword [ebp + 0x30]
and esi, 0xff
mov eax, ebx
jmp 0x408b25
inc edi
mov eax, edi
jmp 0x408a0a
mov dword [ebp + 0x2c], edi
mov edx, ebx
jmp 0x408a8b
mov eax, ebx
jmp 0x408a49
inc eax
mov dword [ebp + 0x2c], eax
xor eax, eax
add edx, edx
jne 0x4089ef
mov ebx, dword [ecx]
lea ecx, [ecx + 4]
add ebx, ebx
adc eax, eax
inc ebx
mov edi, dword [ebp + 0x2c]
dec edi
jne 0x408a7a
mov dword [0x4a2488], eax
mov edi, ebx
jmp 0x408ea1
jae 0x40509e
mov dword [0x4a24a8], 4
xor edi, edi
add eax, eax
je 0x40930e
adc edi, edi
dec dword [0x4a24a8]
jne 0x4088f9
dec edi
jne 0x4089a3
mov dword [0x4a249c], esi
mov esi, edi
mov edx, dword [0x4a24ac]
mov ebx, dword [0x4a24a8]
mov dword [0x4a24ac], ebx
jmp 0x408b25
mov dword [0x4a24ac], ebx
mov dword [ebp + 0x30], 0
mov edi, eax
jmp 0x408ea1
adc esi, esi
dec dword [0x4a24ac]
jne 0x40899e
add esi, dword [ebp + 0x30]
and esi, 0xff
mov edi, dword [0x4a249c]
mov ebx, dword [edi]
and ebx, dword [esp + 0x548]
or ebx, esi
mov dword [edi], ebx
inc edi
mov dword [0x4a24ac], edx
mov esi, edi
mov edi, eax
jmp 0x408ea1
adc ecx, ecx
dec dword [0x4a24dc]
jne 0x4094b9
lea eax, [0x4a2464]
mov dword [eax + 0x48], ebx
mov dword [ebp + 0x30], ecx
mov ecx, dword [eax + 0x7c]
jmp 0x408ea1
mov dword [eax + 0x7c], esi
mov esi, edi
add esi, 2
mov edi, dword [ebp + 0x2c]
test edi, edi
je 0x4089cc
mov dword [ebp + 0x1c], edi
mov ebx, edi
mov edi, esi
mov esi, dword [eax + 0x7c]
mov eax, ecx
mov ecx, dword [0x4a24a4]
jmp 0x408ec4
inc edx
mov eax, edx
jmp 0x408ec4
mov dword [0x4a2488], eax
mov edi, edx
jmp 0x408ea1
mov dword [0x4a249c], esi
mov esi, edi
mov edx, dword [0x4a24ac]
jmp 0x408b25
cmp eax, dword [ebp + 8]
jle 0x4096fe
mov dword [ebp + 0x1c], eax
xchg edi, ecx
mov ebx, esi
mov esi, dword [ebp + 0x2c]
mov eax, edx
jmp 0x408ec4
mov dword [0x4a239c], eax
add esi, 4
mov eax, dword [0x4a239c]
mov ebx, dword [0x4a2460]
mov dword [esp + 0x648], eax
mov dword [esp + 0x5d4], ebx
lea edi, [0x4013cc]
mov edx, dword [0x4a2118]
sub edx, dword [esp + 0x5b8]
xor eax, eax
xor esi, esi
mov ebx, eax
inc eax
cmp eax, 0x10b
jl 0x408915
mov dword [ebp + 4], 1
mov ecx, dword [0x4a208c]
mov esi, dword [0x4a2040]
mov dword [0x4a2488], 8
mov dword [ebp + 0x30], 0
mov dword [0x4a24ac], 0
mov edi, dword [esp + 0x168]
add edi, edi
je 0x4088b2
jae 0x411a06
mov dword [0x4a249c], esi
xor esi, esi
mov edx, dword [0x4a24ac]
mov eax, edi
jmp 0x408a49
mov edx, edi
mov dword [0x4a24b4], eax
mov eax, esi
sub eax, dword [ebp + 0x1c]
mov edx, eax
mov dword [ebp + 0x2c], ecx
mov ecx, edi
mov dword [0x4a24c8], esi
xor esi, esi
or esi, eax
mov edi, dword [0x4a24c8]
rep movsb byte es:[edi], byte [esi]
mov dword [0x4a2228], esi
mov dword [ebp + 4], ebx
mov esi, edi
mov edi, dword [0x4a24b4]
mov ecx, dword [ebp + 0x2c]
jmp 0x408ea1
cmp edi, dword [ebp + 8]
jle 0x40970d
mov dword [ebp + 0x1c], edi
mov ebx, esi
mov esi, dword [ebp + 0x2c]
mov edi, eax
mov eax, ecx
mov ecx, dword [edx + 0x7c]
jmp 0x408ec4
inc eax
mov edi, eax
jmp 0x408ea1
lea ecx, [0x402dc9]
mov eax, dword [ebx + edi]
lea ebx, [ebx + 4]
add esi, eax
mov ecx, dword [0x4a2044]
add dword [esi + ecx], edx
mov dword [0x4a1e38], edi
mov eax, ebx
jmp 0x408e5e
cmp edi, dword [edx - 0x5b4]
jge 0x409247
cmp edi, dword [edx - 0x5e8]
jl 0x408eff
mov dword [ebp + 4], esi
mov dword [edx + 0x40], eax
mov esi, dword [ebp + 0x2c]
mov eax, ecx
mov ecx, dword [edx + 0x7c]
jmp 0x4093a6
inc edx
lea edi, [edi + 4]
mov eax, dword [ebp + 0x34]
cmp eax, dword [esp + 0x628]
jge 0x4096dc
cmp eax, dword [ebx - 0x5a4]
jl 0x40933e
mov dword [ebx + 0x64], edi
mov ebx, edx
mov edx, eax
mov eax, ecx
jmp 0x409390
inc edx
lea ecx, [ecx + 4]
mov eax, edx
jmp 0x4090d3
mov eax, dword [esp + 0x328]
add eax, dword [0x4a1db0]
mov ecx, dword [eax]
test ecx, ecx
jne 0x405b1a
mov ebx, dword [esp + 0x5d4]
mov esi, dword [0x4a2044]
mov dword [ebp + 0x1c], 0
mov edi, dword [0x4a1f64]
mov dword [ebp + 4], ebx
jmp 0x4093cb
cmp edx, dword [ebp + 8]
jle 0x40964d
mov dword [ebp + 0x1c], edx
mov ecx, dword [0x4a24bc]
mov edi, eax
mov eax, ebx
mov ebx, esi
mov esi, dword [ebp + 0x2c]
jmp 0x408ec4
sub edx, 2
jne 0x4048a6
mov ebx, dword [ebp + 4]
mov edi, 1
mov dword [ebp + 0x1c], ebx
add eax, eax
je 0x409408
adc edi, edi
add eax, eax
jne 0x4093da
lea edx, [0x4001fc]
mov edx, dword [ecx]
add edx, edx
lea eax, [0x401ff5]
jb 0x40905e
lea ecx, [ecx + 4]
inc edx
mov eax, edx
jmp 0x408ec4
add eax, 2
mov dword [ebp + 0x1c], edi
mov ebx, edi
mov edi, eax
mov eax, edx
jmp 0x408ec4
lea ecx, [ecx + 4]
inc eax
mov edx, dword [esi]
and edx, dword [esp + 0x548]
dec ebx
jne 0x40455b
or edx, edi
mov dword [esi], edx
inc esi
add eax, eax
jne 0x40456a
mov edx, dword [ecx]
lea ecx, [ecx + 4]
add edx, edx
jb 0x40446d
inc edx
mov edi, edx
jmp 0x408ea1
mov edi, eax
jmp 0x408ea1
mov edx, dword [edx + 0x7c]
mov dword [0x4a24bc], edx
mov ebx, ecx
mov edx, edi
jmp 0x409390
adc edx, edx
add eax, eax
jne 0x411a83
mov ebx, dword [ecx]
add ebx, ebx
jb 0x411ef1
add ecx, 4
inc ebx
lea edi, [0x4a2440]
sub edx, 2
jne 0x4049d6
mov edi, 1
mov eax, ebx
mov ebx, dword [ebp + 4]
mov edx, dword [ebp + 4]
mov dword [ebp + 0x1c], edx
jmp 0x4090d3
mov dword [edx + 0x64], edi
mov ebx, ecx
mov edx, eax
mov eax, dword [0x4a24c0]
jmp 0x409390
mov dword [0x4a24dc], 8
mov dword [0x4a24e0], ecx
xor ecx, ecx
add edi, edi
jne 0x408b48
lea edx, [0x4a2464]
mov dword [edx + 0x18], ebx
mov ebx, dword [edx + 0x7c]
mov eax, dword [ebx]
add eax, eax
adc ecx, ecx
lea ebx, [ebx + 4]
dec dword [edx + 0x78]
jne 0x409495
inc eax
mov dword [ebp + 0x30], ecx
mov ecx, dword [edx + 0x18]
mov dword [edx + 0x48], ecx
mov ecx, ebx
mov edi, eax
jmp 0x408ea1
cmp eax, dword [ebp + 8]
jle 0x4096ea
mov dword [ebp + 0x1c], eax
mov ebx, esi
mov esi, dword [ebp + 0x2c]
mov eax, ecx
mov ecx, edi
mov edi, dword [edx + 0x68]
jmp 0x408ec4
mov eax, dword [ecx]
add eax, eax
adc edi, edi
dec dword [0x4a24a8]
jne 0x40890c
inc eax
lea ecx, [ecx + 4]
dec edi
je 0x408df9
js 0x40897d
jmp 0x4093a6
mov esi, dword [0x4a2044]
jmp 0x4093cb
cmp eax, dword [ebx - 0x5d8]
jl 0x408e0c
mov dword [ebp + 4], esi
mov dword [ebx + 0x50], ecx
mov esi, dword [ebp + 0x2c]
mov ecx, edi
mov edi, eax
mov eax, edx
jmp 0x4093a6
cmp eax, dword [edx - 0x5a4]
jge 0x409295
cmp eax, dword [edx - 0x5d8]
jl 0x4092f1
mov dword [ebp + 4], esi
mov edx, dword [edx + 0x68]
mov dword [0x4a24a8], edx
mov edx, edi
mov edi, eax
mov eax, ecx
mov ecx, edx
mov esi, dword [ebp + 0x2c]
jmp 0x4093a6
cmp edx, dword [0x4a1eb4]
jl 0x4093e5
inc eax
mov dword [ebp + 4], esi
mov dword [0x4a24a8], eax
mov esi, dword [ebp + 0x2c]
mov ecx, dword [0x4a24bc]
mov eax, ebx
mov edi, edx
inc dword [0x4a24a8]
mov dword [ebp + 0x1c], edi
mov ebx, dword [ebp + 4]
mov edi, dword [0x4a24a8]
jmp 0x408ec4
mov eax, dword [0x4a2460]
mov dword [esp + 0x5d4], eax
mov esi, ecx
mov dword [esi + 0x464], 0
jmp 0x408e47
jae 0x408ec4
jmp 0x4090d3
cmp edx, dword [0x4a1e80]
jl 0x40909f
mov dword [ebp + 4], esi
mov dword [0x4a24a8], eax
mov esi, dword [ebp + 0x2c]
mov ecx, dword [0x4a24bc]
mov eax, ebx
mov edi, edx
jmp 0x4093a6
lea edx, [0x4009a7]
mov eax, dword [ecx]
add eax, eax
adc edi, edi
lea ecx, [ecx + 4]
inc eax
add eax, eax
jne 0x40945c
mov edx, dword [ecx]
lea ecx, [ecx + 4]
add edx, edx
lea eax, [0x400baa]
jae 0x408de5
inc edx
mov eax, edx
jmp 0x4090d3
mov edi, 1
mov ebx, dword [ebp + 4]
mov edx, dword [ebp + 4]
mov dword [ebp + 0x1c], edx
jmp 0x4090d3
mov eax, dword [esi + 0x68]
mov dword [esp + 0x5d4], eax
mov esi, dword [esi + 0x7c]
jmp 0x4093cb
jmp 0x4093da
lea edi, [0x40392a]
adc ebx, ebx
dec edx
jne 0x4089ca
lea ebx, [ebx + 7]
cmp ebx, 8
je 0x408afa
mov dword [0x4a24e0], ecx
mov dword [0x4a24dc], 8
xor ecx, ecx
mov edi, eax
jmp 0x4092b8
inc eax
mov dword [edx + 0x7c], ebx
mov ebx, dword [edx + 0x18]
mov edi, eax
jmp 0x4092b8
mov edx, dword [ebp + 4]
cmp edx, dword [esp + 0x628]
jl 0x409388
inc eax
jmp 0x409390
jmp 0x4092b8
mov dword [0x4a24bc], edi
mov eax, dword [ebp + 0x34]
mov dword [ebp + 4], eax
mov ebx, edx
mov eax, dword [0x4a24d4]
jmp 0x409693
inc eax
jmp 0x4094b3
inc ecx
mov dword [edx + 0x68], eax
mov eax, dword [ebp + 4]
cmp eax, dword [esp + 0x628]
jl 0x40935b
mov dword [edx + 0x64], edi
mov ebx, ecx
mov edx, eax
mov eax, dword [0x4a24c0]
jmp 0x4094b3
adc esi, esi
dec ecx
jne 0x404a1d
or esi, edx
mov dword [ebp + 4], esi
mov eax, 1
add ebx, ebx
je 0x41aba1
adc eax, eax
add ebx, ebx
jne 0x41a8d2
mov edi, dword [0x4a24bc]
mov ecx, dword [edi]
lea edi, [edi + 4]
add ecx, ecx
lea edx, [0x4a2468]
jb 0x419205
inc ecx
mov dword [edx + 0x7c], edi
mov edi, dword [ebp + 4]
cmp edi, dword [esp + 0x628]
jl 0x409005
mov edx, dword [edx + 0x7c]
mov dword [0x4a24bc], edx
mov ebx, ecx
mov edx, edi
jmp 0x4094b3
mov dword [ebx + 0x64], edi
mov ebx, edx
mov edx, eax
mov eax, ecx
jmp 0x4094b3
inc dword [edx + 0x68]
mov dword [edx + 0x64], edi
mov ebx, ecx
mov edx, eax
mov eax, dword [0x4a24c0]
jmp 0x4094b3
inc ecx
mov dword [ebx + 0x64], edi
mov ebx, edx
mov edx, eax
mov eax, ecx
jmp 0x4094b3
inc eax
mov edx, dword [edx + 0x7c]
mov dword [0x4a24bc], edx
mov ebx, ecx
mov edx, edi
jmp 0x4094b3
mov dword [0x4a243c], eax
mov eax, dword [ebp + 0x3c]
mov eax, dword [eax + edi*4]
add eax, dword [0x4a204c]
mov dword [ebp + 0x30], eax
lea eax, [0x4012c0]
xor eax, eax
mov dword [ebp + 0x44], eax
mov dword [0x4a2420], ebx
mov ebx, dword [ebp + 0x30]
movzx eax, byte [ebx]
test eax, eax
je 0x408254
mov dword [ebp + 0x38], eax
lea eax, [0x4a23d4]
mov dword [eax + 0x48], esi
mov dword [eax + 0x58], ecx
mov esi, dword [ebp + 0x44]
mov ecx, dword [esp + 0x584]
mov dword [ebp + 0x4c], esi
rol esi, cl
inc ebx
mov dword [eax + 0x7c], edx
mov edx, dword [ebp + 0x38]
sub edx, dword [eax - 0x594]
add esi, edx
mov dword [ebp + 0x30], ebx
mov ebx, dword [eax + 0x4c]
mov ecx, dword [eax + 0x58]
mov eax, esi
mov esi, dword [0x4a241c]
mov edx, dword [0x4a2450]
jmp 0x40a37b
lea ebx, [0x4a24a8]
add edi, edi
jne 0x411fb2
mov eax, dword [ecx]
lea ecx, [ecx + 4]
add eax, eax
jae 0x40895b
inc eax
mov edx, 1
jmp 0x411c53
jae 0x4090bf
jmp 0x411c53
jae 0x408932
mov edx, 1
add eax, eax
jne 0x409259
mov ebx, dword [ecx]
lea ecx, [ecx + 4]
add ebx, ebx
adc edx, edx
inc ebx
add ebx, ebx
jne 0x411c7f
lea edi, [0x4a2450]
mov eax, dword [ecx]
lea ecx, [ecx + 4]
add eax, eax
jae 0x404870
inc eax
jmp 0x411c53
mov eax, ebx
jmp 0x411a83
inc ebx
lea ecx, [ecx + 4]
mov eax, ebx
jmp 0x411c53
inc edx
add ecx, 4
mov eax, edx
mov edx, 1
jmp 0x411c53
mov dword [ebp + 0x34], ebx
rol ebx, cl
inc edi
add ebx, edx
mov dword [eax + 0x64], ebx
mov dword [eax + 0x68], edi
mov edi, dword [eax + 0x58]
mov ecx, dword [eax + 0x7c]
mov ebx, dword [eax - 0x11c]
mov edx, dword [eax + 0x30]
jmp 0x411f6c
mov dword [0x4a24d0], eax
mov eax, dword [0x4a24f0]
mov edi, dword [0x4a24d0]
mov eax, dword [eax + edi*4]
add eax, dword [0x4a201c]
mov dword [0x4a2520], eax
lea eax, [0x4a251c]
mov dword [eax], 0
mov dword [0x4a2510], edi
mov edi, dword [0x4a2520]
movzx eax, byte [edi]
test eax, eax
je 0x41882c
mov dword [ebp + 0x3c], eax
lea eax, [0x4a24b8]
mov dword [eax + 0x30], edx
mov edx, dword [ebp + 0x3c]
sub edx, dword [eax - 0x678]
mov dword [eax - 0x11c], ebx
mov dword [eax + 0x7c], ecx
mov ebx, dword [eax + 0x64]
xor ecx, ecx
or ecx, dword [esp + 0x584]
jmp 0x411f23
mov eax, edi
jmp 0x411c48
mov dword [ebp + 0x48], edi
mov edi, eax
mov dword [0x4a2430], edx
xor edx, edx
movzx ecx, byte [edx + edi]
cmp ecx, dword [esp + 0x6d8]
je 0x40814d
inc edx
cmp edx, dword [esp + 0x5ec]
jg 0x407c52
jmp 0x41569e
mov eax, dword [ecx + ebx*2]
movzx eax, ax
mov dword [esp + 0x648], edi
mov esi, dword [ebp + 4]
mov edx, eax
mov eax, dword [ebp + 0x38]
mov ebx, dword [0x4a2564]
jmp 0x4184d0
mov eax, ecx
mov ecx, dword [0x4a2578]
jmp 0x41850b
mov dword [ebp + 0x38], eax
lea eax, [0x4a2578]
mov dword [eax], ecx
mov ecx, dword [ebp + 0x38]
inc ecx
cmp ecx, dword [esp + 0x5ec]
jle 0x418380
mov dword [ebp + 4], ecx
mov ecx, dword [eax]
jmp 0x41852b
jmp 0x418630
lea edi, [0x4a24d4]
movzx edx, dx
sub edx, dword [edi + 0x74]
cmp edx, esi
jge 0x418afe
lea edx, [edx*4]
mov dword [ebp + 0x2c], esi
mov esi, dword [ebp + 0x34]
mov esi, dword [edx + esi]
add esi, dword [0x4a2128]
cmp esi, dword [ebp + 0x1c]
jl 0x418630
mov edi, dword [ebp + 0x1c]
add edi, dword [0x4a2560]
cmp esi, edi
jge 0x418459
mov dword [0x4a253c], esi
mov dword [ebp + 0x30], eax
xor eax, eax
mov edi, dword [0x4a253c]
movzx edx, byte [eax + edi]
cmp edx, dword [esp + 0x6d8]
jne 0x41838d
mov dword [ebp + 4], eax
lea eax, [0x403d7c]
add edi, dword [ebp + 4]
mov eax, esi
inc edi
mov edx, edi
sub edx, eax
mov eax, edx
mov dword [0x4a2540], ecx
mov ecx, eax
mov dword [ebp + 0x44], ebx
mov ebx, esi
mov dword [0x4a2580], edi
mov edi, dword [0x4a1efc]
rep movsb byte es:[edi], byte [esi]
mov dword [ebp + 0x3c], ebx
mov dword [0x4a2568], esi
mov dword [ebp + 0x48], edi
mov esi, dword [esp + 0x6e4]
jmp 0x418690
mov edx, dword [ecx + 4]
add eax, dword [0x4a2128]
mov ecx, dword [eax + 0x24]
mov ebx, dword [eax + 0x10]
mov esi, dword [eax + 0x14]
mov edi, dword [eax + 0x18]
add ecx, dword [0x4a2128]
mov dword [0x4a2548], ebx
mov ebx, dword [eax + 0x1c]
add ebx, dword [0x4a2128]
mov ebp, dword [eax + 0x20]
add ebp, dword [0x4a2128]
mov dword [0x4a254c], ebp
jmp 0x418f6a
add dword [0x4a255c], 4
inc dword [0x4a2558]
mov dword [eax], esi
lea ebx, [ebx + 4]
lea eax, [eax + 4]
cmp dword [0x4a2558], 0xf
jge 0x4188f1
mov edi, dword [0x4a255c]
mov esi, dword [ebp + 0x2c]
mov edx, dword [0x4a2560]
jmp 0x418f9e
lea edx, [0x4a1ee0]
mov ebx, dword [edx]
mov eax, dword [edi + ebx]
and eax, 0xff
inc edi
cmp eax, 0xff
jne 0x418e39
mov edx, dword [edi + ebx]
lea edi, [edi + 4]
mov eax, edx
jmp 0x418e39
mov dword [edi], esi
mov ebx, dword [0x4a1efc]
sub esp, 0xc
push ebx
call dword [0x4a1fd8]
mov ecx, eax
push dword [0x4a2580]
push ecx
call dword [0x4a206c]
mov ecx, dword [0x4a2568]
mov dword [0x4a2228], ecx
mov ecx, dword [0x4a2540]
mov esi, eax
mov eax, dword [ebp + 0x30]
mov ebx, dword [ebp + 0x44]
add esp, 0xc
jmp 0x418630
jmp 0x4186dc
mov dword [ebp + 0x48], edi
xor ebx, ebx
mov edi, eax
movzx ecx, byte [ebx + edi]
cmp ecx, dword [esp + 0x6d8]
jne 0x4187cb
add edi, ebx
mov ecx, eax
inc edi
mov edx, edi
sub edx, ecx
mov eax, edx
mov dword [0x4a2514], ecx
mov ecx, eax
mov esi, dword [0x4a2514]
jmp 0x418d9f
adc eax, eax
dec ebx
jne 0x4050be
test edi, edi
jne 0x409106
add eax, 2
cmp eax, 2
jne 0x408a85
jmp 0x418ff2
inc ebx
cmp ebx, dword [esp + 0x5ec]
jle 0x4186d3
jmp 0x4186ed
mov dword [ebp + 0x3c], ecx
mov ecx, dword [esp + 0x584]
rol eax, cl
jmp 0x4188e0
and dword [0x4a251c], 0x7fffffff
mov eax, dword [0x4a251c]
cmp eax, dword [0x4a250c]
jne 0x418aee
mov edi, dword [0x4a24fc]
mov dword [0x4a2528], ebx
mov ebx, dword [0x4a2510]
xor eax, eax
add eax, dword [edi + ebx*2]
and eax, 0xffff
mov dword [ebp + 0x3c], edx
mov edi, dword [0x4a24f8]
mov edx, eax
mov ebx, dword [0x4a2528]
jmp 0x418cc8
mov eax, dword [ebp + 0x3c]
lea eax, [eax + 4]
add edi, 4
mov dword [ebp + 0x2c], edx
mov edx, dword [0x4a239c]
mov dword [esp + 0x648], edx
mov edx, eax
mov eax, dword [0x4a2524]
jmp 0x418d3f
sub esi, dword [0x4a1e40]
inc edx
add eax, esi
mov ecx, dword [ebp + 0x3c]
jmp 0x418a6f
mov edx, dword [0x4a2550]
mov dword [0x4a2588], 1
mov edx, dword [esp + 0x128]
mov edi, dword [esp + 0x32c]
mov dword [ebp + 4], 8
mov dword [0x4a2574], 0
mov dword [0x4a257c], 0
mov eax, dword [esp + 0x168]
mov dword [0x4a258c], edi
mov dword [ebp + 4], esi
lea esi, [0x4a24f0]
mov dword [esi + 0x7c], edx
mov edx, dword [esi + 0x5c]
mov edx, dword [edx + ebx*4]
add edx, dword [esi - 0x3c8]
mov dword [ebp + 0x38], eax
xor eax, eax
movzx esi, byte [edx]
test esi, esi
jne 0x418800
mov dword [0x4a2544], eax
lea eax, [0x4a24f0]
and dword [eax + 0x54], 0x7fffffff
mov dword [ebp + 0x3c], edx
mov edx, dword [eax + 0x54]
cmp edx, dword [eax + 0x7c]
je 0x41833e
inc ebx
mov eax, dword [ebp + 0x38]
mov esi, dword [ebp + 4]
mov edx, dword [0x4a256c]
jmp 0x418b13
inc dword [0x4a2510]
mov eax, dword [0x4a2510]
jmp 0x418d68
mov ecx, dword [edi + 0x7c]
mov dword [edi + 0x58], ecx
mov edx, eax
jmp 0x418ef8
mov dword [0x4a2564], ebx
xor ebx, ebx
cmp ebx, dword [0x4a2554]
jle 0x418a52
mov dword [esp + 0x648], edi
mov ecx, dword [0x4a2558]
mov dword [ebp + 4], ecx
mov ecx, dword [0x4a2550]
mov dword [0x4a252c], ecx
mov edi, dword [0x4a255c]
mov edx, eax
mov ebx, dword [0x4a2564]
jmp 0x418ef8
lea edx, [edx*4]
mov dword [0x4a239c], ebx
mov ebx, dword [ebp + 0x1c]
mov eax, dword [edx + ebx]
add eax, dword [0x4a201c]
cmp eax, ecx
jge 0x418e4e
mov edx, dword [ebp + 0x2c]
inc edx
mov dword [ebp + 0x1c], eax
mov eax, dword [ebp + 0x30]
add eax, 4
cmp edx, 0xa
mov dword [0x4a2524], eax
mov dword [ebp + 0x34], ebx
mov dword [ebp + 0x44], esi
mov eax, dword [ebp + 0x1c]
mov dword [edi + 0x40], eax
jl 0x4188bb
mov eax, dword [ebp + 0x3c]
add eax, 4
lea edi, [edi + 4]
lea ecx, [0x4a239c]
mov edx, dword [ecx]
mov dword [esp + 0x648], edx
jmp 0x418e9f
mov ebx, dword [edx + 0x7c]
mov dword [edx + 0x524], ebx
mov dword [ebx + 0x40], 0
jmp 0x418d28
mov dword [ebp + 0x30], eax
mov eax, dword [eax]
xor eax, dword [edx]
mov dword [ebp + 0x1c], ebx
mov ebx, dword [esp + 0x648]
test eax, ebx
jne 0x418e77
mov dword [0x4a24f8], edi
lea edi, [0x4a250c]
mov dword [edi], eax
xor eax, eax
cmp eax, dword [0x4a2500]
jle 0x411f42
mov dword [esp + 0x648], ebx
mov ebx, dword [0x4a24f8]
jmp 0x418d36
mov dword [ebp + 0x4c], edi
mov edi, dword [0x4a1efc]
rep movsb byte es:[edi], byte [esi]
mov edx, dword [esp + 0x6e4]
mov dword [edi], edx
mov eax, dword [0x4a1efc]
sub esp, 0xc
push eax
call dword [sym.imp.kernel32.dll_LoadLibraryA]
push dword [ebp + 0x4c]
push eax
call dword [0x4a206c]
mov dword [0x4a2228], esi
mov esi, dword [ebp + 0x44]
mov edi, dword [0x4a2538]
mov ebx, dword [ebp + 0x1c]
mov ecx, dword [ebp + 0x48]
add esp, 0xc
jmp 0x418ce9
add ecx, eax
mov edx, dword [0x4a2040]
add dword [ecx + edx], esi
mov dword [0x4a1ee0], ebx
mov eax, edi
jmp 0x418eaf
mov dword [ebp + 0x44], esi
lea esi, [0x4a24bc]
mov dword [esi + 0x7c], edi
mov edi, ecx
add ecx, dword [esi + 0x4c]
cmp eax, ecx
jl 0x4186d5
mov esi, dword [ebp + 0x44]
mov ecx, edi
mov edi, dword [0x4a2538]
jmp 0x418ce9
mov dword [0x4a2518], eax
lea eax, [0x4a2518]
and dword [eax], 0xffff
mov dword [ebp + 0x3c], edx
mov edx, dword [eax]
sub edx, dword [ebp + 4]
cmp edx, esi
jl 0x418cc8
mov ebx, edi
jmp 0x418d36
mov esi, dword [0x4a2044]
sub esi, dword [0x4a1eac]
xor ecx, ecx
xor eax, eax
mov edi, eax
inc eax
cmp eax, 0x174c
jl 0x418667
mov eax, dword [0x4a2128]
add eax, dword [0x4a1db0]
mov ecx, dword [eax]
test ecx, ecx
jne 0x418f04
lea esi, [0x4a24b4]
mov edi, dword [esp + 0x730]
mov edx, dword [esi - 0x470]
mov dword [ebp + 4], 0
mov ebx, dword [esp + 0x6f4]
mov dword [esi + 0x78], edi
mov dword [esi + 0x7c], edx
mov dword [ebp + 0x30], ebx
mov dword [edx], 0
jmp 0x4188f7
lea edx, [0x4a20ac]
add ecx, dword [edx + 0x7c]
add ecx, dword [esp + 0x6b0]
mov eax, dword [ecx]
test eax, eax
jne 0x4185cd
mov dword [ebp + 4], 0
mov edx, dword [edx - 0x68]
mov ebx, dword [esp + 0x6f4]
mov edi, dword [esp + 0x730]
mov eax, dword [esp + 0x730]
mov dword [0x4a252c], eax
jmp 0x418ef8
mov ebp, esp
mov dword [0x4a2554], edi
mov dword [ebp + 0x1c], eax
mov dword [0x4a2558], 0
mov dword [ebp + 0x34], ebx
mov edi, dword [esp + 0x730]
mov eax, dword [0x4a2044]
mov ebx, dword [esp + 0x6f4]
mov dword [0x4a2550], edi
mov dword [ebp + 4], eax
mov dword [0x4a2560], edx
mov edx, dword [edi]
xor edx, dword [ebx]
mov dword [0x4a255c], edi
xor edi, edi
add edi, dword [esp + 0x648]
test edx, edi
jne 0x4184bc
jmp 0x418b0b
lea edx, [0x4a1fc8]
add eax, dword [edx + 0x54]
add eax, dword [esp + 0x6b0]
mov ecx, dword [eax]
test ecx, ecx
je 0x418d2d
mov edx, dword [eax + 4]
add ecx, dword [0x4a201c]
mov eax, dword [ecx + 0x18]
mov ebx, dword [ecx + 0x1c]
mov esi, dword [ecx + 0x20]
jmp 0x419011
mov esi, dword [0x4a201c]
add esi, dword [0x4a1db0]
mov eax, dword [esi]
test eax, eax
jne 0x418fc4
lea ecx, [0x4a2044]
mov ebx, dword [ecx]
jmp 0x418d36
mov ebp, dword [ecx + 0x10]
add esi, dword [0x4a201c]
mov edi, dword [ecx + 0x24]
add ebx, dword [0x4a201c]
mov dword [0x4a24f0], esi
mov esi, dword [ecx + 0x14]
add edi, dword [0x4a201c]
mov dword [esp + 4], ebp
mov ebp, esp
mov dword [0x4a2500], eax
mov dword [0x4a24fc], edi
mov dword [ebp + 0x2c], 0
mov dword [0x4a2508], edx
mov eax, dword [0x4a1ea8]
xor edi, edi
or edi, dword [0x4a2044]
xor edx, edx
or edx, dword [0x4a1dd4]
mov dword [0x4a24f4], eax
jmp 0x418d3f
inc ecx
mov dword [edx + 0x5c], ecx
mov dword [edx + 0x6c], eax
mov edx, dword [ebp + 4]
mov dword [ebp + 0x34], edx
jmp 0x41a820
mov ecx, dword [edi]
add edi, 4
add ecx, ecx
jae 0x409653
inc ecx
mov dword [edx + 0x6c], ecx
mov dword [edx + 0x7c], eax
mov edx, dword [ebp + 4]
mov dword [ebp + 0x34], edx
jmp 0x41a820
inc dword [eax + 0x6c]
or esi, edx
mov dword [ebp + 0x34], esi
mov dword [eax + 0x7c], 1
mov edx, dword [0x4a24c4]
add edx, edx
jne 0x409638
mov eax, dword [edi]
add eax, eax
mov ecx, dword [0x4a24d4]
adc ecx, ecx
add edi, 4
inc eax
add eax, eax
jne 0x41a8c2
lea ebx, [0x4a2458]
mov edx, dword [edi]
add edx, edx
jae 0x409030
inc edx
lea edi, [edi + 4]
mov dword [ebx + 0x6c], edx
mov dword [ebx + 0x7c], ecx
jmp 0x41a820
mov dword [0x4a24bc], edi
mov edx, dword [ebp + 0x34]
mov dword [ebp + 4], edx
mov ebx, eax
mov eax, ecx
jae 0x4094a3
mov dword [0x4a24c4], ebx
mov dword [0x4a24d4], eax
mov ecx, dword [ebp + 4]
mov dword [ebp + 0x34], ecx
mov edi, dword [0x4a24bc]
jmp 0x41a820
mov edi, dword [0x4a24bc]
mov ecx, dword [edi]
add edi, 4
add ecx, ecx
lea edx, [0x4a2458]
adc eax, eax
inc ecx
add ecx, ecx
je 0x41a6c8
mov dword [edx + 0x64], edi
mov ebx, ecx
jmp 0x41a8d2