Function at 0x415440
Capabilities:
Contain obfuscated stackstrings
Parse pe header
Resolve function by parsing pe exports

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x830
mov eax, dword [ebp + 8]
mov dword [esp], eax
call fcn.00404a30
mov esi, eax
cmp esi, 0
jne 0x415468
xor eax, eax
jmp 0x4173fa
xor ebx, ebx
jmp 0x41546c
mov dword [esp], esi
call fcn.00404e70
cmp ebx, eax
jb 0x41547f
mov al, 1
jmp 0x4173fa
mov dword [esp], esi
mov dword [esp + 4], ebx
call fcn.00404e80
mov dword [esp + 0x38], eax
mov al, byte [esp + 0x10c]
mov byte [esp + 0x14c], al
mov byte [esp + 0x280], 0xed
mov byte [esp + 0x281], 0x99
mov eax, 2
mov byte [esp + eax + 0x280], 0
add eax, 1
cmp eax, 6
jne 0x4154b2
jmp 0x4154c4
xor eax, eax
mov dword [esp + 0x28], ebx
cmp eax, 6
jae 0x41550c
movzx edx, byte [esp + eax + 0x280]
mov ecx, eax
add ecx, 0xf7bfcb1a
mov ebx, edx
xor ebx, 0xffffffff
mov edi, ecx
and edi, ebx
mov ebx, ecx
xor ebx, edx
add ecx, ebx
mov ebx, eax
add ebx, 0x1a
and ebx, edx
or edi, ebx
mov ebx, dword [esp + 0x28]
sub ecx, edi
add cl, 0x7e
mov byte [esp + eax + 0x280], cl
add eax, 1
jmp 0x4154ca
lea eax, [esp + 0x280]
mov ecx, dword [esp + 0x38]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 2
call fcn.00404d50
jmp 0x41552d
cmp eax, 0
setne al
test al, 1
jne 0x41553c
jmp 0x41568f
mov al, byte [esp + 0x108]
mov byte [esp + 0x150], al
mov byte [esp + 0x48], 0xa6
mov byte [esp + 0x49], 0xd5
mov byte [esp + 0x4a], 0x42
mov eax, 3
mov byte [esp + eax + 0x48], 0
add eax, 1
cmp eax, 4
jne 0x41555e
xor eax, eax
cmp eax, 4
jae 0x41559e
mov dl, byte [esp + eax + 0x48]
mov edi, eax
add edi, 0x10
mov ecx, 0x6f
sub ecx, eax
and ecx, 0x77
and edi, 0x88
or ecx, edi
xor cl, dl
xor cl, 0x77
add cl, 0xb0
mov byte [esp + eax + 0x48], cl
add eax, 1
jmp 0x41556d
lea eax, [esp + 0x48]
mov ecx, dword [esp + 0x38]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 3
call fcn.00404d50
cmp eax, 0
je 0x41568f
mov al, byte [esp + 0x104]
mov byte [esp + 0x154], al
mov byte [esp + 0x278], 0x1d
mov byte [esp + 0x279], 0xf9
mov eax, 2
mov byte [esp + eax + 0x278], 0
add eax, 1
cmp eax, 6
jne 0x4155e6
xor eax, eax
cmp eax, 6
jae 0x41565e
movzx ecx, byte [esp + eax + 0x278]
mov edx, eax
xor edx, 0x3ea054d5
mov edi, eax
or edi, 0xc15fab2a
and edi, edx
mov ebx, eax
and ebx, 0xc15fab2a
xor ebx, 0xffffffff
mov edx, eax
add edx, 0xc15fab2b
add edx, ebx
add edx, edi
mov edi, ecx
xor edi, 0xffffffff
mov ebx, ecx
shl ebx, 1
xor ebx, 0xffffffff
add ebx, ecx
and ebx, edi
mov edi, edx
or edi, ebx
xor ebx, edx
add ebx, edx
or edx, ecx
xor ebx, 0xffffffff
add edi, ebx
and edx, edi
add dl, 0x2e
mov byte [esp + eax + 0x278], dl
add eax, 1
jmp 0x4155f8
lea eax, [esp + 0x278]
mov ecx, dword [esp + 0x38]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 3
call fcn.00404d50
cmp eax, 0
setne al
xor al, 0xff
test al, 1
mov ebx, dword [esp + 0x28]
jne 0x415695
jmp 0x41569a
jmp 0x415691
jmp 0x415693
jmp 0x415695
jmp 0x4173f2
mov al, byte [esp + 0x100]
mov byte [esp + 0x158], al
mov byte [esp + 0x270], 0x35
mov byte [esp + 0x271], 0x81
mov eax, 2
mov byte [esp + eax + 0x270], 0
add eax, 1
cmp eax, 5
jne 0x4156bd
xor eax, eax
cmp eax, 5
jae 0x415764
movzx edx, byte [esp + eax + 0x270]
mov ecx, eax
add ecx, 0x65eeae0
mov ebx, 0x1f
sub ebx, eax
mov edi, 0x1f
sub edi, eax
and ebx, edi
or ecx, edx
xor edx, 0xffffffff
or ebx, edx
and ecx, ebx
mov edx, ecx
and edx, 0x9d
mov edi, ecx
and edi, 0x9d
mov ebx, ecx
and ebx, 2
xor ebx, 2
imul ebx, edi
mov edi, ecx
and edi, 2
or edx, 2
imul edx, edi
add edx, ebx
xor ecx, 0x9f
add ecx, edx
add cl, 1
mov byte [esp + eax + 0x270], cl
mov edx, eax
add edx, 1
mov ecx, eax
xor ecx, 0xffffffff
or ecx, 1
add ecx, edx
mov edx, eax
and edx, 6
xor edx, 0xfffffffe
and eax, 6
xor eax, 6
or eax, edx
xor eax, 0xffffffff
add eax, ecx
jmp 0x4156cf
lea eax, [esp + 0x270]
mov ecx, dword [esp + 0x38]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.004046c0
mov dword [esp + 0x2c4], eax
mov al, byte [esp + 0xfc]
mov byte [esp + 0x15c], al
mov byte [esp + 0x244], 0x1a
mov byte [esp + 0x245], 0x6b
mov byte [esp + 0x246], 0xe6
mov eax, 3
mov byte [esp + eax + 0x244], 0
add eax, 1
cmp eax, 6
jne 0x4157ad
xor eax, eax
cmp eax, 6
jae 0x4157ea
mov cl, byte [esp + eax + 0x244]
mov dl, al
add dl, 0xa9
xor dl, cl
add dl, 0xb3
mov byte [esp + eax + 0x244], dl
mov ecx, eax
shl ecx, 1
and ecx, 2
xor eax, 1
add eax, ecx
jmp 0x4157bf
lea eax, [esp + 0x244]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x38]
mov dword [esp], eax
call fcn.004047f0
fnstcw word [esp + 0x52]
movzx eax, word [esp + 0x52]
or eax, 0xc00
mov word [esp + 0x1ba], ax
fldcw word [esp + 0x1ba]
fistp dword [esp + 0x2d4]
fldcw word [esp + 0x52]
mov ecx, dword [esp + 0x2d4]
mov al, byte [esp + 0xf8]
mov byte [esp + 0x160], al
mov byte [esp + 0x268], 0xed
mov byte [esp + 0x269], 0x71
mov eax, 2
mov byte [esp + eax + 0x268], 0
add eax, 1
cmp eax, 7
jne 0x415853
mov dword [esp + 0x4c], ecx
mov dword [esp + 0x34], esi
xor eax, eax
cmp eax, 7
jae 0x4158b8
movzx ebx, byte [esp + eax + 0x268]
mov edx, 0xd7a56e93
sub edx, eax
mov edi, ebx
xor edi, 0xffffffff
mov ecx, edx
and ecx, edi
mov edi, edx
xor edi, ebx
add edx, edi
mov edi, 0x93
sub edi, eax
mov esi, 0x93
sub esi, eax
or esi, edi
and esi, ebx
xor edx, 0xffffffff
add ecx, edx
or ecx, esi
add cl, 0xe4
mov byte [esp + eax + 0x268], cl
add eax, 1
jmp 0x41586d
lea eax, [esp + 0x268]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x38]
mov dword [esp], eax
call fcn.004047f0
fnstcw word [esp + 0x50]
movzx eax, word [esp + 0x50]
or eax, 0xc00
mov word [esp + 0x1b8], ax
fldcw word [esp + 0x1b8]
fistp dword [esp + 0x2d0]
fldcw word [esp + 0x50]
mov ebx, dword [esp + 0x2d0]
lea eax, [esp + 0x42c]
xor ecx, ecx
mov dword [esp], eax
mov dword [esp + 4], 0x400
mov eax, dword [esp + 0x2c4]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0
call fcn.0040ee90
lea eax, [esp + 0x42c]
lea ecx, [esp + 0x3c]
lea edx, [esp + 0x264]
mov dword [esp], eax
mov dword [esp + 4], ecx
mov dword [esp + 8], edx
call fcn.0040f610
test al, 1
mov esi, dword [esp + 0x34]
jne 0x41595d
mov ebx, dword [esp + 0x28]
jmp 0x4173f2
cmp ebx, 0
sete al
mov byte [esp + 0x43], al
test al, 1
jne 0x415970
jmp 0x4168ff
mov al, byte [esp + 0xf4]
mov byte [esp + 0x164], al
mov byte [esp + 0x25c], 0xf0
mov byte [esp + 0x25d], 1
mov eax, 2
mov byte [esp + eax + 0x25c], 0
add eax, 1
cmp eax, 6
jne 0x415993
xor eax, eax
mov ebx, dword [esp + 0x28]
cmp eax, 6
jae 0x4159cb
mov cl, byte [esp + eax + 0x25c]
mov dl, al
add dl, 0x40
xor dl, cl
add dl, 0xc0
mov byte [esp + eax + 0x25c], dl
add eax, 1
jmp 0x4159a9
lea eax, [esp + 0x25c]
mov ecx, dword [esp + 0x38]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.004046c0
cmp eax, 0
je 0x415b2b
mov dword [esp + 0x294], eax
mov dword [esp], eax
call fcn.00417410
xor ecx, ecx
mov dword [esp + 0x250], eax
sub ecx, eax
add ecx, 0xffffffff
xor eax, eax
sub eax, ecx
mov ecx, 2
mov dword [esp + 0x290], eax
mul ecx
seto dl
mov ecx, 0xffffffff
test dl, 1
jne 0x415a29
mov ecx, eax
mov dword [esp], ecx
call fcn.0040cc40
mov edi, eax
xor eax, eax
mov dword [esp], edi
mov eax, dword [esp + 0x290]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x294]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0
call fcn.0040ee90
xor eax, eax
lea eax, [esp + 0xf0]
mov dword [esp], 0
mov dword [esp + 0x24c], edi
mov dword [esp + 4], edi
mov ecx, dword [esp + 0x250]
mov dword [esp + 8], ecx
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], eax
call dword [0x44c3b4]
sub esp, 0x18
mov eax, dword [esp + 0xf0]
mov ecx, 2
mul ecx
seto dl
mov ecx, 0xffffffff
test dl, 1
jne 0x415abb
mov ecx, eax
mov dword [esp], ecx
call fcn.0040cc40
mov ecx, dword [0x44c3b4]
mov dword [esp + 0x288], ecx
mov ecx, dword [esp + 0xf0]
xor edx, edx
lea edx, [esp + 0xf0]
mov dword [esp], 0
mov edi, dword [esp + 0x24c]
mov dword [esp + 4], edi
mov edi, dword [esp + 0x250]
mov dword [esp + 8], edi
mov edi, eax
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], edx
call dword [esp + 0x288]
sub esp, 0x18
mov eax, dword [esp + 0x24c]
mov dword [esp], eax
call fcn.0040cc50
jmp 0x415b26
jmp 0x4160a4
mov al, byte [esp + 0xe4]
mov byte [esp + 0x168], al
mov byte [esp + 0xe8], 0x3c
mov byte [esp + 0xe9], 0x3b
mov byte [esp + 0xea], 0x38
mov byte [esp + 0xeb], 0xb8
mov eax, 4
mov byte [esp + eax + 0xe8], 0
add eax, 1
cmp eax, 6
jne 0x415b5e
xor eax, eax
cmp eax, 6
jae 0x415b92
mov cl, byte [esp + eax + 0xe8]
mov dl, al
add dl, 0x8b
xor dl, cl
add dl, 0x49
mov byte [esp + eax + 0xe8], dl
add eax, 1
jmp 0x415b70
mov eax, dword [esp + 0xe8]
mov eax, dword [eax + 0x14]
mov dword [esp], eax
call fcn.0040d280
call fcn.0040d290
mov esi, eax
and esi, 0xf
add esi, 0x10
xor ebx, ebx
lea edi, [esp + 0x3ec]
jmp 0x415bbc
cmp ebx, esi
jb 0x415ddb
mov word [edi], 0
mov al, byte [esp + 0xcc]
mov byte [esp + 0x16c], al
mov byte [esp + 0xd0], 0x37
mov byte [esp + 0xd1], 0xb
mov byte [esp + 0xd2], 0x66
mov byte [esp + 0xd3], 9
mov byte [esp + 0xd4], 0x53
mov byte [esp + 0xd5], 7
mov byte [esp + 0xd6], 0x55
mov byte [esp + 0xd7], 5
mov byte [esp + 0xd8], 0x54
mov byte [esp + 0xd9], 3
mov byte [esp + 0xda], 0x39
mov byte [esp + 0xdb], 1
mov byte [esp + 0xdc], 0x64
mov byte [esp + 0xdd], 0x1f
mov byte [esp + 0xde], 0x1e
mov byte [esp + 0xdf], 0x1d
mov eax, 0x10
mov ebx, dword [esp + 0x28]
mov byte [esp + eax + 0xd0], 0
add eax, 1
cmp eax, 0x12
jne 0x415c60
xor edx, edx
cmp edx, 0x12
jae 0x415cd5
movzx edi, byte [esp + edx + 0xd0]
mov ecx, edx
add ecx, 0xe4ef983
mov ebx, edx
add ebx, 0x83
and ebx, edi
mov esi, ebx
and esi, 0xfd
mov eax, ebx
and eax, 2
xor eax, 2
imul eax, esi
mov esi, ebx
and esi, 2
or ebx, 2
imul ebx, esi
add eax, ebx
mov esi, ecx
and esi, edi
imul ebx, esi, 0xfe
xor ecx, edi
sub ebx, ecx
add ebx, eax
mov al, 0x71
sub al, bl
mov ebx, dword [esp + 0x28]
mov byte [esp + edx + 0xd0], al
add edx, 1
jmp 0x415c72
lea eax, [esp + 0x38c]
lea ecx, [esp + 0xd0]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.0040e480
lea ecx, [esp + 0x3ec]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.0040e480
lea ecx, [esp + 0x38c]
xor ecx, 0xffffffff
add eax, ecx
add eax, 1
sar eax, 1
jmp 0x415d15
xor ecx, ecx
lea edx, [esp + 0x38c]
lea ecx, [esp + 0xc8]
mov dword [esp], 0
mov dword [esp + 4], edx
mov dword [esp + 0x2b0], eax
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], ecx
call dword [0x44c3b4]
sub esp, 0x18
mov eax, dword [esp + 0xc8]
xor ecx, ecx
sub ecx, eax
add ecx, 0xfffffffc
xor eax, eax
sub eax, ecx
mov ecx, 2
mul ecx
seto dl
mov ecx, 0xffffffff
test dl, 1
jne 0x415d80
mov ecx, eax
mov dword [esp], ecx
call fcn.0040cc40
mov edi, eax
mov eax, dword [0x44c3b4]
mov ecx, dword [esp + 0xc8]
xor edx, edx
lea edx, [esp + 0x38c]
lea esi, [esp + 0xc8]
mov dword [esp], 0
mov dword [esp + 4], edx
mov edx, dword [esp + 0x2b0]
mov dword [esp + 8], edx
mov dword [esp + 0xc], edi
mov dword [esp + 0x10], ecx
mov dword [esp + 0x14], esi
call eax
sub esp, 0x18
mov ecx, dword [esp + 0x4c]
cmp ecx, 0
je 0x415e0b
jmp 0x415ebe
call fcn.0040d290
mov ecx, 0x24
cdq
idiv ecx
movsx eax, byte [edx + str.0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZ]
mov ecx, edi
add ecx, 2
mov word [edi], ax
mov eax, ebx
and eax, 1
shl eax, 1
xor ebx, 1
add ebx, eax
mov edi, ecx
jmp 0x415bbc
mov al, byte [esp + 0xc4]
mov byte [esp + 0x170], al
mov byte [esp + 0x234], 0x3a
mov byte [esp + 0x235], 9
mov byte [esp + 0x236], 0xeb
mov byte [esp + 0x237], 0xf
mov byte [esp + 0x238], 0x84
mov byte [esp + 0x239], 0xd
mov byte [esp + 0x23a], 0xe7
mov byte [esp + 0x23b], 3
mov byte [esp + 0x23c], 0
mov byte [esp + 0x23d], 1
mov eax, 0xa
mov esi, dword [esp + 0x34]
mov byte [esp + eax + 0x234], 0
add eax, 1
cmp eax, 0xd
jne 0x415e72
xor eax, eax
cmp eax, 0xd
jae 0x415ea6
mov cl, byte [esp + eax + 0x234]
mov dl, al
add dl, 0xc2
xor dl, cl
add dl, 0x36
mov byte [esp + eax + 0x234], dl
add eax, 1
jmp 0x415e84
lea eax, [esp + 0x234]
mov dword [esp], edi
mov dword [esp + 4], eax
call fcn.004177f0
jmp 0x4160a4
mov esi, dword [esp + 0x34]
cmp ecx, 1
sete al
test al, 1
jne 0x415ed1
jmp 0x415feb
mov al, byte [esp + 0xc0]
mov byte [esp + 0x174], al
mov byte [esp + 0x224], 0x5a
mov byte [esp + 0x225], 9
mov byte [esp + 0x226], 0xda
mov byte [esp + 0x227], 0x77
mov byte [esp + 0x228], 0xe0
mov byte [esp + 0x229], 0x75
mov byte [esp + 0x22a], 0xe6
mov byte [esp + 0x22b], 0x73
mov byte [esp + 0x22c], 0x70
mov byte [esp + 0x22d], 0x71
mov eax, 0xa
mov byte [esp + eax + 0x224], 0
add eax, 1
cmp eax, 0xe
jne 0x415f34
xor ebx, ebx
cmp ebx, 0xe
jae 0x415fcf
movzx eax, byte [esp + ebx + 0x224]
mov dword [esp + 0x28c], eax
mov edx, ebx
mov ebx, edx
add ebx, 0x58f97be
mov ecx, edx
add ecx, 0xbe
and ecx, eax
mov eax, 0xfa706841
sub eax, edx
and eax, 0x987e8953
and ebx, 0x678176ac
or eax, ebx
mov ebx, edx
xor eax, 0x987e8953
or eax, dword [esp + 0x28c]
xor ecx, eax
add ecx, 0xe4320949
mov edx, ecx
and edx, 1
mov eax, ecx
and eax, 0xfe
xor eax, 0xfe
and ecx, 0xfe
xor ecx, 0xfe
or ecx, eax
xor ecx, 0xffffffff
add edx, ecx
mov byte [esp + ebx + 0x224], dl
add ebx, 1
jmp 0x415f46
lea eax, [esp + 0x224]
mov dword [esp], edi
mov dword [esp + 4], eax
call fcn.004177f0
mov ebx, dword [esp + 0x28]
jmp 0x4160a4
cmp ecx, 2
sete al
test al, 1
jne 0x415ffa
jmp 0x4160a4
mov al, byte [esp + 0xbc]
mov byte [esp + 0x178], al
mov byte [esp + 0x214], 0xaa
mov byte [esp + 0x215], 0x99
mov byte [esp + 0x216], 0xee
mov byte [esp + 0x217], 0x9f
mov byte [esp + 0x218], 0xeb
mov byte [esp + 0x219], 0x9d
mov byte [esp + 0x21a], 0x93
mov byte [esp + 0x21b], 0xa3
mov byte [esp + 0x21c], 0xa0
mov byte [esp + 0x21d], 0xa1
mov eax, 0xa
mov byte [esp + eax + 0x214], 0
add eax, 1
cmp eax, 0xe
jne 0x41605d
xor eax, eax
cmp eax, 0xe
jae 0x416091
mov cl, byte [esp + eax + 0x214]
mov dl, al
add dl, 0x1a
xor dl, cl
add dl, 0x7e
mov byte [esp + eax + 0x214], dl
add eax, 1
jmp 0x41606f
lea eax, [esp + 0x214]
mov dword [esp], edi
mov dword [esp + 4], eax
call fcn.004177f0
lea eax, [esp + 0x258]
xor ecx, ecx
mov dword [esp + 0x2c], edi
mov dword [esp], edi
mov dword [esp + 4], eax
mov dword [esp + 8], 0x100002
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 5
mov dword [esp + 0x14], 0x60
mov dword [esp + 0x18], 0x80
call fcn.00440370
mov edi, eax
cmp eax, 0
setge al
test al, 1
jne 0x4160f6
jmp 0x416248
mov eax, dword [esp + 0x264]
mov ecx, dword [esp + 0x3c]
mov edx, dword [esp + 0x258]
xor esi, esi
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0
call fcn.004409c0
mov edi, eax
jmp 0x416126
mov eax, dword [esp + 0x258]
mov dword [esp + 0x2bc], eax
mov al, byte [esp + 0x140]
mov byte [esp + 0x1a4], al
mov byte [esp + 0x144], 0x97
mov byte [esp + 0x145], 0x96
mov byte [esp + 0x146], 0x95
mov byte [esp + 0x147], 0x94
mov eax, 4
mov esi, dword [esp + 0x34]
mov byte [esp + eax + 0x144], 0
add eax, 1
cmp eax, 5
jne 0x41616b
xor eax, eax
cmp eax, 5
jae 0x4161c2
movzx edx, byte [esp + eax + 0x144]
mov esi, eax
shl esi, 1
and esi, 0x29840848
mov ecx, eax
xor ecx, 0x94c20424
add ecx, esi
mov esi, dword [esp + 0x34]
xor ecx, edx
add ecx, 0x1835eb4b
mov edx, ecx
shl edx, 1
and edx, 2
xor ecx, 1
add ecx, edx
mov byte [esp + eax + 0x144], cl
add eax, 1
jmp 0x41617d
mov ecx, dword [esp + 0x144]
xor edx, edx
cmp edx, dword [0x44c3b8]
jb 0x4161d5
jmp 0x416248
mov eax, dword [0x44c3bc]
cmp dword [eax + edx*8], 0xb62b8d10
sete bl
test bl, 1
jne 0x4161eb
jmp 0x416234
mov eax, dword [eax + edx*8 + 4]
cmp eax, ecx
je 0x416234
mov dword [esp + 0x2a8], ecx
mov ecx, dword [0x44c3c0]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 1
mov eax, dword [esp + 0x2bc]
mov dword [esp + 0xc], eax
mov dword [esp + 0x298], edx
call fcn.0043ce20
mov edx, dword [esp + 0x298]
mov ecx, dword [esp + 0x2a8]
test bl, 1
je 0x41623f
mov ebx, dword [esp + 0x28]
jmp 0x416248
add edx, 1
mov ebx, dword [esp + 0x28]
jmp 0x4161cb
mov eax, dword [esp + 0x3c]
mov dword [esp], eax
call fcn.00439cf0
mov dword [esp + 0x3c], 0
cmp edi, 0
jge 0x41627b
mov ecx, dword [esp + 0x4c]
mov edi, dword [esp + 0x2c]
mov dword [esp + 0x30], 0
mov eax, 4
jmp 0x4168f1
mov ecx, dword [esp + 0x4c]
cmp ecx, 1
jne 0x416660
mov edi, dword [esp + 0x2c]
jmp 0x41628e
mov al, byte [esp + 0xb8]
mov byte [esp + 0x17c], al
mov byte [esp + 0x20c], 0xae
mov byte [esp + 0x20d], 0xa7
mov byte [esp + 0x20e], 0x32
mov eax, 3
mov byte [esp + eax + 0x20c], 0
add eax, 1
cmp eax, 5
jne 0x4162b9
xor eax, eax
cmp eax, 5
jae 0x4162ed
mov cl, byte [esp + eax + 0x20c]
mov dl, al
add dl, 0x8c
xor dl, cl
add dl, 0x44
mov byte [esp + eax + 0x20c], dl
add eax, 1
jmp 0x4162cb
lea eax, [esp + 0x20c]
mov ecx, dword [esp + 0x38]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.004046c0
mov ebx, eax
jmp 0x416308
mov al, byte [esp + 0xb4]
mov byte [esp + 0x180], al
mov byte [esp + 0x44], 0xc1
mov byte [esp + 0x45], 0xf3
mov byte [esp + 0x46], 0x62
mov eax, 3
mov byte [esp + eax + 0x44], 0
add eax, 1
cmp eax, 4
jne 0x41632a
xor eax, eax
cmp eax, 4
jae 0x416364
movzx edx, byte [esp + eax + 0x44]
mov esi, eax
add esi, 0x18
mov ecx, 0xe7
sub ecx, eax
and ecx, edx
xor edx, 0xffffffff
and esi, edx
or ecx, esi
add cl, 0x88
mov byte [esp + eax + 0x44], cl
add eax, 1
jmp 0x416339
lea eax, [esp + 0x44]
mov ecx, dword [esp + 0x38]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.004046c0
mov esi, eax
jmp 0x41637c
mov dword [esp], edi
call fcn.00417840
mov edi, eax
cmp ebx, 0
setne al
mov dword [esp + 0x94], 0
mov byte [esp + 0x41], al
test al, 1
jne 0x4163a1
jmp 0x4163b3
mov dword [esp], ebx
call fcn.0040cd60
sub eax, 0xffffffff
mov dword [esp + 0x94], eax
cmp esi, 0
setne al
xor edx, edx
mov byte [esp + 0x42], al
test al, 1
jne 0x4163c5
jmp 0x4163d8
mov dword [esp], esi
call fcn.0040cd60
mov edx, eax
add edx, 1
jmp 0x4163d4
jmp 0x4163d6
jmp 0x4163d8
xor ecx, ecx
sub ecx, edi
add ecx, 0xfffffff7
xor eax, eax
sub eax, ecx
xor ecx, ecx
sub ecx, dword [esp + 0x94]
sub eax, ecx
mov ecx, eax
and ecx, edx
shl ecx, 1
mov dword [esp + 0x254], edx
xor eax, edx
add eax, ecx
add eax, 1
mov ecx, 2
mul ecx
seto dl
mov ecx, 0xffffffff
test dl, 1
jne 0x41641b
mov ecx, eax
mov dword [esp], ecx
call fcn.0040cc40
mov dword [esp + 0x30], eax
mov al, byte [esp + 0xb0]
mov byte [esp + 0x184], al
mov byte [esp + 0x1f4], 0x96
mov byte [esp + 0x1f5], 9
mov byte [esp + 0x1f6], 0xeb
mov byte [esp + 0x1f7], 0x77
mov byte [esp + 0x1f8], 0xe6
mov byte [esp + 0x1f9], 0x75
mov byte [esp + 0x1fa], 0xde
mov byte [esp + 0x1fb], 0x73
mov byte [esp + 0x1fc], 0xe4
mov byte [esp + 0x1fd], 0x71
mov byte [esp + 0x1fe], 0xea
mov byte [esp + 0x1ff], 0x7f
mov byte [esp + 0x200], 0x23
mov byte [esp + 0x201], 0x7d
mov byte [esp + 0x202], 0x24
mov byte [esp + 0x203], 0x7b
mov byte [esp + 0x204], pe_nt_image_headers32
mov byte [esp + 0x205], 0x79
mov eax, 0x12
mov edi, dword [esp + 0x2c]
mov byte [esp + eax + 0x1f4], 0
add eax, 1
cmp eax, 0x16
jne 0x4164ce
mov dword [esp + 0x2c8], esi
mov dword [esp + 0x2cc], ebx
xor eax, eax
cmp eax, 0x16
jae 0x41657e
movzx edx, byte [esp + eax + 0x1f4]
mov ecx, eax
add ecx, 0x8c66babe
mov ebx, 0x73994541
sub ebx, eax
and ebx, 0x9ab22f2d
mov esi, ecx
and esi, 0x654dd0d2
or ebx, esi
xor ebx, edx
xor ebx, 0x654dd0d2
mov esi, eax
add esi, 0x8c66babf
mov edi, 0x73994541
sub edi, eax
or edi, ebx
add edi, esi
mov esi, edi
and esi, 2
xor esi, 2
mov ebx, edi
and ebx, 0xfffffffd
imul ebx, esi
mov esi, edi
and esi, 2
or edi, 2
imul edi, esi
add edi, ebx
sub ecx, edi
mov edi, dword [esp + 0x2c]
add ecx, edx
mov edx, ecx
and edx, 0x49
mov ebx, ecx
add ebx, edx
or ecx, 0xb6
sub ebx, ecx
mov byte [esp + eax + 0x1f4], bl
add eax, 1
jmp 0x4164ee
lea eax, [esp + 0x1f4]
mov ecx, dword [esp + 0x30]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0040e480
mov ecx, eax
add ecx, 2
mov word [eax], 0x20
add ecx, 2
mov word [eax + 2], 0x22
mov dword [esp], ecx
mov dword [esp + 4], edi
call fcn.0040e480
mov ebx, eax
add ebx, 2
mov word [eax], 0x22
mov esi, dword [esp + 0x34]
mov dword [esp], edi
call fcn.0040cc50
test byte [esp + 0x41], 1
mov edx, dword [esp + 0x254]
jne 0x4165e0
mov edi, ebx
mov ebx, dword [esp + 0x28]
jmp 0x416623
mov edi, ebx
add edi, 2
mov word [ebx], 0x2c
xor eax, eax
mov dword [esp], edi
mov eax, dword [esp + 0x94]
mov dword [esp + 4], eax
mov eax, dword [esp + 0x2cc]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0
call fcn.0040ee90
shl eax, 1
add edi, eax
mov ebx, dword [esp + 0x28]
mov edx, dword [esp + 0x254]
jmp 0x416623
test byte [esp + 0x42], 1
jne 0x41662c
jmp 0x416657
mov eax, edi
add eax, 2
mov word [edi], 0x2c
xor ecx, ecx
mov dword [esp], eax
mov dword [esp + 4], edx
mov eax, dword [esp + 0x2c8]
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0
call fcn.0040ee90
xor edi, edi
xor ecx, ecx
jmp 0x4168ef
mov dword [esp + 0x30], 0
cmp ecx, 2
mov edi, dword [esp + 0x2c]
je 0x416676
jmp 0x4168ef
mov dword [esp], edi
call fcn.00417840
add eax, 0x1d
add eax, 1
mov ecx, 2
mul ecx
seto dl
mov ecx, 0xffffffff
test dl, 1
jne 0x41669a
mov ecx, eax
mov dword [esp], ecx
call fcn.0040cc40
mov dword [esp + 0x30], eax
mov al, byte [esp + 0xa4]
mov byte [esp + 0x188], al
mov byte [esp + 0xa8], 0x72
mov byte [esp + 0xa9], 0x91
mov byte [esp + 0xaa], 0x92
mov byte [esp + 0xab], 0x93
mov eax, 4
mov byte [esp + eax + 0xa8], 0
add eax, 1
cmp eax, 8
jne 0x4166d9
xor eax, eax
cmp eax, 8
jae 0x416716
mov cl, byte [esp + eax + 0xa8]
mov dl, al
add dl, 0xe4
xor dl, cl
add dl, 0x8c
mov byte [esp + eax + 0xa8], dl
mov ecx, eax
shl ecx, 1
and ecx, 2
xor eax, 1
add eax, ecx
jmp 0x4166eb
mov al, byte [esp + 0xa0]
mov byte [esp + 0x18c], al
mov byte [esp + 0x54], 0x9c
mov byte [esp + 0x55], 0xf
mov byte [esp + 0x56], 0x9f
mov byte [esp + 0x57], 0xf1
mov byte [esp + 0x58], 0x69
mov byte [esp + 0x59], 0xf3
mov byte [esp + 0x5a], 0x55
mov byte [esp + 0x5b], 0xf5
mov byte [esp + 0x5c], 0x66
mov byte [esp + 0x5d], 0xf7
mov byte [esp + 0x5e], 0x63
mov byte [esp + 0x5f], 0xf9
mov byte [esp + 0x60], 0x50
mov byte [esp + 0x61], 0xfb
mov byte [esp + 0x62], 0x5d
mov byte [esp + 0x63], 0xfd
mov byte [esp + 0x64], 0x50
mov byte [esp + 0x65], 0xff
mov byte [esp + 0x66], 0x52
mov byte [esp + 0x67], 0xe1
mov byte [esp + 0x68], 0
mov byte [esp + 0x69], 0xe3
mov byte [esp + 0x6a], 0xd
mov byte [esp + 0x6b], 0xe5
mov byte [esp + 0x6c], 0x43
mov byte [esp + 0x6d], 0xe7
mov byte [esp + 0x6e], 0x7e
mov byte [esp + 0x6f], 0xe9
mov byte [esp + 0x70], 0x4f
mov byte [esp + 0x71], 0xeb
mov byte [esp + 0x72], 0x4f
mov byte [esp + 0x73], 0xed
mov byte [esp + 0x74], 0xc
mov byte [esp + 0x75], 0xef
mov byte [esp + 0x76], 0x4c
mov byte [esp + 0x77], 0xd1
mov byte [esp + 0x78], 0x4b
mov byte [esp + 0x79], 0xd3
mov byte [esp + 0x7a], 0x42
mov byte [esp + 0x7b], 0xd5
mov byte [esp + 0x7c], 0x77
mov byte [esp + 0x7d], 0xd7
mov byte [esp + 0x7e], 0x43
mov byte [esp + 0x7f], 0xd9
mov byte [esp + 0x80], 0x4d
mov byte [esp + 0x81], 0xdb
mov byte [esp + 0x82], 0x3a
mov byte [esp + 0x83], 0xdd
mov byte [esp + 0x84], 0x33
mov byte [esp + 0x85], 0xdf
mov byte [esp + 0x86], pe_nt_image_headers32
mov byte [esp + 0x87], 0xc1
mov byte [esp + 0x88], 0x20
mov byte [esp + 0x89], 0xc3
mov byte [esp + 0x8a], 0x20
mov byte [esp + 0x8b], 0xc5
mov byte [esp + 0x8c], 0xc4
mov byte [esp + 0x8d], 0xc7
mov eax, 0x3a
mov byte [esp + eax + 0x54], 0
add eax, 1
cmp eax, 0x3c
jne 0x416875
xor eax, eax
cmp eax, 0x3c
jae 0x4168b3
mov dl, byte [esp + eax + 0x54]
mov esi, eax
and esi, 0xbd
xor esi, 0xbd
mov ecx, eax
and ecx, 0x42
sub ecx, esi
add cl, 0x3a
xor cl, dl
add cl, 0x8f
mov byte [esp + eax + 0x54], cl
add eax, 1
jmp 0x416884
lea eax, [esp + 0x54]
mov ecx, dword [esp + 0x30]
mov dword [esp], ecx
mov dword [esp + 4], eax
call fcn.0040e480
mov dword [esp], eax
mov dword [esp + 4], edi
call fcn.0040e480
lea ecx, [esp + 0xa8]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.0040e480
mov ecx, 2
mov esi, dword [esp + 0x34]
xor eax, eax
cmp eax, 0
je 0x416c29
jmp 0x4173f2
call fcn.00417860
xor ebx, 1
mov ecx, dword [esp + 0x4c]
mov eax, ecx
xor eax, 2
or ebx, eax
sete al
test al, 1
mov ebx, dword [esp + 0x28]
jne 0x41692c
mov dword [esp + 0x30], 0
xor edi, edi
jmp 0x416c29
mov eax, dword [esp + 0x3c]
mov dword [esp], eax
call fcn.00417410
mov edi, eax
sub edi, 0xffffffff
jmp 0x41693f
mov ecx, 2
mov eax, edi
mul ecx
seto dl
mov ecx, 0xffffffff
test dl, 1
jne 0x416957
mov ecx, eax
mov dword [esp], ecx
call fcn.0040cc40
mov dword [esp + 0x90], eax
mov eax, dword [esp + 0x3c]
jmp 0x41696c
xor ecx, ecx
mov ecx, dword [esp + 0x90]
mov dword [esp], ecx
mov dword [esp + 4], edi
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0
call fcn.0040ee90
mov eax, dword [esp + 0x264]
add eax, 0x18
add eax, 1
mov ecx, 2
mul ecx
seto dl
mov ecx, 0xffffffff
test dl, 1
jne 0x4169b0
mov ecx, eax
mov dword [esp], ecx
call fcn.0040cc40
mov cl, byte [esp + 0x9c]
mov byte [esp + 0x190], cl
mov byte [esp + 0x1bc], 0xcc
mov byte [esp + 0x1bd], 0x7f
mov byte [esp + 0x1be], 0xcf
mov byte [esp + 0x1bf], 0x71
mov byte [esp + 0x1c0], 0xf9
mov byte [esp + 0x1c1], 0x73
mov byte [esp + 0x1c2], 0xd5
mov byte [esp + 0x1c3], 0x75
mov byte [esp + 0x1c4], 0xc6
mov byte [esp + 0x1c5], 0x77
mov byte [esp + 0x1c6], 0xc3
mov byte [esp + 0x1c7], 0x49
mov byte [esp + 0x1c8], 0xf0
mov byte [esp + 0x1c9], 0x4b
mov byte [esp + 0x1ca], 0xed
mov byte [esp + 0x1cb], 0x4d
mov byte [esp + 0x1cc], 0xf0
mov byte [esp + 0x1cd], 0x4f
mov byte [esp + 0x1ce], 0xf2
mov byte [esp + 0x1cf], 0x41
mov byte [esp + 0x1d0], 0xa0
mov byte [esp + 0x1d1], 0x43
mov byte [esp + 0x1d2], 0xbd
mov byte [esp + 0x1d3], 0x45
mov byte [esp + 0x1d4], 0xe3
mov byte [esp + 0x1d5], 0x47
mov byte [esp + 0x1d6], 0xce
mov byte [esp + 0x1d7], 0x59
mov byte [esp + 0x1d8], 0xff
mov byte [esp + 0x1d9], 0x5b
mov byte [esp + 0x1da], 0xff
mov byte [esp + 0x1db], 0x5d
mov byte [esp + 0x1dc], 0xbc
mov byte [esp + 0x1dd], 0x5f
mov byte [esp + 0x1de], 0xfc
mov byte [esp + 0x1df], 0x51
mov byte [esp + 0x1e0], 0xdb
mov byte [esp + 0x1e1], 0x53
mov byte [esp + 0x1e2], 0xe2
mov byte [esp + 0x1e3], 0x55
mov byte [esp + 0x1e4], 0xf7
mov byte [esp + 0x1e5], 0x57
mov byte [esp + 0x1e6], 0xe3
mov byte [esp + 0x1e7], 0x29
mov byte [esp + 0x1e8], 0x9d
mov byte [esp + 0x1e9], 0x2b
mov byte [esp + 0x1ea], 0xca
mov byte [esp + 0x1eb], 0x2d
mov byte [esp + 0x1ec], 0x2c
mov byte [esp + 0x1ed], 0x2f
mov ecx, 0x32
mov byte [esp + ecx + 0x1bc], 0
add ecx, 1
cmp ecx, 0x36
jne 0x416b5b
xor ebx, ebx
mov dword [esp + 0x30], eax
cmp ebx, 0x36
jae 0x416be2
movzx edi, byte [esp + ebx + 0x1bc]
mov eax, ebx
add eax, 0x6fcb2b95
mov edx, 0x9034d46a
sub edx, ebx
or edx, edi
mov ecx, 0x6a
sub ecx, ebx
and ecx, 0x6e
mov esi, eax
and esi, 0x91
or ecx, esi
xor ecx, 0x91
mov esi, ebx
shl esi, 1
add esi, 0x2b
sub eax, esi
or ecx, eax
and ecx, edi
mov eax, dword [esp + 0x30]
xor edx, 0xffffffff
or ecx, edx
mov edx, ecx
shl edx, 1
and edx, 2
xor ecx, 1
add ecx, 0x16
add ecx, edx
mov byte [esp + ebx + 0x1bc], cl
mov ecx, ebx
shl ecx, 1
and ecx, 2
xor ebx, 1
add ebx, ecx
jmp 0x416b71
lea ecx, [esp + 0x1bc]
mov dword [esp], eax
mov dword [esp + 4], ecx
call fcn.0040e480
mov dword [esp], eax
mov eax, dword [esp + 0x90]
mov dword [esp + 4], eax
call fcn.0040e480
mov esi, dword [esp + 0x34]
mov ebx, dword [esp + 0x28]
jmp 0x416c12
mov eax, dword [esp + 0x90]
mov dword [esp], eax
call fcn.0040cc50
xor edi, edi
mov ecx, dword [esp + 0x4c]
jmp 0x416c29
test ecx, ecx
je 0x416c4a
jmp 0x416c2f
mov eax, ecx
sub eax, 1
je 0x416e2a
jmp 0x416c3c
sub ecx, 2
je 0x4170df
jmp 0x4173bf
test byte [esp + 0x43], 1
jne 0x416c56
jmp 0x416e2a
mov dword [esp + 0x2c], edi
call fcn.00417860
lea edi, [esp + 0x348]
xor eax, eax
mov ecx, 0x11
rep stosd dword es:[edi], eax
mov dword [esp + 0x348], 0x44
mov eax, dword [0x44c3ac]
mov dword [esp], eax
mov dword [esp + 4], 0x38c42730
call fcn.0043faf0
mov edi, eax
call fcn.00417860
call fcn.00417860
test edi, edi
setne al
xor eax, eax
lea eax, [esp + 0x348]
lea ecx, [esp + 0x2f4]
mov edx, dword [esp + 0x2c]
mov dword [esp], edx
mov edx, dword [esp + 0x30]
mov dword [esp + 4], edx
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
mov dword [esp + 0x18], 0
mov dword [esp + 0x1c], 0
mov dword [esp + 0x20], eax
mov dword [esp + 0x24], ecx
call edi
sub esp, 0x28
cmp eax, 0
setne al
test al, 1
mov edi, dword [esp + 0x2c]
jne 0x416d0f
jmp 0x416e25
mov eax, dword [esp + 0x2f4]
mov dword [esp + 0x2b4], eax
mov al, byte [esp + 0x134]
mov byte [esp + 0x1a8], al
mov byte [esp + 0x138], 0x97
mov byte [esp + 0x139], 0x96
mov byte [esp + 0x13a], 0x95
mov byte [esp + 0x13b], 0x94
mov eax, 4
mov byte [esp + eax + 0x138], 0
add eax, 1
cmp eax, 5
jne 0x416d50
xor eax, eax
cmp eax, 5
jae 0x416da7
movzx edx, byte [esp + eax + 0x138]
mov esi, eax
shl esi, 1
and esi, 0x29840848
mov ecx, eax
xor ecx, 0x94c20424
add ecx, esi
mov esi, dword [esp + 0x34]
xor ecx, edx
add ecx, 0x1835eb4b
mov edx, ecx
shl edx, 1
and edx, 2
xor ecx, 1
add ecx, edx
mov byte [esp + eax + 0x138], cl
add eax, 1
jmp 0x416d62
mov ecx, dword [esp + 0x138]
xor edi, edi
cmp edi, dword [0x44c3b8]
jb 0x416dba
jmp 0x416e1f
mov eax, dword [0x44c3bc]
cmp dword [eax + edi*8], 0xb62b8d10
sete bl
test bl, 1
jne 0x416dd0
jmp 0x416e0b
mov eax, dword [eax + edi*8 + 4]
cmp eax, ecx
je 0x416e0b
mov dword [esp + 0x29c], ecx
mov ecx, dword [0x44c3c0]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 1
mov eax, dword [esp + 0x2b4]
mov dword [esp + 0xc], eax
call fcn.0043ce20
mov ecx, dword [esp + 0x29c]
test bl, 1
je 0x416e16
mov ebx, dword [esp + 0x28]
jmp 0x416e1f
add edi, 1
mov ebx, dword [esp + 0x28]
jmp 0x416db0
mov edi, dword [esp + 0x2c]
jmp 0x416e25
jmp 0x4173bf
call fcn.00417860
mov eax, dword [0x44c3ac]
mov dword [esp], eax
mov dword [esp + 4], 0xe117db1e
call fcn.0043faf0
test eax, eax
setne cl
mov ecx, dword [esp + 0x3c]
xor edx, edx
lea edx, [0x421ae0]
mov dword [esp], 0
mov dword [esp + 4], 0
mov dword [esp + 8], edx
mov dword [esp + 0xc], ecx
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0
call eax
sub esp, 0x18
cmp eax, 0
setne cl
test cl, 1
jne 0x416e91
jmp 0x4170da
mov dword [esp + 0x2dc], 0xffffffff
mov dword [esp + 0x2d8], 0xdc3cba00
mov cl, byte [esp + 0x194]
mov byte [esp + 0x1a0], cl
mov byte [esp + 0x198], 0x97
mov byte [esp + 0x199], 0x96
mov byte [esp + 0x19a], 0x95
mov byte [esp + 0x19b], 0x94
mov ecx, 4
mov byte [esp + ecx + 0x198], 0
add ecx, 1
cmp ecx, 5
jne 0x416eda
mov dword [esp + 0x2c], edi
xor ecx, ecx
cmp ecx, 5
jae 0x416f31
movzx esi, byte [esp + ecx + 0x198]
mov edi, ecx
shl edi, 1
and edi, 0x29840848
mov edx, ecx
xor edx, 0x94c20424
add edx, edi
xor edx, esi
add edx, 0x1835eb4b
mov esi, edx
shl esi, 1
and esi, 2
xor edx, 1
add edx, esi
mov byte [esp + ecx + 0x198], dl
add ecx, 1
jmp 0x416ef0
mov edx, dword [esp + 0x198]
xor edi, edi
cmp edi, dword [0x44c3b8]
jb 0x416f47
jmp 0x416fcc
mov ecx, dword [0x44c3bc]
cmp dword [ecx + edi*8], 0x4e66b5a3
sete bl
test bl, 1
jne 0x416f5e
jmp 0x416fb5
mov ecx, dword [ecx + edi*8 + 4]
cmp ecx, edx
je 0x416fb5
mov dword [esp + 0x2ac], edx
mov edx, dword [0x44c3c0]
xor esi, esi
lea esi, [esp + 0x2d8]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 3
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], esi
mov dword [esp + 0x98], eax
call fcn.0043ce20
mov edx, dword [esp + 0x2ac]
mov eax, dword [esp + 0x98]
test bl, 1
je 0x416fc0
mov ebx, dword [esp + 0x28]
jmp 0x416fcc
add edi, 1
mov ebx, dword [esp + 0x28]
jmp 0x416f3a
mov cl, byte [esp + 0x128]
mov byte [esp + 0x1ac], cl
mov byte [esp + 0x12c], 0x97
mov byte [esp + 0x12d], 0x96
mov byte [esp + 0x12e], 0x95
mov byte [esp + 0x12f], 0x94
mov ecx, 4
mov byte [esp + ecx + 0x12c], 0
add ecx, 1
cmp ecx, 5
jne 0x416fff
xor ecx, ecx
cmp ecx, 5
jae 0x417052
movzx esi, byte [esp + ecx + 0x12c]
mov edi, ecx
shl edi, 1
and edi, 0x29840848
mov edx, ecx
xor edx, 0x94c20424
add edx, edi
xor edx, esi
add edx, 0x1835eb4b
mov esi, edx
shl esi, 1
and esi, 2
xor edx, 1
add edx, esi
mov byte [esp + ecx + 0x12c], dl
add ecx, 1
jmp 0x417011
mov edx, dword [esp + 0x12c]
xor edi, edi
mov esi, dword [esp + 0x34]
cmp edi, dword [0x44c3b8]
jb 0x417069
jmp 0x4170d6
mov ecx, dword [0x44c3bc]
cmp dword [ecx + edi*8], 0xb62b8d10
sete bl
test bl, 1
jne 0x417080
jmp 0x4170c2
mov ecx, dword [ecx + edi*8 + 4]
cmp ecx, edx
je 0x4170c2
mov dword [esp + 0x2a0], edx
mov edx, dword [0x44c3c0]
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], 1
mov dword [esp + 0xc], eax
mov dword [esp + 0x98], eax
call fcn.0043ce20
mov edx, dword [esp + 0x2a0]
mov eax, dword [esp + 0x98]
test bl, 1
je 0x4170cd
mov ebx, dword [esp + 0x28]
jmp 0x4170d6
add edi, 1
mov ebx, dword [esp + 0x28]
jmp 0x41705f
mov edi, dword [esp + 0x2c]
jmp 0x4173bf
mov dword [esp + 0x2c], edi
lea eax, [esp + 0x304]
xor ecx, ecx
mov dword [esp], eax
mov dword [esp + 4], 0
mov dword [esp + 8], 0x44
call fcn.0040ccd0
mov dword [esp + 0x304], 0x44
mov eax, dword [0x44c3ac]
mov dword [esp], eax
mov dword [esp + 4], 0x38c42730
call fcn.0043faf0
mov edi, eax
call fcn.00417860
call fcn.00417860
test edi, edi
setne al
xor eax, eax
lea eax, [esp + 0x304]
lea ecx, [esp + 0x2e4]
mov dword [esp], 0
mov edx, dword [esp + 0x30]
mov dword [esp + 4], edx
mov dword [esp + 8], 0
mov dword [esp + 0xc], 0
mov dword [esp + 0x10], 0
mov dword [esp + 0x14], 0x8000000
mov dword [esp + 0x18], 0
mov dword [esp + 0x1c], 0
mov dword [esp + 0x20], eax
mov dword [esp + 0x24], ecx
call edi
sub esp, 0x28
cmp eax, 0
setne al
test al, 1
mov edi, dword [esp + 0x2c]
jne 0x4171a4
jmp 0x4173bd
lea eax, [esp + 0x2e4]
add eax, 4
jmp 0x4171b0
mov eax, dword [eax]
mov dword [esp + 0x2b8], eax
mov al, byte [esp + 0x11c]
mov byte [esp + 0x1b0], al
mov byte [esp + 0x120], 0x97
mov byte [esp + 0x121], 0x96
mov byte [esp + 0x122], 0x95
mov byte [esp + 0x123], 0x94
mov eax, 4
mov byte [esp + eax + 0x120], 0
add eax, 1
cmp eax, 5
jne 0x4171ec
xor eax, eax
cmp eax, 5
jae 0x41723f
movzx edx, byte [esp + eax + 0x120]
mov esi, eax
shl esi, 1
and esi, 0x29840848
mov ecx, eax
xor ecx, 0x94c20424
add ecx, esi
xor ecx, edx
add ecx, 0x1835eb4b
mov edx, ecx
shl edx, 1
and edx, 2
xor ecx, 1
add ecx, edx
mov byte [esp + eax + 0x120], cl
add eax, 1
jmp 0x4171fe
mov esi, dword [esp + 0x120]
xor edi, edi
cmp edi, dword [0x44c3b8]
jb 0x417252
jmp 0x4172a9
mov eax, dword [0x44c3bc]
cmp dword [eax + edi*8], 0xb62b8d10
sete bl
test bl, 1
jne 0x417268
jmp 0x417295
mov eax, dword [eax + edi*8 + 4]
cmp eax, esi
je 0x417295
mov ecx, dword [0x44c3c0]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 1
mov eax, dword [esp + 0x2b8]
mov dword [esp + 0xc], eax
call fcn.0043ce20
test bl, 1
je 0x4172a0
mov ebx, dword [esp + 0x28]
jmp 0x4172a9
add edi, 1
mov ebx, dword [esp + 0x28]
jmp 0x417248
mov eax, dword [esp + 0x2e4]
mov dword [esp + 0x2c0], eax
mov al, byte [esp + 0x110]
mov byte [esp + 0x1b4], al
mov byte [esp + 0x114], 0x97
mov byte [esp + 0x115], 0x96
mov byte [esp + 0x116], 0x95
mov byte [esp + 0x117], 0x94
mov eax, 4
mov byte [esp + eax + 0x114], 0
add eax, 1
cmp eax, 5
jne 0x4172ea
xor eax, eax
cmp eax, 5
jae 0x41733d
movzx edx, byte [esp + eax + 0x114]
mov esi, eax
shl esi, 1
and esi, 0x29840848
mov ecx, eax
xor ecx, 0x94c20424
add ecx, esi
xor ecx, edx
add ecx, 0x1835eb4b
mov edx, ecx
shl edx, 1
and edx, 2
xor ecx, 1
add ecx, edx
mov byte [esp + eax + 0x114], cl
add eax, 1
jmp 0x4172fc
mov ecx, dword [esp + 0x114]
xor edi, edi
mov esi, dword [esp + 0x34]
cmp edi, dword [0x44c3b8]
jb 0x417354
jmp 0x4173b9
mov eax, dword [0x44c3bc]
cmp dword [eax + edi*8], 0xb62b8d10
sete bl
test bl, 1
jne 0x41736a
jmp 0x4173a5
mov eax, dword [eax + edi*8 + 4]
cmp eax, ecx
je 0x4173a5
mov dword [esp + 0x2a4], ecx
mov ecx, dword [0x44c3c0]
mov dword [esp], ecx
mov dword [esp + 4], eax
mov dword [esp + 8], 1
mov eax, dword [esp + 0x2c0]
mov dword [esp + 0xc], eax
call fcn.0043ce20
mov ecx, dword [esp + 0x2a4]
test bl, 1
je 0x4173b0
mov ebx, dword [esp + 0x28]
jmp 0x4173b9
add edi, 1
mov ebx, dword [esp + 0x28]
jmp 0x41734a
mov edi, dword [esp + 0x2c]
jmp 0x4173bf
mov eax, dword [esp + 0x3c]
mov dword [esp], eax
call fcn.00439cf0
cmp edi, 0
sete al
test al, 1
jne 0x4173df
jmp 0x4173d7
mov dword [esp], edi
call fcn.0040cc50
mov eax, dword [esp + 0x30]
cmp eax, 0
je 0x4173f0
mov dword [esp], eax
call fcn.0040cc50
jmp 0x4173f2
add ebx, 1
jmp 0x41546c
and al, 1
movzx eax, al
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret