Function at 0x416980
Capabilities:
Parse pe header

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
and esp, 0xfffffff8
sub esp, 0x330
mov esi, esp
mov edi, dword [ebp + 0xc]
lea eax, [0x444db8]
mov dword [esi + 0x2bc], eax
mov al, byte [esi + 0xf0]
mov byte [esi + 0x108], al
sub esp, 8
mov dword [esp], 0xab549cea
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x6b
mov ecx, eax
and ecx, 0xea
or eax, 0xea
xor ecx, eax
mov byte [esi + 0xf4], cl
sub esp, 8
mov dword [esp], 0xab549cea
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
mov ecx, eax
and ecx, 0xeb
or eax, 0xeb
xor ecx, eax
mov byte [esi + 0xf5], cl
sub esp, 8
mov dword [esp], 0xab549cea
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x65
mov ecx, eax
and ecx, 0xec
or eax, 0xec
xor ecx, eax
mov byte [esi + 0xf6], cl
sub esp, 8
mov dword [esp], 0xab549cea
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
mov ecx, eax
and ecx, 0xed
or eax, 0xed
xor ecx, eax
mov byte [esi + 0xf7], cl
sub esp, 8
mov dword [esp], 0xab549cea
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x79
mov ecx, eax
and ecx, 0xee
or eax, 0xee
xor ecx, eax
mov byte [esi + 0xf8], cl
sub esp, 8
mov dword [esp], 0xab549cea
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
mov ecx, eax
and ecx, 0xef
or eax, 0xef
xor ecx, eax
mov byte [esi + 0xf9], cl
sub esp, 8
mov dword [esp], 0xab549cea
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x34
mov ecx, eax
and ecx, 0xf0
or eax, 0xf0
xor ecx, eax
mov byte [esi + 0xfa], cl
sub esp, 8
mov dword [esp], 0xab549cea
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
mov ecx, eax
and ecx, 0xf1
or eax, 0xf1
xor ecx, eax
mov byte [esi + 0xfb], cl
sub esp, 8
mov dword [esp], 0xab549cea
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x2e
mov ecx, eax
and ecx, 0xf2
or eax, 0xf2
xor ecx, eax
mov byte [esi + 0xfc], cl
sub esp, 8
mov dword [esp], 0xab549cea
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
mov ecx, eax
and ecx, 0xf3
or eax, 0xf3
xor ecx, eax
mov byte [esi + 0xfd], cl
sub esp, 8
mov dword [esp], 0xab549cea
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x64
mov ecx, eax
and ecx, 0xf4
or eax, 0xf4
xor ecx, eax
mov byte [esi + 0xfe], cl
sub esp, 8
mov dword [esp], 0xab549cea
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
mov ecx, eax
and ecx, 0xf5
or eax, 0xf5
xor ecx, eax
mov byte [esi + 0xff], cl
sub esp, 8
mov dword [esp], 0xab549cea
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x62
mov ecx, eax
and ecx, 0xf6
or eax, 0xf6
xor ecx, eax
mov byte [esi + 0x100], cl
sub esp, 8
mov dword [esp], 0xab549cea
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
mov ecx, eax
and ecx, 0xf7
or eax, 0xf7
xor ecx, eax
mov byte [esi + 0x101], cl
sub esp, 8
mov dword [esp], 0xab549cea
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
mov ecx, eax
and ecx, 0xf8
or eax, 0xf8
xor ecx, eax
mov byte [esi + 0x102], cl
sub esp, 8
mov dword [esp], 0xab549cea
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
mov ecx, eax
and ecx, 0xf9
or eax, 0xf9
xor ecx, eax
mov byte [esi + 0x103], cl
mov eax, 0x10
mov byte [esi + eax + 0xf4], 0
add eax, 1
cmp eax, 0x11
jne 0x416cb6
mov dword [esi + 0xc], 0
mov eax, dword [esi + 0xc]
cmp eax, 0x11
jae 0x416d08
mov eax, dword [esi + 0xc]
mov ecx, dword [esi + 0xc]
movzx ecx, byte [esi + ecx + 0xf4]
sub esp, 8
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.0041a2a0
add esp, 8
mov ecx, dword [esi + 0xc]
mov byte [esi + ecx + 0xf4], al
mov eax, dword [esi + 0xc]
inc eax
mov dword [esi + 0xc], eax
jmp 0x416ccd
lea eax, [esi + 0xf4]
sub esp, 0xc
mov ecx, dword [ebp + 8]
mov dword [esp], ecx
mov dword [esp + 4], edi
mov dword [esp + 8], eax
call fcn.00413c40
add esp, 0xc
and al, 1
movzx ebx, al
mov al, byte [esi + 0xec]
mov byte [esi + 0x10c], al
sub esp, 8
mov dword [esp], 0x4c9c9eb6
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x63
mov ecx, eax
xor ecx, 0xffffffff
and ecx, 0xb6
and eax, 0x49
or ecx, eax
mov byte [esi + 0x15c], cl
sub esp, 8
mov dword [esp], 0x4c9c9eb6
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
mov ecx, eax
xor ecx, 0xffffffff
and ecx, 0xb7
and eax, 0x48
or ecx, eax
mov byte [esi + 0x15d], cl
sub esp, 8
mov dword [esp], 0x4c9c9eb6
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x65
mov ecx, eax
xor ecx, 0xffffffff
and ecx, 0xb8
and eax, 0x47
or ecx, eax
mov byte [esi + 0x15e], cl
sub esp, 8
mov dword [esp], 0x4c9c9eb6
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
mov ecx, eax
xor ecx, 0xffffffff
and ecx, 0xb9
and eax, 0x46
or ecx, eax
mov byte [esi + 0x15f], cl
sub esp, 8
mov dword [esp], 0x4c9c9eb6
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x72
mov ecx, eax
xor ecx, 0xffffffff
and ecx, 0xba
and eax, 0x45
or ecx, eax
mov byte [esi + 0x160], cl
sub esp, 8
mov dword [esp], 0x4c9c9eb6
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
mov ecx, eax
xor ecx, 0xffffffff
and ecx, 0xbb
and eax, 0x44
or ecx, eax
mov byte [esi + 0x161], cl
sub esp, 8
mov dword [esp], 0x4c9c9eb6
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x74
mov ecx, eax
xor ecx, 0xffffffff
and ecx, 0xbc
and eax, 0x43
or ecx, eax
mov byte [esi + 0x162], cl
sub esp, 8
mov dword [esp], 0x4c9c9eb6
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
mov ecx, eax
xor ecx, 0xffffffff
and ecx, 0xbd
and eax, 0x42
or ecx, eax
mov byte [esi + 0x163], cl
sub esp, 8
mov dword [esp], 0x4c9c9eb6
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x39
mov ecx, eax
xor ecx, 0xffffffff
and ecx, 0xbe
and eax, 0x41
or ecx, eax
mov byte [esi + 0x164], cl
sub esp, 8
mov dword [esp], 0x4c9c9eb6
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
mov ecx, eax
xor ecx, 0xffffffff
and ecx, 0xbf
and eax, 0x40
or ecx, eax
mov byte [esi + 0x165], cl
sub esp, 8
mov dword [esp], 0x4c9c9eb6
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x2e
mov ecx, eax
xor ecx, 0xffffffff
and ecx, 0xc0
and eax, 0x3f
or ecx, eax
mov byte [esi + 0x166], cl
sub esp, 8
mov dword [esp], 0x4c9c9eb6
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
mov ecx, eax
xor ecx, 0xffffffff
and ecx, 0xc1
and eax, 0x3e
or ecx, eax
mov byte [esi + 0x167], cl
sub esp, 8
mov dword [esp], 0x4c9c9eb6
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x64
mov ecx, eax
xor ecx, 0xffffffff
and ecx, 0xc2
and eax, 0x3d
or ecx, eax
mov byte [esi + 0x168], cl
sub esp, 8
mov dword [esp], 0x4c9c9eb6
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
mov ecx, eax
xor ecx, 0xffffffff
and ecx, 0xc3
and eax, 0x3c
or ecx, eax
mov byte [esi + 0x169], cl
sub esp, 8
mov dword [esp], 0x4c9c9eb6
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x62
mov ecx, eax
xor ecx, 0xffffffff
and ecx, 0xc4
and eax, 0x3b
or ecx, eax
mov byte [esi + 0x16a], cl
sub esp, 8
mov dword [esp], 0x4c9c9eb6
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
mov ecx, eax
xor ecx, 0xffffffff
and ecx, 0xc5
and eax, 0x3a
or ecx, eax
mov byte [esi + 0x16b], cl
sub esp, 8
mov dword [esp], 0x4c9c9eb6
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
mov ecx, eax
xor ecx, 0xffffffff
and ecx, 0xc6
and eax, 0x39
or ecx, eax
mov byte [esi + 0x16c], cl
sub esp, 8
mov dword [esp], 0x4c9c9eb6
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
mov ecx, eax
xor ecx, 0xffffffff
and ecx, 0xc7
and eax, 0x38
or ecx, eax
mov byte [esi + 0x16d], cl
mov eax, 0x12
mov byte [esi + eax + 0x15c], 0
add eax, 1
cmp eax, 0x15
jne 0x4170b5
mov dword [esi + 0x10], 0
mov edi, dword [ebp + 8]
mov eax, dword [esi + 0x10]
cmp eax, 0x15
jae 0x41710a
mov eax, dword [esi + 0x10]
mov ecx, dword [esi + 0x10]
movzx ecx, byte [esi + ecx + 0x15c]
sub esp, 8
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.0041a2c0
add esp, 8
mov ecx, dword [esi + 0x10]
mov byte [esi + ecx + 0x15c], al
mov eax, dword [esi + 0x10]
inc eax
mov dword [esi + 0x10], eax
jmp 0x4170cf
lea eax, [esi + 0x15c]
sub esp, 0xc
mov dword [esp], edi
mov ecx, dword [ebp + 0xc]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.00413c40
add esp, 0xc
and al, 1
movzx eax, al
and ebx, ebx
xor ebx, 0xffffffff
mov ecx, eax
xor ecx, 0xffffffff
xor eax, 0xffffffff
or ecx, eax
and ebx, ecx
xor ebx, 0xffffffff
cmp ebx, 0
setne bl
mov al, byte [esi + 0xe8]
mov byte [esi + 0x110], al
sub esp, 8
mov dword [esp], 0xb5685156
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x66
xor eax, 0x56
mov byte [esi + 0x84], al
sub esp, 8
mov dword [esp], 0xb5685156
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x57
mov byte [esi + 0x85], al
sub esp, 8
mov dword [esp], 0xb5685156
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x6f
xor eax, 0x58
mov byte [esi + 0x86], al
sub esp, 8
mov dword [esp], 0xb5685156
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x59
mov byte [esi + 0x87], al
sub esp, 8
mov dword [esp], 0xb5685156
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x72
xor eax, 0x5a
mov byte [esi + 0x88], al
sub esp, 8
mov dword [esp], 0xb5685156
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x5b
mov byte [esi + 0x89], al
sub esp, 8
mov dword [esp], 0xb5685156
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x6d
xor eax, 0x5c
mov byte [esi + 0x8a], al
sub esp, 8
mov dword [esp], 0xb5685156
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x5d
mov byte [esi + 0x8b], al
sub esp, 8
mov dword [esp], 0xb5685156
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x68
xor eax, 0x5e
mov byte [esi + 0x8c], al
sub esp, 8
mov dword [esp], 0xb5685156
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x5f
mov byte [esi + 0x8d], al
sub esp, 8
mov dword [esp], 0xb5685156
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x69
xor eax, 0x60
mov byte [esi + 0x8e], al
sub esp, 8
mov dword [esp], 0xb5685156
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x61
mov byte [esi + 0x8f], al
sub esp, 8
mov dword [esp], 0xb5685156
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x73
xor eax, 0x62
mov byte [esi + 0x90], al
sub esp, 8
mov dword [esp], 0xb5685156
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x63
mov byte [esi + 0x91], al
sub esp, 8
mov dword [esp], 0xb5685156
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x74
xor eax, 0x64
mov byte [esi + 0x92], al
sub esp, 8
mov dword [esp], 0xb5685156
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x65
mov byte [esi + 0x93], al
sub esp, 8
mov dword [esp], 0xb5685156
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x6f
xor eax, 0x66
mov byte [esi + 0x94], al
sub esp, 8
mov dword [esp], 0xb5685156
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x67
mov byte [esi + 0x95], al
sub esp, 8
mov dword [esp], 0xb5685156
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x72
xor eax, 0x68
mov byte [esi + 0x96], al
sub esp, 8
mov dword [esp], 0xb5685156
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x69
mov byte [esi + 0x97], al
sub esp, 8
mov dword [esp], 0xb5685156
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x79
xor eax, 0x6a
mov byte [esi + 0x98], al
sub esp, 8
mov dword [esp], 0xb5685156
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x6b
mov byte [esi + 0x99], al
sub esp, 8
mov dword [esp], 0xb5685156
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x2e
xor eax, 0x6c
mov byte [esi + 0x9a], al
sub esp, 8
mov dword [esp], 0xb5685156
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x6d
mov byte [esi + 0x9b], al
sub esp, 8
mov dword [esp], 0xb5685156
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x73
xor eax, 0x6e
mov byte [esi + 0x9c], al
sub esp, 8
mov dword [esp], 0xb5685156
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x6f
mov byte [esi + 0x9d], al
sub esp, 8
mov dword [esp], 0xb5685156
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x71
xor eax, 0x70
mov byte [esi + 0x9e], al
sub esp, 8
mov dword [esp], 0xb5685156
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x71
mov byte [esi + 0x9f], al
sub esp, 8
mov dword [esp], 0xb5685156
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x6c
xor eax, 0x72
mov byte [esi + 0xa0], al
sub esp, 8
mov dword [esp], 0xb5685156
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x73
mov byte [esi + 0xa1], al
sub esp, 8
mov dword [esp], 0xb5685156
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x69
xor eax, 0x74
mov byte [esi + 0xa2], al
sub esp, 8
mov dword [esp], 0xb5685156
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x75
mov byte [esi + 0xa3], al
sub esp, 8
mov dword [esp], 0xb5685156
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x74
xor eax, 0x76
mov byte [esi + 0xa4], al
sub esp, 8
mov dword [esp], 0xb5685156
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x77
mov byte [esi + 0xa5], al
sub esp, 8
mov dword [esp], 0xb5685156
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x65
xor eax, 0x78
mov byte [esi + 0xa6], al
sub esp, 8
mov dword [esp], 0xb5685156
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x79
mov byte [esi + 0xa7], al
sub esp, 8
mov dword [esp], 0xb5685156
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x7a
mov byte [esi + 0xa8], al
sub esp, 8
mov dword [esp], 0xb5685156
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x7b
mov byte [esi + 0xa9], al
mov eax, 0x26
mov byte [esi + eax + 0x84], 0
add eax, 1
cmp eax, 0x28
jne 0x4176c1
mov dword [esi + 0x14], 0
mov eax, dword [esi + 0x14]
cmp eax, 0x28
jae 0x417713
mov eax, dword [esi + 0x14]
mov ecx, dword [esi + 0x14]
movzx ecx, byte [esi + ecx + 0x84]
sub esp, 8
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.0041a2e0
add esp, 8
mov ecx, dword [esi + 0x14]
mov byte [esi + ecx + 0x84], al
mov eax, dword [esi + 0x14]
inc eax
mov dword [esi + 0x14], eax
jmp 0x4176d8
lea eax, [esi + 0x84]
sub esp, 0xc
mov dword [esp], edi
mov ecx, dword [ebp + 0xc]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.00413c40
add esp, 0xc
and al, 1
movzx eax, al
and bl, 1
movzx ecx, bl
or ecx, eax
cmp ecx, 0
setne bl
mov al, byte [esi + 0xe4]
mov byte [esi + 0x114], al
sub esp, 8
mov dword [esp], 0x45096693
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x63
xor eax, 0x93
mov byte [esi + 0x138], al
sub esp, 8
mov dword [esp], 0x45096693
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x94
mov byte [esi + 0x139], al
sub esp, 8
mov dword [esp], 0x45096693
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x6f
xor eax, 0x95
mov byte [esi + 0x13a], al
sub esp, 8
mov dword [esp], 0x45096693
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x96
mov byte [esi + 0x13b], al
sub esp, 8
mov dword [esp], 0x45096693
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x6f
xor eax, 0x97
mov byte [esi + 0x13c], al
sub esp, 8
mov dword [esp], 0x45096693
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x98
mov byte [esi + 0x13d], al
sub esp, 8
mov dword [esp], 0x45096693
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x6b
xor eax, 0x99
mov byte [esi + 0x13e], al
sub esp, 8
mov dword [esp], 0x45096693
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x9a
mov byte [esi + 0x13f], al
sub esp, 8
mov dword [esp], 0x45096693
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x69
xor eax, 0x9b
mov byte [esi + 0x140], al
sub esp, 8
mov dword [esp], 0x45096693
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x9c
mov byte [esi + 0x141], al
sub esp, 8
mov dword [esp], 0x45096693
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x65
xor eax, 0x9d
mov byte [esi + 0x142], al
sub esp, 8
mov dword [esp], 0x45096693
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x9e
mov byte [esi + 0x143], al
sub esp, 8
mov dword [esp], 0x45096693
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x73
xor eax, 0x9f
mov byte [esi + 0x144], al
sub esp, 8
mov dword [esp], 0x45096693
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0xa0
mov byte [esi + 0x145], al
sub esp, 8
mov dword [esp], 0x45096693
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x2e
xor eax, 0xa1
mov byte [esi + 0x146], al
sub esp, 8
mov dword [esp], 0x45096693
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0xa2
mov byte [esi + 0x147], al
sub esp, 8
mov dword [esp], 0x45096693
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x73
xor eax, 0xa3
mov byte [esi + 0x148], al
sub esp, 8
mov dword [esp], 0x45096693
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0xa4
mov byte [esi + 0x149], al
sub esp, 8
mov dword [esp], 0x45096693
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x71
xor eax, 0xa5
mov byte [esi + 0x14a], al
sub esp, 8
mov dword [esp], 0x45096693
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0xa6
mov byte [esi + 0x14b], al
sub esp, 8
mov dword [esp], 0x45096693
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x6c
xor eax, 0xa7
mov byte [esi + 0x14c], al
sub esp, 8
mov dword [esp], 0x45096693
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0xa8
mov byte [esi + 0x14d], al
sub esp, 8
mov dword [esp], 0x45096693
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x69
xor eax, 0xa9
mov byte [esi + 0x14e], al
sub esp, 8
mov dword [esp], 0x45096693
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0xaa
mov byte [esi + 0x14f], al
sub esp, 8
mov dword [esp], 0x45096693
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x74
xor eax, 0xab
mov byte [esi + 0x150], al
sub esp, 8
mov dword [esp], 0x45096693
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0xac
mov byte [esi + 0x151], al
sub esp, 8
mov dword [esp], 0x45096693
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x65
xor eax, 0xad
mov byte [esi + 0x152], al
sub esp, 8
mov dword [esp], 0x45096693
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0xae
mov byte [esi + 0x153], al
sub esp, 8
mov dword [esp], 0x45096693
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0xaf
mov byte [esi + 0x154], al
sub esp, 8
mov dword [esp], 0x45096693
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0xb0
mov byte [esi + 0x155], al
mov eax, 0x1e
mov byte [esi + eax + 0x138], 0
add eax, 1
cmp eax, 0x22
jne 0x417bd6
mov dword [esi + 0x18], 0
mov eax, dword [esi + 0x18]
cmp eax, 0x22
jae 0x417c28
mov eax, dword [esi + 0x18]
mov ecx, dword [esi + 0x18]
movzx ecx, byte [esi + ecx + 0x138]
sub esp, 8
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.0041a310
add esp, 8
mov ecx, dword [esi + 0x18]
mov byte [esi + ecx + 0x138], al
mov eax, dword [esi + 0x18]
inc eax
mov dword [esi + 0x18], eax
jmp 0x417bed
lea eax, [esi + 0x138]
sub esp, 0xc
mov dword [esp], edi
mov ecx, dword [ebp + 0xc]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.00413c40
add esp, 0xc
and al, 1
movzx ecx, al
and bl, 1
movzx edx, bl
mov eax, edx
or eax, ecx
xor eax, 0xffffffff
xor edx, 0xffffffff
xor ecx, 0xffffffff
and edx, ecx
or eax, edx
xor eax, 0xffffffff
cmp eax, 0
setne bl
mov al, byte [esi + 0xc4]
mov byte [esi + 0x118], al
sub esp, 8
mov dword [esp], 0xdd967c3a
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x6c
xor eax, 0x3a
mov byte [esi + 0xc8], al
sub esp, 8
mov dword [esp], 0xdd967c3a
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x3b
mov byte [esi + 0xc9], al
sub esp, 8
mov dword [esp], 0xdd967c3a
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x6f
xor eax, 0x3c
mov byte [esi + 0xca], al
sub esp, 8
mov dword [esp], 0xdd967c3a
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x3d
mov byte [esi + 0xcb], al
sub esp, 8
mov dword [esp], 0xdd967c3a
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x67
xor eax, 0x3e
mov byte [esi + 0xcc], al
sub esp, 8
mov dword [esp], 0xdd967c3a
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x3f
mov byte [esi + 0xcd], al
sub esp, 8
mov dword [esp], 0xdd967c3a
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x69
xor eax, 0x40
mov byte [esi + 0xce], al
sub esp, 8
mov dword [esp], 0xdd967c3a
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x41
mov byte [esi + 0xcf], al
sub esp, 8
mov dword [esp], 0xdd967c3a
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x6e
xor eax, 0x42
mov byte [esi + 0xd0], al
sub esp, 8
mov dword [esp], 0xdd967c3a
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x43
mov byte [esi + 0xd1], al
sub esp, 8
mov dword [esp], 0xdd967c3a
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x73
xor eax, 0x44
mov byte [esi + 0xd2], al
sub esp, 8
mov dword [esp], 0xdd967c3a
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x45
mov byte [esi + 0xd3], al
sub esp, 8
mov dword [esp], 0xdd967c3a
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x2e
xor eax, 0x46
mov byte [esi + 0xd4], al
sub esp, 8
mov dword [esp], 0xdd967c3a
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x47
mov byte [esi + 0xd5], al
sub esp, 8
mov dword [esp], 0xdd967c3a
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x6a
xor eax, 0x48
mov byte [esi + 0xd6], al
sub esp, 8
mov dword [esp], 0xdd967c3a
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x49
mov byte [esi + 0xd7], al
sub esp, 8
mov dword [esp], 0xdd967c3a
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x73
xor eax, 0x4a
mov byte [esi + 0xd8], al
sub esp, 8
mov dword [esp], 0xdd967c3a
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x4b
mov byte [esi + 0xd9], al
sub esp, 8
mov dword [esp], 0xdd967c3a
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x6f
xor eax, 0x4c
mov byte [esi + 0xda], al
sub esp, 8
mov dword [esp], 0xdd967c3a
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x4d
mov byte [esi + 0xdb], al
sub esp, 8
mov dword [esp], 0xdd967c3a
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x6e
xor eax, 0x4e
mov byte [esi + 0xdc], al
sub esp, 8
mov dword [esp], 0xdd967c3a
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x4f
mov byte [esi + 0xdd], al
sub esp, 8
mov dword [esp], 0xdd967c3a
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x50
mov byte [esi + 0xde], al
sub esp, 8
mov dword [esp], 0xdd967c3a
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x51
mov byte [esi + 0xdf], al
mov eax, 0x18
mov byte [esi + eax + 0xc8], 0
add eax, 1
cmp eax, 0x1c
jne 0x417fe6
mov dword [esi + 0x1c], 0
mov eax, dword [esi + 0x1c]
cmp eax, 0x1c
jae 0x418038
mov eax, dword [esi + 0x1c]
mov ecx, dword [esi + 0x1c]
movzx ecx, byte [esi + ecx + 0xc8]
sub esp, 8
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.0041a330
add esp, 8
mov ecx, dword [esi + 0x1c]
mov byte [esi + ecx + 0xc8], al
mov eax, dword [esi + 0x1c]
inc eax
mov dword [esi + 0x1c], eax
jmp 0x417ffd
lea eax, [esi + 0xc8]
sub esp, 0xc
mov dword [esp], edi
mov ecx, dword [ebp + 0xc]
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
call fcn.00413c40
add esp, 0xc
and al, 1
movzx eax, al
and bl, 1
movzx ecx, bl
or ecx, eax
xor ebx, ebx
cmp ecx, 0
setne byte [esi + 0xb]
mov al, byte [esi + 0xc0]
mov byte [esi + 0x11c], al
sub esp, 8
mov dword [esp], 0x1c22e54b
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x70
xor eax, 0x4b
mov byte [esi + 0x48], al
sub esp, 8
mov dword [esp], 0x1c22e54b
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x4c
mov byte [esi + 0x49], al
sub esp, 8
mov dword [esp], 0x1c22e54b
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x6c
xor eax, 0x4d
mov byte [esi + 0x4a], al
sub esp, 8
mov dword [esp], 0x1c22e54b
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x4e
mov byte [esi + 0x4b], al
sub esp, 8
mov dword [esp], 0x1c22e54b
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x61
xor eax, 0x4f
mov byte [esi + 0x4c], al
sub esp, 8
mov dword [esp], 0x1c22e54b
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x50
mov byte [esi + 0x4d], al
sub esp, 8
mov dword [esp], 0x1c22e54b
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x63
xor eax, 0x51
mov byte [esi + 0x4e], al
sub esp, 8
mov dword [esp], 0x1c22e54b
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x52
mov byte [esi + 0x4f], al
sub esp, 8
mov dword [esp], 0x1c22e54b
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x65
xor eax, 0x53
mov byte [esi + 0x50], al
sub esp, 8
mov dword [esp], 0x1c22e54b
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x54
mov byte [esi + 0x51], al
sub esp, 8
mov dword [esp], 0x1c22e54b
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x73
xor eax, 0x55
mov byte [esi + 0x52], al
sub esp, 8
mov dword [esp], 0x1c22e54b
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x56
mov byte [esi + 0x53], al
sub esp, 8
mov dword [esp], 0x1c22e54b
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x2e
xor eax, 0x57
mov byte [esi + 0x54], al
sub esp, 8
mov dword [esp], 0x1c22e54b
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x58
mov byte [esi + 0x55], al
sub esp, 8
mov dword [esp], 0x1c22e54b
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x73
xor eax, 0x59
mov byte [esi + 0x56], al
sub esp, 8
mov dword [esp], 0x1c22e54b
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x5a
mov byte [esi + 0x57], al
sub esp, 8
mov dword [esp], 0x1c22e54b
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x71
xor eax, 0x5b
mov byte [esi + 0x58], al
sub esp, 8
mov dword [esp], 0x1c22e54b
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x5c
mov byte [esi + 0x59], al
sub esp, 8
mov dword [esp], 0x1c22e54b
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x6c
xor eax, 0x5d
mov byte [esi + 0x5a], al
sub esp, 8
mov dword [esp], 0x1c22e54b
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x5e
mov byte [esi + 0x5b], al
sub esp, 8
mov dword [esp], 0x1c22e54b
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x69
xor eax, 0x5f
mov byte [esi + 0x5c], al
sub esp, 8
mov dword [esp], 0x1c22e54b
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x60
mov byte [esi + 0x5d], al
sub esp, 8
mov dword [esp], 0x1c22e54b
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x74
xor eax, 0x61
mov byte [esi + 0x5e], al
sub esp, 8
mov dword [esp], 0x1c22e54b
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x62
mov byte [esi + 0x5f], al
sub esp, 8
mov dword [esp], 0x1c22e54b
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
add eax, 0x65
xor eax, 0x63
mov byte [esi + 0x60], al
sub esp, 8
mov dword [esp], 0x1c22e54b
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x64
mov byte [esi + 0x61], al
sub esp, 8
mov dword [esp], 0x1c22e54b
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x65
mov byte [esi + 0x62], al
sub esp, 8
mov dword [esp], 0x1c22e54b
mov dword [esp + 4], 5
call fcn.00419ee0
add esp, 8
xor eax, 0x66
mov byte [esi + 0x63], al
mov dword [esi + 0x20], 0
mov eax, dword [esi + 0x20]
cmp eax, 0x1c
jae 0x41845c
mov eax, dword [esi + 0x20]
mov ecx, dword [esi + 0x20]
movzx ecx, byte [esi + ecx + 0x48]
sub esp, 8
mov dword [esp + 4], eax
mov dword [esp], ecx
call fcn.0041a350
add esp, 8
mov ecx, dword [esi + 0x20]
mov byte [esi + ecx + 0x48], al
mov eax, dword [esi + 0x20]
inc eax
mov dword [esi + 0x20], eax
jmp 0x418427
sub esp, 0xc
lea eax, [esi + 0x48]
mov dword [esp + 8], eax
mov eax, edi
mov edi, dword [ebp + 0xc]
mov dword [esp + 4], edi
mov dword [esp], eax
call fcn.00413c40
add esp, 0xc
movzx eax, al
mov cl, byte [esi + 0xb]
mov bl, cl
and ebx, 1
mov ecx, eax
and ecx, ebx
add ebx, eax
sub ebx, ecx
setne al
mov dword [esi + 4], eax
xor eax, eax
cmp dword [ebp + 0x10], 0
sete al
mov dword [esi + 0x2b8], eax
mov eax, dword [esi + 0x2bc]
mov ecx, dword [esi + 0x2b8]
mov ecx, dword [eax + ecx*4]
push eax
mov eax, esp
mov dword [esi + 0x198], eax
mov dword [eax], 0x444c40
push eax
mov edx, esp
mov dword [edx], 0x31
push eax
mov eax, esp
mov dword [esi + 0x1a0], eax
mov dword [eax], 0x444dc0
push eax
mov dword [esi + 0x19c], esp
push eax
mov eax, esp
mov dword [esi + 0x1a8], eax
mov dword [eax], 0x444dc8
push eax
mov dword [esi + 0x1a4], esp
push eax
mov eax, esp
mov dword [esi + 0x1b0], eax
mov dword [eax], 0x444dd0
push eax
mov dword [esi + 0x1ac], esp
push eax
mov edi, esp
mov dword [esi + 0x1e0], edi
mov dword [edi], 0x444dd8
push eax
mov dword [esi + 0x1d8], esp
push eax
mov edi, esp
mov dword [esi + 0x1dc], edi
mov dword [edi], 0x444c40
push eax
mov edi, esp
mov dword [esi + 0x1d0], edi
mov dword [edi], 0x17
push eax
mov edi, esp
mov dword [esi + 0x2b4], edi
mov dword [edi], 0x444de0
push eax
mov dword [esi + 0x2b0], esp
push eax
mov edi, esp
mov dword [esi + 0x2ac], edi
mov dword [edi], 0x444c40
push eax
mov edi, esp
mov dword [esi + 0x2a8], edi
mov dword [edi], 0x27
push eax
mov edi, esp
mov dword [esi + 0x2a4], edi
mov dword [edi], 0x444c40
push eax
mov edi, esp
mov dword [esi + 0x2a0], edi
mov dword [edi], 0x1a
push eax
mov edi, esp
mov dword [esi + 0x29c], edi
mov dword [edi], 0x444de8
push eax
mov dword [esi + 0x290], esp
push eax
mov edi, esp
mov dword [esi + 0x284], edi
mov dword [edi], 0x444df0
push eax
mov dword [esi + 0x270], esp
push eax
mov edi, esp
mov dword [esi + 0x26c], edi
mov dword [edi], 0x444c40
push eax
mov edi, esp
mov dword [esi + 0x268], edi
mov dword [edi], 0x1d
push eax
mov edi, esp
mov dword [esi + 0x264], edi
mov dword [edi], 0x444df8
push eax
mov dword [esi + 0x260], esp
push eax
mov edi, esp
mov dword [esi + 0x25c], edi
mov dword [edi], 0x444e00
push eax
mov dword [esi + 0x258], esp
push eax
mov edi, esp
mov dword [esi + 0x254], edi
mov dword [edi], 0x444e08
push eax
mov dword [esi + 0x250], esp
push eax
mov edi, esp
mov dword [esi + 0x24c], edi
mov dword [edi], 0x444c40
push eax
mov edi, esp
mov dword [esi + 0x248], edi
mov dword [edi], 0x24
push eax
mov edi, esp
mov dword [esi + 0x244], edi
mov dword [edi], 0x444e10
push eax
mov dword [esi + 0x240], esp
push eax
mov edi, esp
mov dword [esi + 0x23c], edi
mov dword [edi], 0x444c40
push eax
mov edi, esp
mov dword [esi + 0x238], edi
mov dword [edi], 0x23
push eax
mov edi, esp
mov dword [esi + 0x234], edi
mov dword [edi], 0x444c40
push eax
mov edi, esp
mov dword [esi + 0x230], edi
mov dword [edi], 0x24
push eax
mov edi, esp
mov dword [esi + 0x22c], edi
mov dword [edi], 0x444e18
push eax
mov dword [esi + 0x224], esp
push eax
mov edi, esp
mov dword [esi + 0x220], edi
mov dword [edi], 0x444e20
push eax
mov dword [esi + 0x21c], esp
push eax
mov edi, esp
mov dword [esi + 0x214], edi
mov dword [edi], 0x444c40
push eax
mov edi, esp
mov dword [esi + 0x1fc], edi
mov dword [edi], 0x17
push eax
mov edi, esp
mov dword [esi + 0x210], edi
mov dword [edi], 0x444c40
push eax
mov edi, esp
mov dword [esi + 0x1f8], edi
mov dword [edi], 0x28
push eax
mov edi, esp
mov dword [esi + 0x208], edi
mov dword [edi], 0x444e28
push eax
mov dword [esi + 0x1f4], esp
push eax
mov edi, esp
mov dword [esi + 0x218], edi
mov dword [edi], 0x444e30
push eax
mov dword [esi + 0x20c], esp
push eax
mov edi, esp
mov dword [esi + 0x204], edi
mov dword [edi], 0x444e38
push eax
mov dword [esi + 0x1f0], esp
push eax
mov edi, esp
mov dword [esi + 0x200], edi
mov dword [edi], 0x444c40
push eax
mov edi, esp
mov dword [esi + 0x1ec], edi
mov dword [edi], 0x2c
push eax
mov edi, esp
mov dword [esi + 0x1e8], edi
mov dword [edi], 0x444c40
push eax
mov edi, esp
mov dword [esi + 0x1e4], edi
mov dword [edi], 0x2d
push eax
mov eax, esp
mov dword [esi + 0x298], eax
mov dword [eax], 0x444c40
push eax
mov edi, esp
mov dword [esi + 0x280], edi
mov dword [edi], 0x2e
push eax
mov edi, esp
mov dword [esi + 0x28c], edi
mov dword [edi], 0x444e40
push eax
mov dword [esi + 0x278], esp
push eax
mov edi, esp
mov dword [esi + 0x288], edi
mov dword [edi], 0x444c40
push eax
mov edi, esp
mov dword [esi + 0x274], edi
mov dword [edi], 0x30
push eax
mov edi, esp
mov dword [esi + 0x294], edi
mov dword [edi], 0x444c40
push eax
mov edi, esp
mov dword [esi + 0x27c], edi
mov dword [edi], 0x31
push eax
mov edi, esp
mov dword [edi], 0x444c40
push eax
mov ebx, esp
mov dword [esi + 0x1cc], ebx
mov dword [ebx], 0x1b
push eax
mov ebx, esp
mov dword [esi + 0x1c4], ebx
mov dword [ebx], 0x444c40
push eax
mov eax, esp
mov dword [esi + 0x1bc], eax
mov dword [eax], 0x1f
push eax
mov eax, esp
mov dword [esi + 0x1b8], eax
mov dword [eax], 0x444c40
push eax
mov eax, esp
mov dword [esi + 0x1b4], eax
mov dword [eax], 0x25
push eax
mov ebx, esp
mov dword [ebx], 0x444c40
push eax
mov eax, esp
mov dword [esi + 0x1c0], eax
mov dword [eax], 0x29
jmp ecx