Function at 0x40b3f7
Capabilities:
Link many functions at runtime
Resolve function by parsing pe exports

Disassembly:
add edx, dword [0x4272b0]
mov dword [ebp + 0x314], esi
mov dword [0x426f5c], eax
mov eax, dword [0x427070]
mov eax, dword [eax + 0x24]
add eax, dword [0x4272b0]
mov dword [ebp + 0x33c], ebx
mov dword [ebp + 0x31c], ecx
mov ecx, dword [0x427070]
mov ecx, dword [ecx + 0x20]
add ecx, dword [0x4272b0]
mov dword [ebp + 0x2a0], edx
mov dword [0x426ec0], eax
mov edx, dword [ebp + 0x2c0]
mov eax, dword [0x426f5c]
mov dword [ebp + 0x33c], eax
mov edx, dword [ebp + 0x2ec]
mov dword [ebp + 0x298], edx
and edx, 0xffff
mov dword [ebp + 0x254], edx
sub edx, esi
cmp edx, dword [esp + 0x31c]
jge 0x41859b
jmp 0x40958d
sub eax, 0x41
add ebx, eax
inc esi
mov dword [0x4270e0], ebx
mov dword [esp + 0x23c], eax
mov dword [0x427254], ebx
mov edi, esi
mov edx, dword [esp + 0x250]
mov eax, dword [esp + 0x298]
mov dword [0x426ea4], eax
mov ecx, ebx
mov eax, dword [esp + 0x254]
mov esi, dword [0x4270e0]
mov edx, dword [esp + 0x23c]
mov dword [esp + 0x314], esi
mov dword [0x426e94], edx
mov ebx, dword [esp + 0x240]
mov esi, dword [0x426ed8]
mov edx, dword [esp + 0x250]
jmp 0x40ce7b
mov eax, dword [0x427134]
sub eax, dword [0x42733c]
mov ecx, dword [0x427650]
mov dword [0x427524], 0
mov ebx, dword [esp + 0x384]
push eax
mov dword [esp + 0x254], eax
mov edi, dword [0x427538]
sub dword [0x426df8], 0x7369857f
mov dword [esp + 0x2c4], ecx
mov ebx, dword [0x427524]
mov esi, eax
mov ebp, dword [esp + 0x254]
mov edi, dword [0x426df8]
mov ecx, dword [0x426df8]
mov dword [0x42771c], ebx
mov dword [0x4276bc], ebp
push edi
mov dword [0x427554], ecx
mov ebx, dword [esp + 0x38c]
jmp 0x40aca6
mov ebp, dword [ebx]
and ebp, 0xff
test ebp, ebp
je 0x407946
mov dword [0x4275a4], ecx
mov ecx, dword [esp + 0x250]
mov dword [0x427610], ecx
shl ecx, 5
shr dword [0x427610], 0x1b
or ecx, dword [0x427610]
sub ebp, 0x41
add ecx, ebp
inc ebx
mov dword [0x4274ec], ecx
mov dword [esp + 0x248], eax
mov dword [0x4275cc], ecx
mov edx, ebp
mov eax, dword [0x427610]
mov dword [0x427570], eax
mov edi, ecx
mov eax, dword [esp + 0x248]
jmp 0x405688
mov dword [ebp + 0x254], ebx
mov dword [0x4270f8], ecx
mov ebx, dword [ebp + 0x2c0]
mov ecx, dword [ebp + 0x314]
jmp 0x405a76
mov ebp, esp
mov edx, dword [ebp + 0x2a0]
add edx, dword [esp + 0x2c0]
add edx, dword [esp + 0x2c0]
mov ecx, dword [edx]
and ecx, 0xffff
mov dword [0x426ecc], edx
mov dword [ebp + 0x2c0], eax
lea ecx, [ecx*4]
mov edx, dword [ebp + 0x250]
mov eax, dword [0x426f04]
mov dword [ebp + 0x314], eax
mov dword [ebp + 0x298], esi
mov esi, dword [0x42717c]
mov eax, dword [ecx + esi]
add eax, dword [esp + 0x298]
cmp eax, dword [0x427084]
jge 0x404db8
mov dword [ebp + 0x314], esi
mov esi, dword [ebp + 0x298]
mov dword [0x4271dc], eax
jmp 0x40ccb1
mov dword [ebp + 0x314], eax
mov eax, dword [0x42741c]
jmp 0x40b4d4
mov eax, dword [0x427084]
mov eax, dword [eax + 0x24]
add eax, dword [0x4272b0]
mov dword [0x42740c], esi
mov dword [0x427120], ebx
mov dword [ebp + 0x38c], edi
mov esi, dword [0x4272b0]
mov ebx, dword [0x426f20]
mov edi, dword [0x426e90]
mov dword [0x427324], ebx
mov dword [0x427428], 0
mov ecx, dword [0x427428]
mov dword [0x4271dc], ecx
jmp 0x40ccb1
mov dword [ebp + 0x298], ebx
mov dword [0x42749c], ecx
mov ebx, dword [0x42748c]
mov ecx, dword [ebp + 0x2c0]
jmp 0x4215ad
mov ebp, dword [ebp + 0x384]
sub esp, 0x34
mov dword [esp], ebp
mov dword [esp + 0x288], edx
mov edx, dword [esp + 0x2d0]
call dword [esp + 0x3a8]
mov ebp, dword [esp + 0x30]
mov edx, dword [esp + 0x2cc]
mov ecx, dword [edx + ebp]
add ecx, dword [esp + 0x3c0]
cmp ecx, dword [esp + 0x288]
jge 0x414f93
mov dword [esp + 0x268], ecx
mov ebx, dword [esp + 0x3b8]
mov dword [0x427678], eax
mov ebp, dword [0x427694]
mov esi, dword [esp + 0x270]
mov edi, dword [0x4275e0]
mov ecx, dword [0x426df8]
jmp 0x41ade4
mov dword [0x4270e4], ebx
jmp 0x405a80
and dword [ebp + 0x298], 0x7fffffff
mov dword [ebp + 0x248], ecx
mov ecx, dword [ebp + 0x298]
cmp ecx, dword [esp + 0x2ec]
je 0x41ac23
inc dword [0x426fc8]
mov esi, dword [0x427040]
mov ecx, dword [0x426f40]
mov edx, dword [0x426f58]
mov edi, dword [ebp + 0x314]
mov ebx, dword [ebp + 0x250]
jmp 0x415e62
mov esi, dword [ebp + 0x298]
mov edx, dword [0x427084]
add edx, dword [0x427238]
cmp eax, edx
jge 0x40ee1c
mov esi, 0x2e
mov ebp, eax
mov eax, 0xf
mov dword [0x427434], ebp
mov dword [esp + 0x244], edi
sub esp, 4
mov edi, dword [0x426ea8]
push edi
mov eax, esi
mov dword [0x427480], ecx
mov ecx, 0xf
mov edi, ebp
repne scasb al, byte es:[edi]
mov eax, edi
mov eax, dword [0x426ea8]
jmp 0x40ee62
mov dword [0x427668], ecx
mov edi, dword [0x4276a4]
mov ecx, dword [0x42757c]
mov dword [esp + 0x38c], ecx
mov ecx, edx
jmp 0x40f258
mov dword [ebp + 0x38c], esi
lea esi, [0x426608]
mov dword [ebp + 0x314], 0
mov ecx, dword [ebp + 0x38c]
mov eax, dword [ecx + 0x3c]
add eax, ecx
mov ecx, dword [eax + 0x7c]
mov ebx, dword [eax + 0x78]
add ebx, dword [esp + 0x38c]
test ebx, ebx
je 0x41efa3
lea esi, [0x426608]
mov eax, dword [ebx + 0x14]
mov esi, dword [ebx + 0x18]
mov dword [ebp + 0x2c0], esi
mov esi, dword [ebx + 0x10]
mov dword [0x427550], ecx
mov ecx, dword [ebx + 0x20]
add ecx, dword [esp + 0x38c]
mov dword [ebp + 0x2a0], eax
mov eax, dword [ebx + 0x24]
add eax, dword [esp + 0x38c]
mov dword [0x4274cc], eax
mov eax, dword [ebx + 0x1c]
jmp 0x41a0d1
mov dword [esp + 0x38c], esi
mov dword [0x4276c0], edx
mov edx, dword [0x427618]
mov dword [esp + 0x314], edi
mov edi, dword [esp + 0x254]
mov edx, dword [edi]
and edx, 0xff
test edx, edx
je 0x40a105
mov dword [0x427474], eax
mov eax, dword [0x4275a8]
mov dword [0x42765c], eax
shl eax, 5
shr dword [0x4275a8], 0x1b
or eax, dword [0x4275a8]
sub edx, 0x41
add eax, edx
inc edi
mov dword [esp + 0x250], edx
mov dword [0x42755c], eax
mov dword [esp + 0x254], edi
jmp 0x40cf38
mov dword [esp + 0x244], ebx
mov ebx, dword [0x4274ec]
mov dword [esp + 0x250], ebx
mov ecx, dword [0x4275a4]
mov ebx, dword [esp + 0x244]
mov ebp, esp
jmp 0x402217
lea esi, [0x426608]
mov dword [0x4270e4], 0
mov esi, dword [0x4272b0]
mov eax, dword [esi + 0x3c]
add eax, esi
mov ecx, dword [eax + 0x7c]
mov ebx, dword [eax + 0x78]
add ebx, esi
test ebx, ebx
je 0x40cc94
lea edi, [0x426608]
mov eax, dword [ebx + 0x14]
mov esi, dword [ebx + 0x18]
mov edi, dword [ebx + 0x10]
mov dword [0x427084], ebx
mov ebx, dword [ebx + 0x20]
add ebx, dword [0x4272b0]
test dword [0x427324], 0x80000000
je 0x41fe5c
mov dword [0x4270ac], ecx
mov ecx, dword [ebp + 0x38c]
add ecx, dword [esp + 0x394]
mov dword [ebp + 0x314], esi
jmp 0x4138e9
mov ebx, dword [ebp + 0x2c0]
mov dword [0x427094], ecx
mov ecx, dword [ebp + 0x314]
jmp 0x405a76
mov dword [0x4270e8], edi
mov edi, dword [ebp + 0x2c0]
add edi, dword [esp + 0x314]
cmp ebx, edi
jge 0x40421d
mov esi, 0x2e
mov esi, ebx
mov ebx, 0xf
mov ebx, esi
mov dword [0x42706c], ecx
sub esp, 4
mov ecx, dword [0x427274]
push ecx
mov dword [ebp + 0x298], eax
mov eax, 0x2e
mov ecx, 0xf
mov dword [0x427138], edi
mov edi, ebx
repne scasb al, byte es:[edi]
mov eax, edi
jmp 0x407a8f
mov edi, dword [0x427134]
sub edi, dword [0x42733c]
mov dword [ebp + 0x2c0], edx
mov dword [0x42771c], ebx
push edi
mov dword [ebp + 0x248], edi
mov ecx, dword [0x426df8]
sub ecx, 0x7369857f
mov ebx, dword [ebp + 0x384]
mov esi, edi
mov edx, dword [ebp + 0x248]
push ecx
mov dword [0x427598], ecx
mov dword [ebp - 0x1c], ebx
mov dword [0x4276bc], edx
sub esp, 0x14
call dword [esp + 0x38c]
mov ecx, dword [0x427598]
mov edx, dword [ebp - 8]
mov edi, dword [ebp + 0x298]
push 0
call fcn.0040d059
ret
mov dword [ebp + 0x2c0], edx
lea edx, [0x426608]
mov dword [0x426fc0], edi
mov edi, dword [0x427070]
mov edx, dword [edi + 0x1c]
add edx, dword [0x4272b0]
mov dword [ebp + 0x314], esi
mov dword [0x426f5c], eax
mov eax, dword [0x427070]
mov eax, dword [eax + 0x24]
add eax, dword [0x4272b0]
mov dword [ebp + 0x33c], ebx
mov dword [ebp + 0x31c], ecx
mov ecx, dword [0x427070]
mov ecx, dword [ecx + 0x20]
add ecx, dword [0x4272b0]
mov dword [0x426fc8], 0
jmp 0x415e62
mov ecx, dword [ebp + 0x254]
add ecx, dword [0x42736c]
add ecx, dword [0x42736c]
mov ebx, dword [ecx]
and ebx, 0xffff
mov dword [ebp + 0x244], eax
mov dword [0x42704c], ecx
mov dword [0x4271b8], edi
mov dword [0x427350], esi
mov eax, dword [0x4273f4]
mov ecx, ebx
mov edi, dword [ebp + 0x298]
mov esi, dword [ebp + 0x250]
mov dword [0x4270c8], esi
mov esi, dword [0x427350]
jmp 0x419e81
mov dword [0x4271f0], 0
mov esi, dword [esp + 0x38c]
mov dword [0x427044], esi
mov esi, dword [0x4272b0]
mov dword [0x426e34], ebp
mov ebp, dword [0x427044]
add ebp, dword [esp + 0x394]
mov dword [0x426f04], ebp
mov dword [0x427278], ebp
mov dword [0x427238], ecx
mov dword [esp + 0x38c], edi
mov edi, dword [0x427264]
mov ecx, dword [edi]
and ecx, 0xff
test ecx, ecx
je 0x413a41
mov dword [0x426e94], ecx
mov ecx, dword [0x4271f0]
mov dword [0x426ea4], ecx
shl ecx, 5
shr dword [0x426ea4], 0x1b
or ecx, dword [0x426ea4]
sub dword [0x426e94], 0x41
jmp 0x40ce6d
mov eax, dword [eax + 0xec4]
add eax, dword [0x4276e4]
add eax, dword [0x4276e4]
mov ecx, dword [eax]
and ecx, 0xffff
lea ecx, [ecx*4]
mov dword [ebp + 0x248], ebx
mov ebx, dword [0x427134]
sub ebx, dword [0x42733c]
sub dword [0x426df8], 0x7369857f
mov dword [0x427588], edi
mov dword [0x427694], ebx
mov dword [ebp + 0x244], eax
mov dword [0x427630], esi
mov edi, dword [ebp + 0x2c0]
mov ebx, dword [ebp + 0x384]
mov eax, dword [0x426df8]
mov esi, dword [0x426df8]
mov dword [0x42762c], edi
mov dword [0x42760c], eax
mov dword [ebp + 0x240], esi
mov ebx, dword [0x427694]
push ecx
mov dword [ebp + 0x23c], ebx
mov ecx, dword [0x427650]
mov dword [ebp + 0x2c0], ecx
jmp 0x403ff2
and dword [esp + 0x250], 0x7fffffff
mov dword [0x427580], ebx
mov ebx, dword [esp + 0x250]
cmp ebx, dword [0x42735c]
je 0x41a3b5
inc dword [0x4276e4]
mov edx, dword [0x4276e4]
cmp edx, dword [esp + 0x2c0]
jg 0x402040
add edx, edx
add edx, dword [0x4276e4]
add edx, dword [0x4276e4]
mov dword [0x4274b8], edx
mov edx, dword [0x4275c4]
mov dword [0x4275b8], edx
add edx, dword [0x4274b8]
mov eax, dword [edx]
add eax, dword [esp + 0x38c]
mov dword [0x42753c], eax
mov ecx, edx
mov dword [0x427518], 0
mov eax, dword [0x4274b8]
mov ecx, dword [0x42753c]
mov eax, dword [0x42753c]
mov dword [esp + 0x248], edx
mov dword [esp + 0x250], ecx
mov dword [0x427660], eax
jmp 0x40f076
mov ebp, esp
mov ecx, dword [0x427074]
add ecx, dword [esp + 0x370]
add ecx, dword [esp + 0x370]
mov eax, dword [ecx]
and eax, 0xffff
mov edi, dword [0x42700c]
mov dword [ebp + 0x370], ecx
mov dword [0x4270a4], ebx
mov dword [0x426e40], eax
shl dword [0x426e40], 2
mov dword [0x427134], edi
mov ecx, dword [0x42723c]
mov eax, dword [0x42714c]
mov dword [ebp + 0x38c], ecx
mov edi, dword [0x4272bc]
mov ebx, dword [0x426e40]
mov eax, dword [ebx + edi]
add eax, dword [0x4272b0]
cmp eax, dword [esp + 0x314]
jge 0x41c957
mov dword [ebp + 0x2c0], eax
mov ebx, dword [0x426ee8]
mov dword [0x426f0c], esi
mov edi, dword [0x426e7c]
mov dword [ebp + 0x254], edx
mov ebp, dword [0x42700c]
jmp 0x40ca67
mov eax, dword [0x427274]
mov dword [ebp + 0x250], edi
sub edi, ebx
mov ecx, edi
mov edi, eax
rep movsb byte es:[edi], byte [esi]
mov dword [0x4270b0], ebx
mov dword [ebp + 0x248], ecx
mov dword [0x4273fc], esi
mov dword [0x4273e4], edi
mov edi, dword [0x426770]
mov eax, dword [0x4273e4]
mov dword [eax], edi
mov dword [ebp + 0x244], edx
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push dword [esp + 0x254]
push eax
mov dword [0x42730c], eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov edi, dword [ebp + 0x250]
mov ecx, dword [0x42730c]
mov dword [ebp + 0x240], eax
mov esi, dword [0x4270c8]
mov edx, dword [ebp + 0x244]
mov dword [0x42715c], ecx
mov eax, dword [ebp + 0x298]
mov ecx, dword [0x42706c]
mov ebx, dword [ebp + 0x240]
add esp, 4
jmp 0x40421d
mov dword [0x426eb8], esi
mov edx, dword [ebp + 0x33c]
mov esi, dword [ebp + 0x314]
mov dword [0x426e70], edx
mov edi, dword [0x426f5c]
mov dword [ebp + 0x33c], edi
mov edx, dword [ebp + 0x2c0]
jmp 0x40b163
and dword [0x427418], 0x7fffffff
mov ecx, dword [0x427418]
cmp ecx, dword [0x427030]
je 0x406a33
inc dword [0x42736c]
mov dword [ebp + 0x244], eax
mov dword [ebp + 0x240], ebx
mov ecx, dword [ebp + 0x254]
mov eax, dword [0x4273f4]
mov ebx, dword [ebp + 0x250]
jmp 0x420a4a
mov esi, dword [ebp + 0x38c]
mov esi, dword [0x4272b0]
mov dword [ebp + 0x314], ebx
mov dword [ebp + 0x38c], 0
add ebx, dword [esp + 0x394]
mov edi, dword [ebp + 0x38c]
mov dword [ebp + 0x2c0], ebx
mov dword [0x42727c], ebx
mov dword [0x4271dc], edi
mov edi, ebx
mov esi, dword [0x42727c]
mov dword [ebp + 0x314], esi
mov esi, dword [0x4272b0]
jmp 0x40ccb1
mov dword [0x427444], ebx
mov dword [ebp + 0x2a0], ecx
mov ebx, dword [0x42748c]
mov ecx, dword [ebp + 0x2c0]
jmp 0x4215ad
mov dword [esp + 0x38c], esi
mov edx, eax
mov dword [0x4276f4], ebp
mov ebp, esp
jmp 0x404f54
mov dword [edi + 0x1104], ecx
mov ecx, dword [0x427550]
mov edi, dword [ebp + 0x298]
jmp 0x41efa3
mov dword [0x426fe4], edi
sub edi, dword [0x4271a0]
mov ecx, edi
mov dword [ebp + 0x248], esi
mov esi, dword [0x4271a0]
mov edi, eax
rep movsb byte es:[edi], byte [esi]
mov dword [0x427068], edi
mov edx, dword [0x426770]
mov dword [edi], edx
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push dword [0x426fe4]
push eax
mov dword [ebp + 0x244], eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov ecx, dword [ebp + 0x244]
mov dword [0x427164], esi
mov edi, dword [0x427118]
mov edx, dword [ebp + 0x2c0]
mov dword [ebp + 0x254], ecx
mov esi, dword [ebp + 0x248]
mov ecx, dword [0x426e18]
add esp, 4
jmp 0x4095d4
mov dword [0x427118], edx
mov dword [ebp + 0x33c], eax
shl dword [0x427118], 2
mov edx, dword [ebp + 0x2c0]
mov dword [ebp + 0x314], ebx
mov ebx, dword [ebp + 0x2a0]
mov dword [ebp + 0x298], edi
mov edi, dword [0x427118]
mov eax, dword [edi + ebx]
add eax, dword [0x4272b0]
cmp eax, dword [esp + 0x298]
jge 0x40c0d0
mov dword [ebp + 0x31c], eax
jmp 0x40b16d
mov ecx, dword [ebp + 0x254]
mov dword [0x4273c0], edx
mov dword [0x4270a0], ebx
mov edx, dword [ebp + 0x240]
mov ebx, dword [ebp + 0x23c]
mov dword [0x426eec], edx
mov dword [0x427064], ebx
mov ebx, dword [0x4270a0]
mov eax, dword [0x427418]
mov dword [ebp + 0x238], eax
mov dword [0x427418], edx
mov eax, dword [0x4273f4]
mov edx, dword [0x4273c0]
jmp 0x40ad1e
mov dword [esp + 0x26c], ebp
mov dword [0x4274e4], esi
mov ebp, dword [esp + 0x3a0]
mov esi, dword [esp + 0x2bc]
push ebp
mov dword [0x4276ec], esi
mov dword [esp + 0x268], ebx
mov dword [esp + 0x264], ecx
mov ebx, dword [edx + 0xf20]
mov ecx, dword [0x427564]
mov dword [esp + 0x3a4], ebx
mov dword [esp + 0x2c0], ecx
push eax
mov dword [esp + 0x264], edi
mov eax, ebp
mov edi, esi
sub esp, 0x10
mov ebp, esp
add ebp, 8
jmp fcn.0041b6a2
mov dword [0x42741c], eax
mov eax, dword [0x42748c]
add eax, dword [esp + 0x2c0]
cmp ecx, eax
jge 0x4038b9
mov esi, 0x2e
mov ebp, ecx
mov ecx, 0xf
mov ecx, ebp
mov ebp, dword [0x426674]
sub esp, 4
push ebp
mov dword [esp + 0x31c], eax
mov eax, esi
mov dword [esp + 0x2a0], ecx
mov ecx, 0xf
mov dword [esp + 0x25c], edi
mov edi, dword [esp + 0x2a0]
repne scasb al, byte es:[edi]
mov eax, edi
jmp 0x40da7f
mov dword [esp + 0x250], edx
mov edi, dword [esp + 0x314]
and dword [0x4275a8], 0x7fffffff
mov edx, dword [0x427618]
mov dword [0x4275e8], ebp
mov ebp, dword [0x4275a8]
cmp ebp, dword [esp + 0x29c]
je 0x417fe1
mov ebp, esp
inc dword [0x42746c]
mov dword [ebp + 0x248], eax
mov edx, dword [ebp + 0x298]
mov ebp, dword [0x427600]
mov edi, dword [0x4274c8]
mov esi, dword [esp + 0x2a0]
mov dword [0x4276d0], ebx
mov eax, dword [esp + 0x2c0]
mov ebx, dword [esp + 0x38c]
mov dword [0x427728], ebx
mov ebx, dword [0x4276d0]
jmp 0x40e1d5
mov edi, dword [0x427538]
mov edx, dword [esp + 0x38c]
sub esp, 0x38
mov dword [esp], edx
call dword [esp + 0x3b0]
mov ecx, dword [0x426df8]
add esp, 0x24
mov ebp, esp
add ebp, 0x18
jmp 0x40b3f7
mov dword [0x4273f4], eax
mov dword [ebp + 0x254], ecx
mov ecx, dword [0x427064]
mov eax, dword [ecx]
and eax, 0xff
test eax, eax
je 0x408bab
mov dword [0x42705c], esi
mov esi, dword [0x427418]
mov dword [ebp + 0x244], esi
shl esi, 5
shr dword [0x427418], 0x1b
or esi, dword [0x427418]
sub eax, 0x41
add esi, eax
inc ecx
mov dword [0x427304], eax
mov dword [ebp + 0x240], esi
mov dword [ebp + 0x23c], ecx
mov eax, dword [0x4273f4]
mov esi, dword [0x42705c]
jmp 0x409c54
mov edx, dword [ebp + 0x298]
mov ebp, dword [0x427680]
mov edi, dword [esp + 0x244]
mov eax, dword [esp + 0x38c]
mov ecx, dword [0x427618]
mov dword [esp + 0x2c0], edi
mov edi, dword [esp + 0x314]
jmp 0x40f213
mov dword [ebp + 0x33c], eax
lea eax, [0x426608]
mov dword [ebp + 0x31c], 0
mov ecx, dword [0x4272b0]
mov eax, dword [ecx + 0x3c]
add eax, ecx
mov ecx, dword [eax + 0x7c]
mov ebx, dword [eax + 0x78]
add ebx, dword [0x4272b0]
test ebx, ebx
je 0x405a70
lea edi, [0x426608]
mov eax, dword [ebx + 0x14]
mov ebp, dword [ebx + 0x18]
mov esi, dword [ebx + 0x10]
mov edi, dword [ebx + 0x20]
add edi, dword [0x4272b0]
mov dword [esp + 0x314], ecx
mov ecx, dword [ebx + 0x24]
add ecx, dword [0x4272b0]
mov dword [esp + 0x2c0], ebx
mov ebx, dword [ebx + 0x1c]
add ebx, dword [0x4272b0]
test dword [0x427030], 0x80000000
jmp 0x42118f
mov dword [0x4276d8], esi
push dword [0x426914]
push edx
push eax
push 0
call fcn.0040a52a
mov ebp, dword [ebp + 0x1c]
add ebp, dword [esp + 0x3a4]
mov dword [edx + 0xf5c], esi
mov esi, dword [edx + 0xf20]
mov esi, dword [esi + 0x20]
add esi, dword [esp + 0x3a4]
mov dword [esp + 0x2b8], edi
mov edi, dword [0x427528]
mov edi, dword [edi + 0x10]
mov dword [esp + 0x26c], ecx
mov ecx, dword [esp + 0x2b0]
push ecx
sub ecx, edi
mov ebx, dword [edx + 0xf20]
mov ebx, dword [ebx + 0x18]
mov dword [esp + 0x3a0], eax
mov eax, dword [edx + 0xf20]
mov eax, dword [eax + 0x14]
cmp ecx, eax
jge 0x409fb4
jmp 0x40ad8e
mov dword [ebp + 0x38c], ecx
lea eax, [eax*4]
mov ecx, dword [0x427478]
mov dword [ebp + 0x290], ecx
mov dword [0x427430], esi
mov ecx, dword [eax + ebx]
add ecx, esi
cmp ecx, dword [0x42748c]
jge 0x40a0a3
mov dword [ebp + 0x314], edi
mov edi, dword [0x427478]
mov dword [ebp + 0x290], edi
mov dword [0x42747c], ecx
mov edi, dword [ebp + 0x314]
jmp 0x4215b7
mov dword [0x4271a0], eax
mov eax, dword [ebp + 0x298]
add eax, dword [esp + 0x314]
cmp dword [0x4271a0], eax
jge 0x41615c
mov edx, 0x2e
mov edx, dword [0x4271a0]
mov edx, 0xf
mov edx, dword [0x4271a0]
mov edx, dword [0x426ec4]
sub esp, 4
push edx
mov dword [ebp + 0x250], eax
mov eax, 0x2e
mov dword [0x426e18], ecx
mov ecx, 0xf
mov edi, dword [0x4271a0]
repne scasb al, byte es:[edi]
mov eax, edi
mov eax, edx
jmp 0x409447
mov eax, dword [esp + 0x314]
mov dword [esp + 0x370], ebx
mov esi, dword [esp + 0x2a0]
mov dword [0x426e28], edi
mov edx, dword [0x427074]
mov dword [0x4273f0], ebp
mov dword [esp + 0x33c], eax
mov dword [esp + 0x298], esi
mov dword [0x4272a0], edx
mov ecx, dword [0x427050]
mov dword [esp + 0x314], ecx
mov ebx, dword [esp + 0x2c0]
mov edi, dword [0x4272bc]
mov edx, dword [esp + 0x254]
mov ecx, dword [0x42723c]
mov esi, dword [0x4270a4]
mov dword [0x426f98], ebx
mov dword [0x426ffc], esi
mov ebp, dword [0x426c80]
mov dword [esp + 0x2c0], ebp
mov ebx, dword [0x426e40]
mov eax, dword [0x426f98]
mov ebp, esp
jmp 0x41167f
mov edi, dword [ebp + 0x38c]
add edi, dword [esp + 0x394]
mov dword [0x4271dc], 0
mov dword [ebp + 0x314], edi
mov eax, dword [esi + 0x3c]
add eax, esi
mov ecx, dword [eax + 0x7c]
mov ebx, dword [eax + 0x78]
add ebx, esi
test ebx, ebx
je 0x4215ad
lea eax, [0x426608]
mov eax, dword [ebx + 0x14]
mov dword [0x427464], esi
mov esi, dword [ebx + 0x18]
mov dword [ebp + 0x38c], edi
mov edi, dword [ebx + 0x10]
mov dword [ebp + 0x2c0], ecx
mov ecx, dword [ebx + 0x20]
add ecx, dword [0x427464]
mov dword [0x427468], ecx
mov ecx, dword [ebx + 0x24]
add ecx, dword [0x427464]
mov dword [0x42748c], ebx
mov ebx, dword [ebx + 0x1c]
jmp 0x419a7b
add ecx, dword [0x426e94]
inc edi
mov dword [esp + 0x314], ecx
mov dword [0x426e74], edi
mov dword [esp + 0x254], eax
mov edi, ebp
mov eax, dword [esp + 0x314]
mov dword [esp + 0x298], eax
mov dword [esp + 0x250], edx
mov edx, dword [0x426f04]
mov dword [esp + 0x314], edx
mov dword [esp + 0x248], ecx
mov dword [0x426ed8], esi
mov esi, dword [0x426e74]
mov eax, dword [esi]
and eax, 0xff
test eax, eax
je 0x41c486
mov dword [esp + 0x240], ebx
mov ebx, dword [esp + 0x298]
mov dword [esp + 0x244], ebx
shl ebx, 5
shr dword [esp + 0x298], 0x1b
or ebx, dword [esp + 0x298]
jmp 0x401831
mov edx, dword [0x4276c0]
mov eax, dword [0x427474]
mov edi, dword [0x42755c]
mov dword [0x427688], edi
mov dword [esp + 0x244], ebx
mov ebx, dword [0x4275a8]
mov dword [esp + 0x248], ebx
mov dword [0x4275a8], edi
mov ebx, dword [esp + 0x244]
mov edi, dword [esp + 0x314]
jmp 0x404fc3
mov eax, ebp
mov dword [esp + 0x258], edi
sub edi, dword [esp + 0x2a0]
mov ecx, edi
mov esi, dword [esp + 0x2a0]
mov edi, eax
rep movsb byte es:[edi], byte [esi]
mov dword [0x427450], ebx
mov dword [esp + 0x250], ecx
mov ecx, dword [0x426770]
mov dword [edi], ecx
mov dword [0x42745c], edx
call dword [esp + 0x254]
push dword [esp + 0x254]
push eax
mov dword [esp + 0x250], eax
call dword [0x427214]
mov edx, dword [esp + 0x248]
mov dword [0x4274a8], eax
mov dword [esp + 0x244], esi
mov edi, dword [esp + 0x258]
mov dword [0x427348], edx
mov eax, dword [0x42741c]
mov esi, dword [0x427430]
mov ecx, dword [0x4274a8]
mov edx, dword [0x42745c]
add esp, 4
mov ebp, esp
jmp 0x40b4d4
mov edx, dword [0x427618]
mov dword [esp + 0x38c], edx
mov edx, dword [esp + 0x298]
jmp 0x4189ea
mov dword [ebp + 0x248], edx
mov esi, dword [0x42717c]
mov edx, dword [ebp + 0x250]
jmp 0x4034e3
mov dword [0x427438], edi
sub edi, ebp
mov ecx, edi
mov esi, ebp
mov edi, eax
rep movsb byte es:[edi], byte [esi]
mov eax, dword [0x426770]
mov dword [edi], eax
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push dword [0x427438]
push eax
mov dword [esp + 0x24c], eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov edx, dword [0x427438]
mov ecx, dword [esp + 0x244]
mov dword [0x427488], esi
mov edi, dword [esp + 0x248]
mov dword [esp + 0x24c], edx
mov dword [0x426ea4], ecx
mov esi, dword [0x42717c]
mov ecx, dword [0x427480]
mov edx, dword [esp + 0x254]
add esp, 4
mov ebp, esp
jmp 0x4034e3
mov edx, ebp
mov eax, dword [0x4274b8]
mov ecx, dword [esp + 0x248]
mov ebp, dword [0x42753c]
mov dword [0x4275ac], esi
mov ebx, dword [0x427660]
mov dword [0x427510], ebp
mov esi, dword [0x427518]
mov dword [esp + 0x250], esi
mov esi, dword [0x4275ac]
mov ebp, esp
jmp 0x402217
mov dword [0x427608], eax
mov dword [esp + 0x38c], edx
lea ebp, [ebp*4]
mov eax, dword [0x4274f0]
mov edx, ecx
mov dword [esp + 0x29c], eax
mov dword [0x4276ac], ebx
mov ebx, dword [esp + 0x2a0]
mov eax, dword [ebx + ebp]
add eax, dword [0x427608]
cmp eax, dword [0x4276ac]
jge 0x41d91b
mov edx, dword [0x4274f0]
mov dword [esp + 0x2a0], esi
mov dword [esp + 0x29c], edx
mov esi, dword [esp + 0x38c]
mov dword [0x427698], ecx
mov dword [esp + 0x314], esi
mov dword [esp + 0x254], eax
mov dword [esp + 0x250], edi
mov eax, dword [0x427608]
mov dword [esp + 0x38c], eax
mov esi, dword [esp + 0x254]
mov edx, ecx
mov dword [esp + 0x314], esi
mov ebp, esp
jmp 0x404f5e
mov dword [esp + 0x38c], edx
mov dword [0x426e10], ebp
mov dword [esp + 0x33c], edi
mov dword [0x427144], eax
mov edx, dword [0x426e2c]
mov ebp, dword [0x42700c]
mov edi, ebx
mov eax, dword [0x42714c]
mov dword [0x427134], ebp
mov dword [0x4271a8], ecx
mov dword [esp + 0x31c], esi
mov esi, dword [esp + 0x33c]
mov eax, dword [esi]
and eax, 0xff
test eax, eax
je 0x411cf7
mov edi, dword [0x426c50]
mov dword [esp + 0x2c0], edi
shl edi, 5
shr dword [0x426c50], 0x1b
or edi, dword [0x426c50]
jmp 0x4158b0
mov dword [0x427494], 0
mov dword [0x4274ac], esi
mov dword [ebp + 0x314], edi
mov esi, dword [0x427464]
mov edi, dword [ebp + 0x38c]
mov dword [0x42709c], eax
mov eax, dword [0x427494]
cmp eax, dword [0x4274ac]
jg 0x408cb0
add eax, eax
add eax, dword [0x427494]
add eax, dword [0x427494]
mov dword [0x427470], eax
mov eax, dword [0x427468]
mov dword [ebp + 0x2a0], eax
add eax, dword [0x427470]
mov esi, dword [eax]
add esi, dword [0x427464]
mov dword [0x427454], esi
mov dword [ebp + 0x298], 0
jmp 0x41c8c5
mov dword [ebp + 0x38c], eax
mov dword [ebp + 0x31c], edi
mov dword [0x427010], esi
mov eax, dword [0x4273f0]
mov edi, dword [ebp + 0x2a0]
mov esi, dword [0x426ffc]
mov dword [0x427134], eax
mov dword [0x4270a4], esi
mov edi, dword [ebp + 0x38c]
mov dword [ebp + 0x370], edi
mov esi, dword [0x427010]
mov edi, dword [ebp + 0x2a0]
mov dword [ebp + 0x38c], ecx
mov eax, dword [0x42714c]
jmp 0x41b7ba
mov dword [0x427134], edi
mov dword [0x4270a4], ebx
mov dword [ebp + 0x370], 0
jmp 0x41b7ba
mov edx, dword [0x427900]
cld
mov ecx, dword [0x42723c]
mov ebx, dword [0x426e10]
mov dword [0x4272ac], eax
and dword [0x426c50], 0x7fffffff
mov dword [esp + 0x38c], ecx
mov dword [0x4270a4], ebx
mov eax, dword [0x42714c]
mov ebp, dword [0x426c50]
cmp ebp, dword [0x426ed4]
je 0x4079ef
mov ebp, esp
inc dword [esp + 0x370]
jmp 0x419bae
mov dword [esp + 0x254], eax
mov dword [esp + 0x250], esi
mov ecx, dword [esp + 0x2a0]
mov edx, dword [0x426c80]
mov dword [esp + 0x298], ecx
mov dword [esp + 0x2c0], edx
mov eax, dword [esp + 0x33c]
mov edx, dword [0x426f60]
mov ecx, dword [0x42723c]
mov dword [esp + 0x248], eax
mov dword [esp + 0x33c], esi
mov ebp, esp
jmp 0x41167f
mov eax, dword [ebp + 0x314]
mov dword [ebp + 0x298], edx
mov ebx, dword [0x426e7c]
mov dword [0x427054], esi
mov ecx, dword [0x42700c]
mov ebp, dword [0x4270a4]
mov dword [esp + 0x2c0], eax
mov edx, dword [0x426ee8]
mov dword [0x426e28], ebx
mov esi, dword [0x427074]
mov dword [0x4273f0], ecx
mov dword [0x426ffc], ebp
mov edi, dword [0x427050]
mov dword [esp + 0x370], edx
mov dword [0x4272a0], esi
mov dword [esp + 0x314], edi
mov eax, dword [esp + 0x298]
mov esi, dword [esp + 0x2c0]
mov ebx, dword [0x426e40]
mov edi, dword [0x4272bc]
jmp 0x411d46
mov dword [ebp + 0x298], ecx
mov ecx, edi
jmp 0x413a7c
mov dword [0x426f78], edx
mov dword [ebp + 0x254], ecx
mov edx, dword [ebp + 0x2c0]
mov ecx, dword [ebp + 0x33c]
mov dword [0x426f58], ecx
mov dword [ebp + 0x250], ebx
mov ebx, dword [0x426f5c]
mov dword [ebp + 0x33c], ebx
mov dword [0x426e58], edi
mov dword [0x427040], esi
mov esi, dword [ebp + 0x2a0]
mov ecx, dword [esi]
and ecx, 0xff
test ecx, ecx
je 0x404228
mov esi, dword [ebp + 0x298]
mov dword [0x4270cc], esi
shl esi, 5
shr dword [0x4270cc], 0x1b
or esi, dword [0x4270cc]
sub ecx, 0x41
jmp 0x41fc53
mov esi, dword [0x427324]
mov dword [0x426f20], esi
and esi, 0xffff
mov dword [ebp + 0x2c0], esi
mov dword [0x426e90], ecx
mov dword [ebp + 0x2a0], ecx
mov esi, dword [0x4272b0]
mov ecx, dword [ebp + 0x2c0]
mov dword [0x426fa4], edi
sub ecx, dword [0x426fa4]
mov edi, dword [0x427084]
mov esi, dword [edi + 0x1c]
add esi, dword [0x4272b0]
mov dword [0x426e9c], ebx
mov dword [0x427080], eax
cmp ecx, dword [0x427080]
jge 0x403e2a
mov dword [0x426e6c], ecx
mov dword [ebp + 0x298], edx
mov dword [0x427384], ebx
mov dword [0x42717c], esi
mov edi, dword [0x4270ac]
mov ebp, dword [0x426e90]
mov ecx, dword [esp + 0x2c0]
mov edx, dword [esp + 0x314]
mov dword [0x427238], edi
mov dword [0x426f04], ebp
mov dword [0x426ea4], ecx
mov dword [esp + 0x38c], edx
mov eax, dword [0x427084]
mov eax, dword [eax + 0x24]
add eax, dword [0x4272b0]
mov ecx, dword [0x426e6c]
mov dword [esp + 0x2a0], eax
mov esi, dword [0x4272b0]
mov ebp, dword [esp + 0x298]
mov dword [esp + 0x250], ebp
mov edi, dword [0x426e90]
mov ebp, esp
jmp 0x40349c
mov ebx, dword [ebp + 0x250]
jmp 0x40958d
mov edi, ebp
mov dword [esp + 0x298], ecx
and dword [0x4271f0], 0x7fffffff
mov ecx, dword [0x426f04]
mov dword [esp + 0x314], ecx
mov ebp, dword [0x4271f0]
cmp ebp, dword [0x427324]
je 0x41c853
mov ebp, esp
inc dword [esp + 0x2c0]
mov edi, ecx
mov dword [0x427060], edx
mov edx, dword [ebp + 0x2c0]
cmp edx, dword [esp + 0x38c]
jg 0x418d05
add edx, edx
add edx, dword [esp + 0x2c0]
add edx, dword [esp + 0x2c0]
mov dword [ebp + 0x254], esi
mov esi, dword [0x427384]
mov dword [ebp + 0x314], esi
add esi, edx
mov eax, dword [esi]
add eax, dword [esp + 0x254]
mov dword [ebp + 0x250], eax
mov ebx, esi
mov dword [0x42742c], 0
mov ecx, dword [ebp + 0x298]
mov eax, edx
mov dword [0x426e94], ecx
mov edx, dword [ebp + 0x250]
jmp 0x415289
mov ebx, dword [esp + 0x3b8]
mov esi, dword [0x427694]
mov ebp, dword [esp + 0x270]
mov dword [esp + 0x268], ecx
mov edi, dword [0x4275e0]
mov dword [0x4276bc], ebp
mov ecx, dword [0x426df8]
mov dword [0x427678], eax
mov eax, dword [esp + 0x288]
add eax, dword [0x427550]
cmp dword [esp + 0x268], eax
jge 0x41ade4
mov ecx, 0x2e
mov ecx, dword [esp + 0x268]
mov ecx, 0xf
mov ecx, dword [esp + 0x268]
push dword [0x4271ac]
mov dword [esp + 0x268], eax
mov eax, 0x2e
mov ecx, 0xf
jmp 0x41977b
mov dword [ebp + 0x248], eax
mov ecx, dword [ebp + 0x250]
mov esi, dword [ebp + 0x254]
mov ebp, edi
mov dword [0x4274a4], edx
mov eax, dword [0x42742c]
mov dword [esp + 0x244], ecx
mov dword [esp + 0x314], eax
mov eax, dword [esp + 0x248]
mov dword [0x426e34], ecx
mov edi, edx
mov edx, dword [0x427060]
jmp 0x40ce7b
mov dword [0x427484], esi
mov edi, dword [0x4274a0]
and dword [esp + 0x298], 0x7fffffff
mov esi, dword [0x427464]
mov esi, dword [ebp + 0x298]
cmp esi, dword [esp + 0x290]
je 0x4216e3
mov esi, dword [0x427464]
inc dword [0x427494]
mov esi, dword [0x4274ac]
mov dword [ebp + 0x38c], eax
mov edi, dword [ebp + 0x314]
mov eax, dword [0x42709c]
mov esi, dword [ebp + 0x38c]
mov dword [0x42743c], esi
mov edi, dword [0x4274a0]
mov dword [ebp + 0x38c], edi
mov esi, dword [0x4274ac]
mov edi, dword [ebp + 0x314]
jmp 0x410f66
sub eax, 0x41
add edi, eax
inc esi
mov dword [esp + 0x254], edi
mov edx, dword [0x426c50]
mov dword [0x426e20], edi
mov ebp, dword [0x426e10]
mov dword [0x427050], edx
mov dword [esp + 0x250], esi
mov dword [0x42720c], eax
mov edx, dword [esp + 0x38c]
mov esi, edi
mov eax, dword [0x426e20]
mov dword [0x426c50], eax
mov edi, dword [esp + 0x250]
mov eax, dword [0x42720c]
jmp 0x4100fe
mov dword [ebp + 0x33c], edx
mov edx, dword [ebp + 0x2c0]
mov dword [ebp + 0x314], edi
mov edi, dword [0x426fc8]
cmp edi, dword [0x426fc0]
jg 0x407c69
add edi, edi
add edi, dword [0x426fc8]
add edi, dword [0x426fc8]
mov dword [0x426f40], ecx
add ecx, edi
mov edx, dword [ecx]
add edx, dword [0x4272b0]
mov dword [ebp + 0x2a0], edx
mov dword [ebp + 0x298], 0
jmp 0x412b23
mov dword [ebp + 0x250], eax
mov eax, dword [0x4271a0]
jmp 0x4095d4
mov esi, dword [0x427464]
mov edx, dword [ebp + 0x250]
mov edi, dword [0x4274a0]
mov ecx, dword [0x427458]
jmp 0x40b4a4
mov ebp, esp
mov dword [0x427644], eax
mov eax, dword [ebp + 0x2a0]
add eax, dword [0x42746c]
add eax, dword [0x42746c]
mov edx, dword [eax]
and edx, 0xffff
mov dword [0x427680], edx
mov edi, dword [0x427600]
mov esi, dword [ebp + 0x2a0]
mov dword [ebp + 0x244], ecx
mov edx, dword [ebp + 0x2c0]
mov dword [0x427638], edi
mov dword [ebp + 0x248], esi
mov ecx, dword [ebp + 0x29c]
mov dword [0x42761c], edx
mov dword [0x427590], eax
mov dword [0x4274f0], ecx
mov eax, dword [0x4274c8]
mov dword [ebp + 0x2a0], eax
jmp 0x40ade2
mov dword [ebp + 0x298], eax
lea eax, [0x426608]
mov dword [eax + 0x10dc], 0
mov eax, dword [0x4276e4]
cmp eax, dword [esp + 0x2c0]
jg 0x41b935
mov dword [ebp + 0x254], ebx
lea ebx, [0x426608]
add eax, eax
add eax, dword [0x4276e4]
add eax, dword [ebx + 0x10dc]
mov dword [ebx + 0xfbc], ecx
add ecx, eax
mov ebx, dword [ecx]
add ebx, dword [esp + 0x38c]
mov dword [0x427650], edx
lea edx, [0x426608]
mov dword [0x4276e8], ebx
mov dword [edx + 0xf68], 0
jmp 0x41e0e5
mov ecx, dword [esp + 0x2c0]
mov dword [esp + 0x254], edx
mov edx, dword [0x4276f0]
mov dword [0x427614], ebp
mov ebp, esp
jmp 0x404f54
mov esi, edi
mov dword [ebp + 0x250], edx
mov edx, dword [ebp + 0x2c0]
jmp 0x40b163
mov dword [0x42746c], 0
mov dword [esp + 0x2c0], eax
mov dword [0x4274c8], edi
mov eax, dword [esp + 0x38c]
mov edi, dword [esp + 0x314]
mov dword [esp + 0x298], edx
mov dword [0x427618], eax
mov edx, dword [0x42746c]
mov dword [esp + 0x2a0], esi
cmp edx, dword [0x427508]
mov esi, dword [0x427728]
jg 0x408f81
mov dword [esp + 0x38c], esi
add edx, edx
add edx, dword [0x42746c]
add edx, dword [0x42746c]
mov dword [0x427600], ebp
add ebp, edx
mov eax, dword [ebp]
add eax, esi
mov dword [esp + 0x254], eax
mov dword [0x4275a8], 0
jmp 0x404fc3
mov edi, dword [ebp + 0x38c]
mov dword [ebp + 0x254], ecx
mov dword [0x426f84], ebx
mov dword [ebp + 0x250], esi
mov dword [0x427250], eax
mov ebp, dword [0x427238]
mov dword [esp + 0x314], edi
mov ecx, edx
mov ebx, dword [0x427384]
mov esi, dword [0x42717c]
mov eax, dword [esp + 0x2a0]
mov dword [0x4270ac], ebp
mov edi, dword [0x427084]
mov esi, dword [esp + 0x250]
mov edx, dword [0x427060]
mov eax, dword [0x427324]
mov ecx, dword [esp + 0x254]
mov dword [0x4272b0], esi
mov dword [0x426f20], eax
mov dword [0x426e90], ecx
jmp 0x41d664
mov edi, dword [esp + 0x26c]
repne scasb al, byte es:[edi]
mov eax, edi
mov eax, dword [0x4271ac]
mov dword [0x4275f4], edi
sub edi, dword [esp + 0x26c]
mov ecx, edi
mov esi, dword [esp + 0x26c]
mov edi, eax
rep movsb byte es:[edi], byte [esi]
mov dword [esp + 0x264], edi
mov edi, dword [0x426770]
mov edx, dword [esp + 0x264]
mov dword [edx], edi
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push dword [0x4275f4]
push eax
mov dword [esp + 0x264], eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov dword [0x427690], eax
mov edx, dword [esp + 0x2cc]
mov dword [0x4275b4], esi
mov ecx, dword [0x426df8]
mov edi, dword [0x4275e0]
mov eax, dword [0x4275f4]
mov esi, dword [0x427694]
mov esi, dword [0x427690]
mov dword [esp + 0x268], esi
mov esi, dword [0x427694]
jmp 0x41ade4
add ebx, dword [0x427464]
test dword [esp + 0x290], 0x80000000
je 0x410f5c
mov dword [0x427244], esi
mov dword [ebp + 0x2a0], edi
mov esi, dword [0x427464]
mov edi, dword [ebp + 0x38c]
mov dword [0x427490], eax
mov eax, dword [ebp + 0x290]
mov dword [0x427478], eax
and eax, 0xffff
mov dword [0x427348], eax
sub eax, dword [esp + 0x2a0]
cmp eax, dword [0x427490]
jge 0x403fd3
jmp 0x40b4a4
mov edi, dword [0x42700c]
mov dword [ebp + 0x38c], ecx
mov dword [0x4270a4], ebx
mov dword [0x427134], edi
mov ecx, dword [ebp + 0x370]
cmp ecx, dword [0x426ee8]
jg 0x4117f6
add ecx, ecx
add ecx, dword [esp + 0x370]
add ecx, dword [esp + 0x370]
mov edi, dword [0x426e7c]
mov dword [0x4272f8], edi
add edi, ecx
mov ebx, dword [edi]
add ebx, dword [0x4272b0]
mov esi, dword [ebp + 0x31c]
mov dword [0x4273bc], ecx
mov dword [ebp + 0x298], edi
mov dword [0x4272b4], ebx
mov dword [ebp + 0x33c], 0
mov dword [ebp + 0x2c0], ebx
jmp 0x41b2ed
lea ecx, [ecx*4]
mov dword [0x4271d0], esi
mov esi, dword [0x4270c8]
mov ebx, dword [ecx + esi]
add ebx, dword [0x4272b0]
cmp ebx, dword [esp + 0x2c0]
jge 0x405ee6
mov dword [0x4270e8], edi
jmp 0x40421d
add eax, dword [esp + 0x38c]
test dword [0x42735c], 0x80000000
je 0x418059
mov dword [ebp + 0x298], edi
lea edi, [0x426608]
mov dword [edi + 0xef0], eax
mov eax, dword [edi + 0xd54]
mov dword [0x427584], eax
and eax, 0xffff
mov dword [ebp + 0x254], eax
sub eax, esi
cmp eax, dword [esp + 0x2a0]
jge 0x4092a0
jmp 0x41d0ac
jmp 0x41c8c5
mov dword [esp + 0x248], eax
mov eax, dword [0x4274cc]
add eax, dword [0x4276e4]
add eax, dword [0x4276e4]
mov ecx, dword [eax]
and ecx, 0xffff
mov dword [0x427548], ecx
mov dword [0x4275d8], edi
mov edx, ebp
mov dword [esp + 0x244], eax
mov ecx, dword [esp + 0x248]
mov edi, ebx
mov eax, dword [0x427538]
mov dword [0x427578], ecx
mov dword [0x4275e0], eax
mov ecx, dword [0x427548]
mov eax, dword [esp + 0x244]
mov ebx, dword [0x427580]
mov ebp, esp
jmp 0x407187
mov dword [0x427578], eax
lea eax, [0x426608]
and dword [0x427570], 0x7fffffff
mov dword [eax + 0xfd8], edi
mov edi, dword [eax + 0xf68]
cmp edi, dword [0x42735c]
je 0x40716d
inc dword [0x4276e4]
mov eax, dword [eax + 0xf70]
mov ebx, edi
mov dword [ebp + 0x250], ecx
mov ebp, edx
mov dword [0x427700], esi
mov ecx, dword [0x4276e8]
mov esi, dword [0x4275e0]
mov dword [0x427580], ecx
mov dword [0x427538], esi
mov esi, dword [0x427700]
mov ecx, dword [esp + 0x250]
jmp 0x407970
mov esi, dword [0x427040]
mov edx, dword [0x426fc8]
mov ecx, dword [0x426f40]
mov ebx, dword [ebp + 0x2a0]
mov dword [ebp + 0x23c], eax
mov dword [ebp + 0x244], eax
mov dword [ebp + 0x240], ebx
add eax, edx
mov edi, dword [0x426f58]
add eax, edx
mov dword [ebp + 0x2a0], edi
mov ecx, dword [eax]
and ecx, 0xffff
mov edx, ecx
mov ebx, dword [ebp + 0x244]
mov edi, dword [ebp + 0x314]
mov dword [0x4273e8], eax
mov dword [0x426ec0], ebx
mov eax, dword [0x426f5c]
mov ecx, dword [0x426f40]
jmp 0x413a36
mov dword [0x4275dc], edx
push dword [0x4268b8]
call fcn.0041798f
ret
mov dword [ebp + 0x254], eax
mov dword [0x426e2c], edx
mov ebp, dword [ebp + 0x38c]
mov eax, dword [0x4272ac]
mov dword [0x42723c], ebp
mov ecx, ebx
mov ebp, dword [esp + 0x33c]
mov edi, dword [0x4272b4]
mov eax, dword [esp + 0x254]
mov dword [0x426c50], ebp
mov dword [0x42714c], eax
mov eax, dword [0x4272ac]
mov ebp, dword [0x4270a4]
jmp 0x4100fe
mov ebx, dword [0x4272b0]
mov ecx, dword [ebx + 0x3c]
add ecx, ebx
mov ebx, dword [ecx + 0x7c]
mov esi, dword [ecx + 0x78]
add esi, dword [0x4272b0]
test esi, esi
je 0x40b157
lea ebp, [0x426608]
mov ebp, esp
mov ecx, dword [esi + 0x14]
mov edi, dword [esi + 0x18]
mov dword [0x427070], esi
mov esi, dword [esi + 0x10]
test dword [esp + 0x2ec], 0x80000000
je 0x4068eb
mov dword [ebp + 0x2c0], edx
lea edx, [0x426608]
mov dword [0x426fc0], edi
mov edi, dword [0x427070]
mov edx, dword [edi + 0x1c]
jmp 0x4013ee
mov dword [ebp + 0x254], ecx
mov ecx, dword [0x427550]
jmp 0x41efa3
mov esi, dword [0x426ed8]
mov edx, dword [esp + 0x250]
and dword [esp + 0x298], 0x7fffffff
mov dword [esp + 0x244], ebx
mov ebx, dword [esp + 0x298]
cmp ebx, dword [0x427324]
je 0x40347e
mov ebp, esp
inc dword [ebp + 0x2c0]
mov dword [0x426fcc], eax
mov ebx, dword [ebp + 0x244]
mov esi, dword [ebp + 0x298]
mov edx, dword [0x426e74]
mov ecx, edi
mov eax, dword [ebp + 0x254]
mov dword [0x4271f0], esi
mov dword [0x427264], edx
mov ecx, dword [0x426fcc]
mov esi, dword [0x426ed8]
mov edx, dword [ebp + 0x250]
jmp 0x4129cf
mov ebp, esp
mov edi, dword [ebp + 0x2a0]
add edi, dword [esp + 0x2c0]
add edi, dword [esp + 0x2c0]
mov ecx, dword [edi]
and ecx, 0xffff
mov dword [ebp + 0x254], eax
mov dword [0x427420], edx
mov ebx, dword [0x4271f0]
mov esi, dword [0x427264]
mov edx, edi
mov dword [0x426e74], esi
mov eax, dword [ebp + 0x298]
mov esi, dword [0x4272b0]
mov dword [0x426e78], ecx
mov edi, dword [0x426f04]
mov ecx, dword [0x427420]
mov dword [ebp + 0x250], ecx
mov ecx, dword [0x426e78]
jmp 0x40349c
mov dword [0x427448], esi
mov esi, dword [0x427464]
mov dword [0x4274a0], edi
mov edi, dword [0x427454]
mov esi, dword [edi]
and esi, 0xff
test esi, esi
je 0x41538b
mov edi, dword [ebp + 0x298]
mov dword [ebp + 0x38c], edi
shl edi, 5
shr dword [esp + 0x38c], 0x1b
or edi, dword [esp + 0x38c]
sub esi, 0x41
add edi, esi
inc dword [0x427454]
mov dword [0x42744c], esi
mov dword [0x427440], edi
mov esi, dword [0x427448]
mov dword [ebp + 0x298], edi
mov edi, dword [0x4274a0]
jmp 0x41a2a1
mov dword [ebp + 0x33c], eax
mov eax, dword [0x42714c]
mov dword [0x426f60], edx
mov edx, dword [ebp + 0x314]
add edx, dword [0x4272f0]
cmp dword [esp + 0x33c], edx
jge 0x4128cc
mov eax, 0x2e
mov eax, dword [esp + 0x33c]
mov eax, 0xf
mov ecx, dword [esp + 0x33c]
mov dword [ebp + 0x2c0], edx
sub esp, 4
mov edx, dword [0x426f9c]
push edx
mov eax, 0x2e
mov ecx, 0xf
mov edi, dword [ebp + 0x33c]
repne scasb al, byte es:[edi]
mov eax, edi
jmp 0x420836
lea eax, [eax*4]
mov dword [0x427710], ebx
mov ebx, dword [0x4274f8]
mov ebx, dword [eax + ebx]
add ebx, dword [esp + 0x38c]
cmp ebx, dword [0x427710]
jge 0x4210fc
mov edi, dword [0x427134]
sub edi, dword [0x42733c]
mov dword [ebp + 0x2c0], edx
mov dword [0x42771c], ebx
mov dword [0x4274d0], edi
push edi
mov ecx, dword [0x426df8]
sub ecx, 0x7369857f
mov ebx, dword [ebp + 0x384]
mov esi, edi
mov eax, dword [0x4274d0]
mov dword [0x42769c], ecx
mov dword [0x4276fc], ecx
mov dword [ebp - 0x24], ebx
mov dword [0x4276bc], eax
sub esp, 0x20
call dword [esp + 0x394]
mov ecx, dword [0x42769c]
mov edx, dword [0x4276fc]
mov edi, dword [ebp + 0x298]
push dword [0x426674]
push dword [0x4268b8]
push dword [0x426914]
push dword [0x4267fc]
call fcn.0041b691
ret
mov ecx, dword [esp + 0x2c0]
mov esi, dword [0x42717c]
mov eax, dword [esp + 0x2a0]
mov ebp, esp
jmp 0x403e39
mov ecx, dword [esp + 0x38c]
mov dword [0x42757c], ecx
mov dword [0x4276a4], edi
mov ecx, dword [0x4276ac]
mov edi, dword [0x427608]
add ecx, dword [esp + 0x2c0]
mov dword [esp + 0x38c], edi
cmp eax, ecx
jge 0x404e82
mov ebx, 0x2e
mov ebx, eax
mov eax, 0xf
mov edi, ebx
mov dword [esp + 0x314], esi
sub esp, 4
mov esi, dword [esp + 0x25c]
push esi
mov eax, 0x2e
mov dword [0x427594], ecx
mov ecx, 0xf
jmp 0x421433
mov dword [0x427510], ebx
mov ebx, dword [0x4276e8]
mov edx, dword [ebx]
and edx, 0xff
test edx, edx
je 0x41a582
mov dword [0x427538], edi
mov edi, dword [0x427570]
mov dword [0x4276c4], edi
shl edi, 5
shr dword [0x427570], 0x1b
or edi, dword [0x427570]
sub edx, 0x41
add edi, edx
inc ebx
mov dword [ebp + 0x250], edi
jmp 0x402217
mov esi, dword [0x427134]
sub esi, dword [0x42733c]
sub dword [0x426df8], 0x7369857f
lea eax, [0x426608]
mov ebx, dword [ebp + 0x384]
sub esp, 4
push ebx
mov dword [ebp + 0x2c0], edx
call dword [esp + 0x378]
lea edx, [0x426608]
mov dword [edx + 0x1114], 0
mov dword [0x4276bc], esi
mov ecx, dword [0x426df8]
mov dword [0x42768c], ecx
push dword [0x42664c]
push dword [0x42667c]
push dword [0x426770]
push eax
call 0x40b3f7
ret
add esi, ecx
inc dword [esp + 0x2a0]
mov dword [ebp + 0x248], esi
mov dword [ebp + 0x244], ecx
mov edx, dword [0x426f78]
mov ebx, dword [ebp + 0x250]
mov esi, dword [0x427040]
mov ecx, dword [0x426f58]
mov dword [ebp + 0x33c], ecx
mov ecx, dword [ebp + 0x254]
mov edx, dword [ebp + 0x248]
mov dword [0x427188], edx
mov edx, dword [0x426f78]
mov dword [ebp + 0x240], eax
mov eax, dword [0x427188]
mov dword [ebp + 0x298], eax
mov eax, dword [ebp + 0x240]
jmp 0x412b23
mov dword [0x426fa4], edi
mov edi, dword [0x427084]
mov edi, dword [edi + 0x1c]
add edi, dword [0x4272b0]
mov dword [0x426e9c], ebx
mov dword [0x427080], eax
mov eax, dword [0x427084]
mov eax, dword [eax + 0x24]
add eax, dword [0x4272b0]
mov dword [ebp + 0x314], 0
mov dword [0x427110], esi
mov dword [ebp + 0x2a0], eax
mov esi, dword [0x4272b0]
mov eax, dword [ebp + 0x314]
mov dword [ebp + 0x2c0], eax
mov dword [0x42717c], edi
mov dword [ebp + 0x298], ebx
mov edi, dword [0x427110]
mov ebx, dword [ebp + 0x38c]
cmp eax, edi
mov dword [ebp + 0x314], ebx
jg 0x408bf0
add eax, eax
add eax, dword [esp + 0x2c0]
add eax, dword [esp + 0x2c0]
mov ebx, dword [ebp + 0x298]
mov dword [0x427384], ebx
add ebx, eax
mov ebp, dword [ebx]
add ebp, dword [0x4272b0]
mov dword [0x427264], ebp
jmp 0x406f6c
mov eax, edx
mov dword [0x426f64], edi
sub edi, dword [esp + 0x344]
mov ecx, edi
mov dword [ebp + 0x298], esi
mov esi, dword [ebp + 0x33c]
mov edi, eax
rep movsb byte es:[edi], byte [esi]
mov dword [ebp + 0x254], edi
mov dword [ebp + 0x250], ecx
mov ecx, dword [0x426770]
mov dword [edi], ecx
call dword [0x4273ec]
push dword [0x426f64]
push eax
mov dword [0x426fbc], eax
call dword [0x426f1c]
mov ecx, dword [ebp + 0x314]
mov dword [0x4271c0], eax
mov dword [0x426efc], esi
mov ebp, dword [0x426c80]
mov edi, dword [0x426e7c]
mov dword [0x427108], ecx
mov eax, dword [0x426ee8]
mov esi, dword [esp + 0x29c]
mov dword [esp + 0x2c4], ebp
mov dword [0x426e28], edi
mov edx, dword [0x426fbc]
mov dword [esp + 0x374], eax
mov dword [esp + 0x24c], esi
mov dword [esp + 0x318], edx
mov ebx, dword [esp + 0x2a4]
mov dword [esp + 0x29c], ebx
mov ebx, dword [0x426e40]
mov edi, dword [0x4272bc]
mov eax, dword [0x427074]
mov dword [esp + 0x340], ecx
mov edx, dword [0x426f60]
mov ebp, dword [0x42700c]
mov esi, dword [0x4270a4]
push edi
push dword [0x426770]
push 0x12c
push 0
push dword [0x426914]
call fcn.0040cbf1
ret
mov dword [esp + 0x2a0], ebp
mov dword [esp + 0x298], edi
mov ebp, esp
lea edi, [0x426608]
mov dword [edi + 0xd64], 0
mov edi, dword [0x42736c]
cmp edi, dword [esp + 0x2a0]
jg 0x402b22
add edi, edi
add edi, dword [0x42736c]
add edi, dword [0x42736c]
mov dword [ebp + 0x250], ebx
mov ebx, dword [ebp + 0x298]
mov dword [ebp + 0x254], ebx
add ebx, edi
mov dword [ebp + 0x248], edi
mov edi, dword [ebx]
add edi, dword [0x4272b0]
mov dword [0x427064], edi
mov dword [0x427418], 0
jmp 0x40ad1e
je 0x4189e0
mov dword [esp + 0x2c0], ecx
mov dword [esp + 0x2a0], edi
mov ecx, dword [esp + 0x38c]
mov edi, dword [esp + 0x314]
mov dword [0x4276f0], ecx
mov dword [0x42761c], eax
mov dword [0x427638], ebp
mov eax, dword [0x427728]
mov ebp, dword [esp + 0x29c]
mov dword [esp + 0x38c], eax
mov dword [0x4274f0], ebp
and ebp, 0xffff
mov dword [esp + 0x298], ebp
sub ebp, edx
cmp ebp, dword [0x42761c]
jge 0x4181c6
jmp 0x40f213
lea edi, [0x426608]
mov dword [ebp + 0x250], eax
mov eax, dword [0x427710]
add eax, dword [0x427550]
cmp ebx, eax
jge 0x40641c
mov edi, ebx
mov ebx, ebx
mov dword [ebp + 0x248], edx
mov edx, dword [0x427134]
sub edx, dword [0x42733c]
sub dword [0x426df8], 0x7369857f
mov dword [0x4274b4], edx
sub esp, 4
mov edx, dword [ebp + 0x384]
push edx
mov dword [ebp + 0x244], ecx
mov dword [ebp + 0x240], eax
call dword [esp + 0x378]
mov ecx, 0xf
push dword [0x42667c]
push 0x32
push dword [0x4268b8]
push edx
call fcn.00409d92
sub esp, 0x14
add ebp, 0x18
jmp 0x40b3f7
je 0x420a2a
mov dword [esp + 0x2a0], ebp
mov ebp, esp
mov dword [0x4270c8], ebx
lea ebx, [0x426608]
mov dword [ebp + 0x254], ecx
mov ecx, dword [0x427030]
mov dword [ebp + 0x298], ecx
and ecx, 0xffff
mov dword [0x42715c], ecx
sub ecx, esi
cmp ecx, eax
jge 0x405d95
jmp 0x419e81
repne scasb al, byte es:[edi]
mov eax, edi
mov eax, esi
mov dword [0x427520], edi
sub edi, ebx
mov ecx, edi
mov esi, ebx
mov edi, eax
rep movsb byte es:[edi], byte [esi]
mov dword [esp + 0x25c], ebx
mov ebx, dword [0x426770]
mov dword [edi], ebx
mov dword [esp + 0x258], edx
call dword [sym.imp.KERNEL32.dll_LoadLibraryA]
push dword [0x427520]
push eax
mov dword [0x4276b8], eax
call dword [sym.imp.KERNEL32.dll_GetProcAddress]
mov edx, dword [0x4276b8]
mov ecx, dword [0x42757c]
mov ebx, dword [esp + 0x2a4]
mov dword [esp + 0x24c], esi
mov edi, dword [0x4276a4]
mov dword [esp + 0x29c], edx
mov dword [esp + 0x390], ecx
mov esi, dword [esp + 0x318]
mov ecx, dword [esp + 0x254]
add esp, 4
jmp 0x40f258
mov dword [0x42747c], 0
mov eax, dword [esi + 0x3c]
add eax, esi
mov ecx, dword [eax + 0x7c]
mov ebx, dword [eax + 0x78]
add ebx, esi
test ebx, ebx
je 0x404f48
mov eax, dword [ebx + 0x14]
mov dword [ebp + 0x38c], edx
mov edx, dword [ebx + 0x18]
mov dword [0x427508], edx
mov edx, dword [ebx + 0x10]
mov ebp, dword [ebx + 0x20]
add ebp, esi
mov dword [0x427728], esi
mov esi, dword [ebx + 0x24]
add esi, dword [0x427728]
mov dword [esp + 0x314], edi
mov edi, dword [ebx + 0x1c]
add edi, dword [0x427728]
test dword [esp + 0x29c], 0x80000000
jmp 0x42108e
mov esi, dword [0x427464]
mov edi, dword [0x4274ac]
mov esi, dword [0x42709c]
mov dword [ebp + 0x38c], ebx
mov eax, dword [0x427494]
mov dword [ebp + 0x254], ecx
mov dword [ebp + 0x250], edx
mov dword [0x427458], ecx
mov dword [0x427244], edi
mov dword [0x427490], esi
mov ebx, dword [ebp + 0x314]
mov edx, dword [ebp + 0x290]
add ecx, eax
mov dword [ebp + 0x2a0], ebx
mov dword [0x427478], edx
add ecx, eax
mov eax, dword [ecx]
and eax, 0xffff
mov ebx, dword [ebp + 0x38c]
mov dword [0x427498], ecx
jmp 0x4179ed