Function at 0x401560
Capabilities:
Authenticate hmac
Log keystrokes via polling

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x298
push ebx
push esi
movzx eax, word [ebp - 0x114]
movzx ecx, word [ebp - 0x11c]
xor eax, ecx
mov byte [ebp - 0xc5], al
mov edx, dword [ebp - 0x260]
add edx, dword [ebp - 0x94]
movzx eax, byte [ebp - 9]
sub edx, eax
mov dword [ebp - 0x250], edx
movzx ecx, byte [ebp - 0x1cd]
add ecx, 0x5d
movzx edx, word [ebp - 0xb8]
and edx, ecx
mov word [ebp - 0xb8], dx
mov al, byte [ebp - 0xcc]
mov byte [ebp - 0xa8], al
mov ecx, dword [ebp - 0x1a4]
mov dword [ebp - 0x230], ecx
movzx edx, word [ebp - 0x1d4]
add edx, dword [ebp - 0x264]
and edx, 0x3a
mov dword [ebp - 0x270], edx
mov eax, 0x35
sub eax, dword [ebp - 0x278]
add eax, dword [ebp - 0x264]
xor eax, 0x3a
mov word [ebp - 0x114], ax
movzx ecx, byte [ebp - 0x21]
add ecx, 0x63
mov dword [ebp - 0x27c], ecx
mov dword [ebp - 0x100], 0x10
cmp dword [section..data], 0xf
jge 0x40163f
mov edx, 0x4a
sub edx, dword [ebp - 0x27c]
and edx, 0x5b
mov dword [ebp - 0x270], edx
mov eax, dword [ebp - 0xcc]
add eax, 0x3f
xor eax, 0x5e
mov byte [ebp - 0xb], al
mov ecx, dword [ebp - 0x264]
mov dword [ebp - 0x278], ecx
movzx edx, word [ebp - 0xb8]
add edx, dword [ebp - 0xcc]
sub edx, dword [ebp - 0xd0]
mov dword [ebp - 0xf8], edx
mov eax, dword [ebp - 0x1c0]
sub eax, 0xf
and eax, dword [ebp - 0x27c]
xor eax, dword [ebp - 0xa8]
mov word [ebp - 0xe8], ax
mov ecx, dword [ebp - 0x1a8]
add ecx, 0x38
movzx edx, word [ebp - 0x110]
mov eax, dword [ebp - 0x18]
sub eax, edx
or ecx, eax
mov word [ebp - 0x25c], cx
mov ecx, dword [ebp - 0x1a8]
mov dword [ebp - 0x58], ecx
movzx edx, word [ebp - 0x110]
add edx, 0x62
sub edx, dword [ebp - 0x260]
xor edx, dword [ebp - 0x260]
mov word [ebp - 0x110], dx
movzx eax, word [ebp - 0xc4]
add eax, 0x26
sub eax, dword [ebp - 0x270]
movzx ecx, byte [ebp - 0x271]
xor eax, ecx
mov word [ebp - 0xec], ax
mov edx, dword [ebp - 0xcc]
mov eax, dword [ebp - 0x1a4]
lea ecx, [eax + edx + 2]
mov dword [ebp - 0xf8], ecx
mov dword [ebp - 0x264], 0x6c
mov edx, dword [0x40d034]
sub edx, 0x1c
mov dword [0x40d034], edx
movzx eax, word [ebp - 0xe8]
add eax, dword [ebp - 0x94]
mov ecx, dword [ebp - 0xa8]
add ecx, 0x34
and eax, ecx
mov byte [ebp - 0xc5], al
movzx edx, word [ebp - 0x1c]
mov eax, dword [ebp - 0x278]
sub eax, edx
movzx ecx, byte [ebp - 0x1b9]
mov edx, 0x5f
sub edx, ecx
sub edx, 0x2e
xor eax, edx
mov byte [ebp - 0x116], al
movzx eax, byte [ebp - 0xf1]
sub eax, dword [ebp - 0xa8]
mov dword [ebp - 0xcc], eax
mov ecx, dword [ebp - 0xa8]
xor ecx, 0x46
mov dword [ebp - 0x1c0], ecx
call dword [sym.imp.KERNEL32.dll_GetCurrentProcessId]
mov dword [ebp - 0x1c4], eax
movzx edx, byte [ebp - 0x116]
cmp edx, 0x16
jg 0x4017a1
mov eax, dword [ebp - 0x278]
add eax, 0x4b
mov dword [ebp - 0xa8], eax
jmp 0x4017d0
mov ecx, dword [ebp - 0xa8]
or ecx, 0x33
mov dword [ebp - 0x264], ecx
movzx edx, word [ebp - 0x258]
mov eax, dword [ebp - 0x1a4]
lea ecx, [edx + eax + 0x49]
movzx edx, word [ebp - 0xf0]
and ecx, edx
mov byte [ebp - 0x126], cl
mov dword [ebp - 0x13c], 0x4c
mov edx, dword [0x460ca0]
mov al, 0xff
cmp dl, al
jne 0x4017eb
jmp 0x401937
mov dword [ebp - 0x280], 0
jmp 0x401806
mov eax, dword [ebp - 0x280]
add eax, 1
mov dword [ebp - 0x280], eax
cmp dword [ebp - 0x280], 6
jge 0x401897
mov ecx, dword [ebp - 0x1a8]
add ecx, 0xc
mov dword [ebp - 0x1a8], ecx
mov dword [ebp - 0x1c0], 0x27
mov edx, dword [ebp - 0x1c0]
sub edx, dword [ebp - 0x264]
sub edx, dword [ebp - 0xe4]
movzx eax, byte [ebp - 0x1cd]
sub edx, eax
mov word [ebp - 0xe8], dx
movzx ecx, word [ebp - 0xb8]
sub ecx, 0xb
mov dword [ebp - 0x260], ecx
mov edx, dword [ebp - 0x278]
add edx, dword [ebp - 0x1a4]
mov dword [ebp - 0x27c], edx
movzx eax, word [ebp - 0xf0]
add eax, 0x12
mov ecx, dword [0x40d050]
sub ecx, eax
mov dword [0x40d050], ecx
mov dword [ebp - 0x264], 0x40
jmp 0x4017f7
mov dword [ebp - 0x100], 7
mov edx, dword [ebp - 0x1c0]
sub edx, dword [ebp - 0xd4]
sub edx, 0xb
movzx eax, byte [ebp - 0xf9]
xor edx, eax
mov word [ebp - 0x124], dx
mov dword [ebp - 0x1a4], 0x56
movzx ecx, byte [ebp - 0x1cd]
movzx edx, byte [ebp - 0x116]
add edx, 1
or ecx, edx
mov word [ebp - 0x20], cx
movzx ebx, byte [ebp - 0x99]
movzx eax, word [ebp - 0xe8]
add ebx, eax
mov ecx, dword [ebp - 0x1c0]
push ecx
mov edx, dword [ebp - 0x27c]
push edx
mov eax, dword [ebp - 0x278]
push eax
mov ecx, dword [ebp - 0x278]
push ecx
mov edx, dword [ebp - 0x27c]
push edx
mov eax, dword [ebp - 0x260]
push eax
call fcn.00402830
add esp, 0x18
add ebx, eax
movzx ecx, word [ebp - 0x110]
movzx edx, word [ebp - 0x1c]
sub ecx, edx
and ebx, ecx
mov byte [ebp - 0xa], bl
movzx eax, word [ebp - 0x1c]
mov dword [ebp - 0xd0], eax
mov dword [ebp - 0x78], 9
mov ecx, dword [ebp - 0xb0]
add ecx, 0x46
movzx edx, byte [ebp - 0x116]
sub ecx, edx
mov dword [ebp - 0x270], ecx
mov eax, dword [ebp - 0x260]
mov dword [ebp - 0xcc], eax
mov ecx, dword [ebp - 0x120]
mov dword [ebp - 0xcc], ecx
movzx edx, byte [ebp - 0x116]
sub edx, 0x37
mov byte [ebp - 0x116], dl
movzx eax, word [ebp - 0xec]
mov ecx, dword [ebp - 0xb0]
lea edx, [eax + ecx + 0xb4]
mov byte [ebp - 0x125], dl
mov eax, dword [ebp - 0x1c0]
add eax, 0x39
mov dword [ebp - 0xcc], eax
mov dword [ebp - 0x154], 0x30
mov ecx, 0x13
sub ecx, dword [ebp - 0xd0]
add ecx, 0x59
mov word [ebp - 0x20], cx
push 0x1055
call fcn.00403c45
add esp, 4
mov dword [ebp - 0x1ac], eax
mov edx, dword [ebp - 0x260]
add edx, 0x2a
movzx eax, word [ebp - 0xc4]
movzx ecx, word [ebp - 0x110]
add eax, ecx
xor edx, eax
mov byte [ebp - 0xb], dl
mov edx, dword [ebp - 0x1c4]
push edx
push 0
push 8
call dword [sym.imp.KERNEL32.dll_OpenProcess]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x1c0]
sub eax, dword [ebp - 0xd4]
sub eax, 0xb
movzx ecx, byte [ebp - 0xf9]
xor eax, ecx
mov word [ebp - 0x124], ax
mov dword [ebp - 0x1a4], 0x56
movzx edx, byte [ebp - 0x1cd]
movzx eax, byte [ebp - 0x116]
add eax, 1
or edx, eax
mov word [ebp - 0x20], dx
movzx ebx, byte [ebp - 0x99]
movzx ecx, word [ebp - 0xe8]
add ebx, ecx
mov edx, dword [ebp - 0x1c0]
push edx
mov eax, dword [ebp - 0x27c]
push eax
mov ecx, dword [ebp - 0x278]
push ecx
mov edx, dword [ebp - 0x278]
push edx
mov eax, dword [ebp - 0x27c]
push eax
mov ecx, dword [ebp - 0x260]
push ecx
call fcn.00402830
add esp, 0x18
add ebx, eax
movzx edx, word [ebp - 0x110]
movzx eax, word [ebp - 0x1c]
sub edx, eax
and ebx, edx
mov byte [ebp - 0xa], bl
mov ecx, dword [ebp - 0xa8]
sub ecx, 0x1b
mov dword [ebp - 0xcc], ecx
mov dword [ebp - 0x26c], 0
movzx esi, word [ebp - 0x98]
mov edx, dword [ebp - 0x264]
push edx
mov eax, dword [ebp - 0x1a8]
push eax
mov ecx, dword [ebp - 0x264]
push ecx
mov edx, dword [ebp - 0x1c0]
push edx
mov eax, dword [ebp - 0xd4]
push eax
mov ecx, dword [ebp - 0xd0]
push ecx
call fcn.00402960
add esp, 0x18
lea edx, [esi + eax + 0x92]
mov word [ebp - 0x1b8], dx
mov eax, dword [ebp - 0x264]
mov dword [ebp - 0x22c], eax
mov ecx, 0x47
sub ecx, dword [ebp - 0xd4]
movzx edx, word [ebp - 0x1c]
sub ecx, edx
sub ecx, dword [ebp - 0x278]
and ecx, dword [ebp - 0xf8]
mov byte [ebp - 0x115], cl
movzx eax, byte [ebp - 0x1cd]
sub eax, 0x4a
mov byte [ebp - 0x1cd], al
mov dword [ebp - 0x1f8], 0x4c
mov dword [ebp - 0x268], 0
mov ecx, dword [ebp - 0x260]
sub ecx, 0xb
sub ecx, dword [ebp - 0x254]
mov dword [ebp - 0xc0], ecx
mov edx, dword [ebp - 0xd4]
mov dword [ebp - 0xd4], edx
mov dword [ebp - 0x54], 0x39
movzx eax, byte [ebp - 0xf1]
mov ecx, dword [ebp - 0x264]
sub ecx, eax
sub ecx, dword [ebp - 0x270]
mov dword [ebp - 8], ecx
mov dword [ebp - 0xa0], 0
mov edx, 3
sub edx, dword [ebp - 0xa8]
movzx eax, byte [ebp - 0x125]
sub edx, eax
mov dword [ebp - 0x94], edx
mov ecx, dword [ebp - 0xcc]
add ecx, 0x1a
mov dword [ebp - 0xc0], ecx
movzx edx, byte [ebp - 9]
and edx, 0x31
mov dword [ebp - 0x260], edx
movzx eax, byte [ebp - 0x1c0]
mov dword [ebp - 0x1a8], eax
mov dword [ebp - 0x30], 0x3a
mov dword [ebp - 0x260], 0x14
movzx ecx, word [ebp - 0x108]
add ecx, 0x1f
mov word [ebp - 0x108], cx
movzx edx, word [ebp - 0x1d4]
mov eax, 0x15
sub eax, edx
sub eax, 0x4a
mov dword [ebp - 0xc0], eax
movzx ecx, byte [ebp - 0x125]
mov edx, 0x34
sub edx, ecx
add edx, 0x18
mov dword [ebp - 0x1b4], edx
mov eax, dword [ebp - 0xcc]
sub eax, dword [ebp - 0x120]
movzx ecx, word [ebp - 0x20]
xor eax, ecx
mov dword [ebp - 0xe4], eax
movzx edx, word [ebp - 0x108]
movzx eax, byte [ebp - 0xf9]
lea ecx, [edx + eax - 2]
movzx edx, word [ebp - 0x1c]
add edx, ecx
mov word [ebp - 0x1c], dx
movzx eax, byte [ebp - 0x126]
add eax, 2
sub eax, dword [ebp - 0x1a4]
mov dword [ebp - 0xc0], eax
mov dword [ebp - 0x1a4], 0x44
mov cl, byte [ebp - 0xa8]
mov byte [ebp - 0xd4], cl
mov edx, dword [ebp - 0x1a8]
mov dword [ebp - 0x88], edx
mov dword [ebp - 0x1a4], 0x60
cmp dword [section..data], 0x2b
jle 0x401cd7
movzx eax, word [ebp - 0x258]
xor eax, 0x62
or eax, dword [ebp - 0x264]
mov dword [ebp - 0xf8], eax
movzx ecx, word [ebp - 0x1c]
mov dword [ebp - 0x1c0], ecx
movzx esi, word [ebp - 0xb8]
and esi, 0x32
push 0x63
call dword [sym.imp.USER32.dll_IsWindowVisible]
and esi, eax
movzx edx, word [ebp - 0xb8]
xor esi, edx
mov word [ebp - 0x25c], si
movzx eax, word [ebp - 0xf0]
add eax, 0x3d
movzx ecx, byte [ebp - 0xa]
sub eax, ecx
add eax, 0x39
mov word [ebp - 0x1a0], ax
mov dword [ebp - 0xa0], 0
mov edx, dword [ebp - 0xa8]
push edx
call fcn.00401350
add esp, 4
add eax, dword [ebp - 0x18]
xor eax, 0x5a
xor eax, dword [ebp - 0xcc]
mov word [ebp - 0x20], ax
mov eax, dword [ebp - 0xd4]
push eax
call fcn.00401270
sub esp, 0xfffffffc
mov dword [ebp - 0x278], eax
mov ecx, 0x1f
sub ecx, dword [ebp - 0x264]
movzx edx, word [ebp - 0x1c]
lea eax, [ecx + edx + 0x4f]
movzx ecx, byte [ebp - 0x115]
and eax, ecx
mov byte [ebp - 0xb], al
movzx edx, word [ebp - 0x258]
mov ebx, 0x26
sub ebx, edx
movzx eax, word [ebp - 0xc4]
add ebx, eax
mov ecx, dword [ebp - 0x1a8]
push ecx
mov edx, dword [ebp - 0xcc]
push edx
mov eax, dword [ebp - 0x264]
push eax
mov ecx, dword [ebp - 0x27c]
push ecx
call fcn.00402cc0
add esp, 0x10
and ebx, eax
or ebx, dword [ebp - 8]
mov byte [ebp - 0x271], bl
mov edx, dword [ebp - 0x1a4]
or edx, 0x24
mov dword [ebp - 0x278], edx
mov eax, dword [ebp - 0x1c0]
push eax
mov ecx, dword [ebp - 0xcc]
push ecx
mov edx, dword [ebp - 0x1a8]
push edx
mov eax, dword [ebp - 0xcc]
push eax
mov ecx, dword [ebp - 0x264]
push ecx
mov edx, dword [ebp - 0x278]
push edx
call fcn.00402530
add esp, 0x18
add eax, dword [ebp - 0x264]
movzx ecx, byte [ebp - 0x125]
sub eax, ecx
sub eax, 0x57
movzx edx, word [ebp - 0xf0]
sub eax, edx
mov byte [ebp - 0x22], al
movzx eax, byte [ebp - 0x22]
add eax, 0x3e
sub eax, dword [ebp - 0xb4]
sub eax, dword [ebp - 0xcc]
add eax, dword [ebp - 0x1cc]
mov byte [ebp - 0x1b9], al
mov ecx, 0x57
mov word [ebp - 0x1b8], cx
movzx edx, byte [ebp - 0x115]
add edx, 0x40
sub edx, dword [ebp - 0xa4]
mov dword [ebp - 0x1cc], edx
movzx eax, byte [ebp - 0x126]
sub eax, dword [ebp - 0x264]
mov dword [ebp - 0x260], eax
movzx ecx, word [ebp - 0x1a0]
mov edx, 1
sub edx, dword [ebp - 0x264]
xor ecx, edx
mov dword [ebp - 0x120], ecx
mov eax, 0x1f
sub eax, dword [ebp - 0x264]
add eax, dword [ebp - 0x1cc]
mov dword [ebp - 0xf8], eax
cmp dword [ebp - 0x100], 0x10
jne 0x401f3d
mov dword [ebp - 0x23c], 3
mov ecx, dword [ebp - 0xb4]
mov dword [ebp - 0x264], ecx
mov edx, dword [ebp - 0xa0]
mov al, byte [edx*2 + 0x40d070]
mov byte [ebp - 0x117], al
movzx ecx, word [ebp - 0x1c]
mov edx, 0x3f
sub edx, ecx
xor edx, 0xffffffdb
mov byte [ebp - 0xf1], dl
movzx eax, byte [ebp - 9]
add eax, dword [ebp - 0xd0]
mov ecx, dword [ebp - 0x254]
lea edx, [eax + ecx + 0x54]
mov word [ebp - 0x1a0], dx
movzx eax, byte [ebp - 0xa]
add eax, dword [ebp - 0x1a8]
mov dword [ebp - 0x1c0], eax
mov ecx, dword [ebp - 0x120]
add ecx, dword [ebp - 0xa8]
mov dword [ebp - 0xcc], ecx
movzx edx, byte [ebp - 0x21]
mov eax, 0x61
sub eax, edx
mov dword [0x40d058], eax
mov dword [ebp - 0x27c], 0x3e
push 0x12
call dword [sym.imp.USER32.dll_VkKeyScanW]
sub eax, 0xf
sub eax, dword [ebp - 0x1a4]
sub eax, dword [ebp - 0x94]
mov word [ebp - 0x1b8], ax
mov ecx, dword [ebp - 0x1c0]
add ecx, 0xc
mov dword [ebp - 0x1a4], ecx
mov edx, dword [ebp - 0x264]
sub edx, 0x5c
mov dword [ebp - 0x254], edx
mov eax, 0xc
sub eax, dword [ebp - 0x18]
movzx ecx, byte [ebp - 0x126]
add eax, ecx
mov word [ebp - 0x114], ax
mov edx, dword [ebp - 0x27c]
xor edx, 0x36
mov dword [ebp - 0xcc], edx
mov dword [0x40d040], 0x3a
movzx eax, byte [ebp - 0x278]
mov dword [ebp - 0x278], eax
mov dword [ebp - 0x80], 0xd
mov ecx, 0x11
sub ecx, dword [ebp - 0xd0]
mov dword [ebp - 0xb4], ecx
mov dword [ebp - 0x74], 0x1c
mov edx, dword [ebp - 0x264]
add edx, 1
movzx eax, word [ebp - 0x1c]
add eax, dword [ebp - 0x27c]
and edx, eax
mov word [ebp - 0x1a0], dx
mov ecx, dword [ebp - 0xa0]
add ecx, 1
xor ecx, dword [0x40d06c]
mov edx, dword [ebp - 0xa0]
add edx, 1
sub edx, dword [0x40d06c]
xor ecx, edx
movsx eax, byte [ebp - 0x117]
add ecx, eax
mov edx, dword [ebp - 0x1ac]
add edx, dword [ebp - 0xa0]
mov byte [edx], cl
mov eax, dword [ebp - 0xd0]
add eax, 0x37
movzx ecx, byte [ebp - 0x126]
sub eax, ecx
sub eax, dword [ebp - 0xcc]
add eax, dword [ebp - 0x278]
mov byte [ebp - 0x99], al
mov dword [ebp - 0x290], 0
jmp 0x402068
mov edx, dword [ebp - 0x290]
add edx, 1
mov dword [ebp - 0x290], edx
cmp dword [ebp - 0x290], 0xd
jge 0x4020a1
mov eax, 0x7a
mov word [ebp - 0x98], ax
mov ecx, dword [ebp - 0x260]
mov dword [ebp - 0x278], ecx
mov edx, 0x3a
mov word [ebp - 0xd4], dx
mov dword [ebp - 0x224], 0xe
jmp 0x402059
movzx eax, byte [ebp - 9]
movzx ecx, word [ebp - 0x1c]
lea edx, [eax + ecx + 3]
movzx eax, word [ebp - 0x114]
and eax, edx
mov word [ebp - 0x114], ax
mov ecx, dword [ebp - 0xa0]
add ecx, 1
mov dword [ebp - 0xa0], ecx
movzx edx, word [ebp - 0x1a0]
mov eax, dword [ebp - 0x264]
lea ecx, [eax + edx + 0x21]
mov dword [ebp - 0xb4], ecx
mov edx, dword [ebp - 0xa8]
mov dword [ebp - 0x50], edx
mov eax, dword [ebp - 0xb4]
add eax, 0x35
mov dword [ebp - 0xa8], eax
mov dword [ebp - 0x4c], 0x5b
movzx esi, byte [ebp - 0x99]
mov ecx, dword [ebp - 0x1c0]
push ecx
mov edx, dword [ebp - 0x1a8]
push edx
mov eax, dword [ebp - 0x1a4]
push eax
mov ecx, dword [ebp - 0xd0]
push ecx
call fcn.00402cc0
add esp, 0x10
lea edx, [esi + eax + 0x33]
sub edx, dword [ebp - 0x260]
mov byte [ebp - 0x1cd], dl
mov eax, dword [ebp - 0xa0]
cmp eax, dword [0x40d068]
jne 0x401d72
mov ecx, dword [ebp - 0xcc]
and ecx, 0x31
mov dword [ebp - 0x278], ecx
mov edx, dword [ebp - 0x1a4]
sub edx, 0x25
xor edx, dword [ebp - 0x264]
mov dword [ebp - 0xf8], edx
mov dword [ebp - 0x27c], 0x60
mov dword [ebp - 0x294], 0
jmp 0x402198
mov eax, dword [ebp - 0x294]
add eax, 1
mov dword [ebp - 0x294], eax
cmp dword [ebp - 0x294], 0xc
jge 0x402220
movzx ecx, word [ebp - 0x1a0]
sub ecx, dword [ebp - 0x260]
add ecx, dword [ebp - 0xa8]
sub ecx, dword [ebp - 0xb4]
add ecx, dword [ebp - 0x278]
mov byte [ebp - 0x115], cl
movzx edx, byte [ebp - 0x99]
sub edx, dword [ebp - 8]
mov dword [ebp - 0x1a4], edx
mov eax, dword [ebp - 0x1a8]
add eax, 0x10
mov dword [ebp - 0x264], eax
movzx ecx, byte [ebp - 9]
add ecx, 0xa
movzx edx, word [ebp - 0x20]
sub ecx, edx
add ecx, 0x23
mov byte [ebp - 0xb], cl
movzx eax, word [ebp - 0x24c]
mov ecx, 0xfffffff6
sub ecx, eax
movzx edx, word [ebp - 0x20]
imul edx, ecx
mov word [ebp - 0x20], dx
movzx eax, word [ebp - 0x1c]
mov dword [ebp - 0xcc], eax
jmp 0x402189
movzx ecx, word [ebp - 0xdc]
movzx edx, word [ebp - 0x1c]
or edx, ecx
mov word [ebp - 0x1c], dx
movzx eax, byte [ebp - 9]
mov dword [ebp - 0xa8], eax
movzx ecx, byte [ebp - 0xf9]
mov edx, 0x25
sub edx, ecx
sub edx, 0x2f
mov dword [ebp - 0xe4], edx
movzx eax, word [ebp - 0x27c]
mov dword [ebp - 0xcc], eax
movzx ecx, byte [ebp - 0x278]
mov dword [ebp - 0x27c], ecx
mov dword [ebp - 0x1e0], 0x17
mov edx, 0x69
sub edx, dword [ebp - 0x1b4]
sub edx, 0x13
mov byte [ebp - 0x125], dl
mov dword [ebp - 0x80], 0x53
mov eax, dword [ebp - 0x1a8]
mov dword [ebp - 0x264], eax
jmp 0x4022ba
mov eax, ebx
jmp 0x4022ad
call ecx
mov edx, 0x10
push ebx
mov ecx, dword [ebp - 0x1ac]
jmp 0x4022a6
mov ebx, dword [ebp + 8]
jmp 0x40229f