Function at 0x41955a
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov eax, 0x453a39
call fcn.004534f4
sub esp, 0xfe8
push ebx
push esi
push edi
mov dword [ebp - 0x10], esp
and dword [ebp - 4], 0
mov dl, 0x17
mov dword [ebp - 0x158], 0x65725c17
mov dword [ebp - 0x154], 0x247b7279
push 0x25
pop ebx
mov byte [ebp - 0x150], bl
mov dword [ebp - 0x14f], 0x7b7b7339
mov byte [ebp - 0x14b], 0
xor ecx, ecx
mov dword [ebp - 0x36c], ecx
cmp ecx, 0xc
jae 0x4195d0
mov al, byte [ebp + ecx - 0x157]
xor al, dl
mov byte [ebp + ecx - 0x157], al
inc ecx
mov dword [ebp - 0x36c], ecx
mov dl, byte [ebp - 0x158]
jmp 0x4195ac
mov byte [ebp - 0x14b], 0
lea eax, [ebp - 0x157]
mov dword [ebp - 0x20], eax
cmp dword [0x45b608], 0
je 0x419871
mov dword [ebp - 0x210], 0xde1764ba
xor eax, eax
xor ecx, ecx
mov dword [ebp - 0x210], eax
mov dword [ebp - 0x370], ecx
cmp ecx, eax
jae 0x41961c
sub eax, 2
mov dword [ebp - 0x210], eax
and eax, 0x3ff
inc ecx
jmp 0x4195fb
mov dword [ebp - 0x60], 0x3d8
mov esi, dword [ebp - 0x60]
xor esi, 0x180
mov dword [ebp - 0x60], esi
mov dl, 0x54
mov dword [ebp - 0x199], 0x20311354
mov dword [ebp - 0x195], 0x3f373d00
mov dword [ebp - 0x191], 0x3a213b17
mov word [ebp - 0x18d], 0x20
xor ecx, ecx
mov dword [ebp - 0x374], ecx
cmp ecx, 0xc
jae 0x419684
mov al, byte [ebp + ecx - 0x198]
xor al, dl
mov byte [ebp + ecx - 0x198], al
inc ecx
mov dword [ebp - 0x374], ecx
mov dl, byte [ebp - 0x199]
jmp 0x419660
mov byte [ebp - 0x18c], 0
lea edx, [ebp - 0x198]
mov ecx, dword [ebp - 0x20]
call fcn.0040c457
call eax
mov edi, eax
mov dl, 5
mov dword [ebp - 0x9d], 0x60695605
mov word [ebp - 0x99], 0x7560
mov byte [ebp - 0x97], 0
xor ecx, ecx
mov dword [ebp - 0x378], ecx
cmp ecx, 5
jae 0x4196e5
mov al, byte [ebp + ecx - 0x9c]
xor al, dl
mov byte [ebp + ecx - 0x9c], al
inc ecx
mov dword [ebp - 0x378], ecx
mov dl, byte [ebp - 0x9d]
jmp 0x4196c1
mov byte [ebp - 0x97], 0
lea edx, [ebp - 0x9c]
mov ecx, dword [ebp - 0x20]
call fcn.0040c457
push esi
call eax
mov dl, 0x2e
mov dword [ebp - 0x1a7], 0x5a4b692e
mov dword [ebp - 0x1a3], 0x454d477a
mov dword [ebp - 0x19f], 0x405b416d
mov word [ebp - 0x19b], 0x5a
xor ecx, ecx
mov dword [ebp - 0x37c], ecx
cmp ecx, 0xc
jae 0x419752
mov al, byte [ebp + ecx - 0x1a6]
xor al, dl
mov byte [ebp + ecx - 0x1a6], al
inc ecx
mov dword [ebp - 0x37c], ecx
mov dl, byte [ebp - 0x1a7]
jmp 0x41972e
mov byte [ebp - 0x19a], 0
lea edx, [ebp - 0x1a6]
mov ecx, dword [ebp - 0x20]
call fcn.0040c457
call eax
sub eax, edi
mov dword [ebp - 0x218], eax
mov dword [ebp - 0x380], 0x3a7
mov ecx, dword [ebp - 0x380]
xor ecx, 0x4f
mov eax, dword [ebp - 0x60]
sub eax, ecx
cmp dword [ebp - 0x218], eax
ja 0x419871
movaps xmm0, xmmword [0x407d50]
movups xmmword [ebp - 0x51c], xmm0
movaps xmm0, xmmword [0x407930]
movups xmmword [ebp - 0x50c], xmm0
movaps xmm0, xmmword [0x407d60]
movups xmmword [ebp - 0x4fc], xmm0
movaps xmm0, xmmword [0x407650]
movups xmmword [ebp - 0x4ec], xmm0
mov dword [ebp - 0x4dc], 0x283e2024
mov word [ebp - 0x4d8], 0x2b21
mov byte [ebp - 0x4d6], 0
xor ecx, ecx
mov dword [ebp - 0x384], ecx
cmp ecx, 0x45
jae 0x41980b
mov al, byte [ebp + ecx - 0x51b]
xor al, byte [ebp - 0x51c]
mov byte [ebp + ecx - 0x51b], al
inc ecx
jmp 0x4197e9
mov byte [ebp - 0x4d6], 0
mov dl, 0x56
mov dword [ebp - 0x1dd], 0x763d3956
mov dword [ebp - 0x1d9], 0x32242335
mov byte [ebp - 0x1d5], 0x3f
mov byte [ebp - 0x1d4], bl
mov word [ebp - 0x1d3], 0x3e
xor ecx, ecx
mov dword [ebp - 0x388], ecx
cmp ecx, 0xa
jae 0x41986a
mov al, byte [ebp + ecx - 0x1dc]
xor al, dl
mov byte [ebp + ecx - 0x1dc], al
inc ecx
mov dword [ebp - 0x388], ecx
mov dl, byte [ebp - 0x1dd]
jmp 0x419846
mov byte [ebp - 0x1d2], 0
mov eax, dword [0x45b610]
test eax, eax
je 0x419883
cmp dword [eax], 0
je 0x41bced
mov eax, dword [0x45b638]
mov dword [ebp - 0x218], eax
mov dword [ebp - 0x38c], 0x20d
mov dword [ebp - 0x390], 0x145
mov ecx, dword [ebp - 0x38c]
xor ecx, 0x20c
add ecx, dword [ebp - 0x218]
mov eax, dword [ebp - 0x390]
xor eax, 0x14f
cmp ecx, eax
jne 0x41bced
mov ecx, 0x45b628
call fcn.0041421f
cmp eax, 0xdcfcbaed
jne 0x41bced
xor eax, eax
je 0x4198e1
mov eax, 0xfff616e8
push dword [eax + 0x4b85c724]
invalid
call 0x418efc
mov al, 0x24
mov dword [ebp - 0x1b5], 0x69764724
mov dword [ebp - 0x1b1], 0x51697865
mov dword [ebp - 0x1ad], 0x7c697879
mov word [ebp - 0x1a9], 0x45
xor ebx, ebx
mov edx, ebx
mov dword [ebp - 0x394], edx
cmp edx, 0xc
jae 0x41994d
movsx ecx, al
and ecx, 0x8000000f
jns 0x41992e
dec ecx
or ecx, 0xfffffff0
inc ecx
mov al, byte [ebp + edx - 0x1b4]
sub al, cl
mov byte [ebp + edx - 0x1b4], al
inc edx
mov dword [ebp - 0x394], edx
mov al, byte [ebp - 0x1b5]
jmp 0x419919
mov byte [ebp - 0x1a8], bl
lea edx, [ebp - 0x1b4]
mov ecx, dword [ebp - 0x20]
call fcn.0040c457
mov esi, eax
mov edx, 0x45aa10
lea ecx, [ebp - 0xba8]
call fcn.0040b656
lea ecx, [ebp - 0x211]
push ecx
push 8
push ebx
push eax
lea ecx, [ebp - 0xb00]
call fcn.0040c127
lea ecx, [ebp - 0xb00]
call fcn.0040bd83
push eax
push ebx
push ebx
call esi
mov esi, eax
mov dword [ebp - 0x60], esi
lea ecx, [ebp - 0xb00]
call fcn.0040bc59
lea ecx, [ebp - 0xba8]
call fcn.0040bc59
movaps xmm0, xmmword [0x407c30]
movups xmmword [ebp - 0x2ac], xmm0
mov dword [ebp - 0x29c], 0x4f585e51
mov byte [ebp - 0x298], bl
mov ecx, ebx
mov dword [ebp - 0x398], ecx
cmp ecx, 0x13
jae 0x4199f6
mov al, byte [ebp + ecx - 0x2ab]
xor al, byte [ebp - 0x2ac]
mov byte [ebp + ecx - 0x2ab], al
inc ecx
jmp 0x4199d4
mov byte [ebp - 0x298], bl
lea edx, [ebp - 0x2ab]
mov ecx, dword [ebp - 0x20]
call fcn.0040c457
push ebx
push esi
call eax
test eax, eax
jne 0x41bced
mov dword [ebp - 0x39c], 0x6d4
mov esi, dword [ebp - 0x39c]
xor esi, 0x684
movaps xmm0, xmmword [0x407600]
movups xmmword [ebp - 0x282], xmm0
mov dword [ebp - 0x272], 0x232f2379
mov byte [ebp - 0x26e], bl
mov ecx, ebx
mov dword [ebp - 0x3a0], ecx
cmp ecx, 0x13
jae 0x419a6e
mov al, byte [ebp + ecx - 0x281]
xor al, byte [ebp - 0x282]
mov byte [ebp + ecx - 0x281], al
inc ecx
jmp 0x419a4c
mov byte [ebp - 0x26e], bl
lea eax, [ebp - 0x281]
push eax
lea ecx, [ebp - 0x680]
call fcn.0040bc98
movaps xmm0, xmmword [0x407f90]
movups xmmword [ebp - 0x3ea], xmm0
mov dword [ebp - 0x3da], 0x373b37
mov ecx, ebx
mov dword [ebp - 0x3a4], ecx
cmp ecx, 0x12
jae 0x419ac2
mov al, byte [ebp + ecx - 0x3e9]
xor al, byte [ebp - 0x3ea]
mov byte [ebp + ecx - 0x3e9], al
inc ecx
jmp 0x419aa0
mov byte [ebp - 0x3d7], bl
lea eax, [ebp - 0x3e9]
push eax
lea ecx, [ebp - 0x668]
call fcn.0040bc98
mov dl, 0x4c
mov dword [ebp - 0x1c3], 0x2a231f4c
mov dword [ebp - 0x1bf], 0x3e2d3b38
mov dword [ebp - 0x1bb], 0x34386229
mov word [ebp - 0x1b7], 0x38
mov ecx, ebx
mov dword [ebp - 0x3a8], ecx
cmp ecx, 0xc
jae 0x419b2f
mov al, byte [ebp + ecx - 0x1c2]
xor al, dl
mov byte [ebp + ecx - 0x1c2], al
inc ecx
mov dword [ebp - 0x3a8], ecx
mov dl, byte [ebp - 0x1c3]
jmp 0x419b0b
mov byte [ebp - 0x1b6], bl
lea eax, [ebp - 0x1c2]
push eax
lea ecx, [ebp - 0x650]
call fcn.0040bc98
mov al, 0x41
mov dword [ebp - 0xce], 0x6d625841
mov dword [ebp - 0xca], 0x7475666d
mov byte [ebp - 0xc6], bl
mov edx, ebx
mov dword [ebp - 0x3ac], edx
push 7
pop edi
cmp edx, edi
jae 0x419ba1
movsx ecx, al
and ecx, 0x8000000f
jns 0x419b82
dec ecx
or ecx, 0xfffffff0
inc ecx
mov al, byte [ebp + edx - 0xcd]
sub al, cl
mov byte [ebp + edx - 0xcd], al
inc edx
mov dword [ebp - 0x3ac], edx
mov al, byte [ebp - 0xce]
jmp 0x419b6e
mov byte [ebp - 0xc6], bl
lea eax, [ebp - 0xcd]
push eax
lea ecx, [ebp - 0x638]
call fcn.0040bc98
mov dl, 0x3e
mov dword [ebp - 0x81], 0x47556d3e
mov word [ebp - 0x7d], 0x5b4e
mov byte [ebp - 0x7b], bl
mov ecx, ebx
mov dword [ebp - 0x3b0], ecx
cmp ecx, 5
jae 0x419bf4
mov al, byte [ebp + ecx - 0x80]
xor al, dl
mov byte [ebp + ecx - 0x80], al
inc ecx
mov dword [ebp - 0x3b0], ecx
mov dl, byte [ebp - 0x81]
jmp 0x419bd6
mov byte [ebp - 0x7b], bl
lea eax, [ebp - 0x80]
push eax
lea ecx, [ebp - 0x620]
call fcn.0040bc98
mov al, 0x12
mov dword [ebp - 0xd7], 0x756b4a12
mov dword [ebp - 0xd3], 0x7b747176
mov byte [ebp - 0xcf], bl
mov edx, ebx
mov dword [ebp - 0x3b4], edx
cmp edx, edi
jae 0x419c5d
movsx ecx, al
and ecx, 0x8000000f
jns 0x419c3e
dec ecx
or ecx, 0xfffffff0
inc ecx
mov al, byte [ebp + edx - 0xd6]
sub al, cl
mov byte [ebp + edx - 0xd6], al
inc edx
mov dword [ebp - 0x3b4], edx
mov al, byte [ebp - 0xd7]
jmp 0x419c2a
mov byte [ebp - 0xcf], bl
lea eax, [ebp - 0xd6]
push eax
lea ecx, [ebp - 0x608]
call fcn.0040bc98
movaps xmm0, xmmword [0x4082c0]
movups xmmword [ebp - 0x42b], xmm0
mov word [ebp - 0x41b], 0x777b
mov byte [ebp - 0x419], bl
mov edx, ebx
mov dword [ebp - 0x3b8], edx
cmp edx, 0x11
jae 0x419cc6
movsx ecx, byte [ebp - 0x42b]
and ecx, 0x8000000f
jns 0x419cb3
dec ecx
or ecx, 0xfffffff0
inc ecx
mov al, byte [ebp + edx - 0x42a]
sub al, cl
mov byte [ebp + edx - 0x42a], al
inc edx
jmp 0x419c94
mov byte [ebp - 0x419], bl
lea eax, [ebp - 0x42a]
push eax
lea ecx, [ebp - 0x5f0]
call fcn.0040bc98
movaps xmm0, xmmword [0x408640]
movups xmmword [ebp - 0x43e], xmm0
mov word [ebp - 0x42e], 0x7f83
mov byte [ebp - 0x42c], bl
mov edx, ebx
mov dword [ebp - 0x3bc], edx
cmp edx, 0x11
jae 0x419d2f
movsx ecx, byte [ebp - 0x43e]
and ecx, 0x8000000f
jns 0x419d1c
dec ecx
or ecx, 0xfffffff0
inc ecx
mov al, byte [ebp + edx - 0x43d]
sub al, cl
mov byte [ebp + edx - 0x43d], al
inc edx
jmp 0x419cfd
mov byte [ebp - 0x42c], bl
lea eax, [ebp - 0x43d]
push eax
lea ecx, [ebp - 0xb60]
call fcn.0040bc98
movaps xmm0, xmmword [0x4075d0]
movups xmmword [ebp - 0x451], xmm0
mov word [ebp - 0x441], 0x222e
mov byte [ebp - 0x43f], bl
mov ecx, ebx
mov dword [ebp - 0x368], ecx
cmp ecx, 0x11
jae 0x419d88
mov al, byte [ebp + ecx - 0x450]
xor al, byte [ebp - 0x451]
mov byte [ebp + ecx - 0x450], al
inc ecx
jmp 0x419d66
mov byte [ebp - 0x43f], bl
lea eax, [ebp - 0x450]
push eax
lea ecx, [ebp - 0xb48]
call fcn.0040bc98
mov al, 0x19
mov dword [ebp - 0xe0], 0x78784c19
mov dword [ebp - 0xdc], 0x7c6e7274
mov byte [ebp - 0xd8], bl
mov edx, ebx
mov dword [ebp - 0x3c0], edx
cmp edx, edi
jae 0x419df7
movsx ecx, al
and ecx, 0x8000000f
jns 0x419dd8
dec ecx
or ecx, 0xfffffff0
inc ecx
mov al, byte [ebp + edx - 0xdf]
sub al, cl
mov byte [ebp + edx - 0xdf], al
inc edx
mov dword [ebp - 0x3c0], edx
mov al, byte [ebp - 0xe0]
jmp 0x419dc4
mov byte [ebp - 0xd8], bl
lea eax, [ebp - 0xdf]
push eax
lea ecx, [ebp - 0xb30]
call fcn.0040bc98
movaps xmm0, xmmword [0x408200]
movups xmmword [ebp - 0x257], xmm0
mov dword [ebp - 0x247], 0x76307566
mov word [ebp - 0x243], 0x767a
mov byte [ebp - 0x241], bl
mov edx, ebx
mov dword [ebp - 0x3c4], edx
cmp edx, 0x15
jae 0x419e6a
movsx ecx, byte [ebp - 0x257]
and ecx, 0x8000000f
jns 0x419e57
dec ecx
or ecx, 0xfffffff0
inc ecx
mov al, byte [ebp + edx - 0x256]
sub al, cl
mov byte [ebp + edx - 0x256], al
inc edx
jmp 0x419e38
mov byte [ebp - 0x241], bl
lea eax, [ebp - 0x256]
push eax
lea ecx, [ebp - 0xb18]
call fcn.0040bc98
push esi
lea eax, [ebp - 0x680]
push eax
lea eax, [ebp - 0x668]
push eax
lea eax, [ebp - 0x650]
push eax
lea eax, [ebp - 0x638]
push eax
lea eax, [ebp - 0x620]
push eax
lea eax, [ebp - 0x608]
push eax
lea eax, [ebp - 0x5f0]
push eax
lea eax, [ebp - 0xb60]
push eax
lea eax, [ebp - 0xb48]
push eax
lea eax, [ebp - 0xb30]
push eax
lea eax, [ebp - 0xb18]
push eax
lea ecx, [ebp - 0xff4]
call fcn.0041862e
lea ecx, [ebp - 0xb18]
call fcn.0040bc59
lea ecx, [ebp - 0xb30]
call fcn.0040bc59
lea ecx, [ebp - 0xb48]
call fcn.0040bc59
lea ecx, [ebp - 0xb60]
call fcn.0040bc59
lea ecx, [ebp - 0x5f0]
call fcn.0040bc59
lea ecx, [ebp - 0x608]
call fcn.0040bc59
lea ecx, [ebp - 0x620]
call fcn.0040bc59
lea ecx, [ebp - 0x638]
call fcn.0040bc59
lea ecx, [ebp - 0x650]
call fcn.0040bc59
lea ecx, [ebp - 0x668]
call fcn.0040bc59
lea ecx, [ebp - 0x680]
call fcn.0040bc59
lea ecx, [ebp - 0xff4]
call fcn.00427d76
mov dl, 0x12
mov dword [ebp - 0x1ec], 0x7b627312
mov dword [ebp - 0x1e8], 0x777a713d
mov dword [ebp - 0x1e4], 0x753c7971
mov word [ebp - 0x1e0], 0x6677
mov byte [ebp - 0x1de], bl
mov ecx, ebx
mov dword [ebp - 0x404], ecx
cmp ecx, 0xd
jae 0x419fba
mov al, byte [ebp + ecx - 0x1eb]
xor al, dl
mov byte [ebp + ecx - 0x1eb], al
inc ecx
mov dword [ebp - 0x404], ecx
mov dl, byte [ebp - 0x1ec]
jmp 0x419f96
mov byte [ebp - 0x1de], bl
lea eax, [ebp - 0x1eb]
push eax
lea ecx, [ebp - 0x698]
call fcn.0040bc98
lea eax, [ebp - 0x698]
push eax
push 0x45b628
lea eax, [ebp - 0x4a0]
push eax
lea ecx, [ebp - 0xff4]
call fcn.0043b601
lea ecx, [ebp - 0x698]
call fcn.0040bc59
cmp byte [ebp - 0x49f], bl
je 0x41a037
mov ecx, 0x45b615
call fcn.004183b7
test al, al
je 0x41a037
lea ecx, [ebp - 0x480]
call fcn.0040bc59
lea ecx, [ebp - 0x490]
call fcn.0041bf96
lea ecx, [ebp - 0xff4]
call fcn.0041bd07
jmp 0x41bced
mov dl, 0x38
mov dword [ebp - 0xe9], 0x4a577638
mov dword [ebp - 0xe5], 0x76686e5c
mov byte [ebp - 0xe1], bl
mov ecx, ebx
mov dword [ebp - 0x408], ecx
cmp ecx, edi
jae 0x41a07e
mov al, byte [ebp + ecx - 0xe8]
xor al, dl
mov byte [ebp + ecx - 0xe8], al
inc ecx
mov dword [ebp - 0x408], ecx
mov dl, byte [ebp - 0xe9]
jmp 0x41a05b
mov byte [ebp - 0xe1], bl
lea eax, [ebp - 0xe8]
push eax
lea ecx, [ebp - 0x6b0]
call fcn.0040bc98
lea eax, [ebp - 0x6b0]
push eax
lea ecx, [ebp - 0xff4]
call fcn.004248a4
lea ecx, [ebp - 0x6b0]
call fcn.0040bc59
mov dl, 0x61
mov dword [ebp - 0xb4], 0x3002b61
mov dword [ebp - 0xb0], 0x130403
mov ecx, ebx
mov dword [ebp - 0x40c], ecx
push 6
pop esi
cmp ecx, esi
jae 0x41a0f7
mov al, byte [ebp + ecx - 0xb3]
xor al, dl
mov byte [ebp + ecx - 0xb3], al
inc ecx
mov dword [ebp - 0x40c], ecx
mov dl, byte [ebp - 0xb4]
jmp 0x41a0d4
mov byte [ebp - 0xad], bl
lea eax, [ebp - 0xb3]
push eax
lea ecx, [ebp - 0x6c8]
call fcn.0040bc98
lea eax, [ebp - 0x6c8]
push eax
lea ecx, [ebp - 0xff4]
call fcn.004323e7
lea ecx, [ebp - 0x6c8]
call fcn.0040bc59
cmp byte [ebp - 0x49d], bl
je 0x41a1b0
mov dl, 0x5e
mov dword [ebp - 0x88], 0x3b2a0d5e
mov word [ebp - 0x84], 0x333f
mov byte [ebp - 0x82], bl
mov ecx, ebx
mov dword [ebp - 0x410], ecx
cmp ecx, 5
jae 0x41a17b
mov al, byte [ebp + ecx - 0x87]
xor al, dl
mov byte [ebp + ecx - 0x87], al
inc ecx
mov dword [ebp - 0x410], ecx
mov dl, byte [ebp - 0x88]
jmp 0x41a157
mov byte [ebp - 0x82], bl
lea eax, [ebp - 0x87]
push eax
lea ecx, [ebp - 0x6e0]
call fcn.0040bc98
lea eax, [ebp - 0x6e0]
push eax
lea ecx, [ebp - 0xff4]
call fcn.0042f8ef
lea ecx, [ebp - 0x6e0]
call fcn.0040bc59
mov dl, 0x30
mov dword [ebp - 0xbc], 0x5e596730
push 0x63
pop ebx
mov byte [ebp - 0xb8], bl
mov word [ebp - 0xb7], 0x6073
mov byte [ebp - 0xb5], 0
xor ecx, ecx
mov dword [ebp - 0x414], ecx
cmp ecx, esi
jae 0x41a200
mov al, byte [ebp + ecx - 0xbb]
xor al, dl
mov byte [ebp + ecx - 0xbb], al
inc ecx
mov dword [ebp - 0x414], ecx
mov dl, byte [ebp - 0xbc]
jmp 0x41a1dd
mov byte [ebp - 0xb5], 0
lea eax, [ebp - 0xbb]
push eax
lea ecx, [ebp - 0x6f8]
call fcn.0040bc98
lea eax, [ebp - 0x6f8]
push eax
lea ecx, [ebp - 0xff4]
call fcn.0042f194
lea ecx, [ebp - 0x6f8]
call fcn.0040bc59
mov dl, 0x7d
mov dword [ebp - 0xc5], 0x5123b7d
mov dword [ebp - 0xc1], 0x11141c10
mov byte [ebp - 0xbd], 0
xor ecx, ecx
mov dword [ebp - 0x418], ecx
cmp ecx, edi
jae 0x41a27e
mov al, byte [ebp + ecx - 0xc4]
xor al, dl
mov byte [ebp + ecx - 0xc4], al
inc ecx
mov dword [ebp - 0x418], ecx
mov dl, byte [ebp - 0xc5]
jmp 0x41a25b
mov byte [ebp - 0xbd], 0
lea eax, [ebp - 0xc4]
push eax
lea ecx, [ebp - 0x710]
call fcn.0040bc98
lea eax, [ebp - 0x710]
push eax
lea ecx, [ebp - 0xff4]
call fcn.0043151d
lea ecx, [ebp - 0x710]
call fcn.0040bc59
mov dl, 0x24
mov dword [ebp - 0xf2], 0x50516b24
mov dword [ebp - 0xee], 0x4f4b4b48
mov byte [ebp - 0xea], 0
xor ecx, ecx
mov dword [ebp - 0x2b0], ecx
cmp ecx, edi
jae 0x41a2fc
mov al, byte [ebp + ecx - 0xf1]
xor al, dl
mov byte [ebp + ecx - 0xf1], al
inc ecx
mov dword [ebp - 0x2b0], ecx
mov dl, byte [ebp - 0xf2]
jmp 0x41a2d9
mov byte [ebp - 0xea], 0
lea eax, [ebp - 0xf1]
push eax
lea ecx, [ebp - 0x728]
call fcn.0040bc98
lea eax, [ebp - 0x728]
push eax
lea ecx, [ebp - 0xff4]
call fcn.00431279
lea ecx, [ebp - 0x728]
call fcn.0040bc59
cmp byte [ebp - 0x493], 0
je 0x41a3e3
mov al, 0x10
mov word [ebp - 0x132], 0x5410
push 0x65
pop ecx
mov byte [ebp - 0x130], cl
mov byte [ebp - 0x12f], 0x6c
mov byte [ebp - 0x12e], cl
mov dword [ebp - 0x12d], 0x6d617267
mov byte [ebp - 0x129], 0
xor edx, edx
mov dword [ebp - 0x2b4], edx
cmp edx, 8
jae 0x41a3ad
movsx ecx, al
and ecx, 0x8000000f
jns 0x41a38e
dec ecx
or ecx, 0xfffffff0
inc ecx
mov al, byte [ebp + edx - 0x131]
sub al, cl
mov byte [ebp + edx - 0x131], al
inc edx
mov dword [ebp - 0x2b4], edx
mov al, byte [ebp - 0x132]
jmp 0x41a379
mov byte [ebp - 0x129], 0
lea eax, [ebp - 0x131]
push eax
lea ecx, [ebp - 0x740]
call fcn.0040bc98
lea eax, [ebp - 0x740]
push eax
lea ecx, [ebp - 0xff4]
call fcn.0042fd8c
lea ecx, [ebp - 0x740]
call fcn.0040bc59
mov dl, 0x4b
mov dword [ebp - 0x7a], 0x27220d4b
mov word [ebp - 0x76], 0x382e
mov byte [ebp - 0x74], 0
xor ecx, ecx
mov dword [ebp - 0x2b8], ecx
cmp ecx, 5
jae 0x41a419
mov al, byte [ebp + ecx - 0x79]
xor al, dl
mov byte [ebp + ecx - 0x79], al
inc ecx
mov dword [ebp - 0x2b8], ecx
mov dl, byte [ebp - 0x7a]
jmp 0x41a3fe
mov byte [ebp - 0x74], 0
lea eax, [ebp - 0x79]
push eax
lea ecx, [ebp - 0x758]
call fcn.0040bc98
lea eax, [ebp - 0x758]
push eax
lea ecx, [ebp - 0xff4]
call fcn.0042f0b5
lea ecx, [ebp - 0x758]
call fcn.0040bc59
mov dl, 0x1e
mov dword [ebp - 0xac], 0x7077491e
mov dword [ebp - 0xa8], 0x4e4a58
xor ecx, ecx
mov dword [ebp - 0x2bc], ecx
cmp ecx, esi
jae 0x41a48a
mov al, byte [ebp + ecx - 0xab]
xor al, dl
mov byte [ebp + ecx - 0xab], al
inc ecx
mov dword [ebp - 0x2bc], ecx
mov dl, byte [ebp - 0xac]
jmp 0x41a467
mov byte [ebp - 0xa5], 0
lea eax, [ebp - 0xab]
push eax
lea ecx, [ebp - 0x770]
call fcn.0040bc98
lea eax, [ebp - 0x770]
push eax
lea ecx, [ebp - 0xff4]
call fcn.004307d8
lea ecx, [ebp - 0x770]
call fcn.0040bc59
mov dl, 0x4b
mov word [ebp - 0xfb], 0xc4b
push 0x2e
pop eax
mov byte [ebp - 0xf9], al
mov byte [ebp - 0xf8], 0x25
mov byte [ebp - 0xf7], al
mov dword [ebp - 0xf6], 0x272a39
xor ecx, ecx
mov dword [ebp - 0x2c0], ecx
cmp ecx, edi
jae 0x41a516
mov al, byte [ebp + ecx - 0xfa]
xor al, dl
mov byte [ebp + ecx - 0xfa], al
inc ecx
mov dword [ebp - 0x2c0], ecx
mov dl, byte [ebp - 0xfb]
jmp 0x41a4f3
mov byte [ebp - 0xf3], 0
lea eax, [ebp - 0xfa]
push eax
lea ecx, [ebp - 0x788]
call fcn.0040bc98
lea eax, [ebp - 0x788]
push eax
lea ecx, [ebp - 0xc44]
call fcn.004439d9
lea ecx, [ebp - 0x788]
call fcn.0040bc59
mov al, 0x65
mov dword [ebp - 0x104], 0x74744865
mov dword [ebp - 0x100], 0x786a6e70
mov byte [ebp - 0xfc], 0
xor edx, edx
mov dword [ebp - 0x2c4], edx
cmp edx, edi
jae 0x41a5a4
movsx ecx, al
and ecx, 0x8000000f
jns 0x41a585
dec ecx
or ecx, 0xfffffff0
inc ecx
mov al, byte [ebp + edx - 0x103]
sub al, cl
mov byte [ebp + edx - 0x103], al
inc edx
mov dword [ebp - 0x2c4], edx
mov al, byte [ebp - 0x104]
jmp 0x41a571
mov byte [ebp - 0xfc], 0
lea eax, [ebp - 0x103]
push eax
lea ecx, [ebp - 0x7a0]
call fcn.0040bc98
lea eax, [ebp - 0x7a0]
push eax
lea ecx, [ebp - 0xc44]
call fcn.004439d9
lea ecx, [ebp - 0x7a0]
call fcn.0040bc59
cmp byte [ebp - 0x468], 0
je 0x41a661
mov dl, 0x7d
mov dword [ebp - 0x10d], 0xe14357d
mov dword [ebp - 0x109], 0x40f1209
mov byte [ebp - 0x105], 0
xor ecx, ecx
mov dword [ebp - 0x2c8], ecx
cmp ecx, edi
jae 0x41a62b
mov al, byte [ebp + ecx - 0x10c]
xor al, dl
mov byte [ebp + ecx - 0x10c], al
inc ecx
mov dword [ebp - 0x2c8], ecx
mov dl, byte [ebp - 0x10d]
jmp 0x41a608
mov byte [ebp - 0x105], 0
lea eax, [ebp - 0x10c]
push eax
lea ecx, [ebp - 0x7b8]
call fcn.0040bc98
lea eax, [ebp - 0x7b8]
push eax
lea ecx, [ebp - 0xc44]
call fcn.004439d9
lea ecx, [ebp - 0x7b8]
call fcn.0040bc59
mov al, 0xf
mov dword [ebp - 0x8f], 0x77835e0f
mov word [ebp - 0x8b], 0x8174
mov byte [ebp - 0x89], 0
xor edx, edx
mov dword [ebp - 0x2cc], edx
cmp edx, 5
jae 0x41a6b9
movsx ecx, al
and ecx, 0x8000000f
jns 0x41a69a
dec ecx
or ecx, 0xfffffff0
inc ecx
mov al, byte [ebp + edx - 0x8e]
sub al, cl
mov byte [ebp + edx - 0x8e], al
inc edx
mov dword [ebp - 0x2cc], edx
mov al, byte [ebp - 0x8f]
jmp 0x41a685
mov byte [ebp - 0x89], 0
lea eax, [ebp - 0x8e]
push eax
lea ecx, [ebp - 0x7d0]
call fcn.0040bc98
lea eax, [ebp - 0x7d0]
push eax
lea ecx, [ebp - 0xc44]
call fcn.004439d9
lea ecx, [ebp - 0x7d0]
call fcn.0040bc59
mov byte [ebp - 0x19], bl
mov word [ebp - 0x18], 0x5920
mov byte [ebp - 0x16], 0
xor ecx, ecx
mov dword [ebp - 0x2d0], ecx
cmp ecx, 2
jae 0x41a71f
mov al, byte [ebp + ecx - 0x18]
xor al, bl
mov byte [ebp + ecx - 0x18], al
inc ecx
mov dword [ebp - 0x2d0], ecx
mov bl, byte [ebp - 0x19]
jmp 0x41a704
xor ebx, ebx
mov byte [ebp - 0x16], bl
lea eax, [ebp - 0x18]
push eax
lea ecx, [ebp - 0x534]
call fcn.0040bc98
mov dl, 0x4d
mov dword [ebp - 0x18b], 0x3e341e4d
mov dword [ebp - 0x187], 0x9202839
mov dword [ebp - 0x183], 0x283b243f
mov byte [ebp - 0x17f], bl
mov ecx, ebx
mov dword [ebp - 0x2d4], ecx
cmp ecx, 0xb
jae 0x41a785
mov al, byte [ebp + ecx - 0x18a]
xor al, dl
mov byte [ebp + ecx - 0x18a], al
inc ecx
mov dword [ebp - 0x2d4], ecx
mov dl, byte [ebp - 0x18b]
jmp 0x41a761
mov byte [ebp - 0x17f], bl
lea eax, [ebp - 0x18a]
push eax
call fcn.004494dd
pop ecx
test eax, eax
je 0x41a838
mov al, 0x42
mov dword [ebp - 0x171], 0x757b5542
mov dword [ebp - 0x16d], 0x466f6776
mov dword [ebp - 0x169], 0x67786b74
mov byte [ebp - 0x165], bl
mov edx, ebx
mov dword [ebp - 0x2d8], edx
cmp edx, 0xb
jae 0x41a802
movsx ecx, al
and ecx, 0x8000000f
jns 0x41a7e3
dec ecx
or ecx, 0xfffffff0
inc ecx
mov al, byte [ebp + edx - 0x170]
sub al, cl
mov byte [ebp + edx - 0x170], al
inc edx
mov dword [ebp - 0x2d8], edx
mov al, byte [ebp - 0x171]
jmp 0x41a7ce
mov byte [ebp - 0x165], bl
lea eax, [ebp - 0x170]
push eax
call fcn.004494dd
pop ecx
push eax
lea ecx, [ebp - 0xbc0]
call fcn.0040bc98
push eax
lea ecx, [ebp - 0x534]
call fcn.0040cac9
lea ecx, [ebp - 0xbc0]
call fcn.0040bc59
mov al, 0x53
mov dword [ebp - 0x6c], 0x76585f53
mov dword [ebp - 0x68], 0x767568
mov edx, ebx
mov dword [ebp - 0x2dc], edx
cmp edx, esi
jae 0x41a87a
movsx ecx, al
and ecx, 0x8000000f
jns 0x41a864
dec ecx
or ecx, 0xfffffff0
inc ecx
mov al, byte [ebp + edx - 0x6b]
sub al, cl
mov byte [ebp + edx - 0x6b], al
inc edx
mov dword [ebp - 0x2dc], edx
mov al, byte [ebp - 0x6c]
jmp 0x41a850
mov byte [ebp - 0x65], bl
lea ecx, [ebp - 0x6b]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x41a883
sub ecx, edx
push ecx
lea eax, [ebp - 0x6b]
push eax
lea ecx, [ebp - 0x534]
call fcn.00412bce
push 1
lea eax, [ebp - 0x534]
push eax
lea ecx, [ebp - 0xff4]
call fcn.004231b5
lea ecx, [ebp - 0xff4]
call fcn.0042cf46
lea ecx, [ebp - 0xff4]
call fcn.0042d27e
cmp byte [ebp - 0x492], bl
je 0x41a8d9
lea ecx, [ebp - 0xff4]
call fcn.004241e6
movaps xmm0, xmmword [0x4077f0]
movups xmmword [ebp - 0x26d], xmm0
mov dword [ebp - 0x25d], 0x3e326832
mov word [ebp - 0x259], 0x32
mov ecx, ebx
mov dword [ebp - 0x2e0], ecx
cmp ecx, 0x14
jae 0x41a91e
mov al, byte [ebp + ecx - 0x26c]
xor al, byte [ebp - 0x26d]
mov byte [ebp + ecx - 0x26c], al
inc ecx
jmp 0x41a8fc
mov byte [ebp - 0x258], bl
lea eax, [ebp - 0x26c]
push eax
lea ecx, [ebp - 0x7e8]
call fcn.0040bc98
lea eax, [ebp - 0x7e8]
push eax
lea ecx, [ebp - 0xff4]
call fcn.00424800
lea ecx, [ebp - 0x7e8]
call fcn.0040bc59
mov al, 0x54
mov word [ebp - 0x116], 0x5b54
push 0x65
pop ebx
mov byte [ebp - 0x114], bl
mov dword [ebp - 0x113], 0x78697070
mov word [ebp - 0x10f], 0x77
xor edx, edx
mov dword [ebp - 0x2e4], edx
cmp edx, edi
jae 0x41a9b5
movsx ecx, al
and ecx, 0x8000000f
jns 0x41a996
dec ecx
or ecx, 0xfffffff0
inc ecx
mov al, byte [ebp + edx - 0x115]
sub al, cl
mov byte [ebp + edx - 0x115], al
inc edx
mov dword [ebp - 0x2e4], edx
mov al, byte [ebp - 0x116]
jmp 0x41a982
mov byte [ebp - 0x10e], 0
lea eax, [ebp - 0x115]
push eax
lea ecx, [ebp - 0x800]
call fcn.0040bc98
lea eax, [ebp - 0x800]
push eax
lea ecx, [ebp - 0xff4]
call fcn.0042d653
lea ecx, [ebp - 0x800]
call fcn.0040bc59
mov al, 0x2c
mov dword [ebp - 0x11f], 0x7f75502c
mov dword [ebp - 0x11b], 0x707e7b6f
mov byte [ebp - 0x117], 0
xor edx, edx
mov dword [ebp - 0x2e8], edx
cmp edx, edi
jae 0x41aa43
movsx ecx, al
and ecx, 0x8000000f
jns 0x41aa24
dec ecx
or ecx, 0xfffffff0
inc ecx
mov al, byte [ebp + edx - 0x11e]
sub al, cl
mov byte [ebp + edx - 0x11e], al
inc edx
mov dword [ebp - 0x2e8], edx
mov al, byte [ebp - 0x11f]
jmp 0x41aa10
mov byte [ebp - 0x117], 0
lea eax, [ebp - 0x11e]
push eax
lea ecx, [ebp - 0x818]
call fcn.0040bc98
lea eax, [ebp - 0x818]
push eax
lea ecx, [ebp - 0xff4]
call fcn.0043048e
lea ecx, [ebp - 0x818]
call fcn.0040bc59
mov al, 0x5c
mov dword [ebp - 0x96], 0x80814d5c
mov word [ebp - 0x92], 0x8574
mov byte [ebp - 0x90], 0
xor edx, edx
mov dword [ebp - 0x2ec], edx
cmp edx, 5
jae 0x41aad1
movsx ecx, al
and ecx, 0x8000000f
jns 0x41aab2
dec ecx
or ecx, 0xfffffff0
inc ecx
mov al, byte [ebp + edx - 0x95]
sub al, cl
mov byte [ebp + edx - 0x95], al
inc edx
mov dword [ebp - 0x2ec], edx
mov al, byte [ebp - 0x96]
jmp 0x41aa9d
mov byte [ebp - 0x90], 0
lea eax, [ebp - 0x95]
push eax
lea ecx, [ebp - 0x830]
call fcn.0040bc98
lea eax, [ebp - 0x830]
push eax
lea ecx, [ebp - 0xff4]
call fcn.00431062
lea ecx, [ebp - 0x830]
call fcn.0040bc59
cmp byte [ebp - 0x49c], 0
je 0x41ab1b
lea ecx, [ebp - 0xff4]
call fcn.0043a654
cmp byte [ebp - 0x4a0], 0
je 0x41abd8
push 0x73
pop ecx
mov al, cl
mov byte [ebp - 0x164], al
mov word [ebp - 0x163], 0x685a
mov byte [ebp - 0x161], bl
mov dword [ebp - 0x160], 0x31706466
mov byte [ebp - 0x15c], bl
mov byte [ebp - 0x15b], 0x70
mov byte [ebp - 0x15a], cl
mov byte [ebp - 0x159], 0
xor edx, edx
mov dword [ebp - 0x2f0], edx
cmp edx, 0xa
jae 0x41aba2
movsx ecx, al
and ecx, 0x8000000f
jns 0x41ab83
dec ecx
or ecx, 0xfffffff0
inc ecx
mov al, byte [ebp + edx - 0x163]
sub al, cl
mov byte [ebp + edx - 0x163], al
inc edx
mov dword [ebp - 0x2f0], edx
mov al, byte [ebp - 0x164]
jmp 0x41ab6e
mov byte [ebp - 0x159], 0
lea eax, [ebp - 0x163]
push eax
lea ecx, [ebp - 0x848]
call fcn.0040bc98
lea eax, [ebp - 0x848]
push eax
lea ecx, [ebp - 0xff4]
call fcn.0043a7c2
lea ecx, [ebp - 0x848]
call fcn.0040bc59
mov al, 0x18
mov dword [ebp - 0x14a], 0x7c694a18
mov dword [ebp - 0x146], 0x566d747c
mov word [ebp - 0x142], 0x7c6d
mov byte [ebp - 0x140], 0
xor edx, edx
mov dword [ebp - 0x2f4], edx
cmp edx, 9
jae 0x41ac3a
movsx ecx, al
and ecx, 0x8000000f
jns 0x41ac1b
dec ecx
or ecx, 0xfffffff0
inc ecx
mov al, byte [ebp + edx - 0x149]
sub al, cl
mov byte [ebp + edx - 0x149], al
inc edx
mov dword [ebp - 0x2f4], edx
mov al, byte [ebp - 0x14a]
jmp 0x41ac06
mov byte [ebp - 0x140], 0
lea eax, [ebp - 0x149]
push eax
lea ecx, [ebp - 0x860]
call fcn.0040bc98
lea eax, [ebp - 0x860]
push eax
lea ecx, [ebp - 0xff4]
call fcn.0043290e
lea ecx, [ebp - 0x860]
call fcn.0040bc59
mov byte [ebp - 0x25], bl
mov dword [ebp - 0x24], 0x7a7854
xor edx, edx
mov dword [ebp - 0x2f8], edx
cmp edx, 3
jae 0x41acad
movsx ecx, bl
and ecx, 0x8000000f
jns 0x41ac97
dec ecx
or ecx, 0xfffffff0
inc ecx
mov al, byte [ebp + edx - 0x24]
sub al, cl
mov byte [ebp + edx - 0x24], al
inc edx
mov dword [ebp - 0x2f8], edx
mov bl, byte [ebp - 0x25]
jmp 0x41ac82
xor ebx, ebx
mov byte [ebp - 0x21], bl
lea eax, [ebp - 0x24]
push eax
lea ecx, [ebp - 0x878]
call fcn.0040bc98
lea eax, [ebp - 0x878]
push eax
lea ecx, [ebp - 0xff4]
call fcn.00430edc
lea ecx, [ebp - 0x878]
call fcn.0040bc59
movaps xmm0, xmmword [0x408620]
movups xmmword [ebp - 0x462], xmm0
mov byte [ebp - 0x452], bl
mov edx, ebx
mov dword [ebp - 0x2fc], edx
cmp edx, 0xf
jae 0x41ad26
movsx ecx, byte [ebp - 0x462]
and ecx, 0x8000000f
jns 0x41ad13
dec ecx
or ecx, 0xfffffff0
inc ecx
mov al, byte [ebp + edx - 0x461]
sub al, cl
mov byte [ebp + edx - 0x461], al
inc edx
jmp 0x41acf4
mov byte [ebp - 0x452], bl
lea eax, [ebp - 0x461]
push eax
lea ecx, [ebp - 0x890]
call fcn.0040bc98
push 0x7670
push 0x45aa10
lea eax, [ebp - 0x890]
push eax
lea ecx, [ebp - 0xff4]
call fcn.00433dfe
lea ecx, [ebp - 0x890]
call fcn.0040bc59
movaps xmm0, xmmword [0x407c10]
movups xmmword [ebp - 0x4d5], xmm0
movaps xmm0, xmmword [0x407bb0]
movups xmmword [ebp - 0x4c5], xmm0
movaps xmm0, xmmword [0x407c00]
movups xmmword [ebp - 0x4b5], xmm0
mov dword [ebp - 0x4a5], 0x46464b5e
mov byte [ebp - 0x4a1], bl
mov ecx, ebx
mov dword [ebp - 0x300], ecx
cmp ecx, 0x33
jae 0x41adc3
mov al, byte [ebp + ecx - 0x4d4]
xor al, byte [ebp - 0x4d5]
mov byte [ebp + ecx - 0x4d4], al
inc ecx
jmp 0x41ada1
mov byte [ebp - 0x4a1], bl
lea edi, [ebp - 0x4d4]
movaps xmm0, xmmword [0x4078a0]
movups xmmword [ebp - 0x5d5], xmm0
movaps xmm0, xmmword [0x407d30]
movups xmmword [ebp - 0x5c5], xmm0
movaps xmm0, xmmword [0x407c80]
movups xmmword [ebp - 0x5b5], xmm0
movaps xmm0, xmmword [0x4080e0]
movups xmmword [ebp - 0x5a5], xmm0
mov byte [ebp - 0x595], bl
mov edx, ebx
mov dword [ebp - 0x304], edx
cmp edx, 0x3f
jae 0x41ae41
movsx ecx, byte [ebp - 0x5d5]
and ecx, 0x8000000f
jns 0x41ae2e
dec ecx
or ecx, 0xfffffff0
inc ecx
mov al, byte [ebp + edx - 0x5d4]
sub al, cl
mov byte [ebp + edx - 0x5d4], al
inc edx
jmp 0x41ae0f
mov byte [ebp - 0x595], bl
lea eax, [ebp - 0x5d4]
push eax
lea ecx, [ebp - 0x8a8]
call fcn.0040bc98
mov esi, 0x80000002
push esi
lea eax, [ebp - 0x8a8]
push eax
lea ecx, [ebp - 0xff4]
call fcn.00432d7c
lea ecx, [ebp - 0x8a8]
call fcn.0040bc59
push edi
lea ecx, [ebp - 0x8c0]
call fcn.0040bc98
push esi
lea eax, [ebp - 0x8c0]
push eax
lea ecx, [ebp - 0xff4]
call fcn.00432d7c
lea ecx, [ebp - 0x8c0]
call fcn.0040bc59
push edi
lea ecx, [ebp - 0x8d8]
call fcn.0040bc98
push 0x80000001
lea eax, [ebp - 0x8d8]
push eax
lea ecx, [ebp - 0xff4]
call fcn.00432d7c
lea ecx, [ebp - 0x8d8]
call fcn.0040bc59
lea ecx, [ebp - 0xff4]
call fcn.0043d52a
push 0x45b628
lea eax, [ebp - 0xbd8]
push eax
lea ecx, [ebp - 0xff4]
call fcn.0043d71d
mov ebx, eax
push 0x25
pop eax
mov byte [ebp - 0xa4], al
mov dword [ebp - 0xa3], 0x3536752b
mov word [ebp - 0x9f], 0x42
xor edx, edx
mov dword [ebp - 0x308], edx
cmp edx, 5
jae 0x41af50
movsx ecx, al
and ecx, 0x8000000f
jns 0x41af31
dec ecx
or ecx, 0xfffffff0
inc ecx
mov al, byte [ebp + edx - 0xa3]
sub al, cl
mov byte [ebp + edx - 0xa3], al
inc edx
mov dword [ebp - 0x308], edx
mov al, byte [ebp - 0xa4]
jmp 0x41af1c
mov byte [ebp - 0x9e], 0
movzx edx, byte [ebp - 0x484]
lea ecx, [ebp - 0xaa0]
call fcn.00414703
mov al, 0x42
mov dword [ebp - 0x37], 0x3b722842
mov word [ebp - 0x33], 0x3f
xor edx, edx
mov dword [ebp - 0x30c], edx
push 4
pop esi
cmp edx, esi
jae 0x41afad
movsx ecx, al
and ecx, 0x8000000f
jns 0x41af97
dec ecx
or ecx, 0xfffffff0
inc ecx
mov al, byte [ebp + edx - 0x36]
sub al, cl
mov byte [ebp + edx - 0x36], al
inc edx
mov dword [ebp - 0x30c], edx
mov al, byte [ebp - 0x37]
jmp 0x41af83
mov byte [ebp - 0x32], 0
mov eax, dword [0x45b60c]
test eax, eax
jne 0x41afbe
xor edi, edi
jmp 0x41afc0
mov edi, dword [eax]
push 0x73
pop edx
mov byte [ebp - 0x3d], dl
mov dword [ebp - 0x3c], 0x4e4b0355
mov byte [ebp - 0x38], 0
xor ecx, ecx
mov dword [ebp - 0x310], ecx
push 4
pop eax
cmp ecx, eax
jae 0x41aff6
mov al, byte [ebp + ecx - 0x3c]
xor al, dl
mov byte [ebp + ecx - 0x3c], al
inc ecx
mov dword [ebp - 0x310], ecx
mov dl, byte [ebp - 0x3d]
jmp 0x41afd9
mov byte [ebp - 0x38], 0
mov dl, al
mov byte [ebp - 0x55], dl
mov dword [ebp - 0x54], 0x39337422
mov byte [ebp - 0x50], 0
xor ecx, ecx
mov dword [ebp - 0x314], ecx
cmp ecx, eax
jae 0x41b02f
mov al, byte [ebp + ecx - 0x54]
xor al, dl
mov byte [ebp + ecx - 0x54], al
inc ecx
mov dword [ebp - 0x314], ecx
mov dl, byte [ebp - 0x55]
push 4
pop eax
jmp 0x41b012
mov byte [ebp - 0x50], 0
mov dl, 0x2e
mov dword [ebp - 0x4f], 0x185e082e
mov word [ebp - 0x4b], 0x13
xor ecx, ecx
mov dword [ebp - 0x318], ecx
cmp ecx, eax
jae 0x41b067
mov al, byte [ebp + ecx - 0x4e]
xor al, dl
mov byte [ebp + ecx - 0x4e], al
inc ecx
mov dword [ebp - 0x318], ecx
mov dl, byte [ebp - 0x4f]
push 4
pop eax
jmp 0x41b04a
mov byte [ebp - 0x4a], 0
push 0x2d
pop eax
mov byte [ebp - 0x49], al
mov dword [ebp - 0x48], 0x4a427d33
mov byte [ebp - 0x44], 0
xor edx, edx
mov dword [ebp - 0x31c], edx
push 4
pop esi
cmp edx, esi
jae 0x41b0b1
movsx ecx, al
and ecx, 0x8000000f
jns 0x41b09b
dec ecx
or ecx, 0xfffffff0
inc ecx
mov al, byte [ebp + edx - 0x48]
sub al, cl
mov byte [ebp + edx - 0x48], al
inc edx
mov dword [ebp - 0x31c], edx
mov al, byte [ebp - 0x49]
jmp 0x41b087
mov byte [ebp - 0x44], 0
mov edx, dword [ebp - 0xc18]
lea ecx, [ebp - 0xa88]
call fcn.0041828f
push 0x1c
pop edx
mov byte [ebp - 0x43], dl
mov dword [ebp - 0x42], 0x21286c3a
mov byte [ebp - 0x3e], 0
xor ecx, ecx
mov dword [ebp - 0x320], ecx
cmp ecx, 4
jae 0x41b0fa
mov al, byte [ebp + ecx - 0x42]
xor al, dl
mov byte [ebp + ecx - 0x42], al
inc ecx
mov dword [ebp - 0x320], ecx
mov dl, byte [ebp - 0x43]
jmp 0x41b0df
mov byte [ebp - 0x3e], 0
mov edx, dword [ebp - 0xc1c]
lea ecx, [ebp - 0xa70]
call fcn.0041828f
mov al, 0x26
mov dword [ebp - 0x31], 0x39762c26
mov word [ebp - 0x2d], 0x43
xor edx, edx
mov dword [ebp - 0x324], edx
push 4
pop esi
cmp edx, esi
jae 0x41b153
movsx ecx, al
and ecx, 0x8000000f
jns 0x41b13d
dec ecx
or ecx, 0xfffffff0
inc ecx
mov al, byte [ebp + edx - 0x30]
sub al, cl
mov byte [ebp + edx - 0x30], al
inc edx
mov dword [ebp - 0x324], edx
mov al, byte [ebp - 0x31]
jmp 0x41b129
mov byte [ebp - 0x2c], 0
mov edx, dword [ebp - 0xc20]
lea ecx, [ebp - 0xa58]
call fcn.0041828f
mov al, 0x38
mov dword [ebp - 0x2b], 0x3a782e38
mov word [ebp - 0x27], 0x45
xor edx, edx
mov dword [ebp - 0x328], edx
cmp edx, esi
jae 0x41b1a9
movsx ecx, al
and ecx, 0x8000000f
jns 0x41b193
dec ecx
or ecx, 0xfffffff0
inc ecx
mov al, byte [ebp + edx - 0x2a]
sub al, cl
mov byte [ebp + edx - 0x2a], al
inc edx
mov dword [ebp - 0x328], edx
mov al, byte [ebp - 0x2b]
jmp 0x41b17f
mov byte [ebp - 0x26], 0
mov edx, dword [ebp - 0xc24]
lea ecx, [ebp - 0xa40]
call fcn.0041828f
movaps xmm0, xmmword [0x407960]
movups xmmword [ebp - 0x3d6], xmm0
mov word [ebp - 0x3c6], 0x32
xor ecx, ecx
mov dword [ebp - 0x32c], ecx
cmp ecx, 0x10
jae 0x41b1f9
mov al, byte [ebp + ecx - 0x3d5]
xor al, byte [ebp - 0x3d6]
mov byte [ebp + ecx - 0x3d5], al
inc ecx
jmp 0x41b1d7
mov byte [ebp - 0x3c5], 0
lea edx, [ebp - 0x3d5]
lea esi, [edx + 1]
mov al, byte [edx]
inc edx
test al, al
jne 0x41b209
sub edx, esi
push edx
lea eax, [ebp - 0x3d5]
push eax
push 0
lea ecx, [ebp - 0xa40]
call fcn.00418092
push eax
lea ecx, [ebp - 0xa28]
call fcn.0040bc7c
lea esi, [ebp - 0x2a]
mov ecx, esi
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x41b23b
sub ecx, edx
push ecx
push esi
lea ecx, [ebp - 0xa28]
call fcn.00412bce
push eax
lea ecx, [ebp - 0xa10]
call fcn.0040bc7c
lea eax, [ebp - 0xa58]
push eax
lea eax, [ebp - 0xa10]
push eax
push dword [ebp - 0x64]
lea ecx, [ebp - 0x9f8]
call fcn.0041c09c
lea esi, [ebp - 0x30]
mov ecx, esi
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x41b281
sub ecx, edx
push ecx
push esi
lea ecx, [ebp - 0x9f8]
call fcn.00412bce
push eax
lea ecx, [ebp - 0x9e0]
call fcn.0040bc7c
lea eax, [ebp - 0xa70]
push eax
lea eax, [ebp - 0x9e0]
push eax
push dword [ebp - 0x64]
lea ecx, [ebp - 0x9c8]
call fcn.0041c09c
lea esi, [ebp - 0x42]
mov ecx, esi
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x41b2c7
sub ecx, edx
push ecx
push esi
lea ecx, [ebp - 0x9c8]
call fcn.00412bce
push eax
lea ecx, [ebp - 0x9b0]
call fcn.0040bc7c
lea eax, [ebp - 0xa88]
push eax
lea eax, [ebp - 0x9b0]
push eax
push dword [ebp - 0x64]
lea ecx, [ebp - 0x998]
call fcn.0041c09c
lea esi, [ebp - 0x48]
mov ecx, esi
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x41b30d
sub ecx, edx
push ecx
push esi
lea ecx, [ebp - 0x998]
call fcn.00412bce
push eax
lea ecx, [ebp - 0x594]
call fcn.0040bc7c
cmp byte [ebp - 0xc14], 0
setne al
add al, 0x30
mov byte [ebp - 0x330], al
push dword [ebp - 0x330]
lea ecx, [ebp - 0x594]
call fcn.0040bcdc
lea eax, [ebp - 0x594]
push eax
lea ecx, [ebp - 0x980]
call fcn.0040bc7c
lea esi, [ebp - 0x4e]
mov ecx, esi
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x41b36c
sub ecx, edx
push ecx
push esi
lea ecx, [ebp - 0x980]
call fcn.00412bce
push eax
lea ecx, [ebp - 0x57c]
call fcn.0040bc7c
cmp byte [ebp - 0xc12], 0
setne al
add al, 0x30
mov byte [ebp - 0x334], al
push dword [ebp - 0x334]
lea ecx, [ebp - 0x57c]
call fcn.0040bcdc
lea eax, [ebp - 0x57c]
push eax
lea ecx, [ebp - 0x968]
call fcn.0040bc7c
lea esi, [ebp - 0x54]
mov ecx, esi
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x41b3cb
sub ecx, edx
push ecx
push esi
lea ecx, [ebp - 0x968]
call fcn.00412bce
push eax
lea ecx, [ebp - 0x564]
call fcn.0040bc7c
cmp byte [ebp - 0xc13], 0
setne al
add al, 0x30
mov byte [ebp - 0x64], al
push dword [ebp - 0x64]
lea ecx, [ebp - 0x564]
call fcn.0040bcdc
lea eax, [ebp - 0x564]
push eax
lea ecx, [ebp - 0x950]
call fcn.0040bc7c
lea esi, [ebp - 0x3c]
mov ecx, esi
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x41b424
sub ecx, edx
push ecx
push esi
lea ecx, [ebp - 0x950]
call fcn.00412bce
push eax
lea ecx, [ebp - 0x54c]
call fcn.0040bc7c
test edi, edi
setne al
add al, 0x30
movzx eax, al
push eax
lea ecx, [ebp - 0x54c]
call fcn.0040bcdc
lea eax, [ebp - 0x54c]
push eax
lea ecx, [ebp - 0x938]
call fcn.0040bc7c
lea esi, [ebp - 0x36]
mov ecx, esi
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x41b476
sub ecx, edx
push ecx
push esi
lea ecx, [ebp - 0x938]
call fcn.00412bce
push eax
lea ecx, [ebp - 0x920]
call fcn.0040bc7c
lea eax, [ebp - 0xaa0]
push eax
lea eax, [ebp - 0x920]
push eax
push dword [ebp - 0x64]
lea ecx, [ebp - 0x908]
call fcn.0041c09c
lea esi, [ebp - 0xa3]
mov ecx, esi
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x41b4bf
sub ecx, edx
push ecx
push esi
lea ecx, [ebp - 0x908]
call fcn.00412bce
push eax
lea ecx, [ebp - 0x8f0]
call fcn.0040bc7c
push ebx
lea eax, [ebp - 0x8f0]
push eax
push dword [ebp - 0x64]
lea ecx, [ebp - 0xae8]
call fcn.0041c09c
lea ecx, [ebp - 0x8f0]
call fcn.0040bc59
lea ecx, [ebp - 0x908]
call fcn.0040bc59
lea ecx, [ebp - 0x920]
call fcn.0040bc59
lea ecx, [ebp - 0x938]
call fcn.0040bc59
lea ecx, [ebp - 0x54c]
call fcn.0040bc59
lea ecx, [ebp - 0x950]
call fcn.0040bc59
lea ecx, [ebp - 0x564]
call fcn.0040bc59
lea ecx, [ebp - 0x968]
call fcn.0040bc59
lea ecx, [ebp - 0x57c]
call fcn.0040bc59
lea ecx, [ebp - 0x980]
call fcn.0040bc59
lea ecx, [ebp - 0x594]
call fcn.0040bc59
lea ecx, [ebp - 0x998]
call fcn.0040bc59
lea ecx, [ebp - 0x9b0]
call fcn.0040bc59
lea ecx, [ebp - 0x9c8]
call fcn.0040bc59
lea ecx, [ebp - 0x9e0]
call fcn.0040bc59
lea ecx, [ebp - 0x9f8]
call fcn.0040bc59
lea ecx, [ebp - 0xa10]
call fcn.0040bc59
lea ecx, [ebp - 0xa28]
call fcn.0040bc59
lea ecx, [ebp - 0xa40]
call fcn.0040bc59
lea ecx, [ebp - 0xa58]
call fcn.0040bc59
lea ecx, [ebp - 0xa70]
call fcn.0040bc59
lea ecx, [ebp - 0xa88]
call fcn.0040bc59
lea ecx, [ebp - 0xaa0]
call fcn.0040bc59
lea ecx, [ebp - 0xbd8]
call fcn.0040bc59
push 0x55
pop eax
mov byte [ebp - 0x5b], al
mov dword [ebp - 0x5a], 0x756e7f33
xor ebx, ebx
mov byte [ebp - 0x56], bl
mov edx, ebx
mov dword [ebp - 0x338], edx
cmp edx, 4
jae 0x41b644
movsx ecx, al
and ecx, 0x8000000f
jns 0x41b62e
dec ecx
or ecx, 0xfffffff0
inc ecx
mov al, byte [ebp + edx - 0x5a]
sub al, cl
mov byte [ebp + edx - 0x5a], al
inc edx
mov dword [ebp - 0x338], edx
mov al, byte [ebp - 0x5b]
jmp 0x41b619
mov byte [ebp - 0x56], bl
lea eax, [ebp - 0x5a]
push eax
mov edx, 0x45aa10
lea ecx, [ebp - 0xbf0]
call fcn.00417b5f
push eax
lea eax, [ebp - 0xae8]
push eax
mov esi, 0x45b628
push esi
lea ecx, [ebp - 0xff4]
call fcn.004204a7
lea ecx, [ebp - 0xbf0]
call fcn.0040bc59
mov eax, dword [ebp - 0xc68]
cmp eax, dword [ebp - 0xc64]
je 0x41b6ba
mov eax, dword [ebp - 0xcac]
test eax, eax
jne 0x41b6a5
push 1
call fcn.0044485d
pop ecx
mov dword [ebp - 0xcac], eax
lea ecx, [ebp - 0xc68]
push ecx
lea ecx, [ebp - 0xc74]
push ecx
mov ecx, eax
call fcn.004158dd
lea ecx, [ebp - 0x240]
call fcn.0041bf43
mov eax, dword [ebp - 0xcac]
test eax, eax
jne 0x41b6dd
push 1
call fcn.0044485d
pop ecx
mov dword [ebp - 0xcac], eax
lea ecx, [ebp - 0x240]
push ecx
push dword [ebp - 0xc12]
lea ecx, [ebp - 0xc74]
push ecx
mov ecx, eax
call fcn.004159f7
push esi
lea ecx, [ebp - 0xff4]
call fcn.0043b50f
movaps xmm0, xmmword [0x407d70]
movups xmmword [ebp - 0x297], xmm0
mov dword [ebp - 0x287], 0x7564666b
mov byte [ebp - 0x283], bl
mov edx, ebx
mov dword [ebp - 0x33c], edx
cmp edx, 0x13
jae 0x41b756
movsx ecx, byte [ebp - 0x297]
and ecx, 0x8000000f
jns 0x41b743
dec ecx
or ecx, 0xfffffff0
inc ecx
mov al, byte [ebp + edx - 0x296]
sub al, cl
mov byte [ebp + edx - 0x296], al
inc edx
jmp 0x41b724
mov byte [ebp - 0x283], bl
lea edx, [ebp - 0x296]
mov ecx, dword [ebp - 0x20]
call fcn.0040c457
mov edi, eax
mov ecx, dword [ebp - 0x240]
cmp ecx, dword [ebp - 0x23c]
je 0x41b82f
mov bl, 1
mov byte [ebp - 0x15], bl
test bl, bl
je 0x41b828
xor bl, bl
mov byte [ebp - 0x15], bl
xor esi, esi
mov dword [ebp - 0x340], esi
mov eax, dword [ebp - 0x23c]
mov ecx, dword [ebp - 0x240]
sub eax, ecx
sar eax, 3
cmp esi, eax
jae 0x41b7d4
cmp byte [ecx + esi*8 + 4], 0
jne 0x41b7d1
push 0
push dword [ecx + esi*8]
call edi
test eax, eax
jne 0x41b7cc
mov eax, dword [ebp - 0x240]
mov byte [eax + esi*8 + 4], 1
jmp 0x41b7d1
mov bl, 1
mov byte [ebp - 0x15], bl
inc esi
jmp 0x41b792
mov dl, 0x3c
mov dword [ebp - 0x73], 0x59506f3c
mov word [ebp - 0x6f], 0x4c59
mov byte [ebp - 0x6d], 0
xor ecx, ecx
mov dword [ebp - 0x344], ecx
cmp ecx, 5
jae 0x41b80a
mov al, byte [ebp + ecx - 0x72]
xor al, dl
mov byte [ebp + ecx - 0x72], al
inc ecx
mov dword [ebp - 0x344], ecx
mov dl, byte [ebp - 0x73]
jmp 0x41b7ef
mov byte [ebp - 0x6d], 0
lea edx, [ebp - 0x72]
lea ecx, [ebp - 0x157]
call fcn.0040c457
push 0x3e8
call eax
jmp 0x41b783
xor ebx, ebx
mov esi, 0x45b628
push esi
lea ecx, [ebp - 0xff4]
call fcn.0043cb4c
mov al, 0x7a
mov dword [ebp - 0x13f], 0x6f725d7a
mov dword [ebp - 0x13b], 0x3c3d7676
mov dword [ebp - 0x137], 0x76766e38
mov byte [ebp - 0x133], bl
mov edx, ebx
mov dword [ebp - 0x348], edx
cmp edx, 0xb
jae 0x41b89d
movsx ecx, al
and ecx, 0x8000000f
jns 0x41b87e
dec ecx
or ecx, 0xfffffff0
inc ecx
mov al, byte [ebp + edx - 0x13e]
sub al, cl
mov byte [ebp + edx - 0x13e], al
inc edx
mov dword [ebp - 0x348], edx
mov al, byte [ebp - 0x13f]
jmp 0x41b869
mov byte [ebp - 0x133], bl
lea esi, [ebp - 0x13e]
push 0x7d
pop eax
mov byte [ebp - 0x128], al
mov dword [ebp - 0x127], 0x607a7c50
mov byte [ebp - 0x123], al
mov word [ebp - 0x122], 0x7072
mov byte [ebp - 0x120], bl
mov edx, ebx
mov dword [ebp - 0x34c], edx
cmp edx, 7
jae 0x41b90d
movsx ecx, al
and ecx, 0x8000000f
jns 0x41b8ee
dec ecx
or ecx, 0xfffffff0
inc ecx
mov al, byte [ebp + edx - 0x127]
sub al, cl
mov byte [ebp + edx - 0x127], al
inc edx
mov dword [ebp - 0x34c], edx
mov al, byte [ebp - 0x128]
jmp 0x41b8d9
mov byte [ebp - 0x120], bl
lea eax, [ebp - 0x127]
push eax
call fcn.004494dd
pop ecx
mov ebx, eax
cmp dword [ebp - 0x470], 0
je 0x41ba54
push 4
pop eax
mov byte [ebp - 0x1fb], al
mov dword [ebp - 0x1fa], 0x70696c57
mov dword [ebp - 0x1f6], 0x697c4970
mov dword [ebp - 0x1f2], 0x69787967
mov word [ebp - 0x1ee], 0x45
xor edx, edx
mov dword [ebp - 0x350], edx
cmp edx, 0xd
jae 0x41b99b
movsx ecx, al
and ecx, 0x8000000f
jns 0x41b97c
dec ecx
or ecx, 0xfffffff0
inc ecx
mov al, byte [ebp + edx - 0x1fa]
sub al, cl
mov byte [ebp + edx - 0x1fa], al
inc edx
mov dword [ebp - 0x350], edx
mov al, byte [ebp - 0x1fb]
jmp 0x41b967
mov byte [ebp - 0x1ed], 0
lea edx, [ebp - 0x1fa]
mov ecx, esi
call fcn.0040c457
mov edi, eax
movaps xmm0, xmmword [0x407550]
movups xmmword [ebp - 0x3fe], xmm0
mov dword [ebp - 0x3ee], 0x101251
xor ecx, ecx
mov dword [ebp - 0x354], ecx
cmp ecx, 0x12
jae 0x41b9ed
mov al, byte [ebp + ecx - 0x3fd]
xor al, byte [ebp - 0x3fe]
mov byte [ebp + ecx - 0x3fd], al
inc ecx
jmp 0x41b9cb
mov byte [ebp - 0x3eb], 0
lea eax, [ebp - 0x480]
push eax
lea edx, [ebp - 0x3fd]
lea ecx, [ebp - 0xc08]
call fcn.0041c04d
mov esi, eax
push 0x22
mov ecx, esi
call fcn.0040bcdc
push esi
lea ecx, [ebp - 0xab8]
call fcn.0040bc7c
lea ecx, [ebp - 0xab8]
call fcn.0040bd83
xor ecx, ecx
push ecx
push ecx
push eax
push ebx
push ecx
push ecx
call edi
lea ecx, [ebp - 0xab8]
call fcn.0040bc59
lea ecx, [ebp - 0xc08]
call fcn.0040bc59
lea esi, [ebp - 0x13e]
push 0x3c
pop eax
mov byte [ebp - 0x1d1], al
mov dword [ebp - 0x1d0], 0x7178715e
mov dword [ebp - 0x1cc], 0x59717f6d
mov dword [ebp - 0x1c8], 0x84718081
mov byte [ebp - 0x1c4], 0
xor edx, edx
mov dword [ebp - 0x358], edx
cmp edx, 0xc
jae 0x41babe
movsx ecx, al
and ecx, 0x8000000f
jns 0x41ba9f
dec ecx
or ecx, 0xfffffff0
inc ecx
mov al, byte [ebp + edx - 0x1d0]
sub al, cl
mov byte [ebp + edx - 0x1d0], al
inc edx
mov dword [ebp - 0x358], edx
mov al, byte [ebp - 0x1d1]
jmp 0x41ba8a
mov byte [ebp - 0x1c4], 0
lea edx, [ebp - 0x1d0]
mov ecx, dword [ebp - 0x20]
call fcn.0040c457
push dword [ebp - 0x60]
call eax
push 0x2e
pop edx
mov byte [ebp - 0x17e], dl
mov dword [ebp - 0x17d], 0x5d41426d
mov dword [ebp - 0x179], 0x404f664b
mov dword [ebp - 0x175], 0x4b424a
xor ecx, ecx
mov dword [ebp - 0x35c], ecx
cmp ecx, 0xb
jae 0x41bb2b
mov al, byte [ebp + ecx - 0x17d]
xor al, dl
mov byte [ebp + ecx - 0x17d], al
inc ecx
mov dword [ebp - 0x35c], ecx
mov dl, byte [ebp - 0x17e]
jmp 0x41bb07
mov byte [ebp - 0x172], 0
lea edx, [ebp - 0x17d]
mov ecx, dword [ebp - 0x20]
call fcn.0040c457
push dword [ebp - 0x60]
call eax
cmp byte [ebp - 0x494], 0
je 0x41bcb2
push 0x19
pop edx
mov byte [ebp - 0x20a], dl
mov dword [ebp - 0x209], 0x757c714a
mov dword [ebp - 0x205], 0x7c615c75
mov dword [ebp - 0x201], 0x7c6d6c7a
mov word [ebp - 0x1fd], 0x58
xor ecx, ecx
mov dword [ebp - 0x360], ecx
cmp ecx, 0xd
jae 0x41bbae
mov al, byte [ebp + ecx - 0x209]
xor al, dl
mov byte [ebp + ecx - 0x209], al
inc ecx
mov dword [ebp - 0x360], ecx
mov dl, byte [ebp - 0x20a]
jmp 0x41bb8a
mov byte [ebp - 0x1fc], 0
lea edx, [ebp - 0x209]
mov ecx, esi
call fcn.0040c457
mov edi, eax
lea eax, [ebp - 0xb90]
push eax
mov ecx, 0x45b614
call fcn.0041852b
mov esi, eax
movaps xmm0, xmmword [0x407840]
movups xmmword [ebp - 0x234], xmm0
mov dword [ebp - 0x224], 0x2c263734
mov dword [ebp - 0x220], 0x6b6a262c
mov dword [ebp - 0x21c], 0x282672
xor edx, edx
mov dword [ebp - 0x364], edx
cmp edx, 0x1a
jae 0x41bc37
movsx ecx, byte [ebp - 0x234]
and ecx, 0x8000000f
jns 0x41bc24
dec ecx
or ecx, 0xfffffff0
inc ecx
mov al, byte [ebp + edx - 0x233]
sub al, cl
mov byte [ebp + edx - 0x233], al
inc edx
jmp 0x41bc05
mov byte [ebp - 0x219], 0
lea ecx, [ebp - 0x233]
lea edx, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x41bc47
sub ecx, edx
push ecx
lea eax, [ebp - 0x233]
push eax
push 0
mov ecx, esi
call fcn.00418092
push eax
lea ecx, [ebp - 0xad0]
call fcn.0040bc7c
push 0x22
lea edx, [ebp - 0xad0]
lea ecx, [ebp - 0xb78]
call fcn.00417ca3
mov ecx, eax
call fcn.0040bd83
xor ecx, ecx
push ecx
push ecx
push eax
push ebx
push ecx
push ecx
call edi
lea ecx, [ebp - 0xb78]
call fcn.0040bc59
lea ecx, [ebp - 0xad0]
call fcn.0040bc59
lea ecx, [ebp - 0xb90]
call fcn.0040bc59
lea ecx, [ebp - 0x240]
call fcn.0041bf21
lea ecx, [ebp - 0xae8]
call fcn.0040bc59
lea ecx, [ebp - 0x534]
call fcn.0040bc59
lea ecx, [ebp - 0x4a0]
call fcn.00418ee8
lea ecx, [ebp - 0xff4]
call fcn.0041bd07
or dword [ebp - 4], 0xffffffff
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop edi
pop esi
pop ebx
leave
ret