Function at 0x406040
Capabilities:
Access peb ldr_data
Encrypt data using speck

Disassembly:
push ebp
mov ebp, esp
push 0xffffffffffffffff
push 0xd7271a
mov eax, dword fs:[0]
push eax
mov eax, 0x1874
call fcn.00cfab50
mov eax, dword [0xdbd0c4]
xor eax, ebp
mov dword [ebp - 0x10], eax
push ebx
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x174], ecx
mov eax, dword [ebp - 0x174]
mov byte [eax], 1
mov ecx, dword [ebp - 0x174]
mov dword [ecx + 4], 0
mov edx, dword [ebp - 0x174]
mov byte [edx + 8], 0
mov eax, dword [ebp - 0x174]
mov byte [eax + 9], 0
mov ecx, dword [ebp - 0x174]
mov dword [ecx + 0xc], 0
mov edx, dword [ebp - 0x174]
mov byte [edx + 0x1c], 0
mov eax, dword [ebp - 0x174]
mov byte [eax + 0x1d], 1
mov ecx, dword [ebp - 0x174]
mov dword [ecx + 0x20], 0
mov edx, dword [ebp - 0x174]
mov dword [edx + 0x24], 0
mov eax, dword [ebp - 0x174]
mov dword [eax + 0x28], 0
mov ecx, dword [ebp - 0x174]
mov dword [ecx + 0x2c], 0
mov edx, dword [ebp - 0x174]
mov dword [edx + 0x30], 0
mov eax, dword [ebp - 0x174]
mov dword [eax + 0x34], 0
mov ecx, dword [ebp - 0x174]
mov dword [ecx + 0x38], 0
mov edx, dword [ebp - 0x174]
mov dword [edx + 0x3c], 0
mov eax, dword [ebp - 0x174]
mov dword [eax + 0x40], 0
mov ecx, dword [ebp - 0x174]
mov edx, dword [ebp + 8]
mov dword [ecx + 0x44], edx
mov eax, dword [ebp - 0x174]
mov ecx, dword [ebp + 0xc]
mov dword [eax + 0x48], ecx
mov edx, dword [ebp - 0x174]
mov dword [edx + 0x4c], 0
mov eax, dword [ebp - 0x174]
mov byte [eax + 0x50], 0
mov dword [ebp - 0xe4], 0
mov dword [ebp - 0xe8], 0
xorps xmm0, xmm0
movsd qword [ebp - 0xc54], xmm0
xorps xmm0, xmm0
movsd qword [ebp - 0xbdc], xmm0
xorps xmm0, xmm0
movsd qword [ebp - 0xbdc], xmm0
jmp 0x4061b6
movsd xmm0, qword [ebp - 0xbdc]
addsd xmm0, qword [0xd75890]
movsd qword [ebp - 0xbdc], xmm0
movsd xmm0, qword [0xd75ac8]
comisd xmm0, xmmword [ebp - 0xbdc]
jbe 0x406267
movsd xmm0, qword [0xd759c8]
mulsd xmm0, qword [ebp - 0xbdc]
mulsd xmm0, qword [ebp - 0xbdc]
movsd xmm1, qword [ebp - 0xbdc]
mulsd xmm1, qword [ebp - 0xbdc]
subsd xmm0, xmm1
movsd xmm1, qword [0xd758f0]
mulsd xmm1, qword [ebp - 0xbdc]
mulsd xmm1, qword [ebp - 0xbdc]
addsd xmm1, qword [0xd75960]
divsd xmm0, xmm1
addsd xmm0, qword [ebp - 0xc54]
movsd qword [ebp - 0xc54], xmm0
movsd xmm0, qword [ebp - 0xc54]
comisd xmm0, xmmword [0xd759b0]
jbe 0x406262
movsd xmm0, qword [0xd75848]
mulsd xmm0, qword [ebp - 0xbdc]
movsd xmm1, qword [ebp - 0xc54]
subsd xmm1, xmm0
movsd qword [ebp - 0xc54], xmm1
jmp 0x40619e
xorps xmm0, xmm0
comisd xmm0, xmmword [ebp - 0xc54]
jbe 0x40629b
movsb byte es:[edi], byte [esi]
scasd eax, dword es:[edi]
pushfd
lodsd eax, dword [esi]
sahf
scasb al, byte es:[edi]
cmpsb byte [esi], byte es:[edi]
cmpsb byte [esi], byte es:[edi]
test al, 0xab
pushfd
test eax, 0xaba8afa3
cmpsd dword [esi], dword es:[edi]
mov bl, 0x47
push 0x70
dec esi
push ebp
dec eax
cmp eax, 0x6c634a72
jno 0x4062b6
cmp eax, 0x2ed6e93d
add byte [eax], al
mov dword [ebp - 0xe4], 0x406274
mov dword [ebp - 0xe8], 0x406286
mov ecx, dword [ebp - 0xe4]
mov dword [ebp - 0x790], ecx
mov edx, dword [ebp - 0xe8]
mov dword [ebp - 0x152c], edx
mov byte [ebp - 0x7dc], 0x14
mov dword [ebp - 0x420], 0
jmp 0x4062e9
lea esi, [eax - 8]
invalid
mov eax, dword [ebp - 0x420]
add eax, 1
mov dword [ebp - 0x420], eax
cmp dword [ebp - 0x420], 0x100
jae 0x40630a
mov ecx, dword [ebp - 0x420]
mov dl, byte [ebp - 0x420]
mov byte [ebp + ecx - 0x166c], dl
jmp 0x4062da
mov dword [ebp - 0xb0c], 0
mov byte [ebp - 0x165], 0
mov dword [ebp - 0x420], 0xff
jmp 0x406336
mov eax, dword [ebp - 0x420]
sub eax, 1
mov dword [ebp - 0x420], eax
cmp dword [ebp - 0x420], 0
jbe 0x4065a6
mov dword [ebp - 0xdc8], 0
mov dword [ebp - 0xc88], 1
mov ecx, dword [ebp - 0xc88]
cmp ecx, dword [ebp - 0x420]
jae 0x406377
mov edx, dword [ebp - 0xc88]
lea eax, [edx + edx + 1]
mov dword [ebp - 0xc88], eax
jmp 0x406357
mov ecx, dword [ebp - 0xb0c]
mov dword [ebp - 0xfd8], ecx
cmp dword [ebp - 0xfd8], 3
ja case.default.0x406396
mov edx, dword [ebp - 0xfd8]
jmp dword [edx*4 + 0x424c7c]
movzx eax, byte [ebp - 0x165]
movzx ebx, byte [ebp + eax - 0x166c]
movsd xmm0, qword [ebp - 0xc54]
call fcn.00cfa9a1
and eax, 0xff
add ebx, eax
mov byte [ebp - 0x165], bl
jmp 0x40647f
movzx ecx, byte [ebp - 0x165]
movzx ebx, byte [ebp + ecx - 0x166c]
movsd xmm0, qword [ebp - 0xc54]
call fcn.00cfa9a1
shr eax, 8
and eax, 0xff
add ebx, eax
mov byte [ebp - 0x165], bl
jmp 0x40647f
movzx edx, byte [ebp - 0x165]
movzx ebx, byte [ebp + edx - 0x166c]
movsd xmm0, qword [ebp - 0xc54]
call fcn.00cfa9a1
shr eax, 0x10
and eax, 0xff
add ebx, eax
mov byte [ebp - 0x165], bl
jmp 0x40647f
movzx eax, byte [ebp - 0x165]
movzx ebx, byte [ebp + eax - 0x166c]
movsd xmm0, qword [ebp - 0xc54]
call fcn.00cfa9a1
shr eax, 0x18
and eax, 0xff
add ebx, eax
mov byte [ebp - 0x165], bl
jmp 0x40647f
movzx ecx, byte [ebp - 0x165]
movzx edx, byte [ebp + ecx - 0x166c]
mov eax, dword [ebp - 0x152c]
add eax, dword [ebp - 0xb0c]
movzx ecx, byte [eax - 4]
add edx, ecx
mov byte [ebp - 0x165], dl
mov edx, dword [ebp - 0xb0c]
add edx, 1
mov dword [ebp - 0xb0c], edx
movzx eax, byte [ebp - 0x7dc]
cmp dword [ebp - 0xb0c], eax
jb 0x4064bd
mov dword [ebp - 0xb0c], 0
movzx ecx, byte [ebp - 0x7dc]
movzx edx, byte [ebp - 0x165]
add edx, ecx
mov byte [ebp - 0x165], dl
movzx eax, byte [ebp - 0x165]
and eax, dword [ebp - 0xc88]
mov dword [ebp - 0xa34], eax
mov ecx, dword [ebp - 0xdc8]
add ecx, 1
mov dword [ebp - 0xdc8], ecx
cmp dword [ebp - 0xdc8], 0xb
jbe 0x4064fc
mov eax, dword [ebp - 0xa34]
xor edx, edx
div dword [ebp - 0x420]
mov dword [ebp - 0xa34], edx
mov edx, dword [ebp - 0xa34]
cmp edx, dword [ebp - 0x420]
ja 0x406377
mov eax, dword [ebp - 0x420]
cmp eax, dword [ebp - 0xa34]
je 0x4065a1
mov ecx, dword [ebp - 0xa34]
movzx edx, byte [ebp + ecx - 0x166c]
mov eax, dword [ebp - 0x420]
movzx ecx, byte [ebp + eax - 0x166c]
xor ecx, edx
mov edx, dword [ebp - 0x420]
mov byte [ebp + edx - 0x166c], cl
mov eax, dword [ebp - 0x420]
movzx ecx, byte [ebp + eax - 0x166c]
mov edx, dword [ebp - 0xa34]
movzx eax, byte [ebp + edx - 0x166c]
xor eax, ecx
mov ecx, dword [ebp - 0xa34]
mov byte [ebp + ecx - 0x166c], al
mov edx, dword [ebp - 0xa34]
movzx eax, byte [ebp + edx - 0x166c]
mov ecx, dword [ebp - 0x420]
movzx edx, byte [ebp + ecx - 0x166c]
xor edx, eax
mov eax, dword [ebp - 0x420]
mov byte [ebp + eax - 0x166c], dl
jmp 0x406327
mov ecx, 1
shl ecx, 0
mov dl, byte [ebp + ecx - 0x166c]
mov byte [ebp - 0x124], dl
mov eax, 1
imul ecx, eax, 3
mov dl, byte [ebp + ecx - 0x166c]
mov byte [ebp - 0x134], dl
mov eax, 1
imul ecx, eax, 5
mov dl, byte [ebp + ecx - 0x166c]
mov byte [ebp - 0x14d], dl
mov eax, 1
imul ecx, eax, 7
mov dl, byte [ebp + ecx - 0x166c]
mov byte [ebp - 0x133], dl
movzx eax, byte [ebp - 0x165]
mov cl, byte [ebp + eax - 0x166c]
mov byte [ebp - 0x143], cl
mov dword [ebp - 0xfdc], 0x12
cmp dword [ebp - 0xfdc], 2
jle 0x409120
mov edx, dword [ebp - 0xfdc]
and edx, 1
jne 0x409120
mov dword [ebp - 0x1bc], 0
mov dword [ebp - 0x434], 0
mov eax, dword [ebp - 0x434]
add eax, 1
mov dword [ebp - 0x434], eax
mov dword [ebp - 0x78c], 0
mov ecx, dword [ebp - 0x1bc]
shl ecx, 1
mov dword [ebp - 0x78c], ecx
mov dword [ebp - 0x6c0], 0
mov edx, dword [ebp - 0x790]
add edx, dword [ebp - 0x78c]
movzx eax, byte [edx]
add eax, dword [ebp - 0x6c0]
mov dword [ebp - 0x6c0], eax
mov dword [ebp - 0x6ec], 0
mov ecx, dword [ebp - 0x6ec]
add ecx, 0x9c
mov dword [ebp - 0x6ec], ecx
mov dword [ebp - 0x794], 0
mov edx, dword [ebp - 0x1bc]
lea eax, [edx + edx + 1]
mov dword [ebp - 0x794], eax
mov dword [ebp - 0x6b8], 0
mov ecx, dword [ebp - 0x790]
add ecx, dword [ebp - 0x794]
movzx edx, byte [ecx]
add edx, dword [ebp - 0x6b8]
mov dword [ebp - 0x6b8], edx
mov dword [ebp - 0x6b4], 0
mov eax, dword [ebp - 0x6b4]
add eax, 0xa5
mov dword [ebp - 0x6b4], eax
mov dword [ebp - 0x6e8], 0
mov ecx, dword [ebp - 0x6c0]
sub ecx, dword [ebp - 0x6ec]
add ecx, dword [ebp - 0x6e8]
mov dword [ebp - 0x6e8], ecx
mov dword [ebp - 0x69c], 0
movss xmm0, dword [0xd765a0]
movss dword [ebp - 0x6c8], xmm0
movss xmm0, dword [0xd764c0]
movss dword [ebp - 0xb10], xmm0
movss xmm0, dword [0xd763a4]
movss dword [ebp - 0x998], xmm0
movss xmm0, dword [0xd76274]
movss dword [ebp - 0x924], xmm0
movss xmm0, dword [ebp - 0x6c8]
addss xmm0, dword [ebp - 0x924]
movss dword [ebp - 0x6c8], xmm0
movss xmm0, dword [ebp - 0x998]
subss xmm0, dword [ebp - 0x924]
movss dword [ebp - 0x998], xmm0
movss xmm0, dword [ebp - 0x6c8]
mulss xmm0, dword [ebp - 0x924]
movss dword [ebp - 0x6c8], xmm0
movss xmm0, dword [ebp - 0x6c8]
addss xmm0, dword [ebp - 0x924]
movss dword [ebp - 0x6c8], xmm0
movss xmm0, dword [ebp - 0x998]
comiss xmm0, dword [ebp - 0x6c8]
jbe 0x406849
movss xmm0, dword [ebp - 0xb10]
subss xmm0, dword [ebp - 0x924]
movss dword [ebp - 0xb10], xmm0
movss xmm0, dword [ebp - 0x6c8]
addss xmm0, dword [ebp - 0x998]
movss dword [ebp - 0x6c8], xmm0
movss xmm0, dword [ebp - 0x924]
addss xmm0, dword [ebp - 0xb10]
movss dword [ebp - 0x924], xmm0
movss xmm0, dword [ebp - 0x998]
addss xmm0, dword [ebp - 0x6c8]
movss dword [ebp - 0x998], xmm0
jmp 0x4068c1
movss xmm0, dword [ebp - 0xb10]
subss xmm0, dword [ebp - 0x998]
movss dword [ebp - 0xb10], xmm0
movss xmm0, dword [ebp - 0x6c8]
addss xmm0, dword [ebp - 0xb10]
movss dword [ebp - 0x6c8], xmm0
movss xmm0, dword [ebp - 0x924]
addss xmm0, dword [ebp - 0x6c8]
movss dword [ebp - 0x924], xmm0
movss xmm0, dword [ebp - 0x998]
addss xmm0, dword [ebp - 0x924]
movss dword [ebp - 0x998], xmm0
mov edx, dword [ebp - 0x6b8]
sub edx, dword [ebp - 0x6b4]
add edx, dword [ebp - 0x69c]
mov dword [ebp - 0x69c], edx
mov dword [ebp - 0x798], 0
mov eax, dword [ebp - 0x6e8]
shl eax, 4
mov dword [ebp - 0x798], eax
mov dword [ebp - 0x79c], 0
mov ecx, dword [ebp - 0x69c]
mov dword [ebp - 0x79c], ecx
mov dword [ebp - 0x7a0], 0
mov edx, dword [ebp - 0x798]
or edx, dword [ebp - 0x79c]
mov dword [ebp - 0x7a0], edx
mov byte [ebp - 0x14e], 0
mov al, byte [ebp - 0x7a0]
mov byte [ebp - 0x14e], al
mov byte [ebp - 0x14c], 0
movzx ecx, byte [ebp - 0x143]
mov dl, byte [ebp + ecx - 0x166c]
mov byte [ebp - 0x14c], dl
movzx eax, byte [ebp - 0x124]
movzx ecx, byte [ebp + eax - 0x166c]
movzx edx, byte [ebp - 0x134]
add edx, ecx
mov byte [ebp - 0x134], dl
mov al, byte [ebp - 0x124]
add al, 1
mov byte [ebp - 0x124], al
movzx ecx, byte [ebp - 0x134]
movzx edx, byte [ebp - 0x143]
mov al, byte [ebp + ecx - 0x166c]
mov byte [ebp + edx - 0x166c], al
movzx ecx, byte [ebp - 0x133]
movzx edx, byte [ebp - 0x134]
mov al, byte [ebp + ecx - 0x166c]
mov byte [ebp + edx - 0x166c], al
movzx ecx, byte [ebp - 0x124]
movzx edx, byte [ebp - 0x133]
mov al, byte [ebp + ecx - 0x166c]
mov byte [ebp + edx - 0x166c], al
movzx ecx, byte [ebp - 0x124]
mov dl, byte [ebp - 0x14c]
mov byte [ebp + ecx - 0x166c], dl
movzx eax, byte [ebp - 0x14c]
movzx ecx, byte [ebp + eax - 0x166c]
movzx edx, byte [ebp - 0x14d]
add edx, ecx
mov byte [ebp - 0x14d], dl
movzx eax, byte [ebp - 0x14e]
movzx ecx, byte [ebp - 0x134]
movzx edx, byte [ebp + ecx - 0x166c]
movzx ecx, byte [ebp - 0x124]
movzx ecx, byte [ebp + ecx - 0x166c]
add edx, ecx
and edx, 0xff
movzx edx, byte [ebp + edx - 0x166c]
xor eax, edx
movzx ecx, byte [ebp - 0x133]
movzx edx, byte [ebp + ecx - 0x166c]
movzx ecx, byte [ebp - 0x143]
movzx ecx, byte [ebp + ecx - 0x166c]
add edx, ecx
movzx ecx, byte [ebp - 0x14d]
movzx ecx, byte [ebp + ecx - 0x166c]
add edx, ecx
and edx, 0xff
movzx edx, byte [ebp + edx - 0x166c]
movzx ecx, byte [ebp + edx - 0x166c]
xor eax, ecx
mov byte [ebp - 0x133], al
mov dl, byte [ebp - 0x14e]
mov byte [ebp - 0x143], dl
mov al, byte [ebp - 0x133]
mov byte [ebp - 0x17a], al
cmp dword [ebp - 0x1bc], 0
jle 0x406aa9
movsx cx, byte [ebp - 0x17a]
mov edx, dword [ebp - 0x1bc]
mov word [ebp + edx*2 - 0x82], cx
mov eax, dword [ebp - 0x434]
add eax, 2
mov dword [ebp - 0x434], eax
mov ecx, dword [ebp - 0x1bc]
add ecx, 1
mov dword [ebp - 0xdcc], ecx
jmp 0x406ad8
mov edx, dword [ebp - 0xdcc]
add edx, 1
mov dword [ebp - 0xdcc], edx
mov eax, dword [ebp - 0xdcc]
cmp eax, dword [ebp - 0x434]
jge 0x407088
movss xmm0, dword [0xd7659c]
movss dword [ebp - 0x424], xmm0
movss xmm0, dword [0xd76504]
movss dword [ebp - 0x4c0], xmm0
movss xmm0, dword [0xd76410]
movss dword [ebp - 0x6c4], xmm0
movss xmm0, dword [0xd7632c]
movss dword [ebp - 0x1ec], xmm0
movss xmm0, dword [0xd76234]
movss dword [ebp - 0x5fc], xmm0
movss xmm0, dword [ebp - 0x6c4]
mulss xmm0, dword [ebp - 0x5fc]
movss dword [ebp - 0x6c4], xmm0
movss xmm0, dword [ebp - 0x424]
subss xmm0, dword [ebp - 0x5fc]
movss dword [ebp - 0x424], xmm0
movss xmm0, dword [ebp - 0x1ec]
mulss xmm0, dword [ebp - 0x5fc]
movss dword [ebp - 0x1ec], xmm0
movss xmm0, dword [ebp - 0x1ec]
addss xmm0, dword [ebp - 0x5fc]
movss dword [ebp - 0x1ec], xmm0
movss xmm0, dword [ebp - 0x1ec]
mulss xmm0, dword [ebp - 0x5fc]
movss dword [ebp - 0x1ec], xmm0
movss xmm0, dword [ebp - 0x1ec]
comiss xmm0, dword [ebp - 0x5fc]
jbe 0x406c53
movss xmm0, dword [ebp - 0x4c0]
subss xmm0, dword [ebp - 0x1ec]
movss dword [ebp - 0x4c0], xmm0
movss xmm0, dword [ebp - 0x1ec]
addss xmm0, dword [ebp - 0x424]
movss dword [ebp - 0x1ec], xmm0
movss xmm0, dword [ebp - 0x1ec]
subss xmm0, dword [ebp - 0x424]
movss dword [ebp - 0x1ec], xmm0
movss xmm0, dword [ebp - 0x4c0]
addss xmm0, dword [ebp - 0x1ec]
movss dword [ebp - 0x4c0], xmm0
movss xmm0, dword [ebp - 0x1ec]
addss xmm0, dword [ebp - 0x424]
movss dword [ebp - 0x1ec], xmm0
mov ecx, dword [ebp - 0x1bc]
add ecx, 1
mov dword [ebp - 0x1bc], ecx
jmp 0x406e46
movss xmm0, dword [ebp - 0x4c0]
subss xmm0, dword [ebp - 0x1ec]
movss dword [ebp - 0x4c0], xmm0
movss xmm0, dword [ebp - 0x424]
mulss xmm0, dword [ebp - 0x6c4]
movss dword [ebp - 0x424], xmm0
movss xmm0, dword [ebp - 0x1ec]
addss xmm0, dword [ebp - 0x424]
movss dword [ebp - 0x1ec], xmm0
movss xmm0, dword [ebp - 0x1ec]
subss xmm0, dword [ebp - 0x424]
movss dword [ebp - 0x1ec], xmm0
movss xmm0, dword [ebp - 0x4c0]
addss xmm0, dword [ebp - 0x1ec]
movss dword [ebp - 0x4c0], xmm0
movss xmm0, dword [ebp - 0x4c0]
addss xmm0, dword [ebp - 0x6c4]
movss dword [ebp - 0x4c0], xmm0
movss xmm0, dword [ebp - 0x424]
mulss xmm0, dword [ebp - 0x4c0]
movss dword [ebp - 0x424], xmm0
movss xmm0, dword [ebp - 0x424]
mulss xmm0, dword [ebp - 0x4c0]
movss dword [ebp - 0x424], xmm0
movss xmm0, dword [ebp - 0x6c4]
subss xmm0, dword [ebp - 0x1ec]
movss dword [ebp - 0x6c4], xmm0
movss xmm0, dword [ebp - 0x1ec]
divss xmm0, dword [ebp - 0x5fc]
movss dword [ebp - 0x1ec], xmm0
movss xmm0, dword [ebp - 0x424]
comiss xmm0, dword [ebp - 0x6c4]
jbe 0x406dce
movss xmm0, dword [ebp - 0x1ec]
mulss xmm0, dword [ebp - 0x5fc]
movss dword [ebp - 0x1ec], xmm0
movss xmm0, dword [ebp - 0x5fc]
subss xmm0, dword [ebp - 0x424]
movss dword [ebp - 0x5fc], xmm0
movss xmm0, dword [ebp - 0x1ec]
mulss xmm0, dword [ebp - 0x5fc]
movss dword [ebp - 0x1ec], xmm0
movss xmm0, dword [ebp - 0x6c4]
addss xmm0, dword [ebp - 0x1ec]
movss dword [ebp - 0x6c4], xmm0
movss xmm0, dword [ebp - 0x4c0]
divss xmm0, dword [ebp - 0x6c4]
movss dword [ebp - 0x4c0], xmm0
jmp 0x406e46
movss xmm0, dword [ebp - 0x1ec]
mulss xmm0, dword [ebp - 0x424]
movss dword [ebp - 0x1ec], xmm0
movss xmm0, dword [ebp - 0x4c0]
subss xmm0, dword [ebp - 0x1ec]
movss dword [ebp - 0x4c0], xmm0
movss xmm0, dword [ebp - 0x5fc]
divss xmm0, dword [ebp - 0x4c0]
movss dword [ebp - 0x5fc], xmm0
movss xmm0, dword [ebp - 0x424]
addss xmm0, dword [ebp - 0x6c4]
movss dword [ebp - 0x424], xmm0
movss xmm0, dword [ebp - 0x6c4]
divss xmm0, dword [ebp - 0x5fc]
movss dword [ebp - 0x6c4], xmm0
mov edx, dword [ebp - 0x1bc]
shl edx, 1
mov dword [ebp - 0x78c], edx
mov eax, dword [ebp - 0x790]
add eax, dword [ebp - 0x78c]
movzx ecx, byte [eax]
mov dword [ebp - 0x6c0], ecx
mov dword [ebp - 0x6ec], 0x9c
mov edx, dword [ebp - 0x1bc]
lea eax, [edx + edx + 1]
mov dword [ebp - 0x794], eax
mov ecx, dword [ebp - 0x790]
add ecx, dword [ebp - 0x794]
movzx edx, byte [ecx]
mov dword [ebp - 0x6b8], edx
mov dword [ebp - 0x6b4], 0xa5
mov eax, dword [ebp - 0x6c0]
sub eax, dword [ebp - 0x6ec]
mov dword [ebp - 0x6e8], eax
mov ecx, dword [ebp - 0x6b8]
sub ecx, dword [ebp - 0x6b4]
mov dword [ebp - 0x69c], ecx
mov edx, dword [ebp - 0x6e8]
shl edx, 4
mov dword [ebp - 0x798], edx
mov eax, dword [ebp - 0x69c]
mov dword [ebp - 0x79c], eax
mov ecx, dword [ebp - 0x798]
or ecx, dword [ebp - 0x79c]
mov dword [ebp - 0x7a0], ecx
mov dl, byte [ebp - 0x7a0]
mov byte [ebp - 0x14e], dl
movzx eax, byte [ebp - 0x143]
mov cl, byte [ebp + eax - 0x166c]
mov byte [ebp - 0x14c], cl
movzx edx, byte [ebp - 0x124]
movzx eax, byte [ebp + edx - 0x166c]
movzx ecx, byte [ebp - 0x134]
add ecx, eax
mov byte [ebp - 0x134], cl
mov dl, byte [ebp - 0x124]
add dl, 1
mov byte [ebp - 0x124], dl
movzx eax, byte [ebp - 0x134]
movzx ecx, byte [ebp - 0x143]
mov dl, byte [ebp + eax - 0x166c]
mov byte [ebp + ecx - 0x166c], dl
movzx eax, byte [ebp - 0x133]
movzx ecx, byte [ebp - 0x134]
mov dl, byte [ebp + eax - 0x166c]
mov byte [ebp + ecx - 0x166c], dl
movzx eax, byte [ebp - 0x124]
movzx ecx, byte [ebp - 0x133]
mov dl, byte [ebp + eax - 0x166c]
mov byte [ebp + ecx - 0x166c], dl
movzx eax, byte [ebp - 0x124]
mov cl, byte [ebp - 0x14c]
mov byte [ebp + eax - 0x166c], cl
movzx edx, byte [ebp - 0x14c]
movzx eax, byte [ebp + edx - 0x166c]
movzx ecx, byte [ebp - 0x14d]
add ecx, eax
mov byte [ebp - 0x14d], cl
movzx edx, byte [ebp - 0x14e]
movzx eax, byte [ebp - 0x134]
movzx ecx, byte [ebp + eax - 0x166c]
movzx eax, byte [ebp - 0x124]
movzx eax, byte [ebp + eax - 0x166c]
add ecx, eax
and ecx, 0xff
movzx ecx, byte [ebp + ecx - 0x166c]
xor edx, ecx
movzx eax, byte [ebp - 0x133]
movzx ecx, byte [ebp + eax - 0x166c]
movzx eax, byte [ebp - 0x143]
movzx eax, byte [ebp + eax - 0x166c]
add ecx, eax
movzx eax, byte [ebp - 0x14d]
movzx eax, byte [ebp + eax - 0x166c]
add ecx, eax
and ecx, 0xff
movzx ecx, byte [ebp + ecx - 0x166c]
movzx eax, byte [ebp + ecx - 0x166c]
xor edx, eax
mov byte [ebp - 0x133], dl
mov cl, byte [ebp - 0x14e]
mov byte [ebp - 0x143], cl
mov dl, byte [ebp - 0x133]
mov byte [ebp - 0x17a], dl
cmp dword [ebp - 0x1bc], 0
jle 0x407083
movsx ax, byte [ebp - 0x17a]
mov ecx, dword [ebp - 0x1bc]
mov word [ebp + ecx*2 - 0x82], ax
jmp 0x406ac9
mov edx, dword [ebp - 0x434]
add edx, 1
mov dword [ebp - 0x434], edx
mov eax, dword [ebp - 0x434]
add eax, 3
mov dword [ebp - 0x434], eax
mov ecx, dword [ebp - 0x1bc]
add ecx, 1
mov dword [ebp - 0xe04], ecx
jmp 0x4070c6
mov edx, dword [ebp - 0xe04]
add edx, 1
mov dword [ebp - 0xe04], edx
mov eax, dword [ebp - 0xe04]
cmp eax, dword [ebp - 0x434]
jge 0x4077a7
mov ecx, dword [ebp - 0x1bc]
add ecx, 1
mov dword [ebp - 0x1bc], ecx
mov edx, dword [ebp - 0x1bc]
shl edx, 1
mov dword [ebp - 0x78c], edx
mov eax, dword [ebp - 0x790]
add eax, dword [ebp - 0x78c]
movzx ecx, byte [eax]
mov dword [ebp - 0x6c0], ecx
mov dword [ebp - 0x6ec], 0x9c
mov edx, dword [ebp - 0x1bc]
lea eax, [edx + edx + 1]
mov dword [ebp - 0x794], eax
mov ecx, dword [ebp - 0x790]
add ecx, dword [ebp - 0x794]
movzx edx, byte [ecx]
mov dword [ebp - 0x6b8], edx
mov dword [ebp - 0x6b4], 0xa5
mov eax, dword [ebp - 0x6c0]
sub eax, dword [ebp - 0x6ec]
mov dword [ebp - 0x6e8], eax
mov ecx, dword [ebp - 0x6b8]
sub ecx, dword [ebp - 0x6b4]
mov dword [ebp - 0x69c], ecx
mov edx, dword [ebp - 0x6e8]
shl edx, 4
mov dword [ebp - 0x798], edx
mov eax, dword [ebp - 0x69c]
mov dword [ebp - 0x79c], eax
movsd xmm0, qword [0xd75f60]
movsd qword [ebp - 0xfd4], xmm0
movsd xmm0, qword [0xd75e48]
movsd qword [ebp - 0xc5c], xmm0
movsd xmm0, qword [0xd75d38]
movsd qword [ebp - 0xb64], xmm0
movsd xmm0, qword [0xd75c00]
movsd qword [ebp - 0x187c], xmm0
movsd xmm0, qword [0xd75a78]
movsd qword [ebp - 0x9f0], xmm0
movsd xmm0, qword [ebp - 0xc5c]
addsd xmm0, qword [ebp - 0x9f0]
movsd qword [ebp - 0xc5c], xmm0
movsd xmm0, qword [ebp - 0xfd4]
subsd xmm0, qword [ebp - 0x9f0]
movsd qword [ebp - 0xfd4], xmm0
movsd xmm0, qword [ebp - 0xc5c]
addsd xmm0, qword [ebp - 0x9f0]
movsd qword [ebp - 0xc5c], xmm0
movsd xmm0, qword [ebp - 0xb64]
mulsd xmm0, qword [ebp - 0x9f0]
movsd qword [ebp - 0xb64], xmm0
movsd xmm0, qword [ebp - 0xc5c]
addsd xmm0, qword [ebp - 0x9f0]
movsd qword [ebp - 0xc5c], xmm0
movsd xmm0, qword [ebp - 0x9f0]
comisd xmm0, xmmword [ebp - 0xb64]
jbe 0x4072d9
movsd xmm0, qword [ebp - 0x9f0]
divsd xmm0, qword [ebp - 0xc5c]
movsd qword [ebp - 0x9f0], xmm0
movsd xmm0, qword [ebp - 0xb64]
subsd xmm0, qword [ebp - 0x9f0]
movsd qword [ebp - 0xb64], xmm0
movsd xmm0, qword [ebp - 0x187c]
subsd xmm0, qword [ebp - 0xfd4]
movsd qword [ebp - 0x187c], xmm0
movsd xmm0, qword [ebp - 0x9f0]
addsd xmm0, qword [ebp - 0xc5c]
movsd qword [ebp - 0x9f0], xmm0
movsd xmm0, qword [ebp - 0xb64]
divsd xmm0, qword [ebp - 0x9f0]
movsd qword [ebp - 0xb64], xmm0
jmp 0x407363
movsd xmm0, qword [ebp - 0xfd4]
addsd xmm0, qword [ebp - 0xb64]
movsd qword [ebp - 0xfd4], xmm0
movsd xmm0, qword [ebp - 0x9f0]
addsd xmm0, qword [ebp - 0xc5c]
movsd qword [ebp - 0x9f0], xmm0
movsd xmm0, qword [ebp - 0xb64]
subsd xmm0, qword [ebp - 0x9f0]
movsd qword [ebp - 0xb64], xmm0
movsd xmm0, qword [ebp - 0x9f0]
subsd xmm0, qword [ebp - 0xc5c]
movsd qword [ebp - 0x9f0], xmm0
movsd xmm0, qword [ebp - 0xb64]
addsd xmm0, qword [ebp - 0x9f0]
movsd qword [ebp - 0xb64], xmm0
mov ecx, dword [ebp - 0x798]
or ecx, dword [ebp - 0x79c]
mov dword [ebp - 0x7a0], ecx
mov dl, byte [ebp - 0x7a0]
mov byte [ebp - 0x14e], dl
movzx eax, byte [ebp - 0x143]
mov cl, byte [ebp + eax - 0x166c]
mov byte [ebp - 0x14c], cl
movzx edx, byte [ebp - 0x124]
movzx eax, byte [ebp + edx - 0x166c]
movzx ecx, byte [ebp - 0x134]
add ecx, eax
mov byte [ebp - 0x134], cl
mov dl, byte [ebp - 0x124]
add dl, 1
mov byte [ebp - 0x124], dl
movzx eax, byte [ebp - 0x134]
movzx ecx, byte [ebp - 0x143]
mov dl, byte [ebp + eax - 0x166c]
mov byte [ebp + ecx - 0x166c], dl
movzx eax, byte [ebp - 0x133]
movzx ecx, byte [ebp - 0x134]
mov dl, byte [ebp + eax - 0x166c]
mov byte [ebp + ecx - 0x166c], dl
movsd xmm0, qword [0xd761c0]
movsd qword [ebp - 0xbcc], xmm0
movsd xmm0, qword [0xd760c0]
movsd qword [ebp - 0x94c], xmm0
movsd xmm0, qword [0xd75ec0]
movsd qword [ebp - 0x95c], xmm0
movsd xmm0, qword [0xd75c50]
movsd qword [ebp - 0x748], xmm0
movsd xmm0, qword [ebp - 0x95c]
mulsd xmm0, qword [ebp - 0x748]
movsd qword [ebp - 0x95c], xmm0
movsd xmm0, qword [ebp - 0x94c]
mulsd xmm0, qword [ebp - 0x748]
movsd qword [ebp - 0x94c], xmm0
movsd xmm0, qword [ebp - 0xbcc]
subsd xmm0, qword [ebp - 0x748]
movsd qword [ebp - 0xbcc], xmm0
movsd xmm0, qword [ebp - 0x95c]
mulsd xmm0, qword [ebp - 0x748]
movsd qword [ebp - 0x95c], xmm0
movsd xmm0, qword [ebp - 0x95c]
comisd xmm0, xmmword [ebp - 0x748]
jbe 0x40751f
movsd xmm0, qword [ebp - 0x95c]
subsd xmm0, qword [ebp - 0x748]
movsd qword [ebp - 0x95c], xmm0
movsd xmm0, qword [ebp - 0x95c]
mulsd xmm0, qword [ebp - 0x748]
movsd qword [ebp - 0x95c], xmm0
movsd xmm0, qword [ebp - 0x95c]
mulsd xmm0, qword [ebp - 0x748]
movsd qword [ebp - 0x95c], xmm0
movsd xmm0, qword [ebp - 0x748]
mulsd xmm0, qword [ebp - 0xbcc]
movsd qword [ebp - 0x748], xmm0
movzx eax, byte [ebp - 0x124]
movzx ecx, byte [ebp - 0x133]
mov dl, byte [ebp + eax - 0x166c]
mov byte [ebp + ecx - 0x166c], dl
jmp 0x4076b3
movsd xmm0, qword [ebp - 0x95c]
mulsd xmm0, qword [ebp - 0x748]
movsd qword [ebp - 0x95c], xmm0
movsd xmm0, qword [ebp - 0x94c]
subsd xmm0, qword [ebp - 0x95c]
movsd qword [ebp - 0x94c], xmm0
movsd xmm0, qword [ebp - 0x748]
addsd xmm0, qword [ebp - 0xbcc]
movsd qword [ebp - 0x748], xmm0
movsd xmm0, qword [ebp - 0x748]
mulsd xmm0, qword [ebp - 0xbcc]
movsd qword [ebp - 0x748], xmm0
movsd xmm0, qword [ebp - 0x94c]
subsd xmm0, qword [ebp - 0x748]
movsd qword [ebp - 0x94c], xmm0
movsd xmm0, qword [ebp - 0x95c]
mulsd xmm0, qword [ebp - 0xbcc]
movsd qword [ebp - 0x95c], xmm0
movsd xmm0, qword [ebp - 0xbcc]
divsd xmm0, qword [ebp - 0x95c]
movsd qword [ebp - 0xbcc], xmm0
movsd xmm0, qword [ebp - 0x94c]
subsd xmm0, qword [ebp - 0x748]
movsd qword [ebp - 0x94c], xmm0
movsd xmm0, qword [ebp - 0x94c]
comisd xmm0, xmmword [ebp - 0x748]
jbe 0x407653
movsd xmm0, qword [ebp - 0x94c]
subsd xmm0, qword [ebp - 0x748]
movsd qword [ebp - 0x94c], xmm0
movsd xmm0, qword [ebp - 0x94c]
mulsd xmm0, qword [ebp - 0x748]
movsd qword [ebp - 0x94c], xmm0
movsd xmm0, qword [ebp - 0x94c]
divsd xmm0, qword [ebp - 0x748]
movsd qword [ebp - 0x94c], xmm0
movsd xmm0, qword [ebp - 0x94c]
subsd xmm0, qword [ebp - 0x748]
movsd qword [ebp - 0x94c], xmm0
jmp 0x4076b3
movsd xmm0, qword [ebp - 0xbcc]
addsd xmm0, qword [ebp - 0x94c]
movsd qword [ebp - 0xbcc], xmm0
movsd xmm0, qword [ebp - 0x94c]
addsd xmm0, qword [ebp - 0x95c]
movsd qword [ebp - 0x94c], xmm0
movsd xmm0, qword [ebp - 0x748]
addsd xmm0, qword [ebp - 0xbcc]
movsd qword [ebp - 0x748], xmm0
movsd xmm0, qword [ebp - 0x95c]
mulsd xmm0, qword [ebp - 0x748]
movsd qword [ebp - 0x95c], xmm0
movzx eax, byte [ebp - 0x124]
mov cl, byte [ebp - 0x14c]
mov byte [ebp + eax - 0x166c], cl
movzx edx, byte [ebp - 0x14c]
movzx eax, byte [ebp + edx - 0x166c]
movzx ecx, byte [ebp - 0x14d]
add ecx, eax
mov byte [ebp - 0x14d], cl
movzx edx, byte [ebp - 0x14e]
movzx eax, byte [ebp - 0x134]
movzx ecx, byte [ebp + eax - 0x166c]
movzx eax, byte [ebp - 0x124]
movzx eax, byte [ebp + eax - 0x166c]
add ecx, eax
and ecx, 0xff
movzx ecx, byte [ebp + ecx - 0x166c]
xor edx, ecx
movzx eax, byte [ebp - 0x133]
movzx ecx, byte [ebp + eax - 0x166c]
movzx eax, byte [ebp - 0x143]
movzx eax, byte [ebp + eax - 0x166c]
add ecx, eax
movzx eax, byte [ebp - 0x14d]
movzx eax, byte [ebp + eax - 0x166c]
add ecx, eax
and ecx, 0xff
movzx ecx, byte [ebp + ecx - 0x166c]
movzx eax, byte [ebp + ecx - 0x166c]
xor edx, eax
mov byte [ebp - 0x133], dl
mov cl, byte [ebp - 0x14e]
mov byte [ebp - 0x143], cl
mov dl, byte [ebp - 0x133]
mov byte [ebp - 0x17a], dl
cmp dword [ebp - 0x1bc], 0
jle 0x4077a2
movsx ax, byte [ebp - 0x17a]
mov ecx, dword [ebp - 0x1bc]
mov word [ebp + ecx*2 - 0x82], ax
jmp 0x4070b7
mov edx, dword [ebp - 0x434]
add edx, 1
mov dword [ebp - 0x434], edx
mov eax, dword [ebp - 0x1bc]
add eax, 1
mov dword [ebp - 0x1bc], eax
mov ecx, dword [ebp - 0x434]
add ecx, 1
mov dword [ebp - 0x434], ecx
mov edx, dword [ebp - 0x1bc]
shl edx, 1
mov dword [ebp - 0x78c], edx
mov eax, dword [ebp - 0x790]
add eax, dword [ebp - 0x78c]
movzx ecx, byte [eax]
mov dword [ebp - 0x6c0], ecx
mov dword [ebp - 0x6ec], 0x9c
mov edx, dword [ebp - 0x1bc]
lea eax, [edx + edx + 1]
mov dword [ebp - 0x794], eax
mov ecx, dword [ebp - 0x790]
add ecx, dword [ebp - 0x794]
movzx edx, byte [ecx]
mov dword [ebp - 0x6b8], edx
mov dword [ebp - 0x6b4], 0xa5
mov eax, dword [ebp - 0x6c0]
sub eax, dword [ebp - 0x6ec]
mov dword [ebp - 0x6e8], eax
mov ecx, dword [ebp - 0x6b8]
sub ecx, dword [ebp - 0x6b4]
mov dword [ebp - 0x69c], ecx
mov edx, dword [ebp - 0x6e8]
shl edx, 4
mov dword [ebp - 0x798], edx
mov eax, dword [ebp - 0x69c]
mov dword [ebp - 0x79c], eax
mov ecx, dword [ebp - 0x798]
or ecx, dword [ebp - 0x79c]
mov dword [ebp - 0x7a0], ecx
movss xmm0, dword [0xd76578]
movss dword [ebp - 0x55c], xmm0
movss xmm0, dword [0xd764d0]
movss dword [ebp - 0x38c], xmm0
movss xmm0, dword [0xd76420]
movss dword [ebp - 0x428], xmm0
movss xmm0, dword [0xd76378]
movss dword [ebp - 0x2e0], xmm0
movss xmm0, dword [0xd762b4]
movss dword [ebp - 0x3bc], xmm0
movss xmm0, dword [0xd761f4]
movss dword [ebp - 0x3a4], xmm0
movss xmm0, dword [ebp - 0x2e0]
mulss xmm0, dword [ebp - 0x3a4]
movss dword [ebp - 0x2e0], xmm0
movss xmm0, dword [ebp - 0x38c]
subss xmm0, dword [ebp - 0x3a4]
movss dword [ebp - 0x38c], xmm0
movss xmm0, dword [ebp - 0x55c]
subss xmm0, dword [ebp - 0x3a4]
movss dword [ebp - 0x55c], xmm0
movss xmm0, dword [ebp - 0x55c]
mulss xmm0, dword [ebp - 0x3a4]
movss dword [ebp - 0x55c], xmm0
movss xmm0, dword [ebp - 0x2e0]
subss xmm0, dword [ebp - 0x3a4]
movss dword [ebp - 0x2e0], xmm0
movss xmm0, dword [ebp - 0x55c]
mulss xmm0, dword [ebp - 0x3a4]
movss dword [ebp - 0x55c], xmm0
movss xmm0, dword [ebp - 0x3a4]
comiss xmm0, dword [ebp - 0x55c]
jbe 0x407be5
movss xmm0, dword [ebp - 0x428]
mulss xmm0, dword [ebp - 0x2e0]
movss dword [ebp - 0x428], xmm0
movss xmm0, dword [ebp - 0x2e0]
subss xmm0, dword [ebp - 0x3bc]
movss dword [ebp - 0x2e0], xmm0
movss xmm0, dword [ebp - 0x2e0]
addss xmm0, dword [ebp - 0x3bc]
movss dword [ebp - 0x2e0], xmm0
movss xmm0, dword [ebp - 0x3bc]
mulss xmm0, dword [ebp - 0x3a4]
movss dword [ebp - 0x3bc], xmm0
movss xmm0, dword [ebp - 0x55c]
subss xmm0, dword [ebp - 0x38c]
movss dword [ebp - 0x55c], xmm0
movss xmm0, dword [ebp - 0x428]
addss xmm0, dword [ebp - 0x2e0]
movss dword [ebp - 0x428], xmm0
movss xmm0, dword [ebp - 0x38c]
subss xmm0, dword [ebp - 0x428]
movss dword [ebp - 0x38c], xmm0
movss xmm0, dword [ebp - 0x3bc]
addss xmm0, dword [ebp - 0x3a4]
movss dword [ebp - 0x3bc], xmm0
movss xmm0, dword [ebp - 0x2e0]
addss xmm0, dword [ebp - 0x3bc]
movss dword [ebp - 0x2e0], xmm0
movss xmm0, dword [ebp - 0x428]
mulss xmm0, dword [ebp - 0x2e0]
movss dword [ebp - 0x428], xmm0
movss xmm0, dword [ebp - 0x38c]
addss xmm0, dword [ebp - 0x428]
movss dword [ebp - 0x38c], xmm0
movss xmm0, dword [ebp - 0x3bc]
addss xmm0, dword [ebp - 0x3a4]
movss dword [ebp - 0x3bc], xmm0
movss xmm0, dword [ebp - 0x3a4]
comiss xmm0, dword [ebp - 0x38c]
jbe 0x407b50
movss xmm0, dword [ebp - 0x3a4]
divss xmm0, dword [ebp - 0x55c]
movss dword [ebp - 0x3a4], xmm0
movss xmm0, dword [ebp - 0x55c]
subss xmm0, dword [ebp - 0x38c]
movss dword [ebp - 0x55c], xmm0
movss xmm0, dword [ebp - 0x3a4]
divss xmm0, dword [ebp - 0x55c]
movss dword [ebp - 0x3a4], xmm0
movss xmm0, dword [ebp - 0x2e0]
mulss xmm0, dword [ebp - 0x3bc]
movss dword [ebp - 0x2e0], xmm0
movss xmm0, dword [ebp - 0x3bc]
subss xmm0, dword [ebp - 0x3a4]
movss dword [ebp - 0x3bc], xmm0
movss xmm0, dword [ebp - 0x3bc]
subss xmm0, dword [ebp - 0x3a4]
movss dword [ebp - 0x3bc], xmm0
jmp 0x407be0
movss xmm0, dword [ebp - 0x428]
mulss xmm0, dword [ebp - 0x3bc]
movss dword [ebp - 0x428], xmm0
movss xmm0, dword [ebp - 0x428]
subss xmm0, dword [ebp - 0x3bc]
movss dword [ebp - 0x428], xmm0
movss xmm0, dword [ebp - 0x3a4]
addss xmm0, dword [ebp - 0x38c]
movss dword [ebp - 0x3a4], xmm0
movss xmm0, dword [ebp - 0x38c]
addss xmm0, dword [ebp - 0x2e0]
movss dword [ebp - 0x38c], xmm0
movss xmm0, dword [ebp - 0x38c]
mulss xmm0, dword [ebp - 0x2e0]
movss dword [ebp - 0x38c], xmm0
movss xmm0, dword [ebp - 0x55c]
addss xmm0, dword [ebp - 0x38c]
movss dword [ebp - 0x55c], xmm0
movss xmm0, dword [ebp - 0x2e0]
addss xmm0, dword [ebp - 0x3bc]
movss dword [ebp - 0x2e0], xmm0
movss xmm0, dword [ebp - 0x38c]
subss xmm0, dword [ebp - 0x428]
movss dword [ebp - 0x38c], xmm0
movss xmm0, dword [ebp - 0x2e0]
subss xmm0, dword [ebp - 0x3bc]
movss dword [ebp - 0x2e0], xmm0
movss xmm0, dword [ebp - 0x38c]
addss xmm0, dword [ebp - 0x428]
movss dword [ebp - 0x38c], xmm0
movss xmm0, dword [ebp - 0x428]
mulss xmm0, dword [ebp - 0x2e0]
movss dword [ebp - 0x428], xmm0
mov dl, byte [ebp - 0x7a0]
mov byte [ebp - 0x14e], dl
mov dword [ebp - 0xc8c], 0
jmp 0x40913b
mov eax, dword [ebp - 0xc8c]
add eax, 1
mov dword [ebp - 0xc8c], eax
cmp dword [ebp - 0xc8c], 9
jge 0x409171
mov ecx, dword [ebp - 0xc8c]
shl ecx, 1
mov dword [ebp - 0xfb4], ecx
cmp dword [ebp - 0xfb4], 0x12
jae 0x40915d
jmp 0x409162
call fcn.00cfa6c5
xor edx, edx
mov eax, dword [ebp - 0xfb4]
mov word [ebp + eax - 0x80], dx
jmp 0x40912c