Function at 0x55ff80
Capabilities:
Create thread
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x74
mov dword [ebp - 0x30], 0x643ee
mov dword [ebp - 0x14], 0x547d0
mov dword [ebp - 8], 0x901cf
mov dword [ebp - 0x54], 0xc904f
mov dword [ebp - 0x1c], 0x17915
mov dword [ebp - 4], 0x3f453
mov dword [ebp - 0x28], 0x58a03
mov dword [ebp - 0xc], 0x35322
mov dword [ebp - 0x2c], 0xd8e0
mov dword [ebp - 0x4c], 0x3eeda
mov dword [ebp - 0x44], 0xd6999
mov dword [ebp - 0x20], 0x8742a
mov dword [ebp - 0x48], 0xecc63
mov dword [ebp - 0x40], 0x641bb
mov dword [ebp - 0x58], 0x5ba5a
mov dword [ebp - 0x38], 0xb51f6
mov dword [ebp - 0x3c], 0x5371
mov dword [ebp - 0x34], 0x7a710
mov dword [ebp - 0x50], 0x7aca6
mov dword [ebp - 0x10], 0x569f9
mov dword [ebp - 0x18], 0x41cf4
mov dword [ebp - 0x24], 0x90dea
mov eax, dword [ebp - 0x34]
or eax, 0xba892
mov dword [ebp - 0x34], eax
mov ecx, dword [ebp - 0x30]
sub ecx, 0xeb3d7
mov dword [ebp - 0x30], ecx
mov edx, dword [ebp - 0x30]
or edx, 0xd1b66
mov dword [ebp - 0x30], edx
mov eax, dword [ebp - 4]
xor eax, 0x38868
mov dword [ebp - 4], eax
cmp dword [ebp - 0x44], 0x7b768
jge 0x5601b8
mov ecx, dword [ebp - 0x1c]
or ecx, dword [ebp - 0x30]
mov dword [ebp - 0x1c], ecx
mov edx, dword [ebp - 0x30]
xor edx, dword [ebp - 0x24]
mov dword [ebp - 0x30], edx
mov eax, dword [ebp - 0x54]
xor eax, dword [ebp - 8]
mov dword [ebp - 0x54], eax
mov ecx, dword [ebp - 0x50]
add ecx, 0x9700c
mov dword [ebp - 0x50], ecx
cmp dword [ebp - 8], 0x78ce2
jne 0x5601b8
mov edx, dword [ebp - 0x40]
or edx, 0xa95f
mov dword [ebp - 0x40], edx
mov eax, dword [ebp - 0x58]
xor eax, 0x6ed42
mov dword [ebp - 0x58], eax
mov ecx, dword [ebp - 0x40]
and ecx, dword [ebp - 0x20]
mov dword [ebp - 0x40], ecx
mov edx, dword [ebp - 0x40]
or edx, dword [ebp - 0x24]
mov dword [ebp - 0x40], edx
mov eax, dword [ebp - 0x18]
and eax, dword [ebp - 0x50]
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 4]
sub ecx, dword [ebp - 4]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 0x30]
xor edx, 0x4c289
mov dword [ebp - 0x30], edx
cmp dword [ebp - 4], 0x71612
jge 0x5601b8
mov eax, dword [ebp - 0x18]
add eax, 0xb7e39
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x1c]
add ecx, 0x36619
mov dword [ebp - 0x1c], ecx
mov edx, dword [ebp - 0x54]
xor edx, 0x71023
mov dword [ebp - 0x54], edx
mov eax, dword [ebp - 4]
or eax, 0xd85ed
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 0x20]
and ecx, dword [ebp - 0x28]
mov dword [ebp - 0x20], ecx
mov edx, dword [ebp - 0x40]
xor edx, dword [ebp - 0x58]
mov dword [ebp - 0x40], edx
cmp dword [ebp - 0xc], 0x55278
jge 0x5601b8
mov eax, dword [ebp - 0x34]
xor eax, dword [ebp - 0x40]
mov dword [ebp - 0x34], eax
mov ecx, dword [ebp - 4]
add ecx, dword [ebp - 0x10]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 0x18]
sub edx, dword [ebp - 0x2c]
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x24]
or eax, 0xb4eb4
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x28], 0x269c1
jge 0x5601b8
mov ecx, dword [ebp - 0x30]
add ecx, 0x33e22
mov dword [ebp - 0x30], ecx
mov edx, dword [ebp - 0x1c]
sub edx, dword [ebp - 0x20]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 8]
and eax, dword [ebp - 0x50]
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 0x40]
xor ecx, dword [ebp - 0x10]
mov dword [ebp - 0x40], ecx
mov edx, dword [ebp - 0xc]
add edx, 0x70ba2
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 0x1c]
add eax, 0x582a8
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x28]
sub ecx, dword [ebp - 0x14]
mov dword [ebp - 0x28], ecx
mov edx, dword [ebp - 0x2c]
sub edx, dword [ebp - 0x20]
mov dword [ebp - 0x2c], edx
mov eax, dword [ebp - 0x18]
add eax, dword [ebp - 0x58]
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x10]
add ecx, 1
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x2c]
and edx, dword [ebp - 0x20]
mov dword [ebp - 0x2c], edx
mov eax, dword [ebp - 0x58]
and eax, 0x931f7
mov dword [ebp - 0x58], eax
mov ecx, dword [ebp - 0x18]
and ecx, dword [ebp - 0x28]
mov dword [ebp - 0x18], ecx
mov edx, dword [ebp - 0x18]
xor edx, 0xa3f9c
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x54]
add eax, 1
mov dword [ebp - 0x54], eax
cmp dword [ebp - 0x10], 0x569fa
jl 0x560020
mov ecx, dword [ebp - 0xc]
and ecx, dword [ebp - 0x2c]
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 0x44]
xor edx, 0x90102
mov dword [ebp - 0x44], edx
mov eax, dword [ebp - 0x38]
or eax, 0xdb205
mov dword [ebp - 0x38], eax
mov ecx, dword [ebp - 0x34]
xor ecx, 0x45b6
mov dword [ebp - 0x34], ecx
cmp dword [ebp - 0x3c], 0x3325b
je 0x560252
mov edx, dword [ebp - 0x30]
sub edx, dword [ebp - 0x24]
mov dword [ebp - 0x30], edx
mov eax, dword [ebp - 0x20]
sub eax, 0x1e407
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x24]
add ecx, 1
mov dword [ebp - 0x24], ecx
mov edx, dword [ebp - 0x18]
add edx, 1
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 8]
add eax, dword [ebp - 0x50]
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 0x54]
add ecx, dword [ebp - 0x48]
mov dword [ebp - 0x54], ecx
mov edx, dword [ebp - 0x48]
and edx, 0x3a3fc
mov dword [ebp - 0x48], edx
mov eax, dword [ebp - 0x1c]
xor eax, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x28]
sub ecx, 0x85cfe
mov dword [ebp - 0x28], ecx
mov edx, dword [ebp - 0xc]
and edx, 0x84552
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 0x2c]
or eax, 0x46b71
mov dword [ebp - 0x2c], eax
mov ecx, dword [ebp - 4]
and ecx, dword [ebp - 0x4c]
mov dword [ebp - 4], ecx
cmp dword [ebp - 0x58], 0xaf5be
jne 0x560363
mov edx, dword [ebp - 0x58]
or edx, dword [ebp - 0xc]
mov dword [ebp - 0x58], edx
mov eax, dword [ebp - 0xc]
sub eax, 0x675e8
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0x1c]
or ecx, 0xb7fc6
mov dword [ebp - 0x1c], ecx
mov edx, dword [ebp - 0x50]
or edx, dword [ebp - 0x24]
mov dword [ebp - 0x50], edx
mov eax, dword [ebp - 0x58]
and eax, dword [ebp - 4]
mov dword [ebp - 0x58], eax
mov ecx, dword [ebp - 0x34]
and ecx, 0x88397
mov dword [ebp - 0x34], ecx
cmp dword [ebp - 0x10], 0xdca94
je 0x560363
mov edx, dword [ebp - 0x10]
add edx, dword [ebp - 4]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x34]
or eax, dword [ebp - 0x30]
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x40], 0x279ec
jle 0x560363
mov ecx, dword [ebp - 0x38]
add ecx, dword [ebp - 0x40]
mov dword [ebp - 0x38], ecx
mov edx, dword [ebp - 0x44]
and edx, dword [ebp - 0x38]
mov dword [ebp - 0x44], edx
mov eax, dword [ebp - 4]
sub eax, 0xca2ee
mov dword [ebp - 4], eax
cmp dword [ebp - 0x20], 0x13387
jne 0x560363
mov ecx, dword [ebp - 0x2c]
and ecx, dword [ebp - 0x30]
mov dword [ebp - 0x2c], ecx
mov edx, dword [ebp - 0x34]
or edx, 0x26bad
mov dword [ebp - 0x34], edx
mov eax, dword [ebp - 4]
and eax, 0x63754
mov dword [ebp - 4], eax
cmp dword [ebp - 0x18], 0xe379d
jl 0x560200
mov ecx, dword [ebp - 0x1c]
and ecx, dword [ebp - 0x54]
mov dword [ebp - 0x1c], ecx
mov edx, dword [ebp - 0x20]
and edx, 0x45837
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 0x30]
add eax, 0x41e69
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp - 8]
xor ecx, dword [ebp - 0x50]
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 0x40]
add edx, dword [ebp - 0xc]
mov dword [ebp - 0x40], edx
call fcn.0041b960
mov eax, dword [ebp - 0x14]
sub eax, 0x22e0e
push eax
mov ecx, dword [ebp - 0x1c]
add ecx, 0x2a1ac
push ecx
mov edx, dword [ebp - 0x1c]
add edx, 0x61b71
push edx
mov eax, dword [ebp - 0x2c]
add eax, 0x735e3
push eax
call fcn.0043a3e0
add esp, 0x10
mov ecx, dword [ebp - 0x40]
or ecx, dword [ebp - 0x10]
mov dword [ebp - 0x40], ecx
mov edx, dword [ebp - 0x20]
and edx, 0xd30c1
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 0x28]
add eax, dword [ebp - 0xc]
mov dword [ebp - 0x28], eax
mov ecx, dword [ebp - 0x20]
add ecx, 0x19d4d
mov dword [ebp - 0x20], ecx
mov edx, dword [ebp - 4]
add edx, 1
mov dword [ebp - 4], edx
mov eax, dword [ebp - 0x48]
sub eax, dword [ebp - 0x44]
mov dword [ebp - 0x48], eax
mov ecx, dword [ebp - 0x28]
and ecx, dword [ebp - 0x3c]
mov dword [ebp - 0x28], ecx
mov edx, dword [ebp - 0x14]
or edx, 0xea398
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 0x58]
and eax, dword [ebp - 0x2c]
mov dword [ebp - 0x58], eax
mov ecx, dword [ebp - 0x54]
add ecx, dword [ebp - 0x30]
mov dword [ebp - 0x54], ecx
mov edx, dword [ebp - 0x44]
or edx, 0x50877
mov dword [ebp - 0x44], edx
cmp dword [ebp - 4], 0x6c1b
jl 0x5603d5
mov eax, dword [ebp - 8]
sub eax, 0x623f7
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 0x50]
add ecx, 0x558f4
mov dword [ebp - 0x50], ecx
mov edx, dword [ebp - 0x24]
add edx, 0xd7668
mov dword [ebp - 0x24], edx
mov eax, dword [ebp - 0x18]
add eax, dword [ebp - 0x58]
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x14]
sub ecx, dword [ebp - 0xc]
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 8]
sub edx, dword [ebp - 0x14]
mov dword [ebp - 8], edx
mov dword [ebp - 0x5c], 0
jmp 0x56049d
mov eax, dword [ebp - 0x5c]
add eax, 1
mov dword [ebp - 0x5c], eax
mov ecx, dword [ebp - 4]
sub ecx, 0x6c1a
cmp dword [ebp - 0x5c], ecx
jge 0x5605a4
mov edx, dword [ebp - 0x54]
or edx, dword [ebp - 0x38]
mov dword [ebp - 0x54], edx
mov eax, dword [ebp - 0x1c]
sub eax, 0xb95a0
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x48]
and ecx, 0x965ec
mov dword [ebp - 0x48], ecx
mov edx, dword [ebp - 0x10]
or edx, dword [ebp - 0x58]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x3c]
sub eax, 0x77d1d
mov dword [ebp - 0x3c], eax
cmp dword [ebp - 0x44], 0xcb6f9
jne 0x56059f
mov ecx, dword [ebp - 0x44]
sub ecx, 0xc0a4d
mov dword [ebp - 0x44], ecx
mov edx, dword [ebp - 0x10]
and edx, 0xe8111
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x4c]
sub eax, dword [ebp - 0xc]
mov dword [ebp - 0x4c], eax
mov ecx, dword [ebp - 0x58]
and ecx, 0x70901
mov dword [ebp - 0x58], ecx
mov edx, dword [ebp - 0x48]
xor edx, dword [ebp - 0x2c]
mov dword [ebp - 0x48], edx
mov eax, dword [ebp - 0x2c]
and eax, 0x10245
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x38], 0xe1bab
je 0x56059f
mov ecx, dword [ebp - 0x1c]
and ecx, dword [ebp - 4]
mov dword [ebp - 0x1c], ecx
mov edx, dword [ebp - 0x3c]
sub edx, dword [ebp - 0x14]
mov dword [ebp - 0x3c], edx
mov eax, dword [ebp - 0x40]
add eax, dword [ebp - 0x48]
mov dword [ebp - 0x40], eax
mov ecx, dword [ebp - 0x54]
or ecx, 0xedabe
mov dword [ebp - 0x54], ecx
cmp dword [ebp - 0x44], 0x1ff73
jle 0x56059f
mov edx, dword [ebp - 0x3c]
xor edx, dword [ebp - 8]
mov dword [ebp - 0x3c], edx
mov eax, dword [ebp - 0x2c]
add eax, 0xdb2c5
mov dword [ebp - 0x2c], eax
mov ecx, dword [ebp - 0x4c]
xor ecx, 0xdac8
mov dword [ebp - 0x4c], ecx
mov edx, dword [ebp - 0x3c]
xor edx, 0x3fa0a
mov dword [ebp - 0x3c], edx
mov eax, dword [ebp - 0x2c]
sub eax, dword [ebp - 8]
mov dword [ebp - 0x2c], eax
jmp 0x560494
mov ecx, dword [ebp - 0x40]
xor ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x40], ecx
mov edx, dword [ebp - 8]
and edx, 0x8fda
mov dword [ebp - 8], edx
mov eax, dword [ebp - 0x28]
and eax, dword [ebp - 0x58]
mov dword [ebp - 0x28], eax
mov ecx, dword [ebp - 4]
sub ecx, dword [ebp - 0x44]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 0x18]
and edx, 0x4f4fd
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x38]
add eax, 1
mov dword [ebp - 0x38], eax
mov ecx, dword [ebp - 0x14]
add ecx, 1
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0x38]
xor edx, dword [ebp - 0x50]
mov dword [ebp - 0x38], edx
mov eax, dword [ebp - 0xc]
add eax, 0x8e684
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0x18]
sub ecx, dword [ebp - 0x40]
mov dword [ebp - 0x18], ecx
mov edx, dword [ebp - 0x54]
sub edx, 1
mov dword [ebp - 0x54], edx
cmp dword [ebp - 0x14], 0xfa7d9
jl 0x5605a4
mov eax, dword [ebp - 0x1c]
or eax, 0x7930b
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x30]
xor ecx, 0xe3044
mov dword [ebp - 0x30], ecx
mov edx, dword [ebp - 0x4c]
and edx, dword [ebp - 0x1c]
mov dword [ebp - 0x4c], edx
mov eax, dword [ebp - 0x14]
add eax, 0x93097
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 4]
add ecx, dword [ebp - 0x3c]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 0x2c]
add edx, dword [ebp - 8]
mov dword [ebp - 0x2c], edx
cmp dword [ebp - 0x3c], 0x94649
jle 0x560836
mov eax, dword [ebp - 8]
add eax, 0xa2ca8
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 8]
xor ecx, 0x66b76
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 0x58]
or edx, 0x3603c
mov dword [ebp - 0x58], edx
mov eax, dword [ebp - 0x34]
sub eax, dword [ebp - 4]
mov dword [ebp - 0x34], eax
mov ecx, dword [ebp - 0x10]
or ecx, dword [ebp - 0x54]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 4]
or edx, 0xae285
mov dword [ebp - 4], edx
cmp dword [ebp - 0x44], 0xd2752
jne 0x560836
mov eax, dword [ebp - 8]
sub eax, dword [ebp - 0x40]
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 0x38]
and ecx, dword [ebp - 0xc]
mov dword [ebp - 0x38], ecx
mov edx, dword [ebp - 0xc]
xor edx, 0x2a613
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 0x44]
sub eax, dword [ebp - 0x50]
mov dword [ebp - 0x44], eax
cmp dword [ebp - 4], 0x5caa6
je 0x560836
mov ecx, dword [ebp - 0x50]
add ecx, dword [ebp - 0x54]
mov dword [ebp - 0x50], ecx
mov edx, dword [ebp - 0x4c]
xor edx, dword [ebp - 0x20]
mov dword [ebp - 0x4c], edx
mov eax, dword [ebp - 0x4c]
and eax, 0x9e8cd
mov dword [ebp - 0x4c], eax
mov ecx, dword [ebp - 0xc]
or ecx, dword [ebp - 0x20]
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 0x4c]
add edx, 0x4c8d9
mov dword [ebp - 0x4c], edx
mov eax, dword [ebp - 4]
sub eax, dword [ebp - 0x24]
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 0x24]
add ecx, 0x195c1
mov dword [ebp - 0x24], ecx
mov edx, dword [ebp - 0x28]
add edx, 0x17193
mov dword [ebp - 0x28], edx
mov eax, dword [ebp - 0x28]
add eax, 0x1608f
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x28], 0x2520b
jle 0x560836
mov ecx, dword [ebp - 8]
or ecx, 0x5d12d
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 0x58]
or edx, 0x50e7b
mov dword [ebp - 0x58], edx
mov eax, dword [ebp - 0x48]
xor eax, 0xe40aa
mov dword [ebp - 0x48], eax
mov ecx, dword [ebp - 0xc]
xor ecx, dword [ebp - 0x1c]
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 0x4c]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x4c], edx
cmp dword [ebp - 0x24], 0xbceda
jne 0x560836
mov eax, dword [ebp - 0xc]
and eax, dword [ebp - 0x2c]
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0x14]
or ecx, dword [ebp - 0x28]
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0x30]
or edx, 0x92547
mov dword [ebp - 0x30], edx
cmp dword [ebp - 0x38], 0x480c9
jge 0x560836
mov eax, dword [ebp - 0x2c]
sub eax, dword [ebp - 0xc]
mov dword [ebp - 0x2c], eax
mov ecx, dword [ebp - 0x24]
add ecx, 0xa83a8
mov dword [ebp - 0x24], ecx
mov edx, dword [ebp - 0x3c]
add edx, dword [ebp - 0x18]
mov dword [ebp - 0x3c], edx
mov eax, dword [ebp - 0x50]
xor eax, 0x2b850
mov dword [ebp - 0x50], eax
mov ecx, dword [ebp - 0x54]
or ecx, 0xd9a3e
mov dword [ebp - 0x54], ecx
mov edx, dword [ebp - 0x34]
sub edx, 0xd6665
mov dword [ebp - 0x34], edx
cmp dword [ebp - 0x2c], 0x33d4a
jne 0x560836
mov eax, dword [ebp - 0x54]
add eax, 0x63acb
mov dword [ebp - 0x54], eax
mov ecx, dword [ebp - 0x2c]
or ecx, 0xf206d
mov dword [ebp - 0x2c], ecx
mov edx, dword [ebp - 0x2c]
sub edx, dword [ebp - 0x58]
mov dword [ebp - 0x2c], edx
mov eax, dword [ebp - 0x48]
sub eax, 0xe9da6
mov dword [ebp - 0x48], eax
mov ecx, dword [ebp - 0x38]
add ecx, 1
mov dword [ebp - 0x38], ecx
cmp dword [ebp - 0x14], 0x18d871
jge 0x5609d4
mov edx, dword [ebp - 0x2c]
xor edx, dword [ebp - 0x40]
mov dword [ebp - 0x2c], edx
mov eax, dword [ebp - 0xc]
or eax, dword [ebp - 0x14]
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0x40]
xor ecx, 0x3be68
mov dword [ebp - 0x40], ecx
mov edx, dword [ebp - 0x1c]
and edx, 0xd1df7
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x28]
and eax, 0xd18d5
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x24], 0xb3fa7
je 0x5608f3
mov ecx, dword [ebp - 0x28]
add ecx, dword [ebp - 4]
mov dword [ebp - 0x28], ecx
mov edx, dword [ebp - 0x2c]
sub edx, 0xcc802
mov dword [ebp - 0x2c], edx
mov eax, dword [ebp - 0x58]
or eax, 0x8bfe5
mov dword [ebp - 0x58], eax
mov ecx, dword [ebp - 0x20]
or ecx, dword [ebp - 0x24]
mov dword [ebp - 0x20], ecx
mov edx, dword [ebp - 0x40]
sub edx, 0x4a62
mov dword [ebp - 0x40], edx
cmp dword [ebp - 0x48], 0x44f2f
jge 0x5608f3
mov eax, dword [ebp - 0x24]
add eax, 0x51be3
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x24]
or ecx, 0x8b55b
mov dword [ebp - 0x24], ecx
mov edx, dword [ebp - 0x28]
and edx, dword [ebp - 0x38]
mov dword [ebp - 0x28], edx
mov eax, dword [ebp - 0x24]
add eax, 0x6d113
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x4c]
add ecx, dword [ebp - 0x4c]
mov dword [ebp - 0x4c], ecx
mov edx, dword [ebp - 0x14]
add edx, 1
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 0x44]
add eax, dword [ebp - 0x2c]
mov dword [ebp - 0x44], eax
mov ecx, dword [ebp - 0x34]
or ecx, dword [ebp - 0x14]
mov dword [ebp - 0x34], ecx
mov edx, dword [ebp - 0xc]
sub edx, dword [ebp - 0x34]
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 0x20]
xor eax, 0xd3eec
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x48]
and ecx, dword [ebp - 0x34]
mov dword [ebp - 0x48], ecx
mov edx, dword [ebp - 0x18]
and edx, 0x19e67
mov dword [ebp - 0x18], edx
cmp dword [ebp - 0x1c], 0x72e14
je 0x5609cf
mov eax, dword [ebp - 0xc]
sub eax, dword [ebp - 0x54]
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 8]
and ecx, 0xe89bb
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 8]
add edx, 0xe8ecd
mov dword [ebp - 8], edx
mov eax, dword [ebp - 0x3c]
add eax, 0x4037b
mov dword [ebp - 0x3c], eax
mov ecx, dword [ebp - 0x18]
sub ecx, 0x9d70f
mov dword [ebp - 0x18], ecx
mov edx, dword [ebp - 0x28]
sub edx, dword [ebp - 0x18]
mov dword [ebp - 0x28], edx
mov eax, dword [ebp - 0x48]
sub eax, 0x7c48d
mov dword [ebp - 0x48], eax
mov ecx, dword [ebp - 0x3c]
add ecx, dword [ebp - 0x24]
mov dword [ebp - 0x3c], ecx
cmp dword [ebp - 0x10], 0x907d1
jge 0x5609cf
mov edx, dword [ebp - 0x1c]
add edx, dword [ebp - 0x3c]
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0xc]
sub eax, dword [ebp - 0x2c]
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0x38]
xor ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x38], ecx
mov edx, dword [ebp - 0x44]
sub edx, dword [ebp - 0x34]
mov dword [ebp - 0x44], edx
mov eax, dword [ebp - 0x48]
or eax, dword [ebp - 0x24]
mov dword [ebp - 0x48], eax
jmp 0x560836
mov dword [ebp - 0x60], 0
jmp 0x5609e6
mov ecx, dword [ebp - 0x60]
add ecx, 1
mov dword [ebp - 0x60], ecx
mov edx, dword [ebp - 0x3c]
sub edx, 0x135e21
cmp dword [ebp - 0x60], edx
jge 0x560a51
mov eax, dword [ebp - 0x24]
add eax, dword [ebp - 0x44]
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 4]
add ecx, dword [ebp - 0x24]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 0x20]
xor edx, dword [ebp - 0x18]
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 0x28]
or eax, 0x94908
mov dword [ebp - 0x28], eax
mov ecx, dword [ebp - 0x24]
sub ecx, 0xc376e
mov dword [ebp - 0x24], ecx
mov edx, dword [ebp - 0x30]
xor edx, dword [ebp - 0x20]
mov dword [ebp - 0x30], edx
mov eax, dword [ebp - 0x58]
or eax, 0x52973
mov dword [ebp - 0x58], eax
mov ecx, dword [ebp - 0x28]
sub ecx, 0x2043
mov dword [ebp - 0x28], ecx
mov edx, dword [ebp - 0x14]
add edx, 1
mov dword [ebp - 0x14], edx
jmp 0x5609dd
mov dword [ebp - 0x64], 0
jmp 0x560a63
mov eax, dword [ebp - 0x64]
add eax, 1
mov dword [ebp - 0x64], eax
mov ecx, dword [ebp - 0x14]
sub ecx, 0x18d871
cmp dword [ebp - 0x64], ecx
jge 0x560b0a
mov edx, dword [ebp - 0x38]
xor edx, 0xc1484
mov dword [ebp - 0x38], edx
mov eax, dword [ebp - 0x20]
xor eax, 0x4111b
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x10]
and ecx, dword [ebp - 0x54]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x1c]
and edx, 0x31088
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 8]
add eax, 0xbcc00
mov dword [ebp - 8], eax
cmp dword [ebp - 0x50], 0xd7a95
je 0x560b05
mov ecx, dword [ebp - 0x18]
and ecx, dword [ebp - 0x54]
mov dword [ebp - 0x18], ecx
mov edx, dword [ebp - 0xc]
or edx, dword [ebp - 0x24]
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 0x44]
and eax, 0x63645
mov dword [ebp - 0x44], eax
mov ecx, dword [ebp - 0x58]
sub ecx, dword [ebp - 4]
mov dword [ebp - 0x58], ecx
mov edx, dword [ebp - 0x18]
sub edx, 0x5afa5
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x44]
xor eax, dword [ebp - 0x30]
mov dword [ebp - 0x44], eax
mov ecx, dword [ebp - 0x24]
or ecx, 0xb442
mov dword [ebp - 0x24], ecx
mov edx, dword [ebp - 0x4c]
sub edx, 1
mov dword [ebp - 0x4c], edx
jmp 0x560a5a
mov eax, dword [ebp - 0xc]
add eax, 0x22c0c
push eax
mov ecx, dword [ebp - 0xc]
add ecx, 0x76a1e
push ecx
call fcn.00433850
add esp, 8
cmp dword [ebp - 0x58], 0x33b9c3
jge 0x560ec8
mov edx, dword [ebp - 0x24]
xor edx, dword [ebp - 0x38]
mov dword [ebp - 0x24], edx
mov eax, dword [ebp - 0x40]
and eax, 0xd54d0
mov dword [ebp - 0x40], eax
mov ecx, dword [ebp - 0x20]
and ecx, dword [ebp - 0x38]
mov dword [ebp - 0x20], ecx
cmp dword [ebp - 0x20], 0x5f797
jge 0x560cb8
mov edx, dword [ebp - 0x24]
add edx, dword [ebp - 0x48]
mov dword [ebp - 0x24], edx
mov eax, dword [ebp - 4]
and eax, dword [ebp - 0x4c]
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 0x2c]
xor ecx, dword [ebp - 0x18]
mov dword [ebp - 0x2c], ecx
mov edx, dword [ebp - 0x38]
and edx, dword [ebp - 0x2c]
mov dword [ebp - 0x38], edx
cmp dword [ebp - 0x3c], 0x87c7b
jge 0x560cb8
mov eax, dword [ebp - 0x38]
or eax, 0xcada3
mov dword [ebp - 0x38], eax
mov ecx, dword [ebp - 0x18]
add ecx, 0x68326
mov dword [ebp - 0x18], ecx
mov edx, dword [ebp - 0x10]
sub edx, 0x556cf
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x3c]
sub eax, 0x192fa
mov dword [ebp - 0x3c], eax
mov ecx, dword [ebp - 0x3c]
or ecx, dword [ebp - 0x34]
mov dword [ebp - 0x3c], ecx
mov edx, dword [ebp - 4]
add edx, 0xf35cd
mov dword [ebp - 4], edx
mov eax, dword [ebp - 0x48]
xor eax, dword [ebp - 0x44]
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x28], 0xb71b1
jge 0x560cb8
mov ecx, dword [ebp - 0x14]
xor ecx, 0xab59
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0x34]
sub edx, 0x9d737
mov dword [ebp - 0x34], edx
mov eax, dword [ebp - 0x38]
add eax, 0xbbf39
mov dword [ebp - 0x38], eax
mov ecx, dword [ebp - 0x30]
xor ecx, dword [ebp - 0x10]
mov dword [ebp - 0x30], ecx
cmp dword [ebp - 0x20], 0xf115d
jne 0x560cb8
mov edx, dword [ebp - 0x20]
add edx, dword [ebp - 0x2c]
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 0x40]
sub eax, dword [ebp - 0x18]
mov dword [ebp - 0x40], eax
mov ecx, dword [ebp - 0x34]
or ecx, dword [ebp - 8]
mov dword [ebp - 0x34], ecx
mov edx, dword [ebp - 0xc]
or edx, 0xe372a
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 8]
or eax, dword [ebp - 0x44]
mov dword [ebp - 8], eax
cmp dword [ebp - 0x4c], 0x69936
jne 0x560cb8
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x1c], ecx
mov edx, dword [ebp - 0x34]
and edx, 0x58df3
mov dword [ebp - 0x34], edx
mov eax, dword [ebp - 4]
sub eax, dword [ebp - 0x28]
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 0x3c]
add ecx, dword [ebp - 0x14]
mov dword [ebp - 0x3c], ecx
cmp dword [ebp - 0x50], 0x9eb20
je 0x560cb8
mov edx, dword [ebp - 0x3c]
or edx, 0x40357
mov dword [ebp - 0x3c], edx
mov eax, dword [ebp - 0x40]
sub eax, dword [ebp - 0x4c]
mov dword [ebp - 0x40], eax
mov ecx, dword [ebp - 0x2c]
or ecx, dword [ebp - 0x40]
mov dword [ebp - 0x2c], ecx
mov edx, dword [ebp - 0x30]
or edx, dword [ebp - 0x20]
mov dword [ebp - 0x30], edx
mov eax, dword [ebp - 4]
add eax, 1
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 0x58]
add ecx, 1
mov dword [ebp - 0x58], ecx
mov edx, dword [ebp - 0x20]
or edx, 0xad97a
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 0x48]
and eax, 0x3ad3d
mov dword [ebp - 0x48], eax
mov ecx, dword [ebp - 0x4c]
xor ecx, dword [ebp - 0x24]
mov dword [ebp - 0x4c], ecx
mov edx, dword [ebp - 0x1c]
xor edx, 0x77f72
mov dword [ebp - 0x1c], edx
cmp dword [ebp - 0x44], 0x6ab9b
jge 0x560ec3
mov eax, dword [ebp - 0x48]
add eax, dword [ebp - 0x34]
mov dword [ebp - 0x48], eax
mov ecx, dword [ebp - 0x40]
sub ecx, 0x97478
mov dword [ebp - 0x40], ecx
mov edx, dword [ebp - 0x18]
and edx, dword [ebp - 4]
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x48]
xor eax, dword [ebp - 0x30]
mov dword [ebp - 0x48], eax
cmp dword [ebp - 0x54], 0xcc052
jne 0x560ec3
mov ecx, dword [ebp - 0x48]
xor ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x48], ecx
mov edx, dword [ebp - 0x48]
xor edx, 0xecec8
mov dword [ebp - 0x48], edx
mov eax, dword [ebp - 0xc]
or eax, 0x8e69e
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0x14], 0xac1ed
jle 0x560ec3
mov ecx, dword [ebp - 0x3c]
add ecx, 0x72a33
mov dword [ebp - 0x3c], ecx
mov edx, dword [ebp - 0x40]
or edx, dword [ebp - 0x58]
mov dword [ebp - 0x40], edx
mov eax, dword [ebp - 0x44]
and eax, dword [ebp - 0x54]
mov dword [ebp - 0x44], eax
mov ecx, dword [ebp - 0x38]
or ecx, dword [ebp - 0x40]
mov dword [ebp - 0x38], ecx
cmp dword [ebp - 0x24], 0x5c179
je 0x560ec3
mov edx, dword [ebp - 8]
xor edx, dword [ebp - 0x3c]
mov dword [ebp - 8], edx
mov eax, dword [ebp - 4]
and eax, 0x1182f
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 0x54]
add ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x54], ecx
cmp dword [ebp - 0x10], 0x77181
jle 0x560ec3
mov edx, dword [ebp - 0xc]
and edx, 0xea9f7
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 0x34]
and eax, 0x40102
mov dword [ebp - 0x34], eax
cmp dword [ebp - 0x3c], 0xe9d35
jne 0x560ec3
mov ecx, dword [ebp - 0x38]
add ecx, 0xd5ded
mov dword [ebp - 0x38], ecx
mov edx, dword [ebp - 0x24]
xor edx, 0xaa4cd
mov dword [ebp - 0x24], edx
mov eax, dword [ebp - 0x20]
sub eax, 0x41c3d
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x18]
or ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x18], ecx
cmp dword [ebp - 0x48], 0x86207
jne 0x560ec3
mov edx, dword [ebp - 0x20]
sub edx, dword [ebp - 0x50]
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 8]
add eax, dword [ebp - 0x40]
mov dword [ebp - 8], eax
cmp dword [ebp - 0x30], 0xddb87
jge 0x560ec3
mov ecx, dword [ebp - 0x3c]
and ecx, 0x71ed3
mov dword [ebp - 0x3c], ecx
mov edx, dword [ebp - 0x1c]
xor edx, 0x1efe
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x10]
xor eax, dword [ebp - 0x54]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 8]
xor ecx, 0xc7732
mov dword [ebp - 8], ecx
cmp dword [ebp - 8], 0xdea7e
jne 0x560ec3
mov edx, dword [ebp - 0x18]
or edx, dword [ebp - 0x20]
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x50]
and eax, dword [ebp - 0x1c]
mov dword [ebp - 0x50], eax
mov ecx, dword [ebp - 0x48]
and ecx, 0x2c7c1
mov dword [ebp - 0x48], ecx
mov edx, dword [ebp - 0x4c]
and edx, 0xc8ba1
mov dword [ebp - 0x4c], edx
mov eax, dword [ebp - 0x3c]
and eax, 0xed579
mov dword [ebp - 0x3c], eax
mov ecx, dword [ebp - 0x10]
or ecx, 0x10ff2
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x3c]
or edx, 0x12787
mov dword [ebp - 0x3c], edx
mov eax, dword [ebp - 0x34]
sub eax, 0x458c0
mov dword [ebp - 0x34], eax
jmp 0x560b25
mov dword [ebp - 0x68], 0
jmp 0x560eda
mov ecx, dword [ebp - 0x68]
add ecx, 1
mov dword [ebp - 0x68], ecx
mov edx, dword [ebp - 0x58]
sub edx, 0x33b9c2
cmp dword [ebp - 0x68], edx
jge 0x560ff8
mov eax, dword [ebp - 0x14]
sub eax, dword [ebp - 0x44]
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x38]
xor ecx, dword [ebp - 0x38]
mov dword [ebp - 0x38], ecx
mov edx, dword [ebp - 0x34]
or edx, 0x48abf
mov dword [ebp - 0x34], edx
mov eax, dword [ebp - 0x38]
sub eax, 0xbe783
mov dword [ebp - 0x38], eax
mov ecx, dword [ebp - 0x14]
sub ecx, dword [ebp - 0x10]
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0x38]
or edx, dword [ebp - 8]
mov dword [ebp - 0x38], edx
mov eax, dword [ebp - 0x44]
and eax, 0x33f01
mov dword [ebp - 0x44], eax
mov ecx, dword [ebp - 4]
or ecx, dword [ebp - 0x28]
mov dword [ebp - 4], ecx
cmp dword [ebp - 0x34], 0x27539
je 0x560ff3
mov edx, dword [ebp - 0x20]
or edx, dword [ebp - 0x24]
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 0x24]
xor eax, 0x47f4b
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 8]
and ecx, 0xb9709
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 0x34]
xor edx, 0xf0b8e
mov dword [ebp - 0x34], edx
cmp dword [ebp - 0x54], 0x59d34
je 0x560ff3
mov eax, dword [ebp - 0x28]
sub eax, 0xc5331
mov dword [ebp - 0x28], eax
mov ecx, dword [ebp - 0x28]
or ecx, dword [ebp - 0x34]
mov dword [ebp - 0x28], ecx
mov edx, dword [ebp - 0x4c]
and edx, dword [ebp - 0x24]
mov dword [ebp - 0x4c], edx
mov eax, dword [ebp - 0x20]
xor eax, 0x88ff0
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x40]
sub ecx, dword [ebp - 0x3c]
mov dword [ebp - 0x40], ecx
mov edx, dword [ebp - 4]
or edx, 0x40a30
mov dword [ebp - 4], edx
cmp dword [ebp - 0x30], 0xf2c08
jne 0x560ff3
mov eax, dword [ebp - 0x40]
xor eax, dword [ebp - 0x10]
mov dword [ebp - 0x40], eax
mov ecx, dword [ebp - 0x28]
and ecx, dword [ebp - 0x38]
mov dword [ebp - 0x28], ecx
mov edx, dword [ebp - 8]
add edx, dword [ebp - 0x24]
mov dword [ebp - 8], edx
mov eax, dword [ebp - 0x30]
sub eax, dword [ebp - 0x50]
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp - 0x4c]
add ecx, 0xaafd7
mov dword [ebp - 0x4c], ecx
jmp 0x560ed1
mov edx, dword [ebp - 0x40]
add edx, 0x7d499
mov dword [ebp - 0x40], edx
mov eax, dword [ebp - 0x1c]
and eax, 0xaf08d
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 4]
xor ecx, 0xeafad
mov dword [ebp - 4], ecx
cmp dword [ebp - 0x10], 0x133fc
je 0x5610bf
mov edx, dword [ebp - 0x20]
xor edx, dword [ebp - 0xc]
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 0x30]
or eax, 0xe6805
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp - 0x20]
xor ecx, 0xf354a
mov dword [ebp - 0x20], ecx
mov edx, dword [ebp - 8]
xor edx, 0x84152
mov dword [ebp - 8], edx
cmp dword [ebp - 8], 0x18d45
jge 0x5610bf
mov eax, dword [ebp - 0x48]
add eax, 0x3386d
mov dword [ebp - 0x48], eax
mov ecx, dword [ebp - 0x34]
sub ecx, 0x941e
mov dword [ebp - 0x34], ecx
mov edx, dword [ebp - 0x48]
sub edx, dword [ebp - 0x4c]
mov dword [ebp - 0x48], edx
cmp dword [ebp - 0x18], 0x5cefb
je 0x5610bf
mov eax, dword [ebp - 0x34]
add eax, dword [ebp - 0x38]
mov dword [ebp - 0x34], eax
mov ecx, dword [ebp - 0x28]
and ecx, dword [ebp - 0x34]
mov dword [ebp - 0x28], ecx
mov edx, dword [ebp - 0x1c]
sub edx, 0x5657e
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x14]
add eax, dword [ebp - 8]
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x58]
xor ecx, dword [ebp - 0x14]
mov dword [ebp - 0x58], ecx
mov edx, dword [ebp - 0x38]
add edx, 1
mov dword [ebp - 0x38], edx
cmp dword [ebp - 0x24], 0x57911c
jge 0x5611d8
mov eax, dword [ebp - 0x14]
or eax, 0x170bf
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x14]
sub ecx, dword [ebp - 0x18]
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0x20]
add edx, dword [ebp - 0x50]
mov dword [ebp - 0x20], edx
cmp dword [ebp - 4], 0xa5866
je 0x561132
mov eax, dword [ebp - 0x18]
xor eax, 0xb26db
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x2c]
add ecx, 0xa9fdc
mov dword [ebp - 0x2c], ecx
mov edx, dword [ebp - 0x3c]
or edx, dword [ebp - 0x18]
mov dword [ebp - 0x3c], edx
mov eax, dword [ebp - 0x14]
or eax, 0x2f3f6
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x20]
sub ecx, 0x69756
mov dword [ebp - 0x20], ecx
mov edx, dword [ebp - 0x10]
sub edx, 1
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x24]
add eax, 1
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x30]
or ecx, 0x9f543
mov dword [ebp - 0x30], ecx
mov edx, dword [ebp - 4]
and edx, dword [ebp - 0x2c]
mov dword [ebp - 4], edx
mov eax, dword [ebp - 0x48]
or eax, dword [ebp - 0x18]
mov dword [ebp - 0x48], eax
mov ecx, dword [ebp - 0x18]
sub ecx, dword [ebp - 4]
mov dword [ebp - 0x18], ecx
mov edx, dword [ebp - 4]
and edx, 0xc8563
mov dword [ebp - 4], edx
mov eax, dword [ebp - 0x4c]
sub eax, dword [ebp - 0x4c]
mov dword [ebp - 0x4c], eax
cmp dword [ebp - 0x14], 0xd7f46
jge 0x5611d3
mov ecx, dword [ebp - 0x14]
xor ecx, dword [ebp - 0x50]
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0x54]
xor edx, 0xafb1b
mov dword [ebp - 0x54], edx
cmp dword [ebp - 0x10], 0x757dd
jge 0x5611d3
mov eax, dword [ebp - 0x54]
or eax, dword [ebp - 0x40]
mov dword [ebp - 0x54], eax
mov ecx, dword [ebp - 0x30]
and ecx, dword [ebp - 0x3c]
mov dword [ebp - 0x30], ecx
mov edx, dword [ebp - 8]
sub edx, 0x5f78b
mov dword [ebp - 8], edx
mov eax, dword [ebp - 0xc]
add eax, 0xdb083
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0x50]
add ecx, 0x7e55e
mov dword [ebp - 0x50], ecx
jmp 0x5610bf
call fcn.00442600
mov edx, dword [ebp - 0x18]
sub edx, 0xde8b7
push edx
call fcn.00439a20
add esp, 4
mov eax, dword [ebp - 0x18]
add eax, 0xb409d
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x20]
and ecx, 0xb3cfd
mov dword [ebp - 0x20], ecx
mov edx, dword [ebp - 0x10]
or edx, 0x31496
mov dword [ebp - 0x10], edx
cmp dword [ebp - 0x1c], 0x66c77
jle 0x561384
mov eax, dword [ebp - 0x28]
xor eax, 0xaa8fa
mov dword [ebp - 0x28], eax
mov ecx, dword [ebp - 0x20]
and ecx, 0x2f829
mov dword [ebp - 0x20], ecx
mov edx, dword [ebp - 0x38]
sub edx, 0x83015
mov dword [ebp - 0x38], edx
mov eax, dword [ebp - 0x40]
sub eax, 0x17d0c
mov dword [ebp - 0x40], eax
mov ecx, dword [ebp - 0x24]
sub ecx, 0x253c8
mov dword [ebp - 0x24], ecx
mov edx, dword [ebp - 0x4c]
or edx, dword [ebp - 0x40]
mov dword [ebp - 0x4c], edx
mov eax, dword [ebp - 0x4c]
sub eax, dword [ebp - 0x2c]
mov dword [ebp - 0x4c], eax
mov ecx, dword [ebp - 0x24]
and ecx, 0x161fe
mov dword [ebp - 0x24], ecx
cmp dword [ebp - 0x34], 0xef323
jge 0x561384
mov edx, dword [ebp - 0xc]
or edx, dword [ebp - 0x14]
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 0x48]
add eax, 0xb3694
mov dword [ebp - 0x48], eax
mov ecx, dword [ebp - 0x34]
xor ecx, 0x711da
mov dword [ebp - 0x34], ecx
mov edx, dword [ebp - 0x18]
add edx, dword [ebp - 0x24]
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 4]
sub eax, 0xb917a
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 0x30]
sub ecx, 0x4fdf0
mov dword [ebp - 0x30], ecx
cmp dword [ebp - 0x48], 0xc5260
jne 0x561384
mov edx, dword [ebp - 0x50]
xor edx, dword [ebp - 0xc]
mov dword [ebp - 0x50], edx
mov eax, dword [ebp - 0x40]
or eax, 0x334fd
mov dword [ebp - 0x40], eax
mov ecx, dword [ebp - 0xc]
add ecx, 0x21fc1
mov dword [ebp - 0xc], ecx
cmp dword [ebp - 0x34], 0x8a890
jge 0x561384
mov edx, dword [ebp - 0x28]
or edx, dword [ebp - 0x14]
mov dword [ebp - 0x28], edx
mov eax, dword [ebp - 0x4c]
and eax, 0xc0ac
mov dword [ebp - 0x4c], eax
mov ecx, dword [ebp - 0x58]
add ecx, 0x2d867
mov dword [ebp - 0x58], ecx
mov edx, dword [ebp - 0x50]
add edx, 0xbd118
mov dword [ebp - 0x50], edx
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 0x18]
mov dword [ebp - 0x20], eax
cmp dword [ebp - 0x3c], 0x3056a
je 0x561384
mov ecx, dword [ebp - 0x14]
and ecx, 0x446bf
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0x58]
and edx, 0xb96f9
mov dword [ebp - 0x58], edx
mov eax, dword [ebp - 8]
xor eax, dword [ebp - 0x44]
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 0x10]
or ecx, 0xc45f8
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 8]
xor edx, dword [ebp - 0x38]
mov dword [ebp - 8], edx
mov eax, dword [ebp - 0x10]
and eax, dword [ebp - 0x50]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x48]
add ecx, 1
mov dword [ebp - 0x48], ecx
mov edx, dword [ebp - 0x44]
add edx, 1
mov dword [ebp - 0x44], edx
mov eax, dword [ebp - 0x38]
and eax, dword [ebp - 0x4c]
mov dword [ebp - 0x38], eax
mov ecx, dword [ebp - 4]
add ecx, 0x8b3ee
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 0x40]
or edx, 0xb06d7
mov dword [ebp - 0x40], edx
mov eax, dword [ebp - 0x38]
add eax, 0x33c09
mov dword [ebp - 0x38], eax
mov ecx, dword [ebp - 0x28]
sub ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x28], ecx
mov edx, dword [ebp - 0x38]
add edx, 0xe167a
mov dword [ebp - 0x38], edx
cmp dword [ebp - 0x20], 0x4017f
jle 0x561449
mov eax, dword [ebp - 0x4c]
or eax, 0x62e40
mov dword [ebp - 0x4c], eax
mov ecx, dword [ebp - 0x24]
xor ecx, 0xcf748
mov dword [ebp - 0x24], ecx
cmp dword [ebp - 0x50], 0x237f7
jne 0x561449
mov edx, dword [ebp - 0x24]
or edx, 0xe2afb
mov dword [ebp - 0x24], edx
mov eax, dword [ebp - 0x1c]
xor eax, 0xcc30f
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 8]
xor ecx, dword [ebp - 0x50]
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 4]
add edx, dword [ebp - 0x10]
mov dword [ebp - 4], edx
mov eax, dword [ebp - 0x2c]
add eax, 0xae928
mov dword [ebp - 0x2c], eax
mov ecx, dword [ebp - 0x3c]
sub ecx, dword [ebp - 0x38]
mov dword [ebp - 0x3c], ecx
mov edx, dword [ebp - 0x38]
or edx, 0xdf61c
mov dword [ebp - 0x38], edx
mov eax, dword [ebp - 0x28]
or eax, dword [ebp - 0x40]
mov dword [ebp - 0x28], eax
cmp dword [ebp - 0x44], 0x20101
jl 0x5611ef
mov dword [ebp - 0x6c], 0
jmp 0x561468
mov ecx, dword [ebp - 0x6c]
add ecx, 1
mov dword [ebp - 0x6c], ecx
mov edx, dword [ebp - 0x54]
sub edx, 0x15c7e6
cmp dword [ebp - 0x6c], edx
jge 0x5615a3
mov eax, dword [ebp - 0x38]
xor eax, dword [ebp - 0x30]
mov dword [ebp - 0x38], eax
mov ecx, dword [ebp - 0x28]
add ecx, 0xa13f5
mov dword [ebp - 0x28], ecx
mov edx, dword [ebp - 0x4c]
add edx, dword [ebp - 0x38]
mov dword [ebp - 0x4c], edx
mov eax, dword [ebp - 0x24]
or eax, 0xb37f2
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x58], 0x5e81f
jge 0x56159e
mov ecx, dword [ebp - 8]
add ecx, dword [ebp - 0x30]
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 8]
and edx, 0x37371
mov dword [ebp - 8], edx
cmp dword [ebp - 0x20], 0xcebe0
je 0x56159e
mov eax, dword [ebp - 0x1c]
or eax, 0xa1b89
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x4c]
xor ecx, dword [ebp - 0x4c]
mov dword [ebp - 0x4c], ecx
mov edx, dword [ebp - 0x18]
and edx, 0x4eaf8
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x10]
xor eax, dword [ebp - 0x58]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x28]
or ecx, dword [ebp - 0x3c]
mov dword [ebp - 0x28], ecx
cmp dword [ebp - 0x40], 0xa7f8b
jge 0x56159e
mov edx, dword [ebp - 0x50]
sub edx, dword [ebp - 0x2c]
mov dword [ebp - 0x50], edx
mov eax, dword [ebp - 0x10]
and eax, 0x727ed
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x30]
or ecx, dword [ebp - 0x28]
mov dword [ebp - 0x30], ecx
mov edx, dword [ebp - 0x14]
add edx, 0xf0527
mov dword [ebp - 0x14], edx
cmp dword [ebp - 0x10], 0x2c569
jne 0x56159e
mov eax, dword [ebp - 4]
sub eax, 0x3392
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 0x3c]
and ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x3c], ecx
mov edx, dword [ebp - 0x20]
sub edx, dword [ebp - 0x48]
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 0x2c]
xor eax, dword [ebp - 0x50]
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0x40], 0xbf7c5
jle 0x56159e
mov ecx, dword [ebp - 0x38]
add ecx, 0xdf9c5
mov dword [ebp - 0x38], ecx
mov edx, dword [ebp - 4]
and edx, 0xa9a93
mov dword [ebp - 4], edx
mov eax, dword [ebp - 0xc]
or eax, 0xd9752
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0x10]
xor ecx, dword [ebp - 8]
mov dword [ebp - 0x10], ecx
jmp 0x56145f
mov dword [ebp - 0x70], 0
jmp 0x5615b5
mov edx, dword [ebp - 0x70]
add edx, 1
mov dword [ebp - 0x70], edx
mov eax, dword [ebp - 0x24]
sub eax, 0x5b77f5
cmp dword [ebp - 0x70], eax
jge 0x56183a
mov ecx, dword [ebp - 0x14]
and ecx, dword [ebp - 0x54]
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0x30]
xor edx, 0xe2344
mov dword [ebp - 0x30], edx
mov eax, dword [ebp - 0x10]
xor eax, dword [ebp - 0x34]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x14]
xor ecx, 0x5b94f
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0x14]
or edx, dword [ebp - 8]
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 0x10]
sub eax, 0x12a68
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x28]
sub ecx, dword [ebp - 0x54]
mov dword [ebp - 0x28], ecx
cmp dword [ebp - 0x20], 0x90c9c
je 0x561835
mov edx, dword [ebp - 0x10]
xor edx, 0x43674
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x10]
sub eax, dword [ebp - 0x28]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x50]
xor ecx, dword [ebp - 0x28]
mov dword [ebp - 0x50], ecx
cmp dword [ebp - 0x40], 0x4e51f
jne 0x561835
mov edx, dword [ebp - 0x3c]
or edx, dword [ebp - 8]
mov dword [ebp - 0x3c], edx
mov eax, dword [ebp - 0x30]
sub eax, 0x836a3
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp - 0x44]
xor ecx, dword [ebp - 0x38]
mov dword [ebp - 0x44], ecx
mov edx, dword [ebp - 0x18]
add edx, dword [ebp - 8]
mov dword [ebp - 0x18], edx
cmp dword [ebp - 0x14], 0xc2fb7
jge 0x561835
mov eax, dword [ebp - 0x2c]
add eax, 0x3d585
mov dword [ebp - 0x2c], eax
mov ecx, dword [ebp - 0x20]
sub ecx, 0x80beb
mov dword [ebp - 0x20], ecx
mov edx, dword [ebp - 0x4c]
and edx, 0x7eaa8
mov dword [ebp - 0x4c], edx
mov eax, dword [ebp - 0x1c]
and eax, 0xa41a0
mov dword [ebp - 0x1c], eax
cmp dword [ebp - 0x20], 0x836ee
je 0x561835
mov ecx, dword [ebp - 0x3c]
xor ecx, dword [ebp - 0x34]
mov dword [ebp - 0x3c], ecx
mov edx, dword [ebp - 0x44]
xor edx, 0xb20e5
mov dword [ebp - 0x44], edx
mov eax, dword [ebp - 8]
and eax, dword [ebp - 0x34]
mov dword [ebp - 8], eax
mov ecx, dword [ebp - 4]
sub ecx, 0x76e03
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 0x18]
sub edx, dword [ebp - 0x38]
mov dword [ebp - 0x18], edx
cmp dword [ebp - 0x28], 0xb50c3
jne 0x561835
mov eax, dword [ebp - 0x44]
add eax, 0x7864f
mov dword [ebp - 0x44], eax
mov ecx, dword [ebp - 0x34]
xor ecx, 0x45397
mov dword [ebp - 0x34], ecx
mov edx, dword [ebp - 0xc]
add edx, 0x4b1df
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 0x44]
xor eax, dword [ebp - 0x28]
mov dword [ebp - 0x44], eax
mov ecx, dword [ebp - 0x10]
xor ecx, 0xe48a8
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 8]
and edx, dword [ebp - 0x28]
mov dword [ebp - 8], edx
cmp dword [ebp - 0x38], 0x15db1
jle 0x561835
mov eax, dword [ebp - 0x10]
xor eax, dword [ebp - 0x10]
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 8]
xor ecx, dword [ebp - 0x1c]
mov dword [ebp - 8], ecx
cmp dword [ebp - 0x2c], 0x792f5
jne 0x561835
mov edx, dword [ebp - 0x14]
xor edx, 0xa8492
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 0x3c]
add eax, 0xbed4b
mov dword [ebp - 0x3c], eax
mov ecx, dword [ebp - 0x14]
sub ecx, dword [ebp - 4]
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0x54]
xor edx, dword [ebp - 0x10]
mov dword [ebp - 0x54], edx
mov eax, dword [ebp - 0xc]
or eax, dword [ebp - 0x28]
mov dword [ebp - 0xc], eax
cmp dword [ebp - 0xc], 0x77d33
je 0x561835
mov ecx, dword [ebp - 0x50]
or ecx, 0x6802e
mov dword [ebp - 0x50], ecx
mov edx, dword [ebp - 0x18]
and edx, 0x61ac4
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x44]
or eax, 0x9c88f
mov dword [ebp - 0x44], eax
mov ecx, dword [ebp - 0x34]
xor ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x34], ecx
mov edx, dword [ebp - 8]
xor edx, 0xb5150
mov dword [ebp - 8], edx
cmp dword [ebp - 0x1c], 0x5ea3
je 0x561835
mov eax, dword [ebp - 0x30]
or eax, dword [ebp - 8]
mov dword [ebp - 0x30], eax
mov ecx, dword [ebp - 0x48]
xor ecx, 0x7f1f9
mov dword [ebp - 0x48], ecx
mov edx, dword [ebp - 0xc]
sub edx, dword [ebp - 0x1c]
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 0x10]
and eax, 0xd2b00
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 4]
add ecx, 0x13510
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 0x1c]
xor edx, 0xc61be
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x3c]
xor eax, 0x892bb
mov dword [ebp - 0x3c], eax
mov ecx, dword [ebp - 0x50]
sub ecx, 1
mov dword [ebp - 0x50], ecx
jmp 0x5615ac
push 0
push 0
push 0
push 0x506e40
push 0
push 0
call dword [sym.imp.KERNEL32.dll_CreateThread]
nop
mov edx, dword [ebp - 0x28]
and edx, dword [ebp - 0x54]
mov dword [ebp - 0x28], edx
mov eax, dword [ebp - 0x14]
xor eax, dword [ebp - 0x34]
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x10]
or ecx, dword [ebp - 0x28]
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x58]
or edx, dword [ebp - 0x58]
mov dword [ebp - 0x58], edx
mov eax, dword [ebp - 0x2c]
add eax, 0xe3864
mov dword [ebp - 0x2c], eax
mov ecx, dword [ebp - 4]
add ecx, dword [ebp - 8]
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 0xc]
add edx, 1
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 0x4c]
sub eax, dword [ebp - 0x30]
mov dword [ebp - 0x4c], eax
mov ecx, dword [ebp - 0x34]
xor ecx, dword [ebp - 0x50]
mov dword [ebp - 0x34], ecx
mov edx, dword [ebp - 0x30]
or edx, 0xf1ddd
mov dword [ebp - 0x30], edx
mov eax, dword [ebp - 0x30]
add eax, dword [ebp - 0x50]
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x18], 0xda6e1
jle 0x56192b
mov ecx, dword [ebp - 0x34]
add ecx, dword [ebp - 0x20]
mov dword [ebp - 0x34], ecx
mov edx, dword [ebp - 0x4c]
add edx, 0x70795
mov dword [ebp - 0x4c], edx
mov eax, dword [ebp - 0x50]
xor eax, 0x93411
mov dword [ebp - 0x50], eax
mov ecx, dword [ebp - 0x3c]
or ecx, 0x2b34b
mov dword [ebp - 0x3c], ecx
cmp dword [ebp - 0x4c], 0x427e1
jne 0x56192b
mov edx, dword [ebp - 0x48]
or edx, 0x970fe
mov dword [ebp - 0x48], edx
mov eax, dword [ebp - 0x1c]
or eax, 0x11c97
mov dword [ebp - 0x1c], eax
mov ecx, dword [ebp - 0x58]
and ecx, dword [ebp - 4]
mov dword [ebp - 0x58], ecx
mov edx, dword [ebp - 4]
add edx, 0x9255d
mov dword [ebp - 4], edx
mov eax, dword [ebp - 0x2c]
sub eax, 1
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 0xc], 0xdb063
jl 0x561850
call fcn.00503f50
mov ecx, dword [ebp - 4]
and ecx, 0xf2d38
mov dword [ebp - 4], ecx
mov edx, dword [ebp - 0x54]
and edx, 0x72166
mov dword [ebp - 0x54], edx
mov eax, dword [ebp - 4]
xor eax, 0x7db78
mov dword [ebp - 4], eax
cmp dword [ebp - 0x3c], 0x2a854
jle 0x561a61
mov ecx, dword [ebp - 0x1c]
sub ecx, 0xc2f6
mov dword [ebp - 0x1c], ecx
mov edx, dword [ebp - 0x58]
and edx, dword [ebp - 0x18]
mov dword [ebp - 0x58], edx
mov eax, dword [ebp - 0x54]
xor eax, 0x2f348
mov dword [ebp - 0x54], eax
mov ecx, dword [ebp - 0x1c]
sub ecx, dword [ebp - 0x24]
mov dword [ebp - 0x1c], ecx
mov edx, dword [ebp - 0x44]
or edx, 0x11942
mov dword [ebp - 0x44], edx
mov eax, dword [ebp - 0x30]
sub eax, 0x59d3b
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x30], 0x21f15
jge 0x561a61
mov ecx, dword [ebp - 0x30]
add ecx, dword [ebp - 0x48]
mov dword [ebp - 0x30], ecx
mov edx, dword [ebp - 0x18]
sub edx, 0x4e859
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x18]
sub eax, 0x6686b
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x50]
sub ecx, 0x70945
mov dword [ebp - 0x50], ecx
cmp dword [ebp - 0x24], 0xc34e2
je 0x561a61
mov edx, dword [ebp - 0x1c]
xor edx, 0xc957d
mov dword [ebp - 0x1c], edx
mov eax, dword [ebp - 0x10]
sub eax, 0x5e92
mov dword [ebp - 0x10], eax
mov ecx, dword [ebp - 0x2c]
or ecx, dword [ebp - 8]
mov dword [ebp - 0x2c], ecx
mov edx, dword [ebp - 0x48]
sub edx, 0xf300e
mov dword [ebp - 0x48], edx
mov eax, dword [ebp - 0x24]
or eax, 0x7d2bf
mov dword [ebp - 0x24], eax
cmp dword [ebp - 0x3c], 0x1c198
je 0x561a61
mov ecx, dword [ebp - 0x1c]
or ecx, dword [ebp - 0x50]
mov dword [ebp - 0x1c], ecx
mov edx, dword [ebp - 0x48]
sub edx, dword [ebp - 0x3c]
mov dword [ebp - 0x48], edx
mov eax, dword [ebp - 0x34]
sub eax, 0x4956c
mov dword [ebp - 0x34], eax
mov ecx, dword [ebp - 0x50]
xor ecx, 0x46fe3
mov dword [ebp - 0x50], ecx
mov edx, dword [ebp - 0x28]
and edx, dword [ebp - 0x50]
mov dword [ebp - 0x28], edx
mov dword [ebp - 0x74], 0
jmp 0x561a73
mov eax, dword [ebp - 0x74]
add eax, 1
mov dword [ebp - 0x74], eax
mov ecx, dword [ebp - 4]
sub ecx, 0x2d73f
cmp dword [ebp - 0x74], ecx
jge 0x561afd
mov edx, dword [ebp - 0x44]
sub edx, 0x7d61b
mov dword [ebp - 0x44], edx
mov eax, dword [ebp - 0x20]
add eax, dword [ebp - 0x40]
mov dword [ebp - 0x20], eax
mov ecx, dword [ebp - 0x48]
and ecx, dword [ebp - 0x20]
mov dword [ebp - 0x48], ecx
mov edx, dword [ebp - 8]
xor edx, dword [ebp - 0x34]
mov dword [ebp - 8], edx
mov eax, dword [ebp - 0x18]
sub eax, dword [ebp - 8]
mov dword [ebp - 0x18], eax
cmp dword [ebp - 0x3c], 0x6b4e1
je 0x561af8
mov ecx, dword [ebp - 0x40]
xor ecx, dword [ebp - 0xc]
mov dword [ebp - 0x40], ecx
mov edx, dword [ebp - 0x44]
xor edx, 0x1723f
mov dword [ebp - 0x44], edx
mov eax, dword [ebp - 0x14]
and eax, dword [ebp - 0x34]
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x20]
xor ecx, dword [ebp - 0x14]
mov dword [ebp - 0x20], ecx
mov edx, dword [ebp - 0x20]
sub edx, 0x838d3
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 0x48]
sub eax, 0xe80ca
mov dword [ebp - 0x48], eax
jmp 0x561a6a
mov ecx, dword [ebp - 0x34]
add ecx, dword [ebp - 0x48]
mov dword [ebp - 0x34], ecx
mov edx, dword [ebp - 0x10]
and edx, dword [ebp - 0x24]
mov dword [ebp - 0x10], edx
mov eax, dword [ebp - 0x44]
sub eax, dword [ebp - 0xc]
mov dword [ebp - 0x44], eax
mov ecx, dword [ebp - 0x4c]
or ecx, dword [ebp - 0x10]
mov dword [ebp - 0x4c], ecx
mov edx, dword [ebp - 0x20]
and edx, dword [ebp - 0x2c]
mov dword [ebp - 0x20], edx
mov eax, dword [ebp - 0x24]
and eax, dword [ebp - 4]
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x30]
sub ecx, 0x1d4b6
mov dword [ebp - 0x30], ecx
cmp dword [ebp - 0x34], 0x6ebf2
jge 0x561b68
mov edx, dword [ebp - 0x4c]
xor edx, 0xd06e5
mov dword [ebp - 0x4c], edx
mov eax, dword [ebp - 0x40]
and eax, 0x337c5
mov dword [ebp - 0x40], eax
mov ecx, dword [ebp - 0x10]
add ecx, 1
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x18]
add edx, 1
mov dword [ebp - 0x18], edx
mov eax, dword [ebp - 0x44]
or eax, dword [ebp - 0x2c]
mov dword [ebp - 0x44], eax
mov ecx, dword [ebp - 0x30]
add ecx, 0x40508
mov dword [ebp - 0x30], ecx
mov edx, dword [ebp - 0x44]
and edx, dword [ebp - 0x58]
mov dword [ebp - 0x44], edx
mov eax, dword [ebp - 0x48]
or eax, 0x2a664
mov dword [ebp - 0x48], eax
mov ecx, dword [ebp - 0x44]
add ecx, dword [ebp - 0x24]
mov dword [ebp - 0x44], ecx
mov edx, dword [ebp - 0x58]
sub edx, dword [ebp - 8]
mov dword [ebp - 0x58], edx
mov eax, dword [ebp - 0x2c]
and eax, dword [ebp - 0x40]
mov dword [ebp - 0x2c], eax
cmp dword [ebp - 4], 0x53449
jge 0x561be2
mov ecx, dword [ebp - 0x1c]
or ecx, dword [ebp - 0x10]
mov dword [ebp - 0x1c], ecx
mov edx, dword [ebp - 0x54]
sub edx, dword [ebp - 0x3c]
mov dword [ebp - 0x54], edx
mov eax, dword [ebp - 0x44]
sub eax, dword [ebp - 0x2c]
mov dword [ebp - 0x44], eax
mov ecx, dword [ebp - 0x38]
add ecx, 1
mov dword [ebp - 0x38], ecx
cmp dword [ebp - 0x18], 0x124754
jl 0x561afd
cmp dword [ebp - 0x28], 0xc1c7
jge 0x561e1d
mov edx, dword [ebp - 0x50]
and edx, 0x42624
mov dword [ebp - 0x50], edx
mov eax, dword [ebp - 0xc]
and eax, dword [ebp - 0x3c]
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0xc]
and ecx, 0xea3c4
mov dword [ebp - 0xc], ecx
mov edx, dword [ebp - 0x10]
and edx, dword [ebp - 8]
mov dword [ebp - 0x10], edx
cmp dword [ebp - 0x34], 0x90b64
jle 0x561d11
mov eax, dword [ebp - 4]
add eax, dword [ebp - 0x38]
mov dword [ebp - 4], eax
mov ecx, dword [ebp - 0x54]
add ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x54], ecx
mov edx, dword [ebp - 0x14]
sub edx, 0xee44f
mov dword [ebp - 0x14], edx
cmp dword [ebp - 0x30], 0x64ffb
jle 0x561d11
mov eax, dword [ebp - 0x4c]
sub eax, dword [ebp - 0x2c]
mov dword [ebp - 0x4c], eax
mov ecx, dword [ebp - 0x10]
and ecx, 0xb53c2
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x14]
and edx, 0x2b38b
mov dword [ebp - 0x14], edx
cmp dword [ebp - 0x58], 0x31249
je 0x561d11
mov eax, dword [ebp - 0xc]
xor eax, 0x9d351
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 8]
xor ecx, dword [ebp - 0x10]
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 0x50]
or edx, dword [ebp - 0x28]
mov dword [ebp - 0x50], edx
mov eax, dword [ebp - 0x30]
add eax, dword [ebp - 0x1c]
mov dword [ebp - 0x30], eax
cmp dword [ebp - 0x3c], 0x5733
jge 0x561d11
mov ecx, dword [ebp - 0x14]
and ecx, dword [ebp - 0x24]
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0x14]
or edx, dword [ebp - 0x1c]
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 0x14]
xor eax, 0xbcabf
mov dword [ebp - 0x14], eax
mov ecx, dword [ebp - 0x44]
add ecx, 0x7d8de
mov dword [ebp - 0x44], ecx
cmp dword [ebp - 0x18], 0xa9b09
jge 0x561d11
mov edx, dword [ebp - 0x2c]
sub edx, dword [ebp - 0x38]
mov dword [ebp - 0x2c], edx
mov eax, dword [ebp - 0x24]
or eax, dword [ebp - 0x40]
mov dword [ebp - 0x24], eax
mov ecx, dword [ebp - 0x14]
sub ecx, dword [ebp - 0x54]
mov dword [ebp - 0x14], ecx
mov edx, dword [ebp - 0x54]
sub edx, 1
mov dword [ebp - 0x54], edx
mov eax, dword [ebp - 0x28]
add eax, 1
mov dword [ebp - 0x28], eax
mov ecx, dword [ebp - 0x50]
add ecx, dword [ebp - 0x50]
mov dword [ebp - 0x50], ecx
mov edx, dword [ebp - 4]
sub edx, dword [ebp - 0x30]
mov dword [ebp - 4], edx
mov eax, dword [ebp - 0x2c]
or eax, dword [ebp - 0x3c]
mov dword [ebp - 0x2c], eax
mov ecx, dword [ebp - 0x34]
and ecx, dword [ebp - 0x3c]
mov dword [ebp - 0x34], ecx
cmp dword [ebp - 0x3c], 0x19cf6
jne 0x561e18
mov edx, dword [ebp - 0x30]
and edx, dword [ebp - 0x28]
mov dword [ebp - 0x30], edx
mov eax, dword [ebp - 0x4c]
add eax, dword [ebp - 0x54]
mov dword [ebp - 0x4c], eax
mov ecx, dword [ebp - 0x38]
or ecx, 0x452c4
mov dword [ebp - 0x38], ecx
mov edx, dword [ebp - 0x50]
xor edx, dword [ebp - 8]
mov dword [ebp - 0x50], edx
mov eax, dword [ebp - 0xc]
add eax, dword [ebp - 0x44]
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 0x50]
and ecx, 0x90cdf
mov dword [ebp - 0x50], ecx
cmp dword [ebp - 0x54], 0x44f0
je 0x561e18
mov edx, dword [ebp - 0xc]
sub edx, 0x17d4c
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 0xc]
sub eax, 0x3604b
mov dword [ebp - 0xc], eax
mov ecx, dword [ebp - 8]
and ecx, 0x7e6ac
mov dword [ebp - 8], ecx
mov edx, dword [ebp - 0x24]
add edx, 0x1f03d
mov dword [ebp - 0x24], edx
mov eax, dword [ebp - 0x10]
xor eax, 0x8c0f5
mov dword [ebp - 0x10], eax
cmp dword [ebp - 0x18], 0xed4e1
jne 0x561e18
mov ecx, dword [ebp - 0x40]
and ecx, 0xa0fb2
mov dword [ebp - 0x40], ecx
mov edx, dword [ebp - 0x14]
xor edx, dword [ebp - 0x1c]
mov dword [ebp - 0x14], edx
mov eax, dword [ebp - 0x18]
and eax, 0xa1578
mov dword [ebp - 0x18], eax
mov ecx, dword [ebp - 0x24]
xor ecx, 0xaccd6
mov dword [ebp - 0x24], ecx
mov edx, dword [ebp - 0xc]
sub edx, 0x87095
mov dword [ebp - 0xc], edx
mov eax, dword [ebp - 0x20]
sub eax, 1
mov dword [ebp - 0x20], eax
jmp 0x561bef
xor eax, eax
mov esp, ebp
pop ebp
ret