Function at 0x41d850
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x68
push ebx
push esi
push edi
sub esp, 0x10
mov dword [ebp - 0x64], ecx
mov edx, 0x17768
mov dword [ebp - 4], 0x1384f
mov dword [ebp - 0x2c], 0x16996
call fcn.00401650
sub esp, 0xc
mov edi, eax
call fcn.00403580
mov ecx, 0x1f72d
mov dword [ebp - 0x28], 0x41d
and edi, ecx
mov dword [ebp - 0xc], ecx
mov ecx, eax
mov dword [ebp - 0x60], 0xffffc38b
and ecx, 0x271b
mov dword [ebp - 0x14], 0xffff3d93
sub ecx, 0x8eb4
mov dword [ebp - 0x4c], 0x211dd
or ecx, 0x6916
mov dword [ebp - 0x30], 0xc401
and eax, 0x9319
mov dword [ebp - 0x58], edi
mov esi, 0x53e1
mov dword [ebp - 0x48], 0xfffffb7d
push 0xc869
mov dword [ebp - 0x3c], esi
mov dword [ebp - 0x18], 0x7ddd
mov dword [ebp - 0x54], 0x4cf6
mov dword [ebp - 0x40], 0x14354
mov dword [ebp - 0x20], ecx
mov dword [ebp - 0x38], eax
call fcn.004050f0
mov ecx, 0x127e9
call fcn.00401b30
mov edi, eax
call fcn.00401450
mov ecx, 0x12d
mov dword [ebp - 0x5c], eax
call fcn.00403b50
add esp, 0x1c
mov dword [ebp - 0x50], eax
call fcn.004051a0
sub esp, 0x1c
mov dword [ebp - 0x10], eax
call fcn.004051e0
mov dword [ebp - 0x44], eax
add esp, 0x20
mov eax, dword [ebp - 0x5c]
mov edx, 0xfffff9ea
add eax, dword [ebp - 0x50]
mov ecx, 0xffffbd76
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x24], 0x1b280
mov dword [ebp - 0x34], edx
cmp eax, 0x17e5f
jle 0x41d983
add dword [ebp - 0x58], 0x11c0b
mov ecx, 0xfffed4e0
add dword [ebp - 0x5c], edx
mov dword [ebp - 0x4c], 0x283ee
mov dword [ebp - 4], 0xcf62
mov dword [ebp - 0x40], 0x17fdd
mov edx, dword [ebp - 0x18]
nop word [eax + eax]
mov ebx, dword [ebp - 0x50]
xor ecx, 0xcd8c
add dword [ebp - 0x44], 0x4fa5
sub ebx, 0x4c1
xor edx, 0xffffc38b
mov dword [ebp - 0x50], ebx
mov dword [ebp - 0x1c], ecx
cmp ebx, 0x11b15
jge 0x41da80
mov ebx, dword [ebp - 0x44]
add eax, 0xb77c
sub ebx, dword [ebp - 0x58]
or ebx, dword [ebp - 0x20]
xor dword [ebp - 0x4c], 0x16146
and dword [ebp - 0x54], ecx
cmp dword [ebp - 0x30], 0x2f8a
mov dword [ebp - 0x44], ebx
jne 0x41da80
sub dword [ebp - 0x28], 0xb314
add edx, 0x1616d
or dword [ebp - 0x5c], 0x95da
or dword [ebp - 0x4c], 0x1c3
mov esi, dword [ebp - 0x3c]
cmp ebx, 0x10d65
jle 0x41da80
mov ebx, dword [ebp - 0xc]
sub eax, 0x160ad
add ecx, dword [ebp - 0x54]
sub edi, 0x6820
or ebx, dword [ebp - 0x54]
xor dword [ebp - 0x28], 0x16086
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0xc], ebx
cmp esi, 0xa544
jle 0x41da80
and dword [ebp - 0x48], eax
sub eax, 0x6192
and dword [ebp - 0x20], 0x17502
add dword [ebp - 0x44], 0xca55
cmp dword [ebp - 0x58], 0xdc49
jne 0x41da80
mov ecx, dword [ebp - 0x44]
add dword [ebp - 4], ecx
or dword [ebp - 0x54], 0x73b3
add dword [ebp - 0x48], 0x16127
and dword [ebp - 0x20], 0x8e35
add dword [ebp - 0x5c], 0xffffc38b
sub dword [ebp - 0x2c], 0x142dc
mov ecx, dword [ebp - 0x1c]
mov ebx, dword [ebp - 0x2c]
add eax, 0x5a16
xor dword [ebp - 0x34], ebx
add edi, 0xd3d6
and dword [ebp - 4], ebx
xor ebx, 0xb761
mov esi, dword [ebp - 0x3c]
or esi, dword [ebp - 0x58]
inc dword [ebp - 0x40]
sub dword [ebp - 0x30], 0x1afd
add dword [ebp - 0xc], 0xa70a
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x48]
and eax, 0xc034
mov dword [ebp - 0x2c], ebx
or eax, dword [ebp - 0x34]
cmp dword [ebp - 0x28], 0x4402
mov ebx, dword [ebp - 0x14]
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x3c], esi
jle 0x41db52
mov esi, dword [ebp - 0xc]
and ebx, ecx
add esi, dword [ebp - 0x58]
sub dword [ebp - 0x50], 0x17eca
cmp dword [ebp - 0x48], 0xb85b
mov dword [ebp - 0xc], esi
mov esi, dword [ebp - 0x3c]
mov dword [ebp - 0x14], ebx
jle 0x41db52
mov eax, dword [ebp - 0x44]
sub edi, esi
xor dword [ebp - 0x48], eax
or esi, 0xf3d3
mov eax, dword [ebp - 0x28]
xor dword [ebp - 0x30], eax
cmp dword [ebp - 0x48], 0x23a0
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x3c], esi
je 0x41db52
mov ebx, dword [ebp - 0x50]
sub edx, 0x6d40
xor ebx, dword [ebp - 0x58]
xor ebx, dword [ebp - 0x5c]
xor dword [ebp - 0x10], 0x635f
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x50], ebx
mov ebx, dword [ebp - 0x40]
sub dword [ebp - 0x44], ebx
mov ebx, dword [ebp - 0x34]
xor ebx, dword [ebp - 4]
or dword [ebp - 0x48], ebx
or edx, 0x3500
mov dword [ebp - 0x34], ebx
mov ebx, dword [ebp - 0x14]
cmp dword [ebp - 0x40], 0x14355
jl 0x41d990
sub esp, 8
mov dword [ebp - 0x18], edx
call fcn.00403790
mov eax, dword [ebp - 0x38]
add esp, 8
mov edx, dword [ebp - 0x60]
mov ecx, dword [ebp - 4]
or edx, 0xbd8b
sub dword [ebp - 0x34], 0x12886
add ecx, edx
mov dword [ebp - 4], ecx
cmp ecx, 0x107ae
mov ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x60], edx
je 0x41dc64
mov eax, dword [ebp - 0x20]
and edx, 0xc295
add dword [ebp - 0x5c], eax
xor ebx, 0xdc2c
mov eax, dword [ebp - 0x38]
xor ecx, 0x3bf8
mov dword [ebp - 0x60], edx
sub ebx, 0x83cd
mov edx, dword [ebp - 0x10]
or dword [ebp - 0x60], edx
cmp dword [ebp - 0x2c], 0x17219
mov dword [ebp - 0x1c], ecx
mov dword [ebp - 0x14], ebx
je 0x41dc64
add dword [ebp - 0x5c], 0x12b20
sub dword [ebp - 0x44], 0x819e
xor dword [ebp - 4], 0x10cdb
mov esi, dword [ebp - 0x3c]
cmp edx, 0xc6cb
jle 0x41dc64
mov edx, dword [ebp - 0x2c]
add edi, 0xf650
and dword [ebp - 0x4c], esi
add edx, 0xffffa79a
and edx, 0xe241
mov dword [ebp - 0x2c], edx
mov edx, dword [ebp - 0x18]
cmp ecx, 0x3e89
jge 0x41dc67
mov eax, dword [ebp - 0x20]
xor edi, 0x17c95
add dword [ebp - 0x24], eax
and dword [ebp - 0x50], edx
sub dword [ebp - 0x44], 0x3a3e
xor dword [ebp - 0x34], 0x13f65
mov eax, dword [ebp - 0x38]
cmp esi, 0xf586
jge 0x41dc67
xor dword [ebp - 0x58], 0x1265c
xor edx, edx
xor dword [ebp - 0x34], ebx
add dword [ebp - 0x60], 0x11fd3
add dword [ebp - 0x44], 0xcef7
mov dword [ebp - 0x18], edx
jmp 0x41dc67
mov edx, dword [ebp - 0x18]
mov esi, dword [ebp - 0x40]
add eax, edi
sub esi, dword [ebp - 0x50]
inc dword [ebp - 0x54]
and dword [ebp - 0x60], 0x7e86
cmp dword [ebp - 0x4c], 0x75b6
mov dword [ebp - 0x40], esi
mov esi, dword [ebp - 0x3c]
mov dword [ebp - 0x38], eax
je 0x41dcf5
mov ebx, dword [ebp - 0x40]
add eax, 0x9b81
xor ebx, dword [ebp - 4]
sub dword [ebp - 0x34], 0x670f
and dword [ebp - 0xc], 0xb9af
mov dword [ebp - 0x40], ebx
mov ebx, dword [ebp - 0x30]
xor ebx, ecx
mov dword [ebp - 0x38], eax
xor dword [ebp - 0x24], ebx
mov dword [ebp - 0x30], ebx
mov ebx, dword [ebp - 0x14]
cmp edx, 0x134e3
jle 0x41dcf5
sub eax, dword [ebp - 0x50]
and ebx, dword [ebp - 0x5c]
add ecx, eax
or dword [ebp - 0x48], 0x7ca3
cmp dword [ebp - 4], 0x14b45
mov dword [ebp - 0x14], ebx
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x1c], ecx
je 0x41dcf5
or dword [ebp - 4], 0x1751b
sub dword [ebp - 0x5c], 0x1000e
mov ecx, dword [ebp - 0x20]
xor dword [ebp - 0x10], ecx
cmp dword [ebp - 0x54], 0x40f3
jl 0x41db70
mov ecx, dword [ebp - 0x24]
sub dword [ebp - 0x34], ecx
add ecx, dword [ebp - 0x10]
sub dword [ebp - 0x50], edx
cmp dword [ebp - 0x2c], 0x1890
mov dword [ebp - 0x24], ecx
mov ecx, dword [ebp - 0x1c]
jge 0x41dd77
mov edx, dword [ebp - 0x50]
sub edi, 0xb9dc
add dword [ebp - 0x58], 0x15f0e
xor edx, 0x1779d
add edx, 0x9e55
cmp dword [ebp - 0x20], 0x12e9c
mov dword [ebp - 0x50], edx
mov edx, dword [ebp - 0x18]
jle 0x41dd77
sub edi, dword [ebp - 0x50]
add eax, 0x74c4
xor dword [ebp - 0x30], ebx
xor dword [ebp - 0x2c], 0x17b22
cmp dword [ebp - 0x58], 0x301b
je 0x41dd77
or esi, dword [ebp - 0x60]
sub dword [ebp - 0x48], 0xe59f
add dword [ebp - 0x40], 0x5b95
mov dword [ebp - 0x3c], esi
mov ebx, dword [ebp - 0x44]
or edi, 0x4b7a
add dword [ebp - 0x4c], ebx
inc ecx
mov ebx, dword [ebp - 0x40]
sub edi, 0x15322
and dword [ebp - 0x30], ebx
and dword [ebp - 0x24], edx
cmp dword [ebp - 0x30], 0x46c5
mov dword [ebp - 0x28], ebx
mov ebx, dword [ebp - 0x14]
mov dword [ebp - 0x1c], ecx
jne 0x41ddc9
mov ebx, dword [ebp - 0x40]
xor edx, 0x30e5
sub dword [ebp - 0x20], ebx
or eax, ebx
mov ebx, dword [ebp - 0x24]
and ebx, dword [ebp - 0x44]
mov dword [ebp - 0x24], ebx
mov ebx, dword [ebp - 0x14]
mov dword [ebp - 0x30], 0x9a1e
mov dword [ebp - 0x18], edx
cmp ecx, 0xffff4b03
jl 0x41dd02
mov ecx, dword [ebp - 0x40]
or ecx, dword [ebp - 0x48]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x5c]
or dword [ebp - 0x34], eax
cmp dword [ebp - 0x24], 0x3c98
mov dword [ebp - 0x54], edi
mov dword [ebp - 0x40], ecx
je 0x41de31
xor dword [ebp - 0x58], ecx
mov eax, dword [ebp - 0x4c]
mov ecx, dword [ebp - 0x24]
add eax, esi
and dword [ebp - 0x2c], 0x1574e
sub ecx, edx
mov dword [ebp - 0x4c], eax
cmp ecx, 0xee46
je 0x41de31
and dword [ebp - 0x60], 0xa698
sub edi, 0x1035a
xor dword [ebp - 0xc], 0x1683b
sub edx, eax
dec dword [ebp - 0x28]
mov dword [ebp - 0x54], edi
mov dword [ebp - 0x18], edx
sub esp, 8
lea eax, [esi - 0x3ab0]
push eax
sub esp, 8
call fcn.00405410
add eax, 0xfffebea2
add esp, 0x14
mov dword [ebp - 0x24], eax
test eax, eax
jle 0x41dec9
mov edi, dword [ebp - 4]
mov esi, dword [ebp - 0x34]
mov ecx, dword [ebp - 0x4c]
mov edx, dword [ebp - 0x58]
imul eax, eax, 0xffff59f9
add dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x30]
nop word [eax + eax]
sub eax, dword [ebp - 0x28]
or dword [ebp - 0x28], ebx
mov dword [ebp - 0x30], eax
cmp edx, 0xd50b
jge 0x41deb4
mov edx, dword [ebp - 0x5c]
add esi, ecx
mov eax, dword [ebp - 0x2c]
sub edx, dword [ebp - 0xc]
or eax, ecx
cmp dword [ebp - 0x30], 0x1194c
mov dword [ebp - 0x5c], edx
mov dword [ebp - 0x2c], eax
je 0x41deae
and edx, 0x7124
and ebx, eax
mov dword [ebp - 0x5c], edx
add edi, 0x724c
mov edx, dword [ebp - 0x58]
mov eax, dword [ebp - 0x30]
sub dword [ebp - 0x24], 1
jne 0x41de70
mov dword [ebp - 0x34], esi
mov esi, dword [ebp - 0x3c]
mov dword [ebp - 4], edi
mov edi, dword [ebp - 0x54]
mov dword [ebp - 0x14], ebx
mov ecx, dword [ebp - 0x50]
or edi, esi
mov eax, dword [ebp - 0x38]
or ecx, eax
mov edx, dword [ebp - 0x44]
or dword [ebp - 0x28], 0x12e72
add edx, edi
or dword [ebp - 4], edx
mov dword [ebp - 0x50], ecx
mov ecx, dword [ebp - 0x34]
add dword [ebp - 0x1c], ecx
mov dword [ebp - 0x54], edi
cmp edx, 0x18435
je 0x41df82
mov edx, dword [ebp - 0x10]
and edx, dword [ebp - 0x58]
mov ecx, dword [ebp - 0x5c]
xor dword [ebp - 0x18], 0x8eb0
xor dword [ebp - 0x4c], ecx
mov ecx, dword [ebp - 0x18]
mov dword [ebp - 0x10], edx
cmp edx, 0x9731
jle 0x41df82
cmp dword [ebp - 0x5c], 0x67eb
jle 0x41df82
mov edx, dword [ebp - 0x60]
xor ebx, 0x120aa
xor dword [ebp - 0x58], 0x12e73
or edx, 0x1106c
add edx, esi
mov dword [ebp - 0x14], ebx
cmp edx, 0xfe04
jge 0x41df82
and edi, eax
mov eax, dword [ebp - 0x20]
or eax, 0xaceb
mov dword [ebp - 0x54], edi
cmp eax, 0x8041
jge 0x41df82
mov eax, dword [ebp - 0x28]
and esi, 0xc8
not esi
add eax, 0xfffff7ea
and esi, 0x101da
and eax, 0x379e
or esi, 0xdc04
mov dword [ebp - 0x28], eax
sub dword [ebp - 0x40], ecx
sub esp, 0x1c
call fcn.00405630
add esp, 0x1c
mov dword [ebp - 0x60], eax
call fcn.00401610
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x28]
test eax, eax
jns 0x41e024
mov edx, dword [ebp - 4]
neg eax
imul ecx, eax, 0xfffe9cf6
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x10], 0
mov dword [ebp - 0x28], 0
add ebx, ecx
mov ecx, dword [ebp - 0x18]
mov dword [ebp - 0x14], ebx
mov ebx, dword [ebp - 0x4c]
nop dword [eax]
xor ecx, ebx
and esi, 0x15527
or edi, 0x1807
xor eax, 0x13a76
and edx, 0xbb85
cmp ecx, 0x40a2
jne 0x41e012
add edi, 0x3ad5
mov ecx, 0x159af
cmp dword [ebp - 0x38], 0x145a1
je 0x41e012
and edi, 0x16d
xor dword [ebp - 0x50], 0xf2e6
sub dword [ebp - 0x54], 1
jne 0x41dfd0
mov dword [ebp - 4], edx
mov dword [ebp - 0x18], ecx
mov dword [ebp - 0x1c], eax
mov dword [ebp - 0x54], edi
mov eax, dword [ebp - 0x50]
sub esp, 8
mov edx, dword [ebp - 0x5c]
add eax, 0xfffc9826
add edx, 0xffff6773
push eax
call fcn.00403690
push ecx
mov dword [ebp - 0x2c], eax
lea ecx, [eax + 0xa381]
push ecx
call fcn.00406000
sub esp, 8
mov ebx, eax
call fcn.00404bc0
add dword [ebp - 0x48], 0x3049
mov edi, eax
mov eax, dword [ebp - 0x5c]
xor dword [ebp - 0x2c], eax
call fcn.00403ac0
mov edx, dword [ebp - 0x48]
lea ecx, [esi - 0x99ba]
add esp, 0x10
lea edx, [edx + 0x1cc55]
push ecx
push ecx
call fcn.004058c0
mov edx, dword [ebp - 0x50]
mov ecx, esi
sub edx, dword [ebp - 0x58]
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x38]
sub ecx, eax
add dword [ebp - 0x28], ecx
add eax, 0x13127
mov ecx, dword [ebp - 0x10]
mov dword [ebp - 0x38], eax
and ecx, ebx
mov eax, dword [ebp - 0x5c]
sub dword [ebp - 0x40], eax
lea eax, [ebx + 1]
cmp dword [ebp - 0x2c], 0xb827
cmovge eax, ebx
sub edx, dword [ebp - 0x4c]
mov ebx, dword [ebp - 0x48]
add esp, 0xc
sub dword [ebp - 0x18], 0x510a
mov dword [ebp - 8], eax
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x50], edx
and eax, ebx
add eax, ecx
lea edx, [edi - 0x11819]
mov edi, dword [ebp - 0x14]
xor ecx, eax
or edx, edi
mov dword [ebp - 0x58], eax
mov dword [ebp - 0x5c], edx
mov dword [ebp - 0x10], ecx
call fcn.00403790
add esp, 8
mov dword [ebp - 0x24], eax
lea ecx, [eax - 0x17d4c]
test ecx, ecx
jle 0x41e14e
cmp dword [ebp - 0x2c], 0x15797
jne 0x41e134
sub dword [ebp - 0x28], ecx
mov eax, dword [ebp - 4]
nop
and ebx, 0x2216
add edi, eax
xor esi, 0x3ead
or ebx, 0x1501
or edi, 0x11d2e
sub ecx, 1
jne 0x41e110
mov dword [ebp - 0x14], edi
jmp 0x41e14b
mov eax, ecx
imul eax, dword [ebp - 4]
add edi, eax
mov dword [ebp - 0x14], edi
nop
and ebx, 0x3317
sub ecx, 1
jne 0x41e140
mov dword [ebp - 0x48], ebx
mov edx, dword [ebp - 0x50]
lea eax, [edi - 0x49ca8]
sub esp, 0x18
lea edx, [edx + 0x14cc0]
push eax
call fcn.00403a00
mov edx, dword [ebp - 4]
add esp, 0x10
mov dword [ebp - 0x44], eax
lea edx, [edx - 0x9d1f]
call fcn.00405730
mov edx, eax
add esp, 0xc
mov dword [ebp - 0xc], edx
lea eax, [edx - 0x15ee0]
mov dword [ebp - 0x50], eax
test eax, eax
jle 0x41e26a
mov edx, dword [ebp - 0x1c]
cmp ebx, 0x1538f
mov ebx, dword [ebp - 0x54]
jge 0x41e20e
imul ecx, eax, 0xaf2d
mov eax, dword [ebp - 0x38]
add esi, ecx
mov ecx, dword [ebp - 0x10]
mov dword [ebp - 0x3c], esi
mov esi, dword [ebp - 0x24]
sub esi, dword [ebp - 0x28]
xor eax, 0x3098
add ebx, dword [ebp - 0x60]
mov edi, dword [ebp - 0x2c]
cmp ecx, 0x13833
je 0x41e1f7
mov ecx, dword [ebp - 0x60]
xor edi, 0xfb9d
add ecx, dword [ebp - 0x58]
xor edx, 0xe10e
mov dword [ebp - 0x60], ecx
xor ebx, 0x9c28
mov ecx, dword [ebp - 0x10]
sub eax, edi
and esi, 0x114b9
mov dword [ebp - 0x2c], edi
dec dword [ebp - 0x34]
sub dword [ebp - 0x50], 1
jne 0x41e1b5
mov edi, dword [ebp - 0x14]
mov dword [ebp - 0x24], esi
mov esi, dword [ebp - 0x3c]
mov dword [ebp - 0x1c], edx
mov dword [ebp - 0x38], eax
jmp 0x41e270
mov edi, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x10]
imul eax, eax, 0xaf2d
add esi, eax
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x3c], esi
mov esi, dword [ebp - 0x24]
sub esi, dword [ebp - 0x28]
xor eax, 0x3098
add ebx, dword [ebp - 0x60]
mov dword [ebp - 0x24], esi
mov dword [ebp - 0x38], eax
cmp ecx, 0x13833
je 0x41e256
mov eax, dword [ebp - 0x60]
xor edx, 0xe10e
add eax, dword [ebp - 0x58]
xor edi, 0xfb9d
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x38]
sub dword [ebp - 0x50], 1
jne 0x41e225
mov esi, dword [ebp - 0x3c]
mov dword [ebp - 0x2c], edi
mov edi, dword [ebp - 0x14]
mov dword [ebp - 0x1c], edx
jmp 0x41e270
mov ebx, dword [ebp - 0x54]
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x4c]
cmp ecx, 0x46cce
jge 0x41e30b
xor esi, esi
mov dword [ebp - 0x4c], 0x46cce
mov eax, 0x46cce
mov dword [ebp - 0x3c], esi
mov esi, dword [ebp - 0x2c]
sub eax, ecx
mov ecx, dword [ebp - 0x18]
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 8]
mov dword [ebp - 8], eax
mov eax, dword [ebp - 0x1c]
nop dword [eax]
nop dword [eax + eax]
xor dword [ebp - 0x34], edi
or edi, 0x1559c
cmp ecx, 0x147c9
jle 0x41e2f6
mov edx, dword [ebp - 0x24]
and ecx, 0xf9ad
and dword [ebp - 8], edx
sub eax, dword [ebp - 0xc]
xor ebx, dword [ebp - 0x20]
cmp dword [ebp - 0x28], 0x158af
jle 0x41e2f6
mov edx, dword [ebp - 0x40]
add dword [ebp - 0x34], 0x14572
and dword [ebp - 0x48], 0x569a
or dword [ebp - 0x24], edx
add esi, 0x304e
sub dword [ebp - 0x58], 1
jne 0x41e2b0
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x2c], esi
mov esi, dword [ebp - 0x3c]
mov dword [ebp - 0x18], ecx
mov ecx, dword [ebp - 0x2c]
nop
sub ecx, dword [ebp - 0x34]
add ebx, 0x8704
xor eax, dword [ebp - 0x4c]
xor dword [ebp - 0x18], 0x6a79
and dword [ebp - 8], 0x122
cmp dword [ebp - 0x48], 0xcfaa
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x38], eax
jge 0x41e354
or dword [ebp - 8], 0x16f84
mov eax, 1
sub eax, dword [ebp - 0x1c]
or esi, 0x8e70
add dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x20]
inc edi
add dword [ebp - 0x4c], eax
and ecx, 0x15ee8
sub ecx, dword [ebp - 0x34]
xor esi, 0x5755
add dword [ebp - 0x18], 0x14748
or dword [ebp - 0x60], 0x3568
mov dword [ebp - 0x20], ecx
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x30], eax
cmp eax, 0xcfed
jge 0x41e43d
mov edx, dword [ebp - 0x5c]
xor dword [ebp - 0x40], edx
mov edx, dword [ebp - 0x60]
xor dword [ebp - 0x34], 0xfd2
or ebx, dword [ebp - 0x18]
and dword [ebp - 8], edx
cmp dword [ebp - 4], 0x155fc
jge 0x41e43d
mov eax, dword [ebp - 0x40]
add esi, 0xfc76
and eax, dword [ebp - 0x4c]
add dword [ebp - 0x24], 0x1371f
mov dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x44]
and eax, 0x1a4d
and dword [ebp - 0x34], eax
cmp dword [ebp - 0x24], 0x65b7
jge 0x41e43a
mov eax, dword [ebp - 0x4c]
or dword [ebp - 0x60], 0xbe48
and eax, ebx
xor dword [ebp - 0x40], 0x17925
sub eax, 0x12b36
xor dword [ebp - 0x20], 0x17255
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x10]
cmp eax, 0x5e9e
je 0x41e43a
or dword [ebp - 0xc], eax
add dword [ebp - 8], 0xbcf4
xor dword [ebp - 0x48], ebx
or dword [ebp - 0x24], 0x1648b
cmp dword [ebp - 0x44], 0xd3bc
mov eax, dword [ebp - 0x38]
jge 0x41e43d
or esi, dword [ebp - 0x4c]
or dword [ebp - 0x40], 0x85da
add esi, 0x16bce
add dword [ebp - 0x4c], ebx
jmp 0x41e43d
mov eax, dword [ebp - 0x38]
cmp edi, 0x5f7dd
jl 0x41e310
mov eax, dword [ebp - 0x20]
add eax, 0x7e773
mov dword [ebp - 0x14], edi
push eax
push ecx
lea eax, [ecx + 0x708f7]
mov dword [ebp - 0x54], ebx
push eax
mov eax, dword [ebp - 0x48]
push ecx
add eax, 0x75
mov dword [ebp - 0x3c], esi
push eax
mov eax, dword [ebp - 0x44]
add eax, 0x5c07
push eax
push ecx
call fcn.004013a0
and dword [ebp - 0x38], 0x1243a
add esp, 0xc
dec dword [ebp - 0x18]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x40]
and dword [ebp - 0x20], eax
sub dword [ebp - 8], eax
mov eax, dword [ebp - 0xc]
and eax, 0xabe0
mov dword [ebp - 0xc], eax
add eax, 0xb986
push eax
sub esp, 0xc
call fcn.00404b60
mov edx, dword [ebp - 0x2c]
lea ecx, [ebx - 0x21d1a]
add esp, 0x20
mov dword [ebp - 0x40], eax
lea edx, [edx + 0x798c6]
push ecx
push ecx
mov ecx, dword [ebp - 0x1c]
add ecx, 0xfffd62e8
push ecx
push ecx
lea ecx, [edi - 0x4de20]
push ecx
call fcn.00403100
add esp, 0x14
mov dword [ebp - 0x50], eax
cmp dword [ebp - 8], 0xffff6288
jge 0x41e644
mov eax, dword [ebp - 0x38]
mov edx, dword [ebp - 0x28]
nop dword [eax]
nop word [eax + eax]
sub dword [ebp - 0x18], 0x14b0
xor eax, 0x13043
sub eax, dword [ebp - 0x18]
mov ecx, dword [ebp - 0x1c]
add eax, 0x16a6
add edx, ecx
cmp dword [ebp - 4], 0xc58e
mov dword [ebp - 0x28], edx
jge 0x41e566
or dword [ebp - 0x18], ecx
and esi, 0x12919
mov ecx, dword [ebp - 0x2c]
add ecx, ecx
mov dword [ebp - 0x3c], esi
mov dword [ebp - 0x2c], ecx
cmp eax, 0x8b
jge 0x41e566
mov edi, dword [ebp - 0x40]
or edx, 0xe32c
add edi, 0x131ad
sub edx, 0x10c4
add esi, 0x16615
mov dword [ebp - 0x40], edi
add esi, edi
mov dword [ebp - 0x28], edx
mov dword [ebp - 0x3c], esi
mov edi, dword [ebp - 0x10]
and dword [ebp - 0x50], eax
and edi, 0xc324
inc dword [ebp - 8]
or edi, 0x2008
mov ecx, dword [ebp - 0x2c]
add eax, 0xaff2
mov dword [ebp - 0x10], edi
mov edi, dword [ebp - 0x44]
xor ebx, edi
and edi, 0x2a1a
mov dword [ebp - 0x38], eax
add ebx, 0x11731
mov dword [ebp - 0x44], edi
mov edi, dword [ebp - 0x14]
cmp eax, 0x8a48
jge 0x41e634
mov edx, dword [ebp - 0x20]
add dword [ebp - 0x5c], edx
mov edx, dword [ebp - 0xc]
and dword [ebp - 0x5c], 0x14784
sub dword [ebp - 0x10], ecx
add dword [ebp - 0x18], edx
cmp dword [ebp - 0x28], 0x15f65
mov esi, dword [ebp - 0x3c]
jge 0x41e631
or ecx, dword [ebp - 0x20]
or esi, edi
sub dword [ebp - 0x44], 0xa863
and dword [ebp - 0x24], 0x7da1
cmp dword [ebp - 0x34], 0x63ed
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x3c], esi
jge 0x41e631
xor ebx, dword [ebp - 0x10]
xor edx, 0xd057
sub ebx, dword [ebp - 8]
sub esi, 0x41ee
mov dword [ebp - 0xc], edx
mov edx, dword [ebp - 0x28]
mov dword [ebp - 0x3c], esi
cmp ecx, 0xd283
jne 0x41e634
mov ecx, dword [ebp - 0x24]
add eax, 0xf298
xor ecx, dword [ebp - 0x40]
xor ebx, 0x5674
or esi, ecx
mov dword [ebp - 0x24], ecx
dec edx
mov dword [ebp - 0x3c], esi
mov dword [ebp - 0x28], edx
jmp 0x41e634
mov edx, dword [ebp - 0x28]
cmp dword [ebp - 8], 0xffff6288
jl 0x41e500
mov dword [ebp - 0x54], ebx
mov eax, dword [ebp - 0x5c]
lea edx, [ebx - 0x202d1]
sub esp, 0x18
add eax, 0x1cbb
push eax
call fcn.00403a00
mov edx, eax
add esp, 0x1c
mov dword [ebp - 0x4c], edx
lea eax, [edx - 0xc1ed]
test eax, eax
jle 0x41e6c9
imul ecx, eax, 0xb695
add edi, ecx
imul ecx, eax, 0x2372
mov dword [ebp - 0x14], edi
mov edi, dword [ebp - 0x18]
add dword [ebp - 0x30], ecx
lea ecx, [edx - 0xc1ed]
imul eax, ecx, 0xfffee122
add dword [ebp - 0x2c], eax
mov eax, ecx
imul eax, dword [ebp - 0x24]
add dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x40]
nop
and eax, 0x2770
cmp ebx, 0xdd6
jne 0x41e6b8
add dword [ebp - 0x20], edx
sub esi, ebx
xor edi, 0x17aaf
sub ecx, 1
jne 0x41e6a0
mov dword [ebp - 0x18], edi
mov edi, dword [ebp - 0x14]
mov dword [ebp - 0x40], eax
mov dword [ebp - 0x3c], esi
mov ecx, dword [ebp - 0x18]
add ecx, 0xfffd6261
call fcn.00402430
mov eax, dword [ebp - 0x10]
sub esp, 0x10
add eax, 0xffffc373
push eax
push ecx
call fcn.004012d0
add esp, 0x18
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x24]
lea ecx, [eax - 0xe04c]
push ecx
push ecx
mov ecx, dword [ebp - 0x44]
add ecx, 0x3adf
push ecx
push ecx
lea ecx, [eax - 0x13aa6]
push ecx
mov ecx, dword [ebp - 0x28]
add ecx, 0xfffcd2fa
push ecx
push ecx
call fcn.004013a0
mov dword [ebp - 0x5c], eax
add esp, 0x1c
add eax, 0xffff352d
mov dword [ebp - 0x58], eax
test eax, eax
jle 0x41e821
mov eax, dword [ebp - 0xc]
cmp ebx, 0x2434
jle 0x41e7b7
mov edx, dword [ebp - 4]
mov ecx, dword [ebp - 0x34]
mov ebx, dword [ebp - 0x44]
xor edi, 0x16053
sub dword [ebp - 0x4c], esi
add ebx, 0x8156
and edi, dword [ebp - 0x30]
xor eax, 0xaf2e
mov esi, dword [ebp - 0x3c]
and edx, ecx
mov dword [ebp - 0x44], ebx
cmp ebx, 0x10045
mov ebx, dword [ebp - 0x2c]
mov dword [ebp - 0x14], edi
jle 0x41e7ac
add dword [ebp - 0x44], ecx
sub eax, dword [ebp - 0x50]
mov ecx, dword [ebp - 0x1c]
xor edi, dword [ebp - 0x40]
xor ecx, eax
and dword [ebp - 0x30], 0x16a74
cmp dword [ebp - 0x48], 0xb3ac
mov dword [ebp - 0x14], edi
mov dword [ebp - 0x1c], ecx
jge 0x41e7a9
and ebx, dword [ebp - 0x60]
or edx, 0xc908
add dword [ebp - 0x34], ecx
inc dword [ebp - 0x18]
mov dword [ebp - 0x2c], ebx
mov ecx, dword [ebp - 0x34]
sub dword [ebp - 0x58], 1
jne 0x41e743
mov dword [ebp - 4], edx
jmp 0x41e81b
mov ecx, dword [ebp - 4]
mov edx, dword [ebp - 0x34]
nop dword [eax]
mov ebx, dword [ebp - 0x44]
xor edi, 0x16053
sub dword [ebp - 0x4c], esi
add ebx, 0x8156
and edi, dword [ebp - 0x30]
xor eax, 0xaf2e
mov esi, dword [ebp - 0x3c]
and ecx, edx
mov dword [ebp - 0x44], ebx
mov dword [ebp - 0x14], edi
cmp ebx, 0x10045
jle 0x41e812
sub eax, dword [ebp - 0x50]
xor edi, dword [ebp - 0x40]
add dword [ebp - 0x44], edx
and dword [ebp - 0x30], 0x16a74
xor dword [ebp - 0x1c], eax
cmp dword [ebp - 0x48], 0xb3ac
mov dword [ebp - 0x14], edi
jge 0x41e812
or ecx, 0xc908
sub dword [ebp - 0x58], 1
jne 0x41e7c0
mov dword [ebp - 4], ecx
mov ebx, dword [ebp - 0x54]
mov dword [ebp - 0xc], eax
sub esp, 8
mov dword [ebp - 0x58], 0x9858
call fcn.004023e0
sub esp, 8
mov dword [ebp - 0x48], eax
mov edx, 0x17768
call fcn.00401650
mov esi, dword [ebp - 0x2c]
add esp, 0x10
mov eax, dword [ebp - 0xc]
mov ecx, dword [ebp - 0x28]
mov edx, dword [ebp - 0x1c]
mov dword [ebp - 0x38], 0x15b40
mov edi, dword [ebp - 0x48]
and edi, dword [ebp - 4]
xor ecx, edi
mov dword [ebp - 0x48], edi
mov edi, dword [ebp - 0x4c]
and edi, 0x1802
or edi, 0x1268c
mov dword [ebp - 0x4c], edi
mov edi, dword [ebp - 0x48]
sub dword [ebp - 8], edi
cmp dword [ebp - 0x20], 0x4321
mov edi, dword [ebp - 0x14]
je 0x41e8d5
mov esi, dword [ebp - 0x4c]
sub ecx, 0x13c69
sub dword [ebp - 0x18], esi
mov esi, dword [ebp - 0x30]
and dword [ebp - 8], ebx
or esi, 0x33b3
xor dword [ebp - 0x50], 0xe2dc
add esi, 0x48e4
and dword [ebp - 0x18], 0x232
or ebx, 0x8319
mov dword [ebp - 0x30], esi
mov esi, dword [ebp - 0x20]
and esi, 0x13d04
add esi, 0x83ee
add edi, dword [ebp - 0x48]
mov dword [ebp - 0x20], esi
mov esi, dword [ebp - 0x2c]
mov dword [ebp - 0x14], edi
mov edi, dword [ebp - 0x60]
or ecx, 0x15f2e
or dword [ebp - 0x58], edi
or edx, 0x836
inc dword [ebp - 4]
xor eax, 0x1399a
add dword [ebp - 0x38], 0xb45a
cmp dword [ebp - 0x30], 0x16d04
mov edi, dword [ebp - 0x14]
jne 0x41e929
xor dword [ebp - 8], 0x15d66
sub ecx, 0x16d04
add dword [ebp - 0x60], 0x9358
sub edx, esi
xor dword [ebp - 0x50], 0x10bd4
and dword [ebp - 0x24], 0xd9e4
inc dword [ebp - 0x38]
cmp dword [ebp - 4], 5
jl 0x41e856
mov dword [ebp - 0x28], ecx
mov ecx, 0x18108
push 0xee47
mov dword [ebp - 0x1c], edx
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x54], ebx
call fcn.00401170
push 0xee47
mov ecx, 0x18108
call fcn.00401170
mov eax, dword [ebp - 0x4c]
add esp, 8
and eax, dword [ebp - 0x40]
mov edx, dword [ebp - 0xc]
mov esi, dword [ebp - 0x3c]
xor edx, 0x10463
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 4]
xor eax, 0x6ee5
mov dword [ebp - 0x34], 0x75
add eax, 0x16dd8
mov dword [ebp - 0xc], edx
cmp dword [ebp - 0x24], 0xf813
mov dword [ebp - 4], eax
je 0x41ea76
mov eax, dword [ebp - 0x10]
sub edi, 0x5c0a
and dword [ebp - 0x20], esi
xor eax, 0x8c24
or dword [ebp - 0x18], 0x75
sub dword [ebp - 0x38], 0x171aa
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x14], edi
cmp ebx, 0x887b
je 0x41ea76
mov esi, dword [ebp - 0x24]
xor eax, edi
mov edx, dword [ebp - 0x44]
add esi, ecx
sub dword [ebp - 0x40], esi
xor edi, 0x75
xor dword [ebp - 8], edx
add esi, 0x16b4e
and dword [ebp - 0x5c], 0xf4ed
mov edx, dword [ebp - 0xc]
mov dword [ebp - 0x24], esi
mov esi, dword [ebp - 0x3c]
mov dword [ebp - 0x10], eax
mov dword [ebp - 0x14], edi
cmp ebx, 0x7ea2
jne 0x41ea76
add eax, edx
mov edx, dword [ebp - 0x40]
add dword [ebp - 8], edx
mov edx, dword [ebp - 0xc]
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 0x28]
add eax, dword [ebp - 0x48]
cmp dword [ebp - 0x10], 0x5381
mov dword [ebp - 0x28], eax
jne 0x41ea76
xor dword [ebp - 0x40], 0x1ab5
xor eax, 0xb45f
add dword [ebp - 0x60], 0x2b95
mov ebx, 0x2020
and dword [ebp - 0x20], 0x3389
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x5c]
sub eax, 0x5381
mov dword [ebp - 0x54], ebx
mov dword [ebp - 0x5c], eax
cmp eax, 0x13f80
jge 0x41ea76
mov eax, dword [ebp - 0x30]
add eax, dword [ebp - 0x40]
or dword [ebp - 0x38], ecx
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x48]
or dword [ebp - 4], eax
and edi, 0x2208
mov dword [ebp - 0x14], edi
cmp esi, 0x1011a
jge 0x41eaf1
mov ebx, dword [ebp - 0x38]
mov edx, 0x1011a
sub edx, esi
mov esi, 0x1011a
imul eax, edx, 0xfffe84a9
mov dword [ebp - 0x68], edx
mov dword [ebp - 0x3c], esi
mov esi, dword [ebp - 0x48]
add dword [ebp - 4], eax
imul eax, edx, 0xfffed123
mov edx, dword [ebp - 0x40]
add ecx, eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x2c], ecx
mov ecx, dword [ebp - 0x44]
xor edx, dword [ebp - 0x18]
or ebx, eax
sub ecx, dword [ebp - 0x18]
and edx, esi
mov edi, dword [ebp - 0x60]
and ecx, 0x155f3
or dword [ebp - 0x50], edi
sub dword [ebp - 0x14], eax
and dword [ebp - 0x5c], 0x48d5
sub dword [ebp - 0x68], 1
mov edi, dword [ebp - 0x14]
jne 0x41eab3
mov esi, dword [ebp - 0x3c]
mov dword [ebp - 0x38], ebx
mov ebx, dword [ebp - 0x54]
mov dword [ebp - 0x44], ecx
mov ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x40], edx
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 0x58]
cmp eax, 0x19edc
jge 0x41ec69
mov edi, 0x19edc
mov dword [ebp - 0x58], 0x19edc
sub edi, eax
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x68], edi
mov edi, dword [ebp - 0x4c]
add esi, 0xba0d
add edi, dword [ebp - 4]
xor eax, dword [ebp - 8]
or eax, dword [ebp - 0x30]
mov dword [ebp - 0x4c], edi
mov edi, dword [ebp - 0x5c]
sub edi, dword [ebp - 0x38]
cmp dword [ebp - 0x20], 0x7549
mov dword [ebp - 8], eax
mov dword [ebp - 0x5c], edi
jge 0x41ec03
mov edi, dword [ebp - 0x38]
add esi, 0x6d71
add edi, dword [ebp - 0x20]
or eax, 0xf68e
add dword [ebp - 0x4c], esi
or ecx, 0xdfff
cmp dword [ebp - 0x60], 0xb509
mov dword [ebp - 0x38], edi
mov edi, dword [ebp - 0x1c]
mov dword [ebp - 8], eax
mov eax, dword [ebp - 0x28]
jge 0x41ec06
or edi, dword [ebp - 0x5c]
xor eax, 0x1726f
xor dword [ebp - 0x30], 0x21aa
and edx, 0x15d6b
sub dword [ebp - 0x48], 0x8c5e
mov dword [ebp - 0x1c], edi
mov dword [ebp - 0x28], eax
cmp eax, 0x7165
jle 0x41ec06
mov edi, dword [ebp - 0x5c]
or dword [ebp - 0x40], 0x7c30
xor edi, 0x3532
mov dword [ebp - 0x5c], edi
cmp edi, 0x10c48
jle 0x41ec06
mov eax, dword [ebp - 0x34]
add esi, 0x11b77
sub eax, dword [ebp - 0x24]
or ecx, esi
add dword [ebp - 0x48], 0x12be6
add edx, eax
or dword [ebp - 0x60], 0x3d2b
cmp dword [ebp - 0x50], 0x182f2
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x28]
jge 0x41ec06
xor dword [ebp - 0x1c], 0x1611
or eax, ebx
and dword [ebp - 0x44], eax
mov ebx, dword [ebp - 0x54]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x30]
xor eax, dword [ebp - 0x38]
sub dword [ebp - 0x40], eax
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x28]
mov edi, dword [ebp - 0x30]
or edx, 0x10500
add dword [ebp - 0x10], edi
and edx, eax
mov eax, dword [ebp - 0x60]
and esi, 0x7a15
add eax, dword [ebp - 4]
or ecx, dword [ebp - 0x48]
cmp dword [ebp - 0x1c], 0x22df
mov dword [ebp - 0x60], eax
jne 0x41ec56
or edx, 0xf270
xor ecx, 0x8950
mov edi, 0xc67f
mov dword [ebp - 0x1c], edi
cmp eax, 0x12324
jne 0x41ec56
mov eax, dword [ebp - 0x50]
and dword [ebp - 8], eax
dec dword [ebp - 0x30]
mov eax, dword [ebp - 0x60]
sub dword [ebp - 0x68], 1
jne 0x41eb13
mov edi, dword [ebp - 0x14]
mov dword [ebp - 0xc], edx
mov dword [ebp - 0x2c], ecx
mov ecx, dword [ebp - 0x64]
cmp ecx, 0x2b
jne 0x41ed70
mov ebx, 0x3983
call fcn.00401fb0
mov edi, eax
mov dword [ebp - 0x64], 0x1d2
call fcn.00402700
call fcn.00402790
sub esp, 8
mov edx, 0x2089
mov esi, eax
push 0x8c05
call fcn.00403690
push ecx
push 0x11e9b
push ecx
call fcn.004012d0
lea ecx, [esi + 0x8d95]
mov dword [ebp - 0x60], eax
mov edx, 0x7ece
call fcn.00402840
add esp, 0x14
mov dword [ebp - 0x68], eax
call fcn.00401a70
sub esp, 0x1c
lea ecx, [edi - 0x7afb]
call fcn.00405ad0
mov edx, dword [ebp - 0x60]
mov edi, eax
add esp, 0x20
mov eax, 0x7d68
mov ecx, 0x7e3b
mov esi, dword [ebp - 0x64]
and ebx, eax
cmp edx, 0x14ec1
jne 0x41ed29
mov edx, dword [ebp - 0x68]
or eax, 0x11869
or esi, edx
or edi, 0x14b42
sub edx, 0x15dbd
mov dword [ebp - 0x64], esi
add ebx, 0x7498
mov dword [ebp - 0x68], edx
cmp eax, 0x16bff
jg 0x41ed3c
mov edx, dword [ebp - 0x60]
add ebx, 0x160
inc ecx
add eax, ebx
cmp ecx, 0x7e3c
jl 0x41ecf0
jmp 0x41ed3f
or esi, ecx
inc ecx
sub esp, 0x10
lea eax, [ecx + 0xd2f1]
push eax
push ecx
lea eax, [edi + 0x1eae]
push eax
call fcn.00404dd0
add esp, 0x1c
lea ecx, [esi - 0xa5]
call fcn.00403b50
pop edi
pop esi
mov eax, 0x3e
pop ebx
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebp - 0x44]
mov edx, dword [ebp - 0x40]
mov dword [ebp - 0x3c], 0x3db0
lea eax, [ecx - 0x5b]
push eax
mov eax, dword [ebp - 0x24]
lea edx, [edx + 0x1247b]
add eax, 0xd37af
push eax
lea eax, [ecx + 0x6f2e]
mov ecx, dword [ebp - 0x58]
push eax
sub esp, 8
lea ecx, [ecx - 0x198b1]
call fcn.00404500
mov ecx, dword [ebp - 0x2c]
add esp, 0x14
mov edx, dword [ebp - 0xc]
mov dword [ebp - 0x60], eax
add eax, 0xffffff7a
mov dword [ebp - 0x68], eax
mov dword [ebp - 0x54], 0
test eax, eax
jle 0x41eedc
mov eax, dword [ebp - 0x28]
nop
mov edi, dword [ebp - 0x30]
or eax, edi
or edx, dword [ebp - 0x3c]
sub edi, 0x38c2
add ecx, dword [ebp - 0x48]
and dword [ebp - 0x20], 0x1614a
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x48]
sub eax, dword [ebp - 0x54]
xor eax, dword [ebp - 0x5c]
cmp dword [ebp - 0x14], 0x16532
mov dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0xc], edx
mov dword [ebp - 0x30], edi
jge 0x41eeca
mov edi, dword [ebp - 0x5c]
sub edi, dword [ebp - 0x38]
or edi, ecx
mov dword [ebp - 0x5c], edi
mov edi, dword [ebp - 0x50]
or dword [ebp - 0x10], edi
mov edi, dword [ebp - 0x34]
add dword [ebp - 0x30], edi
cmp edx, 0xd05
je 0x41eeca
mov edi, dword [ebp - 0x3c]
sub edx, 0x5d7d
xor edi, dword [ebp - 0x10]
sub dword [ebp - 0x20], 0x12658
and dword [ebp - 0x4c], 0x6164
mov dword [ebp - 0x3c], edi
mov edi, dword [ebp - 0x60]
xor dword [ebp - 0x34], edi
cmp dword [ebp - 0x48], 0x2be1
mov dword [ebp - 0xc], edx
jne 0x41eeca
sub dword [ebp - 0x20], 0x1292c
and eax, 0xd124
mov edi, dword [ebp - 0x20]
sub esi, 0x222a
or dword [ebp - 0x1c], edi
xor ebx, ebx
mov edx, dword [ebp - 0x50]
sub dword [ebp - 4], edx
mov edi, dword [ebp - 0x4c]
mov edx, dword [ebp - 0x38]
or edx, dword [ebp - 8]
add edi, dword [ebp - 0x3c]
xor ecx, dword [ebp - 0x58]
mov dword [ebp - 0x38], edx
mov edx, dword [ebp - 0xc]
mov dword [ebp - 0x4c], edi
mov dword [ebp - 0x28], eax
cmp edi, 0x10138
jne 0x41eeca
mov edx, dword [ebp - 0x20]
and ecx, 0x3514
add edx, dword [ebp - 0x10]
xor esi, ecx
or dword [ebp - 0x50], 0x10138
or dword [ebp - 0x3c], 0x10770
xor ecx, 0xf418
mov dword [ebp - 0x20], edx
mov edx, dword [ebp - 0xc]
inc dword [ebp - 0x54]
mov edi, dword [ebp - 0x68]
cmp dword [ebp - 0x54], edi
mov edi, dword [ebp - 0x14]
jl 0x41edd0
mov eax, dword [ebp - 0x20]
cmp eax, 0xfffedab1
jge 0x41efec
mov edx, dword [ebp - 0x30]
imul eax, eax, 0x11f45
add edx, 0x49229f4b
add edx, eax
mov eax, dword [ebp - 0x1c]
mov dword [ebp - 0x30], edx
or eax, dword [ebp - 8]
and dword [ebp - 0x40], 0xa624
and esi, dword [ebp - 4]
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x38]
xor dword [ebp - 0x24], eax
mov eax, 0xe00a
sub eax, edi
add ecx, eax
cmp dword [ebp - 0x60], 0x1691
jle 0x41ef97
mov eax, dword [ebp - 0x3c]
sub dword [ebp - 0x48], eax
mov eax, dword [ebp - 0x1c]
xor eax, 0x63c6
cmp dword [ebp - 8], 0x18361
jle 0x41ef9a
mov edx, dword [ebp - 0x5c]
xor edx, dword [ebp - 0x44]
and dword [ebp - 0xc], 0xfb3b
mov dword [ebp - 0x5c], edx
mov edx, dword [ebp - 0x3c]
sub dword [ebp - 0x38], edx
mov edx, dword [ebp - 0x10]
or edx, 0x15d71
xor edx, dword [ebp - 0x20]
mov dword [ebp - 0x10], edx
mov edx, dword [ebp - 0x58]
xor dword [ebp - 0x48], edx
cmp dword [ebp - 0x34], 0xf040
jne 0x41ef9a
mov edx, dword [ebp - 0x3c]
or dword [ebp - 0x28], 0x1397d
or edx, 0xf040
or dword [ebp - 0x44], 0x9180
and dword [ebp - 8], 0x283a
mov dword [ebp - 0x34], edx
jmp 0x41ef9a
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x3c]
inc dword [ebp - 0x20]
or dword [ebp - 0x58], 0x12b69
and dword [ebp - 0x38], 0xfefa
and dword [ebp - 0x24], 0x14b2a
cmp dword [ebp - 0x44], 0x11782
mov edx, dword [ebp - 0xc]
mov dword [ebp - 0x1c], eax
jge 0x41efdf
mov edx, dword [ebp - 0x4c]
xor edi, 0xc42e
sub dword [ebp - 4], edx
add ebx, esi
dec dword [ebp - 0x44]
mov edx, dword [ebp - 0xc]
mov dword [ebp - 0x58], 0
cmp dword [ebp - 0x20], 0xfffedab1
jl 0x41ef01
mov eax, dword [ebp - 0x5c]
and edi, 0x158d9
or eax, dword [ebp - 0x3c]
or dword [ebp - 0x50], ecx
cmp dword [ebp - 0x34], 0x2969
mov dword [ebp - 0x5c], eax
je 0x41f060
mov edx, dword [ebp - 0x50]
xor edx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x28]
or dword [ebp - 8], 0x166b5
or eax, 0x172ee
mov dword [ebp - 0x50], edx
mov edx, dword [ebp - 0x10]
or edx, 0x11cdd
mov dword [ebp - 0x28], eax
sub edx, 0xc487
mov dword [ebp - 0x10], edx
mov edx, dword [ebp - 0x60]
and edx, esi
add edx, eax
mov eax, dword [ebp - 0x50]
mov dword [ebp - 0x60], edx
mov edx, dword [ebp - 0xc]
cmp eax, 0x18599
je 0x41f060
and ebx, eax
mov eax, dword [ebp - 0x44]
and dword [ebp - 0x24], eax
mov eax, dword [ebp - 8]
or eax, dword [ebp - 0x58]
xor eax, dword [ebp - 8]
mov dword [ebp - 0x58], eax
nop
or ecx, dword [ebp - 0x50]
mov eax, edx
sub dword [ebp - 0x34], 0xae24
and eax, 0x1fb7
xor dword [ebp - 0x48], 0x1699b
and esi, eax
mov eax, dword [ebp - 0x44]
sub dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0x50]
add dword [ebp - 0x40], eax
mov eax, dword [ebp - 0x44]
xor dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x20]
add dword [ebp - 4], 0x16ae0
add eax, 0xfffff2a1
inc dword [ebp - 0x24]
and eax, 0x391d
or dword [ebp - 0x4c], 0x15699
mov dword [ebp - 0x20], eax
mov eax, dword [ebp - 0x50]
sub eax, dword [ebp - 0x44]
cmp dword [ebp - 0x3c], 0x413f
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 8]
mov dword [ebp - 0x2c], ecx
jne 0x41f181
and eax, dword [ebp - 0x24]
and edi, 0x8822
or dword [ebp - 0x4c], 0x119a4
xor edx, 0x166b6
or edi, 0x167d9
mov dword [ebp - 8], eax
mov dword [ebp - 0xc], edx
cmp ebx, 0xb7c
jne 0x41f181
and dword [ebp - 0x60], 0xfc8b
xor ecx, eax
mov eax, dword [ebp - 0x4c]
add esi, 0x131a0
add dword [ebp - 0x34], 0x69ad
and esi, 0x1968
mov dword [ebp - 0x2c], ecx
and edi, 0x12ee7
mov ecx, dword [ebp - 0x60]
add esi, 0xfc2c
or eax, ecx
sub ecx, dword [ebp - 4]
add eax, edx
mov dword [ebp - 0x60], ecx
mov ecx, dword [ebp - 0x2c]
sub edx, 0x1789f
mov dword [ebp - 0x4c], eax
mov eax, dword [ebp - 0x20]
or eax, ebx
xor dword [ebp - 0x28], eax
mov dword [ebp - 0x20], eax
lea eax, [edx + 0x4cbb]
and edx, dword [ebp - 0x58]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x10]
or dword [ebp - 0x58], eax
cmp dword [ebp - 0x1c], 0x1037c
mov dword [ebp - 0xc], edx
jge 0x41f17e
and dword [ebp - 0x5c], 0xbed
sub dword [ebp - 0x58], ecx
or eax, dword [ebp - 0x5c]
mov dword [ebp - 4], 0
mov dword [ebp - 0x10], eax
mov eax, dword [ebp - 8]
cmp dword [ebp - 0x24], 0x21
jl 0x41f060
mov edx, dword [ebp - 0x34]
add eax, 0xc2b6
push eax
mov eax, dword [ebp - 0x58]
push ecx
add eax, 0xe30f
lea edx, [edx + 0x177ea]
push eax
mov eax, dword [ebp - 0x5c]
push ecx
add eax, 0x51aae
push eax
call fcn.00403100
mov edx, dword [ebp - 0x28]
add esp, 0x14
mov ecx, dword [ebp - 0xc]
xor edx, dword [ebp - 0x3c]
sub ecx, dword [ebp - 0x5c]
add ebx, dword [ebp - 0x34]
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 8]
and eax, 0x8c21
mov dword [ebp - 0x28], edx
xor eax, 0xc2d1
mov dword [ebp - 8], eax
nop dword [eax + eax]
mov eax, dword [ebp - 0x30]
mov edx, dword [ebp - 0x40]
sub eax, ecx
and dword [ebp - 4], edx
sub ecx, 0x14ba6
and edi, dword [ebp - 0x38]
and dword [ebp - 0x20], 0x8a2e
cmp edx, 0x17267
mov dword [ebp - 0xc], ecx
lea ecx, [eax + 0xb00]
cmovge ecx, eax
mov eax, dword [ebp - 0x10]
and eax, esi
mov dword [ebp - 0x30], ecx
mov ecx, dword [ebp - 0xc]
cmp edx, 0x17267
mov edx, dword [ebp - 0x28]
cmovge eax, esi
inc dword [ebp - 0x24]
sub dword [ebp - 0x44], 0x4d0
mov esi, eax
mov eax, dword [ebp - 0x2c]
sub ebx, 0x7298
or dword [ebp - 0x4c], eax
cmp dword [ebp - 0x58], 0x11108
mov dword [ebp - 0x60], esi
mov dword [ebp - 0x54], ebx
jge 0x41f2d2
mov esi, dword [ebp - 0x40]
and edx, 0xb829
and esi, dword [ebp - 0x20]
sub dword [ebp - 0x48], 0x773d
sub dword [ebp - 8], 0x13ea5
xor dword [ebp - 0x50], 0x142f6
mov dword [ebp - 0x40], esi
mov esi, dword [ebp - 0x60]
mov dword [ebp - 0x28], edx
cmp esi, 0xdf6c
je 0x41f2d2
mov ecx, dword [ebp - 0x3c]
or ecx, dword [ebp - 8]
xor dword [ebp - 0x4c], esi
xor esi, ebx
xor dword [ebp - 8], 0xc33f
xor dword [ebp - 0x34], 0x11079
mov dword [ebp - 0x3c], ecx
mov ecx, dword [ebp - 0x10]
add ecx, ecx
mov dword [ebp - 0x10], ecx
mov ecx, dword [ebp - 0xc]
cmp esi, 0x16370
jle 0x41f2d2
and eax, dword [ebp - 0x44]
or edx, 0x14537
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 8]
add dword [ebp - 0x34], eax
xor eax, dword [ebp - 0x58]
xor dword [ebp - 0x48], 0x8605
mov dword [ebp - 0x28], edx
mov dword [ebp - 8], eax
cmp dword [ebp - 0x24], 0x22
jl 0x41f1e0
sub esp, 0x1c
mov dword [ebp - 0x14], edi
call fcn.00404c70
mov edx, 0x98dd
mov dword [ebp - 0x60], eax
mov ecx, 0x48b8
call fcn.00404640
add esp, 0x18
push 0x126e0
call fcn.00404700
push 0xee47
mov ecx, 0x18108
mov dword [ebp - 0x44], 0xffffcac0
call fcn.00401170
mov eax, dword [ebp - 0x50]
add esp, 0xc
mov edx, dword [ebp - 0x20]
add eax, 0xfff5b9d2
push eax
mov eax, dword [ebp - 0x48]
lea edx, [edx + 0x3a37]
add eax, 0x44485
push eax
push ecx
lea eax, [ebx + 0x499b]
push eax
sub esp, 8
push 0x2aac
push ecx
call fcn.00404100
mov edx, dword [ebp - 0x28]
add esp, 0x20
mov dword [ebp - 0x5c], eax
cmp ebx, 0xf641
jge 0x41f444
mov eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0xc]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x44], 0xffffcac0
or dword [ebp - 0x60], eax
inc ebx
inc dword [ebp - 0x38]
and esi, 0x7d3d
and edx, 0x1525d
mov dword [ebp - 0x54], ebx
xor eax, 0x12c10
xor edi, 0xeb17
cmp ecx, 0x85ca
jne 0x41f433
or dword [ebp - 0x24], 0x120e4
and dword [ebp - 0x5c], 0x302f
cmp dword [ebp - 0x60], 0x14957
je 0x41f433
or dword [ebp - 0x20], ebx
mov ecx, 0x217c
and edx, 0xb69a
mov dword [ebp - 0xc], ecx
cmp dword [ebp - 0x30], 0xdc61
je 0x41f433
and dword [ebp - 0x30], 0x151cb
or edi, dword [ebp - 0x44]
and dword [ebp - 0x3c], 0x10ca9
cmp dword [ebp - 0x58], 0x25a8
mov dword [ebp - 0x34], 0
je 0x41f433
mov ecx, dword [ebp - 0x10]
sub edi, 0xb9dd
and dword [ebp - 0x48], 0x11440
add ecx, ecx
sub dword [ebp - 0x38], 0x16990
cmp dword [ebp - 0x3c], 0x7406
mov dword [ebp - 0x10], ecx
mov ecx, dword [ebp - 0xc]
jbe 0x41f433
mov ebx, dword [ebp - 0x58]
and dword [ebp - 0x30], ebx
mov ebx, dword [ebp - 0x54]
mov dword [ebp - 0x34], 0xd1eb
cmp ebx, 0xf641
jl 0x41f378
mov dword [ebp - 0x14], edi
jmp 0x41f447
mov eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x48], 0x66f1
mov ecx, dword [ebp - 0xc]
mov ebx, dword [ebp - 0x40]
jge 0x41f4c0
mov edi, dword [ebp - 0x58]
nop dword [eax]
and edi, dword [ebp - 0x4c]
xor ebx, 0x16060
inc dword [ebp - 0x10]
xor eax, 0x7548
or ecx, dword [ebp - 0x30]
add ebx, 0xffffaeb1
and eax, 0xf5da
add ebx, edi
xor edx, 0x35f2
cmp dword [ebp - 0x10], 0x676b1
jl 0x41f460
mov dword [ebp - 0x2c], eax
lea eax, [edx + 0x14cef]
push eax
push 0x14137
push 0xa4e
push 0x5663
mov dword [ebp - 0x58], edi
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x28], edx
mov dword [ebp - 0xc], ecx
call fcn.00402540
mov edi, dword [ebp - 0x14]
jmp 0x41f50a
inc dword [ebp - 0x10]
xor ebx, 0x16060
or ecx, dword [ebp - 0x30]
and eax, 0xf5da
add ebx, dword [ebp - 0x58]
xor edx, 0x35f2
cmp dword [ebp - 0x10], 0x676b1
jl 0x41f4c0
mov dword [ebp - 0x2c], eax
lea eax, [edx + 0x14cef]
push eax
push 0x14137
push 0xa4e
push 0x5663
mov dword [ebp - 0x40], ebx
mov dword [ebp - 0x28], edx
mov dword [ebp - 0xc], ecx
call fcn.00402540
mov ebx, dword [ebp - 0x54]
add esp, 0x10
mov ecx, 0xffff87bd
mov eax, 0x19fab
add eax, 0xfffe60cf
push 0x5ad4
push ecx
push 0x3ae9
push ecx
push eax
lea eax, [ecx + 0x19638]
push eax
push ecx
call fcn.004013a0
push 0xee47
mov ecx, 0x18108
call fcn.00401170
mov eax, dword [ebp - 0x58]
add esp, 0x20
add eax, 0x7a
push 0x5ad4
push ecx
push 0x3ae9
push ecx
push eax
push 0x11df5
push ecx
call fcn.004013a0
push 0xee47
mov ecx, 0x18108
call fcn.00401170
push 0xee47
mov ecx, 0x18108
call fcn.00401170
mov ecx, dword [ebp - 0x2c]
add esp, 0x20
mov edx, dword [ebp - 0xc]
add edx, 0x9468b
mov dword [ebp - 0x54], 0x82e2
push 0xfa20
sub esp, 0x18
lea ecx, [ecx + 0xb1]
call fcn.00401aa0
mov eax, dword [ebp - 0x58]
add esp, 0x14
mov edx, dword [ebp - 0x28]
add eax, 0x126e9
push eax
mov eax, dword [ebp - 0x60]
lea edx, [edx + 0x12e28]
add eax, 0x57041
push eax
call fcn.004043b0
add esp, 0x14
lea ecx, [eax - 0x1496]
mov eax, dword [ebp - 0x64]
mov dword [ebp - 0x58], ecx
cmp eax, 0x2f
jne 0x41f63f
push 0xee47
mov ecx, 0x18108
call fcn.00401170
push 0xee47
mov ecx, 0x18108
call fcn.00401170
push 0xee47
mov ecx, 0x18108
call fcn.00401170
add esp, 8
push 0x654c
push 0xfd54
push 0x3010
push 0x95c3
call fcn.004063e0
add esp, 0x14
mov eax, 0x3f
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
cmp eax, 0x3d
jne 0x41f6a0
push ecx
call fcn.00405660
push 0x130bc
sub esp, 8
push 0x12b1c
push ecx
mov ecx, 0xceda
call fcn.00403960
push 0xee47
mov ecx, 0x18108
call fcn.00401170
add esp, 0x1c
push 0x5ad4
push ecx
push 0x3ae9
push ecx
push 0x7a
push 0x11df5
push ecx
call fcn.004013a0
add esp, 0x1c
mov eax, 0x40
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp - 0x24]
add edi, ecx
or dword [ebp - 0x10], eax
add ebx, 0x13958
mov eax, dword [ebp - 0x3c]
xor edi, 0x7bcb
mov ecx, dword [ebp - 0xc]
or eax, 0x3db0
cmp dword [ebp - 4], 0x377e
mov edx, dword [ebp - 0x28]
mov dword [ebp - 0x3c], eax
mov dword [ebp - 0x60], 0x1ffff
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 0x50], edx
jle 0x41f78a
mov eax, dword [ebp - 0x34]
or ebx, edi
xor eax, dword [ebp - 0x30]
mov edi, dword [ebp - 0x10]
or edi, dword [ebp - 0x44]
cmp eax, 0x782a
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x3c]
mov dword [ebp - 0x4c], ecx
mov dword [ebp - 0x50], edx
jge 0x41f795
mov eax, dword [ebp - 0x40]
and ecx, 0x5c2e
and dword [ebp - 4], 0xb970
add eax, 0x1ffff
mov dword [ebp - 0x60], eax
mov eax, edx
xor eax, dword [ebp - 0x38]
or eax, dword [ebp - 0x3c]
mov dword [ebp - 0x4c], ecx
mov ecx, dword [ebp - 0x24]
sub ecx, 0x60a0
mov dword [ebp - 0x38], eax
cmp dword [ebp - 0x60], 0xca5c
mov dword [ebp - 0x50], edx
jge 0x41f7a5
mov eax, dword [ebp - 0x44]
xor dword [ebp - 0x3c], eax
sub dword [ebp - 4], 0x5159
cmp dword [ebp - 0x20], 0x18196
mov dword [ebp - 0x50], edx
jne 0x41f79d
or dword [ebp - 0x5c], esi
add esi, ebx
mov dword [ebp - 0x50], edx
cmp esi, 0x13096
jle 0x41f7a5
xor dword [ebp - 0x58], 0xbab3
add eax, edx
mov edx, dword [ebp - 0x34]
add dword [ebp - 0x4c], 0x11c98
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x48]
add eax, 0x150b
sub edx, eax
jmp 0x41f7a8
mov edi, dword [ebp - 0x10]
mov ecx, dword [ebp - 0x24]
mov edx, dword [ebp - 0x34]
jmp 0x41f7ab
mov ecx, dword [ebp - 0x24]
mov edx, dword [ebp - 0x34]
jmp 0x41f7ab
mov eax, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x34]
jmp 0x41f7ab
mov edx, dword [ebp - 0x34]
mov eax, dword [ebp - 0x3c]
sub esi, ecx
mov dword [ebp - 0x48], 0x3db1
cmp dword [ebp - 0x58], 0x13d21
jle 0x41f7e9
and ebx, dword [ebp - 0x5c]
add edx, 0x4d42
sub dword [ebp - 0x5c], esi
or esi, dword [ebp - 0x4c]
sub edi, dword [ebp - 0x44]
cmp dword [ebp - 0x44], 0x166dc
jle 0x41f7e9
cmp ecx, 0x1b3e9
jne 0x41f7e9
or edx, dword [ebp - 0x58]
add eax, dword [ebp - 0x40]
mov dword [ebp - 0x3c], eax
mov eax, dword [ebp - 0x64]
add eax, 0xffffffd0
cmp eax, 9
ja 0x41fc98
mov eax, 0xb5af
mov dword [ebp - 0x5c], 0xca29
mov dword [ebp - 0x68], eax
mov edi, 0xcb9
mov eax, 0x4d15
mov dword [ebp - 0x4c], 0xa929
mov esi, 0x9592
mov dword [ebp - 0x20], 0x128fc
mov dword [ebp - 0x60], 0x17156
mov ebx, 0x6955
mov dword [ebp - 0x38], eax
mov dword [ebp - 0x50], 0x17a72
mov dword [ebp - 0x40], 0x16907
mov dword [ebp - 0x54], 0xd142
mov dword [ebp - 0x44], 0x2ee7
mov dword [ebp - 0x2c], 0xafdc
call fcn.00402700
mov ecx, 0x2249
mov dword [ebp - 0x58], eax
call fcn.00401690
mov ecx, dword [ebp - 0x58]
mov edx, dword [ebp - 0x54]
mov dword [ebp - 0x28], eax
mov eax, 0x369b
nop word [eax + eax]
or dword [ebp - 0x5c], 0x162e0
or edx, 0xe051
sub dword [ebp - 0x60], 0x22774
sub edx, 0x11e07
and dword [ebp - 0x50], 0x16277
and esi, eax
mov dword [ebp - 0x54], edx
inc ecx
mov edx, dword [ebp - 0x2c]
or eax, 0x695a
xor edx, 0x275c
xor edi, 0x18272
sub edx, 0x56e4
or ebx, 0xc36a
mov dword [ebp - 0x2c], edx
mov edx, dword [ebp - 0x54]
cmp ecx, 0xbc0e
jl 0x41f880
mov dword [ebp - 0x58], ecx
mov edx, 0x98dd
mov ecx, 0x48b8
mov dword [ebp - 0x48], eax
mov dword [ebp - 0x3c], ebx
call fcn.00404640
mov eax, dword [ebp - 0x50]
mov ebx, 0xc79a
xor dword [ebp - 0x60], edi
sub ebx, eax
add dword [ebp - 0x5c], 0x17e73
xor esi, 0xbded
mov dword [ebp - 0x34], 0xffff19b3
lea ecx, [ebx + 0xebc4]
cmp ecx, 0x4bbb
mov ecx, dword [ebp - 0x48]
jge 0x41f96b
lea edx, [ecx + 0xa929]
xor edi, 0x3c8d
mov dword [ebp - 0x4c], edx
sub ecx, 0xc870
mov edx, dword [ebp - 0x58]
sub edx, eax
lea eax, [ebx + 0xebc4]
xor eax, 0x769a
and ebx, 0x2ee7
mov dword [ebp - 0x58], eax
mov eax, 0x13362
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x58]
xor dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x60]
xor dword [ebp - 0x54], eax
mov eax, 0x1059a
mov dword [ebp - 0x40], eax
jmp 0x41f96e
mov edx, dword [ebp - 0x58]
and dword [ebp - 0x4c], 0x2976
mov eax, dword [ebp - 0x28]
xor eax, dword [ebp - 0x4c]
or dword [ebp - 0x54], 0x451a
and dword [ebp - 0x5c], 0xfc19
cmp dword [ebp - 0x2c], 0x1be2
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x30], 0x7388
mov dword [ebp - 0x24], 0xb5af
jle 0x41f9c4
add dword [ebp - 0x5c], 0x2ee7
mov eax, 0x2ee7
sub eax, dword [ebp - 0x54]
and dword [ebp - 0x50], 0x26e7
add ebx, eax
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x40]
sub ecx, eax
add edx, 0x70d8
mov eax, dword [ebp - 0x60]
and edi, 0xb4ec
sub eax, 0xb5af
mov dword [ebp - 0x58], edx
mov edx, dword [ebp - 0x44]
mov dword [ebp - 0x48], ecx
mov dword [ebp - 0x60], eax
cmp edx, 0x3dba
je 0x41fa22
sub edx, dword [ebp - 0x4c]
or eax, 0x1532e
mov dword [ebp - 0x60], eax
or ecx, edi
or edi, dword [ebp - 0x50]
mov eax, 0x128fc
and eax, 0x13362
mov dword [ebp - 0x44], edx
mov dword [ebp - 0x20], eax
add esi, 0x1a93
mov eax, dword [ebp - 0x28]
or eax, 0xb5af
mov dword [ebp - 0x48], ecx
mov dword [ebp - 0x68], eax
call fcn.00404cd0
sub esp, 0xc
call fcn.00401e50
push ecx
lea eax, [ebx + 0x514b]
push eax
mov eax, dword [ebp - 0x4c]
add eax, 0xcb0a
push eax
call fcn.00403510
mov dword [ebp - 0x54], eax
add esp, 0x18
add eax, 0xfffe8af9
mov dword [ebp - 0x50], eax
test eax, eax
jle 0x41fb0b
mov ecx, dword [ebp - 0x3c]
mov edx, dword [ebp - 0x68]
mov eax, dword [ebp - 0x60]
nop dword [eax]
nop dword [eax + eax]
xor dword [ebp - 0x5c], eax
add esi, 0x288a
or ecx, 0x15f6e
and esi, edi
xor edx, 0x10f5d
mov dword [ebp - 0x3c], ecx
cmp edi, 0xe3a4
jle 0x41fb01
xor ebx, dword [ebp - 0x58]
xor esi, 0x1165b
mov ecx, dword [ebp - 0x44]
or edi, 0xe93a
mov eax, dword [ebp - 0x44]
sub ecx, 0xe89a
or eax, dword [ebp - 0x34]
add ebx, ecx
xor eax, dword [ebp - 0x58]
xor ebx, 0x914b
sub dword [ebp - 0x58], 0x115f8
cmp eax, 0x64b3
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x60]
mov dword [ebp - 0x44], ecx
mov ecx, dword [ebp - 0x3c]
jne 0x41fb01
add ecx, dword [ebp - 0x24]
or edx, 0x169a0
sub edx, 0x7388
mov dword [ebp - 0x3c], ecx
and edi, esi
and ebx, 0x158e0
cmp edx, 0x49b0
jne 0x41fb01
sub dword [ebp - 0x24], eax
mov dword [ebp - 0x34], 0x64b2
sub dword [ebp - 0x50], 1
jne 0x41fa70
mov eax, dword [ebp - 0x58]
lea edx, [esi + 0x751f]
add eax, 0xffff48fd
push eax
mov eax, dword [ebp - 0x5c]
push ecx
add eax, 0xc50d
lea ecx, [esi + 0x8477]
push eax
call fcn.00404ef0
mov edx, dword [ebp - 0x34]
add esp, 0xc
mov dword [ebp - 0x60], eax
mov eax, dword [ebp - 0x48]
nop dword [eax + eax]
mov ecx, dword [ebp - 0x40]
inc edi
add ecx, 0x166a0
and eax, edx
or ecx, edi
or esi, 0xf61b
mov dword [ebp - 0x40], ecx
cmp edx, 0xd799
jle 0x41fba2
add esi, dword [ebp - 0x4c]
add eax, ecx
mov ecx, dword [ebp - 0x38]
and ebx, edx
cmp dword [ebp - 0x20], 0x132a4
jbe 0x41fba5
and dword [ebp - 0x30], edi
add ecx, 0x9549
or esi, 0x699e
mov dword [ebp - 0x38], ecx
sub ebx, 0x3b4f
cmp dword [ebp - 0x40], 0x1591a
jne 0x41fba5
sub edx, dword [ebp - 0x4c]
sub dword [ebp - 0x60], ebx
add dword [ebp - 0x54], 0x82f0
jmp 0x41fba5
mov ecx, dword [ebp - 0x38]
cmp edi, 0xa6eb
jl 0x41fb40
cmp dword [ebp - 0x20], 0x89ab
mov ebx, dword [ebp - 0x3c]
mov edi, dword [ebp - 0x30]
mov dword [ebp - 0x48], eax
jbe 0x41fbf1
nop
or ebx, 0x641f
and edi, eax
cmp esi, 0x10671
je 0x41fbe6
or dword [ebp - 0x54], 0x856e
cmp dword [ebp - 0x60], 0x10dc9
je 0x41fbe6
and ebx, 0x83e3
inc ecx
cmp ecx, 0x4d16
jl 0x41fbc0
jmp 0x41fc11
or ebx, 0x641f
and edi, eax
cmp esi, 0x10671
je 0x41fc08
or dword [ebp - 0x54], 0x856e
inc ecx
cmp ecx, 0x4d16
jl 0x41fbf1
push 0xee47
mov ecx, 0x18108
call fcn.00401170
push 0xee47
mov ecx, 0x18108
call fcn.00401170
add esp, 8
sub esp, 0x14
call fcn.004017d0
call fcn.00402790
mov esi, dword [ebp - 0x54]
add esp, 0x10
lea eax, [esi - 0x8789]
push eax
sub esp, 8
lea eax, [ebx - 0x14b]
push eax
call fcn.00403f90
add esp, 0x14
cmp edi, 0xba8
jne 0x41fc6c
call dword [sym.imp.USER32.dll_GetWindowRect]
sub esp, 0xc
lea edx, [esi - 0x1d909]
call fcn.00405730
mov ecx, dword [ebp - 0x48]
add esp, 0xc
add ecx, 0x21759
call fcn.00401b30
mov eax, dword [ebp - 0x64]
pop edi
pop esi
add eax, 4
pop ebx
mov esp, ebp
pop ebp
ret
mov ecx, dword [ebp - 4]
lea eax, [edx + 0x2bb1c]
push eax
sub esp, 8
add ecx, 0x12d87
push 0x10b84
call fcn.00401470
mov dword [ebp - 0x4c], eax
add esp, 0x10
mov eax, dword [ebp - 0x64]
add eax, 0xffffffbf
cmp eax, 0x19
ja 0x41fce3
call fcn.00403ac0
sub esp, 0x10
call fcn.00402bf0
mov eax, dword [ebp - 0x64]
add esp, 0x10
add eax, 0xffffffbf
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
push ecx
call fcn.00401850
mov ecx, dword [ebp - 0x5c]
add esp, 4
cmp ecx, 0x9d17
jge 0x41fdcb
mov eax, 0x9d17
sub eax, ecx
mov ecx, dword [ebp - 0x40]
mov dword [ebp - 0x68], eax
mov eax, dword [ebp - 0x38]
nop dword [eax + eax]
mov edx, dword [ebp - 0x3c]
and eax, 0xb71b
mov dword [ebp - 0x38], eax
cmp ecx, 0x153cd
jge 0x41fd40
and dword [ebp - 0x4c], 0x17543
mov eax, esi
or eax, 0x9273
or dword [ebp - 0x60], eax
and edx, 0x6aa2
mov eax, dword [ebp - 0x38]
mov dword [ebp - 0x3c], edx
add dword [ebp - 0x54], 0xbb51
sub ebx, ecx
xor dword [ebp - 0x48], 0x5aaf
cmp ecx, 0xc7e5
jne 0x41fdc1
sub dword [ebp - 0x54], esi
or edx, 0x21ca
cmp dword [ebp - 0x4c], 0xada
mov dword [ebp - 0x3c], edx
jne 0x41fdc1
sub dword [ebp - 0x48], 0xada
add esi, edx
xor dword [ebp - 0x60], 0x178c6
mov edx, dword [ebp - 0x54]
cmp edx, 0x199
jge 0x41fdc1
add edx, dword [ebp - 0x58]
or dword [ebp - 0x60], 0xc3b5
mov dword [ebp - 0x54], edx
cmp eax, 0x8a0b
jae 0x41fdc1
mov edx, ebx
sub esi, 0x178da
and edx, 0xada
mov dword [ebp - 0x4c], edx
mov edx, dword [ebp - 0x50]
add dword [ebp - 0x58], edx
cmp ebx, 0x4ace
jle 0x41fdc1
or edi, 0x16c26
sub dword [ebp - 0x68], 1
jne 0x41fd10
mov esi, dword [ebp - 0x64]
lea eax, [esi - 0x61]
cmp eax, 0x19
ja 0x41fe1a
sub esp, 0x10
push 0x139f3
call fcn.00406000
add esp, 0x14
call fcn.00403160
call fcn.00402790
push 0xb91d
sub esp, 0xc
mov edx, 0x13cab
push 0x23c0
push 0x129f0
push ecx
call fcn.00403250
add esp, 0x1c
lea eax, [esi - 0x47]
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret
mov eax, dword [ebp - 0x3c]
lea edx, [edi - 0x6347c]
add eax, 0xa668
push eax
mov eax, dword [ebp - 0x60]
add eax, 0xfffed6a2
push eax
mov eax, dword [ebp - 0x48]
push ecx
add eax, 0xd8bd
push eax
sub esp, 8
lea eax, [ebx - 0xf5dc]
push eax
push ecx
call fcn.00404100
add esp, 4
call fcn.00404bc0
add esp, 0x1c
xor eax, eax
pop edi
pop esi
pop ebx
mov esp, ebp
pop ebp
ret