Function at 0x4245a0
Capabilities:
Encode data using xor

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x6c
push ebx
mov edx, 0x1a1fd
mov dword [ebp - 0x1c], 0xbeb0
push esi
mov ecx, 0x1afbf
mov dword [ebp - 0x54], 0x7ee9
or ecx, 0x2ac2e
mov dword [ebp - 0x64], 0x28f
push edi
mov eax, 0x1252
mov dword [ebp - 0x6c], ecx
mov esi, 0x1e8ec
mov dword [ebp - 0x2c], 0x5c7a
lea ecx, [edx + edx]
mov dword [ebp - 0x60], 0xfffe4605
sub eax, 0xffff2dbc
mov dword [ebp - 0x58], 0xcc70
mov ebx, 0x4d57
mov dword [ebp - 0x28], ecx
mov edi, 0xb3f7
mov dword [ebp - 0x20], ebx
sub esi, 0x1e799
mov dword [ebp - 0x48], edi
mov dword [ebp - 0x34], esi
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x44], 0x16820
mov dword [ebp - 0x4c], 4
mov dword [ebp - 4], 0x3fdae
mov dword [ebp - 0x5c], 0xcfe0
call fcn.00401450
push 0x392a
push 0xd945
push 0xce48
push ecx
mov edx, 0xaae
mov dword [ebp - 0x40], eax
mov ecx, 0x81d1
call fcn.0040a330
mov dword [ebp - 0x14], eax
add esp, 0x10
add eax, 0xffff819f
mov dword [ebp - 0x68], eax
test eax, eax
jle 0x4246d0
imul eax, eax, 0x1070
mov ecx, 0x16820
mov dword [ebp - 0x60], 0xfffe4605
mov edx, 0x28f
mov dword [ebp - 0x20], ebx
sub edi, eax
mov eax, 0x7ee9
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x58]
mov dword [ebp - 0x58], eax
mov eax, dword [ebp - 0x6c]
mov dword [ebp - 0x6c], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x68]
mov dword [ebp - 0x48], edi
nop dword [eax + eax]
or edx, 0xd6ba
and esi, 0x180b4
xor ecx, 0xc382
sub eax, 1
jne 0x4246b0
mov dword [ebp - 0x64], edx
mov dword [ebp - 0x44], ecx
mov dword [ebp - 0x34], esi
sub esp, 0x18
call fcn.00407f40
mov ecx, dword [ebp - 0x54]
add esp, 8
add ecx, 0x457d
mov dword [ebp - 0x68], eax
push ecx
sub esp, 0xc
call fcn.00404b60
mov esi, eax
call fcn.00422040
mov ecx, dword [ebp - 0x40]
mov edx, 0x10070
add ecx, 0x3200
push ecx
mov ecx, 0x15532
call fcn.00407720
mov ecx, dword [ebp - 0x28]
add esp, 0x20
add ecx, 0xfffdd1e6
mov dword [ebp - 0x50], eax
push ecx
sub esp, 8
call fcn.00407c50
add esp, 0x10
call fcn.0041a540
mov edx, dword [ebp - 0x4c]
mov eax, dword [ebp - 0x44]
sub esi, 0xb2b7
sub dword [ebp - 0x58], eax
cmp dword [ebp - 0x40], 0x7642
mov dword [ebp - 0x44], 0
jle 0x42479e
mov eax, dword [ebp - 0x28]
xor ebx, 0x145e6
and eax, dword [ebp - 0x5c]
and dword [ebp - 0x60], 0x1590c
mov ecx, eax
sub dword [ebp - 0x5c], 0x1c47
and ecx, 0x9700
mov dword [ebp - 0x28], ecx
mov ecx, dword [ebp - 0x2c]
add ecx, 0x14156
mov dword [ebp - 0x20], ebx
or ecx, 0xa98b
mov dword [ebp - 0x2c], ecx
mov ecx, dword [ebp - 0x14]
add ecx, 0x7a9d
or ecx, dword [ebp - 0x68]
dec eax
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x44], eax
jmp 0x4247a1
mov ecx, dword [ebp - 0x14]
add dword [ebp - 0x50], 0x2c8c
mov eax, 0x17b4a
mov ebx, dword [ebp - 0x20]
sub eax, edx
add dword [ebp - 0x64], eax
mov eax, dword [ebp - 0x5c]
add eax, 0xffffe107
xor eax, edi
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 0xc]
inc eax
mov dword [ebp - 0xc], eax
cmp eax, 0xe497
jl 0x424733
sub esp, 0x20
mov dword [ebp - 0x10], esi
add ecx, 0x16f
call fcn.00405ad0
mov esi, eax
mov dword [ebp - 0x30], esi
call fcn.00408650
add esp, 0x1c
mov dword [ebp - 8], eax
lea ecx, [esi - 0x8235]
push ecx
sub esp, 0x14
mov ecx, 0x2063
call fcn.00402320
mov edx, dword [ebp - 0x50]
add esp, 0x1c
mov ecx, dword [ebp - 4]
add edx, edx
and dword [ebp - 0x68], 0xe036
mov esi, dword [ebp - 0x60]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x5c]
add eax, edi
mov dword [ebp - 0x24], edx
mov edx, dword [ebp - 0x44]
mov dword [ebp - 0x54], eax
mov eax, dword [ebp - 0xc]
and eax, 0x9ed9
mov dword [ebp - 0x5c], edx
mov edx, dword [ebp - 0x64]
xor ecx, eax
mov dword [ebp - 0x18], edx
mov edx, dword [ebp - 0x6c]
mov dword [ebp - 0x3c], 0x6aa8
mov dword [ebp - 0xc], eax
mov dword [ebp - 4], ecx
mov dword [ebp - 0x50], edx
cmp ecx, 0x96b5
jne 0x424987
and eax, dword [ebp - 0x58]
mov edx, dword [ebp - 0x54]
sub edx, dword [ebp - 0x68]
sub dword [ebp - 0x24], esi
mov ecx, dword [ebp - 8]
mov esi, dword [ebp - 0x44]
and ecx, edx
mov edi, dword [ebp - 0x6c]
or dword [ebp - 0x58], 0xae62
mov dword [ebp - 0xc], eax
mov eax, dword [ebp - 0x40]
mov dword [ebp - 0x54], edx
and eax, 0xbeb0
mov edx, dword [ebp - 0x10]
or dword [ebp - 0x4c], edx
cmp dword [ebp - 0x28], 0x14c0d
mov dword [ebp - 0x5c], esi
mov esi, dword [ebp - 0x64]
mov dword [ebp - 0x18], esi
mov esi, dword [ebp - 0x60]
mov dword [ebp - 0x50], edi
mov edi, dword [ebp - 0x48]
mov dword [ebp - 0x1c], eax
mov dword [ebp - 8], ecx
jge 0x424984
mov esi, dword [ebp - 0x54]
sub eax, 0xffe9
mov ebx, dword [ebp - 0x68]
add esi, 0x41a1
and esi, dword [ebp - 0x34]
or ebx, dword [ebp - 0x28]
mov dword [ebp - 0x54], esi
mov esi, dword [ebp - 0x6c]
or esi, 0x55e5
mov dword [ebp - 0x1c], eax
mov eax, dword [ebp - 0x30]
mov dword [ebp - 0x50], esi
add eax, 0x17267
mov esi, dword [ebp - 0x44]
add esi, 0x9b6e
mov dword [ebp - 0x68], ebx
mov ebx, dword [ebp - 0x64]
mov dword [ebp - 0x5c], esi
mov esi, dword [ebp - 0x60]
add esi, 0xfffff5cc
mov dword [ebp - 0x18], ebx
cmp dword [ebp - 0x14], 0xfebe
mov ebx, dword [ebp - 0x20]
mov dword [ebp - 0x30], eax
je 0x424984
add eax, 0xe18b
mov dword [ebp - 0x3c], 0x6fac
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x64]
or eax, 0x16203
mov dword [ebp - 0x18], eax
mov eax, 0x96b5
sub eax, edx
mov edx, dword [ebp - 0x50]
mov dword [ebp - 4], eax
mov eax, dword [ebp - 0x1c]
add eax, dword [ebp - 0x4c]
sub edx, eax
cmp dword [ebp - 0x2c], 0x1b2b
mov dword [ebp - 0x50], edx
jge 0x424987
mov eax, dword [ebp - 0x34]
or edi, 0x10105
and dword [ebp - 0x18], 0x45ea
or ecx, eax
sub dword [ebp - 0x24], ebx
add eax, 0x2f8d
mov dword [ebp - 0x34], eax
sub edx, edi
mov eax, dword [ebp - 0x68]
and dword [ebp - 0x30], eax
and dword [ebp - 0x54], eax
mov dword [ebp - 8], ecx
mov dword [ebp - 0x48], edi
mov dword [ebp - 0x50], edx
jmp 0x424987
mov edx, dword [ebp - 0x50]
sub esp, 0x10
add edx, 0xfffdc7a9
call fcn.00401650
add esp, 0x10
mov dword [ebp - 0x44], eax
cmp dword [ebp - 0x18], 0x25206
jge 0x424b03
mov eax, dword [ebp - 0x14]
mov edx, dword [ebp - 0x2c]
mov ecx, dword [ebp - 0x10]
mov dword [ebp - 0x14], eax
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x20], ebx
mov ebx, dword [ebp - 0x3c]
add edx, 0x3dae
xor dword [ebp - 0x1c], ebx
add esi, 0x121fe
sub dword [ebp - 0x30], 0x11f64
cmp dword [ebp - 0x50], 0xb70b
mov ebx, dword [ebp - 0x20]
jne 0x424a16
sub dword [ebp - 4], 0x104b8
and esi, 0x10cd7
and dword [ebp - 0x58], 0x15e2e
xor dword [ebp - 0x1c], 0x17d05
cmp edx, 0xcd95
jge 0x424a16
sub edi, dword [ebp - 0x24]
and dword [ebp - 4], 0x946
dec ecx
mov eax, dword [ebp - 0x18]
xor dword [ebp - 0x4c], 0xe391
xor edi, esi
inc eax
xor edi, 0x17944
cmp dword [ebp - 0x30], 0x15278
mov dword [ebp - 0x18], eax
mov dword [ebp - 0x48], edi
jle 0x424aef
mov eax, dword [ebp - 0x34]
or ebx, 0x1168f
xor dword [ebp - 0x54], 0x70f6
sub edi, eax
add edx, dword [ebp - 0x58]
cmp dword [ebp - 0x1c], 0x1109b
mov dword [ebp - 0x48], edi
mov dword [ebp - 0x20], ebx
jne 0x424aef
mov ebx, dword [ebp - 0x24]
sub eax, 0x15332
and ebx, dword [ebp - 0x18]
sub dword [ebp - 0x14], 0x13a04
xor ebx, 0xd5d9
cmp dword [ebp - 0x3c], 0x17214
mov dword [ebp - 0x24], ebx
mov ebx, dword [ebp - 0x20]
mov dword [ebp - 0x34], eax
jne 0x424aef
or dword [ebp - 0x28], 0x7592
sub dword [ebp - 0x58], 0x17214
and dword [ebp - 0x30], 3
sub dword [ebp - 4], 0x7a66
cmp edx, 0x125d3
je 0x424aef
xor eax, esi
sub edi, ecx
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x44]
xor eax, dword [ebp - 0x40]
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 8]
or eax, 0x17214
mov dword [ebp - 0x48], edi
cmp dword [ebp - 0x40], 0x18f0
mov dword [ebp - 8], eax
jne 0x424aef
add dword [ebp - 0x5c], 0x6727
and esi, 0x10eee
xor esi, eax
or ecx, 0x5156
mov eax, dword [ebp - 0x18]
and ecx, eax
jmp 0x424af2
mov eax, dword [ebp - 0x18]
cmp eax, 0x25206
jl 0x4249c0
mov dword [ebp - 0x2c], edx
mov dword [ebp - 0x10], ecx
mov edx, dword [ebp - 0x14]
mov ecx, dword [ebp - 0x28]
mov eax, dword [ebp - 0x1c]
add eax, 0xffffbf78
push eax
lea edx, [edx + 0x820e]
lea ecx, [ecx - 0x1eec8]
call fcn.00407720
add esp, 4
mov dword [ebp - 0x28], eax
call fcn.0041b160
mov ecx, dword [ebp - 8]
mov eax, dword [ebp - 0x34]
mov edx, dword [ebp - 4]
nop word [eax + eax]
mov edi, dword [ebp - 0x38]
or edx, 0x1d35
xor dword [ebp - 0x28], edi
mov dword [ebp - 4], edx
mov edx, dword [ebp - 0x10]
cmp eax, 0x167f8
je 0x424c26
sub dword [ebp - 4], 0x3a49
sub eax, ebx
or dword [ebp - 0x48], 0xe71e
sub edx, 0x14b6d
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x5c]
or dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x3c]
and ecx, eax
and eax, dword [ebp - 0x50]
xor eax, 0xd3dc
mov dword [ebp - 0x10], edx
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x24]
sub eax, ebx
mov dword [ebp - 0x24], eax
cmp eax, 0xcb1a
jle 0x424c23
mov eax, dword [ebp - 0x18]
xor ebx, ebx
add dword [ebp - 0x2c], eax
and eax, 0xf155
xor eax, dword [ebp - 0x14]
mov edi, dword [ebp - 0x24]
xor eax, 0x361d
sub edi, dword [ebp - 0xc]
add dword [ebp - 0x44], ecx
or dword [ebp - 4], 0x122ca
mov dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x34]
xor eax, edx
mov dword [ebp - 0x20], ebx
cmp dword [ebp - 0x14], 0xe872
mov dword [ebp - 0x34], eax
mov dword [ebp - 0x24], edi
jle 0x424c26
or dword [ebp - 0xc], 0x12a20
sub esi, 0x778b
add dword [ebp - 0x28], edx
xor dword [ebp - 0x38], esi
cmp dword [ebp - 0xc], 0xa293
jge 0x424c26
mov ebx, dword [ebp - 0x2c]
xor dword [ebp - 0x18], ebx
and ebx, 0x3880
xor dword [ebp - 0x50], 0x13c71
or ebx, 0xc64a
add dword [ebp - 4], 0x5ab4
mov dword [ebp - 0x2c], ebx
mov ebx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x34]
inc dword [ebp - 0x4c]
xor ecx, 0x9e7e
and dword [ebp - 0x1c], 0xf23d
and esi, 0x8a04
and dword [ebp - 0xc], 0xd836
cmp dword [ebp - 0x18], 0xf5a8
mov edi, dword [ebp - 0x48]
mov dword [ebp - 8], ecx
jge 0x424ccd
mov eax, dword [ebp - 0x14]
and edx, dword [ebp - 0x5c]
add eax, 0x12112
add dword [ebp - 0x44], eax
and dword [ebp - 0x40], 0x3e99
cmp dword [ebp - 0x38], 0xce5b
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x10], edx
jge 0x424ccd
mov ebx, dword [ebp - 0x1c]
xor edi, 0xcf48
xor ebx, dword [ebp - 0x54]
add ebx, dword [ebp - 0x30]
sub edx, dword [ebp - 0x3c]
or dword [ebp - 0xc], edi
cmp ebx, 0x13195
mov dword [ebp - 0x1c], ebx
mov ebx, dword [ebp - 0x20]
mov dword [ebp - 0x10], edx
mov edx, dword [ebp - 4]
mov dword [ebp - 0x48], edi
je 0x424cd0
mov eax, dword [ebp - 0x38]
add edx, ebx
add dword [ebp - 0x1c], 0x63dd
or eax, 0x8389
or dword [ebp - 0x18], eax
mov eax, dword [ebp - 0x34]
and eax, dword [ebp - 0x28]
add ecx, 0x107d7
mov dword [ebp - 4], edx
mov dword [ebp - 0x34], eax
mov dword [ebp - 8], ecx
jmp 0x424cd0
mov edx, dword [ebp - 4]
cmp dword [ebp - 0x4c], 0xe396
jl 0x424b40
call dword [0x47edfc]
mov eax, dword [ebp - 0x5c]
sub esp, 0x10
add eax, 0xc466
push eax
sub esp, 0xc
call fcn.00404b60
add esp, 0x20
mov dword [ebp - 0x58], eax
cmp dword [ebp - 8], 0xf4d7
jge 0x424f0b
mov edx, dword [ebp - 0xc]
mov eax, dword [ebp - 4]
mov ecx, dword [ebp - 0x5c]
or edx, 0x9fee
and ecx, dword [ebp - 0x14]
sub edi, dword [ebp - 0x24]
xor dword [ebp - 0x38], 0x1034b
mov dword [ebp - 0x5c], ecx
mov ecx, dword [ebp - 0x40]
xor ecx, dword [ebp - 0x1c]
mov dword [ebp - 0x40], ecx
mov ecx, dword [ebp - 0x58]
sub dword [ebp - 0x44], ecx
cmp eax, 0xcfc5
mov ecx, dword [ebp - 8]
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x48], edi
jle 0x424e0f
and edi, dword [ebp - 0x18]
and eax, dword [ebp - 0x54]
xor dword [ebp - 0x30], edi
cmp dword [ebp - 0x2c], 0x15677
mov dword [ebp - 0x48], edi
mov dword [ebp - 0x34], eax
jle 0x424e0f
mov ecx, dword [ebp - 0x4c]
add edx, edi
sub ecx, dword [ebp - 0x18]
mov dword [ebp - 0x4c], ecx
mov ecx, dword [ebp - 0x1c]
add ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x1c], ecx
mov ecx, dword [ebp - 0x54]
add ecx, dword [ebp - 0x50]
mov dword [ebp - 0xc], edx
mov edx, dword [ebp - 0x10]
and edx, 0x91fe
mov dword [ebp - 0x54], ecx
cmp dword [ebp - 0x3c], 0x8d7a
mov ecx, dword [ebp - 8]
mov dword [ebp - 0x10], edx
jne 0x424e0c
xor edx, dword [ebp - 4]
mov eax, dword [ebp - 0x58]
add edx, 0x8171
and ebx, dword [ebp - 0x54]
and dword [ebp - 0x50], eax
mov dword [ebp - 0x10], edx
cmp esi, 0xa7b7
je 0x424e09
mov eax, dword [ebp - 0x30]
xor eax, dword [ebp - 0x24]
or ebx, dword [ebp - 0x14]
xor edi, dword [ebp - 0x14]
xor ebx, ecx
sub dword [ebp - 0x54], 0x17f0a
xor dword [ebp - 0x5c], ecx
cmp edx, 0x432c
mov edx, dword [ebp - 0xc]
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x48], edi
jne 0x424e0f
add ebx, dword [ebp - 0x4c]
add dword [ebp - 0x30], 0xcef0
and ebx, 0x12b92
add dword [ebp - 0x40], 0x17f6d
add dword [ebp - 0x2c], 0x16db7
jmp 0x424e0f
mov eax, dword [ebp - 0x34]
mov edx, dword [ebp - 0xc]
add dword [ebp - 0x30], 0x89bd
inc ecx
xor dword [ebp - 0x2c], 0x3d93
sub edx, 0x11aeb
mov dword [ebp - 8], ecx
mov ecx, dword [ebp - 0x5c]
xor ecx, dword [ebp - 0x14]
cmp dword [ebp - 0x58], 0xe153
mov dword [ebp - 0x5c], ecx
mov ecx, dword [ebp - 8]
mov dword [ebp - 0xc], edx
jge 0x424ef9
mov edi, dword [ebp - 0x40]
or dword [ebp - 0x28], edi
or esi, dword [ebp - 0x3c]
or dword [ebp - 0x24], 0xe0f6
sub ebx, dword [ebp - 4]
cmp dword [ebp - 0x50], 0x14e4e
mov edi, dword [ebp - 0x48]
je 0x424ef9
add dword [ebp - 4], 0x183
or dword [ebp - 0x58], edx
and dword [ebp - 0x50], 0x12c2b
and dword [ebp - 0x38], 0x583c
or esi, dword [ebp - 4]
cmp dword [ebp - 4], 0x80bd
jne 0x424ef9
mov edi, dword [ebp - 0x28]
xor eax, 0x43df
and dword [ebp - 0x58], 0x552b
or esi, dword [ebp - 0x24]
add dword [ebp - 0x54], 0xe58e
mov dword [ebp - 0x34], eax
mov eax, dword [ebp - 0x2c]
or eax, dword [ebp - 0x1c]
mov dword [ebp - 4], edi
mov edi, dword [ebp - 0x5c]
add eax, edi
or dword [ebp - 4], 0x80bd
and edi, 0x3bfb
mov dword [ebp - 0x2c], eax
mov eax, dword [ebp - 0x44]
sub dword [ebp - 0x30], eax
cmp dword [ebp - 0x3c], 0xec10
mov eax, dword [ebp - 4]
mov dword [ebp - 0x5c], edi
mov edi, dword [ebp - 0x48]
jge 0x424efc
mov edi, dword [ebp - 0x58]
or eax, 0x1524e
add dword [ebp - 0x4c], edi
add dword [ebp - 0x24], ebx
or dword [ebp - 0x44], 0x8d30
mov edi, dword [ebp - 0x48]
mov dword [ebp - 4], eax
jmp 0x424efc
mov eax, dword [ebp - 4]
cmp ecx, 0xf4d7
jl 0x424d10
mov dword [ebp - 0x20], ebx
mov edx, dword [ebp - 0x34]
nop
mov eax, dword [ebp - 0x24]
sub eax, dword [ebp - 0x38]
mov ecx, dword [ebp - 0x4c]
or edx, eax
add ecx, dword [ebp - 0x14]
xor dword [ebp - 0x3c], 0x16591
or dword [ebp - 0x2c], 0xe0d3
cmp ecx, 0x15740
mov dword [ebp - 0x4c], ecx
mov ecx, dword [ebp - 8]
mov dword [ebp - 0x24], eax
mov eax, dword [ebp - 0x10]
je 0x42500d
xor dword [ebp - 0x3c], 0x8551
and dword [ebp - 0x1c], 0x7061
add esi, dword [ebp - 0x40]
and dword [ebp - 0x58], 0x939a
cmp dword [ebp - 0x38], 0x2e6
jne 0x42500d
mov edi, dword [ebp - 0x30]
add edx, ebx
and dword [ebp - 0x1c], 0x165e0
xor edi, 0x15266
add edi, 0x4362
mov dword [ebp - 0x30], edi
mov edi, dword [ebp - 0x50]
sub edi, dword [ebp - 0x2c]
mov dword [ebp - 0x50], edi
mov edi, dword [ebp - 0x24]
and edi, dword [ebp - 0x1c]
mov dword [ebp - 0x24], edi
mov edi, dword [ebp - 0x48]
cmp edx, 0xafb7
jne 0x42500d
or edi, dword [ebp - 0x40]
or ecx, 0xc4c4
xor ebx, dword [ebp - 0xc]
mov edx, 0x10650
xor dword [ebp - 0x3c], 0x2d1d
cmp dword [ebp - 0x44], 0xff0b
mov dword [ebp - 8], ecx
mov dword [ebp - 0x48], edi
mov dword [ebp - 0x20], ebx
jne 0x42500d
sub ecx, dword [ebp - 4]
mov edx, 0x17673
cmp dword [ebp - 0x58], 0x8984
mov dword [ebp - 8], ecx
mov dword [ebp - 0x44], 0x7fa
mov dword [ebp - 0x3c], 0
jae 0x42500d
mov eax, dword [ebp - 0x24]
add dword [ebp - 0x1c], eax
xor dword [ebp - 0x30], edx
or dword [ebp - 0x50], 0xe74f
or dword [ebp - 0x4c], 0xc670
and dword [ebp - 0x18], edx
and dword [ebp - 0x58], ecx
mov eax, dword [ebp - 0x10]
mov ebx, dword [ebp - 0x40]
inc eax
add dword [ebp - 0x38], edx
add ebx, edx
xor ebx, dword [ebp - 0x50]
xor dword [ebp - 0x44], 0x8273
and edx, dword [ebp - 0x48]
mov dword [ebp - 0x40], ebx
mov ebx, dword [ebp - 0x50]
and ebx, dword [ebp - 0x24]
mov dword [ebp - 0x50], ebx
mov ebx, dword [ebp - 0x20]
mov dword [ebp - 0x10], eax
cmp eax, 0xffff207d
jl 0x424f10
mov ecx, 0x2710
mov dword [ebp - 0x34], edx
call fcn.00418110
cmp dword [ebp - 0x30], 0xfffdbdd2
jge 0x4251af
mov edx, dword [ebp - 0x34]
mov eax, dword [ebp - 0xc]
mov edi, dword [ebp - 0x58]
add ebx, eax
or dword [ebp - 0x2c], edi
and dword [ebp - 0x50], 0x15afc
add esi, dword [ebp - 0x1c]
cmp dword [ebp - 0x38], 0xa17c
mov edi, dword [ebp - 0x48]
mov dword [ebp - 0x20], ebx
jle 0x4250b2
xor dword [ebp - 0x3c], 0xfb1b
xor edx, 0x7ae0
sub eax, dword [ebp - 4]
cmp dword [ebp - 0x4c], 0x8514
mov dword [ebp - 0x34], edx
jne 0x4250b2
mov edi, dword [ebp - 0x44]
or ebx, edx
xor dword [ebp - 0x24], 0xfda3
or dword [ebp - 0x28], edi
mov edi, dword [ebp - 0x48]
mov dword [ebp - 0x20], ebx
inc dword [ebp - 0x30]
and edi, 0xdcd7
or eax, dword [ebp - 0x30]
and dword [ebp - 0x2c], edx
add dword [ebp - 0x3c], 0x10530
sub dword [ebp - 0x4c], 0xa88b
cmp dword [ebp - 0x50], 0xb7a3
mov ebx, dword [ebp - 0x20]
mov dword [ebp - 0x48], edi
mov dword [ebp - 0xc], eax
jbe 0x4251a2
mov ecx, dword [ebp - 0x54]
sub esi, 0x3c8c
sub dword [ebp - 0x18], ecx
mov ecx, dword [ebp - 0x14]
add ecx, 0xffff3cdc
add edx, ecx
cmp dword [ebp - 8], 0x1365d
mov dword [ebp - 0x34], edx
jle 0x4251a2
mov ecx, dword [ebp - 0x58]
xor ebx, dword [ebp - 0x10]
add ecx, ecx
or dword [ebp - 0x40], edx
mov dword [ebp - 0x58], ecx
mov ecx, dword [ebp - 0x50]
sub dword [ebp - 4], ecx
cmp dword [ebp - 0x10], 0x1a3
mov dword [ebp - 0x20], ebx
jge 0x42519f
mov eax, dword [ebp - 0x28]
sub edi, dword [ebp - 0x14]
xor eax, dword [ebp - 0x4c]
sub dword [ebp - 0x50], 0xe7a6
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x48], edi
cmp edi, 0x16df2
jge 0x42519f
sub eax, dword [ebp - 0x30]
mov ecx, dword [ebp - 0x58]
sub ecx, dword [ebp - 0x1c]
or dword [ebp - 0x38], 0x15625
sub dword [ebp - 0x4c], 0x6703
mov dword [ebp - 0x28], eax
mov eax, dword [ebp - 0xc]
or eax, 0x34ad
mov dword [ebp - 0x58], ecx
cmp dword [ebp - 4], 0x120dd
mov dword [ebp - 0xc], eax
jne 0x4251a2
add dword [ebp - 0x24], 0xe596
xor eax, 0x1827e
add dword [ebp - 0x40], 0x120dd
sub esi, 0x5245
sub ebx, dword [ebp - 0x2c]
mov dword [ebp - 0xc], eax
mov dword [ebp - 0x20], ebx
jmp 0x4251a2
mov eax, dword [ebp - 0xc]
cmp dword [ebp - 0x30], 0xfffdbdd2
jl 0x425060
mov edx, dword [ebp - 0x58]
mov ecx, dword [ebp - 0x30]
mov eax, dword [ebp - 0x28]
add eax, 0x23ba4
push eax
lea edx, [edx + 0x116f5]
lea ecx, [ecx + 0x2c6c2]
call fcn.00408f40
mov ecx, dword [ebp - 0x34]
add esp, 4
mov edx, dword [ebp - 0xc]
mov edi, dword [ebp - 0x18]
mov dword [ebp - 0x5c], eax
mov eax, dword [ebp - 8]
mov ebx, dword [ebp - 0x3c]
add eax, edi
sub dword [ebp - 0x2c], ebx
add esi, 0x1182a
add edx, 0xc18d
mov dword [ebp - 8], eax
cmp dword [ebp - 0x2c], 0x11cf3
jge 0x425225
sub dword [ebp - 0x5c], 0x6265
mov ebx, dword [ebp - 0x20]
mov eax, dword [ebp - 0x5c]
xor dword [ebp - 0x1c], 0x69dd
xor dword [ebp - 0x38], 0x102ec
and dword [ebp - 0x4c], ebx
xor dword [ebp - 0x28], eax
mov eax, dword [ebp - 8]
mov ebx, dword [ebp - 0x14]
xor ecx, 0x9396
sub edx, dword [ebp - 0x3c]
inc ebx
add dword [ebp - 0x2c], 0xdd41
xor esi, ecx
inc dword [ebp - 0x3c]
xor edi, 0x12c85
mov dword [ebp - 0x14], ebx
cmp ebx, 0x7e63
mov ebx, dword [ebp - 0x20]
jl 0x4251e1
push ecx
mov dword [ebp - 0x18], edi
mov edi, dword [ebp - 0x48]
mov dword [ebp - 0xc], edx
mov dword [ebp - 0x34], ecx
lea eax, [edi - 0x3738]
push eax
mov eax, dword [ebp - 0x5c]
add eax, 0x11859
push eax
lea eax, [esi - 0x931b]
push eax
mov eax, dword [ebp - 0x24]
add eax, 0x2dbdd
push eax
mov eax, dword [ebp - 0x58]
add eax, 0xb3b9
push eax
lea eax, [ebx + 0xa3a5]
push eax
mov eax, dword [ebp - 0x54]
lea edx, [eax - 0x5eed]
lea ecx, [eax + 0xc8ec]
call fcn.00406740
add eax, 0xfffe8cd0
add esp, 0x1c
mov dword [ebp - 0x6c], eax
test eax, eax
jle 0x4253d2
cmp dword [ebp - 0x40], 0x14613
mov eax, dword [ebp - 0x2c]
mov edx, dword [ebp - 0x18]
jge 0x42535d
nop dword [eax]
mov ecx, dword [ebp - 0x38]
xor ebx, 0xc146
sub dword [ebp - 0x14], ecx
or edi, edx
xor eax, dword [ebp - 0x5c]
mov ecx, dword [ebp - 8]
mov dword [ebp - 0x2c], eax
cmp ebx, 0x4d52
jle 0x42534e
xor dword [ebp - 4], ecx
or esi, 0x4edf
sub dword [ebp - 0x38], 0x5f54
and dword [ebp - 0x28], 0x1339b
and esi, dword [ebp - 0x1c]
mov edx, dword [ebp - 0xc]
cmp edx, 0x16caa
jle 0x42534b
mov eax, dword [ebp - 0x30]
or edx, 0x46b6
add dword [ebp - 0x34], eax
or ebx, 0x57fc
mov eax, dword [ebp - 0x18]
xor eax, dword [ebp - 0x38]
and dword [ebp - 4], 0x4e57
and eax, 0x13ba8
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x2c]
and esi, eax
mov dword [ebp - 0x58], 0
dec ebx
mov dword [ebp - 0xc], edx
mov edx, dword [ebp - 0x18]
sub dword [ebp - 0x6c], 1
jne 0x4252d0
mov dword [ebp - 0x20], ebx
jmp 0x4253d2
mov ecx, dword [ebp - 8]
mov ebx, dword [ebp - 0x38]
or edi, edx
sub dword [ebp - 0x14], ebx
mov ebx, dword [ebp - 0x20]
xor eax, dword [ebp - 0x5c]
xor ebx, 0xc146
mov dword [ebp - 0x2c], eax
mov dword [ebp - 0x20], ebx
cmp ebx, 0x4d52
jle 0x4253cc
xor dword [ebp - 4], ecx
or esi, 0x4edf
sub dword [ebp - 0x38], 0x5f54
and dword [ebp - 0x28], 0x1339b
and esi, dword [ebp - 0x1c]
cmp dword [ebp - 0xc], 0x16caa
jle 0x4253cc
mov eax, dword [ebp - 0x30]
add dword [ebp - 0x34], eax
mov eax, edx
xor eax, dword [ebp - 0x38]
and dword [ebp - 4], 0x4e57
and eax, 0x13ba8
mov ecx, dword [ebp - 8]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 0x2c]
mov dword [ebp - 0x58], 0
sub dword [ebp - 0x6c], 1
jne 0x425360
mov ebx, dword [ebp - 8]
mov ecx, dword [ebp - 0x34]
mov eax, dword [ebp - 0xc]
nop dword [eax + eax]
xor dword [ebp - 0x4c], 0x84d3
and eax, 0x8317
mov dword [ebp - 0xc], eax
cmp ecx, 0xd9eb
je 0x425443
mov eax, dword [ebp - 0x4c]
xor eax, dword [ebp - 0x44]
or dword [ebp - 0x18], ebx
xor eax, 0x12ca6
mov dword [ebp - 0x44], eax
mov eax, dword [ebp - 0x38]
add dword [ebp - 0x1c], eax
mov eax, dword [ebp - 4]
or eax, dword [ebp - 0x2c]
cmp dword [ebp - 0x4c], 0xba0
mov dword [ebp - 4], eax
mov eax, dword [ebp - 0xc]
je 0x425443
sub ecx, 0x2f6f
mov dword [ebp - 0x40], 0
cmp edi, 0xc9f3
jne 0x425443
and dword [ebp - 0x54], edi
add dword [ebp - 0x14], 0x2dae
inc esi
mov edx, dword [ebp - 4]
xor ecx, 0x9d13
xor dword [ebp - 0x18], edx
xor edx, dword [ebp - 0x54]
inc dword [ebp - 0x5c]
or dword [ebp - 0x44], 0x5396
or dword [ebp - 0x14], 0x8f42
add dword [ebp - 0x4c], 0x12e2
cmp dword [ebp - 0x28], 0x562f
mov dword [ebp - 4], edx
mov edx, dword [ebp - 0x10]
je 0x4254e6
or dword [ebp - 0x1c], 0x992
or dword [ebp - 0x14], 0xee56
mov eax, dword [ebp - 0xc]
cmp edx, 0x13c4c
jle 0x4254e6
mov edx, dword [ebp - 0x5c]
add ebx, 0x3bef
or dword [ebp - 4], edx
and ebx, 0x60a2
or dword [ebp - 0x1c], 0x163f9
mov edx, dword [ebp - 0x40]
or edx, dword [ebp - 0x1c]
or dword [ebp - 0x2c], esi
mov dword [ebp - 0x40], edx
mov edx, dword [ebp - 0x44]
or edx, 0x15a0c
sub dword [ebp - 0x30], edx
cmp dword [ebp - 0x30], 0x13c40
mov dword [ebp - 0x44], edx
jge 0x4254e6
sub dword [ebp - 0x30], 0x4153
sub ecx, 0x14eb
sub dword [ebp - 0x24], 0xb14
inc dword [ebp - 0x14]
cmp dword [ebp - 0x5c], 0x34c
jl 0x4253e0
mov dword [ebp - 8], ebx
call fcn.00406bd0
mov ebx, eax
mov dword [ebp - 0x68], ebx
call fcn.00406b40
mov ecx, eax
mov dword [ebp - 0x4c], ecx
call fcn.00409dd0
add ecx, 0xc11d
mov dword [ebp - 0x64], eax
push ecx
call fcn.004050f0
lea ecx, [ebx + 0xe3ea]
mov dword [ebp - 0x6c], eax
call fcn.00409590
add esp, 4
mov dword [ebp - 0x34], eax
call fcn.004012a0
mov ecx, dword [ebp - 0x40]
mov ebx, dword [ebp - 0x20]
mov dword [ebp - 0x50], eax
cmp ecx, 1
jge 0x425640
mov eax, dword [ebp - 8]
mov edx, dword [ebp - 0xc]
jmp 0x425554
mov ecx, dword [ebp - 0x40]
sub dword [ebp - 0x28], eax
inc ecx
or edx, dword [ebp - 0x4c]
dec edi
mov ebx, dword [ebp - 0x64]
or eax, 0x12d8b
add dword [ebp - 0x6c], ebx
add dword [ebp - 0x3c], 0x8745
add dword [ebp - 0x4c], 0x8a13
add dword [ebp - 0x44], 0x12a88
mov ebx, dword [ebp - 0x20]
mov dword [ebp - 0x40], ecx
mov ecx, dword [ebp - 0x5c]
sub dword [ebp - 0x34], ecx
mov ecx, dword [ebp - 0x18]
sub ecx, dword [ebp - 0x28]
and ecx, dword [ebp - 0x58]
mov dword [ebp - 0x18], ecx
mov ecx, dword [ebp - 0x50]
and ecx, 0x7508
mov dword [ebp - 0xc], edx
or ecx, dword [ebp - 0x54]
cmp dword [ebp - 0x10], 0x32b8
mov dword [ebp - 0x50], ecx
jle 0x425630
and edx, dword [ebp - 0x1c]
or ebx, dword [ebp - 0x14]
add dword [ebp - 0x4c], eax
sub esi, dword [ebp - 0x54]
or dword [ebp - 0x38], 0x13e2f
or dword [ebp - 0x44], eax
cmp dword [ebp - 0x28], 0xe3e6
mov dword [ebp - 0xc], edx
mov dword [ebp - 0x20], ebx
jle 0x425630
mov edx, dword [ebp - 0x4c]
sub eax, 0x10f80
sub edx, dword [ebp - 0x40]
and dword [ebp - 0x34], ebx
or ebx, dword [ebp - 0x6c]
xor dword [ebp - 0x58], 0x138f0
and dword [ebp - 0x18], edi
cmp dword [ebp - 0x1c], 0xd5ed
mov dword [ebp - 0x4c], edx
mov edx, dword [ebp - 0xc]
mov dword [ebp - 0x20], ebx
jge 0x425630
mov edx, dword [ebp - 0x14]
and dword [ebp - 0x1c], edx
mov edx, dword [ebp - 0xc]
mov ebx, dword [ebp - 0x38]
sub edx, 0x1eae
sub dword [ebp - 0x10], 0x17c54
add dword [ebp - 0x24], ebx
and dword [ebp - 0x3c], 0x11d5d
add eax, 0xef55
mov dword [ebp - 0xc], edx
cmp dword [ebp - 0x40], 1
mov ebx, dword [ebp - 0x20]
jl 0x425551
mov dword [ebp - 8], eax
mov edx, dword [ebp - 0x14]
sub esp, 8
lea edx, [edx - 0x2ccb3]
call fcn.00407970
add esp, 8
mov dword [ebp - 0x30], eax
call fcn.00422750
call fcn.00406700
mov dword [ebp - 0x6c], eax
mov eax, dword [ebp - 0x1c]
cmp eax, 0xfffe6d9c
jge 0x4257d7
mov edx, dword [ebp - 0x50]
mov ecx, 0xfffe6d9c
sub ecx, eax
mov dword [ebp - 0x1c], 0xfffe6d9c
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x64], ecx
mov ecx, dword [ebp - 8]
nop dword [eax]
mov ebx, dword [ebp - 0x20]
and ecx, 0x71f6
or dword [ebp - 0x6c], ecx
mov dword [ebp - 0x50], edx
mov edx, dword [ebp - 0x38]
or dword [ebp - 0x50], edx
sub dword [ebp - 0x50], eax
cmp dword [ebp - 0x4c], 0xe6d2
mov dword [ebp - 8], ecx
jle 0x42577e
mov ecx, dword [ebp - 0x4c]
add esi, 0xfe78
sub ecx, dword [ebp - 0x50]
and eax, dword [ebp - 0x58]
or ebx, ecx
xor esi, dword [ebp - 0x54]
cmp dword [ebp - 0x18], 0x6139
mov dword [ebp - 0x4c], ecx
mov ecx, dword [ebp - 8]
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x20], ebx
jge 0x42577e
xor dword [ebp - 0x50], 0x3fb
sub edx, 0x151f7
mov eax, dword [ebp - 0x6c]
xor dword [ebp - 0x24], eax
sub dword [ebp - 0x30], 0x16f40
mov eax, dword [ebp - 0x18]
mov dword [ebp - 0x38], edx
mov edx, dword [ebp - 0x50]
add dword [ebp - 0x3c], edx
cmp dword [ebp - 0x44], 0x3ad
mov edx, dword [ebp - 0x10]
je 0x425781
mov ecx, dword [ebp - 0x40]
and edx, ecx
xor dword [ebp - 0x28], edi
sub ecx, ebx
xor ecx, ebx
mov dword [ebp - 0x10], edx
cmp dword [ebp - 0x4c], 0x62a1
mov dword [ebp - 0x40], ecx
mov ecx, dword [ebp - 8]
jge 0x425781
mov ecx, dword [ebp - 0x68]
add eax, eax
xor dword [ebp - 0x54], ecx
or dword [ebp - 0x14], 0xa11d
mov ecx, dword [ebp - 8]
mov dword [ebp - 0x18], eax
cmp esi, 0x11b16
je 0x425781
and ecx, dword [ebp - 0x40]
add ebx, 0xeeea
sub dword [ebp - 0x50], 0x767a
or dword [ebp - 0x68], 0xdf50
add dword [ebp - 0x6c], 0x9492
sub eax, dword [ebp - 0x58]
mov dword [ebp - 0x20], ebx
mov dword [ebp - 8], ecx
mov dword [ebp - 0x18], eax
jmp 0x425781
mov edx, dword [ebp - 0x10]
and dword [ebp - 0x3c], 0x96b4
mov eax, 0x12608
sub eax, dword [ebp - 0x44]
add dword [ebp - 0x30], eax
cmp ebx, 0x1653d
jne 0x4257c4
mov eax, dword [ebp - 0x30]
and dword [ebp - 0x54], eax
mov eax, dword [ebp - 0x28]
sub ecx, dword [ebp - 0x40]
sub eax, 0xb9ad
or dword [ebp - 0x34], esi
and edx, eax
or dword [ebp - 0x30], edi
mov dword [ebp - 0x10], edx
xor edx, edx
mov dword [ebp - 8], ecx
mov dword [ebp - 0x28], eax
mov dword [ebp - 0x50], edx
jmp 0x4257ca
mov eax, dword [ebp - 0x28]
mov edx, dword [ebp - 0x50]
sub dword [ebp - 0x64], 1
jne 0x425690
mov eax, dword [ebp - 0x1c]
sub esp, 0x10
lea edx, [eax + 0x1f003]
call fcn.00402b70
mov ecx, dword [ebp - 0x54]
add ecx, 0xb7fd
mov dword [ebp - 0x6c], eax
push ecx
call fcn.004039b0
mov ecx, dword [ebp - 0x10]
add esp, 0x14
mov dword [ebp - 0x54], eax
cmp edi, 0x37e87
jge 0x42584f
mov eax, dword [ebp - 8]
mov edx, dword [ebp - 0x24]
mov ebx, dword [ebp - 0x14]
and dword [ebp - 0x28], esi
or ebx, 0x4007
mov dword [ebp - 0x14], ebx
and eax, esi
mov ebx, dword [ebp - 0x54]
sub ecx, 0x2c8f
or dword [ebp - 0x3c], ecx
xor ebx, edi
sub ebx, eax
and esi, edx
or edx, dword [ebp - 0x34]
inc edi
mov dword [ebp - 0x54], ebx
mov ebx, dword [ebp - 0x14]
cmp edi, 0x37e87
jl 0x425811
mov ebx, dword [ebp - 0x20]
mov dword [ebp - 0x24], edx
mov dword [ebp - 0x10], ecx
mov dword [ebp - 8], eax
push ecx
lea eax, [ecx + 0x20632]
push eax
sub esp, 0x18
lea edx, [esi + 0x6430]
lea ecx, [ebx + 0x1d347]
call fcn.00401aa0
add esp, 0x10
mov dword [ebp - 0x40], eax
lea ecx, [eax + 0xae6d]
push ecx
push ecx
mov ecx, dword [ebp - 0x5c]
add ecx, 0xa0d8
push ecx
call fcn.00404dd0
mov ecx, dword [0x47edf8]
add esp, 0x18
mov dword [ebp - 0x2c], ecx
mov dword [ebp - 0x58], eax
lea ecx, [eax + 0xdae9]
push ecx
push ecx
call fcn.00409900
add esp, 8
mov dword [ebp - 0x64], eax
call fcn.00403c80
mov dword [ebp - 0x68], eax
add esp, 4
mov eax, dword [ebp - 0x4c]
cmp eax, 0x9160
jge 0x4259b1
mov edx, dword [ebp - 0x44]
mov ecx, 0x9160
sub ecx, eax
mov dword [ebp - 0x4c], 0x9160
mov dword [ebp - 0x60], ecx
mov ecx, dword [ebp - 0x10]
nop word [eax + eax]
xor dword [ebp - 0x34], ecx
mov ecx, dword [ebp - 0x54]
xor dword [ebp - 0x6c], ecx
add ecx, 0xffffbf18
and dword [ebp - 0x30], edi
xor ecx, 0x15883
or dword [ebp - 0x68], 0x12134
mov eax, dword [ebp - 0x28]
mov dword [ebp - 0x54], ecx
mov ecx, dword [ebp - 0x10]
cmp ebx, 0x162fd
je 0x425958
mov ecx, dword [ebp - 0x6c]
and edx, 0x18154
and dword [ebp - 0x14], ecx
and dword [ebp - 0x34], ebx
cmp dword [ebp - 0x64], 0x151bd
mov ecx, dword [ebp - 0x10]
jge 0x425958
mov eax, dword [ebp - 0x50]
xor ebx, 0xaa70
add eax, eax
sub esi, 0x3c59
mov dword [ebp - 0x50], eax
mov eax, dword [ebp - 0x3c]
xor eax, dword [ebp - 0x58]
xor eax, dword [ebp - 0x34]
mov dword [ebp - 0x58], eax
mov eax, ecx
or eax, dword [ebp - 0x6c]
xor eax, ebx
mov dword [ebp - 0x6c], eax
mov eax, dword [ebp - 0x28]
or dword [ebp - 0x40], 0x14f2c
add ecx, 0x9453
sub dword [ebp - 0x64], 0x99a4
or edx, eax
cmp dword [ebp - 0x40], 0x84dd
mov dword [ebp - 0x10], ecx
jle 0x4259a4
xor esi, dword [ebp - 0x40]
or ecx, 0x9cf5
sub dword [ebp - 8], 0x17494
and dword [ebp - 0x30], 0x1177
add dword [ebp - 0x34], 0x7223
and esi, dword [ebp - 0x58]
or ebx, 0x12cf2
mov dword [ebp - 0x10], ecx
sub dword [ebp - 0x60], 1
jne 0x4258e0
mov dword [ebp - 0x44], edx
push ecx
call fcn.00406ff0
mov ecx, dword [ebp - 0x10]
add esp, 4
mov edx, dword [ebp - 0xc]
mov dword [ebp - 0x38], eax
mov eax, dword [ebp - 8]
nop word [eax + eax]
sub dword [ebp - 0x40], 0xbe96
xor eax, 0xa881
or dword [ebp - 0x5c], eax
or ecx, edi
add ebx, 0xd714
mov dword [ebp - 0x10], ecx
sub edi, eax
cmp dword [ebp - 0x4c], 0x79cc
je 0x425a07
add dword [ebp - 0x38], 0x5f0d
or edi, 0x4623
xor edi, ecx
dec dword [ebp - 0x58]
or dword [ebp - 0x34], 0x700e
inc edx
mov ecx, dword [ebp - 0x3c]
or dword [ebp - 0x30], ecx
add dword [ebp - 0x34], ecx
and dword [ebp - 0x58], 0x49f6
sub dword [ebp - 0x50], 0xeabb
or dword [ebp - 0x14], esi
mov ecx, dword [ebp - 0x10]
cmp edx, 0x874d
jl 0x4259d0
mov ecx, dword [ebp - 0x14]
or dword [ebp - 0x24], ecx
add dword [ebp - 0x40], edi
mov ecx, dword [ebp - 0x10]
cmp esi, 0x5f7c
jge 0x425a62
add dword [ebp - 0x44], eax
or edx, 0x185f7
or dword [ebp - 0x5c], 0xa007
or esi, 0xade3
dec ecx
mov dword [ebp - 0x10], ecx
inc dword [ebp - 0x54]
or edx, 0xea05
xor dword [ebp - 0x50], 0x17c8
xor eax, 0x14e40
xor dword [ebp - 0x38], 0x1cb1
cmp dword [ebp - 0x30], 0x159fb
mov dword [ebp - 0xc], edx
jge 0x425ad9
and dword [ebp - 0x28], 0x96d
xor ebx, 0x4f7
cmp dword [ebp - 0x24], 0x21f7
jne 0x425ad9
sub dword [ebp - 0x58], 0x780
and eax, 0xfd38
cmp dword [ebp - 0x50], 0x15d68
jle 0x425ad9
mov edx, dword [ebp - 0x4c]
add eax, 0x14875
add edx, dword [ebp - 0x34]
sub edi, 0x10c7a
xor dword [ebp - 0x50], ecx
and dword [ebp - 0x5c], 0x11dab
sub esi, dword [ebp - 0x58]
mov dword [ebp - 0x4c], edx
mov edx, dword [ebp - 0xc]
cmp dword [ebp - 0x54], 0x2dd04
jl 0x425a34
and dword [ebp - 0x40], 0xf297
sub eax, 0x120b3
and dword [ebp - 0x4c], ecx
or dword [ebp - 0x54], 0x12867
mov dword [ebp - 0x20], ebx
mov dword [ebp - 0x48], edi
mov dword [ebp - 8], eax
cmp ebx, 0x13375
jge 0x425b89
mov esi, dword [ebp - 0x50]
mov eax, dword [ebp - 0x30]
add esi, 0xffffbb83
add eax, ebx
add esi, edx
sub dword [ebp - 0x54], eax
cmp dword [ebp - 0x40], 0x2e05
mov dword [ebp - 0x50], esi
jbe 0x425b89
mov eax, dword [ebp - 0x68]
sub edi, dword [ebp - 0x38]
sub dword [ebp - 0x14], eax
cmp dword [ebp - 0x28], 0x23cc
mov dword [ebp - 0x48], edi
jne 0x425b89
sub edi, dword [ebp - 0x64]
xor esi, 0x12142
xor dword [ebp - 0x4c], 0x17be5
mov dword [ebp - 0x28], 0x8529
mov dword [ebp - 0x48], edi
mov dword [ebp - 0x50], esi
cmp edi, 0x7d6b
je 0x425b89
xor edx, 0xffffffad
mov eax, edi
xor eax, dword [ebp - 0x58]
xor ecx, 0x5c59
and edx, 0x60d3
mov dword [ebp - 0x10], ecx
xor ebx, eax
mov dword [ebp - 0xc], edx
mov dword [ebp - 0x20], ebx
mov ecx, dword [ebp - 0x44]
add ecx, 0xfffeac05
call fcn.00406090
lea edx, [eax - 0x2ad11]
test edx, edx
jle 0x425bdd
mov ecx, dword [ebp - 0x10]
xor esi, esi
mov ebx, dword [ebp - 0x54]
mov edi, dword [ebp - 0x5c]
imul eax, edx, 0xffffe89f
mov dword [ebp - 8], esi
mov esi, dword [ebp - 0xc]
add dword [ebp - 0x28], eax
nop dword [eax + eax]
or dword [ebp - 0x58], esi
mov eax, ebx
and dword [ebp - 0x38], edi
or eax, 0x311c
or ecx, eax
sub edx, 1
jne 0x425bc0
mov edi, dword [ebp - 0x48]
mov ebx, dword [ebp - 0x20]
mov dword [ebp - 0x10], ecx
mov eax, dword [ebp - 0x50]
mov esi, dword [ebp - 8]
add eax, 0xfff8bd9a
push ecx
push eax
push ecx
mov ecx, dword [ebp - 0x14]
lea eax, [ecx - 0x7070]
push eax
push ecx
lea edx, [ecx - 0x6921]
call fcn.00407100
mov edx, dword [ebp - 0x10]
add esp, 0x14
cmp dword [ebp - 0x28], 0x1343c
mov ecx, dword [ebp - 0x24]
jle 0x425c18
sub ecx, edx
mov dword [ebp - 0x24], ecx
and esi, 0x1738b
or edi, 0x1b9c
cmp esi, 0xdff4
mov esi, dword [ebp - 0x68]
jbe 0x425c5a
mov eax, dword [ebp - 0x4c]
add edx, ebx
mov ebx, dword [ebp - 0x38]
add eax, 0xfffed1b3
or eax, 0x17311
and esi, edx
xor eax, dword [ebp - 0x58]
cmp eax, 0x64db
jle 0x425c5d
xor ecx, 0x7ae7
add ecx, ebx
mov dword [ebp - 0x24], ecx
jmp 0x425c5d
mov ebx, dword [ebp - 0x38]
call fcn.00401890
sub esp, 8
mov dword [ebp - 0x68], eax
call fcn.00401280
mov dword [ebp - 0x6c], eax
call fcn.0040a4e0
mov eax, dword [ebp - 0x6c]
and eax, dword [ebp - 0x58]
mov dword [ebp - 0x6c], eax
and edi, eax
call fcn.00405b20
lea ecx, [esi - 0x136d6]
push ecx
call fcn.004050f0
add esp, 0xc
call dword [ebp - 0x2c]
mov eax, dword [ebp - 0x6c]
mov ecx, dword [ebp - 0x68]
nop dword [eax]
cmp esi, 0xe538
jne 0x425cbd
cmp eax, 0xbb05
je 0x425cbd
cmp ecx, 0x6c14
jne 0x425cbd
xor ebx, 0xed61
inc edi
cmp edi, 0x281
jl 0x425ca0
call fcn.00401450
lea ecx, [edi + 0x11be9]
call fcn.00404a80
mov eax, dword [ebp - 0x24]
lea ecx, [ebx + 0x180c9]
add eax, 0xfe58
push eax
call fcn.00401170
sub esp, 8
call fcn.00401260
add esp, 8
call fcn.00407550
add esp, 4
call fcn.00418440
int3