Function at 0x1000640f
Capabilities:
Contain obfuscated stackstrings

Disassembly:
add esp, 4
pop edi
push edx
add edx, 0x16327
pop edx
mov edx, 1
imul eax, edx, 0
lea ecx, [ebp + eax - 0xdec]
mov dword [ebp - 0x18fc], ecx
push edx
jmp 0x100060be
and edx, 0xe2e
pop edx
push edx
push ebx
add esp, 4
xor edx, 0x16ea6
sub edx, 0x1474b
call 0x100060e2
add byte [ecx + 0x35], cl
cmp eax, 0x834b3a50
les eax, [edx + ebx*2]
mov dword [ebp - 0x27b8], 0xffffffff
push edx
push eax
add esp, 4
or edx, 0x6178
sub edx, 0x14947
xor edx, 0xee00
and edx, 0x2697
pop edx
push edx
sub edx, 0x6be4
or edx, 0x10e1d
and edx, 0xf991
pop edx
mov edx, dword [ebp - 0x884]
mov dword [ebp - 0x5cc], edx
jmp 0x1000613f
mov eax, dword [ebp - 0x5cc]
add eax, 1
mov dword [ebp - 0x5cc], eax
push ecx
sub ecx, 0xc789
pop ecx
push edi
add edi, 0xedc4
pop edi
push edx
push esi
add esp, 4
jmp 0x1000615b
call 0x10006167
add byte [edx], dh
inc esi
cmp byte ss:[ecx + 0x46], cl
add esp, 4
or edx, 0xd2e8
pop edx
mov ecx, dword [ebp - 0x5cc]
sub ecx, dword [ebp - 0x884]
cmp ecx, 0xffffffff
jb 0x100061b9
push edx
jmp 0x1000618c
and edx, 0xc315
xor edx, 0x112ba
pop edx
push eax
push edi
add esp, 4
call 0x100061aa
add byte [ebx + 0x36], cl
cmp al, 0x3d
cmp byte [edi], bh
add esp, 4
and eax, 0x78fd
pop eax
jmp 0x100063e7
mov dword [ebp - 0xea0], 7
mov edx, dword [ebp - 0x5cc]
mov dword [ebp - 0xc24], edx
push ecx
add ecx, 0x145b2
and ecx, 0xa7fd
pop ecx
push ecx
and ecx, 0xfbe9
call 0x100061f1
add byte [ebx + 0x46], al
xor edi, dword [esi + eax*2]
xor edi, dword [eax]
add esp, 4
sub ecx, 0xb680
jmp 0x10006200
pop ecx
mov eax, dword [ebp - 0x18fc]
mov dword [ebp - 0xc20], eax
mov dword [ebp - 0xea4], 0
mov ecx, dword [ebp - 0x5cc]
cmp ecx, dword [ebp - 0x18fc]
jne 0x10006268
push esi
push esi
add esp, 4
add esi, 0x164a
xor esi, 0x56cb
and esi, 0xaf2c
pop esi
push ebx
and ebx, 0xe4de
pop ebx
push esi
push ebx
add esp, 4
or esi, 0x8d8f
xor esi, 0x9ff3
pop esi
mov edx, dword [ebp - 0xea4]
mov dword [ebp - 0x1904], edx
jmp 0x10006399
cmp dword [ebp - 0xea0], 0
jle 0x1000638d
push eax
push ecx
add esp, 4
and eax, 0x13894
pop eax
push esi
xor esi, 0x129e1
call 0x10006294
add byte [ecx], bh
cmp al, 0x4f
inc edx
inc edi
inc edi
add esp, 4
jmp 0x100062a0
xor esi, 0x58b9
pop esi
mov eax, dword [ebp - 0xc24]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0xc20]
movzx eax, byte [edx]
cmp ecx, eax
je 0x10006329
push eax
xor eax, 0x1270e
sub eax, 0xa0d6
or eax, 0xc323
sub eax, 0xde92
pop eax
push edi
push ecx
add esp, 4
add edi, 0x90fa
and edi, 0x1096d
add edi, 0xaa0b
pop edi
mov ecx, dword [ebp - 0xc24]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0xc20]
movzx ecx, byte [eax]
cmp edx, ecx
jle 0x10006311
mov dword [ebp - 0x1900], 1
jmp 0x1000631b
mov dword [ebp - 0x1900], 0xffffffff
mov edx, dword [ebp - 0x1900]
mov dword [ebp - 0xea4], edx
jmp 0x1000638d
push esi
push eax
add esp, 4
add esi, 0xe55c
pop esi
push esi
push eax
add esp, 4
call 0x10006348
add byte [esi + 0x4b], cl
cmp dword [edx], esi
push eax
inc esi
xor bh, byte [edi]
add esp, 4
call 0x10006357
add byte [edi + esi + 0x47], cl
cmp al, 0x32
inc ecx
add esp, 4
pop esi
mov eax, dword [ebp - 0xea0]
sub eax, 1
mov dword [ebp - 0xea0], eax
mov ecx, dword [ebp - 0xc24]
add ecx, 1
mov dword [ebp - 0xc24], ecx
mov edx, dword [ebp - 0xc20]
add edx, 1
mov dword [ebp - 0xc20], edx
jmp 0x10006268
mov eax, dword [ebp - 0xea4]
mov dword [ebp - 0x1904], eax
cmp dword [ebp - 0x1904], 0
jne 0x100063e2
push eax
or eax, 0x4386
and eax, 0x97a
pop eax
push edi
push edi
add esp, 4
and edi, 0x15c44
and edi, 0xa120
pop edi
push ecx
call 0x100063d0
add byte [esi + 0x37], al
cmp al, 0x3c
aaa
xor eax, 0x4c4833f
pop ecx
mov ecx, dword [ebp - 0x5cc]
mov dword [ebp - 0xc1c], ecx
jmp 0x10006423
jmp 0x10006130
push eax
push edi
add esp, 4
add eax, 0x1324d
pop eax
push edx
or edx, 0xa767
or edx, 0x12014
pop edx
push esi
call 0x1000640f
add byte [esp + eax*2], dh
xor dh, byte ds:[edx]
cmp eax, dword ss:[ebx - 0x397efb3c]
insb byte es:[edi], dx
test dword [eax], 0x85c75e00
in al, 0xf3
invalid
push ebx
push ebx
add esp, 4
add ebx, 0xab2f
xor ebx, 0x169cc
xor ebx, 0x1856e
pop ebx
push esi
push edx
add esp, 4
xor esi, 0x16fe1
pop esi
push ebx
xor ebx, 0x43df
or ebx, 0x229e
pop ebx
mov byte [ebp - 0x9d8], 0x45
mov byte [ebp - 0x9d7], 0x78
mov byte [ebp - 0x9d6], 0x69
mov byte [ebp - 0x9d5], 0x74
mov byte [ebp - 0x9d4], 0x50
mov byte [ebp - 0x9d3], 0x72
mov byte [ebp - 0x9d2], 0x6f
mov byte [ebp - 0x9d1], 0x63
mov byte [ebp - 0x9d0], 0x65
mov byte [ebp - 0x9cf], 0x73
mov byte [ebp - 0x9ce], 0x73
mov byte [ebp - 0x9cd], 0
push ebx
push edi
add esp, 4
add ebx, 0xd77b
pop ebx
push eax
jmp 0x100064bf
pop eax
push ecx
sub ecx, 0xbaec
pop ecx
push ebx
jmp 0x100064d2
pop ebx
push ecx
sub ecx, 0xd957
pop ecx
mov edx, 0x6b
mov word [ebp - 0x1a84], dx
mov eax, 0x65
mov word [ebp - 0x1a82], ax
mov ecx, 0x72
mov word [ebp - 0x1a80], cx
mov edx, 0x6e
mov word [ebp - 0x1a7e], dx
mov eax, 0x65
mov word [ebp - 0x1a7c], ax
mov ecx, 0x6c
mov word [ebp - 0x1a7a], cx
mov edx, 0x33
mov word [ebp - 0x1a78], dx
mov eax, 0x32
mov word [ebp - 0x1a76], ax
mov ecx, 0x2e
mov word [ebp - 0x1a74], cx
mov edx, 0x64
mov word [ebp - 0x1a72], dx
mov eax, 0x6c
mov word [ebp - 0x1a70], ax
mov ecx, 0x6c
mov word [ebp - 0x1a6e], cx
xor edx, edx
mov word [ebp - 0x1a6c], dx
push edi
sub edi, 0x14af3
pop edi
push esi
call 0x1000658a
add byte [edi], dh
dec edx
dec eax
dec eax
inc esi
inc eax
inc edx
add esp, 4
call 0x1000659c
add byte [esi + 0x3e], al
inc esp
inc ecx
push eax
aas
push eax
xor al, 0x4a
add esp, 4
add esi, 0x784a
pop esi
push esi
or esi, 0x77b
xor esi, 0x1307e
jmp 0x100065b9
pop esi
push edi
sub edi, 0x9e95
call 0x100065ce
add byte [edi + ecx*2], bh
dec eax
xor al, 0x33
dec eax
inc edx
add esp, 4
add edi, 0xca7f
pop edi
mov eax, dword fs:[0x18]
mov dword [ebp - 0x26cc], eax
mov ecx, dword [ebp - 0x26cc]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x26d0], edx
mov eax, dword [ebp - 0x26d0]
mov dword [ebp - 0x18cc], eax
push eax
push ebx
add esp, 4
add eax, 0xa51f
sub eax, 0x67b5
add eax, 0x12989
pop eax
push ecx
sub ecx, 0x85ca
sub ecx, 0x15e00
add ecx, 0xb97e
add ecx, 0x1024e
pop ecx
cmp dword [ebp - 0x18cc], 0
jne 0x10006649
mov dword [ebp - 0x380], 0
jmp 0x10006905
mov ecx, dword [ebp - 0x18cc]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xeb0], eax
push ebx
push eax
add esp, 4
call 0x1000666e
add byte [eax + 0x4b], cl
dec edx
inc esp
cmp dword [edx + 0x4d], eax
cmp byte [ebx + 0x7e804c4], al
add byte [eax], al
add byte [eax], al
inc edi
dec ebx
inc ebp
dec ebx
cmp bh, byte [ebx + eax*4]
les eax, [ecx + eax*4]
jecxz 0x10006686
cmp byte [ecx], al
add byte [ecx + 0x7e05cb], al
add byte [ebx - 0x7d], bl
mov ebp, 0xfffff150
add byte [ebp + 0xf], dh
or ebx, 0x7e05
pop ebx
cmp dword [ebp - 0xeb0], 0
jne 0x100066a5
mov dword [ebp - 0x380], 0
jmp 0x10006905
mov ecx, dword [ebp - 0xeb0]
mov dword [ebp - 0x5d0], ecx
push edi
push eax
add esp, 4
add edi, 0x13242
pop edi
push esi
push esi
add esp, 4
or esi, 0x5aa2
pop esi
push edx
xor edx, 0x5673
sub edx, 0x3321
and edx, 0x56d4
sub edx, 0x7a80
pop edx
lea edx, [ebp - 0x1a84]
mov dword [ebp - 0xeac], edx
mov eax, dword [ebp - 0x5d0]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xea8], ecx
xor edx, edx
mov word [ebp - 0x270], dx
xor eax, eax
mov word [ebp - 0x138], ax
push edi
push eax
add esp, 4
sub edi, 0x1a7
add edi, 0x12cff
pop edi
push esi
or esi, 0x14e11
jmp 0x1000672f
call 0x1000673e
add byte [esi + 0x3c], cl
xor eax, dword [edx + 0x36]
cmp al, 0x4d
dec ebx
dec ecx
add esp, 4
pop esi
mov ecx, dword [ebp - 0xea8]
mov dx, word [ecx]
mov word [ebp - 0x12c6], dx
mov eax, dword [ebp - 0xea8]
add eax, 2
mov dword [ebp - 0xea8], eax
mov cx, word [ebp - 0x12c6]
mov word [ebp - 0x270], cx
mov edx, dword [ebp - 0xeac]
mov ax, word [edx]
mov word [ebp - 0x12c8], ax
mov ecx, dword [ebp - 0xeac]
add ecx, 2
mov dword [ebp - 0xeac], ecx
mov dx, word [ebp - 0x12c8]
mov word [ebp - 0x138], dx
push ecx
push edx
add esp, 4
sub ecx, 0xec17
pop ecx
push edi
xor edi, 0x2480
and edi, 0x650
call 0x100067c4
add byte [edx + 0x41], cl
dec edx
xor edi, dword [esi]
inc ecx
aas
xor al, 0x43
add esp, 4
add edi, 0x800f
pop edi
movzx eax, word [ebp - 0x138]
test eax, eax
jne 0x100067f1
movzx ecx, word [ebp - 0x270]
movzx edx, word [ebp - 0x138]
sub ecx, edx
mov dword [ebp - 0x190c], ecx
jmp 0x10006854
movzx eax, word [ebp - 0x270]
movzx ecx, word [ebp - 0x138]
cmp eax, ecx
je 0x10006710
movzx edx, word [ebp - 0x270]
xor edx, 0x20
movzx eax, word [ebp - 0x138]
cmp edx, eax
je 0x10006710
movzx ecx, word [ebp - 0x270]
movzx edx, word [ebp - 0x138]
cmp ecx, edx
jge 0x1000683e
mov dword [ebp - 0x1908], 0xffffffff
jmp 0x10006848
mov dword [ebp - 0x1908], 1
mov eax, dword [ebp - 0x1908]
mov dword [ebp - 0x190c], eax
cmp dword [ebp - 0x190c], 0
jne 0x1000689d
push edi
push eax
add esp, 4
xor edi, 0x1031
pop edi
push ecx
push esi
add esp, 4
jmp 0x10006877
or ecx, 0x16394
jmp 0x10006882
pop ecx
push ebx
push ebx
add esp, 4
add ebx, 0xd055
pop ebx
mov ecx, dword [ebp - 0x5d0]
mov dword [ebp - 0x380], ecx
jmp 0x10006905
push edx
add edx, 0x585c
or edx, 0x16d09
and edx, 0x16fae
sub edx, 0x1443c
pop edx
push edi
push edi
add esp, 4
add edi, 0xc6ce
and edi, 0x145d0
or edi, 0x3977
pop edi
mov edx, dword [ebp - 0x5d0]
mov eax, dword [edx]
mov dword [ebp - 0x5d0], eax
mov ecx, dword [ebp - 0x5d0]
cmp ecx, dword [ebp - 0xeb0]
je 0x100068fb
mov edx, dword [ebp - 0x5d0]
cmp dword [edx + 0x30], 0
jne 0x100066b1
mov dword [ebp - 0x380], 0
push eax
push edi
add esp, 4
xor eax, 0xfd06
pop eax
push ebx
sub ebx, 0x9797
sub ebx, 0x5007
sub ebx, 0x7e53
call 0x10006933
add byte [ecx], bh
dec edx
inc edx
push eax
xor al, 0x3e
inc ebx
dec ebx
add esp, 4
pop ebx
cmp dword [ebp - 0x380], 0
jne 0x10007251
mov eax, 0x6b
mov word [ebp - 0x1b34], ax
mov ecx, 0x65
mov word [ebp - 0x1b32], cx
mov edx, 0x72
mov word [ebp - 0x1b30], dx
mov eax, 0x6e
mov word [ebp - 0x1b2e], ax
mov ecx, 0x65
mov word [ebp - 0x1b2c], cx
mov edx, 0x6c
mov word [ebp - 0x1b2a], dx
mov eax, 0x33
mov word [ebp - 0x1b28], ax
mov ecx, 0x32
mov word [ebp - 0x1b26], cx
mov edx, 0x2e
mov word [ebp - 0x1b24], dx
mov eax, 0x64
mov word [ebp - 0x1b22], ax
mov ecx, 0x6c
mov word [ebp - 0x1b20], cx
mov edx, 0x6c
mov word [ebp - 0x1b1e], dx
xor eax, eax
mov word [ebp - 0x1b1c], ax
push ecx
push esi
add esp, 4
add ecx, 0x9b29
xor ecx, 0x1fd2
jmp 0x100069f3
pop ecx
push eax
jmp 0x100069fc
xor eax, 0x1833
and eax, 0x6824
xor eax, 0x16545
pop eax
mov byte [ebp - 0xb24], 0x4c
mov byte [ebp - 0xb23], 0x6f
mov byte [ebp - 0xb22], 0x61
mov byte [ebp - 0xb21], 0x64
mov byte [ebp - 0xb20], 0x4c
mov byte [ebp - 0xb1f], 0x69
mov byte [ebp - 0xb1e], 0x62
mov byte [ebp - 0xb1d], 0x72
mov byte [ebp - 0xb1c], 0x61
mov byte [ebp - 0xb1b], 0x72
mov byte [ebp - 0xb1a], 0x79
mov byte [ebp - 0xb19], 0x57
mov byte [ebp - 0xb18], 0
mov ecx, dword fs:[0x18]
mov dword [ebp - 0x26d4], ecx
mov edx, dword [ebp - 0x26d4]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x26d8], eax
mov ecx, dword [ebp - 0x26d8]
mov dword [ebp - 0x1910], ecx
push esi
push ebx
add esp, 4
call 0x10006aa4
add byte [ecx + 0x3b], cl
cmp byte [ecx], bh
dec esp
dec edx
push eax
add esp, 4
pop esi
push edi
push esi
add esp, 4
call 0x10006aba
add byte [esi + ecx*2 + 0x40], cl
dec ebx
inc ecx
dec ebp
add esp, 4
and edi, 0x3927
pop edi
cmp dword [ebp - 0x1910], 0
jne 0x10006adc
mov dword [ebp - 0x888], 0
jmp 0x10006d98
mov edx, dword [ebp - 0x1910]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0xebc], ecx
push esi
jmp 0x10006af8
pop esi
push ecx
jmp 0x10006b03
call 0x10006b10
add byte [esp + esi], bh
cmp eax, 0x43483834
add esp, 4
and ecx, 0xe82f
or ecx, 0xea60
pop ecx
cmp dword [ebp - 0xebc], 0
jne 0x10006b38
mov dword [ebp - 0x888], 0
jmp 0x10006d98
mov edx, dword [ebp - 0xebc]
mov dword [ebp - 0x5d4], edx
push esi
and esi, 0x4040
xor esi, 0x15c61
xor esi, 0x11be
jmp 0x10006b5d
pop esi
push edi
push esi
add esp, 4
add edi, 0x1772f
sub edi, 0x181cb
sub edi, 0xeb1b
pop edi
lea eax, [ebp - 0x1b34]
mov dword [ebp - 0xeb8], eax
mov ecx, dword [ebp - 0x5d4]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0xeb4], edx
xor eax, eax
mov word [ebp - 0x274], ax
xor ecx, ecx
mov word [ebp - 0x13c], cx
push ebx
push esi
add esp, 4
call 0x10006bb7
add byte [0x46344f33], dh
dec eax
xor esi, dword [edi]
dec edi
add esp, 4
or ebx, 0xf708
or ebx, 0xf197
pop ebx
push ecx
xor ecx, 0x115f9
xor ecx, 0xff87
pop ecx
mov edx, dword [ebp - 0xeb4]
mov ax, word [edx]
mov word [ebp - 0x12ca], ax
mov ecx, dword [ebp - 0xeb4]
add ecx, 2
mov dword [ebp - 0xeb4], ecx
mov dx, word [ebp - 0x12ca]
mov word [ebp - 0x274], dx
mov eax, dword [ebp - 0xeb8]
mov cx, word [eax]
mov word [ebp - 0x12cc], cx
mov edx, dword [ebp - 0xeb8]
add edx, 2
mov dword [ebp - 0xeb8], edx
mov ax, word [ebp - 0x12cc]
mov word [ebp - 0x13c], ax
push ecx
push edx
add esp, 4
and ecx, 0x70d6
pop ecx
push ecx
add ecx, 0x116aa
or ecx, 0xd798
or ecx, 0xab54
pop ecx
push eax
push edx
add esp, 4
sub eax, 0x8fea
and eax, 0x47
pop eax
movzx ecx, word [ebp - 0x13c]
test ecx, ecx
jne 0x10006c84
movzx edx, word [ebp - 0x274]
movzx eax, word [ebp - 0x13c]
sub edx, eax
mov dword [ebp - 0x1918], edx
jmp 0x10006ce7
movzx ecx, word [ebp - 0x274]
movzx edx, word [ebp - 0x13c]
cmp ecx, edx
je 0x10006ba3
movzx eax, word [ebp - 0x274]
xor eax, 0x20
movzx ecx, word [ebp - 0x13c]
cmp eax, ecx
je 0x10006ba3
movzx edx, word [ebp - 0x274]
movzx eax, word [ebp - 0x13c]
cmp edx, eax
jge 0x10006cd1
mov dword [ebp - 0x1914], 0xffffffff
jmp 0x10006cdb
mov dword [ebp - 0x1914], 1
mov ecx, dword [ebp - 0x1914]
mov dword [ebp - 0x1918], ecx
cmp dword [ebp - 0x1918], 0
jne 0x10006d30
push ebx
push ecx
add esp, 4
call 0x10006d01
add byte [esi + 0x35], al
cmp dword [eax + 0x49], edx
dec ebx
add esp, 4
jmp 0x10006d09
pop ebx
push edi
push edi
add esp, 4
xor edi, 0x8a57
pop edi
push ecx
push esi
add esp, 4
jmp 0x10006d21
pop ecx
mov edx, dword [ebp - 0x5d4]
mov dword [ebp - 0x888], edx
jmp 0x10006d98
push ebx
and ebx, 0x447a
pop ebx
push eax
push edi
add esp, 4
or eax, 0xe172
and eax, 0x6436
and eax, 0xdac4
or eax, 0x167ca
pop eax
push ebx
push ebx
add esp, 4
add ebx, 0x13dfd
pop ebx
mov eax, dword [ebp - 0x5d4]
mov ecx, dword [eax]
mov dword [ebp - 0x5d4], ecx
mov edx, dword [ebp - 0x5d4]
cmp edx, dword [ebp - 0xebc]
je 0x10006d8e
mov eax, dword [ebp - 0x5d4]
cmp dword [eax + 0x30], 0
jne 0x10006b44
mov dword [ebp - 0x888], 0
push edi
push ebx
add esp, 4
jmp 0x10006da3
and edi, 0x164e4
sub edi, 0xcd8
call 0x10006dbf
add byte [edx + 0x47], al
dec eax
xor edi, dword [ecx]
inc ecx
inc ecx
cmp esi, dword [esi]
xor al, byte [ebx + 0x525f04c4]
jmp 0x10006dc9
pop edx
cmp dword [ebp - 0x888], 0
jne 0x10006e14
push ecx
push edi
add esp, 4
and ecx, 0xfe27
jmp 0x10006de7
pop ecx
push edx
call 0x10006df5
add byte [eax + 0x4c], cl
dec esp
inc ecx
dec esi
cmp al, byte [ebx - 0x157efb3c]
out dx, eax
jno 0x10006dfd
add byte [ecx + 0x31dbc2], al
add byte [edx - 0x39], bl
test dword [edi + esi*8], ebp
invalid
push ecx
sub ecx, 0x11f64
or ecx, 0x5f15
or ecx, 0xe5a3
xor ecx, 0x10bad
pop ecx
push esi
push edx
add esp, 4
or esi, 0x16c7b
pop esi
push ebx
push ecx
add esp, 4
add ebx, 0x12980
pop ebx
mov ecx, dword [ebp - 0x888]
mov edx, dword [ecx + 0x18]
mov dword [ebp - 0x3d8], edx
mov dword [ebp - 0x898], 0
mov eax, dword [ebp - 0x3d8]
mov dword [ebp - 0x191c], eax
cmp dword [ebp - 0x191c], 0
jne 0x10006e85
mov ecx, dword [ebp - 0x898]
mov dword [ebp - 0x480], ecx
jmp 0x10007176
mov edx, dword [ebp - 0x191c]
mov eax, dword [ebp - 0x3d8]
add eax, dword [edx + 0x3c]
mov dword [ebp - 0x1920], eax
jne 0x10006ead
mov ecx, dword [ebp - 0x898]
mov dword [ebp - 0x480], ecx
jmp 0x10007176
mov edx, 8
imul eax, edx, 0
mov ecx, dword [ebp - 0x1920]
mov edx, dword [ecx + eax + 0x78]
mov dword [ebp - 0x1924], edx
cmp dword [ebp - 0x1924], 0
jne 0x10006edf
mov eax, dword [ebp - 0x898]
mov dword [ebp - 0x480], eax
jmp 0x10007176
mov ecx, dword [ebp - 0x3d8]
add ecx, dword [ebp - 0x1924]
mov dword [ebp - 0x88c], ecx
jne 0x10006f04
mov edx, dword [ebp - 0x898]
mov dword [ebp - 0x480], edx
jmp 0x10007176
mov eax, dword [ebp - 0x88c]
mov ecx, dword [ebp - 0x3d8]
add ecx, dword [eax + 0x20]
mov dword [ebp - 0x26dc], ecx
mov edx, dword [ebp - 0x88c]
mov eax, dword [ebp - 0x3d8]
add eax, dword [edx + 0x24]
mov dword [ebp - 0x26e0], eax
mov ecx, dword [ebp - 0x88c]
mov edx, dword [ebp - 0x3d8]
add edx, dword [ecx + 0x1c]
mov dword [ebp - 0x26e4], edx
mov dword [ebp - 0x890], 0
jmp 0x10006f5e