Function at 0x40188b
Capabilities:
Get number of processors

Disassembly:
push eax
push esi
add esp, 4
call fcn.004016c2
add byte [edi + 0x39], al
cmp byte [edx + 0x37], cl
inc edi
dec ecx
aas
xor eax, 0x4c48345
add esp, 4
call 0x4016d3
add byte [edi], bh
dec esp
cmp eax, 0x453b4742
xor al, byte [ebx + 0x6eb04c4]
dec ebp
dec edx
cmp byte [ebx], dh
dec ebx
dec esp
pop eax
mov edx, dword [ebp - 0x30]
add edx, 0x70
imul eax, dword [ebp - 0x2c], 0x70
add eax, 0x44f3663b
imul ecx, dword [ebp - 0x2c], 0x70
sub eax, ecx
xor edx, eax
imul edx, dword [ebp - 0x2c]
mov dword [ebp - 0x1d60], edx
push esi
call 0x401711
add byte [eax + 0x46], al
xor cl, byte [ebp + 0x4e]
dec edi
inc edi
cmp ecx, dword [edx + 0x3c]
add esp, 4
xor esi, 1
pop esi
push eax
or eax, 0xfd54
call 0x40172e
add byte [eax + 0x4c], dl
inc ebp
cmp al, 0x3b
aas
add esp, 4
pop eax
mov edx, dword [ebp - 0x1d60]
add edx, 1
mov dword [ebp - 0x159c], edx
push edx
push esi
add esp, 4
add edx, 0x1fd5
jmp 0x401755
xor edx, 0x12b94
or edx, 0x17774
pop edx
push esi
call 0x40176f
add byte [esi + 0x3a], cl
inc ebp
xor cl, byte [ebp + 0x3d]
add esp, 4
pop esi
push edi
xor edi, 0x141f7
and edi, 0x11097
call 0x40178f
add byte [ebx + 0x38], cl
dec ebp
aaa
dec ebp
inc ecx
dec eax
inc edx
dec esi
add esp, 4
pop edi
push ebx
push edx
add esp, 4
xor ebx, 0x7eab
add ebx, 0xe2b4
pop ebx
imul eax, dword [ebp - 0x2c], 0x70
add eax, 0x44f3663b
imul ecx, dword [ebp - 0x2c], 0x70
sub eax, ecx
xor eax, dword [ebp - 0x159c]
imul eax, dword [ebp - 0x2c]
imul edx, dword [ebp - 0x2c], 0x70
sub eax, edx
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x159c]
imul eax, dword [ebp - 0x2c]
mov dword [ebp - 0x1e28], eax
mov dword [ebp - 0x1628], 1
push ecx
push edi
add esp, 4
xor ecx, 0xd473
pop ecx
push eax
sub eax, 0x119a2
pop eax
push esi
push edx
add esp, 4
and esi, 0x12205
call 0x40180f
add byte [edi + 0x41], al
cmp byte [edx + 0x35], cl
cmp al, 0x43
inc ebx
dec ebp
add esp, 4
pop esi
imul ecx, dword [ebp - 0x1628], 0x70
add ecx, 0x44f3663b
imul edx, dword [ebp - 0x1628], 0x70
sub ecx, edx
xor ecx, dword [ebp - 0x1e28]
imul ecx, dword [ebp - 0x1628]
imul eax, dword [ebp - 0x1628], 0x70
sub ecx, eax
mov dword [ebp - 0x162c], ecx
mov ecx, dword [ebp - 0x1064]
mov edx, dword [ebp - 0x1060]
mov dword [ebp - 0x1634], ecx
mov dword [ebp - 0x1630], edx
push ebx
xor ebx, 0x32f4
pop ebx
push edx
push ebx
add esp, 4
sub edx, 0x7cef
xor edx, 0x10d9f
or edx, 0x142a7
call 0x40188b
add byte [edx + 0x50], al
aas
dec edi
xor ecx, dword [ebx + 0x38]
push eax
inc edx
add esp, 4
pop edx
push ecx
xor ecx, 0x270e
pop ecx
push edx
push esi
add esp, 4
xor edx, 0x16f01
pop edx
push ecx
push edi
add esp, 4
and ecx, 0xfb3b
pop ecx
push ebx
push ebx
add esp, 4
or ebx, 0x12b68
and ebx, 0x11b02
pop ebx
mov eax, dword [ebp - 0x30]
add eax, 0x70
imul ecx, dword [ebp - 0x2c], 0x70
add ecx, 0x44f3663b
imul edx, dword [ebp - 0x2c], 0x70
sub ecx, edx
xor eax, ecx
imul eax, dword [ebp - 0x2c]
mov dword [ebp - 0x1e30], eax
push ecx
push esi
add esp, 4
sub ecx, 0x12a3f
and ecx, 0x19e5
add ecx, 0xab75
pop ecx
push ecx
xor ecx, 0xf4ef
sub ecx, 0x126d8
add ecx, 0x30d4
add ecx, 0x3056
pop ecx
mov eax, dword [ebp - 0x1634]
add eax, 0x70
imul ecx, dword [ebp - 0x1630], 0x70
add ecx, 0x44f3663b
imul edx, dword [ebp - 0x1630], 0x70
sub ecx, edx
xor eax, ecx
imul eax, dword [ebp - 0x1630]
mov dword [ebp - 0x1e2c], eax
mov eax, dword [ebp - 0x1e2c]
mov dword [ebp - 0x1e34], eax
mov ecx, dword [ebp - 0x1e30]
cmp ecx, dword [ebp - 0x1e34]
jae 0x401969
mov dword [ebp - 0x15a4], 1
jmp 0x401973
mov dword [ebp - 0x15a4], 0
mov dl, byte [ebp - 0x15a4]
mov byte [ebp - 0x3ad], dl
movzx eax, byte [ebp - 0x3ad]
test eax, eax
je 0x404752
push eax
sub eax, 0x36ef
xor eax, 0xd287
and eax, 0xd521
sub eax, 0x1429d
pop eax
push edx
push edx
add esp, 4
xor edx, 0xa6d8
jmp 0x4019b9
xor edx, 0x271a
pop edx
push eax
push edi
add esp, 4
call 0x4019d4
add byte [edx], bh
dec eax
cmp ecx, dword [ecx + 0x3b]
dec edi
dec edi
cmp dword [ebx + eax*4], esi
les eax, [ecx + eax*4]
enter 0xffffffffffffe0e5, 0
add byte [ecx + 0x56a9c0], al
add byte [eax + 0x52], bl
or edx, 0xeef
xor edx, 0xd180
pop edx
mov ecx, dword [ebp - 0x30]
add ecx, 0x70
imul edx, dword [ebp - 0x2c], 0x70
add edx, 0x44f3663b
imul eax, dword [ebp - 0x2c], 0x70
sub edx, eax
xor ecx, edx
imul ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x1e38], ecx
mov ecx, dword [ebp - 0x1e38]
mov dword [ebp - 0x1e3c], ecx
cmp dword [ebp - 0x1e3c], 0x63c1
jne 0x401b52
push ecx
or ecx, 0xc161
pop ecx
push eax
call 0x401a45
add byte [ebx + 0x39], cl
xor al, byte [eax + 0x4d]
inc ecx
add esp, 4
or eax, 0x2919
call 0x401a5e
add byte [edx], bh
cmp eax, 0x463c3234
inc edx
xor eax, dword [eax + 0x4c]
add esp, 4
pop eax
mov edx, dword [ebp - 0x14]
add edx, 0x70
imul eax, dword [ebp - 0x10], 0x70
add eax, 0x44f3663b
imul ecx, dword [ebp - 0x10], 0x70
sub eax, ecx
xor edx, eax
imul edx, dword [ebp - 0x10]
mov dword [ebp - 0x1e40], edx
mov edx, dword [ebp - 0x1e40]
mov dword [ebp - 0x1e44], edx
mov eax, dword [ebp - 0x1e44]
sub eax, 0x898
mov dword [ebp - 0x1e48], eax
mov dword [ebp - 0x1068], 1
push eax
push ebx
add esp, 4
and eax, 0xe3ec
pop eax
push ebx
push eax
add esp, 4
and ebx, 0x121d1
and ebx, 0x2a14
pop ebx
push edi
and edi, 0x528
and edi, 0x37d6
sub edi, 0x1157d
pop edi
imul ecx, dword [ebp - 0x1068], 0x70
add ecx, 0x44f3663b
imul edx, dword [ebp - 0x1068], 0x70
sub ecx, edx
xor ecx, dword [ebp - 0x1e48]
imul ecx, dword [ebp - 0x1068]
imul eax, dword [ebp - 0x1068], 0x70
sub ecx, eax
mov dword [ebp - 0x106c], ecx
mov ecx, dword [ebp - 0x106c]
mov edx, dword [ebp - 0x1068]
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x10], edx
push ecx
push edx
add esp, 4
or ecx, 0x47fd
pop ecx
push edi
xor edi, 0x10bda
jmp 0x401b3c
jmp 0x401b44
pop edi
push esi
add esi, 0x134d9
jmp 0x401b51
pop esi
push eax
push eax
add esp, 4
xor eax, 0xac10
pop eax
push edx
jmp 0x401b67
add edx, 0x12cd9
call 0x401b7a
add byte [edi], dh
inc esp
inc ecx
inc eax
push eax
dec eax
aas
add esp, 4
or edx, 0x2dce
pop edx
mov eax, dword [ebp - 0x14]
add eax, 0x70
imul ecx, dword [ebp - 0x10], 0x70
add ecx, 0x44f3663b
imul edx, dword [ebp - 0x10], 0x70
sub ecx, edx
xor eax, ecx
imul eax, dword [ebp - 0x10]
mov dword [ebp - 0x1e4c], eax
mov eax, dword [ebp - 0x1e4c]
mov dword [ebp - 0x1ebc], eax
lea ecx, [ebp - 0x9ac]
mov dword [ebp - 0x3e0], ecx
mov edx, dword [ebp - 0x3e0]
mov dword [edx + 4], 1
push edx
push ebx
add esp, 4
xor edx, 0x13470
xor edx, 0x7cd7
add edx, 0x129cc
sub edx, 0x89f0
pop edx
push esi
sub esi, 0x17e23
jmp 0x401bf6
and esi, 0xec5e
pop esi
mov eax, dword [ebp - 0x3e0]
imul ecx, dword [eax + 4], 0x70
add ecx, 0x44f3663b
mov edx, dword [ebp - 0x3e0]
imul eax, dword [edx + 4], 0x70
sub ecx, eax
xor ecx, 0x23
mov edx, dword [ebp - 0x3e0]
imul ecx, dword [edx + 4]
mov eax, dword [ebp - 0x3e0]
imul edx, dword [eax + 4], 0x70
sub ecx, edx
mov eax, dword [ebp - 0x3e0]
mov dword [eax], ecx
mov ecx, dword [ebp - 0x3e0]
mov dword [ebp - 0x2050], ecx
push edi
call 0x401c54
add byte [esi + 0x32], al
cmp eax, 0x42394235
add esp, 4
pop edi
push eax
push edx
add esp, 4
sub eax, 0xfe00
or eax, 0xbed3
and eax, 0xe7c5
pop eax
push ecx
or ecx, 0x8bff
pop ecx
mov dword [ebp - 0x15ac], 1
push ecx
and ecx, 0x12521
or ecx, 0xe93a
sub ecx, 0x10d45
pop ecx
push ecx
push edx
add esp, 4
call 0x401ca7
add byte [ebx + 0x50], cl
xor eax, 0x834f403d
les eax, [ecx + ebx*2]
push ecx
jmp 0x401cb3
pop ecx
mov dword [ebp - 0x2054], 0x38
mov dword [ebp - 0x2058], 0xe6
mov dword [ebp - 0x205c], 0x6e
mov dword [ebp - 0x2060], 0x6e
mov dword [ebp - 0x2064], 0x78
mov dword [ebp - 0x1638], 1
push eax
jmp 0x401cfa
call 0x401d0a
add byte [ecx], bh
cmp al, 0x3a
cmp dword [edx + esi], esi
dec ebp
inc ebp
cmp dword [ebp - 0x7d], eax
les eax, [eax + ebx*2]
push ecx
or ecx, 0xc5ca
pop ecx
push ebx
push eax
add esp, 4
sub ebx, 0xae4
pop ebx
imul edx, dword [ebp - 0x1638], 0x70
add edx, 0x44f3663b
imul eax, dword [ebp - 0x1638], 0x70
sub edx, eax
xor edx, 0xe6
imul edx, dword [ebp - 0x1638]
imul ecx, dword [ebp - 0x1638], 0x70
sub edx, ecx
mov dword [ebp - 0x163c], edx
push esi
sub esi, 0xf20f
add esi, 0xa4d5
or esi, 0x13554
pop esi
push edx
add edx, 0x11672
pop edx
push ebx
sub ebx, 0x5921
pop ebx
push ebx
xor ebx, 0x12765
sub ebx, 0x2a8a
pop ebx
push edi
push eax
add esp, 4
sub edi, 0xe793
jmp 0x401d9a
add edi, 0x111fc
add edi, 0x12796
pop edi
push edx
call 0x401db4
add byte [eax + 0x3f], cl
cmp eax, 0x83453d4e
les eax, [edx + ebx*2]
mov edx, dword [ebp - 0x9ac]
add edx, 0x70
imul eax, dword [ebp - 0x9a8], 0x70
add eax, 0x44f3663b
imul ecx, dword [ebp - 0x9a8], 0x70
sub eax, ecx
xor edx, eax
imul edx, dword [ebp - 0x9a8]
mov dword [ebp - 0x1e50], edx
mov edx, dword [ebp - 0x1e50]
mov dword [ebp - 0x1e54], edx
mov eax, dword [ebp - 0x1e54]
sub eax, 0x6e
mov dword [ebp - 0x1e5c], eax
mov dword [ebp - 0xa74], 1
push esi
and esi, 0x14b5b
pop esi
push edi
push eax
add esp, 4
sub edi, 0xb5eb
and edi, 0x10b23
jmp 0x401e28
xor edi, 0xff21
pop edi
push esi
push ecx
add esp, 4
jmp 0x401e3b
pop esi
imul ecx, dword [ebp - 0xa74], 0x70
add ecx, 0x44f3663b
imul edx, dword [ebp - 0xa74], 0x70
sub ecx, edx
xor ecx, dword [ebp - 0x1e5c]
imul ecx, dword [ebp - 0xa74]
imul eax, dword [ebp - 0xa74], 0x70
sub ecx, eax
mov dword [ebp - 0xa78], ecx
push ebx
push esi
or eax, 0x20cf
call 0x40379a
add byte [eax], bh
dec edx
xor esi, dword [edx]
cmp al, 0x4c
dec ebx
dec esi
push eax
add esp, 4
pop eax
push eax
or eax, 0x65a6
pop eax
imul edx, dword [ebp - 0x10a0], 0x70
add edx, 0x44f3663b
imul eax, dword [ebp - 0x10a0], 0x70
sub edx, eax
xor edx, dword [ebp - 0x1f50]
imul edx, dword [ebp - 0x10a0]
imul ecx, dword [ebp - 0x10a0], 0x70
sub edx, ecx
mov dword [ebp - 0x10a4], edx
mov edx, dword [ebp - 0x10a4]
mov eax, dword [ebp - 0x10a0]
mov dword [ebp - 0x14], edx
mov dword [ebp - 0x10], eax
push ebx
push eax
add esp, 4
add ebx, 0x2cd0
pop ebx
push edx
or edx, 0x17832
call 0x40380a
add byte [edi], dh
dec ebx
cmp dword [esi + 0x37], ecx
inc esp
dec esi
add esp, 4
jmp 0x403815
xor edx, 0x1044c
pop edx
push esi
or esi, 0x1bb7
pop esi
push ebx
push ecx
add esp, 4
add ebx, 0x15de8
and ebx, 0xb5d
pop ebx
push edx
push eax
add esp, 4
sub edx, 0x15d6c
xor edx, 0x21d6
sub edx, 0xa8a7
pop edx
mov ecx, dword [ebp - 0x30]
add ecx, 0x70
imul edx, dword [ebp - 0x2c], 0x70
add edx, 0x44f3663b
imul eax, dword [ebp - 0x2c], 0x70
sub edx, eax
xor ecx, edx
imul ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x1f54], ecx
mov ecx, dword [ebp - 0x1f54]
mov dword [ebp - 0x1f58], ecx
cmp dword [ebp - 0x1f58], 0x9e7
jne 0x40474d
push esi
push ebx
add esp, 4
sub esi, 0x6a7e
jmp 0x40389d
add esi, 0x15d10
add esi, 0x7018
pop esi
push ecx
sub ecx, 0x73c4
sub ecx, 0x15ccb
xor ecx, 0x1d80
pop ecx
push esi
push ecx
add esp, 4
jmp 0x4038ca
sub esi, 0xb271
sub esi, 0x15796
add esi, 0xf1f1
pop esi
push ebx
sub ebx, 0x6820
and byte [eax], ch
add byte [ecx + 0x5dbfcb], al
add bl, ch
invalid
pop ebx
mov edx, dword [ebp - 0x14]
add edx, 0x70
imul eax, dword [ebp - 0x10], 0x70
add eax, 0x44f3663b
imul ecx, dword [ebp - 0x10], 0x70
sub eax, ecx
xor edx, eax
imul edx, dword [ebp - 0x10]
mov dword [ebp - 0x1f5c], edx
mov edx, dword [ebp - 0x1f5c]
mov dword [ebp - 0x1f60], edx
mov eax, dword [ebp - 0x1f60]
sub eax, 0xec
mov dword [ebp - 0x1f64], eax
mov dword [ebp - 0x10a8], 1
push ebx
push edx
add esp, 4
or ebx, 0x122b8
or ebx, 0x2b59
add ebx, 0x168c
pop ebx
push ecx
jmp 0x403957
or ecx, 0xbc8d
xor ecx, 0x1cb9
sub ecx, 0xff49
pop ecx
imul ecx, dword [ebp - 0x10a8], 0x70
add ecx, 0x44f3663b
imul edx, dword [ebp - 0x10a8], 0x70
sub ecx, edx
xor ecx, dword [ebp - 0x1f64]
imul ecx, dword [ebp - 0x10a8]
imul eax, dword [ebp - 0x10a8], 0x70
sub ecx, eax
mov dword [ebp - 0x10ac], ecx
mov ecx, dword [ebp - 0x10ac]
mov edx, dword [ebp - 0x10a8]
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x10], edx
push ebx
xor ebx, 0x1fdc
sub ebx, 0x13b10
sub ebx, 0x17bc5
pop ebx
push edi
xor edi, 0xb4e3
pop edi
push ebx
and ebx, 0x137cd
sub ebx, 0xe8d5
pop ebx
push ecx
xor ecx, 0x1702c
pop ecx
mov eax, dword [ebp - 0x14]
add eax, 0x70
imul ecx, dword [ebp - 0x10], 0x70
add ecx, 0x44f3663b
imul edx, dword [ebp - 0x10], 0x70
sub ecx, edx
xor eax, ecx
imul eax, dword [ebp - 0x10]
mov dword [ebp - 0x1f68], eax
dec dword [ebx - 0x1f677b]
dec dword [ecx - 0x1fd37b]
dec dword [ebp - 0x9bb73]
dec dword [ecx - 0x3eb73]
dec dword [ebx - 0x3eb6b]
inc edi
inc edx
add al, 1
add byte [eax], al
add byte [eax - 0x7f], dl
call fcn.00418719
sub eax, 0x721a
xor eax, 0xfeea
add eax, 0x10ffa
pop eax
push ebx
push ecx
add esp, 4
sub ebx, 0xea34
and ebx, 0x11d6d
or ebx, 0xc50b
pop ebx
mov eax, dword [ebp - 0x3ec]
imul ecx, dword [eax + 4], 0x70
add ecx, 0x44f3663b
mov edx, dword [ebp - 0x3ec]
imul eax, dword [edx + 4], 0x70
sub ecx, eax
xor ecx, 0x14b
mov edx, dword [ebp - 0x3ec]
imul ecx, dword [edx + 4]
mov eax, dword [ebp - 0x3ec]
imul edx, dword [eax + 4], 0x70
sub ecx, edx
mov eax, dword [ebp - 0x3ec]
mov dword [eax], ecx
mov ecx, dword [ebp - 0x3ec]
mov dword [ebp - 0x2080], ecx
push eax
push esi
add esp, 4
and eax, 0x130f1
pop eax
push ecx
add ecx, 0x3dd2
or ecx, 0x484
and ecx, 0x8d8e
xor ecx, 0x10863
pop ecx
push edi
push edi
add esp, 4
add edi, 0x17e33
pop edi
mov dword [ebp - 0x15bc], 1
push edx
and edx, 0x146b1
xor edx, 0x576e
sub edx, 0x746
pop edx
push esi
push ebx
add esp, 4
or esi, 0x4f1
sub esi, 0x10989
add esi, 0xc23c
and esi, 0x6d79
pop esi
mov dword [ebp - 0x2084], 0x38
mov dword [ebp - 0x2088], 0xe6
mov dword [ebp - 0x208c], 0x6e
mov dword [ebp - 0x2090], 0x6e
mov dword [ebp - 0x2094], 0x78
mov dword [ebp - 0x1658], 1
push esi
push ecx
add esp, 4
or esi, 0x51e1
sub esi, 0x91b6
add esi, 0xfd8f
sub esi, 0x3da6
pop esi
push ecx
xor ecx, 0x3013
add ecx, 0xd677
sub ecx, 0x6e35
pop ecx
imul edx, dword [ebp - 0x1658], 0x70
add edx, 0x44f3663b
imul eax, dword [ebp - 0x1658], 0x70
sub edx, eax
xor edx, 0xe6
imul edx, dword [ebp - 0x1658]
imul ecx, dword [ebp - 0x1658], 0x70
sub edx, ecx
mov dword [ebp - 0x165c], edx
push ebx
push ebx
add esp, 4
add ebx, 0x8b9f
pop ebx
push ecx
xor ecx, 0x7ad6
pop ecx
push ecx
push esi
add esp, 4
jmp 0x403bd2
xor ecx, 0x13c45
or ecx, 0x15976
sub ecx, 0x7019
pop ecx
push eax
push ecx
add esp, 4
and eax, 0x2b08
pop eax
push ecx
push ecx
add esp, 4
jmp 0x403bfb
pop ecx
push eax
or eax, 0xf81f
pop eax
push edx
call 0x403c13
add byte [edi + 0x47], cl
inc esi
inc ebx
xor al, 0x44
cmp byte [ebp - 0x7d], cl
les eax, [edx + ebx*2]
mov edx, dword [ebp - 0x9bc]
add edx, 0x70
imul eax, dword [ebp - 0x9b8], 0x70
add eax, 0x44f3663b
imul ecx, dword [ebp - 0x9b8], 0x70
sub eax, ecx
xor edx, eax
imul edx, dword [ebp - 0x9b8]
mov dword [ebp - 0x1f6c], edx
mov edx, dword [ebp - 0x1f6c]
mov dword [ebp - 0x1f70], edx
mov eax, dword [ebp - 0x1f70]
sub eax, 0x6e
mov dword [ebp - 0x1f74], eax
mov dword [ebp - 0xa94], 1
push eax
xor eax, 0x6cbd
call 0x403c7d
add byte [esi + 0x43], al
dec eax
push eax
inc ebp
dec ebx
inc ebx
add esp, 4
pop eax
push edi
call 0x403c91
add byte [edi], bh
inc ebx
xor ecx, dword [ebx + 0x4e]
cmp ecx, dword [ebx + 0x36]
xor eax, 0x8104c483
invalid
jmp 0x4016ad
mov dword [ebp - 0x3f0], 0
call 0x404761
mov eax, 0x13379797
pop eax
mov dword [ebp - 0x3f0], eax
push eax
push edx
add esp, 4
add eax, 0xcf97
xor eax, 0x40d0
pop eax
push eax
push ecx
add esp, 4
sub eax, 0x5144
xor eax, 0x1591e
pop eax
push ecx
add ecx, 0xfd6c
add ecx, 0xe0ac
pop ecx
mov ecx, dword [ebp - 0x2098]
mov dword [ebp - 0x15c0], ecx
push ecx
or ecx, 0x141e1
and ecx, 0x17b4d
pop ecx
push esi
or esi, 0xe6b1
or esi, 0x2685
jmp 0x4047cf
pop esi
push eax
xor eax, 0x11796
jmp 0x4047dc
pop eax
mov edx, dword [ebp - 0x14]
add edx, 0x70
imul eax, dword [ebp - 0x10], 0x70
add eax, 0x44f3663b
imul ecx, dword [ebp - 0x10], 0x70
sub eax, ecx
xor edx, eax
imul edx, dword [ebp - 0x10]
mov dword [ebp - 0x15c0], edx
mov edx, dword [ebp - 0x3f0]
mov dword [ebp - 0x1ffc], edx
mov eax, dword [ebp - 0x1ffc]
add eax, dword [ebp - 0x15c0]
mov dword [ebp - 0x3f0], eax
push esi
push eax
add esp, 4
jmp 0x404827
call fcn.00404836
add byte [ecx], bh
inc edi
xor eax, 0x3439373d
aaa
inc ebx