Function at 0x4075c0
Capabilities:
Resolve function by parsing pe exports

Disassembly:
add esp, 4
call 0x4012d0
add byte [edx + 0x47], al
inc ebx
inc ebx
add esp, 4
sub eax, 0x10a4
pop eax
push ecx
and ecx, 0x416b
xor ecx, 0x11737
and ecx, 0xc6cc
pop ecx
push ecx
push ebx
add esp, 4
add ecx, 0x111ee
or ecx, 0xfa7e
pop ecx
push esi
push eax
add esp, 4
sub esi, 0xb1ca
pop esi
mov dword [ebp - 0x2c], 1
push esi
xor esi, 0x5d1f
call 0x40132a
add byte [esi + eax*2 + 0x3c], al
dec edx
xor bh, byte [ecx]
push eax
dec ecx
inc ecx
inc esi
add esp, 4
or esi, 0x18635
call 0x401341
add byte [ecx], bh
inc edx
dec edi
xor eax, dword [ecx + 0x45]
inc edx
dec esi
add esp, 4
pop esi
imul edx, dword [ebp - 0x2c], 0x138
add edx, 0x55f3663b
imul eax, dword [ebp - 0x2c], 0x138
sub edx, eax
xor edx, 0
imul edx, dword [ebp - 0x2c]
imul ecx, dword [ebp - 0x2c], 0x138
sub edx, ecx
mov dword [ebp - 0x30], edx
jmp 0x401526
mov ecx, dword [ebp - 0x1068]
mov edx, dword [ebp - 0x1064]
mov dword [ebp - 0x163c], ecx
mov dword [ebp - 0x1638], edx
push edx
xor edx, 0x1838c
add edx, 0x125a0
add edx, 0xf031
add edx, 0xa976
pop edx
push ebx
push ebx
add esp, 4
xor ebx, 0x127f0
add ebx, 0x133bd
or ebx, 0xdb16
pop ebx
push eax
and eax, 0x6d80
xor eax, 0x533f
call 0x40158c
add byte [edx], dh
cmp cl, byte [edx + 0x39]
inc edi
dec edx
aaa
xor al, 0x34
add esp, 4
pop eax
push ecx
push ebx
add esp, 4
or ecx, 0x1687b
and ecx, 0x12b15
pop ecx
mov eax, dword [ebp - 0x30]
add eax, 0x138
imul ecx, dword [ebp - 0x2c], 0x138
add ecx, 0x55f3663b
imul edx, dword [ebp - 0x2c], 0x138
sub ecx, edx
xor eax, ecx
imul eax, dword [ebp - 0x2c]
mov dword [ebp - 0x1e64], eax
push edx
add edx, 0x155c4
or edx, 0xa49e
add edx, 0x3e44
pop edx
push esi
push edx
add esp, 4
or esi, 0x13ff6
add esi, 0x4efb
or esi, 0x182f5
or esi, 0x78fa
pop esi
mov eax, dword [ebp - 0x163c]
add eax, 0x138
imul ecx, dword [ebp - 0x1638], 0x138
add ecx, 0x55f3663b
imul edx, dword [ebp - 0x1638], 0x138
sub ecx, edx
xor eax, ecx
imul eax, dword [ebp - 0x1638]
mov dword [ebp - 0x1e60], eax
mov eax, dword [ebp - 0x1e60]
mov dword [ebp - 0x1e68], eax
mov ecx, dword [ebp - 0x1e64]
cmp ecx, dword [ebp - 0x1e68]
jae 0x40165a
mov dword [ebp - 0x15ac], 1
jmp 0x401664
mov dword [ebp - 0x15ac], 0
mov dl, byte [ebp - 0x15ac]
mov byte [ebp - 0x3ad], dl
movzx eax, byte [ebp - 0x3ad]
test eax, eax
je 0x4046d7
push edx
push ecx
add esp, 4
xor edx, 0x12003
xor edx, 0x7edf
xor edx, 0x93b3
pop edx
push ecx
xor ecx, 0xe3b7
xor ecx, 0x9207
sub ecx, 0x27f4
or ecx, 0x880b
pop ecx
push edx
push edx
add esp, 4
xor edx, 0x176b4
sub edx, 0x17b01
pop edx
push ecx
push eax
add esp, 4
or ecx, 0xad0e
or ecx, 0xa33c
pop ecx
push edx
jmp 0x4016dc
or edx, 0x11974
pop edx
mov ecx, dword [ebp - 0x30]
add ecx, 0x138
imul edx, dword [ebp - 0x2c], 0x138
add edx, 0x55f3663b
imul eax, dword [ebp - 0x2c], 0x138
sub edx, eax
xor ecx, edx
imul ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x1e6c], ecx
mov ecx, dword [ebp - 0x1e6c]
mov dword [ebp - 0x1e70], ecx
cmp dword [ebp - 0x1e70], 0x63c1
jne 0x40185e
push edx
and edx, 0x16863
or edx, 0x109e2
pop edx
push eax
push ebx
add esp, 4
and eax, 0x1835d
add eax, 0x13b5a
pop eax
push edi
push esi
add esp, 4
and edi, 0xe777
or edi, 0xd539
pop edi
mov edx, dword [ebp - 0x14]
add edx, 0x138
imul eax, dword [ebp - 0x10], 0x138
add eax, 0x55f3663b
imul ecx, dword [ebp - 0x10], 0x138
sub eax, ecx
xor edx, eax
imul edx, dword [ebp - 0x10]
mov dword [ebp - 0x1e74], edx
mov edx, dword [ebp - 0x1e74]
mov dword [ebp - 0x1e78], edx
mov eax, dword [ebp - 0x1e78]
sub eax, 0x898
mov dword [ebp - 0x1e7c], eax
mov dword [ebp - 0x106c], 1
push edi
sub edi, 0xc14b
xor edi, 0x740c
pop edi
push ecx
push ebx
add esp, 4
jmp 0x4017c9
or ecx, 0x4fb8
sub ecx, 0x128cc
pop ecx
push esi
jmp 0x4017de
pop esi
imul ecx, dword [ebp - 0x106c], 0x138
add ecx, 0x55f3663b
imul edx, dword [ebp - 0x106c], 0x138
sub ecx, edx
xor ecx, dword [ebp - 0x1e7c]
imul ecx, dword [ebp - 0x106c]
imul eax, dword [ebp - 0x106c], 0x138
sub ecx, eax
mov dword [ebp - 0x1070], ecx
mov ecx, dword [ebp - 0x1070]
mov edx, dword [ebp - 0x106c]
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x10], edx
push eax
jmp 0x401836
pop eax
push edi
add edi, 0x1521d
call 0x40184c
add byte [ebx], dh
dec ebp
dec esp
cmp bh, byte [esi + ecx*2]
cmp byte [edi - 0x7d], cl
les eax, [edi + ebx*2]
push edx
sub edx, 0xa1c1
sub edx, 0x2c6e
pop edx
push ecx
call 0x40186e
add byte [esi + 0x3a], cl
inc esp
inc edi
dec edx
cmp al, 0x39
cmp byte ds:[ebx + 0x505904c4], al
or eax, 0x13229
add eax, 0x1c89
call 0x40188c
add byte [ecx + 0x49], al
push eax
aaa
inc edi
cmp eax, dword ss:[ebx - 0x74a7fb3c]
inc ebp
in al, dx
add eax, 0x138
imul ecx, dword [ebp - 0x10], 0x138
add ecx, 0x55f3663b
imul edx, dword [ebp - 0x10], 0x138
sub ecx, edx
xor eax, ecx
imul eax, dword [ebp - 0x10]
mov dword [ebp - 0x1e80], eax
mov eax, dword [ebp - 0x1e80]
mov dword [ebp - 0x1ef0], eax
lea ecx, [ebp - 0x9b0]
mov dword [ebp - 0x3e0], ecx
mov edx, dword [ebp - 0x3e0]
mov dword [edx + 4], 1
push edi
push edi
add esp, 4
sub edi, 0x17e7e
sub edi, 0x4213
call 0x4018ff
add byte [esi + 0x47], al
xor al, 0x40
xor ecx, dword [ebp + 0x3c]
cmp al, 0x83
les eax, [edi + ebx*2]
push edx
and edx, 0xc4a0
and edx, 0x1258e
pop edx
mov eax, dword [ebp - 0x3e0]
imul ecx, dword [eax + 4], 0x138
add ecx, 0x55f3663b
mov edx, dword [ebp - 0x3e0]
imul eax, dword [edx + 4], 0x138
sub ecx, eax
xor ecx, 0x23
mov edx, dword [ebp - 0x3e0]
imul ecx, dword [edx + 4]
mov eax, dword [ebp - 0x3e0]
imul edx, dword [eax + 4], 0x138
sub ecx, edx
mov eax, dword [ebp - 0x3e0]
mov dword [eax], ecx
mov ecx, dword [ebp - 0x3e0]
mov dword [ebp - 0x2084], ecx
push edx
push ecx
add esp, 4
add edx, 0xc68
jmp 0x401977
jmp 0x40197c
pop edx
push edx
push edx
add esp, 4
or edx, 0x16d21
and edx, 0x9d5
xor edx, 0x665d
pop edx
mov dword [ebp - 0x15b4], 1
push edi
push eax
add esp, 4
or edi, 0x1538b
and edi, 0x3784
pop edi
push ebx
push ecx
add esp, 4
jmp 0x4019bc
pop ebx
push ecx
xor ecx, 0x8b54
or ecx, 0x445
sub ecx, 0x14157
pop ecx
mov dword [ebp - 0x2088], 0x38
mov dword [ebp - 0x208c], 0xe6
mov dword [ebp - 0x2090], 0x6e
mov dword [ebp - 0x2094], 0x6e
mov dword [ebp - 0x2098], 0x78
mov dword [ebp - 0x1640], 1
push esi
push ecx
add esp, 4
jmp 0x401a18
pop esi
push edi
push eax
add esp, 4
add edi, 0x11b0e
add edi, 0xca00
add edi, 0xeaa3
sub edi, 0x15cac
pop edi
push ebx
or ebx, 0xfbeb
pop ebx
imul edx, dword [ebp - 0x1640], 0x138
add edx, 0x55f3663b
imul eax, dword [ebp - 0x1640], 0x138
sub edx, eax
xor edx, 0xe6
imul edx, dword [ebp - 0x1640]
imul ecx, dword [ebp - 0x1640], 0x138
sub edx, ecx
mov dword [ebp - 0x1644], edx
push esi
push esi
add esp, 4
and esi, 0x798b
or esi, 0x632f
or esi, 0x53df
pop esi
push edi
add edi, 0x356c
pop edi
push esi
push eax
add esp, 4
add esi, 0xeaa0
and esi, 0x2000
pop esi
push esi
jmp 0x401ab3
add esi, 0xfd7c
add esi, 0x13bc8
call 0x401acc
add byte [ecx*2 + 0x4a374f38], bh
cmp byte [ebx + 0x535e04c4], al
and ebx, 0x1dcb
and ebx, 0x11dc7
pop ebx
mov edx, dword [ebp - 0x9b0]
add edx, 0x138
imul eax, dword [ebp - 0x9ac], 0x138
add eax, 0x55f3663b
imul ecx, dword [ebp - 0x9ac], 0x138
sub eax, ecx
xor edx, eax
imul edx, dword [ebp - 0x9ac]
mov dword [ebp - 0x1e84], edx
mov edx, dword [ebp - 0x1e84]
mov dword [ebp - 0x1e88], edx
mov eax, dword [ebp - 0x1e88]
sub eax, 0x6e
mov dword [ebp - 0x1e8c], eax
mov dword [ebp - 0xa78], 1
push edx
xor edx, 0x16bbd
xor edx, 0x116a
sub edx, 0x146e
pop edx
push esi
push ebx
add esp, 4
or esi, 0xf073
pop esi
push edx
push ebx
add esp, 4
sub edx, 0x10e4d
or edx, 0xbed1
pop edx
imul ecx, dword [ebp - 0xa78], 0x138
add ecx, 0x55f3663b
imul edx, dword [ebp - 0xa78], 0x138
sub ecx, edx
xor ecx, dword [ebp - 0x1e8c]
imul ecx, dword [ebp - 0xa78]
imul eax, dword [ebp - 0xa78], 0x138
sub ecx, eax
mov dword [ebp - 0xa7c], ecx
push ecx
push eax
add esp, 4
call 0x401bba
add byte [ebx + esi + 0x50], cl
cmp edi, dword [ebx + edi]
xor al, byte [eax + 0x4d]
add esp, 4
and ecx, 0x19a9
jmp 0x401bc8
call 0x401bd4
add byte [esi], bh
cmp al, 0x41
aas
cmp eax, 0x4c4833d
pop ecx
mov ecx, dword [ebp - 0x9b0]
add ecx, 0x138
imul edx, dword [ebp - 0x9ac], 0x138
add edx, 0x55f3663b
imul eax, dword [ebp - 0x9ac], 0x138
sub edx, eax
xor ecx, edx
imul ecx, dword [ebp - 0x9ac]
mov dword [ebp - 0x1e94], ecx
mov ecx, dword [ebp - 0x1e94]
mov dword [ebp - 0x1e98], ecx
mov edx, dword [ebp - 0x1e98]
add edx, 0x38
mov dword [ebp - 0x1e9c], edx
mov dword [ebp - 0xa80], 1
push ebx
sub ebx, 0x124e6
pop ebx
push ebx
xor ebx, 0x6c25
sub ebx, 0x10807
pop ebx
push edi
push ebx
add esp, 4
jmp 0x401c57
pop edi
push esi
xor esi, 0x124a2
sub esi, 0xf11e
pop esi
imul eax, dword [ebp - 0xa80], 0x138
add eax, 0x55f3663b
imul ecx, dword [ebp - 0xa80], 0x138
sub eax, ecx
xor eax, dword [ebp - 0x1e9c]
imul eax, dword [ebp - 0xa80]
imul edx, dword [ebp - 0xa80], 0x138
sub eax, edx
mov dword [ebp - 0xa84], eax
push esi
jmp 0x401ca8
jmp 0x401caf
pop esi
push eax
xor eax, 0x7176
and eax, 0x10865
pop eax
push ecx
call 0x401cce
add byte [esi], dh
aaa
dec esp
inc esi
cmp al, byte [ecx + 0x3c]
cmp bh, byte [edx]
add esp, 4
pop ecx
push eax
push ebx
add esp, 4
xor eax, 0x4633
pop eax
push esi
xor esi, 0x12740
pop esi
push edx
push ecx
add esp, 4
jmp 0x401cf1
sub edx, 0x88c3
jmp 0x401cfd
or edx, 0x170be
pop edx
mov dword [ebp - 0x2ec], 1
push edi
push ecx
add esp, 4
xor edi, 0x16bcf
xor edi, 0xdf63
or edi, 0x80d6
or edi, 0x3db5
pop edi
push eax
or eax, 0x1724e
pop eax
push eax
push ecx
add esp, 4
add eax, 0x11f3d
pop eax
imul eax, dword [ebp - 0x2ec], 0x138
add eax, 0x55f3663b
imul ecx, dword [ebp - 0x2ec], 0x138
sub eax, ecx
xor eax, 2
imul eax, dword [ebp - 0x2ec]
imul edx, dword [ebp - 0x2ec], 0x138
sub eax, edx
mov dword [ebp - 0x2f0], eax
push edx
push ecx
add esp, 4
call 0x401d8b
add byte [ebx + 0x33], cl
xor esi, dword [eax*2 + 0x34414446]
add esp, 4
add edx, 0xd4e
pop edx
push esi
and esi, 0x17cfe
sub esi, 0x17e2a
and esi, 0x8952
pop esi
mov eax, dword [ebp - 0x9b0]
mov ecx, dword [ebp - 0x9ac]
mov dword [ebp - 0x274], eax
mov dword [ebp - 0x270], ecx
jmp 0x401f97
push ecx
push esi
add esp, 4
xor ecx, 0x9c3b
pop ecx
push edi
or edi, 0x11791
and edi, 0x3235
or edi, 0x9dc
pop edi
push eax
push eax
add esp, 4
sub eax, 0x55f9
add eax, 0x6fcd
pop eax
mov edx, dword [ebp - 0x274]
add edx, 0x138
imul eax, dword [ebp - 0x270], 0x138
add eax, 0x55f3663b
imul ecx, dword [ebp - 0x270], 0x138
sub eax, ecx
xor edx, eax
imul edx, dword [ebp - 0x270]
mov dword [ebp - 0x1ea0], edx
push eax
and eax, 0x5024
pop eax
push ecx
push edx
add esp, 4
sub ecx, 0x38a7
sub ecx, 0x7f9f
and ecx, 0x128b8
sub ecx, 0x167d4
pop ecx
push edi
push ecx
add esp, 4
xor edi, 0x3486
pop edi
mov edx, dword [ebp - 0x1ea0]
sub edx, 1
mov dword [ebp - 0x15b0], edx
push edx
xor edx, 0xf0d7
pop edx
push ecx
push ebx
add esp, 4
or ecx, 0x120c9
pop ecx
push eax
and eax, 0x6e88
call 0x401e97
add byte [ebp + 0x47], cl
cmp al, 0x4a
cmp dword [0x4c4833a], esi
jmp 0x401ea0
pop eax
push edx
call 0x401eb2
add byte [ebp + 0x32], cl
xor al, 0x48
dec edx
aas
dec edx
cmp al, 0x49
add esp, 4
call 0x401ec1
add byte [edx + 0x3b], al
inc esi
aas
cmp eax, 0x4c4833f
and edx, 0xf001
pop edx
push edx
xor edx, 0x12248
pop edx
imul eax, dword [ebp - 0x270], 0x138
add eax, 0x55f3663b
imul ecx, dword [ebp - 0x270], 0x138
sub eax, ecx
xor eax, dword [ebp - 0x15b0]
imul eax, dword [ebp - 0x270]
imul edx, dword [ebp - 0x270], 0x138
sub eax, edx
mov dword [ebp - 0x274], eax
mov eax, dword [ebp - 0x15b0]
imul eax, dword [ebp - 0x270]
mov dword [ebp - 0x1ea4], eax
mov dword [ebp - 0x1648], 1
push esi
sub esi, 0x14b5f
and esi, 0x15b1c
add esi, 0x13e69
xor esi, 0x13ca8
pop esi
push esi
push esi
add esp, 4
or esi, 0x1532f
sub esi, 0xf68d
xor esi, 0x11980
pop esi
imul ecx, dword [ebp - 0x1648], 0x138
add ecx, 0x55f3663b
imul edx, dword [ebp - 0x1648], 0x138
sub ecx, edx
xor ecx, dword [ebp - 0x1ea4]
imul ecx, dword [ebp - 0x1648]
imul eax, dword [ebp - 0x1648], 0x138
sub ecx, eax
mov dword [ebp - 0x164c], ecx
push ebx
or ebx, 0x1271f
add ebx, 0xc178
pop ebx
push eax
add eax, 0x1309d
call 0x401fb9
add byte [ecx + ecx*2], dh
inc ecx
dec ebp
cmp eax, 0xc4834f3d
add al, 0xeb
add al, 0x42
inc edi
inc ebx
cmp al, 0x81
call int.00415339
pop eax
mov ecx, dword [ebp - 0x274]
add ecx, 0x138
imul edx, dword [ebp - 0x270], 0x138
add edx, 0x55f3663b
imul eax, dword [ebp - 0x270], 0x138
sub edx, eax
xor ecx, edx
imul ecx, dword [ebp - 0x270]
mov dword [ebp - 0x1ea8], ecx
mov ecx, dword [ebp - 0x1ea8]
mov dword [ebp - 0x1eac], ecx
cmp dword [ebp - 0x1eac], 0
jbe 0x40250d
push esi
or esi, 0x3527
pop esi
push eax
and eax, 0xdcff
xor eax, 0x167fc
pop eax
push ebx
or ebx, 0x14050
xor ebx, 0x12be8
pop ebx
push eax
or eax, 0x62fa
xor eax, 0x13634
pop eax
mov edx, dword [ebp - 0x274]
add edx, 0x138
imul eax, dword [ebp - 0x270], 0x138
add eax, 0x55f3663b
imul ecx, dword [ebp - 0x270], 0x138
sub eax, ecx
xor edx, eax
imul edx, dword [ebp - 0x270]
mov dword [ebp - 0x1eb0], edx
mov edx, dword [ebp - 0x1eb0]
mov dword [ebp - 0x1ebc], edx
push esi
push eax
add esp, 4
xor esi, 0x1bfa
add esi, 0x5251
or esi, 0xb3c8
call 0x4020b3
add byte [ebp + 0x3c], al
dec ebp
dec ebx
dec edx
dec ebp
cmp byte [ebx + eax*4 - 0x3c], al
add al, 0x5e
push esi
add esi, 0xd77e
pop esi
mov eax, dword [ebp - 0xa7c]
add eax, 0x138
imul ecx, dword [ebp - 0xa78], 0x138
add ecx, 0x55f3663b
imul edx, dword [ebp - 0xa78], 0x138
sub ecx, edx
xor eax, ecx
imul eax, dword [ebp - 0xa78]
mov dword [ebp - 0x1eb4], eax
mov eax, dword [ebp - 0x1eb4]
mov dword [ebp - 0x1eb8], eax
mov ecx, dword [ebp - 0x15b4]
imul ecx, dword [ebp - 0x1eb8]
cmp dword [ebp - 0x1ebc], ecx
jne 0x402290
push eax
push eax
add esp, 4
or eax, 0x7f10
sub eax, 0x2710
jmp 0x402133
pop eax
push edi
push ebx
add esp, 4
and edi, 0x10da0
and edi, 0x14ae3
and edi, 0x12220
pop edi
push ecx
push eax
add esp, 4
and ecx, 0x6ff6
xor ecx, 0x428c
or ecx, 0x16d33
pop ecx
push ecx
or ecx, 0xe05b
xor ecx, 0x16562
and ecx, 0x8c71
sub ecx, 0xf89d
pop ecx
mov edx, dword [ebp - 0x2f0]
add edx, 0x138
imul eax, dword [ebp - 0x2ec], 0x138
add eax, 0x55f3663b
imul ecx, dword [ebp - 0x2ec], 0x138
sub eax, ecx
xor edx, eax
imul edx, dword [ebp - 0x2ec]
mov dword [ebp - 0x1ec0], edx
mov edx, dword [ebp - 0x1ec0]
mov dword [ebp - 0x1ec4], edx
mov eax, dword [ebp - 0x1ec4]
sub eax, 1
mov dword [ebp - 0x1ec8], eax
mov dword [ebp - 0x1074], 1
push edx
push ecx
add esp, 4
sub edx, 0x11c73
pop edx
push ebx
push esi
add esp, 4
and ebx, 0xc59f
xor ebx, 0xf78
pop ebx
push ecx
sub ecx, 0x4cfb
sub ecx, 0x1cf
jmp 0x40220a
pop ecx
imul ecx, dword [ebp - 0x1074], 0x138
add ecx, 0x55f3663b
imul edx, dword [ebp - 0x1074], 0x138
sub ecx, edx
xor ecx, dword [ebp - 0x1ec8]
imul ecx, dword [ebp - 0x1074]
imul eax, dword [ebp - 0x1074], 0x138
sub ecx, eax
mov dword [ebp - 0x1078], ecx
mov ecx, dword [ebp - 0x1078]
mov edx, dword [ebp - 0x1074]
mov dword [ebp - 0x2f0], ecx
mov dword [ebp - 0x2ec], edx
push eax
call 0x40226c
add byte [edi + 0x50], cl
dec eax
inc ebp
inc eax
inc edi
add esp, 4
and eax, 0x14724
pop eax
push esi
sub esi, 0x1465e
pop esi
push ecx
push ecx
add esp, 4
jmp 0x402289
xor ecx, 0x3622
pop ecx
push edx
or edx, 0x146d4
call 0x4022a5
add byte [ebp + 0x32], cl
aaa
dec ebx
xor al, byte [ecx + 0x4e]
add esp, 4
jmp 0x4022b0
call 0x4022be
add byte [edi], dh
dec esi
xor al, 0x3a
xor dh, byte [edx]
xor edi, dword [ebx + eax*4]
les eax, [edx + ebx*2]
mov eax, dword [ebp - 0x274]
add eax, 0x138
imul ecx, dword [ebp - 0x270], 0x138
add ecx, 0x55f3663b
imul edx, dword [ebp - 0x270], 0x138
sub ecx, edx
xor eax, ecx
imul eax, dword [ebp - 0x270]
mov dword [ebp - 0x1ecc], eax
mov eax, dword [ebp - 0x1ecc]
mov dword [ebp - 0x1ed8], eax
push ecx
push eax
add esp, 4
or ecx, 0x13895
or ecx, 0x16a72
add ecx, 0xd6a1
sub ecx, 0x55a2
pop ecx
push ebx
sub ebx, 0xc4f6
sub ebx, 0x2057
add ebx, 0x8954
pop ebx
mov ecx, dword [ebp - 0xa84]
add ecx, 0x138
imul edx, dword [ebp - 0xa80], 0x138
add edx, 0x55f3663b
imul eax, dword [ebp - 0xa80], 0x138
sub edx, eax
xor ecx, edx
imul ecx, dword [ebp - 0xa80]
mov dword [ebp - 0x1ed0], ecx
mov ecx, dword [ebp - 0x1ed0]
mov dword [ebp - 0x1ed4], ecx
mov edx, dword [ebp - 0x15b4]
imul edx, dword [ebp - 0x1ed4]
cmp dword [ebp - 0x1ed8], edx
jne 0x402508
push edi
and edi, 0x2797
sub edi, 0x74ae
xor edi, 0x15033
pop edi
push edi
push edi
add esp, 4
add edi, 0x8a90
pop edi
push edi
push edx
add esp, 4
and edi, 0x4f8d
xor edi, 0x154c
pop edi
push edx
push ebx
add esp, 4
add edx, 0x12af8
xor edx, 0x45be
pop edx
push eax
push esi
add esp, 4
and eax, 0x1234e
pop eax
push edi
jmp 0x4023e9
jmp 0x4023ef
add edi, 0x2b0e
pop edi
mov eax, dword [ebp - 0x2f0]
add eax, 0x138
imul ecx, dword [ebp - 0x2ec], 0x138
add ecx, 0x55f3663b
imul edx, dword [ebp - 0x2ec], 0x138
sub ecx, edx
xor eax, ecx
imul eax, dword [ebp - 0x2ec]
mov dword [ebp - 0x1edc], eax
mov eax, dword [ebp - 0x1edc]
mov dword [ebp - 0x1ee0], eax
mov ecx, dword [ebp - 0x1ee0]
sub ecx, 1
mov dword [ebp - 0x1ee4], ecx
mov dword [ebp - 0x107c], 1
push ebx
and ebx, 0x6abf
or ebx, 0xf3c1
sub ebx, 0x13963
pop ebx
push esi
push edi
add esp, 4
and esi, 0x2862
and esi, 0x924d
sub esi, 0xa679
add esi, 0x35d7
pop esi
imul edx, dword [ebp - 0x107c], 0x138
add edx, 0x55f3663b
imul eax, dword [ebp - 0x107c], 0x138
sub edx, eax
xor edx, dword [ebp - 0x1ee4]
imul edx, dword [ebp - 0x107c]
imul ecx, dword [ebp - 0x107c], 0x138
sub edx, ecx
mov dword [ebp - 0x1080], edx
mov edx, dword [ebp - 0x1080]
mov eax, dword [ebp - 0x107c]
mov dword [ebp - 0x2f0], edx
mov dword [ebp - 0x2ec], eax
push eax
call 0x4024e3
add byte [esp + ecx*2], bh
aaa
inc eax
cmp eax, dword [eax - 0x7d]
les eax, [ecx + eax*4]
loopne 0x402524
mov edx, 0x5eb0000
dec eax
push eax
xor eax, 0xf0814d36
ret
jmp 0x401dc6
push eax
jmp 0x402515
add eax, 0xd78c
xor eax, 0x8323
add dword [eax], 0
mov dword [ebp - 0x3f4], 0
call 0x4046e6
mov eax, 0x13379797
pop eax
mov dword [ebp - 0x3f4], eax
push esi
push edx
add esp, 4
or esi, 0xf65e
xor esi, 0x17762
pop esi
push ebx
push esi
add esp, 4
xor ebx, 0x7642
sub ebx, 0x16675
pop ebx
push ebx
and ebx, 0x84e1
or ebx, 0xab95
pop ebx
mov ecx, dword [ebp - 0x20cc]
mov dword [ebp - 0x15c8], ecx
push ecx
jmp 0x40473a
call 0x404748
add byte [esp + edi + 0x38], al
cmp eax, 0x3b403440
add esp, 4
call 0x404758
add byte [esi + ecx*2 + 0x43], cl
cmp dword [ecx + 0x44], ecx
dec esi
add esp, 4
or ecx, 0x3530
pop ecx
mov edx, dword [ebp - 0x14]
add edx, 0x138
imul eax, dword [ebp - 0x10], 0x138
add eax, 0x55f3663b
imul ecx, dword [ebp - 0x10], 0x138
sub eax, ecx
xor edx, eax
imul edx, dword [ebp - 0x10]
mov dword [ebp - 0x15c8], edx
mov edx, dword [ebp - 0x3f4]
mov dword [ebp - 0x2014], edx
mov eax, dword [ebp - 0x2014]
add eax, dword [ebp - 0x15c8]
mov dword [ebp - 0x3f4], eax
push esi
push edi
add esp, 4
add esi, 0xfa50
or esi, 0x80f1
xor esi, 0x12b62
sub esi, 0x75d1
pop esi
push edi
xor edi, 0x42f
sub edi, 0xe48f
xor edi, 0x97c6
pop edi
mov byte [ebp - 0xbf0], 0x52
mov byte [ebp - 0xbef], 0xb9
mov byte [ebp - 0xbee], 0x10
mov byte [ebp - 0xbed], 0x10
mov byte [ebp - 0xbec], 0x10
mov byte [ebp - 0xbeb], 0x10
mov byte [ebp - 0xbea], 0x5a
push ebx
call 0x40481c
add byte [eax + edi + 0x37], cl
xor edi, dword [eax]
inc ebp
cmp edi, dword [ebx]
add esp, 4
pop ebx
push esi
and esi, 0x171ef
jmp 0x404830
pop esi
push eax
add eax, 0x18418
and eax, 0x5acb
pop eax
mov byte [ebp - 0xbe8], 0x52
mov byte [ebp - 0xbe7], 0xb9
mov byte [ebp - 0xbe6], 0x20
mov byte [ebp - 0xbe5], 0x20
mov byte [ebp - 0xbe4], 0x20
mov byte [ebp - 0xbe3], 0x20
mov byte [ebp - 0xbe2], 0x5a
push ecx
push eax
add esp, 4
or ecx, 0x137c9
sub ecx, 0x15ca3
pop ecx
push eax
push eax
add esp, 4
or eax, 0x469b
jmp 0x404894
pop eax
push ecx
push edx
add esp, 4
jmp 0x4048a1
pop ecx
mov dword [ebp - 0x20d0], 0xe
push ebx
push edx
add esp, 4
sub ebx, 0x1685f
jmp 0x4048be
jmp 0x4048c7
add ebx, 0x1198e
pop ebx
push ebx
or ebx, 0x2081
pop ebx
push esi
xor esi, 0x1648c
pop esi
mov ecx, 1
imul edx, ecx, 0
lea eax, [ebp + edx - 0xbf0]
mov dword [ebp - 0x15cc], eax
push ebx
jmp 0x4048fd
sub ebx, 0x2656
pop ebx
push edx
push ecx
add esp, 4
or edx, 0x1290f
jmp 0x404918
and edx, 0xeff
sub edx, 0x250e
pop edx
mov dword [ebp - 0x20d4], 0xffffffff
push eax
sub eax, 0x11982
xor eax, 0xab45
xor eax, 0x2a17
pop eax
push edx
push eax
add esp, 4
xor edx, 0x10371
or edx, 0x14b6c
or edx, 0x13806
and edx, 0xbf98
pop edx
mov ecx, dword [ebp - 0x3f4]
mov dword [ebp - 0x500], ecx
jmp 0x40497e
mov edx, dword [ebp - 0x500]
add edx, 1
mov dword [ebp - 0x500], edx
push esi
push edi
add esp, 4
xor esi, 0x10163
jmp 0x40498f
pop esi
push edx
push esi
add esp, 4
or edx, 0x15578
pop edx
push edi
call 0x4049ac
add byte [ebx + 0x43], cl
cmp al, 0x36
xor cl, byte [edi + 0x49]
dec esp
inc esi
add esp, 4
pop edi
mov eax, dword [ebp - 0x500]
sub eax, dword [ebp - 0x3f4]
cmp eax, 0xffffffff
jb 0x4049f8
push edx
push edi
add esp, 4
and edx, 0x262a
pop edx
push esi
call 0x4049dd
add byte [edx + 0x49], cl
xor edx, dword [eax + 0x37]
xor eax, 0x83343d3e
les eax, [ecx + eax*4]
out dx, al
aad 0xd5
add byte [eax], al
or esi, 0xd607
xor esi, 0x176d0
pop esi
jmp 0x404c26
mov dword [ebp - 0xc84], 7
mov ecx, dword [ebp - 0x500]
mov dword [ebp - 0xad0], ecx
push ebx
or ebx, 0xa27a
sub ebx, 0x16cb
xor ebx, 0x3982
pop ebx
push eax
push eax
add esp, 4
jmp 0x404a30
jmp 0x404a39
and eax, 0xd3f8
pop eax
mov edx, dword [ebp - 0x15cc]
mov dword [ebp - 0xacc], edx
mov dword [ebp - 0xc88], 0
mov eax, dword [ebp - 0x500]
cmp eax, dword [ebp - 0x15cc]
jne 0x404aa7
push eax
push esi
add esp, 4
and eax, 0x1a03
pop eax
push ebx
and ebx, 0x1022b
pop ebx
push eax
sub eax, 0xe5f3
jmp 0x404a87
pop eax
push edx
add edx, 0xf311
and edx, 0x344e
pop edx
mov ecx, dword [ebp - 0xc88]
mov dword [ebp - 0x15d4], ecx
jmp 0x404bd8
cmp dword [ebp - 0xc84], 0
jle 0x404bcc
push ebx
push ecx
add esp, 4
jmp 0x404abe
xor ebx, 0xd038
and ebx, 0x5541
and ebx, 0x1610b
pop ebx
push edx
push edx
add esp, 4
jmp 0x404adf
and edx, 0x979e
pop edx
mov edx, dword [ebp - 0xad0]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0xacc]
movzx edx, byte [ecx]
cmp eax, edx
je 0x404b68
push ecx
call 0x404b0a
add byte [esi + eax*2], bh
inc esi
cmp al, 0x42
dec edx
add esp, 4
or ecx, 0x46ac
sub ecx, 0x13e3f
pop ecx
push esi
or esi, 0x8b8e
and esi, 0x13422
add esi, 0xf943
pop esi
mov eax, dword [ebp - 0xad0]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0xacc]
movzx eax, byte [edx]
cmp ecx, eax
jle 0x404b50
mov dword [ebp - 0x15d0], 1
jmp 0x404b5a
mov dword [ebp - 0x15d0], 0xffffffff
mov ecx, dword [ebp - 0x15d0]
mov dword [ebp - 0xc88], ecx
jmp 0x404bcc
push ebx
push edi
add esp, 4
and ebx, 0xc2ef
jmp 0x404b7c
pop ebx
push esi
and esi, 0x1efc
call 0x404b90
add byte [edi], dh
aaa
inc ebx
inc edi
dec esi
add esp, 4
add esi, 0x114ca
pop esi
mov edx, dword [ebp - 0xc84]
sub edx, 1
mov dword [ebp - 0xc84], edx
mov eax, dword [ebp - 0xad0]
add eax, 1
mov dword [ebp - 0xad0], eax
mov ecx, dword [ebp - 0xacc]
add ecx, 1
mov dword [ebp - 0xacc], ecx
jmp 0x404aa7
mov edx, dword [ebp - 0xc88]
mov dword [ebp - 0x15d4], edx
cmp dword [ebp - 0x15d4], 0
jne 0x404c21
push edx
call 0x404bf1
add byte [ecx + 0x4b], al
cmp eax, dword [edi + ecx*2 + 0x34]
xor eax, 0x4c4833a
pop edx
push ebx
push ecx
add esp, 4
sub ebx, 0x5b08
pop ebx
push eax
push ecx
add esp, 4
and eax, 0x9dfa
sub eax, 0x8769
pop eax
mov eax, dword [ebp - 0x500]
mov dword [ebp - 0x3e4], eax
jmp 0x404c62
jmp 0x40496f
push edi
push esi
add esp, 4
jmp 0x404c34
xor edi, 0x176c4
jmp 0x404c42
pop edi
push eax
or eax, 0x524b
jmp 0x404c4f
pop eax
push ebx
and ebx, 0x996b
pop ebx
mov dword [ebp - 0x3e4], 0
push ecx
or ecx, 0x67a
pop ecx
push esi
push esi
add esp, 4
add esi, 0x5c46
add esi, 0x1502c
pop esi
push eax
push ebx
add esp, 4
and eax, 0x12154
or eax, 0x40d0
and eax, 0x42f3
pop eax
push esi
call 0x404ca2
add byte [ecx + 0x4f], al
dec edx
xor edi, dword [esi + ecx*2]
dec esp
add esp, 4
or esi, 0x161b2
add esi, 0xea19
or esi, 0xffe7
pop esi
push eax
sub eax, 0x1857c
add eax, 0x1233a
pop eax
mov ecx, 1
imul edx, ecx, 0
lea eax, [ebp + edx - 0xbe8]
mov dword [ebp - 0x15d8], eax
push ebx
and ebx, 0x1700c
or ebx, 0x76d5
sub ebx, 0xa09a
add ebx, 0x81e3
pop ebx
push esi
push ebx
add esp, 4
or esi, 0x184d9
or esi, 0x17e69
and esi, 0x165f
pop esi
mov dword [ebp - 0x20d8], 0xffffffff
push edx
and edx, 0x3bd6
call 0x404d2b
add byte [edx + 0x3d], cl
push eax
aaa
cmp bh, byte [esi]
inc ebp
add esp, 4
pop edx
push ecx
add ecx, 0x15bf1
xor ecx, 0x13ec5
or ecx, 0xabf3
and ecx, 0x3c26
pop ecx
mov ecx, dword [ebp - 0x3f4]
mov dword [ebp - 0x504], ecx
jmp 0x404d66
push ecx
push ecx
add esp, 4
add ecx, 0x7774
or ecx, 0x6042
or ecx, 0x2cd2
pop ecx
push ebx
push ecx
add esp, 4
or ebx, 0x6bad
or ebx, 0x4da1
pop ebx
push edi
add edi, 0x1737c
pop edi
mov eax, dword [ebp - 0x504]
sub eax, dword [ebp - 0x3f4]
cmp eax, 0xffffffff
jb 0x404de0
push ebx
push ebx
add esp, 4
and ebx, 0x85f3
add ebx, 0x17275
call 0x404dc8
add byte [eax + 0x3a], cl
dec esp
xor eax, 0x4d3e4d46
add esp, 4
call 0x404dd7
add byte [ebx + 0x3e], al
dec ecx
aaa
cmp al, 0x4d
add esp, 4
pop ebx
jmp 0x40500e
mov dword [ebp - 0xc8c], 7
mov ecx, dword [ebp - 0x504]
mov dword [ebp - 0xac8], ecx
push edx
call 0x404e07
add byte [ecx + eax*2], dh
inc edx
dec eax
push eax
inc ecx
xor al, 0x3f
add esp, 4
jmp 0x404e10
call 0x404e1e
add byte [ebx], bh
dec esi
dec edx
inc esi
inc eax
aaa
dec ebx
cmp al, byte [ebx - 0x157efb3c]
imul ebx, dword [0x8b5a0001], 0xffea2895
dec dword [ecx - 0xa636b]
inc edi
test dword [eax - 0xd], esi
invalid
push eax
jmp 0x405017
and eax, 0x7079
pop eax
push edi
push eax
add esp, 4
jmp 0x405029
pop edi
push edi
and edi, 0xd9ef
and edi, 0x17a1c
pop edi
push ecx
xor ecx, 0x11cb0
pop ecx
mov dword [ebp - 0xac4], 0
push edi
push ebx
add esp, 4
add edi, 0x12f2
or edi, 0x407
and edi, 0xb50d
pop edi
push edi
xor edi, 0x9de8
xor edi, 0xbe5e
add edi, 0xf60d
or edi, 0x9370
pop edi
mov byte [ebp - 0x87c], 0x45
mov byte [ebp - 0x87b], 0x78
mov byte [ebp - 0x87a], 0x69
mov byte [ebp - 0x879], 0x74
mov byte [ebp - 0x878], 0x50
mov byte [ebp - 0x877], 0x72
mov byte [ebp - 0x876], 0x6f
mov byte [ebp - 0x875], 0x63
mov byte [ebp - 0x874], 0x65
mov byte [ebp - 0x873], 0x73
mov byte [ebp - 0x872], 0x73
mov byte [ebp - 0x871], 0
push edx
push ecx
add esp, 4
jmp 0x4050dd
sub edx, 0x5e60
add edx, 0x52ad
add edx, 0x11eb1
pop edx
push eax
push ecx
add esp, 4
sub eax, 0x40fa
xor eax, 0x7b89
pop eax
mov ecx, 0x6b
mov word [ebp - 0x1740], cx
mov edx, 0x65
mov word [ebp - 0x173e], dx
mov eax, 0x72
mov word [ebp - 0x173c], ax
mov ecx, 0x6e
mov word [ebp - 0x173a], cx
mov edx, 0x65
mov word [ebp - 0x1738], dx
mov eax, 0x6c
mov word [ebp - 0x1736], ax
mov ecx, 0x33
mov word [ebp - 0x1734], cx
mov edx, 0x32
mov word [ebp - 0x1732], dx
mov eax, 0x2e
mov word [ebp - 0x1730], ax
mov ecx, 0x64
mov word [ebp - 0x172e], cx
mov edx, 0x6c
mov word [ebp - 0x172c], dx
mov eax, 0x6c
mov word [ebp - 0x172a], ax
xor ecx, ecx
mov word [ebp - 0x1728], cx
push edi
or edi, 0xf0c2
pop edi
push edi
sub edi, 0xae2c
and edi, 0x13863
and edi, 0xba81
jmp 0x4051bb
pop edi
push ebx
push ebx
add esp, 4
jmp 0x4051c6
xor ebx, 0x151b
pop ebx
push ecx
call 0x4051dd
add byte [edx + 0x3b], al
cmp eax, dword [esi + 0x4e]
dec ecx
inc eax
dec esp
add esp, 4
sub ecx, 0x15055
or ecx, 0xbaea
pop ecx
push ebx
push edx
add esp, 4
and ebx, 0x67c
sub ebx, 0xbb4f
pop ebx
mov edx, dword fs:[0x18]
mov dword [ebp - 0x2034], edx
mov eax, dword [ebp - 0x2034]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0x198c], ecx
mov edx, dword [ebp - 0x198c]
mov dword [ebp - 0x15e0], edx
push edx
push eax
add esp, 4
sub edx, 0x3d26
jmp 0x405239
pop edx
push eax
and eax, 0x5f0e
pop eax
push ebx
push edi
add esp, 4
sub ebx, 0x9d1b
pop ebx
push esi
jmp 0x405258
pop esi
cmp dword [ebp - 0x15e0], 0
jne 0x405271
mov dword [ebp - 0x2d4], 0
jmp 0x40552d
mov eax, dword [ebp - 0x15e0]
mov ecx, dword [eax + 0xc]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0xc9c], edx
push ebx
push esi
add esp, 4
and ebx, 0x85aa
add ebx, 0x14f4e
pop ebx
push ecx
call 0x4052a5
add byte [ebp + 0x4f], al
aas
dec eax
cmp edi, dword [esi]
xor edi, dword [edi + eax*2]
add esp, 4
or ecx, 0x8d01
and ecx, 0x185fb
pop ecx
cmp dword [ebp - 0xc9c], 0
jne 0x4052cd
mov dword [ebp - 0x2d4], 0
jmp 0x40552d
mov eax, dword [ebp - 0xc9c]
mov dword [ebp - 0x508], eax
push eax
push ecx
add esp, 4
and eax, 0xd0a9
and eax, 0x13583
pop eax
push esi
push esi
add esp, 4
and esi, 0x151cd
and esi, 0x75a4
pop esi
push edi
add edi, 0x86b0
jmp 0x40530a
pop edi
lea ecx, [ebp - 0x1740]
mov dword [ebp - 0xc98], ecx
mov edx, dword [ebp - 0x508]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0xc94], eax
xor ecx, ecx
mov word [ebp - 0x210], cx
xor edx, edx
mov word [ebp - 0x10c], dx
push edx
xor edx, 0x50ea
and edx, 0x1616e
or edx, 0xab45
pop edx
push eax
push ebx
add esp, 4
jmp 0x405357
xor eax, 0xc105
pop eax
push edi
push esi
add esp, 4
add edi, 0xce69
pop edi
mov eax, dword [ebp - 0xc94]
mov cx, word [eax]
mov word [ebp - 0x1036], cx
mov edx, dword [ebp - 0xc94]
add edx, 2
mov dword [ebp - 0xc94], edx
mov ax, word [ebp - 0x1036]
mov word [ebp - 0x210], ax
mov ecx, dword [ebp - 0xc98]
mov dx, word [ecx]
mov word [ebp - 0x1038], dx
mov eax, dword [ebp - 0xc98]
add eax, 2
mov dword [ebp - 0xc98], eax
mov cx, word [ebp - 0x1038]
mov word [ebp - 0x10c], cx
push eax
or eax, 0xef2b
pop eax
push edi
push esi
add esp, 4
xor edi, 0x9c53
xor edi, 0x1632c
pop edi
push esi
push ebx
add esp, 4
or esi, 0x1846b
pop esi
push ecx
push esi
add esp, 4
sub ecx, 0x377d
pop ecx
movzx edx, word [ebp - 0x10c]
test edx, edx
jne 0x405419
movzx eax, word [ebp - 0x210]
movzx ecx, word [ebp - 0x10c]
sub eax, ecx
mov dword [ebp - 0x15e8], eax
jmp 0x40547c
movzx edx, word [ebp - 0x210]
movzx eax, word [ebp - 0x10c]
cmp edx, eax
je 0x405338
movzx ecx, word [ebp - 0x210]
xor ecx, 0x20
movzx edx, word [ebp - 0x10c]
cmp ecx, edx
je 0x405338
movzx eax, word [ebp - 0x210]
movzx ecx, word [ebp - 0x10c]
cmp eax, ecx
jge 0x405466
mov dword [ebp - 0x15e4], 0xffffffff
jmp 0x405470
mov dword [ebp - 0x15e4], 1
mov edx, dword [ebp - 0x15e4]
mov dword [ebp - 0x15e8], edx
cmp dword [ebp - 0x15e8], 0
jne 0x4054c5
push ecx
xor ecx, 0x35e
xor ecx, 0xd7df
pop ecx
push ebx
push ecx
add esp, 4
xor ebx, 0x92f0
jmp 0x4054a6
sub ebx, 0xb564
pop ebx
push ebx
jmp 0x4054b6
pop ebx
mov eax, dword [ebp - 0x508]
mov dword [ebp - 0x2d4], eax
jmp 0x40552d
push edi
push edx
add esp, 4
add edi, 0x135de
jmp 0x4054d8
jmp 0x4054e1
pop edi
push eax
call 0x4054f3
add byte [eax + edx*2], bh
inc ebx
inc ebp
dec ebx
xor al, 0x3d
inc esp
inc ebp
add esp, 4
pop eax
mov ecx, dword [ebp - 0x508]
mov edx, dword [ecx]
mov dword [ebp - 0x508], edx
mov eax, dword [ebp - 0x508]
cmp eax, dword [ebp - 0xc9c]
je 0x405523
mov ecx, dword [ebp - 0x508]
cmp dword [ecx + 0x30], 0
jne 0x4052d9
mov dword [ebp - 0x2d4], 0
push esi
push ecx
add esp, 4
or esi, 0x15c0a
xor esi, 0xce85
add esi, 0x14e29
xor esi, 0x30d4
pop esi
push edi
sub edi, 0x13985
pop edi
push eax
push ebx
add esp, 4
and eax, 0x14eee
pop eax
cmp dword [ebp - 0x2d4], 0
jne 0x405e78
mov edx, 0x6b
mov word [ebp - 0x17ac], dx
mov eax, 0x65
mov word [ebp - 0x17aa], ax
mov ecx, 0x72
mov word [ebp - 0x17a8], cx
mov edx, 0x6e
mov word [ebp - 0x17a6], dx
mov eax, 0x65
mov word [ebp - 0x17a4], ax
mov ecx, 0x6c
mov word [ebp - 0x17a2], cx
mov edx, 0x33
mov word [ebp - 0x17a0], dx
mov eax, 0x32
mov word [ebp - 0x179e], ax
mov ecx, 0x2e
mov word [ebp - 0x179c], cx
mov edx, 0x64
mov word [ebp - 0x179a], dx
mov eax, 0x6c
mov word [ebp - 0x1798], ax
mov ecx, 0x6c
mov word [ebp - 0x1796], cx
xor edx, edx
mov word [ebp - 0x1794], dx
push edx
push edi
add esp, 4
jmp 0x405612
pop edx
push esi
call 0x405621
add byte [ebp + 0x3f], al
aaa
dec esi
xor eax, dword [ebp + 0x37]
add esp, 4
call 0x405633
add byte [ecx + 0x3c], al
inc edx
dec ebx
cmp al, byte [edx + 0x3d]
inc esp
push eax
add esp, 4
pop esi
mov byte [ebp - 0x898], 0x4c
mov byte [ebp - 0x897], 0x6f
mov byte [ebp - 0x896], 0x61
mov byte [ebp - 0x895], 0x64
mov byte [ebp - 0x894], 0x4c
mov byte [ebp - 0x893], 0x69
mov byte [ebp - 0x892], 0x62
mov byte [ebp - 0x891], 0x72
mov byte [ebp - 0x890], 0x61
mov byte [ebp - 0x88f], 0x72
mov byte [ebp - 0x88e], 0x79
mov byte [ebp - 0x88d], 0x57
mov byte [ebp - 0x88c], 0
mov eax, dword fs:[0x18]
mov dword [ebp - 0x1990], eax
mov ecx, dword [ebp - 0x1990]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x1994], edx
mov eax, dword [ebp - 0x1994]
mov dword [ebp - 0x15ec], eax
push edx
push edx
add esp, 4
add edx, 0x16561
pop edx
push eax
jmp 0x4056cf
sub eax, 0x8608
call 0x4056e1
add byte [0x3d323f3e], dh
aas
add esp, 4
and eax, 0x562
pop eax
cmp dword [ebp - 0x15ec], 0
jne 0x405703
mov dword [ebp - 0x754], 0
jmp 0x4059bf
mov ecx, dword [ebp - 0x15ec]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xca8], eax
push ebx
xor ebx, 0x17820
or ebx, 0x5db9
or ebx, 0x698e
pop ebx
push esi
push eax
add esp, 4
xor esi, 0x46d8
or esi, 0x5d31
xor esi, 0x14ee6
or esi, 0x89a2
pop esi
cmp dword [ebp - 0xca8], 0
jne 0x40575f
mov dword [ebp - 0x754], 0
jmp 0x4059bf
mov ecx, dword [ebp - 0xca8]
mov dword [ebp - 0x50c], ecx
push ecx
push edi
add esp, 4
call 0x40577d
add byte [ecx], bh
xor eax, 0x4f384536
inc esp
add esp, 4
pop ecx
push edi
push ebx
add esp, 4
add edi, 0xf8a3
call 0x405799
add byte [ebx], bh
inc ebp
xor al, 0x3e
cmp dword [esi + esi], esi
add esp, 4
pop edi
lea edx, [ebp - 0x17ac]
mov dword [ebp - 0xca4], edx
mov eax, dword [ebp - 0x50c]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xca0], ecx
xor edx, edx
mov word [ebp - 0x214], dx
xor eax, eax
mov word [ebp - 0x110], ax
push edx
sub edx, 0xbaa6
xor edx, 0x160cf
add edx, 0x17017
pop edx
push ebx
push ebx
add esp, 4
call 0x4057f2
add byte [ebx], dh
dec edx
cmp eax, 0x3a3c3332
inc ebp
cmp byte [ebx - 0x347efb3c], al
adc byte [eax + eax - 0x7274a500], 0x60
invalid
push eax
push edi
add esp, 4
jmp 0x4059ca
pop eax
push edx
xor edx, 0xadbc
xor edx, 0x10d94
or edx, 0xa644
and edx, 0x15dd9
pop edx
push edi
push ecx
add esp, 4
xor edi, 0x2d08
pop edi
cmp dword [ebp - 0x754], 0
jne 0x405a3b
push ebx
xor ebx, 0x13a11
or ebx, 0x152b7
pop ebx
push ebx
push eax
add esp, 4
and ebx, 0xbcc9
add ebx, 0xfdcc
pop ebx
push edi
push ebx
add esp, 4
xor edi, 0x83da
or edi, 0xa448
pop edi
mov dword [ebp - 0x7a0], 0
jmp 0x406562
push edx
push esi
add esp, 4
add edx, 0x149ec
or edx, 0x26bf
add edx, 0xf48f
sub edx, 0x15a08
pop edx
push eax
or eax, 0x15bdc
and eax, 0xf315
xor eax, 0x2529
pop eax
mov eax, dword [ebp - 0x754]
mov ecx, dword [eax + 0x18]
mov dword [ebp - 0x320], ecx
mov dword [ebp - 0x764], 0
mov edx, dword [ebp - 0x320]
mov dword [ebp - 0x15f8], edx
cmp dword [ebp - 0x15f8], 0
jne 0x405aac
mov eax, dword [ebp - 0x764]
mov dword [ebp - 0x3f8], eax
jmp 0x405d9d
mov ecx, dword [ebp - 0x15f8]
mov edx, dword [ebp - 0x320]
add edx, dword [ecx + 0x3c]
mov dword [ebp - 0x15fc], edx
jne 0x405ad4
mov eax, dword [ebp - 0x764]
mov dword [ebp - 0x3f8], eax
jmp 0x405d9d
mov ecx, 8
imul edx, ecx, 0
mov eax, dword [ebp - 0x15fc]
mov ecx, dword [eax + edx + 0x78]
mov dword [ebp - 0x1600], ecx
cmp dword [ebp - 0x1600], 0
jne 0x405b06
mov edx, dword [ebp - 0x764]
mov dword [ebp - 0x3f8], edx
jmp 0x405d9d
mov eax, dword [ebp - 0x320]
add eax, dword [ebp - 0x1600]
mov dword [ebp - 0x758], eax
jne 0x405b2b
mov ecx, dword [ebp - 0x764]
mov dword [ebp - 0x3f8], ecx
jmp 0x405d9d
mov edx, dword [ebp - 0x758]
mov eax, dword [ebp - 0x320]
add eax, dword [edx + 0x20]
mov dword [ebp - 0x1998], eax
mov ecx, dword [ebp - 0x758]
mov edx, dword [ebp - 0x320]
add edx, dword [ecx + 0x24]
mov dword [ebp - 0x199c], edx
mov eax, dword [ebp - 0x758]
mov ecx, dword [ebp - 0x320]
add ecx, dword [eax + 0x1c]
mov dword [ebp - 0x19a0], ecx
mov dword [ebp - 0x75c], 0
jmp 0x405b85
mov edx, dword [ebp - 0x75c]
add edx, 1
mov dword [ebp - 0x75c], edx
mov eax, dword [ebp - 0x758]
mov ecx, dword [ebp - 0x75c]
cmp ecx, dword [eax + 0x18]
jae 0x405d91
mov edx, dword [ebp - 0x75c]
mov eax, dword [ebp - 0x1998]
mov ecx, dword [ebp - 0x320]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x760], ecx
mov edx, dword [ebp - 0x75c]
mov eax, dword [ebp - 0x199c]
movzx ecx, word [eax + edx*2]
mov edx, dword [ebp - 0x19a0]
mov eax, dword [ebp - 0x320]
add eax, dword [edx + ecx*4]
mov dword [ebp - 0x19a4], eax
mov dword [ebp - 0x194], 0
jmp 0x405bf5
mov ecx, dword [ebp - 0x194]
add ecx, 1
mov dword [ebp - 0x194], ecx
mov edx, dword [ebp - 0x760]
add edx, dword [ebp - 0x194]
movsx eax, byte [edx]
test eax, eax
je 0x405ca7
mov ecx, dword [ebp - 0x194]
movsx edx, byte [ebp + ecx - 0x898]
test edx, edx
je 0x405ca7
push edi
call 0x405c33
add byte [ecx + 0x4a], cl
cmp byte [edi], dh
xor cl, byte [ecx + 0x39]
xor al, 0x32
cmp eax, dword [ebx - 0x307efb3c]
salc
or byte [ecx], al
add byte [edi + 0x50], bl
push esi
add esp, 4
and eax, 0x3998
jmp 0x405c4d
or eax, 0x11ef
pop eax
mov eax, dword [ebp - 0x760]
add eax, dword [ebp - 0x194]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x194]
movsx eax, byte [ebp + edx - 0x898]
cmp ecx, eax
je 0x405c99
mov ecx, dword [ebp - 0x760]
add ecx, dword [ebp - 0x194]
movsx edx, byte [ecx]
xor edx, 0x20
mov eax, dword [ebp - 0x194]
movsx ecx, byte [ebp + eax - 0x898]
cmp edx, ecx
jne 0x405ca0
jmp 0x405be6
jmp 0x405ca7
push ecx
push edx
add esp, 4
and ecx, 0x1458c
xor ecx, 0x11b6a
sub ecx, 0x1248d
pop ecx
push ebx
jmp 0x405cc9
call 0x405cd5
add byte [esi + 0x44], al
inc edx
inc edi
dec esi
dec eax
add esp, 4
pop ebx
mov edx, dword [ebp - 0x760]
add edx, dword [ebp - 0x194]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x194]
movsx edx, byte [ebp + ecx - 0x898]
cmp eax, edx
jne 0x405d06
mov dword [ebp - 0xcac], 0
jmp 0x405d75
push esi
sub esi, 0x5802
and esi, 0xfe2e
jmp 0x405d19
sub esi, 0x7067
pop esi
push ebx
push ecx
add esp, 4
jmp 0x405d2b
xor ebx, 0x169ba
or ebx, 0x6e30
pop ebx
mov eax, dword [ebp - 0x760]
add eax, dword [ebp - 0x194]
movsx ecx, byte [eax]
or ecx, 0x20
mov edx, dword [ebp - 0x194]
movsx eax, byte [ebp + edx - 0x898]
or eax, 0x20
cmp ecx, eax
jge 0x405d6b
mov dword [ebp - 0xcac], 0xffffffff
jmp 0x405d75
mov dword [ebp - 0xcac], 1
cmp dword [ebp - 0xcac], 0
jne 0x405d8c
mov ecx, dword [ebp - 0x19a4]
mov dword [ebp - 0x3f8], ecx
jmp 0x405d9d
jmp 0x405b76
mov edx, dword [ebp - 0x764]
mov dword [ebp - 0x3f8], edx
cmp dword [ebp - 0x3f8], 0
je 0x405e78
push esi
jmp 0x405db3
call 0x405dc3
add byte [eax + 0x38], dl
cmp byte [esi + esi], dh
cmp byte [edi + eax*2 + 0x3f], cl
xor al, 0x83
les eax, [ecx + eax*4]
div byte [edx]
add dword cs:[eax], eax
call 0x405dd8
add byte [ebx + 0x34], cl
xor dh, byte [ebx + esi]
dec edx
add esp, 4
pop esi
mov eax, dword [ebp - 0x3f8]
mov dword [ebp - 0x19a8], eax
push ebx
jmp 0x405df2
jmp 0x405df8
or ebx, 0x13ded
or ebx, 0x1133f
pop ebx
push ecx
sub ecx, 0x157f9
or ecx, 0xac62
pop ecx
push edi
jmp 0x405e19
pop edi
mov ecx, dword [ebp - 0x19a8]
mov dword [ebp - 0x19ac], ecx
lea edx, [ebp - 0x1740]
push edx
call dword [ebp - 0x19ac]
test eax, eax
jne 0x405e78
push ebx
push ecx
add esp, 4
xor ebx, 0x181ec
pop ebx
push esi
call 0x405e54
add byte [edi], bh
inc eax
cmp al, 0x48
inc edi
inc edi
inc esi
xor al, byte [ebx + 0x45]
add esp, 4
add esi, 0x162cf
pop esi
push esi
push esi
add esp, 4
jmp 0x405e68
pop esi
mov dword [ebp - 0x7a0], 0
jmp 0x406562
push edx
jmp 0x405e7f
add edx, 0xa830
call 0x405e94
add byte [ebp + 0x50], cl
xor al, 0x47
inc eax
xor eax, 0x83374540
les eax, [ecx + eax*4]
ret 0x10de
push eax
jmp 0x406569
xor eax, 0x914c
xor eax, 0xef51
pop eax
push ecx
push edi
add esp, 4
add ecx, 0x13ff2
pop ecx
push esi
push ecx
add esp, 4
add esi, 0xe008
and esi, 0x12b97
pop esi
mov ecx, dword [ebp - 0x3e4]
add ecx, 0xe
mov dword [ebp - 0x1a10], ecx
push edx
push eax
add esp, 4
and edx, 0xb069
or edx, 0x14c05
pop edx
push edx
xor edx, 0xff5
xor edx, 0x463a
or edx, 0x13547
pop edx
push edi
push eax
add esp, 4
and edi, 0x7cc1
pop edi
cmp dword [ebp - 0x3e4], 0
je 0x4065e7
cmp dword [ebp - 0xac4], 0
jne 0x40662d
push edx
sub edx, 0x8d
and edx, 0x116d
pop edx
push edi
push eax
add esp, 4
call 0x406609
add byte [0x443a4346], bh
cmp dh, byte [esi]
cmp eax, dword [ebp - 0x7d]
les eax, [ecx + eax*4]
iretd
mov dword [ebp - 0x20dc], 0xa
push ebx
push eax
add esp, 4
add ebx, 0xa3db
or ebx, 0xf359
add ebx, 0xc14c
pop ebx
push edi
push edi
add esp, 4
and edi, 0x3f13
jmp 0x406663
jmp 0x406668
pop edi
mov eax, dword [ebp - 0x3e4]
mov cl, byte [eax + 0xa]
mov byte [ebp - 0x3ed], cl
mov edx, dword [ebp - 0xac4]
sub edx, dword [ebp - 0x3e4]
mov dword [ebp - 0x169c], edx
mov dword [ebp - 0xcec], 0
push edx
add edx, 0x1fa
pop edx
push esi
xor esi, 0xa464
pop esi
push edx
jmp 0x4066ad
call 0x4066bc
add byte [eax + 0x43], cl
inc esp
inc ecx
inc edx
xor ecx, dword [eax + 0x4f]
inc ebp
add esp, 4
add edx, 0x1007f
pop edx
mov byte [ebp - 0x9d8], 0x56
mov byte [ebp - 0x9d7], 0x69
mov byte [ebp - 0x9d6], 0x72
mov byte [ebp - 0x9d5], 0x74
mov byte [ebp - 0x9d4], 0x75
mov byte [ebp - 0x9d3], 0x61
mov byte [ebp - 0x9d2], 0x6c
mov byte [ebp - 0x9d1], 0x50
mov byte [ebp - 0x9d0], 0x72
mov byte [ebp - 0x9cf], 0x6f
mov byte [ebp - 0x9ce], 0x74
mov byte [ebp - 0x9cd], 0x65
mov byte [ebp - 0x9cc], 0x63
mov byte [ebp - 0x9cb], 0x74
mov byte [ebp - 0x9ca], 0
push ecx
or ecx, 0x11037
or ecx, 0xc0ca
pop ecx
push edx
push eax
add esp, 4
call 0x406751
add byte [eax + 0x37], dl
inc esp
cmp eax, 0x373f454f
dec edi
add esp, 4
or edx, 0x1592d
add edx, 0x10491
pop edx
mov eax, dword fs:[0x18]
mov dword [ebp - 0x19c8], eax
mov ecx, dword [ebp - 0x19c8]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x19cc], edx
mov eax, dword [ebp - 0x19cc]
mov dword [ebp - 0x161c], eax
push ecx
sub ecx, 0xf5d7
or ecx, 0x81b6
pop ecx
push edi
push ebx
add esp, 4
jmp 0x4067a4
jmp 0x4067ad
and edi, 0x5325
sub edi, 0x13096
pop edi
cmp dword [ebp - 0x161c], 0
jne 0x4067d2
mov dword [ebp - 0x2f4], 0
jmp 0x406a79
mov ecx, dword [ebp - 0x161c]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xcc8], eax
push ecx
or ecx, 0x7f00
call 0x4067fa
add byte [edi], dh
cmp eax, 0x4d3f4a39
inc ecx
inc ebx
dec ebx
add esp, 4
pop ecx
push ebx
call 0x40680c
add byte [edx + 0x4e], al
xor edi, dword [ebx + ecx*2]
inc ebx
inc eax
add esp, 4
add ebx, 0x85a8
pop ebx
cmp dword [ebp - 0xcc8], 0
jne 0x40682e
mov dword [ebp - 0x2f4], 0
jmp 0x406a79
mov ecx, dword [ebp - 0xcc8]
mov dword [ebp - 0x518], ecx
push ecx
xor ecx, 0xdf6d
xor ecx, 0x152e7
pop ecx
push eax
or eax, 0xa137
jmp 0x406857
xor eax, 0x6b84
xor eax, 0x3a1c
pop eax
push edx
xor edx, 0x176c
pop edx
lea edx, [ebp - 0x1740]
mov dword [ebp - 0xcc4], edx
mov eax, dword [ebp - 0x518]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xcc0], ecx
xor edx, edx
mov word [ebp - 0x21c], dx
xor eax, eax
mov word [ebp - 0x38], ax
push eax
jmp 0x40689d
or eax, 0x139f1
xor eax, 0x10fef
pop eax
push edi
push ecx
add esp, 4
xor edi, 0x125b6
add edi, 0x2d79
sub edi, 0x13744
or edi, 0xb2e8
pop edi
mov ecx, dword [ebp - 0xcc0]
mov dx, word [ecx]
mov word [ebp - 0x1042], dx
mov eax, dword [ebp - 0xcc0]
add eax, 2
mov dword [ebp - 0xcc0], eax
mov cx, word [ebp - 0x1042]
mov word [ebp - 0x21c], cx
mov edx, dword [ebp - 0xcc4]
mov ax, word [edx]
mov word [ebp - 0x1044], ax
mov ecx, dword [ebp - 0xcc4]
add ecx, 2
mov dword [ebp - 0xcc4], ecx
mov dx, word [ebp - 0x1044]
mov word [ebp - 0x38], dx
push edx
call 0x40692f
add byte [esi + 0x38], cl
aaa
dec ecx
inc ebx
inc edx
cmp eax, 0xc483383c
add al, 0xeb
add al, 0x42
dec ebx
dec ecx
xor al, 0x81
retf 0xcc76
push eax
push ebx
add esp, 4
and eax, 0x4ce6
sub eax, 0x17678
xor eax, 0x2a50
and eax, 0x180f6
pop eax
push esi
xor esi, 0x13d28
pop esi
push edi
push esi
add esp, 4
xor edi, 0x17d37
pop edi
cmp dword [ebp - 0x2f4], 0
jne 0x4073b0
mov eax, 0x6b
mov word [ebp - 0x17c8], ax
mov ecx, 0x65
mov word [ebp - 0x17c6], cx
mov edx, 0x72
mov word [ebp - 0x17c4], dx
mov eax, 0x6e
mov word [ebp - 0x17c2], ax
mov ecx, 0x65
mov word [ebp - 0x17c0], cx
mov edx, 0x6c
mov word [ebp - 0x17be], dx
mov eax, 0x33
mov word [ebp - 0x17bc], ax
mov ecx, 0x32
mov word [ebp - 0x17ba], cx
mov edx, 0x2e
mov word [ebp - 0x17b8], dx
mov eax, 0x64
mov word [ebp - 0x17b6], ax
mov ecx, 0x6c
mov word [ebp - 0x17b4], cx
mov edx, 0x6c
mov word [ebp - 0x17b2], dx
xor eax, eax
mov word [ebp - 0x17b0], ax
push ebx
push eax
add esp, 4
call 0x406b62
add byte [ebx + 0x32], al
inc ebx
inc eax
inc eax
add esp, 4
call 0x406b71
add byte [ebx], bh
inc edx
dec esi
inc eax
cmp eax, 0x4c48340
pop ebx
push eax
xor eax, 0xe84a
or eax, 0x265b
pop eax
mov byte [ebp - 0x8a8], 0x4c
mov byte [ebp - 0x8a7], 0x6f
mov byte [ebp - 0x8a6], 0x61
mov byte [ebp - 0x8a5], 0x64
mov byte [ebp - 0x8a4], 0x4c
mov byte [ebp - 0x8a3], 0x69
mov byte [ebp - 0x8a2], 0x62
mov byte [ebp - 0x8a1], 0x72
mov byte [ebp - 0x8a0], 0x61
mov byte [ebp - 0x89f], 0x72
mov byte [ebp - 0x89e], 0x79
mov byte [ebp - 0x89d], 0x57
mov byte [ebp - 0x89c], 0
mov ecx, dword fs:[0x18]
mov dword [ebp - 0x19d0], ecx
mov edx, dword [ebp - 0x19d0]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x19d4], eax
mov ecx, dword [ebp - 0x19d4]
mov dword [ebp - 0x1628], ecx
push ecx
xor ecx, 0x17e38
and ecx, 0x10333
pop ecx
push ebx
push esi
add esp, 4
add ebx, 0x9134
add ebx, 0x53dd
pop ebx
push edi
push eax
add esp, 4
sub edi, 0x1752b
sub edi, 0xc2a0
pop edi
cmp dword [ebp - 0x1628], 0
jne 0x406c50
mov dword [ebp - 0x778], 0
jmp 0x406ef7
mov edx, dword [ebp - 0x1628]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0xcd4], ecx
push esi
and esi, 0xac1
or esi, 0x19dd
and esi, 0x5fcd
or esi, 0x119e1
pop esi
push ecx
push edi
add esp, 4
and ecx, 0x2c77
xor ecx, 0x18b2
jmp 0x406c93
pop ecx
cmp dword [ebp - 0xcd4], 0
jne 0x406cac
mov dword [ebp - 0x778], 0
jmp 0x406ef7
mov edx, dword [ebp - 0xcd4]
mov dword [ebp - 0x51c], edx
push edx
push esi
add esp, 4
or edx, 0xa4c2
add edx, 0x82ab
add edx, 0xff7c
xor edx, 0x6e90
pop edx
push esi
push ebx
add esp, 4
xor esi, 0x52c7
pop esi
push ebx
add ebx, 0xa94c
pop ebx
lea eax, [ebp - 0x17c8]
mov dword [ebp - 0xcd0], eax
mov ecx, dword [ebp - 0x51c]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0xccc], edx
xor eax, eax
mov word [ebp - 0x220], ax
xor ecx, ecx
mov word [ebp - 0x3c], cx
push esi
push edx
add esp, 4
xor esi, 0x20cb
pop esi
push edi
call 0x406d30
add byte [ebp + 0x33], al
inc edx
dec esp
xor al, 0x48
inc ecx
xor eax, 0x4c4833c
xor edi, 0x6278
xor edi, 0x9eb8
add edi, 0x133b5
pop edi
mov edx, dword [ebp - 0xccc]
mov ax, word [edx]
mov word [ebp - 0x1046], ax
mov ecx, dword [ebp - 0xccc]
add ecx, 2
mov dword [ebp - 0xccc], ecx
mov dx, word [ebp - 0x1046]
mov word [ebp - 0x220], dx
mov eax, dword [ebp - 0xcd0]
mov cx, word [eax]
mov word [ebp - 0x1048], cx
mov edx, dword [ebp - 0xcd0]
add edx, 2
mov dword [ebp - 0xcd0], edx
mov ax, word [ebp - 0x1048]
mov word [ebp - 0x3c], ax
push eax
push eax
add esp, 4
sub eax, 0x5177
add eax, 0x15a2b
add eax, 0x9bdc
pop eax
push edx
add edx, 0x114cc
and edx, 0x14387
xor edx, 0x13264
xor edx, 0x12f1f
pop edx
movzx ecx, word [ebp - 0x3c]
test ecx, ecx
jne 0x406dec
movzx edx, word [ebp - 0x220]
movzx eax, word [ebp - 0x3c]
sub edx, eax
mov dword [ebp - 0x1670], edx
jmp 0x406e46
movzx ecx, word [ebp - 0x220]
movzx edx, word [ebp - 0x3c]
cmp ecx, edx
je 0x406d14
movzx eax, word [ebp - 0x220]
xor eax, 0x20
movzx ecx, word [ebp - 0x3c]
cmp eax, ecx
je 0x406d14
movzx edx, word [ebp - 0x220]
movzx eax, word [ebp - 0x3c]
cmp edx, eax
jge 0x406e30
mov dword [ebp - 0x162c], 0xffffffff
jmp 0x406e3a
mov dword [ebp - 0x162c], 1
mov ecx, dword [ebp - 0x162c]
mov dword [ebp - 0x1670], ecx
cmp dword [ebp - 0x1670], 0
jne 0x406e8f
push esi
or esi, 0x14989
call 0x406e63
add byte [0x38433f39], dh
inc esi
add esp, 4
xor esi, 0xe2f
and esi, 0x1394d
pop esi
push edi
add edi, 0x177b2
or edi, 0x6b6f
pop edi
mov edx, dword [ebp - 0x51c]
mov dword [ebp - 0x778], edx
jmp 0x406ef7
push ebx
sub ebx, 0xa54c
and ebx, 0xca5c
xor ebx, 0xe591
xor ebx, 0xf307
pop ebx
push edi
push eax
add esp, 4
or edi, 0xa58a
and edi, 0x5ca0
sub edi, 0x674f
pop edi
mov eax, dword [ebp - 0x51c]
mov ecx, dword [eax]
mov dword [ebp - 0x51c], ecx
mov edx, dword [ebp - 0x51c]
cmp edx, dword [ebp - 0xcd4]
je 0x406eed
mov eax, dword [ebp - 0x51c]
cmp dword [eax + 0x30], 0
jne 0x406cb8
mov dword [ebp - 0x778], 0
push ecx
push edx
add esp, 4
and ecx, 0x16554
jmp 0x406f09
add ecx, 0xfef1
pop ecx
push esi
push edx
add esp, 4
call 0x406f25
add byte [esi], dh
aaa
inc ebp
inc ebx
inc edx
dec ebp
cmp eax, 0x4c4834b
pop esi
cmp dword [ebp - 0x778], 0
jne 0x406f73
push ecx
push ecx
add esp, 4
sub ecx, 0xbce3
pop ecx
push ebx
push ecx
add esp, 4
sub ebx, 0x88b5
pop ebx
push ecx
push ebx
add esp, 4
xor ecx, 0x699a
pop ecx
push eax
and eax, 0xac1c
sub eax, 0x146ea
pop eax
mov dword [ebp - 0xac0], 0
jmp 0x407a9b
push ebx
push ecx
add esp, 4
or ebx, 0x15950
add ebx, 0x13ee
add ebx, 0x13101
pop ebx
push edx
push esi
add esp, 4
and edx, 0x5d83
jmp 0x406f9e
add edx, 0x2aec
pop edx
mov ecx, dword [ebp - 0x778]
mov edx, dword [ecx + 0x18]
mov dword [ebp - 0x3a4], edx
mov dword [ebp - 0x788], 0
mov eax, dword [ebp - 0x3a4]
mov dword [ebp - 0x1674], eax
cmp dword [ebp - 0x1674], 0
jne 0x406fe4
mov ecx, dword [ebp - 0x788]
mov dword [ebp - 0x3fc], ecx
jmp 0x4072d5
mov edx, dword [ebp - 0x1674]
mov eax, dword [ebp - 0x3a4]
add eax, dword [edx + 0x3c]
mov dword [ebp - 0x1678], eax
jne 0x40700c
mov ecx, dword [ebp - 0x788]
mov dword [ebp - 0x3fc], ecx
jmp 0x4072d5
mov edx, 8
imul eax, edx, 0
mov ecx, dword [ebp - 0x1678]
mov edx, dword [ecx + eax + 0x78]
mov dword [ebp - 0x1680], edx
cmp dword [ebp - 0x1680], 0
jne 0x40703e
mov eax, dword [ebp - 0x788]
mov dword [ebp - 0x3fc], eax
jmp 0x4072d5
mov ecx, dword [ebp - 0x3a4]
add ecx, dword [ebp - 0x1680]
mov dword [ebp - 0x77c], ecx
jne 0x407063
mov edx, dword [ebp - 0x788]
mov dword [ebp - 0x3fc], edx
jmp 0x4072d5
mov eax, dword [ebp - 0x77c]
mov ecx, dword [ebp - 0x3a4]
add ecx, dword [eax + 0x20]
mov dword [ebp - 0x19d8], ecx
mov edx, dword [ebp - 0x77c]
mov eax, dword [ebp - 0x3a4]
add eax, dword [edx + 0x24]
mov dword [ebp - 0x19dc], eax
mov ecx, dword [ebp - 0x77c]
mov edx, dword [ebp - 0x3a4]
add edx, dword [ecx + 0x1c]
mov dword [ebp - 0x19e0], edx
mov dword [ebp - 0x780], 0
jmp 0x4070bd
mov eax, dword [ebp - 0x780]
add eax, 1
mov dword [ebp - 0x780], eax
mov ecx, dword [ebp - 0x77c]
mov edx, dword [ebp - 0x780]
cmp edx, dword [ecx + 0x18]
jae 0x4072c9
mov eax, dword [ebp - 0x780]
mov ecx, dword [ebp - 0x19d8]
mov edx, dword [ebp - 0x3a4]
add edx, dword [ecx + eax*4]
mov dword [ebp - 0x784], edx
mov eax, dword [ebp - 0x780]
mov ecx, dword [ebp - 0x19dc]
movzx edx, word [ecx + eax*2]
mov eax, dword [ebp - 0x19e0]
mov ecx, dword [ebp - 0x3a4]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x19e4], ecx
mov dword [ebp - 0x19c], 0
jmp 0x40712d
mov edx, dword [ebp - 0x19c]
add edx, 1
mov dword [ebp - 0x19c], edx
mov eax, dword [ebp - 0x784]
add eax, dword [ebp - 0x19c]
movsx ecx, byte [eax]
test ecx, ecx
je 0x4071df
mov edx, dword [ebp - 0x19c]
movsx eax, byte [ebp + edx - 0x8a8]
test eax, eax
je 0x4071df
push edx
push edx
add esp, 4
add edx, 0x84c
or edx, 0x7548
pop edx
push edi
push edx
add esp, 4
or edi, 0x12ba0
or edi, 0x2dca
jmp 0x407182
jmp 0x40718b
pop edi
mov ecx, dword [ebp - 0x784]
add ecx, dword [ebp - 0x19c]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x19c]
movsx ecx, byte [ebp + eax - 0x8a8]
cmp edx, ecx
je 0x4071d1
mov edx, dword [ebp - 0x784]
add edx, dword [ebp - 0x19c]
movsx eax, byte [edx]
xor eax, 0x20
mov ecx, dword [ebp - 0x19c]
movsx edx, byte [ebp + ecx - 0x8a8]
cmp eax, edx
jne 0x4071d8
jmp 0x40711e
jmp 0x4071df
push esi
or esi, 0x1d22
pop esi
push edi
call 0x4071f6
add byte [esi + 0x4c], cl
inc ebx
inc eax
cmp eax, 0x83404637
les eax, [edi + ebx*2]
push edi
add edi, 0xcef2
jmp 0x407208
pop edi
push edx
or edx, 0xe927
pop edx
mov eax, dword [ebp - 0x784]
add eax, dword [ebp - 0x19c]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x19c]
movsx eax, byte [ebp + edx - 0x8a8]
cmp ecx, eax
jne 0x40723e
mov dword [ebp - 0xcd8], 0
jmp 0x4072ad
push ecx
push edi
add esp, 4
sub ecx, 0x350
add ecx, 0x15403
sub ecx, 0x30f7
pop ecx
push eax
sub eax, 0x6635
or eax, 0x16377
pop eax
push ebx
push ecx
add esp, 4
add ebx, 0xe9fa
pop ebx
mov ecx, dword [ebp - 0x784]
add ecx, dword [ebp - 0x19c]
movsx edx, byte [ecx]
or edx, 0x20
mov eax, dword [ebp - 0x19c]
movsx ecx, byte [ebp + eax - 0x8a8]
or ecx, 0x20
cmp edx, ecx
jge 0x4072a3
mov dword [ebp - 0xcd8], 0xffffffff
jmp 0x4072ad
mov dword [ebp - 0xcd8], 1
cmp dword [ebp - 0xcd8], 0
jne 0x4072c4
mov edx, dword [ebp - 0x19e4]
mov dword [ebp - 0x3fc], edx
jmp 0x4072d5
jmp 0x4070ae
mov eax, dword [ebp - 0x788]
mov dword [ebp - 0x3fc], eax
cmp dword [ebp - 0x3fc], 0
je 0x4073b0
push esi
push eax
add esp, 4
and esi, 0x12d89
pop esi
push ebx
push ebx
add esp, 4
and ebx, 0x13844
add ebx, 0x12e37
add ebx, 0xc27f
pop ebx
push edx
add edx, 0xe40e
or edx, 0x721a
pop edx
mov ecx, dword [ebp - 0x3fc]
mov dword [ebp - 0x19e8], ecx
push ecx
xor ecx, 0xfd51
add ecx, 0xfd03
xor ecx, 0x11ebd
and ecx, 0x88bd
pop ecx
push esi
push edx
add esp, 4
and esi, 0x13c72
jmp 0x40734b
add esi, 0x11e83
pop esi
mov edx, dword [ebp - 0x19e8]
mov dword [ebp - 0x19ec], edx
lea eax, [ebp - 0x1740]
push eax
call dword [ebp - 0x19ec]
test eax, eax
jne 0x4073b0
push edi
push edx
add esp, 4
sub edi, 0x6d6
sub edi, 0x1302d
and edi, 0x2c23
jmp 0x40738e
pop edi
push ecx
push ebx
add esp, 4
add ecx, 0x2841
and ecx, 0x1645f
pop ecx
mov dword [ebp - 0xac0], 0
jmp 0x407a9b
push edx
or edx, 0xd720
and edx, 0x722
and edx, 0xc9c7
and edx, 0x135c8
pop edx
push edx
and edx, 0x12123
pop edx
push ebx
or ebx, 0x4e51
jmp 0x4073e1
pop ebx
mov ecx, dword fs:[0x18]
mov dword [ebp - 0x19f0], ecx
mov edx, dword [ebp - 0x19f0]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x19f4], eax
mov ecx, dword [ebp - 0x19f4]
mov dword [ebp - 0x1684], ecx
push edi
push ecx
add esp, 4
or edi, 0xcc4e
add edi, 0xcec9
sub edi, 0x1531e
pop edi
push edi
and edi, 0x15d2d
xor edi, 0x867a
xor edi, 0x5541
sub edi, 0x109be
pop edi
cmp dword [ebp - 0x1684], 0
jne 0x407454
mov dword [ebp - 0x2f4], 0
jmp 0x4076fb
mov edx, dword [ebp - 0x1684]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0xce4], ecx
push esi
add esi, 0x17737
pop esi
push ebx
push esi
add esp, 4
sub ebx, 0x1368f
xor ebx, 0x17032
sub ebx, 0xc2b1
and ebx, 0x12708
pop ebx
push edx
push edi
add esp, 4
xor edx, 0x1f61
pop edx
cmp dword [ebp - 0xce4], 0
jne 0x4074b0
mov dword [ebp - 0x2f4], 0
jmp 0x4076fb
mov edx, dword [ebp - 0xce4]
mov dword [ebp - 0x520], edx
push edi
call 0x4074cb
add byte [edi + 0x42], al
dec ecx
cmp al, 0x3a
cmp eax, 0xc4834f42
add al, 0x5f
push ecx
add ecx, 0xf593
sub ecx, 0xc44a
call 0x4074ea
add byte [ebx + 0x4d], al
xor cl, byte [edx + esi + 0x4a]
dec edi
inc ebp
add esp, 4
pop ecx
lea eax, [ebp - 0x1740]
mov dword [ebp - 0xce0], eax
mov ecx, dword [ebp - 0x520]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0xcdc], edx
xor eax, eax
mov word [ebp - 0x224], ax
xor ecx, ecx
mov word [ebp - 0x40], cx
push ecx
add ecx, 0x69df
and ecx, 0x11ca2
or ecx, 0x9be9
pop ecx
push esi
push ecx
add esp, 4
jmp 0x407537
sub esi, 0x17fae
pop esi
push eax
push ecx
add esp, 4
add eax, 0xc875
pop eax
mov edx, dword [ebp - 0xcdc]
mov ax, word [edx]
mov word [ebp - 0x104a], ax
mov ecx, dword [ebp - 0xcdc]
add ecx, 2
mov dword [ebp - 0xcdc], ecx
mov dx, word [ebp - 0x104a]
mov word [ebp - 0x224], dx
mov eax, dword [ebp - 0xce0]
mov cx, word [eax]
mov word [ebp - 0x104c], cx
mov edx, dword [ebp - 0xce0]
add edx, 2
mov dword [ebp - 0xce0], edx
mov ax, word [ebp - 0x104c]
mov word [ebp - 0x40], ax
push ecx
xor ecx, 0x1727d
pop ecx
push ebx
push ebx
add esp, 4
or ebx, 0x17228
call 0x4075c0
add byte [edi + 0x46], cl
xor ecx, dword [esi + 0x4e]
cmp al, 0x83
les eax, [ebx + ebp*8]
pop es
inc esp
dec ebp
inc esp
inc esp
dec eax
xor eax, 0xb9e38150
outsd dx, dword [esi]
add byte [eax], al
pop ebx
movzx ecx, word [ebp - 0x40]
test ecx, ecx
jne 0x4075f0
movzx edx, word [ebp - 0x224]
movzx eax, word [ebp - 0x40]
sub edx, eax
mov dword [ebp - 0x168c], edx
jmp 0x40764a
movzx ecx, word [ebp - 0x224]
movzx edx, word [ebp - 0x40]
cmp ecx, edx
je 0x407518
movzx eax, word [ebp - 0x224]
xor eax, 0x20
movzx ecx, word [ebp - 0x40]
cmp eax, ecx
je 0x407518
movzx edx, word [ebp - 0x224]
movzx eax, word [ebp - 0x40]
cmp edx, eax
jge 0x407634
mov dword [ebp - 0x1688], 0xffffffff
jmp 0x40763e
mov dword [ebp - 0x1688], 1
mov ecx, dword [ebp - 0x1688]
mov dword [ebp - 0x168c], ecx
cmp dword [ebp - 0x168c], 0
jne 0x407693
push edi
xor edi, 0x15384
pop edi
push esi
sub esi, 0x1061a
jmp 0x40766b
call 0x40767b
add byte [eax + 0x3a], cl
cmp cl, byte [eax + 0x3c]
cmp al, 0x4d
xor al, 0x45
xor al, byte [ebx - 0x397efb3c]
mov dl, 0xb9
add byte [eax], al
pop esi
mov edx, dword [ebp - 0x520]
mov dword [ebp - 0x2f4], edx
jmp 0x4076fb
push esi
and esi, 0xecff
xor esi, 0x1a04
pop esi
push eax
push esi
add esp, 4
call 0x4076b4
add byte [esi], bh
dec esp
xor edi, dword ss:[esi]
inc ecx
dec edi
add esp, 4
jmp 0x4076be
sub eax, 0x171b7
pop eax
mov eax, dword [ebp - 0x520]
mov ecx, dword [eax]
mov dword [ebp - 0x520], ecx
mov edx, dword [ebp - 0x520]
cmp edx, dword [ebp - 0xce4]
je 0x4076f1
mov eax, dword [ebp - 0x520]
cmp dword [eax + 0x30], 0
jne 0x4074bc
mov dword [ebp - 0x2f4], 0
push ecx
push esi
add esp, 4
jmp 0x407709
and ecx, 0xc5ed
and ecx, 0x1796c
pop ecx
push eax
push eax
add esp, 4
and eax, 0x10054
sub eax, 0xb0bf
jmp 0x40772c
pop eax
mov ecx, dword [ebp - 0x2f4]
mov edx, dword [ecx + 0x18]
mov dword [ebp - 0x36c], edx
push edi
push eax
add esp, 4
and edi, 0x9b92
sub edi, 0x74c3
call 0x40775b
add byte [edx + 0x41], cl
inc edx
push eax
xor eax, 0xc483403f
add al, 0x5f
push esi
push eax
add esp, 4
jmp 0x40776d
pop esi
mov dword [ebp - 0x798], 0
mov eax, dword [ebp - 0x36c]
mov dword [ebp - 0x1690], eax
cmp dword [ebp - 0x1690], 0
jne 0x40779e
mov ecx, dword [ebp - 0x798]
mov dword [ebp - 0x524], ecx
jmp 0x407a8f
mov edx, dword [ebp - 0x1690]
mov eax, dword [ebp - 0x36c]
add eax, dword [edx + 0x3c]
mov dword [ebp - 0x1694], eax
jne 0x4077c6
mov ecx, dword [ebp - 0x798]
mov dword [ebp - 0x524], ecx
jmp 0x407a8f
mov edx, 8
imul eax, edx, 0
mov ecx, dword [ebp - 0x1694]
mov edx, dword [ecx + eax + 0x78]
mov dword [ebp - 0x1698], edx
cmp dword [ebp - 0x1698], 0
jne 0x4077f8
mov eax, dword [ebp - 0x798]
mov dword [ebp - 0x524], eax
jmp 0x407a8f
mov ecx, dword [ebp - 0x36c]
add ecx, dword [ebp - 0x1698]
mov dword [ebp - 0x78c], ecx
jne 0x40781d
mov edx, dword [ebp - 0x798]
mov dword [ebp - 0x524], edx
jmp 0x407a8f
mov eax, dword [ebp - 0x78c]
mov ecx, dword [ebp - 0x36c]
add ecx, dword [eax + 0x20]
mov dword [ebp - 0x19f8], ecx
mov edx, dword [ebp - 0x78c]
mov eax, dword [ebp - 0x36c]
add eax, dword [edx + 0x24]
mov dword [ebp - 0x19fc], eax
mov ecx, dword [ebp - 0x78c]
mov edx, dword [ebp - 0x36c]
add edx, dword [ecx + 0x1c]
mov dword [ebp - 0x1a00], edx
mov dword [ebp - 0x790], 0
jmp 0x407877
mov eax, dword [ebp - 0x790]
add eax, 1
mov dword [ebp - 0x790], eax
mov ecx, dword [ebp - 0x78c]
mov edx, dword [ebp - 0x790]
cmp edx, dword [ecx + 0x18]
jae 0x407a83
mov eax, dword [ebp - 0x790]
mov ecx, dword [ebp - 0x19f8]
mov edx, dword [ebp - 0x36c]
add edx, dword [ecx + eax*4]
mov dword [ebp - 0x794], edx
mov eax, dword [ebp - 0x790]
mov ecx, dword [ebp - 0x19fc]
movzx edx, word [ecx + eax*2]
mov eax, dword [ebp - 0x1a00]
mov ecx, dword [ebp - 0x36c]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x1a04], ecx
mov dword [ebp - 0x1a0], 0
jmp 0x4078e7
mov edx, dword [ebp - 0x1a0]
add edx, 1
mov dword [ebp - 0x1a0], edx
mov eax, dword [ebp - 0x794]
add eax, dword [ebp - 0x1a0]
movsx ecx, byte [eax]
test ecx, ecx
je 0x407999
mov edx, dword [ebp - 0x1a0]
movsx eax, byte [ebp + edx - 0x9d8]
test eax, eax
je 0x407999
push edi
push edi
add esp, 4
add edi, 0x1a2d
and edi, 0xafb8
and edi, 0x2cc5
pop edi
push ecx
or ecx, 0x4b11
pop ecx
push edi
push ecx
add esp, 4
add edi, 0x6f56
sub edi, 0x119bd
pop edi
mov ecx, dword [ebp - 0x794]
add ecx, dword [ebp - 0x1a0]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x1a0]
movsx ecx, byte [ebp + eax - 0x9d8]
cmp edx, ecx
je 0x40798b
mov edx, dword [ebp - 0x794]
add edx, dword [ebp - 0x1a0]
movsx eax, byte [edx]
xor eax, 0x20
mov ecx, dword [ebp - 0x1a0]
movsx edx, byte [ebp + ecx - 0x9d8]
cmp eax, edx
jne 0x407992
jmp 0x4078d8
jmp 0x407999
push esi
push ebx
add esp, 4
xor esi, 0x13904
pop esi
push edi
sub edi, 0x29eb
jmp 0x4079b3
and edi, 0x11ba0
pop edi
push eax
push eax
add esp, 4
sub eax, 0xcf88
jmp 0x4079ca
pop eax
mov eax, dword [ebp - 0x794]
add eax, dword [ebp - 0x1a0]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x1a0]
movsx eax, byte [ebp + edx - 0x9d8]
cmp ecx, eax
jne 0x4079f8
mov dword [ebp - 0xce8], 0
jmp 0x407a67
push esi
push ecx
add esp, 4
call 0x407a0b
add byte [ecx + 0x33], cl
inc ecx
push eax
dec esp
dec esi
dec ebp
xor al, 0x83
les eax, [ebx + ebp*8]
add eax, dword [ebp + 0x3d]
inc eax
jmp 0x407a1b
pop esi
push eax
and eax, 0x27c6
and eax, 0x1049a
pop eax
mov ecx, dword [ebp - 0x794]
add ecx, dword [ebp - 0x1a0]
movsx edx, byte [ecx]
or edx, 0x20
mov eax, dword [ebp - 0x1a0]
movsx ecx, byte [ebp + eax - 0x9d8]
or ecx, 0x20
cmp edx, ecx
jge 0x407a5d
mov dword [ebp - 0xce8], 0xffffffff
jmp 0x407a67
mov dword [ebp - 0xce8], 1
cmp dword [ebp - 0xce8], 0
jne 0x407a7e
mov edx, dword [ebp - 0x1a04]
mov dword [ebp - 0x524], edx
jmp 0x407a8f
jmp 0x407868
mov eax, dword [ebp - 0x798]
mov dword [ebp - 0x524], eax
mov ecx, dword [ebp - 0x524]
mov dword [ebp - 0xac0], ecx
push ecx
push ebx
add esp, 4
or ecx, 0x14d09
pop ecx
push eax
sub eax, 0x2479
sub eax, 0xce67
xor eax, 0x6192
call 0x407ac9
add byte [esi + 0x3b], al
inc edi
dec edi
dec ecx
dec edx
dec edx
inc eax
add esp, 4
pop eax
mov edx, dword [ebp - 0xac0]
mov dword [ebp - 0x1a08], edx
lea eax, [ebp - 0xcec]
push eax
push 0x40
mov ecx, dword [ebp - 0x169c]
push ecx
mov edx, dword [ebp - 0x3e4]
push edx
call dword [ebp - 0x1a08]
test eax, eax
jne 0x407b40
push esi
push edx
add esp, 4
add esi, 0x108b6
pop esi
push eax
push edx
add esp, 4
sub eax, 0xf928
sub eax, 0x4166
xor eax, 0xbe4b
pop eax
push ecx
add ecx, 0x16a45
sub ecx, 0x2a7d
pop ecx
mov eax, dword [ebp - 0x7a0]
mov dword [ebp - 0x1a0c], eax
push 0
call dword [ebp - 0x1a0c]
mov ecx, dword [ebp - 0x1a10]
mov dword [ebp - 0x79c], ecx
jmp 0x407b5d
mov edx, dword [ebp - 0x79c]
add edx, 1
mov dword [ebp - 0x79c], edx
mov eax, dword [ebp - 0x79c]
cmp eax, dword [ebp - 0xac4]
jae 0x407bb9
push eax
add eax, 0x11fea
pop eax
push eax
push ecx
add esp, 4
sub eax, 0x1aa6
sub eax, 0x15bf3
pop eax
push edx
push eax
add esp, 4
sub edx, 0x996b
sub edx, 0x13d54
and edx, 0x1706f
pop edx
movzx ecx, byte [ebp - 0x3ed]
mov edx, dword [ebp - 0x79c]
movsx eax, byte [edx]
sub eax, ecx
mov ecx, dword [ebp - 0x79c]
mov byte [ecx], al
jmp 0x407b4e
mov edx, dword [ebp - 0xac0]
mov dword [ebp - 0x1a14], edx
lea eax, [ebp - 0xcec]
push eax
mov ecx, dword [ebp - 0xcec]
push ecx
mov edx, dword [ebp - 0x169c]
push edx
mov eax, dword [ebp - 0x3e4]
push eax
call dword [ebp - 0x1a14]
test eax, eax
jne 0x407c31
push esi
add esi, 0x14a96
pop esi
push ecx
add ecx, 0x16cea
and ecx, 0xc442
pop ecx
push edi
and edi, 0x2d28
pop edi
push esi
sub esi, 0x518c
and esi, 0x13e37
and esi, 0xccea
pop esi
mov ecx, dword [ebp - 0x7a0]
mov dword [ebp - 0x1a18], ecx
push 0
call dword [ebp - 0x1a18]
push ebx
sub ebx, 0x15437
xor ebx, 0x819d
pop ebx
push eax
push esi
add esp, 4
add eax, 0x1413f
xor eax, 0xe995
sub eax, 0xe9fb
pop eax
push edi
push esi
add esp, 4
and edi, 0x13ae5
pop edi
push edx
mov ecx, 0x10101010
pop edx
push ecx
mov ecx, 0xffff02ff
pop ecx
push edx
sub edx, 2
inc edx
add eax, dword [edx]
ljmp 0x3d02