Function at 0x406fbb
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push eax
or eax, 0x1446b
sub eax, 0x685b
add eax, 0x85ed
sub eax, 0x97ee
pop eax
push edi
push esi
add esp, 4
call 0x4069bd
add byte [ebx], bh
inc eax
xor ecx, dword [edx + 0x39]
dec edx
inc edi
push eax
xor eax, dword [ebx - 0x74a0fb3c]
xchg ebp, eax
cmp bl, dh
invalid
jne 0x406a67
movzx edx, word [ebp - 0x220]
movzx eax, word [ebp - 0x3c]
sub edx, eax
mov dword [ebp - 0x166c], edx
jmp 0x406ac1
movzx ecx, word [ebp - 0x220]
movzx edx, word [ebp - 0x3c]
cmp ecx, edx
je 0x40698f
movzx eax, word [ebp - 0x220]
xor eax, 0x20
movzx ecx, word [ebp - 0x3c]
cmp eax, ecx
je 0x40698f
movzx edx, word [ebp - 0x220]
movzx eax, word [ebp - 0x3c]
cmp edx, eax
jge 0x406aab
mov dword [ebp - 0x1668], 0xffffffff
jmp 0x406ab5
mov dword [ebp - 0x1668], 1
mov ecx, dword [ebp - 0x1668]
mov dword [ebp - 0x166c], ecx
cmp dword [ebp - 0x166c], 0
jne 0x406b0a
push edx
call fcn.00406ad8
add byte [ecx + 0x41], cl
cmp edi, dword [ebx + edi]
dec edx
inc edi
push edx
push ecx
add esp, 4
or edx, 0xb333
and edx, 0x5b42
or edx, 0x5821
pop edx
push eax
xor eax, 0x81ea
xor eax, 0x1037f
pop eax
push ebx
push edx
add esp, 4
sub ebx, 0xe7ea
pop ebx
mov eax, dword [ebp - 0x518]
mov ecx, dword [eax]
mov dword [ebp - 0x518], ecx
mov edx, dword [ebp - 0x518]
cmp edx, dword [ebp - 0xcd0]
je 0x406b68
mov eax, dword [ebp - 0x518]
cmp dword [eax + 0x30], 0
jne 0x406933
mov dword [ebp - 0x774], 0
push edi
push edi
add esp, 4
add edi, 0x1522e
xor edi, 0x8a3f
xor edi, 0xd8c3
pop edi
push edx
push ecx
add esp, 4
xor edx, 0x35a
pop edx
push edx
or edx, 0x7b63
add edx, 0xa034
pop edx
cmp dword [ebp - 0x774], 0
jne 0x406bee
push esi
push ecx
add esp, 4
xor esi, 0x5911
add esi, 0xf660
pop esi
push esi
push esi
add esp, 4
jmp 0x406bc9
xor esi, 0x92e9
call 0x406bdb
add byte [eax + 0x39], al
dec esi
inc edx
cmp eax, 0x4c48340
pop esi
mov dword [ebp - 0xabc], 0
jmp 0x407716
push esi
sub esi, 0x23ec
xor esi, 0x1524a
xor esi, 0xd302
sub esi, 0x2b80
pop esi
push esi
push eax
add esp, 4
jmp 0x406c13
and esi, 0x6c41
sub esi, 0xb122
pop esi
mov ecx, dword [ebp - 0x774]
mov edx, dword [ecx + 0x18]
mov dword [ebp - 0x3a4], edx
mov dword [ebp - 0x784], 0
mov eax, dword [ebp - 0x3a4]
mov dword [ebp - 0x1670], eax
cmp dword [ebp - 0x1670], 0
jne 0x406c5f
mov ecx, dword [ebp - 0x784]
mov dword [ebp - 0x3f8], ecx
jmp 0x406f50
mov edx, dword [ebp - 0x1670]
mov eax, dword [ebp - 0x3a4]
add eax, dword [edx + 0x3c]
mov dword [ebp - 0x1678], eax
jne 0x406c87
mov ecx, dword [ebp - 0x784]
mov dword [ebp - 0x3f8], ecx
jmp 0x406f50
mov edx, 8
imul eax, edx, 0
mov ecx, dword [ebp - 0x1678]
mov edx, dword [ecx + eax + 0x78]
mov dword [ebp - 0x167c], edx
cmp dword [ebp - 0x167c], 0
jne 0x406cb9
mov eax, dword [ebp - 0x784]
mov dword [ebp - 0x3f8], eax
jmp 0x406f50
mov ecx, dword [ebp - 0x3a4]
add ecx, dword [ebp - 0x167c]
mov dword [ebp - 0x778], ecx
jne 0x406cde
mov edx, dword [ebp - 0x784]
mov dword [ebp - 0x3f8], edx
jmp 0x406f50
mov eax, dword [ebp - 0x778]
mov ecx, dword [ebp - 0x3a4]
add ecx, dword [eax + 0x20]
mov dword [ebp - 0x1a08], ecx
mov edx, dword [ebp - 0x778]
mov eax, dword [ebp - 0x3a4]
add eax, dword [edx + 0x24]
mov dword [ebp - 0x1a0c], eax
mov ecx, dword [ebp - 0x778]
mov edx, dword [ebp - 0x3a4]
add edx, dword [ecx + 0x1c]
mov dword [ebp - 0x1a10], edx
mov dword [ebp - 0x77c], 0
jmp 0x406d38
mov eax, dword [ebp - 0x77c]
add eax, 1
mov dword [ebp - 0x77c], eax
mov ecx, dword [ebp - 0x778]
mov edx, dword [ebp - 0x77c]
cmp edx, dword [ecx + 0x18]
jae 0x406f44
mov eax, dword [ebp - 0x77c]
mov ecx, dword [ebp - 0x1a08]
mov edx, dword [ebp - 0x3a4]
add edx, dword [ecx + eax*4]
mov dword [ebp - 0x780], edx
mov eax, dword [ebp - 0x77c]
mov ecx, dword [ebp - 0x1a0c]
movzx edx, word [ecx + eax*2]
mov eax, dword [ebp - 0x1a10]
mov ecx, dword [ebp - 0x3a4]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x1a14], ecx
mov dword [ebp - 0x1a0], 0
jmp 0x406da8
mov edx, dword [ebp - 0x1a0]
add edx, 1
mov dword [ebp - 0x1a0], edx
mov eax, dword [ebp - 0x780]
add eax, dword [ebp - 0x1a0]
movsx ecx, byte [eax]
test ecx, ecx
je 0x406e5a
mov edx, dword [ebp - 0x1a0]
movsx eax, byte [ebp + edx - 0x8a4]
test eax, eax
je 0x406e5a
push edi
add edi, 0x8730
jmp 0x406de2
pop edi
push ebx
push eax
add esp, 4
add ebx, 0x3650
call 0x406dfd
add byte [esi + 0x3d], cl
dec edx
inc esi
push eax
dec edx
dec eax
add esp, 4
sub ebx, 0x12353
pop ebx
mov ecx, dword [ebp - 0x780]
add ecx, dword [ebp - 0x1a0]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x1a0]
movsx ecx, byte [ebp + eax - 0x8a4]
cmp edx, ecx
je 0x406e4c
mov edx, dword [ebp - 0x780]
add edx, dword [ebp - 0x1a0]
movsx eax, byte [edx]
xor eax, 0x20
mov ecx, dword [ebp - 0x1a0]
movsx edx, byte [ebp + ecx - 0x8a4]
cmp eax, edx
jne 0x406e53
jmp 0x406d99
jmp 0x406e5a
push ecx
push edi
add esp, 4
xor ecx, 0x13a8e
xor ecx, 0x11b14
sub ecx, 0x11d29
and ecx, 0xf9fc
pop ecx
push ebx
and ebx, 0x12a2
pop ebx
push edi
push edx
add esp, 4
and edi, 0x8b56
pop edi
mov eax, dword [ebp - 0x780]
add eax, dword [ebp - 0x1a0]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x1a0]
movsx eax, byte [ebp + edx - 0x8a4]
cmp ecx, eax
jne 0x406eb9
mov dword [ebp - 0xcd4], 0
jmp 0x406f28
push edx
sub edx, 0x123f1
xor edx, 0x8ac7
pop edx
push eax
push edx
add esp, 4
jmp 0x406ed1
pop eax
push eax
xor eax, 0xff91
jmp 0x406ede
add eax, 0x126
and eax, 0x38a4
pop eax
mov ecx, dword [ebp - 0x780]
add ecx, dword [ebp - 0x1a0]
movsx edx, byte [ecx]
or edx, 0x20
mov eax, dword [ebp - 0x1a0]
movsx ecx, byte [ebp + eax - 0x8a4]
or ecx, 0x20
cmp edx, ecx
jge 0x406f1e
mov dword [ebp - 0xcd4], 0xffffffff
jmp 0x406f28
mov dword [ebp - 0xcd4], 1
cmp dword [ebp - 0xcd4], 0
jne 0x406f3f
mov edx, dword [ebp - 0x1a14]
mov dword [ebp - 0x3f8], edx
jmp 0x406f50
jmp 0x406d29
mov eax, dword [ebp - 0x784]
mov dword [ebp - 0x3f8], eax
cmp dword [ebp - 0x3f8], 0
je 0x40702b
push ebx
push ecx
add esp, 4
jmp 0x406f67
and ebx, 0x3031
add ebx, 0x148c1
xor ebx, 0x4bb5
pop ebx
push eax
push edi
add esp, 4
jmp 0x406f86
pop eax
push edx
and edx, 0x854f
pop edx
mov ecx, dword [ebp - 0x3f8]
mov dword [ebp - 0x1a18], ecx
push esi
push ebx
add esp, 4
jmp 0x406fa9
jmp 0x406fae
call 0x406fbb
add byte [0x344d4540], bh
inc ebx
add esp, 4
sub esi, 0xea9c
pop esi
push edi
sub edi, 0x2cf6
pop edi
mov edx, dword [ebp - 0x1a18]
mov dword [ebp - 0x1a1c], edx
lea eax, [ebp - 0x173c]
push eax
call dword [ebp - 0x1a1c]
test eax, eax
jne 0x40702b
push ebx
xor ebx, 0x116ce
or ebx, 0xbdc7
pop ebx
push edi
add edi, 0xe317
call 0x40700b
add byte [0x444b403c], bh
aaa
add esp, 4
jmp 0x407015
and edi, 0x9fcb
pop edi
mov dword [ebp - 0xabc], 0
jmp 0x407716
push ecx
sub ecx, 0x3af8
or ecx, 0xe058
xor ecx, 0xaff
or ecx, 0xf8a2
pop ecx
push edi
push esi
add esp, 4
xor edi, 0x52b3
or edi, 0x11af0
xor edi, 0x3d26
pop edi
mov ecx, dword fs:[0x18]
mov dword [ebp - 0x1a20], ecx
mov edx, dword [ebp - 0x1a20]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x1a24], eax
mov ecx, dword [ebp - 0x1a24]
mov dword [ebp - 0x1680], ecx
push edi
push ebx
add esp, 4
sub edi, 0x105
pop edi
push edx
add edx, 0xc2bb
xor edx, 0xc234
jmp 0x4070a6
pop edx
push ecx
and ecx, 0x14bc7
pop ecx
push ecx
add ecx, 0x7036
pop ecx
cmp dword [ebp - 0x1680], 0
jne 0x4070cf
mov dword [ebp - 0x2fc], 0
jmp 0x407376
mov edx, dword [ebp - 0x1680]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0xce0], ecx
push ebx
sub ebx, 0xadd4
xor ebx, 0x12968
call 0x4070fe
add byte [edx], bh
inc edx
aaa
dec ebp
inc ebx
dec esp
dec esi
cmp al, 0x4d
dec ebp
add esp, 4
call 0x40710f
add byte [ebx + 0x38], cl
inc ebx
aaa
inc ebp
aaa
inc edi
add esp, 4
pop ebx
cmp dword [ebp - 0xce0], 0
jne 0x40712b
mov dword [ebp - 0x2fc], 0
jmp 0x407376
mov edx, dword [ebp - 0xce0]
mov dword [ebp - 0x51c], edx
push eax
or eax, 0x67dd
pop eax
push ebx
push edx
add esp, 4
xor ebx, 0xf9ea
pop ebx
push eax
push ecx
add esp, 4
add eax, 0x12d2a
add eax, 0x4761
sub eax, 0x519d
xor eax, 0x11f91
pop eax
lea eax, [ebp - 0x173c]
mov dword [ebp - 0xcdc], eax
mov ecx, dword [ebp - 0x51c]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0xcd8], edx
xor eax, eax
mov word [ebp - 0x224], ax
xor ecx, ecx
mov word [ebp - 0x40], cx
push ebx
call 0x4071a3
add byte [ebx], bh
inc eax
cmp eax, 0x474a3234
dec edx
aas
add esp, 4
add ebx, 0xb5d6
or ebx, 0xe7e1
pop ebx
push ecx
push esi
add esp, 4
xor ecx, 0x1704b
add ecx, 0x125
pop ecx
mov edx, dword [ebp - 0xcd8]
mov ax, word [edx]
mov word [ebp - 0x1046], ax
mov ecx, dword [ebp - 0xcd8]
add ecx, 2
mov dword [ebp - 0xcd8], ecx
mov dx, word [ebp - 0x1046]
mov word [ebp - 0x224], dx
mov eax, dword [ebp - 0xcdc]
mov cx, word [eax]
mov word [ebp - 0x1048], cx
mov edx, dword [ebp - 0xcdc]
add edx, 2
mov dword [ebp - 0xcdc], edx
mov ax, word [ebp - 0x1048]
mov word [ebp - 0x40], ax
push eax
or eax, 0x84c8
jmp 0x407228
or eax, 0x70b2
jmp 0x407237
pop eax
push esi
add esi, 0xe37c
pop esi
push esi
push ecx
add esp, 4
jmp 0x40724d
pop esi
movzx ecx, word [ebp - 0x40]
test ecx, ecx
jne 0x40726b
movzx edx, word [ebp - 0x224]
movzx eax, word [ebp - 0x40]
sub edx, eax
mov dword [ebp - 0x1688], edx
jmp 0x4072c5
movzx ecx, word [ebp - 0x224]
movzx edx, word [ebp - 0x40]
cmp ecx, edx
je 0x407193
movzx eax, word [ebp - 0x224]
xor eax, 0x20
movzx ecx, word [ebp - 0x40]
cmp eax, ecx
je 0x407193
movzx edx, word [ebp - 0x224]
movzx eax, word [ebp - 0x40]
cmp edx, eax
jge 0x4072af
mov dword [ebp - 0x1684], 0xffffffff
jmp 0x4072b9
mov dword [ebp - 0x1684], 1
mov ecx, dword [ebp - 0x1684]
mov dword [ebp - 0x1688], ecx
cmp dword [ebp - 0x1688], 0
jne 0x40730e
push ebx
xor ebx, 0x9965
and ebx, 0x1634c
add ebx, 0x108e4
pop ebx
push edx
push ecx
add esp, 4
sub edx, 0xc19e
sub edx, 0x11bc4
add edx, 0x6493
add edx, 0x11978
pop edx
mov edx, dword [ebp - 0x51c]
mov dword [ebp - 0x2fc], edx
jmp 0x407376
push ebx
push ecx
add esp, 4
call 0x407321
add byte [edi], dh
inc edi
cmp dh, byte [0x4c4d473b]
add esp, 4
call 0x407330
add byte [ecx + 0x45], cl
dec ebp
dec esp
dec ecx
xor eax, dword [ebx - 0x347efb3c]
xor edi, dword [esi + 1]
add byte [ecx + 0x14ddbc3], al
add byte [ebx - 0x75], bl
test esp, esp
cli
invalid
push edx
push esi
add esp, 4
and edx, 0x901e
sub edx, 0x9fdc
or edx, 0xc530
pop edx
push ecx
call 0x40739e
add byte [ecx + 0x41], cl
dec edi
dec ebp
xor eax, 0x45344845
add esp, 4
sub ecx, 0x3c7b
pop ecx
mov ecx, dword [ebp - 0x2fc]
mov edx, dword [ecx + 0x18]
mov dword [ebp - 0x338], edx
push edx
push eax
add esp, 4
and edx, 0x23de
pop edx
push esi
push ecx
add esp, 4
jmp 0x4073ce
and esi, 0x1590f
pop esi
push ecx
and ecx, 0x18649
or ecx, 0xff00
add ecx, 0x105a7
pop ecx
mov dword [ebp - 0x794], 0
mov eax, dword [ebp - 0x338]
mov dword [ebp - 0x168c], eax
cmp dword [ebp - 0x168c], 0
jne 0x407419
mov ecx, dword [ebp - 0x794]
mov dword [ebp - 0x520], ecx
jmp 0x40770a
mov edx, dword [ebp - 0x168c]
mov eax, dword [ebp - 0x338]
add eax, dword [edx + 0x3c]
mov dword [ebp - 0x1690], eax
jne 0x407441
mov ecx, dword [ebp - 0x794]
mov dword [ebp - 0x520], ecx
jmp 0x40770a
mov edx, 8
imul eax, edx, 0
mov ecx, dword [ebp - 0x1690]
mov edx, dword [ecx + eax + 0x78]
mov dword [ebp - 0x1694], edx
cmp dword [ebp - 0x1694], 0
jne 0x407473
mov eax, dword [ebp - 0x794]
mov dword [ebp - 0x520], eax
jmp 0x40770a
mov ecx, dword [ebp - 0x338]
add ecx, dword [ebp - 0x1694]
mov dword [ebp - 0x788], ecx
jne 0x407498
mov edx, dword [ebp - 0x794]
mov dword [ebp - 0x520], edx
jmp 0x40770a
mov eax, dword [ebp - 0x788]
mov ecx, dword [ebp - 0x338]
add ecx, dword [eax + 0x20]
mov dword [ebp - 0x1a28], ecx
mov edx, dword [ebp - 0x788]
mov eax, dword [ebp - 0x338]
add eax, dword [edx + 0x24]
mov dword [ebp - 0x1a2c], eax
mov ecx, dword [ebp - 0x788]
mov edx, dword [ebp - 0x338]
add edx, dword [ecx + 0x1c]
mov dword [ebp - 0x1a30], edx
mov dword [ebp - 0x78c], 0
jmp 0x4074f2
mov eax, dword [ebp - 0x78c]
add eax, 1
mov dword [ebp - 0x78c], eax
mov ecx, dword [ebp - 0x788]
mov edx, dword [ebp - 0x78c]
cmp edx, dword [ecx + 0x18]
jae 0x4076fe
mov eax, dword [ebp - 0x78c]
mov ecx, dword [ebp - 0x1a28]
mov edx, dword [ebp - 0x338]
add edx, dword [ecx + eax*4]
mov dword [ebp - 0x790], edx
mov eax, dword [ebp - 0x78c]
mov ecx, dword [ebp - 0x1a2c]
movzx edx, word [ecx + eax*2]
mov eax, dword [ebp - 0x1a30]
mov ecx, dword [ebp - 0x338]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x1a34], ecx
mov dword [ebp - 0x1a4], 0
jmp 0x407562
mov edx, dword [ebp - 0x1a4]
add edx, 1
mov dword [ebp - 0x1a4], edx
mov eax, dword [ebp - 0x790]
add eax, dword [ebp - 0x1a4]
movsx ecx, byte [eax]
test ecx, ecx
je 0x407614
mov edx, dword [ebp - 0x1a4]
movsx eax, byte [ebp + edx - 0x9d4]
test eax, eax
je 0x407614
push edx
call 0x40759f
add byte [esp + eax*2 + 0x44], cl
aas
xor eax, dword [eax + 0x50]
aaa
inc esi
add esp, 4
and edx, 0xcb0e
pop edx
push ecx
push ecx
add esp, 4
sub ecx, 0x14150
xor ecx, 0x80e1
sub ecx, 0x6f6f
pop ecx
mov ecx, dword [ebp - 0x790]
add ecx, dword [ebp - 0x1a4]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x1a4]
movsx ecx, byte [ebp + eax - 0x9d4]
cmp edx, ecx
je 0x407606
mov edx, dword [ebp - 0x790]
add edx, dword [ebp - 0x1a4]
movsx eax, byte [edx]
xor eax, 0x20
mov ecx, dword [ebp - 0x1a4]
movsx edx, byte [ebp + ecx - 0x9d4]
cmp eax, edx
jne 0x40760d
jmp 0x407553
jmp 0x407614
push edx
push edi
add esp, 4
add edx, 0x14459
or edx, 0x16ee6
and edx, 0x531e
or edx, 0x15397
add byte [edx + 0x56], bl
jmp 0x407639
jmp 0x40763f
or esi, 0x12a9c
pop esi
mov eax, dword [ebp - 0x790]
add eax, dword [ebp - 0x1a4]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x1a4]
movsx eax, byte [ebp + edx - 0x9d4]
cmp ecx, eax
jne 0x407673
mov dword [ebp - 0xce4], 0
jmp 0x4076e2
push edi
add edi, 0x11a7f
and edi, 0xe136
pop edi
push esi
or esi, 0xa843
xor esi, 0x10539
jmp 0x407696
pop esi
push eax
xor eax, 0x1f40
or eax, 0x12684
pop eax
mov ecx, dword [ebp - 0x790]
add ecx, dword [ebp - 0x1a4]
movsx edx, byte [ecx]
or edx, 0x20
mov eax, dword [ebp - 0x1a4]
movsx ecx, byte [ebp + eax - 0x9d4]
or ecx, 0x20
cmp edx, ecx
jge 0x4076d8
mov dword [ebp - 0xce4], 0xffffffff
jmp 0x4076e2
mov dword [ebp - 0xce4], 1
cmp dword [ebp - 0xce4], 0
jne 0x4076f9
mov edx, dword [ebp - 0x1a34]
mov dword [ebp - 0x520], edx
jmp 0x40770a
jmp 0x4074e3
mov eax, dword [ebp - 0x794]
mov dword [ebp - 0x520], eax
mov ecx, dword [ebp - 0x520]
mov dword [ebp - 0xabc], ecx
push eax
or eax, 0x11c99
and eax, 0x1b96
xor eax, 0x15a1d
or eax, 0xb4bb
pop eax
push ebx
push esi
add esp, 4
or ebx, 0x1104c
sub ebx, 0x9ee2
and ebx, 0xc2b0
pop ebx
mov edx, dword [ebp - 0xabc]
mov dword [ebp - 0x1a38], edx
lea eax, [ebp - 0xce8]
push eax
push 0x40
mov ecx, dword [ebp - 0x1698]
push ecx
mov edx, dword [ebp - 0x3e8]
push edx
call dword [ebp - 0x1a38]
test eax, eax
jne 0x4077bb
push eax
push edi
add esp, 4
add eax, 0xd44
sub eax, 0xdffa
pop eax
push esi
jmp 0x40778e
or esi, 0xf700
and esi, 0x6c98
pop esi
push esi
push edx
add esp, 4
xor esi, 0x9696
pop esi
mov eax, dword [ebp - 0x79c]
mov dword [ebp - 0x1a3c], eax
push 0
call dword [ebp - 0x1a3c]
mov ecx, dword [ebp - 0x1a40]
mov dword [ebp - 0x798], ecx
jmp 0x4077d8
mov edx, dword [ebp - 0x798]
add edx, 1
ret 0x8901
xchg ebp, eax
invalid
clc
invalid
invalid
mov eax, dword [ebp - 0x798]
cmp eax, dword [ebp - 0xac0]
jae 0x407834
push edx
sub edx, 0x947c
pop edx
push esi
call 0x4077fc
add byte [esi + 0x47], cl
cmp dword [edi], edi
xor dh, byte [ebx]
cmp byte [ebx + 0x505e04c4], al
push edi
add esp, 4
add eax, 0xfdba
xor eax, 0x178e1
and eax, 0x33df
pop eax
movzx ecx, byte [ebp - 0x3ae]
mov edx, dword [ebp - 0x798]
movsx eax, byte [edx]
sub eax, ecx
mov ecx, dword [ebp - 0x798]
mov byte [ecx], al
jmp 0x4077c9
mov edx, dword [ebp - 0xabc]
mov dword [ebp - 0x1a44], edx
lea eax, [ebp - 0xce8]
push eax
mov ecx, dword [ebp - 0xce8]
push ecx
mov edx, dword [ebp - 0x1698]
push edx
mov eax, dword [ebp - 0x3e8]
push eax
call dword [ebp - 0x1a44]
test eax, eax
jne 0x4078ac
push edx
push ebx
add esp, 4
or edx, 0x6be3
add edx, 0x15b13
pop edx
push esi
or esi, 0x1386c
pop esi
push edi
push edi
add esp, 4
call 0x407894
add byte [ecx + 0x33], al
xor al, 0x4e
dec ebx
xor cl, byte [esi + 0x43]
inc esp
add esp, 4
pop edi
mov ecx, dword [ebp - 0x79c]
mov dword [ebp - 0x1a48], ecx
push 0
call dword [ebp - 0x1a48]
push ecx
xor ecx, 0x184ed
jmp 0x4078b8
jmp 0x4078bd
xor ecx, 0x131f1
pop ecx
push eax
and eax, 0xb90e
pop eax
push ebx
push ebx
add esp, 4
sub ebx, 0x15eca
sub ebx, 0x60d2
pop ebx
push edx
mov ecx, 0x10101010
pop edx
push ecx
mov ecx, 0xffff02ff
pop ecx
push esp
ljmp 0x5102