Function at 0x40669c
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov eax, dword [ebp - 0x7b0]
add eax, 1
mov dword [ebp - 0x7b0], eax
mov ecx, dword [ebp - 0x7ac]
mov edx, dword [ebp - 0x7b0]
cmp edx, dword [ecx + 0x18]
jae 0x401f30
mov eax, dword [ebp - 0x7b0]
mov ecx, dword [ebp - 0x1fdc]
mov edx, dword [ebp - 0x344]
mov esp, 0x3fffffc
adc al, 0x81
mov esp, 0x3fffffc
adc al, 0x81
mov dword [ebp - 0x7b4], edx
mov eax, dword [ebp - 0x7b0]
mov ecx, dword [ebp - 0x1fe0]
movzx edx, word [ecx + eax*2]
mov eax, dword [ebp - 0x1fe4]
mov ecx, dword [ebp - 0x344]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x1fe8], ecx
mov dword [ebp - 0x1ac], 0
jmp 0x401d94
mov edx, dword [ebp - 0x1ac]
add edx, 1
mov dword [ebp - 0x1ac], edx
mov eax, dword [ebp - 0x7b4]
add eax, dword [ebp - 0x1ac]
movsx ecx, byte [eax]
test ecx, ecx
je 0x401e46
mov edx, dword [ebp - 0x1ac]
movsx eax, byte [ebp + edx - 0x904]
test eax, eax
je 0x401e46
push ecx
push ecx
add esp, 4
and ecx, 0x12747
add ecx, 0x7f9e
xor ecx, 0x15c14
pop ecx
push edi
push esi
add esp, 4
or edi, 0x8e0f
pop edi
push ebx
add ebx, 0x147e9
sub ebx, 0xa79f
pop ebx
mov ecx, dword [ebp - 0x7b4]
add ecx, dword [ebp - 0x1ac]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x1ac]
movsx ecx, byte [ebp + eax - 0x904]
cmp edx, ecx
je 0x401e38
mov edx, dword [ebp - 0x7b4]
add edx, dword [ebp - 0x1ac]
movsx eax, byte [edx]
xor eax, 0x20
mov ecx, dword [ebp - 0x1ac]
movsx edx, byte [ebp + ecx - 0x904]
cmp eax, edx
jne 0x401e3f
jmp 0x401d85
jmp 0x401e46
push edx
push edi
add esp, 4
call 0x401e58
add byte [edx], bh
inc eax
inc ebp
inc eax
inc esi
inc ecx
inc ecx
add esp, 4
call 0x401e68
add byte [ebx], bh
cmp al, 0x33
cmp dword [edx], edi
cmp eax, 0x4c48347
and edx, 0x117d9
and edx, 0xfa44
pop edx
mov eax, dword [ebp - 0x7b4]
add eax, dword [ebp - 0x1ac]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x1ac]
movsx eax, byte [ebp + edx - 0x904]
cmp ecx, eax
jne 0x401ea5
mov dword [ebp - 0xd70], 0
jmp 0x401f14
push edx
jmp 0x401eaf
xor edx, 0xa8b3
pop edx
push eax
jmp 0x401ebd
pop eax
push edi
push ebx
add esp, 4
jmp 0x401ecb
jmp 0x401ed0
add edi, 0xc874
pop edi
mov ecx, dword [ebp - 0x7b4]
add ecx, dword [ebp - 0x1ac]
movsx edx, byte [ecx]
or edx, 0x20
mov eax, dword [ebp - 0x1ac]
movsx ecx, byte [ebp + eax - 0x904]
or ecx, 0x20
cmp edx, ecx
jge 0x401f0a
mov dword [ebp - 0xd70], 0xffffffff
jmp 0x401f14
mov dword [ebp - 0xd70], 1
cmp dword [ebp - 0xd70], 0
jne 0x401f2b
mov edx, dword [ebp - 0x1fe8]
mov dword [ebp - 0x410], edx
jmp 0x401f3c
jmp 0x401d15
mov eax, dword [ebp - 0x7b8]
mov dword [ebp - 0x410], eax
cmp dword [ebp - 0x410], 0
je 0x402017
push esi
sub esi, 0x4a31
add esi, 0xfc40
call 0x401f63
add byte [eax + 0x41], al
xor ecx, dword [ebp + 0x38]
inc edi
inc eax
add esp, 4
pop esi
push eax
and eax, 0x1269a
and eax, 0xebb3
add eax, 0x11001
pop eax
mov ecx, dword [ebp - 0x410]
mov dword [ebp - 0x1fec], ecx
push esi
push esi
add esp, 4
or esi, 0xb3d6
add esi, 0x154c7
pop esi
push eax
push edi
add esp, 4
call 0x401fae
add byte [0x3f35453c], dh
inc edi
inc edi
dec eax
xor eax, 0x4c48341
jmp 0x401fb8
pop eax
mov edx, dword [ebp - 0x1fec]
mov dword [ebp - 0x1ff0], edx
lea eax, [ebp - 0x189c]
push eax
call dword [ebp - 0x1ff0]
test eax, eax
jne 0x402017
push ebx
call 0x401fe7
add byte [eax], bh
cmp cl, byte [ebp + 0x32]
inc esp
inc ebx
inc edx
cmp eax, 0x4c48337
jmp 0x401ff1
or ebx, 0xa3c
call 0x402004
add byte [0x4d323339], bh
xor eax, 0x4c4833e
pop ebx
mov dword [ebp - 0xb58], 0
jmp 0x402702
push edx
and edx, 0x1dbf
and edx, 0xf51
jmp 0x40202d
call 0x40203d
add byte [esi + 0x49], cl
inc ebx
inc ebx
xor al, 0x49
inc edx
cmp byte [ecx + 0x40], al
add esp, 4
pop edx
push ebx
or ebx, 0xcb74
pop ebx
mov ecx, dword fs:[0x18]
mov dword [ebp - 0x1ff4], ecx
mov edx, dword [ebp - 0x1ff4]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x1ff8], eax
mov ecx, dword [ebp - 0x1ff8]
mov dword [ebp - 0x1700], ecx
push edx
and edx, 0x16f21
pop edx
push esi
push edx
add esp, 4
or esi, 0x125e0
add esi, 0x4bf9
xor esi, 0xaec5
xor esi, 0x18295
pop esi
push edx
push ebx
add esp, 4
and edx, 0x4852
pop edx
cmp dword [ebp - 0x1700], 0
jne 0x4020bb
mov dword [ebp - 0x33c], 0
jmp 0x402362
mov edx, dword [ebp - 0x1700]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0xd7c], ecx
push ebx
and ebx, 0x1046c
or ebx, 0x8d06
sub ebx, 0x16cb5
pop ebx
push edx
push esi
add esp, 4
and edx, 0x17cfe
or edx, 0x1582e
sub edx, 0x6bd
or edx, 0x5482
pop edx
cmp dword [ebp - 0xd7c], 0
jne 0x402117
mov dword [ebp - 0x33c], 0
jmp 0x402362
mov edx, dword [ebp - 0xd7c]
mov dword [ebp - 0x540], edx
push edx
push eax
add esp, 4
or edx, 0x10326
call 0x40213a
add byte [ebx + 0x39], al
xor al, 0x3b
cmp al, 0x83
les eax, [ebx + ebp*8]
pop es
aaa
aas
inc ebp
aaa
xor eax, 0xea81453b
adc dh, byte [edi + 1]
add byte [edx + 0x52], bl
xor edx, 0x1c2d
pop edx
lea eax, [ebp - 0x189c]
mov dword [ebp - 0xd78], eax
mov ecx, dword [ebp - 0x540]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0xd74], edx
xor eax, eax
mov word [ebp - 0x230], ax
xor ecx, ecx
mov word [ebp - 0x34], cx
push eax
push ecx
add esp, 4
and eax, 0x900d
xor eax, 0x7371
and eax, 0x6076
pop eax
push esi
push esi
add esp, 4
jmp 0x4021a4
or esi, 0x14eb9
sub esi, 0x14533
pop esi
mov edx, dword [ebp - 0xd74]
mov ax, word [edx]
mov word [ebp - 0x113e], ax
mov ecx, dword [ebp - 0xd74]
add ecx, 2
mov dword [ebp - 0xd74], ecx
mov dx, word [ebp - 0x113e]
mov word [ebp - 0x230], dx
mov eax, dword [ebp - 0xd78]
mov cx, word [eax]
mov word [ebp - 0x1140], cx
mov edx, dword [ebp - 0xd78]
add edx, 2
mov dword [ebp - 0xd78], edx
mov ax, word [ebp - 0x1140]
mov word [ebp - 0x34], ax
push edx
and edx, 0x82d
xor edx, 0x10a5a
sub edx, 0x6cb7
xor edx, 0x1348f
pop edx
push ecx
xor ecx, 0x174e1
and ecx, 0xdcea
pop ecx
push esi
jmp 0x402239
pop esi
movzx ecx, word [ebp - 0x34]
test ecx, ecx
jne 0x402257
movzx edx, word [ebp - 0x230]
movzx eax, word [ebp - 0x34]
sub edx, eax
mov dword [ebp - 0x1708], edx
jmp 0x4022b1
movzx ecx, word [ebp - 0x230]
movzx edx, word [ebp - 0x34]
cmp ecx, edx
je 0x40217f
movzx eax, word [ebp - 0x230]
xor eax, 0x20
movzx ecx, word [ebp - 0x34]
cmp eax, ecx
je 0x40217f
movzx edx, word [ebp - 0x230]
movzx eax, word [ebp - 0x34]
cmp edx, eax
jge 0x40229b
mov dword [ebp - 0x1704], 0xffffffff
jmp 0x4022a5
mov dword [ebp - 0x1704], 1
mov ecx, dword [ebp - 0x1704]
mov dword [ebp - 0x1708], ecx
cmp dword [ebp - 0x1708], 0
jne 0x4022fa
push eax
push edi
add esp, 4
add eax, 0x5fd8
call 0x4022d5
add byte [ebx], dh
xor al, 0x50
cmp byte [edx], dh
aaa
xor al, byte [edx + 0x33]
inc eax
add esp, 4
jmp 0x4022de
add eax, 0x2834
pop eax
push edx
jmp 0x4022eb
pop edx
mov edx, dword [ebp - 0x540]
mov dword [ebp - 0x33c], edx
jmp 0x402362
push esi
sub esi, 0xb9c5
pop esi
push ebx
push eax
add esp, 4
add ebx, 0x13bc2
call 0x40231c
add byte [ebx + edi], bh
cmp bh, byte [esi]
xor eax, 0x433a4f3b
add esp, 4
sub ebx, 0x14988
xor ebx, 0x101a6
pop ebx
mov eax, dword [ebp - 0x540]
mov ecx, dword [eax]
mov dword [ebp - 0x540], ecx
mov edx, dword [ebp - 0x540]
cmp edx, dword [ebp - 0xd7c]
je 0x402358
mov eax, dword [ebp - 0x540]
cmp dword [eax + 0x30], 0
jne 0x402123
mov dword [ebp - 0x33c], 0
push edi
push edx
add esp, 4
or edi, 0x5d8d
call 0x40237b
add byte [ecx + 0x48], al
inc ecx
inc esp
xor edi, dword [esi]
dec edx
cmp byte [ebx + 0x7eb04c4], al
inc ebx
dec esp
inc ecx
cmp esi, dword [0x50565f43]
add esp, 4
add esi, 0xdb1a
pop esi
mov ecx, dword [ebp - 0x33c]
mov edx, dword [ecx + 0x18]
mov dword [ebp - 0x348], edx
push edx
push eax
add esp, 4
xor edx, 0x17ea
or edx, 0x7b71
pop edx
push eax
add eax, 0x4316
pop eax
push ebx
push ecx
add esp, 4
xor ebx, 0x18cc
or ebx, 0x55df
add ebx, 0xffc
pop ebx
mov dword [ebp - 0x7c8], 0
mov eax, dword [ebp - 0x348]
mov dword [ebp - 0x170c], eax
cmp dword [ebp - 0x170c], 0
jne 0x402405
mov ecx, dword [ebp - 0x7c8]
mov dword [ebp - 0x544], ecx
jmp 0x4026f6
mov edx, dword [ebp - 0x170c]
mov eax, dword [ebp - 0x348]
add eax, dword [edx + 0x3c]
mov dword [ebp - 0x1710], eax
jne 0x40242d
mov ecx, dword [ebp - 0x7c8]
mov dword [ebp - 0x544], ecx
jmp 0x4026f6
mov edx, 8
imul eax, edx, 0
mov ecx, dword [ebp - 0x1710]
mov edx, dword [ecx + eax + 0x78]
mov dword [ebp - 0x1714], edx
cmp dword [ebp - 0x1714], 0
jne 0x40245f
mov eax, dword [ebp - 0x7c8]
mov dword [ebp - 0x544], eax
jmp 0x4026f6
mov ecx, dword [ebp - 0x348]
add ecx, dword [ebp - 0x1714]
mov dword [ebp - 0x7bc], ecx
jne 0x402484
mov edx, dword [ebp - 0x7c8]
mov dword [ebp - 0x544], edx
jmp 0x4026f6
mov eax, dword [ebp - 0x7bc]
mov ecx, dword [ebp - 0x348]
add ecx, dword [eax + 0x20]
mov dword [ebp - 0x1ffc], ecx
mov edx, dword [ebp - 0x7bc]
mov eax, dword [ebp - 0x348]
add eax, dword [edx + 0x24]
mov dword [ebp - 0x2000], eax
mov ecx, dword [ebp - 0x7bc]
mov edx, dword [ebp - 0x348]
add edx, dword [ecx + 0x1c]
mov dword [ebp - 0x2004], edx
mov dword [ebp - 0x7c0], 0
jmp 0x4024de
mov eax, dword [ebp - 0x7c0]
add eax, 1
mov dword [ebp - 0x7c0], eax
mov ecx, dword [ebp - 0x7bc]
mov edx, dword [ebp - 0x7c0]
cmp edx, dword [ecx + 0x18]
jae 0x4026ea
mov eax, dword [ebp - 0x7c0]
mov ecx, dword [ebp - 0x1ffc]
mov edx, dword [ebp - 0x348]
add edx, dword [ecx + eax*4]
mov dword [ebp - 0x7c4], edx
mov eax, dword [ebp - 0x7c0]
mov ecx, dword [ebp - 0x2000]
movzx edx, word [ecx + eax*2]
mov eax, dword [ebp - 0x2004]
mov ecx, dword [ebp - 0x348]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x200c], ecx
mov dword [ebp - 0x1b0], 0
jmp 0x40254e
mov edx, dword [ebp - 0x1b0]
add edx, 1
mov dword [ebp - 0x1b0], edx
mov eax, dword [ebp - 0x7c4]
add eax, dword [ebp - 0x1b0]
movsx ecx, byte [eax]
test ecx, ecx
je 0x402600
mov edx, dword [ebp - 0x1b0]
movsx eax, byte [ebp + edx - 0x8dc]
test eax, eax
je 0x402600
push ebx
add ebx, 0xd16a
and ebx, 0x1114c
call 0x402595
add byte [ebx], dh
dec esi
xor eax, 0x4b3f3e33
add esp, 4
pop ebx
push esi
add esi, 0x10fd6
and esi, 0x15fd3
or esi, 0xe34f
pop esi
mov ecx, dword [ebp - 0x7c4]
add ecx, dword [ebp - 0x1b0]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x1b0]
movsx ecx, byte [ebp + eax - 0x8dc]
cmp edx, ecx
je 0x4025f2
mov edx, dword [ebp - 0x7c4]
add edx, dword [ebp - 0x1b0]
movsx eax, byte [edx]
xor eax, 0x20
mov ecx, dword [ebp - 0x1b0]
movsx edx, byte [ebp + ecx - 0x8dc]
cmp eax, edx
jne 0x4025f9
jmp 0x40253f
jmp 0x402600
push edx
push ebx
add esp, 4
and edx, 0x29d0
and edx, 0xc1a0
pop edx
push ecx
and ecx, 0x67c5
jmp 0x40261e
and ecx, 0xbf02
pop ecx
push ecx
push edx
add esp, 4
jmp 0x402631
pop ecx
mov eax, dword [ebp - 0x7c4]
add eax, dword [ebp - 0x1b0]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x1b0]
movsx eax, byte [ebp + edx - 0x8dc]
cmp ecx, eax
jne 0x40265f
mov dword [ebp - 0xd80], 0
jmp 0x4026ce
push edi
push eax
add esp, 4
or edi, 0xd917
or edi, 0x10d35
xor edi, 0xb759
pop edi
push esi
sub esi, 0x85fe
and esi, 0x3383
sub esi, 0x24ff
or esi, 0x9c06
pop esi
mov ecx, dword [ebp - 0x7c4]
add ecx, dword [ebp - 0x1b0]
movsx edx, byte [ecx]
or edx, 0x20
mov eax, dword [ebp - 0x1b0]
movsx ecx, byte [ebp + eax - 0x8dc]
or ecx, 0x20
cmp edx, ecx
jge 0x4026c4
mov dword [ebp - 0xd80], 0xffffffff
jmp 0x4026ce
mov dword [ebp - 0xd80], 1
cmp dword [ebp - 0xd80], 0
jne 0x4026e5
mov edx, dword [ebp - 0x200c]
mov dword [ebp - 0x544], edx
jmp 0x4026f6
jmp 0x4024cf
mov eax, dword [ebp - 0x7c8]
mov dword [ebp - 0x544], eax
mov ecx, dword [ebp - 0x544]
mov dword [ebp - 0xb58], ecx
push 0
lea edx, [ebp - 0xc8c]
push edx
lea eax, [ebp - 0xce0]
push eax
push 0
call dword [ebp - 0xb58]
mov ecx, 0x4d
mov word [ebp - 0x21b4], cx
mov edx, 0x42
mov word [ebp - 0x21b2], dx
mov eax, 0x53
mov word [ebp - 0x21b0], ax
mov ecx, 0x65
mov word [ebp - 0x21ae], cx
mov edx, 0x72
mov word [ebp - 0x21ac], dx
mov eax, 0x76
mov word [ebp - 0x21aa], ax
mov ecx, 0x69
mov word [ebp - 0x21a8], cx
mov edx, 0x63
mov word [ebp - 0x21a6], dx
mov eax, 0x65
mov word [ebp - 0x21a4], ax
mov ecx, 0x2e
mov word [ebp - 0x21a2], cx
mov edx, 0x65
mov word [ebp - 0x21a0], dx
mov eax, 0x78
mov word [ebp - 0x219e], ax
mov ecx, 0x65
mov word [ebp - 0x219c], cx
xor edx, edx
mov word [ebp - 0x219a], dx
mov dword [ebp - 0x1164], 1
push esi
push edi
add esp, 4
or esi, 0xe9d8
call 0x4027e1
add byte [ebx + 0x4c], cl
cmp al, 0x33
dec ecx
xor eax, 0x4c4833a
pop esi
push eax
xor eax, 0xbfeb
pop eax
push esi
xor esi, 0xdbbf
sub esi, 0xf365
pop esi
imul eax, dword [ebp - 0x1164], 0xfe
add eax, 0x56f3663b
imul ecx, dword [ebp - 0x1164], 0xfe
sub eax, ecx
xor eax, 0xaa6272
imul eax, dword [ebp - 0x1164]
imul edx, dword [ebp - 0x1164], 0xfe
sub eax, edx
mov dword [ebp - 0x1168], eax
push edi
or edi, 0x16a4b
pop edi
push esi
push edx
add esp, 4
call 0x40284e
add byte [edx], bh
xor al, 0x50
inc eax
inc eax
add esp, 4
or esi, 0x543f
pop esi
push ecx
sub ecx, 0x1c0e
and ecx, 0xcd5d
pop ecx
mov dword [ebp - 0x10], 1
push edi
sub edi, 0x15683
xor edi, 0x15519
pop edi
push edi
xor edi, 0xb01c
sub edi, 0xb01e
call 0x402895
add byte [0x33423337], bh
dec esp
aas
add esp, 4
or edi, 0x1a3f
pop edi
imul eax, dword [ebp - 0x10], 0xfe
add eax, 0x56f3663b
imul ecx, dword [ebp - 0x10], 0xfe
sub eax, ecx
xor eax, 0x153c
imul eax, dword [ebp - 0x10]
imul edx, dword [ebp - 0x10], 0xfe
sub eax, edx
mov dword [ebp - 0x14], eax
push ebx
call 0x4028d8
add byte [eax + 0x33], dl
aaa
xor al, 0x3e
dec ebp
aas
dec ebx
add esp, 4
or ebx, 0x6d70
or ebx, 0x6d79
pop ebx
push eax
jmp 0x4028ee
xor eax, 0xad35
sub eax, 0x175b2
pop eax
push esi
push ecx
add esp, 4
jmp 0x402907
pop esi
push edx
push esi
add esp, 4
and edx, 0x13fb9
pop edx
push eax
and eax, 0x413b
pop eax
push ecx
push edx
add esp, 4
or ecx, 0x118b3
jmp 0x40292c
pop ecx
mov dword [ebp - 0x2c], 1
push ecx
call 0x402944
add byte [edi], bh
inc esp
push eax
dec ecx
xor bh, byte [0x83334e43]
les eax, [ecx + eax*4]
rol dword [eax + 0x21], 1
add byte [ecx + 0x51], bl
push edx
add esp, 4
or ecx, 0x13756
add ecx, 0xa41a
sub ecx, 0x18280
pop ecx
imul eax, dword [ebp - 0x2c], 0xfe
add eax, 0x56f3663b
imul ecx, dword [ebp - 0x2c], 0xfe
sub eax, ecx
xor eax, 0
imul eax, dword [ebp - 0x2c]
imul edx, dword [ebp - 0x2c], 0xfe
sub eax, edx
mov dword [ebp - 0x30], eax
jmp 0x402b47
mov edx, dword [ebp - 0x1168]
mov eax, dword [ebp - 0x1164]
mov dword [ebp - 0x1770], edx
mov dword [ebp - 0x176c], eax
push eax
push edi
add esp, 4
sub eax, 0xd46d
xor eax, 0xb751
add eax, 0x1113d
pop eax
push edx
xor edx, 0xb877
call 0x402b8d
add byte [esi], dh
dec edi
cmp eax, 0x464b484d
push eax
dec esp
add esp, 4
pop edx
push ebx
sub ebx, 0x8c52
call 0x402ba5
add byte [0x354a324b], dh
dec eax
add esp, 4
xor ebx, 0x1613f
pop ebx
push edi
sub edi, 0x279c
xor edi, 0xac14
or edi, 0x178a8
pop edi
mov ecx, dword [ebp - 0x30]
add ecx, 0xfe
imul edx, dword [ebp - 0x2c], 0xfe
add edx, 0x56f3663b
imul eax, dword [ebp - 0x2c], 0xfe
sub edx, eax
xor ecx, edx
imul ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x201c], ecx
push eax
or eax, 0xc75b
and eax, 0x11e43
xor eax, 0x4cc5
xor eax, 0x2467
pop eax
push eax
push edi
add esp, 4
call 0x402c1c
add byte [esi + edi], bh
inc esp
cmp dh, byte [esi]
inc ecx
inc ebx
dec edx
dec edi
add esp, 4
pop eax
mov ecx, dword [ebp - 0x1770]
add ecx, 0xfe
imul edx, dword [ebp - 0x176c], 0xfe
add edx, 0x56f3663b
imul eax, dword [ebp - 0x176c], 0xfe
sub edx, eax
xor ecx, edx
imul ecx, dword [ebp - 0x176c]
mov dword [ebp - 0x2018], ecx
mov ecx, dword [ebp - 0x2018]
mov dword [ebp - 0x2020], ecx
mov edx, dword [ebp - 0x201c]
cmp edx, dword [ebp - 0x2020]
jae 0x402c7d
mov dword [ebp - 0x1718], 1
jmp 0x402c87
mov dword [ebp - 0x1718], 0
mov al, byte [ebp - 0x1718]
mov byte [ebp - 0x3d9], al
movzx ecx, byte [ebp - 0x3d9]
test ecx, ecx
je 0x405cfb
push edx
push ecx
add esp, 4
or edx, 0x6577
xor edx, 0x3586
or edx, 0x73d8
pop edx
push ecx
add ecx, 0x17f1a
sub ecx, 0xd2bf
add ecx, 0x11d2b
xor ecx, 0x326b
pop ecx
push ebx
xor ebx, 0x1559b
add ebx, 0x7792
or ebx, 0xe56f
add ebx, 0xd441
pop ebx
push edi
push edx
add esp, 4
add edi, 0xf839
and edi, 0x151e8
sub edi, 0x2eae
pop edi
mov edx, dword [ebp - 0x30]
add edx, 0xfe
imul eax, dword [ebp - 0x2c], 0xfe
add eax, 0x56f3663b
imul ecx, dword [ebp - 0x2c], 0xfe
sub eax, ecx
xor edx, eax
imul edx, dword [ebp - 0x2c]
mov dword [ebp - 0x2024], edx
mov edx, dword [ebp - 0x2024]
mov dword [ebp - 0x2028], edx
cmp dword [ebp - 0x2028], 0x63c1
jne 0x402e81
push ecx
xor ecx, 0x1812d
pop ecx
push edx
push edx
add esp, 4
xor edx, 0x3ee9
pop edx
push edi
push ecx
add esp, 4
or edi, 0xf41
sub edi, 0x13695
sub edi, 0x9cfd
xor edi, 0x8b3f
pop edi
mov eax, dword [ebp - 0x14]
add eax, 0xfe
imul ecx, dword [ebp - 0x10], 0xfe
add ecx, 0x56f3663b
imul edx, dword [ebp - 0x10], 0xfe
sub ecx, edx
xor eax, ecx
imul eax, dword [ebp - 0x10]
mov dword [ebp - 0x202c], eax
mov eax, dword [ebp - 0x202c]
mov dword [ebp - 0x2030], eax
mov ecx, dword [ebp - 0x2030]
sub ecx, 0x898
mov dword [ebp - 0x2034], ecx
mov dword [ebp - 0x116c], 1
push ebx
push esi
add esp, 4
or ebx, 0xf234
pop ebx
push esi
sub esi, 0x14908
add esi, 0x2a6e
pop esi
push edx
push edx
add esp, 4
or edx, 0x31df
or edx, 0x14da8
or edx, 0x3d82
pop edx
imul edx, dword [ebp - 0x116c], 0xfe
add edx, 0x56f3663b
imul eax, dword [ebp - 0x116c], 0xfe
sub edx, eax
xor edx, dword [ebp - 0x2034]
imul edx, dword [ebp - 0x116c]
imul ecx, dword [ebp - 0x116c], 0xfe
sub edx, ecx
mov dword [ebp - 0x1170], edx
mov edx, dword [ebp - 0x1170]
mov eax, dword [ebp - 0x116c]
mov dword [ebp - 0x14], edx
mov dword [ebp - 0x10], eax
push ecx
push ebx
add esp, 4
jmp 0x402e5c
xor ecx, 0x7743
add ecx, 0x119d8
or ecx, 0x16525
pop ecx
push eax
push eax
add esp, 4
sub eax, 0xc469
or eax, 0xaf7b
pop eax
push edi
push eax
add esp, 4
jmp 0x402e8e
or edi, 0x68ca
pop edi
push esi
call 0x402ea3
add byte [0x42364e45], bh
dec eax
inc eax
add esp, 4
sub esi, 0xabf0
and esi, 0x17969
pop esi
mov ecx, dword [ebp - 0x14]
add ecx, 0xfe
imul edx, dword [ebp - 0x10], 0xfe
add edx, 0x56f3663b
imul eax, dword [ebp - 0x10], 0xfe
sub edx, eax
xor ecx, edx
imul ecx, dword [ebp - 0x10]
mov dword [ebp - 0x2038], ecx
mov ecx, dword [ebp - 0x2038]
mov dword [ebp - 0x20a4], ecx
lea edx, [ebp - 0xa2c]
mov dword [ebp - 0x418], edx
mov eax, dword [ebp - 0x418]
mov dword [eax + 4], 1
push ebx
add ebx, 0xa840
sub ebx, 0xee26
sub ebx, 0xe26e
call 0x402f25
add byte [eax + 0x44], dl
inc ebp
inc edx
dec ebp
dec edx
dec esi
push eax
cmp al, 0x83
les eax, [ebx + ebx*2]
push ecx
push esi
add esp, 4
and ecx, 0x43e4
pop ecx
mov ecx, dword [ebp - 0x418]
imul edx, dword [ecx + 4], 0xfe
add edx, 0x56f3663b
mov eax, dword [ebp - 0x418]
imul ecx, dword [eax + 4], 0xfe
sub edx, ecx
xor edx, 0x23
mov eax, dword [ebp - 0x418]
imul edx, dword [eax + 4]
mov ecx, dword [ebp - 0x418]
imul eax, dword [ecx + 4], 0xfe
sub edx, eax
mov ecx, dword [ebp - 0x418]
mov dword [ecx], edx
mov edx, dword [ebp - 0x418]
mov dword [ebp - 0x2208], edx
push esi
add esi, 0x4be6
or esi, 0x961c
xor esi, 0x1433f
and esi, 0x11010
pop esi
push edi
push esi
add esp, 4
or edi, 0xbca4
or edi, 0x9eac
sub edi, 0x4da
pop edi
mov dword [ebp - 0x1720], 1
push ecx
jmp 0x402fcb
pop ecx
push ebx
push eax
add esp, 4
and ebx, 0x17742
add ebx, 0x906c
and ebx, 0x661f
pop ebx
push ecx
jmp 0x402fee
sub ecx, 0xec70
pop ecx
mov dword [ebp - 0x220c], 0x38
mov dword [ebp - 0x2210], 0xe6
mov dword [ebp - 0x2214], 0x6e
mov dword [ebp - 0x2218], 0x6e
mov dword [ebp - 0x221c], 0x78
mov dword [ebp - 0x1774], 1
push edx
and edx, 0x65ad
add edx, 0xbb20
xor edx, 0x6bc1
call 0x403051
add byte [edi], bh
dec esi
dec edi
cmp eax, 0x833f3940
les eax, [edx + ebx*2]
push ecx
add ecx, 0xabe5
xor ecx, 0x7485
pop ecx
imul eax, dword [ebp - 0x1774], 0xfe
add eax, 0x56f3663b
imul ecx, dword [ebp - 0x1774], 0xfe
sub eax, ecx
xor eax, 0xe6
imul eax, dword [ebp - 0x1774]
imul edx, dword [ebp - 0x1774], 0xfe
sub eax, edx
mov dword [ebp - 0x1778], eax
push esi
push edx
add esp, 4
and esi, 0xd5bc
pop esi
push edx
push eax
add esp, 4
xor edx, 0x15817
pop edx
push eax
push edi
add esp, 4
and eax, 0xd28a
pop eax
push ebx
push edx
add esp, 4
jmp 0x4030cd
pop ebx
push ecx
call 0x4030de
add byte [edi + 0x32], cl
dec ecx
cmp al, 0x48
inc esi
cmp ecx, dword ds:[edi - 0x7d]
les eax, [ecx + ebx*2]
push edx
push ecx
add esp, 4
and edx, 0x1254
pop edx
push edx
push edx
add esp, 4
add edx, 0x10076
or edx, 0x6821
pop edx
mov eax, dword [ebp - 0xa2c]
add eax, 0xfe
imul ecx, dword [ebp - 0xa28], 0xfe
add ecx, 0x56f3663b
imul edx, dword [ebp - 0xa28], 0xfe
sub ecx, edx
xor eax, ecx
imul eax, dword [ebp - 0xa28]
mov dword [ebp - 0x203c], eax
mov eax, dword [ebp - 0x203c]
mov dword [ebp - 0x2040], eax
mov ecx, dword [ebp - 0x2040]
sub ecx, 0x6e
mov dword [ebp - 0x2044], ecx
mov dword [ebp - 0xaf4], 1
push ebx
and ebx, 0x1724a
xor ebx, 0x1371b
or ebx, 0x17cbd
pop ebx
push edi
push edi
add esp, 4
sub edi, 0xace4
xor edi, 0x13805
xor edi, 0x17c57
add edi, 0x192e
pop edi
imul edx, dword [ebp - 0xaf4], 0xfe
add edx, 0x56f3663b
imul eax, dword [ebp - 0xaf4], 0xfe
sub edx, eax
xor edx, dword [ebp - 0x2044]
imul edx, dword [ebp - 0xaf4]
imul ecx, dword [ebp - 0xaf4], 0xfe
sub edx, ecx
mov dword [ebp - 0xaf8], edx
push ebx
push edi
add esp, 4
add ebx, 0x15e4
or ebx, 0x11219
pop ebx
push edi
or edi, 0xf84
xor edi, 0x17a4b
and edi, 0x17395
pop edi
push edx
push ecx
add esp, 4
sub edx, 0x45f7
pop edx
mov edx, dword [ebp - 0xa2c]
add edx, 0xfe
imul eax, dword [ebp - 0xa28], 0xfe
add eax, 0x56f3663b
imul ecx, dword [ebp - 0xa28], 0xfe
sub eax, ecx
xor edx, eax
imul edx, dword [ebp - 0xa28]
mov dword [ebp - 0x2048], edx
mov edx, dword [ebp - 0x2048]
mov dword [ebp - 0x204c], edx
mov eax, dword [ebp - 0x204c]
add eax, 0x38
mov dword [ebp - 0x2050], eax
mov dword [ebp - 0xafc], 1
push edi
call 0x403266
add byte [eax + 0x33], dl
xor edi, dword [eax]
xor cl, byte [edi + 0x4f]
xor cl, byte [ecx + 0x3c]
add esp, 4
call 0x403277
add byte [edx], bh
dec edi
inc edi
cmp al, 0x43
inc ebp
dec ebx
dec edi
add esp, 4
or edi, 0x15ec1
and edi, 0xdb0b
pop edi
imul ecx, dword [ebp - 0xafc], 0xfe
add ecx, 0x56f3663b
imul edx, dword [ebp - 0xafc], 0xfe
sub ecx, edx
xor ecx, dword [ebp - 0x2050]
imul ecx, dword [ebp - 0xafc]
imul eax, dword [ebp - 0xafc], 0xfe
sub ecx, eax
mov dword [ebp - 0xb00], ecx
push edi
push edx
add esp, 4
xor edi, 0xe2b7
call 0x4032dc
add byte [eax + 0x34], al
inc ecx
xor bh, byte [eax]
inc ecx
dec esp
aas
push eax
add esp, 4
jmp 0x4032e5
pop edi
push edx
and edx, 0x45ca
add edx, 0x1720d
pop edx
push ebx
push eax
add esp, 4
and ebx, 0x980e
sub ebx, 0xb7b4
jmp 0x40330b
and ebx, 0x15d3c
pop ebx
push eax
and eax, 0xd4f
add eax, 0x12289
add eax, 0x13627
pop eax
mov dword [ebp - 0x314], 1
push edi
call 0x403340
add byte [edx], bh
cmp edi, dword ds:[esi]
aaa
inc edx
inc edx
push eax
add esp, 4
sub edi, 0xce34
or edi, 0xb5f6
xor edi, 0xd8ca
pop edi
push edx
push edi
add esp, 4
sub edx, 0x1586c
pop edx
imul ecx, dword [ebp - 0x314], 0xfe
add ecx, 0x56f3663b
imul edx, dword [ebp - 0x314], 0xfe
sub ecx, edx
xor ecx, 2
imul ecx, dword [ebp - 0x314]
imul eax, dword [ebp - 0x314], 0xfe
sub ecx, eax
mov dword [ebp - 0x318], ecx
push edx
push edi
add esp, 4
jmp 0x4033a5
pop edx
push esi
or esi, 0x1077a
pop esi
push edx
push ebx
add esp, 4
call 0x4033c2
add byte [ebp + 0x40], al
dec esp
dec ebp
inc esp
dec ebx
xor eax, 0xc4833735
add al, 0x81
out dx, eax
adc al, 0
add byte [edx - 0x75], bl
invalid
mov dword [ebp - 0x424], 0
call 0x405d0a
mov eax, 0x13379797
pop eax
mov dword [ebp - 0x424], eax
push ecx
sub ecx, 0x160d7
jmp 0x41bdf4
sub ecx, 0x78e
add ecx, 0xf33d
sub ecx, 0x164ed
pop ecx
push ecx
push edi
add esp, 4
or ecx, 0x10fe8
and ecx, 0x12b86
add ecx, 0x85de
pop ecx
mov edx, dword [ebp - 0x2250]
mov dword [ebp - 0x1734], edx
push edi
or edi, 0x84e2
call 0x405d6a
add byte [ebp + 0x46], cl
dec edx
inc ebp
cmp bh, byte [eax]
dec edi
cmp bh, byte [ebx]
add esp, 4
jmp 0x405d73
call 0x405d82
add byte [edx], dh
dec esi
inc esp
xor al, 0x3d
inc esi
cmp ecx, dword [edx + 0x4f]
add esp, 4
pop edi
mov eax, dword [ebp - 0x14]
add eax, 0xfe
imul ecx, dword [ebp - 0x10], 0xfe
add ecx, 0x56f3663b
imul edx, dword [ebp - 0x10], 0xfe
sub ecx, edx
xor eax, ecx
imul eax, dword [ebp - 0x10]
mov dword [ebp - 0x1734], eax
mov eax, dword [ebp - 0x424]
mov dword [ebp - 0x1af8], eax
mov ecx, dword [ebp - 0x1af8]
add ecx, dword [ebp - 0x1734]
mov dword [ebp - 0x424], ecx
push ebx
sub ebx, 0xf6b8
or ebx, 0x10c4b
and ebx, 0x682a
and ebx, 0x1414e
pop ebx
push ebx
push esi
add esp, 4
and ebx, 0x9c74
xor ebx, 0x55cd
sub ebx, 0x152b5
pop ebx
mov byte [ebp - 0xc70], 0x52
mov byte [ebp - 0xc6f], 0xb9
mov byte [ebp - 0xc6e], 0x10
mov byte [ebp - 0xc6d], 0x10
mov byte [ebp - 0xc6c], 0x10
mov byte [ebp - 0xc6b], 0x10
mov byte [ebp - 0xc6a], 0x5a
push ebx
and ebx, 0xaf5e
sub ebx, 0x10e0e
add ebx, 0x6213
and ebx, 0x7812
pop ebx
push ecx
add ecx, 0x175f7
call 0x405e5f
add byte [edx], dh
inc edx
cmp ecx, dword [edx + 0x33]
cmp byte [esi], bh
add esp, 4
pop ecx
mov byte [ebp - 0xc68], 0x52
mov byte [ebp - 0xc67], 0xb9
mov byte [ebp - 0xc66], 0x20
mov byte [ebp - 0xc65], 0x20
mov byte [ebp - 0xc64], 0x20
mov byte [ebp - 0xc63], 0x20
mov byte [ebp - 0xc62], 0x5a
push esi
xor esi, 0x2a85
call 0x405ea8
add byte [ebx + 0x4a], al
dec ebx
dec eax
dec esp
dec edx
add esp, 4
or esi, 0x12140
pop esi
push edx
or edx, 0xe6a7
sub edx, 0x7071
jmp 0x405ec5
pop edx
mov dword [ebp - 0x2254], 0xe
push edi
push ecx
add esp, 4
xor edi, 0x3493
call 0x405eea
add byte [ecx + 0x4a], al
dec ebx
dec eax
inc ecx
cmp al, 0x40
cmp edx, dword [eax - 0x7d]
les eax, [ecx + eax*4]
out 0xb, eax
and al, byte [eax]
add byte [edi + 0x57], bl
sub edi, 0x10f52
add edi, 0x10de9
pop edi
mov edx, 1
imul eax, edx, 0
lea ecx, [ebp + eax - 0xc70]
mov dword [ebp - 0x1738], ecx
push edi
or edi, 0x1615d
xor edi, 0x11a91
pop edi
push esi
push esi
add esp, 4
and esi, 0x1829
pop esi
push ecx
push esi
add esp, 4
and ecx, 0x3c02
sub ecx, 0x13085
jmp 0x405f48
pop ecx
mov dword [ebp - 0x2258], 0xffffffff
push ecx
push edx
add esp, 4
or ecx, 0x785e
jmp 0x405f66
pop ecx
push edx
push eax
add esp, 4
sub edx, 0x14553
sub edx, 0xf31
pop edx
push eax
push edi
add esp, 4
and eax, 0x1871
pop eax
mov edx, dword [ebp - 0x424]
mov dword [ebp - 0x548], edx
jmp 0x405fa2
mov eax, dword [ebp - 0x548]
add eax, 1
mov dword [ebp - 0x548], eax
push edx
push edx
add esp, 4
jmp 0x405fae
and edx, 0x12486
jmp 0x405fb9
add edx, 0x10ef6
pop edx
push esi
or esi, 0xa52a
add esi, 0x9edd
and esi, 0xc800
pop esi
mov ecx, dword [ebp - 0x548]
sub ecx, dword [ebp - 0x424]
cmp ecx, 0xffffffff
jb 0x40601c
push eax
push eax
add esp, 4
add eax, 0x8a05
pop eax
push eax
and eax, 0xc5e7
add eax, 0x8130
sub eax, 0x688c
xor eax, 0x1a99
pop eax
push ecx
push ebx
add esp, 4
sub ecx, 0xbfe1
pop ecx
jmp 0x40624a
mov dword [ebp - 0xd84], 7
mov edx, dword [ebp - 0x548]
mov dword [ebp - 0xb48], edx
push edi
sub edi, 0x1b0f
sub edi, 0xae1a
add edi, 0x14343
add edi, 0xea4b
pop edi
push ebx
push ecx
add esp, 4
sub ebx, 0x7dce
and ebx, 0xe86c
sub ebx, 0xc889
pop ebx
mov eax, dword [ebp - 0x1738]
mov dword [ebp - 0xb44], eax
mov dword [ebp - 0xd88], 0
mov ecx, dword [ebp - 0x548]
cmp ecx, dword [ebp - 0x1738]
jne 0x4060cb
push edx
push edi
add esp, 4
sub edx, 0xca8c
pop edx
push edx
sub edx, 0x14c93
xor edx, 0x541e
call 0x4060ae
add byte [edi], dh
dec esp
xor ecx, dword [ebx + 0x4c]
inc ebp
dec edi
add esp, 4
pop edx
push eax
or eax, 0x1bd
pop eax
mov edx, dword [ebp - 0xd88]
mov dword [ebp - 0x1740], edx
jmp 0x4061fc
cmp dword [ebp - 0xd84], 0
jle 0x4061f0
push eax
push edi
add esp, 4
sub eax, 0x795
xor eax, 0xacc6
pop eax
push eax
or eax, 0x1549b
pop eax
push ecx
push ebx
add esp, 4
xor ecx, 0x8944
and ecx, 0x5c13
sub ecx, 0x169a0
pop ecx
mov eax, dword [ebp - 0xb48]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0xb44]
movzx eax, byte [edx]
cmp ecx, eax
je 0x40618c
push ecx
call 0x40612f
add byte [ecx + 0x4c], cl
cmp eax, 0x4a39403c
inc edx
add esp, 4
jmp 0x406139
pop ecx
push edi
push edx
add esp, 4
xor edi, 0xbbb6
sub edi, 0x51eb
and edi, 0xfc89
pop edi
mov ecx, dword [ebp - 0xb48]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0xb44]
movzx ecx, byte [eax]
cmp edx, ecx
jle 0x406174
mov dword [ebp - 0x173c], 1
jmp 0x40617e
mov dword [ebp - 0x173c], 0xffffffff
mov edx, dword [ebp - 0x173c]
mov dword [ebp - 0xd88], edx
jmp 0x4061f0
push edi
push esi
add esp, 4
sub edi, 0xffa6
or edi, 0x12d44
sub edi, 0x5782
pop edi
push ebx
jmp 0x4061ab
add ebx, 0x11c68
pop ebx
push eax
push ecx
add esp, 4
add eax, 0xe6ae
pop eax
mov eax, dword [ebp - 0xd84]
sub eax, 1
mov dword [ebp - 0xd84], eax
mov ecx, dword [ebp - 0xb48]
add ecx, 1
mov dword [ebp - 0xb48], ecx
mov edx, dword [ebp - 0xb44]
add edx, 1
mov dword [ebp - 0xb44], edx
jmp 0x4060cb
mov eax, dword [ebp - 0xd88]
mov dword [ebp - 0x1740], eax
cmp dword [ebp - 0x1740], 0
jne 0x406245
push edx
jmp 0x40620d
xor edx, 0x3338
call 0x406221
add byte [0x34403f41], bh
cmp ecx, dword [edi + 0x4d]
add esp, 4
pop edx
push eax
push esi
add esp, 4
or eax, 0xb369
and eax, 0x8a5b
pop eax
mov ecx, dword [ebp - 0x548]
mov dword [ebp - 0x414], ecx
jmp 0x406286
jmp 0x405f93
push ecx
push ebx
add esp, 4
add ecx, 0x129bb
add ecx, 0x13326
pop ecx
push edx
push edx
add esp, 4
jmp 0x406269
sub edx, 0x14c89
or edx, 0x17e57
or edx, 0x143a2
pop edx
mov dword [ebp - 0x414], 0
push esi
add esi, 0xe6db
xor esi, 0x12ab8
pop esi
push ebx
push ecx
add esp, 4
sub ebx, 0x7eb5
pop ebx
push esi
push edx
add esp, 4
and esi, 0x16c01
pop esi
push edi
push eax
add esp, 4
and edi, 0x1067c
pop edi
push eax
push ecx
add esp, 4
jmp 0x4062c2
pop eax
push eax
push edi
add esp, 4
add eax, 0xf904
and eax, 0x6748
sub eax, 0xb8d9
call 0x4062e6
add byte [ecx], bh
xor eax, 0x3c3e424b
add esp, 4
pop eax
mov edx, 1
imul eax, edx, 0
lea ecx, [ebp + eax - 0xc68]
mov dword [ebp - 0x1744], ecx
push eax
push edi
add esp, 4
sub eax, 0x12518
pop eax
push edi
and edi, 0x17a6d
pop edi
push edi
push edx
add esp, 4
jmp 0x40631e
add edi, 0x237b
or edi, 0xa313
and edi, 0x14fbb
pop edi
mov dword [ebp - 0x225c], 0xffffffff
push edx
sub edx, 0xc67f
or edx, 0x93b
and edx, 0xc3f
pop edx
push ebx
push eax
add esp, 4
or ebx, 0x35c
and ebx, 0x1791e
sub ebx, 0x11c50
and ebx, 0x6eda
pop ebx
mov edx, dword [ebp - 0x424]
mov dword [ebp - 0x54c], edx
jmp 0x40638a
mov eax, dword [ebp - 0x54c]
add eax, 1
mov dword [ebp - 0x54c], eax
push eax
sub eax, 0x5d30
or eax, 0x7c33
xor eax, 0x745
pop eax
push eax
jmp 0x4063a6
jmp 0x4063ad
pop eax
push eax
sub eax, 0x473
sub eax, 0x16207
pop eax
mov ecx, dword [ebp - 0x54c]
sub ecx, dword [ebp - 0x424]
cmp ecx, 0xffffffff
jb 0x406404
push ecx
xor ecx, 0xe7de
xor ecx, 0x112ba
add ecx, 0x9374
or ecx, 0x13046
pop ecx
push edi
push eax
add esp, 4
or edi, 0x22c5
or edi, 0x310
or edi, 0x6469
pop edi
jmp 0x406632
mov dword [ebp - 0xd8c], 7
mov edx, dword [ebp - 0x54c]
mov dword [ebp - 0xb40], edx
push ebx
push esi
add esp, 4
call 0x40642e
add byte [ebx], bh
xor ecx, dword [eax + 0x45]
inc esp
dec ebx
xor edi, dword [esi]
aaa
add esp, 4
pop ebx
push esi
sub esi, 0x107f4
and esi, 0x338c
pop esi
push ebx
push eax
add esp, 4
xor ebx, 0x63b6
pop ebx
mov eax, dword [ebp - 0x1744]
mov dword [ebp - 0xb3c], eax
mov dword [ebp - 0xd90], 0
mov ecx, dword [ebp - 0x54c]
cmp ecx, dword [ebp - 0x1744]
jne 0x4064b3
push esi
or esi, 0xbc32
pop esi
push eax
push edi
add esp, 4
sub eax, 0x8d83
add eax, 0x12082
pop eax
push edx
push ecx
add esp, 4
xor edx, 0x103bb
add edx, 0x1708c
add edx, 0xa854
pop edx
mov edx, dword [ebp - 0xd90]
mov dword [ebp - 0x174c], edx
jmp 0x4065e4
cmp dword [ebp - 0xd8c], 0
jle 0x4065d8
push ecx
push eax
add esp, 4
add ecx, 0x5235
xor ecx, 0x8436
pop ecx
push edi
push edi
add esp, 4
or edi, 0x717b
or edi, 0x5dae
sub edi, 0xef14
pop edi
push eax
add eax, 0xeff6
pop eax
mov eax, dword [ebp - 0xb40]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0xb3c]
movzx eax, byte [edx]
cmp ecx, eax
je 0x406574
push ecx
add ecx, 0x34ed
pop ecx
push ecx
push edx
add esp, 4
add ecx, 0xfc7b
sub ecx, 0xd0e5
or ecx, 0x54c4
and ecx, 0x13154
pop ecx
push edi
push esi
add esp, 4
sub edi, 0x47c1
pop edi
mov ecx, dword [ebp - 0xb40]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0xb3c]
movzx ecx, byte [eax]
cmp edx, ecx
jle 0x40655c
mov dword [ebp - 0x1748], 1
jmp 0x406566
mov dword [ebp - 0x1748], 0xffffffff
mov edx, dword [ebp - 0x1748]
mov dword [ebp - 0xd90], edx
jmp 0x4065d8
push ecx
push esi
add esp, 4
jmp 0x406580
sub ecx, 0xf99a
sub ecx, 0xcb7f
pop ecx
push ebx
push edx
add esp, 4
jmp 0x406598
pop ebx
push ebx
jmp 0x40659f
jmp 0x4065a5
pop ebx
mov eax, dword [ebp - 0xd8c]
sub eax, 1
mov dword [ebp - 0xd8c], eax
mov ecx, dword [ebp - 0xb40]
add ecx, 1
mov dword [ebp - 0xb40], ecx
mov edx, dword [ebp - 0xb3c]
add edx, 1
mov dword [ebp - 0xb3c], edx
jmp 0x4064b3
mov eax, dword [ebp - 0xd90]
mov dword [ebp - 0x174c], eax
cmp dword [ebp - 0x174c], 0
jne 0x40662d
push ecx
push edi
add esp, 4
sub ecx, 0x1418c
and ecx, 0xeef3
or ecx, 0x8bb0
and ecx, 0x297
pop ecx
push esi
xor esi, 0xf2be
and esi, 0x1286e
sub esi, 0xeeed
pop esi
mov ecx, dword [ebp - 0x54c]
mov dword [ebp - 0xb38], ecx
jmp 0x40666e
jmp 0x40637b
push ecx
add ecx, 0x1851b
add ecx, 0x7b41
pop ecx
push edx
push ebx
add esp, 4
xor edx, 0xf380
call 0x40665a
add byte [ebx], bh
push eax
aas
xor edi, dword [edx]
cmp edi, dword ss:[eax*2 - 0x7efb3b7d]
retf 0x6d0d
push eax
push ebx
add esp, 4
call 0x406680
add byte [ebp + 0x37], al
cmp dh, byte [ebx]
cmp dword [ecx + 0x46], eax
add esp, 4
xor eax, 0x539d
jmp 0x406690
call 0x40669c
add byte [ebp + 0x3e], cl
inc ebx
xor eax, 0xc4834744
add al, 0x58
mov byte [ebp - 0x8e8], 0x45
mov byte [ebp - 0x8e7], 0x78
mov byte [ebp - 0x8e6], 0x69
mov byte [ebp - 0x8e5], 0x74
mov byte [ebp - 0x8e4], 0x50
mov byte [ebp - 0x8e3], 0x72
mov byte [ebp - 0x8e2], 0x6f
mov byte [ebp - 0x8e1], 0x63
mov byte [ebp - 0x8e0], 0x65
mov byte [ebp - 0x8df], 0x73
mov byte [ebp - 0x8de], 0x73
mov byte [ebp - 0x8dd], 0
push ebx
add ebx, 0x8235
or ebx, 0x10363
pop ebx
push esi
push ebx
add esp, 4
xor esi, 0xc9d4
call 0x40671c
add byte [edx + 0x3d], cl
cmp eax, 0x353d383f
xor bh, byte [eax]
add esp, 4
and esi, 0x76d6
pop esi
mov edx, 0x6b
mov word [ebp - 0x1884], dx
mov eax, 0x65
mov word [ebp - 0x1882], ax
mov ecx, 0x72
mov word [ebp - 0x1880], cx
mov edx, 0x6e
mov word [ebp - 0x187e], dx
mov eax, 0x65
mov word [ebp - 0x187c], ax
mov ecx, 0x6c
mov word [ebp - 0x187a], cx
mov edx, 0x33
mov word [ebp - 0x1878], dx
mov eax, 0x32
mov word [ebp - 0x1876], ax
mov ecx, 0x2e
mov word [ebp - 0x1874], cx
mov edx, 0x64
mov word [ebp - 0x1872], dx
mov eax, 0x6c
mov word [ebp - 0x1870], ax
mov ecx, 0x6c
mov word [ebp - 0x186e], cx
xor edx, edx
mov word [ebp - 0x186c], dx
push eax
jmp 0x4067c5
xor eax, 0x12c70
jmp 0x4067d2
pop eax