Function at 0x4096c3
Capabilities:
Contain obfuscated stackstrings
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add esp, 4
or ecx, 0xc19b
sub ecx, 0xc6cc
pop ecx
jmp 0x408cbc
push edx
and edx, 0xe0e5
pop edx
push ebx
push edx
add esp, 4
or ebx, 0x4d95
sub ebx, 0x91df
add ebx, 0xf863
call 0x408cea
add byte [edx + 0x3e], cl
inc ebx
xor cl, byte [ebp + 0x43]
aaa
cmp cl, byte [eax - 0x7d]
les eax, [ebx + ebx*2]
mov dword [ebp - 0x3cc], 0
push edx
add edx, 0x7d21
xor edx, 0x4ecb
pop edx
push edi
sub edi, 0x5542
pop edi
push ecx
push edx
add esp, 4
or ecx, 0x17613
call 0x408d26
add byte [edx + 0x38], cl
aaa
cmp byte [0xc483353e], dh
add al, 0x59
push eax
push ecx
add esp, 4
xor eax, 0x15b67
xor eax, 0x1228e
add eax, 0xad4
pop eax
push ebx
push eax
add esp, 4
jmp 0x408d50
jmp 0x408d55
or ebx, 0x2ac2
pop ebx
mov ecx, 1
imul edx, ecx, 0
lea eax, [ebp + edx - 0xb80]
mov dword [ebp - 0x14c8], eax
push esi
call 0x408d81
add byte [edi], bh
inc ecx
cmp eax, 0x423d453b
dec ecx
dec esi
add esp, 4
pop esi
push esi
push ecx
add esp, 4
sub esi, 0x15385
call 0x408d9f
add byte [edx], bh
cmp eax, dword [esi + 0x34]
inc esp
dec edx
dec esi
cmp eax, 0x4c48341
pop esi
mov dword [ebp - 0x1fac], 0xffffffff
push ebx
jmp 0x408db5
sub ebx, 0x51f9
jmp 0x408dc0
sub ebx, 0x64d1
pop ebx
push ecx
push eax
add esp, 4
sub ecx, 0x151e3
and ecx, 0x7fef
sub ecx, 0x1b99
pop ecx
mov ecx, dword [ebp - 0x3c0]
mov dword [ebp - 0x4d0], ecx
jmp 0x408dfc
mov edx, dword [ebp - 0x4d0]
add edx, 1
mov dword [ebp - 0x4d0], edx
push edx
xor edx, 0xf589
sub edx, 0x19ec
and edx, 0x736e
pop edx
push eax
and eax, 0x1eb3
sub eax, 0x6b89
pop eax
push eax
jmp 0x408e27
sub eax, 0x87c9
pop eax
mov eax, dword [ebp - 0x4d0]
sub eax, dword [ebp - 0x3c0]
cmp eax, 0xffffffff
jb 0x408e76
push esi
xor esi, 0x16c5
add esi, 0xdceb
call 0x408e59
add byte [eax + 0x45], dl
inc esi
xor cl, byte [edi + 0x46]
inc esp
add esp, 4
and esi, 0x74e6
pop esi
push edi
add edi, 0x11f4
sub edi, 0xc011
pop edi
jmp 0x4090a4
mov dword [ebp - 0xc10], 7
mov ecx, dword [ebp - 0x4d0]
mov dword [ebp - 0xa60], ecx
push ebx
jmp 0x408e96
jmp 0x408e9c
pop ebx
push edx
push ebx
add esp, 4
jmp 0x408eab
add edx, 0x17907
jmp 0x408eb7
add edx, 0xbc84
pop edx
mov edx, dword [ebp - 0x14c8]
mov dword [ebp - 0x9f0], edx
mov dword [ebp - 0xc14], 0
mov eax, dword [ebp - 0x4d0]
cmp eax, dword [ebp - 0x14c8]
jne 0x408f25
push ecx
push esi
add esp, 4
call 0x408ef3
add byte [ecx + 0x36], cl
dec esi
inc ecx
dec edx
xor eax, 0x8104c483
leave
cdq
cmc
add byte [eax], al
jmp 0x408f01
pop ecx
push ecx
push edx
add esp, 4
and ecx, 0x9437
sub ecx, 0x126a0
pop ecx
mov ecx, dword [ebp - 0xc14]
mov dword [ebp - 0x14d0], ecx
jmp 0x409056
cmp dword [ebp - 0xc10], 0
jle 0x40904a
push edi
push edx
add esp, 4
and edi, 0x8348
add edi, 0xa273
sub edi, 0x13571
pop edi
push edx
and edx, 0x9531
xor edx, 0xa948
and edx, 0x28fc
and edx, 0x9a87
pop edx
mov edx, dword [ebp - 0xa60]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x9f0]
movzx edx, byte [ecx]
cmp eax, edx
je 0x408fe6
push ebx
push ecx
add esp, 4
or ebx, 0x4e7a
add ebx, 0xcd7e
sub ebx, 0x127d1
or ebx, 0x88f8
pop ebx
push edi
xor edi, 0x11025
sub edi, 0x27af
or edi, 0x12ecb
pop edi
mov eax, dword [ebp - 0xa60]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x9f0]
movzx eax, byte [edx]
cmp ecx, eax
jle 0x408fce
mov dword [ebp - 0x14cc], 1
jmp 0x408fd8
mov dword [ebp - 0x14cc], 0xffffffff
mov ecx, dword [ebp - 0x14cc]
mov dword [ebp - 0xc14], ecx
jmp 0x40904a
push ebx
call 0x408ff7
add byte [ebx + 0x38], cl
dec esp
push eax
aaa
inc edi
inc eax
dec ebp
dec ebp
dec edx
add esp, 4
sub ebx, 0x14700
pop ebx
push esi
push edx
add esp, 4
call 0x409014
add byte [ebx + 0x43], al
aas
inc ebp
inc ecx
xor bh, byte [ebx]
push eax
add esp, 4
pop esi
mov edx, dword [ebp - 0xc10]
sub edx, 1
mov dword [ebp - 0xc10], edx
mov eax, dword [ebp - 0xa60]
add eax, 1
mov dword [ebp - 0xa60], eax
mov ecx, dword [ebp - 0x9f0]
add ecx, 1
mov dword [ebp - 0x9f0], ecx
jmp 0x408f25
mov edx, dword [ebp - 0xc14]
mov dword [ebp - 0x14d0], edx
cmp dword [ebp - 0x14d0], 0
jne 0x40909f
push ebx
push edx
add esp, 4
add ebx, 0x12cff
add ebx, 0xaa91
pop ebx
push edi
push ebx
add esp, 4
xor edi, 0x8455
add edi, 0x12f6b
jmp 0x40908a
or edi, 0x143bf
pop edi
mov eax, dword [ebp - 0x4d0]
mov dword [ebp - 0xa5c], eax
jmp 0x4090e0
jmp 0x408ded
push edx
xor edx, 0x16a8
and edx, 0xb50c
jmp 0x4090ba
pop edx
push edi
push eax
add esp, 4
or edi, 0xb2d7
and edi, 0x8dbd
jmp 0x4090d5
pop edi
mov dword [ebp - 0xa5c], 0
push ebx
or ebx, 0xf82c
or ebx, 0x11823
jmp 0x4090f3
pop ebx
push ecx
push ebx
add esp, 4
add ecx, 0x15335
or ecx, 0x14ef9
sub ecx, 0x10864
xor ecx, 0x12733
pop ecx
mov byte [ebp - 0x804], 0x45
mov byte [ebp - 0x803], 0x78
mov byte [ebp - 0x802], 0x69
mov byte [ebp - 0x801], 0x74
mov byte [ebp - 0x800], 0x50
mov byte [ebp - 0x7ff], 0x72
mov byte [ebp - 0x7fe], 0x6f
mov byte [ebp - 0x7fd], 0x63
mov byte [ebp - 0x7fc], 0x65
mov byte [ebp - 0x7fb], 0x73
mov byte [ebp - 0x7fa], 0x73
mov byte [ebp - 0x7f9], 0
push eax
call 0x409176
add byte [eax + 0x46], cl
cmp ecx, dword [eax + 0x3a]
cmp dword [esi + esi + 0x41], eax
add esp, 4
or eax, 0x1590
and eax, 0xc548
and eax, 0x18619
pop eax
push edx
push eax
add esp, 4
and edx, 0x129e8
pop edx
mov ecx, 0x6b
mov word [ebp - 0x1628], cx
mov edx, 0x65
mov word [ebp - 0x1626], dx
mov eax, 0x72
mov word [ebp - 0x1624], ax
mov ecx, 0x6e
mov word [ebp - 0x1622], cx
mov edx, 0x65
mov word [ebp - 0x1620], dx
mov eax, 0x6c
mov word [ebp - 0x161e], ax
mov ecx, 0x33
mov word [ebp - 0x161c], cx
mov edx, 0x32
mov word [ebp - 0x161a], dx
mov eax, 0x2e
mov word [ebp - 0x1618], ax
mov ecx, 0x64
mov word [ebp - 0x1616], cx
mov edx, 0x6c
mov word [ebp - 0x1614], dx
mov eax, 0x6c
mov word [ebp - 0x1612], ax
xor ecx, ecx
mov word [ebp - 0x1610], cx
push ebx
push esi
add esp, 4
or ebx, 0x124c1
xor ebx, 0xfd01
call 0x40924f
add byte [edi + 0x4f], cl
cmp eax, 0x3a45363b
add esp, 4
pop ebx
push ebx
or ebx, 0x17488
pop ebx
push ebx
or ebx, 0x16bf4
pop ebx
push edi
push esi
add esp, 4
and edi, 0x14cd3
xor edi, 0x153bc
pop edi
push ecx
call 0x409285
add byte [edx], dh
dec ebx
dec esi
aaa
cmp byte [edx + edi + 0x3f], al
aaa
add esp, 4
sub ecx, 0x1116c
or ecx, 0x5306
pop ecx
mov edx, dword fs:[0x18]
mov dword [ebp - 0x1890], edx
mov eax, dword [ebp - 0x1890]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0x1894], ecx
mov edx, dword [ebp - 0x1894]
mov dword [ebp - 0x14d4], edx
push ebx
push edi
add esp, 4
sub ebx, 0x1083b
xor ebx, 0x15fc
pop ebx
push ecx
push edx
add esp, 4
or ecx, 0x7972
jmp 0x4092e2
xor ecx, 0x15d7
and ecx, 0x9122
pop ecx
cmp dword [ebp - 0x14d4], 0
jne 0x409307
mov dword [ebp - 0x2e0], 0
jmp 0x4095c3
mov eax, dword [ebp - 0x14d4]
mov ecx, dword [eax + 0xc]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0xc20], edx
push ecx
push esi
add esp, 4
or ecx, 0x1356d
pop ecx
push edi
jmp 0x40932b
call 0x409339
add byte [edi + 0x47], cl
xor al, 0x4e
inc ecx
inc esi
cmp al, 0x34
add esp, 4
xor edi, 0xc883
jmp 0x40934a
pop edi
cmp dword [ebp - 0xc20], 0
jne 0x409363
mov dword [ebp - 0x2e0], 0
jmp 0x4095c3
mov eax, dword [ebp - 0xc20]
mov dword [ebp - 0x4d4], eax
push edx
push edi
add esp, 4
jmp 0x40937a
sub edx, 0x29e5
pop edx
push eax
jmp 0x40938b
pop eax
push ebx
push ecx
add esp, 4
add ebx, 0x9fc3
jmp 0x4093a0
pop ebx
lea ecx, [ebp - 0x1628]
mov dword [ebp - 0xc1c], ecx
mov edx, dword [ebp - 0x4d4]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0xc18], eax
xor ecx, ecx
mov word [ebp - 0x1f8], cx
xor edx, edx
mov word [ebp - 0x100], dx
push ebx
and ebx, 0xf37e
sub ebx, 0x157aa
or ebx, 0x10068
and ebx, 0xe231
pop ebx
push ecx
push eax
add esp, 4
sub ecx, 0x1b0
pop ecx
push edi
push ecx
add esp, 4
and edi, 0xe473
pop edi
mov eax, dword [ebp - 0xc18]
mov cx, word [eax]
mov word [ebp - 0xf7e], cx
mov edx, dword [ebp - 0xc18]
add edx, 2
mov dword [ebp - 0xc18], edx
mov ax, word [ebp - 0xf7e]
mov word [ebp - 0x1f8], ax
mov ecx, dword [ebp - 0xc1c]
mov dx, word [ecx]
mov word [ebp - 0xf80], dx
mov eax, dword [ebp - 0xc1c]
add eax, 2
mov dword [ebp - 0xc1c], eax
mov cx, word [ebp - 0xf80]
mov word [ebp - 0x100], cx
push eax
push esi
add esp, 4
add eax, 0x141ed
or eax, 0x16417
sub eax, 0xd16f
and eax, 0x8638
pop eax
push eax
jmp 0x40947f
xor eax, 0xdcd1
and eax, 0x1337
pop eax
movzx edx, word [ebp - 0x100]
test edx, edx
jne 0x4094af
movzx eax, word [ebp - 0x1f8]
movzx ecx, word [ebp - 0x100]
sub eax, ecx
mov dword [ebp - 0x1498], eax
jmp 0x409512
movzx edx, word [ebp - 0x1f8]
movzx eax, word [ebp - 0x100]
cmp edx, eax
je 0x4093ce
movzx ecx, word [ebp - 0x1f8]
xor ecx, 0x20
movzx edx, word [ebp - 0x100]
cmp ecx, edx
je 0x4093ce
movzx eax, word [ebp - 0x1f8]
movzx ecx, word [ebp - 0x100]
cmp eax, ecx
jge 0x4094fc
mov dword [ebp - 0x14d8], 0xffffffff
jmp 0x409506
mov dword [ebp - 0x14d8], 1
mov edx, dword [ebp - 0x14d8]
mov dword [ebp - 0x1498], edx
cmp dword [ebp - 0x1498], 0
jne 0x40955b
push esi
or esi, 0x917e
sub esi, 0x14f4
add esi, 0x780a
pop esi
push ebx
push edx
add esp, 4
add ebx, 0x24aa
sub ebx, 0x78d7
sub ebx, 0xba3e
sub ebx, 0xee29
pop ebx
mov eax, dword [ebp - 0x4d4]
mov dword [ebp - 0x2e0], eax
jmp 0x4095c3
push ecx
push edx
add esp, 4
call 0x40956e
add byte [edx + 0x42], al
inc ecx
xor edi, dword [ecx]
cmp al, byte [ebx + 0x47]
add esp, 4
add ecx, 0xaa60
pop ecx
push eax
call 0x409589
add byte [ecx], bh
aas
cmp ecx, dword [ebx + 0x3c]
inc esp
cmp al, 0x34
dec ebx
dec ebp
add esp, 4
pop eax
mov ecx, dword [ebp - 0x4d4]
mov edx, dword [ecx]
mov dword [ebp - 0x4d4], edx
mov eax, dword [ebp - 0x4d4]
cmp eax, dword [ebp - 0xc20]
je 0x4095b9
mov ecx, dword [ebp - 0x4d4]
cmp dword [ecx + 0x30], 0
jne 0x40936f
mov dword [ebp - 0x2e0], 0
push edx
or edx, 0xa279
add edx, 0x139af
or edx, 0x10c74
pop edx
push esi
push esi
add esp, 4
call 0x4095eb
add byte [edi + 0x4a], cl
inc ecx
cmp bh, byte [ebx + eax*2]
inc edi
inc edi
cmp al, 0x83
les eax, [ecx + eax*4]
into
mov cl, 0xc
add dword [eax], eax
pop esi
cmp dword [ebp - 0x2e0], 0
jne 0x409f0e
mov edx, 0x6b
mov word [ebp - 0x16cc], dx
mov eax, 0x65
mov word [ebp - 0x16ca], ax
mov ecx, 0x72
mov word [ebp - 0x16c8], cx
mov edx, 0x6e
mov word [ebp - 0x16c6], dx
mov eax, 0x65
mov word [ebp - 0x16c4], ax
mov ecx, 0x6c
mov word [ebp - 0x16c2], cx
mov edx, 0x33
mov word [ebp - 0x16c0], dx
mov eax, 0x32
mov word [ebp - 0x16be], ax
mov ecx, 0x2e
mov word [ebp - 0x16bc], cx
mov edx, 0x64
mov word [ebp - 0x16ba], dx
mov eax, 0x6c
mov word [ebp - 0x16b8], ax
mov ecx, 0x6c
mov word [ebp - 0x16b6], cx
xor edx, edx
mov word [ebp - 0x16b4], dx
push ebx
push ebx
add esp, 4
sub ebx, 0xbc1a
pop ebx
push ebx
push edx
add esp, 4
jmp 0x4096b4
call 0x4096c3
add byte [eax + 0x32], al
inc esi
dec ecx
cmp edi, dword [ecx]
push eax
dec edi
add esp, 4
add ebx, 0x2854
pop ebx
mov byte [ebp - 0x820], 0x4c
mov byte [ebp - 0x81f], 0x6f
mov byte [ebp - 0x81e], 0x61
mov byte [ebp - 0x81d], 0x64
mov byte [ebp - 0x81c], 0x4c
mov byte [ebp - 0x81b], 0x69
mov byte [ebp - 0x81a], 0x62
mov byte [ebp - 0x819], 0x72
mov byte [ebp - 0x818], 0x61
mov byte [ebp - 0x817], 0x72
mov byte [ebp - 0x816], 0x79
mov byte [ebp - 0x815], 0x57
mov byte [ebp - 0x814], 0
mov eax, dword fs:[0x18]
mov dword [ebp - 0x1898], eax
mov ecx, dword [ebp - 0x1898]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x189c], edx
mov eax, dword [ebp - 0x189c]
mov dword [ebp - 0x14dc], eax
push eax
push edx
add esp, 4
xor eax, 0x808
pop eax
push edx
push edx
add esp, 4
add edx, 0x63e9
and edx, 0x131af
xor edx, 0xd273
jmp 0x409778
pop edx
push edi
and edi, 0xecb9
pop edi
cmp dword [ebp - 0x14dc], 0
jne 0x409799
mov dword [ebp - 0x6ec], 0
jmp 0x409a55
mov ecx, dword [ebp - 0x14dc]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xc2c], eax
push ecx
or ecx, 0x8896
add ecx, 0xbca8
sub ecx, 0x14f6b
pop ecx
push edi
xor edi, 0x12714
pop edi
push eax
and eax, 0xf62a
pop eax
push esi
xor esi, 0x17483
or esi, 0x103fe
pop esi
cmp dword [ebp - 0xc2c], 0
jne 0x4097f5
mov dword [ebp - 0x6ec], 0
jmp 0x409a55
mov ecx, dword [ebp - 0xc2c]
mov dword [ebp - 0x4d8], ecx
push ebx
xor ebx, 0x16387
xor ebx, 0x1524c
or ebx, 0x1744
pop ebx
push esi
push eax
add esp, 4
and esi, 0x10f06
and esi, 0x30b
xor esi, 0x164b7
or esi, 0xbee6
pop esi
lea edx, [ebp - 0x16cc]
mov dword [ebp - 0xc28], edx
mov eax, dword [ebp - 0x4d8]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xc24], ecx
xor edx, edx
mov word [ebp - 0x1fc], dx
xor eax, eax
mov word [ebp - 0x104], ax
push ebx
or ebx, 0x20d2
xor ebx, 0x6b6f
or ebx, 0x1384c
and ebx, 0x15672
pop ebx
push eax
push ecx
add esp, 4
sub eax, 0x17282
add eax, 0x14f4d
or eax, 0x1568c
pop eax
mov ecx, dword [ebp - 0xc24]
mov dx, word [ecx]
mov word [ebp - 0xf82], dx
mov eax, dword [ebp - 0xc24]
add eax, 2
mov dword [ebp - 0xc24], eax
mov cx, word [ebp - 0xf82]
mov word [ebp - 0x1fc], cx
mov edx, dword [ebp - 0xc28]
mov ax, word [edx]
mov word [ebp - 0xf84], ax
mov ecx, dword [ebp - 0xc28]
add ecx, 2
mov dword [ebp - 0xc28], ecx
mov dx, word [ebp - 0xf84]
mov word [ebp - 0x104], dx
push edi
call 0x4098fb
add byte [esi], bh
dec eax
xor eax, 0x4a3d4735
add esp, 4
pop edi
push edx
add edx, 0xd6cd
jmp 0x40990f
pop edx
push eax
sub eax, 0x2b0c
sub eax, 0x17eb8
pop eax
movzx eax, word [ebp - 0x104]
test eax, eax
jne 0x409941
movzx ecx, word [ebp - 0x1fc]
movzx edx, word [ebp - 0x104]
sub ecx, edx
mov dword [ebp - 0x14e4], ecx
jmp 0x4099a4
movzx eax, word [ebp - 0x1fc]
movzx ecx, word [ebp - 0x104]
cmp eax, ecx
je 0x409860
movzx edx, word [ebp - 0x1fc]
xor edx, 0x20
movzx eax, word [ebp - 0x104]
cmp edx, eax
je 0x409860
movzx ecx, word [ebp - 0x1fc]
movzx edx, word [ebp - 0x104]
cmp ecx, edx
jge 0x40998e
mov dword [ebp - 0x14e0], 0xffffffff
jmp 0x409998
mov dword [ebp - 0x14e0], 1
mov eax, dword [ebp - 0x14e0]
mov dword [ebp - 0x14e4], eax
cmp dword [ebp - 0x14e4], 0
jne 0x4099ed
push ebx
push eax
add esp, 4
add ebx, 0x497c
sub ebx, 0xd694
sub ebx, 0x2ae
pop ebx
push esi
call 0x4099d5
add byte [ecx + 0x36], cl
dec eax
dec eax
inc esp
inc eax
aaa
inc ecx
add esp, 4
xor esi, 0xf5ea
pop esi
mov ecx, dword [ebp - 0x4d8]
mov dword [ebp - 0x6ec], ecx
jmp 0x409a55
push esi
push ebx
add esp, 4
or esi, 0x1359e
pop esi
push eax
push ecx
add esp, 4
jmp 0x409a03
sub eax, 0xfd16
call 0x409a15
add byte [esp + eax*2], bh
dec edx
inc ebp
cmp eax, 0x4c48350
add eax, 0x1947
pop eax
mov edx, dword [ebp - 0x4d8]
mov eax, dword [edx]
mov dword [ebp - 0x4d8], eax
mov ecx, dword [ebp - 0x4d8]
cmp ecx, dword [ebp - 0xc2c]
je 0x409a4b
mov edx, dword [ebp - 0x4d8]
cmp dword [edx + 0x30], 0
jne 0x409801
mov dword [ebp - 0x6ec], 0
push ebx
push eax
add esp, 4
add ebx, 0xb0c4
xor ebx, 0x16972
jmp 0x409a6b
sub ebx, 0x2a99
pop ebx
push edx
push esi
add esp, 4
call 0x409a83
add byte [ebx + 0x32], cl
xor eax, 0x834d433c
les eax, [edx + ebx*2]
cmp dword [ebp - 0x6ec], 0
jne 0x409ad1
push ecx
and ecx, 0x1578a
pop ecx
push ebx
push eax
add esp, 4
sub ebx, 0x1226d
jmp 0x409aab
add ebx, 0x8f21
call 0x409abe
add byte [ebp + 0x3e], al
cmp eax, 0x4f323b35
add esp, 4
pop ebx
mov dword [ebp - 0x738], 0
jmp 0x40a5f8
push edi
call 0x409ae1
add byte [esi + 0x3e], cl
dec ecx
dec ebp
inc eax
cmp eax, dword [ebx + 0x4d]
inc ebx
add esp, 4
sub edi, 0x89e2
add edi, 0x13387
pop edi
push eax
push edi
add esp, 4
sub eax, 0x658
and eax, 0x14f39
pop eax
mov eax, dword [ebp - 0x6ec]
mov ecx, dword [eax + 0x18]
mov dword [ebp - 0x2f8], ecx
mov dword [ebp - 0x6fc], 0
mov edx, dword [ebp - 0x2f8]
mov dword [ebp - 0x14e8], edx
cmp dword [ebp - 0x14e8], 0
jne 0x409b42
mov eax, dword [ebp - 0x6fc]
mov dword [ebp - 0x3c4], eax
jmp 0x409e33
mov ecx, dword [ebp - 0x14e8]
mov edx, dword [ebp - 0x2f8]
add edx, dword [ecx + 0x3c]
mov dword [ebp - 0x14ec], edx
jne 0x409b6a
mov eax, dword [ebp - 0x6fc]
mov dword [ebp - 0x3c4], eax
jmp 0x409e33
mov ecx, 8
imul edx, ecx, 0
mov eax, dword [ebp - 0x14ec]
mov ecx, dword [eax + edx + 0x78]
mov dword [ebp - 0x14f0], ecx
cmp dword [ebp - 0x14f0], 0
jne 0x409b9c
mov edx, dword [ebp - 0x6fc]
mov dword [ebp - 0x3c4], edx
jmp 0x409e33
mov eax, dword [ebp - 0x2f8]
add eax, dword [ebp - 0x14f0]
mov dword [ebp - 0x6f0], eax
jne 0x409bc1
mov ecx, dword [ebp - 0x6fc]
mov dword [ebp - 0x3c4], ecx
jmp 0x409e33
mov edx, dword [ebp - 0x6f0]
mov eax, dword [ebp - 0x2f8]
add eax, dword [edx + 0x20]
mov dword [ebp - 0x18a0], eax
mov ecx, dword [ebp - 0x6f0]
mov edx, dword [ebp - 0x2f8]
add edx, dword [ecx + 0x24]
mov dword [ebp - 0x18a4], edx
mov eax, dword [ebp - 0x6f0]
mov ecx, dword [ebp - 0x2f8]
add ecx, dword [eax + 0x1c]
mov dword [ebp - 0x18a8], ecx
mov dword [ebp - 0x6f4], 0
jmp 0x409c1b
mov edx, dword [ebp - 0x6f4]
add edx, 1
mov dword [ebp - 0x6f4], edx
mov eax, dword [ebp - 0x6f0]
mov ecx, dword [ebp - 0x6f4]
cmp ecx, dword [eax + 0x18]
jae 0x409e27
mov edx, dword [ebp - 0x6f4]
mov eax, dword [ebp - 0x18a0]
mov ecx, dword [ebp - 0x2f8]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x6f8], ecx
mov edx, dword [ebp - 0x6f4]
mov eax, dword [ebp - 0x18a4]
movzx ecx, word [eax + edx*2]
mov edx, dword [ebp - 0x18a8]
mov eax, dword [ebp - 0x2f8]
add eax, dword [edx + ecx*4]
mov dword [ebp - 0x18ac], eax
mov dword [ebp - 0x180], 0
jmp 0x409c8b
mov ecx, dword [ebp - 0x180]
add ecx, 1
mov dword [ebp - 0x180], ecx
mov edx, dword [ebp - 0x6f8]
add edx, dword [ebp - 0x180]
movsx eax, byte [edx]
test eax, eax
je 0x409d3d
mov ecx, dword [ebp - 0x180]
movsx edx, byte [ebp + ecx - 0x820]
test edx, edx
je 0x409d3d
push edx
push esi
add esp, 4
or edx, 0x569d
and edx, 0x154a4
and edx, 0x5bb4
pop edx
push ecx
push eax
add esp, 4
and ecx, 0x98a1
pop ecx
push esi
sub esi, 0x64e3
or esi, 0x9cd4
pop esi
mov eax, dword [ebp - 0x6f8]
add eax, dword [ebp - 0x180]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x180]
movsx eax, byte [ebp + edx - 0x820]
cmp ecx, eax
je 0x409d2f
mov ecx, dword [ebp - 0x6f8]
add ecx, dword [ebp - 0x180]
movsx edx, byte [ecx]
xor edx, 0x20
mov eax, dword [ebp - 0x180]
movsx ecx, byte [ebp + eax - 0x820]
cmp edx, ecx
jne 0x409d36
jmp 0x409c7c
jmp 0x409d3d
push ecx
sub ecx, 0xa3ff
pop ecx
push edi
push edi
add esp, 4
and edi, 0x2377
pop edi
push edi
call 0x409d5f
add byte [edi], dh
inc edi
cmp al, 0x49
inc esi
cmp eax, dword ds:[ebx + 0x575f04c4]
push eax
add esp, 4
and edi, 0x11101
pop edi
mov edx, dword [ebp - 0x6f8]
add edx, dword [ebp - 0x180]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x180]
movsx edx, byte [ebp + ecx - 0x820]
cmp eax, edx
jne 0x409d9c
mov dword [ebp - 0xc30], 0
jmp 0x409e0b
push edx
push eax
add esp, 4
call 0x409db1
add byte [ebp + 0x41], cl
dec ebp
dec esp
inc esp
inc ecx
xor eax, dword [esi + 0x45]
cmp al, 0x83
les eax, [ecx + eax*4]
retf 0xf67
cmp dword [ebp - 0xc30], 0
jne 0x409e22
mov ecx, dword [ebp - 0x18ac]
mov dword [ebp - 0x3c4], ecx
jmp 0x409e33
jmp 0x409c0c
mov edx, dword [ebp - 0x6fc]
mov dword [ebp - 0x3c4], edx
cmp dword [ebp - 0x3c4], 0
je 0x409f0e
push edi
jmp 0x409e47
jmp 0x409e4f
or edi, 0xc003
pop edi
push ebx
or ebx, 0x8e17
jmp 0x409e65
or ebx, 0xe8d8
or ebx, 0x997c
pop ebx
mov eax, dword [ebp - 0x3c4]
mov dword [ebp - 0x18b0], eax
push edi
push ebx
add esp, 4
add edi, 0x99d3
or edi, 0x4046
call 0x409e9e
add byte [edx + 0x33], al
cmp al, byte [edi + 0x3a]
cmp byte ss:[0x4c4834f], dh
pop edi
push edx
and edx, 0x11f0d
xor edx, 0x744f
pop edx
mov ecx, dword [ebp - 0x18b0]
mov dword [ebp - 0x18b4], ecx
lea edx, [ebp - 0x1628]
push edx
call dword [ebp - 0x18b4]
test eax, eax
jne 0x409f0e
push edx
add edx, 0x116e7
and edx, 0x1308b
jmp 0x409ee1
pop edx
push edx
jmp 0x409ee8
xor edx, 0xeb57
call 0x409efb
add byte [edi + 0x36], al
cmp dword [edx], edi
xor eax, 0xc4833a34
add al, 0x5a
mov dword [ebp - 0x738], 0
jmp 0x40a5f8
push ecx
push edi
add esp, 4
xor ecx, 0x4072
xor ecx, 0x86ee
jmp 0x409f24
call 0x409f34
add byte [ebp + 0x40], al
cmp dword [edx + esi + 0x47], ecx
inc ecx
xor edi, dword [esi]
xor eax, 0x5904c483
push edx
add edx, 0x15a26
pop edx
mov eax, dword fs:[0x18]
mov dword [ebp - 0x18b8], eax
mov ecx, dword [ebp - 0x18b8]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x18bc], edx
mov eax, dword [ebp - 0x18bc]
mov dword [ebp - 0x14f4], eax
push eax
jmp 0x409f6d
pop eax
push esi
push edx
add esp, 4
or esi, 0x11cf9
sub esi, 0x13c1
add esi, 0x5b43
call 0x409f95
add byte [ebp + 0x4a], cl
cmp byte [edx], bh
dec eax
cmp al, 0x36
cmp eax, 0x4c48349
pop esi
cmp dword [ebp - 0x14f4], 0
jne 0x409fb1
mov dword [ebp - 0x2e0], 0
jmp 0x40a258
mov ecx, dword [ebp - 0x14f4]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xc3c], eax
push edx
and edx, 0xdbc6
sub edx, 0xf832
and edx, 0x6fc4
pop edx
push ebx
push ecx
add esp, 4
xor ebx, 0x1150c
jmp 0x409fe8
sub ebx, 0x11ed7
or ebx, 0x79b2
pop ebx
cmp dword [ebp - 0xc3c], 0
jne 0x40a00d
mov dword [ebp - 0x2e0], 0
jmp 0x40a258
mov ecx, dword [ebp - 0xc3c]
mov dword [ebp - 0x4dc], ecx
push esi
xor esi, 0xff31
xor esi, 0x1648a
or esi, 0x11085
xor esi, 0x10ff4
pop esi
push esi
push esi
add esp, 4
or esi, 0x8ac4
sub esi, 0x61e2
xor esi, 0xe33d
pop esi
lea edx, [ebp - 0x1628]
mov dword [ebp - 0xc38], edx
mov eax, dword [ebp - 0x4dc]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xc34], ecx
xor edx, edx
mov word [ebp - 0x200], dx
xor eax, eax
mov word [ebp - 0x34], ax
push eax
push esi
add esp, 4
sub eax, 0x5301
pop eax
push ebx
push ecx
add esp, 4
or ebx, 0x10230
sub ebx, 0x1189c
or ebx, 0xdef
pop ebx
push eax
add eax, 0x619d
add eax, 0x145ae
pop eax
mov ecx, dword [ebp - 0xc34]
mov dx, word [ecx]
mov word [ebp - 0xf86], dx
mov eax, dword [ebp - 0xc34]
add eax, 2
mov dword [ebp - 0xc34], eax
mov cx, word [ebp - 0xf86]
mov word [ebp - 0x200], cx
mov edx, dword [ebp - 0xc38]
mov ax, word [edx]
mov word [ebp - 0xf88], ax
mov ecx, dword [ebp - 0xc38]
add ecx, 2
mov dword [ebp - 0xc38], ecx
mov dx, word [ebp - 0xf88]
mov word [ebp - 0x34], dx
push edi
push edi
add esp, 4
xor edi, 0x5644
sub edi, 0x6fad
add edi, 0x7d69
and edi, 0x1dc5
pop edi
push ebx
or ebx, 0x1333a
add ebx, 0xf90b
sub ebx, 0x531d
pop ebx
movzx eax, word [ebp - 0x34]
test eax, eax
jne 0x40a14d
movzx ecx, word [ebp - 0x200]
movzx edx, word [ebp - 0x34]
sub ecx, edx
mov dword [ebp - 0x14fc], ecx
jmp 0x40a1a7
movzx eax, word [ebp - 0x200]
movzx ecx, word [ebp - 0x34]
cmp eax, ecx
je 0x40a075
movzx edx, word [ebp - 0x200]
xor edx, 0x20
movzx eax, word [ebp - 0x34]
cmp edx, eax
je 0x40a075
movzx ecx, word [ebp - 0x200]
movzx edx, word [ebp - 0x34]
cmp ecx, edx
jge 0x40a191
mov dword [ebp - 0x14f8], 0xffffffff
jmp 0x40a19b
mov dword [ebp - 0x14f8], 1
mov eax, dword [ebp - 0x14f8]
mov dword [ebp - 0x14fc], eax
cmp dword [ebp - 0x14fc], 0
jne 0x40a1f0
push edi
push eax
add esp, 4
and edi, 0x9486
call 0x40a1c7
add byte [ebx + esi], dh
aas
dec ecx
dec eax
add esp, 4
pop edi
push edi
push edx
add esp, 4
call 0x40a1de
add byte [edx + 0x38], al
cmp edi, dword ss:[ebx]
inc edx
cmp bh, byte [esi]
add esp, 4
pop edi
mov ecx, dword [ebp - 0x4dc]
mov dword [ebp - 0x2e0], ecx
jmp 0x40a258
push eax
push ecx
add esp, 4
and eax, 0x16314
add eax, 0x138a
jmp 0x40a207
pop eax
push eax
and eax, 0x13271
jmp 0x40a215
or eax, 0xb772
sub eax, 0x154f0
pop eax
mov edx, dword [ebp - 0x4dc]
mov eax, dword [edx]
mov dword [ebp - 0x4dc], eax
mov ecx, dword [ebp - 0x4dc]
cmp ecx, dword [ebp - 0xc3c]
je 0x40a24e
mov edx, dword [ebp - 0x4dc]
cmp dword [edx + 0x30], 0
jne 0x40a019
mov dword [ebp - 0x2e0], 0
push eax
jmp 0x40a262
jmp 0x40a26b
or eax, 0x721e
pop eax
push edi
call 0x40a280
add byte [esi + 0x4b], al
inc edx
xor cl, byte [eax + 0x33]
cmp dword [ebx - 0x107efb3c], eax
movsd dword es:[edi], dword [esi]
mov esi, 0x8b5f0000
test dword [eax], esp
std
invalid
push esi
or esi, 0x15d03
add esi, 0x1eb5
or esi, 0x5637
and esi, 0x1657b
pop esi
push edx
push edi
add esp, 4
add edx, 0x9276
or edx, 0xfe9
or edx, 0xa1e3
pop edx
mov ecx, dword [ebp - 0x3cc]
add ecx, 0xe
mov dword [ebp - 0x1918], ecx
push ebx
push esi
add esp, 4
and ebx, 0x74d
sub ebx, 0x7aa5
xor ebx, 0x1483b
add ebx, 0x14853
pop ebx
push esi
xor esi, 0x14e3b
pop esi
push edx
push edi
add esp, 4
add edx, 0x133a6
pop edx
cmp dword [ebp - 0x3cc], 0
je 0x40a67d
cmp dword [ebp - 0xa5c], 0
jne 0x40a6c3
push esi
push esi
add esp, 4
jmp 0x40a68b
pop esi
push edx
push edi
add esp, 4
and edx, 0x16250
pop edx
push esi
xor esi, 0x6248
add esi, 0x14f3d
pop esi
push edi
jmp 0x40a6ae
pop edi
mov edx, dword [ebp - 0x738]
mov dword [ebp - 0x18d0], edx
push 0
invalid
xchg ebp, eax
invalid