Function at 0x4068c0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x9b4
mov eax, dword [0x42e008]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
push 9
push 0x1131884c
mov edx, 0x18
xor ecx, ecx
call fcn.00405390
add esp, 8
push 0
push 0
call eax
mov esi, eax
test esi, esi
js 0x406c96
mov dword [ebp - 0x874], 0x45214f
mov ebx, 3
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
mov eax, dword [ebp - 0x874]
lea edi, [ebx + 2]
test edx, edx
je 0x406978
add eax, 2
add eax, esi
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000003
jns 0x406940
dec eax
or eax, 0xfffffffc
add eax, 1
jne 0x406aaa
nop word [eax + eax]
mov eax, dword [ebp - 0x874]
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000003
jns 0x406971
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x406950
jmp 0x406aaa
and eax, 0x80000001
jns 0x406986
dec eax
or eax, 0xfffffffe
add eax, 1
je 0x4069cf
mov eax, 2
sub eax, esi
add eax, dword [ebp - 0x874]
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
jne 0x406aaa
nop dword [eax]
mov eax, dword [ebp - 0x874]
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
je 0x4069b0
jmp 0x406aaa
mov eax, dword [ebp - 0x874]
and eax, 0x80000003
jns 0x4069e3
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x406a49
mov ecx, dword [ebp - 0x874]
lea eax, [esi + 3]
add ecx, 2
imul ecx, eax
mov dword [ebp - 0x874], ecx
mov eax, dword [ebp - 0x874]
and eax, 0x80000001
jns 0x406a0e
dec eax
or eax, 0xfffffffe
add eax, 1
jne 0x406aaa
mov eax, dword [ebp - 0x874]
cdq
idiv edi
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x406a2a
dec eax
jmp 0x406a2b
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000001
jns 0x406a45
dec eax
or eax, 0xfffffffe
add eax, 1
je 0x406a14
jmp 0x406aaa
mov eax, dword [ebp - 0x874]
cdq
idiv edi
test edx, edx
je 0x406aaa
mov eax, dword [ebp - 0x874]
lea ecx, [esi + 0x17]
add eax, 0xb
cdq
idiv ecx
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
jne 0x406aaa
nop dword [eax + eax]
mov eax, dword [ebp - 0x874]
cdq
idiv edi
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x406a96
inc eax
jmp 0x406a97
dec eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
je 0x406a80
push 0x1d
push 0x1ecb081f
mov edx, 0x18
xor ecx, ecx
call fcn.00405390
add esp, 8
push 0
push 0
push 0
push 3
push 0
push 0
push 0
push 0xffffffffffffffff
push 0
call eax
mov esi, eax
mov dword [ebp - 0x874], 0x45214f
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x406b48
add eax, 2
add eax, esi
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000003
jns 0x406b12
dec eax
or eax, 0xfffffffc
add eax, 1
jne 0x406c7a
nop dword [eax + eax]
mov eax, dword [ebp - 0x874]
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000003
jns 0x406b41
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x406b20
jmp 0x406c7a
and eax, 0x80000001
jns 0x406b56
dec eax
or eax, 0xfffffffe
add eax, 1
je 0x406b9f
mov eax, 2
sub eax, esi
add eax, dword [ebp - 0x874]
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
jne 0x406c7a
nop dword [eax]
mov eax, dword [ebp - 0x874]
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
je 0x406b80
jmp 0x406c7a
mov eax, dword [ebp - 0x874]
and eax, 0x80000003
jns 0x406bb3
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x406c19
mov ecx, dword [ebp - 0x874]
lea eax, [esi + 3]
add ecx, 2
imul ecx, eax
mov dword [ebp - 0x874], ecx
mov eax, dword [ebp - 0x874]
and eax, 0x80000001
jns 0x406bde
dec eax
or eax, 0xfffffffe
add eax, 1
jne 0x406c7a
mov eax, dword [ebp - 0x874]
cdq
idiv edi
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x406bfa
dec eax
jmp 0x406bfb
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000001
jns 0x406c15
dec eax
or eax, 0xfffffffe
add eax, 1
je 0x406be4
jmp 0x406c7a
mov eax, dword [ebp - 0x874]
cdq
idiv edi
test edx, edx
je 0x406c7a
mov eax, dword [ebp - 0x874]
lea ecx, [esi + 0x17]
add eax, 0xb
cdq
idiv ecx
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
jne 0x406c7a
nop dword [eax + eax]
mov eax, dword [ebp - 0x874]
cdq
idiv edi
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x406c66
inc eax
jmp 0x406c67
dec eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
je 0x406c50
xor ecx, ecx
mov edx, 0x18
test esi, esi
jns 0x406ca9
push 0x5e
push 0x4191904a
call fcn.00405390
add esp, 8
call eax
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0041bff4
mov esp, ebp
pop ebp
ret
push 0x28
push 0x4769ad5f
mov dword [ebp - 0x84c], 0
call fcn.00405390
add esp, 8
lea ecx, [ebp - 0x84c]
push ecx
push 0x428208
push 1
push 0
push 0x4281e8
call eax
mov dword [ebp - 0x874], 0x45214f
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
je 0x406d49
mov ecx, dword [ebp - 0x874]
mov eax, dword [ebp - 0x84c]
add eax, 2
add eax, ecx
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000003
jns 0x406d1b
dec eax
or eax, 0xfffffffc
add eax, 1
jne 0x406e8a
mov eax, dword [ebp - 0x874]
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000003
jns 0x406d42
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x406d21
jmp 0x406e8a
mov eax, dword [ebp - 0x874]
and eax, 0x80000001
jns 0x406d5d
dec eax
or eax, 0xfffffffe
add eax, 1
mov eax, dword [ebp - 0x874]
je 0x406daf
mov ecx, 2
sub ecx, dword [ebp - 0x84c]
add eax, ecx
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
jne 0x406e8a
nop dword [eax]
mov eax, dword [ebp - 0x874]
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
je 0x406d90
jmp 0x406e8a
and eax, 0x80000003
jns 0x406dbd
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x406e29
mov ecx, dword [ebp - 0x874]
mov eax, dword [ebp - 0x84c]
add ecx, 2
add eax, 3
imul eax, ecx
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000001
jns 0x406dee
dec eax
or eax, 0xfffffffe
add eax, 1
jne 0x406e8a
mov eax, dword [ebp - 0x874]
cdq
idiv edi
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x406e0a
dec eax
jmp 0x406e0b
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000001
jns 0x406e25
dec eax
or eax, 0xfffffffe
add eax, 1
je 0x406df4
jmp 0x406e8a
mov eax, dword [ebp - 0x874]
cdq
idiv edi
test edx, edx
je 0x406e8a
mov eax, dword [ebp - 0x874]
mov ecx, dword [ebp - 0x84c]
add eax, 0xb
cdq
add ecx, 0x17
idiv ecx
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
jne 0x406e8a
nop
mov eax, dword [ebp - 0x874]
cdq
idiv edi
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x406e76
inc eax
jmp 0x406e77
dec eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
je 0x406e60
push 0x29
push 0xe41e4da9
mov edx, 0xf
mov dword [ebp - 0x85c], 0
xor ecx, ecx
call fcn.00405390
add esp, 8
lea ecx, [ebp - 0x844]
push ecx
call eax
mov dword [ebp - 0x874], 0x45214f
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
je 0x406f28
mov ecx, dword [ebp - 0x874]
mov eax, dword [ebp - 0x834]
add eax, 2
add eax, ecx
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000003
jns 0x406ef5
dec eax
or eax, 0xfffffffc
add eax, 1
jne 0x40706a
nop dword [eax + eax]
mov eax, dword [ebp - 0x874]
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000003
jns 0x406f21
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x406f00
jmp 0x40706a
mov eax, dword [ebp - 0x874]
and eax, 0x80000001
jns 0x406f3c
dec eax
or eax, 0xfffffffe
add eax, 1
mov eax, dword [ebp - 0x874]
je 0x406f8f
mov ecx, 2
sub ecx, dword [ebp - 0x834]
add eax, ecx
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
jne 0x40706a
nop dword [eax + eax]
mov eax, dword [ebp - 0x874]
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
je 0x406f70
jmp 0x40706a
and eax, 0x80000003
jns 0x406f9d
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x407009
mov ecx, dword [ebp - 0x874]
mov eax, dword [ebp - 0x834]
add ecx, 2
add eax, 3
imul eax, ecx
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000001
jns 0x406fce
dec eax
or eax, 0xfffffffe
add eax, 1
jne 0x40706a
mov eax, dword [ebp - 0x874]
cdq
idiv edi
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x406fea
dec eax
jmp 0x406feb
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000001
jns 0x407005
dec eax
or eax, 0xfffffffe
add eax, 1
je 0x406fd4
jmp 0x40706a
mov eax, dword [ebp - 0x874]
cdq
idiv edi
test edx, edx
je 0x40706a
mov eax, dword [ebp - 0x874]
mov ecx, dword [ebp - 0x834]
add eax, 0xb
cdq
add ecx, 0x17
idiv ecx
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
jne 0x40706a
nop
mov eax, dword [ebp - 0x874]
cdq
idiv edi
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x407056
inc eax
jmp 0x407057
dec eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
je 0x407040
cmp word [ebp - 0x844], 9
jne 0x4075d1
push 0x28
push 0x4769ad5f
mov edx, 0x18
xor ecx, ecx
call fcn.00405390
add esp, 8
lea ecx, [ebp - 0x85c]
push ecx
push 0x428218
push 1
push 0
push 0x4281f8
call eax
mov esi, eax
test esi, esi
js 0x407a76
mov dword [ebp - 0x874], 0x45214f
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x407119
add eax, 2
add eax, esi
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000003
jns 0x4070eb
dec eax
or eax, 0xfffffffc
add eax, 1
jne 0x40724a
mov eax, dword [ebp - 0x874]
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000003
jns 0x407112
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x4070f1
jmp 0x40724a
and eax, 0x80000001
jns 0x407127
dec eax
or eax, 0xfffffffe
add eax, 1
je 0x40716f
mov eax, 2
sub eax, esi
add eax, dword [ebp - 0x874]
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
jne 0x40724a
nop dword [eax]
mov eax, dword [ebp - 0x874]
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
je 0x407150
jmp 0x40724a
mov eax, dword [ebp - 0x874]
and eax, 0x80000003
jns 0x407183
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x4071e9
mov ecx, dword [ebp - 0x874]
lea eax, [esi + 3]
add ecx, 2
imul ecx, eax
mov dword [ebp - 0x874], ecx
mov eax, dword [ebp - 0x874]
and eax, 0x80000001
jns 0x4071ae
dec eax
or eax, 0xfffffffe
add eax, 1
jne 0x40724a
mov eax, dword [ebp - 0x874]
cdq
idiv edi
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x4071ca
dec eax
jmp 0x4071cb
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000001
jns 0x4071e5
dec eax
or eax, 0xfffffffe
add eax, 1
je 0x4071b4
jmp 0x40724a
mov eax, dword [ebp - 0x874]
cdq
idiv edi
test edx, edx
je 0x40724a
mov eax, dword [ebp - 0x874]
lea ecx, [esi + 0x17]
add eax, 0xb
cdq
idiv ecx
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
jne 0x40724a
nop dword [eax + eax]
mov eax, dword [ebp - 0x874]
cdq
idiv edi
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x407236
inc eax
jmp 0x407237
dec eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
je 0x407220
mov byte [ebp - 0x8d0], 0
lea ecx, [ebp - 0x8d0]
mov byte [ebp - 0x8cf], 0x15
mov byte [ebp - 0x8ce], 0xf
mov byte [ebp - 0x8cd], 0x15
mov byte [ebp - 0x8cc], 0xf
mov byte [ebp - 0x8cb], 0
mov byte [ebp - 0x8ca], 0xf
mov byte [ebp - 0x8c9], 0x49
mov byte [ebp - 0x8c8], 0xf
mov byte [ebp - 0x8c7], 0x12
mov byte [ebp - 0x8c6], 0xf
mov byte [ebp - 0x8c5], 0x68
mov byte [ebp - 0x8c4], 0xf
mov byte [ebp - 0x8c3], 0x23
mov byte [ebp - 0x8c2], 0xf
mov byte [ebp - 0x8c1], 0x1c
mov byte [ebp - 0x8c0], 0xf
mov byte [ebp - 0x8bf], 4
mov byte [ebp - 0x8be], 0xf
mov byte [ebp - 0x8bd], 0x49
mov byte [ebp - 0x8bc], 0xf
mov byte [ebp - 0x8bb], 0x6a
mov byte [ebp - 0x8ba], 0xf
mov byte [ebp - 0x8b9], 0x49
mov byte [ebp - 0x8b8], 0xf
mov byte [ebp - 0x8b7], 0x34
mov byte [ebp - 0x8b6], 0xf
mov byte [ebp - 0x8b5], 0x3b
mov byte [ebp - 0x8b4], 0xf
mov byte [ebp - 0x8b3], 0x23
mov byte [ebp - 0x8b2], 0xf
mov byte [ebp - 0x8b1], 0x19
mov byte [ebp - 0x8b0], 0xf
mov byte [ebp - 0x8af], 4
mov byte [ebp - 0x8ae], 0xf
mov byte [ebp - 0x8ad], 0x34
mov byte [ebp - 0x8ac], 0xf
mov byte [ebp - 0x8ab], 0x19
mov byte [ebp - 0x8aa], 0xf
mov byte [ebp - 0x8a9], 1
mov byte [ebp - 0x8a8], 0xf
mov byte [ebp - 0x8a7], 0x49
mov byte [ebp - 0x8a6], 0xf
mov byte [ebp - 0x8a5], 4
mov byte [ebp - 0x8a4], 0xf
mov byte [ebp - 0x8a3], 0xf
mov byte [ebp - 0x8a2], 0xf
mov al, byte [ebp - 0x8cf]
call fcn.004145f0
push 7
push 0x70afcf8f
mov edx, 0x19
xor ecx, ecx
mov esi, eax
call fcn.00405390
add esp, 8
push esi
call eax
push 3
push 0xe160a1e7
mov edx, 0x19
xor ecx, ecx
mov esi, eax
call fcn.00405390
add esp, 8
lea ecx, [ebp - 0x820]
push ecx
call eax
mov eax, dword [ebp - 0x85c]
lea edx, [ebp - 0x820]
push edx
push 0
mov word [ebp - 0x820], bx
mov dword [ebp - 0x818], 0x40
mov ecx, dword [eax]
push esi
push eax
call dword [ecx + 0x20]
mov esi, eax
mov dword [ebp - 0x874], 0x45214f
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x407478
add eax, 2
add eax, esi
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000003
jns 0x407445
dec eax
or eax, 0xfffffffc
add eax, 1
jne 0x4075aa
nop dword [eax + eax]
mov eax, dword [ebp - 0x874]
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000003
jns 0x407471
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x407450
jmp 0x4075aa
and eax, 0x80000001
jns 0x407486
dec eax
or eax, 0xfffffffe
add eax, 1
je 0x4074cf
mov eax, 2
sub eax, esi
add eax, dword [ebp - 0x874]
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
jne 0x4075aa
nop dword [eax]
mov eax, dword [ebp - 0x874]
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
je 0x4074b0
jmp 0x4075aa
mov eax, dword [ebp - 0x874]
and eax, 0x80000003
jns 0x4074e3
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x407549
mov ecx, dword [ebp - 0x874]
lea eax, [esi + 3]
add ecx, 2
imul ecx, eax
mov dword [ebp - 0x874], ecx
mov eax, dword [ebp - 0x874]
and eax, 0x80000001
jns 0x40750e
dec eax
or eax, 0xfffffffe
add eax, 1
jne 0x4075aa
mov eax, dword [ebp - 0x874]
cdq
idiv edi
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x40752a
dec eax
jmp 0x40752b
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000001
jns 0x407545
dec eax
or eax, 0xfffffffe
add eax, 1
je 0x407514
jmp 0x4075aa
mov eax, dword [ebp - 0x874]
cdq
idiv edi
test edx, edx
je 0x4075aa
mov eax, dword [ebp - 0x874]
lea ecx, [esi + 0x17]
add eax, 0xb
cdq
idiv ecx
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
jne 0x4075aa
nop dword [eax + eax]
mov eax, dword [ebp - 0x874]
cdq
idiv edi
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x407596
inc eax
jmp 0x407597
dec eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
je 0x407580
push 0x6b
push 0x6e516edb
mov edx, 0x19
xor ecx, ecx
call fcn.00405390
add esp, 8
lea ecx, [ebp - 0x820]
push ecx
call eax
test esi, esi
js 0x407a76
mov dword [ebp - 0x848], 0
lea ecx, [ebp - 0x8a0]
mov byte [ebp - 0x8a0], 0
mov byte [ebp - 0x89f], 0xc
mov byte [ebp - 0x89e], 0x50
mov byte [ebp - 0x89d], 0x7e
mov byte [ebp - 0x89c], 0x50
mov byte [ebp - 0x89b], 0x7e
mov byte [ebp - 0x89a], 0x50
mov byte [ebp - 0x899], 0x3f
mov byte [ebp - 0x898], 0x50
mov byte [ebp - 0x897], 0xd
mov byte [ebp - 0x896], 0x50
mov byte [ebp - 0x895], 0x4a
mov byte [ebp - 0x894], 0x50
mov byte [ebp - 0x893], 0x64
mov byte [ebp - 0x892], 0x50
mov byte [ebp - 0x891], 0x4b
mov byte [ebp - 0x890], 0x50
mov byte [ebp - 0x88f], 0x72
mov byte [ebp - 0x88e], 0x50
mov byte [ebp - 0x88d], 0x55
mov byte [ebp - 0x88c], 0x50
mov byte [ebp - 0x88b], 0x50
mov byte [ebp - 0x88a], 0x50
mov al, byte [ebp - 0x89f]
call fcn.004145b0
push 7
push 0x70afcf8f
mov edx, 0x19
xor ecx, ecx
mov esi, eax
call fcn.00405390
add esp, 8
push esi
call eax
mov ecx, dword [ebp - 0x84c]
lea esi, [ebp - 0x848]
push esi
push dword [ebp - 0x85c]
mov edx, dword [ecx]
push 0
push 0
push 0
push 0
push 0
push eax
push ecx
call dword [edx + 0xc]
mov esi, eax
mov dword [ebp - 0x874], 0x45214f
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
je 0x407748
mov ecx, dword [ebp - 0x874]
mov eax, dword [ebp - 0x848]
add eax, 2
add eax, ecx
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000003
jns 0x407710
dec eax
or eax, 0xfffffffc
add eax, 1
jne 0x40788a
nop word [eax + eax]
mov eax, dword [ebp - 0x874]
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000003
jns 0x407741
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x407720
jmp 0x40788a
mov eax, dword [ebp - 0x874]
and eax, 0x80000001
jns 0x40775c
dec eax
or eax, 0xfffffffe
add eax, 1
mov eax, dword [ebp - 0x874]
je 0x4077af
mov ecx, 2
sub ecx, dword [ebp - 0x848]
add eax, ecx
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
jne 0x40788a
nop dword [eax + eax]
mov eax, dword [ebp - 0x874]
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
je 0x407790
jmp 0x40788a
and eax, 0x80000003
jns 0x4077bd
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x407829
mov ecx, dword [ebp - 0x874]
mov eax, dword [ebp - 0x848]
add ecx, 2
add eax, 3
imul eax, ecx
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000001
jns 0x4077ee
dec eax
or eax, 0xfffffffe
add eax, 1
jne 0x40788a
mov eax, dword [ebp - 0x874]
cdq
idiv edi
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x40780a
dec eax
jmp 0x40780b
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000001
jns 0x407825
dec eax
or eax, 0xfffffffe
add eax, 1
je 0x4077f4
jmp 0x40788a
mov eax, dword [ebp - 0x874]
cdq
idiv edi
test edx, edx
je 0x40788a
mov eax, dword [ebp - 0x874]
mov ecx, dword [ebp - 0x848]
add eax, 0xb
cdq
add ecx, 0x17
idiv ecx
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
jne 0x40788a
nop
mov eax, dword [ebp - 0x874]
cdq
idiv edi
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x407876
inc eax
jmp 0x407877
dec eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
je 0x407860
test esi, esi
js 0x407a6a
mov esi, dword [ebp - 0x848]
mov edx, 0x18
push 0x31
push 0xa714f6e7
xor ecx, ecx
call fcn.00405390
add esp, 8
push 0
push 0
push 3
push 3
push 0
push 0
push 0xa
push esi
call eax
mov esi, eax
mov dword [ebp - 0x874], 0x45214f
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x40792b
add eax, 2
add eax, esi
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000003
jns 0x4078fd
dec eax
or eax, 0xfffffffc
add eax, 1
jne 0x407a5a
mov eax, dword [ebp - 0x874]
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000003
jns 0x407924
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x407903
jmp 0x407a5a
and eax, 0x80000001
jns 0x407939
dec eax
or eax, 0xfffffffe
add eax, 1
je 0x40797f
mov eax, 2
sub eax, esi
add eax, dword [ebp - 0x874]
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
jne 0x407a5a
nop
mov eax, dword [ebp - 0x874]
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
je 0x407960
jmp 0x407a5a
mov eax, dword [ebp - 0x874]
and eax, 0x80000003
jns 0x407993
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x4079f9
mov ecx, dword [ebp - 0x874]
lea eax, [esi + 3]
add ecx, 2
imul ecx, eax
mov dword [ebp - 0x874], ecx
mov eax, dword [ebp - 0x874]
and eax, 0x80000001
jns 0x4079be
dec eax
or eax, 0xfffffffe
add eax, 1
jne 0x407a5a
mov eax, dword [ebp - 0x874]
cdq
idiv edi
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x4079da
dec eax
jmp 0x4079db
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000001
jns 0x4079f5
dec eax
or eax, 0xfffffffe
add eax, 1
je 0x4079c4
jmp 0x407a5a
mov eax, dword [ebp - 0x874]
cdq
idiv edi
test edx, edx
je 0x407a5a
mov eax, dword [ebp - 0x874]
lea ecx, [esi + 0x17]
add eax, 0xb
cdq
idiv ecx
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
jne 0x407a5a
nop dword [eax + eax]
mov eax, dword [ebp - 0x874]
cdq
idiv edi
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x407a46
inc eax
jmp 0x407a47
dec eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
je 0x407a30
test esi, esi
jns 0x407aa1
mov eax, dword [ebp - 0x848]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x84c]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
push 0x5e
push 0x4191904a
mov edx, 0x18
xor ecx, ecx
call fcn.00405390
add esp, 8
call eax
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0041bff4
mov esp, ebp
pop ebp
ret
mov byte [ebp - 0x888], 0
lea ecx, [ebp - 0x888]
mov byte [ebp - 0x887], 0x10
mov byte [ebp - 0x886], 5
mov byte [ebp - 0x885], 0x18
mov byte [ebp - 0x884], 5
mov byte [ebp - 0x883], 0x49
mov byte [ebp - 0x882], 5
mov byte [ebp - 0x881], 5
mov byte [ebp - 0x880], 5
mov al, byte [ebp - 0x887]
call fcn.00414550
push 7
push 0x70afcf8f
mov edx, 0x19
xor ecx, ecx
mov esi, eax
call fcn.00405390
add esp, 8
push esi
call eax
mov byte [ebp - 0x910], 0
mov edi, eax
mov byte [ebp - 0x90f], 0x41
mov byte [ebp - 0x90e], 0x54
mov byte [ebp - 0x90d], 7
mov byte [ebp - 0x90c], 0x54
mov byte [ebp - 0x90b], 0x24
mov byte [ebp - 0x90a], 0x54
mov byte [ebp - 0x909], 7
mov byte [ebp - 0x908], 0x54
mov byte [ebp - 0x907], 0x23
mov byte [ebp - 0x906], 0x54
mov byte [ebp - 0x905], 0x33
mov byte [ebp - 0x904], 0x54
mov byte [ebp - 0x903], 0x11
mov byte [ebp - 0x902], 0x54
mov byte [ebp - 0x901], 4
mov byte [ebp - 0x900], 0x54
mov byte [ebp - 0x8ff], 0x11
mov byte [ebp - 0x8fe], 0x54
mov byte [ebp - 0x8fd], 0x78
mov byte [ebp - 0x8fc], 0x54
mov byte [ebp - 0x8fb], 0x4f
mov byte [ebp - 0x8fa], 0x54
mov byte [ebp - 0x8f9], 0x79
mov byte [ebp - 0x8f8], 0x54
mov byte [ebp - 0x8f7], 0x16
mov byte [ebp - 0x8f6], 0x54
mov byte [ebp - 0x8f5], 0x11
mov byte [ebp - 0x8f4], 0x54
mov byte [ebp - 0x8f3], 9
mov byte [ebp - 0x8f2], 0x54
mov byte [ebp - 0x8f1], 0xb
mov byte [ebp - 0x8f0], 0x54
mov byte [ebp - 0x8ef], 0x44
mov byte [ebp - 0x8ee], 0x54
mov byte [ebp - 0x8ed], 5
mov byte [ebp - 0x8ec], 0x54
mov byte [ebp - 0x8eb], 0x13
mov byte [ebp - 0x8ea], 0x54
mov byte [ebp - 0x8e9], 0x18
mov byte [ebp - 0x8e8], 0x54
mov byte [ebp - 0x8e7], 0x41
mov byte [ebp - 0x8e6], 0x54
mov byte [ebp - 0x8e5], 0x19
mov byte [ebp - 0x8e4], 0x54
mov byte [ebp - 0x8e3], 0x7b
mov byte [ebp - 0x8e2], 0x54
mov byte [ebp - 0x8e1], 0x51
mov byte [ebp - 0x8e0], 0x54
mov byte [ebp - 0x8df], 0x36
mov byte [ebp - 0x8de], 0x54
mov byte [ebp - 0x8dd], 0x45
mov byte [ebp - 0x8dc], 0x54
mov byte [ebp - 0x8db], 0x23
mov byte [ebp - 0x8da], 0x54
mov byte [ebp - 0x8d9], 0x36
mov byte [ebp - 0x8d8], 0x54
mov byte [ebp - 0x8d7], 0x28
mov byte [ebp - 0x8d6], 0x54
mov byte [ebp - 0x8d5], 0x29
lea ecx, [ebp - 0x910]
mov byte [ebp - 0x8d4], 0x54
mov byte [ebp - 0x8d3], 0x54
mov byte [ebp - 0x8d2], 0x54
mov al, byte [ebp - 0x90f]
call fcn.00414510
push 7
push 0x70afcf8f
mov edx, 0x19
xor ecx, ecx
mov esi, eax
call fcn.00405390
add esp, 8
push esi
call eax
mov ecx, dword [ebp - 0x848]
lea esi, [ebp - 0x854]
push esi
push 0
push 0x30
push eax
mov dword [ebp - 0x854], 0
mov edx, dword [ecx]
push edi
push ecx
call dword [edx + 0x50]
mov esi, eax
mov dword [ebp - 0x874], 0x45214f
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x407da7
add eax, 2
add eax, esi
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000003
jns 0x407d54
dec eax
or eax, 0xfffffffc
add eax, 1
jne 0x407d83
nop word [eax + eax]
mov eax, dword [ebp - 0x874]
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000003
jns 0x407d81
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x407d60
mov edi, 5
test esi, esi
jns 0x407eef
mov eax, dword [ebp - 0x848]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x84c]
jmp 0x408da1
and eax, 0x80000001
jns 0x407db5
dec eax
or eax, 0xfffffffe
add eax, 1
je 0x407dfc
mov eax, 2
sub eax, esi
add eax, dword [ebp - 0x874]
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
jne 0x407d83
nop word [eax + eax]
mov eax, dword [ebp - 0x874]
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
je 0x407de0
jmp 0x407d83
mov eax, dword [ebp - 0x874]
and eax, 0x80000003
jns 0x407e10
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x407e7e
mov ecx, dword [ebp - 0x874]
lea eax, [esi + 3]
add ecx, 2
imul ecx, eax
mov dword [ebp - 0x874], ecx
mov eax, dword [ebp - 0x874]
and eax, 0x80000001
jns 0x407e3b
dec eax
or eax, 0xfffffffe
add eax, 1
mov edi, 5
jne 0x407d88
mov eax, dword [ebp - 0x874]
cdq
idiv edi
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x407e5c
dec eax
jmp 0x407e5d
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000001
jns 0x407e77
dec eax
or eax, 0xfffffffe
add eax, 1
je 0x407e46
jmp 0x407d88
mov eax, dword [ebp - 0x874]
mov edi, 5
cdq
idiv edi
test edx, edx
je 0x407d88
mov eax, dword [ebp - 0x874]
lea ecx, [esi + 0x17]
add eax, 0xb
cdq
idiv ecx
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
jne 0x407d88
nop word [eax + eax]
mov eax, dword [ebp - 0x874]
cdq
idiv edi
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x407ed6
inc eax
jmp 0x407ed7
dec eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
je 0x407ec0
jmp 0x407d88
mov dword [ebp - 0x858], 0
mov dword [ebp - 0x80c], 0
mov dword [ebp - 0x874], 0x45214f
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
je 0x407f78
mov ecx, dword [ebp - 0x874]
mov eax, dword [ebp - 0x854]
add eax, 2
add eax, ecx
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000003
jns 0x407f45
dec eax
or eax, 0xfffffffc
add eax, 1
jne 0x4080ba
nop dword [eax + eax]
mov eax, dword [ebp - 0x874]
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000003
jns 0x407f71
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x407f50
jmp 0x4080ba
mov eax, dword [ebp - 0x874]
and eax, 0x80000001
jns 0x407f8c
dec eax
or eax, 0xfffffffe
add eax, 1
mov eax, dword [ebp - 0x874]
je 0x407fdf
mov ecx, 2
sub ecx, dword [ebp - 0x854]
add eax, ecx
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
jne 0x4080ba
nop dword [eax + eax]
mov eax, dword [ebp - 0x874]
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
je 0x407fc0
jmp 0x4080ba
and eax, 0x80000003
jns 0x407fed
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x408059
mov ecx, dword [ebp - 0x874]
mov eax, dword [ebp - 0x854]
add ecx, 2
add eax, 3
imul eax, ecx
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000001
jns 0x40801e
dec eax
or eax, 0xfffffffe
add eax, 1
jne 0x4080ba
mov eax, dword [ebp - 0x874]
cdq
idiv edi
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x40803a
dec eax
jmp 0x40803b
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000001
jns 0x408055
dec eax
or eax, 0xfffffffe
add eax, 1
je 0x408024
jmp 0x4080ba
mov eax, dword [ebp - 0x874]
cdq
idiv edi
test edx, edx
je 0x4080ba
mov eax, dword [ebp - 0x874]
mov ecx, dword [ebp - 0x854]
add eax, 0xb
cdq
add ecx, 0x17
idiv ecx
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
jne 0x4080ba
nop
mov eax, dword [ebp - 0x874]
cdq
idiv edi
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x4080a6
inc eax
jmp 0x4080a7
dec eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
je 0x408090
mov ecx, dword [ebp - 0x854]
test ecx, ecx
je 0x408d73
mov edi, dword [sym.imp.USER32.dll_wsprintfW]
nop
mov eax, dword [ecx]
lea edx, [ebp - 0x80c]
push edx
lea edx, [ebp - 0x858]
push edx
push 1
push 0xffffffffffffffff
push ecx
call dword [eax + 0x10]
mov esi, eax
mov dword [ebp - 0x874], 0x45214f
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x408158
add eax, 2
add eax, esi
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000003
jns 0x408126
dec eax
or eax, 0xfffffffc
add eax, 1
jne 0x40829a
nop dword [eax]
mov eax, dword [ebp - 0x874]
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000003
jns 0x408151
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x408130
jmp 0x40829a
and eax, 0x80000001
jns 0x408166
dec eax
or eax, 0xfffffffe
add eax, 1
je 0x4081af
mov eax, 2
sub eax, esi
add eax, dword [ebp - 0x874]
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
jne 0x40829a
nop dword [eax]
mov eax, dword [ebp - 0x874]
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
je 0x408190
jmp 0x40829a
mov eax, dword [ebp - 0x874]
and eax, 0x80000003
jns 0x4081c3
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x408235
mov ecx, dword [ebp - 0x874]
lea eax, [esi + 3]
add ecx, 2
imul ecx, eax
mov dword [ebp - 0x874], ecx
mov eax, dword [ebp - 0x874]
and eax, 0x80000001
jns 0x4081ee
dec eax
or eax, 0xfffffffe
add eax, 1
jne 0x40829a
mov ecx, 5
nop dword [eax]
mov eax, dword [ebp - 0x874]
cdq
idiv ecx
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x408216
dec eax
jmp 0x408217
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000001
jns 0x408231
dec eax
or eax, 0xfffffffe
add eax, 1
je 0x408200
jmp 0x40829a
mov eax, dword [ebp - 0x874]
mov ecx, 5
cdq
idiv ecx
test edx, edx
je 0x40829a
mov eax, dword [ebp - 0x874]
lea ecx, [esi + 0x17]
add eax, 0xb
cdq
idiv ecx
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
jne 0x40829a
mov ecx, 5
nop
mov eax, dword [ebp - 0x874]
cdq
idiv ecx
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x408286
inc eax
jmp 0x408287
dec eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
je 0x408270
cmp dword [ebp - 0x80c], 0
je 0x408d73
mov byte [ebp - 0x87c], 0
lea ecx, [ebp - 0x87c]
mov byte [ebp - 0x87b], 8
mov byte [ebp - 0x87a], 0x6b
mov byte [ebp - 0x879], 0x14
mov byte [ebp - 0x878], 0x6b
mov byte [ebp - 0x877], 0x6b
mov byte [ebp - 0x876], 0x6b
mov al, byte [ebp - 0x87b]
mov eax, dword [ebp - 0x858]
push 0
push 0
mov esi, dword [eax]
lea eax, [ebp - 0x870]
push eax
push 0
call fcn.004144b0
push eax
push dword [ebp - 0x858]
call dword [esi + 0x10]
mov esi, eax
mov dword [ebp - 0x874], 0x45214f
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x4088a8
add eax, 2
add eax, esi
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000003
jns 0x40834a
dec eax
or eax, 0xfffffffc
add eax, 1
jne 0x408373
nop dword [eax]
mov eax, dword [ebp - 0x874]
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000003
jns 0x408371
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x408350
mov esi, 5
mov ecx, 0x800
lea eax, [ebp - 0x808]
mov byte [eax], 0
lea eax, [eax + 1]
sub ecx, 1
jne 0x408383
mov byte [ebp - 0x9b0], cl
mov byte [ebp - 0x9af], 0x1d
mov byte [ebp - 0x9ae], 0x74
mov byte [ebp - 0x9ad], 0x33
mov byte [ebp - 0x9ac], 0x74
mov byte [ebp - 0x9ab], 0x52
mov byte [ebp - 0x9aa], 0x74
mov byte [ebp - 0x9a9], 0xe
mov byte [ebp - 0x9a8], 0x74
mov byte [ebp - 0x9a7], 8
mov byte [ebp - 0x9a6], 0x74
mov byte [ebp - 0x9a5], 0x7e
mov byte [ebp - 0x9a4], 0x74
mov byte [ebp - 0x9a3], 8
mov byte [ebp - 0x9a2], 0x74
mov byte [ebp - 0x9a1], 0x22
mov byte [ebp - 0x9a0], 0x74
mov byte [ebp - 0x99f], 0x43
mov byte [ebp - 0x99e], 0x74
mov byte [ebp - 0x99d], 0x1d
mov byte [ebp - 0x99c], 0x74
mov byte [ebp - 0x99b], 0x22
mov byte [ebp - 0x99a], 0x74
mov byte [ebp - 0x999], 0x6f
mov byte [ebp - 0x998], 0x74
mov byte [ebp - 0x997], 0xf
mov byte [ebp - 0x996], 0x74
mov byte [ebp - 0x995], 0x27
mov byte [ebp - 0x994], 0x74
mov byte [ebp - 0x993], 0x1c
mov byte [ebp - 0x992], 0x74
mov byte [ebp - 0x991], 0x5d
mov byte [ebp - 0x990], 0x74
mov byte [ebp - 0x98f], 0x68
mov byte [ebp - 0x98e], 0x74
mov byte [ebp - 0x98d], 0x52
mov byte [ebp - 0x98c], 0x74
mov byte [ebp - 0x98b], 0x1e
mov byte [ebp - 0x98a], 0x74
mov byte [ebp - 0x989], 0x49
mov byte [ebp - 0x988], 0x74
mov byte [ebp - 0x987], 0x73
mov byte [ebp - 0x986], 0x74
mov byte [ebp - 0x985], 0x27
mov byte [ebp - 0x984], 0x74
mov byte [ebp - 0x983], 0x46
mov byte [ebp - 0x982], 0x74
mov byte [ebp - 0x981], 0x34
mov byte [ebp - 0x980], 0x74
mov byte [ebp - 0x97f], 0x73
mov byte [ebp - 0x97e], 0x74
mov byte [ebp - 0x97d], 0x29
mov byte [ebp - 0x97c], 0x74
mov byte [ebp - 0x97b], 8
mov byte [ebp - 0x97a], 0x74
mov byte [ebp - 0x979], 0x33
mov byte [ebp - 0x978], 0x74
mov byte [ebp - 0x977], 0x19
mov byte [ebp - 0x976], 0x74
mov byte [ebp - 0x975], 0x63
mov byte [ebp - 0x974], 0x74
mov byte [ebp - 0x973], 0x27
mov byte [ebp - 0x972], 0x74
mov byte [ebp - 0x971], 0x49
mov byte [ebp - 0x970], 0x74
mov byte [ebp - 0x96f], 0x67
mov byte [ebp - 0x96e], 0x74
mov byte [ebp - 0x96d], 8
mov byte [ebp - 0x96c], 0x74
mov byte [ebp - 0x96b], 0x33
mov byte [ebp - 0x96a], 0x74
mov byte [ebp - 0x969], 0x27
mov byte [ebp - 0x968], 0x74
mov byte [ebp - 0x967], 0x1c
mov byte [ebp - 0x966], 0x74
mov byte [ebp - 0x965], 6
mov byte [ebp - 0x964], 0x74
mov byte [ebp - 0x963], 0x30
mov byte [ebp - 0x962], 0x74
mov byte [ebp - 0x961], 0x6f
mov byte [ebp - 0x960], 0x74
mov byte [ebp - 0x95f], 0xe
lea ecx, [ebp - 0x9b0]
mov byte [ebp - 0x95e], 0x74
mov byte [ebp - 0x95d], 8
mov byte [ebp - 0x95c], 0x74
mov byte [ebp - 0x95b], 0x7e
mov byte [ebp - 0x95a], 0x74
mov byte [ebp - 0x959], 8
mov byte [ebp - 0x958], 0x74
mov byte [ebp - 0x957], 0x22
mov byte [ebp - 0x956], 0x74
mov byte [ebp - 0x955], 0x73
mov byte [ebp - 0x954], 0x74
mov byte [ebp - 0x953], 0x28
mov byte [ebp - 0x952], 0x74
mov byte [ebp - 0x951], 0x32
mov byte [ebp - 0x950], 0x74
mov byte [ebp - 0x94f], 0x52
mov byte [ebp - 0x94e], 0x74
mov byte [ebp - 0x94d], 0x1e
mov byte [ebp - 0x94c], 0x74
mov byte [ebp - 0x94b], 0x49
mov byte [ebp - 0x94a], 0x74
mov byte [ebp - 0x949], 0x1d
mov byte [ebp - 0x948], 0x74
mov byte [ebp - 0x947], 0x1e
mov byte [ebp - 0x946], 0x74
mov byte [ebp - 0x945], 0x53
mov byte [ebp - 0x944], 0x74
mov byte [ebp - 0x943], 0x34
mov byte [ebp - 0x942], 0x74
mov byte [ebp - 0x941], 0x22
mov byte [ebp - 0x940], 0x74
mov byte [ebp - 0x93f], 0x49
mov byte [ebp - 0x93e], 0x74
mov byte [ebp - 0x93d], 0x28
mov byte [ebp - 0x93c], 0x74
mov byte [ebp - 0x93b], 8
mov byte [ebp - 0x93a], 0x74
mov byte [ebp - 0x939], 0x3e
mov byte [ebp - 0x938], 0x74
mov byte [ebp - 0x937], 8
mov byte [ebp - 0x936], 0x74
mov byte [ebp - 0x935], 0x22
mov byte [ebp - 0x934], 0x74
mov byte [ebp - 0x933], 0xd
mov byte [ebp - 0x932], 0x74
mov byte [ebp - 0x931], 0x30
mov byte [ebp - 0x930], 0x74
mov byte [ebp - 0x92f], 0x25
mov byte [ebp - 0x92e], 0x74
mov byte [ebp - 0x92d], 0x2f
mov byte [ebp - 0x92c], 0x74
mov byte [ebp - 0x92b], 0x18
mov byte [ebp - 0x92a], 0x74
mov byte [ebp - 0x929], 0x2d
mov byte [ebp - 0x928], 0x74
mov byte [ebp - 0x927], 0x73
mov byte [ebp - 0x926], 0x74
mov byte [ebp - 0x925], 0x18
mov byte [ebp - 0x924], 0x74
mov byte [ebp - 0x923], 0xd
mov byte [ebp - 0x922], 0x74
mov byte [ebp - 0x921], 0x22
mov byte [ebp - 0x920], 0x74
mov byte [ebp - 0x91f], 0x52
mov byte [ebp - 0x91e], 0x74
mov byte [ebp - 0x91d], 8
mov byte [ebp - 0x91c], 0x74
mov byte [ebp - 0x91b], 0x7d
mov byte [ebp - 0x91a], 0x74
mov byte [ebp - 0x919], 8
mov byte [ebp - 0x918], 0x74
mov byte [ebp - 0x917], 0x29
mov byte [ebp - 0x916], 0x74
mov byte [ebp - 0x915], 8
mov byte [ebp - 0x914], 0x74
mov byte [ebp - 0x913], 0x74
mov byte [ebp - 0x912], 0x74
mov al, byte [ebp - 0x9af]
push dword [ebp - 0x868]
call fcn.00414470
push eax
lea eax, [ebp - 0x808]
push eax
call edi
add esp, 0xc
mov dword [ebp - 0x874], 0x45a49d
mov edx, 0xf
xor ecx, ecx
push 0x46
push 0x1d12e482
call fcn.00405390
add esp, 8
lea ecx, [ebp - 0x850]
push ecx
call eax
mov dword [ebp - 0x874], 0x45214f
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
je 0x4089fb
mov ecx, dword [ebp - 0x874]
mov eax, dword [ebp - 0x850]
add eax, 2
add eax, ecx
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000003
jns 0x408879
dec eax
or eax, 0xfffffffc
add eax, 1
jne 0x408b4a
nop
mov eax, dword [ebp - 0x874]
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000003
jns 0x4088a1
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x408880
jmp 0x408b4a
and eax, 0x80000001
jns 0x4088b6
dec eax
or eax, 0xfffffffe
add eax, 1
je 0x4088ff
mov eax, 2
sub eax, esi
add eax, dword [ebp - 0x874]
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
jne 0x408373
nop dword [eax]
mov eax, dword [ebp - 0x874]
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
je 0x4088e0
jmp 0x408373
mov eax, dword [ebp - 0x874]
and eax, 0x80000003
jns 0x408913
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x408988
mov ecx, dword [ebp - 0x874]
lea eax, [esi + 3]
add ecx, 2
imul ecx, eax
mov dword [ebp - 0x874], ecx
mov eax, dword [ebp - 0x874]
and eax, 0x80000001
jns 0x408942
dec eax
or eax, 0xfffffffe
add eax, 1
mov esi, 5
jne 0x408378
nop dword [eax]
mov eax, dword [ebp - 0x874]
cdq
idiv esi
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x408966
dec eax
jmp 0x408967
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000001
jns 0x408981
dec eax
or eax, 0xfffffffe
add eax, 1
je 0x408950
jmp 0x408378
mov eax, dword [ebp - 0x874]
mov ecx, 5
cdq
idiv ecx
test edx, edx
je 0x4089f4
mov eax, dword [ebp - 0x874]
lea ecx, [esi + 0x17]
add eax, 0xb
cdq
idiv ecx
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
jne 0x408373
mov esi, 5
mov eax, dword [ebp - 0x874]
cdq
idiv esi
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x4089db
inc eax
jmp 0x4089dc
dec eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
je 0x4089c5
jmp 0x408378
mov esi, ecx
jmp 0x408378
mov eax, dword [ebp - 0x874]
and eax, 0x80000001
jns 0x408a0f
dec eax
or eax, 0xfffffffe
add eax, 1
mov eax, dword [ebp - 0x874]
je 0x408a5f
mov ecx, 2
sub ecx, dword [ebp - 0x850]
add eax, ecx
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
jne 0x408b4a
nop dword [eax + eax]
mov eax, dword [ebp - 0x874]
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
je 0x408a40
jmp 0x408b4a
and eax, 0x80000003
jns 0x408a6d
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x408ae5
mov ecx, dword [ebp - 0x874]
mov eax, dword [ebp - 0x850]
add ecx, 2
add eax, 3
imul eax, ecx
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000001
jns 0x408aa2
dec eax
or eax, 0xfffffffe
add eax, 1
jne 0x408b4a
nop dword [eax + eax]
mov eax, dword [ebp - 0x874]
cdq
idiv esi
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x408ac6
dec eax
jmp 0x408ac7
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000001
jns 0x408ae1
dec eax
or eax, 0xfffffffe
add eax, 1
je 0x408ab0
jmp 0x408b4a
mov eax, dword [ebp - 0x874]
cdq
idiv esi
test edx, edx
je 0x408b4a
mov eax, dword [ebp - 0x874]
mov ecx, dword [ebp - 0x850]
add eax, 0xb
cdq
add ecx, 0x17
idiv ecx
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
jne 0x408b4a
nop word [eax + eax]
mov eax, dword [ebp - 0x874]
cdq
idiv esi
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x408b36
inc eax
jmp 0x408b37
dec eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
je 0x408b20
lea ecx, [ebp - 0x808]
call fcn.00405d30
mov esi, dword [ebp - 0x850]
mov edx, 0xf
push 0x48
push 0xbba0de74
xor ecx, ecx
call fcn.00405390
add esp, 8
push esi
call eax
mov dword [ebp - 0x874], 0x45214f
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
je 0x408be8
mov ecx, dword [ebp - 0x874]
mov eax, dword [ebp - 0x850]
add eax, 2
add eax, ecx
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000003
jns 0x408bb6
dec eax
or eax, 0xfffffffc
add eax, 1
jne 0x408d3a
nop dword [eax]
mov eax, dword [ebp - 0x874]
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000003
jns 0x408be1
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x408bc0
jmp 0x408d3a
mov eax, dword [ebp - 0x874]
and eax, 0x80000001
jns 0x408bfc
dec eax
or eax, 0xfffffffe
add eax, 1
mov eax, dword [ebp - 0x874]
je 0x408c4f
mov ecx, 2
sub ecx, dword [ebp - 0x850]
add eax, ecx
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
jne 0x408d3a
nop dword [eax + eax]
mov eax, dword [ebp - 0x874]
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
je 0x408c30
jmp 0x408d3a
and eax, 0x80000003
jns 0x408c5d
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x408cd5
mov ecx, dword [ebp - 0x874]
mov eax, dword [ebp - 0x850]
add ecx, 2
add eax, 3
imul eax, ecx
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000001
jns 0x408c8e
dec eax
or eax, 0xfffffffe
add eax, 1
jne 0x408d3a
mov esi, 5
nop dword [eax]
mov eax, dword [ebp - 0x874]
cdq
idiv esi
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x408cb6
dec eax
jmp 0x408cb7
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000001
jns 0x408cd1
dec eax
or eax, 0xfffffffe
add eax, 1
je 0x408ca0
jmp 0x408d3a
mov eax, dword [ebp - 0x874]
mov esi, 5
cdq
idiv esi
test edx, edx
je 0x408d3a
mov eax, dword [ebp - 0x874]
mov ecx, dword [ebp - 0x850]
add eax, 0xb
cdq
add ecx, 0x17
idiv ecx
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
jne 0x408d3a
nop
mov eax, dword [ebp - 0x874]
cdq
idiv esi
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x408d26
inc eax
jmp 0x408d27
dec eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
je 0x408d10
push 0x6b
push 0x6e516edb
mov edx, 0x19
xor ecx, ecx
call fcn.00405390
add esp, 8
lea ecx, [ebp - 0x870]
push ecx
call eax
mov eax, dword [ebp - 0x858]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov ecx, dword [ebp - 0x854]
test ecx, ecx
jne 0x4080d0
mov ecx, dword [ebp - 0x85c]
test ecx, ecx
je 0x408d83
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov eax, dword [ebp - 0x848]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x84c]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x854]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push 0x5e
push 0x4191904a
mov edx, 0x18
xor ecx, ecx
call fcn.00405390
add esp, 8
call eax
mov ecx, dword [ebp - 4]
mov eax, 1
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0041bff4
mov esp, ebp
pop ebp
ret