Function at 0x407ac4
Capabilities:
Contain obfuscated stackstrings
Get number of processors
Resolve function by parsing pe exports

Disassembly:
or eax, 0x15089
sub eax, 0xfaa1
and eax, 0x161d3
pop eax
mov byte [ebp - 0x198], 0x47
mov byte [ebp - 0x197], 0x65
mov byte gs:[ebp - 0x196], 0x74
mov byte [ebp - 0x195], 0x4d
mov byte [ebp - 0x194], 0x6f
mov byte [ebp - 0x193], 0x64
mov byte [ebp - 0x192], 0x75
mov byte [ebp - 0x191], 0x6c
mov byte [ebp - 0x190], 0x65
mov byte [ebp - 0x18f], 0x48
mov byte [ebp - 0x18e], 0x61
mov byte [ebp - 0x18d], 0x6e
mov byte [ebp - 0x18c], 0x64
mov byte [ebp - 0x18b], 0x6c
mov byte [ebp - 0x18a], 0x65
mov byte [ebp - 0x189], 0x45
mov byte [ebp - 0x188], 0x78
mov byte [ebp - 0x187], 0x57
mov byte [ebp - 0x186], 0
mov ecx, dword [ebp - 0x4b0]
mov dword [ebp - 0x1b4], ecx
push edi
push edx
add esp, 4
or edi, 0x6b3c
or edi, 0x17d96
pop edi
push ecx
xor ecx, 0x8e47
sub ecx, 0x15f8
and ecx, 0x14eeb
pop ecx
push ecx
push ebx
add esp, 4
or ecx, 0x1363
pop ecx
push edx
push edi
add esp, 4
add edx, 0x916a
pop edx
push ebx
and ebx, 0x14309
add ebx, 0x168ec
sub ebx, 0x3c1b
add ebx, 0x9fd6
pop ebx
push edx
push eax
add esp, 4
sub edx, 0x13d9b
pop edx
mov edx, dword fs:[0x18]
mov dword [ebp - 0x434], edx
push edi
jmp 0x40757b
jmp 0x407582
add edi, 0x4306
jmp 0x40758d
pop edi
push eax
push edi
add esp, 4
or eax, 0x13968
jmp 0x4075a0
or eax, 0xe90d
pop eax
mov eax, dword [ebp - 0x434]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0x480], ecx
push ebx
xor ebx, 0xb946
call 0x4075cd
add byte [edi + 0x40], al
push eax
inc ebp
xor esi, dword [edi]
cmp dword [ecx + ecx*2 + 0x34], eax
add esp, 4
xor ebx, 0x80f1
jmp 0x4075df
pop ebx
push edx
jmp 0x4075e7
pop edx
mov edx, dword [ebp - 0x480]
mov dword [ebp - 0x368], edx
cmp dword [ebp - 0x368], 0
jne 0x40763b
push ecx
xor ecx, 0x38cd
and ecx, 0x17bbc
and ecx, 0x853c
sub ecx, 0x116f
pop ecx
push esi
push edx
add esp, 4
or esi, 0x6785
add esi, 0x261f
and esi, 0xbcc5
pop esi
mov dword [ebp - 0x6c], 0
jmp 0x4079c7
push ecx
add ecx, 0x1499c
and ecx, 0xb4a8
pop ecx
push ecx
xor ecx, 0xa524
xor ecx, 0x10481
call 0x407663
add byte [ebx], bh
inc ebp
dec edi
aaa
dec esi
inc edi
dec esi
add esp, 4
or ecx, 0x17cd1
pop ecx
mov eax, dword [ebp - 0x368]
mov ecx, dword [eax + 0xc]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0x1ec], edx
cmp dword [ebp - 0x1ec], 0
jne 0x4076c6
push esi
add esi, 0xab9
or esi, 0x80e1
add esi, 0x361c
jmp 0x4076a1
pop esi
push esi
jmp 0x4076aa
and esi, 0x90c2
jmp 0x4076b9
pop esi
mov dword [ebp - 0x6c], 0
jmp 0x4079c7
mov eax, dword [ebp - 0x1ec]
mov dword [ebp - 0xc4], eax
push ebx
sub ebx, 0x185f4
or ebx, 0x166b4
call 0x4076ed
add byte [edi + eax*2], dh
xor eax, dword [eax + 0x4e]
xor bh, byte [eax]
cmp eax, 0xe804c483
or eax, dword [eax]
add byte [eax], al
add byte [edi + 0x46], cl
dec edx
dec edi
dec eax
cmp esi, dword [ebx]
inc edi
aas
add esp, 4
pop ebx
lea ecx, [ebp - 0x2b0]
mov dword [ebp - 0x1e8], ecx
mov edx, dword [ebp - 0xc4]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x1e4], eax
push ebx
add ebx, 0x13371
call 0x407733
add byte [ebp + 0x3d], al
dec ecx
inc esp
push eax
dec ecx
add esp, 4
call 0x407745
add byte [edi], dh
inc eax
dec esi
xor cl, byte [esp + esi + 0x3d]
xor al, 0x44
add esp, 4
pop ebx
push esi
add esi, 0x114c4
pop esi
xor ecx, ecx
mov word [ebp - 0x54], cx
xor edx, edx
mov word [ebp - 8], dx
push esi
call 0x40776a
add byte [eax + 0x44], dl
xor ecx, dword [ebx + 0x44]
dec esp
add esp, 4
call 0x40777a
add byte [eax + 0x32], cl
cmp dword [edx], esi
inc ebx
inc ecx
dec esi
add esp, 4
pop esi
push ebx
push esi
add esp, 4
jmp 0x407788
and ebx, 0xe214
pop ebx
mov eax, dword [ebp - 0x1e4]
mov cx, word [eax]
mov word [ebp - 0x288], cx
mov edx, dword [ebp - 0x1e4]
add edx, 2
mov dword [ebp - 0x1e4], edx
mov ax, word [ebp - 0x288]
mov word [ebp - 0x54], ax
push ecx
jmp 0x4077bf
and ecx, 0xf68a
pop ecx
push ecx
push edx
add esp, 4
xor ecx, 0xc344
pop ecx
push eax
push eax
add esp, 4
call 0x4077e7
add byte [ecx + ecx*2], dh
xor al, 0x4f
cmp dword [0x3937343c], edi
add esp, 4
pop eax
mov ecx, dword [ebp - 0x1e8]
mov dx, word [ecx]
mov word [ebp - 0x28a], dx
mov eax, dword [ebp - 0x1e8]
add eax, 2
mov dword [ebp - 0x1e8], eax
mov cx, word [ebp - 0x28a]
mov word [ebp - 8], cx
push esi
jmp 0x40781e
jmp 0x407824
pop esi
push edx
push edx
add esp, 4
sub edx, 0xdf24
and edx, 0x1aa9
pop edx
push ecx
add ecx, 0x17c1b
jmp 0x407846
pop ecx
movzx edx, word [ebp - 8]
test edx, edx
jne 0x407864
movzx eax, word [ebp - 0x54]
movzx ecx, word [ebp - 8]
sub eax, ecx
mov dword [ebp - 0x370], eax
jmp 0x4078e7
movzx edx, word [ebp - 0x54]
movzx eax, word [ebp - 8]
cmp edx, eax
je 0x40775d
movzx ecx, word [ebp - 0x54]
xor ecx, 0x20
movzx edx, word [ebp - 8]
cmp ecx, edx
je 0x40775d
push esi
push esi
add esp, 4
call 0x407899
add byte [ebx], dh
dec eax
xor eax, 0x40354838
add esp, 4
pop esi
push eax
push ecx
add esp, 4
add eax, 0x2407
call 0x4078b5
add byte [edx], bh
dec ebp
dec edi
dec edx
dec edx
cmp eax, dword [ebx + 0xf5804c4]
mov bh, 0x45
lodsb al, byte [esi]
movzx ecx, word [ebp - 8]
cmp eax, ecx
jge 0x4078d1
mov dword [ebp - 0x36c], 0xffffffff
jmp 0x4078db
mov dword [ebp - 0x36c], 1
mov edx, dword [ebp - 0x36c]
mov dword [ebp - 0x370], edx
cmp dword [ebp - 0x370], 0
jne 0x407930
push eax
push ebx
add esp, 4
sub eax, 0xf715
jmp 0x407901
xor eax, 0x13cc2
pop eax
push eax
sub eax, 0x18b3
and eax, 0x1353a
pop eax
push edx
push eax
add esp, 4
add edx, 0x106b9
pop edx
mov eax, dword [ebp - 0xc4]
mov dword [ebp - 0x6c], eax
jmp 0x4079c7
mov ecx, dword [ebp - 0xc4]
mov edx, dword [ecx]
mov dword [ebp - 0xc4], edx
push esi
jmp 0x407946
call 0x407953
add byte [0x3837344b], dh
inc ecx
xor al, 0x83
les eax, [ecx + eax*4]
out dx, al
dec edx
add dword [eax], 0x9de68100
and eax, dword [eax]
add byte [esi + 0x57], bl
jmp 0x407969
xor edi, 0x154f4
pop edi
mov eax, dword [ebp - 0xc4]
cmp eax, dword [ebp - 0x1ec]
je 0x40798e
mov ecx, dword [ebp - 0xc4]
cmp dword [ecx + 0x30], 0
jne 0x4076d2
push ebx
call 0x40799f
add byte [edx], dh
dec ebp
dec edi
dec ebx
cmp al, 0x42
cmp dword [ebx], edi
dec edx
add esp, 4
or ebx, 0x11615
jmp 0x4079b0
call 0x4079bc
add byte [ebp + 0x4f], al
cmp eax, 0x83443933
les eax, [ebx + ebx*2]
mov dword [ebp - 0x6c], 0
cmp dword [ebp - 0x6c], 0
jne 0x40867c
push eax
or eax, 0x13c1b
pop eax
push esi
push eax
add esp, 4
jmp 0x4079e3
and esi, 0x841e
xor esi, 0xeb29
sub esi, 0x14c05
pop esi
push edx
push edi
add esp, 4
jmp 0x407a02
pop edx
mov edx, 0x6b
mov word [ebp - 0x3bc], dx
mov eax, 0x65
mov word [ebp - 0x3ba], ax
mov ecx, 0x72
mov word [ebp - 0x3b8], cx
mov edx, 0x6e
mov word [ebp - 0x3b6], dx
mov eax, 0x65
mov word [ebp - 0x3b4], ax
mov ecx, 0x6c
mov word [ebp - 0x3b2], cx
mov edx, 0x33
mov word [ebp - 0x3b0], dx
mov eax, 0x32
mov word [ebp - 0x3ae], ax
mov ecx, 0x2e
mov word [ebp - 0x3ac], cx
mov edx, 0x64
mov word [ebp - 0x3aa], dx
mov eax, 0x6c
mov word [ebp - 0x3a8], ax
mov ecx, 0x6c
mov word [ebp - 0x3a6], cx
xor edx, edx
mov word [ebp - 0x3a4], dx
push edx
sub edx, 0x309f
add edx, 0xbeec
pop edx
push esi
jmp 0x407ab2
xor esi, 0x10651
call 0x407ac4
add byte [eax + edx*2 + 0x32], al
xor al, byte [edi + 0x4d]
inc edx
add esp, 4
and esi, 0xe3bc
pop esi
mov byte [ebp - 0x154], 0x4c
mov byte [ebp - 0x153], 0x6f
mov byte [ebp - 0x152], 0x61
mov byte [ebp - 0x151], 0x64
mov byte [ebp - 0x150], 0x4c
mov byte [ebp - 0x14f], 0x69
mov byte [ebp - 0x14e], 0x62
mov byte [ebp - 0x14d], 0x72
mov byte [ebp - 0x14c], 0x61
mov byte [ebp - 0x14b], 0x72
mov byte [ebp - 0x14a], 0x79
mov byte [ebp - 0x149], 0x57
mov byte [ebp - 0x148], 0
push esi
push edi
add esp, 4
add esi, 0x353c
pop esi
push ebx
push ebx
add esp, 4
and ebx, 0x1610a
and ebx, 0x360d
pop ebx
push esi
add esi, 0x1761d
add esi, 0x169
or esi, 0x1534
pop esi
push eax
push eax
add esp, 4
jmp 0x407b69
or eax, 0x90d8
pop eax
push ebx
push eax
add esp, 4
and ebx, 0x94f8
jmp 0x407b80
pop ebx
push ecx
push eax
add esp, 4
xor ecx, 0xfb56
pop ecx
mov eax, dword fs:[0x18]
mov dword [ebp - 0x484], eax
push ebx
push eax
add esp, 4
jmp 0x407ba5
and ebx, 0xe3a8
call 0x407bbb
add byte [ebx + 0x4e], cl
aaa
dec ebx
aas
inc esi
cmp eax, 0x83433b4b
les eax, [ebx + ebx*2]
push ebx
push ebx
add esp, 4
sub ebx, 0x4ec3
pop ebx
mov ecx, dword [ebp - 0x484]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x488], edx
push edi
and edi, 0x1408f
pop edi
push esi
jmp 0x407beb
pop esi
push ebx
xor ebx, 0x11cb6
pop ebx
push eax
push ecx
add esp, 4
sub eax, 0x59eb
pop eax
push edi
push edx
add esp, 4
and edi, 0x11e3d
pop edi
mov eax, dword [ebp - 0x488]
mov dword [ebp - 0x374], eax
cmp dword [ebp - 0x374], 0
jne 0x407c62
push edi
push edx
add esp, 4
call 0x407c33
add byte [ebx], bh
xor eax, 0x38394347
xor al, byte [ebx - 0x187efb3c]
adc dword [eax], edi
add dword [eax], eax
xor edi, 0x15c41
call 0x407c4f
add byte [esi], dh
aas
inc ebp
inc esp
inc ebx
cmp dword [0x5f04c483], esi
mov dword [ebp - 0x118], 0
jmp 0x407ff7
push edx
sub edx, 0x14332
or edx, 0x93b3
pop edx
push ebx
push ebx
add esp, 4
add ebx, 0x13253
call 0x407c8a
add byte [esi], dh
inc ecx
dec ebx
xor eax, 0x3e393e35
dec ecx
add esp, 4
xor ebx, 0x4e49
pop ebx
mov ecx, dword [ebp - 0x374]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0x1f8], eax
cmp dword [ebp - 0x1f8], 0
jne 0x407cf0
push edx
push edx
add esp, 4
xor edx, 0xe09d
pop edx
push ebx
push esi
add esp, 4
jmp 0x407cc5
pop ebx
push eax
push esi
add esp, 4
jmp 0x407cd3
jmp 0x407cda
xor eax, 0x11c03
pop eax
mov dword [ebp - 0x118], 0
jmp 0x407ff7
mov ecx, dword [ebp - 0x1f8]
mov dword [ebp - 0xc0], ecx
push edi
sub edi, 0xefde
or edi, 0x4faf
sub edi, 0x1811e
call 0x407d1c
add byte [edi], bh
cmp ecx, dword [eax + 0x4c]
dec esp
cmp al, 0x46
add esp, 4
pop edi
push esi
sub esi, 0x12f67
xor esi, 0x8b49
pop esi
lea edx, [ebp - 0x3bc]
mov dword [ebp - 0x1f4], edx
mov eax, dword [ebp - 0xc0]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0x1f0], ecx
push edx
or edx, 0x13717
sub edx, 0x16d25
pop edx
push edi
push ecx
add esp, 4
or edi, 0xcba4
pop edi
push ebx
sub ebx, 0x7136
pop ebx
push ebx
sub ebx, 0x11c25
pop ebx
push ebx
or ebx, 0x1225b
pop ebx
xor edx, edx
mov word [ebp - 0x58], dx
xor eax, eax
mov word [ebp - 0xc], ax
push ebx
push edi
add esp, 4
jmp 0x407d95
pop ebx
push esi
call 0x407da3
add byte [edx + 0x33], cl
dec ecx
inc eax
aas
add esp, 4
add esi, 0x41c7
add esi, 0x1250c
add esi, 0x17ef2
pop esi
mov ecx, dword [ebp - 0x1f0]
mov dx, word [ecx]
mov word [ebp - 0x28c], dx
mov eax, dword [ebp - 0x1f0]
add eax, 2
mov dword [ebp - 0x1f0], eax
mov cx, word [ebp - 0x28c]
mov word [ebp - 0x58], cx
push eax
and eax, 0xe5eb
pop eax
push edx
push edi
add esp, 4
call 0x407dfe
add byte [ecx + 0x37], al
dec esp
xor dh, byte [0x8349493e]
les eax, [eax + ebp*8]
or eax, dword [eax]
add byte [eax], al
add byte [esi], dh
inc esi
dec edi
inc esi
inc edi
aas
dec esi
inc edi
dec ebx
dec ecx
add esp, 4
pop edx
mov edx, dword [ebp - 0x1f4]
mov ax, word [edx]
mov word [ebp - 0x28e], ax
mov ecx, dword [ebp - 0x1f4]
add ecx, 2
mov dword [ebp - 0x1f4], ecx
mov dx, word [ebp - 0x28e]
mov word [ebp - 0xc], dx
push eax
push ecx
add esp, 4
and eax, 0xf5bd
add eax, 0x5b8e
pop eax
push edx
add edx, 0x87ee
sub edx, 0xcff1
pop edx
push ebx
push ecx
add esp, 4
xor ebx, 0x184da
add ebx, 0x1369e
pop ebx
movzx eax, word [ebp - 0xc]
test eax, eax
jne 0x407e8e
movzx ecx, word [ebp - 0x58]
movzx edx, word [ebp - 0xc]
sub ecx, edx
mov dword [ebp - 0x37c], ecx
jmp 0x407f11
movzx eax, word [ebp - 0x58]
movzx ecx, word [ebp - 0xc]
cmp eax, ecx
je 0x407d87
movzx edx, word [ebp - 0x58]
xor edx, 0x20
movzx eax, word [ebp - 0xc]
cmp edx, eax
je 0x407d87
push eax
call 0x407ec0
add byte [edx + edi + 0x35], cl
dec edx
xor edi, dword [eax]
dec esp
dec ebp
add esp, 4
and eax, 0x4b94
call 0x407ed9
add byte [ebp + 0x4f], al
xor eax, 0x383d413f
xor ecx, dword [esi + 0x32]
add esp, 4
and eax, 0xce1a
pop eax
movzx ecx, word [ebp - 0x58]
movzx edx, word [ebp - 0xc]
cmp ecx, edx
jge 0x407efb
mov dword [ebp - 0x378], 0xffffffff
jmp 0x407f05
mov dword [ebp - 0x378], 1
mov eax, dword [ebp - 0x378]
mov dword [ebp - 0x37c], eax
cmp dword [ebp - 0x37c], 0
jne 0x407f5d
push ecx
push edi
add esp, 4
jmp 0x407f27
sub ecx, 0x6797
and ecx, 0x6ac0
pop ecx
push edx
push ebx
add esp, 4
and edx, 0x65b8
add edx, 0x4f68
add edx, 0x4bd8
pop edx
mov ecx, dword [ebp - 0xc0]
mov dword [ebp - 0x118], ecx
jmp 0x407ff7
mov edx, dword [ebp - 0xc0]
mov eax, dword [edx]
mov dword [ebp - 0xc0], eax
push ecx
push ebx
add esp, 4
call 0x407f7e
add byte [edx], dh
xor al, 0x48
inc ecx
xor al, 0x4a
cmp byte [edx], bh
add esp, 4
pop ecx
push esi
call 0x407f91
add byte [edx], dh
xor ecx, dword [eax + 0x38]
inc eax
inc ebx
cmp esi, dword [ebx]
add esp, 4
jmp 0x407f9c
pop esi
mov ecx, dword [ebp - 0xc0]
cmp ecx, dword [ebp - 0x1f8]
je 0x407fbb
mov edx, dword [ebp - 0xc0]
cmp dword [edx + 0x30], 0
jne 0x407cfc
push esi
add esi, 0x1f5b
sub esi, 0x15a2a
pop esi
push esi
push ecx
add esp, 4
or esi, 0xd94a
add esi, 0x15b98
or esi, 0x450a
pop esi
push eax
push eax
add esp, 4
or eax, 0x6155
pop eax
mov dword [ebp - 0x118], 0
cmp dword [ebp - 0x118], 0
jne 0x408041
push edi
or edi, 0x5bc2
and edi, 0x12d5a
xor edi, 0x22e6
sub edi, 0xbea8
pop edi
push esi
push edx
add esp, 4
add esi, 0x13981
add esi, 0x157a4
add esi, 0x14c62
pop esi
mov dword [ebp - 0x1b4], 0
jmp 0x40913d
mov eax, dword [ebp - 0x118]
mov ecx, dword [eax + 0x18]
mov dword [ebp - 0x8c], ecx
mov dword [ebp - 0x128], 0
push edi
or edi, 0xf84
xor edi, 0x1032b
pop edi
push ebx
push ecx
add esp, 4
jmp 0x408075
call 0x408082
add byte [edx + edi + 0x41], al
inc esi
dec ecx
xor cl, byte [edx - 0x7d]
les eax, [ecx + eax*4]
jmp 0x40805b
push ecx
push eax
add esp, 4
or ecx, 0x533c
add ecx, 0xa9ef
or ecx, 0x1f61
pop ecx
push esi
and esi, 0x52f0
pop esi
push edx
call 0x4086aa
add byte [esi + eax*2], bh
cmp dword [edx + 0x3d], ecx
xor eax, 0x4c48346
pop edx
push esi
push eax
add esp, 4
or esi, 0x11b68
pop esi
push esi
push edx
add esp, 4
sub esi, 0xed40
call 0x4086d4
add byte [ebp + 0x36], cl
cmp ecx, dword [edx + eax*2 + 0x3b]
cmp cl, byte ds:[ebp - 0x7d]
les eax, [ebx + ebp*8]
push es
dec esp
inc eax
dec esi
inc edi
dec ecx
inc edi
pop esi
mov eax, dword fs:[0x18]
mov dword [ebp - 0x4a4], eax
push esi
push ecx
add esp, 4
jmp 0x4086f7
sub esi, 0xb9b9
add esi, 0x2021
pop esi
push edx
or edx, 0x27bc
pop edx
push ebx
push eax
add esp, 4
or ebx, 0x3ea0
add ebx, 0x145ab
pop ebx
mov ecx, dword [ebp - 0x4a4]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x3dc], edx
push ebx
push esi
add esp, 4
add ebx, 0x59c5
or ebx, 0x11f47
pop ebx
push eax
and eax, 0x169ff
pop eax
push eax
push esi
add esp, 4
call 0x40875b
add byte [0x503a3e4c], bh
inc esp
dec esi
dec edi
add esp, 4
pop eax
mov eax, dword [ebp - 0x3dc]
mov dword [ebp - 0x2b8], eax
cmp dword [ebp - 0x2b8], 0
jne 0x4087b2
push edi
add edi, 0x1656
xor edi, 0xd6c2
pop edi
push edi
call 0x408793
add byte [esi], dh
xor eax, 0x3d3a4b47
inc edi
cmp eax, 0x4c48342
and edi, 0x150cf
jmp 0x4087a5
pop edi
mov dword [ebp - 0x6c], 0
jmp 0x408b3e
push eax
push edx
add esp, 4
jmp 0x4087bf
jmp 0x4087c7
or eax, 0xf779
pop eax
push edx
and edx, 0x1465a
pop edx
push eax
sub eax, 0x6f3c
add eax, 0x6f37
pop eax
mov ecx, dword [ebp - 0x2b8]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0x208], eax
cmp dword [ebp - 0x208], 0
jne 0x40883d
push ecx
push eax
add esp, 4
sub ecx, 0x136d
pop ecx
push edx
push esi
add esp, 4
jmp 0x408817
call 0x408825
add byte [eax + 0x45], al
cmp dword ds:[ebx + ecx*2], edi
aas
push eax
add esp, 4
pop edx
push edx
jmp 0x408830
pop edx
mov dword [ebp - 0x6c], 0
jmp 0x408b3e
mov ecx, dword [ebp - 0x208]
mov dword [ebp - 0xc8], ecx
push edx
add edx, 0xb200
or edx, 0x7004
and edx, 0x8663
jmp 0x408863
pop edx
push edi
push edi
add esp, 4
call 0x408877
add byte [ebp + 0x47], al
cmp al, 0x49
xor ecx, dword [ebx + 0x4d]
inc esp
add esp, 4
pop edi
lea edx, [ebp - 0x2b0]
mov dword [ebp - 0x204], edx
mov eax, dword [ebp - 0xc8]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0x200], ecx
push esi
push ecx
add esp, 4
or esi, 0x4c3c
add esi, 0x5982
and esi, 0x1092
sub esi, 0x1318f
pop esi
push esi
add esi, 0x17c62
add esi, 0x2111
or esi, 0x18278
pop esi
xor edx, edx
mov word [ebp - 0x5c], dx
xor eax, eax
mov word [ebp - 0x10], ax
push esi
push edx
add esp, 4
or esi, 0xb532
call 0x4088ee
add byte [esi], dh
aaa
aaa
inc ebp
dec edi
xor eax, 0x834e3f37
les eax, [ecx + eax*4]
invalid
push esi
xor esi, 0x2ef5
call 0x408b52
add byte [edi + 0x44], al
dec ebp
inc eax
inc ecx
cmp byte [ecx], bh
add esp, 4
add esi, 0x3d78
pop esi
push esi
and esi, 0x15ab1
or esi, 0x82b4
add esi, 0xbe49
pop esi
mov eax, dword [ebp - 0x6c]
mov ecx, dword [eax + 0x18]
mov dword [ebp - 0x88], ecx
push eax
or eax, 0xb9ab
jmp 0x408b8a
call 0x408b98
add byte [edx + 0x49], cl
xor eax, 0x4a4d403d
inc edx
add esp, 4
and eax, 0x77f9
pop eax
push edi
push eax
add esp, 4
or edi, 0x15f09
pop edi
mov dword [ebp - 0x138], 0
push edx
call 0x408bc8
add byte [eax + eax*2 + 0x4d], al
inc edx
cmp eax, 0x364e4843
add esp, 4
xor edx, 0x116f6
and edx, 0xcf74
add edx, 0x5510
pop edx
push eax
push eax
add esp, 4
xor eax, 0x4ffe
pop eax
mov edx, dword [ebp - 0x88]
mov dword [ebp - 0x2c4], edx
cmp dword [ebp - 0x2c4], 0
jne 0x408c42
push eax
push ecx
add esp, 4
add eax, 0x8c44
or eax, 0x11a5b
and eax, 0x13d5d
jmp 0x408c1d
pop eax
push edx
push ecx
add esp, 4
or edx, 0xad4a
jmp 0x408c30
pop edx
mov eax, dword [ebp - 0x138]
mov dword [ebp - 0x9c], eax
jmp 0x409131
mov ecx, dword [ebp - 0x2c4]
mov edx, dword [ebp - 0x88]
add edx, dword [ecx + 0x3c]
mov dword [ebp - 0x2c8], edx
jne 0x408c6a
mov eax, dword [ebp - 0x138]
mov dword [ebp - 0x9c], eax
jmp 0x409131
push ecx
push edi
add esp, 4
xor ecx, 0x1169a
add ecx, 0x15f05
or ecx, 0xe570
xor ecx, 0x7061
pop ecx
push eax
add eax, 0xeaf9
or eax, 0x1806a
and eax, 0xd020
pop eax
mov ecx, 8
imul edx, ecx, 0
mov eax, dword [ebp - 0x2c8]
mov ecx, dword [eax + edx + 0x78]
mov dword [ebp - 0x2cc], ecx
cmp dword [ebp - 0x2cc], 0
jne 0x408d00
push eax
push edx
add esp, 4
sub eax, 0xb226
sub eax, 0xba57
jmp 0x408cd3
jmp 0x408cda
pop eax
push esi
add esi, 0x2519
or esi, 0x6ba2
add esi, 0x1098a
pop esi
mov edx, dword [ebp - 0x138]
mov dword [ebp - 0x9c], edx
jmp 0x409131
push esi
call 0x408d11
add byte [0x4b324746], bh
inc esp
inc ecx
inc edx
cmp al, 0x44
add esp, 4
pop esi
push eax
push edi
add esp, 4
call 0x408d28
add byte [edx + ecx*2 + 0x42], al
xor eax, 0xc4833633
add al, 0x81
ror byte [ebx + 0x75], 0
add byte [eax - 0x75], bl
test dword [eax - 1], edi
invalid
mov eax, dword [ebp - 0x9c]
mov dword [ebp - 0x1b4], eax
lea ecx, [ebp - 0x1b0]
push ecx
mov edx, dword [ebp + 4]
push edx
push 6
call dword [ebp - 0x1b4]
test eax, eax
jne 0x40918b
push ecx
push eax
add esp, 4
sub ecx, 0x395f
add ecx, 0xc4a
pop ecx
push ebx
xor ebx, 0x17f3c
or ebx, 0x3bb
pop ebx
push edi
push edx
add esp, 4
or edi, 0xd6f1
or edi, 0xc67f
pop edi
jmp 0x40bb58
push esi
add esi, 0x170da
sub esi, 0x1773a
or esi, 0x13840
and esi, 0x5146
pop esi
push ebx
push eax
add esp, 4
xor ebx, 0xaf8a
xor ebx, 0x140f0
or ebx, 0xbfd5
pop ebx
cmp dword [ebp - 0x1b0], 0
je 0x40bb49
push edx
or edx, 0x18242
and edx, 0xf266
pop edx
push eax
or eax, 0x12885
jmp 0x4091e7
or eax, 0xe39e
xor eax, 0x13727
pop eax
push ecx
and ecx, 0x1569d
pop ecx
mov eax, dword [ebp - 0x1b0]
mov dword [ebp - 0x210], eax
push edx
push edi
add esp, 4
add edx, 0x17f20
call 0x409220
add byte [ebx + ecx*2], bh
dec esi
cmp edi, dword [0xc4835048]
add al, 0xe8
or byte [eax], al
add byte [eax], al
add byte [edi + 0x35], al
inc ebx
dec edi
inc esp
push eax
inc ebp
add esp, 4
add edx, 0x463a
pop edx
cmp dword [ebp - 0x210], 0
jne 0x40927a
push eax
push edi
add esp, 4
xor eax, 0x13baa
sub eax, 0x11ec5
pop eax
push edi
push edx
add esp, 4
or edi, 0x7a19
add edi, 0x17f3a
pop edi
push edx
sub edx, 0x10f0b
and edx, 0xbcea
pop edx
jmp 0x40bb58
push ecx
call 0x40928a
add byte [esi], dh
push eax
xor al, 0x4e
dec ebp
push eax
inc edx
aas
dec ebp
add esp, 4
and ecx, 0x17856
sub ecx, 0x101b6
pop ecx
push ebx
push ebx
add esp, 4
or ebx, 0x17087
xor ebx, 0x11573
pop ebx
mov ecx, dword [ebp - 0x210]
mov edx, dword [ebp - 0x210]
add edx, dword [ecx + 0x3c]
mov dword [ebp - 0x2d0], edx
jne 0x4092fa
push ecx
jmp 0x4092cd
or ecx, 0x13ff7
pop ecx
push ebx
call 0x4092e2
add byte [esi], bh
inc esp
aas
dec eax
cmp al, 0x35
dec ecx
add esp, 4
xor ebx, 0x11fa0
pop ebx
push ecx
jmp 0x4092f4
pop ecx
jmp 0x40bb58
mov eax, dword [ebp - 0x2d0]
mov ecx, dword [eax + 0x50]
mov dword [ebp - 0x3f0], ecx
push edx
push edx
add esp, 4
add edx, 0x153b2
and edx, 0x264
call 0x409329
add byte [eax + 0x34], cl
aaa
dec ecx
inc ebx
aas
dec eax
cmp eax, 0x4c48334
and edx, 0xab6c
pop edx
push ebx
add ebx, 0x1589b
pop ebx
mov edx, dword [ebp - 0x1b0]
mov dword [ebp - 0x218], edx
push ecx
push ecx
add esp, 4
or ecx, 0x186d
pop ecx
push ecx
add ecx, 0x14a54
and ecx, 0x395e
xor ecx, 0x81ac
or ecx, 0x8088
pop ecx
push ecx
push edx
add esp, 4
xor ecx, 0x106da
pop ecx
mov eax, dword [ebp - 0x218]
add eax, dword [ebp - 0x3f0]
mov dword [ebp - 0x22c], eax
cmp dword [ebp - 0x218], 0
je 0x40bb49
cmp dword [ebp - 0x22c], 0
je 0x40bb49
push ecx
push esi
add esp, 4
add ecx, 0xdd32
jmp 0x4093b5
and ecx, 0x8ad1
call 0x4093cb
add byte [ebx + 0x50], cl
inc ebx
dec esp
dec edi
dec ebp
inc eax
dec esi
cmp eax, 0x5904c483
push eax
xor eax, 0x186a
pop eax
mov byte [ebp - 0x285], 7
mov byte [ebp - 1], 2
jmp 0x4093ed
mov cl, byte [ebp - 1]
add cl, 1
mov byte [ebp - 1], cl
movzx edx, byte [ebp - 1]
cmp edx, 7
jge 0x40bb47
push esi
push ecx
add esp, 4
jmp 0x409405
call 0x409412
add byte [eax + 0x49], al
inc eax
cmp eax, 0x834f3b4c
les eax, [ecx + eax*4]
out dx, al
mov byte [ebx], al
add dword [eax], eax
call 0x409428
add byte [ebx + 0x4c], cl
cmp eax, 0x4d434c48
add esp, 4
pop esi
mov byte [ebp - 0x1c8], 0xde
mov byte [ebp - 0x1c7], 0xde
mov byte [ebp - 0x1c6], 0xee
mov byte [ebp - 0x1c5], 0xee
mov byte [ebp - 0x1c4], 0xde
mov byte [ebp - 0x1c3], 0xde
mov byte [ebp - 0x1c2], 0xee
mov byte [ebp - 0x1c1], 0xee
mov byte [ebp - 0x1c0], 0xcc
mov byte [ebp - 0x1bf], 0xcc
mov byte [ebp - 0x1be], 0
push ecx
push esi
add esp, 4
or ecx, 0x11961
and ecx, 0x1194f
pop ecx
push eax
jmp 0x409495
add eax, 0x1449
call 0x4094a7
add byte [ebx], dh
dec ebx
dec esp
dec ebx
xor dh, byte [0x5804c483]
mov eax, 1
imul ecx, eax, 0
mov dl, byte [ebp - 1]
mov byte [ebp + ecx - 0x1be], dl
push esi
xor esi, 0x96a8
jmp 0x4094cd
add esi, 0xd958
sub esi, 0x12ee9
pop esi
push eax
push ecx
add esp, 4
jmp 0x4094e8
add eax, 0x13f26
pop eax
mov dword [ebp - 0x4b8], 0xb
mov byte [ebp - 0x1a4], 0x8b
mov byte [ebp - 0x1a3], 0xe5
mov byte [ebp - 0x1a2], 0x5d
mov byte [ebp - 0x1a1], 0xc3
push ecx
push ecx
add esp, 4
or ecx, 0x3800
or ecx, 0xcfb
xor ecx, 0x16076
xor ecx, 0xda9d
pop ecx
push edx
push esi
add esp, 4
sub edx, 0xd0c8
jmp 0x409546
pop edx
mov dword [ebp - 0x4b4], 4
mov dword [ebp - 0x34], 0
mov dword [ebp - 0xcc], 0
mov dword [ebp - 0x328], 0
mov dword [ebp - 0x214], 0
jmp 0x409587
mov eax, dword [ebp - 0x214]
add eax, 1
mov dword [ebp - 0x214], eax
push ebx
add ebx, 0x149ef
or ebx, 0x16650
and ebx, 0x17a1b
pop ebx
push esi
push edx
add esp, 4
sub esi, 0xdb63
xor esi, 0xef0c
and esi, 0x11f15
add esi, 0x127ff
pop esi
mov ecx, dword [ebp - 0x214]
add ecx, dword [ebp - 0x218]
mov dword [ebp - 0x34], ecx
mov edx, dword [ebp - 0x34]
cmp edx, dword [ebp - 0x22c]
jb 0x40960a
push edx
push edi
add esp, 4
add edx, 0x2a1c
call 0x4095ea
add byte [edx], bh
cmp bh, byte [esp + edi]
xor edi, dword [ebx]
add esp, 4
call 0x4095fb
add byte [ebp + 0x4f], cl
cmp al, 0x4d
cmp byte [ebx + 0x36], al
xor eax, dword [ebx - 0x357efb3c]
mov al, byte [0x5a000108]
jmp 0x409cc1
mov dword [ebp - 0x21c], 0xb
mov eax, 1
imul ecx, eax, 0
lea edx, [ebp + ecx - 0x1c8]
mov dword [ebp - 0x2d4], edx
push ecx
push ecx
add esp, 4
call 0x40963b
add byte [0x4b394940], dh
aaa
dec ebp
add esp, 4
pop ecx
push eax
sub eax, 0xb883
xor eax, 0x12ee9
or eax, 0x1134d
pop eax
push esi
sub esi, 0x6c53
pop esi
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x1ac], eax
push edi
add edi, 0x9a97
pop edi
push edx
push esi
add esp, 4
add edx, 0x3ee7
sub edx, 0xd453
and edx, 0xc0fa
pop edx
push edx
push eax
add esp, 4
sub edx, 0x18041
xor edx, 0xd5dc
pop edx
mov ecx, dword [ebp - 0x2d4]
mov dword [ebp - 0x1a8], ecx
mov dword [ebp - 0x220], 0
push edi
xor edi, 0xf0fe
pop edi
push ecx
push esi
add esp, 4
xor ecx, 0xe32f
pop ecx
push ebx
push esi
add esp, 4
xor ebx, 0x7824
call 0x4096da
add byte [ebp + edi + 0x4b], al
inc ebx
dec esp
dec ecx
xor eax, dword ds:[ecx - 0x7d]
les eax, [ebx + ebx*2]
mov edx, dword [ebp - 0x34]
cmp edx, dword [ebp - 0x2d4]
jne 0x40972c
push edi
push ecx
add esp, 4
jmp 0x4096f6
or edi, 0x1219e
xor edi, 0x84
pop edi
push eax
push edx
add esp, 4
call 0x409717
add byte [edx + 0x4d], al
inc eax
xor al, byte [ebp + 0x48]
cmp al, 0x3c
inc edx
add esp, 4
pop eax
mov eax, dword [ebp - 0x220]
mov dword [ebp - 0x2dc], eax
jmp 0x4098c4
cmp dword [ebp - 0x21c], 0
jle 0x409886
push eax
push ebx
add esp, 4
add eax, 0x73e2
add eax, 0xa682
jmp 0x409750
and eax, 0x5192
pop eax
push ecx
xor ecx, 0x13dff
add ecx, 0x2da6
sub ecx, 0x8c73
pop ecx
mov ecx, dword [ebp - 0x1ac]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0x1a8]
movzx ecx, byte [eax]
cmp edx, ecx
je 0x4097f0
push ecx
and ecx, 0x4474
jmp 0x409791
xor ecx, 0x9617
xor ecx, 0x10a10
pop ecx
push edx
jmp 0x4097a6
sub edx, 0x625f
or edx, 0x10b3e
pop edx
mov edx, dword [ebp - 0x1ac]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x1a8]
movzx edx, byte [ecx]
cmp eax, edx
jle 0x4097d5
mov dword [ebp - 0x2d8], 1
jmp 0x4097df
mov dword [ebp - 0x2d8], 0xffffffff
mov eax, dword [ebp - 0x2d8]
mov dword [ebp - 0x220], eax
jmp 0x409886
push ecx
push edi
add esp, 4
sub ecx, 0x235a
pop ecx
push edi
add edi, 0x7315
sub edi, 0xce34
pop edi
push eax
push esi
add esp, 4
or eax, 0x5808
pop eax
push ebx
push esi
add esp, 4
xor ebx, 0x13c2c
pop ebx
mov ecx, dword [ebp - 0x21c]
sub ecx, 1
mov dword [ebp - 0x21c], ecx
mov edx, dword [ebp - 0x1ac]
add edx, 1
mov dword [ebp - 0x1ac], edx
push edi
push esi
add esp, 4
jmp 0x40984b
and edi, 0xc591
call 0x409860
add byte [ebp + 0x42], al
inc esi
inc edx
inc edi
xor al, 0x36
cmp eax, dword [ebx - 0x187efb3c]
nop
adc eax, dword [eax]
add byte [edi + 0x56], bl
and esi, 0x2880
pop esi
mov eax, dword [ebp - 0x1a8]
add eax, 1
mov dword [ebp - 0x1a8], eax
jmp 0x40972c
push edx
add edx, 0xf569
sub edx, 0x2501
pop edx
push esi
push eax
add esp, 4
xor esi, 0x2311
sub esi, 0x2e22
pop esi
push edx
push ecx
add esp, 4
sub edx, 0x5b85
and edx, 0x59fc
pop edx
mov ecx, dword [ebp - 0x220]
mov dword [ebp - 0x2dc], ecx
cmp dword [ebp - 0x2dc], 0
jne 0x409cbc
push edx
or edx, 0x62ca
pop edx
push eax
push edi
add esp, 4
sub eax, 0x3904
add eax, 0x16ab2
pop eax
push ecx
push edx
add esp, 4
jmp 0x4098f6
sub ecx, 0x6b67
add ecx, 0x8f43
pop ecx
mov edx, dword [ebp - 0x34]
add edx, 0xb
mov dword [ebp - 0x34], edx
push esi
push edx
add esp, 4
add esi, 0x1467d
pop esi
push ecx
push ebx
add esp, 4
add ecx, 0x14683
or ecx, 0x862
add ecx, 0x1719a
pop ecx
push edx
push ebx
add esp, 4
jmp 0x40993d
pop edx
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0xcc], eax
mov dword [ebp - 0x224], 4
mov ecx, 1
imul edx, ecx, 0
lea eax, [ebp + edx - 0x1a4]
mov dword [ebp - 0x2e0], eax
push edx
jmp 0x40996e
pop edx
push edi
call 0x409980
add byte [edi + 0x33], cl
dec eax
dec esi
xor ecx, dword [ecx + 0x4c]
inc ebx
cmp dword [edi], edi
add esp, 4
add edi, 0x6182
pop edi
push eax
push ecx
add esp, 4
jmp 0x409997
pop eax
mov ecx, dword [ebp - 0x34]
mov dword [ebp - 0x1a0], ecx
push ecx
xor ecx, 0x3ba4
or ecx, 0xe089
pop ecx
push eax
push edi
add esp, 4
or eax, 0x6757
pop eax
push eax
push ecx
add esp, 4
or eax, 0xd9fa
sub eax, 0xced1
sub eax, 0x3067
pop eax
mov edx, dword [ebp - 0x2e0]
mov dword [ebp - 0x19c], edx
mov dword [ebp - 0x228], 0
push esi
and esi, 0x3193
jmp 0x4099f7
pop esi
push edx
sub edx, 0xce21
and edx, 0x14189
pop edx
push ecx
push esi
add esp, 4
jmp 0x409a12
jmp 0x409a1a
pop ecx
mov eax, dword [ebp - 0x34]
cmp eax, dword [ebp - 0x2e0]
jne 0x409a69
push eax
sub eax, 0x1378a
pop eax
push eax
push ebx
add esp, 4
sub eax, 0x10d9f
jmp 0x409a3f
or eax, 0x10883
call 0x409a54
add byte [edi], bh
inc ecx
dec edi
xor eax, 0x47413246
xor eax, dword [ebx - 0x74a7fb3c]
invalid
cmp dword [ebp - 0x224], 0
jle 0x409bc3
push esi
xor esi, 0xc177
pop esi
push ecx
push eax
add esp, 4
jmp 0x409a89
sub ecx, 0xd1d3
xor ecx, 0xb80d
or ecx, 0xa7ef
pop ecx
push eax
push ecx
add esp, 4
or eax, 0x16667
pop eax
mov edx, dword [ebp - 0x1a0]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x19c]
movzx edx, byte [ecx]
cmp eax, edx
je 0x409b2d
push ebx
push edx
add esp, 4
or ebx, 0x1659a
sub ebx, 0x15c83
and ebx, 0xa8e7
add ebx, 0xb23
pop ebx
push edx
sub edx, 0x1845f
xor edx, 0x5e96
and edx, 0xa6f
pop edx
mov eax, dword [ebp - 0x1a0]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x19c]
movzx eax, byte [edx]
cmp ecx, eax
jle 0x409b12
mov dword [ebp - 0x2e4], 1
jmp 0x409b1c
mov dword [ebp - 0x2e4], 0xffffffff
mov ecx, dword [ebp - 0x2e4]
mov dword [ebp - 0x228], ecx
jmp 0x409bc3
push edi
push ecx
add esp, 4
jmp 0x409b38
call 0x409b47
add byte [0x33493247], dh
cmp al, byte [edx + 0x33]
aaa
add esp, 4
jmp 0x409b4f
sub edi, 0x9373
pop edi
push esi
jmp 0x409b5e
pop esi
mov edx, dword [ebp - 0x224]
sub edx, 1
mov dword [ebp - 0x224], edx
mov eax, dword [ebp - 0x1a0]
add eax, 1
mov dword [ebp - 0x1a0], eax
push ecx
push edi
add esp, 4
jmp 0x409b88
add ecx, 0x169e3
sub ecx, 0xb325
sub ecx, 0x14cb
pop ecx
push edx
call 0x409bab
add byte [0x4535504d], dh
dec ecx
cmp al, 0x36
aas
add esp, 4
pop edx
mov ecx, dword [ebp - 0x19c]
add ecx, 1
mov dword [ebp - 0x19c], ecx
jmp 0x409a69
push ebx
and ebx, 0xa591
sub ebx, 0x8ea
sub ebx, 0x857d
and ebx, 0x1183c
pop ebx
push esi
push edi
add esp, 4
xor esi, 0x17097
add esi, 0x74b0
or esi, 0xa6ce
pop esi
mov edx, dword [ebp - 0x228]
mov dword [ebp - 0x2e8], edx
cmp dword [ebp - 0x2e8], 0
je 0x409c7c
push edi
call 0x409c1a
add byte [ebx], bh
inc ebp
xor eax, 0x50503d3c
dec esi
cmp eax, 0x8104c483
invalid
push edi
push edx
add esp, 4
or edi, 0x139c4
pop edi
push ecx
and ecx, 0x7bee
add ecx, 0xe316
xor ecx, 0x27b
or ecx, 0x1765c
pop ecx
push eax
push ebx
add esp, 4
xor eax, 0x5d03
pop eax
mov ecx, dword [ebp - 0x34]
add ecx, 4
mov dword [ebp - 0x328], ecx
jmp 0x409cc1
jmp 0x409578
mov edx, dword [ebp - 0xcc]
cmp edx, dword [ebp - 0x22c]
je 0x40bb42
push edi
and edi, 0xae3
call 0x409ce7
add byte [ebx + 0x3e], al
inc ecx
cmp esi, dword [eax + eax*2]
inc ebx
add esp, 4
pop edi
push edi
push ecx
add esp, 4
sub edi, 0xb871
pop edi
push edi
or edi, 0xd81f
sub edi, 0x16705
pop edi
mov byte [ebp - 0x184], 0x56
mov byte [ebp - 0x183], 0x69
mov byte [ebp - 0x182], 0x72
mov byte [ebp - 0x181], 0x74
mov byte [ebp - 0x180], 0x75
mov byte [ebp - 0x17f], 0x61
mov byte [ebp - 0x17e], 0x6c
mov byte [ebp - 0x17d], 0x50
mov byte [ebp - 0x17c], 0x72
mov byte [ebp - 0x17b], 0x6f
mov byte [ebp - 0x17a], 0x74
mov byte [ebp - 0x179], 0x65
mov byte [ebp - 0x178], 0x63
mov byte [ebp - 0x177], 0x74
mov byte [ebp - 0x176], 0
mov dword [ebp - 0x47c], 0
push eax
push edx
add esp, 4
jmp 0x409d82
sub eax, 0xed55
pop eax
push edi
sub edi, 0x1534b
xor edi, 0x11336
call 0x409da6
add byte [ebx], bh
aas
cmp dword [esi], esi
inc ecx
inc edi
cmp al, 0x4d
cmp eax, dword [ebx - 0x74a0fb3c]
test dword [eax - 5], ebx
invalid
jmp 0x4093e4
jmp 0x40bb58
jmp 0x40bb58
mov byte [ebp - 0x144], 0x45
mov byte [ebp - 0x143], 0x78
mov byte [ebp - 0x142], 0x69
mov byte [ebp - 0x141], 0x74
mov byte [ebp - 0x140], 0x50
mov byte [ebp - 0x13f], 0x72
mov byte [ebp - 0x13e], 0x6f
mov byte [ebp - 0x13d], 0x63
mov byte [ebp - 0x13c], 0x65
mov byte [ebp - 0x13b], 0x73
mov byte [ebp - 0x13a], 0x73
mov byte [ebp - 0x139], 0
mov edx, dword [ebp - 0x4ac]
mov dword [ebp - 0x1b8], edx
push eax
and eax, 0xee3c
add eax, 0x1524
and eax, 0x8f02
jmp 0x40bbd1
pop eax
push ebx
push ecx
add esp, 4
call 0x40bbe6
add byte [ecx + 0x41], al
cmp eax, 0x353d3f4b
cmp dword [ebx + eax*4 - 0x3c], eax
add al, 0x5b
push ecx
push ebx
add esp, 4
sub ecx, 0x15beb
call 0x40bc04
add byte [edx], bh
cmp al, 0x36
dec esp
inc edx
inc ebp
inc ecx
inc esp
xor eax, dword [ebx + 0x525904c4]
sub edx, 0xb7a0
xor edx, 0x10af4
sub edx, 0x18034
pop edx
mov eax, dword fs:[0x18]
mov dword [ebp - 0x43c], eax
push esi
push esi
add esp, 4
jmp 0x40bc33
xor esi, 0xbbae
jmp 0x40bc3e
pop esi
push edi
call 0x40bc50
add byte [ebx + 0x39], al
dec esi
inc esi
cmp dword [edi + 0x4c], eax
inc edx
add esp, 4
or edi, 0x7912
pop edi
mov ecx, dword [ebp - 0x43c]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x440], edx
push ebx
push edi
add esp, 4
jmp 0x40bc74
xor ebx, 0x888d
sub ebx, 0x1322e
pop ebx
push esi
and esi, 0xdcf
jmp 0x40bc8e
sub esi, 0x155e3
xor esi, 0x17964
pop esi
mov eax, dword [ebp - 0x440]
mov dword [ebp - 0x32c], eax
cmp dword [ebp - 0x32c], 0
jne 0x40bcee
push edi
xor edi, 0x162e7
sub edi, 0xf2fe
call 0x40bccd
add byte [edx], bh
xor dh, byte [edi + edi]
dec esi
dec esp
aaa
dec esp
aas
xor al, 0x83
les eax, [edi + ebx*2]
push edx
add edx, 0x10cca
jmp 0x40bce1
pop edx
mov dword [ebp - 0x74], 0
jmp 0x40c07a
push edi
xor edi, 0xa920
sub edi, 0x92cc
sub edi, 0x14cd4
call 0x40bd0d
add byte [edx], dh
dec esp
inc ebp
dec ecx
xor eax, 0x4c48335
pop edi
push esi
push edi
add esp, 4
jmp 0x40bd1f
pop esi
mov ecx, dword [ebp - 0x32c]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0x264], eax
cmp dword [ebp - 0x264], 0
jne 0x40bd79
push edx
or edx, 0x7efb
pop edx
push edx
push edx
add esp, 4
add edx, 0x84e1
or edx, 0xd762
pop edx
push esi
sub esi, 0x11672
call 0x40bd69
add byte [esi + 0x4a], cl
push eax
dec ecx
push eax
dec ecx
cmp byte [ebx - 0x38a1fb3c], al
inc ebp
mov word [eax], es
add byte [eax], al
add cl, ch
add dword [ebx], eax
add byte [eax], al
mov ecx, dword [ebp - 0x264]
invalid