Function at 0x404cbe
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov byte [ebp - 0x3ad], dl
movzx eax, byte [ebp - 0x3ad]
test eax, eax
je 0x404346
push eax
or eax, 0x3763
xor eax, 0x16221
and eax, 0x4cda
or eax, 0x62ed
pop eax
push esi
push ecx
add esp, 4
xor esi, 0x38aa
pop esi
push esi
push esi
add esp, 4
sub esi, 0x135df
pop esi
push esi
call 0x4015c2
add byte [0x4f335041], dh
inc edx
inc esi
add esp, 4
and esi, 0x10fca
and esi, 0x864a
pop esi
push edi
push edi
add esp, 4
sub edi, 0x1812a
pop edi
push eax
and eax, 0x150b0
pop eax
mov ecx, dword [ebp - 0x30]
add ecx, 0x70
imul edx, dword [ebp - 0x2c], 0x70
add edx, 0x44f3663b
imul eax, dword [ebp - 0x2c], 0x70
sub edx, eax
xor ecx, edx
imul ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x1e88], ecx
mov ecx, dword [ebp - 0x1e88]
mov dword [ebp - 0x1e8c], ecx
cmp dword [ebp - 0x1e8c], 0x63c1
jne 0x401746
push edi
push edi
add esp, 4
sub edi, 0x2ed
and edi, 0xcc6f
pop edi
push eax
push ebx
add esp, 4
xor eax, 0x11f2f
pop eax
push ebx
push ecx
add esp, 4
sub ebx, 0x4ad3
pop ebx
push edx
sub edx, 0x97a3
pop edx
mov edx, dword [ebp - 0x14]
add edx, 0x70
imul eax, dword [ebp - 0x10], 0x70
add eax, 0x44f3663b
imul ecx, dword [ebp - 0x10], 0x70
sub eax, ecx
xor edx, eax
imul edx, dword [ebp - 0x10]
mov dword [ebp - 0x1e90], edx
mov edx, dword [ebp - 0x1e90]
mov dword [ebp - 0x1e94], edx
mov eax, dword [ebp - 0x1e94]
sub eax, 0x898
mov dword [ebp - 0x1e98], eax
mov dword [ebp - 0x1068], 1
push eax
xor eax, 0x25c8
jmp 0x4016ac
or eax, 0xb3f
pop eax
push esi
or esi, 0xa3fc
call 0x4016c6
add byte [edx + edi], dh
dec edi
push eax
dec esp
push eax
add esp, 4
and esi, 0x1515c
pop esi
imul ecx, dword [ebp - 0x1068], 0x70
add ecx, 0x44f3663b
imul edx, dword [ebp - 0x1068], 0x70
sub ecx, edx
xor ecx, dword [ebp - 0x1e98]
imul ecx, dword [ebp - 0x1068]
imul eax, dword [ebp - 0x1068], 0x70
sub ecx, eax
mov dword [ebp - 0x106c], ecx
mov ecx, dword [ebp - 0x106c]
mov edx, dword [ebp - 0x1068]
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x10], edx
push ecx
push eax
add esp, 4
jmp 0x401721
dec dword [ecx + 0x5589ec4d]
invalid
call 0x40172e
add byte [ebx], dh
cmp eax, 0x484c3248
cmp byte [ebx - 0x367efb3c], al
jge 0x40170d
add byte [eax], al
pop ecx
push ebx
add ebx, 0x12554
xor ebx, 0xcf4
pop ebx
push eax
xor eax, 0x16dc8
jmp 0x401755
call 0x401764
add byte [esi + edi + 0x49], cl
dec esi
cmp al, 0x4f
cmp byte [ebx + 0x43], al
add esp, 4
call 0x401774
add byte [eax], bh
dec edx
dec ecx
xor al, 0x34
push eax
dec ebx
add esp, 4
pop eax
mov eax, dword [ebp - 0x14]
add eax, 0x70
imul ecx, dword [ebp - 0x10], 0x70
add ecx, 0x44f3663b
imul edx, dword [ebp - 0x10], 0x70
sub ecx, edx
xor eax, ecx
imul eax, dword [ebp - 0x10]
mov dword [ebp - 0x1e9c], eax
mov eax, dword [ebp - 0x1e9c]
mov dword [ebp - 0x1f0c], eax
lea ecx, [ebp - 0x9ac]
mov dword [ebp - 0x3e0], ecx
mov edx, dword [ebp - 0x3e0]
mov dword [edx + 4], 1
push eax
push ebx
add esp, 4
xor eax, 0x4840
add eax, 0x2fc7
add eax, 0x7055
xor eax, 0x6c33
pop eax
push ebx
push ebx
add esp, 4
jmp 0x4017ea
or ebx, 0x22f7
pop ebx
mov eax, dword [ebp - 0x3e0]
imul ecx, dword [eax + 4], 0x70
add ecx, 0x44f3663b
mov edx, dword [ebp - 0x3e0]
imul eax, dword [edx + 4], 0x70
sub ecx, eax
xor ecx, 0x23
mov edx, dword [ebp - 0x3e0]
imul ecx, dword [edx + 4]
mov eax, dword [ebp - 0x3e0]
imul edx, dword [eax + 4], 0x70
sub ecx, edx
mov eax, dword [ebp - 0x3e0]
mov dword [eax], ecx
mov ecx, dword [ebp - 0x3e0]
mov dword [ebp - 0x20a0], ecx
push edx
add edx, 0x1108b
and edx, 0x81fd
jmp 0x40184c
pop edx
push ecx
jmp 0x401857
add ecx, 0x11fba
pop ecx
push eax
xor eax, 0xfa78
add eax, 0x185fe
pop eax
mov dword [ebp - 0x15ac], 1
push ebx
sub ebx, 0x516b
sub ebx, 0x3452
pop ebx
push ebx
push edi
add esp, 4
jmp 0x401891
jmp 0x401899
add ebx, 0x1596b
pop ebx
push eax
sub eax, 0x12257
pop eax
mov dword [ebp - 0x20a4], 0x38
mov dword [ebp - 0x20a8], 0xe6
mov dword [ebp - 0x20ac], 0x6e
mov dword [ebp - 0x20b0], 0x6e
mov dword [ebp - 0x20b4], 0x78
mov dword [ebp - 0x1638], 1
push edi
push edx
add esp, 4
call 0x4018f7
add byte [edi], bh
inc edi
push eax
inc edx
dec edx
inc eax
xor al, 0x83
les eax, [ecx + eax*4]
invalid
mov dword [ebp - 0x3f0], 0
call 0x404355
mov eax, 0x13379797
pop eax
mov dword [ebp - 0x3f0], eax
push ecx
push ebx
add esp, 4
call 0x404374
add byte [ebx + esi], bh
xor al, 0x3e
inc ecx
dec esp
cmp al, byte [ebx + 0x7e804c4]
add byte [eax], al
add byte [eax], al
dec ebp
cmp eax, 0x4537493d
add esp, 4
and ecx, 0xb0ac
xor ecx, 0x9560
pop ecx
mov ecx, dword [ebp - 0x20e8]
mov dword [ebp - 0x15c0], ecx
push ecx
call 0x4043af
add byte [eax + 0x38], dl
dec eax
cmp eax, 0x50483c41
aas
add esp, 4
or ecx, 0x148b7
or ecx, 0xe096
sub ecx, 0x180c7
pop ecx
push eax
push eax
add esp, 4
xor eax, 0x110b2
pop eax
mov edx, dword [ebp - 0x14]
add edx, 0x70
imul eax, dword [ebp - 0x10], 0x70
add eax, 0x44f3663b
imul ecx, dword [ebp - 0x10], 0x70
sub eax, ecx
xor edx, eax
imul edx, dword [ebp - 0x10]
mov dword [ebp - 0x15c0], edx
mov edx, dword [ebp - 0x3f0]
mov dword [ebp - 0x204c], edx
mov eax, dword [ebp - 0x204c]
add eax, dword [ebp - 0x15c0]
mov dword [ebp - 0x3f0], eax
push esi
or esi, 0xd8b9
call 0x404425
add byte [eax + 0x49], al
cmp al, 0x4b
cmp al, 0x3b
aaa
add esp, 4
call 0x404438
add byte [edi], dh
dec ecx
inc eax
dec esi
dec ebp
dec esi
dec ebp
inc ebp
add esp, 4
and esi, 0x285e
pop esi
mov byte [ebp - 0xbec], 0x52
mov byte [ebp - 0xbeb], 0xb9
mov byte [ebp - 0xbea], 0x10
mov byte [ebp - 0xbe9], 0x10
mov byte [ebp - 0xbe8], 0x10
mov byte [ebp - 0xbe7], 0x10
mov byte [ebp - 0xbe6], 0x5a
push edi
push esi
add esp, 4
jmp 0x404480
jmp 0x404487
pop edi
push edi
push eax
add esp, 4
or edi, 0x13721
pop edi
push ebx
jmp 0x40449e
or ebx, 0x4fde
pop ebx
mov byte [ebp - 0xbe4], 0x52
mov byte [ebp - 0xbe3], 0xb9
mov byte [ebp - 0xbe2], 0x20
mov byte [ebp - 0xbe1], 0x20
mov byte [ebp - 0xbe0], 0x20
mov byte [ebp - 0xbdf], 0x20
mov byte [ebp - 0xbde], 0x5a
push eax
or eax, 0x146b8
and eax, 0x1578d
add eax, 0xea
and eax, 0x79f1
pop eax
push edi
push edx
add esp, 4
sub edi, 0x79ce
pop edi
push ebx
push ecx
add esp, 4
xor ebx, 0xa7e3
pop ebx
mov dword [ebp - 0x20ec], 0xe
push ebx
push eax
add esp, 4
add ebx, 0x179d8
pop ebx
push esi
call 0x40452e
add byte [edi + 0x32], al
dec esi
cmp edi, dword ds:[edi]
inc ebp
xor al, 0x34
add esp, 4
or esi, 0xe1d
pop esi
push ebx
push ecx
add esp, 4
or ebx, 0xf302
pop ebx
mov ecx, 1
imul edx, ecx, 0
lea eax, [ebp + edx - 0xbec]
mov dword [ebp - 0x15c4], eax
push edi
push ecx
add esp, 4
or edi, 0x88f6
xor edi, 0x10eeb
and edi, 0x6fe2
or edi, 0x4132
pop edi
push edx
sub edx, 0xbbc1
add edx, 0xa759
or edx, 0xef17
pop edx
mov dword [ebp - 0x20f0], 0xffffffff
push esi
add esi, 0xd527
xor esi, 0x8593
pop esi
push eax
push eax
add esp, 4
and eax, 0x16400
pop eax
push eax
push edx
add esp, 4
or eax, 0x1101f
xor eax, 0xdb48
add eax, 0xa84a
pop eax
mov ecx, dword [ebp - 0x3f0]
mov dword [ebp - 0x4fc], ecx
jmp 0x4045e4
mov edx, dword [ebp - 0x4fc]
add edx, 1
mov dword [ebp - 0x4fc], edx
push edx
push eax
add esp, 4
or edx, 0x101e1
and edx, 0x142f8
pop edx
push ecx
or ecx, 0x16eba
pop ecx
push ecx
push edx
add esp, 4
and ecx, 0xfe8b
add ecx, 0x8859
xor ecx, 0x2865
pop ecx
mov eax, dword [ebp - 0x4fc]
sub eax, dword [ebp - 0x3f0]
cmp eax, 0xffffffff
jb 0x40465e
push eax
xor eax, 0xd5c6
xor eax, 0x86fd
pop eax
push ecx
xchg byte [eax], al
add byte [eax + 0x51], bl
call 0x404643
add byte [ebp + 0x3f], al
dec ebx
inc esi
xor eax, 0xc4834c48
add al, 0x81
loope 0x404631
je 0x40464c
add byte [ecx + 0x4794f1], al
add byte [ecx + 0xcfaec1], al
add byte [ecx - 0x17], bl
add al, byte cs:[eax]
add bh, al
test dword [eax + 0x7fffff3], eax
add byte [eax], al
add byte [ebx - 0x4fb73], cl
dec dword [ecx - 0xac373]
call dword [edi + 0x57]
xor ecx, 0x4794
add ecx, 0xcfae
pop ecx
jmp 0x40488c
mov dword [ebp - 0xc80], 7
mov ecx, dword [ebp - 0x4fc]
mov dword [ebp - 0xac4], ecx
push edi
push edi
add esp, 4
jmp 0x404682
call 0x404692
add byte [edi], dh
aas
cmp eax, 0x3a434e46
inc eax
dec esi
push eax
add esp, 4
call 0x4046a2
add byte [eax], bh
xor eax, dword [ebp + 0x33]
dec eax
inc esi
aaa
add esp, 4
pop edi
mov edx, dword [ebp - 0x15c4]
mov dword [ebp - 0xa60], edx
mov dword [ebp - 0xc84], 0
mov eax, dword [ebp - 0x4fc]
cmp eax, dword [ebp - 0x15c4]
jne 0x40470d
push ecx
push esi
add esp, 4
call 0x4046db
add byte [0x43423f3f], bh
cmp eax, dword [ebx + 0x9e804c4]
add byte [eax], al
add byte [eax], al
dec ebp
inc edx
cmp dword [edx], edi
dec eax
inc eax
inc ebx
cmp al, 0x83
les eax, [ecx + eax*4]
loope 0x404741
jnp 0x4046f5
add byte [ecx + 0xa899c1], al
add byte [ecx - 0x75], bl
lea edi, [ebx + esi*8 - 1]
dec dword [ecx - 0x15cb73]
invalid
add ecx, 0xa899
pop ecx
mov ecx, dword [ebp - 0xc84]
mov dword [ebp - 0x15cc], ecx
jmp 0x40483e
cmp dword [ebp - 0xc80], 0
jle 0x404832
push edi
push edx
add esp, 4
sub edi, 0x101ed
call 0x404734
add byte [ebx], dh
dec ecx
xor eax, 0x35504437
inc esp
add esp, 4
pop edi
push edi
sub edi, 0x16f2a
or edi, 0xe3a1
and edi, 0xbba4
pop edi
mov edx, dword [ebp - 0xac4]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0xa60]
movzx edx, byte [ecx]
cmp eax, edx
je 0x4047ce
mov eax, dword [0x810000e3]
out 0xa4, eax
mov ebx, 0x8b5f0000
xchg ebp, eax
cmp al, 0xf5
invalid
push edx
push eax
add esp, 4
xor edx, 0xf890
jmp 0x404773
or edx, 0x986b
pop edx
push edi
and edi, 0x7d15
sub edi, 0x9e8e
xor edi, 0xb257
and edi, 0x12365
pop edi
mov eax, dword [ebp - 0xac4]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0xa60]
movzx eax, byte [edx]
cmp ecx, eax
jle 0x4047b6
mov dword [ebp - 0x15c8], 1
jmp 0x4047c0
mov dword [ebp - 0x15c8], 0xffffffff
mov ecx, dword [ebp - 0x15c8]
mov dword [ebp - 0xc84], ecx
jmp 0x404832
push ebx
call 0x4047dc
add byte [edx + edi], dh
xor esi, dword [esp + esi]
xor dh, byte [esi]
add esp, 4
xor ebx, 0x10925
and ebx, 0x10f22
or ebx, 0x6d7d
pop ebx
push ebx
add ebx, 0x119b1
xor ebx, 0xe8e8
pop ebx
mov edx, dword [ebp - 0xc80]
sub edx, 1
mov dword [ebp - 0xc80], edx
mov eax, dword [ebp - 0xac4]
add eax, 1
mov dword [ebp - 0xac4], eax
mov ecx, dword [ebp - 0xa60]
add ecx, 1
mov dword [ebp - 0xa60], ecx
jmp 0x40470d
mov edx, dword [ebp - 0xc84]
mov dword [ebp - 0x15cc], edx
cmp dword [ebp - 0x15cc], 0
jne 0x404887
push eax
sub eax, 0x52
call 0x40485d
add byte [edx], bh
cmp byte [esi], bh
xor al, 0x47
dec ecx
inc edi
dec edi
add esp, 4
sub eax, 0x8dd0
call 0x404875
add byte [edx], dh
inc ecx
cmp dh, byte [edi]
cmp esi, dword [edi]
dec edx
cmp dword [ebx - 0x74a7fb3c], eax
test dword [ebx + edi*8], eax
invalid
jmp 0x4045d5
push edi
push edi
add esp, 4
sub edi, 0x16f66
jmp 0x40489f
or edi, 0x4ec2
and edi, 0x1736
pop edi
push edx
push eax
add esp, 4
and edx, 0x4ec7
sub edx, 0x111c8
pop edx
mov dword [ebp - 0x3e8], 0
push edx
push edi
add esp, 4
sub edx, 0xea39
pop edx
push eax
push esi
add esp, 4
add eax, 0x8676
or eax, 0xf32f
or eax, 0xf372
pop eax
push esi
or esi, 0x10bd0
and esi, 0xbbf7
pop esi
push edx
xor edx, 0x11576
jmp 0x40490a
add edx, 0x92ca
pop edx
push ecx
push eax
add esp, 4
add ecx, 0x5fac
call 0x404928
add byte [eax], bh
xor al, byte [esp + ecx*2 + 0x3a]
dec esp
add esp, 4
pop ecx
mov ecx, 1
imul edx, ecx, 0
lea eax, [ebp + edx - 0xbe4]
mov dword [ebp - 0x15d0], eax
push ebx
push edi
add esp, 4
jmp 0x40494e
and ebx, 0xb95e
xor ebx, 0x8726
pop ebx
push ecx
push ebx
add esp, 4
add ecx, 0x6aaa
xor ecx, 0x13557
add ecx, 0x1356c
pop ecx
mov dword [ebp - 0x20f4], 0xffffffff
push edx
push edi
add esp, 4
add edx, 0xcd4c
sub edx, 0x37b2
add edx, 0x8fa7
pop edx
push eax
sub eax, 0x3c6c
and eax, 0xf16a
pop eax
push esi
push eax
add esp, 4
add esi, 0x1f75
pop esi
mov ecx, dword [ebp - 0x3f0]
mov dword [ebp - 0x500], ecx
jmp 0x4049cc
mov edx, dword [ebp - 0x500]
add edx, 1
mov dword [ebp - 0x500], edx
push ecx
sub ecx, 0xd5d0
sub ecx, 0xebd5
call 0x4049e5
add byte [eax + 0x36], cl
dec ebp
aaa
push eax
dec ecx
add esp, 4
pop ecx
push edi
push esi
add esp, 4
jmp 0x4049f7
jmp 0x4135ae
jmp 0x4049fd
pop edi
mov eax, dword [ebp - 0x500]
sub eax, dword [ebp - 0x3f0]
cmp eax, 0xffffffff
jb 0x404a46
push esi
sub esi, 0xc8f1
xor esi, 0x236d
pop esi
push ebx
or ebx, 0xe72a
sub ebx, 0xe247
call 0x404a37
add byte [eax], bh
aas
dec edi
inc edi
dec esp
xor dl, byte [eax - 0x7d]
les eax, [ecx + eax*4]
jmp 0x4049d4
mov dword [ebp - 0xc88], 7
mov ecx, dword [ebp - 0x500]
mov dword [ebp - 0xac0], ecx
push edi
or edi, 0x368c
sub edi, 0x6a53
pop edi
push ecx
xor ecx, 0xab56
pop ecx
push esi
push edi
add esp, 4
xor esi, 0x2997
call 0x404a8a
add byte [esi + 0x50393441], bh
inc esp
add esp, 4
pop esi
mov edx, dword [ebp - 0x15d0]
mov dword [ebp - 0xabc], edx
mov dword [ebp - 0xc8c], 0
mov eax, dword [ebp - 0x500]
cmp eax, dword [ebp - 0x15d0]
jne 0x404af5
push ebx
push ecx
add esp, 4
or ebx, 0xf6b6
sub ebx, 0x15735
pop ebx
push esi
push edi
add esp, 4
xor esi, 0x8050
and esi, 0x169ce
pop esi
push esi
xor esi, 0x145b2
sub esi, 0x167c7
pop esi
mov ecx, dword [ebp - 0xc8c]
mov dword [ebp - 0x15d4], ecx
jmp 0x404c26
cmp dword [ebp - 0xc88], 0
jle 0x404c1a
push edi
push edi
add esp, 4
and edi, 0x43ce
call 0x404b1d
add byte [edx + ecx*2], bh
cmp dh, byte [edi]
inc ebp
dec ecx
cmp eax, dword [ecx + 0x4c]
add esp, 4
pop edi
push esi
jmp 0x404b2b
jmp 0x404b33
pop esi
mov edx, dword [ebp - 0xac0]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0xabc]
movzx edx, byte [ecx]
cmp eax, edx
je 0x404bb6
push eax
and eax, 0x5f94
or eax, 0x17122
sub eax, 0x108dd
pop eax
push ebx
call 0x404b6c
add byte [0x3543484b], bh
cmp al, byte [ebx + eax*4 - 0x3c]
add al, 0x81
jecxz 0x404b88
jo 0x404b74
add byte [ecx + 0xbf5ec3], al
add byte [ebx - 0x75], bl
test dword [eax - 0xb], eax
invalid
cmc
invalid
push edx
push eax
add esp, 4
call 0x404bc8
add byte [eax + 0x4f], cl
cmp dword [ebx], edi
dec ebp
cmp dword [ebp - 0x7d], eax
les eax, [ecx + eax*4]
loop 0x404c1b
cmp al, byte [ecx]
add byte [ecx + 0xc7daea], al
add bl, ch
push es
dec edi
cmp dword [ebp + 0x33], ecx
xor ecx, dword [esi + 0x5a]
push edi
or edi, 0x1451f
pop edi
mov edx, dword [ebp - 0xc88]
sub edx, 1
mov dword [ebp - 0xc88], edx
mov eax, dword [ebp - 0xac0]
add eax, 1
mov dword [ebp - 0xac0], eax
mov ecx, dword [ebp - 0xabc]
add ecx, 1
mov dword [ebp - 0xabc], ecx
jmp 0x404af5
inc esp
cmc
invalid
mov edx, dword [ebp - 0xc8c]
mov dword [ebp - 0x15d4], edx
xchg ebp, eax
je 0x404c11
invalid
cmp dword [ebp - 0x15d4], 0
jne 0x404c6f
push eax
push edx
add esp, 4
add eax, 0x118fc
xor eax, 0x86e7
jmp 0x404c49
pop eax
push esi
sub esi, 0x680e
jmp 0x404c58
pop esi
push edx
and edx, 0x16fb2
pop edx
mov eax, dword [ebp - 0x500]
mov dword [ebp - 0xab8], eax
jmp 0x404cb0
jmp 0x4049bd
push edi
call 0x404cbe
add byte [edx + edi + 0x39], al
cmp dword [esi + 0x3e], eax
inc esi
add esp, 4
and edi, 0x12bd1
sub edi, 0x14b6b
pop edi
push eax
and eax, 0x1521a
sub eax, 0x121eb
xor eax, 0xcf75
pop eax
mov byte [ebp - 0x878], 0x45
mov byte [ebp - 0x877], 0x78
mov byte [ebp - 0x876], 0x69
mov byte [ebp - 0x875], 0x74
mov byte [ebp - 0x874], 0x50
mov byte [ebp - 0x873], 0x72
mov byte [ebp - 0x872], 0x6f
mov byte [ebp - 0x871], 0x63
mov byte [ebp - 0x870], 0x65
mov byte [ebp - 0x86f], 0x73
mov byte [ebp - 0x86e], 0x73
mov byte [ebp - 0x86d], 0
push esi
push edi
add esp, 4
or esi, 0xcb65
jmp 0x404d46
pop esi
push ecx
jmp 0x404d4d
sub ecx, 0x5414
jmp 0x404d59
pop ecx
push ebx
add ebx, 0xae97
or ebx, 0xb55b
pop ebx
mov ecx, 0x6b
mov word [ebp - 0x1738], cx
mov edx, 0x65
mov word [ebp - 0x1736], dx
mov eax, 0x72
mov word [ebp - 0x1734], ax
mov ecx, 0x6e
mov word [ebp - 0x1732], cx
mov edx, 0x65
mov word [ebp - 0x1730], dx
mov eax, 0x6c
mov word [ebp - 0x172e], ax
mov ecx, 0x33
mov word [ebp - 0x172c], cx
mov edx, 0x32
mov word [ebp - 0x172a], dx
mov eax, 0x2e
mov word [ebp - 0x1728], ax
mov ecx, 0x64
mov word [ebp - 0x1726], cx
mov edx, 0x6c
mov word [ebp - 0x1724], dx
mov eax, 0x6c
mov word [ebp - 0x1722], ax
xor ecx, ecx
mov word [ebp - 0x1720], cx
push ecx
push ebx
add esp, 4
jmp 0x404e0c
add ecx, 0x5b03
add ecx, 0xcf42
pop ecx
push ebx
xor ebx, 0x114d2
jmp 0x404e25
xor ebx, 0x10b26
jmp 0x404e32
pop ebx
push ecx
call 0x404e41
add byte [ebx], dh
inc edx
dec edi
cmp eax, 0x83473e49
les eax, [ebx + ebp*8]
add al, 0x3f
inc edx
dec esp
or ecx, 0xde60
pop ecx
push eax
add eax, 0x4473
or eax, 0x87a7
xor eax, 0x5b89
pop eax
mov edx, dword fs:[0x18]
mov dword [ebp - 0x19a4], edx
mov eax, dword [ebp - 0x19a4]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0x19a8], ecx
mov edx, dword [ebp - 0x19a8]
mov dword [ebp - 0x15d8], edx
push eax
add eax, 0xa269
call 0x404ea3
add byte [esi], bh
inc esi
inc ecx
xor eax, dword [ebx + 0x48]
dec eax
push eax
add esp, 4
sub eax, 0xf7b7
pop eax
push edi
push eax
add esp, 4
add edi, 0x907a
and edi, 0x110c3
pop edi
cmp dword [ebp - 0x15d8], 0
jne 0x404ed7
mov dword [ebp - 0x31c], 0
jmp 0x405193
mov eax, dword [ebp - 0x15d8]
mov ecx, dword [eax + 0xc]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0xc98], edx
push esi
push esi
add esp, 4
or esi, 0xff35
jmp 0x404efc
pop esi
push edx
push edi
add esp, 4
xor edx, 0xfe7b
sub edx, 0xcf49
add edx, 0x13b9a
xor edx, 0x15db6
pop edx
cmp dword [ebp - 0xc98], 0
jne 0x404f33
mov dword [ebp - 0x31c], 0
jmp 0x405193
mov eax, dword [ebp - 0xc98]
mov dword [ebp - 0x504], eax
push esi
push ebx
add esp, 4
and esi, 0x154f3
pop esi
push ecx
jmp 0x404f53
or ecx, 0x161e5
call 0x404f67
add byte [esi + 0x48], al
dec eax
dec edi
dec ecx
aaa
xor al, 0x3e
add esp, 4
and ecx, 0x1444f
pop ecx
lea ecx, [ebp - 0x1738]
mov dword [ebp - 0xc94], ecx
mov edx, dword [ebp - 0x504]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0xc90], eax
xor ecx, ecx
mov word [ebp - 0x210], cx
xor edx, edx
mov word [ebp - 0x10c], dx
push edx
push edx
add esp, 4
jmp 0x404fa9
call 0x404fb5
add byte [edi + ecx*2 + 0x46], cl
inc esp
cmp byte [ebx + eax*4], dh
les eax, [edx + ebx*2]
push esi
call 0x404fc6
add byte [ebx + 0x34], al
cmp eax, 0x833e383c
les eax, [ecx + eax*4]
into
mov al, 0xe1
add byte [eax], al
pop esi
mov eax, dword [ebp - 0xc90]
mov cx, word [eax]
mov word [ebp - 0x1032], cx
mov edx, dword [ebp - 0xc90]
add edx, 2
mov dword [ebp - 0xc90], edx
mov ax, word [ebp - 0x1032]
mov word [ebp - 0x210], ax
mov ecx, dword [ebp - 0xc94]
mov dx, word [ecx]
mov word [ebp - 0x1034], dx
mov eax, dword [ebp - 0xc94]
add eax, 2
mov dword [ebp - 0xc94], eax
mov cx, word [ebp - 0x1034]
mov word [ebp - 0x10c], cx
push edi
push ebx
add esp, 4
add edi, 0x17101
sub edi, 0x184fd
or edi, 0x13be1
pop edi
push ecx
jmp 0x40504b
call 0x405058
add byte [eax + 0x3e], dl
inc ecx
dec edx
xor eax, 0x4c4833d
pop ecx
movzx edx, word [ebp - 0x10c]
test edx, edx
jne 0x40507f
movzx eax, word [ebp - 0x210]
movzx ecx, word [ebp - 0x10c]
sub eax, ecx
mov dword [ebp - 0x15e0], eax
jmp 0x4050e2
movzx edx, word [ebp - 0x210]
movzx eax, word [ebp - 0x10c]
cmp edx, eax
je 0x404f9e
movzx ecx, word [ebp - 0x210]
xor ecx, 0x20
movzx edx, word [ebp - 0x10c]
cmp ecx, edx
je 0x404f9e
movzx eax, word [ebp - 0x210]
movzx ecx, word [ebp - 0x10c]
cmp eax, ecx
jge 0x4050cc
mov dword [ebp - 0x15dc], 0xffffffff
jmp 0x4050d6
mov dword [ebp - 0x15dc], 1
mov edx, dword [ebp - 0x15dc]
mov dword [ebp - 0x15e0], edx
cmp dword [ebp - 0x15e0], 0
jne 0x40512b
push edx
push eax
add esp, 4
add edx, 0x8515
jmp 0x4050fb
add edx, 0x624c
pop edx
push esi
jmp 0x40510a
pop esi
push edx
push esi
add esp, 4
xor edx, 0x4a46
and edx, 0x96a5
pop edx
mov eax, dword [ebp - 0x504]
mov dword [ebp - 0x31c], eax
jmp 0x405193
push edi
sub edi, 0x78d9
xor edi, 0x11b2
add edi, 0x1243e
sub edi, 0x13674
pop edi
push esi
push esi
add esp, 4
or esi, 0xb7f6
pop esi
push edi
push edi
add esp, 4
xor edi, 0xf74f
pop edi
mov ecx, dword [ebp - 0x504]
mov edx, dword [ecx]
mov dword [ebp - 0x504], edx
mov eax, dword [ebp - 0x504]
cmp eax, dword [ebp - 0xc98]
je 0x405189
mov ecx, dword [ebp - 0x504]
cmp dword [ecx + 0x30], 0
jne 0x404f3f
mov dword [ebp - 0x31c], 0
push eax
sub eax, 0xacdb
or eax, 0x1367a
jmp 0x4051a7
call 0x4051b3
add byte [ecx], bh
cmp dh, byte [ebx]
xor eax, 0xc4834849
add al, 0x58
push edi
xor edi, 0xad66
jmp 0x4051c4
pop edi
cmp dword [ebp - 0x31c], 0
jne 0x405ade
mov edx, 0x6b
mov word [ebp - 0x1754], dx
mov eax, 0x65
mov word [ebp - 0x1752], ax
mov ecx, 0x72
mov word [ebp - 0x1750], cx
mov edx, 0x6e
mov word [ebp - 0x174e], dx
mov eax, 0x65
mov word [ebp - 0x174c], ax
mov ecx, 0x6c
mov word [ebp - 0x174a], cx
mov edx, 0x33
mov word [ebp - 0x1748], dx
mov eax, 0x32
mov word [ebp - 0x1746], ax
mov ecx, 0x2e
mov word [ebp - 0x1744], cx
mov edx, 0x64
mov word [ebp - 0x1742], dx
mov eax, 0x6c
mov word [ebp - 0x1740], ax
mov ecx, 0x6c
mov word [ebp - 0x173e], cx
xor edx, edx
mov word [ebp - 0x173c], dx
push edx
sub edx, 0xdf9
and edx, 0x6a62
pop edx
push edi
call 0x405287
add byte [ebp + 0x3b], al
dec edx
dec ecx
dec edx
inc edi
dec ebx
add esp, 4
xor edi, 0x133b3
pop edi
push ebx
push edi
add esp, 4
sub ebx, 0x387b
pop ebx
mov byte [ebp - 0x894], 0x4c
mov byte [ebp - 0x893], 0x6f
mov byte [ebp - 0x892], 0x61
mov byte [ebp - 0x891], 0x64
mov byte [ebp - 0x890], 0x4c
mov byte [ebp - 0x88f], 0x69
mov byte [ebp - 0x88e], 0x62
mov byte [ebp - 0x88d], 0x72
mov byte [ebp - 0x88c], 0x61
mov byte [ebp - 0x88b], 0x72
mov byte [ebp - 0x88a], 0x79
mov byte [ebp - 0x889], 0x57
mov byte [ebp - 0x888], 0
mov eax, dword fs:[0x18]
mov dword [ebp - 0x19ac], eax
mov ecx, dword [ebp - 0x19ac]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x19b0], edx
mov eax, dword [ebp - 0x19b0]
mov dword [ebp - 0x15e4], eax
push edi
or edi, 0x303d
pop edi
push edx
jmp 0x405330
sub edx, 0x126c3
or edx, 0x7bd4
pop edx
push edi
and edi, 0x4d01
xor edi, 0xcc58
xor edi, 0x14bef
pop edi
cmp dword [ebp - 0x15e4], 0
jne 0x405369
mov dword [ebp - 0x750], 0
jmp 0x405625
mov ecx, dword [ebp - 0x15e4]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xca4], eax
push ebx
and ebx, 0xe03d
sub ebx, 0x1728d
pop ebx
push ecx
push eax
add esp, 4
xor ecx, 0xdc64
pop ecx
push eax
push esi
add esp, 4
or eax, 0x13475
or eax, 0xf05e
xor eax, 0x12374
pop eax
cmp dword [ebp - 0xca4], 0
jne 0x4053c5
mov dword [ebp - 0x750], 0
jmp 0x405625
mov ecx, dword [ebp - 0xca4]
mov dword [ebp - 0x508], ecx
push esi
jmp 0x4053da
call 0x4053e9
add byte [ecx + 0x4f], cl
inc ebp
cmp byte [eax], bh
cmp eax, 0x834c3747
les eax, [esi + ebx*2]
push eax
sub eax, 0xade
and eax, 0x2c4
pop eax
push ecx
and ecx, 0x5ffa
pop ecx
lea edx, [ebp - 0x1754]
mov dword [ebp - 0xca0], edx
mov eax, dword [ebp - 0x508]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xc9c], ecx
xor edx, edx
mov word [ebp - 0x214], dx
xor eax, eax
mov word [ebp - 0x110], ax
push edi
add edi, 0x10922
and edi, 0x12fdc
pop edi
push eax
xor eax, 0x571c
add eax, 0xe67f
jmp 0x405453
pop eax
push eax
add eax, 0x109f3
or eax, 0x15ad1
pop eax
mov ecx, dword [ebp - 0xc9c]
mov dx, word [ecx]
mov word [ebp - 0x1036], dx
mov eax, dword [ebp - 0xc9c]
add eax, 2
mov dword [ebp - 0xc9c], eax
mov cx, word [ebp - 0x1036]
mov word [ebp - 0x214], cx
mov edx, dword [ebp - 0xca0]
mov ax, word [edx]
mov word [ebp - 0x1038], ax
mov ecx, dword [ebp - 0xca0]
add ecx, 2
mov dword [ebp - 0xca0], ecx
mov dx, word [ebp - 0x1038]
mov word [ebp - 0x110], dx
push eax
sub eax, 0x10719
sub eax, 0x51ad
call 0x4054d7
add byte [ebx + 0x41], cl
inc edx
xor dh, byte [edx]
dec edx
cmp byte [ebx - 0x177efb3c], al
stosb byte es:[edi], al
sub dword [eax], eax
add byte [eax + 0x53], bl
and ebx, 0x9b7a
jmp 0x4054ed
pop ebx
movzx eax, word [ebp - 0x110]
test eax, eax
jne 0x405511
movzx ecx, word [ebp - 0x214]
movzx edx, word [ebp - 0x110]
sub ecx, edx
mov dword [ebp - 0x15ec], ecx
jmp 0x405574
movzx eax, word [ebp - 0x214]
movzx ecx, word [ebp - 0x110]
cmp eax, ecx
je 0x405430
movzx edx, word [ebp - 0x214]
xor edx, 0x20
movzx eax, word [ebp - 0x110]
cmp edx, eax
je 0x405430
movzx ecx, word [ebp - 0x214]
movzx edx, word [ebp - 0x110]
cmp ecx, edx
jge 0x40555e
mov dword [ebp - 0x15e8], 0xffffffff
jmp 0x405568
mov dword [ebp - 0x15e8], 1
mov eax, dword [ebp - 0x15e8]
mov dword [ebp - 0x15ec], eax
cmp dword [ebp - 0x15ec], 0
jne 0x4055bd
push edx
add edx, 0xcb58
and edx, 0x152a
or edx, 0x8990
pop edx
push esi
push eax
add esp, 4
xor esi, 0x3438
sub esi, 0xb4c2
and esi, 0x11a41
or esi, 0x4e3d
pop esi
mov ecx, dword [ebp - 0x508]
mov dword [ebp - 0x750], ecx
jmp 0x405625
push edi
push ecx
add esp, 4
jmp 0x4055ca
pop edi
push edx
call 0x4055d9
add byte [esi + 0x3a], cl
cmp dword [ebp + 0x4e], ecx
cmp eax, 0x4c4833c
or edx, 0xbc85
xor edx, 0x14192
or edx, 0x9128
pop edx
mov edx, dword [ebp - 0x508]
mov eax, dword [edx]
mov dword [ebp - 0x508], eax
invalid
invalid
clc
cli
invalid