Function at 0x406ffc
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
push ebp
imul ecx, dword [ebp - 0x2c], 0x138
sub eax, ecx
xor eax, dword [ebp - 0x15a4]
imul eax, dword [ebp - 0x2c]
imul edx, dword [ebp - 0x2c], 0x138
sub eax, edx
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x15a4]
imul eax, dword [ebp - 0x2c]
mov dword [ebp - 0x1e5c], eax
mov dword [ebp - 0x1630], 1
push edi
and edi, 0x15386
pop edi
push eax
jmp 0x4024ca
sub eax, 0x4d8f
and eax, 0x12667
jmp 0x4024dd
pop eax
push edi
push esi
add esp, 4
sub edi, 0x170cb
pop edi
imul ecx, dword [ebp - 0x1630], 0x138
add ecx, 0x55f3663b
imul edx, dword [ebp - 0x1630], 0x138
sub ecx, edx
xor ecx, dword [ebp - 0x1e5c]
imul ecx, dword [ebp - 0x1630]
imul eax, dword [ebp - 0x1630], 0x138
sub ecx, eax
mov dword [ebp - 0x1634], ecx
xor esi, 0x16525
call 0x40256b
add byte [ebx + 0x37], al
cmp byte [ebp + 0x48], cl
dec ebx
add esp, 4
pop esi
push edx
push ecx
add esp, 4
or edx, 0x227a
or edx, 0xfa94
jmp 0x402586
jmp 0x40258d
pop edx
push ecx
or ecx, 0x4ba8
jmp 0x40259a
and ecx, 0xb85e
pop ecx
mov eax, dword [ebp - 0x30]
add eax, 0x138
imul ecx, dword [ebp - 0x2c], 0x138
add ecx, 0x55f3663b
imul edx, dword [ebp - 0x2c], 0x138
sub ecx, edx
xor eax, ecx
imul eax, dword [ebp - 0x2c]
mov dword [ebp - 0x1e64], eax
push edx
push esi
add esp, 4
and edx, 0x66df
and edx, 0xdec
xor edx, 0x326e
pop edx
push edi
push ebx
add esp, 4
or edi, 0x9f9b
pop edi
push eax
xor eax, 0x14c89
sub eax, 0xbba8
pop eax
mov eax, dword [ebp - 0x163c]
add eax, 0x138
imul ecx, dword [ebp - 0x1638], 0x138
add ecx, 0x55f3663b
imul edx, dword [ebp - 0x1638], 0x138
sub ecx, edx
xor eax, ecx
imul eax, dword [ebp - 0x1638]
mov dword [ebp - 0x1e60], eax
mov eax, dword [ebp - 0x1e60]
mov dword [ebp - 0x1e68], eax
mov ecx, dword [ebp - 0x1e64]
cmp ecx, dword [ebp - 0x1e68]
jae 0x402659
mov dword [ebp - 0x15ac], 1
jmp 0x402663
mov dword [ebp - 0x15ac], 0
mov dl, byte [ebp - 0x15ac]
mov byte [ebp - 0x3ad], dl
xchg ebp, eax
push ebx
cld
invalid
dec dword [edi]
mov dh, 0x85
push ebx
cld
invalid
inc dword [ebp + 0x58840fc0]
xor byte [eax], al
invalid
push ebx
push edi
add esp, 4
jmp 0x40268a
add ebx, 0x15fba
call 0x40269d
add byte [ebx + 0x44], al
inc esp
inc ebp
inc ebp
inc esi
dec ebp
add esp, 4
pop ebx
push ebx
sub ebx, 0xe64e
jmp 0x4026af
pop ebx
push ebx
and ebx, 0xe0ef
xor ebx, 0xe7bc
or ebx, 0xefee
pop ebx
push ebx
push ecx
add esp, 4
and ebx, 0x8db8
and ebx, 0xa7a
add ebx, 0x88c
or ebx, 0x1650f
add dword [eax], eax
pop ebx
mov ecx, dword [ebp - 0x30]
add ecx, 0x138
imul edx, dword [ebp - 0x2c], 0x138
add edx, 0x55f3663b
imul eax, dword [ebp - 0x2c], 0x138
sub edx, eax
xor ecx, edx
imul ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x1e6c], ecx
mov ecx, dword [ebp - 0x1e6c]
mov dword [ebp - 0x1e70], ecx
cmp dword [ebp - 0x1e70], 0x63c1
jne 0x40285d
push edi
push esi
add esp, 4
xor edi, 0x341
test dword [ecx + 3], 0x575f0000
push edx
add esp, 4
add edi, 0x1c1f
add edi, 0x11115
pop edi
push esi
push ebx
add esp, 4
and esi, 0xdce
jmp 0x40275a
pop esi
mov edx, dword [ebp - 0x14]
add edx, 0x138
add byte [eax], al
imul eax, dword [ebp - 0x10], 0x138
mov dword [ebp - 0x3f4], 0
call 0x4056e5
mov eax, 0x13379797
pop eax
mov dword [ebp - 0x3f4], eax
push eax
push ecx
add esp, 4
or eax, 0x5188
pop eax
push ebx
xor ebx, 0x16f5d
sub ebx, 0x16bbf
call 0x405719
add byte [ebx + 0x4b], cl
aas
inc edi
inc ebx
inc esp
xor al, 0x3d
dec edx
add esp, 4
add ebx, 0x1354c
pop ebx
mov ecx, dword [ebp - 0x20cc]
mov dword [ebp - 0x15c8], ecx
push edx
push esi
add esp, 4
and edx, 0xafba
jmp 0x405743
sub edx, 0x142a6
pop edx
push edi
call 0x405757
add byte [ebx + 0x43], al
inc ecx
xor eax, 0x4c48338
and edi, 0x363d
pop edi
mov edx, dword [ebp - 0x14]
add edx, 0x138
imul eax, dword [ebp - 0x10], 0x138
add eax, 0x55f3663b
imul ecx, dword [ebp - 0x10], 0x138
sub eax, ecx
xor edx, eax
imul edx, dword [ebp - 0x10]
mov dword [ebp - 0x15c8], edx
mov edx, dword [ebp - 0x3f4]
mov dword [ebp - 0x2014], edx
mov eax, dword [ebp - 0x2014]
add eax, dword [ebp - 0x15c8]
mov dword [ebp - 0x3f4], eax
push esi
push ecx
add esp, 4
sub esi, 0x14eda
and esi, 0x16cb4
pop esi
push edx
and edx, 0xb38a
add edx, 0x15eb4
xor edx, 0xf3d9
pop edx
push edx
push ecx
add esp, 4
xor edx, 0xa570
pop edx
mov byte [ebp - 0xbf0], 0x52
mov byte [ebp - 0xbef], 0xb9
mov byte [ebp - 0xbee], 0x10
mov byte [ebp - 0xbed], 0x10
mov byte [ebp - 0xbec], 0x10
mov byte [ebp - 0xbeb], 0x10
mov byte [ebp - 0xbea], 0x5a
push edi
jmp 0x405812
or edi, 0x13b97
add edi, 0x8ace
or edi, 0x2b73
pop edi
push ecx
push esi
add esp, 4
sub ecx, 0xb770
or ecx, 0x375d
jmp 0x40583d
pop ecx
mov byte [ebp - 0xbe8], 0x52
mov byte [ebp - 0xbe7], 0xb9
mov byte [ebp - 0xbe6], 0x20
mov byte [ebp - 0xbe5], 0x20
mov byte [ebp - 0xbe4], 0x20
mov byte [ebp - 0xbe3], 0x20
mov byte [ebp - 0xbe2], 0x5a
push edi
push edx
add esp, 4
add edi, 0x1415f
sub edi, 0xcf20
or edi, 0xba5e
pop edi
push eax
push ebx
add esp, 4
or eax, 0x18660
jmp 0x40589a
or eax, 0x1522
pop eax
mov dword [ebp - 0x20d0], 0xe
push eax
push edx
add esp, 4
or eax, 0x467c
or eax, 0xb375
pop eax
push eax
call 0x4058ca
add byte [ecx], bh
inc esi
xor eax, 0xc483414a
add al, 0xe8
pop es
add byte [eax], al
add byte [eax], al
dec edi
xor cl, byte [eax + 0x45]
dec esp
xor al, 0x83
les eax, [eax + ebx*2]
mov ecx, 1
imul edx, ecx, 0
lea eax, [ebp + edx - 0xbf0]
mov dword [ebp - 0x15cc], eax
push ecx
sub ecx, 0x1362e
call 0x405908
add byte [esi + 0x39], cl
inc edi
xor eax, 0x47404347
inc ebx
add esp, 4
sub ecx, 0x17877
sub ecx, 0x49fc
pop ecx
push esi
push esi
add esp, 4
add esi, 0x1842
pop esi
mov dword [ebp - 0x20d4], 0xffffffff
push esi
sub esi, 0x1087f
add esi, 0x57aa
xor esi, 0x8b33
sub esi, 0x17423
pop esi
push esi
push eax
add esp, 4
and esi, 0x159a2
add esi, 0x6938
add esi, 0x1359d
pop esi
mov ecx, dword [ebp - 0x3f4]
mov dword [ebp - 0x500], ecx
jmp 0x40597d
mov edx, dword [ebp - 0x500]
add edx, 1
mov dword [ebp - 0x500], edx
push edi
push esi
add esp, 4
and edi, 0x189c
add edi, 0xf7b0
or edi, 0x106bf
and edi, 0x6170
pop edi
push eax
sub eax, 0x11525
add eax, 0xcad1
jmp 0x4059ae
pop eax
mov eax, dword [ebp - 0x500]
sub eax, dword [ebp - 0x3f4]
cmp eax, 0xffffffff
jb 0x4059f7
push edx
push esi
add esp, 4
jmp 0x4059ca
pop edx
push edx
or edx, 0x16f2e
sub edx, 0xeb46
pop edx
push edx
jmp 0x4059df
and edx, 0x644
sub edx, 0xddf7
and edx, 0x4644
pop edx
jmp 0x405c25
mov dword [ebp - 0xc84], 7
mov ecx, dword [ebp - 0x500]
mov dword [ebp - 0xad0], ecx
push ecx
push ebx
add esp, 4
xor ecx, 0x2fab
sub ecx, 0x10fb7
xor ecx, 0xeddf
or ecx, 0x5b2b
pop ecx
push edi
sub edi, 0x1866c
sub edi, 0xc0ba
and edi, 0x8039
pop edi
mov edx, dword [ebp - 0x15cc]
mov dword [ebp - 0xacc], edx
mov dword [ebp - 0xc88], 0
mov eax, dword [ebp - 0x500]
cmp eax, dword [ebp - 0x15cc]
jne 0x405aa6
push edi
push edx
add esp, 4
add edi, 0x1635
or edi, 0x15761
pop edi
push edi
sub edi, 0x6da6
pop edi
push edx
push esi
add esp, 4
or edx, 0x79fd
sub edx, 0xac4c
xor edx, 0x10d9e
pop edx
mov ecx, dword [ebp - 0xc88]
mov dword [ebp - 0x15d4], ecx
jmp 0x405bd7
cmp dword [ebp - 0xc84], 0
jle 0x405bcb
push edi
sub edi, 0x219f
pop edi
push edi
call 0x405acc
add byte [edx + 0x37], cl
inc eax
aas
dec ebx
cmp cl, byte [ecx + 0x37]
inc ebx
inc esi
add esp, 4
and edi, 0xff65
pop edi
push edi
jmp 0x405ade
sub edi, 0x14dbb
pop edi
mov edx, dword [ebp - 0xad0]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0xacc]
movzx edx, byte [ecx]
cmp eax, edx
je 0x405b67
push esi
call 0x405b0b
add byte [esi + 0x44], cl
inc esp
dec ebx
inc edi
inc eax
dec ecx
aas
inc ebx
add esp, 4
pop esi
push edx
push eax
add esp, 4
jmp 0x405b1a
sub edx, 0x143eb
and edx, 0x16b49
and edx, 0x9e07
pop edx
mov eax, dword [ebp - 0xad0]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0xacc]
movzx eax, byte [edx]
cmp ecx, eax
jle 0x405b4f
mov dword [ebp - 0x15d0], 1
jmp 0x405b59
mov dword [ebp - 0x15d0], 0xffffffff
mov ecx, dword [ebp - 0x15d0]
mov dword [ebp - 0xc88], ecx
jmp 0x405bcb
push edi
push edi
add esp, 4
or edi, 0x9614
call 0x405b7f
add byte [ebp + 0x3f], cl
dec ebp
dec edi
inc ebx
dec esp
inc esi
add esp, 4
and edi, 0x28a0
pop edi
push esi
jmp 0x405b92
add esi, 0x16815
pop esi
mov edx, dword [ebp - 0xc84]
sub edx, 1
mov dword [ebp - 0xc84], edx
mov eax, dword [ebp - 0xad0]
add eax, 1
mov dword [ebp - 0xad0], eax
mov ecx, dword [ebp - 0xacc]
add ecx, 1
mov dword [ebp - 0xacc], ecx
jmp 0x405aa6
mov edx, dword [ebp - 0xc88]
mov dword [ebp - 0x15d4], edx
cmp dword [ebp - 0x15d4], 0
jne 0x405c20
push esi
push eax
add esp, 4
or esi, 0x3166
pop esi
push edx
push edi
add esp, 4
and edx, 0xcd0c
or edx, 0x10a5d
or edx, 0xc78c
xor edx, 0x1492a
pop edx
push edi
xor edi, 0x60c3
pop edi
mov eax, dword [ebp - 0x500]
mov dword [ebp - 0x3e4], eax
jmp 0x405c61
jmp 0x40596e
push esi
jmp 0x405c2f
pop esi
push eax
and eax, 0x9b9b
or eax, 0x4895
call 0x405c4d
add byte [eax + 0x49], cl
dec edi
cmp byte [edx], bh
dec ebx
cmp byte [edi + esi], dh
add esp, 4
sub eax, 0x128e
pop eax
mov dword [ebp - 0x3e4], 0
push eax
push ecx
add esp, 4
add eax, 0x16253
pop eax
push ebx
push esi
add esp, 4
xor ebx, 0xd307
sub ebx, 0x16653
pop ebx
push ecx
sub ecx, 0x164ea
xor ecx, 0xaa37
sub ecx, 0x4c5
pop ecx
push ebx
xor ebx, 0x1264e
xor ebx, 0x110db
add ebx, 0xa026
pop ebx
push ebx
or ebx, 0x8c7
xor ebx, 0xf274
call 0x405cc1
add byte [eax + 0x48], dl
cmp dword [edi + 0x42], ecx
dec esi
xor eax, 0x5b04c483
mov ecx, 1
imul edx, ecx, 0
lea eax, [ebp + edx - 0xbe8]
mov dword [ebp - 0x15d8], eax
push edi
push ecx
add esp, 4
xor edi, 0x1051e
or edi, 0x13da5
call 0x405cfa
add byte [esi], bh
cmp al, 0x3e
inc eax
inc edi
xor al, byte [edx + 0x32]
dec esp
add esp, 4
sub edi, 0xde9d
pop edi
push edx
or edx, 0xbfaa
pop edx
mov dword [ebp - 0x20d8], 0xffffffff
push edi
push esi
add esp, 4
sub edi, 0x2077
add edi, 0x45c1
and edi, 0x75f4
and edi, 0xdaec
pop edi
push edi
call 0x405d44
add byte [edi], dh
inc ebp
inc ebp
xor ecx, dword [edx + 0x33]
dec edx
dec eax
inc esi
add esp, 4
pop edi
mov ecx, dword [ebp - 0x3f4]
mov dword [ebp - 0x504], ecx
jmp 0x405d65
mov edx, dword [ebp - 0x504]
add edx, 1
mov dword [ebp - 0x504], edx
push edi
push edx
add esp, 4
xor edi, 0x3c03
pop edi
push edi
jmp 0x405d7a
call 0x405d87
add byte [eax + 0x46], al
cmp dh, byte ds:[0xc4833544]
add al, 0x5f
push eax
push ebx
add esp, 4
and eax, 0x8774
pop eax
mov eax, dword [ebp - 0x504]
sub eax, dword [ebp - 0x3f4]
cmp eax, 0xffffffff
jb 0x405ddf
push ebx
sub ebx, 0x8ed3
pop ebx
push ebx
call 0x405dbe
add byte [ebx + ecx*2 + 0x3f], cl
inc eax
inc ebx
xor bh, byte [0x5b04c483]
push esi
push edi
add esp, 4
sub esi, 0xe816
and esi, 0x99f9
or esi, 0xac5e
pop esi
jmp 0x40600d
mov dword [ebp - 0xc8c], 7
mov ecx, dword [ebp - 0x504]
mov dword [ebp - 0xac8], ecx
push esi
push ecx
add esp, 4
add esi, 0xa06e
add esi, 0x136ed
pop esi
push edi
push eax
add esp, 4
sub edi, 0x7187
or edi, 0x4b05
jmp 0x405e20
sub edi, 0xd3ba
pop edi
mov edx, dword [ebp - 0x15d8]
mov dword [ebp - 0xa64], edx
mov dword [ebp - 0xc90], 0
mov eax, dword [ebp - 0x504]
cmp eax, dword [ebp - 0x15d8]
jne 0x405e8e
push edi
xor edi, 0x38f
and edi, 0x14bbb
jmp 0x405e5f
or edi, 0x16e18
pop edi
push ecx
jmp 0x405e70
xor ecx, 0xe57e
or ecx, 0x93d
pop ecx
mov ecx, dword [ebp - 0xc90]
mov dword [ebp - 0x15a8], ecx
jmp 0x405fbf
cmp dword [ebp - 0xc8c], 0
jle 0x405fb3
push edi
sub edi, 0x184be
or edi, 0x171b4
jmp 0x405eae
and edi, 0x14139
pop edi
push ecx
push ecx
add esp, 4
or ecx, 0x10684
and ecx, 0x182b7
sub ecx, 0x12f5
pop ecx
mov edx, dword [ebp - 0xac8]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0xa64]
movzx edx, byte [ecx]
cmp eax, edx
je 0x405f4f
push ebx
xor ebx, 0x13fe1
add ebx, 0x5fd0
xor ebx, 0xee53
pop ebx
push esi
push ebx
add esp, 4
or esi, 0x14dff
sub esi, 0xa10b
add esi, 0x17040
add esi, 0xc950
pop esi
mov eax, dword [ebp - 0xac8]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0xa64]
movzx eax, byte [edx]
cmp ecx, eax
jle 0x405f37
mov dword [ebp - 0x15dc], 1
jmp 0x405f41
mov dword [ebp - 0x15dc], 0xffffffff
mov ecx, dword [ebp - 0x15dc]
mov dword [ebp - 0xc90], ecx
jmp 0x405fb3
push edi
push edx
add esp, 4
xor edi, 0x740b
and edi, 0x10ade
pop edi
push esi
sub esi, 0x9ac8
or esi, 0x6ede
sub esi, 0xe36
pop esi
push edx
push ecx
add esp, 4
xor edx, 0xcf6d
pop edx
mov edx, dword [ebp - 0xc8c]
sub edx, 1
mov dword [ebp - 0xc8c], edx
mov eax, dword [ebp - 0xac8]
add eax, 1
mov dword [ebp - 0xac8], eax
mov ecx, dword [ebp - 0xa64]
add ecx, 1
mov dword [ebp - 0xa64], ecx
jmp 0x405e8e
mov edx, dword [ebp - 0xc90]
mov dword [ebp - 0x15a8], edx
cmp dword [ebp - 0x15a8], 0
jne 0x406008
push ebx
push ebx
add esp, 4
call 0x405fdb
add byte [edx + esi + 0x34], cl
cmp edi, dword [eax]
push eax
aas
aas
add esp, 4
sub ebx, 0x6af9
call 0x405ff0
add byte [edx + 0x49], cl
aas
dec edx
inc eax
add esp, 4
add ebx, 0xb7ea
pop ebx
mov eax, dword [ebp - 0x504]
mov dword [ebp - 0xac4], eax
jmp 0x406049
jmp 0x405d56
push ecx
xor ecx, 0x7f1c
xor ecx, 0x117a5
pop ecx
push esi
sub esi, 0x13e39
call 0x40602f
add byte [0x47483d44], bh
dec eax
dec ebx
add esp, 4
sub esi, 0x139ac
or esi, 0xf095
pop esi
mov dword [ebp - 0xac4], 0
push edx
push edi
add esp, 4
xor edx, 0x162f4
add edx, 0x1687f
pop edx
push esi
or esi, 0x1c5
pop esi
push esi
push eax
add esp, 4
xor esi, 0x11681
and esi, 0x13b7b
or esi, 0x7b67
pop esi
mov byte [ebp - 0x87c], 0x45
mov byte [ebp - 0x87b], 0x78
mov byte [ebp - 0x87a], 0x69
mov byte [ebp - 0x879], 0x74
mov byte [ebp - 0x878], 0x50
mov byte [ebp - 0x877], 0x72
mov byte [ebp - 0x876], 0x6f
mov byte [ebp - 0x875], 0x63
mov byte [ebp - 0x874], 0x65
mov byte [ebp - 0x873], 0x73
mov byte [ebp - 0x872], 0x73
mov byte [ebp - 0x871], 0
push edi
jmp 0x4060d9
or edi, 0x148df
xor edi, 0x10b2f
add edi, 0xf92f
pop edi
push ebx
push esi
add esp, 4
add ebx, 0xe051
jmp 0x406100
pop ebx
mov ecx, 0x6b
mov word [ebp - 0x1740], cx
mov edx, 0x65
mov word [ebp - 0x173e], dx
mov eax, 0x72
mov word [ebp - 0x173c], ax
mov ecx, 0x6e
mov word [ebp - 0x173a], cx
mov edx, 0x65
mov word [ebp - 0x1738], dx
mov eax, 0x6c
mov word [ebp - 0x1736], ax
mov ecx, 0x33
mov word [ebp - 0x1734], cx
mov edx, 0x32
mov word [ebp - 0x1732], dx
mov eax, 0x2e
mov word [ebp - 0x1730], ax
mov ecx, 0x64
mov word [ebp - 0x172e], cx
mov edx, 0x6c
mov word [ebp - 0x172c], dx
mov eax, 0x6c
mov word [ebp - 0x172a], ax
xor ecx, ecx
mov word [ebp - 0x1728], cx
push ecx
push esi
add esp, 4
xor ecx, 0x1015f
xor ecx, 0xa04e
call 0x4061ba
add byte [esi + 0x3d32454c], dh
inc esp
push eax
aaa
add esp, 4
pop ecx
push edi
sub edi, 0xa688
sub edi, 0xe3b8
pop edi
push edx
push eax
add esp, 4
and edx, 0xda3
pop edx
push edi
push esi
add esp, 4
add edi, 0x1467c
pop edi
push eax
and eax, 0x3e99
or eax, 0x12442
xor eax, 0x4819
sub eax, 0xbce9
pop eax
mov edx, dword fs:[0x18]
mov dword [ebp - 0x2034], edx
mov eax, dword [ebp - 0x2034]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0x198c], ecx
mov edx, dword [ebp - 0x198c]
mov dword [ebp - 0x15e0], edx
push ebx
jmp 0x40622f
jmp 0x406237
pop ebx
push ebx
push edi
add esp, 4
add ebx, 0x1196d
xor ebx, 0x11ca5
xor ebx, 0x4cac
pop ebx
push eax
add eax, 0x2235
pop eax
cmp dword [ebp - 0x15e0], 0
jne 0x406270
mov dword [ebp - 0x2d4], 0
jmp 0x40652c
mov eax, dword [ebp - 0x15e0]
mov ecx, dword [eax + 0xc]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0xc9c], edx
push eax
sub eax, 0x34c2
sub eax, 0x7e71
add eax, 0x119a8
pop eax
push ebx
push eax
add esp, 4
and ebx, 0x17060
xor ebx, 0x184e3
sub ebx, 0xa46e
xor ebx, 0xab7b
pop ebx
cmp dword [ebp - 0xc9c], 0
jne 0x4062cc
mov dword [ebp - 0x2d4], 0
jmp 0x40652c
mov eax, dword [ebp - 0xc9c]
mov dword [ebp - 0x508], eax
push edi
sub edi, 0x582e
xor edi, 0xf409
sub edi, 0x15cc3
add edi, 0x1611c
pop edi
push ecx
push edx
add esp, 4
add ecx, 0xc909
and ecx, 0x110d0
sub ecx, 0xc43
pop ecx
lea ecx, [ebp - 0x1740]
mov dword [ebp - 0xc98], ecx
mov edx, dword [ebp - 0x508]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0xc94], eax
xor ecx, ecx
mov word [ebp - 0x210], cx
xor edx, edx
mov word [ebp - 0x10c], dx
push edx
push ecx
add esp, 4
jmp 0x406341
jmp 0x406348
pop edx
push esi
push edi
add esp, 4
sub esi, 0x12962
sub esi, 0x103b7
and esi, 0x15f34
pop esi
push edx
xor edx, 0x134c4
pop edx
mov eax, dword [ebp - 0xc94]
mov cx, word [eax]
mov word [ebp - 0x1036], cx
mov edx, dword [ebp - 0xc94]
add edx, 2
mov dword [ebp - 0xc94], edx
mov ax, word [ebp - 0x1036]
mov word [ebp - 0x210], ax
mov ecx, dword [ebp - 0xc98]
mov dx, word [ecx]
mov word [ebp - 0x1038], dx
mov eax, dword [ebp - 0xc98]
add eax, 2
mov dword [ebp - 0xc98], eax
mov cx, word [ebp - 0x1038]
mov word [ebp - 0x10c], cx
push ecx
and ecx, 0x1c
or ecx, 0x9262
jmp 0x4063d6
pop ecx
push edx
push esi
add esp, 4
xor edx, 0x142f1
add edx, 0x101d5
xor edx, 0x1193a
sub edx, 0xe363
pop edx
movzx edx, word [ebp - 0x10c]
test edx, edx
jne 0x406418
movzx eax, word [ebp - 0x210]
movzx ecx, word [ebp - 0x10c]
sub eax, ecx
mov dword [ebp - 0x15e8], eax
jmp 0x40647b
movzx edx, word [ebp - 0x210]
movzx eax, word [ebp - 0x10c]
cmp edx, eax
je 0x406337
movzx ecx, word [ebp - 0x210]
xor ecx, 0x20
movzx edx, word [ebp - 0x10c]
cmp ecx, edx
je 0x406337
movzx eax, word [ebp - 0x210]
movzx ecx, word [ebp - 0x10c]
cmp eax, ecx
jge 0x406465
mov dword [ebp - 0x15e4], 0xffffffff
jmp 0x40646f
mov dword [ebp - 0x15e4], 1
mov edx, dword [ebp - 0x15e4]
mov dword [ebp - 0x15e8], edx
cmp dword [ebp - 0x15e8], 0
jne 0x4064c4
push ecx
push edi
add esp, 4
add ecx, 0x43bf
or ecx, 0x2989
pop ecx
push ecx
push ebx
add esp, 4
sub ecx, 0x3a60
or ecx, 0x151f5
or ecx, 0x10398
pop ecx
push ecx
or ecx, 0xec95
pop ecx
mov eax, dword [ebp - 0x508]
mov dword [ebp - 0x2d4], eax
jmp 0x40652c
push eax
push edi
add esp, 4
call 0x4064d9
add byte [esi + 0x47], al
inc edx
inc edi
inc esi
push eax
push eax
inc ebp
dec ebp
push eax
add esp, 4
pop eax
push ecx
push eax
add esp, 4
jmp 0x4064e9
or ecx, 0xab80
jmp 0x4064f5
pop ecx
mov ecx, dword [ebp - 0x508]
mov edx, dword [ecx]
mov dword [ebp - 0x508], edx
mov eax, dword [ebp - 0x508]
cmp eax, dword [ebp - 0xc9c]
je 0x406522
mov ecx, dword [ebp - 0x508]
cmp dword [ecx + 0x30], 0
jne 0x4062d8
mov dword [ebp - 0x2d4], 0
push ebx
push edx
add esp, 4
and ebx, 0x149d8
pop ebx
push edx
xor edx, 0x12d3f
or edx, 0xf051
and edx, 0xffab
add edx, 0xfba9
pop edx
push edi
push eax
add esp, 4
add edi, 0xfbf7
pop edi
cmp dword [ebp - 0x2d4], 0
jne 0x406e77
mov edx, 0x6b
mov word [ebp - 0x17ac], dx
mov eax, 0x65
mov word [ebp - 0x17aa], ax
mov ecx, 0x72
mov word [ebp - 0x17a8], cx
mov edx, 0x6e
mov word [ebp - 0x17a6], dx
mov eax, 0x65
mov word [ebp - 0x17a4], ax
mov ecx, 0x6c
mov word [ebp - 0x17a2], cx
mov edx, 0x33
mov word [ebp - 0x17a0], dx
mov eax, 0x32
mov word [ebp - 0x179e], ax
mov ecx, 0x2e
mov word [ebp - 0x179c], cx
mov edx, 0x64
mov word [ebp - 0x179a], dx
mov eax, 0x6c
mov word [ebp - 0x1798], ax
mov ecx, 0x6c
mov word [ebp - 0x1796], cx
xor edx, edx
mov word [ebp - 0x1794], dx
push ebx
push esi
add esp, 4
add ebx, 0x1653c
add ebx, 0x16e62
or ebx, 0x8c07
pop ebx
push ebx
sub ebx, 0x13372
and ebx, 0x6b4b
and ebx, 0x1430c
or ebx, 0x3c6b
pop ebx
mov byte [ebp - 0x898], 0x4c
mov byte [ebp - 0x897], 0x6f
mov byte [ebp - 0x896], 0x61
mov byte [ebp - 0x895], 0x64
mov byte [ebp - 0x894], 0x4c
mov byte [ebp - 0x893], 0x69
mov byte [ebp - 0x892], 0x62
mov byte [ebp - 0x891], 0x72
mov byte [ebp - 0x890], 0x61
mov byte [ebp - 0x88f], 0x72
mov byte [ebp - 0x88e], 0x79
mov byte [ebp - 0x88d], 0x57
mov byte [ebp - 0x88c], 0
mov eax, dword fs:[0x18]
mov dword [ebp - 0x1990], eax
mov ecx, dword [ebp - 0x1990]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x1994], edx
mov eax, dword [ebp - 0x1994]
mov dword [ebp - 0x15ec], eax
push edi
or edi, 0x16f17
call 0x4066cd
add byte [edi], dh
dec edx
aas
inc ebp
cmp eax, dword [ebp + 0x36]
aaa
add esp, 4
pop edi
push edx
call 0x4066e0
add byte [ebx], bh
dec eax
dec ebx
dec esp
aaa
cmp dword [eax + 0x3f], ecx
add esp, 4
xor edx, 0x6b5b
pop edx
cmp dword [ebp - 0x15ec], 0
jne 0x406702
mov dword [ebp - 0x754], 0
jmp 0x4069be
mov ecx, dword [ebp - 0x15ec]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xca8], eax
push edx
add edx, 0x1675e
xor edx, 0x5c88
sub edx, 0xe9ad
pop edx
push eax
push edx
add esp, 4
sub eax, 0x132c0
xor eax, 0xbda9
pop eax
push esi
push eax
add esp, 4
sub esi, 0xc271
pop esi
cmp dword [ebp - 0xca8], 0
jne 0x40675e
mov dword [ebp - 0x754], 0
jmp 0x4069be
mov ecx, dword [ebp - 0xca8]
mov dword [ebp - 0x50c], ecx
push edx
push ebx
add esp, 4
and edx, 0x16d0d
call 0x406782
add byte [eax + 0x43], dl
dec ecx
dec edi
inc ebx
aas
xor eax, 0x5a04c483
push ebx
xor ebx, 0x17bf0
pop ebx
push edi
add edi, 0xc351
xor edi, 0x13087
pop edi
lea edx, [ebp - 0x17ac]
mov dword [ebp - 0xca4], edx
mov eax, dword [ebp - 0x50c]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xca0], ecx
xor edx, edx
mov word [ebp - 0x214], dx
xor eax, eax
mov word [ebp - 0x110], ax
push edx
sub edx, 0x9420
pop edx
push ebx
push edx
add esp, 4
and ebx, 0x15abe
xor ebx, 0x1151d
xor ebx, 0xe019
pop ebx
push ebx
push edi
add esp, 4
add ebx, 0x79d0
add ebx, 0x3399
pop ebx
mov ecx, dword [ebp - 0xca0]
mov dx, word [ecx]
mov word [ebp - 0x103a], dx
mov eax, dword [ebp - 0xca0]
add eax, 2
mov dword [ebp - 0xca0], eax
mov cx, word [ebp - 0x103a]
mov word [ebp - 0x214], cx
mov edx, dword [ebp - 0xca4]
mov ax, word [edx]
mov word [ebp - 0x103c], ax
mov ecx, dword [ebp - 0xca4]
add ecx, 2
mov dword [ebp - 0xca4], ecx
mov dx, word [ebp - 0x103c]
mov word [ebp - 0x110], dx
push edx
push edx
add esp, 4
jmp 0x406862
call 0x40686f
add byte [esi], dh
inc edi
dec edx
inc ebp
inc esi
add esp, 4
pop edx
push eax
add eax, 0x4929
sub eax, 0x15376
add eax, 0x12a62
pop eax
movzx eax, word [ebp - 0x110]
test eax, eax
jne 0x4068aa
movzx ecx, word [ebp - 0x214]
movzx edx, word [ebp - 0x110]
sub ecx, edx
mov dword [ebp - 0x15f4], ecx
jmp 0x40690d
movzx eax, word [ebp - 0x214]
movzx ecx, word [ebp - 0x110]
cmp eax, ecx
je 0x4067c9
movzx edx, word [ebp - 0x214]
xor edx, 0x20
movzx eax, word [ebp - 0x110]
cmp edx, eax
je 0x4067c9
movzx ecx, word [ebp - 0x214]
movzx edx, word [ebp - 0x110]
cmp ecx, edx
jge 0x4068f7
mov dword [ebp - 0x15f0], 0xffffffff
jmp 0x406901
mov dword [ebp - 0x15f0], 1
mov eax, dword [ebp - 0x15f0]
mov dword [ebp - 0x15f4], eax
cmp dword [ebp - 0x15f4], 0
jne 0x406956
push edx
and edx, 0xa56e
add edx, 0x7061
xor edx, 0x316e
pop edx
push ebx
push esi
add esp, 4
and ebx, 0xda26
and ebx, 0x15507
sub ebx, 0xf3ca
xor ebx, 0xef60
pop ebx
mov ecx, dword [ebp - 0x50c]
mov dword [ebp - 0x754], ecx
jmp 0x4069be
push edx
sub edx, 0xc668
pop edx
push edi
jmp 0x406967
call 0x406974
add byte [esi], dh
inc esp
inc esp
inc ebp
xor al, byte [edi + 0x4a]
add esp, 4
call 0x406984
add byte [ecx + ecx*2 + 0x37], cl
inc ebx
cmp byte [ebx], bh
xor eax, 0x5f04c483
mov edx, dword [ebp - 0x50c]
mov eax, dword [edx]
mov dword [ebp - 0x50c], eax
mov ecx, dword [ebp - 0x50c]
cmp ecx, dword [ebp - 0xca8]
je 0x4069b4
mov edx, dword [ebp - 0x50c]
cmp dword [edx + 0x30], 0
jne 0x40676a
mov dword [ebp - 0x754], 0
push ebx
push ecx
add esp, 4
and ebx, 0x2979
pop ebx
push edi
push ebx
add esp, 4
sub edi, 0x699e
pop edi
push edx
and edx, 0x10201
xor edx, 0x145fb
xor edx, 0xf8f
add edx, 0x11fc9
pop edx
cmp dword [ebp - 0x754], 0
jne 0x406a3a
push esi
push ecx
add esp, 4
xor esi, 0x172e7
or esi, 0xa7df
add esi, 0x10ad9
pop esi
push esi
xor esi, 0x16590
call 0x406a27
add byte [ecx + ecx*2], dh
xor al, 0x34
dec ebx
inc ebx
aas
cmp eax, dword [ebx - 0x38a1fb3c]
test dword [eax - 8], esp
invalid
push ecx
add ecx, 0x107ec
and ecx, 0x18526
add ecx, 0xb84
pop ecx
push eax
push esi
add esp, 4
and eax, 0x17683
xor eax, 0xb254
pop eax
push ecx
push esi
add esp, 4
sub ecx, 0x11084
pop ecx
mov eax, dword [ebp - 0x754]
mov ecx, dword [eax + 0x18]
mov dword [ebp - 0x320], ecx
mov dword [ebp - 0x764], 0
mov edx, dword [ebp - 0x320]
mov dword [ebp - 0x15f8], edx
cmp dword [ebp - 0x15f8], 0
jne 0x406aab
mov eax, dword [ebp - 0x764]
mov dword [ebp - 0x3f8], eax
jmp 0x406d9c
mov ecx, dword [ebp - 0x15f8]
mov edx, dword [ebp - 0x320]
add edx, dword [ecx + 0x3c]
mov dword [ebp - 0x15fc], edx
jne 0x406ad3
mov eax, dword [ebp - 0x764]
mov dword [ebp - 0x3f8], eax
jmp 0x406d9c
mov ecx, 8
imul edx, ecx, 0
mov eax, dword [ebp - 0x15fc]
mov ecx, dword [eax + edx + 0x78]
mov dword [ebp - 0x1600], ecx
cmp dword [ebp - 0x1600], 0
jne 0x406b05
mov edx, dword [ebp - 0x764]
mov dword [ebp - 0x3f8], edx
jmp 0x406d9c
mov eax, dword [ebp - 0x320]
add eax, dword [ebp - 0x1600]
mov dword [ebp - 0x758], eax
jne 0x406b2a
mov ecx, dword [ebp - 0x764]
mov dword [ebp - 0x3f8], ecx
jmp 0x406d9c
mov edx, dword [ebp - 0x758]
mov eax, dword [ebp - 0x320]
add eax, dword [edx + 0x20]
mov dword [ebp - 0x1998], eax
mov ecx, dword [ebp - 0x758]
mov edx, dword [ebp - 0x320]
add edx, dword [ecx + 0x24]
mov dword [ebp - 0x199c], edx
mov eax, dword [ebp - 0x758]
mov ecx, dword [ebp - 0x320]
add ecx, dword [eax + 0x1c]
mov dword [ebp - 0x19a0], ecx
mov dword [ebp - 0x75c], 0
jmp 0x406b84
mov edx, dword [ebp - 0x75c]
add edx, 1
mov dword [ebp - 0x75c], edx
mov eax, dword [ebp - 0x758]
mov ecx, dword [ebp - 0x75c]
cmp ecx, dword [eax + 0x18]
jae 0x406d90
mov edx, dword [ebp - 0x75c]
mov eax, dword [ebp - 0x1998]
mov ecx, dword [ebp - 0x320]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x760], ecx
mov edx, dword [ebp - 0x75c]
mov eax, dword [ebp - 0x199c]
movzx ecx, word [eax + edx*2]
mov edx, dword [ebp - 0x19a0]
mov eax, dword [ebp - 0x320]
add eax, dword [edx + ecx*4]
mov dword [ebp - 0x19a4], eax
mov dword [ebp - 0x194], 0
jmp 0x406bf4
mov ecx, dword [ebp - 0x194]
add ecx, 1
mov dword [ebp - 0x194], ecx
mov edx, dword [ebp - 0x760]
add edx, dword [ebp - 0x194]
movsx eax, byte [edx]
test eax, eax
je 0x406ca6
mov ecx, dword [ebp - 0x194]
movsx edx, byte [ebp + ecx - 0x898]
test edx, edx
je 0x406ca6
push edx
add edx, 0x13458
pop edx
push ebx
push eax
add esp, 4
xor ebx, 0x233d
pop ebx
push edx
push ebx
add esp, 4
xor edx, 0x209e
sub edx, 0x63e3
or edx, 0x88c9
sub edx, 0xc8aa
pop edx
mov eax, dword [ebp - 0x760]
add eax, dword [ebp - 0x194]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x194]
movsx eax, byte [ebp + edx - 0x898]
cmp ecx, eax
je 0x406c98
mov ecx, dword [ebp - 0x760]
add ecx, dword [ebp - 0x194]
movsx edx, byte [ecx]
xor edx, 0x20
mov eax, dword [ebp - 0x194]
movsx ecx, byte [ebp + eax - 0x898]
cmp edx, ecx
jne 0x406c9f
jmp 0x406be5
jmp 0x406ca6
push ecx
sub ecx, 0x748e
add ecx, 0x9ffc
pop ecx
push ecx
push edi
add esp, 4
xor ecx, 0x389b
pop ecx
push ebx
push edx
add esp, 4
sub ebx, 0x14be9
xor ebx, 0x7d54
or ebx, 0x885c
pop ebx
mov edx, dword [ebp - 0x760]
add edx, dword [ebp - 0x194]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x194]
movsx edx, byte [ebp + ecx - 0x898]
cmp eax, edx
jne 0x406d05
mov dword [ebp - 0xcac], 0
jmp 0x406d74
push eax
push edi
add esp, 4
sub eax, 0x11e0c
and eax, 0x6420
and eax, 0x40a5
and eax, 0x5b4a
pop eax
push ebx
push ebx
add esp, 4
jmp 0x406d2d
jmp 0x406d36
pop ebx
mov eax, dword [ebp - 0x760]
add eax, dword [ebp - 0x194]
movsx ecx, byte [eax]
or ecx, 0x20
mov edx, dword [ebp - 0x194]
movsx eax, byte [ebp + edx - 0x898]
or eax, 0x20
cmp ecx, eax
jge 0x406d6a
mov dword [ebp - 0xcac], 0xffffffff
jmp 0x406d74
mov dword [ebp - 0xcac], 1
cmp dword [ebp - 0xcac], 0
jne 0x406d8b
mov ecx, dword [ebp - 0x19a4]
mov dword [ebp - 0x3f8], ecx
jmp 0x406d9c
jmp 0x406b75
mov edx, dword [ebp - 0x764]
mov dword [ebp - 0x3f8], edx
cmp dword [ebp - 0x3f8], 0
je 0x406e77
push eax
sub eax, 0x9e08
and eax, 0x3b35
add eax, 0x9a16
sub eax, 0xd4c2
pop eax
push ecx
push ecx
add esp, 4
and ecx, 0x10938
xor ecx, 0x129f6
add ecx, 0xd63f
pop ecx
mov eax, dword [ebp - 0x3f8]
mov dword [ebp - 0x19a8], eax
push ebx
sub ebx, 0xb9f3
jmp 0x406df3
sub ebx, 0x50b
jmp 0x406e02
pop ebx
push ebx
and ebx, 0xb080
pop ebx
push ebx
sub ebx, 0x2732
and ebx, 0x29a9
pop ebx
mov ecx, dword [ebp - 0x19a8]
mov dword [ebp - 0x19ac], ecx
lea edx, [ebp - 0x1740]
push edx
call dword [ebp - 0x19ac]
test eax, eax
jne 0x406e77
push edi
push esi
add esp, 4
and edi, 0x8a2f
pop edi
push esi
push edi
add esp, 4
or esi, 0x60be
xor esi, 0xccf6
pop esi
push edi
or edi, 0x726c
add edi, 0x14ef6
or edi, 0x13af9
pop edi
mov dword [ebp - 0x7a0], 0
jmp 0x407561
push ecx
push esi
add esp, 4
xor ecx, 0xc4f3
pop ecx
push eax
sub eax, 0x9851
call 0x406e9a
add byte [ecx + 0x50], al
dec ebp
aaa
inc edi
cmp cl, byte [ebp + 0x3f]
inc edi
cmp al, 0x83
les eax, [ecx + eax*4]
ror byte [0xeb000050], 3
xor eax, 0x64584f37
mov eax, dword [0x18]
mov dword [ebp - 0x19b0], eax
mov ecx, dword [ebp - 0x19b0]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x19b4], edx
mov eax, dword [ebp - 0x19b4]
mov dword [ebp - 0x1604], eax
push edx
call 0x406edf
add byte [ecx + 0x4c], cl
xor eax, 0x42374239
xor eax, 0xeb04c483
add eax, dword [edi + 0x50]
aaa
xor edx, 0x10f23
pop edx
push ecx
add ecx, 0x6e7e
or ecx, 0xaa7
sub ecx, 0x13a34
pop ecx
cmp dword [ebp - 0x1604], 0
jne 0x406f1a
mov dword [ebp - 0x2d4], 0
jmp 0x4071c1
mov ecx, dword [ebp - 0x1604]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xcb8], eax
push eax
or eax, 0x4bd
add eax, 0xd517
add eax, 0x16da
pop eax
push ebx
call 0x406f4e
add byte [ecx], bh
cmp eax, 0x3d484435
inc ecx
add esp, 4
and ebx, 0xe39e
or ebx, 0x12e9f
pop ebx
cmp dword [ebp - 0xcb8], 0
jne 0x406f76
mov dword [ebp - 0x2d4], 0
jmp 0x4071c1
mov ecx, dword [ebp - 0xcb8]
mov dword [ebp - 0x510], ecx
push ecx
push ecx
add esp, 4
sub ecx, 0x24db
add ecx, 0xcee6
or ecx, 0x14466
pop ecx
push esi
add esi, 0x7f9
xor esi, 0x106f6
xor esi, 0x10d4c
and esi, 0x6dd1
pop esi
lea edx, [ebp - 0x1740]
mov dword [ebp - 0xcb4], edx
mov eax, dword [ebp - 0x510]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xcb0], ecx
xor edx, edx
mov word [ebp - 0x218], dx
xor eax, eax
mov word [ebp - 0x34], ax
push ebx
push esi
add esp, 4
jmp 0x406feb
pop ebx
push edi
call 0x406ffc
add byte [ebp + 0x35], al
dec ebp
dec edx
cmp dword [esi], esi
aas
aaa
cmp al, byte [ebx + 0x8e804c4]
add byte [eax], al
add byte [eax], al
xor esi, dword [esi]
cmp eax, 0x41403f47
add esp, 4
pop edi
mov ecx, dword [ebp - 0xcb0]
mov dx, word [ecx]
mov word [ebp - 0x103e], dx
mov eax, dword [ebp - 0xcb0]
add eax, 2
mov dword [ebp - 0xcb0], eax
mov cx, word [ebp - 0x103e]
mov word [ebp - 0x218], cx
mov edx, dword [ebp - 0xcb4]
mov ax, word [edx]
mov word [ebp - 0x1040], ax
mov ecx, dword [ebp - 0xcb4]
add ecx, 2
mov dword [ebp - 0xcb4], ecx
mov dx, word [ebp - 0x1040]
mov word [ebp - 0x34], dx
push edi
add edi, 0x13fc1
pop edi
push edx
jmp 0x407075
add edx, 0x484
pop edx
push ebx
push edx
add esp, 4
add ebx, 0x46ed
jmp 0x407090
pop ebx
push edi
sub edi, 0x1de1
pop edi
movzx eax, word [ebp - 0x34]
test eax, eax
jne 0x4070b6
movzx ecx, word [ebp - 0x218]
movzx edx, word [ebp - 0x34]
sub ecx, edx
mov dword [ebp - 0x160c], ecx
jmp 0x407110
movzx eax, word [ebp - 0x218]
movzx ecx, word [ebp - 0x34]
cmp eax, ecx
je 0x406fde
movzx edx, word [ebp - 0x218]
xor edx, 0x20
movzx eax, word [ebp - 0x34]
cmp edx, eax
je 0x406fde
movzx ecx, word [ebp - 0x218]
movzx edx, word [ebp - 0x34]
cmp ecx, edx
jge 0x4070fa
mov dword [ebp - 0x1608], 0xffffffff
jmp 0x407104
mov dword [ebp - 0x1608], 1
mov eax, dword [ebp - 0x1608]
mov dword [ebp - 0x160c], eax
cmp dword [ebp - 0x160c], 0
jne 0x407159
push ecx
push ecx
add esp, 4
sub ecx, 0x5b73
call 0x407131
add byte [esp + edi], dh
aas
inc ebp
inc ebp
dec eax
add esp, 4
jmp 0x407139
call 0x407147
add byte [edx], dh
xor eax, dword [ebx + 0x33]
xor al, 0x4a
cmp ecx, dword [eax - 0x7d]
les eax, [ecx + ebx*2]
mov ecx, dword [ebp - 0x510]
mov dword [ebp - 0x2d4], ecx
jmp 0x4071c1
push edi
call 0x407167
add byte [ebx], dh
dec ebp
xor eax, dword ss:[edi + 0x35]
dec eax
add esp, 4
and edi, 0x75f2
and edi, 0x14e6
and edi, 0xc7a1
pop edi
push edi
sub edi, 0x951f
and edi, 0x1a9
pop edi
mov edx, dword [ebp - 0x510]
mov eax, dword [edx]
mov dword [ebp - 0x510], eax
mov ecx, dword [ebp - 0x510]
cmp ecx, dword [ebp - 0xcb8]
je 0x4071b7
mov edx, dword [ebp - 0x510]
cmp dword [edx + 0x30], 0
jne 0x406f82
mov dword [ebp - 0x2d4], 0
push ecx
xor ecx, 0x6a32
jmp 0x4071ce
xor ecx, 0xede5
or ecx, 0x3855
pop ecx
push edx
push ebx
add esp, 4
add edx, 0x432
or edx, 0xa22
add edx, 0x9b6b
pop edx
mov eax, dword [ebp - 0x2d4]
mov ecx, dword [eax + 0x18]
mov dword [ebp - 0x324], ecx
push edx
push ecx
add esp, 4
sub edx, 0x16cf4
and edx, 0x86b6
pop edx
push eax
push eax
add esp, 4
xor eax, 0x118e6
pop eax
push edi
add edi, 0x37ee
xor edi, 0x13cd3
xor edi, 0x431c
pop edi
mov dword [ebp - 0x774], 0
mov edx, dword [ebp - 0x324]
mov dword [ebp - 0x1610], edx
cmp dword [ebp - 0x1610], 0
jne 0x407264
mov eax, dword [ebp - 0x774]
mov dword [ebp - 0x514], eax
jmp 0x407555
mov ecx, dword [ebp - 0x1610]
mov edx, dword [ebp - 0x324]
add edx, dword [ecx + 0x3c]
mov dword [ebp - 0x1614], edx
jne 0x40728c
mov eax, dword [ebp - 0x774]
mov dword [ebp - 0x514], eax
jmp 0x407555
mov ecx, 8
imul edx, ecx, 0
mov eax, dword [ebp - 0x1614]
mov ecx, dword [eax + edx + 0x78]
mov dword [ebp - 0x1618], ecx
cmp dword [ebp - 0x1618], 0
jne 0x4072be
mov edx, dword [ebp - 0x774]
mov dword [ebp - 0x514], edx
jmp 0x407555
mov eax, dword [ebp - 0x324]
add eax, dword [ebp - 0x1618]
mov dword [ebp - 0x768], eax
jne 0x4072e3
mov ecx, dword [ebp - 0x774]
mov dword [ebp - 0x514], ecx
jmp 0x407555
mov edx, dword [ebp - 0x768]
mov eax, dword [ebp - 0x324]
add eax, dword [edx + 0x20]
mov dword [ebp - 0x19b8], eax
mov ecx, dword [ebp - 0x768]
mov edx, dword [ebp - 0x324]
inc dword [ebx]
push ecx
and al, 0x89
xchg ebp, eax
inc esp
out 0xff, al
dec dword [ebx - 0x7677b]
dec dword [ebx - 0x32373]
inc dword [ebx]
dec eax
sbb al, 0x89
lea eax, [eax - 0x1a]
invalid
inc edi
test dword [eax + edi*8 + 0xffff], edx
add byte [eax], al
jmp 0x40733d