Function at 0x40f6a1
Capabilities:
Contain obfuscated stackstrings
Get number of processors
Resolve function by parsing pe exports

Disassembly:
push edx
xor edx, 0xe8e4
and edx, 0xa4ba
xor edx, 0x108f0
or edx, 0x17974
pop edx
push edi
push ecx
add esp, 4
add edi, 0xcd50
xor edi, 0xb1f5
sub edi, 0xe89b
pop edi
mov ecx, 1
imul edx, ecx, 0
lea eax, [ebp + edx - 0xbec]
mov dword [ebp - 0x15c4], eax
push edi
call 0x40eab4
add byte [ebx + esi + 0x43], al
dec esp
cmp byte [edx], dh
add esp, 4
jmp 0x40eabe
jmp 0x40eac4
pop edi
push eax
sub eax, 0x1193e
xor eax, 0x12c93
or eax, 0xfcda
pop eax
mov dword [ebp - 0x20a0], 0xffffffff
push esi
sub esi, 0x1832c
pop esi
push eax
xor eax, 0x1bfc
add eax, 0x10bd0
pop eax
push eax
sub eax, 0x11607
add eax, 0x1967
or eax, 0x4ed4
pop eax
push ecx
add ecx, 0xb03d
pop ecx
mov ecx, dword [ebp - 0x3f0]
mov dword [ebp - 0x4fc], ecx
jmp 0x40eb32
mov edx, dword [ebp - 0x4fc]
add edx, 1
mov dword [ebp - 0x4fc], edx
push edx
sub edx, 0x2af9
pop edx
push edx
call 0x40eb49
add byte [ebx], bh
cmp al, 0x32
xor al, byte [eax + 0x41]
push eax
dec eax
add esp, 4
call 0x40eb5a
add byte [esi + esi], dh
xor eax, 0x50354740
inc edx
add esp, 4
xor edx, 0x10a00
pop edx
mov eax, dword [ebp - 0x4fc]
sub eax, dword [ebp - 0x3f0]
cmp eax, 0xffffffff
jb 0x40ebac
push edi
push ecx
add esp, 4
or edi, 0x166e9
add edi, 0x1798
jmp 0x40eb8d
pop edi
push eax
call 0x40eb9d
add byte [ecx], bh
inc esp
xor cl, byte [ecx + 0x34]
xor ecx, dword [eax + 0x38]
add esp, 4
xor eax, 0x7d2e
pop eax
jmp 0x40edda
mov dword [ebp - 0xc80], 7
mov ecx, dword [ebp - 0x4fc]
mov dword [ebp - 0xac4], ecx
push edi
push esi
add esp, 4
or edi, 0x9799
and edi, 0x155d7
pop edi
push ecx
add ecx, 0x16f07
pop ecx
push ebx
push esi
add esp, 4
sub ebx, 0x1015
xor ebx, 0x1669
xor ebx, 0xb80a
pop ebx
mov edx, dword [ebp - 0x15c4]
mov dword [ebp - 0xa60], edx
mov dword [ebp - 0xc84], 0
mov eax, dword [ebp - 0x4fc]
cmp eax, dword [ebp - 0x15c4]
jne 0x40ec5b
push ecx
sub ecx, 0xaa82
and ecx, 0x1b13
add ecx, 0x11fca
pop ecx
push eax
jmp 0x40ec32
call 0x40ec40
add byte [eax + edx*2 + 0x39], cl
inc edx
dec esi
dec esp
aas
inc esp
add esp, 4
add eax, 0x6ae8
pop eax
mov ecx, dword [ebp - 0xc84]
mov dword [ebp - 0x15cc], ecx
jmp 0x40ed8c
cmp dword [ebp - 0xc80], 0
jle 0x40ed80
push esi
push ecx
add esp, 4
xor esi, 0xabe
or al, byte [eax]
add al, ch
or eax, dword [eax]
add byte [eax], al
add byte [edx + 0x34], cl
inc eax
xor al, 0x50
dec edi
inc edx
dec ebp
dec ebp
inc edi
add esp, 4
jmp 0x40ec8b
pop esi
push esi
xor esi, 0xde56
or esi, 0x104b0
pop esi
mov edx, dword [ebp - 0xac4]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0xa60]
movzx edx, byte [ecx]
cmp eax, edx
je 0x40ed1c
push eax
call 0x40ecbd
add byte [edi], dh
dec esi
inc esi
dec edx
inc ecx
dec edx
add esp, 4
jmp 0x40ecc9
sub eax, 0xb980
sub eax, 0x170e9
pop eax
push esi
push esi
add esp, 4
or esi, 0x12833
pop esi
mov eax, dword [ebp - 0xac4]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0xa60]
movzx eax, byte [edx]
cmp ecx, eax
jle 0x40ed04
mov dword [ebp - 0x15c8], 1
jmp 0x40ed0e
mov dword [ebp - 0x15c8], 0xffffffff
mov ecx, dword [ebp - 0x15c8]
mov dword [ebp - 0xc84], ecx
jmp 0x40ed80
push esi
jmp 0x40ed22
sub esi, 0x10933
xor esi, 0x10695
add esi, 0x3394
pop esi
push edi
push esi
add esp, 4
or edi, 0xdd32
jmp 0x40ed47
xor edi, 0x10f95
pop edi
mov edx, dword [ebp - 0xc80]
sub edx, 1
mov dword [ebp - 0xc80], edx
mov eax, dword [ebp - 0xac4]
add eax, 1
mov dword [ebp - 0xac4], eax
mov ecx, dword [ebp - 0xa60]
add ecx, 1
mov dword [ebp - 0xa60], ecx
jmp 0x40ec5b
mov edx, dword [ebp - 0xc84]
mov dword [ebp - 0x15cc], edx
cmp dword [ebp - 0x15cc], 0
jne 0x40edd5
push eax
push edi
add esp, 4
add eax, 0x6a2b
add eax, 0x9a15
sub eax, 0xb1b3
jmp 0x40edb4
pop eax
push ebx
push ebx
add esp, 4
sub ebx, 0xbd03
xor ebx, 0x14cb1
pop ebx
mov eax, dword [ebp - 0x4fc]
mov dword [ebp - 0x3e8], eax
jmp 0x40ee16
jmp 0x40eb23
push edx
jmp 0x40ede1
pop edx
push edi
push edx
add esp, 4
sub edi, 0x17812
add edi, 0xc0c1
add edi, 0x7730
pop edi
push esi
push eax
add esp, 4
sub esi, 0x11f9a
and esi, 0xe401
pop esi
mov dword [ebp - 0x3e8], 0
push edi
push esi
add esp, 4
and edi, 0xe081
and edi, 0x6d75
or edi, 0x22ae
and edi, 0x3d9f
pop edi
push edi
sub edi, 0xd6d5
xor edi, 0x110b2
sub edi, 0xd666
pop edi
push ecx
push ebx
add esp, 4
or ecx, 0x14dc8
xor ecx, 0x12b4
pop ecx
push edx
add edx, 0x6b57
add edx, 0x5280
pop edx
push eax
push edi
add esp, 4
and eax, 0xf42c
add eax, 0x884d
pop eax
mov ecx, 1
imul edx, ecx, 0
lea eax, [ebp + edx - 0xbe4]
mov dword [ebp - 0x15d0], eax
push esi
push ebx
add esp, 4
or esi, 0x6a3f
jmp 0x40eea0
pop esi
push ecx
jmp 0x40eeab
or ecx, 0x9a22
xor ecx, 0x75f2
jmp 0x40eec0
pop ecx
mov dword [ebp - 0x20a4], 0xffffffff
push edi
push edx
add esp, 4
sub edi, 0xe1ca
or edi, 0x66bd
pop edi
push ecx
sub ecx, 0xfb88
call 0x40eef4
add byte [ebx + 0x47], cl
aaa
dec ebx
xor al, 0x40
cmp al, byte [ecx + 0x42]
dec esp
add esp, 4
jmp 0x40eefc
pop ecx
mov ecx, dword [ebp - 0x3f0]
mov dword [ebp - 0x500], ecx
jmp 0x40ef1a
mov edx, dword [ebp - 0x500]
add edx, 1
mov dword [ebp - 0x500], edx
push eax
push edi
add esp, 4
xor eax, 0x113cf
xor eax, 0x5cd8
add eax, 0xf6b2
pop eax
push edx
or edx, 0xc302
add edx, 0x15fc1
and edx, 0x128ad
xor edx, 0xfa9c
pop edx
mov eax, dword [ebp - 0x500]
sub eax, dword [ebp - 0x3f0]
cmp eax, 0xffffffff
jb 0x40ef94
push esi
push ebx
add esp, 4
and esi, 0x7d90
or esi, 0x17285
sub esi, 0x11976
add esi, 0x132ac
pop esi
push ecx
sub ecx, 0xee57
and ecx, 0xd30f
and ecx, 0x38be
pop ecx
jmp 0x40f1c2
mov dword [ebp - 0xc88], 7
mov ecx, dword [ebp - 0x500]
mov dword [ebp - 0xac0], ecx
push edx
jmp 0x40efb3
call 0x40efc3
add byte [ecx + 0x4d], al
inc ebp
cmp eax, 0x3e344544
dec ebx
add esp, 4
pop edx
push edx
push esi
add esp, 4
jmp 0x40efd5
and edx, 0x16dac
pop edx
mov edx, dword [ebp - 0x15d0]
mov dword [ebp - 0xabc], edx
mov dword [ebp - 0xc8c], 0
mov eax, dword [ebp - 0x500]
cmp eax, dword [ebp - 0x15d0]
jne 0x40f043
push edi
or edi, 0x1821c
xor edi, 0xe505
add edi, 0x13ffa
pop edi
push edi
push eax
add esp, 4
or edi, 0xf0a5
or edi, 0xf4e8
and edi, 0xf7b6
add edi, 0x15651
pop edi
mov ecx, dword [ebp - 0xc8c]
mov dword [ebp - 0x15d4], ecx
jmp 0x40f174
cmp dword [ebp - 0xc88], 0
jle 0x40f168
push esi
push eax
add esp, 4
add esi, 0xdb22
add esi, 0x80b0
sub esi, 0x16d2c
xor esi, 0xbd3b
pop esi
push ebx
add ebx, 0x907b
or ebx, 0x16159
xor ebx, 0xce19
pop ebx
mov edx, dword [ebp - 0xac0]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0xabc]
movzx edx, byte [ecx]
cmp eax, edx
je 0x40f104
push edi
push edi
add esp, 4
and edi, 0xd223
pop edi
push ecx
and ecx, 0x11005
and ecx, 0x162cb
xor ecx, 0x95f8
pop ecx
push edi
push edi
add esp, 4
or edi, 0x18082
add edi, 0x12cbe
pop edi
mov eax, dword [ebp - 0xac0]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0xabc]
movzx eax, byte [edx]
cmp ecx, eax
jle 0x40f0ec
mov dword [ebp - 0x15a0], 1
jmp 0x40f0f6
mov dword [ebp - 0x15a0], 0xffffffff
mov ecx, dword [ebp - 0x15a0]
mov dword [ebp - 0xc8c], ecx
jmp 0x40f168
push ecx
push ecx
add esp, 4
add ecx, 0x12d6f
call 0x40f11c
add byte [ebx + eax*2 + 0x4c], cl
inc ebx
inc esp
inc ecx
inc edx
add esp, 4
call 0x40f12c
add byte [eax], bh
dec ebx
xor al, byte [esi + 0x45]
cmp esi, dword [ebx + eax*4]
les eax, [ecx + eax*4]
shr dword [edi], 0x20
add byte [eax], al
pop ecx
mov edx, dword [ebp - 0xc88]
sub edx, 1
mov dword [ebp - 0xc88], edx
mov eax, dword [ebp - 0xac0]
add eax, 1
mov dword [ebp - 0xac0], eax
mov ecx, dword [ebp - 0xabc]
add ecx, 1
mov dword [ebp - 0xabc], ecx
jmp 0x40f043
mov edx, dword [ebp - 0xc8c]
mov dword [ebp - 0x15d4], edx
cmp dword [ebp - 0x15d4], 0
jne 0x40f1bd
push eax
push ecx
add esp, 4
and eax, 0xd217
jmp 0x40f18e
call 0x40f19d
add byte [0x4e47323e], dh
dec edi
inc ebx
inc ebx
push eax
add esp, 4
or eax, 0x35dc
pop eax
push edi
xor edi, 0x73ba
pop edi
mov eax, dword [ebp - 0x500]
mov dword [ebp - 0xab8], eax
jmp 0x40f1fe
jmp 0x40ef0b
push esi
add esi, 0x1364b
xor esi, 0x75d9
sub esi, 0x118fc
and esi, 0x9ebc
pop esi
push edi
push esi
add esp, 4
sub edi, 0xf8dd
and edi, 0x328e
add edi, 0x180d6
pop edi
mov dword [ebp - 0xab8], 0
push esi
and esi, 0x17607
add esi, 0x143fc
jmp 0x40f214
call 0x40f220
add byte [ecx + 0x4a], cl
xor al, 0x3f
inc edi
cmp eax, dword [ebx + 0x565e04c4]
push edi
add esp, 4
xor esi, 0x1701b
pop esi
mov byte [ebp - 0x878], 0x45
mov byte [ebp - 0x877], 0x78
mov byte [ebp - 0x876], 0x69
mov byte [ebp - 0x875], 0x74
mov byte [ebp - 0x874], 0x50
mov byte [ebp - 0x873], 0x72
mov byte [ebp - 0x872], 0x6f
mov byte [ebp - 0x871], 0x63
mov byte [ebp - 0x870], 0x65
mov byte [ebp - 0x86f], 0x73
mov byte [ebp - 0x86e], 0x73
mov byte [ebp - 0x86d], 0
push edx
push eax
add esp, 4
jmp 0x40f292
or edx, 0x16430
pop edx
push esi
push esi
add esp, 4
and esi, 0xd49
pop esi
push esi
push esi
add esp, 4
xor esi, 0x7e87
jmp 0x40f2b5
pop esi
mov ecx, 0x6b
mov word [ebp - 0x1738], cx
mov edx, 0x65
mov word [ebp - 0x1736], dx
mov eax, 0x72
mov word [ebp - 0x1734], ax
mov ecx, 0x6e
mov word [ebp - 0x1732], cx
mov edx, 0x65
mov word [ebp - 0x1730], dx
mov eax, 0x6c
mov word [ebp - 0x172e], ax
mov ecx, 0x33
mov word [ebp - 0x172c], cx
mov edx, 0x32
mov word [ebp - 0x172a], dx
mov eax, 0x2e
mov word [ebp - 0x1728], ax
mov ecx, 0x64
mov word [ebp - 0x1726], cx
mov edx, 0x6c
mov word [ebp - 0x1724], dx
mov eax, 0x6c
mov word [ebp - 0x1722], ax
xor ecx, ecx
mov word [ebp - 0x1720], cx
push edx
push edi
add esp, 4
jmp 0x40f35d
or edx, 0x13d07
and edx, 0x14752
pop edx
push esi
push edi
add esp, 4
sub esi, 0x14332
jmp 0x40f37a
and esi, 0x1de3
pop esi
push eax
and eax, 0x12bff
jmp 0x40f391
pop eax
push edx
xor edx, 0x16634
jmp 0x40f3a0
or edx, 0x897e
pop edx
push edi
push eax
add esp, 4
sub edi, 0x175a1
pop edi
mov edx, dword fs:[0x18]
mov dword [ebp - 0x1954], edx
mov eax, dword [ebp - 0x1954]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0x1958], ecx
mov edx, dword [ebp - 0x1958]
mov dword [ebp - 0x15d8], edx
push eax
or eax, 0xf90
and eax, 0x5932
call 0x40f3f5
add byte [0x4c363744], bh
xor al, 0x46
add esp, 4
xor eax, 0xd111
pop eax
push esi
add esi, 0x6b5f
and esi, 0x2a9e
pop esi
cmp dword [ebp - 0x15d8], 0
jne 0x40f425
mov dword [ebp - 0x31c], 0
jmp 0x40f6e1
mov eax, dword [ebp - 0x15d8]
mov ecx, dword [eax + 0xc]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0xc98], edx
push esi
push ecx
add esp, 4
call 0x40f448
add byte [esi + 0x47], al
cmp byte [esi + esi], dh
push eax
add esp, 4
xor esi, 0xfc4f
pop esi
push ecx
push eax
add esp, 4
sub ecx, 0xd3
sub ecx, 0x17519
jmp 0x40f468
pop ecx
cmp dword [ebp - 0xc98], 0
jne 0x40f481
mov dword [ebp - 0x31c], 0
jmp 0x40f6e1
mov eax, dword [ebp - 0xc98]
mov dword [ebp - 0x504], eax
push ecx
push edx
add esp, 4
or ecx, 0x876b
pop ecx
push eax
call 0x40f4a9
add byte [edi], dh
xor eax, 0x3c394d32
aas
inc ebp
dec eax
add esp, 4
add eax, 0x3c9a
pop eax
push esi
push ecx
add esp, 4
and esi, 0x18297
pop esi
lea ecx, [ebp - 0x1738]
mov dword [ebp - 0xc94], ecx
mov edx, dword [ebp - 0x504]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0xc90], eax
xor ecx, ecx
mov word [ebp - 0x210], cx
xor edx, edx
mov word [ebp - 0x10c], dx
push ebx
push edx
add esp, 4
add al, 0xeb
invalid
xor ebx, 0x14ea9
pop ebx
push eax
push ebx
add esp, 4
add eax, 0xe9e8
and eax, 0x80ba
pop eax
push ebx
sub ebx, 0x14620
add ebx, 0x12196
pop ebx
mov eax, dword [ebp - 0xc90]
mov cx, word [eax]
mov word [ebp - 0x1032], cx
mov edx, dword [ebp - 0xc90]
add edx, 2
mov dword [ebp - 0xc90], edx
mov ax, word [ebp - 0x1032]
mov word [ebp - 0x210], ax
mov ecx, dword [ebp - 0xc94]
mov dx, word [ecx]
mov word [ebp - 0x1034], dx
mov eax, dword [ebp - 0xc94]
add eax, 2
mov dword [ebp - 0xc94], eax
mov cx, word [ebp - 0x1034]
jmp dword [esi - 0x77]
invalid
hlt
invalid
invalid
call dword [esi + 0x51]
add esp, 4
sub esi, 0x8da6
jmp 0x40f589
or esi, 0x881d
pop esi
push eax
or eax, 0x1614
xor eax, 0xfbd7
jmp 0x40f5a3
xor eax, 0x155df
pop eax
movzx edx, word [ebp - 0x10c]
test edx, edx
jne 0x40f5cd
movzx eax, word [ebp - 0x210]
movzx ecx, word [ebp - 0x10c]
sub eax, ecx
mov dword [ebp - 0x15e0], eax
jmp 0x40f630
movzx edx, word [ebp - 0x210]
movzx eax, word [ebp - 0x10c]
cmp edx, eax
je 0x40f4ec
invalid
invalid
invalid
movzx ecx, word [ebp - 0x210]
xor ecx, 0x20
movzx edx, word [ebp - 0x10c]
cmp ecx, edx
je 0x40f4ec
movzx eax, word [ebp - 0x210]
movzx ecx, word [ebp - 0x10c]
cmp eax, ecx
jge 0x40f61a
mov dword [ebp - 0x15dc], 0xffffffff
jmp 0x40f624
mov dword [ebp - 0x15dc], 1
mov edx, dword [ebp - 0x15dc]
mov dword [ebp - 0x15e0], edx
cmp dword [ebp - 0x15e0], 0
jne 0x40f679
push eax
push esi
add esp, 4
jmp 0x40f644
xor eax, 0x895d
pop eax
push edi
push edi
add esp, 4
xor edi, 0x7a0f
and edi, 0x309
sub edi, 0x11a0e
pop edi
push esi
and esi, 0x150f6
pop esi
mov eax, dword [ebp - 0x504]
mov dword [ebp - 0x31c], eax
jmp 0x40f6e1
push ebx
push eax
add esp, 4
or ebx, 0x37e7
jmp 0x40f68b
pop ebx
push edi
or edi, 0x133d0
call 0x40f6a1
add byte [eax + 0x47], cl
aaa
dec esi
dec ecx
inc esi
push eax
add esp, 4
xor edi, 0x15071
pop edi
mov ecx, dword [ebp - 0x504]
mov edx, dword [ecx]
mov dword [ebp - 0x504], edx
mov eax, dword [ebp - 0x504]
cmp eax, dword [ebp - 0xc98]
je 0x40f6d7
mov ecx, dword [ebp - 0x504]
cmp dword [ecx + 0x30], 0
jne 0x40f48d
mov dword [ebp - 0x31c], 0
push ebx
xor ebx, 0x16162
jmp 0x40f6ee
xor ebx, 0xfcc6
pop ebx
push ebx
push edi
add esp, 4
add ebx, 0xeafc
pop ebx
push ecx
push esi
add esp, 4
add ecx, 0x1238f
xor ecx, 0x15736
pop ecx
cmp dword [ebp - 0x31c], 0
jne 0x41002c
mov edx, 0x6b
mov word [ebp - 0x1774], dx
mov eax, 0x65
mov word [ebp - 0x1772], ax
mov ecx, 0x72
mov word [ebp - 0x1770], cx
mov edx, 0x6e
mov word [ebp - 0x176e], dx
mov eax, 0x65
mov word [ebp - 0x176c], ax
mov ecx, 0x6c
mov word [ebp - 0x176a], cx
mov edx, 0x33
mov word [ebp - 0x1768], dx
mov eax, 0x32
mov word [ebp - 0x1766], ax
mov ecx, 0x2e
mov word [ebp - 0x1764], cx
mov edx, 0x64
mov word [ebp - 0x1762], dx
mov eax, 0x6c
mov word [ebp - 0x1760], ax
mov ecx, 0x6c
mov word [ebp - 0x175e], cx
xor edx, edx
mov word [ebp - 0x175c], dx
push esi
push ebx
add esp, 4
add esi, 0x13e59
sub esi, 0x87bd
pop esi
push edx
push edx
add esp, 4
sub edx, 0x9438
or edx, 0x3d13
xor edx, 0x11016
pop edx
push eax
and eax, 0x12b11
pop eax
mov byte [ebp - 0x894], 0x4c
mov byte [ebp - 0x893], 0x6f
mov byte [ebp - 0x892], 0x61
mov byte [ebp - 0x891], 0x64
mov byte [ebp - 0x890], 0x4c
mov byte [ebp - 0x88f], 0x69
mov byte [ebp - 0x88e], 0x62
mov byte [ebp - 0x88d], 0x72
mov byte [ebp - 0x88c], 0x61
mov byte [ebp - 0x88b], 0x72
mov byte [ebp - 0x88a], 0x79
mov byte [ebp - 0x889], 0x57
mov byte [ebp - 0x888], 0
mov eax, dword fs:[0x18]
mov dword [ebp - 0x195c], eax
mov ecx, dword [ebp - 0x195c]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x1960], edx
mov eax, dword [ebp - 0x1960]
mov dword [ebp - 0x15e4], eax
push edi
add edi, 0x58dd
sub edi, 0x16ae
pop edi
push ecx
push eax
add esp, 4
xor ecx, 0xa37d
add ecx, 0xa6de
pop ecx
push ebx
push edi
add esp, 4
add ebx, 0xbb9c
add ebx, 0x12f00
pop ebx
cmp dword [ebp - 0x15e4], 0
jne 0x40f8b7
mov dword [ebp - 0x750], 0
jmp 0x40fb73
mov ecx, dword [ebp - 0x15e4]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xca4], eax
push ebx
call 0x40f8d9
add byte [ebx], dh
dec esi
inc esi
inc ecx
inc esp
inc ebp
xor edi, dword [ebx + eax*2]
add esp, 4
pop ebx
push eax
call 0x40f8eb
add byte [ebx], dh
cmp al, byte [ebp + 0x32]
aas
inc esi
push eax
add esp, 4
or eax, 0xe912
and eax, 0x1066e
pop eax
cmp dword [ebp - 0xca4], 0
jne 0x40f913
mov dword [ebp - 0x750], 0
jmp 0x40fb73
mov ecx, dword [ebp - 0xca4]
mov dword [ebp - 0x508], ecx
push edx
jmp 0x40f928
and edx, 0xd5c8
pop edx
push ebx
push edx
add esp, 4
xor ebx, 0x1491c
and ebx, 0xbf1
jmp 0x40f948
pop ebx
push edi
xor edi, 0x17286
pop edi
lea edx, [ebp - 0x1774]
mov dword [ebp - 0xca0], edx
mov eax, dword [ebp - 0x508]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xc9c], ecx
xor edx, edx
mov word [ebp - 0x214], dx
xor eax, eax
mov word [ebp - 0x110], ax
push esi
push edi
add esp, 4
call 0x40f990
add byte [ecx + 0x44], cl
cmp dword [edx], esi
xor edi, dword [eax]
cmp eax, dword [ebx - 0x397efb3c]
rcr byte [ecx], 1
add dword [eax], eax
call 0x40f9a6
add byte [0x3a444f36], dh
dec ebx
add esp, 4
sub esi, 0x636d
pop esi
mov ecx, dword [ebp - 0xc9c]
mov dx, word [ecx]
mov word [ebp - 0x1036], dx
mov eax, dword [ebp - 0xc9c]
add eax, 2
mov dword [ebp - 0xc9c], eax
mov cx, word [ebp - 0x1036]
mov word [ebp - 0x214], cx
mov edx, dword [ebp - 0xca0]
mov ax, word [edx]
mov word [ebp - 0x1038], ax
mov ecx, dword [ebp - 0xca0]
add ecx, 2
mov dword [ebp - 0xca0], ecx
mov dx, word [ebp - 0x1038]
mov word [ebp - 0x110], dx
push esi
call 0x40fa19
add byte [edx + 0x41], al
inc esp
xor al, 0x35
dec ebp
cmp dword [ebx - 0x317efb3c], eax
mov ah, 0xf1
add byte [eax], al
pop esi
push edx
push edx
add esp, 4
call 0x40fa38
add byte [edx], dh
inc ebp
cmp byte [ebx + 0x3a], al
dec ebp
xor al, 0x4e
cmp byte ss:[ebx + 0xf5a04c4], al
mov bh, 0x85
invalid
push ecx
sub ecx, 0x7e9b
or ecx, 0xec60
jmp 0x40fb89
xor ecx, 0x95a2
pop ecx
push ecx
push eax
add esp, 4
xor ecx, 0xc603
jmp 0x40fba4
pop ecx
cmp dword [ebp - 0x750], 0
jne 0x40fbef
push edi
push edx
add esp, 4
or edi, 0x13812
or edi, 0x174c2
and edi, 0xc1a1
pop edi
push eax
push edx
add esp, 4
and eax, 0x9e34
or eax, 0x12a58
pop eax
push ecx
or ecx, 0xb05e
pop ecx
mov dword [ebp - 0x79c], 0
jmp 0x410716
push esi
xor esi, 0x99ef
xor esi, 0x17d2
xor esi, 0x111ce
pop esi
push ebx
jmp 0x40fc0c
or ebx, 0x5cc5
pop ebx
push ebx
xor ebx, 0x14a8e
xor ebx, 0xa740
pop ebx
mov eax, dword [ebp - 0x750]
mov ecx, dword [eax + 0x18]
mov dword [ebp - 0x320], ecx
mov dword [ebp - 0x760], 0
mov edx, dword [ebp - 0x320]
mov dword [ebp - 0x15f0], edx
cmp dword [ebp - 0x15f0], 0
jne 0x40fc60
mov eax, dword [ebp - 0x760]
mov dword [ebp - 0x3f4], eax
jmp 0x40ff51
mov ecx, dword [ebp - 0x15f0]
mov edx, dword [ebp - 0x320]
add edx, dword [ecx + 0x3c]
mov dword [ebp - 0x15f4], edx
jne 0x40fc88
mov eax, dword [ebp - 0x760]
mov dword [ebp - 0x3f4], eax
jmp 0x40ff51
mov ecx, 8
imul edx, ecx, 0
mov eax, dword [ebp - 0x15f4]
mov ecx, dword [eax + edx + 0x78]
mov dword [ebp - 0x15f8], ecx
cmp dword [ebp - 0x15f8], 0
jne 0x40fcba
mov edx, dword [ebp - 0x760]
mov dword [ebp - 0x3f4], edx
jmp 0x40ff51
mov eax, dword [ebp - 0x320]
add eax, dword [ebp - 0x15f8]
mov dword [ebp - 0x754], eax
jne 0x40fcdf
mov ecx, dword [ebp - 0x760]
mov dword [ebp - 0x3f4], ecx
jmp 0x40ff51
mov edx, dword [ebp - 0x754]
mov eax, dword [ebp - 0x320]
add eax, dword [edx + 0x20]
mov dword [ebp - 0x1964], eax
mov ecx, dword [ebp - 0x754]
mov edx, dword [ebp - 0x320]
add edx, dword [ecx + 0x24]
mov dword [ebp - 0x1968], edx
mov eax, dword [ebp - 0x754]
mov ecx, dword [ebp - 0x320]
add ecx, dword [eax + 0x1c]
mov dword [ebp - 0x196c], ecx
mov dword [ebp - 0x758], 0
jmp 0x40fd39
mov edx, dword [ebp - 0x758]
add edx, 1
mov dword [ebp - 0x758], edx
mov eax, dword [ebp - 0x754]
mov ecx, dword [ebp - 0x758]
cmp ecx, dword [eax + 0x18]
jae 0x40ff45
mov edx, dword [ebp - 0x758]
mov eax, dword [ebp - 0x1964]
mov ecx, dword [ebp - 0x320]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x75c], ecx
mov edx, dword [ebp - 0x758]
mov eax, dword [ebp - 0x1968]
movzx ecx, word [eax + edx*2]
mov edx, dword [ebp - 0x196c]
mov eax, dword [ebp - 0x320]
add eax, dword [edx + ecx*4]
mov dword [ebp - 0x1970], eax
mov dword [ebp - 0x198], 0
jmp 0x40fda9
mov ecx, dword [ebp - 0x198]
add ecx, 1
mov dword [ebp - 0x198], ecx
mov edx, dword [ebp - 0x75c]
add edx, dword [ebp - 0x198]
movsx eax, byte [edx]
test eax, eax
je 0x40fe5b
mov ecx, dword [ebp - 0x198]
movsx edx, byte [ebp + ecx - 0x894]
test edx, edx
je 0x40fe5b
push edi
add edi, 0xeba
pop edi
push edx
add edx, 0x13b9a
jmp 0x40fdee
pop edx
push ebx
call 0x40fdfc
add byte [eax], bh
inc esi
cmp al, 0x3d
inc esi
dec edi
add esp, 4
pop ebx
push esi
xor esi, 0x22e2
pop esi
mov eax, dword [ebp - 0x75c]
add eax, dword [ebp - 0x198]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x198]
movsx eax, byte [ebp + edx - 0x894]
cmp ecx, eax
je 0x40fe4d
mov ecx, dword [ebp - 0x75c]
add ecx, dword [ebp - 0x198]
movsx edx, byte [ecx]
xor edx, 0x20
mov eax, dword [ebp - 0x198]
movsx ecx, byte [ebp + eax - 0x894]
cmp edx, ecx
jne 0x40fe54
jmp 0x40fd9a
jmp 0x40fe5b
push edi
push ebx
add esp, 4
sub edi, 0x124b4
and edi, 0x16f3e
or edi, 0x14bec
pop edi
push esi
xor esi, 0xabf8
or esi, 0x8388
and esi, 0x6fde
jmp 0x40fe8c
pop esi
mov edx, dword [ebp - 0x75c]
add edx, dword [ebp - 0x198]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x198]
movsx edx, byte [ebp + ecx - 0x894]
cmp eax, edx
jne 0x40feba
mov dword [ebp - 0xca8], 0
jmp 0x40ff29
push ecx
push ecx
add esp, 4
or ecx, 0x139ed
and ecx, 0x1959
sub ecx, 0x2bf7
pop ecx
push eax
push ebx
add esp, 4
or eax, 0xdaa7
pop eax
push edx
or edx, 0xfe3f
sub edx, 0x5d55
pop edx
mov eax, dword [ebp - 0x75c]
add eax, dword [ebp - 0x198]
movsx ecx, byte [eax]
or ecx, 0x20
mov edx, dword [ebp - 0x198]
movsx eax, byte [ebp + edx - 0x894]
or eax, 0x20
cmp ecx, eax
jge 0x40ff1f
mov dword [ebp - 0xca8], 0xffffffff
jmp 0x40ff29
mov dword [ebp - 0xca8], 1
cmp dword [ebp - 0xca8], 0
jne 0x40ff40
mov ecx, dword [ebp - 0x1970]
mov dword [ebp - 0x3f4], ecx
jmp 0x40ff51
jmp 0x40fd2a
mov edx, dword [ebp - 0x760]
mov dword [ebp - 0x3f4], edx
cmp dword [ebp - 0x3f4], 0
je 0x41002c
push ecx
push esi
add esp, 4
add ecx, 0x165f3
add ecx, 0x12a9
pop ecx
push edi
push edi
add esp, 4
xor edi, 0x1f02
pop edi
push eax
or eax, 0x153d1
and eax, 0x95da
add eax, 0xbb55
pop eax
mov eax, dword [ebp - 0x3f4]
mov dword [ebp - 0x1974], eax
push ebx
push esi
add esp, 4
jmp 0x40ffa6
add ebx, 0x4bbe
jmp 0x40ffb4
pop ebx
push ecx
jmp 0x40ffbc
add ecx, 0x10fdf
jmp 0x40ffc7
and ecx, 0xd3ab
pop ecx
mov ecx, dword [ebp - 0x1974]
mov dword [ebp - 0x1978], ecx
lea edx, [ebp - 0x1738]
push edx
call dword [ebp - 0x1978]
test eax, eax
jne 0x41002c
push edi
push eax
add esp, 4
call 0x40ffff
add byte [esi + esi], dh
dec ecx
aas
xor al, 0x48
inc esi
inc eax
xor eax, 0x8104c483
out dx, eax
scasd eax, dword es:[edi]
out dx, eax
add byte [eax], al
pop edi
push esi
sub esi, 0x8a66
sub esi, 0xa1da
add esi, 0x9dbc
pop esi
mov dword [ebp - 0x79c], 0
jmp 0x410716
push ebx
push ebx
add esp, 4
or ebx, 0xbfbe
xor ebx, 0x5cfc
sub ebx, 0x542e
xor ebx, 0x9ba4
pop ebx
push esi
add esi, 0x17796
and esi, 0xea9d
or esi, 0x9151
pop esi
mov eax, dword fs:[0x18]
mov dword [ebp - 0x197c], eax
mov ecx, dword [ebp - 0x197c]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x1980], edx
mov eax, dword [ebp - 0x1980]
mov dword [ebp - 0x15fc], eax
push eax
push eax
add esp, 4
jmp 0x41008f
call 0x41009b
add byte [ebx], dh
cmp al, 0x4e
inc ecx
cmp eax, dword ss:[ebx - 0x1f7efb3c]
dec edx
add eax, dword [ecx]
add byte [ecx + 0x13d90e8], al
add byte [eax + 0x51], bl
push edx
add esp, 4
sub ecx, 0x15769
pop ecx
cmp dword [ebp - 0x15fc], 0
jne 0x4100cf
mov dword [ebp - 0x31c], 0
jmp 0x410376
mov ecx, dword [ebp - 0x15fc]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xcb4], eax
push eax
push esi
add esp, 4
jmp 0x4100ec
pop eax
push ecx
jmp 0x4100f5
sub ecx, 0x7a72
or ecx, 0x24ff
call 0x41010f
add byte [ebx + 0x46], al
dec esi
push eax
cmp esi, dword [esi]
dec esi
cmp al, byte [ebx - 0x7ca6fb3c]
mov ebp, 0xfffff34c
add byte [ebp + 0xf], dh
mov dword [ebp - 0x31c], 0
jmp 0x410376
push edx
push ecx
add esp, 4
or edx, 0xa31e
xor edx, 0x32eb
or edx, 0x654f
pop edx
push ebx
sub ebx, 0x14688
xor ebx, 0x7442
xor ebx, 0xfdf1
xor ebx, 0x2fb6
pop ebx
mov eax, dword [ebp - 0x31c]
mov ecx, dword [eax + 0x18]
mov dword [ebp - 0x324], ecx
push ecx
sub ecx, 0x15f8b
pop ecx
push edx
call 0x4103cf
add byte [ebp + 0x42], cl
cmp byte [edx + 0x47], al
inc edx
xor ecx, dword [edi + 0x4e]
add esp, 4
sub edx, 0x45ea
call 0x4103e5
add byte [esi], dh
inc ebp
push eax
xor eax, 0x83503940
les eax, [edx + ebx*2]
mov dword [ebp - 0x770], 0
mov edx, dword [ebp - 0x324]
mov dword [ebp - 0x1608], edx
cmp dword [ebp - 0x1608], 0
jne 0x410419
mov eax, dword [ebp - 0x770]
mov dword [ebp - 0x510], eax
jmp 0x41070a
mov ecx, dword [ebp - 0x1608]
mov edx, dword [ebp - 0x324]
add edx, dword [ecx + 0x3c]
mov dword [ebp - 0x160c], edx
jne 0x410441
mov eax, dword [ebp - 0x770]
mov dword [ebp - 0x510], eax
jmp 0x41070a
mov ecx, 8
imul edx, ecx, 0
mov eax, dword [ebp - 0x160c]
mov ecx, dword [eax + edx + 0x78]
mov dword [ebp - 0x1610], ecx
cmp dword [ebp - 0x1610], 0
jne 0x410473
mov edx, dword [ebp - 0x770]
mov dword [ebp - 0x510], edx
jmp 0x41070a
mov eax, dword [ebp - 0x324]
add eax, dword [ebp - 0x1610]
mov dword [ebp - 0x764], eax
jne 0x410498
mov ecx, dword [ebp - 0x770]
mov dword [ebp - 0x510], ecx
jmp 0x41070a
mov edx, dword [ebp - 0x764]
mov eax, dword [ebp - 0x324]
add eax, dword [edx + 0x20]
mov dword [ebp - 0x1984], eax
mov ecx, dword [ebp - 0x764]
mov edx, dword [ebp - 0x324]
add edx, dword [ecx + 0x24]
mov dword [ebp - 0x1988], edx
mov eax, dword [ebp - 0x764]
mov ecx, dword [ebp - 0x324]
add ecx, dword [eax + 0x1c]
mov dword [ebp - 0x1d10], ecx
mov dword [ebp - 0x768], 0
jmp 0x4104f2
mov edx, dword [ebp - 0x768]
add edx, 1
mov dword [ebp - 0x768], edx
mov eax, dword [ebp - 0x764]
mov ecx, dword [ebp - 0x768]
cmp ecx, dword [eax + 0x18]
jae 0x4106fe
mov edx, dword [ebp - 0x768]
mov eax, dword [ebp - 0x1984]
mov ecx, dword [ebp - 0x324]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x76c], ecx
mov edx, dword [ebp - 0x768]
mov eax, dword [ebp - 0x1988]
movzx ecx, word [eax + edx*2]
mov edx, dword [ebp - 0x1d10]
mov eax, dword [ebp - 0x324]
add eax, dword [edx + ecx*4]
mov dword [ebp - 0x198c], eax
mov dword [ebp - 0x19c], 0
jmp 0x410562
mov ecx, dword [ebp - 0x19c]
add ecx, 1
mov dword [ebp - 0x19c], ecx
invalid
invalid
mov edx, dword [ebp - 0x76c]
add edx, dword [ebp - 0x19c]
movsx eax, byte [edx]
test eax, eax
je 0x410614
mov ecx, dword [ebp - 0x19c]
movsx edx, byte [ebp + ecx - 0x878]
test edx, edx
je 0x410614
push esi
push edi
add esp, 4
call 0x4105a3
add byte [ebx + edi + 0x35], cl
dec edx
inc ebx
inc ebp
dec edx
inc esp
add esp, 4
pop esi
push ebx
and ebx, 0x4656
call 0x4105bd
add byte [ebx + 0x3f], al
cmp dword [ebx + 0x3f], ecx
dec esp
cmp al, 0x40
add esp, 4
pop ebx
mov eax, dword [ebp - 0x76c]
add eax, dword [ebp - 0x19c]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x19c]
movsx eax, byte [ebp + edx - 0x878]
cmp ecx, eax
je 0x410606
mov ecx, dword [ebp - 0x76c]
add ecx, dword [ebp - 0x19c]
movsx edx, byte [ecx]
xor edx, 0x20
mov eax, dword [ebp - 0x19c]
movsx ecx, byte [ebp + eax - 0x878]
cmp edx, ecx
jne 0x41060d
jmp 0x410553
jmp 0x410614
push esi
and esi, 0x1438d
and esi, 0x17ba6
add byte [ecx + 0x166aaf6], al
add byte [esi + 0x51], bl
push ecx
add esp, 4
jmp 0x410633
and ecx, 0x5c69
xor ecx, 0x78
sub ecx, 0x551d
pop ecx
mov edx, dword [ebp - 0x76c]
add edx, dword [ebp - 0x19c]
dec dword [edi]
mov esi, 0x648d8b02
invalid
invalid
dec dword [edi]
mov esi, 0xf7880d94
invalid
invalid
cmp eax, edx
jne 0x410673
mov dword [ebp - 0xcb8], 0
jmp 0x4106e2
push edi
push edi
add esp, 4
or edi, 0x15cb1
sub edi, 0xd263
or edi, 0xd411
pop edi
push ebx
jmp 0x410692
and ebx, 0x9d22
or ebx, 0x10107
or ebx, 0x1a6e
pop ebx
mov eax, dword [ebp - 0x76c]
add eax, dword [ebp - 0x19c]
movsx ecx, byte [eax]
or ecx, 0x20
mov edx, dword [ebp - 0x19c]
movsx eax, byte [ebp + edx - 0x878]
or eax, 0x20
cmp ecx, eax
jge 0x4106d8
mov dword [ebp - 0xcb8], 0xffffffff
jmp 0x4106e2
mov dword [ebp - 0xcb8], 1
cmp dword [ebp - 0xcb8], 0
jne 0x4106f9
mov ecx, dword [ebp - 0x198c]
mov dword [ebp - 0x510], ecx
jmp 0x41070a
jmp 0x4104e3
mov edx, dword [ebp - 0x770]
mov dword [ebp - 0x510], edx
mov eax, dword [ebp - 0x510]
mov dword [ebp - 0x79c], eax
push edi
and edi, 0x14d53
pop edi
push eax
call 0x41072c
add byte [ebx], bh
inc eax
dec ebx
aaa
dec edi
cmp eax, dword [ebx + 0xae804c4]
add byte [eax], al
add byte [eax], al
dec esp
cmp byte [edi + 0x3f], cl
dec edi
aas
push eax
cmp al, 0x41
add esp, 4
and eax, 0x6a96
pop eax
mov ecx, dword [ebp - 0x3e8]
add ecx, 0xe
mov dword [ebp - 0x19dc], ecx
push ebx
or ebx, 0xe4f0
or ebx, 0x9eb8
pop ebx
push edi
jmp 0x41076e
add edi, 0x4f9e
pop edi
push esi
and esi, 0x17365
add esi, 0xf3cd
and esi, 0x4e53
pop esi
cmp dword [ebp - 0x3e8], 0
je 0x41079b
cmp dword [ebp - 0xab8], 0
jne 0x4107e1
push ebx
push esi
add esp, 4
or ebx, 0x8e20
add ebx, 0x342
pop ebx
push esi
or esi, 0x8169
xor esi, 0x4c42
xor esi, 0xf649
pop esi
push edx
push ecx
add esp, 4
and edx, 0xe28b
pop edx
mov edx, dword [ebp - 0x79c]
mov dword [ebp - 0x1990], edx
push 0
call dword [ebp - 0x1990]
mov dword [ebp - 0x20a8], 0xa
push edx
xor edx, 0xd5e5
jmp 0x4107f8
pop edx
push ecx
add ecx, 0xadf
call 0x41080d
add byte [edi], dh
xor eax, 0x4f393a4e
cmp eax, dword [ebx + 0x565904c4]
push edi
add esp, 4
or esi, 0x14e88
pop esi
mov eax, dword [ebp - 0x3e8]
mov cl, byte [eax + 0xa]
mov byte [ebp - 0x3ae], cl
mov edx, dword [ebp - 0xab8]
sub edx, dword [ebp - 0x3e8]
mov dword [ebp - 0x1694], edx
mov dword [ebp - 0xce8], 0
push ebx
push eax
add esp, 4
and ebx, 0xd3ff
call 0x41085f
add byte [esi], bh
aaa
xor dh, byte [esi]
inc edx
inc ecx
add esp, 4
call 0x41086e
add byte [edx], bh
inc ebx
inc edx
dec ebx
dec ebp
aas
add esp, 4
pop ebx
push esi
or esi, 0x1ae1
pop esi
mov byte [ebp - 0x9d4], 0x56
mov byte [ebp - 0x9d3], 0x69
mov byte [ebp - 0x9d2], 0x72
mov byte [ebp - 0x9d1], 0x74
mov byte [ebp - 0x9d0], 0x75
mov byte [ebp - 0x9cf], 0x61
mov byte [ebp - 0x9ce], 0x6c
mov byte [ebp - 0x9cd], 0x50
mov byte [ebp - 0x9cc], 0x72
mov byte [ebp - 0x9cb], 0x6f
mov byte [ebp - 0x9ca], 0x74
mov byte [ebp - 0x9c9], 0x65
mov byte [ebp - 0x9c8], 0x63
mov byte [ebp - 0x9c7], 0x74
mov byte [ebp - 0x9c6], 0
push edx
push ecx
add esp, 4
or edx, 0xbae8
pop edx
push edx
call 0x4108fd
add byte [ecx*2 + 0x3443363c], dh
xor eax, 0x8104c483
loop 0x41096b
lodsd eax, dword [esi]
add byte [eax], al
pop edx
push edi
add edi, 0x1774
or edi, 0x1049b
pop edi
mov eax, dword fs:[0x18]
mov dword [ebp - 0x1994], eax
mov ecx, dword [ebp - 0x1994]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x1998], edx
mov eax, dword [ebp - 0x1998]
mov dword [ebp - 0x1614], eax
push esi
push ebx
add esp, 4
sub esi, 0xd1b8
xor esi, 0xe79d
pop esi
push ecx
push ebx
add esp, 4
sub ecx, 0x1357e
sub ecx, 0x7294
xor ecx, 0x1475
pop ecx
push eax
xor eax, 0x18210
add dword [eax], eax
pop eax
cmp dword [ebp - 0x1614], 0
jne 0x410986
mov dword [ebp - 0x2fc], 0
jmp 0x410c2d
mov ecx, dword [ebp - 0x1614]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xcc4], eax
push edi
call 0x4109a9
add byte [edx], dh
dec esp
inc esi
inc ecx
cmp eax, 0x394f3d3f
add esp, 4
jmp 0x4109b2
call 0x4109c0
add byte [ecx], bh
dec ecx
inc esi
dec ecx
inc esp
inc esp
cmp dword ds:[ebx - 0x87efb3c], eax
or byte [ecx], dh
add dword [eax], eax
pop edi
cmp dword [ebp - 0xcc4], 0
jne 0x4109e2
mov dword [ebp - 0x2fc], 0
jmp 0x410c2d
mov ecx, dword [ebp - 0xcc4]
mov dword [ebp - 0x514], ecx
push edx
push edi
add esp, 4
add edx, 0x165ce
pop edx
push ebx
xor ebx, 0x12215
call 0x410a10
add byte [esi], dh
cmp byte [ebp + 0x43], al
dec edx
inc esp
dec edx
inc ebx
cmp eax, 0x8104c483
retf
push ebx
push edx
add esp, 4
or ebx, 0x6eb5
pop ebx
push edi
push eax
add esp, 4
sub edi, 0xf49e
pop edi
push eax
add eax, 0x172dc
add eax, 0x11e05
xor eax, 0x90ee
xor eax, 0x18679
pop eax
cmp dword [ebp - 0x2fc], 0
jne 0x411564
mov eax, 0x6b
mov word [ebp - 0x1790], ax
mov ecx, 0x65
mov word [ebp - 0x178e], cx
mov edx, 0x72
mov word [ebp - 0x178c], dx
mov eax, 0x6e
mov word [ebp - 0x178a], ax
mov ecx, 0x65
mov word [ebp - 0x1788], cx
mov edx, 0x6c
mov word [ebp - 0x1786], dx
mov eax, 0x33
mov word [ebp - 0x1784], ax
mov ecx, 0x32
mov word [ebp - 0x1782], cx
mov edx, 0x2e
mov word [ebp - 0x1780], dx
mov eax, 0x64
mov word [ebp - 0x177e], ax
mov ecx, 0x6c
mov word [ebp - 0x177c], cx
mov edx, 0x6c
mov word [ebp - 0x177a], dx
xor eax, eax
mov word [ebp - 0x1778], ax
push edi
or edi, 0xe6f
and edi, 0xcaa5
and edi, 0xf34e
sub edi, 0x394e
pop edi
push eax
push edx
add esp, 4
call 0x410d33
add byte [ebx + esi], bh
dec ecx
dec ebp
cmp eax, dword [edi + 0x34]
inc esp
dec esi
add esp, 4
pop eax
mov byte [ebp - 0x8a4], 0x4c
mov byte [ebp - 0x8a3], 0x6f
mov byte [ebp - 0x8a2], 0x61
mov byte [ebp - 0x8a1], 0x64
mov byte [ebp - 0x8a0], 0x4c
mov byte [ebp - 0x89f], 0x69
mov byte [ebp - 0x89e], 0x62
mov byte [ebp - 0x89d], 0x72
mov byte [ebp - 0x89c], 0x61
mov byte [ebp - 0x89b], 0x72
mov byte [ebp - 0x89a], 0x79
mov byte [ebp - 0x899], 0x57
mov byte [ebp - 0x898], 0
mov ecx, dword fs:[0x18]
mov dword [ebp - 0x199c], ecx
mov edx, dword [ebp - 0x199c]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x19a0], eax
mov ecx, dword [ebp - 0x19a0]
mov dword [ebp - 0x1620], ecx
push esi
or esi, 0x28b
jmp 0x410dca
add esi, 0x7c59
call 0x410ddc
add byte [esi + 0x47], al
dec edx
dec eax
xor eax, 0x4c48343
pop esi
push edi
push edi
add esp, 4
add edi, 0xe36b
pop edi
cmp dword [ebp - 0x1620], 0
jne 0x410e04
mov dword [ebp - 0x774], 0
jmp 0x4110ab
mov edx, dword [ebp - 0x1620]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0xcd0], ecx
push eax
push esi
add esp, 4
call 0x410e29
add byte [esi], bh
dec ebp
dec eax
xor al, 0x3e
dec edx
dec ebx
add esp, 4
xor eax, 0x11b74
or eax, 0x18516
call 0x410e44
add byte [0x36334938], bh
dec ecx
add esp, 4
pop eax
cmp dword [ebp - 0xcd0], 0
jne 0x410e60
mov dword [ebp - 0x774], 0
jmp 0x4110ab
mov edx, dword [ebp - 0xcd0]
mov dword [ebp - 0x518], edx
push edx
push edi
add esp, 4
and edx, 0x72dd
and edx, 0x53b6
pop edx
push eax
or eax, 0x7172
and eax, 0x5dcc
call 0x410e9a
add byte [eax], bh
dec esi
cmp byte [ebp + 0x38], al
inc esi
dec ebp
dec esp
push eax
add esp, 4
pop eax
lea eax, [ebp - 0x1790]
mov dword [ebp - 0xccc], eax
mov ecx, dword [ebp - 0x518]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0xcc8], edx
xor eax, eax
mov word [ebp - 0x220], ax
xor ecx, ecx
mov word [ebp - 0x3c], cx
push edi
push ebx
add esp, 4
sub edi, 0xb9b2
call 0x410ee3
add byte [edi], dh
dec ebp
dec edi
dec edi
cmp al, 0x43
aas
cmp al, 0x3c
add esp, 4
call 0x410ef6
add byte [ebp + 0x4e], cl
aas
dec ebx
cmp dword [ebx + esi + 0x4d], ecx
add esp, 4
pop edi
mov edx, dword [ebp - 0xcc8]
mov ax, word [edx]
mov word [ebp - 0x1042], ax
mov ecx, dword [ebp - 0xcc8]
add ecx, 2
mov dword [ebp - 0xcc8], ecx
mov dx, word [ebp - 0x1042]
mov word [ebp - 0x220], dx
mov eax, dword [ebp - 0xccc]
mov cx, word [eax]
mov word [ebp - 0x1044], cx
mov edx, dword [ebp - 0xccc]
add edx, 2
mov dword [ebp - 0xccc], edx
mov ax, word [ebp - 0x1044]
mov word [ebp - 0x3c], ax
push ebx
call 0x410f61
add byte [eax + 0x33], al
dec ebp
dec esi
dec edi
cmp bh, byte [ebx]
inc edx
cmp eax, dword [ebx - 0x347efb3c]
inc esi
add dword [ecx], eax
add byte [ecx + 0x185efcb], al
add byte [ebx + 0x51], bl
push edi
add esp, 4
add ecx, 0x10eb6
add ecx, 0x7b9f
pop ecx
movzx ecx, word [ebp - 0x3c]
test ecx, ecx
jne 0x410fa0
movzx edx, word [ebp - 0x220]
movzx eax, word [ebp - 0x3c]
sub edx, eax
mov dword [ebp - 0x1668], edx
jmp 0x410ffa
movzx ecx, word [ebp - 0x220]
movzx edx, word [ebp - 0x3c]
cmp ecx, edx
je 0x410ec8
movzx eax, word [ebp - 0x220]
xor eax, 0x20
movzx ecx, word [ebp - 0x3c]
cmp eax, ecx
je 0x410ec8
movzx edx, word [ebp - 0x220]
movzx eax, word [ebp - 0x3c]
cmp edx, eax
jge 0x410fe4
mov dword [ebp - 0x1624], 0xffffffff
jmp 0x410fee
mov dword [ebp - 0x1624], 1
mov ecx, dword [ebp - 0x1624]
mov dword [ebp - 0x1668], ecx
cmp dword [ebp - 0x1668], 0
jne 0x411043
push ebx
xor ebx, 0x10093
pop ebx
push eax
call 0x41101c
add byte [ebx], bh
xor eax, 0x434e403b
xor esi, dword [edx]
inc ecx
cmp eax, 0xe804c483
pop es
add byte [eax], al
add byte [eax], al
aas
inc edx
dec eax
dec ebx
cmp dword [eax - 0x7d], edx
les eax, [ecx + eax*4]
enter 0x8d3, 0
add byte [eax - 0x75], bl
xchg ebp, eax
call 0x8a411036
xchg ebp, eax
invalid
push edx
or edx, 0x1103b
call 0x411057
add byte [edi + edi], bh
dec ebp
aaa
inc ebx
dec eax
aas
add esp, 4
xor edx, 0x15cb5
sub edx, 0xd71a
pop edx
push esi
or esi, 0x9f8c
sub esi, 0x56a1
pop esi
mov eax, dword [ebp - 0x518]
mov ecx, dword [eax]
mov dword [ebp - 0x518], ecx
mov edx, dword [ebp - 0x518]
cmp edx, dword [ebp - 0xcd0]
je 0x4110a1
mov eax, dword [ebp - 0x518]
cmp dword [eax + 0x30], 0
jne 0x410e6c
mov dword [ebp - 0x774], 0
push eax
and eax, 0xb6ce
or eax, 0x11c50
jmp 0x4110bf
pop eax
push ecx
sub ecx, 0xd01f
xor ecx, 0x446
call 0x4110d9
add byte [edx + 0x33], al
xor al, byte [ebx + edi + 0x46]
add esp, 4
pop ecx
cmp dword [ebp - 0x774], 0
jne 0x411127
push ecx
push eax
add esp, 4
add ecx, 0x104b3
pop ecx
push edi
push edi
add esp, 4
or edi, 0x167bb
sub edi, 0x97cb
xor edi, 0x159e0
add edi, 0xe661
pop edi
push edi
add edi, 0x122bb
pop edi
mov dword [ebp - 0xab4], 0
jmp 0x411c4f
push edi
push edx
add esp, 4
or edi, 0x11cef
and edi, 0x14e7b
xor edi, 0xe20c
xor edi, 0x18320
pop edi
push ebx
sub ebx, 0xf768
pop ebx
push edx
push edx
add esp, 4
sub edx, 0x149bc
pop edx
mov ecx, dword [ebp - 0x774]
mov edx, dword [ecx + 0x18]
mov dword [ebp - 0x3a4], edx
mov dword [ebp - 0x784], 0
mov eax, dword [ebp - 0x3a4]
mov dword [ebp - 0x166c], eax
cmp dword [ebp - 0x166c], 0
jne 0x411198
mov ecx, dword [ebp - 0x784]
mov dword [ebp - 0x3f8], ecx
jmp 0x411489
mov edx, dword [ebp - 0x166c]
mov eax, dword [ebp - 0x3a4]
add eax, dword [edx + 0x3c]
mov dword [ebp - 0x1670], eax
jne 0x4111c0
mov ecx, dword [ebp - 0x784]
mov dword [ebp - 0x3f8], ecx
jmp 0x411489
mov edx, 8
imul eax, edx, 0
mov ecx, dword [ebp - 0x1670]
mov edx, dword [ecx + eax + 0x78]
mov dword [ebp - 0x1678], edx
cmp dword [ebp - 0x1678], 0
jne 0x4111f2
mov eax, dword [ebp - 0x784]
mov dword [ebp - 0x3f8], eax
jmp 0x411489
mov ecx, dword [ebp - 0x3a4]
add ecx, dword [ebp - 0x1678]
mov dword [ebp - 0x778], ecx
jne 0x411217
mov edx, dword [ebp - 0x784]
mov dword [ebp - 0x3f8], edx
jmp 0x411489
mov eax, dword [ebp - 0x778]
mov ecx, dword [ebp - 0x3a4]
add ecx, dword [eax + 0x20]
mov dword [ebp - 0x19a4], ecx
mov edx, dword [ebp - 0x778]
mov eax, dword [ebp - 0x3a4]
add eax, dword [edx + 0x24]
mov dword [ebp - 0x19a8], eax
mov ecx, dword [ebp - 0x778]
mov edx, dword [ebp - 0x3a4]
add edx, dword [ecx + 0x1c]
mov dword [ebp - 0x19ac], edx
mov dword [ebp - 0x77c], 0
jmp 0x411271
mov eax, dword [ebp - 0x77c]
add eax, 1
mov dword [ebp - 0x77c], eax
mov ecx, dword [ebp - 0x778]
mov edx, dword [ebp - 0x77c]
cmp edx, dword [ecx + 0x18]
jae 0x41147d
mov eax, dword [ebp - 0x77c]
mov ecx, dword [ebp - 0x19a4]
mov edx, dword [ebp - 0x3a4]
add edx, dword [ecx + eax*4]
mov dword [ebp - 0x780], edx
mov eax, dword [ebp - 0x77c]
mov ecx, dword [ebp - 0x19a8]
movzx edx, word [ecx + eax*2]
mov eax, dword [ebp - 0x19ac]
mov ecx, dword [ebp - 0x3a4]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x19b0], ecx
mov dword [ebp - 0x1a0], 0
jmp 0x4112e1
mov edx, dword [ebp - 0x1a0]
add edx, 1
mov dword [ebp - 0x1a0], edx
mov eax, dword [ebp - 0x780]
add eax, dword [ebp - 0x1a0]
movsx ecx, byte [eax]
test ecx, ecx
je 0x411393
mov edx, dword [ebp - 0x1a0]
movsx eax, byte [ebp + edx - 0x8a4]
test eax, eax
je 0x411393
push edi
push ecx
add esp, 4
sub edi, 0x7908
add edi, 0x11ba6
or edi, 0xa645
and edi, 0x125b8
pop edi
push edx
push ebx
add esp, 4
jmp 0x411339
xor edx, 0xfebd
pop edx
mov ecx, dword [ebp - 0x780]
add ecx, dword [ebp - 0x1a0]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x1a0]
movsx ecx, byte [ebp + eax - 0x8a4]
cmp edx, ecx
je 0x411385
mov edx, dword [ebp - 0x780]
add edx, dword [ebp - 0x1a0]
movsx eax, byte [edx]
xor eax, 0x20
mov ecx, dword [ebp - 0x1a0]
movsx edx, byte [ebp + ecx - 0x8a4]
cmp eax, edx
jne 0x41138c
jmp 0x4112d2
jmp 0x411393
push esi
push ebx
add esp, 4
jmp 0x4113a0
pop esi
push edi
sub edi, 0xf4f5
pop edi
push edx
jmp 0x4113b0
pop edx
push edx
xor edx, 0xcbb
xor edx, 0x108a4
or edx, 0x4ff1
pop edx
mov eax, dword [ebp - 0x780]
add eax, dword [ebp - 0x1a0]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x1a0]
movsx eax, byte [ebp + edx - 0x8a4]
cmp ecx, eax
jne 0x4113f2
mov dword [ebp - 0xcd4], 0
jmp 0x411461
push edi
push edi
add esp, 4
and edi, 0x17875
jmp 0x411402
pop edi
push ecx
call 0x411412
add byte [esi + esi], dh
xor ecx, dword [eax + 0x32]
cmp dword [0x4c4834e], esi
or ecx, 0xcc7a
pop ecx
push edx
and edx, 0x2647
pop edx
mov ecx, dword [ebp - 0x780]
add ecx, dword [ebp - 0x1a0]
movsx edx, byte [ecx]
or edx, 0x20
mov eax, dword [ebp - 0x1a0]
movsx ecx, byte [ebp + eax - 0x8a4]
or ecx, 0x20
cmp edx, ecx
jge 0x411457
mov dword [ebp - 0xcd4], 0xffffffff
jmp 0x411461
mov dword [ebp - 0xcd4], 1
cmp dword [ebp - 0xcd4], 0
jne 0x411478
mov edx, dword [ebp - 0x19b0]
mov dword [ebp - 0x3f8], edx
jmp 0x411489
jmp 0x411262
mov eax, dword [ebp - 0x784]
mov dword [ebp - 0x3f8], eax
cmp dword [ebp - 0x3f8], 0
je 0x411564
push edi
push ebx
add esp, 4
add edi, 0x3258
add edi, 0x8b64
pop edi
push edx
push edx
add esp, 4
or edx, 0x11b38
or edx, 0xcf16
pop edx
push edx
or edx, 0xe76f
xor edx, 0x1235b
pop edx
mov ecx, dword [ebp - 0x3f8]
mov dword [ebp - 0x19b4], ecx
push esi
jmp 0x4114dc
call 0x4114ea
add byte [ebp + 0x42], cl
dec edi
cmp dword [ebx + 0x3a], eax
inc edi
cmp al, 0x83
les eax, [eax + ebp*8]
or al, byte [eax]
add byte [eax], al
add byte [esi], dh
inc esp
cmp eax, dword [esi + 0x38]
cmp cl, byte [esi + 0x4f]
inc edx
add esp, 4
or esi, 0x2484
pop esi
mov edx, dword [ebp - 0x19b4]
mov dword [ebp - 0x19b8], edx
invalid
dec dword [ebp - 0x17377b]
call dword [eax - 1]
xchg ebp, eax
dec eax
out 0xff, al
invalid
test eax, eax
jne 0x411564
push edi
push edi
add esp, 4
xor edi, 0x60ce
xor edi, 0x17eaf
pop edi
push esi
add esi, 0x1429a
pop esi
push esi
push ebx
add esp, 4
sub esi, 0x12d36
add esi, 0x4b57
add esi, 0xf732
pop esi
mov dword [ebp - 0xab4], 0
jmp 0x411c4f
push ebx
push edx
add esp, 4
or ebx, 0x4d92
pop ebx
push eax
jmp 0x411c59
add eax, 0x111c4
or eax, 0x8a7e
pop eax
push eax
push esi
add esp, 4
jmp 0x411c72
jmp 0x411c77
jmp 0x411c80
pop eax
mov edx, dword [ebp - 0xab4]
mov dword [ebp - 0x19d4], edx
lea eax, [ebp - 0xce8]
push eax
push 0x40
mov ecx, dword [ebp - 0x1694]
push ecx
mov edx, dword [ebp - 0x3e8]
push edx
call dword [ebp - 0x19d4]
test eax, eax
jne 0x411cf4
push eax
push ecx
add esp, 4
or eax, 0xfbd4
pop eax
push ebx
jmp 0x411cc2
jmp 0x411cc7
sub ebx, 0x13cd8
jmp 0x411cd3
pop ebx
push eax
push ebx
add esp, 4
or eax, 0x3a7a
pop eax
mov eax, dword [ebp - 0x79c]
mov dword [ebp - 0x19d8], eax
push 0
call dword [ebp - 0x19d8]
mov ecx, dword [ebp - 0x19dc]
mov dword [ebp - 0x798], ecx
jmp 0x411d11
mov edx, dword [ebp - 0x798]
add edx, 1
mov dword [ebp - 0x798], edx
mov eax, dword [ebp - 0x798]
cmp eax, dword [ebp - 0xab8]
jae 0x411d6d
push edi
call 0x411d2d
add byte [eax + 0x47], cl
dec esi
dec ebx
cmp byte [esi], dh
dec ebx
add esp, 4
or edi, 0x11808
pop edi
push eax
or eax, 0xb4d9
xor eax, 0x6d56
and eax, 0x177f9
xor eax, 0x11b3e
pop eax
movzx ecx, byte [ebp - 0x3ae]
mov edx, dword [ebp - 0x798]
movsx eax, byte [edx]
sub eax, ecx
mov ecx, dword [ebp - 0x798]
mov byte [ecx], al
jmp 0x411d02
invalid
xchg ebp, eax
dec esp