Function at 0x40bf5a
Capabilities:
Resolve function by parsing pe exports

Disassembly:
push eax
push edi
add esp, 4
xor eax, 0x146d4
xor eax, 0xa5a4
xor eax, 0x15307
pop eax
push edi
push ebx
add esp, 4
or edi, 0x127f6
jmp 0x406630
sub edi, 0x1179d
pop edi
mov edx, dword [ebp - 0x30]
add edx, 0x138
imul eax, dword [ebp - 0x2c], 0x138
add eax, 0x55f3663b
imul ecx, dword [ebp - 0x2c], 0x138
sub eax, ecx
xor edx, eax
imul edx, dword [ebp - 0x2c]
mov dword [ebp - 0x1d98], edx
push edx
push edi
add esp, 4
or edx, 0x116d3
pop edx
push eax
and eax, 0x1f05
add eax, 0x1b1
pop eax
push ebx
push edx
add esp, 4
or ebx, 0x2cee
sub ebx, 0x4b4d
xor ebx, 0xe0dd
pop ebx
mov edx, dword [ebp - 0x1d98]
add edx, 1
mov dword [ebp - 0x15a4], edx
push edx
push eax
add esp, 4
sub edx, 0x125cc
pop edx
push edx
xor edx, 0x15bdf
and edx, 0x13678
or edx, 0x8af6
pop edx
push esi
push edx
add esp, 4
sub esi, 0x46ae
and esi, 0x165b
pop esi
push edi
call 0x4066e3
add byte [ebp + 0x41], cl
xor edx, dword [eax + 0x38]
xor edi, dword [ebx + ecx*2]
add esp, 4
sub edi, 0x133b0
pop edi
push esi
push ecx
add esp, 4
call 0x406702
add byte [edx], bh
xor al, byte [edi + 0x3a]
dec ecx
inc ecx
cmp eax, 0x83484340
les eax, [esi + ebx*2]
imul eax, dword [ebp - 0x2c], 0x138
add eax, 0x55f3663b
imul ecx, dword [ebp - 0x2c], 0x138
sub eax, ecx
xor eax, dword [ebp - 0x15a4]
imul eax, dword [ebp - 0x2c]
imul edx, dword [ebp - 0x2c], 0x138
sub eax, edx
mov dword [ebp - 0x30], eax
mov eax, dword [ebp - 0x15a4]
imul eax, dword [ebp - 0x2c]
mov dword [ebp - 0x1e5c], eax
mov dword [ebp - 0x1630], 1
push edx
push ebx
add esp, 4
or edx, 0x11f6f
or edx, 0xbf4b
xor edx, 0xd74d
and edx, 0x14723
pop edx
push esi
add esi, 0x2ba6
xor esi, 0x79b6
add esi, 0xe01d
pop esi
imul ecx, dword [ebp - 0x1630], 0x138
add ecx, 0x55f3663b
imul edx, dword [ebp - 0x1630], 0x138
sub ecx, edx
xor ecx, dword [ebp - 0x1e5c]
imul ecx, dword [ebp - 0x1630]
imul eax, dword [ebp - 0x1630], 0x138
sub ecx, eax
mov dword [ebp - 0x1634], ecx
mov ecx, dword [ebp - 0x1068]
mov edx, dword [ebp - 0x1064]
mov dword [ebp - 0x163c], ecx
mov dword [ebp - 0x1638], edx
push esi
sub esi, 0x16774
add esi, 0xa4a3
xor esi, 0xe8b6
add esi, 0x14b52
pop esi
push esi
push edx
add esp, 4
and esi, 0x16ed7
sub esi, 0x129ab
and esi, 0x1415e
pop esi
push edx
push edx
add esp, 4
sub edx, 0xe988
jmp 0x406813
add edx, 0x13db4
add edx, 0x122ad
pop edx
push ecx
and ecx, 0x6e7c
and ecx, 0xf311
add ecx, 0xdff7
pop ecx
mov eax, dword [ebp - 0x30]
add eax, 0x138
imul ecx, dword [ebp - 0x2c], 0x138
add ecx, 0x55f3663b
imul edx, dword [ebp - 0x2c], 0x138
sub ecx, edx
xor eax, ecx
imul eax, dword [ebp - 0x2c]
mov dword [ebp - 0x1e64], eax
push edi
push eax
add esp, 4
and edi, 0xcd25
pop edi
push edx
jmp 0x406872
or edx, 0x9aa7
jmp 0x406881
pop edx
push eax
or eax, 0xd1c8
and eax, 0x113dc
pop eax
mov eax, dword [ebp - 0x163c]
add eax, 0x138
imul ecx, dword [ebp - 0x1638], 0x138
add ecx, 0x55f3663b
imul edx, dword [ebp - 0x1638], 0x138
sub ecx, edx
xor eax, ecx
imul eax, dword [ebp - 0x1638]
mov dword [ebp - 0x1e60], eax
mov eax, dword [ebp - 0x1e60]
mov dword [ebp - 0x1e68], eax
mov ecx, dword [ebp - 0x1e64]
cmp ecx, dword [ebp - 0x1e68]
jae 0x4068ec
mov dword [ebp - 0x15ac], 1
jmp 0x4068f6
mov dword [ebp - 0x15ac], 0
mov dl, byte [ebp - 0x15ac]
mov byte [ebp - 0x3ad], dl
movzx eax, byte [ebp - 0x3ad]
test eax, eax
je 0x409969
push ecx
jmp 0x406919
pop ecx
push ecx
push ebx
add esp, 4
jmp 0x406928
and ecx, 0x5140
or ecx, 0xe7ea
pop ecx
push ecx
or ecx, 0x14780
add ecx, 0x3e3a
pop ecx
push esi
call 0x406951
add byte [ecx + 0x36], cl
cmp byte [ebx], dh
inc esp
inc ebp
inc eax
add esp, 4
pop esi
push ecx
push edi
add esp, 4
jmp 0x406962
sub ecx, 0x858e
add ecx, 0x2412
add ecx, 0x8445
pop ecx
mov ecx, dword [ebp - 0x30]
add ecx, 0x138
imul edx, dword [ebp - 0x2c], 0x138
add edx, 0x55f3663b
imul eax, dword [ebp - 0x2c], 0x138
sub edx, eax
xor ecx, edx
imul ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x1e6c], ecx
mov ecx, dword [ebp - 0x1e6c]
mov dword [ebp - 0x1e70], ecx
cmp dword [ebp - 0x1e70], 0x63c1
jne 0x406af0
push ebx
jmp 0x4069c2
call 0x4069ce
add byte [edi + esi], dh
cmp eax, dword [edx + 0x36]
inc ebx
add esp, 4
jmp 0x4069d9
or ebx, 0xdc4d
pop ebx
push edi
and edi, 0x237a
xor edi, 0x1121b
pop edi
mov edx, dword [ebp - 0x14]
add edx, 0x138
imul eax, dword [ebp - 0x10], 0x138
add eax, 0x55f3663b
imul ecx, dword [ebp - 0x10], 0x138
sub eax, ecx
xor edx, eax
imul edx, dword [ebp - 0x10]
mov dword [ebp - 0x1e74], edx
mov edx, dword [ebp - 0x1e74]
mov dword [ebp - 0x1e78], edx
mov eax, dword [ebp - 0x1e78]
sub eax, 0x898
mov dword [ebp - 0x1e7c], eax
mov dword [ebp - 0x106c], 1
push eax
and eax, 0xa70
sub eax, 0xab59
call 0x406a59
add byte [esi + 0x32], cl
inc esi
inc ecx
dec eax
cmp dword [edx], esi
add esp, 4
sub eax, 0x13be4
pop eax
push ebx
and ebx, 0x14aa2
sub ebx, 0xcd7e
pop ebx
imul ecx, dword [ebp - 0x106c], 0x138
add ecx, 0x55f3663b
imul edx, dword [ebp - 0x106c], 0x138
sub ecx, edx
xor ecx, dword [ebp - 0x1e7c]
imul ecx, dword [ebp - 0x106c]
imul eax, dword [ebp - 0x106c], 0x138
sub ecx, eax
mov dword [ebp - 0x1070], ecx
mov ecx, dword [ebp - 0x1070]
mov edx, dword [ebp - 0x106c]
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x10], edx
push esi
push eax
add esp, 4
xor esi, 0x17ee
pop esi
push edx
sub edx, 0x121ee
pop edx
push edx
push ecx
add esp, 4
jmp 0x406adc
jmp 0x406ae3
and edx, 0xb36e
and edx, 0x8434
pop edx
push edi
xor edi, 0x167bf
add edi, 0x425a
call 0x406b0a
add byte [edi], dh
xor eax, dword [ebx + edi + 0x3a]
xor eax, 0x4c4833f
pop edi
push eax
sub eax, 0xa20d
pop eax
push ecx
push edx
add esp, 4
sub ecx, 0x5702
pop ecx
mov eax, dword [ebp - 0x14]
add eax, 0x138
imul ecx, dword [ebp - 0x10], 0x138
add ecx, 0x55f3663b
imul edx, dword [ebp - 0x10], 0x138
sub ecx, edx
xor eax, ecx
imul eax, dword [ebp - 0x10]
mov dword [ebp - 0x1e80], eax
mov eax, dword [ebp - 0x1e80]
mov dword [ebp - 0x1ef0], eax
lea ecx, [ebp - 0x9b0]
mov dword [ebp - 0x3e0], ecx
mov edx, dword [ebp - 0x3e0]
mov dword [edx + 4], 1
push ebx
push esi
add esp, 4
and ebx, 0xbe78
sub ebx, 0xe595
sub ebx, 0x1662f
pop ebx
push esi
or esi, 0x1600e
or esi, 0x1a68
add esi, 0x1461
or esi, 0x16f78
pop esi
mov eax, dword [ebp - 0x3e0]
imul ecx, dword [eax + 4], 0x138
add ecx, 0x55f3663b
mov edx, dword [ebp - 0x3e0]
imul eax, dword [edx + 4], 0x138
sub ecx, eax
xor ecx, 0x23
mov edx, dword [ebp - 0x3e0]
imul ecx, dword [edx + 4]
mov eax, dword [ebp - 0x3e0]
imul edx, dword [eax + 4], 0x138
sub ecx, edx
mov eax, dword [ebp - 0x3e0]
mov dword [eax], ecx
mov ecx, dword [ebp - 0x3e0]
mov dword [ebp - 0x2084], ecx
push eax
push edx
add esp, 4
jmp 0x406bff
pop eax
push edi
jmp 0x406c08
pop edi
push edi
push ebx
add esp, 4
xor edi, 0x10afd
pop edi
push edx
push edx
add esp, 4
jmp 0x406c20
sub edx, 0x7386
pop edx
mov dword [ebp - 0x15b4], 1
push ecx
push ecx
add esp, 4
call 0x406c43
add byte [esi], bh
cmp byte [esi], dh
xor eax, 0x83434346
les eax, [ecx + eax*4]
int1
jp 0x406cc9
add dword [eax], eax
and ecx, 0xd7a1
call 0x406c5f
add byte [eax + 0x3a], dl
inc ebx
cmp al, 0x3f
cmp al, 0x46
add esp, 4
pop ecx
mov dword [ebp - 0x2088], 0x38
mov dword [ebp - 0x208c], 0xe6
mov dword [ebp - 0x2090], 0x6e
mov dword [ebp - 0x2094], 0x6e
mov dword [ebp - 0x2098], 0x78
mov dword [ebp - 0x1640], 1
push esi
or esi, 0x12757
call 0x406cb3
add byte [eax + eax*2], bh
push eax
aas
dec edi
inc edi
add esp, 4
and esi, 0x1417a
pop esi
push ebx
or ebx, 0xd82c
xor ebx, 0x17543
add ebx, 0x12efc
pop ebx
imul edx, dword [ebp - 0x1640], 0x138
add edx, 0x55f3663b
imul eax, dword [ebp - 0x1640], 0x138
sub edx, eax
xor edx, 0xe6
imul edx, dword [ebp - 0x1640]
imul ecx, dword [ebp - 0x1640], 0x138
sub edx, ecx
mov dword [ebp - 0x1644], edx
push edx
or edx, 0x142c
or edx, 0x6cd0
pop edx
push edx
call 0x406d2a
add byte [esi], dh
aas
cmp eax, 0x4a45504a
xor eax, 0x4c4833f
jmp 0x406d34
add byte [ecx + 0x12efcc3], al
add byte [ebx + 0x69], bl
xchg ebp, eax
shr cl, 0xff
invalid
jmp 0x406d3d
pop edx
push eax
push edi
add esp, 4
add eax, 0x3598
pop eax
push esi
jmp 0x406d51
or esi, 0x116c3
and esi, 0x14b18
pop esi
push esi
push edi
add esp, 4
sub esi, 0x1519
or esi, 0xc02b
pop esi
mov edx, dword [ebp - 0x9b0]
add edx, 0x138
imul eax, dword [ebp - 0x9ac], 0x138
add eax, 0x55f3663b
imul ecx, dword [ebp - 0x9ac], 0x138
sub eax, ecx
xor edx, eax
imul edx, dword [ebp - 0x9ac]
mov dword [ebp - 0x1e84], edx
mov edx, dword [ebp - 0x1e84]
mov dword [ebp - 0x1e88], edx
mov eax, dword [ebp - 0x1e88]
sub eax, 0x6e
mov dword [ebp - 0x1e8c], eax
mov dword [ebp - 0xa78], 1
push ebx
xor ebx, 0x11883
jmp 0x406dd9
and ebx, 0x4073
pop ebx
push edi
xor edi, 0xd192
call 0x406df3
add byte [esi + 0x3c], al
inc eax
inc ebp
add esp, 4
and edi, 0x9f39
pop edi
imul ecx, dword [ebp - 0xa78], 0x138
add ecx, 0x55f3663b
imul edx, dword [ebp - 0xa78], 0x138
sub ecx, edx
xor ecx, dword [ebp - 0x1e8c]
imul ecx, dword [ebp - 0xa78]
imul eax, dword [ebp - 0xa78], 0x138
sub ecx, eax
mov dword [ebp - 0xa7c], ecx
push ebx
call 0x406e49
add byte [eax + 0x49], al
dec eax
dec edi
inc edi
dec edx
inc ebp
cmp byte [eax - 0x7d], dl
les eax, [ecx + eax*4]
jmp 0x406ec1
inc dword [ecx]
add byte [eax], al
add byte [ebx - 0x7f], dl
ret
pop esi
push edi
push ebx
add esp, 4
or edi, 0xac71
jmp 0x408d72
or edi, 0x63f2
and edi, 0xed74
pop edi
push esi
xor esi, 0x1632c
pop esi
mov edx, dword [ebp - 0x9c0]
add edx, 0x138
imul eax, dword [ebp - 0x9bc], 0x138
add eax, 0x55f3663b
imul ecx, dword [ebp - 0x9bc], 0x138
sub eax, ecx
xor edx, eax
imul edx, dword [ebp - 0x9bc]
mov dword [ebp - 0x1fa0], edx
mov edx, dword [ebp - 0x1fa0]
mov dword [ebp - 0x1fa4], edx
mov eax, dword [ebp - 0x1fa4]
sub eax, 0x6e
mov dword [ebp - 0x1fa8], eax
mov dword [ebp - 0xa98], 1
push esi
push ecx
add esp, 4
sub esi, 0xa1f
xor esi, 0x12b19
add esi, 0x1004
pop esi
push eax
push ebx
add esp, 4
xor eax, 0x7b50
jmp 0x408e0d
and eax, 0x13fdc
pop eax
imul ecx, dword [ebp - 0xa98], 0x138
add ecx, 0x55f3663b
imul edx, dword [ebp - 0xa98], 0x138
sub ecx, edx
xor ecx, dword [ebp - 0x1fa8]
imul ecx, dword [ebp - 0xa98]
imul eax, dword [ebp - 0xa98], 0x138
sub ecx, eax
mov dword [ebp - 0xa9c], ecx
push edx
call 0x408e5d
add byte [edx + 0x46], cl
inc eax
inc ebp
inc ebp
inc ecx
inc ebp
add esp, 4
call 0x408e6f
add byte [esi], dh
dec eax
xor eax, dword [ebp + 0x40]
xor al, 0x37
aaa
xor al, 0x83
les eax, [edx + ebx*2]
push esi
add esi, 0xea8d
xor esi, 0x1cdb
pop esi
mov ecx, dword [ebp - 0x9c0]
add ecx, 0x138
imul edx, dword [ebp - 0x9bc], 0x138
add edx, 0x55f3663b
imul eax, dword [ebp - 0x9bc], 0x138
sub edx, eax
xor ecx, edx
imul ecx, dword [ebp - 0x9bc]
mov dword [ebp - 0x1fac], ecx
mov ecx, dword [ebp - 0x1fac]
mov dword [ebp - 0x1fb0], ecx
mov edx, dword [ebp - 0x1fb0]
add edx, 0x38
mov dword [ebp - 0x1fb4], edx
mov dword [ebp - 0xafc], 1
push ecx
push esi
add esp, 4
xor ecx, 0x8489
or ecx, 0x1459e
add ecx, 0x6e6b
pop ecx
push ecx
add ecx, 0xa93a
xor ecx, 0x11124
pop ecx
push ecx
push edi
add esp, 4
or ecx, 0x1626d
pop ecx
imul eax, dword [ebp - 0xafc], 0x138
add eax, 0x55f3663b
imul ecx, dword [ebp - 0xafc], 0x138
sub eax, ecx
xor eax, dword [ebp - 0x1fb4]
imul eax, dword [ebp - 0xafc]
imul edx, dword [ebp - 0xafc], 0x138
sub eax, edx
mov dword [ebp - 0xb00], eax
push edx
push edi
add esp, 4
xor edx, 0x3055
xor edx, 0x82e9
pop edx
push esi
push eax
add esp, 4
and esi, 0xde8
or esi, 0x280a
and esi, 0x7465
pop esi
push edi
sub edi, 0x17436
pop edi
push ebx
push edi
add esp, 4
or ebx, 0xf56f
xor ebx, 0x1835f
add ebx, 0xcd51
and ebx, 0x10a20
pop ebx
push eax
or eax, 0x13046
xor eax, 0xa3a9
add eax, 0x9a5f
pop eax
mov dword [ebp - 0x2dc], 1
push edx
add edx, 0x5824
and edx, 0x2ba4
jmp 0x408fca
pop edx
push ebx
push esi
add esp, 4
or ebx, 0xaa7
sub ebx, 0x25df
add ebx, 0x11d7
jmp 0x408fe8
pop ebx
imul eax, dword [ebp - 0x2dc], 0x138
add eax, 0x55f3663b
imul ecx, dword [ebp - 0x2dc], 0x138
sub eax, ecx
xor eax, 2
imul eax, dword [ebp - 0x2dc]
imul edx, dword [ebp - 0x2dc], 0x138
sub eax, edx
mov dword [ebp - 0x2e0], eax
push esi
push esi
add esp, 4
sub esi, 0x15846
add esi, 0x15d07
pop esi
push eax
push ebx
add esp, 4
and eax, 0x700
pop eax
push edi
or edi, 0xb17d
pop edi
push ecx
push eax
add esp, 4
sub ecx, 0x12c1e
pop ecx
mov eax, dword [ebp - 0x9c0]
mov ecx, dword [ebp - 0x9bc]
mov dword [ebp - 0x264], eax
mov dword [ebp - 0x260], ecx
jmp 0x409240
push edx
push esi
add esp, 4
sub edx, 0x104c8
pop edx
push ebx
push eax
add esp, 4
sub ebx, 0x6550
pop ebx
push edi
add byte [ebx + 0x57], bl
sub edi, 0xbcca
or edi, 0xdac1
and edi, 0x15e6b
jmp 0x4090a0
pop edi
mov edx, dword [ebp - 0x264]
add edx, 0x138
imul eax, dword [ebp - 0x260], 0x138
add eax, 0x55f3663b
imul ecx, dword [ebp - 0x260], 0x138
sub eax, ecx
xor edx, eax
imul edx, dword [ebp - 0x260]
mov dword [ebp - 0x1fb8], edx
push eax
push ecx
add esp, 4
jmp 0x4090e1
call 0x4090f1
add byte [edi], dh
cmp dword [ecx + 0x39], ecx
xor al, 0x41
push eax
aaa
dec esp
cmp al, 0x83
les eax, [ecx + eax*4]
loopne 0x409085
insd dword es:[edi], dx
add dword [eax], eax
pop eax
push ecx
push eax
add esp, 4
jmp 0x409108
pop ecx
mov edx, dword [ebp - 0x1fb8]
sub edx, 1
mov dword [ebp - 0x15c0], edx
push ebx
add ebx, 0x14225
and ebx, 0x11e1
add ebx, 0x155bc
and ebx, 0x1865f
pop ebx
push edx
push ecx
add esp, 4
add edx, 0x1579d
pop edx
push eax
push edx
add esp, 4
xor eax, 0x1833a
pop eax
push edx
xor edx, 0x2da0
and edx, 0x6970
and edx, 0xc836
and edx, 0x12bf1
pop edx
push ecx
push edx
add esp, 4
and ecx, 0xd984
and ecx, 0xcdbb
xor ecx, 0x13f5c
pop ecx
imul eax, dword [ebp - 0x260], 0x138
add eax, 0x55f3663b
imul ecx, dword [ebp - 0x260], 0x138
sub eax, ecx
xor eax, dword [ebp - 0x15c0]
imul eax, dword [ebp - 0x260]
imul edx, dword [ebp - 0x260], 0x138
sub eax, edx
mov dword [ebp - 0x264], eax
mov eax, dword [ebp - 0x15c0]
imul eax, dword [ebp - 0x260]
mov dword [ebp - 0x1fbc], eax
mov dword [ebp - 0x1668], 1
push esi
sub esi, 0x5920
xor esi, 0x15887
add esi, 0x45a3
pop esi
push edi
push esi
add esp, 4
xor edi, 0x3460
and edi, 0x15e9a
add edi, 0xd10d
or edi, 0x354e
pop edi
imul ecx, dword [ebp - 0x1668], 0x138
add ecx, 0x55f3663b
imul edx, dword [ebp - 0x1668], 0x138
sub ecx, edx
xor ecx, dword [ebp - 0x1fbc]
imul ecx, dword [ebp - 0x1668]
imul eax, dword [ebp - 0x1668], 0x138
sub ecx, eax
mov dword [ebp - 0x166c], ecx
push ebx
push eax
add esp, 4
jmp 0x40924b
xor ebx, 0x60f7
add ebx, 0xcc75
xor ebx, 0xfb5b
pop ebx
push esi
or esi, 0x12bf0
add esi, 0xe524
sub esi, 0x14d03
pop esi
mov ecx, dword [ebp - 0x264]
add ecx, 0x138
imul edx, dword [ebp - 0x260], 0x138
add edx, 0x55f3663b
imul eax, dword [ebp - 0x260], 0x138
sub edx, eax
xor ecx, edx
imul ecx, dword [ebp - 0x260]
mov dword [ebp - 0x1fc0], ecx
mov ecx, dword [ebp - 0x1fc0]
mov dword [ebp - 0x1fc4], ecx
cmp dword [ebp - 0x1fc4], 0
jbe 0x4097b6
push eax
add eax, 0xf366
call 0x4092d5
add byte [edx + 0x39], al
cmp bh, byte [edx]
cmp eax, 0x4c48332
add eax, 0x18583
pop eax
push eax
push eax
add esp, 4
add eax, 0xa12a
jmp 0x4092f3
pop eax
mov edx, dword [ebp - 0x264]
add edx, 0x138
imul eax, dword [ebp - 0x260], 0x138
add eax, 0x55f3663b
imul ecx, dword [ebp - 0x260], 0x138
sub eax, ecx
xor edx, eax
imul edx, dword [ebp - 0x260]
mov dword [ebp - 0x1fc8], edx
mov edx, dword [ebp - 0x1fc8]
mov dword [ebp - 0x1fd4], edx
push esi
sub esi, 0x15885
pop esi
push eax
push ecx
add esp, 4
or eax, 0x5327
pop eax
push ebx
push edx
add esp, 4
xor ebx, 0x5630
sub ebx, 0xf412
xor ebx, 0x1357e
sub ebx, 0x17d16
pop ebx
mov eax, dword [ebp - 0xa9c]
add eax, 0x138
imul ecx, dword [ebp - 0xa98], 0x138
add ecx, 0x55f3663b
imul edx, dword [ebp - 0xa98], 0x138
sub ecx, edx
xor eax, ecx
imul eax, dword [ebp - 0xa98]
mov dword [ebp - 0x1fcc], eax
mov eax, dword [ebp - 0x1fcc]
mov dword [ebp - 0x1fd0], eax
mov ecx, dword [ebp - 0x15c4]
imul ecx, dword [ebp - 0x1fd0]
cmp dword [ebp - 0x1fd4], ecx
jne 0x409539
push edx
call 0x4093d3
add byte [eax], bh
push eax
push eax
dec ebx
inc edi
push eax
dec ebx
aaa
push eax
add esp, 4
xor edx, 0x6e18
call 0x4093eb
add byte [ebx + edi], bh
xor bh, byte [ebx + esi]
inc edi
xor dh, byte [0x4c48344]
sub edx, 0x285
pop edx
push ebx
add ebx, 0x2ee5
or ebx, 0x133c6
and ebx, 0x12c8c
pop ebx
push esi
sub esi, 0x111a0
pop esi
push eax
and eax, 0x18b9
pop eax
push ecx
or ecx, 0xcced
add ecx, 0xe948
pop ecx
mov edx, dword [ebp - 0x2e0]
add edx, 0x138
imul eax, dword [ebp - 0x2dc], 0x138
add eax, 0x55f3663b
imul ecx, dword [ebp - 0x2dc], 0x138
sub eax, ecx
xor edx, eax
imul edx, dword [ebp - 0x2dc]
mov dword [ebp - 0x1fd8], edx
mov edx, dword [ebp - 0x1fd8]
mov dword [ebp - 0x1fdc], edx
mov eax, dword [ebp - 0x1fdc]
sub eax, 1
mov dword [ebp - 0x1fe0], eax
mov dword [ebp - 0x10b4], 1
push edi
call 0x409492
add byte [esi], bh
xor eax, 0x4a413f43
dec esi
dec edi
add esp, 4
pop edi
push esi
push edi
add esp, 4
jmp 0x4094a1
and esi, 0x12032
xor esi, 0xcf5a
add esi, 0x4347
pop esi
imul ecx, dword [ebp - 0x10b4], 0x138
add ecx, 0x55f3663b
imul edx, dword [ebp - 0x10b4], 0x138
sub ecx, edx
xor ecx, dword [ebp - 0x1fe0]
imul ecx, dword [ebp - 0x10b4]
imul eax, dword [ebp - 0x10b4], 0x138
sub ecx, eax
mov dword [ebp - 0x10b8], ecx
mov ecx, dword [ebp - 0x10b8]
mov edx, dword [ebp - 0x10b4]
mov dword [ebp - 0x2e0], ecx
mov dword [ebp - 0x2dc], edx
push edi
push edi
add esp, 4
xor edi, 0xa3e
sub edi, 0x170df
xor edi, 0x3b99
pop edi
push edi
sub edi, 0x14f73
or edi, 0xf51d
or edi, 0x14597
sub edi, 0x17e0c
pop edi
push edx
push eax
add esp, 4
and edx, 0x10939
call 0x409551
add byte [0x3632464d], bh
push eax
dec esi
add esp, 4
jmp 0x40955c
and edx, 0x10c6
pop edx
push edi
xor edi, 0x4a93
pop edi
mov eax, dword [ebp - 0x264]
add eax, 0x138
imul ecx, dword [ebp - 0x260], 0x138
add ecx, 0x55f3663b
imul edx, dword [ebp - 0x260], 0x138
sub ecx, edx
xor eax, ecx
imul eax, dword [ebp - 0x260]
mov dword [ebp - 0x1fe4], eax
mov eax, dword [ebp - 0x1fe4]
mov dword [ebp - 0x1ff0], eax
push ecx
push esi
add esp, 4
or ecx, 0xaf95
or ecx, 0x14d2d
call 0x4095cd
add byte [ebx + 0x38], cl
inc esi
inc edi
xor al, 0x4f
dec edi
inc edx
inc edx
add esp, 4
pop ecx
push ebx
sub ebx, 0xe02d
or ebx, 0x934
pop ebx
mov ecx, dword [ebp - 0xb00]
add ecx, 0x138
imul edx, dword [ebp - 0xafc], 0x138
add edx, 0x55f3663b
imul eax, dword [ebp - 0xafc], 0x138
sub edx, eax
xor ecx, edx
imul ecx, dword [ebp - 0xafc]
mov dword [ebp - 0x1fe8], ecx
mov ecx, dword [ebp - 0x1fe8]
mov dword [ebp - 0x1fec], ecx
mov edx, dword [ebp - 0x15c4]
imul edx, dword [ebp - 0x1fec]
cmp dword [ebp - 0x1ff0], edx
jne 0x4097b1
push ecx
push edi
add esp, 4
add ecx, 0xbd73
pop ecx
push edi
and edi, 0x90bd
and edi, 0xe606
call 0x409663
add byte [ebx + 0x4f], cl
dec ecx
dec edi
dec eax
aaa
cmp eax, 0xc4833e45
add al, 0x81
out dx, eax
adc byte [ecx], ch
add byte [eax], al
pop edi
push ecx
push eax
add esp, 4
xor ecx, 0xe94a
pop ecx
push edi
push eax
add esp, 4
and edi, 0x3274
pop edi
push ecx
call 0x409695
add byte [edi + 0x34], cl
xor al, 0x4e
dec edi
aaa
cmp eax, dword [ecx - 0x7d]
les eax, [ecx + eax*4]
int1
sti
push esp
add byte [eax], al
pop ecx
mov eax, dword [ebp - 0x2e0]
add eax, 0x138
imul ecx, dword [ebp - 0x2dc], 0x138
add ecx, 0x55f3663b
imul edx, dword [ebp - 0x2dc], 0x138
sub ecx, edx
xor eax, ecx
imul eax, dword [ebp - 0x2dc]
mov dword [ebp - 0x1ff4], eax
mov eax, dword [ebp - 0x1ff4]
mov dword [ebp - 0x1ff8], eax
mov ecx, dword [ebp - 0x1ff8]
sub ecx, 1
mov dword [ebp - 0x1ffc], ecx
mov dword [ebp - 0x10bc], 1
push ebx
jmp 0x409701
pop ebx
push edi
push edi
add esp, 4
or edi, 0x654e
and edi, 0x16940
pop edi
push edx
push ebx
add esp, 4
or edx, 0xb4f1
or edx, 0x12483
add edx, 0x6133
pop edx
imul edx, dword [ebp - 0x10bc], 0x138
add edx, 0x55f3663b
imul eax, dword [ebp - 0x10bc], 0x138
sub edx, eax
xor edx, dword [ebp - 0x1ffc]
imul edx, dword [ebp - 0x10bc]
imul ecx, dword [ebp - 0x10bc], 0x138
sub edx, ecx
mov dword [ebp - 0x10c0], edx
mov edx, dword [ebp - 0x10c0]
mov eax, dword [ebp - 0x10bc]
mov dword [ebp - 0x2e0], edx
mov dword [ebp - 0x2dc], eax
push ebx
add ebx, 0x23c
sub ebx, 0x155d7
pop ebx
push ebx
push edx
add esp, 4
and ebx, 0xa65b
call 0x4097a7
add byte [edx], bh
inc ebp
inc edx
xor al, 0x48
push eax
inc esi
inc edx
inc eax
add esp, 4
add ebx, 0xad9f
pop ebx
jmp 0x40906f
push esi
push esi
add esp, 4
sub esi, 0x2e23
pop esi
push ecx
push edx
add esp, 4
xor ecx, 0x24a2
pop ecx
push edx
add edx, 0xda54
pop edx
push edx
push eax
add esp, 4
or edx, 0x14e1b
and edx, 0x7f1b
pop edx
mov ecx, dword [ebp - 0x2e0]
mov edx, dword [ebp - 0x2dc]
mov dword [ebp - 0x2040], ecx
mov dword [ebp - 0x203c], edx
lea eax, [ebp - 0x2040]
mov dword [ebp - 0x2000], eax
mov ecx, dword [ebp - 0x2000]
mov dword [ebp - 0xad4], ecx
push ebx
push edi
add esp, 4
and ebx, 0x182dc
pop ebx
push eax
push edx
add esp, 4
or eax, 0x814b
pop eax
push esi
push ebx
add esp, 4
xor esi, 0x4742
and esi, 0x167bf
pop esi
push edi
add edi, 0x103ea
pop edi
mov edx, dword [ebp - 0xad4]
mov eax, dword [edx]
add eax, 0x138
mov ecx, dword [ebp - 0xad4]
imul edx, dword [ecx + 4], 0x138
add edx, 0x55f3663b
mov ecx, dword [ebp - 0xad4]
imul ecx, dword [ecx + 4], 0x138
sub edx, ecx
xor eax, edx
mov edx, dword [ebp - 0xad4]
imul eax, dword [edx + 4]
mov dword [ebp - 0x2004], eax
mov eax, dword [ebp - 0x2004]
mov dword [ebp - 0x200c], eax
mov ecx, dword [ebp - 0x2008]
add ecx, dword [ebp - 0x200c]
mov dword [ebp - 0x2010], ecx
mov dword [ebp - 0x10c4], 1
push esi
push eax
add esp, 4
and esi, 0xfb2c
xor esi, 0xaaf7
pop esi
push esi
push edx
add esp, 4
or esi, 0x10e93
and esi, 0x6a81
pop esi
push esi
xor esi, 0x149a4
and esi, 0x15bb6
pop esi
imul edx, dword [ebp - 0x10c4], 0x138
add edx, 0x55f3663b
imul eax, dword [ebp - 0x10c4], 0x138
sub edx, eax
xor edx, dword [ebp - 0x2010]
imul edx, dword [ebp - 0x10c4]
imul ecx, dword [ebp - 0x10c4], 0x138
sub edx, ecx
mov dword [ebp - 0x10c8], edx
mov edx, dword [ebp - 0x10c8]
mov eax, dword [ebp - 0x10c4]
mov dword [ebp - 0x14], edx
mov dword [ebp - 0x10], eax
push eax
push edi
add esp, 4
and eax, 0xfd8c
pop eax
push edx
push edx
add esp, 4
add edx, 0x4668
pop edx
push edx
sub edx, 0xe31e
xor edx, 0x15a12
add edx, 0xeebc
or edx, 0x5673
pop edx
jmp 0x406605
mov dword [ebp - 0x3f4], 0
call 0x409978
mov eax, 0x13379797
pop eax
mov dword [ebp - 0x3f4], eax
push ecx
push ebx
add esp, 4
jmp 0x40998f
pop ecx
push ebx
call 0x4099a0
add byte [ebx + 0x43], al
inc esp
inc esi
dec esp
cmp dword ds:[esi + 0x46], ecx
add esp, 4
add ebx, 0x12b14
or ebx, 0x12411
or ebx, 0x17038
pop ebx
mov ecx, dword [ebp - 0x20cc]
mov dword [ebp - 0x15c8], ecx
push esi
push edi
add esp, 4
call 0x4099d6
add byte [ebx + eax*2], bh
inc ebx
inc ecx
inc edi
inc ecx
inc ecx
cmp byte ds:[ebx + 0x505e04c4], al
push eax
add esp, 4
add eax, 0x139dd
jmp 0x4099eb
jmp 0x4099f3
pop eax
mov edx, dword [ebp - 0x14]
add edx, 0x138
imul eax, dword [ebp - 0x10], 0x138
add eax, 0x55f3663b
imul ecx, dword [ebp - 0x10], 0x138
sub eax, ecx
xor edx, eax
imul edx, dword [ebp - 0x10]
mov dword [ebp - 0x15c8], edx
mov edx, dword [ebp - 0x3f4]
mov dword [ebp - 0x2014], edx
mov eax, dword [ebp - 0x2014]
add eax, dword [ebp - 0x15c8]
mov dword [ebp - 0x3f4], eax
push edi
push edx
add esp, 4
and edi, 0x14f64
jmp 0x409a50
pop edi
push edx
jmp 0x409a59
sub edx, 0xc0a9
pop edx
push esi
sub esi, 0x14ff
xor esi, 0x328e
pop esi
mov byte [ebp - 0xbf0], 0x52
mov byte [ebp - 0xbef], 0xb9
mov byte [ebp - 0xbee], 0x10
mov byte [ebp - 0xbed], 0x10
mov byte [ebp - 0xbec], 0x10
mov byte [ebp - 0xbeb], 0x10
mov byte [ebp - 0xbea], 0x5a
push ebx
xor ebx, 0x6629
sub ebx, 0x161ee
pop ebx
push esi
push edi
add esp, 4
sub esi, 0x9462
add esi, 0x174b
sub esi, 0x8594
pop esi
push eax
push edx
add esp, 4
or eax, 0x12a8c
pop eax
mov byte [ebp - 0xbe8], 0x52
mov byte [ebp - 0xbe7], 0xb9
mov byte [ebp - 0xbe6], 0x20
mov byte [ebp - 0xbe5], 0x20
mov byte [ebp - 0xbe4], 0x20
mov byte [ebp - 0xbe3], 0x20
mov byte [ebp - 0xbe2], 0x5a
push edx
sub edx, 0x1449c
call 0x409b19
add byte [0x3b50363c], bh
cmp eax, dword [esi + 0x50]
inc ecx
inc ebx
add esp, 4
pop edx
push ebx
push ebx
add esp, 4
jmp 0x409b27
xor ebx, 0xf4ac
xor ebx, 0x178cc
pop ebx
mov dword [ebp - 0x20d0], 0xe
push eax
push esi
add esp, 4
jmp 0x409b4b
add eax, 0xe384
or eax, 0x8e52
pop eax
push edx
push ecx
add esp, 4
and edx, 0x6152
add edx, 0x2814
and edx, 0x3780
pop edx
mov ecx, 1
imul edx, ecx, 0
lea eax, [ebp + edx - 0xbf0]
mov dword [ebp - 0x15cc], eax
push esi
push eax
add esp, 4
or esi, 0x182de
jmp 0x409b95
call 0x409ba5
add byte [edi + edi], dh
cmp eax, 0x41363a32
dec edx
inc edx
cmp al, 0x83
les eax, [ecx + eax*4]
out dx, al
ficomp word [edx]
add dword [eax], eax
pop esi
push ebx
add ebx, 0x2e1b
pop ebx
mov dword [ebp - 0x20d4], 0xffffffff
push eax
and eax, 0x580f
call 0x409bd5
add byte [0x39505047], bh
push eax
xor eax, dword [ebx - 0x177efb3c]
push ebx
test byte [ecx], al
add byte [eax + 0x52], bl
add edx, 0xc964
pop edx
push ecx
push esi
add esp, 4
and ecx, 0xd1f8
pop ecx
mov ecx, dword [ebp - 0x3f4]
mov dword [ebp - 0x500], ecx
jmp 0x409c10
mov edx, dword [ebp - 0x500]
add edx, 1
mov dword [ebp - 0x500], edx
push edi
push edx
add esp, 4
add edi, 0x177c9
call 0x409c2a
add byte [ebp + 0x46], cl
dec edi
xor eax, 0x49453b4a
dec edi
add esp, 4
jmp 0x409c33
pop edi
push esi
push esi
add esp, 4
jmp 0x409c41
pop esi
mov eax, dword [ebp - 0x500]
sub eax, dword [ebp - 0x3f4]
cmp eax, 0xffffffff
jb 0x409c8a
push edi
jmp 0x409c5c
xor edi, 0x3795
or edi, 0x15731
pop edi
push eax
and eax, 0xa4bb
and eax, 0xe4a5
add eax, 0x258f
jmp 0x409c84
pop eax
jmp 0x409eb8
mov dword [ebp - 0xc84], 7
mov ecx, dword [ebp - 0x500]
mov dword [ebp - 0xad0], ecx
push ecx
push esi
add esp, 4
or ecx, 0x15a1a
jmp 0x409cb1
or ecx, 0x10fee
pop ecx
push edi
push ecx
add esp, 4
and edi, 0x1030c
jmp 0x409ccb
sub edi, 0x1118a
pop edi
mov edx, dword [ebp - 0x15cc]
mov dword [ebp - 0xacc], edx
mov dword [ebp - 0xc88], 0
mov eax, dword [ebp - 0x500]
cmp eax, dword [ebp - 0x15cc]
jne 0x409d39
push ebx
push esi
add esp, 4
jmp 0x409d02
pop ebx
push eax
xor eax, 0x11896
and eax, 0x16fc8
call 0x409d1e
add byte [ebp + 0x49], al
cmp dword [0x3d374232], esi
add esp, 4
add eax, 0x1dd2
pop eax
mov ecx, dword [ebp - 0xc88]
mov dword [ebp - 0x15d4], ecx
jmp 0x409e6a
cmp dword [ebp - 0xc84], 0
jle 0x409e5e
push eax
push edi
add esp, 4
call 0x409d57
add byte [ebp + 0x39], al
inc ebx
dec ebx
cmp eax, 0x8104c483
call fcn.0040dc93
jmp 0x409d67
pop eax
push edx
and edx, 0x6aef
jmp 0x409d77
pop edx
mov edx, dword [ebp - 0xad0]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0xacc]
movzx edx, byte [ecx]
cmp eax, edx
je 0x409dfa
push eax
sub eax, 0xe3b7
and eax, 0x1663b
pop eax
push ecx
jmp 0x409da5
sub ecx, 0x6c5
add ecx, 0xd838
and ecx, 0x8203
pop ecx
push esi
or esi, 0xf83f
pop esi
mov eax, dword [ebp - 0xad0]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0xacc]
movzx eax, byte [edx]
cmp ecx, eax
jle 0x409de2
mov dword [ebp - 0x15d0], 1
jmp 0x409dec
mov dword [ebp - 0x15d0], 0xffffffff
mov ecx, dword [ebp - 0x15d0]
mov dword [ebp - 0xc88], ecx
jmp 0x409e5e
push esi
jmp 0x409e03
jmp 0x409e0a
sub esi, 0xe34
pop esi
push edx
jmp 0x409e19
or edx, 0x2fc2
and edx, 0x4ec3
and edx, 0x4aa7
pop edx
mov edx, dword [ebp - 0xc84]
sub edx, 1
mov dword [ebp - 0xc84], edx
mov eax, dword [ebp - 0xad0]
add eax, 1
mov dword [ebp - 0xad0], eax
mov ecx, dword [ebp - 0xacc]
add ecx, 1
mov dword [ebp - 0xacc], ecx
jmp 0x409d39
mov edx, dword [ebp - 0xc88]
mov dword [ebp - 0x15d4], edx
cmp dword [ebp - 0x15d4], 0
jne 0x409eb3
push esi
or esi, 0x1553
pop esi
push esi
add esi, 0x1829e
jmp 0x409e8a
xor esi, 0xa653
pop esi
push esi
or esi, 0x3eb8
sub esi, 0x1049e
xor esi, 0x82ba
pop esi
mov eax, dword [ebp - 0x500]
mov dword [ebp - 0x3e4], eax
jmp 0x409ef4
jmp 0x409c01
push esi
jmp 0x409ebe
xor esi, 0x9a08
sub esi, 0x6b60
xor esi, 0x16c17
pop esi
push esi
sub esi, 0xf7c5
sub esi, 0x43e9
jmp 0x409ee3
xor esi, 0x8a8d
pop esi
mov dword [ebp - 0x3e4], 0
push eax
push ecx
add esp, 4
or eax, 0x99a8
sub eax, 0xac22
xor eax, 0x1b2d
sub eax, 0x1337c
pop eax
push esi
xor esi, 0x4a6f
and esi, 0xd203
xor esi, 0x45be
pop esi
push edx
push edi
add esp, 4
sub edx, 0x10b45
pop edx
push ebx
push edx
add esp, 4
jmp 0x409f3d
and ebx, 0x9c5f
xor ebx, 0x136c2
add ebx, 0x5bbd
pop ebx
push ecx
or ecx, 0x3a21
pop ecx
mov ecx, 1
imul edx, ecx, 0
lea eax, [ebp + edx - 0xbe8]
mov dword [ebp - 0x15d8], eax
push esi
push edi
add esp, 4
or esi, 0x40bd
call 0x409f85
add byte [eax + 0x49], dl
cmp eax, 0x3d4c4c3d
add esp, 4
pop esi
push edx
xor edx, 0x17e10
pop edx
push edx
sub edx, 0xe42e
sub edx, 0xf898
pop edx
mov dword [ebp - 0x20d8], 0xffffffff
push edx
push eax
add esp, 4
or edx, 0x506d
jmp 0x409fbc
or edx, 0x34ff
pop edx
push ecx
push esi
add esp, 4
sub ecx, 0xae78
sub ecx, 0x6b6c
or ecx, 0x17b5c
pop ecx
mov ecx, dword [ebp - 0x3f4]
mov dword [ebp - 0x504], ecx
jmp 0x409ff8
mov edx, dword [ebp - 0x504]
add edx, 1
mov dword [ebp - 0x504], edx
push esi
push eax
add esp, 4
or esi, 0x3e99
jmp 0x40a00a
jmp 0x40a011
add esi, 0x3bb2
pop esi
push ebx
push ecx
add esp, 4
sub ebx, 0x165d6
or ebx, 0xc91d
pop ebx
mov eax, dword [ebp - 0x504]
sub eax, dword [ebp - 0x3f4]
cmp eax, 0xffffffff
jb 0x40a072
push eax
push edi
add esp, 4
xor eax, 0xbd38
sub eax, 0x12e0a
or eax, 0x16d6f
xor eax, 0x58e8
pop eax
push ebx
xor ebx, 0xaff5
and ebx, 0xfea4
add ebx, 0x1443c
pop ebx
jmp 0x40a2a0
mov dword [ebp - 0xc8c], 7
mov ecx, dword [ebp - 0x504]
mov dword [ebp - 0xac8], ecx
push ecx
push edx
add esp, 4
or ecx, 0x4eee
add ecx, 0x14aff
and ecx, 0x15fa1
pop ecx
push esi
add esi, 0x27e7
add esi, 0xd468
add esi, 0xe834
add esi, 0x1039a
pop esi
mov edx, dword [ebp - 0x15d8]
mov dword [ebp - 0xa64], edx
mov dword [ebp - 0xc90], 0
mov eax, dword [ebp - 0x504]
cmp eax, dword [ebp - 0x15d8]
jne 0x40a121
push edi
xor edi, 0x481b
add edi, 0xaef4
and edi, 0x6e1b
call 0x40a100
add byte [edi + 0x32], al
inc ebx
cmp eax, 0x464b4e37
inc esi
add esp, 4
pop edi
push ecx
push eax
add esp, 4
jmp 0x40a10f
pop ecx
mov ecx, dword [ebp - 0xc90]
mov dword [ebp - 0x15a8], ecx
jmp 0x40a252
cmp dword [ebp - 0xc8c], 0
jle 0x40a246
push edi
push ebx
add esp, 4
and edi, 0xd04a
or edi, 0xa389
pop edi
push ecx
push ebx
add esp, 4
xor ecx, 0x11d52
pop ecx
push eax
sub eax, 0x12a14
jmp 0x40a159
add eax, 0xef01
pop eax
mov edx, dword [ebp - 0xac8]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0xa64]
movzx edx, byte [ecx]
cmp eax, edx
je 0x40a1e2
push esi
call 0x40a186
add byte [esi], dh
inc esp
inc ebp
inc esp
inc ebp
dec ebp
cmp byte [edi - 0x7d], cl
les eax, [ecx + eax*4]
out dx, al
and byte [0x575e0001], 0x56
add esp, 4
xor edi, 0x1524e
sub edi, 0x1018d
sub edi, 0x174e1
pop edi
mov eax, dword [ebp - 0xac8]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0xa64]
movzx eax, byte [edx]
cmp ecx, eax
jle 0x40a1ca
mov dword [ebp - 0x15dc], 1
jmp 0x40a1d4
mov dword [ebp - 0x15dc], 0xffffffff
mov ecx, dword [ebp - 0x15dc]
mov dword [ebp - 0xc90], ecx
jmp 0x40a246
push edx
push ecx
add esp, 4
add edx, 0x1044b
pop edx
push esi
push esi
add esp, 4
sub esi, 0x6670
pop esi
push esi
and esi, 0x4b9f
add esi, 0xe006
sub esi, 0x4e61
add esi, 0x4aa9
pop esi
mov edx, dword [ebp - 0xc8c]
sub edx, 1
mov dword [ebp - 0xc8c], edx
mov eax, dword [ebp - 0xac8]
add eax, 1
mov dword [ebp - 0xac8], eax
mov ecx, dword [ebp - 0xa64]
add ecx, 1
mov dword [ebp - 0xa64], ecx
jmp 0x40a121
mov edx, dword [ebp - 0xc90]
mov dword [ebp - 0x15a8], edx
cmp dword [ebp - 0x15a8], 0
jne 0x40a29b
push edi
call 0x40a26b
add byte [0x354c3433], bh
cmp byte [ebx + 0x3f], al
dec ecx
add esp, 4
add edi, 0x10db6
add edi, 0x4d62
call 0x40a289
add byte [edx], dh
dec eax
aaa
inc esi
cmp byte [edx + 0x3f], cl
dec esi
add esp, 4
pop edi
mov eax, dword [ebp - 0x504]
mov dword [ebp - 0xac4], eax
jmp 0x40a2dc
jmp 0x409fe9
push edi
push edx
add esp, 4
or edi, 0x121bf
xor edi, 0x18540
add edi, 0xfe42
pop edi
push ecx
push eax
add esp, 4
or ecx, 0xf254
pop ecx
push edi
xor edi, 0xb5f2
sub edi, 0xc07a
pop edi
mov dword [ebp - 0xac4], 0
push edi
or edi, 0x113ba
or edi, 0x1517a
sub edi, 0x2b87
and edi, 0xbc47
pop edi
push edx
push esi
add esp, 4
jmp 0x40a304
jmp 0x40a30d
pop edx
mov byte [ebp - 0x87c], 0x45
mov byte [ebp - 0x87b], 0x78
mov byte [ebp - 0x87a], 0x69
mov byte [ebp - 0x879], 0x74
mov byte [ebp - 0x878], 0x50
mov byte [ebp - 0x877], 0x72
mov byte [ebp - 0x876], 0x6f
mov byte [ebp - 0x875], 0x63
mov byte [ebp - 0x874], 0x65
mov byte [ebp - 0x873], 0x73
mov byte [ebp - 0x872], 0x73
mov byte [ebp - 0x871], 0
push edi
xor edi, 0x4193
add edi, 0x3aa0
call 0x40a37c
add byte [esi], bh
xor al, byte [edi + esi + 0x46]
cmp eax, 0x4c4834c
pop edi
push edi
or edi, 0x3d16
xor edi, 0x170f6
and edi, 0x11980
pop edi
mov ecx, 0x6b
mov word [ebp - 0x1740], cx
mov edx, 0x65
mov word [ebp - 0x173e], dx
mov eax, 0x72
mov word [ebp - 0x173c], ax
mov ecx, 0x6e
mov word [ebp - 0x173a], cx
mov edx, 0x65
mov word [ebp - 0x1738], dx
mov eax, 0x6c
mov word [ebp - 0x1736], ax
mov ecx, 0x33
mov word [ebp - 0x1734], cx
mov edx, 0x32
mov word [ebp - 0x1732], dx
mov eax, 0x2e
mov word [ebp - 0x1730], ax
mov ecx, 0x64
mov word [ebp - 0x172e], cx
mov edx, 0x6c
mov word [ebp - 0x172c], dx
mov eax, 0x6c
mov word [ebp - 0x172a], ax
xor ecx, ecx
mov word [ebp - 0x1728], cx
push edx
or edx, 0x13264
or edx, 0xd9c2
pop edx
push ebx
push ecx
add esp, 4
call 0x40a44f
add byte [ecx + 0x44], al
aaa
dec esi
xor al, byte [eax + edi + 0x48]
cmp eax, dword [ebx - 0x1c7efb3c]
and al, 0x40
add byte [eax], al
add ebx, 0x82c2
pop ebx
push ecx
push eax
add esp, 4
xor ecx, 0x13963
pop ecx
push ecx
push ebx
add esp, 4
sub ecx, 0x14600
or ecx, 0x1601a
add ecx, 0xf960
pop ecx
push ecx
sub ecx, 0xa9ce
xor ecx, 0xf1de
pop ecx
mov edx, dword fs:[0x18]
mov dword [ebp - 0x2034], edx
mov eax, dword [ebp - 0x2034]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0x198c], ecx
mov edx, dword [ebp - 0x198c]
mov dword [ebp - 0x15e0], edx
push eax
push ecx
add esp, 4
and eax, 0x1159a
sub eax, 0xd66c
add eax, 0xd46f
pop eax
push eax
push edi
add esp, 4
sub eax, 0xec64
add eax, 0x121ad
pop eax
push edi
xor edi, 0x7e06
pop edi
cmp dword [ebp - 0x15e0], 0
jne 0x40a503
mov dword [ebp - 0x2d4], 0
jmp 0x40a7bf
mov eax, dword [ebp - 0x15e0]
mov ecx, dword [eax + 0xc]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0xc9c], edx
push edi
push esi
add esp, 4
sub edi, 0x4b19
sub edi, 0xa07f
jmp 0x40a52c
pop edi
push eax
push edx
add esp, 4
sub eax, 0xf9de
jmp 0x40a540
or eax, 0x13704
pop eax
cmp dword [ebp - 0xc9c], 0
jne 0x40a55f
mov dword [ebp - 0x2d4], 0
jmp 0x40a7bf
mov eax, dword [ebp - 0xc9c]
mov dword [ebp - 0x508], eax
push edx
push edx
add esp, 4
xor edx, 0x11d8
xor edx, 0xb169
xor edx, 0x1273f
pop edx
push ecx
and ecx, 0x829d
add ecx, 0x65da
pop ecx
push eax
push esi
add esp, 4
or eax, 0x16bde
pop eax
lea ecx, [ebp - 0x1740]
mov dword [ebp - 0xc98], ecx
mov edx, dword [ebp - 0x508]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0xc94], eax
xor ecx, ecx
mov word [ebp - 0x210], cx
xor edx, edx
mov word [ebp - 0x10c], dx
push ecx
push ecx
add esp, 4
and ecx, 0x96d
add ecx, 0x10de3
or ecx, 0x96aa
pop ecx
push edi
xor edi, 0x77e0
pop edi
push edi
push edi
add esp, 4
or edi, 0xfd7f
add edi, 0x9954
pop edi
mov eax, dword [ebp - 0xc94]
mov cx, word [eax]
mov word [ebp - 0x1036], cx
mov edx, dword [ebp - 0xc94]
add edx, 2
mov dword [ebp - 0xc94], edx
mov ax, word [ebp - 0x1036]
mov word [ebp - 0x210], ax
mov ecx, dword [ebp - 0xc98]
mov dx, word [ecx]
mov word [ebp - 0x1038], dx
mov eax, dword [ebp - 0xc98]
add eax, 2
mov dword [ebp - 0xc98], eax
mov cx, word [ebp - 0x1038]
mov word [ebp - 0x10c], cx
push eax
xor eax, 0xa2b4
and eax, 0xfeab
pop eax
push edi
call 0x40a674
add byte [0x4e48503d], dh
inc edx
dec esi
cmp eax, 0x4c48350
call 0x40a684
add byte [ebx + 0x3c], al
dec ebp
dec esi
cmp dl, byte [eax - 0x7d]
les eax, [edi + ebx*2]
movzx edx, word [ebp - 0x10c]
test edx, edx
jne 0x40a6ab
movzx eax, word [ebp - 0x210]
movzx ecx, word [ebp - 0x10c]
sub eax, ecx
mov dword [ebp - 0x15e8], eax
jmp 0x40a70e
movzx edx, word [ebp - 0x210]
movzx eax, word [ebp - 0x10c]
cmp edx, eax
je 0x40a5ca
movzx ecx, word [ebp - 0x210]
xor ecx, 0x20
movzx edx, word [ebp - 0x10c]
cmp ecx, edx
je 0x40a5ca
movzx eax, word [ebp - 0x210]
movzx ecx, word [ebp - 0x10c]
cmp eax, ecx
jge 0x40a6f8
mov dword [ebp - 0x15e4], 0xffffffff
jmp 0x40a702
mov dword [ebp - 0x15e4], 1
mov edx, dword [ebp - 0x15e4]
mov dword [ebp - 0x15e8], edx
cmp dword [ebp - 0x15e8], 0
jne 0x40a757
push esi
push esi
add esp, 4
and esi, 0x12c3
pop esi
push edx
push eax
add esp, 4
xor edx, 0x127a8
xor edx, 0xbc23
sub edx, 0x6787
pop edx
push ecx
sub ecx, 0x1e5f
add ecx, 0x182d0
pop ecx
mov eax, dword [ebp - 0x508]
mov dword [ebp - 0x2d4], eax
jmp 0x40a7bf
push esi
call 0x40a768
add byte [esi + 0x3b], al
cmp byte [edx], bh
inc esi
inc edi
dec ebx
cmp al, 0x3c
inc edx
add esp, 4
call 0x40a779
add byte [ebx], dh
cmp dh, byte [edi]
push eax
push eax
xor al, 0x35
push eax
add esp, 4
add esi, 0x16776
sub esi, 0x16649
pop esi
mov ecx, dword [ebp - 0x508]
mov edx, dword [ecx]
mov dword [ebp - 0x508], edx
mov eax, dword [ebp - 0x508]
cmp eax, dword [ebp - 0xc9c]
je 0x40a7b5
mov ecx, dword [ebp - 0x508]
cmp dword [ecx + 0x30], 0
jne 0x40a56b
mov dword [ebp - 0x2d4], 0
push edx
push ecx
add esp, 4
jmp 0x40a7cd
pop edx
push ebx
or ebx, 0x2dc7
jmp 0x40a7db
call 0x40a7e7
add byte [edi + 0x3d], cl
xor ecx, dword [ebx + 0x49]
dec ecx
add esp, 4
and ebx, 0x16175
pop ebx
cmp dword [ebp - 0x2d4], 0
jne 0x40b10a
mov edx, 0x6b
mov word [ebp - 0x17ac], dx
mov eax, 0x65
mov word [ebp - 0x17aa], ax
mov ecx, 0x72
mov word [ebp - 0x17a8], cx
mov edx, 0x6e
mov word [ebp - 0x17a6], dx
mov eax, 0x65
mov word [ebp - 0x17a4], ax
mov ecx, 0x6c
mov word [ebp - 0x17a2], cx
mov edx, 0x33
mov word [ebp - 0x17a0], dx
mov eax, 0x32
mov word [ebp - 0x179e], ax
mov ecx, 0x2e
mov word [ebp - 0x179c], cx
mov edx, 0x64
mov word [ebp - 0x179a], dx
mov eax, 0x6c
mov word [ebp - 0x1798], ax
mov ecx, 0x6c
mov word [ebp - 0x1796], cx
xor edx, edx
mov word [ebp - 0x1794], dx
push ebx
push esi
add esp, 4
or ebx, 0xf166
jmp 0x40a8a8
xor ebx, 0x70e3
xor ebx, 0x7e5d
pop ebx
push ebx
jmp 0x40a8bc
xor ebx, 0x168e4
sub ebx, 0x5192
pop ebx
mov byte [ebp - 0x898], 0x4c
mov byte [ebp - 0x897], 0x6f
mov byte [ebp - 0x896], 0x61
mov byte [ebp - 0x895], 0x64
mov byte [ebp - 0x894], 0x4c
mov byte [ebp - 0x893], 0x69
mov byte [ebp - 0x892], 0x62
mov byte [ebp - 0x891], 0x72
mov byte [ebp - 0x890], 0x61
mov byte [ebp - 0x88f], 0x72
mov byte [ebp - 0x88e], 0x79
mov byte [ebp - 0x88d], 0x57
mov byte [ebp - 0x88c], 0
mov eax, dword fs:[0x18]
mov dword [ebp - 0x1990], eax
mov ecx, dword [ebp - 0x1990]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x1994], edx
mov eax, dword [ebp - 0x1994]
mov dword [ebp - 0x15ec], eax
push ebx
and ebx, 0xdafb
sub ebx, 0x2b93
pop ebx
push ebx
call 0x40a967
add byte [edx + ecx*2 + 0x33], al
dec ebp
xor ecx, dword [ebp + ecx*2 - 0x7d]
les eax, [ecx + eax*4]
jmp 0x40a953
idiv edi
dec dword [esi + eax*8 - 0x7b]
insd dword es:[edi], dx
idiv edi
jmp [ecx - 0x3a]
jmp 0x40a8e8
push eax
or eax, 0x4309
xor eax, 0xb767
add eax, 0x14a56
pop eax
push ebx
call 0x40b12c
add byte [ecx + 0x46], cl
cmp dword [ebp + 0x4f], eax
cmp al, 0x4a
add esp, 4
and ebx, 0x183b0
sub ebx, 0x69da
pop ebx
mov eax, dword fs:[0x18]
mov dword [ebp - 0x19b0], eax
mov ecx, dword [ebp - 0x19b0]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x19b4], edx
mov eax, dword [ebp - 0x19b4]
mov dword [ebp - 0x1604], eax
push edx
push ebx
add esp, 4
sub edx, 0x16382
xor edx, 0x7a10
pop edx
push ebx
push eax
add esp, 4
and ebx, 0xda04
pop ebx
push esi
sub esi, 0x8610
sub esi, 0x10955
sub esi, 0xa2d8
pop esi
cmp dword [ebp - 0x1604], 0
jne 0x40b1ad
mov dword [ebp - 0x2d4], 0
jmp 0x40b454
mov ecx, dword [ebp - 0x1604]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xcb8], eax
push edi
push ecx
add esp, 4
sub edi, 0x69c6
and edi, 0x123b8
jmp 0x40b1d5
pop edi
push ecx
call 0x40b1e7
add byte [ebp + 0x3e], al
xor cl, byte [esi + ecx*2 + 0x40]
inc eax
dec ebp
cmp eax, 0x4c4834c
add ecx, 0x5f5e
pop ecx
cmp dword [ebp - 0xcb8], 0
jne 0x40b209
mov dword [ebp - 0x2d4], 0
jmp 0x40b454
mov ecx, dword [ebp - 0xcb8]
mov dword [ebp - 0x510], ecx
push ecx
or ecx, 0x117f6
pop ecx
push edx
push edx
add esp, 4
xor edx, 0xa6a0
call 0x40b235
add byte [ecx], bh
cmp bh, byte [esi]
xor eax, 0x833d4c34
les eax, [edx + ebx*2]
push ecx
sub ecx, 0x34d7
or ecx, 0x14f8
pop ecx
lea edx, [ebp - 0x1740]
mov dword [ebp - 0xcb4], edx
mov eax, dword [ebp - 0x510]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xcb0], ecx
xor edx, edx
mov word [ebp - 0x218], dx
xor eax, eax
mov word [ebp - 0x34], ax
push ecx
call 0x40b280
add byte [eax*2 + 0x4f4c4b4f], dh
inc ebx
dec eax
add esp, 4
and ecx, 0x11057
pop ecx
push eax
xor eax, 0x1024
call 0x40b29f
add byte [eax + 0x39], dl
cmp bh, byte [0x3c443b38]
add esp, 4
pop eax
mov ecx, dword [ebp - 0xcb0]
mov dx, word [ecx]
mov word [ebp - 0x103e], dx
mov eax, dword [ebp - 0xcb0]
add eax, 2
mov dword [ebp - 0xcb0], eax
mov cx, word [ebp - 0x103e]
mov word [ebp - 0x218], cx
mov edx, dword [ebp - 0xcb4]
mov ax, word [edx]
mov word [ebp - 0x1040], ax
mov ecx, dword [ebp - 0xcb4]
add ecx, 2
mov dword [ebp - 0xcb4], ecx
mov dx, word [ebp - 0x1040]
mov word [ebp - 0x34], dx
push edi
push ebx
add esp, 4
xor edi, 0xca44
or edi, 0xa660
jmp 0x40b313
pop edi
push eax
push ecx
add esp, 4
xor eax, 0x14365
or eax, 0x163d7
and eax, 0x105c
pop eax
movzx eax, word [ebp - 0x34]
test eax, eax
jne 0x40b349
movzx ecx, word [ebp - 0x218]
movzx edx, word [ebp - 0x34]
sub ecx, edx
mov dword [ebp - 0x160c], ecx
jmp 0x40b3a3
movzx eax, word [ebp - 0x218]
movzx ecx, word [ebp - 0x34]
cmp eax, ecx
je 0x40b271
movzx edx, word [ebp - 0x218]
xor edx, 0x20
movzx eax, word [ebp - 0x34]
cmp edx, eax
je 0x40b271
movzx ecx, word [ebp - 0x218]
movzx edx, word [ebp - 0x34]
cmp ecx, edx
jge 0x40b38d
mov dword [ebp - 0x1608], 0xffffffff
jmp 0x40b397
mov dword [ebp - 0x1608], 1
mov eax, dword [ebp - 0x1608]
mov dword [ebp - 0x160c], eax
cmp dword [ebp - 0x160c], 0
jne 0x40b3ec
push edi
push ecx
add esp, 4
or edi, 0x2512
sub edi, 0x88a2
pop edi
push eax
add eax, 0x16141
jmp 0x40b3ce
pop eax
push edx
jmp 0x40b3d7
or edx, 0x8809
pop edx
mov ecx, dword [ebp - 0x510]
mov dword [ebp - 0x2d4], ecx
jmp 0x40b454
push ecx
push eax
add esp, 4
and ecx, 0x122b0
or ecx, 0x310a
pop ecx
push ecx
push ebx
add esp, 4
add ecx, 0x177ec
add ecx, 0x8ddc
jmp 0x40b416
jmp 0x40b41d
pop ecx
mov edx, dword [ebp - 0x510]
mov eax, dword [edx]
mov dword [ebp - 0x510], eax
mov ecx, dword [ebp - 0x510]
cmp ecx, dword [ebp - 0xcb8]
je 0x40b44a
mov edx, dword [ebp - 0x510]
cmp dword [edx + 0x30], 0
jne 0x40b215
mov dword [ebp - 0x2d4], 0
push ecx
push edx
add esp, 4
xor ecx, 0xa84b
pop ecx
push ecx
sub ecx, 0x83a5
sub ecx, 0x5906
pop ecx
push esi
sub esi, 0x17184
call 0x40b482
add byte [esi], bh
dec ecx
cmp eax, 0x4d35413e
add esp, 4
pop esi
mov eax, dword [ebp - 0x2d4]
mov ecx, dword [eax + 0x18]
mov dword [ebp - 0x324], ecx
push edi
or edi, 0x160b9
pop edi
push eax
or eax, 0x9560
call 0x40b4b2
add byte [ebx], bh
cmp ecx, dword [eax + 0x43]
inc ecx
xor al, 0x43
add esp, 4
jmp 0x40b4ba
pop eax
push eax
push eax
add esp, 4
sub eax, 0x18386
pop eax
mov dword [ebp - 0x774], 0
mov edx, dword [ebp - 0x324]
mov dword [ebp - 0x1610], edx
cmp dword [ebp - 0x1610], 0
jne 0x40b4f7
mov eax, dword [ebp - 0x774]
mov dword [ebp - 0x514], eax
jmp 0x40b7e8
mov ecx, dword [ebp - 0x1610]
mov edx, dword [ebp - 0x324]
add edx, dword [ecx + 0x3c]
mov dword [ebp - 0x1614], edx
jne 0x40b51f
mov eax, dword [ebp - 0x774]
mov dword [ebp - 0x514], eax
jmp 0x40b7e8
mov ecx, 8
imul edx, ecx, 0
mov eax, dword [ebp - 0x1614]
mov ecx, dword [eax + edx + 0x78]
mov dword [ebp - 0x1618], ecx
cmp dword [ebp - 0x1618], 0
jne 0x40b551
mov edx, dword [ebp - 0x774]
mov dword [ebp - 0x514], edx
jmp 0x40b7e8
mov eax, dword [ebp - 0x324]
add eax, dword [ebp - 0x1618]
mov dword [ebp - 0x768], eax
jne 0x40b576
mov ecx, dword [ebp - 0x774]
mov dword [ebp - 0x514], ecx
jmp 0x40b7e8
mov edx, dword [ebp - 0x768]
mov eax, dword [ebp - 0x324]
add eax, dword [edx + 0x20]
mov dword [ebp - 0x19b8], eax
mov ecx, dword [ebp - 0x768]
mov edx, dword [ebp - 0x324]
add edx, dword [ecx + 0x24]
mov dword [ebp - 0x19bc], edx
mov eax, dword [ebp - 0x768]
mov ecx, dword [ebp - 0x324]
add ecx, dword [eax + 0x1c]
mov dword [ebp - 0x19c0], ecx
mov dword [ebp - 0x76c], 0
jmp 0x40b5d0
mov edx, dword [ebp - 0x76c]
add edx, 1
mov dword [ebp - 0x76c], edx
mov eax, dword [ebp - 0x768]
mov ecx, dword [ebp - 0x76c]
cmp ecx, dword [eax + 0x18]
jae 0x40b7dc
mov edx, dword [ebp - 0x76c]
mov eax, dword [ebp - 0x19b8]
mov ecx, dword [ebp - 0x324]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x770], ecx
mov edx, dword [ebp - 0x76c]
mov eax, dword [ebp - 0x19bc]
movzx ecx, word [eax + edx*2]
mov edx, dword [ebp - 0x19c0]
mov eax, dword [ebp - 0x324]
add eax, dword [edx + ecx*4]
mov dword [ebp - 0x1d48], eax
mov dword [ebp - 0x198], 0
jmp 0x40b640
mov ecx, dword [ebp - 0x198]
add ecx, 1
mov dword [ebp - 0x198], ecx
mov edx, dword [ebp - 0x770]
add edx, dword [ebp - 0x198]
movsx eax, byte [edx]
test eax, eax
je 0x40b6f2
mov ecx, dword [ebp - 0x198]
movsx edx, byte [ebp + ecx - 0x87c]
test edx, edx
je 0x40b6f2
push ecx
push eax
add esp, 4
sub ecx, 0x71d4
xor ecx, 0x145a8
and ecx, 0x7891
pop ecx
push ebx
add ebx, 0x3dae
sub ebx, 0x11eb8
xor ebx, 0x12677
sub ebx, 0x742c
pop ebx
mov eax, dword [ebp - 0x770]
add eax, dword [ebp - 0x198]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x198]
movsx eax, byte [ebp + edx - 0x87c]
cmp ecx, eax
je 0x40b6e4
mov ecx, dword [ebp - 0x770]
add ecx, dword [ebp - 0x198]
movsx edx, byte [ecx]
xor edx, 0x20
mov eax, dword [ebp - 0x198]
movsx ecx, byte [ebp + eax - 0x87c]
cmp edx, ecx
jne 0x40b6eb
jmp 0x40b631
jmp 0x40b6f2
push ebx
push eax
add esp, 4
xor ebx, 0x5263
pop ebx
push ebx
push esi
add esp, 4
or ebx, 0x16eb4
pop ebx
push edx
add edx, 0x160d1
add edx, 0x3463
xor edx, 0xaef7
add edx, 0x1654
pop edx
mov edx, dword [ebp - 0x770]
add edx, dword [ebp - 0x198]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x198]
movsx edx, byte [ebp + ecx - 0x87c]
cmp eax, edx
jne 0x40b751
mov dword [ebp - 0xcbc], 0
jmp 0x40b7c0
push eax
xor eax, 0x10d58
xor eax, 0x13af8
call 0x40b76d
add byte [ebp + eax*2 + 0x4d], al
dec esp
xor al, byte [ecx + ecx*2 + 0x4b]
inc edi
add esp, 4
call 0x40b77f
add byte [ebx], dh
dec edi
dec ecx
inc esp
inc edx
dec esp
xor ecx, dword [ebx + 0x41]
add esp, 4
pop eax
mov eax, dword [ebp - 0x770]
add eax, dword [ebp - 0x198]
movsx ecx, byte [eax]
or ecx, 0x20
mov edx, dword [ebp - 0x198]
movsx eax, byte [ebp + edx - 0x87c]
or eax, 0x20
cmp ecx, eax
jge 0x40b7b6
mov dword [ebp - 0xcbc], 0xffffffff
jmp 0x40b7c0
mov dword [ebp - 0xcbc], 1
cmp dword [ebp - 0xcbc], 0
jne 0x40b7d7
mov ecx, dword [ebp - 0x1d48]
mov dword [ebp - 0x514], ecx
jmp 0x40b7e8
jmp 0x40b5c1
mov edx, dword [ebp - 0x774]
mov dword [ebp - 0x514], edx
mov eax, dword [ebp - 0x514]
mov dword [ebp - 0x7a0], eax
push eax
or eax, 0x132ad
pop eax
push eax
add eax, 0x3559
and eax, 0xddce
and eax, 0x15481
pop eax
push ebx
xor ebx, 0x1546a
xor ebx, 0x3f91
jmp 0x40b825
pop ebx
mov ecx, dword [ebp - 0x3e4]
add ecx, 0xe
mov dword [ebp - 0x1a10], ecx
push esi
push eax
add esp, 4
sub esi, 0x127df
sub esi, 0x134f4
xor esi, 0xb0c
pop esi
push esi
sub esi, 0x14b8e
or esi, 0xd5c1
add esi, 0xd900
add esi, 0x16602
pop esi
cmp dword [ebp - 0x3e4], 0
je 0x40b879
cmp dword [ebp - 0xac4], 0
jne 0x40b8bf
push ecx
push edi
add esp, 4
add ecx, 0xf705
pop ecx
push esi
call 0x40b895
add byte [ebx + ecx*2], dh
inc ecx
dec esi
dec edi
inc edi
aaa
xor al, 0x49
add esp, 4
or esi, 0xfc7a
sub esi, 0x17d69
or esi, 0x16f09
pop esi
mov edx, dword [ebp - 0x7a0]
mov dword [ebp - 0x19c4], edx
push 0
call dword [ebp - 0x19c4]
mov dword [ebp - 0x20dc], 0xa
push esi
push ecx
add esp, 4
and esi, 0xa98f
call 0x40b8e4
add byte [ebx + 0x43], al
inc eax
cmp al, 0x38
dec edi
cmp al, 0x38
xor cl, byte [edx - 0x7d]
les eax, [eax + ebp*8]
or eax, dword [eax]
add byte [eax], al
add byte [eax], bh
dec esi
xor eax, 0x463b403c
aaa
inc eax
inc eax
add esp, 4
pop esi
mov eax, dword [ebp - 0x3e4]
mov cl, byte [eax + 0xa]
mov byte [ebp - 0x3ed], cl
mov edx, dword [ebp - 0xac4]
sub edx, dword [ebp - 0x3e4]
mov dword [ebp - 0x169c], edx
mov dword [ebp - 0xcec], 0
push eax
and eax, 0x13bb3
pop eax
push edx
sub edx, 0x8afe
pop edx
push edx
sub edx, 0x1f56
pop edx
push ebx
push ebx
add esp, 4
or ebx, 0xbc02
pop ebx
push ecx
and ecx, 0xc93a
or ecx, 0x21da
pop ecx
mov byte [ebp - 0x9d8], 0x56
mov byte [ebp - 0x9d7], 0x69
mov byte [ebp - 0x9d6], 0x72
mov byte [ebp - 0x9d5], 0x74
mov byte [ebp - 0x9d4], 0x75
mov byte [ebp - 0x9d3], 0x61
mov byte [ebp - 0x9d2], 0x6c
mov byte [ebp - 0x9d1], 0x50
mov byte [ebp - 0x9d0], 0x72
mov byte [ebp - 0x9cf], 0x6f
mov byte [ebp - 0x9ce], 0x74
mov byte [ebp - 0x9cd], 0x65
mov byte [ebp - 0x9cc], 0x63
mov byte [ebp - 0x9cb], 0x74
mov byte [ebp - 0x9ca], 0
push edx
add edx, 0x132da
jmp 0x40b9ce
jmp 0x40b9d4
and edx, 0xd8b3
pop edx
push edx
push ecx
add esp, 4
and edx, 0x1863f
xor edx, 0x50bd
xor edx, 0xeef7
pop edx
mov eax, dword fs:[0x18]
mov dword [ebp - 0x19c8], eax
mov ecx, dword [ebp - 0x19c8]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x19cc], edx
mov eax, dword [ebp - 0x19cc]
mov dword [ebp - 0x161c], eax
push edi
push ecx
add esp, 4
xor edi, 0x3ce8
xor edi, 0x47a1
sub edi, 0x5bad
pop edi
push ebx
or ebx, 0x1600
or ebx, 0xcce6
jmp 0x40ba45
add ebx, 0x12c9d
pop ebx
cmp dword [ebp - 0x161c], 0
jne 0x40ba64
mov dword [ebp - 0x2f4], 0
jmp 0x40bd0b
mov ecx, dword [ebp - 0x161c]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xcc8], eax
push edx
push eax
add esp, 4
and edx, 0x86ec
jmp 0x40ba89
pop edx
push eax
push eax
add esp, 4
call 0x40ba9e
add byte [edx + 0x44], cl
xor eax, 0x4c4f4a47
inc edx
dec esp
add esp, 4
add eax, 0xb17f
pop eax
cmp dword [ebp - 0xcc8], 0
jne 0x40bac0
mov dword [ebp - 0x2f4], 0
jmp 0x40bd0b
mov ecx, dword [ebp - 0xcc8]
mov dword [ebp - 0x518], ecx
push ecx
push ecx
add esp, 4
sub ecx, 0x9cd4
add ecx, 0x2a2a
xor ecx, 0x110b8
pop ecx
push ebx
and ebx, 0xdb77
add ebx, 0x2973
sub ebx, 0x13d64
add ebx, 0x7a9
pop ebx
lea edx, [ebp - 0x1740]
mov dword [ebp - 0xcc4], edx
mov eax, dword [ebp - 0x518]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xcc0], ecx
xor edx, edx
mov word [ebp - 0x21c], dx
xor eax, eax
mov word [ebp - 0x38], ax
push esi
call 0x40bb38
add byte [ebx + 0x4e], al
xor eax, dword [ecx + 0x43]
inc esi
cmp dword [esi + esi - 0x7d], eax
les eax, [esi + ebx*2]
push edx
add edx, 0x2013
jmp 0x40bb49
pop edx
push edi
and edi, 0x7dd6
pop edi
push ecx
add ecx, 0xbed7
pop ecx
mov ecx, dword [ebp - 0xcc0]
mov dx, word [ecx]
mov word [ebp - 0x1042], dx
mov eax, dword [ebp - 0xcc0]
add eax, 2
mov dword [ebp - 0xcc0], eax
mov cx, word [ebp - 0x1042]
mov word [ebp - 0x21c], cx
mov edx, dword [ebp - 0xcc4]
mov ax, word [edx]
mov word [ebp - 0x1044], ax
mov ecx, dword [ebp - 0xcc4]
add ecx, 2
mov dword [ebp - 0xcc4], ecx
mov dx, word [ebp - 0x1044]
mov word [ebp - 0x38], dx
push ebx
push ebx
add esp, 4
add ebx, 0xfe4e
jmp 0x40bbc2
pop ebx
push edx
push edi
add esp, 4
or edx, 0x5514
and edx, 0x17ada
xor edx, 0x8bd7
pop edx
push ecx
xor ecx, 0x846
pop ecx
movzx eax, word [ebp - 0x38]
test eax, eax
jne 0x40bc00
movzx ecx, word [ebp - 0x21c]
movzx edx, word [ebp - 0x38]
sub ecx, edx
mov dword [ebp - 0x1624], ecx
jmp 0x40bc5a
movzx eax, word [ebp - 0x21c]
movzx ecx, word [ebp - 0x38]
cmp eax, ecx
je 0x40bb28
movzx edx, word [ebp - 0x21c]
xor edx, 0x20
movzx eax, word [ebp - 0x38]
cmp edx, eax
je 0x40bb28
movzx ecx, word [ebp - 0x21c]
movzx edx, word [ebp - 0x38]
cmp ecx, edx
jge 0x40bc44
mov dword [ebp - 0x1620], 0xffffffff
jmp 0x40bc4e
mov dword [ebp - 0x1620], 1
mov eax, dword [ebp - 0x1620]
mov dword [ebp - 0x1624], eax
cmp dword [ebp - 0x1624], 0
jne 0x40bca3
push ecx
push eax
add esp, 4
xor ecx, 0x915f
sub ecx, 0x15194
pop ecx
push edx
or edx, 0x70c4
and edx, 0x2621
xor edx, 0x163c8
pop edx
push eax
push esi
add esp, 4
sub eax, 0xdf5d
pop eax
mov ecx, dword [ebp - 0x518]
mov dword [ebp - 0x2f4], ecx
jmp 0x40bd0b
push esi
and esi, 0xe2e3
pop esi
push eax
xor eax, 0xe4e6
call 0x40bcc2
add byte [edx], bh
dec edx
xor eax, 0x40484c3d
inc esi
cmp esi, dword [0xeb04c483]
pop es
dec edi
dec ebp
cmp al, 0x34
inc ebp
cmp eax, 0x13f08136
clc
add byte [eax], al
pop eax
mov edx, dword [ebp - 0x518]
mov eax, dword [edx]
mov dword [ebp - 0x518], eax
mov ecx, dword [ebp - 0x518]
cmp ecx, dword [ebp - 0xcc8]
je 0x40bd01
mov edx, dword [ebp - 0x518]
cmp dword [edx + 0x30], 0
jne 0x40bacc
mov dword [ebp - 0x2f4], 0
push ebx
add ebx, 0x104ca
add ebx, 0x37d8
or ebx, 0xb950
pop ebx
push ebx
push edx
add esp, 4
add ebx, 0x155f0
and ebx, 0x13f53
add ebx, 0x52f8
sub ebx, 0x17f20
pop ebx
cmp dword [ebp - 0x2f4], 0
jne 0x40c642
mov eax, 0x6b
mov word [ebp - 0x17c8], ax
mov ecx, 0x65
mov word [ebp - 0x17c6], cx
mov edx, 0x72
mov word [ebp - 0x17c4], dx
mov eax, 0x6e
mov word [ebp - 0x17c2], ax
mov ecx, 0x65
mov word [ebp - 0x17c0], cx
mov edx, 0x6c
mov word [ebp - 0x17be], dx
mov eax, 0x33
mov word [ebp - 0x17bc], ax
mov ecx, 0x32
mov word [ebp - 0x17ba], cx
mov edx, 0x2e
mov word [ebp - 0x17b8], dx
mov eax, 0x64
mov word [ebp - 0x17b6], ax
mov ecx, 0x6c
mov word [ebp - 0x17b4], cx
mov edx, 0x6c
mov word [ebp - 0x17b2], dx
xor eax, eax
mov word [ebp - 0x17b0], ax
push esi
xor esi, 0x716
or esi, 0x1047a
pop esi
push eax
call 0x40bdff
add byte [eax + 0x35], dl
inc eax
inc esi
cmp al, byte [esi + 0x4f]
add esp, 4
xor eax, 0xcc22
xor eax, 0x53c7
xor eax, 0x4d33
pop eax
mov byte [ebp - 0x8a8], 0x4c
mov byte [ebp - 0x8a7], 0x6f
mov byte [ebp - 0x8a6], 0x61
mov byte [ebp - 0x8a5], 0x64
mov byte [ebp - 0x8a4], 0x4c
mov byte [ebp - 0x8a3], 0x69
mov byte [ebp - 0x8a2], 0x62
mov byte [ebp - 0x8a1], 0x72
mov byte [ebp - 0x8a0], 0x61
mov byte [ebp - 0x89f], 0x72
mov byte [ebp - 0x89e], 0x79
mov byte [ebp - 0x89d], 0x57
mov byte [ebp - 0x89c], 0
mov ecx, dword fs:[0x18]
mov dword [ebp - 0x19d0], ecx
mov edx, dword [ebp - 0x19d0]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x19d4], eax
mov ecx, dword [ebp - 0x19d4]
mov dword [ebp - 0x1628], ecx
push esi
push edx
add esp, 4
xor esi, 0x837c
pop esi
push eax
push edi
add esp, 4
jmp 0x40beb1
xor eax, 0x8d0d
sub eax, 0x5796
pop eax
push edx
push eax
add esp, 4
xor edx, 0x17220
pop edx
cmp dword [ebp - 0x1628], 0
jne 0x40bee2
mov dword [ebp - 0x778], 0
jmp 0x40c189
mov edx, dword [ebp - 0x1628]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0xcd4], ecx
push edx
jmp 0x40befe
and edx, 0x1678b
pop edx
push eax
or eax, 0x13db6
call 0x40bf1c
add byte [eax + 0x3e], al
cmp al, byte [ebp + 0x47]
dec ebx
cmp byte ss:[0x4c48332], bh
sub eax, 0x17021
pop eax
cmp dword [ebp - 0xcd4], 0
jne 0x40bf3e
mov dword [ebp - 0x778], 0
jmp 0x40c189
mov edx, dword [ebp - 0xcd4]
mov dword [ebp - 0x51c], edx
push ecx
call 0x40bf5a
add byte [edx], dh
dec edx
dec ebp
dec ebp
dec ebx
inc edx
dec eax
dec edi
cmp dword [ebx + 0x515904c4], eax
push eax
add esp, 4
xor ecx, 0x16b4
or ecx, 0x52e0
or ecx, 0xb4a8
or ecx, 0x626b
pop ecx
lea eax, [ebp - 0x17c8]
mov dword [ebp - 0xcd0], eax
mov ecx, dword [ebp - 0x51c]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0xccc], edx
xor eax, eax
mov word [ebp - 0x220], ax
xor ecx, ecx
mov word [ebp - 0x3c], cx
push ebx
push ebx
add esp, 4
jmp 0x40bfb0
and ebx, 0x79ce
pop ebx
push ebx
push eax
add esp, 4
add ebx, 0x122ce
xor ebx, 0xd5b1
jmp 0x40bfd1
and ebx, 0xf065
pop ebx
mov edx, dword [ebp - 0xccc]
mov ax, word [edx]
mov word [ebp - 0x1046], ax
mov ecx, dword [ebp - 0xccc]
add ecx, 2
mov dword [ebp - 0xccc], ecx
mov dx, word [ebp - 0x1046]
mov word [ebp - 0x220], dx
mov eax, dword [ebp - 0xcd0]
mov cx, word [eax]
mov word [ebp - 0x1048], cx
mov edx, dword [ebp - 0xcd0]
add edx, 2
mov dword [ebp - 0xcd0], edx
mov ax, word [ebp - 0x1048]
mov word [ebp - 0x3c], ax
push edi
push ecx
add esp, 4
or edi, 0x450a
and edi, 0x6af5
add edi, 0xf57c
pop edi
push ebx
and ebx, 0x16f47
add ebx, 0x108a7
sub ebx, 0x11594
sub ebx, 0xe118
pop ebx
movzx ecx, word [ebp - 0x3c]
test ecx, ecx
jne 0x40c07e
movzx edx, word [ebp - 0x220]
movzx eax, word [ebp - 0x3c]
sub edx, eax
mov dword [ebp - 0x1670], edx
jmp 0x40c0d8
movzx ecx, word [ebp - 0x220]
movzx edx, word [ebp - 0x3c]
cmp ecx, edx
je 0x40bfa6
movzx eax, word [ebp - 0x220]
xor eax, 0x20
movzx ecx, word [ebp - 0x3c]
cmp eax, ecx
je 0x40bfa6
movzx edx, word [ebp - 0x220]
movzx eax, word [ebp - 0x3c]
cmp edx, eax
jge 0x40c0c2
mov dword [ebp - 0x162c], 0xffffffff
jmp 0x40c0cc
mov dword [ebp - 0x162c], 1
mov ecx, dword [ebp - 0x162c]
mov dword [ebp - 0x1670], ecx
cmp dword [ebp - 0x1670], 0
jne 0x40c121
push eax
push eax
add esp, 4
or eax, 0xc85e
and eax, 0x131a8
pop eax
push edx
sub edx, 0x4a33
and edx, 0xd69f
call 0x40c10f
add byte [esi + 0x4b], cl
cmp byte [ebx], bh
aas
aaa
cmp dword [edi + 0x3e], eax
add esp, 4
pop edx
mov edx, dword [ebp - 0x51c]
mov dword [ebp - 0x778], edx
jmp 0x40c189
push eax
add eax, 0x1d08
jmp 0x40c12f
add eax, 0xee23
pop eax
push esi
or esi, 0x17999
add esi, 0xc889
jmp 0x40c149
pop esi
push edx
jmp 0x40c152
pop edx
mov eax, dword [ebp - 0x51c]
mov ecx, dword [eax]
mov dword [ebp - 0x51c], ecx
mov edx, dword [ebp - 0x51c]
cmp edx, dword [ebp - 0xcd4]
je 0x40c17f
mov eax, dword [ebp - 0x51c]
cmp dword [eax + 0x30], 0
jne 0x40bf4a
mov dword [ebp - 0x778], 0
push ecx
jmp 0x40c18f
pop ecx
push esi
add esi, 0x856f
pop esi
push esi
push esi
add esp, 4
and esi, 0x17772
xor esi, 0x2842
sub esi, 0xf883
pop esi
push edi
jmp 0x40c1ba
pop edi
cmp dword [ebp - 0x778], 0
jne 0x40c205
push ecx
add ecx, 0x2185
pop ecx
push ebx
call 0x40c1dc
add byte [edx + 0x49], al
inc eax
cmp byte [ecx + 0x4e], cl
inc ebx
dec ecx
inc ebx
add esp, 4
add ebx, 0x2ae4
call 0x40c1f2
add byte [esi + edi + 0x3e], al
cmp cl, byte [ebx + 0x3b]
dec ebx
add esp, 4
pop ebx
mov dword [ebp - 0xac0], 0
jmp 0x40cd2d
push edx
sub edx, 0x14831
sub edx, 0x13ca2
and edx, 0x4b53
jmp 0x40c21f
pop edx
push esi
push edi
add esp, 4
sub esi, 0x7d86
sub esi, 0x15972
jmp 0x40c236
pop esi
mov ecx, dword [ebp - 0x778]
mov edx, dword [ecx + 0x18]
mov dword [ebp - 0x3a4], edx
mov dword [ebp - 0x788], 0
mov eax, dword [ebp - 0x3a4]
mov dword [ebp - 0x1674], eax
cmp dword [ebp - 0x1674], 0
jne 0x40c276
mov ecx, dword [ebp - 0x788]
mov dword [ebp - 0x3fc], ecx
jmp 0x40c567
mov edx, dword [ebp - 0x1674]
mov eax, dword [ebp - 0x3a4]
add eax, dword [edx + 0x3c]
mov dword [ebp - 0x1678], eax
jne 0x40c29e
mov ecx, dword [ebp - 0x788]
mov dword [ebp - 0x3fc], ecx
jmp 0x40c567
mov edx, 8
imul eax, edx, 0
mov ecx, dword [ebp - 0x1678]
mov edx, dword [ecx + eax + 0x78]
mov dword [ebp - 0x1680], edx
cmp dword [ebp - 0x1680], 0
jne 0x40c2d0
mov eax, dword [ebp - 0x788]
mov dword [ebp - 0x3fc], eax
jmp 0x40c567
mov ecx, dword [ebp - 0x3a4]
add ecx, dword [ebp - 0x1680]
mov dword [ebp - 0x77c], ecx
jne 0x40c2f5
mov edx, dword [ebp - 0x788]
mov dword [ebp - 0x3fc], edx
jmp 0x40c567
mov eax, dword [ebp - 0x77c]
mov ecx, dword [ebp - 0x3a4]
add ecx, dword [eax + 0x20]
mov dword [ebp - 0x19d8], ecx
mov edx, dword [ebp - 0x77c]
mov eax, dword [ebp - 0x3a4]
add eax, dword [edx + 0x24]
mov dword [ebp - 0x19dc], eax
mov ecx, dword [ebp - 0x77c]
mov edx, dword [ebp - 0x3a4]
add edx, dword [ecx + 0x1c]
mov dword [ebp - 0x19e0], edx
mov dword [ebp - 0x780], 0
jmp 0x40c34f
mov eax, dword [ebp - 0x780]
add eax, 1
mov dword [ebp - 0x780], eax
mov ecx, dword [ebp - 0x77c]
mov edx, dword [ebp - 0x780]
cmp edx, dword [ecx + 0x18]
jae 0x40c55b
mov eax, dword [ebp - 0x780]
mov ecx, dword [ebp - 0x19d8]
mov edx, dword [ebp - 0x3a4]
add edx, dword [ecx + eax*4]
mov dword [ebp - 0x784], edx
mov eax, dword [ebp - 0x780]
mov ecx, dword [ebp - 0x19dc]
movzx edx, word [ecx + eax*2]
mov eax, dword [ebp - 0x19e0]
mov ecx, dword [ebp - 0x3a4]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x19e4], ecx
mov dword [ebp - 0x19c], 0
jmp 0x40c3bf
mov edx, dword [ebp - 0x19c]
add edx, 1
mov dword [ebp - 0x19c], edx
mov eax, dword [ebp - 0x784]
add eax, dword [ebp - 0x19c]
movsx ecx, byte [eax]
test ecx, ecx
je 0x40c471
mov edx, dword [ebp - 0x19c]
movsx eax, byte [ebp + edx - 0x8a8]
test eax, eax
je 0x40c471
push esi
push esi
add esp, 4
sub esi, 0x11dc2
add esi, 0x7f86
or esi, 0x3320
pop esi
push esi
sub esi, 0xba3c
xor esi, 0x9c04
and esi, 0x11eac
xor esi, 0x118c7
pop esi
mov ecx, dword [ebp - 0x784]
add ecx, dword [ebp - 0x19c]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x19c]
movsx ecx, byte [ebp + eax - 0x8a8]
cmp edx, ecx
je 0x40c463
mov edx, dword [ebp - 0x784]
add edx, dword [ebp - 0x19c]
movsx eax, byte [edx]
xor eax, 0x20
mov ecx, dword [ebp - 0x19c]
movsx edx, byte [ebp + ecx - 0x8a8]
cmp eax, edx
jne 0x40c46a
jmp 0x40c3b0
jmp 0x40c471
push esi
push ecx
add esp, 4
xor esi, 0x6c7a
add esi, 0xa932
add esi, 0x15f17
and esi, 0xd71d
pop esi
push ecx
push edx
add esp, 4
or ecx, 0x6d4a
pop ecx
push edi
or edi, 0x163d8
pop edi
mov eax, dword [ebp - 0x784]
add eax, dword [ebp - 0x19c]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x19c]
movsx eax, byte [ebp + edx - 0x8a8]
cmp ecx, eax
jne 0x40c4d0
mov dword [ebp - 0xcd8], 0
jmp 0x40c53f
push edx
push edx
add esp, 4
xor edx, 0xb413
sub edx, 0xb619
pop edx
push ebx
push edx
add esp, 4
sub ebx, 0x1f45
add ebx, 0xfead
pop ebx
push edx
and edx, 0x13f34
or edx, 0x539f
pop edx
mov ecx, dword [ebp - 0x784]
add ecx, dword [ebp - 0x19c]
movsx edx, byte [ecx]
or edx, 0x20
mov eax, dword [ebp - 0x19c]
movsx ecx, byte [ebp + eax - 0x8a8]
or ecx, 0x20
cmp edx, ecx
jge 0x40c535
mov dword [ebp - 0xcd8], 0xffffffff
jmp 0x40c53f
mov dword [ebp - 0xcd8], 1
cmp dword [ebp - 0xcd8], 0
jne 0x40c556
mov edx, dword [ebp - 0x19e4]
mov dword [ebp - 0x3fc], edx
jmp 0x40c567
jmp 0x40c340
mov eax, dword [ebp - 0x788]
mov dword [ebp - 0x3fc], eax
cmp dword [ebp - 0x3fc], 0
je 0x40c642
push esi
sub esi, 0x659e
pop esi
push esi
jmp 0x40c582
xor esi, 0x71ca
and esi, 0x1563d
pop esi
push ecx
sub ecx, 0xfaa4
jmp 0x40c59f
add ecx, 0x144d1
pop ecx
mov ecx, dword [ebp - 0x3fc]
mov dword [ebp - 0x19e8], ecx
push ecx
call 0x40c5c0
add byte [eax], bh
dec esp
xor dh, byte [ebx]
xor eax, dword [ebx + 0x4a]
add esp, 4
add ecx, 0x14860
and ecx, 0x2b3f
and ecx, 0x2d06
pop ecx
push edi
xor edi, 0x2e12
add edi, 0x2f0b
pop edi
mov edx, dword [ebp - 0x19e8]
mov dword [ebp - 0x19ec], edx
lea eax, [ebp - 0x1740]
push eax
call dword [ebp - 0x19ec]
test eax, eax
jne 0x40c642
push ecx
call 0x40c60f
add byte [0x4c483f3c], dh
push eax
push eax
add esp, 4
xor ecx, 0x95a4
and ecx, 0x1241e
pop ecx
push esi
push esi
add esp, 4
add esi, 0x3b75
pop esi
push edx
add edx, 0x482e
pop edx
mov dword [ebp - 0xac0], 0
jmp 0x40cd2d
push edx
xor edx, 0x734b
pop edx
push eax
push ecx
add esp, 4
xor eax, 0x97da
or eax, 0x8ed5
call 0x40c66a
add byte [ebx + 0x36], al
push eax
aas
dec ecx
inc edi
dec edx
xor cl, byte [edx - 0x7d]
les eax, [ecx + eax*4]
sar ch, 0x2a
add byte [eax], al
pop eax
mov ecx, dword fs:[0x18]
mov dword [ebp - 0x19f0], ecx
mov edx, dword [ebp - 0x19f0]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x19f4], eax
mov ecx, dword [ebp - 0x19f4]
mov dword [ebp - 0x1684], ecx
push eax
push eax
add esp, 4
sub eax, 0xc6d2
sub eax, 0x136d9
add eax, 0x1482f
or eax, 0x9475
pop eax
push edx
and edx, 0xe2c9
pop edx
push esi
push edi
add esp, 4
sub esi, 0xe150
pop esi
cmp dword [ebp - 0x1684], 0
jne 0x40c6e6
mov dword [ebp - 0x2f4], 0
jmp 0x40c98d
mov edx, dword [ebp - 0x1684]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0xce4], ecx
push ecx
call 0x40c708
add byte [eax + 0x48], dl
xor eax, 0x404c3a49
dec esi
dec ebp
add esp, 4
xor ecx, 0x727d
add ecx, 0x8ae7
pop ecx
push edi
push esi
add esp, 4
and edi, 0x17069
sub edi, 0x12a30
pop edi
cmp dword [ebp - 0xce4], 0
jne 0x40c742
mov dword [ebp - 0x2f4], 0
jmp 0x40c98d
mov edx, dword [ebp - 0xce4]
mov dword [ebp - 0x520], edx
push ecx
push ecx
add esp, 4
jmp 0x40c75a
call 0x40c769
add byte [edi + 0x35], al
cmp eax, 0x3e394348
aaa
add esp, 4
jmp 0x40c775
pop ecx
push edx
jmp 0x40c77f
pop edx
lea eax, [ebp - 0x1740]
mov dword [ebp - 0xce0], eax
mov ecx, dword [ebp - 0x520]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0xcdc], edx
xor eax, eax
mov word [ebp - 0x224], ax
xor ecx, ecx
mov word [ebp - 0x40], cx
push esi
push ecx
add esp, 4
call 0x40c7bd
add byte [0x37334745], bh
xor al, 0x46
cmp dword [ebx + 0x525e04c4], eax
push ebx
add esp, 4
and edx, 0x3a9b
or edx, 0x6cce
jmp 0x40c7db
pop edx
mov edx, dword [ebp - 0xcdc]
mov ax, word [edx]
mov word [ebp - 0x104a], ax
mov ecx, dword [ebp - 0xcdc]
add ecx, 2
mov dword [ebp - 0xcdc], ecx
mov dx, word [ebp - 0x104a]
mov word [ebp - 0x224], dx
mov eax, dword [ebp - 0xce0]
mov cx, word [eax]
mov word [ebp - 0x104c], cx
mov edx, dword [ebp - 0xce0]
add edx, 2
mov dword [ebp - 0xce0], edx
mov ax, word [ebp - 0x104c]
mov word [ebp - 0x40], ax
push edi
xor edi, 0x1222d
pop edi
push ecx
sub ecx, 0xfd59
add ecx, 0x12b4f
jmp 0x40c84e
pop ecx
push edx
or edx, 0x10894
pop edx
push ebx
add ebx, 0xdbd1
add ebx, 0x12100
pop ebx
movzx ecx, word [ebp - 0x40]
test ecx, ecx
jne 0x40c882
movzx edx, word [ebp - 0x224]
movzx eax, word [ebp - 0x40]
sub edx, eax
mov dword [ebp - 0x168c], edx
jmp 0x40c8dc
movzx ecx, word [ebp - 0x224]
movzx edx, word [ebp - 0x40]
cmp ecx, edx
je 0x40c7aa
movzx eax, word [ebp - 0x224]
xor eax, 0x20
movzx ecx, word [ebp - 0x40]
cmp eax, ecx
je 0x40c7aa
movzx edx, word [ebp - 0x224]
movzx eax, word [ebp - 0x40]
cmp edx, eax
jge 0x40c8c6
mov dword [ebp - 0x1688], 0xffffffff
jmp 0x40c8d0
mov dword [ebp - 0x1688], 1
mov ecx, dword [ebp - 0x1688]
mov dword [ebp - 0x168c], ecx
cmp dword [ebp - 0x168c], 0
jne 0x40c925
push edx
push ecx
add esp, 4
add edx, 0x2e5d
jmp 0x40c8f6
or edx, 0x159e0
pop edx
push edx
push esi
add esp, 4
sub edx, 0xc0c8
add edx, 0x14ad8
pop edx
push edx
sub edx, 0x12209
pop edx
mov edx, dword [ebp - 0x520]
mov dword [ebp - 0x2f4], edx
jmp 0x40c98d
push ebx
xor ebx, 0x172ff
xor ebx, 0x17428
pop ebx
push esi
push edi
add esp, 4
sub esi, 0x80c1
sub esi, 0x170e8
pop esi
push ebx
push edx
add esp, 4
sub ebx, 0xb42
sub ebx, 0x17d02
pop ebx
mov eax, dword [ebp - 0x520]
mov ecx, dword [eax]
mov dword [ebp - 0x520], ecx
mov edx, dword [ebp - 0x520]
cmp edx, dword [ebp - 0xce4]
je 0x40c983
mov eax, dword [ebp - 0x520]
cmp dword [eax + 0x30], 0
jne 0x40c74e
mov dword [ebp - 0x2f4], 0
push ecx
push edi
add esp, 4
xor ecx, 0x1482c
sub ecx, 0xaff3
and ecx, 0xbdb6
add ecx, 0x12566
pop ecx
push edi
add edi, 0x5645
sub edi, 0x10c03
and edi, 0x2dde
pop edi
mov ecx, dword [ebp - 0x2f4]
mov edx, dword [ecx + 0x18]
mov dword [ebp - 0x36c], edx
push ecx
push eax
add esp, 4
sub ecx, 0x16788
add ecx, 0x4f8e
xor ecx, 0xfc9f
pop ecx
push ecx
or ecx, 0x51aa
and ecx, 0x506a
and ecx, 0xedc5
or ecx, 0x144c3
pop ecx
mov dword [ebp - 0x798], 0
mov eax, dword [ebp - 0x36c]
mov dword [ebp - 0x1690], eax
cmp dword [ebp - 0x1690], 0
jne 0x40ca30
mov ecx, dword [ebp - 0x798]
mov dword [ebp - 0x524], ecx
jmp 0x40cd21
mov edx, dword [ebp - 0x1690]
mov eax, dword [ebp - 0x36c]
add eax, dword [edx + 0x3c]
mov dword [ebp - 0x1694], eax
jne 0x40ca58
mov ecx, dword [ebp - 0x798]
mov dword [ebp - 0x524], ecx
jmp 0x40cd21
mov edx, 8
imul eax, edx, 0
mov ecx, dword [ebp - 0x1694]
mov edx, dword [ecx + eax + 0x78]
mov dword [ebp - 0x1698], edx
cmp dword [ebp - 0x1698], 0
jne 0x40ca8a
mov eax, dword [ebp - 0x798]
mov dword [ebp - 0x524], eax
jmp 0x40cd21
mov ecx, dword [ebp - 0x36c]
add ecx, dword [ebp - 0x1698]
mov dword [ebp - 0x78c], ecx
jne 0x40caaf
mov edx, dword [ebp - 0x798]
mov dword [ebp - 0x524], edx
jmp 0x40cd21
mov eax, dword [ebp - 0x78c]
mov ecx, dword [ebp - 0x36c]
add ecx, dword [eax + 0x20]
mov dword [ebp - 0x19f8], ecx
mov edx, dword [ebp - 0x78c]
mov eax, dword [ebp - 0x36c]
add eax, dword [edx + 0x24]
mov dword [ebp - 0x19fc], eax
mov ecx, dword [ebp - 0x78c]
mov edx, dword [ebp - 0x36c]
add edx, dword [ecx + 0x1c]
mov dword [ebp - 0x1a00], edx
mov dword [ebp - 0x790], 0
jmp 0x40cb09
mov eax, dword [ebp - 0x790]
add eax, 1
mov dword [ebp - 0x790], eax
mov ecx, dword [ebp - 0x78c]
mov edx, dword [ebp - 0x790]
cmp edx, dword [ecx + 0x18]
jae 0x40cd15
mov eax, dword [ebp - 0x790]
mov ecx, dword [ebp - 0x19f8]
mov edx, dword [ebp - 0x36c]
add edx, dword [ecx + eax*4]
mov dword [ebp - 0x794], edx
mov eax, dword [ebp - 0x790]
mov ecx, dword [ebp - 0x19fc]
movzx edx, word [ecx + eax*2]
mov eax, dword [ebp - 0x1a00]
mov ecx, dword [ebp - 0x36c]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x1a04], ecx
mov dword [ebp - 0x1a0], 0
jmp 0x40cb79
mov edx, dword [ebp - 0x1a0]
add edx, 1
mov dword [ebp - 0x1a0], edx
mov eax, dword [ebp - 0x794]
add eax, dword [ebp - 0x1a0]
movsx ecx, byte [eax]
test ecx, ecx
je 0x40cc2b
mov edx, dword [ebp - 0x1a0]
movsx eax, byte [ebp + edx - 0x9d8]
test eax, eax
je 0x40cc2b
push esi
sub esi, 0x59c2
pop esi
push eax
push esi
add esp, 4
xor eax, 0x8ed3
sub eax, 0xccf6
and eax, 0xbc41
call 0x40cbd4
add byte [edi], dh
dec esp
xor eax, 0x43355036
inc ebx
dec esp
add esp, 4
pop eax
mov ecx, dword [ebp - 0x794]
add ecx, dword [ebp - 0x1a0]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x1a0]
movsx ecx, byte [ebp + eax - 0x9d8]
cmp edx, ecx
je 0x40cc1d
mov edx, dword [ebp - 0x794]
add edx, dword [ebp - 0x1a0]
movsx eax, byte [edx]
xor eax, 0x20
mov ecx, dword [ebp - 0x1a0]
movsx edx, byte [ebp + ecx - 0x9d8]
cmp eax, edx
jne 0x40cc24
jmp 0x40cb6a
jmp 0x40cc2b
push edx
push edi
add esp, 4
or edx, 0xc4ad
sub edx, 0x1597f
sub edx, 0x1541b
xor edx, 0x13a4c
pop edx
push esi
push edx
add esp, 4
add esi, 0x10175
pop esi
push ecx
or ecx, 0x15a01
pop ecx
mov eax, dword [ebp - 0x794]
add eax, dword [ebp - 0x1a0]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x1a0]
movsx eax, byte [ebp + edx - 0x9d8]
cmp ecx, eax
jne 0x40cc8a
mov dword [ebp - 0xce8], 0
jmp 0x40ccf9
push edi
push eax
add esp, 4
add edi, 0x12db7
sub edi, 0xee53
pop edi
push edi
and edi, 0x14c9d
sub edi, 0x581e
call 0x40ccb8
add byte [esi], dh
aaa
dec ebx
cmp dword [ebx + 0x46], eax
inc edi
cmp eax, 0x4c4833d
pop edi
mov ecx, dword [ebp - 0x794]
add ecx, dword [ebp - 0x1a0]
movsx edx, byte [ecx]
or edx, 0x20
mov eax, dword [ebp - 0x1a0]
movsx ecx, byte [ebp + eax - 0x9d8]
or ecx, 0x20
cmp edx, ecx
jge 0x40ccef
mov dword [ebp - 0xce8], 0xffffffff
jmp 0x40ccf9
mov dword [ebp - 0xce8], 1
cmp dword [ebp - 0xce8], 0
jne 0x40cd10
mov edx, dword [ebp - 0x1a04]
mov dword [ebp - 0x524], edx
jmp 0x40cd21
jmp 0x40cafa
mov eax, dword [ebp - 0x798]
mov dword [ebp - 0x524], eax
mov ecx, dword [ebp - 0x524]
mov dword [ebp - 0xac0], ecx
push edx
or edx, 0x14dcc
sub edx, 0x822c
sub edx, 0x4e19
pop edx
push edx
and edx, 0xf1d2
and edx, 0xc076
pop edx
push ebx
sub ebx, 0x1454e
jmp 0x40cd5e
pop ebx
mov edx, dword [ebp - 0xac0]
mov dword [ebp - 0x1a08], edx
lea eax, [ebp - 0xcec]
push eax
push 0x40
mov ecx, dword [ebp - 0x169c]
push ecx
mov edx, dword [ebp - 0x3e4]
push edx
call dword [ebp - 0x1a08]
test eax, eax
jne 0x40cdd2
push ebx
xor ebx, 0xb45a
call 0x40cda2
add byte [ecx + 0x36], al
dec edx
dec eax
inc esi
dec esi
dec edx
inc esi
add esp, 4
pop ebx
push edi
push esi
add esp, 4
call 0x40cdba
add byte [ebp + 0x3e], cl
inc ebp
inc eax
cmp byte [esi], dh
xor eax, 0xc4833a47
add al, 0x5f
mov eax, dword [ebp - 0x7a0]
mov dword [ebp - 0x1a0c], eax
push 0
call dword [ebp - 0x1a0c]
mov ecx, dword [ebp - 0x1a10]
mov dword [ebp - 0x79c], ecx
jmp 0x40cdef
mov edx, dword [ebp - 0x79c]
add edx, 1
mov dword [ebp - 0x79c], edx
mov eax, dword [ebp - 0x79c]
cmp eax, dword [ebp - 0xac4]
jae 0x40ce4b
push ecx
push esi
add esp, 4
xor ecx, 0x7321
or ecx, 0xbc25
or ecx, 0x15695
pop ecx
push eax
push edx
add esp, 4
add eax, 0xbd0b
pop eax
push eax
jmp 0x40ce28
xor eax, 0x944f
pop eax
movzx ecx, byte [ebp - 0x3ed]
mov edx, dword [ebp - 0x79c]
movsx eax, byte [edx]
sub eax, ecx
mov ecx, dword [ebp - 0x79c]
mov byte [ecx], al
jmp 0x40cde0
mov edx, dword [ebp - 0xac0]
mov dword [ebp - 0x1a14], edx
lea eax, [ebp - 0xcec]
push eax
mov ecx, dword [ebp - 0xcec]
push ecx
mov edx, dword [ebp - 0x169c]
push edx
mov eax, dword [ebp - 0x3e4]
push eax
call dword [ebp - 0x1a14]
test eax, eax
jne 0x40cec3
push eax
push eax
add esp, 4
jmp 0x40ce88
xor eax, 0x1333a
pop eax
push eax
push edi
add esp, 4
or eax, 0x5438
sub eax, 0x16153
jmp 0x40cea8
and eax, 0x61d2
pop eax
mov ecx, dword [ebp - 0x7a0]
mov dword [ebp - 0x1a18], ecx
push 0
call dword [ebp - 0x1a18]
push edi
push esi
add esp, 4
or edi, 0xcc29
add edi, 0xe525
add edi, 0x13469
pop edi
push eax
or eax, 0x115dd
add eax, 0x6435
and eax, 0x13377
or eax, 0xa85b
pop eax
push edx
mov ecx, 0x10101010
pop edx
push ecx
mov ecx, 0xffff02ff
pop ecx
push esp
add esp, 0xffffffe2
jns 0x40cf0b
add al, byte [ebx + 0x281d6cc]
add al, byte [ebx + 0x2ea0ee4]
add al, byte [ebx + 0x2c725ec]
add bl, byte [ebp + edx*2 + 0x52]
test esi, eax
int3
ljmp 0xc725:0xec830202
push es
sub ebp, 0x13
and al, byte [edx]
add al, byte [ebx + 0x26598c5]
add al, byte [ebx + 0x27e2aed]
in eax, dx
sub bh, byte [esi + 2]
add bl, byte [ebp - 0x38]
xchg dword [edx + 0x490101f0], esi
enter 0xffffffffffffb387, 0xfffffffffffffff0
add dword [ecx], eax
enter 0xffffffffffffb487, 0xfffffffffffffff0
add dword [ecx], eax
jbe 0x40cf13
xchg dword [ebp + 0x4f0101f0], esi
enter 0xffffffffffffb687, 0xfffffffffffffff0
add dword [ecx], eax
jno 0x40cf21
xchg dword [edi + 0x660101f0], esi
enter 0xffffffffffffb887, 0xfffffffffffffff0
add dword [ecx], eax
ja 0x40cf2f
xchg dword [ecx + 0x6e0101f0], edi
enter 0xffffffffffffba87, 0xfffffffffffffff0
add dword [ecx], eax
enter 0xffffffffffffbb87, 0xfffffffffffffff0
add dword [ecx], eax
dec edx
enter 0xffffffffffffbc87, 0xfffffffffffffff0
add dword [ecx], eax
arpl ax, cx
xchg dword [ebp + 0x700101f0], edi
enter 0xffffffffffffbe87, 0xfffffffffffffff0
add dword [ecx], eax
enter 0xffffffffffffbf87, 0xfffffffffffffff0
add dword [ecx], eax
outsb dx, byte [esi]
enter 0xffffffffffffc087, 0xfffffffffffffff0
add dword [ecx], eax
enter 0xffffffffffffc187, 0xfffffffffffffff0
add dword [ecx], eax
pop ecx
enter 0xffffffffffffc287, 0xfffffffffffffff0
add dword [ecx], eax
add dl, byte [edx + 0x54]
test esi, eax
push es
xor edx, 0x68
sti
add al, byte [edx]
add edx, 0xffffff90
add al, byte fs:[edx]
pop edx
push ebp
add bl, byte [edx + 0x55]
pop ecx
test esi, eax
push es
and ebp, 0xfffffff4
in eax, 2
add al, byte [ebx + 0x33de4f5]
add bl, byte [ebp + 0x54]
add esp, 0xffffffd9
lea eax, [edx]
add al, byte [ebx + 0x2464dc4]
add bl, byte [eax + ecx*8 - 0x79]
les ecx, [ebp + 0x46]
add al, byte [edx]
pop esp
enter 0xffffffffffffde87, 0xfffffffffffffff0
xchg esi, ebx
lock add dword [ecx], eax
fdivrp st(0)
add dword [ecx], eax
dec eax
enter 0xffffffffffffdf87, 0xfffffffffffffff0
add dword [ecx], eax
xchg edi, ebx
lock add dword [ecx], eax
imul ecx, eax, 0xffffff87
loopne 0x40cfe0
xchg eax, esp
lock add dword [ecx], eax
add dword [ecx], eax
jo 0x40cfbc
xchg ecx, esp
lock add dword [ecx], eax
enter 0xffffffffffffe287, 0xfffffffffffffff0
add dword [ecx], eax
push esp
enter 0xffffffffffffe387, 0xfffffffffffffff0
add dword [ecx], eax
enter 0xffffffffffffe487, 0xfffffffffffffff0
add dword [ecx], eax
jne 0x40cfd8
xchg ebp, esp
lock add dword [ecx], eax
jno 0x40cfdf
xchg esi, esp
lock add dword [ecx], eax
ja 0x40cfe6
xchg edi, esp
lock add dword [ecx], eax
je 0x40cfed
xchg eax, ebp
lock add dword [ecx], eax
enter 0xffffffffffffe987, 0xfffffffffffffff0
add dword [ecx], eax
enter 0xffffffffffffea87, 0xfffffffffffffff0
add dword [ecx], eax
pop ecx
enter 0xffffffffffffeb87, 0xfffffffffffffff0
add dword [ecx], eax
add bl, byte [ecx - 0x7d]
int1
jl 0x40cfed