Function at 0x40b6f5
Capabilities:
Contain obfuscated stackstrings
Get number of processors
Parse pe header
Resolve function by parsing pe exports

Disassembly:
add esp, 4
and edx, 0x110e7
xor edx, 0x24ad
jmp 0x406386
pop edx
mov eax, 0x75
mov word [ebp - 0x189c], ax
mov ecx, 0x73
mov word [ebp - 0x189a], cx
mov edx, 0x65
mov word [ebp - 0x1898], dx
mov eax, 0x72
mov word [ebp - 0x1896], ax
mov ecx, 0x33
mov word [ebp - 0x1894], cx
mov edx, 0x32
mov word [ebp - 0x1892], dx
mov eax, 0x2e
mov word [ebp - 0x1890], ax
mov ecx, 0x64
mov word [ebp - 0x188e], cx
mov edx, 0x6c
mov word [ebp - 0x188c], dx
mov eax, 0x6c
mov word [ebp - 0x188a], ax
xor ecx, ecx
mov word [ebp - 0x1888], cx
mov byte [ebp - 0x8e0], 0x4d
mov byte [ebp - 0x8df], 0x65
mov byte [ebp - 0x8de], 0x73
mov byte [ebp - 0x8dd], 0x73
mov byte [ebp - 0x8dc], 0x61
mov byte [ebp - 0x8db], 0x67
mov byte [ebp - 0x8da], 0x65
mov byte [ebp - 0x8d9], 0x42
mov byte [ebp - 0x8d8], 0x6f
mov byte [ebp - 0x8d7], 0x78
mov byte [ebp - 0x8d6], 0x41
mov byte [ebp - 0x8d5], 0
mov byte [ebp - 0xce0], 0x41
mov byte [ebp - 0xcdf], 0x53
mov byte [ebp - 0xcde], 0x50
mov byte [ebp - 0xcdd], 0x2e
mov byte [ebp - 0xcdc], 0x4e
mov byte [ebp - 0xcdb], 0x45
mov byte [ebp - 0xcda], 0x54
mov byte [ebp - 0xcd9], 0x20
mov byte [ebp - 0xcd8], 0x43
mov byte [ebp - 0xcd7], 0x6f
mov byte [ebp - 0xcd6], 0x72
mov byte [ebp - 0xcd5], 0x65
mov byte [ebp - 0xcd4], 0x20
mov byte [ebp - 0xcd3], 0x44
mov byte [ebp - 0xcd2], 0x65
mov byte [ebp - 0xcd1], 0x73
mov byte [ebp - 0xcd0], 0x6b
mov byte [ebp - 0xccf], 0x74
mov byte [ebp - 0xcce], 0x6f
mov byte [ebp - 0xccd], 0x70
mov byte [ebp - 0xccc], 0x20
mov byte [ebp - 0xccb], 0x52
mov byte [ebp - 0xcca], 0x75
mov byte [ebp - 0xcc9], 0x6e
mov byte [ebp - 0xcc8], 0x74
mov byte [ebp - 0xcc7], 0x69
mov byte [ebp - 0xcc6], 0x6d
mov byte [ebp - 0xcc5], 0x65
mov byte [ebp - 0xcc4], 0x20
mov byte [ebp - 0xcc3], 0x38
mov byte [ebp - 0xcc2], 0x2e
mov byte [ebp - 0xcc1], 0x30
mov byte [ebp - 0xcc0], 0x2e
mov byte [ebp - 0xcbf], 0x33
mov byte [ebp - 0xcbe], 0x20
mov byte [ebp - 0xcbd], 0x69
mov byte [ebp - 0xcbc], 0x73
mov byte [ebp - 0xcbb], 0x20
mov byte [ebp - 0xcba], 0x6d
mov byte [ebp - 0xcb9], 0x69
mov byte [ebp - 0xcb8], 0x73
mov byte [ebp - 0xcb7], 0x73
mov byte [ebp - 0xcb6], 0x69
mov byte [ebp - 0xcb5], 0x6e
mov byte [ebp - 0xcb4], 0x67
mov byte [ebp - 0xcb3], 0x21
mov byte [ebp - 0xcb2], 0
mov byte [ebp - 0xcb0], 0x49
mov byte [ebp - 0xcaf], 0x6e
mov byte [ebp - 0xcae], 0x73
mov byte [ebp - 0xcad], 0x74
mov byte [ebp - 0xcac], 0x61
mov byte [ebp - 0xcab], 0x6c
mov byte [ebp - 0xcaa], 0x6c
mov byte [ebp - 0xca9], 0x65
mov byte [ebp - 0xca8], 0x72
mov byte [ebp - 0xca7], 0x20
mov byte [ebp - 0xca6], 0x45
mov byte [ebp - 0xca5], 0x72
mov byte [ebp - 0xca4], 0x72
mov byte [ebp - 0xca3], 0x6f
mov byte [ebp - 0xca2], 0x72
mov byte [ebp - 0xca1], 0x20
mov byte [ebp - 0xca0], 0x30
mov byte [ebp - 0xc9f], 0x78
mov byte [ebp - 0xc9e], 0x41
mov byte [ebp - 0xc9d], 0x44
mov byte [ebp - 0xc9c], 0x41
mov byte [ebp - 0xc9b], 0x44
mov byte [ebp - 0xc9a], 0x45
mov byte [ebp - 0xc99], 0x46
mov byte [ebp - 0xc98], 0x4c
mov byte [ebp - 0xc97], 0x4f
mov byte [ebp - 0xc96], 0
mov edx, dword [ebp - 0x2230]
mov dword [ebp - 0xb5c], edx
push eax
push esi
add esp, 4
and eax, 0x267f
and eax, 0x182cb
pop eax
push ecx
push eax
add esp, 4
or ecx, 0x526
add ecx, 0x125d9
and ecx, 0x214d
jmp 0x40669f
pop ecx
mov eax, dword fs:[0x18]
mov dword [ebp - 0x1f34], eax
mov ecx, dword [ebp - 0x1f34]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x1ffc], edx
mov eax, dword [ebp - 0x1ffc]
mov dword [ebp - 0x16d8], eax
push ebx
push edi
add esp, 4
sub ebx, 0x14da9
call 0x4066e1
add byte [0x503d353e], dh
inc ebx
inc ebx
dec esp
inc ecx
add esp, 4
pop ebx
push edx
or edx, 0xb1a0
pop edx
push eax
push esi
add esp, 4
add eax, 0xf03d
pop eax
cmp dword [ebp - 0x16d8], 0
jne 0x406711
mov dword [ebp - 0x340], 0
jmp 0x4069cd
mov ecx, dword [ebp - 0x16d8]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xd60], eax
push esi
push ecx
add esp, 4
sub esi, 0x5037
and esi, 0x2efb
add esi, 0x10790
xor esi, 0x7a07
pop esi
push eax
and eax, 0x18255
sub eax, 0x14ac8
sub eax, 0x142b0
pop eax
cmp dword [ebp - 0xd60], 0
jne 0x40676d
mov dword [ebp - 0x340], 0
jmp 0x4069cd
mov ecx, dword [ebp - 0xd60]
mov dword [ebp - 0x53c], ecx
push edi
push esi
add esp, 4
sub edi, 0xb2ae
pop edi
push ebx
and ebx, 0x56e7
pop ebx
push esi
push ebx
add esp, 4
call 0x40679f
add byte [esp + edi], bh
xor al, 0x3f
cmp eax, dword [ebp + 0x36]
add esp, 4
jmp 0x4067aa
pop esi
lea edx, [ebp - 0x189c]
mov dword [ebp - 0xd5c], edx
mov eax, dword [ebp - 0x53c]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xd58], ecx
xor edx, edx
mov word [ebp - 0x228], dx
xor eax, eax
mov word [ebp - 0x118], ax
push ecx
push ebx
add esp, 4
or ecx, 0x1011f
or ecx, 0x3fa9
and ecx, 0x164b2
pop ecx
push edx
and edx, 0x6972
or edx, 0x10fcf
and edx, 0x12bf6
xor edx, 0x854e
pop edx
mov ecx, dword [ebp - 0xd58]
mov dx, word [ecx]
mov word [ebp - 0x1136], dx
mov eax, dword [ebp - 0xd58]
add eax, 2
mov dword [ebp - 0xd58], eax
mov cx, word [ebp - 0x1136]
mov word [ebp - 0x228], cx
mov edx, dword [ebp - 0xd5c]
mov ax, word [edx]
mov word [ebp - 0x1138], ax
mov ecx, dword [ebp - 0xd5c]
add ecx, 2
mov dword [ebp - 0xd5c], ecx
mov dx, word [ebp - 0x1138]
mov word [ebp - 0x118], dx
push edx
push ecx
add esp, 4
call 0x406878
add byte [esi + 0x42], al
dec esp
inc ecx
aaa
cmp dword [esp + edi + 0x49], ecx
add esp, 4
add edx, 0xbbd0
and edx, 0xa992
pop edx
push esi
jmp 0x40688f
and esi, 0x12f26
pop esi
movzx eax, word [ebp - 0x118]
test eax, eax
jne 0x4068b9
movzx ecx, word [ebp - 0x228]
movzx edx, word [ebp - 0x118]
sub ecx, edx
mov dword [ebp - 0x16e4], ecx
jmp 0x40691c
movzx eax, word [ebp - 0x228]
movzx ecx, word [ebp - 0x118]
cmp eax, ecx
je 0x4067d8
movzx edx, word [ebp - 0x228]
xor edx, 0x20
movzx eax, word [ebp - 0x118]
cmp edx, eax
je 0x4067d8
movzx ecx, word [ebp - 0x228]
movzx edx, word [ebp - 0x118]
cmp ecx, edx
jge 0x406906
mov dword [ebp - 0x16e0], 0xffffffff
jmp 0x406910
mov dword [ebp - 0x16e0], 1
mov eax, dword [ebp - 0x16e0]
mov dword [ebp - 0x16e4], eax
cmp dword [ebp - 0x16e4], 0
jne 0x406965
push edx
push ecx
add esp, 4
and edx, 0x11cd
pop edx
push ebx
sub ebx, 0x4505
xor ebx, 0xee1a
xor ebx, 0xa7c4
call 0x406953
add byte [esi + 0x4c], al
inc ecx
xor al, 0x43
cmp byte [ebp + 0x38], cl
cmp al, byte [ebx - 0x74a4fb3c]
invalid
push eax
push edx
add esp, 4
sub eax, 0x81e4
pop eax
push ecx
or ecx, 0xa7ef
add ecx, 0x2c57
or ecx, 0xd60c
pop ecx
push ebx
jmp 0x40698b
jmp 0x406990
xor ebx, 0x27dd
pop ebx
mov edx, dword [ebp - 0x53c]
mov eax, dword [edx]
mov dword [ebp - 0x53c], eax
mov ecx, dword [ebp - 0x53c]
cmp ecx, dword [ebp - 0xd60]
je 0x4069c3
mov edx, dword [ebp - 0x53c]
cmp dword [edx + 0x30], 0
jne 0x406779
mov dword [ebp - 0x340], 0
push ecx
push esi
add esp, 4
add ecx, 0xa343
pop ecx
push ecx
sub ecx, 0x11a0c
add ecx, 0x11089
jmp 0x4069eb
or ecx, 0x15b4
pop ecx
push ecx
push eax
add esp, 4
jmp 0x4069fe
pop ecx
cmp dword [ebp - 0x340], 0
jne 0x407319
mov eax, 0x6b
mov word [ebp - 0x1908], ax
mov ecx, 0x65
mov word [ebp - 0x1906], cx
mov edx, 0x72
mov word [ebp - 0x1904], dx
mov eax, 0x6e
mov word [ebp - 0x1902], ax
mov ecx, 0x65
mov word [ebp - 0x1900], cx
mov edx, 0x6c
mov word [ebp - 0x18fe], dx
mov eax, 0x33
mov word [ebp - 0x18fc], ax
mov ecx, 0x32
mov word [ebp - 0x18fa], cx
mov edx, 0x2e
mov word [ebp - 0x18f8], dx
mov eax, 0x64
mov word [ebp - 0x18f6], ax
mov ecx, 0x6c
mov word [ebp - 0x18f4], cx
mov edx, 0x6c
mov word [ebp - 0x18f2], dx
xor eax, eax
mov word [ebp - 0x18f0], ax
push eax
add eax, 0xe913
or eax, 0x1196c
xor eax, 0x185ce
pop eax
push eax
sub eax, 0xfe53
sub eax, 0x14409
call 0x406ad3
add byte [edx], bh
dec edx
inc ebx
inc esp
cmp eax, 0xc4833b49
add al, 0x58
mov byte [ebp - 0x908], 0x4c
mov byte [ebp - 0x907], 0x6f
mov byte [ebp - 0x906], 0x61
mov byte [ebp - 0x905], 0x64
mov byte [ebp - 0x904], 0x4c
mov byte [ebp - 0x903], 0x69
mov byte [ebp - 0x902], 0x62
mov byte [ebp - 0x901], 0x72
mov byte [ebp - 0x900], 0x61
mov byte [ebp - 0x8ff], 0x72
mov byte [ebp - 0x8fe], 0x79
mov byte [ebp - 0x8fd], 0x57
mov byte [ebp - 0x8fc], 0
mov ecx, dword fs:[0x18]
mov dword [ebp - 0x2000], ecx
mov edx, dword [ebp - 0x2000]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x2004], eax
mov ecx, dword [ebp - 0x2004]
mov dword [ebp - 0x16e8], ecx
push edx
or edx, 0x15cb
sub edx, 0xa9a2
xor edx, 0xfc13
pop edx
push esi
push edx
add esp, 4
jmp 0x406b79
pop esi
push ebx
push edx
add esp, 4
add ebx, 0xe92f
jmp 0x406b8b
pop ebx
cmp dword [ebp - 0x16e8], 0
jne 0x406ba4
mov dword [ebp - 0x7ac], 0
jmp 0x406e60
mov edx, dword [ebp - 0x16e8]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0xd6c], ecx
push eax
and eax, 0xcbb4
pop eax
push edi
push eax
add esp, 4
or edi, 0x1873
or edi, 0xe968
or edi, 0x13ea7
or edi, 0x132c6
pop edi
push ebx
push ecx
add esp, 4
and ebx, 0x172dc
pop ebx
cmp dword [ebp - 0xd6c], 0
jne 0x406c00
mov dword [ebp - 0x7ac], 0
jmp 0x406e60
mov edx, dword [ebp - 0xd6c]
mov dword [ebp - 0x540], edx
push eax
push ebx
add esp, 4
add eax, 0x30eb
xor eax, 0x15060
or eax, 0x164e
or eax, 0xb56b
pop eax
push edx
add edx, 0xd11c
or edx, 0x134c7
sub edx, 0x89e0
pop edx
lea eax, [ebp - 0x1908]
mov dword [ebp - 0xd68], eax
mov ecx, dword [ebp - 0x540]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0xd64], edx
xor eax, eax
mov word [ebp - 0x22c], ax
xor ecx, ecx
mov word [ebp - 0x11c], cx
push edx
push ecx
add esp, 4
xor edx, 0x2a2e
sub edx, 0x7db
call 0x406c8b
add byte [ecx], bh
inc esi
dec ebp
xor ecx, dword [edi + 0x4e]
xor al, 0x32
dec esi
add esp, 4
xor edx, 0x14d8f
pop edx
push ebx
add ebx, 0x16bc
pop ebx
mov edx, dword [ebp - 0xd64]
mov ax, word [edx]
mov word [ebp - 0x113a], ax
mov ecx, dword [ebp - 0xd64]
add ecx, 2
mov dword [ebp - 0xd64], ecx
mov dx, word [ebp - 0x113a]
mov word [ebp - 0x22c], dx
mov eax, dword [ebp - 0xd68]
mov cx, word [eax]
mov word [ebp - 0x113c], cx
mov edx, dword [ebp - 0xd68]
add edx, 2
mov dword [ebp - 0xd68], edx
mov ax, word [ebp - 0x113c]
mov word [ebp - 0x11c], ax
push esi
and esi, 0x1484d
pop esi
push ebx
push ebx
add esp, 4
call 0x406d13
add byte [ebp + 0x4b], al
inc esi
cmp al, 0x4a
cmp esi, dword [ebx]
dec ebp
add esp, 4
and ebx, 0x9d1f
or ebx, 0x101fd
or ebx, 0x118e9
pop ebx
movzx ecx, word [ebp - 0x11c]
test ecx, ecx
jne 0x406d4c
movzx edx, word [ebp - 0x22c]
movzx eax, word [ebp - 0x11c]
sub edx, eax
mov dword [ebp - 0x16f0], edx
jmp 0x406daf
movzx ecx, word [ebp - 0x22c]
movzx edx, word [ebp - 0x11c]
cmp ecx, edx
je 0x406c6b
movzx eax, word [ebp - 0x22c]
xor eax, 0x20
movzx ecx, word [ebp - 0x11c]
cmp eax, ecx
je 0x406c6b
movzx edx, word [ebp - 0x22c]
movzx eax, word [ebp - 0x11c]
cmp edx, eax
jge 0x406d99
mov dword [ebp - 0x16ec], 0xffffffff
jmp 0x406da3
mov dword [ebp - 0x16ec], 1
mov ecx, dword [ebp - 0x16ec]
mov dword [ebp - 0x16f0], ecx
cmp dword [ebp - 0x16f0], 0
jne 0x406df8
push edi
and edi, 0xc060
xor edi, 0x1149b
sub edi, 0x15c2f
or edi, 0x4513
pop edi
push ecx
push ebx
add esp, 4
or ecx, 0xf41f
pop ecx
push eax
push ebx
add esp, 4
add eax, 0x3a6a
pop eax
mov edx, dword [ebp - 0x540]
mov dword [ebp - 0x7ac], edx
jmp 0x406e60
push ecx
push edx
add esp, 4
and ecx, 0x240e
and ecx, 0x58ad
add ecx, 0x1404d
pop ecx
push eax
xor eax, 0x74d7
call 0x406e26
add byte [esi], dh
dec ebp
dec edi
aas
dec edi
cmp dword [edi], edi
cmp edx, dword [eax - 0x7d]
les eax, [eax + ebx*2]
mov eax, dword [ebp - 0x540]
mov ecx, dword [eax]
mov dword [ebp - 0x540], ecx
mov edx, dword [ebp - 0x540]
cmp edx, dword [ebp - 0xd6c]
je 0x406e56
mov eax, dword [ebp - 0x540]
cmp dword [eax + 0x30], 0
jne 0x406c0c
mov dword [ebp - 0x7ac], 0
push edx
push esi
add esp, 4
add edx, 0x2fe1
and edx, 0xe103
add edx, 0x17d99
pop edx
push ecx
and ecx, 0x184
or ecx, 0x7d70
pop ecx
push ebx
push esi
add esp, 4
sub ebx, 0x9eb6
pop ebx
cmp dword [ebp - 0x7ac], 0
jne 0x406edc
push ebx
push edx
add esp, 4
xor ebx, 0x15c25
call 0x406eb2
add byte [edx + 0x39], cl
cmp al, byte [ecx + 0x44]
cmp al, 0x83
les eax, [ebx + ebx*2]
push ecx
and ecx, 0x8b30
call 0x406ec9
add byte [eax + edi], bh
inc esi
inc ecx
cmp byte [ebx - 0x38a6fb3c], al
test dword [esp + esi*8 + 0xffff], esp
add byte [eax], al
jmp 0x407a04
push edi
sub edi, 0x8059
pop edi
push edi
push eax
add esp, 4
add edi, 0x297
call 0x406efe
add byte [ecx + edi], dh
cmp eax, dword [ebp + 0x4a]
xor al, 0x49
xor eax, dword [edi - 0x7d]
les eax, [ecx + eax*4]
iretd
push edi
add edi, 0x1370e
sub edi, 0x101e3
add edi, 0x13880
pop edi
push ecx
push esi
add esp, 4
add ecx, 0x5397
add ecx, 0xd2ed
add ecx, 0x1015e
sub ecx, 0x9be9
pop ecx
mov ecx, dword fs:[0x18]
mov dword [ebp - 0x2020], ecx
mov edx, dword [ebp - 0x2020]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x2024], eax
mov ecx, dword [ebp - 0x2024]
mov dword [ebp - 0x1700], ecx
push esi
push ecx
add esp, 4
add esi, 0x3284
pop esi
push edi
jmp 0x407387
call 0x407393
add byte [ecx + 0x32], cl
push eax
dec esp
dec ebx
dec ecx
add esp, 4
add edi, 0x6db4
pop edi
push edx
xor edx, 0x6169
pop edx
cmp dword [ebp - 0x1700], 0
jne 0x4073bd
mov dword [ebp - 0x340], 0
jmp 0x407664
mov edx, dword [ebp - 0x1700]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0xd7c], ecx
push edx
sub edx, 0x170d6
or edx, 0xd352
or edx, 0x164c2
pop edx
push eax
push eax
add esp, 4
and eax, 0x2686
xor eax, 0x14e12
sub eax, 0x103d5
sub eax, 0x5a89
pop eax
cmp dword [ebp - 0xd7c], 0
jne 0x407419
mov dword [ebp - 0x340], 0
jmp 0x407664
mov edx, dword [ebp - 0xd7c]
mov dword [ebp - 0x544], edx
push esi
push ebx
add esp, 4
jmp 0x407431
sub esi, 0x96fb
pop esi
push edi
push edx
add esp, 4
add edi, 0x16fe6
jmp 0x407448
pop edi
push edx
sub edx, 0x141c0
add edx, 0x1c8f
pop edx
lea eax, [ebp - 0x189c]
mov dword [ebp - 0xd78], eax
mov ecx, dword [ebp - 0x544]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0xd74], edx
xor eax, eax
mov word [ebp - 0x230], ax
xor ecx, ecx
mov word [ebp - 0x34], cx
push edx
or edx, 0x17d96
or edx, 0x546b
jmp 0x407496
jmp 0x40749e
pop edx
push edi
call 0x4074af
add byte [edi], bh
inc edi
inc eax
inc esp
inc esp
dec edi
add esp, 4
pop edi
mov edx, dword [ebp - 0xd74]
mov ax, word [edx]
mov word [ebp - 0x113e], ax
mov ecx, dword [ebp - 0xd74]
add ecx, 2
mov dword [ebp - 0xd74], ecx
mov dx, word [ebp - 0x113e]
mov word [ebp - 0x230], dx
mov eax, dword [ebp - 0xd78]
mov cx, word [eax]
mov word [ebp - 0x1140], cx
mov edx, dword [ebp - 0xd78]
add edx, 2
mov dword [ebp - 0xd78], edx
mov ax, word [ebp - 0x1140]
mov word [ebp - 0x34], ax
push edx
push edx
add esp, 4
sub edx, 0x13b37
add edx, 0x6864
and edx, 0x804d
or edx, 0x15de6
pop edx
push esi
add esi, 0x11327
or esi, 0xe6af
and esi, 0x14650
pop esi
movzx ecx, word [ebp - 0x34]
test ecx, ecx
jne 0x407559
movzx edx, word [ebp - 0x230]
movzx eax, word [ebp - 0x34]
sub edx, eax
mov dword [ebp - 0x1708], edx
jmp 0x4075b3
movzx ecx, word [ebp - 0x230]
movzx edx, word [ebp - 0x34]
cmp ecx, edx
je 0x407481
movzx eax, word [ebp - 0x230]
xor eax, 0x20
movzx ecx, word [ebp - 0x34]
cmp eax, ecx
je 0x407481
movzx edx, word [ebp - 0x230]
movzx eax, word [ebp - 0x34]
cmp edx, eax
jge 0x40759d
mov dword [ebp - 0x1704], 0xffffffff
jmp 0x4075a7
mov dword [ebp - 0x1704], 1
mov ecx, dword [ebp - 0x1704]
mov dword [ebp - 0x1708], ecx
cmp dword [ebp - 0x1708], 0
jne 0x4075fc
push ebx
push edi
add esp, 4
and ebx, 0x16f3a
add ebx, 0x1242a
sub ebx, 0xfc10
pop ebx
push edi
or edi, 0x7e12
or edi, 0x1fe9
xor edi, 0xfd3e
add edi, 0x7138
pop edi
mov edx, dword [ebp - 0x544]
mov dword [ebp - 0x340], edx
jmp 0x407664
push ebx
add ebx, 0xc7a6
jmp 0x40760b
and ebx, 0xf2ad
pop ebx
push esi
jmp 0x40761b
add esi, 0xe095
add esi, 0x8a48
and esi, 0x2c3d
pop esi
mov eax, dword [ebp - 0x544]
mov ecx, dword [eax]
test dword [edx + edi*8 + 0x88bffff], edi
mov dword [ebp - 0x544], ecx
mov edx, dword [ebp - 0x544]
cmp edx, dword [ebp - 0xd7c]
je 0x40765a
mov eax, dword [ebp - 0x544]
cmp dword [eax + 0x30], 0
jne 0x407425
mov dword [ebp - 0x340], 0
push ebx
push ebx
add esp, 4
sub ebx, 0x9faf
pop ebx
push eax
or eax, 0xfa4a
and eax, 0x1487c
call 0x40768c
add byte [eax + 0x35], dl
inc esp
xor ecx, dword [esi + 0x49]
inc esp
xor cl, byte [edx - 0x7d]
les eax, [ecx + eax*4]
loopne 0x40762f
jmp 0x407694
add byte [eax - 0x75], bl
invalid
push 4
lea edx, [ebp - 0xcb0]
push edx
lea eax, [ebp - 0xce0]
push eax
push 0
call dword [ebp - 0xb5c]
mov ecx, 0x4d
mov word [ebp - 0x21e4], cx
mov edx, 0x42
mov word [ebp - 0x21e2], dx
mov eax, 0x53
mov word [ebp - 0x21e0], ax
mov ecx, 0x65
mov word [ebp - 0x21de], cx
mov edx, 0x72
mov word [ebp - 0x21dc], dx
mov eax, 0x76
mov word [ebp - 0x21da], ax
mov ecx, 0x69
mov word [ebp - 0x21d8], cx
mov edx, 0x63
mov word [ebp - 0x21d6], dx
mov eax, 0x65
add byte [eax], al
mov word [ebp - 0x21d4], ax
mov ecx, 0x2e
mov word [ebp - 0x21d2], cx
mov edx, 0x65
mov word [ebp - 0x21d0], dx
mov eax, 0x78
mov word [ebp - 0x21ce], ax
mov ecx, 0x65
mov word [ebp - 0x21cc], cx
xor edx, edx
mov word [ebp - 0x21ca], dx
mov dword [ebp - 0x1164], 1
push ecx
sub ecx, 0x821a
add ecx, 0xfc42
sub ecx, 0x810b
pop ecx
push ecx
push edx
add esp, 4
call 0x407af3
add byte [ebp + 0x37], cl
cmp eax, dword [ebp + 0x41]
xor eax, 0x833b3538
les eax, [ecx + eax*4]
leave
jne 0x407a7f
add dword [eax], eax
pop ecx
imul eax, dword [ebp - 0x1164], 0x138
add eax, 0x55f3663b
imul ecx, dword [ebp - 0x1164], 0x138
sub eax, ecx
xor eax, 0xabe912
imul eax, dword [ebp - 0x1164]
imul edx, dword [ebp - 0x1164], 0x138
sub eax, edx
mov dword [ebp - 0x1168], eax
push edi
push esi
add esp, 4
and edi, 0xddda
or edi, 0xad9a
or edi, 0x2418
add edi, 0xfc46
pop edi
push ecx
xor ecx, 0xacb5
or ecx, 0x803e
xor ecx, 0x10a28
pop ecx
mov dword [ebp - 0x10], 1
push ecx
add ecx, 0xfb3e
pop ecx
push edx
push eax
add esp, 4
jmp 0x407b85
pop edx
push esi
call 0x407b97
add byte [eax + 0x35], cl
cmp edi, dword [edi]
xor al, byte [esi + 0x48]
dec ebp
add esp, 4
sub esi, 0x151df
pop esi
imul eax, dword [ebp - 0x10], 0x138
add eax, 0x55f3663b
imul ecx, dword [ebp - 0x10], 0x138
sub eax, ecx
xor eax, 0x153c
imul eax, dword [ebp - 0x10]
imul edx, dword [ebp - 0x10], 0x138
sub eax, edx
mov dword [ebp - 0x14], eax
push eax
push esi
add esp, 4
or eax, 0x8f5
pop eax
push edi
jmp 0x407be0
pop edi
push eax
add eax, 0x7df
pop eax
push ecx
add ecx, 0xa379
sub ecx, 0x11a35
add ecx, 0xba45
pop ecx
push edi
sub edi, 0x12d9d
call 0x407c11
add byte [eax + edx*2], bh
dec esi
xor bh, byte [esi]
aaa
inc eax
add esp, 4
xor edi, 0x1208b
and edi, 0xa9e0
pop edi
push edx
xor edx, 0x150fc
xor edx, 0xee89
pop edx
mov dword [ebp - 0x2c], 1
push eax
push edx
add esp, 4
add eax, 0x3262
xor eax, 0x963e
xor eax, 0x184d9
pop eax
push edx
sub edx, 0x112c3
xor edx, 0x173cd
or edx, 0xa0cb
xor edx, 0x18492
pop edx
imul eax, dword [ebp - 0x2c], 0x138
add eax, 0x55f3663b
imul ecx, dword [ebp - 0x2c], 0x138
sub eax, ecx
xor eax, 0
imul eax, dword [ebp - 0x2c]
imul edx, dword [ebp - 0x2c], 0x138
sub eax, edx
mov dword [ebp - 0x30], eax
jmp 0x407e49
mov edx, dword [ebp - 0x1168]
mov eax, dword [ebp - 0x1164]
mov dword [ebp - 0x1770], edx
mov dword [ebp - 0x176c], eax
push edx
push ecx
add esp, 4
sub edx, 0x10a0d
pop edx
push esi
call 0x407e7b
add byte [eax + 0x3c], cl
cmp al, byte [edi + esi + 0x4f]
cmp al, byte [ebx - 0x397efb3c]
pushal
popal
add dword [eax], eax
or esi, 0x55e7
pop esi
push edi
and edi, 0xe356
pop edi
push esi
call 0x407ea3
add byte [edi], dh
cmp esi, dword [edx + esi]
inc ebp
dec esi
cmp dword [edi + 0x49], eax
add esp, 4
pop esi
push ecx
call 0x407eb5
add byte [esi + ecx*2], bh
cmp dword [edx], edi
inc ecx
dec ecx
inc eax
add esp, 4
or ecx, 0x11957
or ecx, 0x27c3
pop ecx
mov ecx, dword [ebp - 0x30]
add ecx, 0x138
imul edx, dword [ebp - 0x2c], 0x138
add edx, 0x55f3663b
imul eax, dword [ebp - 0x2c], 0x138
sub edx, eax
xor ecx, edx
imul ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x2048], ecx
push eax
push ebx
add esp, 4
xor eax, 0x4ea0
pop eax
push ebx
push eax
add esp, 4
call 0x407f10
add byte [esi], dh
dec esp
cmp al, 0x3a
xor eax, dword [ecx + 0x3e]
push eax
inc ebx
add esp, 4
pop ebx
push ecx
add ecx, 0x266d
add ecx, 0x1473d
pop ecx
mov ecx, dword [ebp - 0x1770]
add ecx, 0x138
imul edx, dword [ebp - 0x176c], 0x138
add edx, 0x55f3663b
imul eax, dword [ebp - 0x176c], 0x138
sub edx, eax
xor ecx, edx
imul ecx, dword [ebp - 0x176c]
mov dword [ebp - 0x2044], ecx
mov ecx, dword [ebp - 0x2044]
mov dword [ebp - 0x204c], ecx
mov edx, dword [ebp - 0x2048]
cmp edx, dword [ebp - 0x204c]
jae 0x407f7f
mov dword [ebp - 0x16dc], 1
jmp 0x407f89
mov dword [ebp - 0x16dc], 0
mov al, byte [ebp - 0x16dc]
mov byte [ebp - 0x3d9], al
movzx ecx, byte [ebp - 0x3d9]
test ecx, ecx
je 0x40affd
push esi
push ecx
add esp, 4
add esi, 0x11556
jmp 0x407fb6
and esi, 0x1717a
call 0x407fca
add byte [0x40484040], bh
inc edx
cmp al, 0x4e
add esp, 4
pop esi
push ebx
and ebx, 0xf64b
pop ebx
push ecx
xor ecx, 0x925e
jmp 0x407fe5
and ecx, 0xf81e
pop ecx
push esi
add esi, 0xbaba
pop esi
push edi
push esi
add esp, 4
and edi, 0xde8b
pop edi
push eax
sub eax, 0x11404
pop eax
mov edx, dword [ebp - 0x30]
add edx, 0x138
imul eax, dword [ebp - 0x2c], 0x138
add eax, 0x55f3663b
imul ecx, dword [ebp - 0x2c], 0x138
sub eax, ecx
xor edx, eax
imul edx, dword [ebp - 0x2c]
mov dword [ebp - 0x2050], edx
mov edx, dword [ebp - 0x2050]
mov dword [ebp - 0x2054], edx
cmp dword [ebp - 0x2054], 0x63c1
jne 0x408183
push ebx
or ebx, 0x10b71
call 0x408062
add byte [esi], bh
inc edi
xor edi, dword [edx]
push eax
dec eax
add esp, 4
pop ebx
push ecx
or ecx, 0x1364f
and ecx, 0x1253b
or ecx, 0x934d
and ecx, 0x12a30
pop ecx
mov eax, dword [ebp - 0x14]
add eax, 0x138
imul ecx, dword [ebp - 0x10], 0x138
add ecx, 0x55f3663b
imul edx, dword [ebp - 0x10], 0x138
sub ecx, edx
xor eax, ecx
imul eax, dword [ebp - 0x10]
mov dword [ebp - 0x2058], eax
mov eax, dword [ebp - 0x2058]
mov dword [ebp - 0x205c], eax
mov ecx, dword [ebp - 0x205c]
sub ecx, 0x898
mov dword [ebp - 0x2060], ecx
mov dword [ebp - 0x116c], 1
push ebx
push edx
add esp, 4
jmp 0x4080dd
and ebx, 0x14e5e
pop ebx
push ecx
push ecx
add esp, 4
and ecx, 0x9ed5
or ecx, 0x467b
pop ecx
push edx
jmp 0x4080fd
or edx, 0xc865
pop edx
imul edx, dword [ebp - 0x116c], 0x138
add edx, 0x55f3663b
imul eax, dword [ebp - 0x116c], 0x138
sub edx, eax
xor edx, dword [ebp - 0x2060]
imul edx, dword [ebp - 0x116c]
imul ecx, dword [ebp - 0x116c], 0x138
sub edx, ecx
mov dword [ebp - 0x1170], edx
mov edx, dword [ebp - 0x1170]
mov eax, dword [ebp - 0x116c]
mov dword [ebp - 0x14], edx
mov dword [ebp - 0x10], eax
push edx
push ebx
add esp, 4
xor edx, 0xa939
jmp 0x408164
sub edx, 0x14a13
pop edx
push ebx
push esi
add esp, 4
xor ebx, 0x69ea
xor ebx, 0x1752
add ebx, 0x7ea6
pop ebx
push ecx
jmp 0x40818a
xor ecx, 0x5310
add ecx, 0x16fa7
xor ecx, 0xa46c
pop ecx
push edx
push edx
add esp, 4
add edx, 0xbb43
add edx, 0x8085
and edx, 0xa21c
pop edx
mov ecx, dword [ebp - 0x14]
add ecx, 0x138
imul edx, dword [ebp - 0x10], 0x138
add edx, 0x55f3663b
imul eax, dword [ebp - 0x10], 0x138
sub edx, eax
xor ecx, edx
imul ecx, dword [ebp - 0x10]
mov dword [ebp - 0x2064], ecx
mov ecx, dword [ebp - 0x2064]
mov dword [ebp - 0x20d0], ecx
lea edx, [ebp - 0xa30]
mov dword [ebp - 0x418], edx
mov eax, dword [ebp - 0x418]
mov dword [eax + 4], 1
push edx
jmp 0x40820c
call 0x40821b
add byte [esp + esi + 0x40], cl
push eax
aas
xor edi, dword [esi]
inc esp
dec eax
add esp, 4
pop edx
push ecx
push eax
add esp, 4
or ecx, 0x17d3b
pop ecx
push eax
push esi
add esp, 4
xor eax, 0x17f96
pop eax
mov ecx, dword [ebp - 0x418]
imul edx, dword [ecx + 4], 0x138
add edx, 0x55f3663b
mov eax, dword [ebp - 0x418]
imul ecx, dword [eax + 4], 0x138
sub edx, ecx
xor edx, 0x23
mov eax, dword [ebp - 0x418]
imul edx, dword [eax + 4]
mov ecx, dword [ebp - 0x418]
imul eax, dword [ecx + 4], 0x138
sub edx, eax
mov ecx, dword [ebp - 0x418]
mov dword [ecx], edx
mov edx, dword [ebp - 0x418]
mov dword [ebp - 0x2234], edx
push esi
sub esi, 0xd075
add esi, 0x107b4
pop esi
push ecx
xor ecx, 0xeac5
pop ecx
push edx
xor edx, 0x72ec
pop edx
push edx
jmp 0x4082ae
sub edx, 0x52b8
sub edx, 0x13f41
pop edx
mov dword [ebp - 0x1720], 1
push eax
sub eax, 0xb26f
call 0x4082d9
add byte [edi + 0x3f], al
aaa
dec esp
inc esi
dec edx
add esp, 4
pop eax
push edi
add edi, 0x15994
and edi, 0x19f3
jmp 0x4082f0
or edi, 0x748e
pop edi
mov dword [ebp - 0x2238], 0x38
mov dword [ebp - 0x223c], 0xe6
mov dword [ebp - 0x2240], 0x6e
mov dword [ebp - 0x2244], 0x6e
mov dword [ebp - 0x2248], 0x78
mov dword [ebp - 0x1774], 1
push eax
push edx
add esp, 4
xor eax, 0xedef
call 0x40834d
add byte [eax + 0x40], dl
inc ebx
cmp al, 0x40
inc esp
xor eax, 0xc4834a37
add al, 0x81
loopne 0x4082d7
lahf
add byte [eax], al
pop eax
push edi
push edi
add esp, 4
jmp 0x408364
pop edi
imul eax, dword [ebp - 0x1774], 0x138
add eax, 0x55f3663b
imul ecx, dword [ebp - 0x1774], 0x138
sub eax, ecx
xor eax, 0xe6
imul eax, dword [ebp - 0x1774]
imul edx, dword [ebp - 0x1774], 0x138
sub eax, edx
mov dword [ebp - 0x1778], eax
push esi
push ebx
add esp, 4
xor esi, 0x12a9f
sub esi, 0x10c0a
pop esi
push esi
sub esi, 0x14b77
pop esi
push eax
push edi
add esp, 4
or eax, 0x15299
xor eax, 0x7c36
sub eax, 0x4c
pop eax
push ecx
push edi
add esp, 4
add ecx, 0x1dc6
sub ecx, 0xdb34
sub ecx, 0x161d8
pop ecx
push ecx
push edx
add esp, 4
add ecx, 0xa159
jmp 0x4083fb
sub ecx, 0x16e9b
pop ecx
mov eax, dword [ebp - 0xa30]
add eax, 0x138
imul ecx, dword [ebp - 0xa2c], 0x138
add ecx, 0x55f3663b
imul edx, dword [ebp - 0xa2c], 0x138
sub ecx, edx
xor eax, ecx
imul eax, dword [ebp - 0xa2c]
mov dword [ebp - 0x2068], eax
mov eax, dword [ebp - 0x2068]
mov dword [ebp - 0x206c], eax
mov ecx, dword [ebp - 0x206c]
sub ecx, 0x6e
mov dword [ebp - 0x2070], ecx
mov dword [ebp - 0xaf4], 1
push esi
sub esi, 0x3d40
pop esi
push ecx
jmp 0x40846b
pop ecx
push eax
push esi
add esp, 4
xor eax, 0x28e9
xor eax, 0x5d1d
xor eax, 0x9b00
pop eax
push edi
jmp 0x40848e
pop edi
imul edx, dword [ebp - 0xaf4], 0x138
add edx, 0x55f3663b
imul eax, dword [ebp - 0xaf4], 0x138
sub edx, eax
xor edx, dword [ebp - 0x2070]
imul edx, dword [ebp - 0xaf4]
imul ecx, dword [ebp - 0xaf4], 0x138
sub edx, ecx
mov dword [ebp - 0xaf8], edx
push ebx
push ebx
add esp, 4
and ebx, 0xff60
call 0x4084e3
add byte [edi + 0x41], cl
inc esp
aaa
dec ebx
cmp dh, byte [0x4c48340]
jmp 0x4084ec
call 0x4084f8
add byte [edx], dh
dec ebp
cmp esi, dword [edi]
xor al, byte [ebx + eax*4 - 0x3c]
add al, 0x5b
mov edx, dword [ebp - 0xa30]
add edx, 0x138
imul eax, dword [ebp - 0xa2c], 0x138
add eax, 0x55f3663b
imul ecx, dword [ebp - 0xa2c], 0x138
sub eax, ecx
xor edx, eax
imul edx, dword [ebp - 0xa2c]
mov dword [ebp - 0x2074], edx
mov edx, dword [ebp - 0x2074]
mov dword [ebp - 0x2078], edx
mov eax, dword [ebp - 0x2078]
add eax, 0x38
mov dword [ebp - 0x207c], eax
mov dword [ebp - 0xafc], 1
push edi
push edx
add esp, 4
or edi, 0x147d9
pop edi
push edi
or edi, 0x1bb8
and edi, 0xe021
pop edi
push esi
push esi
add esp, 4
sub esi, 0xd250
sub esi, 0x1649b
add esi, 0x14a43
pop esi
imul ecx, dword [ebp - 0xafc], 0x138
add ecx, 0x55f3663b
imul edx, dword [ebp - 0xafc], 0x138
sub ecx, edx
xor ecx, dword [ebp - 0x207c]
imul ecx, dword [ebp - 0xafc]
imul eax, dword [ebp - 0xafc], 0x138
sub ecx, eax
mov dword [ebp - 0xb00], ecx
push edi
jmp 0x4085ca
add edi, 0x77ca
call 0x4085de
add byte [ebp + 0x47], cl
dec ecx
inc esi
dec esi
xor eax, 0xc4833f3f
add al, 0x5f
push esi
or esi, 0x1700a
or esi, 0x155db
xor esi, 0xc7c7
pop esi
push eax
push esi
add esp, 4
add eax, 0x8a41
and eax, 0x11dc6
call 0x408616
add byte [edx], bh
xor al, 0x37
inc edx
inc esi
inc ecx
xor eax, 0xc4834746
add al, 0x81
loopne 0x40868d
fild word [eax]
add byte [eax + 0x56], bl
xor esi, 0xe31f
pop esi
mov dword [ebp - 0x310], 1
push ecx
push esi
add esp, 4
call 0x408646
add byte [eax], bh
inc edi
inc ebx
dec edx
inc ebx
aaa
dec edi
xor dl, byte [eax - 0x7d]
les eax, [ecx + ebx*2]
push edx
and edx, 0x2a34
xor edx, 0x10857
add edx, 0xffb1
xor edx, 0x10d62
pop edx
imul ecx, dword [ebp - 0x310], 0x138
add ecx, 0x55f3663b
imul edx, dword [ebp - 0x310], 0x138
sub ecx, edx
xor ecx, 2
imul ecx, dword [ebp - 0x310]
imul eax, dword [ebp - 0x310], 0x138
sub ecx, eax
mov dword [ebp - 0x314], ecx
push edi
push edi
add esp, 4
xor edi, 0x140af
sub edi, 0x5956
and edi, 0x155b3
pop edi
push edi
and edi, 0x1743c
or edi, 0x10480
and edi, 0x110a1
sub edi, 0x45be
pop edi
mov ecx, dword [ebp - 0xa30]
mov edx, dword [ebp - 0xa2c]
mov dword [ebp - 0x294], ecx
mov dword [ebp - 0x290], edx
jmp 0x4088bd
cld
invalid
push esi
push ebx
add esp, 4
xor esi, 0x13c1c
sub esi, 0x9de3
pop esi
push edi
call 0x40870d
add byte [esi], bh
dec eax
push eax
xor ecx, dword [esi + 0x3b]
cmp byte ds:[ebx], bh
add esp, 4
jmp 0x408716
sub edi, 0xcbc
pop edi
mov eax, dword [ebp - 0x294]
add eax, 0x138
imul ecx, dword [ebp - 0x290], 0x138
add ecx, 0x55f3663b
imul edx, dword [ebp - 0x290], 0x138
sub ecx, edx
xor eax, ecx
imul eax, dword [ebp - 0x290]
mov dword [ebp - 0x2080], eax
push esi
call 0x408761
add byte [eax + edi], dh
inc eax
inc edi
xor al, byte [eax + 0x47]
add esp, 4
or esi, 0x847a
pop esi
push edi
push ebx
add esp, 4
and edi, 0x144d6
jmp 0x40877e
or edi, 0x1320
pop edi
mov eax, dword [ebp - 0x2080]
sub eax, 1
mov dword [ebp - 0x171c], eax
push edx
push edx
add esp, 4
sub edx, 0x11b05
jmp 0x4087a8
pop edx
push edx
xor edx, 0xbcb4
add edx, 0x84f2
add edx, 0xbb58
pop edx
push ecx
jmp 0x4087c5
pop ecx
push ecx
and ecx, 0x1a1b
pop ecx
push eax
push edi
add esp, 4
add eax, 0x301f
pop eax
push esi
push ecx
add esp, 4
add esi, 0xa7c5
and esi, 0x246b
xor esi, 0xb44a
and esi, 0x825d
pop esi
imul ecx, dword [ebp - 0x290], 0x138
add ecx, 0x55f3663b
imul edx, dword [ebp - 0x290], 0x138
sub ecx, edx
xor ecx, dword [ebp - 0x171c]
imul ecx, dword [ebp - 0x290]
imul eax, dword [ebp - 0x290], 0x138
sub ecx, eax
mov dword [ebp - 0x294], ecx
mov ecx, dword [ebp - 0x171c]
imul ecx, dword [ebp - 0x290]
mov dword [ebp - 0x2084], ecx
mov dword [ebp - 0x177c], 1
push edx
push esi
add esp, 4
or edx, 0xc0d2
add edx, 0x1e33
sub edx, 0x132e6
xor edx, 0x7620
pop edx
push ebx
add ebx, 0x932c
add ebx, 0x1690c
add ebx, 0x166c4
pop ebx
imul edx, dword [ebp - 0x177c], 0x138
add edx, 0x55f3663b
imul eax, dword [ebp - 0x177c], 0x138
sub edx, eax
xor edx, dword [ebp - 0x2084]
imul edx, dword [ebp - 0x177c]
imul ecx, dword [ebp - 0x177c], 0x138
sub edx, ecx
mov dword [ebp - 0x1780], edx
push eax
push ebx
add esp, 4
and eax, 0x2e73
add eax, 0x1243
pop eax
push ebx
sub ebx, 0x8a28
and ebx, 0x31ef
sub ebx, 0x3196
pop ebx
push eax
push eax
add esp, 4
add eax, 0x11761
pop eax
mov edx, dword [ebp - 0x294]
add edx, 0x138
imul eax, dword [ebp - 0x290], 0x138
add eax, 0x55f3663b
imul ecx, dword [ebp - 0x290], 0x138
sub eax, ecx
xor edx, eax
imul edx, dword [ebp - 0x290]
mov dword [ebp - 0x2088], edx
mov edx, dword [ebp - 0x2088]
mov dword [ebp - 0x208c], edx
cmp dword [ebp - 0x208c], 0
jbe 0x408e33
std
invalid
push ecx
push ecx
add esp, 4
jmp 0x40894c
pop ecx
push ebx
push esi
add esp, 4
call 0x408960
add byte [ebx + 0x41], cl
dec ebx
inc eax
aas
dec ebp
cmp dword [ebx - 0x1c7efb3c], eax
jns 0x4088fe
add byte [eax], al
and ebx, 0x4e67
pop ebx
mov eax, dword [ebp - 0x294]
add eax, 0x138
imul ecx, dword [ebp - 0x290], 0x138
add ecx, 0x55f3663b
imul edx, dword [ebp - 0x290], 0x138
sub ecx, edx
xor eax, ecx
imul eax, dword [ebp - 0x290]
mov dword [ebp - 0x2090], eax
mov eax, dword [ebp - 0x2090]
mov dword [ebp - 0x209c], eax
push eax
push ebx
add esp, 4
and eax, 0x17eb7
or eax, 0x1cdf
pop eax
push esi
push edx
add esp, 4
add esi, 0xb558
xor esi, 0x88ff
and esi, 0x13c84
pop esi
push ebx
sub ebx, 0x3f1f
pop ebx
mov ecx, dword [ebp - 0xaf8]
add ecx, 0x138
imul edx, dword [ebp - 0xaf4], 0x138
add edx, 0x55f3663b
imul eax, dword [ebp - 0xaf4], 0x138
sub edx, eax
xor ecx, edx
imul ecx, dword [ebp - 0xaf4]
mov dword [ebp - 0x2094], ecx
mov ecx, dword [ebp - 0x2094]
mov dword [ebp - 0x2098], ecx
mov edx, dword [ebp - 0x1720]
imul edx, dword [ebp - 0x2098]
cmp dword [ebp - 0x209c], edx
jne 0x408bb6
push esi
push edx
add esp, 4
xor esi, 0x1086a
pop esi
push esi
push edx
add esp, 4
call 0x408a5d
add byte [ecx + 0x4e], cl
xor ecx, dword [ebx + 0x44]
dec esi
add esp, 4
call 0x408a6e
add byte [edx], bh
aas
xor eax, 0x4d4d3d38
dec eax
add esp, 4
pop esi
push esi
xor esi, 0x13829
pop esi
push esi
push ebx
add esp, 4
jmp 0x408a88
pop esi
push edx
push esi
add esp, 4
jmp 0x408a96
or edx, 0x10310
jmp 0x408aa3
pop edx
mov eax, dword [ebp - 0x314]
add eax, 0x138
imul ecx, dword [ebp - 0x310], 0x138
add ecx, 0x55f3663b
imul edx, dword [ebp - 0x310], 0x138
xchg ebp, eax
invalid
cld
invalid
invalid
cmp byte [ecx], al
add byte [eax], al
sub ecx, edx
xor eax, ecx
imul eax, dword [ebp - 0x310]
mov dword [ebp - 0x20a0], eax
mov eax, dword [ebp - 0x20a0]
mov dword [ebp - 0x20a4], eax
mov ecx, dword [ebp - 0x20a4]
sub ecx, 1
mov dword [ebp - 0x20a8], ecx
mov dword [ebp - 0x1174], 1
push ecx
call 0x408b0d
add byte [eax + edi], bh
dec esp
dec eax
cmp cl, byte [ebp + 0x44]
add esp, 4
jmp 0x408b17
pop ecx
push edi
push edi
add esp, 4
jmp 0x408b22
xor edi, 0x11512
pop edi
push esi
xor esi, 0xcdc7
pop esi
imul edx, dword [ebp - 0x1174], 0x138
add edx, 0x55f3663b
imul eax, dword [ebp - 0x1174], 0x138
sub edx, eax
xor edx, dword [ebp - 0x20a8]
imul edx, dword [ebp - 0x1174]
imul ecx, dword [ebp - 0x1174], 0x138
sub edx, ecx
mov dword [ebp - 0x1178], edx
mov edx, dword [ebp - 0x1178]
mov eax, dword [ebp - 0x1174]
mov dword [ebp - 0x314], edx
mov dword [ebp - 0x310], eax
push esi
and esi, 0xc621
call 0x408b9a
add byte [esp + ecx*2 + 0x40], al
aaa
dec edi
cmp eax, 0x834c3e4f
les eax, [ecx + eax*4]
out 0xc, al
aaa
add dword [eax], eax
or esi, 0x8151
pop esi
push esi
push esi
add esp, 4
xor esi, 0xb00a
pop esi
push esi
push edx
add esp, 4
and esi, 0x3d82
xor esi, 0x11f4e
pop esi
push eax
push ecx
add esp, 4
jmp 0x408bd5
sub eax, 0xc620
sub eax, 0x1223
xor eax, 0x11b93
pop eax
mov ecx, dword [ebp - 0x294]
add ecx, 0x138
imul edx, dword [ebp - 0x290], 0x138
add edx, 0x55f3663b
imul eax, dword [ebp - 0x290], 0x138
sub edx, eax
xor ecx, edx
imul ecx, dword [ebp - 0x290]
mov dword [ebp - 0x20ac], ecx
mov ecx, dword [ebp - 0x20ac]
mov dword [ebp - 0x20b8], ecx
push edi
jmp 0x408c35
add edi, 0x4381
call 0x408c47
add byte [edi], bh
cmp edi, dword [ecx]
dec edi
xor al, 0x42
add esp, 4
xor edi, 0xe83d
pop edi
push edx
push eax
add esp, 4
sub edx, 0x58bc
pop edx
mov edx, dword [ebp - 0xb00]
add edx, 0x138
imul eax, dword [ebp - 0xafc], 0x138
add eax, 0x55f3663b
imul ecx, dword [ebp - 0xafc], 0x138
sub eax, ecx
xor edx, eax
imul edx, dword [ebp - 0xafc]
mov dword [ebp - 0x20b0], edx
mov edx, dword [ebp - 0x20b0]
mov dword [ebp - 0x20b4], edx
mov eax, dword [ebp - 0x1720]
imul eax, dword [ebp - 0x20b4]
cmp dword [ebp - 0x20b8], eax
jne 0x408e2e
push ecx
push ecx
add esp, 4
and ecx, 0xe2fd
or ecx, 0x10e3a
xor ecx, 0xee51
sub ecx, 0x1b3b
pop ecx
push edx
and edx, 0x12774
xor edx, 0xf438
and edx, 0x147ec
pop edx
push ecx
and ecx, 0x10c30
call 0x408d00
add byte [edx], bh
push eax
inc ebp
inc ecx
inc ebx
dec ebx
inc ebx
inc ebp
add esp, 4
pop ecx
push ebx
push esi
add esp, 4
xor ebx, 0x105d4
or ebx, 0xfded
xor ebx, 0xcdb7
pop ebx
mov ecx, dword [ebp - 0x314]
add ecx, 0x138
imul edx, dword [ebp - 0x310], 0x138
add edx, 0x55f3663b
imul eax, dword [ebp - 0x310], 0x138
sub edx, eax
xor ecx, edx
imul ecx, dword [ebp - 0x310]
mov dword [ebp - 0x20bc], ecx
mov ecx, dword [ebp - 0x20bc]
mov dword [ebp - 0x20c0], ecx
mov edx, dword [ebp - 0x20c0]
xchg ebp, eax
inc eax
invalid
invalid
inc dword [ebx - 0x6a76fe16]
cmp al, 0xdf
invalid
inc edi
test dword [esi + ebp*8 + 0x1ffff], eax
add byte [eax], al
push eax
push ecx
add esp, 4
sub eax, 0x21bf
add eax, 0x27bf
pop eax
push edi
xor edi, 0x42c1
pop edi
push edx
push edi
add esp, 4
sub edx, 0x14aef
xor edx, 0x971e
or edx, 0x14e8c
pop edx
imul eax, dword [ebp - 0x117c], 0x138
add eax, 0x55f3663b
imul ecx, dword [ebp - 0x117c], 0x138
sub eax, ecx
xor eax, dword [ebp - 0x20c4]
imul eax, dword [ebp - 0x117c]
imul edx, dword [ebp - 0x117c], 0x138
sub eax, edx
mov dword [ebp - 0x1180], eax
mov eax, dword [ebp - 0x1180]
mov ecx, dword [ebp - 0x117c]
mov dword [ebp - 0x314], eax
mov dword [ebp - 0x310], ecx
push ebx
sub ebx, 0x2da4
and ebx, 0x3c82
add ebx, 0xcb5e
pop ebx
push edx
jmp 0x408e19
pop edx
push edi
xor edi, 0xeba1
and edi, 0x5e4f
and edi, 0xdfe6
pop edi
jmp 0x4086eb
push edi
push edi
add esp, 4
xor edi, 0x85e4
add edi, 0xb103
pop edi
push esi
push edi
add esp, 4
add esi, 0xaa1e
and esi, 0xbe93
pop esi
push esi
jmp 0x408e5e
xor esi, 0xbb5
pop esi
mov edx, dword [ebp - 0x314]
mov eax, dword [ebp - 0x310]
mov dword [ebp - 0x2200], edx
mov dword [ebp - 0x21fc], eax
lea ecx, [ebp - 0x2200]
mov dword [ebp - 0x20c8], ecx
mov edx, dword [ebp - 0x20c8]
mov dword [ebp - 0xb58], edx
push edx
push edi
add esp, 4
or edx, 0x13d8d
jmp 0x408ea7
add edx, 0x16605
pop edx
push esi
jmp 0x408eb4
and esi, 0xd033
and esi, 0x6a45
sub esi, 0x18048
pop esi
mov eax, dword [ebp - 0xb58]
mov ecx, dword [eax]
add ecx, 0x138
mov edx, dword [ebp - 0xb58]
imul eax, dword [edx + 4], 0x138
add eax, 0x55f3663b
mov edx, dword [ebp - 0xb58]
imul edx, dword [edx + 4], 0x138
sub eax, edx
xor ecx, eax
mov eax, dword [ebp - 0xb58]
imul ecx, dword [eax + 4]
mov dword [ebp - 0x20cc], ecx
mov ecx, dword [ebp - 0x20cc]
mov dword [ebp - 0x20d4], ecx
mov edx, dword [ebp - 0x20d0]
sub edx, dword [ebp - 0x20d4]
mov dword [ebp - 0x20d8], edx
mov dword [ebp - 0x1184], 1
push eax
add eax, 0x1658b
add eax, 0x80c7
jmp 0x408f43
add eax, 0x180b9
pop eax
push edi
call 0x408f58
add byte [esi], bh
dec esi
inc edi
xor bh, byte [edx]
xor esi, dword [ebx]
add esp, 4
and edi, 0xd959
pop edi
imul eax, dword [ebp - 0x1184], 0x138
add eax, 0x55f3663b
imul ecx, dword [ebp - 0x1184], 0x138
sub eax, ecx
xor eax, dword [ebp - 0x20d8]
imul eax, dword [ebp - 0x1184]
imul edx, dword [ebp - 0x1184], 0x138
sub eax, edx
mov dword [ebp - 0x1188], eax
mov eax, dword [ebp - 0x1188]
mov ecx, dword [ebp - 0x1184]
mov dword [ebp - 0x14], eax
mov dword [ebp - 0x10], ecx
push edx
push ecx
add esp, 4
jmp 0x408fb9
call 0x408fc6
add byte [eax + 0x40], dl
dec edx
cmp eax, dword [esi + 0x33]
dec ecx
add esp, 4
pop edx
push esi
push ecx
add esp, 4
jmp 0x408fd7
pop esi
push edx
jmp 0x408fdf
pop edx
push ebx
call 0x408fed
add byte [eax], bh
dec ebx
dec edi
dec esi
cmp al, byte [ebx - 0x7d]
les eax, [ecx + eax*4]
pop edi
or eax, dword [eax]
add al, ch
pop es
add byte [eax], al
add byte [eax], al
aas
cmp dh, byte [ebx]
push eax
inc ebp
xor al, 0x83
les eax, [ebx + ebx*2]
push edi
push esi
add esp, 4
add edi, 0x142f1
pop edi
mov edx, dword [ebp - 0x14]
add edx, 0x138
imul eax, dword [ebp - 0x10], 0x138
add eax, 0x55f3663b
imul ecx, dword [ebp - 0x10], 0x138
sub eax, ecx
xor edx, eax
imul edx, dword [ebp - 0x10]
mov dword [ebp - 0x20dc], edx
mov edx, dword [ebp - 0x20dc]
mov dword [ebp - 0x2148], edx
lea eax, [ebp - 0xa38]
mov dword [ebp - 0x420], eax
mov ecx, dword [ebp - 0x420]
mov dword [ecx + 4], 1
push ecx
or ecx, 0x5b86
call 0x409078
add byte [esi + 0x38], cl
cmp al, 0x37
inc ecx
dec eax
dec esi
inc edi
push eax
inc ebx
add esp, 4
call 0x409089
add byte [edi + 0x40], cl
inc eax
inc ebx
cmp dh, byte [edx]
inc edi
cmp al, 0x83
les eax, [ecx + eax*4]
rcl dword [esi + 0x590000a8], 0x8b
xchg ebp, eax
loopne 0x409092
pop ecx
mov edx, dword [ebp - 0x420]
imul eax, dword [edx + 4], 0x138
add eax, 0x55f3663b
mov ecx, dword [ebp - 0x420]
imul edx, dword [ecx + 4], 0x138
sub eax, edx
xor eax, 0x19
mov ecx, dword [ebp - 0x420]
imul eax, dword [ecx + 4]
mov edx, dword [ebp - 0x420]
imul ecx, dword [edx + 4], 0x138
sub eax, ecx
mov edx, dword [ebp - 0x420]
mov dword [edx], eax
mov eax, dword [ebp - 0x420]
mov dword [ebp - 0x224c], eax
push edi
push ecx
add esp, 4
add edi, 0xcf9d
call 0x4090fb
add byte [edi + 0x47], al
aas
inc ecx
dec edx
add esp, 4
call 0x40910c
add byte [ebx + 0x3f], al
dec ebp
inc esp
inc ecx
xor al, 0x41
cmp eax, dword [ebx - 0x87efb3c]
cmp byte [eax + eax - 0x7a38a100], dl
fsubr st(0)
invalid
invalid
mov dword [ebp - 0x428], 0
call 0x40b00c
mov eax, 0x13379797
pop eax
mov dword [ebp - 0x428], eax
push edi
push edi
add esp, 4
and edi, 0x15d04
sub edi, 0x12193
or edi, 0x14ea4
add edi, 0x95b
pop edi
push eax
or eax, 0x1ca2
pop eax
push esi
push esi
add esp, 4
add esi, 0x12590
pop esi
mov edx, dword [ebp - 0x227c]
mov dword [ebp - 0x1734], edx
push ecx
push ecx
add esp, 4
or ecx, 0xcf25
and ecx, 0x3d7f
and ecx, 0x486f
or ecx, 0x17579
pop ecx
push ecx
or ecx, 0xa7cc
and ecx, 0x11fba
and ecx, 0x143a4
pop ecx
mov eax, dword [ebp - 0x14]
add eax, 0x138
imul ecx, dword [ebp - 0x10], 0x138
add ecx, 0x55f3663b
imul edx, dword [ebp - 0x10], 0x138
sub ecx, edx
xor eax, ecx
imul eax, dword [ebp - 0x10]
mov dword [ebp - 0x1734], eax
mov eax, dword [ebp - 0x428]
mov dword [ebp - 0x1b24], eax
mov ecx, dword [ebp - 0x1b24]
add ecx, dword [ebp - 0x1734]
mov dword [ebp - 0x428], ecx
push esi
push eax
add esp, 4
call 0x40b0e2
add byte [edx], dh
cmp dh, byte [0x423c3c48]
add esp, 4
add esi, 0x5ec7
pop esi
push eax
add eax, 0x5e58
pop eax
push esi
add esi, 0x282
and esi, 0x5c1
pop esi
mov byte [ebp - 0xc74], 0x52
mov byte [ebp - 0xc73], 0xb9
mov byte [ebp - 0xc72], 0x10
mov byte [ebp - 0xc71], 0x10
mov byte [ebp - 0xc70], 0x10
mov byte [ebp - 0xc6f], 0x10
mov byte [ebp - 0xc6e], 0x5a
push esi
and esi, 0x13d4d
or esi, 0x9754
and esi, 0x166a1
pop esi
push ebx
push edi
add esp, 4
or ebx, 0xace2
and ebx, 0x11ace
xor ebx, 0x9c3
xor ebx, 0x3562
pop ebx
mov byte [ebp - 0xc6c], 0x52
mov byte [ebp - 0xc6b], 0xb9
mov byte [ebp - 0xc6a], 0x20
mov byte [ebp - 0xc69], 0x20
mov byte [ebp - 0xc68], 0x20
mov byte [ebp - 0xc67], 0x20
mov byte [ebp - 0xc66], 0x5a
push ebx
and ebx, 0x5741
add ebx, 0x9c52
sub ebx, 0xd02a
pop ebx
push ecx
push esi
add esp, 4
xor ecx, 0xc0e2
or ecx, 0x8b2b
or ecx, 0x8038
sub ecx, 0x4b81
pop ecx
mov dword [ebp - 0x2280], 0xe
push esi
call 0x40b1e0
add byte [ebp + 0x50], cl
aaa
cmp al, byte [edi + 0x36]
add esp, 4
xor esi, 0x10dcf
call 0x40b1f8
add byte [esi + 0x39], cl
dec esi
inc edx
dec ebp
dec ecx
inc ecx
add esp, 4
jmp 0x40b203
pop esi
mov edx, 1
imul eax, edx, 0
lea ecx, [ebp + eax - 0xc74]
mov dword [ebp - 0x1738], ecx
push edi
and edi, 0xca90
jmp 0x40b226
and edi, 0x1050b
and edi, 0xa3c7
pop edi
push esi
push ecx
add esp, 4
sub esi, 0x10c17
sub esi, 0x725f
sub esi, 0x5a86
pop esi
mov dword [ebp - 0x2284], 0xffffffff
push ebx
push eax
add esp, 4
xor ebx, 0x14c43
pop ebx
push ebx
and ebx, 0xe7e2
sub ebx, 0xbaad
sub ebx, 0x6e45
add ebx, 0x167ea
pop ebx
push eax
push edi
add esp, 4
and eax, 0x11360
pop eax
mov edx, dword [ebp - 0x428]
mov dword [ebp - 0x54c], edx
jmp 0x40b2a4
mov eax, dword [ebp - 0x54c]
add eax, 1
mov dword [ebp - 0x54c], eax
push esi
and esi, 0xedb9
pop esi
push ecx
push ecx
add esp, 4
sub ecx, 0xdc2b
jmp 0x40b2be
call 0x40b2cc
add byte [ebx + edi + 0x40], cl
cmp bh, byte [0x833e3f45]
les eax, [ecx + eax*4]
int1
scasb al, byte es:[edi]
add dword cs:[eax], eax
pop ecx
mov ecx, dword [ebp - 0x54c]
sub ecx, dword [ebp - 0x428]
cmp ecx, 0xffffffff
jb 0x40b31e
push eax
sub eax, 0x106d1
sub eax, 0x3038
jmp 0x40b2fb
or eax, 0x66d
pop eax
push edx
push edi
add esp, 4
jmp 0x40b310
pop edx
push edx
xor edx, 0x13c7a
pop edx
jmp 0x40b54c
mov dword [ebp - 0xd84], 7
mov edx, dword [ebp - 0x54c]
mov dword [ebp - 0xb4c], edx
push edi
push edx
add esp, 4
xor edi, 0x2337
pop edi
push eax
call 0x40b34e
add byte [eax], bh
dec ebp
dec ebx
aaa
cmp byte [ebx + 0x32], cl
add esp, 4
add eax, 0x5913
or eax, 0x8aa
jmp 0x40b365
pop eax
mov eax, dword [ebp - 0x1738]
mov dword [ebp - 0xb48], eax
mov dword [ebp - 0xd88], 0
mov ecx, dword [ebp - 0x54c]
cmp ecx, dword [ebp - 0x1738]
jne 0x40b3cd
push edi
add edi, 0xaa0
or edi, 0x3409
sub edi, 0x1535d
pop edi
push esi
push esi
add esp, 4
or esi, 0x1eac
sub esi, 0xd33f
xor esi, 0xf691
and esi, 0xb37b
pop esi
mov edx, dword [ebp - 0xd88]
mov dword [ebp - 0x1740], edx
jmp 0x40b4fe
cmp dword [ebp - 0xd84], 0
jle 0x40b4f2
push ebx
push ebx
add esp, 4
and ebx, 0x6597
add ebx, 0x349c
add ebx, 0x74b6
pop ebx
push esi
sub esi, 0x1381c
and esi, 0xc7af
sub esi, 0x37ad
sub esi, 0x1d8
pop esi
mov eax, dword [ebp - 0xb4c]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0xb48]
movzx eax, byte [edx]
cmp ecx, eax
je 0x40b48e
push ebx
push ecx
add esp, 4
and ebx, 0x922e
pop ebx
push ecx
push eax
add esp, 4
and ecx, 0x167f4
add ecx, 0x866c
sub ecx, 0xa227
pop ecx
push ecx
or ecx, 0x13d68
or ecx, 0x14150
pop ecx
mov ecx, dword [ebp - 0xb4c]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0xb48]
movzx ecx, byte [eax]
cmp edx, ecx
jle 0x40b476
mov dword [ebp - 0x173c], 1
jmp 0x40b480
mov dword [ebp - 0x173c], 0xffffffff
mov edx, dword [ebp - 0x173c]
mov dword [ebp - 0xd88], edx
jmp 0x40b4f2
push ebx
xor ebx, 0xc90b
pop ebx
push ecx
push edx
add esp, 4
call 0x40b4a8
add byte [esi + 0x50], al
inc ecx
inc ecx
xor esi, dword [esi]
xor al, 0x83
les eax, [ecx + eax*4]
int1
lahf
jo 0x40b4b1
add byte [ecx + 0x141de9], al
add byte [ecx + 0x52], bl
sub ecx, 0x141d
pop ecx
push edx
or edx, 0x94a
pop edx
mov eax, dword [ebp - 0xd84]
sub eax, 1
mov dword [ebp - 0xd84], eax
mov ecx, dword [ebp - 0xb4c]
add ecx, 1
mov dword [ebp - 0xb4c], ecx
mov edx, dword [ebp - 0xb48]
add edx, 1
mov dword [ebp - 0xb48], edx
jmp 0x40b3cd
mov eax, dword [ebp - 0xd88]
mov dword [ebp - 0x1740], eax
cmp dword [ebp - 0x1740], 0
jne 0x40b547
push ecx
call 0x40b517
add byte [edx + edi], bh
inc esi
inc edi
inc ebx
inc esi
aaa
aas
xor eax, dword [ebx - 0x167efb3c]
sbb ebx, dword [eax + eax]
add ecx, 0x11ce7
pop ecx
push ebx
push edi
add esp, 4
add ebx, 0x3bb5
sub ebx, 0x899c
pop ebx
mov ecx, dword [ebp - 0x54c]
mov dword [ebp - 0x414], ecx
jmp 0x40b588
jmp 0x40b295
push esi
push ecx
add esp, 4
sub esi, 0x653d
or esi, 0xfcaa
and esi, 0x11eb9
pop esi
push ecx
sub ecx, 0x619f
and ecx, 0xb9fd
and ecx, 0xb8bc
sub ecx, 0xa4fc
pop ecx
mov dword [ebp - 0x414], 0
push ecx
and ecx, 0x4476
pop ecx
push eax
add eax, 0x17fce
pop eax
push ecx
or ecx, 0xdce6
pop ecx
push ecx
push ebx
add esp, 4
xor ecx, 0x14add
and ecx, 0xc756
pop ecx
push edi
xor edi, 0x3d82
pop edi
push ecx
jmp 0x40b5c4
pop ecx
push ecx
or ecx, 0xafd5
or ecx, 0x1386a
sub ecx, 0x10498
jmp 0x40b5e0
pop ecx
push ecx
push eax
add esp, 4
jmp 0x40b5eb
pop ecx
mov edx, 1
imul eax, edx, 0
lea ecx, [ebp + eax - 0xc6c]
mov dword [ebp - 0x1744], ecx
push ebx
push edx
add esp, 4
and ebx, 0x874f
jmp 0x40b612
pop ebx
push esi
push ebx
add esp, 4
call 0x40b627
add byte [eax], bh
inc esp
dec esp
dec esp
inc esi
dec ecx
inc esi
cmp edi, dword [eax]
add esp, 4
pop esi
push edi
sub edi, 0x106ec
pop edi
mov dword [ebp - 0x2288], 0xffffffff
push ebx
push ecx
add esp, 4
add ebx, 0x12fb1
jmp 0x40b64e
add ebx, 0x68e
pop ebx
push edx
sub edx, 0xe7cf
pop edx
push edx
push eax
add esp, 4
sub edx, 0xc40d
xor edx, 0x1777a
pop edx
mov edx, dword [ebp - 0x428]
mov dword [ebp - 0x550], edx
jmp 0x40b68c
mov eax, dword [ebp - 0x550]
add eax, 1
mov dword [ebp - 0x550], eax
push ebx
sub ebx, 0x299
pop ebx
push ebx
push edi
add esp, 4
add ebx, 0xfe5c
pop ebx
push ebx
jmp 0x40b6a8
call 0x40b6b4
add byte [edx], dh
cmp al, 0x3c
dec ebp
cmp al, 0x83
les eax, [ecx + eax*4]
das
pop ecx
add byte [eax], al
pop ebx
mov ecx, dword [ebp - 0x550]
sub ecx, dword [ebp - 0x428]
cmp ecx, 0xffffffff
jb 0x40b706
push edx
call 0x40b6de
add byte [esi], bh
inc eax
dec ecx
inc esi
inc esi
dec eax
xor eax, 0x4c48333
pop edx
push eax
add eax, 0x3342
call 0x40b6f5
add byte [ebp + esi + 0x40], al
inc eax
inc ecx
add esp, 4
pop eax
push eax
sub eax, 0x1285f
pop eax
jmp 0x40b934
mov dword [ebp - 0xd8c], 7
mov edx, dword [ebp - 0x550]
mov dword [ebp - 0xae4], edx
push edi
xor edi, 0x1048d
call 0x40b730
add byte [edx + 0x4f], al
dec edx
xor al, 0x3d
aas
cmp al, byte [ebx + 0x525f04c4]
sub edx, 0x9672
and edx, 0xd835
and edx, 0xe549
and edx, 0x29fa
pop edx
mov eax, dword [ebp - 0x1744]
mov dword [ebp - 0xb44], eax
mov dword [ebp - 0xd90], 0
mov ecx, dword [ebp - 0x550]
cmp ecx, dword [ebp - 0x1744]
jne 0x40b7b5
push eax
push edx
add esp, 4
jmp 0x40b77d
sub eax, 0x11b19
add eax, 0x16ef
pop eax
push esi
push eax
add esp, 4
and esi, 0xb3bc
sub esi, 0x181b7
pop esi
push ebx
add ebx, 0x449f
pop ebx
mov edx, dword [ebp - 0xd90]
mov dword [ebp - 0x174c], edx
jmp 0x40b8e6
cmp dword [ebp - 0xd8c], 0
jle 0x40b8da
push esi
push edi
add esp, 4
sub esi, 0xb5d3
call 0x40b7dc
add byte [edi], dh
cmp al, byte [ecx + 0x45]
xor esi, dword [edi]
dec ebx
dec esi
inc edx
add esp, 4
xor esi, 0x1825a
jmp 0x40b7eb
pop esi
push edi
or edi, 0x6846
pop edi
mov eax, dword [ebp - 0xae4]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0xb44]
movzx eax, byte [edx]
cmp ecx, eax
je 0x40b876
push edx
push edi
add esp, 4
sub edx, 0x11d32
sub edx, 0xb203
or edx, 0x12eb1
pop edx
push edi
push esi
add esp, 4
xor edi, 0x2d31
or edi, 0x13d4b
jmp 0x40b83b
pop edi
mov ecx, dword [ebp - 0xae4]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0xb44]
movzx ecx, byte [eax]
cmp edx, ecx
jle 0x40b85e
mov dword [ebp - 0x1748], 1
jmp 0x40b868
mov dword [ebp - 0x1748], 0xffffffff
mov edx, dword [ebp - 0x1748]
mov dword [ebp - 0xd90], edx
jmp 0x40b8da
push eax
xor eax, 0x15183
sub eax, 0x10973
pop eax
push eax
push edi
add esp, 4
add eax, 0xccfb
add eax, 0x17f47
pop eax
push ecx
push ebx
add esp, 4
add ecx, 0x1845a
or ecx, 0x8551
pop ecx
mov eax, dword [ebp - 0xd8c]
sub eax, 1
mov dword [ebp - 0xd8c], eax
mov ecx, dword [ebp - 0xae4]
add ecx, 1
mov dword [ebp - 0xae4], ecx
mov edx, dword [ebp - 0xb44]
add edx, 1
mov dword [ebp - 0xb44], edx
jmp 0x40b7b5
mov eax, dword [ebp - 0xd90]
mov dword [ebp - 0x174c], eax
cmp dword [ebp - 0x174c], 0
jne 0x40b92f
push ebx
and ebx, 0x8696
jmp 0x40b8fe
and ebx, 0x8be
pop ebx
push edx
push ebx
add esp, 4
and edx, 0x99f4
jmp 0x40b918
jmp 0x40b920
pop edx
mov ecx, dword [ebp - 0x550]
mov dword [ebp - 0xb40], ecx
jmp 0x40b970
jmp 0x40b67d
push edi
sub edi, 0x2cba
or edi, 0xc66f
or edi, 0x17dee
xor edi, 0x39b2
pop edi
push edx
push ebx
add esp, 4
and edx, 0x4d7f
sub edx, 0x12aaa
or edx, 0x13318
pop edx
mov dword [ebp - 0xb40], 0
push edi
add edi, 0x408b
xor edi, 0x15fad
pop edi
push ecx
push ecx
add esp, 4
and ecx, 0x40a0
pop ecx
push ecx
push edi
add esp, 4
add ecx, 0x12812
pop ecx
push esi
push ebx
add esp, 4
or esi, 0x12204
pop esi
mov byte [ebp - 0x8ec], 0x45
mov byte [ebp - 0x8eb], 0x78
mov byte [ebp - 0x8ea], 0x69
mov byte [ebp - 0x8e9], 0x74
mov byte [ebp - 0x8e8], 0x50
mov byte [ebp - 0x8e7], 0x72
mov byte [ebp - 0x8e6], 0x6f
mov byte [ebp - 0x8e5], 0x63
mov byte [ebp - 0x8e4], 0x65
mov byte [ebp - 0x8e3], 0x73
mov byte [ebp - 0x8e2], 0x73
mov byte [ebp - 0x8e1], 0
push edi
push eax
add esp, 4
xor edi, 0x182bb
or edi, 0xb285
pop edi
push esi
push esi
add esp, 4
or esi, 0x15e6f
add esi, 0x40b3
or esi, 0xaf88
pop esi
push edi
add edi, 0xfdf8
pop edi
mov edx, 0x6b
mov word [ebp - 0x1884], dx
mov eax, 0x65
mov word [ebp - 0x1882], ax
mov ecx, 0x72
mov word [ebp - 0x1880], cx
mov edx, 0x6e
mov word [ebp - 0x187e], dx
mov eax, 0x65
mov word [ebp - 0x187c], ax
mov ecx, 0x6c
mov word [ebp - 0x187a], cx
mov edx, 0x33
mov word [ebp - 0x1878], dx
mov eax, 0x32
mov word [ebp - 0x1876], ax
mov ecx, 0x2e
mov word [ebp - 0x1874], cx
mov edx, 0x64
mov word [ebp - 0x1872], dx
mov eax, 0x6c
mov word [ebp - 0x1870], ax
mov ecx, 0x6c
mov word [ebp - 0x186e], cx
xor edx, edx
mov word [ebp - 0x186c], dx
push eax
jmp 0x40bac9
xor eax, 0x70c3
or eax, 0xba4a
pop eax
push edx
call 0x40bae3
add byte [edi + edi], dh
inc esp
inc ecx
dec ecx
cmp eax, dword [ebx - 0x3d7efb3c]
inc edi
and al, 1
add byte [ecx + 0x1285cf2], al
add byte [edx + 0x52], bl
and edx, 0x126fe
xor edx, 0x6a92
and edx, 0xe59c
pop edx
push ecx
push ecx
add esp, 4
sub ecx, 0xbd25
sub ecx, 0x2114
add ecx, 0x10175
sub ecx, 0xf27b
pop ecx
mov eax, dword fs:[0x18]
mov dword [ebp - 0x1ed8], eax
mov ecx, dword [ebp - 0x1ed8]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x1b28], edx
mov eax, dword [ebp - 0x1b28]
mov dword [ebp - 0x1750], eax
push ecx
add ecx, 0xe39e
jmp 0x40bb59
xor ecx, 0x13683
xor ecx, 0xa0df
pop ecx
push ecx
push edx
add esp, 4
or ecx, 0x1521e
or ecx, 0x2b3d
sub ecx, 0x97f4
pop ecx
cmp dword [ebp - 0x1750], 0
jne 0x40bb96
mov dword [ebp - 0x31c], 0
jmp 0x40be3d
mov ecx, dword [ebp - 0x1750]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xd9c], eax
push ebx
push esi
add esp, 4
jmp 0x40bbb4
add ebx, 0xab00
add ebx, 0x17444
jmp 0x40bbc7
pop ebx
push edx
push edx
add esp, 4
add edx, 0x5f69
or edx, 0x3732
pop edx
cmp dword [ebp - 0xd9c], 0
jne 0x40bbf2
mov dword [ebp - 0x31c], 0
jmp 0x40be3d
mov ecx, dword [ebp - 0xd9c]
mov dword [ebp - 0x554], ecx
push edx
push eax
add esp, 4
call 0x40bc10
add byte [edx + 0x32], al
aaa
inc eax
xor al, 0x36
dec ebp
add esp, 4
pop edx
push edi
and edi, 0xaa6b
xor edi, 0xa633
pop edi
push edx
xor edx, 0x7454
sub edx, 0x16e03
pop edx
lea edx, [ebp - 0x1884]
mov dword [ebp - 0xd98], edx
mov eax, dword [ebp - 0x554]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xd94], ecx
xor edx, edx
mov word [ebp - 0x234], dx
xor eax, eax
mov word [ebp - 0x38], ax
push edi
push edx
add esp, 4
or edi, 0x2c0c
xor edi, 0xee17
pop edi
push eax
push eax
add esp, 4
or eax, 0xf80a
pop eax
push ebx
add ebx, 0xaf6a
pop ebx
push edx
push edi
add esp, 4
xor edx, 0x8f60
pop edx
mov ecx, dword [ebp - 0xd94]
mov dx, word [ecx]
mov word [ebp - 0x1142], dx
mov eax, dword [ebp - 0xd94]
add eax, 2
mov dword [ebp - 0xd94], eax
mov cx, word [ebp - 0x1142]
mov word [ebp - 0x234], cx
mov edx, dword [ebp - 0xd98]
mov ax, word [edx]
mov word [ebp - 0x1144], ax
mov ecx, dword [ebp - 0xd98]
add ecx, 2
mov dword [ebp - 0xd98], ecx
mov dx, word [ebp - 0x1144]
mov word [ebp - 0x38], dx
push eax
and eax, 0x11119
sub eax, 0x985a
pop eax
push esi
and esi, 0x1842e
sub esi, 0x12227
pop esi
push ecx
xor ecx, 0x15dba
sub ecx, 0xc703
pop ecx
push ebx
xor ebx, 0x16c02
pop ebx
movzx eax, word [ebp - 0x38]
test eax, eax
jne 0x40bd32
movzx ecx, word [ebp - 0x234]
movzx edx, word [ebp - 0x38]
sub ecx, edx
mov dword [ebp - 0x1758], ecx
jmp 0x40bd8c
movzx eax, word [ebp - 0x234]
movzx ecx, word [ebp - 0x38]
cmp eax, ecx
je 0x40bc5a
movzx edx, word [ebp - 0x234]
xor edx, 0x20
movzx eax, word [ebp - 0x38]
cmp edx, eax
je 0x40bc5a
movzx ecx, word [ebp - 0x234]
movzx edx, word [ebp - 0x38]
cmp ecx, edx
jge 0x40bd76
mov dword [ebp - 0x1754], 0xffffffff
jmp 0x40bd80
mov dword [ebp - 0x1754], 1
mov eax, dword [ebp - 0x1754]
mov dword [ebp - 0x1758], eax
cmp dword [ebp - 0x1758], 0
jne 0x40bdd5
push ebx
push esi
add esp, 4
call 0x40bda7
add byte [esi + 0x40], al
dec eax
xor ecx, dword [edi + 0x33]
xor eax, 0xe804c483
or byte [eax], al
add byte [eax], al
add byte [edx + eax*2], dh
cmp al, 0x4c
cmp dword [edx], esi
inc edx
add esp, 4
add ebx, 0x2f6f
or ebx, 0xd573
pop ebx
mov ecx, dword [ebp - 0x554]
mov dword [ebp - 0x31c], ecx
jmp 0x40be3d
push esi
push edi
add esp, 4
and esi, 0x1834f
pop esi
push esi
push eax
add esp, 4
jmp 0x40bdee
xor esi, 0xa592
call 0x40be03
add byte [ecx*2 + 0x354f4e46], bh
aaa
cmp esi, dword [ebx + eax*4]
les eax, [esi + ebx*2]
mov edx, dword [ebp - 0x554]
mov eax, dword [edx]
mov dword [ebp - 0x554], eax
mov ecx, dword [ebp - 0x554]
cmp ecx, dword [ebp - 0xd9c]
je 0x40be33
mov edx, dword [ebp - 0x554]
cmp dword [edx + 0x30], 0
jne 0x40bbfe
mov dword [ebp - 0x31c], 0
push edx
push edi
add esp, 4
sub edx, 0x1452d
or edx, 0x8cf6
call 0x40be5a
add byte [esi + eax*2], dh
xor al, 0x43
inc eax
inc eax
add esp, 4
or edx, 0x283
pop edx
push ecx
push esi
add esp, 4
jmp 0x40be6e
pop ecx
cmp dword [ebp - 0x31c], 0
jne 0x40c774
mov eax, 0x6b
mov word [ebp - 0x1924], ax
mov ecx, 0x65
mov word [ebp - 0x1922], cx
mov edx, 0x72
mov word [ebp - 0x1920], dx
mov eax, 0x6e
mov word [ebp - 0x191e], ax
mov ecx, 0x65
mov word [ebp - 0x191c], cx
mov edx, 0x6c
mov word [ebp - 0x191a], dx
mov eax, 0x33
mov word [ebp - 0x1918], ax
mov ecx, 0x32
mov word [ebp - 0x1916], cx
mov edx, 0x2e
mov word [ebp - 0x1914], dx
mov eax, 0x64
mov word [ebp - 0x1912], ax
mov ecx, 0x6c
mov word [ebp - 0x1910], cx
mov edx, 0x6c
mov word [ebp - 0x190e], dx
xor eax, eax
mov word [ebp - 0x190c], ax
push eax
push edx
add esp, 4
and eax, 0x30c1
pop eax
push edx
add edx, 0x2fc1
pop edx
push edi
push edx
add esp, 4
or edi, 0xff41
jmp 0x40bf3a
jmp 0x40bf40
xor edi, 0x15418
pop edi
mov byte [ebp - 0x918], 0x4c
mov byte [ebp - 0x917], 0x6f
mov byte [ebp - 0x916], 0x61
mov byte [ebp - 0x915], 0x64
mov byte [ebp - 0x914], 0x4c
mov byte [ebp - 0x913], 0x69
mov byte [ebp - 0x912], 0x62
mov byte [ebp - 0x911], 0x72
mov byte [ebp - 0x910], 0x61
mov byte [ebp - 0x90f], 0x72
mov byte [ebp - 0x90e], 0x79
mov byte [ebp - 0x90d], 0x57
mov byte [ebp - 0x90c], 0
mov ecx, dword fs:[0x18]
mov dword [ebp - 0x1b2c], ecx
mov edx, dword [ebp - 0x1b2c]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x1b30], eax
mov ecx, dword [ebp - 0x1b30]
mov dword [ebp - 0x175c], ecx
push esi
call 0x40bfdb
add byte [edx + 0x40], cl
dec eax
cmp byte [ebx + 0x34], cl
inc ebp
dec edx
xor al, 0x3c
add esp, 4
and esi, 0x9d8b
or esi, 0xce37
call 0x40bff8
add byte [0x43353a4b], dh
dec esi
xor al, 0x4d
add esp, 4
pop esi
cmp dword [ebp - 0x175c], 0
jne 0x40c014
mov dword [ebp - 0x7d0], 0
jmp 0x40c2bb
mov edx, dword [ebp - 0x175c]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0xda8], ecx
push ecx
push edi
add esp, 4
jmp 0x40c031
sub ecx, 0x10de6
call 0x40c046
add byte [eax], bh
dec edx
aaa
dec ebp
cmp esi, dword [edx]
inc ebp
cmp eax, dword [esi - 0x7d]
les eax, [ecx + eax*4]
loope 0x40c062
aad 0
add byte [ecx + 0x51], bl
add ecx, 0x9cf5
pop ecx
cmp dword [ebp - 0xda8], 0
jne 0x40c070
mov dword [ebp - 0x7d0], 0
jmp 0x40c2bb
test dword [eax], esi
clc
invalid
mov edx, dword [ebp - 0xda8]
mov dword [ebp - 0x558], edx
push ecx
add ecx, 0x494
sub ecx, 0x13194
and ecx, 0xea91
pop ecx
push ecx
push eax
add esp, 4
xor ecx, 0x16cf5
or ecx, 0x9908
sub ecx, 0x9d95
add ecx, 0x290c
pop ecx
lea eax, [ebp - 0x1924]
mov dword [ebp - 0xda4], eax
mov ecx, dword [ebp - 0x558]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0xda0], edx
xor eax, eax
mov word [ebp - 0x238], ax
xor ecx, ecx
mov word [ebp - 0x3c], cx
push edi
jmp 0x40c0de
and edi, 0x184fd
pop edi
push eax
or eax, 0x4a67
and eax, 0xc7e2
or eax, 0x19c
call 0x40c106
add byte [esi], bh
push eax
dec esi
inc ecx
inc esp
inc eax
cmp byte [edx - 0x7d], al
les eax, [eax + ebx*2]
mov edx, dword [ebp - 0xda0]
mov ax, word [edx]
mov word [ebp - 0x1146], ax
mov ecx, dword [ebp - 0xda0]
add ecx, 2
mov dword [ebp - 0xda0], ecx
mov dx, word [ebp - 0x1146]
mov word [ebp - 0x238], dx
mov eax, dword [ebp - 0xda4]
mov cx, word [eax]
mov word [ebp - 0x1148], cx
mov edx, dword [ebp - 0xda4]
add edx, 2
mov dword [ebp - 0xda4], edx
mov ax, word [ebp - 0x1148]
mov word [ebp - 0x3c], ax
push edx
push esi
add esp, 4
call 0x40c173
add byte [edx + ecx*2 + 0x49], cl
dec ecx
cmp cl, byte [edx + 0x43]
add esp, 4
or edx, 0x185aa
call 0x40c189
add byte [ebp + 0x35], cl
inc ebx
cmp dword [esp + ecx*2 + 0x48], eax
add esp, 4
and edx, 0x182dc
pop edx
movzx ecx, word [ebp - 0x3c]
test ecx, ecx
jne 0x40c1b0
movzx edx, word [ebp - 0x238]
movzx eax, word [ebp - 0x3c]
sub edx, eax
mov dword [ebp - 0x17a4], edx
jmp 0x40c20a
movzx ecx, word [ebp - 0x238]
movzx edx, word [ebp - 0x3c]
cmp ecx, edx
je 0x40c0d8
movzx eax, word [ebp - 0x238]
xor eax, 0x20
movzx ecx, word [ebp - 0x3c]
cmp eax, ecx
je 0x40c0d8
movzx edx, word [ebp - 0x238]
movzx eax, word [ebp - 0x3c]
cmp edx, eax
jge 0x40c1f4
mov dword [ebp - 0x1760], 0xffffffff
jmp 0x40c1fe
mov dword [ebp - 0x1760], 1
mov ecx, dword [ebp - 0x1760]
mov dword [ebp - 0x17a4], ecx
cmp dword [ebp - 0x17a4], 0
jne 0x40c253
push ebx
jmp 0x40c21b
jmp 0x40c223
pop ebx
push ebx
call 0x40c235
add byte [edx + 0x40], al
dec esp
dec edi
cmp al, 0x39
dec edi
dec ebp
inc ebp
dec edx
add esp, 4
and ebx, 0x7918
xor ebx, 0x11055
pop ebx
mov edx, dword [ebp - 0x558]
mov dword [ebp - 0x7d0], edx
jmp 0x40c2bb
push edi
push edi
add esp, 4
add edi, 0x1574f
pop edi
push edi
push edi
add esp, 4
xor edi, 0x2606
xor edi, 0x11817
and edi, 0x995e
pop edi
push ecx
or ecx, 0x3ce6
add ecx, 0x1502e
pop ecx
mov eax, dword [ebp - 0x558]
mov ecx, dword [eax]
mov dword [ebp - 0x558], ecx
mov edx, dword [ebp - 0x558]
cmp edx, dword [ebp - 0xda8]
je 0x40c2b1
mov eax, dword [ebp - 0x558]
cmp dword [eax + 0x30], 0
jne 0x40c07c
mov dword [ebp - 0x7d0], 0
push edx
xor edx, 0x31ef
add edx, 0x103ae
add edx, 0xfe97
call 0x40c2dd
add byte [edi + 0x3b], cl
inc esi
inc ecx
dec edx
dec esp
cmp eax, 0x5a04c483
push edx
push ecx
add esp, 4
add edx, 0x11df3
pop edx
cmp dword [ebp - 0x7d0], 0
jne 0x40c337
push esi
push edi
add esp, 4
and esi, 0x102a1
pop esi
push esi
push ebx
add esp, 4
sub esi, 0x17561
add esi, 0x166ea
pop esi
push ebx
push esi
add esp, 4
jmp 0x40c321
xor ebx, 0x1425a
pop ebx
mov dword [ebp - 0x81c], 0
jmp 0x40ce5f
push esi
sub esi, 0x16c89
or esi, 0x1035
add esi, 0x13738
pop esi
push edx
sub edx, 0xd31
jmp 0x40c35a
jmp 0x40c360
jmp 0x40c368
pop edx
mov ecx, dword [ebp - 0x7d0]
mov edx, dword [ecx + 0x18]
mov dword [ebp - 0x3d0], edx
mov dword [ebp - 0x7e0], 0
mov eax, dword [ebp - 0x3d0]
mov dword [ebp - 0x17a8], eax
cmp dword [ebp - 0x17a8], 0
jne 0x40c3a8
mov ecx, dword [ebp - 0x7e0]
mov dword [ebp - 0x42c], ecx
jmp 0x40c699
mov edx, dword [ebp - 0x17a8]
mov eax, dword [ebp - 0x3d0]
add eax, dword [edx + 0x3c]
mov dword [ebp - 0x17ac], eax
jne 0x40c3d0
mov ecx, dword [ebp - 0x7e0]
mov dword [ebp - 0x42c], ecx
jmp 0x40c699
mov edx, 8
imul eax, edx, 0
mov ecx, dword [ebp - 0x17ac]
mov edx, dword [ecx + eax + 0x78]
mov dword [ebp - 0x17b0], edx
cmp dword [ebp - 0x17b0], 0
jne 0x40c402
mov eax, dword [ebp - 0x7e0]
mov dword [ebp - 0x42c], eax
jmp 0x40c699
mov ecx, dword [ebp - 0x3d0]
add ecx, dword [ebp - 0x17b0]
mov dword [ebp - 0x7d4], ecx
jne 0x40c427
mov edx, dword [ebp - 0x7e0]
mov dword [ebp - 0x42c], edx
jmp 0x40c699
mov eax, dword [ebp - 0x7d4]
mov ecx, dword [ebp - 0x3d0]
add ecx, dword [eax + 0x20]
mov dword [ebp - 0x1b34], ecx
mov edx, dword [ebp - 0x7d4]
mov eax, dword [ebp - 0x3d0]
add eax, dword [edx + 0x24]
mov dword [ebp - 0x1b38], eax
mov ecx, dword [ebp - 0x7d4]
mov edx, dword [ebp - 0x3d0]
add edx, dword [ecx + 0x1c]
mov dword [ebp - 0x1b3c], edx
mov dword [ebp - 0x7d8], 0
jmp 0x40c481
mov eax, dword [ebp - 0x7d8]
add eax, 1
mov dword [ebp - 0x7d8], eax
mov ecx, dword [ebp - 0x7d4]
mov edx, dword [ebp - 0x7d8]
cmp edx, dword [ecx + 0x18]
jae 0x40c68d
mov eax, dword [ebp - 0x7d8]
mov ecx, dword [ebp - 0x1b34]
mov edx, dword [ebp - 0x3d0]
add edx, dword [ecx + eax*4]
mov dword [ebp - 0x7dc], edx
mov eax, dword [ebp - 0x7d8]
mov ecx, dword [ebp - 0x1b38]
movzx edx, word [ecx + eax*2]
mov eax, dword [ebp - 0x1b3c]
mov ecx, dword [ebp - 0x3d0]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x1b40], ecx
mov dword [ebp - 0x1b0], 0
jmp 0x40c4f1
mov edx, dword [ebp - 0x1b0]
add edx, 1
mov dword [ebp - 0x1b0], edx
mov eax, dword [ebp - 0x7dc]
add eax, dword [ebp - 0x1b0]
movsx ecx, byte [eax]
test ecx, ecx
je 0x40c5a3
mov edx, dword [ebp - 0x1b0]
movsx eax, byte [ebp + edx - 0x918]
test eax, eax
je 0x40c5a3
push ebx
push edi
add esp, 4
sub ebx, 0x158
and ebx, 0x10324
pop ebx
push eax
push eax
add esp, 4
add eax, 0x115e
pop eax
push ecx
sub ecx, 0xb223
sub ecx, 0x1076c
xor ecx, 0x12f90
pop ecx
mov ecx, dword [ebp - 0x7dc]
add ecx, dword [ebp - 0x1b0]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x1b0]
movsx ecx, byte [ebp + eax - 0x918]
cmp edx, ecx
je 0x40c595
mov edx, dword [ebp - 0x7dc]
add edx, dword [ebp - 0x1b0]
movsx eax, byte [edx]
xor eax, 0x20
mov ecx, dword [ebp - 0x1b0]
movsx edx, byte [ebp + ecx - 0x918]
cmp eax, edx
jne 0x40c59c
jmp 0x40c4e2
jmp 0x40c5a3
push esi
add esi, 0x5d97
xor esi, 0x68ab
and esi, 0x115a2
pop esi
push edi
jmp 0x40c5bf
call 0x40c5cb
add byte [eax + 0x37], al
dec eax
add esp, 4
sub edi, 0xb7ca
pop edi
mov eax, dword [ebp - 0x7dc]
add eax, dword [ebp - 0x1b0]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x1b0]
movsx eax, byte [ebp + edx - 0x918]
cmp ecx, eax
jne 0x40c602
mov dword [ebp - 0xdac], 0
jmp 0x40c671
push ebx
push ecx
add esp, 4
jmp 0x40c60e
add ebx, 0xa9f8
pop ebx
push eax
and eax, 0x11f0a
jmp 0x40c625
add eax, 0x13719
jmp 0x40c633
pop eax
mov ecx, dword [ebp - 0x7dc]
add ecx, dword [ebp - 0x1b0]
movsx edx, byte [ecx]
or edx, 0x20
mov eax, dword [ebp - 0x1b0]
movsx ecx, byte [ebp + eax - 0x918]
or ecx, 0x20
cmp edx, ecx
jge 0x40c667
mov dword [ebp - 0xdac], 0xffffffff
jmp 0x40c671
mov dword [ebp - 0xdac], 1
cmp dword [ebp - 0xdac], 0
jne 0x40c688
mov edx, dword [ebp - 0x1b40]
mov dword [ebp - 0x42c], edx
jmp 0x40c699
jmp 0x40c472
mov eax, dword [ebp - 0x7e0]
mov dword [ebp - 0x42c], eax
cmp dword [ebp - 0x42c], 0
je 0x40c774
push esi
xor esi, 0x18322
and esi, 0x783d
or esi, 0x17089
pop esi
push ebx
push edx
add esp, 4
add ebx, 0x4889
add ebx, 0x7d98
pop ebx
push ebx
push ebx
add esp, 4
add ebx, 0x97bb
pop ebx
mov ecx, dword [ebp - 0x42c]
mov dword [ebp - 0x1b44], ecx
push ebx
push esi
add esp, 4
and ebx, 0x2aff
pop ebx
push ecx
push ebx
add esp, 4
xor ecx, 0xda7e
pop ecx
push ebx
sub ebx, 0xa86a
sub ebx, 0x125a8
or ebx, 0x131fc
and ebx, 0x17c24
pop ebx
mov edx, dword [ebp - 0x1b44]
mov dword [ebp - 0x1b48], edx
lea eax, [ebp - 0x1884]
push eax
call dword [ebp - 0x1b48]
test eax, eax
jne 0x40c774
push edx
push edx
add esp, 4
xor edx, 0x149f8
and edx, 0x7db4
pop edx
push ecx
xor ecx, 0x9183
pop ecx
push esi
call 0x40c75b
add byte [ebx + 0x46], cl
cmp al, byte [edx + 0x37]
aaa
dec eax
add esp, 4
or esi, 0x12c68
pop esi
mov dword [ebp - 0x81c], 0
jmp 0x40ce5f
push edx
push eax
add esp, 4
and edx, 0x7ceb
or edx, 0x1468d
pop edx
push edi
add edi, 0x5ca6
jmp 0x40c796
jmp 0x40c79f
sub edi, 0xe814
pop edi
mov ecx, dword fs:[0x18]
mov dword [ebp - 0x1b4c], ecx
mov edx, dword [ebp - 0x1b4c]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x1b50], eax
mov ecx, dword [ebp - 0x1b50]
mov dword [ebp - 0x17b8], ecx
push esi
push eax
add esp, 4
or esi, 0x14281
and esi, 0x182a1
jmp 0x40c7e5
xor esi, 0x486
pop esi
push edx
xor edx, 0x127e8
or edx, 0x95f9
sub edx, 0x12beb
pop edx
cmp dword [ebp - 0x17b8], 0
jne 0x40c818
mov dword [ebp - 0x31c], 0
jmp 0x40cabf
mov edx, dword [ebp - 0x17b8]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0xdb8], ecx
push edi
and edi, 0x13b81
pop edi
push esi
push ecx
add esp, 4
add esi, 0x14f2f
and esi, 0x12961
xor esi, 0x5466
pop esi
push ecx
or ecx, 0x3b05
pop ecx
push ecx
jmp 0x40c85b
pop ecx
cmp dword [ebp - 0xdb8], 0
jne 0x40c874
mov dword [ebp - 0x31c], 0
jmp 0x40cabf
mov edx, dword [ebp - 0xdb8]
mov dword [ebp - 0x55c], edx
push edx
push ebx
add esp, 4
add edx, 0xc891
add edx, 0x25eb
sub edx, 0x38f
jmp 0x40c89f
pop edx
push eax
call 0x40c8ae
add byte [ebx + 0x38], al
aaa
xor al, 0x3d
cmp al, byte ds:[ebx - 0x72a7fb3c]
test dword [edi - 1], edi
dec dword [ecx - 0xdb37b]
dec dword [ebx - 0x55b73]
dec dword [ebx - 0x6a76cfaf]
push eax
invalid
push ebx
push ebx
add esp, 4
call 0x40cad4
add byte [edx + eax*2], dh
xor al, byte [ebx + 0x3e]
inc ebp
cmp byte [ecx], bh
aas
cmp al, 0x83
les eax, [eax + ebp*8]
or dword [eax], eax
add byte [eax], al
add byte [edi], dh
dec edi
inc ecx
cmp dword [edx + 0x4a], ecx
dec eax
dec esi
add esp, 4
pop ebx
push edx
add edx, 0x103ac
pop edx
mov ecx, dword [ebp - 0x31c]
mov edx, dword [ecx + 0x18]
mov dword [ebp - 0x360], edx
push edx
add edx, 0x13224
call 0x40cb15
add byte [edx + 0x50], al
dec esi
inc edi
inc esi
cmp byte [eax + 0x48], al
add esp, 4
call 0x40cb28
add byte [edx + 0x4f], al
aaa
dec ebx
dec eax
inc ebx
cmp al, 0x4f
cmp byte [ebx - 0x3d7efb3c], al
out 0xaf, eax
add byte [eax], al
pop edx
mov dword [ebp - 0x7f0], 0
mov eax, dword [ebp - 0x360]
mov dword [ebp - 0x17c4], eax
cmp dword [ebp - 0x17c4], 0
jne 0x40cb62
mov ecx, dword [ebp - 0x7f0]
mov dword [ebp - 0x560], ecx
jmp 0x40ce53
mov edx, dword [ebp - 0x17c4]
mov eax, dword [ebp - 0x360]
add eax, dword [edx + 0x3c]
mov dword [ebp - 0x17c8], eax
jne 0x40cb8a
mov ecx, dword [ebp - 0x7f0]
mov dword [ebp - 0x560], ecx
jmp 0x40ce53
mov edx, 8
imul eax, edx, 0
mov ecx, dword [ebp - 0x17c8]
mov edx, dword [ecx + eax + 0x78]
mov dword [ebp - 0x17cc], edx
cmp dword [ebp - 0x17cc], 0
jne 0x40cbbc
mov eax, dword [ebp - 0x7f0]
mov dword [ebp - 0x560], eax
jmp 0x40ce53
mov ecx, dword [ebp - 0x360]
add ecx, dword [ebp - 0x17cc]
mov dword [ebp - 0x7e4], ecx
jne 0x40cbe1
mov edx, dword [ebp - 0x7f0]
mov dword [ebp - 0x560], edx
jmp 0x40ce53
mov eax, dword [ebp - 0x7e4]
mov ecx, dword [ebp - 0x360]
add ecx, dword [eax + 0x20]
mov dword [ebp - 0x1b54], ecx
mov edx, dword [ebp - 0x7e4]
mov eax, dword [ebp - 0x360]
add eax, dword [edx + 0x24]
mov dword [ebp - 0x1b58], eax
mov ecx, dword [ebp - 0x7e4]
mov edx, dword [ebp - 0x360]
add edx, dword [ecx + 0x1c]
mov dword [ebp - 0x1b5c], edx
mov dword [ebp - 0x7e8], 0
jmp 0x40cc3b
mov eax, dword [ebp - 0x7e8]
add eax, 1
mov dword [ebp - 0x7e8], eax
mov ecx, dword [ebp - 0x7e4]
mov edx, dword [ebp - 0x7e8]
cmp edx, dword [ecx + 0x18]
jae 0x40ce47
mov eax, dword [ebp - 0x7e8]
mov ecx, dword [ebp - 0x1b54]
mov edx, dword [ebp - 0x360]
add edx, dword [ecx + eax*4]
mov dword [ebp - 0x7ec], edx
mov eax, dword [ebp - 0x7e8]
mov ecx, dword [ebp - 0x1b58]
movzx edx, word [ecx + eax*2]
mov eax, dword [ebp - 0x1b5c]
mov ecx, dword [ebp - 0x360]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x1b60], ecx
mov dword [ebp - 0x1b4], 0
jmp 0x40ccab
mov edx, dword [ebp - 0x1b4]
add edx, 1
mov dword [ebp - 0x1b4], edx
mov eax, dword [ebp - 0x7ec]
add eax, dword [ebp - 0x1b4]
movsx ecx, byte [eax]
test ecx, ecx
je 0x40cd5d
mov edx, dword [ebp - 0x1b4]
movsx eax, byte [ebp + edx - 0x8ec]
test eax, eax
je 0x40cd5d
push esi
or esi, 0x11cd1
pop esi
push edx
push edx
add esp, 4
jmp 0x40ccea
or edx, 0x9054
jmp 0x40ccf5
pop edx
push edx
add edx, 0x26ec
xor edx, 0x10f20
xor edx, 0x1037d
pop edx
mov ecx, dword [ebp - 0x7ec]
add ecx, dword [ebp - 0x1b4]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x1b4]
movsx ecx, byte [ebp + eax - 0x8ec]
cmp edx, ecx
je 0x40cd4f
mov edx, dword [ebp - 0x7ec]
add edx, dword [ebp - 0x1b4]
movsx eax, byte [edx]
xor eax, 0x20
mov ecx, dword [ebp - 0x1b4]
movsx edx, byte [ebp + ecx - 0x8ec]
cmp eax, edx
jne 0x40cd56
jmp 0x40cc9c
jmp 0x40cd5d
push esi
push ebx
add esp, 4
and esi, 0xc033
xor esi, 0x342c
or esi, 0x154e6
pop esi
push edx
push ecx
add esp, 4
or edx, 0x17a7b
pop edx
push eax
and eax, 0xc91c
add eax, 0xe5d1
pop eax
mov eax, dword [ebp - 0x7ec]
add eax, dword [ebp - 0x1b4]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x1b4]
movsx eax, byte [ebp + edx - 0x8ec]
cmp ecx, eax
jne 0x40cdbc
mov dword [ebp - 0xdbc], 0
jmp 0x40ce2b
push ebx
and ebx, 0xad16
xor ebx, 0x16680
sub ebx, 0x7d55
sub ebx, 0xbcc9
pop ebx
push esi
push edi
add esp, 4
call 0x40cdea
add byte [ecx + 0x3d], cl
cmp byte [eax + 0x33], cl
cmp ecx, dword [esi + 0x49]
cmp byte [ebx - 0x74a1fb3c], al
lea edx, [eax + edi*8]
invalid
cmp dword [ebp - 0xdbc], 0
jne 0x40ce42
mov edx, dword [ebp - 0x1b60]
mov dword [ebp - 0x560], edx
jmp 0x40ce53
jmp 0x40cc2c
mov eax, dword [ebp - 0x7f0]
mov dword [ebp - 0x560], eax
mov ecx, dword [ebp - 0x560]
mov dword [ebp - 0x81c], ecx
push ebx
push esi
add esp, 4
and ebx, 0xd3c9
add ebx, 0x10f3
and ebx, 0xf06
pop ebx
push esi
xor esi, 0xc4c3
or esi, 0xb7b3
pop esi
push edi
push edx
add esp, 4
xor edi, 0x2126
pop edi
mov edx, dword [ebp - 0x414]
add edx, 0xe
mov dword [ebp - 0x1bb0], edx
push eax
push edx
add esp, 4
and eax, 0x1640d
and eax, 0x165c2
and eax, 0xd701
and eax, 0x80a0
pop eax
push esi
sub esi, 0x1737
or esi, 0xe565
or esi, 0x1559
pop esi
cmp dword [ebp - 0x414], 0
je 0x40cee4
cmp dword [ebp - 0xb40], 0
jne 0x40cf2a
push eax
sub eax, 0xb6a4
jmp 0x40cef3
jmp 0x40cefa
pop eax
push esi
push edi
add esp, 4
jmp 0x40cf09
sub esi, 0x10e97
add esi, 0xa711
pop esi
mov eax, dword [ebp - 0x81c]
mov dword [ebp - 0x1b64], eax
push 0
call dword [ebp - 0x1b64]
mov dword [ebp - 0x228c], 0xa
push edi
push esi
add esp, 4
add edi, 0x16220
pop edi
push ebx
push edx
add esp, 4
sub ebx, 0x6df7
add ebx, 0x59b4
xor ebx, 0x52a4
xor ebx, 0x416c
pop ebx
push edi
add edi, 0x9825
pop edi
mov ecx, dword [ebp - 0x414]
mov dl, byte [ecx + 0xa]
mov byte [ebp - 0x419], dl
mov eax, dword [ebp - 0xb40]
sub eax, dword [ebp - 0x414]
mov dword [ebp - 0x180c], eax
mov dword [ebp - 0xdec], 0
push edx
push edi
add esp, 4
or edx, 0x4fe3
call 0x40cfaa
add byte [eax], bh
inc esi
cmp cl, byte [edi + 0x43]
cmp esi, dword ss:[esi]
add esp, 4
pop edx
push ecx
push edi
add esp, 4
call 0x40cfbf
add byte [ebx + 0x41], al
xor eax, 0x83323c38
les eax, [ecx + ebx*2]
mov byte [ebp - 0xa58], 0x56
mov byte [ebp - 0xa57], 0x69
mov byte [ebp - 0xa56], 0x72
mov byte [ebp - 0xa55], 0x74
mov byte [ebp - 0xa54], 0x75
mov byte [ebp - 0xa53], 0x61
mov byte [ebp - 0xa52], 0x6c
mov byte [ebp - 0xa51], 0x50
mov byte [ebp - 0xa50], 0x72
mov byte [ebp - 0xa4f], 0x6f
mov byte [ebp - 0xa4e], 0x74
mov byte [ebp - 0xa4d], 0x65
mov byte [ebp - 0xa4c], 0x63
mov byte [ebp - 0xa4b], 0x74
mov byte [ebp - 0xa4a], 0
push edx
call 0x40d03c
add byte [edx + 0x41], cl
cmp byte [eax + 0x42], al
cmp byte [ebx], dh
dec esp
add esp, 4
xor edx, 0x15085
or edx, 0x2f69
call 0x40d05a
add byte [edx], bh
xor al, byte [edx + ecx*2 + 0x39]
dec ebp
cmp eax, 0xc4833d4f
add al, 0x5a
mov ecx, dword fs:[0x18]
mov dword [ebp - 0x1b68], ecx
mov edx, dword [ebp - 0x1b68]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x1b6c], eax
mov ecx, dword [ebp - 0x1b6c]
mov dword [ebp - 0x17d0], ecx
push eax
push edx
add esp, 4
xor eax, 0x3234
pop eax
push ebx
add ebx, 0x12cb
call 0x40d0a8
add byte [ecx + ecx*2], bh
cmp al, 0x35
xor al, 0x3b
inc edi
add esp, 4
and ebx, 0x6a2d
sub ebx, 0x49c4
pop ebx
cmp dword [ebp - 0x17d0], 0
jne 0x40d0d0
mov dword [ebp - 0x334], 0
jmp 0x40d377
mov edx, dword [ebp - 0x17d0]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0xdc8], ecx
push ecx
push eax
add esp, 4
sub ecx, 0x984d
xor ecx, 0x3075
pop ecx
push eax
xor eax, 0xa1a7
call 0x40d10a
add byte [ecx + 0x36], al
inc esp
xor eax, 0x4549413f
inc ebx
add esp, 4
add eax, 0x9952
pop eax
cmp dword [ebp - 0xdc8], 0
jne 0x40d12c
mov dword [ebp - 0x334], 0
jmp 0x40d377
mov edx, dword [ebp - 0xdc8]
mov dword [ebp - 0x564], edx
push ebx
push eax
add esp, 4
add ebx, 0x17ee7
sub ebx, 0xc256
pop ebx
push edi
or edi, 0x1318e
pop edi
push eax
push ebx
add esp, 4
or eax, 0x767
add eax, 0xe38a
add eax, 0x7fd5
pop eax
lea eax, [ebp - 0x1884]
mov dword [ebp - 0xdc4], eax
mov ecx, dword [ebp - 0x564]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0xdc0], edx
xor eax, eax
mov word [ebp - 0x240], ax
xor ecx, ecx
mov word [ebp - 0x44], cx
push edx
push ebx
add esp, 4
and edx, 0x1211a
xor edx, 0x2f91
and edx, 0x14f9b
or edx, 0xd9d5
pop edx
push edi
or edi, 0x582e
add edi, 0x8251
xor edi, 0x127aa
pop edi
mov edx, dword [ebp - 0xdc0]
mov ax, word [edx]
mov word [ebp - 0x114e], ax
mov ecx, dword [ebp - 0xdc0]
add ecx, 2
mov dword [ebp - 0xdc0], ecx
mov dx, word [ebp - 0x114e]
mov word [ebp - 0x240], dx
mov eax, dword [ebp - 0xdc4]
mov cx, word [eax]
mov word [ebp - 0x1150], cx
mov edx, dword [ebp - 0xdc4]
add edx, 2
mov dword [ebp - 0xdc4], edx
mov ax, word [ebp - 0x1150]
mov word [ebp - 0x44], ax
push esi
push ecx
add esp, 4
jmp 0x40d227
xor esi, 0x8c4
jmp 0x40d233
sub esi, 0x1f88
pop esi
push esi
push edx
add esp, 4
call 0x40d24b
add byte [edi + 0x43], al
xor al, 0x4d
inc esp
xor al, byte [ebx + 0xf5e04c4]
mov bh, 0x4d
mov esp, 0x1575c985
movzx edx, word [ebp - 0x240]
movzx eax, word [ebp - 0x44]
sub edx, eax
mov dword [ebp - 0x17d8], edx
jmp 0x40d2c6
cmp dword [ebp - 0x17d8], 0
jne 0x40d30f
push edx
push edi
add esp, 4
sub edx, 0xbe20
or edx, 0xcb74
xor edx, 0x6bb6
pop edx
push edi
push edi
add esp, 4
and edi, 0x88df
pop edi
push edx
xor edx, 0x8cf2
or edx, 0x3a70
pop edx
mov edx, dword [ebp - 0x564]
mov dword [ebp - 0x334], edx
jmp 0x40d377
push ecx
push ecx
add esp, 4
sub ecx, 0x58d8
and ecx, 0x2711
add ecx, 0x13158
xor ecx, 0x41cf
pop ecx
push eax
add eax, 0x17eb4
xor eax, 0xc778
sub eax, 0x14ac6
pop eax
mov eax, dword [ebp - 0x564]
mov ecx, dword [eax]
mov dword [ebp - 0x564], ecx
mov edx, dword [ebp - 0x564]
cmp edx, dword [ebp - 0xdc8]
je 0x40d36d
mov eax, dword [ebp - 0x564]
cmp dword [eax + 0x30], 0
jne 0x40d138
mov dword [ebp - 0x334], 0
push ecx
jmp 0x40d381
and ecx, 0x13137
xor ecx, 0xba4
pop ecx
push esi
call 0x40d39f
add byte [esi + 0x4c], al
xor eax, 0x423f4a38
inc eax
dec ecx
cmp eax, dword [ebx - 0x117efb3c]
add byte [ebx], 0
add byte [esi - 0x7d], bl
mov ebp, 0xfffffccc
add byte [edi], cl
test eax, edi
or byte [eax], al
add byte [ecx + 0x6b], bh
mov word [ebp - 0x1940], cx
mov edx, 0x65
mov word [ebp - 0x193e], dx
mov eax, 0x72
mov word [ebp - 0x193c], ax
mov ecx, 0x6e
mov word [ebp - 0x193a], cx
mov edx, 0x65
mov word [ebp - 0x1938], dx
mov eax, 0x6c
mov word [ebp - 0x1936], ax
mov ecx, 0x33
mov word [ebp - 0x1934], cx
mov edx, 0x32
mov word [ebp - 0x1932], dx
mov eax, 0x2e
mov word [ebp - 0x1930], ax
mov ecx, 0x64
mov word [ebp - 0x192e], cx
mov edx, 0x6c
mov word [ebp - 0x192c], dx
mov eax, 0x6c
mov word [ebp - 0x192a], ax
xor ecx, ecx
mov word [ebp - 0x1928], cx
push eax
push ecx
add esp, 4
call 0x40d460
add byte [edx], dh
dec ebx
xor al, byte [eax + 0x3e]
push eax
add esp, 4
call 0x40d471
add byte [edi + 0x43], al
cmp esi, dword [ecx + ecx*2]
dec ebp
inc edi
dec esi
add esp, 4
pop eax
push edx
push ebx
add esp, 4
add edx, 0xe9f5
pop edx
mov byte [ebp - 0x928], 0x4c
mov byte [ebp - 0x927], 0x6f
mov byte [ebp - 0x926], 0x61
mov byte [ebp - 0x925], 0x64
mov byte [ebp - 0x924], 0x4c
mov byte [ebp - 0x923], 0x69
mov byte [ebp - 0x922], 0x62
mov byte [ebp - 0x921], 0x72
mov byte [ebp - 0x920], 0x61
mov byte [ebp - 0x91f], 0x72
mov byte [ebp - 0x91e], 0x79
mov byte [ebp - 0x91d], 0x57
mov byte [ebp - 0x91c], 0
mov edx, dword fs:[0x18]
mov dword [ebp - 0x1b70], edx
mov eax, dword [ebp - 0x1b70]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0x1b74], ecx
mov edx, dword [ebp - 0x1b74]
mov dword [ebp - 0x17dc], edx
push ecx
xor ecx, 0x4d8c
xor ecx, 0x592d
xor ecx, 0x1004e
call 0x40d524
add byte [esi + 0x4b], al
dec esp
dec ebx
xor edi, dword [edx]
xor al, 0x83
les eax, [ecx + ebx*2]
push edi
sub edi, 0xf59f
xor edi, 0xc115
pop edi
cmp dword [ebp - 0x17dc], 0
jne 0x40d54e
mov dword [ebp - 0x7f4], 0
jmp 0x40d7f5
mov eax, dword [ebp - 0x17dc]
mov ecx, dword [eax + 0xc]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0xdd4], edx
push ecx
call 0x40d570
add byte [ecx + 0x47], cl
inc esp
inc ebp
inc edx
xor eax, 0x8340493f
les eax, [eax + ebp*8]
or al, byte [eax]
add byte [eax], al
add byte [eax + 0x36], cl
dec edi
dec ecx
cmp dword [ebx], esi
dec edx
inc ebx
cmp eax, dword [ebx - 0x367efb3c]
mov eax, dword [0x81000118]
jmp 0x4217ff
push edi
push edi
add esp, 4
sub edi, 0x5ccc
call 0x40d80d
add byte [edx], dh
dec edx
xor al, 0x42
dec esi
aas
add esp, 4
and edi, 0x13bf4
call 0x40d823
add byte [edx + 0x3a], al
xor eax, 0x42434845
add esp, 4
pop edi
cmp dword [ebp - 0x7f4], 0
jne 0x40d871
push eax
add eax, 0x171bd
pop eax
push eax
push ebx
add esp, 4
and eax, 0x35f8
add eax, 0x40
call 0x40d858
add byte [ebp + 0x46], cl
inc esp
dec edx
dec edi
dec esp
inc ebp
cmp byte [ecx], bh
add esp, 4
or eax, 0x4bc1
pop eax
mov dword [ebp - 0xb3c], 0
jmp 0x40e399
push edi
sub edi, 0x159fb
or edi, 0x30f4
pop edi
push eax
push edi
add esp, 4
sub eax, 0xc16c
xor eax, 0x40f3
call 0x40d89f
add byte [ebx], bh
xor dh, byte [ebx]
aaa
xor eax, dword [esi + 0x44]
cmp al, 0x4a
add esp, 4
pop eax
mov edx, dword [ebp - 0x7f4]
mov eax, dword [edx + 0x18]
mov dword [ebp - 0x380], eax
mov dword [ebp - 0x804], 0
mov ecx, dword [ebp - 0x380]
mov dword [ebp - 0x17e8], ecx
cmp dword [ebp - 0x17e8], 0
jne 0x40d8e2
mov edx, dword [ebp - 0x804]
mov dword [ebp - 0x430], edx
jmp 0x40dbd3
mov eax, dword [ebp - 0x17e8]
mov ecx, dword [ebp - 0x380]
add ecx, dword [eax + 0x3c]
mov dword [ebp - 0x17ec], ecx
jne 0x40d90a
mov edx, dword [ebp - 0x804]
mov dword [ebp - 0x430], edx
jmp 0x40dbd3
mov eax, 8
imul ecx, eax, 0
mov edx, dword [ebp - 0x17ec]
mov eax, dword [edx + ecx + 0x78]
mov dword [ebp - 0x17f0], eax
cmp dword [ebp - 0x17f0], 0
jne 0x40d93c
mov ecx, dword [ebp - 0x804]
mov dword [ebp - 0x430], ecx
jmp 0x40dbd3
mov edx, dword [ebp - 0x380]
add edx, dword [ebp - 0x17f0]
mov dword [ebp - 0x7f8], edx
jne 0x40d961
mov eax, dword [ebp - 0x804]
mov dword [ebp - 0x430], eax
jmp 0x40dbd3
mov ecx, dword [ebp - 0x7f8]
mov edx, dword [ebp - 0x380]
add edx, dword [ecx + 0x20]
mov dword [ebp - 0x1b78], edx
mov eax, dword [ebp - 0x7f8]
mov ecx, dword [ebp - 0x380]
add ecx, dword [eax + 0x24]
mov dword [ebp - 0x1b7c], ecx
mov edx, dword [ebp - 0x7f8]
mov eax, dword [ebp - 0x380]
add eax, dword [edx + 0x1c]
mov dword [ebp - 0x1b80], eax
mov dword [ebp - 0x7fc], 0
jmp 0x40d9bb
mov ecx, dword [ebp - 0x7fc]
add ecx, 1
mov dword [ebp - 0x7fc], ecx
mov edx, dword [ebp - 0x7f8]
mov eax, dword [ebp - 0x7fc]
cmp eax, dword [edx + 0x18]
jae 0x40dbc7
mov ecx, dword [ebp - 0x7fc]
mov edx, dword [ebp - 0x1b78]
mov eax, dword [ebp - 0x380]
add eax, dword [edx + ecx*4]
mov dword [ebp - 0x800], eax
mov ecx, dword [ebp - 0x7fc]
mov edx, dword [ebp - 0x1b7c]
movzx eax, word [edx + ecx*2]
mov ecx, dword [ebp - 0x1b80]
mov edx, dword [ebp - 0x380]
add edx, dword [ecx + eax*4]
mov dword [ebp - 0x1b84], edx
mov dword [ebp - 0x1b8], 0
jmp 0x40da2b
mov eax, dword [ebp - 0x1b8]
add eax, 1
mov dword [ebp - 0x1b8], eax
mov ecx, dword [ebp - 0x800]
add ecx, dword [ebp - 0x1b8]
movsx edx, byte [ecx]
test edx, edx
je 0x40dadd
mov eax, dword [ebp - 0x1b8]
movsx ecx, byte [ebp + eax - 0x928]
test ecx, ecx
je 0x40dadd
push ebx
xor ebx, 0x33b3
add ebx, 0x6f87
or ebx, 0x1798
pop ebx
push ebx
push esi
add esp, 4
sub ebx, 0xe92
add ebx, 0xe0b3
pop ebx
push ecx
push esi
add esp, 4
sub ecx, 0x1853e
pop ecx
mov edx, dword [ebp - 0x800]
add edx, dword [ebp - 0x1b8]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x1b8]
movsx edx, byte [ebp + ecx - 0x928]
cmp eax, edx
je 0x40dacf
mov eax, dword [ebp - 0x800]
add eax, dword [ebp - 0x1b8]
movsx ecx, byte [eax]
xor ecx, 0x20
mov edx, dword [ebp - 0x1b8]
movsx eax, byte [ebp + edx - 0x928]
cmp ecx, eax
jne 0x40dad6
jmp 0x40da1c
jmp 0x40dadd
push edi
push ecx
add esp, 4
and edi, 0x4b18
pop edi
push esi
push esi
add esp, 4
or esi, 0xd3ef
sub esi, 0x12ef2
pop esi
push ebx
push eax
add esp, 4
jmp 0x40db08
xor ebx, 0x14cb9
pop ebx
mov ecx, dword [ebp - 0x800]
add ecx, dword [ebp - 0x1b8]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x1b8]
movsx ecx, byte [ebp + eax - 0x928]
cmp edx, ecx
jne 0x40db3c
mov dword [ebp - 0xdd8], 0
jmp 0x40dbab
push ecx
push eax
add esp, 4
or ecx, 0xdca5
call 0x40db56
add byte [edx + 0x3d], cl
cmp dword [esi], edi
inc edi
cmp dword [edx], edi
dec esp
dec edx
add esp, 4
pop ecx
push edx
push ecx
add esp, 4
and edx, 0xc5d2
pop edx
push eax
sub eax, 0x17c1f
pop eax
mov edx, dword [ebp - 0x800]
add edx, dword [ebp - 0x1b8]
movsx eax, byte [edx]
or eax, 0x20
mov ecx, dword [ebp - 0x1b8]
movsx edx, byte [ebp + ecx - 0x928]
or edx, 0x20
cmp eax, edx
jge 0x40dba1
mov dword [ebp - 0xdd8], 0xffffffff
jmp 0x40dbab
mov dword [ebp - 0xdd8], 1
cmp dword [ebp - 0xdd8], 0
jne 0x40dbc2
mov eax, dword [ebp - 0x1b84]
mov dword [ebp - 0x430], eax
jmp 0x40dbd3
jmp 0x40d9ac
mov ecx, dword [ebp - 0x804]
mov dword [ebp - 0x430], ecx
cmp dword [ebp - 0x430], 0
je 0x40dcae
push ebx
push eax
add esp, 4
call 0x40dbf4
add byte [esp + edi], bh
inc ebp
xor esi, dword [0x453c3b48]
add esp, 4
sub ebx, 0x11f6a
pop ebx
push esi
push ebx
add esp, 4
sub esi, 0x8fd1
pop esi
push eax
add eax, 0xf80d
pop eax
mov edx, dword [ebp - 0x430]
mov dword [ebp - 0x1b88], edx
push ecx
sub ecx, 0xe99
or ecx, 0xeb48
and ecx, 0x1135e
pop ecx
push ecx
add ecx, 0x112b8
and ecx, 0xd5c4
pop ecx
push eax
add eax, 0x12e22
pop eax
push ebx
sub ebx, 0x15135
pop ebx
mov eax, dword [ebp - 0x1b88]
mov dword [ebp - 0x1b8c], eax
lea ecx, [ebp - 0x1884]
push ecx
call dword [ebp - 0x1b8c]
test eax, eax
jne 0x40dcae
push edx
push ebx
add esp, 4
add edx, 0x14948
or edx, 0xd2fa
pop edx
push edi
or edi, 0x70bc
call 0x40dc95
add byte [esi], bh
aaa
cmp byte [eax + edx*2], bh
cmp eax, dword [ebp + 0x41]
aaa
add esp, 4
sub edi, 0xa5d8
pop edi
mov dword [ebp - 0xb3c], 0
jmp 0x40e399
push edx
push edi
add esp, 4
xor edx, 0x86a5
call 0x40dcc5
add byte [eax + 0x41], dl
inc ecx
inc edi
inc edx
cmp byte [ebx - 0x157efb3c], al
invalid
push ecx
sub ecx, 0x16016
or ecx, 0xcd98
or ecx, 0x12655
pop ecx
push ebx
push eax
add esp, 4
xor ebx, 0x16392
add ebx, 0x6fa3
sub ebx, 0x8212
and ebx, 0x65a5
pop ebx
mov eax, dword [ebp - 0xb3c]
mov dword [ebp - 0x1ba8], eax
lea ecx, [ebp - 0xdec]
push ecx
push 0x40
mov edx, dword [ebp - 0x180c]
push edx
mov eax, dword [ebp - 0x414]
push eax
call dword [ebp - 0x1ba8]
test eax, eax
jne 0x40e43e
push edi
call 0x40e409
add byte [ebx + 0x44], cl
inc edx
xor dh, byte [esp + edi]
cmp eax, 0x83373833
les eax, [eax + ebp*8]
pop es
add byte [eax], al
add byte [eax], al
dec edi
xor al, byte [edx + 0x4a]
dec eax
aas
add esp, 4
add edi, 0x1420
pop edi
push edx
sub edx, 0xe881
pop edx
mov ecx, dword [ebp - 0x81c]
mov dword [ebp - 0x1bac], ecx
push 0
call dword [ebp - 0x1bac]
mov edx, dword [ebp - 0x1bb0]
mov dword [ebp - 0x818], edx
jmp 0x40e45b
mov eax, dword [ebp - 0x818]
add eax, 1
mov dword [ebp - 0x818], eax
mov ecx, dword [ebp - 0x818]
cmp ecx, dword [ebp - 0xb40]
jae 0x40e4b7
push ecx
or ecx, 0x7908
call 0x40e47d
add byte [ecx + 0x46], al
inc ebx
xor al, 0x4e
inc edi
dec esi
add esp, 4
pop ecx
push esi
add esi, 0x84eb
pop esi
push ebx
push edi
add esp, 4
add ebx, 0x13c96
add ebx, 0xbc44
pop ebx
movzx edx, byte [ebp - 0x419]
mov eax, dword [ebp - 0x818]
movsx ecx, byte [eax]
sub ecx, edx
mov edx, dword [ebp - 0x818]
mov byte [edx], cl
jmp 0x40e44c
mov eax, dword [ebp - 0xb3c]
mov dword [ebp - 0x1bb4], eax
lea ecx, [ebp - 0xdec]
push ecx
mov edx, dword [ebp - 0xdec]
push edx
mov eax, dword [ebp - 0x180c]
push eax
mov ecx, dword [ebp - 0x414]
push ecx
call dword [ebp - 0x1bb4]
test eax, eax
jne 0x40e52f
push ecx
push ebx
add esp, 4
xor ecx, 0x2be8
pop ecx
push edx
and edx, 0x5bfb
add edx, 0x14fb9
add edx, 0xf2d6
add edx, 0x12fbc
pop edx
push esi
push ebx
add esp, 4
and esi, 0x14f00
pop esi
mov edx, dword [ebp - 0x81c]
mov dword [ebp - 0x1bb8], edx
push 0
call dword [ebp - 0x1bb8]
push eax
xor eax, 0x9f56
pop eax
push eax
call 0x40e548
add byte [eax + 0x45], dl
xor eax, 0x443f464c
dec ebp
push eax
add esp, 4
pop eax
push eax
jmp 0x40e552
or eax, 0xbab9
pop eax
push edi
or edi, 0x82b4
pop edi
push edx
mov ecx, 0x10101010
pop edx
push ecx
mov ecx, 0xffff02ff
pop ecx
push ebp
ljmp 0x3702
jecxz 0x421803
add dword [ecx], edx
mov ecx, 0x878d4316
adc dword [ecx - 0x7872bcea], edi
and ah, bl
add dword [ecx], eax
lea ecx, [edi + 0x101fe5a]
add eax, 0x8f8b920e
push ds
jecxz 0x42181c
add ecx, ecx
leave
xchg dword [esi + 0x2010100], ebx
add al, byte [edx]
add ch, ch
adc dword [ebp + 0x1009e97], ecx
add dword [ebp - 0x6874fc3c], eax
sahf
add byte [ecx], al
add dword [ebp + 0x1fb9687], ecx
add dword [0x1009e87], eax
add dword [ecx], edx
ror byte [edx], 0x87
retf