Function at 0x40ac5f
Capabilities:
Contain obfuscated stackstrings
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add esp, 4
pop eax
push edx
push eax
add esp, 4
add edx, 0xac
and edx, 0xf7c6
xor edx, 0x547f
pop edx
mov byte [ebp - 0xbe8], 0x52
mov byte [ebp - 0xbe7], 0xb9
mov byte [ebp - 0xbe6], 0x20
mov byte [ebp - 0xbe5], 0x20
mov byte [ebp - 0xbe4], 0x20
mov byte [ebp - 0xbe3], 0x20
mov byte [ebp - 0xbe2], 0x5a
push ebx
push eax
add esp, 4
add ebx, 0xccc2
pop ebx
push ebx
push edi
add esp, 4
xor ebx, 0x18446
pop ebx
push eax
or eax, 0x11b06
or eax, 0x14367
sub eax, 0x10524
add eax, 0x5535
pop eax
mov dword [ebp - 0x20d0], 0xe
push esi
jmp 0x40a4ad
xor esi, 0x130c9
or esi, 0x16f36
pop esi
push ecx
jmp 0x40a4c2
call 0x40a4ce
add byte [edi], dh
xor al, 0x4f
cmp byte [ecx], bh
cmp al, 0x83
les eax, [ecx + eax*4]
int1
test eax, 0x590000d2
mov ecx, 1
imul edx, ecx, 0
lea eax, [ebp + edx - 0xbf0]
mov dword [ebp - 0x15cc], eax
push edi
push eax
add esp, 4
add edi, 0x53c4
pop edi
push eax
push edi
add esp, 4
sub eax, 0x15c30
pop eax
push eax
push edx
add esp, 4
add eax, 0x18648
add eax, 0x1e6a
jmp 0x40a51e
pop eax
mov dword [ebp - 0x20d4], 0xffffffff
push ebx
push edx
add esp, 4
jmp 0x40a535
pop ebx
push eax
push edx
add esp, 4
or eax, 0xbc34
jmp 0x40a546
xor eax, 0x16338
or eax, 0x4058
pop eax
push edx
sub edx, 0x17613
pop edx
mov ecx, dword [ebp - 0x3f4]
mov dword [ebp - 0x500], ecx
jmp 0x40a578
mov edx, dword [ebp - 0x500]
add edx, 1
mov dword [ebp - 0x500], edx
push eax
sub eax, 0xdd70
pop eax
push edx
call 0x40a58d
add byte [ebp + 0x3c], al
dec ecx
cmp al, 0x40
cmp eax, dword [ebx - 0x157efb3c]
sbb edx, esi
add byte [eax], al
pop edx
push esi
push edx
add esp, 4
or esi, 0x3b92
jmp 0x40a5a9
pop esi
mov eax, dword [ebp - 0x500]
sub eax, dword [ebp - 0x3f4]
cmp eax, 0xffffffff
jb 0x40a5f2
push esi
push ecx
add esp, 4
call 0x40a5cc
add byte [edi + 0x4e], al
inc esi
cmp cl, byte [ebx + 0x46]
add esp, 4
and esi, 0xf98f
and esi, 0x192e
call 0x40a5e9
add byte [edi], dh
inc esp
cmp al, 0x3e
cmp dh, byte [edx]
cmp byte [edi - 0x7d], al
les eax, [esi + ebx*2]
jmp 0x40a820
mov dword [ebp - 0xc84], 7
mov ecx, dword [ebp - 0x500]
mov dword [ebp - 0xad0], ecx
push esi
call 0x40a618
add byte [eax + 0x34], al
cmp ecx, dword [ebp + 0x37]
inc ecx
dec esp
xor al, 0x3c
add esp, 4
pop esi
push ebx
and ebx, 0x27d8
add ebx, 0x15660
call 0x40a636
add byte [ecx + 0x38], al
xor ecx, dword [ebp + 0x4f]
cmp cl, byte [eax - 0x7d]
les eax, [ebx + ebx*2]
mov edx, dword [ebp - 0x15cc]
mov dword [ebp - 0xacc], edx
mov dword [ebp - 0xc88], 0
mov eax, dword [ebp - 0x500]
cmp eax, dword [ebp - 0x15cc]
jne 0x40a6a1
push edx
call 0x40a66f
add byte [eax + 0x46], cl
dec ebx
inc ebx
inc ebx
inc edi
inc ebp
aaa
dec ebp
add esp, 4
jmp 0x40a677
xor edx, 0x1771e
and edx, 0x7610
pop edx
push eax
push eax
add esp, 4
xor eax, 0x4eb0
pop eax
mov ecx, dword [ebp - 0xc88]
mov dword [ebp - 0x15d4], ecx
jmp 0x40a7d2
cmp dword [ebp - 0xc84], 0
jle 0x40a7c6
push edx
xor edx, 0x8c17
or edx, 0x2a2e
or edx, 0x17d0b
sub edx, 0xd5e9
pop edx
push ecx
push edi
add esp, 4
add ecx, 0x8e51
and ecx, 0x177d1
xor ecx, 0x17385
pop ecx
mov edx, dword [ebp - 0xad0]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0xacc]
movzx edx, byte [ecx]
cmp eax, edx
je 0x40a762
push edx
sub edx, 0x2854
or edx, 0x1362e
and edx, 0xb9fa
pop edx
push eax
push edx
add esp, 4
and eax, 0xe58
or eax, 0xd6f3
add eax, 0xeadb
xor eax, 0x6ec2
pop eax
mov eax, dword [ebp - 0xad0]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0xacc]
movzx eax, byte [edx]
cmp ecx, eax
jle 0x40a74a
mov dword [ebp - 0x15d0], 1
jmp 0x40a754
mov dword [ebp - 0x15d0], 0xffffffff
mov ecx, dword [ebp - 0x15d0]
mov dword [ebp - 0xc88], ecx
jmp 0x40a7c6
push edx
xor edx, 0x8302
or edx, 0xfa66
add edx, 0xa9f9
add edx, 0xe513
pop edx
push esi
push esi
add esp, 4
xor esi, 0x91df
or esi, 0x300b
add esi, 0x15d9a
pop esi
mov edx, dword [ebp - 0xc84]
sub edx, 1
mov dword [ebp - 0xc84], edx
mov eax, dword [ebp - 0xad0]
add eax, 1
mov dword [ebp - 0xad0], eax
mov ecx, dword [ebp - 0xacc]
add ecx, 1
mov dword [ebp - 0xacc], ecx
jmp 0x40a6a1
mov edx, dword [ebp - 0xc88]
mov dword [ebp - 0x15d4], edx
cmp dword [ebp - 0x15d4], 0
jne 0x40a81b
push ecx
xor ecx, 0x184c4
sub ecx, 0x5392
pop ecx
push esi
push ecx
add esp, 4
add esi, 0x2f51
xor esi, 0x4dd2
sub esi, 0xb789
pop esi
push esi
push ecx
add esp, 4
and esi, 0x14ab1
pop esi
mov eax, dword [ebp - 0x500]
mov dword [ebp - 0x3e4], eax
jmp 0x40a85c
jmp 0x40a569
push esi
push ebx
add esp, 4
xor esi, 0x151c0
and esi, 0x78e9
or esi, 0xb5df
pop esi
push edx
or edx, 0xa37d
call 0x40a84e
add byte [eax + 0x44], cl
inc edx
cmp al, 0x3f
inc esi
cmp esi, dword [ebx]
add esp, 4
pop edx
mov dword [ebp - 0x3e4], 0
push ecx
push eax
add esp, 4
and ecx, 0xa868
jmp 0x40a86d
sub ecx, 0x17130
call 0x40a882
add byte [eax + 0x44], al
inc ebx
inc ecx
inc ebx
inc ecx
inc esp
push eax
add esp, 4
pop ecx
push edx
and edx, 0x155b
pop edx
push eax
or eax, 0x148b9
xor eax, 0x15f4a
jmp 0x40a8a3
and eax, 0xa791
pop eax
push eax
sub eax, 0xa990
sub eax, 0x103b1
pop eax
push ecx
add ecx, 0xd249
pop ecx
mov ecx, 1
imul edx, ecx, 0
lea eax, [ebp + edx - 0xbe8]
mov dword [ebp - 0x15d8], eax
push eax
push esi
add esp, 4
add eax, 0x4891
xor eax, 0x39a6
pop eax
push esi
push ebx
add esp, 4
or esi, 0x76c
sub esi, 0xbff7
sub esi, 0x2a4d
pop esi
push esi
xor esi, 0x6f95
pop esi
mov dword [ebp - 0x20d8], 0xffffffff
push edi
xor edi, 0xd7c
add edi, 0xb102
pop edi
push edi
call 0x40a92d
add byte [edx + 0x3c], al
inc esp
inc esi
dec ebx
inc esp
dec ebx
add esp, 4
xor edi, 0x15da9
pop edi
push ecx
push eax
add esp, 4
add ecx, 0xa6c
pop ecx
mov ecx, dword [ebp - 0x3f4]
mov dword [ebp - 0x504], ecx
jmp 0x40a960
mov edx, dword [ebp - 0x504]
add edx, 1
mov dword [ebp - 0x504], edx
push ebx
sub ebx, 0x52ed
or ebx, 0x125bd
sub ebx, 0x1632d
sub ebx, 0x9d0e
pop ebx
push eax
push ecx
add esp, 4
and eax, 0x57b8
or eax, 0x19e6
or eax, 0x14d2d
pop eax
mov eax, dword [ebp - 0x504]
sub eax, dword [ebp - 0x3f4]
cmp eax, 0xffffffff
jb 0x40a9da
push ecx
sub ecx, 0x70a1
add ecx, 0xc8a5
add ecx, 0xcd8e
pop ecx
push ecx
push edx
add esp, 4
sub ecx, 0xecaa
and ecx, 0x4ec1
xor ecx, 0xe3fb
or ecx, 0x1739b
pop ecx
jmp 0x40ac08
mov dword [ebp - 0xc8c], 7
mov ecx, dword [ebp - 0x504]
mov dword [ebp - 0xac8], ecx
push ecx
push ecx
add esp, 4
jmp 0x40a9fd
pop ecx
push esi
jmp 0x40aa07
or esi, 0x4bdc
pop esi
push eax
sub eax, 0x1233b
pop eax
push edx
push esi
add esp, 4
or edx, 0x59a0
pop edx
mov edx, dword [ebp - 0x15d8]
mov dword [ebp - 0xa64], edx
mov dword [ebp - 0xc90], 0
mov eax, dword [ebp - 0x504]
cmp eax, dword [ebp - 0x15d8]
jne 0x40aa89
push esi
push ebx
add esp, 4
sub esi, 0x14f60
add esi, 0xfc28
pop esi
push edx
or edx, 0x15600
call 0x40aa6e
add byte [edi + 0x4b], al
inc ecx
xor al, 0x3f
cmp byte [0xc4833f3b], bh
add al, 0x81
bnd jno 0x40aa85
add byte [eax], al
pop edx
mov ecx, dword [ebp - 0xc90]
mov dword [ebp - 0x15a8], ecx
jmp 0x40abba
xor dword [ecx], eax
add byte [eax], al
cmp dword [ebp - 0xc8c], 0
jle 0x40abae
push ebx
push ecx
add esp, 4
xor ebx, 0xf928
xor ebx, 0x9e89
sub ebx, 0xcf03
pop ebx
push edx
or edx, 0xf89f
xor edx, 0x11309
pop edx
push esi
push edx
add esp, 4
add esi, 0xf4fd
pop esi
mov edx, dword [ebp - 0xac8]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0xa64]
movzx edx, byte [ecx]
cmp eax, edx
je 0x40ab4a
push esi
and esi, 0x10dc7
add esi, 0xf1e5
jmp 0x40aaf1
add esi, 0x8342
pop esi
push eax
push edx
add esp, 4
add eax, 0x13109
or eax, 0x1ca1
and eax, 0xea4
pop eax
mov eax, dword [ebp - 0xac8]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0xa64]
movzx eax, byte [edx]
cmp ecx, eax
jle 0x40ab32
mov dword [ebp - 0x15dc], 1
jmp 0x40ab3c
mov dword [ebp - 0x15dc], 0xffffffff
mov ecx, dword [ebp - 0x15dc]
mov dword [ebp - 0xc90], ecx
jmp 0x40abae
push edx
sub edx, 0x118b9
and edx, 0x18486
pop edx
push ecx
xor ecx, 0x155e4
call 0x40ab6c
add byte [edx + 0x3c], cl
inc ebx
aas
xor eax, 0x8104c483
leave
movsd dword es:[edi], dword [esi]
jl 0x40ab75
add dword [eax], eax
add byte [ecx + 0x7ac8c1], al
add byte [ecx - 0x75], bl
xchg ebp, eax
je 0x40ab73
add ecx, 0x7ac8
pop ecx
mov edx, dword [ebp - 0xc8c]
sub edx, 1
mov dword [ebp - 0xc8c], edx
mov eax, dword [ebp - 0xac8]
add eax, 1
mov dword [ebp - 0xac8], eax
mov ecx, dword [ebp - 0xa64]
add ecx, 1
mov dword [ebp - 0xa64], ecx
jmp 0x40aa89
invalid
mov edx, dword [ebp - 0xc90]
mov dword [ebp - 0x15a8], edx
cmp dword [ebp - 0x15a8], 0
jne 0x40ac03
push esi
push ecx
add esp, 4
add esi, 0x13e45
call 0x40abdd
add byte [edx], dh
cmp dword [ebp + 0x35], eax
dec ebp
dec esi
cmp byte [ebx + 0x4c], al
add esp, 4
add esi, 0x4edf
pop esi
push edi
push ebx
add esp, 4
jmp 0x40abf4
pop edi
mov eax, dword [ebp - 0x504]
mov dword [ebp - 0xac4], eax
jmp 0x40ac44
jmp 0x40a951
push eax
push edi
add esp, 4
or eax, 0xcd9e
xor eax, 0x9c30
add eax, 0x2527
add eax, 0x68ad
pop eax
push ebx
or ebx, 0x522c
add ebx, 0x1835
sub ebx, 0x3257
pop ebx
mov dword [ebp - 0xac4], 0
push eax
xor eax, 0x16ba0
xor eax, 0xe436
call 0x40ac5f
add byte [edx], dh
inc ebp
dec esi
inc ebp
xor eax, 0x833b394b
les eax, [eax + ebx*2]
push edi
call 0x40ac72
add byte [edi], dh
cmp edi, dword [edx]
dec edx
cmp eax, 0xc4833935
add al, 0x5f
mov byte [ebp - 0x87c], 0x45
mov byte [ebp - 0x87b], 0x78
mov byte [ebp - 0x87a], 0x69
mov byte [ebp - 0x879], 0x74
mov byte [ebp - 0x878], 0x50
mov byte [ebp - 0x877], 0x72
mov byte [ebp - 0x876], 0x6f
mov byte [ebp - 0x875], 0x63
mov byte [ebp - 0x874], 0x65
mov byte [ebp - 0x873], 0x73
mov byte [ebp - 0x872], 0x73
mov byte [ebp - 0x871], 0
push eax
push edx
add esp, 4
xor eax, 0x15083
add eax, 0x159c2
add eax, 0x9aff
pop eax
push esi
push edi
add esp, 4
or esi, 0x61b5
pop esi
push ecx
add ecx, 0xf611
and ecx, 0x10b63
pop ecx
mov ecx, 0x6b
mov word [ebp - 0x1740], cx
mov edx, 0x65
mov word [ebp - 0x173e], dx
mov eax, 0x72
mov word [ebp - 0x173c], ax
mov ecx, 0x6e
mov word [ebp - 0x173a], cx
mov edx, 0x65
mov word [ebp - 0x1738], dx
mov eax, 0x6c
mov word [ebp - 0x1736], ax
mov ecx, 0x33
mov word [ebp - 0x1734], cx
mov edx, 0x32
mov word [ebp - 0x1732], dx
mov eax, 0x2e
mov word [ebp - 0x1730], ax
mov ecx, 0x64
mov word [ebp - 0x172e], cx
mov edx, 0x6c
mov word [ebp - 0x172c], dx
mov eax, 0x6c
mov word [ebp - 0x172a], ax
xor ecx, ecx
mov word [ebp - 0x1728], cx
push eax
push ebx
add esp, 4
or eax, 0x6e0b
and eax, 0x13bbf
and eax, 0xe7e4
pop eax
push esi
xor esi, 0x8cc7
sub esi, 0x16680
add esi, 0xdee6
and esi, 0xebe2
pop esi
push esi
and esi, 0x1529d
jmp 0x40add5
or esi, 0x1210
pop esi
push ebx
push ecx
add esp, 4
and ebx, 0x1b0e
pop ebx
push edx
jmp 0x40adf2
sub edx, 0x10b3e
pop edx
mov edx, dword fs:[0x18]
mov dword [ebp - 0x2034], edx
mov eax, dword [ebp - 0x2034]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0x198c], ecx
mov edx, dword [ebp - 0x198c]
mov dword [ebp - 0x15e0], edx
push edx
and edx, 0xd967
pop edx
push esi
push eax
add esp, 4
sub esi, 0x13899
pop esi
push edx
push ecx
add esp, 4
sub edx, 0x17d53
and edx, 0x11af5
add edx, 0xcfbd
jmp 0x40ae52
pop edx
cmp dword [ebp - 0x15e0], 0
jne 0x40ae6b
mov dword [ebp - 0x2d4], 0
jmp 0x40b127
mov eax, dword [ebp - 0x15e0]
mov ecx, dword [eax + 0xc]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0xc9c], edx
push edi
call 0x40ae8b
add byte [edi + 0x43], cl
dec ecx
xor bh, byte [edx]
cmp eax, 0x4c48333
xor edi, 0x13db
pop edi
push eax
and eax, 0xdcae
and eax, 0x723e
xor eax, 0x7a5a
and eax, 0x5e02
pop eax
cmp dword [ebp - 0xc9c], 0
jne 0x40aec7
mov dword [ebp - 0x2d4], 0
jmp 0x40b127
mov eax, dword [ebp - 0xc9c]
mov dword [ebp - 0x508], eax
push edi
add edi, 0x5285
pop edi
push edx
push esi
add esp, 4
sub edx, 0xee53
call 0x40aef5
add byte [edx + edi], bh
inc esp
xor eax, 0x3839453e
inc eax
add esp, 4
and edx, 0x9622
and edx, 0x9bc8
pop edx
lea ecx, [ebp - 0x1740]
mov dword [ebp - 0xc98], ecx
mov edx, dword [ebp - 0x508]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0xc94], eax
xor ecx, ecx
mov word [ebp - 0x210], cx
xor edx, edx
mov word [ebp - 0x10c], dx
push ecx
and ecx, 0x242b
pop ecx
push ecx
push edx
add esp, 4
jmp 0x40af48
pop ecx
push edi
push edx
add esp, 4
add edi, 0x15b60
jmp 0x40af5d
xor edi, 0x12a6b
pop edi
mov eax, dword [ebp - 0xc94]
mov cx, word [eax]
mov word [ebp - 0x1036], cx
mov edx, dword [ebp - 0xc94]
add edx, 2
mov dword [ebp - 0xc94], edx
mov ax, word [ebp - 0x1036]
mov word [ebp - 0x210], ax
mov ecx, dword [ebp - 0xc98]
mov dx, word [ecx]
mov word [ebp - 0x1038], dx
mov eax, dword [ebp - 0xc98]
add eax, 2
mov dword [ebp - 0xc98], eax
mov cx, word [ebp - 0x1038]
mov word [ebp - 0x10c], cx
push edx
call 0x40afcb
add byte [edi], bh
inc edx
inc ebp
dec ebp
aas
add esp, 4
or edx, 0xe28a
jmp 0x40afdd
pop edx
push edx
call 0x40afec
add byte [ebx + 0x3b], al
cmp eax, 0x4d3f3b4c
add esp, 4
pop edx
movzx edx, word [ebp - 0x10c]
test edx, edx
jne 0x40b013
movzx eax, word [ebp - 0x210]
movzx ecx, word [ebp - 0x10c]
sub eax, ecx
mov dword [ebp - 0x15e8], eax
jmp 0x40b076
movzx edx, word [ebp - 0x210]
movzx eax, word [ebp - 0x10c]
cmp edx, eax
je 0x40af32
movzx ecx, word [ebp - 0x210]
xor ecx, 0x20
movzx edx, word [ebp - 0x10c]
cmp ecx, edx
je 0x40af32
movzx eax, word [ebp - 0x210]
movzx ecx, word [ebp - 0x10c]
cmp eax, ecx
jge 0x40b060
mov dword [ebp - 0x15e4], 0xffffffff
jmp 0x40b06a
mov dword [ebp - 0x15e4], 1
mov edx, dword [ebp - 0x15e4]
mov dword [ebp - 0x15e8], edx
cmp dword [ebp - 0x15e8], 0
jne 0x40b0bf
push edi
call 0x40b08f
add byte [edx], dh
dec ebx
inc esi
xor al, 0x35
dec eax
dec edx
cmp byte [edi - 0x7d], cl
les eax, [ecx + eax*4]
out dx, eax
fadd dword [eax + eax]
add edi, 0x11f0
pop edi
push ebx
push ecx
add esp, 4
or ebx, 0x5f42
and ebx, 0x50eb
pop ebx
mov eax, dword [ebp - 0x508]
mov dword [ebp - 0x2d4], eax
jmp 0x40b127
push ecx
or ecx, 0x16faf
and ecx, 0x6477
and ecx, 0xd161
pop ecx
push edi
push ebx
add esp, 4
and edi, 0x453a
and edi, 0xecba
or edi, 0x6bb3
add edi, 0x7e5e
pop edi
mov ecx, dword [ebp - 0x508]
mov edx, dword [ecx]
mov dword [ebp - 0x508], edx
mov eax, dword [ebp - 0x508]
cmp eax, dword [ebp - 0xc9c]
je 0x40b11d
mov ecx, dword [ebp - 0x508]
cmp dword [ecx + 0x30], 0
jne 0x40aed3
mov dword [ebp - 0x2d4], 0
push ebx
push eax
add esp, 4
sub ebx, 0xa2da
xor ebx, 0x128a
xor ebx, 0x69a
pop ebx
push edx
push ecx
add esp, 4
xor edx, 0xd255
xor edx, 0x1eb1
pop edx
push eax
jmp 0x40b158
pop eax
cmp dword [ebp - 0x2d4], 0
jne 0x40ba72
mov edx, 0x6b
mov word [ebp - 0x17ac], dx
mov eax, 0x65
mov word [ebp - 0x17aa], ax
mov ecx, 0x72
mov word [ebp - 0x17a8], cx
mov edx, 0x6e
mov word [ebp - 0x17a6], dx
mov eax, 0x65
mov word [ebp - 0x17a4], ax
mov ecx, 0x6c
mov word [ebp - 0x17a2], cx
mov edx, 0x33
mov word [ebp - 0x17a0], dx
mov eax, 0x32
mov word [ebp - 0x179e], ax
mov ecx, 0x2e
mov word [ebp - 0x179c], cx
mov edx, 0x64
mov word [ebp - 0x179a], dx
mov eax, 0x6c
mov word [ebp - 0x1798], ax
mov ecx, 0x6c
mov word [ebp - 0x1796], cx
xor edx, edx
mov word [ebp - 0x1794], dx
push esi
push ebx
add esp, 4
xor esi, 0x15bfa
and esi, 0x17e56
xor esi, 0x1f3f
sub esi, 0xc385
pop esi
push eax
and eax, 0x10dd7
or eax, 0xf768
add eax, 0xd9b6
pop eax
mov byte [ebp - 0x898], 0x4c
mov byte [ebp - 0x897], 0x6f
mov byte [ebp - 0x896], 0x61
mov byte [ebp - 0x895], 0x64
mov byte [ebp - 0x894], 0x4c
mov byte [ebp - 0x893], 0x69
mov byte [ebp - 0x892], 0x62
mov byte [ebp - 0x891], 0x72
mov byte [ebp - 0x890], 0x61
mov byte [ebp - 0x88f], 0x72
mov byte [ebp - 0x88e], 0x79
mov byte [ebp - 0x88d], 0x57
mov byte [ebp - 0x88c], 0
mov eax, dword fs:[0x18]
mov dword [ebp - 0x1990], eax
mov ecx, dword [ebp - 0x1990]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x1994], edx
mov eax, dword [ebp - 0x1994]
mov dword [ebp - 0x15ec], eax
push edx
jmp 0x40b2ba
pop edx
push ecx
sub ecx, 0xbc48
pop ecx
push ebx
and ebx, 0x8255
jmp 0x40b2d2
sub ebx, 0x5f
pop ebx
push ebx
push ebx
add esp, 4
add ebx, 0x8186
pop ebx
cmp dword [ebp - 0x15ec], 0
jne 0x40b2fd
mov dword [ebp - 0x754], 0
jmp 0x40b5b9
mov ecx, dword [ebp - 0x15ec]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xca8], eax
push ecx
or ecx, 0xcc81
jmp 0x40b31e
call 0x40b32b
add byte [ebx + 0x4d], cl
dec esi
aaa
inc eax
push eax
dec edx
add esp, 4
or ecx, 0x17395
pop ecx
push edi
push esi
add esp, 4
xor edi, 0x82aa
pop edi
cmp dword [ebp - 0xca8], 0
jne 0x40b359
mov dword [ebp - 0x754], 0
jmp 0x40b5b9
mov ecx, dword [ebp - 0xca8]
mov dword [ebp - 0x50c], ecx
push edx
push ebx
add esp, 4
and edx, 0xc665
pop edx
push edi
push ecx
add esp, 4
sub edi, 0x16f26
pop edi
push ebx
sub ebx, 0x36af
xor ebx, 0x15ace
or ebx, 0x2726
sub ebx, 0xd68c
pop ebx
lea edx, [ebp - 0x17ac]
mov dword [ebp - 0xca4], edx
mov eax, dword [ebp - 0x50c]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xca0], ecx
xor edx, edx
mov word [ebp - 0x214], dx
xor eax, eax
mov word [ebp - 0x110], ax
push esi
push eax
add esp, 4
add esi, 0x10200
jmp 0x40b3d4
pop esi
push ecx
jmp 0x40b3db
sub ecx, 0xe825
xor ecx, 0x76a7
add ecx, 0x668f
pop ecx
push ebx
add ebx, 0x45e7
pop ebx
mov ecx, dword [ebp - 0xca0]
mov dx, word [ecx]
mov word [ebp - 0x103a], dx
mov eax, dword [ebp - 0xca0]
add eax, 2
mov dword [ebp - 0xca0], eax
mov cx, word [ebp - 0x103a]
mov word [ebp - 0x214], cx
mov edx, dword [ebp - 0xca4]
mov ax, word [edx]
mov word [ebp - 0x103c], ax
mov ecx, dword [ebp - 0xca4]
add ecx, 2
mov dword [ebp - 0xca4], ecx
mov dx, word [ebp - 0x103c]
mov word [ebp - 0x110], dx
push edi
and edi, 0x45f6
or edi, 0x15e92
pop edi
push edx
sub edx, 0x5d5b
add edx, 0xd9c3
add edx, 0x12c97
pop edx
push esi
xor esi, 0x14bee
pop esi
push ecx
sub ecx, 0x15304
pop ecx
movzx eax, word [ebp - 0x110]
test eax, eax
jne 0x40b4a5
movzx ecx, word [ebp - 0x214]
movzx edx, word [ebp - 0x110]
sub ecx, edx
mov dword [ebp - 0x15f4], ecx
jmp 0x40b508
movzx eax, word [ebp - 0x214]
movzx ecx, word [ebp - 0x110]
cmp eax, ecx
je 0x40b3c4
movzx edx, word [ebp - 0x214]
xor edx, 0x20
movzx eax, word [ebp - 0x110]
cmp edx, eax
je 0x40b3c4
movzx ecx, word [ebp - 0x214]
movzx edx, word [ebp - 0x110]
cmp ecx, edx
jge 0x40b4f2
mov dword [ebp - 0x15f0], 0xffffffff
jmp 0x40b4fc
mov dword [ebp - 0x15f0], 1
mov eax, dword [ebp - 0x15f0]
mov dword [ebp - 0x15f4], eax
cmp dword [ebp - 0x15f4], 0
jne 0x40b551
push eax
call 0x40b51f
add byte [edi + 0x4a], al
dec eax
cmp eax, 0xc4834c42
add al, 0x81
enter 0x6fb8, 0
add byte [ecx + 0xc114e0], al
add byte [eax + 0x57], bl
xor edi, 0x1208
and edi, 0x158cc
sub edi, 0xf9b4
pop edi
mov ecx, dword [ebp - 0x50c]
mov dword [ebp - 0x754], ecx
jmp 0x40b5b9
push ebx
push edi
add esp, 4
and ebx, 0x4bf1
or ebx, 0x12bb2
xor ebx, 0xf516
pop ebx
push ebx
xor ebx, 0x18630
and ebx, 0x10c67
add ebx, 0x149df
or ebx, 0x9f4
pop ebx
mov edx, dword [ebp - 0x50c]
mov eax, dword [edx]
mov dword [ebp - 0x50c], eax
mov ecx, dword [ebp - 0x50c]
cmp ecx, dword [ebp - 0xca8]
je 0x40b5af
mov edx, dword [ebp - 0x50c]
cmp dword [edx + 0x30], 0
jne 0x40b365
mov dword [ebp - 0x754], 0
push esi
push esi
add esp, 4
xor esi, 0x6f81
pop esi
push edi
xor edi, 0xdd15
call 0x40b5db
add byte [edi], dh
xor cl, byte [eax + 0x37]
dec edx
inc ecx
dec esi
cmp ecx, dword [ebx + eax*4 - 0x3c]
add al, 0x81
iretd
push edx
push ecx
add esp, 4
or edx, 0xe342
pop edx
push eax
push eax
add esp, 4
and eax, 0x39e7
add eax, 0xe236
and eax, 0xb2d0
pop eax
push eax
push eax
add esp, 4
jmp 0x40baa3
pop eax
mov eax, dword fs:[0x18]
mov dword [ebp - 0x19b0], eax
mov ecx, dword [ebp - 0x19b0]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x19b4], edx
mov eax, dword [ebp - 0x19b4]
mov dword [ebp - 0x1604], eax
push edi
push ebx
add esp, 4
xor edi, 0xbea0
jmp 0x40badf
pop edi
push eax
add eax, 0x96a8
xor eax, 0x10274
add eax, 0x11405
jmp 0x40bafc
pop eax
cmp dword [ebp - 0x1604], 0
jne 0x40bb15
mov dword [ebp - 0x2d4], 0
jmp 0x40bdbc
mov ecx, dword [ebp - 0x1604]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xcb8], eax
push ebx
call 0x40bb37
add byte [ecx], bh
cmp eax, 0x4840444f
inc esp
dec esi
xor eax, dword [ebx + 0x565b04c4]
and esi, 0x15ddc
jmp 0x40bb49
jmp 0x40bb52
sub esi, 0x6f0c
pop esi
cmp dword [ebp - 0xcb8], 0
jne 0x40bb71
mov dword [ebp - 0x2d4], 0
jmp 0x40bdbc
mov ecx, dword [ebp - 0xcb8]
mov dword [ebp - 0x510], ecx
push edx
xor edx, 0x6970
call 0x40bb91
add byte [0x4d484141], dh
inc ebx
dec ecx
add esp, 4
add edx, 0x96d6
pop edx
push ebx
and ebx, 0x154c7
sub ebx, 0x17198
or ebx, 0x1672a
pop ebx
lea edx, [ebp - 0x1740]
mov dword [ebp - 0xcb4], edx
mov eax, dword [ebp - 0x510]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xcb0], ecx
xor edx, edx
mov word [ebp - 0x218], dx
xor eax, eax
mov word [ebp - 0x34], ax
push esi
or esi, 0x12262
and esi, 0xc632
jmp 0x40bbef
jmp 0x40bbf6
pop esi
push edi
push eax
add esp, 4
xor edi, 0xcf65
pop edi
push edx
and edx, 0x8403
pop edx
mov ecx, dword [ebp - 0xcb0]
mov dx, word [ecx]
mov word [ebp - 0x103e], dx
mov eax, dword [ebp - 0xcb0]
add eax, 2
mov dword [ebp - 0xcb0], eax
mov cx, word [ebp - 0x103e]
mov word [ebp - 0x218], cx
mov edx, dword [ebp - 0xcb4]
mov ax, word [edx]
mov word [ebp - 0x1040], ax
mov ecx, dword [ebp - 0xcb4]
add ecx, 2
mov dword [ebp - 0xcb4], ecx
mov dx, word [ebp - 0x1040]
mov word [ebp - 0x34], dx
push edi
push edi
add esp, 4
and edi, 0x13ef2
jmp 0x40bc74
pop edi
push edi
add edi, 0x8418
call 0x40bc8a
add byte [ebp + 0x3b], al
inc edi
cmp eax, dword [esi + 0x4b]
dec edx
dec esp
add esp, 4
sub edi, 0x1842e
pop edi
movzx eax, word [ebp - 0x34]
test eax, eax
jne 0x40bcb1
movzx ecx, word [ebp - 0x218]
movzx edx, word [ebp - 0x34]
sub ecx, edx
mov dword [ebp - 0x160c], ecx
jmp 0x40bd0b
movzx eax, word [ebp - 0x218]
movzx ecx, word [ebp - 0x34]
cmp eax, ecx
je 0x40bbd9
movzx edx, word [ebp - 0x218]
xor edx, 0x20
movzx eax, word [ebp - 0x34]
cmp edx, eax
je 0x40bbd9
movzx ecx, word [ebp - 0x218]
movzx edx, word [ebp - 0x34]
cmp ecx, edx
jge 0x40bcf5
mov dword [ebp - 0x1608], 0xffffffff
jmp 0x40bcff
mov dword [ebp - 0x1608], 1
mov eax, dword [ebp - 0x1608]
mov dword [ebp - 0x160c], eax
cmp dword [ebp - 0x160c], 0
jne 0x40bd54
push esi
push edx
add esp, 4
or esi, 0x124b9
pop esi
push edi
push eax
add esp, 4
or edi, 0x8647
pop edi
push ecx
and ecx, 0x114e
sub ecx, 0xc19a
sub ecx, 0xe048
xor ecx, 0xf187
pop ecx
mov ecx, dword [ebp - 0x510]
mov dword [ebp - 0x2d4], ecx
jmp 0x40bdbc
push edi
push eax
add esp, 4
xor edi, 0x12252
pop edi
push edx
push edx
add esp, 4
xor edx, 0xab8c
jmp 0x40bd73
call 0x40bd82
add byte [edx + 0x33], al
inc ebp
inc edi
dec ecx
inc esi
dec ecx
inc esi
dec ecx
add esp, 4
pop edx
mov edx, dword [ebp - 0x510]
mov eax, dword [edx]
mov dword [ebp - 0x510], eax
mov ecx, dword [ebp - 0x510]
cmp ecx, dword [ebp - 0xcb8]
je 0x40bdb2
mov edx, dword [ebp - 0x510]
cmp dword [edx + 0x30], 0
jne 0x40bb7d
mov dword [ebp - 0x2d4], 0
push eax
push edx
add esp, 4
jmp 0x40bdc8
call 0x40bdd6
add byte [edi + 0x3d], al
cmp eax, 0x4537494a
dec ebx
add esp, 4
or eax, 0x3999
xor eax, 0x5459
pop eax
push edi
and edi, 0x7274
pop edi
mov eax, dword [ebp - 0x2d4]
mov ecx, dword [eax + 0x18]
mov dword [ebp - 0x324], ecx
push edx
push esi
add esp, 4
xor edx, 0x13732
jmp 0x40be0e
add edx, 0x14d61
pop edx
push ecx
push ebx
add esp, 4
sub ecx, 0x12889
jmp 0x40be28
or ecx, 0x15f0a
pop ecx
mov dword [ebp - 0x774], 0
mov edx, dword [ebp - 0x324]
mov dword [ebp - 0x1610], edx
cmp dword [ebp - 0x1610], 0
jne 0x40be5f
mov eax, dword [ebp - 0x774]
mov dword [ebp - 0x514], eax
jmp 0x40c150
mov ecx, dword [ebp - 0x1610]
mov edx, dword [ebp - 0x324]
add edx, dword [ecx + 0x3c]
mov dword [ebp - 0x1614], edx
jne 0x40be87
mov eax, dword [ebp - 0x774]
mov dword [ebp - 0x514], eax
jmp 0x40c150
mov ecx, 8
imul edx, ecx, 0
mov eax, dword [ebp - 0x1614]
mov ecx, dword [eax + edx + 0x78]
mov dword [ebp - 0x1618], ecx
cmp dword [ebp - 0x1618], 0
jne 0x40beb9
mov edx, dword [ebp - 0x774]
mov dword [ebp - 0x514], edx
jmp 0x40c150
mov eax, dword [ebp - 0x324]
add eax, dword [ebp - 0x1618]
mov dword [ebp - 0x768], eax
jne 0x40bede
mov ecx, dword [ebp - 0x774]
mov dword [ebp - 0x514], ecx
jmp 0x40c150
mov edx, dword [ebp - 0x768]
mov eax, dword [ebp - 0x324]
add eax, dword [edx + 0x20]
mov dword [ebp - 0x19b8], eax
mov ecx, dword [ebp - 0x768]
mov edx, dword [ebp - 0x324]
add edx, dword [ecx + 0x24]
mov dword [ebp - 0x19bc], edx
mov eax, dword [ebp - 0x768]
mov ecx, dword [ebp - 0x324]
add ecx, dword [eax + 0x1c]
mov dword [ebp - 0x19c0], ecx
mov dword [ebp - 0x76c], 0
jmp 0x40bf38
mov edx, dword [ebp - 0x76c]
add edx, 1
mov dword [ebp - 0x76c], edx
mov eax, dword [ebp - 0x768]
mov ecx, dword [ebp - 0x76c]
cmp ecx, dword [eax + 0x18]
jae 0x40c144
mov edx, dword [ebp - 0x76c]
mov eax, dword [ebp - 0x19b8]
mov ecx, dword [ebp - 0x324]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x770], ecx
mov edx, dword [ebp - 0x76c]
mov eax, dword [ebp - 0x19bc]
movzx ecx, word [eax + edx*2]
mov edx, dword [ebp - 0x19c0]
mov eax, dword [ebp - 0x324]
add eax, dword [edx + ecx*4]
mov dword [ebp - 0x1d48], eax
mov dword [ebp - 0x198], 0
jmp 0x40bfa8
mov ecx, dword [ebp - 0x198]
add ecx, 1
mov dword [ebp - 0x198], ecx
mov edx, dword [ebp - 0x770]
add edx, dword [ebp - 0x198]
movsx eax, byte [edx]
test eax, eax
je 0x40c05a
mov ecx, dword [ebp - 0x198]
movsx edx, byte [ebp + ecx - 0x87c]
test edx, edx
je 0x40c05a
push edi
push esi
add esp, 4
jmp 0x40bfe1
jmp 0x40bfea
pop edi
push edx
sub edx, 0x12727
add edx, 0xc191
pop edx
push ebx
add ebx, 0xb820
add ebx, 0x11cf9
pop ebx
mov eax, dword [ebp - 0x770]
add eax, dword [ebp - 0x198]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x198]
movsx eax, byte [ebp + edx - 0x87c]
cmp ecx, eax
je 0x40c04c
mov ecx, dword [ebp - 0x770]
add ecx, dword [ebp - 0x198]
movsx edx, byte [ecx]
xor edx, 0x20
mov eax, dword [ebp - 0x198]
movsx ecx, byte [ebp + eax - 0x87c]
cmp edx, ecx
jne 0x40c053
jmp 0x40bf99
jmp 0x40c05a
push ebx
or ebx, 0x88b7
xor ebx, 0xd257
and ebx, 0xd25b
pop ebx
push edx
push esi
add esp, 4
call 0x40c082
add byte [ebp + edi + 0x39], cl
dec esp
xor dl, byte [eax + 0x4d]
xor ecx, dword [ecx - 0x7d]
les eax, [ecx + eax*4]
loop 0x40c0ea
push ss
add byte [eax], al
pop edx
mov edx, dword [ebp - 0x770]
add edx, dword [ebp - 0x198]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x198]
movsx edx, byte [ebp + ecx - 0x87c]
cmp eax, edx
jne 0x40c0b9
mov dword [ebp - 0xcbc], 0
jmp 0x40c128
push edx
push ebx
add esp, 4
sub edx, 0x19ff
add edx, 0x12788
pop edx
push eax
xor eax, 0x13e35
add eax, 0x6706
xor eax, 0xb1fd
pop eax
push edi
push ecx
add esp, 4
sub edi, 0x91f3
pop edi
mov eax, dword [ebp - 0x770]
add eax, dword [ebp - 0x198]
movsx ecx, byte [eax]
or ecx, 0x20
mov edx, dword [ebp - 0x198]
movsx eax, byte [ebp + edx - 0x87c]
or eax, 0x20
cmp ecx, eax
jge 0x40c11e
mov dword [ebp - 0xcbc], 0xffffffff
jmp 0x40c128
mov dword [ebp - 0xcbc], 1
cmp dword [ebp - 0xcbc], 0
jne 0x40c13f
mov ecx, dword [ebp - 0x1d48]
mov dword [ebp - 0x514], ecx
jmp 0x40c150
jmp 0x40bf29
mov edx, dword [ebp - 0x774]
mov dword [ebp - 0x514], edx
mov eax, dword [ebp - 0x514]
mov dword [ebp - 0x7a0], eax
push esi
jmp 0x40c164
or esi, 0x1151
jmp 0x40c173
jmp 0x40c179
pop esi
push ebx
and ebx, 0xa1bd
pop ebx
push eax
push ebx
add esp, 4
add eax, 0x12ae6
pop eax
mov ecx, dword [ebp - 0x3e4]
add ecx, 0xe
mov dword [ebp - 0x1a10], ecx
push edx
jmp 0x40c1a4
pop edx
push eax
push edx
add esp, 4
add eax, 0x148bb
add eax, 0x3500
or eax, 0x7225
pop eax
push edi
push esi
add esp, 4
sub edi, 0x8f6d
and edi, 0xc8ad
pop edi
cmp dword [ebp - 0x3e4], 0
je 0x40c1e1
cmp dword [ebp - 0xac4], 0
jne 0x40c227
push edi
push ebx
add esp, 4
sub edi, 0x117ab
add edi, 0x11bf8
or edi, 0x9eab
pop edi
push eax
and eax, 0x4d82
sub eax, 0x13249
or eax, 0x809a
jmp 0x40c212
pop eax
mov edx, dword [ebp - 0x7a0]
mov dword [ebp - 0x19c4], edx
push 0
call dword [ebp - 0x19c4]
mov dword [ebp - 0x20dc], 0xa
push eax
or eax, 0x1985
or eax, 0xee19
xor eax, 0x1354e
call 0x40c251
add byte [edi], dh
inc esi
cmp byte ds:[ebp + 0x47], al
add esp, 4
pop eax
push ebx
add ebx, 0xbc10
add ebx, 0xc76e
pop ebx
mov eax, dword [ebp - 0x3e4]
mov cl, byte [eax + 0xa]
mov byte [ebp - 0x3ed], cl
mov edx, dword [ebp - 0xac4]
sub edx, dword [ebp - 0x3e4]
mov dword [ebp - 0x169c], edx
mov dword [ebp - 0xcec], 0
push esi
add esi, 0x17cda
pop esi
push edi
push edi
add esp, 4
jmp 0x40c2a4
add edi, 0x18664
call 0x40c2b6
add byte [0x35344236], bh
add esp, 4
and edi, 0x160e1
pop edi
mov byte [ebp - 0x9d8], 0x56
mov byte [ebp - 0x9d7], 0x69
mov byte [ebp - 0x9d6], 0x72
mov byte [ebp - 0x9d5], 0x74
mov byte [ebp - 0x9d4], 0x75
mov byte [ebp - 0x9d3], 0x61
mov byte [ebp - 0x9d2], 0x6c
mov byte [ebp - 0x9d1], 0x50
mov byte [ebp - 0x9d0], 0x72
mov byte [ebp - 0x9cf], 0x6f
mov byte [ebp - 0x9ce], 0x74
mov byte [ebp - 0x9cd], 0x65
mov byte [ebp - 0x9cc], 0x63
mov byte [ebp - 0x9cb], 0x74
mov byte [ebp - 0x9ca], 0
push ebx
push ebx
add esp, 4
add ebx, 0x2c3f
pop ebx
push eax
jmp 0x40c33f
and eax, 0x17959
xor eax, 0x87ae
call 0x40c357
add byte [edx + 0x3f], cl
cmp dh, byte [edx]
aaa
aas
add esp, 4
pop eax
mov eax, dword fs:[0x18]
mov dword [ebp - 0x19c8], eax
mov ecx, dword [ebp - 0x19c8]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x19cc], edx
mov eax, dword [ebp - 0x19cc]
mov dword [ebp - 0x161c], eax
push eax
sub eax, 0xe741
pop eax
push edi
push eax
add esp, 4
and edi, 0x4866
xor edi, 0xb7fc
call 0x40c3aa
add byte [edx], dh
inc ebx
inc esp
dec eax
dec eax
dec ecx
cmp al, 0x4e
add esp, 4
sub edi, 0xff0d
pop edi
cmp dword [ebp - 0x161c], 0
jne 0x40c3cc
mov dword [ebp - 0x2f4], 0
jmp 0x40c673
mov ecx, dword [ebp - 0x161c]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xcc8], eax
push esi
push eax
add esp, 4
or esi, 0xd688
or esi, 0x135ab
add esi, 0x71fd
or esi, 0x403d
pop esi
push edx
and edx, 0xfebc
and edx, 0x1621a
sub edx, 0xf1b
pop edx
cmp dword [ebp - 0xcc8], 0
jne 0x40c428
mov dword [ebp - 0x2f4], 0
jmp 0x40c673
mov ecx, dword [ebp - 0xcc8]
mov dword [ebp - 0x518], ecx
push edx
or edx, 0xc3b2
xor edx, 0xc495
call 0x40c44e
add byte [edx], bh
aas
dec edi
aas
aaa
dec esi
add esp, 4
add edx, 0xe459
pop edx
push ebx
jmp 0x40c45f
and ebx, 0x7aaa
pop ebx
lea edx, [ebp - 0x1740]
mov dword [ebp - 0xcc4], edx
mov eax, dword [ebp - 0x518]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xcc0], ecx
xor edx, edx
mov word [ebp - 0x21c], dx
xor eax, eax
mov word [ebp - 0x38], ax
push ecx
push edi
add esp, 4
or ecx, 0x1c93
pop ecx
push ebx
push ecx
add esp, 4
and ebx, 0x138ec
jmp 0x40c4af
or ebx, 0x15de9
pop ebx
push esi
push ecx
add esp, 4
sub esi, 0xb8c0
pop esi
mov ecx, dword [ebp - 0xcc0]
mov dx, word [ecx]
mov word [ebp - 0x1042], dx
mov eax, dword [ebp - 0xcc0]
add eax, 2
mov dword [ebp - 0xcc0], eax
mov cx, word [ebp - 0x1042]
mov word [ebp - 0x21c], cx
mov edx, dword [ebp - 0xcc4]
mov ax, word [edx]
mov word [ebp - 0x1044], ax
mov ecx, dword [ebp - 0xcc4]
add ecx, 2
mov dword [ebp - 0xcc4], ecx
mov dx, word [ebp - 0x1044]
mov word [ebp - 0x38], dx
push edi
push ecx
add esp, 4
call 0x40c52c
add byte [ecx + 0x44], al
push eax
cmp eax, dword [ecx + 0x4b]
aaa
cmp al, byte [ebx - 0x387efb3c]
jecxz 0x40c57a
add byte [eax], al
xor edi, 0x11480
pop edi
push edx
push esi
add esp, 4
jmp 0x40c54a
pop edx
movzx eax, word [ebp - 0x38]
test eax, eax
jne 0x40c568
movzx ecx, word [ebp - 0x21c]
movzx edx, word [ebp - 0x38]
sub ecx, edx
mov dword [ebp - 0x1624], ecx
jmp 0x40c5c2
movzx eax, word [ebp - 0x21c]
movzx ecx, word [ebp - 0x38]
cmp eax, ecx
je 0x40c490
dec dword [edi]
mov bh, 0x95
in al, 0xfd
invalid
movzx edx, word [ebp - 0x21c]
xor edx, 0x20
movzx eax, word [ebp - 0x38]
cmp edx, eax
je 0x40c490
movzx ecx, word [ebp - 0x21c]
movzx edx, word [ebp - 0x38]
cmp ecx, edx
jge 0x40c5ac
mov dword [ebp - 0x1620], 0xffffffff
jmp 0x40c5b6
mov dword [ebp - 0x1620], 1
mov eax, dword [ebp - 0x1620]
mov dword [ebp - 0x1624], eax
cmp dword [ebp - 0x1624], 0
jne 0x40c60b
push ecx
sub ecx, 0x5b9a
jmp 0x40c5d9
pop ecx
push esi
push edi
add esp, 4
and esi, 0x2ab4
xor esi, 0x14f1
pop esi
push ecx
xor ecx, 0x11ae9
jmp 0x40c5fc
pop ecx
mov ecx, dword [ebp - 0x518]
mov dword [ebp - 0x2f4], ecx
jmp 0x40c673
push edx
push edi
add esp, 4
or edx, 0x15ed1
or edx, 0x6e
and edx, 0x3ded
pop edx
push edi
push esi
add esp, 4
jmp 0x40c630
xor edi, 0xdd57
and edi, 0x12773
pop edi
mov edx, dword [ebp - 0x518]
mov eax, dword [edx]
mov dword [ebp - 0x518], eax
mov ecx, dword [ebp - 0x518]
cmp ecx, dword [ebp - 0xcc8]
je 0x40c669
mov edx, dword [ebp - 0x518]
cmp dword [edx + 0x30], 0
jne 0x40c434
mov dword [ebp - 0x2f4], 0
push ebx
call 0x40c683
add byte [edi], bh
inc eax
aaa
inc ebx
inc esi
inc esi
inc esp
add esp, 4
xor ebx, 0xaf69
jmp 0x40c695
call 0x40c6a1
add byte [ebx + 0x49], cl
dec esp
xor al, byte ds:[ebx - 0x7ca4fb3c]
mov ebp, 0xfffffd0c
add byte [edi], cl
test eax, edi
or byte [eax], al
add byte [eax + 0x6b], bh
mov word [ebp - 0x17c8], ax
mov ecx, 0x65
mov word [ebp - 0x17c6], cx
mov edx, 0x72
mov word [ebp - 0x17c4], dx
mov eax, 0x6e
mov word [ebp - 0x17c2], ax
mov ecx, 0x65
mov word [ebp - 0x17c0], cx
mov edx, 0x6c
mov word [ebp - 0x17be], dx
mov eax, 0x33
mov word [ebp - 0x17bc], ax
mov ecx, 0x32
mov word [ebp - 0x17ba], cx
mov edx, 0x2e
mov word [ebp - 0x17b8], dx
mov eax, 0x64
mov word [ebp - 0x17b6], ax
mov ecx, 0x6c
mov word [ebp - 0x17b4], cx
mov edx, 0x6c
mov word [ebp - 0x17b2], dx
xor eax, eax
mov word [ebp - 0x17b0], ax
push edx
push esi
add esp, 4
sub edx, 0xe8e1
call 0x40c765
add byte [esi], dh
cmp al, 0x4c
inc ebx
inc ebx
dec edx
dec eax
dec ebp
add esp, 4
and edx, 0x11d74
xor edx, 0x8abf
pop edx
push eax
sub eax, 0x15898
pop eax
mov byte [ebp - 0x8a8], 0x4c
mov byte [ebp - 0x8a7], 0x6f
mov byte [ebp - 0x8a6], 0x61
mov byte [ebp - 0x8a5], 0x64
mov byte [ebp - 0x8a4], 0x4c
mov byte [ebp - 0x8a3], 0x69
mov byte [ebp - 0x8a2], 0x62
mov byte [ebp - 0x8a1], 0x72
mov byte [ebp - 0x8a0], 0x61
mov byte [ebp - 0x89f], 0x72
mov byte [ebp - 0x89e], 0x79
mov byte [ebp - 0x89d], 0x57
mov byte [ebp - 0x89c], 0
mov ecx, dword fs:[0x18]
mov dword [ebp - 0x19d0], ecx
mov edx, dword [ebp - 0x19d0]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x19d4], eax
mov ecx, dword [ebp - 0x19d4]
mov dword [ebp - 0x1628], ecx
push ecx
push eax
add esp, 4
or ecx, 0x94ce
pop ecx
push esi
push ebx
add esp, 4
add esi, 0xeb47
xor esi, 0xf25e
pop esi
push ebx
add ebx, 0x308
or ebx, 0xe85
sub ebx, 0x756b
pop ebx
cmp dword [ebp - 0x1628], 0
jne 0x40c84a
mov dword [ebp - 0x778], 0
jmp 0x40caf1
mov edx, dword [ebp - 0x1628]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0xcd4], ecx
push edx
xor edx, 0x1292c
sub edx, 0x10332
call 0x40c876
add byte [esi + esi + 0x42], cl
push eax
dec ebx
dec ecx
xor eax, dword [ebx + 0x575a04c4]
sub edi, 0x1555c
sub edi, 0x3866
add edi, 0x16181
pop edi
cmp dword [ebp - 0xcd4], 0
jne 0x40c8a6
mov dword [ebp - 0x778], 0
jmp 0x40caf1
mov edx, dword [ebp - 0xcd4]
mov dword [ebp - 0x51c], edx
push edx
or edx, 0x741
and edx, 0x508f
pop edx
push edx
call 0x40c8ce
add byte [ecx + 0x40], cl
cmp byte [esi], dh
dec edi
dec ebx
dec esi
add esp, 4
sub edx, 0x14b0a
add edx, 0x72b4
xor edx, 0x17e3f
pop edx
lea eax, [ebp - 0x17c8]
mov dword [ebp - 0xcd0], eax
mov ecx, dword [ebp - 0x51c]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0xccc], edx
xor eax, eax
mov word [ebp - 0x220], ax
xor ecx, ecx
mov word [ebp - 0x3c], cx
push eax
xor eax, 0x2048
call 0x40c923
add byte [esi + 0x3d], al
cmp eax, 0x3641384d
dec ecx
add esp, 4
pop eax
push eax
or eax, 0x6b56
add eax, 0x10d0c
xor eax, 0x5c2e
jmp 0x40c93f
pop eax
mov edx, dword [ebp - 0xccc]
mov ax, word [edx]
mov word [ebp - 0x1046], ax
mov ecx, dword [ebp - 0xccc]
add ecx, 2
mov dword [ebp - 0xccc], ecx
mov dx, word [ebp - 0x1046]
mov word [ebp - 0x220], dx
mov eax, dword [ebp - 0xcd0]
mov cx, word [eax]
mov word [ebp - 0x1048], cx
mov edx, dword [ebp - 0xcd0]
add edx, 2
mov dword [ebp - 0xcd0], edx
mov ax, word [ebp - 0x1048]
mov word [ebp - 0x3c], ax
push esi
call 0x40c9a8
add byte [eax + 0x3e], cl
aaa
aaa
dec edi
cmp al, 0x3e
inc edx
cmp eax, dword [ebx - 0x117efb3c]
push edx
pop ecx
add byte [eax], al
jmp 0x40c9b6
sub esi, 0x830b
pop esi
push eax
push edx
add esp, 4
and eax, 0xc542
pop eax
movzx ecx, word [ebp - 0x3c]
test ecx, ecx
jne 0x40c9e6
movzx edx, word [ebp - 0x220]
movzx eax, word [ebp - 0x3c]
sub edx, eax
mov dword [ebp - 0x1670], edx
jmp 0x40ca40
movzx ecx, word [ebp - 0x220]
movzx edx, word [ebp - 0x3c]
cmp ecx, edx
je 0x40c90e
movzx eax, word [ebp - 0x220]
xor eax, 0x20
movzx ecx, word [ebp - 0x3c]
cmp eax, ecx
je 0x40c90e
movzx edx, word [ebp - 0x220]
movzx eax, word [ebp - 0x3c]
cmp edx, eax
jge 0x40ca2a
mov dword [ebp - 0x162c], 0xffffffff
jmp 0x40ca34
mov dword [ebp - 0x162c], 1
mov ecx, dword [ebp - 0x162c]
mov dword [ebp - 0x1670], ecx
cmp dword [ebp - 0x1670], 0
jne 0x40ca89
push edi
sub edi, 0xd68
pop edi
push edi
or edi, 0x91ff
call 0x40ca65
add byte [ebx], dh
dec eax
inc esi
inc ecx
cmp esi, dword [ebx]
dec edx
add esp, 4
pop edi
push edx
push eax
add esp, 4
sub edx, 0x12f96
or edx, 0x12dd3
pop edx
mov edx, dword [ebp - 0x51c]
mov dword [ebp - 0x778], edx
jmp 0x40caf1
push eax
sub eax, 0xf136
or eax, 0xc23f
sub eax, 0x6c3c
or eax, 0x5a30
pop eax
push esi
push ebx
add esp, 4
sub esi, 0x1a83
and esi, 0xef9d
xor esi, 0x39fe
pop esi
mov eax, dword [ebp - 0x51c]
mov ecx, dword [eax]
mov dword [ebp - 0x51c], ecx
mov edx, dword [ebp - 0x51c]
cmp edx, dword [ebp - 0xcd4]
je 0x40cae7
mov eax, dword [ebp - 0x51c]
cmp dword [eax + 0x30], 0
jne 0x40c8b2
mov dword [ebp - 0x778], 0
push eax
jmp 0x40caf9
pop eax
push edi
push edx
add esp, 4
or edi, 0x14aa3
add edi, 0x64ca
jmp 0x40cb14
xor edi, 0xc055
pop edi
push edx
add edx, 0x8e06
pop edx
cmp dword [ebp - 0x778], 0
jne 0x40cb6d
push edx
xor edx, 0x7329
xor edx, 0x17ca0
and edx, 0xc34d
pop edx
push edx
push edx
add esp, 4
sub edx, 0x229c
pop edx
push ebx
push esi
add esp, 4
and ebx, 0x1bba
sub ebx, 0xaf19
pop ebx
mov dword [ebp - 0xac0], 0
jmp 0x40d695
push ecx
push eax
add esp, 4
and ecx, 0xcc58
pop ecx
push edx
push eax
add esp, 4
call 0x40cb8a
add byte [ebx + 0x44], cl
inc edi
dec ecx
dec eax
cmp al, 0x83
les eax, [eax + ebp*8]
or dword [eax], eax
add byte [eax], al
add byte [ebp + 0x35], cl
dec ecx
cmp dword [ebp + 0x46], eax
aas
aaa
add esp, 4
pop edx
mov ecx, dword [ebp - 0x778]
mov edx, dword [ecx + 0x18]
mov dword [ebp - 0x3a4], edx
mov dword [ebp - 0x788], 0
mov eax, dword [ebp - 0x3a4]
mov dword [ebp - 0x1674], eax
cmp dword [ebp - 0x1674], 0
jne 0x40cbde
mov ecx, dword [ebp - 0x788]
mov dword [ebp - 0x3fc], ecx
jmp 0x40cecf
mov edx, dword [ebp - 0x1674]
mov eax, dword [ebp - 0x3a4]
add eax, dword [edx + 0x3c]
mov dword [ebp - 0x1678], eax
jne 0x40cc06
mov ecx, dword [ebp - 0x788]
mov dword [ebp - 0x3fc], ecx
jmp 0x40cecf
mov edx, 8
imul eax, edx, 0
mov ecx, dword [ebp - 0x1678]
mov edx, dword [ecx + eax + 0x78]
mov dword [ebp - 0x1680], edx
cmp dword [ebp - 0x1680], 0
jne 0x40cc38
mov eax, dword [ebp - 0x788]
mov dword [ebp - 0x3fc], eax
jmp 0x40cecf
mov ecx, dword [ebp - 0x3a4]
add ecx, dword [ebp - 0x1680]
mov dword [ebp - 0x77c], ecx
jne 0x40cc5d
mov edx, dword [ebp - 0x788]
mov dword [ebp - 0x3fc], edx
jmp 0x40cecf
mov eax, dword [ebp - 0x77c]
mov ecx, dword [ebp - 0x3a4]
add ecx, dword [eax + 0x20]
mov dword [ebp - 0x19d8], ecx
mov edx, dword [ebp - 0x77c]
mov eax, dword [ebp - 0x3a4]
add eax, dword [edx + 0x24]
mov dword [ebp - 0x19dc], eax
mov ecx, dword [ebp - 0x77c]
mov edx, dword [ebp - 0x3a4]
add edx, dword [ecx + 0x1c]
mov dword [ebp - 0x19e0], edx
mov dword [ebp - 0x780], 0
jmp 0x40ccb7
mov eax, dword [ebp - 0x780]
add eax, 1
mov dword [ebp - 0x780], eax
mov ecx, dword [ebp - 0x77c]
mov edx, dword [ebp - 0x780]
cmp edx, dword [ecx + 0x18]
jae 0x40cec3
mov eax, dword [ebp - 0x780]
mov ecx, dword [ebp - 0x19d8]
mov edx, dword [ebp - 0x3a4]
add edx, dword [ecx + eax*4]
mov dword [ebp - 0x784], edx
mov eax, dword [ebp - 0x780]
mov ecx, dword [ebp - 0x19dc]
movzx edx, word [ecx + eax*2]
mov eax, dword [ebp - 0x19e0]
mov ecx, dword [ebp - 0x3a4]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x19e4], ecx
mov dword [ebp - 0x19c], 0
jmp 0x40cd27
mov eax, dword [ebp - 0x784]
add eax, dword [ebp - 0x19c]
movsx ecx, byte [eax]
test ecx, ecx
je 0x40cdd9
mov edx, dword [ebp - 0x19c]
movsx eax, byte [ebp + edx - 0x8a8]
test eax, eax
je 0x40cdd9
push eax
add eax, 0xf9
call 0x40cd6a
add byte [eax + 0x38], dl
cmp esi, dword [ebx]
dec ecx
inc ebx
dec eax
inc edi
cmp al, 0x83
les eax, [ecx + eax*4]
invalid
push ecx
push ebx
add esp, 4
call 0x40cdea
add byte [esi], bh
cmp eax, 0x463a4739
add esp, 4
xor ecx, 0x141ae
jmp 0x40cdfc
add ecx, 0x11e4a
pop ecx
push esi
xor esi, 0x17adc
pop esi
mov eax, dword [ebp - 0x784]
add eax, dword [ebp - 0x19c]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x19c]
movsx eax, byte [ebp + edx - 0x8a8]
cmp ecx, eax
jne 0x40ce38
mov dword [ebp - 0xcd8], 0
jmp 0x40cea7
push esi
or esi, 0x9f5d
call 0x40ce4c
add byte [ebp + 0x42], cl
xor esi, dword [eax + edx*2]
inc eax
add esp, 4
xor esi, 0x12ab9
or esi, 0x6b7f
pop esi
push eax
and eax, 0x166a4
sub eax, 0xb2c0
pop eax
mov ecx, dword [ebp - 0x784]
add ecx, dword [ebp - 0x19c]
movsx edx, byte [ecx]
or edx, 0x20
mov eax, dword [ebp - 0x19c]
movsx ecx, byte [ebp + eax - 0x8a8]
or ecx, 0x20
cmp edx, ecx
jge 0x40ce9d
mov dword [ebp - 0xcd8], 0xffffffff
jmp 0x40cea7
mov dword [ebp - 0xcd8], 1
cmp dword [ebp - 0xcd8], 0
jne 0x40cebe
mov edx, dword [ebp - 0x19e4]
mov dword [ebp - 0x3fc], edx
jmp 0x40cecf
jmp 0x40cca8
mov eax, dword [ebp - 0x788]
mov dword [ebp - 0x3fc], eax
cmp dword [ebp - 0x3fc], 0
je 0x40cfaa
push ebx
push ebx
add esp, 4
and ebx, 0xc7d6
add ebx, 0xa5b3
pop ebx
push ebx
call 0x40cefe
add byte [ecx], bh
dec edx
inc ebx
dec edx
dec eax
aaa
cmp al, 0x83
les eax, [ecx + eax*4]
retf
push ebx
push ebx
add esp, 4
or ebx, 0xe5c
pop ebx
push ebx
sub ebx, 0xa466
jmp 0x40cfc3
and ebx, 0x13759
pop ebx
push edi
push eax
add esp, 4
sub edi, 0xcaab
add edi, 0xc097
pop edi
mov ecx, dword fs:[0x18]
mov dword [ebp - 0x19f0], ecx
mov edx, dword [ebp - 0x19f0]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x19f4], eax
mov ecx, dword [ebp - 0x19f4]
mov dword [ebp - 0x1684], ecx
push edi
xor edi, 0x918b
and edi, 0x1656b
jmp 0x40d019
pop edi
push ecx
xor ecx, 0xf08a
sub ecx, 0x13ead
sub ecx, 0x2352
pop ecx
push edi
xor edi, 0x14e0d
pop edi
cmp dword [ebp - 0x1684], 0
jne 0x40d04e
mov dword [ebp - 0x2f4], 0
jmp 0x40d2f5
mov edx, dword [ebp - 0x1684]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0xce4], ecx
push ecx
push edx
add esp, 4
xor ecx, 0x10ea7
or ecx, 0x11de1
sub ecx, 0xb46b
or ecx, 0x1e4
pop ecx
push eax
sub eax, 0xb623
sub eax, 0xc775
sub eax, 0x293c
pop eax
cmp dword [ebp - 0xce4], 0
jne 0x40d0aa
mov dword [ebp - 0x2f4], 0
jmp 0x40d2f5
mov edx, dword [ebp - 0xce4]
mov dword [ebp - 0x520], edx
push ecx
push edx
add esp, 4
and ecx, 0x14faf
pop ecx
push edx
push edi
add esp, 4
xor edx, 0x889e
sub edx, 0x17f26
pop edx
push ebx
xor ebx, 0xc8d9
add ebx, 0x14967
xor ebx, 0xc9b1
pop ebx
lea eax, [ebp - 0x1740]
mov dword [ebp - 0xce0], eax
mov ecx, dword [ebp - 0x520]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0xcdc], edx
xor eax, eax
mov word [ebp - 0x224], ax
xor ecx, ecx
mov word [ebp - 0x40], cx
push eax
or eax, 0xf0f3
xor eax, 0x25b5
or eax, 0x185ba
pop eax
push eax
push eax
add esp, 4
sub eax, 0x4106
add eax, 0x57ee
or eax, 0xdac1
or eax, 0x4042
pop eax
mov edx, dword [ebp - 0xcdc]
mov ax, word [edx]
mov word [ebp - 0x104a], ax
mov ecx, dword [ebp - 0xcdc]
add ecx, 2
mov dword [ebp - 0xcdc], ecx
mov dx, word [ebp - 0x104a]
mov word [ebp - 0x224], dx
mov eax, dword [ebp - 0xce0]
mov cx, word [eax]
mov word [ebp - 0x104c], cx
mov edx, dword [ebp - 0xce0]
add edx, 2
mov dword [ebp - 0xce0], edx
mov ax, word [ebp - 0x104c]
mov word [ebp - 0x40], ax
push ebx
push ecx
add esp, 4
or ebx, 0xbadb
add ebx, 0x673c
pop ebx
push esi
jmp 0x40d1b4
pop esi
push edx
push ebx
add esp, 4
xor edx, 0x1dfb
or edx, 0x5abe
sub edx, 0x12a24
pop edx
movzx ecx, word [ebp - 0x40]
test ecx, ecx
jne 0x40d1ea
movzx edx, word [ebp - 0x224]
movzx eax, word [ebp - 0x40]
sub edx, eax
mov dword [ebp - 0x168c], edx
jmp 0x40d244
movzx ecx, word [ebp - 0x224]
movzx edx, word [ebp - 0x40]
cmp ecx, edx
je 0x40d112
movzx eax, word [ebp - 0x224]
xor eax, 0x20
movzx ecx, word [ebp - 0x40]
cmp eax, ecx
je 0x40d112
movzx edx, word [ebp - 0x224]
movzx eax, word [ebp - 0x40]
cmp edx, eax
jge 0x40d22e
mov dword [ebp - 0x1688], 0xffffffff
jmp 0x40d238
mov dword [ebp - 0x1688], 1
mov ecx, dword [ebp - 0x1688]
mov dword [ebp - 0x168c], ecx
cmp dword [ebp - 0x168c], 0
jne 0x40d28d
push edi
sub edi, 0x134c8
and edi, 0x368d
and edi, 0x15272
jmp 0x40d269
pop edi
push edi
jmp 0x40d273
add edi, 0x34f2
jmp 0x40d27e
pop edi
mov edx, dword [ebp - 0x520]
mov dword [ebp - 0x2f4], edx
jmp 0x40d2f5
push esi
sub esi, 0x9c1d
add esi, 0x6e96
or esi, 0x4351
pop esi
push ebx
push eax
add esp, 4
and ebx, 0x3e7c
sub ebx, 0x7141
and ebx, 0xf43e
xor ebx, 0x15cf0
pop ebx
mov eax, dword [ebp - 0x520]
mov ecx, dword [eax]
mov dword [ebp - 0x520], ecx
mov edx, dword [ebp - 0x520]
cmp edx, dword [ebp - 0xce4]
je 0x40d2eb
mov eax, dword [ebp - 0x520]
cmp dword [eax + 0x30], 0
jne 0x40d0b6
mov dword [ebp - 0x2f4], 0
push ecx
push ebx
add esp, 4
add ecx, 0x185fc
pop ecx
push edx
or edx, 0x17ee8
sub edx, 0x8c0c
or edx, 0x17339
call 0x40d323
add byte [edx], dh
dec esi
inc esi
inc edi
inc esp
xor eax, 0x833f4240
les eax, [edx + ebx*2]
mov ecx, dword [ebp - 0x2f4]
mov edx, dword [ecx + 0x18]
mov dword [ebp - 0x36c], edx
push esi
push edx
add esp, 4
and esi, 0x3405
or esi, 0xf99f
xor esi, 0x1224e
and esi, 0x2839
pop esi
push ebx
add ebx, 0x946f
xor ebx, 0x12b8
add ebx, 0x14bd3
pop ebx
mov dword [ebp - 0x798], 0
mov eax, dword [ebp - 0x36c]
mov dword [ebp - 0x1690], eax
cmp dword [ebp - 0x1690], 0
jne 0x40d398
mov ecx, dword [ebp - 0x798]
mov dword [ebp - 0x524], ecx
jmp 0x40d689
mov edx, dword [ebp - 0x1690]
mov eax, dword [ebp - 0x36c]
add eax, dword [edx + 0x3c]
mov dword [ebp - 0x1694], eax
jne 0x40d3c0
mov ecx, dword [ebp - 0x798]
mov dword [ebp - 0x524], ecx
jmp 0x40d689
mov edx, 8
imul eax, edx, 0
mov ecx, dword [ebp - 0x1694]
mov edx, dword [ecx + eax + 0x78]
mov dword [ebp - 0x1698], edx
cmp dword [ebp - 0x1698], 0
jne 0x40d3f2
mov eax, dword [ebp - 0x798]
mov dword [ebp - 0x524], eax
jmp 0x40d689
mov ecx, dword [ebp - 0x36c]
add ecx, dword [ebp - 0x1698]
mov dword [ebp - 0x78c], ecx
jne 0x40d417
mov edx, dword [ebp - 0x798]
mov dword [ebp - 0x524], edx
jmp 0x40d689
mov eax, dword [ebp - 0x78c]
mov ecx, dword [ebp - 0x36c]
add ecx, dword [eax + 0x20]
mov dword [ebp - 0x19f8], ecx
mov edx, dword [ebp - 0x78c]
mov eax, dword [ebp - 0x36c]
add eax, dword [edx + 0x24]
mov dword [ebp - 0x19fc], eax
mov ecx, dword [ebp - 0x78c]
mov edx, dword [ebp - 0x36c]
add edx, dword [ecx + 0x1c]
mov dword [ebp - 0x1a00], edx
mov dword [ebp - 0x790], 0
jmp 0x40d471