Function at 0x406684
Capabilities:
Contain obfuscated stackstrings

Disassembly:
call 0x4067a2
add eax, 0x4b0a
pop eax
mov dword [ebp - 0x20a4], 0xffffffff
push eax
push edi
add esp, 4
jmp 0x404d9c
pop eax
push eax
sub eax, 0x15d7a
pop eax
push ecx
call 0x404db6
add byte [edi + 0x45], al
inc esi
xor al, byte [ecx + 0x3e]
inc ecx
cmp edi, dword [0x4c48347]
jmp 0x404dbe
jmp 0x404dc3
pop ecx
mov ecx, dword [ebp - 0x3f0]
mov dword [ebp - 0x500], ecx
jmp 0x404de1
mov edx, dword [ebp - 0x500]
add edx, 1
mov dword [ebp - 0x500], edx
push edi
push esi
add esp, 4
or edi, 0xcf55
or edi, 0x9a25
xor edi, 0x17ee9
xor edi, 0x13301
pop edi
push edx
xor edx, 0xba9a
pop edx
push ebx
push ebx
add esp, 4
add ebx, 0x11563
pop ebx
mov eax, dword [ebp - 0x500]
sub eax, dword [ebp - 0x3f0]
cmp eax, 0xffffffff
clc
push dword [edx + 0x37]
push esi
push edx
add esp, 4
add esi, 0xadde
or esi, 0x5449
and esi, 0xec25
pop esi
push ebx
sub ebx, 0xdebc
pop ebx
push edi
push esi
add esp, 4
add edi, 0x3de5
or edi, 0x1a00
pop edi
jmp 0x405089
mov dword [ebp - 0xc88], 7
mov ecx, dword [ebp - 0x500]
mov dword [ebp - 0xac0], ecx
push edi
push esi
add esp, 4
add edi, 0x82d5
sub edi, 0x116c3
pop edi
push ecx
push eax
add esp, 4
jmp 0x404e8e
pop ecx
push ecx
push esi
add esp, 4
jmp 0x404e9c
sub ecx, 0x74a3
pop ecx
mov edx, dword [ebp - 0x15d0]
mov dword [ebp - 0xabc], edx
mov dword [ebp - 0xc8c], 0
mov eax, dword [ebp - 0x500]
cmp eax, dword [ebp - 0x15d0]
jne 0x404f0a
push eax
and eax, 0x67a9
add eax, 0x3f48
or eax, 0x5947
or eax, 0x13810
pop eax
push eax
call 0x404eef
add byte [edx + 0x49], al
xor eax, 0x4841373a
add esp, 4
jmp 0x404ef8
pop eax
mov ecx, dword [ebp - 0xc8c]
mov dword [ebp - 0x15d4], ecx
jmp 0x40503b
cmp dword [ebp - 0xc88], 0
jle 0x40502f
push edx
push edi
add esp, 4
sub edx, 0x8154
and edx, 0xcc14
add edx, 0x7667
xor edx, 0x2783
pop edx
push ebx
or ebx, 0x5b60
or ebx, 0xad34
jmp 0x404f48
pop ebx
mov edx, dword [ebp - 0xac0]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0xabc]
movzx edx, byte [ecx]
cmp eax, edx
je 0x404fcb
push ecx
push eax
add esp, 4
xor ecx, 0x181a6
call 0x404f79
add byte [ecx + 0x37], al
cmp dword [esi + edi + 0x3a], eax
aas
xor eax, 0x4c48349
pop ecx
push esi
jmp 0x404f84
sub esi, 0x141f
add esi, 0x50fe
pop esi
mov eax, dword [ebp - 0xac0]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0xabc]
movzx eax, byte [edx]
cmp ecx, eax
jle 0x404fb3
mov dword [ebp - 0x15a0], 1
jmp 0x404fbd
mov dword [ebp - 0x15a0], 0xffffffff
mov ecx, dword [ebp - 0x15a0]
mov dword [ebp - 0xc8c], ecx
jmp 0x40502f
push eax
push esi
add esp, 4
or eax, 0x17acd
jmp 0x404fdf
pop eax
push esi
jmp 0x404fea
sub esi, 0xd886
and esi, 0x16de
xor esi, 0x12a49
pop esi
mov edx, dword [ebp - 0xc88]
sub edx, 1
mov dword [ebp - 0xc88], edx
mov eax, dword [ebp - 0xac0]
add eax, 1
mov dword [ebp - 0xac0], eax
mov ecx, dword [ebp - 0xabc]
add ecx, 1
mov dword [ebp - 0xabc], ecx
jmp 0x404f0a
mov edx, dword [ebp - 0xc8c]
mov dword [ebp - 0x15d4], edx
cmp dword [ebp - 0x15d4], 0
jne 0x405084
push ecx
and ecx, 0xbea
sub ecx, 0x1691f
pop ecx
push edx
call 0x405060
add byte [ebx + 0x50], cl
dec ebx
dec ecx
dec ebp
xor al, 0x34
add esp, 4
and edx, 0xe9ce
sub edx, 0x4658
sub edx, 0x9b90
pop edx
mov eax, dword [ebp - 0x500]
mov dword [ebp - 0xab8], eax
jmp 0x4050c5
jmp 0x404dd2
push eax
sub eax, 0x8ca9
pop eax
push edi
push esi
add esp, 4
and edi, 0xd372
and edi, 0x18df
xor edi, 0x16bdf
call 0x4050b7
add byte [edi + 0x36], al
cmp edi, dword [edx]
dec esi
xor bh, byte [ecx]
inc ebp
inc ecx
add esp, 4
pop edi
mov dword [ebp - 0xab8], 0
push edi
push ecx
add esp, 4
or edi, 0x13336
xor edi, 0x1041e
and edi, 0xc377
jmp 0x4050e2
pop edi
push ecx
sub ecx, 0x93ac
and ecx, 0x18623
add ecx, 0x1d37
pop ecx
mov byte [ebp - 0x878], 0x45
mov byte [ebp - 0x877], 0x78
mov byte [ebp - 0x876], 0x69
mov byte [ebp - 0x875], 0x74
mov byte [ebp - 0x874], 0x50
mov byte [ebp - 0x873], 0x72
mov byte [ebp - 0x872], 0x6f
mov byte [ebp - 0x871], 0x63
mov byte [ebp - 0x870], 0x65
mov byte [ebp - 0x86f], 0x73
mov byte [ebp - 0x86e], 0x73
mov byte [ebp - 0x86d], 0
push esi
sub esi, 0x11087
xor esi, 0x67ad
or esi, 0x10c33
pop esi
push ebx
push ecx
add esp, 4
sub ebx, 0xa0c
or ebx, 0x710e
and ebx, 0xd7b0
xor ebx, 0xa955
pop ebx
mov ecx, 0x6b
mov word [ebp - 0x1738], cx
mov edx, 0x65
mov word [ebp - 0x1736], dx
mov eax, 0x72
mov word [ebp - 0x1734], ax
mov ecx, 0x6e
mov word [ebp - 0x1732], cx
mov edx, 0x65
mov word [ebp - 0x1730], dx
mov eax, 0x6c
mov word [ebp - 0x172e], ax
mov ecx, 0x33
mov word [ebp - 0x172c], cx
mov edx, 0x32
mov word [ebp - 0x172a], dx
mov eax, 0x2e
mov word [ebp - 0x1728], ax
mov ecx, 0x64
mov word [ebp - 0x1726], cx
mov edx, 0x6c
mov word [ebp - 0x1724], dx
mov eax, 0x6c
mov word [ebp - 0x1722], ax
xor ecx, ecx
mov word [ebp - 0x1720], cx
push esi
push edx
add esp, 4
or esi, 0x14f83
pop esi
push ebx
add ebx, 0x8a29
pop ebx
push esi
push eax
add esp, 4
and esi, 0x15455
or esi, 0x11f8e
add esi, 0xaacf
add esi, 0xe06a
pop esi
push esi
xor esi, 0x10722
call 0x40525d
add byte [ebx + 0x3b], al
cmp ecx, dword [esi + 0x3d]
inc ebp
inc ebp
inc ebp
add esp, 4
xor esi, 0x4f0b
call 0x405276
add byte [edi + 0x3e], cl
inc ecx
dec edx
xor eax, 0x3242354e
aaa
add esp, 4
pop esi
mov edx, dword fs:[0x18]
mov dword [ebp - 0x1954], edx
mov eax, dword [ebp - 0x1954]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0x1958], ecx
mov edx, dword [ebp - 0x1958]
mov dword [ebp - 0x15d8], edx
push edi
or edi, 0x335d
add edi, 0xa5a3
xor edi, 0x1219b
call 0x4052c4
add byte [ebx], bh
dec esi
cmp eax, 0x443d3641
inc esi
cmp eax, 0x5f04c483
push edi
push ebx
add esp, 4
xor edi, 0x7494
pop edi
cmp dword [ebp - 0x15d8], 0
jne 0x4052ec
mov dword [ebp - 0x31c], 0
jmp 0x4055a8
mov eax, dword [ebp - 0x15d8]
mov ecx, dword [eax + 0xc]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0xc98], edx
push esi
push edi
add esp, 4
add esi, 0xbe8b
sub esi, 0xa84a
add esi, 0xee94
xor esi, 0xce15
pop esi
push ecx
sub ecx, 0xfdc8
sub ecx, 0x14965
xor ecx, 0xcd7
pop ecx
cmp dword [ebp - 0xc98], 0
jne 0x405348
mov dword [ebp - 0x31c], 0
jmp 0x4055a8
mov eax, dword [ebp - 0xc98]
mov dword [ebp - 0x504], eax
push ecx
and ecx, 0xe82b
jmp 0x405363
jmp 0x40536b
pop ecx
push esi
push esi
add esp, 4
add esi, 0x119dd
pop esi
push esi
or esi, 0x181d5
and esi, 0x1d10
pop esi
lea ecx, [ebp - 0x1738]
mov dword [ebp - 0xc94], ecx
mov edx, dword [ebp - 0x504]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0xc90], eax
xor ecx, ecx
mov word [ebp - 0x210], cx
xor edx, edx
mov word [ebp - 0x10c], dx
push edx
or edx, 0x15bf0
xor edx, 0x7211
add edx, 0xa511
xor edx, 0x488c
pop edx
push edx
push eax
add esp, 4
and edx, 0x1792a
xor edx, 0x566e
and edx, 0x14519
pop edx
mov eax, dword [ebp - 0xc90]
mov cx, word [eax]
mov word [ebp - 0x1032], cx
mov edx, dword [ebp - 0xc90]
add edx, 2
mov dword [ebp - 0xc90], edx
mov ax, word [ebp - 0x1032]
mov word [ebp - 0x210], ax
mov ecx, dword [ebp - 0xc94]
mov dx, word [ecx]
mov word [ebp - 0x1034], dx
mov eax, dword [ebp - 0xc94]
add eax, 2
mov dword [ebp - 0xc94], eax
mov cx, word [ebp - 0x1034]
mov word [ebp - 0x10c], cx
push ebx
push edi
add esp, 4
sub ebx, 0x19ca
call 0x405456
add byte [ebx + 0x3e], al
cmp dword [esi + 0x32], eax
cmp al, byte [ebx + 0x9e804c4]
add byte [eax], al
add byte [eax], al
dec esi
xor esi, dword ds:[edx]
dec eax
aaa
inc ebp
dec ebp
add esp, 4
jmp 0x405470
pop ebx
movzx edx, word [ebp - 0x10c]
test edx, edx
jne 0x405494
movzx eax, word [ebp - 0x210]
movzx ecx, word [ebp - 0x10c]
sub eax, ecx
mov dword [ebp - 0x15e0], eax
jmp 0x4054f7
movzx edx, word [ebp - 0x210]
movzx eax, word [ebp - 0x10c]
cmp edx, eax
je 0x4053b3
movzx ecx, word [ebp - 0x210]
xor ecx, 0x20
movzx edx, word [ebp - 0x10c]
cmp ecx, edx
je 0x4053b3
movzx eax, word [ebp - 0x210]
movzx ecx, word [ebp - 0x10c]
cmp eax, ecx
jge 0x4054e1
mov dword [ebp - 0x15dc], 0xffffffff
jmp 0x4054eb
mov dword [ebp - 0x15dc], 1
mov edx, dword [ebp - 0x15dc]
mov dword [ebp - 0x15e0], edx
cmp dword [ebp - 0x15e0], 0
jne 0x405540
push edi
xor edi, 0xe52b
pop edi
push esi
push esi
add esp, 4
sub esi, 0xd199
and esi, 0xd9e1
and esi, 0x11e34
pop esi
push ecx
push ebx
add esp, 4
sub ecx, 0xea33
xor ecx, 0x88b5
pop ecx
mov eax, dword [ebp - 0x504]
mov dword [ebp - 0x31c], eax
jmp 0x4055a8
push eax
push ebx
add esp, 4
call 0x405553
add byte [edx + 0x39], al
dec eax
inc ebp
inc edx
aas
cmp eax, 0x4c48349
pop eax
push ecx
call 0x405568
add byte [esp + ecx*2 + 0x41], al
cmp esi, dword [edi]
xor eax, 0x4a464534
add esp, 4
add ecx, 0xd9d7
pop ecx
mov ecx, dword [ebp - 0x504]
mov edx, dword [ecx]
mov dword [ebp - 0x504], edx
mov eax, dword [ebp - 0x504]
cmp eax, dword [ebp - 0xc98]
je 0x40559e
mov ecx, dword [ebp - 0x504]
cmp dword [ecx + 0x30], 0
jne 0x405354
mov dword [ebp - 0x31c], 0
push esi
push edx
add esp, 4
xor esi, 0xdda8
add esi, 0x11604
or esi, 0x948f
pop esi
push ecx
add ecx, 0x5509
sub ecx, 0x16d79
or ecx, 0x2fa4
sub ecx, 0xbd72
pop ecx
cmp dword [ebp - 0x31c], 0
jne 0x405ef3
mov edx, 0x6b
mov word [ebp - 0x1774], dx
mov eax, 0x65
mov word [ebp - 0x1772], ax
mov ecx, 0x72
mov word [ebp - 0x1770], cx
mov edx, 0x6e
mov word [ebp - 0x176e], dx
mov eax, 0x65
mov word [ebp - 0x176c], ax
mov ecx, 0x6c
mov word [ebp - 0x176a], cx
mov edx, 0x33
mov word [ebp - 0x1768], dx
mov eax, 0x32
mov word [ebp - 0x1766], ax
mov ecx, 0x2e
mov word [ebp - 0x1764], cx
mov edx, 0x64
mov word [ebp - 0x1762], dx
mov eax, 0x6c
mov word [ebp - 0x1760], ax
mov ecx, 0x6c
mov word [ebp - 0x175e], cx
xor edx, edx
mov word [ebp - 0x175c], dx
push ecx
push ecx
add esp, 4
xor ecx, 0x4b81
pop ecx
push esi
and esi, 0x7ffd
xor esi, 0x182f3
pop esi
push edi
push edx
add esp, 4
and edi, 0x131b4
pop edi
push esi
push eax
add esp, 4
and esi, 0xb3d7
pop esi
mov byte [ebp - 0x894], 0x4c
mov byte [ebp - 0x893], 0x6f
mov byte [ebp - 0x892], 0x61
mov byte [ebp - 0x891], 0x64
mov byte [ebp - 0x890], 0x4c
mov byte [ebp - 0x88f], 0x69
mov byte [ebp - 0x88e], 0x62
mov byte [ebp - 0x88d], 0x72
mov byte [ebp - 0x88c], 0x61
mov byte [ebp - 0x88b], 0x72
mov byte [ebp - 0x88a], 0x79
mov byte [ebp - 0x889], 0x57
mov byte [ebp - 0x888], 0
mov eax, dword fs:[0x18]
mov dword [ebp - 0x195c], eax
mov ecx, dword [ebp - 0x195c]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x1960], edx
mov eax, dword [ebp - 0x1960]
mov dword [ebp - 0x15e4], eax
push eax
push eax
add esp, 4
or eax, 0x9e5f
sub eax, 0x9364
sub eax, 0x14dfe
sub eax, 0x14150
pop eax
push esi
or esi, 0x7023
add esi, 0x77f
add esi, 0xb082
pop esi
cmp dword [ebp - 0x15e4], 0
jne 0x40577e
mov dword [ebp - 0x750], 0
jmp 0x405a3a
mov ecx, dword [ebp - 0x15e4]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xca4], eax
push edi
push ebx
add esp, 4
and edi, 0x150fd
add edi, 0xe526
or edi, 0x46d4
or edi, 0x153cb
pop edi
push edi
xor edi, 0x18006
pop edi
push eax
push edx
add esp, 4
add eax, 0x548a
pop eax
cmp dword [ebp - 0xca4], 0
jne 0x4057da
mov dword [ebp - 0x750], 0
jmp 0x405a3a
mov ecx, dword [ebp - 0xca4]
mov dword [ebp - 0x508], ecx
push edx
push edi
add esp, 4
sub edx, 0x590f
add edx, 0x1682
sub edx, 0xe28
pop edx
push edx
xor edx, 0x103fe
xor edx, 0x97f1
xor edx, 0xe97a
sub edx, 0x5454
pop edx
lea edx, [ebp - 0x1774]
mov dword [ebp - 0xca0], edx
mov eax, dword [ebp - 0x508]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xc9c], ecx
xor edx, edx
mov word [ebp - 0x214], dx
xor eax, eax
mov word [ebp - 0x110], ax
push esi
push ecx
add esp, 4
call 0x40585a
add byte [edx + 0x4a], cl
inc esp
dec esp
dec ebp
inc edi
push eax
push eax
dec edi
add esp, 4
call 0x40586d
add byte [edi + 0x34], al
xor al, 0x4b
cmp byte [ebp + 0x41], cl
inc edi
inc ebp
cmp al, byte [ebx - 0x197efb3c]
inc edx
adc al, byte [ecx]
add byte [esi - 0x75], bl
lea esp, [ebx + esi*8 - 1]
jmp dword [esi - 0x75]
push ecx
push ecx
add esp, 4
or ecx, 0xee5d
jmp 0x405a4e
and ecx, 0x1824d
call 0x405a60
add byte [ebx + ecx*2], bh
xor eax, 0x833d4550
les eax, [ecx + ebx*2]
push edi
and edi, 0x2a00
pop edi
cmp dword [ebp - 0x750], 0
jne 0x405ab6
push edi
add edi, 0x7bc8
jmp 0x405a84
pop edi
push edx
jmp 0x405a8b
pop edx
push ebx
jmp 0x405a94
add ebx, 0x173bf
sub ebx, 0x6822
or ebx, 0x16ace
pop ebx
mov dword [ebp - 0x79c], 0
jmp 0x4065dd
push ebx
push esi
add esp, 4
or ebx, 0xab02
jmp 0x405ac7
add ebx, 0x128a3
pop ebx
push edx
push eax
add esp, 4
xor edx, 0x1016d
pop edx
push ebx
push edx
add esp, 4
jmp 0x405ae7
pop ebx
mov eax, dword [ebp - 0x750]
mov ecx, dword [eax + 0x18]
mov dword [ebp - 0x320], ecx
mov dword [ebp - 0x760], 0
mov edx, dword [ebp - 0x320]
mov dword [ebp - 0x15f0], edx
cmp dword [ebp - 0x15f0], 0
jne 0x405b27
mov eax, dword [ebp - 0x760]
mov dword [ebp - 0x3f4], eax
jmp 0x405e18
mov ecx, dword [ebp - 0x15f0]
mov edx, dword [ebp - 0x320]
add edx, dword [ecx + 0x3c]
mov dword [ebp - 0x15f4], edx
jne 0x405b4f
mov eax, dword [ebp - 0x760]
mov dword [ebp - 0x3f4], eax
jmp 0x405e18
mov ecx, 8
imul edx, ecx, 0
mov eax, dword [ebp - 0x15f4]
mov ecx, dword [eax + edx + 0x78]
mov dword [ebp - 0x15f8], ecx
cmp dword [ebp - 0x15f8], 0
jne 0x405b81
mov edx, dword [ebp - 0x760]
mov dword [ebp - 0x3f4], edx
jmp 0x405e18
mov eax, dword [ebp - 0x320]
add eax, dword [ebp - 0x15f8]
mov dword [ebp - 0x754], eax
jne 0x405ba6
mov ecx, dword [ebp - 0x760]
mov dword [ebp - 0x3f4], ecx
jmp 0x405e18
mov edx, dword [ebp - 0x754]
mov eax, dword [ebp - 0x320]
add eax, dword [edx + 0x20]
mov dword [ebp - 0x1964], eax
mov ecx, dword [ebp - 0x754]
mov edx, dword [ebp - 0x320]
add edx, dword [ecx + 0x24]
mov dword [ebp - 0x1968], edx
mov eax, dword [ebp - 0x754]
mov ecx, dword [ebp - 0x320]
add ecx, dword [eax + 0x1c]
mov dword [ebp - 0x196c], ecx
mov dword [ebp - 0x758], 0
jmp 0x405c00
mov edx, dword [ebp - 0x758]
add edx, 1
mov dword [ebp - 0x758], edx
mov eax, dword [ebp - 0x754]
mov ecx, dword [ebp - 0x758]
cmp ecx, dword [eax + 0x18]
jae 0x405e0c
mov edx, dword [ebp - 0x758]
mov eax, dword [ebp - 0x1964]
mov ecx, dword [ebp - 0x320]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x75c], ecx
mov edx, dword [ebp - 0x758]
mov eax, dword [ebp - 0x1968]
movzx ecx, word [eax + edx*2]
mov edx, dword [ebp - 0x196c]
mov eax, dword [ebp - 0x320]
add eax, dword [edx + ecx*4]
mov dword [ebp - 0x1970], eax
mov dword [ebp - 0x198], 0
jmp 0x405c70
mov ecx, dword [ebp - 0x198]
add ecx, 1
mov dword [ebp - 0x198], ecx
mov edx, dword [ebp - 0x75c]
add edx, dword [ebp - 0x198]
movsx eax, byte [edx]
test eax, eax
je 0x405d22
mov ecx, dword [ebp - 0x198]
movsx edx, byte [ebp + ecx - 0x894]
test edx, edx
je 0x405d22
push edi
xor edi, 0xc054
or edi, 0x7f41
pop edi
push eax
push esi
add esp, 4
or eax, 0x743a
pop eax
push edx
push edx
add esp, 4
and edx, 0x212d
pop edx
push ebx
push ecx
add esp, 4
xor ebx, 0xfd7c
pop ebx
mov eax, dword [ebp - 0x75c]
add eax, dword [ebp - 0x198]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x198]
movsx eax, byte [ebp + edx - 0x894]
cmp ecx, eax
je 0x405d14
mov ecx, dword [ebp - 0x75c]
add ecx, dword [ebp - 0x198]
movsx edx, byte [ecx]
xor edx, 0x20
mov eax, dword [ebp - 0x198]
movsx ecx, byte [ebp + eax - 0x894]
cmp edx, ecx
jne 0x405d1b
jmp 0x405c61
jmp 0x405d22
push edx
push ebx
add esp, 4
and edx, 0xe190
and edx, 0x15987
pop edx
push esi
push ebx
add esp, 4
or esi, 0x3cf7
jmp 0x405d45
pop esi
push edi
add edi, 0xc829
or edi, 0x10e49
pop edi
mov edx, dword [ebp - 0x75c]
add edx, dword [ebp - 0x198]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x198]
movsx edx, byte [ebp + ecx - 0x894]
cmp eax, edx
jne 0x405d81
mov dword [ebp - 0xca8], 0
jmp 0x405df0
push edi
push esi
add esp, 4
sub edi, 0xeae5
and edi, 0xc2ce
jmp 0x405d9a
sub edi, 0x98e1
pop edi
push ebx
push eax
add esp, 4
sub ebx, 0x1794b
or ebx, 0x12f4
pop ebx
mov eax, dword [ebp - 0x75c]
add eax, dword [ebp - 0x198]
movsx ecx, byte [eax]
or ecx, 0x20
mov edx, dword [ebp - 0x198]
movsx eax, byte [ebp + edx - 0x894]
or eax, 0x20
cmp ecx, eax
jge 0x405de6
mov dword [ebp - 0xca8], 0xffffffff
jmp 0x405df0
mov dword [ebp - 0xca8], 1
cmp dword [ebp - 0xca8], 0
jne 0x405e07
mov ecx, dword [ebp - 0x1970]
mov dword [ebp - 0x3f4], ecx
jmp 0x405e18
jmp 0x405bf1
mov edx, dword [ebp - 0x760]
mov dword [ebp - 0x3f4], edx
cmp dword [ebp - 0x3f4], 0
je 0x405ef3
push ebx
call 0x405e35
add byte [edx], bh
push eax
dec esi
inc ecx
inc esi
xor eax, 0xc4833a49
add al, 0x81
jecxz 0x405e32
push ebp
add byte [eax], al
call 0x405e4d
add byte [ebp + 0x38], al
dec edi
inc esi
inc eax
dec edx
aaa
cmp byte [0x8104c483], dh
retf
push ebx
push esi
add esp, 4
xor ebx, 0x126ae
or ebx, 0x16f85
call 0x405f13
add byte [ebx + 0x4c], al
cmp al, 0x4c
xor edi, dword [esi]
cmp byte [ebx + edi - 0x7d], al
les eax, [ecx + eax*4]
xchg esp, eax
push cs
add byte [eax], al
pop ebx
push eax
and eax, 0x2f97
pop eax
mov eax, dword fs:[0x18]
mov dword [ebp - 0x197c], eax
mov ecx, dword [ebp - 0x197c]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x1980], edx
mov eax, dword [ebp - 0x1980]
mov dword [ebp - 0x15fc], eax
push eax
push esi
add esp, 4
jmp 0x405f57
pop eax
push eax
add eax, 0xe01c
and eax, 0x2636
or eax, 0x9f5d
pop eax
push esi
push ecx
add esp, 4
sub esi, 0xc1b1
or esi, 0x8208
pop esi
cmp dword [ebp - 0x15fc], 0
jne 0x405f96
mov dword [ebp - 0x31c], 0
jmp 0x40623d
mov ecx, dword [ebp - 0x15fc]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xcb4], eax
push edx
xor edx, 0x5e87
pop edx
push ebx
push ebx
add esp, 4
sub ebx, 0xdba1
pop ebx
push ecx
push ebx
add esp, 4
jmp 0x405fc9
call 0x405fd6
add byte [edi], dh
dec ebx
xor bh, byte [ebx]
dec esp
dec esi
inc edi
add esp, 4
pop ecx
cmp dword [ebp - 0xcb4], 0
jne 0x405ff2
mov dword [ebp - 0x31c], 0
jmp 0x40623d
mov ecx, dword [ebp - 0xcb4]
mov dword [ebp - 0x50c], ecx
push esi
push edi
add esp, 4
or esi, 0x1035f
xor esi, 0x8ce6
and esi, 0x363b
pop esi
push edx
push edx
add esp, 4
jmp 0x406021
and edx, 0x335e
pop edx
push esi
add esi, 0x6a79
pop esi
lea edx, [ebp - 0x1738]
mov dword [ebp - 0xcb0], edx
mov eax, dword [ebp - 0x50c]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xcac], ecx
xor edx, edx
mov word [ebp - 0x218], dx
xor eax, eax
mov word [ebp - 0x34], ax
push edx
push edi
add esp, 4
jmp 0x406066
and edx, 0x100bf
pop edx
push ebx
or ebx, 0x8550
call 0x406082
add byte [edi + 0x46], al
xor cl, byte [edx + eax*2 + 0x35]
xor eax, 0x4c48338
xor ebx, 0x4ffb
pop ebx
mov ecx, dword [ebp - 0xcac]
mov dx, word [ecx]
mov word [ebp - 0x103a], dx
mov eax, dword [ebp - 0xcac]
add eax, 2
mov dword [ebp - 0xcac], eax
mov cx, word [ebp - 0x103a]
mov word [ebp - 0x218], cx
mov edx, dword [ebp - 0xcb0]
mov ax, word [edx]
mov word [ebp - 0x103c], ax
mov ecx, dword [ebp - 0xcb0]
add ecx, 2
mov dword [ebp - 0xcb0], ecx
mov dx, word [ebp - 0x103c]
mov word [ebp - 0x34], dx
push edx
push ebx
add esp, 4
sub edx, 0x252
sub edx, 0x10a4c
jmp 0x4060fa
pop edx
push eax
sub eax, 0x18555
add eax, 0xc853
and eax, 0x435c
and eax, 0x10b69
pop eax
movzx eax, word [ebp - 0x34]
test eax, eax
jne 0x406132
movzx ecx, word [ebp - 0x218]
movzx edx, word [ebp - 0x34]
sub ecx, edx
mov dword [ebp - 0x1604], ecx
jmp 0x40618c
movzx eax, word [ebp - 0x218]
movzx ecx, word [ebp - 0x34]
cmp eax, ecx
je 0x40605a
movzx edx, word [ebp - 0x218]
xor edx, 0x20
movzx eax, word [ebp - 0x34]
cmp edx, eax
je 0x40605a
movzx ecx, word [ebp - 0x218]
movzx edx, word [ebp - 0x34]
cmp ecx, edx
jge 0x406176
mov dword [ebp - 0x1600], 0xffffffff
jmp 0x406180
mov dword [ebp - 0x1600], 1
mov eax, dword [ebp - 0x1600]
mov dword [ebp - 0x1604], eax
cmp dword [ebp - 0x1604], 0
jne 0x4061d5
push ecx
xor ecx, 0x1390e
sub ecx, 0x15368
xor ecx, 0x127d2
and ecx, 0x13862
pop ecx
push eax
push edx
add esp, 4
add eax, 0x12a73
or eax, 0xb5e9
sub eax, 0xc576
pop eax
mov ecx, dword [ebp - 0x50c]
mov dword [ebp - 0x31c], ecx
jmp 0x40623d
push esi
or esi, 0x104de
sub esi, 0x67fc
add esi, 0x7105
pop esi
push ebx
sub ebx, 0x564e
and ebx, 0x16249
call 0x406203
add byte [ebp + 0x48], cl
xor al, 0x48
inc ebx
inc esp
add esp, 4
pop ebx
mov edx, dword [ebp - 0x50c]
mov eax, dword [edx]
mov dword [ebp - 0x50c], eax
mov ecx, dword [ebp - 0x50c]
cmp ecx, dword [ebp - 0xcb4]
je 0x406233
mov edx, dword [ebp - 0x50c]
cmp dword [edx + 0x30], 0
jne 0x405ffe
mov dword [ebp - 0x31c], 0
push eax
push edi
add esp, 4
sub eax, 0xeee5
pop eax
push ebx
sub ebx, 0x13397
xor ebx, 0x17fa
jmp 0x40625c
pop ebx
push esi
push edi
add esp, 4
xor esi, 0xb506
xor esi, 0x1315c
pop esi
mov eax, dword [ebp - 0x31c]
mov ecx, dword [eax + 0x18]
mov dword [ebp - 0x324], ecx
push ebx
push edx
add esp, 4
sub ebx, 0x1639d
jmp 0x406291
jmp 0x406298
add ebx, 0xc107
pop ebx
push eax
jmp 0x4062a9
sub eax, 0x6139
pop eax
mov dword [ebp - 0x770], 0
mov edx, dword [ebp - 0x324]
mov dword [ebp - 0x1608], edx
cmp dword [ebp - 0x1608], 0
jne 0x4062e0
mov eax, dword [ebp - 0x770]
mov dword [ebp - 0x510], eax
jmp 0x4065d1
mov ecx, dword [ebp - 0x1608]
mov edx, dword [ebp - 0x324]
add edx, dword [ecx + 0x3c]
mov dword [ebp - 0x160c], edx
jne 0x406308
mov eax, dword [ebp - 0x770]
mov dword [ebp - 0x510], eax
jmp 0x4065d1
mov ecx, 8
imul edx, ecx, 0
mov eax, dword [ebp - 0x160c]
mov ecx, dword [eax + edx + 0x78]
mov dword [ebp - 0x1610], ecx
cmp dword [ebp - 0x1610], 0
jne 0x40633a
mov edx, dword [ebp - 0x770]
mov dword [ebp - 0x510], edx
jmp 0x4065d1
mov eax, dword [ebp - 0x324]
add eax, dword [ebp - 0x1610]
mov dword [ebp - 0x764], eax
jne 0x40635f
mov ecx, dword [ebp - 0x770]
mov dword [ebp - 0x510], ecx
jmp 0x4065d1
mov edx, dword [ebp - 0x764]
mov eax, dword [ebp - 0x324]
add eax, dword [edx + 0x20]
mov dword [ebp - 0x1984], eax
mov ecx, dword [ebp - 0x764]
mov edx, dword [ebp - 0x324]
add edx, dword [ecx + 0x24]
mov dword [ebp - 0x1988], edx
mov eax, dword [ebp - 0x764]
mov ecx, dword [ebp - 0x324]
add ecx, dword [eax + 0x1c]
mov dword [ebp - 0x1d10], ecx
mov dword [ebp - 0x768], 0
jmp 0x4063b9
mov edx, dword [ebp - 0x768]
add edx, 1
mov dword [ebp - 0x768], edx
mov eax, dword [ebp - 0x764]
mov ecx, dword [ebp - 0x768]
cmp ecx, dword [eax + 0x18]
jae 0x4065c5
mov edx, dword [ebp - 0x768]
mov eax, dword [ebp - 0x1984]
mov ecx, dword [ebp - 0x324]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x76c], ecx
mov edx, dword [ebp - 0x768]
mov eax, dword [ebp - 0x1988]
movzx ecx, word [eax + edx*2]
mov edx, dword [ebp - 0x1d10]
mov eax, dword [ebp - 0x324]
add eax, dword [edx + ecx*4]
mov dword [ebp - 0x198c], eax
mov dword [ebp - 0x19c], 0
jmp 0x406429
mov ecx, dword [ebp - 0x19c]
add ecx, 1
mov dword [ebp - 0x19c], ecx
mov edx, dword [ebp - 0x76c]
add edx, dword [ebp - 0x19c]
movsx eax, byte [edx]
test eax, eax
je 0x4064db
mov ecx, dword [ebp - 0x19c]
movsx edx, byte [ebp + ecx - 0x878]
test edx, edx
je 0x4064db
push esi
push eax
add esp, 4
sub esi, 0x2087
pop esi
push edi
push esi
add esp, 4
sub edi, 0xac29
and edi, 0x13db5
xor edi, 0xd515
pop edi
push ecx
xor ecx, 0x12cdf
or ecx, 0x8520
pop ecx
mov eax, dword [ebp - 0x76c]
add eax, dword [ebp - 0x19c]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x19c]
movsx eax, byte [ebp + edx - 0x878]
cmp ecx, eax
je 0x4064cd
mov ecx, dword [ebp - 0x76c]
add ecx, dword [ebp - 0x19c]
movsx edx, byte [ecx]
xor edx, 0x20
mov eax, dword [ebp - 0x19c]
movsx ecx, byte [ebp + eax - 0x878]
cmp edx, ecx
jne 0x4064d4
jmp 0x40641a
jmp 0x4064db
push esi
call 0x4064ec
add byte [ebp + 0x3b], cl
inc eax
dec ebx
inc edx
inc edx
aas
push eax
add esp, 4
and esi, 0xc3b9
pop esi
push ebx
push edx
add esp, 4
and ebx, 0x4bb5
or ebx, 0x17b3d
jmp 0x40650c
pop ebx
mov edx, dword [ebp - 0x76c]
add edx, dword [ebp - 0x19c]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x19c]
movsx edx, byte [ebp + ecx - 0x878]
cmp eax, edx
jne 0x40653a
mov dword [ebp - 0xcb8], 0
jmp 0x4065a9
push edx
or edx, 0x790c
or edx, 0x551e
add edx, 0x103e5
pop edx
push ebx
push ecx
add esp, 4
and ebx, 0x17808
and ebx, 0x6661
and ebx, 0x10b83
sub ebx, 0x876b
pop ebx
mov eax, dword [ebp - 0x76c]
add eax, dword [ebp - 0x19c]
movsx ecx, byte [eax]
or ecx, 0x20
mov edx, dword [ebp - 0x19c]
movsx eax, byte [ebp + edx - 0x878]
or eax, 0x20
cmp ecx, eax
jge 0x40659f
mov dword [ebp - 0xcb8], 0xffffffff
jmp 0x4065a9
mov dword [ebp - 0xcb8], 1
cmp dword [ebp - 0xcb8], 0
jne 0x4065c0
mov ecx, dword [ebp - 0x198c]
mov dword [ebp - 0x510], ecx
jmp 0x4065d1
jmp 0x4063aa
mov edx, dword [ebp - 0x770]
mov dword [ebp - 0x510], edx
mov eax, dword [ebp - 0x510]
mov dword [ebp - 0x79c], eax
push eax
push esi
add esp, 4
call 0x4065ee
add byte [esi + 0x4a], cl
xor al, 0x44
dec esi
inc eax
add esp, 4
sub eax, 0x6d65
call 0x406605
add byte [ecx + 0x3b], al
inc edx
xor bh, byte [ecx]
cmp dword [eax + 0x48], ecx
add esp, 4
or eax, 0x567c
pop eax
mov ecx, dword [ebp - 0x3e8]
add ecx, 0xe
mov dword [ebp - 0x19dc], ecx
push esi
push ecx
add esp, 4
or esi, 0x1ff0
and esi, 0xa568
sub esi, 0xef2f
pop esi
push ebx
push eax
add esp, 4
jmp 0x406641
xor ebx, 0x70bb
pop ebx
push eax
or eax, 0x9e9
pop eax
cmp dword [ebp - 0x3e8], 0
je 0x406662
cmp dword [ebp - 0xab8], 0
jne 0x4066a8
push edi
push ebx
add esp, 4
call 0x406675
add byte [edi], dh
cmp ecx, dword [edi + 0x3f]
dec ebp
inc eax
xor al, byte [ecx - 0x7d]
les eax, [eax + ebp*8]
pop es
add byte [eax], al
add byte [eax], al
xor eax, 0x44444d3d
inc eax
add esp, 4
pop edi
push ebx
push eax
add esp, 4
xor ebx, 0x772e
pop ebx
mov edx, dword [ebp - 0x79c]
mov dword [ebp - 0x1990], edx
push 0
call dword [ebp - 0x1990]
mov dword [ebp - 0x20a8], 0xa
push esi
push edx
add esp, 4
and esi, 0x16292
add esi, 0x10a3b
pop esi
push ebx
push edi
add esp, 4
sub ebx, 0x10224
pop ebx
push ebx
sub ebx, 0xdbbd
pop ebx
push edi
push edi
add esp, 4
and edi, 0x49ff
pop edi
mov eax, dword [ebp - 0x3e8]
mov cl, byte [eax + 0xa]
mov byte [ebp - 0x3ae], cl
mov edx, dword [ebp - 0xab8]
sub edx, dword [ebp - 0x3e8]
mov dword [ebp - 0x1694], edx
mov dword [ebp - 0xce8], 0
push edi
sub edi, 0x15993
sub edi, 0xe5d
sub edi, 0xa89c
or edi, 0x17ad
pop edi
push eax
push esi
add esp, 4
add eax, 0x16356
or eax, 0xa407
xor eax, 0x15442
pop eax
mov byte [ebp - 0x9d4], 0x56
mov byte [ebp - 0x9d3], 0x69
mov byte [ebp - 0x9d2], 0x72
mov byte [ebp - 0x9d1], 0x74
mov byte [ebp - 0x9d0], 0x75
mov byte [ebp - 0x9cf], 0x61
mov byte [ebp - 0x9ce], 0x6c
mov byte [ebp - 0x9cd], 0x50
mov byte [ebp - 0x9cc], 0x72
mov byte [ebp - 0x9cb], 0x6f
mov byte [ebp - 0x9ca], 0x74
mov byte [ebp - 0x9c9], 0x65
mov byte [ebp - 0x9c8], 0x63
mov byte [ebp - 0x9c7], 0x74
mov byte [ebp - 0x9c6], 0
push ebx
push ebx
add esp, 4
xor ebx, 0xeded
or ebx, 0x10cac
pop ebx
push ebx
push edx
add esp, 4
sub ebx, 0xa9d
xor ebx, 0xd794
pop ebx
push esi
and esi, 0x3d49
or esi, 0x110c1
pop esi
mov eax, dword fs:[0x18]
mov dword [ebp - 0x1994], eax
mov ecx, dword [ebp - 0x1994]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x1998], edx
mov eax, dword [ebp - 0x1998]
mov dword [ebp - 0x1614], eax
push edx
and edx, 0xf66
pop edx
push edi
push eax
add esp, 4
add edi, 0xd76f
jmp 0x40681b
pop edi
push edi
add edi, 0x685f
xor edi, 0x64bb
jmp 0x40682e
and edi, 0x3fb9
pop edi
cmp dword [ebp - 0x1614], 0
jne 0x40684d
mov dword [ebp - 0x2fc], 0
jmp 0x406af4
mov ecx, dword [ebp - 0x1614]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xcc4], eax
push eax
or eax, 0x13e00
xor eax, 0xb988
pop eax
push edx
push ecx
add esp, 4
jmp 0x406878
pop edx
push esi
push edx
add esp, 4
sub esi, 0x16e98
or esi, 0x670d
or esi, 0x149f2
pop esi
cmp dword [ebp - 0xcc4], 0
jne 0x4068a9
mov dword [ebp - 0x2fc], 0
jmp 0x406af4
mov ecx, dword [ebp - 0xcc4]
mov dword [ebp - 0x514], ecx
push esi
push esi
add esp, 4
add esi, 0x127bc
or esi, 0x11d4d
and esi, 0x185d
pop esi
push ebx
and ebx, 0xe60d
and ebx, 0xdefb
xor ebx, 0xaef8
xor ebx, 0xedb9
pop ebx
lea edx, [ebp - 0x1738]
mov dword [ebp - 0xcc0], edx
mov eax, dword [ebp - 0x514]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xcbc], ecx
xor edx, edx
mov word [ebp - 0x21c], dx
xor eax, eax
mov word [ebp - 0x38], ax
push ecx
push eax
add esp, 4
sub ecx, 0x10cda
and ecx, 0x70bb
pop ecx
push eax
push edi
add esp, 4
and eax, 0x11104
pop eax
push edi
and edi, 0xac90
jmp 0x40693c
and edi, 0xdf4f
pop edi
mov ecx, dword [ebp - 0xcbc]
mov dx, word [ecx]
mov word [ebp - 0x103e], dx
mov eax, dword [ebp - 0xcbc]
add eax, 2
mov dword [ebp - 0xcbc], eax
mov cx, word [ebp - 0x103e]
mov word [ebp - 0x21c], cx
mov edx, dword [ebp - 0xcc0]
mov ax, word [edx]
mov word [ebp - 0x1040], ax
mov ecx, dword [ebp - 0xcc0]
add ecx, 2
mov dword [ebp - 0xcc0], ecx
mov dx, word [ebp - 0x1040]
mov word [ebp - 0x38], dx
push ebx
push edx
add esp, 4
add ebx, 0x37b5
add ebx, 0x8d5b
add ebx, 0xf392
pop ebx
push edi
push eax
add esp, 4
add edi, 0x137de
and edi, 0x4e80
jmp 0x4069cb
pop edi
movzx eax, word [ebp - 0x38]
test eax, eax
jne 0x4069e9
movzx ecx, word [ebp - 0x21c]
movzx edx, word [ebp - 0x38]
sub ecx, edx
mov dword [ebp - 0x161c], ecx
jmp 0x406a43
movzx eax, word [ebp - 0x21c]
movzx ecx, word [ebp - 0x38]
cmp eax, ecx
je 0x406911
movzx edx, word [ebp - 0x21c]
xor edx, 0x20
movzx eax, word [ebp - 0x38]
cmp edx, eax
je 0x406911
movzx ecx, word [ebp - 0x21c]
movzx edx, word [ebp - 0x38]
cmp ecx, edx
jge 0x406a2d
mov dword [ebp - 0x1618], 0xffffffff
jmp 0x406a37
mov dword [ebp - 0x1618], 1
mov eax, dword [ebp - 0x1618]
mov dword [ebp - 0x161c], eax
cmp dword [ebp - 0x161c], 0
jne 0x406a8c
push edi
push ebx
add esp, 4
and edi, 0x68ff
pop edi
push edi
push edx
add esp, 4
jmp 0x406a63
or edi, 0x17ca4
pop edi
push esi
add esi, 0xbba3
jmp 0x406a77
xor esi, 0x8fc3
pop esi
mov ecx, dword [ebp - 0x514]
mov dword [ebp - 0x2fc], ecx
jmp 0x406af4
push edx
push esi
add esp, 4
add edx, 0x633a
pop edx
push eax
push edi
add esp, 4
add eax, 0x9e6d
or eax, 0x16147
pop eax
push esi
add esi, 0x18047
xor esi, 0xbf34
xor esi, 0x1528f
pop esi
mov edx, dword [ebp - 0x514]
mov eax, dword [edx]
mov dword [ebp - 0x514], eax
mov ecx, dword [ebp - 0x514]
cmp ecx, dword [ebp - 0xcc4]
je 0x406aea
mov edx, dword [ebp - 0x514]
cmp dword [edx + 0x30], 0
jne 0x4068b5
mov dword [ebp - 0x2fc], 0
push edx
xor edx, 0xb7e2
and edx, 0x12b5c
add edx, 0x10743
sub edx, 0x1186b
pop edx
push ebx
push ebx
add esp, 4
call 0x406b22
add byte [ebp + 0x3d], al
inc esi
cmp byte [ecx], bh
dec ebx
inc eax
dec edi
inc edi
add esp, 4
pop ebx
cmp dword [ebp - 0x2fc], 0
jne 0x40742b
mov eax, 0x6b
mov word [ebp - 0x1790], ax
mov ecx, 0x65
mov word [ebp - 0x178e], cx
mov edx, 0x72
mov word [ebp - 0x178c], dx
mov eax, 0x6e
mov word [ebp - 0x178a], ax
mov ecx, 0x65
mov word [ebp - 0x1788], cx
mov edx, 0x6c
mov word [ebp - 0x1786], dx
mov eax, 0x33
mov word [ebp - 0x1784], ax
mov ecx, 0x32
mov word [ebp - 0x1782], cx
mov edx, 0x2e
mov word [ebp - 0x1780], dx
mov eax, 0x64
mov word [ebp - 0x177e], ax
mov ecx, 0x6c
mov word [ebp - 0x177c], cx
mov edx, 0x6c
mov word [ebp - 0x177a], dx
xor eax, eax
mov word [ebp - 0x1778], ax
push eax
push edx
add esp, 4
sub eax, 0x16d43
or eax, 0x9677
and eax, 0x13d08
sub eax, 0x58d4
pop eax
push edx
xor edx, 0xdd17
add edx, 0xbd04
add edx, 0x8259
pop edx
mov byte [ebp - 0x8a4], 0x4c
mov byte [ebp - 0x8a3], 0x6f
mov byte [ebp - 0x8a2], 0x61
mov byte [ebp - 0x8a1], 0x64
mov byte [ebp - 0x8a0], 0x4c
mov byte [ebp - 0x89f], 0x69
mov byte [ebp - 0x89e], 0x62
mov byte [ebp - 0x89d], 0x72
mov byte [ebp - 0x89c], 0x61
mov byte [ebp - 0x89b], 0x72
mov byte [ebp - 0x89a], 0x79
mov byte [ebp - 0x899], 0x57
mov byte [ebp - 0x898], 0
mov ecx, dword fs:[0x18]
mov dword [ebp - 0x199c], ecx
mov edx, dword [ebp - 0x199c]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x19a0], eax
mov ecx, dword [ebp - 0x19a0]
mov dword [ebp - 0x1620], ecx
push ecx
jmp 0x406c88
xor ecx, 0x2508
or ecx, 0xf689
pop ecx
push ecx
push ecx
add esp, 4
or ecx, 0x9f88
xor ecx, 0x10ae4
and ecx, 0x4979
jmp 0x406cb2
pop ecx
cmp dword [ebp - 0x1620], 0
jne 0x406ccb
mov dword [ebp - 0x774], 0
jmp 0x406f72
mov edx, dword [ebp - 0x1620]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0xcd0], ecx
push edi
and edi, 0x931e
sub edi, 0xad65
xor edi, 0xa3b5
or edi, 0x10ba0
pop edi
push edx
push edx
add esp, 4
or edx, 0x1b5a
or edx, 0x39e9
or edx, 0xf771
pop edx
cmp dword [ebp - 0xcd0], 0
jne 0x406d27
mov dword [ebp - 0x774], 0
jmp 0x406f72
mov edx, dword [ebp - 0xcd0]
mov dword [ebp - 0x518], edx
push ecx
add ecx, 0x9a40
call 0x406d49
add byte [ecx], bh
dec edx
cmp byte [esi + esi + 0x40], al
dec ecx
cmp dword [0xeb04c483], esi
pop es
cmp ecx, dword [edx + eax*2 + 0x47]
inc ebp
dec ebx
dec edi
call 0x406d61
add byte [eax + edi], dh
cmp dword [ecx + ecx*2], edi
dec edi
add esp, 4
pop ecx
lea eax, [ebp - 0x1790]
mov dword [ebp - 0xccc], eax
mov ecx, dword [ebp - 0x518]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0xcc8], edx
xor eax, eax
mov word [ebp - 0x220], ax
xor ecx, ecx
mov word [ebp - 0x3c], cx
push ebx
sub ebx, 0x109ae
and ebx, 0x6b72
add ebx, 0x89bb
pop ebx
push esi
push eax
add esp, 4
add esi, 0x6232
pop esi
push edi
push edi
add esp, 4
add edi, 0x15233
xor edi, 0x17ca6
pop edi
mov edx, dword [ebp - 0xcc8]
mov ax, word [edx]
mov word [ebp - 0x1042], ax
mov ecx, dword [ebp - 0xcc8]
add ecx, 2
mov dword [ebp - 0xcc8], ecx
mov dx, word [ebp - 0x1042]
mov word [ebp - 0x220], dx
mov eax, dword [ebp - 0xccc]
mov cx, word [eax]
mov word [ebp - 0x1044], cx
mov edx, dword [ebp - 0xccc]
add edx, 2
mov dword [ebp - 0xccc], edx
mov ax, word [ebp - 0x1044]
mov word [ebp - 0x3c], ax
push edx
push edx
add esp, 4
xor edx, 0x15b44
xor edx, 0x3aad
xor edx, 0xa74f
pop edx
push eax
xor eax, 0x10a87
and eax, 0x529e
or eax, 0x5de5
add eax, 0xe7dd
pop eax
movzx ecx, word [ebp - 0x3c]
test ecx, ecx
jne 0x406e67
movzx edx, word [ebp - 0x220]
movzx eax, word [ebp - 0x3c]
sub edx, eax
mov dword [ebp - 0x1668], edx
jmp 0x406ec1
movzx ecx, word [ebp - 0x220]
movzx edx, word [ebp - 0x3c]
cmp ecx, edx
je 0x406d8f
movzx eax, word [ebp - 0x220]
xor eax, 0x20
movzx ecx, word [ebp - 0x3c]
cmp eax, ecx
je 0x406d8f
movzx edx, word [ebp - 0x220]
movzx eax, word [ebp - 0x3c]
cmp edx, eax
jge 0x406eab
mov dword [ebp - 0x1624], 0xffffffff
jmp 0x406eb5
mov dword [ebp - 0x1624], 1
mov ecx, dword [ebp - 0x1624]
mov dword [ebp - 0x1668], ecx
cmp dword [ebp - 0x1668], 0
jne 0x406f0a
push edi
or edi, 0x1039a
jmp 0x406ed6
pop edi
push esi
add esi, 0x103c0
xor esi, 0xb3d8
call 0x406ef1
add byte [edi], dh
inc esi
inc ebp
inc ebx
inc eax
dec ebx
cmp al, byte [ebx + 0x5eb04c4]
cmp bh, byte [edx]
aaa
inc ebp
xor al, 0x5e
mov edx, dword [ebp - 0x518]
mov dword [ebp - 0x774], edx
jmp 0x406f72
push ebx
jmp 0x406f11
or ebx, 0x108d8
sub ebx, 0x10e46
pop ebx
push edi
push edx
add esp, 4
add edi, 0x2918
and edi, 0x1763d
sub edi, 0x11842
add edi, 0x11cfe
pop edi
mov eax, dword [ebp - 0x518]
mov ecx, dword [eax]
mov dword [ebp - 0x518], ecx
mov edx, dword [ebp - 0x518]
cmp edx, dword [ebp - 0xcd0]
je 0x406f68
mov eax, dword [ebp - 0x518]
cmp dword [eax + 0x30], 0
jne 0x406d33
mov dword [ebp - 0x774], 0
push edi
push esi
add esp, 4
sub edi, 0x18003
pop edi
push ecx
jmp 0x406f87
add ecx, 0x164f2
or ecx, 0x6eba
call 0x406fa0
add byte [edx], bh
cmp ecx, dword [ebp + 0x47]
dec edi
dec esi
inc ecx
add esp, 4
pop ecx
cmp dword [ebp - 0x774], 0
jne 0x406fee
push edi
push ebx
add esp, 4
or edi, 0xb4dd
add edi, 0x12373
pop edi
push ebx
xor ebx, 0x8c0f
xor ebx, 0xd1f0
pop ebx
push edx
push edx
add esp, 4
add edx, 0x9c1f
jmp 0x406fde
pop edx
mov dword [ebp - 0xab4], 0
jmp 0x407b16
push edi
push esi
add esp, 4
call 0x407002
add byte [ebx + ecx*2 + 0x4c], al
cmp byte [edi + esi + 0x4d], cl
cmp cl, byte [esi - 0x7d]
les eax, [ecx + eax*4]
out 0x8e, eax
xchg ebp, eax
add byte [eax], al
sub edi, 0x4a8d
or edi, 0x10644
pop edi
push esi
add esi, 0x4eb0
pop esi
mov ecx, dword [ebp - 0x774]
mov edx, dword [ecx + 0x18]
mov dword [ebp - 0x3a4], edx
mov dword [ebp - 0x784], 0
mov eax, dword [ebp - 0x3a4]
mov dword [ebp - 0x166c], eax
cmp dword [ebp - 0x166c], 0
jne 0x40705f
mov ecx, dword [ebp - 0x784]
mov dword [ebp - 0x3f8], ecx
jmp 0x407350
mov edx, dword [ebp - 0x166c]
mov eax, dword [ebp - 0x3a4]
add eax, dword [edx + 0x3c]
mov dword [ebp - 0x1670], eax
jne 0x407087
mov ecx, dword [ebp - 0x784]
mov dword [ebp - 0x3f8], ecx
jmp 0x407350
mov edx, 8
imul eax, edx, 0
mov ecx, dword [ebp - 0x1670]
mov edx, dword [ecx + eax + 0x78]
mov dword [ebp - 0x1678], edx
cmp dword [ebp - 0x1678], 0
jne 0x4070b9
mov eax, dword [ebp - 0x784]
mov dword [ebp - 0x3f8], eax
jmp 0x407350
mov ecx, dword [ebp - 0x3a4]
add ecx, dword [ebp - 0x1678]
mov dword [ebp - 0x778], ecx
jne 0x4070de
mov edx, dword [ebp - 0x784]
mov dword [ebp - 0x3f8], edx
jmp 0x407350
mov eax, dword [ebp - 0x778]
mov ecx, dword [ebp - 0x3a4]
add ecx, dword [eax + 0x20]
mov dword [ebp - 0x19a4], ecx
mov edx, dword [ebp - 0x778]
mov eax, dword [ebp - 0x3a4]
add eax, dword [edx + 0x24]
mov dword [ebp - 0x19a8], eax
mov ecx, dword [ebp - 0x778]
mov edx, dword [ebp - 0x3a4]
add edx, dword [ecx + 0x1c]
mov dword [ebp - 0x19ac], edx
mov dword [ebp - 0x77c], 0
jmp 0x407138
mov eax, dword [ebp - 0x77c]
add eax, 1
mov dword [ebp - 0x77c], eax
mov ecx, dword [ebp - 0x778]
mov edx, dword [ebp - 0x77c]
cmp edx, dword [ecx + 0x18]
jae 0x407344
mov eax, dword [ebp - 0x77c]
mov ecx, dword [ebp - 0x19a4]
mov edx, dword [ebp - 0x3a4]
add edx, dword [ecx + eax*4]
mov dword [ebp - 0x780], edx
mov eax, dword [ebp - 0x77c]
mov ecx, dword [ebp - 0x19a8]
movzx edx, word [ecx + eax*2]
mov eax, dword [ebp - 0x19ac]
mov ecx, dword [ebp - 0x3a4]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x19b0], ecx
mov dword [ebp - 0x1a0], 0
jmp 0x4071a8
mov edx, dword [ebp - 0x1a0]
add edx, 1
mov dword [ebp - 0x1a0], edx
mov eax, dword [ebp - 0x780]
add eax, dword [ebp - 0x1a0]
movsx ecx, byte [eax]
test ecx, ecx
je 0x40725a
mov edx, dword [ebp - 0x1a0]
movsx eax, byte [ebp + edx - 0x8a4]
test eax, eax
je 0x40725a
push edx
and edx, 0x11e70
pop edx
push ecx
push eax
add esp, 4
sub ecx, 0x33af
call 0x4071f7
add byte [edi], bh
push eax
cmp eax, 0x414e333c
cmp byte [esi], bh
add esp, 4
xor ecx, 0x8a4
and ecx, 0x2c94
pop ecx
mov ecx, dword [ebp - 0x780]
add ecx, dword [ebp - 0x1a0]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x1a0]
movsx ecx, byte [ebp + eax - 0x8a4]
cmp edx, ecx
je 0x40724c
mov edx, dword [ebp - 0x780]
add edx, dword [ebp - 0x1a0]
movsx eax, byte [edx]
xor eax, 0x20
mov ecx, dword [ebp - 0x1a0]
movsx edx, byte [ebp + ecx - 0x8a4]
cmp eax, edx
jne 0x407253
jmp 0x407199
jmp 0x40725a
push ebx
xor ebx, 0x32e7
pop ebx
push eax
push edx
add esp, 4
add eax, 0xbc57
call 0x40727c
add byte [ebx + 0x3c], al
aaa
dec esi
dec edx
dec eax
inc ecx
add esp, 4
pop eax
push edx
push ecx
add esp, 4
xor edx, 0x3578
pop edx
mov eax, dword [ebp - 0x780]
add eax, dword [ebp - 0x1a0]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x1a0]
movsx eax, byte [ebp + edx - 0x8a4]
cmp ecx, eax
jne 0x4072b9
mov dword [ebp - 0xcd4], 0
jmp 0x407328
push ebx
push edi
add esp, 4
and ebx, 0x843c
sub ebx, 0x118fc
and ebx, 0x15e68
pop ebx
push edx
push ebx
add esp, 4
and edx, 0x155f3
jmp 0x4072e4
add edx, 0x99aa
pop edx
mov ecx, dword [ebp - 0x780]
add ecx, dword [ebp - 0x1a0]
movsx edx, byte [ecx]
or edx, 0x20
mov eax, dword [ebp - 0x1a0]
movsx ecx, byte [ebp + eax - 0x8a4]
or ecx, 0x20
cmp edx, ecx
jge 0x40731e
mov dword [ebp - 0xcd4], 0xffffffff
jmp 0x407328
mov dword [ebp - 0xcd4], 1
cmp dword [ebp - 0xcd4], 0
jne 0x40733f
mov edx, dword [ebp - 0x19b0]
mov dword [ebp - 0x3f8], edx
jmp 0x407350
jmp 0x407129
mov eax, dword [ebp - 0x784]
mov dword [ebp - 0x3f8], eax
cmp dword [ebp - 0x3f8], 0
je 0x40742b
push esi
push edi
add esp, 4
xor esi, 0x13914
add esi, 0x87b9
pop esi
push eax
call 0x40737e
add byte [edi], bh
cmp dh, byte [eax + edi]
inc esp
xor al, 0x46
aas
add esp, 4
add eax, 0x3dbb
jmp 0x40738e
pop eax
mov ecx, dword [ebp - 0x3f8]
mov dword [ebp - 0x19b4], ecx
push ebx
xor ebx, 0x14084
add ebx, 0x165fa
pop ebx
push edx
jmp 0x4073b0
pop edx
push esi
add esi, 0x4804
or esi, 0x12cd0
jmp 0x4073c5
jmp 0x4073cc
pop esi
mov edx, dword [ebp - 0x19b4]
mov dword [ebp - 0x19b8], edx
lea eax, [ebp - 0x1738]
push eax
call dword [ebp - 0x19b8]
test eax, eax
jne 0x40742b
push ecx
add ecx, 0xc6b
add ecx, 0x176f0
sub ecx, 0x1ced
call 0x40740a
add byte [eax + 0x46], cl
cmp byte [ecx + 0x4b], cl
cmp eax, 0x4c48335
pop ecx
push edi
sub edi, 0xc779
sub edi, 0xb56
pop edi
mov dword [ebp - 0xab4], 0
jmp 0x407b16
push eax
add eax, 0x4add
call 0x407442
add byte [edi], bh
xor al, 0x4a
dec edx
aaa
dec ebp
cmp al, 0x45
dec ebx
add esp, 4
sub eax, 0x1d85
pop eax
push edi
jmp 0x407456
add edi, 0xea62
pop edi
mov ecx, dword fs:[0x18]
mov dword [ebp - 0x19bc], ecx
mov edx, dword [ebp - 0x19bc]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x19c0], eax
mov ecx, dword [ebp - 0x19c0]
mov dword [ebp - 0x167c], ecx
push esi
jmp 0x40748b
pop esi
push ecx
push edx
add esp, 4
and ecx, 0x562
jmp 0x4074a0
and ecx, 0x14896
pop ecx
push esi
xor esi, 0x2b8
pop esi
push esi
or esi, 0xb1e2
pop esi
cmp dword [ebp - 0x167c], 0
jne 0x4074cf
mov dword [ebp - 0x2fc], 0
jmp 0x407776
mov edx, dword [ebp - 0x167c]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0xce0], ecx
push edx
sub edx, 0x1211a
call 0x4074f7
add byte [edi + 0x41], cl
xor eax, 0x4a46473a
inc eax
xor eax, dword [ebx - 0xd7efb3c]
sbb edi, dword [ecx]
add al, ch
or al, byte [eax]
add byte [eax], al
add byte [edi], bh
push eax
dec eax
inc ecx
cmp edi, dword [esp + esi]
dec esp
add esp, 4
pop edx
cmp dword [ebp - 0xce0], 0
jne 0x40752b
mov dword [ebp - 0x2fc], 0
jmp 0x407776
mov edx, dword [ebp - 0xce0]
mov dword [ebp - 0x51c], edx
push ecx
call 0x407545
add byte [esi + 0x43], cl
dec esp
inc eax
cmp eax, 0xc4833c3d
add al, 0x81
leave
pop esi
push eax
add byte [eax], al
xor ecx, 0x15c7e
pop ecx
push esi
push edi
add esp, 4
or esi, 0x14a10
pop esi
push edx
add edx, 0x14422
pop edx
lea eax, [ebp - 0x1738]
mov dword [ebp - 0xcdc], eax
mov ecx, dword [ebp - 0x51c]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0xcd8], edx
xor eax, eax
mov word [ebp - 0x224], ax
xor ecx, ecx
mov word [ebp - 0x40], cx
push eax
push edx
add esp, 4
or eax, 0x7d3b
sub eax, 0x13700
jmp 0x4075aa
pop eax
push eax
add eax, 0xce35
sub eax, 0xd584
add eax, 0x1ab8
sub eax, 0x13876
pop eax
mov edx, dword [ebp - 0xcd8]
mov ax, word [edx]
mov word [ebp - 0x1046], ax
mov ecx, dword [ebp - 0xcd8]
add ecx, 2
mov dword [ebp - 0xcd8], ecx
mov dx, word [ebp - 0x1046]
mov word [ebp - 0x224], dx
mov eax, dword [ebp - 0xcdc]
mov cx, word [eax]
mov word [ebp - 0x1048], cx
mov edx, dword [ebp - 0xcdc]
add edx, 2
mov dword [ebp - 0xcdc], edx
mov ax, word [ebp - 0x1048]
mov word [ebp - 0x40], ax
push edx
push edx
add esp, 4
xor edx, 0x1d11
jmp 0x40762d
xor edx, 0x78d5
and edx, 0xa71
pop edx
push ecx
and ecx, 0x5b35
sub ecx, 0xfa6e
xor ecx, 0x3107
pop ecx
movzx ecx, word [ebp - 0x40]
test ecx, ecx
jne 0x40766b
movzx edx, word [ebp - 0x224]
movzx eax, word [ebp - 0x40]
sub edx, eax
mov dword [ebp - 0x1684], edx
jmp 0x4076c5
movzx ecx, word [ebp - 0x224]
movzx edx, word [ebp - 0x40]
cmp ecx, edx
je 0x407593
movzx eax, word [ebp - 0x224]
xor eax, 0x20
movzx ecx, word [ebp - 0x40]
cmp eax, ecx
je 0x407593
movzx edx, word [ebp - 0x224]
movzx eax, word [ebp - 0x40]
cmp edx, eax
jge 0x4076af
mov dword [ebp - 0x1680], 0xffffffff
jmp 0x4076b9
mov dword [ebp - 0x1680], 1
mov ecx, dword [ebp - 0x1680]
mov dword [ebp - 0x1684], ecx
cmp dword [ebp - 0x1684], 0
jne 0x40770e
push esi
xor esi, 0x5319
and esi, 0xa59b
add esi, 0x1726b
add esi, 0xfe09
pop esi
push edx
push eax
add esp, 4
or edx, 0x7cf8
pop edx
push ecx
push ebx
add esp, 4
sub ecx, 0x178c0
pop ecx
mov edx, dword [ebp - 0x51c]
mov dword [ebp - 0x2fc], edx
jmp 0x407776
push eax
push ebx
add esp, 4
jmp 0x40771b
and eax, 0x11988
add eax, 0x1d69
pop eax
push edx
push eax
add esp, 4
and edx, 0x98f1
pop edx
push ecx
push ecx
add esp, 4
xor ecx, 0x1397b
pop ecx
mov eax, dword [ebp - 0x51c]
mov ecx, dword [eax]
mov dword [ebp - 0x51c], ecx
mov edx, dword [ebp - 0x51c]
cmp edx, dword [ebp - 0xce0]
je 0x40776c
mov eax, dword [ebp - 0x51c]
cmp dword [eax + 0x30], 0
jne 0x407537
mov dword [ebp - 0x2fc], 0
push edx
sub edx, 0x6f34
and edx, 0x9187
pop edx
push edi
jmp 0x40778d
pop edi
push edx
push ebx
add esp, 4
add edx, 0x1652b
pop edx
push edx
xor edx, 0x73b3
add edx, 0xca75
pop edx
mov ecx, dword [ebp - 0x2fc]
mov edx, dword [ecx + 0x18]
mov dword [ebp - 0x338], edx
push ebx
and ebx, 0x14d2d
pop ebx
push edi
push edx
add esp, 4
or edi, 0x17e0
pop edi
push eax
push edx
add esp, 4
add eax, 0xe021
jmp 0x4077dc
sub eax, 0x17193
xor eax, 0xc552
pop eax
mov dword [ebp - 0x794], 0
mov eax, dword [ebp - 0x338]
mov dword [ebp - 0x1688], eax
cmp dword [ebp - 0x1688], 0
jne 0x407819
mov ecx, dword [ebp - 0x794]
mov dword [ebp - 0x520], ecx
jmp 0x407b0a
mov edx, dword [ebp - 0x1688]
mov eax, dword [ebp - 0x338]
add eax, dword [edx + 0x3c]
mov dword [ebp - 0x168c], eax
jne 0x407841
mov ecx, dword [ebp - 0x794]
mov dword [ebp - 0x520], ecx
jmp 0x407b0a
mov edx, 8
imul eax, edx, 0
mov ecx, dword [ebp - 0x168c]
mov edx, dword [ecx + eax + 0x78]
mov dword [ebp - 0x1690], edx
cmp dword [ebp - 0x1690], 0
jne 0x407873
mov eax, dword [ebp - 0x794]
mov dword [ebp - 0x520], eax
jmp 0x407b0a
mov ecx, dword [ebp - 0x338]
add ecx, dword [ebp - 0x1690]
mov dword [ebp - 0x788], ecx
jne 0x407898
mov edx, dword [ebp - 0x794]
mov dword [ebp - 0x520], edx
jmp 0x407b0a
mov eax, dword [ebp - 0x788]
mov ecx, dword [ebp - 0x338]
add ecx, dword [eax + 0x20]
mov dword [ebp - 0x19c4], ecx
mov edx, dword [ebp - 0x788]
mov eax, dword [ebp - 0x338]
add eax, dword [edx + 0x24]
mov dword [ebp - 0x19c8], eax
mov ecx, dword [ebp - 0x788]
mov edx, dword [ebp - 0x338]
add edx, dword [ecx + 0x1c]
mov dword [ebp - 0x19cc], edx
mov dword [ebp - 0x78c], 0
jmp 0x4078f2
mov eax, dword [ebp - 0x78c]
add eax, 1
mov dword [ebp - 0x78c], eax
mov ecx, dword [ebp - 0x788]
mov edx, dword [ebp - 0x78c]
cmp edx, dword [ecx + 0x18]
jae 0x407afe
mov eax, dword [ebp - 0x78c]
mov ecx, dword [ebp - 0x19c4]
mov edx, dword [ebp - 0x338]
add edx, dword [ecx + eax*4]
mov dword [ebp - 0x790], edx
mov eax, dword [ebp - 0x78c]
mov ecx, dword [ebp - 0x19c8]
movzx edx, word [ecx + eax*2]
mov eax, dword [ebp - 0x19cc]
mov ecx, dword [ebp - 0x338]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x19d0], ecx
mov dword [ebp - 0x1a4], 0
jmp 0x407962
mov edx, dword [ebp - 0x1a4]
add edx, 1
mov dword [ebp - 0x1a4], edx
mov eax, dword [ebp - 0x790]
add eax, dword [ebp - 0x1a4]
movsx ecx, byte [eax]
test ecx, ecx
je 0x407a14
mov edx, dword [ebp - 0x1a4]
movsx eax, byte [ebp + edx - 0x9d4]
test eax, eax
je 0x407a14
push ebx
push edx
add esp, 4
add ebx, 0x15222
and ebx, 0x119a0
call 0x4079af
add byte [ecx], bh
inc edi
dec esi
inc esp
cmp eax, dword [esi + 0x42]
dec ebp
dec eax
add esp, 4
add ebx, 0xde46
pop ebx
push eax
add eax, 0x71d6
pop eax
mov ecx, dword [ebp - 0x790]
add ecx, dword [ebp - 0x1a4]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x1a4]
movsx ecx, byte [ebp + eax - 0x9d4]
cmp edx, ecx
je 0x407a06
mov edx, dword [ebp - 0x790]
add edx, dword [ebp - 0x1a4]
movsx eax, byte [edx]
xor eax, 0x20
mov ecx, dword [ebp - 0x1a4]
movsx edx, byte [ebp + ecx - 0x9d4]
cmp eax, edx
jne 0x407a0d
jmp 0x407953
jmp 0x407a14
push esi
push eax
add esp, 4
add esi, 0x34e9
and esi, 0x1659c
add esi, 0xe433
pop esi
push ebx
or ebx, 0xa7a9
and ebx, 0x1467b
add ebx, 0x8744
add ebx, 0x72e0
pop ebx
mov eax, dword [ebp - 0x790]
add eax, dword [ebp - 0x1a4]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x1a4]
movsx eax, byte [ebp + edx - 0x9d4]
cmp ecx, eax
jne 0x407a73
mov dword [ebp - 0xce4], 0
jmp 0x407ae2
push edi
push ebx
add esp, 4
and edi, 0x9f69
sub edi, 0xc765
sub edi, 0x1060
and edi, 0xfe5d
pop edi
push esi
add esi, 0x1fdc
or esi, 0xa761
add esi, 0x13caf
pop esi
mov ecx, dword [ebp - 0x790]
add ecx, dword [ebp - 0x1a4]
movsx edx, byte [ecx]
or edx, 0x20
mov eax, dword [ebp - 0x1a4]
movsx ecx, byte [ebp + eax - 0x9d4]
or ecx, 0x20
cmp edx, ecx
jge 0x407ad8
mov dword [ebp - 0xce4], 0xffffffff
jmp 0x407ae2
mov dword [ebp - 0xce4], 1
cmp dword [ebp - 0xce4], 0
jne 0x407af9
mov edx, dword [ebp - 0x19d0]
mov dword [ebp - 0x520], edx
jmp 0x407b0a
jmp 0x4078e3
mov eax, dword [ebp - 0x794]
mov dword [ebp - 0x520], eax
mov ecx, dword [ebp - 0x520]
mov dword [ebp - 0xab4], ecx
push edx
call 0x407b27
add byte [edx], bh
dec esp
dec ebx
inc esi
add byte [eax], al
cmp cl, byte [ebx + ecx*2 + 0x46]
cmp byte [ebx + 0x37], cl
inc ecx
cmp eax, 0x4c48338
call 0x407b36
add byte [ebp + ecx*2 + 0x35], al
xor eax, 0xc4834d33
add al, 0x81
loop 0x407b1b
je 0x407b3f
add byte [edx + 0x53], bl
pop edx
push ebx
or ebx, 0x12c31
pop ebx
mov edx, dword [ebp - 0xab4]
mov dword [ebp - 0x19d4], edx
lea eax, [ebp - 0xce8]
push eax
push 0x40
mov ecx, dword [ebp - 0x1694]
push ecx
mov edx, dword [ebp - 0x3e8]
push edx
call dword [ebp - 0x19d4]
test eax, eax
jne 0x407bbb
push edi
jmp 0x407b7c
jmp 0x407b83
xor edi, 0x97c4
add edi, 0xbe2f
pop edi
push ebx
push edi
add esp, 4
jmp 0x407b9a
pop ebx
push eax
push ecx
add esp, 4
jmp 0x407ba6
pop eax
mov eax, dword [ebp - 0x79c]
mov dword [ebp - 0x19d8], eax
push 0
call dword [ebp - 0x19d8]
mov ecx, dword [ebp - 0x19dc]
mov dword [ebp - 0x798], ecx
jmp 0x407bd8
mov edx, dword [ebp - 0x798]
add edx, 1
mov dword [ebp - 0x798], edx
mov eax, dword [ebp - 0x798]
cmp eax, dword [ebp - 0xab8]
jae 0x407c34
push eax
xor eax, 0x543
pop eax
push ebx
jmp 0x407bf7
sub ebx, 0x8c9e
pop ebx
push edi
push eax
add esp, 4
or edi, 0x16387
pop edi
push ecx
jmp 0x407c11
or ecx, 0x619a
pop ecx
movzx ecx, byte [ebp - 0x3ae]
mov edx, dword [ebp - 0x798]
movsx eax, byte [edx]
sub eax, ecx
mov ecx, dword [ebp - 0x798]
mov byte [ecx], al
jmp 0x407bc9
mov edx, dword [ebp - 0xab4]
mov dword [ebp - 0x19e0], edx
lea eax, [ebp - 0xce8]
push eax
mov ecx, dword [ebp - 0xce8]
push ecx
mov edx, dword [ebp - 0x1694]
push edx
mov eax, dword [ebp - 0x3e8]
push eax
call dword [ebp - 0x19e0]
test eax, eax
jne 0x407cac
push edi
sub edi, 0x7544
xor edi, 0x1c93
xor edi, 0x14555
sub edi, 0x9cec
pop edi
push eax
push ecx
add esp, 4
or eax, 0xbccb
xor eax, 0x1785a
sub eax, 0xb8d6
pop eax
mov ecx, dword [ebp - 0x79c]
mov dword [ebp - 0x19e4], ecx
push 0
call dword [ebp - 0x19e4]
push edx
jmp 0x407cb5
add edx, 0x12886
and edx, 0x1206c
xor edx, 0x129f8
pop edx
push ebx
xor ebx, 0xd053
and ebx, 0x27d2
pop ebx
push edi
sub edi, 0x180a
pop edi
push edx
mov ecx, 0x10101010
pop edx
push ecx
mov ecx, 0xffff08ff
pop ecx
pop eax
mov eax, edx
salc
into
or byte [eax], cl
mov eax, ebp
cmp esi, dword [0xf0890808]
invalid