Function at 0x406faa
Capabilities:
Resolve function by parsing pe exports

Disassembly:
xor eax, 0xe283
call 0x402b95
add byte [0x4f3b3234], dh
push eax
dec ebx
inc ebx
add esp, 4
add eax, 0x627b
jmp 0x402ba4
pop eax
push ebx
push ecx
add esp, 4
or ebx, 0xeac2
pop ebx
imul ecx, dword [ebp - 0x2c], 0x138
add ecx, 0x55f3663b
imul edx, dword [ebp - 0x2c], 0x138
sub ecx, edx
xor ecx, dword [ebp - 0x1718]
imul ecx, dword [ebp - 0x2c]
imul eax, dword [ebp - 0x2c], 0x138
sub ecx, eax
mov dword [ebp - 0x30], ecx
mov ecx, dword [ebp - 0x1718]
imul ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x2040], ecx
mov dword [ebp - 0x1764], 1
push edi
push edi
add esp, 4
and edi, 0xee61
add edi, 0x6f74
pop edi
push eax
xor eax, 0x209e
jmp 0x402c15
jmp 0x402c1b
sub eax, 0x14077
pop eax
push edx
jmp 0x402c28
pop edx
imul edx, dword [ebp - 0x1764], 0x138
add edx, 0x55f3663b
imul eax, dword [ebp - 0x1764], 0x138
sub edx, eax
xor edx, dword [ebp - 0x2040]
imul edx, dword [ebp - 0x1764]
imul ecx, dword [ebp - 0x1764], 0x138
sub edx, ecx
mov dword [ebp - 0x1768], edx
mov edx, dword [ebp - 0x1168]
mov eax, dword [ebp - 0x1164]
mov dword [ebp - 0x1770], edx
mov dword [ebp - 0x176c], eax
push edx
or edx, 0x1152b
pop edx
push ecx
push ebx
add esp, 4
call 0x402c97
add byte [eax + 0x3f], cl
inc eax
cmp eax, 0x3a433b33
add esp, 4
jmp 0x402ca1
or ecx, 0x17840
and ecx, 0x183d
pop ecx
push edx
push eax
add esp, 4
xor edx, 0x1819c
jmp 0x402cbe
pop edx
push eax
push esi
add esp, 4
xor eax, 0x11147
call 0x402cd6
add byte [edx + 0x32], al
dec esp
cmp eax, 0xc483444f
add al, 0x81
ror byte [edi - 0x47], 0
add byte [eax - 0x75], bl
dec ebp
rol byte [ecx + 0x138c1], 1
add byte [ecx + 0x55], ch
aam 0x38
add dword [eax], eax
add byte [ecx - 0xc99c43e], al
push ebp
imul eax, dword [ebp - 0x2c], 0x138
sub edx, eax
xor ecx, edx
imul ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x2048], ecx
push esi
push ebx
add esp, 4
call 0x402d1c
add byte [eax + 0x39], dl
xor ecx, dword ss:[ebp + 0x40]
add esp, 4
add esi, 0x17d34
pop esi
push edi
push edx
add esp, 4
add edi, 0xdebe
xor edi, 0x183a
jmp 0x402d3c
pop edi
mov ecx, dword [ebp - 0x1770]
add ecx, 0x138
imul edx, dword [ebp - 0x176c], 0x138
add edx, 0x55f3663b
imul eax, dword [ebp - 0x176c], 0x138
sub edx, eax
xor ecx, edx
imul ecx, dword [ebp - 0x176c]
mov dword [ebp - 0x2044], ecx
mov ecx, dword [ebp - 0x2044]
mov dword [ebp - 0x204c], ecx
mov edx, dword [ebp - 0x2048]
cmp edx, dword [ebp - 0x204c]
jae 0x402d9a
mov dword [ebp - 0x16dc], 1
jmp 0x402da4
mov dword [ebp - 0x16dc], 0
mov al, byte [ebp - 0x16dc]
mov byte [ebp - 0x3d9], al
movzx ecx, byte [ebp - 0x3d9]
test ecx, ecx
je 0x405e18
push edx
push eax
add esp, 4
sub edx, 0x10c87
call 0x402dd9
add byte [ebx + 0x4f], al
dec ebp
cmp byte [edx + eax*2], dh
cmp dword [edi + 0x4c], eax
add esp, 4
and edx, 0x11074
pop edx
push edx
or edx, 0x10310
or edx, 0x707a
pop edx
push esi
push eax
add esp, 4
or esi, 0x8fba
and esi, 0x2e10
sub esi, 0x1e6b
pop esi
push edi
and edi, 0x3e6a
or edi, 0x14d48
jmp 0x402e1c
add edi, 0x4eed
pop edi
mov edx, dword [ebp - 0x30]
add edx, 0x138
imul eax, dword [ebp - 0x2c], 0x138
add eax, 0x55f3663b
imul ecx, dword [ebp - 0x2c], 0x138
sub eax, ecx
xor edx, eax
imul edx, dword [ebp - 0x2c]
mov dword [ebp - 0x2050], edx
mov edx, dword [ebp - 0x2050]
mov dword [ebp - 0x2054], edx
cmp dword [ebp - 0x2054], 0x63c1
jne 0x402f9e
push ecx
or ecx, 0x6ab3
or ecx, 0x1407b
and ecx, 0xc4d0
or ecx, 0xcb40
pop ecx
push ecx
push edi
add esp, 4
xor ecx, 0x22dc
sub ecx, 0x10dac
add ecx, 0x614b
pop ecx
mov eax, dword [ebp - 0x14]
add eax, 0x138
imul ecx, dword [ebp - 0x10], 0x138
add ecx, 0x55f3663b
imul edx, dword [ebp - 0x10], 0x138
sub ecx, edx
xor eax, ecx
imul eax, dword [ebp - 0x10]
mov dword [ebp - 0x2058], eax
mov eax, dword [ebp - 0x2058]
mov dword [ebp - 0x205c], eax
mov ecx, dword [ebp - 0x205c]
sub ecx, 0x898
mov dword [ebp - 0x2060], ecx
mov dword [ebp - 0x116c], 1
push ebx
call 0x402efa
add byte [eax + 0x39], cl
push eax
inc esi
inc ecx
dec ecx
add esp, 4
add ebx, 0x11de7
add ebx, 0xff14
pop ebx
push edi
jmp 0x402f12
or edi, 0x9262
add edi, 0xddf4
pop edi
imul edx, dword [ebp - 0x116c], 0x138
add edx, 0x55f3663b
imul eax, dword [ebp - 0x116c], 0x138
sub edx, eax
xor edx, dword [ebp - 0x2060]
imul edx, dword [ebp - 0x116c]
imul ecx, dword [ebp - 0x116c], 0x138
sub edx, ecx
mov dword [ebp - 0x1170], edx
mov edx, dword [ebp - 0x1170]
mov eax, dword [ebp - 0x116c]
mov dword [ebp - 0x14], edx
mov dword [ebp - 0x10], eax
push ecx
and ecx, 0xef40
sub ecx, 0x13a2a
and ecx, 0x82bd
pop ecx
push ebx
push ecx
add esp, 4
call 0x402f94
add byte [esi], bh
cmp al, 0x50
xor eax, 0x3a3b4945
inc edx
add esp, 4
and ebx, 0x17415
pop ebx
push eax
push ecx
add esp, 4
xor eax, 0xfb80
jmp 0x402fb0
pop eax
push esi
push edi
add esp, 4
xor esi, 0x3f19
jmp 0x402fc3
or esi, 0x11e63
xor esi, 0x45c8
pop esi
mov ecx, dword [ebp - 0x14]
add ecx, 0x138
imul edx, dword [ebp - 0x10], 0x138
add edx, 0x55f3663b
imul eax, dword [ebp - 0x10], 0x138
sub edx, eax
xor ecx, edx
imul ecx, dword [ebp - 0x10]
mov dword [ebp - 0x2064], ecx
mov ecx, dword [ebp - 0x2064]
mov dword [ebp - 0x20d0], ecx
lea edx, [ebp - 0xa30]
mov dword [ebp - 0x418], edx
mov eax, dword [ebp - 0x418]
mov dword [eax + 4], 1
push edi
add edi, 0x1acb
pop edi
push edx
add edx, 0x827f
xor edx, 0x2872
jmp 0x40303d
and edx, 0x173b8
pop edx
push edi
or edi, 0xed20
xor edi, 0x5fc
pop edi
mov ecx, dword [ebp - 0x418]
imul edx, dword [ecx + 4], 0x138
add edx, 0x55f3663b
mov eax, dword [ebp - 0x418]
imul ecx, dword [eax + 4], 0x138
sub edx, ecx
xor edx, 0x23
mov eax, dword [ebp - 0x418]
imul edx, dword [eax + 4]
add al, 0x8b
invalid
call 0x6a403083
inc ecx
add al, 0x38
add dword [eax], eax
add byte [ebx], ch
ror byte [ebx - 0x41773], 1
dec dword [ecx - 0x176a74ef]
sti
invalid
dec dword [ecx - 0x22336b]
call dword [ecx - 0x7f]
int1
push edx
xor byte [eax], al
add byte [ecx + 0x3857c1], al
add byte [ecx + 0x50], bl
push ecx
add esp, 4
xor eax, 0x4a94
pop eax
push eax
jmp 0x4030c4
or eax, 0x4aa4
pop eax
push edi
push ebx
add esp, 4
mov dword [ebp - 0x428], 0
call 0x405e27
mov eax, 0x13379797
pop eax
mov dword [ebp - 0x428], eax
push esi
push ecx
add esp, 4
add esi, 0x11e74
and esi, 0x4f61
pop esi
push edx
push ecx
add esp, 4
xor edx, 0x174b5
pop edx
push edx
call 0x405e61
add byte [eax + 0x4f], dl
cmp al, byte [eax + 0x4f]
aaa
dec esp
push eax
xor eax, 0x5a04c483
mov edx, dword [ebp - 0x227c]
mov dword [ebp - 0x1734], edx
push edi
push edx
add esp, 4
xor edi, 0x133ff
add edi, 0xf349
jmp 0x405e88
and edi, 0x1253
pop edi
push edi
sub edi, 0xa0f6
pop edi
push eax
push esi
add esp, 4
xor eax, 0xe3d4
pop eax
mov eax, dword [ebp - 0x14]
add eax, 0x138
imul ecx, dword [ebp - 0x10], 0x138
add ecx, 0x55f3663b
imul edx, dword [ebp - 0x10], 0x138
sub ecx, edx
xor eax, ecx
imul eax, dword [ebp - 0x10]
mov dword [ebp - 0x1734], eax
mov eax, dword [ebp - 0x428]
mov dword [ebp - 0x1b24], eax
mov ecx, dword [ebp - 0x1b24]
add ecx, dword [ebp - 0x1734]
mov dword [ebp - 0x428], ecx
push ebx
push ebx
add esp, 4
call 0x405efd
add byte [ecx + 0x33], cl
inc ebp
cmp byte [ebp + 0x3b], cl
dec eax
add esp, 4
pop ebx
push ebx
and ebx, 0xafee
or ebx, 0x9fdc
add ebx, 0x410c
pop ebx
push esi
sub esi, 0x3528
pop esi
mov byte [ebp - 0xc74], 0x52
mov byte [ebp - 0xc73], 0xb9
mov byte [ebp - 0xc72], 0x10
mov byte [ebp - 0xc71], 0x10
mov byte [ebp - 0xc70], 0x10
mov byte [ebp - 0xc6f], 0x10
mov byte [ebp - 0xc6e], 0x5a
push esi
add esi, 0x2d0e
jmp 0x405f5c
and esi, 0xc81d
pop esi
push ecx
jmp 0x405f6d
add ecx, 0x103fe
add ecx, 0x13c2e
sub ecx, 0xe322
pop ecx
mov byte [ebp - 0xc6c], 0x52
mov byte [ebp - 0xc6b], 0xb9
mov byte [ebp - 0xc6a], 0x20
mov byte [ebp - 0xc69], 0x20
mov byte [ebp - 0xc68], 0x20
mov byte [ebp - 0xc67], 0x20
mov byte [ebp - 0xc66], 0x5a
push ebx
add ebx, 0x13cb3
sub ebx, 0x50a1
pop ebx
push eax
jmp 0x405fc8
and eax, 0xb4e
pop eax
push esi
and esi, 0x100f8
or esi, 0x10ea8
xor esi, 0x1623b
pop esi
mov dword [ebp - 0x2280], 0xe
push edx
and edx, 0x15928
jmp 0x405ffb
add edx, 0x6e78
pop edx
push edi
sub edi, 0xa828
or edi, 0x17dbd
pop edi
push ecx
and ecx, 0x3ade
jmp 0x40601e
pop ecx
mov edx, 1
imul eax, edx, 0
lea ecx, [ebp + eax - 0xc74]
mov dword [ebp - 0x1738], ecx
push esi
push ebx
add esp, 4
jmp 0x40603f
add esi, 0xd404
or esi, 0x12bcd
pop esi
push edx
or edx, 0x84f4
sub edx, 0xc7a7
xor edx, 0x14c33
add edx, 0x265d
pop edx
mov dword [ebp - 0x2284], 0xffffffff
push eax
push edx
add esp, 4
call 0x406081
add byte [ebp + 0x3b], cl
cmp dword [edi], edi
dec edi
aas
add esp, 4
jmp 0x40608d
pop eax
push edx
and edx, 0xc76f
pop edx
push esi
push esi
add esp, 4
jmp 0x4060a1
pop esi
mov edx, dword [ebp - 0x428]
mov dword [ebp - 0x54c], edx
jmp 0x4060bf
mov eax, dword [ebp - 0x54c]
add eax, 1
mov dword [ebp - 0x54c], eax
push ecx
sub ecx, 0x78bd
jmp 0x4060cf
or ecx, 0xc0eb
jmp 0x4060de
pop ecx
push edi
push eax
add esp, 4
add edi, 0x15530
add edi, 0x13b0f
pop edi
mov ecx, dword [ebp - 0x54c]
sub ecx, dword [ebp - 0x428]
cmp ecx, 0xffffffff
jb 0x406139
push eax
push eax
add esp, 4
xor eax, 0x11919
or eax, 0x11259
pop eax
push ecx
push esi
add esp, 4
or ecx, 0x4823
jmp 0x406124
pop ecx
push ecx
jmp 0x40612b
pop ecx
push ebx
add ebx, 0x311
pop ebx
jmp 0x406367
mov dword [ebp - 0xd84], 7
mov edx, dword [ebp - 0x54c]
mov dword [ebp - 0xb4c], edx
push edx
sub edx, 0x6041
pop edx
push eax
push edx
add esp, 4
xor eax, 0x14826
xor eax, 0x59c5
add eax, 0x88db
or eax, 0x16cad
pop eax
push ecx
push ecx
add esp, 4
add ecx, 0xa028
pop ecx
mov eax, dword [ebp - 0x1738]
mov dword [ebp - 0xb48], eax
mov dword [ebp - 0xd88], 0
mov ecx, dword [ebp - 0x54c]
cmp ecx, dword [ebp - 0x1738]
jne 0x4061e8
push eax
push eax
add esp, 4
xor eax, 0x12749
pop eax
push edx
push edi
add esp, 4
and edx, 0x341e
pop edx
push esi
and esi, 0xc6ab
or esi, 0xdcb4
xor esi, 0x3bae
or esi, 0xa8c8
pop esi
mov edx, dword [ebp - 0xd88]
mov dword [ebp - 0x1740], edx
jmp 0x406319
cmp dword [ebp - 0xd84], 0
jle 0x40630d
push ecx
push esi
add esp, 4
add ecx, 0x110b7
pop ecx
push edi
add edi, 0x220b
and edi, 0xb1a6
or edi, 0xcbaa
or edi, 0x16325
pop edi
push ebx
push edx
add esp, 4
sub ebx, 0xa0d8
pop ebx
mov eax, dword [ebp - 0xb4c]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0xb48]
movzx eax, byte [edx]
cmp ecx, eax
je 0x4062a9
push esi
push edi
add esp, 4
xor esi, 0x749c
call 0x406256
add byte [eax], bh
dec eax
inc ebx
dec esi
cmp eax, dword [esi + 0x37]
add esp, 4
call 0x406265
add byte [edi], dh
inc ecx
dec ebp
cmp eax, dword [edx + 0x4b]
add esp, 4
and esi, 0xb094
pop esi
mov ecx, dword [ebp - 0xb4c]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0xb48]
movzx ecx, byte [eax]
cmp edx, ecx
jle 0x406291
mov dword [ebp - 0x173c], 1
jmp 0x40629b
mov dword [ebp - 0x173c], 0xffffffff
mov edx, dword [ebp - 0x173c]
mov dword [ebp - 0xd88], edx
jmp 0x40630d
push eax
sub eax, 0x3d41
or eax, 0x7785
and eax, 0x9dad
and eax, 0x17e18
pop eax
push edx
push ebx
add esp, 4
and edx, 0x13144
or edx, 0xd87f
or edx, 0x124c2
pop edx
mov eax, dword [ebp - 0xd84]
sub eax, 1
mov dword [ebp - 0xd84], eax
mov ecx, dword [ebp - 0xb4c]
add ecx, 1
mov dword [ebp - 0xb4c], ecx
mov edx, dword [ebp - 0xb48]
add edx, 1
mov dword [ebp - 0xb48], edx
jmp 0x4061e8
mov eax, dword [ebp - 0xd88]
mov dword [ebp - 0x1740], eax
cmp dword [ebp - 0x1740], 0
jne 0x406362
push esi
and esi, 0xf95e
jmp 0x406332
pop esi
push edi
sub edi, 0xa870
call 0x40634a
add byte [eax + 0x32], dl
dec eax
inc esp
cmp dh, byte [0x36374c4e]
add esp, 4
and edi, 0x13a98
pop edi
mov ecx, dword [ebp - 0x54c]
mov dword [ebp - 0x414], ecx
jmp 0x4063a3
jmp 0x4060b0
push ebx
call 0x406378
add byte [edi + 0x46], al
inc esp
dec eax
dec ebp
push eax
cmp eax, 0xc4834639
add al, 0x81
fimul word [esi]
add bl, ch
add edx, dword [eax + 0x3b]
cmp eax, 0x8353515b
les eax, [ecx + eax*4]
int1
sbb edi, dword [ebx - 0x1e7f0000]
and al, 0
add byte [ecx - 0x39], bl
test esp, ebp
sti
invalid
push eax
xor eax, 0xec02
call 0x4063b7
add byte [esi + 0x38], al
aas
dec edx
aas
cmp eax, 0x4c4833d
jmp 0x4063c2
call 0x4063d1
add byte [edi + ecx*2], dh
inc edi
dec ebp
cmp cl, byte [eax + 0x43]
inc eax
aaa
add esp, 4
pop eax
push ecx
push ecx
add esp, 4
and ecx, 0xc916
call 0x4063ef
add byte [ecx + 0x36], al
dec ebp
cmp ecx, dword [eax + 0x39]
inc ecx
inc esi
push eax
add esp, 4
call 0x4063fe
add byte [eax], bh
dec eax
inc eax
aas
dec esi
add esp, 4
jmp 0x406406
pop ecx
mov edx, 1
imul eax, edx, 0
lea ecx, [ebp + eax - 0xc6c]
mov dword [ebp - 0x1744], ecx
push eax
push edx
add esp, 4
jmp 0x406429
jmp 0x40642f
or eax, 0x10081
sub eax, 0x11c44
pop eax
push eax
push eax
add esp, 4
xor eax, 0x10169
xor eax, 0x16cc3
pop eax
mov dword [ebp - 0x2288], 0xffffffff
push ebx
push ebx
add esp, 4
xor ebx, 0x3c07
or ebx, 0x4156
or ebx, 0x15b29
sub ebx, 0x126c2
pop ebx
push ebx
and ebx, 0xcf6b
sub ebx, 0x135cc
sub ebx, 0x121e7
pop ebx
mov edx, dword [ebp - 0x428]
mov dword [ebp - 0x550], edx
jmp 0x4064a7
mov eax, dword [ebp - 0x550]
add eax, 1
mov dword [ebp - 0x550], eax
push edx
and edx, 0x6b18
pop edx
push esi
push ebx
add esp, 4
call 0x4064c3
add byte [edx + 0x4d], al
xor dh, byte [ebx]
dec ecx
xor eax, 0x834a424f
les eax, [ecx + eax*4]
not byte [esi + 0x5e00000c]
push ecx
push eax
add esp, 4
sub ecx, 0x13079
pop ecx
mov ecx, dword [ebp - 0x550]
sub ecx, dword [ebp - 0x428]
cmp ecx, 0xffffffff
jb 0x406521
push ecx
push eax
add esp, 4
jmp 0x4064f7
and ecx, 0x987d
pop ecx
push edx
push eax
add esp, 4
add edx, 0x13513
or edx, 0xd2b7
pop edx
push edi
push edi
add esp, 4
or edi, 0xd309
pop edi
jmp 0x40674f
mov dword [ebp - 0xd8c], 7
mov edx, dword [ebp - 0x550]
mov dword [ebp - 0xae4], edx
push ecx
and ecx, 0xb15e
and ecx, 0x7f85
pop ecx
push edx
push esi
add esp, 4
or edx, 0x974d
and edx, 0xa2ad
pop edx
push edi
push edi
add esp, 4
sub edi, 0x131c9
or edi, 0x8912
pop edi
mov eax, dword [ebp - 0x1744]
mov dword [ebp - 0xb44], eax
mov dword [ebp - 0xd90], 0
mov ecx, dword [ebp - 0x550]
cmp ecx, dword [ebp - 0x1744]
jne 0x4065d0
push ebx
and ebx, 0xe8
call 0x4065a4
add byte [ebp + 0x34], cl
inc edx
cmp eax, dword [ebx + 0x46]
xor al, 0x3e
inc esi
dec ebx
add esp, 4
xor ebx, 0x10e35
pop ebx
push esi
push edi
add esp, 4
sub esi, 0x12dd0
jmp 0x4065be
pop esi
mov edx, dword [ebp - 0xd90]
mov dword [ebp - 0x174c], edx
jmp 0x406701
cmp dword [ebp - 0xd8c], 0
jle 0x4066f5
push eax
push edi
add esp, 4
or eax, 0x5d84
or eax, 0xe1e7
pop eax
push ebx
call 0x4065ff
add byte [eax + 0x37], al
xor edx, dword [eax + 0x4b]
dec eax
inc esp
inc ebx
inc esi
add esp, 4
or ebx, 0xc67f
xor ebx, 0x16da8
pop ebx
mov eax, dword [ebp - 0xae4]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0xb44]
movzx eax, byte [edx]
cmp ecx, eax
je 0x406691
push eax
sub eax, 0x138b3
pop eax
push ecx
push ecx
add esp, 4
or ecx, 0x176db
and ecx, 0x136e0
pop ecx
push esi
push edx
add esp, 4
xor esi, 0xe4dc
or esi, 0x123d4
sub esi, 0x4aa3
pop esi
mov ecx, dword [ebp - 0xae4]
movzx edx, byte [ecx]
mov eax, dword [ebp - 0xb44]
movzx ecx, byte [eax]
cmp edx, ecx
jle 0x406679
mov dword [ebp - 0x1748], 1
jmp 0x406683
mov dword [ebp - 0x1748], 0xffffffff
mov edx, dword [ebp - 0x1748]
mov dword [ebp - 0xd90], edx
jmp 0x4066f5
push edi
xor edi, 0x8bca
pop edi
push edx
push ecx
add esp, 4
or edx, 0x2de3
or edx, 0x15de2
and edx, 0x111e2
call 0x4066bf
add byte [eax + 0x4e], al
xor al, byte [edi + 0x48]
inc esp
aas
inc ecx
add esp, 4
pop edx
mov eax, dword [ebp - 0xd8c]
sub eax, 1
mov dword [ebp - 0xd8c], eax
mov ecx, dword [ebp - 0xae4]
add ecx, 1
mov dword [ebp - 0xae4], ecx
mov edx, dword [ebp - 0xb44]
add edx, 1
mov dword [ebp - 0xb44], edx
jmp 0x4065d0
mov eax, dword [ebp - 0xd90]
mov dword [ebp - 0x174c], eax
cmp dword [ebp - 0x174c], 0
jne 0x40674a
push edx
sub edx, 0xe531
xor edx, 0x9749
xor edx, 0xa76a
call 0x40672a
add byte [ecx], bh
push eax
aaa
inc esp
dec esi
cmp al, byte [ecx - 0x7d]
les eax, [edx + ebx*2]
push esi
sub esi, 0xaf56
or esi, 0x3ab1
pop esi
mov ecx, dword [ebp - 0x550]
mov dword [ebp - 0xb40], ecx
jmp 0x40678b
jmp 0x406498
push ebx
push eax
add esp, 4
add ebx, 0x14e64
call 0x406768
add byte [eax + edi + 0x32], al
aas
dec esi
cmp al, 0x83
les eax, [ebx + ebp*8]
add eax, 0x3e33324e
dec ecx
pop ebx
push edi
xor edi, 0xc758
sub edi, 0x347f
pop edi
mov dword [ebp - 0xb40], 0
push edx
sub edx, 0xb9ed
jmp 0x406798
pop edx
push ecx
push ebx
add esp, 4
add ecx, 0xbe05
xor ecx, 0xbc1d
add ecx, 0x8226
pop ecx
push esi
push esi
add esp, 4
add esi, 0x1370
pop esi
mov byte [ebp - 0x8ec], 0x45
mov byte [ebp - 0x8eb], 0x78
mov byte [ebp - 0x8ea], 0x69
mov byte [ebp - 0x8e9], 0x74
mov byte [ebp - 0x8e8], 0x50
mov byte [ebp - 0x8e7], 0x72
mov byte [ebp - 0x8e6], 0x6f
mov byte [ebp - 0x8e5], 0x63
mov byte [ebp - 0x8e4], 0x65
mov byte [ebp - 0x8e3], 0x73
mov byte [ebp - 0x8e2], 0x73
mov byte [ebp - 0x8e1], 0
push edi
call 0x406820
add byte [esi], dh
dec eax
push eax
xor bh, byte [esi - 0x3b7cc1c9]
add al, 0xe8
or dword [eax], eax
add byte [eax], al
add byte [edi], bh
inc eax
xor eax, 0x504b4b3c
cmp eax, dword [ebx - 0x107efb3c]
fidivr word [edi + 0x535f0000]
add ebx, 0x10fb6
pop ebx
mov edx, 0x6b
mov word [ebp - 0x1884], dx
mov eax, 0x65
mov word [ebp - 0x1882], ax
mov ecx, 0x72
mov word [ebp - 0x1880], cx
mov edx, 0x6e
mov word [ebp - 0x187e], dx
mov eax, 0x65
mov word [ebp - 0x187c], ax
mov ecx, 0x6c
mov word [ebp - 0x187a], cx
mov edx, 0x33
mov word [ebp - 0x1878], dx
mov eax, 0x32
mov word [ebp - 0x1876], ax
mov ecx, 0x2e
mov word [ebp - 0x1874], cx
mov edx, 0x64
mov word [ebp - 0x1872], dx
mov eax, 0x6c
mov word [ebp - 0x1870], ax
mov ecx, 0x6c
mov word [ebp - 0x186e], cx
xor edx, edx
mov word [ebp - 0x186c], dx
push eax
and eax, 0xd42e
xor eax, 0x6f3c
xor eax, 0x11171
pop eax
push ecx
push esi
add esp, 4
or ecx, 0xea7a
and ecx, 0xa768
add ecx, 0x15b0f
sub ecx, 0x7d3d
pop ecx
push esi
push eax
add esp, 4
or esi, 0xaef6
and esi, 0x10037
call 0x40692e
add byte [eax*2 + 0x3f503b33], dh
inc edx
inc ecx
cmp dword [ebx - 0x97efb3c], eax
popfd
pop es
add byte [eax], al
pop esi
push edx
sub edx, 0x120ac
pop edx
mov eax, dword fs:[0x18]
mov dword [ebp - 0x1ed8], eax
mov ecx, dword [ebp - 0x1ed8]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x1b28], edx
mov eax, dword [ebp - 0x1b28]
mov dword [ebp - 0x1750], eax
push esi
or esi, 0x1b86
and esi, 0xc0f0
and esi, 0xd539
pop esi
push ebx
push esi
add esp, 4
or ebx, 0xd8d3
xor ebx, 0x185f3
or ebx, 0xb33b
add ebx, 0x17073
pop ebx
cmp dword [ebp - 0x1750], 0
jne 0x4069b1
mov dword [ebp - 0x31c], 0
jmp 0x406c58
mov ecx, dword [ebp - 0x1750]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xd9c], eax
push edi
push edi
add esp, 4
xor edi, 0xc054
add edi, 0xe27c
jmp 0x4069dc
jmp 0x4069e1
pop edi
push ebx
push esi
add esp, 4
jmp 0x4069ee
jmp 0x4069f4
pop ebx
cmp dword [ebp - 0xd9c], 0
jne 0x406a0d
mov dword [ebp - 0x31c], 0
jmp 0x406c58
mov ecx, dword [ebp - 0xd9c]
mov dword [ebp - 0x554], ecx
push esi
push ebx
add esp, 4
xor esi, 0xcc1a
and esi, 0x13295
and esi, 0x5f15
pop esi
push edi
add edi, 0x120d3
and edi, 0x4459
or edi, 0xedbb
or edi, 0x613c
pop edi
lea edx, [ebp - 0x1884]
mov dword [ebp - 0xd98], edx
mov eax, dword [ebp - 0x554]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xd94], ecx
xor edx, edx
mov word [ebp - 0x234], dx
xor eax, eax
mov word [ebp - 0x38], ax
push edx
push ecx
add esp, 4
add edx, 0xba1a
jmp 0x406a86
sub edx, 0x1533c
pop edx
push eax
or eax, 0x546d
or eax, 0x589
sub eax, 0x10b5c
add eax, 0x5684
pop eax
mov ecx, dword [ebp - 0xd94]
mov dx, word [ecx]
mov word [ebp - 0x1142], dx
mov eax, dword [ebp - 0xd94]
add eax, 2
mov dword [ebp - 0xd94], eax
mov cx, word [ebp - 0x1142]
mov word [ebp - 0x234], cx
mov edx, dword [ebp - 0xd98]
mov ax, word [edx]
mov word [ebp - 0x1144], ax
mov ecx, dword [ebp - 0xd98]
add ecx, 2
mov dword [ebp - 0xd98], ecx
mov dx, word [ebp - 0x1144]
mov word [ebp - 0x38], dx
push eax
or eax, 0x15116
call 0x406b14
add byte [edi + 0x3a], al
dec edi
inc ebx
dec ebp
dec ebx
xor eax, dword [ebp + 0x3f]
add esp, 4
pop eax
push edi
push ebx
add esp, 4
sub edi, 0xf1ee
and edi, 0x1535b
add edi, 0xcdf2
pop edi
movzx eax, word [ebp - 0x38]
test eax, eax
jne 0x406b4d
movzx ecx, word [ebp - 0x234]
movzx edx, word [ebp - 0x38]
sub ecx, edx
mov dword [ebp - 0x1758], ecx
jmp 0x406ba7
movzx eax, word [ebp - 0x234]
movzx ecx, word [ebp - 0x38]
cmp eax, ecx
je 0x406a75
movzx edx, word [ebp - 0x234]
xor edx, 0x20
movzx eax, word [ebp - 0x38]
cmp edx, eax
je 0x406a75
movzx ecx, word [ebp - 0x234]
movzx edx, word [ebp - 0x38]
cmp ecx, edx
jge 0x406b91
mov dword [ebp - 0x1754], 0xffffffff
jmp 0x406b9b
mov dword [ebp - 0x1754], 1
mov eax, dword [ebp - 0x1754]
mov dword [ebp - 0x1758], eax
cmp dword [ebp - 0x1758], 0
jne 0x406bf0
push esi
push ecx
add esp, 4
or esi, 0xf38a
and esi, 0xdfe2
call 0x406bd0
add byte [ecx + ecx*2 + 0x46], cl
cmp esi, dword [ebx]
dec esi
dec esp
dec ebx
inc esp
add esp, 4
pop esi
push ebx
sub ebx, 0x63fd
jmp 0x406be1
pop ebx
mov ecx, dword [ebp - 0x554]
mov dword [ebp - 0x31c], ecx
jmp 0x406c58
push ebx
push edx
add esp, 4
or ebx, 0x3240
and ebx, 0x183a1
jmp 0x406c09
or ebx, 0x8ad8
pop ebx
push edx
push ecx
add esp, 4
xor edx, 0xd49a
and edx, 0x7423
pop edx
mov edx, dword [ebp - 0x554]
mov eax, dword [edx]
mov dword [ebp - 0x554], eax
mov ecx, dword [ebp - 0x554]
cmp ecx, dword [ebp - 0xd9c]
je 0x406c4e
mov edx, dword [ebp - 0x554]
cmp dword [edx + 0x30], 0
jne 0x406a19
mov dword [ebp - 0x31c], 0
push eax
push esi
add esp, 4
add eax, 0x9924
pop eax
push ebx
call 0x406c74
add byte [edx], bh
dec ebp
inc ecx
inc ebp
inc ebx
aaa
dec esp
dec ecx
xor eax, 0x5b04c483
push edx
push ebx
add esp, 4
or edx, 0xa85c
and edx, 0x12c9b
pop edx
cmp dword [ebp - 0x31c], 0
jne 0x40758f
mov eax, 0x6b
mov word [ebp - 0x1924], ax
mov ecx, 0x65
mov word [ebp - 0x1922], cx
mov edx, 0x72
mov word [ebp - 0x1920], dx
mov eax, 0x6e
mov word [ebp - 0x191e], ax
mov ecx, 0x65
mov word [ebp - 0x191c], cx
mov edx, 0x6c
mov word [ebp - 0x191a], dx
mov eax, 0x33
mov word [ebp - 0x1918], ax
mov ecx, 0x32
mov word [ebp - 0x1916], cx
mov edx, 0x2e
mov word [ebp - 0x1914], dx
mov eax, 0x64
mov word [ebp - 0x1912], ax
mov ecx, 0x6c
mov word [ebp - 0x1910], cx
mov edx, 0x6c
mov word [ebp - 0x190e], dx
xor eax, eax
mov word [ebp - 0x190c], ax
push esi
sub esi, 0xad75
xor esi, 0xe553
xor esi, 0x10ae3
add esi, 0x4c12
pop esi
push esi
push edx
add esp, 4
sub esi, 0xd498
add esi, 0x1871
add esi, 0x1563b
pop esi
mov byte [ebp - 0x918], 0x4c
mov byte [ebp - 0x917], 0x6f
mov byte [ebp - 0x916], 0x61
mov byte [ebp - 0x915], 0x64
mov byte [ebp - 0x914], 0x4c
mov byte [ebp - 0x913], 0x69
mov byte [ebp - 0x912], 0x62
mov byte [ebp - 0x911], 0x72
mov byte [ebp - 0x910], 0x61
mov byte [ebp - 0x90f], 0x72
mov byte [ebp - 0x90e], 0x79
mov byte [ebp - 0x90d], 0x57
mov byte [ebp - 0x90c], 0
mov ecx, dword fs:[0x18]
mov dword [ebp - 0x1b2c], ecx
mov edx, dword [ebp - 0x1b2c]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x1b30], eax
mov ecx, dword [ebp - 0x1b30]
mov dword [ebp - 0x175c], ecx
push edx
push eax
add esp, 4
call 0x406df8
add byte [ecx + 0x3b], cl
xor eax, 0x39465037
add esp, 4
pop edx
push eax
call 0x406e0b
add byte [0x4241433d], dh
dec ecx
dec ecx
cmp dword [ebx + 0x565804c4], eax
sub esi, 0x1828b
pop esi
cmp dword [ebp - 0x175c], 0
jne 0x406e2f
mov dword [ebp - 0x7d0], 0
jmp 0x4070d6
mov edx, dword [ebp - 0x175c]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0xda8], ecx
push ebx
xor ebx, 0x4be
add ebx, 0x6099
add ebx, 0x13a9
pop ebx
push ebx
push ecx
add esp, 4
xor ebx, 0xf7e9
or ebx, 0x2e5a
sub ebx, 0x1164c
or ebx, 0x15810
pop ebx
cmp dword [ebp - 0xda8], 0
jne 0x406e8b
mov dword [ebp - 0x7d0], 0
jmp 0x4070d6
mov edx, dword [ebp - 0xda8]
mov dword [ebp - 0x558], edx
push ebx
push eax
add esp, 4
sub ebx, 0x10826
jmp 0x406ea8
pop ebx
push eax
xor eax, 0x157e0
sub eax, 0x722a
and eax, 0x6630
pop eax
push eax
push ecx
add esp, 4
or eax, 0x9bfd
pop eax
lea eax, [ebp - 0x1924]
mov dword [ebp - 0xda4], eax
mov ecx, dword [ebp - 0x558]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0xda0], edx
xor eax, eax
mov word [ebp - 0x238], ax
xor ecx, ecx
mov word [ebp - 0x3c], cx
push edi
push edx
add esp, 4
and edi, 0x15d78
pop edi
push ebx
sub ebx, 0x5367
add ebx, 0xbcb9
xor ebx, 0x8ff2
add ebx, 0x13000
pop ebx
push edi
push esi
add esp, 4
or edi, 0x99a6
pop edi
mov edx, dword [ebp - 0xda0]
mov ax, word [edx]
mov word [ebp - 0x1146], ax
mov ecx, dword [ebp - 0xda0]
add ecx, 2
mov dword [ebp - 0xda0], ecx
mov dx, word [ebp - 0x1146]
mov word [ebp - 0x238], dx
mov eax, dword [ebp - 0xda4]
mov cx, word [eax]
mov word [ebp - 0x1148], cx
mov edx, dword [ebp - 0xda4]
add edx, 2
mov dword [ebp - 0xda4], edx
mov ax, word [ebp - 0x1148]
mov word [ebp - 0x3c], ax
push esi
push esi
add esp, 4
or esi, 0x84bd
pop esi
push edi
and edi, 0x148cd
or edi, 0xbe84
sub edi, 0x1122d
call 0x406faa
add byte [edx], dh
dec esi
inc esi
inc esi
xor al, byte [ebx + 0x48]
dec eax
add esp, 4
pop edi
movzx ecx, word [ebp - 0x3c]
test ecx, ecx
jne 0x406fcb
movzx edx, word [ebp - 0x238]
movzx eax, word [ebp - 0x3c]
sub edx, eax
mov dword [ebp - 0x17a4], edx
jmp 0x407025
movzx ecx, word [ebp - 0x238]
movzx edx, word [ebp - 0x3c]
cmp ecx, edx
je 0x406ef3
movzx eax, word [ebp - 0x238]
xor eax, 0x20
movzx ecx, word [ebp - 0x3c]
cmp eax, ecx
je 0x406ef3
movzx edx, word [ebp - 0x238]
movzx eax, word [ebp - 0x3c]
cmp edx, eax
jge 0x40700f
mov dword [ebp - 0x1760], 0xffffffff
jmp 0x407019
mov dword [ebp - 0x1760], 1
mov ecx, dword [ebp - 0x1760]
mov dword [ebp - 0x17a4], ecx
cmp dword [ebp - 0x17a4], 0
jne 0x40706e
push edx
push ecx
add esp, 4
sub edx, 0x1026d
jmp 0x407041
or edx, 0x429e
pop edx
push ebx
push edx
add esp, 4
and ebx, 0x10020
pop ebx
push ecx
push ecx
add esp, 4
and ecx, 0x13440
pop ecx
mov edx, dword [ebp - 0x558]
mov dword [ebp - 0x7d0], edx
jmp 0x4070d6
push esi
push eax
add esp, 4
jmp 0x407078
xor esi, 0x1382e
sub esi, 0xb85e
xor esi, 0xc8f0
pop esi
push esi
jmp 0x407093
or esi, 0xa13d
xor esi, 0x1773
pop esi
mov eax, dword [ebp - 0x558]
mov ecx, dword [eax]
mov dword [ebp - 0x558], ecx
mov edx, dword [ebp - 0x558]
cmp edx, dword [ebp - 0xda8]
je 0x4070cc
mov eax, dword [ebp - 0x558]
cmp dword [eax + 0x30], 0
jne 0x406e97
mov dword [ebp - 0x7d0], 0
push edx
push edi
add esp, 4
xor edx, 0x14bed
or edx, 0x9aa
xor edx, 0x7d24
sub edx, 0xb5c6
pop edx
push ebx
push eax
add esp, 4
jmp 0x407101
sub ebx, 0x15ca9
pop ebx
cmp dword [ebp - 0x7d0], 0
jne 0x407152
push edx
push edi
add esp, 4
or edx, 0x706a
add edx, 0x14b13
pop edx
push esi
push ebx
add esp, 4
and esi, 0xe8a2
xor esi, 0x7e24
pop esi
push edi
xor edi, 0xc5e5
sub edi, 0x25f1
pop edi
mov dword [ebp - 0x81c], 0
jmp 0x407c7a
push ecx
push esi
add esp, 4
jmp 0x40715c
or ecx, 0x16d9e
add ecx, 0x1726e
pop ecx
push ecx
add ecx, 0x2aa3
sub ecx, 0x118d2
jmp 0x40717d
sub ecx, 0x5dd7
pop ecx
mov ecx, dword [ebp - 0x7d0]
mov edx, dword [ecx + 0x18]
mov dword [ebp - 0x3d0], edx
mov dword [ebp - 0x7e0], 0
mov eax, dword [ebp - 0x3d0]
mov dword [ebp - 0x17a8], eax
cmp dword [ebp - 0x17a8], 0
jne 0x4071c3
mov ecx, dword [ebp - 0x7e0]
mov dword [ebp - 0x42c], ecx
jmp 0x4074b4
mov edx, dword [ebp - 0x17a8]
mov eax, dword [ebp - 0x3d0]
add eax, dword [edx + 0x3c]
mov dword [ebp - 0x17ac], eax
jne 0x4071eb
mov ecx, dword [ebp - 0x7e0]
mov dword [ebp - 0x42c], ecx
jmp 0x4074b4
mov edx, 8
imul eax, edx, 0
mov ecx, dword [ebp - 0x17ac]
mov edx, dword [ecx + eax + 0x78]
mov dword [ebp - 0x17b0], edx
cmp dword [ebp - 0x17b0], 0
jne 0x40721d
mov eax, dword [ebp - 0x7e0]
mov dword [ebp - 0x42c], eax
jmp 0x4074b4
mov ecx, dword [ebp - 0x3d0]
add ecx, dword [ebp - 0x17b0]
mov dword [ebp - 0x7d4], ecx
jne 0x407242
mov edx, dword [ebp - 0x7e0]
mov dword [ebp - 0x42c], edx
jmp 0x4074b4
mov eax, dword [ebp - 0x7d4]
mov ecx, dword [ebp - 0x3d0]
add ecx, dword [eax + 0x20]
mov dword [ebp - 0x1b34], ecx
mov edx, dword [ebp - 0x7d4]
mov eax, dword [ebp - 0x3d0]
add eax, dword [edx + 0x24]
mov dword [ebp - 0x1b38], eax
mov ecx, dword [ebp - 0x7d4]
mov edx, dword [ebp - 0x3d0]
add edx, dword [ecx + 0x1c]
mov dword [ebp - 0x1b3c], edx
mov dword [ebp - 0x7d8], 0
jmp 0x40729c
mov eax, dword [ebp - 0x7d8]
add eax, 1
mov dword [ebp - 0x7d8], eax
mov ecx, dword [ebp - 0x7d4]
mov edx, dword [ebp - 0x7d8]
cmp edx, dword [ecx + 0x18]
jae 0x4074a8
mov eax, dword [ebp - 0x7d8]
mov ecx, dword [ebp - 0x1b34]
mov edx, dword [ebp - 0x3d0]
add edx, dword [ecx + eax*4]
mov dword [ebp - 0x7dc], edx
mov eax, dword [ebp - 0x7d8]
mov ecx, dword [ebp - 0x1b38]
movzx edx, word [ecx + eax*2]
mov eax, dword [ebp - 0x1b3c]
mov ecx, dword [ebp - 0x3d0]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x1b40], ecx
mov dword [ebp - 0x1b0], 0
jmp 0x40730c
mov edx, dword [ebp - 0x1b0]
add edx, 1
mov dword [ebp - 0x1b0], edx
mov eax, dword [ebp - 0x7dc]
add eax, dword [ebp - 0x1b0]
movsx ecx, byte [eax]
test ecx, ecx
je 0x4073be
mov edx, dword [ebp - 0x1b0]
movsx eax, byte [ebp + edx - 0x918]
test eax, eax
je 0x4073be
push ecx
push ecx
add esp, 4
xor ecx, 0x4d6e
or ecx, 0xd939
pop ecx
push eax
push esi
add esp, 4
sub eax, 0x4a9
or eax, 0x1b2d
pop eax
push esi
add esi, 0xade7
xor esi, 0x3b21
pop esi
mov ecx, dword [ebp - 0x7dc]
add ecx, dword [ebp - 0x1b0]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x1b0]
movsx ecx, byte [ebp + eax - 0x918]
cmp edx, ecx
je 0x4073b0
mov edx, dword [ebp - 0x7dc]
add edx, dword [ebp - 0x1b0]
movsx eax, byte [edx]
xor eax, 0x20
mov ecx, dword [ebp - 0x1b0]
movsx edx, byte [ebp + ecx - 0x918]
cmp eax, edx
jne 0x4073b7
jmp 0x4072fd
jmp 0x4073be
push ebx
push esi
add esp, 4
jmp 0x4073c8
pop ebx
push esi
xor esi, 0x223a
sub esi, 0x613d
or esi, 0x124ee
pop esi
push ecx
push edi
add esp, 4
jmp 0x4073e9
sub ecx, 0x77c6
pop ecx
mov eax, dword [ebp - 0x7dc]
add eax, dword [ebp - 0x1b0]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x1b0]
movsx eax, byte [ebp + edx - 0x918]
cmp ecx, eax
jne 0x40741d
mov dword [ebp - 0xdac], 0
jmp 0x40748c
push ebx
sub ebx, 0xf3d8
sub ebx, 0x14ca9
call 0x407438
add byte [ebx], dh
xor dl, byte [eax + 0x3e]
cmp byte [ebx + 0x34], cl
aas
add esp, 4
pop ebx
push edi
push ebx
add esp, 4
xor edi, 0xb3a3
pop edi
push ebx
jmp 0x40744e
pop ebx
mov ecx, dword [ebp - 0x7dc]
add ecx, dword [ebp - 0x1b0]
movsx edx, byte [ecx]
or edx, 0x20
mov eax, dword [ebp - 0x1b0]
movsx ecx, byte [ebp + eax - 0x918]
or ecx, 0x20
cmp edx, ecx
jge 0x407482
mov dword [ebp - 0xdac], 0xffffffff
jmp 0x40748c
mov dword [ebp - 0xdac], 1
cmp dword [ebp - 0xdac], 0
jne 0x4074a3
mov edx, dword [ebp - 0x1b40]
mov dword [ebp - 0x42c], edx
jmp 0x4074b4
jmp 0x40728d
mov eax, dword [ebp - 0x7e0]
mov dword [ebp - 0x42c], eax
cmp dword [ebp - 0x42c], 0
je 0x40758f
push eax
sub eax, 0xc03c
or eax, 0x103a6
pop eax
push eax
jmp 0x4074d8
add eax, 0xbe09
jmp 0x4074e4
and eax, 0xf910
pop eax
push ecx
or ecx, 0x14073
pop ecx
mov ecx, dword [ebp - 0x42c]
mov dword [ebp - 0x1b44], ecx
push ebx
push edx
add esp, 4
sub ebx, 0x63f6
jmp 0x407510
pop ebx
push ecx
or ecx, 0xbf8f
or ecx, 0x15ba9
call 0x40752d
add byte [ebx + esi], dh
aaa
cmp ecx, dword [ecx + 0x3a]
xor al, 0x3e
dec ebx
add esp, 4
pop ecx
mov edx, dword [ebp - 0x1b44]
mov dword [ebp - 0x1b48], edx
lea eax, [ebp - 0x1884]
push eax
call dword [ebp - 0x1b48]
test eax, eax
jne 0x40758f
push edi
push eax
add esp, 4
and edi, 0x95be
add edi, 0x155bf
add edi, 0x1c07
add edi, 0x14303
pop edi
push ecx
and ecx, 0x8423
xor ecx, 0xc57
or ecx, 0x12fd0
pop ecx
mov dword [ebp - 0x81c], 0
jmp 0x407c7a
push esi
add esi, 0x406b
and esi, 0x5725
jmp 0x4075a3
xor esi, 0x15612
pop esi
push ecx
push ecx
add esp, 4
and ecx, 0x8ea3
jmp 0x4075ba
add ecx, 0x14b64
pop ecx
mov ecx, dword fs:[0x18]
mov dword [ebp - 0x1b4c], ecx
mov edx, dword [ebp - 0x1b4c]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x1b50], eax
mov ecx, dword [ebp - 0x1b50]
mov dword [ebp - 0x17b8], ecx
push ecx
or ecx, 0xf7b6
or ecx, 0x9e44
pop ecx
push esi
sub esi, 0x12516
xor esi, 0xc8e3
pop esi
push ecx
jmp 0x40760b
and ecx, 0x102d5
jmp 0x40761a
pop ecx
cmp dword [ebp - 0x17b8], 0
jne 0x407633
mov dword [ebp - 0x31c], 0
jmp 0x4078da
mov edx, dword [ebp - 0x17b8]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0xdb8], ecx
push edi
push edx
add esp, 4
add edi, 0x12ffa
pop edi
push edi
push edx
add esp, 4
call 0x407663
add byte [ebx + esi + 0x36], al
dec ebp
inc esi
inc esi
dec edx
add esp, 4
pop edi
push edi
xor edi, 0x7cfd
pop edi
push ebx
add ebx, 0x9b35
pop ebx
cmp dword [ebp - 0xdb8], 0
jne 0x40768f
mov dword [ebp - 0x31c], 0
jmp 0x4078da
mov edx, dword [ebp - 0xdb8]
mov dword [ebp - 0x55c], edx
push edx
jmp 0x4076a3
pop edx
push ecx
add ecx, 0x11fe5
and ecx, 0x917c
pop ecx
push edi
push edx
add esp, 4
call 0x4076c3
add byte [ebx], bh
inc esi
inc ebx
dec ecx
xor al, 0x32
add esp, 4
add edi, 0x12a39
pop edi
lea eax, [ebp - 0x1884]
mov dword [ebp - 0xdb4], eax
mov ecx, dword [ebp - 0x55c]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0xdb0], edx
xor eax, eax
mov word [ebp - 0x23c], ax
xor ecx, ecx
mov word [ebp - 0x40], cx
push ebx
push eax
add esp, 4
add ebx, 0xa346
or ebx, 0x7c7a
or ebx, 0x13d90
pop ebx
push esi
push ebx
add esp, 4
add esi, 0x12d6d
jmp 0x407722
or esi, 0x6285
pop esi
mov edx, dword [ebp - 0xdb0]
mov ax, word [edx]
mov word [ebp - 0x114a], ax
mov ecx, dword [ebp - 0xdb0]
add ecx, 2
mov dword [ebp - 0xdb0], ecx
mov dx, word [ebp - 0x114a]
mov word [ebp - 0x23c], dx
mov eax, dword [ebp - 0xdb4]
mov cx, word [eax]
mov word [ebp - 0x114c], cx
mov edx, dword [ebp - 0xdb4]
add edx, 2
mov dword [ebp - 0xdb4], edx
mov ax, word [ebp - 0x114c]
mov word [ebp - 0x40], ax
push edi
push ecx
add esp, 4
or edi, 0x317f
and edi, 0x7069
sub edi, 0x626
pop edi
push ecx
push ebx
add esp, 4
jmp 0x4077a4
sub ecx, 0xe369
jmp 0x4077b1
pop ecx
movzx ecx, word [ebp - 0x40]
test ecx, ecx
jne 0x4077cf
movzx edx, word [ebp - 0x23c]
movzx eax, word [ebp - 0x40]
sub edx, eax
mov dword [ebp - 0x17c0], edx
jmp 0x407829
movzx ecx, word [ebp - 0x23c]
movzx edx, word [ebp - 0x40]
cmp ecx, edx
je 0x4076f7
movzx eax, word [ebp - 0x23c]
xor eax, 0x20
movzx ecx, word [ebp - 0x40]
cmp eax, ecx
je 0x4076f7
movzx edx, word [ebp - 0x23c]
movzx eax, word [ebp - 0x40]
cmp edx, eax
jge 0x407813
mov dword [ebp - 0x17bc], 0xffffffff
jmp 0x40781d
mov dword [ebp - 0x17bc], 1
mov ecx, dword [ebp - 0x17bc]
mov dword [ebp - 0x17c0], ecx
cmp dword [ebp - 0x17c0], 0
jne 0x407872
push eax
sub eax, 0x562e
and eax, 0xb974
add eax, 0x745f
add eax, 0x439b
pop eax
push eax
push eax
add esp, 4
sub eax, 0x3665
sub eax, 0x17b6b
and eax, 0x9c89
pop eax
mov edx, dword [ebp - 0x55c]
mov dword [ebp - 0x31c], edx
jmp 0x4078da
push edi
jmp 0x40787c
xor edi, 0x3331
jmp 0x407889
add edi, 0x18035
pop edi
push ebx
and ebx, 0x234e
sub ebx, 0x15fb3
or ebx, 0xe99a
pop ebx
mov eax, dword [ebp - 0x55c]
mov ecx, dword [eax]
mov dword [ebp - 0x55c], ecx
mov edx, dword [ebp - 0x55c]
cmp edx, dword [ebp - 0xdb8]
je 0x4078d0
mov eax, dword [ebp - 0x55c]
cmp dword [eax + 0x30], 0
jne 0x40769b
mov dword [ebp - 0x31c], 0
push ebx
jmp 0x4078e3
or ebx, 0x103e7
sub ebx, 0x812d
pop ebx
push ecx
sub ecx, 0x624b
call 0x407903
add byte [ebx + 0x38], cl
push eax
xor eax, 0xc4834136
add al, 0xeb
add esi, dword [0x8b59353f]
invalid
push ebx
sub ebx, 0x943f
add ebx, 0x66e
or ebx, 0x10bd1
pop ebx
push ecx
push edi
add esp, 4
xor ecx, 0x1cc9
pop ecx
push edx
push eax
add esp, 4
or edx, 0x248b
or edx, 0xfac0
pop edx
mov edx, dword [ebp - 0x414]
add edx, 0xe
mov dword [ebp - 0x1bb0], edx
push ecx
push ebx
add esp, 4
sub ecx, 0x13838
xor ecx, 0x15f60
xor ecx, 0x7a11
call 0x407ce0
add byte [ecx], bh
dec ecx
push eax
xor edi, dword [esi + edi]
dec eax
dec ebp
add esp, 4
pop ecx
push edx
jmp 0x407cec
pop edx
cmp dword [ebp - 0x414], 0
je 0x407cff
cmp dword [ebp - 0xb40], 0
jne 0x407d45
push edi
push esi
add esp, 4
and edi, 0x8a6e
add edi, 0x150f6
pop edi
push ebx
and ebx, 0x504a
or ebx, 0x17e81
pop ebx
push edi
push edx
add esp, 4
add edi, 0x3025
sub edi, 0x138db
pop edi
mov eax, dword [ebp - 0x81c]
mov dword [ebp - 0x1b64], eax
push 0
call dword [ebp - 0x1b64]
mov dword [ebp - 0x228c], 0xa
push edi
push edx
add esp, 4
xor edi, 0xa5c1
pop edi
push edi
or edi, 0x4c06
and edi, 0xddf4
pop edi
push esi
push esi
add esp, 4
call 0x407d7d
add byte [edx], bh
xor eax, 0x47483634
inc edx
cmp byte [esi - 0x7d], al
les eax, [esi + ebx*2]
mov ecx, dword [ebp - 0x414]
mov dl, byte [ecx + 0xa]
mov byte [ebp - 0x419], dl
mov eax, dword [ebp - 0xb40]
sub eax, dword [ebp - 0x414]
mov dword [ebp - 0x180c], eax
mov dword [ebp - 0xdec], 0
push edx
push edx
add esp, 4
or edx, 0x8f49
pop edx
push ecx
or ecx, 0x16421
call 0x407dcc
add byte [eax + 0x40], dl
dec ecx
xor eax, 0x83444e46
les eax, [ecx + ebx*2]
push ebx
and ebx, 0xd539
and ebx, 0xba92
pop ebx
mov byte [ebp - 0xa58], 0x56
mov byte [ebp - 0xa57], 0x69
mov byte [ebp - 0xa56], 0x72
mov byte [ebp - 0xa55], 0x74
mov byte [ebp - 0xa54], 0x75
mov byte [ebp - 0xa53], 0x61
mov byte [ebp - 0xa52], 0x6c
mov byte [ebp - 0xa51], 0x50
mov byte [ebp - 0xa50], 0x72
mov byte [ebp - 0xa4f], 0x6f
mov byte [ebp - 0xa4e], 0x74
mov byte [ebp - 0xa4d], 0x65
mov byte [ebp - 0xa4c], 0x63
mov byte [ebp - 0xa4b], 0x74
mov byte [ebp - 0xa4a], 0
push ebx
push edx
add esp, 4
or ebx, 0xbf28
pop ebx
push ecx
and ecx, 0x3080
xor ecx, 0x1ef2
or ecx, 0x11b22
pop ecx
push esi
push esi
add esp, 4
and esi, 0x5f08
sub esi, 0x542f
pop esi
mov ecx, dword fs:[0x18]
mov dword [ebp - 0x1b68], ecx
mov edx, dword [ebp - 0x1b68]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x1b6c], eax
mov ecx, dword [ebp - 0x1b6c]
mov dword [ebp - 0x17d0], ecx
push esi
xor esi, 0x7a32
add esi, 0x11ce0
add esi, 0x6468
add esi, 0xf0f
pop esi
push esi
push esi
add esp, 4
xor esi, 0x50e6
or esi, 0x7977
sub esi, 0x6641
pop esi
cmp dword [ebp - 0x17d0], 0
jne 0x407eeb
mov dword [ebp - 0x334], 0
jmp 0x408192
mov edx, dword [ebp - 0x17d0]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0xdc8], ecx
push edi
xor edi, 0x12b15
xor edi, 0xf9c3
and edi, 0x17913
and edi, 0xf5ee
pop edi
push edx
push eax
add esp, 4
add edx, 0x9ba6
or edx, 0x1873
sub edx, 0x3bcf
pop edx
cmp dword [ebp - 0xdc8], 0
jne 0x407f47
mov dword [ebp - 0x334], 0
jmp 0x408192
mov edx, dword [ebp - 0xdc8]
mov dword [ebp - 0x564], edx
push edx
add edx, 0x8eda
jmp 0x407f62
xor edx, 0x1680b
pop edx
push ecx
xor ecx, 0x12d3b
xor ecx, 0x6df5
pop ecx
push ecx
and ecx, 0x13f6e
jmp 0x407f84
pop ecx
lea eax, [ebp - 0x1884]
mov dword [ebp - 0xdc4], eax
mov ecx, dword [ebp - 0x564]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0xdc0], edx
xor eax, eax
mov word [ebp - 0x240], ax
xor ecx, ecx
mov word [ebp - 0x44], cx
push ebx
push eax
add esp, 4
or ebx, 0xfe2a
sub ebx, 0xfbba
add ebx, 0x1cb4
pop ebx
push esi
sub esi, 0xff66
and esi, 0xf075
and esi, 0x15995
or esi, 0xa64f
pop esi
mov edx, dword [ebp - 0xdc0]
mov ax, word [edx]
mov word [ebp - 0x114e], ax
mov ecx, dword [ebp - 0xdc0]
add ecx, 2
mov dword [ebp - 0xdc0], ecx
mov dx, word [ebp - 0x114e]
mov word [ebp - 0x240], dx
mov eax, dword [ebp - 0xdc4]
mov cx, word [eax]
mov word [ebp - 0x1150], cx
mov edx, dword [ebp - 0xdc4]
add edx, 2
mov dword [ebp - 0xdc4], edx
mov ax, word [ebp - 0x1150]
mov word [ebp - 0x44], ax
push eax
call 0x408047
add byte [eax + edx*2 + 0x4b], al
inc edi
cmp byte [ecx + ecx*2 + 0x3b], cl
add esp, 4
xor eax, 0xb873
pop eax
push edi
call 0x40805e
add byte [esp + eax*2 + 0x45], al
cmp eax, 0xc483394b
add al, 0x5f
push esi
and esi, 0xc29
pop esi
movzx ecx, word [ebp - 0x44]
test ecx, ecx
jne 0x408087
movzx edx, word [ebp - 0x240]
movzx eax, word [ebp - 0x44]
sub edx, eax
mov dword [ebp - 0x17d8], edx
jmp 0x4080e1
movzx ecx, word [ebp - 0x240]
movzx edx, word [ebp - 0x44]
cmp ecx, edx
je 0x407faf
movzx eax, word [ebp - 0x240]
xor eax, 0x20
movzx ecx, word [ebp - 0x44]
cmp eax, ecx
je 0x407faf
movzx edx, word [ebp - 0x240]
movzx eax, word [ebp - 0x44]
cmp edx, eax
jge 0x4080cb
mov dword [ebp - 0x17d4], 0xffffffff
jmp 0x4080d5
mov dword [ebp - 0x17d4], 1
mov ecx, dword [ebp - 0x17d4]
mov dword [ebp - 0x17d8], ecx
cmp dword [ebp - 0x17d8], 0
jne 0x40812a
push edx
push ebx
add esp, 4
jmp 0x4080f5
call 0x408104
add byte [edx + ecx*2 + 0x4a], cl
dec esi
inc edi
inc esp
inc ebx
xor al, byte [ebx + 0x575a04c4]
or edi, 0x9e83
jmp 0x408115
sub edi, 0x1123f
pop edi
mov edx, dword [ebp - 0x564]
mov dword [ebp - 0x334], edx
jmp 0x408192
push edi
xor edi, 0x165e7
pop edi
push edx
push edi
add esp, 4
and edx, 0x13feb
or edx, 0xd5ef
add edx, 0x15d2f
pop edx
push eax
push edx
add esp, 4
xor eax, 0x15a47
xor eax, 0x49b2
pop eax
mov eax, dword [ebp - 0x564]
mov ecx, dword [eax]
mov dword [ebp - 0x564], ecx
mov edx, dword [ebp - 0x564]
cmp edx, dword [ebp - 0xdc8]
je 0x408188
mov eax, dword [ebp - 0x564]
cmp dword [eax + 0x30], 0
jne 0x407f53
mov dword [ebp - 0x334], 0
push eax
push esi
add esp, 4
sub eax, 0x19c8
and eax, 0x183f4
xor eax, 0xcda
pop eax
push eax
or eax, 0x36ca
add eax, 0xf191
xor eax, 0x172e9
or eax, 0x44a9
pop eax
cmp dword [ebp - 0x334], 0
jne 0x408ac9
mov ecx, 0x6b
mov word [ebp - 0x1940], cx
mov edx, 0x65
mov word [ebp - 0x193e], dx
mov eax, 0x72
mov word [ebp - 0x193c], ax
mov ecx, 0x6e
mov word [ebp - 0x193a], cx
mov edx, 0x65
mov word [ebp - 0x1938], dx
mov eax, 0x6c
mov word [ebp - 0x1936], ax
mov ecx, 0x33
mov word [ebp - 0x1934], cx
mov edx, 0x32
mov word [ebp - 0x1932], dx
mov eax, 0x2e
mov word [ebp - 0x1930], ax
mov ecx, 0x64
mov word [ebp - 0x192e], cx
mov edx, 0x6c
mov word [ebp - 0x192c], dx
mov eax, 0x6c
mov word [ebp - 0x192a], ax
xor ecx, ecx
mov word [ebp - 0x1928], cx
push eax
push esi
add esp, 4
or eax, 0x12456
pop eax
push edi
push ecx
add esp, 4
sub edi, 0x12b70
or edi, 0x1782b
or edi, 0x1cd9
pop edi
push ebx
add ebx, 0x8fa9
sub ebx, 0xdfa1
pop ebx
mov byte [ebp - 0x928], 0x4c
mov byte [ebp - 0x927], 0x6f
mov byte [ebp - 0x926], 0x61
mov byte [ebp - 0x925], 0x64
mov byte [ebp - 0x924], 0x4c
mov byte [ebp - 0x923], 0x69
mov byte [ebp - 0x922], 0x62
mov byte [ebp - 0x921], 0x72
mov byte [ebp - 0x920], 0x61
mov byte [ebp - 0x91f], 0x72
mov byte [ebp - 0x91e], 0x79
mov byte [ebp - 0x91d], 0x57
mov byte [ebp - 0x91c], 0
mov edx, dword fs:[0x18]
mov dword [ebp - 0x1b70], edx
mov eax, dword [ebp - 0x1b70]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0x1b74], ecx
mov edx, dword [ebp - 0x1b74]
mov dword [ebp - 0x17dc], edx
push ecx
or ecx, 0x15c31
pop ecx
push ecx
push edi
add esp, 4
call 0x40833c
add byte [esi], bh
aaa
aas
inc eax
xor esi, dword [ebx]
aaa
aas
inc ebx
add esp, 4
sub ecx, 0x135f9
or ecx, 0x17e35
jmp 0x408350
pop ecx
cmp dword [ebp - 0x17dc], 0
jne 0x408369
mov dword [ebp - 0x7f4], 0
jmp 0x408610
mov eax, dword [ebp - 0x17dc]
mov ecx, dword [eax + 0xc]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0xdd4], edx
push ebx
push edx
add esp, 4
add ebx, 0x8441
sub ebx, 0x162ca
sub ebx, 0x1a55
pop ebx
push ebx
and ebx, 0x7664
add ebx, 0xece4
add ebx, 0xa186
xor ebx, 0x815f
pop ebx
cmp dword [ebp - 0xdd4], 0
jne 0x4083c5
mov dword [ebp - 0x7f4], 0
jmp 0x408610
mov eax, dword [ebp - 0xdd4]
mov dword [ebp - 0x568], eax
push eax
xor eax, 0xb478
pop eax
push edi
push eax
add esp, 4
add edi, 0x3c2f
or edi, 0x134c6
call 0x4083f9
add byte [ebx + 0x3e], al
inc ecx
inc eax
xor bh, byte [ebx + eax*2]
dec edi
dec esi
add esp, 4
add edi, 0xc9f9
pop edi
lea ecx, [ebp - 0x1940]
mov dword [ebp - 0xdd0], ecx
mov edx, dword [ebp - 0x568]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0xdcc], eax
xor ecx, ecx
mov word [ebp - 0x244], cx
xor edx, edx
mov word [ebp - 0x48], dx
push ebx
push ecx
add esp, 4
call 0x40843f
add byte [esi + ecx*2], dh
inc ebx
dec esp
dec ecx
inc esi
add esp, 4
pop ebx
push ebx
xor ebx, 0x1aea
jmp 0x408452
and ebx, 0x7d4a
add ebx, 0x9c8f
pop ebx
mov eax, dword [ebp - 0xdcc]
mov cx, word [eax]
mov word [ebp - 0x1152], cx
mov edx, dword [ebp - 0xdcc]
add edx, 2
mov dword [ebp - 0xdcc], edx
mov ax, word [ebp - 0x1152]
mov word [ebp - 0x244], ax
mov ecx, dword [ebp - 0xdd0]
mov dx, word [ecx]
mov word [ebp - 0x1154], dx
mov eax, dword [ebp - 0xdd0]
add eax, 2
mov dword [ebp - 0xdd0], eax
mov cx, word [ebp - 0x1154]
mov word [ebp - 0x48], cx
push ecx
call 0x4084c3
add byte [esi + 0x3d], al
xor eax, dword [ecx + 0x4b]
dec edi
add esp, 4
pop ecx
push esi
push ebx
add esp, 4
add esi, 0x18653
sub esi, 0x17b74
jmp 0x4084df
pop esi
push esi
or esi, 0x12fe0
pop esi
movzx edx, word [ebp - 0x48]
test edx, edx
jne 0x408505
movzx eax, word [ebp - 0x244]
movzx ecx, word [ebp - 0x48]
sub eax, ecx
mov dword [ebp - 0x17e4], eax
jmp 0x40855f
movzx edx, word [ebp - 0x244]
movzx eax, word [ebp - 0x48]
cmp edx, eax
je 0x40842d
movzx ecx, word [ebp - 0x244]
xor ecx, 0x20
movzx edx, word [ebp - 0x48]
cmp ecx, edx
je 0x40842d
movzx eax, word [ebp - 0x244]
movzx ecx, word [ebp - 0x48]
cmp eax, ecx
jge 0x408549
cmp dword [ebp - 0x17e4], 0
jne 0x4085a8
push esi
sub esi, 0x4e3b
xor esi, 0xb3b7
add esi, 0x1720b
or esi, 0x1193e
pop esi
push edx
push esi
add esp, 4
and edx, 0x8fd1
and edx, 0x15b28
xor edx, 0x4a47
pop edx
mov eax, dword [ebp - 0x568]
mov dword [ebp - 0x7f4], eax
jmp 0x408610
push ebx
push ebx
add esp, 4
xor ebx, 0x166d7
pop ebx
push edi
push ecx
add esp, 4
or edi, 0xa08e
jmp 0x4085c7
push edi
push esi
add esp, 4
sub edi, 0xad8c
add edi, 0xf6a3
call 0x40862f
add byte [ebp + 0x3f], cl
cmp esi, dword [ebx]
dec eax
cmp eax, 0xc483323e
add al, 0xe8
pop es
add byte [eax], al
add byte [eax], al
dec ebx
dec eax
dec edx
dec edx
dec esp
dec edi
add esp, 4
pop edi
cmp dword [ebp - 0x7f4], 0
jne 0x40868c
push edi
push esi
add esp, 4
and edi, 0x862b
xor edi, 0xbf77
sub edi, 0x1f9e
or edi, 0xd04a
pop edi
push eax
push ecx
add esp, 4
add eax, 0xd200
pop eax
push edi
add edi, 0x94d1
pop edi
mov dword [ebp - 0xb3c], 0
jmp 0x4091b4
push esi
push esi
add esp, 4
and esi, 0x15e7b
pop esi
push eax
push ebx
add esp, 4
add eax, 0xbdbf
pop eax
push ebx
add ebx, 0x14f2c
pop ebx
push ebx
push edi
add esp, 4
sub ebx, 0x10f3c
or ebx, 0x13c0
pop ebx
mov edx, dword [ebp - 0x7f4]
mov eax, dword [edx + 0x18]
mov dword [ebp - 0x380], eax
mov dword [ebp - 0x804], 0
mov ecx, dword [ebp - 0x380]
mov dword [ebp - 0x17e8], ecx
cmp dword [ebp - 0x17e8], 0
jne 0x4086fd
mov edx, dword [ebp - 0x804]
mov dword [ebp - 0x430], edx
jmp 0x4089ee
mov eax, dword [ebp - 0x17e8]
mov ecx, dword [ebp - 0x380]
add ecx, dword [eax + 0x3c]
mov dword [ebp - 0x17ec], ecx
jne 0x408725
mov edx, dword [ebp - 0x804]
mov dword [ebp - 0x430], edx
jmp 0x4089ee
mov eax, 8
imul ecx, eax, 0
mov edx, dword [ebp - 0x17ec]
mov eax, dword [edx + ecx + 0x78]
mov dword [ebp - 0x17f0], eax
cmp dword [ebp - 0x17f0], 0
jne 0x408757
mov ecx, dword [ebp - 0x804]
mov dword [ebp - 0x430], ecx
jmp 0x4089ee
mov edx, dword [ebp - 0x380]
add edx, dword [ebp - 0x17f0]
mov dword [ebp - 0x7f8], edx
jne 0x40877c
cmp dword [ebp - 0x430], 0
je 0x408ac9
push eax
push ecx
add esp, 4
or eax, 0x49b5
jmp 0x408add
pop eax
push edx
push eax
add esp, 4
xor edx, 0x13f65
call 0x408af7
add byte [esi], dh
inc edx
aaa
cmp byte [0x834e4e3c], bh
les eax, [edx + ebx*2]
mov edx, dword fs:[0x18]
mov dword [ebp - 0x1b90], edx
mov eax, dword [ebp - 0x1b90]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0x1b94], ecx
mov edx, dword [ebp - 0x1b94]
mov dword [ebp - 0x17f4], edx
push ecx
call 0x408b33
add byte [esi], dh
dec ecx
dec ebx
cmp al, 0x46
xor bh, byte [ecx]
cmp dword [ebx + eax*4 - 0x3c], eax
add al, 0xe8
or al, byte [eax]
add byte [eax], al
add byte [edi], dh
inc ecx
aas
dec ecx
cmp edi, dword [ecx]
inc ebx
cmp dword [ebx], esi
add esp, 4
pop ecx
push edi
push eax
add esp, 4
add edi, 0x645c
pop edi
cmp dword [ebp - 0x17f4], 0
jne 0x408b6d
mov dword [ebp - 0x334], 0
jmp 0x408e14
mov eax, dword [ebp - 0x17f4]
mov ecx, dword [eax + 0xc]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0xde4], edx
push ecx
or ecx, 0xf544
call 0x408b93
add byte [edx], bh
cmp eax, 0x393a4337
inc edi
add esp, 4
pop ecx
push ecx
xor ecx, 0xe785
jmp 0x408ba4
add ecx, 0xfd1e
sub ecx, 0xe99e
pop ecx
cmp dword [ebp - 0xde4], 0
jne 0x408bc9
mov dword [ebp - 0x334], 0
jmp 0x408e14
mov eax, dword [ebp - 0xde4]
mov dword [ebp - 0x56c], eax
push edi
push ebx
add esp, 4
jmp 0x408bdf
or edi, 0x3318
pop edi
push eax
sub eax, 0x12f68
jmp 0x408bf2
and eax, 0x1424b
and eax, 0x5011
pop eax
push edi
sub edi, 0xfe80
pop edi
lea ecx, [ebp - 0x1884]
mov dword [ebp - 0xde0], ecx
mov edx, dword [ebp - 0x56c]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0xddc], eax
xor ecx, ecx
mov word [ebp - 0x248], cx
xor edx, edx
mov word [ebp - 0x4c], dx
push ecx
push edi
add esp, 4
xor ecx, 0xaabb
xor ecx, 0x279b
sub ecx, 0x1557c
pop ecx
push edx
or edx, 0x120b0
sub edx, 0xf3d6
pop edx
push edx
push ecx
add esp, 4
add edx, 0xb316
pop edx
mov eax, dword [ebp - 0xddc]
mov cx, word [eax]
mov word [ebp - 0x1156], cx
mov edx, dword [ebp - 0xddc]
add edx, 2
mov dword [ebp - 0xddc], edx
mov ax, word [ebp - 0x1156]
mov word [ebp - 0x248], ax
mov ecx, dword [ebp - 0xde0]
mov dx, word [ecx]
mov word [ebp - 0x1158], dx
mov eax, dword [ebp - 0xde0]
add eax, 2
mov dword [ebp - 0xde0], eax
mov cx, word [ebp - 0x1158]
mov word [ebp - 0x4c], cx
push esi
push edx
add esp, 4
xor esi, 0x130e9
jmp 0x408ccb
pop esi
push esi
xor esi, 0x33a0
pop esi
push edx
push esi
add esp, 4
and edx, 0x119d7
pop edx
push ecx
push edx
add esp, 4
add ecx, 0xf16e
pop ecx
movzx edx, word [ebp - 0x4c]
test edx, edx
jne 0x408d09
movzx eax, word [ebp - 0x248]
movzx ecx, word [ebp - 0x4c]
sub eax, ecx
mov dword [ebp - 0x17fc], eax
jmp 0x408d63
movzx edx, word [ebp - 0x248]
movzx eax, word [ebp - 0x4c]
cmp edx, eax
je 0x408c31
push ebx
xor ebx, 0x10c59
add ebx, 0x10746
pop ebx
push ecx
push ecx
add esp, 4
sub ecx, 0x14360
and ecx, 0xd941
call 0x408e42
add byte [0x383e4c38], bh
xor bh, byte [0xc4833a3c]
add al, 0x59
mov edx, dword [ebp - 0x334]
mov eax, dword [edx + 0x18]
mov dword [ebp - 0x37c], eax
push edi
push esi
add esp, 4
and edi, 0x17190
call 0x408e6c
add byte [edi + 0x3d], al
xor al, 0x45
inc edx
add esp, 4
pop edi
push ecx
xor ecx, 0x45dc
jmp 0x408e80
or ecx, 0x11e8e
pop ecx
mov dword [ebp - 0x788], 0
mov ecx, dword [ebp - 0x37c]
mov dword [ebp - 0x1800], ecx
cmp dword [ebp - 0x1800], 0
jne 0x408eb7
mov edx, dword [ebp - 0x788]
mov dword [ebp - 0x570], edx
jmp 0x4091a8
mov eax, dword [ebp - 0x1800]
mov ecx, dword [ebp - 0x37c]
add ecx, dword [eax + 0x3c]
mov dword [ebp - 0x1804], ecx
jne 0x408edf
mov edx, dword [ebp - 0x788]
mov dword [ebp - 0x570], edx
jmp 0x4091a8
mov eax, 8
imul ecx, eax, 0
mov edx, dword [ebp - 0x1804]
mov eax, dword [edx + ecx + 0x78]
mov dword [ebp - 0x1808], eax
cmp dword [ebp - 0x1808], 0
jne 0x408f11
mov edx, dword [ebp - 0x570]
mov dword [ebp - 0xb3c], edx
push ebx
xor ebx, 0xb6a7
call 0x4091c8
add byte [eax + 0x43], al
xor edi, dword [edx]
xor esi, dword [ebx]
aas
add esp, 4
jmp 0x4091d1
jmp 0x4091d7
pop ebx
push edx
and edx, 0x779f
add edx, 0x37b9
pop edx
mov eax, dword [ebp - 0xb3c]
mov dword [ebp - 0x1ba8], eax
lea ecx, [ebp - 0xdec]
push ecx
push 0x40
mov edx, dword [ebp - 0x180c]
push edx
mov eax, dword [ebp - 0x414]
push eax
call dword [ebp - 0x1ba8]
test eax, eax
jne 0x409259
push ecx
call 0x409220
add byte [edx + 0x3d], al
inc edi
dec edx
cmp bh, byte [eax]
add esp, 4
pop ecx
push eax
push eax
add esp, 4
xor eax, 0x30ef
call 0x40923b
add byte [0x4635364e], dh
dec ebx
add esp, 4
or eax, 0x117e4
pop eax
mov ecx, dword [ebp - 0x81c]
mov dword [ebp - 0x1bac], ecx
push 0
call dword [ebp - 0x1bac]
mov edx, dword [ebp - 0x1bb0]
mov dword [ebp - 0x818], edx
jmp 0x409276
mov eax, dword [ebp - 0x818]
add eax, 1
mov dword [ebp - 0x818], eax
mov ecx, dword [ebp - 0x818]
cmp ecx, dword [ebp - 0xb40]
jae 0x4092d2
push eax
or eax, 0xa386
pop eax
push esi
jmp 0x409292
and esi, 0x66ad
and esi, 0x9048
pop esi
push edx
xor edx, 0x10efe
xor edx, 0x1349a
pop edx
push edx
jmp 0x4092b5
pop edx
movzx edx, byte [ebp - 0x419]
mov eax, dword [ebp - 0x818]
movsx ecx, byte [eax]
sub ecx, edx
mov edx, dword [ebp - 0x818]
mov byte [edx], cl
jmp 0x409267
mov eax, dword [ebp - 0xb3c]
mov dword [ebp - 0x1bb4], eax
lea ecx, [ebp - 0xdec]
push ecx
mov edx, dword [ebp - 0xdec]
push edx
mov eax, dword [ebp - 0x180c]
push eax
mov ecx, dword [ebp - 0x414]
push ecx
call dword [ebp - 0x1bb4]
test eax, eax
jne 0x40934a
push edx
and edx, 0x13ad5
jmp 0x409312
pop edx
push edi
push edx
add esp, 4
jmp 0x409321
jmp 0x409326
call 0x409332
add byte [eax + 0x4e], dl
cmp al, 0x42
push eax
cmp eax, 0x5f04c483
mov edx, dword [ebp - 0x81c]
mov dword [ebp - 0x1bb8], edx
push 0
call dword [ebp - 0x1bb8]
push ebx
push eax
add esp, 4
or ebx, 0xfa54
or ebx, 0x6406
pop ebx
push edi
push esi
add esp, 4
or edi, 0xef39
sub edi, 0xa40f
xor edi, 0x17eaf
pop edi
push edx
and edx, 0x182ff
pop edx
push edx
mov ecx, 0x10101010
pop edx
push ecx
mov ecx, 0xffff08ff
pop ecx
pop esi
pop edi
mov ecx, esp
or al, 0x89
out dx, al
jge 0x4093f1
or byte [eax], cl
lock adc cl, byte [eax]
or byte [eax], cl
or byte [esi + 0x3b], dl
dec esp
dec eax
dec ecx
push esp
push eax
inc eax
push eax
mov ecx, esp
or al, 0x89
out dx, al
mov ebx, 0x89080861
invalid
into
lea esi, [ebp + 0x6d0707f5]
into
lea esi, [esi + 0x7c0707f5]
into
lea esi, [edi + 0x550707f5]
into
lea edi, [eax + 0x770707f5]
into
lea edi, [ecx + 0x6c0707f5]
into
lea edi, [edx + 0x7d0707f5]
into
lea edi, [ebx + 0x740707f5]
into
pop es
pop es
je 0x4093c3
lea edi, [ebp + esi*8 - 0x3192f8f9]
lea edi, [ebp + 0x500707f5]
into
lea edi, [esi + 0x690707f5]
into
lea edi, [edi + 0x760707f5]
into
invalid