Function at 0x409ce7
Capabilities:
Contain obfuscated stackstrings
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add esp, 4
and ebx, 0x77af
or ebx, 0x9e21
pop ebx
push esi
xor esi, 0x17769
or esi, 0x1368d
pop esi
mov edx, 0x6b
mov word [ebp - 0x3bc], dx
mov eax, 0x65
mov word [ebp - 0x3ba], ax
mov ecx, 0x72
mov word [ebp - 0x3b8], cx
mov edx, 0x6e
mov word [ebp - 0x3b6], dx
mov eax, 0x65
mov word [ebp - 0x3b4], ax
mov ecx, 0x6c
mov word [ebp - 0x3b2], cx
mov edx, 0x33
mov word [ebp - 0x3b0], dx
mov eax, 0x32
mov word [ebp - 0x3ae], ax
mov ecx, 0x2e
mov word [ebp - 0x3ac], cx
mov edx, 0x64
mov word [ebp - 0x3aa], dx
mov eax, 0x6c
mov word [ebp - 0x3a8], ax
mov ecx, 0x6c
mov word [ebp - 0x3a6], cx
xor edx, edx
mov word [ebp - 0x3a4], dx
push edi
push esi
add esp, 4
and edi, 0x9af2
jmp 0x407aad
add edi, 0x9397
sub edi, 0xdd1
pop edi
push edi
sub edi, 0x1042c
add byte [ecx + 0x10ab1cf], al
add byte [ecx + 0x18301f7], al
add byte [edi - 0x3a], bl
test dword [esi + edi*8 - 0x39b30001], ebp
test dword [ebp + 0x6ffffffe], ebp
mov byte [ebp - 0x152], 0x61
mov byte [ebp - 0x151], 0x64
mov byte [ebp - 0x150], 0x4c
mov byte [ebp - 0x14f], 0x69
mov byte [ebp - 0x14e], 0x62
mov byte [ebp - 0x14d], 0x72
mov byte [ebp - 0x14c], 0x61
mov byte [ebp - 0x14b], 0x72
mov byte [ebp - 0x14a], 0x79
mov byte [ebp - 0x149], 0x57
mov byte [ebp - 0x148], 0
push eax
or eax, 0xe8f4
pop eax
push ecx
push esi
add esp, 4
or ecx, 0xd716
or ecx, 0x44d9
pop ecx
push edi
push eax
add esp, 4
and edi, 0x18413
sub edi, 0x6d6f
add edi, 0x40e8
pop edi
push edx
push ecx
add esp, 4
add edx, 0x5a6
xor edx, 0xb93c
sub edx, 0x2d92
xor edx, 0x7470
pop edx
push eax
and eax, 0x1370
or eax, 0x14d49
and eax, 0xa8b
pop eax
mov eax, dword fs:[0x18]
mov dword [ebp - 0x484], eax
push ecx
xor ecx, 0x2515
pop ecx
push esi
push edi
add esp, 4
and esi, 0x739b
sub esi, 0x6ae5
or esi, 0x15d5c
pop esi
push edx
push esi
add esp, 4
jmp 0x407bc4
sub edx, 0xc02
pop edx
mov ecx, dword [ebp - 0x484]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x488], edx
push edx
push ecx
add esp, 4
xor edx, 0x3c40
xor edx, 0x4da1
call 0x407bfb
add byte [ebx + 0x48], al
dec edi
inc edx
xor eax, 0x37324f3e
cmp eax, 0x5a04c483
push edi
xor edi, 0x16065
jmp 0x407c0b
pop edi
mov eax, dword [ebp - 0x488]
mov dword [ebp - 0x374], eax
cmp dword [ebp - 0x374], 0
jne 0x407c62
push ebx
xor ebx, 0x149c2
xor ebx, 0x11942
xor ebx, 0x6f4
sub ebx, 0x17a70
pop ebx
push edx
push ecx
add esp, 4
or edx, 0xa5eb
xor edx, 0x11b20
and edx, 0x2be0
pop edx
mov dword [ebp - 0x118], 0
jmp 0x407ff7
push edi
sub edi, 0x8051
and edi, 0x4483
sub edi, 0xd101
pop edi
push eax
jmp 0x407c7e
xor eax, 0x54fd
add eax, 0xccb1
jmp 0x407c93
pop eax
mov ecx, dword [ebp - 0x374]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0x1f8], eax
cmp dword [ebp - 0x1f8], 0
jne 0x407cf0
push eax
push ebx
add esp, 4
and eax, 0x13414
xor eax, 0x302e
pop eax
push eax
and eax, 0x2bcb
pop eax
push edi
push ecx
add esp, 4
add edi, 0x11fa6
add edi, 0x12296
and edi, 0xd38a
pop edi
mov dword [ebp - 0x118], 0
jmp 0x407ff7
mov ecx, dword [ebp - 0x1f8]
mov dword [ebp - 0xc0], ecx
push ebx
push esi
add esp, 4
call 0x407d0e
add byte [eax + 0x48], dl
dec ebx
dec ebp
inc edx
add esp, 4
xor ebx, 0x494f
jmp 0x407d1f
sub ebx, 0x4132
pop ebx
push esi
add esi, 0xb18
pop esi
lea edx, [ebp - 0x3bc]
mov dword [ebp - 0x1f4], edx
mov eax, dword [ebp - 0xc0]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0x1f0], ecx
push edx
push edi
add esp, 4
jmp 0x407d56
pop edx
push ebx
push eax
add esp, 4
add ebx, 0xfc10
and ebx, 0x12ee0
call 0x407d77
add byte [edi + 0x40], cl
cmp byte [ebx], bh
cmp eax, dword [ecx + 0x3f]
inc edi
dec edi
add esp, 4
pop ebx
xor edx, edx
mov word [ebp - 0x58], dx
xor eax, eax
mov word [ebp - 0xc], ax
push ebx
sub ebx, 0xf5d
add ebx, 0xaec2
pop ebx
push edx
push ebx
add esp, 4
and edx, 0xbd88
call 0x407daf
add byte [ebx], bh
cmp esi, dword [edx]
inc eax
inc ebx
cmp dword [ebx], esi
inc edx
add esp, 4
add edx, 0x14240
pop edx
mov ecx, dword [ebp - 0x1f0]
mov dx, word [ecx]
mov word [ebp - 0x28c], dx
mov eax, dword [ebp - 0x1f0]
add eax, 2
mov dword [ebp - 0x1f0], eax
mov cx, word [ebp - 0x28c]
mov word [ebp - 0x58], cx
push esi
add esi, 0x1349b
pop esi
push ebx
and ebx, 0x17028
sub ebx, 0xfc1c
and ebx, 0x152f5
pop ebx
push ecx
sub ecx, 0x6170
pop ecx
push edi
and edi, 0x8474
sub edi, 0x79f
pop edi
mov edx, dword [ebp - 0x1f4]
mov ax, word [edx]
mov word [ebp - 0x28e], ax
mov ecx, dword [ebp - 0x1f4]
add ecx, 2
mov dword [ebp - 0x1f4], ecx
mov dx, word [ebp - 0x28e]
mov word [ebp - 0xc], dx
push ebx
xor ebx, 0x56d3
sub ebx, 0xbfbb
pop ebx
push ebx
xor ebx, 0x142fc
pop ebx
push ecx
sub ecx, 0x17f49
pop ecx
push eax
push edi
add esp, 4
sub eax, 0x47c8
pop eax
push eax
sub eax, 0x13f66
pop eax
movzx eax, word [ebp - 0xc]
test eax, eax
jne 0x407e8e
movzx ecx, word [ebp - 0x58]
movzx edx, word [ebp - 0xc]
sub ecx, edx
mov dword [ebp - 0x37c], ecx
jmp 0x407f11
movzx eax, word [ebp - 0x58]
movzx ecx, word [ebp - 0xc]
cmp eax, ecx
je 0x407d87
movzx edx, word [ebp - 0x58]
xor edx, 0x20
movzx eax, word [ebp - 0xc]
cmp edx, eax
je 0x407d87
push edx
jmp 0x407eb7
add edx, 0x851d
xor edx, 0xdfca
and edx, 0x12c14
pop edx
push ebx
sub ebx, 0x1071d
jmp 0x407eda
pop ebx
push eax
or eax, 0xaeb7
pop eax
movzx ecx, word [ebp - 0x58]
movzx edx, word [ebp - 0xc]
cmp ecx, edx
jge 0x407efb
mov dword [ebp - 0x378], 0xffffffff
jmp 0x407f05
mov dword [ebp - 0x378], 1
mov eax, dword [ebp - 0x378]
mov dword [ebp - 0x37c], eax
cmp dword [ebp - 0x37c], 0
jne 0x407f5d
push ecx
or ecx, 0x350f
sub ecx, 0x9d2
sub ecx, 0xe4b0
pop ecx
push eax
push esi
add esp, 4
add eax, 0x5fea
sub eax, 0x43fd
and eax, 0xb84b
xor eax, 0x946
pop eax
mov ecx, dword [ebp - 0xc0]
mov dword [ebp - 0x118], ecx
jmp 0x407ff7
mov edx, dword [ebp - 0xc0]
mov eax, dword [edx]
mov dword [ebp - 0xc0], eax
push edx
push esi
add esp, 4
add edx, 0xcba3
and edx, 0x166ae
or edx, 0x103d5
pop edx
push ecx
sub ecx, 0x1415
xor ecx, 0xb8ca
pop ecx
push eax
push edi
add esp, 4
xor eax, 0x4c15
pop eax
mov ecx, dword [ebp - 0xc0]
cmp ecx, dword [ebp - 0x1f8]
je 0x407fbb
mov edx, dword [ebp - 0xc0]
cmp dword [edx + 0x30], 0
jne 0x407cfc
push eax
or eax, 0x122e8
xor eax, 0x45a9
pop eax
push edx
xor edx, 0xb151
xor edx, 0x5224
or edx, 0x182b1
call 0x407fe9
add byte [edi], bh
dec ebp
xor eax, dword [eax + 0x3f]
dec ecx
aaa
add esp, 4
pop edx
mov dword [ebp - 0x118], 0
cmp dword [ebp - 0x118], 0
jne 0x408041
push ebx
sub ebx, 0x695f
add ebx, 0x4002
sub ebx, 0x13a0d
jmp 0x408019
pop ebx
push esi
push esi
add esp, 4
or esi, 0x119d1
and esi, 0xdb15
sub esi, 0x3e6b
pop esi
mov dword [ebp - 0x1b4], 0
jmp 0x40913d
mov eax, dword [ebp - 0x118]
mov ecx, dword [eax + 0x18]
mov dword [ebp - 0x8c], ecx
mov dword [ebp - 0x128], 0
push eax
or eax, 0x1615b
and eax, 0x338c
pop eax
push ebx
push edi
add esp, 4
or ebx, 0x155b5
pop ebx
push eax
push ebx
add esp, 4
and eax, 0x2dec
sub eax, 0xae44
xor eax, 0x2cb4
pop eax
mov edx, dword [ebp - 0x8c]
mov dword [ebp - 0x380], edx
cmp dword [ebp - 0x380], 0
jne 0x4080e4
push esi
call 0x4080af
add byte [edx + 0x46], al
aas
dec esp
inc ebp
inc edx
add esp, 4
or esi, 0x17b48
pop esi
push edi
add edi, 0x17d44
call 0x4080cf
add byte [ebp + 0x4f], al
cmp eax, 0x4d433843
inc edi
xor al, 0x83
les eax, [edi + ebx*2]
mov eax, dword [ebp - 0x128]
mov dword [ebp - 0x98], eax
jmp 0x4085d3
mov ecx, dword [ebp - 0x380]
mov edx, dword [ebp - 0x8c]
add edx, dword [ecx + 0x3c]
mov dword [ebp - 0x384], edx
jne 0x40810c
mov eax, dword [ebp - 0x128]
mov dword [ebp - 0x98], eax
jmp 0x4085d3
push esi
push ecx
add esp, 4
sub esi, 0x6f7d
pop esi
push esi
and esi, 0x16394
and esi, 0x8a8f
xor esi, 0x1790e
sub esi, 0x106d0
pop esi
push edx
push eax
add esp, 4
sub edx, 0xa700
pop edx
mov ecx, 8
imul edx, ecx, 0
mov eax, dword [ebp - 0x384]
mov ecx, dword [eax + edx + 0x78]
mov dword [ebp - 0x2b4], ecx
cmp dword [ebp - 0x2b4], 0
jne 0x4081a2
push esi
call 0x40816f
add byte [eax], bh
cmp dword [ebx], esi
inc edx
cmp al, 0x42
cmp al, 0x3d
dec edi
add esp, 4
and esi, 0xdd7f
pop esi
push edx
push esi
add esp, 4
jmp 0x408184
and edx, 0x1068
xor edx, 0xdce
pop edx
mov edx, dword [ebp - 0x128]
mov dword [ebp - 0x98], edx
jmp 0x4085d3
push eax
and eax, 0x533
call 0x4081b6
add byte [edx + 0x48], al
xor bh, byte [0x833d4b36]
les eax, [eax + ebx*2]
push ebx
or ebx, 0xe9a7
sub ebx, 0xddf9
and ebx, 0x4bf2
or ebx, 0x11c96
pop ebx
mov eax, dword [ebp - 0x8c]
add eax, dword [ebp - 0x2b4]
mov dword [ebp - 0x11c], eax
jne 0x40822b
push edx
push edi
add esp, 4
jmp 0x4081f2
or edx, 0xbc4a
pop edx
push ebx
push ebx
add esp, 4
call 0x40820a
add byte [esi + 0x48], al
dec esi
cmp al, 0x3e
add esp, 4
sub ebx, 0xe327
sub ebx, 0x73b4
pop ebx
mov ecx, dword [ebp - 0x128]
mov dword [ebp - 0x98], ecx
jmp 0x4085d3
mov edx, dword [ebp - 0x11c]
mov eax, dword [ebp - 0x8c]
add eax, dword [edx + 0x20]
mov dword [ebp - 0x48c], eax
push edi
xor edi, 0xcb53
xor edi, 0x16de2
or edi, 0xc76c
pop edi
push edx
push ebx
add esp, 4
add edx, 0x130d4
add edx, 0x1646
pop edx
push edi
push edx
add esp, 4
and edi, 0x6361
pop edi
mov ecx, dword [ebp - 0x11c]
mov edx, dword [ebp - 0x8c]
add edx, dword [ecx + 0x24]
mov dword [ebp - 0x490], edx
push eax
push edx
add esp, 4
jmp 0x408295
call 0x4082a3
add byte [edi + 0x4a], al
cmp eax, 0x48463338
inc ecx
add esp, 4
pop eax
push edi
push ebx
add esp, 4
and edi, 0x12aa8
xor edi, 0xe15c
pop edi
mov eax, dword [ebp - 0x11c]
mov ecx, dword [ebp - 0x8c]
add ecx, dword [eax + 0x1c]
mov dword [ebp - 0x494], ecx
mov dword [ebp - 0x120], 0
jmp 0x4082e9
mov edx, dword [ebp - 0x120]
add edx, 1
mov dword [ebp - 0x120], edx
mov eax, dword [ebp - 0x11c]
mov ecx, dword [ebp - 0x120]
cmp ecx, dword [eax + 0x18]
jae 0x4085c7
push eax
push ecx
add esp, 4
or eax, 0xcf79
or eax, 0xe641
or eax, 0xbd35
pop eax
push ebx
push eax
add esp, 4
or ebx, 0x3049
jmp 0x408329
and ebx, 0x6d96
pop ebx
mov edx, dword [ebp - 0x120]
mov eax, dword [ebp - 0x48c]
mov ecx, dword [ebp - 0x8c]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x124], ecx
push ebx
push edx
add esp, 4
and ebx, 0x4517
pop ebx
push edi
call 0x408364
add byte [ebp + 0x3c], al
aaa
push eax
dec edi
xor eax, dword [ebx - 0x87efb3c]
bnd jg 0x40836c
add al, ch
pop es
add byte [eax], al
add byte [eax], al
aas
xor eax, 0x49364835
add esp, 4
pop edi
mov edx, dword [ebp - 0x120]
mov eax, dword [ebp - 0x490]
movzx ecx, word [eax + edx*2]
mov edx, dword [ebp - 0x494]
mov eax, dword [ebp - 0x8c]
add eax, dword [edx + ecx*4]
mov dword [ebp - 0x498], eax
push edi
jmp 0x4083a9
xor edi, 0x7fa2
add edi, 0x9cbc
pop edi
push ecx
push eax
add esp, 4
xor ecx, 0xf50e
add ecx, 0x17c70
or ecx, 0xa273
jmp 0x4083d3
pop ecx
mov dword [ebp - 0x2c], 0
jmp 0x4083e6
mov ecx, dword [ebp - 0x2c]
add ecx, 1
mov dword [ebp - 0x2c], ecx
mov edx, dword [ebp - 0x124]
add edx, dword [ebp - 0x2c]
movsx eax, byte [edx]
test eax, eax
je 0x408482
mov ecx, dword [ebp - 0x2c]
movsx edx, byte [ebp + ecx - 0x154]
test edx, edx
je 0x408482
push eax
push eax
add esp, 4
and eax, 0x80bb
or eax, 0xd4bd
add eax, 0x1e37
pop eax
push esi
sub esi, 0x121f0
sub esi, 0x9396
and esi, 0xaad3
add esi, 0xa02b
pop esi
mov eax, dword [ebp - 0x124]
add eax, dword [ebp - 0x2c]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x2c]
movsx eax, byte [ebp + edx - 0x154]
cmp ecx, eax
je 0x408474
mov ecx, dword [ebp - 0x124]
add ecx, dword [ebp - 0x2c]
movsx edx, byte [ecx]
xor edx, 0x20
mov eax, dword [ebp - 0x2c]
movsx ecx, byte [ebp + eax - 0x154]
cmp edx, ecx
jne 0x40847b
jmp 0x4083dd
jmp 0x408482
push ecx
add ecx, 0x399e
xor ecx, 0x6ed5
add ecx, 0x12afe
sar esi, 0x2a
add dword [eax], eax
add ecx, 0x4cc
pop ecx
push esi
push edx
add esp, 4
add al, 0x81
into
inc eax
fld dword [eax]
add byte [ecx + 0xe683c6], al
add byte [ecx + 0x98ee], al
add byte [eax], al
add byte [esi - 0x75], bl
xchg ebp, eax
fdiv st(6), st(0)
invalid
inc dword [ebx]
push ebp
aam 0xf
mov esi, 0xd44d8b02
movsx edx, byte [ebp + ecx - 0x154]
cmp eax, edx
jne 0x4084de
mov dword [ebp - 0x1fc], 0
jmp 0x408579
push esi
xor esi, 0x10f5c
sub esi, 0x111fe
pop esi
push edi
push edx
add esp, 4
sub edi, 0x582b
xor edi, 0x2b77
or edi, 0x8c8a
pop edi
push edi
push ecx
add esp, 4
and edi, 0xf1
pop edi
mov eax, dword [ebp - 0x124]
add eax, dword [ebp - 0x2c]
movsx ecx, byte [eax]
or ecx, 0x20
mov edx, dword [ebp - 0x2c]
movsx eax, byte [ebp + edx - 0x154]
or eax, 0x20
cmp ecx, eax
jge 0x40853d
mov dword [ebp - 0x1fc], 0xffffffff
jmp 0x408579
push edi
push edx
add esp, 4
and edi, 0x60e8
or edi, 0x38e
sub edi, 0x14d9c
pop edi
push esi
and esi, 0x27b9
or esi, 0xaee8
add esi, 0x15c05
and esi, 0x9c32
pop esi
mov dword [ebp - 0x1fc], 1
cmp dword [ebp - 0x1fc], 0
jne 0x4085c2
push esi
push esi
add esp, 4
add esi, 0x3ee5
add esi, 0x8d9f
call 0x4085a1
add byte [ebp + 0x36], cl
dec ebx
dec eax
cmp al, 0x39
inc esi
dec ecx
add esp, 4
call 0x4085b0
add byte [esi], bh
xor bh, byte [edx]
cmp byte ss:[ecx - 0x7d], al
les eax, [esi + ebx*2]
mov ecx, dword [ebp - 0x498]
mov dword [ebp - 0x98], ecx
jmp 0x4085d3
jmp 0x4082da
mov edx, dword [ebp - 0x128]
mov dword [ebp - 0x98], edx
cmp dword [ebp - 0x98], 0
je 0x40867c
push edx
push ebx
add esp, 4
or edx, 0x16ce2
or edx, 0xe4f7
pop edx
push eax
add eax, 0x14985
pop eax
push esi
jmp 0x408603
jmp 0x40860b
and esi, 0x1490b
pop esi
mov eax, dword [ebp - 0x98]
mov dword [ebp - 0x49c], eax
mov ecx, dword [ebp - 0x49c]
mov dword [ebp - 0x4a0], ecx
lea edx, [ebp - 0x2b0]
push edx
call dword [ebp - 0x4a0]
test eax, eax
jne 0x40867c
push eax
push ecx
add esp, 4
xor eax, 0x14c86
or eax, 0x8e21
jmp 0x408654
sub eax, 0x6ab7
pop eax
push edx
push esi
add esp, 4
sub edx, 0x6b2e
or edx, 0x159ad
pop edx
mov dword [ebp - 0x1b4], 0
invalid
invalid
inc dword [eax]
add byte [eax], al
add cl, ch
ror dword [edx], 0
invalid
push ecx
push ebx
add esp, 4
sub ecx, 0x123e3
pop ecx
push esi
push ecx
add esp, 4
and esi, 0x4321
and esi, 0x4c87
pop esi
push edi
add edi, 0x1458a
jmp 0x4086a7
or edi, 0x1220a
pop edi
push edx
or edx, 0x10a7
or edx, 0x10903
add edx, 0x18683
pop edx
push edi
push eax
add esp, 4
xor edi, 0x1446e
add edi, 0xa270
xor edi, 0x1e74
sub edi, 0x10b8
pop edi
mov eax, dword fs:[0x18]
mov dword [ebp - 0x4a4], eax
push esi
push ebx
add esp, 4
add esi, 0x1606e
pop esi
push edx
xor edx, 0xfac2
add edx, 0x1772a
sub edx, 0x76f8
or edx, 0x124d2
pop edx
push ecx
push edx
add esp, 4
and ecx, 0x9ec8
pop ecx
mov ecx, dword [ebp - 0x4a4]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x3dc], edx
push ecx
push ebx
add esp, 4
xor ecx, 0x5f83
call 0x408746
add byte [ecx + 0x40], cl
inc ebp
cmp dword [esi], edi
aas
dec ecx
inc ecx
add esp, 4
pop ecx
push eax
push eax
add esp, 4
call 0x40875b
add byte [eax + eax*2 + 0x3a], cl
xor al, 0x41
cmp eax, dword [ebx - 0x74a7fb3c]
test dword [esp + edi*8], esp
invalid
lea ecx, [ebp - 0x1b0]
push ecx
mov edx, dword [ebp + 4]
push edx
push 6
call dword [ebp - 0x1b4]
test eax, eax
jne 0x40918b
push esi
or esi, 0x13de6
pop esi
push edx
push edx
add esp, 4
sub edx, 0x5804
and edx, 0x184bb
pop edx
push esi
push esi
add esp, 4
xor esi, 0x1f6e
xor esi, 0x8f1d
and esi, 0x425a
pop esi
jmp 0x40bb58
push edx
sub edx, 0xa731
add edx, 0x7d2
xor edx, 0x7287
jmp 0x4091a4
pop edx
push ecx
push ebx
add esp, 4
add ecx, 0x11de9
xor ecx, 0x6677
sub ecx, 0xbf70
pop ecx
cmp dword [ebp - 0x1b0], 0
je 0x40bb49
push eax
sub eax, 0xfef2
sub eax, 0x1271e
jmp 0x4091df
sub eax, 0x1071c
pop eax
push edi
xor edi, 0x16bef
pop edi
push ecx
xor ecx, 0xf781
xor ecx, 0x15d72
pop ecx
mov eax, dword [ebp - 0x1b0]
mov dword [ebp - 0x210], eax
push edi
push edx
add esp, 4
or edi, 0x1ebf
add edi, 0x7c0b
pop edi
push ecx
push edi
add esp, 4
and ecx, 0x2ca2
add ecx, 0x71f1
or ecx, 0x9564
pop ecx
push esi
or esi, 0x1536c
pop esi
cmp dword [ebp - 0x210], 0
jne 0x40927a
push eax
xor eax, 0x71a6
or eax, 0x86d0
xor eax, 0x78da
pop eax
push ecx
push esi
add esp, 4
sub ecx, 0x549a
or ecx, 0xb6d3
add ecx, 0x1666d
add ecx, 0x29b9
pop ecx
jmp 0x40bb58
push ecx
or ecx, 0x149b
call 0x409290
add byte [0x4e4e3433], dh
inc edx
dec ebp
inc eax
add esp, 4
or ecx, 0x12dbd
and ecx, 0x5f67
pop ecx
push esi
push eax
add esp, 4
sub esi, 0x1cf7
pop esi
mov ecx, dword [ebp - 0x210]
mov edx, dword [ebp - 0x210]
add edx, dword [ecx + 0x3c]
mov dword [ebp - 0x2d0], edx
jne 0x4092fa
push esi
add esi, 0xac69
xor esi, 0x141eb
add esi, 0x8f0e
pop esi
push edx
and edx, 0x1640b
pop edx
push edi
jmp 0x4092e8
sub edi, 0x11a58
sub edi, 0x15604
pop edi
jmp 0x40bb58
mov eax, dword [ebp - 0x2d0]
mov ecx, dword [eax + 0x50]
mov dword [ebp - 0x3f0], ecx
push ecx
push ebx
add esp, 4
or ecx, 0x28c6
pop ecx
push edx
sub edx, 0x57f4
pop edx
push esi
push ebx
add esp, 4
sub esi, 0x8173
or esi, 0x12ef1
sub esi, 0x1403a
and esi, 0x6cf4
pop esi
mov edx, dword [ebp - 0x1b0]
mov dword [ebp - 0x218], edx
push eax
and eax, 0x685
or eax, 0x1245b
sub eax, 0x74ad
xor eax, 0x17b45
pop eax
push ebx
push ecx
add esp, 4
and ebx, 0x15596
sub ebx, 0x9f8c
and ebx, 0xc96
pop ebx
mov eax, dword [ebp - 0x218]
add eax, dword [ebp - 0x3f0]
mov dword [ebp - 0x22c], eax
cmp dword [ebp - 0x218], 0
je 0x40bb49
cmp dword [ebp - 0x22c], 0
je 0x40bb49
push edx
add edx, 0x651e
xor edx, 0x58
pop edx
push eax
and eax, 0x65bc
xor eax, 0x11710
xor eax, 0x905d
call 0x4093d3
add byte [esi], dh
cmp eax, 0x3a443446
inc ebx
add esp, 4
pop eax
mov byte [ebp - 0x285], 7
mov byte [ebp - 1], 2
jmp 0x4093ed
mov cl, byte [ebp - 1]
add cl, 1
mov byte [ebp - 1], cl
movzx edx, byte [ebp - 1]
cmp edx, 7
jge 0x40bb47
push ecx
push eax
add esp, 4
jmp 0x409405
pop ecx
push edi
or edi, 0xaee1
pop edi
push ebx
add ebx, 0x12df
pop ebx
push esi
add esi, 0xa51c
add esi, 0xd7ac
pop esi
push ebx
and ebx, 0x9a55
pop ebx
mov byte [ebp - 0x1c8], 0xde
mov byte [ebp - 0x1c7], 0xde
mov byte [ebp - 0x1c6], 0xee
mov byte [ebp - 0x1c5], 0xee
mov byte [ebp - 0x1c4], 0xde
mov byte [ebp - 0x1c3], 0xde
mov byte [ebp - 0x1c2], 0xee
mov byte [ebp - 0x1c1], 0xee
mov byte [ebp - 0x1c0], 0xcc
mov byte [ebp - 0x1bf], 0xcc
mov byte [ebp - 0x1be], 0
push edx
push ecx
add esp, 4
and edx, 0x2453
call 0x409493
add byte [ecx + 0x4f], al
xor dh, byte [ebx]
dec edx
push eax
cmp dh, byte [edx]
inc ebp
add esp, 4
pop edx
push eax
add eax, 0x1744c
and eax, 0xad98
xor eax, 0x11767
pop eax
mov eax, 1
imul ecx, eax, 0
mov dl, byte [ebp - 1]
mov byte [ebp + ecx - 0x1be], dl
push eax
or eax, 0x41ae
sub eax, 0xdb9b
xor eax, 0x12a5f
pop eax
push eax
call 0x4094df
add byte [edx], bh
dec esp
cmp esi, dword [0x834c4237]
les eax, [ecx + eax*4]
loopne 0x40954f
push ds
add byte [eax], al
and eax, 0x60a5
pop eax
mov dword [ebp - 0x4b8], 0xb
mov byte [ebp - 0x1a4], 0x8b
mov byte [ebp - 0x1a3], 0xe5
mov byte [ebp - 0x1a2], 0x5d
mov byte [ebp - 0x1a1], 0xc3
push esi
jmp 0x40951c
jmp 0x409525
call 0x409534
add byte [eax], bh
cmp ecx, dword [eax + 0x4f]
inc ebx
xor al, byte [ebp + 0x42]
push eax
add esp, 4
call 0x409543
add byte [edi], dh
dec esp
inc edi
inc ecx
dec ebp
aaa
add esp, 4
pop esi
mov dword [ebp - 0x4b4], 4
add byte [eax], al
mov dword [ebp - 0x34], 0
mov dword [ebp - 0xcc], 0
mov dword [ebp - 0x328], 0
mov dword [ebp - 0x214], 0
jmp 0x409587
mov eax, dword [ebp - 0x214]
add eax, 1
mov dword [ebp - 0x214], eax
push ebx
add ebx, 0x15b1e
and ebx, 0x27e3
xor ebx, 0xd1d0
pop ebx
push ebx
push ecx
add esp, 4
add ebx, 0x3c58
call 0x4095b5
add byte [ebx + 0x3c], al
dec edi
aas
dec edx
dec ebx
cmp dword [ecx + 0x3a], ecx
add esp, 4
pop ebx
mov ecx, dword [ebp - 0x214]
add ecx, dword [ebp - 0x218]
mov dword [ebp - 0x34], ecx
mov edx, dword [ebp - 0x34]
cmp edx, dword [ebp - 0x22c]
jb 0x40960a
push ebx
jmp 0x4095da
and ebx, 0x98db
or ebx, 0x72f2
pop ebx
push edx
and edx, 0x5dea
call 0x4095fc
add byte [edi + 0x4d], al
inc ecx
inc ebx
dec eax
cmp eax, 0x4c4834a
jmp 0x409604
pop edx
jmp 0x409cc1
mov dword [ebp - 0x21c], 0xb
mov eax, 1
imul ecx, eax, 0
lea edx, [ebp + ecx - 0x1c8]
mov dword [ebp - 0x2d4], edx
push ecx
or ecx, 0x159b9
pop ecx
push esi
or esi, 0x114c5
sub esi, 0xff8
jmp 0x409647
call 0x409657
add byte [edi + edi], dh
cmp al, 0x42
cmp eax, 0x324c3646
inc ecx
add esp, 4
pop esi
mov eax, dword [ebp - 0x34]
mov dword [ebp - 0x1ac], eax
push ebx
push edx
add esp, 4
sub ebx, 0x74a5
sub ebx, 0x175fa
pop ebx
push ecx
xor ecx, 0xee72
and ecx, 0x921
sub ecx, 0xf1dc
pop ecx
push eax
push ecx
add esp, 4
sub eax, 0xbc50
pop eax
mov ecx, dword [ebp - 0x2d4]
mov dword [ebp - 0x1a8], ecx
mov dword [ebp - 0x220], 0
push ecx
and ecx, 0x7162
pop ecx
push ecx
jmp 0x4096bd
pop ecx
push ecx
and ecx, 0xfed
pop ecx
push esi
push edx
add esp, 4
xor esi, 0x4bc9
or esi, 0x1170f
add esi, 0x1352
pop esi
mov edx, dword [ebp - 0x34]
cmp edx, dword [ebp - 0x2d4]
jne 0x40972c
push edi
push ecx
add esp, 4
and edi, 0x1533f
sub edi, 0x12f2f
xor edi, 0x5dd0
pop edi
push esi
push esi
add esp, 4
jmp 0x40970c
add esi, 0x18102
pop esi
push ecx
or ecx, 0xc526
pop ecx
mov eax, dword [ebp - 0x220]
mov dword [ebp - 0x2dc], eax
jmp 0x4098c4
cmp dword [ebp - 0x21c], 0
jle 0x409886
push eax
or eax, 0x3197
jmp 0x409745
pop eax
push edx
push esi
add esp, 4
and edx, 0x16b5d
call 0x40975e
add byte [eax], bh
dec esp
inc esp
inc eax
cmp bh, byte [0xeb04c483]
pop es
cmp edi, dword [ecx]
inc ecx
xor edi, dword [0x8b5a4142]
lea edx, [esi + edi*8 - 1]
dec dword [edi]
mov dh, 0x11
mov eax, dword [ebp - 0x1a8]
movzx ecx, byte [eax]
cmp edx, ecx
je 0x4097f0
push ecx
push ebx
add esp, 4
xor ecx, 0x104d9
pop ecx
push edx
and edx, 0x227b
xor edx, 0x13d51
call 0x4097a9
add byte [esi], bh
dec ebx
inc ebx
cmp esi, dword [esi + esi]
inc ecx
inc edx
dec ebp
add esp, 4
add edx, 0x1552c
pop edx
mov edx, dword [ebp - 0x1ac]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x1a8]
movzx edx, byte [ecx]
cmp eax, edx
jle 0x4097d5
mov dword [ebp - 0x2d8], 1
jmp 0x4097df
mov dword [ebp - 0x2d8], 0xffffffff
mov eax, dword [ebp - 0x2d8]
mov dword [ebp - 0x220], eax
jmp 0x409886
push edi
sub edi, 0x9e9c
pop edi
push esi
jmp 0x409802
jmp 0x40980a
or esi, 0x1b00
pop esi
push eax
call 0x40981e
add byte [edi + edi], bh
dec esp
push eax
dec ebx
cmp al, 0x83
les eax, [eax + ebx*2]
mov ecx, dword [ebp - 0x21c]
sub ecx, 1
mov dword [ebp - 0x21c], ecx
mov edx, dword [ebp - 0x1ac]
add edx, 1
mov dword [ebp - 0x1ac], edx
push edi
and edi, 0x13e82
pop edi
push ecx
push eax
add esp, 4
or ecx, 0x15c97
or ecx, 0x6fc7
add ecx, 0x107fa
and ecx, 0x14e32
pop ecx
push edi
push ecx
add esp, 4
and edi, 0xaef1
pop edi
mov eax, dword [ebp - 0x1a8]
add eax, 1
mov dword [ebp - 0x1a8], eax
jmp 0x40972c
push edi
push esi
add esp, 4
xor edi, 0x2106
add edi, 0x1382f
pop edi
push esi
push esi
add esp, 4
and esi, 0xc68a
xor esi, 0x160d9
pop esi
push esi
and esi, 0x1781a
and esi, 0x12f6c
pop esi
mov ecx, dword [ebp - 0x220]
mov dword [ebp - 0x2dc], ecx
cmp dword [ebp - 0x2dc], 0
jne 0x409cbc
push esi
push eax
add esp, 4
jmp 0x4098dc
call 0x4098e8
add byte [0x3c504b42], dh
add esp, 4
call 0x4098f9
add byte [ebx + 0x41], al
dec ecx
xor edi, dword [ebx + eax*2]
aas
xor al, byte [ebx - 0x197efb3c]
mov ss, esi
add byte [eax], al
pop esi
mov edx, dword [ebp - 0x34]
add edx, 0xb
mov dword [ebp - 0x34], edx
push eax
push edi
add esp, 4
jmp 0x409918
call fcn.00409928
add byte [ecx + 0x41], al
cmp al, byte [ecx + 0x4e]
cmp eax, 0x3e373242
jmp 0x409578
mov edx, dword [ebp - 0xcc]
cmp edx, dword [ebp - 0x22c]
je 0x40bb42
push eax
push edx
add esp, 4
call 0x409ce7
add byte [esi + 0x494a3940], bh
inc edx
inc ebx
inc ecx
add esp, 4
sub eax, 0x10117
pop eax
push edx
push esi
add esp, 4
jmp 0x409cfb
jmp 0x409d04
pop edx
mov byte [ebp - 0x184], 0x56
mov byte [ebp - 0x183], 0x69
mov byte [ebp - 0x182], 0x72
mov byte [ebp - 0x181], 0x74
mov byte [ebp - 0x180], 0x75
mov byte [ebp - 0x17f], 0x61
mov byte [ebp - 0x17e], 0x6c
mov byte [ebp - 0x17d], 0x50
mov byte [ebp - 0x17c], 0x72
mov byte [ebp - 0x17b], 0x6f
mov byte [ebp - 0x17a], 0x74
mov byte [ebp - 0x179], 0x65
mov byte [ebp - 0x178], 0x63
mov byte [ebp - 0x177], 0x74
mov byte [ebp - 0x176], 0
mov dword [ebp - 0x47c], 0
push esi
and esi, 0x1316b
and esi, 0xbf1f
xor esi, 0xd18f
pop esi
push edx
push ebx
add esp, 4
call 0x409da0
add byte [edi], dh
xor al, 0x4c
inc eax
inc esp
dec ebx
xor al, 0x4f
inc ebp
add esp, 4
sub edx, 0x76e9
pop edx
mov eax, dword [ebp - 0x4a8]
mov dword [ebp - 0x1bc], eax
push ecx
sub ecx, 0x9fc
pop ecx
push edi
call 0x409dce
add byte [eax], bh
cmp eax, 0x454e4c46
dec edx
dec ebx
dec esi
add esp, 4
call 0x409dde
add byte [edi], dh
xor eax, dword [esi + esi + 0x3e]
push eax
dec ebx
add esp, 4
add edi, 0x640
pop edi
push esi
push eax
add esp, 4
sub esi, 0x520f
push edx
add byte [eax], al
pop esi
push edi
and edi, 0x15237
pop edi
push esi
push edx
add esp, 4
add al, 0x81
into
dec ch
add byte [eax], al
pop esi
push ebx
push edi
add esp, 4
sub ebx, 0x4fcd
dec edi
add byte [eax], al
or ebx, 0xf1ab
pop ebx
mov ecx, dword fs:[0x18]
mov dword [ebp - 0x3f4], ecx
push ebx
push edi
add esp, 4
or ebx, 0xb749
sub ebx, 0xf0c2
pop ebx
push edi
push edx
add esp, 4
xor edi, 0xeacb
and edi, 0x1841e
xor edi, 0x16376
pop edi
push eax
and eax, 0x1400d
pop eax
mov edx, dword [ebp - 0x3f4]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x3f8], eax
push ecx
push edx
add esp, 4
xor ecx, 0x667d
add ecx, 0xb9ac
sub ecx, 0x15e31
or ecx, 0x124d0
leave
shl byte [ecx + eax], 1
add byte [ecx + 0x56], bl
call 0x409e96
add byte [ebx + 0x3b], al
inc eax
dec edi
cmp eax, 0x48393b38
add esp, 4
pop esi
mov ecx, dword [ebp - 0x3f8]
mov dword [ebp - 0x2ec], ecx
cmp dword [ebp - 0x2ec], 0
jne 0x409eed
push edx
and edx, 0x75a1
or edx, 0x18002
pop edx
push edx
push eax
add esp, 4
xor edx, 0x13a2c
call 0x409ed7
add byte [ecx + 0x4b], cl
aaa
cmp ecx, dword [ebx + 0x50]
cmp al, 0x41
dec edx
add esp, 4
and edx, 0xbe6
pop edx
mov dword [ebp - 0x70], 0
jmp 0x40a279
push edi
push ebx
add esp, 4
and edi, 0xf9b8
sub edi, 0x65d4
pop edi
push edi
xor edi, 0x825a
call 0x409f15
add byte [eax], bh
dec esi
inc edx
xor al, byte [edx + 0x37]
inc edx
aaa
cmp al, 0x48
xor al, 0x83
les eax, [ecx + eax*4]
out 0xa6, eax
stosb byte es:[edi], al
add byte [eax], al
pop edi
mov edx, dword [ebp - 0x2ec]
xchg ebp, eax
adc al, 0xfd
invalid
dec dword [ebx + 0x488b0c42]
or al, 0x89
invalid
enter 0xfffffffffffffffd, 0xffffffffffffffff
cmp dword [ebp - 0x238], 0
jne 0x409f78
push edi
add edi, 0x364f
xor edi, 0x14eac
pop edi
push eax
push esi
add esp, 4
jmp 0x409f56
jmp 0x409f5f
xor eax, 0xb2f1
add eax, 0x15d92
pop eax
mov dword [ebp - 0x70], 0
jmp 0x40a279
mov edx, dword [ebp - 0x238]
mov dword [ebp - 0xa0], edx
push ebx
call 0x409f91
add byte [0x3233454c], dh
xor eax, 0x8104c483
ret
cmp dword [ebp - 0x70], 0
jne 0x40af2f
push esi
call 0x40a293
add byte [esi + 0x42], cl
inc eax
dec esi
inc edx
dec edi
xor al, 0x46
inc ebx
add esp, 4
pop esi
push edi
push edi
add esp, 4
call 0x40a2ab
add byte [ecx], bh
inc esp
cmp ecx, dword [esi + esi + 0x50]
xor eax, 0xc4834b35
add al, 0x81
invalid
push eax
push edi
add esp, 4
add eax, 0x1362c
add eax, 0x6bdf
or eax, 0x9c71
pop eax
push eax
add eax, 0x115eb
add eax, 0x17450
add eax, 0x1550f
jmp 0x40af60
pop eax
push eax
jmp 0x40af69
or eax, 0x10539
call 0x40af7f
add byte [ecx + 0x32], al
cmp esi, dword [ebx]
xor eax, 0x323e4b36
xor al, 0x83
les eax, [eax + ebp*8]
or byte [eax], al
add byte [eax], al
add byte [edx], dh
xor ecx, dword [edi + 0x41]
inc esp
push eax
xor eax, 0x5804c483
mov edx, dword fs:[0x18]
mov dword [ebp - 0x41c], edx
push ebx
and ebx, 0xb45e
pop ebx
push eax
push ebx
add esp, 4
add eax, 0x7fb4
pop eax
push esi
push ebx
add esp, 4
xor esi, 0x14223
and esi, 0xc9be
or esi, 0xdb81
add esi, 0x35ec
pop esi
mov eax, dword [ebp - 0x41c]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0x420], ecx
push esi
add esi, 0x1990
and esi, 0x18152
add esi, 0x9e88
pop esi
push ebx
push edi
add esp, 4
xor ebx, 0xdcb6
and ebx, 0x8b3b
or ebx, 0xa725
xor ebx, 0xf2f0
pop ebx
mov edx, dword [ebp - 0x420]
mov dword [ebp - 0x310], edx
cmp dword [ebp - 0x310], 0
jne 0x40b066
push esi
push edi
add esp, 4
sub esi, 0x22ac
jmp 0x40b038
add esi, 0x1206f
pop esi
push ecx
push ecx
add esp, 4
call 0x40b050
add byte [ebp + 0x3b], al
xor eax, 0x8340453a
les eax, [ebx + ebp*8]
add al, 0x3a
aas
inc edx
dec edx
pop ecx
mov dword [ebp - 0x70], 0
jmp 0x40b3f2
push eax
push ebx
add esp, 4
sub eax, 0x16f11
add al, ch
or al, byte [eax]
add byte [eax], al
add byte [eax + 0x40], cl
dec ebx
xor eax, 0x3d3a4934
add esp, 4
add esp, 4
pop eax
push esi
push edi
add esp, 4
jmp 0x40b08f
pop esi
push edx
jmp 0x40b097
pop edx
mov eax, dword [ebp - 0x310]
mov ecx, dword [eax + 0xc]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0x254], edx
cmp dword [ebp - 0x254], 0
jne 0x40b0f1
push eax
push ecx
add esp, 4
xor eax, 0xce20
and eax, 0x6901
sub eax, 0x133f6
call 0x40b0d9
add byte [eax + 0x37], al
dec edi
inc edx
inc esi
xor esi, dword [0xc4834b4b]
add al, 0x58
push ecx
or ecx, 0xf553
pop ecx
mov dword [ebp - 0x70], 0
jmp 0x40b3f2
mov eax, dword [ebp - 0x254]
mov dword [ebp - 0xa8], eax
push eax
xor eax, 0xa072
and eax, 0xc7c5
pop eax
push edx
xor edx, 0x16d88
pop edx
push esi
push eax
add esp, 4
xor esi, 0xf60e
call 0x40b12b
add byte [esi], bh
aaa
inc esp
xor ecx, dword [ecx + 0x4e]
add esp, 4
pop esi
lea ecx, [ebp - 0x2b0]
mov dword [ebp - 0x250], ecx
mov edx, dword [ebp - 0xa8]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x24c], eax
push ecx
push esi
add esp, 4
and ecx, 0xdf0e
sub ecx, 0xa5d8
xor ecx, 0x13a87
pop ecx
push esi
and esi, 0xa84f
or esi, 0x5041
xor esi, 0xa95d
or esi, 0x14454
pop esi
xor ecx, ecx
mov word [ebp - 0x68], cx
xor edx, edx
mov word [ebp - 0x1c], dx
push edi
push esi
add esp, 4
sub edi, 0x10810
or edi, 0xdfbf
sub edi, 0xc873
pop edi
push ebx
or ebx, 0xa808
sub ebx, 0x4967
add ebx, 0x1333d
add ebx, 0xf88
pop ebx
mov eax, dword [ebp - 0x24c]
mov cx, word [eax]
mov word [ebp - 0x1d2], cx
mov edx, dword [ebp - 0x24c]
add edx, 2
mov dword [ebp - 0x24c], edx
mov ax, word [ebp - 0x1d2]
mov word [ebp - 0x68], ax
push edx
push ebx
add esp, 4
sub edx, 0x17b82
sub edx, 0x2b21
xor edx, 0x8956
pop edx
push esi
add esi, 0x7abb
and esi, 0x180f2
or esi, 0x112e6
sub esi, 0x8e88
pop esi
mov ecx, dword [ebp - 0x250]
mov dx, word [ecx]
mov word [ebp - 0x1d4], dx
mov eax, dword [ebp - 0x250]
add eax, 2
mov dword [ebp - 0x250], eax
mov cx, word [ebp - 0x1d4]
mov word [ebp - 0x1c], cx
push ecx
push eax
add esp, 4
add ecx, 0xe971
jmp 0x40b251
sub ecx, 0x12023
sub ecx, 0xf5aa
pop ecx
push ecx
xor ecx, 0x13c3a
xor ecx, 0xce87
and ecx, 0x183d1
pop ecx
movzx edx, word [ebp - 0x1c]
test edx, edx
jne 0x40b28f
movzx eax, word [ebp - 0x68]
movzx ecx, word [ebp - 0x1c]
sub eax, ecx
mov dword [ebp - 0x318], eax
jmp 0x40b312
movzx edx, word [ebp - 0x68]
movzx eax, word [ebp - 0x1c]
cmp edx, eax
je 0x40b188
movzx ecx, word [ebp - 0x68]
xor ecx, 0x20
movzx edx, word [ebp - 0x1c]
cmp ecx, edx
je 0x40b188
push edx
add edx, 0xe9b0
xor edx, 0x13717
pop edx
push edx
push edi
add esp, 4
and edx, 0x178b0
pop edx
push edi
push esi
add esp, 4
or edi, 0x2be1
add edi, 0x4f52
and edi, 0xcd5f
pop edi
movzx eax, word [ebp - 0x68]
movzx ecx, word [ebp - 0x1c]
cmp eax, ecx
jge 0x40b2fc
mov dword [ebp - 0x314], 0xffffffff
jmp 0x40b306
mov dword [ebp - 0x314], 1
mov edx, dword [ebp - 0x314]
mov dword [ebp - 0x318], edx
invalid
invalid
cmp dword [ebp - 0x318], 0
jne 0x40b35b
push eax
push ecx
add esp, 4
or eax, 0x2c7b
call 0x40b335
add byte [edi + 0x45], al
cmp eax, 0x44454a48
inc ecx
inc esp
add esp, 4
pop eax
push eax
push ebx
add esp, 4
jmp 0x40b343
jmp 0x40b34c
pop eax
mov eax, dword [ebp - 0xa8]
mov dword [ebp - 0x70], eax
jmp 0x40b3f2
mov ecx, dword [ebp - 0xa8]
mov edx, dword [ecx]
mov dword [ebp - 0xa8], edx
push eax
push eax
add esp, 4
add eax, 0x28c8
pop eax
push ebx
push esi
add esp, 4
sub ebx, 0x60fa
sub ebx, 0x146f8
or ebx, 0x149bf
pop ebx
push ecx
xor ecx, 0x14d1e
or ecx, 0x15dd1
pop ecx
mov eax, dword [ebp - 0xa8]
cmp eax, dword [ebp - 0x254]
je 0x40b3b9
mov ecx, dword [ebp - 0xa8]
cmp dword [ecx + 0x30], 0
jne 0x40b0fd
push ebx
and ebx, 0xafe
pop ebx
push edx
push esi
add esp, 4
add edx, 0x42d5
or edx, 0x2140
and edx, 0x252a
pop edx
push esi
push ecx
add esp, 4
or esi, 0x9741
and esi, 0xd1f3
pop esi
mov dword [ebp - 0x70], 0
push eax
push ebx
add esp, 4
sub eax, 0xe89e
pop eax
push eax
jmp 0x40b408
add eax, 0xb7f8
jmp 0x40b415
add eax, 0x1620d
pop eax
push edi
jmp 0x40b423
pop edi
mov edx, dword [ebp - 0x70]
mov eax, dword [edx + 0x18]
mov dword [ebp - 0x80], eax
push esi
call 0x40b43a
add byte [esi + ecx*2 + 0x32], cl
inc edx
dec ebp
xor al, byte [ebx + 0x505e04c4]
xor eax, 0x1649c
pop eax
push edi
push ebx
add esp, 4
and edi, 0x1186
xor edi, 0xc4fe
jmp 0x40b45e
pop edi
mov dword [ebp - 0x114], 0
test esp, ebp
invalid
invalid
inc dword [eax]
add byte [eax], al
add byte [edi + 0x56], dl
add esp, 4
call 0x40b47e
add byte [eax], al
add byte [eax], al
cmp ecx, dword [edi + 0x42]
cmp eax, 0x47413a33
inc eax
add esp, 4
add al, 0x5f
push esi
push ecx
add esp, 4
jmp 0x40b48c
sub esi, 0xe625
jmp 0x40b49a
pop esi
mov ecx, dword [ebp - 0x80]
mov dword [ebp - 0x31c], ecx
cmp dword [ebp - 0x31c], 0
jne 0x40b4f0
push ebx
push eax
add esp, 4
sub ebx, 0x174be
or ebx, 0x5fbb
call 0x40b4cd
add byte [ebp + 0x32], cl
cmp al, 0x35
dec edx
dec esi
inc edi
inc esp
cmp byte [ebx + 0x505b04c4], al
sub eax, 0x174ad
xor eax, 0xe64b
pop eax
mov edx, dword [ebp - 0x114]
mov dword [ebp - 0xac], edx
jmp 0x40b9ca
mov eax, dword [ebp - 0x31c]
mov ecx, dword [ebp - 0x80]
add ecx, dword [eax + 0x3c]
mov dword [ebp - 0x320], ecx
jne 0x40b515
mov edx, dword [ebp - 0x114]
mov dword [ebp - 0xac], edx
jmp 0x40b9ca
push ebx
and ebx, 0xe857
or ebx, 0xe263
jmp 0x40b52b
call 0x40b537
add byte [eax + 0x41], al
xor bh, byte [eax]
inc ebx
xor eax, 0x5b04c483
push edx
push esi
add esp, 4
add edx, 0x17dc3
pop edx
mov eax, 8
imul ecx, eax, 0
mov edx, dword [ebp - 0x320]
mov eax, dword [edx + ecx + 0x78]
mov dword [ebp - 0x324], eax
cmp dword [ebp - 0x324], 0
jne 0x40b5ab
push ebx
push ebx
add esp, 4
and ebx, 0x13e41
or ebx, 0x10175
pop ebx
push eax
push edx
add esp, 4
and eax, 0x3bc3
or eax, 0xc72a
pop eax
push edi
sub edi, 0x129f2
sub edi, 0xd069
pop edi
mov ecx, dword [ebp - 0x114]
mov dword [ebp - 0xac], ecx
jmp 0x40b9ca
push ecx
push ebx
add esp, 4
add ecx, 0xf3a9
jmp 0x40b5be
pop ecx
push ecx
call 0x40b5cc
add byte [edi], dh
cmp eax, 0x35383e34
add esp, 4
jmp 0x40b5d6
and ecx, 0x1115d
pop ecx
mov edx, dword [ebp - 0x80]
add edx, dword [ebp - 0x324]
mov dword [ebp - 0x100], edx
jne 0x40b631
push ecx
or ecx, 0x9218
add ecx, 0xeb34
call 0x40b609
add byte [ebx], bh
inc ebx
inc ecx
inc ebx
inc edi
inc edx
xor eax, 0x4c48345
add ecx, 0x125
pop ecx
push edi
jmp 0x40b619
and edi, 0xef02
pop edi
mov eax, dword [ebp - 0x114]
mov dword [ebp - 0xac], eax
jmp 0x40b9ca
mov ecx, dword [ebp - 0x100]
mov edx, dword [ebp - 0x80]
add edx, dword [ecx + 0x20]
mov dword [ebp - 0x424], edx
push eax
push edx
add esp, 4
or eax, 0x157dd
or eax, 0x8bbb
pop eax
push edx
push eax
add esp, 4
call 0x40b666
add byte [edx + 0x43], al
dec ebp
inc eax
dec esi
cmp eax, 0x8104c483
ret 0x4ab5
mov edx, dword [ebp - 0xac]
mov dword [ebp - 0x1bc], edx
lea eax, [ebp - 0x47c]
push eax
push 0x40
mov ecx, dword [ebp - 0x328]
sub ecx, dword [ebp - 0xcc]
push ecx
mov edx, dword [ebp - 0xcc]
push edx
call dword [ebp - 0x1bc]
test eax, eax
jne 0x40ba34
push edx
call 0x40ba0e
add byte [ebp + 0x3b], al
dec ebp
cmp eax, 0x4d413f34
dec ebx
cmp eax, dword [ebx + 0x7eb04c4]
dec esp
inc esi
aas
dec esp
inc ebx
push eax
and edx, 0x3eb
sub edx, 0x50ce
pop edx
push ecx
add ecx, 0x26ea
pop ecx
jmp 0x40bb47
push esi
call 0x40ba42
add byte [esi + 0x38], cl
inc eax
inc ecx
cmp eax, 0xc4834c39
add al, 0x5e
push eax
sub eax, 0x76e7
pop eax
push eax
push ebx
add esp, 4
xor eax, 0xc7f3
add eax, 0xe6f4
and eax, 0x1e63
pop eax
mov eax, dword [ebp - 0xcc]
mov dword [ebp - 0x438], eax
push ebx
or ebx, 0x5c9d
pop ebx
push ecx
sub ecx, 0xda2
and ecx, 0x9506
pop ecx
push ebx
push edx
add esp, 4
or ebx, 0x5ea9
call 0x40baa0
add byte [edi], bh
cmp dword [ecx + 0x4a], eax
dec edi
dec esi
inc esi
add esp, 4
pop ebx
pushal
push edi
call 0x40bab5
add byte [edx + 0x44], cl
dec edx
inc edx
xor al, byte [edi + 0x36]
xor cl, byte [ebx - 0x7d]
les eax, [edi + ebx*2]
push eax
push esi
add esp, 4
add eax, 0x1475e
pop eax
push ebx
push edi
add esp, 4
add ebx, 0x83d1
and ebx, 0xe645
pop ebx
call dword [ebp - 0x438]
push edx
and edx, 0x3849
sub edx, 0xc95b
add edx, 0x3651
pop edx
push ebx
push esi
add esp, 4
or ebx, 0xa653
add ebx, 0xb21b
add ebx, 0x4387
sub ebx, 0x14358
pop ebx
popal
push ebx
add ebx, 0x9a6b
sub ebx, 0x12531
sub ebx, 0x3e1f
and ebx, 0x46cc
pop ebx
push ecx
add ecx, 0x7e8d
pop ecx
push eax
add eax, 0x52f7
pop eax
push eax
sub eax, 0x16baa
pop eax
jmp 0x4093e4
jmp 0x40bb58
jmp 0x40bb58
mov byte [ebp - 0x144], 0x45
mov byte [ebp - 0x143], 0x78
mov byte [ebp - 0x142], 0x69
mov byte [ebp - 0x141], 0x74
mov byte [ebp - 0x140], 0x50
mov byte [ebp - 0x13f], 0x72
mov byte [ebp - 0x13e], 0x6f
mov byte [ebp - 0x13d], 0x63
mov byte [ebp - 0x13c], 0x65
mov byte [ebp - 0x13b], 0x73
mov byte [ebp - 0x13a], 0x73
mov byte [ebp - 0x139], 0
mov edx, dword [ebp - 0x4ac]
mov dword [ebp - 0x1b8], edx
push ebx
push esi
add esp, 4
sub ebx, 0x3f37
pop ebx
push edi
call 0x40bbd4
add byte [ebx], bh
inc edi
cmp cl, byte [edi + 0x4a]
cmp eax, dword [edi + 0x48]
xor al, 0x83
les eax, [ecx + eax*4]
out 0x6f, eax
rol dword [eax], 0
or edi, 0x5f39
and edi, 0x1426e
pop edi
push edi
push esi
add esp, 4
jmp 0x40bbf4
call 0x40bc00
add byte [edi + 0x32], cl
dec ebx
inc edi
cmp al, 0x32
add esp, 4
call 0x40bc11
add byte [edx], dh
inc ebp
dec edx
xor dh, byte [esp + eax*2]
dec edi
xor al, byte [ebx + 0x5eb04c4]
inc esp
inc ebx
inc esp
inc esp
pop edi
mov eax, dword fs:[0x18]
mov dword [ebp - 0x43c], eax
push esi
xor esi, 0x13987
pop esi
push esi
push ebx
add esp, 4
and esi, 0x5b14
pop esi
push esi
push esi
add esp, 4
or esi, 0xabd9
xor esi, 0x1742d
xor esi, 0x9e77
add esi, 0xc5ae
pop esi
mov ecx, dword [ebp - 0x43c]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x440], edx
push edx
push edx
add esp, 4
xor edx, 0x8ef1
and edx, 0x80dc
or edx, 0xf2a9
pop edx
push edi
xor edi, 0xbedf
xor edi, 0x169ef
pop edi
push esi
push ebx
add esp, 4
xor esi, 0xc70
pop esi
mov eax, dword [ebp - 0x440]
mov dword [ebp - 0x32c], eax
cmp dword [ebp - 0x32c], 0
jne 0x40bcee
push edx
xor edx, 0x3c55
add edx, 0x11abf
pop edx
push esi
sub esi, 0x13570
call 0x40bcd2
add byte [ebx], dh
cmp al, 0x45
aas
inc edi
xor al, 0x40
add esp, 4
add esi, 0xb619
xor esi, 0x1f
pop esi
mov dword [ebp - 0x74], 0
jmp 0x40c07a
push ebx
sub ebx, 0xf5ef
jmp 0x40bcfb
or ebx, 0xf820
xor ebx, 0x16141
pop ebx
push esi
push ecx
add esp, 4
and esi, 0x1543c
pop esi
push ebx
push ecx
add esp, 4
jmp 0x40bd1f
pop ebx
mov ecx, dword [ebp - 0x32c]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0x264], eax
cmp dword [ebp - 0x264], 0
jne 0x40bd79
push ecx
or ecx, 0x3aac
or ecx, 0x80eb
pop ecx
push esi
call 0x40bd59
add byte [edi + 0x4c], al
inc ebx
cmp dword [esi + 0x4a], ecx
aaa
inc esi
dec edi
add esp, 4
pop esi
push edi
jmp 0x40bd64
jmp 0x40bd6c
pop edi
mov dword [ebp - 0x74], 0
jmp 0x40c07a
mov ecx, dword [ebp - 0x264]
invalid