Function at 0x406e8d
Capabilities:
Encrypt data using rc4 prga

Disassembly:
mov ecx, dword [ebp - 0x1750]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xd9c], eax
push edi
push eax
add esp, 4
and edi, 0x1166c
and edi, 0x163c0
xor edi, 0xfdf2
pop edi
push ecx
sub ecx, 0x8973
call 0x4068d4
add byte [ecx], bh
dec edi
dec edx
dec esi
dec esi
dec ecx
cmp byte [edx + 0x37], cl
add esp, 4
pop ecx
cmp dword [ebp - 0xd9c], 0
jne fcn.004068f0
mov dword [ebp - 0x338], 0
jmp 0x406b3b
push edx
push edx
add esp, 4
jmp 0x406b48
pop edx
push esi
push ecx
add esp, 4
and esi, 0x15637
and esi, 0x12ba6
add esi, 0xbd82
pop esi
push ebx
push ecx
add esp, 4
and ebx, 0x914a
pop ebx
cmp dword [ebp - 0x338], 0
jne 0x407472
mov eax, 0x6b
mov word [ebp - 0x18f4], ax
mov ecx, 0x65
mov word [ebp - 0x18f2], cx
mov edx, 0x72
mov word [ebp - 0x18f0], dx
mov eax, 0x6e
mov word [ebp - 0x18ee], ax
mov ecx, 0x65
mov word [ebp - 0x18ec], cx
mov edx, 0x6c
mov word [ebp - 0x18ea], dx
mov eax, 0x33
mov word [ebp - 0x18e8], ax
mov ecx, 0x32
mov word [ebp - 0x18e6], cx
mov edx, 0x2e
mov word [ebp - 0x18e4], dx
mov eax, 0x64
mov word [ebp - 0x18e2], ax
mov ecx, 0x6c
mov word [ebp - 0x18e0], cx
mov edx, 0x6c
mov word [ebp - 0x18de], dx
xor eax, eax
mov word [ebp - 0x18dc], ax
push esi
push edi
add esp, 4
add esi, 0x4b7f
jmp 0x406c24
jmp 0x406c2c
sub esi, 0x12ddf
pop esi
push edx
push edx
add esp, 4
and edx, 0x11ca
jmp 0x406c44
pop edx
mov byte [ebp - 0x914], 0x4c
mov byte [ebp - 0x913], 0x6f
mov byte [ebp - 0x912], 0x61
mov byte [ebp - 0x911], 0x64
mov byte [ebp - 0x910], 0x4c
mov byte [ebp - 0x90f], 0x69
mov byte [ebp - 0x90e], 0x62
mov byte [ebp - 0x90d], 0x72
mov byte [ebp - 0x90c], 0x61
mov byte [ebp - 0x90b], 0x72
mov byte [ebp - 0x90a], 0x79
mov byte [ebp - 0x909], 0x57
mov byte [ebp - 0x908], 0
mov ecx, dword fs:[0x18]
mov dword [ebp - 0x1b00], ecx
mov edx, dword [ebp - 0x1b00]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x1b04], eax
mov ecx, dword [ebp - 0x1b04]
mov dword [ebp - 0x175c], ecx
push ecx
or ecx, 0x33b1
or ecx, 0x14ca
or ecx, 0x7e14
pop ecx
push esi
push edi
add esp, 4
or esi, 0x4422
add esi, 0x125fa
and esi, 0x84b9
xor esi, 0x888a
pop esi
cmp dword [ebp - 0x175c], 0
jne 0x406d12
mov dword [ebp - 0x7cc], 0
jmp 0x406fb9
mov edx, dword [ebp - 0x175c]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0xda8], ecx
push edx
push edi
add esp, 4
jmp 0x406d2e
sub edx, 0x395f
jmp 0x406d3d
or edx, 0x15396
pop edx
push edi
push edi
add esp, 4
add edi, 0xea9d
sub edi, 0x11a27
pop edi
cmp dword [ebp - 0xda8], 0
jne 0x406d6e
mov dword [ebp - 0x7cc], 0
jmp 0x406fb9
mov edx, dword [ebp - 0xda8]
mov dword [ebp - 0x554], edx
push edi
call 0x406d8b
add byte [edx], dh
cmp byte [ebp + ecx*2 + 0x3a], cl
inc eax
cmp dword [esi + 0x3d], eax
dec ebp
add esp, 4
xor edi, 0x6b27
jmp 0x406d9b
call 0x406da8
add byte [ebx + 0x32], al
inc esp
cmp ecx, dword [ecx + 0x38]
xor al, 0x83
les eax, [edi + ebx*2]
lea eax, [ebp - 0x18f4]
mov dword [ebp - 0xda4], eax
mov ecx, dword [ebp - 0x554]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0xda0], edx
xor eax, eax
mov word [ebp - 0x238], ax
xor ecx, ecx
mov word [ebp - 0x3c], cx
push ebx
xor ebx, 0x100e6
and ebx, 0x14ff3
sub ebx, 0x4dd4
or ebx, 0x124e9
pop ebx
push ebx
push edi
add esp, 4
sub ebx, 0x10b81
xor ebx, 0x104b1
xor ebx, 0x182ad
pop ebx
mov edx, dword [ebp - 0xda0]
mov ax, word [edx]
mov word [ebp - 0x1146], ax
mov ecx, dword [ebp - 0xda0]
add ecx, 2
mov dword [ebp - 0xda0], ecx
mov dx, word [ebp - 0x1146]
mov word [ebp - 0x238], dx
mov eax, dword [ebp - 0xda4]
mov cx, word [eax]
mov word [ebp - 0x1148], cx
mov edx, dword [ebp - 0xda4]
add edx, 2
mov dword [ebp - 0xda4], edx
mov ax, word [ebp - 0x1148]
mov word [ebp - 0x3c], ax
push ebx
add ebx, 0x14f6b
or ebx, 0x112a
add ebx, 0x12ddb
jmp 0x406e79
pop ebx
push esi
push ebx
add esp, 4
call 0x406e8d
add byte [ebp + 0x4c], cl
inc esp
inc ebx
dec ebp
cmp al, 0x39
dec esp
add esp, 4
pop esi
movzx ecx, word [ebp - 0x3c]
test ecx, ecx
jne 0x406eae
movzx edx, word [ebp - 0x238]
movzx eax, word [ebp - 0x3c]
sub edx, eax
mov dword [ebp - 0x17a4], edx
jmp 0x406f08
movzx ecx, word [ebp - 0x238]
movzx edx, word [ebp - 0x3c]
cmp ecx, edx
je 0x406dd6
movzx eax, word [ebp - 0x238]
xor eax, 0x20
movzx ecx, word [ebp - 0x3c]
cmp eax, ecx
je 0x406dd6
movzx edx, word [ebp - 0x238]
movzx eax, word [ebp - 0x3c]
cmp edx, eax
jge 0x406ef2
mov dword [ebp - 0x1760], 0xffffffff
jmp 0x406efc
mov dword [ebp - 0x1760], 1
mov ecx, dword [ebp - 0x1760]
mov dword [ebp - 0x17a4], ecx
cmp dword [ebp - 0x17a4], 0
jne 0x406f51
push esi
sub esi, 0x14f76
jmp 0x406f1f
call 0x406f2d
add byte [esi + esi], bh
dec edi
aas
push eax
aas
dec eax
add esp, 4
call 0x406f3f
add byte [ecx], bh
inc esi
inc ebx
cmp al, 0x3b
inc ebx
aaa
inc esi
dec ebx
add esp, 4
pop esi
mov edx, dword [ebp - 0x554]
mov dword [ebp - 0x7cc], edx
jmp 0x406fb9
push esi
push esi
add esp, 4
call 0x406f65
add byte [esi], dh
dec ebp
dec edi
xor eax, 0x434e3e3d
inc ecx
add esp, 4
and esi, 0x3c55
sub esi, 0x76bf
pop esi
push eax
or eax, 0x1057e
xor eax, 0x18382
pop eax
mov eax, dword [ebp - 0x554]
mov ecx, dword [eax]
mov dword [ebp - 0x554], ecx
mov edx, dword [ebp - 0x554]
cmp edx, dword [ebp - 0xda8]
je 0x406faf
mov eax, dword [ebp - 0x554]
cmp dword [eax + 0x30], 0
jne 0x406d7a
mov dword [ebp - 0x7cc], 0
push esi
push edi
add esp, 4
or esi, 0x10f95
add esi, 0x5f1d
pop esi
push edi
jmp 0x406fd1
and edi, 0x11b65
call 0x406fe7
add byte [ecx], bh
dec edi
inc ecx
inc eax
dec esi
inc eax
cmp edi, dword [esi]
inc ebx
add esp, 4
pop edi
cmp dword [ebp - 0x7cc], 0
jne 0x407035
push esi
push edi
add esp, 4
add esi, 0x150c5
xor esi, 0x13e21
pop esi
push ebx
push edi
add esp, 4
or ebx, 0x1e3e
xor ebx, 0x4350
xor ebx, 0x15ae
pop ebx
push edx
or edx, 0xe72d
pop edx
mov dword [ebp - 0x818], 0
jmp 0x407b5d
push edx
call 0x407043
add byte [esi], bh
inc esp
cmp esi, dword [0x8345454c]
les eax, [ecx + eax*4]
retf 0x6838
push ecx
and ecx, 0x1e22
add ecx, 0xa9f4
sub ecx, 0xef20
xor ecx, 0x91de
pop ecx
push edi
push ecx
add esp, 4
and edi, 0x12cab
xor edi, 0x4b98
and edi, 0x8691
pop edi
mov ecx, dword fs:[0x18]
mov dword [ebp - 0x1b20], ecx
mov edx, dword [ebp - 0x1b20]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x1b24], eax
mov ecx, dword [ebp - 0x1b24]
mov dword [ebp - 0x17b8], ecx
push edx
push edx
add esp, 4
sub edx, 0x125f6
pop edx
push eax
and eax, 0x929d
add eax, 0x3843
and eax, 0xeb1a
call 0x4074fa
add byte [eax + 0x4a], dl
cmp dword ss:[esi + 0x33], eax
dec eax
cmp eax, 0x4c48346
pop eax
cmp dword [ebp - 0x17b8], 0
jne 0x407516
mov dword [ebp - 0x338], 0
jmp 0x4077bd
mov edx, dword [ebp - 0x17b8]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0xdb8], ecx
push edx
push edx
add esp, 4
sub edx, 0x15247
jmp 0x40753a
pop edx
push ebx
push ecx
add esp, 4
call 0x40754f
add byte [ecx + 0x35], cl
xor eax, 0x3e32503b
push eax
inc esp
add esp, 4
jmp 0x407559
pop ebx
cmp dword [ebp - 0xdb8], 0
jne 0x407572
mov dword [ebp - 0x338], 0
jmp 0x4077bd
mov edx, dword [ebp - 0xdb8]
mov dword [ebp - 0x558], edx
push eax
push esi
add esp, 4
sub eax, 0x5a6f
pop eax
push ebx
push edi
add esp, 4
or ebx, 0x1363d
add ebx, 0x86be
pop ebx
push esi
push eax
add esp, 4
jmp 0x4075a9
add esi, 0x106ae
pop esi
lea eax, [ebp - 0x1884]
mov dword [ebp - 0xdb4], eax
mov ecx, dword [ebp - 0x558]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0xdb0], edx
xor eax, eax
mov word [ebp - 0x23c], ax
xor ecx, ecx
mov word [ebp - 0x40], cx
push esi
push edi
add esp, 4
jmp 0x4075e5
xor esi, 0x1714a
xor esi, 0xb895
pop esi
push edx
xor edx, 0xe640
xor edx, 0xdbd9
add edx, 0xe411
and edx, 0x1860d
pop edx
mov edx, dword [ebp - 0xdb0]
mov ax, word [edx]
mov word [ebp - 0x114a], ax
mov ecx, dword [ebp - 0xdb0]
add ecx, 2
mov dword [ebp - 0xdb0], ecx
mov dx, word [ebp - 0x114a]
mov word [ebp - 0x23c], dx
mov eax, dword [ebp - 0xdb4]
mov cx, word [eax]
mov word [ebp - 0x114c], cx
mov edx, dword [ebp - 0xdb4]
add edx, 2
mov dword [ebp - 0xdb4], edx
mov ax, word [ebp - 0x114c]
mov word [ebp - 0x40], ax
push esi
push edi
add esp, 4
and esi, 0xe1d5
or esi, 0x8fd6
sub esi, 0xcdf4
or esi, 0x270
pop esi
push eax
add eax, 0x13dd0
pop eax
push esi
push edi
add esp, 4
xor esi, 0xa207
pop esi
movzx ecx, word [ebp - 0x40]
test ecx, ecx
jne 0x4076b2
movzx edx, word [ebp - 0x23c]
movzx eax, word [ebp - 0x40]
sub edx, eax
mov dword [ebp - 0x17c0], edx
jmp 0x40770c
movzx ecx, word [ebp - 0x23c]
movzx edx, word [ebp - 0x40]
cmp ecx, edx
je 0x4075da
movzx eax, word [ebp - 0x23c]
xor eax, 0x20
movzx ecx, word [ebp - 0x40]
cmp eax, ecx
je 0x4075da
movzx edx, word [ebp - 0x23c]
movzx eax, word [ebp - 0x40]
cmp edx, eax
jge 0x4076f6
mov dword [ebp - 0x17bc], 0xffffffff
jmp 0x407700
mov dword [ebp - 0x17bc], 1
mov ecx, dword [ebp - 0x17bc]
mov dword [ebp - 0x17c0], ecx
cmp dword [ebp - 0x17c0], 0
jne 0x407755
push edx
call 0x407725
add byte [ebx + 0x47], cl
dec ebp
dec ecx
cmp esi, dword [edx]
inc ecx
dec esp
dec esi
add esp, 4
xor edx, 0x116b2
pop edx
push edx
push ebx
add esp, 4
add edx, 0xa1b9
pop edx
push ebx
push eax
add esp, 4
or ebx, 0x10803
pop ebx
mov edx, dword [ebp - 0x558]
mov dword [ebp - 0x338], edx
jmp 0x4077bd
push ebx
call 0x407763
add byte [esi + 0x4d], al
inc eax
aas
inc ebx
cmp al, 0x36
add esp, 4
xor ebx, 0x96b0
add ebx, 0x38fb
pop ebx
push edx
or edx, 0x16e49
or edx, 0x66a6
or edx, 0x5e36
pop edx
mov eax, dword [ebp - 0x558]
mov ecx, dword [eax]
mov dword [ebp - 0x558], ecx
mov edx, dword [ebp - 0x558]
cmp edx, dword [ebp - 0xdb8]
je 0x4077b3
mov eax, dword [ebp - 0x558]
cmp dword [eax + 0x30], 0
jne 0x40757e
mov dword [ebp - 0x338], 0
push esi
push ecx
add esp, 4
or esi, 0x14b44
pop esi
push esi
add esi, 0xdea8
pop esi
push esi
push eax
add esp, 4
sub esi, 0x7045
add esi, 0x33ab
or esi, 0x9646
sub esi, 0xc7e1
pop esi
mov ecx, dword [ebp - 0x338]
mov edx, dword [ecx + 0x18]
mov dword [ebp - 0x35c], edx
push ecx
push edx
add esp, 4
add ecx, 0xcafa
sub ecx, 0x1517b
pop ecx
push eax
xor eax, 0x1d5
pop eax
push edx
push edi
add esp, 4
xor edx, 0x14405
xor edx, 0x63b6
and edx, 0x16798
pop edx
mov dword [ebp - 0x7ec], 0
mov eax, dword [ebp - 0x35c]
mov dword [ebp - 0x17c4], eax
cmp dword [ebp - 0x17c4], 0
jne 0x407860
mov ecx, dword [ebp - 0x7ec]
mov dword [ebp - 0x55c], ecx
jmp 0x407b51
mov edx, dword [ebp - 0x17c4]
mov eax, dword [ebp - 0x35c]
add eax, dword [edx + 0x3c]
mov dword [ebp - 0x17c8], eax
jne 0x407888
mov ecx, dword [ebp - 0x7ec]
mov dword [ebp - 0x55c], ecx
jmp 0x407b51
mov edx, 8
imul eax, edx, 0
mov ecx, dword [ebp - 0x17c8]
mov edx, dword [ecx + eax + 0x78]
mov dword [ebp - 0x17cc], edx
cmp dword [ebp - 0x17cc], 0
jne 0x4078ba
mov eax, dword [ebp - 0x7ec]
mov dword [ebp - 0x55c], eax
jmp 0x407b51
mov ecx, dword [ebp - 0x35c]
add ecx, dword [ebp - 0x17cc]
mov dword [ebp - 0x7e0], ecx
jne 0x4078df
mov edx, dword [ebp - 0x7ec]
mov dword [ebp - 0x55c], edx
jmp 0x407b51
mov eax, dword [ebp - 0x7e0]
mov ecx, dword [ebp - 0x35c]
add ecx, dword [eax + 0x20]
mov dword [ebp - 0x1b28], ecx
mov edx, dword [ebp - 0x7e0]
mov eax, dword [ebp - 0x35c]
add eax, dword [edx + 0x24]
mov dword [ebp - 0x1b2c], eax
mov ecx, dword [ebp - 0x7e0]
mov edx, dword [ebp - 0x35c]
add edx, dword [ecx + 0x1c]
mov dword [ebp - 0x1b30], edx
mov dword [ebp - 0x7e4], 0
jmp 0x407939
mov eax, dword [ebp - 0x7e4]
add eax, 1
mov dword [ebp - 0x7e4], eax
mov ecx, dword [ebp - 0x7e0]
mov edx, dword [ebp - 0x7e4]
cmp edx, dword [ecx + 0x18]
jae 0x407b45
mov eax, dword [ebp - 0x7e4]
mov ecx, dword [ebp - 0x1b28]
mov edx, dword [ebp - 0x35c]
add edx, dword [ecx + eax*4]
mov dword [ebp - 0x7e8], edx
mov eax, dword [ebp - 0x7e4]
mov ecx, dword [ebp - 0x1b2c]
movzx edx, word [ecx + eax*2]
mov eax, dword [ebp - 0x1b30]
mov ecx, dword [ebp - 0x35c]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x1b34], ecx
mov dword [ebp - 0x1b8], 0
jmp 0x4079a9
mov edx, dword [ebp - 0x1b8]
add edx, 1
mov dword [ebp - 0x1b8], edx
mov eax, dword [ebp - 0x7e8]
add eax, dword [ebp - 0x1b8]
movsx ecx, byte [eax]
test ecx, ecx
je 0x407a5b
mov edx, dword [ebp - 0x1b8]
movsx eax, byte [ebp + edx - 0x8e8]
test eax, eax
je 0x407a5b
push esi
push ecx
add esp, 4
jmp 0x4079e3
pop esi
push ebx
push ebx
add esp, 4
and ebx, 0x17b8d
or ebx, 0xb009
pop ebx
push esi
push edi
add esp, 4
and esi, 0x12aa9
or esi, 0x7cb2
pop esi
mov ecx, dword [ebp - 0x7e8]
add ecx, dword [ebp - 0x1b8]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x1b8]
movsx ecx, byte [ebp + eax - 0x8e8]
cmp edx, ecx
je 0x407a4d
mov edx, dword [ebp - 0x7e8]
add edx, dword [ebp - 0x1b8]
movsx eax, byte [edx]
xor eax, 0x20
mov ecx, dword [ebp - 0x1b8]
movsx edx, byte [ebp + ecx - 0x8e8]
cmp eax, edx
jne 0x407a54
jmp 0x40799a
jmp 0x407a5b
push ecx
push eax
add esp, 4
add ecx, 0x1a96
pop ecx
push esi
push esi
add esp, 4
add esi, 0x2ff4
jmp 0x407a77
pop esi
push edx
xor edx, 0x279a
jmp 0x407a86
and edx, 0x6508
pop edx
mov eax, dword [ebp - 0x7e8]
add eax, dword [ebp - 0x1b8]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x1b8]
movsx eax, byte [ebp + edx - 0x8e8]
cmp ecx, eax
jne 0x407aba
mov dword [ebp - 0xdbc], 0
jmp 0x407b29
push eax
push esi
add esp, 4
sub eax, 0xbf79
call 0x407ad5
add byte [edx + eax*2], dh
inc ebp
inc ebx
cmp byte [ecx + 0x3b], cl
dec eax
dec esp
inc eax
add esp, 4
and eax, 0x7ce4
pop eax
push edi
jmp 0x407ae5
sub edi, 0x7e3
pop edi
mov ecx, dword [ebp - 0x7e8]
add ecx, dword [ebp - 0x1b8]
movsx edx, byte [ecx]
or edx, 0x20
mov eax, dword [ebp - 0x1b8]
movsx ecx, byte [ebp + eax - 0x8e8]
or ecx, 0x20
cmp edx, ecx
jge 0x407b1f
mov dword [ebp - 0xdbc], 0xffffffff
jmp 0x407b29
mov dword [ebp - 0xdbc], 1
cmp dword [ebp - 0xdbc], 0
jne 0x407b40
mov edx, dword [ebp - 0x1b34]
mov dword [ebp - 0x55c], edx
jmp 0x407b51
jmp 0x40792a
mov eax, dword [ebp - 0x7ec]
mov dword [ebp - 0x55c], eax
mov ecx, dword [ebp - 0x55c]
mov dword [ebp - 0x818], ecx
push ebx
call 0x407b6b
add byte [edx + 0x50], cl
cmp al, byte [edi + esi + 0x46]
dec esi
add esp, 4
or ebx, 0x16be9
call 0x407b84
add byte [esi + 0x43], cl
cmp al, 0x43
dec eax
cmp cl, byte [ebx + 0x48]
cmp al, 0x83
les eax, [ebx + ebp*8]
add eax, 0x393c4839
dec esp
pop ebx
mov edx, dword [ebp - 0x414]
add edx, 0xe
mov dword [ebp - 0x1b84], edx
push edi
add edi, 0x18323
or edi, 0x12299
pop edi
push ecx
push edx
add esp, 4
xor ecx, 0xe84b
pop ecx
push ebx
push ebx
add esp, 4
and ebx, 0x54df
and ebx, 0x942b
add ebx, 0x3ad2
pop ebx
cmp dword [ebp - 0x414], 0
je 0x407be2
cmp dword [ebp - 0xb38], 0
jne 0x407c28
push esi
push ecx
add esp, 4
add esi, 0x239
and esi, 0x14611
or esi, 0x6f30
add esi, 0x125b1
pop esi
push eax
sub eax, 0x1948
pop eax
push ecx
push ecx
add esp, 4
sub ecx, 0x1192e
pop ecx
mov eax, dword [ebp - 0x818]
mov dword [ebp - 0x1b38], eax
push 0
call dword [ebp - 0x1b38]
mov dword [ebp - 0x2260], 0xa
push edx
push ebx
add esp, 4
and edx, 0x136f5
or edx, 0x5808
xor edx, 0x12b96
xor edx, 0x8e67
pop edx
push ebx
or ebx, 0x10622
and ebx, 0x1b78
xor ebx, 0xfbc6
pop ebx
mov ecx, dword [ebp - 0x414]
mov dl, byte [ecx + 0xa]
mov byte [ebp - 0x3da], dl
mov eax, dword [ebp - 0xb38]
sub eax, dword [ebp - 0x414]
mov dword [ebp - 0x180c], eax
mov dword [ebp - 0xdec], 0
push edi
push ebx
add esp, 4
add edi, 0x7cde
pop edi
push ecx
push eax
add esp, 4
xor ecx, 0x2ec5
xor ecx, 0x2037
pop ecx
push esi
add esi, 0x820
xor esi, 0x699e
sub esi, 0x51e0
pop esi
mov byte [ebp - 0xa54], 0x56
mov byte [ebp - 0xa53], 0x69
mov byte [ebp - 0xa52], 0x72
mov byte [ebp - 0xa51], 0x74
mov byte [ebp - 0xa50], 0x75
mov byte [ebp - 0xa4f], 0x61
mov byte [ebp - 0xa4e], 0x6c
mov byte [ebp - 0xa4d], 0x50
mov byte [ebp - 0xa4c], 0x72
mov byte [ebp - 0xa4b], 0x6f
mov byte [ebp - 0xa4a], 0x74
mov byte [ebp - 0xa49], 0x65
mov byte [ebp - 0xa48], 0x63
mov byte [ebp - 0xa47], 0x74
mov byte [ebp - 0xa46], 0
push edi
and edi, 0x123a2
pop edi
push edi
or edi, 0x1f54
xor edi, 0x113f5
and edi, 0x12cc3
pop edi
push eax
push edx
add esp, 4
call 0x407d58
add byte [edi + 0x4f], cl
aas
dec ebp
dec ebx
inc edi
inc ebx
add esp, 4
pop eax
mov ecx, dword fs:[0x18]
mov dword [ebp - 0x1b3c], ecx
mov edx, dword [ebp - 0x1b3c]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x1b40], eax
mov ecx, dword [ebp - 0x1b40]
mov dword [ebp - 0x17d0], ecx
push edx
push edx
add esp, 4
xor edx, 0x728c
or edx, 0x15c00
pop edx
push eax
xor eax, 0x1270f
pop eax
push esi
push edi
add esp, 4
or esi, 0xc784
add esi, 0xfd5a
add esi, 0x1531d
pop esi
cmp dword [ebp - 0x17d0], 0
jne 0x407dce
mov dword [ebp - 0x324], 0
jmp 0x408075
mov edx, dword [ebp - 0x17d0]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0xdc8], ecx
push ebx
xor ebx, 0xedd6
jmp 0x407def
xor ebx, 0x14d3
pop ebx
push edi
push ecx
add esp, 4
jmp 0x407e00
call 0x407e0e
add byte [ebx + edi + 0x36], al
dec edi
push eax
cmp eax, 0xc483333a
add al, 0x5f
cmp dword [ebp - 0xdc8], 0
jne 0x407e2a
mov dword [ebp - 0x324], 0
jmp 0x408075
mov edx, dword [ebp - 0xdc8]
mov dword [ebp - 0x560], edx
push ebx
push ecx
add esp, 4
or ebx, 0x14e63
pop ebx
push edi
and edi, 0x14f8b
or edi, 0xca82
pop edi
push edx
push eax
add esp, 4
and edx, 0x14d49
add edx, 0x130ce
xor edx, 0xa62d
pop edx
lea eax, [ebp - 0x1884]
mov dword [ebp - 0xdc4], eax
mov ecx, dword [ebp - 0x560]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0xdc0], edx
xor eax, eax
mov word [ebp - 0x240], ax
xor ecx, ecx
mov word [ebp - 0x44], cx
push edi
push edx
add esp, 4
jmp 0x407e9f
xor edi, 0x13162
xor edi, 0xd5e
add edi, 0x17b6a
pop edi
push edx
call 0x407ec0
add byte [0x504c4c43], bh
dec ebx
inc esi
add esp, 4
pop edx
mov edx, dword [ebp - 0xdc0]
mov ax, word [edx]
mov word [ebp - 0x114e], ax
mov ecx, dword [ebp - 0xdc0]
add ecx, 2
mov dword [ebp - 0xdc0], ecx
mov dx, word [ebp - 0x114e]
mov word [ebp - 0x240], dx
mov eax, dword [ebp - 0xdc4]
mov cx, word [eax]
mov word [ebp - 0x1150], cx
mov edx, dword [ebp - 0xdc4]
add edx, 2
mov dword [ebp - 0xdc4], edx
mov ax, word [ebp - 0x1150]
mov word [ebp - 0x44], ax
push ebx
or ebx, 0x11ae3
or ebx, 0xad4c
sub ebx, 0x1039a
pop ebx
push ebx
push eax
add esp, 4
call 0x407f43
add byte [ebx + 0x47], cl
push eax
xor eax, 0x3f33504b
dec ecx
add esp, 4
or ebx, 0x16344
pop ebx
movzx ecx, word [ebp - 0x44]
test ecx, ecx
jne 0x407f6a
movzx edx, word [ebp - 0x240]
movzx eax, word [ebp - 0x44]
sub edx, eax
mov dword [ebp - 0x17d8], edx
jmp 0x407fc4
movzx ecx, word [ebp - 0x240]
movzx edx, word [ebp - 0x44]
cmp ecx, edx
je 0x407e92
movzx eax, word [ebp - 0x240]
xor eax, 0x20
movzx ecx, word [ebp - 0x44]
cmp eax, ecx
je 0x407e92
movzx edx, word [ebp - 0x240]
movzx eax, word [ebp - 0x44]
cmp edx, eax
jge 0x407fae
mov dword [ebp - 0x17d4], 0xffffffff
jmp 0x407fb8
mov dword [ebp - 0x17d4], 1
mov ecx, dword [ebp - 0x17d4]
mov dword [ebp - 0x17d8], ecx
cmp dword [ebp - 0x17d8], 0
jne 0x40800d
push edx
push ebx
add esp, 4
and edx, 0xd295
xor edx, 0xa3bc
xor edx, 0xd2d1
pop edx
push ebx
push ebx
add esp, 4
sub ebx, 0xc5e8
pop ebx
push ecx
or ecx, 0x12c88
add ecx, 0x12480
pop ecx
mov edx, dword [ebp - 0x560]
mov dword [ebp - 0x324], edx
jmp 0x408075
push ebx
or ebx, 0x16d39
pop ebx
push ecx
push ebx
add esp, 4
add ecx, 0xdfbe
pop ecx
push ecx
push ecx
add esp, 4
and ecx, 0x142cf
xor ecx, 0xd395
xor ecx, 0xf793
xor ecx, 0x7cca
pop ecx
mov eax, dword [ebp - 0x560]
mov ecx, dword [eax]
mov dword [ebp - 0x560], ecx
mov edx, dword [ebp - 0x560]
cmp edx, dword [ebp - 0xdc8]
je 0x40806b
mov eax, dword [ebp - 0x560]
cmp dword [eax + 0x30], 0
jne 0x407e36
mov dword [ebp - 0x324], 0
push ecx
push ecx
add esp, 4
add ecx, 0x17ddd
pop ecx
push edi
call 0x408091
add byte [edx], bh
inc esp
push eax
cmp byte [edi], bh
dec esi
cmp byte [esi + 0x40], cl
add esp, 4
call 0x4080a3
add byte [esi + 0x3e], al
inc ecx
inc esp
inc ecx
cmp byte [ecx + 0x3b], al
add esp, 4
pop edi
cmp dword [ebp - 0x324], 0
jne 0x4089ac
mov ecx, 0x6b
mov word [ebp - 0x1910], cx
mov edx, 0x65
mov word [ebp - 0x190e], dx
mov eax, 0x72
mov word [ebp - 0x190c], ax
mov ecx, 0x6e
mov word [ebp - 0x190a], cx
mov edx, 0x65
mov word [ebp - 0x1908], dx
mov eax, 0x6c
mov word [ebp - 0x1906], ax
mov ecx, 0x33
mov word [ebp - 0x1904], cx
mov edx, 0x32
mov word [ebp - 0x1902], dx
mov eax, 0x2e
mov word [ebp - 0x1900], ax
mov ecx, 0x64
mov word [ebp - 0x18fe], cx
mov edx, 0x6c
mov word [ebp - 0x18fc], dx
mov eax, 0x6c
mov word [ebp - 0x18fa], ax
xor ecx, ecx
mov word [ebp - 0x18f8], cx
push edx
push ecx
add esp, 4
call 0x40815f
add byte [0x473f4c48], dh
xor edi, dword [esi]
add esp, 4
sub edx, 0x11d2f
sub edx, 0xa944
pop edx
push ebx
and ebx, 0xa342
pop ebx
push eax
add eax, 0x3281
pop eax
mov byte [ebp - 0x924], 0x4c
mov byte [ebp - 0x923], 0x6f
mov byte [ebp - 0x922], 0x61
mov byte [ebp - 0x921], 0x64
mov byte [ebp - 0x920], 0x4c
mov byte [ebp - 0x91f], 0x69
mov byte [ebp - 0x91e], 0x62
mov byte [ebp - 0x91d], 0x72
mov byte [ebp - 0x91c], 0x61
mov byte [ebp - 0x91b], 0x72
mov byte [ebp - 0x91a], 0x79
mov byte [ebp - 0x919], 0x57
mov byte [ebp - 0x918], 0
mov edx, dword fs:[0x18]
mov dword [ebp - 0x1b44], edx
mov eax, dword [ebp - 0x1b44]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0x1b48], ecx
mov edx, dword [ebp - 0x1b48]
mov dword [ebp - 0x17dc], edx
push edi
push ecx
add esp, 4
add edi, 0x7bd3
call 0x408219
add byte [ebp + 0x40], al
dec ecx
aas
dec ecx
aaa
add esp, 4
call 0x40822a
add byte [ebx + 0x41], al
xor eax, 0x3d494f35
dec edi
add esp, 4
or edi, 0x7e94
pop edi
cmp dword [ebp - 0x17dc], 0
jne 0x40824c
mov dword [ebp - 0x7f0], 0
jmp 0x4084f3
mov eax, dword [ebp - 0x17dc]
mov ecx, dword [eax + 0xc]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0xdd4], edx
push edx
or edx, 0x5b57
xor edx, 0x647b
pop edx
push ebx
push esi
add esp, 4
or ebx, 0x16f6d
sub ebx, 0x144f6
add ebx, 0x736d
pop ebx
push edi
push esi
add esp, 4
and edi, 0x46e9
pop edi
cmp dword [ebp - 0xdd4], 0
jne 0x4082a8
mov dword [ebp - 0x7f0], 0
jmp 0x4084f3
mov eax, dword [ebp - 0xdd4]
mov dword [ebp - 0x564], eax
push ebx
xor ebx, 0xdfb7
call 0x4082ca
add byte [ecx + 0x33], al
aaa
xor eax, 0x3b463e41
push eax
add esp, 4
pop ebx
push eax
push ecx
add esp, 4
or eax, 0x112f4
pop eax
push eax
push ebx
add esp, 4
sub eax, 0x2202
pop eax
lea ecx, [ebp - 0x1910]
mov dword [ebp - 0xdd0], ecx
mov edx, dword [ebp - 0x564]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0xdcc], eax
xor ecx, ecx
mov word [ebp - 0x244], cx
xor edx, edx
mov word [ebp - 0x48], dx
push esi
push esi
add esp, 4
xor esi, 0x13755
and esi, 0x16abd
pop esi
push edi
push ebx
add esp, 4
xor edi, 0x16f5f
jmp 0x408332
sub edi, 0x182f7
jmp 0x408341
pop edi
mov eax, dword [ebp - 0xdcc]
mov cx, word [eax]
mov word [ebp - 0x1152], cx
mov edx, dword [ebp - 0xdcc]
add edx, 2
mov dword [ebp - 0xdcc], edx
mov ax, word [ebp - 0x1152]
mov word [ebp - 0x244], ax
mov ecx, dword [ebp - 0xdd0]
mov dx, word [ecx]
mov word [ebp - 0x1154], dx
mov eax, dword [ebp - 0xdd0]
add eax, 2
mov dword [ebp - 0xdd0], eax
mov cx, word [ebp - 0x1154]
mov word [ebp - 0x48], cx
push edi
xor edi, 0xbeac
sub edi, 0x94bd
xor edi, 0x10cae
pop edi
push edi
push esi
add esp, 4
sub edi, 0x93c8
and edi, 0x7a64
add edi, 0x15fac
sub edi, 0x13674
pop edi
movzx edx, word [ebp - 0x48]
test edx, edx
jne 0x4083e8
movzx eax, word [ebp - 0x244]
movzx ecx, word [ebp - 0x48]
sub eax, ecx
mov dword [ebp - 0x17e4], eax
jmp 0x408442
movzx edx, word [ebp - 0x244]
movzx eax, word [ebp - 0x48]
cmp edx, eax
je 0x408310
movzx ecx, word [ebp - 0x244]
xor ecx, 0x20
movzx edx, word [ebp - 0x48]
cmp ecx, edx
je 0x408310
movzx eax, word [ebp - 0x244]
movzx ecx, word [ebp - 0x48]
cmp eax, ecx
jge 0x40842c
mov dword [ebp - 0x17e0], 0xffffffff
jmp 0x408436
mov dword [ebp - 0x17e0], 1
mov edx, dword [ebp - 0x17e0]
mov dword [ebp - 0x17e4], edx
cmp dword [ebp - 0x17e4], 0
jne 0x40848b
push esi
push eax
add esp, 4
call 0x40845c
add byte [esi + 0x37], cl
dec esp
inc ecx
dec edi
dec ebp
add esp, 4
jmp 0x408464
sub esi, 0x69c4
xor esi, 0xd63b
pop esi
push edi
push ebx
add esp, 4
xor edi, 0x3d4e
pop edi
mov eax, dword [ebp - 0x564]
mov dword [ebp - 0x7f0], eax
jmp 0x4084f3
push ecx
jmp 0x408492
xor ecx, 0x2d55
sub ecx, 0xf14
pop ecx
push edi
add edi, 0x15401
pop edi
push edi
xor edi, 0x15104
jmp 0x4084b6
and edi, 0x8a96
pop edi
mov ecx, dword [ebp - 0x564]
mov edx, dword [ecx]
mov dword [ebp - 0x564], edx
mov eax, dword [ebp - 0x564]
cmp eax, dword [ebp - 0xdd4]
je 0x4084e9
mov ecx, dword [ebp - 0x564]
cmp dword [ecx + 0x30], 0
jne 0x4082b4
mov dword [ebp - 0x7f0], 0
push ecx
add ecx, 0x82bf
and ecx, 0x2cae
pop ecx
push esi
push edi
add esp, 4
sub esi, 0xfc61
and esi, 0x13a1
pop esi
push ecx
push ecx
add esp, 4
xor ecx, 0x15433
sub ecx, 0x5a7c
pop ecx
cmp dword [ebp - 0x7f0], 0
jne 0x40856f
push esi
jmp 0x408534
call 0x408543
add byte [eax + 0x44], cl
dec eax
cmp eax, dword [ebp + 0x38]
aaa
dec ebp
cmp al, byte [ebx - 0x117efb3c]
adc al, 0x4c
add byte [eax], al
call 0x40855c
add byte [ebp + 0x3b], cl
inc eax
dec ebx
xor eax, 0x40384f4a
inc ebp
add esp, 4
pop esi
mov dword [ebp - 0xb34], 0
jmp 0x409097
push edi
push edx
add esp, 4
sub edi, 0x12e2c
pop edi
push ebx
sub ebx, 0x6092
or ebx, 0xcfc4
call 0x408597
add byte [edx + 0x43], al
inc ebx
inc ebp
dec ebp
dec ebx
cmp ecx, dword [esi + 0x38]
add esp, 4
sub ebx, 0x1370a
pop ebx
mov edx, dword [ebp - 0x7f0]
mov eax, dword [edx + 0x18]
mov dword [ebp - 0x37c], eax
mov dword [ebp - 0x800], 0
mov ecx, dword [ebp - 0x37c]
mov dword [ebp - 0x17e8], ecx
cmp dword [ebp - 0x17e8], 0
jne 0x4085e0
mov edx, dword [ebp - 0x800]
mov dword [ebp - 0x42c], edx
jmp 0x4088d1
mov eax, dword [ebp - 0x17e8]
mov ecx, dword [ebp - 0x37c]
add ecx, dword [eax + 0x3c]
mov dword [ebp - 0x17ec], ecx
jne 0x408608
mov edx, dword [ebp - 0x800]
mov dword [ebp - 0x42c], edx
jmp 0x4088d1
mov eax, 8
imul ecx, eax, 0
mov edx, dword [ebp - 0x17ec]
mov eax, dword [edx + ecx + 0x78]
mov dword [ebp - 0x17f0], eax
cmp dword [ebp - 0x17f0], 0
jne 0x40863a
mov ecx, dword [ebp - 0x800]
mov dword [ebp - 0x42c], ecx
jmp 0x4088d1
mov edx, dword [ebp - 0x37c]
add edx, dword [ebp - 0x17f0]
mov dword [ebp - 0x7f4], edx
jne 0x40865f
mov eax, dword [ebp - 0x800]
mov dword [ebp - 0x42c], eax
jmp 0x4088d1
mov ecx, dword [ebp - 0x7f4]
mov edx, dword [ebp - 0x37c]
add edx, dword [ecx + 0x20]
mov dword [ebp - 0x1b4c], edx
mov eax, dword [ebp - 0x7f4]
mov ecx, dword [ebp - 0x37c]
add ecx, dword [eax + 0x24]
mov dword [ebp - 0x1b50], ecx
mov edx, dword [ebp - 0x7f4]
mov eax, dword [ebp - 0x37c]
add eax, dword [edx + 0x1c]
mov dword [ebp - 0x1b54], eax
mov dword [ebp - 0x7f8], 0
jmp 0x4086b9
mov ecx, dword [ebp - 0x7f8]
add ecx, 1
mov dword [ebp - 0x7f8], ecx
mov edx, dword [ebp - 0x7f4]
mov eax, dword [ebp - 0x7f8]
cmp eax, dword [edx + 0x18]
jae 0x4088c5
mov ecx, dword [ebp - 0x7f8]
mov edx, dword [ebp - 0x1b4c]
mov eax, dword [ebp - 0x37c]
add eax, dword [edx + ecx*4]
mov dword [ebp - 0x7fc], eax
mov ecx, dword [ebp - 0x7f8]
mov edx, dword [ebp - 0x1b50]
movzx eax, word [edx + ecx*2]
mov ecx, dword [ebp - 0x1b54]
mov edx, dword [ebp - 0x37c]
add edx, dword [ecx + eax*4]
mov dword [ebp - 0x1b58], edx
mov dword [ebp - 0x1bc], 0
jmp 0x408729
mov eax, dword [ebp - 0x1bc]
add eax, 1
mov dword [ebp - 0x1bc], eax
mov ecx, dword [ebp - 0x7fc]
add ecx, dword [ebp - 0x1bc]
movsx edx, byte [ecx]
test edx, edx
je 0x4087db
mov eax, dword [ebp - 0x1bc]
movsx ecx, byte [ebp + eax - 0x924]
test ecx, ecx
je 0x4087db
push eax
xor eax, 0x13834
xor eax, 0x111c9
and eax, 0x121a9
sub eax, 0x66bb
pop eax
push ebx
push ebx
add esp, 4
sub ebx, 0x12b09
add ebx, 0x1209a
sub ebx, 0x135f9
pop ebx
mov edx, dword [ebp - 0x7fc]
add edx, dword [ebp - 0x1bc]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x1bc]
movsx edx, byte [ebp + ecx - 0x924]
cmp eax, edx
je 0x4087cd
mov eax, dword [ebp - 0x7fc]
add eax, dword [ebp - 0x1bc]
movsx ecx, byte [eax]
xor ecx, 0x20
mov edx, dword [ebp - 0x1bc]
movsx eax, byte [ebp + edx - 0x924]
cmp ecx, eax
jne 0x4087d4
jmp 0x40871a
jmp 0x4087db
push esi
push eax
add esp, 4
add esi, 0xd26d
pop esi
push ecx
jmp 0x4087ed
or ecx, 0x78de
pop ecx
push esi
push edi
add esp, 4
call 0x408809
add byte [edi], bh
cmp dword [eax + 0x36], ecx
aaa
push eax
inc edi
aas
xor al, 0x83
les eax, [esi + ebx*2]
mov ecx, dword [ebp - 0x7fc]
add ecx, dword [ebp - 0x1bc]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x1bc]
movsx ecx, byte [ebp + eax - 0x924]
cmp edx, ecx
jne 0x40883a
mov dword [ebp - 0xdd8], 0
jmp 0x4088a9
push esi
xor esi, 0x5165
pop esi
push esi
push ecx
add esp, 4
and esi, 0xca0d
add esi, 0x4a1b
call 0x408862
add byte [ebx + 0x41], al
inc eax
inc esp
dec ebp
dec edi
cmp byte [ebp - 0x7d], al
les eax, [ecx + eax*4]
neg byte [ebx - 0x62]
add byte [eax], al
pop esi
mov edx, dword [ebp - 0x7fc]
add edx, dword [ebp - 0x1bc]
movsx eax, byte [edx]
or eax, 0x20
mov ecx, dword [ebp - 0x1bc]
movsx edx, byte [ebp + ecx - 0x924]
or edx, 0x20
cmp eax, edx
jge 0x40889f
mov dword [ebp - 0xdd8], 0xffffffff
jmp 0x4088a9
mov dword [ebp - 0xdd8], 1
cmp dword [ebp - 0xdd8], 0
jne 0x4088c0
mov eax, dword [ebp - 0x1b58]
mov dword [ebp - 0x42c], eax
jmp 0x4088d1
jmp 0x4086aa
mov ecx, dword [ebp - 0x800]
mov dword [ebp - 0x42c], ecx
cmp dword [ebp - 0x42c], 0
je 0x4089ac
push edi
push edx
add esp, 4
add edi, 0x3967
add edi, 0xd936
xor edi, 0x129dd
pop edi
push ebx
sub ebx, 0x105b8
or ebx, 0x132da
pop ebx
push eax
push ebx
add esp, 4
or eax, 0x18546
pop eax
mov edx, dword [ebp - 0x42c]
mov dword [ebp - 0x1b5c], edx
push ebx
push eax
add esp, 4
and ebx, 0x8674
jmp 0x40892e
pop ebx
push ecx
push edi
add esp, 4
jmp 0x40893b
call 0x40894a
add byte [esi + 0x4e], al
cmp dword [ebx + 0x46], ecx
dec edi
xor eax, 0xc4833f4f
add al, 0x59
mov eax, dword [ebp - 0x1b5c]
mov dword [ebp - 0x1b60], eax
lea ecx, [ebp - 0x1884]
push ecx
call dword [ebp - 0x1b60]
test eax, eax
jne 0x4089ac
push edi
sub edi, 0x3468
or edi, 0xa4e0
pop edi
push ebx
or ebx, 0xe850
and ebx, 0x813a
add ebx, 0x27a2
call 0x408999
add byte [edx], dh
dec edx
dec ebp
cmp eax, 0x4c4834d
pop ebx
mov dword [ebp - 0xb34], 0
jmp 0x409097
push edx
push edx
add esp, 4
call 0x4089c0
add byte [ecx + 0x3c], al
aas
cmp al, byte [edx + 0x49]
dec ebx
aaa
cmp al, 0x83
les eax, [edx + ebx*2]
push edx
push edx
add esp, 4
sub edx, 0x5e51
xor edx, 0x13db2
pop edx
push esi
sub esi, 0xaffc
pop esi
mov edx, dword fs:[0x18]
mov dword [ebp - 0x1b64], edx
mov eax, dword [ebp - 0x1b64]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0x1b68], ecx
mov edx, dword [ebp - 0x1b68]
mov dword [ebp - 0x17f4], edx
push esi
push ecx
add esp, 4
and esi, 0x8b2f
xor esi, 0xee88
xor esi, 0x14fef
xor esi, 0x8d8d
pop esi
push esi
and esi, 0xa929
sub esi, 0x6c62
or esi, 0x15a4e
pop esi
cmp dword [ebp - 0x17f4], 0
jne 0x408a50
mov dword [ebp - 0x324], 0
jmp 0x408cf7
mov eax, dword [ebp - 0x17f4]
mov ecx, dword [eax + 0xc]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0xde4], edx
push edx
push ecx
add esp, 4
sub edx, 0x4257
and edx, 0xf29a
pop edx
push edx
add edx, 0x17714
xor edx, 0x18655
add edx, 0x177d4
pop edx
push edi
push edx
add esp, 4
xor edi, 0xb9aa
pop edi
cmp dword [ebp - 0xde4], 0
jne 0x408aac
mov dword [ebp - 0x324], 0
jmp 0x408cf7
mov eax, dword [ebp - 0xde4]
mov dword [ebp - 0x568], eax
push ecx
push esi
add esp, 4
xor ecx, 0xd03c
sub ecx, 0x42b6
pop ecx
push esi
add esi, 0x18404
pop esi
push ebx
push edx
add esp, 4
and ebx, 0x2f3f
xor ebx, 0x4cd5
xor ebx, 0x5bac
pop ebx
lea ecx, [ebp - 0x1884]
mov dword [ebp - 0xde0], ecx
mov edx, dword [ebp - 0x568]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0xddc], eax
xor ecx, ecx
mov word [ebp - 0x248], cx
xor edx, edx
mov word [ebp - 0x4c], dx
push edi
push edi
add esp, 4
jmp 0x408b1e
xor edi, 0x1903
or edi, 0x87ce
jmp 0x408b2f
pop edi
push ecx
or ecx, 0x28b5
jmp 0x408b3f
or ecx, 0x5a95
pop ecx
mov eax, dword [ebp - 0xddc]
mov cx, word [eax]
mov word [ebp - 0x1156], cx
mov edx, dword [ebp - 0xddc]
add edx, 2
mov dword [ebp - 0xddc], edx
mov ax, word [ebp - 0x1156]
mov word [ebp - 0x248], ax
mov ecx, dword [ebp - 0xde0]
mov dx, word [ecx]
mov word [ebp - 0x1158], dx
mov eax, dword [ebp - 0xde0]
add eax, 2
mov dword [ebp - 0xde0], eax
mov cx, word [ebp - 0x1158]
mov word [ebp - 0x4c], cx
push eax
push edx
add esp, 4
jmp 0x408ba8
sub eax, 0x8598
jmp 0x408bb5
pop eax
push edx
call 0x408bc5
add byte [ebx], dh
xor eax, 0x32464639
cmp dword [ebx - 0x3d7efb3c], eax
loope 0x408bff
add dword [eax], eax
pop edx
movzx edx, word [ebp - 0x4c]
test edx, edx
jne 0x408bec
movzx eax, word [ebp - 0x248]
movzx ecx, word [ebp - 0x4c]
sub eax, ecx
mov dword [ebp - 0x17fc], eax
jmp 0x408c46
movzx edx, word [ebp - 0x248]
movzx eax, word [ebp - 0x4c]
cmp edx, eax
je 0x408b14
movzx ecx, word [ebp - 0x248]
xor ecx, 0x20
movzx edx, word [ebp - 0x4c]
cmp ecx, edx
je 0x408b14
movzx eax, word [ebp - 0x248]
movzx ecx, word [ebp - 0x4c]
cmp eax, ecx
jge 0x408c30
mov dword [ebp - 0x17f8], 0xffffffff
jmp 0x408c3a
mov dword [ebp - 0x17f8], 1
mov edx, dword [ebp - 0x17f8]
mov dword [ebp - 0x17fc], edx
cmp dword [ebp - 0x17fc], 0
jne 0x408c8f
push ebx
push eax
add esp, 4
sub ebx, 0x185d
pop ebx
push edx
call 0x408c6b
add byte [edx + 0x32], al
dec esi
cmp eax, dword [ecx + 0x40]
inc esp
dec edi
add esp, 4
and edx, 0x135ea
or edx, 0xc062
jmp 0x408c80
pop edx
mov eax, dword [ebp - 0x568]
mov dword [ebp - 0x324], eax
jmp 0x408cf7
push ecx
push ebx
add esp, 4
add ecx, 0x7d48
and ecx, 0x7466
xor ecx, 0x2bb5
pop ecx
push ecx
or ecx, 0x9a6c
or ecx, 0x976d
or ecx, 0x11f4d
add ecx, 0x10d92
pop ecx
mov ecx, dword [ebp - 0x568]
mov edx, dword [ecx]
mov dword [ebp - 0x568], edx
mov eax, dword [ebp - 0x568]
cmp eax, dword [ebp - 0xde4]
je 0x408ced
mov ecx, dword [ebp - 0x568]
cmp dword [ecx + 0x30], 0
jne 0x408ab8
mov dword [ebp - 0x324], 0
push esi
call 0x408d05
add byte [esi], bh
dec ecx
cmp eax, 0x3842343e
add esp, 4
pop esi
push ecx
xor ecx, 0x1852c
add ecx, 0xb88
sub ecx, 0x17748
pop ecx
push ecx
push ecx
add esp, 4
add ecx, 0x16e4c
pop ecx
mov edx, dword [ebp - 0x324]
mov eax, dword [edx + 0x18]
mov dword [ebp - 0x378], eax
push ecx
or ecx, 0xb2b9
sub ecx, 0x9be1
and ecx, 0x120e4
pop ecx
push ebx
push ecx
add esp, 4
or ebx, 0xa431
pop ebx
push ebx
push esi
add esp, 4
sub ebx, 0x1599d
jmp 0x408d69
pop ebx
mov dword [ebp - 0x784], 0
mov ecx, dword [ebp - 0x378]
mov dword [ebp - 0x1800], ecx
cmp dword [ebp - 0x1800], 0
jne 0x408d9a
mov edx, dword [ebp - 0x784]
mov dword [ebp - 0x56c], edx
jmp 0x40908b
mov eax, dword [ebp - 0x1800]
mov ecx, dword [ebp - 0x378]
add ecx, dword [eax + 0x3c]
mov dword [ebp - 0x1804], ecx
jne 0x408dc2
mov edx, dword [ebp - 0x784]
mov dword [ebp - 0x56c], edx
jmp 0x40908b
mov eax, 8
imul ecx, eax, 0
mov edx, dword [ebp - 0x1804]
mov eax, dword [edx + ecx + 0x78]
mov dword [ebp - 0x1808], eax
cmp dword [ebp - 0x1808], 0
jne 0x408df4
mov ecx, dword [ebp - 0x784]
mov dword [ebp - 0x56c], ecx
jmp 0x40908b
mov edx, dword [ebp - 0x378]
add edx, dword [ebp - 0x1808]
mov dword [ebp - 0x804], edx
jne 0x408e19
mov eax, dword [ebp - 0x784]
mov dword [ebp - 0x56c], eax
jmp 0x40908b
mov ecx, dword [ebp - 0x804]
mov edx, dword [ebp - 0x378]
add edx, dword [ecx + 0x20]
mov dword [ebp - 0x1b6c], edx
mov eax, dword [ebp - 0x804]
mov ecx, dword [ebp - 0x378]
add ecx, dword [eax + 0x24]
mov dword [ebp - 0x1b70], ecx
mov edx, dword [ebp - 0x804]
mov eax, dword [ebp - 0x378]
add eax, dword [edx + 0x1c]
mov dword [ebp - 0x1b74], eax
mov dword [ebp - 0x808], 0
jmp 0x408e73
mov edx, dword [ebp - 0x804]
mov eax, dword [ebp - 0x808]
cmp eax, dword [edx + 0x18]
jae 0x40907f
mov ecx, dword [ebp - 0x808]
mov edx, dword [ebp - 0x1b6c]
mov eax, dword [ebp - 0x378]
add eax, dword [edx + ecx*4]
mov dword [ebp - 0x80c], eax
mov ecx, dword [ebp - 0x808]
mov edx, dword [ebp - 0x1b70]
movzx eax, word [edx + ecx*2]
mov ecx, dword [ebp - 0x1b74]
mov edx, dword [ebp - 0x378]
add edx, dword [ecx + eax*4]
mov dword [ebp - 0x1b78], edx
mov dword [ebp - 0x1c0], 0
jmp 0x408ee3
mov eax, dword [ebp - 0x1c0]
add eax, 1
mov dword [ebp - 0x1c0], eax
mov ecx, dword [ebp - 0x80c]
add ecx, dword [ebp - 0x1c0]
movsx edx, byte [ecx]
test edx, edx
je 0x408f95
mov eax, dword [ebp - 0x1c0]
movsx ecx, byte [ebp + eax - 0xa54]
test ecx, ecx
je 0x408f95
push ecx
and ecx, 0x16ec
pop ecx
push eax
push edx
add esp, 4
sub eax, 0x33f1
and eax, 0x10c40
pop eax
push ecx
push ebx
add esp, 4
add ecx, 0x85ec
pop ecx
push eax
push eax
add esp, 4
xor eax, 0x10379
pop eax
mov edx, dword [ebp - 0x80c]
add edx, dword [ebp - 0x1c0]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x1c0]
movsx edx, byte [ebp + ecx - 0xa54]
cmp eax, edx
je 0x408f87
mov eax, dword [ebp - 0x80c]
add eax, dword [ebp - 0x1c0]
movsx ecx, byte [eax]
xor ecx, 0x20
mov edx, dword [ebp - 0x1c0]
movsx eax, byte [ebp + edx - 0xa54]
cmp ecx, eax
jne 0x408f8e
jmp 0x408ed4
jmp 0x408f95
push eax
xor eax, 0x892e
pop eax
push ebx
push ebx
add esp, 4
add ebx, 0xc66e
sub ebx, 0xb677
pop ebx
push ecx
call 0x408fbd
add byte [eax], bh
xor al, 0x3b
dec edi
dec ecx
dec esp
xor al, byte [ebx - 0x3e7efb3c]
iretd
mov ecx, dword [ebp - 0x784]
mov dword [ebp - 0x56c], ecx
mov edx, dword [ebp - 0x56c]
mov dword [ebp - 0xb34], edx
push ebx
push esi
add esp, 4
call 0x4090aa
add byte [edx + 0x43], cl
cmp al, 0x3c
inc esp
inc ebp
aaa
add esp, 4
and ebx, 0x14f77
call 0x4090bf
add byte [0x45423340], bh
cmp al, byte [ebx + 0x4eb04c4]
dec ebp
inc eax
inc edx
dec edx
pop ebx
mov eax, dword [ebp - 0xb34]
mov dword [ebp - 0x1b7c], eax
lea ecx, [ebp - 0xdec]
push ecx
push 0x40
mov edx, dword [ebp - 0x180c]
push edx
mov eax, dword [ebp - 0x414]
push eax
call dword [ebp - 0x1b7c]
test eax, eax
jne 0x40913c
push edx
or edx, 0x15aeb
call 0x40910c
add byte [ebx], bh
dec edi
aaa
dec esi
xor eax, 0x333b4437
add esp, 4
jmp 0x409116
call 0x409124
add byte [esi], bh
dec eax
xor eax, dword [ebx + 0x3e]
dec esi
dec edi
dec ebx
add esp, 4
pop edx
mov ecx, dword [ebp - 0x818]
mov dword [ebp - 0x1b80], ecx
push 0
call dword [ebp - 0x1b80]
mov edx, dword [ebp - 0x1b84]
mov dword [ebp - 0x814], edx
jmp 0x409159
mov eax, dword [ebp - 0x814]
add eax, 1
mov dword [ebp - 0x814], eax
mov ecx, dword [ebp - 0x814]
cmp ecx, dword [ebp - 0xb38]
jae 0x4091b5
push esi
push eax
add esp, 4
jmp 0x409172
xor esi, 0x9e97
or esi, 0xffa5
pop esi
push ebx
push ecx
add esp, 4
jmp 0x40918d
pop ebx
push edi
jmp 0x409198
pop edi
movzx edx, byte [ebp - 0x3da]
mov eax, dword [ebp - 0x814]
movsx ecx, byte [eax]
sub ecx, edx
mov edx, dword [ebp - 0x814]
mov byte [edx], cl
jmp 0x40914a
mov eax, dword [ebp - 0xb34]
mov dword [ebp - 0x1b88], eax
lea ecx, [ebp - 0xdec]
push ecx
mov edx, dword [ebp - 0xdec]
push edx
mov eax, dword [ebp - 0x180c]
push eax
mov ecx, dword [ebp - 0x414]
push ecx
call dword [ebp - 0x1b88]
test eax, eax
jne 0x40922d
push ecx
push edx
add esp, 4
xor ecx, 0x13a4b
or ecx, 0x9ae8
pop ecx
push eax
and eax, 0xdbea
sub eax, 0x38b9
add eax, 0x124fc
pop eax
push ebx
push ecx
add esp, 4
xor ebx, 0x6ed3
pop ebx
mov edx, dword [ebp - 0x818]
mov dword [ebp - 0x1b8c], edx
push 0
call dword [ebp - 0x1b8c]
push eax
push eax
add esp, 4
sub eax, 0x16a71
jmp 0x409240
pop eax
push ecx
push ecx
add esp, 4
or ecx, 0x5888
jmp 0x409252
xor ecx, 0x162f9
xor ecx, 0x7b70
pop ecx
push edx
mov ecx, 0x10101010
pop edx
push ecx
mov ecx, 0xffff07ff
pop ecx
pop ebp
push edi
mov cl, bl
or ecx, dword [eax + 0x862b4f5]
pop es
pop ebp
mov ch, cl
aam 0x2c
or byte [edi], al
mov ch, dh
adc dword [eax], ecx
pop es
out dx, eax
adc byte [edi], al
pop es
pop es
pop es
push esp
push ebx
cmp edi, dword [0x39473e3c]
mov cl, bl
or esi, edx
or al, 0x51
inc ebx
dec esi
push esi
push esi
int 0x8c
scasd eax, dword es:[edi]
hlt