Function at 0x40ac47
Capabilities:
Contain obfuscated stackstrings

Disassembly:
add esp, 4
and edx, 0x13db3
pop edx
push esi
or esi, 0x171
pop esi
push eax
push ecx
add esp, 4
or eax, 0x129bc
pop eax
imul edx, dword [ebp - 0xfac], 0x138
add edx, 0x44f3644b
imul eax, dword [ebp - 0xfac], 0x138
sub edx, eax
xor edx, 0xabe912
imul edx, dword [ebp - 0xfac]
imul ecx, dword [ebp - 0xfac], 0x138
sub edx, ecx
mov dword [ebp - 0xfb0], edx
push edi
push esi
add esp, 4
xor edi, 0x1833d
or edi, 0x936b
xor edi, 0x35c1
or edi, 0x6dce
pop edi
push eax
push eax
add esp, 4
sub eax, 0xd56c
pop eax
push esi
jmp 0x406e9e
pop esi
mov dword [ebp - 0x10], 1
push esi
push ebx
add esp, 4
or esi, 0x18d0
sub esi, 0x14f64
pop esi
push esi
jmp 0x406ebf
and esi, 0xb0bb
xor esi, 0xee09
pop esi
push eax
push edi
add esp, 4
and eax, 0xb893
pop eax
imul edx, dword [ebp - 0x10], 0x138
add edx, 0x44f3644b
imul eax, dword [ebp - 0x10], 0x138
sub edx, eax
xor edx, 0x153c
imul edx, dword [ebp - 0x10]
imul ecx, dword [ebp - 0x10], 0x138
sub edx, ecx
mov dword [ebp - 0x14], edx
push ebx
jmp 0x406f0a
and ebx, 0xf958
xor ebx, 0xf666
jmp 0x406f1d
pop ebx
push ecx
push eax
add esp, 4
add ecx, 0x12a68
or ecx, 0x15d72
add ecx, 0x86a2
pop ecx
push esi
add esi, 0x4e87
call 0x406f49
add byte [esi + 0x4e3e3f40], bh
add esp, 4
and esi, 0x6052
and esi, 0xbbfe
pop esi
push esi
jmp 0x406f61
sub esi, 0xb991
pop esi
mov dword [ebp - 0x2c], 1
push ecx
push ecx
add esp, 4
and ecx, 0x10a34
sub ecx, 0xf105
or ecx, 0xed67
pop ecx
push eax
add eax, 0x80de
and eax, 0x41eb
or eax, 0x17200
xor eax, 0x8e8a
pop eax
imul edx, dword [ebp - 0x2c], 0x138
add edx, 0x44f3644b
imul eax, dword [ebp - 0x2c], 0x138
sub edx, eax
xor edx, 0
imul edx, dword [ebp - 0x2c]
imul ecx, dword [ebp - 0x2c], 0x138
sub edx, ecx
mov dword [ebp - 0x30], edx
jmp 0x407182
mov ecx, dword [ebp - 0xfb0]
mov edx, dword [ebp - 0xfac]
mov dword [ebp - 0x152c], ecx
mov dword [ebp - 0x1528], edx
push ecx
xor ecx, 0xfa79
and ecx, 0x10274
pop ecx
push ecx
xor ecx, 0x12f82
pop ecx
push edx
add edx, 0xc1b7
pop edx
push edi
xor edi, 0x155ba
xor edi, 0x13b55
sub edi, 0x13306
pop edi
push edx
xor edx, 0x17e56
pop edx
push edi
push eax
add esp, 4
add edi, 0x16272
and edi, 0xf8ca
or edi, 0x13448
pop edi
push esi
push ecx
add esp, 4
sub esi, 0x116f9
or esi, 0xdf88
pop esi
mov eax, dword [ebp - 0x30]
add eax, 0x138
imul ecx, dword [ebp - 0x2c], 0x138
add ecx, 0x44f3644b
imul edx, dword [ebp - 0x2c], 0x138
sub ecx, edx
xor eax, ecx
imul eax, dword [ebp - 0x2c]
mov dword [ebp - 0x1d2c], eax
push edx
push eax
add esp, 4
call 0x40723c
add byte [edx + ecx*2], bh
inc ebp
cmp cl, byte [eax + edx*2 + 0x39]
inc ebx
inc ebp
add esp, 4
pop edx
push ecx
push ecx
add esp, 4
or ecx, 0x2a3c
jmp 0x407253
add ecx, 0xcf5a
pop ecx
mov eax, dword [ebp - 0x152c]
add eax, 0x138
imul ecx, dword [ebp - 0x1528], 0x138
add ecx, 0x44f3644b
imul edx, dword [ebp - 0x1528], 0x138
sub ecx, edx
xor eax, ecx
imul eax, dword [ebp - 0x1528]
mov dword [ebp - 0x1d28], eax
mov eax, dword [ebp - 0x1d28]
mov dword [ebp - 0x1d30], eax
mov ecx, dword [ebp - 0x1d2c]
cmp ecx, dword [ebp - 0x1d30]
jae 0x4072b6
mov dword [ebp - 0x149c], 1
jmp 0x4072c0
mov dword [ebp - 0x149c], 0
mov dl, byte [ebp - 0x149c]
mov byte [ebp - 0x382], dl
movzx eax, byte [ebp - 0x382]
test eax, eax
je 0x40a333
push esi
push edi
add esp, 4
sub esi, 0x62f
call 0x4072f5
add byte [ebx], dh
dec eax
aas
inc ecx
cmp ecx, dword [edi + esi + 0x48]
dec esi
add esp, 4
pop esi
push eax
push ebx
add esp, 4
jmp 0x407306
or eax, 0x262
pop eax
push eax
push esi
add esp, 4
xor eax, 0x855d
pop eax
push esi
push ebx
add esp, 4
jmp 0x407324
or esi, 0x13a0d
or esi, 0xeebc
add esi, 0x18016
pop esi
push edx
xor edx, 0x107a8
pop edx
mov ecx, dword [ebp - 0x30]
add ecx, 0x138
imul edx, dword [ebp - 0x2c], 0x138
add edx, 0x44f3644b
imul eax, dword [ebp - 0x2c], 0x138
sub edx, eax
xor ecx, edx
imul ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x1d34], ecx
mov ecx, dword [ebp - 0x1d34]
mov dword [ebp - 0x1d38], ecx
cmp dword [ebp - 0x1d38], 0x63c1
jne 0x4074ba
push edi
xor edi, 0x1240
sub edi, 0x124f3
add edi, 0x16c1b
pop edi
push edi
push esi
add esp, 4
call 0x4073ae
add byte [eax + eax*2], dh
dec ebx
cmp cl, byte [ecx + 0x3e]
push eax
xor al, 0x45
add esp, 4
add edi, 0x132df
pop edi
mov edx, dword [ebp - 0x14]
add edx, 0x138
imul eax, dword [ebp - 0x10], 0x138
add eax, 0x44f3644b
imul ecx, dword [ebp - 0x10], 0x138
sub eax, ecx
xor edx, eax
imul edx, dword [ebp - 0x10]
mov dword [ebp - 0x1d3c], edx
mov edx, dword [ebp - 0x1d3c]
mov dword [ebp - 0x1d40], edx
mov eax, dword [ebp - 0x1d40]
sub eax, 0x898
mov dword [ebp - 0x1d44], eax
mov dword [ebp - 0xfb4], 1
push ebx
push esi
add esp, 4
sub ebx, 0x814e
xor ebx, 0x4640
pop ebx
push esi
push edx
add esp, 4
jmp 0x407426
pop esi
push ecx
sub ecx, 0x956c
pop ecx
push edi
push edx
add esp, 4
xor edi, 0x3a58
pop edi
imul ecx, dword [ebp - 0xfb4], 0x138
add ecx, 0x44f3644b
imul edx, dword [ebp - 0xfb4], 0x138
sub ecx, edx
xor ecx, dword [ebp - 0x1d44]
imul ecx, dword [ebp - 0xfb4]
imul eax, dword [ebp - 0xfb4], 0x138
sub ecx, eax
mov dword [ebp - 0xfb8], ecx
mov ecx, dword [ebp - 0xfb8]
mov edx, dword [ebp - 0xfb4]
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x10], edx
push ecx
push edi
add esp, 4
add ecx, 0xdcb0
jmp 0x407498
sub ecx, 0x9cc9
add ecx, 0x8191
pop ecx
push edi
push ecx
add esp, 4
call 0x4074b6
add byte [esp + ecx*2], dh
xor eax, 0x83424c42
les eax, [edi + ebx*2]
push edx
and edx, 0xe5e4
and edx, 0x100a7
pop edx
push edi
add edi, 0x9c67
or edi, 0xdf74
xor edi, 0x17013
pop edi
push esi
and esi, 0x586e
jmp 0x4074eb
pop esi
mov eax, dword [ebp - 0x14]
add eax, 0x138
imul ecx, dword [ebp - 0x10], 0x138
add ecx, 0x44f3644b
imul edx, dword [ebp - 0x10], 0x138
sub ecx, edx
xor eax, ecx
imul eax, dword [ebp - 0x10]
mov dword [ebp - 0x1d48], eax
mov eax, dword [ebp - 0x1d48]
mov dword [ebp - 0x1db8], eax
lea ecx, [ebp - 0x928]
mov dword [ebp - 0x3bc], ecx
mov edx, dword [ebp - 0x3bc]
mov dword [edx + 4], 1
push ecx
xor ecx, 0x19b0
xor ecx, 0x125a8
pop ecx
push esi
push ebx
add esp, 4
or esi, 0x1828d
pop esi
push edx
push edi
add esp, 4
add edx, 0x4321
sub edx, 0xeb87
xor edx, 0x10316
pop edx
mov eax, dword [ebp - 0x3bc]
imul ecx, dword [eax + 4], 0x138
add ecx, 0x44f3644b
mov edx, dword [ebp - 0x3bc]
imul eax, dword [edx + 4], 0x138
sub ecx, eax
xor ecx, 0x23
mov edx, dword [ebp - 0x3bc]
imul ecx, dword [edx + 4]
mov eax, dword [ebp - 0x3bc]
invalid
jmp [ecx + 0x50]
add al, 0x38
add dword [eax], eax
add byte [ebx], ch
retf 0x858b
inc esp
cld
invalid
dec dword [ecx + 0x448d8b08]
cld
invalid
dec dword [ecx - 0x1f5773]
call dword [eax - 0x15]
push es
sub eax, 0x14aa7
add eax, 0xf54d
pop eax
push ebx
sub ebx, 0x1742f
or ebx, 0x1def
or ebx, 0x1508
jmp 0x4075f0
pop ebx
mov dword [ebp - 0x14a4], 1
push edi
push esi
add esp, 4
sub edi, 0x173a6
jmp 0x40760f
xor edi, 0xc9dd
pop edi
push edi
sub edi, 0x8920
call 0x407629
add byte [esi + 0x41], al
inc esi
cmp dh, byte [0x4c48334]
pop edi
mov dword [ebp - 0x1f5c], 0x38
mov dword [ebp - 0x1f60], 0xe6
mov dword [ebp - 0x1f64], 0x6e
mov dword [ebp - 0x1f68], 0x6e
mov dword [ebp - 0x1f6c], 0x78
mov dword [ebp - 0x1530], 1
push ecx
sub ecx, 0xa17d
xor ecx, 0x1868e
call 0x407685
add byte [edi + 0x4e504d4b], bh
xor eax, 0xc4834f48
add al, 0x59
push ebx
push edx
add esp, 4
xor ebx, 0x89a8
and ebx, 0x7246
pop ebx
imul edx, dword [ebp - 0x1530], 0x138
add edx, 0x44f3644b
imul eax, dword [ebp - 0x1530], 0x138
sub edx, eax
xor edx, 0xe6
imul edx, dword [ebp - 0x1530]
imul ecx, dword [ebp - 0x1530], 0x138
sub edx, ecx
mov dword [ebp - 0x1534], edx
push edi
add edi, 0x2c3
sub edi, 0x2822
and edi, 0x7a01
or edi, 0x13363
pop edi
push eax
push ecx
add esp, 4
xor eax, 0x16dad
and eax, 0x135af
and eax, 0xf7df
pop eax
push eax
xor eax, 0x15c03
pop eax
push edi
push edi
add esp, 4
and edi, 0x3fd7
xor edi, 0x1633
add edi, 0x3ebe
pop edi
push ecx
push eax
add esp, 4
jmp 0x407733
and ecx, 0x1256d
pop ecx
mov edx, dword [ebp - 0x928]
add edx, 0x138
imul eax, dword [ebp - 0x924], 0x138
add eax, 0x44f3644b
imul ecx, dword [ebp - 0x924], 0x138
sub eax, ecx
xor edx, eax
imul edx, dword [ebp - 0x924]
mov dword [ebp - 0x1d4c], edx
mov edx, dword [ebp - 0x1d4c]
mov dword [ebp - 0x1d50], edx
mov eax, dword [ebp - 0x1d50]
sub eax, 0x6e
mov dword [ebp - 0x1d54], eax
mov dword [ebp - 0xa08], 1
push eax
push edx
add esp, 4
jmp 0x4077a0
xor eax, 0xe308
or eax, 0x8074
jmp 0x4077b4
pop eax
push eax
push edi
add esp, 4
and eax, 0x55b2
and eax, 0xb354
pop eax
imul ecx, dword [ebp - 0xa08], 0x138
add ecx, 0x44f3644b
imul edx, dword [ebp - 0xa08], 0x138
sub ecx, edx
xor ecx, dword [ebp - 0x1d54]
imul ecx, dword [ebp - 0xa08]
imul eax, dword [ebp - 0xa08], 0x138
sub ecx, eax
mov dword [ebp - 0xa0c], ecx
push ecx
xor ecx, 0x7f46
or ecx, 0x14448
xor ecx, 0x10c54
pop ecx
push ebx
push ecx
add esp, 4
and ebx, 0x10321
and ebx, 0xeefa
pop ebx
push eax
push edx
add esp, 4
add eax, 0x16ee9
pop eax
mov ecx, dword [ebp - 0x928]
add ecx, 0x138
imul edx, dword [ebp - 0x924], 0x138
add edx, 0x44f3644b
imul eax, dword [ebp - 0x924], 0x138
sub edx, eax
xor ecx, edx
imul ecx, dword [ebp - 0x924]
mov dword [ebp - 0x1d58], ecx
mov ecx, dword [ebp - 0x1d58]
mov dword [ebp - 0x1d5c], ecx
mov edx, dword [ebp - 0x1d5c]
add edx, 0x38
mov dword [ebp - 0x1d60], edx
mov dword [ebp - 0xa10], 1
push esi
push edi
add esp, 4
or esi, 0x8414
sub esi, 0xecd6
xor esi, 0x10fbf
pop esi
push edi
xor edi, 0xff3
pop edi
push ecx
push ecx
add esp, 4
xor ecx, 0x10cf3
add ecx, 0x12abc
pop ecx
imul eax, dword [ebp - 0xa10], 0x138
add eax, 0x44f3644b
imul ecx, dword [ebp - 0xa10], 0x138
sub eax, ecx
xor eax, dword [ebp - 0x1d60]
imul eax, dword [ebp - 0xa10]
imul edx, dword [ebp - 0xa10], 0x138
sub eax, edx
mov dword [ebp - 0xa14], eax
push ebx
sub ebx, 0xf589
pop ebx
push ebx
push esi
add esp, 4
call 0x407918
add byte [ebx], bh
cmp al, 0x38
dec edi
push eax
inc esp
xor eax, 0xc4834335
add al, 0x81
jecxz 0x40795e
push es
add dword [eax], eax
or ebx, 0x6c36
xor ebx, 0x16db4
pop ebx
push ebx
push edi
add esp, 4
sub ebx, 0x154b1
pop ebx
push ebx
call 0x40794b
add byte [eax], bh
xor al, 0x49
inc ebp
dec ecx
push eax
push eax
dec esi
inc esp
aas
add esp, 4
jmp 0x407953
xor ebx, 0x94e
add ebx, 0x1e2e
pop ebx
mov dword [ebp - 0x2d0], 1
push esi
or esi, 0x172f0
sub esi, 0xf70c
xor esi, 0x1330c
or esi, 0x160e2
pop esi
push ecx
push edi
add esp, 4
xor ecx, 0x16f07
add ecx, 0xb6bb
xor ecx, 0x13bca
pop ecx
imul eax, dword [ebp - 0x2d0], 0x138
add eax, 0x44f3644b
imul ecx, dword [ebp - 0x2d0], 0x138
sub eax, ecx
xor eax, 2
imul eax, dword [ebp - 0x2d0]
imul edx, dword [ebp - 0x2d0], 0x138
sub eax, edx
mov dword [ebp - 0x2d4], eax
push esi
call 0x4079e3
add byte [esi], dh
inc ecx
inc esp
inc ecx
aaa
cmp al, 0x41
inc ebp
aas
add esp, 4
pop esi
push esi
jmp 0x4079f0
add byte [ebx - 0x39], bl
test dword [eax], esi
std
invalid
add esi, 0x12801
add esi, 0x149cf
jmp 0x407a04
pop esi
mov eax, dword [ebp - 0x928]
mov ecx, dword [ebp - 0x924]
mov dword [ebp - 0x254], eax
mov dword [ebp - 0x250], ecx
jmp 0x407bf3
push eax
push edi
add esp, 4
and eax, 0x275
call 0x407a3c
add byte [0x423a3236], bh
cmp dword ss:[eax], edi
xor al, byte [ebx - 0x377efb3c]
cdq
add dword cs:[eax], eax
pop eax
push esi
add esi, 0x9b4e
or esi, 0x1219d
pop esi
mov edx, dword [ebp - 0x254]
add edx, 0x138
imul eax, dword [ebp - 0x250], 0x138
add eax, 0x44f3644b
imul ecx, dword [ebp - 0x250], 0x138
sub eax, ecx
xor edx, eax
imul edx, dword [ebp - 0x250]
mov dword [ebp - 0x1d68], edx
push edi
push edi
add esp, 4
sub edi, 0xbbdb
add edi, 0xb320
add edi, 0x8644
xor edi, 0x137
pop edi
push edi
and edi, 0x16f10
pop edi
push ebx
push ecx
add esp, 4
xor ebx, 0x776b
pop ebx
mov edx, dword [ebp - 0x1d68]
sub edx, 1
mov dword [ebp - 0x14a0], edx
push esi
add esi, 0x9886
xor esi, 0x4918
pop esi
push esi
push esi
add esp, 4
xor esi, 0x93a5
or esi, 0xf015
or esi, 0xff85
pop esi
push esi
push eax
add esp, 4
xor esi, 0xf6ca
pop esi
push ecx
xor ecx, 0xc2a5
call 0x407b14
add byte [edi + 0x3e], cl
inc esp
cmp al, 0x34
dec ebp
xor eax, 0x833c3533
les eax, [ecx + ebx*2]
push esi
sub esi, 0x140e
or esi, 0x1a3
jmp 0x407b2e
pop esi
imul eax, dword [ebp - 0x250], 0x138
add eax, 0x44f3644b
imul ecx, dword [ebp - 0x250], 0x138
sub eax, ecx
xor eax, dword [ebp - 0x14a0]
imul eax, dword [ebp - 0x250]
imul edx, dword [ebp - 0x250], 0x138
sub eax, edx
mov dword [ebp - 0x254], eax
mov eax, dword [ebp - 0x14a0]
imul eax, dword [ebp - 0x250]
mov dword [ebp - 0x1d6c], eax
mov dword [ebp - 0x1538], 1
push edx
push ebx
add esp, 4
or edx, 0x13dce
pop edx
push edi
push edx
add esp, 4
add edi, 0x146e
or edi, 0x1516e
jmp 0x407ba9
add edi, 0x822f
pop edi
push eax
add eax, 0x3e9f
pop eax
imul ecx, dword [ebp - 0x1538], 0x138
add ecx, 0x44f3644b
imul edx, dword [ebp - 0x1538], 0x138
sub ecx, edx
xor ecx, dword [ebp - 0x1d6c]
imul ecx, dword [ebp - 0x1538]
imul eax, dword [ebp - 0x1538], 0x138
sub ecx, eax
mov dword [ebp - 0x153c], ecx
push edx
push edx
add esp, 4
xor edx, 0x103ee
add edx, 0x173b5
pop edx
push ebx
and ebx, 0x4d10
xor ebx, 0xf611
pop ebx
push esi
push ecx
add esp, 4
sub esi, 0xe5be
and esi, 0xd529
pop esi
mov ecx, dword [ebp - 0x254]
add ecx, 0x138
imul edx, dword [ebp - 0x250], 0x138
add edx, 0x44f3644b
imul eax, dword [ebp - 0x250], 0x138
sub edx, eax
xor ecx, edx
imul ecx, dword [ebp - 0x250]
mov dword [ebp - 0x1d70], ecx
mov ecx, dword [ebp - 0x1d70]
mov dword [ebp - 0x1d74], ecx
cmp dword [ebp - 0x1d74], 0
jbe 0x408169
push edx
or edx, 0x15256
pop edx
push ebx
push edx
add esp, 4
or ebx, 0x14b44
pop ebx
push eax
call 0x407c97
add byte [esi], dh
dec ebp
dec ebp
cmp al, byte ds:[ebp + 0x4f]
add esp, 4
or eax, 0x20b8
or eax, 0xc19e
pop eax
mov edx, dword [ebp - 0x254]
add edx, 0x138
imul eax, dword [ebp - 0x250], 0x138
add eax, 0x44f3644b
imul ecx, dword [ebp - 0x250], 0x138
sub eax, ecx
xor edx, eax
imul edx, dword [ebp - 0x250]
mov dword [ebp - 0x1d78], edx
mov edx, dword [ebp - 0x1d78]
mov dword [ebp - 0x1d84], edx
push edi
push edi
add esp, 4
sub edi, 0x147b0
sub edi, 0xf07a
or edi, 0x3bea
pop edi
push edi
or edi, 0x7200
sub edi, 0x6b68
pop edi
push eax
push esi
add esp, 4
and eax, 0xe970
pop eax
mov eax, dword [ebp - 0xa0c]
add eax, 0x138
imul ecx, dword [ebp - 0xa08], 0x138
add ecx, 0x44f3644b
imul edx, dword [ebp - 0xa08], 0x138
sub ecx, edx
xor eax, ecx
imul eax, dword [ebp - 0xa08]
mov dword [ebp - 0x1d7c], eax
mov eax, dword [ebp - 0x1d7c]
mov dword [ebp - 0x1d80], eax
mov ecx, dword [ebp - 0x14a4]
imul ecx, dword [ebp - 0x1d80]
cmp dword [ebp - 0x1d84], ecx
jne 0x407eec
push ecx
push ebx
add esp, 4
and ecx, 0x1e9a
pop ecx
push edi
call 0x407d92
add byte [0x3842494c], dh
cmp ecx, dword [edi + 0x3e]
dec ebx
add esp, 4
sub edi, 0x13f9d
sub edi, 0xb3f5
add edi, 0xecbe
pop edi
push esi
push edi
add esp, 4
sub esi, 0x18180
add esi, 0xda08
add esi, 0x8936
sub esi, 0x127e6
pop esi
push ebx
push ebx
add esp, 4
and ebx, 0x17c8d
pop ebx
push edx
add edx, 0x509
pop edx
mov edx, dword [ebp - 0x2d4]
add edx, 0x138
imul eax, dword [ebp - 0x2d0], 0x138
add eax, 0x44f3644b
imul ecx, dword [ebp - 0x2d0], 0x138
sub eax, ecx
xor edx, eax
imul edx, dword [ebp - 0x2d0]
mov dword [ebp - 0x1d88], edx
mov edx, dword [ebp - 0x1d88]
mov dword [ebp - 0x1d8c], edx
mov eax, dword [ebp - 0x1d8c]
sub eax, 1
mov dword [ebp - 0x1d90], eax
mov dword [ebp - 0xfbc], 1
push edi
push edx
add esp, 4
or edi, 0x4d97
sub edi, 0x111e
or edi, 0xbdb0
jmp 0x407e52
pop edi
push ebx
push edi
add esp, 4
or ebx, 0x150be
pop ebx
push ebx
xor ebx, 0x6817
pop ebx
imul ecx, dword [ebp - 0xfbc], 0x138
add ecx, 0x44f3644b
imul edx, dword [ebp - 0xfbc], 0x138
sub ecx, edx
xor ecx, dword [ebp - 0x1d90]
imul ecx, dword [ebp - 0xfbc]
imul eax, dword [ebp - 0xfbc], 0x138
sub ecx, eax
mov dword [ebp - 0xfc0], ecx
mov ecx, dword [ebp - 0xfc0]
mov edx, dword [ebp - 0xfbc]
mov dword [ebp - 0x2d4], ecx
mov dword [ebp - 0x2d0], edx
push edx
push edi
add esp, 4
jmp 0x407ec8
pop edx
push ecx
push esi
add esp, 4
jmp 0x407ed3
sub ecx, 0x9b0
pop ecx
push ebx
push edi
add esp, 4
add ebx, 0x328a
or ebx, 0x177fc
pop ebx
push ebx
push ecx
add esp, 4
and ebx, 0x55d7
pop ebx
push esi
xor esi, 0xe05e
jmp 0x407f06
jmp 0x407f0f
and esi, 0x3539
pop esi
push edx
xor edx, 0x551e
pop edx
mov eax, dword [ebp - 0x254]
add eax, 0x138
imul ecx, dword [ebp - 0x250], 0x138
add ecx, 0x44f3644b
imul edx, dword [ebp - 0x250], 0x138
sub ecx, edx
xor eax, ecx
imul eax, dword [ebp - 0x250]
mov dword [ebp - 0x1d94], eax
mov eax, dword [ebp - 0x1d94]
mov dword [ebp - 0x1da0], eax
push edx
and edx, 0x95d2
or edx, 0xef25
or edx, 0x7859
pop edx
push edi
push edx
add esp, 4
call 0x407f88
add byte [ebx], bh
inc ecx
dec esp
inc edx
aaa
inc esi
cmp byte [ebx + 0x4e], cl
add esp, 4
and edi, 0x60f1
pop edi
mov ecx, dword [ebp - 0xa14]
add ecx, 0x138
imul edx, dword [ebp - 0xa10], 0x138
add edx, 0x44f3644b
imul eax, dword [ebp - 0xa10], 0x138
sub edx, eax
xor ecx, edx
imul ecx, dword [ebp - 0xa10]
mov dword [ebp - 0x1d98], ecx
mov ecx, dword [ebp - 0x1d98]
mov dword [ebp - 0x1d9c], ecx
mov edx, dword [ebp - 0x14a4]
imul edx, dword [ebp - 0x1d9c]
cmp dword [ebp - 0x1da0], edx
jne 0x408164
push edx
or edx, 0x173a0
add edx, 0x5517
pop edx
push edx
push edi
add esp, 4
call 0x408010
add byte [eax + 0x47], al
cmp eax, 0x45443243
dec ebp
xor eax, dword [ebx - 0x3d7efb3c]
invalid
jmp 0x407a22
push ebx
or ebx, 0xdcee
add ebx, 0x13a0b
xor ebx, 0x183f2
sub ebx, 0x43e6
pop ebx
push edi
push edx
add esp, 4
xor edi, 0xea4a
pop edi
push edx
push edi
add esp, 4
sub edx, 0xe1aa
pop edx
mov ecx, dword [ebp - 0x2d4]
mov edx, dword [ebp - 0x2d0]
mov dword [ebp - 0x1f0c], ecx
mov dword [ebp - 0x1f08], edx
lea eax, [ebp - 0x1f0c]
mov dword [ebp - 0x1db0], eax
mov ecx, dword [ebp - 0x1db0]
mov dword [ebp - 0xa74], ecx
push ecx
xor ecx, 0x148c8
or ecx, 0x9579
sub ecx, 0xa1cd
xor ecx, 0xca53
pop ecx
push edx
push edx
add esp, 4
sub edx, 0x18032
mov dword [ebp - 0x3c0], 0
call 0x40a342
mov eax, 0x13379797
pop eax
mov dword [ebp - 0x3c0], eax
push esi
and esi, 0xbc89
xor esi, 0xa9f2
and esi, 0x15f55
pop esi
push edi
push edi
add esp, 4
and edi, 0x4219
add edi, 0x117bf
add edi, 0x11d16
or edi, 0x4cd0
pop edi
mov ecx, dword [ebp - 0x1fa0]
mov dword [ebp - 0x14b8], ecx
push ebx
push edi
add esp, 4
sub ebx, 0x17e36
call 0x40a3a3
add byte [ebp + 0x37], cl
aaa
cmp eax, dword [ecx + 0x37]
add esp, 4
pop ebx
push eax
sub eax, 0x173db
add eax, 0xdbc1
pop eax
push ebx
jmp 0x40a3bd
pop ebx
mov edx, dword [ebp - 0x14]
add edx, 0x138
imul eax, dword [ebp - 0x10], 0x138
add eax, 0x44f3644b
imul ecx, dword [ebp - 0x10], 0x138
sub eax, ecx
xor edx, eax
imul edx, dword [ebp - 0x10]
mov dword [ebp - 0x14b8], edx
mov edx, dword [ebp - 0x3c0]
mov dword [ebp - 0x1ef8], edx
mov eax, dword [ebp - 0x1ef8]
add eax, dword [ebp - 0x14b8]
mov dword [ebp - 0x3c0], eax
push esi
and esi, 0x78c1
or esi, 0x2260
jmp 0x40a418
pop esi
push edi
jmp 0x40a423
jmp 0x40a42b
xor edi, 0x9554
or edi, 0x4f55
pop edi
mov byte [ebp - 0xb78], 0x52
mov byte [ebp - 0xb77], 0xb9
mov byte [ebp - 0xb76], 0x10
mov byte [ebp - 0xb75], 0x10
mov byte [ebp - 0xb74], 0x10
mov byte [ebp - 0xb73], 0x10
mov byte [ebp - 0xb72], 0x5a
push ecx
add ecx, 0x10daf
pop ecx
push ecx
call 0x40a482
add byte [eax + 0x47], cl
aas
xor al, 0x4a
cmp dh, byte [edx]
xor al, 0x33
dec edi
add esp, 4
pop ecx
push eax
jmp 0x40a48e
jmp 0x40a494
xor eax, 0x66e0
pop eax
mov byte [ebp - 0xb80], 0x52
mov byte [ebp - 0xb7f], 0xb9
mov byte [ebp - 0xb7e], 0x20
mov byte [ebp - 0xb7d], 0x20
mov byte [ebp - 0xb7c], 0x20
mov byte [ebp - 0xb7b], 0x20
mov byte [ebp - 0xb7a], 0x5a
push edx
xor edx, 0x7641
and edx, 0x6f1d
pop edx
push esi
jmp 0x40a4e4
sub esi, 0xf7ca
call 0x40a4fa
add byte [eax + 0x3f], dl
xor al, byte [esi + 0x3a]
inc ebx
inc ebp
cmp dword ss:[ebx + eax*4 - 0x3c], eax
add al, 0x5e
mov dword [ebp - 0x1fa4], 0xe
push edi
jmp 0x40a511
sub edi, 0xf55e
call 0x40a526
add byte [eax + 0x35], al
xor eax, 0x46384a49
inc edi
inc ebp
add esp, 4
pop edi
push edx
or edx, 0x2bd4
pop edx
push ebx
sub ebx, 0x92af
pop ebx
mov ecx, 1
imul edx, ecx, 0
lea eax, [ebp + edx - 0xb78]
mov dword [ebp - 0x14bc], eax
push eax
push edi
add esp, 4
or eax, 0x3227
pop eax
push ecx
and ecx, 0x1380e
add ecx, 0x13d04
and ecx, 0x55a7
sub ecx, 0x11c87
pop ecx
push eax
push esi
add esp, 4
xor eax, 0x10678
pop eax
mov dword [ebp - 0x1fa8], 0xffffffff
push edx
and edx, 0x17e9a
or edx, 0x2c37
add edx, 0xc0a2
call 0x40a5ad
add byte [ebx + 0x38], cl
dec esi
xor dh, byte ds:[0x8333353b]
les eax, [edx + ebx*2]
push eax
push edi
add esp, 4
and eax, 0xab2f
pop eax
mov ecx, dword [ebp - 0x3c0]
mov dword [ebp - 0x4cc], ecx
jmp 0x40a5da
mov edx, dword [ebp - 0x4cc]
add edx, 1
mov dword [ebp - 0x4cc], edx
push edi
jmp 0x40a5e2
jmp 0x40a5e9
sub edi, 0x1d26
pop edi
push edi
push edi
add esp, 4
call 0x40a602
add byte [eax + 0x34], al
cmp byte [ecx], bh
cmp al, 0x3d
dec esp
add esp, 4
add edi, 0x15764
pop edi
mov eax, dword [ebp - 0x4cc]
sub eax, dword [ebp - 0x3c0]
cmp eax, 0xffffffff
jb 0x40a654
push edx
push esi
add esp, 4
and edx, 0xcf73
sub edx, 0x39bd
add edx, 0x18237
sub edx, 0x5332
pop edx
push edx
sub edx, 0x13afb
pop edx
push ebx
push ebx
add esp, 4
add ebx, 0x17fee
pop ebx
jmp 0x40a882
mov dword [ebp - 0xc08], 7
mov ecx, dword [ebp - 0x4cc]
mov dword [ebp - 0xa68], ecx
push ebx
push esi
add esp, 4
and ebx, 0xa13f
call 0x40a684
add byte [ecx + 0x3a], cl
cmp byte [ecx], bh
inc edi
xor al, 0x3a
dec esi
dec ebp
add esp, 4
pop ebx
push edi
sub edi, 0x11bed
add edi, 0x11f13
xor edi, 0x14557
pop edi
mov edx, dword [ebp - 0x14bc]
mov dword [ebp - 0xa64], edx
mov dword [ebp - 0xc0c], 0
mov eax, dword [ebp - 0x4cc]
cmp eax, dword [ebp - 0x14bc]
jne 0x40a703
push eax
push edx
add esp, 4
call 0x40a6d3
add byte [esi + 0x4d], al
aaa
cmp al, 0x32
cmp al, 0x41
dec ecx
add esp, 4
and eax, 0x1690f
or eax, 0x69e2
pop eax
push esi
jmp 0x40a6eb
jmp 0x40a6f1
pop esi
mov ecx, dword [ebp - 0xc0c]
mov dword [ebp - 0x14c4], ecx
jmp 0x40a834
cmp dword [ebp - 0xc08], 0
jle 0x40a828
push ebx
push eax
add esp, 4
xor ebx, 0xc7bb
call 0x40a72a
add byte [esi + 0x3d], al
inc edi
cmp byte [eax], bh
dec esp
dec edi
dec edi
xor al, byte [ebx - 0x1c7efb3c]
mov al, byte [0x5b000180]
push eax
xor eax, 0x12fb2
xor eax, 0x135e6
pop eax
mov edx, dword [ebp - 0xa68]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0xa64]
movzx edx, byte [ecx]
cmp eax, edx
je 0x40a7c4
push esi
push eax
add esp, 4
or esi, 0x573a
jmp 0x40a769
pop esi
push edx
add edx, 0x81e4
and edx, 0x4b8d
and edx, 0x467a
pop edx
push ebx
push edi
add esp, 4
and ebx, 0x3eb1
pop ebx
mov eax, dword [ebp - 0xa68]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0xa64]
movzx eax, byte [edx]
cmp ecx, eax
jle 0x40a7ac
mov dword [ebp - 0x14c0], 1
jmp 0x40a7b6
mov dword [ebp - 0x14c0], 0xffffffff
mov ecx, dword [ebp - 0x14c0]
mov dword [ebp - 0xc0c], ecx
jmp 0x40a828
push esi
xor esi, 0x9a32
pop esi
push edx
push ebx
add esp, 4
xor edx, 0xce94
call 0x40a7e3
add byte [ebp + 0x34], cl
inc ebx
xor ecx, dword [esi + 0x49]
add esp, 4
call 0x40a7f2
add byte [ecx + 0x50], al
inc edx
dec eax
dec eax
dec ebp
add esp, 4
pop edx
mov edx, dword [ebp - 0xc08]
sub edx, 1
mov dword [ebp - 0xc08], edx
mov eax, dword [ebp - 0xa68]
add eax, 1
mov dword [ebp - 0xa68], eax
mov ecx, dword [ebp - 0xa64]
add ecx, 1
mov dword [ebp - 0xa64], ecx
jmp 0x40a703
mov edx, dword [ebp - 0xc0c]
mov dword [ebp - 0x14c4], edx
cmp dword [ebp - 0x14c4], 0
jne 0x40a87d
push edx
push eax
add esp, 4
call 0x40a852
add byte [esi + 0x32], cl
cmp byte [0x46343b44], bh
cmp byte [ebx - 0x7d], cl
les eax, [ecx + eax*4]
loop 0x40a895
push esi
add dword [eax], eax
sub edx, 0x4a55
pop edx
push edx
xor edx, 0x1193c
jmp 0x40a86e
pop edx
mov eax, dword [ebp - 0x4cc]
mov dword [ebp - 0x3cc], eax
jmp 0x40a8be
jmp 0x40a5cb
push edx
and edx, 0xeaa
pop edx
push esi
push esi
add esp, 4
call 0x40a89e
add byte [eax + 0x49], al
inc eax
dec ecx
inc edi
xor bh, byte [ebx]
xor cl, byte ss:[ecx + 0x44]
add esp, 4
pop esi
push ebx
push edi
add esp, 4
add ebx, 0x14973
sub ebx, 0xf623
pop ebx
mov dword [ebp - 0x3cc], 0
push edx
jmp 0x40a8c6
or edx, 0xb64b
pop edx
push ecx
call 0x40a8de
add byte [edx], dh
dec ebp
cmp al, 0x3b
inc esi
xor eax, dword [edx + 0x43]
xor edx, dword [eax - 0x7d]
les eax, [ecx + ebx*2]
push ebx
add ebx, 0xee9a
add ebx, 0x9244
pop ebx
push eax
push esi
add esp, 4
or eax, 0xb649
jmp 0x40a903
pop eax
push ebx
push ecx
add esp, 4
add ebx, 0xd76f
add ebx, 0x15d85
sub ebx, 0x1694f
and ebx, 0x4fb7
pop ebx
mov ecx, 1
imul edx, ecx, 0
lea eax, [ebp + edx - 0xb80]
mov dword [ebp - 0x14c8], eax
push edi
push ebx
add esp, 4
add edi, 0x504b
xor edi, 0xf4df
or edi, 0xd6f0
or edi, 0x603c
pop edi
push edi
push eax
add esp, 4
or edi, 0x7b95
pop edi
push esi
add esi, 0xa1f7
pop esi
mov dword [ebp - 0x1fac], 0xffffffff
push edi
push edi
add esp, 4
or edi, 0x367
or edi, 0x102e5
sub edi, 0xfab8
xor edi, 0x29b6
pop edi
push eax
push ebx
add esp, 4
add eax, 0x546a
jmp 0x40a9a4
pop eax
mov ecx, dword [ebp - 0x3c0]
mov dword [ebp - 0x4d0], ecx
jmp 0x40a9c2
mov edx, dword [ebp - 0x4d0]
add edx, 1
mov dword [ebp - 0x4d0], edx
push esi
call 0x40a9cf
add byte [esp + esi + 0x49], al
cmp ecx, dword [ebp + eax*2 - 0x7d]
les eax, [esi + ebx*2]
push ecx
push edx
add esp, 4
jmp 0x40a9e1
xor ecx, 0x12423
or ecx, 0xa70c
jmp 0x40a9f3
pop ecx
mov eax, dword [ebp - 0x4d0]
sub eax, dword [ebp - 0x3c0]
cmp eax, 0xffffffff
jb 0x40aa3c
push ecx
or ecx, 0x12289
sub ecx, 0xb7c9
call 0x40aa1f
add byte [esi + 0x46], al
cmp ecx, dword [ebx + 0x36]
cmp eax, 0x4c4834e
or ecx, 0x394e
pop ecx
push ebx
xor ebx, 0x3cf7
xor ebx, 0xe93a
pop ebx
jmp 0x40ac6a
mov dword [ebp - 0xc10], 7
mov ecx, dword [ebp - 0x4d0]
mov dword [ebp - 0xa60], ecx
push edi
jmp 0x40aa58
call 0x40aa67
add byte [0x4d46463b], bh
inc ebx
inc edx
dec esp
xor al, byte [ebx + 0x8e804c4]
add byte [eax], al
add byte [eax], al
inc ecx
inc esi
inc eax
dec esp
inc edi
inc ebp
dec edx
add esp, 4
jmp 0x40aa83
pop edi
mov edx, dword [ebp - 0x14c8]
mov dword [ebp - 0x9f0], edx
mov dword [ebp - 0xc14], 0
mov eax, dword [ebp - 0x4d0]
cmp eax, dword [ebp - 0x14c8]
jne 0x40aaeb
push edi
sub edi, 0x8f90
or edi, 0x633f
add edi, 0x5c39
sub edi, 0x176f8
pop edi
push edi
push esi
add esp, 4
or edi, 0x586
and edi, 0x132ed
add edi, 0x14b42
pop edi
mov ecx, dword [ebp - 0xc14]
mov dword [ebp - 0x14d0], ecx
jmp 0x40ac1c
cmp dword [ebp - 0xc10], 0
jle 0x40ac10
push edi
push ecx
add esp, 4
and edi, 0xba85
and edi, 0x2478
add edi, 0x5c46
pop edi
push edx
or edx, 0x16a7a
call 0x40ab26
add byte [esi + 0x33], cl
inc edi
dec edi
dec eax
cmp eax, 0x834d324d
les eax, [edx + ebx*2]
mov edx, dword [ebp - 0xa60]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x9f0]
movzx edx, byte [ecx]
cmp eax, edx
je 0x40abac
push ebx
push esi
add esp, 4
or ebx, 0x16022
pop ebx
push edx
push ecx
add esp, 4
sub edx, 0xf9a1
xor edx, 0xd861
pop edx
push esi
call 0x40ab6e
add byte [edx + edi], dh
dec edx
inc esp
cmp eax, 0x4e333e33
add esp, 4
pop esi
mov eax, dword [ebp - 0xa60]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x9f0]
movzx eax, byte [edx]
cmp ecx, eax
jle 0x40ab94
mov dword [ebp - 0x14cc], 1
jmp 0x40ab9e
mov dword [ebp - 0x14cc], 0xffffffff
mov ecx, dword [ebp - 0x14cc]
mov dword [ebp - 0xc14], ecx
jmp 0x40ac10
push edi
add edi, 0x5e7f
or edi, 0xe83b
and edi, 0x15a4a
xor edi, 0x155
pop edi
push esi
push ebx
add esp, 4
xor esi, 0x1501e
sub esi, 0x17b03
jmp 0x40abdd
pop esi
mov edx, dword [ebp - 0xc10]
sub edx, 1
mov dword [ebp - 0xc10], edx
mov eax, dword [ebp - 0xa60]
add eax, 1
mov dword [ebp - 0xa60], eax
mov ecx, dword [ebp - 0x9f0]
add ecx, 1
mov dword [ebp - 0x9f0], ecx
jmp 0x40aaeb
mov edx, dword [ebp - 0xc14]
mov dword [ebp - 0x14d0], edx
cmp dword [ebp - 0x14d0], 0
jne 0x40ac65
push edi
jmp 0x40ac2f
pop edi
push ecx
push edi
add esp, 4
or ecx, 0x17665
call 0x40ac47
add byte [edx], dh
cmp dh, byte [esi + eax*2]
xor al, 0x3b
add esp, 4
and ecx, 0x2556
and ecx, 0x2c85
pop ecx
mov eax, dword [ebp - 0x4d0]
mov dword [ebp - 0xa5c], eax
jmp 0x40aca6
jmp 0x40a9b3
push eax
push ebx
add esp, 4
and eax, 0x7e5
or eax, 0x91e0
xor eax, 0x5a8a
add eax, 0x14aec
pop eax
push ecx
push edx
add esp, 4
jmp 0x40ac95
xor ecx, 0x178fa
pop ecx
mov dword [ebp - 0xa5c], 0
push eax
and eax, 0x18381
or eax, 0x181e9
sub eax, 0x141a7
jmp 0x40acbf
pop eax
push ecx
push edx
add esp, 4
xor ecx, 0x2196
xor ecx, 0x748c
xor ecx, 0x10f78
pop ecx
mov byte [ebp - 0x804], 0x45
mov byte [ebp - 0x803], 0x78
mov byte [ebp - 0x802], 0x69
mov byte [ebp - 0x801], 0x74
mov byte [ebp - 0x800], 0x50
mov byte [ebp - 0x7ff], 0x72
mov byte [ebp - 0x7fe], 0x6f
mov byte [ebp - 0x7fd], 0x63
mov byte [ebp - 0x7fc], 0x65
mov byte [ebp - 0x7fb], 0x73
mov byte [ebp - 0x7fa], 0x73
mov byte [ebp - 0x7f9], 0
push ecx
sub ecx, 0xd2b5
or ecx, 0xda15
sub ecx, 0x108de
sub ecx, 0x7a33
pop ecx
push esi
push ebx
add esp, 4
and esi, 0x10eb5
and esi, 0x119d4
xor esi, 0x1655e
pop esi
mov ecx, 0x6b
mov word [ebp - 0x1628], cx
mov edx, 0x65
mov word [ebp - 0x1626], dx
mov eax, 0x72
mov word [ebp - 0x1624], ax
mov ecx, 0x6e
mov word [ebp - 0x1622], cx
mov edx, 0x65
mov word [ebp - 0x1620], dx
mov eax, 0x6c
mov word [ebp - 0x161e], ax
mov ecx, 0x33
mov word [ebp - 0x161c], cx
mov edx, 0x32
mov word [ebp - 0x161a], dx
mov eax, 0x2e
mov word [ebp - 0x1618], ax
mov ecx, 0x64
mov word [ebp - 0x1616], cx
mov edx, 0x6c
mov word [ebp - 0x1614], dx
mov eax, 0x6c
mov word [ebp - 0x1612], ax
xor ecx, ecx
mov word [ebp - 0x1610], cx
push ebx
or ebx, 0x16e0f
add ebx, 0x1348b
and ebx, 0xceb4
sub ebx, 0x17482
pop ebx
push edi
call 0x40ae1f
add byte [esi], dh
inc eax
inc edi
inc ebp
cmp dword [ebp + 0x34], eax
add esp, 4
xor edi, 0x160ea
pop edi
push ecx
sub ecx, 0x9553
pop ecx
push ebx
push ecx
add esp, 4
or ebx, 0x10026
call 0x40ae4b
add byte [esi], bh
xor bh, byte [ecx]
xor al, 0x34
aas
xor eax, 0xc483404d
add al, 0x81
retf