Function at 0x4067f0
Capabilities:
Contain obfuscated stackstrings

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x9b4
mov eax, dword [0x42e008]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
push 0x27
push 0x499c819f
mov edx, 0x18
xor ecx, ecx
call fcn.004052c0
add esp, 8
push 0
push 0
call eax
mov esi, eax
test esi, esi
js 0x406bc6
mov dword [ebp - 0x874], 0x52aa79
mov ebx, 3
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
mov eax, dword [ebp - 0x874]
lea edi, [ebx + 2]
test edx, edx
je 0x4068a8
add eax, 2
add eax, esi
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000003
jns 0x406870
dec eax
or eax, 0xfffffffc
add eax, 1
jne 0x4069da
nop word [eax + eax]
mov eax, dword [ebp - 0x874]
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000003
jns 0x4068a1
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x406880
jmp 0x4069da
and eax, 0x80000001
jns 0x4068b6
dec eax
or eax, 0xfffffffe
add eax, 1
je 0x4068ff
mov eax, 2
sub eax, esi
add eax, dword [ebp - 0x874]
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
jne 0x4069da
nop dword [eax]
mov eax, dword [ebp - 0x874]
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
je 0x4068e0
jmp 0x4069da
mov eax, dword [ebp - 0x874]
and eax, 0x80000003
jns 0x406913
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x406979
mov ecx, dword [ebp - 0x874]
lea eax, [esi + 3]
add ecx, 2
imul ecx, eax
mov dword [ebp - 0x874], ecx
mov eax, dword [ebp - 0x874]
and eax, 0x80000001
jns 0x40693e
dec eax
or eax, 0xfffffffe
add eax, 1
jne 0x4069da
mov eax, dword [ebp - 0x874]
cdq
idiv edi
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x40695a
dec eax
jmp 0x40695b
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000001
jns 0x406975
dec eax
or eax, 0xfffffffe
add eax, 1
je 0x406944
jmp 0x4069da
mov eax, dword [ebp - 0x874]
cdq
idiv edi
test edx, edx
je 0x4069da
mov eax, dword [ebp - 0x874]
lea ecx, [esi + 0x17]
add eax, 0xb
cdq
idiv ecx
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
jne 0x4069da
nop dword [eax + eax]
mov eax, dword [ebp - 0x874]
cdq
idiv edi
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x4069c6
inc eax
jmp 0x4069c7
dec eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
je 0x4069b0
push 0x28
push 0xfaf3fba8
mov edx, 0x18
xor ecx, ecx
call fcn.004052c0
add esp, 8
push 0
push 0
push 0
push 3
push 0
push 0
push 0
push 0xffffffffffffffff
push 0
call eax
mov esi, eax
mov dword [ebp - 0x874], 0x52aa79
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x406a78
add eax, 2
add eax, esi
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000003
jns 0x406a42
dec eax
or eax, 0xfffffffc
add eax, 1
jne 0x406baa
nop dword [eax + eax]
mov eax, dword [ebp - 0x874]
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000003
jns 0x406a71
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x406a50
jmp 0x406baa
and eax, 0x80000001
jns 0x406a86
dec eax
or eax, 0xfffffffe
add eax, 1
je 0x406acf
mov eax, 2
sub eax, esi
add eax, dword [ebp - 0x874]
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
jne 0x406baa
nop dword [eax]
mov eax, dword [ebp - 0x874]
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
je 0x406ab0
jmp 0x406baa
mov eax, dword [ebp - 0x874]
and eax, 0x80000003
jns 0x406ae3
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x406b49
mov ecx, dword [ebp - 0x874]
lea eax, [esi + 3]
add ecx, 2
imul ecx, eax
mov dword [ebp - 0x874], ecx
mov eax, dword [ebp - 0x874]
and eax, 0x80000001
jns 0x406b0e
dec eax
or eax, 0xfffffffe
add eax, 1
jne 0x406baa
mov eax, dword [ebp - 0x874]
cdq
idiv edi
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x406b2a
dec eax
jmp 0x406b2b
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000001
jns 0x406b45
dec eax
or eax, 0xfffffffe
add eax, 1
je 0x406b14
jmp 0x406baa
mov eax, dword [ebp - 0x874]
cdq
idiv edi
test edx, edx
je 0x406baa
mov eax, dword [ebp - 0x874]
lea ecx, [esi + 0x17]
add eax, 0xb
cdq
idiv ecx
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
jne 0x406baa
nop dword [eax + eax]
mov eax, dword [ebp - 0x874]
cdq
idiv edi
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x406b96
inc eax
jmp 0x406b97
dec eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
je 0x406b80
xor ecx, ecx
mov edx, 0x18
test esi, esi
jns 0x406bd9
push 1
push 0x68cc2bb5
call fcn.004052c0
add esp, 8
call eax
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0041c264
mov esp, ebp
pop ebp
ret
push 0x2a
push 0x5abc5ed6
mov dword [ebp - 0x84c], 0
call fcn.004052c0
add esp, 8
lea ecx, [ebp - 0x84c]
push ecx
push 0x428218
push 1
push 0
push 0x4281f8
call eax
mov dword [ebp - 0x874], 0x52aa79
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
je 0x406c79
mov ecx, dword [ebp - 0x874]
mov eax, dword [ebp - 0x84c]
add eax, 2
add eax, ecx
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000003
jns 0x406c4b
dec eax
or eax, 0xfffffffc
add eax, 1
jne 0x406dba
mov eax, dword [ebp - 0x874]
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000003
jns 0x406c72
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x406c51
jmp 0x406dba
mov eax, dword [ebp - 0x874]
and eax, 0x80000001
jns 0x406c8d
dec eax
or eax, 0xfffffffe
add eax, 1
mov eax, dword [ebp - 0x874]
je 0x406cdf
mov ecx, 2
sub ecx, dword [ebp - 0x84c]
add eax, ecx
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
jne 0x406dba
nop dword [eax]
mov eax, dword [ebp - 0x874]
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
je 0x406cc0
jmp 0x406dba
and eax, 0x80000003
jns 0x406ced
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x406d59
mov ecx, dword [ebp - 0x874]
mov eax, dword [ebp - 0x84c]
add ecx, 2
add eax, 3
imul eax, ecx
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000001
jns 0x406d1e
dec eax
or eax, 0xfffffffe
add eax, 1
jne 0x406dba
mov eax, dword [ebp - 0x874]
cdq
idiv edi
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x406d3a
dec eax
jmp 0x406d3b
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000001
jns 0x406d55
dec eax
or eax, 0xfffffffe
add eax, 1
je 0x406d24
jmp 0x406dba
mov eax, dword [ebp - 0x874]
cdq
idiv edi
test edx, edx
je 0x406dba
mov eax, dword [ebp - 0x874]
mov ecx, dword [ebp - 0x84c]
add eax, 0xb
cdq
add ecx, 0x17
idiv ecx
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
jne 0x406dba
nop
mov eax, dword [ebp - 0x874]
cdq
idiv edi
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x406da6
inc eax
jmp 0x406da7
dec eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
je 0x406d90
push 0x5a
push 0xde1467b1
mov edx, 0xf
mov dword [ebp - 0x85c], 0
xor ecx, ecx
call fcn.004052c0
add esp, 8
lea ecx, [ebp - 0x844]
push ecx
call eax
mov dword [ebp - 0x874], 0x52aa79
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
je 0x406e58
mov ecx, dword [ebp - 0x874]
mov eax, dword [ebp - 0x834]
add eax, 2
add eax, ecx
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000003
jns 0x406e25
dec eax
or eax, 0xfffffffc
add eax, 1
jne 0x406f9a
nop dword [eax + eax]
mov eax, dword [ebp - 0x874]
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000003
jns 0x406e51
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x406e30
jmp 0x406f9a
mov eax, dword [ebp - 0x874]
and eax, 0x80000001
jns 0x406e6c
dec eax
or eax, 0xfffffffe
add eax, 1
mov eax, dword [ebp - 0x874]
je 0x406ebf
mov ecx, 2
sub ecx, dword [ebp - 0x834]
add eax, ecx
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
jne 0x406f9a
nop dword [eax + eax]
mov eax, dword [ebp - 0x874]
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
je 0x406ea0
jmp 0x406f9a
and eax, 0x80000003
jns 0x406ecd
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x406f39
mov ecx, dword [ebp - 0x874]
mov eax, dword [ebp - 0x834]
add ecx, 2
add eax, 3
imul eax, ecx
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000001
jns 0x406efe
dec eax
or eax, 0xfffffffe
add eax, 1
jne 0x406f9a
mov eax, dword [ebp - 0x874]
cdq
idiv edi
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x406f1a
dec eax
jmp 0x406f1b
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000001
jns 0x406f35
dec eax
or eax, 0xfffffffe
add eax, 1
je 0x406f04
jmp 0x406f9a
mov eax, dword [ebp - 0x874]
cdq
idiv edi
test edx, edx
je 0x406f9a
mov eax, dword [ebp - 0x874]
mov ecx, dword [ebp - 0x834]
add eax, 0xb
cdq
add ecx, 0x17
idiv ecx
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
jne 0x406f9a
nop
mov eax, dword [ebp - 0x874]
cdq
idiv edi
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x406f86
inc eax
jmp 0x406f87
dec eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
je 0x406f70
cmp word [ebp - 0x844], 9
jne 0x407501
push 0x2a
push 0x5abc5ed6
mov edx, 0x18
xor ecx, ecx
call fcn.004052c0
add esp, 8
lea ecx, [ebp - 0x85c]
push ecx
push 0x428228
push 1
push 0
push 0x428208
call eax
mov esi, eax
test esi, esi
js 0x4079a6
mov dword [ebp - 0x874], 0x52aa79
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x407049
add eax, 2
add eax, esi
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000003
jns 0x40701b
dec eax
or eax, 0xfffffffc
add eax, 1
jne 0x40717a
mov eax, dword [ebp - 0x874]
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000003
jns 0x407042
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x407021
jmp 0x40717a
and eax, 0x80000001
jns 0x407057
dec eax
or eax, 0xfffffffe
add eax, 1
je 0x40709f
mov eax, 2
sub eax, esi
add eax, dword [ebp - 0x874]
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
jne 0x40717a
nop dword [eax]
mov eax, dword [ebp - 0x874]
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
je 0x407080
jmp 0x40717a
mov eax, dword [ebp - 0x874]
and eax, 0x80000003
jns 0x4070b3
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x407119
mov ecx, dword [ebp - 0x874]
lea eax, [esi + 3]
add ecx, 2
imul ecx, eax
mov dword [ebp - 0x874], ecx
mov eax, dword [ebp - 0x874]
and eax, 0x80000001
jns 0x4070de
dec eax
or eax, 0xfffffffe
add eax, 1
jne 0x40717a
mov eax, dword [ebp - 0x874]
cdq
idiv edi
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x4070fa
dec eax
jmp 0x4070fb
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000001
jns 0x407115
dec eax
or eax, 0xfffffffe
add eax, 1
je 0x4070e4
jmp 0x40717a
mov eax, dword [ebp - 0x874]
cdq
idiv edi
test edx, edx
je 0x40717a
mov eax, dword [ebp - 0x874]
lea ecx, [esi + 0x17]
add eax, 0xb
cdq
idiv ecx
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
jne 0x40717a
nop dword [eax + eax]
mov eax, dword [ebp - 0x874]
cdq
idiv edi
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x407166
inc eax
jmp 0x407167
dec eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
je 0x407150
mov byte [ebp - 0x8d0], 0
lea ecx, [ebp - 0x8d0]
mov byte [ebp - 0x8cf], 0x40
mov byte [ebp - 0x8ce], 0x32
mov byte [ebp - 0x8cd], 0x40
mov byte [ebp - 0x8cc], 0x32
mov byte [ebp - 0x8cb], 0xf
mov byte [ebp - 0x8ca], 0x32
mov byte [ebp - 0x8c9], 0x10
mov byte [ebp - 0x8c8], 0x32
mov byte [ebp - 0x8c7], 0x39
mov byte [ebp - 0x8c6], 0x32
mov byte [ebp - 0x8c5], 0x2e
mov byte [ebp - 0x8c4], 0x32
mov byte [ebp - 0x8c3], 0xc
mov byte [ebp - 0x8c2], 0x32
mov byte [ebp - 0x8c1], 0x26
mov byte [ebp - 0x8c0], 0x32
mov byte [ebp - 0x8bf], 0x6d
mov byte [ebp - 0x8be], 0x32
mov byte [ebp - 0x8bd], 0x10
mov byte [ebp - 0x8bc], 0x32
mov byte [ebp - 0x8bb], 0x5d
mov byte [ebp - 0x8ba], 0x32
mov byte [ebp - 0x8b9], 0x10
mov byte [ebp - 0x8b8], 0x32
mov byte [ebp - 0x8b7], 0x5e
mov byte [ebp - 0x8b6], 0x32
mov byte [ebp - 0x8b5], 0x44
mov byte [ebp - 0x8b4], 0x32
mov byte [ebp - 0x8b3], 0xc
mov byte [ebp - 0x8b2], 0x32
mov byte [ebp - 0x8b1], 0x1f
mov byte [ebp - 0x8b0], 0x32
mov byte [ebp - 0x8af], 0x6d
mov byte [ebp - 0x8ae], 0x32
mov byte [ebp - 0x8ad], 0x5e
mov byte [ebp - 0x8ac], 0x32
mov byte [ebp - 0x8ab], 0x1f
mov byte [ebp - 0x8aa], 0x32
mov byte [ebp - 0x8a9], 0x66
mov byte [ebp - 0x8a8], 0x32
mov byte [ebp - 0x8a7], 0x10
mov byte [ebp - 0x8a6], 0x32
mov byte [ebp - 0x8a5], 0x6d
mov byte [ebp - 0x8a4], 0x32
mov byte [ebp - 0x8a3], 0x32
mov byte [ebp - 0x8a2], 0x32
mov al, byte [ebp - 0x8cf]
call fcn.00414a00
push 0x14
push 0x54def57d
mov edx, 0x19
xor ecx, ecx
mov esi, eax
call fcn.004052c0
add esp, 8
push esi
call eax
push 0x13
push 0xfc4ef6a9
mov edx, 0x19
xor ecx, ecx
mov esi, eax
call fcn.004052c0
add esp, 8
lea ecx, [ebp - 0x820]
push ecx
call eax
mov eax, dword [ebp - 0x85c]
lea edx, [ebp - 0x820]
push edx
push 0
mov word [ebp - 0x820], bx
mov dword [ebp - 0x818], 0x40
mov ecx, dword [eax]
push esi
push eax
call dword [ecx + 0x20]
mov esi, eax
mov dword [ebp - 0x874], 0x52aa79
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x4073a8
add eax, 2
add eax, esi
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000003
jns 0x407375
dec eax
or eax, 0xfffffffc
add eax, 1
jne 0x4074da
nop dword [eax + eax]
mov eax, dword [ebp - 0x874]
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000003
jns 0x4073a1
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x407380
jmp 0x4074da
and eax, 0x80000001
jns 0x4073b6
dec eax
or eax, 0xfffffffe
add eax, 1
je 0x4073ff
mov eax, 2
sub eax, esi
add eax, dword [ebp - 0x874]
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
jne 0x4074da
nop dword [eax]
mov eax, dword [ebp - 0x874]
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
je 0x4073e0
jmp 0x4074da
mov eax, dword [ebp - 0x874]
and eax, 0x80000003
jns 0x407413
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x407479
mov ecx, dword [ebp - 0x874]
lea eax, [esi + 3]
add ecx, 2
imul ecx, eax
mov dword [ebp - 0x874], ecx
mov eax, dword [ebp - 0x874]
and eax, 0x80000001
jns 0x40743e
dec eax
or eax, 0xfffffffe
add eax, 1
jne 0x4074da
mov eax, dword [ebp - 0x874]
cdq
idiv edi
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x40745a
dec eax
jmp 0x40745b
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000001
jns 0x407475
dec eax
or eax, 0xfffffffe
add eax, 1
je 0x407444
jmp 0x4074da
mov eax, dword [ebp - 0x874]
cdq
idiv edi
test edx, edx
je 0x4074da
mov eax, dword [ebp - 0x874]
lea ecx, [esi + 0x17]
add eax, 0xb
cdq
idiv ecx
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
jne 0x4074da
nop dword [eax + eax]
mov eax, dword [ebp - 0x874]
cdq
idiv edi
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x4074c6
inc eax
jmp 0x4074c7
dec eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
je 0x4074b0
push 0x12
push 0xbc7bf3e8
mov edx, 0x19
xor ecx, ecx
call fcn.004052c0
add esp, 8
lea ecx, [ebp - 0x820]
push ecx
call eax
test esi, esi
js 0x4079a6
mov dword [ebp - 0x848], 0
lea ecx, [ebp - 0x8a0]
mov byte [ebp - 0x8a0], 0
mov byte [ebp - 0x89f], 0x4b
mov byte [ebp - 0x89e], 0x49
mov byte [ebp - 0x89d], 0x6d
mov byte [ebp - 0x89c], 0x49
mov byte [ebp - 0x89b], 0x6d
mov byte [ebp - 0x89a], 0x49
mov byte [ebp - 0x899], 0xa
mov byte [ebp - 0x898], 0x49
mov byte [ebp - 0x897], 4
mov byte [ebp - 0x896], 0x49
mov byte [ebp - 0x895], 0x76
mov byte [ebp - 0x894], 0x49
mov byte [ebp - 0x893], 0x32
mov byte [ebp - 0x892], 0x49
mov byte [ebp - 0x891], 0x2f
mov byte [ebp - 0x890], 0x49
mov byte [ebp - 0x88f], 0x48
mov byte [ebp - 0x88e], 0x49
mov byte [ebp - 0x88d], 0x63
mov byte [ebp - 0x88c], 0x49
mov byte [ebp - 0x88b], 0x49
mov byte [ebp - 0x88a], 0x49
mov al, byte [ebp - 0x89f]
call fcn.004149c0
push 0x14
push 0x54def57d
mov edx, 0x19
xor ecx, ecx
mov esi, eax
call fcn.004052c0
add esp, 8
push esi
call eax
mov ecx, dword [ebp - 0x84c]
lea esi, [ebp - 0x848]
push esi
push dword [ebp - 0x85c]
mov edx, dword [ecx]
push 0
push 0
push 0
push 0
push 0
push eax
push ecx
call dword [edx + 0xc]
mov esi, eax
mov dword [ebp - 0x874], 0x52aa79
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
je 0x407678
mov ecx, dword [ebp - 0x874]
mov eax, dword [ebp - 0x848]
add eax, 2
add eax, ecx
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000003
jns 0x407640
dec eax
or eax, 0xfffffffc
add eax, 1
jne 0x4077ba
nop word [eax + eax]
mov eax, dword [ebp - 0x874]
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000003
jns 0x407671
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x407650
jmp 0x4077ba
mov eax, dword [ebp - 0x874]
and eax, 0x80000001
jns 0x40768c
dec eax
or eax, 0xfffffffe
add eax, 1
mov eax, dword [ebp - 0x874]
je 0x4076df
mov ecx, 2
sub ecx, dword [ebp - 0x848]
add eax, ecx
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
jne 0x4077ba
nop dword [eax + eax]
mov eax, dword [ebp - 0x874]
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
je 0x4076c0
jmp 0x4077ba
and eax, 0x80000003
jns 0x4076ed
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x407759
mov ecx, dword [ebp - 0x874]
mov eax, dword [ebp - 0x848]
add ecx, 2
add eax, 3
imul eax, ecx
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000001
jns 0x40771e
dec eax
or eax, 0xfffffffe
add eax, 1
jne 0x4077ba
mov eax, dword [ebp - 0x874]
cdq
idiv edi
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x40773a
dec eax
jmp 0x40773b
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000001
jns 0x407755
dec eax
or eax, 0xfffffffe
add eax, 1
je 0x407724
jmp 0x4077ba
mov eax, dword [ebp - 0x874]
cdq
idiv edi
test edx, edx
je 0x4077ba
mov eax, dword [ebp - 0x874]
mov ecx, dword [ebp - 0x848]
add eax, 0xb
cdq
add ecx, 0x17
idiv ecx
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
jne 0x4077ba
nop
mov eax, dword [ebp - 0x874]
cdq
idiv edi
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x4077a6
inc eax
jmp 0x4077a7
dec eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
je 0x407790
test esi, esi
js 0x40799a
mov esi, dword [ebp - 0x848]
mov edx, 0x18
push 0x29
push 0x9b4ca937
xor ecx, ecx
call fcn.004052c0
add esp, 8
push 0
push 0
push 3
push 3
push 0
push 0
push 0xa
push esi
call eax
mov esi, eax
mov dword [ebp - 0x874], 0x52aa79
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x40785b
add eax, 2
add eax, esi
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000003
jns 0x40782d
dec eax
or eax, 0xfffffffc
add eax, 1
jne 0x40798a
mov eax, dword [ebp - 0x874]
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000003
jns 0x407854
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x407833
jmp 0x40798a
and eax, 0x80000001
jns 0x407869
dec eax
or eax, 0xfffffffe
add eax, 1
je 0x4078af
mov eax, 2
sub eax, esi
add eax, dword [ebp - 0x874]
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
jne 0x40798a
nop
mov eax, dword [ebp - 0x874]
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
je 0x407890
jmp 0x40798a
mov eax, dword [ebp - 0x874]
and eax, 0x80000003
jns 0x4078c3
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x407929
mov ecx, dword [ebp - 0x874]
lea eax, [esi + 3]
add ecx, 2
imul ecx, eax
mov dword [ebp - 0x874], ecx
mov eax, dword [ebp - 0x874]
and eax, 0x80000001
jns 0x4078ee
dec eax
or eax, 0xfffffffe
add eax, 1
jne 0x40798a
mov eax, dword [ebp - 0x874]
cdq
idiv edi
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x40790a
dec eax
jmp 0x40790b
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000001
jns 0x407925
dec eax
or eax, 0xfffffffe
add eax, 1
je 0x4078f4
jmp 0x40798a
mov eax, dword [ebp - 0x874]
cdq
idiv edi
test edx, edx
je 0x40798a
mov eax, dword [ebp - 0x874]
lea ecx, [esi + 0x17]
add eax, 0xb
cdq
idiv ecx
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
jne 0x40798a
nop dword [eax + eax]
mov eax, dword [ebp - 0x874]
cdq
idiv edi
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x407976
inc eax
jmp 0x407977
dec eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
je 0x407960
test esi, esi
jns 0x4079d1
mov eax, dword [ebp - 0x848]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x84c]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
push 1
push 0x68cc2bb5
mov edx, 0x18
xor ecx, ecx
call fcn.004052c0
add esp, 8
call eax
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0041c264
mov esp, ebp
pop ebp
ret
mov byte [ebp - 0x888], 0
lea ecx, [ebp - 0x888]
mov byte [ebp - 0x887], 0x46
mov byte [ebp - 0x886], 0x52
mov byte [ebp - 0x885], 0x77
mov byte [ebp - 0x884], 0x52
mov byte [ebp - 0x883], 0x36
mov byte [ebp - 0x882], 0x52
mov byte [ebp - 0x881], 0x52
mov byte [ebp - 0x880], 0x52
mov al, byte [ebp - 0x887]
call fcn.00414960
push 0x14
push 0x54def57d
mov edx, 0x19
xor ecx, ecx
mov esi, eax
call fcn.004052c0
add esp, 8
push esi
call eax
mov byte [ebp - 0x910], 0
mov edi, eax
mov byte [ebp - 0x90f], 0x3f
mov byte [ebp - 0x90e], 0x77
mov byte [ebp - 0x90d], 0x7e
mov byte [ebp - 0x90c], 0x77
mov byte [ebp - 0x90b], 0x1f
mov byte [ebp - 0x90a], 0x77
mov byte [ebp - 0x909], 0x7e
mov byte [ebp - 0x908], 0x77
mov byte [ebp - 0x907], 8
mov byte [ebp - 0x906], 0x77
mov byte [ebp - 0x905], 0x7a
mov byte [ebp - 0x904], 0x77
mov byte [ebp - 0x903], 0x66
mov byte [ebp - 0x902], 0x77
mov byte [ebp - 0x901], 0x39
mov byte [ebp - 0x900], 0x77
mov byte [ebp - 0x8ff], 0x66
mov byte [ebp - 0x8fe], 0x77
mov byte [ebp - 0x8fd], 0x3a
mov byte [ebp - 0x8fc], 0x77
mov byte [ebp - 0x8fb], 4
mov byte [ebp - 0x8fa], 0x77
mov byte [ebp - 0x8f9], 0x51
mov byte [ebp - 0x8f8], 0x77
mov byte [ebp - 0x8f7], 0x5a
mov byte [ebp - 0x8f6], 0x77
mov byte [ebp - 0x8f5], 0x66
mov byte [ebp - 0x8f4], 0x77
mov byte [ebp - 0x8f3], 0x2d
mov byte [ebp - 0x8f2], 0x77
mov byte [ebp - 0x8f1], 0x5b
mov byte [ebp - 0x8f0], 0x77
mov byte [ebp - 0x8ef], 5
mov byte [ebp - 0x8ee], 0x77
mov byte [ebp - 0x8ed], 0x50
mov byte [ebp - 0x8ec], 0x77
mov byte [ebp - 0x8eb], 0x15
mov byte [ebp - 0x8ea], 0x77
mov byte [ebp - 0x8e9], 9
mov byte [ebp - 0x8e8], 0x77
mov byte [ebp - 0x8e7], 0x3f
mov byte [ebp - 0x8e6], 0x77
mov byte [ebp - 0x8e5], 0x20
mov byte [ebp - 0x8e4], 0x77
mov byte [ebp - 0x8e3], 0
mov byte [ebp - 0x8e2], 0x77
mov byte [ebp - 0x8e1], 0x32
mov byte [ebp - 0x8e0], 0x77
mov byte [ebp - 0x8df], 0x40
mov byte [ebp - 0x8de], 0x77
mov byte [ebp - 0x8dd], 0x1c
mov byte [ebp - 0x8dc], 0x77
mov byte [ebp - 0x8db], 8
mov byte [ebp - 0x8da], 0x77
mov byte [ebp - 0x8d9], 0x40
mov byte [ebp - 0x8d8], 0x77
mov byte [ebp - 0x8d7], 0x7b
mov byte [ebp - 0x8d6], 0x77
mov byte [ebp - 0x8d5], 0x13
lea ecx, [ebp - 0x910]
mov byte [ebp - 0x8d4], 0x77
mov byte [ebp - 0x8d3], 0x77
mov byte [ebp - 0x8d2], 0x77
mov al, byte [ebp - 0x90f]
call fcn.00414900
push 0x14
push 0x54def57d
mov edx, 0x19
xor ecx, ecx
mov esi, eax
call fcn.004052c0
add esp, 8
push esi
call eax
mov ecx, dword [ebp - 0x848]
lea esi, [ebp - 0x854]
push esi
push 0
push 0x30
push eax
mov dword [ebp - 0x854], 0
mov edx, dword [ecx]
push edi
push ecx
call dword [edx + 0x50]
mov esi, eax
mov dword [ebp - 0x874], 0x52aa79
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x407cd7
add eax, 2
add eax, esi
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000003
jns 0x407c84
dec eax
or eax, 0xfffffffc
add eax, 1
jne 0x407cb3
nop word [eax + eax]
mov eax, dword [ebp - 0x874]
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000003
jns 0x407cb1
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x407c90
mov edi, 5
test esi, esi
jns 0x407e1f
mov eax, dword [ebp - 0x848]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x84c]
jmp 0x408cd1
and eax, 0x80000001
jns 0x407ce5
dec eax
or eax, 0xfffffffe
add eax, 1
je 0x407d2c
mov eax, 2
sub eax, esi
add eax, dword [ebp - 0x874]
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
jne 0x407cb3
nop word [eax + eax]
mov eax, dword [ebp - 0x874]
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
je 0x407d10
jmp 0x407cb3
mov eax, dword [ebp - 0x874]
and eax, 0x80000003
jns 0x407d40
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x407dae
mov ecx, dword [ebp - 0x874]
lea eax, [esi + 3]
add ecx, 2
imul ecx, eax
mov dword [ebp - 0x874], ecx
mov eax, dword [ebp - 0x874]
and eax, 0x80000001
jns 0x407d6b
dec eax
or eax, 0xfffffffe
add eax, 1
mov edi, 5
jne 0x407cb8
mov eax, dword [ebp - 0x874]
cdq
idiv edi
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x407d8c
dec eax
jmp 0x407d8d
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000001
jns 0x407da7
dec eax
or eax, 0xfffffffe
add eax, 1
je 0x407d76
jmp 0x407cb8
mov eax, dword [ebp - 0x874]
mov edi, 5
cdq
idiv edi
test edx, edx
je 0x407cb8
mov eax, dword [ebp - 0x874]
lea ecx, [esi + 0x17]
add eax, 0xb
cdq
idiv ecx
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
jne 0x407cb8
nop word [eax + eax]
mov eax, dword [ebp - 0x874]
cdq
idiv edi
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x407e06
inc eax
jmp 0x407e07
dec eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
je 0x407df0
jmp 0x407cb8
mov dword [ebp - 0x858], 0
mov dword [ebp - 0x80c], 0
mov dword [ebp - 0x874], 0x52aa79
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
je 0x407ea8
mov ecx, dword [ebp - 0x874]
mov eax, dword [ebp - 0x854]
add eax, 2
add eax, ecx
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000003
jns 0x407e75
dec eax
or eax, 0xfffffffc
add eax, 1
jne 0x407fea
nop dword [eax + eax]
mov eax, dword [ebp - 0x874]
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000003
jns 0x407ea1
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x407e80
jmp 0x407fea
mov eax, dword [ebp - 0x874]
and eax, 0x80000001
jns 0x407ebc
dec eax
or eax, 0xfffffffe
add eax, 1
mov eax, dword [ebp - 0x874]
je 0x407f0f
mov ecx, 2
sub ecx, dword [ebp - 0x854]
add eax, ecx
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
jne 0x407fea
nop dword [eax + eax]
mov eax, dword [ebp - 0x874]
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
je 0x407ef0
jmp 0x407fea
and eax, 0x80000003
jns 0x407f1d
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x407f89
mov ecx, dword [ebp - 0x874]
mov eax, dword [ebp - 0x854]
add ecx, 2
add eax, 3
imul eax, ecx
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000001
jns 0x407f4e
dec eax
or eax, 0xfffffffe
add eax, 1
jne 0x407fea
mov eax, dword [ebp - 0x874]
cdq
idiv edi
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x407f6a
dec eax
jmp 0x407f6b
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000001
jns 0x407f85
dec eax
or eax, 0xfffffffe
add eax, 1
je 0x407f54
jmp 0x407fea
mov eax, dword [ebp - 0x874]
cdq
idiv edi
test edx, edx
je 0x407fea
mov eax, dword [ebp - 0x874]
mov ecx, dword [ebp - 0x854]
add eax, 0xb
cdq
add ecx, 0x17
idiv ecx
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
jne 0x407fea
nop
mov eax, dword [ebp - 0x874]
cdq
idiv edi
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x407fd6
inc eax
jmp 0x407fd7
dec eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
je 0x407fc0
mov ecx, dword [ebp - 0x854]
test ecx, ecx
je 0x408ca3
mov edi, dword [sym.imp.USER32.dll_wsprintfW]
nop
mov eax, dword [ecx]
lea edx, [ebp - 0x80c]
push edx
lea edx, [ebp - 0x858]
push edx
push 1
push 0xffffffffffffffff
push ecx
call dword [eax + 0x10]
mov esi, eax
mov dword [ebp - 0x874], 0x52aa79
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x408088
add eax, 2
add eax, esi
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000003
jns 0x408056
dec eax
or eax, 0xfffffffc
add eax, 1
jne 0x4081ca
nop dword [eax]
mov eax, dword [ebp - 0x874]
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000003
jns 0x408081
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x408060
jmp 0x4081ca
and eax, 0x80000001
jns 0x408096
dec eax
or eax, 0xfffffffe
add eax, 1
je 0x4080df
mov eax, 2
sub eax, esi
add eax, dword [ebp - 0x874]
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
jne 0x4081ca
nop dword [eax]
mov eax, dword [ebp - 0x874]
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
je 0x4080c0
jmp 0x4081ca
mov eax, dword [ebp - 0x874]
and eax, 0x80000003
jns 0x4080f3
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x408165
mov ecx, dword [ebp - 0x874]
lea eax, [esi + 3]
add ecx, 2
imul ecx, eax
mov dword [ebp - 0x874], ecx
mov eax, dword [ebp - 0x874]
and eax, 0x80000001
jns 0x40811e
dec eax
or eax, 0xfffffffe
add eax, 1
jne 0x4081ca
mov ecx, 5
nop dword [eax]
mov eax, dword [ebp - 0x874]
cdq
idiv ecx
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x408146
dec eax
jmp 0x408147
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000001
jns 0x408161
dec eax
or eax, 0xfffffffe
add eax, 1
je 0x408130
jmp 0x4081ca
mov eax, dword [ebp - 0x874]
mov ecx, 5
cdq
idiv ecx
test edx, edx
je 0x4081ca
mov eax, dword [ebp - 0x874]
lea ecx, [esi + 0x17]
add eax, 0xb
cdq
idiv ecx
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
jne 0x4081ca
mov ecx, 5
nop
mov eax, dword [ebp - 0x874]
cdq
idiv ecx
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x4081b6
inc eax
jmp 0x4081b7
dec eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
je 0x4081a0
cmp dword [ebp - 0x80c], 0
je 0x408ca3
mov byte [ebp - 0x87c], 0
lea ecx, [ebp - 0x87c]
mov byte [ebp - 0x87b], 0x41
mov byte [ebp - 0x87a], 0x64
mov byte [ebp - 0x879], 0x32
mov byte [ebp - 0x878], 0x64
mov byte [ebp - 0x877], 0x64
mov byte [ebp - 0x876], 0x64
mov al, byte [ebp - 0x87b]
mov eax, dword [ebp - 0x858]
push 0
push 0
mov esi, dword [eax]
lea eax, [ebp - 0x870]
push eax
push 0
call fcn.004148a0
push eax
push dword [ebp - 0x858]
call dword [esi + 0x10]
mov esi, eax
mov dword [ebp - 0x874], 0x52aa79
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x4087d8
add eax, 2
add eax, esi
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000003
jns 0x40827a
dec eax
or eax, 0xfffffffc
add eax, 1
jne 0x4082a3
nop dword [eax]
mov eax, dword [ebp - 0x874]
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000003
jns 0x4082a1
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x408280
mov esi, 5
mov ecx, 0x800
lea eax, [ebp - 0x808]
mov byte [eax], 0
lea eax, [eax + 1]
sub ecx, 1
jne 0x4082b3
mov byte [ebp - 0x9b0], cl
mov byte [ebp - 0x9af], 0x36
mov byte [ebp - 0x9ae], 0x43
mov byte [ebp - 0x9ad], 0x68
mov byte [ebp - 0x9ac], 0x43
mov byte [ebp - 0x9ab], 0x3b
mov byte [ebp - 0x9aa], 0x43
mov byte [ebp - 0x9a9], 0x2b
mov byte [ebp - 0x9a8], 0x43
mov byte [ebp - 0x9a7], 0x40
mov byte [ebp - 0x9a6], 0x43
mov byte [ebp - 0x9a5], 0x20
mov byte [ebp - 0x9a4], 0x43
mov byte [ebp - 0x9a3], 0x40
mov byte [ebp - 0x9a2], 0x43
mov byte [ebp - 0x9a1], 0x64
mov byte [ebp - 0x9a0], 0x43
mov byte [ebp - 0x99f], 0x30
mov byte [ebp - 0x99e], 0x43
mov byte [ebp - 0x99d], 0x36
mov byte [ebp - 0x99c], 0x43
mov byte [ebp - 0x99b], 0x64
mov byte [ebp - 0x99a], 0x43
mov byte [ebp - 0x999], 0x15
mov byte [ebp - 0x998], 0x43
mov byte [ebp - 0x997], 0x67
mov byte [ebp - 0x996], 0x43
mov byte [ebp - 0x995], 0x13
mov byte [ebp - 0x994], 0x43
mov byte [ebp - 0x993], 0x79
mov byte [ebp - 0x992], 0x43
mov byte [ebp - 0x991], 0x54
mov byte [ebp - 0x990], 0x43
mov byte [ebp - 0x98f], 0x6d
mov byte [ebp - 0x98e], 0x43
mov byte [ebp - 0x98d], 0x3b
mov byte [ebp - 0x98c], 0x43
mov byte [ebp - 0x98b], 0x72
mov byte [ebp - 0x98a], 0x43
mov byte [ebp - 0x989], 0x1b
mov byte [ebp - 0x988], 0x43
mov byte [ebp - 0x987], 7
mov byte [ebp - 0x986], 0x43
mov byte [ebp - 0x985], 0x13
mov byte [ebp - 0x984], 0x43
mov byte [ebp - 0x983], 0x65
mov byte [ebp - 0x982], 0x43
mov byte [ebp - 0x981], 0x25
mov byte [ebp - 0x980], 0x43
mov byte [ebp - 0x97f], 7
mov byte [ebp - 0x97e], 0x43
mov byte [ebp - 0x97d], 0xc
mov byte [ebp - 0x97c], 0x43
mov byte [ebp - 0x97b], 0x40
mov byte [ebp - 0x97a], 0x43
mov byte [ebp - 0x979], 0x68
mov byte [ebp - 0x978], 0x43
mov byte [ebp - 0x977], 0x44
mov byte [ebp - 0x976], 0x43
mov byte [ebp - 0x975], 0x3f
mov byte [ebp - 0x974], 0x43
mov byte [ebp - 0x973], 0x13
mov byte [ebp - 0x972], 0x43
mov byte [ebp - 0x971], 0x1b
mov byte [ebp - 0x970], 0x43
mov byte [ebp - 0x96f], 0x31
mov byte [ebp - 0x96e], 0x43
mov byte [ebp - 0x96d], 0x40
mov byte [ebp - 0x96c], 0x43
mov byte [ebp - 0x96b], 0x68
mov byte [ebp - 0x96a], 0x43
mov byte [ebp - 0x969], 0x13
mov byte [ebp - 0x968], 0x43
mov byte [ebp - 0x967], 0x79
mov byte [ebp - 0x966], 0x43
mov byte [ebp - 0x965], 0x47
mov byte [ebp - 0x964], 0x43
mov byte [ebp - 0x963], 0x33
mov byte [ebp - 0x962], 0x43
mov byte [ebp - 0x961], 0x15
mov byte [ebp - 0x960], 0x43
mov byte [ebp - 0x95f], 0x2b
lea ecx, [ebp - 0x9b0]
mov byte [ebp - 0x95e], 0x43
mov byte [ebp - 0x95d], 0x40
mov byte [ebp - 0x95c], 0x43
mov byte [ebp - 0x95b], 0x20
mov byte [ebp - 0x95a], 0x43
mov byte [ebp - 0x959], 0x40
mov byte [ebp - 0x958], 0x43
mov byte [ebp - 0x957], 0x64
mov byte [ebp - 0x956], 0x43
mov byte [ebp - 0x955], 7
mov byte [ebp - 0x954], 0x43
mov byte [ebp - 0x953], 0x4f
mov byte [ebp - 0x952], 0x43
mov byte [ebp - 0x951], 0x2c
mov byte [ebp - 0x950], 0x43
mov byte [ebp - 0x94f], 0x3b
mov byte [ebp - 0x94e], 0x43
mov byte [ebp - 0x94d], 0x72
mov byte [ebp - 0x94c], 0x43
mov byte [ebp - 0x94b], 0x1b
mov byte [ebp - 0x94a], 0x43
mov byte [ebp - 0x949], 0x36
mov byte [ebp - 0x948], 0x43
mov byte [ebp - 0x947], 0x72
mov byte [ebp - 0x946], 0x43
mov byte [ebp - 0x945], 0x77
mov byte [ebp - 0x944], 0x43
mov byte [ebp - 0x943], 0x25
mov byte [ebp - 0x942], 0x43
mov byte [ebp - 0x941], 0x64
mov byte [ebp - 0x940], 0x43
mov byte [ebp - 0x93f], 0x1b
mov byte [ebp - 0x93e], 0x43
mov byte [ebp - 0x93d], 0x4f
mov byte [ebp - 0x93c], 0x43
mov byte [ebp - 0x93b], 0x40
mov byte [ebp - 0x93a], 0x43
mov byte [ebp - 0x939], 2
mov byte [ebp - 0x938], 0x43
mov byte [ebp - 0x937], 0x40
mov byte [ebp - 0x936], 0x43
mov byte [ebp - 0x935], 0x64
mov byte [ebp - 0x934], 0x43
mov byte [ebp - 0x933], 0x6e
mov byte [ebp - 0x932], 0x43
mov byte [ebp - 0x931], 0x33
mov byte [ebp - 0x930], 0x43
mov byte [ebp - 0x92f], 0x1a
mov byte [ebp - 0x92e], 0x43
mov byte [ebp - 0x92d], 0x76
mov byte [ebp - 0x92c], 0x43
mov byte [ebp - 0x92b], 8
mov byte [ebp - 0x92a], 0x43
mov byte [ebp - 0x929], 0x7d
mov byte [ebp - 0x928], 0x43
mov byte [ebp - 0x927], 7
mov byte [ebp - 0x926], 0x43
mov byte [ebp - 0x925], 8
mov byte [ebp - 0x924], 0x43
mov byte [ebp - 0x923], 0x6e
mov byte [ebp - 0x922], 0x43
mov byte [ebp - 0x921], 0x64
mov byte [ebp - 0x920], 0x43
mov byte [ebp - 0x91f], 0x3b
mov byte [ebp - 0x91e], 0x43
mov byte [ebp - 0x91d], 0x40
mov byte [ebp - 0x91c], 0x43
mov byte [ebp - 0x91b], 0x63
mov byte [ebp - 0x91a], 0x43
mov byte [ebp - 0x919], 0x40
mov byte [ebp - 0x918], 0x43
mov byte [ebp - 0x917], 0xc
mov byte [ebp - 0x916], 0x43
mov byte [ebp - 0x915], 0x40
mov byte [ebp - 0x914], 0x43
mov byte [ebp - 0x913], 0x43
mov byte [ebp - 0x912], 0x43
mov al, byte [ebp - 0x9af]
push dword [ebp - 0x868]
call fcn.00414860
push eax
lea eax, [ebp - 0x808]
push eax
call edi
add esp, 0xc
mov dword [ebp - 0x874], 0x52ec20
mov edx, 0xf
xor ecx, ecx
push 0x65
push 0x5126a209
call fcn.004052c0
add esp, 8
lea ecx, [ebp - 0x850]
push ecx
call eax
mov dword [ebp - 0x874], 0x52aa79
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
je 0x40892b
mov ecx, dword [ebp - 0x874]
mov eax, dword [ebp - 0x850]
add eax, 2
add eax, ecx
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000003
jns 0x4087a9
dec eax
or eax, 0xfffffffc
add eax, 1
jne 0x408a7a
nop
mov eax, dword [ebp - 0x874]
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000003
jns 0x4087d1
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x4087b0
jmp 0x408a7a
and eax, 0x80000001
jns 0x4087e6
dec eax
or eax, 0xfffffffe
add eax, 1
je 0x40882f
mov eax, 2
sub eax, esi
add eax, dword [ebp - 0x874]
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
jne 0x4082a3
nop dword [eax]
mov eax, dword [ebp - 0x874]
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
je 0x408810
jmp 0x4082a3
mov eax, dword [ebp - 0x874]
and eax, 0x80000003
jns 0x408843
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x4088b8
mov ecx, dword [ebp - 0x874]
lea eax, [esi + 3]
add ecx, 2
imul ecx, eax
mov dword [ebp - 0x874], ecx
mov eax, dword [ebp - 0x874]
and eax, 0x80000001
jns 0x408872
dec eax
or eax, 0xfffffffe
add eax, 1
mov esi, 5
jne 0x4082a8
nop dword [eax]
mov eax, dword [ebp - 0x874]
cdq
idiv esi
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x408896
dec eax
jmp 0x408897
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000001
jns 0x4088b1
dec eax
or eax, 0xfffffffe
add eax, 1
je 0x408880
jmp 0x4082a8
mov eax, dword [ebp - 0x874]
mov ecx, 5
cdq
idiv ecx
test edx, edx
je 0x408924
mov eax, dword [ebp - 0x874]
lea ecx, [esi + 0x17]
add eax, 0xb
cdq
idiv ecx
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
jne 0x4082a3
mov esi, 5
mov eax, dword [ebp - 0x874]
cdq
idiv esi
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x40890b
inc eax
jmp 0x40890c
dec eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
je 0x4088f5
jmp 0x4082a8
mov esi, ecx
jmp 0x4082a8
mov eax, dword [ebp - 0x874]
and eax, 0x80000001
jns 0x40893f
dec eax
or eax, 0xfffffffe
add eax, 1
mov eax, dword [ebp - 0x874]
je 0x40898f
mov ecx, 2
sub ecx, dword [ebp - 0x850]
add eax, ecx
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
jne 0x408a7a
nop dword [eax + eax]
mov eax, dword [ebp - 0x874]
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
je 0x408970
jmp 0x408a7a
and eax, 0x80000003
jns 0x40899d
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x408a15
mov ecx, dword [ebp - 0x874]
mov eax, dword [ebp - 0x850]
add ecx, 2
add eax, 3
imul eax, ecx
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000001
jns 0x4089d2
dec eax
or eax, 0xfffffffe
add eax, 1
jne 0x408a7a
nop dword [eax + eax]
mov eax, dword [ebp - 0x874]
cdq
idiv esi
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x4089f6
dec eax
jmp 0x4089f7
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000001
jns 0x408a11
dec eax
or eax, 0xfffffffe
add eax, 1
je 0x4089e0
jmp 0x408a7a
mov eax, dword [ebp - 0x874]
cdq
idiv esi
test edx, edx
je 0x408a7a
mov eax, dword [ebp - 0x874]
mov ecx, dword [ebp - 0x850]
add eax, 0xb
cdq
add ecx, 0x17
idiv ecx
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
jne 0x408a7a
nop word [eax + eax]
mov eax, dword [ebp - 0x874]
cdq
idiv esi
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x408a66
inc eax
jmp 0x408a67
dec eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
je 0x408a50
lea ecx, [ebp - 0x808]
call fcn.00405c60
mov esi, dword [ebp - 0x850]
mov edx, 0xf
push 0x5e
push 0x58cb0595
xor ecx, ecx
call fcn.004052c0
add esp, 8
push esi
call eax
mov dword [ebp - 0x874], 0x52aa79
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
je 0x408b18
mov ecx, dword [ebp - 0x874]
mov eax, dword [ebp - 0x850]
add eax, 2
add eax, ecx
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000003
jns 0x408ae6
dec eax
or eax, 0xfffffffc
add eax, 1
jne 0x408c6a
nop dword [eax]
mov eax, dword [ebp - 0x874]
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000003
jns 0x408b11
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x408af0
jmp 0x408c6a
mov eax, dword [ebp - 0x874]
and eax, 0x80000001
jns 0x408b2c
dec eax
or eax, 0xfffffffe
add eax, 1
mov eax, dword [ebp - 0x874]
je 0x408b7f
mov ecx, 2
sub ecx, dword [ebp - 0x850]
add eax, ecx
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
jne 0x408c6a
nop dword [eax + eax]
mov eax, dword [ebp - 0x874]
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
je 0x408b60
jmp 0x408c6a
and eax, 0x80000003
jns 0x408b8d
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x408c05
mov ecx, dword [ebp - 0x874]
mov eax, dword [ebp - 0x850]
add ecx, 2
add eax, 3
imul eax, ecx
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000001
jns 0x408bbe
dec eax
or eax, 0xfffffffe
add eax, 1
jne 0x408c6a
mov esi, 5
nop dword [eax]
mov eax, dword [ebp - 0x874]
cdq
idiv esi
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x408be6
dec eax
jmp 0x408be7
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000001
jns 0x408c01
dec eax
or eax, 0xfffffffe
add eax, 1
je 0x408bd0
jmp 0x408c6a
mov eax, dword [ebp - 0x874]
mov esi, 5
cdq
idiv esi
test edx, edx
je 0x408c6a
mov eax, dword [ebp - 0x874]
mov ecx, dword [ebp - 0x850]
add eax, 0xb
cdq
add ecx, 0x17
idiv ecx
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
jne 0x408c6a
nop
mov eax, dword [ebp - 0x874]
cdq
idiv esi
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x408c56
inc eax
jmp 0x408c57
dec eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
je 0x408c40
push 0x12
push 0xbc7bf3e8
mov edx, 0x19
xor ecx, ecx
call fcn.004052c0
add esp, 8
lea ecx, [ebp - 0x870]
push ecx
call eax
mov eax, dword [ebp - 0x858]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov ecx, dword [ebp - 0x854]
test ecx, ecx
jne 0x408000
mov ecx, dword [ebp - 0x85c]
test ecx, ecx
je 0x408cb3
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov eax, dword [ebp - 0x848]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x84c]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x854]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push 1
push 0x68cc2bb5
mov edx, 0x18
xor ecx, ecx
call fcn.004052c0
add esp, 8
call eax
mov ecx, dword [ebp - 4]
mov eax, 1
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0041c264
mov esp, ebp
pop ebp
ret