Function at 0x406372
Capabilities:
Contain obfuscated stackstrings

Disassembly:
or byte [eax], al
add byte [eax], al
imul edx, ecx, 0
mov eax, dword [ebp - 0x160c]
mov ecx, dword [eax + edx + 0x78]
mov dword [ebp - 0x1610], ecx
cmp dword [ebp - 0x1610], 0
jne 0x405f81
mov edx, dword [ebp - 0x770]
mov dword [ebp - 0x510], edx
jmp 0x406218
mov eax, dword [ebp - 0x324]
add eax, dword [ebp - 0x1610]
mov dword [ebp - 0x764], eax
jne 0x405fa6
mov ecx, dword [ebp - 0x770]
mov dword [ebp - 0x510], ecx
jmp 0x406218
mov edx, dword [ebp - 0x764]
mov eax, dword [ebp - 0x324]
add eax, dword [edx + 0x20]
mov dword [ebp - 0x1984], eax
mov ecx, dword [ebp - 0x764]
mov edx, dword [ebp - 0x324]
add edx, dword [ecx + 0x24]
mov dword [ebp - 0x1988], edx
mov eax, dword [ebp - 0x764]
mov ecx, dword [ebp - 0x324]
add ecx, dword [eax + 0x1c]
mov dword [ebp - 0x1d10], ecx
mov dword [ebp - 0x768], 0
jmp 0x406000
mov edx, dword [ebp - 0x768]
add edx, 1
mov dword [ebp - 0x768], edx
mov eax, dword [ebp - 0x764]
mov ecx, dword [ebp - 0x768]
cmp ecx, dword [eax + 0x18]
jae 0x40620c
mov edx, dword [ebp - 0x768]
mov eax, dword [ebp - 0x1984]
mov ecx, dword [ebp - 0x324]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x76c], ecx
mov edx, dword [ebp - 0x768]
mov eax, dword [ebp - 0x1988]
movzx ecx, word [eax + edx*2]
mov edx, dword [ebp - 0x1d10]
mov eax, dword [ebp - 0x324]
add eax, dword [edx + ecx*4]
mov dword [ebp - 0x198c], eax
mov dword [ebp - 0x19c], 0
jmp 0x406070
mov ecx, dword [ebp - 0x19c]
add ecx, 1
mov dword [ebp - 0x19c], ecx
mov edx, dword [ebp - 0x76c]
add edx, dword [ebp - 0x19c]
movsx eax, byte [edx]
test eax, eax
je 0x406122
mov ecx, dword [ebp - 0x19c]
movsx edx, byte [ebp + ecx - 0x878]
test edx, edx
je 0x406122
push ecx
push ecx
add esp, 4
add ecx, 0x91b8
sub ecx, 0xbd73
pop ecx
push edx
jmp 0x4060b9
jmp 0x4060bf
call 0x4060cb
add byte [0x4b47473e], bh
aas
add esp, 4
pop edx
mov eax, dword [ebp - 0x76c]
add eax, dword [ebp - 0x19c]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x19c]
movsx eax, byte [ebp + edx - 0x878]
cmp ecx, eax
je 0x406114
mov ecx, dword [ebp - 0x76c]
add ecx, dword [ebp - 0x19c]
movsx edx, byte [ecx]
xor edx, 0x20
mov eax, dword [ebp - 0x19c]
movsx ecx, byte [ebp + eax - 0x878]
cmp edx, ecx
jne 0x40611b
jmp 0x406061
jmp 0x406122
push edx
add edx, 0xef85
add edx, 0x7758
pop edx
push edi
push edi
add esp, 4
sub edi, 0xd340
sub edi, 0x7b65
add edi, 0x506
pop edi
push edi
push ebx
add esp, 4
sub edi, 0x8e42
pop edi
mov edx, dword [ebp - 0x76c]
add edx, dword [ebp - 0x19c]
movsx eax, byte [edx]
mov ecx, dword [ebp - 0x19c]
movsx edx, byte [ebp + ecx - 0x878]
cmp eax, edx
jne 0x406181
mov dword [ebp - 0xcb8], 0
jmp 0x4061f0
push edx
push ecx
add esp, 4
xor edx, 0xae34
pop edx
push ebx
push edi
add esp, 4
sub ebx, 0x14865
sub ebx, 0x1816
sub ebx, 0x1862c
pop ebx
push esi
or esi, 0x9806
and esi, 0x14dd4
pop esi
mov eax, dword [ebp - 0x76c]
add eax, dword [ebp - 0x19c]
movsx ecx, byte [eax]
or ecx, 0x20
mov edx, dword [ebp - 0x19c]
movsx eax, byte [ebp + edx - 0x878]
or eax, 0x20
cmp ecx, eax
jge 0x4061e6
mov dword [ebp - 0xcb8], 0xffffffff
jmp 0x4061f0
mov dword [ebp - 0xcb8], 1
cmp dword [ebp - 0xcb8], 0
jne 0x406207
mov ecx, dword [ebp - 0x198c]
mov dword [ebp - 0x510], ecx
jmp 0x406218
jmp 0x405ff1
mov edx, dword [ebp - 0x770]
mov dword [ebp - 0x510], edx
mov eax, dword [ebp - 0x510]
mov dword [ebp - 0x79c], eax
push esi
or esi, 0xb7c9
call 0x40623b
add byte [edi + esi + 0x3c], al
cmp eax, dword [esi + 0x44]
inc esi
inc esi
inc ebx
cmp eax, dword [ebx + 0x535e04c4]
jmp 0x406247
pop ebx
push esi
and esi, 0xcc9a
sub esi, 0x7388
pop esi
mov ecx, dword [ebp - 0x3e8]
add ecx, 0xe
mov dword [ebp - 0x19dc], ecx
push ebx
sub ebx, 0xeab
and ebx, 0x16109
sub ebx, 0x5473
pop ebx
push ecx
xor ecx, 0x15981
call 0x40628d
add byte [ebx + 0x32], al
push eax
dec ebx
cmp edi, dword [eax]
add esp, 4
xor ecx, 0x12640
pop ecx
cmp dword [ebp - 0x3e8], 0
je 0x4062a9
cmp dword [ebp - 0xab8], 0
jne 0x4062ef
push esi
sub esi, 0xe1b0
jmp 0x4062b8
add esi, 0x6789
pop esi
push ebx
or ebx, 0x6a1
or ebx, 0x59bb
jmp 0x4062d4
xor ebx, 0x11591
pop ebx
mov edx, dword [ebp - 0x79c]
mov dword [ebp - 0x1990], edx
push 0
call dword [ebp - 0x1990]
mov dword [ebp - 0x20a8], 0xa
push edi
push esi
add esp, 4
sub edi, 0x15c9a
call 0x406313
add byte [edi + 0x4b], cl
xor ecx, dword ds:[edx + 0x37]
dec esi
xor al, 0x47
add esp, 4
or edi, 0x12f71
xor edi, 0xd5aa
pop edi
push ebx
add ebx, 0x137e8
pop ebx
mov eax, dword [ebp - 0x3e8]
mov cl, byte [eax + 0xa]
mov byte [ebp - 0x3ae], cl
mov edx, dword [ebp - 0xab8]
sub edx, dword [ebp - 0x3e8]
mov dword [ebp - 0x1694], edx
mov dword [ebp - 0xce8], 0
push ebx
jmp 0x40635d
pop ebx
push ecx
and ecx, 0xaaf2
call 0x406372
add byte [ebx + 0x48], cl
cmp al, 0x33
xor dh, byte [esi]
inc eax
add esp, 4
pop ecx
push edi
push esi
add esp, 4
or edi, 0x14868
and edi, 0xf99a
pop edi
mov byte [ebp - 0x9d4], 0x56
mov byte [ebp - 0x9d3], 0x69
mov byte [ebp - 0x9d2], 0x72
mov byte [ebp - 0x9d1], 0x74
mov byte [ebp - 0x9d0], 0x75
mov byte [ebp - 0x9cf], 0x61
mov byte [ebp - 0x9ce], 0x6c
mov byte [ebp - 0x9cd], 0x50
mov byte [ebp - 0x9cc], 0x72
mov byte [ebp - 0x9cb], 0x6f
mov byte [ebp - 0x9ca], 0x74
mov byte [ebp - 0x9c9], 0x65
mov byte [ebp - 0x9c8], 0x63
mov byte [ebp - 0x9c7], 0x74
mov byte [ebp - 0x9c6], 0
push eax
push eax
add esp, 4
and eax, 0x185a8
pop eax
push edi
push edx
add esp, 4
call 0x406411
add byte [ebx], bh
cmp eax, dword [esi + 0x49]
xor eax, 0x3d393233
add esp, 4
jmp 0x40641c
xor edi, 0xcafe
pop edi
mov eax, dword fs:[0x18]
mov dword [ebp - 0x1994], eax
mov ecx, dword [ebp - 0x1994]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0x1998], edx
mov eax, dword [ebp - 0x1998]
mov dword [ebp - 0x1614], eax
push eax
call 0x40645b
add byte [esp + eax*2], bh
xor edi, dword [eax]
cmp dh, byte [0x49414242]
add esp, 4
jmp 0x406464
sub eax, 0xd25b
call 0x406478
add byte [ecx + 0x43], al
inc esi
dec ecx
dec esp
inc edi
dec edi
dec ecx
add esp, 4
pop eax
cmp dword [ebp - 0x1614], 0
jne 0x406494
mov dword [ebp - 0x2fc], 0
jmp 0x40673b
mov ecx, dword [ebp - 0x1614]
mov edx, dword [ecx + 0xc]
mov eax, dword [edx + 0xc]
mov dword [ebp - 0xcc4], eax
push eax
push edi
add esp, 4
add eax, 0xac49
pop eax
push ecx
add ecx, 0x24b2
sub ecx, 0x1833
or ecx, 0x16472
pop ecx
push ecx
jmp 0x4064cc
and ecx, 0x154f8
jmp 0x4064d7
pop ecx
cmp dword [ebp - 0xcc4], 0
jne 0x4064f0
mov dword [ebp - 0x2fc], 0
jmp 0x40673b
mov ecx, dword [ebp - 0xcc4]
mov dword [ebp - 0x514], ecx
push edi
push eax
add esp, 4
sub edi, 0x14a05
and edi, 0x768e
call 0x40651a
add byte [ebx], bh
cmp dword [edx + 0x3d], ecx
xor eax, 0xc4833336
add al, 0x5f
push edi
jmp 0x406527
add edi, 0x4447
pop edi
lea edx, [ebp - 0x1738]
mov dword [ebp - 0xcc0], edx
mov eax, dword [ebp - 0x514]
mov ecx, dword [eax + 0x30]
mov dword [ebp - 0xcbc], ecx
xor edx, edx
mov word [ebp - 0x21c], dx
xor eax, eax
mov word [ebp - 0x38], ax
push edi
jmp 0x406562
and edi, 0x73a5
call 0x406578
add byte [edi + eax*2 + 0x4f], al
xor eax, 0x41333750
inc esp
dec esp
add esp, 4
sub edi, 0x1683b
pop edi
push eax
and eax, 0xa10a
pop eax
mov ecx, dword [ebp - 0xcbc]
mov dx, word [ecx]
mov word [ebp - 0x103e], dx
mov eax, dword [ebp - 0xcbc]
add eax, 2
mov dword [ebp - 0xcbc], eax
mov cx, word [ebp - 0x103e]
mov word [ebp - 0x21c], cx
mov edx, dword [ebp - 0xcc0]
mov ax, word [edx]
mov word [ebp - 0x1040], ax
mov ecx, dword [ebp - 0xcc0]
add ecx, 2
mov dword [ebp - 0xcc0], ecx
mov dx, word [ebp - 0x1040]
mov word [ebp - 0x38], dx
push esi
call 0x4065f0
add byte [0x434c383a], dh
aas
aaa
add esp, 4
jmp 0x4065fb
pop esi
push ecx
and ecx, 0xb7e6
xor ecx, 0x5850
jmp 0x406612
pop ecx
movzx eax, word [ebp - 0x38]
test eax, eax
jne 0x406630
movzx ecx, word [ebp - 0x21c]
movzx edx, word [ebp - 0x38]
sub ecx, edx
mov dword [ebp - 0x161c], ecx
jmp 0x40668a
movzx eax, word [ebp - 0x21c]
movzx ecx, word [ebp - 0x38]
cmp eax, ecx
je 0x406558
movzx edx, word [ebp - 0x21c]
xor edx, 0x20
movzx eax, word [ebp - 0x38]
cmp edx, eax
je 0x406558
movzx ecx, word [ebp - 0x21c]
movzx edx, word [ebp - 0x38]
cmp ecx, edx
jge 0x406674
mov dword [ebp - 0x1618], 0xffffffff
jmp 0x40667e
mov dword [ebp - 0x1618], 1
mov eax, dword [ebp - 0x1618]
mov dword [ebp - 0x161c], eax
cmp dword [ebp - 0x161c], 0
jne 0x4066d3
push esi
sub esi, 0x14f63
and esi, 0x153b5
or esi, 0x1219b
add esi, 0x116dd
pop esi
push esi
push eax
add esp, 4
xor esi, 0x12f04
add esi, 0x600c
add esi, 0x179c5
pop esi
mov ecx, dword [ebp - 0x514]
mov dword [ebp - 0x2fc], ecx
jmp 0x40673b
push edi
jmp 0x4066dc
pop edi
push eax
or eax, 0x157b4
add eax, 0x17378
xor eax, 0x11881
pop eax
push edx
xor edx, 0xb9ce
or edx, 0xefa0
or edx, 0x14cad
pop edx
mov edx, dword [ebp - 0x514]
mov eax, dword [edx]
mov dword [ebp - 0x514], eax
mov ecx, dword [ebp - 0x514]
cmp ecx, dword [ebp - 0xcc4]
je 0x406731
mov edx, dword [ebp - 0x514]
cmp dword [edx + 0x30], 0
jne 0x4064fc
mov dword [ebp - 0x2fc], 0
push ecx
push esi
add esp, 4
sub ecx, 0xd585
sub ecx, 0xf28a
call 0x40675b
add byte [edi], dh
dec eax
inc ecx
xor al, 0x50
dec eax
dec edx
push eax
aas
add esp, 4
pop ecx
push eax
add eax, 0x15c81
sub eax, 0x5780
pop eax
cmp dword [ebp - 0x2fc], 0
jne 0x407072
mov eax, 0x6b
mov word [ebp - 0x1790], ax
mov ecx, 0x65
mov word [ebp - 0x178e], cx
mov edx, 0x72
mov word [ebp - 0x178c], dx
mov eax, 0x6e
mov word [ebp - 0x178a], ax
mov ecx, 0x65
mov word [ebp - 0x1788], cx
mov edx, 0x6c
mov word [ebp - 0x1786], dx
mov eax, 0x33
mov word [ebp - 0x1784], ax
mov ecx, 0x32
mov word [ebp - 0x1782], cx
mov edx, 0x2e
mov word [ebp - 0x1780], dx
mov eax, 0x64
mov word [ebp - 0x177e], ax
mov ecx, 0x6c
mov word [ebp - 0x177c], cx
mov edx, 0x6c
mov word [ebp - 0x177a], dx
xor eax, eax
mov word [ebp - 0x1778], ax
push esi
jmp 0x40681b
xor esi, 0xcaf6
pop esi
push eax
jmp 0x406828
xor eax, 0x174e2
pop eax
push ebx
push ebx
add esp, 4
call 0x406841
add byte [edi], dh
inc ecx
dec edx
inc esp
add esp, 4
pop ebx
mov byte [ebp - 0x8a4], 0x4c
mov byte [ebp - 0x8a3], 0x6f
mov byte [ebp - 0x8a2], 0x61
mov byte [ebp - 0x8a1], 0x64
mov byte [ebp - 0x8a0], 0x4c
mov byte [ebp - 0x89f], 0x69
mov byte [ebp - 0x89e], 0x62
mov byte [ebp - 0x89d], 0x72
mov byte [ebp - 0x89c], 0x61
mov byte [ebp - 0x89b], 0x72
mov byte [ebp - 0x89a], 0x79
mov byte [ebp - 0x899], 0x57
mov byte [ebp - 0x898], 0
mov ecx, dword fs:[0x18]
mov dword [ebp - 0x199c], ecx
mov edx, dword [ebp - 0x199c]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x19a0], eax
mov ecx, dword [ebp - 0x19a0]
mov dword [ebp - 0x1620], ecx
push edi
push eax
add esp, 4
sub edi, 0xa4d
add edi, 0x15991
or edi, 0x14d91
pop edi
push edx
add edx, 0x14aff
sub edx, 0x12de5
pop edx
push ebx
push ecx
add esp, 4
xor ebx, 0x17be6
pop ebx
cmp dword [ebp - 0x1620], 0
jne 0x406912
mov dword [ebp - 0x774], 0
jmp 0x406bb9
mov edx, dword [ebp - 0x1620]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0xcd0], ecx
push ecx
push ecx
add esp, 4
and ecx, 0xad86
add ecx, 0x946a
and ecx, 0xe4b3
sub ecx, 0xccb8
pop ecx
push ebx
or ebx, 0x137a9
pop ebx
push ecx
push ecx
add esp, 4
xor ecx, 0x1972
pop ecx
cmp dword [ebp - 0xcd0], 0
jne 0x40696e
mov dword [ebp - 0x774], 0
jmp 0x406bb9
mov edx, dword [ebp - 0xcd0]
mov dword [ebp - 0x518], edx
push eax
push ebx
add esp, 4
sub eax, 0x8e33
xor eax, 0xe822
and eax, 0x7a0e
pop eax
push ecx
push ebx
add esp, 4
xor ecx, 0x7671
and ecx, 0xd344
pop ecx
push esi
and esi, 0x446f
pop esi
lea eax, [ebp - 0x1790]
mov dword [ebp - 0xccc], eax
mov ecx, dword [ebp - 0x518]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0xcc8], edx
xor eax, eax
mov word [ebp - 0x220], ax
xor ecx, ecx
mov word [ebp - 0x3c], cx
push edi
push ebx
add esp, 4
call 0x4069ea
add byte [edx + 0x3a], al
dec eax
dec esp
xor eax, 0x3f41443e
add esp, 4
pop edi
push ebx
xor ebx, 0x16909
add ebx, 0x14ff2
pop ebx
push edx
push esi
add esp, 4
add edx, 0x1854b
pop edx
mov edx, dword [ebp - 0xcc8]
mov ax, word [edx]
mov word [ebp - 0x1042], ax
mov ecx, dword [ebp - 0xcc8]
add ecx, 2
mov dword [ebp - 0xcc8], ecx
mov dx, word [ebp - 0x1042]
mov word [ebp - 0x220], dx
mov eax, dword [ebp - 0xccc]
mov cx, word [eax]
mov word [ebp - 0x1044], cx
mov edx, dword [ebp - 0xccc]
add edx, 2
mov dword [ebp - 0xccc], edx
mov ax, word [ebp - 0x1044]
mov word [ebp - 0x3c], ax
push eax
xor eax, 0x13b8
jmp 0x406a6c
and eax, 0x4842
pop eax
push eax
push ebx
add esp, 4
add eax, 0x121c5
and eax, 0x16d8c
xor eax, 0x3046
or eax, 0x2da1
pop eax
movzx ecx, word [ebp - 0x3c]
test ecx, ecx
jne 0x406aae
movzx edx, word [ebp - 0x220]
movzx eax, word [ebp - 0x3c]
sub edx, eax
mov dword [ebp - 0x1668], edx
jmp 0x406b08
movzx ecx, word [ebp - 0x220]
movzx edx, word [ebp - 0x3c]
cmp ecx, edx
je 0x4069d6
movzx eax, word [ebp - 0x220]
xor eax, 0x20
movzx ecx, word [ebp - 0x3c]
cmp eax, ecx
je 0x4069d6
movzx edx, word [ebp - 0x220]
movzx eax, word [ebp - 0x3c]
cmp edx, eax
jge 0x406af2
mov dword [ebp - 0x1624], 0xffffffff
jmp 0x406afc
mov dword [ebp - 0x1624], 1
mov ecx, dword [ebp - 0x1624]
mov dword [ebp - 0x1668], ecx
cmp dword [ebp - 0x1668], 0
jne 0x406b51
push edx
and edx, 0x2515
call 0x406b28
add byte [esi], dh
inc ebx
xor eax, dword [edi + 0x46]
dec eax
cmp al, 0x44
xor al, 0x33
add esp, 4
jmp 0x406b34
pop edx
push ebx
or ebx, 0x42df
sub ebx, 0x5643
pop ebx
mov edx, dword [ebp - 0x518]
mov dword [ebp - 0x774], edx
jmp 0x406bb9
push edx
and edx, 0x8ab8
add edx, 0x175e2
jmp 0x406b63
add edx, 0x15aee
pop edx
push esi
push edx
add esp, 4
and esi, 0xc45
add esi, 0x9d51
jmp 0x406b82
pop esi
mov eax, dword [ebp - 0x518]
mov ecx, dword [eax]
mov dword [ebp - 0x518], ecx
mov edx, dword [ebp - 0x518]
cmp edx, dword [ebp - 0xcd0]
je 0x406baf
mov eax, dword [ebp - 0x518]
cmp dword [eax + 0x30], 0
jne 0x40697a
mov dword [ebp - 0x774], 0
push edx
or edx, 0x157ea
jmp 0x406bc9
call 0x406bd7
add byte [ebx], dh
inc ebx
xor al, byte [eax + 0x3e]
inc ecx
inc edi
dec esp
add esp, 4
call 0x406be7
add byte [edi + 0x35], al
xor cl, byte [edx + 0x4d]
cmp al, 0x40
add esp, 4
pop edx
cmp dword [ebp - 0x774], 0
jne 0x406c35
push ecx
or ecx, 0x6ff4
pop ecx
push esi
xor esi, 0x7eeb
call 0x406c13
add byte [edi + eax*2 + 0x3a], cl
inc esi
cmp byte [edi + 0x4f], al
cmp byte ss:[eax - 0x7d], al
les eax, [ecx + eax*4]
out 0x67, al
sub eax, 0x7eb0001
dec edi
push eax
dec edi
cmp al, 0x39
inc eax
push eax
pop esi
mov dword [ebp - 0xab4], 0
jmp 0x40775d
push esi
sub esi, 0x10779
sub esi, 0xb3af
xor esi, 0x1725e
pop esi
push esi
push edi
add esp, 4
sub esi, 0x6f7a
add esi, 0xe8de
sub esi, 0x2d08
add esi, 0x166d8
pop esi
mov ecx, dword [ebp - 0x774]
mov edx, dword [ecx + 0x18]
mov dword [ebp - 0x3a4], edx
mov dword [ebp - 0x784], 0
mov eax, dword [ebp - 0x3a4]
mov dword [ebp - 0x166c], eax
cmp dword [ebp - 0x166c], 0
jne 0x406ca6
mov ecx, dword [ebp - 0x784]
mov dword [ebp - 0x3f8], ecx
jmp 0x406f97
mov edx, dword [ebp - 0x166c]
mov eax, dword [ebp - 0x3a4]
add eax, dword [edx + 0x3c]
mov dword [ebp - 0x1670], eax
jne 0x406cce
mov ecx, dword [ebp - 0x784]
mov dword [ebp - 0x3f8], ecx
jmp 0x406f97
mov edx, 8
imul eax, edx, 0
mov ecx, dword [ebp - 0x1670]
mov edx, dword [ecx + eax + 0x78]
mov dword [ebp - 0x1678], edx
cmp dword [ebp - 0x1678], 0
jne 0x406d00
mov eax, dword [ebp - 0x784]
mov dword [ebp - 0x3f8], eax
jmp 0x406f97
mov ecx, dword [ebp - 0x3a4]
add ecx, dword [ebp - 0x1678]
mov dword [ebp - 0x778], ecx
jne 0x406d25
mov edx, dword [ebp - 0x784]
mov dword [ebp - 0x3f8], edx
jmp 0x406f97
mov eax, dword [ebp - 0x778]
mov ecx, dword [ebp - 0x3a4]
add ecx, dword [eax + 0x20]
mov dword [ebp - 0x19a4], ecx
mov edx, dword [ebp - 0x778]
mov eax, dword [ebp - 0x3a4]
add eax, dword [edx + 0x24]
mov dword [ebp - 0x19a8], eax
mov ecx, dword [ebp - 0x778]
mov edx, dword [ebp - 0x3a4]
add edx, dword [ecx + 0x1c]
mov dword [ebp - 0x19ac], edx
mov dword [ebp - 0x77c], 0
jmp 0x406d7f
mov eax, dword [ebp - 0x77c]
add eax, 1
mov dword [ebp - 0x77c], eax
mov ecx, dword [ebp - 0x778]
mov edx, dword [ebp - 0x77c]
cmp edx, dword [ecx + 0x18]
jae 0x406f8b
mov eax, dword [ebp - 0x77c]
mov ecx, dword [ebp - 0x19a4]
mov edx, dword [ebp - 0x3a4]
add edx, dword [ecx + eax*4]
mov dword [ebp - 0x780], edx
mov eax, dword [ebp - 0x77c]
mov ecx, dword [ebp - 0x19a8]
movzx edx, word [ecx + eax*2]
mov eax, dword [ebp - 0x19ac]
mov ecx, dword [ebp - 0x3a4]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x19b0], ecx
mov dword [ebp - 0x1a0], 0
jmp 0x406def
mov eax, dword [ebp - 0x780]
add eax, dword [ebp - 0x1a0]
movsx ecx, byte [eax]
test ecx, ecx
je 0x406ea1
mov edx, dword [ebp - 0x1a0]
movsx eax, byte [ebp + edx - 0x8a4]
test eax, eax
je 0x406ea1
push edx
call 0x406e2a
add byte [0x3d4e4341], bh
dec edi
cmp byte [ebx - 0x3d7efb3c], al
mov eax, dword [0xeb000173]
add al, 0x39
inc esi
cmp eax, 0x8356525a
les eax, [ecx + eax*4]
retf 0x27c3
push eax
push edx
add esp, 4
xor eax, 0xef4a
pop eax
push eax
jmp 0x406eb6
jmp 0x406ebe
sub eax, 0x314d
xor eax, 0xc8c3
pop eax
push edx
and edx, 0x872e
pop edx
mov eax, dword [ebp - 0x780]
add eax, dword [ebp - 0x1a0]
movsx ecx, byte [eax]
mov edx, dword [ebp - 0x1a0]
movsx eax, byte [ebp + edx - 0x8a4]
cmp ecx, eax
jne 0x406f00
mov dword [ebp - 0xcd4], 0
jmp 0x406f6f
push edx
sub edx, 0x1267f
pop edx
push edx
push eax
add esp, 4
xor edx, 0x724f
sub edx, 0xbf95
add edx, 0x6719
call 0x406f2e
add byte [edi], dh
dec edx
xor edi, dword [esi]
cmp byte [esi + 0x33], al
cmp al, 0x48
add esp, 4
pop edx
mov ecx, dword [ebp - 0x780]
add ecx, dword [ebp - 0x1a0]
movsx edx, byte [ecx]
or edx, 0x20
mov eax, dword [ebp - 0x1a0]
movsx ecx, byte [ebp + eax - 0x8a4]
or ecx, 0x20
cmp edx, ecx
jge 0x406f65
mov dword [ebp - 0xcd4], 0xffffffff
jmp 0x406f6f
mov dword [ebp - 0xcd4], 1
cmp dword [ebp - 0xcd4], 0
jne 0x406f86
mov edx, dword [ebp - 0x19b0]
mov dword [ebp - 0x3f8], edx
jmp 0x406f97
jmp 0x406d70
mov eax, dword [ebp - 0x784]
mov dword [ebp - 0x3f8], eax
cmp dword [ebp - 0x3f8], 0
je 0x407072
push ecx
and ecx, 0x2ac6
add ecx, 0x8548
jmp 0x406fba
pop ecx
push edi
xor edi, 0xd9fa
call 0x406fd2
add byte [edx + edi + 0x46], cl
inc eax
cmp byte [edx], dh
cmp ecx, dword [edx + 0x34]
inc edi
add esp, 4
pop edi
mov ecx, dword [ebp - 0x3f8]
mov dword [ebp - 0x19b4], ecx
push esi
sub esi, 0x11088
call 0x406ff6
add byte [esi + 0x32], cl
xor eax, 0x4e42433f
add esp, 4
or esi, 0x144c6
pop esi
push edi
push edx
add esp, 4
jmp 0x40700b
pop edi
push esi
or esi, 0x116ce
pop esi
mov edx, dword [ebp - 0x19b4]
mov dword [ebp - 0x19b8], edx
lea eax, [ebp - 0x1738]
push eax
call dword [ebp - 0x19b8]
test eax, eax
jne 0x407072
push edi
xor edi, 0xe962
xor edi, 0x570
sub edi, 0x11d3
jmp 0x40704a
pop edi
push ecx
and ecx, 0xadc6
pop ecx
push ecx
or ecx, 0x300b
pop ecx
push ebx
or ebx, 0x119e9
add dword [eax], eax
pop ebx
mov dword [ebp - 0xab4], 0
jmp 0x40775d
push edi
add edi, 0x1856c
and edi, 0x3326
xor edi, 0x9ee6
pop edi
push ebx
push ecx
add esp, 4
or ebx, 0x8800
pop ebx
push ebx
push esi
add esp, 4
and ebx, 0x113f7
sub ebx, 0x6130
pop ebx
mov ecx, dword fs:[0x18]
mov dword [ebp - 0x19bc], ecx
mov edx, dword [ebp - 0x19bc]
mov eax, dword [edx + 0x30]
mov dword [ebp - 0x19c0], eax
mov ecx, dword [ebp - 0x19c0]
mov dword [ebp - 0x167c], ecx
push ebx
push ebx
add esp, 4
call 0x4070dd
add byte [edx], bh
xor eax, dword [edx + 0x36]
cmp eax, 0x4c48337
and ebx, 0x1320b
jmp 0x4070ec
call 0x4070fa
add byte [ebp + 0x4f], cl
cmp dword [esi + 0x4e], eax
xor edi, dword [edi]
inc ecx
add esp, 4
pop ebx
cmp dword [ebp - 0x167c], 0
jne 0x407116
mov dword [ebp - 0x2fc], 0
jmp 0x4073bd
mov edx, dword [ebp - 0x167c]
mov eax, dword [edx + 0xc]
mov ecx, dword [eax + 0xc]
mov dword [ebp - 0xce0], ecx
push edi
push esi
add esp, 4
add edi, 0xfdb8
or edi, 0xdd82
pop edi
push edx
call 0x40714a
add byte [esi + 0x40], cl
push eax
cmp al, 0x3c
inc ebp
inc ecx
dec ebx
xor al, byte [ebx + 0x525a04c4]
push esi
add esp, 4
add edx, 0xa1fb
pop edx
cmp dword [ebp - 0xce0], 0
jne 0x407172
mov dword [ebp - 0x2fc], 0
jmp 0x4073bd
mov edx, dword [ebp - 0xce0]
mov dword [ebp - 0x51c], edx
push ebx
push edi
add esp, 4
jmp 0x40718c
and ebx, 0xb5cf
pop ebx
push ecx
xor ecx, 0x3135
call 0x4071a6
add byte [edi + 0x35], cl
dec ebp
cmp dword [eax + 0x37], eax
add esp, 4
sub ecx, 0x243
pop ecx
lea eax, [ebp - 0x1738]
mov dword [ebp - 0xcdc], eax
mov ecx, dword [ebp - 0x51c]
mov edx, dword [ecx + 0x30]
mov dword [ebp - 0xcd8], edx
xor eax, eax
mov word [ebp - 0x224], ax
xor ecx, ecx
mov word [ebp - 0x40], cx
push ecx
push esi
add esp, 4
sub ecx, 0x6367
and ecx, 0xb84c
pop ecx
push edi
and edi, 0xd77f
and edi, 0x3766
or edi, 0x590c
pop edi
push esi
push edi
add esp, 4
and esi, 0x124d2
pop esi
mov edx, dword [ebp - 0xcd8]
mov ax, word [edx]
mov word [ebp - 0x1046], ax
mov ecx, dword [ebp - 0xcd8]
add ecx, 2
mov dword [ebp - 0xcd8], ecx
mov dx, word [ebp - 0x1046]
mov word [ebp - 0x224], dx
mov eax, dword [ebp - 0xcdc]
mov cx, word [eax]
mov word [ebp - 0x1048], cx
mov edx, dword [ebp - 0xcdc]
add edx, 2
mov dword [ebp - 0xcdc], edx
mov ax, word [ebp - 0x1048]
mov word [ebp - 0x40], ax
push edi
add edi, 0x145b1
add edi, 0x11a0a
xor edi, 0x7a56
add edi, 0x27fc
pop edi
push edi
push edx
add esp, 4
call 0x407291
add byte [edx], bh
xor ecx, dword [edi + 0x39]
inc esp
inc edi
cmp al, 0x4b
add esp, 4
pop edi
movzx ecx, word [ebp - 0x40]
test ecx, ecx
jne 0x4072b2
movzx edx, word [ebp - 0x224]
movzx eax, word [ebp - 0x40]
sub edx, eax
mov dword [ebp - 0x1684], edx
jmp 0x40730c
movzx ecx, word [ebp - 0x224]
movzx edx, word [ebp - 0x40]
cmp ecx, edx
je 0x4071da
movzx eax, word [ebp - 0x224]
xor eax, 0x20
movzx ecx, word [ebp - 0x40]
cmp eax, ecx
je 0x4071da
movzx edx, word [ebp - 0x224]
movzx eax, word [ebp - 0x40]
cmp edx, eax
jge 0x4072f6
mov dword [ebp - 0x1680], 0xffffffff
jmp 0x407300
mov dword [ebp - 0x1680], 1
mov ecx, dword [ebp - 0x1680]
mov dword [ebp - 0x1684], ecx
cmp dword [ebp - 0x1684], 0
jne 0x407355
push ebx
sub ebx, 0x106e
sub ebx, 0xeb70
sub ebx, 0x16742
add ebx, 0xf28a
pop ebx
push eax
push ecx
add esp, 4
call 0x407343
add byte [edx + 0x33], cl
inc ebp
push eax
inc esp
inc esi
xor edi, dword [ecx]
cmp al, byte [ebx - 0x74a7fb3c]
xchg ebp, eax
in al, 0xfa
invalid
push ecx
push ebx
add esp, 4
xor ecx, 0x14d93
pop ecx
push eax
push edx
add esp, 4
or eax, 0x14099
and eax, 0xac70
pop eax
push edi
xor edi, 0x7fa6
or edi, 0x17d6e
and edi, 0x17a01
pop edi
mov eax, dword [ebp - 0x51c]
mov ecx, dword [eax]
mov dword [ebp - 0x51c], ecx
mov edx, dword [ebp - 0x51c]
cmp edx, dword [ebp - 0xce0]
je 0x4073b3
mov eax, dword [ebp - 0x51c]
cmp dword [eax + 0x30], 0
jne 0x40717e
mov dword [ebp - 0x2fc], 0
push ecx
push ebx
add esp, 4
call 0x4073cf
add byte [edi], dh
xor bh, byte [eax]
dec ebx
push eax
dec ebp
inc esp
add esp, 4
and ecx, 0x1568b
call 0x4073e5
add byte [eax], bh
xor al, 0x4b
aaa
aas
dec edi
push eax
add esp, 4
or ecx, 0x11ce2
pop ecx
mov ecx, dword [ebp - 0x2fc]
mov edx, dword [ecx + 0x18]
mov dword [ebp - 0x338], edx
push edx
or edx, 0x455c
call 0x407412
add byte [ebx + 0x45], al
dec edx
dec esi
dec ebp
dec ebx
inc ebx
add esp, 4
sub edx, 0xa245
pop edx
push ebx
and ebx, 0xa6c0
add ebx, 0x5d97
and ebx, 0xc1fd
pop ebx
mov dword [ebp - 0x794], 0
mov eax, dword [ebp - 0x338]
mov dword [ebp - 0x1688], eax
cmp dword [ebp - 0x1688], 0
jne 0x407460
mov ecx, dword [ebp - 0x794]
mov dword [ebp - 0x520], ecx
jmp 0x407751
mov edx, dword [ebp - 0x1688]
mov eax, dword [ebp - 0x338]
add eax, dword [edx + 0x3c]
mov dword [ebp - 0x168c], eax
jne 0x407488
mov ecx, dword [ebp - 0x794]
mov dword [ebp - 0x520], ecx
jmp 0x407751
mov edx, 8
imul eax, edx, 0
mov ecx, dword [ebp - 0x168c]
mov edx, dword [ecx + eax + 0x78]
mov dword [ebp - 0x1690], edx
cmp dword [ebp - 0x1690], 0
jne 0x4074ba
mov eax, dword [ebp - 0x794]
mov dword [ebp - 0x520], eax
jmp 0x407751
mov ecx, dword [ebp - 0x338]
add ecx, dword [ebp - 0x1690]
mov dword [ebp - 0x788], ecx
jne 0x4074df
mov edx, dword [ebp - 0x794]
mov dword [ebp - 0x520], edx
jmp 0x407751
mov eax, dword [ebp - 0x788]
mov ecx, dword [ebp - 0x338]
add ecx, dword [eax + 0x20]
mov dword [ebp - 0x19c4], ecx
mov edx, dword [ebp - 0x788]
mov eax, dword [ebp - 0x338]
add eax, dword [edx + 0x24]
mov dword [ebp - 0x19c8], eax
mov ecx, dword [ebp - 0x788]
mov edx, dword [ebp - 0x338]
add edx, dword [ecx + 0x1c]
mov dword [ebp - 0x19cc], edx
mov dword [ebp - 0x78c], 0
jmp 0x407539
mov ecx, dword [ebp - 0x788]
mov edx, dword [ebp - 0x78c]
cmp edx, dword [ecx + 0x18]
jae 0x407745
mov eax, dword [ebp - 0x78c]
mov ecx, dword [ebp - 0x19c4]
mov edx, dword [ebp - 0x338]
add edx, dword [ecx + eax*4]
mov dword [ebp - 0x790], edx
mov eax, dword [ebp - 0x78c]
mov ecx, dword [ebp - 0x19c8]
movzx edx, word [ecx + eax*2]
mov eax, dword [ebp - 0x19cc]
mov ecx, dword [ebp - 0x338]
add ecx, dword [eax + edx*4]
mov dword [ebp - 0x19d0], ecx
mov dword [ebp - 0x1a4], 0
jmp 0x4075a9
mov edx, dword [ebp - 0x1a4]
add edx, 1
mov dword [ebp - 0x1a4], edx
mov eax, dword [ebp - 0x790]
add eax, dword [ebp - 0x1a4]
movsx ecx, byte [eax]
test ecx, ecx
je 0x40765b
mov edx, dword [ebp - 0x1a4]
movsx eax, byte [ebp + edx - 0x9d4]
test eax, eax
je 0x40765b
push edi
sub edi, 0x75bc
call 0x4075ec
add byte [ebx + edi + 0x4e], cl
inc ecx
cmp dh, byte [edx]
dec ebx
xor al, byte ds:[ebx + 0xae804c4]
add byte [eax], al
add byte [eax], al
dec eax
xor eax, 0x4148333e
aaa
dec edx
xor eax, dword [ebx - 0x187efb3c]
scasb al, byte es:[edi]
inc edx
add dword [eax], eax
pop edi
mov ecx, dword [ebp - 0x790]
add ecx, dword [ebp - 0x1a4]
movsx edx, byte [ecx]
mov eax, dword [ebp - 0x1a4]
movsx ecx, byte [ebp + eax - 0x9d4]
cmp edx, ecx
je 0x40764d
mov edx, dword [ebp - 0x790]
add edx, dword [ebp - 0x1a4]
movsx eax, byte [edx]
xor eax, 0x20
mov ecx, dword [ebp - 0x1a4]
movsx edx, byte [ebp + ecx - 0x9d4]
cmp eax, edx
jne 0x407654
jmp 0x40759a
jmp 0x40765b
push edi
add edi, 0x1bf4
pop edi
push ebx
push ebx
add esp, 4
and ebx, 0xff5c
and ebx, 0x28f1
call 0x407683
add byte [eax + 0x3f], cl
cmp eax, 0x3b3d4f4e
aas
xor al, 0x83
les eax, [ecx + eax*4]
ret
mov eax, dword [ebp - 0x794]
mov dword [ebp - 0x520], eax
mov ecx, dword [ebp - 0x520]
mov dword [ebp - 0xab4], ecx
push edi
push eax
add esp, 4
and edi, 0xc949
or edi, 0x2489
pop edi
push edx
push edx
add esp, 4
and edx, 0xf51
jmp 0x407782
xor edx, 0x8cf
add edx, 0x2366
pop edx
mov edx, dword [ebp - 0xab4]
mov dword [ebp - 0x19d4], edx
lea eax, [ebp - 0xce8]
push eax
push 0x40
mov ecx, dword [ebp - 0x1694]
push ecx
mov edx, dword [ebp - 0x3e8]
push edx
call dword [ebp - 0x19d4]
test eax, eax
jne 0x407802
push ecx
push esi
add esp, 4
jmp 0x4077c7
xor ecx, 0x116fa
jmp 0x4077d3
sub ecx, 0xf18c
pop ecx
push ecx
add ecx, 0xec7c
xor ecx, 0x2570
or ecx, 0xd476
pop ecx
mov eax, dword [ebp - 0x79c]
mov dword [ebp - 0x19d8], eax
push 0
call dword [ebp - 0x19d8]
mov ecx, dword [ebp - 0x19dc]
mov dword [ebp - 0x798], ecx
jmp 0x40781f
mov edx, dword [ebp - 0x798]
add edx, 1
mov dword [ebp - 0x798], edx
mov eax, dword [ebp - 0x798]
cmp eax, dword [ebp - 0xab8]
jae 0x40787b
push ebx
and ebx, 0xd0cc
and ebx, 0x4a31
xor ebx, 0xf5f5
pop ebx
push ebx
push ecx
add esp, 4
xor ebx, 0x3142
add ebx, 0xda49
and ebx, 0x10db2
or ebx, 0x1783e
pop ebx
movzx ecx, byte [ebp - 0x3ae]
mov edx, dword [ebp - 0x798]
movsx eax, byte [edx]
sub eax, ecx
mov ecx, dword [ebp - 0x798]
mov byte [ecx], al
jmp 0x407810
mov edx, dword [ebp - 0xab4]
mov dword [ebp - 0x19e0], edx
lea eax, [ebp - 0xce8]
push eax
mov ecx, dword [ebp - 0xce8]
push ecx
mov edx, dword [ebp - 0x1694]
push edx
mov eax, dword [ebp - 0x3e8]
push eax
call dword [ebp - 0x19e0]
test eax, eax
jne 0x4078f3
push edi
and edi, 0xa255
sub edi, 0x18dc
xor edi, 0xc217
pop edi
push ebx
push eax
add esp, 4
xor ebx, 0x15af3
and ebx, 0xe472
sub ebx, 0x47fb
or ebx, 0x9818
pop ebx
mov ecx, dword [ebp - 0x79c]
mov dword [ebp - 0x19e4], ecx
push 0
call dword [ebp - 0x19e4]
push ecx
sub ecx, 0x7c5b
add ecx, 0x66f5
pop ecx
push edi
push edi
add esp, 4
or edi, 0x19ed
jmp 0x407911
sub edi, 0x4d40
pop edi
push eax
push ecx
add esp, 4
jmp 0x407924
pop eax
push edx
mov ecx, 0x10101010
pop edx
push ecx
mov ecx, 0xffff07ff
pop ecx
pop ebp
pop edx
mov cl, bl
or ecx, dword [eax + 0x7c487d5]
pop es
pop esi
or ecx, dword [ebp + 0x3a]
dec ecx
push esp
mov dh, dh
mov al, byte [edx - 0x3177f8f9]
add dword [ebp + 8], esp
pop es
pop dx
push edi
mov cl, bl
or ecx, dword [eax + 0x70ee4ea]
pop es
mov dl, ch
stosb byte es:[edi], al
push ds
pop es
pop es
invalid