Function at 0x4067a0
Capabilities:
Contain obfuscated stackstrings
Parse pe header

Disassembly:
push ebp
mov ebp, esp
sub esp, 0x9b4
mov eax, dword [0x42e008]
xor eax, ebp
mov dword [ebp - 4], eax
push ebx
push esi
push edi
push 0x47
push 0x2bdbdf4e
mov edx, 0x18
xor ecx, ecx
call fcn.00405270
add esp, 8
push 0
push 0
call eax
mov esi, eax
test esi, esi
js 0x406b76
mov dword [ebp - 0x874], 0x13c380
mov ebx, 3
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
mov eax, dword [ebp - 0x874]
lea edi, [ebx + 2]
test edx, edx
je 0x406858
add eax, 2
add eax, esi
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000003
jns 0x406820
dec eax
or eax, 0xfffffffc
add eax, 1
jne 0x40698a
nop word [eax + eax]
mov eax, dword [ebp - 0x874]
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000003
jns 0x406851
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x406830
jmp 0x40698a
and eax, 0x80000001
jns 0x406866
dec eax
or eax, 0xfffffffe
add eax, 1
je 0x4068af
mov eax, 2
sub eax, esi
add eax, dword [ebp - 0x874]
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
jne 0x40698a
nop dword [eax]
mov eax, dword [ebp - 0x874]
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
je 0x406890
jmp 0x40698a
mov eax, dword [ebp - 0x874]
and eax, 0x80000003
jns 0x4068c3
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x406929
mov ecx, dword [ebp - 0x874]
lea eax, [esi + 3]
add ecx, 2
imul ecx, eax
mov dword [ebp - 0x874], ecx
mov eax, dword [ebp - 0x874]
and eax, 0x80000001
jns 0x4068ee
dec eax
or eax, 0xfffffffe
add eax, 1
jne 0x40698a
mov eax, dword [ebp - 0x874]
cdq
idiv edi
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x40690a
dec eax
jmp 0x40690b
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000001
jns 0x406925
dec eax
or eax, 0xfffffffe
add eax, 1
je 0x4068f4
jmp 0x40698a
mov eax, dword [ebp - 0x874]
cdq
idiv edi
test edx, edx
je 0x40698a
mov eax, dword [ebp - 0x874]
lea ecx, [esi + 0x17]
add eax, 0xb
cdq
idiv ecx
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
jne 0x40698a
nop dword [eax + eax]
mov eax, dword [ebp - 0x874]
cdq
idiv edi
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x406976
inc eax
jmp 0x406977
dec eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
je 0x406960
push 0x46
push 0xcc12507f
mov edx, 0x18
xor ecx, ecx
call fcn.00405270
add esp, 8
push 0
push 0
push 0
push 3
push 0
push 0
push 0
push 0xffffffffffffffff
push 0
call eax
mov esi, eax
mov dword [ebp - 0x874], 0x13c380
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x406a28
add eax, 2
add eax, esi
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000003
jns 0x4069f2
dec eax
or eax, 0xfffffffc
add eax, 1
jne 0x406b5a
nop dword [eax + eax]
mov eax, dword [ebp - 0x874]
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000003
jns 0x406a21
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x406a00
jmp 0x406b5a
and eax, 0x80000001
jns 0x406a36
dec eax
or eax, 0xfffffffe
add eax, 1
je 0x406a7f
mov eax, 2
sub eax, esi
add eax, dword [ebp - 0x874]
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
jne 0x406b5a
nop dword [eax]
mov eax, dword [ebp - 0x874]
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
je 0x406a60
jmp 0x406b5a
mov eax, dword [ebp - 0x874]
and eax, 0x80000003
jns 0x406a93
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x406af9
mov ecx, dword [ebp - 0x874]
lea eax, [esi + 3]
add ecx, 2
imul ecx, eax
mov dword [ebp - 0x874], ecx
mov eax, dword [ebp - 0x874]
and eax, 0x80000001
jns 0x406abe
dec eax
or eax, 0xfffffffe
add eax, 1
jne 0x406b5a
mov eax, dword [ebp - 0x874]
cdq
idiv edi
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x406ada
dec eax
jmp 0x406adb
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000001
jns 0x406af5
dec eax
or eax, 0xfffffffe
add eax, 1
je 0x406ac4
jmp 0x406b5a
mov eax, dword [ebp - 0x874]
cdq
idiv edi
test edx, edx
je 0x406b5a
mov eax, dword [ebp - 0x874]
lea ecx, [esi + 0x17]
add eax, 0xb
cdq
idiv ecx
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
jne 0x406b5a
nop dword [eax + eax]
mov eax, dword [ebp - 0x874]
cdq
idiv edi
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x406b46
inc eax
jmp 0x406b47
dec eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
je 0x406b30
xor ecx, ecx
mov edx, 0x18
test esi, esi
jns 0x406b89
push 0x43
push 0xd3a7a468
call fcn.00405270
add esp, 8
call eax
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0041c1b4
mov esp, ebp
pop ebp
ret
push 0x44
push 0xb32feeec
mov dword [ebp - 0x84c], 0
call fcn.00405270
add esp, 8
lea ecx, [ebp - 0x84c]
push ecx
push 0x428218
push 1
push 0
push 0x4281f8
call eax
mov dword [ebp - 0x874], 0x13c380
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
je 0x406c29
mov ecx, dword [ebp - 0x874]
mov eax, dword [ebp - 0x84c]
add eax, 2
add eax, ecx
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000003
jns 0x406bfb
dec eax
or eax, 0xfffffffc
add eax, 1
jne 0x406d6a
mov eax, dword [ebp - 0x874]
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000003
jns 0x406c22
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x406c01
jmp 0x406d6a
mov eax, dword [ebp - 0x874]
and eax, 0x80000001
jns 0x406c3d
dec eax
or eax, 0xfffffffe
add eax, 1
mov eax, dword [ebp - 0x874]
je 0x406c8f
mov ecx, 2
sub ecx, dword [ebp - 0x84c]
add eax, ecx
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
jne 0x406d6a
nop dword [eax]
mov eax, dword [ebp - 0x874]
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
je 0x406c70
jmp 0x406d6a
and eax, 0x80000003
jns 0x406c9d
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x406d09
mov ecx, dword [ebp - 0x874]
mov eax, dword [ebp - 0x84c]
add ecx, 2
add eax, 3
imul eax, ecx
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000001
jns 0x406cce
dec eax
or eax, 0xfffffffe
add eax, 1
jne 0x406d6a
mov eax, dword [ebp - 0x874]
cdq
idiv edi
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x406cea
dec eax
jmp 0x406ceb
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000001
jns 0x406d05
dec eax
or eax, 0xfffffffe
add eax, 1
je 0x406cd4
jmp 0x406d6a
mov eax, dword [ebp - 0x874]
cdq
idiv edi
test edx, edx
je 0x406d6a
mov eax, dword [ebp - 0x874]
mov ecx, dword [ebp - 0x84c]
add eax, 0xb
cdq
add ecx, 0x17
idiv ecx
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
jne 0x406d6a
nop
mov eax, dword [ebp - 0x874]
cdq
idiv edi
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x406d56
inc eax
jmp 0x406d57
dec eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
je 0x406d40
push 0x13
push 0xdf1af05e
mov edx, 0xf
mov dword [ebp - 0x85c], 0
xor ecx, ecx
call fcn.00405270
add esp, 8
lea ecx, [ebp - 0x844]
push ecx
call eax
mov dword [ebp - 0x874], 0x13c380
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
je 0x406e08
mov ecx, dword [ebp - 0x874]
mov eax, dword [ebp - 0x834]
add eax, 2
add eax, ecx
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000003
jns 0x406dd5
dec eax
or eax, 0xfffffffc
add eax, 1
jne 0x406f4a
nop dword [eax + eax]
mov eax, dword [ebp - 0x874]
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000003
jns 0x406e01
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x406de0
jmp 0x406f4a
mov eax, dword [ebp - 0x874]
and eax, 0x80000001
jns 0x406e1c
dec eax
or eax, 0xfffffffe
add eax, 1
mov eax, dword [ebp - 0x874]
je 0x406e6f
mov ecx, 2
sub ecx, dword [ebp - 0x834]
add eax, ecx
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
jne 0x406f4a
nop dword [eax + eax]
mov eax, dword [ebp - 0x874]
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
je 0x406e50
jmp 0x406f4a
and eax, 0x80000003
jns 0x406e7d
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x406ee9
mov ecx, dword [ebp - 0x874]
mov eax, dword [ebp - 0x834]
add ecx, 2
add eax, 3
imul eax, ecx
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000001
jns 0x406eae
dec eax
or eax, 0xfffffffe
add eax, 1
jne 0x406f4a
mov eax, dword [ebp - 0x874]
cdq
idiv edi
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x406eca
dec eax
jmp 0x406ecb
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000001
jns 0x406ee5
dec eax
or eax, 0xfffffffe
add eax, 1
je 0x406eb4
jmp 0x406f4a
mov eax, dword [ebp - 0x874]
cdq
idiv edi
test edx, edx
je 0x406f4a
mov eax, dword [ebp - 0x874]
mov ecx, dword [ebp - 0x834]
add eax, 0xb
cdq
add ecx, 0x17
idiv ecx
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
jne 0x406f4a
nop
mov eax, dword [ebp - 0x874]
cdq
idiv edi
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x406f36
inc eax
jmp 0x406f37
dec eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
je 0x406f20
cmp word [ebp - 0x844], 9
jne 0x4074b1
push 0x44
push 0xb32feeec
mov edx, 0x18
xor ecx, ecx
call fcn.00405270
add esp, 8
lea ecx, [ebp - 0x85c]
push ecx
push 0x428228
push 1
push 0
push 0x428208
call eax
mov esi, eax
test esi, esi
js 0x407956
mov dword [ebp - 0x874], 0x13c380
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x406ff9
add eax, 2
add eax, esi
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000003
jns 0x406fcb
dec eax
or eax, 0xfffffffc
add eax, 1
jne 0x40712a
mov eax, dword [ebp - 0x874]
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000003
jns 0x406ff2
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x406fd1
jmp 0x40712a
and eax, 0x80000001
jns 0x407007
dec eax
or eax, 0xfffffffe
add eax, 1
je 0x40704f
mov eax, 2
sub eax, esi
add eax, dword [ebp - 0x874]
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
jne 0x40712a
nop dword [eax]
mov eax, dword [ebp - 0x874]
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
je 0x407030
jmp 0x40712a
mov eax, dword [ebp - 0x874]
and eax, 0x80000003
jns 0x407063
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x4070c9
mov ecx, dword [ebp - 0x874]
lea eax, [esi + 3]
add ecx, 2
imul ecx, eax
mov dword [ebp - 0x874], ecx
mov eax, dword [ebp - 0x874]
and eax, 0x80000001
jns 0x40708e
dec eax
or eax, 0xfffffffe
add eax, 1
jne 0x40712a
mov eax, dword [ebp - 0x874]
cdq
idiv edi
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x4070aa
dec eax
jmp 0x4070ab
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000001
jns 0x4070c5
dec eax
or eax, 0xfffffffe
add eax, 1
je 0x407094
jmp 0x40712a
mov eax, dword [ebp - 0x874]
cdq
idiv edi
test edx, edx
je 0x40712a
mov eax, dword [ebp - 0x874]
lea ecx, [esi + 0x17]
add eax, 0xb
cdq
idiv ecx
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
jne 0x40712a
nop dword [eax + eax]
mov eax, dword [ebp - 0x874]
cdq
idiv edi
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x407116
inc eax
jmp 0x407117
dec eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
je 0x407100
mov byte [ebp - 0x8d0], 0
lea ecx, [ebp - 0x8d0]
mov byte [ebp - 0x8cf], 0x3a
mov byte [ebp - 0x8ce], 0x2b
mov byte [ebp - 0x8cd], 0x3a
mov byte [ebp - 0x8cc], 0x2b
mov byte [ebp - 0x8cb], 0x45
mov byte [ebp - 0x8ca], 0x2b
mov byte [ebp - 0x8c9], 0x3d
mov byte [ebp - 0x8c8], 0x2b
mov byte [ebp - 0x8c7], 0x72
mov byte [ebp - 0x8c6], 0x2b
mov byte [ebp - 0x8c5], 0x4b
mov byte [ebp - 0x8c4], 0x2b
mov byte [ebp - 0x8c3], 0x5d
mov byte [ebp - 0x8c2], 0x2b
mov byte [ebp - 0x8c1], 0xc
mov byte [ebp - 0x8c0], 0x2b
mov byte [ebp - 0x8bf], 0x4f
mov byte [ebp - 0x8be], 0x2b
mov byte [ebp - 0x8bd], 0x3d
mov byte [ebp - 0x8bc], 0x2b
mov byte [ebp - 0x8bb], 0x50
mov byte [ebp - 0x8ba], 0x2b
mov byte [ebp - 0x8b9], 0x3d
mov byte [ebp - 0x8b8], 0x2b
mov byte [ebp - 0x8b7], 0x48
mov byte [ebp - 0x8b6], 0x2b
mov byte [ebp - 0x8b5], 0x1a
mov byte [ebp - 0x8b4], 0x2b
mov byte [ebp - 0x8b3], 0x5d
mov byte [ebp - 0x8b2], 0x2b
mov byte [ebp - 0x8b1], 0x44
mov byte [ebp - 0x8b0], 0x2b
mov byte [ebp - 0x8af], 0x4f
mov byte [ebp - 0x8ae], 0x2b
mov byte [ebp - 0x8ad], 0x48
mov byte [ebp - 0x8ac], 0x2b
mov byte [ebp - 0x8ab], 0x44
mov byte [ebp - 0x8aa], 0x2b
mov byte [ebp - 0x8a9], 8
mov byte [ebp - 0x8a8], 0x2b
mov byte [ebp - 0x8a7], 0x3d
mov byte [ebp - 0x8a6], 0x2b
mov byte [ebp - 0x8a5], 0x4f
mov byte [ebp - 0x8a4], 0x2b
mov byte [ebp - 0x8a3], 0x2b
mov byte [ebp - 0x8a2], 0x2b
mov al, byte [ebp - 0x8cf]
call fcn.00414980
push 0x5b
push 0xe6bc0210
mov edx, 0x19
xor ecx, ecx
mov esi, eax
call fcn.00405270
add esp, 8
push esi
call eax
push 0x5c
push 0x5243a16a
mov edx, 0x19
xor ecx, ecx
mov esi, eax
call fcn.00405270
add esp, 8
lea ecx, [ebp - 0x820]
push ecx
call eax
mov eax, dword [ebp - 0x85c]
lea edx, [ebp - 0x820]
push edx
push 0
mov word [ebp - 0x820], bx
mov dword [ebp - 0x818], 0x40
mov ecx, dword [eax]
push esi
push eax
call dword [ecx + 0x20]
mov esi, eax
mov dword [ebp - 0x874], 0x13c380
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x407358
add eax, 2
add eax, esi
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000003
jns 0x407325
dec eax
or eax, 0xfffffffc
add eax, 1
jne 0x40748a
nop dword [eax + eax]
mov eax, dword [ebp - 0x874]
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000003
jns 0x407351
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x407330
jmp 0x40748a
and eax, 0x80000001
jns 0x407366
dec eax
or eax, 0xfffffffe
add eax, 1
je 0x4073af
mov eax, 2
sub eax, esi
add eax, dword [ebp - 0x874]
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
jne 0x40748a
nop dword [eax]
mov eax, dword [ebp - 0x874]
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
je 0x407390
jmp 0x40748a
mov eax, dword [ebp - 0x874]
and eax, 0x80000003
jns 0x4073c3
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x407429
mov ecx, dword [ebp - 0x874]
lea eax, [esi + 3]
add ecx, 2
imul ecx, eax
mov dword [ebp - 0x874], ecx
mov eax, dword [ebp - 0x874]
and eax, 0x80000001
jns 0x4073ee
dec eax
or eax, 0xfffffffe
add eax, 1
jne 0x40748a
mov eax, dword [ebp - 0x874]
cdq
idiv edi
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x40740a
dec eax
jmp 0x40740b
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000001
jns 0x407425
dec eax
or eax, 0xfffffffe
add eax, 1
je 0x4073f4
jmp 0x40748a
mov eax, dword [ebp - 0x874]
cdq
idiv edi
test edx, edx
je 0x40748a
mov eax, dword [ebp - 0x874]
lea ecx, [esi + 0x17]
add eax, 0xb
cdq
idiv ecx
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
jne 0x40748a
nop dword [eax + eax]
mov eax, dword [ebp - 0x874]
cdq
idiv edi
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x407476
inc eax
jmp 0x407477
dec eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
je 0x407460
push 0x5d
push 0xeedec24b
mov edx, 0x19
xor ecx, ecx
call fcn.00405270
add esp, 8
lea ecx, [ebp - 0x820]
push ecx
call eax
test esi, esi
js 0x407956
mov dword [ebp - 0x848], 0
lea ecx, [ebp - 0x8a0]
mov byte [ebp - 0x8a0], 0
mov byte [ebp - 0x89f], 0x19
mov byte [ebp - 0x89e], 0x18
mov byte [ebp - 0x89d], 0x2a
mov byte [ebp - 0x89c], 0x18
mov byte [ebp - 0x89b], 0x2a
mov byte [ebp - 0x89a], 0x18
mov byte [ebp - 0x899], 0x38
mov byte [ebp - 0x898], 0x18
mov byte [ebp - 0x897], 0x35
mov byte [ebp - 0x896], 0x18
mov byte [ebp - 0x895], 0x6e
mov byte [ebp - 0x894], 0x18
mov byte [ebp - 0x893], 0x4c
mov byte [ebp - 0x892], 0x18
mov byte [ebp - 0x891], 0xb
mov byte [ebp - 0x890], 0x18
mov byte [ebp - 0x88f], 0x57
mov byte [ebp - 0x88e], 0x18
mov byte [ebp - 0x88d], 0x25
mov byte [ebp - 0x88c], 0x18
mov byte [ebp - 0x88b], 0x18
mov byte [ebp - 0x88a], 0x18
mov al, byte [ebp - 0x89f]
call fcn.00414920
push 0x5b
push 0xe6bc0210
mov edx, 0x19
xor ecx, ecx
mov esi, eax
call fcn.00405270
add esp, 8
push esi
call eax
mov ecx, dword [ebp - 0x84c]
lea esi, [ebp - 0x848]
push esi
push dword [ebp - 0x85c]
mov edx, dword [ecx]
push 0
push 0
push 0
push 0
push 0
push eax
push ecx
call dword [edx + 0xc]
mov esi, eax
mov dword [ebp - 0x874], 0x13c380
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
je 0x407628
mov ecx, dword [ebp - 0x874]
mov eax, dword [ebp - 0x848]
add eax, 2
add eax, ecx
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000003
jns 0x4075f0
dec eax
or eax, 0xfffffffc
add eax, 1
jne 0x40776a
nop word [eax + eax]
mov eax, dword [ebp - 0x874]
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000003
jns 0x407621
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x407600
jmp 0x40776a
mov eax, dword [ebp - 0x874]
and eax, 0x80000001
jns 0x40763c
dec eax
or eax, 0xfffffffe
add eax, 1
mov eax, dword [ebp - 0x874]
je 0x40768f
mov ecx, 2
sub ecx, dword [ebp - 0x848]
add eax, ecx
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
jne 0x40776a
nop dword [eax + eax]
mov eax, dword [ebp - 0x874]
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
je 0x407670
jmp 0x40776a
and eax, 0x80000003
jns 0x40769d
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x407709
mov ecx, dword [ebp - 0x874]
mov eax, dword [ebp - 0x848]
add ecx, 2
add eax, 3
imul eax, ecx
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000001
jns 0x4076ce
dec eax
or eax, 0xfffffffe
add eax, 1
jne 0x40776a
mov eax, dword [ebp - 0x874]
cdq
idiv edi
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x4076ea
dec eax
jmp 0x4076eb
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000001
jns 0x407705
dec eax
or eax, 0xfffffffe
add eax, 1
je 0x4076d4
jmp 0x40776a
mov eax, dword [ebp - 0x874]
cdq
idiv edi
test edx, edx
je 0x40776a
mov eax, dword [ebp - 0x874]
mov ecx, dword [ebp - 0x848]
add eax, 0xb
cdq
add ecx, 0x17
idiv ecx
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
jne 0x40776a
nop
mov eax, dword [ebp - 0x874]
cdq
idiv edi
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x407756
inc eax
jmp 0x407757
dec eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
je 0x407740
test esi, esi
js 0x40794a
mov esi, dword [ebp - 0x848]
mov edx, 0x18
push 0x45
push 0xde5dbfdc
xor ecx, ecx
call fcn.00405270
add esp, 8
push 0
push 0
push 3
push 3
push 0
push 0
push 0xa
push esi
call eax
mov esi, eax
mov dword [ebp - 0x874], 0x13c380
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x40780b
add eax, 2
add eax, esi
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000003
jns 0x4077dd
dec eax
or eax, 0xfffffffc
add eax, 1
jne 0x40793a
mov eax, dword [ebp - 0x874]
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000003
jns 0x407804
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x4077e3
jmp 0x40793a
and eax, 0x80000001
jns 0x407819
dec eax
or eax, 0xfffffffe
add eax, 1
je 0x40785f
mov eax, 2
sub eax, esi
add eax, dword [ebp - 0x874]
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
jne 0x40793a
nop
mov eax, dword [ebp - 0x874]
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
je 0x407840
jmp 0x40793a
mov eax, dword [ebp - 0x874]
and eax, 0x80000003
jns 0x407873
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x4078d9
mov ecx, dword [ebp - 0x874]
lea eax, [esi + 3]
add ecx, 2
imul ecx, eax
mov dword [ebp - 0x874], ecx
mov eax, dword [ebp - 0x874]
and eax, 0x80000001
jns 0x40789e
dec eax
or eax, 0xfffffffe
add eax, 1
jne 0x40793a
mov eax, dword [ebp - 0x874]
cdq
idiv edi
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x4078ba
dec eax
jmp 0x4078bb
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000001
jns 0x4078d5
dec eax
or eax, 0xfffffffe
add eax, 1
je 0x4078a4
jmp 0x40793a
mov eax, dword [ebp - 0x874]
cdq
idiv edi
test edx, edx
je 0x40793a
mov eax, dword [ebp - 0x874]
lea ecx, [esi + 0x17]
add eax, 0xb
cdq
idiv ecx
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
jne 0x40793a
nop dword [eax + eax]
mov eax, dword [ebp - 0x874]
cdq
idiv edi
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x407926
inc eax
jmp 0x407927
dec eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
je 0x407910
test esi, esi
jns 0x407981
mov eax, dword [ebp - 0x848]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x84c]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
push 0x43
push 0xd3a7a468
mov edx, 0x18
xor ecx, ecx
call fcn.00405270
add esp, 8
call eax
xor eax, eax
pop edi
pop esi
pop ebx
mov ecx, dword [ebp - 4]
xor ecx, ebp
call fcn.0041c1b4
mov esp, ebp
pop ebp
ret
mov byte [ebp - 0x888], 0
lea ecx, [ebp - 0x888]
mov byte [ebp - 0x887], 0x3a
mov byte [ebp - 0x886], 0x75
mov byte [ebp - 0x885], 0x77
mov byte [ebp - 0x884], 0x75
mov byte [ebp - 0x883], 0x40
mov byte [ebp - 0x882], 0x75
mov byte [ebp - 0x881], 0x75
mov byte [ebp - 0x880], 0x75
mov al, byte [ebp - 0x887]
call fcn.004148c0
push 0x5b
push 0xe6bc0210
mov edx, 0x19
xor ecx, ecx
mov esi, eax
call fcn.00405270
add esp, 8
push esi
call eax
mov byte [ebp - 0x910], 0
mov edi, eax
mov byte [ebp - 0x90f], 0x67
mov byte [ebp - 0x90e], 0x70
mov byte [ebp - 0x90d], 2
mov byte [ebp - 0x90c], 0x70
mov byte [ebp - 0x90b], 0x74
mov byte [ebp - 0x90a], 0x70
mov byte [ebp - 0x909], 2
mov byte [ebp - 0x908], 0x70
mov byte [ebp - 0x907], 0x2a
mov byte [ebp - 0x906], 0x70
mov byte [ebp - 0x905], 0x53
mov byte [ebp - 0x904], 0x70
mov byte [ebp - 0x903], 0x6b
mov byte [ebp - 0x902], 0x70
mov byte [ebp - 0x901], 0x22
mov byte [ebp - 0x900], 0x70
mov byte [ebp - 0x8ff], 0x6b
mov byte [ebp - 0x8fe], 0x70
mov byte [ebp - 0x8fd], 0x6d
mov byte [ebp - 0x8fc], 0x70
mov byte [ebp - 0x8fb], 0x7b
mov byte [ebp - 0x8fa], 0x70
mov byte [ebp - 0x8f9], 0x38
mov byte [ebp - 0x8f8], 0x70
mov byte [ebp - 0x8f7], 0x60
mov byte [ebp - 0x8f6], 0x70
mov byte [ebp - 0x8f5], 0x6b
mov byte [ebp - 0x8f4], 0x70
mov byte [ebp - 0x8f3], 0x17
mov byte [ebp - 0x8f2], 0x70
mov byte [ebp - 0x8f1], 0x2c
mov byte [ebp - 0x8f0], 0x70
mov byte [ebp - 0x8ef], 0x47
mov byte [ebp - 0x8ee], 0x70
mov byte [ebp - 0x8ed], 0x6c
mov byte [ebp - 0x8ec], 0x70
mov byte [ebp - 0x8eb], 1
mov byte [ebp - 0x8ea], 0x70
mov byte [ebp - 0x8e9], 0x75
mov byte [ebp - 0x8e8], 0x70
mov byte [ebp - 0x8e7], 0x67
mov byte [ebp - 0x8e6], 0x70
mov byte [ebp - 0x8e5], 0x40
mov byte [ebp - 0x8e4], 0x70
mov byte [ebp - 0x8e3], 0x4d
mov byte [ebp - 0x8e2], 0x70
mov byte [ebp - 0x8e1], 0x11
mov byte [ebp - 0x8e0], 0x70
mov byte [ebp - 0x8df], 0x33
mov byte [ebp - 0x8de], 0x70
mov byte [ebp - 0x8dd], 0x12
mov byte [ebp - 0x8dc], 0x70
mov byte [ebp - 0x8db], 0x2a
mov byte [ebp - 0x8da], 0x70
mov byte [ebp - 0x8d9], 0x33
mov byte [ebp - 0x8d8], 0x70
mov byte [ebp - 0x8d7], 0x1f
mov byte [ebp - 0x8d6], 0x70
mov byte [ebp - 0x8d5], 0x69
lea ecx, [ebp - 0x910]
mov byte [ebp - 0x8d4], 0x70
mov byte [ebp - 0x8d3], 0x70
mov byte [ebp - 0x8d2], 0x70
mov al, byte [ebp - 0x90f]
call fcn.00414880
push 0x5b
push 0xe6bc0210
mov edx, 0x19
xor ecx, ecx
mov esi, eax
call fcn.00405270
add esp, 8
push esi
call eax
mov ecx, dword [ebp - 0x848]
lea esi, [ebp - 0x854]
push esi
push 0
push 0x30
push eax
mov dword [ebp - 0x854], 0
mov edx, dword [ecx]
push edi
push ecx
call dword [edx + 0x50]
mov esi, eax
mov dword [ebp - 0x874], 0x13c380
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x407c87
add eax, 2
add eax, esi
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000003
jns 0x407c34
dec eax
or eax, 0xfffffffc
add eax, 1
jne 0x407c63
nop word [eax + eax]
mov eax, dword [ebp - 0x874]
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000003
jns 0x407c61
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x407c40
mov edi, 5
test esi, esi
jns 0x407dcf
mov eax, dword [ebp - 0x848]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x84c]
jmp 0x408c71
and eax, 0x80000001
jns 0x407c95
dec eax
or eax, 0xfffffffe
add eax, 1
je 0x407cdc
mov eax, 2
sub eax, esi
add eax, dword [ebp - 0x874]
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
jne 0x407c63
nop word [eax + eax]
mov eax, dword [ebp - 0x874]
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
je 0x407cc0
jmp 0x407c63
mov eax, dword [ebp - 0x874]
and eax, 0x80000003
jns 0x407cf0
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x407d5e
mov ecx, dword [ebp - 0x874]
lea eax, [esi + 3]
add ecx, 2
imul ecx, eax
mov dword [ebp - 0x874], ecx
mov eax, dword [ebp - 0x874]
and eax, 0x80000001
jns 0x407d1b
dec eax
or eax, 0xfffffffe
add eax, 1
mov edi, 5
jne 0x407c68
mov eax, dword [ebp - 0x874]
cdq
idiv edi
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x407d3c
dec eax
jmp 0x407d3d
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000001
jns 0x407d57
dec eax
or eax, 0xfffffffe
add eax, 1
je 0x407d26
jmp 0x407c68
mov eax, dword [ebp - 0x874]
mov edi, 5
cdq
idiv edi
test edx, edx
je 0x407c68
mov eax, dword [ebp - 0x874]
lea ecx, [esi + 0x17]
add eax, 0xb
cdq
idiv ecx
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
jne 0x407c68
nop word [eax + eax]
mov eax, dword [ebp - 0x874]
cdq
idiv edi
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x407db6
inc eax
jmp 0x407db7
dec eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
je 0x407da0
jmp 0x407c68
mov dword [ebp - 0x858], 0
mov dword [ebp - 0x80c], 0
mov dword [ebp - 0x874], 0x13c380
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
je 0x407e58
mov ecx, dword [ebp - 0x874]
mov eax, dword [ebp - 0x854]
add eax, 2
add eax, ecx
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000003
jns 0x407e25
dec eax
or eax, 0xfffffffc
add eax, 1
jne 0x407f9a
nop dword [eax + eax]
mov eax, dword [ebp - 0x874]
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000003
jns 0x407e51
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x407e30
jmp 0x407f9a
mov eax, dword [ebp - 0x874]
and eax, 0x80000001
jns 0x407e6c
dec eax
or eax, 0xfffffffe
add eax, 1
mov eax, dword [ebp - 0x874]
je 0x407ebf
mov ecx, 2
sub ecx, dword [ebp - 0x854]
add eax, ecx
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
jne 0x407f9a
nop dword [eax + eax]
mov eax, dword [ebp - 0x874]
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
je 0x407ea0
jmp 0x407f9a
and eax, 0x80000003
jns 0x407ecd
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x407f39
mov ecx, dword [ebp - 0x874]
mov eax, dword [ebp - 0x854]
add ecx, 2
add eax, 3
imul eax, ecx
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000001
jns 0x407efe
dec eax
or eax, 0xfffffffe
add eax, 1
jne 0x407f9a
mov eax, dword [ebp - 0x874]
cdq
idiv edi
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x407f1a
dec eax
jmp 0x407f1b
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000001
jns 0x407f35
dec eax
or eax, 0xfffffffe
add eax, 1
je 0x407f04
jmp 0x407f9a
mov eax, dword [ebp - 0x874]
cdq
idiv edi
test edx, edx
je 0x407f9a
mov eax, dword [ebp - 0x874]
mov ecx, dword [ebp - 0x854]
add eax, 0xb
cdq
add ecx, 0x17
idiv ecx
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
jne 0x407f9a
nop
mov eax, dword [ebp - 0x874]
cdq
idiv edi
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x407f86
inc eax
jmp 0x407f87
dec eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
je 0x407f70
mov ecx, dword [ebp - 0x854]
test ecx, ecx
je 0x408c43
mov edi, dword [sym.imp.USER32.dll_wsprintfW]
nop
mov eax, dword [ecx]
lea edx, [ebp - 0x80c]
push edx
lea edx, [ebp - 0x858]
push edx
push 1
push 0xffffffffffffffff
push ecx
call dword [eax + 0x10]
mov esi, eax
mov dword [ebp - 0x874], 0x13c380
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x408038
add eax, 2
add eax, esi
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000003
jns 0x408006
dec eax
or eax, 0xfffffffc
add eax, 1
jne 0x40817a
nop dword [eax]
mov eax, dword [ebp - 0x874]
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000003
jns 0x408031
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x408010
jmp 0x40817a
and eax, 0x80000001
jns 0x408046
dec eax
or eax, 0xfffffffe
add eax, 1
je 0x40808f
mov eax, 2
sub eax, esi
add eax, dword [ebp - 0x874]
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
jne 0x40817a
nop dword [eax]
mov eax, dword [ebp - 0x874]
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
je 0x408070
jmp 0x40817a
mov eax, dword [ebp - 0x874]
and eax, 0x80000003
jns 0x4080a3
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x408115
mov ecx, dword [ebp - 0x874]
lea eax, [esi + 3]
add ecx, 2
imul ecx, eax
mov dword [ebp - 0x874], ecx
mov eax, dword [ebp - 0x874]
and eax, 0x80000001
jns 0x4080ce
dec eax
or eax, 0xfffffffe
add eax, 1
jne 0x40817a
mov ecx, 5
nop dword [eax]
mov eax, dword [ebp - 0x874]
cdq
idiv ecx
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x4080f6
dec eax
jmp 0x4080f7
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000001
jns 0x408111
dec eax
or eax, 0xfffffffe
add eax, 1
je 0x4080e0
jmp 0x40817a
mov eax, dword [ebp - 0x874]
mov ecx, 5
cdq
idiv ecx
test edx, edx
je 0x40817a
mov eax, dword [ebp - 0x874]
lea ecx, [esi + 0x17]
add eax, 0xb
cdq
idiv ecx
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
jne 0x40817a
mov ecx, 5
nop
mov eax, dword [ebp - 0x874]
cdq
idiv ecx
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x408166
inc eax
jmp 0x408167
dec eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
je 0x408150
cmp dword [ebp - 0x80c], 0
je 0x408c43
mov byte [ebp - 0x87c], 0
lea ecx, [ebp - 0x87c]
mov byte [ebp - 0x87b], 0x46
mov byte [ebp - 0x87a], 0x33
mov byte [ebp - 0x879], 0x3c
mov byte [ebp - 0x878], 0x33
mov byte [ebp - 0x877], 0x33
mov byte [ebp - 0x876], 0x33
mov al, byte [ebp - 0x87b]
mov eax, dword [ebp - 0x858]
push 0
push 0
mov esi, dword [eax]
lea eax, [ebp - 0x870]
push eax
push 0
call fcn.00414820
push eax
push dword [ebp - 0x858]
call dword [esi + 0x10]
mov esi, eax
mov dword [ebp - 0x874], 0x13c380
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x408788
add eax, 2
add eax, esi
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000003
jns 0x40822a
dec eax
or eax, 0xfffffffc
add eax, 1
jne 0x408253
nop dword [eax]
mov eax, dword [ebp - 0x874]
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000003
jns 0x408251
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x408230
mov esi, 5
mov ecx, 0x800
lea eax, [ebp - 0x808]
mov byte [eax], 0
lea eax, [eax + 1]
sub ecx, 1
jne 0x408263
mov byte [ebp - 0x9b0], cl
mov byte [ebp - 0x9af], 0x29
mov byte [ebp - 0x9ae], 0x66
mov byte [ebp - 0x9ad], 0x5a
mov byte [ebp - 0x9ac], 0x66
mov byte [ebp - 0x9ab], 0x54
mov byte [ebp - 0x9aa], 0x66
mov byte [ebp - 0x9a9], 0x30
mov byte [ebp - 0x9a8], 0x66
mov byte [ebp - 0x9a7], cl
mov byte [ebp - 0x9a6], 0x66
mov byte [ebp - 0x9a5], 0x37
mov byte [ebp - 0x9a4], 0x66
mov byte [ebp - 0x9a3], cl
mov byte [ebp - 0x9a2], 0x66
mov byte [ebp - 0x9a1], 0x51
mov byte [ebp - 0x9a0], 0x66
mov byte [ebp - 0x99f], 0x5b
mov byte [ebp - 0x99e], 0x66
mov byte [ebp - 0x99d], 0x29
mov byte [ebp - 0x99c], 0x66
mov byte [ebp - 0x99b], 0x51
mov byte [ebp - 0x99a], 0x66
mov byte [ebp - 0x999], 0x3e
mov byte [ebp - 0x998], 0x66
mov byte [ebp - 0x997], 0x38
mov byte [ebp - 0x996], 0x66
mov byte [ebp - 0x995], 0x79
mov byte [ebp - 0x994], 0x66
mov byte [ebp - 0x993], 0x21
mov byte [ebp - 0x992], 0x66
mov byte [ebp - 0x991], 0x2d
mov byte [ebp - 0x990], 0x66
mov byte [ebp - 0x98f], 6
mov byte [ebp - 0x98e], 0x66
mov byte [ebp - 0x98d], 0x54
mov byte [ebp - 0x98c], 0x66
mov byte [ebp - 0x98b], 0x31
mov byte [ebp - 0x98a], 0x66
mov byte [ebp - 0x989], 0xc
mov byte [ebp - 0x988], 0x66
mov byte [ebp - 0x987], 0x5e
mov byte [ebp - 0x986], 0x66
mov byte [ebp - 0x985], 0x79
mov byte [ebp - 0x984], 0x66
mov byte [ebp - 0x983], 0x73
mov byte [ebp - 0x982], 0x66
mov byte [ebp - 0x981], 0x62
mov byte [ebp - 0x980], 0x66
mov byte [ebp - 0x97f], 0x5e
mov byte [ebp - 0x97e], 0x66
mov byte [ebp - 0x97d], 0xa
mov byte [ebp - 0x97c], 0x66
mov byte [ebp - 0x97b], cl
mov byte [ebp - 0x97a], 0x66
mov byte [ebp - 0x979], 0x5a
mov byte [ebp - 0x978], 0x66
mov byte [ebp - 0x977], 9
mov byte [ebp - 0x976], 0x66
mov byte [ebp - 0x975], 0x5d
mov byte [ebp - 0x974], 0x66
mov byte [ebp - 0x973], 0x79
mov byte [ebp - 0x972], 0x66
mov byte [ebp - 0x971], 0xc
mov byte [ebp - 0x970], 0x66
mov byte [ebp - 0x96f], 0x7d
mov byte [ebp - 0x96e], 0x66
mov byte [ebp - 0x96d], cl
mov byte [ebp - 0x96c], 0x66
mov byte [ebp - 0x96b], 0x5a
mov byte [ebp - 0x96a], 0x66
mov byte [ebp - 0x969], 0x79
mov byte [ebp - 0x968], 0x66
mov byte [ebp - 0x967], 0x21
mov byte [ebp - 0x966], 0x66
mov byte [ebp - 0x965], 0x6f
mov byte [ebp - 0x964], 0x66
mov byte [ebp - 0x963], 0x42
mov byte [ebp - 0x962], 0x66
mov byte [ebp - 0x961], 0x3e
mov byte [ebp - 0x960], 0x66
mov byte [ebp - 0x95f], 0x30
mov byte [ebp - 0x95e], 0x66
mov byte [ebp - 0x95d], cl
mov byte [ebp - 0x95c], 0x66
mov byte [ebp - 0x95b], 0x37
mov byte [ebp - 0x95a], 0x66
mov byte [ebp - 0x959], cl
mov byte [ebp - 0x958], 0x66
mov byte [ebp - 0x957], 0x51
mov byte [ebp - 0x956], 0x66
mov byte [ebp - 0x955], 0x5e
mov byte [ebp - 0x954], 0x66
mov byte [ebp - 0x953], 2
mov byte [ebp - 0x952], 0x66
mov byte [ebp - 0x951], 0x52
mov byte [ebp - 0x950], 0x66
mov byte [ebp - 0x94f], 0x54
mov byte [ebp - 0x94e], 0x66
mov byte [ebp - 0x94d], 0x31
mov byte [ebp - 0x94c], 0x66
mov byte [ebp - 0x94b], 0xc
mov byte [ebp - 0x94a], 0x66
mov byte [ebp - 0x949], 0x29
mov byte [ebp - 0x948], 0x66
mov byte [ebp - 0x947], 0x31
mov byte [ebp - 0x946], 0x66
mov byte [ebp - 0x945], 0x5c
mov byte [ebp - 0x944], 0x66
mov byte [ebp - 0x943], 0x62
mov byte [ebp - 0x942], 0x66
mov byte [ebp - 0x941], 0x51
mov byte [ebp - 0x940], 0x66
mov byte [ebp - 0x93f], 0xc
mov byte [ebp - 0x93e], 0x66
mov byte [ebp - 0x93d], 2
mov byte [ebp - 0x93c], 0x66
mov byte [ebp - 0x93b], cl
mov byte [ebp - 0x93a], 0x66
mov byte [ebp - 0x939], 0x33
mov byte [ebp - 0x938], 0x66
mov byte [ebp - 0x937], cl
mov byte [ebp - 0x936], 0x66
mov byte [ebp - 0x935], 0x51
mov byte [ebp - 0x934], 0x66
mov byte [ebp - 0x933], 0x28
mov byte [ebp - 0x932], 0x66
mov byte [ebp - 0x931], 0x42
mov byte [ebp - 0x930], 0x66
mov byte [ebp - 0x92f], 0x69
mov byte [ebp - 0x92e], 0x66
mov byte [ebp - 0x92d], 0x3a
mov byte [ebp - 0x92c], 0x66
mov byte [ebp - 0x92b], 1
mov byte [ebp - 0x92a], 0x66
mov byte [ebp - 0x929], 0x2a
mov byte [ebp - 0x928], 0x66
mov byte [ebp - 0x927], 0x5e
mov byte [ebp - 0x926], 0x66
mov byte [ebp - 0x925], 1
mov byte [ebp - 0x924], 0x66
mov byte [ebp - 0x923], 0x28
mov byte [ebp - 0x922], 0x66
mov byte [ebp - 0x921], 0x51
mov byte [ebp - 0x920], 0x66
mov byte [ebp - 0x91f], 0x54
mov byte [ebp - 0x91e], 0x66
mov byte [ebp - 0x91d], cl
mov byte [ebp - 0x91c], 0x66
mov byte [ebp - 0x91b], 0x2f
mov byte [ebp - 0x91a], 0x66
mov byte [ebp - 0x919], cl
mov byte [ebp - 0x918], 0x66
mov byte [ebp - 0x917], 0xa
mov byte [ebp - 0x916], 0x66
mov byte [ebp - 0x915], cl
lea ecx, [ebp - 0x9b0]
mov byte [ebp - 0x914], 0x66
mov byte [ebp - 0x913], 0x66
mov byte [ebp - 0x912], 0x66
mov al, byte [ebp - 0x9af]
push dword [ebp - 0x868]
call fcn.004147c0
push eax
lea eax, [ebp - 0x808]
push eax
call edi
add esp, 0xc
mov dword [ebp - 0x874], 0x140527
mov edx, 0xf
xor ecx, ecx
push 8
push 0x1972bf90
call fcn.00405270
add esp, 8
lea ecx, [ebp - 0x850]
push ecx
call eax
mov dword [ebp - 0x874], 0x13c380
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
je 0x4088db
mov ecx, dword [ebp - 0x874]
mov eax, dword [ebp - 0x850]
add eax, 2
add eax, ecx
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000003
jns 0x40874e
dec eax
or eax, 0xfffffffc
add eax, 1
jne 0x408a1a
nop dword [eax]
nop dword [eax + eax]
mov eax, dword [ebp - 0x874]
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000003
jns 0x408781
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x408760
jmp 0x408a1a
and eax, 0x80000001
jns 0x408796
dec eax
or eax, 0xfffffffe
add eax, 1
je 0x4087df
mov eax, 2
sub eax, esi
add eax, dword [ebp - 0x874]
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
jne 0x408253
nop dword [eax]
mov eax, dword [ebp - 0x874]
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
je 0x4087c0
jmp 0x408253
mov eax, dword [ebp - 0x874]
and eax, 0x80000003
jns 0x4087f3
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x408868
mov ecx, dword [ebp - 0x874]
lea eax, [esi + 3]
add ecx, 2
imul ecx, eax
mov dword [ebp - 0x874], ecx
mov eax, dword [ebp - 0x874]
and eax, 0x80000001
jns 0x40881e
dec eax
or eax, 0xfffffffe
add eax, 1
mov esi, 5
jne 0x408258
nop dword [eax]
mov eax, dword [ebp - 0x874]
cdq
idiv esi
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x408846
dec eax
jmp 0x408847
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000001
jns 0x408861
dec eax
or eax, 0xfffffffe
add eax, 1
je 0x408830
jmp 0x408258
mov eax, dword [ebp - 0x874]
mov ecx, 5
cdq
idiv ecx
test edx, edx
je 0x4088d4
mov eax, dword [ebp - 0x874]
lea ecx, [esi + 0x17]
add eax, 0xb
cdq
idiv ecx
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
jne 0x408253
mov esi, 5
mov eax, dword [ebp - 0x874]
cdq
idiv esi
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x4088bb
inc eax
jmp 0x4088bc
dec eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
je 0x4088a5
jmp 0x408258
mov esi, ecx
jmp 0x408258
mov eax, dword [ebp - 0x874]
and eax, 0x80000001
jns 0x4088ef
dec eax
or eax, 0xfffffffe
add eax, 1
mov eax, dword [ebp - 0x874]
je 0x40893f
mov ecx, 2
sub ecx, dword [ebp - 0x850]
add eax, ecx
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
jne 0x408a1a
nop dword [eax + eax]
mov eax, dword [ebp - 0x874]
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
je 0x408920
jmp 0x408a1a
and eax, 0x80000003
jns 0x40894d
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x4089b9
mov ecx, dword [ebp - 0x874]
mov eax, dword [ebp - 0x850]
add ecx, 2
add eax, 3
imul eax, ecx
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000001
jns 0x40897e
dec eax
or eax, 0xfffffffe
add eax, 1
jne 0x408a1a
mov eax, dword [ebp - 0x874]
cdq
idiv esi
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x40899a
dec eax
jmp 0x40899b
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000001
jns 0x4089b5
dec eax
or eax, 0xfffffffe
add eax, 1
je 0x408984
jmp 0x408a1a
mov eax, dword [ebp - 0x874]
cdq
idiv esi
test edx, edx
je 0x408a1a
mov eax, dword [ebp - 0x874]
mov ecx, dword [ebp - 0x850]
add eax, 0xb
cdq
add ecx, 0x17
idiv ecx
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
jne 0x408a1a
nop
mov eax, dword [ebp - 0x874]
cdq
idiv esi
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x408a06
inc eax
jmp 0x408a07
dec eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
je 0x4089f0
lea ecx, [ebp - 0x808]
call fcn.00405c10
mov esi, dword [ebp - 0x850]
mov edx, 0xf
push 0xf
push 0x78ee4dfa
xor ecx, ecx
call fcn.00405270
add esp, 8
push esi
call eax
mov dword [ebp - 0x874], 0x13c380
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
je 0x408ab8
mov ecx, dword [ebp - 0x874]
mov eax, dword [ebp - 0x850]
add eax, 2
add eax, ecx
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000003
jns 0x408a86
dec eax
or eax, 0xfffffffc
add eax, 1
jne 0x408c0a
nop dword [eax]
mov eax, dword [ebp - 0x874]
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000003
jns 0x408ab1
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x408a90
jmp 0x408c0a
mov eax, dword [ebp - 0x874]
and eax, 0x80000001
jns 0x408acc
dec eax
or eax, 0xfffffffe
add eax, 1
mov eax, dword [ebp - 0x874]
je 0x408b1f
mov ecx, 2
sub ecx, dword [ebp - 0x850]
add eax, ecx
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
jne 0x408c0a
nop dword [eax + eax]
mov eax, dword [ebp - 0x874]
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
je 0x408b00
jmp 0x408c0a
and eax, 0x80000003
jns 0x408b2d
dec eax
or eax, 0xfffffffc
add eax, 1
je 0x408ba5
mov ecx, dword [ebp - 0x874]
mov eax, dword [ebp - 0x850]
add ecx, 2
add eax, 3
imul eax, ecx
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000001
jns 0x408b5e
dec eax
or eax, 0xfffffffe
add eax, 1
jne 0x408c0a
mov esi, 5
nop dword [eax]
mov eax, dword [ebp - 0x874]
cdq
idiv esi
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x408b86
dec eax
jmp 0x408b87
inc eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
and eax, 0x80000001
jns 0x408ba1
dec eax
or eax, 0xfffffffe
add eax, 1
je 0x408b70
jmp 0x408c0a
mov eax, dword [ebp - 0x874]
mov esi, 5
cdq
idiv esi
test edx, edx
je 0x408c0a
mov eax, dword [ebp - 0x874]
mov ecx, dword [ebp - 0x850]
add eax, 0xb
cdq
add ecx, 0x17
idiv ecx
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
jne 0x408c0a
nop
mov eax, dword [ebp - 0x874]
cdq
idiv esi
mov eax, dword [ebp - 0x874]
test edx, edx
je 0x408bf6
inc eax
jmp 0x408bf7
dec eax
mov dword [ebp - 0x874], eax
mov eax, dword [ebp - 0x874]
cdq
idiv ebx
test edx, edx
je 0x408be0
push 0x5d
push 0xeedec24b
mov edx, 0x19
xor ecx, ecx
call fcn.00405270
add esp, 8
lea ecx, [ebp - 0x870]
push ecx
call eax
mov eax, dword [ebp - 0x858]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov ecx, dword [ebp - 0x854]
test ecx, ecx
jne 0x407fb0
mov ecx, dword [ebp - 0x85c]
test ecx, ecx
je 0x408c53
mov eax, dword [ecx]
push ecx
call dword [eax + 8]
mov eax, dword [ebp - 0x848]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x84c]
push eax
mov ecx, dword [eax]
call dword [ecx + 8]
mov eax, dword [ebp - 0x854]
mov ecx, dword [eax]
push eax
call dword [ecx + 8]
push 0x43
push 0xd3a7a468
mov edx, 0x18
xor ecx, ecx
call fcn.00405270
add esp, 8
call eax
mov ecx, dword [ebp - 4]
mov eax, 1
pop edi
pop esi
xor ecx, ebp
pop ebx
call fcn.0041c1b4
mov esp, ebp
pop ebp
ret